clearotron 0.4.1-beta.5 → 0.4.1

package/mcp-server/lib/audit-view.mjs

@@ -58,6 +58,7 @@
 // So `scrubBlocks` below keeps the drop, and the raw list a client account reads is the LIVE chain.
 
 import { scrubBody, scrubCards } from "./scrub.mjs";
+import { INTERPRETED_EVENT_KINDS } from "./events.mjs";
 import { accountMayReadArtifact } from "../../shared/scope.mjs";
 import { clientFailureNote } from "../../shared/client-failure-note.mjs";   
 
@@ -279,8 +280,14 @@ export function accountTrace(result) {
 //
 // The entry shape is a UNION over ~15 event kinds and classify() ends in a generic passthrough, so an
 // event nobody has projected yet arrives here with whatever keys it was written with. Hence an allowlist
-// over the union rather than a delete-list: a new event kind is thinned to its decision word until
-// someone widens this deliberately, which is the direction that fails safe.
+// over the union rather than a delete-list.
+//
+// AND THE PASSTHROUGH ROWS DO NOT TRAVEL AT ALL. Thinned to its decision word, a passthrough row still
+// carried the engine's own name for the event as both `kind` and `decision`: on one test run, 133 of the
+// 158 rows a client account read were 73 such names (measured 2026-10-14). The owner's standing rule for
+// engineering text on a client surface is to take it out and write nothing in its place, so a client
+// account keeps only the kinds classify() interprets (INTERPRETED_EVENT_KINDS). `seq` was assigned over
+// every event before this drop, so a poller's cursor never renumbers; the engineering view is unchanged.
 const TIMELINE_FIELDS = ["ts", "seq", "kind", "phase", "stage", "decision", "trigger", "ok", "outputSha",
   "changedFromPrevious", "attempt", "axes", "axis", "escalated", "verdict", "display", "cause",
   "recovered", "count", "uris", "findings", "negatives", "audit", "snapshot", "resume"];
@@ -306,7 +313,7 @@ export function accountTimeline(result, { brandName = "The firm" } = {}) {
   };
   return {
     ...pick(result, ["runId", "state", "tier", "_note"]),
-    timeline: Array.isArray(result.timeline) ? result.timeline.map(entry) : [],
+    timeline: Array.isArray(result.timeline) ? result.timeline.filter((t) => INTERPRETED_EVENT_KINDS.has(t.kind)).map(entry) : [],
     verdictHistory: Array.isArray(result.verdictHistory)
       ? result.verdictHistory.map((v) => pick(v, ["ts", "kind", "verdict", "stage"]))
       : result.verdictHistory ?? null,

package/mcp-server/lib/events.mjs

@@ -157,6 +157,13 @@ function classify(e, st, rat) {
   }
 }
 
+// THE KINDS classify() INTERPRETS — one per `case` above, pinned to them by events.test.mjs. Every other event
+// reaches the timeline through the passthrough, under the engine's own name for it. That is the engineering
+// view's to keep; a client account's timeline keeps these kinds alone (audit-view.mjs accountTimeline).
+export const INTERPRETED_EVENT_KINDS = new Set(["start", "axes", "stage", "skip", "failover", "attempt", "skeptic-escalation",
+  "escalation-skipped", "escalation-noop", "verdict", "verdict-2", "delivered-with-open-questions", "screen-gate-clean",
+  "screen-gate-violation", "audit", "provider-usage", "manual-rerun", "failed"]);
+
 // A SUCCEEDED attempt is not a decision. put one `attempt` row on run.jsonl per model dispatch, and
 // with no kind filter here every stage began emitting BOTH `attempt-succeeded` and `stage-completed` —
 // +61 entries on 269 (+23%) on the 2026-07-29 delivered run, roughly double on a correction-heavy one, on

package/mcp-server/lib/knockout.mjs

@@ -361,9 +361,10 @@ export function knockoutCoverage(run) {
  * enumerated fifteen stages and none of them was a knockout stage — the tool could resolve nothing on this
  * product, including the word "verdict".
  *
- * `knockout-assess` is chunked (`knockout-assess#N`), so a caller may name the bare stage or one chunk.
+ * `knockout-assess` is chunked (`knockout-assess#N`), so a caller may name the bare stage or one chunk. The
+ * reviewing pass that follows it is a stage of its own, and its rewrites reach the record a reader receives.
  */
-export const KNOCKOUT_STAGES = ["knockout-frame", "knockout-sweep", "knockout-register", "knockout-assess"];
+export const KNOCKOUT_STAGES = ["knockout-frame", "knockout-sweep", "knockout-register", "knockout-assess", "knockout-review"];
 
 export function knockoutStageFor(target) {
   const t = String(target ?? "").trim();
@@ -404,7 +405,7 @@ export function traceKnockout(run, target, events = []) {
       events: rows,
       // What the stage wrote, by presence — the honest answer to "did this stage produce anything".
       produced: knockoutArtifacts(run).filter((a) => a.exists && STAGE_OUTPUTS[bare]?.includes(a.name)),
-      note: STAGE_NOTES[bare] ?? null,
+      note: KNOCKOUT_STAGE_NOTES[bare] ?? null,
     };
   }
 
@@ -436,9 +437,10 @@ const STAGE_OUTPUTS = {
   "knockout-assess": ["findings", "assessment"],
 };
 
-const STAGE_NOTES = {
+// A stage's note is read by the connector's model, which answers clients from it. A stage with no note says
+// nothing rather than something untrue: the sweep's note said two research calls per mark, and it makes one.
+export const KNOCKOUT_STAGE_NOTES = {
   "knockout-frame": "Reads the order and writes the plan: which names, which classes, at what depth.",
-  "knockout-sweep": "Two research calls per mark against the marketplace/common-law provider: the broad question, and the kinds of use the frame named for the client's field; the payloads land in research/.",
   "knockout-register": "Fetches and counts register filings for the searched names. Absent on a run with no register component.",
   "knockout-assess": "Rates each mark from its own payload and the fetched filings, and writes knockout-findings.json.",
 };

package/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-artifacts-mcp",
-  "version": "0.4.1-beta.5",
+  "version": "0.4.1",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "MCP server to interrogate clearotron trademark-clearance runs — list/read artifacts, trace the full decision flow, telemetry/cost, coverage, single-run search, and a gated single-step what-if. Imports the clearotron-driver read-only; touches no driver/template/deploy files.",

package/package.json

@@ -2,7 +2,7 @@
   "name": "clearotron",
   "mcpName": "io.github.CordilleraSarl/clearotron",
   "type": "module",
-  "version": "0.4.1-beta.5",
+  "version": "0.4.1",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",

package/portal-ui/package.json

@@ -2,7 +2,7 @@
   "name": "portal-ui",
   "private": true,
   "type": "module",
-  "version": "0.4.1-beta.5",
+  "version": "0.4.1",
   "license": "AGPL-3.0-only",
   "description": "The unified trademark portal UI. One address, one login: who you are decides what you see. Built as a static bundle, served by driver/portal-service.mjs — the browser never reaches profile-service or recipe-service.",
   "engines": {

package/providers/oauth-mcp-bridge/CHANGELOG.md

@@ -1,5 +1,13 @@
 # trademark-oauth-mcp-bridge
 
+## 0.4.1
+
+No changes in this release.
+
+## 0.4.1-beta.6
+
+No changes in this release.
+
 ## 0.4.1-beta.5
 
 No changes in this release.

package/providers/oauth-mcp-bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-oauth-mcp-bridge",
-  "version": "0.4.1-beta.5",
+  "version": "0.4.1",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "OAuth 2.1 MCP stdio bridge used by the engine's case-law gather stage (courtlistener / legaldatahunter).",

package/scripts/ask-ai-render-check.mjs

@@ -202,6 +202,7 @@ const wsUrl = await new Promise((resolve, reject) => {
     () => reject(new Error(`chrome did not report a devtools endpoint within 60s. Its stderr was:\n${devtools || '(nothing)'}`)),
     60000,
   )
+  chrome.stderr.setEncoding("utf8");
   chrome.stderr.on('data', (c) => {
     devtools += c
     const m = devtools.match(/ws:\/\/[^\s]+/)

package/scripts/authority-boundary-probe.mjs

@@ -78,7 +78,9 @@ const program = resolveEngineProgram("anthropic-agent");
 const child = spawn(program.resolved ?? program.bin, [...args, "--include-hook-events"],
   { stdio: ["pipe", "pipe", "pipe"], cwd: runDir, env: spawnEnv() });
 let out = "", err = "";
+child.stdout.setEncoding("utf8");
 child.stdout.on("data", (d) => { out += d; });
+child.stderr.setEncoding("utf8");
 child.stderr.on("data", (d) => { err += d; });
 child.stdin.on("error", () => {});
 child.stdin.write(input); child.stdin.end();

package/scripts/report-header-render-check.mjs

@@ -85,6 +85,7 @@ reapOnExit(chrome)
 const wsUrl = await new Promise((resolve, reject) => {
   let devtools = ''
   const t = setTimeout(() => reject(new Error(`chrome reported no devtools endpoint in 60s:\n${devtools || '(nothing)'}`)), 60000)
+  chrome.stderr.setEncoding("utf8");
   chrome.stderr.on('data', (c) => { devtools += c; const m = devtools.match(/ws:\/\/[^\s]+/); if (m) { clearTimeout(t); resolve(m[0]) } })
 })
 const ws = new WebSocket(wsUrl)

package/scripts/report-offline-render-check.mjs

@@ -81,6 +81,7 @@ reapOnExit(chrome);
 const wsUrl = await new Promise((resolve, reject) => {
   let devtools = "";
   const t = setTimeout(() => reject(new Error(`chrome reported no devtools endpoint in 60s:\n${devtools || "(nothing)"}`)), 60000);
+  chrome.stderr.setEncoding("utf8");
   chrome.stderr.on("data", (c) => { devtools += c; const m = devtools.match(/ws:\/\/[^\s]+/); if (m) { clearTimeout(t); resolve(m[0]); } });
 });
 const ws = new WebSocket(wsUrl);

package/scripts/report-screenshot.mjs

@@ -56,6 +56,7 @@ const chrome = spawn("google-chrome", [
 let stderr = "";
 const wsUrl = await new Promise((res, rej) => {
   const t = setTimeout(() => rej(new Error(`chrome reported no devtools endpoint in 60s. Its stderr:\n${stderr || "(nothing)"}`)), 60000);
+  chrome.stderr.setEncoding("utf8");
   chrome.stderr.on("data", (c) => { stderr += c; const m = stderr.match(/ws:\/\/[^\s]+/); if (m) { clearTimeout(t); res(m[0]); } });
 });
 

package/scripts/report-sections-render-check.mjs

@@ -108,6 +108,7 @@ reapOnExit(chrome)
 const wsUrl = await new Promise((resolve, reject) => {
   let devtools = ''
   const t = setTimeout(() => reject(new Error(`chrome reported no devtools endpoint in 60s:\n${devtools || '(nothing)'}`)), 60000)
+  chrome.stderr.setEncoding("utf8");
   chrome.stderr.on('data', (c) => { devtools += c; const m = devtools.match(/ws:\/\/[^\s]+/); if (m) { clearTimeout(t); resolve(m[0]) } })
 })
 const ws = new WebSocket(wsUrl)

package/scripts/report-theme-render-check.mjs

@@ -116,6 +116,7 @@ reapOnExit(chrome)
 const wsUrl = await new Promise((resolve, reject) => {
   let devtools = ''
   const t = setTimeout(() => reject(new Error(`chrome reported no devtools endpoint in 60s:\n${devtools || '(nothing)'}`)), 60000)
+  chrome.stderr.setEncoding("utf8");
   chrome.stderr.on('data', (c) => { devtools += c; const m = devtools.match(/ws:\/\/[^\s]+/); if (m) { clearTimeout(t); resolve(m[0]) } })
 })
 const ws = new WebSocket(wsUrl)

package/scripts/revisit-render-check.mjs

@@ -210,6 +210,7 @@ const wsUrl = await new Promise((resolve, reject) => {
     () => reject(new Error(`chrome did not report a devtools endpoint within 60s. Its stderr was:\n${devtools || '(nothing)'}`)),
     60000,
   )
+  chrome.stderr.setEncoding("utf8");
   chrome.stderr.on('data', (c) => {
     devtools += c
     const m = devtools.match(/ws:\/\/[^\s]+/)

package/scripts/settings-render-check.mjs

@@ -129,6 +129,7 @@ reapOnExit(chrome)
 let devtools = ''
 const wsUrl = await new Promise((resolve, reject) => {
   const t = setTimeout(() => reject(new Error(`chrome did not report a devtools endpoint within 60s. Its stderr was:\n${devtools || '(nothing)'}`)), 60000)
+  chrome.stderr.setEncoding("utf8");
   chrome.stderr.on('data', (c) => {
     devtools += c
     const m = devtools.match(/ws:\/\/[^\s]+/)

package/scripts/undeclared-key-census.mjs

@@ -26,6 +26,7 @@ const MCP = new URL("../driver/engine/mcp/", import.meta.url).pathname;
 const SERVERS=["recording-server.mjs","coverage-server.mjs","dispositions-server.mjs","declination-server.mjs","unit-note-server.mjs"];
 const ask=(s)=>new Promise((res)=>{const c=spawn(process.execPath,[join(MCP,s)],{stdio:["pipe","pipe","pipe"],env:{...process.env,PERPLEXITY_API_KEY:"x"}});
  let b="",o=null;const d=()=>{try{c.kill("SIGKILL")}catch{};res(o||[])};const t=setTimeout(d,8000);
+ c.stdout.setEncoding("utf8");
  c.stdout.on("data",x=>{b+=x;let n;while((n=b.indexOf("\n"))>=0){const l=b.slice(0,n).trim();b=b.slice(n+1);if(!l)continue;
   try{const m=JSON.parse(l);if(m.id===2){o=m.result?.tools??[];clearTimeout(t);d();}}catch{}}});
  c.on("error",()=>d());

package/scripts/verify-publishable.mjs

@@ -174,7 +174,9 @@ try {
         // this deliberately no longer starts.
         if (/report:\s+\S/.test(out) && /published:/.test(out)) { clearTimeout(t); finish(true); }
       };
+      child.stdout.setEncoding("utf8");
       child.stdout.on("data", read);
+      child.stderr.setEncoding("utf8");
       child.stderr.on("data", read);
       child.on("error", (e) => { clearTimeout(t); finish(false, `demo could not start: ${e.message}`); });
     });

package/shared/names-in-force.mjs

@@ -23,6 +23,7 @@ export const NAMES_IN_FORCE = Object.freeze([
   "CLEAROTRON_AI",
   "CLEAROTRON_AI_BILLING",
   "CLEAROTRON_AI_PATH",
+  "CLEAROTRON_BAND_GROUPS",
   "CLEAROTRON_BAND_RESPONSE_CHARS",
   "CLEAROTRON_BAND_RUN_DIR",
   "CLEAROTRON_BAND_TRUTH_GATE",