@junghanacs/entwurf 0.32.0 → 0.34.0

package/scripts/check-gate-qualification.ts

@@ -49,7 +49,7 @@ import { createHash } from "node:crypto";
 import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
-import { fileURLToPath } from "node:url";
+import { fileURLToPath, pathToFileURL } from "node:url";
 import {
 	classifyMutantRun,
 	countOccurrences,
@@ -1178,6 +1178,63 @@ function buildDeclaredOutputFixture(): string {
 			parsedCompose.expectPath === "/e.txt",
 	);
 
+	// The operator's door to this parser is `run.sh check-gate-qualification` (#133): it
+	// once dropped every argument, so a requested PARTIAL started the whole body. The
+	// cells run a byte copy of this checkout's run.sh whose runner is a fixture: the REAL
+	// parser, then a print where the body would start — so neither a refusal nor a mutated
+	// wrapper can launch a body or a snapshot from here. Mutation acceptance stays the
+	// runner's own; this proves only the door's control flow.
+	const door = reclaimOnExit(fs.mkdtempSync(path.join(os.tmpdir(), "entwurf-qualification-door-")));
+	fs.mkdirSync(path.join(door, "scripts"));
+	fs.copyFileSync(path.join(REPO_DIR, "run.sh"), path.join(door, "run.sh"));
+	const parserUrl = pathToFileURL(path.join(REPO_DIR, "scripts", "lib", "qualification-receipt.ts")).href;
+	fs.writeFileSync(
+		path.join(door, "scripts", "check-gate-qualification.ts"),
+		[
+			`import { parseQualificationArgs } from ${JSON.stringify(parserUrl)};`,
+			"const argv = process.argv.slice(2);",
+			"let parsed;",
+			"try { parsed = parseQualificationArgs(argv); }",
+			'catch (err) { process.stderr.write("refused: " + (err instanceof Error ? err.message : String(err)) + "\\n"); process.exit(2); }',
+			'process.stdout.write(JSON.stringify({ argv, parsed }) + "\\n");',
+			"",
+		].join("\n"),
+	);
+	const viaDoor = (argv: string[]) => {
+		const r = spawnSync("bash", [path.join(door, "run.sh"), "check-gate-qualification", ...argv], {
+			cwd: door,
+			encoding: "utf8",
+			env: { PATH: process.env.PATH ?? "", HOME: door },
+			timeout: 30_000,
+		});
+		const started = r.stdout.trim() === "" ? undefined : JSON.parse(r.stdout);
+		return { status: r.status, stderr: r.stderr, started };
+	};
+	const requested = ["--group", '["bash","run.sh","check pi *"]', "--receipt", "/x/r.json"];
+	const partial = viaDoor(requested);
+	const bare = viaDoor([]);
+	ok(
+		"[QK:QUALIFY-DOOR-FORWARDS-ARGV] run.sh check-gate-qualification hands --group/--receipt to the parser unchanged (a space and a glob inside the argv JSON included) and the parser reads one PARTIAL group; called bare it still reads the whole body — the prepared SHA's CI call",
+		partial.status === 0 &&
+			JSON.stringify(partial.started?.argv) === JSON.stringify(requested) &&
+			partial.started?.parsed.mode === "group" &&
+			partial.started.parsed.receiptPath === "/x/r.json" &&
+			bare.status === 0 &&
+			JSON.stringify(bare.started?.argv) === "[]" &&
+			bare.started?.parsed.mode === "full",
+	);
+	const doorRefusals: Array<[string[], string]> = [
+		[["--group", '["bash","run.sh","check-x"]'], "--group needs --receipt"],
+		[["--group", '["a"]', "--group", '["a"]', "--receipt", "/x/r.json"], "repeated flag"],
+		[["--grop", '["a"]', "--receipt", "/x/r.json"], "unknown argument"],
+		[["--group", "check-x", "--receipt", "/x/r.json"], "JSON array"],
+	];
+	const refused = doorRefusals.map(([argv, naming]) => ({ naming, run: viaDoor(argv) }));
+	ok(
+		"[QK:QUALIFY-DOOR-REFUSES-BEFORE-BODY] through run.sh, a missing --receipt, a repeated flag, a misspelled flag and a non-array --group are each refused by name and nothing starts — never a whole body in place of the PARTIAL that was asked for",
+		refused.every(({ naming, run }) => run.status === 2 && run.stderr.includes(naming) && run.started === undefined),
+	);
+
 	const tmpRoot = reclaimOnExit(fs.mkdtempSync(path.join(os.tmpdir(), "entwurf-receipt-selftest-")));
 	const { dir: origin, externalTarget } = buildFixtureOrigin();
 	try {
@@ -3405,12 +3462,12 @@ let manifestCount: number;
 		"pi-bridge-sender": 4,
 		"pi-mcp-bridge": 2,
 		"pi-mcp-register": 3,
-		"pi-durable": 47,
+		"pi-durable": 58,
 		"copilot-receive": 20,
 		"entwurf-peers": 1,
 		"fresh-call-dispatch": 11,
 		"fresh-cut": 3,
-		"gate-qualification": 8,
+		"gate-qualification": 10,
 		"herdr-placement": 13,
 		"herdr-plugin": 25,
 		"herdr-plugin-profile": 14,

package/scripts/check-release-gate-outcomes.ts

@@ -358,16 +358,18 @@ function runSubcommand(sub: string, env: Record<string, string | undefined>): {
 //    check-gate-qualification left the default check chains (operator
 //    inner-loop cost, 2026-08 subtraction). That move is a gate/release
 //    contract: the step must stay REACHABLE on the axes that now own it — the
-//    CI check job (on the pushes #103's filter still sends it) and release_gate
-//    as its own MUST step — and
-//    must not silently return to the default chain. Without this cell,
-//    deleting the release_gate qualification block or the CI line leaves every
-//    focused gate green while a cut quietly loses its discriminating-power
-//    step.
+//    CI check job (on the pushes #103's filter still sends it) and, for a cut,
+//    the exact-SHA release oracle that requires that CI step at the prepared SHA
+//    (8c) — and must not silently return to the default chain or to release_gate.
+//    #132/#133 moved the cut's one BODY off release_gate: a local BODY there re-ran
+//    the same proof on a SHA nobody ships, so release_gate now invokes it ZERO
+//    times. Without this cell, deleting the CI line leaves every focused gate green
+//    while a cut quietly loses its discriminating-power step, and re-adding the
+//    release_gate block silently doubles every cut again.
 //
 //    THREE claims, because each is an independent contract. 8a is REACHABILITY
-//    (absent from the default chain; present exactly once in CI and exactly once
-//    as a wired release_gate MUST step; named in VERIFY). 8b is what the CI step
+//    (absent from the default chain and from release_gate; present exactly once in
+//    CI; named in VERIFY). 8b is what the CI step
 //    qualifies (the FULL floor, before the qualification run), added by #70. 8c is
 //    what the RELEASE path ACCEPTS as evidence for one SHA — that the body step
 //    actually ran there (#103). Each carries its own replant — one mutant must
@@ -399,25 +401,27 @@ function runSubcommand(sub: string, env: Record<string, string | undefined>): {
 			"package.json's default `check` chain contains check-gate-qualification again (doubles every closure floor)",
 		);
 	if (ciHits !== 1) holes.push(`the CI check job runs check-gate-qualification ${ciHits}x (need exactly once)`);
-	if (invocations !== 1)
-		holes.push(`release_gate invokes check-gate-qualification ${invocations}x (need exactly one MUST step)`);
+	if (invocations !== 0)
+		holes.push(
+			`release_gate invokes check-gate-qualification ${invocations}x (need none: the cut's one BODY is the prepared SHA's CI step)`,
+		);
 	if (
-		!qualGateBody.includes('results+=("PASS  check-gate-qualification")') ||
-		!qualGateBody.includes('results+=("FAIL  check-gate-qualification")')
+		qualGateBody.includes("PASS  check-gate-qualification") ||
+		qualGateBody.includes("FAIL  check-gate-qualification")
 	)
-		holes.push("the release_gate qualification step does not wire PASS/FAIL into the MUST counters");
+		holes.push("release_gate still counts a check-gate-qualification MUST row");
 	if (
 		!verifyDoc.includes(
-			"in the CI `check` job on a branch push that touched the qualification surface, and as a release-gate MUST step",
+			"in the CI `check` job on a branch push that touched the qualification surface, and — for a cut — at the prepared SHA, where the exact-SHA release oracle requires that CI step",
 		)
 	)
 		holes.push("VERIFY.md no longer names the owners of the moved qualification step");
 	assert.ok(
 		holes.length === 0,
 		"[QK:QUALIFICATION-SCHEDULING-REACHABLE] check-gate-qualification left the default check chains " +
-			"deliberately, so it must stay REACHABLE on the axes that own it now — absent from the default chain, " +
-			"exactly once in the CI check job, exactly once as a release_gate MUST step with its " +
-			`outcome wired, and named in VERIFY. Broken: ${holes.join("; ")}`,
+			"deliberately, so it must stay REACHABLE on the axes that own it now — absent from the default chain " +
+			"and from release_gate (the cut's one BODY is the prepared SHA's CI step), exactly once in the CI check job, " +
+			`and named in VERIFY. Broken: ${holes.join("; ")}`,
 	);
 
 	// 8b. WHAT the CI qualification step qualifies — its own claim, not a branch
@@ -1094,7 +1098,7 @@ console.log(
 		"a run.sh wrapper declining its own prerequisite (including the measured LIVE=1 no-cortex-connection cell); and every " +
 		"LIVE smoke is either wired into release_gate or excluded by a sentence the docs still carry; and the moved " +
 		"check-gate-qualification stays reachable on its owners (absent from the default chain, exactly once in CI, " +
-		"exactly once as a release-gate MUST step) and the CI step qualifies the FULL floor, which runs before it, " +
+		"absent from release_gate: the one body is the prepared SHA's CI step) and the CI step qualifies the FULL floor, which runs before it, " +
 		"while the exact-SHA release oracle requires that BODY step to have concluded success at the release SHA, " +
 		"and the CI filter that decides when that body runs covers every mutant subject and still runs it for all " +
 		"five historical reds; and " +

package/scripts/emit-pi-durable-carrier.ts

@@ -10,9 +10,10 @@
  * Inputs, and nothing else: the pinned commit's OBJECTS (each declared file and the license, read as
  * `<commit>:<path>` — never a worktree, so the repository's checkout state cannot enter), the packaged
  * overlay patch, and this Node's `stripTypeScriptTypes` in strip mode (upstream runs these exact
- * sources under Node's strip-only TypeScript). The patch is applied by git's own engine to a private
- * scratch copy; the base blob and the patched result must carry the blob ids the patch's `index` line
- * names. Each stripped file is then relocated by pi/pi-durable/carrier-relocation.mjs, and the targets
+ * sources under Node's strip-only TypeScript). The one patch carries exactly one section per file the
+ * pin declares `patched`, and no other section (#134). Each section is applied by git's own engine to a
+ * private scratch copy of its file; the base blob and the patched result must carry the blob ids that
+ * section's `index` line names. Each stripped file is then relocated by pi/pi-durable/carrier-relocation.mjs, and the targets
  * the six files import must equal the pin's declared `distTargets` exactly.
  *
  * `--write` emits pi/pi-durable/carrier/{<files>,LICENSE} and fills the pin's generated fields
@@ -118,22 +119,60 @@ function readPin(): CarrierPin {
 			`the emitter is ${EMITTER_TOOL} in ${EMITTER_MODE} mode, not ${JSON.stringify(pin.carrier.emitter)}`,
 		);
 	}
-	if (pin.carrier.files.filter((f) => f.patched).length !== 1) {
-		throw refuse("carrier-pin-malformed", "exactly one carrier file carries the overlay patch");
+	if (!pin.carrier.files.some((f) => f.patched)) {
+		throw refuse("carrier-pin-malformed", "at least one carrier file carries the overlay patch");
 	}
 	return pin;
 }
 
-/** The overlay patch's one file and the two blob ids its `index` line names. */
-function readPatch(pin: CarrierPin): { bytes: Buffer; file: string; base: string; result: string } {
-	const bytes = fs.readFileSync(path.join(DURABLE, "overlay", pin.patches[0]));
-	const text = bytes.toString("utf8");
-	const files = [...text.matchAll(/^diff --git a\/(\S+) b\/(\S+)$/gm)];
-	const index = [...text.matchAll(/^index ([0-9a-f]+)\.\.([0-9a-f]+) 100644$/gm)];
-	if (files.length !== 1 || files[0][1] !== files[0][2] || index.length !== 1) {
-		throw refuse("carrier-patch-shape", `${pin.patches[0]} must change exactly one existing file`);
+/** One file's section of the overlay patch: its own bytes and the two blob ids its `index` line names. */
+export interface PatchSection {
+	bytes: Buffer;
+	base: string;
+	result: string;
+}
+
+/**
+ * The overlay patch split into its per-file sections, keyed by the existing file each one changes, and
+ * matched against the source paths the pin declares `patched`: exactly one section per declared file and
+ * no section for any other file. Anything else is the patch's shape, refused by name.
+ */
+export function patchSections(
+	text: string,
+	patched: readonly string[],
+	name = "the overlay patch",
+): Map<string, PatchSection> {
+	const starts = [...text.matchAll(/^diff --git /gm)].map((m) => m.index);
+	if (starts.length === 0 || starts[0] !== 0) {
+		throw refuse("carrier-patch-shape", `${name} must start with its first file section`);
+	}
+	const sections = new Map<string, PatchSection>();
+	for (const [at, start] of starts.entries()) {
+		const chunk = text.slice(start, starts[at + 1] ?? text.length);
+		const files = [...chunk.matchAll(/^diff --git a\/(\S+) b\/(\S+)$/gm)];
+		const index = [...chunk.matchAll(/^index ([0-9a-f]+)\.\.([0-9a-f]+) 100644$/gm)];
+		if (files.length !== 1 || files[0][1] !== files[0][2] || index.length !== 1) {
+			throw refuse("carrier-patch-shape", `every section of ${name} changes exactly one existing file`);
+		}
+		const file = files[0][1];
+		if (sections.has(file)) throw refuse("carrier-patch-shape", `${name} changes ${file} in two sections`);
+		sections.set(file, { bytes: Buffer.from(chunk, "utf8"), base: index[0][1], result: index[0][2] });
 	}
-	return { bytes, file: files[0][1], base: index[0][1], result: index[0][2] };
+	const undeclared = [...sections.keys()].filter((file) => !patched.includes(file));
+	const missing = patched.filter((file) => !sections.has(file));
+	if (undeclared.length > 0 || missing.length > 0) {
+		throw refuse(
+			"carrier-patch-shape",
+			`${name} must change exactly the files the pin declares patched (undeclared: ${undeclared.join(", ") || "none"}; missing: ${missing.join(", ") || "none"})`,
+		);
+	}
+	return sections;
+}
+
+function readPatch(pin: CarrierPin): Map<string, PatchSection> {
+	const text = fs.readFileSync(path.join(DURABLE, "overlay", pin.patches[0]), "utf8");
+	const patched = pin.carrier.files.filter((f) => f.patched).map((f) => f.source);
+	return patchSections(text, patched, pin.patches[0]);
 }
 
 /** `base` with the patch applied by git, in a private scratch tree outside any repository. */
@@ -172,7 +211,7 @@ function emit(source: string, pin: CarrierPin): Emission {
 	if (git(source, ["cat-file", "-t", pin.commit]).toString().trim() !== "commit") {
 		throw refuse("carrier-source-unreadable", `${pin.commit} is not a commit in ${source}`);
 	}
-	const patch = readPatch(pin);
+	const sections = readPatch(pin);
 	const names = pin.carrier.files.map((f) => f.name);
 	const targets = pin.carrier.distTargets;
 	if (new Set(targets).size !== targets.length) throw refuse("carrier-pin-malformed", "distTargets repeats a path");
@@ -183,18 +222,19 @@ function emit(source: string, pin: CarrierPin): Emission {
 		const original = readSourceObject(source, `${pin.commit}:${declared.source}`);
 		const blob = blobId(original);
 		let text = original;
-		if (declared.patched) {
-			if (declared.source !== patch.file || !blob.startsWith(patch.base)) {
+		const section = declared.patched ? sections.get(declared.source) : undefined;
+		if (section !== undefined) {
+			if (!blob.startsWith(section.base)) {
 				throw refuse(
 					"carrier-patch-base",
-					`the patch changes ${patch.file} from ${patch.base}; ${declared.source} is ${blob}`,
+					`the patch changes ${declared.source} from ${section.base}; the pinned object is ${blob}`,
 				);
 			}
-			text = applyPatch(declared.source, original, patch.bytes);
-			if (!blobId(text).startsWith(patch.result)) {
+			text = applyPatch(declared.source, original, section.bytes);
+			if (!blobId(text).startsWith(section.result)) {
 				throw refuse(
 					"carrier-patch-result",
-					`patched ${declared.source} is ${blobId(text)}, the patch names ${patch.result}`,
+					`patched ${declared.source} is ${blobId(text)}, the patch names ${section.result}`,
 				);
 			}
 		}

package/scripts/mutants/control-send-receipt.json

@@ -181,7 +181,7 @@
 			"claim": "PI-CORE-PIN-TRACKS-FLOOR",
 			"title": "the queue oracle's pi-agent-core pin drifts off the floor the rest of the pi runtime is pinned to, so the oracle keeps answering honestly — about a pi nobody in this repo runs",
 			"subject": "package.json",
-			"find": ["\"@earendil-works/pi-agent-core\": \"1.0.4\","],
+			"find": ["\"@earendil-works/pi-agent-core\": \"1.1.0\","],
 			"replace": ["\"@earendil-works/pi-agent-core\": \"0.87.1\","],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,

package/scripts/mutants/gate-qualification.json

@@ -95,6 +95,30 @@
 			"timeoutSeconds": 120,
 			"signature": "[QK:QUALIFY-PRIOR-RUN-EVIDENCE-KEPT]",
 			"signatureSource": "scripts/check-gate-qualification.ts"
+		},
+		{
+			"claim": "QUALIFY-DOOR-FORWARDS-ARGV",
+			"title": "run.sh check-gate-qualification drops its arguments again — a requested --group/--receipt PARTIAL reaches the runner as a bare call and starts the whole ~900-mutant body nobody asked for (#133: the wrapper defect that made every development PARTIAL a whole run)",
+			"subject": "run.sh",
+			"find": ["    run_ts scripts/check-gate-qualification.ts \"$@\""],
+			"replace": ["    run_ts scripts/check-gate-qualification.ts"],
+			"gate": ["bash", "run.sh", "check-gate-manifests"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:QUALIFY-DOOR-FORWARDS-ARGV]",
+			"signatureSource": "scripts/check-gate-qualification.ts"
+		},
+		{
+			"claim": "QUALIFY-DOOR-REFUSES-BEFORE-BODY",
+			"title": "run.sh check-gate-qualification retries bare when the runner refuses — a malformed, missing or repeated flag is named, then the whole body starts anyway in place of the PARTIAL that was asked for (#133)",
+			"subject": "run.sh",
+			"find": ["    run_ts scripts/check-gate-qualification.ts \"$@\""],
+			"replace": [
+				"    run_ts scripts/check-gate-qualification.ts \"$@\" || run_ts scripts/check-gate-qualification.ts"
+			],
+			"gate": ["bash", "run.sh", "check-gate-manifests"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:QUALIFY-DOOR-REFUSES-BEFORE-BODY]",
+			"signatureSource": "scripts/check-gate-qualification.ts"
 		}
 	]
 }

package/scripts/mutants/pack-install.json

@@ -6,7 +6,7 @@
 			"claim": "PACK-INSTALL-PIN-MATCHER-BOUNDED",
 			"title": "the pin-leak matcher loses its version boundary and blesses substring lookalikes — @0.85.10 reads as the pinned 0.85.1 and the gate announces a verified tree it never verified (independent review, 2026-08-25)",
 			"subject": "run.sh",
-			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.0\\.4(_|$)' || true"],
+			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.1\\.0(_|$)' || true"],
 			"replace": ["  grep '^@earendil-works+' | grep -v '@0\\.87\\.1' || true"],
 			"gate": ["bash", "run.sh", "check-pack-pin-matcher"],
 			"timeoutSeconds": 120,
@@ -17,8 +17,8 @@
 			"claim": "PACK-INSTALL-PIN-MATCHER-COVERS-CLOSURE",
 			"title": "the pin-leak matcher narrows back to the pi-* families and goes blind to a non-pi member of the same runtime closure — @earendil-works/chord (new in pi 0.85.0, a runtime dependency of pi-coding-agent/pi-agent-core/pi-client/pi-protocol) floats unpinned while the gate prints a verified pin (measured 2026-09-06 on a real 0.85.1 install tree)",
 			"subject": "run.sh",
-			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.0\\.4(_|$)' || true"],
-			"replace": ["  grep '^@earendil-works+pi-' | grep -Ev '@1\\.0\\.4(_|$)' || true"],
+			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.1\\.0(_|$)' || true"],
+			"replace": ["  grep '^@earendil-works+pi-' | grep -Ev '@1\\.1\\.0(_|$)' || true"],
 			"gate": ["bash", "run.sh", "check-pack-pin-matcher"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:PACK-INSTALL-PIN-MATCHER-COVERS-CLOSURE]",

package/scripts/mutants/pi-durable.json

@@ -53,12 +53,8 @@
 			"claim": "PI-DURABLE-BOOTSTRAP-ARGV-NO-BRIDGE-ENTRY",
 			"title": "the launch argv accepts --bridge-entry, so a caller can point the contact at a bridge outside this package",
 			"subject": "pi/pi-durable/bootstrap.mjs",
-			"find": [
-				"const VALUE_FLAGS = [\"--provider\", \"--model\", \"--width\", \"--entwurf-bootstrap\", \"--native-module\"];"
-			],
-			"replace": [
-				"const VALUE_FLAGS = [\"--bridge-entry\", \"--provider\", \"--model\", \"--width\", \"--entwurf-bootstrap\", \"--native-module\"];"
-			],
+			"find": ["const VALUE_FLAGS = ["],
+			"replace": ["const VALUE_FLAGS = [\n\t\"--bridge-entry\","],
 			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-BOOTSTRAP-ARGV-NO-BRIDGE-ENTRY]",
@@ -345,7 +341,7 @@
 			"claim": "PI-DURABLE-CARRIER-PIN-MATCHES",
 			"title": "the pin records a digest the committed carrier file does not carry, so a carrier edited after emission would still be the declared one",
 			"subject": "pi/pi-durable/overlay/upstream-pin.json",
-			"find": ["\"sha256\": \"ca0ee10dc904a57d46bb33b37fcc4efe48dfa08b2f0d10e79e7bc22136871f0a\""],
+			"find": ["\"sha256\": \"bfd88844fae61e8bd32d57b5b986f48056c64eebb5466d9826318a0783ac9005\""],
 			"replace": ["\"sha256\": \"0000000000000000000000000000000000000000000000000000000000000000\""],
 			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
 			"timeoutSeconds": 300,
@@ -588,8 +584,8 @@
 			"claim": "PI-DURABLE-MODULE-ABSENT-UNCHANGED",
 			"title": "the module phase runs without a --native-module, so a launch that names no module still tries to import one",
 			"subject": "pi/pi-durable/bootstrap.mjs",
-			"find": ["\tconst extensions = nativeModule === undefined ? [] : [await loadNativeModule(nativeModule)];"],
-			"replace": ["\tconst extensions = false ? [] : [await loadNativeModule(nativeModule)];"],
+			"find": ["\tconst { nativeModules = [], ...args } = parseArgs(argv);"],
+			"replace": ["\tconst { nativeModules = [undefined], ...args } = parseArgs(argv);"],
 			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-ABSENT-UNCHANGED]",
@@ -619,7 +615,7 @@
 			"title": "the module initializes after the TUI is imported, so its environment arrives after the SDK modules have evaluated",
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": [
-				"\tconst extensions = nativeModule === undefined ? [] : [await loadNativeModule(nativeModule)];",
+				"\tconst extensions = await loadNativeModules(nativeModules);",
 				"\t// Loaded before anything opens, as upstream main.ts imports it statically: a TUI that cannot",
 				"\t// load opens no session, mints no citizen and leaves nothing to clean up.",
 				"\tconst { runDurableTui } = await loadTui();"
@@ -628,7 +624,7 @@
 				"\t// Loaded before anything opens, as upstream main.ts imports it statically: a TUI that cannot",
 				"\t// load opens no session, mints no citizen and leaves nothing to clean up.",
 				"\tconst { runDurableTui } = await loadTui();",
-				"\tconst extensions = nativeModule === undefined ? [] : [await loadNativeModule(nativeModule)];"
+				"\tconst extensions = await loadNativeModules(nativeModules);"
 			],
 			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
 			"timeoutSeconds": 300,
@@ -718,6 +714,177 @@
 				"argv": ["bash", "scripts/build-bridge.sh"],
 				"output": "mcp/entwurf-bridge/dist"
 			}
+		},
+		{
+			"claim": "PI-DURABLE-CARRIER-PATCH-SECTIONS",
+			"title": "a declared patched file with no section of its own passes the patch-shape check, so the emitter would ship that file unpatched",
+			"subject": "scripts/emit-pi-durable-carrier.ts",
+			"find": ["\tif (undeclared.length > 0 || missing.length > 0) {"],
+			"replace": ["\tif (undeclared.length > 0) {"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-CARRIER-PATCH-SECTIONS]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-FOOTER-GRAPH-LIFETIME",
+			"title": "/tasks closes the task-graph observation again, so hiding the panel also hides live background work from the badge",
+			"subject": "pi/pi-durable/carrier/runtime.js",
+			"find": ["\t\t\ttoggleTasks: () => command(async () => update({ tasksPanel: !state.tasksPanel })),"],
+			"replace": [
+				"\t\t\ttoggleTasks: () => command(async () => update({ tasksPanel: !state.tasksPanel, tasks: state.tasksPanel ? undefined : state.tasks })),"
+			],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-FOOTER-GRAPH-LIFETIME]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-FOOTER-BADGE-COUNT",
+			"title": "the badge counts every live task, foreground generation and tool tasks included, so an idle-but-turning session shows phantom background work",
+			"subject": "pi/pi-durable/carrier/tui.js",
+			"find": ["\t\tconst nodes = Object.values(graph?.tasks ?? {}).filter((node) => node.background);"],
+			"replace": ["\t\tconst nodes = Object.values(graph?.tasks ?? {});"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-FOOTER-BADGE-COUNT]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-FOOTER-BADGE-WIDTH",
+			"title": "the badge has no one- or two-cell form, so a very narrow terminal shows a bare marker with no count",
+			"subject": "pi/pi-durable/carrier/tui.js",
+			"find": ["\t\tconst forms = [...detailed, tasks, `⏳ ${n}`, `⏳${n}`, `*${n}`, \"*+\", \"*\"];"],
+			"replace": ["\t\tconst forms = [...detailed, tasks, `⏳ ${n}`, `⏳${n}`, \"*\"];"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-FOOTER-BADGE-WIDTH]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-FOOTER-BADGE-PROTECTED",
+			"title": "the badge sits last in the dock, so the renderer's bottom clip drops it first on a short terminal",
+			"subject": "pi/pi-durable/carrier/tui.js",
+			"find": [
+				"\t\t{ component: new VStack([{ component: badge, shrink: 0 }, ...dock]), basis: \"auto\", grow: 0, shrink: 1, minSize: 1 },"
+			],
+			"replace": [
+				"\t\t{ component: new VStack([...dock, { component: badge, shrink: 0 }]), basis: \"auto\", grow: 0, shrink: 1, minSize: 1 },"
+			],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-FOOTER-BADGE-PROTECTED]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-FOOTER-ZERO-UPSTREAM",
+			"title": "a one-row terminal hides the transcript even with no background work, so the idle screen is no longer upstream's",
+			"subject": "pi/pi-durable/carrier/tui.js",
+			"find": ["\t\t\tvisible: (viewport) => badge.count === 0 || viewport.height > 1,"],
+			"replace": ["\t\t\tvisible: (viewport) => viewport.height > 1,"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-FOOTER-ZERO-UPSTREAM]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-MODULE-DIR-TOPLEVEL-FILTER",
+			"title": "a dotfile ending in .extension.mjs counts as a module, so a hidden file in the named directory is evaluated as operator code",
+			"subject": "pi/pi-durable/bootstrap.mjs",
+			"find": ["const MODULE_ENTRY = /^[^.].*\\.extension\\.mjs$/;"],
+			"replace": ["const MODULE_ENTRY = /\\.extension\\.mjs$/;"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-MODULE-DIR-TOPLEVEL-FILTER]",
+			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-MODULE-DIR-ORDER-BYTEWISE",
+			"title": "modules are ordered by the locale's collation, so the initialization order depends on the host's language settings",
+			"subject": "pi/pi-durable/bootstrap.mjs",
+			"find": ["\t\t.sort((a, b) => Buffer.compare(Buffer.from(a), Buffer.from(b)));"],
+			"replace": ["\t\t.sort((a, b) => a.localeCompare(b));"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-MODULE-DIR-ORDER-BYTEWISE]",
+			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-MODULE-DIR-REFUSED",
+			"title": "a named directory without a module launches with none, so a wrong path or an unrenamed plain index.mjs goes unnoticed",
+			"subject": "pi/pi-durable/bootstrap.mjs",
+			"find": ["\tif (names.length === 0) {"],
+			"replace": ["\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-MODULE-DIR-REFUSED]",
+			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-MODULE-DIR-EXCLUSIVE",
+			"title": "naming both the file and the directory silently keeps only the file",
+			"subject": "pi/pi-durable/bootstrap.mjs",
+			"find": ["\tif (moduleArg !== undefined && dirArg !== undefined) {"],
+			"replace": ["\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-MODULE-DIR-EXCLUSIVE]",
+			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-MODULE-DIR-NAME-DUPLICATE",
+			"title": "a second module's same-named extension or tool is accepted, so the native registry replaces the first extension or keeps both tools without a word",
+			"subject": "pi/pi-durable/bootstrap.mjs",
+			"find": ["\t\t\tif (owners.has(name)) {"],
+			"replace": ["\t\t\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-MODULE-DIR-NAME-DUPLICATE]",
+			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
 		}
 	]
 }

package/scripts/mutants/pi-floor.json

@@ -7,10 +7,10 @@
 			"title": "one row of the pnpm workspace closure is left on the previous floor while every other surface moved — the shape a version bump actually fails in. Nothing else reads that file, so the stranded row surfaces only at install time, in a different command, far from the change that stranded it",
 			"subject": "pnpm-workspace.yaml",
 			"find": [
-				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2 || 1.0.4'"
+				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2 || 1.0.4 || 1.1.0'"
 			],
 			"replace": [
-				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2'"
+				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2 || 1.0.4'"
 			],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
@@ -19,10 +19,10 @@
 		},
 		{
 			"claim": "PI-SDK-PRODUCTION-SET",
-			"title": "the durable library's production pin falls one patch behind the SDK set the pin declares, so the carrier would bind a pi-durable nobody verified it against",
+			"title": "the durable library's production pin falls one release behind the SDK set the pin declares, so the carrier would bind a pi-durable nobody verified it against",
 			"subject": "package.json",
-			"find": ["\"@earendil-works/pi-durable\": \"1.0.4\","],
-			"replace": ["\"@earendil-works/pi-durable\": \"1.0.3\","],
+			"find": ["\"@earendil-works/pi-durable\": \"1.1.0\","],
+			"replace": ["\"@earendil-works/pi-durable\": \"1.0.4\","],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-SDK-PRODUCTION-SET]",
@@ -33,7 +33,7 @@
 			"title": "an @earendil-works package returns as a dev dependency beside its production pin, one name in two dependency classes",
 			"subject": "package.json",
 			"find": ["\"@biomejs/biome\": \"^2.4.13\","],
-			"replace": ["\"@biomejs/biome\": \"^2.4.13\",\n\t\t\"@earendil-works/pi-ai\": \"1.0.4\","],
+			"replace": ["\"@biomejs/biome\": \"^2.4.13\",\n\t\t\"@earendil-works/pi-ai\": \"1.1.0\","],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-SDK-NO-DUAL-DECLARATION]",

package/scripts/mutants/release-gate.json

@@ -103,10 +103,12 @@
 		},
 		{
 			"claim": "QUALIFICATION-SCHEDULING-REACHABLE",
-			"title": "release_gate stops invoking check-gate-qualification — the discriminating-power step moved out of the default chain silently vanishes from the cut while VERIFY still promises it",
+			"title": "release_gate starts invoking check-gate-qualification again — every cut silently pays a second ~100-minute BODY on a SHA nobody ships, the repetition #132/#133 moved to the prepared SHA's one CI step",
 			"subject": "run.sh",
-			"find": ["  if (cd \"$REPO_DIR\" && bash \"$self\" check-gate-qualification); then"],
-			"replace": ["  if (cd \"$REPO_DIR\" && true); then"],
+			"find": ["  # 2. (gemini-availability step removed — claude-only floor; gemini CLI is"],
+			"replace": [
+				"  (cd \"$REPO_DIR\" && bash \"$self\" check-gate-qualification) || true\n  # 2. (gemini-availability step removed — claude-only floor; gemini CLI is"
+			],
 			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:QUALIFICATION-SCHEDULING-REACHABLE]",