@junghanacs/entwurf 0.15.1 → 0.16.1

package/scripts/inventory-verification-surface.ts

@@ -90,7 +90,7 @@ const H_FS = /from\s+["']node:fs["']|require\(["']node:fs["']\)/;
 // "process.env.LIVE"; it spawns no live turn of its own. So the predicate runs on the
 // CODE-ONLY projection (comments and inert literals blanked, shell expansions kept)
 // and matches a variable READ or an assignment, never prose.
-const H_LIVE = /process\.env\.LIVE\b|\$\{LIVE[:}\-]|\$LIVE\b|(?:^|\n)\s*(?:export\s+)?LIVE=1\b/;
+const H_LIVE = /process\.env\.LIVE\b|\$\{LIVE[:}-]|\$LIVE\b|(?:^|\n)\s*(?:export\s+)?LIVE=1\b/;
 
 /**
  * Blank what cannot gate execution, so H_LIVE reads code and not prose.

package/scripts/meta-bridge-hook-log.sh

@@ -15,10 +15,18 @@
 # would make the CLAUDE doctor permanently red for a refusal on a different rail, with
 # a prescription pointing at a Claude wake failure that never happened (cross-review,
 # glm, 2026-08-21). Copilot's own recovery rule lives in copilot-bridge-doctor.sh.
+#
+# The OMP birth unit (#87) joins the same file tagged `LEVEL [omp]`, and the rule extends
+# for the same reason plus a sharper one: omp's own scope fence writes a line for EVERY
+# task subagent it refuses (`INFO [omp] scope-refused`), which is the designed answer, and
+# its failures are mint/marker faults on a rail whose recovery token — `create`/`attach` —
+# is not `armed watch` either. omp's recovery rule lives in omp-bridge-doctor.sh. Excluding
+# a backend here is never a way to quiet a red: it is how each doctor keeps judging only
+# the evidence it owns.
 meta_bridge_hook_log_status() {
   local log="$1"
   local own
-  own="$(grep -v ' \[copilot\] ' "$log" 2>/dev/null || true)"
+  own="$(grep -v -e ' \[copilot\] ' -e ' \[omp\] ' "$log" 2>/dev/null || true)"
   if ! printf '%s\n' "$own" | grep -q ' ERROR '; then
     echo "no-error"
     return 0

package/scripts/mutants/acp-launch-namespace.json

@@ -0,0 +1,34 @@
+{
+	"schemaVersion": 1,
+	"lane": "acp-launch-namespace",
+	"mutants": [
+		{
+			"claim": "CLAUDE-LAUNCH-IS-NAMESPACED",
+			"title": "the default launch names the vendor bin directly again — the child re-enters the process-name space a janitor for another harness scans by substring, which is the whole of #72",
+			"subject": "pi-extensions/lib/acp/backend-adapter.ts",
+			"find": ["\tconst launcher = fileURLToPath(new URL(\"./claude-acp-launch.js\", import.meta.url));"],
+			"replace": ["\tconst launcher = require.resolve(\"@agentclientprotocol/claude-agent-acp/dist/index.js\");"],
+			"gate": ["bash", "run.sh", "check-acp-launch-namespace"],
+			"timeoutSeconds": 240,
+			"signature": "[QK:CLAUDE-LAUNCH-IS-NAMESPACED]",
+			"signatureSource": "scripts/check-acp-launch-namespace.ts"
+		},
+		{
+			"claim": "CLAUDE-LAUNCH-IS-TRANSPARENT",
+			"title": "the launcher consumes an argv slot of its own — the vendor's argv.slice(1) self-reinvocation and its own flags stop working behind a name split that still looks correct",
+			"subject": "pi-extensions/lib/acp/claude-acp-launch.js",
+			"find": ["\tawait import(pathToFileURL(join(dirname(pkgJsonPath), binPath)).href);"],
+			"replace": [
+				"\tif (process.argv.includes(\"--version\")) {",
+				"\t\tconsole.log(\"entwurf launcher\");",
+				"\t\tprocess.exit(0);",
+				"\t}",
+				"\tawait import(pathToFileURL(join(dirname(pkgJsonPath), binPath)).href);"
+			],
+			"gate": ["bash", "run.sh", "check-acp-launch-namespace"],
+			"timeoutSeconds": 240,
+			"signature": "[QK:CLAUDE-LAUNCH-IS-TRANSPARENT]",
+			"signatureSource": "scripts/check-acp-launch-namespace.ts"
+		}
+	]
+}

package/scripts/mutants/acp-prompt-lifecycle.json

@@ -54,8 +54,8 @@
 			"claim": "REUSE-CARRIES-CHILD-DIAGNOSTICS",
 			"title": "the reuse path drops the child's stderr tail again — exactly the live sonnet failure that showed only \"ACP connection closed\"",
 			"subject": "pi-extensions/lib/acp/backend.ts",
-			"find": ["\t\t\tfinishError(err, aborted, session.stderrTail, lifecycle);"],
-			"replace": ["\t\t\tfinishError(err, aborted, undefined, lifecycle);"],
+			"find": ["\t\t\tfinishError(err, aborted, session.stderrTail, lifecycle, session.launchObservation);"],
+			"replace": ["\t\t\tfinishError(err, aborted, undefined, lifecycle, session.launchObservation);"],
 			"gate": ["bash", "run.sh", "check-acp-prompt-lifecycle"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:REUSE-CARRIES-CHILD-DIAGNOSTICS]",
@@ -117,6 +117,71 @@
 			"timeoutSeconds": 180,
 			"signature": "[QK:CHILD-END-SILENCE-BOUNDED]",
 			"signatureSource": "scripts/check-acp-prompt-lifecycle.ts"
+		},
+		{
+			"claim": "LAUNCH-SIGNAL-EVIDENCE-STRUCTURED",
+			"title": "the caught-signal observation is dropped from the report — an externally killed child again reads as a clean vendor exit, the exact ambiguity #72 cost three diagnosis passes",
+			"subject": "pi-extensions/lib/acp/backend.ts",
+			"find": ["\t\tconst diagnosed = observed ? `${withLifecycle}\\n${observed}` : withLifecycle;"],
+			"replace": ["\t\tconst diagnosed = withLifecycle;"],
+			"gate": ["bash", "run.sh", "check-acp-prompt-lifecycle"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:LAUNCH-SIGNAL-EVIDENCE-STRUCTURED]",
+			"signatureSource": "scripts/check-acp-prompt-lifecycle.ts"
+		},
+		{
+			"claim": "LAUNCH-FRAME-NOT-IN-TAIL",
+			"title": "the launcher's control frame is echoed into the vendor stderr tail — entwurf's own fact is laundered back into vendor evidence",
+			"subject": "pi-extensions/lib/acp/backend.ts",
+			"find": ["\t\t\tspawned.stderr.on(\"data\", (c: Buffer) => consumeStderr.write(c.toString()));"],
+			"replace": [
+				"\t\t\tspawned.stderr.on(\"data\", (c: Buffer) => {",
+				"\t\t\t\tconsumeStderr.write(c.toString());",
+				"\t\t\t\tstderrTail.push(c.toString());",
+				"\t\t\t});"
+			],
+			"gate": ["bash", "run.sh", "check-acp-prompt-lifecycle"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:LAUNCH-FRAME-NOT-IN-TAIL]",
+			"signatureSource": "scripts/check-acp-prompt-lifecycle.ts"
+		},
+		{
+			"claim": "LAUNCH-SIGNAL-EXACT-FRAME-ONLY",
+			"title": "the frame is matched by prefix without its fixed enum — vendor prose can forge an entwurf-owned observation",
+			"subject": "pi-extensions/lib/acp/backend.ts",
+			"find": [
+				"\t\t\t\tif (",
+				"\t\t\t\t\tline.startsWith(LAUNCH_SIGNAL_FRAME_PREFIX) &&",
+				"\t\t\t\t\tLAUNCH_SIGNAL_FRAME_VALUES.has(line.slice(LAUNCH_SIGNAL_FRAME_PREFIX.length))",
+				"\t\t\t\t) {"
+			],
+			"replace": ["\t\t\t\tif (line.includes(LAUNCH_SIGNAL_FRAME_PREFIX)) {"],
+			"gate": ["bash", "run.sh", "check-acp-prompt-lifecycle"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:LAUNCH-SIGNAL-EXACT-FRAME-ONLY]",
+			"signatureSource": "scripts/check-acp-prompt-lifecycle.ts"
+		},
+		{
+			"claim": "STDERR-TAIL-FLUSHES-PARTIAL-LINE",
+			"title": "the line buffer never flushes its unterminated remainder — a child that dies mid-write loses the dying words the stderr tail exists to carry",
+			"subject": "pi-extensions/lib/acp/backend.ts",
+			"find": ["\t\t\tspawned.stderr.once?.(\"close\", () => consumeStderr.flush());"],
+			"replace": ["\t\t\tvoid consumeStderr;"],
+			"gate": ["bash", "run.sh", "check-acp-prompt-lifecycle"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:STDERR-TAIL-FLUSHES-PARTIAL-LINE]",
+			"signatureSource": "scripts/check-acp-prompt-lifecycle.ts"
+		},
+		{
+			"claim": "LAUNCH-FRAME-SPANS-CHUNKS",
+			"title": "the frame is matched per read instead of per line — a frame split across a chunk boundary is missed, and the external kill goes unreported exactly as it did in the field",
+			"subject": "pi-extensions/lib/acp/backend.ts",
+			"find": ["\t\t\theld += chunk;"],
+			"replace": ["\t\t\theld = chunk;"],
+			"gate": ["bash", "run.sh", "check-acp-prompt-lifecycle"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:LAUNCH-FRAME-SPANS-CHUNKS]",
+			"signatureSource": "scripts/check-acp-prompt-lifecycle.ts"
 		}
 	]
 }

package/scripts/mutants/copilot-birth.json

@@ -94,10 +94,10 @@
 		},
 		{
 			"claim": "HOOK-LOG-RAIL-SCOPED",
-			"title": "an untagged ERROR grep lets a Copilot fail-closed refusal redden the CLAUDE doctor forever — copilot's recovery token cannot exist on that rail",
+			"title": "dropping the copilot tag from the shared-hook-log filter lets a Copilot fail-closed refusal redden the CLAUDE doctor forever \u2014 copilot's recovery token cannot exist on that rail",
 			"subject": "scripts/meta-bridge-hook-log.sh",
-			"find": ["  own=\"$(grep -v ' \\[copilot\\] ' \"$log\" 2>/dev/null || true)\""],
-			"replace": ["  own=\"$(cat \"$log\" 2>/dev/null || true)\""],
+			"find": ["  own=\"$(grep -v -e ' \\[copilot\\] ' -e ' \\[omp\\] ' \"$log\" 2>/dev/null || true)\""],
+			"replace": ["  own=\"$(grep -v ' \\[omp\\] ' \"$log\" 2>/dev/null || true)\""],
 			"gate": ["bash", "run.sh", "check-meta-doctor-oracle"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:HOOK-LOG-RAIL-SCOPED]",
@@ -132,9 +132,11 @@
 			"title": "closing the reader half leaves the writer talking to nobody — the hook writes a copilot marker, the bridge never looks in that directory, and the citizen's sends are refused as anonymous (the #46 shape, which is why writer and reader open in one change)",
 			"subject": "pi-extensions/lib/meta-sender-identity.ts",
 			"find": [
-				"export const META_SENDER_BACKENDS: readonly MetaBackend[] = [\"claude-code\", \"antigravity\", \"copilot\"];"
+				"export const META_SENDER_BACKENDS: readonly MetaBackend[] = [\"claude-code\", \"antigravity\", \"copilot\", \"omp\"];"
+			],
+			"replace": [
+				"export const META_SENDER_BACKENDS: readonly MetaBackend[] = [\"claude-code\", \"antigravity\", \"omp\"];"
 			],
-			"replace": ["export const META_SENDER_BACKENDS: readonly MetaBackend[] = [\"claude-code\", \"antigravity\"];"],
 			"gate": ["bash", "run.sh", "check-copilot-birth-hook"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:COPILOT-SENDER-READER-OPEN]",
@@ -194,12 +196,10 @@
 		},
 		{
 			"claim": "COPILOT-MALFORMED-ROW-NOT-ABSENT",
-			"title": "a truncated/garbled exact plugin row falls through the parser and rounds to ABSENT, which the inverse reads as retry-safe absence and continues past — the exact fall-through B reproduced (`(v0.1` with no closing paren) against 47a5ae3 (#86 C3a corrective amendment, B defect 3)",
+			"title": "a truncated/garbled exact plugin row falls through the parser and rounds to ABSENT, which the inverse reads as retry-safe absence and continues past — the exact fall-through B reproduced (`(v0.1` with no closing paren) against 47a5ae3 (#86 C3a corrective amendment, B defect 3). The parse became a regex when the 1.0.81 state token was admitted; the fall-through must stay closed on either spelling.",
 			"subject": "scripts/copilot-bridge-oracle.sh",
-			"find": [
-				"    if not (rest.startswith(\"(v\") and rest.endswith(\")\")):\n        print(f\"malformed exact row for {qualified}: {row!r} does not parse as '<qualified> (v<version>)'\", file=sys.stderr)\n        sys.exit(1)"
-			],
-			"replace": ["    if not (rest.startswith(\"(v\") and rest.endswith(\")\")):\n        continue"],
+			"find": ["    match = ROW_TAIL.fullmatch(rest)\n    if match is None:"],
+			"replace": ["    match = ROW_TAIL.fullmatch(rest)\n    if match is None:\n        continue\n    if False:"],
 			"gate": ["bash", "run.sh", "check-copilot-birth-hook"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:COPILOT-MALFORMED-ROW-NOT-ABSENT]",

package/scripts/mutants/mux-fresh-call.json

@@ -6,8 +6,8 @@
 			"claim": "FRESHCALL-PI-ARGV-PROMPT-FIRST",
 			"title": "pi gets the flag before the prompt again — the measured shape that opens a window whose first turn never runs",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [prompt, \"--entwurf-control\", \"--model\", model];"],
-			"replace": ["\t\t\treturn [\"--entwurf-control\", prompt, \"--model\", model];"],
+			"find": ["\t\t\treturn [composition.prompt, \"--entwurf-control\", \"--model\", model];"],
+			"replace": ["\t\t\treturn [\"--entwurf-control\", composition.prompt, \"--model\", model];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:FRESHCALL-PI-ARGV-PROMPT-FIRST]",
@@ -18,10 +18,10 @@
 			"title": "claude-code goes back to the variadic space form, which swallows the prompt as an option value",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
 			"find": [
-				"\t\t\treturn [prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`, `--model=${model}`];"
+				"\t\t\treturn [composition.prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`, `--model=${model}`];"
 			],
 			"replace": [
-				"\t\t\treturn [prompt, \"--allowedTools\", FRESH_CALL_CALLBACK_TOOL[\"claude-code\"], `--model=${model}`];"
+				"\t\t\treturn [composition.prompt, \"--allowedTools\", FRESH_CALL_CALLBACK_TOOL[\"claude-code\"], `--model=${model}`];"
 			],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
@@ -32,8 +32,8 @@
 			"claim": "FRESHCALL-PI-MODEL-ARGV",
 			"title": "pi drops its measured two-token model option and silently resolves its ambient default again",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [prompt, \"--entwurf-control\", \"--model\", model];"],
-			"replace": ["\t\t\treturn [prompt, \"--entwurf-control\"];"],
+			"find": ["\t\t\treturn [composition.prompt, \"--entwurf-control\", \"--model\", model];"],
+			"replace": ["\t\t\treturn [composition.prompt, \"--entwurf-control\"];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:FRESHCALL-PI-MODEL-ARGV]",
@@ -43,8 +43,8 @@
 			"claim": "FRESHCALL-PI-MODEL-DIALECT",
 			"title": "pi model argv is unified with Claude Code into the equals form that the real Pi parser rejects",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [prompt, \"--entwurf-control\", \"--model\", model];"],
-			"replace": ["\t\t\treturn [prompt, \"--entwurf-control\", `--model=${model}`];"],
+			"find": ["\t\t\treturn [composition.prompt, \"--entwurf-control\", \"--model\", model];"],
+			"replace": ["\t\t\treturn [composition.prompt, \"--entwurf-control\", `--model=${model}`];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:FRESHCALL-PI-MODEL-DIALECT]",
@@ -55,9 +55,9 @@
 			"title": "Claude Code drops the explicit model token and silently resolves its ambient Opus default again",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
 			"find": [
-				"\t\t\treturn [prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`, `--model=${model}`];"
+				"\t\t\treturn [composition.prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`, `--model=${model}`];"
 			],
-			"replace": ["\t\t\treturn [prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`];"],
+			"replace": ["\t\t\treturn [composition.prompt, `--allowedTools=${FRESH_CALL_CALLBACK_TOOL[\"claude-code\"]}`];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:FRESHCALL-CLAUDE-MODEL-ARGV]",
@@ -240,8 +240,8 @@
 			"claim": "FRESHCALL-COPILOT-ARGV-INTERACTIVE",
 			"title": "the Copilot prompt rides -p instead of --interactive — the turn runs and the CLI EXITS, closing the window on a sibling that was supposed to stay open",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--model\", model, \"--yolo\"];"],
-			"replace": ["\t\t\treturn [\"copilot\", \"-p\", prompt, \"--model\", model, \"--yolo\"];"],
+			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--model\", model, \"--yolo\"];"],
+			"replace": ["\t\t\treturn [\"copilot\", \"-p\", composition.prompt, \"--model\", model, \"--yolo\"];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESHCALL-COPILOT-ARGV-INTERACTIVE]",
@@ -251,8 +251,8 @@
 			"claim": "FRESHCALL-COPILOT-MODEL-ARGV",
 			"title": "the Copilot argv drops the explicit model — the managed launcher then injects `--model auto` and the caller's model choice is silently discarded",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--model\", model, \"--yolo\"];"],
-			"replace": ["\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--yolo\"];"],
+			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--model\", model, \"--yolo\"];"],
+			"replace": ["\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--yolo\"];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESHCALL-COPILOT-MODEL-ARGV]",
@@ -262,9 +262,9 @@
 			"claim": "FRESHCALL-COPILOT-YOLO-POLICY",
 			"title": "the policy token narrows back to the callback-only --allow-tool grant — the exact regression GLG measured on 2026-08-25: no YOLO in the footer, a confirmation prompt at every task tool, an impractical sibling",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--model\", model, \"--yolo\"];"],
+			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--model\", model, \"--yolo\"];"],
 			"replace": [
-				"\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--model\", model, \"--allow-tool=entwurf-bridge(entwurf_v2)\"];"
+				"\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--model\", model, \"--allow-tool=entwurf-bridge(entwurf_v2)\"];"
 			],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
@@ -312,8 +312,8 @@
 			"claim": "FRESHCALL-BACKEND-SET-SURFACE-PARITY",
 			"title": "a backend the composition can open is missing from the MCP surface enum — the capability exists and no external host can reach it",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": ["\t\t\t.enum([\"pi\", \"claude-code\", \"copilot\"])"],
-			"replace": ["\t\t\t.enum([\"pi\", \"claude-code\"])"],
+			"find": ["\t\t\t.enum([\"pi\", \"claude-code\", \"copilot\", \"omp\"])"],
+			"replace": ["\t\t\t.enum([\"pi\", \"claude-code\", \"copilot\"])"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESHCALL-BACKEND-SET-SURFACE-PARITY]",
@@ -421,8 +421,8 @@
 			"claim": "FRESHCALL-COPILOT-EXPLICIT-POLICY",
 			"title": "the composition stops stating its policy and silently leans on the launcher to inject --yolo — the effective profile survives but the fresh contract loses its explicit permission statement",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--model\", model, \"--yolo\"];"],
-			"replace": ["\t\t\treturn [\"copilot\", \"--interactive\", prompt, \"--model\", model];"],
+			"find": ["\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--model\", model, \"--yolo\"];"],
+			"replace": ["\t\t\treturn [\"copilot\", \"--interactive\", composition.prompt, \"--model\", model];"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESHCALL-COPILOT-EXPLICIT-POLICY]",
@@ -432,8 +432,8 @@
 			"claim": "FRESHCALL-BACKEND-SET-SURFACE-PARITY-PI",
 			"title": "a backend the composition can open is missing from the native pi surface enum — an in-process pi session cannot name a capability the module already opens",
 			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\", \"copilot\"], {"],
-			"replace": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\"], {"],
+			"find": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\", \"copilot\", \"omp\"], {"],
+			"replace": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\", \"copilot\"], {"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESHCALL-BACKEND-SET-SURFACE-PARITY-PI]",

package/scripts/mutants/omp-birth.json

@@ -0,0 +1,173 @@
+{
+	"schemaVersion": 1,
+	"lane": "omp-birth",
+	"mutants": [
+		{
+			"claim": "OMP-BIRTH-TUI-MINTS",
+			"title": "a birth unit whose host predicate is not the vendor's tui mode mints nothing for the operator's own session — the visible sibling never becomes a citizen",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["const HOST_MODE = \"tui\";"],
+			"replace": ["const HOST_MODE = \"print\";"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BIRTH-TUI-MINTS]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-BIRTH-SCOPE-FENCE",
+			"title": "a fence that admits `print` gives every task subagent its own garden id — each visible omp session would mint a citizen per internal agent, which is the exact thing #87 exists to prevent",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\tif (ctx.mode !== HOST_MODE) {"],
+			"replace": ["\tif (ctx.mode !== HOST_MODE && ctx.mode !== \"print\") {"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BIRTH-SCOPE-FENCE]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-BIRTH-BINDS-BOTH-EDGES",
+			"title": "binding only session_start leaves every post-/new, forked and in-TUI-resumed session unminted while its status line still shows the previous citizen's id (the switch edge is where those re-fire, audit C2)",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": [
+				"\tpi.on(\"session_switch\", (event, ctx) =>",
+				"\t\tonBirthEdge(`session_switch(${asNonEmptyString(event?.reason) || \"unlabeled\"})`, ctx, pi),",
+				"\t);"
+			],
+			"replace": ["\t// session_switch left unbound"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BIRTH-BINDS-BOTH-EDGES]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-BIRTH-SHOWS-GARDEN-ID",
+			"title": "a citizen whose garden id never reaches the vendor's own status surface has an address visible only by scraping records — not lifecycle parity (adding-a-harness.md step 4)",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\t\tshowGardenId(ctx, result.record.gardenId);"],
+			"replace": ["\t\t// visible identity dropped"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BIRTH-SHOWS-GARDEN-ID]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-SENDER-MARKER-OWN-PID",
+			"title": "keying the marker to process.ppid copies the exec'd backends' parent join into a runtime that has no launcher — the marker names the shell that started omp, and no bridge child ever looks there",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\tconst ownerPid = process.pid;"],
+			"replace": ["\tconst ownerPid = process.ppid;"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-SENDER-MARKER-OWN-PID]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-SENDER-READER-OPEN",
+			"title": "a backend whose hook writes a marker but is absent from the reader list is INVISIBLE — the bridge holds the owner pid, never looks in that directory, and every send is refused as anonymous for a reason nothing logs (the #46 defect)",
+			"subject": "pi-extensions/lib/meta-sender-identity.ts",
+			"find": [
+				"export const META_SENDER_BACKENDS: readonly MetaBackend[] = [\"claude-code\", \"antigravity\", \"copilot\", \"omp\"];"
+			],
+			"replace": [
+				"export const META_SENDER_BACKENDS: readonly MetaBackend[] = [\"claude-code\", \"antigravity\", \"copilot\"];"
+			],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-SENDER-READER-OPEN]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-BIRTH-DOES-NOT-ARM-RECEIVER",
+			"title": "birth arming a receiver claims a live process holds a watch that nothing holds — the citizen reads DELIVERABLE, wired to nothing, for as long as the TUI stays open. This plants a REAL record-bound marker the certified reader accepts (an empty meta-receivers/ directory arms nothing and would be killed for the wrong reason)",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": ["\t\twriteOmpSenderMarker(result.record.gardenId, envelope);"],
+			"replace": [
+				"\t\twriteOmpSenderMarker(result.record.gardenId, envelope);",
+				"\t\tconst receiversDir = roots().receiversDir;",
+				"\t\tfs.mkdirSync(receiversDir, { recursive: true });",
+				"\t\tfs.writeFileSync(",
+				"\t\t\tpath.join(receiversDir, `${result.record.gardenId}.json`),",
+				"\t\t\t`${JSON.stringify({",
+				"\t\t\t\tgardenId: result.record.gardenId,",
+				"\t\t\t\tbackend: BACKEND,",
+				"\t\t\t\tnativeSessionId: envelope.nativeSessionId,",
+				"\t\t\t\townerPid: process.pid,",
+				"\t\t\t\townerStartKey: \"planted-by-mutant\",",
+				"\t\t\t\townerKind: \"omp-tui\",",
+				"\t\t\t\tarmProvenance: \"session-start\",",
+				"\t\t\t\tupdatedAt: new Date().toISOString(),",
+				"\t\t\t})}\\n`,",
+				"\t\t);"
+			],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BIRTH-DOES-NOT-ARM-RECEIVER]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-BIRTH-CWD-DISAGREEMENT",
+			"title": "preferring one cwd when the two vendor-authoritative sources disagree mints a record keyed to a directory the session is not in — a guess exactly where the disagreement was the interesting fact",
+			"subject": "pi-extensions/meta-bridge-omp.ts",
+			"find": [
+				"\tif (ctxCwd && managerCwd && ctxCwd !== managerCwd) {",
+				"\t\treturn { refusal: `ctx.cwd and sessionManager.getCwd() disagree (${ctxCwd} vs ${managerCwd})` };",
+				"\t}"
+			],
+			"replace": ["\t// disagreement tolerated: ctx.cwd simply wins"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-BIRTH-CWD-DISAGREEMENT]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-META-ROOT-JOINT-BINDING",
+			"title": "restoring the legacy PI_CODING_AGENT_DIR fallback inside the SHARED omp root base splits the garden store on an ordinary `omp --profile work`: the birth extension mints its record and sender marker under the vendor's profile agent dir — a pi sandbox, if that is where the value came from — and the omp-labeled bridge child pins its four roots to the same wrong bundle. Mutating the shared base replants the defect in BOTH consumers at once, which is why the subject is the common policy rather than either call site",
+			"subject": "pi-extensions/lib/meta-session.ts",
+			"find": [
+				"\t// NEVER `piAgentDir()` here: for backend omp that variable is the VENDOR's agent dir.",
+				"\treturn path.join(home, \".pi\", \"agent\");"
+			],
+			"replace": [
+				"\treturn env.PI_CODING_AGENT_DIR",
+				"\t\t? path.resolve(expandTildeIn(env.PI_CODING_AGENT_DIR, home))",
+				"\t\t: path.join(home, \".pi\", \"agent\");"
+			],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-META-ROOT-JOINT-BINDING]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-META-ROOT-ABSOLUTE-ONLY",
+			"title": "resolving a relative ENTWURF_META_* override instead of refusing it makes each process's working directory a garden-root authority: the omp extension resolves it against wherever the operator launched omp while the doctor resolves it against the repository (run_ts cd's there), so the doctor reports NOT-YET off an empty directory while the extension's real store holds records. Both halves read this one leaf, so removing the fail-closed branch splits them at the same instant",
+			"subject": "pi-extensions/lib/meta-session.ts",
+			"find": [
+				"\t\tif (override === \"~\" || override.startsWith(\"~/\")) return path.resolve(expandTildeIn(override, home));",
+				"\t\tif (path.isAbsolute(override)) return path.resolve(override);",
+				"\t\tthrow new MetaRootPolicyError(",
+				"\t\t\t`omp meta-root policy refuses ${key}=${JSON.stringify(override)}: a garden root must be absolute or ~-rooted ` +",
+				"\t\t\t\t\"(`~` or `~/…`). A relative value would resolve against each process's own working directory, and the omp \" +",
+				"\t\t\t\t\"extension and its doctor do not share one — set an absolute path, or unset it to use the default under HOME.\",",
+				"\t\t);"
+			],
+			"replace": ["\t\treturn path.resolve(expandTildeIn(override, home));"],
+			"gate": ["bash", "run.sh", "check-omp-birth-hook"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-META-ROOT-ABSOLUTE-ONLY]",
+			"signatureSource": "scripts/check-omp-birth-hook.ts"
+		},
+		{
+			"claim": "OMP-DOCTOR-CARRIER-TRIMS",
+			"title": "treating an empty or whitespace-only PI carrier as an inherited identity makes Bundle C's deliberate tmux `-e NAME=` scrub fail the deterministic floor whenever a visible fresh omp citizen is alive",
+			"subject": "scripts/omp-bridge-doctor.sh",
+			"find": [
+				"    if tr '\\0' '\\n' < \"$ENVIRON\" 2>/dev/null | grep -qE '^(PI_SESSION_ID|PI_AGENT_ID)=.*[^[:space:]]'; then"
+			],
+			"replace": ["    if tr '\\0' '\\n' < \"$ENVIRON\" 2>/dev/null | grep -qE '^(PI_SESSION_ID|PI_AGENT_ID)='; then"],
+			"gate": ["bash", "run.sh", "smoke-omp-bridge-state"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:OMP-DOCTOR-CARRIER-TRIMS]",
+			"signatureSource": "scripts/smoke-omp-bridge-state.sh"
+		}
+	]
+}