@junghanacs/entwurf 0.41.1 → 0.45.0

package/scripts/lib/pi-durable-fresh-live-receipts.ts

@@ -11,8 +11,12 @@
  * its entry kinds — `pi.system` (tool offering, applied as toolsAdded/toolsRemoved in order),
  * `pi.assistant` (the model that answered, and the tool calls in order) and `pi.tool-result` (each
  * call's settled result, joined by toolCallId).
+ *
+ * Each call also carries the native ENTRY ids of its call and of its result (`callOrdinal` /
+ * `resultOrdinal`). Entries are read in id order, so the ids order what the store recorded — the same
+ * fact Pi's transcript row index gives the bootstrap-order leaf (`assertBootstrapOrder`).
  */
-import { piCallbackSenders } from "./codex-fresh-source-receipts.ts";
+import { piCallbackSenders, type SourceToolReceipt } from "./codex-fresh-source-receipts.ts";
 
 /** The one Pi transcript row whose exact payload arrived from `expectedSender`, or null. */
 export function piExactDeliveryRow(
@@ -43,6 +47,10 @@ export interface PdToolCall {
 	name: string;
 	arguments: Record<string, unknown>;
 	result: { text: string; isError: boolean } | null;
+	/** Native entry id of the assistant row that made this call. */
+	callOrdinal: number;
+	/** Native entry id of the tool-result row joined to it, or null while none is recorded. */
+	resultOrdinal: number | null;
 }
 export interface PdRootView {
 	offering: string[];
@@ -98,6 +106,8 @@ export function pdRootView(entries: readonly PdNativeRow[], rootConversationId:
 						name: b.name,
 						arguments: (b.arguments ?? {}) as Record<string, unknown>,
 						result: null,
+						callOrdinal: row.id,
+						resultOrdinal: null,
 					};
 					calls.push(call);
 					byId.set(b.id, call);
@@ -115,12 +125,30 @@ export function pdRootView(entries: readonly PdNativeRow[], rootConversationId:
 					)
 					.join("");
 				call.result = { text, isError: message.isError === true };
+				call.resultOrdinal = row.id;
 			}
 		}
 	}
 	return { offering, models: [...models], calls };
 }
 
+/**
+ * The root calls as source receipts, in call order, for the bootstrap-order leaf: a call with no joined
+ * result is PENDING, an errored result is FAILED. pd's verbs are its own bare tool names, so no
+ * dialect translation happens here.
+ */
+export function pdSourceToolReceipts(calls: readonly PdToolCall[]): SourceToolReceipt[] {
+	return calls.map((call) => ({
+		toolName: call.name,
+		arguments: call.arguments,
+		text: call.result?.text ?? "",
+		status: call.result === null ? "pending" : call.result.isError ? "failed" : "completed",
+		isError: call.result?.isError ?? false,
+		callOrdinal: call.callOrdinal,
+		...(call.resultOrdinal === null ? {} : { resultOrdinal: call.resultOrdinal }),
+	}));
+}
+
 /** The doorbell submission for exactly this mailbox message, on the root conversation. */
 export function pdDoorbellSubmission(
 	submissions: readonly PdNativeSubmissionRow[],

package/scripts/mutants/agent-guidance.json

@@ -0,0 +1,160 @@
+{
+	"schemaVersion": 1,
+	"lane": "agent-guidance",
+	"mutants": [
+		{
+			"claim": "GUIDANCE-REVIEWED-REVISION",
+			"title": "a valid Root revision advances beyond the independently reviewed payload revision while every history entry and decoded tool string remains valid",
+			"subject": "ENTWURF.json",
+			"find": ["\t\"revision\": 11,", "\t\"history\": ["],
+			"replace": ["\t\"revision\": 12,", "\t\"history\": ["],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-REVIEWED-REVISION]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-CURRENT-DECODED-BYTES",
+			"title": "a valid authored parameter gains one space, so normalized/shared-constant comparisons would hide a reviewed-current byte break",
+			"subject": "ENTWURF.json",
+			"find": ["Target garden id (use entwurf_peers to discover)"],
+			"replace": ["Target  garden id (use entwurf_peers to discover)"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-CURRENT-DECODED-BYTES]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-REJECT-HINTS-ORIGINAL",
+			"title": "a valid static reject hint gains one space in the real JSON, which the reader and the surface wiring both carry faithfully, so only the C0 plus reviewed-revision-6 byte oracle can disagree",
+			"subject": "ENTWURF.json",
+			"find": ["native-push for this backend is paused (#152):"],
+			"replace": ["native-push for this backend is  paused (#152):"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-REJECT-HINTS-ORIGINAL]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-RESUME-REJECT-HINTS-ORIGINAL",
+			"title": "a valid static visible-resume reject hint gains one space in the real JSON, which the reader and the visible-resume wiring both carry faithfully, so only the C0 byte oracle can disagree",
+			"subject": "ENTWURF.json",
+			"find": ["tmux was never asked to open a window"],
+			"replace": ["tmux was never  asked to open a window"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-RESUME-REJECT-HINTS-ORIGINAL]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-RUNTIME-REVIEWED-FIELDS",
+			"title": "valid callback prose changes in the real JSON and reaches source tools/list, whose C0 plus reviewed-delta expectation must disagree",
+			"subject": "ENTWURF.json",
+			"find": ["No arguments, no fallback to a model-supplied target."],
+			"replace": ["No arguments, automatic fallback to a model-supplied target."],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-RUNTIME-REVIEWED-FIELDS]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-DURABLE-REVIEWED-FIELDS",
+			"title": "the actual durable short variant changes without touching the independent C0 plus reviewed-delta contact expectation",
+			"subject": "ENTWURF.json",
+			"find": ["Return this durable host's garden identity envelope"],
+			"replace": ["Return this durable host's alternate identity envelope"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-DURABLE-REVIEWED-FIELDS]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-DUPLICATE-DECODED-KEYS",
+			"title": "grammar-only parsing skips the original token walk and accepts last-key-wins data",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["rejectDuplicateKeys(source);"],
+			"replace": ["// duplicate-key check removed by data-integrity mutant"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-DUPLICATE-DECODED-KEYS]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-STRICT-SHAPE",
+			"title": "the shape reader no longer rejects missing or unknown members",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["actual.length !== wanted.length || actual.some((key, i) => key !== wanted[i])"],
+			"replace": ["false"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-STRICT-SHAPE]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-INDEPENDENT-REVISION",
+			"title": "history length becomes payload revision, so history-only annotation silently changes it",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["freeze(data);"],
+			"replace": ["data.revision = data.history.length;\n\tfreeze(data);"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-INDEPENDENT-REVISION]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-FIXED-MODULE-ROOT",
+			"title": "an ambient path selects replacement guidance instead of the module's fixed packaged source",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["new URL(\"../../ENTWURF.json\", import.meta.url)"],
+			"replace": ["process.env.ENTWURF_GUIDANCE_PATH ?? new URL(\"../../ENTWURF.json\", import.meta.url)"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-FIXED-MODULE-ROOT]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-LAUNCH-REJECT-HINTS-ORIGINAL",
+			"title": "a valid static tmux launch-stage hint gains one space in the real JSON, which the reader, the fresh renderer and the compiled reader all carry faithfully, so only the C0 per-verb byte oracle can disagree",
+			"subject": "ENTWURF.json",
+			"find": ["the requested tmux session name is outside the shape"],
+			"replace": ["the requested tmux  session name is outside the shape"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-LAUNCH-REJECT-HINTS-ORIGINAL]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-DELIVERY-RESULT-CLAUSES-ORIGINAL",
+			"title": "a valid static delivery-result clause gains one space in the real JSON, which the reader, the v2-surface and remote-pair renderers and the compiled reader all carry faithfully, so only the 94d0594 byte oracle can disagree",
+			"subject": "ENTWURF.json",
+			"find": ["the receiver refused it; nothing was accepted"],
+			"replace": ["the receiver  refused it; nothing was accepted"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-DELIVERY-RESULT-CLAUSES-ORIGINAL]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-READER-LEAF-IMPORTS",
+			"title": "the reader gains a bare side-effect import, the weakest static form, which loads and runs fine, so only the leaf import-set parser can see the new dependency",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["import { readFileSync } from \"node:fs\";"],
+			"replace": ["import { readFileSync } from \"node:fs\";", "import \"node:path\";"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-READER-LEAF-IMPORTS]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-SLOTTED-REJECT-HINTS-ORIGINAL",
+			"title": "a valid record-less-socket segment gains one space in the real JSON, which the reader and the surface composition both carry faithfully, so only the C0 segment and template oracle can disagree",
+			"subject": "ENTWURF.json",
+			"find": ["If a pre-record-era resident owns that socket"],
+			"replace": ["If a pre-record-era  resident owns that socket"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-SLOTTED-REJECT-HINTS-ORIGINAL]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		}
+	]
+}

package/scripts/mutants/bridge-boot-resume.json

@@ -19,11 +19,9 @@
 			"claim": "BRIDGEBOOT-RESUME-CALL-TARGET-ONLY",
 			"title": "a model knob is added to the resume schema, giving the caller a second way to decide what a resumed citizen is after the record already decided",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": [
-				"\t\t\t.describe(\"Garden id of the DORMANT pi or Claude Code citizen to reopen (discover with entwurf_peers).\"),"
-			],
+			"find": ["\t\t\t.describe(ENTWURF_TOOL_GUIDANCE.entwurf_resume_call.parameters[\"target\"]),"],
 			"replace": [
-				"\t\t\t.describe(\"Garden id of the DORMANT pi or Claude Code citizen to reopen (discover with entwurf_peers).\"),",
+				"\t\t\t.describe(ENTWURF_TOOL_GUIDANCE.entwurf_resume_call.parameters[\"target\"]),",
 				"\t\tmodel: z.string().optional().describe(\"Override the recorded model.\"),"
 			],
 			"gate": ["bash", "run.sh", "check-entwurf-bridge-boot"],
@@ -48,9 +46,9 @@
 			"claim": "BRIDGEBOOT-CALLBACK-REGISTERED",
 			"title": "the callback verb is imported but never registered — invisible to every host, while every import-level assertion stays green",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": ["server.tool(\n\t\"entwurf_callback\","],
+			"find": ["server.tool(\"entwurf_callback\","],
 			"replace": [
-				"const _unregisteredCallbackTool = (...a: unknown[]) => void a;\n_unregisteredCallbackTool(\n\t\"entwurf_callback\","
+				"const _unregisteredCallbackTool = (...a: unknown[]) => void a;\n_unregisteredCallbackTool(\"entwurf_callback\","
 			],
 			"gate": ["bash", "run.sh", "check-entwurf-bridge-boot"],
 			"timeoutSeconds": 120,
@@ -61,9 +59,9 @@
 			"claim": "BRIDGEBOOT-CALLBACK-ZERO-ARG",
 			"title": "a target parameter is added to the callback schema, giving the model a way to supply an address the env pair was meant to own",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": ["\t\"MCP child). No arguments, no fallback to a model-supplied target.\",\n\t{},"],
+			"find": ["server.tool(\"entwurf_callback\", ENTWURF_TOOL_GUIDANCE.entwurf_callback.descriptions.mcp, {},"],
 			"replace": [
-				"\t\"MCP child). No arguments, no fallback to a model-supplied target.\",\n\t{ target: z.string().optional() },"
+				"server.tool(\"entwurf_callback\", ENTWURF_TOOL_GUIDANCE.entwurf_callback.descriptions.mcp, { target: z.string().optional() },"
 			],
 			"gate": ["bash", "run.sh", "check-entwurf-bridge-boot"],
 			"timeoutSeconds": 120,

package/scripts/mutants/capability-bundle-reach.json

@@ -0,0 +1,124 @@
+{
+	"schemaVersion": 1,
+	"lane": "capability-bundle-reach",
+	"mutants": [
+		{
+			"claim": "BUNDLE-REACH-GUIDANCE-CARRIER",
+			"title": "the private build appends one LF to the emitted guidance carrier: valid JSON and all decoded exports stay identical, but canonical raw-byte parity must fail before the reader import",
+			"subject": "scripts/build-bridge.sh",
+			"find": ["cp \"$GUIDANCE_SOURCE\" \"$REPO_DIR/mcp/entwurf-bridge/dist/ENTWURF.json\""],
+			"replace": [
+				"cp \"$GUIDANCE_SOURCE\" \"$REPO_DIR/mcp/entwurf-bridge/dist/ENTWURF.json\"",
+				"printf '\\n' >> \"$REPO_DIR/mcp/entwurf-bridge/dist/ENTWURF.json\""
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-GUIDANCE-CARRIER]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "BUNDLE-REACH-REJECT-HINTS",
+			"title": "the compiled reader exports one static reject hint with a trailing space while the carrier keeps canonical Root bytes and the version/tools exports stay identical, so only the compiled hint-family reach can fail",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["export const ENTWURF_REJECT_HINTS = guidance.rejectHints;"],
+			"replace": [
+				"export const ENTWURF_REJECT_HINTS: typeof guidance.rejectHints = Object.freeze({",
+				"\t...guidance.rejectHints,",
+				"\t\"native-push-paused\": `${guidance.rejectHints[\"native-push-paused\"]} `,",
+				"});"
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-REJECT-HINTS]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "BUNDLE-REACH-RESUME-REJECT-HINTS",
+			"title": "the compiled reader exports one static visible-resume reject hint with a trailing space while the carrier keeps canonical Root bytes and the version/tools/reject-hint exports stay identical, so only the compiled resume-hint-family reach can fail",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["export const ENTWURF_RESUME_REJECT_HINTS = guidance.resumeRejectHints;"],
+			"replace": [
+				"export const ENTWURF_RESUME_REJECT_HINTS: typeof guidance.resumeRejectHints = Object.freeze({",
+				"\t...guidance.resumeRejectHints,",
+				"\t\"launch-refused\": `${guidance.resumeRejectHints[\"launch-refused\"]} `,",
+				"});"
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-RESUME-REJECT-HINTS]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "BUNDLE-REACH-LAUNCH-REJECT-HINTS",
+			"title": "the compiled reader exports one fresh launch-stage hint with a trailing space while the carrier keeps canonical Root bytes and every earlier export stays identical, so only the compiled launch-family reach can fail",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["export const ENTWURF_FRESH_LAUNCH_REJECT_HINTS = guidance.freshLaunchRejectHints;"],
+			"replace": [
+				"export const ENTWURF_FRESH_LAUNCH_REJECT_HINTS: typeof guidance.freshLaunchRejectHints = Object.freeze({",
+				"\t...guidance.freshLaunchRejectHints,",
+				"\t\"runtime-missing\": `${guidance.freshLaunchRejectHints[\"runtime-missing\"]} `,",
+				"});"
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-LAUNCH-REJECT-HINTS]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "BUNDLE-REACH-DELIVERY-RESULT-CLAUSES",
+			"title": "the compiled reader exports one delivery-result clause with a trailing space while the carrier keeps canonical Root bytes and every earlier export stays identical, so only the compiled delivery-clause reach can fail",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["export const ENTWURF_DELIVERY_RESULT_CLAUSES = guidance.deliveryResultClauses;"],
+			"replace": [
+				"export const ENTWURF_DELIVERY_RESULT_CLAUSES: typeof guidance.deliveryResultClauses = Object.freeze({",
+				"\t...guidance.deliveryResultClauses,",
+				"\t\"dirty-lock\": `${guidance.deliveryResultClauses[\"dirty-lock\"]} `,",
+				"});"
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-DELIVERY-RESULT-CLAUSES]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "BUNDLE-REACH-SLOTTED-REJECT-HINTS",
+			"title": "the compiled reader exports one slotted reject-hint segment with a trailing space while the carrier keeps canonical Root bytes and every earlier export stays identical, so only the compiled slotted-family reach can fail",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["export const ENTWURF_SLOTTED_REJECT_HINTS = guidance.slottedRejectHints;"],
+			"replace": [
+				"export const ENTWURF_SLOTTED_REJECT_HINTS: typeof guidance.slottedRejectHints = Object.freeze({",
+				"\t\"record-less-socket\": Object.freeze({",
+				"\t\t...guidance.slottedRejectHints[\"record-less-socket\"],",
+				"\t\tafterFreshCutPrescription: `${guidance.slottedRejectHints[\"record-less-socket\"].afterFreshCutPrescription} `,",
+				"\t}),",
+				"});"
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-SLOTTED-REJECT-HINTS]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "BUNDLE-REACH-RECORD-LESS-SOCKET-CONSUMER",
+			"title": "the surface source returns a hand-kept copy of the record-less-socket hint, one byte off the Root segments, instead of composing them with the owner's fix command; the build carries it into the compiled surface while the carrier and every reader export stay canonical, so only the compiled consumer cell can fail",
+			"subject": "pi-extensions/lib/entwurf-v2-surface.ts",
+			"find": [
+				"\t\t\treturn `${hint.beforeFreshCutPrescription}${FRESH_CUT_PRESCRIPTION}${hint.afterFreshCutPrescription}`;"
+			],
+			"replace": [
+				"\t\t\treturn `a control socket exists at this garden id but NO meta-record claims it — the record is the sole address authority, so a bare socket is not an addressable citizen. If a pre-record-era resident owns that socket, restart it under the current runtime (session_start births its record); if the store predates the current generation, quiesce and archive it with ${FRESH_CUT_PRESCRIPTION}. A stale/forged  socket should be removed.`;"
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-RECORD-LESS-SOCKET-CONSUMER]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		}
+	]
+}

package/scripts/mutants/chain-terminus-publication.json

@@ -0,0 +1,17 @@
+{
+	"schemaVersion": 1,
+	"lane": "chain-terminus-publication",
+	"mutants": [
+		{
+			"claim": "CHAIN-TERMINUS-WAITS-FOR-SIGNAL",
+			"title": "the terminus wait stops at the first body again, so smoke-entwurf-chain-live checks the doorbell while enqueueMetaMessage is still between its .msg write and its inbox.signal write and reports a false RED",
+			"subject": "scripts/lib/chain-terminus-publication.ts",
+			"find": ["\t\tif (msgs.length > 0 && signalled) break;"],
+			"replace": ["\t\tif (msgs.length > 0) break;"],
+			"gate": ["bash", "run.sh", "check-chain-terminus-publication"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CHAIN-TERMINUS-WAITS-FOR-SIGNAL]",
+			"signatureSource": "test/chain-terminus-publication.test.ts"
+		}
+	]
+}

package/scripts/mutants/codex-native.json

@@ -1066,6 +1066,104 @@
 			"timeoutSeconds": 180,
 			"signature": "[QK:CODEX-SOCKET-LISTEN-ROW-ONLY]",
 			"signatureSource": "test/codex-socket-listener.test.ts"
+		},
+		{
+			"claim": "BOOTSTRAP-PEERS-PREFIX-THEN-EXACT-CALLBACK",
+			"title": "the bootstrap ORDER removed: everything before the first callback is skipped instead of only an exact peers check, so `bash true → callback → task` — the r3 RED — passes again, and a task call made before the callback is no longer refused",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": ["\tfor (; at < receipts.length && receipts[at]?.toolName === \"entwurf_peers\"; at++) {"],
+			"replace": [
+				"\tfor (; at < receipts.length && receipts[at]?.toolName !== expected.callback.toolName; at++) {\n\t\tif (receipts[at]?.toolName !== \"entwurf_peers\") continue;"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:BOOTSTRAP-PEERS-PREFIX-THEN-EXACT-CALLBACK]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "BOOTSTRAP-PEERS-ONLY-AS-PREFIX",
+			"title": "the peers check filtered out wherever it appears instead of admitted only as a prefix — a check after the callback disappears from the audit, which is the position-independent filter the contract forbids",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": ["\tconst rest = receipts.slice(at + 1);"],
+			"replace": ["\tconst rest = receipts.slice(at + 1).filter((r) => r.toolName !== \"entwurf_peers\");"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:BOOTSTRAP-PEERS-ONLY-AS-PREFIX]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "BOOTSTRAP-ZERO-ARG-CALLBACK-STRICT",
+			"title": "the v2 wants_reply default stretched over the zero-argument callback: `entwurf_callback {wants_reply:false}` reads as `{}`, so a model supplying a parameter the verb does not have passes as the exact callback",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": [
+				"\treturn toolName === \"entwurf_v2\" ? sourceArgumentsMatch(expected, actual) : isDeepStrictEqual(expected, actual);"
+			],
+			"replace": ["\treturn sourceArgumentsMatch(expected, actual);"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:BOOTSTRAP-ZERO-ARG-CALLBACK-STRICT]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "BOOTSTRAP-CODEX-V2-CALLBACK-DEFAULT",
+			"title": "deep-strict comparison forced onto Codex's entwurf_v2 callback too — a Codex callback that omits wants_reply (schema default false) is refused, resurrecting the 2026-09-16 default-false RED",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": [
+				"\treturn toolName === \"entwurf_v2\" ? sourceArgumentsMatch(expected, actual) : isDeepStrictEqual(expected, actual);"
+			],
+			"replace": ["\treturn isDeepStrictEqual(expected, actual);"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:BOOTSTRAP-CODEX-V2-CALLBACK-DEFAULT]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "BOOTSTRAP-PI-RESULT-BEFORE-TASK-CALL",
+			"title": "the Pi result-ordinal check dropped: a task call made in the same assistant row as the callback — before the callback result existed — passes on call order alone",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": ["\t\t\tcallback.resultOrdinal !== undefined &&"],
+			"replace": ["\t\t\tfalse &&"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:BOOTSTRAP-PI-RESULT-BEFORE-TASK-CALL]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "CODEX-LIVE-INITIAL-PI-BOOTSTRAP-TASK",
+			"title": "the initial Pi's task restored to the retired forced-first wording — `Your FIRST tool call must be … callback … and nothing before it` with a blanket identity-recheck ban — so the LIVE task forbids the read-only caller check the shared framing offers and the order audit admits",
+			"subject": "scripts/lib/codex-fresh-live-protocol.ts",
+			"find": [
+				"\t\t\"This launch is a guided caller check: first call mcp__entwurf_bridge__entwurf_peers once (read-only, no \" +\n\t\t\"arguments) to corroborate your caller, and only after its result call mcp__entwurf_bridge__entwurf_callback \" +\n\t\t\"with no arguments. Use no other tool before the callback. \" +"
+			],
+			"replace": [
+				"\t\t\"Do not recheck identity with other tools. Your FIRST tool call must be mcp__entwurf_bridge__entwurf_callback with no arguments, and nothing before it. \" +"
+			],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:CODEX-LIVE-INITIAL-PI-BOOTSTRAP-TASK]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "BOOTSTRAP-PI-PEERS-RESULT-BEFORE-CALLBACK",
+			"title": "the peers-result-before-callback ordinal check dropped: a callback made in the same assistant row as the peers check — before its answer existed — passes as if the caller had been checked",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": ["\t\t\tcheck.resultOrdinal !== undefined &&"],
+			"replace": ["\t\t\tfalse &&"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:BOOTSTRAP-PI-PEERS-RESULT-BEFORE-CALLBACK]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
+		},
+		{
+			"claim": "BOOTSTRAP-GUIDED-PEERS-REQUIRED",
+			"title": "the guided launch's required check ignored: a guided initial Pi that called back without the peers check it was asked for passes, so a zero-check PASS is counted as the positive path",
+			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
+			"find": ["\tif (at < minPeers)"],
+			"replace": ["\tif (false && at < minPeers)"],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 180,
+			"signature": "[QK:BOOTSTRAP-GUIDED-PEERS-REQUIRED]",
+			"signatureSource": "test/codex-fresh-live-protocol.test.ts"
 		}
 	]
 }

package/scripts/mutants/control-send-receipt.json

@@ -153,7 +153,7 @@
 			"title": "the dirty-lock line goes back to `DELIVERED (<route>)` for all three shapes that reach it — a refusal that delivered nothing, a message lying in a volatile queue, and a durable mailbox file all read as one word, at the exact moment an operator is deciding BY HAND whether anything still needs sending",
 			"subject": "pi-extensions/lib/entwurf-v2-surface.ts",
 			"find": [
-				"\t\t\t\t\t\t? `rejected${result.finalizedRejectReason ? ` (${result.finalizedRejectReason})` : \"\"} — the receiver refused it; nothing was accepted`"
+				"\t\t\t\t\t\t? `rejected${result.finalizedRejectReason ? ` (${result.finalizedRejectReason})` : \"\"} — ${ENTWURF_DELIVERY_RESULT_CLAUSES[\"finalized-rejected\"]}`"
 			],
 			"replace": ["\t\t\t\t\t\t? `DELIVERED (${result.finalizedOutcome})`"],
 			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
@@ -161,15 +161,28 @@
 			"signature": "[QK:SEND-DIRTY-LOCK-NAMES-ACCEPTANCE]",
 			"signatureSource": "scripts/check-entwurf-v2-surface.ts"
 		},
+		{
+			"claim": "V2SURF-DELIVERY-RESULT-CLAUSES-FROM-ROOT",
+			"title": "the dirty-lock receipt reads a hand-kept copy of its clause, one byte off the Root text, instead of the Root lookup: DIRTY and do NOT retry still read on every shape, so only the whole-line comparison against Root can see the drift",
+			"subject": "pi-extensions/lib/entwurf-v2-surface.ts",
+			"find": ["\t\t\t\t\t\t`${ENTWURF_DELIVERY_RESULT_CLAUSES[\"dirty-lock\"]}\\n  error: ${result.error}`,"],
+			"replace": [
+				"\t\t\t\t\t\t`the lock is DIRTY (release failed) — do NOT retry automatically. Inspect the reported acceptance and have the operator resolve the lock before  deciding whether to resend.\\n  error: ${result.error}`,"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:V2SURF-DELIVERY-RESULT-CLAUSES-FROM-ROOT]",
+			"signatureSource": "scripts/check-entwurf-v2-surface.ts"
+		},
 		{
 			"claim": "VITEST-TEST-DIR-ON-THE-FLOOR",
 			"title": "the pi queue oracle's public coordinate is dropped from `check:vitest`, so the file that proves every claim the receipt makes about a receiver's queues is green only when somebody runs `pnpm test` by hand — the discovery door deliberately does not select `test/**`, so nothing else would notice",
 			"subject": "package.json",
 			"find": [
-				"\"check:vitest\": \"./run.sh check-mux-fresh-call && ./run.sh check-acp-sdk-surface && ./run.sh check-pi-queue-oracle && ./run.sh check-tests-beside-behavior && ./run.sh check-remote-pair-installed-audit\""
+				"\"check:vitest\": \"./run.sh check-mux-fresh-call && ./run.sh check-acp-sdk-surface && ./run.sh check-pi-queue-oracle && ./run.sh check-tests-beside-behavior && ./run.sh check-remote-pair-installed-audit && ./run.sh check-chain-terminus-publication\""
 			],
 			"replace": [
-				"\"check:vitest\": \"./run.sh check-mux-fresh-call && ./run.sh check-acp-sdk-surface && ./run.sh check-tests-beside-behavior && ./run.sh check-remote-pair-installed-audit\""
+				"\"check:vitest\": \"./run.sh check-mux-fresh-call && ./run.sh check-acp-sdk-surface && ./run.sh check-tests-beside-behavior && ./run.sh check-remote-pair-installed-audit && ./run.sh check-chain-terminus-publication\""
 			],
 			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
 			"timeoutSeconds": 600,
@@ -225,9 +238,13 @@
 		{
 			"claim": "SEND-OUTCOME-LIST-NAMES-EVERY-RAIL",
 			"title": "the caller-facing outcome list drops the native-push rail, so a caller reading the one blurb it reads before dispatching is told the control rail's vocabulary covers a rail that answers with a direct injection instead",
-			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": ["\t\t\"native-push INJECTION, a rejection, or lock-dirty. EXISTING targets only; discover with \" +"],
-			"replace": ["\t\t\"a rejection, or lock-dirty. EXISTING targets only; discover with \" +"],
+			"subject": "ENTWURF.json",
+			"find": [
+				"native-push INJECTION, a rejection, or lock-dirty. This receipt is not the colleague's reply or evidence of reading. EXISTING targets only; discover with "
+			],
+			"replace": [
+				"a rejection, or lock-dirty. This receipt is not the colleague's reply or evidence of reading. EXISTING targets only; discover with "
+			],
 			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:SEND-OUTCOME-LIST-NAMES-EVERY-RAIL]",