@junghanacs/entwurf 0.39.0 → 0.41.0

package/scripts/mutants/meta-identity.json

@@ -48,6 +48,63 @@
 			"timeoutSeconds": 120,
 			"signature": "[QK:META-CREATE-PUBLISHED-CLEANUP]",
 			"signatureSource": "scripts/check-meta-session.ts"
+		},
+		{
+			"claim": "META-V3-INCARNATION-ABSENT-NULL",
+			"title": "a V3 body without attachIncarnation is refused, so every untouched record becomes unreadable",
+			"subject": "pi-extensions/lib/meta-session.ts",
+			"find": [
+				"\t\tattachIncarnation: requireAttachIncarnation(obj.attachIncarnation === undefined ? null : obj.attachIncarnation),"
+			],
+			"replace": ["\t\tattachIncarnation: requireAttachIncarnation(obj.attachIncarnation),"],
+			"gate": ["bash", "run.sh", "check-meta-v3-record"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:META-V3-INCARNATION-ABSENT-NULL]",
+			"signatureSource": "scripts/check-meta-v3-record.ts"
+		},
+		{
+			"claim": "META-V3-INCARNATION-MALFORMED",
+			"title": "any string is accepted as a binding",
+			"subject": "pi-extensions/lib/meta-session.ts",
+			"find": ["\tif (typeof value !== \"string\" || !ATTACH_INCARNATION_RE.test(value)) {"],
+			"replace": ["\tif (typeof value !== \"string\") {"],
+			"gate": ["bash", "run.sh", "check-meta-v3-record"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:META-V3-INCARNATION-MALFORMED]",
+			"signatureSource": "scripts/check-meta-v3-record.ts"
+		},
+		{
+			"claim": "META-V3-INCARNATION-ALWAYS-EMITTED",
+			"title": "the serializer drops attachIncarnation, so a committed binding never reaches disk",
+			"subject": "pi-extensions/lib/meta-session.ts",
+			"find": ["\t\tattachIncarnation: identity.attachIncarnation,"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-meta-v3-record"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:META-V3-INCARNATION-ALWAYS-EMITTED]",
+			"signatureSource": "scripts/check-meta-v3-record.ts"
+		},
+		{
+			"claim": "META-UPSERT-PRESERVES-INCARNATION",
+			"title": "an attach that does not mint clears the binding",
+			"subject": "pi-extensions/lib/meta-session.ts",
+			"find": ["\t\t\t? existing.attachIncarnation"],
+			"replace": ["\t\t\t? null"],
+			"gate": ["bash", "run.sh", "check-meta-v3-record"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:META-UPSERT-PRESERVES-INCARNATION]",
+			"signatureSource": "scripts/check-meta-v3-record.ts"
+		},
+		{
+			"claim": "META-UPSERT-EXPECT-ACTION",
+			"title": "upsert ignores expectAction, so a raced create silently becomes an unlocked attach",
+			"subject": "pi-extensions/lib/meta-session.ts",
+			"find": ["\tif (opts.expectAction !== undefined && decision.action !== opts.expectAction) {"],
+			"replace": ["\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-meta-session"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:META-UPSERT-EXPECT-ACTION]",
+			"signatureSource": "scripts/check-meta-session.ts"
 		}
 	]
 }

package/scripts/mutants/mux-fresh-call.json

@@ -151,7 +151,7 @@
 			"title": "MCP drops the required model field from fresh-call while the composition still expects one",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\tmodel: z\n\t\t\t.string()\n\t\t\t.min(1)\n\t\t\t.max(200)\n\t\t\t// The `\\[` below is USELESS TO JS AND LOAD-BEARING TO THE HOST. zod emits this source\n\t\t\t// text verbatim as the JSON Schema `pattern`, and the host's tool-schema validator is a\n\t\t\t// Rust regex engine that rejects an unescaped `[` inside a character class as \"unclosed\n\t\t\t// character class\" — a 400 on tools/list that stops EVERY Claude session from opening\n\t\t\t// (7-M-fix). Biome's safe fix removes it; do not accept that fix. The suppression must\n\t\t\t// stay on the line DIRECTLY above the expression, or it attaches to nothing and reads\n\t\t\t// as an unused suppression while the escape goes back to being fixable.\n\t\t\t// biome-ignore lint/complexity/noUselessEscapeInRegex: emitted to a Rust regex validator, see above\n\t\t\t.regex(/^[A-Za-z0-9][A-Za-z0-9._/:\\[\\]-]*$/)\n\t\t\t.describe(\n\t\t\t\t\"Required runtime model: canonical provider/model for pi, provider/<exact catalog model id> for pi-durable, a Claude Code model id/alias, or a Copilot/OMP/Codex model name.\",\n\t\t\t),\n"
+				"\t\tmodel: z\n\t\t\t.string()\n\t\t\t.min(1)\n\t\t\t.max(200)\n\t\t\t// The `\\[` below is USELESS TO JS AND LOAD-BEARING TO THE HOST. zod emits this source\n\t\t\t// text verbatim as the JSON Schema `pattern`, and the host's tool-schema validator is a\n\t\t\t// Rust regex engine that rejects an unescaped `[` inside a character class as \"unclosed\n\t\t\t// character class\" — a 400 on tools/list that stops EVERY Claude session from opening\n\t\t\t// (7-M-fix). Biome's safe fix removes it; do not accept that fix. The suppression must\n\t\t\t// stay on the line DIRECTLY above the expression, or it attaches to nothing and reads\n\t\t\t// as an unused suppression while the escape goes back to being fixable.\n\t\t\t// biome-ignore lint/complexity/noUselessEscapeInRegex: emitted to a Rust regex validator, see above\n\t\t\t.regex(/^[A-Za-z0-9][A-Za-z0-9._/:\\[\\]-]*$/)\n\t\t\t.describe(\n\t\t\t\t\"Required runtime model: canonical provider/model for pi (a bare alias is refused), provider/<exact catalog model id> for pi-durable, a Claude Code model id/alias, or a Copilot/OMP/Codex model name. Neither pi nor pi-durable may name the openrouter provider.\",\n\t\t\t),\n"
 			],
 			"replace": [""],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],

package/scripts/mutants/mux-resume-call.json

@@ -72,8 +72,11 @@
 			"claim": "MUXRESUME-NO-IDENTITY",
 			"title": "identity vocabulary enters the placement module, which is the first step of a leaf learning whose citizen it is opening",
 			"subject": "pi-extensions/lib/mux-resume-call.ts",
-			"find": ["export const RESUME_CALL_RUNTIME = \"pi\";"],
-			"replace": ["export const RESUME_CALL_RUNTIME = \"pi\";\nexport const RESUME_CALL_TARGET_KEY = \"gardenId\";"],
+			"find": ["export const RESUME_CALL_RUNTIME = { pi: \"pi\", \"claude-code\": \"claude\" } as const;"],
+			"replace": [
+				"export const RESUME_CALL_RUNTIME = { pi: \"pi\", \"claude-code\": \"claude\" } as const;",
+				"export const RESUME_CALL_TARGET_KEY = \"gardenId\";"
+			],
 			"gate": ["bash", "run.sh", "check-mux-resume-call"],
 			"timeoutSeconds": 60,
 			"signature": "[QK:MUXRESUME-NO-IDENTITY]",
@@ -97,10 +100,10 @@
 			"title": "the MCP description drops the dormant-only scope, inviting callers to aim the verb at live citizens it will refuse",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\"Reopen ONE DORMANT pi citizen under its OWN garden id, in a visible window in the operator's own tmux \""
+				"\t\"Reopen ONE DORMANT pi or Claude Code citizen under its OWN garden id, in a visible window in the operator's \" +"
 			],
 			"replace": [
-				"\t\"Reopen ONE pi citizen under its OWN garden id, in a visible window in the operator's own tmux \""
+				"\t\"Reopen ONE pi or Claude Code citizen under its OWN garden id, in a visible window in the operator's \" +"
 			],
 			"gate": ["bash", "run.sh", "check-mux-resume-call"],
 			"timeoutSeconds": 60,
@@ -119,6 +122,39 @@
 			"timeoutSeconds": 60,
 			"signature": "[QK:MUXRESUME-MCP-TARGET-PASSTHROUGH]",
 			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-RUNTIME-TABLE",
+			"title": "a Claude Code resume is started under pi, so the window opens the wrong runtime on the right session id",
+			"subject": "pi-extensions/lib/mux-resume-call.ts",
+			"find": ["export const RESUME_CALL_RUNTIME = { pi: \"pi\", \"claude-code\": \"claude\" } as const;"],
+			"replace": ["export const RESUME_CALL_RUNTIME = { pi: \"pi\", \"claude-code\": \"pi\" } as const;"],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-RUNTIME-TABLE]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-HERDR-REFUSED",
+			"title": "inside herdr the tmux resume rail no longer refuses, so an ambient TMUX opens the window where the operator is not looking",
+			"subject": "pi-extensions/lib/mux-resume-call.ts",
+			"find": ["\tif (env.HERDR_ENV === \"1\") return { ok: false, reason: \"herdr-resume-unsupported\" };"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-HERDR-REFUSED]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-ARGV-IDENTITY-SCRUB",
+			"title": "the resume window stops emptying the inherited pi identity carriers, so a resumed Claude Code presents a stale identity to its bridge",
+			"subject": "pi-extensions/lib/mux-resume-call.ts",
+			"find": ["\t\t...SCRUBBED_INHERITED_ENV.flatMap((assignment) => [\"-e\", assignment]),"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-ARGV-IDENTITY-SCRUB]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
 		}
 	]
 }

package/scripts/mutants/pi-durable.json

@@ -2,6 +2,61 @@
 	"schemaVersion": 1,
 	"lane": "pi-durable",
 	"mutants": [
+		{
+			"claim": "PI-DURABLE-RETIRE-CALL",
+			"title": "retirement alone drops the actual request cancellation signal",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": [
+				"\t\t\tconst call = () => client.callTool(name, (args ?? {}) as Record<string, unknown>, context?.abortSignal);"
+			],
+			"replace": [
+				"\t\t\tconst call = () => client.callTool(name, (args ?? {}) as Record<string, unknown>, name === \"entwurf_retire_call\" ? undefined : context?.abortSignal);"
+			],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RETIRE-CALL]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-RETIRE-POLICY",
+			"title": "the native retirement description treats actor identity as a standing grant",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": [
+				"\t\t\"Only when the human operator explicitly requested this particular target/work: make ONE retirement attempt for that request \" +"
+			],
+			"replace": [
+				"\t\t\"A caller record alone authorizes this target/work: make ONE retirement attempt for that request \" +"
+			],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RETIRE-POLICY]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "PI-DURABLE-RETIRE-CALL-REACHES-BRIDGE",
+			"title": "the compiled retirement handler discards the actual host-authoritative caller",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": [
+				"\t\t\t\t\tresolveCaller: async () => (await resolveAuthoritativeSender({ requestMeta: extra._meta }))?.envelope ?? null,"
+			],
+			"replace": ["\t\t\t\t\tresolveCaller: async () => null,"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RETIRE-CALL-REACHES-BRIDGE]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
 		{
 			"claim": "PI-DURABLE-ENTRY-GUARD-FLOOR-SAFE",
 			"title": "the verifier's entry guard goes back to import.meta.main, which the floor's runner can misread as the process entry",
@@ -1223,6 +1278,30 @@
 			"signature": "[QK:PI-DURABLE-RESUME-CANCEL-OPENS-NOTHING]",
 			"signatureSource": "pi-extensions/lib/pi-durable-carrier.test.ts",
 			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-RESUME-CALL-EXPOSED",
+			"title": "entwurf_resume_call drops out of the durable contact's tools, so the coordinator citizen cannot reopen a dormant pi sibling",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": ["\t\ttools: PI_DURABLE_TOOL_NAMES.map(tool),"],
+			"replace": ["\t\ttools: PI_DURABLE_TOOL_NAMES.filter((name) => name !== \"entwurf_resume_call\").map(tool),"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RESUME-CALL-EXPOSED]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "PI-DURABLE-RESUME-CALL-REACHES-BRIDGE",
+			"title": "the production stdio connector stops carrying a tool's arguments: every stub-bridge case still passes, but the real bridge never sees the target the model named",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": ["const result = await client.callTool({ name, arguments: args }, undefined, { signal });"],
+			"replace": ["const result = await client.callTool({ name, arguments: {} }, undefined, { signal });"],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-RESUME-CALL-REACHES-BRIDGE]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		}
 	]
 }

package/scripts/mutants/pi-retire-request.json

@@ -0,0 +1,72 @@
+{
+	"schemaVersion": 1,
+	"lane": "pi-retire-request",
+	"mutants": [
+		{
+			"claim": "PI-RETIRE-PREFLIGHT",
+			"title": "a mismatched native session escapes preflight and sends a retirement RPC",
+			"subject": "pi-extensions/lib/pi-retire-request.ts",
+			"find": ["\t\ttarget.nativeSessionId !== expected.nativeSessionId ||\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-pi-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:PI-RETIRE-PREFLIGHT]",
+			"signatureSource": "pi-extensions/lib/pi-retire-request.test.ts"
+		},
+		{
+			"claim": "PI-RETIRE-WIRE",
+			"title": "the one fixed retirement request carries a different native session than the certified record",
+			"subject": "pi-extensions/lib/pi-retire-request.ts",
+			"find": ["{ type: \"retire\", gardenId: target.gardenId, nativeSessionId: target.nativeSessionId }"],
+			"replace": ["{ type: \"retire\", gardenId: target.gardenId, nativeSessionId: \"wrong-native-id\" }"],
+			"gate": ["bash", "run.sh", "check-pi-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:PI-RETIRE-WIRE]",
+			"signatureSource": "pi-extensions/lib/pi-retire-request.test.ts"
+		},
+		{
+			"claim": "PI-RETIRE-PARSE-CLOSED",
+			"title": "a failure response with a requested boundary is incorrectly accepted",
+			"subject": "pi-extensions/lib/pi-retire-request.ts",
+			"find": ["if (response.success === true && data.boundary === \"shutdown-requested\") {"],
+			"replace": ["if (data.boundary === \"shutdown-requested\") {"],
+			"gate": ["bash", "run.sh", "check-pi-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:PI-RETIRE-PARSE-CLOSED]",
+			"signatureSource": "pi-extensions/lib/pi-retire-request.test.ts"
+		},
+		{
+			"claim": "PI-RETIRE-REFUSALS",
+			"title": "the known receiver refusal domain is dropped and every named refusal becomes unknown",
+			"subject": "pi-extensions/lib/pi-retire-request.ts",
+			"find": ["if (data.boundary === \"refused\" && RECEIVER_REFUSALS.includes(data.reason as ReceiverRefusal)) {"],
+			"replace": ["if (false) {"],
+			"gate": ["bash", "run.sh", "check-pi-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:PI-RETIRE-REFUSALS]",
+			"signatureSource": "pi-extensions/lib/pi-retire-request.test.ts"
+		},
+		{
+			"claim": "PI-RETIRE-TRANSPORT",
+			"title": "a timeout or lost response is misreported as a certain receiver refusal",
+			"subject": "pi-extensions/lib/pi-retire-request.ts",
+			"find": ["\t\treturn { boundary: \"unknown\", reason: \"transport-error\" };"],
+			"replace": ["\t\treturn { boundary: \"refused\", phase: \"receiver\", reason: \"target-closing\" };"],
+			"gate": ["bash", "run.sh", "check-pi-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:PI-RETIRE-TRANSPORT]",
+			"signatureSource": "pi-extensions/lib/pi-retire-request.test.ts"
+		},
+		{
+			"claim": "PI-RETIRE-ENVELOPE",
+			"title": "the production receiver drops its error reason so the strict adapter cannot interpret refusals",
+			"subject": "pi-extensions/lib/control-retire.ts",
+			"find": ["\t\t...(result.boundary !== \"shutdown-requested\" ? { error: result.reason } : {}),\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-pi-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:PI-RETIRE-ENVELOPE]",
+			"signatureSource": "pi-extensions/lib/pi-retire-request.test.ts"
+		}
+	]
+}

package/scripts/mutants/remote-pair-display.json

@@ -0,0 +1,53 @@
+{
+	"schemaVersion": 1,
+	"lane": "remote-pair-display",
+	"mutants": [
+		{
+			"claim": "REMOTE-DISPLAY-LOCAL-UNCHANGED",
+			"title": "the remote branch is taken for every non-replyable sender, so an ordinary external or meta-session header turns into a remote line naming a route that does not exist",
+			"subject": "pi-extensions/lib/meta-mailbox-body.ts",
+			"find": ["\tconst remote = !replyable ? sender.remote : undefined;"],
+			"replace": [
+				"\tconst remote = !replyable ? (sender.remote ?? { via: \"?\", replyRoute: \"none\" as const }) : undefined;"
+			],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-DISPLAY-LOCAL-UNCHANGED]",
+			"signatureSource": "pi-extensions/lib/meta-mailbox-body.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-DISPLAY-SESSIONLINE",
+			"title": "a remote sender with a declared route back is told to reply via entwurf_v2 as if that route had been probed",
+			"subject": "pi-extensions/lib/meta-mailbox-body.ts",
+			"find": ["\"reply route declared, not probed\""],
+			"replace": ["\"reply via entwurf_v2 to this sessionId\""],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-DISPLAY-SESSIONLINE]",
+			"signatureSource": "pi-extensions/lib/meta-mailbox-body.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-DISPLAY-SENDER-HOST-CWD",
+			"title": "a remote sender's cwd is abbreviated against this host's HOME, so a path on the other machine reads as a local one",
+			"subject": "pi-extensions/lib/meta-mailbox-body.ts",
+			"find": ["\tconst where = remote ? `${sender.cwd} (sender-host path)` : abbreviateHome(sender.cwd);"],
+			"replace": ["\tconst where = abbreviateHome(sender.cwd);"],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-DISPLAY-SENDER-HOST-CWD]",
+			"signatureSource": "pi-extensions/lib/meta-mailbox-body.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		}
+	]
+}

package/scripts/mutants/remote-pair-installed-audit.json

@@ -0,0 +1,28 @@
+{
+	"schemaVersion": 1,
+	"lane": "remote-pair-installed-audit",
+	"mutants": [
+		{
+			"claim": "RPI-AUDIT-REAL-PATH",
+			"title": "the installed-closure audit judges a resolved file by its link path, so an installed file that is a symlink into a checkout passes as inside the consumer",
+			"subject": "scripts/lib/remote-pair-installed-audit.ts",
+			"find": ["\t\t\tconst real = fs.realpathSync(fileURLToPath(url));"],
+			"replace": ["\t\t\tconst real = fileURLToPath(url);"],
+			"gate": ["bash", "run.sh", "check-remote-pair-installed-audit"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:RPI-AUDIT-REAL-PATH]",
+			"signatureSource": "test/remote-pair-installed-audit.test.ts"
+		},
+		{
+			"claim": "RPI-AUDIT-ROOT-BOUNDARY",
+			"title": "the installed-closure audit treats any path that merely starts with the consumer prefix as inside it, so a sibling directory such as <prefix>-x passes",
+			"subject": "scripts/lib/remote-pair-installed-audit.ts",
+			"find": ["\t\t\tif (real !== realRoot && !real.startsWith(`${realRoot}${path.sep}`)) out.add(real);"],
+			"replace": ["\t\t\tif (real !== realRoot && !real.startsWith(realRoot)) out.add(real);"],
+			"gate": ["bash", "run.sh", "check-remote-pair-installed-audit"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:RPI-AUDIT-ROOT-BOUNDARY]",
+			"signatureSource": "test/remote-pair-installed-audit.test.ts"
+		}
+	]
+}

package/scripts/mutants/remote-pair-receive.json

@@ -0,0 +1,126 @@
+{
+	"schemaVersion": 1,
+	"lane": "remote-pair-receive",
+	"mutants": [
+		{
+			"claim": "REMOTE-PAIR-FROM-OUTSIDE-NO-MUTATION",
+			"title": "the receiving entry stops checking the claimed sender against the declared pair, so any gid the SSH account writes is dispatched into the declared target's mailbox",
+			"subject": "pi-extensions/lib/remote-pair-receive.ts",
+			"find": ["\tif (claim.from !== decl.remoteGardenId) {"],
+			"replace": ["\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-PAIR-FROM-OUTSIDE-NO-MUTATION]",
+			"signatureSource": "pi-extensions/lib/remote-pair-receive.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-PAIR-TARGET-OUTSIDE-NO-MUTATION",
+			"title": "the receiving entry stops checking the claimed target against the declared pair, so a declared remote can reach every deliverable citizen on this host",
+			"subject": "pi-extensions/lib/remote-pair-receive.ts",
+			"find": ["\tif (claim.target !== decl.localGardenId) {"],
+			"replace": ["\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-PAIR-TARGET-OUTSIDE-NO-MUTATION]",
+			"signatureSource": "pi-extensions/lib/remote-pair-receive.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-PAIR-IGNORES-AMBIENT-SENDER",
+			"title": "the receiving entry lets an ambient PI_SESSION_ID in the SSH environment stand in for the sender, so the header names whoever's carrier leaked instead of the claim",
+			"subject": "pi-extensions/lib/remote-pair-receive.ts",
+			"find": ["\t\tsessionId: claim.from,"],
+			"replace": ["\t\tsessionId: process.env.PI_SESSION_ID ?? claim.from,"],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-PAIR-IGNORES-AMBIENT-SENDER]",
+			"signatureSource": "pi-extensions/lib/remote-pair-receive.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-PAIR-MATCH-DISPATCHES-ONCE",
+			"title": "the receiving entry marks a remote sender replyable, so the body tells the receiver to reply via entwurf_v2 as if a live local reply route had been probed — none was",
+			"subject": "pi-extensions/lib/remote-pair-receive.ts",
+			"find": ["\t\treplyable: false,"],
+			"replace": ["\t\treplyable: true,"],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-PAIR-MATCH-DISPATCHES-ONCE]",
+			"signatureSource": "pi-extensions/lib/remote-pair-receive.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-PAIR-CLAIM-EXACT-SHAPE",
+			"title": "the claim parser accepts extra or missing fields, so a sender-side field the receiver never reads can ride in and a partial claim is dispatched",
+			"subject": "pi-extensions/lib/remote-pair-receive.ts",
+			"find": ["\tif (got.length !== want.length || got.some((k, i) => k !== want[i])) {"],
+			"replace": ["\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-PAIR-CLAIM-EXACT-SHAPE]",
+			"signatureSource": "pi-extensions/lib/remote-pair-receive.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-PAIR-ENTRY-REFUSES-OUTSIDE",
+			"title": "the entry reports a pair refusal as exit 0, so the sending host cannot tell a refused claim from a dispatched one without parsing prose",
+			"subject": "scripts/remote-pair-receive.ts",
+			"find": ["emit(receipt, receipt.kind === \"rejected\" ? 3 : receipt.isError ? 4 : 0);"],
+			"replace": ["emit(receipt, receipt.kind === \"rejected\" ? 0 : receipt.isError ? 4 : 0);"],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-PAIR-ENTRY-REFUSES-OUTSIDE]",
+			"signatureSource": "pi-extensions/lib/remote-pair-receive.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-PAIR-ENTRY-USAGE",
+			"title": "the entry accepts any --pair it is given, so the sender picks which declaration scopes the claim on the receiving host",
+			"subject": "scripts/remote-pair-receive.ts",
+			"find": ["\tif (!path.isAbsolute(pairFile) || path.normalize(pairFile) !== own) {"],
+			"replace": ["\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-PAIR-ENTRY-USAGE]",
+			"signatureSource": "pi-extensions/lib/remote-pair-receive.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-PAIR-ENTRY-REPLY-ROUTE-DECLARED",
+			"title": "the entry reports no route back for a claim its own opt-in pairs with, so the receiver is told it cannot answer a sender it has declared",
+			"subject": "scripts/remote-pair-receive.ts",
+			"find": ["\treplyRoute: \"declared\","],
+			"replace": ["\treplyRoute: \"none\","],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-PAIR-ENTRY-REPLY-ROUTE-DECLARED]",
+			"signatureSource": "pi-extensions/lib/remote-pair-receive.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		}
+	]
+}

package/scripts/mutants/remote-pair-roundtrip.json

@@ -0,0 +1,83 @@
+{
+	"schemaVersion": 1,
+	"lane": "remote-pair-roundtrip",
+	"mutants": [
+		{
+			"claim": "REMOTE-ROUNDTRIP-A-TO-B",
+			"title": "the bridge never reads the opt-in, so a declared remote target falls through to the local decider as bad-target",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\t\t\t\t\troute: readRemotePairOptIn(remotePairOptInPath()),"],
+			"replace": ["\t\t\t\t\troute: null,"],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUNDTRIP-A-TO-B]",
+			"signatureSource": "pi-extensions/lib/remote-pair-roundtrip.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUNDTRIP-REVERSE-DISPATCH",
+			"title": "the bridge's transport never reaches the other host and always answers exit 1, so every declared remote send in either direction becomes indeterminate",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\t\t\t\t\ttransport: processTransport,"],
+			"replace": [
+				"\t\t\t\t\ttransport: { run: async () => ({ exitCode: 1, signal: null, timedOut: false, stdout: \"\", stderr: \"\" }) },"
+			],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUNDTRIP-REVERSE-DISPATCH]",
+			"signatureSource": "pi-extensions/lib/remote-pair-roundtrip.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUNDTRIP-OPT-IN-ABSENT-OFF",
+			"title": "the bridge replaces the local surface on the remote path's behalf, so a host with no opt-in stops running the existing local decider",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\t\t\t\t\trunLocal: (params, opts) => runAndRenderEntwurfV2FromSurface(params, opts),"],
+			"replace": ["\t\t\t\t\trunLocal: async () => ({ isError: false, text: \"local skipped\" }),"],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUNDTRIP-OPT-IN-ABSENT-OFF]",
+			"signatureSource": "pi-extensions/lib/remote-pair-roundtrip.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUNDTRIP-OTHER-HOST-REFUSES",
+			"title": "the sender renders the other host's pair refusal without naming it, so A cannot tell B refused the pair from any other failure",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["refused by the other host's pair: ${o.reason} (${o.detail})"],
+			"replace": ["failed"],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUNDTRIP-OTHER-HOST-REFUSES]",
+			"signatureSource": "pi-extensions/lib/remote-pair-roundtrip.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUNDTRIP-LOCAL-TRACE-BOTH-SOCKET-DIRS",
+			"title": "the bridge checks only its own ENTWURF_DIR, so a live local socket in the decider's canonical dir is bypassed and the gid is sent away",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": ["\t\t\t\t\t\tcontrolSocketDirs: [CONTROL_SOCKET_DIR, ENTWURF_DIR],"],
+			"replace": ["\t\t\t\t\t\tcontrolSocketDirs: [ENTWURF_DIR],"],
+			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUNDTRIP-LOCAL-TRACE-BOTH-SOCKET-DIRS]",
+			"signatureSource": "pi-extensions/lib/remote-pair-roundtrip.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		}
+	]
+}