clearotron 0.3.2-beta.12 → 0.3.2-beta.13

package/driver/progress.mjs

@@ -97,6 +97,30 @@ export function stepForStage(rawStageKey) {
   return { index, label: DISPLAY_STEPS[index], n: index + 1, total: DISPLAY_STEPS.length };
 }
 
+/**
+ * THE STAGE A LIVE RUN IS IN NOW, for the card and the row a person watches (owner, 2026-09-19).
+ *
+ * status.json keeps two readings. The step fields hold the furthest display step ever reached, for a
+ * stepper that never runs backwards. `lastStage` is the stage the run ENTERED last, written at the one
+ * choke point every dispatch passes, corrective re-entries included. The card named the first, so a run
+ * sent back into synthesis by a correction pass went on reading "Case law & refutation" (measured on a
+ * beta, 2026-09-18). This names the stage in hand, a step back included, with its own step number.
+ *
+ * `currentStep` FIRST, where the run wrote one: the step it is in now, in the stepper's own words, moved by
+ * every transition in either direction and left in place through a stage with no display step. A status
+ * written before that field existed falls back to mapping `lastStage`, and one with neither keeps the
+ * furthest step, which is the best reading there is. PURE.
+ */
+export function stageNow(status) {
+  const c = status?.currentStep;
+  if (c && typeof c.label === "string" && c.label.trim())
+    return { step: c.label, stepN: Number.isFinite(c.n) ? c.n : null, stepTotal: Number.isFinite(c.total) ? c.total : null };
+  const now = stepForStage(status?.lastStage);
+  return now
+    ? { step: now.label, stepN: now.n, stepTotal: now.total }
+    : { step: status?.stepLabel ?? null, stepN: status?.stepN ?? null, stepTotal: status?.stepTotal ?? null };
+}
+
 // Lifecycle honesty (charter P1 §4): the status patch a TERMINAL delivered write must carry. Nothing runs
 // after the report: delivery is a packet and publish is code, so no
 // recordTransition ever advances the stepper past "Drafting the report" — a delivered run (with
@@ -386,6 +410,7 @@ export function seedRunStatus(ctx, { resume = false } = {}) {
     // — the identity is the SHARED rule, not this stepper's. See identitySeed.
     ...identitySeed(),
     stepIndex: first.index, stepLabel: first.label, stepN: first.n, stepTotal: first.total,
+    currentStep: currentStepOf(first),
     lastStage: null,
     verdict: null,
     url: null,
@@ -407,15 +432,26 @@ export function seedRunStatus(ctx, { resume = false } = {}) {
 // so for the whole of any of them every surface went on naming the PREVIOUS stage, which is the same
 // defect as a stale step wearing a different field. The step fields are still withheld — that part of
 // the early return was right, and an unmapped stage must never touch the displayed step.
+//
+// `currentStep` IS THE STEP THE RUN IS IN NOW, and it moves both ways. The step fields above keep the
+// furthest step reached (writeRunStatus), so a corrective pass that re-enters synthesis after case law
+// left them reading case law while `lastStage` read synthesis (measured 2026-09-18). `lastStage` is the
+// raw key; this is the same moment in the stepper's own words, for a surface that shows where the run is.
+// A stage with no display step leaves it where it was: those stages run inside the step already shown.
 export function recordTransition(ctx, rawStageKey) {
   const step = stepForStage(rawStageKey);
   writeRunStatus(ctx, {
-    ...(step ? { stepIndex: step.index, stepLabel: step.label, stepN: step.n, stepTotal: step.total } : {}),
+    ...(step ? { stepIndex: step.index, stepLabel: step.label, stepN: step.n, stepTotal: step.total, currentStep: currentStepOf(step) } : {}),
     lastStage: rawStageKey,
   });
   rollupStatus(ctx?.run?.studioRoot);
 }
 
+/** The stepper's own words for one step, as `currentStep` carries it. PURE. */
+function currentStepOf(step) {
+  return { index: step.index, label: step.label, n: step.n, total: step.total };
+}
+
 // ---- STATUS.md rollup --------------------------------------------------------------------------------
 // The archive lives UNDER studioRoot (studioRoot/archive/...), so a recursive walk of studioRoot finds
 // both in-flight and delivered/failed runs. Cap depth (status.json only sits at the run-dir level) and

package/driver/publish/render.mjs

@@ -90,7 +90,7 @@ let SENIOR_RIGHTS = new Map();
 let DISPOSITION_MODE = false;
 // — per-render flag: true when the record declares the v6 findings contract, which is the one that
 // guarantees a position on every negative and a TYPED off-field ground. Gates the grouped
-// reasoned-negative rendering; false ⇒ the pre- section, byte-identical, for every archived run.
+// reasoned-negative rendering; false ⇒ the pre-change section, byte-identical, for every archived run.
 let NEGATIVES_GROUPED = false;
 // doc 50 — the run's FROZEN framework manifest (opts.framework, from _driver/framework.json). When
 // present the report speaks ITS band words: chips/one-liners read f.band, the gauge ticks show its
@@ -1825,7 +1825,7 @@ function fullDetail(f, card, recordsByUri = new Map()) {
   // too. It never did — the grouping's own note promises "each member is a <details> whose body is the
   // same fullDetail block the compact card carries", and until now that was untrue of the one thing v6
   // guarantees on every negative. Suppressing them there would take a conditional whose only job is
-  // reproducing the pre- shape, which is the legacy code path this program forbids.
+  // reproducing the pre-change shape, which is the legacy code path this program forbids.
   //
   // Absent fields ⇒ both helpers return '' ⇒ zero bytes, and the interpolation is attached to the
   // template's opening so it leaves no whitespace-only line (review 2026-07-31, problem 8).
@@ -1859,7 +1859,7 @@ function fullDetail(f, card, recordsByUri = new Map()) {
   //
   // WHERE THERE IS NO PROSE THE TYPED PAIR IS STILL THE ACCOUNT, and that is most of the surfaces
   // fullDetail feeds: a structured-only finding (no card file), a reasoned-negative row, a compact
-  // card whose report-card stage produced nothing. 's promise that a negative's drawer carries its
+  // card whose report-card stage produced nothing. The promise that a negative's drawer carries its
   // positions is untouched — a negative has no Full-detail prose to duplicate.
   //
   // manageableLine is NOT gated: the manageable category is a closed code-owned vocabulary the prose has
@@ -1988,7 +1988,7 @@ function manageableLine(f) {
 //
 // TRIM-TO-EMPTY IS LOAD-BEARING AND IS PRESERVED VERBATIM. `foldClause` returned '' for null, undefined,
 // '' and whitespace-only input, and that empty string is what makes `clause(f.net) || card?.meta?.one ||
-// oneFallback(...)` fall through to exactly the pre- value on an archived run, which carries no
+// oneFallback(...)` fall through to exactly the pre-change value on an archived run, which carries no
 // `net`. Deleting the function without keeping that behaviour would move every archived card whose
 // `net` key exists but is blank. `clause` is `foldClause` with the budget arm removed and nothing else.
 const clause = (value) => String(value ?? '').trim();
@@ -2314,7 +2314,7 @@ function contextNotesBlock(notes = []) {
 }
 
 // charter ruling 1 (2026-07-30, name-led): the masthead depth strip LEADS with the product's registry
-// name in bold — the same name 's read pills speak, never a rung on our ladder — then the coverage
+// name in bold — the same name the read pills speak, never a rung on our ladder — then the coverage
 // clauses (what this search covers / omits, from the run's frozen components via productCoverageNote).
 // The seam is the LAST " — ": a registry name may itself carry one ("Preliminary clearance — register
 // only") while the coverage clauses never do (they join on ";" and ","). A note with no seam at all
@@ -2323,7 +2323,7 @@ function contextNotesBlock(notes = []) {
 /**
  * THE HERO VERDICT CAPTION, folded to its first sentence.
  *
- * 's design ruling: above any fold, only a statement, a labelled row, a count or a one-line card —
+ * The design ruling: above any fold, only a statement, a labelled row, a count or a one-line card —
  * "prose never appears until someone opens something, and once opened nothing is ever cut". The finding
  * cards were moved onto that rule by `cf8dd43`; the hero caption was named in the same ruling and left
  * behind, and this is the bullet that PR recorded as still owed.

package/driver/record-discard.mjs

@@ -5,7 +5,7 @@
 //
 // ── why this exists ──────────────────────────────────────────────────────────────────────────────────
 //
-// The shipped trace (/) asked ONE pass to answer a question that spans two moments that never
+// The shipped trace asked ONE pass to answer a question that spans two moments that never
 // coexist. A record discarded at screening is gone by the time `findings.json` is written; the findings
 // do not exist at the moment the record is discarded. Whichever end a single pass runs at, it guesses
 // about the other — and `deriveRecordCarry` ran inside `register-digest`, which is BEFORE `synthesis`

package/driver/register-count.mjs

@@ -447,7 +447,7 @@ export async function countRegisterHits({
       counts,
       // — which registers these figures cover, present ONLY when one was dropped. countLine renders
       // it; the scope block below records it. Both, deliberately: `scope.deferredJurisdictions` has sat
-      // on this artifact since it was written and NOTHING reads it, which is the same shape as 's
+      // on this artifact since it was written and NOTHING reads it, which is the same shape as
       // `deferred_coverage` riding the plan with no consumer and shipping a false clean. A field a
       // reader never sees is not a disclosure, so this one lands on the rendered line first.
       ...(officeScope ? { officeScope } : {}),

package/driver/register-digest-record.mjs

@@ -366,7 +366,7 @@ export function negativeMarkCell(row) {
 const MIN_JUDGED_ROWS = 1;
 
 /** A pipe row, cells escaped so a value carrying `|` cannot open a column. */
-const row = (cells) => `| ${cells.map((c) => str(c).replace(/\|/g, "\\|").replace(/\n+/g, " ") || "—").join(" | ")} |`;
+const row = (cells) => `| ${cells.map((c) => str(c).replace(/\\/g, "\\\\").replace(/\|/g, "\\|").replace(/\n+/g, " ") || "—").join(" | ")} |`;
 const table = (columns, rows) => [row(columns), `|${columns.map(() => "---").join("|")}|`, ...rows.map(row)].join("\n");
 
 /**

package/driver/report-card-record.mjs

@@ -117,9 +117,9 @@ export function findingsDocFor(runDir, ordinal) {
 // the record and under what number. publish/index.mjs quotes the correct shape verbatim in a comment of
 // its own, which is what makes the divergence provable rather than a matter of taste.
 //
-// IT SHIPPED BECAUSE THE CONVERSION WAS NEVER CHECKED AGAINST THE ARTIFACT. asked for exactly that
+// IT SHIPPED BECAUSE THE CONVERSION WAS NEVER CHECKED AGAINST THE ARTIFACT. The issue asked for exactly that
 // check — "recompose the bullet for every card in demo and assert byte-equality with the
-// delivered report.md" — and writing it is what caught this. The guard now lives beside 's, and
+// delivered report.md" — and writing it is what caught this. The guard now lives beside the code it checks, and
 // this is the argument for building the guard an issue asks for even when the code already looks done.
 //
 // THE NUMBER comes off the URI's last segment: `/mark/eu/018575624` → `018575624`. That is a parse, and

package/driver/roster-verdict.mjs

@@ -18,8 +18,8 @@
 //
 //   no configured store
 //       → the bundled roster governs, exactly as it always did — derived by driver/bundled-demos.mjs
-//         from the directory that ships it, never a list written down. On a test box it is CORRECT
-//; anywhere else it means CLEAROTRON_CUSTOMERS_DIR is not reaching the service (#83).
+//         from the directory that ships it, never a list written down. On a test box it is CORRECT;
+//         anywhere else it means CLEAROTRON_CUSTOMERS_DIR is not reaching the service.
 //
 // Pure: no fs, no env, no network. Every input is a parameter so a test can state the whole world.
 

package/driver/search-policy.mjs

@@ -152,7 +152,7 @@ export const COMPONENTS = {
 // so `basis` under-reports and could not carry the distinction even if we wanted it to.)
 //
 // The one mechanical set that stays load-bearing is the FLOORS — a tier-`identical` floor row, live and
-// in an instructed class, gets a full card in EVERY product. That is an obligation (/), not a
+// in an instructed class, gets a full card in EVERY product. That is an obligation, not a
 // priority, and the ladder does not grade it.
 //
 // `graded` means: the stage is told what kind of report it is writing and grades ITS OWN written output.

package/driver/skeptic-record.mjs

@@ -51,7 +51,7 @@ export function escalatedAxes(flagsText, axes) {
   const flags = String(flagsText ?? "");
   if (!flags) return [];
   return axes.filter((a) =>
-    new RegExp(`(^|\\n)\\s*[-*]?\\s*ESCALATE:\\s*${a.replace(/[-]/g, "\\-")}\\b`, "i").test(flags));
+    new RegExp(`(^|\\n)\\s*[-*]?\\s*ESCALATE:\\s*${a.replace(/[.*+?^${}()|[\]\\-]/g, "\\$&")}\\b`, "i").test(flags));
 }
 
 /** Where the call's evidence lives — the driver's own record of what the seat handed it. */

package/driver/stages.mjs

@@ -2154,7 +2154,7 @@ export const STAGES = {
     const supplementalLane = !!registerPlan?.contract?.supplemental_lane;
     return lines(
       `First, read and follow exactly: skills/clearance-register/SKILL.md (the shared spine) then skills/clearance-register/unit.md (MODE A — UNIT). Do NOT read digest.md (digest-mode judgment a unit must never run).`,
-      // WHAT THE KEY ALSO CARRIES — COMPOSED, NOT DOCTRINE ( /).
+      // WHAT THE KEY ALSO CARRIES — COMPOSED, NOT DOCTRINE.
       // `unit.md` used to name three tools flat, and on a deployment withholding two of them the seat was
       // told it holds tools its grant does not carry. The composer derives the list from the same table
       // that does the excluding, and returns NULL — not an empty sentence — when the provider cannot be

package/driver/suite-census.json

@@ -65,7 +65,7 @@
         },
         "a-browser-run-gets-its-own-temp-root.test.mjs": {
           "tests": 12,
-          "asserts": 29,
+          "asserts": 31,
           "skips": 0,
           "todos": 0
         },
@@ -195,9 +195,15 @@
           "skips": 0,
           "todos": 0
         },
+        "a-conditional-with-nothing-stated-prints-no-conditional-line.test.mjs": {
+          "tests": 2,
+          "asserts": 6,
+          "skips": 0,
+          "todos": 0
+        },
         "a-connect-line-says-where-it-runs.test.mjs": {
           "tests": 11,
-          "asserts": 48,
+          "asserts": 56,
           "skips": 0,
           "todos": 0
         },
@@ -255,6 +261,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-demo-leaves-no-temp-copies.test.mjs": {
+          "tests": 2,
+          "asserts": 6,
+          "skips": 0,
+          "todos": 0
+        },
         "a-demo-report-declares-itself.test.mjs": {
           "tests": 5,
           "asserts": 15,
@@ -1528,8 +1540,8 @@
           "todos": 0
         },
         "client-door.test.mjs": {
-          "tests": 38,
-          "asserts": 163,
+          "tests": 39,
+          "asserts": 168,
           "skips": 1,
           "todos": 0
         },
@@ -2537,7 +2549,7 @@
         },
         "findings-model.test.mjs": {
           "tests": 68,
-          "asserts": 257,
+          "asserts": 258,
           "skips": 0,
           "todos": 0
         },
@@ -3028,8 +3040,8 @@
           "todos": 0
         },
         "no-test-writes-inside-the-checkout.test.mjs": {
-          "tests": 20,
-          "asserts": 52,
+          "tests": 21,
+          "asserts": 58,
           "skips": 0,
           "todos": 0
         },
@@ -3364,8 +3376,8 @@
           "todos": 0
         },
         "portal-service.test.mjs": {
-          "tests": 130,
-          "asserts": 701,
+          "tests": 131,
+          "asserts": 712,
           "skips": 1,
           "todos": 0
         },
@@ -5373,6 +5385,12 @@
           "skips": 0,
           "todos": 0
         },
+        "the-status-says-which-step-the-run-is-in-now.test.mjs": {
+          "tests": 3,
+          "asserts": 8,
+          "skips": 0,
+          "todos": 0
+        },
         "the-summary-carries-structure.test.mjs": {
           "tests": 14,
           "asserts": 37,

package/driver/systemd/README.md

@@ -33,7 +33,7 @@ missing one and writes nothing, because a unit with one placeholder left starts
 worse than one that does not start. Which units need it is **derived from the files**, not from a list —
 and `driver/unit-inventory.mjs` declares them, with a test asserting the two agree in both directions.
 
-These are for a **server, not a laptop**. On a workstation there is nothing to install: `npx clearotron start` supervises the
+These are for a **server, not a laptop**. On a workstation there is nothing to install: `clearotron start` supervises the
 same loop for you, and`node driver/runner.mjs --watch` is what to run by hand if you started with
 `--no-worker` (`INSTALL.md` §5) — one foreground process that polls for queued jobs and for parked runs whose
 window has elapsed.

package/driver/unit-inventory.mjs

@@ -45,8 +45,8 @@
 // docs/architecture/05-config-governance.md, tier 2). Getting that wrong replaces working auth with
 // placeholders that look configured, and it is not work to do beside a running round.
 //
-// So the untracked units are declared as untracked, WITH THE REASON, which is exactly what 's
-// acceptance asks for: "either has a tracked file it is compared against, or is named here with the
+// So the untracked units are declared as untracked, WITH THE REASON, which is exactly what the
+// requirement asks for: "either has a tracked file it is compared against, or is named here with the
 // reason it does not".
 //
 // ── THE CORRECTION THIS FILE NEEDED ITSELF ───────────────────────────────────────────────────────

package/driver/verify.mjs

@@ -1375,7 +1375,7 @@ function connotationViolations(content, queryCount, opts = {}, dispositionsPath
 // patch — two families emitting a bare `form_damaged` would be indistinguishable there and the repair
 // would rewrite the wrong form.
 //
-// THE SHAPE IS BUILT AROUND THREE CONSUMERS, each of which fails SILENTLY on a mismatch (/):
+// THE SHAPE IS BUILT AROUND THREE CONSUMERS, each of which fails SILENTLY on a mismatch:
 //   - The CAUSE CENSUS IS FRONT-LOADED, `no_ruling=<n>`, before any named list: repairs.mjs CENSUS_RE
 //     sums exactly that, pipeline.mjs shows the failing model `tok.slice(0, 160)`, and a census that fell
 //     off the end of a slice would read as a missing quantity — i.e. as converged.

package/mcp-server/CHANGELOG.md

@@ -1,5 +1,9 @@
 # trademark-artifacts-mcp
 
+## 0.3.2-beta.13
+
+No changes in this release.
+
 ## 0.3.2-beta.12
 
 No changes in this release.

package/mcp-server/CONNECT.md

@@ -5,7 +5,7 @@ MCP-capable app. Two ways in, and they are not variants of each other:
 
 | | **Local** | **Hosted** |
 |---|---|---|
-| What it is | your app spawns `server.mjs` from your own clone | you were given a URL by whoever operates the engine |
+| What it is | your app spawns `serve.mjs` from your own clone | you were given a URL by whoever operates the engine |
 | Who it is for | anyone who cloned this repository | a customer or colleague reading someone else's runs |
 | Setup | copy-paste below, no account, no credential | paste the URL, sign in |
 | Reach | everything, including the write verbs | read-only, scoped to your own matters |
@@ -46,7 +46,7 @@ One command. Substitute your clone's path and your workspace root:
 ```sh
 claude mcp add trademark-artifacts --scope user \
   -e CLEAROTRON_WORK_DIR=/path/to/your/workspace \
-  -- node /path/to/clearotron/mcp-server/server.mjs
+  -- node /path/to/clearotron/mcp-server/serve.mjs
 ```
 
 Check it: `claude mcp list` prints `trademark-artifacts: … - √ Connected`.
@@ -64,7 +64,7 @@ PowerShell 5.1, write the separator as `"--"`: that shell drops a bare `--`. Rem
   "mcpServers": {
     "trademark-artifacts": {
       "command": "node",
-      "args": ["/path/to/clearotron/mcp-server/server.mjs"],
+      "args": ["/path/to/clearotron/mcp-server/serve.mjs"],
       "env": { "CLEAROTRON_WORK_DIR": "/path/to/your/workspace" }
     }
   }
@@ -82,7 +82,7 @@ Codex reads `~/.codex/config.toml`:
 ```toml
 [mcp_servers.trademark-artifacts]
 command = "node"
-args = ["/path/to/clearotron/mcp-server/server.mjs"]
+args = ["/path/to/clearotron/mcp-server/serve.mjs"]
 env = { CLEAROTRON_WORK_DIR = "/path/to/your/workspace" }
 ```
 
@@ -94,13 +94,13 @@ is a value written to a file.
 
 ## Any other MCP host
 
-The contract is the same three things every time: run `node mcp-server/server.mjs`, over stdio, with
+The contract is the same three things every time: run `node mcp-server/serve.mjs`, over stdio, with
 `CLEAROTRON_WORK_DIR` in its environment.
 
 ```json
 {
   "command": "node",
-  "args": ["/path/to/clearotron/mcp-server/server.mjs"],
+  "args": ["/path/to/clearotron/mcp-server/serve.mjs"],
   "env": { "CLEAROTRON_WORK_DIR": "…", "CLEAROTRON_REPORTS_DIR": "…" }
 }
 ```
@@ -125,7 +125,7 @@ read them. Spawn the server as that user:
 ```json
 {
   "command": "sudo",
-  "args": ["-u", "<operator>", "node", "/path/to/clearotron/mcp-server/server.mjs"]
+  "args": ["-u", "<operator>", "node", "/path/to/clearotron/mcp-server/serve.mjs"]
 }
 ```
 
@@ -133,7 +133,7 @@ That needs a one-time NOPASSWD rule, or the stdio handshake hangs on a password
 
 ```
 # /etc/sudoers.d/trademark-artifacts-mcp   (chmod 0440)
-<caller> ALL=(<operator>) NOPASSWD: /usr/bin/node /path/to/clearotron/mcp-server/server.mjs
+<caller> ALL=(<operator>) NOPASSWD: /usr/bin/node /path/to/clearotron/mcp-server/serve.mjs
 ```
 
 ## What to ask it

package/mcp-server/lib/runs.mjs

@@ -40,7 +40,7 @@ export function unreadableRunsReason({ workSet, workRoot, workExists, poolSet })
   if (workSet || workExists || poolSet) return null;
   return `no searches can be read here: CLEAROTRON_WORK_DIR is unset and ${workRoot} does not exist, `
     + "and CLEAROTRON_REPORTS_DIR is unset. Set them to the install's directories — `npx clearotron doctor` "
-    + "prints where an install keeps them.";
+    + "prints where an install keeps them, and mcp-server/CONNECT.md says how to connect this server.";
 }
 
 // Every workspace-<agent>/studio/clearance-search root under the live workspace root.

package/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-artifacts-mcp",
-  "version": "0.3.2-beta.12",
+  "version": "0.3.2-beta.13",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "MCP server to interrogate clearotron trademark-clearance runs — list/read artifacts, trace the full decision flow, telemetry/cost, coverage, single-run search, and a gated single-step what-if. Imports the clearotron-driver read-only; touches no driver/template/deploy files.",

package/mcp-server/serve.mjs

@@ -0,0 +1,27 @@
+#!/usr/bin/env node
+// SPDX-License-Identifier: AGPL-3.0-only
+// Copyright 2026 Cordillera Sàrl. Additional terms under section 7 of the AGPL-3.0 apply — see ADDITIONAL-TERMS.md
+//
+// serve.mjs — the MCP server over stdio, with the Node check in front of it. The connect lines name
+// this file.
+//
+// server.mjs cannot check the Node it runs on. An ES module's imports are all loaded before any of its
+// code runs, so on a Node below the floor the server fails while loading, with an error that names a
+// module and says nothing about the version. Measured on Node 18.20.8: "SyntaxError: The requested
+// module 'node:util' does not provide an export named 'parseEnv'". On a Windows laptop running the
+// connect line through WSL, the distribution's own Node 18 met "SyntaxError: Unexpected token 'with'"
+// (2026-09-19). This file imports only what an old Node can load, refuses in one plain line, and only
+// then loads the server.
+import { fileURLToPath } from "node:url";
+import { nodeFloorVerdict, nodeFloorRefusal } from "../shared/node-floor.mjs";   // one floor, read from package.json
+
+const floor = nodeFloorVerdict();
+if (!floor.ok) {
+  console.error(`clearotron: ${nodeFloorRefusal(floor)}`);
+  process.exit(1);
+}
+
+// THE SERVER STARTS AS THE ENTRY IT WOULD HAVE BEEN. It starts its stdio transport, and reads the
+// install's settings, only when it is the process's entry file, so the entry is handed over first.
+process.argv[1] = fileURLToPath(new URL("./server.mjs", import.meta.url));
+await import("./server.mjs");

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "clearotron",
   "type": "module",
-  "version": "0.3.2-beta.12",
+  "version": "0.3.2-beta.13",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",

package/portal-ui/package.json

@@ -2,7 +2,7 @@
   "name": "portal-ui",
   "private": true,
   "type": "module",
-  "version": "0.3.2-beta.12",
+  "version": "0.3.2-beta.13",
   "license": "AGPL-3.0-only",
   "description": "The unified trademark portal UI. One address, one login: who you are decides what you see. Built as a static bundle, served by driver/portal-service.mjs — the browser never reaches profile-service or recipe-service.",
   "engines": {

package/providers/free-tier/src/capabilities.js

@@ -48,9 +48,9 @@
 // The question that DOES depend on the box — which offices this deployment can reach right now — is
 // answered in driver/register-availability.mjs, and the answer rides the plan as a disclosed
 // `deferred_coverage` row. It is deliberately not answered here, and `covered` is deliberately not
-// narrowed there either: 's admission gate reads this field to decide which territories a client may
+// narrowed there either: the admission gate reads this field to decide which territories a client may
 // ORDER, so narrowing it to the configured half would refuse a US-only matter at the door instead of
-// disclosing its US gap ('s ruling is that such a matter must START and disclose).
+// disclosing its US gap (the rule is that such a matter must START and disclose).
 //
 // ── THE "NO SHAPE FOR HALF OF THIS RAN" RULE IS UNCHANGED — IT MOVED THE SPLIT, NOT REPEALED IT ──────
 //

package/providers/jx/src/core.js

@@ -13,10 +13,10 @@
 // SEARCH MACHINERY (query terms), never registry facts — the never-invent rule binds registry DATA,
 // not the queries we choose to run.
 //
-// BILLING RIDES THE RUN, NOT THIS FILE (/ at e49868e3, and the transport deleted at).
+// BILLING RIDES THE RUN, NOT THIS FILE.
 // These lanes used to POST to the Anthropic Messages API on ANTHROPIC_API_KEY at a hardcoded haiku
-// tier while the rest of the run used whatever program the customer chose — the mix the owner's D6
-// ruling forbids. They now go through `engine.runTurn()` like every other model call, so whatever
+// tier while the rest of the run used whatever program the customer chose — the mix the product's one-provider-per-run
+// rule forbids. They now go through `engine.runTurn()` like every other model call, so whatever
 // program and billing mode the run is on carries them, and nothing here selects a vendor.
 //
 // `callMessagesAPI` — with its own MESSAGES_API_URL, x-api-key header and retry ladder — is DELETED

package/providers/jx/src/turn-envelope.mjs

@@ -3,7 +3,7 @@
 // turn-envelope.mjs — render a forced-tool request as a CLI-turn prompt, and read the turn's text back
 // into the envelope the three lane parsers already understand. PURE. No driver import, no network.
 //
-// ── why this exists ( /) ─────────────────────────────────────────────────────────────────
+// ── why this exists ─────────────────────────────────────────────────────────────────
 //
 // The jx lanes called the Anthropic Messages API directly with `tool_choice: {type:"tool"}`, on a key,
 // at a hardcoded tier — regardless of which AI program the customer configured. The owner's standing

package/providers/oauth-mcp-bridge/CHANGELOG.md

@@ -1,5 +1,9 @@
 # trademark-oauth-mcp-bridge
 
+## 0.3.2-beta.13
+
+No changes in this release.
+
 ## 0.3.2-beta.12
 
 No changes in this release.

package/providers/oauth-mcp-bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-oauth-mcp-bridge",
-  "version": "0.3.2-beta.12",
+  "version": "0.3.2-beta.13",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "OAuth 2.1 MCP stdio bridge used by the engine's case-law gather stage (courtlistener / legaldatahunter).",

package/providers/perplexity/README.md

@@ -11,7 +11,7 @@ optional: without `PERPLEXITY_API_KEY` the run door refuses by name
 (`preflightResearchCredential`, `../../driver/driver.config.mjs`) rather than searching less. A
 KNOCKOUT is the exception and it is deliberate — its register half is a whole product without the
 sweep, so `../../driver/pipeline-knockout.mjs` SKIPS this adapter and discloses the half it did not
-run ( acceptance 6). Nothing is billed for a sweep that never runs.
+run. Nothing is billed for a sweep that never runs.
 (`CLEAROTRON_KNOCKOUT_SWEEP_FIXTURES` is the $0 dev route to a knockout WITH a sweep.)
 
 The header's `index.js` and `build.js` belong to the plugin packaging this core was extracted from;

package/providers/signa/src/capabilities.js

@@ -20,7 +20,7 @@
 //   * predicates.wildcardInfix — `contains` would appear to serve it and does not. The kernel hands
 //     the infix case its RAW pattern with the asterisks still in it, so the sweep would search the
 //     punctuation. Declaring it would be declaring a capability the executor cannot serve, which is
-//     the one thing 's criteria forbid. Stays null; the slice defers, disclosed.
+//     the one thing a declaration must never do. Stays null; the slice defers, disclosed.
 //   * resultCeiling — there is no single number to put here, and the reason is worth the paragraph.
 //     An unscoped term pages to exhaustion whatever its size, on every predicate — no ceiling. But add
 //     `filters.owner_name` and the SAME term stops dead at the owner-scoped window (400), which the
@@ -194,7 +194,7 @@ export const CAPABILITIES = Object.freeze({
 
     // ── WHICH BINDING LAYERS DOES A SEARCH SCOPED TO THIS OFFICE ACTUALLY RETURN? ──────────
     //
-    // 's first task, answered for this provider by driving the three scopings against each other rather
+    // The first question for every provider, answered here by driving the three scopings against each other rather
     // than by reading the documentation. One term, one limit, France:
     //
     //   filters.offices                              the national register ALONE

package/providers/signa/src/core.js

@@ -680,8 +680,8 @@ export function toSignaParams(p = {}) {
     // and this branch is the only thing standing between that and `strategies: ["exact"]`. With
     // `predicates.default` declared `"contains"` and no mapping here, every unanchored slice would
     // have gone to the wire as an EXACT search: narrower than the plan asked for, returning fewer
-    // rows, and answering as though it were the query requested. That is 's defect exactly, and
-    // declaring a predicate without wiring it is the one thing this issue's criteria forbid.
+    // rows, and answering as though it were the query requested. That is the silent narrowing this branch
+    // prevents, and declaring a predicate without wiring it is the one thing a declaration must never do.
     //
     // A `*` in the term means this is the infix-wildcard case, which shares the empty {} and which
     // `contains` cannot serve — the kernel hands the RAW pattern, asterisks included, so a contains

package/providers/uspto-local/src/core.js

@@ -67,7 +67,7 @@ function resolveDbPath(auth) {
     // marker added by one consumer is a marker the other consumers do not get. Marking at the throw
     // means every path out of this provider carries it, including ones written later.
     //
-    // 's composite backstop caught a THROW and converted it. That backstop never fired against this
+    // The composite backstop caught a THROW and converted it. That backstop never fired against this
     // provider, because four of its five entry points catch their own throw and return a plain error
     // first — and the test that claimed it worked drove a stub that throws, which this does not do.
     throw new Error(

package/providers/uspto-local/src/sync.js

@@ -312,7 +312,7 @@ export async function syncIndex({ dbPath, files, ingest = ingestFile, onFile = n
     await onPhase?.("ingest");
     // BLOCKS THE EVENT LOOP FOR THE WHOLE REBUILD — node:sqlite is synchronous, and this is one
     // transaction over every row in the index. Nothing on this thread runs again until it commits,
-    // which is why 's disk sampler is a worker thread rather than a timer.
+    // which is why the disk sampler is a worker thread rather than a timer.
     rebuildFts(db);
     await onPhase?.("fts");
     const rows = db.prepare("SELECT count(*) AS n FROM mark").get().n;

package/scripts/README.md

@@ -52,14 +52,10 @@ than its contents, and the whole reason the browser checks exist is that a fix f
 scrollbars" shipped a report with two scrollbars past 1,500 passing tests. Those checks run in CI's
 `build-and-verify` job and nowhere else — so **CI, not your machine, is what covers them.**
 
-`render-check.mjs` is a further step out, running in **neither** — and wiring it up is what found out
-why that mattered. CI left it out because it measures a PUBLISHED RUN and had no pool to point at;
-`--fixture-pool` removed that reason, so wired it into`build-and-verify` as a blocking step.
-
-**Its first run anywhere reported 6 of 9 assertions failing with `no-probe` and `null`** — not a layout
+**`render-check.mjs`'s first run anywhere reported 6 of 9 assertions failing with `no-probe` and `null`** — not a layout
 defect, an inability to *measure*. The three assertions that look inside the report frame (the height
 bridge, the scrollbar loop, the sideways overflow) depend on a probe script in the sandboxed iframe
-posting back to the shell. The pool built fine; the harness cannot see inside its own frame. **.**
+posting back to the shell. The pool built fine; the harness cannot see inside its own frame.
 
 **The first explanation written down here was wrong, and how it was wrong is the useful part.** This
 paragraph used to say the message never arrives under `file://` with production's sandbox. Measured in