@junghanacs/entwurf 0.13.0 → 0.14.0

package/scripts/mutants/mux-fresh-call.json

@@ -0,0 +1,185 @@
+{
+	"schemaVersion": 1,
+	"lane": "mux-fresh-call",
+	"mutants": [
+		{
+			"claim": "FRESHCALL-PI-ARGV-PROMPT-FIRST",
+			"title": "pi gets the flag before the prompt again — the measured shape that opens a window whose first turn never runs",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\t\treturn [prompt, \"--entwurf-control\", \"--model\", model];"],
+			"replace": ["\t\t\treturn [\"--entwurf-control\", prompt, \"--model\", model];"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-PI-ARGV-PROMPT-FIRST]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CLAUDE-ARGV-EQUALS-FORM",
+			"title": "claude-code goes back to the variadic space form, which swallows the prompt as an option value",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": [
+				"\t\t\treturn [prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`, `--model=${model}`];"
+			],
+			"replace": [
+				"\t\t\treturn [prompt, \"--allowedTools\", FRESH_CALL_CALLBACK_TOOL[\"claude-code\"], `--model=${model}`];"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CLAUDE-ARGV-EQUALS-FORM]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-PI-MODEL-ARGV",
+			"title": "pi drops its measured two-token model option and silently resolves its ambient default again",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\t\treturn [prompt, \"--entwurf-control\", \"--model\", model];"],
+			"replace": ["\t\t\treturn [prompt, \"--entwurf-control\"];"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-PI-MODEL-ARGV]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-PI-MODEL-DIALECT",
+			"title": "pi model argv is unified with Claude Code into the equals form that the real Pi parser rejects",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\t\treturn [prompt, \"--entwurf-control\", \"--model\", model];"],
+			"replace": ["\t\t\treturn [prompt, \"--entwurf-control\", `--model=${model}`];"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-PI-MODEL-DIALECT]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CLAUDE-MODEL-ARGV",
+			"title": "Claude Code drops the explicit model token and silently resolves its ambient Opus default again",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": [
+				"\t\t\treturn [prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`, `--model=${model}`];"
+			],
+			"replace": ["\t\t\treturn [prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`];"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CLAUDE-MODEL-ARGV]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CALLBACK-PRECEDES-TASK",
+			"title": "the task is framed before the callback instruction, so a sibling that stalls in the task never names itself",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\t`FIRST ACTION, before reading files or anything else: call ${tool} with ` +"],
+			"replace": ["\t\t`FINAL ACTION, after completing the task: call ${tool} with ` +"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CALLBACK-PRECEDES-TASK]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-RECEIPT-WITHOUT-CORRELATION",
+			"title": "the launch receipt grows a sibling garden-id field, making an async correlation look like a synchronous return",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\tbackend: FreshCallBackend;\n\tmodel: string;\n\truntimePath: string;\n\tnonce: string;\n}"],
+			"replace": [
+				"\tbackend: FreshCallBackend;\n\tmodel: string;\n\truntimePath: string;\n\tnonce: string;\n\tgardenId?: string;\n}"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-RECEIPT-WITHOUT-CORRELATION]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-PI-SURFACE-IDENTITY",
+			"title": "native pi takes the caller garden id from the environment instead of its own resident closure — the uuidv7 confusion, reintroduced",
+			"subject": "pi-extensions/entwurf-control.ts",
+			"find": ["\t\t\t\t\tcallerGardenId: residentGardenId,"],
+			"replace": ["\t\t\t\t\tcallerGardenId: process.env.PI_SESSION_ID ?? null,"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-PI-SURFACE-IDENTITY]",
+			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-PI-MODEL-SCHEMA",
+			"title": "native pi drops the required model field from fresh-call while the composition still expects one",
+			"subject": "pi-extensions/entwurf-control.ts",
+			"find": [
+				"\t\t\tmodel: Type.String({\n\t\t\t\tminLength: 1,\n\t\t\t\tmaxLength: 200,\n\t\t\t\tpattern: \"^[A-Za-z0-9][A-Za-z0-9._/:\\\\[\\\\]-]*$\",\n\t\t\t\tdescription: \"Required runtime model: canonical provider/model for pi, or a Claude Code model id/alias.\",\n\t\t\t}),\n"
+			],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-PI-MODEL-SCHEMA]",
+			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CLAUDE-SURFACE-IDENTITY",
+			"title": "the MCP bridge reads the caller garden id straight out of env instead of its authoritative self envelope",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": [
+				"\t\t\tconst self = await buildAuthoritativeSelfEnvelope();\n\t\t\tcallerGardenId = self.envelope.sessionId;"
+			],
+			"replace": ["\t\t\tcallerGardenId = process.env.PI_SESSION_ID ?? null;"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CLAUDE-SURFACE-IDENTITY]",
+			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CLAUDE-MODEL-SCHEMA",
+			"title": "MCP drops the required model field from fresh-call while the composition still expects one",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": [
+				"\t\tmodel: z\n\t\t\t.string()\n\t\t\t.min(1)\n\t\t\t.max(200)\n\t\t\t// The `\\[` below is USELESS TO JS AND LOAD-BEARING TO THE HOST. zod emits this source\n\t\t\t// text verbatim as the JSON Schema `pattern`, and the host's tool-schema validator is a\n\t\t\t// Rust regex engine that rejects an unescaped `[` inside a character class as \"unclosed\n\t\t\t// character class\" — a 400 on tools/list that stops EVERY Claude session from opening\n\t\t\t// (7-M-fix). Biome's safe fix removes it; do not accept that fix. The suppression must\n\t\t\t// stay on the line DIRECTLY above the expression, or it attaches to nothing and reads\n\t\t\t// as an unused suppression while the escape goes back to being fixable.\n\t\t\t// biome-ignore lint/complexity/noUselessEscapeInRegex: emitted to a Rust regex validator, see above\n\t\t\t.regex(/^[A-Za-z0-9][A-Za-z0-9._/:\\[\\]-]*$/)\n\t\t\t.describe(\"Required runtime model: canonical provider/model for pi, or a Claude Code model id/alias.\"),\n"
+			],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CLAUDE-MODEL-SCHEMA]",
+			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-MODEL-PATTERN-HOST-VALID",
+			"title": "the #62 escape replanted: biome's safe fix unescapes the zod model pattern, JS still accepts it, and the Rust-family host validator rejects the whole tool definition",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\t\t\t.regex(/^[A-Za-z0-9][A-Za-z0-9._/:\\[\\]-]*$/)"],
+			"replace": ["\t\t\t.regex(/^[A-Za-z0-9][A-Za-z0-9._/:[\\]-]*$/)"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-MODEL-PATTERN-HOST-VALID]",
+			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-MODEL-PATTERN-PROVIDER-VALID",
+			"title": "the same unescape planted on the TypeBox surface rides pi-ai's real anthropic-messages conversion into the request body as an invalid Rust-family pattern",
+			"subject": "pi-extensions/entwurf-control.ts",
+			"find": ["\t\t\t\tpattern: \"^[A-Za-z0-9][A-Za-z0-9._/:\\\\[\\\\]-]*$\","],
+			"replace": ["\t\t\t\tpattern: \"^[A-Za-z0-9][A-Za-z0-9._/:[\\\\]-]*$\","],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-MODEL-PATTERN-PROVIDER-VALID]",
+			"signatureSource": "test/fresh-call-provider.contract.test.ts"
+		},
+		{
+			"claim": "PIIMPORT-WORK-SURFACE",
+			"title": "the measured #62 escape replanted on the floor itself: check-pi-import-surface falls back to the tracked index, so a brand-new forbidden private-subpath import is invisible until it is staged",
+			"subject": "run.sh",
+			"find": ["    git ls-files -z --cached --others --exclude-standard -- '*.ts' '*.js' '*.mjs' '*.cjs'"],
+			"replace": ["    git ls-files -z --cached -- '*.ts' '*.js' '*.mjs' '*.cjs'"],
+			"gate": ["bash", "run.sh", "check-pi-import-surface"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PIIMPORT-WORK-SURFACE]",
+			"signatureSource": "run.sh"
+		},
+		{
+			"claim": "VITEST-FAILED-TITLE-ATTRIBUTION",
+			"title": "the pilot's kill attribution collects PASSING test titles instead of failed ones, recreating the code-frame false-KILLED hole this lane exists to close",
+			"subject": "scripts/lib/mutation-qualify.ts",
+			"find": ["\t\t\tif (assertion.status !== \"failed\") continue;"],
+			"replace": ["\t\t\tif (assertion.status === \"failed\") continue;"],
+			"gate": ["node", "--experimental-strip-types", "scripts/check-gate-qualification.ts", "--attribution-self-test"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:VITEST-FAILED-TITLE-ATTRIBUTION]",
+			"signatureSource": "scripts/check-gate-qualification.ts"
+		}
+	]
+}

package/scripts/mutants/mux-launcher-fence.json

@@ -0,0 +1,123 @@
+{
+	"schemaVersion": 1,
+	"lane": "mux-launcher-fence",
+	"mutants": [
+		{
+			"claim": "LAUNCHFENCE-PREFLIGHT-FAIL-CLOSED",
+			"title": "the preflight stops checking where the launcher RESOLVES to, so a launcher already pointing into the fixture is pinned and launched anyway",
+			"subject": "scripts/lib/claude-launcher-fence.ts",
+			"find": [
+				"\tif (isInside(fixtureRoot, resolvedPath)) {",
+				"\t\tthrow new Error(",
+				"\t\t\t`claude-launcher-fence: fail-closed — the launcher's resolved target ${resolvedPath} is INSIDE the fixture cleanup root ${fixtureRoot}`,",
+				"\t\t);",
+				"\t}"
+			],
+			"replace": ["\t// the launcher-path containment check above already walks the fixture axis"],
+			"gate": ["bash", "run.sh", "check-mux-launcher-fence"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:LAUNCHFENCE-PREFLIGHT-FAIL-CLOSED]",
+			"signatureSource": "scripts/check-mux-launcher-fence.ts"
+		},
+		{
+			"claim": "LAUNCHFENCE-RETARGET-BLOCKS-CLEANUP",
+			"title": "the cleanup guard stops naming a KNOWN symlink-hop fixture reference, so the incident's dangling retarget is demoted to a vague unproven state",
+			"subject": "scripts/lib/claude-launcher-fence.ts",
+			"find": [
+				"\t\tif (isInside(snapshot.fixtureRoot, hop)) {",
+				"\t\t\treturn {",
+				"\t\t\t\tsafeToRemove: false,",
+				"\t\t\t\tproblems: [`the launcher's link target ${hop} lies inside the fixture cleanup root`],",
+				"\t\t\t};",
+				"\t\t}"
+			],
+			"replace": ["\t\t// the realpath walk below covers the symlink hop"],
+			"gate": ["bash", "run.sh", "check-mux-launcher-fence"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:LAUNCHFENCE-RETARGET-BLOCKS-CLEANUP]",
+			"signatureSource": "scripts/check-mux-launcher-fence.ts"
+		},
+		{
+			"claim": "LAUNCHFENCE-CONTENT-CHANGE-DETECTED",
+			"title": "the integrity oracle drops content identity, so an in-place rewrite of the resolved target passes teardown unreported",
+			"subject": "scripts/lib/claude-launcher-fence.ts",
+			"find": [
+				"\t\t} else {",
+				"\t\t\ttry {",
+				"\t\t\t\tif (sha256File(resolvedNow) !== snapshot.sha256) {",
+				"\t\t\t\t\tproblems.push(`the launcher's resolved target ${resolvedNow} changed content (sha256 mismatch)`);",
+				"\t\t\t\t}",
+				"\t\t\t} catch (err) {",
+				"\t\t\t\tproblems.push(",
+				"\t\t\t\t\t`the launcher's resolved target ${resolvedNow} could not be hashed: ${err instanceof Error ? err.message : String(err)}`,",
+				"\t\t\t\t);",
+				"\t\t\t}",
+				"\t\t}"
+			],
+			"replace": ["\t\t}"],
+			"gate": ["bash", "run.sh", "check-mux-launcher-fence"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:LAUNCHFENCE-CONTENT-CHANGE-DETECTED]",
+			"signatureSource": "scripts/check-mux-launcher-fence.ts"
+		},
+		{
+			"claim": "LAUNCHFENCE-XDG-EXACT-RESTORE",
+			"title": "an originally absent XDG variable is filled with a canonical default instead of being deleted — a guess about how the runtime reads its config, not operator parity",
+			"subject": "scripts/lib/claude-launcher-fence.ts",
+			"find": [
+				"\t\tif (original === null || original === undefined) delete env[name];",
+				"\t\telse env[name] = original;"
+			],
+			"replace": [
+				"\t\tif (original === null || original === undefined) env[name] = path.join(env.HOME ?? \"\", \".local\", \"share\");",
+				"\t\telse env[name] = original;"
+			],
+			"gate": ["bash", "run.sh", "check-mux-launcher-fence"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:LAUNCHFENCE-XDG-EXACT-RESTORE]",
+			"signatureSource": "scripts/check-mux-launcher-fence.ts"
+		},
+		{
+			"claim": "LAUNCHFENCE-WIRED-LIFECYCLE",
+			"title": "the lifecycle smoke disconnects the integrity oracle from its teardown, so the fence exists but nothing runs it before fixture removal",
+			"subject": "scripts/smoke-mux-lifecycle-live.ts",
+			"find": ["\tconst launcherProblems = verifyClaudeLauncher(launcherSnapshot);"],
+			"replace": ["\tconst launcherProblems: string[] = [];"],
+			"gate": ["bash", "run.sh", "check-mux-launcher-fence"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:LAUNCHFENCE-WIRED-LIFECYCLE]",
+			"signatureSource": "scripts/check-mux-launcher-fence.ts"
+		},
+		{
+			"claim": "LAUNCHFENCE-LIFECYCLE-CELL-BRANCH",
+			"title": "lifecycle's real-HOME cell env collapses to one branch — exact parity for every cell — silently dropping the ACP pi cell's MEASURED canonical XDG requirement",
+			"subject": "scripts/smoke-mux-lifecycle-live.ts",
+			"find": [
+				"\t\t\t\tif (backend === \"pi\") {",
+				"\t\t\t\t\tserverEnv.XDG_CONFIG_HOME = REAL_XDG_CONFIG_HOME;",
+				"\t\t\t\t\tserverEnv.XDG_DATA_HOME = REAL_XDG_DATA_HOME;",
+				"\t\t\t\t\tserverEnv.XDG_STATE_HOME = REAL_XDG_STATE_HOME;",
+				"\t\t\t\t\tserverEnv.XDG_CACHE_HOME = REAL_XDG_CACHE_HOME;",
+				"\t\t\t\t} else {",
+				"\t\t\t\t\trestoreOriginalXdg(serverEnv, ORIGINAL_XDG);",
+				"\t\t\t\t}"
+			],
+			"replace": ["\t\t\t\trestoreOriginalXdg(serverEnv, ORIGINAL_XDG);"],
+			"gate": ["bash", "run.sh", "check-mux-launcher-fence"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:LAUNCHFENCE-LIFECYCLE-CELL-BRANCH]",
+			"signatureSource": "scripts/check-mux-launcher-fence.ts"
+		},
+		{
+			"claim": "LAUNCHFENCE-WIRED-FRESH-CALL",
+			"title": "the fresh-call smoke disconnects the integrity oracle from its teardown, so only one of the two affected smokes is actually protected",
+			"subject": "scripts/smoke-mux-fresh-call-live.ts",
+			"find": ["\t\tconst launcherProblems = verifyClaudeLauncher(launcherSnapshot);"],
+			"replace": ["\t\tconst launcherProblems: string[] = [];"],
+			"gate": ["bash", "run.sh", "check-mux-launcher-fence"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:LAUNCHFENCE-WIRED-FRESH-CALL]",
+			"signatureSource": "scripts/check-mux-launcher-fence.ts"
+		}
+	]
+}

package/scripts/mutants/mux-parent-artifact.json

@@ -0,0 +1,39 @@
+{
+	"schemaVersion": 1,
+	"lane": "mux-parent-artifact",
+	"mutants": [
+		{
+			"claim": "MUXARTIFACT-NONCE-FLOW",
+			"title": "the callback body carries a different nonce than the launch receipt, documenting a correlation rail that does not exist",
+			"subject": "scripts/fixtures/mux-parent-transcript.scrubbed.jsonl",
+			"find": ["mux-fresh-call-000000000000000000000000\\n\\n<sender_info>"],
+			"replace": ["mux-fresh-call-999999999999999999999999\\n\\n<sender_info>"],
+			"gate": ["bash", "run.sh", "check-mux-parent-artifact"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXARTIFACT-NONCE-FLOW]",
+			"signatureSource": "scripts/check-mux-parent-artifact.ts"
+		},
+		{
+			"claim": "MUXARTIFACT-SENDER-INFO-SHAPE",
+			"title": "the envelope's sessionId field is renamed, so the fixture documents a parser that cannot read a real callback",
+			"subject": "scripts/fixtures/mux-parent-transcript.scrubbed.jsonl",
+			"find": ["<sender_info>{\\\"sessionId\\\":"],
+			"replace": ["<sender_info>{\\\"gardenId\\\":"],
+			"gate": ["bash", "run.sh", "check-mux-parent-artifact"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXARTIFACT-SENDER-INFO-SHAPE]",
+			"signatureSource": "scripts/check-mux-parent-artifact.ts"
+		},
+		{
+			"claim": "MUXARTIFACT-RECEIPT-GRAMMAR",
+			"title": "the scrubbed session id is collapsed onto the window sigil, documenting a receipt tmux never emits",
+			"subject": "scripts/fixtures/mux-parent-transcript.scrubbed.jsonl",
+			"find": ["in session $0"],
+			"replace": ["in session @0"],
+			"gate": ["bash", "run.sh", "check-mux-parent-artifact"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXARTIFACT-RECEIPT-GRAMMAR]",
+			"signatureSource": "scripts/check-mux-parent-artifact.ts"
+		}
+	]
+}

package/scripts/mutants/mux-resume-call.json

@@ -0,0 +1,148 @@
+{
+	"schemaVersion": 1,
+	"lane": "mux-resume-call",
+	"mutants": [
+		{
+			"claim": "MUXRESUME-CWD-MISSING-REFUSED",
+			"title": "a deleted recorded cwd is accepted — tmux then opens the window in $HOME and the wrong-project resume looks successful",
+			"subject": "pi-extensions/lib/mux-resume-call.ts",
+			"find": ["\t\treturn \"cwd-missing\";"],
+			"replace": ["\t\treturn null;"],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-CWD-MISSING-REFUSED]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-CWD-FORMAT-REFUSED",
+			"title": "the '#' refusal stops matching, so tmux format-expands the path it was handed",
+			"subject": "pi-extensions/lib/mux-resume-call.ts",
+			"find": ["\tif (cwd.includes(\"#\")) return \"cwd-format-token\";"],
+			"replace": ["\tif (cwd.includes(\"\\u0000\")) return \"cwd-format-token\";"],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-CWD-FORMAT-REFUSED]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-CWD-WHITESPACE-OK",
+			"title": "a quoting fear is added back as a whitespace refusal, which would reject real project directories tmux handles fine",
+			"subject": "pi-extensions/lib/mux-resume-call.ts",
+			"find": ["\tif (cwd.includes(\"#\")) return \"cwd-format-token\";"],
+			"replace": ["\tif (cwd.includes(\"#\") || /\\s/.test(cwd)) return \"cwd-format-token\";"],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-CWD-WHITESPACE-OK]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-ARGV-HAS-CWD",
+			"title": "the -c is dropped, so the citizen comes back in the CALLER's directory instead of its own project",
+			"subject": "pi-extensions/lib/mux-resume-call.ts",
+			"find": ["\t\t\"-c\",\n\t\tcwd,\n\t\t\"-P\","],
+			"replace": ["\t\t\"-P\","],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-ARGV-HAS-CWD]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-ARGV-RUNTIME-AFTER-DASHDASH",
+			"title": "the `--` separator is dropped, so tmux reads pi's own flags as tmux options",
+			"subject": "pi-extensions/lib/mux-resume-call.ts",
+			"find": ["\t\t\"--\",\n\t\truntimePath,"],
+			"replace": ["\t\truntimePath,"],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-ARGV-RUNTIME-AFTER-DASHDASH]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-ARGV-CARRIER-FREE",
+			"title": "a window-name carrier is added to the append shape, which is how a placement verb starts growing knobs it does not own",
+			"subject": "pi-extensions/lib/mux-resume-call.ts",
+			"find": ["\t\t\"-P\","],
+			"replace": ["\t\t\"-n\",\n\t\t\"resume\",\n\t\t\"-P\","],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-ARGV-CARRIER-FREE]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-NO-IDENTITY",
+			"title": "identity vocabulary enters the placement module, which is the first step of a leaf learning whose citizen it is opening",
+			"subject": "pi-extensions/lib/mux-resume-call.ts",
+			"find": ["export const RESUME_CALL_RUNTIME = \"pi\";"],
+			"replace": ["export const RESUME_CALL_RUNTIME = \"pi\";\nexport const RESUME_CALL_TARGET_KEY = \"gardenId\";"],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-NO-IDENTITY]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-SURFACE-SEAM",
+			"title": "the v2 composition imports mux directly, collapsing the injected seam that keeps the delivery fence where the boundary gate scans for it",
+			"subject": "pi-extensions/lib/entwurf-v2-visible-resume.ts",
+			"find": ["import { buildResumePiArgs } from \"./entwurf-resume-args.ts\";"],
+			"replace": [
+				"import { buildResumePiArgs } from \"./entwurf-resume-args.ts\";\nimport { RESUME_CALL_RUNTIME } from \"./mux-resume-call.ts\";\nvoid RESUME_CALL_RUNTIME;"
+			],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-SURFACE-SEAM]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-PI-SURFACE-REGISTERED",
+			"title": "the native pi registration is never called, so the verb exists in source and nowhere an operator can reach",
+			"subject": "pi-extensions/entwurf-control.ts",
+			"find": ["\t\tregisterResumeCallTool(pi);"],
+			"replace": ["\t\tvoid registerResumeCallTool;"],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-PI-SURFACE-REGISTERED]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-PI-SURFACE-TARGET-ONLY",
+			"title": "a task knob is added to the native schema, re-opening the prompt axis a resume deliberately does not have",
+			"subject": "pi-extensions/entwurf-control.ts",
+			"find": [
+				"\t\t\t\tdescription: \"Garden id of the DORMANT pi citizen to reopen (discover with entwurf_peers).\",\n\t\t\t}),"
+			],
+			"replace": [
+				"\t\t\t\tdescription: \"Garden id of the DORMANT pi citizen to reopen (discover with entwurf_peers).\",\n\t\t\t}),\n\t\t\ttask: Type.String({ description: \"What the resumed citizen should do.\" }),"
+			],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-PI-SURFACE-TARGET-ONLY]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-DESC-CONTRACT-PI",
+			"title": "the native description stops saying a resume runs no turn, so a caller reasonably expects the citizen to act on being reopened",
+			"subject": "pi-extensions/entwurf-control.ts",
+			"find": ["This runs NO turn: the window comes\nback with the conversation and waits"],
+			"replace": ["The window comes\nback with the conversation and waits"],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-DESC-CONTRACT-PI]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-DESC-CONTRACT-MCP",
+			"title": "the MCP description drops the dormant-only scope, inviting callers to aim the verb at live citizens it will refuse",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": [
+				"\t\"Reopen ONE DORMANT pi citizen under its OWN garden id, in a visible window in the operator's own tmux \""
+			],
+			"replace": [
+				"\t\"Reopen ONE pi citizen under its OWN garden id, in a visible window in the operator's own tmux \""
+			],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-DESC-CONTRACT-MCP]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
+		}
+	]
+}