@junghanacs/entwurf 0.12.2 → 0.12.4

package/run.sh

@@ -2,10 +2,10 @@
 #
 # Model id convention (see AGENTS.md Hard Rule #1):
 #   - User-facing examples use the qualified form `entwurf/<backend-model>`
-#     (e.g. `entwurf/claude-sonnet-4-6`); the prefix routes to this provider
+#     (e.g. `entwurf/claude-sonnet-5`); the prefix routes to this provider
 #     so `--provider` is redundant and is dropped in docs.
 #   - Smoke helpers that feed `ensureBridgeSession({modelId})` directly (cancel,
-#     model-switch) pass BARE backend ids (`claude-sonnet-4-6`, `gpt-5.4`)
+#     model-switch) pass BARE backend ids (`claude-sonnet-5`, `gpt-5.4`)
 #     because the bridge library contract is bare. Smoke helpers that invoke pi
 #     via the CLI still pin `--provider entwurf` and can accept either
 #     bare or qualified model, but we keep bare here to match the bridge-level
@@ -32,7 +32,7 @@ TARGET_PROJECT_DIR=${2:-$PROJECT_DIR_DEFAULT}
 # and install path against the same scope for traceability.
 PACKAGE_NAME="@junghanacs/entwurf"
 # Runtime provider id — DO NOT change. Embedded in model strings
-# (`entwurf/claude-sonnet-4-6`), settings keys (`entwurfProvider`),
+# (`entwurf/claude-sonnet-5`), settings keys (`entwurfProvider`),
 # log prefixes (`[entwurf:bootstrap]`), and the `--provider entwurf`
 # CLI surface. Renaming this would break every consumer transcript and every
 # saved session anchor.
@@ -908,7 +908,7 @@ smoke_acp_raw_turn_live() {
   # plus captured raw NDJSON bytes. NO provider/overlay/streamSimple/_meta — the
   # raw backend pipe only. Launch source must be the package bin (PATH fallback
   # fails acceptance unless ENTWURF_ACP_RAW_TURN_ALLOW_PATH_FALLBACK=1, debug).
-  # Model override: ENTWURF_ACP_RAW_TURN_MODEL (default claude-sonnet-4-6).
+  # Model override: ENTWURF_ACP_RAW_TURN_MODEL (default claude-sonnet-5).
   #   LIVE=1 ./run.sh smoke-acp-raw-turn-live
   (cd "$REPO_DIR" && node --experimental-strip-types scripts/smoke-acp-raw-turn-live.ts)
 }
@@ -926,7 +926,7 @@ smoke_acp_overlay_live() {
   # meta-store for mailbox absence (flaky — concurrent sessions); the honest
   # claim is overlay-supplies-hooks:{}. Launch must be the package bin (PATH
   # fallback fails acceptance unless ENTWURF_ACP_OVERLAY_ALLOW_PATH_FALLBACK=1).
-  # Model override: ENTWURF_ACP_OVERLAY_MODEL (default claude-sonnet-4-6).
+  # Model override: ENTWURF_ACP_OVERLAY_MODEL (default claude-sonnet-5).
   #   LIVE=1 ./run.sh smoke-acp-overlay-live
   (cd "$REPO_DIR" && node --experimental-strip-types scripts/smoke-acp-overlay-live.ts)
 }
@@ -941,7 +941,7 @@ smoke_acp_memory_containment_live() {
   # can stop a memory write is the lever — not us. Fails loud if engraving.md is
   # empty (carrier OFF = no containment). Launch must be the package bin (PATH
   # fallback fails acceptance unless ENTWURF_ACP_MEMORY_ALLOW_PATH_FALLBACK=1).
-  # Model override: ENTWURF_ACP_MEMORY_MODEL (default claude-sonnet-4-6).
+  # Model override: ENTWURF_ACP_MEMORY_MODEL (default claude-sonnet-5).
   #   LIVE=1 ./run.sh smoke-acp-memory-containment-live
   (cd "$REPO_DIR" && node --experimental-strip-types scripts/smoke-acp-memory-containment-live.ts)
 }
@@ -956,7 +956,7 @@ smoke_acp_provider_live() {
   # assistant reply (live model proof) + the removed S0 stub error never appears
   # (provider path actually opened) + pi exits 0. Tool-free prompt; the
   # event-mapper gate owns the tool→notice contract.
-  # Model override: ENTWURF_ACP_PROVIDER_MODEL (default claude-sonnet-4-6).
+  # Model override: ENTWURF_ACP_PROVIDER_MODEL (default claude-sonnet-5).
   #   LIVE=1 ./run.sh smoke-acp-provider-live
   (cd "$REPO_DIR" && node --experimental-strip-types scripts/smoke-acp-provider-live.ts)
 }
@@ -970,7 +970,7 @@ smoke_acp_session_reuse_live() {
   # was reused and the live ACP session kept turn-1 history (a respawn-per-turn
   # backend would forget it). The one-shot exit0 half is owned by
   # smoke-acp-provider-live.
-  # Model override: ENTWURF_ACP_PROVIDER_MODEL (default claude-sonnet-4-6).
+  # Model override: ENTWURF_ACP_PROVIDER_MODEL (default claude-sonnet-5).
   #   LIVE=1 ./run.sh smoke-acp-session-reuse-live
   (cd "$REPO_DIR" && node --experimental-strip-types scripts/smoke-acp-session-reuse-live.ts)
 }
@@ -982,7 +982,7 @@ smoke_acp_carrier_augment_live() {
   # secret (the augment rode the wire to the model) and the EMPTY default carrier
   # must bill clean (exit 0, no HTTP-400 canary — 핀1 live). Optional tiny carrier
   # check via SMOKE_ACP_CARRIER_PRESENT=1 (non-blocking).
-  # Model override: ENTWURF_ACP_PROVIDER_MODEL (default claude-sonnet-4-6).
+  # Model override: ENTWURF_ACP_PROVIDER_MODEL (default claude-sonnet-5).
   #   LIVE=1 ./run.sh smoke-acp-carrier-augment-live
   (cd "$REPO_DIR" && node --experimental-strip-types scripts/smoke-acp-carrier-augment-live.ts)
 }
@@ -1040,9 +1040,9 @@ smoke_acp_rgg_live() {
   # surface (plugin stays lightweight, no ambient MCP — S2b/S2d boundary). To
   # observe that boundary directly, run the shared runner with SMOKE_RGG_POSITIVE=1
   # and ENTWURF_LIVE_TARGET set (T3 will report N/A, not a real failure).
-  # Target override: ENTWURF_RGG_TARGET (default entwurf/claude-sonnet-4-6).
+  # Target override: ENTWURF_RGG_TARGET (default entwurf/claude-sonnet-5).
   #   ./run.sh smoke-acp-rgg-live
-  local target="${ENTWURF_RGG_TARGET:-entwurf/claude-sonnet-4-6}"
+  local target="${ENTWURF_RGG_TARGET:-entwurf/claude-sonnet-5}"
   (cd "$REPO_DIR" && ENTWURF_LIVE_TARGET="$target" SMOKE_RGG_POSITIVE=0 bash scripts/smoke-resident-garden-guard.sh)
 }
 
@@ -1280,7 +1280,7 @@ assert.equal(peerTui, piAi,
 // pi moves its public surface every minor (the 0.79→0.80 getModels→provider-
 // factory churn is exactly this), so an open `>=` floor is exactly how the next
 // installer re-acquires the drift. Expected
-// shape: `>=<devDep> <0.<minor+1>` (e.g. `>=0.80.2 <0.81`).
+// shape: `>=<devDep> <0.<minor+1>` (e.g. `>=0.80.3 <0.81`).
 const [piMaj, piMin] = piAi.split('.').map(Number);
 assert.equal(piMaj, 0,
   `pi pin major must stay 0 for the next-minor ceiling rule (got ${piAi}); revisit check-dep-versions when pi reaches 1.x`);
@@ -1375,7 +1375,7 @@ check_pi_runtime_version() {
   # never statically import a floor-only symbol here, or this guard would crash
   # before it can fail loud.
   (cd "$REPO_DIR" && node --input-type=module <<'EOF'
-const FLOOR = '0.80.2';
+const FLOOR = '0.80.3';
 const cmp = (a, b) => {
   const pa = a.split('.').map(Number), pb = b.split('.').map(Number);
   for (let i = 0; i < 3; i++) { if ((pa[i] || 0) !== (pb[i] || 0)) return (pa[i] || 0) - (pb[i] || 0); }
@@ -1393,7 +1393,7 @@ if (typeof VERSION !== 'string') {
   process.exit(1);
 }
 if (cmp(VERSION, FLOOR) < 0) {
-  console.error(`[check-pi-runtime-version] FAIL: pi VERSION ${VERSION} < ${FLOOR} — the bridge is built and tested against the 0.80.2 public/runtime surface (trust exports hasTrustRequiringProjectResources + ProjectTrustStore nearest-ancestor get, the 0.80 model-catalog API getModels reached via the deprecated /compat entrypoint — 0.80 moved the standalone root getModels there, and the extension loader resolves only /compat, NOT the providers/* factory subpath — provider registration surface, compaction semantics) that older pi lacks or behaves differently on. Bump @earendil-works/pi-*.`);
+  console.error(`[check-pi-runtime-version] FAIL: pi VERSION ${VERSION} < ${FLOOR} — the bridge is built and tested against the 0.80.3 public/runtime surface (trust exports hasTrustRequiringProjectResources + ProjectTrustStore nearest-ancestor get, the 0.80 model-catalog API getModels reached via the deprecated /compat entrypoint — 0.80 moved the standalone root getModels there, and the extension loader resolves only /compat, NOT the providers/* factory subpath — provider registration surface, compaction semantics) that older pi lacks or behaves differently on. Bump @earendil-works/pi-*.`);
   process.exit(1);
 }
 console.log(`[check-pi-runtime-version] ok — pi VERSION ${VERSION} >= ${FLOOR}`);
@@ -1536,8 +1536,8 @@ check_acp_provider_surface() {
 
 check_acp_sdk_surface() {
   # Deterministic gate for the S2a ACP SDK dependency surface. Pins the three
-  # ACP runtime deps to the 0.11.0 oracle versions (@agentclientprotocol/sdk
-  # 0.22.1 + claude-agent-acp 0.39.0 + @anthropic-ai/sdk 0.100.1), locks the
+  # ACP runtime deps to the current oracle versions (@agentclientprotocol/sdk
+  # 1.1.0 + claude-agent-acp 0.54.1 + @anthropic-ai/sdk 0.100.1), locks the
   # peer-resolution that keeps claude-agent-sdk satisfiable (0.100.1, not the
   # stale 0.91.1), asserts the wire SDK still value-exports the symbols the raw
   # turn needs (silent-rename gate), and forbids any source-level anthropic SDK
@@ -1731,6 +1731,10 @@ check_pack() {
     # this dist JS when present (the .ts source can't strip-types under
     # node_modules). prepack runs on `npm pack --dry-run`, so it is in this gate.
     "mcp/entwurf-bridge/dist/mcp/entwurf-bridge/src/index.js"
+    # 0.12.4 — the doctor's node_modules-safe store-scan artifact. meta-bridge-
+    # doctor.sh runs this prebuilt JS when installed under node_modules (strip-types
+    # refuses the .ts there), same boundary start.sh crosses. build-bridge emits it.
+    "mcp/entwurf-bridge/dist/scripts/meta-bridge-store-doctor.js"
     "scripts/postinstall-chmod.cjs"
     "pi/entwurf-capabilities.json"
     "pi/entwurf-targets.json"
@@ -1880,6 +1884,9 @@ check_pack_install() {
     "mcp/entwurf-bridge/src/index.ts"
     # 0.12.1 C — prepack-built node_modules-safe boot artifact (see check-pack).
     "mcp/entwurf-bridge/dist/mcp/entwurf-bridge/src/index.js"
+    # 0.12.4 — prebuilt node_modules-safe store-scan artifact for the doctor
+    # (see check-pack). The installed-scan smoke below runs exactly this file.
+    "mcp/entwurf-bridge/dist/scripts/meta-bridge-store-doctor.js"
     "scripts/postinstall-chmod.cjs"
     "pi/entwurf-capabilities.json"
     "pi/entwurf-targets.json"
@@ -1946,9 +1953,9 @@ check_pack_install() {
   local install_log
   install_log=$(cd "$tmp" && pnpm add \
     "$tgz_path" \
-    "@earendil-works/pi-ai@0.80.2" \
-    "@earendil-works/pi-coding-agent@0.80.2" \
-    "@earendil-works/pi-tui@0.80.2" \
+    "@earendil-works/pi-ai@0.80.3" \
+    "@earendil-works/pi-coding-agent@0.80.3" \
+    "@earendil-works/pi-tui@0.80.3" \
     "typebox@latest" \
     --ignore-workspace --ignore-scripts 2>&1) || {
     fail "[check-pack-install] pnpm add failed:"
@@ -2000,14 +2007,14 @@ check_pack_install() {
   # opus anchor (CURATED_ANCHOR_MODEL_ID in lib/acp/models.ts — the model whose
   # absence is a hard registry regression). Checking only one would let half the
   # surface drop silently.
-  for anchor in "claude-sonnet-4-6" "claude-opus-4-8"; do
+  for anchor in "claude-sonnet-5" "claude-opus-4-8"; do
     if ! grep -q "$anchor" <<<"$loader_out"; then
       fail "[check-pack-install] pi loader output missing curated Claude model $anchor:"
       echo "$loader_out" | tail -10 | sed 's/^/    /' >&2
       return 1
     fi
   done
-  echo "[check-pack-install] pi loader smoke pass (entwurf registered, claude-sonnet-4-6 + claude-opus-4-8 anchor)"
+  echo "[check-pack-install] pi loader smoke pass (entwurf registered, claude-sonnet-5 + claude-opus-4-8 anchor)"
 
   # npm-managed neutral install regression — the README's PRIMARY install path is
   # now `npm install @junghanacs/entwurf` (NOT `pi install npm:...`). This layout
@@ -2127,6 +2134,52 @@ JS
   fi
   echo "[check-pack-install] installed bridge boot pass (dist boots under node_modules, pi-free: $boot_out)"
 
+  # 0.12.4 — installed STORE-DOCTOR regression. meta-bridge-doctor.sh's full store
+  # scan runs the prebuilt dist JS when it lives under node_modules (strip-types
+  # refuses the .ts there — the same class as the bridge boot above). Before the dist
+  # split the doctor ran the raw .ts and reported a FALSE "corrupt records" FAIL on
+  # EVERY installed host. Prove the shipped dist JS scans a fixture store with PLAIN
+  # node (a strip-types fallback would crash with the exact
+  # ERR_UNSUPPORTED_NODE_MODULES_TYPE_STRIPPING) AND that its rewritten import of the
+  # emitted meta-session.js resolves — a real record exercises parseMetaIdentity.
+  local installed_store_doctor="$npm_pkg/mcp/entwurf-bridge/dist/scripts/meta-bridge-store-doctor.js"
+  if [ ! -f "$installed_store_doctor" ]; then
+    fail "[check-pack-install] installed store-doctor missing prebuilt dist (prepack did not emit it into the tarball?): $installed_store_doctor"
+    return 1
+  fi
+  local sd_fixture="$npm_tmp/store-fixture"
+  mkdir -p "$sd_fixture"
+  # One valid v2 record: filename == "${gardenId}.meta.json" (no drift), unique
+  # nativeSessionId (no dupe). gardenId must match YYYYMMDDTHHMMSS-[0-9a-f]{6}.
+  printf '%s\n' '{"schemaVersion":2,"gardenId":"20990101T000000-abcdef","backend":"claude-code","nativeSessionId":"native-store-doctor-fixture","cwd":"/tmp/entwurf-fixture","model":null,"transcriptPath":null,"parentGardenId":null,"isEntwurf":false,"createdAt":"2099-01-01T00:00:00.000Z","recordUpdatedAt":"2099-01-01T00:00:00.000Z"}' \
+    > "$sd_fixture/20990101T000000-abcdef.meta.json"
+  local sd_out
+  if ! sd_out=$(node "$installed_store_doctor" "$sd_fixture" 2>&1); then
+    fail "[check-pack-install] installed store-doctor FAILED to scan under node_modules (strip-types-under-node_modules regression, or the emitted meta-session import broke):"
+    echo "$sd_out" | tail -15 | sed 's/^/    /' >&2
+    return 1
+  fi
+  if ! grep -q "1 record(s) scanned" <<<"$sd_out"; then
+    fail "[check-pack-install] installed store-doctor scanned but did not report the fixture record (parseMetaIdentity path not exercised?): $sd_out"
+    return 1
+  fi
+  echo "[check-pack-install] installed store-doctor scan pass (dist JS scans under node_modules with plain node: $sd_out)"
+
+  # 0.12.4 — installed DOCTOR DISPATCH lock. The artifact above proves the store-scan
+  # target runs under node_modules; this proves the doctor SCRIPT actually routes to
+  # it (store scan → dist JS) and defers the strip-types-only source-shape gate
+  # (v2-surface) when installed, instead of running raw .ts and false-failing.
+  local installed_doctor="$npm_pkg/scripts/meta-bridge-doctor.sh"
+  if ! grep -q 'dist/scripts/meta-bridge-store-doctor.js' "$installed_doctor"; then
+    fail "[check-pack-install] installed doctor does not dispatch the store scan to the dist JS under node_modules: $installed_doctor"
+    return 1
+  fi
+  if ! grep -q 'shipped surface source present' "$installed_doctor"; then
+    fail "[check-pack-install] installed doctor does not defer the v2-surface source-shape gate on installed hosts: $installed_doctor"
+    return 1
+  fi
+  echo "[check-pack-install] installed doctor dispatch lock pass (store-scan → dist JS, v2-surface deferred)"
+
   ok "[check-pack-install] publish install smoke pass"
   return 0
 }

package/scripts/check-acp-backend-preflight.ts

@@ -21,7 +21,7 @@ import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 import type { Api, AssistantMessageEvent, Context, Model } from "@earendil-works/pi-ai";
 
-const model = { id: "claude-sonnet-4-6" } as unknown as Model<Api>;
+const model = { id: "claude-sonnet-5" } as unknown as Model<Api>;
 
 // Declared tools exclude `read`, but the Claude child always exposes Read →
 // declared != actual → the preflight must reject before spawning.

package/scripts/check-acp-config.ts

@@ -58,7 +58,7 @@ function settings(name: string, block: unknown): string {
 function resolveWith(globalPath: string, projectPath: string, adapter: AcpBackendAdapter = claudeLikeFake) {
 	return resolveProviderConfig({
 		cwd: root,
-		modelId: "claude-sonnet-4-6",
+		modelId: "claude-sonnet-5",
 		adapter,
 		globalSettingsPath: globalPath,
 		projectSettingsPath: projectPath,
@@ -291,11 +291,11 @@ try {
 			weather: { type: "http", url: "https://w.test" },
 			other: { command: "x" },
 		}).servers;
-		const enriched = enrichMcpServersWithEnvelope(servers, { modelId: "claude-sonnet-4-6", piSessionId: "LIVE-1" });
+		const enriched = enrichMcpServersWithEnvelope(servers, { modelId: "claude-sonnet-5", piSessionId: "LIVE-1" });
 		const bridge = enriched.find((s) => s.name === "entwurf-bridge") as Extract<AcpMcpServer, { command: string }>;
 		const env = Object.fromEntries(bridge.env.map((e) => [e.name, e.value]));
 		assert.equal(env.PI_SESSION_ID, "LIVE-1", "live PI_SESSION_ID wins over the stale operator value");
-		assert.equal(env.PI_AGENT_ID, "entwurf/claude-sonnet-4-6", "PI_AGENT_ID injected from the model id");
+		assert.equal(env.PI_AGENT_ID, "entwurf/claude-sonnet-5", "PI_AGENT_ID injected from the model id");
 		assert.equal(env.FOO, "bar", "operator env preserved");
 		const weather = enriched.find((s) => s.name === "weather");
 		assert.ok(!("env" in (weather ?? {})), "http server not enriched (no env carrier)");

package/scripts/check-acp-event-mapper.ts

@@ -21,7 +21,7 @@ import {
 	finalizeAcpStreamState,
 } from "../pi-extensions/lib/acp/event-mapper.ts";
 
-const IDENTITY = { api: "entwurf", provider: "entwurf", model: "claude-sonnet-4-6" };
+const IDENTITY = { api: "entwurf", provider: "entwurf", model: "claude-sonnet-5" };
 
 // Drive a set of synthetic updates through a fresh mapper and collect every
 // emitted event (push is synchronous; the terminal done drains the queue).

package/scripts/check-acp-provider-surface.ts

@@ -117,7 +117,7 @@ try {
 	assert.equal(cap.cfg.apiKey, ENTWURF_ACP_NO_AUTH_SENTINEL, "entry apiKey is not the no-auth sentinel");
 	assert.equal(cap.cfg.api, "entwurf", "entry api field drifted");
 	const capIds = (cap.cfg.models ?? []).map((m) => m.id);
-	for (const want of ["claude-sonnet-4-6", CURATED_ANCHOR_MODEL_ID]) {
+	for (const want of ["claude-sonnet-5", CURATED_ANCHOR_MODEL_ID]) {
 		assert.ok(capIds.includes(want), `entry model surface missing ${want} (got: ${capIds.join(", ") || "none"})`);
 	}
 	assert.equal(typeof cap.cfg.streamSimple, "function", "entry streamSimple must be a function");

package/scripts/check-acp-sdk-surface.ts

@@ -1,16 +1,16 @@
 // Deterministic gate for the S2a ACP SDK dependency surface.
 //
-// Pins the ACP runtime deps to the 0.11.0 behavior-oracle versions and locks
+// Pins the ACP runtime deps to the current behavior-oracle versions and locks
 // the peer-resolution that makes the Claude ACP adapter satisfiable:
 //
-//   @agentclientprotocol/sdk              0.29.0   wire SDK (acp-bridge import source)
-//   @agentclientprotocol/claude-agent-acp 0.50.0   Claude adapter (spawn binary)
+//   @agentclientprotocol/sdk              1.1.0    wire SDK (acp-bridge import source)
+//   @agentclientprotocol/claude-agent-acp 0.54.1   Claude adapter (spawn binary)
 //   @anthropic-ai/sdk                     0.100.1  peer-resolution pin ONLY (see below)
 //
 // The anthropic SDK is NOT an API client / auth surface here. It is a direct
-// dep solely to satisfy @anthropic-ai/claude-agent-sdk@0.3.186's peer floor
+// dep solely to satisfy @anthropic-ai/claude-agent-sdk@0.3.197's peer floor
 // (>=0.93.0); drop it and the tree resolves a stale 0.91.1 so the peer goes
-// unmet — a failure that would only surface at the first raw turn. 0.11.0's
+// unmet — a failure that would only surface at the first raw turn. The
 // lockfile proves the same shape. Source-level import / API-client
 // instantiation / credential use stays forbidden — asserted in layer (4).
 // (GPT hard constraint 2, revised 2026-06-18: direct dep allowed ONLY as an
@@ -42,15 +42,15 @@ const read = (p: string): string => readFileSync(resolve(repoRoot, p), "utf8");
 const pkg = JSON.parse(read("package.json")) as { dependencies?: Record<string, string> };
 const deps = pkg.dependencies ?? {};
 const PINS: Record<string, string> = {
-	"@agentclientprotocol/sdk": "0.29.0",
-	"@agentclientprotocol/claude-agent-acp": "0.50.0",
+	"@agentclientprotocol/sdk": "1.1.0",
+	"@agentclientprotocol/claude-agent-acp": "0.54.1",
 	[ANTHROPIC_SDK]: "0.100.1",
 };
 for (const [name, ver] of Object.entries(PINS)) {
 	assert.equal(
 		deps[name],
 		ver,
-		`package.json dependencies["${name}"] must be exact "${ver}" (got "${deps[name]}") — S2a pins the 0.11.0 oracle versions`,
+		`package.json dependencies["${name}"] must be exact "${ver}" (got "${deps[name]}") — S2a pins the current oracle versions`,
 	);
 }
 
@@ -63,13 +63,13 @@ for (const [name, ver] of Object.entries(PINS)) {
 const lock = read("pnpm-lock.yaml");
 assert.match(
 	lock,
-	/@agentclientprotocol\/claude-agent-acp@0\.50\.0\(@anthropic-ai\/sdk@0\.100\.1/,
-	"pnpm-lock: claude-agent-acp@0.50.0 must peer-resolve @anthropic-ai/sdk@0.100.1 (peer-pin), not the stale 0.91.1",
+	/@agentclientprotocol\/claude-agent-acp@0\.54\.1\(@anthropic-ai\/sdk@0\.100\.1/,
+	"pnpm-lock: claude-agent-acp@0.54.1 must peer-resolve @anthropic-ai/sdk@0.100.1 (peer-pin), not the stale 0.91.1",
 );
 assert.match(
 	lock,
-	/@anthropic-ai\/claude-agent-sdk@0\.3\.186\(@anthropic-ai\/sdk@0\.100\.1/,
-	"pnpm-lock: claude-agent-sdk@0.3.186 must peer-resolve @anthropic-ai/sdk@0.100.1 — else its >=0.93.0 peer floor is unmet",
+	/@anthropic-ai\/claude-agent-sdk@0\.3\.197\(@anthropic-ai\/sdk@0\.100\.1/,
+	"pnpm-lock: claude-agent-sdk@0.3.197 must peer-resolve @anthropic-ai/sdk@0.100.1 — else its >=0.93.0 peer floor is unmet",
 );
 
 // ---------------------------------------------------------------------------
@@ -108,8 +108,8 @@ const casEntry = adapterRequire.resolve("@anthropic-ai/claude-agent-sdk");
 const casInfo = pkgInfoFromEntry(casEntry);
 assert.equal(
 	casInfo.version,
-	"0.3.186",
-	`@anthropic-ai/claude-agent-sdk must runtime-resolve to 0.3.186 from the adapter context (got ${casInfo.version})`,
+	"0.3.197",
+	`@anthropic-ai/claude-agent-sdk must runtime-resolve to 0.3.197 from the adapter context (got ${casInfo.version})`,
 );
 const casRequire = createRequire(resolve(casInfo.dir, "package.json"));
 const sdkEntry = casRequire.resolve(ANTHROPIC_SDK);
@@ -121,19 +121,19 @@ assert.equal(
 );
 
 // ---------------------------------------------------------------------------
-// (2c) adapter-context wire-SDK + MCP-SDK runtime resolve — the 0.50 bump's real
-//      fault surface. Lock text (layer 2) freezes the publish floor; these probe
+// (2c) adapter-context wire-SDK + MCP-SDK runtime resolve — the ACP dep bump's
+//      real fault surface. Lock text (layer 2) freezes the publish floor; these probe
 //      the LIVE module graph the adapter actually traverses: the adapter must SEE
-//      the same wire SDK the backend imports at root (0.29.0), and claude-agent-sdk
+//      the same wire SDK the backend imports at root (1.1.0), and claude-agent-sdk
 //      must SEE its declared MCP peer (1.29.x). Cheap edges, both newly relevant
-//      after the 0.39→0.50 / 0.22→0.29 bump.
+//      after the 0.50→0.54 / 0.29→1.1 bump.
 // ---------------------------------------------------------------------------
 const wireEntry = adapterRequire.resolve("@agentclientprotocol/sdk");
 const wireInfo = pkgInfoFromEntry(wireEntry);
 assert.equal(
 	wireInfo.version,
-	"0.29.0",
-	`@agentclientprotocol/sdk must runtime-resolve to 0.29.0 from the adapter context (got ${wireInfo.version}) — the adapter and the backend must share one wire SDK`,
+	"1.1.0",
+	`@agentclientprotocol/sdk must runtime-resolve to 1.1.0 from the adapter context (got ${wireInfo.version}) — the adapter and the backend must share one wire SDK`,
 );
 // @modelcontextprotocol/sdk gates its bare specifier behind "exports", so a
 // require.resolve of the package ROOT throws (no resolvable entry) — read the
@@ -143,12 +143,12 @@ assert.equal(
 const mcpPkg = JSON.parse(read("node_modules/@modelcontextprotocol/sdk/package.json")) as { version?: string };
 assert.ok(
 	typeof mcpPkg.version === "string" && mcpPkg.version.startsWith("1.29."),
-	`@modelcontextprotocol/sdk must be 1.29.x (got ${mcpPkg.version}) — claude-agent-sdk 0.3.186 declares a ^1.29.0 peer`,
+	`@modelcontextprotocol/sdk must be 1.29.x (got ${mcpPkg.version}) — claude-agent-sdk 0.3.197 declares a ^1.29.0 peer`,
 );
 
 // ---------------------------------------------------------------------------
 // (3) @agentclientprotocol/sdk value-export surface (silent-rename gate)
-//     The 0.11.0 acp-bridge imports these from the wire SDK; a silent upstream
+//     The ACP bridge imports these from the wire SDK; a silent upstream
 //     rename would not fail typecheck (type-only erasure) but would break the
 //     raw turn. Assert the *value* exports exist at runtime.
 // ---------------------------------------------------------------------------

package/scripts/check-acp-session-reuse.ts

@@ -32,7 +32,7 @@ import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 import type { Api, AssistantMessageEvent, Context, Message, Model } from "@earendil-works/pi-ai";
 
-const sonnet = { id: "claude-sonnet-4-6" } as unknown as Model<Api>;
+const sonnet = { id: "claude-sonnet-5" } as unknown as Model<Api>;
 const opus = { id: "claude-opus-4-8" } as unknown as Model<Api>;
 
 type Stream = AsyncIterable<AssistantMessageEvent> & {
@@ -488,7 +488,7 @@ try {
 		);
 		const d1 = deltaText(t1);
 		const iPrep = d1.indexOf("[acp: preparing claude session]");
-		const iReady = d1.indexOf("[acp: session ready model=claude-sonnet-4-6]");
+		const iReady = d1.indexOf("[acp: session ready model=claude-sonnet-5]");
 		const iSent = d1.indexOf("[acp: sending prompt]");
 		assert.ok(
 			iPrep >= 0 && iReady > iPrep && iSent > iReady,
@@ -517,7 +517,7 @@ try {
 			messages: [
 				{ role: "user", content: "real user line", timestamp: 0 },
 				mkAssistant([
-					{ type: "text", text: "\n[acp: session ready model=claude-sonnet-4-6]\n", textSignature: MARKER },
+					{ type: "text", text: "\n[acp: session ready model=claude-sonnet-5]\n", textSignature: MARKER },
 					{ type: "text", text: "real assistant line" },
 				]),
 			],

package/scripts/check-acp-session-store.ts

@@ -43,8 +43,8 @@ import {
 
 const baseInput = (): BridgeConfigInput => ({
 	backend: "claude",
-	modelId: "claude-sonnet-4-6",
-	nativeModelId: "claude-sonnet-4-6",
+	modelId: "claude-sonnet-5",
+	nativeModelId: "claude-sonnet-5",
 	appendSystemPrompt: "",
 	mcpServersHash: "deadbeef",
 	settingSources: [],
@@ -61,7 +61,7 @@ const baseInput = (): BridgeConfigInput => ({
 {
 	const sig0 = bridgeConfigSignature(baseInput());
 	assert.ok(isSha256Hex(sig0), "config signature is a sha256 digest (no raw carrier text on disk)");
-	assert.ok(!sig0.includes("claude-sonnet-4-6"), "config signature is a digest — never embeds the raw modelId/carrier");
+	assert.ok(!sig0.includes("claude-sonnet-5"), "config signature is a digest — never embeds the raw modelId/carrier");
 	assert.equal(sig0, bridgeConfigSignature(baseInput()), "signature is deterministic");
 	// Array copies do not affect equality (same content).
 	assert.equal(bridgeConfigSignature({ ...baseInput(), settingSources: [] }), sig0, "empty settingSources stable");
@@ -178,7 +178,7 @@ const baseInput = (): BridgeConfigInput => ({
 
 	const facts = (over: Partial<SessionCompatFacts> = {}): SessionCompatFacts => ({
 		cwd: "/w",
-		modelId: "claude-sonnet-4-6",
+		modelId: "claude-sonnet-5",
 		bridgeConfigSignature: bridgeConfigSignature(baseInput()),
 		contextMessageSignatures: ["user:text:a"],
 		...over,
@@ -201,7 +201,7 @@ const baseInput = (): BridgeConfigInput => ({
 	const sig = bridgeConfigSignature(baseInput());
 	const compatFacts: SessionCompatFacts = {
 		cwd: "/w",
-		modelId: "claude-sonnet-4-6",
+		modelId: "claude-sonnet-5",
 		bridgeConfigSignature: sig,
 		contextMessageSignatures: ["user:text:a"],
 	};
@@ -305,7 +305,7 @@ const baseInput = (): BridgeConfigInput => ({
 {
 	const facts: SessionCompatFacts = {
 		cwd: "/w",
-		modelId: "claude-sonnet-4-6",
+		modelId: "claude-sonnet-5",
 		bridgeConfigSignature: bridgeConfigSignature(baseInput()),
 		contextMessageSignatures: ["user:text:a"],
 	};

package/scripts/check-acp-tool-surface.ts

@@ -90,7 +90,7 @@ assert.ok(nativeThrew, "non-claude backend exposing write natively must throw wh
 // ---------------------------------------------------------------------------
 
 const baseParams = {
-	modelId: "claude-sonnet-4-6",
+	modelId: "claude-sonnet-5",
 	tools: DEFAULT_CLAUDE_TOOLS,
 	permissionAllow: DEFAULT_CLAUDE_PERMISSION_ALLOW,
 	disallowedTools: DEFAULT_CLAUDE_DISALLOWED_TOOLS,
@@ -101,7 +101,7 @@ const baseParams = {
 
 const meta = buildClaudeSessionMeta(baseParams);
 const opts = (meta.claudeCode as { options: Record<string, unknown> }).options;
-assert.equal(opts.model, "claude-sonnet-4-6", "model must propagate");
+assert.equal(opts.model, "claude-sonnet-5", "model must propagate");
 assert.deepEqual(opts.tools, [...DEFAULT_CLAUDE_TOOLS], "tools must propagate (copied)");
 assert.deepEqual(
 	(opts.settings as { permissions: { allow: string[] } }).permissions.allow,

package/scripts/check-entwurf-session-identity.ts

@@ -132,7 +132,7 @@ try {
 		{ p: "entwurf", m: "claude-opus-4-8", title: "Review substrate smoke", tags: ["entwurf", "review"] },
 		{ p: "openai-codex", m: "gpt-5.5", title: "async resume check", tags: ["entwurf", "smoke"] },
 		{ p: "entwurf", m: "gemini-3.1-pro-preview", title: "vision team", tags: ["entwurf"] },
-		{ p: "entwurf", m: "claude-sonnet-4-6", title: "manual session", tags: [] as string[] },
+		{ p: "entwurf", m: "claude-sonnet-5", title: "manual session", tags: [] as string[] },
 	];
 	for (const c of cases) {
 		const sid = generateSessionId(new Date(2026, 5, 3, 19, 12, 45));
@@ -252,7 +252,7 @@ try {
 		tags: ["entwurf"],
 	});
 	eq(parseSessionName(goodName)?.model, recorded, "name model mirrors recorded model");
-	const driftName = "20260603T191245-deadbe==entwurf/claude-sonnet-4-6--x__entwurf";
+	const driftName = "20260603T191245-deadbe==entwurf/claude-sonnet-5--x__entwurf";
 	ok(parseSessionName(driftName)?.model !== recorded, "model drift is detectable for fail-fast");
 
 	// ---- T-collision: header scan is authority; spawn pre-check ----
@@ -440,12 +440,12 @@ try {
 		bigFile,
 		`${JSON.stringify({ type: "session", id: "20260603T210000-bbbbbb", cwd: "/b" })}\n` +
 			msg({ content: bigBody, model: "m-big", provider: "p-big", usage: { cost: { total: 1 } } }) +
-			msg({ content: "final", model: "claude-sonnet-4-6", provider: "entwurf", usage: { cost: { total: 0.5 } } }),
+			msg({ content: "final", model: "claude-sonnet-5", provider: "entwurf", usage: { cost: { total: 0.5 } } }),
 	);
 	const a2 = analyzeSessionFileLike(bigFile);
 	eq(a2.turns, 2, "analyze(big): turns correct across chunk boundaries");
 	eq(a2.lastAssistantText, "final", "analyze(big): trailing turn intact after multi-chunk line");
-	eq(a2.lastModel, "claude-sonnet-4-6", "analyze(big): trailing model intact");
+	eq(a2.lastModel, "claude-sonnet-5", "analyze(big): trailing model intact");
 	eq(Math.round(a2.cost * 100) / 100, 1.5, "analyze(big): cost summed across large line");
 
 	// ---- T-identity: resume identity authority = FIRST model_change ----
@@ -513,21 +513,21 @@ try {
 	const cleanName = buildSessionName({
 		sessionId: idE,
 		provider: "entwurf",
-		model: "claude-sonnet-4-6",
+		model: "claude-sonnet-5",
 		rawTitle: "clean resume",
 		tags: ["entwurf", "async"],
 	});
 	fs.writeFileSync(
 		fileE,
 		sessionLine(idE, "/identity/e") +
-			mc("entwurf", "claude-sonnet-4-6") +
+			mc("entwurf", "claude-sonnet-5") +
 			infoLine(cleanName) +
-			msg({ content: "ok", model: "claude-sonnet-4-6", provider: "entwurf" }),
+			msg({ content: "ok", model: "claude-sonnet-5", provider: "entwurf" }),
 	);
 	noThrow(() => readSessionIdentity(fileE), "identity: clean session does not throw");
 	const recE = readSessionIdentity(fileE);
 	eq(recE?.provider, "entwurf", "identity(clean): provider");
-	eq(recE?.modelId, "claude-sonnet-4-6", "identity(clean): modelId mirrors name");
+	eq(recE?.modelId, "claude-sonnet-5", "identity(clean): modelId mirrors name");
 
 	// 6. no model_change → null (caller refuses with its own no-recorded-model result).
 	const idF = "20260603T220000-6666ff";
@@ -583,7 +583,7 @@ try {
 	);
 	eq(
 		readSessionIdentity(fileE, { requireEntwurf: true })?.modelId,
-		"claude-sonnet-4-6",
+		"claude-sonnet-5",
 		"requireEntwurf: accepted Entwurf session returns first-model_change identity",
 	);
 

package/scripts/check-model-lock.ts

@@ -210,7 +210,7 @@ async function makeHarness(opts: MakeHarnessOpts = {}): Promise<Harness> {
 // Test models.
 const NATIVE_A: ModelLike = { provider: "openai-codex", id: "gpt-5.4" };
 const NATIVE_B: ModelLike = { provider: "openai-codex", id: "gpt-5.5" };
-const PSA_SONNET: ModelLike = { provider: "entwurf", id: "claude-sonnet-4-6" };
+const PSA_SONNET: ModelLike = { provider: "entwurf", id: "claude-sonnet-5" };
 const PSA_OPUS: ModelLike = { provider: "entwurf", id: "claude-opus-4-8" };
 
 let passed = 0;
@@ -250,7 +250,7 @@ await run("2. native → entwurf: revert + warning notify", async () => {
 	assert.equal(h.notifyCalls.length, 1);
 	assert.equal(h.notifyCalls[0].level, "warning");
 	assert.match(h.notifyCalls[0].message, /locked to openai-codex\/gpt-5\.4/);
-	assert.match(h.notifyCalls[0].message, /entwurf\/claude-sonnet-4-6/);
+	assert.match(h.notifyCalls[0].message, /entwurf\/claude-sonnet-5/);
 });
 
 await run("3. entwurf → native: revert + warning notify", async () => {

package/scripts/check-package-source-routing.ts

@@ -74,7 +74,7 @@ function rmInstall(...segs: string[]): void {
 	fs.rmSync(path.join(tmpAgent, ...segs), { recursive: true, force: true });
 }
 
-const ACP: ResolvedTarget = { provider: "entwurf", model: "claude-sonnet-4-6", explicitOnly: false };
+const ACP: ResolvedTarget = { provider: "entwurf", model: "claude-sonnet-5", explicitOnly: false };
 const eArg = (r: { args: string[] }): string | undefined => {
 	const i = r.args.indexOf("-e");
 	return i >= 0 ? r.args[i + 1] : undefined;
@@ -211,7 +211,7 @@ check("project-scope source (unseen in user settings) fails fast on remote", ()
 //     (resume callers fail-fast; no -e injected).
 check("resume recorded entwurf + remote + no source → unresolvedAcpIntent", () => {
 	setSource(null);
-	const r = getEntwurfExplicitExtensions("claude-sonnet-4-6", true, "entwurf");
+	const r = getEntwurfExplicitExtensions("claude-sonnet-5", true, "entwurf");
 	assert.equal(r.unresolvedAcpIntent, true);
 	assert.equal(eArg(r), undefined);
 	assert.ok(r.warnings.length > 0, "should warn about the unresolved bridge");
@@ -220,7 +220,7 @@ check("resume recorded entwurf + remote + no source → unresolvedAcpIntent", ()
 // 13. recorded provider=entwurf + LOCAL → self-root resolves, no fail-fast.
 check("resume recorded entwurf + local resolves via self-root", () => {
 	setSource(null);
-	const r = getEntwurfExplicitExtensions("claude-sonnet-4-6", false, "entwurf");
+	const r = getEntwurfExplicitExtensions("claude-sonnet-5", false, "entwurf");
 	assert.ok(!r.unresolvedAcpIntent, "local self-root should resolve");
 	assert.equal(eArg(r), REPO_ROOT);
 	assert.equal(r.provider, "entwurf");
@@ -242,7 +242,7 @@ check("resume Codex-via-ACP opt-in + remote + no source → unresolvedAcpIntent"
 //     fail-fast — because the legacy pi-claude-code-use bridge may exist.
 check("resume Claude-only heuristic + remote + no source stays warning-only", () => {
 	setSource(null);
-	const r = getEntwurfExplicitExtensions("claude-sonnet-4-6", true, undefined);
+	const r = getEntwurfExplicitExtensions("claude-sonnet-5", true, undefined);
 	assert.ok(!r.unresolvedAcpIntent, "Claude heuristic must not fail-fast");
 	assert.ok(r.warnings.length > 0, "should warn");
 	assert.equal(eArg(r), undefined);