clearotron 0.3.2-beta.11 → 0.3.2-beta.13

package/driver/suite-census.json

@@ -65,7 +65,7 @@
         },
         "a-browser-run-gets-its-own-temp-root.test.mjs": {
           "tests": 12,
-          "asserts": 29,
+          "asserts": 31,
           "skips": 0,
           "todos": 0
         },
@@ -195,9 +195,15 @@
           "skips": 0,
           "todos": 0
         },
+        "a-conditional-with-nothing-stated-prints-no-conditional-line.test.mjs": {
+          "tests": 2,
+          "asserts": 6,
+          "skips": 0,
+          "todos": 0
+        },
         "a-connect-line-says-where-it-runs.test.mjs": {
           "tests": 11,
-          "asserts": 48,
+          "asserts": 56,
           "skips": 0,
           "todos": 0
         },
@@ -255,6 +261,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-demo-leaves-no-temp-copies.test.mjs": {
+          "tests": 2,
+          "asserts": 6,
+          "skips": 0,
+          "todos": 0
+        },
         "a-demo-report-declares-itself.test.mjs": {
           "tests": 5,
           "asserts": 15,
@@ -279,6 +291,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-demo-stops-when-whatever-started-it-is-gone.test.mjs": {
+          "tests": 3,
+          "asserts": 11,
+          "skips": 0,
+          "todos": 0
+        },
         "a-depth-check-that-read-nothing-is-on-the-investigate-list.test.mjs": {
           "tests": 3,
           "asserts": 8,
@@ -555,6 +573,12 @@
           "skips": 1,
           "todos": 0
         },
+        "a-next-step-the-model-writes-comes-off-at-publish.test.mjs": {
+          "tests": 12,
+          "asserts": 28,
+          "skips": 0,
+          "todos": 0
+        },
         "a-note-the-release-refuses-is-refused-on-its-own-pull-request.test.mjs": {
           "tests": 2,
           "asserts": 3,
@@ -837,6 +861,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-running-demo-connects-by-its-folder.test.mjs": {
+          "tests": 4,
+          "asserts": 18,
+          "skips": 0,
+          "todos": 0
+        },
         "a-save-that-cannot-commit-says-so.test.mjs": {
           "tests": 4,
           "asserts": 19,
@@ -1510,8 +1540,8 @@
           "todos": 0
         },
         "client-door.test.mjs": {
-          "tests": 38,
-          "asserts": 163,
+          "tests": 39,
+          "asserts": 168,
           "skips": 1,
           "todos": 0
         },
@@ -1827,6 +1857,12 @@
           "skips": 0,
           "todos": 0
         },
+        "dead-names.test.mjs": {
+          "tests": 5,
+          "asserts": 8,
+          "skips": 2,
+          "todos": 0
+        },
         "declared-park-excuses-proof-not-judgment.test.mjs": {
           "tests": 9,
           "asserts": 34,
@@ -2062,8 +2098,8 @@
           "todos": 0
         },
         "doctor-refuses-what-cannot-run.test.mjs": {
-          "tests": 8,
-          "asserts": 20,
+          "tests": 9,
+          "asserts": 22,
           "skips": 0,
           "todos": 0
         },
@@ -2513,7 +2549,7 @@
         },
         "findings-model.test.mjs": {
           "tests": 68,
-          "asserts": 257,
+          "asserts": 258,
           "skips": 0,
           "todos": 0
         },
@@ -2812,8 +2848,8 @@
           "todos": 0
         },
         "knockout-structured-read.test.mjs": {
-          "tests": 14,
-          "asserts": 63,
+          "tests": 12,
+          "asserts": 57,
           "skips": 0,
           "todos": 0
         },
@@ -3004,8 +3040,8 @@
           "todos": 0
         },
         "no-test-writes-inside-the-checkout.test.mjs": {
-          "tests": 17,
-          "asserts": 38,
+          "tests": 21,
+          "asserts": 58,
           "skips": 0,
           "todos": 0
         },
@@ -3305,7 +3341,7 @@
         },
         "portal-local-login.test.mjs": {
           "tests": 28,
-          "asserts": 111,
+          "asserts": 113,
           "skips": 0,
           "todos": 0
         },
@@ -3340,8 +3376,8 @@
           "todos": 0
         },
         "portal-service.test.mjs": {
-          "tests": 130,
-          "asserts": 701,
+          "tests": 131,
+          "asserts": 712,
           "skips": 1,
           "todos": 0
         },
@@ -3862,8 +3898,8 @@
           "todos": 0
         },
         "render.test.mjs": {
-          "tests": 161,
-          "asserts": 670,
+          "tests": 162,
+          "asserts": 675,
           "skips": 0,
           "todos": 0
         },
@@ -4486,8 +4522,8 @@
           "todos": 0
         },
         "status-and-stop-see-a-foreground-start.test.mjs": {
-          "tests": 6,
-          "asserts": 25,
+          "tests": 7,
+          "asserts": 30,
           "skips": 0,
           "todos": 0
         },
@@ -4959,6 +4995,12 @@
           "skips": 0,
           "todos": 0
         },
+        "the-house-element-stays-out-of-what-folds-in-later.test.mjs": {
+          "tests": 6,
+          "asserts": 22,
+          "skips": 0,
+          "todos": 0
+        },
         "the-identifier-sweep-fires-on-its-sentinels.test.mjs": {
           "tests": 10,
           "asserts": 36,
@@ -5327,7 +5369,7 @@
         },
         "the-sign-in-door-folds-its-administrator-help.test.mjs": {
           "tests": 5,
-          "asserts": 21,
+          "asserts": 23,
           "skips": 0,
           "todos": 0
         },
@@ -5343,9 +5385,15 @@
           "skips": 0,
           "todos": 0
         },
+        "the-status-says-which-step-the-run-is-in-now.test.mjs": {
+          "tests": 3,
+          "asserts": 8,
+          "skips": 0,
+          "todos": 0
+        },
         "the-summary-carries-structure.test.mjs": {
-          "tests": 13,
-          "asserts": 35,
+          "tests": 14,
+          "asserts": 37,
           "skips": 0,
           "todos": 0
         },
@@ -6034,7 +6082,7 @@
         },
         "root-mcp-json-connects.test.mjs": {
           "tests": 3,
-          "asserts": 13,
+          "asserts": 14,
           "skips": 0,
           "todos": 0
         },
@@ -6446,8 +6494,8 @@
           "todos": 0
         },
         "reportSections.test.ts": {
-          "tests": 9,
-          "asserts": 27,
+          "tests": 13,
+          "asserts": 41,
           "skips": 0,
           "todos": 0
         },

package/driver/systemd/README.md

@@ -33,7 +33,7 @@ missing one and writes nothing, because a unit with one placeholder left starts
 worse than one that does not start. Which units need it is **derived from the files**, not from a list —
 and `driver/unit-inventory.mjs` declares them, with a test asserting the two agree in both directions.
 
-These are for a **server, not a laptop**. On a workstation there is nothing to install: `npx clearotron start` supervises the
+These are for a **server, not a laptop**. On a workstation there is nothing to install: `clearotron start` supervises the
 same loop for you, and`node driver/runner.mjs --watch` is what to run by hand if you started with
 `--no-worker` (`INSTALL.md` §5) — one foreground process that polls for queued jobs and for parked runs whose
 window has elapsed.

package/driver/unit-inventory.mjs

@@ -45,8 +45,8 @@
 // docs/architecture/05-config-governance.md, tier 2). Getting that wrong replaces working auth with
 // placeholders that look configured, and it is not work to do beside a running round.
 //
-// So the untracked units are declared as untracked, WITH THE REASON, which is exactly what 's
-// acceptance asks for: "either has a tracked file it is compared against, or is named here with the
+// So the untracked units are declared as untracked, WITH THE REASON, which is exactly what the
+// requirement asks for: "either has a tracked file it is compared against, or is named here with the
 // reason it does not".
 //
 // ── THE CORRECTION THIS FILE NEEDED ITSELF ───────────────────────────────────────────────────────

package/driver/verify-knockout.mjs

@@ -29,25 +29,6 @@ const nameKey = (s) => norm(s).toLowerCase().replace(/\s+/g, " ");
 
 // ── Tone guards (the skill's rules, mechanical subset) ───────────────────────────────────────────────
 export const BANNED_TONE_RE = /\b(extremely difficult|most dangerous|massive|enormous)\b/i;
-
-/**
- * A RECOMMENDATION IS A SHAPE, AND THIS SCREEN MAY NOT WRITE ONE (owner, 2026-09-18).
- *
- * The screen states findings and a rating; what to do with the name is the reading lawyer's. Two
- * instructions that asked for a conclusion were cut first, and a re-run then wrote one anyway, under a
- * heading of its own: "Practical next step — <NAME> is not knocked out at this screening depth. Advance
- * it to clearance…". Cutting an instruction stops the engine asking; only a refusal stops the offer.
- *
- * TWO SHAPES, because both reached a reader: a block the writer heads itself, and a closing line that
- * moves the name on. WHAT THIS CANNOT SEE: the same conclusion as ordinary prose — "the remaining work
- * here is a full search" — and no pattern can. It is a floor under the doctrine, never a substitute.
- *
- * The false positives were measured rather than assumed: the degraded note this lane REQUIRES reads
- * "Manual verification recommended" and matches neither, and a register record "proceeding to
- * registration" matches neither — only proceeding *to clearance* does.
- */
-export const RECOMMENDATION_RE = /^[ \t]*(?:[*_]{0,2}|#{1,6}\s*)(?:practical\s+|immediate\s+|suggested\s+)?(?:next steps?|what to do\b|what happens next|recommendations?|our recommendation)/im;
-export const ADVANCE_RE = /\b(?:advance|move|take|send)\s+(?:it|this|the name|[A-Z][A-Z0-9'’-]{2,})\s+(?:on\s+)?(?:to|into|through)\s+(?:a\s+)?(?:full\s+)?clearance\b|\bproceeds?\s+to\s+(?:a\s+)?(?:full\s+)?clearance\b|\bshould\s+(?:proceed|advance|be advanced|move)\b|\bwe\s+recommend\b/i;
 export const QUANT_CLAIM_RE = /(\b\d[\d,.]*\s*(?:M|million|billion|k|thousand)?\s*(?:streams|downloads|copies sold|units sold)\b)|(\$\s?\d[\d,.]*\s*(?:M|million|billion|k)?\s*(?:in\s+)?(?:annual\s+)?(?:revenue|sales))/i;
 
 // ── URL normalization for the receipts gate ──────────────────────────────────────────────────────────
@@ -505,14 +486,6 @@ export const validators = {
       const claim = [prose, c.chunkSummary].filter(Boolean).join("\n").match(REGISTER_CLAIM_RE);
       if (claim)
         return { ok: false, reason: `knockout_register_claim:${m.name}: "${claim[0].trim()}" — this turn cannot see the register lane and must not describe it. The report states register coverage in code, from the run's own count sidecar; a summary that says the registers were not run, above a table of counts that were, is the contradiction this rule closes. Delete the clause` };
-      // THE PER-NAME READ IS SWEPT TOO, and until now it was not: the checks below read the finding
-      // fields, while `assessment` was validated for length and structure alone — which is exactly the
-      // field the conclusion arrived in. Refused HERE so the stage re-asks with the line quoted, rather
-      // than a reader meeting it.
-      const read = [m.assessment, prose].filter(Boolean).join("\n");
-      const recommended = read.match(RECOMMENDATION_RE) ?? read.match(ADVANCE_RE);
-      if (recommended)
-        return { ok: false, reason: `mark "${m.name}": "${recommended[0].trim()}" — this screen states findings and a rating; what to do with the name, and whether it advances, is the reading lawyer's. Delete the sentence: the report's own closing caveat already says what the screen is` };
       const banned = prose.match(BANNED_TONE_RE);
       if (banned) return { ok: false, reason: `mark "${m.name}": banned tone "${banned[0]}" — measured tone only (the band colour carries urgency)` };
       const quant = prose.match(QUANT_CLAIM_RE);

package/driver/verify.mjs

@@ -1375,7 +1375,7 @@ function connotationViolations(content, queryCount, opts = {}, dispositionsPath
 // patch — two families emitting a bare `form_damaged` would be indistinguishable there and the repair
 // would rewrite the wrong form.
 //
-// THE SHAPE IS BUILT AROUND THREE CONSUMERS, each of which fails SILENTLY on a mismatch (/):
+// THE SHAPE IS BUILT AROUND THREE CONSUMERS, each of which fails SILENTLY on a mismatch:
 //   - The CAUSE CENSUS IS FRONT-LOADED, `no_ruling=<n>`, before any named list: repairs.mjs CENSUS_RE
 //     sums exactly that, pipeline.mjs shows the failing model `tok.slice(0, 160)`, and a census that fell
 //     off the end of a slice would read as a missing quantity — i.e. as converged.

package/mcp-server/CHANGELOG.md

@@ -1,5 +1,13 @@
 # trademark-artifacts-mcp
 
+## 0.3.2-beta.13
+
+No changes in this release.
+
+## 0.3.2-beta.12
+
+No changes in this release.
+
 ## 0.3.2-beta.11
 
 No changes in this release.

package/mcp-server/CONNECT.md

@@ -5,7 +5,7 @@ MCP-capable app. Two ways in, and they are not variants of each other:
 
 | | **Local** | **Hosted** |
 |---|---|---|
-| What it is | your app spawns `server.mjs` from your own clone | you were given a URL by whoever operates the engine |
+| What it is | your app spawns `serve.mjs` from your own clone | you were given a URL by whoever operates the engine |
 | Who it is for | anyone who cloned this repository | a customer or colleague reading someone else's runs |
 | Setup | copy-paste below, no account, no credential | paste the URL, sign in |
 | Reach | everything, including the write verbs | read-only, scoped to your own matters |
@@ -46,7 +46,7 @@ One command. Substitute your clone's path and your workspace root:
 ```sh
 claude mcp add trademark-artifacts --scope user \
   -e CLEAROTRON_WORK_DIR=/path/to/your/workspace \
-  -- node /path/to/clearotron/mcp-server/server.mjs
+  -- node /path/to/clearotron/mcp-server/serve.mjs
 ```
 
 Check it: `claude mcp list` prints `trademark-artifacts: … - √ Connected`.
@@ -64,7 +64,7 @@ PowerShell 5.1, write the separator as `"--"`: that shell drops a bare `--`. Rem
   "mcpServers": {
     "trademark-artifacts": {
       "command": "node",
-      "args": ["/path/to/clearotron/mcp-server/server.mjs"],
+      "args": ["/path/to/clearotron/mcp-server/serve.mjs"],
       "env": { "CLEAROTRON_WORK_DIR": "/path/to/your/workspace" }
     }
   }
@@ -82,7 +82,7 @@ Codex reads `~/.codex/config.toml`:
 ```toml
 [mcp_servers.trademark-artifacts]
 command = "node"
-args = ["/path/to/clearotron/mcp-server/server.mjs"]
+args = ["/path/to/clearotron/mcp-server/serve.mjs"]
 env = { CLEAROTRON_WORK_DIR = "/path/to/your/workspace" }
 ```
 
@@ -94,13 +94,13 @@ is a value written to a file.
 
 ## Any other MCP host
 
-The contract is the same three things every time: run `node mcp-server/server.mjs`, over stdio, with
+The contract is the same three things every time: run `node mcp-server/serve.mjs`, over stdio, with
 `CLEAROTRON_WORK_DIR` in its environment.
 
 ```json
 {
   "command": "node",
-  "args": ["/path/to/clearotron/mcp-server/server.mjs"],
+  "args": ["/path/to/clearotron/mcp-server/serve.mjs"],
   "env": { "CLEAROTRON_WORK_DIR": "…", "CLEAROTRON_REPORTS_DIR": "…" }
 }
 ```
@@ -125,7 +125,7 @@ read them. Spawn the server as that user:
 ```json
 {
   "command": "sudo",
-  "args": ["-u", "<operator>", "node", "/path/to/clearotron/mcp-server/server.mjs"]
+  "args": ["-u", "<operator>", "node", "/path/to/clearotron/mcp-server/serve.mjs"]
 }
 ```
 
@@ -133,7 +133,7 @@ That needs a one-time NOPASSWD rule, or the stdio handshake hangs on a password
 
 ```
 # /etc/sudoers.d/trademark-artifacts-mcp   (chmod 0440)
-<caller> ALL=(<operator>) NOPASSWD: /usr/bin/node /path/to/clearotron/mcp-server/server.mjs
+<caller> ALL=(<operator>) NOPASSWD: /usr/bin/node /path/to/clearotron/mcp-server/serve.mjs
 ```
 
 ## What to ask it

package/mcp-server/lib/runs.mjs

@@ -40,7 +40,7 @@ export function unreadableRunsReason({ workSet, workRoot, workExists, poolSet })
   if (workSet || workExists || poolSet) return null;
   return `no searches can be read here: CLEAROTRON_WORK_DIR is unset and ${workRoot} does not exist, `
     + "and CLEAROTRON_REPORTS_DIR is unset. Set them to the install's directories — `npx clearotron doctor` "
-    + "prints where an install keeps them.";
+    + "prints where an install keeps them, and mcp-server/CONNECT.md says how to connect this server.";
 }
 
 // Every workspace-<agent>/studio/clearance-search root under the live workspace root.

package/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-artifacts-mcp",
-  "version": "0.3.2-beta.11",
+  "version": "0.3.2-beta.13",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "MCP server to interrogate clearotron trademark-clearance runs — list/read artifacts, trace the full decision flow, telemetry/cost, coverage, single-run search, and a gated single-step what-if. Imports the clearotron-driver read-only; touches no driver/template/deploy files.",

package/mcp-server/serve.mjs

@@ -0,0 +1,27 @@
+#!/usr/bin/env node
+// SPDX-License-Identifier: AGPL-3.0-only
+// Copyright 2026 Cordillera Sàrl. Additional terms under section 7 of the AGPL-3.0 apply — see ADDITIONAL-TERMS.md
+//
+// serve.mjs — the MCP server over stdio, with the Node check in front of it. The connect lines name
+// this file.
+//
+// server.mjs cannot check the Node it runs on. An ES module's imports are all loaded before any of its
+// code runs, so on a Node below the floor the server fails while loading, with an error that names a
+// module and says nothing about the version. Measured on Node 18.20.8: "SyntaxError: The requested
+// module 'node:util' does not provide an export named 'parseEnv'". On a Windows laptop running the
+// connect line through WSL, the distribution's own Node 18 met "SyntaxError: Unexpected token 'with'"
+// (2026-09-19). This file imports only what an old Node can load, refuses in one plain line, and only
+// then loads the server.
+import { fileURLToPath } from "node:url";
+import { nodeFloorVerdict, nodeFloorRefusal } from "../shared/node-floor.mjs";   // one floor, read from package.json
+
+const floor = nodeFloorVerdict();
+if (!floor.ok) {
+  console.error(`clearotron: ${nodeFloorRefusal(floor)}`);
+  process.exit(1);
+}
+
+// THE SERVER STARTS AS THE ENTRY IT WOULD HAVE BEEN. It starts its stdio transport, and reads the
+// install's settings, only when it is the process's entry file, so the entry is handed over first.
+process.argv[1] = fileURLToPath(new URL("./server.mjs", import.meta.url));
+await import("./server.mjs");

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "clearotron",
   "type": "module",
-  "version": "0.3.2-beta.11",
+  "version": "0.3.2-beta.13",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",

package/portal-ui/dist/assets/{index-CtvwLCti.css → index-7Lq-dXDV.css}

@@ -254,19 +254,19 @@ html.anon-on [data-anon='mark']:not(.anon-clear) {
   border-bottom: 1px solid var(--border-hairline);
 }
 
-/* THE HEADER'S SECOND ROW: which read you are in, then where you are inside it.
+/* THE HEADER'S LOWER ROWS: which read you are in, then where you are inside it.
    The Reads strip used to sit BELOW this box and the report's own section breadcrumb inside the frame,
    so neither stayed on screen — the frame is sized to its content, which leaves a `position:sticky` bar
    in there pinned to nothing. Both are rows of the pinned header now (owner, 2026-09-18).
-   It scrolls sideways rather than wrapping to a third line: a header that grows taller with the number of
-   sections is a header that eats the document it is heading. */
-.report-nav {
-  display: flex; align-items: center; gap: 10px; margin-top: 9px;
+   THE SECTIONS HAVE A ROW OF THEIR OWN, UNDER THE READS (owner, 2026-09-19). Side by side, sixteen reads
+   wrapped into two ragged columns while the strip floated beside them at mid-height. The reads wrap; the
+   sections scroll sideways rather than wrapping, so the strip stays one line however narrow the screen. */
+.report-nav { display: flex; flex-direction: column; align-items: stretch; gap: 8px; margin-top: 9px; }
+.report-sections {
+  display: flex; align-items: center; gap: 2px;
   overflow-x: auto; scrollbar-width: none;
 }
-.report-nav::-webkit-scrollbar { display: none; }
-.report-nav-sep { flex: none; width: 1px; align-self: stretch; background: var(--border-hairline); }
-.report-sections { display: flex; align-items: center; gap: 2px; }
+.report-sections::-webkit-scrollbar { display: none; }
 .report-section {
   flex: none; display: inline-flex; align-items: center; gap: 7px; white-space: nowrap;
   font: inherit; font-size: 12.5px; font-weight: 600; letter-spacing: .01em;
@@ -277,8 +277,11 @@ html.anon-on [data-anon='mark']:not(.anon-clear) {
 .report-section-dot {
   width: 8px; height: 8px; border-radius: 50%; border: 1.5px solid currentColor; box-sizing: border-box;
 }
+/* PROGRESS: every section reached has a filled dot, the rest stay hollow; the one in view also sits on
+   the sunken pill, so it can be told from the ones behind it. */
+.report-section[data-reached='true'] { color: var(--text-strong); }
+.report-section[data-reached='true'] .report-section-dot { background: var(--accent); border-color: var(--accent); }
 .report-section[aria-current='true'] { color: var(--text-strong); background: var(--surface-sunken); }
-.report-section[aria-current='true'] .report-section-dot { border-color: var(--accent); border-width: 3px; }
 
 /* The breadcrumb above it: one step back as a quiet button, then where the reader is. Compound selectors
    throughout this block, because the button and row rules they adjust are declared later in the file. */