@junghanacs/entwurf 0.40.0 → 0.41.1

package/scripts/smoke-herdr-raw-install-live.sh

@@ -110,9 +110,16 @@ fi
 
 PI_SPEC="$(node -p "require('$REPO/package.json').dependencies['@earendil-works/pi-coding-agent']")"
 # Pinned, not floating: a receipt that cannot say WHICH Claude Code it ran is not
-# reproducible. This is the version measured in the container on 2026-09-19. Claude Code
-# is scaffolding here (Rule 17) — the product face starts at `herdr integration install`.
-CLAUDE_SPEC="2.1.278"
+# reproducible. The exact version is the support floor itself, derived from
+# `package.json` `entwurf.claudeCodeFloor` rather than retyped: a hand-kept pin stayed at
+# 2.1.278 after the floor moved to 2.1.306 and the activation then refused it, as it should.
+# Claude Code is scaffolding here (Rule 17) — the product face starts at `herdr integration install`.
+CLAUDE_FLOOR="$(node -p "require('$REPO/package.json').entwurf.claudeCodeFloor")"
+CLAUDE_SPEC="${CLAUDE_FLOOR#>=}"
+if [[ "$CLAUDE_FLOOR" != ">=$CLAUDE_SPEC" || ! "$CLAUDE_SPEC" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+  echo "[smoke-herdr-raw-install-live] FAIL — package.json entwurf.claudeCodeFloor is '$CLAUDE_FLOOR', not '>=X.Y.Z'." >&2
+  exit 1
+fi
 FLOOR_SPEC="$(node -p "require('$REPO/package.json').engines.node")"
 FLOOR_MAJOR="${FLOOR_SPEC#>=}"; FLOOR_MAJOR="${FLOOR_MAJOR%%.*}"
 HERDR_VERSION="$(node -p "require('$REPO/scripts/fixtures/herdr-supply.json').version")"
@@ -490,8 +497,8 @@ for (const name of ["entwurf", "entwurf-bridge", "entwurf-statusline"]) {
 }
 
 // The REAL subcommand, from the installed bin, under node_modules — which is the branch of
-// start.sh that runs the prebuilt dist. Its own oracle is an EXACT set (`EXPECT_TOOLS` in run.sh check-bridge), so a
-// zero exit here is the artifact listing all eight garden verbs and no ninth.
+// start.sh that runs the prebuilt dist. Its own oracle is an EXACT set (`expected` in run.sh `validate_entwurf_bridge`, which check-bridge runs), so a
+// zero exit here is the artifact listing all nine garden verbs and no tenth.
 const run = spawnSync(path.join(binDir, "entwurf"), ["check-bridge"], { encoding: "utf8" });
 const said = `${run.stdout ?? ""}${run.stderr ?? ""}`;
 // [a-z0-9_] and not [a-z_]: the first draft of this line printed `entwurf_v` for entwurf_v2
@@ -502,7 +509,7 @@ const verbs = (said.match(/entwurf_[a-z0-9_]+/g) ?? []).filter((v, i, a) => a.in
 // A SECOND, INDEPENDENT COPY OF THE SET, ON PURPOSE (A5 D1). The exit code alone used to be
 // the oracle here, which left the printed list as decoration a parser bug could quietly
 // corrupt — and did, see the regex note just above. The package under test carries the
-// expectation of run.sh:5187 in its own bytes, so reading the answer from there would let
+// `validate_entwurf_bridge` expectation of run.sh in its own bytes, so reading the answer from there would let
 // the artifact grade itself. The literal below is a copy that must AGREE with the shipped
 // one; the two disagreeing is the signal, and a verb genuinely added upstream reddens this
 // smoke until somebody says so here too.
@@ -513,6 +520,7 @@ const EXPECTED_VERBS = [
   "entwurf_peers",
   "entwurf_register_native",
   "entwurf_resume_call",
+  "entwurf_retire_call",
   "entwurf_self",
   "entwurf_v2",
 ];
@@ -520,7 +528,7 @@ console.log(`  VERBS ${verbs.join(",") || "<none>"}`);
 if (run.status === 0) ok(`entwurf check-bridge exit 0 from the installed bin (${verbs.length} verbs listed)`);
 else no(`entwurf check-bridge exit ${run.status}: ${said.trim().slice(0, 400)}`);
 JSON.stringify(verbs) === JSON.stringify(EXPECTED_VERBS)
-  ? ok(`the receipt names EXACTLY the eight garden verbs (${EXPECTED_VERBS.length}), parsed from what the installed bin answered`)
+  ? ok(`the receipt names EXACTLY the nine garden verbs (${EXPECTED_VERBS.length}), parsed from what the installed bin answered`)
   : no(`verb set mismatch — want ${JSON.stringify(EXPECTED_VERBS)} got ${JSON.stringify(verbs)}`);
 process.exit(bad);
 ' "$ACTIVE" "$REGISTRY" "$PLUGIN_ID" || fail=1

package/scripts/smoke-meta-install-state.sh

@@ -46,7 +46,7 @@ cat > "$INS_BIN/claude" <<'SH'
 #!/usr/bin/env bash
 printf '%s\n' "$*" >> "$FAKE_CLAUDE_LOG"
 case "$1${2:+ $2}" in
-  "--version")   echo "2.1.217 (Claude Code)" ;;
+  "--version")   echo "2.1.306 (Claude Code)" ;;
   "plugin list") printf '%s\n' "entwurf-meta-receive@meta-bridge-local" "  Status: enabled" ;;
   "mcp get")     printf '%s\n' "Scope: User config" "Status: Connected" ;;
   *) : ;;
@@ -95,7 +95,7 @@ case "$1${2:+ $2}" in
     # Keep writing well past the pipe buffer: a reader that leaves early SIGPIPEs us.
     cat "$FAKE_MCP_TAIL"
     exit $? ;;
-  "--version")   echo "2.1.217 (Claude Code)" ;;
+  "--version")   echo "2.1.306 (Claude Code)" ;;
   "plugin list") printf '%s\n' "entwurf-meta-receive@meta-bridge-local" "  Status: enabled" ;;
   *) : ;;
 esac
@@ -710,7 +710,7 @@ FAKE_BIN="$TMP/fake-bin"; mkdir -p "$FAKE_BIN"
 cat > "$FAKE_BIN/claude" <<'SH'
 #!/usr/bin/env bash
 printf '%s\n' "$*" >> "$FAKE_CLAUDE_LOG"
-[ "$1" = "--version" ] && echo "2.1.217 (Claude Code)"
+[ "$1" = "--version" ] && echo "2.1.306 (Claude Code)"
 exit 0
 SH
 chmod +x "$FAKE_BIN/claude"
@@ -1027,7 +1027,7 @@ if [ "${1:-} ${2:-} ${3:-}" = "plugin list --json" ]; then
   exit 0
 fi
 case "$1${2:+ $2}" in
-  "--version") echo "2.1.217 (Claude Code)" ;;
+  "--version") echo "2.1.306 (Claude Code)" ;;
   "plugin list") printf '%s\n' "entwurf-meta-receive@meta-bridge-local" "  Status: enabled" ;;
   "mcp get") printf '%s\n' "Scope: User config" "Status: ✔ Connected" ;;
   *) : ;;

package/scripts/smoke-mux-lifecycle-live.ts

@@ -34,11 +34,11 @@
  * re-injects a bridge extension (#29), and a resume that silently lost its history would look
  * identical from the socket axis.
  *
- * Claude Code runs the same first half and then STOPS where its capability stops: callback id,
- * mailbox delivery, mailbox read receipt — and a resume that is REFUSED as `target-not-pi`, with
- * no window opened and no lock residue after the per-gid coordination lock is released. Only pi
- * stands a control socket up, so only pi has a same-id
- * resume; the refusal is the proof, not an omission.
+ * Claude Code runs the same first half: callback id, mailbox delivery, mailbox read receipt — and a
+ * resume of that still-LIVE sibling that is REFUSED as `target-live` (its receiver marker names a
+ * live owner), with no window opened and no lock residue after the per-gid coordination lock is
+ * released. Claude Code's DORMANT same-id resume (#147 L2) is certified deterministically; its LIVE
+ * close→resume leg is not in this smoke yet, and this cell does not stand in for it.
  *
  * ── Isolate the WRITES, keep the runtimes real ──
  *
@@ -1035,20 +1035,20 @@ async function main(): Promise<void> {
 				`--- response ---\n${ccRead.text}`,
 			);
 
-			// No resume is invented for a backend that never stands a control socket up. The refusal is
-			// the proof: it opens no window, and its per-gid coordination lock leaves no residue.
+			// A live Claude Code sibling is not reopened: its receiver marker names a live owner. The refusal
+			// is the proof: it opens no window, and its per-gid coordination lock leaves no residue.
 			const ccWindowsBefore = windowCount(cc.socket, cc.env);
 			const ccResume = await ccBridge.call("entwurf_resume_call", { target: ccCitizen }, RESUME_CALL_TIMEOUT_MS);
 			ok(
-				"claude-code: entwurf_resume_call is REFUSED as target-not-pi — a capability boundary named as itself, not an error about a record that is perfectly fine",
-				ccResume.isError && ccResume.text.includes("target-not-pi"),
+				"claude-code: entwurf_resume_call of the still-live sibling is REFUSED as target-live — its receiver marker names a live owner, so a second window would put two processes on one session",
+				ccResume.isError && ccResume.text.includes("target-live"),
 				`--- response ---\n${ccResume.text}`,
 			);
 			ok(
 				"claude-code: that refusal opened no window and left no lock behind",
 				windowCount(cc.socket, cc.env) === ccWindowsBefore && lockResidue(cellRoots(REAL_HOME), ccCitizen).length === 0,
 			);
-			receipts["claude-code/5-resume-refused-not-pi"] = ccResume.text;
+			receipts["claude-code/5-resume-refused-live"] = ccResume.text;
 		}
 
 		await runClaudeCell();

package/scripts/smoke-omp-mcp-state.sh

@@ -53,7 +53,7 @@ cat > "$SB/bin/entwurf-bridge" <<'FAKE'
 while IFS= read -r line; do
   case "$line" in
     *'"id":1'*) printf '%s\n' '{"jsonrpc":"2.0","id":1,"result":{"protocolVersion":"2024-11-05","capabilities":{},"serverInfo":{"name":"fake-entwurf-bridge","version":"0"}}}' ;;
-    *'"id":2'*) printf '%s\n' '{"jsonrpc":"2.0","id":2,"result":{"tools":[{"name":"entwurf_v2"},{"name":"entwurf_self"},{"name":"entwurf_peers"},{"name":"entwurf_inbox_read"},{"name":"entwurf_register_native"},{"name":"entwurf_fresh_call"},{"name":"entwurf_resume_call"},{"name":"entwurf_callback"}]}}' ;;
+    *'"id":2'*) printf '%s\n' '{"jsonrpc":"2.0","id":2,"result":{"tools":[{"name":"entwurf_v2"},{"name":"entwurf_self"},{"name":"entwurf_peers"},{"name":"entwurf_inbox_read"},{"name":"entwurf_register_native"},{"name":"entwurf_fresh_call"},{"name":"entwurf_resume_call"},{"name":"entwurf_retire_call"},{"name":"entwurf_callback"}]}}' ;;
   esac
 done
 FAKE

package/scripts/smoke-pi-durable-fresh-live.ts

@@ -24,7 +24,7 @@
  *   Pi        its own JSONL toolCall/toolResult rows and `entwurf-message` custom rows.
  *   pd        its NATIVE store, read from a consistent snapshot taken with node:sqlite's online
  *             `backup` while the host is live (a raw copy of a live WAL set is not consistent):
- *             the `pi.system` entries' `toolsAdded` (the actual offering — task-wide means the six
+ *             the `pi.system` entries' `toolsAdded` (the actual offering — task-wide means the eight
  *             contact tools AND the native tools, no filter), the generation checkpoint's
  *             `request.model` and the assistant messages' provider/model (the actual model), the
  *             contact tool calls, and the doorbell submission. The live database and its transcript
@@ -74,7 +74,7 @@ const DIST_ENTRY = path.join(REPO, "mcp/entwurf-bridge/dist/mcp/entwurf-bridge/s
 const PD_MODEL = process.env.ENTWURF_PI_DURABLE_FRESH_MODEL?.trim() || "openai-codex/gpt-6.1-sol";
 const PI_MODEL = process.env.ENTWURF_PI_DURABLE_FRESH_PI_MODEL?.trim() || "openai-codex/gpt-6.1-sol";
 const WIDTH = "task-wide";
-/** Independent of the adapter's own constant: the six contact tools step 9 expects the host to offer. */
+/** Independent of the adapter's own constant: the eight contact tools step 9 expects the host to offer. */
 const CONTACT_TOOLS = [
 	"entwurf_self",
 	"entwurf_peers",
@@ -82,6 +82,8 @@ const CONTACT_TOOLS = [
 	"entwurf_inbox_read",
 	"entwurf_callback",
 	"entwurf_fresh_call",
+	"entwurf_resume_call",
+	"entwurf_retire_call",
 ];
 /** The native app's own tools; task-wide = no filter, so they must be offered beside the contact. */
 const NATIVE_TOOLS = ["bash", "read", "edit", "write", "subagent"];
@@ -584,7 +586,7 @@ const rootId = (roots[0] as { id: number }).id;
 const view = pdRootView(nativeEntries, rootId);
 receipts["6-native-offering"] = view.offering.join(" ") || "(no pi.system offering)";
 ok(
-	"ACTUAL OFFERING (root pi.system, toolsAdded/toolsRemoved applied): the six contact tools AND the native tools — task-wide, no filter",
+	"ACTUAL OFFERING (root pi.system, toolsAdded/toolsRemoved applied): the eight contact tools AND the native tools — task-wide, no filter",
 	CONTACT_TOOLS.every((t) => view.offering.includes(t)) && NATIVE_TOOLS.every((t) => view.offering.includes(t)),
 	`offered: ${view.offering.join(", ") || "(none)"}`,
 );

package/scripts/smoke-pi-provider-state.sh

@@ -67,7 +67,7 @@ write_mcp_fake() {   # $1 = path
 while IFS= read -r line; do
   case "$line" in
     *'"id":1'*) printf '%s\n' '{"jsonrpc":"2.0","id":1,"result":{"protocolVersion":"2024-11-05","capabilities":{},"serverInfo":{"name":"fake-entwurf-bridge","version":"0"}}}' ;;
-    *'"id":2'*) printf '%s\n' '{"jsonrpc":"2.0","id":2,"result":{"tools":[{"name":"entwurf_v2"},{"name":"entwurf_self"},{"name":"entwurf_peers"},{"name":"entwurf_inbox_read"},{"name":"entwurf_register_native"},{"name":"entwurf_fresh_call"},{"name":"entwurf_resume_call"},{"name":"entwurf_callback"}]}}' ;;
+    *'"id":2'*) printf '%s\n' '{"jsonrpc":"2.0","id":2,"result":{"tools":[{"name":"entwurf_v2"},{"name":"entwurf_self"},{"name":"entwurf_peers"},{"name":"entwurf_inbox_read"},{"name":"entwurf_register_native"},{"name":"entwurf_fresh_call"},{"name":"entwurf_resume_call"},{"name":"entwurf_retire_call"},{"name":"entwurf_callback"}]}}' ;;
   esac
 done
 FAKE
@@ -93,7 +93,7 @@ write_stale_fake() {  # $1 = path
 while IFS= read -r line; do
   case "$line" in
     *'"id":1'*) printf '%s\n' '{"jsonrpc":"2.0","id":1,"result":{"protocolVersion":"2024-11-05","capabilities":{},"serverInfo":{"name":"stale-bridge","version":"0"}}}' ;;
-    *'"id":2'*) printf '%s\n' '{"jsonrpc":"2.0","id":2,"result":{"tools":[{"name":"entwurf_v2"},{"name":"entwurf_peers"},{"name":"entwurf_inbox_read"},{"name":"entwurf_register_native"},{"name":"entwurf_fresh_call"},{"name":"entwurf_resume_call"},{"name":"entwurf_callback"}]}}' ;;
+    *'"id":2'*) printf '%s\n' '{"jsonrpc":"2.0","id":2,"result":{"tools":[{"name":"entwurf_v2"},{"name":"entwurf_peers"},{"name":"entwurf_inbox_read"},{"name":"entwurf_register_native"},{"name":"entwurf_fresh_call"},{"name":"entwurf_resume_call"},{"name":"entwurf_retire_call"},{"name":"entwurf_callback"}]}}' ;;
   esac
 done
 FAKE
@@ -289,7 +289,7 @@ rm -f "$STATE"
 # `ownership` field in that state is the PREIMAGE classification — what stood at the key BEFORE this
 # install — so `absent` means "we created it" and `managed-current` means "we rewrote our own", and
 # NEITHER means "unowned". A doctor whose only non-drift shape is the bare bin therefore calls every
-# plugin-mode host red while the bridge it points at boots and serves all eight verbs. The canonical
+# plugin-mode host red while the bridge it points at boots and serves all nine verbs. The canonical
 # command is the one the state RECORDS; the stable runtime root is the writer's business and is
 # deliberately not re-derived here.
 PLUGIN_BRIDGE="$SB/runtime/active/node_modules/.bin/entwurf-bridge"