clearotron 0.3.0-beta.4 → 0.3.0-beta.6

package/driver/suite-census.json

@@ -135,6 +135,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-codex-login-survives-its-own-refresh.test.mjs": {
+          "tests": 4,
+          "asserts": 18,
+          "skips": 0,
+          "todos": 0
+        },
         "a-company-can-be-given-a-framework-after-it-exists.test.mjs": {
           "tests": 8,
           "asserts": 19,
@@ -153,6 +159,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-connect-line-says-where-it-runs.test.mjs": {
+          "tests": 4,
+          "asserts": 14,
+          "skips": 0,
+          "todos": 0
+        },
         "a-credential-file-is-written-one-way.test.mjs": {
           "tests": 4,
           "asserts": 13,
@@ -381,6 +393,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-local-install-hands-its-stores-to-every-reader.test.mjs": {
+          "tests": 1,
+          "asserts": 10,
+          "skips": 0,
+          "todos": 0
+        },
         "a-mark-name-cannot-lie-about-how-it-reads.test.mjs": {
           "tests": 9,
           "asserts": 37,
@@ -490,8 +508,8 @@
           "todos": 0
         },
         "a-printed-command-runs-from-where-the-reader-stands.test.mjs": {
-          "tests": 14,
-          "asserts": 59,
+          "tests": 15,
+          "asserts": 62,
           "skips": 0,
           "todos": 0
         },
@@ -747,6 +765,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-store-refusal-reaches-the-person-who-can-fix-it.test.mjs": {
+          "tests": 5,
+          "asserts": 21,
+          "skips": 0,
+          "todos": 0
+        },
         "a-stored-territory-that-does-nothing-is-named.test.mjs": {
           "tests": 6,
           "asserts": 12,
@@ -945,6 +969,12 @@
           "skips": 0,
           "todos": 0
         },
+        "an-install-from-npx-moves-out-of-the-cache.test.mjs": {
+          "tests": 8,
+          "asserts": 45,
+          "skips": 4,
+          "todos": 0
+        },
         "an-mcp-route-says-which-challenge-it-answers-with.test.mjs": {
           "tests": 8,
           "asserts": 25,
@@ -1804,9 +1834,9 @@
           "todos": 0
         },
         "doctor-reads-the-units-not-the-shell.test.mjs": {
-          "tests": 30,
-          "asserts": 85,
-          "skips": 0,
+          "tests": 33,
+          "asserts": 96,
+          "skips": 1,
           "todos": 0
         },
         "doctor-refuses-what-cannot-run.test.mjs": {
@@ -2080,9 +2110,9 @@
           "todos": 0
         },
         "enqueue-schema-class-inheritance.test.mjs": {
-          "tests": 11,
-          "asserts": 28,
-          "skips": 0,
+          "tests": 12,
+          "asserts": 31,
+          "skips": 1,
           "todos": 0
         },
         "enqueue-schema-unreadable-store.test.mjs": {
@@ -3022,8 +3052,8 @@
           "todos": 0
         },
         "portal-local-login.test.mjs": {
-          "tests": 22,
-          "asserts": 89,
+          "tests": 28,
+          "asserts": 111,
           "skips": 0,
           "todos": 0
         },
@@ -3058,9 +3088,9 @@
           "todos": 0
         },
         "portal-service.test.mjs": {
-          "tests": 123,
-          "asserts": 662,
-          "skips": 0,
+          "tests": 124,
+          "asserts": 670,
+          "skips": 1,
           "todos": 0
         },
         "portal-static.test.mjs": {
@@ -4018,9 +4048,9 @@
           "todos": 0
         },
         "search-policy.test.mjs": {
-          "tests": 34,
-          "asserts": 177,
-          "skips": 0,
+          "tests": 35,
+          "asserts": 180,
+          "skips": 1,
           "todos": 0
         },
         "seat-outputs-outside-driver-tree.test.mjs": {
@@ -4455,6 +4485,12 @@
           "skips": 0,
           "todos": 0
         },
+        "the-demo-hands-its-runs-to-the-assistant.test.mjs": {
+          "tests": 2,
+          "asserts": 11,
+          "skips": 0,
+          "todos": 0
+        },
         "the-demo-help-names-every-product-it-ships.test.mjs": {
           "tests": 4,
           "asserts": 8,
@@ -4480,8 +4516,8 @@
           "todos": 0
         },
         "the-doors-comparison-knows-an-admit-case.test.mjs": {
-          "tests": 7,
-          "asserts": 20,
+          "tests": 12,
+          "asserts": 38,
           "skips": 0,
           "todos": 0
         },
@@ -4659,6 +4695,12 @@
           "skips": 1,
           "todos": 0
         },
+        "the-open-line-says-what-to-do-when-the-page-is-not-ours.test.mjs": {
+          "tests": 4,
+          "asserts": 13,
+          "skips": 0,
+          "todos": 0
+        },
         "the-owner-of-a-promoted-filing-is-searched.test.mjs": {
           "tests": 15,
           "asserts": 43,
@@ -4725,6 +4767,12 @@
           "skips": 0,
           "todos": 0
         },
+        "the-proving-question-names-no-engines-model.test.mjs": {
+          "tests": 2,
+          "asserts": 5,
+          "skips": 0,
+          "todos": 0
+        },
         "the-public-residue-is-a-floor.test.mjs": {
           "tests": 15,
           "asserts": 59,
@@ -5403,9 +5451,9 @@
           "todos": 0
         },
         "describe-options.test.mjs": {
-          "tests": 23,
-          "asserts": 98,
-          "skips": 0,
+          "tests": 24,
+          "asserts": 108,
+          "skips": 1,
           "todos": 0
         },
         "diff.test.mjs": {
@@ -5594,8 +5642,8 @@
       "ext": "ts",
       "perFile": {
         "api.test.ts": {
-          "tests": 43,
-          "asserts": 170,
+          "tests": 44,
+          "asserts": 176,
           "skips": 0,
           "todos": 0
         },

package/mcp-server/CHANGELOG.md

@@ -1,5 +1,15 @@
 # trademark-artifacts-mcp
 
+## 0.3.0-beta.6
+
+No changes in this release.
+
+## 0.3.0-beta.5
+
+### Patch Changes
+
+- e7cd9e1: Fixed: On an install run with `clearotron start`, a connected assistant now lists the same saved searches as the portal, including Generic's. `clearotron doctor` no longer says working saved searches are off, and it names one place profiles come from.
+
 ## 0.3.0-beta.4
 
 No changes in this release.
@@ -18,11 +28,11 @@ No changes in this release.
 
 ### Patch Changes
 
-- b8ec213: Fixed: a company you create in the browser now appears in your assistant's list of companies straight away.
+- b8ec213: Fixed: A company you create in the browser now appears in your assistant's list of companies straight away.
   
   It used to appear only after the service restarted, although a search could already be started for it. Its projects were missing from the list in the same way, and so was its account in the search options.
   
-  The live surface check no longer reports a company outside the portal's trigger key as the service and the store disagreeing. It names the key's gap on a line of its own, with the command to widen the key.
+  The check comparing the running service with the configuration store no longer calls a company the portal's key does not cover a disagreement. It names that gap on a line of its own, with the command that widens the key.
 
 ## 0.2.4
 

package/mcp-server/CONNECT.md

@@ -44,14 +44,15 @@ touches no network. If that works, everything below is configuration.
 One command. Substitute your clone's path and your workspace root:
 
 ```sh
-claude mcp add trademark-artifacts \
+claude mcp add trademark-artifacts --scope user \
   -e CLEAROTRON_WORK_DIR=/path/to/your/workspace \
   -- node /path/to/clearotron/mcp-server/server.mjs
 ```
 
 Check it: `claude mcp list` prints `trademark-artifacts: … - √ Connected`.
 
-Add `-s user` to make it available in every project instead of just this one. Remove it with
+`--scope user` makes it available in every project, not only the directory you ran it in. In Windows
+PowerShell 5.1, write the separator as `"--"`: that shell drops a bare `--`. Remove it with
 `claude mcp remove trademark-artifacts`.
 
 ## Claude Desktop

package/mcp-server/lib/options.mjs

@@ -193,7 +193,10 @@ function accountFor(key, { scope, now }) {
     profile = loadProfiles().get(key) ?? null;
     if (!profile) { fresh = loadProfiles({ force: true }); profile = fresh.get(key) ?? null; }
   } catch { return null; }   // unreadable roster ⇒ say nothing
-  if (!profile || profile.key === "generic") return null;
+  // GENERIC IS ANSWERED LIKE ANY COMPANY (owner ruling, 2026-09-11). It owns saved searches in the portal,
+  // and a fresh install holds Generic alone, so treating it as nobody's account told the assistant on
+  // every such install that none existed.
+  if (!profile) return null;
 
   let projects = [];
   try {
@@ -220,7 +223,7 @@ function accountFor(key, { scope, now }) {
         ? null
         : "This account names no default search. A request that names none is whichever search its resolved territories make it — worldwide is a Global preliminary search, one country is a Full country search, anything else is a Multi-country focus search.",
     },
-    ...savedSearchesFor(key),
+    ...savedSearchesFor(key, scope),
     allowance: allowanceFor(profile, { scope, now }),
   };
 }
@@ -243,12 +246,17 @@ function accountFor(key, { scope, now }) {
  * repeats it to the client as the answer. The note names no variable and no path: its reader may be a
  * client, and the reason belongs to whoever runs the installation, whose `clearotron doctor` names it.
  */
-function savedSearchesFor(key) {
+function savedSearchesFor(key, scope) {
   let recipes;
   try { recipes = loadRecipes({ force: true, proseGuard: recipeProseGuard }); }
-  catch {
+  catch (e) {
+    // The store's own error, path included, goes only to a session POSITIVELY known to run the installation:
+    // an ops session, or a person with access to everything. Everyone else, a missing scope included, gets
+    // the sentence alone, because its reader may be a client.
+    const operator = scope?.kind === "ops" || scope?.everything === true;
+    const cause = operator ? ` (${String(e?.message ?? e).split("\n")[0].slice(0, 300)})` : "";
     return { savedSearches: [], savedSearchesNote: "Saved searches could not be read on this installation, so none are "
-      + "listed. That is not the same as having none, and the people who run the installation can see why." };
+      + `listed. That is not the same as having none, and the people who run the installation can see why${cause}.` };
   }
   return {
     savedSearches: [...recipes.entries()]

package/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-artifacts-mcp",
-  "version": "0.3.0-beta.4",
+  "version": "0.3.0-beta.6",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "MCP server to interrogate clearotron trademark-clearance runs — list/read artifacts, trace the full decision flow, telemetry/cost, coverage, single-run search, and a gated single-step what-if. Imports the clearotron-driver read-only; touches no driver/template/deploy files.",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "clearotron",
   "type": "module",
-  "version": "0.3.0-beta.4",
+  "version": "0.3.0-beta.6",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",

package/portal-ui/dist/assets/{index-DWYCsOCJ.js → index-DBUVdQT-.js}

@@ -10309,6 +10309,12 @@ function decodeStatus(status, body) {
 			};
 			return { kind: "notFound" };
 		case 409: {
+			const refused = refusalDetail(body);
+			if (refused?.code.startsWith("store_")) return {
+				kind: "reject",
+				errors: errorsOf(body),
+				detail: refused
+			};
 			const msg = errorsOf(body)[0] ?? "This action could not be completed.";
 			return /version|conflict/i.test(msg) && !/confirmation|plan again|re-confirm/i.test(msg) ? {
 				kind: "conflict",

package/portal-ui/dist/index.html

@@ -49,7 +49,7 @@
     -->
     <link rel="preconnect" href="https://api.fontshare.com" crossorigin />
     <link href="https://api.fontshare.com/v2/css?f[]=satoshi@400,500,700,900&display=swap" rel="stylesheet" />
-    <script type="module" crossorigin src="/portal/assets/index-DWYCsOCJ.js"></script>
+    <script type="module" crossorigin src="/portal/assets/index-DBUVdQT-.js"></script>
     <link rel="stylesheet" crossorigin href="/portal/assets/index-Cv-E_agg.css">
   </head>
   <body>

package/portal-ui/package.json

@@ -2,7 +2,7 @@
   "name": "portal-ui",
   "private": true,
   "type": "module",
-  "version": "0.3.0-beta.4",
+  "version": "0.3.0-beta.6",
   "license": "AGPL-3.0-only",
   "description": "The unified trademark portal UI. One address, one login: who you are decides what you see. Built as a static bundle, served by driver/portal-service.mjs — the browser never reaches profile-service or recipe-service.",
   "engines": {

package/providers/oauth-mcp-bridge/CHANGELOG.md

@@ -1,5 +1,13 @@
 # trademark-oauth-mcp-bridge
 
+## 0.3.0-beta.6
+
+No changes in this release.
+
+## 0.3.0-beta.5
+
+No changes in this release.
+
 ## 0.3.0-beta.4
 
 No changes in this release.

package/providers/oauth-mcp-bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-oauth-mcp-bridge",
-  "version": "0.3.0-beta.4",
+  "version": "0.3.0-beta.6",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "OAuth 2.1 MCP stdio bridge used by the engine's case-law gather stage (courtlistener / legaldatahunter).",

package/scripts/e2e.mjs

@@ -1057,6 +1057,57 @@ export function doorDisagreementLine(caseId, answers, { expectTerminal = null }
     + `and naming the accepter would blame the door that behaved. Declare \`doors\` on the case to say which doors can admit it.`;
 }
 
+/**
+ * The doors ONE case goes through: the scenario's doors, narrowed by the case's own `doors` list when it
+ * declares one. Pure, and settled for EVERY case before anything is queued, so a mistyped declaration
+ * refuses the round instead of quietly shrinking it.
+ *
+ * WHY A CASE MAY NARROW THEM. `door: "all"` exists to catch a rule one door enforces and another does not,
+ * and that only works when every door can ASK the case's question. R0e asks what a request naming no
+ * customer falls back to. The ops door rides an accounts-scoped key, and its gate refuses such a request
+ * before that question is reached, correctly. So comparing that door's answer with the cli door's reported
+ * a disagreement between two doors that both behaved. A declared list says which doors can answer; a door
+ * left out is reduced coverage the case chose, recorded with its reason, and never a disagreement.
+ *
+ * Refused, each naming the case: a list that is empty or not a list of names, a name that is no door at
+ * all, and a door this scenario does not drive. Each of those would run the case through fewer doors than
+ * its author meant, with nothing saying so.
+ */
+export function caseDoors(scenarioDoors, kase = {}) {
+  const declared = kase?.doors;
+  if (declared == null) return { asked: [...scenarioDoors], notAsked: [] };
+  const id = kase?.id ?? "(unnamed case)";
+  if (!Array.isArray(declared) || !declared.length || declared.some((d) => typeof d !== "string" || !d))
+    throw new Error(`${id}: \`doors\` must be a non-empty list of door names, got ${JSON.stringify(declared)}`);
+  const unknown = declared.filter((d) => !Object.hasOwn(DOORS, d));
+  if (unknown.length)
+    throw new Error(`${id}: \`doors\` names ${unknown.map((d) => JSON.stringify(d)).join(", ")}, which is not a door (${Object.keys(DOORS).join(", ")})`);
+  const outside = declared.filter((d) => !scenarioDoors.includes(d));
+  if (outside.length)
+    throw new Error(`${id}: \`doors\` names ${outside.join(", ")}, which this scenario does not drive (${scenarioDoors.join(", ")})`);
+  const said = kase["why-doors"];
+  const why = (Array.isArray(said) ? said.join(" ") : String(said ?? "")).replace(/\s+/g, " ").trim()
+    || "the case declares which doors can answer it";
+  return { asked: scenarioDoors.filter((d) => declared.includes(d)), notAsked: scenarioDoors.filter((d) => !declared.includes(d)).map((door) => ({ door, why })) };
+}
+
+/**
+ * One round's door coverage, read off its receipt: the cases whose doors disagreed, the cases that lost a
+ * door to the transport, and the cases that left a door out by declaration. `reduced` counts a case once
+ * however many of those it has. ONE reading for `report`, so the count on the summary line and the lines
+ * under it cannot be two derivations of one fact.
+ */
+export function doorCoverage(rec) {
+  const cases = rec?.cases ?? [];
+  const dis = cases.filter((c) => !c.agreed);
+  const lost = cases
+    .map((c) => ({ c, out: (c.answers || []).filter((a) => (a.answerClass ?? doorAnswerClass(a)) === DOOR_ANSWER.INFRA_UNAVAILABLE) }))
+    .filter((x) => x.out.length);
+  const chose = cases.filter((c) => Array.isArray(c.notSubmitted) && c.notSubmitted.length);
+  const reduced = new Set([...lost.map((x) => x.c.id), ...chose.map((c) => c.id)]).size;
+  return { dis, lost, chose, reduced };
+}
+
 const enqueue = (job, door) =>
   door === "cli" ? enqueueViaCli(job)
   : door === "ops-mcp" ? enqueueViaMcp(job)
@@ -1912,13 +1963,20 @@ async function cmdRun(id) {
   // ever wants the launch to stop.
   printPreviousRoundNotice(s);
 
-  const jobs = s.job ? [{ id: s.id, job: s.job }] : (s.cases ?? []).map((c) => ({ id: c.id, job: c.job, what: c.what, oneMatterAcrossDoors: c.oneMatterAcrossDoors === true, expectTerminal: (c.expect ?? {}).terminal ?? null }));
+  const jobs = s.job ? [{ id: s.id, job: s.job, kase: {} }] : (s.cases ?? []).map((c) => ({ id: c.id, job: c.job, what: c.what, oneMatterAcrossDoors: c.oneMatterAcrossDoors === true, expectTerminal: (c.expect ?? {}).terminal ?? null, kase: c }));
 
   // door: "all" is the point of R0 — a rule enforced in one door and not another is exactly the #98
   // asymmetry. Every case goes through EVERY drivable door and the answers are compared. runner.mjs's
   // claimAndPrep is the wall they all land on, so they must agree; if they ever do not, the door that
-  // admits is the bug, not the door that refuses.
+  // admits is the bug, not the door that refuses. A case that declares `doors` goes through those alone
+  // (caseDoors says why a case may).
   const doors = s.door === "all" ? Object.entries(DOORS).filter(([, d]) => d.real).map(([k]) => k) : [s.door];
+  // Settled for every case BEFORE the first enqueue: a declaration that cannot be honoured refuses the
+  // round here, not after half of it has been queued.
+  const doorsFor = new Map();
+  for (const { id, kase } of jobs) {
+    try { doorsFor.set(id, caseDoors(doors, kase)); } catch (e) { die(`e2e: ${s.id}: ${e.message}. Nothing was queued.`); }
+  }
 
   // `token` is what lets `report` — a later, separate process — read THIS round rather than every round
   // that ever used these refs. Without it the second same-day round's report mixes both rounds' queue
@@ -1933,11 +1991,15 @@ async function cmdRun(id) {
     // whether the doors are one matter or two. See refForRun and refForDoor.
     const roundRef = refForRun(job.ref);
     const answers = [];
-    for (const d of doors) {
+    // The scenario's `doors` still decide the ref suffix, so a case asked at one door keeps the ref it
+    // would have had at that door in a round that asked every door.
+    const { asked, notAsked } = doorsFor.get(caseId);
+    for (const d of asked) {
       const res = await enqueue({ ...job, ref: refForDoor(roundRef, d, { doors, oneMatterAcrossDoors }) }, d);
       answers.push({ door: d, ...res });
     }
-    const { agreed, unavailable, reducedCoverage } = doorAsymmetry(answers);
+    const { agreed, unavailable, reducedCoverage: lostADoor } = doorAsymmetry(answers);
+    const reducedCoverage = lostADoor || notAsked.length > 0;
     console.log(`  ${agreed ? (answers[0].ok ? "queued " : "REFUSED") : "DISAGREE"} ${caseId}${what ? ` — ${what}` : ""}`);
     // — ONE LINE PER JOB, ALWAYS. This printed one line per CASE and, when the doors agreed and
     // accepted, nothing per door — so a 2-case round across 2 doors printed 2 lines while enqueuing 4
@@ -1979,7 +2041,12 @@ async function cmdRun(id) {
     // `expect.reasonMatches`, and a case refused for the WRONG reason read exactly like one refused for
     // the right one. Whitespace-collapsed and truncated because the two doors answer in different shapes
     // (the CLI returns JSON, the MCP door an error string) and the receipt is a record, not a transcript.
+    // A door the case left out by declaration, named with the case's reason. Not a disagreement and not a
+    // lost door: the case chose it, and the round's reader still needs to know the case compared fewer doors.
+    for (const n of notAsked)
+      console.log(`      ⓘ [${n.door}] not submitted — ${n.why}; this case has reduced door coverage by its own declaration`);
     round.cases.push({ id: caseId, ref: job.ref, submittedRef: roundRef, agreed, reducedCoverage,
+      ...(notAsked.length ? { notSubmitted: notAsked } : {}),
       answers: answers.map((a) => ({ door: a.door, accepted: a.ok,
         // — the job id this door queued, on the RECEIPT as well as on the screen. `report` runs in
         // a later process and could otherwise only re-derive the job set from refs; a watcher reading
@@ -3175,14 +3242,19 @@ async function cmdReport(id, { round: requestedToken = null } = {}) {
       console.log(`\ndoors: NO RECEIPT at ${receiptPath(POOL_ROOT, s.id)} — cannot tell whether the doors agreed`);
       toInvestigate.push(`no doors receipt — run this scenario with the current e2e.mjs to record what each door answered`);
     } else {
-      const dis = rec.cases.filter((c) => !c.agreed);
-      // — a door lost to the transport is REDUCED COVERAGE, and it is reported as its own line.
-      // Older receipts carry no answerClass; `doorAnswerClass` falls back to "answered" for them, which
-      // reproduces the previous reading rather than inventing a retrospective one.
-      const unavailable = rec.cases
-        .map((c) => ({ c, out: (c.answers || []).filter((a) => (a.answerClass ?? doorAnswerClass(a)) === DOOR_ANSWER.INFRA_UNAVAILABLE) }))
-        .filter((x) => x.out.length);
-      console.log(`\ndoors: ${rec.doors.join(", ") || "(not recorded)"} — ${rec.cases.length} case(s), ${dis.length} disagreement(s), ${unavailable.length} case(s) with reduced door coverage`);
+      // — a door lost to the transport is REDUCED COVERAGE, and it is reported as its own line; so is a
+      // door a case left out by declaration. Older receipts carry no answerClass; `doorAnswerClass` falls
+      // back to "answered" for them, which reproduces the previous reading rather than inventing a
+      // retrospective one. One reading of the receipt, doorCoverage, for the count and the lines under it.
+      const { dis, lost: unavailable, chose, reduced } = doorCoverage(rec);
+      console.log(`\ndoors: ${rec.doors.join(", ") || "(not recorded)"} — ${rec.cases.length} case(s), ${dis.length} disagreement(s), ${reduced} case(s) with reduced door coverage`);
+      for (const c of chose) {
+        const who = c.notSubmitted.map((n) => `${n.door} (${n.why})`).join(", ");
+        console.log(`  ⓘ ${c.id}: not submitted to ${who}`);
+        // NOT toInvestigate, for the same reason as a lost door below: the case chose to compare fewer
+        // doors, and that is a limit on what this round proved, not a finding about the product.
+        notProbed.push(`${c.id}: not submitted to ${who} — the case declares which doors can answer it, so its door agreement covers fewer doors than the scenario drives`);
+      }
       for (const c of dis) {
         // — the RECEIPT does not carry the case's contract, so it is joined back to the scenario by
         // id. A receipt written before this field existed reads null and gets the old sentence, which is

package/scripts/engine-probe.mjs

@@ -35,7 +35,7 @@
 // env at module top — and every static import evaluates before this file's own body runs, so applying the
 // aliases in the body would be too late for the capture it is meant to fix.
 import "../shared/env-local.mjs";
-import { probeEngineTurn, probeFailureText, PROBE_MODEL, PROBE_TIMEOUT_SEC } from "../driver/engine/probe.mjs";
+import { probeEngineTurn, probeFailureText, PROBE_TIMEOUT_SEC } from "../driver/engine/probe.mjs";
 import { isEntrypoint } from "../shared/is-entrypoint.mjs";   // — realpath both sides, or a symlinked invocation exits 0 silently
 
 const argv = process.argv.slice(2);
@@ -62,7 +62,7 @@ if (isEntrypoint(import.meta.url)) {
   const env = engine ? { ...process.env, CLEAROTRON_AI: engine } : process.env;
   const asJson = argv.includes("--json");
   if (!asJson) {
-    console.error(`engine-probe: one ${PROBE_MODEL}-tier turn, up to ${PROBE_TIMEOUT_SEC}s, on this box's own `
+    console.error(`engine-probe: one turn on the engine's cheapest model, up to ${PROBE_TIMEOUT_SEC}s, on this box's own `
       + `credential — real, and it costs whatever one cheap turn costs.`);
   }
   const verdict = await probeEngineTurn({ env });

package/scripts/env-classify.mjs

@@ -346,6 +346,9 @@ export const DEPLOYMENT_NAMES = new Set([
   // by nothing else, so moving it to the house prefix dropped it through to `tuning` — the bucket step 3
   // deletes from. The audience did not change; only the spelling did, and this list is what says so.
   "CLEAROTRON_DEMO",
+  // Set by the install on the copy it starts after moving out of npx's cache, never by an operator. Its
+  // row declares `deployment`, and no shape matches it, so unlisted it would fall through to `tuning`.
+  "CLEAROTRON_RELOCATED",
   // Three names read only through optional chaining, so no catalogue check saw them until the scanner
   // learned `?.`. Each row declares `deployment`, and no shape matches them (`_PORT$` does not take
   // `_PORTS`), so unlisted each fell through to `tuning`, the bucket step 3 deletes from. The first is set

package/shared/connect-clients.mjs

@@ -289,6 +289,10 @@ export const leadRouteFor = (id) => {
  * @param {{ stdioRoutes?: object, publicAddress?: string|null, operator?: string|null }} have
  * @param {"disk"|"public-http"} [route] defaults to the row's `lead`
  */
+/** The first step of every "on this computer" route when the install runs under WSL. */
+export const WSL_STEP = "Do this inside your WSL terminal, the Linux one where Clearotron is installed, not in PowerShell. "
+  + "An assistant running on Windows itself cannot start it from there.";
+
 export function whatItNeeds(client, have = {}, route = client?.lead) {
   if (!client) return null;
   const author = client.routes?.[route];
@@ -320,6 +324,10 @@ export function whatItNeeds(client, have = {}, route = client?.lead) {
         reason: "this copy of the software is incomplete, so there is nothing to hand your assistant",
         fix: "whoever installed it will need to install it again" };
     }
+    // ON WSL, "THIS COMPUTER" IS THE LINUX INSIDE WINDOWS. The line names WSL paths, so it runs in the WSL
+    // terminal where Clearotron is installed. Pasted into PowerShell it fails, and an assistant running on
+    // Windows itself could not start a program at a Linux path anyway.
+    if (have.wsl) steps.unshift({ text: WSL_STEP });
     const first = steps.find((s) => s.copy)?.copy;
     // `command` and `stdio` ride for the terminal, which prints a disk offer's copy by its shape.
     return { client, served: true, route, steps, launch: client.launch ?? null, enables: null, ...evidence,

package/shared/names-in-force.mjs

@@ -142,6 +142,7 @@ export const NAMES_IN_FORCE = Object.freeze([
   "CLEAROTRON_REGISTER_PLAN",
   "CLEAROTRON_REGISTER_RECORD_LOG",
   "CLEAROTRON_RELEASE_WAIT_MS",
+  "CLEAROTRON_RELOCATED",
   "CLEAROTRON_REOPEN_MAX_FETCH",
   "CLEAROTRON_REPLAY_ROOTS",
   "CLEAROTRON_REPLAY_SNAPSHOT",