@junghanacs/entwurf 0.41.0 → 0.41.2

package/scripts/mutants/pi-floor.json

@@ -7,10 +7,10 @@
 			"title": "one row of the pnpm workspace closure is left on the previous floor while every other surface moved — the shape a version bump actually fails in. Nothing else reads that file, so the stranded row surfaces only at install time, in a different command, far from the change that stranded it",
 			"subject": "pnpm-workspace.yaml",
 			"find": [
-				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2 || 1.0.4 || 1.1.0 || 1.2.0 || 1.3.0'"
+				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2 || 1.0.4 || 1.1.0 || 1.2.0 || 1.3.0 || 1.4.0'"
 			],
 			"replace": [
-				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2 || 1.0.4 || 1.1.0 || 1.2.0'"
+				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2 || 1.0.4 || 1.1.0 || 1.2.0 || 1.3.0'"
 			],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
@@ -21,8 +21,8 @@
 			"claim": "PI-SDK-PRODUCTION-SET",
 			"title": "the durable library's production pin falls one release behind the SDK set the pin declares, so the carrier would bind a pi-durable nobody verified it against",
 			"subject": "package.json",
-			"find": ["\"@earendil-works/pi-durable\": \"1.3.0\","],
-			"replace": ["\"@earendil-works/pi-durable\": \"1.2.0\","],
+			"find": ["\"@earendil-works/pi-durable\": \"1.4.0\","],
+			"replace": ["\"@earendil-works/pi-durable\": \"1.3.0\","],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-SDK-PRODUCTION-SET]",
@@ -33,7 +33,7 @@
 			"title": "an @earendil-works package returns as a dev dependency beside its production pin, one name in two dependency classes",
 			"subject": "package.json",
 			"find": ["\"@biomejs/biome\": \"^2.4.13\","],
-			"replace": ["\"@biomejs/biome\": \"^2.4.13\",\n\t\t\"@earendil-works/pi-ai\": \"1.3.0\","],
+			"replace": ["\"@biomejs/biome\": \"^2.4.13\",\n\t\t\"@earendil-works/pi-ai\": \"1.4.0\","],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-SDK-NO-DUAL-DECLARATION]",

package/scripts/mutants/remote-pair-display.json

@@ -10,7 +10,7 @@
 			"replace": [
 				"\tconst remote = !replyable ? (sender.remote ?? { via: \"?\", replyRoute: \"none\" as const }) : undefined;"
 			],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-DISPLAY-LOCAL-UNCHANGED]",
 			"signatureSource": "pi-extensions/lib/meta-mailbox-body.test.ts",
@@ -25,7 +25,7 @@
 			"subject": "pi-extensions/lib/meta-mailbox-body.ts",
 			"find": ["\"reply route declared, not probed\""],
 			"replace": ["\"reply via entwurf_v2 to this sessionId\""],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-DISPLAY-SESSIONLINE]",
 			"signatureSource": "pi-extensions/lib/meta-mailbox-body.test.ts",
@@ -40,7 +40,7 @@
 			"subject": "pi-extensions/lib/meta-mailbox-body.ts",
 			"find": ["\tconst where = remote ? `${sender.cwd} (sender-host path)` : abbreviateHome(sender.cwd);"],
 			"replace": ["\tconst where = abbreviateHome(sender.cwd);"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-DISPLAY-SENDER-HOST-CWD]",
 			"signatureSource": "pi-extensions/lib/meta-mailbox-body.test.ts",

package/scripts/mutants/remote-pair-receive.json

@@ -6,9 +6,9 @@
 			"claim": "REMOTE-PAIR-FROM-OUTSIDE-NO-MUTATION",
 			"title": "the receiving entry stops checking the claimed sender against the declared pair, so any gid the SSH account writes is dispatched into the declared target's mailbox",
 			"subject": "pi-extensions/lib/remote-pair-receive.ts",
-			"find": ["\tif (claim.from !== decl.remoteGardenId) {"],
+			"find": ["\tif (fromRoutes.length === 0) {"],
 			"replace": ["\tif (false) {"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-PAIR-FROM-OUTSIDE-NO-MUTATION]",
 			"signatureSource": "pi-extensions/lib/remote-pair-receive.test.ts",
@@ -21,9 +21,9 @@
 			"claim": "REMOTE-PAIR-TARGET-OUTSIDE-NO-MUTATION",
 			"title": "the receiving entry stops checking the claimed target against the declared pair, so a declared remote can reach every deliverable citizen on this host",
 			"subject": "pi-extensions/lib/remote-pair-receive.ts",
-			"find": ["\tif (claim.target !== decl.localGardenId) {"],
-			"replace": ["\tif (false) {"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"find": ["\tconst decl = fromRoutes.find((d) => d.localGardenId === claim.target);"],
+			"replace": ["\tconst decl = fromRoutes.find((d) => d.localGardenId === claim.target) ?? fromRoutes[0];"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-PAIR-TARGET-OUTSIDE-NO-MUTATION]",
 			"signatureSource": "pi-extensions/lib/remote-pair-receive.test.ts",
@@ -38,7 +38,7 @@
 			"subject": "pi-extensions/lib/remote-pair-receive.ts",
 			"find": ["\t\tsessionId: claim.from,"],
 			"replace": ["\t\tsessionId: process.env.PI_SESSION_ID ?? claim.from,"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-PAIR-IGNORES-AMBIENT-SENDER]",
 			"signatureSource": "pi-extensions/lib/remote-pair-receive.test.ts",
@@ -53,7 +53,7 @@
 			"subject": "pi-extensions/lib/remote-pair-receive.ts",
 			"find": ["\t\treplyable: false,"],
 			"replace": ["\t\treplyable: true,"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-PAIR-MATCH-DISPATCHES-ONCE]",
 			"signatureSource": "pi-extensions/lib/remote-pair-receive.test.ts",
@@ -68,7 +68,7 @@
 			"subject": "pi-extensions/lib/remote-pair-receive.ts",
 			"find": ["\tif (got.length !== want.length || got.some((k, i) => k !== want[i])) {"],
 			"replace": ["\tif (false) {"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-PAIR-CLAIM-EXACT-SHAPE]",
 			"signatureSource": "pi-extensions/lib/remote-pair-receive.test.ts",
@@ -83,7 +83,7 @@
 			"subject": "scripts/remote-pair-receive.ts",
 			"find": ["emit(receipt, receipt.kind === \"rejected\" ? 3 : receipt.isError ? 4 : 0);"],
 			"replace": ["emit(receipt, receipt.kind === \"rejected\" ? 0 : receipt.isError ? 4 : 0);"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-PAIR-ENTRY-REFUSES-OUTSIDE]",
 			"signatureSource": "pi-extensions/lib/remote-pair-receive.test.ts",
@@ -98,7 +98,7 @@
 			"subject": "scripts/remote-pair-receive.ts",
 			"find": ["\tif (!path.isAbsolute(pairFile) || path.normalize(pairFile) !== own) {"],
 			"replace": ["\tif (false) {"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-PAIR-ENTRY-USAGE]",
 			"signatureSource": "pi-extensions/lib/remote-pair-receive.test.ts",
@@ -113,7 +113,7 @@
 			"subject": "scripts/remote-pair-receive.ts",
 			"find": ["\treplyRoute: \"declared\","],
 			"replace": ["\treplyRoute: \"none\","],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-PAIR-ENTRY-REPLY-ROUTE-DECLARED]",
 			"signatureSource": "pi-extensions/lib/remote-pair-receive.test.ts",
@@ -121,6 +121,36 @@
 				"argv": ["bash", "scripts/build-bridge.sh"],
 				"output": "mcp/entwurf-bridge/dist"
 			}
+		},
+		{
+			"claim": "REMOTE-PAIR-CROSS-PAIR-REFUSED",
+			"title": "the two ends are checked as independent memberships, so a sender declared in one route reaches the local citizen of another route",
+			"subject": "pi-extensions/lib/remote-pair-receive.ts",
+			"find": ["\tconst decl = fromRoutes.find((d) => d.localGardenId === claim.target);"],
+			"replace": ["\tconst decl = decls.some((d) => d.localGardenId === claim.target) ? fromRoutes[0] : undefined;"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-PAIR-CROSS-PAIR-REFUSED]",
+			"signatureSource": "pi-extensions/lib/remote-pair-receive.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-PAIR-SELECTED-ROUTE-LABEL",
+			"title": "the body is labelled with the first declared route, so a message that came over one host is shown as arriving over another",
+			"subject": "pi-extensions/lib/remote-pair-receive.ts",
+			"find": ["\tconst sender = buildRemoteSenderEnvelope(claim, picked.decl,"],
+			"replace": ["\tconst sender = buildRemoteSenderEnvelope(claim, decls[0],"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-PAIR-SELECTED-ROUTE-LABEL]",
+			"signatureSource": "pi-extensions/lib/remote-pair-receive.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
 		}
 	]
 }

package/scripts/mutants/remote-pair-roundtrip.json

@@ -6,9 +6,9 @@
 			"claim": "REMOTE-ROUNDTRIP-A-TO-B",
 			"title": "the bridge never reads the opt-in, so a declared remote target falls through to the local decider as bad-target",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": ["\t\t\t\t\troute: readRemotePairOptIn(remotePairOptInPath()),"],
-			"replace": ["\t\t\t\t\troute: null,"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"find": ["\t\t\t\t\toptIn: readRemotePairOptIn(remotePairOptInPath()),"],
+			"replace": ["\t\t\t\t\toptIn: null,"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUNDTRIP-A-TO-B]",
 			"signatureSource": "pi-extensions/lib/remote-pair-roundtrip.test.ts",
@@ -25,7 +25,7 @@
 			"replace": [
 				"\t\t\t\t\ttransport: { run: async () => ({ exitCode: 1, signal: null, timedOut: false, stdout: \"\", stderr: \"\" }) },"
 			],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUNDTRIP-REVERSE-DISPATCH]",
 			"signatureSource": "pi-extensions/lib/remote-pair-roundtrip.test.ts",
@@ -40,7 +40,7 @@
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": ["\t\t\t\t\trunLocal: (params, opts) => runAndRenderEntwurfV2FromSurface(params, opts),"],
 			"replace": ["\t\t\t\t\trunLocal: async () => ({ isError: false, text: \"local skipped\" }),"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUNDTRIP-OPT-IN-ABSENT-OFF]",
 			"signatureSource": "pi-extensions/lib/remote-pair-roundtrip.test.ts",
@@ -55,7 +55,7 @@
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
 			"find": ["refused by the other host's pair: ${o.reason} (${o.detail})"],
 			"replace": ["failed"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUNDTRIP-OTHER-HOST-REFUSES]",
 			"signatureSource": "pi-extensions/lib/remote-pair-roundtrip.test.ts",
@@ -70,7 +70,7 @@
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": ["\t\t\t\t\t\tcontrolSocketDirs: [CONTROL_SOCKET_DIR, ENTWURF_DIR],"],
 			"replace": ["\t\t\t\t\t\tcontrolSocketDirs: [ENTWURF_DIR],"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUNDTRIP-LOCAL-TRACE-BOTH-SOCKET-DIRS]",
 			"signatureSource": "pi-extensions/lib/remote-pair-roundtrip.test.ts",
@@ -78,6 +78,66 @@
 				"argv": ["bash", "scripts/build-bridge.sh"],
 				"output": "mcp/entwurf-bridge/dist"
 			}
+		},
+		{
+			"claim": "REMOTE-ROUNDTRIP-MULTI-INDEPENDENT",
+			"title": "the receiving entry reads only the first route of its file, so a second citizen paired with this host is refused as an undeclared sender",
+			"subject": "scripts/remote-pair-receive.ts",
+			"find": ["\tdecls = optIn.routes.map("],
+			"replace": ["\tdecls = optIn.routes.slice(0, 1).map("],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUNDTRIP-MULTI-INDEPENDENT]",
+			"signatureSource": "pi-extensions/lib/remote-pair-roundtrip.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUNDTRIP-MULTI-REVERSE",
+			"title": "the receiving side recognizes only the first route's remote as a sender, so a claim from a second host lands on the wrong route or is refused",
+			"subject": "pi-extensions/lib/remote-pair-receive.ts",
+			"find": ["\tconst fromRoutes = decls.filter((d) => d.remoteGardenId === claim.from);"],
+			"replace": ["\tconst fromRoutes = decls.filter((d) => d.remoteGardenId === decls[0].remoteGardenId);"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUNDTRIP-MULTI-REVERSE]",
+			"signatureSource": "pi-extensions/lib/remote-pair-roundtrip.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUNDTRIP-MULTI-UNDECLARED-SENDER-ZERO-SSH",
+			"title": "a sender with no route to a declared remote borrows another sender's route, so ssh runs and the other host is asked to accept a pair nobody declared",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["? declared.find((r) => r.localGardenId === sender.sessionId) :"],
+			"replace": ["? (declared.find((r) => r.localGardenId === sender.sessionId) ?? declared[0]) :"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUNDTRIP-MULTI-UNDECLARED-SENDER-ZERO-SSH]",
+			"signatureSource": "pi-extensions/lib/remote-pair-roundtrip.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUNDTRIP-MULTI-CROSS-CLAIM-REFUSED",
+			"title": "the target is matched against every route rather than the sender's own, so a peer that declares an extra pair on its side widens this host's",
+			"subject": "pi-extensions/lib/remote-pair-receive.ts",
+			"find": ["\tconst decl = fromRoutes.find((d) => d.localGardenId === claim.target);"],
+			"replace": ["\tconst decl = decls.find((d) => d.localGardenId === claim.target);"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUNDTRIP-MULTI-CROSS-CLAIM-REFUSED]",
+			"signatureSource": "pi-extensions/lib/remote-pair-roundtrip.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
 		}
 	]
 }

package/scripts/mutants/remote-pair-send.json

@@ -6,9 +6,9 @@
 			"claim": "REMOTE-ROUTE-UNDECLARED-LOCAL-UNCHANGED",
 			"title": "a declared route captures every target, so a gid the declaration never named is sent to the other host instead of the local decider",
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
-			"find": ["\tif (route === null || params.target !== route.remoteGardenId) {"],
-			"replace": ["\tif (route === null) {"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"find": ["\tconst declared = (opts.optIn?.routes ?? []).filter((r) => r.remoteGardenId === params.target);"],
+			"replace": ["\tconst declared = opts.optIn?.routes ?? [];"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUTE-UNDECLARED-LOCAL-UNCHANGED]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -21,9 +21,9 @@
 			"claim": "REMOTE-ROUTE-LOCAL-CONFLICT-FAILS-CLOSED",
 			"title": "a declared remote gid that this host also answers to is sent away anyway, so two hosts' citizens share one address and the sender silently picks the remote",
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
-			"find": ["\tif (await opts.localTrace(route.remoteGardenId)) {"],
+			"find": ["\tif (await opts.localTrace(params.target)) {"],
 			"replace": ["\tif (Boolean(0)) {"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUTE-LOCAL-CONFLICT-FAILS-CLOSED]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -36,9 +36,9 @@
 			"claim": "REMOTE-ROUTE-SENDER-MUST-BE-DECLARED",
 			"title": "any present envelope may use the route, so an anonymous caller or another citizen on this host speaks to the other host as the declared sender",
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
-			"find": ["\tif (!sender || sender.origin === \"external-mcp\" || sender.sessionId !== route.localGardenId) {"],
-			"replace": ["\tif (!sender || Boolean(0)) {"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"find": ["\t\tsender && sender.origin !== \"external-mcp\""],
+			"replace": ["\t\tsender"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUTE-SENDER-MUST-BE-DECLARED]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -53,7 +53,7 @@
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
 			"find": ["\t\t\"BatchMode=yes\","],
 			"replace": ["\t\t\"BatchMode=no\","],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUTE-EXACT-ARGV-ONCE]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -70,7 +70,7 @@
 			"replace": [
 				"\tawait opts.transport.run(remoteReceiveArgv(route), JSON.stringify(claim), 1);\n\tconst result = await opts.transport.run("
 			],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUTE-NO-RETRY]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -87,7 +87,7 @@
 				"\tif (r.exitCode === 0 && keys === \"isError,kind,text\" && o.kind === \"dispatched\" && o.isError === false) {"
 			],
 			"replace": ["\tif (keys === \"isError,kind,text\" && o.kind === \"dispatched\" && o.isError === false) {"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-RECEIPT-EXIT-AND-KIND-AGREE]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -102,7 +102,7 @@
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
 			"find": ["const REMOTE_PATH = /^\\/[A-Za-z0-9._/-]+$/;"],
 			"replace": ["const REMOTE_PATH = /^\\/.+$/;"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUTE-DECL-NO-QUOTING-NEEDED]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -117,7 +117,7 @@
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
 			"find": ["\t\t\tif (inspection.kind !== \"absent\") return true;"],
 			"replace": ["\t\t\tif (false) return true;"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUTE-LOCAL-TRACE-ANY-STATE]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -132,7 +132,7 @@
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
 			"find": ["read/answer unknown until a reply arrives; paths below are on the other host)"],
 			"replace": ["read/answer unknown until a reply arrives)"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUTE-RECEIPT-PATHS-OTHER-HOST]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -147,7 +147,7 @@
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
 			"find": ["\t\tif ((err as NodeJS.ErrnoException).code === \"ENOENT\") return null;"],
 			"replace": ["\t\tif (false) return null;"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-PAIR-OPT-IN-ABSENT-IS-OFF]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -162,7 +162,7 @@
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
 			"find": ["\tif (!st.isFile()) {\n\t\tthrow new RemoteRouteDeclarationError(`remote pair opt-in"],
 			"replace": ["\tif (false) {\n\t\tthrow new RemoteRouteDeclarationError(`remote pair opt-in"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-PAIR-OPT-IN-BROKEN-REFUSED]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -181,7 +181,7 @@
 			"replace": [
 				"\t\t\t\ttext: `entwurf_v2 remote ${via} → the other host did not deliver (paths below are on the other host)\\n${o.text}`,"
 			],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-REPORTED-ERROR-NO-DELIVERY-INFERENCE]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -189,6 +189,145 @@
 				"argv": ["bash", "scripts/build-bridge.sh"],
 				"output": "mcp/entwurf-bridge/dist"
 			}
+		},
+		{
+			"claim": "REMOTE-ROUTES-V2-EXACT-SHAPE",
+			"title": "an empty routes array is read as a declaration with no route, so a file meant to switch the pair off silently keeps the bridge reading an opt-in instead of being refused",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["\tif (!Array.isArray(obj.routes) || obj.routes.length === 0) {"],
+			"replace": ["\tif (!Array.isArray(obj.routes)) {"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUTES-V2-EXACT-SHAPE]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUTES-LEGACY-NAMED-REFUSAL",
+			"title": "the versionless single-pair file is quietly read as one route, so a host keeps a pre-#149 declaration through the hard cut with no named transition",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["\tif (!Object.hasOwn(obj, \"version\")) {"],
+			"replace": [
+				"\tif (!Object.hasOwn(obj, \"version\")) return { routes: [parseRoute(obj, what)] };\n\tif (Boolean(0)) {"
+			],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUTES-LEGACY-NAMED-REFUSAL]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUTES-LEGAL-REPEATS-ACCEPTED",
+			"title": "one alias may carry only one route, so a host with two citizens on the same other host cannot declare both pairs",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["\t\tif (file !== undefined && file !== r.remotePairFile) {"],
+			"replace": ["\t\tif (file !== undefined) {"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUTES-LEGAL-REPEATS-ACCEPTED]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUTES-DUPLICATE-PAIR-REFUSED",
+			"title": "the same exact pair may be declared twice, so the file carries two entries for one route and the reader keeps whichever it meets first",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["\t\tif (pairs.has(pair)) {"],
+			"replace": ["\t\tif (Boolean(0)) {"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUTES-DUPLICATE-PAIR-REFUSED]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUTES-LOCAL-REMOTE-OVERLAP-REFUSED",
+			"title": "a gid may be local in one route and remote in another, so one citizen is claimed to live on this host and on another at once",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["\t\tif (locals.has(r.remoteGardenId)) {"],
+			"replace": ["\t\tif (Boolean(0)) {"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUTES-LOCAL-REMOTE-OVERLAP-REFUSED]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUTES-REMOTE-HOST-CONFLICT-REFUSED",
+			"title": "one remote gid may be reached through two aliases, so which host a message to it goes to depends on which sender sends it",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["\t\tif (host && (host.ssh !== r.ssh || host.remotePairFile !== r.remotePairFile)) {"],
+			"replace": ["\t\tif (host && host.remotePairFile !== r.remotePairFile) {"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUTES-REMOTE-HOST-CONFLICT-REFUSED]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUTES-ALIAS-FILE-CONFLICT-REFUSED",
+			"title": "one alias may name two remote files, though the host behind it accepts only its one canonical file, so one of those routes can never be received",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["\t\tif (file !== undefined && file !== r.remotePairFile) {"],
+			"replace": ["\t\tif (Boolean(0)) {"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUTES-ALIAS-FILE-CONFLICT-REFUSED]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUTE-SELECT-EXACT-PAIR",
+			"title": "the route is chosen by target alone, so a citizen paired with another remote speaks over a route declared for a different sender",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["? declared.find((r) => r.localGardenId === sender.sessionId) :"],
+			"replace": ["? declared.find(() => true) :"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUTE-SELECT-EXACT-PAIR]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUTE-NO-LOCAL-FALLBACK",
+			"title": "a declared remote target with no route for this sender falls through to the local path, so a gid the operator said lives elsewhere is resolved on this host",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["\tif (!sender || !route) {"],
+			"replace": [
+				"\tif (!sender || !route) return opts.runLocal(params, { senderProvider: opts.senderProvider });\n\tif (!sender || !route) {"
+			],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUTE-NO-LOCAL-FALLBACK]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
 		}
 	]
 }

package/scripts/mutants/remote-pair-transport.json

@@ -8,7 +8,7 @@
 			"subject": "pi-extensions/lib/remote-pair-transport.ts",
 			"find": ["{ shell: false, stdio: [\"pipe\", \"pipe\", \"pipe\"] }"],
 			"replace": ["{ shell: true, stdio: [\"pipe\", \"pipe\", \"pipe\"] }"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-TRANSPORT-NO-SHELL-SEPARATE-STREAMS]",
 			"signatureSource": "pi-extensions/lib/remote-pair-transport.test.ts",
@@ -23,7 +23,7 @@
 			"subject": "pi-extensions/lib/remote-pair-transport.ts",
 			"find": ["\t\t\t\t\tchild.kill(\"SIGKILL\");"],
 			"replace": ["\t\t\t\t\tvoid 0;"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-TRANSPORT-TIMEOUT-REAPS-OWN-CHILD]",
 			"signatureSource": "pi-extensions/lib/remote-pair-transport.test.ts",
@@ -38,7 +38,7 @@
 			"subject": "pi-extensions/lib/remote-pair-transport.ts",
 			"find": ["\t\t\t\t\texitCode: spawnError ? null : code,"],
 			"replace": ["\t\t\t\t\texitCode: spawnError ? 0 : code,"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-TRANSPORT-SPAWN-FAILURE-INDETERMINATE]",
 			"signatureSource": "pi-extensions/lib/remote-pair-transport.test.ts",
@@ -53,7 +53,7 @@
 			"subject": "pi-extensions/lib/remote-pair-transport.ts",
 			"find": ["\t\t\t\t\tfinalTimer = setTimeout(() => {"],
 			"replace": ["\t\t\t\t\tfinalTimer = setTimeout(() => {\n\t\t\t\t\t\treturn;"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-TRANSPORT-HELD-PIPES-STILL-SETTLE]",
 			"signatureSource": "pi-extensions/lib/remote-pair-transport.test.ts",