@junghanacs/entwurf 0.35.0 → 0.35.1

package/scripts/check-acp-session-reuse.ts

@@ -51,8 +51,8 @@ function tctx(messages: Context["messages"]): TranscriptContext {
 	return normalizeContext({ tools: PI_DECLARED_TOOLS, messages });
 }
 
-const sonnet = { id: "claude-sonnet-5" } as unknown as Model<Api>;
-const opus = { id: "claude-opus-5" } as unknown as Model<Api>;
+const sonnet = { id: "claude-sonnet-5-5" } as unknown as Model<Api>;
+const opus = { id: "claude-opus-5-5" } as unknown as Model<Api>;
 
 type Stream = AsyncIterable<AssistantMessageEvent> & {
 	result: () => Promise<{ stopReason: string; errorMessage?: string }>;
@@ -154,7 +154,7 @@ function makeHarness(recordDir: string, config: any = DEFAULT_RESOLVED_CONFIG, e
 			newSessionSeq++;
 			return { sessionId: `ACP-${newSessionSeq}` };
 		},
-		setSessionConfigOption: async () => ({}),
+		setSessionConfigOption: async (p: any) => ({ configOptions: [{ id: "model", currentValue: p.value }] }),
 		prompt: async ({ sessionId, prompt }: any) => {
 			promptCalls.push({ sessionId, text: prompt.map((b: { text: string }) => b.text).join("\n") });
 			if (block) await block;
@@ -505,7 +505,7 @@ try {
 		);
 		const d1 = deltaText(t1);
 		const iPrep = d1.indexOf("[acp: preparing claude session]");
-		const iReady = d1.indexOf("[acp: session ready model=claude-sonnet-5]");
+		const iReady = d1.indexOf("[acp: session ready model=claude-sonnet-5-5]");
 		const iSent = d1.indexOf("[acp: sending prompt]");
 		assert.ok(
 			iPrep >= 0 && iReady > iPrep && iSent > iReady,
@@ -533,7 +533,7 @@ try {
 		const ctxWithNotice = tctx([
 			{ role: "user", content: "real user line", timestamp: 0 },
 			mkAssistant([
-				{ type: "text", text: "\n[acp: session ready model=claude-sonnet-5]\n", textSignature: MARKER },
+				{ type: "text", text: "\n[acp: session ready model=claude-sonnet-5-5]\n", textSignature: MARKER },
 				{ type: "text", text: "real assistant line" },
 			]),
 		]);

package/scripts/check-acp-stop-reason.ts

@@ -55,7 +55,7 @@ import { pathToFileURL } from "node:url";
 import type { Api, AssistantMessageEvent, Model } from "@earendil-works/pi-ai";
 import { normalizeContext } from "@earendil-works/pi-ai";
 
-const sonnet = { id: "claude-sonnet-5" } as unknown as Model<Api>;
+const sonnet = { id: "claude-sonnet-5-5" } as unknown as Model<Api>;
 
 type Stream = AsyncIterable<AssistantMessageEvent> & {
 	result: () => Promise<{ stopReason: string; errorMessage?: string }>;
@@ -124,7 +124,7 @@ function makeHarness(recordDir: string, wireReason: string | null) {
 		createConnection: (_child: any, handlers: any) => ({
 			initialize: async () => ({ agentCapabilities: {} }),
 			newSession: async () => ({ sessionId: "ACP-1" }),
-			setSessionConfigOption: async () => ({}),
+			setSessionConfigOption: async (p: any) => ({ configOptions: [{ id: "model", currentValue: p.value }] }),
 			prompt: async ({ sessionId }: any) => {
 				await handlers.sessionUpdate({
 					update: { sessionUpdate: "agent_message_chunk", content: { type: "text", text: "PARTIAL" } },

package/scripts/check-acp-stream-hooks.ts

@@ -35,7 +35,7 @@ import { pathToFileURL } from "node:url";
 import type { Api, AssistantMessageEvent, Message, Model, TranscriptContext } from "@earendil-works/pi-ai";
 import { normalizeContext } from "@earendil-works/pi-ai";
 
-const sonnet = { id: "claude-sonnet-5" } as unknown as Model<Api>;
+const sonnet = { id: "claude-sonnet-5-5" } as unknown as Model<Api>;
 
 type Stream = AsyncIterable<AssistantMessageEvent>;
 
@@ -93,7 +93,7 @@ function makeHarness(recordDir: string) {
 	const makeConnection = (_handlers: any) => ({
 		initialize: async () => ({ agentCapabilities: {} }),
 		newSession: async () => ({ sessionId: "ACP-1" }),
-		setSessionConfigOption: async () => ({}),
+		setSessionConfigOption: async (p: any) => ({ configOptions: [{ id: "model", currentValue: p.value }] }),
 		prompt: async (params: any) => {
 			// Deep-cloned: the capture must be the bytes that crossed the seam, not a
 			// live reference a later mutation could rewrite.

package/scripts/check-acp-usage-accounting.ts

@@ -61,7 +61,7 @@ import type {
 import { isContextOverflow, normalizeContext } from "@earendil-works/pi-ai";
 import { calculateContextTokens } from "@earendil-works/pi-coding-agent";
 
-const claude = { id: "claude-sonnet-5" } as unknown as Model<Api>;
+const claude = { id: "claude-sonnet-5-5" } as unknown as Model<Api>;
 const cortex = { id: "cortex-auto" } as unknown as Model<Api>;
 
 type Stream = AsyncIterable<AssistantMessageEvent>;
@@ -160,7 +160,7 @@ function makeHarness(recordDir: string, scripts: TurnScript[]) {
 			newSessionCalls++;
 			return { sessionId: "ACP-1" };
 		},
-		setSessionConfigOption: async () => ({}),
+		setSessionConfigOption: async (p: any) => ({ configOptions: [{ id: "model", currentValue: p.value }] }),
 		prompt: async ({ sessionId }: any) => {
 			const script = scripts[turnIndex++] ?? {};
 			const update: Record<string, unknown> = { sessionUpdate: "usage_update" };

package/scripts/check-fresh-call-dispatch.ts

@@ -26,6 +26,8 @@
  *   FCD-RENDER-PER-RAIL       each rail renders its own receipt; no universal tmux prose
  *   FCD-HERDR-VIEW-NOT-ADDRESS  the herdr receipt says its coordinates are a view
  *   FCD-RECOVERY-VISIBLE      a post-split failure shows closed vs orphan-unreclaimed:reason
+ *   FCD-ACP-MODEL-EXACT       a pi `entwurf/<id>` that is not an exact curated ACP id refuses on
+ *                             either rail before anything runs (#128)
  */
 
 import assert from "node:assert/strict";
@@ -112,10 +114,18 @@ async function main(): Promise<void> {
 	// Up to the FIRST statement of the tmux path, which is the target capability question
 	// (#95 lane B added a caller-side one beside it, so `const missing =` is no longer the
 	// boundary — it is the line that FOLDS the two).
-	const herdrBranch = dispatchCode.slice(
-		dispatchCode.indexOf('if (selectFreshCallRail(env) === "herdr")'),
-		dispatchCode.indexOf("\tconst targetMissing ="),
-	);
+	// Fail closed on the anchors: a renamed or reordered line would otherwise slice an EMPTY branch,
+	// and every negative `!herdrBranch.includes(…)` below would pass on nothing (#128 review D2).
+	// The slice ends at the herdr branch's OWN return, not at a tmux-path statement, so a mutant
+	// that edits the tmux path cannot move this boundary and fail this cell for its reason.
+	const herdrStart = dispatchCode.indexOf('if (selectFreshCallRail(env) === "herdr")');
+	const herdrReturn = 'return { rail: "herdr", result: await herdrFreshCall(';
+	const herdrReturnAt = dispatchCode.indexOf(herdrReturn);
+	const herdrBranch =
+		herdrStart >= 0 && herdrReturnAt > herdrStart
+			? dispatchCode.slice(herdrStart, herdrReturnAt + herdrReturn.length)
+			: "";
+	const herdrBranchLocated = herdrBranch.includes("herdrFreshCall(");
 
 	// ── no fallback, either direction ────────────────────────────────────────────────────
 	const incomplete = await dispatchFreshCall(REQUEST, { HERDR_ENV: "1" }, recordingSpawn().spawn);
@@ -124,6 +134,37 @@ async function main(): Promise<void> {
 		incomplete.rail === "herdr" && !incomplete.result.ok && incomplete.result.reason === "herdr-context-missing",
 	);
 
+	// ── #128: an entwurf/<id> pi launch names an EXACT curated ACP id ───────────────────────
+	{
+		const herdrSpawn = recordingSpawn();
+		const pi = (model: string) => ({ ...REQUEST, model });
+		const herdrRetired = await dispatchFreshCall(pi("entwurf/claude-sonnet-5"), HERDR_ENV, herdrSpawn.spawn);
+		const tmuxRetired = await dispatchFreshCall(pi(" entwurf/claude-opus-5 "), {}, recordingSpawn().spawn);
+		const current = recordingSpawn();
+		const herdrCurrent = await dispatchFreshCall(pi("entwurf/claude-opus-5-5"), HERDR_ENV, current.spawn);
+		const cortex = await dispatchFreshCall(pi("entwurf/cortex-claude-sonnet-5"), {}, recordingSpawn().spawn);
+		const otherBackend = await dispatchFreshCall(
+			{ ...REQUEST, backend: "claude-code", model: "entwurf/claude-sonnet-5" },
+			{},
+			recordingSpawn().spawn,
+		);
+		const reasonOf = (d: Awaited<ReturnType<typeof dispatchFreshCall>>) => (d.result.ok ? null : d.result.reason);
+		ok(
+			"[QK:FCD-ACP-MODEL-EXACT] a pi sibling under the entwurf provider must name an EXACT curated ACP id: a retired Claude 5 id refuses as acp-model-not-curated on BOTH rails (trimmed like the rails read it) before herdr is asked anything, while the 5.5 id and a Cortex id pass through and another backend is not judged — Pi would otherwise open the retired id on a Cortex row by substring",
+			herdrRetired.rail === "herdr" &&
+				reasonOf(herdrRetired) === "acp-model-not-curated" &&
+				herdrSpawn.calls.length === 0 &&
+				tmuxRetired.rail === "tmux" &&
+				reasonOf(tmuxRetired) === "acp-model-not-curated" &&
+				reasonOf(herdrCurrent) !== "acp-model-not-curated" &&
+				current.calls.length > 0 &&
+				reasonOf(cortex) !== "acp-model-not-curated" &&
+				reasonOf(otherBackend) !== "acp-model-not-curated" &&
+				renderDispatchedFreshCall(herdrRetired).text.includes("exact curated ACP id") &&
+				renderDispatchedFreshCall(tmuxRetired).text.includes("exact curated ACP id"),
+		);
+	}
+
 	const nonPilot = recordingSpawn();
 	const refused = await dispatchFreshCall({ ...REQUEST, backend: "codex" }, HERDR_ENV, nonPilot.spawn);
 	ok(
@@ -132,6 +173,7 @@ async function main(): Promise<void> {
 			!refused.result.ok &&
 			refused.result.reason === "herdr-backend-unsupported" &&
 			nonPilot.calls.length === 0 &&
+			herdrBranchLocated &&
 			// And structurally: the herdr branch names NEITHER capability preflight — not the
 			// target one, and not the caller-seat one #95 lane B put beside it.
 			!herdrBranch.includes("codexFreshPreflight") &&
@@ -153,6 +195,7 @@ async function main(): Promise<void> {
 			!durableRefused.result.ok &&
 			durableRefused.result.reason === "herdr-backend-unsupported" &&
 			durable.calls.length === 0 &&
+			herdrBranchLocated &&
 			!herdrBranch.includes("piDurable"),
 	);
 

package/scripts/check-gate-qualification.ts

@@ -3441,6 +3441,7 @@ let manifestCount: number;
 		"acp-launch-namespace": 2,
 		"acp-overlay": 1,
 		"acp-prompt-lifecycle": 15,
+		"acp-set-model-readback": 2,
 		"acp-stop-reason": 6,
 		"acp-stream-hooks": 10,
 		"acp-usage-accounting": 12,
@@ -3463,10 +3464,10 @@ let manifestCount: number;
 		"pi-bridge-sender": 4,
 		"pi-mcp-bridge": 2,
 		"pi-mcp-register": 3,
-		"pi-durable": 58,
+		"pi-durable": 65,
 		"copilot-receive": 20,
 		"entwurf-peers": 1,
-		"fresh-call-dispatch": 11,
+		"fresh-call-dispatch": 12,
 		"fresh-cut": 3,
 		"gate-qualification": 10,
 		"herdr-placement": 13,
@@ -3474,6 +3475,7 @@ let manifestCount: number;
 		"herdr-plugin-profile": 14,
 		"herdr-activation": 34,
 		"herdr-plugin-build": 20,
+		"herdr-dev-checkout": 4,
 		"herdr-runtime-bootstrap": 31,
 		"herdr-fresh-call": 38,
 		"herdr-supply": 11,
@@ -3497,13 +3499,13 @@ let manifestCount: number;
 		"release-gate": 24,
 		"retired-sent-surface": 2,
 		"resume-args": 6,
-		"resume-launch-identity": 6,
+		"resume-launch-identity": 7,
 		"self-address": 8,
 		"setup-verdict": 14,
 		"source-install": 2,
 		"typing-call-fence": 1,
 		"v2-surface": 13,
-		"v2-visible-resume": 17,
+		"v2-visible-resume": 18,
 	};
 	const laneTally: Record<string, number> = {};
 	for (const man of manifests) laneTally[man.lane] = (laneTally[man.lane] ?? 0) + man.mutants.length;

package/scripts/check-probe-ordering.ts

@@ -174,7 +174,7 @@ function makeRecordingConnection(calls: RecordedCall[]): AcpConnectionLike {
 		},
 		setSessionConfigOption: async (params) => {
 			calls.push({ method: "setSessionConfigOption", params });
-			return {};
+			return { configOptions: [{ id: "model", currentValue: (params as { value?: unknown }).value }] };
 		},
 		prompt: async (params) => {
 			calls.push({ method: "prompt", params });
@@ -381,12 +381,19 @@ function makeRecordingConnection(calls: RecordedCall[]): AcpConnectionLike {
 		"backend.ts still sends the clientInfo the probe mirrors",
 	);
 	// The claude adapter's enforceModel wire shape — the LIVE probe executes THIS
-	// method (emitted twin), so its shape is pinned where it lives.
+	// method (emitted twin), so its shape is pinned where it lives. Sliced to the claude
+	// adapter: the cortex adapter makes the same call, and must not satisfy this pin.
+	const claudeAdapterSrc = ADAPTER_SRC.slice(
+		ADAPTER_SRC.indexOf("export const claudeAdapter"),
+		ADAPTER_SRC.indexOf("export const cortexAdapter"),
+	);
 	assert.ok(
-		ADAPTER_SRC.includes(
-			'await setConfig.call(connection, { sessionId: acpSessionId, configId: "model", value: nativeModelId });',
-		),
-		'claudeAdapter.enforceModel still sends setSessionConfigOption({configId:"model"})',
+		claudeAdapterSrc.length > 0 &&
+			claudeAdapterSrc.includes(
+				'await setConfig.call(connection, {\n\t\t\tsessionId: acpSessionId,\n\t\t\tconfigId: "model",\n\t\t\tvalue: nativeModelId,\n\t\t});',
+			) &&
+			claudeAdapterSrc.includes("confirmClaudeSetModelAnswer(answer, nativeModelId);"),
+		'claudeAdapter.enforceModel still sends setSessionConfigOption({configId:"model"}) and reads its answer back',
 	);
 
 	// Permission policy: the runner's copy must mirror backend.ts's private

package/scripts/check-resume-launch-identity.ts

@@ -42,6 +42,7 @@ import assert from "node:assert/strict";
 import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
+import { AcpModelNotCuratedError } from "../pi-extensions/lib/acp/model-ids.js";
 import { serializeMetaIdentity, upsertMetaSession } from "../pi-extensions/lib/meta-session.ts";
 import {
 	ResumeBackendUnsupportedError,
@@ -162,6 +163,43 @@ function main(): void {
 			);
 		}
 
+		// 4d. #128 — the second EXPECTED refusal. Under the `entwurf` provider Pi resolves `--model`
+		// by substring, so a retired Claude 5 id would reopen on a Cortex row. The pair judged is the
+		// one the launch would EMIT: a bare Claude id recorded under another provider is routed to
+		// `entwurf` too, so judging the recorded provider alone would let that one through.
+		{
+			const acpModelLine = (provider: string, modelId: string): string =>
+				`${JSON.stringify({ type: "model_change", provider, modelId })}\n`;
+			const settle = (gid: string): { identity?: ReturnType<typeof resolveResumeLaunchIdentity>; err?: unknown } => {
+				try {
+					return { identity: resolveResumeLaunchIdentity(gid) };
+				} catch (err) {
+					return { err };
+				}
+			};
+			const minted = (native: string, name: string, provider: string, modelId: string): string =>
+				mintRecord(native, writeTranscript(name, sessionLine(native) + acpModelLine(provider, modelId)));
+			const retired = settle(
+				minted("0199a5a5-1111-4222-8333-444455556666", "acp-retired.jsonl", "entwurf", "claude-sonnet-5"),
+			);
+			const routed = settle(
+				minted("0199b5b5-1111-4222-8333-444455556666", "acp-routed.jsonl", "anthropic", "claude-opus-5"),
+			);
+			const current = settle(
+				minted("0199c5c5-1111-4222-8333-444455556666", "acp-current.jsonl", "entwurf", "claude-sonnet-5-5"),
+			);
+			ok(
+				"4d: an entwurf-provider resume of a non-curated id is a TYPED refusal — recorded under entwurf, or a bare Claude id the launch would route to entwurf — while the exact 5.5 id resolves unchanged [QK:RESUME-ID-ACP-EXACT-CURATION]",
+				retired.err instanceof AcpModelNotCuratedError &&
+					retired.err.reason === "acp-model-not-curated" &&
+					retired.err.model === "claude-sonnet-5" &&
+					routed.err instanceof AcpModelNotCuratedError &&
+					routed.err.model === "claude-opus-5" &&
+					current.identity?.provider === "entwurf" &&
+					current.identity.model === "claude-sonnet-5-5",
+			);
+		}
+
 		const gidNoFile = mintRecord("0199dddd-1111-4222-8333-444455556666", null);
 		rejects(gidNoFile, "no recorded transcriptPath", "4: transcriptPath null → nothing to resume");
 

package/scripts/mutants/acp-cortex.json

@@ -5,21 +5,21 @@
 		{
 			"claim": "CORTEX-CURATED-FOUR-ROWS",
 			"title": "dropping a curated row silently shrinks the GLG-decided 4-row cortex surface",
-			"subject": "pi-extensions/lib/acp/models.ts",
+			"subject": "pi-extensions/lib/acp/model-ids.js",
 			"find": [
-				"export const SUPPORTED_CORTEX_MODEL_IDS = [",
+				"export const SUPPORTED_CORTEX_MODEL_IDS = /** @type {const} */ ([",
 				"\t\"cortex-auto\",",
 				"\t\"cortex-claude-opus-5\",",
 				"\t\"cortex-claude-sonnet-5\",",
 				"\t\"cortex-openai-gpt-5.4\",",
-				"] as const;"
+				"]);"
 			],
 			"replace": [
-				"export const SUPPORTED_CORTEX_MODEL_IDS = [",
+				"export const SUPPORTED_CORTEX_MODEL_IDS = /** @type {const} */ ([",
 				"\t\"cortex-auto\",",
 				"\t\"cortex-claude-sonnet-5\",",
 				"\t\"cortex-openai-gpt-5.4\",",
-				"] as const;"
+				"]);"
 			],
 			"gate": ["bash", "run.sh", "check-acp-cortex"],
 			"timeoutSeconds": 300,
@@ -29,11 +29,20 @@
 		{
 			"claim": "CLAUDE-CURATED-THREE-ROWS",
 			"title": "dropping a curated CLAUDE row shrinks the operator's model list while the exact-set comparison stays green — expected derives from the same constant, so only the independent count catches it",
-			"subject": "pi-extensions/lib/acp/models.ts",
+			"subject": "pi-extensions/lib/acp/model-ids.js",
 			"find": [
-				"export const SUPPORTED_ANTHROPIC_MODEL_IDS = [\"claude-sonnet-5\", \"claude-opus-5\", \"claude-fable-5-1\"] as const;"
+				"export const SUPPORTED_ANTHROPIC_MODEL_IDS = /** @type {const} */ ([",
+				"\t\"claude-sonnet-5-5\",",
+				"\t\"claude-opus-5-5\",",
+				"\t\"claude-fable-5-1\",",
+				"]);"
+			],
+			"replace": [
+				"export const SUPPORTED_ANTHROPIC_MODEL_IDS = /** @type {const} */ ([",
+				"\t\"claude-sonnet-5-5\",",
+				"\t\"claude-opus-5-5\",",
+				"]);"
 			],
-			"replace": ["export const SUPPORTED_ANTHROPIC_MODEL_IDS = [\"claude-sonnet-5\", \"claude-opus-5\"] as const;"],
 			"gate": ["bash", "run.sh", "check-acp-provider-surface"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:CLAUDE-CURATED-THREE-ROWS]",

package/scripts/mutants/acp-set-model-readback.json

@@ -0,0 +1,28 @@
+{
+	"schemaVersion": 1,
+	"lane": "acp-set-model-readback",
+	"mutants": [
+		{
+			"claim": "ACP-CLAUDE-SET-MODEL-READBACK",
+			"title": "the claude set-model answer is no longer read back — a missing model option or another row reaches the prompt, so a different model answers under the requested id",
+			"subject": "pi-extensions/lib/acp/backend-adapter.ts",
+			"find": ["\t\tconfirmClaudeSetModelAnswer(answer, nativeModelId);"],
+			"replace": ["\t\tvoid answer;"],
+			"gate": ["bash", "run.sh", "check-acp-set-model-readback"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:ACP-CLAUDE-SET-MODEL-READBACK]",
+			"signatureSource": "pi-extensions/lib/acp/backend-adapter.test.ts"
+		},
+		{
+			"claim": "ACP-CLAUDE-SET-MODEL-ALIAS-EXACT",
+			"title": "an alias answer is matched by row name alone — the `default` row or a retired id's row carrying the 5.5 name answers silently under the 5.5 id",
+			"subject": "pi-extensions/lib/acp/backend-adapter.ts",
+			"find": ["\tif (alias !== undefined && currentValue === alias.value && selected?.name === alias.name) return;"],
+			"replace": ["\tif (alias !== undefined && selected?.name === alias.name) return;"],
+			"gate": ["bash", "run.sh", "check-acp-set-model-readback"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:ACP-CLAUDE-SET-MODEL-ALIAS-EXACT]",
+			"signatureSource": "pi-extensions/lib/acp/backend-adapter.test.ts"
+		}
+	]
+}

package/scripts/mutants/fresh-call-dispatch.json

@@ -138,6 +138,17 @@
 			"timeoutSeconds": 120,
 			"signature": "[QK:FCD-NO-SYNC-SPAWN]",
 			"signatureSource": "scripts/check-fresh-call-dispatch.ts"
+		},
+		{
+			"claim": "FCD-ACP-MODEL-EXACT",
+			"title": "dropping the exact-curation check lets a retired entwurf/claude-sonnet-5 reach a rail, where Pi opens it on the Cortex row by substring",
+			"subject": "pi-extensions/lib/fresh-call-dispatch.ts",
+			"find": ["\treturn !isCuratedAcpModelId(trimmed.slice(slash + 1));"],
+			"replace": ["\treturn false;"],
+			"gate": ["bash", "run.sh", "check-fresh-call-dispatch"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FCD-ACP-MODEL-EXACT]",
+			"signatureSource": "scripts/check-fresh-call-dispatch.ts"
 		}
 	]
 }

package/scripts/mutants/herdr-dev-checkout.json

@@ -0,0 +1,70 @@
+{
+	"schemaVersion": 1,
+	"lane": "herdr-dev-checkout",
+	"mutants": [
+		{
+			"claim": "DEV-MENU-EXPLICIT-CONFIRM",
+			"title": "the source menu invokes apply after an unconfirmed selection instead of requiring exact DEV; the existing helper guards do not substitute for the operator's choice",
+			"subject": "run.sh",
+			"find": ["      if [ \"$confirm\" != DEV ]; then"],
+			"replace": ["      if false; then"],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:DEV-MENU-EXPLICIT-CONFIRM]",
+			"signatureSource": "plugins/herdr/use-dev-checkout.test.mjs",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "HERDR-DEV-PREPARE-BEFORE-TEARDOWN",
+			"title": "deactivation must be preceded by a successful source bridge proof, not merely a build",
+			"subject": "plugins/herdr/use-dev-checkout.sh",
+			"find": ["(cd \"$ROOT\" && pnpm run build-bridge)", "\"$ROOT/run.sh\" check-bridge"],
+			"replace": ["(cd \"$ROOT\" && pnpm run build-bridge)", ":"],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signatureSource": "plugins/herdr/use-dev-checkout.test.mjs",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			},
+			"signature": "[QK:HERDR-DEV-PREPARE-BEFORE-TEARDOWN]"
+		},
+		{
+			"claim": "HERDR-DEV-RECHECK-BEFORE-TEARDOWN",
+			"title": "an old-runtime process appearing during source preparation must refuse before the owner is deactivated",
+			"subject": "plugins/herdr/use-dev-checkout.sh",
+			"find": ["quiescent", "", "stage=owned-deactivate"],
+			"replace": [":", "", "stage=owned-deactivate"],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signatureSource": "plugins/herdr/use-dev-checkout.test.mjs",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			},
+			"signature": "[QK:HERDR-DEV-RECHECK-BEFORE-TEARDOWN]"
+		},
+		{
+			"claim": "HERDR-DEV-NO-SUCCESS-ON-DRIFT",
+			"title": "actual Pi model-id drift must remain non-green rather than claiming successful developer wiring",
+			"subject": "plugins/herdr/use-dev-checkout.sh",
+			"find": [
+				"[ \"$ACTUAL_IDS\" = \"$SOURCE_IDS\" ] || { echo '[use-dev-checkout] actual Pi model IDs differ from the explicit checkout provider; not accepted.' >&2; exit 1; }"
+			],
+			"replace": [
+				"true || { echo '[use-dev-checkout] actual Pi model IDs differ from the explicit checkout provider; not accepted.' >&2; exit 1; }"
+			],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signatureSource": "plugins/herdr/use-dev-checkout.test.mjs",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			},
+			"signature": "[QK:HERDR-DEV-NO-SUCCESS-ON-DRIFT]"
+		}
+	]
+}

package/scripts/mutants/pi-durable.json

@@ -277,6 +277,123 @@
 				"output": "mcp/entwurf-bridge/dist"
 			}
 		},
+		{
+			"claim": "PI-DURABLE-RECEIVER-READ-WITHDRAWS-STALE",
+			"title": "an inbox read no longer withdraws the notices its drain made stale, so each still-queued notice is placed later as its own run and an empty read (#140)",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": ["\t\t\t\tawait withdrawDrained(context);\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RECEIVER-READ-WITHDRAWS-STALE]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-RECEIVER-FOREIGN-GARDEN-READ-KEEPS",
+			"title": "the per-notice file predicate is bypassed, so any read — another garden's included — withdraws notices whose own mail is still unread, and that mail is never announced again",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": ["\t\t\tif (notice.fresh.some((name) => unread.has(`${name}.delivered`))) continue;\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RECEIVER-FOREIGN-GARDEN-READ-KEEPS]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-RECEIVER-PARTIAL-DRAIN-WITHDRAWS-ONLY-ARCHIVED",
+			"title": "the withdrawal runs only after a successful read, so a drain that failed part-way leaves the notices of the mail it already archived queued, stale",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": [
+				"\t\t\treturn await call();\n\t\t} finally {\n\t\t\ttry {\n\t\t\t\tawait withdrawDrained(context);\n\t\t\t} finally {\n\t\t\t\tleaveGate();\n\t\t\t}\n\t\t}\n"
+			],
+			"replace": [
+				"\t\t\tconst answered = await call();\n\t\t\tif (!answered.isError) await withdrawDrained(context);\n\t\t\treturn answered;\n\t\t} finally {\n\t\t\tleaveGate();\n\t\t}\n"
+			],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RECEIVER-PARTIAL-DRAIN-WITHDRAWS-ONLY-ARCHIVED]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-RECEIVER-READ-SERIALIZED",
+			"title": "an inbox read no longer waits for the doorbell's gate, so a drain that overtakes an admission in flight withdraws before that notice's handle exists and the notice stays queued, stale",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": ["\t\tawait enterGate();\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RECEIVER-READ-SERIALIZED]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-RECEIVER-ARRIVAL-DURING-READ-ANNOUNCED",
+			"title": "the gate opening after a read forgets the signal that landed while it was held, so mail that arrived after the drain is never announced until another arrival",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": ["\t\tif (pending) void ring(\"signal\");\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RECEIVER-ARRIVAL-DURING-READ-ANNOUNCED]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-RECEIVER-WITHDRAW-FAILURE-KEEPS-READ",
+			"title": "a notice whose native withdraw rejected is put back among the held ones, so every later read retries that withdraw and names the same failure again",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": [
+				"\t\t\t\tnoteWithdrawalFailure({ reason: \"abort-failed\", requestId: notice.requestId, detail: describeError(error) });\n"
+			],
+			"replace": [
+				"\t\t\t\tnoteWithdrawalFailure({ reason: \"abort-failed\", requestId: notice.requestId, detail: describeError(error) });\n\t\t\t\tnotices.push(notice);\n"
+			],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RECEIVER-WITHDRAW-FAILURE-KEEPS-READ]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-RECEIVER-INSPECTION-FAILURE-KEEPS-NOTICES",
+			"title": "a mailbox that could not be listed is judged as if it held no unread mail, so every held notice is withdrawn while its mail may still be unread",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": [
+				"\t\t\tnoteWithdrawalFailure({ reason: \"inspection-failed\", detail: `${inbox}: ${describeError(error)}` });\n\t\t\treturn;\n"
+			],
+			"replace": [
+				"\t\t\tnoteWithdrawalFailure({ reason: \"inspection-failed\", detail: `${inbox}: ${describeError(error)}` });\n\t\t\tunread = new Set();\n"
+			],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RECEIVER-INSPECTION-FAILURE-KEEPS-NOTICES]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
 		{
 			"claim": "PI-DURABLE-CARRIER-RELOCATION-TWO-RULES",
 			"title": "a carrier file's import of a sibling keeps its .ts specifier, so the installed carrier asks Node for a file that was never emitted",

package/scripts/mutants/resume-launch-identity.json

@@ -91,6 +91,21 @@
 			"timeoutSeconds": 60,
 			"signature": "[QK:RESUME-ID-SESSION-ABSOLUTE]",
 			"signatureSource": "scripts/check-resume-launch-identity.ts"
+		},
+		{
+			"claim": "RESUME-ID-ACP-EXACT-CURATION",
+			"title": "judging the RECORDED provider instead of the emitted one lets a bare Claude 5 id recorded under another provider reopen under entwurf on a Cortex row",
+			"subject": "pi-extensions/lib/resume-launch-identity.ts",
+			"find": [
+				"\tif (provider === PROVIDER_ID && !isCuratedAcpModelId(model)) throw new AcpModelNotCuratedError(model);"
+			],
+			"replace": [
+				"\tif (identity.provider === PROVIDER_ID && !isCuratedAcpModelId(model)) throw new AcpModelNotCuratedError(model);"
+			],
+			"gate": ["bash", "run.sh", "check-resume-launch-identity"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:RESUME-ID-ACP-EXACT-CURATION]",
+			"signatureSource": "scripts/check-resume-launch-identity.ts"
 		}
 	]
 }

package/scripts/mutants/v2-visible-resume.json

@@ -210,6 +210,17 @@
 			"timeoutSeconds": 60,
 			"signature": "[QK:V2RESUME-SHARED-ID-GRAMMAR]",
 			"signatureSource": "pi-extensions/lib/entwurf-v2-visible-resume.test.ts"
+		},
+		{
+			"claim": "V2RESUME-ACP-MODEL-REFUSED",
+			"title": "not matching AcpModelNotCuratedError turns the named refusal into a raw error escaping the resume verb",
+			"subject": "pi-extensions/lib/entwurf-v2-visible-resume.ts",
+			"find": ["\t\t\tif (err instanceof AcpModelNotCuratedError) {"],
+			"replace": ["\t\t\tif (err instanceof AcpModelNotCuratedError && false) {"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:V2RESUME-ACP-MODEL-REFUSED]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-visible-resume.test.ts"
 		}
 	]
 }