@konneal/engine 0.2.96 → 0.2.98

package/dist/ask-4G24T25V.js

@@ -0,0 +1,15 @@
+import {
+  handleAsk
+} from "./chunk-BIX3SMC7.js";
+import "./chunk-A3ELAHKF.js";
+import "./chunk-TXPWLKCI.js";
+import "./chunk-KNCRYAX3.js";
+import "./chunk-DTW4UW2E.js";
+import "./chunk-A3QHHUN5.js";
+import "./chunk-U4ERFUOK.js";
+import "./chunk-BOAITSVV.js";
+import "./chunk-JZFXSTYX.js";
+import "./chunk-3FYJM7LH.js";
+export {
+  handleAsk
+};

package/dist/{chunk-AJU6LMY3.js → chunk-A3ELAHKF.js}

@@ -3,13 +3,13 @@ import {
   hasLane,
   portIndex,
   portModelRunner
-} from "./chunk-LOBYXEVD.js";
+} from "./chunk-KNCRYAX3.js";
 import {
   standardKeysFrom
-} from "./chunk-LVZTWUVJ.js";
+} from "./chunk-U4ERFUOK.js";
 import {
   THRESHOLDS
-} from "./chunk-2PCUAJJO.js";
+} from "./chunk-BOAITSVV.js";
 import {
   P
 } from "./chunk-3FYJM7LH.js";

package/dist/{chunk-CX3OVN3V.js → chunk-BIX3SMC7.js}

@@ -18,7 +18,7 @@ import {
   tableRetyped,
   toolNote,
   verdictNote
-} from "./chunk-AJU6LMY3.js";
+} from "./chunk-A3ELAHKF.js";
 import {
   NO_CONTEXT,
   answerQuality,
@@ -56,20 +56,20 @@ import {
   tokenBudget,
   understandQuery,
   usageTotal
-} from "./chunk-PTCDEFI3.js";
+} from "./chunk-TXPWLKCI.js";
 import {
   embed,
   generateOnce,
   portModelRunner,
   portStore
-} from "./chunk-LOBYXEVD.js";
+} from "./chunk-KNCRYAX3.js";
 import {
   corsHeaders,
   err,
   json,
   readJson,
   validateQuery
-} from "./chunk-SPKPH54J.js";
+} from "./chunk-DTW4UW2E.js";
 import {
   canonicalRefusal,
   refusalAnswer
@@ -79,7 +79,7 @@ import {
   requestSalt,
   resolveRequestScope,
   standardKeysFrom
-} from "./chunk-LVZTWUVJ.js";
+} from "./chunk-U4ERFUOK.js";
 import {
   LIMITS,
   MODELS,
@@ -90,7 +90,7 @@ import {
   requestEffort,
   roleModel,
   sha256Hex
-} from "./chunk-2PCUAJJO.js";
+} from "./chunk-BOAITSVV.js";
 import {
   certificateLinks,
   registerNote,

package/dist/{chunk-2PCUAJJO.js → chunk-BOAITSVV.js}

@@ -65,6 +65,7 @@ var THRESHOLDS = {
    *  pool below the primary dense lane; they must earn their window
    *  slot under the cross-encoder, not by graph membership alone. */
   graphLaneDiscount: 0.75,
+  licensedLaneScore: 0.5,
   /** The entailment gate (TODO.new-era/10): the faithfulness scorer
    *  promoted from eval-only onto the serving path. The confidence line
    *  then states a measurement — claim support in the cited passages —

package/dist/{chunk-SPKPH54J.js → chunk-DTW4UW2E.js}

@@ -1,7 +1,7 @@
 import {
   LIMITS,
   sha256Hex
-} from "./chunk-2PCUAJJO.js";
+} from "./chunk-BOAITSVV.js";
 import {
   P
 } from "./chunk-3FYJM7LH.js";

package/dist/{chunk-ZLQMRQOV.js → chunk-GY33RTEO.js}

@@ -6,27 +6,27 @@ import {
   sessionFrom,
   telemetry,
   understandQuery
-} from "./chunk-PTCDEFI3.js";
+} from "./chunk-TXPWLKCI.js";
 import {
   portModelRunner
-} from "./chunk-LOBYXEVD.js";
+} from "./chunk-KNCRYAX3.js";
 import {
   corsHeaders,
   err,
   json,
   readJson,
   validateQuery
-} from "./chunk-SPKPH54J.js";
+} from "./chunk-DTW4UW2E.js";
 import {
   entitlementScope,
   standardKeysFrom
-} from "./chunk-LVZTWUVJ.js";
+} from "./chunk-U4ERFUOK.js";
 import {
   LIMITS,
   MODELS,
   num,
   sha256Hex
-} from "./chunk-2PCUAJJO.js";
+} from "./chunk-BOAITSVV.js";
 
 // workers/worker_public/src/search.ts
 async function handleSearch(env, ctx, req, tier, key) {

package/dist/{chunk-LOBYXEVD.js → chunk-KNCRYAX3.js}

@@ -1,7 +1,7 @@
 import {
   answerEffort,
   effortBudget
-} from "./chunk-2PCUAJJO.js";
+} from "./chunk-BOAITSVV.js";
 
 // workers/worker_public/src/ai.ts
 var delay = (ms) => new Promise((r) => setTimeout(r, ms));

package/dist/{chunk-PTCDEFI3.js → chunk-TXPWLKCI.js}

@@ -3,12 +3,13 @@ import {
   hasLane,
   portIndex,
   portModelRunner,
+  portStore,
   rerank
-} from "./chunk-LOBYXEVD.js";
+} from "./chunk-KNCRYAX3.js";
 import {
   bubbleConfirmPage,
   isAllowedBubbleOrigin
-} from "./chunk-SPKPH54J.js";
+} from "./chunk-DTW4UW2E.js";
 import {
   DATASETS,
   LIMITS,
@@ -18,7 +19,7 @@ import {
   processExpansion,
   sha256Hex,
   today
-} from "./chunk-2PCUAJJO.js";
+} from "./chunk-BOAITSVV.js";
 import {
   P
 } from "./chunk-3FYJM7LH.js";
@@ -22523,29 +22524,35 @@ var graphLane = {
 };
 
 // workers/worker_public/src/stages/licensedLane.ts
+var sha1Hex = async (s8) => {
+  const digest = await crypto.subtle.digest("SHA-1", new TextEncoder().encode(s8));
+  return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, "0")).join("");
+};
 var licensedLane = {
   name: "licensed-lane",
   failure: "additive",
-  when: (c) => !!c.opts.licensedDocNumbers?.length && c.vector.length > 0,
-  prefetch: (c) => {
-    c.lane["licensed-lane"] = portIndex(c.env, "public").query({
-      vector: c.vector,
-      topK: 12,
-      filter: { standard: { $in: c.opts.licensedDocNumbers } }
-    });
-  },
+  when: (c) => !!c.opts.licensedDocNumbers?.length,
   run: async (c) => {
-    const g = await c.lane["licensed-lane"];
+    const standards = c.opts.licensedDocNumbers;
+    const placeholders = standards.map((_, i) => `?${i + 1}`).join(",");
+    const rows = await portStore(c.env).prepare(`SELECT standard, node_id FROM model_nodes WHERE standard IN (${placeholders}) LIMIT 40`).bind(...standards).all().catch(() => ({ results: [] }));
+    const ids = await Promise.all(
+      (rows.results ?? []).map(
+        async (r) => "m" + (await sha1Hex(`${r.standard}|${r.node_id}`)).slice(0, 16)
+      )
+    );
+    if (!ids.length) return;
+    const matches = await portIndex(c.env, "public").getByIds(ids);
     const seenIds = new Set(c.matches.map((m) => m.id));
     let merged = 0;
-    for (const m of (g ?? []).slice(0, 10)) {
-      if (!seenIds.has(m.id)) {
-        c.matches.push({ id: m.id, score: m.score * THRESHOLDS.graphLaneDiscount, metadata: m.metadata });
+    for (const m of matches) {
+      if (m.metadata && !seenIds.has(m.id)) {
+        c.matches.push({ id: m.id, score: THRESHOLDS.licensedLaneScore, metadata: m.metadata });
         seenIds.add(m.id);
         merged++;
       }
     }
-    console.log("licensed lane:", g?.length ?? 0, "hits,", merged, "merged");
+    console.log("licensed lane:", ids.length, "units,", matches.length, "vectors,", merged, "merged");
   }
 };
 

package/dist/{chunk-LVZTWUVJ.js → chunk-U4ERFUOK.js}

@@ -1,7 +1,7 @@
 import {
   DATASETS,
   datasetAllowed
-} from "./chunk-2PCUAJJO.js";
+} from "./chunk-BOAITSVV.js";
 import {
   P
 } from "./chunk-3FYJM7LH.js";

package/dist/config.d.ts

@@ -37,6 +37,7 @@ export declare const THRESHOLDS: {
      *  pool below the primary dense lane; they must earn their window
      *  slot under the cross-encoder, not by graph membership alone. */
     readonly graphLaneDiscount: 0.75;
+    readonly licensedLaneScore: 0.5;
     /** The entailment gate (TODO.new-era/10): the faithfulness scorer
      *  promoted from eval-only onto the serving path. The confidence line
      *  then states a measurement — claim support in the cited passages —

package/dist/search-EQAOPFCC.js

@@ -0,0 +1,13 @@
+import {
+  handleSearch
+} from "./chunk-GY33RTEO.js";
+import "./chunk-TXPWLKCI.js";
+import "./chunk-KNCRYAX3.js";
+import "./chunk-DTW4UW2E.js";
+import "./chunk-A3QHHUN5.js";
+import "./chunk-U4ERFUOK.js";
+import "./chunk-BOAITSVV.js";
+import "./chunk-3FYJM7LH.js";
+export {
+  handleSearch
+};

package/dist/{tools-Z4HQH3QU.js → tools-YHEXFX6V.js}

@@ -4,10 +4,10 @@ import {
   parseToolCall,
   runTool,
   toolNote
-} from "./chunk-AJU6LMY3.js";
-import "./chunk-LOBYXEVD.js";
-import "./chunk-LVZTWUVJ.js";
-import "./chunk-2PCUAJJO.js";
+} from "./chunk-A3ELAHKF.js";
+import "./chunk-KNCRYAX3.js";
+import "./chunk-U4ERFUOK.js";
+import "./chunk-BOAITSVV.js";
 import "./chunk-3FYJM7LH.js";
 export {
   TOOLS_REGISTRY,

package/dist/worker_mcp/src/index.js

@@ -1,7 +1,7 @@
 import {
   authenticate
-} from "../../chunk-SPKPH54J.js";
-import "../../chunk-2PCUAJJO.js";
+} from "../../chunk-DTW4UW2E.js";
+import "../../chunk-BOAITSVV.js";
 import {
   P,
   setProfile

package/dist/worker_public/src/config.js

@@ -16,7 +16,7 @@ import {
   roleModel,
   sha256Hex,
   today
-} from "../../chunk-2PCUAJJO.js";
+} from "../../chunk-BOAITSVV.js";
 import "../../chunk-3FYJM7LH.js";
 export {
   DATASETS,

package/dist/worker_public/src/index.js

@@ -4,15 +4,15 @@ import {
   handleMemories,
   scoreFaithfulness,
   scoreJudge
-} from "../../chunk-CX3OVN3V.js";
+} from "../../chunk-BIX3SMC7.js";
 import {
   TOOLS_REGISTRY,
   bindModelNode,
   modelGroundingBlock
-} from "../../chunk-AJU6LMY3.js";
+} from "../../chunk-A3ELAHKF.js";
 import {
   handleSearch
-} from "../../chunk-ZLQMRQOV.js";
+} from "../../chunk-GY33RTEO.js";
 import {
   buildMessages,
   citations,
@@ -34,13 +34,13 @@ import {
   sessionFrom,
   telemetry,
   understandQuery
-} from "../../chunk-PTCDEFI3.js";
+} from "../../chunk-TXPWLKCI.js";
 import {
   cfBlobs,
   embed,
   generateOnce,
   portModelRunner
-} from "../../chunk-LOBYXEVD.js";
+} from "../../chunk-KNCRYAX3.js";
 import {
   authenticate,
   corsHeaders,
@@ -49,14 +49,14 @@ import {
   readJson,
   validateQuery,
   withCors
-} from "../../chunk-SPKPH54J.js";
+} from "../../chunk-DTW4UW2E.js";
 import {
   canonicalRefusal
 } from "../../chunk-A3QHHUN5.js";
 import {
   entitlementScope,
   standardKeysFrom
-} from "../../chunk-LVZTWUVJ.js";
+} from "../../chunk-U4ERFUOK.js";
 import {
   LIMITS,
   MODELS,
@@ -67,7 +67,7 @@ import {
   roleModel,
   sha256Hex,
   today
-} from "../../chunk-2PCUAJJO.js";
+} from "../../chunk-BOAITSVV.js";
 import "../../chunk-JZFXSTYX.js";
 import {
   P,
@@ -990,13 +990,13 @@ async function callToolOnce(env, ctx, _req, tier, key, name, args, t0) {
       // stream:false forces the JSON lane (anon defaults to SSE)
       body: JSON.stringify({ ...args, stream: false })
     });
-    const { runTool, TOOLS_REGISTRY: TOOLS_REGISTRY2 } = await import("../../tools-Z4HQH3QU.js");
+    const { runTool, TOOLS_REGISTRY: TOOLS_REGISTRY2 } = await import("../../tools-YHEXFX6V.js");
     let payload;
     if (TOOLS_REGISTRY2.some((t) => t.name === name && t.audiences.includes("mcp"))) {
       const r = await runTool({ ...env, DB: env.DB }, { name, args }, "mcp");
       payload = r ? { tool: r.name, query: r.query, result: r.output } : { error: { message: `tool ${name} returned nothing for the given arguments` } };
     } else {
-      const res = name === "ask" ? await (await import("../../ask-KKOQH7HK.js")).handleAsk(env, ctx, inner, tier, key) : await (await import("../../search-CGQFGYTR.js")).handleSearch(env, ctx, inner, tier, key);
+      const res = name === "ask" ? await (await import("../../ask-4G24T25V.js")).handleAsk(env, ctx, inner, tier, key) : await (await import("../../search-EQAOPFCC.js")).handleSearch(env, ctx, inner, tier, key);
       payload = await res.json().catch(() => ({ error: { message: "tool transport failed", status: res.status } }));
     }
     telemetry(env, ctx, tier, `mcp:${name}`, null, !payload?.error, JSON.stringify(payload).length, await sha256Hex(`${name}:${JSON.stringify(args ?? {})}`), void 0, void 0, { durationMs: Date.now() - t0 });
@@ -1415,12 +1415,14 @@ async function healthRoute(c) {
 }
 async function tierFor(c) {
   const isApi = c.path.startsWith("/v1/");
+  const isMcp = c.path === "/mcp";
+  const bearer = c.req.headers.get("authorization")?.replace(/^Bearer\s+/i, "").trim();
   let key = null;
-  if (isApi) {
+  if (isApi || isMcp && bearer) {
     key = await authenticate(c.env, c.req);
     if (!key) return err(401, "unauthorized", `Provide a valid API key: Authorization: Bearer ${P().publisher.id}_...`);
   }
-  let tier = isApi ? "key" : "anon";
+  let tier = key ? "key" : "anon";
   if (!isApi && await sessionFrom(c.req, c.env)) tier = "member";
   else if (!isApi && await opTokenMember(c.env, opCfg(c.env), c.req)) tier = "member";
   return { tier, key };

package/dist/worker_public/src/requestScope.js

@@ -4,8 +4,8 @@ import {
   requestSalt,
   resolveRequestScope,
   standardKeysFrom
-} from "../../chunk-LVZTWUVJ.js";
-import "../../chunk-2PCUAJJO.js";
+} from "../../chunk-U4ERFUOK.js";
+import "../../chunk-BOAITSVV.js";
 import "../../chunk-3FYJM7LH.js";
 export {
   entitlementScope,

package/package.json

@@ -27,7 +27,7 @@
     "playwright": "^1.62.1",
     "yaml": "^2.9.1"
   },
-  "version": "0.2.96",
+  "version": "0.2.98",
   "description": "The Konneal engine: the publisher-agnostic build pipeline and API plane for standards intelligence (retrieval, answer contract, verdicts, evaluation).",
   "license": "BSD-3-Clause",
   "type": "module",

package/workers/worker_public/src/config.ts

@@ -62,6 +62,7 @@ export const THRESHOLDS = {
    *  pool below the primary dense lane; they must earn their window
    *  slot under the cross-encoder, not by graph membership alone. */
   graphLaneDiscount: 0.75,
+  licensedLaneScore: 0.5,
   /** The entailment gate (TODO.new-era/10): the faithfulness scorer
    *  promoted from eval-only onto the serving path. The confidence line
    *  then states a measurement — claim support in the cited passages —

package/workers/worker_public/src/index.ts

@@ -186,12 +186,18 @@ async function healthRoute(c: RouteContext): Promise<Response> {
  *  key. */
 async function tierFor(c: RouteContext): Promise<{ tier: "anon" | "key" | "member"; key: ApiKey | null } | Response> {
   const isApi = c.path.startsWith("/v1/");
+  // /mcp rides the same key tiering: a bearer presented to the JSON-RPC
+  // endpoint authenticates like /v1 (key tier, the caller's quota and
+  // telemetry) — but the endpoint stays open to anonymous agents, so an
+  // ABSENT bearer is not an error, only a PRESENT-but-invalid one is.
+  const isMcp = c.path === "/mcp";
+  const bearer = c.req.headers.get("authorization")?.replace(/^Bearer\s+/i, "").trim();
   let key: ApiKey | null = null;
-  if (isApi) {
+  if (isApi || (isMcp && bearer)) {
     key = await authenticate(c.env, c.req);
     if (!key) return err(401, "unauthorized", `Provide a valid API key: Authorization: Bearer ${P().publisher.id}_...`);
   }
-  let tier: "anon" | "key" | "member" = isApi ? "key" : "anon";
+  let tier: "anon" | "key" | "member" = key ? "key" : "anon";
   // No SESSION_SECRET precondition: the delegated bearer (the platform
   // bubble's OP-minted JWT, delegated.ts) admits the member lane on its
   // own — sessionFrom returns null honestly when neither lane applies.

package/workers/worker_public/src/stages/licensedLane.ts

@@ -1,38 +1,56 @@
 // Licensed lane (additive): an entitled caller whose question is
 // topically about a licensed standard gets that standard's typed units
-// merged into the pool at the graph lane's discount — the public
-// restatements (the Recommendations' own annexes citing the standard)
-// stop out-ranking the licensed package's own units, the rank-order
-// gap the quality ledger has documented on every damp-heat run since
-// the eleven-standard wave. Unentitled callers never see this lane
-// (license-scope would strip the units anyway — the lane simply does
-// not fire).
+// merged into the pool before rerank — the public restatements stop
+// out-ranking the licensed package's own machinery (the rank-order gap
+// the quality ledger has documented on every damp-heat run since the
+// eleven-standard wave).
+//
+// Identity, not similarity: the units are resolved from the model
+// plane's own registry (D1 model_nodes by standard) and turned into
+// index ids with the exporter's hash — `m` + sha1(standard|node_id)
+// truncated to 16 — then fetched by id. Vectorize metadata filtering
+// plays no part (measured: REST and binding filters on this index
+// return empty even for values proven present), and no similarity
+// search is needed — the package's units are the package's units, and
+// the pool's cross-encoder ranks them against the question like every
+// other candidate.
 import { THRESHOLDS } from "../config.ts";
-import { portIndex } from "../env.ts";
+import { portIndex, portStore } from "../env.ts";
 import type { Stage } from "./types.ts";
 
+const sha1Hex = async (s: string) => {
+  const digest = await crypto.subtle.digest("SHA-1", new TextEncoder().encode(s));
+  return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, "0")).join("");
+};
+
 export const licensedLane: Stage = {
   name: "licensed-lane",
   failure: "additive",
-  when: (c) => !!c.opts.licensedDocNumbers?.length && c.vector.length > 0,
-  prefetch: (c) => {
-    c.lane["licensed-lane"] = portIndex(c.env, "public").query({
-      vector: c.vector,
-      topK: 12,
-      filter: { standard: { $in: c.opts.licensedDocNumbers } },
-    });
-  },
+  when: (c) => !!c.opts.licensedDocNumbers?.length,
   run: async (c) => {
-    const g = (await c.lane["licensed-lane"]!) as any;
+    const standards = c.opts.licensedDocNumbers!;
+    const placeholders = standards.map((_, i) => `?${i + 1}`).join(",");
+    const rows = await portStore(c.env)
+      .prepare(`SELECT standard, node_id FROM model_nodes WHERE standard IN (${placeholders}) LIMIT 40`)
+      .bind(...standards)
+      .all()
+      .catch(() => ({ results: [] }));
+    const ids = await Promise.all(
+      ((rows.results ?? []) as { standard: string; node_id: string }[]).map(async (r) =>
+        "m" + (await sha1Hex(`${r.standard}|${r.node_id}`)).slice(0, 16),
+      ),
+    );
+    if (!ids.length) return;
+    const matches = await portIndex(c.env, "public").getByIds(ids);
     const seenIds = new Set(c.matches.map((m: any) => m.id));
     let merged = 0;
-    for (const m of (g ?? []).slice(0, 10)) {
-      if (!seenIds.has(m.id)) {
-        c.matches.push({ id: m.id, score: m.score * THRESHOLDS.graphLaneDiscount, metadata: m.metadata });
+    for (const m of matches) {
+      if (m.metadata && !seenIds.has(m.id)) {
+        c.matches.push({ id: m.id, score: THRESHOLDS.licensedLaneScore, metadata: m.metadata });
         seenIds.add(m.id);
         merged++;
       }
     }
-    console.log("licensed lane:", g?.length ?? 0, "hits,", merged, "merged");
+    console.log("licensed lane:", ids.length, "units,", matches.length, "vectors,", merged, "merged");
   },
 };

package/dist/ask-KKOQH7HK.js

@@ -1,15 +0,0 @@
-import {
-  handleAsk
-} from "./chunk-CX3OVN3V.js";
-import "./chunk-AJU6LMY3.js";
-import "./chunk-PTCDEFI3.js";
-import "./chunk-LOBYXEVD.js";
-import "./chunk-SPKPH54J.js";
-import "./chunk-A3QHHUN5.js";
-import "./chunk-LVZTWUVJ.js";
-import "./chunk-2PCUAJJO.js";
-import "./chunk-JZFXSTYX.js";
-import "./chunk-3FYJM7LH.js";
-export {
-  handleAsk
-};

package/dist/search-CGQFGYTR.js

@@ -1,13 +0,0 @@
-import {
-  handleSearch
-} from "./chunk-ZLQMRQOV.js";
-import "./chunk-PTCDEFI3.js";
-import "./chunk-LOBYXEVD.js";
-import "./chunk-SPKPH54J.js";
-import "./chunk-A3QHHUN5.js";
-import "./chunk-LVZTWUVJ.js";
-import "./chunk-2PCUAJJO.js";
-import "./chunk-3FYJM7LH.js";
-export {
-  handleSearch
-};