@junghanacs/entwurf 0.15.0 → 0.16.0

package/scripts/mutants/copilot-birth.json

@@ -94,10 +94,10 @@
 		},
 		{
 			"claim": "HOOK-LOG-RAIL-SCOPED",
-			"title": "an untagged ERROR grep lets a Copilot fail-closed refusal redden the CLAUDE doctor forever — copilot's recovery token cannot exist on that rail",
+			"title": "dropping the copilot tag from the shared-hook-log filter lets a Copilot fail-closed refusal redden the CLAUDE doctor forever \u2014 copilot's recovery token cannot exist on that rail",
 			"subject": "scripts/meta-bridge-hook-log.sh",
-			"find": ["  own=\"$(grep -v ' \\[copilot\\] ' \"$log\" 2>/dev/null || true)\""],
-			"replace": ["  own=\"$(cat \"$log\" 2>/dev/null || true)\""],
+			"find": ["  own=\"$(grep -v -e ' \\[copilot\\] ' -e ' \\[omp\\] ' \"$log\" 2>/dev/null || true)\""],
+			"replace": ["  own=\"$(grep -v ' \\[omp\\] ' \"$log\" 2>/dev/null || true)\""],
 			"gate": ["bash", "run.sh", "check-meta-doctor-oracle"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:HOOK-LOG-RAIL-SCOPED]",
@@ -132,9 +132,11 @@
 			"title": "closing the reader half leaves the writer talking to nobody — the hook writes a copilot marker, the bridge never looks in that directory, and the citizen's sends are refused as anonymous (the #46 shape, which is why writer and reader open in one change)",
 			"subject": "pi-extensions/lib/meta-sender-identity.ts",
 			"find": [
-				"export const META_SENDER_BACKENDS: readonly MetaBackend[] = [\"claude-code\", \"antigravity\", \"copilot\"];"
+				"export const META_SENDER_BACKENDS: readonly MetaBackend[] = [\"claude-code\", \"antigravity\", \"copilot\", \"omp\"];"
+			],
+			"replace": [
+				"export const META_SENDER_BACKENDS: readonly MetaBackend[] = [\"claude-code\", \"antigravity\", \"omp\"];"
 			],
-			"replace": ["export const META_SENDER_BACKENDS: readonly MetaBackend[] = [\"claude-code\", \"antigravity\"];"],
 			"gate": ["bash", "run.sh", "check-copilot-birth-hook"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:COPILOT-SENDER-READER-OPEN]",
@@ -150,6 +152,95 @@
 			"timeoutSeconds": 300,
 			"signature": "[QK:COPILOT-INSTALL-LIST-FAILURE-IS-FATAL]",
 			"signatureSource": "scripts/check-copilot-birth-hook.ts"
+		},
+		{
+			"claim": "COPILOT-BIRTH-INVERSE-NO-STATE",
+			"title": "the inverse runs as a blind best-effort remove with NO ownership state, deleting vendor registrations this package cannot prove it owns",
+			"subject": "scripts/copilot-bridge-uninstall.sh",
+			"find": [
+				"[ -f \"$STATE_FILE\" ] || die \"no ownership state at $STATE_FILE — nothing this package provably owns to remove. A legacy no-state installation is adopted by './run.sh install-copilot-bridge' first, then removed.\""
+			],
+			"replace": [
+				"[ -f \"$STATE_FILE\" ] || { copilot plugin uninstall \"$QUALIFIED\" >/dev/null 2>&1 || true; copilot plugin marketplace remove \"$MKT_NAME\" >/dev/null 2>&1 || true; rm -rf \"$ASM\"; exit 0; }"
+			],
+			"gate": ["bash", "run.sh", "check-copilot-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-BIRTH-INVERSE-NO-STATE]",
+			"signatureSource": "scripts/check-copilot-birth-hook.ts"
+		},
+		{
+			"claim": "COPILOT-BIRTH-INVERSE-FOREIGN",
+			"title": "the inverse removes a marketplace that carries our name but is registered at ANOTHER path — someone else's registration deleted by our uninstall",
+			"subject": "scripts/copilot-bridge-uninstall.sh",
+			"find": [
+				"  if [ \"$MKT_PATH\" != \"$ASM\" ]; then\n    die \"a marketplace named '$MKT_NAME' is registered at '$MKT_PATH', not at the recorded assembly ($ASM). That registration is not provably ours — refusing with zero vendor/filesystem writes; inspect 'copilot plugin marketplace list' manually.\"\n  fi"
+			],
+			"replace": ["  :"],
+			"gate": ["bash", "run.sh", "check-copilot-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-BIRTH-INVERSE-FOREIGN]",
+			"signatureSource": "scripts/check-copilot-birth-hook.ts"
+		},
+		{
+			"claim": "COPILOT-MKT-DUPLICATE-REFUSED",
+			"title": "the marketplace-row parser silently returns the FIRST of several same-named rows instead of refusing the ambiguity — the retired grep|head -1 behavior, re-planted: a second marketplace with our name steers every path check at whichever row happens to print first (#86 C3a corrective amendment, B defect 2)",
+			"subject": "scripts/copilot-bridge-oracle.sh",
+			"find": [
+				"if len(paths) > 1:\n    print(f\"multiple marketplace rows named {name}: paths {paths} — duplicates are ambiguity nobody may act on\", file=sys.stderr)\n    sys.exit(1)\nprint(f\"one {paths[0]}\" if paths else \"absent\")"
+			],
+			"replace": ["print(f\"one {paths[0]}\" if paths else \"absent\")"],
+			"gate": ["bash", "run.sh", "check-copilot-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-MKT-DUPLICATE-REFUSED]",
+			"signatureSource": "scripts/check-copilot-birth-hook.ts"
+		},
+		{
+			"claim": "COPILOT-MALFORMED-ROW-NOT-ABSENT",
+			"title": "a truncated/garbled exact plugin row falls through the parser and rounds to ABSENT, which the inverse reads as retry-safe absence and continues past — the exact fall-through B reproduced (`(v0.1` with no closing paren) against 47a5ae3 (#86 C3a corrective amendment, B defect 3)",
+			"subject": "scripts/copilot-bridge-oracle.sh",
+			"find": [
+				"    if not (rest.startswith(\"(v\") and rest.endswith(\")\")):\n        print(f\"malformed exact row for {qualified}: {row!r} does not parse as '<qualified> (v<version>)'\", file=sys.stderr)\n        sys.exit(1)"
+			],
+			"replace": ["    if not (rest.startswith(\"(v\") and rest.endswith(\")\")):\n        continue"],
+			"gate": ["bash", "run.sh", "check-copilot-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-MALFORMED-ROW-NOT-ABSENT]",
+			"signatureSource": "scripts/check-copilot-birth-hook.ts"
+		},
+		{
+			"claim": "COPILOT-STATE-VERSION-WHITESPACE",
+			"title": "the state validator accepts a pluginVersion carrying whitespace, so the space-separated fact transport (`cut -d' ' -f3`) truncates it into a FABRICATED version and consumers act on a value the state never recorded (#86 C3a corrective amendment, B defect 4)",
+			"subject": "scripts/copilot-bridge-oracle.sh",
+			"find": ["if any(ord(c) < 0x21 or ord(c) == 0x7f for c in state[\"pluginVersion\"]):"],
+			"replace": ["if False and state[\"pluginVersion\"]:"],
+			"gate": ["bash", "run.sh", "check-copilot-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-STATE-VERSION-WHITESPACE]",
+			"signatureSource": "scripts/check-copilot-birth-hook.ts"
+		},
+		{
+			"claim": "COPILOT-DOCTOR-ORACLE-CONSUMED",
+			"title": "the doctor's structural verdict stops consulting the shared oracle and reads every assembly as green, so a unit install/adopt would refuse (broken hooks.json, unbaked launcher) doctors as healthy — the second-parser drift B flagged, taken to its end state (#86 C3a corrective amendment, B defect 1)",
+			"subject": "scripts/copilot-bridge-doctor.sh",
+			"find": ["if ORACLE_REASON=\"$(copilot_assembly_valid \"$ASM\" \"$PLUGIN\" 2>&1)\"; then"],
+			"replace": ["if ORACLE_REASON=\"\"; then"],
+			"gate": ["bash", "run.sh", "check-copilot-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-DOCTOR-ORACLE-CONSUMED]",
+			"signatureSource": "scripts/check-copilot-birth-hook.ts"
+		},
+		{
+			"claim": "COPILOT-BIRTH-NO-FALSE-ABSENCE",
+			"title": "the inverse reads a FAILING `copilot plugin list` as an empty host and reports a clean removal over a host whose real contents nobody read",
+			"subject": "scripts/copilot-bridge-uninstall.sh",
+			"find": [
+				"if ! INSTALLED_LIST=\"$(copilot plugin list 2>/dev/null)\"; then\n  die \"'copilot plugin list' failed, so this host's installed plugins are UNKNOWN — refusing with zero writes. Fix the Copilot CLI error and re-run.\"\nfi"
+			],
+			"replace": ["INSTALLED_LIST=\"$(copilot plugin list 2>/dev/null)\" || INSTALLED_LIST=\"\""],
+			"gate": ["bash", "run.sh", "check-copilot-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:COPILOT-BIRTH-NO-FALSE-ABSENCE]",
+			"signatureSource": "scripts/check-copilot-birth-hook.ts"
 		}
 	]
 }

package/scripts/mutants/mux-fresh-call.json

@@ -6,8 +6,8 @@
 			"claim": "FRESHCALL-PI-ARGV-PROMPT-FIRST",
 			"title": "pi gets the flag before the prompt again — the measured shape that opens a window whose first turn never runs",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [prompt, \"--entwurf-control\", \"--model\", model];"],
-			"replace": ["\t\t\treturn [\"--entwurf-control\", prompt, \"--model\", model];"],
+			"find": ["\t\t\treturn [composition.prompt, \"--entwurf-control\", \"--model\", model];"],
+			"replace": ["\t\t\treturn [\"--entwurf-control\", composition.prompt, \"--model\", model];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:FRESHCALL-PI-ARGV-PROMPT-FIRST]",
@@ -18,10 +18,10 @@
 			"title": "claude-code goes back to the variadic space form, which swallows the prompt as an option value",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
 			"find": [
-				"\t\t\treturn [prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`, `--model=${model}`];"
+				"\t\t\treturn [composition.prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`, `--model=${model}`];"
 			],
 			"replace": [
-				"\t\t\treturn [prompt, \"--allowedTools\", FRESH_CALL_CALLBACK_TOOL[\"claude-code\"], `--model=${model}`];"
+				"\t\t\treturn [composition.prompt, \"--allowedTools\", FRESH_CALL_CALLBACK_TOOL[\"claude-code\"], `--model=${model}`];"
 			],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
@@ -32,8 +32,8 @@
 			"claim": "FRESHCALL-PI-MODEL-ARGV",
 			"title": "pi drops its measured two-token model option and silently resolves its ambient default again",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [prompt, \"--entwurf-control\", \"--model\", model];"],
-			"replace": ["\t\t\treturn [prompt, \"--entwurf-control\"];"],
+			"find": ["\t\t\treturn [composition.prompt, \"--entwurf-control\", \"--model\", model];"],
+			"replace": ["\t\t\treturn [composition.prompt, \"--entwurf-control\"];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:FRESHCALL-PI-MODEL-ARGV]",
@@ -43,8 +43,8 @@
 			"claim": "FRESHCALL-PI-MODEL-DIALECT",
 			"title": "pi model argv is unified with Claude Code into the equals form that the real Pi parser rejects",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [prompt, \"--entwurf-control\", \"--model\", model];"],
-			"replace": ["\t\t\treturn [prompt, \"--entwurf-control\", `--model=${model}`];"],
+			"find": ["\t\t\treturn [composition.prompt, \"--entwurf-control\", \"--model\", model];"],
+			"replace": ["\t\t\treturn [composition.prompt, \"--entwurf-control\", `--model=${model}`];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:FRESHCALL-PI-MODEL-DIALECT]",
@@ -55,9 +55,9 @@
 			"title": "Claude Code drops the explicit model token and silently resolves its ambient Opus default again",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
 			"find": [
-				"\t\t\treturn [prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`, `--model=${model}`];"
+				"\t\t\treturn [composition.prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`, `--model=${model}`];"
 			],
-			"replace": ["\t\t\treturn [prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`];"],
+			"replace": ["\t\t\treturn [composition.prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:FRESHCALL-CLAUDE-MODEL-ARGV]",
@@ -240,8 +240,8 @@
 			"claim": "FRESHCALL-COPILOT-ARGV-INTERACTIVE",
 			"title": "the Copilot prompt rides -p instead of --interactive — the turn runs and the CLI EXITS, closing the window on a sibling that was supposed to stay open",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--model\", model, \"--yolo\"];"],
-			"replace": ["\t\t\treturn [\"copilot\", \"-p\", prompt, \"--model\", model, \"--yolo\"];"],
+			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--model\", model, \"--yolo\"];"],
+			"replace": ["\t\t\treturn [\"copilot\", \"-p\", composition.prompt, \"--model\", model, \"--yolo\"];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESHCALL-COPILOT-ARGV-INTERACTIVE]",
@@ -251,8 +251,8 @@
 			"claim": "FRESHCALL-COPILOT-MODEL-ARGV",
 			"title": "the Copilot argv drops the explicit model — the managed launcher then injects `--model auto` and the caller's model choice is silently discarded",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--model\", model, \"--yolo\"];"],
-			"replace": ["\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--yolo\"];"],
+			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--model\", model, \"--yolo\"];"],
+			"replace": ["\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--yolo\"];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESHCALL-COPILOT-MODEL-ARGV]",
@@ -262,9 +262,9 @@
 			"claim": "FRESHCALL-COPILOT-YOLO-POLICY",
 			"title": "the policy token narrows back to the callback-only --allow-tool grant — the exact regression GLG measured on 2026-08-25: no YOLO in the footer, a confirmation prompt at every task tool, an impractical sibling",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--model\", model, \"--yolo\"];"],
+			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--model\", model, \"--yolo\"];"],
 			"replace": [
-				"\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--model\", model, \"--allow-tool=entwurf-bridge(entwurf_v2)\"];"
+				"\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--model\", model, \"--allow-tool=entwurf-bridge(entwurf_v2)\"];"
 			],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
@@ -312,8 +312,8 @@
 			"claim": "FRESHCALL-BACKEND-SET-SURFACE-PARITY",
 			"title": "a backend the composition can open is missing from the MCP surface enum — the capability exists and no external host can reach it",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": ["\t\t\t.enum([\"pi\", \"claude-code\", \"copilot\"])"],
-			"replace": ["\t\t\t.enum([\"pi\", \"claude-code\"])"],
+			"find": ["\t\t\t.enum([\"pi\", \"claude-code\", \"copilot\", \"omp\"])"],
+			"replace": ["\t\t\t.enum([\"pi\", \"claude-code\", \"copilot\"])"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESHCALL-BACKEND-SET-SURFACE-PARITY]",
@@ -421,8 +421,8 @@
 			"claim": "FRESHCALL-COPILOT-EXPLICIT-POLICY",
 			"title": "the composition stops stating its policy and silently leans on the launcher to inject --yolo — the effective profile survives but the fresh contract loses its explicit permission statement",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--model\", model, \"--yolo\"];"],
-			"replace": ["\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--model\", model];"],
+			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--model\", model, \"--yolo\"];"],
+			"replace": ["\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--model\", model];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESHCALL-COPILOT-EXPLICIT-POLICY]",
@@ -432,8 +432,8 @@
 			"claim": "FRESHCALL-BACKEND-SET-SURFACE-PARITY-PI",
 			"title": "a backend the composition can open is missing from the native pi surface enum — an in-process pi session cannot name a capability the module already opens",
 			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\", \"copilot\"], {"],
-			"replace": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\"], {"],
+			"find": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\", \"copilot\", \"omp\"], {"],
+			"replace": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\", \"copilot\"], {"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESHCALL-BACKEND-SET-SURFACE-PARITY-PI]",

package/scripts/mutants/omp-birth.json

@@ -0,0 +1,173 @@
+{
+	"schemaVersion": 1,
+	"lane": "omp-birth",
+	"mutants": [
+		{
+			"claim": "OMP-BIRTH-TUI-MINTS",
+			"title": "a birth unit whose host predicate is not the vendor's tui mode mints nothing for the operator's own session — the visible sibling never becomes a citizen",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["const HOST_MODE = \"tui\";"],
+			"replace": ["const HOST_MODE = \"print\";"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BIRTH-TUI-MINTS]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-BIRTH-SCOPE-FENCE",
+			"title": "a fence that admits `print` gives every task subagent its own garden id — each visible omp session would mint a citizen per internal agent, which is the exact thing #87 exists to prevent",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\tif (ctx.mode !== HOST_MODE) {"],
+			"replace": ["\tif (ctx.mode !== HOST_MODE && ctx.mode !== \"print\") {"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BIRTH-SCOPE-FENCE]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-BIRTH-BINDS-BOTH-EDGES",
+			"title": "binding only session_start leaves every post-/new, forked and in-TUI-resumed session unminted while its status line still shows the previous citizen's id (the switch edge is where those re-fire, audit C2)",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": [
+				"\tpi.on(\"session_switch\", (event, ctx) =>",
+				"\t\tonBirthEdge(`session_switch(${asNonEmptyString(event?.reason) || \"unlabeled\"})`, ctx, pi),",
+				"\t);"
+			],
+			"replace": ["\t// session_switch left unbound"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BIRTH-BINDS-BOTH-EDGES]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-BIRTH-SHOWS-GARDEN-ID",
+			"title": "a citizen whose garden id never reaches the vendor's own status surface has an address visible only by scraping records — not lifecycle parity (adding-a-harness.md step 4)",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\t\tshowGardenId(ctx, result.record.gardenId);"],
+			"replace": ["\t\t// visible identity dropped"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BIRTH-SHOWS-GARDEN-ID]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-SENDER-MARKER-OWN-PID",
+			"title": "keying the marker to process.ppid copies the exec'd backends' parent join into a runtime that has no launcher — the marker names the shell that started omp, and no bridge child ever looks there",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\tconst ownerPid = process.pid;"],
+			"replace": ["\tconst ownerPid = process.ppid;"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-SENDER-MARKER-OWN-PID]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-SENDER-READER-OPEN",
+			"title": "a backend whose hook writes a marker but is absent from the reader list is INVISIBLE — the bridge holds the owner pid, never looks in that directory, and every send is refused as anonymous for a reason nothing logs (the #46 defect)",
+			"subject": "pi-extensions/lib/meta-sender-identity.ts",
+			"find": [
+				"export const META_SENDER_BACKENDS: readonly MetaBackend[] = [\"claude-code\", \"antigravity\", \"copilot\", \"omp\"];"
+			],
+			"replace": [
+				"export const META_SENDER_BACKENDS: readonly MetaBackend[] = [\"claude-code\", \"antigravity\", \"copilot\"];"
+			],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-SENDER-READER-OPEN]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-BIRTH-DOES-NOT-ARM-RECEIVER",
+			"title": "birth arming a receiver claims a live process holds a watch that nothing holds — the citizen reads DELIVERABLE, wired to nothing, for as long as the TUI stays open. This plants a REAL record-bound marker the certified reader accepts (an empty meta-receivers/ directory arms nothing and would be killed for the wrong reason)",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\t\twriteOmpSenderMarker(result.record.gardenId, envelope);"],
+			"replace": [
+				"\t\twriteOmpSenderMarker(result.record.gardenId, envelope);",
+				"\t\tconst receiversDir = roots().receiversDir;",
+				"\t\tfs.mkdirSync(receiversDir, { recursive: true });",
+				"\t\tfs.writeFileSync(",
+				"\t\t\tpath.join(receiversDir, `${result.record.gardenId}.json`),",
+				"\t\t\t`${JSON.stringify({",
+				"\t\t\t\tgardenId: result.record.gardenId,",
+				"\t\t\t\tbackend: BACKEND,",
+				"\t\t\t\tnativeSessionId: envelope.nativeSessionId,",
+				"\t\t\t\townerPid: process.pid,",
+				"\t\t\t\townerStartKey: \"planted-by-mutant\",",
+				"\t\t\t\townerKind: \"omp-tui\",",
+				"\t\t\t\tarmProvenance: \"session-start\",",
+				"\t\t\t\tupdatedAt: new Date().toISOString(),",
+				"\t\t\t})}\\n`,",
+				"\t\t);"
+			],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BIRTH-DOES-NOT-ARM-RECEIVER]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-BIRTH-CWD-DISAGREEMENT",
+			"title": "preferring one cwd when the two vendor-authoritative sources disagree mints a record keyed to a directory the session is not in — a guess exactly where the disagreement was the interesting fact",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": [
+				"\tif (ctxCwd && managerCwd && ctxCwd !== managerCwd) {",
+				"\t\treturn { refusal: `ctx.cwd and sessionManager.getCwd() disagree (${ctxCwd} vs ${managerCwd})` };",
+				"\t}"
+			],
+			"replace": ["\t// disagreement tolerated: ctx.cwd simply wins"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BIRTH-CWD-DISAGREEMENT]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-META-ROOT-JOINT-BINDING",
+			"title": "restoring the legacy PI_CODING_AGENT_DIR fallback inside the SHARED omp root base splits the garden store on an ordinary `omp --profile work`: the birth extension mints its record and sender marker under the vendor's profile agent dir — a pi sandbox, if that is where the value came from — and the omp-labeled bridge child pins its four roots to the same wrong bundle. Mutating the shared base replants the defect in BOTH consumers at once, which is why the subject is the common policy rather than either call site",
+			"subject": "pi-extensions/lib/meta-session.ts",
+			"find": [
+				"\t// NEVER `piAgentDir()` here: for backend omp that variable is the VENDOR's agent dir.",
+				"\treturn path.join(home, \".pi\", \"agent\");"
+			],
+			"replace": [
+				"\treturn env.PI_CODING_AGENT_DIR",
+				"\t\t? path.resolve(expandTildeIn(env.PI_CODING_AGENT_DIR, home))",
+				"\t\t: path.join(home, \".pi\", \"agent\");"
+			],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-META-ROOT-JOINT-BINDING]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-META-ROOT-ABSOLUTE-ONLY",
+			"title": "resolving a relative ENTWURF_META_* override instead of refusing it makes each process's working directory a garden-root authority: the omp extension resolves it against wherever the operator launched omp while the doctor resolves it against the repository (run_ts cd's there), so the doctor reports NOT-YET off an empty directory while the extension's real store holds records. Both halves read this one leaf, so removing the fail-closed branch splits them at the same instant",
+			"subject": "pi-extensions/lib/meta-session.ts",
+			"find": [
+				"\t\tif (override === \"~\" || override.startsWith(\"~/\")) return path.resolve(expandTildeIn(override, home));",
+				"\t\tif (path.isAbsolute(override)) return path.resolve(override);",
+				"\t\tthrow new MetaRootPolicyError(",
+				"\t\t\t`omp meta-root policy refuses ${key}=${JSON.stringify(override)}: a garden root must be absolute or ~-rooted ` +",
+				"\t\t\t\t\"(`~` or `~/…`). A relative value would resolve against each process's own working directory, and the omp \" +",
+				"\t\t\t\t\"extension and its doctor do not share one — set an absolute path, or unset it to use the default under HOME.\",",
+				"\t\t);"
+			],
+			"replace": ["\t\treturn path.resolve(expandTildeIn(override, home));"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-META-ROOT-ABSOLUTE-ONLY]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-DOCTOR-CARRIER-TRIMS",
+			"title": "treating an empty or whitespace-only PI carrier as an inherited identity makes Bundle C's deliberate tmux `-e NAME=` scrub fail the deterministic floor whenever a visible fresh omp citizen is alive",
+			"subject": "scripts/omp-bridge-doctor.sh",
+			"find": [
+				"    if tr '\\0' '\\n' < \"$ENVIRON\" 2>/dev/null | grep -qE '^(PI_SESSION_ID|PI_AGENT_ID)=.*[^[:space:]]'; then"
+			],
+			"replace": ["    if tr '\\0' '\\n' < \"$ENVIRON\" 2>/dev/null | grep -qE '^(PI_SESSION_ID|PI_AGENT_ID)='; then"],
+			"gate": ["bash", "run.sh", "smoke-omp-bridge-state"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-DOCTOR-CARRIER-TRIMS]",
+			"signatureSource": "scripts/smoke-omp-bridge-state.sh"
+		}
+	]
+}