clearotron 0.3.0-beta.1 → 0.3.0-beta.2

package/driver/suite-census.json

@@ -64,8 +64,8 @@
           "todos": 0
         },
         "a-browser-run-gets-its-own-temp-root.test.mjs": {
-          "tests": 13,
-          "asserts": 33,
+          "tests": 12,
+          "asserts": 29,
           "skips": 0,
           "todos": 0
         },
@@ -106,9 +106,9 @@
           "todos": 0
         },
         "a-change-a-reader-can-see-arrives-with-something-to-read.test.mjs": {
-          "tests": 10,
-          "asserts": 20,
-          "skips": 2,
+          "tests": 19,
+          "asserts": 45,
+          "skips": 1,
           "todos": 0
         },
         "a-check-does-not-read-another-accounts-processes.test.mjs": {
@@ -135,6 +135,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-company-can-be-given-a-framework-after-it-exists.test.mjs": {
+          "tests": 8,
+          "asserts": 19,
+          "skips": 0,
+          "todos": 0
+        },
         "a-company-created-after-boot-can-still-search.test.mjs": {
           "tests": 3,
           "asserts": 10,
@@ -165,6 +171,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-cut-refuses-a-version-already-out.test.mjs": {
+          "tests": 4,
+          "asserts": 14,
+          "skips": 0,
+          "todos": 0
+        },
         "a-declared-non-knob-is-not-a-deletion-candidate.test.mjs": {
           "tests": 4,
           "asserts": 7,
@@ -202,8 +214,14 @@
           "todos": 0
         },
         "a-demo-says-what-it-is-not-what-it-lacks.test.mjs": {
-          "tests": 4,
-          "asserts": 23,
+          "tests": 5,
+          "asserts": 32,
+          "skips": 0,
+          "todos": 0
+        },
+        "a-depth-check-that-read-nothing-is-on-the-investigate-list.test.mjs": {
+          "tests": 3,
+          "asserts": 8,
           "skips": 0,
           "todos": 0
         },
@@ -339,12 +357,30 @@
           "skips": 0,
           "todos": 0
         },
+        "a-key-pasted-at-a-yes-no-prompt-is-taken-and-not-shown.test.mjs": {
+          "tests": 6,
+          "asserts": 31,
+          "skips": 0,
+          "todos": 0
+        },
         "a-killed-browser-takes-its-children.test.mjs": {
           "tests": 2,
           "asserts": 4,
           "skips": 0,
           "todos": 0
         },
+        "a-knockout-filing-links-to-its-office.test.mjs": {
+          "tests": 12,
+          "asserts": 56,
+          "skips": 0,
+          "todos": 0
+        },
+        "a-knockout-finding-carries-every-key-its-doctrine-teaches.test.mjs": {
+          "tests": 7,
+          "asserts": 17,
+          "skips": 0,
+          "todos": 0
+        },
         "a-mark-name-cannot-lie-about-how-it-reads.test.mjs": {
           "tests": 9,
           "asserts": 37,
@@ -381,12 +417,36 @@
           "skips": 0,
           "todos": 0
         },
+        "a-name-documented-in-any-example-file-is-documented.test.mjs": {
+          "tests": 7,
+          "asserts": 16,
+          "skips": 1,
+          "todos": 0
+        },
+        "a-name-the-wizard-returns-is-a-setup-name.test.mjs": {
+          "tests": 5,
+          "asserts": 9,
+          "skips": 0,
+          "todos": 0
+        },
         "a-new-citation-carries-something-that-can-be-checked.test.mjs": {
           "tests": 7,
           "asserts": 15,
           "skips": 0,
           "todos": 0
         },
+        "a-new-install-signs-in-with-its-own-passphrase.test.mjs": {
+          "tests": 9,
+          "asserts": 47,
+          "skips": 1,
+          "todos": 0
+        },
+        "a-note-the-release-refuses-is-refused-on-its-own-pull-request.test.mjs": {
+          "tests": 2,
+          "asserts": 3,
+          "skips": 1,
+          "todos": 0
+        },
         "a-packaged-install-resolves-every-workspace-dependency.test.mjs": {
           "tests": 2,
           "asserts": 7,
@@ -465,6 +525,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-real-dispatch-records-the-tool-that-served-it.test.mjs": {
+          "tests": 1,
+          "asserts": 5,
+          "skips": 0,
+          "todos": 0
+        },
         "a-real-install-starts-with-an-empty-archive.test.mjs": {
           "tests": 6,
           "asserts": 16,
@@ -657,6 +723,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-stale-classification-names-the-rows-that-moved.test.mjs": {
+          "tests": 6,
+          "asserts": 24,
+          "skips": 0,
+          "todos": 0
+        },
         "a-stop-is-read-once-more-before-anything-is-published.test.mjs": {
           "tests": 4,
           "asserts": 12,
@@ -669,6 +741,12 @@
           "skips": 1,
           "todos": 0
         },
+        "a-store-in-a-pushed-checkout-is-told-its-saves-will-be-published.test.mjs": {
+          "tests": 9,
+          "asserts": 37,
+          "skips": 0,
+          "todos": 0
+        },
         "a-stored-territory-that-does-nothing-is-named.test.mjs": {
           "tests": 6,
           "asserts": 12,
@@ -837,6 +915,18 @@
           "skips": 0,
           "todos": 0
         },
+        "an-empty-config-store-overrides-nothing.test.mjs": {
+          "tests": 5,
+          "asserts": 29,
+          "skips": 0,
+          "todos": 0
+        },
+        "an-environment-read-through-optional-chaining-is-a-read.test.mjs": {
+          "tests": 6,
+          "asserts": 19,
+          "skips": 0,
+          "todos": 0
+        },
         "an-evidence-demand-that-cannot-be-met.test.mjs": {
           "tests": 9,
           "asserts": 21,
@@ -2704,8 +2794,8 @@
           "todos": 0
         },
         "one-node-floor-read-in-one-place.test.mjs": {
-          "tests": 7,
-          "asserts": 24,
+          "tests": 8,
+          "asserts": 26,
           "skips": 0,
           "todos": 0
         },
@@ -2951,7 +3041,7 @@
         },
         "portal-run-control.test.mjs": {
           "tests": 16,
-          "asserts": 48,
+          "asserts": 49,
           "skips": 0,
           "todos": 0
         },
@@ -3359,7 +3449,7 @@
         },
         "register-count.test.mjs": {
           "tests": 20,
-          "asserts": 154,
+          "asserts": 153,
           "skips": 0,
           "todos": 0
         },
@@ -4084,8 +4174,8 @@
           "todos": 0
         },
         "start-command.test.mjs": {
-          "tests": 26,
-          "asserts": 110,
+          "tests": 27,
+          "asserts": 120,
           "skips": 0,
           "todos": 0
         },
@@ -4115,7 +4205,7 @@
         },
         "stop-is-a-stop.test.mjs": {
           "tests": 6,
-          "asserts": 27,
+          "asserts": 25,
           "skips": 0,
           "todos": 0
         },
@@ -4371,6 +4461,12 @@
           "skips": 0,
           "todos": 0
         },
+        "the-demo-is-its-own-install.test.mjs": {
+          "tests": 8,
+          "asserts": 61,
+          "skips": 0,
+          "todos": 0
+        },
         "the-door-answers-the-address-it-advertises.test.mjs": {
           "tests": 9,
           "asserts": 37,
@@ -4498,14 +4594,14 @@
           "todos": 0
         },
         "the-inventory-names-the-units-this-box-runs.test.mjs": {
-          "tests": 12,
-          "asserts": 33,
+          "tests": 21,
+          "asserts": 56,
           "skips": 0,
           "todos": 0
         },
         "the-knockout-page-leads-with-the-read.test.mjs": {
           "tests": 28,
-          "asserts": 68,
+          "asserts": 69,
           "skips": 0,
           "todos": 0
         },
@@ -4571,19 +4667,19 @@
         },
         "the-passphrase-is-in-the-block-not-the-log.test.mjs": {
           "tests": 6,
-          "asserts": 17,
+          "asserts": 19,
           "skips": 0,
           "todos": 0
         },
         "the-passphrase-line-tells-the-truth-on-a-first-start.test.mjs": {
           "tests": 2,
-          "asserts": 10,
+          "asserts": 12,
           "skips": 0,
           "todos": 0
         },
         "the-person-who-installs-is-a-person-not-a-domain.test.mjs": {
-          "tests": 19,
-          "asserts": 88,
+          "tests": 18,
+          "asserts": 86,
           "skips": 0,
           "todos": 0
         },
@@ -4625,7 +4721,7 @@
         },
         "the-public-residue-is-a-floor.test.mjs": {
           "tests": 15,
-          "asserts": 58,
+          "asserts": 59,
           "skips": 5,
           "todos": 0
         },
@@ -4647,6 +4743,12 @@
           "skips": 0,
           "todos": 0
         },
+        "the-reaper-signals-before-it-removes.test.mjs": {
+          "tests": 2,
+          "asserts": 6,
+          "skips": 0,
+          "todos": 0
+        },
         "the-record-cannot-contradict-itself.test.mjs": {
           "tests": 12,
           "asserts": 48,
@@ -4665,6 +4767,12 @@
           "skips": 4,
           "todos": 0
         },
+        "the-register-probe-reads-the-install-env-file.test.mjs": {
+          "tests": 3,
+          "asserts": 7,
+          "skips": 0,
+          "todos": 0
+        },
         "the-repair-order-and-the-tool-schema-agree.test.mjs": {
           "tests": 6,
           "asserts": 27,
@@ -4695,6 +4803,12 @@
           "skips": 0,
           "todos": 0
         },
+        "the-revisit-check-says-where-two-texts-differ.test.mjs": {
+          "tests": 5,
+          "asserts": 13,
+          "skips": 0,
+          "todos": 0
+        },
         "the-root-strip-rule-survives-and-can-only-widen.test.mjs": {
           "tests": 5,
           "asserts": 21,
@@ -4797,6 +4911,12 @@
           "skips": 0,
           "todos": 0
         },
+        "the-updater-that-deploys-this-box-says-what-it-is.test.mjs": {
+          "tests": 18,
+          "asserts": 59,
+          "skips": 0,
+          "todos": 0
+        },
         "the-verb-table-resolves-to-files-that-ship.test.mjs": {
           "tests": 6,
           "asserts": 12,
@@ -5086,8 +5206,14 @@
           "todos": 0
         },
         "what-doctor-passes-a-search-accepts.test.mjs": {
-          "tests": 8,
-          "asserts": 28,
+          "tests": 12,
+          "asserts": 39,
+          "skips": 0,
+          "todos": 0
+        },
+        "what-was-searched-is-written-in-the-readers-words.test.mjs": {
+          "tests": 6,
+          "asserts": 26,
           "skips": 0,
           "todos": 0
         },
@@ -5355,8 +5481,8 @@
           "todos": 0
         },
         "ops.test.mjs": {
-          "tests": 36,
-          "asserts": 150,
+          "tests": 38,
+          "asserts": 161,
           "skips": 0,
           "todos": 0
         },
@@ -5432,6 +5558,12 @@
           "skips": 0,
           "todos": 0
         },
+        "stop-now-ends-the-step.test.mjs": {
+          "tests": 10,
+          "asserts": 44,
+          "skips": 0,
+          "todos": 0
+        },
         "stop-run-names-who-stopped-it.test.mjs": {
           "tests": 6,
           "asserts": 11,
@@ -5467,6 +5599,12 @@
           "skips": 0,
           "todos": 0
         },
+        "clearancesKeepsItsControls.test.ts": {
+          "tests": 4,
+          "asserts": 8,
+          "skips": 0,
+          "todos": 0
+        },
         "companyCreated.test.ts": {
           "tests": 5,
           "asserts": 16,
@@ -5480,8 +5618,8 @@
           "todos": 0
         },
         "companyOrder.test.ts": {
-          "tests": 11,
-          "asserts": 37,
+          "tests": 12,
+          "asserts": 38,
           "skips": 0,
           "todos": 0
         },
@@ -5648,8 +5786,8 @@
           "todos": 0
         },
         "ownerNames.test.ts": {
-          "tests": 7,
-          "asserts": 16,
+          "tests": 9,
+          "asserts": 23,
           "skips": 0,
           "todos": 0
         },
@@ -5755,6 +5893,12 @@
           "skips": 0,
           "todos": 0
         },
+        "theStopNoticeHasItsOwnRow.test.ts": {
+          "tests": 4,
+          "asserts": 11,
+          "skips": 0,
+          "todos": 0
+        },
         "tone.test.ts": {
           "tests": 7,
           "asserts": 31,

package/driver/unit-inventory.mjs

@@ -123,6 +123,25 @@ export const UNIT_INVENTORY = Object.freeze([
     // exists to make impossible — and a mechanism that installs itself is the easiest kind to ship
     // undeclared.
     unit: "clearotron-deploy", runsOn: ["test"],
+    // ── ATTRIBUTED BY ITS OWN STAMP, NOT BY A TREE UNDER IT ────────────────────────────────────────
+    //
+    // Both halves of the commit attribution fail for this one unit, and it is the unit that performs the
+    // deploy. It is a `oneshot` running from a home directory with no checkout under it, so there is no
+    // tree to resolve; and its command line is the update script rather than the product entry point, so
+    // the running-process half cannot reach it either. It was therefore reported as "could NOT be read
+    // and was NOT compared" — the mechanism that places every commit on this box being the one thing the
+    // check could not say anything about.
+    //
+    // IT IS NOT GIVEN THE CHECKOUT'S HEAD, which is the obvious repair and a false one. The updater has
+    // no commit of its own: it is a script copied out of a separate store, and handing it the commit of
+    // the tree it merely operates on would make "N units, all on <sha>" true of the tree and false of the
+    // updater — and it would pass in exactly the case worth catching, since a stale updater still leaves
+    // the tree it just deployed on the deployed commit.
+    //
+    // So it leaves the compared population by name rather than by silence: the commit arm reports it as
+    // stamped and says where its verdict lives, and driver/updater-identity.mjs makes that verdict from
+    // the digests the updater records about itself.
+    attribution: "stamp",
       measured: "2026-09-08, the test deployment: the timer and its service are installed for that deployment's own user, the timer is enabled and ACTIVE, and it last fired within the hour — `systemctl --user list-timers`. The service's own state says nothing about this: it is `inactive` between runs and `inactive` when the timer has been stopped. The timer's ActiveState says the timer itself is still up. It is NOT a next elapse and does not promise one: `active` means UP, never SCHEDULED. Proving something will still fire takes a real next elapse, which `systemctl list-timers --all` supplies and `show -p ActiveState` cannot. Measured in testing 2026-09-09: a timer reading `ActiveState=active` whose `OnCalendar` names a date already past, so `list-timers` reports its next fire as null and it will never run again.",
     tracked: ["clearotron-deploy.service", "clearotron-deploy.timer"],
     note: "the install's own updater. Placed on the test deployment, where it pulls hourly; production takes it when the owner asks.",
@@ -587,6 +606,18 @@ export const CHECKED_UNITS = Object.freeze(
   UNIT_INVENTORY.filter((u) => u.runsOn.length > 0).map((u) => u.unit),
 );
 
+/**
+ * The units that are attributed by a stamp they write about themselves, not by a tree under them.
+ *
+ * DERIVED FROM THE INVENTORY RATHER THAN SPELLED AT THE USE SITE. A literal `["clearotron-deploy"]` in
+ * the verdict would be a spelling, not a property: it would keep passing after the entry was renamed,
+ * retired or given to another box, and the unit would fall back into the could-not-read pile with
+ * nothing saying why. The entry that declares the unit is the one place that decides how it is judged.
+ */
+export const STAMP_ATTRIBUTED_UNITS = Object.freeze(
+  UNIT_INVENTORY.filter((u) => u.runsOn.length > 0 && u.attribution === "stamp").map((u) => u.unit),
+);
+
 /**
  * The TIMER units this deployment claims to have, by name, as systemd spells them.
  *
@@ -666,6 +697,11 @@ export const ACCOUNTED_FILES = Object.freeze(
  */
 export function unitInventoryVerdict({
   live = [], files = [], collisions = [], filesError = null, box = null, probe = { ok: true },
+  // PASSED IN RATHER THAN IMPORTED, so the allowlist stays in one place. This module deliberately has
+  // no imports — it is the declaration the rest of the tree reads — and pulling one in to spell two
+  // names inside a sentence would put a second copy of that list here to drift from the first. The
+  // caller already resolves the box through `shared/deployment-box.mjs`; it hands over the names too.
+  boxNames = [],
   // INJECTED so the retirement branch can be PLANTED. `retired:` has no members today — the two it
   // carried left with their files — so `absentByRetirement` and the line it feeds are unreachable
   // against the real table, and a branch nothing exercises is a branch that will not fire the next
@@ -744,8 +780,27 @@ export function unitInventoryVerdict({
   const absentByRetirement = box
     ? inventory.filter((u) => declaredHere(u) && u.retired).map((u) => u.unit).sort()
     : [];
+  // ── AN UNNAMED BOX IS A FAULT, NOT A FOOTNOTE ─────────────────────────────────────────────────────
+  //
+  // This sentence used to ride along on a `pass`. It said, correctly, that half the arm did not run and
+  // that this is not the same as passing — and then the arm passed. So the one deployment where nobody
+  // sets the name gets a green tick beside a paragraph explaining that the check did not happen, which
+  // is the state this file argues against everywhere else it appears: a result nobody can act on,
+  // shaped exactly like a result that is fine.
+  //
+  // THE HALF THAT DOES NOT RUN IS THE ONE THAT CATCHES A SERVICE THAT STOPPED AND STAYED STOPPED. The
+  // other half enumerates what is alive, so a unit that is no longer alive is invisible to it by
+  // construction. Suppressing the mirror question is right — guessing the box would report every other
+  // deployment's units missing here — but the suppression must be loud, because while it lasts a
+  // declared service can disappear and nothing anywhere produces a finding.
+  //
+  // Measured 2026-09-10: the test deployment names itself and both halves run, reporting
+  // `client-mcp-apikey` as absent by retirement. Production sets no name, so on the deployment where a
+  // stopped service matters most, this half has never executed.
   const boxLine = box ? "" : " The box could not be named, so 'declared here and not running' was NOT "
-    + "checked — that half did not run, which is not the same as passing.";
+    + "checked — that half did not run, which is not the same as passing. Set CLEAROTRON_BOX to the "
+    + `name this deployment goes by${boxNames.length ? ` (${boxNames.join(" or ")})` : ""}; a deployment that cannot say `
+    + "which one it is cannot be told that a service it declares has gone.";
 
   // The tracked-file half of this arm depends on a walk of the tree, and an incomplete walk returns a
   // SHORT list — which quietly satisfies "no file is unaccounted for" and "no entry is misdeclared" at
@@ -815,6 +870,29 @@ export function unitInventoryVerdict({
     return { state: "fail", undeclared, orphaned, absent, misdeclared, claimedAbsent, absentByRetirement,
       message: faults.join(" ") + retiredLine + orphanLine + boxLine + filesLine };
   }
+  // NO FAULT FOUND IS NOT A PASS WHEN HALF THE ARM WAS SUPPRESSED. Reported separately from `faults`
+  // rather than pushed into it, because it is not a finding ABOUT the deployment — it is this check
+  // saying what it could not ask. The message still carries everything the pass carried; only the
+  // verdict changes, so a reader loses no detail and gains the one word that makes them act.
+  if (!box) {
+    return { state: "fail", undeclared, orphaned, absent, misdeclared, claimedAbsent, absentByRetirement,
+      message: `${liveBases.length} live unit(s), all declared, and NOTHING WAS COMPARED THE OTHER WAY.`
+        + `${retiredLine}${orphanLine}${boxLine}${filesLine}` };
+  }
+  // THE FILE HALF, FOR THE SAME REASON. `filesLine` above already says, in the code's own words, that a
+  // short list "quietly satisfies" both file arms and that an empty walk "is not a clean bill of health,
+  // it is a walk pointed somewhere wrong". It said both of those on a `pass`.
+  //
+  // AN EMPTY WALK AND AN INCOMPLETE ONE GET THE SAME VERDICT AND KEEP DIFFERENT SENTENCES. They are not
+  // equally likely — an empty walk is almost certainly a path pointed wrong, an incomplete one may be a
+  // real read error on one directory — but neither is a state in which "no file is unaccounted for"
+  // means anything, and that is what the verdict is being asked. The messages already tell them apart;
+  // the reader needs the difference, the exit code does not.
+  if (filesError || files.length === 0) {
+    return { state: "fail", undeclared, orphaned, absent, misdeclared, claimedAbsent, absentByRetirement,
+      message: `${liveBases.length} live unit(s), all declared, and THE FILE ARMS DID NOT RUN.`
+        + `${retiredLine}${orphanLine}${boxLine}${filesLine}` };
+  }
   return {
     state: "pass", undeclared, orphaned, absent, misdeclared, claimedAbsent, absentByRetirement,
     message: `${liveBases.length} live unit(s), all declared; `
@@ -942,12 +1020,23 @@ export function unitWorkingDirectory(raw) {
  * @param {boolean} a.ahead            the clone holds commits its remote does not
  * @returns {{state:"pass"|"fail"|"skip", message:string, owned:string[], foreign:string[]}}
  */
-export function serviceCommitVerdict({ clones = [], deployClone = null, expectHead = null, ahead = false } = {}) {
-  const running = (clones ?? []).filter((c) => c?.head);
+export function serviceCommitVerdict({ clones = [], deployClone = null, expectHead = null, ahead = false, stampAttributed = STAMP_ATTRIBUTED_UNITS } = {}) {
+  // — TAKEN OUT OF THE POPULATION BY NAME, BEFORE ANYTHING ELSE READS IT, and reported in its own
+  // clause below. These units have no tree to resolve and are judged by a stamp they write about
+  // themselves; leaving them here put the mechanism that performs the deploy into the "could NOT be
+  // read" pile, where it read as a gap in the check rather than as a unit judged somewhere else.
+  //
+  // THE POPULATION MUST NOT LOSE A MEMBER ON THE WAY THROUGH. Removing a unit here and failing to
+  // report it there is the silently narrowed population this verdict already carries two comments
+  // about — so the four buckets are asserted to account for every row that arrived.
+  const stampedNames = new Set(stampAttributed ?? []);
+  const stamped = (clones ?? []).filter((c) => c && stampedNames.has(c.unit));
+  const rest = (clones ?? []).filter((c) => !(c && stampedNames.has(c.unit)));
+  const running = rest.filter((c) => c?.head);
   // — ASKED AND FAILED, which is not the same as "reported no WorkingDirectory". Only a unit the
   // caller actually tried to read and could not lands here; an inactive unit with nothing to compare is
   // not a gap in the population and is not reported as one.
-  const unreadable = (clones ?? []).filter((c) => c && !c.head && c.unreadable);
+  const unreadable = rest.filter((c) => c && !c.head && c.unreadable);
   const norm = (p) => String(p ?? "").replace(/\/+$/, "");
   const foreign = running.filter((c) => norm(c.clone) !== norm(deployClone));
   const owned = running.filter((c) => norm(c.clone) === norm(deployClone));
@@ -955,12 +1044,27 @@ export function serviceCommitVerdict({ clones = [], deployClone = null, expectHe
     foreign.length
       ? `${foreign.length} unit(s) on another clone, not this deploy's to judge: ${foreign.map((c) => c.unit).join(", ")}`
       : "",
+    stamped.length
+      ? `${stamped.length} unit(s) attributed by their own stamp rather than by a tree, and judged on the `
+        + `updater arm instead of here: ${stamped.map((c) => c.unit).join(", ")}`
+      : "",
     unreadable.length
       ? `${unreadable.length} unit(s) could NOT be read and were NOT compared: ${unreadable.map((c) => `${c.unit} (${c.unreadable})`).join("; ")}`
       : "",
   ].filter(Boolean);
   const aside = asideParts.length ? ` · ${asideParts.join(" · ")}` : "";
-  const names = { owned: owned.map((c) => c.unit), foreign: foreign.map((c) => c.unit), unreadable: unreadable.map((c) => c.unit) };
+  // — `idle` IS RETURNED BUT NOT NARRATED, and the split is deliberate on both sides. An inactive unit
+  // with nothing to compare is genuinely not a gap, so the message stays quiet about it as it always
+  // has; but a bucket that exists only inside this function is a bucket no test can count, and the
+  // rows this verdict drops are exactly what a silently narrowed population looks like. Naming it here
+  // lets a test assert that the five buckets account for every row that arrived, without adding a
+  // sentence to a report that is right not to carry one.
+  const idle = rest.filter((c) => c && !c.head && !c.unreadable);
+  const names = {
+    owned: owned.map((c) => c.unit), foreign: foreign.map((c) => c.unit),
+    unreadable: unreadable.map((c) => c.unit), stamped: stamped.map((c) => c.unit),
+    idle: idle.map((c) => c.unit),
+  };
 
   // COULD NOT SCOPE ⇒ DO NOT JUDGE. Without knowing which clone is being deployed, every unit looks
   // equally like ours, which is the state that produced the false red. A failure to look is not a