clearotron 0.3.2-beta.7 → 0.3.2-beta.8

package/portal-ui/dist/assets/{index-5UyqAyNM.js → index-6jzO9HiX.js}

@@ -11926,6 +11926,7 @@ var api = {
 			};
 		}),
 		...!("territories" in b) ? {} : { registerTerritories: b["territories"] === null ? null : asArray(b["territories"]).filter((t) => typeof t === "string") },
+		...asString(b["registerLabel"]) ? { registerLabel: asString(b["registerLabel"]) } : {},
 		recipes: asArray(b["recipes"]).map((x) => {
 			const r = x;
 			return {
@@ -12193,11 +12194,38 @@ var api = {
 				billing: {
 					mode: asString(bill["mode"]) ?? "unknown",
 					apiBilled: bill["apiBilled"] === true,
-					missing: asStrings(bill["missing"])
+					missing: asStrings(bill["missing"]),
+					cloud: asString(bill["cloud"]),
+					cloudName: asString(bill["cloudName"]),
+					reason: bill["reason"] != null ? (() => {
+						const raw = bill["reason"];
+						const r = typeof raw === "object" && !Array.isArray(raw) ? asRecord(raw) : {};
+						return {
+							kind: asString(r["kind"]) ?? "unclassified",
+							mode: asString(r["mode"]),
+							defaulted: r["defaulted"] === true,
+							setting: asString(r["setting"]) ?? "",
+							clouds: asArray(r["clouds"]).flatMap((c) => {
+								const x = asRecord(c);
+								const name = asString(x["name"]);
+								const setting = asString(x["setting"]);
+								return name && setting ? [{
+									name,
+									setting
+								}] : [];
+							}),
+							modes: asStrings(r["modes"]),
+							gateway: asString(r["gateway"]),
+							engineSetting: asString(r["engineSetting"]),
+							engineChoice: asString(r["engineChoice"])
+						};
+					})() : null
 				},
 				binaryPresent: e["binaryPresent"] === true,
 				program: asString(e["program"]),
-				install: asString(e["install"])
+				install: asString(e["install"]),
+				programSetting: asString(e["programSetting"]),
+				setupRoute: e["setupRoute"] === "packaged" ? "packaged" : e["setupRoute"] === "checkout" ? "checkout" : null
 			};
 		})() : null,
 		providers: Array.isArray(b["providers"]) ? asArray(b["providers"]).map((p) => {
@@ -12330,13 +12358,6 @@ var NAV = [
 		icon: "panel-left",
 		scope: "account"
 	},
-	{
-		id: "ai",
-		label: "Connect your AI",
-		path: "/portal/ai",
-		icon: "sparkles",
-		scope: "account"
-	},
 	{
 		id: "people",
 		label: "People",
@@ -12424,6 +12445,14 @@ var NAV = [
 			}
 		]
 	},
+	{
+		id: "ai",
+		label: "Connect your AI",
+		path: "/portal/ai",
+		icon: "sparkles",
+		scope: "account",
+		rail: "below"
+	},
 	{
 		id: "new-company",
 		label: "New company",
@@ -12463,11 +12492,12 @@ function navFor(who, entries = NAV) {
 		children: e.children.filter((c) => visible(c, who) && !c.hidden)
 	} : e);
 }
+var railSideOf = (e) => e.rail ?? ((e.scope ?? "account") === "account" ? "above" : "below");
 function navGroupsFor(who, entries = NAV) {
 	const visibleEntries = navFor(who, entries);
 	return {
-		account: visibleEntries.filter((e) => (e.scope ?? "account") === "account"),
-		owner: visibleEntries.filter((e) => e.scope === "owner")
+		account: visibleEntries.filter((e) => railSideOf(e) === "above"),
+		owner: visibleEntries.filter((e) => railSideOf(e) === "below")
 	};
 }
 function scopeOf(id, entries = NAV) {
@@ -13818,6 +13848,7 @@ function readableFailure(failedStage, reason) {
 var EMPTY_DRAFT = {
 	product: null,
 	territories: [],
+	replacesOwnTerritories: false,
 	nativeLanguage: false
 };
 var REGIONS = [
@@ -13941,9 +13972,6 @@ function reachesTerritory(name, covered) {
 	if (!Array.isArray(covered)) return true;
 	return covered.includes(name);
 }
-function vocabularyFor(product, covered) {
-	return offerableFor(product).filter((n) => reachesTerritory(n, covered));
-}
 function territoryMatches(query, chosen, product, limit = 8, _covered) {
 	return matchTerritoriesIn(offerableFor(product), query, chosen, limit);
 }
@@ -13959,8 +13987,9 @@ function matchTerritoriesIn(vocabulary, query, chosen, limit = 8) {
 	};
 	return vocabulary.filter((n) => !taken.has(n.toLowerCase()) && hit(n)).slice(0, limit);
 }
-function addTerritory(d, name, product, _covered) {
+function addTerritory(d, name, product, covered) {
 	if (!offerableFor(product).includes(name)) return d;
+	if (!reachesTerritory(name, covered)) return d;
 	if (d.territories.includes(name)) return d;
 	if (product?.geography === "exactly one country") return {
 		...d,
@@ -13977,14 +14006,35 @@ function removeTerritory(d, name) {
 		territories: d.territories.filter((t) => t !== name)
 	};
 }
-function geographyFor(d) {
-	return d.territories.length ? {
+function notAvailableLine(names, registerLabel) {
+	const named = names.join(", ");
+	const who = typeof registerLabel === "string" && registerLabel.trim() ? registerLabel.trim() : null;
+	return `${named ? `${named} \u00b7 ` : ""}not available${who ? ` with register ${who}` : ""}`;
+}
+function takeOverOwnTerritories(d, own, without) {
+	return {
+		...d,
+		territories: own.filter((t) => t !== without),
+		replacesOwnTerritories: true
+	};
+}
+function geographyFor(d, product = null, resolved = []) {
+	if (product?.geography === "worldwide, and nothing else") return {
+		mode: "worldwide",
+		territories: []
+	};
+	if (d.territories.length) return {
 		mode: "named",
 		territories: [...d.territories]
-	} : {
+	};
+	if (d.replacesOwnTerritories) return {
 		mode: "worldwide",
 		territories: []
 	};
+	return {
+		mode: "account-default",
+		territories: [...resolved]
+	};
 }
 function nativeLanguageControl(product) {
 	if (product?.nativeLanguage === "offered") return "toggle";
@@ -14003,6 +14053,7 @@ function chooseProduct(d, product) {
 	return {
 		product: product?.key ?? null,
 		territories,
+		replacesOwnTerritories: d.replacesOwnTerritories,
 		nativeLanguage: nativeLanguageControl(product) === "toggle" ? d.nativeLanguage : false
 	};
 }
@@ -14485,6 +14536,7 @@ function draftFromSaved(recipe, products) {
 	return chooseProduct({
 		product: base,
 		territories: Array.isArray(scope["jurisdictions"]) ? scope["jurisdictions"].filter((j) => typeof j === "string") : [],
+		replacesOwnTerritories: false,
 		nativeLanguage: recipe["nativeLanguage"] === true
 	}, product);
 }
@@ -15510,7 +15562,7 @@ function resumeWording(iso) {
 	});
 	return t.toDateString() === new Date().toDateString() ? `at ${time}` : `${t.toLocaleDateString([], { weekday: "long" })} at ${time}`;
 }
-function StatusCell({ state, step, stepN, stepTotal, reason, failedStage, pausedKind = null, resetsAt = null, stopRequestedAt = null, detailed = false, count = null }) {
+function StatusCell({ state, step, reason, failedStage, pausedKind = null, resetsAt = null, stopRequestedAt = null, detailed = false, count = null }) {
 	if (stopRequestedAt && state !== "delivered" && state !== "failed" && state !== "cancelled") return (0, import_jsx_runtime.jsxs)("span", { children: [(0, import_jsx_runtime.jsxs)("span", {
 		className: "status",
 		children: [(0, import_jsx_runtime.jsx)("span", {
@@ -15577,7 +15629,7 @@ function StatusCell({ state, step, stepN, stepTotal, reason, failedStage, paused
 		] });
 	}
 	const label = state === "queued" ? "Queued" : state === "paused" ? "Paused" : "Running";
-	const detail = state === "paused" ? pausedKind === "recovering" ? "Held after a problem — retrying on its own" : pausedKind === "operator" ? "Paused by a system restart — resumes on its own" : resetsAt ? `Paused by a provider limit — resumes ${resumeWording(resetsAt)}` : "Paused by a provider limit — resumes on its own" : step ? stepN != null && stepTotal != null ? `${step} · ${stepN} of ${stepTotal}` : step : null;
+	const detail = state === "paused" ? pausedKind === "recovering" ? "Held after a problem — retrying on its own" : pausedKind === "operator" ? "Paused by a system restart — resumes on its own" : resetsAt ? `Paused by a provider limit — resumes ${resumeWording(resetsAt)}` : "Paused by a provider limit — resumes on its own" : step;
 	return (0, import_jsx_runtime.jsxs)("span", { children: [(0, import_jsx_runtime.jsxs)("span", {
 		className: "status",
 		children: [(0, import_jsx_runtime.jsx)("span", { className: `dot ${state}` }), count ? (0, import_jsx_runtime.jsxs)("span", { children: [
@@ -15602,7 +15654,7 @@ function allowanceLine(usage, brand) {
 	if (left == null) return null;
 	if (left > 5) return null;
 	const who = operatorName(brand);
-	if (left === 0) return `You have used all ${usage?.dailyRuns ?? 0} of this account's searches for today. The allowance resets at midnight UTC — or ask your ${who} contact to run this one for you.`;
+	if (left === 0) return `You have used all ${usage?.dailyRuns ?? 0} of this account's searches for today. The allowance resets at midnight UTC — or ask ${who} to run this one for you.`;
 	return `${left} search${left === 1 ? "" : "es"} left today. The allowance resets at midnight UTC, or ask ${who} to run one for you.`;
 }
 //#endregion
@@ -16688,8 +16740,6 @@ function FamilyRows({ family, isOpen, onToggle, go, picking, showOwner = false,
 			}) : (0, import_jsx_runtime.jsx)(StatusCell, {
 				state: family.state,
 				step: null,
-				stepN: null,
-				stepTotal: null,
 				reason: null,
 				failedStage: null
 			}) }),
@@ -16798,8 +16848,6 @@ function MarkRow({ mark, open, onToggle, go, indent = false, picking = false, sh
 				(0, import_jsx_runtime.jsx)("td", { children: (0, import_jsx_runtime.jsx)(StatusCell, {
 					state: run.state,
 					step: run.step,
-					stepN: run.stepN,
-					stepTotal: run.stepTotal,
 					reason: run.reason,
 					failedStage: run.failedStage,
 					pausedKind: run.pausedKind,
@@ -16936,8 +16984,6 @@ function ReadRow({ read, go, picking, indent, showOwner = false, latest = false,
 			(0, import_jsx_runtime.jsx)("td", { children: (0, import_jsx_runtime.jsx)(StatusCell, {
 				state: read.state,
 				step: read.step,
-				stepN: read.stepN,
-				stepTotal: read.stepTotal,
 				reason: read.reason,
 				failedStage: read.failedStage,
 				stopRequestedAt: read.stopRequestedAt,
@@ -17764,26 +17810,68 @@ function Missing({ go, reason }) {
 }
 //#endregion
 //#region src/contract/engineState.ts
+var SETUP_COMMAND = "`npx clearotron install`";
+var listed = (xs, and = "and") => xs.length <= 1 ? xs[0] ?? "" : `${xs.slice(0, -1).join(", ")} ${and} ${xs[xs.length - 1]}`;
+var PAID_BY = {
+	subscription: "subscription",
+	"api-key": "an API key",
+	cloud: "a cloud account"
+};
+var paidBy = (mode) => mode !== null && Object.hasOwn(PAID_BY, mode) ? PAID_BY[mode] : mode ?? "a way of paying";
+var COUNT = [
+	"no",
+	"one",
+	"two",
+	"three",
+	"four"
+];
+var NAMES_CLOUDS = new Set([
+	"switch-beside-mode",
+	"two-clouds",
+	"no-cloud"
+]);
+function billingRefusalSentence(r) {
+	const setting = r.setting || "the billing setting";
+	const generic = `Searches will be refused over how this machine is set to pay. Check ${setting} and the settings beside it.`;
+	if (NAMES_CLOUDS.has(r.kind) && r.clouds.length === 0) return generic;
+	const paid = r.defaulted ? `${paidBy(r.mode)}, the default while ${setting} is not set` : `set to ${paidBy(r.mode)}`;
+	switch (r.kind) {
+		case "switch-beside-mode": {
+			const one = r.clouds.length === 1;
+			const names = listed(r.clouds.map((c) => c.name));
+			const switches = listed(r.clouds.map((c) => c.setting));
+			const keep = r.mode === "api-key" ? "to pay with the API key" : "to pay by subscription";
+			return `Searches will be refused: payment is ${r.defaulted ? "by " : ""}${paid}, but the ${names} ${one ? "switch" : "switches"} (${switches}) ${one ? "is" : "are"} also on. ` + (one ? `Turn ${switches} off ${keep}, or set ${setting} to cloud to pay through ${names}.` : `Turn them off ${keep}, or set ${setting} to cloud and leave one on.`);
+		}
+		case "two-clouds": return `Searches will be refused: payment is set to a cloud account, but ${COUNT[r.clouds.length] ?? r.clouds.length} clouds are switched on, ${listed(r.clouds.map((c) => `${c.name} (${c.setting})`))}. Turn off all but the one you pay through.`;
+		case "no-cloud": return `Searches will be refused: payment is set to a cloud account, but no cloud is chosen. Turn on your cloud's switch (${listed(r.clouds.map((c) => `${c.setting} for ${c.name}`), "or")}) with the settings that cloud needs` + (r.gateway ? `, set ${r.gateway} for a gateway,` : ",") + ` or set ${setting} to subscription.`;
+		case "not-a-mode": return `Searches will be refused: ${setting} is set to a word Clearotron does not know. Set it to ${listed(r.modes, "or")}.`;
+		case "cloud-on-codex": return `Searches will be refused: payment is set to a cloud account, which pays only for Claude, and this machine runs the Codex engine. Set ${setting} to ${listed(r.modes, "or")}` + (r.engineSetting && r.engineChoice ? `, or set ${r.engineSetting} to ${r.engineChoice} to pay for Claude through your cloud.` : ".");
+		default: return generic;
+	}
+}
 function engineRowFaults(engine, { programDisputed = false } = {}) {
+	const reason = engine.billing.reason ?? null;
 	return [
 		...engine.known ? [] : [`This build does not ship an engine called ${engine.id}.`],
 		...engine.billing.missing.length ? ["Set to bill an API key, and no key is set — a run is refused rather than billed to the subscription."] : [],
-		...engine.binaryPresent ? [] : engine.program && engine.install ? [`The engine program \`${engine.program}\` cannot be found or run on this machine. Install it with \`${engine.install}\`, then restart this service so it looks for the program again.`] : ["The engine program cannot be found or run on this machine."],
-		...programDisputed && engine.binaryPresent ? ["The engine program is on this machine, but the engine could not find it when it last started — so a new search will refuse. Restart the engine service, or install the CLI where the service can see it."] : []
+		...reason && !engine.billing.missing.length ? [billingRefusalSentence(reason)] : [],
+		...engine.binaryPresent ? [] : engine.program ? [`The engine program \`${engine.program}\` cannot be found or run on this machine. Run the setup wizard, ${SETUP_COMMAND}: it offers to install the program and proves it with one turn. Then restart Clearotron's services, which look for the program when they start.`] : ["The engine program cannot be found or run on this machine."],
+		...programDisputed && engine.binaryPresent ? [`The engine program is on this machine, but the engine could not find it when it last started — so a new search will refuse. Restart the engine service so it looks again. If it still cannot find it, set ${engine.programSetting ?? "the engine's program setting"} to the program's full path in the settings file the service reads, then restart it again.`] : []
 	];
 }
 function engineNotice({ programDisputed }) {
 	if (programDisputed === true) return {
 		state: "disputed",
 		headline: "The engine program is on this machine, but the engine could not find it when it last started.",
-		before: "So a new search will refuse. Restart the engine service, or install the CLI where the service can see it — installing it again where it already is will not change this.",
+		before: "So a new search will refuse. Restart the engine service so it looks again. If it still cannot find it, set the engine's program setting to the program's full path in the settings file the service reads — installing it again where it already is will not change this.",
 		namesSetupCommand: false,
 		after: ""
 	};
 	return {
 		state: "absent",
 		headline: "No search engine is attached to this install.",
-		before: "Everything else works — the example report, its audit trail and the assistant connection are live right now. To start new searches, install a reasoning CLI and sign in, then run the setup wizard again",
+		before: "Everything else works — the example report, its audit trail and the assistant connection are live right now. The setup wizard offers to install a reasoning CLI if this machine has none, and asks how it is paid for. To start new searches, run the setup wizard",
 		namesSetupCommand: true,
 		after: "Then restart the service: this reading was taken when it started, and it will not notice a new install until it starts again."
 	};
@@ -17794,7 +17882,7 @@ function engineRow(engine, { programDisputed = false } = {}) {
 		ok: faults.length === 0,
 		name: engine.vendor ?? engine.id,
 		mono: engine.id,
-		state: engine.billing.apiBilled ? "API key" : "Subscription",
+		state: engine.billing.missing.length || engine.billing.reason ? "Refused" : engine.billing.cloudName ?? (engine.billing.apiBilled ? "API key" : "Subscription"),
 		faults
 	};
 }
@@ -18270,6 +18358,7 @@ function NewClearance({ ctx }) {
 	const { result: usageRes } = useLoad(() => api.usage(account), [account]);
 	const levels = searches?.kind === "ok" ? searches.value.products : [];
 	const registerTerritories = searches?.kind === "ok" ? searches.value.registerTerritories : void 0;
+	const registerLabel = searches?.kind === "ok" ? searches.value.registerLabel : void 0;
 	const savedSearches = searches?.kind === "ok" ? searches.value.recipes : [];
 	const readCan = searches?.kind === "ok" ? searches.value.read : {
 		available: false,
@@ -18387,10 +18476,11 @@ function NewClearance({ ctx }) {
 		setSaveNote(null);
 	};
 	const setPick = (next) => edit({ pick: next });
-	const recommendation = (0, import_react.useMemo)(() => recommendSearch(levels, names.length, draft.pick.territories), [
+	const recommendation = (0, import_react.useMemo)(() => recommendSearch(levels, names.length, draft.pick.territories.length ? draft.pick.territories : own.territories), [
 		levels,
 		names.length,
-		draft.pick.territories
+		draft.pick.territories,
+		own.territories
 	]);
 	(0, import_react.useEffect)(() => {
 		if (pickedByHand || draft.savedSearch || editingSlug || !recommendation) return;
@@ -18427,7 +18517,7 @@ function NewClearance({ ctx }) {
 				deadline: d.deadline
 			};
 			let after = applyRead(before, read, own.classes, { worldwide });
-			const fits = recommendSearch(levels, parseNames(after.names).length, after.draft.territories);
+			const fits = recommendSearch(levels, parseNames(after.names).length, after.draft.territories.length ? after.draft.territories : own.territories);
 			if (read.product == null && !pickedByHand && !d.savedSearch && fits) after = {
 				...after,
 				draft: chooseProduct(after.draft, fits.product)
@@ -18456,7 +18546,7 @@ function NewClearance({ ctx }) {
 		...draft.savedSearch ? { recipeKey: draft.savedSearch } : draft.pick.product ? { product: draft.pick.product } : {},
 		...draft.project ? { projectKey: draft.project } : {},
 		...draft.pick.territories.length ? { jurisdictions: [...draft.pick.territories] } : {},
-		geography: { mode: geographyFor(draft.pick).mode },
+		geography: { mode: geographyFor(draft.pick, activeLevel, own.territories).mode },
 		...marketplacesApply && parseList(draft.platforms).length ? { platforms: parseList(draft.platforms) } : {},
 		...!draft.savedSearch && nativeControl === "toggle" && draft.pick.nativeLanguage ? { nativeLanguage: true } : {},
 		...draft.ref.trim() ? { ref: draft.ref.trim() } : {},
@@ -18795,10 +18885,20 @@ function NewClearance({ ctx }) {
 									gap: 6,
 									margin: "9px 0 12px"
 								},
-								children: draft.pick.territories.length === 0 ? own.territories.length ? (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [own.territories.map((t) => (0, import_jsx_runtime.jsx)("span", {
-									className: "chip",
+								children: draft.pick.territories.length === 0 ? own.territories.length ? (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [own.territories.map((t) => (0, import_jsx_runtime.jsxs)("span", {
 									"data-anon": "mark",
-									children: t
+									className: reachesTerritory(t, registerTerritories) ? "chip" : "chip chip-deferred",
+									title: reachesTerritory(t, registerTerritories) ? void 0 : notAvailableLine([t], registerLabel),
+									children: [reachesTerritory(t, registerTerritories) ? t : notAvailableLine([t], registerLabel), (0, import_jsx_runtime.jsx)("button", {
+										type: "button",
+										"aria-label": `Remove ${t}`,
+										className: "chip-x",
+										onClick: () => setPick(takeOverOwnTerritories(draft.pick, own.territories, t)),
+										children: (0, import_jsx_runtime.jsx)(Icon, {
+											name: "x",
+											size: 13
+										})
+									})]
 								}, t)), (0, import_jsx_runtime.jsx)("span", {
 									style: {
 										fontSize: 11,
@@ -18811,21 +18911,17 @@ function NewClearance({ ctx }) {
 									children: "Worldwide"
 								}) : draft.pick.territories.map((t) => (0, import_jsx_runtime.jsxs)("span", {
 									className: reachesTerritory(t, registerTerritories) ? "chip chip-own" : "chip chip-own chip-deferred",
-									title: reachesTerritory(t, registerTerritories) ? void 0 : "The register wired to this deployment does not reach this territory — it is disclosed in the report as deferred coverage rather than searched.",
-									children: [
-										t,
-										reachesTerritory(t, registerTerritories) ? "" : " · register deferred",
-										(0, import_jsx_runtime.jsx)("button", {
-											type: "button",
-											"aria-label": `Remove ${t}`,
-											className: "chip-x",
-											onClick: () => setPick(removeTerritory(draft.pick, t)),
-											children: (0, import_jsx_runtime.jsx)(Icon, {
-												name: "x",
-												size: 13
-											})
+									title: reachesTerritory(t, registerTerritories) ? void 0 : notAvailableLine([t], registerLabel),
+									children: [reachesTerritory(t, registerTerritories) ? t : notAvailableLine([t], registerLabel), (0, import_jsx_runtime.jsx)("button", {
+										type: "button",
+										"aria-label": `Remove ${t}`,
+										className: "chip-x",
+										onClick: () => setPick(removeTerritory(draft.pick, t)),
+										children: (0, import_jsx_runtime.jsx)(Icon, {
+											name: "x",
+											size: 13
 										})
-									]
+									})]
 								}, t))
 							}),
 							(0, import_jsx_runtime.jsx)("div", {
@@ -18845,33 +18941,18 @@ function NewClearance({ ctx }) {
 									className: "typeahead",
 									children: territoryMatches(territoryQuery, draft.pick.territories, whereLevel, 8, registerTerritories).map((t) => (0, import_jsx_runtime.jsxs)("button", {
 										type: "button",
+										disabled: !reachesTerritory(t, registerTerritories),
 										onClick: () => {
 											setPick(addTerritory(draft.pick, t, whereLevel, registerTerritories));
 											setTerritoryQuery("");
 										},
 										children: [t, reachesTerritory(t, registerTerritories) ? null : (0, import_jsx_runtime.jsx)("span", {
 											className: "typeahead-note",
-											children: "register deferred"
+											children: notAvailableLine([], registerLabel)
 										})]
 									}, t))
 								}) : null]
 							}),
-							Array.isArray(registerTerritories) ? (0, import_jsx_runtime.jsxs)("p", {
-								className: "section-hint",
-								style: { marginTop: 10 },
-								children: [
-									"The trademark register wired to this deployment reaches",
-									" ",
-									vocabularyFor(whereLevel, registerTerritories).length,
-									" of the",
-									" ",
-									offerableFor(whereLevel).length,
-									" territories you can name here:",
-									" ",
-									vocabularyFor(whereLevel, registerTerritories).join(", "),
-									". Anywhere else can still be ordered — it is disclosed in the report as deferred coverage rather than searched at the register."
-								]
-							}) : null,
 							whereLevel?.geography === "exactly one country" && draft.pick.territories.length === 1 ? (0, import_jsx_runtime.jsxs)("div", {
 								className: "callout-accent",
 								children: [draft.pick.territories[0], " — naming another country replaces it, because this search reads one at a time."]
@@ -19397,6 +19478,7 @@ function NewClearance({ ctx }) {
 			plan ? (0, import_jsx_runtime.jsx)(ReviewDialog, {
 				uses: runCount(effort),
 				left: searchesLeft(usage),
+				registerLabel,
 				plan,
 				busy,
 				owner: ownerLabel,
@@ -19933,7 +20015,7 @@ function PickRow({ selected, onPick, title, tagline, description, chips, recomme
 		}) : null]
 	});
 }
-function ReviewDialog({ plan, busy, owner, project, names, goods, nativeOn, onStart, onBack, failure, onReview, uses, left }) {
+function ReviewDialog({ plan, busy, owner, project, names, goods, nativeOn, onStart, onBack, failure, onReview, uses, left, registerLabel }) {
 	(0, import_react.useEffect)(() => {
 		const on = (e) => {
 			if (e.key === "Escape") onBack();
@@ -20018,13 +20100,7 @@ function ReviewDialog({ plan, busy, owner, project, names, goods, nativeOn, onSt
 						}),
 						(0, import_jsx_runtime.jsx)(Row$3, {
 							label: "Registers to search",
-							children: plan.coverage ? (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [plan.coverage.reached.length ? joinAnd(plan.coverage.reached) : "None", plan.coverage.missing.length ? (0, import_jsx_runtime.jsxs)(Muted, { children: [
-								". ",
-								joinAnd(plan.coverage.missing),
-								" ",
-								plan.coverage.missing.length === 1 ? "is" : "are",
-								" not reached by the register wired here, and will be disclosed in the report as deferred coverage rather than searched."
-							] }) : null] }) : places.length ? joinAnd(places) : "Worldwide"
+							children: plan.coverage ? (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [plan.coverage.reached.length ? joinAnd(plan.coverage.reached) : "None", plan.coverage.missing.length ? (0, import_jsx_runtime.jsxs)(Muted, { children: [". ", notAvailableLine(plan.coverage.missing, registerLabel)] }) : null] }) : places.length ? joinAnd(places) : "Worldwide"
 						}),
 						scope && scope.classes.length ? (0, import_jsx_runtime.jsxs)(Row$3, {
 							label: "Classes",
@@ -25476,7 +25552,7 @@ function About() {
 						(0, import_jsx_runtime.jsx)("dt", { children: "Copyright" }),
 						(0, import_jsx_runtime.jsx)("dd", { children: info.copyright.replace(/^Copyright\s+/i, "") }),
 						(0, import_jsx_runtime.jsx)("dt", { children: "Model access" }),
-						(0, import_jsx_runtime.jsx)("dd", { children: "This runs on your own model access — a subscription or your own API key — and the paid registers on your own agreements with those providers. The reasoning stages are a proprietary third-party CLI that you install and license under that vendor’s own terms; this licence grants nothing over any of them." }),
+						(0, import_jsx_runtime.jsx)("dd", { children: "This runs on your own model access — a subscription, an API key, or your own cloud account — and the paid registers on your own agreements with those providers. The reasoning stages are a third-party command-line program, Claude Code (proprietary) or the Codex CLI (Apache-2.0), that you install and license under that vendor’s own terms; this licence grants nothing over any of them." }),
 						(0, import_jsx_runtime.jsx)("dt", { children: "Trade marks" }),
 						(0, import_jsx_runtime.jsxs)("dd", { children: [
 							(0, import_jsx_runtime.jsx)("strong", { children: info.name }),

package/portal-ui/dist/index.html

@@ -49,7 +49,7 @@
     -->
     <link rel="preconnect" href="https://api.fontshare.com" crossorigin />
     <link href="https://api.fontshare.com/v2/css?f[]=satoshi@400,500,700,900&display=swap" rel="stylesheet" />
-    <script type="module" crossorigin src="/portal/assets/index-5UyqAyNM.js"></script>
+    <script type="module" crossorigin src="/portal/assets/index-6jzO9HiX.js"></script>
     <link rel="stylesheet" crossorigin href="/portal/assets/index-CVOIvdhc.css">
   </head>
   <body>

package/portal-ui/package.json

@@ -2,7 +2,7 @@
   "name": "portal-ui",
   "private": true,
   "type": "module",
-  "version": "0.3.2-beta.7",
+  "version": "0.3.2-beta.8",
   "license": "AGPL-3.0-only",
   "description": "The unified trademark portal UI. One address, one login: who you are decides what you see. Built as a static bundle, served by driver/portal-service.mjs — the browser never reaches profile-service or recipe-service.",
   "engines": {

package/providers/jx/README.md

@@ -9,7 +9,8 @@ validated at parse.
 **One vendor, one billing mode, decided by the run and not by this directory.** The lanes go through
 `engine.runTurn()` — the same door all fourteen agentic stages use — via
 [`../../driver/engine/jx-turn.mjs`](../../driver/engine/jx-turn.mjs). Whatever program the customer configured
-(`CLEAROTRON_AI`) and whatever billing mode the run is on (API key or subscription) carries these calls too.
+(`CLEAROTRON_AI`) and whatever billing mode the run is on (subscription, API key or, for Claude, a cloud account)
+carries these calls too.
 That is the owner's standing rule — *one LLM provider only ever, API or auth, no mix* — and until 2026-08-20
 these three lanes were the one place in the product that broke it: they POSTed to the Anthropic Messages API on
 `ANTHROPIC_API_KEY` at a hardcoded cheap tier no matter what the rest of the run was doing.

package/providers/jx/src/turn-envelope.mjs

@@ -106,15 +106,20 @@ export function envelopeFromTurnText(text, toolName) {
  * so the ORDER of those checks lives here once rather than three times.
  *
  * `turn` is supplied by the driver and is injectable for tests:
- *   async ({prompt, kind}) => { ok, text, truncated, usage:{input,output}, model, vendor, authMode, cause }
+ *   async ({prompt, kind}) => { ok, text, truncated, usage:{input,output}, model, vendor, authMode, cloud, cause }
  *
  * ATTRIBUTION RIDES EVERY RETURN, including the failures. A degrade still spent tokens, and without the
  * model, vendor and billing mode beside them they cannot be attributed in the run's rollup — which is
  * the half of that says a run must be able to state who did the work.
+ *
+ * `cloud` is part of that attribution: under the cloud billing mode it names the account that paid
+ * ("foundry", "vertex", "bedrock", "gateway"), and it is null under every other mode. The ledger stamp
+ * reads it from THIS return, so a field left off here reached every native-language record as
+ * `cloud: null` while the main steps of the same run said which cloud paid.
  */
 export async function runJxTurn({ body, turn, kind, started, truncatedCause, parse }) {
   const t0 = Number.isFinite(started) ? started : Date.now();
-  const blank = { tookMs: 0, model: null, vendor: null, authMode: null, usage: null };
+  const blank = { tookMs: 0, model: null, vendor: null, authMode: null, cloud: null, usage: null };
   if (typeof turn !== "function") return { ok: false, cause: `${kind}: no turn runner was supplied`, ...blank };
 
   const { prompt, toolName } = promptFromRequest(body);
@@ -124,7 +129,7 @@ export async function runJxTurn({ body, turn, kind, started, truncatedCause, par
 
   const attribution = {
     tookMs: Date.now() - t0,
-    model: r?.model ?? null, vendor: r?.vendor ?? null, authMode: r?.authMode ?? null,
+    model: r?.model ?? null, vendor: r?.vendor ?? null, authMode: r?.authMode ?? null, cloud: r?.cloud ?? null,
     // Passed through WHOLE, and `null` stays null. The driver hands over the engine contract's canonical
     // Usage ({input, output, cacheRead, cacheWrite, total}); re-shaping it to two fields here would drop
     // cache and total tokens from the rollup, and a zeroed object in place of null would report a

package/providers/oauth-mcp-bridge/CHANGELOG.md

@@ -1,5 +1,9 @@
 # trademark-oauth-mcp-bridge
 
+## 0.3.2-beta.8
+
+No changes in this release.
+
 ## 0.3.2-beta.7
 
 No changes in this release.

package/providers/oauth-mcp-bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-oauth-mcp-bridge",
-  "version": "0.3.2-beta.7",
+  "version": "0.3.2-beta.8",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "OAuth 2.1 MCP stdio bridge used by the engine's case-law gather stage (courtlistener / legaldatahunter).",

package/providers/uspto-local/README.md

@@ -155,7 +155,7 @@ what an index actually holds, including whether the 1884 backfile is in it (a da
 identical on every other number and is missing a century).
 
 This replaces only the *register* half of a clearance
-— the reasoning engine still needs its own subscription or API key, and the unregistered-use half
+— the reasoning engine still needs its own subscription, API key or cloud account, and the unregistered-use half
 still wants `PERPLEXITY_API_KEY`.
 
 **It refuses rather than answering zero.** An absent index, a schema with no rows, or an index whose

package/scripts/authority-boundary-probe.mjs

@@ -28,7 +28,7 @@ import { join } from "node:path";
 import { driverDir, ensureDriverDir } from "../shared/driver-dir.mjs";   // — one definition of where `_driver/` is
 import { tmpdir } from "node:os";
 import { buildClaudeArgs, spawnEnv } from "../driver/engine/anthropic-agent.mjs";
-import { envFrom } from "../shared/env-aliases.mjs";   // — resolves EITHER spelling; names the retired one because that is the live-writable half
+import { resolveEngineProgram } from "../driver/driver.config.mjs";   // — the program a run would spawn, found the way a run finds it
 
 const arg = (f, d) => { const i = process.argv.indexOf(f); return i > 0 ? process.argv[i + 1] : d; };
 const model = arg("--model", "claude-sonnet-5");
@@ -73,7 +73,9 @@ console.log(`probe root: ${root}`);
 console.log(`--add-dir roots: ${args.filter((a, i) => args[i - 1] === "--add-dir").join(", ")}`);
 console.log(`--settings present: ${args.includes("--settings")}`);
 
-const child = spawn(envFrom(process.env, "CLEAROTRON_CLAUDE_PATH") || "claude", [...args, "--include-hook-events"],
+// The program a run would spawn (driver.config.mjs resolveEngineProgram), so this probes the same copy.
+const program = resolveEngineProgram("anthropic-agent");
+const child = spawn(program.resolved ?? program.bin, [...args, "--include-hook-events"],
   { stdio: ["pipe", "pipe", "pipe"], cwd: runDir, env: spawnEnv() });
 let out = "", err = "";
 child.stdout.on("data", (d) => { out += d; });

package/scripts/env-audit.mjs

@@ -535,13 +535,18 @@ export function auditEnv(root = ROOT) {
 //                            roster, while ADR-0003 had already ruled case-law setup an OAuth flow
 //                            and not a variable at all. Evidence of a reader is not evidence of a
 //                            READ: the roster is a list of names to look for, not a call site.
-//                         4  the AZURE_OPENAI_* block, an external contract (below).
+//                         4  the AZURE_OPENAI_* block, then kept as an external contract. That call did
+//                            not hold: nothing the product runs read them, and the rows were removed
+//                            from `.env.example` on 2026-09-15 (below). They are no longer counted
+//                            among the wrong deletions.
 //                         1  CLEAROTRON_SEND_TOOL_PREFIX — genuinely dead, and this direction does not
 //                            catch it either: its one surviving mention is a governance-doc line, and
 //                            a mention is enough to spare a row. Under-firing is the cost of the
 //                            trade, taken deliberately. It is the prose-sweep class.
 //
-//                       So SIX of ten deletions would have been wrong, two of them credential rows.
+//                       So FOUR of ten deletions would have been wrong, the four live reads above,
+//                       one of them a credential row. (This said six until 2026-09-15; that count
+//                       did not follow from the rows as listed, and it included the Azure block.)
 //                       Evidence used instead: the bare NAME, on a name boundary, anywhere in the
 //                       tracked tree. The accessor family is filed as  and does NOT belong here —
 //                       see below.
@@ -561,10 +566,11 @@ export function auditEnv(root = ROOT) {
 // ── AND IT IS NOT A SUPPRESSION LIST ────────────────────────────────────────────────────────────
 //
 // forbids one, rightly: "if a row is deliberately readerless, the row goes, not the guard."
-// Applied literally that ruling deletes three rows it should not. `.env.example`'s Azure block
-// documents the variables an EXTERNAL agent platform consumes — the block says so itself, ruled
-// it, and `MODELS.azure` / `CLEAROTRON_AZURE_MODEL` / `jxPolicy.providerStance: "azure-only"` are live.
-// There is no reader in this tree and there never was one to retire.
+// Applied literally, that ruling deletes a row whose consumer is not this tree at all: a variable read
+// by a program the product spawns, such as the Claude program's own sign-in token. The row documents a
+// contract with that consumer, and there is no reader here to retire. (The four AZURE_OPENAI_* rows that
+// first raised this were a different case. They named another platform's settings, nothing the product
+// runs read them, and they were removed from `.env.example` on 2026-09-15.)
 //
 // So a row is ACCOUNTED FOR two ways, and this is one rule applied to every row rather than a list of
 // exempt names: something in the tree names it, OR the row carries an inline `# external:` line