clearotron 0.4.0-beta.1 → 0.4.0-beta.2

package/shared/fonts/OFL-fira-code.txt

@@ -0,0 +1,93 @@
+Copyright 2014-2020 The Fira Code Project Authors (https://github.com/tonsky/FiraCode)
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+https://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded, 
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.

package/shared/fonts/OFL-plus-jakarta-sans.txt

@@ -0,0 +1,93 @@
+Copyright 2020 The Plus Jakarta Sans Project Authors (https://github.com/tokotype/PlusJakartaSans)
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded, 
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.

package/shared/fonts/README.md

@@ -0,0 +1,37 @@
+# Fonts
+
+The two typefaces every report, pool index and portal page is set in. They ship inside the package, and
+each report carries them inside its own file, so opening a report fetches nothing from anywhere.
+
+| File | Typeface | Licence |
+|---|---|---|
+| `plus-jakarta-sans.woff2` | Plus Jakarta Sans, the text face, weights 200–800 | SIL Open Font License 1.1, [`OFL-plus-jakarta-sans.txt`](OFL-plus-jakarta-sans.txt) |
+| `fira-code.woff2` | Fira Code, the code face, weights 300–700 | SIL Open Font License 1.1, [`OFL-fira-code.txt`](OFL-fira-code.txt) |
+
+Neither licence reserves a font name, so these subsets keep their names.
+
+## Where they come from
+
+Each file is a subset of the variable font in the [google/fonts](https://github.com/google/fonts)
+repository:
+
+| File | Source | Last upstream commit to that folder | sha256 of the source file |
+|---|---|---|---|
+| `plus-jakarta-sans.woff2` | `ofl/plusjakartasans/PlusJakartaSans[wght].ttf` | `8b0a1d0f5983c89bc2b93f1b5fb55f9e252744b5` | `89b3fb38aa0d275d7a731d0d817a4f1622b316b4d7fbdedcf02ee9099ff68bc8` |
+| `fira-code.woff2` | `ofl/firacode/FiraCode[wght].ttf` | `5020a98352f1909554697e1da4132da253727138` | `9335b082b3c7850d98a64b584f3417f65355f3471278bb5eeb8c6c0e8657aeeb` |
+
+The licence files are that repository's `OFL.txt` for each family.
+
+The subset keeps the Latin and Latin Extended ranges Google Fonts serves, plus the four arrows U+2190–2193,
+which the reports use and Google's Latin range leaves out. It keeps every layout feature, the whole
+weight axis and every name record, so the copyright and licence notices stay inside each file. Made with
+fonttools 4.65.0:
+
+```sh
+pyftsubset <source>.ttf --flavor=woff2 --layout-features='*' --name-IDs='*' --name-languages='*' \
+  --name-legacy --notdef-outline --output-file=<file>.woff2 \
+  --unicodes="U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2190-2193,U+2212,U+2215,U+FEFF,U+FFFD,U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF"
+```
+
+A character outside that set, such as Japanese or Greek, is drawn by the reader's own system fonts, as it
+was before these files existed.

package/shared/npm-cli.mjs

@@ -0,0 +1,23 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// Copyright 2026 Cordillera Sàrl. Additional terms under section 7 of the AGPL-3.0 apply — see ADDITIONAL-TERMS.md
+// npm-cli.mjs — HOW TO RUN NPM WITHOUT A SHELL, on every platform.
+//
+// ON WINDOWS NPM IS A BATCH FILE. `npm` there is `npm.cmd`, and Node refuses to start a batch file without
+// a shell (EINVAL, since the 2024 fix for batch-file argument injection). A shell is no way round it here:
+// the engine install passes `<package>@>=<floor>`, and cmd.exe reads that `>` as a redirection into a file.
+// npm itself is a Node program, `npm-cli.js`, so on Windows it runs through the Node running now: the one
+// npm named when it launched this process, else the one beside `node.exe`, which is where Node's own
+// Windows installer puts it. Elsewhere `npm` is run as it always was.
+
+import { existsSync } from "node:fs";
+import { win32 } from "node:path";
+
+/** The command and arguments that run npm with `args`: `{command, args}`. `platform` is a parameter so the Windows branch runs on a Linux CI. */
+export function npmInvocation(args = [], { platform = process.platform, env = process.env, execPath = process.execPath, exists = existsSync } = {}) {
+  if (platform !== "win32") return { command: "npm", args };
+  const named = String(env.npm_execpath ?? "");
+  if (/npm-cli\.js$/i.test(named) && exists(named)) return { command: execPath, args: [named, ...args] };
+  const beside = win32.join(win32.dirname(execPath), "node_modules", "npm", "bin", "npm-cli.js");
+  if (exists(beside)) return { command: execPath, args: [beside, ...args] };
+  return { command: "npm", args };
+}

package/shared/os-advice.mjs

@@ -85,7 +85,19 @@ export const chdirPrefix = (dir, { platform = process.platform } = {}) =>
  *
  * `null` where this platform has no such mechanism in the product, so a caller prints nothing rather
  * than naming a service manager the reader does not have. Windows was told the background form was
- * "managed by systemd", which is not on the machine and cannot be installed onto it.
+ * "managed by systemd", which is not on the machine and cannot be installed onto it, and a Mac was told
+ * the same: `--background` installs systemd units, and of the platforms the product runs on only Linux
+ * has systemd.
  */
 export const backgroundManager = ({ platform = process.platform } = {}) =>
-  (isWindows(platform) ? null : "systemd");
+  (platform === "linux" ? "systemd" : null);
+
+/**
+ * What `start --background` answers on Windows, where it has nothing to install: the background form is
+ * systemd units, and Windows has no systemd. Printed as it stands and nothing else, before `start` writes
+ * anything or calls systemctl (owner's ruling, 2026-09-23). `null` elsewhere. Asked of Windows by name
+ * rather than of `backgroundManager`, which answers `null` on other machines too, and a Mac must not be
+ * told it is Windows.
+ */
+export const backgroundRefusal = ({ platform = process.platform } = {}) =>
+  (isWindows(platform) ? "Background mode isn't available on Windows. Run `clearotron start` and keep its window open." : null);

package/shared/path-seps.mjs

@@ -0,0 +1,42 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// Copyright 2026 Cordillera Sàrl. Additional terms under section 7 of the AGPL-3.0 apply — see ADDITIONAL-TERMS.md
+// path-seps.mjs — THE SEPARATOR A PATH WAS BUILT WITH, for code that reads a path with a regex.
+//
+// `join` builds a path with the platform's own separator: "/" on Linux and macOS, "\" on Windows. A regex
+// written against "/" matches nothing on Windows, so the reader that holds it says "not a run directory"
+// or "no agent" about a path that is both, and the grid tool refused every full clearance that way.
+//
+// WINDOWS ACCEPTS BOTH, so both are separators there. On Linux and macOS "\" is an ordinary filename
+// character, so it stays one: the class is chosen from the platform, and a Linux path reads exactly as it
+// did before this file existed. `platform` is a parameter so the Windows branch runs on a Linux CI.
+
+import { STUDIO_SEGMENT_RE } from "./pre-rename-spellings.mjs";
+
+/** A regex source matching one path separator on `platform`. */
+export function sepClass(platform = process.platform) {
+  return platform === "win32" ? "[\\\\/]" : "/";
+}
+
+/** A regex source matching one character that is not a path separator on `platform`. */
+export function notSepClass(platform = process.platform) {
+  return platform === "win32" ? "[^\\\\/]" : "[^/]";
+}
+
+/** Everything after the last separator: the file's own name. */
+export function lastSegment(p, platform = process.platform) {
+  const s = String(p ?? "");
+  const cut = platform === "win32" ? Math.max(s.lastIndexOf("/"), s.lastIndexOf("\\")) : s.lastIndexOf("/");
+  return s.slice(cut + 1);
+}
+
+/** Does the path hold a separator at all, as opposed to being a bare name? */
+export function hasSep(p, platform = process.platform) {
+  const s = String(p ?? "");
+  return s.includes("/") || (platform === "win32" && s.includes("\\"));
+}
+
+/** Is `p` inside a run directory: somewhere under `…/studio/<either segment spelling>/`? */
+export function underStudioSegment(p, platform = process.platform) {
+  const S = sepClass(platform);
+  return new RegExp(`${S}studio${S}${STUDIO_SEGMENT_RE}${S}`).test(String(p ?? ""));
+}

package/shared/process-table.mjs

@@ -55,10 +55,19 @@ import { spawnSync } from "node:child_process";
  * how a portability fix ships broken on the platform it was written for.
  */
 export function processTable({ platform = process.platform, runPs = defaultRunPs,
-  everyUser = false, uid = currentUid() } = {}) {
-  const all = platform === "linux" ? fromProc() : fromPs(runPs);
+  runPowerShell = defaultRunPowerShell, everyUser = false, uid = currentUid(), selfPid = process.pid } = {}) {
+  const all = platform === "linux" ? fromProc() : platform === "win32" ? fromWindows(runPowerShell) : fromPs(runPs);
   if (all == null) return null;                       // could not look, and that survives the filter
   if (everyUser) return all;
+  // WINDOWS HAS NO UID, so "this user's own" is asked of the logon SESSION instead: each user signed in
+  // to a machine has their own, and services run in session 0. It is the nearest thing Windows answers
+  // without an administrator, and it keeps doctor off another account's programs, which is the second
+  // half of the contract above. A listing that does not hold this process cannot say which session is
+  // ours, so it is returned whole, as the no-uid case below returns it.
+  if (platform === "win32") {
+    const me = all.find((p) => p.pid === selfPid);
+    return me && me.session != null ? all.filter((p) => p.session === me.session) : all;
+  }
   // A box with no uid to compare against (a platform with no getuid) cannot answer "is this mine", and
   // guessing would hand back either everything or nothing. Everything is the honest one: the caller
   // gets what it always got, and the row carries `uid: null` so it can see the question was unanswered.
@@ -119,7 +128,66 @@ function fromPs(runPs) {
   return out.length ? out : null;
 }
 
+// ── WINDOWS: THE SAME CONTRACT, READ THROUGH POWERSHELL ─────────────────────────────────────────────────
+//
+// Windows has neither /proc nor ps. What it has on every supported version, with no administrator, is
+// Windows PowerShell and the process list it reads from the system (Win32_Process). One row per process,
+// fields separated by "|", the command line last because it is the only field that can hold a "|".
+//
+// THE START TIME IS PRINTED AS A NUMBER, never as a date: PowerShell writes dates in the machine's own
+// locale, and a parse of that would read one day as another on half the machines it met. `ToFileTimeUtc`
+// is the count of 100-nanosecond ticks since 1601, the same on every machine, and `windowsTicksToMs`
+// turns it into the epoch milliseconds the rest of this file uses.
+//
+// The script holds no double quote, so no rule about quoting an argument can change what PowerShell
+// receives. The output encoding is asked for inside a try: a machine locked to PowerShell's constrained
+// mode refuses that line, and only a command line with non-ASCII characters in it suffers for it.
+export function windowsProcessScript(pid = null) {
+  const only = Number.isInteger(pid) && pid > 0 ? ` -Filter 'ProcessId=${pid}'` : "";
+  return "try { [Console]::OutputEncoding = [Text.Encoding]::UTF8 } catch {}; "
+    + `Get-CimInstance Win32_Process${only} | ForEach-Object { $c = $_.CreationDate; `
+    + "'{0}|{1}|{2}|{3}|{4}' -f $_.ProcessId, $_.ParentProcessId, $(if ($c) { $c.ToFileTimeUtc() } else { '' }), "
+    + "$_.SessionId, ($_.CommandLine -replace '\\s+', ' ') }";
+}
+
+/** Windows file time (100 ns ticks since 1601-01-01 UTC) to epoch milliseconds; NaN for anything else. */
+export function windowsTicksToMs(ticks) {
+  const t = String(ticks ?? "").trim();
+  if (!/^\d{15,19}$/.test(t)) return NaN;
+  return Number((BigInt(t) - 116444736000000000n) / 10000n);
+}
+
+/** The rows `windowsProcessScript` printed: `{pid, ppid, startedAt, session, cmd}`. Unparseable lines are skipped. */
+export function parseWindowsRows(stdout) {
+  const out = [];
+  for (const line of String(stdout ?? "").split(/\r?\n/)) {
+    const m = /^(\d+)\|(\d*)\|(\d*)\|(\d*)\|(.*)$/.exec(line.trim());
+    if (!m) continue;
+    out.push({ pid: Number(m[1]), ppid: m[2] === "" ? null : Number(m[2]), startedAt: windowsTicksToMs(m[3]),
+      session: m[4] === "" ? null : Number(m[4]), uid: null, cmd: m[5].trim() });
+  }
+  return out;
+}
+
+/** Windows: every process, or null when PowerShell could not be run or printed nothing it could parse. */
+function fromWindows(runPowerShell) {
+  const r = runPowerShell(windowsProcessScript());
+  if (!r || r.status !== 0 || typeof r.stdout !== "string") return null;
+  const out = parseWindowsRows(r.stdout);
+  // As for `ps`: this process is in the listing, so an empty parse is an instrument that broke.
+  return out.length ? out : null;
+}
+
+/**
+ * Run one PowerShell script and capture what it prints. `windowsHide` because this is started from the
+ * portal and the worker many times an hour, and a console program started by a process without a
+ * console of its own opens a window.
+ */
+const defaultRunPowerShell = (script) =>
+  spawnSync("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", script],
+    { encoding: "utf8", windowsHide: true, timeout: 30_000, maxBuffer: 16 * 1024 * 1024 });
+
 const defaultRunPs = () =>
   spawnSync("ps", ["-Ao", "pid=,uid=,lstart=,command="], { encoding: "utf8", maxBuffer: 8 * 1024 * 1024 });
 
-export { defaultRunPs };
+export { defaultRunPs, defaultRunPowerShell };

package/shared/reference-guard-classes.mjs

@@ -39,12 +39,21 @@
 // `deploy` IS A SKILL NAME AND IS NOT BANNED, for the same reason. It is an ordinary English word and a
 // paragraph about deploying would be refused line by line.
 //
-// `clawdi` IS NOT BANNED, and this one was measured rather than reasoned. It reads like an internal
-// name and it is the product's own default agent id: `CLEAROTRON_DEFAULT_AGENT=clawdi` is in
-// INSTALL.md, in the configuration reference and in the operations runbook, and it is a path segment in
-// every run directory. 49 lines carry it in that sense and none carries it as a reference to the other
-// product, which is the class that would have been worth refusing. Banning it would refuse the install
-// instructions a stranger reads first.
+// THE PRODUCT'S FORMER DEFAULT AGENT ID IS NOW BANNED, and the reason it was not is worth keeping
+// because it was a good one. It was the id an install ran as: it named a setting in the install
+// instructions, in the configuration reference and in the operations runbook, and it was a path segment
+// in every run directory. 49 lines carried it in that sense. A guard refusing it would have refused the
+// install instructions a stranger reads first, so it was left alone and the reason written down.
+//
+// Ruling 563 (2026-09-27) took every functional use of it out of the product, and the ban is the closing
+// step: without it the id comes back and nothing says so. The class is below, and its pattern is the only
+// place in this tree that spells it — a `pattern:` line is code, and this guard reads comments and
+// markdown, never code, so the class does not refuse its own definition.
+//
+// WHAT THE BAN DOES NOT DISTURB. This check is diff-shaped: what a change ADDS is refused, and what is
+// already here is not its business. Two lines still carry the id on purpose — a record of a measurement
+// taken over archived runs, and a captured error message from a real incident — and neither is refused,
+// because neither is added by anything. That is the mechanism, not an exemption list to maintain.
 
 import { execFileSync } from "node:child_process";
 import { CUT_RECORD_PRESENT, isWithheld } from "./withheld-paths-access.mjs";
@@ -157,6 +166,21 @@ export const CLASSES = [
       + "not. A reader outside this project cannot open the number. Say why the code is as it is; put "
       + "the citation in the commit message or the pull request body.",
   },
+  {
+    // NOT A NAME THIS PROJECT USES FOR HOW IT IS BUILT — it is an identifier the product SHIPPED, which is
+    // why it is banned only now that it ships nowhere. The remedy is the same as the login class's: say
+    // what the thing is for, not what it was called.
+    id: "retired-agent-id",
+    // NO WORD BOUNDARIES, and that is deliberate. `\b` does not match before an underscore, so a
+    // boundaried pattern let every prefixed spelling of the id through — a setting name carrying it as a
+    // prefix read as clean, which is the shape a returning identifier actually takes. The id is a coined
+    // word, so an unanchored match has no innocent population to refuse.
+    pattern: /clawdi/i,
+    why: "the agent id this product used to default to. It was a path segment in every run directory and "
+      + "named in the install instructions until it was taken out of the product; a new line carrying it "
+      + "is either residue or a reference to a different product. Name the setting that holds the agent, "
+      + "or the install's own default, rather than one particular value of it.",
+  },
   {
     id: "login",
     pattern: /\b(?:testuser|azureuser|devuser)[0-9]*\b/i,

package/shared/root-doc-commands.mjs

@@ -39,7 +39,7 @@ export const NPX = /npx clearotron [a-z]/g;
  * fresh `npx`, which resolves whichever channel npm picks at that moment — the stable, for a reader who
  * installed the beta (owner ruling, 2026-09-18).
  */
-export const GLOBAL_INSTALL = /npm install -g clearotron|npx clearotron(?:@[\w.-]+)? install\b/;
+export const GLOBAL_INSTALL = /npm install (?:-g|--global) clearotron|npx clearotron(?:@[\w.-]+)? install\b/;
 /** The paragraph that is ABOUT the shim, where the short form is the point. */
 export const SHIM_PARAGRAPH = /short form|on your `PATH`|stop typing/;
 
@@ -53,6 +53,9 @@ export function commandSites(file, text) {
   const lines = String(text ?? "").split("\n");
   const installedAt = lines.findIndex((l) => GLOBAL_INSTALL.test(l));
   const globalFrom = installedAt === -1 ? Infinity : installedAt + 1;
+  // A sentence can install and then use the command on one line ("`npm install --global clearotron`, then
+  // `clearotron install`"): a bare site on the install's own line counts as after it when it comes later.
+  const installCol = installedAt === -1 ? Infinity : lines[installedAt].search(GLOBAL_INSTALL);
   const para = [];
   let n = 0;
   for (const line of lines) { if (line.trim() === "") n++; para.push(n); }
@@ -60,7 +63,8 @@ export function commandSites(file, text) {
   const bare = [], npx = [];
   lines.forEach((line, i) => {
     if (BARE.test(line)) {
-      bare.push({ file, line: i + 1, text: line.trim(), paragraph: textOf(para[i]), afterGlobalInstall: i + 1 > globalFrom });
+      const afterGlobalInstall = i + 1 > globalFrom || (i === installedAt && line.search(BARE) > installCol);
+      bare.push({ file, line: i + 1, text: line.trim(), paragraph: textOf(para[i]), afterGlobalInstall });
     }
     npx.push(...(line.match(NPX) ?? []).map(() => ({ file, line: i + 1 })));
   });

package/shared/running-start.mjs

@@ -13,9 +13,9 @@
 // record whose process is gone is read as absent, and `status` asks the portal itself before saying the
 // product is up. Three answers, all honest: up; started but not answering; not running.
 
-import { mkdirSync, readdirSync, readFileSync, renameSync, rmSync, rmdirSync, writeFileSync } from "node:fs";
+import { mkdirSync, readdirSync, readFileSync, realpathSync, renameSync, rmSync, rmdirSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
-import { dirname, join } from "node:path";
+import { dirname, isAbsolute, join, relative, sep } from "node:path";
 
 /**
  * Where the records live: one file per serving process, beside the settings and the revocation list.
@@ -34,6 +34,20 @@ export function pidAlive(pid) {
   try { process.kill(pid, 0); return true; } catch (e) { return e?.code === "EPERM"; }
 }
 
+/** `dir` and its parents up to and including `made`, deepest first; [] when `dir` is not inside `made`. */
+export function madeChain(dir, made, { realpath = realpathSync.native } = {}) {
+  if (!made) return [];
+  let steps;
+  try {
+    const r = relative(realpath(made), realpath(dir));
+    if (r.startsWith("..") || isAbsolute(r)) return [];
+    steps = r ? r.split(sep).length : 0;
+  } catch { return []; }
+  const out = [];
+  for (let d = dir, i = 0; i <= steps; i++, d = dirname(d)) out.push(d);
+  return out;
+}
+
 /**
  * Record one serving start. Returns the function that removes the record; calling it twice is harmless,
  * so the caller can hang it on both its own shutdown and the process's `exit`.
@@ -49,16 +63,19 @@ export function recordRunning(rec, { dir = runningDir() } = {}) {
   const tmp = `${file}.tmp`;
   writeFileSync(tmp, `${JSON.stringify(rec, null, 2)}\n`, { mode: 0o600 });
   renameSync(tmp, file);
+  // THE FOLDERS TO TRY, WORKED OUT NOW AND BOUNDED BY WHAT mkdirSync MADE. The walk used to stop when a
+  // parent's spelling equalled `made`'s, and on Windows it never did, so it went on up and removed every
+  // empty folder to the drive's root: seen on a Windows runner, 2026-09-23, where it took the home the
+  // test had made. Both ends are asked of the machine itself, which spells them one way, and a record that
+  // is not inside what was made has nothing of its own to remove.
+  const chain = madeChain(dir, made);
   let gone = false;
   return () => {
     if (gone) return;
     gone = true;
     try { rmSync(file, { force: true }); } catch { /* already gone */ }
-    if (made) {
-      for (let d = dir; ; d = dirname(d)) {
-        try { rmdirSync(d); } catch { break; }   // not empty, or gone: either way, not ours to take
-        if (d === made) break;
-      }
+    for (const d of chain) {
+      try { rmdirSync(d); } catch { break; }   // not empty, or gone: either way, not ours to take
     }
   };
 }

package/shared/scope.mjs

@@ -5,7 +5,7 @@
 // cf-access.mjs is the OUTER transport gate: "is this a cordillera person?" (CF Access JWT, per request).
 // This module is the INNER gate: "WHAT may this principal do, on WHICH run?" Three principal kinds:
 //   ops      — full: every read tool across all runs + the write verbs (start_run/stop_run/feed_context)
-//              + what-if (stdio only). Minted for clawdi/ops, and used unconditionally on the trusted
+//              + what-if (stdio only). Minted for the ops agent, and used unconditionally on the trusted
 //              local stdio surface.
 //   user     — read-only, bound to EXACTLY ONE delivered run; cannot enumerate or read other runs and
 //              cannot call any write/spend tool. This is what a report's "Ask your AI" link mints.
@@ -203,7 +203,7 @@ export const TOOL_SCOPES = {
   run_changes: {}, diff_artifact: {},
   list_runs: { crossRun: true, accountSafe: true, present: "scrub" }, search_runs: { crossRun: true },
   // list_profiles enumerates the firm's customer roster (not run-bound). Mark crossRun so it is allowed to
-  // ops (clawdi/intake) + internal (CF-authed staff) but DENIED to a run-scoped user token (an external
+  // ops (intake) + internal (CF-authed staff) but DENIED to a run-scoped user token (an external
   // report viewer must not enumerate the client list).
   list_profiles: { crossRun: true },
   // plan_run RESOLVES a prospective search and describes it: depth, effective scope, the account's caps.

package/shared/wsl.mjs

@@ -7,7 +7,7 @@
 import { existsSync, readFileSync } from "node:fs";
 
 /**
- * BOTH SIGNALS INJECTABLE, for the reason `platformEngineRefusal` gives: the readers this protects are the
+ * BOTH SIGNALS INJECTABLE, as every platform branch here is: the readers this protects are the
  * ones who cannot run this suite to find out, so a Linux runner has to be able to drive both answers
  * rather than read the source and agree with it.
  *