@junghanacs/entwurf 0.20.1 → 0.22.0

package/scripts/mutants/compaction-send-guard.json

@@ -0,0 +1,103 @@
+{
+	"schemaVersion": 1,
+	"lane": "compaction-send-guard",
+	"mutants": [
+		{
+			"claim": "COMPACT-SEND-NO-MODE",
+			"title": "the predicate grows a mode argument so steer could be admitted while follow_up is refused",
+			"subject": "pi-extensions/lib/compaction-send-guard.ts",
+			"find": [
+				"export function compactionSendReject(guard: CompactionGuard, facts: CompactionSendFacts): CompactionSendReject | null {"
+			],
+			"replace": [
+				"export function compactionSendReject(guard: CompactionGuard, facts: CompactionSendFacts, mode?: string): CompactionSendReject | null {"
+			],
+			"gate": ["bash", "run.sh", "check-compaction-send-guard"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:COMPACT-SEND-NO-MODE]",
+			"signatureSource": "scripts/check-compaction-send-guard.ts"
+		},
+		{
+			"claim": "COMPACT-SEND-REJECT-ARMED",
+			"title": "armed compacting-during-stream is treated as an ordinary turn, so auto-compact still gets sendMessage",
+			"subject": "pi-extensions/lib/compaction-send-guard.ts",
+			"find": ["\tif (guard.armed) return COMPACTION_SEND_REJECT;"],
+			"replace": ["\t// armed compacting-during-stream no longer rejects"],
+			"gate": ["bash", "run.sh", "check-compaction-send-guard"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:COMPACT-SEND-REJECT-ARMED]",
+			"signatureSource": "scripts/check-compaction-send-guard.ts"
+		},
+		{
+			"claim": "COMPACT-SEND-REJECT-QUIET",
+			"title": "quiet unknown non-idle is admitted, so sendMessage runs in the manual-compact start race",
+			"subject": "pi-extensions/lib/compaction-send-guard.ts",
+			"find": ["\tif (!facts.hasAgentSignal) return BUSY_SEND_REJECT;"],
+			"replace": ["\t// quiet unknown no longer rejects"],
+			"gate": ["bash", "run.sh", "check-compaction-send-guard"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:COMPACT-SEND-REJECT-QUIET]",
+			"signatureSource": "scripts/check-compaction-send-guard.ts"
+		},
+		{
+			"claim": "COMPACT-SEND-ADMIT-IDLE",
+			"title": "idle no longer recovers a missed session_compact, so a later stream stays falsely refused",
+			"subject": "pi-extensions/lib/compaction-send-guard.ts",
+			"find": [
+				"\tif (facts.idle) {",
+				"\t\t// Idle means Pi is neither in an agent run nor compacting. Also recovers a",
+				"\t\t// missed `session_compact` so a later ordinary stream is not stuck refused.",
+				"\t\tguard.armed = false;",
+				"\t\treturn null;",
+				"\t}"
+			],
+			"replace": ["\t// idle no longer admits or disarms"],
+			"gate": ["bash", "run.sh", "check-compaction-send-guard"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:COMPACT-SEND-ADMIT-IDLE]",
+			"signatureSource": "scripts/check-compaction-send-guard.ts"
+		},
+		{
+			"claim": "COMPACT-SEND-ADMIT-STREAM",
+			"title": "a live agent run is refused, so idle/일반 streaming steer/followUp is no longer preserved",
+			"subject": "pi-extensions/lib/compaction-send-guard.ts",
+			"find": ["\treturn null; // live agent run — steer/followUp unchanged"],
+			"replace": ["\treturn COMPACTION_SEND_REJECT; // live agent run no longer admitted"],
+			"gate": ["bash", "run.sh", "check-compaction-send-guard"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:COMPACT-SEND-ADMIT-STREAM]",
+			"signatureSource": "scripts/check-compaction-send-guard.ts"
+		},
+		{
+			"claim": "COMPACT-SEND-WIRE",
+			"title": "the send path skips the leaf and still calls pi.sendMessage during compaction",
+			"subject": "pi-extensions/entwurf-control.ts",
+			"find": [
+				"\t\tconst compactionReject = compactionSendReject(state.compaction, {",
+				"\t\t\tidle: ctx.isIdle(),",
+				"\t\t\thasAgentSignal: ctx.signal !== undefined,",
+				"\t\t});",
+				"\t\tif (compactionReject) {",
+				"\t\t\trespond(false, \"send\", undefined, compactionReject);",
+				"\t\t\treturn;",
+				"\t\t}"
+			],
+			"replace": ["\t\t// compaction send guard removed"],
+			"gate": ["bash", "run.sh", "check-compaction-send-guard"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:COMPACT-SEND-WIRE]",
+			"signatureSource": "scripts/check-compaction-send-guard.ts"
+		},
+		{
+			"claim": "COMPACT-SEND-EVENTS",
+			"title": "session_before_compact no longer arms the resident guard",
+			"subject": "pi-extensions/entwurf-control.ts",
+			"find": ["\tpi.on(\"session_before_compact\", () => {", "\t\tnoteCompactionBefore(state.compaction);", "\t});"],
+			"replace": ["\t// session_before_compact no longer arms"],
+			"gate": ["bash", "run.sh", "check-compaction-send-guard"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:COMPACT-SEND-EVENTS]",
+			"signatureSource": "scripts/check-compaction-send-guard.ts"
+		}
+	]
+}

package/scripts/mutants/entwurf-peers.json

@@ -0,0 +1,19 @@
+{
+	"schemaVersion": 1,
+	"lane": "entwurf-peers",
+	"mutants": [
+		{
+			"claim": "PEERS-OBSERVATION-BUDGET",
+			"title": "the peers presentation limit is accepted but the full historical store is still observed",
+			"subject": "pi-extensions/lib/entwurf-fact-provider.ts",
+			"find": [
+				"\t\tselectedObserve = (identity) => (observedGardenIds.has(identity.gardenId) ? observe(identity) : UNOBSERVED_PEER);"
+			],
+			"replace": ["\t\tselectedObserve = observe;"],
+			"gate": ["bash", "run.sh", "check-entwurf-fact-provider"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PEERS-OBSERVATION-BUDGET]",
+			"signatureSource": "scripts/check-entwurf-fact-provider.ts"
+		}
+	]
+}

package/scripts/mutants/mux-fresh-call.json

@@ -111,7 +111,7 @@
 			"claim": "FRESHCALL-CWD-RECEIPT-REQUESTED",
 			"title": "production freshCall stops assembling the requested cwd into its receipt, so the operator-visible answer silently loses the one placement fact the caller asked for",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["\t\t\t...(cwd === undefined ? {} : { cwd }),\n"],
+			"find": ["\t\t\t...(chosenCwd === undefined ? {} : { cwd: chosenCwd.value, cwdSource: chosenCwd.source }),\n"],
 			"replace": [""],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
@@ -123,7 +123,7 @@
 			"title": "one surface drops the optional cwd from its schema, so cross-repo fresh works from pi and silently cannot exist from the MCP bridge",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\tcwd: z\n\t\t\t.string()\n\t\t\t.optional()\n\t\t\t.describe(\n\t\t\t\t\"Optional literal ABSOLUTE path of an existing directory to start the sibling in (cross-repo fresh). Omit or pass \\\"\\\" to start in this agent's own cwd. Taken exactly as given — no trim, no realpath, no project-name resolution; '#' is refused (tmux format expansion). The receipt echoes what was REQUESTED, never an observation.\",\n\t\t\t),\n"
+				"\t\tcwd: z\n\t\t\t.string()\n\t\t\t.optional()\n\t\t\t.describe(\n\t\t\t\t\"Optional literal ABSOLUTE path of an existing directory to start the sibling in (cross-repo fresh). Taken exactly as given — no trim, no realpath, no project-name resolution; '#' is refused (tmux format expansion). Omit or pass \\\"\\\" to start where the CALLER is: its own directory, or for a Codex caller its own record directory, because this bridge is the app-server's child and that process's directory is not the caller's. The receipt echoes the directory that was REQUESTED or the caller record it came from, never an observation of where the pane landed.\",\n\t\t\t),\n"
 			],
 			"replace": [""],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
@@ -147,7 +147,7 @@
 			"title": "native pi drops the required model field from fresh-call while the composition still expects one",
 			"subject": "pi-extensions/entwurf-control.ts",
 			"find": [
-				"\t\t\tmodel: Type.String({\n\t\t\t\tminLength: 1,\n\t\t\t\tmaxLength: 200,\n\t\t\t\tpattern: \"^[A-Za-z0-9][A-Za-z0-9._/:\\\\[\\\\]-]*$\",\n\t\t\t\tdescription:\n\t\t\t\t\t\"Required runtime model: canonical provider/model for pi, a Claude Code model id/alias, or a Copilot model name (or auto).\",\n\t\t\t}),\n"
+				"\t\t\tmodel: Type.String({\n\t\t\t\tminLength: 1,\n\t\t\t\tmaxLength: 200,\n\t\t\t\tpattern: \"^[A-Za-z0-9][A-Za-z0-9._/:\\\\[\\\\]-]*$\",\n\t\t\t\tdescription:\n\t\t\t\t\t\"Required runtime model: canonical provider/model for pi, a Claude Code model id/alias, or a Copilot/OMP/Codex model name.\",\n\t\t\t}),\n"
 			],
 			"replace": [""],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
@@ -160,7 +160,7 @@
 			"title": "the MCP bridge reads the caller garden id straight out of env instead of its authoritative self envelope",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\t\tconst self = await buildAuthoritativeSelfEnvelope();\n\t\t\tcallerGardenId = self.envelope.sessionId;"
+				"\t\t\tconst self = await buildAuthoritativeSelfEnvelope({ requestMeta: extra._meta });\n\t\t\tcallerGardenId = self.envelope.sessionId;"
 			],
 			"replace": ["\t\t\tcallerGardenId = process.env.PI_SESSION_ID ?? null;"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
@@ -173,7 +173,7 @@
 			"title": "MCP drops the required model field from fresh-call while the composition still expects one",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\tmodel: z\n\t\t\t.string()\n\t\t\t.min(1)\n\t\t\t.max(200)\n\t\t\t// The `\\[` below is USELESS TO JS AND LOAD-BEARING TO THE HOST. zod emits this source\n\t\t\t// text verbatim as the JSON Schema `pattern`, and the host's tool-schema validator is a\n\t\t\t// Rust regex engine that rejects an unescaped `[` inside a character class as \"unclosed\n\t\t\t// character class\" — a 400 on tools/list that stops EVERY Claude session from opening\n\t\t\t// (7-M-fix). Biome's safe fix removes it; do not accept that fix. The suppression must\n\t\t\t// stay on the line DIRECTLY above the expression, or it attaches to nothing and reads\n\t\t\t// as an unused suppression while the escape goes back to being fixable.\n\t\t\t// biome-ignore lint/complexity/noUselessEscapeInRegex: emitted to a Rust regex validator, see above\n\t\t\t.regex(/^[A-Za-z0-9][A-Za-z0-9._/:\\[\\]-]*$/)\n\t\t\t.describe(\n\t\t\t\t\"Required runtime model: canonical provider/model for pi, a Claude Code model id/alias, or a Copilot model name (or auto).\",\n\t\t\t),\n"
+				"\t\tmodel: z\n\t\t\t.string()\n\t\t\t.min(1)\n\t\t\t.max(200)\n\t\t\t// The `\\[` below is USELESS TO JS AND LOAD-BEARING TO THE HOST. zod emits this source\n\t\t\t// text verbatim as the JSON Schema `pattern`, and the host's tool-schema validator is a\n\t\t\t// Rust regex engine that rejects an unescaped `[` inside a character class as \"unclosed\n\t\t\t// character class\" — a 400 on tools/list that stops EVERY Claude session from opening\n\t\t\t// (7-M-fix). Biome's safe fix removes it; do not accept that fix. The suppression must\n\t\t\t// stay on the line DIRECTLY above the expression, or it attaches to nothing and reads\n\t\t\t// as an unused suppression while the escape goes back to being fixable.\n\t\t\t// biome-ignore lint/complexity/noUselessEscapeInRegex: emitted to a Rust regex validator, see above\n\t\t\t.regex(/^[A-Za-z0-9][A-Za-z0-9._/:\\[\\]-]*$/)\n\t\t\t.describe(\n\t\t\t\t\"Required runtime model: canonical provider/model for pi, a Claude Code model id/alias, or a Copilot/OMP/Codex model name.\",\n\t\t\t),\n"
 			],
 			"replace": [""],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
@@ -312,8 +312,8 @@
 			"claim": "FRESHCALL-BACKEND-SET-SURFACE-PARITY",
 			"title": "a backend the composition can open is missing from the MCP surface enum — the capability exists and no external host can reach it",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": ["\t\t\t.enum([\"pi\", \"claude-code\", \"copilot\", \"omp\"])"],
-			"replace": ["\t\t\t.enum([\"pi\", \"claude-code\", \"copilot\"])"],
+			"find": ["\t\t\t.enum([\"pi\", \"claude-code\", \"copilot\", \"omp\", \"codex\"])"],
+			"replace": ["\t\t\t.enum([\"pi\", \"claude-code\", \"copilot\", \"omp\"])"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESHCALL-BACKEND-SET-SURFACE-PARITY]",
@@ -432,8 +432,8 @@
 			"claim": "FRESHCALL-BACKEND-SET-SURFACE-PARITY-PI",
 			"title": "a backend the composition can open is missing from the native pi surface enum — an in-process pi session cannot name a capability the module already opens",
 			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\", \"copilot\", \"omp\"], {"],
-			"replace": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\", \"copilot\"], {"],
+			"find": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\", \"copilot\", \"omp\", \"codex\"], {"],
+			"replace": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\", \"copilot\", \"omp\"], {"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESHCALL-BACKEND-SET-SURFACE-PARITY-PI]",
@@ -512,13 +512,96 @@
 			"title": "one surface drops the optional seat from its schema, so opening a sibling in the operator's project session works from pi and silently cannot exist from the MCP bridge",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\tplacement: z\n\t\t\t.object({\n\t\t\t\ttmuxSession: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.describe(\n\t\t\t\t\t\t\"EXACT name of an EXISTING session on this agent's own tmux server. Nothing is created: an absent session is refused as tmux-session-missing, and a name outside [A-Za-z0-9][A-Za-z0-9_-]* as tmux-session-name-invalid.\",\n\t\t\t\t\t),\n\t\t\t})\n\t\t\t.optional()\n\t\t\t.describe(\n\t\t\t\t\"Optional project seat: open the sibling in ONE EXISTING tmux session of this agent's own server instead of the caller's session. Nothing is ever created — an absent session is a refusal, not a new session. Independent of cwd; neither is inferred from the other. The receipt echoes the REQUESTED name and reports the resolved target session id.\",\n\t\t\t),\n"
+				"\t\tplacement: z\n\t\t\t.object({\n\t\t\t\ttmuxSession: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.describe(\n\t\t\t\t\t\t\"EXACT name of an EXISTING session on this agent's own tmux server. Nothing is created: an absent session is refused as tmux-session-missing, and a name outside [A-Za-z0-9][A-Za-z0-9_-]* as tmux-session-name-invalid.\",\n\t\t\t\t\t),\n\t\t\t})\n\t\t\t.optional()\n\t\t\t.describe(\n\t\t\t\t\"Optional expert seat override: open the sibling in ONE EXISTING tmux session of this agent's own server, and it always wins. When omitted the seat follows the CALLER, never the backend being opened: a Codex CALLER opens beside its own TUI pane, matched by thread-id in that pane's terminal title (0 or 2+ matching panes refuse, never fall back); every other caller opens in its own session. A pane title is a placement input only — never an address, liveness or delivery fact. Nothing is ever created. Independent of cwd; neither is inferred from the other. The receipt reports the selected name (absent for the caller-pane rule, which observed a session rather than requesting a name), its source, and resolved target session id.\",\n\t\t\t),\n"
 			],
 			"replace": [""],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:FRESHCALL-PLACEMENT-SURFACE-PARITY]",
 			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CODEX-THREAD-CWD",
+			"title": "codex loses the `-C <dir>` token, so an attached thread opens in the APP-SERVER's directory while its pane sits somewhere else — the launch, the receipt and the pane all still look right",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\t\t\t\"-C\",\n\t\t\t\tlaunchCwd,\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CODEX-THREAD-CWD]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CWD-CALLER-ONLY",
+			"title": "the codex dialect reads THIS process's directory instead of the directory the launch chose, so a cross-repo or caller-record cwd places the pane while the thread opens somewhere else",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\t\t\tlaunchCwd,\n"],
+			"replace": ["\t\t\t\tprocess.cwd(),\n"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CWD-CALLER-ONLY]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CALLER-CWD-CODEX",
+			"title": "the composition drops the caller's record directory, so a Codex caller's omitted cwd silently falls back to the app-server's directory again — the #95 lane C defect, restored with the input still on the signature",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": [
+				"\t\t\t? { value: requestedCwd, source: \"requested\" }\n\t\t\t: callerCwd !== undefined\n\t\t\t\t? { value: callerCwd, source: \"codex-caller-record\" }\n\t\t\t\t: undefined;"
+			],
+			"replace": ["\t\t\t? { value: requestedCwd, source: \"requested\" }\n\t\t\t: undefined;"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CALLER-CWD-CODEX]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CALLER-CWD-PI-ARGV-UNCHANGED",
+			"title": "an EMPTY caller cwd stops meaning omit, so a surface that supplies \"\" turns into a classified value — a refusal where the pre-#95 argv simply opened",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": [
+				"\tconst callerCwd = params.callerCwd === undefined || params.callerCwd === \"\" ? undefined : params.callerCwd;"
+			],
+			"replace": ["\tconst callerCwd = params.callerCwd;"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CALLER-CWD-PI-ARGV-UNCHANGED]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CWD-TMUX-CARRIER-SOURCE",
+			"title": "an absent chosen directory becomes this process's, so every launch carries a `-c` and the argv four backends have had since #73 is no longer the measured one",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\tconst cwd = chosenCwd?.value;"],
+			"replace": ["\tconst cwd = chosenCwd?.value ?? process.cwd();"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CWD-TMUX-CARRIER-SOURCE]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CWD-RECEIPT-SOURCE",
+			"title": "the receipt relabels a caller-record directory as REQUESTED, telling the operator someone asked for a directory nobody named",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": [
+				"\t\t\t\t: r.cwdSource === \"codex-caller-record\"\n\t\t\t\t\t? `  cwd:      ${r.cwd} (the Codex caller's own record directory, used because no cwd was requested — not an observation)\\n`\n\t\t\t\t\t: `  cwd:      ${r.cwd} (requested start directory — not an observation)\\n`) +"
+			],
+			"replace": ["\t\t\t\t: `  cwd:      ${r.cwd} (requested start directory — not an observation)\\n`) +"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CWD-RECEIPT-SOURCE]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-CALLER-CWD-SURFACE",
+			"title": "the MCP surface stops handing the codex caller's record directory to the composition, so the capability exists in the leaf and is unreachable from the only surface a codex caller can reach it through",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\t\t\tcallerCwd = self.codexThreadId === undefined ? undefined : self.envelope.cwd;\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-CALLER-CWD-SURFACE]",
+			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
 		}
 	]
 }

package/scripts/mutants/omp-fresh.json

@@ -6,8 +6,10 @@
 			"claim": "ADMISSION-FRESH-PARITY",
 			"title": "a post-#82 harness admitted as a full D6 citizen while entwurf_fresh_call cannot open it — the exact state the Bundle A+B candidate shipped in, where every gate was green and only prose said the backend was unsupported. This is the defect the whole gate exists for: without it, an `unsupported` note reads as a partial-release permit",
 			"subject": "pi-extensions/lib/mux-fresh-call.ts",
-			"find": ["export const FRESH_CALL_BACKENDS = [\"pi\", \"claude-code\", \"copilot\", \"omp\"] as const;"],
-			"replace": ["export const FRESH_CALL_BACKENDS = [\"pi\", \"claude-code\", \"copilot\"] as const;"],
+			"find": [
+				"export const FRESH_CALL_BACKENDS = [\"pi\", \"claude-code\", \"copilot\", \"omp\", \"codex\"] as const;"
+			],
+			"replace": ["export const FRESH_CALL_BACKENDS = [\"pi\", \"claude-code\", \"copilot\", \"codex\"] as const;"],
 			"gate": ["bash", "run.sh", "check-harness-admission-parity"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:ADMISSION-FRESH-PARITY]",
@@ -117,8 +119,8 @@
 			"claim": "FRESHCALL-BACKEND-SET-SURFACE-PARITY-SKILL",
 			"title": "a backend added to the composition and both schema surfaces but not to the operator skill — the third public surface step 9 names, and the one that had no gate at all. The skill is what an operator reads to decide what can be opened, so a stale list makes the backend unreachable in practice exactly the way a missing enum value makes it unreachable in schema",
 			"subject": ".claude/skills/entwurf-dev/SKILL.md",
-			"find": ["backend는 정확히 `pi | claude-code | copilot | omp`이고"],
-			"replace": ["backend는 정확히 `pi | claude-code | copilot`이고"],
+			"find": ["backend는 정확히 `pi | claude-code | copilot | omp | codex`이고"],
+			"replace": ["backend는 정확히 `pi | claude-code | copilot | omp`이고"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:FRESHCALL-BACKEND-SET-SURFACE-PARITY-SKILL]",

package/scripts/mutants/release-gate.json

@@ -214,6 +214,19 @@
 			"timeoutSeconds": 180,
 			"signature": "[QK:PI-DOCTOR-IS-RELEASE-MUST]",
 			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
+		{
+			"claim": "CODEX-FIRST-ADMISSION-IS-RELEASE-MUST",
+			"title": "the Codex first-admission smoke stays listed but bypasses run_live_step, so a missing LIVE prerequisite returns SKIP into a branch that never classifies it and the cut reads green",
+			"subject": "run.sh",
+			"find": [
+				"  run_live_step \"smoke-codex-fresh-live (#95: visible Pi -> visible Codex/callback/addressed v2 -> visible Pi/callback)\" gate bash \"$self\" smoke-codex-fresh-live"
+			],
+			"replace": ["  bash \"$self\" smoke-codex-fresh-live"],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-FIRST-ADMISSION-IS-RELEASE-MUST]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
 		}
 	]
 }

package/scripts/mutants/v2-surface.json

@@ -16,6 +16,28 @@
 			"signature": "[QK:V2SURF-MCP-LOCK-DOMAIN]",
 			"signatureSource": "scripts/check-entwurf-v2-surface.ts"
 		},
+		{
+			"claim": "V2SEND-INBAND-REJECT-REASON",
+			"title": "completed control or mailbox refusal drops its receiver-provided error, leaving the sender with bare rejected again",
+			"subject": "pi-extensions/lib/entwurf-v2-send.ts",
+			"find": ["\treturn { outcome: \"rejected\", rejectReason: result.error === \"\" ? undefined : result.error };"],
+			"replace": ["\treturn { outcome: \"rejected\" };"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-send"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:V2SEND-INBAND-REJECT-REASON]",
+			"signatureSource": "scripts/check-entwurf-v2-send.ts"
+		},
+		{
+			"claim": "V2PROD-INBAND-ERROR-WIRED",
+			"title": "the production sendOverSocket closure stops copying response.error onto the RpcSendResult, so a receiver's named in-band refusal is stranded one hop before driveSend and the caller sees a reasonless rejected",
+			"subject": "pi-extensions/lib/entwurf-v2-production.ts",
+			"find": ["\t\t\treturn { success: response.success, error: response.error };"],
+			"replace": ["\t\t\treturn { success: response.success };"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-production"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:V2PROD-INBAND-ERROR-WIRED]",
+			"signatureSource": "scripts/check-entwurf-v2-production.ts"
+		},
 		{
 			"claim": "V2SURF-PI-MODE-SCOPE",
 			"title": "pi-native mode param reverts to \"Delivery mode for a live send\" (false for native-push)",
@@ -127,12 +149,64 @@
 				"\t\"CANONICAL DELIVERY SURFACE for garden ids: message, reply, or hand off to whoever an id names. The id \" +"
 			],
 			"replace": [
-				"\t\"CANONICAL DELIVERY SURFACE for garden ids: message, reply, or hand off to whoever an id names. The id \" +\n\t\t\"PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING \" +\n\t\t\"PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING \" +"
+				"\t\"CANONICAL DELIVERY SURFACE for garden ids: message, reply, or hand off to whoever an id names. The id \" +\n\t\t\"PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING \" +\n\t\t\"PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING \" +\n\t\t\"PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING \" +"
 			],
 			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
 			"timeoutSeconds": 60,
 			"signature": "[QK:V2SURF-DESC-FITS-HOST-CAP]",
 			"signatureSource": "scripts/check-entwurf-v2-surface.ts"
+		},
+		{
+			"claim": "NATIVE-PUSH-SENDER-ENVELOPE",
+			"title": "native-push direct injection reverts to the raw plan message, so a directly-injected citizen receives a body with no sender envelope and cannot name who called it",
+			"subject": "pi-extensions/lib/entwurf-v2-native-push.ts",
+			"find": [
+				"\t\tconst content = sender ? formatMetaMailboxBody(sender, plan.message, plan.wantsReply) : plan.message;"
+			],
+			"replace": ["\t\tconst content = plan.message;"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-production"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:NATIVE-PUSH-SENDER-ENVELOPE]",
+			"signatureSource": "scripts/check-entwurf-v2-production.ts"
+		},
+		{
+			"claim": "NATIVE-PUSH-SENDER-PROVIDER-WIRING",
+			"title": "the production factory stops handing its one senderProvider to the native-push hand, so the render is reachable but never fed and every direct injection silently falls back to raw",
+			"subject": "pi-extensions/lib/entwurf-v2-production.ts",
+			"find": [
+				"\t\tsendNativePush: makeNativePushSend({\n\t\t\tresolveAdapter: io.resolveNativePushAdapter,\n\t\t\tsenderProvider: opts.senderProvider,\n\t\t}),"
+			],
+			"replace": ["\t\tsendNativePush: makeNativePushSend({ resolveAdapter: io.resolveNativePushAdapter }),"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-production"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:NATIVE-PUSH-SENDER-PROVIDER-WIRING]",
+			"signatureSource": "scripts/check-entwurf-v2-production.ts"
+		},
+		{
+			"claim": "NATIVE-PUSH-SENDER-BEFORE-ADAPTER",
+			"title": "the send hand resolves the native-push adapter before the sender envelope, so a failing envelope source fails with the target's adapter already in hand instead of before anything was touched",
+			"subject": "pi-extensions/lib/entwurf-v2-native-push.ts",
+			"find": [
+				"\t\tconst sender = senderProvider?.();\n\t\tconst content = sender ? formatMetaMailboxBody(sender, plan.message, plan.wantsReply) : plan.message;\n\t\tconst adapter = resolveAdapter(plan.backend);"
+			],
+			"replace": [
+				"\t\tconst adapter = resolveAdapter(plan.backend);\n\t\tconst sender = senderProvider?.();\n\t\tconst content = sender ? formatMetaMailboxBody(sender, plan.message, plan.wantsReply) : plan.message;"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-production"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:NATIVE-PUSH-SENDER-BEFORE-ADAPTER]",
+			"signatureSource": "scripts/check-entwurf-v2-production.ts"
+		},
+		{
+			"claim": "NATIVE-PUSH-RETRY-BYTE-IDENTITY",
+			"title": "the one permitted retry decorates the replayed body, so the second attempt delivers bytes that disagree with the first attempt the target may already have accepted",
+			"subject": "pi-extensions/lib/entwurf-v2-native-push.ts",
+			"find": ["\t\tawait adapter.send(reprobe.route, nativeSessionId, content);"],
+			"replace": ["\t\tawait adapter.send(reprobe.route, nativeSessionId, `${content} (retry)`);"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-native-push"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:NATIVE-PUSH-RETRY-BYTE-IDENTITY]",
+			"signatureSource": "scripts/check-entwurf-v2-native-push.ts"
 		}
 	]
 }

package/scripts/raw-async-delivery/README.md

@@ -551,7 +551,8 @@ send-message-v2` spins a fresh thread, not the live one.
 
 Copilot is a GitHub **harness** (issues, PR, CI, model `auto`, mode `autopilot`,
 remote/delegate), not a second GPT provider next to pi. This makes a native lane
-product-distinct from the declined Codex lane: Copilot can own GitHub work while
+product-distinct from Codex's separate native-push lane (#95, unreleased candidate):
+Copilot can own GitHub work while
 implementation checkpoints arrive from another garden id. That split is operator
 etiquette plus dispatch, not a substrate role system.