@junghanacs/entwurf 0.12.9 → 0.13.0

package/scripts/mutants/acp-augment.json

@@ -0,0 +1,30 @@
+{
+	"schemaVersion": 1,
+	"lane": "acp-augment",
+	"mutants": [
+		{
+			"claim": "AUGMENT-BUDGET-FITS",
+			"title": "shrinking the augment cap re-opens the tail-cut that hid AGENTS rules + cwd from ACP siblings",
+			"subject": "pi-extensions/lib/acp/augment.ts",
+			"find": ["const MAX_AUGMENT_BYTES = 50 * 1024;"],
+			"replace": ["const MAX_AUGMENT_BYTES = 20 * 1024;"],
+			"gate": ["bash", "run.sh", "check-acp-carrier-augment"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:AUGMENT-BUDGET-FITS]",
+			"signatureSource": "scripts/check-acp-carrier-augment.ts"
+		},
+		{
+			"claim": "AUGMENT-TRUNC-MARKER",
+			"title": "silent truncation: dropping the honest marker leaves a cut augment with no trace",
+			"subject": "pi-extensions/lib/acp/augment.ts",
+			"find": [
+				"\tconst marker = `\\n\\n[entwurf: context augment truncated to ${MAX_AUGMENT_BYTES} bytes; read AGENTS.md files directly if more detail is needed.]`;"
+			],
+			"replace": ["\tconst marker = \"\";"],
+			"gate": ["bash", "run.sh", "check-acp-carrier-augment"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:AUGMENT-TRUNC-MARKER]",
+			"signatureSource": "scripts/check-acp-carrier-augment.ts"
+		}
+	]
+}

package/scripts/mutants/acp-cortex.json

@@ -0,0 +1,196 @@
+{
+	"schemaVersion": 1,
+	"lane": "acp-cortex",
+	"mutants": [
+		{
+			"claim": "CORTEX-CURATED-FOUR-ROWS",
+			"title": "dropping a curated row silently shrinks the GLG-decided 4-row cortex surface",
+			"subject": "pi-extensions/lib/acp/models.ts",
+			"find": [
+				"export const SUPPORTED_CORTEX_MODEL_IDS = [",
+				"\t\"cortex-auto\",",
+				"\t\"cortex-claude-opus-5\",",
+				"\t\"cortex-claude-sonnet-5\",",
+				"\t\"cortex-openai-gpt-5.4\",",
+				"] as const;"
+			],
+			"replace": [
+				"export const SUPPORTED_CORTEX_MODEL_IDS = [",
+				"\t\"cortex-auto\",",
+				"\t\"cortex-claude-sonnet-5\",",
+				"\t\"cortex-openai-gpt-5.4\",",
+				"] as const;"
+			],
+			"gate": ["bash", "run.sh", "check-acp-cortex"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CORTEX-CURATED-FOUR-ROWS]",
+			"signatureSource": "scripts/check-acp-cortex.ts"
+		},
+		{
+			"claim": "CORTEX-AUTH-NARROW-CREDENTIAL-CACHE",
+			"title": "widening the auth passthrough to the whole cortex/cache leaks operator tool_outputs/tip_history into the child",
+			"subject": "pi-extensions/lib/acp/overlay.ts",
+			"find": [
+				"\tcortexLinkIfExists(",
+				"\t\tjoin(realSnowflake, \"cortex\", \"cache\", \"credential_cache\"),",
+				"\t\tjoin(cortexDir, \"cache\", \"credential_cache\"),",
+				"\t);"
+			],
+			"replace": [
+				"\trmSync(join(cortexDir, \"cache\"), { recursive: true, force: true });",
+				"\tcortexLinkIfExists(join(realSnowflake, \"cortex\", \"cache\"), join(cortexDir, \"cache\"));"
+			],
+			"gate": ["bash", "run.sh", "check-acp-cortex"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CORTEX-AUTH-NARROW-CREDENTIAL-CACHE]",
+			"signatureSource": "scripts/check-acp-cortex.ts"
+		},
+		{
+			"claim": "CORTEX-AUTOUPDATE-OFF",
+			"title": "flipping autoUpdate back on lets the cortex runtime replace itself on launch mid-rail (D4)",
+			"subject": "pi-extensions/lib/acp/overlay.ts",
+			"find": ["\treturn `${JSON.stringify({ autoUpdate: false }, null, \"\\t\")}\\n`;"],
+			"replace": ["\treturn `${JSON.stringify({ autoUpdate: true }, null, \"\\t\")}\\n`;"],
+			"gate": ["bash", "run.sh", "check-acp-cortex"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CORTEX-AUTOUPDATE-OFF]",
+			"signatureSource": "scripts/check-acp-cortex.ts"
+		},
+		{
+			"claim": "CORTEX-BRIDGE-DUAL-HOME",
+			"title": "dropping the bridge-only real-HOME restore leaves the garden store cut off — tools reach the model but see an empty garden (D10)",
+			"subject": "pi-extensions/lib/acp/overlay.ts",
+			"find": ["\t\tif (stdio.name === CORTEX_DUAL_HOME_BRIDGE_SERVER) env.HOME = realHome;"],
+			"replace": ["\t\tvoid realHome;"],
+			"gate": ["bash", "run.sh", "check-acp-cortex"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CORTEX-BRIDGE-DUAL-HOME]",
+			"signatureSource": "scripts/check-acp-cortex.ts"
+		},
+		{
+			"claim": "CORTEX-MCP-NON-STDIO-FAILLOUD",
+			"title": "silently dropping a non-stdio server advertises a config the session does not have (D9 fail-loud)",
+			"subject": "pi-extensions/lib/acp/overlay.ts",
+			"find": [
+				"\t\tif (\"type\" in server && (server.type === \"http\" || server.type === \"sse\")) {",
+				"\t\t\tthrow new Error(",
+				"\t\t\t\t`entwurf: cortex mcp.json projection cannot represent ${server.type} server ` +",
+				"\t\t\t\t\t`${JSON.stringify(server.name)} — only stdio entries are measured through ` +",
+				"\t\t\t\t\t`$SNOWFLAKE_HOME/cortex/mcp.json (CP0 D9). Remove it from entwurfProvider.mcpServers ` +",
+				"\t\t\t\t\t`for cortex models or front it with a stdio bridge.`,",
+				"\t\t\t);",
+				"\t\t}"
+			],
+			"replace": [
+				"\t\tif (\"type\" in server && (server.type === \"http\" || server.type === \"sse\")) {",
+				"\t\t\tcontinue;",
+				"\t\t}"
+			],
+			"gate": ["bash", "run.sh", "check-acp-cortex"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CORTEX-MCP-NON-STDIO-FAILLOUD]",
+			"signatureSource": "scripts/check-acp-cortex.ts"
+		},
+		{
+			"claim": "CORTEX-OVERLAY-SESSION-SCOPED",
+			"title": "a static shared overlay dir lets two residents overwrite one mcp.json/envelope",
+			"subject": "pi-extensions/lib/acp/overlay.ts",
+			"find": ["\tconst scopeDir = join(overlaysRoot, cortexOverlayScopeId(params.scopeKey));"],
+			"replace": ["\tconst scopeDir = join(overlaysRoot, \"shared\");"],
+			"gate": ["bash", "run.sh", "check-acp-cortex"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CORTEX-OVERLAY-SESSION-SCOPED]",
+			"signatureSource": "scripts/check-acp-cortex.ts"
+		},
+		{
+			"claim": "CORTEX-HOME-PRESENCE-REFUSED",
+			"title": "a truthy check instead of presence lets an empty-string CORTEX_HOME slip past the refusal (D3 E2b nuance)",
+			"subject": "pi-extensions/lib/acp/backend-adapter.ts",
+			"find": ["\t\tif (\"CORTEX_HOME\" in process.env) {"],
+			"replace": ["\t\tif (process.env.CORTEX_HOME) {"],
+			"gate": ["bash", "run.sh", "check-acp-cortex"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CORTEX-HOME-PRESENCE-REFUSED]",
+			"signatureSource": "scripts/check-acp-cortex.ts"
+		},
+		{
+			"claim": "CORTEX-LAUNCH-NO-MODEL-PIN",
+			"title": "re-introducing the launch -m pin creates a second model authority that drifts from per-turn set-model",
+			"subject": "pi-extensions/lib/acp/backend-adapter.ts",
+			"find": [
+				"\tresolveLaunch({ config }) {",
+				"\t\tconst settings = config.adapterSettings as CortexAdapterSettings | undefined;",
+				"\t\tconst connection = settings?.cortexConnection?.trim() || undefined;",
+				"\t\tconst selectionArgs: string[] = [];"
+			],
+			"replace": [
+				"\tresolveLaunch({ config, nativeModelId }) {",
+				"\t\tconst settings = config.adapterSettings as CortexAdapterSettings | undefined;",
+				"\t\tconst connection = settings?.cortexConnection?.trim() || undefined;",
+				"\t\tconst selectionArgs: string[] = [\"-m\", nativeModelId];"
+			],
+			"gate": ["bash", "run.sh", "check-acp-cortex"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CORTEX-LAUNCH-NO-MODEL-PIN]",
+			"signatureSource": "scripts/check-acp-cortex.ts"
+		},
+		{
+			"claim": "CORTEX-ENFORCE-SET-MODEL",
+			"title": "enforcing a constant instead of the native id silently answers with the wrong model (CP0-M)",
+			"subject": "pi-extensions/lib/acp/backend-adapter.ts",
+			"find": [
+				"\t\tawait setConfig.call(connection, { sessionId: acpSessionId, configId: \"model\", value: nativeModelId });",
+				"\t},",
+				"",
+				"\t// A connection change must invalidate a reused session (§4/§7). Flat,"
+			],
+			"replace": [
+				"\t\tawait setConfig.call(connection, { sessionId: acpSessionId, configId: \"model\", value: \"auto\" });",
+				"\t},",
+				"",
+				"\t// A connection change must invalidate a reused session (§4/§7). Flat,"
+			],
+			"gate": ["bash", "run.sh", "check-acp-cortex"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CORTEX-ENFORCE-SET-MODEL]",
+			"signatureSource": "scripts/check-acp-cortex.ts"
+		},
+		{
+			"claim": "CORTEX-OVERLAY-KEY-IS-SESSION-KEY",
+			"title": "re-deriving the overlay scope from ambient env drops opts.sessionId — two same-process/cwd sessions alias one overlay/mcp.json",
+			"subject": "pi-extensions/lib/acp/backend-adapter.ts",
+			"find": ["\t\tconst overlay = ensureCortexDualHomeOverlay({", "\t\t\tscopeKey: sessionKey,"],
+			"replace": ["\t\tconst overlay = ensureCortexDualHomeOverlay({", "\t\t\tscopeKey: piSessionId ?? \"static\","],
+			"gate": ["bash", "run.sh", "check-acp-cortex"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CORTEX-OVERLAY-KEY-IS-SESSION-KEY]",
+			"signatureSource": "scripts/check-acp-cortex.ts"
+		},
+		{
+			"claim": "ACP-OVERLAY-SESSIONKEY-WIRED",
+			"title": "passing a cwd-derived key instead of resolveSessionKey's value silently merges distinct sessions' overlay scopes at the production call site",
+			"subject": "pi-extensions/lib/acp/backend.ts",
+			"find": [
+				"\t\t\tconst overlay = adapter.ensureOverlay({ cwd, modelId: model.id, nativeModelId, config, sessionKey });"
+			],
+			"replace": [
+				"\t\t\tconst overlay = adapter.ensureOverlay({ cwd, modelId: model.id, nativeModelId, config, sessionKey: `cwd:${cwd}` });"
+			],
+			"gate": ["bash", "run.sh", "check-acp-session-reuse"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:ACP-OVERLAY-SESSIONKEY-WIRED]",
+			"signatureSource": "scripts/check-acp-session-reuse.ts"
+		},
+		{
+			"claim": "CORTEX-PROVIDER-SIX-ROW-SURFACE",
+			"title": "filtering the cortex rows out of the REAL provider entry drops the whole backend from the operator's model list while models.ts and check-acp-cortex stay green",
+			"subject": "pi-extensions/acp-provider.ts",
+			"find": ["\t\tmodels: allCuratedModels(),"],
+			"replace": ["\t\tmodels: allCuratedModels().filter((m) => !m.id.startsWith(\"cortex-\")),"],
+			"gate": ["bash", "run.sh", "check-acp-provider-surface"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CORTEX-PROVIDER-SIX-ROW-SURFACE]",
+			"signatureSource": "scripts/check-acp-provider-surface.ts"
+		}
+	]
+}

package/scripts/mutants/agy-permission.json

@@ -0,0 +1,144 @@
+{
+	"schemaVersion": 1,
+	"lane": "agy-permission",
+	"mutants": [
+		{
+			"claim": "AGY-EXACT-RULE-SET",
+			"title": "over-grant: adding entwurf_inbox_read to ALLOW_RULES must die at the independent literal oracle",
+			"subject": "scripts/agy-bridge-config.py",
+			"find": [
+				"ALLOW_RULES = tuple(f\"mcp({SERVER_KEY}/{tool})\" for tool in (\"entwurf_v2\", \"entwurf_peers\", \"entwurf_self\"))"
+			],
+			"replace": [
+				"ALLOW_RULES = tuple(",
+				"    f\"mcp({SERVER_KEY}/{tool})\" for tool in (\"entwurf_v2\", \"entwurf_peers\", \"entwurf_self\", \"entwurf_inbox_read\")",
+				")"
+			],
+			"gate": ["bash", "run.sh", "smoke-agy-install-state"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:AGY-EXACT-RULE-SET]",
+			"signatureSource": "scripts/smoke-agy-install-state.sh"
+		},
+		{
+			"claim": "AGY-INSTALL-MALFORMED-PRIOR",
+			"title": "install reverts to a shallow prior-state check (empty provenance map passes all()) and re-captures",
+			"subject": "scripts/agy-bridge-config.py",
+			"find": [
+				"        try:",
+				"            _prior_rules, prior_existed = _parse_permission_state(prior)",
+				"        except _PermissionStateError as exc:",
+				"            _die(4, f\"agy-bridge: prior permission install-state is unusable — {exc}. Refusing to \"",
+				"                    \"overwrite provenance this entwurf cannot read; inspect it by hand.\")",
+				"        for rule in ALLOW_RULES:",
+				"            if rule in prior_existed:",
+				"                rules_existed[rule] = prior_existed[rule]"
+			],
+			"replace": [
+				"        if prior.get(\"schemaVersion\") == 1:",
+				"            legacy_rule = prior.get(\"rule\")",
+				"            if isinstance(legacy_rule, str) and isinstance(prior.get(\"ruleExistedBefore\"), bool):",
+				"                if legacy_rule in ALLOW_RULES:",
+				"                    rules_existed[legacy_rule] = prior[\"ruleExistedBefore\"]",
+				"        else:",
+				"            prior_existed = prior.get(\"rulesExistedBefore\")",
+				"            if isinstance(prior_existed, dict) and all(isinstance(v, bool) for v in prior_existed.values()):",
+				"                for rule in ALLOW_RULES:",
+				"                    if rule in prior_existed:",
+				"                        rules_existed[rule] = prior_existed[rule]"
+			],
+			"gate": ["bash", "run.sh", "smoke-agy-install-state"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:AGY-INSTALL-MALFORMED-PRIOR]",
+			"signatureSource": "scripts/smoke-agy-install-state.sh"
+		},
+		{
+			"claim": "AGY-UNINSTALL-VALIDATE-FIRST",
+			"title": "uninstall validates the state only inside the settings-exists branch (refusal after mutation)",
+			"subject": "scripts/agy-bridge-config.py",
+			"find": [
+				"    ours = _owned_rules(state)",
+				"",
+				"    if os.path.islink(settings_path):",
+				"        _die(3, f\"agy-bridge: refusing to uninstall — {settings_path} became a symlink since install \"",
+				"                f\"(someone else's SSOT now). Resolve by hand.\")",
+				"",
+				"    if os.path.exists(settings_path):",
+				"        data = _load_config(settings_path)"
+			],
+			"replace": [
+				"    if os.path.islink(settings_path):",
+				"        _die(3, f\"agy-bridge: refusing to uninstall — {settings_path} became a symlink since install \"",
+				"                f\"(someone else's SSOT now). Resolve by hand.\")",
+				"",
+				"    ours = []",
+				"    if os.path.exists(settings_path):",
+				"        data = _load_config(settings_path)",
+				"        ours = _owned_rules(state)"
+			],
+			"gate": ["bash", "run.sh", "smoke-agy-install-state"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:AGY-UNINSTALL-VALIDATE-FIRST]",
+			"signatureSource": "scripts/smoke-agy-install-state.sh"
+		},
+		{
+			"claim": "AGY-DOCTOR-OWNERSHIP-AXIS",
+			"title": "the state-doctor rounds a path-correct but unreadable ownership record up to ok",
+			"subject": "scripts/agy-bridge-config.py",
+			"find": [
+				"    try:",
+				"        rules, _existed = _parse_permission_state(state)",
+				"    except _PermissionStateError as exc:",
+				"        sys.stdout.write(f\"corrupt {exc}\\n\")",
+				"        return",
+				"    sys.stdout.write(f\"ok {len(rules)}\\n\")"
+			],
+			"replace": ["    sys.stdout.write(\"ok 0\\n\")"],
+			"gate": ["bash", "run.sh", "smoke-agy-install-state"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:AGY-DOCTOR-OWNERSHIP-AXIS]",
+			"signatureSource": "scripts/smoke-agy-install-state.sh"
+		},
+		{
+			"claim": "AGY-CROSS-LIST-BROAD-FIRST",
+			"title": "broad-most-covering runs only within each list, so a deny-exact shadows an ask-broad host wrongly",
+			"subject": "scripts/agy-bridge-config.py",
+			"find": [
+				"    for rule_set, scope in ((BROAD_RULES, \"broad\"), (ALLOW_RULES, \"exact\")):",
+				"        for list_name in SHADOWING_LISTS:",
+				"            rules = perms.get(list_name)",
+				"            if not isinstance(rules, list):",
+				"                continue",
+				"            for rule in rules:",
+				"                if rule in rule_set:",
+				"                    sys.stdout.write(f\"shadowed-by-{list_name} {scope} {rule}\\n\")",
+				"                    return"
+			],
+			"replace": [
+				"    for list_name in SHADOWING_LISTS:",
+				"        rules = perms.get(list_name)",
+				"        if not isinstance(rules, list):",
+				"            continue",
+				"        for rule_set, scope in ((BROAD_RULES, \"broad\"), (ALLOW_RULES, \"exact\")):",
+				"            for rule in rules:",
+				"                if rule in rule_set:",
+				"                    sys.stdout.write(f\"shadowed-by-{list_name} {scope} {rule}\\n\")",
+				"                    return"
+			],
+			"gate": ["bash", "run.sh", "check-agy-permission-matrix"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:AGY-CROSS-LIST-BROAD-FIRST]",
+			"signatureSource": "scripts/check-agy-permission-matrix.py"
+		},
+		{
+			"claim": "AGY-SCHEMA-VERSIONS-APART",
+			"title": "re-merging the two state schema constants stamps a lying version onto the MCP install-state",
+			"subject": "scripts/agy-bridge-config.py",
+			"find": ["STATE_SCHEMA_VERSION = 1  # MCP install-state (server key + preimage); shape unchanged"],
+			"replace": ["STATE_SCHEMA_VERSION = 2  # re-merged with the permission version (the schema re-merge defect)"],
+			"gate": ["bash", "run.sh", "smoke-agy-install-state"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:AGY-SCHEMA-VERSIONS-APART]",
+			"signatureSource": "scripts/smoke-agy-install-state.sh"
+		}
+	]
+}

package/scripts/mutants/meta-identity.json

@@ -0,0 +1,17 @@
+{
+	"schemaVersion": 1,
+	"lane": "meta-identity",
+	"mutants": [
+		{
+			"claim": "META-FIFO-NONBLOCK",
+			"title": "removing O_NONBLOCK makes a fifo-shaped record block the open — the 7/26 mutation evidence, committed",
+			"subject": "pi-extensions/lib/meta-session.ts",
+			"find": ["\tconst fd = fs.openSync(file, fs.constants.O_RDONLY | O_NOFOLLOW_FLAG | O_NONBLOCK_FLAG);"],
+			"replace": ["\tconst fd = fs.openSync(file, fs.constants.O_RDONLY | O_NOFOLLOW_FLAG);"],
+			"gate": ["bash", "run.sh", "check-meta-identity-consumers"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:META-FIFO-NONBLOCK]",
+			"signatureSource": "scripts/check-meta-identity-consumers.ts"
+		}
+	]
+}