@junghanacs/entwurf 0.25.0 → 0.30.0

package/scripts/mutants/mux-resume-call.json

@@ -93,55 +93,31 @@
 			"signatureSource": "scripts/check-mux-resume-call.ts"
 		},
 		{
-			"claim": "MUXRESUME-PI-SURFACE-REGISTERED",
-			"title": "the native pi registration is never called, so the verb exists in source and nowhere an operator can reach",
-			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["\t\tregisterResumeCallTool(pi);"],
-			"replace": ["\t\tvoid registerResumeCallTool;"],
-			"gate": ["bash", "run.sh", "check-mux-resume-call"],
-			"timeoutSeconds": 60,
-			"signature": "[QK:MUXRESUME-PI-SURFACE-REGISTERED]",
-			"signatureSource": "scripts/check-mux-resume-call.ts"
-		},
-		{
-			"claim": "MUXRESUME-PI-SURFACE-TARGET-ONLY",
-			"title": "a task knob is added to the native schema, re-opening the prompt axis a resume deliberately does not have",
-			"subject": "pi-extensions/entwurf-control.ts",
+			"claim": "MUXRESUME-DESC-CONTRACT-MCP",
+			"title": "the MCP description drops the dormant-only scope, inviting callers to aim the verb at live citizens it will refuse",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\t\t\tdescription: \"Garden id of the DORMANT pi citizen to reopen (discover with entwurf_peers).\",\n\t\t\t}),"
+				"\t\"Reopen ONE DORMANT pi citizen under its OWN garden id, in a visible window in the operator's own tmux \""
 			],
 			"replace": [
-				"\t\t\t\tdescription: \"Garden id of the DORMANT pi citizen to reopen (discover with entwurf_peers).\",\n\t\t\t}),\n\t\t\ttask: Type.String({ description: \"What the resumed citizen should do.\" }),"
+				"\t\"Reopen ONE pi citizen under its OWN garden id, in a visible window in the operator's own tmux \""
 			],
 			"gate": ["bash", "run.sh", "check-mux-resume-call"],
 			"timeoutSeconds": 60,
-			"signature": "[QK:MUXRESUME-PI-SURFACE-TARGET-ONLY]",
-			"signatureSource": "scripts/check-mux-resume-call.ts"
-		},
-		{
-			"claim": "MUXRESUME-DESC-CONTRACT-PI",
-			"title": "the native description stops saying a resume runs no turn, so a caller reasonably expects the citizen to act on being reopened",
-			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["This runs NO turn: the window comes\nback with the conversation and waits"],
-			"replace": ["The window comes\nback with the conversation and waits"],
-			"gate": ["bash", "run.sh", "check-mux-resume-call"],
-			"timeoutSeconds": 60,
-			"signature": "[QK:MUXRESUME-DESC-CONTRACT-PI]",
+			"signature": "[QK:MUXRESUME-DESC-CONTRACT-MCP]",
 			"signatureSource": "scripts/check-mux-resume-call.ts"
 		},
 		{
-			"claim": "MUXRESUME-DESC-CONTRACT-MCP",
-			"title": "the MCP description drops the dormant-only scope, inviting callers to aim the verb at live citizens it will refuse",
+			"claim": "MUXRESUME-MCP-TARGET-PASSTHROUGH",
+			"title": "the bridge resume handler substitutes a constant id for the caller's target, so the record lookup reopens a citizen nobody named while the target-only schema stays green",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": [
-				"\t\"Reopen ONE DORMANT pi citizen under its OWN garden id, in a visible window in the operator's own tmux \""
-			],
+			"find": ["\t\t\tconst result = await visibleResume(target, makeVisibleResumeDeps(visibleResumeLaunch));"],
 			"replace": [
-				"\t\"Reopen ONE pi citizen under its OWN garden id, in a visible window in the operator's own tmux \""
+				"\t\t\tconst result = await visibleResume(\"20260101T000000-feed00\", makeVisibleResumeDeps(visibleResumeLaunch));"
 			],
 			"gate": ["bash", "run.sh", "check-mux-resume-call"],
 			"timeoutSeconds": 60,
-			"signature": "[QK:MUXRESUME-DESC-CONTRACT-MCP]",
+			"signature": "[QK:MUXRESUME-MCP-TARGET-PASSTHROUGH]",
 			"signatureSource": "scripts/check-mux-resume-call.ts"
 		}
 	]

package/scripts/mutants/pack-install.json

@@ -6,8 +6,8 @@
 			"claim": "PACK-INSTALL-PIN-MATCHER-BOUNDED",
 			"title": "the pin-leak matcher loses its version boundary and blesses substring lookalikes — @0.85.10 reads as the pinned 0.85.1 and the gate announces a verified tree it never verified (independent review, 2026-08-25)",
 			"subject": "run.sh",
-			"find": ["  grep '^@earendil-works+' | grep -Ev '@0\\.87\\.1(_|$)' || true"],
-			"replace": ["  grep '^@earendil-works+' | grep -v '@0\\.87\\.0' || true"],
+			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.0\\.0(_|$)' || true"],
+			"replace": ["  grep '^@earendil-works+' | grep -v '@0\\.87\\.1' || true"],
 			"gate": ["bash", "run.sh", "check-pack-pin-matcher"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:PACK-INSTALL-PIN-MATCHER-BOUNDED]",
@@ -17,12 +17,23 @@
 			"claim": "PACK-INSTALL-PIN-MATCHER-COVERS-CLOSURE",
 			"title": "the pin-leak matcher narrows back to the pi-* families and goes blind to a non-pi member of the same runtime closure — @earendil-works/chord (new in pi 0.85.0, a runtime dependency of pi-coding-agent/pi-agent-core/pi-client/pi-protocol) floats unpinned while the gate prints a verified pin (measured 2026-09-06 on a real 0.85.1 install tree)",
 			"subject": "run.sh",
-			"find": ["  grep '^@earendil-works+' | grep -Ev '@0\\.87\\.1(_|$)' || true"],
-			"replace": ["  grep '^@earendil-works+pi-' | grep -Ev '@0\\.87\\.1(_|$)' || true"],
+			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.0\\.0(_|$)' || true"],
+			"replace": ["  grep '^@earendil-works+pi-' | grep -Ev '@1\\.0\\.0(_|$)' || true"],
 			"gate": ["bash", "run.sh", "check-pack-pin-matcher"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:PACK-INSTALL-PIN-MATCHER-COVERS-CLOSURE]",
 			"signatureSource": "run.sh"
+		},
+		{
+			"claim": "PACK-INSTALL-CONSUMER-ROOTS-CONTAINED",
+			"title": "a consumer subcall stops naming its own PI_CODING_AGENT_DIR, so an inherited agent dir wins over the sandbox HOME and the consumer's user-scope registration lands outside it (measured 2026-10-01, #125)",
+			"subject": "run.sh",
+			"find": ["    \"XDG_CACHE_HOME=$h/.cache\" \\\n    \"PI_CODING_AGENT_DIR=$h/.pi/agent\""],
+			"replace": ["    \"XDG_CACHE_HOME=$h/.cache\""],
+			"gate": ["bash", "run.sh", "check-pack-consumer-roots"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:PACK-INSTALL-CONSUMER-ROOTS-CONTAINED]",
+			"signatureSource": "run.sh"
 		}
 	]
 }

package/scripts/mutants/pi-bridge-sender.json

@@ -0,0 +1,54 @@
+{
+	"schemaVersion": 1,
+	"lane": "pi-bridge-sender",
+	"mutants": [
+		{
+			"claim": "PI-BRIDGE-SENDER-RECORD-BACKED",
+			"title": "the backing check starts treating a missing control socket as inadmissible, so a dormant pi citizen loses its own identity instead of answering replyable:false",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\tif (identity.backend !== \"pi\") {"],
+			"replace": [
+				"\tif (identity.backend !== \"pi\" || !existsSync(controlSocketPathIn(ENTWURF_DIR, envelope.sessionId))) {"
+			],
+			"gate": ["bash", "run.sh", "check-pi-bridge-sender"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PI-BRIDGE-SENDER-RECORD-BACKED]",
+			"signatureSource": "scripts/check-pi-bridge-sender.ts"
+		},
+		{
+			"claim": "PI-BRIDGE-SENDER-MISSING-REFUSED",
+			"title": "the pi branch returns the raw carrier again, so any well-formed PI_SESSION_ID is served as a sender whether or not a record exists",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\tif (pi && pi.sessionId === selected.id) return { envelope: requirePiSenderRecord(pi) };"],
+			"replace": ["\tif (pi && pi.sessionId === selected.id) return { envelope: pi };"],
+			"gate": ["bash", "run.sh", "check-pi-bridge-sender"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PI-BRIDGE-SENDER-MISSING-REFUSED]",
+			"signatureSource": "scripts/check-pi-bridge-sender.ts"
+		},
+		{
+			"claim": "PI-BRIDGE-SENDER-BACKEND-REFUSED",
+			"title": "the backend check is dropped, so a PI_SESSION_ID naming another harness's record is served as a pi sender",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\tif (identity.backend !== \"pi\") {"],
+			"replace": ["\tif (identity.backend === undefined) {"],
+			"gate": ["bash", "run.sh", "check-pi-bridge-sender"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PI-BRIDGE-SENDER-BACKEND-REFUSED]",
+			"signatureSource": "scripts/check-pi-bridge-sender.ts"
+		},
+		{
+			"claim": "PI-BRIDGE-SENDER-UNREADABLE-CAUSE",
+			"title": "reader failures are flattened into the absent-record refusal, so a corrupt store reads as a citizen that simply does not exist",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\tconst identity = readMetaIdentityByGardenId(envelope.sessionId);"],
+			"replace": [
+				"\tconst identity = (() => {\n\t\ttry {\n\t\t\treturn readMetaIdentityByGardenId(envelope.sessionId);\n\t\t} catch {\n\t\t\tthrow new Error(`no meta-record for garden id \"${envelope.sessionId}\"`);\n\t\t}\n\t})();"
+			],
+			"gate": ["bash", "run.sh", "check-pi-bridge-sender"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PI-BRIDGE-SENDER-UNREADABLE-CAUSE]",
+			"signatureSource": "scripts/check-pi-bridge-sender.ts"
+		}
+	]
+}

package/scripts/mutants/pi-floor.json

@@ -6,8 +6,12 @@
 			"claim": "PI-FLOOR-SINGLE-SOURCE",
 			"title": "one row of the pnpm workspace closure is left on the previous floor while every other surface moved — the shape a version bump actually fails in. Nothing else reads that file, so the stranded row surfaces only at install time, in a different command, far from the change that stranded it",
 			"subject": "pnpm-workspace.yaml",
-			"find": ["  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1'"],
-			"replace": ["  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0'"],
+			"find": [
+				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0'"
+			],
+			"replace": [
+				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2'"
+			],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-FLOOR-SINGLE-SOURCE]",

package/scripts/mutants/pi-mcp-bridge.json

@@ -0,0 +1,36 @@
+{
+	"schemaVersion": 1,
+	"lane": "pi-mcp-bridge",
+	"mutants": [
+		{
+			"claim": "PI-MCP-BRIDGE-DECLARED-SURFACE",
+			"title": "entwurf_self joins the hidden list, so a pi model is no longer declared the verb that tells it who it is",
+			"subject": "pi-extensions/lib/entwurf-mcp-server.ts",
+			"find": [
+				"export const ENTWURF_MCP_HIDDEN_TOOLS = [\"entwurf_inbox_read\", \"entwurf_register_native\"] as const;"
+			],
+			"replace": [
+				"export const ENTWURF_MCP_HIDDEN_TOOLS = [\"entwurf_inbox_read\", \"entwurf_register_native\", \"entwurf_self\"] as const;"
+			],
+			"gate": ["bash", "run.sh", "check-pi-mcp-bridge"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:PI-MCP-BRIDGE-DECLARED-SURFACE]",
+			"signatureSource": "scripts/check-pi-mcp-bridge.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-MCP-BRIDGE-SAME-CHILD-IDENTITY",
+			"title": "the explicit carrier is built from the model label when one is known, so the spawned child claims an identity no record holds",
+			"subject": "pi-extensions/lib/entwurf-mcp-server.ts",
+			"find": ["\t\tenv: { PI_SESSION_ID: input.gardenId, ...(input.agentId ? { PI_AGENT_ID: input.agentId } : {}) },"],
+			"replace": [
+				"\t\tenv: { PI_SESSION_ID: input.agentId ?? input.gardenId, ...(input.agentId ? { PI_AGENT_ID: input.agentId } : {}) },"
+			],
+			"gate": ["bash", "run.sh", "check-pi-mcp-bridge"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:PI-MCP-BRIDGE-SAME-CHILD-IDENTITY]",
+			"signatureSource": "scripts/check-pi-mcp-bridge.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		}
+	]
+}

package/scripts/mutants/pi-mcp-register.json

@@ -0,0 +1,51 @@
+{
+	"schemaVersion": 1,
+	"lane": "pi-mcp-register",
+	"mutants": [
+		{
+			"claim": "PI-MCP-REGISTER-AFTER-BIRTH",
+			"title": "the extension factory registers the bridge at load, before any record exists — the server is on Pi's registry with no born identity to carry",
+			"subject": "pi-extensions/entwurf-control.ts",
+			"find": ["\tpi.registerMessageRenderer(SESSION_MESSAGE_TYPE, renderSessionMessage);"],
+			"replace": [
+				"\tpi.registerMessageRenderer(SESSION_MESSAGE_TYPE, renderSessionMessage);",
+				"\tpi.registerMcpServer(ENTWURF_MCP_SERVER_NAME, { command: process.execPath, args: [] });"
+			],
+			"gate": ["bash", "run.sh", "check-pi-mcp-register"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PI-MCP-REGISTER-AFTER-BIRTH]",
+			"signatureSource": "pi-extensions/entwurf-control.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-MCP-IDENTITY-BEFORE-UI",
+			"title": "the status line is rendered before the registration, so a UI failure leaves a born citizen without its verbs",
+			"subject": "pi-extensions/entwurf-control.ts",
+			"find": [
+				"\t\tregisterEntwurfMcpServer(pi, ctx, birth.gardenId);",
+				"\t\tupdateStatus(ctx, true, birth.gardenId);"
+			],
+			"replace": [
+				"\t\tupdateStatus(ctx, true, birth.gardenId);",
+				"\t\tregisterEntwurfMcpServer(pi, ctx, birth.gardenId);"
+			],
+			"gate": ["bash", "run.sh", "check-pi-mcp-register"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PI-MCP-IDENTITY-BEFORE-UI]",
+			"signatureSource": "pi-extensions/entwurf-control.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-MCP-EXPOSURE",
+			"title": "the verbs are registered behind codemode instead of declared directly, so the model is handed a different surface than every other host",
+			"subject": "pi-extensions/lib/entwurf-mcp-server.ts",
+			"find": ["\t\texposure: \"direct\","],
+			"replace": ["\t\texposure: \"codemode\","],
+			"gate": ["bash", "run.sh", "check-pi-mcp-register"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PI-MCP-EXPOSURE]",
+			"signatureSource": "pi-extensions/entwurf-control.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		}
+	]
+}