clearotron 0.3.3-beta.0 → 0.3.3

package/mcp-server/CHANGELOG.md

@@ -1,5 +1,13 @@
 # trademark-artifacts-mcp
 
+## 0.3.3
+
+No changes in this release.
+
+## 0.3.3-beta.1
+
+No changes in this release.
+
 ## 0.3.3-beta.0
 
 No changes in this release.

package/mcp-server/lib/brief.mjs

@@ -44,6 +44,11 @@ function plainClause(s) {
 }
 
 const titleCase = (w) => (w ? w.charAt(0) + w.slice(1).toLowerCase() : w);
+// A band arrives as its word ("High") or as the derived record publish writes for the run's verdict
+// ({ label, rankFromTop, scale }). Stringifying the record printed "Overall risk: [object object]."
+// on the assistant's summary; every band read here goes through this, so either shape gives the word.
+const bandLabel = (b) => (b && typeof b === "object" ? (typeof b.label === "string" && b.label.trim() ? b.label : null)
+  : (b == null || String(b).trim() === "" ? null : String(b)));
 
 // One clearance finding → one line. NO SECOND FILTER: report-data.json already carries only the live
 // findings (a withdrawn one is not in the file), so the brief's conflicts and the report's findings are
@@ -51,7 +56,7 @@ const titleCase = (w) => (w ? w.charAt(0) + w.slice(1).toLowerCase() : w);
 // shorter list than the document the client was holding.
 function clearanceLine(f) {
   const who = [f.mark, f.owner?.name].filter(Boolean).join(" — ") || "(unnamed finding)";
-  const band = f.band ? ` — ${titleCase(String(f.band))} risk.` : "";
+  const band = bandLabel(f.band) ? ` — ${titleCase(bandLabel(f.band))} risk.` : "";
   return `- **${who}**${band}${f.net ? ` ${f.net}` : ""}`.trimEnd();
 }
 
@@ -77,7 +82,8 @@ export function buildBrief(run) {
   // THE BAND, AND NEVER THE GATE'S WORD. This chain used to fall through to the delivery verdict — the
   // sidecar's `verdict`, then the run's — so a run whose report reads Medium could be briefed as BLOCKING.
   // The band is what the report shows; where no band is recorded the line is not drawn at all.
-  const overall = clearance?.verdict?.band ?? clearance?.verdict?.tier
+  const rating = clearance?.rating ?? clearance?.verdict ?? null;   // `verdict` on a report-data file written before the rename
+  const overall = bandLabel(rating?.band) ?? rating?.tier
     ?? (koDocs.length === 1 ? (koDocs[0].overall ?? null) : null)
     ?? fm.overall_label ?? run.tier ?? null;
 
@@ -118,7 +124,7 @@ export function buildBrief(run) {
     }
     // Conditions gate a clean result; advisories never do, so only the conditions ride the briefing.
     const conditions = [
-      ...(clearance.verdict?.conditions ?? []),
+      ...(rating?.conditions ?? []),
       ...(clearance.actions?.conditions ?? []).map((a) => a?.text),
     ].filter(Boolean);
     if (conditions.length) {
@@ -135,7 +141,7 @@ export function buildBrief(run) {
     lines.push("", "**Each name screened:**");
     for (const d of koDocs) {
       for (const m of (d.marks ?? [])) {
-        const band = m.band ? `${titleCase(String(m.band))}${m.qualifier ? ` (${m.qualifier})` : ""}` : "unrated";
+        const band = bandLabel(m.band) ? `${titleCase(bandLabel(m.band))}${m.qualifier ? ` (${m.qualifier})` : ""}` : "unrated";
         lines.push(`- **${m.name}** — ${band}.${d.url ? ` Report: ${d.url}` : ""}`);
         for (const f of (m.findings ?? [])) {
           const who = [f.name, f.owner].filter(Boolean).join(" — ");
@@ -149,7 +155,7 @@ export function buildBrief(run) {
           // was: a typed conflict already leads with its own band on the report, and widening this to all
           // findings would change what this briefing says about runs that have no register layer at all.
           if (f.shape === "register") {
-            const rating = f.band ? ` — ${titleCase(String(f.band))} risk.` : "";
+            const rating = bandLabel(f.band) ? ` — ${titleCase(bandLabel(f.band))} risk.` : "";
             const read = f.basis && f.basis !== f.net ? ` ${f.basis}` : "";
             lines.push(`  - ${who}${rating}${f.net ? ` ${f.net}` : ""}${read}`.trimEnd());
             continue;

package/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-artifacts-mcp",
-  "version": "0.3.3-beta.0",
+  "version": "0.3.3",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "MCP server to interrogate clearotron trademark-clearance runs — list/read artifacts, trace the full decision flow, telemetry/cost, coverage, single-run search, and a gated single-step what-if. Imports the clearotron-driver read-only; touches no driver/template/deploy files.",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "clearotron",
   "type": "module",
-  "version": "0.3.3-beta.0",
+  "version": "0.3.3",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",
@@ -66,7 +66,7 @@
     "assert-census": "node scripts/unexecuted-asserts.mjs"
   },
   "devDependencies": {
-    "@changesets/cli": "3.0.2",
+    "@changesets/cli": "3.0.3",
     "@types/node": "^26",
     "acorn": "^8.18.0",
     "eslint": "^10.8.1",

package/portal-ui/package.json

@@ -2,7 +2,7 @@
   "name": "portal-ui",
   "private": true,
   "type": "module",
-  "version": "0.3.3-beta.0",
+  "version": "0.3.3",
   "license": "AGPL-3.0-only",
   "description": "The unified trademark portal UI. One address, one login: who you are decides what you see. Built as a static bundle, served by driver/portal-service.mjs — the browser never reaches profile-service or recipe-service.",
   "engines": {

package/providers/oauth-mcp-bridge/CHANGELOG.md

@@ -1,5 +1,13 @@
 # trademark-oauth-mcp-bridge
 
+## 0.3.3
+
+No changes in this release.
+
+## 0.3.3-beta.1
+
+No changes in this release.
+
 ## 0.3.3-beta.0
 
 No changes in this release.

package/providers/oauth-mcp-bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-oauth-mcp-bridge",
-  "version": "0.3.3-beta.0",
+  "version": "0.3.3",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "OAuth 2.1 MCP stdio bridge used by the engine's case-law gather stage (courtlistener / legaldatahunter).",

package/scripts/e2e.mjs

@@ -3207,7 +3207,7 @@ async function cmdReport(id, { round: requestedToken = null } = {}) {
     // Five test runs did exactly this in the seven days to 2026-08-25. The answer to "was this
     // delivered" is therefore its own line, above, in the words used for a failed order.
     console.log(`  ${deliveryLine(st)}`);
-    console.log(`  state=${st.state ?? "?"} verdict=${st.verdict ?? "-"} sendPending=${st.sendPending}`);
+    console.log(`  state=${st.state ?? "?"} tier=${st.tier ?? "-"} signoff=${st.review?.signoff ?? st.verdict ?? "-"} sendPending=${st.sendPending}`);
 
     // Which skills changed since this run started — the resume question, stated as fact not as a rule.
     // — THE THREE ANSWERS THIS CHECK CAN GIVE, and it used to give one of them silently.

package/scripts/live-surface-check.mjs

@@ -106,6 +106,7 @@ import { processTable } from "../shared/process-table.mjs";
 import { envFrom } from "../shared/env-aliases.mjs";
 import { gitTry, treeOf } from "../shared/tree-commit.mjs";   // — a packaged install has no git, and says its commit in build-info.json
 import { exitFor } from "../driver/surface-exit-verdict.mjs";   // — a check that could not look is not a drift, and they want different things done   // — the name a reader is told to set is the one in force
+import { planRunAgreementVerdict } from "../driver/plan-run-agreement-verdict.mjs";
 
 const HERE = dirname(fileURLToPath(import.meta.url));
 const asJson = process.argv.includes("--json");
@@ -735,20 +736,11 @@ if (mcpOptions && built) {
   //
   //     plan_run needs an explicit profileKey: an accounts-scoped session refuses without one. The key
   //     comes from what the door ITSELF resolved (below), so no customer is ever hardcoded here.
-  const planDisagreements = [];
-  for (const key of (probeProfileKey ? seen : [])) {
-    try {
-      const plan = await mcpToolCall({ url: MCP_URL, token: OPS_TOKEN, tool: "plan_run",
-        args: { markName: "SURFACE CHECK", classes: [9], product: key, profileKey: probeProfileKey }, timeoutMs: 20000 });
-      const unavailable = (plan?.blockers ?? []).some((b) => /not part of the current release|not switched on|unavailable/i.test(String(b)));
-      if (unavailable !== !doorSays.get(key)) {
-        planDisagreements.push(`${key}: describe_options=${doorSays.get(key) ? "available" : "unavailable"} plan_run=${unavailable ? "unavailable" : "available"}`);
-      }
-    } catch (e) { planDisagreements.push(`${key}: plan_run errored — ${e.message.slice(0, 120)}`); }
-  }
-  if (!probeProfileKey) skip("describe_options and plan_run agree", "no customer resolved to plan against — see the roster check");
-  else if (planDisagreements.length) fail("describe_options and plan_run agree", planDisagreements.join(" · "));
-  else pass("describe_options and plan_run agree", `${seen.length} products checked through both code paths`);
+  //     A plan_run that throws (a 429, a timeout) compared nothing: a marked skip, exit 3, never a drift.
+  const pv = await planRunAgreementVerdict({ keys: seen, doorSays, probeProfileKey,
+    ask: (key) => mcpToolCall({ url: MCP_URL, token: OPS_TOKEN, tool: "plan_run",
+      args: { markName: "SURFACE CHECK", classes: [9], product: key, profileKey: probeProfileKey }, timeoutMs: 20000 }) });
+  record("describe_options and plan_run agree", pv.state, pv.message, pv.blocked === true);
 }
 
 // 5. Leak scan on what a door actually returned. An env name or a path in a live response is a defect

package/scripts/repo-writes.mjs

@@ -11,7 +11,7 @@
 // attribute the red that produces: it surfaces in a file whose diff is empty, on another branch, in
 // another agent's session, and it is intermittent — the three properties that make a defect expensive.
 //
-// `doctor-refuses-what-cannot-run.test.mjs:70` already states the rule in prose: moving the real
+// `doctor-refuses-what-cannot-run.test.mjs` already states the rule in prose: moving the real
 // `portal-ui/dist` aside "would have been shorter and is wrong". Prose is not an instrument. This is.
 //
 // THE RULE IS ABSOLUTE, AND IT IS NOT A QUESTION ABOUT `git`. Tracked, untracked and ignored are the

package/scripts/report-sections-render-check.mjs

@@ -27,6 +27,7 @@ import { fileURLToPath } from 'node:url'
 import { reapOnExit } from '../shared/reap-on-exit.mjs'
 import { browserRun } from '../shared/browser-temp-root.mjs'
 import { prepareReportForEmbed } from '../driver/portal-report.mjs'
+import { scrollAfterPress } from '../shared/scroll-settle.mjs'
 
 const HERE = dirname(fileURLToPath(import.meta.url))
 const ROOT = join(HERE, '..')
@@ -225,11 +226,14 @@ for (const width of [1440, 400]) {
     const target = 2
     const before = await value('window.scrollY')
     await value(`document.querySelectorAll('nav.report-sections .report-section')[${target}].click()`)
-    let settled = before, last = -1
-    for (let i = 0; i < 40 && settled !== last; i++) { last = settled; await wait(150); settled = await value('window.scrollY') }
+    // The jump is animated and starts on the browser's own schedule, so the page is given a deadline to
+    // START moving before it is read as still. Waiting only for the position to settle answers "it never
+    // moved" for a scroll that had not yet begun — see scroll-settle.mjs.
+    const { moved, y: settled, waitedMs } = await scrollAfterPress({ read: () => value('window.scrollY'), wait, from: before })
     const s = await strip()
     const foot = await atFoot()
-    if (!(settled > before)) fail.push(`${at}: pressing "${SECTIONS[target]}" did not move the page`)
+    if (!moved) fail.push(`${at}: pressing "${SECTIONS[target]}" did not move the page in ${waitedMs}ms`)
+    else if (!(settled > before)) fail.push(`${at}: pressing "${SECTIONS[target]}" left the page at ${settled}, not below ${before}`)
     else if (filled(s) !== (foot ? SECTIONS.length : target + 1)) fail.push(`${at}: after the jump to "${SECTIONS[target]}" the strip reads "${s}"`)
     else ok.push(`${at}: a press jumps to "${SECTIONS[target]}" and marks it — ${s}`)
   }

package/scripts/score.mjs

@@ -245,9 +245,15 @@ function scopeOf(runDir, ref) {
   const instructed = readJson(driverDir(runDir, "instructed-scope.json"));
   const cls = instructed?.classes ?? instructed?.nice_classes ?? null;
   const terr = instructed?.jurisdictions ?? instructed?.territories ?? null;
+  // A worldwide request is recorded as a MODE, not a list entry: intake takes the word off the territory
+  // list and stamps `geography.mode` (enqueue-schema.mjs, GEOGRAPHY_MODES). So a worldwide run carries no
+  // territories, and falling through to the reference's own scope would score the run against what the
+  // lawyer wrote there instead of what the run was asked. The run's record wins, stated as the mode.
+  const worldwide = instructed?.geography?.mode === "worldwide";
   return {
     classes: Array.isArray(cls) && cls.length ? cls.map(String) : (ref.scope?.classes ?? []).map(String),
-    territories: Array.isArray(terr) && terr.length ? terr.map(String) : (ref.scope?.territories ?? []).map(String),
+    territories: Array.isArray(terr) && terr.length ? terr.map(String)
+      : worldwide ? ["worldwide"] : (ref.scope?.territories ?? []).map(String),
   };
 }
 

package/shared/scroll-settle.mjs

@@ -0,0 +1,67 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// Copyright 2026 Cordillera Sàrl. Additional terms under section 7 of the AGPL-3.0 apply — see ADDITIONAL-TERMS.md
+// scroll-settle.mjs — after a press, wait for the page to START moving, then for it to STOP.
+//
+// ── WHY A SETTLE WAIT ALONE IS NOT ENOUGH, WHICH IS THE WHOLE POINT ──────────────────────────────
+//
+// A check that presses something and reads the scroll position wants the position the page came to
+// rest at. The obvious shape reads twice and stops when two reads agree:
+//
+//     let settled = before, last = -1
+//     for (let i = 0; i < 40 && settled !== last; i++) { last = settled; await wait(150); settled = await read() }
+//
+// That is a settle detector, and it cannot tell a page that has STOPPED from one that has not STARTED.
+// A smooth scroll begins on the browser's own schedule; when it has not begun by the first read, the
+// first two reads are both the position before the press, they agree, the loop ends, and the caller is
+// told the page never moved. The page then moves, a moment after nobody is looking.
+//
+// This failed once in continuous integration on a branch whose range touched no part of that page, and
+// passed on re-run with nothing changed — the signature of a measurement that races the thing it
+// measures rather than a defect in the page.
+//
+// So the wait is in two parts, and only the first is new: hold until the position CHANGES, giving up at
+// a deadline; then hold until it stops changing. A page that does not move is now told apart from one
+// that has not moved yet by how long it was given — which is why the deadline is returned, for the
+// caller to name in its failure. A caller that says only "it did not move" leaves the next reader
+// unable to tell a real defect from this race.
+//
+// PURE, with the read and the clock injected, so a test drives every path without a browser: a wait
+// that can only be exercised against a real renderer cannot be shown to fail.
+
+// Long enough that a scroll which has not begun by then is not merely late. The press is animated, so
+// this is a deadline for the FIRST movement, never for the whole journey — the settle below carries that.
+export const MOVE_DEADLINE_MS = 4000;
+const STEP_MS = 150;
+const QUIET_STEPS = 40;
+
+/**
+ * Wait for a press to move the page, then for the movement to stop.
+ *
+ * @param {object} o
+ * @param {() => Promise<number|null>} o.read     reads the scroll position now
+ * @param {(ms: number) => Promise<void>} o.wait  sleeps
+ * @param {number} o.from                         the position before the press
+ * @param {() => number} [o.now]                  the clock the deadline is measured on
+ * @returns {Promise<{moved: boolean, y: number|null, waitedMs: number}>}
+ *   `moved` false means the position never changed within `waitedMs` — the page was given that long.
+ */
+export async function scrollAfterPress({ read, wait, from, now = Date.now,
+  deadlineMs = MOVE_DEADLINE_MS, stepMs = STEP_MS, quietSteps = QUIET_STEPS }) {
+  const started = now();
+  let y = from;
+  // FIRST, THAT IT MOVED AT ALL. The deadline is what makes the answer below a finding rather than a race.
+  while (y === from) {
+    if (now() - started >= deadlineMs) return { moved: false, y, waitedMs: now() - started };
+    await wait(stepMs);
+    y = await read();
+  }
+  // THEN, WHERE IT CAME TO REST. `last` starts at a value no read returns, so the position is always
+  // read at least once more: the first changed position is mid-animation, not the answer.
+  let last = null;
+  for (let i = 0; i < quietSteps && y !== last; i++) {
+    last = y;
+    await wait(stepMs);
+    y = await read();
+  }
+  return { moved: true, y, waitedMs: now() - started };
+}