clearotron 0.2.2 → 0.2.3

package/driver/publish/index.mjs

@@ -463,7 +463,7 @@ export function regenIndex(poolDir) {
   // Do NOT chmod the customer dirs: they inherit the set-gid pool group (an explicit dir chmod here was the
   // 2026-06-02→-06-08 Caddy-403 bug — see the publishReport comment). Only the index FILES get 0o640.
   // The page heading speaks the customer's DISPLAY name (profile .name), never the internal key slug —
-  // "Trademark clearance — aurora" read as an internal id on a client-facing page. Best-effort: profiles
+  // "Trademark clearance — foxglade" read as an internal id on a client-facing page. Best-effort: profiles
   // unreadable ⇒ fall back to the filter label (the runs' client string) ⇒ the key (displayOf, built above).
   for (const [key, crs] of byCustomer) {
     // LEAK-#9 fail-closed: NEVER emit a client-facing customer/generic/index.html. 'generic' is the shared
@@ -1426,7 +1426,7 @@ export const RISK_TIERS = [
   [/LOW/,            { bg: '#4472C4', fg: '#fff', label: 'LOW',        txt: '#2f55a4' }],
 ];
 // doc 50 — the run's band LADDER (from opts.bands / meta.framework.bands): per-run vocabulary with the
-// same template palette keyed by TONE, so "Moderate" (house) and "Medium" (zephyr) both colour correctly
+// same template palette keyed by TONE, so "Moderate" (house) and "Medium" (a customer ladder) both colour correctly
 // and a 5-band matrix framework (incl. "Low") lands on the same ramp. Set per compose; null = legacy.
 let EMAIL_BANDS = null;
 export const TONE_TIER = {

package/driver/publish/knockout.mjs

@@ -370,6 +370,12 @@ export async function publishKnockout({ runId, codename, runDir, findings, plan,
   let ownerChecks = [];
   try { ownerChecks = JSON.parse(readFileSync(driverDir(runDir, 'owner-checks.json'), 'utf8')).checks ?? []; }
   catch { ownerChecks = []; }
+  // The request the run was given, read the same tolerant way as the sidecars above and for the same
+  // reason (tracker issue 331 A.1). It is what "About this request" states; a run archived before the
+  // sidecar existed has none, and its page renders exactly as it was delivered.
+  let instructedScope = null;
+  try { instructedScope = JSON.parse(readFileSync(driverDir(runDir, 'instructed-scope.json'), 'utf8')); }
+  catch { instructedScope = null; }
 
   // ── — THIS LANE HAD NO RECORD-ORIGIN LOGIC AT ALL ─────────────────────────────────────────────
   //
@@ -534,7 +540,7 @@ export async function publishKnockout({ runId, codename, runDir, findings, plan,
     };
     const markBand = single ? overall : worstBand(framework, [m]);
     writeRO(file, renderKnockoutHtml(one, framework, {
-      runId, overall: markBand, issued, auditFile, probeRan, registerCounts, registerRecords, ownerChecks, identity, matter: runId,
+      runId, overall: markBand, issued, auditFile, probeRan, registerCounts, registerRecords, ownerChecks, instructedScope, identity, matter: runId,
       // — an invented mark says so on its own report. Resolved ONCE above the loop:
       // the answer is a property of the run, and asking per mark would let a multi-mark demo mark some
       // documents and not others if the roster moved mid-publish.