@junghanacs/entwurf 0.41.1 → 0.45.0

package/scripts/mutants/remote-pair-send.json

@@ -6,9 +6,9 @@
 			"claim": "REMOTE-ROUTE-UNDECLARED-LOCAL-UNCHANGED",
 			"title": "a declared route captures every target, so a gid the declaration never named is sent to the other host instead of the local decider",
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
-			"find": ["\tif (route === null || params.target !== route.remoteGardenId) {"],
-			"replace": ["\tif (route === null) {"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"find": ["\tconst declared = (opts.optIn?.routes ?? []).filter((r) => r.remoteGardenId === params.target);"],
+			"replace": ["\tconst declared = opts.optIn?.routes ?? [];"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUTE-UNDECLARED-LOCAL-UNCHANGED]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -21,9 +21,9 @@
 			"claim": "REMOTE-ROUTE-LOCAL-CONFLICT-FAILS-CLOSED",
 			"title": "a declared remote gid that this host also answers to is sent away anyway, so two hosts' citizens share one address and the sender silently picks the remote",
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
-			"find": ["\tif (await opts.localTrace(route.remoteGardenId)) {"],
+			"find": ["\tif (await opts.localTrace(params.target)) {"],
 			"replace": ["\tif (Boolean(0)) {"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUTE-LOCAL-CONFLICT-FAILS-CLOSED]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -36,9 +36,9 @@
 			"claim": "REMOTE-ROUTE-SENDER-MUST-BE-DECLARED",
 			"title": "any present envelope may use the route, so an anonymous caller or another citizen on this host speaks to the other host as the declared sender",
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
-			"find": ["\tif (!sender || sender.origin === \"external-mcp\" || sender.sessionId !== route.localGardenId) {"],
-			"replace": ["\tif (!sender || Boolean(0)) {"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"find": ["\t\tsender && sender.origin !== \"external-mcp\""],
+			"replace": ["\t\tsender"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUTE-SENDER-MUST-BE-DECLARED]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -53,7 +53,7 @@
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
 			"find": ["\t\t\"BatchMode=yes\","],
 			"replace": ["\t\t\"BatchMode=no\","],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUTE-EXACT-ARGV-ONCE]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -70,7 +70,7 @@
 			"replace": [
 				"\tawait opts.transport.run(remoteReceiveArgv(route), JSON.stringify(claim), 1);\n\tconst result = await opts.transport.run("
 			],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUTE-NO-RETRY]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -87,7 +87,7 @@
 				"\tif (r.exitCode === 0 && keys === \"isError,kind,text\" && o.kind === \"dispatched\" && o.isError === false) {"
 			],
 			"replace": ["\tif (keys === \"isError,kind,text\" && o.kind === \"dispatched\" && o.isError === false) {"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-RECEIPT-EXIT-AND-KIND-AGREE]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -102,7 +102,7 @@
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
 			"find": ["const REMOTE_PATH = /^\\/[A-Za-z0-9._/-]+$/;"],
 			"replace": ["const REMOTE_PATH = /^\\/.+$/;"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUTE-DECL-NO-QUOTING-NEEDED]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -117,7 +117,7 @@
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
 			"find": ["\t\t\tif (inspection.kind !== \"absent\") return true;"],
 			"replace": ["\t\t\tif (false) return true;"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUTE-LOCAL-TRACE-ANY-STATE]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -129,10 +129,10 @@
 		{
 			"claim": "REMOTE-ROUTE-RECEIPT-PATHS-OTHER-HOST",
 			"title": "the accepted receipt drops the note that its paths are on the other host, so the other host's messagePath reads as a file the sender could open",
-			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"subject": "ENTWURF.json",
 			"find": ["read/answer unknown until a reply arrives; paths below are on the other host)"],
 			"replace": ["read/answer unknown until a reply arrives)"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-ROUTE-RECEIPT-PATHS-OTHER-HOST]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -141,13 +141,32 @@
 				"output": "mcp/entwurf-bridge/dist"
 			}
 		},
+		{
+			"claim": "REMOTE-DELIVERY-RESULT-CLAUSES-FROM-ROOT",
+			"title": "the accepted receipt reads a hand-kept copy of its clause, one byte off the Root text, instead of the Root lookup: it still names acceptance and still says its paths are on the other host, so only the byte comparison against Root can see the drift",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": [
+				"\t\t\t\ttext: `entwurf_v2 remote ${via} → ${ENTWURF_DELIVERY_RESULT_CLAUSES[\"remote-accepted\"]}\\n${o.text}`,"
+			],
+			"replace": [
+				"\t\t\t\ttext: `entwurf_v2 remote ${via} → accepted by the other host (its  fact; read/answer unknown until a reply arrives; paths below are on the other host)\\n${o.text}`,"
+			],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-DELIVERY-RESULT-CLAUSES-FROM-ROOT]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
 		{
 			"claim": "REMOTE-PAIR-OPT-IN-ABSENT-IS-OFF",
 			"title": "an absent opt-in file throws instead of meaning off, so every local send on a host that never opted in fails",
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
 			"find": ["\t\tif ((err as NodeJS.ErrnoException).code === \"ENOENT\") return null;"],
 			"replace": ["\t\tif (false) return null;"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-PAIR-OPT-IN-ABSENT-IS-OFF]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -162,7 +181,7 @@
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
 			"find": ["\tif (!st.isFile()) {\n\t\tthrow new RemoteRouteDeclarationError(`remote pair opt-in"],
 			"replace": ["\tif (false) {\n\t\tthrow new RemoteRouteDeclarationError(`remote pair opt-in"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-PAIR-OPT-IN-BROKEN-REFUSED]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -176,12 +195,12 @@
 			"title": "an error the other host reports after a possible write is headed as a non-delivery, inviting a resend that would deliver twice",
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
 			"find": [
-				"\t\t\t\ttext: `entwurf_v2 remote ${via} → the other host reported an error while processing; read its receipt below, delivery is not inferred from this line; not retried (paths below are on the other host)\\n${o.text}`,"
+				"\t\t\t\ttext: `entwurf_v2 remote ${via} → ${ENTWURF_DELIVERY_RESULT_CLAUSES[\"remote-reported-error\"]}\\n${o.text}`,"
 			],
 			"replace": [
 				"\t\t\t\ttext: `entwurf_v2 remote ${via} → the other host did not deliver (paths below are on the other host)\\n${o.text}`,"
 			],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-REPORTED-ERROR-NO-DELIVERY-INFERENCE]",
 			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
@@ -189,6 +208,145 @@
 				"argv": ["bash", "scripts/build-bridge.sh"],
 				"output": "mcp/entwurf-bridge/dist"
 			}
+		},
+		{
+			"claim": "REMOTE-ROUTES-V2-EXACT-SHAPE",
+			"title": "an empty routes array is read as a declaration with no route, so a file meant to switch the pair off silently keeps the bridge reading an opt-in instead of being refused",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["\tif (!Array.isArray(obj.routes) || obj.routes.length === 0) {"],
+			"replace": ["\tif (!Array.isArray(obj.routes)) {"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUTES-V2-EXACT-SHAPE]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUTES-LEGACY-NAMED-REFUSAL",
+			"title": "the versionless single-pair file is quietly read as one route, so a host keeps a pre-#149 declaration through the hard cut with no named transition",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["\tif (!Object.hasOwn(obj, \"version\")) {"],
+			"replace": [
+				"\tif (!Object.hasOwn(obj, \"version\")) return { routes: [parseRoute(obj, what)] };\n\tif (Boolean(0)) {"
+			],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUTES-LEGACY-NAMED-REFUSAL]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUTES-LEGAL-REPEATS-ACCEPTED",
+			"title": "one alias may carry only one route, so a host with two citizens on the same other host cannot declare both pairs",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["\t\tif (file !== undefined && file !== r.remotePairFile) {"],
+			"replace": ["\t\tif (file !== undefined) {"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUTES-LEGAL-REPEATS-ACCEPTED]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUTES-DUPLICATE-PAIR-REFUSED",
+			"title": "the same exact pair may be declared twice, so the file carries two entries for one route and the reader keeps whichever it meets first",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["\t\tif (pairs.has(pair)) {"],
+			"replace": ["\t\tif (Boolean(0)) {"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUTES-DUPLICATE-PAIR-REFUSED]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUTES-LOCAL-REMOTE-OVERLAP-REFUSED",
+			"title": "a gid may be local in one route and remote in another, so one citizen is claimed to live on this host and on another at once",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["\t\tif (locals.has(r.remoteGardenId)) {"],
+			"replace": ["\t\tif (Boolean(0)) {"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUTES-LOCAL-REMOTE-OVERLAP-REFUSED]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUTES-REMOTE-HOST-CONFLICT-REFUSED",
+			"title": "one remote gid may be reached through two aliases, so which host a message to it goes to depends on which sender sends it",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["\t\tif (host && (host.ssh !== r.ssh || host.remotePairFile !== r.remotePairFile)) {"],
+			"replace": ["\t\tif (host && host.remotePairFile !== r.remotePairFile) {"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUTES-REMOTE-HOST-CONFLICT-REFUSED]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUTES-ALIAS-FILE-CONFLICT-REFUSED",
+			"title": "one alias may name two remote files, though the host behind it accepts only its one canonical file, so one of those routes can never be received",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["\t\tif (file !== undefined && file !== r.remotePairFile) {"],
+			"replace": ["\t\tif (Boolean(0)) {"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUTES-ALIAS-FILE-CONFLICT-REFUSED]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUTE-SELECT-EXACT-PAIR",
+			"title": "the route is chosen by target alone, so a citizen paired with another remote speaks over a route declared for a different sender",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["? declared.find((r) => r.localGardenId === sender.sessionId) :"],
+			"replace": ["? declared.find(() => true) :"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUTE-SELECT-EXACT-PAIR]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
+		{
+			"claim": "REMOTE-ROUTE-NO-LOCAL-FALLBACK",
+			"title": "a declared remote target with no route for this sender falls through to the local path, so a gid the operator said lives elsewhere is resolved on this host",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": ["\tif (!sender || !route) {"],
+			"replace": [
+				"\tif (!sender || !route) return opts.runLocal(params, { senderProvider: opts.senderProvider });\n\tif (!sender || !route) {"
+			],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-ROUTE-NO-LOCAL-FALLBACK]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
 		}
 	]
 }

package/scripts/mutants/remote-pair-transport.json

@@ -8,7 +8,7 @@
 			"subject": "pi-extensions/lib/remote-pair-transport.ts",
 			"find": ["{ shell: false, stdio: [\"pipe\", \"pipe\", \"pipe\"] }"],
 			"replace": ["{ shell: true, stdio: [\"pipe\", \"pipe\", \"pipe\"] }"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-TRANSPORT-NO-SHELL-SEPARATE-STREAMS]",
 			"signatureSource": "pi-extensions/lib/remote-pair-transport.test.ts",
@@ -23,7 +23,7 @@
 			"subject": "pi-extensions/lib/remote-pair-transport.ts",
 			"find": ["\t\t\t\t\tchild.kill(\"SIGKILL\");"],
 			"replace": ["\t\t\t\t\tvoid 0;"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-TRANSPORT-TIMEOUT-REAPS-OWN-CHILD]",
 			"signatureSource": "pi-extensions/lib/remote-pair-transport.test.ts",
@@ -38,7 +38,7 @@
 			"subject": "pi-extensions/lib/remote-pair-transport.ts",
 			"find": ["\t\t\t\t\texitCode: spawnError ? null : code,"],
 			"replace": ["\t\t\t\t\texitCode: spawnError ? 0 : code,"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-TRANSPORT-SPAWN-FAILURE-INDETERMINATE]",
 			"signatureSource": "pi-extensions/lib/remote-pair-transport.test.ts",
@@ -53,7 +53,7 @@
 			"subject": "pi-extensions/lib/remote-pair-transport.ts",
 			"find": ["\t\t\t\t\tfinalTimer = setTimeout(() => {"],
 			"replace": ["\t\t\t\t\tfinalTimer = setTimeout(() => {\n\t\t\t\t\t\treturn;"],
-			"gate": ["bash", "run.sh", "check-tests-beside-behavior"],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:REMOTE-TRANSPORT-HELD-PIPES-STILL-SETTLE]",
 			"signatureSource": "pi-extensions/lib/remote-pair-transport.test.ts",

package/scripts/mutants/self-address.json

@@ -7,19 +7,19 @@
 			"title": "entwurf_self reverts to an empty self-fetch guard + unconditional mailbox render (ordering-not-containment)",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\t\t\tif (rail === \"self-fetch\") {",
-				"\t\t\t\t\tconst mailboxPath = path.join(defaultMetaMailboxDir(), sender.sessionId);",
-				"\t\t\t\t\textra.mailboxPath = mailboxPath;",
-				"\t\t\t\t\tlines.push(`mailboxPath: ${mailboxPath}`);",
-				"\t\t\t\t} else if (rail === \"native-push\") {"
-			],
-			"replace": [
-				"\t\t\t\tif (rail === \"self-fetch\") {",
-				"\t\t\t\t}",
+				"\t\t\tif (rail === \"self-fetch\") {",
 				"\t\t\t\tconst mailboxPath = path.join(defaultMetaMailboxDir(), sender.sessionId);",
 				"\t\t\t\textra.mailboxPath = mailboxPath;",
 				"\t\t\t\tlines.push(`mailboxPath: ${mailboxPath}`);",
-				"\t\t\t\tif (rail === \"native-push\") {"
+				"\t\t\t} else if (rail === \"native-push\") {"
+			],
+			"replace": [
+				"\t\t\tif (rail === \"self-fetch\") {",
+				"\t\t\t}",
+				"\t\t\tconst mailboxPath = path.join(defaultMetaMailboxDir(), sender.sessionId);",
+				"\t\t\textra.mailboxPath = mailboxPath;",
+				"\t\t\tlines.push(`mailboxPath: ${mailboxPath}`);",
+				"\t\t\tif (rail === \"native-push\") {"
 			],
 			"gate": ["bash", "run.sh", "check-entwurf-self-address"],
 			"timeoutSeconds": 60,

package/scripts/mutants/source-install.json

@@ -27,6 +27,72 @@
 			"timeoutSeconds": 300,
 			"signature": "[QK:SOURCE-OPERATOR-FAILS-LOUD]",
 			"signatureSource": "scripts/smoke-agy-install-state.sh"
+		},
+		{
+			"claim": "SOURCE-SAME-TARGET-PASSES",
+			"title": "the exclusivity check compares the unresolved entry path again, so a duplicate PATH entry or a second link to this very checkout reads as another root and blocks a correct developer install",
+			"subject": "scripts/dev-bin.sh",
+			"find": ["        if os.path.lexists(path) and os.path.realpath(path) != target:"],
+			"replace": ["        if os.path.lexists(path) and os.path.abspath(path) != target:"],
+			"gate": ["bash", "run.sh", "smoke-agy-install-state"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:SOURCE-SAME-TARGET-PASSES]",
+			"signatureSource": "scripts/smoke-agy-install-state.sh"
+		},
+		{
+			"claim": "SOURCE-LATER-ROOT-FAILS",
+			"title": "the exclusivity check reads only the head of PATH again, so an old global shim later in PATH stays selectable by a shell with another PATH order while setup reports a developer install",
+			"subject": "scripts/dev-bin.sh",
+			"find": ["for d in os.environ.get(\"PATH\", \"\").split(\":\"):"],
+			"replace": ["for d in os.environ.get(\"PATH\", \"\").split(\":\")[:1]:"],
+			"gate": ["bash", "run.sh", "smoke-agy-install-state"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:SOURCE-LATER-ROOT-FAILS]",
+			"signatureSource": "scripts/smoke-agy-install-state.sh"
+		},
+		{
+			"claim": "SOURCE-GLOBAL-BIN-OTHER-ROOT",
+			"title": "the package manager's reported global bin dir is queried but never searched, so another root there passes whenever that dir is absent from this PATH",
+			"subject": "scripts/dev-bin.sh",
+			"find": ["        add(to_bin(value), label)\n"],
+			"replace": ["        pass\n"],
+			"gate": ["bash", "run.sh", "smoke-agy-install-state"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:SOURCE-GLOBAL-BIN-OTHER-ROOT]",
+			"signatureSource": "scripts/smoke-agy-install-state.sh"
+		},
+		{
+			"claim": "SOURCE-GLOBAL-QUERY-REFUSED",
+			"title": "a package manager that fails or hangs is read as not installed again, so an uninspectable global bin dir yields a clean developer-install verdict",
+			"subject": "scripts/dev-bin.sh",
+			"find": ["        errors.append(value)\n"],
+			"replace": ["        skipped.append(value)\n"],
+			"gate": ["bash", "run.sh", "smoke-agy-install-state"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:SOURCE-GLOBAL-QUERY-REFUSED]",
+			"signatureSource": "scripts/smoke-agy-install-state.sh"
+		},
+		{
+			"claim": "SOURCE-EXCLUSIVE-WIRED",
+			"title": "source setup's bins step drops the exclusivity verdict again and returns its pre-repair success, so another selectable root is reported as a developer install",
+			"subject": "run.sh",
+			"find": ["  [ \"$rc\" -eq 0 ] && return \"$ex_rc\"\n"],
+			"replace": ["  [ \"$rc\" -eq 0 ] && return 0\n"],
+			"gate": ["bash", "run.sh", "smoke-agy-install-state"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:SOURCE-EXCLUSIVE-WIRED]",
+			"signatureSource": "scripts/smoke-agy-install-state.sh"
+		},
+		{
+			"claim": "SOURCE-MANIFEST-UNREADABLE-REFUSED",
+			"title": "an unreadable or wrong-shaped package manifest is read as zero bin names again, so the exclusivity check finds no other root by checking nothing and source setup reports a developer install",
+			"subject": "scripts/dev-bin.sh",
+			"find": ["    sys.exit(6)  # an unreadable manifest is never \"0 names, no other root\"\n"],
+			"replace": ["    bins = {}  # regressed: an unreadable manifest read as zero names\n"],
+			"gate": ["bash", "run.sh", "smoke-agy-install-state"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:SOURCE-MANIFEST-UNREADABLE-REFUSED]",
+			"signatureSource": "scripts/smoke-agy-install-state.sh"
 		}
 	]
 }