@junghanacs/entwurf 0.41.2 → 0.50.0

package/scripts/mutants/herdr-resume-call.json

@@ -0,0 +1,288 @@
+{
+	"schemaVersion": 1,
+	"lane": "herdr-resume-call",
+	"mutants": [
+		{
+			"claim": "HRESUME-CONTEXT-NO-FALLBACK",
+			"title": "the herdr context refusal is skipped, so a process with no herdr binary or no caller pane goes on to build a runner from coordinates it does not have",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["\tif (!context.ok) {"],
+			"replace": ["\tif (context.ok === undefined) {"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-CONTEXT-NO-FALLBACK]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-PI-ONLY",
+			"title": "the pi-only refusal narrows to codex, so a Claude Code resume inside herdr opens a tab whose return no observation can ever join",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["\tif (params.backend !== \"pi\") return { ok: false, reason: \"herdr-resume-backend-unsupported\" };"],
+			"replace": [
+				"\tif (params.backend === \"codex\") return { ok: false, reason: \"herdr-resume-backend-unsupported\" };"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-PI-ONLY]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-ARGV-CONTROL-REFUSED",
+			"title": "the pre-create control-character check is dropped, so herdr refuses the argv only after the tab already exists",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": [
+				"\tif (params.runtimeArgs.some(containsControlChar)) return { ok: false, reason: \"herdr-argv-control-character\" };"
+			],
+			"replace": ["\tif (false) return { ok: false, reason: \"herdr-argv-control-character\" };"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-ARGV-CONTROL-REFUSED]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-CALLER-WORKSPACE",
+			"title": "a caller-pane reply about another pane is believed, so the citizen reopens in a workspace the caller never named",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": [
+				"\tif (callerPane.paneId !== context.context.callerPaneId) return { ok: false, reason: \"herdr-caller-pane-drift\" };"
+			],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-CALLER-WORKSPACE]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-TAB-ARGV-NO-CALLBACK",
+			"title": "the resume tab stops emptying the inherited PI_SESSION_ID, so the reopened pi can attach as whatever citizen the herdr server's environment names",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["\t\t\"--env\",", "\t\t\"PI_SESSION_ID=\","],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-TAB-ARGV-NO-CALLBACK]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-START-ARGV-IS-RECORD",
+			"title": "pi is started with no runtime argv, so a bare pi opens in the tab instead of the record's transcript, provider and model",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["\t\t\tbackendArgs: params.runtimeArgs,"],
+			"replace": ["\t\t\tbackendArgs: [],"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-START-ARGV-IS-RECORD]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-SUCCESS-RECEIPT",
+			"title": "the receipt names a freshly minted agent instead of the one herdr was asked to start, so the operator is pointed at an agent that does not exist",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": [
+				"\t\treceipt: { ...created, requestedKind: HERDR_AGENT_KIND.pi, cwd: params.cwd, herdrAgentName: agentName },"
+			],
+			"replace": [
+				"\t\treceipt: { ...created, requestedKind: HERDR_AGENT_KIND.pi, cwd: params.cwd, herdrAgentName: mintHerdrResumeAgentName() },"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-SUCCESS-RECEIPT]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-POST-CREATE-RECOVERY",
+			"title": "a tab create our own runner cut off is reported as declined by herdr, telling the operator nothing exists when a tab may be on screen",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["\t\t\trecovery: code === undefined ? { outcome: \"unknown\" } : { outcome: \"none\" },"],
+			"replace": ["\t\t\trecovery: { outcome: \"none\" },"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-POST-CREATE-RECOVERY]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-CREATED-WORKSPACE",
+			"title": "the created tab's workspace is no longer compared with the caller's one the call asked for, so a self-consistent create reply about another workspace starts pi where the operator is not looking",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["\tif (tab.workspaceId !== callerPane.workspaceId) {"],
+			"replace": ["\tif (tab.workspaceId !== tab.workspaceId) {"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-CREATED-WORKSPACE]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-ROOT-PANE-OCCUPIED",
+			"title": "the pre-start occupancy check falls back to the session fact alone, so pi is started into a created pane where herdr already names an agent whose session was not reported yet",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["\tif (pane.agent !== undefined || pane.hasAgentSession) {"],
+			"replace": ["\tif (pane.hasAgentSession) {"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-ROOT-PANE-OCCUPIED]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-START-FAILURE-RECLAIMS",
+			"title": "a start failure skips the conditional reclaim and reports an unknown outcome, so an empty created pane is left behind and an occupied one is never named",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": [
+				"\t\t\treason: \"herdr-agent-start-failed\",",
+				"\t\t\t...(code === undefined ? {} : { herdrErrorCode: code }),",
+				"\t\t\trecovery: await reclaim(pane, run),"
+			],
+			"replace": [
+				"\t\t\treason: \"herdr-agent-start-failed\",",
+				"\t\t\t...(code === undefined ? {} : { herdrErrorCode: code }),",
+				"\t\t\trecovery: { outcome: \"unknown\" },"
+			],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-START-FAILURE-RECLAIMS]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-PANE-DRIFT-NAMED",
+			"title": "a start reporting another pane id is accepted, so the receipt points at a pane that never held the reopened citizen",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["\t\tstarted.pane.paneId !== pane.paneId ||"],
+			"replace": ["\t\tfalse ||"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-PANE-DRIFT-NAMED]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-ARGV-DRIFT-NAMED",
+			"title": "the echoed-argv check is dropped, so a pi started on something other than the record's transcript reads as a successful launch",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["\tif (!argvMatchesRequest(started.argv, \"pi\", params.runtimeArgs)) {"],
+			"replace": ["\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-ARGV-DRIFT-NAMED]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-OUTCOME-MAPPING",
+			"title": "every herdr failure reaches the v2 seam as a bare refusal, so a failure after the tab create loses its recovery and created tab",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["\tif (!(\"recovery\" in result)) return { ok: false, reason: result.reason, hint };"],
+			"replace": ["\tif (true) return { ok: false, reason: result.reason, hint };"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-OUTCOME-MAPPING]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-IMPORT-FENCE",
+			"title": "the herdr resume launch gains a bare side-effect import, the weakest static form, which loads and runs fine, so only the exact import-set parser can see the new dependency",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["import { randomBytes } from \"node:crypto\";"],
+			"replace": ["import { randomBytes } from \"node:crypto\";", "import \"node:path\";"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-IMPORT-FENCE]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-PD-ROUTED",
+			"title": "a pi-durable resume inside herdr falls through to the pi-only agent-start path and is refused as an unsupported backend",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["\tif (input.backend === \"pi-durable\") {"],
+			"replace": ["\tif (input.backend === \"pi_durable\") {"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-PD-ROUTED]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-PD-PRE-WRITE-REFUSALS",
+			"title": "a control character in the adopt env is no longer refused before the socket, so it reaches herdr",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["\tif (command.some(containsControlChar) || Object.values(launchEnv).some(containsControlChar)) {"],
+			"replace": ["\tif (command.some(containsControlChar)) {"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-PD-PRE-WRITE-REFUSALS]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-PD-LAYOUT-PACKET",
+			"title": "the layout env carries the sessions root under the receivers name, so the child refuses adopt-root-mismatch",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["\t\tENTWURF_META_RECEIVERS_DIR: params.adoptEnv.ENTWURF_META_RECEIVERS_DIR,"],
+			"replace": ["\t\tENTWURF_META_RECEIVERS_DIR: params.adoptEnv.ENTWURF_META_SESSIONS_DIR,"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-PD-LAYOUT-PACKET]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-PD-SUCCESS-RECEIPT",
+			"title": "the receipt names the pane id as the tab id",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["\t\t\therdrTabId: applied.tabId,"],
+			"replace": ["\t\t\therdrTabId: applied.paneId,"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-PD-SUCCESS-RECEIPT]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-PD-WRITE-CERTAINTY",
+			"title": "every layout failure reaches the v2 seam as unknown, so a request herdr never received keeps the reservation forever",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["\t\t\t\trecovery: result.recovery,\n\t\t\t},"],
+			"replace": ["\t\t\t\trecovery: { outcome: \"unknown\" },\n\t\t\t},"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-PD-WRITE-CERTAINTY]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-PD-FAILURE-RAIL",
+			"title": "a pi-durable layout failure reaches the v2 seam tagged as the pi rail's herdr tab, so its receipt names a tab create step that never ran",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["\t\t\t\trail: \"herdr-layout\","],
+			"replace": ["\t\t\t\trail: \"herdr\","],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-PD-FAILURE-RAIL]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-CC-LAYOUT-VECTOR",
+			"title": "the Claude Code layout vector drops the record's argv, so herdr starts a bare claude that opens a NEW session instead of resuming this one",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["\tconst command = [HERDR_CLAUDE_CODE_RESUME_RUNTIME, ...params.runtimeArgs];"],
+			"replace": ["\tconst command = [HERDR_CLAUDE_CODE_RESUME_RUNTIME];"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-CC-LAYOUT-VECTOR]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-CC-PANE-CHILD",
+			"title": "the process read no longer checks that herdr described THIS pane, so another pane's child becomes the pid the observation joins",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["\tif (envelope.result.type !== \"pane_process_info\" || !isRecord(info) || info.pane_id !== paneId) {"],
+			"replace": ["\tif (envelope.result.type !== \"pane_process_info\" || !isRecord(info)) {"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-CC-PANE-CHILD]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		},
+		{
+			"claim": "HRESUME-CC-FAILURE-SHARED",
+			"title": "the Claude Code launch takes the shared pi-durable hint for a missing herdr endpoint, so its refusal names pi-durable — the wrong backend — instead of Claude Code",
+			"subject": "pi-extensions/lib/herdr-resume-call.ts",
+			"find": ["\treturn { ...shared, hint: HERDR_CLAUDE_CODE_SOCKET_PATH_HINT };"],
+			"replace": ["\treturn shared;"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:HRESUME-CC-FAILURE-SHARED]",
+			"signatureSource": "pi-extensions/lib/herdr-resume-call.test.ts"
+		}
+	]
+}

package/scripts/mutants/herdr-runtime-bootstrap.json

@@ -406,6 +406,54 @@
 			"timeoutSeconds": 300,
 			"signature": "[QK:HRB-PREPARE-STDOUT-CLEAN]",
 			"signatureSource": "scripts/check-herdr-runtime-bootstrap.ts"
+		},
+		{
+			"claim": "HRB-ADMISSION-BEFORE-SWAP",
+			"title": "the runtime never asks the caller's admission, so a floor host swaps in a candidate whose reader nobody observed (#153)",
+			"subject": "scripts/herdr-runtime.mjs",
+			"find": ["\t\tif (admitCandidate !== undefined) {"],
+			"replace": ["\t\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-herdr-runtime-bootstrap"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:HRB-ADMISSION-BEFORE-SWAP]",
+			"signatureSource": "scripts/check-herdr-runtime-bootstrap.ts"
+		},
+		{
+			"claim": "HRB-ADMISSION-REFUSAL-RETAINS",
+			"title": "the admission runs after the try that reclaims a failed candidate, so a refused candidate leaves its staging tree and our cache behind for the next run to trip over (#153)",
+			"subject": "scripts/herdr-runtime.mjs",
+			"find": [
+				"\t\tif (admitCandidate !== undefined) {\n\t\t\tconst verdict = admitCandidate(\n\t\t\t\tpath.join(layout.stagingDir, \"node_modules\", completenessOf(requested, acquired).name),\n\t\t\t);\n\t\t\tif (verdict !== undefined) {\n\t\t\t\tthrow new RuntimeBootstrapError(\n\t\t\t\t\t\"runtime-candidate-admission-invalid\",\n\t\t\t\t\t`admitCandidate returned ${typeof verdict}; admission is synchronous: return nothing to admit, throw to refuse`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t} catch (err) {\n\t\tremoveTree(layout.stagingDir);\n\t\t// A half-fetched tarball left in the cache is the thing a retry would trip over: npm's own\n\t\t// cache entry may be incomplete, and OUR cache is the only place this transaction wrote.\n\t\tremoveTree(layout.cacheDir);\n\t\tthrow err;\n\t}\n\n\tlet backedUp = false;"
+			],
+			"replace": [
+				"\t} catch (err) {\n\t\tremoveTree(layout.stagingDir);\n\t\t// A half-fetched tarball left in the cache is the thing a retry would trip over: npm's own\n\t\t// cache entry may be incomplete, and OUR cache is the only place this transaction wrote.\n\t\tremoveTree(layout.cacheDir);\n\t\tthrow err;\n\t}\n\n\tif (admitCandidate !== undefined) {\n\t\tconst verdict = admitCandidate(\n\t\t\tpath.join(layout.stagingDir, \"node_modules\", completenessOf(requested, acquired).name),\n\t\t);\n\t\tif (verdict !== undefined) {\n\t\t\tthrow new RuntimeBootstrapError(\n\t\t\t\t\"runtime-candidate-admission-invalid\",\n\t\t\t\t`admitCandidate returned ${typeof verdict}; admission is synchronous: return nothing to admit, throw to refuse`,\n\t\t\t);\n\t\t}\n\t}\n\tlet backedUp = false;"
+			],
+			"gate": ["bash", "run.sh", "check-herdr-runtime-bootstrap"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:HRB-ADMISSION-REFUSAL-RETAINS]",
+			"signatureSource": "scripts/check-herdr-runtime-bootstrap.ts"
+		},
+		{
+			"claim": "HRB-ADMISSION-VOID-ONLY",
+			"title": "a value returned by the admission is read as consent, so a Promise whose refusal arrives later lets the swap happen first (#153)",
+			"subject": "scripts/herdr-runtime.mjs",
+			"find": ["\t\t\tif (verdict !== undefined) {"],
+			"replace": ["\t\t\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-herdr-runtime-bootstrap"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:HRB-ADMISSION-VOID-ONLY]",
+			"signatureSource": "scripts/check-herdr-runtime-bootstrap.ts"
+		},
+		{
+			"claim": "HRB-ADMISSION-CALLBACK-SHAPE",
+			"title": "an admission that cannot be called is discovered as a TypeError after the journal already says installing, instead of a named refusal before the first byte (#153)",
+			"subject": "scripts/herdr-runtime.mjs",
+			"find": ["\tif (admitCandidate !== undefined && typeof admitCandidate !== \"function\") {"],
+			"replace": ["\tif (false) {"],
+			"gate": ["bash", "run.sh", "check-herdr-runtime-bootstrap"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:HRB-ADMISSION-CALLBACK-SHAPE]",
+			"signatureSource": "scripts/check-herdr-runtime-bootstrap.ts"
 		}
 	]
 }

package/scripts/mutants/meta-facts.json

@@ -45,6 +45,21 @@
 			"timeoutSeconds": 120,
 			"signature": "[QK:MF-USAGE]",
 			"signatureSource": "scripts/check-meta-facts.ts"
+		},
+		{
+			"claim": "MF-HELP-POINTER",
+			"title": "the dash refusal points at another command's description, so an agent that followed it reads help for the wrong verb (#153)",
+			"subject": "scripts/meta-facts.ts",
+			"find": [
+				"\tconsole.error(\"meta-facts: see `entwurf help meta-facts` (from that checkout's root: `./run.sh help meta-facts`)\");"
+			],
+			"replace": [
+				"\tconsole.error(\"meta-facts: see `entwurf help peer-facts` (from that checkout's root: `./run.sh help peer-facts`)\");"
+			],
+			"gate": ["bash", "run.sh", "check-meta-facts"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:MF-HELP-POINTER]",
+			"signatureSource": "scripts/check-meta-facts.ts"
 		}
 	]
 }

package/scripts/mutants/mux-fresh-call.json

@@ -127,7 +127,7 @@
 			"title": "the fresh-call surface drops the optional cwd from its schema, so cross-repo fresh silently cannot exist from any caller — pi included, which reaches this bridge since #125",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\tcwd: z\n\t\t\t.string()\n\t\t\t.optional()\n\t\t\t.describe(\n\t\t\t\t\"Optional literal ABSOLUTE path of an existing directory to start the sibling in (cross-repo fresh). Omit or pass \\\"\\\" to start where the CALLER is — this agent's own cwd on BOTH rails, or for a Codex caller its own record directory, because this bridge is the app-server's child and that process's directory is not the caller's. Taken exactly as given: no trim, no realpath, no project-name resolution. '#' is refused on the tmux rail only, because tmux format-expands a start directory; inside herdr it is an ordinary path character. The receipt echoes the directory that was REQUESTED or the caller record it came from, never an observation of where the pane landed.\",\n\t\t\t),\n"
+				"\t\tcwd: z.string().optional().describe(ENTWURF_TOOL_GUIDANCE.entwurf_fresh_call.parameters[\"cwd\"]),\n"
 			],
 			"replace": [""],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
@@ -153,7 +153,7 @@
 			"title": "MCP drops the required model field from fresh-call while the composition still expects one",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\tmodel: z\n\t\t\t.string()\n\t\t\t.min(1)\n\t\t\t.max(200)\n\t\t\t// The `\\[` below is USELESS TO JS AND LOAD-BEARING TO THE HOST. zod emits this source\n\t\t\t// text verbatim as the JSON Schema `pattern`, and the host's tool-schema validator is a\n\t\t\t// Rust regex engine that rejects an unescaped `[` inside a character class as \"unclosed\n\t\t\t// character class\" — a 400 on tools/list that stops EVERY Claude session from opening\n\t\t\t// (7-M-fix). Biome's safe fix removes it; do not accept that fix. The suppression must\n\t\t\t// stay on the line DIRECTLY above the expression, or it attaches to nothing and reads\n\t\t\t// as an unused suppression while the escape goes back to being fixable.\n\t\t\t// biome-ignore lint/complexity/noUselessEscapeInRegex: emitted to a Rust regex validator, see above\n\t\t\t.regex(/^[A-Za-z0-9][A-Za-z0-9._/:\\[\\]-]*$/)\n\t\t\t.describe(\n\t\t\t\t\"Required runtime model: canonical provider/model for pi (a bare alias is refused), provider/<exact catalog model id> for pi-durable, a Claude Code model id/alias, or a Copilot/OMP/Codex model name. Neither pi nor pi-durable may name the openrouter provider.\",\n\t\t\t),\n"
+				"\t\tmodel: z\n\t\t\t.string()\n\t\t\t.min(1)\n\t\t\t.max(200)\n\t\t\t// The `\\[` below is USELESS TO JS AND LOAD-BEARING TO THE HOST. zod emits this source\n\t\t\t// text verbatim as the JSON Schema `pattern`, and the host's tool-schema validator is a\n\t\t\t// Rust regex engine that rejects an unescaped `[` inside a character class as \"unclosed\n\t\t\t// character class\" — a 400 on tools/list that stops EVERY Claude session from opening\n\t\t\t// (7-M-fix). Biome's safe fix removes it; do not accept that fix. The suppression must\n\t\t\t// stay on the line DIRECTLY above the expression, or it attaches to nothing and reads\n\t\t\t// as an unused suppression while the escape goes back to being fixable.\n\t\t\t// biome-ignore lint/complexity/noUselessEscapeInRegex: emitted to a Rust regex validator, see above\n\t\t\t.regex(/^[A-Za-z0-9][A-Za-z0-9._/:\\[\\]-]*$/)\n\t\t\t.describe(ENTWURF_TOOL_GUIDANCE.entwurf_fresh_call.parameters[\"model\"]),\n"
 			],
 			"replace": [""],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
@@ -514,7 +514,7 @@
 			"title": "the fresh-call surface drops the optional seat from its schema, so opening a sibling in the operator's project session silently cannot exist from any caller",
 			"subject": "mcp/entwurf-bridge/src/index.ts",
 			"find": [
-				"\t\tplacement: z\n\t\t\t.object({\n\t\t\t\ttmuxSession: z\n\t\t\t\t\t.string()\n\t\t\t\t\t.describe(\n\t\t\t\t\t\t\"EXACT name of an EXISTING session on this agent's own tmux server. Nothing is created: an absent session is refused as tmux-session-missing, and a name outside [A-Za-z0-9][A-Za-z0-9_-]* as tmux-session-name-invalid.\",\n\t\t\t\t\t),\n\t\t\t})\n\t\t\t.optional()\n\t\t\t.describe(\n\t\t\t\t\"Optional expert seat override, TMUX ONLY: open the sibling in ONE EXISTING tmux session of this agent's own server, and it always wins. When omitted the seat follows the CALLER, never the backend being opened: a Codex CALLER opens beside its own TUI pane, matched by thread-id in that pane's terminal title (0 or 2+ matching panes refuse, never fall back); every other caller opens in its own session. A pane title is a placement input only — never an address, liveness or delivery fact. Nothing is ever created. Inside herdr this field is refused by name — placement there belongs to herdr, and a tmux session name would silently place the sibling somewhere else. Independent of cwd; neither is inferred from the other. The receipt reports the selected name (absent for the caller-pane rule, which observed a session rather than requesting a name), its source, and resolved target session id.\",\n\t\t\t),\n"
+				"\t\tplacement: z\n\t\t\t.object({\n\t\t\t\ttmuxSession: z.string().describe(ENTWURF_TOOL_GUIDANCE.entwurf_fresh_call.parameters[\"placement.tmuxSession\"]),\n\t\t\t})\n\t\t\t.optional()\n\t\t\t.describe(ENTWURF_TOOL_GUIDANCE.entwurf_fresh_call.parameters[\"placement\"]),\n"
 			],
 			"replace": [""],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
@@ -781,6 +781,17 @@
 			"timeoutSeconds": 120,
 			"signature": "[QK:PD-FRESH-LIVE-BOOTSTRAP-ORDER]",
 			"signatureSource": "test/pi-durable-fresh-live-receipts.test.ts"
+		},
+		{
+			"claim": "FRESHCALL-LAUNCH-REJECT-HINTS-FROM-ROOT",
+			"title": "one static tmux launch-stage hint is inlined as a literal one byte away from the Root text, so the reader and its byte oracle stay green and only the rendered refusal can disagree with Root",
+			"subject": "pi-extensions/lib/mux-fresh-call.ts",
+			"find": ["\t\"anchor-malformed\": ENTWURF_FRESH_LAUNCH_REJECT_HINTS[\"anchor-malformed\"],"],
+			"replace": ["\t\"anchor-malformed\": \"TMUX_PANE is not a native  pane id\","],
+			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:FRESHCALL-LAUNCH-REJECT-HINTS-FROM-ROOT]",
+			"signatureSource": "test/mux-fresh-call.test.ts"
 		}
 	]
 }

package/scripts/mutants/mux-resume-call.json

@@ -98,12 +98,12 @@
 		{
 			"claim": "MUXRESUME-DESC-CONTRACT-MCP",
 			"title": "the MCP description drops the dormant-only scope, inviting callers to aim the verb at live citizens it will refuse",
-			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"subject": "ENTWURF.json",
 			"find": [
-				"\t\"Reopen ONE DORMANT pi or Claude Code citizen under its OWN garden id, in a visible window in the operator's \" +"
+				"Only on an explicit operator request, reopen ONE DORMANT pi, pi-durable or Claude Code citizen under its OWN garden id, in a visible window in the operator's "
 			],
 			"replace": [
-				"\t\"Reopen ONE pi or Claude Code citizen under its OWN garden id, in a visible window in the operator's \" +"
+				"Only on an explicit operator request, reopen ONE pi, pi-durable or Claude Code citizen under its OWN garden id, in a visible window in the operator's "
 			],
 			"gate": ["bash", "run.sh", "check-mux-resume-call"],
 			"timeoutSeconds": 60,
@@ -155,6 +155,92 @@
 			"timeoutSeconds": 60,
 			"signature": "[QK:MUXRESUME-ARGV-IDENTITY-SCRUB]",
 			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-LAUNCH-REJECT-HINTS-FROM-ROOT",
+			"title": "one launch-stage resume hint is inlined as a literal one byte away from the Root text, so the reader and its byte oracle stay green and only the table-to-Root wiring can disagree",
+			"subject": "pi-extensions/lib/mux-resume-call.ts",
+			"find": ["\t\"anchor-malformed\": ENTWURF_RESUME_LAUNCH_REJECT_HINTS[\"anchor-malformed\"],"],
+			"replace": ["\t\"anchor-malformed\": \"TMUX_PANE is not a native  pane id\","],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-LAUNCH-REJECT-HINTS-FROM-ROOT]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-IMPORT-SET",
+			"title": "the resume composition gains a bare side-effect import, the weakest static form, which loads and runs fine, so only the exact import-set parser can see the new lane",
+			"subject": "pi-extensions/lib/mux-resume-call.ts",
+			"find": ["import { ENTWURF_RESUME_LAUNCH_REJECT_HINTS } from \"./agent-guidance.ts\";"],
+			"replace": [
+				"import { ENTWURF_RESUME_LAUNCH_REJECT_HINTS } from \"./agent-guidance.ts\";",
+				"import \"node:path\";"
+			],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-IMPORT-SET]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-V2-NO-HERDR-IMPORT",
+			"title": "the v2 composition imports a herdr module directly, so the herdr CLI rail enters entwurf core instead of arriving through the injected seam",
+			"subject": "pi-extensions/lib/entwurf-v2-visible-resume.ts",
+			"find": ["import { buildResumePiArgs } from \"./entwurf-resume-args.ts\";"],
+			"replace": [
+				"import { buildResumePiArgs } from \"./entwurf-resume-args.ts\";\nimport { HERDR_AGENT_KIND } from \"./herdr-fresh-call.ts\";\nvoid HERDR_AGENT_KIND;"
+			],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-V2-NO-HERDR-IMPORT]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-HERDR-COMPOSED",
+			"title": "the bridge bypasses the shared rail root and calls the tmux leaf directly, so every resume inside herdr is refused by the tmux leaf",
+			"subject": "mcp/entwurf-bridge/src/index.ts",
+			"find": [
+				"const visibleResumeLaunch: VisibleResumeDeps[\"launch\"] = (input) => dispatchResumeLaunch(input, tmuxResumeLaunch);"
+			],
+			"replace": [
+				"const visibleResumeLaunch: VisibleResumeDeps[\"launch\"] = (input) => tmuxResumeLaunch(input);\nvoid dispatchResumeLaunch;"
+			],
+			"gate": ["bash", "run.sh", "check-mux-resume-call"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-HERDR-COMPOSED]",
+			"signatureSource": "scripts/check-mux-resume-call.ts"
+		},
+		{
+			"claim": "MUXRESUME-PD-ADOPT-ENV",
+			"title": "the tmux window drops the profile assignment, so the child's SDK reads the tmux server's profile",
+			"subject": "pi-extensions/lib/mux-resume-call.ts",
+			"find": ["\t\t...adoptAssignments.flatMap((assignment) => [\"-e\", assignment]),"],
+			"replace": ["\t\t...adoptAssignments.slice(1).flatMap((assignment) => [\"-e\", assignment]),"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-PD-ADOPT-ENV]",
+			"signatureSource": "pi-extensions/lib/mux-resume-call.test.ts"
+		},
+		{
+			"claim": "MUXRESUME-PD-ADOPT-ABSOLUTE",
+			"title": "a relative projection value reaches tmux",
+			"subject": "pi-extensions/lib/mux-resume-call.ts",
+			"find": ["\t\tif (typeof value !== \"string\" || !value.startsWith(\"/\")) {"],
+			"replace": ["\t\tif (typeof value !== \"string\") {"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-PD-ADOPT-ABSOLUTE]",
+			"signatureSource": "pi-extensions/lib/mux-resume-call.test.ts"
+		},
+		{
+			"claim": "MUXRESUME-PD-MANAGED-RUNTIME",
+			"title": "the pi-durable window starts bare pi instead of the managed entwurf verb",
+			"subject": "pi-extensions/lib/mux-resume-call.ts",
+			"find": ["\treturn openResumeWindow(RESUME_CALL_PI_DURABLE_RUNTIME, params, params.adoptEnv, env);"],
+			"replace": ["\treturn openResumeWindow(RESUME_CALL_RUNTIME.pi, params, params.adoptEnv, env);"],
+			"gate": ["bash", "run.sh", "check-entwurf-v2-visible-resume"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:MUXRESUME-PD-MANAGED-RUNTIME]",
+			"signatureSource": "pi-extensions/lib/mux-resume-call.test.ts"
 		}
 	]
 }

package/scripts/mutants/peer-facts.json

@@ -93,6 +93,21 @@
 			"timeoutSeconds": 120,
 			"signature": "[QK:PF-USAGE]",
 			"signatureSource": "scripts/check-peer-facts.ts"
+		},
+		{
+			"claim": "PF-HELP-POINTER",
+			"title": "the dash refusal points at another command's description, so an agent that followed it reads help for the wrong verb (#153)",
+			"subject": "scripts/peer-facts.ts",
+			"find": [
+				"\tconsole.error(\"peer-facts: see `entwurf help peer-facts` (from that checkout's root: `./run.sh help peer-facts`)\");"
+			],
+			"replace": [
+				"\tconsole.error(\"peer-facts: see `entwurf help meta-facts` (from that checkout's root: `./run.sh help meta-facts`)\");"
+			],
+			"gate": ["bash", "run.sh", "check-peer-facts"],
+			"timeoutSeconds": 120,
+			"signature": "[QK:PF-HELP-POINTER]",
+			"signatureSource": "scripts/check-peer-facts.ts"
 		}
 	]
 }