@junghanacs/entwurf 0.35.0 → 0.36.0

package/scripts/mutants/codex-app-server-launch.json

@@ -20,7 +20,8 @@
 			"gate": ["bash", "run.sh", "check-codex-app-server-launch"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:CODEX-APP-SERVER-ADDRESS-MATCHES-PRODUCT-LEAF]",
-			"signatureSource": "scripts/check-codex-app-server-launch.ts"
+			"signatureSource": "scripts/check-codex-app-server-launch.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "CODEX-APP-SERVER-EXECS-NOT-FORKS",
@@ -31,7 +32,8 @@
 			"gate": ["bash", "run.sh", "check-codex-app-server-launch"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:CODEX-APP-SERVER-EXECS-NOT-FORKS]",
-			"signatureSource": "scripts/check-codex-app-server-launch.ts"
+			"signatureSource": "scripts/check-codex-app-server-launch.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "CODEX-APP-SERVER-REFUSES-LIVE-SOCKET",
@@ -42,18 +44,20 @@
 			"gate": ["bash", "run.sh", "check-codex-app-server-launch"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:CODEX-APP-SERVER-REFUSES-LIVE-SOCKET]",
-			"signatureSource": "scripts/check-codex-app-server-launch.ts"
+			"signatureSource": "scripts/check-codex-app-server-launch.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "CODEX-APP-SERVER-REFUSES-INDETERMINATE-SOCKET",
-			"title": "reading an unidentifiable path (symlink, foreign owner, not a socket) as an absent one lets the launch clobber something it could not identify \u2014 the same classification the delivery rail refuses on, silently downgraded at the one place that would overwrite it",
+			"title": "reading the classifier's indeterminate verdict (a symlink that is not Codex's exact alias, a foreign owner, not a socket) as an absent path lets the launch clobber something it could not identify \u2014 the same classification the delivery rail refuses on, silently downgraded at the one place that would overwrite it",
 			"subject": "scripts/codex-app-server-launch.sh",
-			"find": ["\tprint(\"indeterminate\\tthe path is a symlink\")"],
-			"replace": ["\tprint(\"absent\")"],
+			"find": ["\tindeterminate) probe=\"indeterminate\t$classified_detail\" ;;"],
+			"replace": ["\tindeterminate) probe=\"absent\" ;;"],
 			"gate": ["bash", "run.sh", "check-codex-app-server-launch"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:CODEX-APP-SERVER-REFUSES-INDETERMINATE-SOCKET]",
-			"signatureSource": "scripts/check-codex-app-server-launch.ts"
+			"signatureSource": "scripts/check-codex-app-server-launch.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "CODEX-APP-SERVER-REFUSES-SECOND-LISTEN",
@@ -72,7 +76,8 @@
 			"gate": ["bash", "run.sh", "check-codex-app-server-launch"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:CODEX-APP-SERVER-REFUSES-SECOND-LISTEN]",
-			"signatureSource": "scripts/check-codex-app-server-launch.ts"
+			"signatureSource": "scripts/check-codex-app-server-launch.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "CODEX-APP-SERVER-READS-PROC-HOLDER",
@@ -94,7 +99,8 @@
 			"gate": ["bash", "run.sh", "check-codex-app-server-launch"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:CODEX-APP-SERVER-READS-PROC-HOLDER]",
-			"signatureSource": "scripts/check-codex-app-server-launch.ts"
+			"signatureSource": "scripts/check-codex-app-server-launch.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "CODEX-APP-SERVER-REFUSES-UNRECOGNISED-PROBE",
@@ -115,7 +121,26 @@
 			"gate": ["bash", "run.sh", "check-codex-app-server-launch"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:CODEX-APP-SERVER-REFUSES-UNRECOGNISED-PROBE]",
-			"signatureSource": "scripts/check-codex-app-server-launch.ts"
+			"signatureSource": "scripts/check-codex-app-server-launch.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "CODEX-APP-SERVER-REFUSES-UNRECOGNISED-CLASSIFIER",
+			"title": "passing an unrecognised classifier word through to the probe verdicts lets a word the classifier never gives \u2014 'stale' \u2014 be read as a dead socket file and launched over, so a classifier that answers something nobody wrote decides that this launch may clobber the endpoint",
+			"subject": "scripts/codex-app-server-launch.sh",
+			"find": [
+				"\t*)",
+				"\t\tfail \"codex-app-server-socket-probe-unrecognised: the socket classifier answered",
+				"  '$classified_word', which is not one of socket/absent/dangling/indeterminate. Refusing to launch on a",
+				"  reading nothing understands.\"",
+				"\t\t;;"
+			],
+			"replace": ["\t*) probe=\"$classified_word\" ;;"],
+			"gate": ["bash", "run.sh", "check-codex-app-server-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CODEX-APP-SERVER-REFUSES-UNRECOGNISED-CLASSIFIER]",
+			"signatureSource": "scripts/check-codex-app-server-launch.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "CODEX-APP-SERVER-REFUSES-RELATIVE-SOCKET",
@@ -135,7 +160,8 @@
 			"gate": ["bash", "run.sh", "check-codex-app-server-launch"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:CODEX-APP-SERVER-REFUSES-RELATIVE-SOCKET]",
-			"signatureSource": "scripts/check-codex-app-server-launch.ts"
+			"signatureSource": "scripts/check-codex-app-server-launch.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "CODEX-APP-SERVER-REFUSES-CONTROL-CHAR-SOCKET",
@@ -151,7 +177,8 @@
 			"gate": ["bash", "run.sh", "check-codex-app-server-launch"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:CODEX-APP-SERVER-REFUSES-CONTROL-CHAR-SOCKET]",
-			"signatureSource": "scripts/check-codex-app-server-launch.ts"
+			"signatureSource": "scripts/check-codex-app-server-launch.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		}
 	]
 }

package/scripts/mutants/codex-native.json

@@ -28,6 +28,21 @@
 			"signature": "[QK:CODEX-NATIVE-LOADED-PROBE]",
 			"signatureSource": "scripts/check-codex-native-push.ts"
 		},
+		{
+			"claim": "CODEX-SOCKET-ALIAS-EXACT",
+			"title": "accepting any symlink into Codex's socket directory instead of the one target Codex derives for THIS advertised path lets a retargeted alias hand delivery, preflight and the launcher a socket that belongs to a different listen address \u2014 the exact-target equality is the whole of what makes the 0.162.1 alias trustworthy",
+			"subject": "pi-extensions/lib/native-push/codex-ws-client.ts",
+			"find": [
+				"\tif (target !== expected) {",
+				"\t\treturn refuse(`app-server socket is a symlink that is not Codex's rendezvous alias: ${socketPath} -> ${target}`);",
+				"\t}"
+			],
+			"replace": ["\t// any target inside Codex's socket directory is good enough"],
+			"gate": ["bash", "run.sh", "check-codex-native-push"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CODEX-SOCKET-ALIAS-EXACT]",
+			"signatureSource": "scripts/check-codex-native-push.ts"
+		},
 		{
 			"claim": "CODEX-NATIVE-VENDOR-QUEUE",
 			"title": "native delivery invokes a different Codex subcommand instead of the measured one-shot queue surface",

package/scripts/mutants/control-send-receipt.json

@@ -181,7 +181,7 @@
 			"claim": "PI-CORE-PIN-TRACKS-FLOOR",
 			"title": "the queue oracle's pi-agent-core pin drifts off the floor the rest of the pi runtime is pinned to, so the oracle keeps answering honestly — about a pi nobody in this repo runs",
 			"subject": "package.json",
-			"find": ["\"@earendil-works/pi-agent-core\": \"1.1.0\","],
+			"find": ["\"@earendil-works/pi-agent-core\": \"1.2.0\","],
 			"replace": ["\"@earendil-works/pi-agent-core\": \"0.87.1\","],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,

package/scripts/mutants/fresh-call-dispatch.json

@@ -138,6 +138,17 @@
 			"timeoutSeconds": 120,
 			"signature": "[QK:FCD-NO-SYNC-SPAWN]",
 			"signatureSource": "scripts/check-fresh-call-dispatch.ts"
+		},
+		{
+			"claim": "FCD-ACP-MODEL-EXACT",
+			"title": "dropping the exact-curation check lets a retired entwurf/claude-sonnet-5 reach a rail, where Pi opens it on the Cortex row by substring",
+			"subject": "pi-extensions/lib/fresh-call-dispatch.ts",
+			"find": ["\treturn !isCuratedAcpModelId(trimmed.slice(slash + 1));"],
+			"replace": ["\treturn false;"],
+			"gate": ["bash", "run.sh", "check-fresh-call-dispatch"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FCD-ACP-MODEL-EXACT]",
+			"signatureSource": "scripts/check-fresh-call-dispatch.ts"
 		}
 	]
 }

package/scripts/mutants/herdr-dev-checkout.json

@@ -0,0 +1,70 @@
+{
+	"schemaVersion": 1,
+	"lane": "herdr-dev-checkout",
+	"mutants": [
+		{
+			"claim": "DEV-MENU-EXPLICIT-CONFIRM",
+			"title": "the source menu invokes apply after an unconfirmed selection instead of requiring exact DEV; the existing helper guards do not substitute for the operator's choice",
+			"subject": "run.sh",
+			"find": ["      if [ \"$confirm\" != DEV ]; then"],
+			"replace": ["      if false; then"],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:DEV-MENU-EXPLICIT-CONFIRM]",
+			"signatureSource": "plugins/herdr/use-dev-checkout.test.mjs",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "HERDR-DEV-PREPARE-BEFORE-TEARDOWN",
+			"title": "deactivation must be preceded by a successful source bridge proof, not merely a build",
+			"subject": "plugins/herdr/use-dev-checkout.sh",
+			"find": ["(cd \"$ROOT\" && pnpm run build-bridge)", "\"$ROOT/run.sh\" check-bridge"],
+			"replace": ["(cd \"$ROOT\" && pnpm run build-bridge)", ":"],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signatureSource": "plugins/herdr/use-dev-checkout.test.mjs",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			},
+			"signature": "[QK:HERDR-DEV-PREPARE-BEFORE-TEARDOWN]"
+		},
+		{
+			"claim": "HERDR-DEV-RECHECK-BEFORE-TEARDOWN",
+			"title": "an old-runtime process appearing during source preparation must refuse before the owner is deactivated",
+			"subject": "plugins/herdr/use-dev-checkout.sh",
+			"find": ["quiescent", "", "stage=owned-deactivate"],
+			"replace": [":", "", "stage=owned-deactivate"],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signatureSource": "plugins/herdr/use-dev-checkout.test.mjs",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			},
+			"signature": "[QK:HERDR-DEV-RECHECK-BEFORE-TEARDOWN]"
+		},
+		{
+			"claim": "HERDR-DEV-NO-SUCCESS-ON-DRIFT",
+			"title": "actual Pi model-id drift must remain non-green rather than claiming successful developer wiring",
+			"subject": "plugins/herdr/use-dev-checkout.sh",
+			"find": [
+				"[ \"$ACTUAL_IDS\" = \"$SOURCE_IDS\" ] || { echo '[use-dev-checkout] actual Pi model IDs differ from the explicit checkout provider; not accepted.' >&2; exit 1; }"
+			],
+			"replace": [
+				"true || { echo '[use-dev-checkout] actual Pi model IDs differ from the explicit checkout provider; not accepted.' >&2; exit 1; }"
+			],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signatureSource": "plugins/herdr/use-dev-checkout.test.mjs",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			},
+			"signature": "[QK:HERDR-DEV-NO-SUCCESS-ON-DRIFT]"
+		}
+	]
+}

package/scripts/mutants/pack-install.json

@@ -6,7 +6,7 @@
 			"claim": "PACK-INSTALL-PIN-MATCHER-BOUNDED",
 			"title": "the pin-leak matcher loses its version boundary and blesses substring lookalikes — @0.85.10 reads as the pinned 0.85.1 and the gate announces a verified tree it never verified (independent review, 2026-08-25)",
 			"subject": "run.sh",
-			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.1\\.0(_|$)' || true"],
+			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.2\\.0(_|$)' || true"],
 			"replace": ["  grep '^@earendil-works+' | grep -v '@0\\.87\\.1' || true"],
 			"gate": ["bash", "run.sh", "check-pack-pin-matcher"],
 			"timeoutSeconds": 120,
@@ -17,8 +17,8 @@
 			"claim": "PACK-INSTALL-PIN-MATCHER-COVERS-CLOSURE",
 			"title": "the pin-leak matcher narrows back to the pi-* families and goes blind to a non-pi member of the same runtime closure — @earendil-works/chord (new in pi 0.85.0, a runtime dependency of pi-coding-agent/pi-agent-core/pi-client/pi-protocol) floats unpinned while the gate prints a verified pin (measured 2026-09-06 on a real 0.85.1 install tree)",
 			"subject": "run.sh",
-			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.1\\.0(_|$)' || true"],
-			"replace": ["  grep '^@earendil-works+pi-' | grep -Ev '@1\\.1\\.0(_|$)' || true"],
+			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.2\\.0(_|$)' || true"],
+			"replace": ["  grep '^@earendil-works+pi-' | grep -Ev '@1\\.2\\.0(_|$)' || true"],
 			"gate": ["bash", "run.sh", "check-pack-pin-matcher"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:PACK-INSTALL-PIN-MATCHER-COVERS-CLOSURE]",

package/scripts/mutants/pi-durable.json

@@ -277,6 +277,123 @@
 				"output": "mcp/entwurf-bridge/dist"
 			}
 		},
+		{
+			"claim": "PI-DURABLE-RECEIVER-READ-WITHDRAWS-STALE",
+			"title": "an inbox read no longer withdraws the notices its drain made stale, so each still-queued notice is placed later as its own run and an empty read (#140)",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": ["\t\t\t\tawait withdrawDrained(context);\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RECEIVER-READ-WITHDRAWS-STALE]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-RECEIVER-FOREIGN-GARDEN-READ-KEEPS",
+			"title": "the per-notice file predicate is bypassed, so any read — another garden's included — withdraws notices whose own mail is still unread, and that mail is never announced again",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": ["\t\t\tif (notice.fresh.some((name) => unread.has(`${name}.delivered`))) continue;\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RECEIVER-FOREIGN-GARDEN-READ-KEEPS]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-RECEIVER-PARTIAL-DRAIN-WITHDRAWS-ONLY-ARCHIVED",
+			"title": "the withdrawal runs only after a successful read, so a drain that failed part-way leaves the notices of the mail it already archived queued, stale",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": [
+				"\t\t\treturn await call();\n\t\t} finally {\n\t\t\ttry {\n\t\t\t\tawait withdrawDrained(context);\n\t\t\t} finally {\n\t\t\t\tleaveGate();\n\t\t\t}\n\t\t}\n"
+			],
+			"replace": [
+				"\t\t\tconst answered = await call();\n\t\t\tif (!answered.isError) await withdrawDrained(context);\n\t\t\treturn answered;\n\t\t} finally {\n\t\t\tleaveGate();\n\t\t}\n"
+			],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RECEIVER-PARTIAL-DRAIN-WITHDRAWS-ONLY-ARCHIVED]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-RECEIVER-READ-SERIALIZED",
+			"title": "an inbox read no longer waits for the doorbell's gate, so a drain that overtakes an admission in flight withdraws before that notice's handle exists and the notice stays queued, stale",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": ["\t\tawait enterGate();\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RECEIVER-READ-SERIALIZED]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-RECEIVER-ARRIVAL-DURING-READ-ANNOUNCED",
+			"title": "the gate opening after a read forgets the signal that landed while it was held, so mail that arrived after the drain is never announced until another arrival",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": ["\t\tif (pending) void ring(\"signal\");\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RECEIVER-ARRIVAL-DURING-READ-ANNOUNCED]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-RECEIVER-WITHDRAW-FAILURE-KEEPS-READ",
+			"title": "a notice whose native withdraw rejected is put back among the held ones, so every later read retries that withdraw and names the same failure again",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": [
+				"\t\t\t\tnoteWithdrawalFailure({ reason: \"abort-failed\", requestId: notice.requestId, detail: describeError(error) });\n"
+			],
+			"replace": [
+				"\t\t\t\tnoteWithdrawalFailure({ reason: \"abort-failed\", requestId: notice.requestId, detail: describeError(error) });\n\t\t\t\tnotices.push(notice);\n"
+			],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RECEIVER-WITHDRAW-FAILURE-KEEPS-READ]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-RECEIVER-INSPECTION-FAILURE-KEEPS-NOTICES",
+			"title": "a mailbox that could not be listed is judged as if it held no unread mail, so every held notice is withdrawn while its mail may still be unread",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": [
+				"\t\t\tnoteWithdrawalFailure({ reason: \"inspection-failed\", detail: `${inbox}: ${describeError(error)}` });\n\t\t\treturn;\n"
+			],
+			"replace": [
+				"\t\t\tnoteWithdrawalFailure({ reason: \"inspection-failed\", detail: `${inbox}: ${describeError(error)}` });\n\t\t\tunread = new Set();\n"
+			],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RECEIVER-INSPECTION-FAILURE-KEEPS-NOTICES]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
 		{
 			"claim": "PI-DURABLE-CARRIER-RELOCATION-TWO-RULES",
 			"title": "a carrier file's import of a sibling keeps its .ts specifier, so the installed carrier asks Node for a file that was never emitted",
@@ -341,7 +458,7 @@
 			"claim": "PI-DURABLE-CARRIER-PIN-MATCHES",
 			"title": "the pin records a digest the committed carrier file does not carry, so a carrier edited after emission would still be the declared one",
 			"subject": "pi/pi-durable/overlay/upstream-pin.json",
-			"find": ["\"sha256\": \"bfd88844fae61e8bd32d57b5b986f48056c64eebb5466d9826318a0783ac9005\""],
+			"find": ["\"sha256\": \"60c2965eadbdbbe78fce1b7eeb89d97eb3104a30b7d58ebca87009d2e9118403\""],
 			"replace": ["\"sha256\": \"0000000000000000000000000000000000000000000000000000000000000000\""],
 			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
 			"timeoutSeconds": 300,
@@ -716,19 +833,40 @@
 			}
 		},
 		{
-			"claim": "PI-DURABLE-CARRIER-PATCH-SECTIONS",
-			"title": "a declared patched file with no section of its own passes the patch-shape check, so the emitter would ship that file unpatched",
+			"claim": "PI-DURABLE-CARRIER-EMIT-SOURCE-EQUAL",
+			"title": "the owned source changes and the carrier is not re-emitted, so the shipped app is no longer the emission of the source the repository reviews",
+			"subject": "pi/pi-durable/src/experimental/durable/tui.ts",
+			"find": ["\t\tconst forms = [...detailed, tasks, `⏳ ${n}`, `⏳${n}`, `*${n}`, \"*+\", \"*\"];"],
+			"replace": ["\t\tconst forms = [...detailed, tasks, `⏳ ${n}`, `⏳${n}`, `*${n}`, \"*\"];"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-CARRIER-EMIT-SOURCE-EQUAL]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-CARRIER-EMIT-NODE-EXACT",
+			"title": "the emitter stops comparing its own Node with the pinned one, so a carrier emitted under any Node reads as the pinned emission",
 			"subject": "scripts/emit-pi-durable-carrier.ts",
-			"find": ["\tif (undeclared.length > 0 || missing.length > 0) {"],
-			"replace": ["\tif (undeclared.length > 0) {"],
+			"find": ["\tif (pinned !== running) {"],
+			"replace": ["\tif (false) {"],
 			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
 			"timeoutSeconds": 300,
-			"signature": "[QK:PI-DURABLE-CARRIER-PATCH-SECTIONS]",
+			"signature": "[QK:PI-DURABLE-CARRIER-EMIT-NODE-EXACT]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
-			"build": {
-				"argv": ["bash", "scripts/build-bridge.sh"],
-				"output": "mcp/entwurf-bridge/dist"
-			}
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-SOURCE-FENCE-RESOLVES",
+			"title": "the source fence inherits the root program's exclusion of pi/pi-durable/src, so the owned source sits in no typecheck program at all",
+			"subject": "pi/pi-durable/tsconfig.json",
+			"find": ["\t\"exclude\": []"],
+			"replace": ["\t\"files\": []"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-SOURCE-FENCE-RESOLVES]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "PI-DURABLE-FOOTER-GRAPH-LIFETIME",
@@ -781,12 +919,8 @@
 			"claim": "PI-DURABLE-FOOTER-BADGE-PROTECTED",
 			"title": "the badge sits last in the dock, so the renderer's bottom clip drops it first on a short terminal",
 			"subject": "pi/pi-durable/carrier/tui.js",
-			"find": [
-				"\t\t{ component: new VStack([{ component: badge, shrink: 0 }, ...dock]), basis: \"auto\", grow: 0, shrink: 1, minSize: 1 },"
-			],
-			"replace": [
-				"\t\t{ component: new VStack([...dock, { component: badge, shrink: 0 }]), basis: \"auto\", grow: 0, shrink: 1, minSize: 1 },"
-			],
+			"find": ["\t\t\tcomponent: new VStack([{ component: badge, shrink: 0 }, ...dock]),"],
+			"replace": ["\t\t\tcomponent: new VStack([...dock, { component: badge, shrink: 0 }]),"],
 			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-FOOTER-BADGE-PROTECTED]",
@@ -885,6 +1019,138 @@
 				"argv": ["bash", "scripts/build-bridge.sh"],
 				"output": "mcp/entwurf-bridge/dist"
 			}
+		},
+		{
+			"claim": "PI-DURABLE-SOURCE-NOT-SHIPPED",
+			"title": "the files allowlist admits pi/pi-durable/src, so the owned TypeScript source rides the tarball beside the carrier an installed consumer runs",
+			"subject": "package.json",
+			"find": ["\t\t\"pi/pi-durable/carrier/\",\n"],
+			"replace": ["\t\t\"pi/pi-durable/carrier/\",\n\t\t\"pi/pi-durable/src/\",\n"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-SOURCE-NOT-SHIPPED]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-EMITTER-NODE-CI-BOUND",
+			"title": "the CI check job floats its Node major again, so the floor that proves the carrier emission runs under a Node other than the pinned emitter",
+			"subject": ".github/workflows/ci.yml",
+			"find": ["          node-version: 24.18.1\n"],
+			"replace": ["          node-version: 24\n"],
+			"gate": ["bash", "run.sh", "check-node-floor-coherence"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:PI-DURABLE-EMITTER-NODE-CI-BOUND]",
+			"signatureSource": "run.sh"
+		},
+		{
+			"claim": "PI-DURABLE-EMITTER-NODE-CI-REQUIRED",
+			"title": "the check:full step's ENTWURF_REQUIRE_EMITTER_NODE line is commented out, so an emitter-identity mismatch on the CI floor becomes a skip while the workflow text still names the variable",
+			"subject": ".github/workflows/ci.yml",
+			"find": ["          ENTWURF_REQUIRE_EMITTER_NODE: \"1\"\n"],
+			"replace": ["          # ENTWURF_REQUIRE_EMITTER_NODE: \"1\"\n"],
+			"gate": ["bash", "run.sh", "check-node-floor-coherence"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:PI-DURABLE-EMITTER-NODE-CI-REQUIRED]",
+			"signatureSource": "run.sh"
+		},
+		{
+			"claim": "PI-DURABLE-SUBAGENT-OUTPUT-MODEL-VISIBLE",
+			"title": "the emitted subagent answers in `content`, the 1.1 field: on 1.2 the result still type-checks against the all-optional result and the parent model reads nothing of the child's answer",
+			"subject": "pi/pi-durable/carrier/subagent.js",
+			"find": ["\t\t\t\t\toutput: [{ type: \"text\", text }],"],
+			"replace": ["\t\t\t\t\tcontent: [{ type: \"text\", text }],"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-SUBAGENT-OUTPUT-MODEL-VISIBLE]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-BRIDGE-TOOL-OUTPUT-MODEL-VISIBLE",
+			"title": "the contact's bridge tools answer in `content`, the 1.1 field, past the declared result type: the bridge still builds and the model reads none of the bridge's text",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": ["\t\t\treturn { output: [{ type: \"text\", text: result.text }] };"],
+			"replace": ["\t\t\treturn { content: [{ type: \"text\", text: result.text }] } as unknown as DurableToolResult;"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-BRIDGE-TOOL-OUTPUT-MODEL-VISIBLE]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-FATAL-SESSION-VIEW",
+			"title": "the close listener stops recording the failure: a Session that failed and closed itself looks open, and the host learns of it only if `closed` ever settles, which a tool ignoring its abort can hold off for good",
+			"subject": "pi/pi-durable/carrier/runtime.js",
+			"find": ["\t\t\tupdate({ failure: {} });"],
+			"replace": ["\t\t\t// the failure is not recorded"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-FATAL-SESSION-VIEW]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-FATAL-SESSION-SHOWN",
+			"title": "the TUI stops drawing the failed session's line: the view knows, the screen keeps the last live frame and every later keystroke looks accepted",
+			"subject": "pi/pi-durable/carrier/tui.js",
+			"find": ["\tif (view.failure !== undefined) {"],
+			"replace": ["\tif (view.failure === null) {"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-FATAL-SESSION-SHOWN]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-FATAL-SUBMIT-REFUSED",
+			"title": "input to a failed session is handed to the SDK instead of being refused by name: it fails later with the SDK's generic error and the user is not told the session takes no input",
+			"subject": "pi/pi-durable/carrier/runtime.js",
+			"find": ["\t\t\t\t\tif (state.failure !== undefined) {"],
+			"replace": ["\t\t\t\t\tif (state.failure === null) {"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-FATAL-SUBMIT-REFUSED]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-RECEIVER-RETIRE-ON-FATAL",
+			"title": "the doorbell ignores the session's failure: its marker stays and senders keep waking a host that can admit nothing, until a ring happens to be rejected",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": ["const problems = retire(\"session-failed\", \"the durable session failed and closed itself\");"],
+			"replace": ["const problems: string[] = [];"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RECEIVER-RETIRE-ON-FATAL]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-SELF-CLOSE-NOT-FAILURE",
+			"title": "close() keeps its close listener subscribed: every normal exit reports a failed session and retires its listeners as if the storage had failed",
+			"subject": "pi/pi-durable/carrier/runtime.js",
+			"find": [
+				"\t\t\t\t\t// First: the Session runs its close listeners inside its own close call.\n\t\t\t\t\tunsubscribeClose();"
+			],
+			"replace": ["\t\t\t\t\t// First: the Session runs its close listeners inside its own close call."],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-SELF-CLOSE-NOT-FAILURE]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-COMPACTION-FAILURE-SHOWN",
+			"title": "the TUI drops the conversation's retained compaction failure: a failed background compaction vanishes from the screen once its status is removed",
+			"subject": "pi/pi-durable/carrier/tui.js",
+			"find": ["\tif (compaction !== undefined) {\n\t\tlines.push"],
+			"replace": ["\tif (compaction === null) {\n\t\tlines.push"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-COMPACTION-FAILURE-SHOWN]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		}
 	]
 }

package/scripts/mutants/pi-floor.json

@@ -7,10 +7,10 @@
 			"title": "one row of the pnpm workspace closure is left on the previous floor while every other surface moved — the shape a version bump actually fails in. Nothing else reads that file, so the stranded row surfaces only at install time, in a different command, far from the change that stranded it",
 			"subject": "pnpm-workspace.yaml",
 			"find": [
-				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2 || 1.0.4 || 1.1.0'"
+				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2 || 1.0.4 || 1.1.0 || 1.2.0'"
 			],
 			"replace": [
-				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2 || 1.0.4'"
+				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2 || 1.0.4 || 1.1.0'"
 			],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
@@ -21,8 +21,8 @@
 			"claim": "PI-SDK-PRODUCTION-SET",
 			"title": "the durable library's production pin falls one release behind the SDK set the pin declares, so the carrier would bind a pi-durable nobody verified it against",
 			"subject": "package.json",
-			"find": ["\"@earendil-works/pi-durable\": \"1.1.0\","],
-			"replace": ["\"@earendil-works/pi-durable\": \"1.0.4\","],
+			"find": ["\"@earendil-works/pi-durable\": \"1.2.0\","],
+			"replace": ["\"@earendil-works/pi-durable\": \"1.1.0\","],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-SDK-PRODUCTION-SET]",
@@ -33,7 +33,7 @@
 			"title": "an @earendil-works package returns as a dev dependency beside its production pin, one name in two dependency classes",
 			"subject": "package.json",
 			"find": ["\"@biomejs/biome\": \"^2.4.13\","],
-			"replace": ["\"@biomejs/biome\": \"^2.4.13\",\n\t\t\"@earendil-works/pi-ai\": \"1.1.0\","],
+			"replace": ["\"@biomejs/biome\": \"^2.4.13\",\n\t\t\"@earendil-works/pi-ai\": \"1.2.0\","],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-SDK-NO-DUAL-DECLARATION]",