@junghanacs/entwurf 0.14.2 → 0.15.0

package/scripts/mutants/copilot-launch.json

@@ -0,0 +1,187 @@
+{
+	"schemaVersion": 1,
+	"lane": "copilot-launch",
+	"mutants": [
+		{
+			"claim": "COPILOT-LAUNCH-REQUIRES-RECEIVER",
+			"title": "launching with the scan flag while no receiver unit is installed promises a doorbell nothing can ring — the session looks managed and is permanently undeliverable, with no error anywhere",
+			"subject": "scripts/copilot-launch.sh",
+			"find": [
+				"[ -f \"$STATE_FILE\" ] \\",
+				"\t|| fail \"no receiver install-state at $STATE_FILE.",
+				"  '$VENDOR_CMD' launched with $FLAG_ENV=$FLAG_VALUE would scan for an extension that is",
+				"  not there, and the session would never become deliverable. Run: $REPAIR\""
+			],
+			"replace": [
+				"if [ ! -f \"$STATE_FILE\" ]; then",
+				"\tmkdir -p \"$STATE_DIR\"",
+				"\tprintf '{\"schemaVersion\":1,\"unit\":\"%s\",\"path\":\"%s\"}\\n' \"$UNIT\" \"$DEST\" > \"$STATE_FILE\"",
+				"fi"
+			],
+			"gate": ["bash", "run.sh", "check-copilot-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-LAUNCH-REQUIRES-RECEIVER]",
+			"signatureSource": "scripts/check-copilot-launch.ts"
+		},
+		{
+			"claim": "COPILOT-LAUNCH-REFUSES-PATH-MISMATCH",
+			"title": "accepting an install-state that names a different extensions root lets the CLI scan a directory nobody installed into, while every artifact check stays green",
+			"subject": "scripts/copilot-launch.sh",
+			"find": [
+				"[ \"$claimed_path\" = \"$DEST\" ] \\",
+				"\t|| fail \"receiver install-state points at '$claimed_path' but this environment scans '$DEST'.",
+				"  The CLI would read a different extensions root than the one that was installed",
+				"  (COPILOT_EXTENSIONS_DIR / HOME differ from install time). Run: $REPAIR\""
+			],
+			"replace": ["# whichever root the state names is close enough"],
+			"gate": ["bash", "run.sh", "check-copilot-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-LAUNCH-REFUSES-PATH-MISMATCH]",
+			"signatureSource": "scripts/check-copilot-launch.ts"
+		},
+		{
+			"claim": "COPILOT-LAUNCH-SETS-EXTENSIONS-TOKEN",
+			"title": "not guaranteeing the EXTENSIONS token makes the managed launch identical to a plain one — Copilot skips the extension scan silently and the whole surface is decoration",
+			"subject": "scripts/copilot-launch.sh",
+			"find": ["[ \"$seen_extensions\" -eq 1 ] || flags_out=\"${flags_out:+$flags_out,}$FLAG_VALUE\""],
+			"replace": ["# assume the operator already set it"],
+			"gate": ["bash", "run.sh", "check-copilot-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-LAUNCH-SETS-EXTENSIONS-TOKEN]",
+			"signatureSource": "scripts/check-copilot-launch.ts"
+		},
+		{
+			"claim": "COPILOT-LAUNCH-PRESERVES-OPERATOR-TOKENS",
+			"title": "overwriting the feature-flag variable instead of extending it silently disables every other vendor feature flag the operator had enabled",
+			"subject": "scripts/copilot-launch.sh",
+			"find": ["export \"$FLAG_ENV=$flags_out\""],
+			"replace": ["export \"$FLAG_ENV=$FLAG_VALUE\""],
+			"gate": ["bash", "run.sh", "check-copilot-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-LAUNCH-PRESERVES-OPERATOR-TOKENS]",
+			"signatureSource": "scripts/check-copilot-launch.ts"
+		},
+		{
+			"claim": "COPILOT-LAUNCH-DEFAULTS-BEFORE-TERMINATOR",
+			"title": "appending the injected defaults after the argv terminator turns them from options into positional data the vendor reads as prompt text, so the managed profile silently stops applying",
+			"subject": "scripts/copilot-launch.sh",
+			"find": [
+				"final_args=()",
+				"for (( i = 0; i < scan_end; i++ )); do final_args+=(\"${args[$i]}\"); done",
+				"if [ \"${#injected[@]}\" -gt 0 ]; then final_args+=(\"${injected[@]}\"); fi",
+				"for (( i = scan_end; i < ${#args[@]}; i++ )); do final_args+=(\"${args[$i]}\"); done"
+			],
+			"replace": [
+				"final_args=(\"${args[@]}\")",
+				"if [ \"${#injected[@]}\" -gt 0 ]; then final_args+=(\"${injected[@]}\"); fi"
+			],
+			"gate": ["bash", "run.sh", "check-copilot-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-LAUNCH-DEFAULTS-BEFORE-TERMINATOR]",
+			"signatureSource": "scripts/check-copilot-launch.ts"
+		},
+		{
+			"claim": "COPILOT-LAUNCH-NO-DEFAULT-OVER-EXPLICIT-POLICY",
+			"title": "treating only the broadening flags as explicit policy means an operator who NARROWS permissions (--allow-url, --deny-tool, --excluded-tools) still gets --yolo appended — the managed default silently widens exactly what they were restricting",
+			"subject": "scripts/copilot-launch.sh",
+			"find": ["\t--allow-url", "\t--deny-url", "\t--available-tools", "\t--excluded-tools"],
+			"replace": ["\t# narrowing flags are not policy"],
+			"gate": ["bash", "run.sh", "check-copilot-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-LAUNCH-NO-DEFAULT-OVER-EXPLICIT-POLICY]",
+			"signatureSource": "scripts/check-copilot-launch.ts"
+		},
+		{
+			"claim": "COPILOT-LAUNCH-PREFIX-IS-NOT-POLICY",
+			"title": "matching policy flags by prefix instead of exactly makes --allow-all-mcp-server-instructions read as --allow-all, so a prompt-content flag suppresses the managed permission default",
+			"subject": "scripts/copilot-launch.sh",
+			"find": ["\t\tif [ \"$head\" = \"$ov\" ]; then"],
+			"replace": ["\t\tif case \"$head\" in \"$ov\"*) true ;; *) false ;; esac; then"],
+			"gate": ["bash", "run.sh", "check-copilot-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-LAUNCH-PREFIX-IS-NOT-POLICY]",
+			"signatureSource": "scripts/check-copilot-launch.ts"
+		},
+		{
+			"claim": "COPILOT-LAUNCH-KEEPS-OPERATOR-MODEL",
+			"title": "injecting the default model regardless of what the operator asked for silently overrides an explicit --model",
+			"subject": "scripts/copilot-launch.sh",
+			"find": ["\t\thas_model=1"],
+			"replace": ["\t\thas_model=0"],
+			"gate": ["bash", "run.sh", "check-copilot-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-LAUNCH-KEEPS-OPERATOR-MODEL]",
+			"signatureSource": "scripts/check-copilot-launch.ts"
+		},
+		{
+			"claim": "COPILOT-LAUNCH-EXECS-NOT-FORKS",
+			"title": "running the vendor as a child instead of exec'ing it leaves an entwurf shell sitting between the operator's terminal and the CLI, owning a pid and a signal path that belong to the vendor",
+			"subject": "scripts/copilot-launch.sh",
+			"find": ["exec \"$copilot_bin\" \"${final_args[@]}\""],
+			"replace": ["\"$copilot_bin\" \"${final_args[@]}\""],
+			"gate": ["bash", "run.sh", "check-copilot-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-LAUNCH-EXECS-NOT-FORKS]",
+			"signatureSource": "scripts/check-copilot-launch.ts"
+		},
+		{
+			"claim": "COPILOT-LAUNCH-REFUSES-RECURSION",
+			"title": "dropping the sentinel lets a PATH entry that calls back into the managed launch spin forever; the operator sees a hung terminal, not an error",
+			"subject": "scripts/copilot-launch.sh",
+			"find": ["if [ -n \"${ENTWURF_COPILOT_LAUNCH_ACTIVE:-}\" ]; then"],
+			"replace": ["if false; then"],
+			"gate": ["bash", "run.sh", "check-copilot-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-LAUNCH-REFUSES-RECURSION]",
+			"signatureSource": "scripts/check-copilot-launch.ts"
+		},
+		{
+			"claim": "COPILOT-LAUNCH-REFUSES-ABSENT-VENDOR",
+			"title": "not checking that the vendor resolved turns a missing CLI into an opaque exec failure instead of the one sentence that says what is missing",
+			"subject": "scripts/copilot-launch.sh",
+			"find": [
+				"[ -n \"$copilot_bin\" ] \\",
+				"\t|| fail \"no '$VENDOR_CMD' executable found on PATH.",
+				"  The managed launch runs the GitHub Copilot CLI; install it, or put it on PATH.\""
+			],
+			"replace": ["# an empty resolution will surface itself at exec time"],
+			"gate": ["bash", "run.sh", "check-copilot-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-LAUNCH-REFUSES-ABSENT-VENDOR]",
+			"signatureSource": "scripts/check-copilot-launch.ts"
+		},
+		{
+			"claim": "COPILOT-LAUNCH-KEEPS-CALLER-CWD",
+			"title": "dispatching the managed launch through the repo-scoped subshell every neighbouring verb uses would start the vendor in the entwurf checkout instead of the operator's own directory",
+			"subject": "run.sh",
+			"find": ["    shift || true", "    exec bash \"$REPO_DIR/scripts/copilot-launch.sh\" \"$@\""],
+			"replace": ["    shift || true", "    (cd \"$REPO_DIR\" && bash scripts/copilot-launch.sh \"$@\")"],
+			"gate": ["bash", "run.sh", "check-copilot-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-LAUNCH-KEEPS-CALLER-CWD]",
+			"signatureSource": "scripts/check-copilot-launch.ts"
+		},
+		{
+			"claim": "COPILOT-LAUNCH-STRIPS-PI-IDENTITY",
+			"title": "the managed launch forwards inherited PI_SESSION_ID/PI_AGENT_ID — the Copilot session and every child it spawns then speak under the PARENT pi citizen's garden id, with a perfectly correct native marker sitting unused beside it",
+			"subject": "scripts/copilot-launch.sh",
+			"find": ["unset PI_SESSION_ID PI_AGENT_ID\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-copilot-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-LAUNCH-STRIPS-PI-IDENTITY]",
+			"signatureSource": "scripts/check-copilot-launch.ts"
+		},
+		{
+			"claim": "COPILOT-LAUNCH-STRIPS-BOTH-CARRIERS",
+			"title": "only one half of the identity pair is cleared — the failure merely changes wording while a carrier stays behind for the next partial reader to believe",
+			"subject": "scripts/copilot-launch.sh",
+			"find": ["unset PI_SESSION_ID PI_AGENT_ID"],
+			"replace": ["unset PI_SESSION_ID"],
+			"gate": ["bash", "run.sh", "check-copilot-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-LAUNCH-STRIPS-BOTH-CARRIERS]",
+			"signatureSource": "scripts/check-copilot-launch.ts"
+		}
+	]
+}

package/scripts/mutants/copilot-receive.json

@@ -0,0 +1,263 @@
+{
+	"schemaVersion": 1,
+	"lane": "copilot-receive",
+	"mutants": [
+		{
+			"claim": "COPILOT-RECEIVE-VENDOR-ENTRY-NAME",
+			"title": "installing the receiver under any other file name produces a unit Copilot never discovers — the vendor scans subdirectories for `extension.mjs` and says nothing when it finds none",
+			"subject": "scripts/copilot-receive-bridge.sh",
+			"find": ["\tcp \"$SRC/extension.mjs\" \"$stage/extension.mjs\""],
+			"replace": ["\tcp \"$SRC/extension.mjs\" \"$stage/index.mjs\""],
+			"gate": ["bash", "run.sh", "check-copilot-receive-arm"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-RECEIVE-VENDOR-ENTRY-NAME]",
+			"signatureSource": "scripts/check-copilot-receive-arm.ts"
+		},
+		{
+			"claim": "COPILOT-RECEIVE-INSTALL-REFUSES-FOREIGN",
+			"title": "overwriting an unclaimed unit of the same name deletes somebody else's extension and installs ours in its place",
+			"subject": "scripts/copilot-receive-bridge.sh",
+			"find": [
+				"\tif [ -e \"$DEST\" ] && [ ! -f \"$STATE_FILE\" ]; then",
+				"\t\tfail \"$DEST already exists and no entwurf install-state claims it. Refusing to overwrite an extension this installer did not put there.\"",
+				"\tfi"
+			],
+			"replace": ["\t# an unclaimed unit is assumed to be ours"],
+			"gate": ["bash", "run.sh", "check-copilot-receive-arm"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-RECEIVE-INSTALL-REFUSES-FOREIGN]",
+			"signatureSource": "scripts/check-copilot-receive-arm.ts"
+		},
+		{
+			"claim": "COPILOT-RECEIVE-ARMS-AFTER-BIRTH",
+			"title": "arming only at join leaves every ordinary session unarmed forever: a Copilot citizen is born on its FIRST PROMPT, which is always after the extension has already joined",
+			"subject": "pi/copilot-receive/entwurf-receive/extension.mjs",
+			"find": [
+				"for (const type of [\"user.message\", \"assistant.turn_start\", \"assistant.message\", \"session.idle\"]) {",
+				"\tsession.on(type, () => armOnce(type));",
+				"}"
+			],
+			"replace": ["// one shot at join, no retry"],
+			"gate": ["bash", "run.sh", "check-copilot-receive-arm"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-RECEIVE-ARMS-AFTER-BIRTH]",
+			"signatureSource": "scripts/check-copilot-receive-arm.ts"
+		},
+		{
+			"claim": "COPILOT-RECEIVE-OWNER-IS-WATCHER",
+			"title": "naming the CLI as the marker's owner keeps a crashed extension 'armed' for as long as the TUI stays open — the citizen reads deliverable while nothing is watching its mailbox",
+			"subject": "pi/copilot-receive/entwurf-receive/extension.mjs",
+			"find": ["\t\t\townerPid: process.pid,"],
+			"replace": ["\t\t\townerPid: hostPid,"],
+			"gate": ["bash", "run.sh", "check-copilot-receive-arm"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-RECEIVE-OWNER-IS-WATCHER]",
+			"signatureSource": "scripts/check-copilot-receive-arm.ts"
+		},
+		{
+			"claim": "COPILOT-RECEIVE-WAKE-MODE-SELF-FETCH",
+			"title": "a copilot row that still says direct-inject routes every dispatch into the fail-closed refusal — the armed receiver exists and no reply can ever reach it",
+			"subject": "pi/entwurf-capabilities.json",
+			"find": [
+				"\t\t\"copilot\": { \"wakeMode\": \"self-fetch\", \"deliveryLevel\": \"D6\", \"nativeIdLabel\": \"sessionId\" },"
+			],
+			"replace": [
+				"\t\t\"copilot\": { \"wakeMode\": \"direct-inject\", \"deliveryLevel\": \"D6\", \"nativeIdLabel\": \"sessionId\" },"
+			],
+			"gate": ["bash", "run.sh", "check-copilot-receive-arm"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-RECEIVE-WAKE-MODE-SELF-FETCH]",
+			"signatureSource": "scripts/check-copilot-receive-arm.ts"
+		},
+		{
+			"claim": "COPILOT-RECEIVE-DOORBELL-NOT-BODY",
+			"title": "putting the message body in the doorbell turns a self-fetch announcement into an injection: untrusted content lands in the model's context with no read receipt, and `wakeMode: self-fetch` becomes a false label",
+			"subject": "pi/copilot-receive/entwurf-receive/extension.mjs",
+			"find": [
+				"\t\t\t\t\t`[entwurf inbox] ${unread} unread mailbox ${plural} available for garden ${armed.gardenId}. ` +"
+			],
+			"replace": [
+				"\t\t\t\t\t(await import(\"node:fs\")).readFileSync(path.join(armed.mailbox, `${fresh[0]}.delivered`), \"utf8\") +",
+				"\t\t\t\t\t`[entwurf inbox] ${unread} unread mailbox ${plural} available for garden ${armed.gardenId}. ` +"
+			],
+			"gate": ["bash", "run.sh", "check-copilot-receive-arm"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-RECEIVE-DOORBELL-NOT-BODY]",
+			"signatureSource": "scripts/check-copilot-receive-arm.ts"
+		},
+		{
+			"claim": "COPILOT-RECEIVE-NO-STALE-RERING",
+			"title": "ringing on any signal change re-announces a backlog the model already declined to read — every unrelated poke wakes an idle session for nothing",
+			"subject": "pi/copilot-receive/entwurf-receive/extension.mjs",
+			"find": ["\t\t\tif (fresh.length === 0) return;"],
+			"replace": ["\t\t\t// ring on every poke, fresh body or not"],
+			"gate": ["bash", "run.sh", "check-copilot-receive-arm"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-RECEIVE-NO-STALE-RERING]",
+			"signatureSource": "scripts/check-copilot-receive-arm.ts"
+		},
+		{
+			"claim": "COPILOT-RECEIVE-REFUSES-ID-DRIFT",
+			"title": "arming when the SDK session id disagrees with the marker's native id tells a sender that a reply lands in a session that will never see it",
+			"subject": "pi/copilot-receive/entwurf-receive/extension.mjs",
+			"find": [
+				"\tif (marker.nativeSessionId !== sessionId) {",
+				"\t\treturn {",
+				"\t\t\tidentity: null,",
+				"\t\t\treason: `id-drift marker=${marker.nativeSessionId} sdk=${sessionId}`,",
+				"\t\t};",
+				"\t}"
+			],
+			"replace": ["\t// a drifted id is tolerated: the marker wins"],
+			"gate": ["bash", "run.sh", "check-copilot-receive-arm"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-RECEIVE-REFUSES-ID-DRIFT]",
+			"signatureSource": "scripts/check-copilot-receive-arm.ts"
+		},
+		{
+			"claim": "COPILOT-RECEIVE-REFUSES-FOREIGN-PARENT",
+			"title": "trusting a parent-pid carrier that disagrees with the real parent lets a reparented or hand-run extension arm under somebody else's citizen",
+			"subject": "pi/copilot-receive/entwurf-receive/extension.mjs",
+			"find": [
+				"\tif (Number.isSafeInteger(declared) && declared > 0 && declared !== actual) {",
+				"\t\tlogLine(\"WARN\", `arm-refused: COPILOT_EXTENSION_PARENT_PID=${declared} disagrees with ppid ${actual}`);",
+				"\t\treturn null;",
+				"\t}"
+			],
+			"replace": ["\t// a disagreeing carrier is tolerated"],
+			"gate": ["bash", "run.sh", "check-copilot-receive-arm"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-RECEIVE-REFUSES-FOREIGN-PARENT]",
+			"signatureSource": "scripts/check-copilot-receive-arm.ts"
+		},
+		{
+			"claim": "COPILOT-RECEIVE-DEAD-EXTENSION-REFUSED",
+			"title": "dropping the receiver marker's liveness guard makes a dead watcher's marker read as an ACTIVE receiver — replies to a closed Copilot session are enqueued into a void and reported as delivered",
+			"subject": "pi-extensions/lib/meta-session.ts",
+			"find": [
+				"\t\t// as an ACTIVE RECEIVER and pull the mailbox rail into delivering to a void.",
+				"\t\tif (!isPlausibleOwnerPid(marker.ownerPid)) return null;",
+				"\t\tif (opts.verifyOwner !== false) {",
+				"\t\t\tconst liveKey = processStartKey(marker.ownerPid);",
+				"\t\t\tif (!liveKey || liveKey !== marker.ownerStartKey) return null;",
+				"\t\t}"
+			],
+			"replace": [
+				"\t\t// as an ACTIVE RECEIVER and pull the mailbox rail into delivering to a void.",
+				"\t\tif (!isPlausibleOwnerPid(marker.ownerPid)) return null;"
+			],
+			"gate": ["bash", "run.sh", "check-copilot-receive-arm"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-RECEIVE-DEAD-EXTENSION-REFUSED]",
+			"signatureSource": "scripts/check-copilot-receive-arm.ts"
+		},
+		{
+			"claim": "COPILOT-RECEIVE-DOCTOR-CATCHES-STALE-WRITER",
+			"title": "reporting a stale deployed writer as ordinary state hides the one failure that has no other symptom: the arm throws inside the extension and the citizen simply never becomes deliverable",
+			"subject": "scripts/copilot-receive-bridge.sh",
+			"find": [
+				"\t\t\t\tbad \"the deployed writer is STALE: unit has ${dep:0:12}, this checkout builds ${cur:0:12}. An arm can fail on a contract the deployed copy does not know, and the only symptom is a session that never becomes deliverable. Re-run ./run.sh install-copilot-receive\""
+			],
+			"replace": ["\t\t\t\tnote \"the deployed writer differs from this checkout's (${dep:0:12} vs ${cur:0:12})\""],
+			"gate": ["bash", "run.sh", "check-copilot-receive-arm"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-RECEIVE-DOCTOR-CATCHES-STALE-WRITER]",
+			"signatureSource": "scripts/check-copilot-receive-arm.ts"
+		},
+		{
+			"claim": "COPILOT-RECEIVE-DOCTOR-SEES-MISSING-FLAG",
+			"title": "downgrading a CLI launched without the scan flag to a note leaves the vendor's own silence unchallenged — the receiver is installed, nothing arms, and no surface anywhere says why",
+			"subject": "scripts/copilot-receive-bridge.sh",
+			"find": [
+				"\t\t\t\tbad \"$armed_missing live Copilot CLI process(es) lack $FLAG_ENV=$FLAG_VALUE while the receiver is installed (pids: $missing_pids) — relaunch them with 'entwurf copilot', or uninstall the receiver so nothing promises a doorbell\""
+			],
+			"replace": ["\t\t\t\tnote \"$armed_missing live Copilot CLI process(es) lack $FLAG_ENV=$FLAG_VALUE\""],
+			"gate": ["bash", "run.sh", "check-copilot-receive-arm"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-RECEIVE-DOCTOR-SEES-MISSING-FLAG]",
+			"signatureSource": "scripts/check-copilot-receive-arm.ts"
+		},
+		{
+			"claim": "COPILOT-RECEIVE-DOCTOR-PASSES-CLEAN-LOG",
+			"title": "a doctor that dies mid-script on a healthy host prints no verdict at all — under `set -euo pipefail` an unguarded no-match grep (exit 1) ends the run before the PASS line, so the operator cannot tell 'fine' from 'crashed' and the silent death returns with the first zero-count log",
+			"subject": "scripts/copilot-receive-bridge.sh",
+			"find": [
+				"\t\ttotal_err=\"$({ grep -c ' ERROR \\[copilot-receive\\] ' \"$RECEIVE_LOG\" 2>/dev/null || [ \"$?\" -eq 1 ]; } | head -1)\""
+			],
+			"replace": [
+				"\t\ttotal_err=\"$(grep -c ' ERROR \\[copilot-receive\\] ' \"$RECEIVE_LOG\" 2>/dev/null | head -1)\""
+			],
+			"gate": ["bash", "run.sh", "check-copilot-receive-arm"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-RECEIVE-DOCTOR-PASSES-CLEAN-LOG]",
+			"signatureSource": "scripts/check-copilot-receive-arm.ts"
+		},
+		{
+			"claim": "COPILOT-RECEIVE-DOCTOR-FINDS-EXECED-NATIVE",
+			"title": "identifying the CLI by command name finds nothing at all — the vendor shim execs node, so the surviving process never carries the name `copilot`, and the detector built to break a vendor silence reports the benign 'no live copilot' note forever",
+			"subject": "scripts/copilot-receive-bridge.sh",
+			"find": [
+				"\tis_native = any(\"/@github/copilot/\" in a and a.endswith(\".js\") for a in argv)",
+				"\tif not is_native and os.path.basename(argv[0]) == \"copilot\":",
+				"\t\tis_native = True"
+			],
+			"replace": ["\tis_native = os.path.basename(argv[0]) == \"copilot\""],
+			"gate": ["bash", "run.sh", "check-copilot-receive-arm"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-RECEIVE-DOCTOR-FINDS-EXECED-NATIVE]",
+			"signatureSource": "scripts/check-copilot-receive-arm.ts"
+		},
+		{
+			"claim": "COPILOT-RECEIVE-DOCTOR-EXCLUDES-EXTENSION-CHILD",
+			"title": "counting our own extension children as Copilot sessions makes the doctor blame the operator for sessions that do not exist — every armed receiver would report itself as a CLI launched without the scan flag",
+			"subject": "scripts/copilot-receive-bridge.sh",
+			"find": ["\tif any(a.endswith(\"extension.mjs\") for a in argv):", "\t\tcontinue"],
+			"replace": ["\t# an extension child is close enough to a session"],
+			"gate": ["bash", "run.sh", "check-copilot-receive-arm"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-RECEIVE-DOCTOR-EXCLUDES-EXTENSION-CHILD]",
+			"signatureSource": "scripts/check-copilot-receive-arm.ts"
+		},
+		{
+			"claim": "COPILOT-RECEIVE-DOCTOR-UNREADABLE-ENVIRON-IS-RED",
+			"title": "downgrading an identified CLI whose environment cannot be read to a note lets the doctor end in PASS while a session that can never arm is running — identity already succeeded, so 'unknown' here is the exact question the section exists to answer",
+			"subject": "scripts/copilot-receive-bridge.sh",
+			"find": [
+				"\t\t\t\tbad \"$unreadable live Copilot CLI process(es) have an unreadable environment (pids: $unreadable_pids) — their $FLAG_ENV state is UNKNOWN and is NOT assumed armed. Re-run this doctor as the user that owns those sessions.\""
+			],
+			"replace": [
+				"\t\t\t\tnote \"$unreadable live Copilot CLI process(es) have an unreadable environment (pids: $unreadable_pids) — their $FLAG_ENV state is UNKNOWN and is NOT assumed armed. Re-run this doctor as the user that owns those sessions.\""
+			],
+			"gate": ["bash", "run.sh", "check-copilot-receive-arm"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-RECEIVE-DOCTOR-UNREADABLE-ENVIRON-IS-RED]",
+			"signatureSource": "scripts/check-copilot-receive-arm.ts"
+		},
+		{
+			"claim": "COPILOT-RECEIVE-DOCTOR-OWNS-SCANNER-FAILURE",
+			"title": "letting the scanner's exit status reach the assignment under `set -e` kills the doctor mid-section: no verdict line is printed at all, so the operator cannot tell a healthy host from a broken doctor — the same silent-death shape this lane already fixed once in the log grep",
+			"subject": "scripts/copilot-receive-bridge.sh",
+			"find": ["PY\n)\" || scan_rc=$?"],
+			"replace": ["PY\n)\""],
+			"gate": ["bash", "run.sh", "check-copilot-receive-arm"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-RECEIVE-DOCTOR-OWNS-SCANNER-FAILURE]",
+			"signatureSource": "scripts/check-copilot-receive-arm.ts"
+		},
+		{
+			"claim": "COPILOT-RECEIVE-DOCTOR-PI-CARRIER-IS-RED",
+			"title": "downgrading inherited PI_SESSION_ID/PI_AGENT_ID to a note lets an armed Copilot speak under the parent pi garden id while the doctor still ends PASS — the flag axis cannot absorb this",
+			"subject": "scripts/copilot-receive-bridge.sh",
+			"find": [
+				"\t\t\t\tbad \"$contaminated live Copilot CLI process(es) inherited PI_SESSION_ID/PI_AGENT_ID (pids: $contaminated_pids) — they can speak under the PARENT pi citizen's garden id even with a correct native marker. Relaunch them with 'entwurf copilot', which unsets both before exec; a raw 'copilot' started from a pi citizen's shell is unsupported.\""
+			],
+			"replace": [
+				"\t\t\t\tnote \"$contaminated live Copilot CLI process(es) inherited PI_SESSION_ID/PI_AGENT_ID (pids: $contaminated_pids)\""
+			],
+			"gate": ["bash", "run.sh", "check-copilot-receive-arm"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-RECEIVE-DOCTOR-PI-CARRIER-IS-RED]",
+			"signatureSource": "scripts/check-copilot-receive-arm.ts"
+		}
+	]
+}

package/scripts/mutants/fresh-cut.json

@@ -0,0 +1,17 @@
+{
+	"schemaVersion": 1,
+	"lane": "fresh-cut",
+	"mutants": [
+		{
+			"claim": "FRESH-CUT-COLLISION-NO-MOVE",
+			"title": "preflighting only the FIRST planned destination lets an occupied second destination through: the cut renames over it and reports a clean generation",
+			"subject": "scripts/meta-bridge-fresh-cut.ts",
+			"find": ["\tconst collisions = plan.filter(({ dest }) => archiveDestOccupied(dest));"],
+			"replace": ["\tconst collisions = plan.slice(0, 1).filter(({ dest }) => archiveDestOccupied(dest));"],
+			"gate": ["bash", "run.sh", "check-fresh-cut-gate"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESH-CUT-COLLISION-NO-MOVE]",
+			"signatureSource": "scripts/check-fresh-cut-gate.sh"
+		}
+	]
+}