@junghanacs/entwurf 0.25.1 → 0.30.0

package/scripts/mutants/codex-native.json

@@ -393,17 +393,6 @@
 			"signature": "[QK:FRESHCALL-CODEX-PREMUTATION-MCP]",
 			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
 		},
-		{
-			"claim": "FRESHCALL-CODEX-PREMUTATION-PI",
-			"title": "the native pi public surface relabels a Codex request as pi at the shared dispatcher seam, bypassing the same central preflight from the other public door",
-			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["\t\t\t\t\tbackend: params.backend,"],
-			"replace": ["\t\t\t\t\tbackend: \"pi\","],
-			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
-			"timeoutSeconds": 180,
-			"signature": "[QK:FRESHCALL-CODEX-PREMUTATION-PI]",
-			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
-		},
 		{
 			"claim": "CODEX-BIRTH-DOCTOR-REQUIRES-TRUST",
 			"title": "the doctor treats the vendor trust receipt as optional, so a declared hook the vendor will never run reports green",
@@ -648,6 +637,17 @@
 			"signature": "[QK:CODEX-LIVE-REPORT-TOKEN-EXACT]",
 			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
 		},
+		{
+			"claim": "CODEX-LIVE-PI-MCP-SOURCE-DIALECT",
+			"title": "Pi's current qualified fresh-call receipt no longer reaches semantic launch and cleanup authority, recreating the Pi 1.0 timeout",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": ["\t[\"mcp__entwurf_bridge__entwurf_fresh_call\", \"entwurf_fresh_call\"],"],
+			"replace": ["\t[\"mcp__entwurf_bridge__entwurf_fresh_call\", \"unrecognized_pi_fresh_call\"],"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-PI-MCP-SOURCE-DIALECT]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
 		{
 			"claim": "CODEX-LIVE-SOURCE-JOIN",
 			"title": "a Pi tool result can be joined to a call whose tool name differs, turning an unrelated result body into launch authority",

package/scripts/mutants/control-send-receipt.json

@@ -174,14 +174,15 @@
 			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:VITEST-TEST-DIR-ON-THE-FLOOR]",
-			"signatureSource": "run.sh"
+			"signatureSource": "run.sh",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "PI-CORE-PIN-TRACKS-FLOOR",
 			"title": "the queue oracle's pi-agent-core pin drifts off the floor the rest of the pi runtime is pinned to, so the oracle keeps answering honestly — about a pi nobody in this repo runs",
 			"subject": "package.json",
-			"find": ["\"@earendil-works/pi-agent-core\": \"0.87.1\","],
-			"replace": ["\"@earendil-works/pi-agent-core\": \"0.86.0\","],
+			"find": ["\"@earendil-works/pi-agent-core\": \"1.0.0\","],
+			"replace": ["\"@earendil-works/pi-agent-core\": \"0.87.1\","],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-CORE-PIN-TRACKS-FLOOR]",
@@ -218,7 +219,8 @@
 			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:VITEST-TEST-DIR-HAS-COORDINATE]",
-			"signatureSource": "run.sh"
+			"signatureSource": "run.sh",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "SEND-OUTCOME-LIST-NAMES-EVERY-RAIL",

package/scripts/mutants/copilot-birth.json

@@ -101,7 +101,8 @@
 			"gate": ["bash", "run.sh", "check-meta-doctor-oracle"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:HOOK-LOG-RAIL-SCOPED]",
-			"signatureSource": "scripts/check-meta-doctor-oracle.sh"
+			"signatureSource": "scripts/check-meta-doctor-oracle.sh",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "COPILOT-BIRTH-DOES-NOT-ARM-RECEIVER",

package/scripts/mutants/fresh-call-dispatch.json

@@ -75,8 +75,8 @@
 			"signatureSource": "scripts/check-fresh-call-dispatch.ts"
 		},
 		{
-			"claim": "FCD-SURFACE-PARITY",
-			"title": "the MCP surface goes back to calling a rail directly, so the two public surfaces can drift on rail choice",
+			"claim": "FCD-SURFACE-ROOT-ONLY",
+			"title": "the one public fresh-call surface goes back to choosing a rail itself instead of reaching the composition root, so rail choice lives outside the root again",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
 				"\t\t\tconst dispatched = await dispatchFreshCall({\n\t\t\t\tbackend,\n\t\t\t\tmodel,\n\t\t\t\ttask,\n\t\t\t\tcwd,\n\t\t\t\tplacement,\n\t\t\t\tcallerGardenId,\n\t\t\t\tcallerNativeSessionId,\n\t\t\t\tcallerCwd,\n\t\t\t});"
@@ -86,18 +86,7 @@
 			],
 			"gate": ["bash", "run.sh", "check-fresh-call-dispatch"],
 			"timeoutSeconds": 120,
-			"signature": "[QK:FCD-SURFACE-PARITY]",
-			"signatureSource": "scripts/check-fresh-call-dispatch.ts"
-		},
-		{
-			"claim": "FCD-PI-DYNAMIC-IMPORT",
-			"title": "pi reaches the composition root by a literal path again, which is how the lazy import fence erodes",
-			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["const FRESH_CALL_DISPATCH_MODULE = \"./lib/fresh-call-dispatch.ts\";"],
-			"replace": ["const FRESH_CALL_DISPATCH_MODULE = \"./lib/fresh-call-dispatch-renamed.ts\";"],
-			"gate": ["bash", "run.sh", "check-fresh-call-dispatch"],
-			"timeoutSeconds": 120,
-			"signature": "[QK:FCD-PI-DYNAMIC-IMPORT]",
+			"signature": "[QK:FCD-SURFACE-ROOT-ONLY]",
 			"signatureSource": "scripts/check-fresh-call-dispatch.ts"
 		},
 		{

package/scripts/mutants/gate-qualification.json

@@ -23,6 +23,65 @@
 			"timeoutSeconds": 120,
 			"signature": "[QK:LANE-INVENTORY-DECLARED]",
 			"signatureSource": "scripts/check-gate-qualification.ts"
+		},
+		{
+			"claim": "QUALIFY-BUILD-TRACKS-MUTATION",
+			"title": "the runner keeps the baseline build output across a mutation instead of rebuilding it from the mutated bytes — a gate that reads only the compiled output judges source it was never handed, and every mutant planted in the build's source survives (#125: the compiled entwurf-bridge a pi citizen registers)",
+			"subject": "scripts/lib/mutation-qualify.ts",
+			"find": ["\t\t\t\t\tconst b = await buildOutput(build, outputAbs, m.timeoutSeconds);"],
+			"replace": ["\t\t\t\t\tconst b = { run: pre, digest: baseline };"],
+			"gate": ["bash", "run.sh", "check-gate-manifests"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:QUALIFY-BUILD-TRACKS-MUTATION]",
+			"signatureSource": "scripts/check-gate-qualification.ts"
+		},
+		{
+			"claim": "QUALIFY-BUILD-RED-NOT-A-KILL",
+			"title": "a mutation that breaks the declared build is attributed like a gate run — the build's own failure output is read for the claim token, so a broken build is certified as the gate killing the defect",
+			"subject": "scripts/lib/mutation-qualify.ts",
+			"find": [
+				"\t\t\t\tsignatureOnFailureLine: !buildRed && signatureAttributedToFailure(run.output, m.signature, run.failedTitles),"
+			],
+			"replace": [
+				"\t\t\t\tsignatureOnFailureLine: signatureAttributedToFailure(run.output, m.signature, run.failedTitles),"
+			],
+			"gate": ["bash", "run.sh", "check-gate-manifests"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:QUALIFY-BUILD-RED-NOT-A-KILL]",
+			"signatureSource": "scripts/check-gate-qualification.ts"
+		},
+		{
+			"claim": "QUALIFY-BUILD-SCOPED-TO-GROUP",
+			"title": "the declared build output outlives its group — a later group runs against an input it never declared, and the ignored output is left in the snapshot",
+			"subject": "scripts/lib/mutation-qualify.ts",
+			"find": ["\t\t\tif (outputAbs) fs.rmSync(outputAbs, { recursive: true, force: true });"],
+			"replace": ["\t\t\tif (outputAbs) void 0;"],
+			"gate": ["bash", "run.sh", "check-gate-manifests"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:QUALIFY-BUILD-SCOPED-TO-GROUP]",
+			"signatureSource": "scripts/check-gate-qualification.ts"
+		},
+		{
+			"claim": "QUALIFY-BUILD-OUTPUT-GUARDED",
+			"title": "a gate that writes into its declared build output keeps its KILLED verdict — the next run is judged against bytes no build produced",
+			"subject": "scripts/lib/mutation-qualify.ts",
+			"find": ["\t\t\t\t\t\toutputWritten = wroteOutput(b.digest);"],
+			"replace": ["\t\t\t\t\t\toutputWritten = false;"],
+			"gate": ["bash", "run.sh", "check-gate-manifests"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:QUALIFY-BUILD-OUTPUT-GUARDED]",
+			"signatureSource": "scripts/check-gate-qualification.ts"
+		},
+		{
+			"claim": "QUALIFY-BUILD-GROUP-CONSISTENT",
+			"title": "mutants of one gate may declare different builds (or one none) — the same gate is handed different inputs depending on run order, and a group's control no longer describes all of its mutants",
+			"subject": "scripts/lib/mutation-qualify.ts",
+			"find": ["\t\tif (mine !== first) {"],
+			"replace": ["\t\tif (mine !== first && false) {"],
+			"gate": ["bash", "run.sh", "check-gate-manifests"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:QUALIFY-BUILD-GROUP-CONSISTENT]",
+			"signatureSource": "scripts/check-gate-qualification.ts"
 		}
 	]
 }

package/scripts/mutants/mux-fresh-call.json

@@ -121,8 +121,8 @@
 			"signatureSource": "test/mux-fresh-call.test.ts"
 		},
 		{
-			"claim": "FRESHCALL-CWD-SURFACE-PARITY",
-			"title": "one surface drops the optional cwd from its schema, so cross-repo fresh works from pi and silently cannot exist from the MCP bridge",
+			"claim": "FRESHCALL-CWD-SURFACE",
+			"title": "the fresh-call surface drops the optional cwd from its schema, so cross-repo fresh silently cannot exist from any caller — pi included, which reaches this bridge since #125",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
 				"\t\tcwd: z\n\t\t\t.string()\n\t\t\t.optional()\n\t\t\t.describe(\n\t\t\t\t\"Optional literal ABSOLUTE path of an existing directory to start the sibling in (cross-repo fresh). Omit or pass \\\"\\\" to start where the CALLER is — this agent's own cwd on BOTH rails, or for a Codex caller its own record directory, because this bridge is the app-server's child and that process's directory is not the caller's. Taken exactly as given: no trim, no realpath, no project-name resolution. '#' is refused on the tmux rail only, because tmux format-expands a start directory; inside herdr it is an ordinary path character. The receipt echoes the directory that was REQUESTED or the caller record it came from, never an observation of where the pane landed.\",\n\t\t\t),\n"
@@ -130,31 +130,7 @@
 			"replace": [""],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
-			"signature": "[QK:FRESHCALL-CWD-SURFACE-PARITY]",
-			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
-		},
-		{
-			"claim": "FRESHCALL-PI-SURFACE-IDENTITY",
-			"title": "native pi takes the caller garden id from the environment instead of its own resident closure — the uuidv7 confusion, reintroduced",
-			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["\t\t\t\t\tcallerGardenId: residentGardenId,"],
-			"replace": ["\t\t\t\t\tcallerGardenId: process.env.PI_SESSION_ID ?? null,"],
-			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
-			"timeoutSeconds": 120,
-			"signature": "[QK:FRESHCALL-PI-SURFACE-IDENTITY]",
-			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
-		},
-		{
-			"claim": "FRESHCALL-PI-MODEL-SCHEMA",
-			"title": "native pi drops the required model field from fresh-call while the composition still expects one",
-			"subject": "pi-extensions/entwurf-control.ts",
-			"find": [
-				"\t\t\tmodel: Type.String({\n\t\t\t\tminLength: 1,\n\t\t\t\tmaxLength: 200,\n\t\t\t\tpattern: \"^[A-Za-z0-9][A-Za-z0-9._/:\\\\[\\\\]-]*$\",\n\t\t\t\tdescription:\n\t\t\t\t\t\"Required runtime model: canonical provider/model for pi, a Claude Code model id/alias, or a Copilot/OMP/Codex model name.\",\n\t\t\t}),\n"
-			],
-			"replace": [""],
-			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
-			"timeoutSeconds": 120,
-			"signature": "[QK:FRESHCALL-PI-MODEL-SCHEMA]",
+			"signature": "[QK:FRESHCALL-CWD-SURFACE]",
 			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
 		},
 		{
@@ -196,10 +172,10 @@
 		},
 		{
 			"claim": "FRESHCALL-MODEL-PATTERN-PROVIDER-VALID",
-			"title": "the same unescape planted on the TypeBox surface rides pi-ai's real anthropic-messages conversion into the request body as an invalid Rust-family pattern",
-			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["\t\t\t\tpattern: \"^[A-Za-z0-9][A-Za-z0-9._/:\\\\[\\\\]-]*$\","],
-			"replace": ["\t\t\t\tpattern: \"^[A-Za-z0-9][A-Za-z0-9._/:[\\\\]-]*$\","],
+			"title": "the #62 unescape planted on the bridge's zod pattern rides Pi's built-in MCP spread and pi-ai's real anthropic-messages conversion into the request body as an invalid Rust-family pattern",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\t\t\t.regex(/^[A-Za-z0-9][A-Za-z0-9._/:\\[\\]-]*$/)"],
+			"replace": ["\t\t\t.regex(/^[A-Za-z0-9][A-Za-z0-9._/:[\\]-]*$/)"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:FRESHCALL-MODEL-PATTERN-PROVIDER-VALID]",
@@ -284,6 +260,39 @@
 			"signature": "[QK:FRESHCALL-COPILOT-CALLBACK-TOOL]",
 			"signatureSource": "test/mux-fresh-call.test.ts"
 		},
+		{
+			"claim": "FRESHCALL-PI-CALLBACK-DIALECT",
+			"title": "pi callback rolls back to the 0.99.1 hyphen spelling, which a 0.99.2 host no longer declares — the first turn is spent on a tool that is not there",
+			"subject": "pi-extensions/lib/fresh-call-composition.ts",
+			"find": ["\tpi: \"mcp__entwurf_bridge__entwurf_callback\","],
+			"replace": ["\tpi: \"mcp__entwurf-bridge__entwurf_callback\","],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCALL-PI-CALLBACK-DIALECT]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-PI-DELIVERY-DIALECT",
+			"title": "pi delivery rolls back to the 0.99.1 hyphen spelling — the result is sent to a tool a 0.99.2 host does not declare",
+			"subject": "pi-extensions/lib/fresh-call-composition.ts",
+			"find": ["\tpi: \"mcp__entwurf_bridge__entwurf_v2\","],
+			"replace": ["\tpi: \"mcp__entwurf-bridge__entwurf_v2\","],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCALL-PI-DELIVERY-DIALECT]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-PI-PEERS-DIALECT",
+			"title": "pi peers offer rolls back to the 0.99.1 hyphen spelling — the corroboration tool is named in a spelling the sibling cannot reach",
+			"subject": "pi-extensions/lib/fresh-call-composition.ts",
+			"find": ["\tpi: \"mcp__entwurf_bridge__entwurf_peers\","],
+			"replace": ["\tpi: \"mcp__entwurf-bridge__entwurf_peers\","],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCALL-PI-PEERS-DIALECT]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
 		{
 			"claim": "FRESHCALL-COPILOT-PREFLIGHT-PREMUTATION",
 			"title": "the capability preflight is removed — a host missing the birth, MCP, receiver or footer unit gets a real window and a launch receipt for a sibling that can never call home",
@@ -430,17 +439,6 @@
 			"signature": "[QK:FRESHCALL-COPILOT-EXPLICIT-POLICY]",
 			"signatureSource": "test/mux-fresh-call.test.ts"
 		},
-		{
-			"claim": "FRESHCALL-BACKEND-SET-SURFACE-PARITY-PI",
-			"title": "a backend the composition can open is missing from the native pi surface enum — an in-process pi session cannot name a capability the module already opens",
-			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\", \"copilot\", \"omp\", \"codex\"], {"],
-			"replace": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\", \"copilot\", \"omp\"], {"],
-			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
-			"timeoutSeconds": 180,
-			"signature": "[QK:FRESHCALL-BACKEND-SET-SURFACE-PARITY-PI]",
-			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
-		},
 		{
 			"claim": "TMUXSESSION-LOOKUP-ENGINE",
 			"title": "the seat lookup goes back to the `-f` filter engine, which was measured to match EVERY session when the name contains a '}' — a fresh sibling then opens in whichever session tmux listed first",
@@ -510,8 +508,8 @@
 			"signatureSource": "test/mux-fresh-call.test.ts"
 		},
 		{
-			"claim": "FRESHCALL-PLACEMENT-SURFACE-PARITY",
-			"title": "one surface drops the optional seat from its schema, so opening a sibling in the operator's project session works from pi and silently cannot exist from the MCP bridge",
+			"claim": "FRESHCALL-PLACEMENT-SURFACE",
+			"title": "the fresh-call surface drops the optional seat from its schema, so opening a sibling in the operator's project session silently cannot exist from any caller",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
 				"\t\tplacement: z\n\t\t\t.object({\n\t\t\t\ttmuxSession: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.describe(\n\t\t\t\t\t\t\"EXACT name of an EXISTING session on this agent's own tmux server. Nothing is created: an absent session is refused as tmux-session-missing, and a name outside [A-Za-z0-9][A-Za-z0-9_-]* as tmux-session-name-invalid.\",\n\t\t\t\t\t),\n\t\t\t})\n\t\t\t.optional()\n\t\t\t.describe(\n\t\t\t\t\"Optional expert seat override, TMUX ONLY: open the sibling in ONE EXISTING tmux session of this agent's own server, and it always wins. When omitted the seat follows the CALLER, never the backend being opened: a Codex CALLER opens beside its own TUI pane, matched by thread-id in that pane's terminal title (0 or 2+ matching panes refuse, never fall back); every other caller opens in its own session. A pane title is a placement input only — never an address, liveness or delivery fact. Nothing is ever created. Inside herdr this field is refused by name — placement there belongs to herdr, and a tmux session name would silently place the sibling somewhere else. Independent of cwd; neither is inferred from the other. The receipt reports the selected name (absent for the caller-pane rule, which observed a session rather than requesting a name), its source, and resolved target session id.\",\n\t\t\t),\n"
@@ -519,7 +517,7 @@
 			"replace": [""],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
-			"signature": "[QK:FRESHCALL-PLACEMENT-SURFACE-PARITY]",
+			"signature": "[QK:FRESHCALL-PLACEMENT-SURFACE]",
 			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
 		},
 		{

package/scripts/mutants/mux-resume-call.json

@@ -93,55 +93,31 @@
 			"signatureSource": "scripts/check-mux-resume-call.ts"
 		},
 		{
-			"claim": "MUXRESUME-PI-SURFACE-REGISTERED",
-			"title": "the native pi registration is never called, so the verb exists in source and nowhere an operator can reach",
-			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["\t\tregisterResumeCallTool(pi);"],
-			"replace": ["\t\tvoid registerResumeCallTool;"],
-			"gate": ["bash", "run.sh", "check-mux-resume-call"],
-			"timeoutSeconds": 60,
-			"signature": "[QK:MUXRESUME-PI-SURFACE-REGISTERED]",
-			"signatureSource": "scripts/check-mux-resume-call.ts"
-		},
-		{
-			"claim": "MUXRESUME-PI-SURFACE-TARGET-ONLY",
-			"title": "a task knob is added to the native schema, re-opening the prompt axis a resume deliberately does not have",
-			"subject": "pi-extensions/entwurf-control.ts",
+			"claim": "MUXRESUME-DESC-CONTRACT-MCP",
+			"title": "the MCP description drops the dormant-only scope, inviting callers to aim the verb at live citizens it will refuse",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\t\t\tdescription: \"Garden id of the DORMANT pi citizen to reopen (discover with entwurf_peers).\",\n\t\t\t}),"
+				"\t\"Reopen ONE DORMANT pi citizen under its OWN garden id, in a visible window in the operator's own tmux \""
 			],
 			"replace": [
-				"\t\t\t\tdescription: \"Garden id of the DORMANT pi citizen to reopen (discover with entwurf_peers).\",\n\t\t\t}),\n\t\t\ttask: Type.String({ description: \"What the resumed citizen should do.\" }),"
+				"\t\"Reopen ONE pi citizen under its OWN garden id, in a visible window in the operator's own tmux \""
 			],
 			"gate": ["bash", "run.sh", "check-mux-resume-call"],
 			"timeoutSeconds": 60,
-			"signature": "[QK:MUXRESUME-PI-SURFACE-TARGET-ONLY]",
-			"signatureSource": "scripts/check-mux-resume-call.ts"
-		},
-		{
-			"claim": "MUXRESUME-DESC-CONTRACT-PI",
-			"title": "the native description stops saying a resume runs no turn, so a caller reasonably expects the citizen to act on being reopened",
-			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["This runs NO turn: the window comes\nback with the conversation and waits"],
-			"replace": ["The window comes\nback with the conversation and waits"],
-			"gate": ["bash", "run.sh", "check-mux-resume-call"],
-			"timeoutSeconds": 60,
-			"signature": "[QK:MUXRESUME-DESC-CONTRACT-PI]",
+			"signature": "[QK:MUXRESUME-DESC-CONTRACT-MCP]",
 			"signatureSource": "scripts/check-mux-resume-call.ts"
 		},
 		{
-			"claim": "MUXRESUME-DESC-CONTRACT-MCP",
-			"title": "the MCP description drops the dormant-only scope, inviting callers to aim the verb at live citizens it will refuse",
+			"claim": "MUXRESUME-MCP-TARGET-PASSTHROUGH",
+			"title": "the bridge resume handler substitutes a constant id for the caller's target, so the record lookup reopens a citizen nobody named while the target-only schema stays green",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": [
-				"\t\"Reopen ONE DORMANT pi citizen under its OWN garden id, in a visible window in the operator's own tmux \""
-			],
+			"find": ["\t\t\tconst result = await visibleResume(target, makeVisibleResumeDeps(visibleResumeLaunch));"],
 			"replace": [
-				"\t\"Reopen ONE pi citizen under its OWN garden id, in a visible window in the operator's own tmux \""
+				"\t\t\tconst result = await visibleResume(\"20260101T000000-feed00\", makeVisibleResumeDeps(visibleResumeLaunch));"
 			],
 			"gate": ["bash", "run.sh", "check-mux-resume-call"],
 			"timeoutSeconds": 60,
-			"signature": "[QK:MUXRESUME-DESC-CONTRACT-MCP]",
+			"signature": "[QK:MUXRESUME-MCP-TARGET-PASSTHROUGH]",
 			"signatureSource": "scripts/check-mux-resume-call.ts"
 		}
 	]

package/scripts/mutants/pack-install.json

@@ -6,8 +6,8 @@
 			"claim": "PACK-INSTALL-PIN-MATCHER-BOUNDED",
 			"title": "the pin-leak matcher loses its version boundary and blesses substring lookalikes — @0.85.10 reads as the pinned 0.85.1 and the gate announces a verified tree it never verified (independent review, 2026-08-25)",
 			"subject": "run.sh",
-			"find": ["  grep '^@earendil-works+' | grep -Ev '@0\\.87\\.1(_|$)' || true"],
-			"replace": ["  grep '^@earendil-works+' | grep -v '@0\\.87\\.0' || true"],
+			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.0\\.0(_|$)' || true"],
+			"replace": ["  grep '^@earendil-works+' | grep -v '@0\\.87\\.1' || true"],
 			"gate": ["bash", "run.sh", "check-pack-pin-matcher"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:PACK-INSTALL-PIN-MATCHER-BOUNDED]",
@@ -17,12 +17,23 @@
 			"claim": "PACK-INSTALL-PIN-MATCHER-COVERS-CLOSURE",
 			"title": "the pin-leak matcher narrows back to the pi-* families and goes blind to a non-pi member of the same runtime closure — @earendil-works/chord (new in pi 0.85.0, a runtime dependency of pi-coding-agent/pi-agent-core/pi-client/pi-protocol) floats unpinned while the gate prints a verified pin (measured 2026-09-06 on a real 0.85.1 install tree)",
 			"subject": "run.sh",
-			"find": ["  grep '^@earendil-works+' | grep -Ev '@0\\.87\\.1(_|$)' || true"],
-			"replace": ["  grep '^@earendil-works+pi-' | grep -Ev '@0\\.87\\.1(_|$)' || true"],
+			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.0\\.0(_|$)' || true"],
+			"replace": ["  grep '^@earendil-works+pi-' | grep -Ev '@1\\.0\\.0(_|$)' || true"],
 			"gate": ["bash", "run.sh", "check-pack-pin-matcher"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:PACK-INSTALL-PIN-MATCHER-COVERS-CLOSURE]",
 			"signatureSource": "run.sh"
+		},
+		{
+			"claim": "PACK-INSTALL-CONSUMER-ROOTS-CONTAINED",
+			"title": "a consumer subcall stops naming its own PI_CODING_AGENT_DIR, so an inherited agent dir wins over the sandbox HOME and the consumer's user-scope registration lands outside it (measured 2026-10-01, #125)",
+			"subject": "run.sh",
+			"find": ["    \"XDG_CACHE_HOME=$h/.cache\" \\\n    \"PI_CODING_AGENT_DIR=$h/.pi/agent\""],
+			"replace": ["    \"XDG_CACHE_HOME=$h/.cache\""],
+			"gate": ["bash", "run.sh", "check-pack-consumer-roots"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:PACK-INSTALL-CONSUMER-ROOTS-CONTAINED]",
+			"signatureSource": "run.sh"
 		}
 	]
 }

package/scripts/mutants/pi-bridge-sender.json

@@ -0,0 +1,54 @@
+{
+	"schemaVersion": 1,
+	"lane": "pi-bridge-sender",
+	"mutants": [
+		{
+			"claim": "PI-BRIDGE-SENDER-RECORD-BACKED",
+			"title": "the backing check starts treating a missing control socket as inadmissible, so a dormant pi citizen loses its own identity instead of answering replyable:false",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\tif (identity.backend !== \"pi\") {"],
+			"replace": [
+				"\tif (identity.backend !== \"pi\" || !existsSync(controlSocketPathIn(ENTWURF_DIR, envelope.sessionId))) {"
+			],
+			"gate": ["bash", "run.sh", "check-pi-bridge-sender"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PI-BRIDGE-SENDER-RECORD-BACKED]",
+			"signatureSource": "scripts/check-pi-bridge-sender.ts"
+		},
+		{
+			"claim": "PI-BRIDGE-SENDER-MISSING-REFUSED",
+			"title": "the pi branch returns the raw carrier again, so any well-formed PI_SESSION_ID is served as a sender whether or not a record exists",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\tif (pi && pi.sessionId === selected.id) return { envelope: requirePiSenderRecord(pi) };"],
+			"replace": ["\tif (pi && pi.sessionId === selected.id) return { envelope: pi };"],
+			"gate": ["bash", "run.sh", "check-pi-bridge-sender"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PI-BRIDGE-SENDER-MISSING-REFUSED]",
+			"signatureSource": "scripts/check-pi-bridge-sender.ts"
+		},
+		{
+			"claim": "PI-BRIDGE-SENDER-BACKEND-REFUSED",
+			"title": "the backend check is dropped, so a PI_SESSION_ID naming another harness's record is served as a pi sender",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\tif (identity.backend !== \"pi\") {"],
+			"replace": ["\tif (identity.backend === undefined) {"],
+			"gate": ["bash", "run.sh", "check-pi-bridge-sender"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PI-BRIDGE-SENDER-BACKEND-REFUSED]",
+			"signatureSource": "scripts/check-pi-bridge-sender.ts"
+		},
+		{
+			"claim": "PI-BRIDGE-SENDER-UNREADABLE-CAUSE",
+			"title": "reader failures are flattened into the absent-record refusal, so a corrupt store reads as a citizen that simply does not exist",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\tconst identity = readMetaIdentityByGardenId(envelope.sessionId);"],
+			"replace": [
+				"\tconst identity = (() => {\n\t\ttry {\n\t\t\treturn readMetaIdentityByGardenId(envelope.sessionId);\n\t\t} catch {\n\t\t\tthrow new Error(`no meta-record for garden id \"${envelope.sessionId}\"`);\n\t\t}\n\t})();"
+			],
+			"gate": ["bash", "run.sh", "check-pi-bridge-sender"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PI-BRIDGE-SENDER-UNREADABLE-CAUSE]",
+			"signatureSource": "scripts/check-pi-bridge-sender.ts"
+		}
+	]
+}

package/scripts/mutants/pi-floor.json

@@ -6,8 +6,12 @@
 			"claim": "PI-FLOOR-SINGLE-SOURCE",
 			"title": "one row of the pnpm workspace closure is left on the previous floor while every other surface moved — the shape a version bump actually fails in. Nothing else reads that file, so the stranded row surfaces only at install time, in a different command, far from the change that stranded it",
 			"subject": "pnpm-workspace.yaml",
-			"find": ["  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1'"],
-			"replace": ["  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0'"],
+			"find": [
+				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0'"
+			],
+			"replace": [
+				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2'"
+			],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-FLOOR-SINGLE-SOURCE]",

package/scripts/mutants/pi-mcp-bridge.json

@@ -0,0 +1,36 @@
+{
+	"schemaVersion": 1,
+	"lane": "pi-mcp-bridge",
+	"mutants": [
+		{
+			"claim": "PI-MCP-BRIDGE-DECLARED-SURFACE",
+			"title": "entwurf_self joins the hidden list, so a pi model is no longer declared the verb that tells it who it is",
+			"subject": "pi-extensions/lib/entwurf-mcp-server.ts",
+			"find": [
+				"export const ENTWURF_MCP_HIDDEN_TOOLS = [\"entwurf_inbox_read\", \"entwurf_register_native\"] as const;"
+			],
+			"replace": [
+				"export const ENTWURF_MCP_HIDDEN_TOOLS = [\"entwurf_inbox_read\", \"entwurf_register_native\", \"entwurf_self\"] as const;"
+			],
+			"gate": ["bash", "run.sh", "check-pi-mcp-bridge"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:PI-MCP-BRIDGE-DECLARED-SURFACE]",
+			"signatureSource": "scripts/check-pi-mcp-bridge.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-MCP-BRIDGE-SAME-CHILD-IDENTITY",
+			"title": "the explicit carrier is built from the model label when one is known, so the spawned child claims an identity no record holds",
+			"subject": "pi-extensions/lib/entwurf-mcp-server.ts",
+			"find": ["\t\tenv: { PI_SESSION_ID: input.gardenId, ...(input.agentId ? { PI_AGENT_ID: input.agentId } : {}) },"],
+			"replace": [
+				"\t\tenv: { PI_SESSION_ID: input.agentId ?? input.gardenId, ...(input.agentId ? { PI_AGENT_ID: input.agentId } : {}) },"
+			],
+			"gate": ["bash", "run.sh", "check-pi-mcp-bridge"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:PI-MCP-BRIDGE-SAME-CHILD-IDENTITY]",
+			"signatureSource": "scripts/check-pi-mcp-bridge.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		}
+	]
+}

package/scripts/mutants/pi-mcp-register.json

@@ -0,0 +1,51 @@
+{
+	"schemaVersion": 1,
+	"lane": "pi-mcp-register",
+	"mutants": [
+		{
+			"claim": "PI-MCP-REGISTER-AFTER-BIRTH",
+			"title": "the extension factory registers the bridge at load, before any record exists — the server is on Pi's registry with no born identity to carry",
+			"subject": "pi-extensions/entwurf-control.ts",
+			"find": ["\tpi.registerMessageRenderer(SESSION_MESSAGE_TYPE, renderSessionMessage);"],
+			"replace": [
+				"\tpi.registerMessageRenderer(SESSION_MESSAGE_TYPE, renderSessionMessage);",
+				"\tpi.registerMcpServer(ENTWURF_MCP_SERVER_NAME, { command: process.execPath, args: [] });"
+			],
+			"gate": ["bash", "run.sh", "check-pi-mcp-register"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PI-MCP-REGISTER-AFTER-BIRTH]",
+			"signatureSource": "pi-extensions/entwurf-control.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-MCP-IDENTITY-BEFORE-UI",
+			"title": "the status line is rendered before the registration, so a UI failure leaves a born citizen without its verbs",
+			"subject": "pi-extensions/entwurf-control.ts",
+			"find": [
+				"\t\tregisterEntwurfMcpServer(pi, ctx, birth.gardenId);",
+				"\t\tupdateStatus(ctx, true, birth.gardenId);"
+			],
+			"replace": [
+				"\t\tupdateStatus(ctx, true, birth.gardenId);",
+				"\t\tregisterEntwurfMcpServer(pi, ctx, birth.gardenId);"
+			],
+			"gate": ["bash", "run.sh", "check-pi-mcp-register"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PI-MCP-IDENTITY-BEFORE-UI]",
+			"signatureSource": "pi-extensions/entwurf-control.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-MCP-EXPOSURE",
+			"title": "the verbs are registered behind codemode instead of declared directly, so the model is handed a different surface than every other host",
+			"subject": "pi-extensions/lib/entwurf-mcp-server.ts",
+			"find": ["\t\texposure: \"direct\","],
+			"replace": ["\t\texposure: \"codemode\","],
+			"gate": ["bash", "run.sh", "check-pi-mcp-register"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PI-MCP-EXPOSURE]",
+			"signatureSource": "pi-extensions/entwurf-control.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		}
+	]
+}

package/scripts/mutants/v2-surface.json

@@ -39,20 +39,20 @@
 			"signatureSource": "scripts/check-entwurf-v2-production.ts"
 		},
 		{
-			"claim": "V2SURF-PI-MODE-SCOPE",
-			"title": "pi-native mode param reverts to \"Delivery mode for a live send\" (false for native-push) (#120 P2: the description was rewritten to stop claiming an interrupt, so the mutation now strips the rail scope from the corrected sentence)",
-			"subject": "pi-extensions/entwurf-control.ts",
+			"claim": "V2SURF-MODE-SCOPE",
+			"title": "the bridge mode param (the one every caller reads, pi included since #125) reverts to \"Delivery mode for a live send\" (false for native-push) (#120 P2: the description was rewritten to stop claiming an interrupt, so the mutation now strips the rail scope from the corrected sentence)",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\t\t\t\t\"Injection style for a CONTROL-SOCKET send only: steer (ask the receiver's steering queue) or follow_up (ask its follow-up queue). NEITHER is an interrupt: a busy receiver drains steering after each turn and follow-ups only when its inner loop ends, so a later steer overtakes every earlier follow_up and there is no order between the two. Both queues are volatile process memory — an abort drops what is in them. The receipt names which queue accepted the message (`queued-steer` / `queued-follow-up`); an idle receiver answers `sent`, meaning the turn was TRIGGERED, not that the model has seen the text. \" +",
+				"\t\t\t\t\"Injection style for a CONTROL-SOCKET send only: steer (ask the receiver's steering queue) or follow_up (ask its follow-up queue). NEITHER is an interrupt: a busy receiver drains steering after each turn and follow-ups only when its inner loop ends, so a later steer overtakes every earlier follow_up and there is no order between the two. Both queues are volatile process memory — an abort drops what is in them. The receipt names which queue accepted the message (`queued-steer` / `queued-follow-up`); an idle receiver answers `sent`, meaning the turn was TRIGGERED, not that the model has seen the text. \" +",
 				"\t\t\t\t\t\"The mailbox and native-push plans carry no mode, so it has no effect on those rails.\","
 			],
 			"replace": [
-				"\t\t\t\t\t\"Delivery mode for a live send: steer (ask the steering queue) or follow_up (ask the follow-up queue). \" +",
+				"\t\t\t\t\"Delivery mode for a live send: steer (ask the steering queue) or follow_up (ask the follow-up queue). \" +",
 				"\t\t\t\t\t\"Both queues are volatile process memory.\","
 			],
 			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
 			"timeoutSeconds": 60,
-			"signature": "[QK:V2SURF-PI-MODE-SCOPE]",
+			"signature": "[QK:V2SURF-MODE-SCOPE]",
 			"signatureSource": "scripts/check-entwurf-v2-surface.ts"
 		},
 		{