clearotron 0.3.1-beta.3 → 0.3.1

package/driver/suite-census.json

@@ -849,6 +849,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-two-form-matter-owes-a-read-per-form.test.mjs": {
+          "tests": 8,
+          "asserts": 25,
+          "skips": 0,
+          "todos": 0
+        },
         "a-unit-configuration-cannot-reach-is-resolved-at-install.test.mjs": {
           "tests": 5,
           "asserts": 14,
@@ -1384,8 +1390,8 @@
           "todos": 0
         },
         "common-law-receipts.test.mjs": {
-          "tests": 36,
-          "asserts": 129,
+          "tests": 40,
+          "asserts": 141,
           "skips": 0,
           "todos": 0
         },
@@ -1445,7 +1451,7 @@
         },
         "connect-clients-are-data.test.mjs": {
           "tests": 17,
-          "asserts": 87,
+          "asserts": 91,
           "skips": 0,
           "todos": 0
         },
@@ -1511,7 +1517,7 @@
         },
         "contract-audit.test.mjs": {
           "tests": 54,
-          "asserts": 167,
+          "asserts": 168,
           "skips": 0,
           "todos": 0
         },
@@ -1731,6 +1737,12 @@
           "skips": 0,
           "todos": 0
         },
+        "deprecating-below-a-stable-touches-nothing-above-it.test.mjs": {
+          "tests": 4,
+          "asserts": 18,
+          "skips": 0,
+          "todos": 0
+        },
         "depth-ladder-loop-bounds.test.mjs": {
           "tests": 6,
           "asserts": 10,
@@ -2211,6 +2223,12 @@
           "skips": 0,
           "todos": 0
         },
+        "every-json-response-says-how-it-may-be-cached.test.mjs": {
+          "tests": 4,
+          "asserts": 14,
+          "skips": 0,
+          "todos": 0
+        },
         "every-lane-declares-its-transport-position.test.mjs": {
           "tests": 7,
           "asserts": 12,
@@ -2829,6 +2847,12 @@
           "skips": 0,
           "todos": 0
         },
+        "no-two-dictated-queries-fold-to-one-key.test.mjs": {
+          "tests": 5,
+          "asserts": 10,
+          "skips": 0,
+          "todos": 0
+        },
         "no-vendor-provenance-in-the-public-cut.test.mjs": {
           "tests": 4,
           "asserts": 11,
@@ -4545,6 +4569,12 @@
           "skips": 0,
           "todos": 0
         },
+        "the-containment-rule-does-not-depend-on-the-string-tmp.test.mjs": {
+          "tests": 2,
+          "asserts": 3,
+          "skips": 0,
+          "todos": 0
+        },
         "the-corrections-section-is-an-allowlist.test.mjs": {
           "tests": 6,
           "asserts": 18,
@@ -4563,6 +4593,12 @@
           "skips": 0,
           "todos": 0
         },
+        "the-cut-approves-its-own-parked-run.test.mjs": {
+          "tests": 4,
+          "asserts": 10,
+          "skips": 0,
+          "todos": 0
+        },
         "the-demo-account-shows-a-configured-customer.test.mjs": {
           "tests": 4,
           "asserts": 24,
@@ -5786,8 +5822,8 @@
       "ext": "ts",
       "perFile": {
         "api.test.ts": {
-          "tests": 44,
-          "asserts": 176,
+          "tests": 45,
+          "asserts": 183,
           "skips": 0,
           "todos": 0
         },
@@ -5918,8 +5954,8 @@
           "todos": 0
         },
         "home.test.ts": {
-          "tests": 51,
-          "asserts": 177,
+          "tests": 56,
+          "asserts": 196,
           "skips": 0,
           "todos": 0
         },

package/driver/verify.mjs

@@ -12,9 +12,9 @@ import { dirname, join, basename } from "node:path";
 import { driverDir } from "../shared/driver-dir.mjs";   //
 import { findReceiptViolations, findGridLedgerViolations, findPlatformIdentityViolations, parsePrRiskQueries, MEANING_SEAT } from "./common-law-receipts.mjs";
 // Conversion 2 — the discriminator the two rulings above key on. PURE-ish: one existsSync-shaped read.
-import { matterFrameWasRecorded } from "./matter-frame-record.mjs";
+import { matterFrameWasRecorded, frameRatifiedForms } from "./matter-frame-record.mjs";
 import { findConnotationViolations, parsePrRiskResults, MEANING_ANGLES_RE,
-  parseDispositionForm, CONNOTATION_UNRULED_REASONS } from "./connotation-search.mjs";
+  parseDispositionForm, CONNOTATION_UNRULED_REASONS, queryKey } from "./connotation-search.mjs";
 import { formSidecarName, formSidecarPath } from "./disposition-union.mjs";
 // B — the transport's own four failure states. The audit reads the run's records; this file locates them.
 import { auditDispositionCalls, CALL_FAILURE_REASONS } from "./disposition-call-audit.mjs";
@@ -354,12 +354,54 @@ function commonLawMeaningSeat(p, c) {
   try { ledgerRaw = readFileSync(join(dirname(p), `common-law-grid.half-${MEANING_SEAT}.json`), "utf8"); } catch { /* missing → fail-closed below */ }
   if (ledgerRaw == null) return fail(`grid_ledger_missing:common-law-grid.half-${MEANING_SEAT}.json absent while _driver/grid-spec.half-${MEANING_SEAT}.json dictates the meaning sweep`);
   const dictated = Array.isArray(spec?.connotation?.queries) ? spec.connotation.queries : [];
-  let recordedQ;
-  try { recordedQ = new Set(parsePrRiskResults(ledgerRaw).map((e) => String(e?.query ?? "").trim())); }
+  // COMPARED ON A KEY, NOT ON THE RAW TEXT — `queryKey` in connotation-search.mjs, beside the parser,
+  // so there is one author of what "the same query" means. The dictated spelling is the driver's; the
+  // recorded one comes back through a provider that returns typographic punctuation. Measured on a
+  // production clearance, 2026-09-16: one query of sixty-one differed by a single right single quotation
+  // mark where the driver wrote an apostrophe, and the grid had run and recorded every one of them.
+  //
+  // THE ORIGINAL TEXT IS WHAT THE REFUSAL QUOTES, below. Somebody chasing a query that really is missing
+  // needs the spelling the driver asked for, not a flattened key.
+  let recordedRaw;
+  try { recordedRaw = parsePrRiskResults(ledgerRaw).map((e) => String(e?.query ?? "")); }
   catch (e) { return fail(`grid_ledger_unparseable:${String(e.message).slice(0, 80)}`); }
-  const dropped = dictated.filter((q) => !recordedQ.has(String(q).trim()));
-  if (dropped.length)
-    return fail(`connotation_query_unrecorded:${dropped.slice(0, 3).map((q) => abbrev(q, 40)).join(",")}${dropped.length > 3 ? ` (+${dropped.length - 3} more)` : ""}`);
+  const recordedQ = new Set(recordedRaw.map(queryKey));
+  const dropped = dictated.filter((q) => !recordedQ.has(queryKey(q)));
+  if (dropped.length) {
+    // ── THE REFUSAL SAYS WHICH OF TWO FAULTS THIS IS, because they need opposite remedies ──────────
+    //
+    // ABSENT: no recorded query resembles it, so the search was not run and the seat must run it.
+    // UNMATCHED: something close IS recorded, so the search ran and the two spellings disagree beyond
+    // what the key folds — a re-ordering, a translation, a truncation, a query the provider chose for
+    // itself. Telling the seat to "re-run the missing query" in that case asks for the one thing that
+    // cannot help, and that is what turned one attempt into four on a production clearance.
+    //
+    // NO THRESHOLD DECIDES ANYTHING (owner's ruling). The nearest recorded query is shown so a person or
+    // a seat can SEE the difference in one attempt; it never makes the gate pass. A similarity score
+    // that could pass this gate would be a score that can hide a skipped query, which is what the gate
+    // is for.
+    const nearest = (q) => {
+      const words = new Set(queryKey(q).split(" ").filter(Boolean));
+      if (!words.size) return null;
+      let best = null, bestScore = 0;
+      for (const r of recordedRaw) {
+        const rw = queryKey(r).split(" ").filter(Boolean);
+        if (!rw.length) continue;
+        const shared = rw.filter((w) => words.has(w)).length / Math.max(words.size, rw.length);
+        if (shared > bestScore) { bestScore = shared; best = r; }
+      }
+      // A single shared word is a coincidence in a sweep about one mark, where the mark's own name is in
+      // every query. Below half the words in common, say nothing rather than point at a red herring.
+      return bestScore >= 0.5 ? best : null;
+    };
+    const parts = dropped.slice(0, 3).map((q) => {
+      const n = nearest(q);
+      return n
+        ? `${abbrev(q, 40)} [unmatched; nearest recorded: ${abbrev(n, 40)}]`
+        : `${abbrev(q, 40)} [absent from the ledger]`;
+    });
+    return fail(`connotation_query_unrecorded:${parts.join(",")}${dropped.length > 3 ? ` (+${dropped.length - 3} more)` : ""}`);
+  }
   if (spec?.connotation?.disposition_required === true) {
     const recorded = parsePrRiskResults(ledgerRaw);
     const form = dispositionForm(dirname(p), spec?.connotation?.dispositions_path);
@@ -2249,6 +2291,40 @@ export const validators = {
           return fail(`intake_ask_unanswered:${asks.length - answered}:of:${asks.length}`);
       }
     } catch { /* no sidecar / unreadable — legacy run, gate off */ }
+
+    // ── A TWO-FORM MATTER OWES A READ PER FORM ────────────────────────────────────────────────────
+    //
+    // Synthesis is told to reason each ratified form through the framework and to say which conflicts
+    // move between them — or to state in one line that the reads are the same for both. Until this,
+    // nothing enforced it: the arms on that dictation match the wording, so they red when the prose
+    // moves and cannot red when a model ignores the ask. This is the deterministic floor under it.
+    //
+    // GATED ON THE FRAME HAVING FROZEN MORE THAN ONE FORM, which is why it can exist at all. A run with
+    // no frame, an archived or replayed run whose accepted call predates the field, and every ordinary
+    // single-form run reach `forms.length > 1` as false and leave here untouched — so every one of them
+    // re-verifies byte-identically. Same shape as the intake-asks gate above, and the same reason.
+    //
+    // WHAT IT ASKS FOR IS THE CHEAPEST HONEST THING: each form NAMED in the narrative, or the
+    // stated-alike line. It does not judge the reasoning — a floor that tried would be a worse version
+    // of the refutation pass, which stays the semantic backstop. It judges that the question was
+    // answered at all, which is exactly what was missing: a narrative that never mentions the second
+    // form is indistinguishable from one that examined it and found nothing, and a client who ratified
+    // two forms is choosing between them.
+    try {
+      const forms = frameRatifiedForms(dirname(p));
+      if (forms.length > 1) {
+        const text = String(c ?? "");
+        // The alternative the dictation offers, matched on its own terms rather than by a fixed
+        // sentence: a narrative may state the reads are alike instead of splitting them.
+        const alike = /\bthe reads are the same for both forms\b/i.test(text);
+        if (!alike) {
+          const unnamed = forms.filter((f) => !text.toLowerCase().includes(f.toLowerCase()));
+          if (unnamed.length)
+            return fail(`ratified_form_unread:${unnamed.length}:of:${forms.length}:${abbrev(unnamed[0], 60)}`);
+        }
+      }
+    } catch { /* no frame / unreadable — gate off, exactly as above */ }
+
     // V4-4 item 6 — narrative coverage contract (code-checked, conditional on the closure receipt):
     // a marketplace coverage gap may be stated ONLY as an attempted-and-unreachable fact, never as
     // "commission a re-run" work for a human — the driver already closed or proved-unclosable every

package/mcp-server/CHANGELOG.md

@@ -1,5 +1,24 @@
 # trademark-artifacts-mcp
 
+## 0.3.1
+
+### Patch Changes
+
+- f96c089: Fixed: A clearance for a new client can be ordered through an assistant connector without setting up a company first.
+- 56a760f: Fixed: Removing somebody's access now ends their assistant's connection on its next request. Until now an assistant that had already connected kept the access it started with for up to half an hour.
+- c05e0a7: Fixed: Ask your assistant for a client's recent searches by the client's name and it finds them. Every search in the list now says which client it was for, and which project. A search whose own record cannot be read says so, instead of appearing to belong to nobody.
+- d9798db: Fixed: A clearance that stops now always records that its notice is still owed, so a failure cannot be passed over as already handled.
+- 240673c: Fixed: Sending an access key to the engine's network address now gets a refusal that says so. It reports that the address takes an identity from the sign-in proxy and never a key.
+  
+  Fixed: That refusal also names the local door where a key is accepted. Before, it reported only a missing sign-in assertion, which sent operators to the wrong configuration.
+  
+  For operators: A program on the same machine can now reach the engine's local key door without setting a host name for it. The local door no longer applies a browser protection that only a network address needs.
+- f96c089: New: The free preview of a search lists, for each territory ordered, which registers legally bind it.
+
+## 0.3.1-beta.4
+
+No changes in this release.
+
 ## 0.3.1-beta.3
 
 ### Patch Changes

package/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-artifacts-mcp",
-  "version": "0.3.1-beta.3",
+  "version": "0.3.1",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "MCP server to interrogate clearotron trademark-clearance runs — list/read artifacts, trace the full decision flow, telemetry/cost, coverage, single-run search, and a gated single-step what-if. Imports the clearotron-driver read-only; touches no driver/template/deploy files.",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "clearotron",
   "type": "module",
-  "version": "0.3.1-beta.3",
+  "version": "0.3.1",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",