@junghanacs/entwurf 0.17.2 → 0.18.0

package/scripts/mutants/meta-hook-session-switch.json

@@ -0,0 +1,223 @@
+{
+	"schemaVersion": 1,
+	"lane": "meta-hook-session-switch",
+	"mutants": [
+		{
+			"claim": "MHSS-RETIRE-PREV-GARDEN",
+			"title": "a hook that never retires the garden its pid stopped serving leaves the abandoned startup session advertising a doorbell nobody holds — the abandoned-session registration measured on oracle, where a real message sat unread in its mailbox for an hour",
+			"subject": "pi-extensions/meta-bridge-hook.ts",
+			"find": ["\t\tif (previous && previous.gardenId !== gardenId) {"],
+			"replace": ["\t\tif (false && previous && previous.gardenId !== gardenId) {"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-RETIRE-PREV-GARDEN]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-RETIRE-KEEPS-CURRENT",
+			"title": "retiring on ANY previous sender marker instead of a CHANGED one disarms the live session's own inbox on its next keystroke — the repair eating the citizen it exists to protect, which is worse than the defect",
+			"subject": "pi-extensions/meta-bridge-hook.ts",
+			"find": ["\t\tif (previous && previous.gardenId !== gardenId) {"],
+			"replace": ["\t\tif (previous) {"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-RETIRE-KEEPS-CURRENT]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-RETIRE-ONLY-OWN-OWNER",
+			"title": "dropping the owner-pid guard lets one session's SessionStart delete a marker another LIVE process holds — a silent cross-session disarm, not a stale-marker cleanup",
+			"subject": "pi-extensions/lib/meta-session.ts",
+			"find": ["\t\tif (!marker || marker.ownerPid !== opts.ownerPid) return false;"],
+			"replace": ["\t\tif (!marker) return false;"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-RETIRE-ONLY-OWN-OWNER]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-SOURCE-LOGGED",
+			"title": "dropping the vendor's `source` from the log leaves this host with no receipt for WHY a SessionStart fired — the exact evidence the #101 diagnosis had to inherit from vendor docs because nothing here recorded it",
+			"subject": "pi-extensions/meta-bridge-hook.ts",
+			"find": [
+				"\tconst source = typeof env.source === \"string\" && env.source.length > 0 ? env.source : \"(unset)\";"
+			],
+			"replace": ["\tconst source = \"(unset)\";"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-SOURCE-LOGGED]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-SENDER-JOIN-MEASURED",
+			"title": "a join that always answers yes turns the receiver marker back into proof of something it never proved — that the process holding it is still serving THIS garden",
+			"subject": "pi-extensions/lib/entwurf-deliverability.ts",
+			"find": [
+				"\treturn !!senderMarker && senderMarker.gardenId === marker.gardenId && senderMarker.backend === marker.backend;"
+			],
+			"replace": ["\treturn true;"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-SENDER-JOIN-MEASURED]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-SEAM-USES-JOIN",
+			"title": "restoring `watchArmed` as a copy of the identity match at the production seam re-ships the false deliverable even with the join intact — the shipped line that let a message be enqueued into a void",
+			"subject": "pi-extensions/lib/entwurf-v2-production.ts",
+			"find": [
+				"\t\tconst { ownerAlive, watchArmed } = resolveMailboxReceiverFacts(identity, {\n\t\t\treadReceiverMarker: io.readReceiverMarker,\n\t\t\treadSenderMarker: io.readSenderMarker,\n\t\t});"
+			],
+			"replace": [
+				"\t\tconst { ownerAlive } = resolveMailboxReceiverFacts(identity, {\n\t\t\treadReceiverMarker: io.readReceiverMarker,\n\t\t\treadSenderMarker: io.readSenderMarker,\n\t\t});\n\t\tconst watchArmed = ownerAlive;"
+			],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-SEAM-USES-JOIN]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-REJECT-CARRIES-REASON",
+			"title": "dropping the deliverability reason at the decider boundary hands the caller a verdict with no cause — the bare `mailbox-undeliverable` that sent a sibling looking for a dead session when the session was alive and had moved",
+			"subject": "pi-extensions/lib/entwurf-v2-decider.ts",
+			"find": [
+				"\t\t\treturn deliverability.deliverable\n\t\t\t\t? reject(receipt)\n\t\t\t\t: reject(receipt, { kind: \"mailbox-undeliverable\", reason: deliverability.reason });"
+			],
+			"replace": ["\t\t\treturn reject(receipt);"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-REJECT-CARRIES-REASON]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-REASON-RENDERED",
+			"title": "a surface that carries the diagnostic and prints nothing is the same silence one layer up — the operator still reads only `mailbox-undeliverable`",
+			"subject": "pi-extensions/lib/entwurf-v2-surface.ts",
+			"find": ["\t\t\t\ttext += `\\n  mailbox-undeliverable: ${result.diagnostic.reason}`;"],
+			"replace": ["\t\t\t\ttext += \"\";"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-REASON-RENDERED]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-PEERS-RECEIVER-OBSERVED",
+			"title": "collapsing `inactive` into `none` erases the distinction a reader needs — a watch that was armed and is no longer valid looks exactly like one that was never armed, which is the listing telling a caller nothing again",
+			"subject": "pi-extensions/lib/entwurf-peer-observe.ts",
+			"find": ["\treturn fs.existsSync(metaReceiverMarkerPath(identity.gardenId)) ? \"inactive\" : \"none\";"],
+			"replace": ["\treturn \"none\";"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-PEERS-RECEIVER-OBSERVED]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-PEERS-TRANSCRIPT-OBSERVED",
+			"title": "reporting every transcript as present hides exactly the phantom this column exists to show: a registration minted at SessionStart with no conversation ever written behind it",
+			"subject": "pi-extensions/lib/entwurf-peer-observe.ts",
+			"find": [
+				"\t\treturn identity.transcriptPath && fs.existsSync(identity.transcriptPath) ? \"exists\" : \"absent\";"
+			],
+			"replace": ["\t\treturn \"exists\";"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-PEERS-TRANSCRIPT-OBSERVED]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-PEERS-COLUMNS-RENDERED",
+			"title": "measuring both axes and printing neither returns the listing to two identical rows for a live citizen and a phantom — the surface gap that made a sibling dispatch into a void",
+			"subject": "pi-extensions/lib/entwurf-peers-render.ts",
+			"find": [
+				"\t\t`- ${p.gardenId}  backend=${p.backend}  liveness=${p.liveness}  receiver=${p.receiver}  ` +\n\t\t`transcript=${p.transcript}  cwd=${p.cwd}  model=${model}`"
+			],
+			"replace": [
+				"\t\t`- ${p.gardenId}  backend=${p.backend}  liveness=${p.liveness}  ` + `cwd=${p.cwd}  model=${model}`"
+			],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-PEERS-COLUMNS-RENDERED]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-RETIRE-ARM-CAPABLE-ONLY",
+			"title": "retiring from an event that cannot arm subtracts a doorbell with nothing in the same run able to restore one — UserPromptSubmit cannot emit watchPaths, so a retirement reached from there is a one-way disarm",
+			"subject": "pi-extensions/meta-bridge-hook.ts",
+			"find": [
+				"\t\tconst previous =\n\t\t\tarmProvenanceFor(eventName) !== null\n\t\t\t\t? readMetaSenderMarker({ backend: \"claude-code\", ownerPid, verifyOwner: false })\n\t\t\t\t: null;"
+			],
+			"replace": [
+				"\t\tconst previous = readMetaSenderMarker({ backend: \"claude-code\", ownerPid, verifyOwner: false });"
+			],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-RETIRE-ARM-CAPABLE-ONLY]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-RECORDS-SURVIVE",
+			"title": "a retirement that takes the RECORD with the marker deletes identity to clean up presence — the store-certification and fresh-cut rules exist because a record is the only address a citizen has",
+			"subject": "pi-extensions/meta-bridge-hook.ts",
+			"find": ["\t\t\tconst retired = removeMetaReceiverMarker({ gardenId: previous.gardenId, ownerPid });"],
+			"replace": [
+				"\t\t\tconst retired = removeMetaReceiverMarker({ gardenId: previous.gardenId, ownerPid });\n\t\t\tfs.rmSync(path.join(defaultMetaSessionsDir(), `${previous.gardenId}.meta.json`), { force: true });"
+			],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-RECORDS-SURVIVE]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-EXACTLY-ONE-DELIVERABLE",
+			"title": "forcing the watch fact closed refuses the citizen the operator is actually in — fail-closed is not free when it closes on every live session too",
+			"subject": "pi-extensions/lib/entwurf-v2-production.ts",
+			"find": ["\t\t\townerAlive,\n\t\t\twatchArmed,\n\t\t});"],
+			"replace": ["\t\t\townerAlive,\n\t\t\twatchArmed: false,\n\t\t});"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-EXACTLY-ONE-DELIVERABLE]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-JOIN-SCOPE-OWNERKIND",
+			"title": "admitting copilot-extension into the sender-marker join makes every Copilot citizen permanently mailbox-undeliverable: its watch owner is a forked child whose pid never carries a sender marker, so the join can only ever answer no",
+			"subject": "pi-extensions/lib/entwurf-deliverability.ts",
+			"find": ["export const SENDER_JOINED_RECEIVER_OWNER_KINDS: readonly string[] = [\"claude-code-cli\"];"],
+			"replace": [
+				"export const SENDER_JOINED_RECEIVER_OWNER_KINDS: readonly string[] = [\"claude-code-cli\", \"copilot-extension\"];"
+			],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-JOIN-SCOPE-OWNERKIND]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-SENDER-START-KEY-VERIFIED",
+			"title": "reading the sender marker without the pid-reuse guard lets a dead session's leftover file answer \"which garden does this pid serve now?\" — the join then vouches for a watch nobody holds",
+			"subject": "pi-extensions/lib/entwurf-v2-production.ts",
+			"find": [
+				"\t\t\t((backend: string, ownerPid: number) => readMetaSenderMarker({ backend: requireBackend(backend), ownerPid })),"
+			],
+			"replace": [
+				"\t\t\t((backend: string, ownerPid: number) =>\n\t\t\t\treadMetaSenderMarker({ backend: requireBackend(backend), ownerPid, verifyOwner: false })),"
+			],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-SENDER-START-KEY-VERIFIED]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-JOIN-BACKEND-EQUALITY",
+			"title": "comparing only the garden id lets a marker written by another backend under the same pid vouch for this receiver — two harnesses can key markers under one process",
+			"subject": "pi-extensions/lib/entwurf-deliverability.ts",
+			"find": [
+				"\treturn !!senderMarker && senderMarker.gardenId === marker.gardenId && senderMarker.backend === marker.backend;"
+			],
+			"replace": ["\treturn !!senderMarker && senderMarker.gardenId === marker.gardenId;"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-JOIN-BACKEND-EQUALITY]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		}
+	]
+}

package/scripts/raw-claude-session-switch/README.md

@@ -0,0 +1,170 @@
+# Raw measurement — what Claude Code's SessionStart actually says on a session switch (#101)
+
+**Status: RUN on oracle, 2026-09-04, Claude Code 2.1.260, `--model haiku`.** GLG approved the
+LIVE cells (S1–S5 first, S6 added after). Six cells, one host, one vendor version — that is the
+whole claim. Everything below is verbatim from `~/.pi/agent/meta-bridge-hook.log`, produced by
+the repaired hook, which now logs the envelope's `source` on every line it writes.
+
+The #101 repair does **not** depend on any of it: the retirement rule reads the sender marker on
+disk and branches on no vendor field. What this lab adds is the envelope order the diagnosis had
+to inherit from vendor documentation — and it **refuted one inherited sentence** (see S2/S3).
+
+## What the lab changed in the story
+
+The diagnosis said the two SessionStarts come from the TUI resume picker firing once for a
+placeholder id and again for the picked id. **Measured, that is not what happens.**
+`claude --resume`, with or without the picker, fires exactly ONE SessionStart carrying the real
+id (S2, S3). The two-SessionStart shape comes from a bare `claude` — which mints a real, empty
+new session — followed by an in-session `/resume` or `/clear` (S4, S5). The field case fits: `ps`
+showed pid 143742 started bare `claude` at 09:31:32, and the second SessionStart landed 4s later.
+
+The consequence for the repair is nil (either way one pid stops serving one garden and starts
+serving another, and the sender marker is what says so), but the prose was wrong and is now
+corrected in `meta-bridge-hook.ts`, `entwurf-deliverability.ts`, `meta-session.ts` and
+`check-meta-hook-session-switch.ts`.
+
+## The three falsification conditions, judged
+
+The pre-run README named three findings that would have changed the repair. All three are
+answered:
+
+1. **"A switch leaves the sender marker pointing at the OLD garden when the receiver marker has
+   already moved"** — the repair's one real assumption. **Not observed.** In S4 and S5 the
+   retirement line is written BEFORE the sender marker is rewritten, and both precede the new
+   garden's arm (log order below, same millisecond). The hook reads the pre-switch value it needs.
+2. **"Compaction re-fires SessionStart under a NEW native id, so a compacted session is a garden
+   switch"** — **refuted.** Compaction (manual S6a and automatic S6b) re-fires SessionStart for
+   the SAME native id, attaches the SAME garden, and retires nothing. The same-garden rule covers
+   it; nothing had to change.
+3. **"Three SessionStarts in one process"** — **not observed** in any cell. Every switch was
+   exactly one additional SessionStart, and the two-drive gate fixture stays adequate.
+
+## The cells
+
+| cell | how it was reached | SessionStarts | `source` | native id | retirement |
+|---|---|---|---|---|---|
+| S1 | bare `claude` | 1 | `startup` | new | — (nothing prior) |
+| S2 | `claude --resume` → picker → Enter | **1** | `resume` | the picked one | — (no prior garden in this pid) |
+| S3 | `claude --resume <id>` (argv) | **1** | `resume` | the given one | — |
+| S4 | bare `claude`, then in-session `/resume` | **2** | `startup` → `resume` | new → picked | **yes** — the startup garden retired |
+| S5 | in-session `/clear` | 1 more | `clear` | new | **yes** — the previous garden retired |
+| S6a | in-session `/compact` | 1 more | `compact` | **same** | no (same garden) |
+| S6b | automatic compaction at ~98% context | 1 more | `compact` | **same** | no (same garden) |
+
+`UserPromptSubmit` carries **no** `source` at all (`source=(unset)`) — worth knowing, since it is
+the event that rewrites the sender marker on every keystroke and must retire nothing.
+
+It also always names the session it belongs to. Across the four lab pids, **8 of 8**
+`UserPromptSubmit` events carried the native id their own pid's preceding `SessionStart` had
+established, and none carried any other. The hook runs synchronously inside the session's own
+process, so a keystroke envelope is that session speaking — which is why the pointer it moves is
+treated as authoritative rather than as something to defend against.
+
+## Verbatim receipts
+
+**S1 — bare `claude`.** One SessionStart, a fresh garden, `source=startup`. Then one turn, whose
+`UserPromptSubmit` carries no source and retires nothing (same garden):
+
+```
+2026-09-04T04:10:22.678Z INFO create record 20260904T131022-ac38b6.meta.json (event=SessionStart, source=startup, native=bbba9cbe-f11c-4b67-a0bd-991c3f678238)
+2026-09-04T04:10:22.681Z INFO sender marker 564537 -> 20260904T131022-ac38b6 (event=SessionStart, source=startup)
+2026-09-04T04:10:22.681Z INFO armed watch /home/junghan/.pi/agent/meta-mailbox/20260904T131022-ac38b6/inbox.signal
+2026-09-04T04:10:22.682Z INFO receiver marker 20260904T131022-ac38b6 owner=564537 arm=SessionStart source=startup
+2026-09-04T04:11:00.196Z INFO attach record 20260904T131022-ac38b6.meta.json (event=UserPromptSubmit, source=(unset), native=bbba9cbe-f11c-4b67-a0bd-991c3f678238)
+2026-09-04T04:11:00.198Z INFO sender marker 564537 -> 20260904T131022-ac38b6 (event=UserPromptSubmit, source=(unset))
+```
+
+**S2 — `claude --resume`, picker, Enter.** Nothing at all is logged while the picker is open; the
+single SessionStart lands on selection, already carrying the real native id. **No placeholder.**
+
+```
+2026-09-04T04:12:24.853Z INFO attach record 20260904T131022-ac38b6.meta.json (event=SessionStart, source=resume, native=bbba9cbe-f11c-4b67-a0bd-991c3f678238)
+2026-09-04T04:12:24.855Z INFO sender marker 565726 -> 20260904T131022-ac38b6 (event=SessionStart, source=resume)
+2026-09-04T04:12:24.855Z INFO armed watch /home/junghan/.pi/agent/meta-mailbox/20260904T131022-ac38b6/inbox.signal
+2026-09-04T04:12:24.855Z INFO receiver marker 20260904T131022-ac38b6 owner=565726 arm=SessionStart source=resume
+```
+
+**S3 — `claude --resume <id>` (argv).** Same shape as S2:
+
+```
+2026-09-04T04:14:53.710Z INFO attach record 20260904T131022-ac38b6.meta.json (event=SessionStart, source=resume, native=bbba9cbe-f11c-4b67-a0bd-991c3f678238)
+2026-09-04T04:14:53.711Z INFO sender marker 568726 -> 20260904T131022-ac38b6 (event=SessionStart, source=resume)
+2026-09-04T04:14:53.711Z INFO armed watch /home/junghan/.pi/agent/meta-mailbox/20260904T131022-ac38b6/inbox.signal
+2026-09-04T04:14:53.712Z INFO receiver marker 20260904T131022-ac38b6 owner=568726 arm=SessionStart source=resume
+```
+
+**S4 — THE cell: bare `claude`, then `/resume`.** This is #101 reproduced deliberately, and the
+repair firing on it. One pid (566479), two gardens, 33 seconds apart:
+
+```
+2026-09-04T04:13:04.371Z INFO create record 20260904T131304-f85f0e.meta.json (event=SessionStart, source=startup, native=aa49d155-8416-41a5-9d59-52d747b428d7)
+2026-09-04T04:13:04.372Z INFO sender marker 566479 -> 20260904T131304-f85f0e (event=SessionStart, source=startup)
+2026-09-04T04:13:04.373Z INFO armed watch /home/junghan/.pi/agent/meta-mailbox/20260904T131304-f85f0e/inbox.signal
+2026-09-04T04:13:04.373Z INFO receiver marker 20260904T131304-f85f0e owner=566479 arm=SessionStart source=startup
+2026-09-04T04:13:37.966Z INFO attach record 20260904T131022-ac38b6.meta.json (event=SessionStart, source=resume, native=bbba9cbe-f11c-4b67-a0bd-991c3f678238)
+2026-09-04T04:13:37.967Z INFO retired receiver marker 20260904T131304-f85f0e — owner pid 566479 switched to 20260904T131022-ac38b6 (event=SessionStart, source=resume)
+2026-09-04T04:13:37.968Z INFO sender marker 566479 -> 20260904T131022-ac38b6 (event=SessionStart, source=resume)
+2026-09-04T04:13:37.969Z INFO armed watch /home/junghan/.pi/agent/meta-mailbox/20260904T131022-ac38b6/inbox.signal
+2026-09-04T04:13:37.970Z INFO receiver marker 20260904T131022-ac38b6 owner=566479 arm=SessionStart source=resume
+```
+
+State immediately after, read from the real store (read-only):
+
+```
+- 20260904T131022-ac38b6  backend=claude-code  liveness=unsupported  receiver=active  transcript=exists  cwd=…/scratchpad/lab
+- 20260904T131304-f85f0e  backend=claude-code  liveness=unsupported  receiver=none    transcript=absent  cwd=…/scratchpad/lab
+```
+
+Both records survive. `meta-receivers/` holds only `20260904T131022-ac38b6.json`, and
+`meta-senders/claude-code/566479.json` names `20260904T131022-ac38b6`. Before the repair the
+abandoned garden would have read `receiver=active` and accepted mail — that is the #101 defect,
+and this is the same shape as the field case (`ac7a1a`, still on this host as evidence).
+
+**S5 — `/clear`.** Same switch shape, `source=clear`, and the retirement fires again:
+
+```
+2026-09-04T04:14:18.703Z INFO create record 20260904T131418-31129e.meta.json (event=SessionStart, source=clear, native=eac3c9ae-2873-454b-90ca-11b7ee24b508)
+2026-09-04T04:14:18.705Z INFO retired receiver marker 20260904T131022-ac38b6 — owner pid 566479 switched to 20260904T131418-31129e (event=SessionStart, source=clear)
+2026-09-04T04:14:18.706Z INFO sender marker 566479 -> 20260904T131418-31129e (event=SessionStart, source=clear)
+2026-09-04T04:14:18.706Z INFO armed watch /home/junghan/.pi/agent/meta-mailbox/20260904T131418-31129e/inbox.signal
+2026-09-04T04:14:18.706Z INFO receiver marker 20260904T131418-31129e owner=566479 arm=SessionStart source=clear
+```
+
+**S6a — manual `/compact`.** SAME native id, SAME garden, no retirement:
+
+```
+2026-09-04T04:15:29.240Z INFO attach record 20260904T131022-ac38b6.meta.json (event=SessionStart, source=compact, native=bbba9cbe-f11c-4b67-a0bd-991c3f678238)
+2026-09-04T04:15:29.242Z INFO sender marker 568726 -> 20260904T131022-ac38b6 (event=SessionStart, source=compact)
+2026-09-04T04:15:29.242Z INFO armed watch /home/junghan/.pi/agent/meta-mailbox/20260904T131022-ac38b6/inbox.signal
+2026-09-04T04:15:29.243Z INFO receiver marker 20260904T131022-ac38b6 owner=568726 arm=SessionStart source=compact
+```
+
+**S6b — automatic compaction.** Reached by having the session read large repo files until the
+context filled: 60% → 80% → 91% → 98% (196.5K/200K of a 200K window), then one more large read
+tipped it. Byte-identical shape to S6a; context fell to 72.1K afterwards:
+
+```
+2026-09-04T04:29:06.583Z INFO attach record 20260904T131022-ac38b6.meta.json (event=SessionStart, source=compact, native=bbba9cbe-f11c-4b67-a0bd-991c3f678238)
+2026-09-04T04:29:06.585Z INFO sender marker 568726 -> 20260904T131022-ac38b6 (event=SessionStart, source=compact)
+2026-09-04T04:29:06.586Z INFO armed watch /home/junghan/.pi/agent/meta-mailbox/20260904T131022-ac38b6/inbox.signal
+2026-09-04T04:29:06.587Z INFO receiver marker 20260904T131022-ac38b6 owner=568726 arm=SessionStart source=compact
+```
+
+Manual and automatic compaction are the same event to this hook. Note it needs ~98% of the window
+before it fires, and that a session under a smaller model or a shorter window will reach it sooner
+— the threshold is the vendor's, not ours.
+
+## How to re-run
+
+`tmux new-session -d -s lab -c <scratch> 'claude --model haiku'`, drive it with `send-keys` (send
+the text and the `Enter` as SEPARATE calls — a combined one leaves the prompt typed but
+unsubmitted), and read the delta of `~/.pi/agent/meta-bridge-hook.log` between cells. Nothing else
+is needed: the hook log is the instrument. A cell costs a few seconds of a cheap model, except
+S6b, which costs one full context window.
+
+## Boundary
+
+One host (oracle), one vendor version (2.1.260), one model (Haiku 4.5), one operator's config.
+The cells say what this Claude does here; they do not certify another host, an older Claude, or
+a different terminal. The repair does not rest on them — it rests on the sender marker — which is
+why a refutation here (S2/S3) corrected the prose and left the code alone.

package/scripts/smoke-acp-cortex-live.ts

@@ -51,7 +51,11 @@ import * as os from "node:os";
 import * as path from "node:path";
 import * as readline from "node:readline";
 import { fileURLToPath } from "node:url";
-import { upsertMetaSession, writeMetaReceiverMarker } from "../pi-extensions/lib/meta-session.ts";
+import {
+	upsertMetaSession,
+	writeMetaReceiverMarker,
+	writeMetaSenderMarker,
+} from "../pi-extensions/lib/meta-session.ts";
 import { terminateChild } from "./lib/acp-child-cleanup.ts";
 import { skipLive } from "./lib/live-skip.ts";
 import { PI_BOOT_TIMEOUT_MS, waitForPiRecord } from "./lib/pi-record-discovery.ts";
@@ -210,7 +214,8 @@ async function main(): Promise<void> {
 	const sessionsDir = path.join(world, "sessions");
 	const mailboxDir = path.join(world, "mailbox");
 	const receiversDir = path.join(world, "receivers");
-	for (const d of [sessionsDir, mailboxDir, receiversDir]) await fsp.mkdir(d, { recursive: true });
+	const sendersDir = path.join(world, "senders");
+	for (const d of [sessionsDir, mailboxDir, receiversDir, sendersDir]) await fsp.mkdir(d, { recursive: true });
 
 	const nonce = `CORTEXV2-${crypto.randomBytes(5).toString("hex").toUpperCase()}`;
 
@@ -224,6 +229,12 @@ async function main(): Promise<void> {
 		dir: sessionsDir,
 	});
 	const receiverGid = receiver.record.gardenId;
+	// The receiver marker alone is no longer the whole fixture (#101): a `claude-code-cli` watch
+	// owner is deliverable only while ITS OWN sender marker still names the garden it is armed
+	// for — that join is what refuses a session which switched away in place. A receiver marker
+	// with no sender marker beside it models a state the product now treats as retired, so this
+	// smoke would fail on its own fixture instead of on the rail it exists to prove. Same shape
+	// as smoke-mux-lifecycle-live / smoke-omp-fresh-live, which already seeded both.
 	writeMetaReceiverMarker({
 		gardenId: receiverGid,
 		backend: "claude-code",
@@ -232,6 +243,14 @@ async function main(): Promise<void> {
 		armProvenance: "session-start",
 		receiversDir,
 	});
+	writeMetaSenderMarker({
+		backend: "claude-code",
+		gardenId: receiverGid,
+		nativeSessionId: receiver.record.nativeSessionId,
+		cwd: world,
+		ownerPid: process.pid,
+		sendersDir,
+	});
 	console.error(`[smoke-acp-cortex-live] peer:  ${receiverGid} (armed mailbox receiver)`);
 
 	let senderGid = "";
@@ -252,6 +271,7 @@ async function main(): Promise<void> {
 					ENTWURF_META_SESSIONS_DIR: sessionsDir,
 					ENTWURF_META_MAILBOX_DIR: mailboxDir,
 					ENTWURF_META_RECEIVERS_DIR: receiversDir,
+					ENTWURF_META_SENDERS_DIR: sendersDir,
 				},
 			},
 		);

package/scripts/smoke-acp-v2-send-live.ts

@@ -79,7 +79,11 @@ import * as os from "node:os";
 import * as path from "node:path";
 import * as readline from "node:readline";
 import { fileURLToPath } from "node:url";
-import { upsertMetaSession, writeMetaReceiverMarker } from "../pi-extensions/lib/meta-session.ts";
+import {
+	upsertMetaSession,
+	writeMetaReceiverMarker,
+	writeMetaSenderMarker,
+} from "../pi-extensions/lib/meta-session.ts";
 import { terminateChild } from "./lib/acp-child-cleanup.ts";
 import { skipLive } from "./lib/live-skip.ts";
 import { PI_BOOT_TIMEOUT_MS, waitForPiRecord } from "./lib/pi-record-discovery.ts";
@@ -210,7 +214,8 @@ async function main(): Promise<void> {
 	const sessionsDir = path.join(world, "sessions");
 	const mailboxDir = path.join(world, "mailbox");
 	const receiversDir = path.join(world, "receivers");
-	for (const d of [sessionsDir, mailboxDir, receiversDir]) await fsp.mkdir(d, { recursive: true });
+	const sendersDir = path.join(world, "senders");
+	for (const d of [sessionsDir, mailboxDir, receiversDir, sendersDir]) await fsp.mkdir(d, { recursive: true });
 
 	const nonce = `ACPV2-${crypto.randomBytes(5).toString("hex").toUpperCase()}`;
 
@@ -225,6 +230,13 @@ async function main(): Promise<void> {
 	});
 	const receiverGid = receiver.record.gardenId;
 	// armed = a presence marker owned by THIS (live) process → deliverable.
+	//
+	// The receiver marker alone is no longer the whole fixture (#101): a `claude-code-cli` watch
+	// owner is deliverable only while ITS OWN sender marker still names the garden it is armed
+	// for — that join is what refuses a session which switched away in place. A receiver marker
+	// with no sender marker beside it models a state the product now treats as retired, so this
+	// smoke would fail on its own fixture instead of on the rail it exists to prove. Same shape
+	// as smoke-mux-lifecycle-live / smoke-omp-fresh-live, which already seeded both.
 	writeMetaReceiverMarker({
 		gardenId: receiverGid,
 		backend: "claude-code",
@@ -233,6 +245,14 @@ async function main(): Promise<void> {
 		armProvenance: "session-start",
 		receiversDir,
 	});
+	writeMetaSenderMarker({
+		backend: "claude-code",
+		gardenId: receiverGid,
+		nativeSessionId: receiver.record.nativeSessionId,
+		cwd: world,
+		ownerPid: process.pid,
+		sendersDir,
+	});
 	console.error(`[smoke-acp-v2-send-live] peer:  ${receiverGid} (armed mailbox receiver)`);
 
 	let senderGid = "";
@@ -252,6 +272,7 @@ async function main(): Promise<void> {
 					ENTWURF_META_SESSIONS_DIR: sessionsDir,
 					ENTWURF_META_MAILBOX_DIR: mailboxDir,
 					ENTWURF_META_RECEIVERS_DIR: receiversDir,
+					ENTWURF_META_SENDERS_DIR: sendersDir,
 				},
 			},
 		);