@junghanacs/entwurf 0.41.2 → 0.50.0

package/scripts/mutants/cli-help-source.json

@@ -0,0 +1,420 @@
+{
+	"schemaVersion": 1,
+	"lane": "cli-help-source",
+	"mutants": [
+		{
+			"claim": "CLI-HELP-ALL-BYTES",
+			"title": "the renderer drops the blank line before Notes, so `entwurf help all` no longer prints the usage it replaced",
+			"subject": "scripts/cli-help.mjs",
+			"find": ["out.push(\"\", line(notes.title, \"usage.notes.title\"));"],
+			"replace": ["out.push(line(notes.title, \"usage.notes.title\"));"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-ALL-BYTES]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-MODULE-RELATIVE",
+			"title": "the renderer reads the help source from the caller's cwd, so whatever ENTWURF-CLI.json sits where `entwurf` was run describes the CLI",
+			"subject": "scripts/cli-help.mjs",
+			"find": ["const SOURCE = new URL(\"../ENTWURF-CLI.json\", import.meta.url);"],
+			"replace": ["const SOURCE = `${process.cwd()}/ENTWURF-CLI.json`;"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-MODULE-RELATIVE]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-ONLY-RENDERER",
+			"title": "usage() asks git for the checkout state before rendering, so reading the help starts a tool the description never needed",
+			"subject": "run.sh",
+			"find": ["  node \"$REPO_DIR/scripts/cli-help.mjs\"\n}"],
+			"replace": [
+				"  git -C \"$REPO_DIR\" rev-parse HEAD >/dev/null 2>&1 || true\n  node \"$REPO_DIR/scripts/cli-help.mjs\"\n}"
+			],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-ONLY-RENDERER]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-FAIL-LOUD",
+			"title": "usage() swallows the renderer's failure, so a missing or broken help source answers `entwurf --help` with exit 0 and an empty page",
+			"subject": "run.sh",
+			"find": ["  node \"$REPO_DIR/scripts/cli-help.mjs\"\n}"],
+			"replace": ["  node \"$REPO_DIR/scripts/cli-help.mjs\" || true\n}"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-FAIL-LOUD]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-STRICT-FIELDS",
+			"title": "the renderer stops checking key sets, so an entry can carry a field nobody reviewed — a handler, an argv, a command to run — and still render",
+			"subject": "scripts/cli-help.mjs",
+			"find": ["\tif (got.length !== want.length || got.some((k, i) => k !== want[i])) {"],
+			"replace": ["\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-STRICT-FIELDS]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-UNIQUE",
+			"title": "the renderer stops refusing a command described twice, so two descriptions of one command both print and neither owns it",
+			"subject": "scripts/cli-help.mjs",
+			"find": ["\t\tif (entries.has(name)) fail("],
+			"replace": ["\t\tif (false) fail("],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-UNIQUE]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-CANONICAL",
+			"title": "a duplicated JSON property rides into the committed help source; JSON.parse keeps the later value and every runtime check stays green",
+			"subject": "ENTWURF-CLI.json",
+			"find": ["\t\"schemaVersion\": 4,"],
+			"replace": ["\t\"schemaVersion\": 4,\n\t\"schemaVersion\": 4,"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-CANONICAL]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-NO-ORPHAN",
+			"title": "the help describes a command that no dispatch arm or gate function provides — `entwurf --help` advertises something that does not exist",
+			"subject": "ENTWURF-CLI.json",
+			"find": ["\t\t\t\t\t\"synopsis\": \"menu\","],
+			"replace": ["\t\t\t\t\t\"synopsis\": \"menu-retired\","],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-NO-ORPHAN]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-DEBT-EXACT",
+			"title": "a new dispatch arm lands with no description, and the help silently stops covering a command run.sh answers",
+			"subject": "run.sh",
+			"find": ["  -h|--help|help|\"\")"],
+			"replace": ["  zz-undescribed)\n    :\n    ;;\n  -h|--help|help|\"\")"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-DEBT-EXACT]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-DISPATCH-REVIEWED",
+			"title": "the dispatch changes after its labels were reviewed, and the help coverage keeps trusting labels nobody re-read",
+			"subject": "run.sh",
+			"find": ["  -h|--help|help|\"\")"],
+			"replace": ["  # an unreviewed edit inside the dispatch\n  -h|--help|help|\"\")"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-DISPATCH-REVIEWED]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-REAL-OWNER",
+			"title": "the gate inventory goes back to reading definition-shaped text, so a gate deleted from run.sh but left in a heredoc still counts as a command and keeps its description",
+			"subject": "scripts/check-install-surface.ts",
+			"find": ["\t\t\tconst names = new Set<string>();"],
+			"replace": [
+				"\t\t\tconst names = new Set<string>(\n\t\t\t\t[...text.matchAll(/^((?:check|smoke)_[a-z0-9_]+)\\(\\)\\s*\\{/gm)].map((m) => (m[1] as string).replace(/_/g, \"-\")),\n\t\t\t);"
+			],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-REAL-OWNER]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-AMENDMENTS",
+			"title": "the tool count goes back to eight, a number the bridge has not shipped since entwurf_callback joined",
+			"subject": "ENTWURF-CLI.json",
+			"find": ["EXACTLY the nine shipped garden verbs"],
+			"replace": ["EXACTLY the eight shipped garden verbs"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-AMENDMENTS]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-PREFLIGHT-PLACEMENT",
+			"title": "a heredoc lands between the help preflight and the dispatch case, where the text pin no longer watches",
+			"subject": "run.sh",
+			"find": ["  exec node \"$REPO_DIR/scripts/cli-help.mjs\" --command \"$cmd\"\nfi\n"],
+			"replace": ["  exec node \"$REPO_DIR/scripts/cli-help.mjs\" --command \"$cmd\"\nfi\n: <<'NOTE'\nNOTE\n"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-PREFLIGHT-PLACEMENT]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-COMMAND",
+			"title": "`<command> --help` prints the whole root page instead of that command's own help",
+			"subject": "run.sh",
+			"find": ["  exec node \"$REPO_DIR/scripts/cli-help.mjs\" --command \"$cmd\""],
+			"replace": ["  exec node \"$REPO_DIR/scripts/cli-help.mjs\""],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-COMMAND]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-NO-DISPATCH",
+			"title": "the preflight stops catching `<command> --help`, so asking an argv-ignoring command for help runs it",
+			"subject": "run.sh",
+			"find": ["elif [ \"$#\" -ge 2 ] && { [ \"$2\" = -h ] || [ \"$2\" = --help ]; } \\"],
+			"replace": ["elif false \\"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-NO-DISPATCH]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-FORMS",
+			"title": "`entwurf help <command>` looks up the word help instead of the command it names",
+			"subject": "run.sh",
+			"find": ["--name \"$2\""],
+			"replace": ["--name \"$cmd\""],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-FORMS]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-EXTRA-REFUSED",
+			"title": "a help flag followed by more argv is answered as help, guessing past what was typed",
+			"subject": "run.sh",
+			"find": [
+				"  if [ \"$#\" -gt 2 ]; then\n    echo 'entwurf: a help request takes nothing after -h/--help; nothing was run' >&2"
+			],
+			"replace": [
+				"  if false; then\n    echo 'entwurf: a help request takes nothing after -h/--help; nothing was run' >&2"
+			],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-EXTRA-REFUSED]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-ALIAS-REFUSED",
+			"title": "`--help <command>` stops being refused and falls through to the dispatch",
+			"subject": "run.sh",
+			"find": ["elif { [ \"$cmd\" = -h ] || [ \"$cmd\" = --help ]; } && [ \"$#\" -ge 2 ]; then"],
+			"replace": ["elif false; then"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-ALIAS-REFUSED]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-VENDOR-PASSTHROUGH",
+			"title": "the preflight intercepts `entwurf pi --help`, so pi's own help is replaced by a refusal",
+			"subject": "run.sh",
+			"find": ["[ \"$cmd\" != pi ] && "],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-VENDOR-PASSTHROUGH]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-NOT-HELP-POSITION",
+			"title": "the preflight treats --help anywhere in argv as a help request, rewriting commands whose own argv carries it",
+			"subject": "run.sh",
+			"find": ["{ [ \"$2\" = -h ] || [ \"$2\" = --help ]; }"],
+			"replace": ["[[ \" ${*:2} \" == *\" --help \"* ]]"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-NOT-HELP-POSITION]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-ONE-LINE",
+			"title": "an unknown name is printed raw, so a newline in it splits the one-line refusal",
+			"subject": "scripts/cli-help.mjs",
+			"find": ["no help for ${JSON.stringify(wanted)}"],
+			"replace": ["no help for ${wanted}"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-ONE-LINE]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-COMMAND-TRACE",
+			"title": "a command help asks git for checkout state before answering, starting a tool the description never needed",
+			"subject": "run.sh",
+			"find": ["  exec node \"$REPO_DIR/scripts/cli-help.mjs\" --command \"$cmd\""],
+			"replace": [
+				"  git -C \"$REPO_DIR\" rev-parse HEAD >/dev/null 2>&1 || true\n  exec node \"$REPO_DIR/scripts/cli-help.mjs\" --command \"$cmd\""
+			],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-COMMAND-TRACE]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-DETAILS-ORACLE",
+			"title": "fresh-cut's longer help is reworded in the data and silently drifts from the text the verb shipped",
+			"subject": "ENTWURF-CLI.json",
+			"find": ["  live dirs. No migration, no restore: the archive is forensic bytes only."],
+			"replace": ["  live dirs. No migration, no restore: the archive is forensic only."],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-DETAILS-ORACLE]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-EPIPE-QUIET",
+			"title": "a reader that stops early (`entwurf --help | head`) gets a node EPIPE stack trace on stderr",
+			"subject": "scripts/cli-help.mjs",
+			"find": ["\tif (err.code === \"EPIPE\") process.exit(0);"],
+			"replace": ["\tif (false) process.exit(0);"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-EPIPE-QUIET]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-METADATA-EXIT",
+			"title": "a broken help source exits 2, the same status as a refused help request, so a caller can no longer tell a damaged install from a typo",
+			"subject": "scripts/cli-help.mjs",
+			"find": ["\tprocess.exit(1);"],
+			"replace": ["\tprocess.exit(2);"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-METADATA-EXIT]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-EPIPE-EXIT",
+			"title": "the early-closed pipe is reported as a failure exit, so `set -o pipefail; entwurf --help | head` fails a script that only wanted the first lines",
+			"subject": "scripts/cli-help.mjs",
+			"find": ["\tif (err.code === \"EPIPE\") process.exit(0);"],
+			"replace": ["\tif (err.code === \"EPIPE\") process.exit(1);"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-EPIPE-EXIT]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "PRUNE-HELP-POINTER",
+			"title": "the prune leaf's --help and unknown-flag refusal point at another command's description, so an operator who followed them reads help for the wrong verb (#153)",
+			"subject": "scripts/meta-bridge-prune.ts",
+			"find": [
+				"\t\t\"meta-bridge-prune: see `entwurf help meta-bridge-prune` (from that checkout's root: `./run.sh help meta-bridge-prune`)\","
+			],
+			"replace": [
+				"\t\t\"meta-bridge-prune: see `entwurf help meta-bridge-fresh-cut` (from that checkout's root: `./run.sh help meta-bridge-fresh-cut`)\","
+			],
+			"gate": ["bash", "run.sh", "smoke-meta-prune"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:PRUNE-HELP-POINTER]",
+			"signatureSource": "scripts/smoke-meta-prune.sh"
+		},
+		{
+			"claim": "CLI-HELP-PI-DESCRIBED",
+			"title": "pi's description drops the flag the launch adds, so `entwurf help pi` no longer says what the arm execs",
+			"subject": "ENTWURF-CLI.json",
+			"find": [
+				"\t\t\t\t\t\"summary\": \"#118: the MANAGED pi launch. exec()s the pi that `type -P` finds on PATH (a file, never a shell function or alias) in THIS terminal, with --entwurf-control added ahead of your argv, which passes through untouched. Refuses by name when ENTWURF_PI_LAUNCH_ACTIVE is non-empty (it exports that to the pi it starts), when no pi is on PATH (it launches the pi coding agent, it does not install one), or when that path is not an executable regular file\""
+			],
+			"replace": [
+				"\t\t\t\t\t\"summary\": \"#118: the MANAGED pi launch. exec()s the pi that `type -P` finds on PATH (a file, never a shell function or alias) in THIS terminal, with your argv, which passes through untouched. Refuses by name when ENTWURF_PI_LAUNCH_ACTIVE is non-empty (it exports that to the pi it starts), when no pi is on PATH (it launches the pi coding agent, it does not install one), or when that path is not an executable regular file\""
+			],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-PI-DESCRIBED]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-ROOT-COMPACT",
+			"title": "the root page prints the whole catalog again, so a bare `entwurf` buries the few commands an operator needs under every gate",
+			"subject": "scripts/cli-help.mjs",
+			"find": ["\tprocess.stdout.write(`${(all ? out : compact).join(\"\\n\")}\\n`);"],
+			"replace": ["\tprocess.stdout.write(`${out.join(\"\\n\")}\\n`);"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-ROOT-COMPACT]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-ALL-ROUTE",
+			"title": "`entwurf help all` no longer reaches the catalog: it is read as help for a command named `all` and refused, so the full list has no door",
+			"subject": "run.sh",
+			"find": ["if [ \"$cmd\" = help ] && [ \"$#\" -eq 2 ] && [ \"$2\" = all ]; then"],
+			"replace": ["if false; then"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-ALL-ROUTE]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-ROOT-NAMES-REAL",
+			"title": "the renderer stops checking that an example names a described command, so the root page advertises a command that does not exist",
+			"subject": "scripts/cli-help.mjs",
+			"find": ["\tif (!helpItself && !entries.has(named))"],
+			"replace": ["\tif (false)"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-ROOT-NAMES-REAL]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-TOPIC-BYTES",
+			"title": "a guide topic loses the blank line under its title, so `entwurf help team` no longer prints the reviewed page",
+			"subject": "scripts/cli-help.mjs",
+			"find": ["\t\tprocess.stdout.write(`${[topic.title, \"\", ...topic.lines].join(\"\\n\")}\\n`);"],
+			"replace": ["\t\tprocess.stdout.write(`${[topic.title, ...topic.lines].join(\"\\n\")}\\n`);"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-TOPIC-BYTES]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-TOPIC-ROUTE",
+			"title": "`entwurf help <name>` asks the renderer in the commands-only mode, so the guides have no door and `help team` is refused",
+			"subject": "run.sh",
+			"find": ["--name \"$2\""],
+			"replace": ["--command \"$2\""],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-TOPIC-ROUTE]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-TOPIC-NOT-COMMAND",
+			"title": "a guide topic answers `<topic> --help` as if it were a command, so asking about running `team` prints a page instead of the refusal",
+			"subject": "scripts/cli-help.mjs",
+			"find": ["const topicsToo = argv[0] === \"--name\";"],
+			"replace": ["const topicsToo = true;"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-TOPIC-NOT-COMMAND]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-TOPIC-DISJOINT",
+			"title": "the renderer stops checking topic names, so a guide can take a command's name, `all` or another guide's and one word answers with two pages",
+			"subject": "scripts/cli-help.mjs",
+			"find": ["\tif (name === \"all\" || entries.has(name) || topics.has(name))"],
+			"replace": ["\tif (false)"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-TOPIC-DISJOINT]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "CLI-HELP-TOPIC-SHIPPED",
+			"title": "team.json.example leaves the package files, so `entwurf help team` sends an installed reader to a file the install does not have",
+			"subject": "package.json",
+			"find": ["\t\t\"ENTWURF-CLI.json\",", "\t\t\"team.json.example\","],
+			"replace": ["\t\t\"ENTWURF-CLI.json\","],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:CLI-HELP-TOPIC-SHIPPED]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		}
+	]
+}

package/scripts/mutants/control-send-receipt.json

@@ -153,7 +153,7 @@
 			"title": "the dirty-lock line goes back to `DELIVERED (<route>)` for all three shapes that reach it — a refusal that delivered nothing, a message lying in a volatile queue, and a durable mailbox file all read as one word, at the exact moment an operator is deciding BY HAND whether anything still needs sending",
 			"subject": "pi-extensions/lib/entwurf-v2-surface.ts",
 			"find": [
-				"\t\t\t\t\t\t? `rejected${result.finalizedRejectReason ? ` (${result.finalizedRejectReason})` : \"\"} — the receiver refused it; nothing was accepted`"
+				"\t\t\t\t\t\t? `rejected${result.finalizedRejectReason ? ` (${result.finalizedRejectReason})` : \"\"} — ${ENTWURF_DELIVERY_RESULT_CLAUSES[\"finalized-rejected\"]}`"
 			],
 			"replace": ["\t\t\t\t\t\t? `DELIVERED (${result.finalizedOutcome})`"],
 			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
@@ -161,6 +161,19 @@
 			"signature": "[QK:SEND-DIRTY-LOCK-NAMES-ACCEPTANCE]",
 			"signatureSource": "scripts/check-entwurf-v2-surface.ts"
 		},
+		{
+			"claim": "V2SURF-DELIVERY-RESULT-CLAUSES-FROM-ROOT",
+			"title": "the dirty-lock receipt reads a hand-kept copy of its clause, one byte off the Root text, instead of the Root lookup: DIRTY and do NOT retry still read on every shape, so only the whole-line comparison against Root can see the drift",
+			"subject": "pi-extensions/lib/entwurf-v2-surface.ts",
+			"find": ["\t\t\t\t\t\t`${ENTWURF_DELIVERY_RESULT_CLAUSES[\"dirty-lock\"]}\\n  error: ${result.error}`,"],
+			"replace": [
+				"\t\t\t\t\t\t`the lock is DIRTY (release failed) — do NOT retry automatically. Inspect the reported acceptance and have the operator resolve the lock before  deciding whether to resend.\\n  error: ${result.error}`,"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:V2SURF-DELIVERY-RESULT-CLAUSES-FROM-ROOT]",
+			"signatureSource": "scripts/check-entwurf-v2-surface.ts"
+		},
 		{
 			"claim": "VITEST-TEST-DIR-ON-THE-FLOOR",
 			"title": "the pi queue oracle's public coordinate is dropped from `check:vitest`, so the file that proves every claim the receipt makes about a receiver's queues is green only when somebody runs `pnpm test` by hand — the discovery door deliberately does not select `test/**`, so nothing else would notice",
@@ -225,9 +238,13 @@
 		{
 			"claim": "SEND-OUTCOME-LIST-NAMES-EVERY-RAIL",
 			"title": "the caller-facing outcome list drops the native-push rail, so a caller reading the one blurb it reads before dispatching is told the control rail's vocabulary covers a rail that answers with a direct injection instead",
-			"subject": "mcp/entwurf-bridge/src/index.ts",
-			"find": ["\t\t\"native-push INJECTION, a rejection, or lock-dirty. EXISTING targets only; discover with \" +"],
-			"replace": ["\t\t\"a rejection, or lock-dirty. EXISTING targets only; discover with \" +"],
+			"subject": "ENTWURF.json",
+			"find": [
+				"native-push INJECTION, a rejection, or lock-dirty. This receipt is not the colleague's reply or evidence of reading. EXISTING targets only; discover with "
+			],
+			"replace": [
+				"a rejection, or lock-dirty. This receipt is not the colleague's reply or evidence of reading. EXISTING targets only; discover with "
+			],
 			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:SEND-OUTCOME-LIST-NAMES-EVERY-RAIL]",

package/scripts/mutants/dev-gate-dispatch.json

@@ -0,0 +1,109 @@
+{
+	"schemaVersion": 1,
+	"lane": "dev-gate-dispatch",
+	"mutants": [
+		{
+			"claim": "BY-NAME-GATE-PREFIX",
+			"title": "the default arm drops its gate-prefix guard, so every function run.sh defines answers as a command by name — `entwurf usage` runs usage at rc 0, and the install writers are one spelling away",
+			"subject": "run.sh",
+			"find": ["    if [[ $cmd =~ ^(check|smoke)-[a-z0-9-]+$ ]] \\"],
+			"replace": ["    if true \\"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:BY-NAME-GATE-PREFIX]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "BY-NAME-GATE-DEFINED",
+			"title": "the default arm stops asking whether the gate function exists, so a misspelled gate dies as a bash command-not-found (rc 127) instead of the Unknown command it always was",
+			"subject": "run.sh",
+			"find": [
+				"      && gate_decl=$(shopt -s extdebug; declare -F \"$gate_fn\") \\\n      && [[ ${gate_decl#\"$gate_fn \"} =~ ^[1-9][0-9]*\\ (.*)$ ]] \\\n      && [ \"${BASH_REMATCH[1]}\" = \"${BASH_SOURCE[0]}\" ]; then"
+			],
+			"replace": ["      ; then"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:BY-NAME-GATE-DEFINED]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "BY-NAME-GATE-DEFINED-HERE",
+			"title": "the default arm admits any function bash can see, so an exported BASH_FUNC_check_* in the caller's environment becomes an entwurf command that run.sh never defined",
+			"subject": "run.sh",
+			"find": [
+				"      && [[ ${gate_decl#\"$gate_fn \"} =~ ^[1-9][0-9]*\\ (.*)$ ]] \\\n      && [ \"${BASH_REMATCH[1]}\" = \"${BASH_SOURCE[0]}\" ]; then"
+			],
+			"replace": ["      ; then"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:BY-NAME-GATE-DEFINED-HERE]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "BY-NAME-GATE-RUNS",
+			"title": "the admitted gate is never called: every by-name gate reports success with no output, and the whole dev floor goes green without running",
+			"subject": "run.sh",
+			"find": ["      \"$gate_fn\""],
+			"replace": ["      :"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:BY-NAME-GATE-RUNS]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "BY-NAME-GATE-NO-ARGV",
+			"title": "the by-name gate is handed run.sh's whole argv, its own name included, where the explicit arm it replaced called it with none",
+			"subject": "run.sh",
+			"find": ["      \"$gate_fn\""],
+			"replace": ["      \"$gate_fn\" \"$@\""],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:BY-NAME-GATE-NO-ARGV]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "BY-NAME-GATE-STOPS",
+			"title": "the gate is called under `|| exit $?`, which reads like status propagation but switches errexit off inside it: a gate runs on past its first failure and returns the status of whatever ran last",
+			"subject": "run.sh",
+			"find": ["      \"$gate_fn\""],
+			"replace": ["      \"$gate_fn\" || exit $?"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:BY-NAME-GATE-STOPS]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "DEV-GATE-BY-NAME-NOT-EMITTED",
+			"title": "a gate reached only by name is added to the bridge build include, and a case-label reader no longer sees it: the tarball ships a dev gate leaf while S4 stays green",
+			"subject": "mcp/entwurf-bridge/tsconfig.build.json",
+			"find": ["\t\t\"../../scripts/peer-facts.ts\","],
+			"replace": ["\t\t\"../../scripts/peer-facts.ts\",\n\t\t\"../../scripts/check-peer-facts.ts\","],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:DEV-GATE-BY-NAME-NOT-EMITTED]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "DEV-GATE-BY-NAME-READ",
+			"title": "the by-name reader narrows to check_ functions, so every smoke gate leaves S4's view and the bloat check passes on the rows it still sees",
+			"subject": "scripts/check-install-surface.ts",
+			"find": ["\tif (/^(?:check|smoke)_[a-z0-9_]+$/.test(fn) && !targets.has(cmd)) byNameGates.set(cmd, ts);"],
+			"replace": ["\tif (/^check_[a-z0-9_]+$/.test(fn) && !targets.has(cmd)) byNameGates.set(cmd, ts);"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:DEV-GATE-BY-NAME-READ]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		},
+		{
+			"claim": "DEV-GATE-BY-NAME-LEAVES",
+			"title": "the by-name reader keeps every gate name but drops the leaves they run, so the bloat check passes on empty rows and a gate leaf can ride into the tarball",
+			"subject": "scripts/check-install-surface.ts",
+			"find": ["\tif (/^(?:check|smoke)_[a-z0-9_]+$/.test(fn) && !targets.has(cmd)) byNameGates.set(cmd, ts);"],
+			"replace": ["\tif (/^(?:check|smoke)_[a-z0-9_]+$/.test(fn) && !targets.has(cmd)) byNameGates.set(cmd, []);"],
+			"gate": ["bash", "run.sh", "check-install-surface"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:DEV-GATE-BY-NAME-LEAVES]",
+			"signatureSource": "scripts/check-install-surface.ts"
+		}
+	]
+}

package/scripts/mutants/fresh-call-dispatch.json

@@ -67,8 +67,8 @@
 			"claim": "FCD-ONE-NONCE",
 			"title": "the rail mints its own second nonce, so the sibling calls back with a tag the caller never recorded",
 			"subject": "pi-extensions/lib/fresh-call-dispatch.ts",
-			"find": ["\t\treturn { rail: \"herdr\", result: await herdrFreshCall(request, run, env, nonce) };"],
-			"replace": ["\t\treturn { rail: \"herdr\", result: await herdrFreshCall(request, run, env, mintNonce()) };"],
+			"find": ["\t\treturn { rail: \"herdr\", result: await herdrFreshCall(herdrRequest, run, env, nonce) };"],
+			"replace": ["\t\treturn { rail: \"herdr\", result: await herdrFreshCall(herdrRequest, run, env, mintNonce()) };"],
 			"gate": ["bash", "run.sh", "check-fresh-call-dispatch"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:FCD-ONE-NONCE]",
@@ -186,6 +186,42 @@
 			"timeoutSeconds": 120,
 			"signature": "[QK:FCD-PROVIDER-OTHER-BACKENDS-UNJUDGED]",
 			"signatureSource": "pi-extensions/lib/fresh-call-dispatch.test.ts"
+		},
+		{
+			"claim": "FCD-RESUME-RAIL-SHARED",
+			"title": "the resume entry point reads the herdr marker loosely instead of through the shared exact predicate, so a process carrying HERDR_ENV=0 reopens its resume through a herdr launch",
+			"subject": "pi-extensions/lib/fresh-call-dispatch.ts",
+			"find": ["\tif (selectFreshCallRail(env) !== \"herdr\") return tmuxLaunch(input);"],
+			"replace": ["\tif (env.HERDR_ENV === undefined) return tmuxLaunch(input);"],
+			"gate": ["bash", "run.sh", "check-fresh-call-dispatch"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FCD-RESUME-RAIL-SHARED]",
+			"signatureSource": "scripts/check-fresh-call-dispatch.ts"
+		},
+		{
+			"claim": "FCD-HERDR-PI-DURABLE-LAYOUT",
+			"title": "the root stops telling the herdr layout branch that the caller is a record-backed Codex citizen, so a Codex caller with no record cwd silently opens pi-durable in the bridge process's own directory",
+			"subject": "pi-extensions/lib/fresh-call-dispatch.ts",
+			"find": ["\t\t\tcallerIsCodex: request.callerNativeSessionId !== undefined,"],
+			"replace": ["\t\t\tcallerIsCodex: false,"],
+			"gate": ["bash", "run.sh", "check-fresh-call-dispatch"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FCD-HERDR-PI-DURABLE-LAYOUT]",
+			"signatureSource": "scripts/check-fresh-call-dispatch.ts"
+		},
+		{
+			"claim": "FCD-HERDR-NO-THREAD-ID",
+			"title": "the herdr request carries the Codex thread id across the root again, so a tmux seat input reaches a rail that has no pane title to anchor it to and can start treating it as placement",
+			"subject": "pi-extensions/lib/fresh-call-dispatch.ts",
+			"find": ["\t\t\tcallerIsCodex: request.callerNativeSessionId !== undefined,"],
+			"replace": [
+				"\t\t\tcallerIsCodex: request.callerNativeSessionId !== undefined,",
+				"\t\t\tcallerNativeSessionId: request.callerNativeSessionId,"
+			],
+			"gate": ["bash", "run.sh", "check-fresh-call-dispatch"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FCD-HERDR-NO-THREAD-ID]",
+			"signatureSource": "scripts/check-fresh-call-dispatch.ts"
 		}
 	]
 }