@junghanacs/entwurf 0.45.0 → 0.51.0

package/mcp/entwurf-bridge/dist/pi-extensions/lib/pi-durable-runtime.js

@@ -47,6 +47,7 @@ export function piDurableLayoutAt(root) {
         adapter: path.join(dist, "pi-extensions", "meta-bridge-pi-durable.js"),
         bridgeEntry: path.join(dist, "mcp", "entwurf-bridge", "src", "index.js"),
         deliverability: path.join(dist, "pi-extensions", "lib", "entwurf-deliverability.js"),
+        ownerFence: path.join(dist, "pi-extensions", "lib", "pi-durable-owner-fence.js"),
     };
 }
 /**

package/mcp/entwurf-bridge/dist/pi-extensions/lib/resume-launch-identity.js

@@ -10,13 +10,15 @@
  * must equal `record.nativeSessionId`, an addressable read (#52) rather than a plain targeted one,
  * a recorded ACP provider must resolve its bridge.
  *
- * The domain is pi and claude-code (#147 L2). Both own their transcript and re-attach to the same
- * record when their native session reopens; this leaf only names that session. For pi it reads
- * the transcript header (the launch needs its provider/model/cwd). For claude-code it reads no
- * transcript at all — the vendor owns it, and `claude --resume <id>` needs nothing from it — and
- * checks only that the recorded path is an absolute file that still exists. Every other backend
- * is a named refusal: native-push citizens have no resume authority (AGENTS Hard Rule 10), and a
- * durable host is not reopened through Entwurf.
+ * The domain is pi and claude-code (#147 L2), and pi-durable (#157 B3). Each owns its transcript
+ * and re-attaches to the same record when its native session reopens; this leaf only names that
+ * session. For pi it reads the transcript header (the launch needs its provider/model/cwd). For
+ * claude-code it reads no transcript at all — the vendor owns it, and `claude --resume <id>` needs
+ * nothing from it — and checks only that the recorded path is an absolute file that still exists.
+ * For pi-durable it reads nothing beyond the record: the parent's reservation re-reads the record
+ * and its location inside its own holds, and the launched child selects its session from the record
+ * itself, so this leaf only says WHICH backend the address names. Every other backend is a named
+ * refusal: native-push citizens have no resume authority (AGENTS Hard Rule 10).
  *
  * It takes a bare garden id, not a plan: the plan type it used to destructure belonged to
  * the removed transport, and the identity question never needed the rest of it.
@@ -27,7 +29,7 @@ import { AcpModelNotCuratedError, isCuratedAcpModelId, PROVIDER_ID } from "./acp
 import { getEntwurfExplicitExtensions, readSessionIdentity } from "./entwurf-core.js";
 import { readAddressableMetaIdentity } from "./meta-session.js";
 /** The backends with a visible same-id resume. A closed set: nothing outside it is reopened. */
-export const RESUME_BACKENDS = ["pi", "claude-code"];
+export const RESUME_BACKENDS = ["pi", "claude-code", "pi-durable"];
 /**
  * One of the TWO expected refusals on this leaf: the target is a citizen of a backend that has no
  * same-id resume at all. The other is `AcpModelNotCuratedError` (#128, `acp/model-ids.js`).
@@ -38,8 +40,7 @@ export const RESUME_BACKENDS = ["pi", "claude-code"];
  * except by looking. A Claude Code or agy garden id is different in kind: nothing is broken,
  * the operator simply asked a capability boundary to do something it does not cover, and the
  * honest answer is a named refusal rather than an error report about a store that is fine. Since
- * #147 L2 the boundary is `RESUME_BACKENDS`; a Codex, agy, Copilot, OMP or pi-durable garden id is
- * this refusal.
+ * #147 L2 the boundary is `RESUME_BACKENDS`; a Codex, agy, Copilot or OMP garden id is this refusal.
  *
  * It carries a `reason` so the caller matches on a FIELD. Parsing the message string would make
  * the wording load-bearing, and re-reading the record to ask "was it pi?" would read an address
@@ -50,7 +51,7 @@ export class ResumeBackendUnsupportedError extends Error {
     backend;
     constructor(gardenId, backend) {
         super(`resume-launch-identity: ${gardenId} is a ${backend} citizen — same-id resume is a host-adapter relaunch ` +
-            `capability, and its domain is ${RESUME_BACKENDS.join(" and ")}. ` +
+            `capability, and its domain is ${RESUME_BACKENDS.join(", ")}. ` +
             `This is a capability boundary, not citizen rank.`);
         this.name = "ResumeBackendUnsupportedError";
         this.backend = backend;
@@ -128,6 +129,12 @@ export function resolveResumeLaunchIdentity(gardenId) {
     const record = readAddressableMetaIdentity(gardenId);
     if (record.backend === "claude-code")
         return resolveClaudeCodeLaunchIdentity(gardenId, record);
+    if (record.backend === "pi-durable") {
+        if (!path.isAbsolute(record.cwd)) {
+            throw new Error(`resume-launch-identity: ${gardenId} records a relative cwd ${JSON.stringify(record.cwd)}.`);
+        }
+        return { backend: "pi-durable", nativeSessionId: record.nativeSessionId, cwd: record.cwd };
+    }
     if (record.backend !== "pi") {
         throw new ResumeBackendUnsupportedError(gardenId, record.backend);
     }

package/mcp/entwurf-bridge/dist/pi-extensions/meta-bridge-pi-durable.js

@@ -10,7 +10,8 @@
  *   createPiDurableContact({ bridgeEntry })
  *     .extension          tools-only durable Extension, handed to the overlay's
  *                         `openDurable({ extensions })` BEFORE the Harness opens
- *     .attach(session)    once `openDurable` returns: upsert the record, name this process as
+ *     .attach(session)    once `openDurable` returns: commit the record's binding and its
+ *                         location evidence (`lib/pi-durable-location.ts`), name this process as
  *                         sender, spawn the compiled entwurf-bridge as a DIRECT child, then
  *                         release the tools
  *
@@ -93,17 +94,21 @@
  * refusal.
  *
  * CALLER FRESH (the sixth tool). `entwurf_fresh_call` lets this durable citizen open a sibling, under the
- * bridge's own schema (pinned below, including the `pi-durable` backend itself). The bridge places it
- * beside the tmux pane this host was launched in, which a fresh-opened durable host inherits; an
- * operator host started outside tmux gets the bridge's named `no-tmux-context` refusal. Exposing the
- * tool is not a caller LIVE proof.
+ * bridge's own schema (pinned below, including the `pi-durable` backend itself). Outside herdr, the bridge
+ * places it beside the tmux pane this host was launched in, which a fresh-opened durable host inherits,
+ * and an operator host started outside tmux gets the bridge's named `no-tmux-context` refusal. Inside
+ * herdr (`HERDR_ENV=1`, which the bridge child inherits from this host) it requests a new herdr tab
+ * instead, for pi, claude-code or pi-durable only; the other backends are refused by name, and nothing
+ * falls back to tmux. Exposing the tool is not a caller LIVE proof.
  *
  * CALLER RESUME (the seventh tool, #147 L1). `entwurf_resume_call` lets this durable citizen reopen a
- * DORMANT pi or Claude Code citizen under its own garden id (#147 L2), under the bridge's own
- * single-`target` schema (pinned below). The bridge decides everything else from the target's record,
- * exactly as for any other caller: other backends have no same-id resume, a live target is refused,
- * and the window opens in the tmux session this host was launched in. Exposing the tool names no new authority and is not a caller LIVE
- * proof; it never resumes this durable host itself.
+ * DORMANT pi, pi-durable or Claude Code citizen under its own garden id (#147 L2; pi-durable since
+ * #157 B3), under the bridge's own single-`target` schema (pinned below). The bridge decides everything
+ * else from the target's record, exactly as for any other caller: other backends have no same-id
+ * resume, a session a live process holds is refused, and outside herdr the window opens in the tmux
+ * session this host was launched in. Inside herdr a pi, pi-durable or Claude Code target reopens, in a
+ * new herdr tab (Claude Code since #157 stage 4). Exposing the tool names no new authority and is not a caller LIVE proof; it never resumes
+ * this durable host itself.
  *
  * NOT HERE: crash-safe receive. `entwurf_inbox_read` archives a body before the durable tool
  * result commits, so a crash between the two loses that body to the model; recovery settles the
@@ -115,7 +120,8 @@ import * as path from "node:path";
 import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
 import { ENTWURF_TOOL_GUIDANCE } from "./lib/agent-guidance.js";
-import { defaultMetaMailboxDir, defaultMetaReceiversDir, defaultMetaSendersDir, defaultMetaSessionsDir, listAllMetaIdentitiesDir, readAddressableMetaIdentity, readMetaReceiverMarker, readMetaSenderMarker, requireGardenId, upsertMetaSession, writeMetaReceiverMarker, writeMetaSenderMarker, } from "./lib/meta-session.js";
+import { defaultMetaMailboxDir, defaultMetaReceiversDir, defaultMetaSendersDir, defaultMetaSessionsDir, listAllMetaIdentitiesDir, readAddressableMetaIdentity, readMetaReceiverMarker, readMetaSenderMarker, requireGardenId, writeMetaReceiverMarker, writeMetaSenderMarker, } from "./lib/meta-session.js";
+import { commitPiDurableBirth } from "./lib/pi-durable-location.js";
 /** The backend id this contact mints under. */
 export const PI_DURABLE_BACKEND = "pi-durable";
 /**
@@ -848,9 +854,18 @@ export function createPiDurableContact(options) {
                 }
                 const ownerPid = options.ownerPid ?? process.pid;
                 const sendersDir = path.resolve(options.sendersDir ?? defaultMetaSendersDir());
-                const upsert = upsertMetaSession({
-                    input: { backend: PI_DURABLE_BACKEND, nativeSessionId: id, cwd, model: null, transcriptPath: null },
-                    dir: options.sessionsDir ?? defaultMetaSessionsDir(),
+                const receiversDir = path.resolve(options.receiversDir ?? defaultMetaReceiversDir());
+                // The record and its location evidence, bound by one minted attachIncarnation under the
+                // record-arm lock of the receivers root this birth uses. A refusal here fails the birth;
+                // there is no unbound fallback. The pair is not one atomic commit: see the leaf's
+                // FAILURE STATES for what each failure leaves behind.
+                const upsert = commitPiDurableBirth({
+                    nativeSessionId: id,
+                    cwd,
+                    sessionDirectory: session.directory,
+                    ownerPid,
+                    sessionsDir: options.sessionsDir ?? defaultMetaSessionsDir(),
+                    receiversDir,
                 });
                 const gardenId = upsert.record.gardenId;
                 const markerPath = writeMetaSenderMarker({
@@ -865,7 +880,7 @@ export function createPiDurableContact(options) {
                     sessionsDir: upsert.dir,
                     sendersDir,
                     mailboxDir: path.resolve(options.mailboxDir ?? defaultMetaMailboxDir()),
-                    receiversDir: path.resolve(options.receiversDir ?? defaultMetaReceiversDir()),
+                    receiversDir,
                 };
                 const client = await connect({
                     command: process.execPath,

package/mcp/entwurf-bridge/dist/scripts/herdr-rails.mjs

@@ -30,30 +30,58 @@
  *     `--kind` token) stays with the rail that spends it; this leaf carries no argv.
  */
 /**
- * The closed pilot set for the herdr launch rail. Herdr's own `--kind` enum is much larger and
- * that is not evidence of support: every other backend is a named pre-mutation reject.
+ * The backends the herdr rail opens through `tab create` + `agent start --kind`. Herdr's own
+ * `--kind` enum is much larger and that is not evidence of support. This set alone keys the
+ * agent-start maps (`HERDR_AGENT_KIND`, `HERDR_CANONICAL_EXECUTABLE`): a backend outside it has no
+ * herdr kind, and giving it one would start a different program under its name.
  *
  * The JSDoc cast is what keeps the TYPE half of this single source honest. Without it TypeScript
- * infers `readonly string[]` from a `.mjs` file and `HerdrFreshCallBackend` silently widens to
+ * infers `readonly string[]` from a `.mjs` file and `HerdrAgentStartBackend` silently widens to
  * `string` — the tuple would still be one source at runtime while the compiler had stopped
  * checking anything. A gate pins both halves.
  *
  * @type {readonly ["pi", "claude-code"]}
  */
-export const HERDR_FRESH_CALL_BACKENDS = Object.freeze(["pi", "claude-code"]);
+export const HERDR_AGENT_START_BACKENDS = Object.freeze(["pi", "claude-code"]);
+/**
+ * The backends the herdr rail opens through ONE fixed `layout.apply` request on the caller's own
+ * herdr socket (#157 A-L1). pi-durable has no herdr agent kind, so it is launched as the package's
+ * own verified `run.sh pi-durable …` argv vector in a new tab — never disguised as `--kind pi`.
+ *
+ * @type {readonly ["pi-durable"]}
+ */
+export const HERDR_LAYOUT_LAUNCH_BACKENDS = Object.freeze(["pi-durable"]);
+/**
+ * Everything `entwurf_fresh_call` actually opens inside herdr: the union of the two launch domains.
+ * Admission and refusal read THIS set, so every backend outside it is a named pre-mutation reject
+ * and no backend is admitted by one domain while another surface says it is refused.
+ *
+ * The status pane's RAILS block renders the two domains as separate groups — agent start, then
+ * layout — over this aggregate (#157 A-L2). The install narration covers only the integrations it
+ * activated, and pi-durable is never one: it has no herdr agent integration to activate.
+ *
+ * @type {readonly ["pi", "claude-code", "pi-durable"]}
+ */
+export const HERDR_FRESH_CALL_BACKENDS = Object.freeze([
+    ...HERDR_AGENT_START_BACKENDS,
+    ...HERDR_LAYOUT_LAUNCH_BACKENDS,
+]);
 /**
  * ONE model string per backend, and it is an example of SYNTAX, never of choice.
  *
  * `[관측: GLG, 날것 PC, 2026-09-17]` "일단 정확한 모델명을 모른다" — after a green install the first
  * thing missing is a call that works, and the two runtimes spell a model differently enough that
  * guessing fails: pi wants a provider-qualified path, Claude Code wants the vendor id alone.
- * That difference is the whole content of this map.
+ * That difference is the whole content of this map. pi-durable takes pi's shape — its preflight
+ * refuses a model that is not provider-qualified (`pi-durable-model-not-provider-qualified`) — so its
+ * example is the same shape string, not a choice of model.
  *
- * @type {Readonly<Record<"pi" | "claude-code", string>>}
+ * @type {Readonly<Record<"pi" | "claude-code" | "pi-durable", string>>}
  */
 export const MODEL_SYNTAX_EXAMPLE = Object.freeze({
     pi: "openai-codex/gpt-5.6-terra",
     "claude-code": "claude-sonnet-5",
+    "pi-durable": "openai-codex/gpt-5.6-terra",
 });
 /**
  * How a citizen on each backend is REACHED once it exists, in the operator's words. This is the
@@ -64,9 +92,14 @@ export const MODEL_SYNTAX_EXAMPLE = Object.freeze({
  * citizen pi: the install says green, `pi` starts, and nothing is there. Citizenship is argv-gated
  * on purpose, and that gate is invisible unless something says it out loud.
  *
- * @type {Readonly<Record<"pi" | "claude-code", string>>}
+ * pi-durable's note says what it is NOT here as much as how it is reached: it is not an integration
+ * this plugin activates, and herdr has no agent kind for it, so nothing detects it or associates a
+ * session with it.
+ *
+ * @type {Readonly<Record<"pi" | "claude-code" | "pi-durable", string>>}
  */
 export const RAIL_ENTRY_NOTE = Object.freeze({
     pi: "start it as `pi --entwurf-control` to be a garden citizen — a plain `pi` loads the extension but has no garden id, no control socket and no entwurf tools",
     "claude-code": "nothing to add — an ordinary `claude` picks up the entwurf tools through MCP",
+    "pi-durable": "not a Herdr integration this plugin activates — inside Herdr, `entwurf_fresh_call` opens it in a new tab through ONE layout request; Herdr has no agent kind for it, so it is neither detected nor associated with a session, and its peers placement reads unobserved",
 });

package/mcp/entwurf-bridge/dist/scripts/meta-bridge-fresh-cut.js

@@ -111,33 +111,7 @@ import { classifyMarkerOwner, defaultMetaMailboxDir, defaultMetaReceiversDir, de
 import { resolveNativePushAdapter } from "../pi-extensions/lib/native-push/adapter.js";
 import { probeSocketLiveness } from "../pi-extensions/lib/socket-probe.js";
 function usage(code) {
-    console.error([
-        "usage: node --experimental-strip-types scripts/meta-bridge-fresh-cut.ts",
-        "       (dev clone: `./run.sh meta-bridge-fresh-cut` · installed package: `entwurf meta-bridge-fresh-cut`)",
-        "",
-        "  Open a fresh meta-bridge generation: quiesce-check every live surface, then",
-        "  archive meta-sessions/ + meta-mailbox/ to `<dir>.archive-<timestamp>` siblings,",
-        "  clear dead sender/receiver markers and dead control sockets, and open empty",
-        "  live dirs. No migration, no restore: the archive is forensic bytes only.",
-        "",
-        "store   = ENTWURF_META_SESSIONS_DIR || <PI_CODING_AGENT_DIR|~/.pi/agent>/meta-sessions",
-        "mailbox = ENTWURF_META_MAILBOX_DIR  || <PI_CODING_AGENT_DIR|~/.pi/agent>/meta-mailbox",
-        "sockets = ENTWURF_DIR               || ~/.pi/entwurf-control",
-        "",
-        "EXIT CONTRACT (#54) — what already moved, not how bad it was:",
-        `  ${FRESH_CUT_EXIT.COMPLETE}  cut complete: generation archived (or none existed), fresh v3 store open,`,
-        "     residue cleared. `&& setup` is correct here.",
-        `  ${FRESH_CUT_EXIT.NO_MOVE}  NOTHING MOVED: a live/unprovable surface, an occupied archive destination,`,
-        "     an unreadable surface, or a first rename that failed. The host is unchanged —",
-        "     fix the named cause and re-run. Do NOT run setup: the store it refused is still there.",
-        `  ${FRESH_CUT_EXIT.USAGE}  usage.`,
-        `  ${FRESH_CUT_EXIT.HALF_CUT}  CUT TRANSITION INCOMPLETE: at least one archive move happened,`,
-        "     but the fresh generation is not confirmed open. Inspect, or re-run to finish under a new stamp.",
-        `  ${FRESH_CUT_EXIT.CLEANUP_INCOMPLETE}  CUT COMPLETE, CLEANUP INCOMPLETE: the generation IS archived and the fresh`,
-        "     generation IS open — install and citizen birth are unblocked, so setup may run —",
-        "     but marker/socket residue survived. Prefer fixing it and re-running BEFORE setup; after new citizen birth,",
-        "     remove the named residue manually instead of archiving the new generation with another cut.",
-    ].join("\n"));
+    console.error("meta-bridge-fresh-cut: see `entwurf help meta-bridge-fresh-cut` (from that checkout's root: `./run.sh help meta-bridge-fresh-cut`)");
     process.exit(code);
 }
 /** Denote-style local timestamp for archive dir names. */

package/mcp/entwurf-bridge/dist/scripts/meta-bridge-prune.js

@@ -27,7 +27,7 @@ function shellQuote(s) {
     return `'${s.replace(/'/g, "'\\''")}'`;
 }
 function usage(code) {
-    console.error("usage: node --experimental-strip-types scripts/meta-bridge-prune.ts [meta-sessions-dir] [--ttl-days N]");
+    console.error("meta-bridge-prune: see `entwurf help meta-bridge-prune` (from that checkout's root: `./run.sh help meta-bridge-prune`)");
     process.exit(code);
 }
 let dirArg;

package/mcp/entwurf-bridge/dist/scripts/meta-facts.js

@@ -37,7 +37,7 @@ const arg = process.argv[2];
 // A dash argv is a flag this command does not have, not a store directory — treating
 // it as a path would answer `--help` with "empty store, exit 0", a silent wrong fact.
 if (process.argv.length > 3 || (arg !== undefined && arg.startsWith("-"))) {
-    console.error("usage: entwurf meta-facts [meta-sessions-dir]");
+    console.error("meta-facts: see `entwurf help meta-facts` (from that checkout's root: `./run.sh help meta-facts`)");
     process.exit(2);
 }
 let facts;

package/mcp/entwurf-bridge/dist/scripts/peer-facts.js

@@ -77,7 +77,7 @@ const arg = process.argv[2];
 // A dash argv is a flag this command does not have, not a store directory — treating it as
 // a path would answer `--help` with "empty store, exit 0", a silent wrong fact.
 if (process.argv.length > 3 || (arg !== undefined && arg.startsWith("-"))) {
-    console.error("usage: entwurf peer-facts [meta-sessions-dir]");
+    console.error("peer-facts: see `entwurf help peer-facts` (from that checkout's root: `./run.sh help peer-facts`)");
     process.exit(2);
 }
 const storeDir = arg ?? defaultMetaSessionsDir();

package/mcp/entwurf-bridge/src/index.ts

@@ -31,9 +31,10 @@
  *                       seat, #105; nothing is ever created), optionally at ONE literal requested
  *                       cwd (cross-repo fresh, #73); returns a LAUNCH receipt only, and the new
  *                       address arrives later as the sender envelope of the sibling's nonce callback.
- *   - entwurf_resume_call — reopen ONE DORMANT pi or Claude Code citizen under its OWN garden id
- *                       in a visible window; target-only, submits no prompt, LAUNCH and OBSERVATION
- *                       receipts stay apart, the caller is attributed but grants nothing.
+ *   - entwurf_resume_call — reopen ONE DORMANT pi, pi-durable or Claude Code citizen under its OWN
+ *                       garden id in a visible window or herdr tab; target-only, submits no prompt,
+ *                       LAUNCH and OBSERVATION receipts stay apart, the caller is attributed but
+ *                       grants nothing.
  *   - entwurf_retire_call — one operator-requested target, one retirement attempt; actor is not
  *                       permission, and action / append-record / lock-release receipts stay separate.
  *   - entwurf_callback — ZERO-ARGUMENT fresh-sibling callback. Reads ENTWURF_CALLBACK_TARGET +
@@ -90,7 +91,11 @@ import {
 	type VisibleResumeDeps,
 	visibleResume,
 } from "../../../pi-extensions/lib/entwurf-v2-visible-resume.ts";
-import { dispatchFreshCall, renderDispatchedFreshCall } from "../../../pi-extensions/lib/fresh-call-dispatch.ts";
+import {
+	dispatchFreshCall,
+	dispatchResumeLaunch,
+	renderDispatchedFreshCall,
+} from "../../../pi-extensions/lib/fresh-call-dispatch.ts";
 import {
 	type CodexRequestSender,
 	probeNativeSenderAlive,
@@ -111,7 +116,11 @@ import {
 	readMetaSenderMarker,
 	requireBackend,
 } from "../../../pi-extensions/lib/meta-session.ts";
-import { RESUME_CALL_REJECT_HINT, resumeCall } from "../../../pi-extensions/lib/mux-resume-call.ts";
+import {
+	RESUME_CALL_REJECT_HINT,
+	resumeCall,
+	resumePiDurableCall,
+} from "../../../pi-extensions/lib/mux-resume-call.ts";
 import { registerNativeConversation } from "../../../pi-extensions/lib/native-push/register.ts";
 import {
 	makeLocalTraceFact,
@@ -750,12 +759,23 @@ server.tool(
 // halves, so it is where the mux launcher is handed to the v2 composition. `entwurf-v2-visible-
 // resume` cannot open a window on its own and `mux-resume-call` cannot read a record — that is
 // the import fence in docs/mux-launch-rail.md §11, expressed as a function argument.
-const visibleResumeLaunch: VisibleResumeDeps["launch"] = (input) => {
-	const launched = resumeCall({ backend: input.backend, cwd: input.cwd, runtimeArgs: input.runtimeArgs });
+//
+// #157 G1a: this surface does NOT choose the rail. It hands the fixed tmux mapping below to the
+// shared rail root (`fresh-call-dispatch`), which reads the same capability fact fresh_call reads
+// and, inside herdr, launches the herdr resume instead — never calling this mapping there.
+//
+// #157 B3: a pi-durable resume is the same leaf's second entry, which also carries the fixed adopt
+// projection the v2 side built from its reservation; no other backend can hand it one.
+const tmuxResumeLaunch: VisibleResumeDeps["launch"] = (input) => {
+	const launched =
+		input.backend === "pi-durable"
+			? resumePiDurableCall({ cwd: input.cwd, runtimeArgs: input.runtimeArgs, adoptEnv: input.piDurableAdoptEnv })
+			: resumeCall({ backend: input.backend, cwd: input.cwd, runtimeArgs: input.runtimeArgs });
 	return launched.ok
-		? { ok: true, handle: launched.receipt }
+		? { ok: true, handle: { rail: "tmux", ...launched.receipt } }
 		: { ok: false, reason: launched.reason, hint: RESUME_CALL_REJECT_HINT[launched.reason] };
 };
+const visibleResumeLaunch: VisibleResumeDeps["launch"] = (input) => dispatchResumeLaunch(input, tmuxResumeLaunch);
 
 server.tool(
 	"entwurf_resume_call",

package/mcp/entwurf-bridge/tsconfig.build.json

@@ -153,6 +153,11 @@
 	// standalone compiled adapter consumer proof. Its helper is not TS: the
 	// build script byte-copies pi-extensions/lib/cc-retire-pidfd.py beside the emitted adapter.
 	// Its repo imports (meta-session, entwurf-v2-visible-resume) are ALREADY emitted for the bridge.
+	// WHY pi-durable-owner-fence rides THIS build (#157 B3): the packaged durable bootstrap builds the owner
+	// fence from THIS closure and hands it to every owned open, so an installed Entwurf never imports checkout
+	// TypeScript. Nothing in the bridge graph imports it, so it needs its own entry. Its only repo import is
+	// meta-session.ts, ALREADY emitted for the bridge: ONE leaf JS, ZERO new deps. It is never in index.ts's boot
+	// closure.
 	"include": [
 		"./src/index.ts",
 		"../../protocol.js",
@@ -177,6 +182,7 @@
 		"../../pi-extensions/meta-bridge-pi-durable.ts",
 		"../../pi-extensions/lib/cc-retire-request.ts",
 		// Keep the standalone Pi adapter consumer entry; the public factory also reaches it now.
-		"../../pi-extensions/lib/pi-retire-request.ts"
+		"../../pi-extensions/lib/pi-retire-request.ts",
+		"../../pi-extensions/lib/pi-durable-owner-fence.ts"
 	]
 }

package/native/win32-x64/manifest.json

@@ -12,7 +12,7 @@
 		"windowsTargetPlatformVersion": "10.0.26100.0",
 		"visualStudio": {
 			"displayName": "Visual Studio Enterprise 2026",
-			"installationVersion": "18.11.12315.225"
+			"installationVersion": "18.11.12328.437"
 		}
 	},
 	"source": {

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@junghanacs/entwurf",
-	"version": "0.45.0",
-	"description": "Visible sibling sessions across independent agent harnesses: launch in Herdr or tmux, retire on request and reopen pi or Claude Code in tmux, and deliver messages by garden id; native bridges and Claude/Cortex ACP adapters.",
+	"version": "0.51.0",
+	"description": "Visible sibling sessions across independent agent harnesses: launch in Herdr or tmux, retire on request, visibly reopen supported sessions under the same id, and deliver messages by garden id; native bridges and Claude/Cortex ACP adapters.",
 	"license": "MIT",
 	"author": {
 		"name": "Junghan Kim",
@@ -40,6 +40,8 @@
 	"type": "module",
 	"files": [
 		"ENTWURF.json",
+		"ENTWURF-CLI.json",
+		"team.json.example",
 		"protocol.js",
 		"pi-extensions/",
 		"native/win32-x64/",
@@ -103,23 +105,21 @@
 		"@agentclientprotocol/claude-agent-acp": "0.90.0",
 		"@agentclientprotocol/sdk": "1.8.0",
 		"@anthropic-ai/sdk": "0.100.1",
-		"@earendil-works/chord": "1.4.0",
-		"@earendil-works/pi-agent-core": "1.4.0",
-		"@earendil-works/pi-ai": "1.4.0",
-		"@earendil-works/pi-codemode": "1.4.0",
-		"@earendil-works/pi-coding-agent": "1.4.0",
-		"@earendil-works/pi-durable": "1.4.0",
-		"@earendil-works/pi-mcp": "1.4.0",
-		"@earendil-works/pi-telemetry": "1.4.0",
-		"@earendil-works/pi-tui": "1.4.0",
+		"@earendil-works/chord": "1.5.0",
+		"@earendil-works/pi-agent-core": "1.5.0",
+		"@earendil-works/pi-ai": "1.5.0",
+		"@earendil-works/pi-codemode": "1.5.0",
+		"@earendil-works/pi-coding-agent": "1.5.0",
+		"@earendil-works/pi-durable": "1.5.0",
+		"@earendil-works/pi-mcp": "1.5.0",
+		"@earendil-works/pi-schema": "1.5.0",
+		"@earendil-works/pi-telemetry": "1.5.0",
+		"@earendil-works/pi-tui": "1.5.0",
 		"@modelcontextprotocol/sdk": "^1.12.1",
 		"proper-lockfile": "4.1.2",
 		"smol-toml": "^1.8.0",
 		"zod": "^3.25.0 || ^4.0.0"
 	},
-	"peerDependencies": {
-		"typebox": "*"
-	},
 	"devDependencies": {
 		"@biomejs/biome": "^2.4.13",
 		"@types/node": "^24.3.0",
@@ -159,6 +159,7 @@
 		"check-copilot-statusline": "./run.sh check-copilot-statusline",
 		"check-copilot-launch": "./run.sh check-copilot-launch",
 		"check-pi-launch": "./run.sh check-pi-launch",
+		"check-claude-launch": "./run.sh check-claude-launch",
 		"smoke-copilot-statusline-state": "./run.sh smoke-copilot-statusline-state",
 		"smoke-copilot-mcp-state": "./run.sh smoke-copilot-mcp-state",
 		"smoke-omp-bridge-state": "./run.sh smoke-omp-bridge-state",
@@ -199,7 +200,7 @@
 		"check:toolchain": "pnpm lint && pnpm typecheck",
 		"check:vitest": "./run.sh check-mux-fresh-call && ./run.sh check-acp-sdk-surface && ./run.sh check-pi-queue-oracle && ./run.sh check-tests-beside-behavior && ./run.sh check-remote-pair-installed-audit && ./run.sh check-chain-terminus-publication",
 		"check:contracts": "./run.sh check-demo-reproducibility && ./run.sh check-shell-quote && ./run.sh check-entwurf-session-identity && ./run.sh check-meta-session && ./run.sh check-meta-v3-record && ./run.sh check-mailbox-receipt-state && ./run.sh check-entwurf-capabilities && ./run.sh check-harness-admission-parity && ./run.sh check-capability-bundle-reach && ./run.sh check-meta-mailbox-state-write && ./run.sh check-meta-receiver-marker && ./run.sh check-meta-capability-source && ./run.sh check-model-lock && ./run.sh check-dep-versions && ./run.sh check-node-floor-coherence && ./run.sh check-claude-floor-coherence && ./run.sh check-copilot-statusline && ./run.sh check-pi-import-surface && ./run.sh check-env-namespace && ./run.sh check-pi-runtime-version && ./run.sh check-pi-preflight && ./run.sh check-project-trust-handler && ./run.sh check-entwurf-v2-contract && ./run.sh check-entwurf-v2-send && ./run.sh check-entwurf-v2-runner && ./run.sh check-control-send-receipt && ./run.sh check-control-retire && ./run.sh check-pi-retire-request && ./run.sh check-cc-retire-pidfd && ./run.sh check-cc-retire-request && ./run.sh check-retirement-event && ./run.sh check-entwurf-v2-retire && ./run.sh check-compaction-send-guard && ./run.sh check-entwurf-resume-args && ./run.sh check-entwurf-v2-native-push && ./run.sh check-entwurf-v2-production && ./run.sh check-entwurf-v2-surface && ./run.sh check-entwurf-bridge-pi-free && ./run.sh check-resume-launch-identity && ./run.sh check-mux-placement && ./run.sh check-mux-launch && ./run.sh check-mux-resume-call && ./run.sh check-mux-parent-artifact && ./run.sh check-mux-launcher-fence && ./run.sh check-entwurf-v2-visible-resume && ./run.sh check-control-socket-path && ./run.sh check-win32-preview && ./run.sh check-pack-win32-carrier && ./run.sh check-meta-listing && ./run.sh check-entwurf-fact-provider && ./run.sh check-herdr-placement && ./run.sh check-herdr-fresh-call && ./run.sh check-herdr-supply && ./run.sh check-fresh-call-dispatch && ./run.sh check-fresh-call-provider && ./run.sh check-entwurf-peers-surface && ./run.sh check-entwurf-self-address && ./run.sh check-entwurf-deliverability && ./run.sh check-native-push-adapter && ./run.sh check-native-push-register && ./run.sh check-native-push-paused && ./run.sh check-auth-boundary && ./run.sh check-acp-overlay && ./run.sh check-acp-tool-surface && ./run.sh check-acp-event-mapper && ./run.sh check-acp-prompt-builder && ./run.sh check-acp-config && ./run.sh check-acp-session-store && ./run.sh check-acp-carrier-augment && ./run.sh check-acp-foreground-only && ./run.sh check-acp-set-model-readback && ./run.sh check-acp-vendor-rejection && ./run.sh check-codex-sender-identity && ./run.sh check-codex-native-push && ./run.sh check-agent-guidance-beside && ./run.sh check-pi-durable-beside && ./run.sh check-pi-durable-carrier && ./run.sh check-pi-durable-native-module && ./run.sh check-remote-pair-beside",
-		"check:hermetic": "./run.sh check-bridge-delivery && ./run.sh smoke-pi-attach && ./run.sh check-fresh-cut-gate && ./run.sh check-hook-launch-topology && ./run.sh check-meta-hook-session-switch && ./run.sh check-copilot-birth-hook && ./run.sh check-copilot-receive-arm && ./run.sh check-copilot-launch && ./run.sh check-pi-launch && ./run.sh check-codex-app-server-launch && ./run.sh check-meta-identity-consumers && ./run.sh check-socket-probe && ./run.sh smoke-meta-honesty && ./run.sh check-meta-doctor-oracle && ./run.sh check-agy-permission-matrix && ./run.sh smoke-agy-statusline-state && ./run.sh smoke-copilot-statusline-state && ./run.sh smoke-copilot-mcp-state && ./run.sh smoke-omp-bridge-state && ./run.sh smoke-omp-mcp-state && ./run.sh smoke-omp-receive-state && ./run.sh check-omp-birth-hook && ./run.sh check-omp-receive-arm && ./run.sh check-omp-fresh-preflight && ./run.sh smoke-agy-hooks-state && ./run.sh smoke-pi-provider-state && ./run.sh smoke-user-scope-citizen && ./run.sh smoke-meta-prune && ./run.sh smoke-meta-keyset-guard && ./run.sh check-meta-manifest-schema && ./run.sh check-entwurf-control-rpc && ./run.sh check-entwurf-bridge-boot && ./run.sh check-probe-bridge-command && ./run.sh check-meta-facts && ./run.sh check-peer-facts && ./run.sh check-herdr-plugin && ./run.sh check-herdr-plugin-profile && ./run.sh check-herdr-plugin-build && ./run.sh check-herdr-runtime-bootstrap && ./run.sh check-herdr-activation && ./run.sh check-agy-sender-identity && ./run.sh check-acp-provider-surface && ./run.sh check-acp-stop-reason && ./run.sh check-acp-prompt-lifecycle && ./run.sh check-acp-usage-accounting && ./run.sh check-acp-launch-namespace && ./run.sh check-acp-stream-hooks && ./run.sh check-acp-backend-preflight && ./run.sh check-acp-session-reuse && ./run.sh check-typing-call-fence && ./run.sh check-gate-manifests && ./run.sh check-release-gate-outcomes && ./run.sh check-probe-ordering && ./run.sh check-probe-cli-shim && ./run.sh check-acp-cortex && ./run.sh check-codex-bridge-identity && ./run.sh check-pi-bridge-sender && ./run.sh check-pi-mcp-register && ./run.sh check-pi-mcp-bridge && ./run.sh check-codex-birth-hook && ./run.sh smoke-codex-config-state && ./run.sh smoke-codex-birth && ./run.sh check-herdr-sandbox",
+		"check:hermetic": "./run.sh check-bridge-delivery && ./run.sh smoke-pi-attach && ./run.sh check-fresh-cut-gate && ./run.sh check-hook-launch-topology && ./run.sh check-meta-hook-session-switch && ./run.sh check-copilot-birth-hook && ./run.sh check-copilot-receive-arm && ./run.sh check-copilot-launch && ./run.sh check-pi-launch && ./run.sh check-claude-launch && ./run.sh check-codex-app-server-launch && ./run.sh check-meta-identity-consumers && ./run.sh check-socket-probe && ./run.sh smoke-meta-honesty && ./run.sh check-meta-doctor-oracle && ./run.sh check-agy-permission-matrix && ./run.sh smoke-agy-statusline-state && ./run.sh smoke-copilot-statusline-state && ./run.sh smoke-copilot-mcp-state && ./run.sh smoke-omp-bridge-state && ./run.sh smoke-omp-mcp-state && ./run.sh smoke-omp-receive-state && ./run.sh check-omp-birth-hook && ./run.sh check-omp-receive-arm && ./run.sh check-omp-fresh-preflight && ./run.sh smoke-agy-hooks-state && ./run.sh smoke-pi-provider-state && ./run.sh smoke-user-scope-citizen && ./run.sh smoke-meta-prune && ./run.sh smoke-meta-keyset-guard && ./run.sh check-meta-manifest-schema && ./run.sh check-entwurf-control-rpc && ./run.sh check-entwurf-bridge-boot && ./run.sh check-probe-bridge-command && ./run.sh check-meta-facts && ./run.sh check-peer-facts && ./run.sh check-herdr-plugin && ./run.sh check-herdr-plugin-profile && ./run.sh check-herdr-plugin-build && ./run.sh check-herdr-runtime-bootstrap && ./run.sh check-herdr-activation && ./run.sh check-agy-sender-identity && ./run.sh check-acp-provider-surface && ./run.sh check-acp-stop-reason && ./run.sh check-acp-prompt-lifecycle && ./run.sh check-acp-usage-accounting && ./run.sh check-acp-launch-namespace && ./run.sh check-acp-stream-hooks && ./run.sh check-acp-backend-preflight && ./run.sh check-acp-session-reuse && ./run.sh check-typing-call-fence && ./run.sh check-gate-manifests && ./run.sh check-release-gate-outcomes && ./run.sh check-probe-ordering && ./run.sh check-probe-cli-shim && ./run.sh check-acp-cortex && ./run.sh check-codex-bridge-identity && ./run.sh check-pi-bridge-sender && ./run.sh check-pi-mcp-register && ./run.sh check-pi-mcp-bridge && ./run.sh check-codex-birth-hook && ./run.sh smoke-codex-config-state && ./run.sh smoke-codex-birth && ./run.sh check-herdr-sandbox",
 		"check:package": "./run.sh check-install-surface && ./run.sh smoke-meta-install-state && ./run.sh smoke-agy-install-state && ./run.sh smoke-setup-verdict && ./run.sh check-pack-pin-matcher && ./run.sh check-pack-argv-matcher && ./run.sh check-pack-consumer-roots && ./run.sh check-package-source-routing && ./run.sh check-install-preflight && ./run.sh check-pack"
 	},
 	"pi": {
@@ -217,10 +218,5 @@
 		"entwurf-agy-statusline": "./scripts/agy-statusline.sh",
 		"entwurf-agy-imprint": "./scripts/agy-imprint.sh",
 		"entwurf-copilot-statusline": "./scripts/copilot-statusline.sh"
-	},
-	"peerDependenciesMeta": {
-		"typebox": {
-			"optional": true
-		}
 	}
 }