@junghanacs/entwurf 0.13.1 → 0.14.1

package/scripts/mutants/meta-identity.json

@@ -12,6 +12,42 @@
 			"timeoutSeconds": 120,
 			"signature": "[QK:META-FIFO-NONBLOCK]",
 			"signatureSource": "scripts/check-meta-identity-consumers.ts"
+		},
+		{
+			"claim": "META-CREATE-EXCLUSIVE",
+			"title": "reverting the exclusive CREATE publish link to rename silently replaces an existing citizen record on a garden-id collision (#66)",
+			"subject": "pi-extensions/lib/meta-session.ts",
+			"find": ["\t\tfs.linkSync(tmp, file);"],
+			"replace": ["\t\tfs.renameSync(tmp, file);"],
+			"gate": ["bash", "run.sh", "check-meta-session"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:META-CREATE-EXCLUSIVE]",
+			"signatureSource": "scripts/check-meta-session.ts"
+		},
+		{
+			"claim": "META-CREATE-WIRING",
+			"title": "routing the CREATE action back through the replacing attach write reopens the silent-overwrite path at the upsert choke point (#66)",
+			"subject": "pi-extensions/lib/meta-session.ts",
+			"find": [
+				"\tif (decision.action === \"create\") publishExclusiveIdentity(file, decision.record);",
+				"\telse atomicWriteIdentity(file, decision.record);"
+			],
+			"replace": ["\tatomicWriteIdentity(file, decision.record);"],
+			"gate": ["bash", "run.sh", "check-meta-session"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:META-CREATE-WIRING]",
+			"signatureSource": "scripts/check-meta-session.ts"
+		},
+		{
+			"claim": "META-CREATE-PUBLISHED-CLEANUP",
+			"title": "swallowing a post-publish temp-cleanup failure reports a clean create while a stale tmp lingers beside the record (#66 false success)",
+			"subject": "pi-extensions/lib/meta-session.ts",
+			"find": ["\t\tif ((err as { code?: unknown }).code === \"ENOENT\") return;"],
+			"replace": ["\t\treturn;"],
+			"gate": ["bash", "run.sh", "check-meta-session"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:META-CREATE-PUBLISHED-CLEANUP]",
+			"signatureSource": "scripts/check-meta-session.ts"
 		}
 	]
 }

package/scripts/mutants/meta-retire.json

@@ -0,0 +1,47 @@
+{
+	"schemaVersion": 1,
+	"lane": "meta-retire",
+	"mutants": [
+		{
+			"claim": "META-RETIRE-COMPARE-TYPE",
+			"title": "comparing the current value without its JSON scalar type lets a truthy 1 pass as the true entwurf wrote, so relinquishment overwrites a value that was never ours (#71)",
+			"subject": "scripts/meta-bridge-state.py",
+			"find": [
+				"    existed, value = get_nested(settings, path)",
+				"    if existed and type(value) is type(last_managed_value) and value == last_managed_value:"
+			],
+			"replace": ["    existed, value = get_nested(settings, path)", "    if existed and value == last_managed_value:"],
+			"gate": ["bash", "run.sh", "smoke-meta-install-state"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:META-RETIRE-COMPARE-TYPE]",
+			"signatureSource": "scripts/smoke-meta-install-state.sh"
+		},
+		{
+			"claim": "META-RETIRE-MALFORMED-SILENT",
+			"title": "skipping a malformed retired entry instead of failing discards the only evidence that entwurf owns the key, leaving a still-dangerous value looking operator-clean (#71)",
+			"subject": "scripts/meta-bridge-state.py",
+			"find": [
+				"        die(f\"retired scalar state entry {name} is malformed; refusing to discard ownership evidence\")"
+			],
+			"replace": ["        return"],
+			"gate": ["bash", "run.sh", "smoke-meta-install-state"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:META-RETIRE-MALFORMED-SILENT]",
+			"signatureSource": "scripts/smoke-meta-install-state.sh"
+		},
+		{
+			"claim": "META-RETIRE-FRESH-TOUCH",
+			"title": "synthesising provenance when install-state carries none lets relinquishment rewrite a value the operator set themselves, the exact ownership violation #71 exists to stop",
+			"subject": "scripts/meta-bridge-state.py",
+			"find": ["    if entry is None:", "        return"],
+			"replace": [
+				"    if entry is None:",
+				"        entry = {\"kind\": \"scalar\", \"path\": path, \"original\": {\"existed\": False, \"value\": None}}"
+			],
+			"gate": ["bash", "run.sh", "smoke-meta-install-state"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:META-RETIRE-FRESH-TOUCH]",
+			"signatureSource": "scripts/smoke-meta-install-state.sh"
+		}
+	]
+}

package/scripts/mutants/mux-boundary.json

@@ -0,0 +1,196 @@
+{
+	"schemaVersion": 1,
+	"lane": "mux-boundary",
+	"mutants": [
+		{
+			"claim": "V2-DELIVERY-EXCLUDES-MUX",
+			"title": "a mux launch handle is reintroduced as an entwurf_v2 delivery receipt transport",
+			"subject": "pi-extensions/lib/entwurf-v2-contract.ts",
+			"find": [
+				"export const ENTWURF_V2_TRANSPORTS = [\"control-socket\", \"meta-mailbox\", \"native-push\"] as const;"
+			],
+			"replace": [
+				"export const ENTWURF_V2_TRANSPORTS = [",
+				"\t\"control-socket\",",
+				"\t\"tmux-live\",",
+				"\t\"meta-mailbox\",",
+				"\t\"native-push\",",
+				"] as const;"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-contract"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:V2-DELIVERY-EXCLUDES-MUX]",
+			"signatureSource": "scripts/check-entwurf-v2-contract.ts"
+		},
+		{
+			"claim": "MUX-ANCHOR-REQUIRED",
+			"title": "TMUX is no longer required, so a caller holding only a pane id makes a bare tmux resolve to the DEFAULT server",
+			"subject": "pi-extensions/lib/mux-placement.ts",
+			"find": [
+				"\tif (typeof server !== \"string\" || server.length === 0) return { ok: false, reason: \"no-tmux-context\" };"
+			],
+			"replace": ["\tvoid server;"],
+			"gate": ["bash", "run.sh", "check-mux-placement"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUX-ANCHOR-REQUIRED]",
+			"signatureSource": "scripts/check-mux-placement.ts"
+		},
+		{
+			"claim": "MUX-SELECTOR-NATIVE-ID",
+			"title": "selector validation is disabled, so a forged `-t` value reaches tmux's own parser",
+			"subject": "pi-extensions/lib/mux-placement.ts",
+			"find": ["\tif (!okShape) {"],
+			"replace": ["\tif (false && !okShape) {"],
+			"gate": ["bash", "run.sh", "check-mux-placement"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUX-SELECTOR-NATIVE-ID]",
+			"signatureSource": "scripts/check-mux-placement.ts"
+		},
+		{
+			"claim": "MUX-TMUX-FAILURE-LOUD",
+			"title": "a nonzero or signalled tmux run is swallowed, so `no server running` is laundered into a fact about the pane",
+			"subject": "pi-extensions/lib/mux-placement.ts",
+			"find": ["\tif (run.status === 0) return;"],
+			"replace": ["\tif (run.status === 0 || run.status !== 0) return;"],
+			"gate": ["bash", "run.sh", "check-mux-placement"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUX-TMUX-FAILURE-LOUD]",
+			"signatureSource": "scripts/check-mux-placement.ts"
+		},
+		{
+			"claim": "MUX-ANCHOR-ECHO-BACK",
+			"title": "the pane-id echo-back is dropped, so tmux's rc=0 answer about ANOTHER pane is accepted as the caller's placement",
+			"subject": "pi-extensions/lib/mux-placement.ts",
+			"find": ["\tif (paneId !== anchor) return { ok: false, reason: \"anchor-mismatch\" };"],
+			"replace": ["\t// echo-back dropped"],
+			"gate": ["bash", "run.sh", "check-mux-placement"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUX-ANCHOR-ECHO-BACK]",
+			"signatureSource": "scripts/check-mux-placement.ts"
+		},
+		{
+			"claim": "MUX-APPEND-END-DETACHED",
+			"title": "append drops -a/{end} and becomes a lowest-free-index new-window, a different verb from appending at the session end",
+			"subject": "pi-extensions/lib/mux-placement.ts",
+			"find": [
+				"\treturn [\"new-window\", \"-d\", \"-a\", \"-t\", `${sessionId}:{end}`, \"-P\", \"-F\", APPEND_FORMAT];"
+			],
+			"replace": ["\treturn [\"new-window\", \"-d\", \"-t\", `${sessionId}:`, \"-P\", \"-F\", APPEND_FORMAT];"],
+			"gate": ["bash", "run.sh", "check-mux-placement"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUX-APPEND-END-DETACHED]",
+			"signatureSource": "scripts/check-mux-placement.ts"
+		},
+		{
+			"claim": "MUX-CLOSE-BY-WINDOW-ID",
+			"title": "a failed kill-window is reported as already-gone without proving absence, so a window that is still open reads as closed",
+			"subject": "pi-extensions/lib/mux-placement.ts",
+			"find": ["\treturn ids.includes(windowId) ? null : \"already-gone\";"],
+			"replace": ["\treturn \"already-gone\";"],
+			"gate": ["bash", "run.sh", "check-mux-placement"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUX-CLOSE-BY-WINDOW-ID]",
+			"signatureSource": "scripts/check-mux-placement.ts"
+		},
+		{
+			"claim": "MUX-CONTEXT-BOUND-MUTATION",
+			"title": "context binding matches on the session id alone, so a restarted or foreign server with the same $N is accepted",
+			"subject": "pi-extensions/lib/mux-placement.ts",
+			"find": ["\treturn origin.serverPid === now.serverPid && origin.sessionId === now.sessionId;"],
+			"replace": ["\treturn origin.sessionId === now.sessionId;"],
+			"gate": ["bash", "run.sh", "check-mux-placement"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUX-CONTEXT-BOUND-MUTATION]",
+			"signatureSource": "scripts/check-mux-placement.ts"
+		},
+		{
+			"claim": "MUX-LAUNCH-PRECONDITION-FIRST",
+			"title": "the runtime precondition is skipped, so a window is opened onto a runtime that cannot start and the receipt looks identical to a good launch",
+			"subject": "pi-extensions/lib/mux-launch.ts",
+			"find": ["\tif (!isAbsolute(runtimePath)) {"],
+			"replace": ["\tif (false && !isAbsolute(runtimePath)) {"],
+			"gate": ["bash", "run.sh", "check-mux-launch"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUX-LAUNCH-PRECONDITION-FIRST]",
+			"signatureSource": "scripts/check-mux-launch.ts"
+		},
+		{
+			"claim": "MUX-LAUNCH-PATH-NO-SPLIT",
+			"title": "the whitespace guard is dropped, so tmux re-splits a spaced runtime path and launches a truncated binary with the remainder as an argument",
+			"subject": "pi-extensions/lib/mux-launch.ts",
+			"find": ["\tif (WHITESPACE.test(runtimePath)) {"],
+			"replace": ["\tif (false && WHITESPACE.test(runtimePath)) {"],
+			"gate": ["bash", "run.sh", "check-mux-launch"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUX-LAUNCH-PATH-NO-SPLIT]",
+			"signatureSource": "scripts/check-mux-launch.ts"
+		},
+		{
+			"claim": "MUX-LAUNCH-PATH-HIT-NOT-SKIPPED",
+			"title": "the launchability proof is moved inside the PATH loop's catch, so an unlaunchable FIRST hit is silently skipped and a later entry launches a different install than the operator's own `pi`",
+			"subject": "pi-extensions/lib/mux-launch.ts",
+			"find": [
+				"\t\t} catch {",
+				"\t\t\tcontinue;",
+				"\t\t}",
+				"\t\tassertLaunchTarget(candidate);",
+				"\t\treturn candidate;"
+			],
+			"replace": [
+				"\t\t\tassertLaunchTarget(candidate);",
+				"\t\t} catch {",
+				"\t\t\tcontinue;",
+				"\t\t}",
+				"\t\treturn candidate;"
+			],
+			"gate": ["bash", "run.sh", "check-mux-launch"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUX-LAUNCH-PATH-HIT-NOT-SKIPPED]",
+			"signatureSource": "scripts/check-mux-launch.ts"
+		},
+		{
+			"claim": "MUX-LAUNCH-NO-SHELL-ARGV",
+			"title": "the `--` separator is dropped, so tmux takes the runtime as a shell-command string instead of exec'ing it directly",
+			"subject": "pi-extensions/lib/mux-launch.ts",
+			"find": [
+				"\treturn [\"new-window\", \"-d\", \"-a\", \"-t\", `${sessionId}:{end}`, \"-P\", \"-F\", APPEND_FORMAT, \"--\", runtimePath];"
+			],
+			"replace": [
+				"\treturn [\"new-window\", \"-d\", \"-a\", \"-t\", `${sessionId}:{end}`, \"-P\", \"-F\", APPEND_FORMAT, runtimePath];"
+			],
+			"gate": ["bash", "run.sh", "check-mux-launch"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUX-LAUNCH-NO-SHELL-ARGV]",
+			"signatureSource": "scripts/check-mux-launch.ts"
+		},
+		{
+			"claim": "MUX-LAUNCH-NO-CARRIER",
+			"title": "a window-name carrier is reintroduced into the launch argv, handing tmux's own parser a value this rail did not author",
+			"subject": "pi-extensions/lib/mux-launch.ts",
+			"find": [
+				"\treturn [\"new-window\", \"-d\", \"-a\", \"-t\", `${sessionId}:{end}`, \"-P\", \"-F\", APPEND_FORMAT, \"--\", runtimePath];"
+			],
+			"replace": [
+				"\treturn [\"new-window\", \"-d\", \"-a\", \"-n\", PI_RUNTIME_COMMAND, \"-t\", `${sessionId}:{end}`, \"-P\", \"-F\", APPEND_FORMAT, \"--\", runtimePath];"
+			],
+			"gate": ["bash", "run.sh", "check-mux-launch"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUX-LAUNCH-NO-CARRIER]",
+			"signatureSource": "scripts/check-mux-launch.ts"
+		},
+		{
+			"claim": "MUX-LAUNCH-CORE-IMPORT-FREE",
+			"title": "the launch composition is imported by the delivery core, making fresh launch a dependency of entwurf_v2 delivery",
+			"subject": "pi-extensions/lib/entwurf-v2-production.ts",
+			"find": ["import { isOutOfSocketDomainGardenIdConflict } from \"./entwurf-facts.ts\";"],
+			"replace": [
+				"import { isOutOfSocketDomainGardenIdConflict } from \"./entwurf-facts.ts\";",
+				"import { launchPi as _launchPi } from \"./mux-launch.ts\";"
+			],
+			"gate": ["bash", "run.sh", "check-mux-launch"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUX-LAUNCH-CORE-IMPORT-FREE]",
+			"signatureSource": "scripts/check-mux-launch.ts"
+		}
+	]
+}

package/scripts/mutants/mux-fresh-call.json

@@ -0,0 +1,229 @@
+{
+	"schemaVersion": 1,
+	"lane": "mux-fresh-call",
+	"mutants": [
+		{
+			"claim": "FRESHCALL-PI-ARGV-PROMPT-FIRST",
+			"title": "pi gets the flag before the prompt again — the measured shape that opens a window whose first turn never runs",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\t\treturn [prompt, \"--entwurf-control\", \"--model\", model];"],
+			"replace": ["\t\t\treturn [\"--entwurf-control\", prompt, \"--model\", model];"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-PI-ARGV-PROMPT-FIRST]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CLAUDE-ARGV-EQUALS-FORM",
+			"title": "claude-code goes back to the variadic space form, which swallows the prompt as an option value",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": [
+				"\t\t\treturn [prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`, `--model=${model}`];"
+			],
+			"replace": [
+				"\t\t\treturn [prompt, \"--allowedTools\", FRESH_CALL_CALLBACK_TOOL[\"claude-code\"], `--model=${model}`];"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CLAUDE-ARGV-EQUALS-FORM]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-PI-MODEL-ARGV",
+			"title": "pi drops its measured two-token model option and silently resolves its ambient default again",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\t\treturn [prompt, \"--entwurf-control\", \"--model\", model];"],
+			"replace": ["\t\t\treturn [prompt, \"--entwurf-control\"];"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-PI-MODEL-ARGV]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-PI-MODEL-DIALECT",
+			"title": "pi model argv is unified with Claude Code into the equals form that the real Pi parser rejects",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\t\treturn [prompt, \"--entwurf-control\", \"--model\", model];"],
+			"replace": ["\t\t\treturn [prompt, \"--entwurf-control\", `--model=${model}`];"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-PI-MODEL-DIALECT]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CLAUDE-MODEL-ARGV",
+			"title": "Claude Code drops the explicit model token and silently resolves its ambient Opus default again",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": [
+				"\t\t\treturn [prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`, `--model=${model}`];"
+			],
+			"replace": ["\t\t\treturn [prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`];"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CLAUDE-MODEL-ARGV]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CALLBACK-PRECEDES-TASK",
+			"title": "the task is framed before the callback instruction, so a sibling that stalls in the task never names itself",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\t`FIRST ACTION, before reading files or anything else: call ${tool} with ` +"],
+			"replace": ["\t\t`FINAL ACTION, after completing the task: call ${tool} with ` +"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CALLBACK-PRECEDES-TASK]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-RECEIPT-WITHOUT-CORRELATION",
+			"title": "the launch receipt grows a sibling garden-id field, making an async correlation look like a synchronous return",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\truntimePath: string;\n\tnonce: string;\n}"],
+			"replace": ["\truntimePath: string;\n\tnonce: string;\n\tgardenId?: string;\n}"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-RECEIPT-WITHOUT-CORRELATION]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CWD-ARGV",
+			"title": "the requested cwd stops reaching tmux, so a cross-repo fresh sibling silently opens in the CALLER's repo and the launch looks successful",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\t...(cwd === undefined ? [] : [\"-c\", cwd]),\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CWD-ARGV]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CWD-REFUSED-PREMUTATION",
+			"title": "the pre-mutation cwd classification is ignored, so a relative/'#'/deleted/file path rides on toward tmux instead of refusing by name",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\tif (badCwd) return { ok: false, reason: badCwd };"],
+			"replace": ["\t\tvoid badCwd;"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CWD-REFUSED-PREMUTATION]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CWD-RECEIPT-REQUESTED",
+			"title": "production freshCall stops assembling the requested cwd into its receipt, so the operator-visible answer silently loses the one placement fact the caller asked for",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\t\t...(cwd === undefined ? {} : { cwd }),\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CWD-RECEIPT-REQUESTED]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CWD-SURFACE-PARITY",
+			"title": "one surface drops the optional cwd from its schema, so cross-repo fresh works from pi and silently cannot exist from the MCP bridge",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": [
+				"\t\tcwd: z\n\t\t\t.string()\n\t\t\t.optional()\n\t\t\t.describe(\n\t\t\t\t\"Optional literal ABSOLUTE path of an existing directory to start the sibling in (cross-repo fresh). Omit or pass \\\"\\\" to start in this agent's own cwd. Taken exactly as given — no trim, no realpath, no project-name resolution; '#' is refused (tmux format expansion). The receipt echoes what was REQUESTED, never an observation.\",\n\t\t\t),\n"
+			],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CWD-SURFACE-PARITY]",
+			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-PI-SURFACE-IDENTITY",
+			"title": "native pi takes the caller garden id from the environment instead of its own resident closure — the uuidv7 confusion, reintroduced",
+			"subject": "pi-extensions/entwurf-control.ts",
+			"find": ["\t\t\t\t\tcallerGardenId: residentGardenId,"],
+			"replace": ["\t\t\t\t\tcallerGardenId: process.env.PI_SESSION_ID ?? null,"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-PI-SURFACE-IDENTITY]",
+			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-PI-MODEL-SCHEMA",
+			"title": "native pi drops the required model field from fresh-call while the composition still expects one",
+			"subject": "pi-extensions/entwurf-control.ts",
+			"find": [
+				"\t\t\tmodel: Type.String({\n\t\t\t\tminLength: 1,\n\t\t\t\tmaxLength: 200,\n\t\t\t\tpattern: \"^[A-Za-z0-9][A-Za-z0-9._/:\\\\[\\\\]-]*$\",\n\t\t\t\tdescription: \"Required runtime model: canonical provider/model for pi, or a Claude Code model id/alias.\",\n\t\t\t}),\n"
+			],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-PI-MODEL-SCHEMA]",
+			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CLAUDE-SURFACE-IDENTITY",
+			"title": "the MCP bridge reads the caller garden id straight out of env instead of its authoritative self envelope",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": [
+				"\t\t\tconst self = await buildAuthoritativeSelfEnvelope();\n\t\t\tcallerGardenId = self.envelope.sessionId;"
+			],
+			"replace": ["\t\t\tcallerGardenId = process.env.PI_SESSION_ID ?? null;"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CLAUDE-SURFACE-IDENTITY]",
+			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CLAUDE-MODEL-SCHEMA",
+			"title": "MCP drops the required model field from fresh-call while the composition still expects one",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": [
+				"\t\tmodel: z\n\t\t\t.string()\n\t\t\t.min(1)\n\t\t\t.max(200)\n\t\t\t// The `\\[` below is USELESS TO JS AND LOAD-BEARING TO THE HOST. zod emits this source\n\t\t\t// text verbatim as the JSON Schema `pattern`, and the host's tool-schema validator is a\n\t\t\t// Rust regex engine that rejects an unescaped `[` inside a character class as \"unclosed\n\t\t\t// character class\" — a 400 on tools/list that stops EVERY Claude session from opening\n\t\t\t// (7-M-fix). Biome's safe fix removes it; do not accept that fix. The suppression must\n\t\t\t// stay on the line DIRECTLY above the expression, or it attaches to nothing and reads\n\t\t\t// as an unused suppression while the escape goes back to being fixable.\n\t\t\t// biome-ignore lint/complexity/noUselessEscapeInRegex: emitted to a Rust regex validator, see above\n\t\t\t.regex(/^[A-Za-z0-9][A-Za-z0-9._/:\\[\\]-]*$/)\n\t\t\t.describe(\"Required runtime model: canonical provider/model for pi, or a Claude Code model id/alias.\"),\n"
+			],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CLAUDE-MODEL-SCHEMA]",
+			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-MODEL-PATTERN-HOST-VALID",
+			"title": "the #62 escape replanted: biome's safe fix unescapes the zod model pattern, JS still accepts it, and the Rust-family host validator rejects the whole tool definition",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\t\t\t.regex(/^[A-Za-z0-9][A-Za-z0-9._/:\\[\\]-]*$/)"],
+			"replace": ["\t\t\t.regex(/^[A-Za-z0-9][A-Za-z0-9._/:[\\]-]*$/)"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-MODEL-PATTERN-HOST-VALID]",
+			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-MODEL-PATTERN-PROVIDER-VALID",
+			"title": "the same unescape planted on the TypeBox surface rides pi-ai's real anthropic-messages conversion into the request body as an invalid Rust-family pattern",
+			"subject": "pi-extensions/entwurf-control.ts",
+			"find": ["\t\t\t\tpattern: \"^[A-Za-z0-9][A-Za-z0-9._/:\\\\[\\\\]-]*$\","],
+			"replace": ["\t\t\t\tpattern: \"^[A-Za-z0-9][A-Za-z0-9._/:[\\\\]-]*$\","],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-MODEL-PATTERN-PROVIDER-VALID]",
+			"signatureSource": "test/fresh-call-provider.contract.test.ts"
+		},
+		{
+			"claim": "PIIMPORT-WORK-SURFACE",
+			"title": "the measured #62 escape replanted on the floor itself: check-pi-import-surface falls back to the tracked index, so a brand-new forbidden private-subpath import is invisible until it is staged",
+			"subject": "run.sh",
+			"find": ["    git ls-files -z --cached --others --exclude-standard -- '*.ts' '*.js' '*.mjs' '*.cjs'"],
+			"replace": ["    git ls-files -z --cached -- '*.ts' '*.js' '*.mjs' '*.cjs'"],
+			"gate": ["bash", "run.sh", "check-pi-import-surface"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PIIMPORT-WORK-SURFACE]",
+			"signatureSource": "run.sh"
+		},
+		{
+			"claim": "VITEST-FAILED-TITLE-ATTRIBUTION",
+			"title": "the pilot's kill attribution collects PASSING test titles instead of failed ones, recreating the code-frame false-KILLED hole this lane exists to close",
+			"subject": "scripts/lib/mutation-qualify.ts",
+			"find": ["\t\t\tif (assertion.status !== \"failed\") continue;"],
+			"replace": ["\t\t\tif (assertion.status === \"failed\") continue;"],
+			"gate": ["node", "--experimental-strip-types", "scripts/check-gate-qualification.ts", "--attribution-self-test"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:VITEST-FAILED-TITLE-ATTRIBUTION]",
+			"signatureSource": "scripts/check-gate-qualification.ts"
+		}
+	]
+}

package/scripts/mutants/mux-launcher-fence.json

@@ -0,0 +1,123 @@
+{
+	"schemaVersion": 1,
+	"lane": "mux-launcher-fence",
+	"mutants": [
+		{
+			"claim": "LAUNCHFENCE-PREFLIGHT-FAIL-CLOSED",
+			"title": "the preflight stops checking where the launcher RESOLVES to, so a launcher already pointing into the fixture is pinned and launched anyway",
+			"subject": "scripts/lib/claude-launcher-fence.ts",
+			"find": [
+				"\tif (isInside(fixtureRoot, resolvedPath)) {",
+				"\t\tthrow new Error(",
+				"\t\t\t`claude-launcher-fence: fail-closed — the launcher's resolved target ${resolvedPath} is INSIDE the fixture cleanup root ${fixtureRoot}`,",
+				"\t\t);",
+				"\t}"
+			],
+			"replace": ["\t// the launcher-path containment check above already walks the fixture axis"],
+			"gate": ["bash", "run.sh", "check-mux-launcher-fence"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:LAUNCHFENCE-PREFLIGHT-FAIL-CLOSED]",
+			"signatureSource": "scripts/check-mux-launcher-fence.ts"
+		},
+		{
+			"claim": "LAUNCHFENCE-RETARGET-BLOCKS-CLEANUP",
+			"title": "the cleanup guard stops naming a KNOWN symlink-hop fixture reference, so the incident's dangling retarget is demoted to a vague unproven state",
+			"subject": "scripts/lib/claude-launcher-fence.ts",
+			"find": [
+				"\t\tif (isInside(snapshot.fixtureRoot, hop)) {",
+				"\t\t\treturn {",
+				"\t\t\t\tsafeToRemove: false,",
+				"\t\t\t\tproblems: [`the launcher's link target ${hop} lies inside the fixture cleanup root`],",
+				"\t\t\t};",
+				"\t\t}"
+			],
+			"replace": ["\t\t// the realpath walk below covers the symlink hop"],
+			"gate": ["bash", "run.sh", "check-mux-launcher-fence"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:LAUNCHFENCE-RETARGET-BLOCKS-CLEANUP]",
+			"signatureSource": "scripts/check-mux-launcher-fence.ts"
+		},
+		{
+			"claim": "LAUNCHFENCE-CONTENT-CHANGE-DETECTED",
+			"title": "the integrity oracle drops content identity, so an in-place rewrite of the resolved target passes teardown unreported",
+			"subject": "scripts/lib/claude-launcher-fence.ts",
+			"find": [
+				"\t\t} else {",
+				"\t\t\ttry {",
+				"\t\t\t\tif (sha256File(resolvedNow) !== snapshot.sha256) {",
+				"\t\t\t\t\tproblems.push(`the launcher's resolved target ${resolvedNow} changed content (sha256 mismatch)`);",
+				"\t\t\t\t}",
+				"\t\t\t} catch (err) {",
+				"\t\t\t\tproblems.push(",
+				"\t\t\t\t\t`the launcher's resolved target ${resolvedNow} could not be hashed: ${err instanceof Error ? err.message : String(err)}`,",
+				"\t\t\t\t);",
+				"\t\t\t}",
+				"\t\t}"
+			],
+			"replace": ["\t\t}"],
+			"gate": ["bash", "run.sh", "check-mux-launcher-fence"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:LAUNCHFENCE-CONTENT-CHANGE-DETECTED]",
+			"signatureSource": "scripts/check-mux-launcher-fence.ts"
+		},
+		{
+			"claim": "LAUNCHFENCE-XDG-EXACT-RESTORE",
+			"title": "an originally absent XDG variable is filled with a canonical default instead of being deleted — a guess about how the runtime reads its config, not operator parity",
+			"subject": "scripts/lib/claude-launcher-fence.ts",
+			"find": [
+				"\t\tif (original === null || original === undefined) delete env[name];",
+				"\t\telse env[name] = original;"
+			],
+			"replace": [
+				"\t\tif (original === null || original === undefined) env[name] = path.join(env.HOME ?? \"\", \".local\", \"share\");",
+				"\t\telse env[name] = original;"
+			],
+			"gate": ["bash", "run.sh", "check-mux-launcher-fence"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:LAUNCHFENCE-XDG-EXACT-RESTORE]",
+			"signatureSource": "scripts/check-mux-launcher-fence.ts"
+		},
+		{
+			"claim": "LAUNCHFENCE-WIRED-LIFECYCLE",
+			"title": "the lifecycle smoke disconnects the integrity oracle from its teardown, so the fence exists but nothing runs it before fixture removal",
+			"subject": "scripts/smoke-mux-lifecycle-live.ts",
+			"find": ["\tconst launcherProblems = verifyClaudeLauncher(launcherSnapshot);"],
+			"replace": ["\tconst launcherProblems: string[] = [];"],
+			"gate": ["bash", "run.sh", "check-mux-launcher-fence"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:LAUNCHFENCE-WIRED-LIFECYCLE]",
+			"signatureSource": "scripts/check-mux-launcher-fence.ts"
+		},
+		{
+			"claim": "LAUNCHFENCE-LIFECYCLE-CELL-BRANCH",
+			"title": "lifecycle's real-HOME cell env collapses to one branch — exact parity for every cell — silently dropping the ACP pi cell's MEASURED canonical XDG requirement",
+			"subject": "scripts/smoke-mux-lifecycle-live.ts",
+			"find": [
+				"\t\t\t\tif (backend === \"pi\") {",
+				"\t\t\t\t\tserverEnv.XDG_CONFIG_HOME = REAL_XDG_CONFIG_HOME;",
+				"\t\t\t\t\tserverEnv.XDG_DATA_HOME = REAL_XDG_DATA_HOME;",
+				"\t\t\t\t\tserverEnv.XDG_STATE_HOME = REAL_XDG_STATE_HOME;",
+				"\t\t\t\t\tserverEnv.XDG_CACHE_HOME = REAL_XDG_CACHE_HOME;",
+				"\t\t\t\t} else {",
+				"\t\t\t\t\trestoreOriginalXdg(serverEnv, ORIGINAL_XDG);",
+				"\t\t\t\t}"
+			],
+			"replace": ["\t\t\t\trestoreOriginalXdg(serverEnv, ORIGINAL_XDG);"],
+			"gate": ["bash", "run.sh", "check-mux-launcher-fence"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:LAUNCHFENCE-LIFECYCLE-CELL-BRANCH]",
+			"signatureSource": "scripts/check-mux-launcher-fence.ts"
+		},
+		{
+			"claim": "LAUNCHFENCE-WIRED-FRESH-CALL",
+			"title": "the fresh-call smoke disconnects the integrity oracle from its teardown, so only one of the two affected smokes is actually protected",
+			"subject": "scripts/smoke-mux-fresh-call-live.ts",
+			"find": ["\t\tconst launcherProblems = verifyClaudeLauncher(launcherSnapshot);"],
+			"replace": ["\t\tconst launcherProblems: string[] = [];"],
+			"gate": ["bash", "run.sh", "check-mux-launcher-fence"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:LAUNCHFENCE-WIRED-FRESH-CALL]",
+			"signatureSource": "scripts/check-mux-launcher-fence.ts"
+		}
+	]
+}