clearotron 0.3.1-beta.0 → 0.3.1-beta.1

package/build-info.json

@@ -1,4 +1,4 @@
 {
-  "commit": "ee3ad6c3a561265588b8db72f153e3eb6694d9fe",
-  "version": "0.3.1-beta.0"
+  "commit": "87debabcd2a406e8a5554e5f64b20f3864c941da",
+  "version": "0.3.1-beta.1"
 }

package/driver/CHANGELOG.md

@@ -1,5 +1,13 @@
 # clearotron-driver
 
+## 0.3.1-beta.1
+
+### Patch Changes
+
+- c3228f3: Fixed: A clearance that stops is recorded as owing a notice even when the folder its notice is queued in cannot be written to.
+- c3228f3: Fixed: Check now reports the same problems Save would refuse, so a company setting can no longer pass the check and then fail to save.
+- c3228f3: Fixed: On older Windows-Subsystem installations the engine now identifies the platform by its interop registration rather than by the kernel version string.
+
 ## 0.3.1-beta.0
 
 ### Patch Changes

package/driver/package.json

@@ -2,7 +2,7 @@
   "name": "clearotron-driver",
   "private": true,
   "type": "module",
-  "version": "0.3.1-beta.0",
+  "version": "0.3.1-beta.1",
   "license": "AGPL-3.0-only",
   "description": "Deterministic driver for the trademark clearance workflow: orchestration in code (fan-out, fan-in barrier, gating, retries); the model does judgment leaves only, through a reasoning CLI spawned per stage.",
   "engines": {

package/driver/pipeline-knockout.mjs

@@ -1146,7 +1146,19 @@ export async function knockoutInner(ctx, job, opts = {}) {
     // because mark_sent is the only clear and it settles a failure.json on the same evidence a delivery
     // needs. The marker is NOT duplicated — the primary lane's own packet lands `<runId>.failed.pending`
     // and the *.pending watch matches it; a second `<runId>.pending` would outlive every settle.
+    // THE RECORD OF AN OBLIGATION MUST NOT BE CONTINGENT ON THE ACTION IT OBLIGES — clearance parity,
+    // and the same defect this lane would have had. `writeOutboxPacket` returns null rather than throwing,
+    // so an unwritable outbox reaches the raw marker write below; with the flag after it, that throw took
+    // the record of the obligation with it and the run ended failed and NOT owed. Guards first, then the
+    // flag, then the writes that can fail.
     let failPingSent = false;
+    try { rmSync(join(run.runDir, ".sent")); } catch { /* none */ }
+    try { rmSync(driverDir(run.runDir, "send-receipts.json"), { force: true }); } catch { /* none */ }
+    // a fresh notice supersedes an older send's skip-guards (a resumed-then-failed-again run must
+    // still notify — the .sent/receipts invariant, clearance parity)
+    try { writeRunStatus(ctx, { sendPending: true }); } catch (sErr) {
+      note(`knockout failure notice could NOT be recorded as owed (${String(sErr?.message ?? sErr).slice(0, 100)}) — the run directory is unwritable`);
+    }
     try {
       const rich = buildFailurePacket({
         runId, agent, job, failedStage, shortReason, terminalKind,
@@ -1163,12 +1175,7 @@ export async function knockoutInner(ctx, job, opts = {}) {
         mkdirSync(config.outboxDir, { recursive: true });
         writeFileSync(join(config.outboxDir, `${runId}.pending`), `${agent}\n`);
       }
-      // a fresh notice supersedes an older send's skip-guards (a resumed-then-failed-again run must
-      // still notify — the .sent/receipts invariant, clearance parity)
-      try { rmSync(join(run.runDir, ".sent")); } catch { /* none */ }
-      try { rmSync(driverDir(run.runDir, "send-receipts.json"), { force: true }); } catch { /* none */ }
-      writeRunStatus(ctx, { sendPending: true });
-    } catch (nfErr) { note(`knockout failure-notice write skipped (${String(nfErr?.message ?? nfErr).slice(0, 100)})`); }
+    } catch (nfErr) { note(`knockout failure notice is owed but its packet/marker could not be written (${String(nfErr?.message ?? nfErr).slice(0, 100)}) — status.json carries the obligation`); }
     note(`=== KNOCKOUT ${terminalKind === REFUSAL_TERMINAL_KIND ? "REFUSED" : "FAILED"} ${run.codename} at ${failedStage}: ${shortReason} ===\n`);
     // `codename`: this lane's terminals reach the SAME CLI exit as the clearance lane's, and the
     // CLI composes its resume line from the returned identity. Without it a knockout operator is the only

package/driver/pipeline.mjs

@@ -15374,6 +15374,22 @@ async function pipelineInner(job, opts = {}) {
     // for each id the run was known by, not this suffixed form — and the sweep re-arms off whatever is
     // on disk, which is how a permanent SEND PENDING was born. So: the flag always, the packet and the
     // marker only when nothing wrote them.
+    // THE RECORD OF AN OBLIGATION MUST NOT BE CONTINGENT ON THE ACTION IT OBLIGES. The flag says
+    // somebody is owed a notice. Setting it downstream of the attempt to deliver that notice means it is
+    // only set when the delivery path already worked — the case that needed it least. This block did
+    // exactly that for one revision: `writeOutboxPacket` swallows its own failure and returns null, so
+    // an unwritable outbox fell to the branch below, where the RAW marker write threw and took the flag
+    // with it. The run then ended failed and NOT owed, in the one condition where the flag is the only
+    // thing that could still record the obligation. Order, therefore: supersede the old send's guards,
+    // arm the flag, and only then attempt the writes that can fail.
+    try { rmSync(join(run.runDir, ".sent")); } catch { /* none */ }
+    try { rmSync(driverDir(run.runDir, "send-receipts.json"), { force: true }); } catch { /* none */ }
+    // A fresh notice supersedes an older send's .sent marker AND its per-channel receipts (a resumed run
+    // that fails again must still notify on every channel, not be skip-guarded by the earlier send's).
+    // Both are best-effort removals above, so neither can keep the flag below from being written.
+    try { writeRunStatus(ctx, { sendPending: true }); } catch (sErr) {
+      note(`failure notice could NOT be recorded as owed (${String(sErr?.message ?? sErr).slice(0, 100)}) — the run directory is unwritable, so nothing here can say a notice is outstanding`);
+    }
     try {
       if (!failPingSent) {
         const packet = buildFailurePacket({
@@ -15386,15 +15402,13 @@ async function pipelineInner(job, opts = {}) {
         mkdirSync(config.outboxDir, { recursive: true });
         writeFileSync(join(config.outboxDir, `${packet.runId}.pending`), `${agent}\n`);
       }
-      // same per-send invariant as the delivery handoff: a fresh notice supersedes an older send's
-      // .sent marker AND its per-channel receipts (e.g. a resumed run that fails again must still
-      // notify on every channel, not be skip-guarded by the earlier send's receipts).
-      try { rmSync(join(run.runDir, ".sent")); } catch { /* none */ }
-      try { rmSync(driverDir(run.runDir, "send-receipts.json"), { force: true }); } catch { /* none */ }
-      writeRunStatus(ctx, { sendPending: true });
       note(`failure notice OWED (${failPingSent ? "event lane wrote the packet" : "handoff wrote the packet"}) — mark_sent is the only clear`);
     } catch (nfErr) {
-      note(`failure-notice arming skipped (${String(nfErr?.message ?? nfErr).slice(0, 100)}) — .failed + status.json remain the record`);
+      // NOT "status.json remains the record" — that sentence was here and it was false on exactly the
+      // path that reaches this catch, because the flag was written after the throw. It is written before
+      // it now, so the record genuinely does stand, and saying which part failed is what keeps the next
+      // reader looking in the right place.
+      note(`failure notice is owed but its packet/marker could not be written (${String(nfErr?.message ?? nfErr).slice(0, 100)}) — status.json carries the obligation; the outbox does not`);
     }
     note(`=== FAILED ${run.codename} at ${failedStage}: ${reason} ===\n`);
     // `codename` matches the three sibling terminals (postpone, recovery park, cancelled). Without it

package/driver/profile-page.html

@@ -223,7 +223,7 @@ function renderEditor(key, p, contextPack, derived, framework, isNew) {
       <div class="row2">
         ${f("Default trademark classes", "f_classes", (p.defaultClasses||[]).join(", "), "Comma-separated Nice class numbers (e.g. 9, 41). Used only when a request doesn't list its own classes.")}
       </div>
-      ${f("Default countries", "f_juris", (p.defaultJurisdictions||[]).join(", "), "Comma-separated country codes (e.g. US, EU, UK) that matter to this customer. A request can override or add to these.")}
+      ${f("Default jurisdictions", "f_juris", (p.defaultJurisdictions||[]).join(", "), "The territories that matter to this customer, comma-separated: a country name like France, or a two-letter code the engine holds such as US, GB or EU. A request can override or add to these.")}
       ${f("Email domains", "f_match", (p.matchDomains||[]).join(", "), "Email domains that automatically map a request to this customer (e.g. acme.com). Usually left empty — intake normally tags the customer directly.", undefined, true)}
       ${ta("The customer's own names", "f_excl", (p.selfExclusionOwners||[]).join("\n"), "The customer's own and affiliated company names, one per line. We never flag the customer against its own marks.", undefined, true)}
       <div class="sectionh">Default search</div>
@@ -353,8 +353,16 @@ function prettyServerError(msg) {
     [/must be CONTEXT[\s\S]*not a decision rule/i,       "f_pack",      "Background must be facts and concerns, not rules — rephrase any rule as a concern or a question."],
     [/exceeds the \d+-char budget/i,                     "f_pack",      "Background is too long — keep it under 8000 characters."],
     [/delivery\.email must be/i,                         "f_email",     "Pick a cover email format from the list."],
+    // THE TERRITORY REFUSAL NAMES THE OFFENDING ENTRIES ITSELF, so this maps it to the field and keeps
+    // the server's sentence rather than replacing it — the other rows replace jargon, and this one is
+    // already the plainer of the two. Unmapped, it landed in the headline list with no field marked,
+    // which is the half that tells a reader WHERE.
+    [/(is not a territory|are not territories) the engine can search/i, "f_juris",
+      (m) => String(m).replace(/^profiles\/[^:]+:\s*/, "")],
   ];
-  for (const [re, id, friendly] of MAP) if (re.test(M)) return { id, friendly };
+  // `friendly` may be a FUNCTION where the server's own wording is better than a replacement — it
+  // names the offending entries, which a fixed sentence cannot.
+  for (const [re, id, friendly] of MAP) if (re.test(M)) return { id, friendly: typeof friendly === "function" ? friendly(M) : friendly };
   return { id:null, friendly:M };
 }
 function showServerErrors(headline, errors) {
@@ -490,7 +498,7 @@ function renderProjectEditor(customer, project, data, isNew) {
     <div class="row2">
       ${f("Default classes", "p_classes", (ov.defaultClasses||[]).join(", "), inheritHint((inh.defaultClasses||[]).join(", ")||"—"))}
     </div>
-    ${f("Default countries", "p_juris", (ov.defaultJurisdictions||[]).join(", "), inheritHint((inh.defaultJurisdictions||[]).join(", ")||"—"))}
+    ${f("Default jurisdictions", "p_juris", (ov.defaultJurisdictions||[]).join(", "), inheritHint((inh.defaultJurisdictions||[]).join(", ")||"—"))}
     <div class="field"><label for="p_email">Cover email format</label><div class="hint">Inherit, or set just for this project.</div>
       <select id="p_email"><option value=""${!d?" selected":""}>Inherit</option><option value="summary"${d&&d.email!=="table"?" selected":""}>Summary</option><option value="table"${d&&d.email==="table"?" selected":""}>Table</option></select></div>
     <div class="field"><label for="p_priv">Confidentiality marking</label><div class="hint">Only applies when a format is set above.</div><select id="p_priv"><option value=""${d&&d.privileged===false?"":" selected"}>Privileged &amp; Confidential</option><option value="no"${d&&d.privileged===false?" selected":""}>No marking</option></select></div>

package/driver/suite-census.json

@@ -3904,8 +3904,8 @@
           "todos": 0
         },
         "runner.failure-backstop.test.mjs": {
-          "tests": 3,
-          "asserts": 25,
+          "tests": 4,
+          "asserts": 29,
           "skips": 0,
           "todos": 0
         },
@@ -5737,6 +5737,12 @@
           "skips": 0,
           "todos": 0
         },
+        "checkAndSaveCannotDisagree.test.ts": {
+          "tests": 2,
+          "asserts": 6,
+          "skips": 0,
+          "todos": 0
+        },
         "clearancesKeepsItsControls.test.ts": {
           "tests": 4,
           "asserts": 8,

package/mcp-server/CHANGELOG.md

@@ -1,5 +1,9 @@
 # trademark-artifacts-mcp
 
+## 0.3.1-beta.1
+
+No changes in this release.
+
 ## 0.3.1-beta.0
 
 ### Patch Changes

package/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-artifacts-mcp",
-  "version": "0.3.1-beta.0",
+  "version": "0.3.1-beta.1",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "MCP server to interrogate clearotron trademark-clearance runs — list/read artifacts, trace the full decision flow, telemetry/cost, coverage, single-run search, and a gated single-step what-if. Imports the clearotron-driver read-only; touches no driver/template/deploy files.",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "clearotron",
   "type": "module",
-  "version": "0.3.1-beta.0",
+  "version": "0.3.1-beta.1",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",

package/portal-ui/dist/assets/{index-CwPAS0we.js → index-DLa7PlKY.js}

@@ -18670,7 +18670,7 @@ var PROFILE_FIELDS = [
 		item: {
 			ok: isTerritoryEntry,
 			strict: true,
-			expected: "a territory from the picker below, or a two-letter code"
+			expected: "a territory from the picker below, or a two-letter country code the engine holds, like US, GB or EU"
 		},
 		hint: "One per line or comma-separated — pick from the list below, or type a two-letter code like US, EU or GB; both are understood. A region counts as one entry: European Union covers its member states, so there is no need to add them. Anything the engine cannot search is refused rather than stored, because a stored one is a default that quietly does nothing."
 	},
@@ -20572,6 +20572,15 @@ function Profile({ ctx }) {
 			return;
 		}
 		if (action === "validate") {
+			const errors = Array.isArray(r.value["errors"]) ? r.value["errors"] : [];
+			if (r.value["ok"] === false || errors.length) {
+				setChecked(false);
+				setProblem({
+					title: errors.length === 1 ? "1 thing to fix before saving:" : `${errors.length} things to fix before saving:`,
+					lines: errors.length ? errors : ["This company’s settings were refused, and no reason came back."]
+				});
+				return;
+			}
 			setChecked(true);
 			return;
 		}
@@ -21588,6 +21597,16 @@ function ProjectEditor({ account, project, mayChange, onBack }) {
 			return;
 		}
 		if (action === "validate") {
+			const dryRun = "value" in r && r.value && typeof r.value === "object" ? r.value : {};
+			const errors = Array.isArray(dryRun["errors"]) ? dryRun["errors"] : [];
+			if (dryRun["ok"] === false || errors.length) {
+				setChecked(false);
+				setProblem({
+					title: "That cannot be saved as written",
+					lines: errors.length ? errors : ["This project was refused, and no reason came back."]
+				});
+				return;
+			}
 			setChecked(true);
 			return;
 		}

package/portal-ui/dist/index.html

@@ -49,7 +49,7 @@
     -->
     <link rel="preconnect" href="https://api.fontshare.com" crossorigin />
     <link href="https://api.fontshare.com/v2/css?f[]=satoshi@400,500,700,900&display=swap" rel="stylesheet" />
-    <script type="module" crossorigin src="/portal/assets/index-CwPAS0we.js"></script>
+    <script type="module" crossorigin src="/portal/assets/index-DLa7PlKY.js"></script>
     <link rel="stylesheet" crossorigin href="/portal/assets/index-Cv-E_agg.css">
   </head>
   <body>

package/portal-ui/package.json

@@ -2,7 +2,7 @@
   "name": "portal-ui",
   "private": true,
   "type": "module",
-  "version": "0.3.1-beta.0",
+  "version": "0.3.1-beta.1",
   "license": "AGPL-3.0-only",
   "description": "The unified trademark portal UI. One address, one login: who you are decides what you see. Built as a static bundle, served by driver/portal-service.mjs — the browser never reaches profile-service or recipe-service.",
   "engines": {

package/providers/oauth-mcp-bridge/CHANGELOG.md

@@ -1,5 +1,9 @@
 # trademark-oauth-mcp-bridge
 
+## 0.3.1-beta.1
+
+No changes in this release.
+
 ## 0.3.1-beta.0
 
 No changes in this release.

package/providers/oauth-mcp-bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-oauth-mcp-bridge",
-  "version": "0.3.1-beta.0",
+  "version": "0.3.1-beta.1",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "OAuth 2.1 MCP stdio bridge used by the engine's case-law gather stage (courtlistener / legaldatahunter).",