@junghanacs/entwurf 0.40.0 → 0.41.0

package/scripts/mutants/cc-retire-request.json

@@ -0,0 +1,171 @@
+{
+	"schemaVersion": 1,
+	"lane": "cc-retire-request",
+	"mutants": [
+		{
+			"claim": "CCREQ-STABLE-GO-EXITS",
+			"title": "a stable binding writes cancel instead of go, so a retirement the caller authorised never happens",
+			"subject": "pi-extensions/lib/cc-retire-request.ts",
+			"find": ["\t\t\twrite(\"go\");"],
+			"replace": ["\t\t\twrite(\"cancel\");"],
+			"gate": ["bash", "run.sh", "check-cc-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:CCREQ-STABLE-GO-EXITS]",
+			"signatureSource": "pi-extensions/lib/cc-retire-request.test.ts"
+		},
+		{
+			"claim": "CCREQ-RECORD-DRIFT-CANCELS",
+			"title": "the record is no longer compared with what the caller authorised, so a committed re-arm after ready still gets go",
+			"subject": "pi-extensions/lib/cc-retire-request.ts",
+			"find": ["\t\tif (record[key] !== expected[key]) {"],
+			"replace": ["\t\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-cc-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:CCREQ-RECORD-DRIFT-CANCELS]",
+			"signatureSource": "pi-extensions/lib/cc-retire-request.test.ts"
+		},
+		{
+			"claim": "CCREQ-RECEIVER-DRIFT-CANCELS",
+			"title": "the receiver's native session is not joined to the record, so a marker re-armed for another session still gets go",
+			"subject": "pi-extensions/lib/cc-retire-request.ts",
+			"find": ["\t\tmarker.backend !== \"claude-code\" ||\n\t\tmarker.nativeSessionId !== record.nativeSessionId\n"],
+			"replace": ["\t\tmarker.backend !== \"claude-code\"\n"],
+			"gate": ["bash", "run.sh", "check-cc-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:CCREQ-RECEIVER-DRIFT-CANCELS]",
+			"signatureSource": "pi-extensions/lib/cc-retire-request.test.ts"
+		},
+		{
+			"claim": "CCREQ-SENDER-DRIFT-CANCELS",
+			"title": "the sender marker's garden is not compared, so an owner that switched to another citizen in place is still terminated",
+			"subject": "pi-extensions/lib/cc-retire-request.ts",
+			"find": ["\t\tsender.gardenId !== gid ||\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-cc-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:CCREQ-SENDER-DRIFT-CANCELS]",
+			"signatureSource": "pi-extensions/lib/cc-retire-request.test.ts"
+		},
+		{
+			"claim": "CCREQ-PRECHECK-REFUSES",
+			"title": "an unbound record is not refused by name, so a record no arm ever touched reaches the binding comparison as if it had one",
+			"subject": "pi-extensions/lib/cc-retire-request.ts",
+			"find": ["\tif (record.attachIncarnation === null) {"],
+			"replace": ["\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-cc-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:CCREQ-PRECHECK-REFUSES]",
+			"signatureSource": "pi-extensions/lib/cc-retire-request.test.ts"
+		},
+		{
+			"claim": "CCREQ-HELPER-MISSING-REFUSED",
+			"title": "a missing packaged helper is not refused, so the interpreter is started on a path that is not the helper",
+			"subject": "pi-extensions/lib/cc-retire-request.ts",
+			"find": ["\tif (helperPath === null) {"],
+			"replace": ["\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-cc-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:CCREQ-HELPER-MISSING-REFUSED]",
+			"signatureSource": "pi-extensions/lib/cc-retire-request.test.ts"
+		},
+		{
+			"claim": "CCREQ-HELPER-PATH-FIXED",
+			"title": "the helper entry is followed through a symlink, so a file that is not the packaged bytes can stand in for the helper",
+			"subject": "pi-extensions/lib/cc-retire-request.ts",
+			"find": ["return fs.lstatSync(candidate).isFile() ? candidate : null;"],
+			"replace": ["return fs.statSync(candidate).isFile() ? candidate : null;"],
+			"gate": ["bash", "run.sh", "check-cc-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:CCREQ-HELPER-PATH-FIXED]",
+			"signatureSource": "pi-extensions/lib/cc-retire-request.test.ts"
+		},
+		{
+			"claim": "CCREQ-PROTOCOL-NOT-SUCCESS",
+			"title": "a ready line naming another pid is accepted, so the helper's process and the binding the adapter checked need not be the same",
+			"subject": "pi-extensions/lib/cc-retire-request.ts",
+			"find": [" || line.pid !== owner.pid)"],
+			"replace": [")"],
+			"gate": ["bash", "run.sh", "check-cc-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:CCREQ-PROTOCOL-NOT-SUCCESS]",
+			"signatureSource": "pi-extensions/lib/cc-retire-request.test.ts"
+		},
+		{
+			"claim": "CCREQ-LATCH-NO-GO-AFTER-FAILURE",
+			"title": "every stdout chunk forgets the protocol failure an earlier chunk recorded, so a buffered ready behind a bad line is parsed on the next chunk and gets go",
+			"subject": "pi-extensions/lib/cc-retire-request.ts",
+			"find": ["\t\tchild.stdout.on(\"data\", (chunk: Buffer) => {"],
+			"replace": ["\t\tchild.stdout.on(\"data\", (chunk: Buffer) => {\n\t\t\tprotocolError = null;"],
+			"gate": ["bash", "run.sh", "check-cc-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:CCREQ-LATCH-NO-GO-AFTER-FAILURE]",
+			"signatureSource": "pi-extensions/lib/cc-retire-request.test.ts"
+		},
+		{
+			"claim": "CCREQ-CONTROL-WRITE-THROW-UNKNOWN",
+			"title": "a go whose write threw leaves no trace, so the unknown outcome no longer names why it is unknown",
+			"subject": "pi-extensions/lib/cc-retire-request.ts",
+			"find": ["\t\t\t\tprotocolError ??= `writing the ${frame} frame threw: ${causeOf(err)}`;\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-cc-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:CCREQ-CONTROL-WRITE-THROW-UNKNOWN]",
+			"signatureSource": "pi-extensions/lib/cc-retire-request.test.ts"
+		},
+		{
+			"claim": "CCREQ-TRAILING-OUTPUT-NOT-SUCCESS",
+			"title": "incomplete trailing stdout is ignored, so a valid exited line followed by junk is reported as an observed exit",
+			"subject": "pi-extensions/lib/cc-retire-request.ts",
+			"find": ["\t\t\tif (buf.length > 0)"],
+			"replace": ["\t\t\tif (false)"],
+			"gate": ["bash", "run.sh", "check-cc-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:CCREQ-TRAILING-OUTPUT-NOT-SUCCESS]",
+			"signatureSource": "pi-extensions/lib/cc-retire-request.test.ts"
+		},
+		{
+			"claim": "CCREQ-TERMINAL-SHAPE-CLOSED",
+			"title": "terminal lines are no longer closed to the helper's wire shape, so extra or contradicting keys pass as a known outcome",
+			"subject": "pi-extensions/lib/cc-retire-request.ts",
+			"find": ["\tif (!terminalShapeOk(line)) return null;\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-cc-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:CCREQ-TERMINAL-SHAPE-CLOSED]",
+			"signatureSource": "pi-extensions/lib/cc-retire-request.test.ts"
+		},
+		{
+			"claim": "CCREQ-DOMAIN-FROM-WRITER",
+			"title": "the receiver owner kind is not checked, so another harness's process holding a matching marker is treated as a Claude Code owner",
+			"subject": "pi-extensions/lib/cc-retire-request.ts",
+			"find": ["\tif (marker.ownerKind !== CC_RECEIVER_OWNER_KIND) {"],
+			"replace": ["\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-cc-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:CCREQ-DOMAIN-FROM-WRITER]",
+			"signatureSource": "pi-extensions/lib/cc-retire-request.test.ts"
+		},
+		{
+			"claim": "CCREQ-ABORT-BEFORE-GO-NO-SIGNAL",
+			"title": "the requester's AbortSignal is dropped from the helper exchange, so neither the abort listener nor the ready-time abort check can stop a go while the fd is held (the preflight abort checks before spawn are untouched)",
+			"subject": "pi-extensions/lib/cc-retire-request.ts",
+			"find": ["\t\topts.signal?.addEventListener(\"abort\", onAbort, { once: true });"],
+			"replace": ["\t\topts = { ...opts, signal: undefined };"],
+			"gate": ["bash", "run.sh", "check-cc-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:CCREQ-ABORT-BEFORE-GO-NO-SIGNAL]",
+			"signatureSource": "pi-extensions/lib/cc-retire-request.test.ts"
+		},
+		{
+			"claim": "CCREQ-ABORT-AFTER-GO-UNKNOWN",
+			"title": "an abort after go is not recorded, so its ending is reported as a generic protocol failure instead of the requester's abort",
+			"subject": "pi-extensions/lib/cc-retire-request.ts",
+			"find": ["\t\t\t\tabortedAfterGo = true;\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-cc-retire-request"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:CCREQ-ABORT-AFTER-GO-UNKNOWN]",
+			"signatureSource": "pi-extensions/lib/cc-retire-request.test.ts"
+		}
+	]
+}

package/scripts/mutants/control-retire.json

@@ -0,0 +1,105 @@
+{
+	"schemaVersion": 1,
+	"lane": "control-retire",
+	"mutants": [
+		{
+			"claim": "RETIRE-SAME-PATH-REBIND",
+			"title": "same-path rebind tears down the live listener instead of preserving it",
+			"subject": "pi-extensions/lib/control-retire.ts",
+			"find": ["if (state.socketPath === socketPath && state.server) {"],
+			"replace": ["if (false) {"],
+			"gate": ["bash", "run.sh", "check-control-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-SAME-PATH-REBIND]",
+			"signatureSource": "pi-extensions/lib/control-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-IDENTITY",
+			"title": "an old generation with equal identity values is allowed to request shutdown",
+			"subject": "pi-extensions/lib/control-retire.ts",
+			"find": ["\t\tstate.binding !== serverBinding ||\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-control-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-IDENTITY]",
+			"signatureSource": "pi-extensions/lib/control-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-IDLE",
+			"title": "a busy TUI schedules process-wide shutdown instead of refusing",
+			"subject": "pi-extensions/lib/control-retire.ts",
+			"find": ["if (!ctx.isIdle())"],
+			"replace": ["if (false)"],
+			"gate": ["bash", "run.sh", "check-control-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-IDLE]",
+			"signatureSource": "pi-extensions/lib/control-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-TUI",
+			"title": "a non-TUI context enters an unproven shutdown scheduler",
+			"subject": "pi-extensions/lib/control-retire.ts",
+			"find": ["if (ctx.mode !== \"tui\")"],
+			"replace": ["if (false)"],
+			"gate": ["bash", "run.sh", "check-control-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-TUI]",
+			"signatureSource": "pi-extensions/lib/control-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-PENDING",
+			"title": "queued work is ignored when accepting an idle-only retirement",
+			"subject": "pi-extensions/lib/control-retire.ts",
+			"find": ["if (ctx.hasPendingMessages())"],
+			"replace": ["if (false)"],
+			"gate": ["bash", "run.sh", "check-control-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-PENDING]",
+			"signatureSource": "pi-extensions/lib/control-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-REQUEST-ONCE",
+			"title": "the same binding can invoke SDK shutdown again after its first request",
+			"subject": "pi-extensions/lib/control-retire.ts",
+			"find": ["\tstate.retireRequested = true;"],
+			"replace": ["\tstate.retireRequested = false;"],
+			"gate": ["bash", "run.sh", "check-control-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-REQUEST-ONCE]",
+			"signatureSource": "pi-extensions/lib/control-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-CALL-UNKNOWN",
+			"title": "a requested receipt is fabricated without calling the SDK, bypassing its possible failure",
+			"subject": "pi-extensions/lib/control-retire.ts",
+			"find": ["\t\tshutdown.call(ctx);"],
+			"replace": ["\t\tvoid shutdown;"],
+			"gate": ["bash", "run.sh", "check-control-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-CALL-UNKNOWN]",
+			"signatureSource": "pi-extensions/lib/control-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-INVALIDATE",
+			"title": "teardown fails to establish the closing boundary before awaiting server close",
+			"subject": "pi-extensions/lib/control-retire.ts",
+			"find": ["\tstate.closing = true;"],
+			"replace": ["\tstate.closing = false;"],
+			"gate": ["bash", "run.sh", "check-control-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-INVALIDATE]",
+			"signatureSource": "pi-extensions/lib/control-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-BOUNDED-CLOSE",
+			"title": "a half-open accepted peer holds session teardown indefinitely after FIN",
+			"subject": "pi-extensions/lib/control-retire.ts",
+			"find": ["\t\t\tfor (const socket of sockets) socket.destroy();"],
+			"replace": ["\t\t\tvoid sockets;"],
+			"gate": ["bash", "run.sh", "check-control-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-BOUNDED-CLOSE]",
+			"signatureSource": "pi-extensions/lib/control-retire.test.ts"
+		}
+	]
+}

package/scripts/mutants/copilot-receive.json

@@ -135,17 +135,13 @@
 			"title": "dropping the receiver marker's liveness guard makes a dead watcher's marker read as an ACTIVE receiver — replies to a closed Copilot session are enqueued into a void and reported as delivered",
 			"subject": "pi-extensions/lib/meta-session.ts",
 			"find": [
-				"\t\t// as an ACTIVE RECEIVER and pull the mailbox rail into delivering to a void.",
-				"\t\tif (!isPlausibleOwnerPid(marker.ownerPid)) return null;",
+				"\t\tif (marker === null) return null;",
 				"\t\tif (opts.verifyOwner !== false) {",
 				"\t\t\tconst liveKey = processStartKey(marker.ownerPid);",
 				"\t\t\tif (!liveKey || liveKey !== marker.ownerStartKey) return null;",
 				"\t\t}"
 			],
-			"replace": [
-				"\t\t// as an ACTIVE RECEIVER and pull the mailbox rail into delivering to a void.",
-				"\t\tif (!isPlausibleOwnerPid(marker.ownerPid)) return null;"
-			],
+			"replace": ["\t\tif (marker === null) return null;"],
 			"gate": ["bash", "run.sh", "check-copilot-receive-arm"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:COPILOT-RECEIVE-DEAD-EXTENSION-REFUSED]",