@junghanacs/entwurf 0.39.0 → 0.41.0

package/scripts/check-capability-bundle-reach.ts

@@ -28,8 +28,14 @@
  *   - B4: the live load seam `metaCapabilityFor()` returns for every
  *         META_CITIZEN_BACKENDS backend without throwing — the real `entwurf_v2` path.
  *
- * Deterministic: filesystem + import only. No backend, no network, no API, no
- * record write. Safe in the `pnpm check` static floor.
+ *   - C (#147 L2 B1): the compiled Claude Code hook's static `from` closure equals what
+ *         the installer copies, and the hook staged with only that closure runs.
+ *   - D (#147 G3): the compiled Claude Code retire adapter resolves its helper beside itself,
+ *         byte-identical to pi-extensions/lib/cc-retire-pidfd.py.
+ *
+ * Deterministic: filesystem, import, and ONE shipped-hook child process (C2) that writes a
+ * record into its own private store under a private HOME and XDG roots. No backend, vendor
+ * CLI, model, network or API. Safe in the `pnpm check` static floor.
  *
  * REQUIRES a built bridge (`pnpm run build-bridge`, which `prepare`/`prepack` run).
  * A missing dist is a FAILURE, never a skip — a gate that skips when the artifact
@@ -37,9 +43,13 @@
  */
 
 import assert from "node:assert/strict";
+import { spawnSync } from "node:child_process";
 import fs from "node:fs";
+import os from "node:os";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
+import { hookImportClosure, installerCopiedLibFiles, stageMetaHookBundle } from "./lib/meta-hook-bundle.ts";
+import { reclaimOnExit } from "./lib/reclaim-on-exit.ts";
 
 const REPO = path.join(import.meta.dirname, "..");
 
@@ -127,4 +137,127 @@ for (const copy of copies) {
 	}
 }
 
+// C — the COMPILED Claude Code hook bundle reaches its whole closure (#147 L2 B1). Moved here from
+// check-meta-hook-session-switch, whose source-only qualification snapshot has no dist: this gate
+// already requires the built bundle, so the emission proof sits with the dist consumer. Scope is
+// the static double-quoted `from` imports scripts/lib/meta-hook-bundle.ts follows; the staged RUN
+// is the independent proof that nothing outside them is needed.
+{
+	const DIST_HOOK = path.join(BRIDGE_DIST, "pi-extensions", "meta-bridge-hook.js");
+	ok(
+		"C0: the compiled hook entry exists (a missing dist is a failure, not a skip)",
+		fs.existsSync(DIST_HOOK),
+		`--- expected ---\n${DIST_HOOK}\nrun: pnpm run build-bridge`,
+	);
+	const installerCopies = installerCopiedLibFiles(
+		fs.readFileSync(path.join(REPO, "scripts", "meta-bridge-install.sh"), "utf8"),
+	);
+	const distClosure = hookImportClosure(DIST_HOOK)
+		.map((rel) => path.basename(rel))
+		.map((base) => (base === "session-id.js" ? base : base.replace(/\.(ts|js)$/, ".$LIB_EXT")))
+		.sort();
+	ok(
+		"C1: the installer copies exactly the compiled hook's static `from` import closure [QK:BUNDLE-REACH-COMPILED-HOOK-CLOSURE]",
+		distClosure.includes("entwurf-v2-lock.$LIB_EXT") && JSON.stringify(distClosure) === JSON.stringify(installerCopies),
+		`--- compiled closure ---\n${distClosure.join("\n")}\n--- installer copies ---\n${installerCopies.join("\n")}`,
+	);
+	// Stage the compiled entry with ONLY that closure and run it the way Claude does: the shipped
+	// manifest's exec argv through the shipped launcher, every meta root sandboxed, provenance never
+	// inherited. A record on disk means the compiled closure loaded end to end.
+	const PLUGIN_SRC = path.join(REPO, "pi", "meta-bridge", "entwurf-meta-receive");
+	const leaf =
+		(
+			JSON.parse(fs.readFileSync(path.join(PLUGIN_SRC, "hooks", "hooks.json"), "utf8")) as {
+				hooks: Record<string, Array<{ hooks: Array<{ command?: string; args?: string[] }> }>>;
+			}
+		).hooks.SessionStart?.[0]?.hooks[0] ?? {};
+	const root = reclaimOnExit(fs.mkdtempSync(path.join(os.tmpdir(), "psa-bundle-reach-jshook-")));
+	const agent = reclaimOnExit(fs.mkdtempSync(path.join(os.tmpdir(), "psa-bundle-reach-jsagent-")));
+	stageMetaHookBundle(root, DIST_HOOK, path.join(PLUGIN_SRC, "scripts", "hook-launch.sh"));
+	const el = (v: string) =>
+		v
+			.replace("__NODE_BIN__", process.execPath)
+			.replaceAll("${CLAUDE_PLUGIN_ROOT}", root)
+			.replace("__HOOK_ENTRY__", "meta-bridge-hook.js");
+	// Hard Rule 12: the child's HOME and every writable XDG root are private too, not only the
+	// meta roots — a hook that resolved anything through HOME/XDG must land inside `agent`.
+	const priv = (name: string) => {
+		const dir = path.join(agent, name);
+		fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+		return dir;
+	};
+	const env: NodeJS.ProcessEnv = {
+		...process.env,
+		HOME: priv("home"),
+		XDG_CONFIG_HOME: priv("xdg-config"),
+		XDG_CACHE_HOME: priv("xdg-cache"),
+		XDG_DATA_HOME: priv("xdg-data"),
+		XDG_STATE_HOME: priv("xdg-state"),
+		XDG_RUNTIME_DIR: priv("xdg-runtime"),
+		CLAUDE_PLUGIN_ROOT: root,
+		PI_CODING_AGENT_DIR: agent,
+		ENTWURF_META_SESSIONS_DIR: path.join(agent, "meta-sessions"),
+		ENTWURF_META_SENDERS_DIR: path.join(agent, "meta-senders"),
+		ENTWURF_META_RECEIVERS_DIR: path.join(agent, "meta-receivers"),
+		ENTWURF_META_MAILBOX_DIR: path.join(agent, "meta-mailbox"),
+	};
+	delete env.ENTWURF_META_HOOK_LAUNCH;
+	const run = spawnSync(el(leaf.command ?? ""), (leaf.args ?? []).map(el), {
+		encoding: "utf8",
+		input: JSON.stringify({
+			hook_event_name: "SessionStart",
+			session_id: "c0c0c0c0-compiled-closure",
+			transcript_path: path.join(agent, "c0c0c0c0.jsonl"),
+			cwd: agent,
+			source: "startup",
+		}),
+		env,
+	});
+	const sessions = path.join(agent, "meta-sessions");
+	ok(
+		"C2: the compiled hook, staged with only that closure, runs to a written record [QK:BUNDLE-REACH-COMPILED-HOOK-RUNS]",
+		run.status === 0 && fs.existsSync(sessions) && fs.readdirSync(sessions).some((n) => n.endsWith(".meta.json")),
+		`--- exit ${run.status} ---\n${run.stderr}`,
+	);
+}
+
+// D — the COMPILED Claude Code retire adapter reaches its helper from where it lives (#147 G3).
+// `ccRetireHelperPath()` resolves a fixed basename beside its own module, which is a tautology from
+// source; only the emitted copy can say whether build-bridge.sh put the bytes next to it. Import and
+// path only — nothing is spawned or signalled.
+{
+	const DIST_ADAPTER = path.join(BRIDGE_DIST, "pi-extensions", "lib", "cc-retire-request.js");
+	const HELPER_SOURCE = path.join(REPO, "pi-extensions", "lib", "cc-retire-pidfd.py");
+	ok(
+		"D0: the compiled retire adapter exists (a missing dist is a failure, not a skip)",
+		fs.existsSync(DIST_ADAPTER),
+		`--- expected ---\n${DIST_ADAPTER}\nrun: pnpm run build-bridge`,
+	);
+	const adapter = await import(pathToFileURL(DIST_ADAPTER).href);
+	const resolved: string | null = adapter.ccRetireHelperPath();
+	ok(
+		"D1: the compiled adapter resolves the helper beside itself, byte-identical to the canonical source [QK:BUNDLE-REACH-CC-RETIRE-HELPER]",
+		resolved === path.join(path.dirname(DIST_ADAPTER), "cc-retire-pidfd.py") &&
+			fs.readFileSync(resolved).equals(fs.readFileSync(HELPER_SOURCE)),
+		`--- resolved ---\n${resolved}\n--- canonical ---\n${HELPER_SOURCE}`,
+	);
+}
+
+// E — ask the actual emitted Pi request adapter, not its source-path test import.
+// Pure parsing only: no socket, SDK lifecycle, model, or operator state is touched.
+{
+	const entry = path.join(BRIDGE_DIST, "pi-extensions", "lib", "pi-retire-request.js");
+	ok("E0: the compiled Pi retire adapter exists (missing emission is not a skip)", fs.existsSync(entry));
+	const adapter = await import(pathToFileURL(entry).href);
+	const response = { type: "response", command: "retire", success: true, data: { boundary: "shutdown-requested" } };
+	const accepted = adapter.parsePiRetireResponse(response);
+	const rejected = adapter.parsePiRetireResponse({ ...response, command: "send" });
+	ok(
+		"E1: the shipped Pi adapter loads, accepts a requested reply, and rejects a foreign command as unknown [QK:BUNDLE-REACH-PI-RETIRE-ADAPTER]",
+		accepted.boundary === "shutdown-requested" &&
+			rejected.boundary === "unknown" &&
+			rejected.reason === "malformed-response",
+	);
+}
+
 console.log(`\ncheck-capability-bundle-reach: PASS (${passed} assertions)`);

package/scripts/check-entwurf-bridge-boot.ts

@@ -253,11 +253,12 @@ async function main(): Promise<void> {
 		"entwurf_peers",
 		"entwurf_register_native",
 		"entwurf_resume_call",
+		"entwurf_retire_call",
 		"entwurf_self",
 		"entwurf_v2",
 	];
 	ok(
-		"[QK:BRIDGEBOOT-PUBLIC-SURFACE-EXACT-SET] G1f: the runtime tools/list surface is EXACTLY the eight shipped garden verbs — no missing verb, no undecided extra, no duplicate",
+		"[QK:BRIDGEBOOT-PUBLIC-SURFACE-EXACT-SET] G1f: the runtime tools/list surface is EXACTLY the nine garden verbs — no missing verb, no undecided extra, no duplicate",
 		publicSurface.length === expectedSurface.length && expectedSurface.every((n, i) => publicSurface[i] === n),
 		`--- want ---\n${expectedSurface.join(",")}\n--- got ---\n${publicSurface.join(",")}`,
 	);

package/scripts/check-entwurf-fact-provider.ts

@@ -59,6 +59,7 @@ function rec(gardenId: string, backend: MetaCitizenBackend): string {
 		transcriptPath: null,
 		createdAt: "2026-06-11T00:00:00.000Z",
 		recordUpdatedAt: "2026-06-11T00:00:00.000Z",
+		attachIncarnation: null,
 	});
 }
 

package/scripts/check-entwurf-v2-production.ts

@@ -80,6 +80,7 @@ function identity(backend: MetaIdentity["backend"], gardenId = GID): MetaIdentit
 		transcriptPath: null,
 		createdAt: "2026-06-13T01:00:00.000Z",
 		recordUpdatedAt: "2026-06-13T01:00:00.000Z",
+		attachIncarnation: null,
 	};
 }
 
@@ -97,6 +98,7 @@ function receiverMarker(gid: string, backend: string, nativeSessionId = "n"): Me
 		ownerKind: "claude-code-cli",
 		armProvenance: "session-start",
 		updatedAt: "t",
+		attachIncarnation: null,
 	};
 }
 

package/scripts/check-entwurf-v2-surface.ts

@@ -630,6 +630,13 @@ async function main(): Promise<void> {
 				/visible-first/.test(dormantHint) &&
 				/entwurf_resume_call/.test(dormantHint),
 		);
+		ok(
+			"[QK:V2SURF-RESUME-HINT-SCOPE] dormant hint names Pi/Claude Code promptless resume only on explicit operator request, never automatic permission",
+			dormantHint.includes("Only on an explicit operator request") &&
+				dormantHint.includes("entwurf_resume_call {target} for Pi or Claude Code") &&
+				dormantHint.includes("it submits no prompt") &&
+				dormantHint.includes("not permission to resume automatically"),
+		);
 		// The frozen wire id still spells "-no-spawn" although nothing spawns anymore. The id is
 		// deliberately NOT renamed (renaming a public reject is its own contract cut), so the
 		// hint carries the whole correction: probe inconclusive, and nothing ran.

package/scripts/check-gate-qualification.ts

@@ -3449,9 +3449,15 @@ let manifestCount: number;
 		"agy-permission": 6,
 		"bridge-boot-resume": 5,
 		"bridge-command-boot": 12,
+		"cc-retire-pidfd": 11,
+		"cc-retire-request": 15,
+		"entwurf-v2-retire": 32,
 		"capability-cache": 3,
 		"codex-app-server-launch": 10,
 		"codex-caller-seat": 28,
+		"pi-retire-request": 6,
+		"retirement-event": 16,
+		"control-retire": 9,
 		"control-send-receipt": 19,
 		"codex-native": 87,
 		"compaction-send-guard": 7,
@@ -3464,10 +3470,10 @@ let manifestCount: number;
 		"pi-bridge-sender": 4,
 		"pi-mcp-bridge": 2,
 		"pi-mcp-register": 3,
-		"pi-durable": 84,
+		"pi-durable": 89,
 		"copilot-receive": 20,
 		"entwurf-peers": 1,
-		"fresh-call-dispatch": 12,
+		"fresh-call-dispatch": 15,
 		"fresh-cut": 3,
 		"gate-qualification": 10,
 		"herdr-placement": 13,
@@ -3481,8 +3487,8 @@ let manifestCount: number;
 		"herdr-supply": 11,
 		"meta-facts": 4,
 		"peer-facts": 8,
-		"meta-hook-session-switch": 17,
-		"meta-identity": 4,
+		"meta-hook-session-switch": 25,
+		"meta-identity": 9,
 		"meta-retire": 4,
 		"mux-boundary": 16,
 		"mux-fresh-call": 65,
@@ -3491,21 +3497,27 @@ let manifestCount: number;
 		"pack-install": 5,
 		"pi-package-ownership": 8,
 		"qualification-ledger": 42,
-		"mux-resume-call": 10,
+		"mux-resume-call": 13,
 		"omp-birth": 13,
 		"omp-fresh": 24,
 		"omp-receive": 11,
 		"probe-ordering": 1,
 		"release-gate": 21,
+		"remote-pair-display": 3,
+		"remote-pair-installed-audit": 2,
+		"remote-pair-receive": 8,
+		"remote-pair-roundtrip": 5,
+		"remote-pair-send": 12,
+		"remote-pair-transport": 4,
 		"retired-sent-surface": 2,
 		"resume-args": 6,
-		"resume-launch-identity": 7,
+		"resume-launch-identity": 10,
 		"self-address": 8,
 		"setup-verdict": 14,
 		"source-install": 2,
 		"typing-call-fence": 1,
-		"v2-surface": 13,
-		"v2-visible-resume": 18,
+		"v2-surface": 14,
+		"v2-visible-resume": 40,
 		"win32-preview": 19,
 	};
 	const laneTally: Record<string, number> = {};

package/scripts/check-herdr-activation.ts

@@ -113,7 +113,7 @@ function fakeClaude(env: NodeJS.ProcessEnv): string {
 			"#!/usr/bin/env bash",
 			'printf \'%s\\n\' "$*" >> "${FAKE_CLAUDE_LOG:?}"',
 			'case "$1${2:+ $2}" in',
-			'  "--version") echo "2.1.217 (Claude Code)" ;;',
+			'  "--version") echo "2.1.306 (Claude Code)" ;;',
 			'  "plugin validate") : ;;',
 			'  "plugin uninstall") : ;;',
 			'  "plugin marketplace") : ;;',
@@ -1317,7 +1317,7 @@ function ledgerWith(
 		[
 			"#!/usr/bin/env bash",
 			'case "$1 $2" in',
-			'  "--version "*|"--version") echo "2.1.217 (Claude Code)" ;;',
+			'  "--version "*|"--version") echo "2.1.306 (Claude Code)" ;;',
 			'  *) echo "broken fixture" >&2; exit 1 ;;',
 			"esac",
 		].join("\n"),

package/scripts/check-herdr-placement.ts

@@ -96,6 +96,7 @@ function identity(nativeSessionId: string, backend: MetaIdentity["backend"] = "c
 		transcriptPath: null,
 		createdAt: "2026-09-14T00:00:00.000Z",
 		recordUpdatedAt: "2026-09-14T00:00:00.000Z",
+		attachIncarnation: null,
 	};
 }
 

package/scripts/check-hook-launch-topology.ts

@@ -41,10 +41,11 @@
 
 import assert from "node:assert/strict";
 import { spawnSync } from "node:child_process";
-import { chmodSync, copyFileSync, existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync } from "node:fs";
+import { existsSync, mkdtempSync, readdirSync, readFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import * as path from "node:path";
 import { fileURLToPath } from "node:url";
+import { stageMetaHookBundle } from "./lib/meta-hook-bundle.ts";
 import { reclaimOnExit } from "./lib/reclaim-on-exit.ts";
 
 let passed = 0;
@@ -191,7 +192,7 @@ for (const event of OWNER_EVENTS) {
 	const bare = spawnSync(LAUNCHER, [], { encoding: "utf8", input: "" });
 	ok("launcher with EMPTY argv exits non-zero", bare.status !== null && bare.status !== 0);
 	ok("launcher with empty argv names the args drop on stderr", /discarded the hook's `args`/.test(bare.stderr));
-	ok("launcher with empty argv names the required floor", /2\.1\.217/.test(bare.stderr));
+	ok("launcher with empty argv names the required floor", /2\.1\.306/.test(bare.stderr));
 	ok("launcher with empty argv refuses a fallback", /no shell-form fallback/i.test(bare.stderr));
 	ok("launcher writes nothing to stdout on refusal (never a hook response)", bare.stdout === "");
 }
@@ -232,19 +233,9 @@ for (const event of OWNER_EVENTS) {
 // exactly what the metacharacter cell below silently failed to prove in its first
 // version (cross-review, 2026-07-22).
 function makeBundle(root: string): void {
-	mkdirSync(path.join(root, "lib"), { recursive: true });
-	mkdirSync(path.join(root, "scripts"), { recursive: true });
-	copyFileSync(path.join(REPO_DIR, "pi-extensions", "meta-bridge-hook.ts"), path.join(root, "meta-bridge-hook.ts"));
-	copyFileSync(
-		path.join(REPO_DIR, "pi-extensions", "lib", "meta-session.ts"),
-		path.join(root, "lib", "meta-session.ts"),
-	);
-	copyFileSync(path.join(REPO_DIR, "pi-extensions", "lib", "session-id.js"), path.join(root, "lib", "session-id.js"));
-	const launcher = path.join(root, "scripts", "hook-launch.sh");
-	copyFileSync(LAUNCHER, launcher);
-	// The exec form names the launcher as the executable, so the +x bit is load-bearing:
-	// without it Claude gets ENOEXEC, not a degraded path. The installer chmods it too.
-	chmodSync(launcher, 0o755);
+	// Entry + its OWN import closure + the launcher (scripts/lib/meta-hook-bundle.ts): a hand-kept
+	// list here could stay green while the installer missed a file the hook now imports.
+	stageMetaHookBundle(root, path.join(REPO_DIR, "pi-extensions", "meta-bridge-hook.ts"), LAUNCHER);
 }
 
 /** Resolve one manifest element the way Claude does: plain-string substitution, no shell. */

package/scripts/check-install-container.sh

@@ -321,7 +321,7 @@ function finish(t) {
   // artifact ship" is precisely the question it owns. The subset form named only the five
   // pre-0.14 verbs and would have accepted a candidate with no entwurf_fresh_call /
   // entwurf_resume_call; equality also refuses an extra or duplicated verb.
-  const EXPECT_TOOLS = ['entwurf_callback', 'entwurf_fresh_call', 'entwurf_inbox_read', 'entwurf_peers', 'entwurf_register_native', 'entwurf_resume_call', 'entwurf_self', 'entwurf_v2'];
+  const EXPECT_TOOLS = ['entwurf_callback', 'entwurf_fresh_call', 'entwurf_inbox_read', 'entwurf_peers', 'entwurf_register_native', 'entwurf_resume_call', 'entwurf_retire_call', 'entwurf_self', 'entwurf_v2'];
   if (names.length !== EXPECT_TOOLS.length || EXPECT_TOOLS.some((n, i) => names[i] !== n)) {
     console.error('MCP tool set MISMATCH — want exactly [' + EXPECT_TOOLS.join(',') + '] got [' + names.join(',') + ']');
     process.exit(1);
@@ -357,7 +357,7 @@ cat > "$FAKEBIN/claude" <<'SH'
 #!/usr/bin/env bash
 printf '%s\n' "$*" >> "$FAKE_CLAUDE_LOG"
 case "$1${2:+ $2}${3:+ $3}" in
-  "--version") echo "2.1.217 (Claude Code)" ;;
+  "--version") echo "2.1.306 (Claude Code)" ;;
   "plugin list --json")
     printf '[{"id":"entwurf-meta-receive@meta-bridge-local","version":"0.1.0","enabled":true,"installPath":"%s"}]\n' "$FAKE_INSTALL_PATH" ;;
   "plugin list"*) printf '%s\n' "entwurf-meta-receive@meta-bridge-local" "  Status: enabled" ;;

package/scripts/check-meta-doctor-oracle.sh

@@ -91,7 +91,7 @@ cat > "$BIN/claude" <<'SH'
 printf '%s\n' "$*" >> "$FAKE_CLAUDE_LOG"
 case "$1${2:+ $2}${3:+ $3}" in
   "--version")
-    echo "2.1.217 (Claude Code)" ;;
+    echo "2.1.306 (Claude Code)" ;;
   "plugin list --json")
     # FAKE_NO_JSON stands in for a Claude floor with no --json surface at all.
     [ "${FAKE_NO_JSON:-0}" = 1 ] && exit 0
@@ -214,6 +214,23 @@ if env CLAUDE_PLUGIN_ROOT="$PLANTED" "${HOOK_ARGV[@]}" < "$TMP/hook-input.json"
 else
   bad "owner fixture drive failed: $(tr '\n' ' ' < "$TMP/hook-run.txt" | cut -c1-300)"
 fi
+# The INSTALLED closure, not the checkout, committed the arm binding (#147 L2 B1): the record
+# and the receiver marker the planted bundle wrote carry the same fresh value. A bundle missing
+# the lock module its hook imports could not have loaded far enough to write either.
+if python3 - "$AGENT" <<'PY'
+import glob, json, os, re, sys
+agent = sys.argv[1]
+recs = [json.load(open(f)) for f in glob.glob(os.path.join(agent, "meta-sessions", "*.meta.json"))]
+rec = next(r for r in recs if r.get("nativeSessionId") == "oracle-native-1")
+marker = json.load(open(os.path.join(agent, "meta-receivers", f"{rec['gardenId']}.json")))
+value = rec.get("attachIncarnation")
+sys.exit(0 if isinstance(value, str) and re.fullmatch(r"[0-9a-f]{32}", value) and marker.get("attachIncarnation") == value else 1)
+PY
+then
+  ok "the installed bundle committed a paired arm binding (record == receiver marker)"
+else
+  bad "[QK:DOCTOR-ORACLE-INSTALLED-ARM-BINDING] the installed bundle's arm did not leave a record and receiver marker carrying the same attachIncarnation"
+fi
 
 # Fake live entwurf MCP child of this same stand-in Claude pid. The doctor discovers it
 # by env + agent dir, so a UNIQUE sandbox agent dir keeps it from colliding with the
@@ -553,6 +570,15 @@ mv "$PLANTED/lib/meta-session.ts" "$TMP/meta-session.bak"
 expect_red "installed writer bundle missing" "deployed writer version is UNKNOWN"
 mv "$TMP/meta-session.bak" "$PLANTED/lib/meta-session.ts"
 
+# M10b/M10c — the hook's record-arm lock module (#147 L2 B1) is part of the deployed writer
+# closure: missing and drifted bytes are each a named red, not a runtime-only surprise.
+mv "$PLANTED/lib/entwurf-v2-lock.ts" "$TMP/entwurf-v2-lock.bak"
+expect_red "installed hook lock module missing" "deployed hook lock module MISSING"
+cp "$TMP/entwurf-v2-lock.bak" "$PLANTED/lib/entwurf-v2-lock.ts"
+printf '\n// drift\n' >> "$PLANTED/lib/entwurf-v2-lock.ts"
+expect_red "installed hook lock module drifted" "deployed hook lock module STALE"
+mv "$TMP/entwurf-v2-lock.bak" "$PLANTED/lib/entwurf-v2-lock.ts"
+
 # M11 — a FAILING `claude mcp get` whose output still matches. `|| true` would have
 # read this as a healthy USER-scope reach; rc must survive the capture.
 export FAKE_MCP_RC=3

package/scripts/check-meta-facts.ts

@@ -5,7 +5,7 @@
  * Drives the REAL CLI as a subprocess against sandboxed fixture stores (never the
  * live store; every path is an explicit mkdtemp dir). What it proves:
  *
- *   - the join is the FULL verbatim strict 9-field v3 record — gardenId,
+ *   - the join is the FULL verbatim strict v3 record — gardenId,
  *     nativeSessionId AND transcriptPath cross together, sorted by gardenId;
  *   - drift / symlink / invalid-UTF-8 entries become in-band defects with exit 0,
  *     and a symlinked record's target bytes are never followed into the join;
@@ -58,6 +58,7 @@ function record(gardenId: string, over: Partial<MetaIdentity> = {}): string {
 		transcriptPath: `/t/${gardenId}.jsonl`,
 		createdAt: "2026-06-11T00:00:00.000Z",
 		recordUpdatedAt: "2026-06-11T00:00:00.000Z",
+		attachIncarnation: null,
 		...over,
 	});
 }
@@ -119,6 +120,7 @@ function parseProjection(run: CliRun, label: string): Projection {
 				transcriptPath: null,
 				createdAt: "2026-06-11T00:00:00.000Z",
 				recordUpdatedAt: "2026-06-11T00:00:00.000Z",
+				attachIncarnation: null,
 			},
 			{
 				schemaVersion: 3,
@@ -130,11 +132,14 @@ function parseProjection(run: CliRun, label: string): Projection {
 				transcriptPath: `/t/${GID_B}.jsonl`,
 				createdAt: "2026-06-11T00:00:00.000Z",
 				recordUpdatedAt: "2026-06-11T00:00:00.000Z",
+				attachIncarnation: null,
 			},
 		],
-		"[QK:MF-FULL-V3-JOIN] citizens are the full verbatim 9-field v3 records, sorted by gardenId",
+		"[QK:MF-FULL-V3-JOIN] citizens are the full verbatim v3 records (10 fields, attachIncarnation included), sorted by gardenId",
+	);
+	console.log(
+		"  ok    citizens are the full verbatim v3 records (10 fields, attachIncarnation included), sorted by gardenId",
 	);
-	console.log("  ok    citizens are the full verbatim 9-field v3 records, sorted by gardenId");
 	passed++;
 	ok("valid store has no defects", facts.defects.length === 0);
 	const again = cli([dir]);