clearotron 0.3.0-beta.2 → 0.3.0-beta.3

package/driver/publish/office-record-links.mjs

@@ -67,9 +67,13 @@ export const OFFICE_RECORD_PAGES = Object.freeze({
   fr: { name: "France", address: (r) => addressFrom([r.applicationNumber, r.registrationNumber], /^(?:FR)?(\d{7})$/i, (m) => ({
     number: `FR${m[1]}`, href: `https://data.inpi.fr/marques/FR${m[1]}` })) },
   // The office's record address as indexed; it challenges automated fetches, so none was opened from a
-  // server. UK numbers are UK plus eleven digits (UK000..., UK008..., UK009...).
-  gb: { name: "United Kingdom", address: (r) => addressFrom([r.applicationNumber, r.registrationNumber], /^(UK\d{11})$/i, (m) => ({
-    number: m[1].toUpperCase(), href: `https://trademarks.ipo.gov.uk/ipo-tmcase/page/Results/1/${m[1].toUpperCase()}` })) },
+  // server. UK numbers are UK plus eleven digits (UK000..., UK008..., UK009...). A national number given
+  // bare, seven digits as one register hands it over, is the same number under the office's UK0000
+  // prefix: UK00003456789 is national mark 3456789.
+  gb: { name: "United Kingdom", address: (r) => addressFrom([r.applicationNumber, r.registrationNumber], /^(?:(UK\d{11})|(\d{7}))$/i, (m) => {
+    const n = m[1] ? m[1].toUpperCase() : `UK0000${m[2]}`;
+    return { number: n, href: `https://trademarks.ipo.gov.uk/ipo-tmcase/page/Results/1/${n}` };
+  }) },
   // The register's own search opens records at exactly this address: the application number, then the
   // registration number when there is one. Opened a real record. The older search.patentstyret.no
   // addresses now answer 410 Gone.
@@ -91,6 +95,12 @@ export const OFFICE_RECORD_PAGES = Object.freeze({
 
 const handleOffice = (uri) => (/^\/mark\/([a-z]{2,4})\//i.exec(clean(uri))?.[1] ?? "").toLowerCase();
 
+// The same office under another register's code. The EUIPO's WIPO ST.3 code is EM, and a register that
+// keeps it (Compumark does) names the office the table holds as EU. An alias, never a second table entry:
+// the table is keyed by the offices, and one office has one address.
+const OFFICE_ALIASES = Object.freeze({ em: "eu" });
+const officeOf = (code) => OFFICE_ALIASES[code] ?? code;
+
 // A number that already carries its office's letters (FR4123456, UK00003456789) stands alone; a bare
 // one is shown with its office (CH 08133/2025), so the label always says whose number it is.
 const labelOf = (office, number) => (number ? (/^[a-z]{2}/i.test(number) ? number : `${office.toUpperCase()} ${number}`) : null);
@@ -108,7 +118,7 @@ const labelOf = (office, number) => (number ? (/^[a-z]{2}/i.test(number) ? numbe
 export function officeRecordLink(rec, uri = "") {
   if (!rec || typeof rec !== "object") return null;
   const designation = clean(rec.filingRoute) === "madrid_designation";
-  const office = designation ? "wo" : (clean(rec.office).toLowerCase() || handleOffice(uri));
+  const office = designation ? "wo" : officeOf(clean(rec.office).toLowerCase() || handleOffice(uri));
   const page = OFFICE_RECORD_PAGES[office];
   const own = designation ? clean(rec.irNumber) : clean(rec.applicationNumber) || clean(rec.registrationNumber);
   const unlinked = (reason) => ({ office, label: labelOf(office, own), href: null, reason });
@@ -118,17 +128,28 @@ export function officeRecordLink(rec, uri = "") {
   return a ? { office, label: labelOf(office, a.number), href: a.href, reason: null } : unlinked("unaddressable");
 }
 
-/** The registers whose records carry no page of the vendor's own, so the office's page is the link. */
-export const VENDORS_WITHOUT_RECORD_PAGES = Object.freeze(["signa"]);
+/**
+ * Does the run's register publish no page per record, so that the office's page is the only link a reader
+ * can be given? `origins` is `recordOriginsFor`'s answer for the run's register: the hosts it may put in a
+ * record URL. An EMPTY list is that answer, and it is the same one normalizeRecordLinks enforces, which
+ * strips every record URL on such a register, so none of its records reaches publish with a link of its
+ * own. Null means no register was named, and nothing is addressed.
+ *
+ * DECIDED BY THE REGISTER'S DECLARATION, NEVER BY A LIST OF VENDOR NAMES. A list here once named one
+ * vendor, on the premise that every other register's records carry links of their own. Compumark's do
+ * not, and its runs reached the reader with a handle and no reason, while this code knew the address.
+ */
+const publishesNoRecordPages = (origins) => Array.isArray(origins) && origins.length === 0;
 
 /**
- * Every registration the findings cite, keyed by its lower-cased uri, for a run whose register is
- * `provider`. Returns null for any other register, so those runs render exactly as before: their records
- * carry links of their own. `tally` is what publish records, per office, so that a register whose numbers
- * never fit shows up as a count instead of as a report that quietly looks the way it always did.
+ * Every registration the findings cite, keyed by its lower-cased uri, for a run whose register may put a
+ * record URL on `origins` (see publishesNoRecordPages). Returns null for a register that publishes pages
+ * of its own, so those runs render exactly as before. `tally` is what publish records, per office, so
+ * that a register whose numbers never fit shows up as a count instead of as a report that quietly looks
+ * the way it always did.
  */
-export function recordLinksFor(findings, recordsByUri, provider) {
-  if (!VENDORS_WITHOUT_RECORD_PAGES.includes(clean(provider).toLowerCase())) return null;
+export function recordLinksFor(findings, recordsByUri, origins) {
+  if (!publishesNoRecordPages(origins)) return null;
   const byUri = new Map();
   const tally = { linked: {}, cited: {}, notRetrieved: 0 };
   for (const f of Array.isArray(findings) ? findings : []) {
@@ -169,17 +190,30 @@ const nameOf = (office) => OFFICE_RECORD_PAGES[office]?.name ?? office.toUpperCa
  * NO COUNT. The cards list only some findings' registrations (an off-field finding lists none), so a
  * number here could name more registrations than the reader can find on the page. The workbook lists
  * them all, each with its reason.
+ *
+ * ONE SENTENCE FOR EVERY OFFICE THE TABLE HOLDS NO ADDRESS FOR, after the per-office ones. A register
+ * covering the world cites filings from offices this table does not know: one Compumark knockout on the
+ * test instance listed sixteen of them. A sentence each would repeat one caveat sixteen times, which is
+ * the repeated note the owner ruled reads to a client as a broken report.
  */
 export function officeReasonSentences(byUri) {
   const keys = new Set();
-  for (const l of byUri instanceof Map ? byUri.values() : []) if (l && !l.href) keys.add(`${l.office} ${l.reason}`);
-  return [...keys].sort().map((k) => {
+  const unknown = new Set();
+  for (const l of byUri instanceof Map ? byUri.values() : []) {
+    if (!l || l.href) continue;
+    if (l.reason === "unknown-office") unknown.add(l.office);
+    else keys.add(`${l.office} ${l.reason}`);
+  }
+  const each = [...keys].sort().map((k) => {
     const [office, reason] = k.split(" ");
     const name = nameOf(office);
     if (reason === "no-page") return `${name}: the register publishes no page for a single record, so its registrations are cited by number.`;
-    if (reason === "unknown-office") return `${name}: we hold no page address for this register, so its registrations are cited by number.`;
     return `${name}: registrations whose numbers are not in the form the register's page address takes are cited by number, not linked.`;
   });
+  const codes = [...unknown].sort().map(nameOf);
+  if (codes.length === 1) each.push(`${codes[0]}: we hold no page address for this register, so its registrations are cited by number.`);
+  else if (codes.length > 1) each.push(`${codes.join(", ")}: we hold no page address for these registers, so their registrations are cited by number.`);
+  return each;
 }
 
 /**
@@ -215,20 +249,21 @@ export function linkCellFor(registrations, byUri) {
 
 /**
  * A knockout's listed filings, each addressed at its office's page, for a listing taken on a register
- * with no record pages of its own. `doc` is register-records.json, and each filing that carries an office
- * number gains an `officeLink` in place, as normalizeRegisterRecordLinks rewrites links in place, so the
- * report, the workbook and report-data.json all state the same link. Returns null for any other
- * register, whose filings render exactly as before.
+ * with no record pages of its own. `doc` is register-records.json and `origins` is `recordOriginsFor`'s
+ * answer for the register the sidecar names (see publishesNoRecordPages). Each filing that carries an
+ * office number gains an `officeLink` in place, as normalizeRegisterRecordLinks rewrites links in place, so
+ * the report, the workbook and report-data.json all state the same link. Returns null for a register that
+ * publishes pages of its own, whose filings render exactly as before.
  *
  * A FILING WITH NO OFFICE NUMBER IS LEFT AS IT WAS, and shows as it always did. Every listing taken
  * before the numbers were kept is that case, so an archived knockout republishes unchanged. An
  * `officeLink` found already on the sidecar is dropped first: the link is set here, from the numbers, and
  * nowhere else.
  */
-export function addressListedFilings(doc) {
+export function addressListedFilings(doc, origins) {
   const records = (doc?.marks ?? []).flatMap((m) => m?.records ?? []).filter((r) => r && typeof r === "object");
   for (const r of records) delete r.officeLink;
-  if (!VENDORS_WITHOUT_RECORD_PAGES.includes(clean(doc?.provider).toLowerCase())) return null;
+  if (!publishesNoRecordPages(origins)) return null;
   const tally = { linked: {}, cited: {}, noNumber: 0 };
   for (const r of records) {
     const link = officeRecordLink(r, r.recordId);

package/driver/recipe-service.mjs

@@ -24,8 +24,8 @@
 // server-owned (monotonic per save); EVERY write re-runs the SAME load-time validator the driver uses
 // (search-policy.mjs validateRecipe), so the UI can never persist a recipe the driver would later reject;
 // free text gets the profiles.mjs anti-rule prose guards (a recipe must never smuggle a rating rule in as
-// prose — levels select machinery, never rating authority); a recipe belongs to a REAL customer on the
-// profile roster (never "generic"). The routing core (`makeRecipeService`) is fs-only + injected
+// prose — levels select machinery, never rating authority); a recipe belongs to a company on the
+// profile roster, Generic included. The routing core (`makeRecipeService`) is fs-only + injected
 // git/audit so it unit-tests offline; auth + rate-limit are wired in the bootstrap.
 
 import "../shared/env-local.mjs";   // — FIRST: the CLEAROTRON_* translation must land before any
@@ -61,6 +61,13 @@ export const componentCatalog = () =>
 export function makeRecipeService({
   recipesDir,
   profileDir = undefined,                      // undefined ⇒ profiles.mjs default dir
+  // THE ROSTER THE PORTAL SHOWS, read the way profile-service reads it (its `readLayered` note). The
+  // portal passes true: the deployment's store, overlay over base, with `generic` falling through from
+  // the product. Read as an explicit directory instead, a store holding no `generic.json` — every fresh
+  // install and every demo — throws "generic.json is REQUIRED", the catch below turned that into "no
+  // such company", and saved searches answered 404 for every company on the install, one created a
+  // minute earlier included, while the same company's projects answered 200.
+  readLayered = false,
   loadRecipes = loadRecipesDefault,
   loadProfiles = loadProfilesDefault,
   writeRecipe = defaultWriteRecipe,
@@ -69,8 +76,10 @@ export function makeRecipeService({
 } = {}) {
   const rosterHas = (customer) => {
     try {
-      const profiles = profileDir === undefined ? loadProfiles({ force: true }) : loadProfiles({ dir: profileDir, force: true });
-      return profiles.has(customer) && customer !== "generic";
+      const profiles = readLayered || profileDir === undefined ? loadProfiles({ force: true }) : loadProfiles({ dir: profileDir, force: true });
+      // GENERIC OWNS SAVED SEARCHES LIKE ANY COMPANY (owner ruling, 2026-09-11). It was refused here as not a
+      // real customer, and a fresh install, which holds Generic alone, opened Custom searches on an error.
+      return profiles.has(customer);
     } catch { return false; }   // an unreadable roster fails CLOSED here — writes need a verifiable owner
   };
   const listRow = ([key, r]) => {
@@ -122,7 +131,7 @@ export function makeRecipeService({
       return { status: 404, json: { error: "not_found" } };
     if (method !== "POST") return { status: 405, json: { error: "method_not_allowed" } };
     if (!rosterHas(customer))
-      return { status: 400, json: { error: `customer "${customer}" is not on the profile roster — a saved search belongs to a real customer (create the profile first; "generic" cannot own recipes)` } };
+      return { status: 400, json: { error: `customer "${customer}" is not on the profile roster — a saved search belongs to a company on the roster (create the company first)` } };
 
     const incoming = body.recipe;
     if (!incoming || typeof incoming !== "object" || Array.isArray(incoming))

package/driver/record-origins.mjs

@@ -43,3 +43,17 @@ export function activeRecordOrigins(env = process.env) {
   const id = String(env?.CLEAROTRON_DATABASE ?? "").trim().toLowerCase();
   return id ? recordOriginsFor(id) : null;
 }
+
+/**
+ * The record origins of the register a stored artefact NAMES — a knockout's listing, a run's fetch
+ * receipts — or null when it names none.
+ *
+ * EMPTY IS "NOBODY SAID", and it turns the gate off, as normalizeRegisterRecordLinks reads the same
+ * field: an artefact that never recorded its register cannot be judged against one. An id this table
+ * does not know is an answer, and resolves as recordOriginsFor resolves it, to no origins, because no
+ * host of its can be established as legitimate.
+ */
+export function declaredRecordOrigins(provider) {
+  const id = String(provider ?? "").trim().toLowerCase();
+  return id ? recordOriginsFor(id) : null;
+}

package/driver/suite-census.json

@@ -148,8 +148,8 @@
           "todos": 0
         },
         "a-company-created-in-the-browser-is-a-whole-company.test.mjs": {
-          "tests": 7,
-          "asserts": 36,
+          "tests": 11,
+          "asserts": 61,
           "skips": 0,
           "todos": 0
         },
@@ -370,8 +370,8 @@
           "todos": 0
         },
         "a-knockout-filing-links-to-its-office.test.mjs": {
-          "tests": 12,
-          "asserts": 56,
+          "tests": 15,
+          "asserts": 76,
           "skips": 0,
           "todos": 0
         },
@@ -1804,8 +1804,8 @@
           "todos": 0
         },
         "doctor-reads-the-units-not-the-shell.test.mjs": {
-          "tests": 24,
-          "asserts": 67,
+          "tests": 30,
+          "asserts": 85,
           "skips": 0,
           "todos": 0
         },
@@ -2026,8 +2026,8 @@
           "todos": 0
         },
         "engine.anthropic.test.mjs": {
-          "tests": 60,
-          "asserts": 215,
+          "tests": 61,
+          "asserts": 222,
           "skips": 0,
           "todos": 0
         },
@@ -2188,8 +2188,8 @@
           "todos": 0
         },
         "exit1-artifact-rescue.test.mjs": {
-          "tests": 20,
-          "asserts": 79,
+          "tests": 25,
+          "asserts": 101,
           "skips": 0,
           "todos": 0
         },
@@ -3058,8 +3058,8 @@
           "todos": 0
         },
         "portal-service.test.mjs": {
-          "tests": 122,
-          "asserts": 656,
+          "tests": 123,
+          "asserts": 662,
           "skips": 0,
           "todos": 0
         },
@@ -3322,8 +3322,8 @@
           "todos": 0
         },
         "recipe-service.test.mjs": {
-          "tests": 12,
-          "asserts": 67,
+          "tests": 16,
+          "asserts": 77,
           "skips": 0,
           "todos": 0
         },
@@ -3478,8 +3478,8 @@
           "todos": 0
         },
         "register-findings-link-to-the-office-record.test.mjs": {
-          "tests": 16,
-          "asserts": 44,
+          "tests": 19,
+          "asserts": 61,
           "skips": 0,
           "todos": 0
         },
@@ -3665,7 +3665,7 @@
         },
         "report-record-link-host.test.mjs": {
           "tests": 3,
-          "asserts": 26,
+          "asserts": 27,
           "skips": 0,
           "todos": 0
         },
@@ -4479,6 +4479,12 @@
           "skips": 0,
           "todos": 0
         },
+        "the-doors-comparison-knows-an-admit-case.test.mjs": {
+          "tests": 7,
+          "asserts": 20,
+          "skips": 0,
+          "todos": 0
+        },
         "the-doubt-carries-its-placement-tier.test.mjs": {
           "tests": 17,
           "asserts": 56,
@@ -4858,8 +4864,8 @@
           "todos": 0
         },
         "the-settings-surface-reads-the-customer-store.test.mjs": {
-          "tests": 9,
-          "asserts": 37,
+          "tests": 10,
+          "asserts": 43,
           "skips": 0,
           "todos": 0
         },
@@ -5397,8 +5403,8 @@
           "todos": 0
         },
         "describe-options.test.mjs": {
-          "tests": 22,
-          "asserts": 94,
+          "tests": 23,
+          "asserts": 98,
           "skips": 0,
           "todos": 0
         },
@@ -5757,7 +5763,7 @@
         },
         "nav.test.ts": {
           "tests": 12,
-          "asserts": 55,
+          "asserts": 57,
           "skips": 0,
           "todos": 0
         },

package/mcp-server/CHANGELOG.md

@@ -1,5 +1,9 @@
 # trademark-artifacts-mcp
 
+## 0.3.0-beta.3
+
+No changes in this release.
+
 ## 0.3.0-beta.2
 
 ### Patch Changes

package/mcp-server/lib/driver.mjs

@@ -26,6 +26,8 @@ export { koPaths } from "../../driver/stages-knockout.mjs";
 // this same function rather than from a second reading of the numbers. office-record-links.mjs imports
 // nothing, so the read-only server stays light.
 export { addressListedFilings } from "../../driver/publish/office-record-links.mjs";
+// Which registers publish no page per record, as publish decides it: the sidecar's register, looked up.
+export { declaredRecordOrigins } from "../../driver/record-origins.mjs";
 
 // stripInternal/stripEngineInternals/stripTelemetry are the driver's OWN client-safety transforms — the
 // same ones publish/render.mjs applies to the client HTML export. lib/scrub.mjs composes them so the MCP

package/mcp-server/lib/knockout.mjs

@@ -27,7 +27,7 @@
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { basename, join } from "node:path";
 
-import { koPaths, addressListedFilings } from "./driver.mjs";
+import { koPaths, addressListedFilings, declaredRecordOrigins } from "./driver.mjs";
 import { driverDir } from "../../shared/driver-dir.mjs";
 
 const readJson = (p) => { try { return JSON.parse(readFileSync(p, "utf8")); } catch { return null; } };
@@ -213,7 +213,7 @@ export function knockoutEvidence(run) {
   // office's own page, or the office and the number and why that is not a link. This view states the same,
   // from the same function over the same sidecar, so the connector and the report cannot give one filing
   // two links. On any other register the call sets nothing, and every row is exactly as it was.
-  if (Array.isArray(recordsDoc?.marks)) addressListedFilings(recordsDoc);
+  if (Array.isArray(recordsDoc?.marks)) addressListedFilings(recordsDoc, declaredRecordOrigins(recordsDoc?.provider));
   const out = [];
 
   for (const entry of (Array.isArray(recordsDoc?.marks) ? recordsDoc.marks : [])) {

package/mcp-server/lib/options.mjs

@@ -238,11 +238,18 @@ function accountFor(key, { scope, now }) {
  * wherever it resolves — so there is no shut state left to probe, and the invitation cannot disagree with
  * the enforcement because neither consults an environment.
  *
- * An account that simply has no saved searches gets an empty list and no note.
+ * An account that simply has no saved searches gets an empty list and no note. A store that cannot be
+ * READ gets the empty list AND a note, because those are different facts, and an assistant told "none"
+ * repeats it to the client as the answer. The note names no variable and no path: its reader may be a
+ * client, and the reason belongs to whoever runs the installation, whose `clearotron doctor` names it.
  */
 function savedSearchesFor(key) {
   let recipes;
-  try { recipes = loadRecipes({ force: true, proseGuard: recipeProseGuard }); } catch { return { savedSearches: [], savedSearchesNote: null }; }
+  try { recipes = loadRecipes({ force: true, proseGuard: recipeProseGuard }); }
+  catch {
+    return { savedSearches: [], savedSearchesNote: "Saved searches could not be read on this installation, so none are "
+      + "listed. That is not the same as having none, and the people who run the installation can see why." };
+  }
   return {
     savedSearches: [...recipes.entries()]
       .filter(([k, r]) => k.startsWith(`${key}/`) && !r.archived)

package/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-artifacts-mcp",
-  "version": "0.3.0-beta.2",
+  "version": "0.3.0-beta.3",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "MCP server to interrogate clearotron trademark-clearance runs — list/read artifacts, trace the full decision flow, telemetry/cost, coverage, single-run search, and a gated single-step what-if. Imports the clearotron-driver read-only; touches no driver/template/deploy files.",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "clearotron",
   "type": "module",
-  "version": "0.3.0-beta.2",
+  "version": "0.3.0-beta.3",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",

package/portal-ui/dist/assets/{index-CcFjgM78.js → index-C1gpdkyH.js}

@@ -11018,14 +11018,14 @@ var NAV = [
 		label: "Admin settings",
 		path: "/portal/admin",
 		icon: "settings",
-		needs: "manage",
+		needs: "everything",
 		hidden: true,
 		children: [{
 			id: "admin.config",
 			label: "Global config",
 			path: "/portal/admin/config",
 			icon: "server",
-			needs: "manage"
+			needs: "everything"
 		}]
 	},
 	{
@@ -11036,7 +11036,8 @@ var NAV = [
 		hidden: true
 	}
 ];
-var visible = (e, who) => !e.needs || who.permissions[e.needs];
+var holds = (who, gate) => gate === "everything" ? who.allAccounts === true : who.permissions[gate];
+var visible = (e, who) => !e.needs || holds(who, e.needs);
 function navFor(who, entries = NAV) {
 	return entries.filter((e) => visible(e, who) && !e.hidden).map((e) => e.children ? {
 		...e,
@@ -12258,6 +12259,9 @@ function canManage(who) {
 function canRun(who) {
 	return who.permissions.run;
 }
+function seesEverything(who) {
+	return who.allAccounts === true;
+}
 //#endregion
 //#region src/screens/Home.tsx
 var TERMINAL$1 = new Set([
@@ -13016,11 +13020,15 @@ function Clearances({ ctx }) {
 		const wanted = new URLSearchParams(window.location.search).get("owner");
 		if (wanted && wanted !== ctx.owner) ctx.setOwner(wanted);
 	}, [ctx]);
-	const account = ownerFilter ?? (ctx.me.allAccounts ? "*" : ctx.me.accounts.length === 1 ? ctx.me.accounts[0] : null);
-	const { result: famResult, reload: reloadFamilies } = useLoad(() => api.families(account), [account]);
+	const seesAll = ctx.me.allAccounts;
+	const account = ownerFilter ?? (seesAll ? "*" : ctx.me.accounts.length === 1 ? ctx.me.accounts[0] : null);
+	const { result: famResult, reload: reloadFamilies } = useLoad(() => seesAll ? api.families(account) : Promise.resolve({
+		kind: "ok",
+		value: NO_FAMILIES
+	}), [account, seesAll]);
 	const families = famResult?.kind === "ok" ? famResult.value : NO_FAMILIES;
 	const [picked, setPicked] = (0, import_react.useState)(new Set());
-	const canGroup = canManage(ctx.me);
+	const canGroup = canManage(ctx.me) && seesAll;
 	const [showRetired, setShowRetired] = (0, import_react.useState)(false);
 	const { result: retiredResult, reload: reloadRetired } = useLoad(() => canGroup ? api.retiredRuns(account) : Promise.resolve({ kind: "notFound" }), [account, canGroup]);
 	const retired = retiredResult?.kind === "ok" ? retiredResult.value : [];
@@ -17392,7 +17400,7 @@ function NewClearance({ ctx }) {
 					demoMode: ctx.me.engineMode === "demo",
 					setupRoute: ctx.me.setupRoute,
 					programDisputed: ctx.me.engineProgramDisputed,
-					onSettings: canManage(ctx.me) ? () => ctx.go("/portal/admin/config") : null,
+					onSettings: seesEverything(ctx.me) ? () => ctx.go("/portal/admin/config") : null,
 					saveOpen,
 					saveName,
 					saveText,
@@ -22124,7 +22132,8 @@ function useSourceRepo() {
 function PeopleAccess({ ctx }) {
 	const { result } = useLoad(() => api.adminAccess(), []);
 	const repo = useSourceRepo();
-	const { result: observed } = useLoad(() => api.adminObserved(), []);
+	const seesAll = ctx.me.allAccounts;
+	const { result: observed } = useLoad(() => seesAll ? api.adminObserved() : Promise.resolve({ kind: "notFound" }), [seesAll]);
 	if (result && result.kind !== "ok") return (0, import_jsx_runtime.jsx)("div", {
 		className: "screen",
 		children: (0, import_jsx_runtime.jsxs)("div", {

package/portal-ui/dist/index.html

@@ -49,7 +49,7 @@
     -->
     <link rel="preconnect" href="https://api.fontshare.com" crossorigin />
     <link href="https://api.fontshare.com/v2/css?f[]=satoshi@400,500,700,900&display=swap" rel="stylesheet" />
-    <script type="module" crossorigin src="/portal/assets/index-CcFjgM78.js"></script>
+    <script type="module" crossorigin src="/portal/assets/index-C1gpdkyH.js"></script>
     <link rel="stylesheet" crossorigin href="/portal/assets/index-CsCuPshD.css">
   </head>
   <body>

package/portal-ui/package.json

@@ -2,7 +2,7 @@
   "name": "portal-ui",
   "private": true,
   "type": "module",
-  "version": "0.3.0-beta.2",
+  "version": "0.3.0-beta.3",
   "license": "AGPL-3.0-only",
   "description": "The unified trademark portal UI. One address, one login: who you are decides what you see. Built as a static bundle, served by driver/portal-service.mjs — the browser never reaches profile-service or recipe-service.",
   "engines": {

package/providers/clarivate/src/core.js

@@ -1214,6 +1214,11 @@ export async function doBatchScreen(apiKey, base, params, tctx) {
         application_date: nr.applicationDate,
         registration_date: nr.registrationDate,
         expiry_date: nr.expiryDate,
+        // The office's own numbers, which the record carries and a reader looks the record up by. A
+        // knockout's filings list is built from these rows, and without them it could name no record a
+        // reader can open.
+        application_number: nr.applicationNumber,
+        registration_number: nr.registrationNumber,
         live_status: liveStatusOf(rec),
         all_class: isAllClass(nr.niceClasses),
       };

package/providers/oauth-mcp-bridge/CHANGELOG.md

@@ -1,5 +1,9 @@
 # trademark-oauth-mcp-bridge
 
+## 0.3.0-beta.3
+
+No changes in this release.
+
 ## 0.3.0-beta.2
 
 No changes in this release.

package/providers/oauth-mcp-bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-oauth-mcp-bridge",
-  "version": "0.3.0-beta.2",
+  "version": "0.3.0-beta.3",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "OAuth 2.1 MCP stdio bridge used by the engine's case-law gather stage (courtlistener / legaldatahunter).",

package/scripts/e2e-unread-terminals.mjs

@@ -240,7 +240,7 @@ export function classify(doors, names, now, probe = runStateProbe) {
       // dropped off this list while remaining exactly as unclosed as the ones that were never opened —
       // so reading a round was enough to make it stop being counted, whatever the read found.
       //
-      // The harness already knows this. previousRoundNotice in e2e.mjs:2256 says the round closes on
+      // The harness already knows this. previousRoundNotice in e2e.mjs says the round closes on
       // `reportedState === "settled"`, NEVER on `reportedAt != null`, and gives the incident that
       // taught it. This lister was the last reader keying on the weaker field.
       if (String(r?.reportedState ?? "") === "settled") continue;