@junghanacs/entwurf 0.15.1 → 0.16.0

package/scripts/mutants/mux-fresh-call.json

@@ -6,8 +6,8 @@
 			"claim": "FRESHCALL-PI-ARGV-PROMPT-FIRST",
 			"title": "pi gets the flag before the prompt again — the measured shape that opens a window whose first turn never runs",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [prompt, \"--entwurf-control\", \"--model\", model];"],
-			"replace": ["\t\t\treturn [\"--entwurf-control\", prompt, \"--model\", model];"],
+			"find": ["\t\t\treturn [composition.prompt, \"--entwurf-control\", \"--model\", model];"],
+			"replace": ["\t\t\treturn [\"--entwurf-control\", composition.prompt, \"--model\", model];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:FRESHCALL-PI-ARGV-PROMPT-FIRST]",
@@ -18,10 +18,10 @@
 			"title": "claude-code goes back to the variadic space form, which swallows the prompt as an option value",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
 			"find": [
-				"\t\t\treturn [prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`, `--model=${model}`];"
+				"\t\t\treturn [composition.prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`, `--model=${model}`];"
 			],
 			"replace": [
-				"\t\t\treturn [prompt, \"--allowedTools\", FRESH_CALL_CALLBACK_TOOL[\"claude-code\"], `--model=${model}`];"
+				"\t\t\treturn [composition.prompt, \"--allowedTools\", FRESH_CALL_CALLBACK_TOOL[\"claude-code\"], `--model=${model}`];"
 			],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
@@ -32,8 +32,8 @@
 			"claim": "FRESHCALL-PI-MODEL-ARGV",
 			"title": "pi drops its measured two-token model option and silently resolves its ambient default again",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [prompt, \"--entwurf-control\", \"--model\", model];"],
-			"replace": ["\t\t\treturn [prompt, \"--entwurf-control\"];"],
+			"find": ["\t\t\treturn [composition.prompt, \"--entwurf-control\", \"--model\", model];"],
+			"replace": ["\t\t\treturn [composition.prompt, \"--entwurf-control\"];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:FRESHCALL-PI-MODEL-ARGV]",
@@ -43,8 +43,8 @@
 			"claim": "FRESHCALL-PI-MODEL-DIALECT",
 			"title": "pi model argv is unified with Claude Code into the equals form that the real Pi parser rejects",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [prompt, \"--entwurf-control\", \"--model\", model];"],
-			"replace": ["\t\t\treturn [prompt, \"--entwurf-control\", `--model=${model}`];"],
+			"find": ["\t\t\treturn [composition.prompt, \"--entwurf-control\", \"--model\", model];"],
+			"replace": ["\t\t\treturn [composition.prompt, \"--entwurf-control\", `--model=${model}`];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:FRESHCALL-PI-MODEL-DIALECT]",
@@ -55,9 +55,9 @@
 			"title": "Claude Code drops the explicit model token and silently resolves its ambient Opus default again",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
 			"find": [
-				"\t\t\treturn [prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`, `--model=${model}`];"
+				"\t\t\treturn [composition.prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`, `--model=${model}`];"
 			],
-			"replace": ["\t\t\treturn [prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`];"],
+			"replace": ["\t\t\treturn [composition.prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:FRESHCALL-CLAUDE-MODEL-ARGV]",
@@ -240,8 +240,8 @@
 			"claim": "FRESHCALL-COPILOT-ARGV-INTERACTIVE",
 			"title": "the Copilot prompt rides -p instead of --interactive — the turn runs and the CLI EXITS, closing the window on a sibling that was supposed to stay open",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--model\", model, \"--yolo\"];"],
-			"replace": ["\t\t\treturn [\"copilot\", \"-p\", prompt, \"--model\", model, \"--yolo\"];"],
+			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--model\", model, \"--yolo\"];"],
+			"replace": ["\t\t\treturn [\"copilot\", \"-p\", composition.prompt, \"--model\", model, \"--yolo\"];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESHCALL-COPILOT-ARGV-INTERACTIVE]",
@@ -251,8 +251,8 @@
 			"claim": "FRESHCALL-COPILOT-MODEL-ARGV",
 			"title": "the Copilot argv drops the explicit model — the managed launcher then injects `--model auto` and the caller's model choice is silently discarded",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--model\", model, \"--yolo\"];"],
-			"replace": ["\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--yolo\"];"],
+			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--model\", model, \"--yolo\"];"],
+			"replace": ["\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--yolo\"];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESHCALL-COPILOT-MODEL-ARGV]",
@@ -262,9 +262,9 @@
 			"claim": "FRESHCALL-COPILOT-YOLO-POLICY",
 			"title": "the policy token narrows back to the callback-only --allow-tool grant — the exact regression GLG measured on 2026-08-25: no YOLO in the footer, a confirmation prompt at every task tool, an impractical sibling",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--model\", model, \"--yolo\"];"],
+			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--model\", model, \"--yolo\"];"],
 			"replace": [
-				"\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--model\", model, \"--allow-tool=entwurf-bridge(entwurf_v2)\"];"
+				"\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--model\", model, \"--allow-tool=entwurf-bridge(entwurf_v2)\"];"
 			],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
@@ -312,8 +312,8 @@
 			"claim": "FRESHCALL-BACKEND-SET-SURFACE-PARITY",
 			"title": "a backend the composition can open is missing from the MCP surface enum — the capability exists and no external host can reach it",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": ["\t\t\t.enum([\"pi\", \"claude-code\", \"copilot\"])"],
-			"replace": ["\t\t\t.enum([\"pi\", \"claude-code\"])"],
+			"find": ["\t\t\t.enum([\"pi\", \"claude-code\", \"copilot\", \"omp\"])"],
+			"replace": ["\t\t\t.enum([\"pi\", \"claude-code\", \"copilot\"])"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESHCALL-BACKEND-SET-SURFACE-PARITY]",
@@ -421,8 +421,8 @@
 			"claim": "FRESHCALL-COPILOT-EXPLICIT-POLICY",
 			"title": "the composition stops stating its policy and silently leans on the launcher to inject --yolo — the effective profile survives but the fresh contract loses its explicit permission statement",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--model\", model, \"--yolo\"];"],
-			"replace": ["\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--model\", model];"],
+			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--model\", model, \"--yolo\"];"],
+			"replace": ["\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--model\", model];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESHCALL-COPILOT-EXPLICIT-POLICY]",
@@ -432,8 +432,8 @@
 			"claim": "FRESHCALL-BACKEND-SET-SURFACE-PARITY-PI",
 			"title": "a backend the composition can open is missing from the native pi surface enum — an in-process pi session cannot name a capability the module already opens",
 			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\", \"copilot\"], {"],
-			"replace": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\"], {"],
+			"find": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\", \"copilot\", \"omp\"], {"],
+			"replace": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\", \"copilot\"], {"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESHCALL-BACKEND-SET-SURFACE-PARITY-PI]",

package/scripts/mutants/omp-birth.json

@@ -0,0 +1,173 @@
+{
+	"schemaVersion": 1,
+	"lane": "omp-birth",
+	"mutants": [
+		{
+			"claim": "OMP-BIRTH-TUI-MINTS",
+			"title": "a birth unit whose host predicate is not the vendor's tui mode mints nothing for the operator's own session — the visible sibling never becomes a citizen",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["const HOST_MODE = \"tui\";"],
+			"replace": ["const HOST_MODE = \"print\";"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BIRTH-TUI-MINTS]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-BIRTH-SCOPE-FENCE",
+			"title": "a fence that admits `print` gives every task subagent its own garden id — each visible omp session would mint a citizen per internal agent, which is the exact thing #87 exists to prevent",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\tif (ctx.mode !== HOST_MODE) {"],
+			"replace": ["\tif (ctx.mode !== HOST_MODE && ctx.mode !== \"print\") {"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BIRTH-SCOPE-FENCE]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-BIRTH-BINDS-BOTH-EDGES",
+			"title": "binding only session_start leaves every post-/new, forked and in-TUI-resumed session unminted while its status line still shows the previous citizen's id (the switch edge is where those re-fire, audit C2)",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": [
+				"\tpi.on(\"session_switch\", (event, ctx) =>",
+				"\t\tonBirthEdge(`session_switch(${asNonEmptyString(event?.reason) || \"unlabeled\"})`, ctx, pi),",
+				"\t);"
+			],
+			"replace": ["\t// session_switch left unbound"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BIRTH-BINDS-BOTH-EDGES]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-BIRTH-SHOWS-GARDEN-ID",
+			"title": "a citizen whose garden id never reaches the vendor's own status surface has an address visible only by scraping records — not lifecycle parity (adding-a-harness.md step 4)",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\t\tshowGardenId(ctx, result.record.gardenId);"],
+			"replace": ["\t\t// visible identity dropped"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BIRTH-SHOWS-GARDEN-ID]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-SENDER-MARKER-OWN-PID",
+			"title": "keying the marker to process.ppid copies the exec'd backends' parent join into a runtime that has no launcher — the marker names the shell that started omp, and no bridge child ever looks there",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\tconst ownerPid = process.pid;"],
+			"replace": ["\tconst ownerPid = process.ppid;"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-SENDER-MARKER-OWN-PID]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-SENDER-READER-OPEN",
+			"title": "a backend whose hook writes a marker but is absent from the reader list is INVISIBLE — the bridge holds the owner pid, never looks in that directory, and every send is refused as anonymous for a reason nothing logs (the #46 defect)",
+			"subject": "pi-extensions/lib/meta-sender-identity.ts",
+			"find": [
+				"export const META_SENDER_BACKENDS: readonly MetaBackend[] = [\"claude-code\", \"antigravity\", \"copilot\", \"omp\"];"
+			],
+			"replace": [
+				"export const META_SENDER_BACKENDS: readonly MetaBackend[] = [\"claude-code\", \"antigravity\", \"copilot\"];"
+			],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-SENDER-READER-OPEN]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-BIRTH-DOES-NOT-ARM-RECEIVER",
+			"title": "birth arming a receiver claims a live process holds a watch that nothing holds — the citizen reads DELIVERABLE, wired to nothing, for as long as the TUI stays open. This plants a REAL record-bound marker the certified reader accepts (an empty meta-receivers/ directory arms nothing and would be killed for the wrong reason)",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\t\twriteOmpSenderMarker(result.record.gardenId, envelope);"],
+			"replace": [
+				"\t\twriteOmpSenderMarker(result.record.gardenId, envelope);",
+				"\t\tconst receiversDir = roots().receiversDir;",
+				"\t\tfs.mkdirSync(receiversDir, { recursive: true });",
+				"\t\tfs.writeFileSync(",
+				"\t\t\tpath.join(receiversDir, `${result.record.gardenId}.json`),",
+				"\t\t\t`${JSON.stringify({",
+				"\t\t\t\tgardenId: result.record.gardenId,",
+				"\t\t\t\tbackend: BACKEND,",
+				"\t\t\t\tnativeSessionId: envelope.nativeSessionId,",
+				"\t\t\t\townerPid: process.pid,",
+				"\t\t\t\townerStartKey: \"planted-by-mutant\",",
+				"\t\t\t\townerKind: \"omp-tui\",",
+				"\t\t\t\tarmProvenance: \"session-start\",",
+				"\t\t\t\tupdatedAt: new Date().toISOString(),",
+				"\t\t\t})}\\n`,",
+				"\t\t);"
+			],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BIRTH-DOES-NOT-ARM-RECEIVER]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-BIRTH-CWD-DISAGREEMENT",
+			"title": "preferring one cwd when the two vendor-authoritative sources disagree mints a record keyed to a directory the session is not in — a guess exactly where the disagreement was the interesting fact",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": [
+				"\tif (ctxCwd && managerCwd && ctxCwd !== managerCwd) {",
+				"\t\treturn { refusal: `ctx.cwd and sessionManager.getCwd() disagree (${ctxCwd} vs ${managerCwd})` };",
+				"\t}"
+			],
+			"replace": ["\t// disagreement tolerated: ctx.cwd simply wins"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BIRTH-CWD-DISAGREEMENT]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-META-ROOT-JOINT-BINDING",
+			"title": "restoring the legacy PI_CODING_AGENT_DIR fallback inside the SHARED omp root base splits the garden store on an ordinary `omp --profile work`: the birth extension mints its record and sender marker under the vendor's profile agent dir — a pi sandbox, if that is where the value came from — and the omp-labeled bridge child pins its four roots to the same wrong bundle. Mutating the shared base replants the defect in BOTH consumers at once, which is why the subject is the common policy rather than either call site",
+			"subject": "pi-extensions/lib/meta-session.ts",
+			"find": [
+				"\t// NEVER `piAgentDir()` here: for backend omp that variable is the VENDOR's agent dir.",
+				"\treturn path.join(home, \".pi\", \"agent\");"
+			],
+			"replace": [
+				"\treturn env.PI_CODING_AGENT_DIR",
+				"\t\t? path.resolve(expandTildeIn(env.PI_CODING_AGENT_DIR, home))",
+				"\t\t: path.join(home, \".pi\", \"agent\");"
+			],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-META-ROOT-JOINT-BINDING]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-META-ROOT-ABSOLUTE-ONLY",
+			"title": "resolving a relative ENTWURF_META_* override instead of refusing it makes each process's working directory a garden-root authority: the omp extension resolves it against wherever the operator launched omp while the doctor resolves it against the repository (run_ts cd's there), so the doctor reports NOT-YET off an empty directory while the extension's real store holds records. Both halves read this one leaf, so removing the fail-closed branch splits them at the same instant",
+			"subject": "pi-extensions/lib/meta-session.ts",
+			"find": [
+				"\t\tif (override === \"~\" || override.startsWith(\"~/\")) return path.resolve(expandTildeIn(override, home));",
+				"\t\tif (path.isAbsolute(override)) return path.resolve(override);",
+				"\t\tthrow new MetaRootPolicyError(",
+				"\t\t\t`omp meta-root policy refuses ${key}=${JSON.stringify(override)}: a garden root must be absolute or ~-rooted ` +",
+				"\t\t\t\t\"(`~` or `~/…`). A relative value would resolve against each process's own working directory, and the omp \" +",
+				"\t\t\t\t\"extension and its doctor do not share one — set an absolute path, or unset it to use the default under HOME.\",",
+				"\t\t);"
+			],
+			"replace": ["\t\treturn path.resolve(expandTildeIn(override, home));"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-META-ROOT-ABSOLUTE-ONLY]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-DOCTOR-CARRIER-TRIMS",
+			"title": "treating an empty or whitespace-only PI carrier as an inherited identity makes Bundle C's deliberate tmux `-e NAME=` scrub fail the deterministic floor whenever a visible fresh omp citizen is alive",
+			"subject": "scripts/omp-bridge-doctor.sh",
+			"find": [
+				"    if tr '\\0' '\\n' < \"$ENVIRON\" 2>/dev/null | grep -qE '^(PI_SESSION_ID|PI_AGENT_ID)=.*[^[:space:]]'; then"
+			],
+			"replace": ["    if tr '\\0' '\\n' < \"$ENVIRON\" 2>/dev/null | grep -qE '^(PI_SESSION_ID|PI_AGENT_ID)='; then"],
+			"gate": ["bash", "run.sh", "smoke-omp-bridge-state"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-DOCTOR-CARRIER-TRIMS]",
+			"signatureSource": "scripts/smoke-omp-bridge-state.sh"
+		}
+	]
+}

package/scripts/mutants/omp-fresh.json

@@ -0,0 +1,300 @@
+{
+	"schemaVersion": 1,
+	"lane": "omp-fresh",
+	"mutants": [
+		{
+			"claim": "ADMISSION-FRESH-PARITY",
+			"title": "a post-#82 harness admitted as a full D6 citizen while entwurf_fresh_call cannot open it — the exact state the Bundle A+B candidate shipped in, where every gate was green and only prose said the backend was unsupported. This is the defect the whole gate exists for: without it, an `unsupported` note reads as a partial-release permit",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["export const FRESH_CALL_BACKENDS = [\"pi\", \"claude-code\", \"copilot\", \"omp\"] as const;"],
+			"replace": ["export const FRESH_CALL_BACKENDS = [\"pi\", \"claude-code\", \"copilot\"] as const;"],
+			"gate": ["bash", "run.sh", "check-harness-admission-parity"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:ADMISSION-FRESH-PARITY]",
+			"signatureSource": "scripts/check-harness-admission-parity.ts"
+		},
+		{
+			"claim": "ADMISSION-LEGACY-DOCUMENTED",
+			"title": "a pre-#82 exception that only the gate believes in — the matrix sentence removed while the gate literal stays, so an operator reading DELIVERY.md finds a shipped citizen with no statement that it was never evaluated under step 9. The exclusion half of check-release-gate-outcomes cell 7, replanted on the admission axis",
+			"subject": "DELIVERY.md",
+			"find": [
+				" Admitted before the #82 step 9 contract and not re-evaluated under it, so it is legacy citizen evidence, not a step-9 supported harness: `entwurf_fresh_call` cannot open an agy sibling, and nothing here should be read as claiming visible lifecycle parity."
+			],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-harness-admission-parity"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:ADMISSION-LEGACY-DOCUMENTED]",
+			"signatureSource": "scripts/check-harness-admission-parity.ts"
+		},
+		{
+			"claim": "FRESHCALL-OMP-EXPLICIT-POLICY",
+			"title": "the permission width dropped from the omp argv. NOTHING OBSERVABLE FAILS: omp 18.0.0's schema default for tools.approvalMode is ALREADY yolo, so the sibling still boots and a LIVE acceptance still passes — the argv has simply started depending on a vendor default and on whatever the operator's config happens to say. This is the drift step 9 clause 2 forbids, and it is invisible to every test that only watches behaviour",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": [
+				"\t\t\treturn [`--${OMP_BOOTSTRAP_FLAG}`, composition.bootstrapPayload, \"--model\", model, \"--approval-mode\", \"yolo\"];"
+			],
+			"replace": ["\t\t\treturn [`--${OMP_BOOTSTRAP_FLAG}`, composition.bootstrapPayload, \"--model\", model];"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:FRESHCALL-OMP-EXPLICIT-POLICY]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-OMP-CALLBACK-TOOL-DIALECT",
+			"title": "the callback tool name spelled the way a reader expects instead of the way omp mints it — `entwurf_v2` keeps its digit, which omp's sanitizer charset [a-z_] eats. The sibling is told to call a tool that does not exist in its session, so the whole first turn is spent and no address ever comes back. A launch receipt still prints",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\tomp: \"mcp__entwurf_bridge_entwurf_v\","],
+			"replace": ["\tomp: \"mcp__entwurf_bridge_entwurf_v2\","],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:FRESHCALL-OMP-CALLBACK-TOOL-DIALECT]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-OMP-XDEV-FAIL-CLOSED",
+			"title": "the callback-callable axis inverted from `must prove false` to `refuse only on explicit true`. The vendor default IS true, so a host that never set tools.xdev preflights green and the fresh call opens a window whose model cannot see the callback tool's schema at all — a sibling that can never name itself, with a successful launch receipt in the caller's hand",
+			"subject": "pi-extensions/lib/omp-fresh-preflight.ts",
+			"find": [
+				"\tif (readOmpConfigFlag(agentDir, \"tools\", \"xdev\") !== false) return \"omp-callback-tool-uncallable\";"
+			],
+			"replace": [
+				"\tif (readOmpConfigFlag(agentDir, \"tools\", \"xdev\") === true) return \"omp-callback-tool-uncallable\";"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:FRESHCALL-OMP-XDEV-FAIL-CLOSED]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-OMP-AGENT-DIR-REFUSES-PI-KNOB",
+			"title": "an inherited PI_CODING_AGENT_DIR taken as a lookup instead of a refusal. omp is a pi fork sharing that name, so the preflight would check units under entwurf's own pi sandbox and report green about a directory no live omp reads — the ledger M6 collision, resolved by guessing",
+			"subject": "pi-extensions/lib/omp-fresh-preflight.ts",
+			"find": [
+				"\tif (typeof env.PI_CODING_AGENT_DIR === \"string\" && env.PI_CODING_AGENT_DIR.length > 0) return null;"
+			],
+			"replace": [
+				"\tif (typeof env.PI_CODING_AGENT_DIR === \"string\" && env.PI_CODING_AGENT_DIR.length > 0)\n\t\treturn path.resolve(env.PI_CODING_AGENT_DIR);"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:FRESHCALL-OMP-AGENT-DIR-REFUSES-PI-KNOB]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "OMP-PREFLIGHT-XDEV-ORACLE",
+			"title": "the reproduced config reader drifting from the shipped python leaf — a key matched at ANY depth inside the section, so `tools.nested.xdev: false` reads as `tools.xdev: false`. This is the real defect the agreement gate caught on its first run: a fail-OPEN misread that preflights green off a config which never set the flag",
+			"subject": "pi-extensions/lib/omp-fresh-preflight.ts",
+			"find": ["\t\tif (indent !== childIndent) continue; // a grandchild, or a mis-indented line: not our key"],
+			"replace": ["\t\tif (false && indent !== childIndent) continue;"],
+			"gate": ["bash", "run.sh", "check-omp-fresh-preflight"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-PREFLIGHT-XDEV-ORACLE]",
+			"signatureSource": "scripts/check-omp-fresh-preflight.ts"
+		},
+		{
+			"claim": "OMP-PREFLIGHT-AGENT-DIR-ORACLE",
+			"title": "the reproduced agent-dir resolver diverging from the installer's own shell oracle on the profile axis — OMP_PROFILE honoured without its name grammar, so a profile the shell refuses resolves here and the two halves of the omp lane address different stores while both look correct",
+			"subject": "pi-extensions/lib/omp-fresh-preflight.ts",
+			"find": ["\t\tif (!PROFILE_NAME_RE.test(ompProfile)) return null;"],
+			"replace": ["\t\tif (false && !PROFILE_NAME_RE.test(ompProfile)) return null;"],
+			"gate": ["bash", "run.sh", "check-omp-fresh-preflight"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-PREFLIGHT-AGENT-DIR-ORACLE]",
+			"signatureSource": "scripts/check-omp-fresh-preflight.ts"
+		},
+		{
+			"claim": "FRESHCALL-IDENTITY-SCRUB",
+			"title": "the inherited pi identity carrier left unscrubbed at the launch seam. A tmux server started from a shell that exported PI_SESSION_ID hands that value to every window it opens (measured), and the sibling's own MCP child reads the stale pair as its authoritative identity — so a fresh citizen calls home as someone else, confidently",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\t...SCRUBBED_INHERITED_ENV.flatMap((assignment) => [\"-e\", assignment]),"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:FRESHCALL-IDENTITY-SCRUB]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-BACKEND-SET-SURFACE-PARITY-SKILL",
+			"title": "a backend added to the composition and both schema surfaces but not to the operator skill — the third public surface step 9 names, and the one that had no gate at all. The skill is what an operator reads to decide what can be opened, so a stale list makes the backend unreachable in practice exactly the way a missing enum value makes it unreachable in schema",
+			"subject": ".claude/skills/entwurf-dev/SKILL.md",
+			"find": ["backend는 정확히 `pi | claude-code | copilot | omp`이고"],
+			"replace": ["backend는 정확히 `pi | claude-code | copilot`이고"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:FRESHCALL-BACKEND-SET-SURFACE-PARITY-SKILL]",
+			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-OMP-ARGV-BOOTSTRAP-FLAG",
+			"title": "the positional first-turn prompt put back on the omp argv beside the bootstrap flag — the exact shape the first Bundle C candidate shipped. `[LIVE 2026-08-30]` it opens a window whose turn starts ~830ms BEFORE the callback tool exists, and the sibling answers the literal text `ACK` with zero tool calls. It parses, it launches, and the caller times out at 240s: the failure is invisible to anything that only checks that argv is well-formed",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": [
+				"\t\t\treturn [`--${OMP_BOOTSTRAP_FLAG}`, composition.bootstrapPayload, \"--model\", model, \"--approval-mode\", \"yolo\"];"
+			],
+			"replace": [
+				"\t\t\treturn [composition.prompt, `--${OMP_BOOTSTRAP_FLAG}`, composition.bootstrapPayload, \"--model\", model, \"--approval-mode\", \"yolo\"];"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:FRESHCALL-OMP-ARGV-BOOTSTRAP-FLAG]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "OMP-BOOTSTRAP-FLAG-AGREES",
+			"title": "the installed unit renamed its registered flag while the launcher keeps sending the old one. The unit still loads, still mints, still shows the garden id — and every fresh call at omp silently becomes a manual session that sits there with no task, because `getFlag` answers only for flags THIS extension registered. Two halves that ship in different directories and cannot import each other is exactly where a constant drifts",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["export const OMP_BOOTSTRAP_FLAG = \"entwurf-bootstrap\";"],
+			"replace": ["export const OMP_BOOTSTRAP_FLAG = \"entwurf-fresh-bootstrap\";"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BOOTSTRAP-FLAG-AGREES]",
+			"signatureSource": "test/omp-fresh-bootstrap.contract.test.ts"
+		},
+		{
+			"claim": "OMP-BOOTSTRAP-READY-NEEDS-BOTH",
+			"title": "readiness decided from the tool REGISTRY alone, dropping the enabled-tools half. A tool can be registered and not enabled, and a prompt can only call an enabled one — so this sends the callback-only prompt into a window where the model still cannot make the call, which is the same 830ms race the positional prompt lost, moved one layer inward",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\treturn registered && active.includes(OMP_BOOTSTRAP_CALLBACK_TOOL);"],
+			"replace": ["\treturn registered;"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BOOTSTRAP-READY-NEEDS-BOTH]",
+			"signatureSource": "test/omp-fresh-bootstrap.contract.test.ts"
+		},
+		{
+			"claim": "OMP-BOOTSTRAP-CALLBACK-ONLY",
+			"title": "the task folded back into the stage-one prompt, so the sibling is asked to call back AND to work in one message. This is the prompt the failed LIVE actually ran, minus the missing tool: a competing goal beside the callback is what the two-stage split exists to remove, and nothing about argv or readiness would notice it coming back",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\t\t\tsend(buildOmpCallbackOnlyPrompt({ target: payload.target, nonce: payload.nonce }));"],
+			"replace": [
+				"\t\t\tsend(`${buildOmpCallbackOnlyPrompt({ target: payload.target, nonce: payload.nonce })}\\n\\n${payload.task}`);"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BOOTSTRAP-CALLBACK-ONLY]",
+			"signatureSource": "test/omp-fresh-bootstrap.contract.test.ts"
+		},
+		{
+			"claim": "OMP-BOOTSTRAP-ISERROR-EXACT-FALSE",
+			"title": "the success predicate loosened from `isError === false` to `isError === true` being the only failure, so a result whose isError is ABSENT or non-boolean releases the caller's task. The happy path is unchanged and every LIVE run still passes; what changes is that a malformed or partial result now counts as a callback that succeeded",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\t\t\tif (event?.isError !== false) {"],
+			"replace": ["\t\t\tif (event?.isError === true) {"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BOOTSTRAP-ISERROR-EXACT-FALSE]",
+			"signatureSource": "test/omp-fresh-bootstrap.contract.test.ts"
+		},
+		{
+			"claim": "OMP-BOOTSTRAP-NO-ARBITRARY-CARRIER",
+			"title": "the decoder's unknown-key refusal removed, so the one flag a caller can put arbitrary bytes into starts silently ignoring whatever it does not recognise. Every valid payload still decodes identically, so no behavioural test moves — but `what the launcher meant` and `what the unit acts on` have stopped being the same closed set, which is the property that keeps this from becoming a general carrier",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\t\tif (!BOOTSTRAP_KEYS.has(key)) return { ok: false, reason: \"payload-unknown-key\" };"],
+			"replace": [
+				"\t\tif (!BOOTSTRAP_KEYS.has(key) && key.startsWith(\"__\")) return { ok: false, reason: \"payload-unknown-key\" };"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BOOTSTRAP-NO-ARBITRARY-CARRIER]",
+			"signatureSource": "test/omp-fresh-bootstrap.contract.test.ts"
+		},
+		{
+			"claim": "OMP-BOOTSTRAP-RESULT-ARMS-ONLY",
+			"title": "the task sent from inside the tool_result handler again, instead of at the turn_end boundary. `[LIVE 2026-08-30]` this is the exact shape that failed: the hook log showed armed/ready/callback-observed/released, the release predicate was provably correct, and the task still never appeared in the session — because that handler runs while the callback turn is streaming. Every static contract about correlation and readiness stays green while the product delivers nothing",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": [
+				"\t\t\tlog(\"INFO\", `bootstrap-released nonce=${payload.nonce} toolCallId=${callId}: task armed for the next turn_end`);"
+			],
+			"replace": [
+				"\t\t\tlog(\"INFO\", `bootstrap-released nonce=${payload.nonce} toolCallId=${callId}: task armed for the next turn_end`);\n\t\t\tphase = \"task-sent\";\n\t\t\tsend(payload.task);"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BOOTSTRAP-RESULT-ARMS-ONLY]",
+			"signatureSource": "test/omp-fresh-bootstrap.contract.test.ts"
+		},
+		{
+			"claim": "OMP-BOOTSTRAP-NO-EXPLICIT-DELIVERY",
+			"title": "an explicit delivery option put back on the send. `[source]` omitted `deliverAs` starts a turn when idle and steers while streaming; an EXPLICIT one queues without starting a turn in either state (`oh-my-pi v18.0.0 session/agent-session.ts:6511-6513`). `[LIVE 2026-08-30]` the queued form was measured to never become a message at all, three seconds before the Bundle B doorbell's omitted-option send landed and started a turn in the SAME session. Nothing about argv, readiness or correlation notices this",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\t\t\tpi.sendUserMessage(content);"],
+			"replace": ["\t\t\tpi.sendUserMessage(content, { deliverAs: \"followUp\" });"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BOOTSTRAP-NO-EXPLICIT-DELIVERY]",
+			"signatureSource": "test/omp-fresh-bootstrap.contract.test.ts"
+		},
+		{
+			"claim": "OMP-BOOTSTRAP-ONE-TASK",
+			"title": "the turn_end guard widened to admit an already-spent bootstrap, so every later turn of the session re-delivers the caller's task. The first turn is identical and a LIVE acceptance that only checks `the task arrived` still passes; what changes is that a sibling working for ten turns receives its opening instruction ten times",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\t\t\tif (phase !== \"released\") return;"],
+			"replace": ["\t\t\tif (phase !== \"released\" && phase !== \"task-sent\") return;"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BOOTSTRAP-ONE-TASK]",
+			"signatureSource": "test/omp-fresh-bootstrap.contract.test.ts"
+		},
+		{
+			"claim": "OMP-BOOTSTRAP-RELEASED-IS-INVALIDATABLE",
+			"title": "`released` made un-invalidatable, so a bootstrap whose session is replaced by `/new`, a fork or a resume BETWEEN the callback result and the next turn_end still fires its task — into a session the caller never opened and cannot address. The window between those two events is small and the failure is invisible until the operator's own next session receives someone else's instruction",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": [
+				"\t\t\t// `released` is invalidatable ON PURPOSE: between the callback result and the next\n\t\t\t// turn_end the session can be replaced by `/new`, a fork or a resume, and the\n\t\t\t// caller's task must die with the session it was addressed to.\n\t\t\tif (isFinal()) return;"
+			],
+			"replace": ["\t\t\tif (phase === \"released\" || isFinal()) return;"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BOOTSTRAP-RELEASED-IS-INVALIDATABLE]",
+			"signatureSource": "test/omp-fresh-bootstrap.contract.test.ts"
+		},
+		{
+			"claim": "OMP-BOOTSTRAP-SESSION-FENCE",
+			"title": "the native session id dropped from the event fence, leaving only `mode === \"tui\"`. Tool and turn events carry no session id of their own, so after a `/new` the previous caller's bootstrap would start accepting the REPLACEMENT session's tool results and deliver its task there. The happy path — one launch, one session, no switch — is completely unaffected",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\treturn typeof id === \"string\" && id === boundSessionId;"],
+			"replace": ["\tvoid boundSessionId;\n\treturn typeof id === \"string\";"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BOOTSTRAP-SESSION-FENCE]",
+			"signatureSource": "test/omp-fresh-bootstrap.contract.test.ts"
+		},
+		{
+			"claim": "OMP-BOOTSTRAP-SAME-ID-SWITCH-INVALIDATES",
+			"title": "the native-id comparison put back INSIDE the one function that owns the epoch rule, exactly as the frozen Bundle C candidate had it. The vendor emits session_switch(reason:\"resume\") on the same-file reload path WITHOUT changing the native id and replaces the transcript right after (agent-session.ts:7986-7988 computes switchingToDifferentSession, :8071-8078 emits regardless), so an id-conditional rule lets a waiting, callback-sent or released bootstrap survive a real epoch change wearing the old id. Note what does NOT catch this: on the wired onBirthEdge path the pre-envelope call passes no id at all and still ends the epoch, so the defence in depth added for O-D1r masks the mutation there — it is the direct-drive cell, which reaches the rule with a real id the way a healthy edge does, that kills it",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\tif (!bootstrapConsumed || activeBootstrap === null) return;\n"],
+			"replace": [
+				"\tif (!bootstrapConsumed || activeBootstrap === null) return;\n\tif (nativeSessionId !== null && activeBootstrap.sessionId === nativeSessionId) return;\n"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BOOTSTRAP-SAME-ID-SWITCH-INVALIDATES]",
+			"signatureSource": "test/omp-fresh-bootstrap.contract.test.ts"
+		},
+		{
+			"claim": "OMP-BOOTSTRAP-REFUSES-UNCANCELLABLE-TIMER",
+			"title": "a silent global-timer fallback restored under the creator-owned seam. A vendor build with no ctx.setTimeout/ctx.clearTimer would arm anyway on a raw setTimeout that belongs to no session registry and that clearTimer cannot reach — a 100ms poll running inside the operator's TUI for the life of the process, surviving the disposal of the session that scheduled it. It is invisible to every behavioural test on a COMPLETE vendor context, because on v18.0.0 the fallback is never taken",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\tconst timers = creatorOwnedTimers(ctx);\n"],
+			"replace": [
+				"\tconst timers: OmpBootstrapTimers | null =\n\t\tcreatorOwnedTimers(ctx) ??\n\t\t({\n\t\t\tset: (fn: () => void, ms: number) => setTimeout(fn, ms),\n\t\t\tclear: (handle: unknown) => {\n\t\t\t\tclearTimeout(handle as ReturnType<typeof setTimeout>);\n\t\t\t},\n\t\t\tnow: () => Date.now(),\n\t\t} satisfies OmpBootstrapTimers);\n"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BOOTSTRAP-REFUSES-UNCANCELLABLE-TIMER]",
+			"signatureSource": "test/omp-fresh-bootstrap.contract.test.ts"
+		},
+		{
+			"claim": "OMP-BOOTSTRAP-EPOCH-ENDS-BEFORE-ENVELOPE",
+			"title": "the epoch-ending call moved back behind the envelope, which is the pre-O-D1r shape. onBirthEdge has two early exits before it ever reaches startOmpBootstrap — a refused envelope and a throwing upsert — so ending the epoch only from inside startOmpBootstrap makes the rule conditional on the LATER edge succeeding. A same-id session_switch that takes either exit then leaves a released bootstrap alive, and it still passes both fences in ompBootstrapCtxAccepts, so the previous caller's task lands at the next turn_end of a session the caller never opened. Every healthy edge is unaffected, which is why a review found this by reading the bail paths rather than by running anything",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\tendBootstrapEpochOnLaterEdge(edge, null);\n\n\tconst envelope = readBirthEnvelope(ctx);"],
+			"replace": ["\tconst envelope = readBirthEnvelope(ctx);"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BOOTSTRAP-EPOCH-ENDS-BEFORE-ENVELOPE]",
+			"signatureSource": "test/omp-fresh-bootstrap.contract.test.ts"
+		}
+	]
+}