@junghanacs/entwurf 0.14.2 → 0.15.0

package/scripts/raw-async-delivery/copilot-enqueue-addressed.sh

@@ -0,0 +1,35 @@
+#!/usr/bin/env bash
+# Deliver an async message INTO one already-running, IDLE Copilot CLI session.
+#
+# Addressed by sessionId: only the named session's receiver sees the poke, so
+# siblings stay idle. Free — it is a file write plus a continuation of a session
+# that is already running; no `copilot -p` spawn is involved.
+#
+#   ./copilot-enqueue-addressed.sh <session_id> "your async message"
+#
+# The receiving session must be running the copilot-extension-receive extension
+# and must agree on COPILOT_MAILBOX_ROOT. `ready.json` is raw-probe discovery,
+# not production liveness authority: this script does not close stale pid/PID-reuse.
+# Inspect armed candidates with:
+#   ls "${COPILOT_MAILBOX_ROOT:-$HOME/.copilot/mailbox}"/*/ready.json
+set -euo pipefail
+
+root="${COPILOT_MAILBOX_ROOT:-$HOME/.copilot/mailbox}"
+session_id="${1:?usage: copilot-enqueue-addressed.sh <session_id> <message>}"
+shift
+message="${*:?usage: copilot-enqueue-addressed.sh <session_id> <message>}"
+
+box="$root/$session_id"
+# Refuse an address that never armed. A stale marker remains possible in this raw
+# probe; the managed product must add record-backed pid + start-key certification.
+if [[ ! -f "$box/ready.json" ]]; then
+	echo "no receiver marker at $box (no ready.json) — not queued" >&2
+	exit 1
+fi
+
+msg="$box/$(date +%s%N).msg"
+printf '%s\n' "$message" > "$msg"
+# The body lands before the doorbell rings, so the receiver never wakes to an
+# empty box.
+printf 'poke\n' >> "$box/inbox.signal"
+echo "queued-and-poked $msg (raw probe; extension log is the delivery receipt)"

package/scripts/raw-async-delivery/copilot-extension-receive/extension.mjs

@@ -0,0 +1,123 @@
+/**
+ * entwurf mailbox receiver — GitHub Copilot CLI extension.
+ *
+ * WHAT THIS REPLACES. The earlier Copilot probe reached the TUI through the
+ * hidden `--ui-server` loopback port, and that rail was refused admission for a
+ * reason no amount of care could fix from outside: its authentication was not
+ * established (an unauthenticated SDK client connected; a token-bearing one got
+ * AUTHENTICATION_NOT_CONFIGURED). This rail does not answer that objection — it
+ * removes it. An extension is forked by the CLI itself and speaks JSON-RPC over
+ * its own stdio, so there is no port, no token, and no listener to authenticate.
+ * The trust boundary is the process fork.
+ *
+ * WHAT IT DOES. `joinSession()` attaches to the CLI's foreground session; the
+ * extension then watches ONE per-session signal file and calls `session.send()`
+ * when it changes. `fs.watch` -> `session.send()` is the pattern the bundled SDK
+ * documents itself (copilot-sdk/docs/examples.md, "Detecting when the plan file
+ * is created or edited"), not a mechanism discovered by inspection.
+ *
+ * ADDRESSED, NEVER BROADCAST. Each receiver owns `<root>/<sessionId>/` and
+ * watches only its own signal, so a sender pokes exactly one session rather than
+ * broadcasting. A two-process isolation run was observed, but its decisive B log
+ * was not preserved; managed admission must rerun that D3 control.
+ *
+ * LAUNCH CONTRACT. Extensions sit behind an experimental feature flag; without
+ * it the CLI never scans for them and this file is inert with no error:
+ *
+ *   COPILOT_CLI_ENABLED_FEATURE_FLAGS=EXTENSIONS copilot --model auto
+ *
+ * `--experimental` is NOT required (measured separately). Discovery scopes are
+ * user (`~/.copilot/extensions/`), plugin, session, and — interactive mode only
+ * — project (`.github/extensions/`).
+ */
+
+import {
+	appendFileSync,
+	existsSync,
+	mkdirSync,
+	readdirSync,
+	readFileSync,
+	renameSync,
+	watch,
+	writeFileSync,
+} from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { joinSession } from "@github/copilot-sdk/extension";
+
+const root = process.env.COPILOT_MAILBOX_ROOT ?? join(homedir(), ".copilot", "mailbox");
+
+const session = await joinSession();
+const box = join(root, session.sessionId);
+mkdirSync(box, { recursive: true });
+const logPath = join(box, "ext.log");
+const log = (line) => appendFileSync(logPath, `${new Date().toISOString()} ${line}\n`);
+
+// The sender needs an address, and scraping ~/.copilot storage for one is what
+// the old command-hook probe failed at (its sessionStart input carries no
+// sessionId). The receiver publishes its own identity instead, so discovery is
+// a file this process wrote about itself rather than an inference about it.
+writeFileSync(
+	join(box, "ready.json"),
+	JSON.stringify(
+		{
+			sessionId: session.sessionId,
+			pid: process.pid,
+			cwd: process.cwd(),
+			armedAt: new Date().toISOString(),
+		},
+		null,
+		2,
+	),
+);
+
+const signal = join(box, "inbox.signal");
+if (!existsSync(signal)) writeFileSync(signal, "");
+log(`ARMED sessionId=${session.sessionId} signal=${signal}`);
+
+for (const type of ["user.message", "assistant.turn_start", "assistant.message", "session.idle"]) {
+	session.on(type, (event) => {
+		const d = event?.data ?? {};
+		log(
+			`EVENT ${type} ${JSON.stringify({
+				turnId: d.turnId,
+				content: typeof d.content === "string" ? d.content.slice(0, 200) : undefined,
+				source: d.source,
+			})}`,
+		);
+	});
+}
+
+// Serialized because a burst of writes to one signal file is normal and two
+// overlapping drains would rename the same `.msg` twice.
+let busy = false;
+async function drain(why) {
+	if (busy) return;
+	busy = true;
+	try {
+		const pending = readdirSync(box)
+			.filter((f) => f.endsWith(".msg"))
+			.sort();
+		for (const name of pending) {
+			const from = join(box, name);
+			const to = `${from}.delivered`;
+			// Rename BEFORE sending: a crash between the two loses one delivery,
+			// but sending before renaming would replay it on every later poke.
+			renameSync(from, to);
+			const body = readFileSync(to, "utf-8");
+			log(`DELIVER (${why}) ${name} bytes=${body.length}`);
+			await session.send({ prompt: body, mode: "enqueue" });
+			log(`SENT ${name}`);
+		}
+	} catch (err) {
+		log(`ERROR ${String(err)}`);
+	} finally {
+		busy = false;
+	}
+}
+
+watch(signal, () => {
+	void drain("signal");
+});
+// Messages that arrived while nothing was armed are still owed a delivery.
+void drain("startup");

package/scripts/smoke-copilot-mcp-state.sh

@@ -0,0 +1,153 @@
+#!/usr/bin/env bash
+# smoke-copilot-mcp-state — hermetic install/doctor/inverse contract for
+# the Copilot MCP-config adapter. No Copilot process or model turn.
+set -euo pipefail
+
+REPO_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+RUN="$REPO_DIR/run.sh"
+pass=0
+ok() { printf '  ok    %s\n' "$1"; pass=$((pass + 1)); }
+die() { printf 'FAIL: %s\n' "$1" >&2; exit 1; }
+want() { eval "$2" && ok "$1" || die "$1"; }
+
+REPO_BEFORE="$(cd "$REPO_DIR" && git status --porcelain)"
+SB="$(mktemp -d)"
+trap 'rm -rf "$SB"' EXIT
+export HOME="$SB/home"
+export XDG_DATA_HOME="$SB/xdg"
+export COPILOT_MCP_CONFIG="$HOME/.copilot/mcp-config.json"
+export COPILOT_MCP_COMMAND="entwurf-bridge"
+STATE="$XDG_DATA_HOME/entwurf/copilot-mcp/install-state.json"
+mkdir -p "$(dirname "$COPILOT_MCP_CONFIG")" "$SB/bin"
+
+write_mcp_fake() {
+  cat > "$1" <<'FAKE'
+#!/usr/bin/env bash
+while IFS= read -r line; do
+  case "$line" in
+    *'"id":1'*) printf '%s\n' '{"jsonrpc":"2.0","id":1,"result":{"protocolVersion":"2024-11-05","capabilities":{},"serverInfo":{"name":"fake-entwurf-bridge","version":"0"}}}' ;;
+    *'"id":2'*) printf '%s\n' '{"jsonrpc":"2.0","id":2,"result":{"tools":[{"name":"entwurf_v2"},{"name":"entwurf_self"},{"name":"entwurf_peers"},{"name":"entwurf_inbox_read"},{"name":"entwurf_register_native"},{"name":"entwurf_fresh_call"},{"name":"entwurf_resume_call"}]}}' ;;
+  esac
+done
+FAKE
+  chmod +x "$1"
+}
+write_dead_fake() {
+  cat > "$1" <<'FAKE'
+#!/usr/bin/env bash
+echo "bash: /nonexistent/entwurf-bridge: No such file or directory" >&2
+exit 127
+FAKE
+  chmod +x "$1"
+}
+write_mcp_fake "$SB/bin/$COPILOT_MCP_COMMAND"
+
+_clean_path=""
+while IFS= read -r dir; do
+  [ -n "$dir" ] || continue
+  [ -e "$dir/$COPILOT_MCP_COMMAND" ] || [ -L "$dir/$COPILOT_MCP_COMMAND" ] && continue
+  _clean_path="${_clean_path:+$_clean_path:}$dir"
+done < <(printf '%s\n' "$PATH" | tr ':' '\n')
+export PATH="$SB/bin:$_clean_path"
+
+write_config() {
+  printf '{\n  "mcpServers": {\n    "other": { "type": "local", "command": "keep-me" },\n    "entwurf-bridge": { "type": "local", "command": "manual-bridge", "args": [] }\n  }\n}\n' > "$COPILOT_MCP_CONFIG"
+}
+json() { python3 - "$COPILOT_MCP_CONFIG" "$@" <<'PY'
+import json, sys
+data = json.load(open(sys.argv[1]))
+mode = sys.argv[2]
+servers = data["mcpServers"]
+ours = {"type": "local", "command": "entwurf-bridge", "args": []}
+if mode == "installed":
+    assert servers["entwurf-bridge"] == ours
+    assert servers["other"] == {"type": "local", "command": "keep-me"}
+    assert set(data.keys()) == {"mcpServers"}
+elif mode == "manual":
+    assert servers["entwurf-bridge"] == {"type": "local", "command": "manual-bridge", "args": []}
+    assert servers["other"] == {"type": "local", "command": "keep-me"}
+elif mode == "created":
+    assert data == {"mcpServers": {"entwurf-bridge": ours}}
+else:
+    raise AssertionError(mode)
+PY
+}
+
+# Existing matching/manual config is adopted, not treated as a fresh file.
+write_config
+"$RUN" doctor-copilot-mcp >/dev/null
+want "unowned manual config doctor is an honest note" "[ $? -eq 0 ]"
+"$RUN" install-copilot-mcp >/dev/null
+json installed
+want "install adopts regular config and preserves unrelated servers" "[ $? -eq 0 ]"
+want "install writes state" "[ -f '$STATE' ]"
+"$RUN" doctor-copilot-mcp >/dev/null
+want "owned configured doctor is green" "[ $? -eq 0 ]"
+python3 - "$STATE" <<'PY'
+import json, sys
+state = json.load(open(sys.argv[1]))
+assert state["preimage"] == {"type": "local", "command": "manual-bridge", "args": []}
+assert state["serverKey"] == "entwurf-bridge"
+PY
+ok "first install captures manual entwurf-bridge preimage"
+"$RUN" install-copilot-mcp >/dev/null
+"$RUN" uninstall-copilot-mcp >/dev/null
+json manual
+want "reinstall keeps the first preimage for inverse" "[ $? -eq 0 ] && [ ! -f '$STATE' ]"
+
+# The live-host shape is already our command with no state: adopt that exact preimage too.
+write_config
+python3 -c 'import json,sys; p=sys.argv[1]; d=json.load(open(p)); d["mcpServers"]["entwurf-bridge"]={"type":"local","command":"entwurf-bridge","args":[]}; json.dump(d,open(p,"w"))' "$COPILOT_MCP_CONFIG"
+"$RUN" install-copilot-mcp >/dev/null
+python3 - "$STATE" <<'PY'
+import json, sys
+state = json.load(open(sys.argv[1]))
+assert state["preimage"] == {"type": "local", "command": "entwurf-bridge", "args": []}
+PY
+"$RUN" uninstall-copilot-mcp >/dev/null
+json installed
+want "matching manual Copilot MCP config is adopted and restored unchanged" "[ $? -eq 0 ] && [ ! -f '$STATE' ]"
+
+# State turns a later config drift into a red doctor rather than a silent pass.
+write_config
+"$RUN" install-copilot-mcp >/dev/null
+python3 -c 'import json,sys; p=sys.argv[1]; d=json.load(open(p)); d["mcpServers"]["entwurf-bridge"]={"type":"stdio","command":"entwurf-bridge","args":[]}; json.dump(d,open(p,"w"))' "$COPILOT_MCP_CONFIG"
+if "$RUN" doctor-copilot-mcp >/dev/null 2>&1; then die "type=stdio doctor should fail"; fi
+ok "state-present type=stdio entry is red"
+"$RUN" install-copilot-mcp >/dev/null
+python3 -c 'import json,sys; p=sys.argv[1]; d=json.load(open(p)); d["mcpServers"]["entwurf-bridge"]={"type":"local","command":"other","args":[]}; json.dump(d,open(p,"w"))' "$COPILOT_MCP_CONFIG"
+if "$RUN" doctor-copilot-mcp >/dev/null 2>&1; then die "command drift doctor should fail"; fi
+ok "state-present command drift is red"
+"$RUN" install-copilot-mcp >/dev/null
+
+# A stable-bin command that boots then dies is red without touching config.
+write_dead_fake "$SB/bin/$COPILOT_MCP_COMMAND"
+if "$RUN" doctor-copilot-mcp >/dev/null 2>&1; then die "dead command doctor should fail"; fi
+ok "state-present command that does not serve MCP is red"
+write_mcp_fake "$SB/bin/$COPILOT_MCP_COMMAND"
+"$RUN" uninstall-copilot-mcp >/dev/null
+json manual
+want "inverse restores manual config after drift repairs" "[ $? -eq 0 ] && [ ! -f '$STATE' ]"
+
+# Created-new is removed only when it still contains only the adapter's key.
+rm -f "$COPILOT_MCP_CONFIG"
+"$RUN" install-copilot-mcp >/dev/null
+json created
+"$RUN" uninstall-copilot-mcp >/dev/null
+want "created-new empty mcp-config is removed by inverse" "[ ! -e '$COPILOT_MCP_CONFIG' ] && [ ! -f '$STATE' ]"
+
+# A foreign/corrupt config file is never adopted or given a state record.
+printf '{"mcpServers":{}}\n' > "$SB/foreign.json"
+ln -s "$SB/foreign.json" "$COPILOT_MCP_CONFIG"
+if "$RUN" install-copilot-mcp >/dev/null 2>&1; then die "symlink install should refuse"; fi
+ok "symlink config is refused"
+want "symlink refusal leaves foreign config and no state" "! grep -q entwurf-bridge '$SB/foreign.json' && [ ! -f '$STATE' ]"
+rm -f "$COPILOT_MCP_CONFIG"
+printf 'not-json{{' > "$COPILOT_MCP_CONFIG"
+if "$RUN" install-copilot-mcp >/dev/null 2>&1; then die "corrupt install should fail"; fi
+ok "corrupt config fails loud"
+want "corrupt refusal writes no state" "[ ! -f '$STATE' ]"
+
+REPO_AFTER="$(cd "$REPO_DIR" && git status --porcelain)"
+[ "$REPO_BEFORE" = "$REPO_AFTER" ] || die "smoke changed the checkout"
+printf '\nsmoke-copilot-mcp-state: %d checks passed\n' "$pass"

package/scripts/smoke-copilot-statusline-state.sh

@@ -0,0 +1,131 @@
+#!/usr/bin/env bash
+# smoke-copilot-statusline-state — hermetic install/doctor/inverse contract for
+# the Copilot custom-footer settings adapter. No Copilot process or model turn.
+set -euo pipefail
+
+REPO_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+RUN="$REPO_DIR/run.sh"
+pass=0
+ok() { printf '  ok    %s\n' "$1"; pass=$((pass + 1)); }
+die() { printf 'FAIL: %s\n' "$1" >&2; exit 1; }
+want() { eval "$2" && ok "$1" || die "$1"; }
+
+REPO_BEFORE="$(cd "$REPO_DIR" && git status --porcelain)"
+SB="$(mktemp -d)"
+trap 'rm -rf "$SB"' EXIT
+export HOME="$SB/home"
+export XDG_DATA_HOME="$SB/xdg"
+export COPILOT_SETTINGS_CONFIG="$HOME/.copilot/settings.json"
+export COPILOT_STATUSLINE_COMMAND="entwurf-copilot-statusline"
+STATE="$XDG_DATA_HOME/entwurf/copilot-statusline/install-state.json"
+mkdir -p "$(dirname "$COPILOT_SETTINGS_CONFIG")" "$SB/bin"
+printf '#!/usr/bin/env bash\necho fake-copilot-statusline\n' > "$SB/bin/$COPILOT_STATUSLINE_COMMAND"
+chmod +x "$SB/bin/$COPILOT_STATUSLINE_COMMAND"
+
+_clean_path=""
+while IFS= read -r dir; do
+  [ -n "$dir" ] || continue
+  [ -e "$dir/$COPILOT_STATUSLINE_COMMAND" ] || [ -L "$dir/$COPILOT_STATUSLINE_COMMAND" ] && continue
+  _clean_path="${_clean_path:+$_clean_path:}$dir"
+done < <(printf '%s\n' "$PATH" | tr ':' '\n')
+export PATH="$SB/bin:$_clean_path"
+
+write_settings() {
+  printf '{\n  "enabledPlugins": { "other@marketplace": true },\n  "footer": { "showCustom": true, "showDirectory": true },\n  "statusLine": { "command": "manual-statusline" }\n}\n' > "$COPILOT_SETTINGS_CONFIG"
+}
+json() { python3 - "$COPILOT_SETTINGS_CONFIG" "$@" <<'PY'
+import json, sys
+settings = json.load(open(sys.argv[1]))
+mode = sys.argv[2]
+if mode == "installed":
+    assert settings["statusLine"] == {"command": "entwurf-copilot-statusline"}
+    assert settings["footer"] == {"showCustom": True, "showDirectory": True}
+    assert settings["enabledPlugins"] == {"other@marketplace": True}
+elif mode == "manual":
+    assert settings["statusLine"] == {"command": "manual-statusline"}
+    assert settings["footer"] == {"showCustom": True, "showDirectory": True}
+elif mode == "created":
+    assert settings == {"statusLine": {"command": "entwurf-copilot-statusline"}, "footer": {"showCustom": True}}
+else:
+    raise AssertionError(mode)
+PY
+}
+
+# Existing matching/manual settings are adopted, not treated as a fresh file.
+write_settings
+"$RUN" doctor-copilot-statusline >/dev/null
+want "unowned manual settings doctor is an honest note" "[ $? -eq 0 ]"
+"$RUN" install-copilot-statusline >/dev/null
+json installed
+want "install adopts regular settings and preserves unrelated keys" "[ $? -eq 0 ]"
+want "install writes state" "[ -f '$STATE' ]"
+python3 - "$STATE" <<'PY'
+import json, sys
+state = json.load(open(sys.argv[1]))
+assert state["statusLinePreimage"] == {"command": "manual-statusline"}
+assert state["showCustomPreimage"] is True
+PY
+ok "first install captures manual statusLine preimage"
+"$RUN" install-copilot-statusline >/dev/null
+"$RUN" uninstall-copilot-statusline >/dev/null
+json manual
+want "reinstall keeps the first preimage for inverse" "[ $? -eq 0 ] && [ ! -f '$STATE' ]"
+
+# The live-host shape is already our command with no state: adopt that exact preimage too.
+write_settings
+python3 -c 'import json,sys; p=sys.argv[1]; d=json.load(open(p)); d["statusLine"]={"command":"entwurf-copilot-statusline"}; json.dump(d,open(p,"w"))' "$COPILOT_SETTINGS_CONFIG"
+"$RUN" install-copilot-statusline >/dev/null
+python3 - "$STATE" <<'PY'
+import json, sys
+state = json.load(open(sys.argv[1]))
+assert state["statusLinePreimage"] == {"command": "entwurf-copilot-statusline"}
+assert state["showCustomPreimage"] is True
+PY
+"$RUN" uninstall-copilot-statusline >/dev/null
+json installed
+want "matching manual Copilot config is adopted and restored unchanged" "[ $? -eq 0 ] && [ ! -f '$STATE' ]"
+
+# State turns a later setting drift into a red doctor rather than a silent pass.
+write_settings
+"$RUN" install-copilot-statusline >/dev/null
+python3 -c 'import json,sys; p=sys.argv[1]; d=json.load(open(p)); d["footer"]["showCustom"]=False; json.dump(d,open(p,"w"))' "$COPILOT_SETTINGS_CONFIG"
+if "$RUN" doctor-copilot-statusline >/dev/null 2>&1; then die "custom-disabled doctor should fail"; fi
+ok "state-present custom-disabled footer is red"
+"$RUN" install-copilot-statusline >/dev/null
+python3 -c 'import json,sys; p=sys.argv[1]; d=json.load(open(p)); d["statusLine"]={"command":"other"}; json.dump(d,open(p,"w"))' "$COPILOT_SETTINGS_CONFIG"
+if "$RUN" doctor-copilot-statusline >/dev/null 2>&1; then die "statusLine drift doctor should fail"; fi
+ok "state-present statusLine drift is red"
+"$RUN" install-copilot-statusline >/dev/null
+
+# A stable-bin command that stops resolving is red without touching settings.
+rm -f "$SB/bin/$COPILOT_STATUSLINE_COMMAND"
+if "$RUN" doctor-copilot-statusline >/dev/null 2>&1; then die "dangling command doctor should fail"; fi
+ok "dangling bare command is red"
+printf '#!/usr/bin/env bash\nexit 0\n' > "$SB/bin/$COPILOT_STATUSLINE_COMMAND"
+chmod +x "$SB/bin/$COPILOT_STATUSLINE_COMMAND"
+"$RUN" uninstall-copilot-statusline >/dev/null
+json manual
+want "inverse restores manual settings after drift repairs" "[ $? -eq 0 ] && [ ! -f '$STATE' ]"
+
+# Created-new is removed only when it still contains only the adapter's keys.
+rm -f "$COPILOT_SETTINGS_CONFIG"
+"$RUN" install-copilot-statusline >/dev/null
+json created
+"$RUN" uninstall-copilot-statusline >/dev/null
+want "created-new empty settings file is removed by inverse" "[ ! -e '$COPILOT_SETTINGS_CONFIG' ] && [ ! -f '$STATE' ]"
+
+# A foreign/corrupt settings file is never adopted or given a state record.
+printf '{"footer":{}}\n' > "$SB/foreign.json"
+ln -s "$SB/foreign.json" "$COPILOT_SETTINGS_CONFIG"
+if "$RUN" install-copilot-statusline >/dev/null 2>&1; then die "symlink install should refuse"; fi
+ok "symlink settings are refused"
+want "symlink refusal leaves foreign settings and no state" "! grep -q statusLine '$SB/foreign.json' && [ ! -f '$STATE' ]"
+rm -f "$COPILOT_SETTINGS_CONFIG"
+printf 'not-json{{' > "$COPILOT_SETTINGS_CONFIG"
+if "$RUN" install-copilot-statusline >/dev/null 2>&1; then die "corrupt install should fail"; fi
+ok "corrupt settings fail loud"
+want "corrupt refusal writes no state" "[ ! -f '$STATE' ]"
+
+REPO_AFTER="$(cd "$REPO_DIR" && git status --porcelain)"
+[ "$REPO_BEFORE" = "$REPO_AFTER" ] || die "smoke changed the checkout"
+printf '\nsmoke-copilot-statusline-state: %d checks passed\n' "$pass"

package/scripts/smoke-mux-fresh-call-live.ts

@@ -213,6 +213,8 @@ async function main(): Promise<void> {
 		// onboarding instead of exercising the configured runtime. Separate servers preserve
 		// those backend-native environments without adding an env carrier to the product.
 		const nonces = new Map<string, string>();
+		// Intentional: pi + claude-code only. Copilot clause-7 LIVE is operator-metered
+		// and is not a release MUST — do not add `copilot` to this loop (VERIFY.md).
 		for (const backend of ["pi", "claude-code"] as const) {
 			const socket = path.join(root, `${backend}.sock`);
 			privateSockets.add(socket);

package/scripts/smoke-mux-lifecycle-live.ts

@@ -557,7 +557,9 @@ async function main(): Promise<void> {
 			return sender;
 		}
 
-		/** One private tmux server per CELL, plus the client env that anchors into it. */
+		/** One private tmux server per CELL, plus the client env that anchors into it.
+		 * Intentional: pi + claude-code only. Copilot clause-7 LIVE is operator-metered
+		 * and is not a release MUST — do not widen this type (VERIFY.md). */
 		function startPrivateServer(
 			cell: string,
 			backend: "pi" | "claude-code",

package/scripts/tsconfig.json

@@ -30,6 +30,7 @@
 		"../pi-extensions/lib/**/*.ts",
 		"../pi-extensions/model-lock.ts",
 		"../pi-extensions/meta-bridge-hook.ts",
+		"../pi-extensions/meta-bridge-hook-copilot.ts",
 		"../mcp/entwurf-bridge/src/resume-mode.ts"
 	]
 }