@junghanacs/entwurf 0.32.0 → 0.34.0

package/pi/pi-durable/overlay/runtime-contacts.patch

@@ -1,5 +1,5 @@
 diff --git a/packages/coding-agent/src/experimental/durable/runtime.ts b/packages/coding-agent/src/experimental/durable/runtime.ts
-index fcd6e523..929dbc79 100644
+index fcd6e523..7f00e27f 100644
 --- a/packages/coding-agent/src/experimental/durable/runtime.ts
 +++ b/packages/coding-agent/src/experimental/durable/runtime.ts
 @@ -8,7 +8,9 @@ import {
@@ -12,7 +12,19 @@ index fcd6e523..929dbc79 100644
  	type ModelRef,
  	ROOT_CONVERSATION_ID,
  	type Submission,
-@@ -81,6 +83,10 @@ export interface DurableController {
+@@ -56,8 +58,10 @@ export interface DurableView {
+ 	readonly conversations: readonly ConversationSummary[];
+ 	readonly models: readonly ModelSummary[];
+ 	readonly notices: readonly Notice[];
+-	/** The live task graph while the task panel is open. */
++	/** The live task graph, observed for the session's lifetime whether or not its panel is shown. */
+ 	readonly tasks?: TaskGraph;
++	/** Whether the task panel is shown; /tasks toggles only this. */
++	readonly tasksPanel: boolean;
+ }
+ 
+ export interface DurableViewSource {
+@@ -81,6 +85,10 @@ export interface DurableController {
  export interface OpenDurableOptions {
  	readonly cwd?: string;
  	readonly continueSession?: boolean;
@@ -23,7 +35,7 @@ index fcd6e523..929dbc79 100644
  }
  
  export interface OpenDurableResult {
-@@ -88,6 +94,8 @@ export interface OpenDurableResult {
+@@ -88,6 +96,8 @@ export interface OpenDurableResult {
  	readonly controller: DurableController;
  	/** pi's settings, for the TUI's theme and terminal capabilities. */
  	readonly settings: SettingsManager;
@@ -32,7 +44,7 @@ index fcd6e523..929dbc79 100644
  	close(): Promise<void>;
  }
  
-@@ -122,6 +130,9 @@ function titleOf(entry: EntryRecord | undefined): { title?: string } {
+@@ -122,6 +132,9 @@ function titleOf(entry: EntryRecord | undefined): { title?: string } {
  }
  
  export async function openDurable(options: OpenDurableOptions = {}): Promise<OpenDurableResult> {
@@ -42,7 +54,7 @@ index fcd6e523..929dbc79 100644
  	const location = await selectSession(options.cwd ?? process.cwd(), options.continueSession ?? false);
  	const envs = new ExecutionEnvs(location.cwd);
  	let harness: Harness | undefined;
-@@ -132,6 +143,7 @@ export async function openDurable(options: OpenDurableOptions = {}): Promise<Ope
+@@ -132,6 +145,7 @@ export async function openDurable(options: OpenDurableOptions = {}): Promise<Ope
  		const settings = createHarnessSettings(settingsManager);
  		const registry = createCodingRegistry(settingsManager, location.cwd);
  		registry.install(Subagent);
@@ -50,7 +62,7 @@ index fcd6e523..929dbc79 100644
  
  		const pendingReports: unknown[] = [];
  		let report: (error: unknown) => void = (error) => pendingReports.push(error);
-@@ -146,7 +158,29 @@ export async function openDurable(options: OpenDurableOptions = {}): Promise<Ope
+@@ -146,7 +160,29 @@ export async function openDurable(options: OpenDurableOptions = {}): Promise<Ope
  			},
  			context,
  		);
@@ -81,7 +93,49 @@ index fcd6e523..929dbc79 100644
  		const root = await harness.root(context, {
  			agent: {
  				cwd: location.cwd,
-@@ -342,6 +376,7 @@ export async function openDurable(options: OpenDurableOptions = {}): Promise<Ope
+@@ -179,6 +215,7 @@ export async function openDurable(options: OpenDurableOptions = {}): Promise<Ope
+ 			conversations: summaries,
+ 			models: models(),
+ 			notices: [],
++			tasksPanel: true,
+ 		};
+ 		const listeners = new Set<() => void>();
+ 		let notifying = false;
+@@ -296,17 +333,8 @@ export async function openDurable(options: OpenDurableOptions = {}): Promise<Ope
+ 					const thinking: ModelThinkingLevel = agentOf(state.conversation).thinkingLevel ?? "off";
+ 					await current.configure({ model: ref, thinkingLevel: clampThinkingLevel(model, thinking) }, context);
+ 				}),
+-			toggleTasks: () =>
+-				command(async () => {
+-					if (tasks !== undefined) {
+-						closeTasks();
+-						update({ tasks: undefined });
+-						return;
+-					}
+-					const graph = await opened.taskGraph(context);
+-					tasks = graph;
+-					unsubscribeTasks = graph.subscribe((value) => update({ tasks: value }));
+-				}),
++			// Only the panel: the graph stays observed, so live background work is never out of view.
++			toggleTasks: () => command(async () => update({ tasksPanel: !state.tasksPanel })),
+ 			switchConversation: (id) =>
+ 				command(async () => {
+ 					const next = await opened.conversation(id, context);
+@@ -326,8 +354,11 @@ export async function openDurable(options: OpenDurableOptions = {}): Promise<Ope
+ 			notice("warning", `Saved model is unavailable: ${saved.provider}/${saved.modelId}`);
+ 		}
+ 		if (initial?.fallbackMessage !== undefined) notice("info", initial.fallbackMessage);
+-		// The task panel starts open; /tasks hides it.
+-		await controller.toggleTasks();
++		// The task graph is observed until close; its panel starts open and /tasks hides it.
++		const graph = await opened.taskGraph(context);
++		tasks = graph;
++		update({ tasks: graph.value });
++		unsubscribeTasks = graph.subscribe((value) => update({ tasks: value }));
+ 		// Recovered work from an interrupted turn continues now.
+ 		harness.resume();
+ 
+@@ -342,6 +373,7 @@ export async function openDurable(options: OpenDurableOptions = {}): Promise<Ope
  			},
  			controller,
  			settings: settingsManager,
@@ -89,3 +143,141 @@ index fcd6e523..929dbc79 100644
  			close() {
  				closing ??= (async () => {
  					unsubscribe();
+diff --git a/packages/coding-agent/src/experimental/durable/tui.ts b/packages/coding-agent/src/experimental/durable/tui.ts
+index 397b276c..6a8fce8f 100644
+--- a/packages/coding-agent/src/experimental/durable/tui.ts
++++ b/packages/coding-agent/src/experimental/durable/tui.ts
+@@ -23,12 +23,14 @@ import {
+ 	SelectList,
+ 	type SelectListTheme,
+ 	Spacer,
++	type StackEntry,
+ 	setCapabilityOverrides,
+ 	setKeybindings,
+ 	Text,
+ 	TruncatedText,
+ 	TuiAltScreen,
+ 	VStack,
++	visibleWidth,
+ } from "@earendil-works/pi-tui";
+ import { getAgentDir } from "../../config.ts";
+ import { KeybindingsManager } from "../../core/keybindings.ts";
+@@ -150,10 +152,75 @@ interface Handlers {
+ 	cycleThinking(): void;
+ }
+ 
++/**
++ * The live background-task badge: the dock's first row, never shrunk, so live background work stays on
++ * screen however small the terminal gets. It counts the graph's background tasks whatever their kind and
++ * names the ones that are not running; with none it renders nothing and the dock is upstream's.
++ */
++export class TaskBadge implements Component {
++	#count = 0;
++	#detail = "";
++
++	get count(): number {
++		return this.#count;
++	}
++
++	set(graph: TaskGraph | undefined): void {
++		const nodes = Object.values(graph?.tasks ?? {}).filter((node) => node.background);
++		const tally = (state: string, match: (node: TaskGraphNode) => boolean): string[] => {
++			const n = nodes.filter(match).length;
++			return n === 0 ? [] : [`${n} ${state}`];
++		};
++		this.#count = nodes.length;
++		this.#detail = [
++			...tally("aborting", (node) => node.abortRequested),
++			...tally("completing", (node) => !node.abortRequested && node.state.status === "completing"),
++			...tally("waiting", (node) => !node.abortRequested && node.state.status === "waiting"),
++			...tally("pending", (node) => !node.abortRequested && node.state.status === "pending"),
++		].join(", ");
++	}
++
++	/** The widest form that fits, padded when there is room; narrower terminals drop detail, then words. */
++	render(width: number): string[] {
++		const n = this.#count;
++		if (n === 0) return [];
++		const tasks = `⏳ ${n} ${n === 1 ? "task" : "tasks"}`;
++		const detailed = this.#detail ? [`${tasks} (${this.#detail})`] : [];
++		const forms = [...detailed, tasks, `⏳ ${n}`, `⏳${n}`, `*${n}`, "*+", "*"];
++		for (const form of forms) {
++			if (visibleWidth(form) < width) return [theme.fg("accent", ` ${form}`)];
++			if (visibleWidth(form) === width) return [theme.fg("accent", form)];
++		}
++		return [theme.fg("accent", "*")];
++	}
++
++	invalidate(): void {}
++}
++
++/**
++ * The screen: the transcript above the dock. The badge is the dock's first row and never shrinks, so the
++ * renderer, which clips from the bottom, drops the editor and the footer before it; a one-row terminal
++ * with live background work shows the badge instead of the transcript.
++ */
++export function durableLayout(transcript: Component, badge: TaskBadge, dock: readonly StackEntry[]): VStack {
++	return new VStack([
++		{
++			component: transcript,
++			basis: 0,
++			grow: 1,
++			shrink: 1,
++			minSize: 1,
++			visible: (viewport) => badge.count === 0 || viewport.height > 1,
++		},
++		{ component: new VStack([{ component: badge, shrink: 0 }, ...dock]), basis: "auto", grow: 0, shrink: 1, minSize: 1 },
++	]);
++}
++
+ class DurableTui {
+ 	static readonly #renderers: Record<string, ToolRenderers> = createAllToolRenderers();
+ 	readonly #ui: TuiAltScreen;
+ 	readonly #chat = new Container();
++	readonly #taskBadge = new TaskBadge();
+ 	readonly #tasks = new Container();
+ 	readonly #queue = new Container();
+ 	readonly #notices = new Container();
+@@ -216,15 +283,9 @@ class DurableTui {
+ 		content.addChild(new Spacer(1));
+ 		const transcript = new ScrollView(content, { follow: "end", primary: true, overscroll: "chain" });
+ 		this.#transcript = transcript;
+-		const dock = new VStack([
+-			{ component: this.#tasks, shrink: 1, minSize: 0 },
+-			{ component: this.#queue, shrink: 1, minSize: 0 },
+-			{ component: this.#notices, shrink: 1, minSize: 0 },
+-			{ component: this.#editorContainer, shrink: 1, minSize: 3 },
+-			{ component: this.#footer, shrink: 1, minSize: 0 },
+-		]);
+ 		for (const component of [
+ 			this.#chat,
++			this.#taskBadge,
+ 			this.#tasks,
+ 			this.#queue,
+ 			this.#notices,
+@@ -234,9 +295,12 @@ class DurableTui {
+ 			this.#ui.addChild(component);
+ 		}
+ 		this.#ui.setLayoutRoot(
+-			new VStack([
+-				{ component: transcript, basis: 0, grow: 1, shrink: 1, minSize: 1 },
+-				{ component: dock, basis: "auto", grow: 0, shrink: 1, minSize: 1 },
++			durableLayout(transcript, this.#taskBadge, [
++				{ component: this.#tasks, shrink: 1, minSize: 0 },
++				{ component: this.#queue, shrink: 1, minSize: 0 },
++				{ component: this.#notices, shrink: 1, minSize: 0 },
++				{ component: this.#editorContainer, shrink: 1, minSize: 3 },
++				{ component: this.#footer, shrink: 1, minSize: 0 },
+ 			]),
+ 		);
+ 		this.#ui.setFocus(this.#editor);
+@@ -299,7 +363,8 @@ class DurableTui {
+ 				);
+ 			}
+ 		}
+-		this.#syncTasks(view.tasks);
++		this.#taskBadge.set(view.tasks);
++		this.#syncTasks(view.tasksPanel ? view.tasks : undefined);
+ 		this.#syncQueue((view.conversation.docs["pi.inbox"] ?? { items: [] }) as InboxState);
+ 		this.#syncNotices(view);
+ 		this.#editor.borderColor = theme.getThinkingBorderColor(agentOf(view.conversation).thinkingLevel ?? "off");

package/pi/pi-durable/overlay/upstream-pin.json

@@ -2,8 +2,8 @@
 	"schemaVersion": 2,
 	"comment": "The one upstream commit the pi-durable carrier is emitted from, the patch it applies, the emitted files and the published SDK set they run against. The experimental durable app is source-only upstream (published pi-coding-agent ships no dist/experimental), so Entwurf ships it as a CARRIER: the pinned app files, type-stripped, with the relocation in pi/pi-durable/carrier-relocation.mjs. scripts/emit-pi-durable-carrier.ts is the only writer of the generated fields (blob, sha256, emitter.node) and the only reader of upstream source; an installed package never reads source. Model data rides the published @earendil-works/pi-ai.",
 	"repository": "https://github.com/earendil-works/pi",
-	"tag": "v1.0.4",
-	"commit": "7c10bd4337495ee613f2224843ecdf349b80d1df",
+	"tag": "v1.1.0",
+	"commit": "abe508e1b89912adde45528136c3221eb69acdd7",
 	"patches": ["runtime-contacts.patch"],
 	"carrier": {
 		"comment": "files: the six app files bootstrap.mjs needs (main.ts is replaced by the bootstrap). distTargets: every pi-coding-agent internal the stripped files import, as paths under the published dist/; the emitter refuses a set that differs and the resolver answers no other.",
@@ -23,14 +23,14 @@
 				"source": "packages/coding-agent/src/experimental/durable/runtime.ts",
 				"patched": true,
 				"blob": "fcd6e5239e999ebf17dea0335fb3dc9cd7f7ce45",
-				"sha256": "ca0ee10dc904a57d46bb33b37fcc4efe48dfa08b2f0d10e79e7bc22136871f0a"
+				"sha256": "bfd88844fae61e8bd32d57b5b986f48056c64eebb5466d9826318a0783ac9005"
 			},
 			{
 				"name": "tui.js",
 				"source": "packages/coding-agent/src/experimental/durable/tui.ts",
-				"patched": false,
+				"patched": true,
 				"blob": "397b276cbeb1c90e1fbc96c3cc59e6a25f92dad7",
-				"sha256": "bef1ea4bd6e8ab150273752a9b94552d8ce672b518ba3d1ed1a209b8405be1b3"
+				"sha256": "f61cc68e5d32552a8196785093ae9e2f4a946088fe71582bb05690517db8c5b4"
 			},
 			{
 				"name": "harness-setup.js",
@@ -89,17 +89,17 @@
 		]
 	},
 	"sdk": {
-		"comment": "The published library set the carrier runs against, derived from the 1.0.4 declarations. members: the @earendil-works packages the carrier imports and every @earendil-works package those declare. direct: a third-party package a carrier file imports itself (sessions.ts: proper-lockfile, at the version pi-coding-agent 1.0.4 pins). Each is an exact production dependency in package.json; the members' own edges are caret ranges, so the installed physical edges, not semver, are what must equal these versions.",
+		"comment": "The published library set the carrier runs against, derived from the 1.1.0 declarations. members: the @earendil-works packages the carrier imports and every @earendil-works package those declare. direct: a third-party package a carrier file imports itself (sessions.ts: proper-lockfile, at the version pi-coding-agent 1.1.0 pins). Each is an exact production dependency in package.json; the members' own edges are caret ranges, so the installed physical edges, not semver, are what must equal these versions.",
 		"members": {
-			"@earendil-works/chord": "1.0.4",
-			"@earendil-works/pi-agent-core": "1.0.4",
-			"@earendil-works/pi-ai": "1.0.4",
-			"@earendil-works/pi-codemode": "1.0.4",
-			"@earendil-works/pi-coding-agent": "1.0.4",
-			"@earendil-works/pi-durable": "1.0.4",
-			"@earendil-works/pi-mcp": "1.0.4",
-			"@earendil-works/pi-telemetry": "1.0.4",
-			"@earendil-works/pi-tui": "1.0.4"
+			"@earendil-works/chord": "1.1.0",
+			"@earendil-works/pi-agent-core": "1.1.0",
+			"@earendil-works/pi-ai": "1.1.0",
+			"@earendil-works/pi-codemode": "1.1.0",
+			"@earendil-works/pi-coding-agent": "1.1.0",
+			"@earendil-works/pi-durable": "1.1.0",
+			"@earendil-works/pi-mcp": "1.1.0",
+			"@earendil-works/pi-telemetry": "1.1.0",
+			"@earendil-works/pi-tui": "1.1.0"
 		},
 		"direct": {
 			"proper-lockfile": "4.1.2"

package/pi-extensions/meta-bridge-pi-durable.ts

@@ -16,7 +16,7 @@
  * The bootstrap that composes the two lives with the overlay (`pi/pi-durable/bootstrap.mjs`), not
  * here: this module never imports or initializes the durable app runtime and carries no path into
  * a vendor checkout. That is this module's import boundary, not the package's dependency list: the
- * package does declare the exact `@earendil-works/pi-durable` (1.0.4) for its carrier (#130).
+ * package does declare the exact `@earendil-works/pi-durable` (per the pin's SDK set) for its carrier (#130).
  *
  * WHY BIRTH IS AFTER OPEN, BEHIND A GATE. `[read @cd32f77]` The native session id is chosen
  * inside `openDurable` (`runtime.ts:125`, `sessions.ts:18-55`), and `openDurable` calls
@@ -276,7 +276,9 @@ export interface PiDurableRoots {
 // ---------------------------------------------------------------------------
 // Durable surface, typed NARROWLY and locally — read at pi-durable 1.0.2 @cd32f77 (#129,
 // `harness/types.ts`; historical coordinates, not re-anchored here). The current supply is the
-// 1.0.4 carrier at `7c10bd43`, whose authority is `pi/pi-durable/overlay/upstream-pin.json`.
+// carrier `pi/pi-durable/overlay/upstream-pin.json` names (1.1.0 at `abe508e`). `[read 2026-10-08]`
+// v1.0.4 → v1.1.0 `harness/types.ts` adds `models`, `contextRetentionMs` and a `context()` options
+// bag only; none of the shapes typed below moved.
 // `defineExtension`/`defineTool` are identity functions (`harness/define.ts:6-17`), so a plain
 // object is the extension.
 // ---------------------------------------------------------------------------

package/run.sh

@@ -134,7 +134,7 @@ Usage:
   ./run.sh check-omp-birth-hook       # #87 gate: drives the real OMP assembler into a temp dir, imports the ASSEMBLED index.ts into a MOCK omp host and fires session_start/session_switch. tui mints one backend:"omp" record + a sender marker keyed to the host's OWN pid (the one-process join) + the garden id on the status line; print/rpc/json mint NOTHING (hasUI is true on the rpc rows, as in the vendor); switch attaches on the same native id and mints the replacement on a new one; the CERTIFIED receiver reader still finds no marker. Also the four-root joint binding: extension and omp-labeled bridge child resolve the same sessions/mailbox/senders/receivers bundle against test-built literals (never the production resolver as its own oracle), under a poisoned PI_CODING_AGENT_DIR and under four distinct ENTWURF_META_* overrides; the override grammar is absolute-or-~ and both halves plus the doctor refuse anything else by name; and a drifted provenance label selects no root policy at all. Hermetic; no omp, no model turn
   ./run.sh check-pi-durable-contact   # #129 L-identity gate, CHECKOUT-ONLY (an installed package refuses it in run_ts). Opens the REAL durable app from THIS checkout's verified carrier (pi/pi-durable/carrier/ under its resolver, against the checkout's pinned pi SDK set — refused by name first) with the pi-durable contact, births the citizen and runs its tools adapter-direct through a privately emitted branch bridge (ENTWURF_PI_DURABLE_BRIDGE_ENTRY; its registry must match this checkout). Matrix roots {default, explicit} x {fresh, --continue}: one record keyed by the durable session dir, sender marker on the spawned host pid, exactly one bridge child whose /proc PPID is that host, poisoned identity carriers kept from it, its four root carriers bound to the roots written, the receiver ARMED (raw marker owned by the host pid + start key as pi-durable-host, joined to the sender marker; removed on close), self = the record and replyable, peers from an outside bridge, same garden id on reopen; the bundle's compiled owner join must admit pi-durable-host. Reaps only the host/bridges it owns on any failure. Harness-bypassed: no model turn, no ToolTask. Missing inputs → SKIP (97), never a pass
   ./run.sh check-pi-durable-send      # #129 L-send FIRST CELL, CHECKOUT-ONLY. Same input as check-pi-durable-contact. One native durable turn: the app's own controller input → GenerationTask → ToolTask → the contact's entwurf_v2 → the private bridge → a seeded self-fetch target (C2 recipe, owned by a separate idle child). S = a 127.0.0.1 scripted OpenAI-compatible endpoint configured through the app's documented models.json (dummy key, PI_OFFLINE); H = the native ToolTask path; V (a vendor turn) is NOT run. Oracles: the wire (tools offered, v2 schema = the bridge's tools/list, exactly two requests, the tool result + receipt in the second), the raw mailbox (.msg 1, signal, sender = the host record), the native view (one call, its settled result, root current). Not exactly-once, not recovery, not a recipient turn. Missing inputs → SKIP (97)
-  ./run.sh check-pi-durable-beside    # #129 mutant execution coordinate (VERIFY rule 3): run_vitest over the five pi-durable beside tests (adapter, carrier/SDK-set verifier, preflight, owner join, carrier relocation/resolver/emitter) — the pi-durable qualification lane's gate argv. Same files check-tests-beside-behavior already runs.
+  ./run.sh check-pi-durable-beside    # #129 mutant execution coordinate (VERIFY rule 3): run_vitest over the six pi-durable beside tests (adapter, carrier/SDK-set verifier, preflight, owner join, carrier relocation/resolver/emitter/task footer, native-module file and directory ingress) — the pi-durable qualification lane's gate argv. Same files check-tests-beside-behavior already runs.
   ./run.sh check-pi-durable-receive   # #129 L-receive FIRST CELL, CHECKOUT-ONLY. Same input (the bundle must carry the pi-durable-host owner join). The host driver gives the app NO input; a seeded claude-code sender (marker owned by a separate idle child, handed to a gate-owned sending bridge through ENTWURF_META_SENDER_MARKER) enqueues one message, the host's doorbell admits its notice to the ROOT conversation, and the scripted model drains it with entwurf_inbox_read. S withholds response #1 until the ENQUEUE receipt, the .delivered bytes, the signal, the host-owned receiver marker and the notice are captured. Oracles: receiver() admission, native view, raw archive (.delivered.read + lastReadAt), wire (exactly two requests, drain result = view), and after a green reap a forensic read-only SQLite copy (submission row by request id = reported id, root, input, done, placed entry = the notice). V NOT run. Missing inputs → SKIP (97)
   ./run.sh check-copilot-receive-arm  # #82 RAIL 5 gate: the REAL receiver installer + the REAL extension.mjs forked with a stubbed SDK. Arms only after birth, marker owned by the WATCHER pid, self-fetch dispatch answer, doorbell carries the garden id and NOT the body, id-drift/foreign-parent refusals. Hermetic; no Copilot, no model turn
   ./run.sh check-copilot-launch       # #82 RAIL 7 gate: the MANAGED launch `entwurf copilot`, driven through its public address against a FAKE VENDOR on a sandbox PATH. Receiver precondition refusals, EXTENSIONS token + operator token preservation, injected defaults before the `--` terminator, byte-identical argv, the 11 explicit permission/surface policy overrides that suppress `--yolo`, exec (not fork) pid identity, exit passthrough, recursion refusal. Hermetic; no Copilot, no model turn
@@ -208,7 +208,7 @@ Usage:
   ./run.sh smoke-entwurf-chain-live    # LIVE cross-harness delivery chain: native Claude Code -> pi GPT -> pi ACP Sonnet -> mailbox terminus, proving sender identity/replyable at every hop and a real read receipt at the end. Prerequisites (claude on PATH, pi credentials per backend) report protocol SKIP, never a pass
   ./run.sh check-release-gate-outcomes  # release-gate STEP OUTCOME protocol (P1): one skip exit code shared by the shell + TS halves, classifier never rounds a skip up to a pass, `--cut` refuses a MUST SKIP while a bare diagnostic stays exit 0, no LIVE smoke keeps the old exit-0 skip shape, and both real skip surfaces are INVOKED and observed to propagate the code
   ./run.sh check-gate-manifests         # the HEAD of that qualification, on its own: runner self-test + the committed manifests validated against the origin index + the declared lane inventory. Executes ZERO committed mutants (only the self-test's synthetic fixture mutants, in tmp fixture repos) and never snapshots this repo (~20s), which is why it lives in check:hermetic while the body stays on CI/release-gate — three of the five reds qualification ever produced in CI died right here, before a mutant gate ran (#99 B-3)
-  ./run.sh check-gate-qualification    # kill-proof qualification (the gate-of-gates): runner self-test (classifier truth table + synthetic negatives incl. wrong-reason/hang/control-red/impurity) + committed mutant manifests (scripts/mutants/*.json) run in an isolated snapshot repo under control→mutant→restore→control; the real checkout is never written. Evidence = claim IDs + killed mutant IDs, never assertion counts
+  ./run.sh check-gate-qualification    # kill-proof qualification (the gate-of-gates): runner self-test (classifier truth table + synthetic negatives incl. wrong-reason/hang/control-red/impurity) + committed mutant manifests (scripts/mutants/*.json) run in an isolated snapshot repo under control→mutant→restore→control; the real checkout is never written. Evidence = claim IDs + killed mutant IDs, never assertion counts. Bare = the whole body (the prepared SHA's CI call); `--group '<argv JSON>' --receipt <abs path outside the repo>` = one affected exact-argv group, a PARTIAL receipt (development's run, #133)
   ./run.sh check-probe-ordering        # §11-7 ordering-probe deterministic gate: raw-client SAMENESS pinned to backend.ts (sequence/args/timeouts/permission policy — the probe may never measure a lookalike), phase attribution incl. set-model, probe-mode fixture wire markers (delay honored, probeRunId REQUIRED, smoke-acp-mcp-live legacy compat), event-log door integrity (reserved keys refused at write; unknown marker name, broken sort axis, or a payload the classifier cannot judge on is MALFORMED, never a quiet event), and the §11-7 paired-verdict truth table (P0/I0 outside the space, phase-qualified D, B promotion ladder, C, A two-delay rule). Offline/deterministic; one product claim (no production prompt cutoff) is replant-qualified via scripts/mutants/probe-ordering.json, while the other assertions are direct [CHECK:*] contracts
   ./run.sh check-probe-cli-shim        # §11-7-c B-name-snapshot PRODUCER gate: the CLI shim driven as a REAL process against fake CLIs (no API, no cost). Proves what a defect would buy — FABRICATED evidence (a malformed init is never reported as an empty name set; the boot report carries the true target path+sha256 the classifier verifies against the roster), a DESTROYED turn (byte transparency across mid-UTF8/CRLF/oversized/unterminated framing, exit-code fidelity, signal re-raise, inbound signal forwarding, stderr passthrough, stdout backpressure), and LEAKED operator state (exact-allowlist env scrub, no argv/env/prompt body in the log). Offline/deterministic; 20 direct [CHECK:*] contracts, deliberately no longer replant-qualified after #70 subtraction
   ./run.sh smoke-agy-statusline-state # agy ambient garden-id statusLine install/doctor/inverse regression. Offline/deterministic
@@ -1520,8 +1520,8 @@ check_pi_durable_beside() {
   # from re-running every beside test. The six files are one contact: the adapter and its packaged
   # bootstrap, the installed carrier/SDK-set verifier (which also reads the three checkout gates as
   # SOURCE), the fresh preflight, the owner join that admits the durable host, the carrier's
-  # relocation grammar, resolver and maintainer emitter (#130), and the bootstrap's explicit
-  # --native-module ingress (#130 P2).
+  # relocation grammar, resolver and maintainer emitter (#130) with the carrier's task footer (#134),
+  # and the bootstrap's explicit --native-module ingress (#130 P2) and its --native-module-dir (#134).
   run_vitest pi-extensions/meta-bridge-pi-durable.test.ts pi-extensions/lib/pi-durable-runtime.test.ts pi-extensions/lib/pi-durable-fresh-preflight.test.ts pi-extensions/lib/entwurf-deliverability.owner-join.test.ts pi-extensions/lib/pi-durable-carrier.test.ts pi-extensions/lib/pi-durable-native-module.test.ts
 }
 
@@ -3810,7 +3810,7 @@ check_pack() {
 #     which is exactly what property (1)'s `(_|$)` absorbs; all three shapes are fixtures
 #     below so a future suffix change cannot pass vacuously.)
 pack_install_leaked_pi() {
-  grep '^@earendil-works+' | grep -Ev '@1\.0\.4(_|$)' || true
+  grep '^@earendil-works+' | grep -Ev '@1\.1\.0(_|$)' || true
 }
 
 # Matcher self-test on SYNTHETIC lookalikes: a healthy install tree cannot exercise either
@@ -3830,15 +3830,15 @@ check_pack_pin_matcher() {
   # None may leak; the two lookalikes must — a PREFIX-EXTENDED version (`0.86.0-beta.1`,
   # the prerelease shape that an unanchored match would bless) and an off-pin version.
   matcher_probe=$(printf '%s\n' \
-    '@earendil-works+pi-ai@1.0.4' \
-    '@earendil-works+pi-ai@1.0.4_@modelcontextprotocol+sdk@1.29.0_zod@4.3.6' \
-    '@earendil-works+pi-ai@1.0.4_ws@8.21.3' \
-    '@earendil-works+pi-ai@1.0.4_@modelcontextprotocol+sdk@1.29.0_zod@4.3.6__ws@8.21.3_zod@4.3.6' \
-    '@earendil-works+pi-ai@1.0.4-beta.1' \
+    '@earendil-works+pi-ai@1.1.0' \
+    '@earendil-works+pi-ai@1.1.0_@modelcontextprotocol+sdk@1.29.0_zod@4.3.6' \
+    '@earendil-works+pi-ai@1.1.0_ws@8.21.3' \
+    '@earendil-works+pi-ai@1.1.0_@modelcontextprotocol+sdk@1.29.0_zod@4.3.6__ws@8.21.3_zod@4.3.6' \
+    '@earendil-works+pi-ai@1.1.0-beta.1' \
     '@earendil-works+pi-agent-core@0.87.1' | pack_install_leaked_pi)
-  if [ "$matcher_probe" != '@earendil-works+pi-ai@1.0.4-beta.1
+  if [ "$matcher_probe" != '@earendil-works+pi-ai@1.1.0-beta.1
 @earendil-works+pi-agent-core@0.87.1' ]; then
-    fail "[QK:PACK-INSTALL-PIN-MATCHER-BOUNDED] the pin-leak matcher must flag the prefix-extended 1.0.4-beta.1 and the off-pin 0.87.1 lookalikes, and pass 1.0.4 bare or with any measured peer-hash — got: ${matcher_probe:-<nothing leaked>}"
+    fail "[QK:PACK-INSTALL-PIN-MATCHER-BOUNDED] the pin-leak matcher must flag the prefix-extended 1.1.0-beta.1 and the off-pin 0.87.1 lookalikes, and pass 1.1.0 bare or with any measured peer-hash — got: ${matcher_probe:-<nothing leaked>}"
     return 1
   fi
 
@@ -3846,9 +3846,9 @@ check_pack_pin_matcher() {
   # (0.85.0 onward, still true at 0.99.1). An off-pin chord MUST leak; the pinned one must not. A matcher narrowed
   # back to `^@earendil-works+pi-` sees nothing here and dies at this signature.
   matcher_probe=$(printf '%s\n' \
-    '@earendil-works+chord@1.0.4' \
+    '@earendil-works+chord@1.1.0' \
     '@earendil-works+chord@0.87.1' \
-    '@earendil-works+pi-ai@1.0.4' | pack_install_leaked_pi)
+    '@earendil-works+pi-ai@1.1.0' | pack_install_leaked_pi)
   if [ "$matcher_probe" != '@earendil-works+chord@0.87.1' ]; then
     fail "[QK:PACK-INSTALL-PIN-MATCHER-COVERS-CLOSURE] the pin-leak matcher must cover every @earendil-works closure member, not just the pi-* families — an off-pin @earendil-works/chord has to leak (it is a runtime dependency of pi-coding-agent, pi-agent-core, pi-client and pi-protocol — `[측정 2026-09-20]` at 0.86.0, re-measured `[측정 2026-09-22]` at 0.87.0, `[측정 2026-09-23]` at 0.87.1 and `[측정 2026-09-30]` at 0.99.1, where pi-coding-agent adds pi-codemode and pi-mcp beside them) — got: ${matcher_probe:-<nothing leaked>}"
     return 1
@@ -3862,7 +3862,7 @@ check_pack_pin_matcher() {
 # Cells: L1s (Entwurf alone, $3), L1 (project-local beside an aligned host pi-coding-agent at the
 # pinned SDK version), L2 (an isolated `npm -g --prefix`), each through (a) the INSTALLED verifier
 # (exit 0, prints its own carrier-resolver) and (b) an independent consumer oracle; then the L3
-# NEGATIVE (an override binds pi-durable's pi-ai edge one patch behind: the installed verifier must
+# NEGATIVE (an override binds pi-durable's pi-ai edge to an older published version: the installed verifier must
 # refuse it by name, while a bare import still succeeds); then (c) the public launch on L1s.
 # The oracle observes RESOLUTIONS (a resolve hook), not every filesystem read; it asserts each
 # resolved product file lies inside THIS consumer's node_modules — a sandbox ancestor is not the
@@ -3873,8 +3873,9 @@ pack_install_durable_cells() {
   local tgz="$1" box="$2" l1s="$3" pin_ver oracle_dir cell root control pkg out rc
   local host_specs=() host_old_specs=() spec
   pin_ver=$(cd "$REPO_DIR" && node -p "require('./pi/pi-durable/overlay/upstream-pin.json').sdk.members['@earendil-works/pi-coding-agent']")
-  # The HOST fixture needs a coherent generation too: coding-agent@1.0.4 alone
-  # has ^1.0.4 SDK edges, which can resolve 1.1.0 (CI37694671506: pi-ai tar 404).
+  # The HOST fixture needs a coherent generation too: a coding-agent root alone has
+  # caret SDK edges, which can float to a newer generation (CI37694671506, measured at
+  # coding-agent@1.0.4 with ^1.0.4 edges resolving 1.1.0: pi-ai tar 404).
   # These are fixture roots from the owning pin, not product overrides or fallback.
   out=$(cd "$REPO_DIR" && node -e 'const p = require("./pi/pi-durable/overlay/upstream-pin.json"); console.log(Object.entries(p.sdk.members).map(([n,v]) => `${n}@${v}`).join("\n"));') || return 1
   mapfile -t host_specs <<<"$out"
@@ -4024,8 +4025,8 @@ ORACLE
   # copied from this checkout into the sandbox — it never ships (test/ is outside the package files).
   # Its initialization appends `init` to the receipt this cell names; the same public launch must then
   # reach the same carrier model refusal, so the installed bootstrap loaded the module before the
-  # runtime and the native registry installed its extension (carrier/runtime.js 146) before that
-  # refusal (runtime.js 162). A module claiming an extension name the app installs itself is refused by
+  # runtime and the native registry installed its extension (carrier/runtime.js 148) before that
+  # refusal (runtime.js 164). A module claiming an extension name the app installs itself is refused by
   # name before anything opens: no durable session directory, no citizen, in a fresh sandbox home.
   # Native SDK file opens here are ordinary (the module runs in the native process); none is judged.
   local mod_dir="$box/pd-module" mod_home="$box/pd-module-home" mod_env=()
@@ -4047,18 +4048,44 @@ ORACLE
   fi
   echo "[check-pack-install] pi-durable native module: the installed bootstrap initialized one explicit module before the carrier's runtime (then the same model refusal), and refused a reserved extension name before anything opened"
 
+  # (c3) #134: the paired --native-module-dir on the INSTALLED package. One named directory holding the
+  # same synthetic module under a matching name beside a helper and a dotfile that would throw if
+  # opened: the installed bootstrap must read only the top-level *.extension.mjs, initialize it once
+  # (one `init` receipt) and reach the same carrier model refusal. A directory without a matching
+  # module is refused by name before anything opens: no durable session directory, no citizen.
+  local dir_mods="$box/pd-module-dir" dir_empty="$box/pd-module-dir-empty" dir_home="$box/pd-module-dir-home" dir_env=()
+  mkdir -p "$dir_mods" "$dir_empty" "$dir_home/.pi/agent"
+  cp "$REPO_DIR/test/fixtures/pi-durable-native-module/mock.mjs" "$dir_mods/10-mock.extension.mjs"
+  printf 'throw new Error("pack-install: helper opened");\n' > "$dir_mods/helper.mjs"
+  printf 'throw new Error("pack-install: dotfile opened");\n' > "$dir_mods/.hidden.extension.mjs"
+  cp "$dir_mods/helper.mjs" "$dir_empty/index.mjs"
+  rc=0; out=$(cd "$launch_cwd" && env "${launch_env[@]}" PI_OFFLINE=1 MOCK_NATIVE_RECEIPT="$dir_mods/receipt.log" "$l1s/node_modules/.bin/entwurf" pi-durable --provider entwurf-pack-probe --model no-such-model --width task-wide --native-module-dir "$dir_mods" 2>&1 </dev/null) || rc=$?
+  if [ "$rc" -eq 0 ] || [ "$(cat "$dir_mods/receipt.log" 2>/dev/null)" != "init" ] || ! grep -q 'Could not resolve model: Unknown provider "entwurf-pack-probe"' <<<"$out" || ! grep -q "at openDurable (file://.*/pi/pi-durable/carrier/runtime.js" <<<"$out" || grep -q -e "native-module-" -e "pack-install: .* opened" <<<"$out"; then
+    fail "[QK:PACK-INSTALL-DURABLE-NATIVE-MODULE-DIR] [check-pack-install] the installed 'entwurf pi-durable --native-module-dir' did not initialize exactly its one top-level *.extension.mjs and then reach the carrier openDurable's own model refusal (rc=$rc, receipt $(cat "$dir_mods/receipt.log" 2>/dev/null | tr '\n' ' ')):"
+    echo "$out" | tail -15 | sed 's/^/    /' >&2
+    return 1
+  fi
+  mapfile -t dir_env < <(pack_install_consumer_env "$dir_home")
+  rc=0; out=$(cd "$launch_cwd" && env "${dir_env[@]}" PI_OFFLINE=1 "$l1s/node_modules/.bin/entwurf" pi-durable --provider entwurf-pack-probe --model no-such-model --width task-wide --native-module-dir "$dir_empty" 2>&1 </dev/null) || rc=$?
+  if [ "$rc" -eq 0 ] || ! grep -q "native-module-dir-empty: " <<<"$out" || grep -q -e "Unknown provider" -e "pack-install: .* opened" <<<"$out" || [ -e "$dir_home/.pi/agent/experimental" ] || [ -e "$dir_home/.pi/agent/meta-sessions" ]; then
+    fail "[QK:PACK-INSTALL-DURABLE-NATIVE-MODULE-DIR] [check-pack-install] the installed launch did not refuse a directory without a module by name before anything opened (rc=$rc):"
+    echo "$out" | tail -15 | sed 's/^/    /' >&2
+    return 1
+  fi
+  echo "[check-pack-install] pi-durable module directory: the installed bootstrap initialized only the named directory's one top-level *.extension.mjs before the carrier's runtime (then the same model refusal), and refused a directory without a module before anything opened"
+
   # (d) Host vs native are two subjects. The installed package's native SDK set is the pin (above);
   # the ordinary Pi HOST on PATH is judged by its OWN real `pi --version` against the derived range.
-  # Real host binaries, no forged version: a sandbox install of the previous pi (1.0.2) must make the
+  # Real host binaries, no forged version: a sandbox install of the previous pi generation must make the
   # installed setup's pi row a named FAIL with ZERO Pi wiring while pi-durable still PASSes, and the
   # aligned host binary (the pinned version, installed above for L1) must be inside the range.
   # The previous host version is a variable, not a quoted `@pkg@x.y.z` spec: check-dep-versions reads
   # those specs as this repo's install pins, and this one is deliberately off the floor.
-  local host_home host_proj host_old="$box/pd-host-old" host_env=() host_old_ver="1.0.2"
+  local host_home host_proj host_old="$box/pd-host-old" host_env=() host_old_ver="1.0.4"
   mkdir -p "$host_old"
   for spec in "${host_specs[@]}"; do host_old_specs+=("${spec%@*}@$host_old_ver"); done
   out=$(cd "$host_old" && npm install "${host_old_specs[@]}" --no-audit --no-fund 2>&1) || {
-    fail "[check-pack-install] could not install the previous-host pi fixture (1.0.2):"; echo "$out" | tail -10 | sed 's/^/    /' >&2; return 1; }
+    fail "[check-pack-install] could not install the previous-host pi fixture ($host_old_ver):"; echo "$out" | tail -10 | sed 's/^/    /' >&2; return 1; }
   for cell in old aligned; do
     host_home="$box/pd-host-$cell-home"; host_proj="$box/pd-host-$cell-proj"
     mkdir -p "$host_home/.pi/agent" "$host_proj"
@@ -4072,8 +4099,8 @@ ORACLE
       fail "[check-pack-install] host $cell: the native pi-durable row must stay PASS whatever the PATH host is:"; echo "$out" | tail -20 | sed 's/^/    /' >&2; return 1
     fi
     if [ "$cell" = old ]; then
-      if [ "$rc" -eq 0 ] || ! grep -q "pi: FAIL — detected pi 1.0.2 is outside the supported range >=$pin_ver <1.1" <<<"$out" || [ -e "$host_proj/.pi" ] || [ -e "$host_home/.pi/agent/settings.json" ]; then
-        fail "[QK:PACK-INSTALL-HOST-RANGE-SEPARATE] [check-pack-install] a real pi 1.0.2 host beside the $pin_ver native set must be a named pi FAIL with zero Pi wiring and a non-green setup (rc=$rc):"
+      if [ "$rc" -eq 0 ] || ! grep -q "pi: FAIL — detected pi $host_old_ver is outside the supported range >=$pin_ver <1.2" <<<"$out" || [ -e "$host_proj/.pi" ] || [ -e "$host_home/.pi/agent/settings.json" ]; then
+        fail "[QK:PACK-INSTALL-HOST-RANGE-SEPARATE] [check-pack-install] a real pi $host_old_ver host beside the $pin_ver native set must be a named pi FAIL with zero Pi wiring and a non-green setup (rc=$rc):"
         echo "$out" | tail -20 | sed 's/^/    /' >&2
         return 1
       fi
@@ -4081,7 +4108,7 @@ ORACLE
       fail "[check-pack-install] host aligned: the pinned-version host binary was judged outside the range:"; echo "$out" | tail -20 | sed 's/^/    /' >&2; return 1
     fi
   done
-  echo "[check-pack-install] host vs native: a real pi 1.0.2 host is a named pi FAIL with no wiring while pi-durable PASSes; the $pin_ver host binary is inside the range"
+  echo "[check-pack-install] host vs native: a real pi $host_old_ver host is a named pi FAIL with no wiring while pi-durable PASSes; the $pin_ver host binary is inside the range"
 }
 
 # The writable roots of ONE consumer sandbox, shared by every consumer subcall of
@@ -4438,21 +4465,26 @@ _check_pack_install_impl() {
   # library the pi-durable carrier imports, a production dependency of this package since 0.32 (its
   # own deps: chord, pi-ai). All eleven are published at 1.0.4. The tarball now DECLARES the nine-member
   # SDK set itself, so these pins are an aligned host install beside it, not peers it lacks.
-  echo "[check-pack-install] pnpm add into $tmp (with the aligned 1.0.x SDK + chord + codemode + mcp + durable + typebox)"
+  # `[측정 2026-10-08]` at 1.1.0 the constellation is unchanged: the nine registry manifests
+  # (.tmp-verify/033-prep/registry-sdk-manifests.json) give pi-coding-agent {chord, pi-agent-core,
+  # pi-ai, pi-codemode, pi-mcp, pi-tui}, pi-ai {pi-telemetry}, pi-agent-core {pi-ai}, pi-durable
+  # {chord, pi-ai}, and `npm view` gives pi-client {chord, pi-protocol}, pi-protocol {chord}. All
+  # eleven are published at 1.1.0.
+  echo "[check-pack-install] pnpm add into $tmp (with the aligned 1.1.x SDK + chord + codemode + mcp + durable + typebox)"
   local install_log
   install_log=$(cd "$tmp" && pnpm add \
     "$tgz_path" \
-    "@earendil-works/pi-ai@1.0.4" \
-    "@earendil-works/pi-coding-agent@1.0.4" \
-    "@earendil-works/pi-tui@1.0.4" \
-    "@earendil-works/pi-agent-core@1.0.4" \
-    "@earendil-works/pi-client@1.0.4" \
-    "@earendil-works/pi-protocol@1.0.4" \
-    "@earendil-works/pi-telemetry@1.0.4" \
-    "@earendil-works/chord@1.0.4" \
-    "@earendil-works/pi-codemode@1.0.4" \
-    "@earendil-works/pi-mcp@1.0.4" \
-    "@earendil-works/pi-durable@1.0.4" \
+    "@earendil-works/pi-ai@1.1.0" \
+    "@earendil-works/pi-coding-agent@1.1.0" \
+    "@earendil-works/pi-tui@1.1.0" \
+    "@earendil-works/pi-agent-core@1.1.0" \
+    "@earendil-works/pi-client@1.1.0" \
+    "@earendil-works/pi-protocol@1.1.0" \
+    "@earendil-works/pi-telemetry@1.1.0" \
+    "@earendil-works/chord@1.1.0" \
+    "@earendil-works/pi-codemode@1.1.0" \
+    "@earendil-works/pi-mcp@1.1.0" \
+    "@earendil-works/pi-durable@1.1.0" \
     "typebox@latest" \
     --ignore-workspace --ignore-scripts 2>&1) || {
     fail "[check-pack-install] pnpm add failed:"
@@ -4468,11 +4500,11 @@ _check_pack_install_impl() {
   local leaked_pi
   leaked_pi=$(ls "$tmp/node_modules/.pnpm" 2>/dev/null | pack_install_leaked_pi)
   if [ -n "$leaked_pi" ]; then
-    fail "[check-pack-install] UNVERIFIED pi runtime resolved into the install tree (expected only 1.0.4):"
+    fail "[check-pack-install] UNVERIFIED pi runtime resolved into the install tree (expected only 1.1.0):"
     printf '%s\n' "$leaked_pi" | sed 's/^/    /' >&2
     return 1
   fi
-  echo "[check-pack-install] pi runtime tree pin verified: every @earendil-works package is 1.0.4 (chord and pi-durable included)"
+  echo "[check-pack-install] pi runtime tree pin verified: every @earendil-works package is 1.1.0 (chord and pi-durable included)"
 
   # Resolve the installed package.json and confirm pi.extensions
   # arrived intact. If pi.extensions is empty or missing, the
@@ -6802,19 +6834,11 @@ release_gate() {
     results+=("FAIL  static (pnpm run check:full)"); failc=$((failc + 1))
   fi
 
-  # 1b. Discriminating power of that floor. The mutant-EXECUTING body left the
-  # default check chains (operator inner-loop cost) — only its head rides along,
-  # as check-gate-manifests inside check:hermetic — so release acceptance carries
-  # the body explicitly as its own MUST step: a cut must re-prove the gates still
-  # kill what they claim to kill.
-  section "release-gate step: check-gate-qualification"
-  if (cd "$REPO_DIR" && bash "$self" check-gate-qualification); then
-    ok "check-gate-qualification: PASS"
-    results+=("PASS  check-gate-qualification"); pass=$((pass + 1))
-  else
-    fail "check-gate-qualification: FAIL"
-    results+=("FAIL  check-gate-qualification"); failc=$((failc + 1))
-  fi
+  # 1b. Discriminating power is NOT re-proven here. A cut re-proves that the gates still kill
+  # what they claim exactly once: the qualification BODY step of the exact-SHA CI run at the
+  # prepared SHA, which the release oracle (verify-exact-ci.sh) requires before any candidate
+  # exists (#132 / #133 — a local BODY here repeated that ~100-minute proof on a SHA nobody ships).
+  # Its head still rides check:full as check-gate-manifests.
 
   # 2. (gemini-availability step removed — claude-only floor; gemini CLI is
   #    deprecated, so the gate no longer asserts a three-backend claim.)
@@ -7485,7 +7509,13 @@ case "$cmd" in
     # (HEAD + work-surface content hash asserted identical before/after). The runner is negative-controlled
     # first: zero-match/multi-match/survived/wrong-reason/hang(+pgroup grandchild kill)/
     # control-red/impurity all must classify red before any real manifest counts.
-    run_ts scripts/check-gate-qualification.ts
+    # Arguments reach the runner's own parser unchanged (#133): `--group '<argv JSON>'
+    # --receipt <abs path>` is the affected PARTIAL a development lane runs, and a malformed,
+    # missing or repeated flag is refused there before any body or snapshot. Dropping them
+    # turned a requested PARTIAL into the whole body. Bare, it stays the whole body — the
+    # prepared SHA's CI call. Never retry bare after a refusal.
+    shift || true
+    run_ts scripts/check-gate-qualification.ts "$@"
     ;;
   check-probe-ordering)
     # §11-7 ordering-probe gate (docs/acp-backend-rail.md §11-7): the raw-client seam is