@junghanacs/entwurf 0.41.2 → 0.50.0

package/scripts/mutants/agent-guidance.json

@@ -0,0 +1,160 @@
+{
+	"schemaVersion": 1,
+	"lane": "agent-guidance",
+	"mutants": [
+		{
+			"claim": "GUIDANCE-REVIEWED-REVISION",
+			"title": "a valid Root revision advances beyond the independently reviewed payload revision while every history entry and decoded tool string remains valid",
+			"subject": "ENTWURF.json",
+			"find": ["\t\"revision\": 19,", "\t\"history\": ["],
+			"replace": ["\t\"revision\": 20,", "\t\"history\": ["],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-REVIEWED-REVISION]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-CURRENT-DECODED-BYTES",
+			"title": "a valid authored parameter gains one space, so normalized/shared-constant comparisons would hide a reviewed-current byte break",
+			"subject": "ENTWURF.json",
+			"find": ["Target garden id (use entwurf_peers to discover)"],
+			"replace": ["Target  garden id (use entwurf_peers to discover)"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-CURRENT-DECODED-BYTES]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-REJECT-HINTS-ORIGINAL",
+			"title": "a valid static reject hint gains one space in the real JSON, which the reader and the surface wiring both carry faithfully, so only the C0 plus reviewed-revision-6 byte oracle can disagree",
+			"subject": "ENTWURF.json",
+			"find": ["native-push for this backend is paused (#152):"],
+			"replace": ["native-push for this backend is  paused (#152):"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-REJECT-HINTS-ORIGINAL]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-RESUME-REJECT-HINTS-ORIGINAL",
+			"title": "a valid static visible-resume reject hint gains one space in the real JSON, which the reader and the visible-resume wiring both carry faithfully, so only the C0 byte oracle can disagree",
+			"subject": "ENTWURF.json",
+			"find": ["no tmux window and no herdr tab was opened"],
+			"replace": ["no tmux window and no herdr tab  was opened"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-RESUME-REJECT-HINTS-ORIGINAL]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-RUNTIME-REVIEWED-FIELDS",
+			"title": "valid callback prose changes in the real JSON and reaches source tools/list, whose C0 plus reviewed-delta expectation must disagree",
+			"subject": "ENTWURF.json",
+			"find": ["No arguments, no fallback to a model-supplied target."],
+			"replace": ["No arguments, automatic fallback to a model-supplied target."],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-RUNTIME-REVIEWED-FIELDS]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-DURABLE-REVIEWED-FIELDS",
+			"title": "the actual durable short variant changes without touching the independent C0 plus reviewed-delta contact expectation",
+			"subject": "ENTWURF.json",
+			"find": ["Return this durable host's garden identity envelope"],
+			"replace": ["Return this durable host's alternate identity envelope"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-DURABLE-REVIEWED-FIELDS]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-DUPLICATE-DECODED-KEYS",
+			"title": "grammar-only parsing skips the original token walk and accepts last-key-wins data",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["rejectDuplicateKeys(source);"],
+			"replace": ["// duplicate-key check removed by data-integrity mutant"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-DUPLICATE-DECODED-KEYS]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-STRICT-SHAPE",
+			"title": "the shape reader no longer rejects missing or unknown members",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["actual.length !== wanted.length || actual.some((key, i) => key !== wanted[i])"],
+			"replace": ["false"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-STRICT-SHAPE]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-INDEPENDENT-REVISION",
+			"title": "history length becomes payload revision, so history-only annotation silently changes it",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["freeze(data);"],
+			"replace": ["data.revision = data.history.length;\n\tfreeze(data);"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-INDEPENDENT-REVISION]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-FIXED-MODULE-ROOT",
+			"title": "an ambient path selects replacement guidance instead of the module's fixed packaged source",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["new URL(\"../../ENTWURF.json\", import.meta.url)"],
+			"replace": ["process.env.ENTWURF_GUIDANCE_PATH ?? new URL(\"../../ENTWURF.json\", import.meta.url)"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-FIXED-MODULE-ROOT]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-LAUNCH-REJECT-HINTS-ORIGINAL",
+			"title": "a valid static tmux launch-stage hint gains one space in the real JSON, which the reader, the fresh renderer and the compiled reader all carry faithfully, so only the C0 per-verb byte oracle can disagree",
+			"subject": "ENTWURF.json",
+			"find": ["the requested tmux session name is outside the shape"],
+			"replace": ["the requested tmux  session name is outside the shape"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-LAUNCH-REJECT-HINTS-ORIGINAL]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-DELIVERY-RESULT-CLAUSES-ORIGINAL",
+			"title": "a valid static delivery-result clause gains one space in the real JSON, which the reader, the v2-surface and remote-pair renderers and the compiled reader all carry faithfully, so only the 94d0594 byte oracle can disagree",
+			"subject": "ENTWURF.json",
+			"find": ["the receiver refused it; nothing was accepted"],
+			"replace": ["the receiver  refused it; nothing was accepted"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-DELIVERY-RESULT-CLAUSES-ORIGINAL]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-READER-LEAF-IMPORTS",
+			"title": "the reader gains a bare side-effect import, the weakest static form, which loads and runs fine, so only the leaf import-set parser can see the new dependency",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["import { readFileSync } from \"node:fs\";"],
+			"replace": ["import { readFileSync } from \"node:fs\";", "import \"node:path\";"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-READER-LEAF-IMPORTS]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		},
+		{
+			"claim": "GUIDANCE-SLOTTED-REJECT-HINTS-ORIGINAL",
+			"title": "a valid record-less-socket segment gains one space in the real JSON, which the reader and the surface composition both carry faithfully, so only the C0 segment and template oracle can disagree",
+			"subject": "ENTWURF.json",
+			"find": ["If a pre-record-era resident owns that socket"],
+			"replace": ["If a pre-record-era  resident owns that socket"],
+			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:GUIDANCE-SLOTTED-REJECT-HINTS-ORIGINAL]",
+			"signatureSource": "pi-extensions/lib/agent-guidance.test.ts"
+		}
+	]
+}

package/scripts/mutants/bridge-boot-resume.json

@@ -19,11 +19,9 @@
 			"claim": "BRIDGEBOOT-RESUME-CALL-TARGET-ONLY",
 			"title": "a model knob is added to the resume schema, giving the caller a second way to decide what a resumed citizen is after the record already decided",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": [
-				"\t\t\t.describe(\"Garden id of the DORMANT pi or Claude Code citizen to reopen (discover with entwurf_peers).\"),"
-			],
+			"find": ["\t\t\t.describe(ENTWURF_TOOL_GUIDANCE.entwurf_resume_call.parameters[\"target\"]),"],
 			"replace": [
-				"\t\t\t.describe(\"Garden id of the DORMANT pi or Claude Code citizen to reopen (discover with entwurf_peers).\"),",
+				"\t\t\t.describe(ENTWURF_TOOL_GUIDANCE.entwurf_resume_call.parameters[\"target\"]),",
 				"\t\tmodel: z.string().optional().describe(\"Override the recorded model.\"),"
 			],
 			"gate": ["bash", "run.sh", "check-entwurf-bridge-boot"],
@@ -48,9 +46,9 @@
 			"claim": "BRIDGEBOOT-CALLBACK-REGISTERED",
 			"title": "the callback verb is imported but never registered — invisible to every host, while every import-level assertion stays green",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": ["server.tool(\n\t\"entwurf_callback\","],
+			"find": ["server.tool(\"entwurf_callback\","],
 			"replace": [
-				"const _unregisteredCallbackTool = (...a: unknown[]) => void a;\n_unregisteredCallbackTool(\n\t\"entwurf_callback\","
+				"const _unregisteredCallbackTool = (...a: unknown[]) => void a;\n_unregisteredCallbackTool(\"entwurf_callback\","
 			],
 			"gate": ["bash", "run.sh", "check-entwurf-bridge-boot"],
 			"timeoutSeconds": 120,
@@ -61,9 +59,9 @@
 			"claim": "BRIDGEBOOT-CALLBACK-ZERO-ARG",
 			"title": "a target parameter is added to the callback schema, giving the model a way to supply an address the env pair was meant to own",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": ["\t\"MCP child). No arguments, no fallback to a model-supplied target.\",\n\t{},"],
+			"find": ["server.tool(\"entwurf_callback\", ENTWURF_TOOL_GUIDANCE.entwurf_callback.descriptions.mcp, {},"],
 			"replace": [
-				"\t\"MCP child). No arguments, no fallback to a model-supplied target.\",\n\t{ target: z.string().optional() },"
+				"server.tool(\"entwurf_callback\", ENTWURF_TOOL_GUIDANCE.entwurf_callback.descriptions.mcp, { target: z.string().optional() },"
 			],
 			"gate": ["bash", "run.sh", "check-entwurf-bridge-boot"],
 			"timeoutSeconds": 120,

package/scripts/mutants/capability-bundle-reach.json

@@ -0,0 +1,124 @@
+{
+	"schemaVersion": 1,
+	"lane": "capability-bundle-reach",
+	"mutants": [
+		{
+			"claim": "BUNDLE-REACH-GUIDANCE-CARRIER",
+			"title": "the private build appends one LF to the emitted guidance carrier: valid JSON and all decoded exports stay identical, but canonical raw-byte parity must fail before the reader import",
+			"subject": "scripts/build-bridge.sh",
+			"find": ["cp \"$GUIDANCE_SOURCE\" \"$REPO_DIR/mcp/entwurf-bridge/dist/ENTWURF.json\""],
+			"replace": [
+				"cp \"$GUIDANCE_SOURCE\" \"$REPO_DIR/mcp/entwurf-bridge/dist/ENTWURF.json\"",
+				"printf '\\n' >> \"$REPO_DIR/mcp/entwurf-bridge/dist/ENTWURF.json\""
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-GUIDANCE-CARRIER]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "BUNDLE-REACH-REJECT-HINTS",
+			"title": "the compiled reader exports one static reject hint with a trailing space while the carrier keeps canonical Root bytes and the version/tools exports stay identical, so only the compiled hint-family reach can fail",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["export const ENTWURF_REJECT_HINTS = guidance.rejectHints;"],
+			"replace": [
+				"export const ENTWURF_REJECT_HINTS: typeof guidance.rejectHints = Object.freeze({",
+				"\t...guidance.rejectHints,",
+				"\t\"native-push-paused\": `${guidance.rejectHints[\"native-push-paused\"]} `,",
+				"});"
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-REJECT-HINTS]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "BUNDLE-REACH-RESUME-REJECT-HINTS",
+			"title": "the compiled reader exports one static visible-resume reject hint with a trailing space while the carrier keeps canonical Root bytes and the version/tools/reject-hint exports stay identical, so only the compiled resume-hint-family reach can fail",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["export const ENTWURF_RESUME_REJECT_HINTS = guidance.resumeRejectHints;"],
+			"replace": [
+				"export const ENTWURF_RESUME_REJECT_HINTS: typeof guidance.resumeRejectHints = Object.freeze({",
+				"\t...guidance.resumeRejectHints,",
+				"\t\"launch-refused\": `${guidance.resumeRejectHints[\"launch-refused\"]} `,",
+				"});"
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-RESUME-REJECT-HINTS]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "BUNDLE-REACH-LAUNCH-REJECT-HINTS",
+			"title": "the compiled reader exports one fresh launch-stage hint with a trailing space while the carrier keeps canonical Root bytes and every earlier export stays identical, so only the compiled launch-family reach can fail",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["export const ENTWURF_FRESH_LAUNCH_REJECT_HINTS = guidance.freshLaunchRejectHints;"],
+			"replace": [
+				"export const ENTWURF_FRESH_LAUNCH_REJECT_HINTS: typeof guidance.freshLaunchRejectHints = Object.freeze({",
+				"\t...guidance.freshLaunchRejectHints,",
+				"\t\"runtime-missing\": `${guidance.freshLaunchRejectHints[\"runtime-missing\"]} `,",
+				"});"
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-LAUNCH-REJECT-HINTS]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "BUNDLE-REACH-DELIVERY-RESULT-CLAUSES",
+			"title": "the compiled reader exports one delivery-result clause with a trailing space while the carrier keeps canonical Root bytes and every earlier export stays identical, so only the compiled delivery-clause reach can fail",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["export const ENTWURF_DELIVERY_RESULT_CLAUSES = guidance.deliveryResultClauses;"],
+			"replace": [
+				"export const ENTWURF_DELIVERY_RESULT_CLAUSES: typeof guidance.deliveryResultClauses = Object.freeze({",
+				"\t...guidance.deliveryResultClauses,",
+				"\t\"dirty-lock\": `${guidance.deliveryResultClauses[\"dirty-lock\"]} `,",
+				"});"
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-DELIVERY-RESULT-CLAUSES]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "BUNDLE-REACH-SLOTTED-REJECT-HINTS",
+			"title": "the compiled reader exports one slotted reject-hint segment with a trailing space while the carrier keeps canonical Root bytes and every earlier export stays identical, so only the compiled slotted-family reach can fail",
+			"subject": "pi-extensions/lib/agent-guidance.ts",
+			"find": ["export const ENTWURF_SLOTTED_REJECT_HINTS = guidance.slottedRejectHints;"],
+			"replace": [
+				"export const ENTWURF_SLOTTED_REJECT_HINTS: typeof guidance.slottedRejectHints = Object.freeze({",
+				"\t\"record-less-socket\": Object.freeze({",
+				"\t\t...guidance.slottedRejectHints[\"record-less-socket\"],",
+				"\t\tafterFreshCutPrescription: `${guidance.slottedRejectHints[\"record-less-socket\"].afterFreshCutPrescription} `,",
+				"\t}),",
+				"});"
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-SLOTTED-REJECT-HINTS]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "BUNDLE-REACH-RECORD-LESS-SOCKET-CONSUMER",
+			"title": "the surface source returns a hand-kept copy of the record-less-socket hint, one byte off the Root segments, instead of composing them with the owner's fix command; the build carries it into the compiled surface while the carrier and every reader export stay canonical, so only the compiled consumer cell can fail",
+			"subject": "pi-extensions/lib/entwurf-v2-surface.ts",
+			"find": [
+				"\t\t\treturn `${hint.beforeFreshCutPrescription}${FRESH_CUT_PRESCRIPTION}${hint.afterFreshCutPrescription}`;"
+			],
+			"replace": [
+				"\t\t\treturn `a control socket exists at this garden id but NO meta-record claims it — the record is the sole address authority, so a bare socket is not an addressable citizen. If a pre-record-era resident owns that socket, restart it under the current runtime (session_start births its record); if the store predates the current generation, quiesce and archive it with ${FRESH_CUT_PRESCRIPTION}. A stale/forged  socket should be removed.`;"
+			],
+			"gate": ["bash", "run.sh", "check-capability-bundle-reach"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:BUNDLE-REACH-RECORD-LESS-SOCKET-CONSUMER]",
+			"signatureSource": "scripts/check-capability-bundle-reach.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		}
+	]
+}

package/scripts/mutants/claude-launch.json

@@ -0,0 +1,142 @@
+{
+	"schemaVersion": 1,
+	"lane": "claude-launch",
+	"mutants": [
+		{
+			"claim": "CLAUDELAUNCH-VERB-DROPPED",
+			"title": "without the shift the dispatcher verb stays in the forwarded argv and `claude` arrives at Claude Code as a prompt argument",
+			"subject": "run.sh",
+			"find": ["    shift || true\n    if [ -n \"${ENTWURF_CLAUDE_LAUNCH_ACTIVE:-}\" ]; then"],
+			"replace": ["    if [ -n \"${ENTWURF_CLAUDE_LAUNCH_ACTIVE:-}\" ]; then"],
+			"gate": ["bash", "run.sh", "check-claude-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CLAUDELAUNCH-VERB-DROPPED]",
+			"signatureSource": "scripts/check-claude-launch.ts"
+		},
+		{
+			"claim": "CLAUDELAUNCH-ARGV-UNTOUCHED",
+			"title": "a launcher that adds an argument of its own stops being a spelling and starts deciding the session (Rule 9)",
+			"subject": "run.sh",
+			"find": ["    exec \"$entwurf_claude_bin\" \"$@\""],
+			"replace": ["    exec \"$entwurf_claude_bin\" --verbose \"$@\""],
+			"gate": ["bash", "run.sh", "check-claude-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CLAUDELAUNCH-ARGV-UNTOUCHED]",
+			"signatureSource": "scripts/check-claude-launch.ts"
+		},
+		{
+			"claim": "CLAUDELAUNCH-VENDOR-HELP",
+			"title": "the help preflight intercepts `entwurf claude --help`, so Claude Code's own help is replaced by an Entwurf page",
+			"subject": "run.sh",
+			"find": ["[ \"$cmd\" != claude ] && "],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-claude-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CLAUDELAUNCH-VENDOR-HELP]",
+			"signatureSource": "scripts/check-claude-launch.ts"
+		},
+		{
+			"claim": "CLAUDELAUNCH-CWD-KEPT",
+			"title": "a launch that moves to the package directory opens Claude Code in the wrong project and session scope",
+			"subject": "run.sh",
+			"find": ["    exec \"$entwurf_claude_bin\" \"$@\""],
+			"replace": ["    cd \"$REPO_DIR\"; exec \"$entwurf_claude_bin\" \"$@\""],
+			"gate": ["bash", "run.sh", "check-claude-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CLAUDELAUNCH-CWD-KEPT]",
+			"signatureSource": "scripts/check-claude-launch.ts"
+		},
+		{
+			"claim": "CLAUDELAUNCH-SENTINEL-EXPORTED",
+			"title": "an unexported sentinel is invisible to a PATH `claude` that shells back here, so the wrapper loop spins",
+			"subject": "run.sh",
+			"find": ["    export ENTWURF_CLAUDE_LAUNCH_ACTIVE=1"],
+			"replace": ["    ENTWURF_CLAUDE_LAUNCH_ACTIVE=1"],
+			"gate": ["bash", "run.sh", "check-claude-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CLAUDELAUNCH-SENTINEL-EXPORTED]",
+			"signatureSource": "scripts/check-claude-launch.ts"
+		},
+		{
+			"claim": "CLAUDELAUNCH-CARRIERS-SCRUBBED",
+			"title": "clearing only half of an inherited pi identity pair leaves another citizen's carrier for a partial reader",
+			"subject": "run.sh",
+			"find": ["    unset PI_SESSION_ID PI_AGENT_ID"],
+			"replace": ["    unset PI_AGENT_ID"],
+			"gate": ["bash", "run.sh", "check-claude-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CLAUDELAUNCH-CARRIERS-SCRUBBED]",
+			"signatureSource": "scripts/check-claude-launch.ts"
+		},
+		{
+			"claim": "CLAUDELAUNCH-ENV-EXACT",
+			"title": "a launcher that sets a variable of its own decides something Claude Code owns",
+			"subject": "run.sh",
+			"find": ["    export ENTWURF_CLAUDE_LAUNCH_ACTIVE=1"],
+			"replace": ["    export ENTWURF_CLAUDE_LAUNCH_ACTIVE=1 ENTWURF_CLAUDE_EXTRA=1"],
+			"gate": ["bash", "run.sh", "check-claude-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CLAUDELAUNCH-ENV-EXACT]",
+			"signatureSource": "scripts/check-claude-launch.ts"
+		},
+		{
+			"claim": "CLAUDELAUNCH-EXEC-KEEPS-PID",
+			"title": "without exec run.sh stays as a parent between Claude Code and the terminal, owning nothing",
+			"subject": "run.sh",
+			"find": ["    exec \"$entwurf_claude_bin\" \"$@\""],
+			"replace": ["    \"$entwurf_claude_bin\" \"$@\""],
+			"gate": ["bash", "run.sh", "check-claude-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CLAUDELAUNCH-EXEC-KEEPS-PID]",
+			"signatureSource": "scripts/check-claude-launch.ts"
+		},
+		{
+			"claim": "CLAUDELAUNCH-VENDOR-ABSENT",
+			"title": "with the absent-vendor refusal gone an empty PATH hit falls through to a refusal that names the wrong cause",
+			"subject": "run.sh",
+			"find": ["    if [ -z \"$entwurf_claude_bin\" ]; then"],
+			"replace": ["    if false; then"],
+			"gate": ["bash", "run.sh", "check-claude-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CLAUDELAUNCH-VENDOR-ABSENT]",
+			"signatureSource": "scripts/check-claude-launch.ts"
+		},
+		{
+			"claim": "CLAUDELAUNCH-NOT-REGULAR",
+			"title": "a non-regular PATH hit is handed to exec, which fails with the shell's own error instead of a named refusal",
+			"subject": "run.sh",
+			"find": ["    if [ ! -f \"$entwurf_claude_bin\" ] || [ ! -x \"$entwurf_claude_bin\" ]; then"],
+			"replace": ["    if false; then"],
+			"gate": ["bash", "run.sh", "check-claude-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CLAUDELAUNCH-NOT-REGULAR]",
+			"signatureSource": "scripts/check-claude-launch.ts"
+		},
+		{
+			"claim": "CLAUDELAUNCH-RECURSION-FENCE",
+			"title": "with the sentinel fence removed a PATH `claude` that shells back here spins forever behind a hung terminal",
+			"subject": "run.sh",
+			"find": [
+				"    if [ -n \"${ENTWURF_CLAUDE_LAUNCH_ACTIVE:-}\" ]; then\n      echo \"entwurf: recursive managed launch detected (ENTWURF_CLAUDE_LAUNCH_ACTIVE is already set).\" >&2"
+			],
+			"replace": [
+				"    if false; then\n      echo \"entwurf: recursive managed launch detected (ENTWURF_CLAUDE_LAUNCH_ACTIVE is already set).\" >&2"
+			],
+			"gate": ["bash", "run.sh", "check-claude-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CLAUDELAUNCH-RECURSION-FENCE]",
+			"signatureSource": "scripts/check-claude-launch.ts"
+		},
+		{
+			"claim": "CLAUDELAUNCH-SELF-EXEC-FENCE",
+			"title": "with the resolved-path fence removed a PATH `claude` that is run.sh re-enters with the operator's argv as an entwurf verb",
+			"subject": "run.sh",
+			"find": ["    if [ \"$entwurf_claude_real\" = \"$REPO_DIR/run.sh\" ]; then"],
+			"replace": ["    if false; then"],
+			"gate": ["bash", "run.sh", "check-claude-launch"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:CLAUDELAUNCH-SELF-EXEC-FENCE]",
+			"signatureSource": "scripts/check-claude-launch.ts"
+		}
+	]
+}