@junghanacs/entwurf 0.34.1 → 0.35.0

package/scripts/meta-bridge-doctor.sh

@@ -17,6 +17,18 @@ MKT_NAME="meta-bridge-local"
 PLUGIN="entwurf-meta-receive"
 CLAUDE_CFG="${CLAUDE_CONFIG_DIR:-$HOME/.claude}"
 REPO="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+# #136: the one argument. A Herdr plugin activation wires Claude with ABSOLUTE commands under the
+# stable runtime; the mode is normally derived from the activation ledger (see [expectation mode]),
+# and this override exists so a checkout's doctor can name that root. It must agree with the ledger.
+PLUGIN_RUNTIME_OVERRIDE=""
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --plugin-runtime)
+      [ -n "${2:-}" ] || { echo "meta-bridge-doctor: --plugin-runtime requires a value" >&2; exit 2; }
+      PLUGIN_RUNTIME_OVERRIDE="$2"; shift 2 ;;
+    *) echo "usage: meta-bridge-doctor.sh [--plugin-runtime <stable active runtime root>]" >&2; exit 2 ;;
+  esac
+done
 # The live artifact lives under the XDG data dir (dev clone and installed package
 # alike — never the checkout). Prefer the path RECORDED in install-state so a doctor
 # run under a different XDG_DATA_HOME than install still hashes the REAL assembled
@@ -110,6 +122,44 @@ if command -v node >/dev/null; then
   if [ "${MJ:-0}" -ge 24 ]; then ok "node $NV (>= 24, supported axis)"; else bad "node $NV too old (need >= 24; there is no Node 22 lane)"; fi
 else bad "node not on PATH"; fi
 
+echo "[expectation mode]"
+# #136: which expectations the three desired-state calls below compute. The judgement is the
+# activation owner's (`resolveDoctorPluginRuntime`, herdr-activation.mjs) reached through one narrow
+# call, so no second reader of the ledger exists. A refusal is NOT a fallback to bare expectations:
+# each call site then reports UNKNOWN, and every other section still runs (Hard Rule 13).
+PLUGIN_ARGS=()
+MODE_ERR=""
+if ! command -v node >/dev/null; then
+  MODE_ERR="node not on PATH, so the activation ledger could not be read"
+  bad "expectation mode is UNKNOWN: $MODE_ERR"
+else
+  MODE_STDERR="$(mktemp -t entwurf-doctor-mode.XXXXXX)"
+  set +e
+  if [ -n "$PLUGIN_RUNTIME_OVERRIDE" ]; then
+    MODE_ROOT="$(node "$REPO/scripts/herdr-doctor-mode.mjs" "$REPO" "$PLUGIN_RUNTIME_OVERRIDE" 2>"$MODE_STDERR")"
+  else
+    MODE_ROOT="$(node "$REPO/scripts/herdr-doctor-mode.mjs" "$REPO" 2>"$MODE_STDERR")"
+  fi
+  MODE_RC=$?
+  set -e
+  MODE_DETAIL="$(tr '\n' ' ' < "$MODE_STDERR" | cut -c1-400)"
+  rm -f "$MODE_STDERR"
+  if [ "$MODE_RC" -eq 3 ]; then
+    MODE_ERR="$MODE_DETAIL"
+    bad "expectation mode refused: $MODE_ERR"
+  elif [ "$MODE_RC" -ne 0 ]; then
+    MODE_ERR="herdr-doctor-mode.mjs exited $MODE_RC: $MODE_DETAIL"
+    bad "expectation mode is UNKNOWN: $MODE_ERR"
+  elif [ -n "$MODE_ROOT" ]; then
+    PLUGIN_ARGS=(--plugin-runtime "$MODE_ROOT")
+    ok "mode: plugin-runtime $MODE_ROOT (activation ledger)"
+  elif [ "$LIB_EXT" = "js" ]; then
+    ok "mode: installed (no activation ledger, or this package is not the plugin runtime)"
+  else
+    ok "mode: clone (this checkout is not the plugin runtime)"
+  fi
+fi
+
 echo "[managed config state]"
 if command -v python3 >/dev/null; then
   # state.py check is the effect-based keyset-survival guard: it asserts every
@@ -123,7 +173,9 @@ if command -v python3 >/dev/null; then
   # which key drifted — silent instead of fail-loud. As an `if` condition the
   # substitution's nonzero status is consumed (set -e suspended), so we always
   # reach the detail. stderr (drift detail) is captured via `2>&1 >/dev/null`.
-  if CHECK_ERR="$(python3 "$REPO/scripts/meta-bridge-state.py" check --repo "$REPO" --asm "$ASM" 2>&1 >/dev/null)"; then
+  if [ -n "$MODE_ERR" ]; then
+    bad "managed settings/MCP keyset is UNKNOWN: the expectation mode was not established ($MODE_ERR)"
+  elif CHECK_ERR="$(python3 "$REPO/scripts/meta-bridge-state.py" check --repo "$REPO" --asm "$ASM" ${PLUGIN_ARGS[@]+"${PLUGIN_ARGS[@]}"} 2>&1 >/dev/null)"; then
     ok "state file present and managed settings/MCP keyset survives intact"
   else
     bad "managed settings/MCP keyset missing or overwritten — another consumer may have clobbered a pi-owned key. Re-run ./run.sh install-meta-bridge. Drift detail:"
@@ -565,25 +617,29 @@ except Exception:
     print('')
 PY
 )"
-  EXPECTED_STATUSLINE="$(python3 "$REPO/scripts/meta-bridge-state.py" desired-statusline --repo "$REPO" | python3 -c 'import json,sys; print(json.load(sys.stdin).get("command", ""))')"
-  if [ "$STATUSLINE_CMD" = "$EXPECTED_STATUSLINE" ]; then ok "statusLine.command matches expected (dev: checkout path; installed: entwurf-statusline bin shim): $STATUSLINE_CMD"; else bad "statusLine.command drifted (got '$STATUSLINE_CMD', expected '$EXPECTED_STATUSLINE')"; fi
-  if [[ "$EXPECTED_STATUSLINE" == */* ]]; then
-    if [ -x "$EXPECTED_STATUSLINE" ]; then ok "statusline executable"; else bad "statusline script not executable: $EXPECTED_STATUSLINE"; fi
-  elif command -v "$EXPECTED_STATUSLINE" >/dev/null 2>&1; then
-    ok "statusline bin resolves on PATH: $(command -v "$EXPECTED_STATUSLINE")"
+  if [ -n "$MODE_ERR" ]; then
+    bad "statusLine expectation is UNKNOWN: the expectation mode was not established ($MODE_ERR)"
   else
-    bad "statusline bin not on PATH: $EXPECTED_STATUSLINE"
+    EXPECTED_STATUSLINE="$(python3 "$REPO/scripts/meta-bridge-state.py" desired-statusline --repo "$REPO" ${PLUGIN_ARGS[@]+"${PLUGIN_ARGS[@]}"} | python3 -c 'import json,sys; print(json.load(sys.stdin).get("command", ""))')"
+    if [ "$STATUSLINE_CMD" = "$EXPECTED_STATUSLINE" ]; then ok "statusLine.command matches expected (dev: checkout path; installed: entwurf-statusline bin shim): $STATUSLINE_CMD"; else bad "statusLine.command drifted (got '$STATUSLINE_CMD', expected '$EXPECTED_STATUSLINE')"; fi
+    if [[ "$EXPECTED_STATUSLINE" == */* ]]; then
+      if [ -x "$EXPECTED_STATUSLINE" ]; then ok "statusline executable"; else bad "statusline script not executable: $EXPECTED_STATUSLINE"; fi
+    elif command -v "$EXPECTED_STATUSLINE" >/dev/null 2>&1; then
+      ok "statusline bin resolves on PATH: $(command -v "$EXPECTED_STATUSLINE")"
+    else
+      bad "statusline bin not on PATH: $EXPECTED_STATUSLINE"
+    fi
+    SAMPLE_STATUSLINE_OUT="$(printf '%s' '{"session_id":"doctor-no-record","workspace":{"current_dir":"/tmp"},"model":{"id":"claude-sonnet-5"},"context_window":{"context_window_size":200000,"used_percentage":1,"current_usage":{"input_tokens":1}}}' | "$EXPECTED_STATUSLINE" 2>/dev/null || true)"
+    # The identity row may carry the #98 B unread badge between `cc` and the model letter:
+    # ` ✉N` when mail is waiting, nothing when the mailbox is empty, ` ✉?` when the count
+    # could not be taken. All three are healthy renders, so the shape test admits any of them.
+    if [ "$(printf '%s\n' "$SAMPLE_STATUSLINE_OUT" | wc -l | tr -d ' ')" = "2" ] && printf '%s\n' "$SAMPLE_STATUSLINE_OUT" | sed -n '1p' | grep -q 'tmp' && printf '%s\n' "$SAMPLE_STATUSLINE_OUT" | sed -n '2p' | grep -q '🪛' && printf '%s\n' "$SAMPLE_STATUSLINE_OUT" | sed -n '2p' | grep -qE ' cc( ✉([0-9]+|\?))? \| s'; then ok "statusline synthetic execution emits two rows (work context + identity)"; else bad "statusline synthetic execution failed or omitted two-row work/identity marker"; fi
+    # The synthetic feeds a session_id with no meta-record, so the garden id does not
+    # resolve and there is no mailbox to count. `✉?` is the required answer: a statusline
+    # that drew nothing there would be claiming "no mail" about a mailbox it never opened —
+    # the exact silence #98 was opened to remove.
+    if printf '%s\n' "$SAMPLE_STATUSLINE_OUT" | sed -n '2p' | grep -q '✉?'; then ok "statusline badge distinguishes 'could not count' (✉?) from zero on the no-record synthetic"; else bad "statusline badge omitted ✉? for the no-record synthetic (a false zero would be indistinguishable from an empty mailbox)"; fi
   fi
-  SAMPLE_STATUSLINE_OUT="$(printf '%s' '{"session_id":"doctor-no-record","workspace":{"current_dir":"/tmp"},"model":{"id":"claude-sonnet-5"},"context_window":{"context_window_size":200000,"used_percentage":1,"current_usage":{"input_tokens":1}}}' | "$EXPECTED_STATUSLINE" 2>/dev/null || true)"
-  # The identity row may carry the #98 B unread badge between `cc` and the model letter:
-  # ` ✉N` when mail is waiting, nothing when the mailbox is empty, ` ✉?` when the count
-  # could not be taken. All three are healthy renders, so the shape test admits any of them.
-  if [ "$(printf '%s\n' "$SAMPLE_STATUSLINE_OUT" | wc -l | tr -d ' ')" = "2" ] && printf '%s\n' "$SAMPLE_STATUSLINE_OUT" | sed -n '1p' | grep -q 'tmp' && printf '%s\n' "$SAMPLE_STATUSLINE_OUT" | sed -n '2p' | grep -q '🪛' && printf '%s\n' "$SAMPLE_STATUSLINE_OUT" | sed -n '2p' | grep -qE ' cc( ✉([0-9]+|\?))? \| s'; then ok "statusline synthetic execution emits two rows (work context + identity)"; else bad "statusline synthetic execution failed or omitted two-row work/identity marker"; fi
-  # The synthetic feeds a session_id with no meta-record, so the garden id does not
-  # resolve and there is no mailbox to count. `✉?` is the required answer: a statusline
-  # that drew nothing there would be claiming "no mail" about a mailbox it never opened —
-  # the exact silence #98 was opened to remove.
-  if printf '%s\n' "$SAMPLE_STATUSLINE_OUT" | sed -n '2p' | grep -q '✉?'; then ok "statusline badge distinguishes 'could not count' (✉?) from zero on the no-record synthetic"; else bad "statusline badge omitted ✉? for the no-record synthetic (a false zero would be indistinguishable from an empty mailbox)"; fi
 else
   bad "cannot validate statusline without python3"
 fi
@@ -669,9 +725,12 @@ PY
     [ -n "$LIVE_MCP_DESC" ] || LIVE_MCP_DESC="(unprintable live command)"
     # Ownership axis. `|| true` on the pipeline only: a state.py failure must read as
     # UNKNOWN-and-loud below, never abort the doctor before the delivery drive.
-    DESIRED_MCP="$( { python3 "$REPO/scripts/meta-bridge-state.py" desired-mcp --repo "$REPO" \
+    DESIRED_MCP=""
+    [ -n "$MODE_ERR" ] || DESIRED_MCP="$( { python3 "$REPO/scripts/meta-bridge-state.py" desired-mcp --repo "$REPO" ${PLUGIN_ARGS[@]+"${PLUGIN_ARGS[@]}"} \
       | python3 -c 'import json,sys; print(json.dumps(json.load(sys.stdin), sort_keys=True))'; } 2>/dev/null || true)"
-    if [ -z "$DESIRED_MCP" ]; then
+    if [ -n "$MODE_ERR" ]; then
+      bad "live-vs-desired MCP ownership is UNKNOWN: the expectation mode was not established ($MODE_ERR)"
+    elif [ -z "$DESIRED_MCP" ]; then
       bad "could not compute the desired MCP entry (meta-bridge-state.py desired-mcp failed) — live-vs-desired ownership is UNKNOWN"
     elif [ "$LIVE_MCP" = "$DESIRED_MCP" ]; then
       ok "live mcpServers.entwurf-bridge equals desired_mcp() for this mode (installed: bin shim; clone: this checkout's start.sh)"

package/scripts/mutants/demo-reproducibility.json

@@ -0,0 +1,155 @@
+{
+	"schemaVersion": 1,
+	"lane": "demo-reproducibility",
+	"mutants": [
+		{
+			"claim": "DEMO-BASELINE-ARCHIVED",
+			"title": "the archived baseline resumes launching the retired scene and can overwrite the approved GIF",
+			"subject": "demo/demo-baseline.sh",
+			"find": ["exit 2"],
+			"replace": [":"],
+			"gate": ["bash", "run.sh", "check-demo-reproducibility"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:DEMO-BASELINE-ARCHIVED]",
+			"signatureSource": "demo/maintenance-guards.test.ts"
+		},
+		{
+			"claim": "DEMO-PEER-ARCHIVED",
+			"title": "the archived peer scene becomes a second runnable v1 route again",
+			"subject": "demo/demo.sh",
+			"find": ["exit 2"],
+			"replace": [":"],
+			"gate": ["bash", "run.sh", "check-demo-reproducibility"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:DEMO-PEER-ARCHIVED]",
+			"signatureSource": "demo/maintenance-guards.test.ts"
+		},
+		{
+			"claim": "DEMO-LIVE-OPT-IN",
+			"title": "the Herdr scene reaches preflight without the explicit LIVE grant",
+			"subject": "demo/take-herdr-pi-cc.ts",
+			"find": ["if (process.env.LIVE !== \"1\")"],
+			"replace": ["if (false)"],
+			"gate": ["bash", "run.sh", "check-demo-reproducibility"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:DEMO-LIVE-OPT-IN]",
+			"signatureSource": "demo/maintenance-guards.test.ts"
+		},
+		{
+			"claim": "DEMO-PUBLISHED-PROVENANCE",
+			"title": "the tracked provenance names another GIF digest while the approved pixels stay unchanged",
+			"subject": "demo/herdr-pi-cc-20261011.provenance.json",
+			"find": ["\t\t\"sha256\": \"b686739b5c68fa458dd47c844711aea0f6ab5819eb3eb5d2850449922fa084c0\","],
+			"replace": ["\t\t\"sha256\": \"0000000000000000000000000000000000000000000000000000000000000000\","],
+			"gate": ["bash", "run.sh", "check-demo-reproducibility"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:DEMO-PUBLISHED-PROVENANCE]",
+			"signatureSource": "demo/maintenance-guards.test.ts"
+		},
+		{
+			"claim": "DEMO-PACK-SOURCE-ONLY",
+			"title": "a directory allowlist ships maintainer TypeScript as if it were an installed entrypoint",
+			"subject": "package.json",
+			"find": [
+				"\t\t\"demo/README.md\",",
+				"\t\t\"demo/herdr-pi-cc-20261011.provenance.json\",",
+				"\t\t\"!demo/**/*.ts\","
+			],
+			"replace": ["\t\t\"demo/\","],
+			"gate": ["bash", "run.sh", "check-demo-reproducibility"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:DEMO-PACK-SOURCE-ONLY]",
+			"signatureSource": "demo/maintenance-guards.test.ts"
+		},
+		{
+			"claim": "DEMO-PUBLICATION-DESTINATION",
+			"title": "a live-pass renderer can overwrite publication assets through a direct or aliased destination",
+			"subject": "demo/render-take.ts",
+			"find": ["\tif (isPublicationOutput(out))"],
+			"replace": ["\tif (false)"],
+			"gate": ["bash", "run.sh", "check-demo-reproducibility"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:DEMO-PUBLICATION-DESTINATION]",
+			"signatureSource": "demo/maintenance-guards.test.ts"
+		},
+		{
+			"claim": "DEMO-TMUX-SUBJECT-TAIL",
+			"title": "the tmux tail trimmer drops real subject text merged with the terminal teardown",
+			"subject": "demo/render-take.ts",
+			"find": ["\t\tisOnlyCsi(teardown[2])"],
+			"replace": ["\t\ttrue"],
+			"gate": ["bash", "run.sh", "check-demo-reproducibility"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:DEMO-TMUX-SUBJECT-TAIL]",
+			"signatureSource": "demo/render-take.test.ts"
+		},
+		{
+			"claim": "DEMO-RECORDING-REQUIRED",
+			"title": "no recorder means no assertion, so an empty capture again certifies live-pass",
+			"subject": "demo/lib/take-recorder.ts",
+			"find": [
+				"\t\tthis.step(",
+				"\t\t\t\"the recording ran until the take ended and the recorder stopped cleanly (no cut, no signal, exit 0)\","
+			],
+			"replace": [
+				"\t\tif (recorder) this.step(",
+				"\t\t\t\"the recording ran until the take ended and the recorder stopped cleanly (no cut, no signal, exit 0)\","
+			],
+			"gate": ["bash", "run.sh", "check-demo-reproducibility"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:DEMO-RECORDING-REQUIRED]",
+			"signatureSource": "demo/lib/take-recorder.test.ts"
+		},
+		{
+			"claim": "DEMO-TEST-DISCOVERY",
+			"title": "a dead discovery glob produces no tests but the demo floor is still invoked",
+			"subject": "run.sh",
+			"find": [
+				"  while IFS= read -r f; do [ -n \"$f\" ] && tests+=(\"$f\"); done < <(cd \"$REPO_DIR\" && find demo -type f -name '*.test.ts' -print | LC_ALL=C sort)"
+			],
+			"replace": [
+				"  while IFS= read -r f; do [ -n \"$f\" ] && tests+=(\"$f\"); done < <(cd \"$REPO_DIR\" && find demo -type f -name '*.test.NO-MATCH' -print | LC_ALL=C sort)"
+			],
+			"gate": ["bash", "run.sh", "check-demo-reproducibility"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:DEMO-TEST-DISCOVERY]",
+			"signatureSource": "run.sh"
+		},
+		{
+			"claim": "DEMO-NO-EARLY-RESOURCES",
+			"title": "a Take allocated before missing-LIVE refusal writes resources without calling any fake tool",
+			"subject": "demo/take-pi-cc.ts",
+			"find": ["if (process.env.LIVE !== \"1\") {"],
+			"replace": [
+				"if (process.env.LIVE !== \"1\") {",
+				"\tnew Take({ label: LABEL, repo: REPO, cols: 132, rows: 38 });"
+			],
+			"gate": ["bash", "run.sh", "check-demo-reproducibility"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:DEMO-NO-EARLY-RESOURCES]",
+			"signatureSource": "demo/maintenance-guards.test.ts"
+		},
+		{
+			"claim": "DEMO-ORIGINAL-RENDER-INPUT",
+			"title": "rerendering replaces the original approved GIF's exact agg input inside the take directory",
+			"subject": "demo/render-take.ts",
+			"find": ["\tconst renderCast = path.join(path.dirname(out), `.${path.basename(out)}.${tag}.render.cast`);"],
+			"replace": ["\tconst renderCast = path.join(takeDir, \"take.render.cast\");"],
+			"gate": ["bash", "run.sh", "check-demo-reproducibility"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:DEMO-ORIGINAL-RENDER-INPUT]",
+			"signatureSource": "demo/render-take.test.ts"
+		},
+		{
+			"claim": "DEMO-RAIL-POLICY",
+			"title": "the pi-durable scene stops refusing an OpenRouter base-URL redirect, so LIVE=1 could spend a sibling turn through OpenRouter",
+			"subject": "demo/take-pi-durable.ts",
+			"find": ["const routedVia = openRouterOverride(process.env);"],
+			"replace": ["const routedVia = null;"],
+			"gate": ["bash", "run.sh", "check-demo-reproducibility"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:DEMO-RAIL-POLICY]",
+			"signatureSource": "demo/maintenance-guards.test.ts"
+		}
+	]
+}

package/scripts/mutants/herdr-activation.json

@@ -351,6 +351,77 @@
 			"timeoutSeconds": 300,
 			"signature": "[QK:HAC-LEDGER-PATH-KIND]",
 			"signatureSource": "scripts/check-herdr-activation.ts"
+		},
+		{
+			"claim": "DOCTOR-MODE-DERIVED",
+			"title": "a resolver that never answers plugin mode leaves the doctor computing bare-bin expectations on a plugin-activated host, so the activation's correct absolute wiring is reported as drift and the supported route can never be certified (#136)",
+			"subject": "scripts/herdr-activation.mjs",
+			"find": ["\treturn activeDir;\n}"],
+			"replace": ["\treturn null;\n}"],
+			"gate": ["bash", "run.sh", "check-herdr-activation"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:DOCTOR-MODE-DERIVED]",
+			"signatureSource": "scripts/check-herdr-activation.ts"
+		},
+		{
+			"claim": "DOCTOR-MODE-CHECKOUT-NEVER-DERIVES",
+			"title": "dropping the runtime-package precondition lets a checkout's doctor read the plugin ledger and adopt its absolute wiring as its own expectations, so the checkout certifies a runtime it does not own (#136)",
+			"subject": "scripts/herdr-activation.mjs",
+			"find": ["\t\tif (!same) return null;"],
+			"replace": ["\t\tvoid same;"],
+			"gate": ["bash", "run.sh", "check-herdr-activation"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:DOCTOR-MODE-CHECKOUT-NEVER-DERIVES]",
+			"signatureSource": "scripts/check-herdr-activation.ts"
+		},
+		{
+			"claim": "DOCTOR-MODE-UNCERTIFIED-DIES",
+			"title": "swallowing the reader's refusal turns an uncertified ledger into 'not plugin mode', so a doctor silently falls back to bare expectations over a record nobody can vouch for (#136)",
+			"subject": "scripts/herdr-activation.mjs",
+			"find": [
+				"\tconst ledger = readCertifiedLedger(resolveActivationLayout(env));\n\tif (ledger === null) {\n\t\tif (override === undefined) return null;"
+			],
+			"replace": [
+				"\tlet ledger = null;\n\ttry {\n\t\tledger = readCertifiedLedger(resolveActivationLayout(env));\n\t} catch {\n\t\tledger = null;\n\t}\n\tif (ledger === null) {\n\t\tif (override === undefined || override !== undefined) return null;"
+			],
+			"gate": ["bash", "run.sh", "check-herdr-activation"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:DOCTOR-MODE-UNCERTIFIED-DIES]",
+			"signatureSource": "scripts/check-herdr-activation.ts"
+		},
+		{
+			"claim": "DOCTOR-MODE-OVERRIDE-AGREES",
+			"title": "an override that need not agree with the ledger lets any caller-named root become the doctor's expectation, so the doctor would certify absolute commands pointing anywhere (#136)",
+			"subject": "scripts/herdr-activation.mjs",
+			"find": ["\tif (override !== undefined && override !== activeDir) {"],
+			"replace": ["\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-herdr-activation"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:DOCTOR-MODE-OVERRIDE-AGREES]",
+			"signatureSource": "scripts/check-herdr-activation.ts"
+		},
+		{
+			"claim": "DOCTOR-PLUGIN-MODE-GREEN",
+			"title": "a doctor that resolves plugin mode but never passes it to its desired-state calls still expects bare bins, so the plugin activation's absolute wiring stays falsely red (#136). One mutant for the shared wire on purpose: omitting the mode at any single one of the three call sites also turns P1 red, but no per-site mutant proves that",
+			"subject": "scripts/meta-bridge-doctor.sh",
+			"find": ["    PLUGIN_ARGS=(--plugin-runtime \"$MODE_ROOT\")"],
+			"replace": ["    : \"$MODE_ROOT\""],
+			"gate": ["bash", "run.sh", "check-meta-doctor-oracle"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:DOCTOR-PLUGIN-MODE-GREEN]",
+			"signatureSource": "scripts/check-meta-doctor-oracle.sh",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "DOCTOR-MODE-ADMISSION-CLAUSES",
+			"title": "dropping the phase clause lets a ledger caught mid-activation or mid-teardown admit plugin mode, so the doctor certifies absolute wiring the activation has not finished writing or is already removing (#136)",
+			"subject": "scripts/herdr-activation.mjs",
+			"find": ["\tif (ledger.phase !== \"active\") refuse(`activation ledger phase is ${ledger.phase}, not active`);"],
+			"replace": ["\tvoid refuse;"],
+			"gate": ["bash", "run.sh", "check-herdr-activation"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:DOCTOR-MODE-ADMISSION-CLAUSES]",
+			"signatureSource": "scripts/check-herdr-activation.ts"
 		}
 	]
 }

package/scripts/mutants/release-gate.json

@@ -151,8 +151,12 @@
 			"claim": "QUALIFY-FILTER-READS-PUSH-RANGE",
 			"title": "the filter reads the tip commit instead of the two-dot push range - the exact misreading that once concluded four of the five historical qualification reds would have been skipped",
 			"subject": "scripts/ci-qualify-decide.sh",
-			"find": ["CHANGED=\"$(git -C \"$REPO_DIR\" diff --name-only \"$BEFORE\"..\"$HEAD_SHA\" 2>/dev/null)\""],
-			"replace": ["CHANGED=\"$(git -C \"$REPO_DIR\" diff --name-only \"$HEAD_SHA~1\"..\"$HEAD_SHA\" 2>/dev/null)\""],
+			"find": [
+				"CHANGED=\"$(git -C \"$REPO_DIR\" diff --no-renames --no-ext-diff --no-textconv --name-only \"$BEFORE\"..\"$HEAD_SHA\" 2>/dev/null)\""
+			],
+			"replace": [
+				"CHANGED=\"$(git -C \"$REPO_DIR\" diff --no-renames --no-ext-diff --no-textconv --name-only \"$HEAD_SHA~1\"..\"$HEAD_SHA\" 2>/dev/null)\""
+			],
 			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:QUALIFY-FILTER-READS-PUSH-RANGE]",
@@ -169,6 +173,28 @@
 			"signature": "[QK:QUALIFY-FILTER-REPLAYS-PAST-CATCHES]",
 			"signatureSource": "scripts/check-release-gate-outcomes.ts"
 		},
+		{
+			"claim": "QUALIFY-FILTER-SUBJECT-HUNKS",
+			"title": "data-subject hunk refinement collapses back to file identity, so a version-only pin repeats the unchanged mutant body",
+			"subject": "scripts/ci-qualify-decide.sh",
+			"find": ["\t\t\t\tif subject_find_untouched \"$file\"; then"],
+			"replace": ["\t\t\t\tif false; then"],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:QUALIFY-FILTER-SUBJECT-HUNKS]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
+		{
+			"claim": "QUALIFY-FILTER-TOML-ONLY-REFINEMENT",
+			"title": "Markdown/JSON data re-enter hunk refinement, so an out-of-find presence restatement or later duplicate JSON key skips a body whose mutant now survives",
+			"subject": "scripts/ci-qualify-decide.sh",
+			"find": ["\t\t\t\t\t*.toml) ;;"],
+			"replace": ["\t\t\t\t\t*.toml|*.json|*.md) ;;"],
+			"gate": ["bash", "run.sh", "check-release-gate-outcomes"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:QUALIFY-FILTER-TOML-ONLY-REFINEMENT]",
+			"signatureSource": "scripts/check-release-gate-outcomes.ts"
+		},
 		{
 			"claim": "MUX-LIFECYCLE-IS-RELEASE-MUST",
 			"title": "the integrated mux lifecycle stays listed but bypasses run_live_step, so a missing prerequisite returns SKIP into a branch that never classifies it and the cut reads green",

package/scripts/tsconfig.json

@@ -27,6 +27,7 @@
 	"include": [
 		"./**/*.ts",
 		"../test/**/*.ts",
+		"../demo/**/*.ts",
 		"../pi-extensions/lib/**/*.ts",
 		// The behavior-adjacent tests the root config just excluded (#119 V2). Listed at
 		// pi-extensions/** rather than pi-extensions/lib/** so a test beside an extension