clearotron 0.3.2-beta.11 → 0.3.2-beta.13

package/portal-ui/dist/assets/{index-DXSRxPV_.js → index-w8GFZftk.js}

@@ -18201,11 +18201,15 @@ function readFrameSections(data, sameSource) {
 	const out = [];
 	for (const raw of msg.sections) {
 		if (typeof raw !== "object" || raw === null) continue;
-		const { id, label } = raw;
+		const { id, label, top } = raw;
 		if (typeof id !== "string" || typeof label !== "string") continue;
 		const trimmed = label.trim().slice(0, 40);
 		if (!id.trim() || !trimmed) continue;
-		out.push({
+		out.push(typeof top === "number" && Number.isFinite(top) && top >= 0 ? {
+			id,
+			label: trimmed,
+			top: Math.round(top)
+		} : {
 			id,
 			label: trimmed
 		});
@@ -18213,6 +18217,16 @@ function readFrameSections(data, sameSource) {
 	}
 	return out;
 }
+function sectionsReached(sections, line, where) {
+	if (where.atTop) return 0;
+	if (where.atFoot) return sections.length;
+	let n = 0;
+	for (const s of sections) {
+		if (typeof s.top !== "number" || s.top > line) break;
+		n += 1;
+	}
+	return n;
+}
 function readFrameTheme(data, sameSource) {
 	if (!sameSource) return null;
 	if (typeof data !== "object" || data === null) return null;
@@ -18243,6 +18257,8 @@ function usePortalTheme() {
 	}, []);
 	return theme;
 }
+var TOPBAR_PX = 56;
+var LANDING_PX = 10;
 function useReportFrame() {
 	const ref = (0, import_react.useRef)(null);
 	const [height, setHeight] = (0, import_react.useState)(FIRST_PAINT);
@@ -18276,7 +18292,7 @@ function useReportFrame() {
 			if (jump !== null) {
 				if (frame) {
 					const head = document.querySelector(".report-head");
-					const chrome = 56 + (head instanceof HTMLElement ? head.offsetHeight : 48) + 10;
+					const chrome = TOPBAR_PX + (head instanceof HTMLElement ? head.offsetHeight : 48) + LANDING_PX;
 					const y = frame.getBoundingClientRect().top + window.scrollY + jump - chrome;
 					window.scrollTo({
 						top: Math.max(0, y),
@@ -18478,10 +18494,45 @@ function Result({ ctx, runId, markSlug }) {
 	const run = (0, import_react.useMemo)(() => runs.find((r) => r.runId === runId) ?? null, [runs, runId]);
 	const reads = (0, import_react.useMemo)(() => run ? readsFor(runs, run) : [], [runs, run]);
 	const frame = useReportFrame();
-	const [atSection, setAtSection] = (0, import_react.useState)(null);
+	const [reached, setReached] = (0, import_react.useState)(0);
+	const sectionList = frame.sections;
+	const frameRef = frame.ref;
 	(0, import_react.useEffect)(() => {
-		setAtSection(null);
-	}, [runId, markSlug]);
+		if (!sectionList || sectionList.length < 2) {
+			setReached(0);
+			return;
+		}
+		let queued = false;
+		const measure = () => {
+			queued = false;
+			const el = frameRef.current;
+			if (!el) return;
+			const head = document.querySelector(".report-head");
+			const lineOnScreen = (head instanceof HTMLElement ? head.getBoundingClientRect().bottom : TOPBAR_PX) + LANDING_PX + 2;
+			const where = {
+				atTop: document.documentElement.scrollHeight > window.innerHeight + 2 && window.scrollY <= 0,
+				atFoot: window.innerHeight + window.scrollY >= document.documentElement.scrollHeight - 2
+			};
+			setReached(sectionsReached(sectionList, lineOnScreen - el.getBoundingClientRect().top, where));
+		};
+		const later = () => {
+			if (!queued) {
+				queued = true;
+				requestAnimationFrame(measure);
+			}
+		};
+		measure();
+		window.addEventListener("scroll", later, { passive: true });
+		window.addEventListener("resize", later);
+		return () => {
+			window.removeEventListener("scroll", later);
+			window.removeEventListener("resize", later);
+		};
+	}, [
+		sectionList,
+		frame.height,
+		frameRef
+	]);
 	const grouped = run !== null && showsAssessment(run, markSlug);
 	const { result: summaryResult } = useLoad(() => grouped ? api.runSummary(runId) : Promise.resolve({ kind: "notFound" }), [runId, grouped]);
 	const assessment = summaryResult?.kind === "ok" ? summaryResult.value : [];
@@ -18612,70 +18663,60 @@ function Result({ ctx, runId, markSlug }) {
 					]
 				}), hasThread(reads) || (frame.sections?.length ?? 0) > 1 ? (0, import_jsx_runtime.jsxs)("div", {
 					className: "report-nav",
-					children: [
-						hasThread(reads) ? (0, import_jsx_runtime.jsxs)("div", {
-							style: {
-								display: "flex",
-								gap: 8,
-								flexWrap: "wrap",
-								alignItems: "center"
-							},
-							children: [(0, import_jsx_runtime.jsx)("span", {
-								className: "eyebrow",
-								style: { alignSelf: "center" },
-								children: "Reads"
-							}), reads.map((r) => {
-								const active = r.runId === run.runId;
-								return (0, import_jsx_runtime.jsxs)("button", {
-									type: "button",
-									className: "pill",
-									"aria-current": active ? "true" : void 0,
-									onClick: () => ctx.go(resultPath(r.runId)),
+					children: [hasThread(reads) ? (0, import_jsx_runtime.jsxs)("div", {
+						style: {
+							display: "flex",
+							gap: 8,
+							flexWrap: "wrap",
+							alignItems: "center"
+						},
+						children: [(0, import_jsx_runtime.jsx)("span", {
+							className: "eyebrow",
+							style: { alignSelf: "center" },
+							children: "Reads"
+						}), reads.map((r) => {
+							const active = r.runId === run.runId;
+							return (0, import_jsx_runtime.jsxs)("button", {
+								type: "button",
+								className: "pill",
+								"aria-current": active ? "true" : void 0,
+								onClick: () => ctx.go(resultPath(r.runId)),
+								style: {
+									cursor: "pointer",
+									display: "inline-flex",
+									alignItems: "center",
+									gap: 7,
+									background: active ? "var(--accent-wash)" : "var(--surface-sunken)",
+									borderColor: active ? "var(--accent)" : "var(--border-hairline)",
+									color: active ? "var(--text-accent)" : "var(--text-muted)"
+								},
+								children: [r.tone ? (0, import_jsx_runtime.jsx)("span", {
+									className: "dot",
 									style: {
-										cursor: "pointer",
-										display: "inline-flex",
-										alignItems: "center",
-										gap: 7,
-										background: active ? "var(--accent-wash)" : "var(--surface-sunken)",
-										borderColor: active ? "var(--accent)" : "var(--border-hairline)",
-										color: active ? "var(--text-accent)" : "var(--text-muted)"
-									},
-									children: [r.tone ? (0, import_jsx_runtime.jsx)("span", {
-										className: "dot",
-										style: {
-											background: `var(--tone-${r.tone})`,
-											width: 7,
-											height: 7
-										}
-									}) : null, readLabel(r)]
-								}, r.runId);
-							})]
-						}) : null,
-						hasThread(reads) && (frame.sections?.length ?? 0) > 1 ? (0, import_jsx_runtime.jsx)("span", {
-							className: "report-nav-sep",
-							"aria-hidden": "true"
-						}) : null,
-						(frame.sections?.length ?? 0) > 1 ? (0, import_jsx_runtime.jsx)("nav", {
-							className: "report-sections",
-							"aria-label": "Sections of this report",
-							children: (frame.sections ?? []).map((sec, i) => {
-								const now = atSection === null ? i === 0 : atSection === sec.id;
-								return (0, import_jsx_runtime.jsxs)("button", {
-									type: "button",
-									className: "report-section",
-									"aria-current": now ? "true" : void 0,
-									onClick: () => {
-										setAtSection(sec.id);
-										frame.send("section", sec.id);
-									},
-									children: [(0, import_jsx_runtime.jsx)("span", {
-										className: "report-section-dot",
-										"aria-hidden": "true"
-									}), sec.label]
-								}, sec.id);
-							})
-						}) : null
-					]
+										background: `var(--tone-${r.tone})`,
+										width: 7,
+										height: 7
+									}
+								}) : null, readLabel(r)]
+							}, r.runId);
+						})]
+					}) : null, (frame.sections?.length ?? 0) > 1 ? (0, import_jsx_runtime.jsx)("nav", {
+						className: "report-sections",
+						"aria-label": "Sections of this report",
+						children: (frame.sections ?? []).map((sec, i) => {
+							return (0, import_jsx_runtime.jsxs)("button", {
+								type: "button",
+								className: "report-section",
+								"data-reached": i < reached ? "true" : void 0,
+								"aria-current": i === reached - 1 ? "true" : void 0,
+								onClick: () => frame.send("section", sec.id),
+								children: [(0, import_jsx_runtime.jsx)("span", {
+									className: "report-section-dot",
+									"aria-hidden": "true"
+								}), sec.label]
+							}, sec.id);
+						})
+					}) : null]
 				}) : null]
 			}),
 			frame.failed ? (0, import_jsx_runtime.jsxs)("div", {

package/portal-ui/dist/index.html

@@ -49,8 +49,8 @@
     -->
     <link rel="preconnect" href="https://api.fontshare.com" crossorigin />
     <link href="https://api.fontshare.com/v2/css?f[]=satoshi@400,500,700,900&display=swap" rel="stylesheet" />
-    <script type="module" crossorigin src="/portal/assets/index-DXSRxPV_.js"></script>
-    <link rel="stylesheet" crossorigin href="/portal/assets/index-CtvwLCti.css">
+    <script type="module" crossorigin src="/portal/assets/index-w8GFZftk.js"></script>
+    <link rel="stylesheet" crossorigin href="/portal/assets/index-7Lq-dXDV.css">
   </head>
   <body>
     <div id="root"></div>

package/portal-ui/package.json

@@ -2,7 +2,7 @@
   "name": "portal-ui",
   "private": true,
   "type": "module",
-  "version": "0.3.2-beta.11",
+  "version": "0.3.2-beta.13",
   "license": "AGPL-3.0-only",
   "description": "The unified trademark portal UI. One address, one login: who you are decides what you see. Built as a static bundle, served by driver/portal-service.mjs — the browser never reaches profile-service or recipe-service.",
   "engines": {

package/providers/free-tier/src/capabilities.js

@@ -48,9 +48,9 @@
 // The question that DOES depend on the box — which offices this deployment can reach right now — is
 // answered in driver/register-availability.mjs, and the answer rides the plan as a disclosed
 // `deferred_coverage` row. It is deliberately not answered here, and `covered` is deliberately not
-// narrowed there either: 's admission gate reads this field to decide which territories a client may
+// narrowed there either: the admission gate reads this field to decide which territories a client may
 // ORDER, so narrowing it to the configured half would refuse a US-only matter at the door instead of
-// disclosing its US gap ('s ruling is that such a matter must START and disclose).
+// disclosing its US gap (the rule is that such a matter must START and disclose).
 //
 // ── THE "NO SHAPE FOR HALF OF THIS RAN" RULE IS UNCHANGED — IT MOVED THE SPLIT, NOT REPEALED IT ──────
 //

package/providers/jx/src/core.js

@@ -13,10 +13,10 @@
 // SEARCH MACHINERY (query terms), never registry facts — the never-invent rule binds registry DATA,
 // not the queries we choose to run.
 //
-// BILLING RIDES THE RUN, NOT THIS FILE (/ at e49868e3, and the transport deleted at).
+// BILLING RIDES THE RUN, NOT THIS FILE.
 // These lanes used to POST to the Anthropic Messages API on ANTHROPIC_API_KEY at a hardcoded haiku
-// tier while the rest of the run used whatever program the customer chose — the mix the owner's D6
-// ruling forbids. They now go through `engine.runTurn()` like every other model call, so whatever
+// tier while the rest of the run used whatever program the customer chose — the mix the product's one-provider-per-run
+// rule forbids. They now go through `engine.runTurn()` like every other model call, so whatever
 // program and billing mode the run is on carries them, and nothing here selects a vendor.
 //
 // `callMessagesAPI` — with its own MESSAGES_API_URL, x-api-key header and retry ladder — is DELETED

package/providers/jx/src/turn-envelope.mjs

@@ -3,7 +3,7 @@
 // turn-envelope.mjs — render a forced-tool request as a CLI-turn prompt, and read the turn's text back
 // into the envelope the three lane parsers already understand. PURE. No driver import, no network.
 //
-// ── why this exists ( /) ─────────────────────────────────────────────────────────────────
+// ── why this exists ─────────────────────────────────────────────────────────────────
 //
 // The jx lanes called the Anthropic Messages API directly with `tool_choice: {type:"tool"}`, on a key,
 // at a hardcoded tier — regardless of which AI program the customer configured. The owner's standing

package/providers/oauth-mcp-bridge/CHANGELOG.md

@@ -1,5 +1,13 @@
 # trademark-oauth-mcp-bridge
 
+## 0.3.2-beta.13
+
+No changes in this release.
+
+## 0.3.2-beta.12
+
+No changes in this release.
+
 ## 0.3.2-beta.11
 
 No changes in this release.

package/providers/oauth-mcp-bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-oauth-mcp-bridge",
-  "version": "0.3.2-beta.11",
+  "version": "0.3.2-beta.13",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "OAuth 2.1 MCP stdio bridge used by the engine's case-law gather stage (courtlistener / legaldatahunter).",

package/providers/perplexity/README.md

@@ -11,7 +11,7 @@ optional: without `PERPLEXITY_API_KEY` the run door refuses by name
 (`preflightResearchCredential`, `../../driver/driver.config.mjs`) rather than searching less. A
 KNOCKOUT is the exception and it is deliberate — its register half is a whole product without the
 sweep, so `../../driver/pipeline-knockout.mjs` SKIPS this adapter and discloses the half it did not
-run ( acceptance 6). Nothing is billed for a sweep that never runs.
+run. Nothing is billed for a sweep that never runs.
 (`CLEAROTRON_KNOCKOUT_SWEEP_FIXTURES` is the $0 dev route to a knockout WITH a sweep.)
 
 The header's `index.js` and `build.js` belong to the plugin packaging this core was extracted from;

package/providers/signa/src/capabilities.js

@@ -20,7 +20,7 @@
 //   * predicates.wildcardInfix — `contains` would appear to serve it and does not. The kernel hands
 //     the infix case its RAW pattern with the asterisks still in it, so the sweep would search the
 //     punctuation. Declaring it would be declaring a capability the executor cannot serve, which is
-//     the one thing 's criteria forbid. Stays null; the slice defers, disclosed.
+//     the one thing a declaration must never do. Stays null; the slice defers, disclosed.
 //   * resultCeiling — there is no single number to put here, and the reason is worth the paragraph.
 //     An unscoped term pages to exhaustion whatever its size, on every predicate — no ceiling. But add
 //     `filters.owner_name` and the SAME term stops dead at the owner-scoped window (400), which the
@@ -194,7 +194,7 @@ export const CAPABILITIES = Object.freeze({
 
     // ── WHICH BINDING LAYERS DOES A SEARCH SCOPED TO THIS OFFICE ACTUALLY RETURN? ──────────
     //
-    // 's first task, answered for this provider by driving the three scopings against each other rather
+    // The first question for every provider, answered here by driving the three scopings against each other rather
     // than by reading the documentation. One term, one limit, France:
     //
     //   filters.offices                              the national register ALONE

package/providers/signa/src/core.js

@@ -680,8 +680,8 @@ export function toSignaParams(p = {}) {
     // and this branch is the only thing standing between that and `strategies: ["exact"]`. With
     // `predicates.default` declared `"contains"` and no mapping here, every unanchored slice would
     // have gone to the wire as an EXACT search: narrower than the plan asked for, returning fewer
-    // rows, and answering as though it were the query requested. That is 's defect exactly, and
-    // declaring a predicate without wiring it is the one thing this issue's criteria forbid.
+    // rows, and answering as though it were the query requested. That is the silent narrowing this branch
+    // prevents, and declaring a predicate without wiring it is the one thing a declaration must never do.
     //
     // A `*` in the term means this is the infix-wildcard case, which shares the empty {} and which
     // `contains` cannot serve — the kernel hands the RAW pattern, asterisks included, so a contains

package/providers/uspto-local/src/core.js

@@ -67,7 +67,7 @@ function resolveDbPath(auth) {
     // marker added by one consumer is a marker the other consumers do not get. Marking at the throw
     // means every path out of this provider carries it, including ones written later.
     //
-    // 's composite backstop caught a THROW and converted it. That backstop never fired against this
+    // The composite backstop caught a THROW and converted it. That backstop never fired against this
     // provider, because four of its five entry points catch their own throw and return a plain error
     // first — and the test that claimed it worked drove a stub that throws, which this does not do.
     throw new Error(

package/providers/uspto-local/src/sync.js

@@ -312,7 +312,7 @@ export async function syncIndex({ dbPath, files, ingest = ingestFile, onFile = n
     await onPhase?.("ingest");
     // BLOCKS THE EVENT LOOP FOR THE WHOLE REBUILD — node:sqlite is synchronous, and this is one
     // transaction over every row in the index. Nothing on this thread runs again until it commits,
-    // which is why 's disk sampler is a worker thread rather than a timer.
+    // which is why the disk sampler is a worker thread rather than a timer.
     rebuildFts(db);
     await onPhase?.("fts");
     const rows = db.prepare("SELECT count(*) AS n FROM mark").get().n;

package/scripts/README.md

@@ -52,14 +52,10 @@ than its contents, and the whole reason the browser checks exist is that a fix f
 scrollbars" shipped a report with two scrollbars past 1,500 passing tests. Those checks run in CI's
 `build-and-verify` job and nowhere else — so **CI, not your machine, is what covers them.**
 
-`render-check.mjs` is a further step out, running in **neither** — and wiring it up is what found out
-why that mattered. CI left it out because it measures a PUBLISHED RUN and had no pool to point at;
-`--fixture-pool` removed that reason, so wired it into`build-and-verify` as a blocking step.
-
-**Its first run anywhere reported 6 of 9 assertions failing with `no-probe` and `null`** — not a layout
+**`render-check.mjs`'s first run anywhere reported 6 of 9 assertions failing with `no-probe` and `null`** — not a layout
 defect, an inability to *measure*. The three assertions that look inside the report frame (the height
 bridge, the scrollbar loop, the sideways overflow) depend on a probe script in the sandboxed iframe
-posting back to the shell. The pool built fine; the harness cannot see inside its own frame. **.**
+posting back to the shell. The pool built fine; the harness cannot see inside its own frame.
 
 **The first explanation written down here was wrong, and how it was wrong is the useful part.** This
 paragraph used to say the message never arrives under `file://` with production's sandbox. Measured in

package/scripts/ask-ai-render-check.mjs

@@ -133,6 +133,10 @@ let deck = 'connected'
 // travels the real injected script to the real listener. Two cards at fixed places: a numbered finding,
 // and an "Also considered" card, which carries the button and no number.
 let reportDoc = 'stub'
+// A SLOW RUNNER, ON DEMAND. The finding's document is held back this long before it is served, which is
+// how a CI runner that loaded it late is reproduced: the press below has to wait for the document, not
+// for a fixed time. Zero, the default, serves it at once.
+const FRAME_DELAY_MS = Number(process.env.ASK_AI_CHECK_FRAME_DELAY_MS ?? 0) || 0
 const FINDING_DOC = () => prepareReportForEmbed(`<!doctype html><html><head><meta charset="utf-8"><title>report</title></head>
 <body style="margin:0;font-family:sans-serif;background:#fff;height:400px">
 <div class="card" id="c3" style="position:absolute;top:40px;left:20px"><div class="cardhead"><span class="fnum">3</span>
@@ -159,7 +163,8 @@ const server = createServer((req, res) => {
   // the height a published report's bridge announces, so the header draws the Export menu a reader meets.
   if (p.startsWith('/portal/report/') && reportDoc === 'finding') {
     res.writeHead(200, { 'content-type': 'text/html' })
-    return res.end(FINDING_DOC())
+    const doc = FINDING_DOC()
+    return FRAME_DELAY_MS ? setTimeout(() => res.end(doc), FRAME_DELAY_MS) : res.end(doc)
   }
   if (p.startsWith('/portal/report/')) {
     res.writeHead(200, { 'content-type': 'text/html' })
@@ -433,9 +438,29 @@ const arrived = await value(PROBE)
 // null origin and the point is the whole path — the injected script hears the press, posts it, and the
 // report screen opens its control. The cards sit at fixed places in the document, so the frame's own
 // position on the page is all that has to be measured.
+// READY, NOT A FIXED WAIT. The press lands on a finding's button, and it does something only once the
+// document in the frame has loaded and its bridge is listening. A fixed pause after navigating was not
+// always that on a CI runner: the press arrived first and opened nothing (measured on beta-12, 2026-09-19,
+// with no change to the portal or the bridge since a green run). The bridge posts the document's height
+// from the same script that listens for the press, so a frame that has left its first-paint height has a
+// listener. The Ask AI control must be on the header too, since the press opens it. Both are waited for,
+// and the frame's place must hold still across two reads, so the press is aimed where the button is.
+const FIRST_PAINT = Number(/export const FIRST_PAINT = (\d+)/.exec(readFileSync(join(DIST, '..', 'src', 'contract', 'reportFrame.ts'), 'utf8'))?.[1] ?? NaN)
+const frameReady = async () => {
+  let last = null
+  for (let i = 0; i < 200; i++) {
+    const now = await value(`(() => { const f = document.querySelector('iframe'); if (!f || !document.querySelector('[data-ask-ai] > button')) return null;
+      const r = f.getBoundingClientRect(); return Math.round(r.top) + ':' + Math.round(r.height) })()`)
+    if (now && now === last && !now.endsWith(`:${FIRST_PAINT}`)) return true
+    last = now
+    await new Promise((r) => setTimeout(r, 100))
+  }
+  return false
+}
 const pressInFrame = async (top) => {
   await value('(() => { window.scrollTo(0, 0); return true })()')
   await new Promise((r) => setTimeout(r, 200))
+  if (!(await frameReady())) return false
   const at = await value(`(() => { const f = document.querySelector('iframe'); if (!f) return null; const r = f.getBoundingClientRect(); return { x: r.left, y: r.top } })()`)
   if (!at) return false
   const x = Math.round(at.x + 140), y = Math.round(at.y + top + 16)

package/scripts/citation-anchor-report.mjs

@@ -113,7 +113,7 @@ export function anchorRows(citations, linesOf) {
     if (!others.length) { rows.push({ ...c, verdict: "silent", anchor }); continue; }
     let elsewhere = null;
     for (const n of others) {
-      const decl = new RegExp(`^\\s*(?:export\\s+)?(?:default\\s+)?(?:async\\s+)?(?:function|const|let|var|class)\\s+${n.replace(/\$/g, "\\$")}\\b`);
+      const decl = new RegExp(`^\\s*(?:export\\s+)?(?:default\\s+)?(?:async\\s+)?(?:function|const|let|var|class)\\s+${n.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\b`);
       for (let i = 0; i < target.length; i++) {
         if (!decl.test(target[i])) continue;
         // THE CITATION POINTING INSIDE WHAT IT NAMES IS CORRECT, not drifted — see the header.

package/scripts/citation-line-check.mjs

@@ -528,7 +528,7 @@ function main() {
 //     WATCHLIST_OWNERS_MAX declared in variant-manifest-model.mjs   anything else — `declared` marks it
 //
 // A BARE WORD BEFORE `in <file>` IS NOT A SYMBOL CITATION, deliberately, and this is the difference
-// between this arm and 's. reads the token beside a number SPECULATIVELY and drops it when it
+// between this arm and the line arm, which reads the token beside a number SPECULATIVELY and drops it when it
 // is not declared, because "ALREADY computes (coverage-ledger.mjs:180)" would otherwise manufacture a
 // defect out of emphatic prose. This arm cannot do that: an undeclared symbol has to FAIL or the check
 // has no teeth at all. So the form is opted into. `the field in scope-ledger.mjs` and `checked in
@@ -923,8 +923,8 @@ export function symbolMisses(citations, readLines) {
 // WHAT IT CANNOT SEE, and why this stays a slice. A citation that lands on the WRONG NON-BLANK LINE is
 // invisible to it — that looks identical to a correct one. Three of the eleven citations repointed in
 // `stages.mjs` under this issue were exactly that: `stages.mjs:1474` pointed at a transliteration `why:`
-// row, `pipeline.mjs:2908` at a different function entirely, and neither line was blank. Only 's
-// arm can decide those, and only where the citation names a symbol. A clean run here is evidence about
+// row, line 2908 of `pipeline.mjs` at a different function entirely, and neither line was blank. Only the
+// symbol arm can decide those, and only where the citation names a symbol. A clean run here is evidence about
 // punctuation, not about correctness.
 //
 // AN OVERRUN IS NOT THIS FINDING. A span running past the file's last line is already reported as

package/scripts/dead-names.mjs

@@ -6,8 +6,8 @@
 //   node scripts/dead-names.mjs            report; exit 1 if a dead name is back
 //   node scripts/dead-names.mjs --json     the same, as JSON
 //
-// ruled Lore and Aughra dead names that may appear nowhere, and the purge is done: the issue's
-// own pattern returned 58 files when it was written and returns ONE now, which is a dictionary snippet
+// The owner ruled Lore and Aughra dead names that may appear nowhere, and the purge is done: the issue's
+// own pattern returned 58 files when it was written and ONE when this guard landed, a dictionary snippet
 // about hunting inside captured search results. What does not exist is anything to keep it that way. A
 // name published once stays published, so the cost of a re-introduction is not a revert — it is a name
 // in the history of a repository that is about to be cut in public.
@@ -42,37 +42,38 @@ export const GUARD = "dead-names (#853)";
 // the issue names as deployed surfaces, and `_` is a word character, so a trailing `\b` would miss the
 // environment variable while catching the prose. No English word begins with those six letters, so the
 // leading boundary is all the protection the arm needs — measured: zero hits in the tree either way.
-// `clawdi-lisa` and `clawdi-lidia` are 's, not 's, and they are here rather than in a second
-// scanner because the mechanism is identical: a name that must never reappear. They were per-person
-// agent identities for individuals at this firm, shipped in an operator script's default roster, in a
-// systemd unit watching their queues, and in two test fixtures. That out-of-scope note ruled `alex`
-// and `sam` INVENTED, which is why those stay; these two were never covered by that ruling.
-export const DEAD_NAME_RE = /lorestar|lore_(pool|url|flags)|clearance_lore|lorectl|loreurl|lorecontrols|trademark-lore|\blore\b|\baughra|clawdi-(lisa|lidia)/i;
+// A PER-PERSON IDENTITY IS THE SAME KIND OF NAME, AND IT IS NOT WRITTEN HERE. An agent identity named
+// after a real person must never reappear either, and the mechanism is identical. But a public guard
+// that spells out a person's name publishes the name it exists to keep out, so no such arm is written
+// into this file: `deadNameHits` takes its pattern as an argument, and the test drives the mechanism
+// with an invented identity. The names the tests give agents and requesters are invented too.
+export const DEAD_NAME_RE = /lorestar|lore_(pool|url|flags)|clearance_lore|lorectl|loreurl|lorecontrols|trademark-lore|\blore\b|\baughra/i;
 
 /**
  * Where a true match is somebody else's word rather than our dead name. NAMED, with the reason, and
  * scoped to the file — never a blanket pattern, because a blanket would re-admit the name everywhere.
+ * The first exemption was a dictionary snippet in the demo's captured common-law results; the demo was
+ * re-captured without it, so that exemption was deleted rather than carried.
  */
 export const EXEMPTIONS = [
   {
-    file: "demo/multi-country-focus-search/run/common-law-grid.json",
-    why: "captured third-party search results. The hit is a Collins English Dictionary definition of "
-      + "hunting — \"the art, sport, lore, or practice of hunting\" — inside a snippet the common-law "
-      + "sweep fetched and the driver saved VERBATIM. Editing it would corrupt a machine receipt to "
-      + "satisfy a lint, which is the one thing a receipt may never be.",
+    file: "driver/wordlists/en.txt",
+    why: "the engine's list of ordinary English words, the dictionary of the one-letter neighbourhood "
+      + "filter. `lore` is an ordinary English word and sits on it. The list only ever removes queries, "
+      + "so taking the word out would change which searches a run makes, to satisfy a lint.",
   },
 ];
 
 const exemptionFor = (file) => EXEMPTIONS.find((e) => e.file === file) ?? null;
 
-/** Every dead-name hit in a corpus of {file, text}. PURE. */
-export function deadNameHits(corpus) {
+/** Every dead-name hit in a corpus of {file, text}, against DEAD_NAME_RE unless a pattern is given. PURE. */
+export function deadNameHits(corpus, pattern = DEAD_NAME_RE) {
   const out = [];
   for (const { file, text } of corpus ?? []) {
     if (exemptionFor(file)) continue;
     const lines = String(text ?? "").split("\n");
     for (let i = 0; i < lines.length; i++) {
-      if (DEAD_NAME_RE.test(lines[i])) out.push({ file, line: i + 1, text: lines[i].trim().slice(0, 160) });
+      if (pattern.test(lines[i])) out.push({ file, line: i + 1, text: lines[i].trim().slice(0, 160) });
     }
   }
   return out;

package/scripts/e2e.mjs

@@ -2370,7 +2370,7 @@ const TERMINAL_BY_SUFFIX_RAN = { failed: "failed", done: "delivered", cancelled:
 
 // REPAIR — the live-state vocabulary is IMPORTED, not retyped. This file's first draft spelled it
 // out twice more (an in-flight suffix set and a claim-lock regex), which is exactly the failure
-// queue-markers.mjs was created for: "written down three times and the copies disagreed ". 's
+// queue-markers.mjs was created for: "written down three times and the copies disagreed". The
 // claim lock in particular is a NORMAL in-flight state — a live token is a claim in progress, a dead one
 // is restored by sweepAbandonedTakeovers — and one more private copy of that rule is one more chance to
 // report a claim race as a stranded job.

package/scripts/env-audit.mjs

@@ -310,6 +310,12 @@ export function isProductFile(rel) {
   if (/\.test\.mjs$/.test(rel)) return false;
   if (/^e2e\//.test(rel)) return false;
   if (/^scripts\/(e2e|test-run|ci-)/.test(rel)) return false;
+  // THE BROWSER CHECKS. CI and a developer run them against a fixture portal; no install runs one. A switch
+  // one of them reads, such as the delay that reproduces a slow runner, belongs to the check, and a row
+  // for it in `.env.example` would hand an operator a setting that changes nothing they run. Measured
+  // when this was added: HOME, PATH, TMPDIR and that delay were all the checks read, and the first three
+  // stay product, because shipping code reads them too.
+  if (/^scripts\/[a-z0-9-]+-render-check\.mjs$/.test(rel)) return false;
   return true;
 }
 
@@ -618,7 +624,7 @@ const EXTERNAL_RE = /^#\s*external:\s*(\S.*)$/;
 //
 // THE TWO MARKERS DO NOT CLEAR EACH OTHER. `pending` was a single slot, and any comment line that was
 // not an `# external:` reset it. Adding a second marker to that shape would mean an `# effect:` line
-// silently DELETED the `# external:` declaration above it — the row would go orphaned and 's
+// silently DELETED the `# external:` declaration above it — the row would go orphaned and the orphan
 // guard would red, with the cause three lines away and invisible. Each marker carries its own slot.
 const EFFECT_RE = /^#\s*effect:\s*(\S.*)$/;
 // A COMMENTED-OUT ROW STILL COUNTS, the same rule `assigned` uses above and for the same reason: `# X=`

package/scripts/env-classify.mjs

@@ -248,7 +248,7 @@ function namesMergedIntoCandidate(src) {
   const helpers = new Set([...src.matchAll(/Object\.assign\(\s*candidate\s*,\s*(?:await\s+)?([A-Za-z_$][\w$]*)\s*\(/g)]
     .map((m) => m[1]));
   for (const fn of helpers) {
-    const at = src.search(new RegExp(`\\bfunction\\s+${fn.replace(/\$/g, "\\$")}\\s*\\(`));
+    const at = src.search(new RegExp(`\\bfunction\\s+${fn.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\s*\\(`));
     const refuse = (why) => new Error(`env-classify: bin/onboard.mjs writes what ${fn}() returns, and ${why}, so `
       + "the names it writes cannot be read. Read as none, they would land in `tuning` and on the deletion "
       + "population; that is this script failing to look, not a finding about the wizard.");

package/scripts/pack-publishable.mjs

@@ -123,7 +123,7 @@ async function main() {
     try {
       ({ reconcileAndScan: gate } = await import("../cut/packed-artifact.mjs"));
     } catch (e) {
-      console.error("  REFUSING (exit 2, could-not-look): cut/packed-artifact.mjs did not load —"
+      console.error("  REFUSING (exit 2, could not look): cut/packed-artifact.mjs did not load —"
         + ` ${String(e?.message ?? e)}.\n`
         + "  That module carries the only rule that says which files may leave this repository, and a\n"
         + "  pack that cannot ask it produces an artifact nobody has checked. An exported tree does not\n"

package/scripts/release-artifact-seal.mjs

@@ -106,10 +106,10 @@ function main() {
     console.error("usage: node scripts/release-artifact-seal.mjs --tarball <path>");
     process.exit(2);
   }
-  // A path that is not there is a could-not-look, never a seal that found nothing to do. Exit 2 is
+  // A path that is not there is a check that could not look, never a seal that found nothing to do. Exit 2 is
   // the house meaning and it keeps this distinguishable from a tarball that was sealed and was clean.
   if (!existsSync(tarball)) {
-    console.error(`  REFUSING (exit 2, could-not-look): ${tarball} does not exist, so nothing was sealed.`);
+    console.error(`  REFUSING (exit 2, could not look): ${tarball} does not exist, so nothing was sealed.`);
     process.exit(2);
   }