@junghanacs/entwurf 0.17.1 → 0.18.0

package/scripts/meta-bridge-doctor.sh

@@ -468,11 +468,18 @@ if diff:
 # template equality above, not from a loose per-field test. It says the wake wiring is
 # DECLARED as shipped; it does NOT say exit-2 → wake holds at runtime (#51 B2).
 bell = leaf("FileChanged")
+# The two rewake strings are REPORTED, not optional: this line's whole job is to say what
+# the wake wiring DECLARES, and since #98 the declaration includes what the operator and the
+# model actually see when a letter lands. Omitting them would report a contract the manifest
+# no longer fully states — the exact class of half-truth #98 exists to remove. They are safe
+# to index: the exact-template equality above already ran, so a manifest missing either field
+# never reaches here.
 doorbell = (
     f"ok FileChanged doorbell matches the shipped static contract exactly "
     f"(command={bell['command']}, args={bell['args']}, asyncRewake={bell['asyncRewake']}, "
-    f"timeout={bell['timeout']}); runtime exit-2 wake was observed at Claude 2.1.217 (#51 B2) but "
-    "is not re-proven by this static read"
+    f"timeout={bell['timeout']}, rewakeSummary={bell['rewakeSummary']!r}, "
+    f"rewakeMessage={bell['rewakeMessage']!r}); runtime exit-2 wake was observed at Claude "
+    "2.1.217 (#51 B2) but is not re-proven by this static read"
 )
 
 # Resolve the argv EXACTLY the way Claude does for an exec form: substitute the
@@ -563,7 +570,15 @@ PY
     bad "statusline bin not on PATH: $EXPECTED_STATUSLINE"
   fi
   SAMPLE_STATUSLINE_OUT="$(printf '%s' '{"session_id":"doctor-no-record","workspace":{"current_dir":"/tmp"},"model":{"id":"claude-sonnet-5"},"context_window":{"context_window_size":200000,"used_percentage":1,"current_usage":{"input_tokens":1}}}' | "$EXPECTED_STATUSLINE" 2>/dev/null || true)"
-  if [ "$(printf '%s\n' "$SAMPLE_STATUSLINE_OUT" | wc -l | tr -d ' ')" = "2" ] && printf '%s\n' "$SAMPLE_STATUSLINE_OUT" | sed -n '1p' | grep -q 'tmp' && printf '%s\n' "$SAMPLE_STATUSLINE_OUT" | sed -n '2p' | grep -q '🪛' && printf '%s\n' "$SAMPLE_STATUSLINE_OUT" | sed -n '2p' | grep -q ' cc | s'; then ok "statusline synthetic execution emits two rows (work context + identity)"; else bad "statusline synthetic execution failed or omitted two-row work/identity marker"; fi
+  # The identity row may carry the #98 B unread badge between `cc` and the model letter:
+  # ` ✉N` when mail is waiting, nothing when the mailbox is empty, ` ✉?` when the count
+  # could not be taken. All three are healthy renders, so the shape test admits any of them.
+  if [ "$(printf '%s\n' "$SAMPLE_STATUSLINE_OUT" | wc -l | tr -d ' ')" = "2" ] && printf '%s\n' "$SAMPLE_STATUSLINE_OUT" | sed -n '1p' | grep -q 'tmp' && printf '%s\n' "$SAMPLE_STATUSLINE_OUT" | sed -n '2p' | grep -q '🪛' && printf '%s\n' "$SAMPLE_STATUSLINE_OUT" | sed -n '2p' | grep -qE ' cc( ✉([0-9]+|\?))? \| s'; then ok "statusline synthetic execution emits two rows (work context + identity)"; else bad "statusline synthetic execution failed or omitted two-row work/identity marker"; fi
+  # The synthetic feeds a session_id with no meta-record, so the garden id does not
+  # resolve and there is no mailbox to count. `✉?` is the required answer: a statusline
+  # that drew nothing there would be claiming "no mail" about a mailbox it never opened —
+  # the exact silence #98 was opened to remove.
+  if printf '%s\n' "$SAMPLE_STATUSLINE_OUT" | sed -n '2p' | grep -q '✉?'; then ok "statusline badge distinguishes 'could not count' (✉?) from zero on the no-record synthetic"; else bad "statusline badge omitted ✉? for the no-record synthetic (a false zero would be indistinguishable from an empty mailbox)"; fi
 else
   bad "cannot validate statusline without python3"
 fi
@@ -721,19 +736,43 @@ writeMetaReceiverMarker({
   receiversDir,
 });
 
-// RECEIVER — a DIFFERENT citizen, armed by a live owner pid (this process). An unarmed
-// target is correctly fail-closed as mailbox-undeliverable, so an unarmed probe could
-// never separate "the artifact cannot read its registry" from "nobody is listening".
+// RECEIVER — a DIFFERENT citizen, armed by a DIFFERENT live owner pid. An unarmed target
+// is correctly fail-closed as mailbox-undeliverable, so an unarmed probe could never
+// separate "the artifact cannot read its registry" from "nobody is listening".
+//
+// The owner is a spawned idle process, not this one (#101): a claude-code watch owner
+// serves exactly one garden at a time, and deliverability asks whether that owner's sender
+// marker still names the garden being addressed. This probe's own pid already carries the
+// SENDER citizen's marker, so arming the receiver under it would model a session switch —
+// a retired watch — and the probe would report a delivery failure that is really the
+// fixture. It cannot be the probe's parent either: the bridge resolves its own sender
+// identity through its ancestry, and an ancestor holding two gardens is the "ambiguous
+// sender identity" refusal. A live pid outside that ancestry is what a second native CLI
+// actually looks like.
+const receiverOwner = spawn(process.execPath, ['-e', 'setTimeout(() => {}, 300000)'], { stdio: 'ignore' });
+const receiverOwnerPid = receiverOwner.pid;
+if (typeof receiverOwnerPid !== 'number') {
+  console.error('could not spawn the stand-in receiver owner process');
+  process.exit(1);
+}
 const receiver = upsertMetaSession({
   input: { backend: 'claude-code', nativeSessionId: `doctor-delivery-receiver-${process.pid}`, cwd: tmp },
   dir: sessionsDir,
 });
 const gid = receiver.record.gardenId;
+writeMetaSenderMarker({
+  backend: 'claude-code',
+  gardenId: gid,
+  nativeSessionId: receiver.record.nativeSessionId,
+  cwd: tmp,
+  ownerPid: receiverOwnerPid,
+  sendersDir,
+});
 writeMetaReceiverMarker({
   gardenId: gid,
   backend: 'claude-code',
   nativeSessionId: receiver.record.nativeSessionId,
-  ownerPid: process.pid,
+  ownerPid: receiverOwnerPid,
   armProvenance: 'session-start',
   receiversDir,
 });
@@ -830,6 +869,7 @@ try {
   bail(String(e instanceof Error ? e.message : e));
 } finally {
   try { child?.kill('SIGTERM'); } catch {}
+  try { receiverOwner.kill('SIGTERM'); } catch {}
   await fsp.rm(tmp, { recursive: true, force: true });
 }
 if (verdict === 0) console.log('delivered: one .msg landed + doorbell poked; seeded meta-sender identity joined');

package/scripts/meta-bridge-state.py

@@ -66,16 +66,24 @@ LEGACY_PERMISSION_ALLOW = ["mcp__pi-tools-bridge__*"]
 
 # Claude Code single-driver policy scalars owned by entwurf for the native
 # meta-bridge install. These are not theming/personal hooks; they close background
-# autonomy/suggestion/compaction surfaces so Claude Code behaves like the same
-# single forged screwdriver that entwurf already enforces for ACP backends.
+# autonomy/suggestion surfaces so Claude Code behaves like the same single forged
+# screwdriver that entwurf already enforces for ACP backends.
+#
+# COMPACTION IS NOT ONE OF THEM (#94). entwurf neither enables nor disables it on
+# any rail, and the ACP side reached that state first: 0.5.0 really did carry a
+# pi-side compaction surface in CODE (`session_before_compact` cancelling by
+# default, `assertLegacyCompactionKnobUnset`, `smoke-compaction-policy`), the v2
+# subtraction removed it (`378c682`, 2026-06-16), and `623a4ea` (06-23) then
+# removed the documentation that had outlived the code by a week. As of #94 the
+# native rail stops owning `autoCompactEnabled` / `env.DISABLE_AUTOCOMPACT` too.
+# Backend-native context management is allowed; we add no guard and only measure.
+# Both keys live in RETIRED_SETTINGS_SCALARS below.
 MANAGED_SETTINGS_SCALARS: list[tuple[str, list[str], Any]] = [
     ("cleanupPeriodDays", ["cleanupPeriodDays"], 365),
-    ("env.DISABLE_AUTOCOMPACT", ["env", "DISABLE_AUTOCOMPACT"], "1"),
     ("promptSuggestionEnabled", ["promptSuggestionEnabled"], False),
     ("awaySummaryEnabled", ["awaySummaryEnabled"], False),
     ("autoMemoryEnabled", ["autoMemoryEnabled"], False),
     ("verbose", ["verbose"], False),
-    ("autoCompactEnabled", ["autoCompactEnabled"], False),
     ("showTurnDuration", ["showTurnDuration"], False),
     ("terminalProgressBarEnabled", ["terminalProgressBarEnabled"], False),
     ("useAutoModeDuringPlan", ["useAutoModeDuringPlan"], False),
@@ -89,6 +97,14 @@ MANAGED_SETTINGS_SCALARS: list[tuple[str, list[str], Any]] = [
 # exactly once, then uninstall can no longer restore over the operator's choice.
 RETIRED_SETTINGS_SCALARS: list[tuple[str, list[str], Any]] = [
     ("skipDangerousModePermissionPrompt", ["skipDangerousModePermissionPrompt"], True),
+    # #94 — compaction returns to the operator. RETIRED, never deleted outright:
+    # a deleted entry would be ORPHANED in an existing install-state, and
+    # uninstall() walks every ledger entry through restore_entry(), so it would
+    # put the suppression back over an operator who had since enabled compaction.
+    # Only this list's relinquish path pops the entry so uninstall can no longer
+    # reach it.
+    ("env.DISABLE_AUTOCOMPACT", ["env", "DISABLE_AUTOCOMPACT"], "1"),
+    ("autoCompactEnabled", ["autoCompactEnabled"], False),
 ]
 
 _managed_scalar_names = {name for name, _path, _desired in MANAGED_SETTINGS_SCALARS}
@@ -607,7 +623,9 @@ def check(repo: Path, asm: Path) -> None:
         if existed and type(value) is type(last_managed_value) and value == last_managed_value:
             print(
                 f"NOTE: settings {name}={json.dumps(last_managed_value)} is operator-owned; "
-                f"entwurf no longer suppresses or restores this warning choice"
+                f"entwurf no longer sets or restores this value. It still carries the value "
+                f"entwurf last managed, which is not drift and is not a defect — a retired "
+                f"key has no desired value to drift from."
             )
 
     checks = [

package/scripts/meta-bridge-statusline.sh

@@ -7,6 +7,11 @@
 # garden id is looked up by scanning meta-record BODIES via the native Claude
 # `session_id`. No cache, no filename authority, no DB.
 #
+# It also draws the #98 B unread badge: `✉N` when the garden's mailbox holds N
+# messages the read tool would still return, nothing when it holds none, and `✉?` when
+# the count could NOT be taken. That third state is the point — a statusline that silently
+# renders 0 on a broken read would say "no mail" about a mailbox it never looked in.
+#
 # Runtime dependency: python3 (already gated by install-meta-bridge/doctor).
 set -euo pipefail
 
@@ -18,7 +23,9 @@ input=$(cat)
 # wrote. doctor/smoke are the fail-LOUD surfaces; this surface stays silent.
 if ! command -v python3 >/dev/null 2>&1; then
   device="$(cat "$HOME/.current-device" 2>/dev/null || echo UNKNOWN)"
-  printf '%s ?\n🪛 ? cc' "$device"
+  # ✉? not a missing badge: with no python3 the unread count was not TAKEN. Drawing
+  # nothing here would be indistinguishable from "no mail" (#98 B).
+  printf '%s ?\n🪛 ? cc ✉?' "$device"
   exit 0
 fi
 STATUSLINE_INPUT="$input" python3 - <<'PY' || true
@@ -166,6 +173,60 @@ def garden_lookup(native_session_id: str) -> str:
     return "?"
 
 
+def meta_mailbox_dir() -> Path:
+    """Mirror of `defaultMetaMailboxDir()` in meta-session.ts, including the env
+    precedence. Kept as a mirror rather than a shell-out: the statusline runs on every
+    render (measured 4-10 times per doorbell rewake turn, #98 Phase 1 P2a), so it must not
+    spawn a node process to count files."""
+    override = os.environ.get("ENTWURF_META_MAILBOX_DIR")
+    if override:
+        return Path(override).expanduser().resolve()
+    agent = os.environ.get("PI_CODING_AGENT_DIR")
+    if agent:
+        return Path(agent).expanduser().resolve() / "meta-mailbox"
+    return Path.home() / ".pi" / "agent" / "meta-mailbox"
+
+
+def unread_badge(garden: str) -> str:
+    """`✉N` / `""` / `✉?` — the #98 B badge.
+
+    The counted set is EXACTLY what `entwurf_inbox_read` would return: `*.msg` (arrived,
+    doorbell has not rung yet) PLUS `*.msg.delivered` (doorbell rang, model has not read).
+    `readMetaInbox` uses that same union (meta-session.ts), and `.read` is excluded by
+    both — so the badge clears on the read, on the statusline's next execution.
+
+    Counting only `.msg.delivered` would under-report a letter that landed between two
+    doorbells; counting `.read` too would never clear.
+
+    Three distinct returns, deliberately:
+      - `""`     the mailbox was read and is empty. Silence is the quiet common case.
+      - `✉N`  N letters the read tool will hand back.
+      - `✉?`  the count could not be taken (unusable garden id, unreadable dir).
+                 NEVER collapsed into `""` — a false zero is the failure this whole issue
+                 is about.
+
+    A garden id that is `?`/`!`/`ready` means the lookup itself did not land, so there is
+    no mailbox to count and no claim to make: `✉?`, not silence.
+    """
+    if not garden or garden in ("?", "!"):
+        return "✉?"
+    if garden == "ready":
+        # No session_id yet (a fresh render before the hook minted a record). Nothing has
+        # been addressed to this session, so an empty badge is TRUE, not a guess.
+        return ""
+    if "/" in garden or garden.startswith("."):
+        return "✉?"
+    try:
+        box = meta_mailbox_dir() / garden
+        if not box.is_dir():
+            # A citizen with no mailbox dir has received nothing. Honest empty.
+            return ""
+        n = sum(1 for f in box.iterdir() if f.name.endswith(".msg") or f.name.endswith(".msg.delivered"))
+    except Exception:
+        return "✉?"
+    return f"✉{n}" if n > 0 else ""
+
+
 def main() -> None:
     data = load_input()
     raw_cwd = dig(data, "workspace", "current_dir") or data.get("cwd") or "?"
@@ -183,7 +244,9 @@ def main() -> None:
         f"{CYAN_BOLD}{cwd_tail}{RESET}"
         f"{DIM}{git_branch(str(raw_cwd))}{RESET}"
     )
-    line2 = f"{DIM}🪛 {garden} cc | {model}{vterm}{context_info(data)}{RESET}"
+    badge = unread_badge(garden)
+    badge_text = f" {badge}" if badge else ""
+    line2 = f"{DIM}🪛 {garden} cc{badge_text} | {model}{vterm}{context_info(data)}{RESET}"
     sys.stdout.write(f"{line1}\n{line2}")
 
 

package/scripts/mutants/meta-hook-session-switch.json

@@ -0,0 +1,223 @@
+{
+	"schemaVersion": 1,
+	"lane": "meta-hook-session-switch",
+	"mutants": [
+		{
+			"claim": "MHSS-RETIRE-PREV-GARDEN",
+			"title": "a hook that never retires the garden its pid stopped serving leaves the abandoned startup session advertising a doorbell nobody holds — the abandoned-session registration measured on oracle, where a real message sat unread in its mailbox for an hour",
+			"subject": "pi-extensions/meta-bridge-hook.ts",
+			"find": ["\t\tif (previous && previous.gardenId !== gardenId) {"],
+			"replace": ["\t\tif (false && previous && previous.gardenId !== gardenId) {"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-RETIRE-PREV-GARDEN]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-RETIRE-KEEPS-CURRENT",
+			"title": "retiring on ANY previous sender marker instead of a CHANGED one disarms the live session's own inbox on its next keystroke — the repair eating the citizen it exists to protect, which is worse than the defect",
+			"subject": "pi-extensions/meta-bridge-hook.ts",
+			"find": ["\t\tif (previous && previous.gardenId !== gardenId) {"],
+			"replace": ["\t\tif (previous) {"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-RETIRE-KEEPS-CURRENT]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-RETIRE-ONLY-OWN-OWNER",
+			"title": "dropping the owner-pid guard lets one session's SessionStart delete a marker another LIVE process holds — a silent cross-session disarm, not a stale-marker cleanup",
+			"subject": "pi-extensions/lib/meta-session.ts",
+			"find": ["\t\tif (!marker || marker.ownerPid !== opts.ownerPid) return false;"],
+			"replace": ["\t\tif (!marker) return false;"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-RETIRE-ONLY-OWN-OWNER]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-SOURCE-LOGGED",
+			"title": "dropping the vendor's `source` from the log leaves this host with no receipt for WHY a SessionStart fired — the exact evidence the #101 diagnosis had to inherit from vendor docs because nothing here recorded it",
+			"subject": "pi-extensions/meta-bridge-hook.ts",
+			"find": [
+				"\tconst source = typeof env.source === \"string\" && env.source.length > 0 ? env.source : \"(unset)\";"
+			],
+			"replace": ["\tconst source = \"(unset)\";"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-SOURCE-LOGGED]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-SENDER-JOIN-MEASURED",
+			"title": "a join that always answers yes turns the receiver marker back into proof of something it never proved — that the process holding it is still serving THIS garden",
+			"subject": "pi-extensions/lib/entwurf-deliverability.ts",
+			"find": [
+				"\treturn !!senderMarker && senderMarker.gardenId === marker.gardenId && senderMarker.backend === marker.backend;"
+			],
+			"replace": ["\treturn true;"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-SENDER-JOIN-MEASURED]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-SEAM-USES-JOIN",
+			"title": "restoring `watchArmed` as a copy of the identity match at the production seam re-ships the false deliverable even with the join intact — the shipped line that let a message be enqueued into a void",
+			"subject": "pi-extensions/lib/entwurf-v2-production.ts",
+			"find": [
+				"\t\tconst { ownerAlive, watchArmed } = resolveMailboxReceiverFacts(identity, {\n\t\t\treadReceiverMarker: io.readReceiverMarker,\n\t\t\treadSenderMarker: io.readSenderMarker,\n\t\t});"
+			],
+			"replace": [
+				"\t\tconst { ownerAlive } = resolveMailboxReceiverFacts(identity, {\n\t\t\treadReceiverMarker: io.readReceiverMarker,\n\t\t\treadSenderMarker: io.readSenderMarker,\n\t\t});\n\t\tconst watchArmed = ownerAlive;"
+			],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-SEAM-USES-JOIN]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-REJECT-CARRIES-REASON",
+			"title": "dropping the deliverability reason at the decider boundary hands the caller a verdict with no cause — the bare `mailbox-undeliverable` that sent a sibling looking for a dead session when the session was alive and had moved",
+			"subject": "pi-extensions/lib/entwurf-v2-decider.ts",
+			"find": [
+				"\t\t\treturn deliverability.deliverable\n\t\t\t\t? reject(receipt)\n\t\t\t\t: reject(receipt, { kind: \"mailbox-undeliverable\", reason: deliverability.reason });"
+			],
+			"replace": ["\t\t\treturn reject(receipt);"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-REJECT-CARRIES-REASON]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-REASON-RENDERED",
+			"title": "a surface that carries the diagnostic and prints nothing is the same silence one layer up — the operator still reads only `mailbox-undeliverable`",
+			"subject": "pi-extensions/lib/entwurf-v2-surface.ts",
+			"find": ["\t\t\t\ttext += `\\n  mailbox-undeliverable: ${result.diagnostic.reason}`;"],
+			"replace": ["\t\t\t\ttext += \"\";"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-REASON-RENDERED]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-PEERS-RECEIVER-OBSERVED",
+			"title": "collapsing `inactive` into `none` erases the distinction a reader needs — a watch that was armed and is no longer valid looks exactly like one that was never armed, which is the listing telling a caller nothing again",
+			"subject": "pi-extensions/lib/entwurf-peer-observe.ts",
+			"find": ["\treturn fs.existsSync(metaReceiverMarkerPath(identity.gardenId)) ? \"inactive\" : \"none\";"],
+			"replace": ["\treturn \"none\";"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-PEERS-RECEIVER-OBSERVED]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-PEERS-TRANSCRIPT-OBSERVED",
+			"title": "reporting every transcript as present hides exactly the phantom this column exists to show: a registration minted at SessionStart with no conversation ever written behind it",
+			"subject": "pi-extensions/lib/entwurf-peer-observe.ts",
+			"find": [
+				"\t\treturn identity.transcriptPath && fs.existsSync(identity.transcriptPath) ? \"exists\" : \"absent\";"
+			],
+			"replace": ["\t\treturn \"exists\";"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-PEERS-TRANSCRIPT-OBSERVED]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-PEERS-COLUMNS-RENDERED",
+			"title": "measuring both axes and printing neither returns the listing to two identical rows for a live citizen and a phantom — the surface gap that made a sibling dispatch into a void",
+			"subject": "pi-extensions/lib/entwurf-peers-render.ts",
+			"find": [
+				"\t\t`- ${p.gardenId}  backend=${p.backend}  liveness=${p.liveness}  receiver=${p.receiver}  ` +\n\t\t`transcript=${p.transcript}  cwd=${p.cwd}  model=${model}`"
+			],
+			"replace": [
+				"\t\t`- ${p.gardenId}  backend=${p.backend}  liveness=${p.liveness}  ` + `cwd=${p.cwd}  model=${model}`"
+			],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-PEERS-COLUMNS-RENDERED]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-RETIRE-ARM-CAPABLE-ONLY",
+			"title": "retiring from an event that cannot arm subtracts a doorbell with nothing in the same run able to restore one — UserPromptSubmit cannot emit watchPaths, so a retirement reached from there is a one-way disarm",
+			"subject": "pi-extensions/meta-bridge-hook.ts",
+			"find": [
+				"\t\tconst previous =\n\t\t\tarmProvenanceFor(eventName) !== null\n\t\t\t\t? readMetaSenderMarker({ backend: \"claude-code\", ownerPid, verifyOwner: false })\n\t\t\t\t: null;"
+			],
+			"replace": [
+				"\t\tconst previous = readMetaSenderMarker({ backend: \"claude-code\", ownerPid, verifyOwner: false });"
+			],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-RETIRE-ARM-CAPABLE-ONLY]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-RECORDS-SURVIVE",
+			"title": "a retirement that takes the RECORD with the marker deletes identity to clean up presence — the store-certification and fresh-cut rules exist because a record is the only address a citizen has",
+			"subject": "pi-extensions/meta-bridge-hook.ts",
+			"find": ["\t\t\tconst retired = removeMetaReceiverMarker({ gardenId: previous.gardenId, ownerPid });"],
+			"replace": [
+				"\t\t\tconst retired = removeMetaReceiverMarker({ gardenId: previous.gardenId, ownerPid });\n\t\t\tfs.rmSync(path.join(defaultMetaSessionsDir(), `${previous.gardenId}.meta.json`), { force: true });"
+			],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-RECORDS-SURVIVE]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-EXACTLY-ONE-DELIVERABLE",
+			"title": "forcing the watch fact closed refuses the citizen the operator is actually in — fail-closed is not free when it closes on every live session too",
+			"subject": "pi-extensions/lib/entwurf-v2-production.ts",
+			"find": ["\t\t\townerAlive,\n\t\t\twatchArmed,\n\t\t});"],
+			"replace": ["\t\t\townerAlive,\n\t\t\twatchArmed: false,\n\t\t});"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-EXACTLY-ONE-DELIVERABLE]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-JOIN-SCOPE-OWNERKIND",
+			"title": "admitting copilot-extension into the sender-marker join makes every Copilot citizen permanently mailbox-undeliverable: its watch owner is a forked child whose pid never carries a sender marker, so the join can only ever answer no",
+			"subject": "pi-extensions/lib/entwurf-deliverability.ts",
+			"find": ["export const SENDER_JOINED_RECEIVER_OWNER_KINDS: readonly string[] = [\"claude-code-cli\"];"],
+			"replace": [
+				"export const SENDER_JOINED_RECEIVER_OWNER_KINDS: readonly string[] = [\"claude-code-cli\", \"copilot-extension\"];"
+			],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-JOIN-SCOPE-OWNERKIND]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-SENDER-START-KEY-VERIFIED",
+			"title": "reading the sender marker without the pid-reuse guard lets a dead session's leftover file answer \"which garden does this pid serve now?\" — the join then vouches for a watch nobody holds",
+			"subject": "pi-extensions/lib/entwurf-v2-production.ts",
+			"find": [
+				"\t\t\t((backend: string, ownerPid: number) => readMetaSenderMarker({ backend: requireBackend(backend), ownerPid })),"
+			],
+			"replace": [
+				"\t\t\t((backend: string, ownerPid: number) =>\n\t\t\t\treadMetaSenderMarker({ backend: requireBackend(backend), ownerPid, verifyOwner: false })),"
+			],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-SENDER-START-KEY-VERIFIED]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-JOIN-BACKEND-EQUALITY",
+			"title": "comparing only the garden id lets a marker written by another backend under the same pid vouch for this receiver — two harnesses can key markers under one process",
+			"subject": "pi-extensions/lib/entwurf-deliverability.ts",
+			"find": [
+				"\treturn !!senderMarker && senderMarker.gardenId === marker.gardenId && senderMarker.backend === marker.backend;"
+			],
+			"replace": ["\treturn !!senderMarker && senderMarker.gardenId === marker.gardenId;"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-JOIN-BACKEND-EQUALITY]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		}
+	]
+}