@junghanacs/entwurf 0.25.1 → 0.30.1

package/scripts/mutants/acp-prompt-lifecycle.json

@@ -54,8 +54,8 @@
 			"claim": "REUSE-CARRIES-CHILD-DIAGNOSTICS",
 			"title": "the reuse path drops the child's stderr tail again — exactly the live sonnet failure that showed only \"ACP connection closed\"",
 			"subject": "pi-extensions/lib/acp/backend.ts",
-			"find": ["\t\t\tfinishError(err, aborted, session.stderrTail, lifecycle, session.launchObservation);"],
-			"replace": ["\t\t\tfinishError(err, aborted, undefined, lifecycle, session.launchObservation);"],
+			"find": ["\t\t\tfinishError(err, aborted, session.stderrTail, lifecycle, session.launchObservation, adapter);"],
+			"replace": ["\t\t\tfinishError(err, aborted, undefined, lifecycle, session.launchObservation, adapter);"],
 			"gate": ["bash", "run.sh", "check-acp-prompt-lifecycle"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:REUSE-CARRIES-CHILD-DIAGNOSTICS]",

package/scripts/mutants/acp-vendor-rejection.json

@@ -0,0 +1,62 @@
+{
+	"schemaVersion": 1,
+	"lane": "acp-vendor-rejection",
+	"mutants": [
+		{
+			"claim": "ACP-INCOMPLETE-TOOL-NO-REPLAY-NEW",
+			"title": "finishError stops consulting the adapter's prompt-rejection reader — the vendor's raw 'Internal error' text becomes errorMessage again and pi replays a turn whose tools already ran",
+			"subject": "pi-extensions/lib/acp/backend.ts",
+			"find": ["\t\tconst rejection = aborted ? undefined : adapter?.readPromptRejection?.(err);"],
+			"replace": ["\t\tconst rejection = aborted ? undefined : undefined;"],
+			"gate": ["bash", "run.sh", "check-acp-vendor-rejection"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:ACP-INCOMPLETE-TOOL-NO-REPLAY-NEW]",
+			"signatureSource": "pi-extensions/lib/acp/backend.vendor-rejection.test.ts"
+		},
+		{
+			"claim": "ACP-PROMPT-REJECTION-CLAUDE-ONLY",
+			"title": "the claude reader stops checking the vendor's errorKind — any -32603 carrying an errorKind (no_result included) is rewritten to the incomplete-tool verdict",
+			"subject": "pi-extensions/lib/acp/backend-adapter.ts",
+			"find": ["\tif (data.errorKind !== CLAUDE_INCOMPLETE_TOOL_CALL) return undefined;"],
+			"replace": ["\tif (data.errorKind === undefined) return undefined;"],
+			"gate": ["bash", "run.sh", "check-acp-vendor-rejection"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:ACP-PROMPT-REJECTION-CLAUDE-ONLY]",
+			"signatureSource": "pi-extensions/lib/acp/backend-adapter.test.ts"
+		},
+		{
+			"claim": "ACP-INCOMPLETE-TOOL-RAW-EVIDENCE",
+			"title": "the recognised rejection is sealed with the verdict but its raw vendor message, data and stderr are dropped instead of riding a pi diagnostic",
+			"subject": "pi-extensions/lib/acp/backend.ts",
+			"find": [
+				"\t\t\tappendAssistantMessageDiagnostic(",
+				"\t\t\t\tstate.output,",
+				"\t\t\t\tcreateAssistantMessageDiagnostic(ACP_PROMPT_REJECTION_DIAGNOSTIC, err, {",
+				"\t\t\t\t\terrorKind: rejection.errorKind,",
+				"\t\t\t\t\tdataJson: rejection.dataJson,",
+				"\t\t\t\t\t...(lifecycle ? { lifecycle } : {}),",
+				"\t\t\t\t\t...(observed ? { launchSignal: observed } : {}),",
+				"\t\t\t\t\t...(tail ? { stderrTail: tail } : {}),",
+				"\t\t\t\t\t...(hint ? { hint } : {}),",
+				"\t\t\t\t}),",
+				"\t\t\t);"
+			],
+			"replace": ["\t\t\t// mutant: the raw rejection is not preserved"],
+			"gate": ["bash", "run.sh", "check-acp-vendor-rejection"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:ACP-INCOMPLETE-TOOL-RAW-EVIDENCE]",
+			"signatureSource": "pi-extensions/lib/acp/backend.vendor-rejection.test.ts"
+		},
+		{
+			"claim": "ACP-REUSE-COOPERATIVE-CANCEL",
+			"title": "a reused session's cooperatively cancelled turn is sealed and retained but no longer persisted — the record lags the live session",
+			"subject": "pi-extensions/lib/acp/backend.ts",
+			"find": ["\t\t\tfinishSuccess(adapter, session, promptResult);", "\t\t\tpersistRecord(session, deps);"],
+			"replace": ["\t\t\tfinishSuccess(adapter, session, promptResult);"],
+			"gate": ["bash", "run.sh", "check-acp-vendor-rejection"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:ACP-REUSE-COOPERATIVE-CANCEL]",
+			"signatureSource": "pi-extensions/lib/acp/backend.vendor-rejection.test.ts"
+		}
+	]
+}

package/scripts/mutants/codex-native.json

@@ -393,17 +393,6 @@
 			"signature": "[QK:FRESHCALL-CODEX-PREMUTATION-MCP]",
 			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
 		},
-		{
-			"claim": "FRESHCALL-CODEX-PREMUTATION-PI",
-			"title": "the native pi public surface relabels a Codex request as pi at the shared dispatcher seam, bypassing the same central preflight from the other public door",
-			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["\t\t\t\t\tbackend: params.backend,"],
-			"replace": ["\t\t\t\t\tbackend: \"pi\","],
-			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
-			"timeoutSeconds": 180,
-			"signature": "[QK:FRESHCALL-CODEX-PREMUTATION-PI]",
-			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
-		},
 		{
 			"claim": "CODEX-BIRTH-DOCTOR-REQUIRES-TRUST",
 			"title": "the doctor treats the vendor trust receipt as optional, so a declared hook the vendor will never run reports green",
@@ -648,6 +637,17 @@
 			"signature": "[QK:CODEX-LIVE-REPORT-TOKEN-EXACT]",
 			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
 		},
+		{
+			"claim": "CODEX-LIVE-PI-MCP-SOURCE-DIALECT",
+			"title": "Pi's current qualified fresh-call receipt no longer reaches semantic launch and cleanup authority, recreating the Pi 1.0 timeout",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": ["\t[\"mcp__entwurf_bridge__entwurf_fresh_call\", \"entwurf_fresh_call\"],"],
+			"replace": ["\t[\"mcp__entwurf_bridge__entwurf_fresh_call\", \"unrecognized_pi_fresh_call\"],"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-PI-MCP-SOURCE-DIALECT]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
 		{
 			"claim": "CODEX-LIVE-SOURCE-JOIN",
 			"title": "a Pi tool result can be joined to a call whose tool name differs, turning an unrelated result body into launch authority",

package/scripts/mutants/control-send-receipt.json

@@ -174,14 +174,15 @@
 			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:VITEST-TEST-DIR-ON-THE-FLOOR]",
-			"signatureSource": "run.sh"
+			"signatureSource": "run.sh",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "PI-CORE-PIN-TRACKS-FLOOR",
 			"title": "the queue oracle's pi-agent-core pin drifts off the floor the rest of the pi runtime is pinned to, so the oracle keeps answering honestly — about a pi nobody in this repo runs",
 			"subject": "package.json",
-			"find": ["\"@earendil-works/pi-agent-core\": \"0.87.1\","],
-			"replace": ["\"@earendil-works/pi-agent-core\": \"0.86.0\","],
+			"find": ["\"@earendil-works/pi-agent-core\": \"1.0.0\","],
+			"replace": ["\"@earendil-works/pi-agent-core\": \"0.87.1\","],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-CORE-PIN-TRACKS-FLOOR]",
@@ -218,7 +219,8 @@
 			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:VITEST-TEST-DIR-HAS-COORDINATE]",
-			"signatureSource": "run.sh"
+			"signatureSource": "run.sh",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "SEND-OUTCOME-LIST-NAMES-EVERY-RAIL",

package/scripts/mutants/copilot-birth.json

@@ -101,7 +101,8 @@
 			"gate": ["bash", "run.sh", "check-meta-doctor-oracle"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:HOOK-LOG-RAIL-SCOPED]",
-			"signatureSource": "scripts/check-meta-doctor-oracle.sh"
+			"signatureSource": "scripts/check-meta-doctor-oracle.sh",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "COPILOT-BIRTH-DOES-NOT-ARM-RECEIVER",

package/scripts/mutants/fresh-call-dispatch.json

@@ -75,8 +75,8 @@
 			"signatureSource": "scripts/check-fresh-call-dispatch.ts"
 		},
 		{
-			"claim": "FCD-SURFACE-PARITY",
-			"title": "the MCP surface goes back to calling a rail directly, so the two public surfaces can drift on rail choice",
+			"claim": "FCD-SURFACE-ROOT-ONLY",
+			"title": "the one public fresh-call surface goes back to choosing a rail itself instead of reaching the composition root, so rail choice lives outside the root again",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
 				"\t\t\tconst dispatched = await dispatchFreshCall({\n\t\t\t\tbackend,\n\t\t\t\tmodel,\n\t\t\t\ttask,\n\t\t\t\tcwd,\n\t\t\t\tplacement,\n\t\t\t\tcallerGardenId,\n\t\t\t\tcallerNativeSessionId,\n\t\t\t\tcallerCwd,\n\t\t\t});"
@@ -86,18 +86,7 @@
 			],
 			"gate": ["bash", "run.sh", "check-fresh-call-dispatch"],
 			"timeoutSeconds": 120,
-			"signature": "[QK:FCD-SURFACE-PARITY]",
-			"signatureSource": "scripts/check-fresh-call-dispatch.ts"
-		},
-		{
-			"claim": "FCD-PI-DYNAMIC-IMPORT",
-			"title": "pi reaches the composition root by a literal path again, which is how the lazy import fence erodes",
-			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["const FRESH_CALL_DISPATCH_MODULE = \"./lib/fresh-call-dispatch.ts\";"],
-			"replace": ["const FRESH_CALL_DISPATCH_MODULE = \"./lib/fresh-call-dispatch-renamed.ts\";"],
-			"gate": ["bash", "run.sh", "check-fresh-call-dispatch"],
-			"timeoutSeconds": 120,
-			"signature": "[QK:FCD-PI-DYNAMIC-IMPORT]",
+			"signature": "[QK:FCD-SURFACE-ROOT-ONLY]",
 			"signatureSource": "scripts/check-fresh-call-dispatch.ts"
 		},
 		{

package/scripts/mutants/gate-qualification.json

@@ -23,6 +23,65 @@
 			"timeoutSeconds": 120,
 			"signature": "[QK:LANE-INVENTORY-DECLARED]",
 			"signatureSource": "scripts/check-gate-qualification.ts"
+		},
+		{
+			"claim": "QUALIFY-BUILD-TRACKS-MUTATION",
+			"title": "the runner keeps the baseline build output across a mutation instead of rebuilding it from the mutated bytes — a gate that reads only the compiled output judges source it was never handed, and every mutant planted in the build's source survives (#125: the compiled entwurf-bridge a pi citizen registers)",
+			"subject": "scripts/lib/mutation-qualify.ts",
+			"find": ["\t\t\t\t\tconst b = await buildOutput(build, outputAbs, m.timeoutSeconds);"],
+			"replace": ["\t\t\t\t\tconst b = { run: pre, digest: baseline };"],
+			"gate": ["bash", "run.sh", "check-gate-manifests"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:QUALIFY-BUILD-TRACKS-MUTATION]",
+			"signatureSource": "scripts/check-gate-qualification.ts"
+		},
+		{
+			"claim": "QUALIFY-BUILD-RED-NOT-A-KILL",
+			"title": "a mutation that breaks the declared build is attributed like a gate run — the build's own failure output is read for the claim token, so a broken build is certified as the gate killing the defect",
+			"subject": "scripts/lib/mutation-qualify.ts",
+			"find": [
+				"\t\t\t\tsignatureOnFailureLine: !buildRed && signatureAttributedToFailure(run.output, m.signature, run.failedTitles),"
+			],
+			"replace": [
+				"\t\t\t\tsignatureOnFailureLine: signatureAttributedToFailure(run.output, m.signature, run.failedTitles),"
+			],
+			"gate": ["bash", "run.sh", "check-gate-manifests"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:QUALIFY-BUILD-RED-NOT-A-KILL]",
+			"signatureSource": "scripts/check-gate-qualification.ts"
+		},
+		{
+			"claim": "QUALIFY-BUILD-SCOPED-TO-GROUP",
+			"title": "the declared build output outlives its group — a later group runs against an input it never declared, and the ignored output is left in the snapshot",
+			"subject": "scripts/lib/mutation-qualify.ts",
+			"find": ["\t\t\tif (outputAbs) fs.rmSync(outputAbs, { recursive: true, force: true });"],
+			"replace": ["\t\t\tif (outputAbs) void 0;"],
+			"gate": ["bash", "run.sh", "check-gate-manifests"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:QUALIFY-BUILD-SCOPED-TO-GROUP]",
+			"signatureSource": "scripts/check-gate-qualification.ts"
+		},
+		{
+			"claim": "QUALIFY-BUILD-OUTPUT-GUARDED",
+			"title": "a gate that writes into its declared build output keeps its KILLED verdict — the next run is judged against bytes no build produced",
+			"subject": "scripts/lib/mutation-qualify.ts",
+			"find": ["\t\t\t\t\t\toutputWritten = wroteOutput(b.digest);"],
+			"replace": ["\t\t\t\t\t\toutputWritten = false;"],
+			"gate": ["bash", "run.sh", "check-gate-manifests"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:QUALIFY-BUILD-OUTPUT-GUARDED]",
+			"signatureSource": "scripts/check-gate-qualification.ts"
+		},
+		{
+			"claim": "QUALIFY-BUILD-GROUP-CONSISTENT",
+			"title": "mutants of one gate may declare different builds (or one none) — the same gate is handed different inputs depending on run order, and a group's control no longer describes all of its mutants",
+			"subject": "scripts/lib/mutation-qualify.ts",
+			"find": ["\t\tif (mine !== first) {"],
+			"replace": ["\t\tif (mine !== first && false) {"],
+			"gate": ["bash", "run.sh", "check-gate-manifests"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:QUALIFY-BUILD-GROUP-CONSISTENT]",
+			"signatureSource": "scripts/check-gate-qualification.ts"
 		}
 	]
 }

package/scripts/mutants/herdr-plugin-build.json

@@ -68,6 +68,17 @@
 			"signature": "[QK:HPB-SEQUENTIAL-TWO-STAGE]",
 			"signatureSource": "scripts/check-herdr-plugin-build.ts"
 		},
+		{
+			"claim": "HPB-DEFAULT-LOCK-READ",
+			"title": "reading the default lock from the repository root rather than the plugin directory breaks the real build while source-injected fixture drives stay green; the production composition must consume this plugin's committed source and artifact fields",
+			"subject": "plugins/herdr/lib/build.mjs",
+			"find": ["\tconst lock = lockReader(PLUGIN_DIR);"],
+			"replace": ["\tconst lock = lockReader(CHECKOUT_ROOT);"],
+			"gate": ["bash", "run.sh", "check-herdr-plugin-build"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:HPB-DEFAULT-LOCK-READ]",
+			"signatureSource": "scripts/check-herdr-plugin-build.ts"
+		},
 		{
 			"claim": "HPB-POST-BUILD-GAP",
 			"title": "claiming Herdr's registration in this runner's own receipt states a step that has not run: herdr commits its checkout and registry only AFTER the build returns, so the next reconcile would be arguing with a lie",

package/scripts/mutants/herdr-supply.json

@@ -8,7 +8,7 @@
 			"subject": "scripts/check-herdr-sandbox.ts",
 			"find": ["const SUPPLY_MANIFEST = \"scripts/fixtures/herdr-supply.json\";"],
 			"replace": [
-				"const SUPPLY_MANIFEST = \"scripts/fixtures/herdr-supply.json\";\nconst PINNED_FALLBACK = \"0.9.1\";\nvoid PINNED_FALLBACK;"
+				"const SUPPLY_MANIFEST = \"scripts/fixtures/herdr-supply.json\";\nconst PINNED_FALLBACK = \"0.9.3\";\nvoid PINNED_FALLBACK;"
 			],
 			"gate": ["bash", "run.sh", "check-herdr-supply"],
 			"timeoutSeconds": 120,
@@ -19,8 +19,8 @@
 			"claim": "HSUP-DIGEST-SHAPE",
 			"title": "a pinned digest is truncated, so the check that is supposed to catch a swapped binary can no longer fail",
 			"subject": "scripts/fixtures/herdr-supply.json",
-			"find": ["\"sha256\": \"2a02fed16beb651ef006e1d43f048f652ca4dc58ad053cd2d44450563d5c54b7\""],
-			"replace": ["\"sha256\": \"2a02fed16beb651ef006e1d43f04\""],
+			"find": ["\"sha256\": \"18a8dc65f1c2fa485884344356dea1cfd911c6f06cf46fa78e193f4087f4dba7\""],
+			"replace": ["\"sha256\": \"18a8dc65f1c2fa485884344356de\""],
 			"gate": ["bash", "run.sh", "check-herdr-supply"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:HSUP-DIGEST-SHAPE]",

package/scripts/mutants/mux-fresh-call.json

@@ -121,8 +121,8 @@
 			"signatureSource": "test/mux-fresh-call.test.ts"
 		},
 		{
-			"claim": "FRESHCALL-CWD-SURFACE-PARITY",
-			"title": "one surface drops the optional cwd from its schema, so cross-repo fresh works from pi and silently cannot exist from the MCP bridge",
+			"claim": "FRESHCALL-CWD-SURFACE",
+			"title": "the fresh-call surface drops the optional cwd from its schema, so cross-repo fresh silently cannot exist from any caller — pi included, which reaches this bridge since #125",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
 				"\t\tcwd: z\n\t\t\t.string()\n\t\t\t.optional()\n\t\t\t.describe(\n\t\t\t\t\"Optional literal ABSOLUTE path of an existing directory to start the sibling in (cross-repo fresh). Omit or pass \\\"\\\" to start where the CALLER is — this agent's own cwd on BOTH rails, or for a Codex caller its own record directory, because this bridge is the app-server's child and that process's directory is not the caller's. Taken exactly as given: no trim, no realpath, no project-name resolution. '#' is refused on the tmux rail only, because tmux format-expands a start directory; inside herdr it is an ordinary path character. The receipt echoes the directory that was REQUESTED or the caller record it came from, never an observation of where the pane landed.\",\n\t\t\t),\n"
@@ -130,31 +130,7 @@
 			"replace": [""],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
-			"signature": "[QK:FRESHCALL-CWD-SURFACE-PARITY]",
-			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
-		},
-		{
-			"claim": "FRESHCALL-PI-SURFACE-IDENTITY",
-			"title": "native pi takes the caller garden id from the environment instead of its own resident closure — the uuidv7 confusion, reintroduced",
-			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["\t\t\t\t\tcallerGardenId: residentGardenId,"],
-			"replace": ["\t\t\t\t\tcallerGardenId: process.env.PI_SESSION_ID ?? null,"],
-			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
-			"timeoutSeconds": 120,
-			"signature": "[QK:FRESHCALL-PI-SURFACE-IDENTITY]",
-			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
-		},
-		{
-			"claim": "FRESHCALL-PI-MODEL-SCHEMA",
-			"title": "native pi drops the required model field from fresh-call while the composition still expects one",
-			"subject": "pi-extensions/entwurf-control.ts",
-			"find": [
-				"\t\t\tmodel: Type.String({\n\t\t\t\tminLength: 1,\n\t\t\t\tmaxLength: 200,\n\t\t\t\tpattern: \"^[A-Za-z0-9][A-Za-z0-9._/:\\\\[\\\\]-]*$\",\n\t\t\t\tdescription:\n\t\t\t\t\t\"Required runtime model: canonical provider/model for pi, a Claude Code model id/alias, or a Copilot/OMP/Codex model name.\",\n\t\t\t}),\n"
-			],
-			"replace": [""],
-			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
-			"timeoutSeconds": 120,
-			"signature": "[QK:FRESHCALL-PI-MODEL-SCHEMA]",
+			"signature": "[QK:FRESHCALL-CWD-SURFACE]",
 			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
 		},
 		{
@@ -196,10 +172,10 @@
 		},
 		{
 			"claim": "FRESHCALL-MODEL-PATTERN-PROVIDER-VALID",
-			"title": "the same unescape planted on the TypeBox surface rides pi-ai's real anthropic-messages conversion into the request body as an invalid Rust-family pattern",
-			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["\t\t\t\tpattern: \"^[A-Za-z0-9][A-Za-z0-9._/:\\\\[\\\\]-]*$\","],
-			"replace": ["\t\t\t\tpattern: \"^[A-Za-z0-9][A-Za-z0-9._/:[\\\\]-]*$\","],
+			"title": "the #62 unescape planted on the bridge's zod pattern rides Pi's built-in MCP spread and pi-ai's real anthropic-messages conversion into the request body as an invalid Rust-family pattern",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\t\t\t.regex(/^[A-Za-z0-9][A-Za-z0-9._/:\\[\\]-]*$/)"],
+			"replace": ["\t\t\t.regex(/^[A-Za-z0-9][A-Za-z0-9._/:[\\]-]*$/)"],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:FRESHCALL-MODEL-PATTERN-PROVIDER-VALID]",
@@ -284,6 +260,39 @@
 			"signature": "[QK:FRESHCALL-COPILOT-CALLBACK-TOOL]",
 			"signatureSource": "test/mux-fresh-call.test.ts"
 		},
+		{
+			"claim": "FRESHCALL-PI-CALLBACK-DIALECT",
+			"title": "pi callback rolls back to the 0.99.1 hyphen spelling, which a 0.99.2 host no longer declares — the first turn is spent on a tool that is not there",
+			"subject": "pi-extensions/lib/fresh-call-composition.ts",
+			"find": ["\tpi: \"mcp__entwurf_bridge__entwurf_callback\","],
+			"replace": ["\tpi: \"mcp__entwurf-bridge__entwurf_callback\","],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCALL-PI-CALLBACK-DIALECT]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-PI-DELIVERY-DIALECT",
+			"title": "pi delivery rolls back to the 0.99.1 hyphen spelling — the result is sent to a tool a 0.99.2 host does not declare",
+			"subject": "pi-extensions/lib/fresh-call-composition.ts",
+			"find": ["\tpi: \"mcp__entwurf_bridge__entwurf_v2\","],
+			"replace": ["\tpi: \"mcp__entwurf-bridge__entwurf_v2\","],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCALL-PI-DELIVERY-DIALECT]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-PI-PEERS-DIALECT",
+			"title": "pi peers offer rolls back to the 0.99.1 hyphen spelling — the corroboration tool is named in a spelling the sibling cannot reach",
+			"subject": "pi-extensions/lib/fresh-call-composition.ts",
+			"find": ["\tpi: \"mcp__entwurf_bridge__entwurf_peers\","],
+			"replace": ["\tpi: \"mcp__entwurf-bridge__entwurf_peers\","],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:FRESHCALL-PI-PEERS-DIALECT]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
+		},
 		{
 			"claim": "FRESHCALL-COPILOT-PREFLIGHT-PREMUTATION",
 			"title": "the capability preflight is removed — a host missing the birth, MCP, receiver or footer unit gets a real window and a launch receipt for a sibling that can never call home",
@@ -430,17 +439,6 @@
 			"signature": "[QK:FRESHCALL-COPILOT-EXPLICIT-POLICY]",
 			"signatureSource": "test/mux-fresh-call.test.ts"
 		},
-		{
-			"claim": "FRESHCALL-BACKEND-SET-SURFACE-PARITY-PI",
-			"title": "a backend the composition can open is missing from the native pi surface enum — an in-process pi session cannot name a capability the module already opens",
-			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\", \"copilot\", \"omp\", \"codex\"], {"],
-			"replace": ["\t\t\tbackend: StringEnum([\"pi\", \"claude-code\", \"copilot\", \"omp\"], {"],
-			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
-			"timeoutSeconds": 180,
-			"signature": "[QK:FRESHCALL-BACKEND-SET-SURFACE-PARITY-PI]",
-			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
-		},
 		{
 			"claim": "TMUXSESSION-LOOKUP-ENGINE",
 			"title": "the seat lookup goes back to the `-f` filter engine, which was measured to match EVERY session when the name contains a '}' — a fresh sibling then opens in whichever session tmux listed first",
@@ -510,8 +508,8 @@
 			"signatureSource": "test/mux-fresh-call.test.ts"
 		},
 		{
-			"claim": "FRESHCALL-PLACEMENT-SURFACE-PARITY",
-			"title": "one surface drops the optional seat from its schema, so opening a sibling in the operator's project session works from pi and silently cannot exist from the MCP bridge",
+			"claim": "FRESHCALL-PLACEMENT-SURFACE",
+			"title": "the fresh-call surface drops the optional seat from its schema, so opening a sibling in the operator's project session silently cannot exist from any caller",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
 				"\t\tplacement: z\n\t\t\t.object({\n\t\t\t\ttmuxSession: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.describe(\n\t\t\t\t\t\t\"EXACT name of an EXISTING session on this agent's own tmux server. Nothing is created: an absent session is refused as tmux-session-missing, and a name outside [A-Za-z0-9][A-Za-z0-9_-]* as tmux-session-name-invalid.\",\n\t\t\t\t\t),\n\t\t\t})\n\t\t\t.optional()\n\t\t\t.describe(\n\t\t\t\t\"Optional expert seat override, TMUX ONLY: open the sibling in ONE EXISTING tmux session of this agent's own server, and it always wins. When omitted the seat follows the CALLER, never the backend being opened: a Codex CALLER opens beside its own TUI pane, matched by thread-id in that pane's terminal title (0 or 2+ matching panes refuse, never fall back); every other caller opens in its own session. A pane title is a placement input only — never an address, liveness or delivery fact. Nothing is ever created. Inside herdr this field is refused by name — placement there belongs to herdr, and a tmux session name would silently place the sibling somewhere else. Independent of cwd; neither is inferred from the other. The receipt reports the selected name (absent for the caller-pane rule, which observed a session rather than requesting a name), its source, and resolved target session id.\",\n\t\t\t),\n"
@@ -519,7 +517,7 @@
 			"replace": [""],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,
-			"signature": "[QK:FRESHCALL-PLACEMENT-SURFACE-PARITY]",
+			"signature": "[QK:FRESHCALL-PLACEMENT-SURFACE]",
 			"signatureSource": "test/fresh-call-surfaces.contract.test.ts"
 		},
 		{

package/scripts/mutants/mux-resume-call.json

@@ -93,55 +93,31 @@
 			"signatureSource": "scripts/check-mux-resume-call.ts"
 		},
 		{
-			"claim": "MUXRESUME-PI-SURFACE-REGISTERED",
-			"title": "the native pi registration is never called, so the verb exists in source and nowhere an operator can reach",
-			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["\t\tregisterResumeCallTool(pi);"],
-			"replace": ["\t\tvoid registerResumeCallTool;"],
-			"gate": ["bash", "run.sh", "check-mux-resume-call"],
-			"timeoutSeconds": 60,
-			"signature": "[QK:MUXRESUME-PI-SURFACE-REGISTERED]",
-			"signatureSource": "scripts/check-mux-resume-call.ts"
-		},
-		{
-			"claim": "MUXRESUME-PI-SURFACE-TARGET-ONLY",
-			"title": "a task knob is added to the native schema, re-opening the prompt axis a resume deliberately does not have",
-			"subject": "pi-extensions/entwurf-control.ts",
+			"claim": "MUXRESUME-DESC-CONTRACT-MCP",
+			"title": "the MCP description drops the dormant-only scope, inviting callers to aim the verb at live citizens it will refuse",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\t\t\tdescription: \"Garden id of the DORMANT pi citizen to reopen (discover with entwurf_peers).\",\n\t\t\t}),"
+				"\t\"Reopen ONE DORMANT pi citizen under its OWN garden id, in a visible window in the operator's own tmux \""
 			],
 			"replace": [
-				"\t\t\t\tdescription: \"Garden id of the DORMANT pi citizen to reopen (discover with entwurf_peers).\",\n\t\t\t}),\n\t\t\ttask: Type.String({ description: \"What the resumed citizen should do.\" }),"
+				"\t\"Reopen ONE pi citizen under its OWN garden id, in a visible window in the operator's own tmux \""
 			],
 			"gate": ["bash", "run.sh", "check-mux-resume-call"],
 			"timeoutSeconds": 60,
-			"signature": "[QK:MUXRESUME-PI-SURFACE-TARGET-ONLY]",
-			"signatureSource": "scripts/check-mux-resume-call.ts"
-		},
-		{
-			"claim": "MUXRESUME-DESC-CONTRACT-PI",
-			"title": "the native description stops saying a resume runs no turn, so a caller reasonably expects the citizen to act on being reopened",
-			"subject": "pi-extensions/entwurf-control.ts",
-			"find": ["This runs NO turn: the window comes\nback with the conversation and waits"],
-			"replace": ["The window comes\nback with the conversation and waits"],
-			"gate": ["bash", "run.sh", "check-mux-resume-call"],
-			"timeoutSeconds": 60,
-			"signature": "[QK:MUXRESUME-DESC-CONTRACT-PI]",
+			"signature": "[QK:MUXRESUME-DESC-CONTRACT-MCP]",
 			"signatureSource": "scripts/check-mux-resume-call.ts"
 		},
 		{
-			"claim": "MUXRESUME-DESC-CONTRACT-MCP",
-			"title": "the MCP description drops the dormant-only scope, inviting callers to aim the verb at live citizens it will refuse",
+			"claim": "MUXRESUME-MCP-TARGET-PASSTHROUGH",
+			"title": "the bridge resume handler substitutes a constant id for the caller's target, so the record lookup reopens a citizen nobody named while the target-only schema stays green",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": [
-				"\t\"Reopen ONE DORMANT pi citizen under its OWN garden id, in a visible window in the operator's own tmux \""
-			],
+			"find": ["\t\t\tconst result = await visibleResume(target, makeVisibleResumeDeps(visibleResumeLaunch));"],
 			"replace": [
-				"\t\"Reopen ONE pi citizen under its OWN garden id, in a visible window in the operator's own tmux \""
+				"\t\t\tconst result = await visibleResume(\"20260101T000000-feed00\", makeVisibleResumeDeps(visibleResumeLaunch));"
 			],
 			"gate": ["bash", "run.sh", "check-mux-resume-call"],
 			"timeoutSeconds": 60,
-			"signature": "[QK:MUXRESUME-DESC-CONTRACT-MCP]",
+			"signature": "[QK:MUXRESUME-MCP-TARGET-PASSTHROUGH]",
 			"signatureSource": "scripts/check-mux-resume-call.ts"
 		}
 	]

package/scripts/mutants/pack-install.json

@@ -6,8 +6,8 @@
 			"claim": "PACK-INSTALL-PIN-MATCHER-BOUNDED",
 			"title": "the pin-leak matcher loses its version boundary and blesses substring lookalikes — @0.85.10 reads as the pinned 0.85.1 and the gate announces a verified tree it never verified (independent review, 2026-08-25)",
 			"subject": "run.sh",
-			"find": ["  grep '^@earendil-works+' | grep -Ev '@0\\.87\\.1(_|$)' || true"],
-			"replace": ["  grep '^@earendil-works+' | grep -v '@0\\.87\\.0' || true"],
+			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.0\\.0(_|$)' || true"],
+			"replace": ["  grep '^@earendil-works+' | grep -v '@0\\.87\\.1' || true"],
 			"gate": ["bash", "run.sh", "check-pack-pin-matcher"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:PACK-INSTALL-PIN-MATCHER-BOUNDED]",
@@ -17,12 +17,23 @@
 			"claim": "PACK-INSTALL-PIN-MATCHER-COVERS-CLOSURE",
 			"title": "the pin-leak matcher narrows back to the pi-* families and goes blind to a non-pi member of the same runtime closure — @earendil-works/chord (new in pi 0.85.0, a runtime dependency of pi-coding-agent/pi-agent-core/pi-client/pi-protocol) floats unpinned while the gate prints a verified pin (measured 2026-09-06 on a real 0.85.1 install tree)",
 			"subject": "run.sh",
-			"find": ["  grep '^@earendil-works+' | grep -Ev '@0\\.87\\.1(_|$)' || true"],
-			"replace": ["  grep '^@earendil-works+pi-' | grep -Ev '@0\\.87\\.1(_|$)' || true"],
+			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.0\\.0(_|$)' || true"],
+			"replace": ["  grep '^@earendil-works+pi-' | grep -Ev '@1\\.0\\.0(_|$)' || true"],
 			"gate": ["bash", "run.sh", "check-pack-pin-matcher"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:PACK-INSTALL-PIN-MATCHER-COVERS-CLOSURE]",
 			"signatureSource": "run.sh"
+		},
+		{
+			"claim": "PACK-INSTALL-CONSUMER-ROOTS-CONTAINED",
+			"title": "a consumer subcall stops naming its own PI_CODING_AGENT_DIR, so an inherited agent dir wins over the sandbox HOME and the consumer's user-scope registration lands outside it (measured 2026-10-01, #125)",
+			"subject": "run.sh",
+			"find": ["    \"XDG_CACHE_HOME=$h/.cache\" \\\n    \"PI_CODING_AGENT_DIR=$h/.pi/agent\""],
+			"replace": ["    \"XDG_CACHE_HOME=$h/.cache\""],
+			"gate": ["bash", "run.sh", "check-pack-consumer-roots"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:PACK-INSTALL-CONSUMER-ROOTS-CONTAINED]",
+			"signatureSource": "run.sh"
 		}
 	]
 }

package/scripts/mutants/pi-bridge-sender.json

@@ -0,0 +1,54 @@
+{
+	"schemaVersion": 1,
+	"lane": "pi-bridge-sender",
+	"mutants": [
+		{
+			"claim": "PI-BRIDGE-SENDER-RECORD-BACKED",
+			"title": "the backing check starts treating a missing control socket as inadmissible, so a dormant pi citizen loses its own identity instead of answering replyable:false",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\tif (identity.backend !== \"pi\") {"],
+			"replace": [
+				"\tif (identity.backend !== \"pi\" || !existsSync(controlSocketPathIn(ENTWURF_DIR, envelope.sessionId))) {"
+			],
+			"gate": ["bash", "run.sh", "check-pi-bridge-sender"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PI-BRIDGE-SENDER-RECORD-BACKED]",
+			"signatureSource": "scripts/check-pi-bridge-sender.ts"
+		},
+		{
+			"claim": "PI-BRIDGE-SENDER-MISSING-REFUSED",
+			"title": "the pi branch returns the raw carrier again, so any well-formed PI_SESSION_ID is served as a sender whether or not a record exists",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\tif (pi && pi.sessionId === selected.id) return { envelope: requirePiSenderRecord(pi) };"],
+			"replace": ["\tif (pi && pi.sessionId === selected.id) return { envelope: pi };"],
+			"gate": ["bash", "run.sh", "check-pi-bridge-sender"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PI-BRIDGE-SENDER-MISSING-REFUSED]",
+			"signatureSource": "scripts/check-pi-bridge-sender.ts"
+		},
+		{
+			"claim": "PI-BRIDGE-SENDER-BACKEND-REFUSED",
+			"title": "the backend check is dropped, so a PI_SESSION_ID naming another harness's record is served as a pi sender",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\tif (identity.backend !== \"pi\") {"],
+			"replace": ["\tif (identity.backend === undefined) {"],
+			"gate": ["bash", "run.sh", "check-pi-bridge-sender"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PI-BRIDGE-SENDER-BACKEND-REFUSED]",
+			"signatureSource": "scripts/check-pi-bridge-sender.ts"
+		},
+		{
+			"claim": "PI-BRIDGE-SENDER-UNREADABLE-CAUSE",
+			"title": "reader failures are flattened into the absent-record refusal, so a corrupt store reads as a citizen that simply does not exist",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\tconst identity = readMetaIdentityByGardenId(envelope.sessionId);"],
+			"replace": [
+				"\tconst identity = (() => {\n\t\ttry {\n\t\t\treturn readMetaIdentityByGardenId(envelope.sessionId);\n\t\t} catch {\n\t\t\tthrow new Error(`no meta-record for garden id \"${envelope.sessionId}\"`);\n\t\t}\n\t})();"
+			],
+			"gate": ["bash", "run.sh", "check-pi-bridge-sender"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:PI-BRIDGE-SENDER-UNREADABLE-CAUSE]",
+			"signatureSource": "scripts/check-pi-bridge-sender.ts"
+		}
+	]
+}

package/scripts/mutants/pi-floor.json

@@ -6,8 +6,12 @@
 			"claim": "PI-FLOOR-SINGLE-SOURCE",
 			"title": "one row of the pnpm workspace closure is left on the previous floor while every other surface moved — the shape a version bump actually fails in. Nothing else reads that file, so the stranded row surfaces only at install time, in a different command, far from the change that stranded it",
 			"subject": "pnpm-workspace.yaml",
-			"find": ["  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1'"],
-			"replace": ["  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0'"],
+			"find": [
+				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0'"
+			],
+			"replace": [
+				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2'"
+			],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-FLOOR-SINGLE-SOURCE]",