@junghanacs/entwurf 0.41.2 → 0.45.0

package/scripts/mutants/bridge-boot-resume.json

@@ -19,11 +19,9 @@
 			"claim": "BRIDGEBOOT-RESUME-CALL-TARGET-ONLY",
 			"title": "a model knob is added to the resume schema, giving the caller a second way to decide what a resumed citizen is after the record already decided",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": [
-				"\t\t\t.describe(\"Garden id of the DORMANT pi or Claude Code citizen to reopen (discover with entwurf_peers).\"),"
-			],
+			"find": ["\t\t\t.describe(ENTWURF_TOOL_GUIDANCE.entwurf_resume_call.parameters[\"target\"]),"],
 			"replace": [
-				"\t\t\t.describe(\"Garden id of the DORMANT pi or Claude Code citizen to reopen (discover with entwurf_peers).\"),",
+				"\t\t\t.describe(ENTWURF_TOOL_GUIDANCE.entwurf_resume_call.parameters[\"target\"]),",
 				"\t\tmodel: z.string().optional().describe(\"Override the recorded model.\"),"
 			],
 			"gate": ["bash", "run.sh", "check-entwurf-bridge-boot"],
@@ -48,9 +46,9 @@
 			"claim": "BRIDGEBOOT-CALLBACK-REGISTERED",
 			"title": "the callback verb is imported but never registered — invisible to every host, while every import-level assertion stays green",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": ["server.tool(\n\t\"entwurf_callback\","],
+			"find": ["server.tool(\"entwurf_callback\","],
 			"replace": [
-				"const _unregisteredCallbackTool = (...a: unknown[]) => void a;\n_unregisteredCallbackTool(\n\t\"entwurf_callback\","
+				"const _unregisteredCallbackTool = (...a: unknown[]) => void a;\n_unregisteredCallbackTool(\"entwurf_callback\","
 			],
 			"gate": ["bash", "run.sh", "check-entwurf-bridge-boot"],
 			"timeoutSeconds": 120,
@@ -61,9 +59,9 @@
 			"claim": "BRIDGEBOOT-CALLBACK-ZERO-ARG",
 			"title": "a target parameter is added to the callback schema, giving the model a way to supply an address the env pair was meant to own",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": ["\t\"MCP child). No arguments, no fallback to a model-supplied target.\",\n\t{},"],
+			"find": ["server.tool(\"entwurf_callback\", ENTWURF_TOOL_GUIDANCE.entwurf_callback.descriptions.mcp, {},"],
 			"replace": [
-				"\t\"MCP child). No arguments, no fallback to a model-supplied target.\",\n\t{ target: z.string().optional() },"
+				"server.tool(\"entwurf_callback\", ENTWURF_TOOL_GUIDANCE.entwurf_callback.descriptions.mcp, { target: z.string().optional() },"
 			],
 			"gate": ["bash", "run.sh", "check-entwurf-bridge-boot"],
 			"timeoutSeconds": 120,

package/scripts/mutants/capability-bundle-reach.json

@@ -0,0 +1,124 @@
+{
+	"schemaVersion": 1,
+	"lane": "capability-bundle-reach",
+	"mutants": [
+		{
+			"claim": "BUNDLE-REACH-GUIDANCE-CARRIER",
+			"title": "the private build appends one LF to the emitted guidance carrier: valid JSON and all decoded exports stay identical, but canonical raw-byte parity must fail before the reader import",
+			"subject": "scripts/build-bridge.sh",
+			"find": ["cp \"$GUIDANCE_SOURCE\" \"$REPO_DIR/mcp/entwurf-bridge/dist/ENTWURF.json\""],
+			"replace": [
+				"cp \"$GUIDANCE_SOURCE\" \"$REPO_DIR/mcp/entwurf-bridge/dist/ENTWURF.json\"",
+				"printf '\\n' >> \"$REPO_DIR/mcp/entwurf-bridge/dist/ENTWURF.json\""
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-GUIDANCE-CARRIER]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "BUNDLE-REACH-REJECT-HINTS",
+			"title": "the compiled reader exports one static reject hint with a trailing space while the carrier keeps canonical Root bytes and the version/tools exports stay identical, so only the compiled hint-family reach can fail",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["export const ENTWURF_REJECT_HINTS = guidance.rejectHints;"],
+			"replace": [
+				"export const ENTWURF_REJECT_HINTS: typeof guidance.rejectHints = Object.freeze({",
+				"\t...guidance.rejectHints,",
+				"\t\"native-push-paused\": `${guidance.rejectHints[\"native-push-paused\"]} `,",
+				"});"
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-REJECT-HINTS]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "BUNDLE-REACH-RESUME-REJECT-HINTS",
+			"title": "the compiled reader exports one static visible-resume reject hint with a trailing space while the carrier keeps canonical Root bytes and the version/tools/reject-hint exports stay identical, so only the compiled resume-hint-family reach can fail",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["export const ENTWURF_RESUME_REJECT_HINTS = guidance.resumeRejectHints;"],
+			"replace": [
+				"export const ENTWURF_RESUME_REJECT_HINTS: typeof guidance.resumeRejectHints = Object.freeze({",
+				"\t...guidance.resumeRejectHints,",
+				"\t\"launch-refused\": `${guidance.resumeRejectHints[\"launch-refused\"]} `,",
+				"});"
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-RESUME-REJECT-HINTS]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "BUNDLE-REACH-LAUNCH-REJECT-HINTS",
+			"title": "the compiled reader exports one fresh launch-stage hint with a trailing space while the carrier keeps canonical Root bytes and every earlier export stays identical, so only the compiled launch-family reach can fail",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["export const ENTWURF_FRESH_LAUNCH_REJECT_HINTS = guidance.freshLaunchRejectHints;"],
+			"replace": [
+				"export const ENTWURF_FRESH_LAUNCH_REJECT_HINTS: typeof guidance.freshLaunchRejectHints = Object.freeze({",
+				"\t...guidance.freshLaunchRejectHints,",
+				"\t\"runtime-missing\": `${guidance.freshLaunchRejectHints[\"runtime-missing\"]} `,",
+				"});"
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-LAUNCH-REJECT-HINTS]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "BUNDLE-REACH-DELIVERY-RESULT-CLAUSES",
+			"title": "the compiled reader exports one delivery-result clause with a trailing space while the carrier keeps canonical Root bytes and every earlier export stays identical, so only the compiled delivery-clause reach can fail",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["export const ENTWURF_DELIVERY_RESULT_CLAUSES = guidance.deliveryResultClauses;"],
+			"replace": [
+				"export const ENTWURF_DELIVERY_RESULT_CLAUSES: typeof guidance.deliveryResultClauses = Object.freeze({",
+				"\t...guidance.deliveryResultClauses,",
+				"\t\"dirty-lock\": `${guidance.deliveryResultClauses[\"dirty-lock\"]} `,",
+				"});"
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-DELIVERY-RESULT-CLAUSES]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "BUNDLE-REACH-SLOTTED-REJECT-HINTS",
+			"title": "the compiled reader exports one slotted reject-hint segment with a trailing space while the carrier keeps canonical Root bytes and every earlier export stays identical, so only the compiled slotted-family reach can fail",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["export const ENTWURF_SLOTTED_REJECT_HINTS = guidance.slottedRejectHints;"],
+			"replace": [
+				"export const ENTWURF_SLOTTED_REJECT_HINTS: typeof guidance.slottedRejectHints = Object.freeze({",
+				"\t\"record-less-socket\": Object.freeze({",
+				"\t\t...guidance.slottedRejectHints[\"record-less-socket\"],",
+				"\t\tafterFreshCutPrescription: `${guidance.slottedRejectHints[\"record-less-socket\"].afterFreshCutPrescription} `,",
+				"\t}),",
+				"});"
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-SLOTTED-REJECT-HINTS]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "BUNDLE-REACH-RECORD-LESS-SOCKET-CONSUMER",
+			"title": "the surface source returns a hand-kept copy of the record-less-socket hint, one byte off the Root segments, instead of composing them with the owner's fix command; the build carries it into the compiled surface while the carrier and every reader export stay canonical, so only the compiled consumer cell can fail",
+			"subject": "pi-extensions/lib/entwurf-v2-surface.ts",
+			"find": [
+				"\t\t\treturn `${hint.beforeFreshCutPrescription}${FRESH_CUT_PRESCRIPTION}${hint.afterFreshCutPrescription}`;"
+			],
+			"replace": [
+				"\t\t\treturn `a control socket exists at this garden id but NO meta-record claims it — the record is the sole address authority, so a bare socket is not an addressable citizen. If a pre-record-era resident owns that socket, restart it under the current runtime (session_start births its record); if the store predates the current generation, quiesce and archive it with ${FRESH_CUT_PRESCRIPTION}. A stale/forged  socket should be removed.`;"
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-RECORD-LESS-SOCKET-CONSUMER]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		}
+	]
+}

package/scripts/mutants/control-send-receipt.json

@@ -153,7 +153,7 @@
 			"title": "the dirty-lock line goes back to `DELIVERED (<route>)` for all three shapes that reach it — a refusal that delivered nothing, a message lying in a volatile queue, and a durable mailbox file all read as one word, at the exact moment an operator is deciding BY HAND whether anything still needs sending",
 			"subject": "pi-extensions/lib/entwurf-v2-surface.ts",
 			"find": [
-				"\t\t\t\t\t\t? `rejected${result.finalizedRejectReason ? ` (${result.finalizedRejectReason})` : \"\"} — the receiver refused it; nothing was accepted`"
+				"\t\t\t\t\t\t? `rejected${result.finalizedRejectReason ? ` (${result.finalizedRejectReason})` : \"\"} — ${ENTWURF_DELIVERY_RESULT_CLAUSES[\"finalized-rejected\"]}`"
 			],
 			"replace": ["\t\t\t\t\t\t? `DELIVERED (${result.finalizedOutcome})`"],
 			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
@@ -161,6 +161,19 @@
 			"signature": "[QK:SEND-DIRTY-LOCK-NAMES-ACCEPTANCE]",
 			"signatureSource": "scripts/check-entwurf-v2-surface.ts"
 		},
+		{
+			"claim": "V2SURF-DELIVERY-RESULT-CLAUSES-FROM-ROOT",
+			"title": "the dirty-lock receipt reads a hand-kept copy of its clause, one byte off the Root text, instead of the Root lookup: DIRTY and do NOT retry still read on every shape, so only the whole-line comparison against Root can see the drift",
+			"subject": "pi-extensions/lib/entwurf-v2-surface.ts",
+			"find": ["\t\t\t\t\t\t`${ENTWURF_DELIVERY_RESULT_CLAUSES[\"dirty-lock\"]}\\n  error: ${result.error}`,"],
+			"replace": [
+				"\t\t\t\t\t\t`the lock is DIRTY (release failed) — do NOT retry automatically. Inspect the reported acceptance and have the operator resolve the lock before  deciding whether to resend.\\n  error: ${result.error}`,"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:V2SURF-DELIVERY-RESULT-CLAUSES-FROM-ROOT]",
+			"signatureSource": "scripts/check-entwurf-v2-surface.ts"
+		},
 		{
 			"claim": "VITEST-TEST-DIR-ON-THE-FLOOR",
 			"title": "the pi queue oracle's public coordinate is dropped from `check:vitest`, so the file that proves every claim the receipt makes about a receiver's queues is green only when somebody runs `pnpm test` by hand — the discovery door deliberately does not select `test/**`, so nothing else would notice",
@@ -225,9 +238,13 @@
 		{
 			"claim": "SEND-OUTCOME-LIST-NAMES-EVERY-RAIL",
 			"title": "the caller-facing outcome list drops the native-push rail, so a caller reading the one blurb it reads before dispatching is told the control rail's vocabulary covers a rail that answers with a direct injection instead",
-			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": ["\t\t\"native-push INJECTION, a rejection, or lock-dirty. EXISTING targets only; discover with \" +"],
-			"replace": ["\t\t\"a rejection, or lock-dirty. EXISTING targets only; discover with \" +"],
+			"subject": "ENTWURF.json",
+			"find": [
+				"native-push INJECTION, a rejection, or lock-dirty. This receipt is not the colleague's reply or evidence of reading. EXISTING targets only; discover with "
+			],
+			"replace": [
+				"a rejection, or lock-dirty. This receipt is not the colleague's reply or evidence of reading. EXISTING targets only; discover with "
+			],
 			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:SEND-OUTCOME-LIST-NAMES-EVERY-RAIL]",

package/scripts/mutants/mux-fresh-call.json

@@ -127,7 +127,7 @@
 			"title": "the fresh-call surface drops the optional cwd from its schema, so cross-repo fresh silently cannot exist from any caller — pi included, which reaches this bridge since #125",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\tcwd: z\n\t\t\t.string()\n\t\t\t.optional()\n\t\t\t.describe(\n\t\t\t\t\"Optional literal ABSOLUTE path of an existing directory to start the sibling in (cross-repo fresh). Omit or pass \\\"\\\" to start where the CALLER is — this agent's own cwd on BOTH rails, or for a Codex caller its own record directory, because this bridge is the app-server's child and that process's directory is not the caller's. Taken exactly as given: no trim, no realpath, no project-name resolution. '#' is refused on the tmux rail only, because tmux format-expands a start directory; inside herdr it is an ordinary path character. The receipt echoes the directory that was REQUESTED or the caller record it came from, never an observation of where the pane landed.\",\n\t\t\t),\n"
+				"\t\tcwd: z.string().optional().describe(ENTWURF_TOOL_GUIDANCE.entwurf_fresh_call.parameters[\"cwd\"]),\n"
 			],
 			"replace": [""],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
@@ -153,7 +153,7 @@
 			"title": "MCP drops the required model field from fresh-call while the composition still expects one",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\tmodel: z\n\t\t\t.string()\n\t\t\t.min(1)\n\t\t\t.max(200)\n\t\t\t// The `\\[` below is USELESS TO JS AND LOAD-BEARING TO THE HOST. zod emits this source\n\t\t\t// text verbatim as the JSON Schema `pattern`, and the host's tool-schema validator is a\n\t\t\t// Rust regex engine that rejects an unescaped `[` inside a character class as \"unclosed\n\t\t\t// character class\" — a 400 on tools/list that stops EVERY Claude session from opening\n\t\t\t// (7-M-fix). Biome's safe fix removes it; do not accept that fix. The suppression must\n\t\t\t// stay on the line DIRECTLY above the expression, or it attaches to nothing and reads\n\t\t\t// as an unused suppression while the escape goes back to being fixable.\n\t\t\t// biome-ignore lint/complexity/noUselessEscapeInRegex: emitted to a Rust regex validator, see above\n\t\t\t.regex(/^[A-Za-z0-9][A-Za-z0-9._/:\\[\\]-]*$/)\n\t\t\t.describe(\n\t\t\t\t\"Required runtime model: canonical provider/model for pi (a bare alias is refused), provider/<exact catalog model id> for pi-durable, a Claude Code model id/alias, or a Copilot/OMP/Codex model name. Neither pi nor pi-durable may name the openrouter provider.\",\n\t\t\t),\n"
+				"\t\tmodel: z\n\t\t\t.string()\n\t\t\t.min(1)\n\t\t\t.max(200)\n\t\t\t// The `\\[` below is USELESS TO JS AND LOAD-BEARING TO THE HOST. zod emits this source\n\t\t\t// text verbatim as the JSON Schema `pattern`, and the host's tool-schema validator is a\n\t\t\t// Rust regex engine that rejects an unescaped `[` inside a character class as \"unclosed\n\t\t\t// character class\" — a 400 on tools/list that stops EVERY Claude session from opening\n\t\t\t// (7-M-fix). Biome's safe fix removes it; do not accept that fix. The suppression must\n\t\t\t// stay on the line DIRECTLY above the expression, or it attaches to nothing and reads\n\t\t\t// as an unused suppression while the escape goes back to being fixable.\n\t\t\t// biome-ignore lint/complexity/noUselessEscapeInRegex: emitted to a Rust regex validator, see above\n\t\t\t.regex(/^[A-Za-z0-9][A-Za-z0-9._/:\\[\\]-]*$/)\n\t\t\t.describe(ENTWURF_TOOL_GUIDANCE.entwurf_fresh_call.parameters[\"model\"]),\n"
 			],
 			"replace": [""],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
@@ -514,7 +514,7 @@
 			"title": "the fresh-call surface drops the optional seat from its schema, so opening a sibling in the operator's project session silently cannot exist from any caller",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\tplacement: z\n\t\t\t.object({\n\t\t\t\ttmuxSession: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.describe(\n\t\t\t\t\t\t\"EXACT name of an EXISTING session on this agent's own tmux server. Nothing is created: an absent session is refused as tmux-session-missing, and a name outside [A-Za-z0-9][A-Za-z0-9_-]* as tmux-session-name-invalid.\",\n\t\t\t\t\t),\n\t\t\t})\n\t\t\t.optional()\n\t\t\t.describe(\n\t\t\t\t\"Optional expert seat override, TMUX ONLY: open the sibling in ONE EXISTING tmux session of this agent's own server, and it always wins. When omitted the seat follows the CALLER, never the backend being opened: a Codex CALLER opens beside its own TUI pane, matched by thread-id in that pane's terminal title (0 or 2+ matching panes refuse, never fall back); every other caller opens in its own session. A pane title is a placement input only — never an address, liveness or delivery fact. Nothing is ever created. Inside herdr this field is refused by name — placement there belongs to herdr, and a tmux session name would silently place the sibling somewhere else. Independent of cwd; neither is inferred from the other. The receipt reports the selected name (absent for the caller-pane rule, which observed a session rather than requesting a name), its source, and resolved target session id.\",\n\t\t\t),\n"
+				"\t\tplacement: z\n\t\t\t.object({\n\t\t\t\ttmuxSession: z.string().describe(ENTWURF_TOOL_GUIDANCE.entwurf_fresh_call.parameters[\"placement.tmuxSession\"]),\n\t\t\t})\n\t\t\t.optional()\n\t\t\t.describe(ENTWURF_TOOL_GUIDANCE.entwurf_fresh_call.parameters[\"placement\"]),\n"
 			],
 			"replace": [""],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
@@ -781,6 +781,17 @@
 			"timeoutSeconds": 120,
 			"signature": "[QK:PD-FRESH-LIVE-BOOTSTRAP-ORDER]",
 			"signatureSource": "test/pi-durable-fresh-live-receipts.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-LAUNCH-REJECT-HINTS-FROM-ROOT",
+			"title": "one static tmux launch-stage hint is inlined as a literal one byte away from the Root text, so the reader and its byte oracle stay green and only the rendered refusal can disagree with Root",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\"anchor-malformed\": ENTWURF_FRESH_LAUNCH_REJECT_HINTS[\"anchor-malformed\"],"],
+			"replace": ["\t\"anchor-malformed\": \"TMUX_PANE is not a native  pane id\","],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-LAUNCH-REJECT-HINTS-FROM-ROOT]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
 		}
 	]
 }

package/scripts/mutants/mux-resume-call.json

@@ -98,12 +98,12 @@
 		{
 			"claim": "MUXRESUME-DESC-CONTRACT-MCP",
 			"title": "the MCP description drops the dormant-only scope, inviting callers to aim the verb at live citizens it will refuse",
-			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"subject": "ENTWURF.json",
 			"find": [
-				"\t\"Reopen ONE DORMANT pi or Claude Code citizen under its OWN garden id, in a visible window in the operator's \" +"
+				"Only on an explicit operator request, reopen ONE DORMANT pi or Claude Code citizen under its OWN garden id, in a visible window in the operator's "
 			],
 			"replace": [
-				"\t\"Reopen ONE pi or Claude Code citizen under its OWN garden id, in a visible window in the operator's \" +"
+				"Only on an explicit operator request, reopen ONE pi or Claude Code citizen under its OWN garden id, in a visible window in the operator's "
 			],
 			"gate": ["bash", "run.sh", "check-mux-resume-call"],
 			"timeoutSeconds": 60,
@@ -155,6 +155,31 @@
 			"timeoutSeconds": 60,
 			"signature": "[QK:MUXRESUME-ARGV-IDENTITY-SCRUB]",
 			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-LAUNCH-REJECT-HINTS-FROM-ROOT",
+			"title": "one launch-stage resume hint is inlined as a literal one byte away from the Root text, so the reader and its byte oracle stay green and only the table-to-Root wiring can disagree",
+			"subject": "pi-extensions/lib/mux-resume-call.ts",
+			"find": ["\t\"anchor-malformed\": ENTWURF_RESUME_LAUNCH_REJECT_HINTS[\"anchor-malformed\"],"],
+			"replace": ["\t\"anchor-malformed\": \"TMUX_PANE is not a native  pane id\","],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-LAUNCH-REJECT-HINTS-FROM-ROOT]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-IMPORT-SET",
+			"title": "the resume composition gains a bare side-effect import, the weakest static form, which loads and runs fine, so only the exact import-set parser can see the new lane",
+			"subject": "pi-extensions/lib/mux-resume-call.ts",
+			"find": ["import { ENTWURF_RESUME_LAUNCH_REJECT_HINTS } from \"./agent-guidance.ts\";"],
+			"replace": [
+				"import { ENTWURF_RESUME_LAUNCH_REJECT_HINTS } from \"./agent-guidance.ts\";",
+				"import \"node:path\";"
+			],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-IMPORT-SET]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
 		}
 	]
 }

package/scripts/mutants/pi-durable.json

@@ -2,6 +2,20 @@
 	"schemaVersion": 1,
 	"lane": "pi-durable",
 	"mutants": [
+		{
+			"claim": "PI-DURABLE-DESCRIPTION-DRIFT-REFUSED",
+			"title": "schema comparison ignores description-only drift while still comparing structural schema fields",
+			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"find": ["canonicalJson(found.inputSchema) !== canonicalJson(PI_DURABLE_TOOL_SCHEMAS[name])"],
+			"replace": [
+				"canonicalJson(JSON.parse(JSON.stringify(found.inputSchema, (key, value) => key === \"description\" ? undefined : value))) !== canonicalJson(JSON.parse(JSON.stringify(PI_DURABLE_TOOL_SCHEMAS[name], (key, value) => key === \"description\" ? undefined : value)))"
+			],
+			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-DURABLE-DESCRIPTION-DRIFT-REFUSED]",
+			"signatureSource": "pi-extensions/meta-bridge-pi-durable.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
 		{
 			"claim": "PI-DURABLE-RETIRE-CALL",
 			"title": "retirement alone drops the actual request cancellation signal",
@@ -24,13 +38,11 @@
 		{
 			"claim": "PI-DURABLE-RETIRE-POLICY",
 			"title": "the native retirement description treats actor identity as a standing grant",
-			"subject": "pi-extensions/meta-bridge-pi-durable.ts",
+			"subject": "ENTWURF.json",
 			"find": [
-				"\t\t\"Only when the human operator explicitly requested this particular target/work: make ONE retirement attempt for that request \" +"
-			],
-			"replace": [
-				"\t\t\"A caller record alone authorizes this target/work: make ONE retirement attempt for that request \" +"
+				"Only when the human operator explicitly requested this particular target/work: make ONE retirement attempt for that request "
 			],
+			"replace": ["A caller record alone authorizes this target/work: make ONE retirement attempt for that request "],
 			"gate": ["bash", "run.sh", "check-pi-durable-beside"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-DURABLE-RETIRE-POLICY]",

package/scripts/mutants/remote-pair-send.json

@@ -129,7 +129,7 @@
 		{
 			"claim": "REMOTE-ROUTE-RECEIPT-PATHS-OTHER-HOST",
 			"title": "the accepted receipt drops the note that its paths are on the other host, so the other host's messagePath reads as a file the sender could open",
-			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"subject": "ENTWURF.json",
 			"find": ["read/answer unknown until a reply arrives; paths below are on the other host)"],
 			"replace": ["read/answer unknown until a reply arrives)"],
 			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
@@ -141,6 +141,25 @@
 				"output": "mcp/entwurf-bridge/dist"
 			}
 		},
+		{
+			"claim": "REMOTE-DELIVERY-RESULT-CLAUSES-FROM-ROOT",
+			"title": "the accepted receipt reads a hand-kept copy of its clause, one byte off the Root text, instead of the Root lookup: it still names acceptance and still says its paths are on the other host, so only the byte comparison against Root can see the drift",
+			"subject": "pi-extensions/lib/remote-pair-send.ts",
+			"find": [
+				"\t\t\t\ttext: `entwurf_v2 remote ${via} → ${ENTWURF_DELIVERY_RESULT_CLAUSES[\"remote-accepted\"]}\\n${o.text}`,"
+			],
+			"replace": [
+				"\t\t\t\ttext: `entwurf_v2 remote ${via} → accepted by the other host (its  fact; read/answer unknown until a reply arrives; paths below are on the other host)\\n${o.text}`,"
+			],
+			"gate": ["bash", "run.sh", "check-remote-pair-beside"],
+			"timeoutSeconds": 600,
+			"signature": "[QK:REMOTE-DELIVERY-RESULT-CLAUSES-FROM-ROOT]",
+			"signatureSource": "pi-extensions/lib/remote-pair-send.test.ts",
+			"build": {
+				"argv": ["bash", "scripts/build-bridge.sh"],
+				"output": "mcp/entwurf-bridge/dist"
+			}
+		},
 		{
 			"claim": "REMOTE-PAIR-OPT-IN-ABSENT-IS-OFF",
 			"title": "an absent opt-in file throws instead of meaning off, so every local send on a host that never opted in fails",
@@ -176,7 +195,7 @@
 			"title": "an error the other host reports after a possible write is headed as a non-delivery, inviting a resend that would deliver twice",
 			"subject": "pi-extensions/lib/remote-pair-send.ts",
 			"find": [
-				"\t\t\t\ttext: `entwurf_v2 remote ${via} → the other host reported an error while processing; read its receipt below, delivery is not inferred from this line; not retried (paths below are on the other host)\\n${o.text}`,"
+				"\t\t\t\ttext: `entwurf_v2 remote ${via} → ${ENTWURF_DELIVERY_RESULT_CLAUSES[\"remote-reported-error\"]}\\n${o.text}`,"
 			],
 			"replace": [
 				"\t\t\t\ttext: `entwurf_v2 remote ${via} → the other host did not deliver (paths below are on the other host)\\n${o.text}`,"

package/scripts/mutants/self-address.json

@@ -7,19 +7,19 @@
 			"title": "entwurf_self reverts to an empty self-fetch guard + unconditional mailbox render (ordering-not-containment)",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\t\t\tif (rail === \"self-fetch\") {",
-				"\t\t\t\t\tconst mailboxPath = path.join(defaultMetaMailboxDir(), sender.sessionId);",
-				"\t\t\t\t\textra.mailboxPath = mailboxPath;",
-				"\t\t\t\t\tlines.push(`mailboxPath: ${mailboxPath}`);",
-				"\t\t\t\t} else if (rail === \"native-push\") {"
-			],
-			"replace": [
-				"\t\t\t\tif (rail === \"self-fetch\") {",
-				"\t\t\t\t}",
+				"\t\t\tif (rail === \"self-fetch\") {",
 				"\t\t\t\tconst mailboxPath = path.join(defaultMetaMailboxDir(), sender.sessionId);",
 				"\t\t\t\textra.mailboxPath = mailboxPath;",
 				"\t\t\t\tlines.push(`mailboxPath: ${mailboxPath}`);",
-				"\t\t\t\tif (rail === \"native-push\") {"
+				"\t\t\t} else if (rail === \"native-push\") {"
+			],
+			"replace": [
+				"\t\t\tif (rail === \"self-fetch\") {",
+				"\t\t\t}",
+				"\t\t\tconst mailboxPath = path.join(defaultMetaMailboxDir(), sender.sessionId);",
+				"\t\t\textra.mailboxPath = mailboxPath;",
+				"\t\t\tlines.push(`mailboxPath: ${mailboxPath}`);",
+				"\t\t\tif (rail === \"native-push\") {"
 			],
 			"gate": ["bash", "run.sh", "check-entwurf-self-address"],
 			"timeoutSeconds": 60,