@junghanacs/entwurf 0.40.0 → 0.41.0

package/scripts/mutants/entwurf-v2-retire.json

@@ -0,0 +1,476 @@
+{
+	"schemaVersion": 1,
+	"lane": "entwurf-v2-retire",
+	"mutants": [
+		{
+			"claim": "RETIRE-CORE-ADMISSION",
+			"title": "self retirement reaches target IO instead of refusing before lock acquisition",
+			"subject": "pi-extensions/lib/entwurf-v2-retire.ts",
+			"find": [
+				"\t\tif (actor.sessionId === targetGardenId) return beforeLock({ kind: \"refused\", reason: \"self-target\" });"
+			],
+			"replace": ["\t\t// MUTANT: self guard omitted."],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-CORE-ADMISSION]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-CORE-LOCK",
+			"title": "a failed lock acquisition still reads target state",
+			"subject": "pi-extensions/lib/entwurf-v2-retire.ts",
+			"find": [
+				"\tif (!acquired.ok) return beforeLock({ kind: \"refused\", reason: \"target-locked\", detail: acquired.conflict.detail });"
+			],
+			"replace": [
+				"\tif (!acquired.ok) {",
+				"\t\tdeps.recordExists(targetGardenId);",
+				"\t\treturn beforeLock({ kind: \"refused\", reason: \"target-locked\", detail: acquired.conflict.detail });",
+				"\t}"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-CORE-LOCK]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-CORE-RECORD",
+			"title": "a corrupt present record is disguised as target absence",
+			"subject": "pi-extensions/lib/entwurf-v2-retire.ts",
+			"find": ["\t\t\t\t? { kind: \"preflight-error\", cause: causeOf(error) }"],
+			"replace": ["\t\t\t\t? { kind: \"refused\", reason: \"target-not-found\" }"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-CORE-RECORD]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-CORE-LIVE",
+			"title": "a dead Pi probe falls through to the retirement adapter",
+			"subject": "pi-extensions/lib/entwurf-v2-retire.ts",
+			"find": [
+				"\t\t\tif (live.liveness === \"dead\") return { kind: \"refused\", reason: \"target-dead\" };",
+				"\t\t\tif (live.liveness !== \"alive\") return { kind: \"refused\", reason: \"target-indeterminate\" };"
+			],
+			"replace": [
+				"\t\t\tif (live.liveness === \"indeterminate\") return { kind: \"refused\", reason: \"target-indeterminate\" };"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-CORE-LIVE]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-CORE-FRESH",
+			"title": "the sole before versus after Pi birth-tuple guard is bypassed",
+			"subject": "pi-extensions/lib/entwurf-v2-retire.ts",
+			"find": [
+				"\t\t\tif (",
+				"\t\t\t\t[\"gardenId\", \"backend\", \"nativeSessionId\", \"createdAt\"].some(",
+				"\t\t\t\t\t(key) => current[key as keyof MetaIdentity] !== identity[key as keyof MetaIdentity],",
+				"\t\t\t\t)",
+				"\t\t\t) {"
+			],
+			"replace": ["\t\t\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-CORE-FRESH]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-CORE-PI",
+			"title": "Pi adapter receives a different directory than the inspected canonical address",
+			"subject": "pi-extensions/lib/entwurf-v2-retire.ts",
+			"find": ["\t\t\t\t\tcontrolSocketDir: deps.controlSocketDir,"],
+			"replace": ["\t\t\t\t\tcontrolSocketDir: \"/wrong-control-directory\","],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-CORE-PI]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-CORE-CC",
+			"title": "CC expected attach incarnation is not forwarded from the fresh target record",
+			"subject": "pi-extensions/lib/entwurf-v2-retire.ts",
+			"find": [
+				"\t\tconst result = await deps.requestCc({ gardenId, backend, nativeSessionId, createdAt, attachIncarnation });"
+			],
+			"replace": [
+				"\t\tconst result = await deps.requestCc({ gardenId, backend, nativeSessionId, createdAt, attachIncarnation: \"wrong-incarnation\" });"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-CORE-CC]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-CORE-THROW",
+			"title": "an escaped adapter throw is downgraded to a preflight error after possible effects",
+			"subject": "pi-extensions/lib/entwurf-v2-retire.ts",
+			"find": ["\t\t\t\t: { kind: \"unknown\", backend: enteredBackend, cause: causeOf(error) };"],
+			"replace": ["\t\t\t\t: { kind: \"preflight-error\", cause: causeOf(error) };"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-CORE-THROW]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-CORE-RELEASE",
+			"title": "a throwing release overwrites the original backend result with a preflight error",
+			"subject": "pi-extensions/lib/entwurf-v2-retire.ts",
+			"find": ["\t\t\trelease = { status: \"error\", cause: causeOf(error) };"],
+			"replace": [
+				"\t\t\trelease = { status: \"error\", cause: causeOf(error) };",
+				"\t\t\toutcome = { kind: \"preflight-error\", cause: causeOf(error) };"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-CORE-RELEASE]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-CORE-FAULT",
+			"title": "an acquired claim is falsely reported released without calling the release seam",
+			"subject": "pi-extensions/lib/entwurf-v2-retire.ts",
+			"find": ["\t\t\trelease = { status: deps.releaseLock(claim) };"],
+			"replace": ["\t\t\trelease = { status: \"released\" };"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-CORE-FAULT]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-CORE-ABORT-BEFORE-LOCK",
+			"title": "a request cancelled before the lock still acquires the target lock",
+			"subject": "pi-extensions/lib/entwurf-v2-retire.ts",
+			"find": ["\t\tif (aborted()) return beforeLock({ kind: \"refused\", reason: \"request-aborted\" });"],
+			"replace": ["\t\t// MUTANT: pre-lock cancellation check omitted."],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-CORE-ABORT-BEFORE-LOCK]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-CORE-ABORT-PREFLIGHT",
+			"title": "cancellation during the locked preflight still writes a requested record",
+			"subject": "pi-extensions/lib/entwurf-v2-retire.ts",
+			"find": [
+				"\tconst admit = (targetBackend: RetireTargetBackend): RetireDispatchOutcome | null => {",
+				"\t\tif (aborted()) return { kind: \"refused\", reason: \"request-aborted\" };"
+			],
+			"replace": ["\tconst admit = (targetBackend: RetireTargetBackend): RetireDispatchOutcome | null => {"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-CORE-ABORT-PREFLIGHT]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-CORE-ABORT-AFTER-REQUESTED",
+			"title": "cancellation observed after the requested record still enters the adapter",
+			"subject": "pi-extensions/lib/entwurf-v2-retire.ts",
+			"find": [
+				"\t\tattempt = { eventId, context };",
+				"\t\tif (aborted()) return { kind: \"refused\", reason: \"request-aborted\" };"
+			],
+			"replace": ["\t\tattempt = { eventId, context };"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-CORE-ABORT-AFTER-REQUESTED]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-CORE-RECORD-JOIN",
+			"title": "the lock is released before the attempt's outcome is recorded",
+			"subject": "pi-extensions/lib/entwurf-v2-retire.ts",
+			"find": [
+				"\t\t// An attempt that was recorded as requested gets ONE outcome record, before release.",
+				"\t\tif (attempt) {"
+			],
+			"replace": ["\t\trelease = { status: deps.releaseLock(claim) };", "\t\tif (attempt) {"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-CORE-RECORD-JOIN]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-CORE-RECORD-THROWN-ADAPTER",
+			"title": "a thrown adapter attempt loses its outcome record",
+			"subject": "pi-extensions/lib/entwurf-v2-retire.ts",
+			"find": ["\t\t} catch (error) {", "\t\t\toutcome ="],
+			"replace": ["\t\t} catch (error) {", "\t\t\tattempt = null;", "\t\t\toutcome ="],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-CORE-RECORD-THROWN-ADAPTER]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-CORE-REQUESTED-FAIL",
+			"title": "a malformed requested-record id still admits the adapter",
+			"subject": "pi-extensions/lib/entwurf-v2-retire.ts",
+			"find": ["\t\tif (typeof eventId !== \"string\" || !EVENT_ID_RE.test(eventId)) {"],
+			"replace": ["\t\tif (typeof eventId !== \"string\") {"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-CORE-REQUESTED-FAIL]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-CORE-OUTCOME-FAIL",
+			"title": "a failed outcome record rewrites an already effective backend result to unknown",
+			"subject": "pi-extensions/lib/entwurf-v2-retire.ts",
+			"find": ["\t\t\t\trecord = { status: \"outcome-append-error\", eventId, cause: causeOf(error) };"],
+			"replace": [
+				"\t\t\t\trecord = { status: \"outcome-append-error\", eventId, cause: causeOf(error) };",
+				"\t\t\t\toutcome = { kind: \"unknown\", backend: context.targetBackend, cause: causeOf(error) };"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-CORE-OUTCOME-FAIL]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire.test.ts"
+		},
+		{
+			"claim": "RETIRE-FACTORY-DIRS-EXPLICIT",
+			"title": "lock release is bound to a different directory than lock acquisition",
+			"subject": "pi-extensions/lib/entwurf-v2-retire-production.ts",
+			"find": ["\t\treleaseLock: (claim) => io.releaseLock(claim, { dir: lockDir }),"],
+			"replace": ["\t\treleaseLock: (claim) => io.releaseLock(claim, { dir: controlSocketDir }),"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-FACTORY-DIRS-EXPLICIT]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire-production.test.ts"
+		},
+		{
+			"claim": "RETIRE-FACTORY-DIRS-MODULE-LOAD",
+			"title": "the default lock directory is re-derived from HOME at construction",
+			"subject": "pi-extensions/lib/entwurf-v2-retire-production.ts",
+			"find": ["\tconst lockDir = opts.lockDir ?? ENTWURF_V2_LOCK_DIR;"],
+			"replace": ["\tconst lockDir = opts.lockDir ?? `${process.env.HOME}/.pi/entwurf-v2-locks`;"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-FACTORY-DIRS-MODULE-LOAD]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire-production.test.ts"
+		},
+		{
+			"claim": "RETIRE-FACTORY-DIRS-CONSTRUCTION",
+			"title": "record existence re-reads the sessions environment on every call",
+			"subject": "pi-extensions/lib/entwurf-v2-retire-production.ts",
+			"find": ["\t\trecordExists: (gid) => io.metaRecordExists(gid, sessionsDir),"],
+			"replace": ["\t\trecordExists: (gid) => io.metaRecordExists(gid, opts.sessionsDir ?? defaultMetaSessionsDir()),"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-FACTORY-DIRS-CONSTRUCTION]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire-production.test.ts"
+		},
+		{
+			"claim": "RETIRE-FACTORY-CC-WITNESSES",
+			"title": "the CC sender witness reads a different owner pid than the adapter asked for",
+			"subject": "pi-extensions/lib/entwurf-v2-retire-production.ts",
+			"find": ["\t\treadSender: (ownerPid) => io.readSender({ backend: \"claude-code\", ownerPid, sendersDir }),"],
+			"replace": [
+				"\t\treadSender: (ownerPid) => io.readSender({ backend: \"claude-code\", ownerPid: ownerPid + 1, sendersDir }),"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-FACTORY-CC-WITNESSES]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire-production.test.ts"
+		},
+		{
+			"claim": "RETIRE-FACTORY-CC-SIGNAL",
+			"title": "the CC adapter loses the request's AbortSignal",
+			"subject": "pi-extensions/lib/entwurf-v2-retire-production.ts",
+			"find": ["\t\trequestCc: (expected) => io.requestCc(expected, ccDeps, { signal }),"],
+			"replace": ["\t\trequestCc: (expected) => io.requestCc(expected, ccDeps, {}),"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-FACTORY-CC-SIGNAL]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire-production.test.ts"
+		},
+		{
+			"claim": "RETIRE-FACTORY-PI-OPTIONS",
+			"title": "the Pi adapter receives the caller's whole options object, timeout included",
+			"subject": "pi-extensions/lib/entwurf-v2-retire-production.ts",
+			"find": ["\t\t\tio.requestPi(target, expected, { controlSocketDir: options.controlSocketDir }),"],
+			"replace": ["\t\t\tio.requestPi(target, expected, options),"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-FACTORY-PI-OPTIONS]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire-production.test.ts"
+		},
+		{
+			"claim": "RETIRE-FACTORY-OPAQUE",
+			"title": "a control-socket inspection result is reshaped instead of returned by identity",
+			"subject": "pi-extensions/lib/entwurf-v2-retire-production.ts",
+			"find": ["\t\tinspectPath: (socketPath) => io.inspectPath(socketPath),"],
+			"replace": ["\t\tinspectPath: async (socketPath) => ({ ...(await io.inspectPath(socketPath)) }),"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-FACTORY-OPAQUE]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire-production.test.ts"
+		},
+		{
+			"claim": "RETIRE-FACTORY-RECORD-DIR",
+			"title": "the requested event's sidecar directory is re-derived from the environment per call",
+			"subject": "pi-extensions/lib/entwurf-v2-retire-production.ts",
+			"find": ["\t\t\tconst eventId = randomBytes(16).toString(\"hex\");", "\t\t\tio.append(retirementsDir, {"],
+			"replace": [
+				"\t\t\tconst eventId = randomBytes(16).toString(\"hex\");",
+				"\t\t\tio.append(retirementsDirBesideSessions(opts.sessionsDir ?? defaultMetaSessionsDir()), {"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-FACTORY-RECORD-DIR]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire-production.test.ts"
+		},
+		{
+			"claim": "RETIRE-FACTORY-RECORD-EVENTS",
+			"title": "caller context fields beyond the three attribution fields leak into sidecar events",
+			"subject": "pi-extensions/lib/entwurf-v2-retire-production.ts",
+			"find": [
+				"\tconst attribution = (context: RetireRecordContext) => ({",
+				"\t\tactorGardenId: context.actorGardenId,"
+			],
+			"replace": [
+				"\tconst attribution = (context: RetireRecordContext) => ({",
+				"\t\t...context,",
+				"\t\tactorGardenId: context.actorGardenId,"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-FACTORY-RECORD-EVENTS]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire-production.test.ts"
+		},
+		{
+			"claim": "RETIRE-FACTORY-RECORD-APPEND-FAIL",
+			"title": "a failed requested append is swallowed and its event id still returned",
+			"subject": "pi-extensions/lib/entwurf-v2-retire-production.ts",
+			"find": [
+				"\t\t\tio.append(retirementsDir, {",
+				"\t\t\t\tv: RETIREMENT_EVENT_VERSION,",
+				"\t\t\t\tkind: \"retirement-requested\",",
+				"\t\t\t\teventId,",
+				"\t\t\t\tat: new Date().toISOString(),",
+				"\t\t\t\t...attribution(context),",
+				"\t\t\t});",
+				"\t\t\treturn eventId;"
+			],
+			"replace": [
+				"\t\t\ttry {",
+				"\t\t\t\tio.append(retirementsDir, {",
+				"\t\t\t\t\tv: RETIREMENT_EVENT_VERSION,",
+				"\t\t\t\t\tkind: \"retirement-requested\",",
+				"\t\t\t\t\teventId,",
+				"\t\t\t\t\tat: new Date().toISOString(),",
+				"\t\t\t\t\t...attribution(context),",
+				"\t\t\t\t});",
+				"\t\t\t} catch {}",
+				"\t\t\treturn eventId;"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-FACTORY-RECORD-APPEND-FAIL]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire-production.test.ts"
+		},
+		{
+			"claim": "RETIRE-FACTORY-SUMMARY",
+			"title": "a Claude Code adapter's free reason string reaches the sidecar summary",
+			"subject": "pi-extensions/lib/entwurf-v2-retire-production.ts",
+			"find": ["\t\treturn { status: outcome.result.outcome, reason: null };"],
+			"replace": [
+				"\t\treturn { status: outcome.result.outcome, reason: \"reason\" in outcome.result ? outcome.result.reason : null };"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-FACTORY-SUMMARY]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire-production.test.ts"
+		},
+		{
+			"claim": "RETIRE-FACTORY-SUMMARY-REFUSE",
+			"title": "a Pi result is summarized under a Claude Code target context",
+			"subject": "pi-extensions/lib/entwurf-v2-retire-production.ts",
+			"find": ["\tif (outcome.kind === \"pi\" && backend === \"pi\") {"],
+			"replace": ["\tif (outcome.kind === \"pi\") {"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-FACTORY-SUMMARY-REFUSE]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire-production.test.ts"
+		},
+		{
+			"claim": "RETIRE-FACTORY-SIGNAL-CAPTURE",
+			"title": "the CC adapter re-reads a later options signal instead of the captured one",
+			"subject": "pi-extensions/lib/entwurf-v2-retire-production.ts",
+			"find": ["\t\trequestCc: (expected) => io.requestCc(expected, ccDeps, { signal }),"],
+			"replace": ["\t\trequestCc: (expected) => io.requestCc(expected, ccDeps, { signal: opts.signal }),"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-FACTORY-SIGNAL-CAPTURE]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire-production.test.ts"
+		},
+		{
+			"claim": "RETIRE-FACTORY-CORE-JOIN",
+			"title": "the requested append is deferred past the adapter call",
+			"subject": "pi-extensions/lib/entwurf-v2-retire-production.ts",
+			"find": [
+				"\t\t\tio.append(retirementsDir, {",
+				"\t\t\t\tv: RETIREMENT_EVENT_VERSION,",
+				"\t\t\t\tkind: \"retirement-requested\",",
+				"\t\t\t\teventId,",
+				"\t\t\t\tat: new Date().toISOString(),",
+				"\t\t\t\t...attribution(context),",
+				"\t\t\t});",
+				"\t\t\treturn eventId;"
+			],
+			"replace": [
+				"\t\t\tqueueMicrotask(() => {",
+				"\t\t\t\ttry {",
+				"\t\t\t\t\tio.append(retirementsDir, {",
+				"\t\t\t\t\t\tv: RETIREMENT_EVENT_VERSION,",
+				"\t\t\t\t\t\tkind: \"retirement-requested\",",
+				"\t\t\t\t\t\teventId,",
+				"\t\t\t\t\t\tat: new Date().toISOString(),",
+				"\t\t\t\t\t\t...attribution(context),",
+				"\t\t\t\t\t});",
+				"\t\t\t\t} catch { /* MUTANT ONLY: contain the deliberately deferred append fault. */ }",
+				"\t\t\t});",
+				"\t\t\treturn eventId;"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-FACTORY-CORE-JOIN]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire-production.test.ts"
+		},
+		{
+			"claim": "RETIRE-FACTORY-CORE-REQUESTED-FAIL",
+			"title": "a failed requested append is retried, which could double a partial line",
+			"subject": "pi-extensions/lib/entwurf-v2-retire-production.ts",
+			"find": [
+				"\t\t\tio.append(retirementsDir, {",
+				"\t\t\t\tv: RETIREMENT_EVENT_VERSION,",
+				"\t\t\t\tkind: \"retirement-requested\",",
+				"\t\t\t\teventId,",
+				"\t\t\t\tat: new Date().toISOString(),",
+				"\t\t\t\t...attribution(context),",
+				"\t\t\t});",
+				"\t\t\treturn eventId;"
+			],
+			"replace": [
+				"\t\t\tconst event: RetirementEvent = {",
+				"\t\t\t\tv: RETIREMENT_EVENT_VERSION,",
+				"\t\t\t\tkind: \"retirement-requested\",",
+				"\t\t\t\teventId,",
+				"\t\t\t\tat: new Date().toISOString(),",
+				"\t\t\t\t...attribution(context),",
+				"\t\t\t};",
+				"\t\t\ttry {",
+				"\t\t\t\tio.append(retirementsDir, event);",
+				"\t\t\t} catch {",
+				"\t\t\t\tio.append(retirementsDir, event);",
+				"\t\t\t}",
+				"\t\t\treturn eventId;"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-retire"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:RETIRE-FACTORY-CORE-REQUESTED-FAIL]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-retire-production.test.ts"
+		}
+	]
+}

package/scripts/mutants/fresh-call-dispatch.json

@@ -149,6 +149,43 @@
 			"timeoutSeconds": 120,
 			"signature": "[QK:FCD-ACP-MODEL-EXACT]",
 			"signatureSource": "scripts/check-fresh-call-dispatch.ts"
+		},
+		{
+			"claim": "FCD-OPENROUTER-NAMED-REFUSED",
+			"title": "the root stops asking whether a pi or pi-durable model names the openrouter provider, so the 2026-08-13 explicit OpenRouter request opens a sibling again",
+			"subject": "pi-extensions/lib/fresh-call-dispatch.ts",
+			"find": [
+				"\tif (slash >= 0 && trimmed.slice(0, slash).toLowerCase() === \"openrouter\") return \"model-openrouter-forbidden\";\n"
+			],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-fresh-call-provider"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FCD-OPENROUTER-NAMED-REFUSED]",
+			"signatureSource": "pi-extensions/lib/fresh-call-dispatch.test.ts"
+		},
+		{
+			"claim": "FCD-PI-PROVIDER-QUALIFIED",
+			"title": "the root lets a pi model name no provider, so a bare alias like the 2026-09-17 `terra` resolves to whichever catalog row Pi prefers",
+			"subject": "pi-extensions/lib/fresh-call-dispatch.ts",
+			"find": [
+				"\tif (backend === \"pi\" && splitPiDurableModel(trimmed) === null) return \"pi-model-not-provider-qualified\";\n"
+			],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-fresh-call-provider"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FCD-PI-PROVIDER-QUALIFIED]",
+			"signatureSource": "pi-extensions/lib/fresh-call-dispatch.test.ts"
+		},
+		{
+			"claim": "FCD-PROVIDER-OTHER-BACKENDS-UNJUDGED",
+			"title": "the provider rules lose their backend guard, so another vendor's own model name is judged as if it were a Pi provider choice",
+			"subject": "pi-extensions/lib/fresh-call-dispatch.ts",
+			"find": ["\tif (backend !== \"pi\" && backend !== \"pi-durable\") return null;\n"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-fresh-call-provider"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FCD-PROVIDER-OTHER-BACKENDS-UNJUDGED]",
+			"signatureSource": "pi-extensions/lib/fresh-call-dispatch.test.ts"
 		}
 	]
 }

package/scripts/mutants/meta-hook-session-switch.json

@@ -220,6 +220,94 @@
 			"timeoutSeconds": 300,
 			"signature": "[QK:MHSS-JOIN-BACKEND-EQUALITY]",
 			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-ARM-RECORD-BOUND",
+			"title": "an arm-capable event stops minting a binding, so the record never carries one",
+			"subject": "pi-extensions/meta-bridge-hook.ts",
+			"find": ["\tconst attachIncarnation = armsWatch ? mintAttachIncarnation() : undefined;"],
+			"replace": ["\tconst attachIncarnation = undefined;"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-ARM-RECORD-BOUND]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-ARM-BINDING-PAIRED",
+			"title": "the receiver marker stops copying the binding the record committed",
+			"subject": "pi-extensions/meta-bridge-hook.ts",
+			"find": ["\t\t\t\t\tattachIncarnation,"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-ARM-BINDING-PAIRED]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-UPS-PRESERVES-BINDING",
+			"title": "a keystroke mints a new binding, so every UserPromptSubmit unbinds the live marker",
+			"subject": "pi-extensions/meta-bridge-hook.ts",
+			"find": ["\tconst attachIncarnation = armsWatch ? mintAttachIncarnation() : undefined;"],
+			"replace": ["\tconst attachIncarnation = mintAttachIncarnation();"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-UPS-PRESERVES-BINDING]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-ARM-LOCK-BUSY-NO-WRITE",
+			"title": "the record-arm lock is not taken, so an arm writes while another holder is mid-pair",
+			"subject": "pi-extensions/meta-bridge-hook.ts",
+			"find": ["\tconst locked = takeArmLock(existing.gardenId, armsWatch);"],
+			"replace": ["\tconst locked = { ok: true, detail: \"\" };"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-ARM-LOCK-BUSY-NO-WRITE]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-UPS-LOCK-BUSY-SKIPS",
+			"title": "a keystroke writes without the record-arm lock and can revert an arm's binding",
+			"subject": "pi-extensions/meta-bridge-hook.ts",
+			"find": ["\tconst locked = takeArmLock(existing.gardenId, armsWatch);"],
+			"replace": ["\tconst locked = armsWatch ? takeArmLock(existing.gardenId, true) : { ok: true, detail: \"\" };"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-UPS-LOCK-BUSY-SKIPS]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-ARM-WAITS-FOR-LOCK",
+			"title": "an arm gives up at the first busy lock instead of waiting its bound",
+			"subject": "pi-extensions/meta-bridge-hook.ts",
+			"find": ["\tconst deadline = Date.now() + (wait ? ARM_LOCK_WAIT_MS : 0);"],
+			"replace": ["\tconst deadline = Date.now();"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-ARM-WAITS-FOR-LOCK]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-ARM-LOCK-OWN-DIR",
+			"title": "the record-arm lock moves into the v2 dispatch lock directory visible resume holds across its observation",
+			"subject": "pi-extensions/lib/meta-session.ts",
+			"find": ["\treturn path.join(path.dirname(receiversDir), \"meta-record-arm-locks\");"],
+			"replace": ["\treturn path.join(path.dirname(receiversDir), \"entwurf-v2-locks\");"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-ARM-LOCK-OWN-DIR]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
+		},
+		{
+			"claim": "MHSS-BUNDLE-CLOSURE-INSTALLED",
+			"title": "the installer stops copying the lock module the hook imports, so the installed hook cannot load",
+			"subject": "scripts/meta-bridge-install.sh",
+			"find": ["cp \"$LOCK_SRC\" \"$ASM/$PLUGIN/lib/entwurf-v2-lock.$LIB_EXT\""],
+			"replace": [":"],
+			"gate": ["bash", "run.sh", "check-meta-hook-session-switch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MHSS-BUNDLE-CLOSURE-INSTALLED]",
+			"signatureSource": "scripts/check-meta-hook-session-switch.ts"
 		}
 	]
 }