@junghanacs/entwurf 0.36.1 → 0.37.1

package/scripts/fixtures/herdr-supply.json

@@ -1,10 +1,10 @@
 {
 	"$comment": "SSOT for the herdr binary this repository has MEASURED against. Nothing else may carry a version or a digest: the CI installer, the sandbox gate's boundary check and the launch-rail document all read or cite this file. Re-measuring a new herdr means measuring it FIRST — fetched by digest and verified before it is made executable, then run against a private sandbox server (at least version, status-client protocol and integration rows) — then editing this file and repairing the measured sentences in docs/herdr-launch-rail.md in the same commit; miss one and the gate fails on version mismatch, which is the point. A private baseline is not the full gate: check-herdr-sandbox at a new pin is certified by its exact-SHA CI run unless it was also run locally, and an asset is recorded `executed` only with a receipt bound to this version and its full digest (check-herdr-supply HSUP-EXECUTION-RECEIPT-BOUND).",
-	"version": "0.9.4",
-	"tag": "v0.9.4",
-	"tagCommit": "7e26bad94044eba205033111a0ce8033ede7e24f",
+	"version": "0.9.5",
+	"tag": "v0.9.5",
+	"tagCommit": "2ecf19a92fc3a7fff75b6ce3655ef04f4625ec01",
 	"socketProtocol": 22,
-	"measuredOn": "2026-10-14",
+	"measuredOn": "2026-10-15",
 	"measuredArch": "aarch64",
 	"releaseUrlPrefix": "https://github.com/herdrdev/herdr/releases/download",
 	"integrity": {
@@ -15,16 +15,17 @@
 	"assets": {
 		"x86_64": {
 			"name": "herdr-linux-x86_64",
-			"sha256": "493304fbefb0ed0ea0455f373b47f48d24e8774bc7974f4c916ad2e937675b23",
-			"executed": false,
-			"executedNote": "not yet executed at this pin: the digest is pinned and named by GitHub's release attestation for pkg:github/herdrdev/herdr@v0.9.4, and the first CI check job at a SHA carrying this pin will be its first run. The previous pin's x86_64 asset (v0.9.3, sha256 18a8dc65…) did run there — CI run 38456259822, check-herdr-sandbox 12 assertions — which is dated history of that asset, not evidence for this one"
+			"sha256": "14d9e8bc8b4a9e0118d77c32266f76d461f09b40342eb23752960bd89f59929d",
+			"executed": true,
+			"executedReceipt": "herdr 0.9.5 linux-x86_64 sha256 14d9e8bc8b4a9e0118d77c32266f76d461f09b40342eb23752960bd89f59929d — 2026-10-15, GitHub Actions check job (x86_64), CI run 38667564413 at d8cd8f3, read from that run's check-job log: `install-herdr-ci` verified this digest before execution, and check-herdr-sandbox passed 12 assertions on private herdr 0.9.5, HS-VERSION-BOUNDARY included",
+			"executedNote": "the receipt is the full sandbox gate at the SHA that introduced this pin; it is not a claim for any later SHA. The previous pin's x86_64 asset (v0.9.4, sha256 493304fb…) ran in CI run 38479767989 at 9f33dd1, check-herdr-sandbox 12 assertions — dated history of that asset, not evidence for this one"
 		},
 		"aarch64": {
 			"name": "herdr-linux-aarch64",
-			"sha256": "9511cb70982c1ef115f232058e7ed7cf9640aa5a2c0ca78934cefda3aeb093fd",
+			"sha256": "17d7536f2da50859523680ef279dffcac8e4a235f4e46fe8da6c2ec44141897c",
 			"executed": true,
-			"executedReceipt": "herdr 0.9.4 linux-aarch64 sha256 9511cb70982c1ef115f232058e7ed7cf9640aa5a2c0ca78934cefda3aeb093fd — 2026-10-14, oracle aarch64, Phase A private CLI baseline (docs/herdr-launch-rail.md, 재측정 2026-10-14): `herdr --version` 0.9.4; `status client` protocol 22, endpoint_protocol_generation 1; `integration status` 18 rows, zero diff against 0.9.3; pi (v9) and claude (v10) integrations seeded by 0.9.3 read `current` and a 0.9.4 reinstall leaves their three files byte-identical; `server stop` leaves no socket and no process",
-			"executedNote": "the receipt is a private CLI baseline only. check-herdr-sandbox has NOT run on this architecture at this pin — its operator-untouched cell reads the operator's own panes — so the full gate's first run at this pin is the CI check job, on the x86_64 asset — not this one. The operator host still runs 0.9.3 and was not touched. The 0.9.3 receipt (2026-10-03, #126) stays dated in docs/herdr-launch-rail.md"
+			"executedReceipt": "herdr 0.9.5 linux-aarch64 sha256 17d7536f2da50859523680ef279dffcac8e4a235f4e46fe8da6c2ec44141897c — 2026-10-15, oracle aarch64, Phase A private CLI baseline (docs/herdr-launch-rail.md, 재측정 2026-10-15): `herdr --version` 0.9.5; `status client` protocol 22, endpoint_protocol_generation 1; `integration status` 18 rows, zero diff against 0.9.4 in a fresh sandbox; over integrations seeded by 0.9.4, pi reads `current (v9)` and claude reads `outdated (v10 < v11)`; a 0.9.5 reinstall leaves the pi extension and claude settings.json byte-identical, changes the claude hook only in its `HERDR_INTEGRATION_VERSION` line (10 → 11), and then reads `current (v11)`; `server stop` leaves no socket and no process",
+			"executedNote": "the receipt is a private CLI baseline only. check-herdr-sandbox has NOT run on this architecture at this pin — its operator-untouched cell reads the operator's own panes — so the full gate's first run at this pin was the CI check job on the x86_64 asset (CI run 38667564413) — not this one. The operator host was not touched. The 0.9.4 receipt (2026-10-14) stays dated in docs/herdr-launch-rail.md"
 		}
 	}
 }

package/scripts/lib/codex-fresh-live-protocol.ts

@@ -57,7 +57,12 @@ export function buildCodexInstruction(input: CodexInstructionInput): string {
 		"2. Stop and wait for the Pi callback delivered into this Codex thread. Accept only a callback whose body " +
 		"repeats the exact nonce from your LAUNCH receipt and whose sender envelope carries a garden id on its `session:` line.\n" +
 		`3. Only after that match, call public mcp__entwurf_bridge__entwurf_v2 once with target ${input.callerGid}, ` +
-		"intent fire-and-forget, wants_reply false, and message:\n" +
+		// [LIVE 2026-10-16, 0.37.1 r2] a Codex sibling sent PI_SESSION_ID=485 / PI_WINDOW_ID=1130 for
+		// `$485` / `@1130`: the sigils lived only inside the placeholder names below. The exact-argument
+		// check stays; the instruction now says the prefixes are part of the ids.
+		"intent fire-and-forget, wants_reply false, and message (copy PI_SESSION_ID and PI_WINDOW_ID byte for byte " +
+		"from the LAUNCH receipt's `window:` line: the session id keeps its leading `$` and the window id keeps its " +
+		"leading `@`; never drop either prefix):\n" +
 		`${input.finalToken}\nPI_LAUNCH_NONCE=<exact launch nonce>\nPI_CALLBACK_NONCE=<same exact nonce>\n` +
 		"PI_CALLBACK_FROM=<the garden id on the callback envelope's `session:` line — NOT the model name on its `from:` line>\nPI_SESSION_ID=<exact $session id from the LAUNCH receipt>\n" +
 		"PI_WINDOW_ID=<exact @window id from the LAUNCH receipt>\nDo not claim completion in prose."

package/scripts/lib/qualification-ledger.ts

@@ -302,8 +302,8 @@ const STATES: GroupState[] = ["MEASURED", "CARRIED", "INHERITED-UNVERIFIED", "UN
  * (qualification-oracle-core → composeRelease) passes none: its declared input list is each
  * collection's own `attempted[].sha256` (checkCollectionData) under the GitHub artifact
  * digest (admitArtifact), and an ancestor run it was not given leaves its groups UNRUN, a
- * release-mode blocker. It is not the release oracle: verify-exact-ci.sh stays the strict
- * exact-SHA full-body gate until #124 P3.
+ * release-mode blocker. It is not the release oracle: verify-exact-ci.sh reads the push
+ * run's four required jobs and no qualification body (#144).
  */
 export function composeLedger(
 	loaded: LoadedReceipt[],

package/scripts/mutants/herdr-supply.json

@@ -8,7 +8,7 @@
 			"subject": "scripts/check-herdr-sandbox.ts",
 			"find": ["const SUPPLY_MANIFEST = \"scripts/fixtures/herdr-supply.json\";"],
 			"replace": [
-				"const SUPPLY_MANIFEST = \"scripts/fixtures/herdr-supply.json\";\nconst PINNED_FALLBACK = \"0.9.4\";\nvoid PINNED_FALLBACK;"
+				"const SUPPLY_MANIFEST = \"scripts/fixtures/herdr-supply.json\";\nconst PINNED_FALLBACK = \"0.9.5\";\nvoid PINNED_FALLBACK;"
 			],
 			"gate": ["bash", "run.sh", "check-herdr-supply"],
 			"timeoutSeconds": 120,
@@ -19,8 +19,8 @@
 			"claim": "HSUP-DIGEST-SHAPE",
 			"title": "a pinned digest is truncated, so the check that is supposed to catch a swapped binary can no longer fail",
 			"subject": "scripts/fixtures/herdr-supply.json",
-			"find": ["\"sha256\": \"493304fbefb0ed0ea0455f373b47f48d24e8774bc7974f4c916ad2e937675b23\""],
-			"replace": ["\"sha256\": \"493304fbefb0ed0ea0455f373b47\""],
+			"find": ["\"sha256\": \"14d9e8bc8b4a9e0118d77c32266f76d461f09b40342eb23752960bd89f59929d\""],
+			"replace": ["\"sha256\": \"14d9e8bc8b4a9e0118d77c32266f\""],
 			"gate": ["bash", "run.sh", "check-herdr-supply"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:HSUP-DIGEST-SHAPE]",
@@ -122,8 +122,8 @@
 			"claim": "HSUP-EXECUTION-RECEIPT-BOUND",
 			"title": "the x86_64 asset is recorded as executed with no receipt bound to this pin's version and its own full digest",
 			"subject": "scripts/fixtures/herdr-supply.json",
-			"find": ["\"executed\": false"],
-			"replace": ["\"executed\": true"],
+			"find": ["\"executedReceipt\": \"herdr 0.9.5 linux-x86_64"],
+			"replace": ["\"unboundReceipt\": \"herdr 0.9.5 linux-x86_64"],
 			"gate": ["bash", "run.sh", "check-herdr-supply"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:HSUP-EXECUTION-RECEIPT-BOUND]",

package/scripts/mutants/pi-durable.json

@@ -400,7 +400,7 @@
 			"subject": "pi/pi-durable/carrier-relocation.mjs",
 			"find": ["return `./${name}`;"],
 			"replace": ["return spec;"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-RELOCATION-TWO-RULES]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -412,7 +412,7 @@
 			"subject": "pi/pi-durable/carrier-relocation.mjs",
 			"find": ["if (begun !== statements) {"],
 			"replace": ["if (false) {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-RELOCATION-REFUSES]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -424,7 +424,7 @@
 			"subject": "pi/pi-durable/carrier-relocation.mjs",
 			"find": ["return pathToFileURL(file).href;"],
 			"replace": ["return pathToFileURL(path.join(dist(), \"..\", target)).href;"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-RESOLVE-DECLARED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -436,7 +436,7 @@
 			"subject": "pi/pi-durable/carrier-relocation.mjs",
 			"find": ["if (!files.includes(parent)) {"],
 			"replace": ["if (parent === \"\") {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-RESOLVE-REFUSES]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -448,7 +448,7 @@
 			"subject": "pi/pi-durable/carrier-relocation.mjs",
 			"find": ["if (name !== CODING_AGENT) {"],
 			"replace": ["if (false) {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-HOST-ROOT]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -458,9 +458,9 @@
 			"claim": "PI-DURABLE-CARRIER-PIN-MATCHES",
 			"title": "the pin records a digest the committed carrier file does not carry, so a carrier edited after emission would still be the declared one",
 			"subject": "pi/pi-durable/overlay/upstream-pin.json",
-			"find": ["\"sha256\": \"60c2965eadbdbbe78fce1b7eeb89d97eb3104a30b7d58ebca87009d2e9118403\""],
+			"find": ["\"sha256\": \"725757156580ad2a2d170c790440763371bb8035052a0c6caae6af5159d4718f\""],
 			"replace": ["\"sha256\": \"0000000000000000000000000000000000000000000000000000000000000000\""],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-PIN-MATCHES]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -472,7 +472,7 @@
 			"subject": "pi/pi-durable/carrier-relocation.mjs",
 			"find": ["if (!names?.every(plain) || names.length === 0"],
 			"replace": ["if (!names || names.length === 0"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-PIN-MALFORMED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -484,7 +484,7 @@
 			"subject": "scripts/emit-pi-durable-carrier.ts",
 			"find": ["return [\"--no-replace-objects\", \"-C\", source, ...args];"],
 			"replace": ["return [\"-C\", source, ...args];"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-EMIT-NO-REPLACE]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -701,9 +701,9 @@
 			"claim": "PI-DURABLE-MODULE-ABSENT-UNCHANGED",
 			"title": "the module phase runs without a --native-module, so a launch that names no module still tries to import one",
 			"subject": "pi/pi-durable/bootstrap.mjs",
-			"find": ["\tconst { nativeModules = [], ...args } = parseArgs(argv);"],
-			"replace": ["\tconst { nativeModules = [undefined], ...args } = parseArgs(argv);"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"find": ["\tconst { nativeModules = [], resume = false, ...args } = parseArgs(argv);"],
+			"replace": ["\tconst { nativeModules = [undefined], resume = false, ...args } = parseArgs(argv);"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-ABSENT-UNCHANGED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -718,7 +718,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["\tif (!isAbsolute(value))"],
 			"replace": ["\tif (false)"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-PATH-REFUSED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -735,15 +735,15 @@
 				"\tconst extensions = await loadNativeModules(nativeModules);",
 				"\t// Loaded before anything opens, as upstream main.ts imports it statically: a TUI that cannot",
 				"\t// load opens no session, mints no citizen and leaves nothing to clean up.",
-				"\tconst { runDurableTui } = await loadTui();"
+				"\tconst tui = await loadTui();"
 			],
 			"replace": [
 				"\t// Loaded before anything opens, as upstream main.ts imports it statically: a TUI that cannot",
 				"\t// load opens no session, mints no citizen and leaves nothing to clean up.",
-				"\tconst { runDurableTui } = await loadTui();",
+				"\tconst tui = await loadTui();",
 				"\tconst extensions = await loadNativeModules(nativeModules);"
 			],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-INIT-BEFORE-RUNTIME]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -763,7 +763,7 @@
 				"\t\tthrow Object.assign(",
 				"\t\t\trefuse(\"native-module-import-failed\","
 			],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-IMPORT-FAILED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -778,7 +778,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["\tconst changed = identityChanges(before, identitySnapshot());"],
 			"replace": ["\tconst changed = identityChanges(identitySnapshot(), identitySnapshot());"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-IDENTITY-GUARD]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -791,9 +791,9 @@
 			"claim": "PI-DURABLE-MODULE-CWD-PINNED",
 			"title": "the app is opened wherever the process is at open time, not in the caller's directory fixed before the module ran",
 			"subject": "pi/pi-durable/bootstrap.mjs",
-			"find": ["\tconst citizen = await openDurableCitizen({ ...args, cwd, extensions, bridgeEntry, open, contact });"],
-			"replace": ["\tconst citizen = await openDurableCitizen({ ...args, extensions, bridgeEntry, open, contact });"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"find": ["\t\t...(session === undefined ? {} : { session }),\n\t\tcwd,\n\t\textensions,\n\t\tbridgeEntry,"],
+			"replace": ["\t\t...(session === undefined ? {} : { session }),\n\t\textensions,\n\t\tbridgeEntry,"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-CWD-PINNED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -808,7 +808,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["\tif (RESERVED_EXTENSION_NAMES.includes(extension.name)) {"],
 			"replace": ["\tif (false) {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-EXPORT-NAME]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -823,7 +823,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["\t\t\textensions: [contact.extension, ...extensions],"],
 			"replace": ["\t\t\textensions: [...extensions, contact.extension],"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-EXTENSION-ORDER]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -838,7 +838,7 @@
 			"subject": "pi/pi-durable/src/experimental/durable/tui.ts",
 			"find": ["\t\tconst forms = [...detailed, tasks, `⏳ ${n}`, `⏳${n}`, `*${n}`, \"*+\", \"*\"];"],
 			"replace": ["\t\tconst forms = [...detailed, tasks, `⏳ ${n}`, `⏳${n}`, `*${n}`, \"*\"];"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-EMIT-SOURCE-EQUAL]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -850,7 +850,7 @@
 			"subject": "scripts/emit-pi-durable-carrier.ts",
 			"find": ["\tif (pinned !== running) {"],
 			"replace": ["\tif (false) {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-CARRIER-EMIT-NODE-EXACT]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -862,7 +862,7 @@
 			"subject": "pi/pi-durable/tsconfig.json",
 			"find": ["\t\"exclude\": []"],
 			"replace": ["\t\"files\": []"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-SOURCE-FENCE-RESOLVES]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -876,7 +876,7 @@
 			"replace": [
 				"\t\t\ttoggleTasks: () => command(async () => update({ tasksPanel: !state.tasksPanel, tasks: state.tasksPanel ? undefined : state.tasks })),"
 			],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-FOOTER-GRAPH-LIFETIME]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -891,7 +891,7 @@
 			"subject": "pi/pi-durable/carrier/tui.js",
 			"find": ["\t\tconst nodes = Object.values(graph?.tasks ?? {}).filter((node) => node.background);"],
 			"replace": ["\t\tconst nodes = Object.values(graph?.tasks ?? {});"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-FOOTER-BADGE-COUNT]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -906,7 +906,7 @@
 			"subject": "pi/pi-durable/carrier/tui.js",
 			"find": ["\t\tconst forms = [...detailed, tasks, `⏳ ${n}`, `⏳${n}`, `*${n}`, \"*+\", \"*\"];"],
 			"replace": ["\t\tconst forms = [...detailed, tasks, `⏳ ${n}`, `⏳${n}`, \"*\"];"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-FOOTER-BADGE-WIDTH]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -921,7 +921,7 @@
 			"subject": "pi/pi-durable/carrier/tui.js",
 			"find": ["\t\t\tcomponent: new VStack([{ component: badge, shrink: 0 }, ...dock]),"],
 			"replace": ["\t\t\tcomponent: new VStack([...dock, { component: badge, shrink: 0 }]),"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-FOOTER-BADGE-PROTECTED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -936,7 +936,7 @@
 			"subject": "pi/pi-durable/carrier/tui.js",
 			"find": ["\t\t\tvisible: (viewport) => badge.count === 0 || viewport.height > 1,"],
 			"replace": ["\t\t\tvisible: (viewport) => viewport.height > 1,"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-FOOTER-ZERO-UPSTREAM]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -951,7 +951,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["const MODULE_ENTRY = /^[^.].*\\.extension\\.mjs$/;"],
 			"replace": ["const MODULE_ENTRY = /\\.extension\\.mjs$/;"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-DIR-TOPLEVEL-FILTER]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -966,7 +966,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["\t\t.sort((a, b) => Buffer.compare(Buffer.from(a), Buffer.from(b)));"],
 			"replace": ["\t\t.sort((a, b) => a.localeCompare(b));"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-DIR-ORDER-BYTEWISE]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -981,7 +981,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["\tif (names.length === 0) {"],
 			"replace": ["\tif (false) {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-DIR-REFUSED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -996,7 +996,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["\tif (moduleArg !== undefined && dirArg !== undefined) {"],
 			"replace": ["\tif (false) {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-DIR-EXCLUSIVE]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -1011,7 +1011,7 @@
 			"subject": "pi/pi-durable/bootstrap.mjs",
 			"find": ["\t\t\tif (owners.has(name)) {"],
 			"replace": ["\t\t\tif (false) {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-native-module"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-MODULE-DIR-NAME-DUPLICATE]",
 			"signatureSource": "pi-extensions/lib/pi-durable-native-module.test.ts",
@@ -1026,7 +1026,7 @@
 			"subject": "package.json",
 			"find": ["\t\t\"pi/pi-durable/carrier/\",\n"],
 			"replace": ["\t\t\"pi/pi-durable/carrier/\",\n\t\t\"pi/pi-durable/src/\",\n"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-SOURCE-NOT-SHIPPED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1060,7 +1060,7 @@
 			"subject": "pi/pi-durable/carrier/subagent.js",
 			"find": ["\t\t\t\t\toutput: [{ type: \"text\", text }],"],
 			"replace": ["\t\t\t\t\tcontent: [{ type: \"text\", text }],"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-SUBAGENT-OUTPUT-MODEL-VISIBLE]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1084,7 +1084,7 @@
 			"subject": "pi/pi-durable/carrier/runtime.js",
 			"find": ["\t\t\tupdate({ failure: {} });"],
 			"replace": ["\t\t\t// the failure is not recorded"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-FATAL-SESSION-VIEW]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1096,7 +1096,7 @@
 			"subject": "pi/pi-durable/carrier/tui.js",
 			"find": ["\tif (view.failure !== undefined) {"],
 			"replace": ["\tif (view.failure === null) {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-FATAL-SESSION-SHOWN]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1108,7 +1108,7 @@
 			"subject": "pi/pi-durable/carrier/runtime.js",
 			"find": ["\t\t\t\t\tif (state.failure !== undefined) {"],
 			"replace": ["\t\t\t\t\tif (state.failure === null) {"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-FATAL-SUBMIT-REFUSED]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1120,7 +1120,7 @@
 			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
 			"find": ["const problems = retire(\"session-failed\", \"the durable session failed and closed itself\");"],
 			"replace": ["const problems: string[] = [];"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-RECEIVER-RETIRE-ON-FATAL]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1134,7 +1134,7 @@
 				"\t\t\t\t\t// First: the Session runs its close listeners inside its own close call.\n\t\t\t\t\tunsubscribeClose();"
 			],
 			"replace": ["\t\t\t\t\t// First: the Session runs its close listeners inside its own close call."],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-SELF-CLOSE-NOT-FAILURE]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
@@ -1142,15 +1142,87 @@
 		},
 		{
 			"claim": "PI-DURABLE-COMPACTION-FAILURE-SHOWN",
-			"title": "the TUI drops the conversation's retained compaction failure: a failed background compaction vanishes from the screen once its status is removed",
+			"title": "the TUI drops the conversation's retained compaction failure: a failed threshold compaction vanishes from the screen once its status is removed",
 			"subject": "pi/pi-durable/carrier/tui.js",
 			"find": ["\tif (compaction !== undefined) {\n\t\tlines.push"],
 			"replace": ["\tif (compaction === null) {\n\t\tlines.push"],
-			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-COMPACTION-FAILURE-SHOWN]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
 			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-STREAM-TRANSPORT-WIRE",
+			"title": "the Harness settings stop carrying the transport: the provider never continues a response, so every request of a long session resends the whole conversation",
+			"subject": "pi/pi-durable/carrier/harness-setup.js",
+			"find": ["\t\t\t\ttransport: settingsManager.getTransport(),"],
+			"replace": ["\t\t\t\t// transport is not forwarded"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-STREAM-TRANSPORT-WIRE]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-STREAM-TRANSPORT-FORWARDED",
+			"title": "the Harness settings fix the transport instead of reading the operator's: a chosen sse or plain websocket is silently replaced by auto",
+			"subject": "pi/pi-durable/carrier/harness-setup.js",
+			"find": ["\t\t\t\ttransport: settingsManager.getTransport(),"],
+			"replace": ["\t\t\t\ttransport: \"auto\","],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-STREAM-TRANSPORT-FORWARDED]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-COMPACTION-WAITS",
+			"title": "the Harness settings hand the SDK pi's compaction settings alone: its default background policy summarizes beside a running turn instead of the turn waiting",
+			"subject": "pi/pi-durable/carrier/harness-setup.js",
+			"find": ["\t\t\treturn { ...settingsManager.getCompactionSettings(), backgroundTokens: 0 };"],
+			"replace": ["\t\t\treturn settingsManager.getCompactionSettings();"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-COMPACTION-WAITS]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-PROMPT-SKILL-SCOPE-BASE",
+			"title": "the prompt hands the skills setting over as written: a relative project entry is read against the conversation's directory and its skills are silently not listed",
+			"subject": "pi/pi-durable/carrier/prompt.js",
+			"find": ["\t\t\t\t\tskillPaths: scopedSkillPaths(settings, agentDir, fallbackCwd),"],
+			"replace": ["\t\t\t\t\tskillPaths: settings.getSkillPaths(),"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-PROMPT-SKILL-SCOPE-BASE]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-RESUME-OPENS-CHOSEN",
+			"title": "the runtime drops the chosen session id: --resume opens a new session instead of the conversation the operator picked",
+			"subject": "pi/pi-durable/carrier/runtime.js",
+			"find": ["\t\toptions.continueSession ?? false,\n\t\toptions.session,\n\t);"],
+			"replace": ["\t\toptions.continueSession ?? false,\n\t);"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RESUME-OPENS-CHOSEN]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-RESUME-CANCEL-OPENS-NOTHING",
+			"title": "a cancelled --resume falls back to the newest session: the operator said no and a conversation opens anyway",
+			"subject": "pi/pi-durable/bootstrap.mjs",
+			"find": ["\t\t\tprocess.stderr.write(\"[pi-durable] resume-cancelled: nothing was opened\\n\");\n\t\t\treturn;"],
+			"replace": ["\t\t\targs.continueSession = true;"],
+			"gate": ["bash", "run.sh", "check-pi-durable-carrier"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RESUME-CANCEL-OPENS-NOTHING]",
+			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		}
 	]
 }