@junghanacs/entwurf 0.50.0 → 0.52.0

package/run.sh

@@ -1120,7 +1120,7 @@ check_entwurf_v2_contract() {
   # visible-first cut, single verdict per cell, 1 allow / 2 reject. N1
   # indeterminate never dispatches, and nothing on any cell starts a process.
   # R5 taxonomy covers table reasons + pre-claims bad-target/target-locked. Plus
-  # a schema↔types drift guard on the TypeBox input/receipt. Pure, no API.
+  # a schema↔types drift guard on the pi-schema input/receipt. Pure, no API.
   run_ts scripts/check-entwurf-v2-contract.ts
 }
 
@@ -1156,8 +1156,10 @@ check_control_send_receipt() {
   # test titles `run_vitest` emits. Narrow file filter, same reason as check-entwurf-v2-send.
   # It stays inside check:contracts even though the discovery door also runs this file — see
   # check-release-gate-outcomes: a gate a mutant names must be reachable outside qualification.
-  section "control-socket acceptance boundary (mutant execution coordinate)"
-  run_vitest pi-extensions/lib/control-send-receipt.test.ts
+  # #159 adds the three delivery-input seams here as a shared mutant coordinate; discovery remains
+  # the beside glob. This reuses the existing gate instead of adding a second help/catalog surface.
+  section "control-socket acceptance and received guidance (mutant execution coordinate)"
+  run_vitest pi-extensions/lib/control-send-receipt.test.ts pi-extensions/entwurf-control.test.ts pi-extensions/lib/entwurf-v2-mailbox.test.ts pi-extensions/lib/entwurf-v2-native-push.test.ts
 }
 
 check_control_retire() {
@@ -2340,21 +2342,64 @@ function stripBumpLedger(file, text) {
   return kept.join('\n');
 }
 
-let rangeDecls = 0, exactDecls = 0;
+// PUBLISHED-SCOPE REGIONS (#155). Between an SDK bump in this checkout and the release that ships it,
+// an operator doc must keep telling a reader how to install the package that IS on npm — whose Pi
+// range is the previous floor — while the checkout's own sentences already name the new one. Those
+// are two different subjects in one file, so the doc marks the published one explicitly:
+//   <!-- entwurf:published @junghanacs/entwurf@<version> pi <sdk> -->  …  <!-- /entwurf:published -->
+// Inside a region every scan below binds to <sdk>, outside it to the pinned floor. The region is not
+// a skip: it is scanned, it must hold at least one declaration, and after the four-surface assertion
+// below the published-scope claim holds its pair to PUBLISHED_ARTIFACT — a published package's own
+// manifest, frozen here. It is deliberately NOT derived from this checkout (package.json's version,
+// the workspace closure): a published package's contract stays true when the checkout moves on, so a
+// release preparation must not falsify it. `[측정 2026-11-03]` the source-only qualification snapshot
+// has no .git, so a release tag cannot be that oracle either.
+const PUBLISHED_OPEN = /<!-- entwurf:published @junghanacs\/entwurf@(\d+\.\d+\.\d+) pi (\d+\.\d+\.\d+) -->/g;
+const PUBLISHED_CLOSE = '<!-- /entwurf:published -->';
+function publishedRegions(text) {
+  const regions = [], problems = [];
+  let from = 0;
+  for (const open of text.matchAll(PUBLISHED_OPEN)) {
+    if (open.index < from) { problems.push(`a region opens inside the previous one at offset ${open.index}`); continue; }
+    const end = text.indexOf(PUBLISHED_CLOSE, open.index);
+    const next = text.slice(open.index + open[0].length).search(/<!-- entwurf:published /);
+    if (end < 0 || (next >= 0 && open.index + open[0].length + next < end)) { problems.push(`the region opened by "${open[0]}" is not closed before the next one`); continue; }
+    regions.push({ start: open.index, end, version: open[1], sdk: open[2], body: text.slice(open.index, end) });
+    from = end + PUBLISHED_CLOSE.length;
+  }
+  const opens = [...text.matchAll(/<!-- entwurf:published /g)].length;
+  const closes = text.split(PUBLISHED_CLOSE).length - 1;
+  if (opens !== regions.length + problems.length) problems.push(`${opens - regions.length} published marker(s) do not have the exact opening shape`);
+  if (closes !== regions.length) problems.push(`${closes} closing marker(s) for ${regions.length} region(s)`);
+  return { regions, problems };
+}
+const floorAt = (regions, index) => regions.find((r) => index > r.start && index < r.end)?.sdk ?? piAi;
+const nextMinor = (v) => { const [a, b] = v.split('.').map(Number); return `${a}.${b + 1}`; };
+
+let rangeDecls = 0, exactDecls = 0, sourceRangeDecls = 0;
 for (const file of BASELINE_DOCS) {
   const text = stripBumpLedger(file, readFileSync(file, 'utf8'));
+  const { regions } = publishedRegions(text);
   // Closed-range declarations: `>=<floor> <<major>.<ceiling>` (spaces optional).
-  for (const [decl, floor, ceilMajor, ceilMinor] of text.matchAll(/>=\s?(\d+\.\d+\.\d+)\s?<\s?(\d+)\.(\d+)/g)) {
+  for (const m of text.matchAll(/>=\s?(\d+\.\d+\.\d+)\s?<\s?(\d+)\.(\d+)/g)) {
+    const [decl, floor, ceilMajor, ceilMinor] = m;
+    const want = floorAt(regions, m.index);
     rangeDecls++;
-    assert.equal(floor, piAi,
-      `${file}: declared pi floor in "${decl}" is ${floor}, but the pinned SDK is ${piAi} — a baseline doc may not advertise a version no gate drives`);
-    assert.equal(`${ceilMajor}.${ceilMinor}`, `${piMaj}.${piMin + 1}`,
-      `${file}: declared pi ceiling in "${decl}" must be the next minor (${piMaj}.${piMin + 1})`);
+    if (want === piAi) sourceRangeDecls++;
+    assert.equal(floor, want, want === piAi
+      ? `${file}: declared pi floor in "${decl}" is ${floor}, but the pinned SDK is ${piAi} — a baseline doc may not advertise a version no gate drives`
+      : `${file}: declared pi floor in "${decl}" is ${floor}, but its published-scope region names pi ${want}`);
+    assert.equal(`${ceilMajor}.${ceilMinor}`, nextMinor(want),
+      `${file}: declared pi ceiling in "${decl}" must be the next minor (${nextMinor(want)})`);
   }
   // Exact install pins: `@earendil-works/pi-<pkg>@<version>`.
-  for (const [decl, ver] of text.matchAll(/@earendil-works\/pi-(?:ai|coding-agent|tui)@(\d+\.\d+\.\d+)/g)) {
+  for (const m of text.matchAll(/@earendil-works\/pi-(?:ai|coding-agent|tui)@(\d+\.\d+\.\d+)/g)) {
+    const [decl, ver] = m;
+    const want = floorAt(regions, m.index);
     exactDecls++;
-    assert.equal(ver, piAi, `${file}: install example "${decl}" pins ${ver}, but the pinned SDK is ${piAi}`);
+    assert.equal(ver, want, want === piAi
+      ? `${file}: install example "${decl}" pins ${ver}, but the pinned SDK is ${piAi}`
+      : `${file}: install example "${decl}" pins ${ver}, but its published-scope region names pi ${want}`);
   }
 }
 // Prose declarations carry the pin in sentences the two patterns above cannot
@@ -2366,9 +2411,11 @@ const PROSE_DECLS = [
   ['ROADMAP.md', /floor = \*\*(\d+\.\d+\.\d+)\*\*/, 'floor = **<version>**'],
 ];
 for (const [file, re, shape] of PROSE_DECLS) {
-  const m = readFileSync(file, 'utf8').match(re);
+  const text = readFileSync(file, 'utf8');
+  const m = text.match(re);
   assert.ok(m, `${file}: the baseline sentence "${shape}" is gone — restore it or update check-dep-versions; a doc reword must not silently drop the pin from the gate`);
-  assert.equal(m[1], piAi, `${file}: "${shape}" declares ${m[1]}, but the pinned SDK is ${piAi}`);
+  const want = floorAt(publishedRegions(text).regions, m.index);
+  assert.equal(m[1], want, `${file}: "${shape}" declares ${m[1]}, but the ${want === piAi ? 'pinned SDK' : 'published-scope region'} is ${want}`);
 }
 // ── #120 P4: ONE FLOOR, FOUR MECHANICAL SURFACES ──────────────────────────
 // The bump is mostly a number substitution, and that is exactly how a bump goes
@@ -2390,6 +2437,8 @@ const PI_CONSTELLATION = [
   '@earendil-works/pi-codemode', '@earendil-works/pi-mcp',
   // #130: the durable library the pi-durable carrier imports — a production dependency since 0.32.
   '@earendil-works/pi-durable',
+  // `[측정 2026-11-03]` 1.5.0 (#155): pi-schema joins — declared by chord, pi-agent-core, pi-ai and pi-durable.
+  '@earendil-works/pi-schema',
 ];
 const sameSet = (got, want, where) => {
   const missing = want.filter((n) => !got.includes(n));
@@ -2404,7 +2453,7 @@ for (const [, name, ver] of runSh.matchAll(/"(@earendil-works\/[a-z-]+)@(\d+\.\d
   if (ver !== piAi) floorGaps.push(`run.sh install constellation: ${name}@${ver} is not the floor ${piAi}`);
 }
 sameSet(installed, PI_CONSTELLATION, 'run.sh install constellation');
-// pnpm-workspace.yaml minimumReleaseAgeExclude: the same eight, each ADMITTING the
+// pnpm-workspace.yaml minimumReleaseAgeExclude: the same constellation, each ADMITTING the
 // current floor. History stays (`0.85.0 || 0.85.1 || …`) — only the newest term is
 // the contract, because that is what an install resolves against.
 const closure = [...readFileSync('pnpm-workspace.yaml', 'utf8').matchAll(/^\s*-\s*'(@earendil-works\/[a-z-]+)@([^']+)'/gm)];
@@ -2437,22 +2486,65 @@ const CURRENT_CONTRACT_DECLS = [
   ['docs/acp-backend-rail.md', /SDK exact `(\d+\.\d+\.\d+)`, host `(>=[\d.]+ <\d+\.\d+)`/, "the ACP support row's exact+range pair"],
 ];
 for (const [file, re, shape] of CURRENT_CONTRACT_DECLS) {
-  const m = readFileSync(file, 'utf8').match(re);
+  const text = readFileSync(file, 'utf8');
+  const m = text.match(re);
   if (!m) { floorGaps.push(`${file}: ${shape} is gone — a reworded current-contract sentence must fail loud, not drop out silently`); continue; }
+  // A sentence inside a published-scope region states the published package's contract; it is
+  // held to that region's pi here and the region itself to its oracles below.
+  const floor = floorAt(publishedRegions(text).regions, m.index);
+  const range = `>=${floor} <${nextMinor(floor)}`;
   for (const captured of m.slice(1)) {
-    const expected = captured.startsWith('>=') ? nextFloorRange : piAi;
-    if (captured !== expected) floorGaps.push(`${file}: ${shape} declares "${captured}", but the floor is ${piAi} (${nextFloorRange})`);
+    const expected = captured.startsWith('>=') ? range : floor;
+    if (captured !== expected) floorGaps.push(`${file}: ${shape} declares "${captured}", but the ${floor === piAi ? 'floor' : 'published-scope region'} is ${floor} (${range})`);
   }
 }
 assert.deepEqual(floorGaps, [],
   `[QK:PI-FLOOR-SINGLE-SOURCE] the pi floor is declared on four mechanical surfaces — the durable pin's SDK set with package.json's exact production dependencies, run.sh's install constellation, the pnpm workspace closure, and the current-contract sentences in the docs — and every one of them must name the SAME floor. A bump that moves three of the four is the ordinary way this breaks, and the surface left behind is the one nothing else reads`);
 
+// The published-scope regions' own oracle (see PUBLISHED-SCOPE REGIONS above). Checked after the
+// four surfaces so a stranded closure row is still attributed to the claim above.
+// PUBLISHED_ARTIFACT is the one published pair a region may name, copied from the artifact, not from
+// this checkout. Read 2026-11-11 from package/package.json in the preserved registry-accepted
+// 0.51.0 release TGZ (TGZ SHA256 04fcce26d0a6dec8b8bb9a7f14a843eee0defb313aedafa34080600853d36e4d;
+// raw manifest SHA256 b5043ba8edde6f2b9d13052a98c3cd808a3b30f1023da41b22ee022470a96120).
+// Its ten @earendil-works production dependencies are exact 1.5.0, independent of this checkout.
+const PUBLISHED_ARTIFACT = {
+  version: '0.51.0',
+  dependencies: {
+    '@earendil-works/chord': '1.5.0', '@earendil-works/pi-agent-core': '1.5.0', '@earendil-works/pi-ai': '1.5.0',
+    '@earendil-works/pi-codemode': '1.5.0', '@earendil-works/pi-coding-agent': '1.5.0', '@earendil-works/pi-durable': '1.5.0',
+    '@earendil-works/pi-mcp': '1.5.0', '@earendil-works/pi-schema': '1.5.0', '@earendil-works/pi-telemetry': '1.5.0', '@earendil-works/pi-tui': '1.5.0',
+  },
+};
+const publishedSdk = [...new Set(Object.values(PUBLISHED_ARTIFACT.dependencies))];
+const publishedGaps = [];
+if (publishedSdk.length !== 1) publishedGaps.push(`PUBLISHED_ARTIFACT ${PUBLISHED_ARTIFACT.version} carries no single SDK generation (${publishedSdk.join(', ')})`);
+let publishedRegionCount = 0;
+const PUBLISHED_REGION_MAX_LINES = 40;
+for (const file of [...new Set([...BASELINE_DOCS, ...CURRENT_CONTRACT_DECLS.map(([f]) => f)])]) {
+  const { regions, problems } = publishedRegions(readFileSync(file, 'utf8'));
+  for (const p of problems) publishedGaps.push(`${file}: ${p}`);
+  for (const r of regions) {
+    publishedRegionCount++;
+    const where = `${file}: region "@junghanacs/entwurf@${r.version} pi ${r.sdk}"`;
+    if (r.version !== PUBLISHED_ARTIFACT.version) publishedGaps.push(`${where} names a package no frozen published manifest records (only @junghanacs/entwurf@${PUBLISHED_ARTIFACT.version})`);
+    else if (publishedSdk.length !== 1 || r.sdk !== publishedSdk[0]) publishedGaps.push(`${where} names pi ${r.sdk}, but the published ${r.version} manifest ships pi ${publishedSdk.join(' | ')}`);
+    const decls = [...r.body.matchAll(/>=\s?\d+\.\d+\.\d+\s?<\s?\d+\.\d+|@earendil-works\/pi-(?:ai|coding-agent|tui)@\d+\.\d+\.\d+/g)].length;
+    if (decls === 0) publishedGaps.push(`${where} holds no pi declaration — an empty region only hides prose from the scan`);
+    const lines = r.body.split('\n').length;
+    if (lines > PUBLISHED_REGION_MAX_LINES) publishedGaps.push(`${where} spans ${lines} lines (max ${PUBLISHED_REGION_MAX_LINES}) — mark the table, example or sentence, not the section around it`);
+  }
+}
+if (publishedRegionCount > 0 && sourceRangeDecls < 2) publishedGaps.push(`only ${sourceRangeDecls} range declaration(s) remain outside published-scope regions — the checkout's own floor must still be declared where this gate reads it`);
+assert.deepEqual(publishedGaps, [],
+  `[QK:PI-FLOOR-PUBLISHED-SCOPE] a published-scope region in a baseline doc names a published package and the SDK its frozen manifest ships (PUBLISHED_ARTIFACT, independent of this checkout's version and closure), holds at least one declaration, stays narrow, and leaves the checkout's floor declared outside it`);
+
 // Guard the guard: if the patterns ever stop matching, the loops above pass
 // vacuously and the docs fall back OUT of the gate without a word.
 assert.ok(rangeDecls >= 5, `expected at least 5 pi range declarations across the baseline docs, found ${rangeDecls} — the doc scan matched (almost) nothing and would pass vacuously`);
 assert.ok(exactDecls >= 1, `expected at least 1 exact pi install pin in the baseline docs, found ${exactDecls}`);
 
-console.log(`[check-dep-versions] ok — pi ${piAi} is coherent across the durable pin's SDK set, package.json (exact production dependencies, no dev/peer duplicate), run.sh (install pins), and ${BASELINE_DOCS.length} baseline docs (${rangeDecls} range + ${exactDecls} exact + ${PROSE_DECLS.length} prose declarations)`);
+console.log(`[check-dep-versions] ok — pi ${piAi} is coherent across the durable pin's SDK set, package.json (exact production dependencies, no dev/peer duplicate), run.sh (install pins), and ${BASELINE_DOCS.length} baseline docs (${rangeDecls} range + ${exactDecls} exact + ${PROSE_DECLS.length} prose declarations; ${publishedRegionCount} published-scope region(s))`);
 EOF
   )
 }
@@ -4040,7 +4132,7 @@ check_pack_win32_carrier() {
 #     which is exactly what property (1)'s `(_|$)` absorbs; all three shapes are fixtures
 #     below so a future suffix change cannot pass vacuously.)
 pack_install_leaked_pi() {
-  grep '^@earendil-works+' | grep -Ev '@1\.4\.0(_|$)' || true
+  grep '^@earendil-works+' | grep -Ev '@1\.5\.2(_|$)' || true
 }
 
 # Matcher self-test on SYNTHETIC lookalikes: a healthy install tree cannot exercise either
@@ -4057,18 +4149,18 @@ check_pack_pin_matcher() {
   # Cell 1 — the version boundary. Every measured peer-hash shape is a fixture: the
   # 0.84.4-era `_@modelcontextprotocol+sdk@…`, the `_ws@8.21.3` observed on a real
   # 0.85.1 tree, and `[측정 2026-09-20]` the combined suffix a 0.86.0 install carries.
-  # None may leak; the two lookalikes must — a PREFIX-EXTENDED version (`1.4.0-beta.1`,
+  # None may leak; the two lookalikes must — a PREFIX-EXTENDED version (`1.5.2-beta.1`,
   # the prerelease shape that an unanchored match would bless) and an off-pin version.
   matcher_probe=$(printf '%s\n' \
-    '@earendil-works+pi-ai@1.4.0' \
-    '@earendil-works+pi-ai@1.4.0_@modelcontextprotocol+sdk@1.29.0_zod@4.3.6' \
-    '@earendil-works+pi-ai@1.4.0_ws@8.21.3' \
-    '@earendil-works+pi-ai@1.4.0_@modelcontextprotocol+sdk@1.29.0_zod@4.3.6__ws@8.21.3_zod@4.3.6' \
-    '@earendil-works+pi-ai@1.4.0-beta.1' \
+    '@earendil-works+pi-ai@1.5.2' \
+    '@earendil-works+pi-ai@1.5.2_@modelcontextprotocol+sdk@1.29.0_zod@4.3.6' \
+    '@earendil-works+pi-ai@1.5.2_ws@8.21.3' \
+    '@earendil-works+pi-ai@1.5.2_@modelcontextprotocol+sdk@1.29.0_zod@4.3.6__ws@8.21.3_zod@4.3.6' \
+    '@earendil-works+pi-ai@1.5.2-beta.1' \
     '@earendil-works+pi-agent-core@0.87.1' | pack_install_leaked_pi)
-  if [ "$matcher_probe" != '@earendil-works+pi-ai@1.4.0-beta.1
+  if [ "$matcher_probe" != '@earendil-works+pi-ai@1.5.2-beta.1
 @earendil-works+pi-agent-core@0.87.1' ]; then
-    fail "[QK:PACK-INSTALL-PIN-MATCHER-BOUNDED] the pin-leak matcher must flag the prefix-extended 1.4.0-beta.1 and the off-pin 0.87.1 lookalikes, and pass 1.4.0 bare or with any measured peer-hash — got: ${matcher_probe:-<nothing leaked>}"
+    fail "[QK:PACK-INSTALL-PIN-MATCHER-BOUNDED] the pin-leak matcher must flag the prefix-extended 1.5.2-beta.1 and the off-pin 0.87.1 lookalikes, and pass 1.5.2 bare or with any measured peer-hash — got: ${matcher_probe:-<nothing leaked>}"
     return 1
   fi
 
@@ -4076,9 +4168,9 @@ check_pack_pin_matcher() {
   # (0.85.0 onward, still true at 0.99.1). An off-pin chord MUST leak; the pinned one must not. A matcher narrowed
   # back to `^@earendil-works+pi-` sees nothing here and dies at this signature.
   matcher_probe=$(printf '%s\n' \
-    '@earendil-works+chord@1.4.0' \
+    '@earendil-works+chord@1.5.2' \
     '@earendil-works+chord@0.87.1' \
-    '@earendil-works+pi-ai@1.4.0' | pack_install_leaked_pi)
+    '@earendil-works+pi-ai@1.5.2' | pack_install_leaked_pi)
   if [ "$matcher_probe" != '@earendil-works+chord@0.87.1' ]; then
     fail "[QK:PACK-INSTALL-PIN-MATCHER-COVERS-CLOSURE] the pin-leak matcher must cover every @earendil-works closure member, not just the pi-* families — an off-pin @earendil-works/chord has to leak (it was a runtime dependency of pi-coding-agent, pi-agent-core, pi-client and pi-protocol — `[측정 2026-09-20]` at 0.86.0, re-measured `[측정 2026-09-22]` at 0.87.0, `[측정 2026-09-23]` at 0.87.1 and `[측정 2026-09-30]` at 0.99.1, where pi-coding-agent adds pi-codemode and pi-mcp beside them; `[측정 2026-10-13]` at 1.2.0 pi-durable alone declares it) — got: ${matcher_probe:-<nothing leaked>}"
     return 1
@@ -4291,7 +4383,9 @@ ORACLE
   # SDK 1.4 pi-durable imports pi-ai's new `utils/identity`, absent from the older pi-ai control versions
   # checked here (1.0.3 and 1.3.0 both fail to load); pi-telemetry 1.0.3/1.3.0 and chord 1.3.0 lack exports
   # it imports. pi-codemode 1.3.0 loads, and depends on no SDK member, so this tree carries exactly one
-  # depth-2 mismatch (L4 keeps depth 3).
+  # depth-2 mismatch (L4 keeps depth 3). `[측정 2026-11-03]` SDK 1.5.0 pi-durable still loads beside
+  # pi-codemode 1.3.0 (registry tarball, integrity-matched) and 1.4.0 (#155 import probe; its codemode
+  # imports are the root, /portable, /source and /declarations entries), so the control version holds.
   printf '%s\n' "{\"name\":\"pd-mismatch\",\"version\":\"1.0.0\",\"private\":true,\"overrides\":{\"@earendil-works/pi-durable\":{\"@earendil-works/pi-codemode\":\"1.3.0\"}}}" > "$box/pd-mismatch/package.json"
   out=$(cd "$box/pd-mismatch" && npm install "$tgz" --ignore-scripts --no-audit --no-fund 2>&1) || {
     fail "[check-pack-install] pi-durable L3 (mismatch control) install failed:"; echo "$out" | tail -10 | sed 's/^/    /' >&2; return 1; }
@@ -4421,7 +4515,13 @@ ORACLE
   local pin_minor="${pin_ver#*.}"; pin_minor="${pin_minor%%.*}"
   local pin_ceiling="${pin_ver%%.*}.$((pin_minor + 1))"
   mkdir -p "$host_old"
-  for spec in "${host_specs[@]}"; do host_old_specs+=("${spec%@*}@$host_old_ver"); done
+  # The old-host fixture installs the members its own generation had. `[측정 2026-11-03]` pi-schema's
+  # registry versions are 0.0.0-stage, 0.0.0 and 1.5.0 (#155: born with the 1.5 SDK), so it has no
+  # release at the fixed old version — the only member skipped here; the pinned/aligned cells keep all ten.
+  for spec in "${host_specs[@]}"; do
+    [ "${spec%@*}" = '@earendil-works/pi-schema' ] && continue
+    host_old_specs+=("${spec%@*}@$host_old_ver")
+  done
   out=$(cd "$host_old" && npm install "${host_old_specs[@]}" --ignore-scripts --no-audit --no-fund 2>&1) || {
     fail "[check-pack-install] could not install the previous-host pi fixture ($host_old_ver):"; echo "$out" | tail -10 | sed 's/^/    /' >&2; return 1; }
   for cell in old aligned; do
@@ -4986,20 +5086,22 @@ _check_pack_install_impl() {
   # oracle walked 10 member edges with 0 mismatches (.tmp-verify/145-stage1/08-pack-install.log).
   # `[측정 2026-10-22]` at 1.4.0 the nine members are again exact 1.4.0 edges (registry manifests; #148 S0),
   # and pi-tui 1.4.0 adds one third-party dependency (marked-cjk-friendly 0.1.2) outside the closure.
-  echo "[check-pack-install] pnpm add into $tmp (with the aligned 1.4.x SDK + chord + codemode + mcp + durable + typebox)"
+  # `[측정 2026-11-03]` at 1.5.0 the set grows to ten: pi-schema 1.5.0 is new and declared by chord,
+  # pi-agent-core, pi-ai and pi-durable; every member edge is exact 1.5.0 (registry manifests; #155).
+  echo "[check-pack-install] pnpm add into $tmp (with the aligned 1.5.x SDK + chord + codemode + mcp + durable + schema)"
   local install_log
   install_log=$(cd "$tmp" && pnpm add \
     "$tgz_path" \
-    "@earendil-works/pi-ai@1.4.0" \
-    "@earendil-works/pi-coding-agent@1.4.0" \
-    "@earendil-works/pi-tui@1.4.0" \
-    "@earendil-works/pi-agent-core@1.4.0" \
-    "@earendil-works/pi-telemetry@1.4.0" \
-    "@earendil-works/chord@1.4.0" \
-    "@earendil-works/pi-codemode@1.4.0" \
-    "@earendil-works/pi-mcp@1.4.0" \
-    "@earendil-works/pi-durable@1.4.0" \
-    "typebox@latest" \
+    "@earendil-works/pi-ai@1.5.2" \
+    "@earendil-works/pi-coding-agent@1.5.2" \
+    "@earendil-works/pi-tui@1.5.2" \
+    "@earendil-works/pi-agent-core@1.5.2" \
+    "@earendil-works/pi-telemetry@1.5.2" \
+    "@earendil-works/chord@1.5.2" \
+    "@earendil-works/pi-codemode@1.5.2" \
+    "@earendil-works/pi-mcp@1.5.2" \
+    "@earendil-works/pi-durable@1.5.2" \
+    "@earendil-works/pi-schema@1.5.2" \
     --ignore-workspace --ignore-scripts 2>&1) || {
     fail "[check-pack-install] pnpm add failed:"
     echo "$install_log" | tail -10 | sed 's/^/    /' >&2
@@ -5008,17 +5110,17 @@ _check_pack_install_impl() {
 
   # A pin is a wish until the resolved tree is read back. Assert it: EVERY
   # @earendil-works package present — direct or transitive, top level or nested,
-  # chord included — must be the pinned 0.86.0. Anything else means an unpinned caret
+  # chord included — must be the pinned 1.5.2. Anything else means an unpinned caret
   # floated and the rest of this gate would be exercising a runtime nobody verified,
-  # while still printing "pinned pi 0.86.0". Fail loud instead of proving the wrong floor.
+  # while still printing a pinned runtime. Fail loud instead of proving the wrong floor.
   local leaked_pi
   leaked_pi=$(ls "$tmp/node_modules/.pnpm" 2>/dev/null | pack_install_leaked_pi)
   if [ -n "$leaked_pi" ]; then
-    fail "[check-pack-install] UNVERIFIED pi runtime resolved into the install tree (expected only 1.4.0):"
+    fail "[check-pack-install] UNVERIFIED pi runtime resolved into the install tree (expected only 1.5.2):"
     printf '%s\n' "$leaked_pi" | sed 's/^/    /' >&2
     return 1
   fi
-  echo "[check-pack-install] pi runtime tree pin verified: every @earendil-works package is 1.4.0 (chord and pi-durable included)"
+  echo "[check-pack-install] pi runtime tree pin verified: every @earendil-works package is 1.5.2 (chord, pi-durable and pi-schema included)"
 
   # Resolve the installed package.json and confirm pi.extensions
   # arrived intact. If pi.extensions is empty or missing, the

package/scripts/check-entwurf-v2-contract.ts

@@ -25,7 +25,7 @@
  *   - R5: taxonomy covers the table reasons + pre-claims bad-target /
  *     target-locked (so bucket B F2 won't reopen it), and
  *     is PRE-DISPATCH only (no send-fail-fallback member).
- *   - schema ↔ types drift guard: the TypeBox input/receipt property keysets and
+ *   - schema ↔ types drift guard: the pi-schema input/receipt property keysets and
  *     the StringEnum members match the hand-written contract constants.
  */
 
@@ -82,7 +82,7 @@ function eq(label: string, actual: unknown, expected: unknown): void {
 }
 
 // Pull the literal members out of a StringEnum / Optional(StringEnum) schema,
-// whichever shape typebox emits — so the schema↔const drift guard is real.
+// whichever shape the schema builder emits — so the schema↔const drift guard is real.
 function enumValues(schema: unknown): string[] {
 	const s = schema as { enum?: unknown[]; anyOf?: { const?: unknown }[] };
 	if (Array.isArray(s?.enum)) return s.enum.map(String);
@@ -626,8 +626,8 @@ ok(
 	!("action" in rej) && !("transport" in rej) && !("ownership" in rej),
 );
 eq("receipt.reject.reason enum === ENTWURF_V2_REJECT_REASONS", enumValues(rej.reason), [...ENTWURF_V2_REJECT_REASONS]);
-// ？6: reject.observedLiveness is a required-nullable union — Type.Union([StringEnum
-// (FACT_LIVENESSES), Type.Null()]) — NOT Optional and NOT a bare StringEnum. The
+// ？6: reject.observedLiveness is a required-nullable union — union([StringEnum
+// (FACT_LIVENESSES), nul()]) — NOT Optional and NOT a bare StringEnum. The
 // key is always present (required), the value may be a 4-value liveness OR null.
 const rejLiveness = rej.observedLiveness as { anyOf?: { type?: string }[] };
 eq("？6: receipt.reject.observedLiveness is a 2-branch union (liveness | null)", rejLiveness.anyOf?.length, 2);

package/scripts/check-entwurf-v2-surface.ts

@@ -92,7 +92,7 @@ function assertRailSemantics(tag: string, longDescRaw: string, intentDescRaw: st
 	);
 	ok(
 		`${tag} — long description names the THIRD result for an unsupported citizen`,
-		/mailbox-undeliverable/.test(longDesc) && /THIRD RESULT/.test(longDesc),
+		/mailbox-undeliverable/.test(longDesc) && /target without a live socket, the THIRD RESULT/.test(longDesc),
 	);
 	ok(
 		`${tag} — intent param names a rail's reject, not only its allow cell`,
@@ -139,30 +139,16 @@ function assertRailSemantics(tag: string, longDescRaw: string, intentDescRaw: st
  * whose subject (two distinct OWNED rejects) left with the `owned-outcome` intent.
  *
  * After the visible-first cut a dormant socket-domain citizen rejects delivery by v2, and
- * these four strings are the only place a caller learns that BEFORE spending a dispatch. So each
- * one must, on its own:
- *   - name the reason it will actually get back (`dormant-fire-forget-unsupported`);
- *   - name the intent that used to answer there (`owned-outcome`) — silently deleting it leaves
- *     an operator who read last week's docs with no way to find out what happened;
- *   - say it was `withdrawn`, ADJACENTLY to that name. Presence alone is not enough: naming a
- *     retired intent without the retirement verb beside it reads as an offer, which is exactly
- *     the "advertised as selectable" failure this claim exists to forbid;
- *   - carry NEITHER retired advertisement form (`owned-outcome = …` enum styling, or the old
- *     "DORMANT socket-domain citizen … never auto-converted" sentence that described picking it).
- *
- * ORDER IS LOAD-BEARING, and not for readability. `ok` throws on the FIRST failure, and the kill
- * signature is read off the failing line — so the `[QK:…]` label must sit on the assertion this
- * claim's mutant reaches FIRST. That mutant drops the reason AND the withdrawal in one edit; with
- * the reason check leading, an UNLABELLED line would throw first and the kill would read as
- * WRONG-REASON. The adjacency check therefore goes first and carries the only token; the other two
- * run unlabelled behind it — still real assertions, just not this claim's signature.
+ * both caller-facing strings must independently name the actual dormant rejection and say that
+ * delivery never launches or resumes a process. Neither may advertise the retired offer. History
+ * belongs in the issue and literal amendment, not in the current caller contract. The labelled
+ * assertion comes first because qualification reads the first failing line as the kill signature.
  */
 function assertDormantHonesty(tag: string, rawText: string): void {
 	const text = rawText;
-	const at = text.indexOf("owned-outcome");
 	ok(
-		`${tag} — names the withdrawn intent owned-outcome and says "withdrawn" beside it (not as an offer) [QK:V2SURF-DORMANT-HONESTY]`,
-		at >= 0 && /withdrawn/.test(text.slice(at, at + 200)),
+		`${tag} — delivery never launches or resumes a process and names the dormant rejection [QK:V2SURF-DORMANT-HONESTY]`,
+		/This delivery verb never launches or resumes a process/.test(text) && /dormant-fire-forget-unsupported/.test(text),
 	);
 	ok(`${tag} — names the reason a dormant target actually returns`, /dormant-fire-forget-unsupported/.test(text));
 	ok(

package/scripts/check-gate-qualification.ts

@@ -3460,7 +3460,7 @@ let manifestCount: number;
 		"pi-retire-request": 6,
 		"retirement-event": 16,
 		"control-retire": 9,
-		"control-send-receipt": 20,
+		"control-send-receipt": 23,
 		"codex-native": 95,
 		"native-push-paused": 1,
 		"chain-terminus-publication": 1,
@@ -3473,11 +3473,11 @@ let manifestCount: number;
 		"copilot-birth": 19,
 		"copilot-launch": 14,
 		"pi-launch": 9,
-		"pi-floor": 3,
+		"pi-floor": 4,
 		"pi-bridge-sender": 4,
 		"pi-mcp-bridge": 2,
 		"pi-mcp-register": 3,
-		"pi-durable": 171,
+		"pi-durable": 186,
 		"copilot-receive": 20,
 		"entwurf-peers": 1,
 		"fresh-call-dispatch": 18,

package/scripts/check-pi-durable-send.ts

@@ -900,7 +900,10 @@ async function cell(): Promise<void> {
 			hostReceiver.ownerKind === "pi-durable-host";
 		ok(
 			`[QK:${QK}-SENDER-REPLYABILITY] the host's receiver marker is armed and owned by the spawned host, and the landed body says what that predicts: replyable (armed ${hostArmed})`,
-			hostArmed && body.includes(`session:     ${hostGid} (meta-session, replyable — reply via entwurf_v2`),
+			hostArmed &&
+				body.includes(
+					`session:     ${hostGid} (meta-session, replyable — when a reply is requested, send the result via entwurf_v2`,
+				),
 		);
 		const hostRecords = fs
 			.readdirSync(dirs.sessions)

package/scripts/lib/codex-fresh-source-receipts.ts

@@ -452,14 +452,20 @@ export function codexSourceToolReceipts(thread: unknown): SourceToolReceipt[] {
 }
 
 function exactSenderInfoSuffix(text: string, nonce: string): string | null {
-	const prefix = `${nonce}\n\n<sender_info>`;
+	// Independent expected frame: never import the producer's guidance as the receipt oracle.
+	const guidance =
+		"\n\n[entwurf: When a reply is requested, send the result via entwurf_v2 to the requested recipient (default: sender_info.sessionId); a local final is not delivery. Honor routing and no-send instructions; an absent or false wants_reply does not cancel a request. A replyable address alone needs no acknowledgment.]";
+	const open = "<sender_info>";
 	const suffix = "</sender_info>";
-	if (!text.startsWith(prefix) || !text.endsWith(suffix)) return null;
-	const json = text.slice(prefix.length, -suffix.length);
-	if (json.includes("\n") || json.includes("<sender_info>")) return null;
+	const at = text.lastIndexOf(open);
+	if (at < 0 || !text.endsWith(suffix)) return null;
+	const json = text.slice(at + open.length, -suffix.length);
+	if (json.includes("\n") || json.includes(open)) return null;
 	try {
-		const sender = JSON.parse(json) as { sessionId?: unknown };
-		return typeof sender.sessionId === "string" ? sender.sessionId : null;
+		const sender = JSON.parse(json) as { sessionId?: unknown; replyable?: unknown };
+		const prefix = `${nonce}${sender.replyable === true ? guidance : ""}\n\n${open}`;
+		if (!text.startsWith(prefix) || !text.endsWith(suffix)) return null;
+		return at === prefix.length - open.length && typeof sender.sessionId === "string" ? sender.sessionId : null;
 	} catch {
 		return null;
 	}

package/scripts/mutants/agent-guidance.json

@@ -6,8 +6,8 @@
 			"claim": "GUIDANCE-REVIEWED-REVISION",
 			"title": "a valid Root revision advances beyond the independently reviewed payload revision while every history entry and decoded tool string remains valid",
 			"subject": "ENTWURF.json",
-			"find": ["\t\"revision\": 19,", "\t\"history\": ["],
-			"replace": ["\t\"revision\": 20,", "\t\"history\": ["],
+			"find": ["\t\"revision\": 20,", "\t\"history\": ["],
+			"replace": ["\t\"revision\": 21,", "\t\"history\": ["],
 			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:GUIDANCE-REVIEWED-REVISION]",

package/scripts/mutants/codex-native.json

@@ -715,9 +715,9 @@
 			"claim": "CODEX-LIVE-RAW-CALLBACK-REQUIRED",
 			"title": "a Pi callback with arbitrary bytes after its sender envelope is accepted as exact",
 			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
-			"find": ["\tif (!text.startsWith(prefix) || !text.endsWith(suffix)) return null;"],
+			"find": ["\tconst suffix = \"</sender_info>\";"],
 			"replace": [
-				"\tif (!text.startsWith(prefix)) return null;\n\tconst suffixAt = text.indexOf(suffix, prefix.length);\n\tif (suffixAt < 0) return null;\n\ttext = text.slice(0, suffixAt + suffix.length);  // mutant: discard callback suffix"
+				"\tconst suffix = \"</sender_info>\";\n\tconst suffixAt = text.indexOf(suffix);\n\tif (suffixAt >= 0) text = text.slice(0, suffixAt + suffix.length);  // mutant: discard callback suffix"
 			],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,

package/scripts/mutants/control-send-receipt.json

@@ -11,7 +11,8 @@
 			"gate": ["bash", "run.sh", "check-control-send-receipt"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:SEND-RECEIPT-IDLE-IS-SENT]",
-			"signatureSource": "pi-extensions/lib/control-send-receipt.test.ts"
+			"signatureSource": "pi-extensions/lib/control-send-receipt.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "SEND-RECEIPT-BUSY-STEER-IS-QUEUED",
@@ -22,7 +23,8 @@
 			"gate": ["bash", "run.sh", "check-control-send-receipt"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:SEND-RECEIPT-BUSY-STEER-IS-QUEUED]",
-			"signatureSource": "pi-extensions/lib/control-send-receipt.test.ts"
+			"signatureSource": "pi-extensions/lib/control-send-receipt.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "SEND-RECEIPT-BUSY-FOLLOWUP-IS-QUEUED",
@@ -33,7 +35,8 @@
 			"gate": ["bash", "run.sh", "check-control-send-receipt"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:SEND-RECEIPT-BUSY-FOLLOWUP-IS-QUEUED]",
-			"signatureSource": "pi-extensions/lib/control-send-receipt.test.ts"
+			"signatureSource": "pi-extensions/lib/control-send-receipt.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "SEND-RECEIPT-UNKNOWN-IS-ACCEPTED-NOT-SENT",
@@ -44,7 +47,8 @@
 			"gate": ["bash", "run.sh", "check-control-send-receipt"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:SEND-RECEIPT-UNKNOWN-IS-ACCEPTED-NOT-SENT]",
-			"signatureSource": "pi-extensions/lib/control-send-receipt.test.ts"
+			"signatureSource": "pi-extensions/lib/control-send-receipt.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "SEND-BOUNDARY-CARRIED",
@@ -194,7 +198,7 @@
 			"claim": "PI-CORE-PIN-TRACKS-FLOOR",
 			"title": "the queue oracle's pi-agent-core pin drifts off the floor the rest of the pi runtime is pinned to, so the oracle keeps answering honestly — about a pi nobody in this repo runs",
 			"subject": "package.json",
-			"find": ["\"@earendil-works/pi-agent-core\": \"1.4.0\","],
+			"find": ["\"@earendil-works/pi-agent-core\": \"1.5.2\","],
 			"replace": ["\"@earendil-works/pi-agent-core\": \"0.87.1\","],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
@@ -240,15 +244,51 @@
 			"title": "the caller-facing outcome list drops the native-push rail, so a caller reading the one blurb it reads before dispatching is told the control rail's vocabulary covers a rail that answers with a direct injection instead",
 			"subject": "ENTWURF.json",
 			"find": [
-				"native-push INJECTION, a rejection, or lock-dirty. This receipt is not the colleague's reply or evidence of reading. EXISTING targets only; discover with "
+				"native-push INJECTION, a rejection, or lock-dirty. A receipt is not a reply or proof of reading. A local final is not delivery:"
 			],
 			"replace": [
-				"a rejection, or lock-dirty. This receipt is not the colleague's reply or evidence of reading. EXISTING targets only; discover with "
+				"a rejection, or lock-dirty. A receipt is not a reply or proof of reading. A local final is not delivery:"
 			],
 			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:SEND-OUTCOME-LIST-NAMES-EVERY-RAIL]",
 			"signatureSource": "scripts/check-entwurf-v2-surface.ts"
+		},
+		{
+			"claim": "PI-RECEIVED-REPLY-GUIDANCE",
+			"title": "the Pi receiver omits guidance for a replyable sender, so a local final can be mistaken for a reply",
+			"subject": "pi-extensions/lib/entwurf-control-rpc.ts",
+			"find": ["sender.replyable === true"],
+			"replace": ["sender.replyable === false"],
+			"gate": ["bash", "run.sh", "check-control-send-receipt"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-RECEIVED-REPLY-GUIDANCE]",
+			"signatureSource": "pi-extensions/entwurf-control.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "MAILBOX-RECEIVED-REPLY-GUIDANCE",
+			"title": "the mailbox receiver's guidance drops the local-final boundary",
+			"subject": "pi-extensions/lib/meta-mailbox-body.ts",
+			"find": ["a local final is not delivery."],
+			"replace": ["a local final is delivery."],
+			"gate": ["bash", "run.sh", "check-control-send-receipt"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MAILBOX-RECEIVED-REPLY-GUIDANCE]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-mailbox.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "NATIVE-PUSH-RECEIVED-REPLY-GUIDANCE",
+			"title": "the native-push receiver's guidance drops the no-send boundary",
+			"subject": "pi-extensions/lib/meta-mailbox-body.ts",
+			"find": ["Honor routing and no-send instructions;"],
+			"replace": ["Ignore routing and no-send instructions;"],
+			"gate": ["bash", "run.sh", "check-control-send-receipt"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:NATIVE-PUSH-RECEIVED-REPLY-GUIDANCE]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-native-push.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		}
 	]
 }