@junghanacs/entwurf 0.34.2 → 0.35.1

package/scripts/check-gate-qualification.ts

@@ -3441,6 +3441,7 @@ let manifestCount: number;
 		"acp-launch-namespace": 2,
 		"acp-overlay": 1,
 		"acp-prompt-lifecycle": 15,
+		"acp-set-model-readback": 2,
 		"acp-stop-reason": 6,
 		"acp-stream-hooks": 10,
 		"acp-usage-accounting": 12,
@@ -3455,6 +3456,7 @@ let manifestCount: number;
 		"codex-native": 82,
 		"compaction-send-guard": 7,
 		"control-socket-disconnect": 4,
+		"demo-reproducibility": 12,
 		"copilot-birth": 19,
 		"copilot-launch": 14,
 		"pi-launch": 9,
@@ -3462,10 +3464,10 @@ let manifestCount: number;
 		"pi-bridge-sender": 4,
 		"pi-mcp-bridge": 2,
 		"pi-mcp-register": 3,
-		"pi-durable": 58,
+		"pi-durable": 65,
 		"copilot-receive": 20,
 		"entwurf-peers": 1,
-		"fresh-call-dispatch": 11,
+		"fresh-call-dispatch": 12,
 		"fresh-cut": 3,
 		"gate-qualification": 10,
 		"herdr-placement": 13,
@@ -3473,6 +3475,7 @@ let manifestCount: number;
 		"herdr-plugin-profile": 14,
 		"herdr-activation": 34,
 		"herdr-plugin-build": 20,
+		"herdr-dev-checkout": 4,
 		"herdr-runtime-bootstrap": 31,
 		"herdr-fresh-call": 38,
 		"herdr-supply": 11,
@@ -3493,16 +3496,16 @@ let manifestCount: number;
 		"omp-fresh": 24,
 		"omp-receive": 11,
 		"probe-ordering": 1,
-		"release-gate": 22,
+		"release-gate": 24,
 		"retired-sent-surface": 2,
 		"resume-args": 6,
-		"resume-launch-identity": 6,
+		"resume-launch-identity": 7,
 		"self-address": 8,
 		"setup-verdict": 14,
 		"source-install": 2,
 		"typing-call-fence": 1,
 		"v2-surface": 13,
-		"v2-visible-resume": 17,
+		"v2-visible-resume": 18,
 	};
 	const laneTally: Record<string, number> = {};
 	for (const man of manifests) laneTally[man.lane] = (laneTally[man.lane] ?? 0) + man.mutants.length;

package/scripts/check-probe-ordering.ts

@@ -174,7 +174,7 @@ function makeRecordingConnection(calls: RecordedCall[]): AcpConnectionLike {
 		},
 		setSessionConfigOption: async (params) => {
 			calls.push({ method: "setSessionConfigOption", params });
-			return {};
+			return { configOptions: [{ id: "model", currentValue: (params as { value?: unknown }).value }] };
 		},
 		prompt: async (params) => {
 			calls.push({ method: "prompt", params });
@@ -381,12 +381,19 @@ function makeRecordingConnection(calls: RecordedCall[]): AcpConnectionLike {
 		"backend.ts still sends the clientInfo the probe mirrors",
 	);
 	// The claude adapter's enforceModel wire shape — the LIVE probe executes THIS
-	// method (emitted twin), so its shape is pinned where it lives.
+	// method (emitted twin), so its shape is pinned where it lives. Sliced to the claude
+	// adapter: the cortex adapter makes the same call, and must not satisfy this pin.
+	const claudeAdapterSrc = ADAPTER_SRC.slice(
+		ADAPTER_SRC.indexOf("export const claudeAdapter"),
+		ADAPTER_SRC.indexOf("export const cortexAdapter"),
+	);
 	assert.ok(
-		ADAPTER_SRC.includes(
-			'await setConfig.call(connection, { sessionId: acpSessionId, configId: "model", value: nativeModelId });',
-		),
-		'claudeAdapter.enforceModel still sends setSessionConfigOption({configId:"model"})',
+		claudeAdapterSrc.length > 0 &&
+			claudeAdapterSrc.includes(
+				'await setConfig.call(connection, {\n\t\t\tsessionId: acpSessionId,\n\t\t\tconfigId: "model",\n\t\t\tvalue: nativeModelId,\n\t\t});',
+			) &&
+			claudeAdapterSrc.includes("confirmClaudeSetModelAnswer(answer, nativeModelId);"),
+		'claudeAdapter.enforceModel still sends setSessionConfigOption({configId:"model"}) and reads its answer back',
 	);
 
 	// Permission policy: the runner's copy must mirror backend.ts's private

package/scripts/check-release-gate-outcomes.ts

@@ -43,7 +43,7 @@
 // Pure + subprocess, no network/model — IN pnpm run check:full.
 
 import { strict as assert } from "node:assert";
-import { execFileSync } from "node:child_process";
+import { execFileSync, spawnSync } from "node:child_process";
 import { copyFileSync, globSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { basename, join } from "node:path";
@@ -650,6 +650,164 @@ function runSubcommand(sub: string, env: Record<string, string | undefined>): {
 	}
 }
 
+// ===========================================================================
+// 8g. #137: TOML data-subject hunks, not path identity; Markdown/JSON data and
+// code/signatures/machinery remain file-level. Hermetic like 8f: real history is NOT
+// in a qualification snapshot.
+// ==========================================================================
+{
+	const tmp = mkdtempSync(join(tmpdir(), "entwurf-qualify-hunks-"));
+	const git = (...args: string[]) =>
+		execFileSync("git", ["-c", "core.hooksPath=/dev/null", "-c", "user.email=g@e", "-c", "user.name=g", ...args], {
+			cwd: tmp,
+			stdio: "ignore",
+		});
+	const head = () => execFileSync("git", ["rev-parse", "HEAD"], { cwd: tmp, encoding: "utf8" }).trim();
+	const data = 'version = "1"\n[[panes]]\ncommand = ["node", "build.mjs"]\n# outside\n';
+	const wrong: string[] = [];
+	try {
+		git("init", "-q", "-b", "main");
+		mkdirSync(join(tmp, "scripts/mutants"), { recursive: true });
+		mkdirSync(join(tmp, "fixture"));
+		mkdirSync(join(tmp, "scripts/fixtures"));
+		copyFileSync(join(REPO_DIR, "scripts/ci-qualify-decide.sh"), join(tmp, "scripts/ci-qualify-decide.sh"));
+		const manifest = JSON.stringify({
+			mutants: [
+				{ subject: "fixture/data.toml", find: ["[[panes]]"] },
+				{ subject: "fixture/data.toml", find: ['command = ["node", "build.mjs"]'] },
+				{ subject: "fixture/data.toml", find: ["[[panes]]", 'command = ["node", "build.mjs"]'] },
+				{ subject: "fixture/code.ts", find: ["return 1"], signatureSource: "fixture/signature.md" },
+				{ subject: "fixture/signature.md", find: ["signature"] },
+				{ subject: "fixture/joined.toml", find: ["alpha = 1", "beta = 2"] },
+				{ subject: "fixture/doc.md", find: ["Legacy rows are documented: kept for history."] },
+				{ subject: "fixture/reg.json", find: ['"mode": "self-fetch",'] },
+				{ subject: "scripts/fixtures/pin.json", find: ['"pinned": 1'] },
+				{ subject: "scripts/ci-qualify-decide.sh", find: ["set -euo pipefail"] },
+			],
+		});
+		writeFileSync(join(tmp, "scripts/mutants/fixture.json"), manifest);
+		writeFileSync(join(tmp, "fixture/data.toml"), data);
+		writeFileSync(join(tmp, "fixture/code.ts"), "// outside\nfunction f() { return 1; }\n");
+		writeFileSync(join(tmp, "fixture/signature.md"), "signature\n# outside\n");
+		writeFileSync(join(tmp, "fixture/joined.toml"), "version = 1\nalpha = 1\nbeta = 2\n");
+		const doc = "# Doc\nLegacy rows are documented: kept for history.\n# outside\n";
+		const reg = '{\n"copilot": {\n"mode": "self-fetch",\n"level": 6\n}\n}\n';
+		writeFileSync(join(tmp, "fixture/doc.md"), doc);
+		writeFileSync(join(tmp, "fixture/reg.json"), reg);
+		writeFileSync(join(tmp, "scripts/fixtures/pin.json"), '{\n"version": 1,\n"pinned": 1\n}\n');
+		git("add", "-A");
+		git("commit", "-qm", "seed");
+		const base = head();
+		const nonToml: string[] = [];
+		const check = (name: string, expected: boolean, reason?: string, before = base, into = wrong) => {
+			const r = spawnSync("bash", [join(tmp, "scripts/ci-qualify-decide.sh"), before, head()], {
+				cwd: tmp,
+				encoding: "utf8",
+				env: { ...process.env, CI_EVENT_NAME: "push", CI_FORCED: "false" },
+			});
+			if (r.status !== 0 || r.stdout.trim() !== `run_body=${expected}` || (reason && !r.stderr.includes(reason)))
+				into.push(`${name}: status=${r.status}, out=${r.stdout.trim()}, err=${r.stderr.trim()}`);
+		};
+		const commit = () => {
+			git("add", "-A");
+			git("commit", "-qm", "cell");
+		};
+		const reset = () => git("reset", "--hard", base); // ONLY this test-owned throwaway repository.
+		writeFileSync(join(tmp, "fixture/data.toml"), data.replace('version = "1"', 'version = "2"'));
+		commit();
+		check("outside", false, "fixture/data.toml: no find range touched");
+		// A replay must read HEAD's manifest, not an unrelated dirty worktree's find.
+		writeFileSync(
+			join(tmp, "scripts/mutants/fixture.json"),
+			'{"mutants":[{"subject":"fixture/data.toml","find":["version"]}]}',
+		);
+		check("HEAD manifest, not dirty worktree", false);
+		reset();
+		for (const [name, content] of [
+			["panes line", data.replace("[[panes]]", "[[panes]] # changed")],
+			["command line", data.replace('command = ["node", "build.mjs"]', 'command = ["node", "build.mjs"] # changed')],
+			["moved", `# inserted above\n${data}`],
+			["ambiguous", `${data}[[panes]]\n`],
+			["missing find", data.replace("[[panes]]", "[[other]]")],
+		] as const) {
+			writeFileSync(join(tmp, "fixture/data.toml"), content);
+			commit();
+			check(name, true);
+			reset();
+		}
+		git("rm", "fixture/data.toml");
+		commit();
+		check("deleted subject", true);
+		reset();
+		git("mv", "fixture/data.toml", "fixture/renamed.toml");
+		commit();
+		check("renamed subject", true);
+		reset();
+		writeFileSync(join(tmp, "fixture/code.ts"), "// outside changed\nfunction f() { return 1; }\n");
+		commit();
+		check("code outside find remains file-level", true);
+		reset();
+		writeFileSync(join(tmp, "fixture/signature.md"), "signature\n# outside changed\n");
+		commit();
+		check("signature also data subject remains file-level", true);
+		reset();
+		writeFileSync(join(tmp, "fixture/joined.toml"), "version = 1\nalpha = 1\nbeta = 2 # changed\n");
+		commit();
+		check("only multiline find, second line touched", true);
+		reset();
+		writeFileSync(join(tmp, "scripts/fixtures/pin.json"), '{\n"version": 2,\n"pinned": 1\n}\n');
+		commit();
+		check("machinery also data subject remains file-level", true);
+		reset();
+		writeFileSync(
+			join(tmp, "scripts/ci-qualify-decide.sh"),
+			`${readFileSync(join(tmp, "scripts/ci-qualify-decide.sh"), "utf8")}\n# outside find\n`,
+		);
+		commit();
+		check("machinery also subject remains file-level", true);
+		reset();
+		// Outside an untouched exact-once span, a shorter presence literal (measured on DELIVERY.md)
+		// or a later JSON duplicate key (JSON.parse: last wins) can re-satisfy the oracle.
+		writeFileSync(join(tmp, "fixture/doc.md"), `${doc}Legacy rows are documented\n`);
+		commit();
+		check("markdown restatement outside find", true, "conservative:", base, nonToml);
+		reset();
+		writeFileSync(
+			join(tmp, "fixture/reg.json"),
+			reg.replace("6\n}\n}\n", '6\n},\n"copilot": { "level": 6, "mode": "self-fetch" }\n}\n'),
+		);
+		commit();
+		check("json duplicate key outside find", true, "conservative:", base, nonToml);
+		reset();
+		// The first quoted name must still fail open after a >pipe-buffer list:
+		// printf | grep -q can lose its match to SIGPIPE under pipefail.
+		writeFileSync(join(tmp, '000"quoted'), "x\n");
+		for (let i = 0; i < 768; i++) writeFileSync(join(tmp, "fixture", `${i}_${"x".repeat(180)}.txt`), "x\n");
+		commit();
+		check("large quoted changed-name list", true, "quoted changed path cannot be read honestly");
+		reset();
+		check("unreadable range", true, "fail-open 4", "f".repeat(40));
+		git("rm", "scripts/mutants/fixture.json");
+		commit();
+		check("missing manifests", true);
+		assert.ok(
+			wrong.length === 0,
+			"[QK:QUALIFY-FILTER-SUBJECT-HUNKS] only untouched, unmoved, exact-once TOML find ranges may skip; " +
+				"unknown ranges run, and code/signature/machinery retain file-level protection. " +
+				wrong.join("; "),
+		);
+		assert.ok(
+			nonToml.length === 0,
+			"[QK:QUALIFY-FILTER-TOML-ONLY-REFINEMENT] Markdown and JSON subjects stay file-level: an untouched exact-once " +
+				"find does not pin kill-power when a shorter presence literal or a later duplicate JSON key outside it can " +
+				"re-satisfy the oracle. " +
+				nonToml.join("; "),
+		);
+	} finally {
+		rmSync(tmp, { recursive: true, force: true });
+	}
+}
+
 // ===========================================================================
 // 9. Every gate a mutant manifest NAMES runs inside `pnpm run check:full`
 //

package/scripts/check-resume-launch-identity.ts

@@ -42,6 +42,7 @@ import assert from "node:assert/strict";
 import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
+import { AcpModelNotCuratedError } from "../pi-extensions/lib/acp/model-ids.js";
 import { serializeMetaIdentity, upsertMetaSession } from "../pi-extensions/lib/meta-session.ts";
 import {
 	ResumeBackendUnsupportedError,
@@ -162,6 +163,43 @@ function main(): void {
 			);
 		}
 
+		// 4d. #128 — the second EXPECTED refusal. Under the `entwurf` provider Pi resolves `--model`
+		// by substring, so a retired Claude 5 id would reopen on a Cortex row. The pair judged is the
+		// one the launch would EMIT: a bare Claude id recorded under another provider is routed to
+		// `entwurf` too, so judging the recorded provider alone would let that one through.
+		{
+			const acpModelLine = (provider: string, modelId: string): string =>
+				`${JSON.stringify({ type: "model_change", provider, modelId })}\n`;
+			const settle = (gid: string): { identity?: ReturnType<typeof resolveResumeLaunchIdentity>; err?: unknown } => {
+				try {
+					return { identity: resolveResumeLaunchIdentity(gid) };
+				} catch (err) {
+					return { err };
+				}
+			};
+			const minted = (native: string, name: string, provider: string, modelId: string): string =>
+				mintRecord(native, writeTranscript(name, sessionLine(native) + acpModelLine(provider, modelId)));
+			const retired = settle(
+				minted("0199a5a5-1111-4222-8333-444455556666", "acp-retired.jsonl", "entwurf", "claude-sonnet-5"),
+			);
+			const routed = settle(
+				minted("0199b5b5-1111-4222-8333-444455556666", "acp-routed.jsonl", "anthropic", "claude-opus-5"),
+			);
+			const current = settle(
+				minted("0199c5c5-1111-4222-8333-444455556666", "acp-current.jsonl", "entwurf", "claude-sonnet-5-5"),
+			);
+			ok(
+				"4d: an entwurf-provider resume of a non-curated id is a TYPED refusal — recorded under entwurf, or a bare Claude id the launch would route to entwurf — while the exact 5.5 id resolves unchanged [QK:RESUME-ID-ACP-EXACT-CURATION]",
+				retired.err instanceof AcpModelNotCuratedError &&
+					retired.err.reason === "acp-model-not-curated" &&
+					retired.err.model === "claude-sonnet-5" &&
+					routed.err instanceof AcpModelNotCuratedError &&
+					routed.err.model === "claude-opus-5" &&
+					current.identity?.provider === "entwurf" &&
+					current.identity.model === "claude-sonnet-5-5",
+			);
+		}
+
 		const gidNoFile = mintRecord("0199dddd-1111-4222-8333-444455556666", null);
 		rejects(gidNoFile, "no recorded transcriptPath", "4: transcriptPath null → nothing to resume");
 

package/scripts/ci-qualify-decide.sh

@@ -28,37 +28,117 @@ fail_open() {
 }
 
 collect_paths_from_manifests() {
-	python3 - "$REPO_DIR" <<'PY'
+	python3 - "$REPO_DIR" "${1:-}" <<'PY'
 import glob
 import json
 import os
 import sys
+import subprocess
 
-repo = sys.argv[1]
-out = set()
-for path in sorted(glob.glob(os.path.join(repo, "scripts/mutants/*.json"))):
-	with open(path, encoding="utf-8") as handle:
-		manifest = json.load(handle)
+repo, rev = sys.argv[1:]
+def git(*args):
+	return subprocess.check_output(["git", "-C", repo, *args])
+paths = (git("ls-tree", "-r", "--name-only", rev, "scripts/mutants").decode().splitlines()
+	if rev else sorted(glob.glob(os.path.join(repo, "scripts/mutants/*.json"))))
+paths = [p for p in paths if p.endswith(".json")]
+if not paths:
+	raise ValueError("no mutant manifests")
+out, signatures, subjects = set(), set(), {}
+for path in paths:
+	if rev:
+		manifest = json.loads(git("show", f"{rev}:{path}"))
+	else:
+		with open(path, encoding="utf-8") as handle:
+			manifest = json.load(handle)
 	for mutant in manifest.get("mutants", []):
 		subject = mutant.get("subject")
 		if subject:
 			out.add(subject)
+			find = mutant.get("find")
+			# The runner joins a find ARRAY into ONE multiline occurrence.
+			needle = "\n".join(find) if isinstance(find, list) and all(isinstance(s, str) for s in find) else None
+			subjects.setdefault(subject, []).append(needle)
 		signature_source = mutant.get("signatureSource")
 		if signature_source:
 			out.add(signature_source)
-for entry in sorted(out):
-	print(entry)
+			signatures.add(signature_source)
+if not out or any(any(c in p for c in '\n\r\t"\\') for p in out):
+	raise ValueError("empty or unrepresentable manifest paths")
+print(json.dumps({"paths": sorted(out), "signatures": sorted(signatures), "subjects": subjects}))
 PY
 }
 
-# A changed path matters when it is a mutant's subject or signature source, or
-# when it sits in the machinery that decides what those mutants prove.
+load_manifest_surface() {
+	MANIFEST_DATA="$(collect_paths_from_manifests "${1:-}")" || fail_open 6 "missing/unreadable mutant manifests"
+	MANIFEST_PATHS="$(printf '%s' "$MANIFEST_DATA" | python3 -c 'import json,sys;print("\n".join(json.load(sys.stdin)["paths"]))')" || fail_open 6 "unreadable manifest paths"
+	SIGNATURE_PATHS="$(printf '%s' "$MANIFEST_DATA" | python3 -c 'import json,sys;print("\n".join(json.load(sys.stdin)["signatures"]))')" || fail_open 6 "unreadable signature paths"
+}
+
+# Return success ONLY when every exact-once TOML find span is demonstrably
+# untouched and unmoved on BOTH blobs. Any uncertainty leaves the body armed.
+subject_find_untouched() {
+	python3 - "$REPO_DIR" "$BEFORE" "$HEAD_SHA" "$1" 3<<< "$MANIFEST_DATA" <<'PY'
+import json
+import os
+import re
+import subprocess
+import sys
+
+repo, before, head, path = sys.argv[1:]
+def git(*args):
+	return subprocess.check_output(["git", "-C", repo, *args], stderr=subprocess.DEVNULL).decode("utf-8")
+def span(source, needle):
+	if not needle or source.count(needle) != 1:
+		raise ValueError("find absent or ambiguous")
+	start = source[:source.index(needle)].count("\n") + 1
+	return start, start + needle.count("\n") - int(needle.endswith("\n"))
+try:
+	finds = json.load(os.fdopen(3))["subjects"].get(path)
+	if not finds or any(not needle for needle in finds):
+		raise ValueError("missing find spans")
+	old, new = git("show", f"{before}:{path}"), git("show", f"{head}:{path}")
+	if "\0" in old or "\0" in new:
+		raise ValueError("binary subject")
+	diff = git("diff", "--no-renames", "--no-ext-diff", "--no-textconv", "--no-color", "-U0", before, head, "--", path)
+	if "Binary files " in diff or "GIT binary patch" in diff:
+		raise ValueError("binary diff")
+	hunks = []
+	for line in diff.splitlines():
+		if not line.startswith("@@"):
+			continue
+		match = re.fullmatch(r"@@ -(\d+)(?:,(\d+))? \+(\d+)(?:,(\d+))? @@(?: .*)?", line)
+		if not match:
+			raise ValueError("unreadable hunk")
+		a, b, c, d = match.groups()
+		hunks.append((int(a), int(b or 1), int(c), int(d or 1)))
+	if not hunks:
+		raise ValueError("no readable text hunks")
+	for needle in set(finds):
+		os_, oe = span(old, needle)
+		ns, ne = span(new, needle)
+		if (os_, oe) != (ns, ne):
+			raise ValueError("find range moved")
+		for a, b, c, d in hunks:
+			if (b > 0 and a <= oe and a + b - 1 >= os_) or (d > 0 and c <= ne and c + d - 1 >= ns):
+				raise ValueError("find range touched")
+except (ValueError, KeyError, TypeError, OSError, subprocess.SubprocessError) as error:
+	print(f"ci-qualify-decide: fail-open 7 {path}: {error} -> run_body=true", file=sys.stderr)
+	sys.exit(1)
+print(f"ci-qualify-decide: {path}: no find range touched (all exact-once spans unmoved)", file=sys.stderr)
+PY
+}
+
+# Signature sources and machinery MUST precede subjects: many paths are BOTH.
+# Code/unknown subjects retain file-level protection; only TOML data gets hunk
+# refinement (#137 non-goal: no skipping code/gate/mutant/matrix changes). TOML
+# refuses a redefined key, but a shorter Markdown presence literal or a later JSON
+# duplicate key outside an untouched find can still re-satisfy an oracle.
 matches_qualification_surface() {
 	local file="$1"
 	local subject
 	while IFS= read -r subject; do
-		[ "$file" = "$subject" ] && { echo "manifest-subject"; return 0; }
-	done <<< "$MANIFEST_PATHS"
+		[ "$file" = "$subject" ] && { echo "manifest-signature-source"; return 0; }
+	done <<< "$SIGNATURE_PATHS"
 	case "$file" in
 		scripts/mutants/*) echo "glob:scripts/mutants/**"; return 0 ;;
 		scripts/check-*) echo "glob:scripts/check-*"; return 0 ;;
@@ -73,6 +153,20 @@ matches_qualification_surface() {
 		# that stopped covering something cannot hide behind its own change.
 		scripts/ci-qualify-decide.sh) echo "exact:scripts/ci-qualify-decide.sh"; return 0 ;;
 	esac
+	while IFS= read -r subject; do
+		if [ "$file" = "$subject" ]; then
+			if [ "${MATCH_MODE:-files}" = range ]; then
+				case "$file" in
+					*.toml) ;;
+					*) echo "conservative:non-toml-subject"; return 0 ;;
+				esac
+				if subject_find_untouched "$file"; then
+					return 1
+				fi
+			fi
+			echo "manifest-subject"; return 0
+		fi
+	done <<< "$MANIFEST_PATHS"
 	return 1
 }
 
@@ -98,13 +192,12 @@ decide_from_files() {
 	fi
 }
 
-MANIFEST_PATHS="$(collect_paths_from_manifests)"
-[ -n "$MANIFEST_PATHS" ] || { echo "ABORT: no mutant manifests read from $REPO_DIR/scripts/mutants" >&2; exit 1; }
-
 if [ "${1:-}" = "--files-from" ]; then
+	MATCH_MODE=files
+	load_manifest_surface
 	SRC="${2:-}"
 	[ -n "$SRC" ] || { echo "ABORT: --files-from needs a path or -" >&2; exit 1; }
-	if [ "$SRC" = "-" ]; then FILES="$(cat)"; else FILES="$(cat "$SRC")"; fi
+	if [ "$SRC" = "-" ]; then FILES="$(cat)"; else FILES="$(cat "$SRC")"; fi || fail_open 4 "unreadable files-from input"
 	decide_from_files "$FILES"
 	exit 0
 fi
@@ -154,6 +247,10 @@ esac
 git -C "$REPO_DIR" cat-file -e "$BEFORE^{commit}" 2>/dev/null || fail_open 4 "before=$BEFORE is not a commit object in this checkout"
 git -C "$REPO_DIR" cat-file -e "$HEAD_SHA^{commit}" 2>/dev/null || fail_open 4 "head=$HEAD_SHA is not a commit object in this checkout"
 
-CHANGED="$(git -C "$REPO_DIR" diff --name-only "$BEFORE".."$HEAD_SHA" 2>/dev/null)" || fail_open 4 "git diff $BEFORE..$HEAD_SHA failed"
+MATCH_MODE=range
+load_manifest_surface "$HEAD_SHA"
+CHANGED="$(git -C "$REPO_DIR" diff --no-renames --no-ext-diff --no-textconv --name-only "$BEFORE".."$HEAD_SHA" 2>/dev/null)" || fail_open 4 "git diff $BEFORE..$HEAD_SHA failed"
+# Git quotes unrepresentable changed names; never interpret those as absent paths.
+if grep -q '^"' <<< "$CHANGED"; then fail_open 4 "quoted changed path cannot be read honestly"; fi
 
 decide_from_files "$CHANGED"

package/scripts/mutants/acp-cortex.json

@@ -5,21 +5,21 @@
 		{
 			"claim": "CORTEX-CURATED-FOUR-ROWS",
 			"title": "dropping a curated row silently shrinks the GLG-decided 4-row cortex surface",
-			"subject": "pi-extensions/lib/acp/models.ts",
+			"subject": "pi-extensions/lib/acp/model-ids.js",
 			"find": [
-				"export const SUPPORTED_CORTEX_MODEL_IDS = [",
+				"export const SUPPORTED_CORTEX_MODEL_IDS = /** @type {const} */ ([",
 				"\t\"cortex-auto\",",
 				"\t\"cortex-claude-opus-5\",",
 				"\t\"cortex-claude-sonnet-5\",",
 				"\t\"cortex-openai-gpt-5.4\",",
-				"] as const;"
+				"]);"
 			],
 			"replace": [
-				"export const SUPPORTED_CORTEX_MODEL_IDS = [",
+				"export const SUPPORTED_CORTEX_MODEL_IDS = /** @type {const} */ ([",
 				"\t\"cortex-auto\",",
 				"\t\"cortex-claude-sonnet-5\",",
 				"\t\"cortex-openai-gpt-5.4\",",
-				"] as const;"
+				"]);"
 			],
 			"gate": ["bash", "run.sh", "check-acp-cortex"],
 			"timeoutSeconds": 300,
@@ -29,11 +29,20 @@
 		{
 			"claim": "CLAUDE-CURATED-THREE-ROWS",
 			"title": "dropping a curated CLAUDE row shrinks the operator's model list while the exact-set comparison stays green — expected derives from the same constant, so only the independent count catches it",
-			"subject": "pi-extensions/lib/acp/models.ts",
+			"subject": "pi-extensions/lib/acp/model-ids.js",
 			"find": [
-				"export const SUPPORTED_ANTHROPIC_MODEL_IDS = [\"claude-sonnet-5\", \"claude-opus-5\", \"claude-fable-5-1\"] as const;"
+				"export const SUPPORTED_ANTHROPIC_MODEL_IDS = /** @type {const} */ ([",
+				"\t\"claude-sonnet-5-5\",",
+				"\t\"claude-opus-5-5\",",
+				"\t\"claude-fable-5-1\",",
+				"]);"
+			],
+			"replace": [
+				"export const SUPPORTED_ANTHROPIC_MODEL_IDS = /** @type {const} */ ([",
+				"\t\"claude-sonnet-5-5\",",
+				"\t\"claude-opus-5-5\",",
+				"]);"
 			],
-			"replace": ["export const SUPPORTED_ANTHROPIC_MODEL_IDS = [\"claude-sonnet-5\", \"claude-opus-5\"] as const;"],
 			"gate": ["bash", "run.sh", "check-acp-provider-surface"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:CLAUDE-CURATED-THREE-ROWS]",

package/scripts/mutants/acp-set-model-readback.json

@@ -0,0 +1,28 @@
+{
+	"schemaVersion": 1,
+	"lane": "acp-set-model-readback",
+	"mutants": [
+		{
+			"claim": "ACP-CLAUDE-SET-MODEL-READBACK",
+			"title": "the claude set-model answer is no longer read back — a missing model option or another row reaches the prompt, so a different model answers under the requested id",
+			"subject": "pi-extensions/lib/acp/backend-adapter.ts",
+			"find": ["\t\tconfirmClaudeSetModelAnswer(answer, nativeModelId);"],
+			"replace": ["\t\tvoid answer;"],
+			"gate": ["bash", "run.sh", "check-acp-set-model-readback"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:ACP-CLAUDE-SET-MODEL-READBACK]",
+			"signatureSource": "pi-extensions/lib/acp/backend-adapter.test.ts"
+		},
+		{
+			"claim": "ACP-CLAUDE-SET-MODEL-ALIAS-EXACT",
+			"title": "an alias answer is matched by row name alone — the `default` row or a retired id's row carrying the 5.5 name answers silently under the 5.5 id",
+			"subject": "pi-extensions/lib/acp/backend-adapter.ts",
+			"find": ["\tif (alias !== undefined && currentValue === alias.value && selected?.name === alias.name) return;"],
+			"replace": ["\tif (alias !== undefined && selected?.name === alias.name) return;"],
+			"gate": ["bash", "run.sh", "check-acp-set-model-readback"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:ACP-CLAUDE-SET-MODEL-ALIAS-EXACT]",
+			"signatureSource": "pi-extensions/lib/acp/backend-adapter.test.ts"
+		}
+	]
+}