clearotron 0.3.2-beta.6 → 0.3.2-beta.8

package/mcp-server/lib/http-handler.mjs

@@ -69,7 +69,7 @@ export function evictOldest(sessions) {
  * presents another identity's mcp-session-id is refused (403) — a leaked/guessed session id must never
  * let one CF-authed person attach to another's session (which may carry an ops-scoped inner token).
  */
-export function makeHttpHandler({ verify, limiter, opsLimiter = null, sessions, createSession, ns = "trademark-artifacts", sessionMax = 500, maxBody = 4 * 1024 * 1024, authHeader = "cf-access-jwt-assertion", firmDomains = [], clientSurface = false, devMode = false, tokenOnly = false, keyDoorPath = null,
+export function makeHttpHandler({ verify, limiter, opsLimiter = null, sessions, createSession, ns = "trademark-artifacts", sessionMax = 500, maxBody = 4 * 1024 * 1024, authHeader = "cf-access-jwt-assertion", firmDomains = [], clientSurface = false, door: doorName = null, devMode = false, tokenOnly = false, keyDoorPath = null,
   // Is this identity still on the guest list? ASKED PER REQUEST on an ACCOUNT session, cached on the
   // grants file's mtime, so it costs a stat between edits. Injected so an arm can move the answer
   // without a file; the default is the real read, because a door composed without this seam would
@@ -96,7 +96,11 @@ export function makeHttpHandler({ verify, limiter, opsLimiter = null, sessions,
   // caller who does not exist. Those lines carry no email and no principal, and say a call was refused
   // at this door at this time — which is true, and is the shape the local route already uses for the
   // same reason: a synthesized identity would match somebody who did nothing.
-  const door = clientSurface ? "client" : undefined;
+  // WHICH SURFACE THIS HANDLER IS, named rather than inferred. `clientSurface` answers a scope question
+  // and was doing double duty as the door's name, which left the key door — built with neither
+  // `clientSurface` nor a name — writing lines with no door at all. A caller that knows it is a third
+  // thing passes `door`; the two that do not get the surface they already declare.
+  const door = doorName ?? (clientSurface ? "client" : "portal");
   const refuse = (res, status, obj, who = {}) => {
     try { appendAudit({ email: who.email ?? null, sub: who.sub ?? null, body: who.body ?? null, status: "refused", door }); }
     catch { /* best-effort: a write failure must never change what the caller is told */ }

package/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-artifacts-mcp",
-  "version": "0.3.2-beta.6",
+  "version": "0.3.2-beta.8",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "MCP server to interrogate clearotron trademark-clearance runs — list/read artifacts, trace the full decision flow, telemetry/cost, coverage, single-run search, and a gated single-step what-if. Imports the clearotron-driver read-only; touches no driver/template/deploy files.",

package/mcp-server/server.mjs

@@ -31,7 +31,7 @@ import { join, basename } from "node:path";
 import { driverDir } from "../shared/driver-dir.mjs";   //
 import { fileURLToPath } from "node:url";
 
-import { enumerateRuns, resolveRun, runAccountKey, runOrganisation, runProfileFacts } from "./lib/runs.mjs";
+import { enumerateRuns, resolveRun, runAccountKey, runOrganisation, runProfileFacts, productIdentityFor } from "./lib/runs.mjs";
 import { ORDERABLE_PRODUCTS } from "../driver/search-policy.mjs";
 import { PRODUCTS } from "../driver/products.mjs";
 
@@ -193,6 +193,20 @@ function runSummary(run) {
       ? { key: facts.account, name: facts.clientName }
       : { key: null, name: null, known: false, note: "this run's client could not be read from its own record" },
     project: facts.projectKey ? { key: facts.projectKey, name: facts.projectName ?? facts.projectKey } : null,
+    // WHAT KIND OF SEARCH IT WAS, on every row, and it is the same defect as the client above one turn
+    // later. A mark and a date do not name one run: on the bundled demo data alone, one mark and one day
+    // return nine rows across four products — a full country search, a multi-country focus search, a
+    // global preliminary search and two knockouts. A session bound to one report is safe whatever the
+    // row says, because the scope carries the runId; an account-scoped session has only these rows, and
+    // nothing in them told the two apart except the runId string, which is an internal slug a client has
+    // never seen and which this tool's own description warns is not theirs to read.
+    //
+    // RESOLVED AT READ TIME THROUGH THE REGISTRY, never a stored string, for the reason `runs.mjs` gives
+    // where this resolver lives: a run freezes its product ID and the name is today's name, so the row,
+    // the brief and the report masthead cannot disagree and a renamed product renames everywhere at
+    // once. null where the registry cannot name it — the row says nothing rather than guessing, because
+    // a hardcoded fallback is how a knockout once announced itself as a product it provably was not.
+    product: productIdentityFor(run),
     state: run.state, location: run.location, verdict: run.verdict, url: run.url,
     markName: run.markName, ref: run.ref, classes: run.classes,
     step: s.stepN ? `${s.stepN}/${s.stepTotal} ${s.stepLabel ?? ""}`.trim() : null,
@@ -1096,7 +1110,7 @@ if (isMain) {
       // route. On an install with no hosted client door the reader IS the operator, which is the same
       // split `stdioConnectOffer` already trusts, so that fact answers the question by itself; on a
       // hosted install it answers for nobody and the portal ignores it.
-      appendAudit({ email: null, sub: null, body: { method: "initialize" }, status: "connected", transport: "stdio" });
+      appendAudit({ email: null, sub: null, body: { method: "initialize" }, status: "connected", transport: "stdio", door: "local" });
     })
     .catch((e) => { log(`fatal: ${e?.stack ?? e}`); process.exit(1); });
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "clearotron",
   "type": "module",
-  "version": "0.3.2-beta.6",
+  "version": "0.3.2-beta.8",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",

package/portal-ui/dist/assets/{index-5UyqAyNM.js → index-6jzO9HiX.js}

@@ -11926,6 +11926,7 @@ var api = {
 			};
 		}),
 		...!("territories" in b) ? {} : { registerTerritories: b["territories"] === null ? null : asArray(b["territories"]).filter((t) => typeof t === "string") },
+		...asString(b["registerLabel"]) ? { registerLabel: asString(b["registerLabel"]) } : {},
 		recipes: asArray(b["recipes"]).map((x) => {
 			const r = x;
 			return {
@@ -12193,11 +12194,38 @@ var api = {
 				billing: {
 					mode: asString(bill["mode"]) ?? "unknown",
 					apiBilled: bill["apiBilled"] === true,
-					missing: asStrings(bill["missing"])
+					missing: asStrings(bill["missing"]),
+					cloud: asString(bill["cloud"]),
+					cloudName: asString(bill["cloudName"]),
+					reason: bill["reason"] != null ? (() => {
+						const raw = bill["reason"];
+						const r = typeof raw === "object" && !Array.isArray(raw) ? asRecord(raw) : {};
+						return {
+							kind: asString(r["kind"]) ?? "unclassified",
+							mode: asString(r["mode"]),
+							defaulted: r["defaulted"] === true,
+							setting: asString(r["setting"]) ?? "",
+							clouds: asArray(r["clouds"]).flatMap((c) => {
+								const x = asRecord(c);
+								const name = asString(x["name"]);
+								const setting = asString(x["setting"]);
+								return name && setting ? [{
+									name,
+									setting
+								}] : [];
+							}),
+							modes: asStrings(r["modes"]),
+							gateway: asString(r["gateway"]),
+							engineSetting: asString(r["engineSetting"]),
+							engineChoice: asString(r["engineChoice"])
+						};
+					})() : null
 				},
 				binaryPresent: e["binaryPresent"] === true,
 				program: asString(e["program"]),
-				install: asString(e["install"])
+				install: asString(e["install"]),
+				programSetting: asString(e["programSetting"]),
+				setupRoute: e["setupRoute"] === "packaged" ? "packaged" : e["setupRoute"] === "checkout" ? "checkout" : null
 			};
 		})() : null,
 		providers: Array.isArray(b["providers"]) ? asArray(b["providers"]).map((p) => {
@@ -12330,13 +12358,6 @@ var NAV = [
 		icon: "panel-left",
 		scope: "account"
 	},
-	{
-		id: "ai",
-		label: "Connect your AI",
-		path: "/portal/ai",
-		icon: "sparkles",
-		scope: "account"
-	},
 	{
 		id: "people",
 		label: "People",
@@ -12424,6 +12445,14 @@ var NAV = [
 			}
 		]
 	},
+	{
+		id: "ai",
+		label: "Connect your AI",
+		path: "/portal/ai",
+		icon: "sparkles",
+		scope: "account",
+		rail: "below"
+	},
 	{
 		id: "new-company",
 		label: "New company",
@@ -12463,11 +12492,12 @@ function navFor(who, entries = NAV) {
 		children: e.children.filter((c) => visible(c, who) && !c.hidden)
 	} : e);
 }
+var railSideOf = (e) => e.rail ?? ((e.scope ?? "account") === "account" ? "above" : "below");
 function navGroupsFor(who, entries = NAV) {
 	const visibleEntries = navFor(who, entries);
 	return {
-		account: visibleEntries.filter((e) => (e.scope ?? "account") === "account"),
-		owner: visibleEntries.filter((e) => e.scope === "owner")
+		account: visibleEntries.filter((e) => railSideOf(e) === "above"),
+		owner: visibleEntries.filter((e) => railSideOf(e) === "below")
 	};
 }
 function scopeOf(id, entries = NAV) {
@@ -13818,6 +13848,7 @@ function readableFailure(failedStage, reason) {
 var EMPTY_DRAFT = {
 	product: null,
 	territories: [],
+	replacesOwnTerritories: false,
 	nativeLanguage: false
 };
 var REGIONS = [
@@ -13941,9 +13972,6 @@ function reachesTerritory(name, covered) {
 	if (!Array.isArray(covered)) return true;
 	return covered.includes(name);
 }
-function vocabularyFor(product, covered) {
-	return offerableFor(product).filter((n) => reachesTerritory(n, covered));
-}
 function territoryMatches(query, chosen, product, limit = 8, _covered) {
 	return matchTerritoriesIn(offerableFor(product), query, chosen, limit);
 }
@@ -13959,8 +13987,9 @@ function matchTerritoriesIn(vocabulary, query, chosen, limit = 8) {
 	};
 	return vocabulary.filter((n) => !taken.has(n.toLowerCase()) && hit(n)).slice(0, limit);
 }
-function addTerritory(d, name, product, _covered) {
+function addTerritory(d, name, product, covered) {
 	if (!offerableFor(product).includes(name)) return d;
+	if (!reachesTerritory(name, covered)) return d;
 	if (d.territories.includes(name)) return d;
 	if (product?.geography === "exactly one country") return {
 		...d,
@@ -13977,14 +14006,35 @@ function removeTerritory(d, name) {
 		territories: d.territories.filter((t) => t !== name)
 	};
 }
-function geographyFor(d) {
-	return d.territories.length ? {
+function notAvailableLine(names, registerLabel) {
+	const named = names.join(", ");
+	const who = typeof registerLabel === "string" && registerLabel.trim() ? registerLabel.trim() : null;
+	return `${named ? `${named} \u00b7 ` : ""}not available${who ? ` with register ${who}` : ""}`;
+}
+function takeOverOwnTerritories(d, own, without) {
+	return {
+		...d,
+		territories: own.filter((t) => t !== without),
+		replacesOwnTerritories: true
+	};
+}
+function geographyFor(d, product = null, resolved = []) {
+	if (product?.geography === "worldwide, and nothing else") return {
+		mode: "worldwide",
+		territories: []
+	};
+	if (d.territories.length) return {
 		mode: "named",
 		territories: [...d.territories]
-	} : {
+	};
+	if (d.replacesOwnTerritories) return {
 		mode: "worldwide",
 		territories: []
 	};
+	return {
+		mode: "account-default",
+		territories: [...resolved]
+	};
 }
 function nativeLanguageControl(product) {
 	if (product?.nativeLanguage === "offered") return "toggle";
@@ -14003,6 +14053,7 @@ function chooseProduct(d, product) {
 	return {
 		product: product?.key ?? null,
 		territories,
+		replacesOwnTerritories: d.replacesOwnTerritories,
 		nativeLanguage: nativeLanguageControl(product) === "toggle" ? d.nativeLanguage : false
 	};
 }
@@ -14485,6 +14536,7 @@ function draftFromSaved(recipe, products) {
 	return chooseProduct({
 		product: base,
 		territories: Array.isArray(scope["jurisdictions"]) ? scope["jurisdictions"].filter((j) => typeof j === "string") : [],
+		replacesOwnTerritories: false,
 		nativeLanguage: recipe["nativeLanguage"] === true
 	}, product);
 }
@@ -15510,7 +15562,7 @@ function resumeWording(iso) {
 	});
 	return t.toDateString() === new Date().toDateString() ? `at ${time}` : `${t.toLocaleDateString([], { weekday: "long" })} at ${time}`;
 }
-function StatusCell({ state, step, stepN, stepTotal, reason, failedStage, pausedKind = null, resetsAt = null, stopRequestedAt = null, detailed = false, count = null }) {
+function StatusCell({ state, step, reason, failedStage, pausedKind = null, resetsAt = null, stopRequestedAt = null, detailed = false, count = null }) {
 	if (stopRequestedAt && state !== "delivered" && state !== "failed" && state !== "cancelled") return (0, import_jsx_runtime.jsxs)("span", { children: [(0, import_jsx_runtime.jsxs)("span", {
 		className: "status",
 		children: [(0, import_jsx_runtime.jsx)("span", {
@@ -15577,7 +15629,7 @@ function StatusCell({ state, step, stepN, stepTotal, reason, failedStage, paused
 		] });
 	}
 	const label = state === "queued" ? "Queued" : state === "paused" ? "Paused" : "Running";
-	const detail = state === "paused" ? pausedKind === "recovering" ? "Held after a problem — retrying on its own" : pausedKind === "operator" ? "Paused by a system restart — resumes on its own" : resetsAt ? `Paused by a provider limit — resumes ${resumeWording(resetsAt)}` : "Paused by a provider limit — resumes on its own" : step ? stepN != null && stepTotal != null ? `${step} · ${stepN} of ${stepTotal}` : step : null;
+	const detail = state === "paused" ? pausedKind === "recovering" ? "Held after a problem — retrying on its own" : pausedKind === "operator" ? "Paused by a system restart — resumes on its own" : resetsAt ? `Paused by a provider limit — resumes ${resumeWording(resetsAt)}` : "Paused by a provider limit — resumes on its own" : step;
 	return (0, import_jsx_runtime.jsxs)("span", { children: [(0, import_jsx_runtime.jsxs)("span", {
 		className: "status",
 		children: [(0, import_jsx_runtime.jsx)("span", { className: `dot ${state}` }), count ? (0, import_jsx_runtime.jsxs)("span", { children: [
@@ -15602,7 +15654,7 @@ function allowanceLine(usage, brand) {
 	if (left == null) return null;
 	if (left > 5) return null;
 	const who = operatorName(brand);
-	if (left === 0) return `You have used all ${usage?.dailyRuns ?? 0} of this account's searches for today. The allowance resets at midnight UTC — or ask your ${who} contact to run this one for you.`;
+	if (left === 0) return `You have used all ${usage?.dailyRuns ?? 0} of this account's searches for today. The allowance resets at midnight UTC — or ask ${who} to run this one for you.`;
 	return `${left} search${left === 1 ? "" : "es"} left today. The allowance resets at midnight UTC, or ask ${who} to run one for you.`;
 }
 //#endregion
@@ -16688,8 +16740,6 @@ function FamilyRows({ family, isOpen, onToggle, go, picking, showOwner = false,
 			}) : (0, import_jsx_runtime.jsx)(StatusCell, {
 				state: family.state,
 				step: null,
-				stepN: null,
-				stepTotal: null,
 				reason: null,
 				failedStage: null
 			}) }),
@@ -16798,8 +16848,6 @@ function MarkRow({ mark, open, onToggle, go, indent = false, picking = false, sh
 				(0, import_jsx_runtime.jsx)("td", { children: (0, import_jsx_runtime.jsx)(StatusCell, {
 					state: run.state,
 					step: run.step,
-					stepN: run.stepN,
-					stepTotal: run.stepTotal,
 					reason: run.reason,
 					failedStage: run.failedStage,
 					pausedKind: run.pausedKind,
@@ -16936,8 +16984,6 @@ function ReadRow({ read, go, picking, indent, showOwner = false, latest = false,
 			(0, import_jsx_runtime.jsx)("td", { children: (0, import_jsx_runtime.jsx)(StatusCell, {
 				state: read.state,
 				step: read.step,
-				stepN: read.stepN,
-				stepTotal: read.stepTotal,
 				reason: read.reason,
 				failedStage: read.failedStage,
 				stopRequestedAt: read.stopRequestedAt,
@@ -17764,26 +17810,68 @@ function Missing({ go, reason }) {
 }
 //#endregion
 //#region src/contract/engineState.ts
+var SETUP_COMMAND = "`npx clearotron install`";
+var listed = (xs, and = "and") => xs.length <= 1 ? xs[0] ?? "" : `${xs.slice(0, -1).join(", ")} ${and} ${xs[xs.length - 1]}`;
+var PAID_BY = {
+	subscription: "subscription",
+	"api-key": "an API key",
+	cloud: "a cloud account"
+};
+var paidBy = (mode) => mode !== null && Object.hasOwn(PAID_BY, mode) ? PAID_BY[mode] : mode ?? "a way of paying";
+var COUNT = [
+	"no",
+	"one",
+	"two",
+	"three",
+	"four"
+];
+var NAMES_CLOUDS = new Set([
+	"switch-beside-mode",
+	"two-clouds",
+	"no-cloud"
+]);
+function billingRefusalSentence(r) {
+	const setting = r.setting || "the billing setting";
+	const generic = `Searches will be refused over how this machine is set to pay. Check ${setting} and the settings beside it.`;
+	if (NAMES_CLOUDS.has(r.kind) && r.clouds.length === 0) return generic;
+	const paid = r.defaulted ? `${paidBy(r.mode)}, the default while ${setting} is not set` : `set to ${paidBy(r.mode)}`;
+	switch (r.kind) {
+		case "switch-beside-mode": {
+			const one = r.clouds.length === 1;
+			const names = listed(r.clouds.map((c) => c.name));
+			const switches = listed(r.clouds.map((c) => c.setting));
+			const keep = r.mode === "api-key" ? "to pay with the API key" : "to pay by subscription";
+			return `Searches will be refused: payment is ${r.defaulted ? "by " : ""}${paid}, but the ${names} ${one ? "switch" : "switches"} (${switches}) ${one ? "is" : "are"} also on. ` + (one ? `Turn ${switches} off ${keep}, or set ${setting} to cloud to pay through ${names}.` : `Turn them off ${keep}, or set ${setting} to cloud and leave one on.`);
+		}
+		case "two-clouds": return `Searches will be refused: payment is set to a cloud account, but ${COUNT[r.clouds.length] ?? r.clouds.length} clouds are switched on, ${listed(r.clouds.map((c) => `${c.name} (${c.setting})`))}. Turn off all but the one you pay through.`;
+		case "no-cloud": return `Searches will be refused: payment is set to a cloud account, but no cloud is chosen. Turn on your cloud's switch (${listed(r.clouds.map((c) => `${c.setting} for ${c.name}`), "or")}) with the settings that cloud needs` + (r.gateway ? `, set ${r.gateway} for a gateway,` : ",") + ` or set ${setting} to subscription.`;
+		case "not-a-mode": return `Searches will be refused: ${setting} is set to a word Clearotron does not know. Set it to ${listed(r.modes, "or")}.`;
+		case "cloud-on-codex": return `Searches will be refused: payment is set to a cloud account, which pays only for Claude, and this machine runs the Codex engine. Set ${setting} to ${listed(r.modes, "or")}` + (r.engineSetting && r.engineChoice ? `, or set ${r.engineSetting} to ${r.engineChoice} to pay for Claude through your cloud.` : ".");
+		default: return generic;
+	}
+}
 function engineRowFaults(engine, { programDisputed = false } = {}) {
+	const reason = engine.billing.reason ?? null;
 	return [
 		...engine.known ? [] : [`This build does not ship an engine called ${engine.id}.`],
 		...engine.billing.missing.length ? ["Set to bill an API key, and no key is set — a run is refused rather than billed to the subscription."] : [],
-		...engine.binaryPresent ? [] : engine.program && engine.install ? [`The engine program \`${engine.program}\` cannot be found or run on this machine. Install it with \`${engine.install}\`, then restart this service so it looks for the program again.`] : ["The engine program cannot be found or run on this machine."],
-		...programDisputed && engine.binaryPresent ? ["The engine program is on this machine, but the engine could not find it when it last started — so a new search will refuse. Restart the engine service, or install the CLI where the service can see it."] : []
+		...reason && !engine.billing.missing.length ? [billingRefusalSentence(reason)] : [],
+		...engine.binaryPresent ? [] : engine.program ? [`The engine program \`${engine.program}\` cannot be found or run on this machine. Run the setup wizard, ${SETUP_COMMAND}: it offers to install the program and proves it with one turn. Then restart Clearotron's services, which look for the program when they start.`] : ["The engine program cannot be found or run on this machine."],
+		...programDisputed && engine.binaryPresent ? [`The engine program is on this machine, but the engine could not find it when it last started — so a new search will refuse. Restart the engine service so it looks again. If it still cannot find it, set ${engine.programSetting ?? "the engine's program setting"} to the program's full path in the settings file the service reads, then restart it again.`] : []
 	];
 }
 function engineNotice({ programDisputed }) {
 	if (programDisputed === true) return {
 		state: "disputed",
 		headline: "The engine program is on this machine, but the engine could not find it when it last started.",
-		before: "So a new search will refuse. Restart the engine service, or install the CLI where the service can see it — installing it again where it already is will not change this.",
+		before: "So a new search will refuse. Restart the engine service so it looks again. If it still cannot find it, set the engine's program setting to the program's full path in the settings file the service reads — installing it again where it already is will not change this.",
 		namesSetupCommand: false,
 		after: ""
 	};
 	return {
 		state: "absent",
 		headline: "No search engine is attached to this install.",
-		before: "Everything else works — the example report, its audit trail and the assistant connection are live right now. To start new searches, install a reasoning CLI and sign in, then run the setup wizard again",
+		before: "Everything else works — the example report, its audit trail and the assistant connection are live right now. The setup wizard offers to install a reasoning CLI if this machine has none, and asks how it is paid for. To start new searches, run the setup wizard",
 		namesSetupCommand: true,
 		after: "Then restart the service: this reading was taken when it started, and it will not notice a new install until it starts again."
 	};
@@ -17794,7 +17882,7 @@ function engineRow(engine, { programDisputed = false } = {}) {
 		ok: faults.length === 0,
 		name: engine.vendor ?? engine.id,
 		mono: engine.id,
-		state: engine.billing.apiBilled ? "API key" : "Subscription",
+		state: engine.billing.missing.length || engine.billing.reason ? "Refused" : engine.billing.cloudName ?? (engine.billing.apiBilled ? "API key" : "Subscription"),
 		faults
 	};
 }
@@ -18270,6 +18358,7 @@ function NewClearance({ ctx }) {
 	const { result: usageRes } = useLoad(() => api.usage(account), [account]);
 	const levels = searches?.kind === "ok" ? searches.value.products : [];
 	const registerTerritories = searches?.kind === "ok" ? searches.value.registerTerritories : void 0;
+	const registerLabel = searches?.kind === "ok" ? searches.value.registerLabel : void 0;
 	const savedSearches = searches?.kind === "ok" ? searches.value.recipes : [];
 	const readCan = searches?.kind === "ok" ? searches.value.read : {
 		available: false,
@@ -18387,10 +18476,11 @@ function NewClearance({ ctx }) {
 		setSaveNote(null);
 	};
 	const setPick = (next) => edit({ pick: next });
-	const recommendation = (0, import_react.useMemo)(() => recommendSearch(levels, names.length, draft.pick.territories), [
+	const recommendation = (0, import_react.useMemo)(() => recommendSearch(levels, names.length, draft.pick.territories.length ? draft.pick.territories : own.territories), [
 		levels,
 		names.length,
-		draft.pick.territories
+		draft.pick.territories,
+		own.territories
 	]);
 	(0, import_react.useEffect)(() => {
 		if (pickedByHand || draft.savedSearch || editingSlug || !recommendation) return;
@@ -18427,7 +18517,7 @@ function NewClearance({ ctx }) {
 				deadline: d.deadline
 			};
 			let after = applyRead(before, read, own.classes, { worldwide });
-			const fits = recommendSearch(levels, parseNames(after.names).length, after.draft.territories);
+			const fits = recommendSearch(levels, parseNames(after.names).length, after.draft.territories.length ? after.draft.territories : own.territories);
 			if (read.product == null && !pickedByHand && !d.savedSearch && fits) after = {
 				...after,
 				draft: chooseProduct(after.draft, fits.product)
@@ -18456,7 +18546,7 @@ function NewClearance({ ctx }) {
 		...draft.savedSearch ? { recipeKey: draft.savedSearch } : draft.pick.product ? { product: draft.pick.product } : {},
 		...draft.project ? { projectKey: draft.project } : {},
 		...draft.pick.territories.length ? { jurisdictions: [...draft.pick.territories] } : {},
-		geography: { mode: geographyFor(draft.pick).mode },
+		geography: { mode: geographyFor(draft.pick, activeLevel, own.territories).mode },
 		...marketplacesApply && parseList(draft.platforms).length ? { platforms: parseList(draft.platforms) } : {},
 		...!draft.savedSearch && nativeControl === "toggle" && draft.pick.nativeLanguage ? { nativeLanguage: true } : {},
 		...draft.ref.trim() ? { ref: draft.ref.trim() } : {},
@@ -18795,10 +18885,20 @@ function NewClearance({ ctx }) {
 									gap: 6,
 									margin: "9px 0 12px"
 								},
-								children: draft.pick.territories.length === 0 ? own.territories.length ? (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [own.territories.map((t) => (0, import_jsx_runtime.jsx)("span", {
-									className: "chip",
+								children: draft.pick.territories.length === 0 ? own.territories.length ? (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [own.territories.map((t) => (0, import_jsx_runtime.jsxs)("span", {
 									"data-anon": "mark",
-									children: t
+									className: reachesTerritory(t, registerTerritories) ? "chip" : "chip chip-deferred",
+									title: reachesTerritory(t, registerTerritories) ? void 0 : notAvailableLine([t], registerLabel),
+									children: [reachesTerritory(t, registerTerritories) ? t : notAvailableLine([t], registerLabel), (0, import_jsx_runtime.jsx)("button", {
+										type: "button",
+										"aria-label": `Remove ${t}`,
+										className: "chip-x",
+										onClick: () => setPick(takeOverOwnTerritories(draft.pick, own.territories, t)),
+										children: (0, import_jsx_runtime.jsx)(Icon, {
+											name: "x",
+											size: 13
+										})
+									})]
 								}, t)), (0, import_jsx_runtime.jsx)("span", {
 									style: {
 										fontSize: 11,
@@ -18811,21 +18911,17 @@ function NewClearance({ ctx }) {
 									children: "Worldwide"
 								}) : draft.pick.territories.map((t) => (0, import_jsx_runtime.jsxs)("span", {
 									className: reachesTerritory(t, registerTerritories) ? "chip chip-own" : "chip chip-own chip-deferred",
-									title: reachesTerritory(t, registerTerritories) ? void 0 : "The register wired to this deployment does not reach this territory — it is disclosed in the report as deferred coverage rather than searched.",
-									children: [
-										t,
-										reachesTerritory(t, registerTerritories) ? "" : " · register deferred",
-										(0, import_jsx_runtime.jsx)("button", {
-											type: "button",
-											"aria-label": `Remove ${t}`,
-											className: "chip-x",
-											onClick: () => setPick(removeTerritory(draft.pick, t)),
-											children: (0, import_jsx_runtime.jsx)(Icon, {
-												name: "x",
-												size: 13
-											})
+									title: reachesTerritory(t, registerTerritories) ? void 0 : notAvailableLine([t], registerLabel),
+									children: [reachesTerritory(t, registerTerritories) ? t : notAvailableLine([t], registerLabel), (0, import_jsx_runtime.jsx)("button", {
+										type: "button",
+										"aria-label": `Remove ${t}`,
+										className: "chip-x",
+										onClick: () => setPick(removeTerritory(draft.pick, t)),
+										children: (0, import_jsx_runtime.jsx)(Icon, {
+											name: "x",
+											size: 13
 										})
-									]
+									})]
 								}, t))
 							}),
 							(0, import_jsx_runtime.jsx)("div", {
@@ -18845,33 +18941,18 @@ function NewClearance({ ctx }) {
 									className: "typeahead",
 									children: territoryMatches(territoryQuery, draft.pick.territories, whereLevel, 8, registerTerritories).map((t) => (0, import_jsx_runtime.jsxs)("button", {
 										type: "button",
+										disabled: !reachesTerritory(t, registerTerritories),
 										onClick: () => {
 											setPick(addTerritory(draft.pick, t, whereLevel, registerTerritories));
 											setTerritoryQuery("");
 										},
 										children: [t, reachesTerritory(t, registerTerritories) ? null : (0, import_jsx_runtime.jsx)("span", {
 											className: "typeahead-note",
-											children: "register deferred"
+											children: notAvailableLine([], registerLabel)
 										})]
 									}, t))
 								}) : null]
 							}),
-							Array.isArray(registerTerritories) ? (0, import_jsx_runtime.jsxs)("p", {
-								className: "section-hint",
-								style: { marginTop: 10 },
-								children: [
-									"The trademark register wired to this deployment reaches",
-									" ",
-									vocabularyFor(whereLevel, registerTerritories).length,
-									" of the",
-									" ",
-									offerableFor(whereLevel).length,
-									" territories you can name here:",
-									" ",
-									vocabularyFor(whereLevel, registerTerritories).join(", "),
-									". Anywhere else can still be ordered — it is disclosed in the report as deferred coverage rather than searched at the register."
-								]
-							}) : null,
 							whereLevel?.geography === "exactly one country" && draft.pick.territories.length === 1 ? (0, import_jsx_runtime.jsxs)("div", {
 								className: "callout-accent",
 								children: [draft.pick.territories[0], " — naming another country replaces it, because this search reads one at a time."]
@@ -19397,6 +19478,7 @@ function NewClearance({ ctx }) {
 			plan ? (0, import_jsx_runtime.jsx)(ReviewDialog, {
 				uses: runCount(effort),
 				left: searchesLeft(usage),
+				registerLabel,
 				plan,
 				busy,
 				owner: ownerLabel,
@@ -19933,7 +20015,7 @@ function PickRow({ selected, onPick, title, tagline, description, chips, recomme
 		}) : null]
 	});
 }
-function ReviewDialog({ plan, busy, owner, project, names, goods, nativeOn, onStart, onBack, failure, onReview, uses, left }) {
+function ReviewDialog({ plan, busy, owner, project, names, goods, nativeOn, onStart, onBack, failure, onReview, uses, left, registerLabel }) {
 	(0, import_react.useEffect)(() => {
 		const on = (e) => {
 			if (e.key === "Escape") onBack();
@@ -20018,13 +20100,7 @@ function ReviewDialog({ plan, busy, owner, project, names, goods, nativeOn, onSt
 						}),
 						(0, import_jsx_runtime.jsx)(Row$3, {
 							label: "Registers to search",
-							children: plan.coverage ? (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [plan.coverage.reached.length ? joinAnd(plan.coverage.reached) : "None", plan.coverage.missing.length ? (0, import_jsx_runtime.jsxs)(Muted, { children: [
-								". ",
-								joinAnd(plan.coverage.missing),
-								" ",
-								plan.coverage.missing.length === 1 ? "is" : "are",
-								" not reached by the register wired here, and will be disclosed in the report as deferred coverage rather than searched."
-							] }) : null] }) : places.length ? joinAnd(places) : "Worldwide"
+							children: plan.coverage ? (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [plan.coverage.reached.length ? joinAnd(plan.coverage.reached) : "None", plan.coverage.missing.length ? (0, import_jsx_runtime.jsxs)(Muted, { children: [". ", notAvailableLine(plan.coverage.missing, registerLabel)] }) : null] }) : places.length ? joinAnd(places) : "Worldwide"
 						}),
 						scope && scope.classes.length ? (0, import_jsx_runtime.jsxs)(Row$3, {
 							label: "Classes",
@@ -25476,7 +25552,7 @@ function About() {
 						(0, import_jsx_runtime.jsx)("dt", { children: "Copyright" }),
 						(0, import_jsx_runtime.jsx)("dd", { children: info.copyright.replace(/^Copyright\s+/i, "") }),
 						(0, import_jsx_runtime.jsx)("dt", { children: "Model access" }),
-						(0, import_jsx_runtime.jsx)("dd", { children: "This runs on your own model access — a subscription or your own API key — and the paid registers on your own agreements with those providers. The reasoning stages are a proprietary third-party CLI that you install and license under that vendor’s own terms; this licence grants nothing over any of them." }),
+						(0, import_jsx_runtime.jsx)("dd", { children: "This runs on your own model access — a subscription, an API key, or your own cloud account — and the paid registers on your own agreements with those providers. The reasoning stages are a third-party command-line program, Claude Code (proprietary) or the Codex CLI (Apache-2.0), that you install and license under that vendor’s own terms; this licence grants nothing over any of them." }),
 						(0, import_jsx_runtime.jsx)("dt", { children: "Trade marks" }),
 						(0, import_jsx_runtime.jsxs)("dd", { children: [
 							(0, import_jsx_runtime.jsx)("strong", { children: info.name }),

package/portal-ui/dist/index.html

@@ -49,7 +49,7 @@
     -->
     <link rel="preconnect" href="https://api.fontshare.com" crossorigin />
     <link href="https://api.fontshare.com/v2/css?f[]=satoshi@400,500,700,900&display=swap" rel="stylesheet" />
-    <script type="module" crossorigin src="/portal/assets/index-5UyqAyNM.js"></script>
+    <script type="module" crossorigin src="/portal/assets/index-6jzO9HiX.js"></script>
     <link rel="stylesheet" crossorigin href="/portal/assets/index-CVOIvdhc.css">
   </head>
   <body>

package/portal-ui/package.json

@@ -2,7 +2,7 @@
   "name": "portal-ui",
   "private": true,
   "type": "module",
-  "version": "0.3.2-beta.6",
+  "version": "0.3.2-beta.8",
   "license": "AGPL-3.0-only",
   "description": "The unified trademark portal UI. One address, one login: who you are decides what you see. Built as a static bundle, served by driver/portal-service.mjs — the browser never reaches profile-service or recipe-service.",
   "engines": {

package/providers/clarivate/src/capabilities.js

@@ -217,11 +217,11 @@ export const CAPABILITIES = Object.freeze({
   // ── WHICH FORM OF A NON-LATIN MARK DOES THE INDEX HOLD? ──────────────────────────────────────────
   // `false` = the TRANSLITERATION ONLY. The characters are not indexed, so searching them returns 0
   // with no error — the exact false-clean shape a reader calls CLEAN:
-  //   华威豹 → 0    HUA WEI BAO → 32 (and the 32 CONTAIN 华威豹)
-  //   小米   → 0    XIAOMI      → 57632
-  //   스타벅스 → 0
+  //   Searching the characters of a non-Latin mark returns nothing; searching its transliteration
+  //   returns records, and those records carry the characters. Both halves are needed to see it —
+  //   the empty answer alone is indistinguishable from a mark nobody has filed.
   // Universal, not a CJK-specific behaviour: non-Latin records across CN/TW/JP/KR/TH/GR/UA/EG/IL/SA
-  // carried a populated markTransliteration.
+  // carry a populated markTransliteration.
   //
   // This declaration is what makes the refusal a CONTRACT rather than one vendor file's hand-written
   // check: the shared executor (providers/_shared/execute-plan.mjs, via script-form.mjs) reads it and
@@ -250,7 +250,7 @@ export const CAPABILITIES = Object.freeze({
   // makeEnumerate({ capabilities: {...CAPABILITIES.kernel} }) — these values are the LIVE seam settings,
   // no longer a design note. pageGuard is 1 because /search is single-shot: there is no page 2 to
   // fetch, so the guard can only ever be a backstop. namesChunkDefault = maxOrWidth (500): the kernel
-  // chunks a wide OR-stack to the parser's probed nesting bound before it reaches the wire.
+  // chunks a wide OR-stack to the parser's nesting bound before it reaches the wire.
   kernel: Object.freeze({
     countProbe: "endpoint",
     screenSource: "billed-record-fetch",

package/providers/clarivate/src/core.js

@@ -1211,7 +1211,7 @@ export async function doBatchScreen(apiKey, base, params, tctx) {
         // judgment was shown a native-script mark beside its own romanised query with no reading on
         // either and concluded they were different marks. A delivered report told a client a
         // jurisdiction had not been searched in its own script while the run held both the query and
-        // this value. On the measured round 558 of 1,937 records had one to carry.
+        // this value. A large share of records carry one, so a dropped reading is not a rare edge.
         //
         // Null where the office records none, which is most Latin-script filings: this says what the
         // register says, and inventing a romanisation here would be this row certifying a reading

package/providers/corsearch/src/core.js

@@ -192,7 +192,7 @@ export const DEFAULT_SEARCH_FIELDS = [
 // ONE JSON envelope away: a 200 whose body is `{"message":"upstream search cluster unavailable"}`
 // is valid JSON, so parseError never fires — and the old fallback coerced "an object with no
 // totalHitCount" to 0, on a comment claiming a present body is "the provider answering". It is not.
-// A SEARCH RESPONSE is a body that carries the search-response shape this endpoint was probed to
+// A SEARCH RESPONSE is a body that carries the search-response shape this endpoint is documented to
 // return: totalHitCount (the count), rows (the records) or nextRequest (the paging cursor). A
 // parseable body with none of the three — an error envelope, a gateway stub — is the provider
 // saying something OTHER than an answer, and it rides out as a non-answer (null total, an error
@@ -435,7 +435,7 @@ export async function doExpandPhoneme(sessionKey, params, tctx) {
 // provider); they are RE-EXPORTED here unchanged so every existing importer — engine/mcp/corsearch-server.mjs,
 // register-plan.mjs, the driver — keeps resolving them from this module with identical semantics.
 // classifyStatus carries brand-json's vocabulary (Valid/Pending/GracePeriod live; Invalid/Expired dead;
-// anything else AMBIGUOUS → never auto-drop). BATCH_SCREEN_CHUNK = 100 = the observed brand-json page size.
+// anything else AMBIGUOUS → never auto-drop). BATCH_SCREEN_CHUNK = 100 matches the brand-json page size.
 export { BATCH_SCREEN_CHUNK, chunk, classifyStatus, isAllClass, normalizeBrandRow, screenVerdict };
 
 export async function doBatchScreen(sessionKey, params, tctx) {