@junghanacs/entwurf 0.19.0 → 0.20.1

package/run.sh

@@ -201,7 +201,7 @@ Usage:
   ./run.sh smoke-copilot-mcp-state       # Copilot MCP install/doctor/inverse regression. Offline/deterministic
   ./run.sh smoke-omp-bridge-state        # OMP birth-extension install/doctor/inverse regression: placement, stale-writer detection, honest inverse, no-state refusal (structurally VALID as well as foreign), symlink refusal, ambiguous-agent-dir refusal (ledger M6), and a poisoned PI_CODING_AGENT_DIR that attracts no artifact. Fully sandboxed HOME/PI/XDG. Offline/deterministic
   ./run.sh smoke-agy-hooks-state      # agy PreInvocation birth/sender hook install/doctor/inverse + direct stdin→meta-record regression. Offline/deterministic
-  ./run.sh smoke-user-scope-citizen   # 0.12.6 install-boundary: pi packages[] registration SSOT (register-pi-package.py) — idempotent + preserves unrelated + remove symmetry + fails loud, and the #86 C2 explicit ownership cells (project scope still normalizes ITS OWN stale entries; user scope refuses other owners and only takeover-user-scope moves the shared entry). Offline/hermetic (deps: bash+python3)
+  ./run.sh smoke-user-scope-citizen   # 0.12.6 install-boundary: pi packages[] registration SSOT (register-pi-package.py) — idempotent + preserves unrelated + remove symmetry + fails loud, and the #86 C2 explicit ownership cells (project scope still normalizes ITS OWN stale entries; user scope refuses other owners and only takeover-user-scope moves the shared entry), plus the #110 self-checkout cells: the real `run.sh install <checkout>` drive leaves the tracked .pi/settings.json byte-identical, writes NO project-scope packages[] self-registration, and REPORTS the skip; cell 15 boots the pinned devDep pi against two stand-in checkouts and requires the --entwurf-control collision to APPEAR before asserting its absence. Offline/hermetic (deps: bash+python3+pinned pi)
   ./run.sh smoke-meta-prune           # 1.0.0 meta-bridge Phase 4: listing-only store janitor regression gate — classify keep/orphan/stale/ambiguous, delete nothing. Offline/deterministic (deps: bash+node)
   ./run.sh smoke-meta-keyset-guard    # 0.10.0 meta-bridge: keyset-owner guard regression — check-keyset-overlap + managed-keys SSOT (disjoint passes, collisions fail). Offline/hermetic (deps: bash+python3)
   ./run.sh check-meta-manifest-schema # 0.12.2 meta-bridge: CLI-version-INDEPENDENT static guard — plugin manifests pinned to the minimal keyset that validates on the lowest supported Claude (closed-schema regression that broke 0.12.1 install on floor) + desired_mcp installed-vs-clone dual-mode. Offline (deps: python3)
@@ -209,7 +209,7 @@ Usage:
 
   ./run.sh install-meta-bridge        # INTERNAL part of `setup` (native-harness plugin) + doctor recovery path — prefer `setup`; stateful GLOBAL install (plugin + USER MCP + settings keyset, honest uninstall state)
   ./run.sh uninstall-meta-bridge      # 1.0.0 meta-bridge Phase 2: stateful GLOBAL uninstall (restore only keys/items captured in install-state)
-  ./run.sh doctor-meta-bridge         # THE RELEASE ORACLE (#51, Linux-certified repair axis). exit 0 = every required layer was MEASURED on this Linux host: toolchain + state + plugin/MCP + resolved-artifact launch-form classification (all 3 owner hooks + doorbell static contract) + synthetic owner join + store scan + hook errors + SessionStart evidence + REQUIRED live MCP↔marker join + writer-version parity. Missing live evidence is NOT CERTIFIED (open a Claude session and re-run), never a pass; Darwin is not yet verified/certified and stays nonzero for this cut (future validation may reopen it). Detection power is held by check-meta-doctor-oracle
+  ./run.sh doctor-meta-bridge         # THE RELEASE ORACLE (#51, Linux-certified repair axis). exit 0 = every required layer was MEASURED on this Linux host: toolchain + state + plugin/MCP + resolved-artifact launch-form classification (all 3 owner hooks + doorbell static contract) + synthetic owner join + store scan + hook errors + SessionStart evidence + REQUIRED live MCP↔marker join + writer-version parity. Missing live evidence is NOT CERTIFIED (open a Claude session and re-run), never a pass; Darwin is NOT CERTIFIED and stays nonzero, on ONE narrowed reason — start-key and ppid are portable there (`ps` fallback, same string the TS core mints), so what holds the lane closed is per-process environment DISCOVERY alone, pending physical-host evidence. Detection power is held by check-meta-doctor-oracle
   ./run.sh copilot [args...]          # #82 RAIL 7: the MANAGED Copilot launch. exec()s the vendor CLI in THIS terminal (cwd/pid/exit preserved) with COPILOT_CLI_ENABLED_FEATURE_FLAGS=EXTENSIONS set for that one invocation — entwurf owns no part of your shell and writes nothing to it, but it owns the process it is about to become. Without that flag Copilot skips the extension scan SILENTLY. Refuses to launch unless the receiver unit is actually installed. Injects `--model auto` when no --model was given and `--yolo` when no explicit permission/surface policy flag was given, both BEFORE any `--`; every argument you pass is forwarded byte-identical. RUNNING THIS IS YOUR CONSENT to that profile — use plain `copilot` for stock vendor behaviour. Not tmux, not fresh-call, mints no citizen (birth is still the first prompt)
   ./run.sh install-copilot-bridge     # #82: GLOBAL install of the Copilot BIRTH plugin (own marketplace root; node+entry baked into the no-argv exec string). MCP wiring and the RECEIVER extension are separate install surfaces (install-copilot-mcp, install-copilot-receive). Also retires the stale Claude unit (--keep-stale-claude-unit opts out)
   ./run.sh uninstall-copilot-bridge   # #86 C3a: honest inverse of install-copilot-bridge from the package-owned install-state (exact qualified id + exact marketplace name/path + recorded assembly only; state deleted LAST; a failing vendor list is UNKNOWN and refuses; never --force, never the stale Claude unit)
@@ -537,7 +537,28 @@ install_local_package() {
   mkdir -p "$project_dir/.pi"
   # packages[] registration via the shared SSOT — same is_entwurf_source
   # predicate + idempotency as user-scope and remove (not a substring match).
-  python3 "$REPO_DIR/scripts/register-pi-package.py" "$project_dir/.pi/settings.json" "$REPO_DIR"
+  #
+  # #110: entwurf's OWN checkout is the one project that never gets this entry.
+  # pi's package identity is `local:<resolved path>` and dedupePackages collapses
+  # only EQUAL identities (package-manager.js getPackageIdentity/dedupePackages),
+  # so a project entry naming this checkout and the user-scope entry naming the
+  # installed root are the same package only while they are the same directory.
+  # In a SECOND checkout (worktree, release scratch) they differ, pi keeps both,
+  # and both copies of pi-extensions/entwurf-control.ts declare
+  # `--entwurf-control`: detectExtensionConflicts gives the flag to whoever
+  # registered first — project scope — and fails the INSTALLED extension while
+  # printing the installed path as the loser, which reads exactly backwards.
+  # user-scope already owns self-registration from any cwd, so the project entry
+  # was only ever a duplicate of it; dropping it removes the second identity in
+  # written bytes, the way the tracked `.pi/settings.json` no longer carries one.
+  # A FOREIGN project still gets its entry — that is what `entwurf install
+  # <project>` is for, and an npm consumer's REPO_DIR is inside node_modules, so
+  # it can never take this branch.
+  if [ "$(cd -P -- "$project_dir" 2>/dev/null && pwd)" = "$REPO_DIR" ]; then
+    echo "install: project-scope packages[] skipped — entwurf's own checkout self-registers through user scope (#110)"
+  else
+    python3 "$REPO_DIR/scripts/register-pi-package.py" "$project_dir/.pi/settings.json" "$REPO_DIR"
+  fi
   # entwurfProvider.mcpServers.entwurf-bridge (project scope — checkout-local, NO state; #46
   # Task 2) via the shared register-pi-provider SSOT: normalize the command to the bare stable
   # bin `entwurf-bridge` (ownership-classified: absent/managed-current/managed-legacy adopt, a
@@ -707,8 +728,11 @@ remove_local_package() {
   # install, so remove never over-deletes a look-alike repo (entwurf-notes, …)
   # that install would never have registered. Same rule, one shape further (#53 B):
   # register only ever WRITES the absolute path, so a settings-RELATIVE entry naming
-  # this repo (the committed `".."` in <repo>/.pi/settings.json) is source, not
-  # install state — remove leaves it and says so instead of editing tracked bytes.
+  # this repo is source an operator hand-wrote, not install state — remove leaves it
+  # and says so instead of editing bytes it never authored. entwurf's own checkout
+  # no longer ships such an entry (#110: user scope owns self-registration), so for
+  # THIS repo the call is a reported no-op; the predicate stays because the shape is
+  # still writable by hand and still must not be over-deleted.
   python3 "$REPO_DIR/scripts/register-pi-package.py" "$project_dir/.pi/settings.json" "$REPO_DIR" --remove
   # entwurfProvider.mcpServers.entwurf-bridge cleanup (project scope) via the shared SSOT: strip
   # our-managed shapes (the bare stable bin AND the legacy repo start.sh path — a true user
@@ -2667,8 +2691,8 @@ check_acp_provider_surface() {
   # provider lib modules AND compiles + drives the REAL entry against a fake pi,
   # asserting: one surface name, the no-auth sentinel shape, full
   # ProviderModelConfig rows on the curated claude anchor, the EXACT curated model
-  # set both adapters contribute (claude 2 + cortex 4 —
-  # [QK:CORTEX-PROVIDER-SIX-ROW-SURFACE], the claim that catches an entry which
+  # set both adapters contribute (claude 3 + cortex 4 —
+  # [QK:CORTEX-PROVIDER-EXACT-ROW-SURFACE], the claim that catches an entry which
   # silently drops a whole backend), and that streamSimple is the real
   # streamShellAcp backend (checked BY NAME, never invoked — invoking spawns an
   # ACP child). Pure, no pi runtime, no API.
@@ -3564,6 +3588,7 @@ _check_pack_install_impl() {
   local loader_ids loader_expected
   loader_ids=$(awk '$1 == "entwurf" { print $2 }' <<<"$loader_out" | LC_ALL=C sort)
   loader_expected=$(printf '%s\n' \
+    claude-fable-5-1 \
     claude-opus-5 \
     claude-sonnet-5 \
     cortex-auto \
@@ -3571,7 +3596,7 @@ _check_pack_install_impl() {
     cortex-claude-sonnet-5 \
     cortex-openai-gpt-5.4 | LC_ALL=C sort)
   if [ "$loader_ids" != "$loader_expected" ]; then
-    fail "[check-pack-install] installed provider model set drifted — expected exactly 6 curated ids (claude 2 + cortex 4):"
+    fail "[check-pack-install] installed provider model set drifted — expected exactly 7 curated ids (claude 3 + cortex 4):"
     echo "  expected:" >&2
     echo "$loader_expected" | sed 's/^/    /' >&2
     echo "  actual (entwurf rows):" >&2
@@ -3582,8 +3607,8 @@ _check_pack_install_impl() {
   fi
   # Name the set on SUCCESS too, not only in the failure branch — same principle as
   # the pinned-pi version assert above: a gate that cannot name what it proved has
-  # proved nothing, and "6 rows" without the ids cannot be audited from a CI log.
-  echo "[check-pack-install] pi loader smoke pass (entwurf registered; exact 6-row curated set: claude 2 + cortex 4):"
+  # proved nothing, and a row COUNT without the ids cannot be audited from a CI log.
+  echo "[check-pack-install] pi loader smoke pass (entwurf registered; exact curated set: claude 3 + cortex 4):"
   echo "$loader_ids" | sed 's/^/    /'
 
   # npm-managed neutral install regression — the README's PRIMARY install path is
@@ -4815,6 +4840,44 @@ setup_result() {  # $1=component $2=PASS|SKIP|FAIL $3=detail
   esac
 }
 
+# ── platform rail certification (#78 D1) ─────────────────────────────────────
+# ONE place answers "are entwurf's HARNESS RAILS certified on this platform?".
+# Every detected-harness branch in setup_all asks it through setup_harness_result
+# below instead of re-deciding it per backend — a verdict that is honest for one
+# harness and cosmetic for the next is its own defect, not half a fix.
+#
+# Today the answer is Linux and nothing else, and that is an EVIDENCE fact, not a
+# taste: every shipped rail proves live ownership by reading the per-process
+# ENVIRONMENT of live harness children, no portable Darwin equivalent has been
+# MEASURED, and BASELINE.md/README record each rail as `NOT CERTIFIED — pending
+# physical host`. The harness doctors own that axis and refuse on Darwin.
+#
+# What moves this line: a physical-host receipt — a real harness doctor exiting 0
+# on that platform, recorded in BASELINE.md. A green INSTALLER never moves it;
+# installation portability and rail/runtime support are separate evidence axes
+# (Hard Rule 17). Do not widen this to make a CI job green.
+harness_rail_certified_platform() {
+  [ "$(uname -s)" = "Linux" ]
+}
+
+# setup_harness_result — the verdict for a detected harness unit whose INSTALL
+# COMPLETED. It exists because "the wiring was written" and "the rail works here"
+# are two different facts and setup measures only the first: setup runs no doctor
+# (that is the doctor commands' own job). On a platform whose rails carry no
+# receipt a completed install is therefore a detected-but-INCOMPLETE integration,
+# which Hard Rule 17 names non-green rather than cosmetic success. setup_result
+# has exactly three verdicts, so FAIL IS that named non-green — and the detail
+# must say so in the operator's own words: nothing failed to install, the rail is
+# simply uncertified here. The wording stays deliberately distinct from the
+# install-failure FAIL each branch keeps for a real refusal.
+setup_harness_result() {  # $1=component $2=what got wired $3=doctor owning the rail axis
+  if harness_rail_certified_platform; then
+    setup_result "$1" PASS "$2 — verify: $3"
+    return 0
+  fi
+  setup_result "$1" FAIL "$2 — the wiring WAS written and nothing failed to install, but this harness rail is NOT CERTIFIED — pending physical host on $(uname -s). setup runs no doctor; the rail axis is owned by '$3', which refuses on this platform. Tracking: #78."
+}
+
 # Installed-vs-source is decided by PACKAGE LOCATION — the same `*/node_modules/*`
 # seam run_ts and the bridge launcher already branch on — never by which of
 # pnpm/pi happens to be missing (an accidental failure is not a mode gate).
@@ -4955,7 +5018,7 @@ setup_all() {
     if ! pi_version_in_range "${pi_ver:-0}" "$pi_range"; then
       setup_result pi FAIL "detected pi ${pi_ver:-<unreadable version>} is outside the supported range $pi_range — Pi wiring not written; align pi, then re-run setup"
     elif (install_local_package "$project_dir"); then
-      setup_result pi PASS "project + user-scope wiring complete (pi $pi_ver in $pi_range) — verify: ./run.sh doctor-pi-provider"
+      setup_harness_result pi "project + user-scope wiring complete (pi $pi_ver in $pi_range)" "./run.sh doctor-pi-provider"
     else
       setup_result pi FAIL "pi wiring did not complete (see above) — repair, then re-run setup"
     fi
@@ -4965,16 +5028,20 @@ setup_all() {
   # setup ALSO wires the native-harness meta-bridge so a relocate/clone needs ONE
   # command. Detection-gated ("있으면 설정, 없으면 담아준다");
   # meta-bridge-install.sh is idempotent and enforces the Claude floor + its own
-  # named prerequisites itself, so a below-floor or refused host lands here as a
-  # detected FAIL, never a cosmetic green. CLAUDE_BIN pins the probe for the
-  # hermetic smoke; production leaves it unset.
+  # named prerequisites itself, so a below-floor host lands here as a detected
+  # FAIL. It no longer REFUSES ON PLATFORM NAME (0.20.0 opened Darwin: the
+  # installer's own mechanism is portable), so the other half of that old
+  # guarantee — "never a cosmetic green" — is now carried by setup_harness_result:
+  # an install that completes where the RAIL has no receipt is the named
+  # non-green, never a PASS pointing at a doctor that would refuse. CLAUDE_BIN
+  # pins the probe for the hermetic smoke; production leaves it unset.
   local claude_bin="${CLAUDE_BIN:-claude}"
   if ! command -v "$claude_bin" >/dev/null 2>&1; then
     setup_result claude SKIP "claude not on PATH — zero meta-bridge wiring written"
   else
     section "meta-bridge install (native harness detected: Claude Code)"
     if (cd "$REPO_DIR" && bash scripts/meta-bridge-install.sh); then
-      setup_result claude PASS "meta-bridge wired — verify: ./run.sh doctor-meta-bridge"
+      setup_harness_result claude "meta-bridge wired" "./run.sh doctor-meta-bridge"
     else
       setup_result claude FAIL "detected Claude Code, but the meta-bridge integration did not complete (see above) — repair, then re-run setup"
     fi
@@ -5017,19 +5084,19 @@ setup_all() {
   else
     agy_rc=0; wire_agy_bridge || agy_rc=$?
     if [ "$agy_rc" -eq 0 ]; then
-      setup_result agy-bridge PASS "MCP bridge wired — verify: ./run.sh doctor-agy-bridge"
+      setup_harness_result agy-bridge "MCP bridge wired" "./run.sh doctor-agy-bridge"
     else
       setup_result agy-bridge FAIL "detected agy, but the MCP bridge integration did not complete (reason above) — repair, then re-run setup"
     fi
     agy_rc=0; wire_agy_statusline || agy_rc=$?
     if [ "$agy_rc" -eq 0 ]; then
-      setup_result agy-statusline PASS "statusLine wired — verify: ./run.sh doctor-agy-statusline"
+      setup_harness_result agy-statusline "statusLine wired" "./run.sh doctor-agy-statusline"
     else
       setup_result agy-statusline FAIL "detected agy, but the statusLine integration did not complete (reason above) — repair, then re-run setup"
     fi
     agy_rc=0; wire_agy_hooks || agy_rc=$?
     if [ "$agy_rc" -eq 0 ]; then
-      setup_result agy-hooks PASS "birth imprint wired — verify: ./run.sh doctor-agy-hooks"
+      setup_harness_result agy-hooks "birth imprint wired" "./run.sh doctor-agy-hooks"
     else
       setup_result agy-hooks FAIL "detected agy, but the birth-imprint integration did not complete (reason above) — repair, then re-run setup"
     fi
@@ -5053,13 +5120,13 @@ setup_all() {
     section "copilot units (native harness detected: GitHub Copilot CLI)"
     copilot_rc=0; (cd "$REPO_DIR" && bash scripts/copilot-bridge-install.sh) || copilot_rc=$?
     if [ "$copilot_rc" -eq 0 ]; then
-      setup_result copilot-birth PASS "birth plugin installed — verify: ./run.sh doctor-copilot-bridge"
+      setup_harness_result copilot-birth "birth plugin installed" "./run.sh doctor-copilot-bridge"
     else
       setup_result copilot-birth FAIL "detected copilot, but the birth plugin install did not complete (see above) — repair, then re-run setup"
     fi
     copilot_rc=0; (cd "$REPO_DIR" && bash scripts/copilot-mcp-bridge.sh install) || copilot_rc=$?
     if [ "$copilot_rc" -eq 0 ]; then
-      setup_result copilot-mcp PASS "MCP server registered — verify: ./run.sh doctor-copilot-mcp"
+      setup_harness_result copilot-mcp "MCP server registered" "./run.sh doctor-copilot-mcp"
     else
       setup_result copilot-mcp FAIL "detected copilot, but the MCP registration did not complete (see above) — repair, then re-run setup"
     fi
@@ -5077,14 +5144,14 @@ setup_all() {
     else
       copilot_rc=0; (cd "$REPO_DIR" && bash scripts/copilot-receive-bridge.sh install) || copilot_rc=$?
       if [ "$copilot_rc" -eq 0 ]; then
-        setup_result copilot-receive PASS "receiver extension installed — verify: ./run.sh doctor-copilot-receive"
+        setup_harness_result copilot-receive "receiver extension installed" "./run.sh doctor-copilot-receive"
       else
         setup_result copilot-receive FAIL "detected copilot, but the receiver extension install did not complete (see above) — repair, then re-run setup"
       fi
     fi
     copilot_rc=0; (cd "$REPO_DIR" && bash scripts/copilot-statusline-bridge.sh install) || copilot_rc=$?
     if [ "$copilot_rc" -eq 0 ]; then
-      setup_result copilot-statusline PASS "visible footer wired — verify: ./run.sh doctor-copilot-statusline"
+      setup_harness_result copilot-statusline "visible footer wired" "./run.sh doctor-copilot-statusline"
     else
       setup_result copilot-statusline FAIL "detected copilot, but the visible-footer integration did not complete (see above) — repair, then re-run setup"
     fi
@@ -5107,13 +5174,13 @@ setup_all() {
     section "omp units (native harness detected: oh-my-pi)"
     omp_rc=0; (cd "$REPO_DIR" && bash scripts/omp-bridge-install.sh) || omp_rc=$?
     if [ "$omp_rc" -eq 0 ]; then
-      setup_result omp-birth PASS "birth extension installed — verify: ./run.sh doctor-omp-bridge"
+      setup_harness_result omp-birth "birth extension installed" "./run.sh doctor-omp-bridge"
     else
       setup_result omp-birth FAIL "detected omp, but the birth extension install did not complete (see above) — repair, then re-run setup"
     fi
     omp_rc=0; (cd "$REPO_DIR" && bash scripts/omp-mcp-bridge.sh install) || omp_rc=$?
     if [ "$omp_rc" -eq 0 ]; then
-      setup_result omp-mcp PASS "MCP server registered — verify: ./run.sh doctor-omp-mcp"
+      setup_harness_result omp-mcp "MCP server registered" "./run.sh doctor-omp-mcp"
     else
       setup_result omp-mcp FAIL "detected omp, but the MCP registration did not complete (see above) — repair, then re-run setup"
     fi
@@ -5124,13 +5191,13 @@ setup_all() {
     # shipping a citizen whose tools nobody can call.
     omp_rc=0; (cd "$REPO_DIR" && bash scripts/omp-config-xdev.sh install) || omp_rc=$?
     if [ "$omp_rc" -eq 0 ]; then
-      setup_result omp-config PASS "tools.xdev: false written — verify: ./run.sh doctor-omp-mcp"
+      setup_harness_result omp-config "tools.xdev: false written" "./run.sh doctor-omp-mcp"
     else
       setup_result omp-config FAIL "detected omp, but the tools.xdev operator setting did not land (see above) — resolve it, then re-run setup"
     fi
     omp_rc=0; (cd "$REPO_DIR" && bash scripts/omp-receive-install.sh) || omp_rc=$?
     if [ "$omp_rc" -eq 0 ]; then
-      setup_result omp-receive PASS "receiver extension installed — verify: ./run.sh doctor-omp-receive"
+      setup_harness_result omp-receive "receiver extension installed" "./run.sh doctor-omp-receive"
     else
       setup_result omp-receive FAIL "detected omp, but the receiver extension install did not complete (see above) — repair, then re-run setup"
     fi
@@ -5732,9 +5799,11 @@ case "$cmd" in
     check_shell_quote
     ;;
   check-install-surface)
-    # 0.12.7 — structural half of the node_modules strip-types fence: run_ts is the only
-    # crossing, every operator subcommand has a compiled twin, bin wrappers branch, dev
-    # gates stay out of the tarball, and offline smokes never touch the real $HOME.
+    # structural half of the node_modules strip-types fence: run_ts is the only crossing,
+    # every operator subcommand has a compiled twin, bin wrappers branch, dev gates stay out
+    # of the tarball, offline smokes carry no OBVIOUS write to the real $HOME (a static
+    # tripwire, never a sandbox proof), and S7 pins the candidate .pi/settings.json — the
+    # shared release skill, the stable bridge bin, and NO packages key (#110).
     # check-pack-install owns the dynamic half (it drives the installed commands).
     run_ts scripts/check-install-surface.ts
     ;;
@@ -6202,10 +6271,12 @@ case "$cmd" in
     # XDG data dir ($XDG_DATA_HOME/entwurf/meta-bridge/.assembled — dev clone and
     # installed package alike, never the checkout) and runs marketplace add +
     # install --scope user, so every native Claude Code session auto-loads it.
-    # Idempotent; Linux is the only currently certified axis for the #51 repair cut.
-    # Darwin fails loud as not-yet-verified because the strict doctor cannot currently
-    # certify its live owner join; future validation may reopen it. Uninstall permits Darwin
-    # so an older macOS install is not stranded without an honest inverse.
+    # Idempotent. Install accepts Linux | Darwin — the fence that remains inside the
+    # installer is the toolchain check (python3/node/claude presence), not the platform
+    # name. Rail certification stays with doctor-meta-bridge: Darwin is NOT CERTIFIED —
+    # pending physical host, reason = per-process environment DISCOVERY. Uninstall
+    # permits Darwin so an older macOS install is not stranded without an honest
+    # inverse.
     (cd "$REPO_DIR" && bash scripts/meta-bridge-install.sh "$@")
     ;;
   uninstall-meta-bridge)

package/scripts/agy-bridge.sh

@@ -233,7 +233,7 @@ doctor_static_one() {
       # entwurf does NOT repair a failed launcher here: it may be owned by a foreign file.
       log "  $label: configured → '$cmd' does NOT serve MCP with its configured args/env$link_note"
       log "        $BOOT_DETAIL"
-      log "        Identify the launcher: command -v '$cmd'; readlink -f \"\$(command -v '$cmd')\""
+      log "        Identify the launcher: command -v '$cmd'; ls -l \"\$(command -v '$cmd')\""
       log "        If it is entwurf's managed dev link, restore it with ./run.sh expose-dev-bin (it REFUSES a foreign link)."
       log "        If a foreign launcher owns the name, repair/remove it yourself or put a working one earlier on PATH."
       return 1 ;;

package/scripts/agy-imprint.sh

@@ -1,13 +1,16 @@
 #!/usr/bin/env bash
 # Stable bin wrapper for Antigravity PreInvocation birth imprint.
 set -euo pipefail
-SELF="${BASH_SOURCE[0]}"
-if command -v readlink >/dev/null 2>&1; then
-  RESOLVED="$(readlink -f "$SELF" 2>/dev/null || printf '%s' "$SELF")"
-else
-  RESOLVED="$SELF"
-fi
-HERE="$(cd "$(dirname "$RESOLVED")" && pwd)"
+SOURCE="${BASH_SOURCE[0]}"
+while [ -L "$SOURCE" ]; do
+  DIR="$(cd -P "$(dirname "$SOURCE")" && pwd)"
+  TARGET="$(readlink "$SOURCE")"
+  case "$TARGET" in
+    /*) SOURCE="$TARGET" ;;
+    *) SOURCE="$DIR/$TARGET" ;;
+  esac
+done
+HERE="$(cd -P "$(dirname "$SOURCE")" && pwd)"
 ROOT="$(cd "$HERE/.." && pwd)"
 
 # Node refuses --experimental-strip-types for raw .ts below node_modules. Dev

package/scripts/check-acp-carrier-augment.ts

@@ -31,8 +31,9 @@ import { loadEngraving } from "../pi-extensions/lib/acp/engraving.ts";
 import { bridgeConfigSignature, contextMessageSignatures } from "../pi-extensions/lib/acp/session-store.ts";
 import { buildClaudeSessionMeta } from "../pi-extensions/lib/acp/tool-surface.ts";
 import { ENTWURF_PROJECT_CONTEXT_OPEN_TAG } from "../protocol.js";
+import { reclaimOnExit } from "./lib/reclaim-on-exit.ts";
 
-const tmp = mkdtempSync(join(tmpdir(), "acp-carrier-augment-"));
+const tmp = reclaimOnExit(mkdtempSync(join(tmpdir(), "acp-carrier-augment-")));
 const REPO_DIR = fileURLToPath(new URL("..", import.meta.url));
 const BRIDGE_MARK = "operating through entwurf";
 
@@ -241,8 +242,8 @@ function ctxWith(firstUser: string): Context {
 //          absent → keep it. Home AGENTS.md always survives.
 // ===========================================================================
 {
-	const home = mkdtempSync(join(tmpdir(), "acp-home-"));
-	const proj = mkdtempSync(join(tmpdir(), "acp-proj-"));
+	const home = reclaimOnExit(mkdtempSync(join(tmpdir(), "acp-home-")));
+	const proj = reclaimOnExit(mkdtempSync(join(tmpdir(), "acp-proj-")));
 	writeFileSync(join(home, "AGENTS.md"), "HOME-AGENTS-CONTENT");
 	writeFileSync(join(proj, "AGENTS.md"), "CWD-AGENTS-CONTENT");
 
@@ -295,7 +296,7 @@ function ctxWith(firstUser: string): Context {
 	assert.match(dateLine as string, /^Current date: \d{4}-\d{2}-\d{2}$/, "date is day-granularity only (no clock time)");
 
 	// > 50KB cwd AGENTS.md → augment truncated with the marker.
-	const bigHome = mkdtempSync(join(tmpdir(), "acp-big-"));
+	const bigHome = reclaimOnExit(mkdtempSync(join(tmpdir(), "acp-big-")));
 	writeFileSync(join(bigHome, "AGENTS.md"), "X".repeat(80 * 1024));
 	const big = buildPiContextAugment({ backend: "claude", cwd: tmp, mcpServerNames: [], homeDir: bigHome });
 	assert.ok(Buffer.byteLength(big, "utf8") <= 50 * 1024, "augment is truncated to the 50KB cap");
@@ -313,7 +314,7 @@ function ctxWith(firstUser: string): Context {
 //    remains an honest fallback; the maintained package prompt must not hit it.
 // ===========================================================================
 {
-	const budgetHome = mkdtempSync(join(tmpdir(), "acp-budget-home-"));
+	const budgetHome = reclaimOnExit(mkdtempSync(join(tmpdir(), "acp-budget-home-")));
 	writeFileSync(join(budgetHome, "AGENTS.md"), "H".repeat(12 * 1024));
 	const actual = buildPiContextAugment({
 		backend: "claude",

package/scripts/check-acp-cortex.ts

@@ -323,6 +323,47 @@ const enrichedServers: AcpMcpServer[] = [
 			/absolute realHome/,
 			"a non-absolute realHome must refuse (the child must never re-derive it)",
 		);
+		assert.throws(
+			() =>
+				ensureCortexDualHomeOverlay({
+					scopeKey: "pi:sess-empty",
+					mcpServers: [],
+					realHome: "",
+					overlaysRoot,
+					isPidAlive: () => true,
+				}),
+			/absolute realHome/,
+			"an empty realHome must refuse — the contract sentence is 'absolute', and '' is not",
+		);
+		// …and the guard states PATH-FLAVOR absoluteness, not the host it runs on:
+		// a drive/UNC realHome is absolute in the win32 flavor, so a POSIX host must
+		// NOT read it as relative. (This asserts nothing about native-Windows support
+		// — only that the refusal rule is decided by the path, not by process.platform.)
+		// realSnowflakeHome is pinned under tmp so the positive cells exercise the
+		// GUARD alone: the win32-flavored realHome never reaches a POSIX join for fs
+		// work, and every path the overlay materializes stays under overlaysRoot.
+		for (const winFlavored of ["C:\\Users\\x", "\\\\server\\share"]) {
+			let winOverlay: ReturnType<typeof ensureCortexDualHomeOverlay> | undefined;
+			assert.doesNotThrow(
+				() => {
+					winOverlay = ensureCortexDualHomeOverlay({
+						scopeKey: `pi:sess-win-${winFlavored.length}`,
+						mcpServers: [],
+						realHome: winFlavored,
+						realSnowflakeHome: realSnowflake,
+						overlaysRoot,
+						isPidAlive: () => true,
+					});
+				},
+				`a win32-flavored absolute realHome (${JSON.stringify(winFlavored)}) must PASS the guard — absoluteness is judged by PATH FLAVOR, never by the host the gate runs on [QK:CORTEX-REALHOME-PLATFORM-NEUTRAL]`,
+			);
+			assert.ok(
+				winOverlay !== undefined &&
+					winOverlay.scopeDir.startsWith(overlaysRoot) &&
+					existsSync(join(winOverlay.snowflakeHome, "cortex")),
+				"the accepted win32-flavored realHome must still materialize entirely under the overlays root (the guard is the only thing the flavor cell widens)",
+			);
+		}
 	} finally {
 		rmSync(root, { recursive: true, force: true });
 	}

package/scripts/check-acp-provider-surface.ts

@@ -138,19 +138,22 @@ try {
 	// Set comparison (sorted, exact) — not `includes`: a substring/anchor probe
 	// cannot see a row that VANISHED, and the cortex ids contain the claude ids as
 	// substrings. Expected is derived from the two source id constants so there is
-	// one SSOT; the literal 6 below is the independent floor that catches a
-	// curation list mutated to empty (which would move expected and captured
-	// together).
+	// one SSOT; the literal 7 below is the independent floor that catches a
+	// curation list that SHRANK — expected derives from the same constants, so a
+	// dropped row moves expected and captured together and the set comparison
+	// stays green. That is why the count is asserted separately and carries its
+	// own claim: the cortex list has `CORTEX-CURATED-FOUR-ROWS` for exactly this
+	// failure, and the claude list needs its own oracle rather than borrowing it.
 	const expectedIds = [...SUPPORTED_ANTHROPIC_MODEL_IDS, ...SUPPORTED_CORTEX_MODEL_IDS].slice().sort();
 	assert.equal(
 		expectedIds.length,
-		6,
-		`curated id constants must total 6 rows (claude 2 + cortex 4) — got ${expectedIds.length}: ${expectedIds.join(", ")}`,
+		7,
+		`[QK:CLAUDE-CURATED-THREE-ROWS] curated id constants must total 7 rows (claude 3 + cortex 4) — got ${expectedIds.length}: ${expectedIds.join(", ")}`,
 	);
 	assert.deepEqual(
 		capIds.slice().sort(),
 		expectedIds,
-		`[QK:CORTEX-PROVIDER-SIX-ROW-SURFACE] compiled entry must register the EXACT curated set of both adapters (claude 2 + cortex 4) — got: ${capIds.join(", ") || "none"}`,
+		`[QK:CORTEX-PROVIDER-EXACT-ROW-SURFACE] compiled entry must register the EXACT curated set of both adapters (claude 3 + cortex 4) — got: ${capIds.join(", ") || "none"}`,
 	);
 	assert.equal(typeof cap.cfg.streamSimple, "function", "entry streamSimple must be a function");
 	// Regression guard: the entry must wire the REAL backend (streamShellAcp),

package/scripts/check-acp-usage-accounting.ts

@@ -72,7 +72,7 @@ interface WireUsage {
  * One `_meta.quota.token_count` row. The field NAMES deliberately differ from
  * `PromptResponse.usage`: cache reads are `cachedInputTokens` here because the
  * shape is shared with codex-acp, and `cachedWriteTokens` is Claude's extra
- * sibling (read at claude-agent-acp 0.75.1 `dist/acp-agent.js:6493-6502`).
+ * sibling (read at claude-agent-acp 0.76.0 `dist/acp-agent.js:6566-6575`).
  * Reading a quota row with the `usage` field names silently yields zeros, so the
  * fixture below spells the vendor's names out rather than reusing `WireUsage`.
  */
@@ -137,7 +137,7 @@ function makeFakeChild() {
  *
  * Each `prompt` call consumes the next TurnScript: it first pushes that turn's
  * `usage_update` notification (the wire the running cost total actually arrives
- * on — read at claude-agent-acp 0.75.1 `dist/acp-agent.js:3467-3482`), then answers the
+ * on — read at claude-agent-acp 0.76.0 `dist/acp-agent.js:3471-3486`), then answers the
  * prompt with that turn's `PromptResponse.usage` (the wire the turn aggregate
  * arrives on). Both orderings are the real one: the notification precedes the
  * response, because the SDK emits it from the `result` message that ENDS the turn.
@@ -393,8 +393,8 @@ try {
 	// AGENT LOOP only. `_meta.quota.model_usage` comes from `result.modelUsage` and
 	// also counts Task subagents, sidechains and INTERNAL CALLS SUCH AS COMPACTION;
 	// the vendor states its rows "can total more than `token_count`" and are "the
-	// fuller picture, not a decomposition of it" (read at claude-agent-acp 0.75.1
-	// `dist/acp-agent.js:6468-6474`).
+	// fuller picture, not a decomposition of it" (read at claude-agent-acp 0.76.0
+	// `dist/acp-agent.js:6541-6547`).
 	//
 	// The wide one is required, not merely nicer, because the DENOMINATOR already
 	// has that scope: turn cost is the adjacent diff of the backend's running total,
@@ -608,8 +608,8 @@ try {
 	// identity that produces the bound is a property of the MAIN AGENT LOOP's
 	// cache breakpoints. `_meta.quota.model_usage` is a WIDER scope: the vendor
 	// states those rows also count Task subagents, sidechains, and INTERNAL
-	// CALLS SUCH AS COMPACTION (read at claude-agent-acp 0.75.1
-	// `dist/acp-agent.js:6465-6485`). Mixing the two scopes inflates the bound
+	// CALLS SUCH AS COMPACTION (read at claude-agent-acp 0.76.0
+	// `dist/acp-agent.js:6538-6558`). Mixing the two scopes inflates the bound
 	// through both remaining terms that mention cacheWrite:
 	//   max(0, occupancy − cacheWrite) shrinks as wide cacheWrite grows, so
 	//   less is subtracted; min(rawBound, cacheWrite) rises with it.
@@ -749,9 +749,9 @@ try {
 	// CELL 3 — a turn with NO cost notification holds the baseline.
 	//
 	// Measured upstream: the result-path `usage_update` carries cost (read at
-	// claude-agent-acp 0.75.1 `dist/acp-agent.js:3467-3482`), while other
+	// claude-agent-acp 0.76.0 `dist/acp-agent.js:3471-3486`), while other
 	// `usage_update` paths can carry `used` without cost (for example the
-	// rate-limit path at `:4269-4277`). A live thinkpad ledger shows such turns
+	// rate-limit path at `:4273-4281`). A live thinkpad ledger shows such turns
 	// really occur. The honest handling is to HOLD the baseline so the amount lands
 	// in the NEXT diff: misattributed by turn, exact by session. Rebaselining to 0
 	// there would double-count the whole prefix.
@@ -831,7 +831,7 @@ try {
 	// CELL 4 — a DECREASING session total is never silently absorbed.
 	//
 	// `conversation_reset` switches the session to a fresh transcript (read at
-	// claude-agent-acp 0.75.1 `dist/acp-agent.js:4282-4289`), but whether that
+	// claude-agent-acp 0.76.0 `dist/acp-agent.js:4286-4293`), but whether that
 	// changes `total_cost_usd` is an SDK-internal value we cannot observe here.
 	// A diff can therefore go negative in a session we are still holding.
 	// Absorbing it quietly would both misreport the turn and destroy the only

package/scripts/check-copilot-birth-hook.ts

@@ -52,6 +52,7 @@ import { resolveFactList } from "../pi-extensions/lib/entwurf-facts.ts";
 import { nativePushSupported } from "../pi-extensions/lib/entwurf-v2-contract.ts";
 import { META_SENDER_BACKENDS, resolveTrustedMetaSenderIdentity } from "../pi-extensions/lib/meta-sender-identity.ts";
 import { listAllMetaIdentitiesDir, processStartKey } from "../pi-extensions/lib/meta-session.ts";
+import { reclaimOnExit } from "./lib/reclaim-on-exit.ts";
 
 const REPO = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 const PLUGIN = "entwurf-meta-receive-copilot";
@@ -63,7 +64,8 @@ function ok(label: string, cond: boolean): void {
 	passed++;
 }
 
-const root = mkdtempSync(path.join(tmpdir(), "entwurf-copilot-birth."));
+const root = reclaimOnExit(mkdtempSync(path.join(tmpdir(), "entwurf-copilot-birth.")));
+
 const asm = path.join(root, "asm");
 
 // ── 1. the real assembler ────────────────────────────────────────────────────