clearotron 0.3.2-beta.12 → 0.3.2-beta.14

package/driver/portal-service.mjs

@@ -179,6 +179,9 @@ import { accessAudience, audienceLabel } from "../shared/access-audience.mjs";
 import { resolveNumericSetting } from "./numeric-setting.mjs";   // — the same table the engine enforces, without the throw a rendering surface must not take
 import { isEntrypoint } from "../shared/is-entrypoint.mjs";   // — one entry-point test, all spellings
 import { deploymentBox } from "../shared/deployment-box.mjs";   // — the box names itself; one rule
+import { stageNow } from "./progress.mjs";   // the stage a live run is in now, for the card and the row
+// A run in one of these has finished; its step is the one its terminal write set, not the stage it last entered.
+const TERMINAL_STATES = new Set(["delivered", "failed", "cancelled"]);
 
 // The offering the portal menus build from — product-rows.mjs's row, unchanged.
 //
@@ -384,7 +387,7 @@ export function scanAccountRuns({ poolRoot, workspaceRoot, account = null, gener
           stageLabel: stageLabelOf(meta.searchLevel) ?? meta.stageLabel ?? null,
           productName: productNameOf(meta.searchLevel),
           state: "delivered", date: meta.date ?? null,
-          // WHEN IT FINISHED, to the second (/). `date` is DAY precision and always was — it is
+          // WHEN IT FINISHED, to the second. `date` is DAY precision and always was — it is
           // parsed out of the run directory name. Two reads of one mark delivered on the same day
           // therefore TIE, Array.prototype.sort is stable, and which one the parent row spoke for was
           // decided by readdirSync order rather than by recency.
@@ -515,7 +518,11 @@ export function scanAccountRuns({ poolRoot, workspaceRoot, account = null, gener
         resetsAt: typeof s.resetsAt === "string" ? s.resetsAt : null,
         // Elapsed, so a card can say how long this has been going without inventing a finish time.
         startedAt: typeof s.startedAt === "string" ? s.startedAt : null,
-        step: s.stepLabel ?? null, stepN: s.stepN ?? null, stepTotal: s.stepTotal ?? null,
+        // THE STAGE IT IS IN NOW, a step back into an earlier stage included (owner, 2026-09-19): see
+        // stageNow. Only while it is live; a run that has finished keeps the step its terminal write set.
+        ...(TERMINAL_STATES.has(s.state)
+          ? { step: s.stepLabel ?? null, stepN: s.stepN ?? null, stepTotal: s.stepTotal ?? null }
+          : stageNow(s)),
         // — a requested stop is a state the screen shows. Stamped by stop_run,
         // preserved by writeRunStatus's spread-merge, replaced by the terminal when the honour check
         // fires. The UI derives "Stopping…" from this beside a non-terminal state.
@@ -867,7 +874,7 @@ export const SERVER_ROUTE_HEADS = Object.freeze(["api", "report", "admin", "heal
  * `msgId` and `conversationId` sat in this list while `jobFor` hardcoded both to null and the trigger
  * hop stripped them off again. The totality test beside it could not see that: it asks whether every
  * declared field is classified, which a declared-and-nulled field satisfies perfectly. So the sentence
- * above asserted a behaviour and the test next to it checked a different one — the same shape as 's
+ * above asserted a behaviour and the test next to it checked a different one — the same shape as
  * "an invitation nothing honours", one level up.
  *
  * `stamped` exists so the new guard can be DERIVED rather than hand-listed. It splits `carries` into the
@@ -2928,7 +2935,7 @@ async function connectorDoorKind(url) {
         // row, and a retired-endpoint row is a different fact from a not-yours row. If an old open tab is
         // still clicking Flag, that is a thing worth being able to count.
         //
-        // WHAT IS DELIBERATELY STILL BELOW THIS LINE: the whole resolver — the two-lane shape, 's
+        // WHAT IS DELIBERATELY STILL BELOW THIS LINE: the whole resolver — the two-lane shape, the
         // disposition read, the server-side-locator rule. The owner ruled "disable services and any code",
         // and the acceptance criterion says re-enabling must be a switch and not a rebuild. Deleting 130
         // lines of hard-won doctrine would have made it a rebuild.
@@ -3759,7 +3766,12 @@ function doctrineStore(now = Date.now) {
   } catch (e) {
     // NOT `{head: null}` alone. A null head with no reason reads as "no store", which is a legal and
     // healthy state (`no-overlay`); this is a different thing and has to say so.
-    value = { head: null, situation: "unreadable", outcome: "blocked", detail: String(e?.message ?? e).slice(0, 120) };
+    //
+    // THE ERROR'S OWN WORDS GO TO THE SERVICE LOG, NOT THE WIRE. This answer is served by the health
+    // route, and an error message can carry the store's filesystem path. `unreadable` says what the
+    // caller needs; the operator reads why in the log.
+    console.error(`[portal] the instructions store could not be read: ${String(e?.message ?? e).slice(0, 200)}`);
+    value = { head: null, situation: "unreadable", outcome: "blocked" };
   }
   storeCache = { at: t, value };
   return value;

package/driver/predelivery-lint.mjs

@@ -30,7 +30,7 @@ import { partyFactSources, partyFactViolations, partyFactMessage, canJudgePartyF
 import { writeUpViolations, writeUpMessage } from "./narrative-write-ups.mjs";   //
 
 import { findRegistryArithmeticIssues, findRegistryViolations, splitBlocks } from "./registry-fidelity.mjs";
-import { CLIENT_TIER_BY_COMPOSITE, joinFindingToBlock, parseBlockOrd, worstLiveBand, NO_RATED_CONFLICTS, deriveActionConditions, isUnconditionalProceed, verdictStance, joinAskToAnswer, projectAssessmentField, POSITION_REQUIRED_DISPOSITIONS, OFF_FIELD_GROUNDS, FINDINGS_SCHEMA_VERSION, netChainMarkers, STATEMENT_CLAUSE_MAX } from "./findings-model.mjs";
+import { CLIENT_TIER_BY_COMPOSITE, joinFindingToBlock, parseBlockOrd, worstLiveBand, NO_RATED_CONFLICTS, deriveActionConditions, isUnconditionalProceed, verdictStance, statedConditions, joinAskToAnswer, projectAssessmentField, POSITION_REQUIRED_DISPOSITIONS, OFF_FIELD_GROUNDS, FINDINGS_SCHEMA_VERSION, netChainMarkers, STATEMENT_CLAUSE_MAX } from "./findings-model.mjs";
 import { normalizeBand } from "./framework.mjs";
 import { clientConditions, unrenderableConditions, ENGINE_TOKEN_RE } from "./terminal-clamp.mjs";   // the reader's clause per condition, and the token shape it may never carry
 import { knockoutNoteView, REQUEST_NOTE_WORDS, REQUEST_SUBJECT_WORDS } from "./findings-model.mjs";   // one reader for where a note prints
@@ -87,7 +87,7 @@ const REF_ALLOWLIST = new Set([
 const TERRITORY_VOCAB = new Set(Object.values(REGION_NAMES).map((n) => norm(n)));
 
 function stripHtml(s) {
-  return String(s ?? "").replace(/<[^>]+>/g, " ").replace(/&amp;/g, "&").replace(/&nbsp;/g, " ");
+  return String(s ?? "").replace(/<[^>]+>/g, " ").replace(/&nbsp;/g, " ").replace(/&amp;/g, "&");
 }
 
 // "April 2014", "MAY 2026" — dates pass the Title-Case-multi-word shape but are never entities.
@@ -2023,7 +2023,12 @@ export function statementCoherenceChecks({ verdictDoc }) {
       stanceOk ? "" : `verdict.json stance "${verdictDoc.stance}" does not match the verdict ${v || "(missing)"} (expected "${expected ?? "?"}") — the sidecar fields diverged; re-derive it (writeVerdictSidecar composes both from one record)`);
     if (!c3.pass) c3.structural = true;
     out.push(c3);
-    const formOk = verdictDoc.stance !== "conditional" || /—\s*conditional on:/.test(st);
+    // The form is owed only where something is stated: a conditional whose every condition was ruled to
+    // the run record carries the band word alone (riskStatement), and a "conditional on:" there would be
+    // the empty line the owner ruled off the page.
+    const stated = statedConditions({ reasons: verdictDoc.reasons, clauses: verdictDoc.clauses });
+    const nothingStated = !stated.cls.length && !stated.conds.length;
+    const formOk = verdictDoc.stance !== "conditional" || nothingStated || /—\s*conditional on:/.test(st);
     const c4 = check("statement-conditional-form", "verdict", "report", formOk,
       formOk ? "" : `a conditional-stance statement must state what conditions reliance ("<Tier> — conditional on: <facts>"), but reads "${st.slice(0, 80)}" — re-derive the sidecar`);
     if (!c4.pass) c4.structural = true;
@@ -2339,7 +2344,7 @@ export function runLint({ depth, commonLawGrid, matterContext, clientPartyName,
 // ── The KNOCKOUT lane's applicable subset (2026-07-31) ──────────────────────────────────────────────
 // The knockout (Stage 0/0.5) lane wrote NO predelivery-lint.json at all, by a decision recorded in
 // docs/DELIVERY.md (2026-07-28). That decision rested on two premises this tranche has since moved:
-// the lint artifact is now the WORKBOOK's QC record (/), so a lane that writes none produces an
+// the lint artifact is now the WORKBOOK's QC record, so a lane that writes none produces an
 // EMPTY QC record rather than a deliberately-absent one; and the A10 projects recorded defects onto
 // the cover note that reaches the reviewing lawyer, so a knockout defect reached nobody. What has NOT
 // moved is the other half of the memo: this lane's deliverable is store-rendered, and most clearance

package/driver/progress.mjs

@@ -97,6 +97,30 @@ export function stepForStage(rawStageKey) {
   return { index, label: DISPLAY_STEPS[index], n: index + 1, total: DISPLAY_STEPS.length };
 }
 
+/**
+ * THE STAGE A LIVE RUN IS IN NOW, for the card and the row a person watches (owner, 2026-09-19).
+ *
+ * status.json keeps two readings. The step fields hold the furthest display step ever reached, for a
+ * stepper that never runs backwards. `lastStage` is the stage the run ENTERED last, written at the one
+ * choke point every dispatch passes, corrective re-entries included. The card named the first, so a run
+ * sent back into synthesis by a correction pass went on reading "Case law & refutation" (measured on a
+ * beta, 2026-09-18). This names the stage in hand, a step back included, with its own step number.
+ *
+ * `currentStep` FIRST, where the run wrote one: the step it is in now, in the stepper's own words, moved by
+ * every transition in either direction and left in place through a stage with no display step. A status
+ * written before that field existed falls back to mapping `lastStage`, and one with neither keeps the
+ * furthest step, which is the best reading there is. PURE.
+ */
+export function stageNow(status) {
+  const c = status?.currentStep;
+  if (c && typeof c.label === "string" && c.label.trim())
+    return { step: c.label, stepN: Number.isFinite(c.n) ? c.n : null, stepTotal: Number.isFinite(c.total) ? c.total : null };
+  const now = stepForStage(status?.lastStage);
+  return now
+    ? { step: now.label, stepN: now.n, stepTotal: now.total }
+    : { step: status?.stepLabel ?? null, stepN: status?.stepN ?? null, stepTotal: status?.stepTotal ?? null };
+}
+
 // Lifecycle honesty (charter P1 §4): the status patch a TERMINAL delivered write must carry. Nothing runs
 // after the report: delivery is a packet and publish is code, so no
 // recordTransition ever advances the stepper past "Drafting the report" — a delivered run (with
@@ -386,6 +410,7 @@ export function seedRunStatus(ctx, { resume = false } = {}) {
     // — the identity is the SHARED rule, not this stepper's. See identitySeed.
     ...identitySeed(),
     stepIndex: first.index, stepLabel: first.label, stepN: first.n, stepTotal: first.total,
+    currentStep: currentStepOf(first),
     lastStage: null,
     verdict: null,
     url: null,
@@ -407,15 +432,26 @@ export function seedRunStatus(ctx, { resume = false } = {}) {
 // so for the whole of any of them every surface went on naming the PREVIOUS stage, which is the same
 // defect as a stale step wearing a different field. The step fields are still withheld — that part of
 // the early return was right, and an unmapped stage must never touch the displayed step.
+//
+// `currentStep` IS THE STEP THE RUN IS IN NOW, and it moves both ways. The step fields above keep the
+// furthest step reached (writeRunStatus), so a corrective pass that re-enters synthesis after case law
+// left them reading case law while `lastStage` read synthesis (measured 2026-09-18). `lastStage` is the
+// raw key; this is the same moment in the stepper's own words, for a surface that shows where the run is.
+// A stage with no display step leaves it where it was: those stages run inside the step already shown.
 export function recordTransition(ctx, rawStageKey) {
   const step = stepForStage(rawStageKey);
   writeRunStatus(ctx, {
-    ...(step ? { stepIndex: step.index, stepLabel: step.label, stepN: step.n, stepTotal: step.total } : {}),
+    ...(step ? { stepIndex: step.index, stepLabel: step.label, stepN: step.n, stepTotal: step.total, currentStep: currentStepOf(step) } : {}),
     lastStage: rawStageKey,
   });
   rollupStatus(ctx?.run?.studioRoot);
 }
 
+/** The stepper's own words for one step, as `currentStep` carries it. PURE. */
+function currentStepOf(step) {
+  return { index: step.index, label: step.label, n: step.n, total: step.total };
+}
+
 // ---- STATUS.md rollup --------------------------------------------------------------------------------
 // The archive lives UNDER studioRoot (studioRoot/archive/...), so a recursive walk of studioRoot finds
 // both in-flight and delivered/failed runs. Cap depth (status.json only sits at the run-dir level) and

package/driver/publish/render-knockout.mjs

@@ -63,6 +63,7 @@ import { EXPORT_TOGGLE, exportPopover, EXPORT_MENU_JS } from './report-topbar.mj
 import { makeClassifyStatus, isAllClass } from '../../providers/_shared/screen.mjs';
 import { saysSomethingNew } from '../../shared/says-something-new.mjs';
 import { isNextStepHeading } from '../knockout-next-step.mjs';
+import OFFERED from '../../shared/offered-territories.json' with { type: 'json' };   // the order form's own territory names
 
 const HERE = dirname(fileURLToPath(import.meta.url));
 
@@ -481,6 +482,14 @@ function territoryName(code, { bare = false } = {}) {
   } catch { return ''; }
 }
 
+/** A territory the order names, in the order form's own words, or '' when that list has no such code. */
+const ORDER_FORM_NAMES = new Map([...OFFERED.regions, ...OFFERED.countries].map((t) => [t.code, t.name]));
+const orderedTerritoryName = (code) => {
+  const c = String(code ?? '').trim().toUpperCase();
+  // EM is the European Union register's own code, and some records carry it for an EU order.
+  return ORDER_FORM_NAMES.get(c === 'EM' ? 'EU' : c) ?? '';
+};
+
 /** "a, b and c" — the reader's list, not a join on commas. */
 function listWords(items) {
   const xs = (items ?? []).filter(Boolean);
@@ -1244,12 +1253,28 @@ function aboutRequestBlock(scope, requestNotes, depthNote = '', productContext =
   // the middle of the panel is the thing a reader skips; the count and its source are what they read.
   const regions = (registerCounts?.scope?.regions ?? []).filter(Boolean);
   const provider = registerCounts?.providerLabel ?? registerCounts?.provider ?? '';
-  // THE BOARD'S OWN ROW: "186 registers, on Clarivate Compumark." — registers, because that is what was
-  // counted, and no fold: the board lists no territories here, and the workbook's counts sheet carries
-  // every register a figure was taken over.
-  const counted = regions.length
-    ? `${regions.length} ${regions.length === 1 ? 'register' : 'registers'}${provider ? `, on ${provider}` : ''}.`
-    : (registerCounts ? `Counted worldwide${provider ? `, on ${provider}` : ''}` : '');
+  // THE ORDER'S TERRITORIES, NOT THE PROVIDER'S REGISTERS (owner, 2026-09-19). The row counted the
+  // registers the provider searched, and for a one-country order that is not one: a United States order is
+  // counted over the United States and the international register, because an international filing can
+  // designate the United States. A client who ordered one country read "2 registers" as a mistake. So an
+  // order that names its territories is stated as it named them, in the order form's own names; the
+  // registers actually counted stay in the line under the counts table. A worldwide order keeps the board's
+  // row, "186 registers, on Clarivate Compumark.", because there the count is the scope (the record says
+  // worldwide by carrying no jurisdictions). A territory the provider does not cover was not counted, so it
+  // is not listed here; it is disclosed where deferrals are. A territory the form's list cannot name, or an
+  // office this install could not reach, falls back to the count rather than printing a code or claiming
+  // a territory nothing was counted in.
+  const on = provider ? `, on ${provider}` : '';
+  const sc = registerCounts?.scope ?? {};
+  const deferred = new Set((sc.deferredJurisdictions ?? []).map((c) => String(c ?? '').trim().toUpperCase()));
+  const ordered = [...new Set((sc.jurisdictions ?? [])
+    .filter((c) => !deferred.has(String(c ?? '').trim().toUpperCase())).map(orderedTerritoryName))];
+  const namesTheOrder = sc.worldwide !== true && !(sc.unreachableOffices ?? []).length
+    && ordered.length > 0 && ordered.every(Boolean);
+  const counted = namesTheOrder ? `${listWords(ordered)}${on}.`
+    : regions.length
+      ? `${regions.length} ${regions.length === 1 ? 'register' : 'registers'}${on}.`
+      : (registerCounts ? `Counted worldwide${on}` : '');
   if (!asked && !where && !classLine && !stage && !context && !counted) return '';
   // ONE PANEL, THE SAME ON BOTH REPORTS (the 2026-09-16 report redesign). The rows carry what was asked for; the
   // counts row says what was counted and hides the territory list behind a fold rather than running a

package/driver/publish/render.mjs

@@ -90,7 +90,7 @@ let SENIOR_RIGHTS = new Map();
 let DISPOSITION_MODE = false;
 // — per-render flag: true when the record declares the v6 findings contract, which is the one that
 // guarantees a position on every negative and a TYPED off-field ground. Gates the grouped
-// reasoned-negative rendering; false ⇒ the pre- section, byte-identical, for every archived run.
+// reasoned-negative rendering; false ⇒ the pre-change section, byte-identical, for every archived run.
 let NEGATIVES_GROUPED = false;
 // doc 50 — the run's FROZEN framework manifest (opts.framework, from _driver/framework.json). When
 // present the report speaks ITS band words: chips/one-liners read f.band, the gauge ticks show its
@@ -1825,7 +1825,7 @@ function fullDetail(f, card, recordsByUri = new Map()) {
   // too. It never did — the grouping's own note promises "each member is a <details> whose body is the
   // same fullDetail block the compact card carries", and until now that was untrue of the one thing v6
   // guarantees on every negative. Suppressing them there would take a conditional whose only job is
-  // reproducing the pre- shape, which is the legacy code path this program forbids.
+  // reproducing the pre-change shape, which is the legacy code path this program forbids.
   //
   // Absent fields ⇒ both helpers return '' ⇒ zero bytes, and the interpolation is attached to the
   // template's opening so it leaves no whitespace-only line (review 2026-07-31, problem 8).
@@ -1859,7 +1859,7 @@ function fullDetail(f, card, recordsByUri = new Map()) {
   //
   // WHERE THERE IS NO PROSE THE TYPED PAIR IS STILL THE ACCOUNT, and that is most of the surfaces
   // fullDetail feeds: a structured-only finding (no card file), a reasoned-negative row, a compact
-  // card whose report-card stage produced nothing. 's promise that a negative's drawer carries its
+  // card whose report-card stage produced nothing. The promise that a negative's drawer carries its
   // positions is untouched — a negative has no Full-detail prose to duplicate.
   //
   // manageableLine is NOT gated: the manageable category is a closed code-owned vocabulary the prose has
@@ -1988,7 +1988,7 @@ function manageableLine(f) {
 //
 // TRIM-TO-EMPTY IS LOAD-BEARING AND IS PRESERVED VERBATIM. `foldClause` returned '' for null, undefined,
 // '' and whitespace-only input, and that empty string is what makes `clause(f.net) || card?.meta?.one ||
-// oneFallback(...)` fall through to exactly the pre- value on an archived run, which carries no
+// oneFallback(...)` fall through to exactly the pre-change value on an archived run, which carries no
 // `net`. Deleting the function without keeping that behaviour would move every archived card whose
 // `net` key exists but is blank. `clause` is `foldClause` with the budget arm removed and nothing else.
 const clause = (value) => String(value ?? '').trim();
@@ -2314,7 +2314,7 @@ function contextNotesBlock(notes = []) {
 }
 
 // charter ruling 1 (2026-07-30, name-led): the masthead depth strip LEADS with the product's registry
-// name in bold — the same name 's read pills speak, never a rung on our ladder — then the coverage
+// name in bold — the same name the read pills speak, never a rung on our ladder — then the coverage
 // clauses (what this search covers / omits, from the run's frozen components via productCoverageNote).
 // The seam is the LAST " — ": a registry name may itself carry one ("Preliminary clearance — register
 // only") while the coverage clauses never do (they join on ";" and ","). A note with no seam at all
@@ -2323,7 +2323,7 @@ function contextNotesBlock(notes = []) {
 /**
  * THE HERO VERDICT CAPTION, folded to its first sentence.
  *
- * 's design ruling: above any fold, only a statement, a labelled row, a count or a one-line card —
+ * The design ruling: above any fold, only a statement, a labelled row, a count or a one-line card —
  * "prose never appears until someone opens something, and once opened nothing is ever cut". The finding
  * cards were moved onto that rule by `cf8dd43`; the hero caption was named in the same ruling and left
  * behind, and this is the bullet that PR recorded as still owed.

package/driver/record-discard.mjs

@@ -5,7 +5,7 @@
 //
 // ── why this exists ──────────────────────────────────────────────────────────────────────────────────
 //
-// The shipped trace (/) asked ONE pass to answer a question that spans two moments that never
+// The shipped trace asked ONE pass to answer a question that spans two moments that never
 // coexist. A record discarded at screening is gone by the time `findings.json` is written; the findings
 // do not exist at the moment the record is discarded. Whichever end a single pass runs at, it guesses
 // about the other — and `deriveRecordCarry` ran inside `register-digest`, which is BEFORE `synthesis`

package/driver/register-count.mjs

@@ -447,7 +447,7 @@ export async function countRegisterHits({
       counts,
       // — which registers these figures cover, present ONLY when one was dropped. countLine renders
       // it; the scope block below records it. Both, deliberately: `scope.deferredJurisdictions` has sat
-      // on this artifact since it was written and NOTHING reads it, which is the same shape as 's
+      // on this artifact since it was written and NOTHING reads it, which is the same shape as
       // `deferred_coverage` riding the plan with no consumer and shipping a false clean. A field a
       // reader never sees is not a disclosure, so this one lands on the rendered line first.
       ...(officeScope ? { officeScope } : {}),

package/driver/register-digest-record.mjs

@@ -366,7 +366,7 @@ export function negativeMarkCell(row) {
 const MIN_JUDGED_ROWS = 1;
 
 /** A pipe row, cells escaped so a value carrying `|` cannot open a column. */
-const row = (cells) => `| ${cells.map((c) => str(c).replace(/\|/g, "\\|").replace(/\n+/g, " ") || "—").join(" | ")} |`;
+const row = (cells) => `| ${cells.map((c) => str(c).replace(/\\/g, "\\\\").replace(/\|/g, "\\|").replace(/\n+/g, " ") || "—").join(" | ")} |`;
 const table = (columns, rows) => [row(columns), `|${columns.map(() => "---").join("|")}|`, ...rows.map(row)].join("\n");
 
 /**

package/driver/report-card-record.mjs

@@ -117,9 +117,9 @@ export function findingsDocFor(runDir, ordinal) {
 // the record and under what number. publish/index.mjs quotes the correct shape verbatim in a comment of
 // its own, which is what makes the divergence provable rather than a matter of taste.
 //
-// IT SHIPPED BECAUSE THE CONVERSION WAS NEVER CHECKED AGAINST THE ARTIFACT. asked for exactly that
+// IT SHIPPED BECAUSE THE CONVERSION WAS NEVER CHECKED AGAINST THE ARTIFACT. The issue asked for exactly that
 // check — "recompose the bullet for every card in demo and assert byte-equality with the
-// delivered report.md" — and writing it is what caught this. The guard now lives beside 's, and
+// delivered report.md" — and writing it is what caught this. The guard now lives beside the code it checks, and
 // this is the argument for building the guard an issue asks for even when the code already looks done.
 //
 // THE NUMBER comes off the URI's last segment: `/mark/eu/018575624` → `018575624`. That is a parse, and

package/driver/roster-verdict.mjs

@@ -18,8 +18,8 @@
 //
 //   no configured store
 //       → the bundled roster governs, exactly as it always did — derived by driver/bundled-demos.mjs
-//         from the directory that ships it, never a list written down. On a test box it is CORRECT
-//; anywhere else it means CLEAROTRON_CUSTOMERS_DIR is not reaching the service (#83).
+//         from the directory that ships it, never a list written down. On a test box it is CORRECT;
+//         anywhere else it means CLEAROTRON_CUSTOMERS_DIR is not reaching the service.
 //
 // Pure: no fs, no env, no network. Every input is a parameter so a test can state the whole world.
 

package/driver/search-policy.mjs

@@ -152,7 +152,7 @@ export const COMPONENTS = {
 // so `basis` under-reports and could not carry the distinction even if we wanted it to.)
 //
 // The one mechanical set that stays load-bearing is the FLOORS — a tier-`identical` floor row, live and
-// in an instructed class, gets a full card in EVERY product. That is an obligation (/), not a
+// in an instructed class, gets a full card in EVERY product. That is an obligation, not a
 // priority, and the ladder does not grade it.
 //
 // `graded` means: the stage is told what kind of report it is writing and grades ITS OWN written output.

package/driver/skeptic-record.mjs

@@ -51,7 +51,7 @@ export function escalatedAxes(flagsText, axes) {
   const flags = String(flagsText ?? "");
   if (!flags) return [];
   return axes.filter((a) =>
-    new RegExp(`(^|\\n)\\s*[-*]?\\s*ESCALATE:\\s*${a.replace(/[-]/g, "\\-")}\\b`, "i").test(flags));
+    new RegExp(`(^|\\n)\\s*[-*]?\\s*ESCALATE:\\s*${a.replace(/[.*+?^${}()|[\]\\-]/g, "\\$&")}\\b`, "i").test(flags));
 }
 
 /** Where the call's evidence lives — the driver's own record of what the seat handed it. */

package/driver/stages.mjs

@@ -2154,7 +2154,7 @@ export const STAGES = {
     const supplementalLane = !!registerPlan?.contract?.supplemental_lane;
     return lines(
       `First, read and follow exactly: skills/clearance-register/SKILL.md (the shared spine) then skills/clearance-register/unit.md (MODE A — UNIT). Do NOT read digest.md (digest-mode judgment a unit must never run).`,
-      // WHAT THE KEY ALSO CARRIES — COMPOSED, NOT DOCTRINE ( /).
+      // WHAT THE KEY ALSO CARRIES — COMPOSED, NOT DOCTRINE.
       // `unit.md` used to name three tools flat, and on a deployment withholding two of them the seat was
       // told it holds tools its grant does not carry. The composer derives the list from the same table
       // that does the excluding, and returns NULL — not an empty sentence — when the provider cannot be

package/driver/suite-census.json

@@ -65,7 +65,7 @@
         },
         "a-browser-run-gets-its-own-temp-root.test.mjs": {
           "tests": 12,
-          "asserts": 29,
+          "asserts": 31,
           "skips": 0,
           "todos": 0
         },
@@ -195,9 +195,21 @@
           "skips": 0,
           "todos": 0
         },
+        "a-conditional-with-nothing-stated-prints-no-conditional-line.test.mjs": {
+          "tests": 2,
+          "asserts": 6,
+          "skips": 0,
+          "todos": 0
+        },
+        "a-connect-line-keeps-every-path-whole.test.mjs": {
+          "tests": 8,
+          "asserts": 20,
+          "skips": 0,
+          "todos": 0
+        },
         "a-connect-line-says-where-it-runs.test.mjs": {
           "tests": 11,
-          "asserts": 48,
+          "asserts": 56,
           "skips": 0,
           "todos": 0
         },
@@ -255,6 +267,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-demo-leaves-no-temp-copies.test.mjs": {
+          "tests": 2,
+          "asserts": 6,
+          "skips": 0,
+          "todos": 0
+        },
         "a-demo-report-declares-itself.test.mjs": {
           "tests": 5,
           "asserts": 15,
@@ -1528,8 +1546,8 @@
           "todos": 0
         },
         "client-door.test.mjs": {
-          "tests": 38,
-          "asserts": 163,
+          "tests": 39,
+          "asserts": 168,
           "skips": 1,
           "todos": 0
         },
@@ -2537,7 +2555,7 @@
         },
         "findings-model.test.mjs": {
           "tests": 68,
-          "asserts": 257,
+          "asserts": 258,
           "skips": 0,
           "todos": 0
         },
@@ -3028,8 +3046,8 @@
           "todos": 0
         },
         "no-test-writes-inside-the-checkout.test.mjs": {
-          "tests": 20,
-          "asserts": 52,
+          "tests": 21,
+          "asserts": 58,
           "skips": 0,
           "todos": 0
         },
@@ -3364,8 +3382,8 @@
           "todos": 0
         },
         "portal-service.test.mjs": {
-          "tests": 130,
-          "asserts": 701,
+          "tests": 131,
+          "asserts": 712,
           "skips": 1,
           "todos": 0
         },
@@ -4857,6 +4875,12 @@
           "skips": 0,
           "todos": 0
         },
+        "the-demo-says-what-it-is-first.test.mjs": {
+          "tests": 3,
+          "asserts": 16,
+          "skips": 0,
+          "todos": 0
+        },
         "the-demo-takes-its-folder-with-it.test.mjs": {
           "tests": 6,
           "asserts": 12,
@@ -5039,7 +5063,7 @@
         },
         "the-knockout-page-leads-with-the-read.test.mjs": {
           "tests": 39,
-          "asserts": 120,
+          "asserts": 125,
           "skips": 0,
           "todos": 0
         },
@@ -5373,6 +5397,12 @@
           "skips": 0,
           "todos": 0
         },
+        "the-status-says-which-step-the-run-is-in-now.test.mjs": {
+          "tests": 3,
+          "asserts": 8,
+          "skips": 0,
+          "todos": 0
+        },
         "the-summary-carries-structure.test.mjs": {
           "tests": 14,
           "asserts": 37,

package/driver/systemd/README.md

@@ -33,7 +33,7 @@ missing one and writes nothing, because a unit with one placeholder left starts
 worse than one that does not start. Which units need it is **derived from the files**, not from a list —
 and `driver/unit-inventory.mjs` declares them, with a test asserting the two agree in both directions.
 
-These are for a **server, not a laptop**. On a workstation there is nothing to install: `npx clearotron start` supervises the
+These are for a **server, not a laptop**. On a workstation there is nothing to install: `clearotron start` supervises the
 same loop for you, and`node driver/runner.mjs --watch` is what to run by hand if you started with
 `--no-worker` (`INSTALL.md` §5) — one foreground process that polls for queued jobs and for parked runs whose
 window has elapsed.

package/driver/unit-inventory.mjs

@@ -45,8 +45,8 @@
 // docs/architecture/05-config-governance.md, tier 2). Getting that wrong replaces working auth with
 // placeholders that look configured, and it is not work to do beside a running round.
 //
-// So the untracked units are declared as untracked, WITH THE REASON, which is exactly what 's
-// acceptance asks for: "either has a tracked file it is compared against, or is named here with the
+// So the untracked units are declared as untracked, WITH THE REASON, which is exactly what the
+// requirement asks for: "either has a tracked file it is compared against, or is named here with the
 // reason it does not".
 //
 // ── THE CORRECTION THIS FILE NEEDED ITSELF ───────────────────────────────────────────────────────

package/driver/verify.mjs

@@ -1375,7 +1375,7 @@ function connotationViolations(content, queryCount, opts = {}, dispositionsPath
 // patch — two families emitting a bare `form_damaged` would be indistinguishable there and the repair
 // would rewrite the wrong form.
 //
-// THE SHAPE IS BUILT AROUND THREE CONSUMERS, each of which fails SILENTLY on a mismatch (/):
+// THE SHAPE IS BUILT AROUND THREE CONSUMERS, each of which fails SILENTLY on a mismatch:
 //   - The CAUSE CENSUS IS FRONT-LOADED, `no_ruling=<n>`, before any named list: repairs.mjs CENSUS_RE
 //     sums exactly that, pipeline.mjs shows the failing model `tok.slice(0, 160)`, and a census that fell
 //     off the end of a slice would read as a missing quantity — i.e. as converged.

package/mcp-server/CHANGELOG.md

@@ -1,5 +1,13 @@
 # trademark-artifacts-mcp
 
+## 0.3.2-beta.14
+
+No changes in this release.
+
+## 0.3.2-beta.13
+
+No changes in this release.
+
 ## 0.3.2-beta.12
 
 No changes in this release.

package/mcp-server/CONNECT.md

@@ -5,7 +5,7 @@ MCP-capable app. Two ways in, and they are not variants of each other:
 
 | | **Local** | **Hosted** |
 |---|---|---|
-| What it is | your app spawns `server.mjs` from your own clone | you were given a URL by whoever operates the engine |
+| What it is | your app spawns `serve.mjs` from your own clone | you were given a URL by whoever operates the engine |
 | Who it is for | anyone who cloned this repository | a customer or colleague reading someone else's runs |
 | Setup | copy-paste below, no account, no credential | paste the URL, sign in |
 | Reach | everything, including the write verbs | read-only, scoped to your own matters |
@@ -46,7 +46,7 @@ One command. Substitute your clone's path and your workspace root:
 ```sh
 claude mcp add trademark-artifacts --scope user \
   -e CLEAROTRON_WORK_DIR=/path/to/your/workspace \
-  -- node /path/to/clearotron/mcp-server/server.mjs
+  -- node /path/to/clearotron/mcp-server/serve.mjs
 ```
 
 Check it: `claude mcp list` prints `trademark-artifacts: … - √ Connected`.
@@ -64,7 +64,7 @@ PowerShell 5.1, write the separator as `"--"`: that shell drops a bare `--`. Rem
   "mcpServers": {
     "trademark-artifacts": {
       "command": "node",
-      "args": ["/path/to/clearotron/mcp-server/server.mjs"],
+      "args": ["/path/to/clearotron/mcp-server/serve.mjs"],
       "env": { "CLEAROTRON_WORK_DIR": "/path/to/your/workspace" }
     }
   }
@@ -82,7 +82,7 @@ Codex reads `~/.codex/config.toml`:
 ```toml
 [mcp_servers.trademark-artifacts]
 command = "node"
-args = ["/path/to/clearotron/mcp-server/server.mjs"]
+args = ["/path/to/clearotron/mcp-server/serve.mjs"]
 env = { CLEAROTRON_WORK_DIR = "/path/to/your/workspace" }
 ```
 
@@ -94,13 +94,13 @@ is a value written to a file.
 
 ## Any other MCP host
 
-The contract is the same three things every time: run `node mcp-server/server.mjs`, over stdio, with
+The contract is the same three things every time: run `node mcp-server/serve.mjs`, over stdio, with
 `CLEAROTRON_WORK_DIR` in its environment.
 
 ```json
 {
   "command": "node",
-  "args": ["/path/to/clearotron/mcp-server/server.mjs"],
+  "args": ["/path/to/clearotron/mcp-server/serve.mjs"],
   "env": { "CLEAROTRON_WORK_DIR": "…", "CLEAROTRON_REPORTS_DIR": "…" }
 }
 ```
@@ -125,7 +125,7 @@ read them. Spawn the server as that user:
 ```json
 {
   "command": "sudo",
-  "args": ["-u", "<operator>", "node", "/path/to/clearotron/mcp-server/server.mjs"]
+  "args": ["-u", "<operator>", "node", "/path/to/clearotron/mcp-server/serve.mjs"]
 }
 ```
 
@@ -133,7 +133,7 @@ That needs a one-time NOPASSWD rule, or the stdio handshake hangs on a password
 
 ```
 # /etc/sudoers.d/trademark-artifacts-mcp   (chmod 0440)
-<caller> ALL=(<operator>) NOPASSWD: /usr/bin/node /path/to/clearotron/mcp-server/server.mjs
+<caller> ALL=(<operator>) NOPASSWD: /usr/bin/node /path/to/clearotron/mcp-server/serve.mjs
 ```
 
 ## What to ask it

package/mcp-server/lib/runs.mjs

@@ -40,7 +40,7 @@ export function unreadableRunsReason({ workSet, workRoot, workExists, poolSet })
   if (workSet || workExists || poolSet) return null;
   return `no searches can be read here: CLEAROTRON_WORK_DIR is unset and ${workRoot} does not exist, `
     + "and CLEAROTRON_REPORTS_DIR is unset. Set them to the install's directories — `npx clearotron doctor` "
-    + "prints where an install keeps them.";
+    + "prints where an install keeps them, and mcp-server/CONNECT.md says how to connect this server.";
 }
 
 // Every workspace-<agent>/studio/clearance-search root under the live workspace root.