@junghanacs/entwurf 0.51.0 → 0.52.0

package/pi/pi-durable/overlay/upstream-pin.json

@@ -82,8 +82,8 @@
 			{
 				"name": "harness-setup.js",
 				"source": "pi/pi-durable/src/experimental/durable/harness-setup.ts",
-				"blob": "e8561809321ce8833a13e3757c172f4e38faabcc",
-				"sha256": "eb1158030a8ab95187a4fdd5e7b90816a7995e5f446d09a8184d4f5007e7ac5f"
+				"blob": "5a799bfbfbbedbec229761b26f639fbe2702b623",
+				"sha256": "70b50044ab14c1293a2ace53b375dc48ad940ea9eeacc131d498ccb1ce040617"
 			},
 			{
 				"name": "prompt.js",
@@ -100,8 +100,8 @@
 			{
 				"name": "subagent.js",
 				"source": "pi/pi-durable/src/experimental/durable/subagent.ts",
-				"blob": "e842d8a6b8dc55825d0381d803b6d6496b205c19",
-				"sha256": "c9931fabd60f5fbf75220e896a57e5c8b131b4936887bf6f9660d50d01709f3a"
+				"blob": "8c18e24a030f0b701167f15a33579195303f5ac5",
+				"sha256": "208618441e8e81813de2f44fa9ad5d5bdcdbb78a754679bb7a93d82480e7bece"
 			},
 			{
 				"name": "session-name.js",
@@ -138,18 +138,18 @@
 		]
 	},
 	"sdk": {
-		"comment": "The published library set the carrier runs against, derived from the 1.5.0 declarations. members: the @earendil-works packages the carrier imports and every @earendil-works package those declare (1.5.0 adds pi-schema, declared by chord, pi-agent-core, pi-ai and pi-durable). direct: a third-party package a carrier file imports itself (sessions.ts: proper-lockfile, at the version pi-coding-agent 1.5.0 pins). Each is an exact production dependency in package.json. Since 1.3.0 the members' own edges are exact too (upstream #10865), and the installed physical edges are still what must equal these versions.",
+		"comment": "The published library set the carrier runs against, derived from the 1.5.2 declarations. members: the @earendil-works packages the carrier imports and every @earendil-works package those declare (1.5.0 adds pi-schema, declared by chord, pi-agent-core, pi-ai and pi-durable). direct: a third-party package a carrier file imports itself (sessions.ts: proper-lockfile, at the version pi-coding-agent 1.5.2 pins). Each is an exact production dependency in package.json. Since 1.3.0 the members' own edges are exact too (upstream #10865), and the installed physical edges are still what must equal these versions.",
 		"members": {
-			"@earendil-works/chord": "1.5.0",
-			"@earendil-works/pi-agent-core": "1.5.0",
-			"@earendil-works/pi-ai": "1.5.0",
-			"@earendil-works/pi-codemode": "1.5.0",
-			"@earendil-works/pi-coding-agent": "1.5.0",
-			"@earendil-works/pi-durable": "1.5.0",
-			"@earendil-works/pi-mcp": "1.5.0",
-			"@earendil-works/pi-schema": "1.5.0",
-			"@earendil-works/pi-telemetry": "1.5.0",
-			"@earendil-works/pi-tui": "1.5.0"
+			"@earendil-works/chord": "1.5.2",
+			"@earendil-works/pi-agent-core": "1.5.2",
+			"@earendil-works/pi-ai": "1.5.2",
+			"@earendil-works/pi-codemode": "1.5.2",
+			"@earendil-works/pi-coding-agent": "1.5.2",
+			"@earendil-works/pi-durable": "1.5.2",
+			"@earendil-works/pi-mcp": "1.5.2",
+			"@earendil-works/pi-schema": "1.5.2",
+			"@earendil-works/pi-telemetry": "1.5.2",
+			"@earendil-works/pi-tui": "1.5.2"
 		},
 		"direct": {
 			"proper-lockfile": "4.1.2"

package/pi-extensions/lib/entwurf-control-rpc.ts

@@ -50,7 +50,11 @@ export interface SenderEnvelope {
  * renders nothing (etiquette marker, not transport contract).
  */
 export function formatSenderInfoBlock(sender: SenderEnvelope, wantsReply = false): string {
-	return `\n\n<sender_info>${JSON.stringify({
+	const replyGuidance =
+		sender.replyable === true
+			? "\n\n[entwurf: When a reply is requested, send the result via entwurf_v2 to the requested recipient (default: sender_info.sessionId); a local final is not delivery. Honor routing and no-send instructions; an absent or false wants_reply does not cancel a request. A replyable address alone needs no acknowledgment.]"
+			: "";
+	return `${replyGuidance}\n\n<sender_info>${JSON.stringify({
 		sessionId: sender.sessionId,
 		agentId: sender.agentId,
 		cwd: sender.cwd,

package/pi-extensions/lib/meta-mailbox-body.ts

@@ -79,7 +79,7 @@ export function formatMetaMailboxBody(sender: MailboxSenderEnvelope, message: st
 	// SENDING host, so it is neither abbreviated against this host's HOME nor shown as a local path.
 	const remote = !replyable ? sender.remote : undefined;
 	const sessionLine = replyable
-		? `${sender.sessionId} (${kind}replyable — reply via entwurf_v2 to this sessionId, intent=fire-and-forget)`
+		? `${sender.sessionId} (${kind}replyable — when a reply is requested, send the result via entwurf_v2 (intent=fire-and-forget) to the requested recipient, defaulting to this sessionId; a local final is not delivery. Honor routing and no-send instructions; an absent or false wants_reply does not cancel a request. A replyable address alone needs no acknowledgment)`
 		: remote
 			? `${sender.sessionId} (remote via ${remote.via}; ${remote.replyRoute === "declared" ? "reply route declared, not probed" : "no reply route declared"})`
 			: isMeta

package/pi-extensions/meta-bridge-pi-durable.ts

@@ -349,7 +349,7 @@ export interface PiDurableRoots {
 // ---------------------------------------------------------------------------
 // Durable surface, typed NARROWLY and locally — read at pi-durable 1.0.2 @cd32f77 (#129,
 // `harness/types.ts`; historical coordinates, not re-anchored here). The current supply is the
-// carrier emitted from Entwurf's owned source (pi/pi-durable/src, #141) against the 1.5.0 SDK set
+// carrier emitted from Entwurf's owned source (pi/pi-durable/src, #141) against the 1.5.2 SDK set
 // `pi/pi-durable/overlay/upstream-pin.json` names (origin `abe508e`). `[read 2026-10-13]` at
 // v1.2.0 one shape typed below moved: `ToolExecutionResult.content` is now `output`, beside the new
 // `structuredOutput` (`harness/types.ts`, its CHANGELOG's breaking changes). An omitted `output`

package/run.sh

@@ -1156,8 +1156,10 @@ check_control_send_receipt() {
   # test titles `run_vitest` emits. Narrow file filter, same reason as check-entwurf-v2-send.
   # It stays inside check:contracts even though the discovery door also runs this file — see
   # check-release-gate-outcomes: a gate a mutant names must be reachable outside qualification.
-  section "control-socket acceptance boundary (mutant execution coordinate)"
-  run_vitest pi-extensions/lib/control-send-receipt.test.ts
+  # #159 adds the three delivery-input seams here as a shared mutant coordinate; discovery remains
+  # the beside glob. This reuses the existing gate instead of adding a second help/catalog surface.
+  section "control-socket acceptance and received guidance (mutant execution coordinate)"
+  run_vitest pi-extensions/lib/control-send-receipt.test.ts pi-extensions/entwurf-control.test.ts pi-extensions/lib/entwurf-v2-mailbox.test.ts pi-extensions/lib/entwurf-v2-native-push.test.ts
 }
 
 check_control_retire() {
@@ -2502,15 +2504,16 @@ assert.deepEqual(floorGaps, [],
 // The published-scope regions' own oracle (see PUBLISHED-SCOPE REGIONS above). Checked after the
 // four surfaces so a stranded closure row is still attributed to the claim above.
 // PUBLISHED_ARTIFACT is the one published pair a region may name, copied from the artifact, not from
-// this checkout. `[측정 2026-11-03]` the global install of @junghanacs/entwurf@0.50.0 whose bytes #155
-// HOP1 accepted against the registry tarball declares exactly these nine @earendil-works dependencies
-// in its package.json (sha256 20c572534fcfc03e8f89890a0853a25048166f7c998e433945289a5d20ee1234).
+// this checkout. Read 2026-11-11 from package/package.json in the preserved registry-accepted
+// 0.51.0 release TGZ (TGZ SHA256 04fcce26d0a6dec8b8bb9a7f14a843eee0defb313aedafa34080600853d36e4d;
+// raw manifest SHA256 b5043ba8edde6f2b9d13052a98c3cd808a3b30f1023da41b22ee022470a96120).
+// Its ten @earendil-works production dependencies are exact 1.5.0, independent of this checkout.
 const PUBLISHED_ARTIFACT = {
-  version: '0.50.0',
+  version: '0.51.0',
   dependencies: {
-    '@earendil-works/chord': '1.4.0', '@earendil-works/pi-agent-core': '1.4.0', '@earendil-works/pi-ai': '1.4.0',
-    '@earendil-works/pi-codemode': '1.4.0', '@earendil-works/pi-coding-agent': '1.4.0', '@earendil-works/pi-durable': '1.4.0',
-    '@earendil-works/pi-mcp': '1.4.0', '@earendil-works/pi-telemetry': '1.4.0', '@earendil-works/pi-tui': '1.4.0',
+    '@earendil-works/chord': '1.5.0', '@earendil-works/pi-agent-core': '1.5.0', '@earendil-works/pi-ai': '1.5.0',
+    '@earendil-works/pi-codemode': '1.5.0', '@earendil-works/pi-coding-agent': '1.5.0', '@earendil-works/pi-durable': '1.5.0',
+    '@earendil-works/pi-mcp': '1.5.0', '@earendil-works/pi-schema': '1.5.0', '@earendil-works/pi-telemetry': '1.5.0', '@earendil-works/pi-tui': '1.5.0',
   },
 };
 const publishedSdk = [...new Set(Object.values(PUBLISHED_ARTIFACT.dependencies))];
@@ -4129,7 +4132,7 @@ check_pack_win32_carrier() {
 #     which is exactly what property (1)'s `(_|$)` absorbs; all three shapes are fixtures
 #     below so a future suffix change cannot pass vacuously.)
 pack_install_leaked_pi() {
-  grep '^@earendil-works+' | grep -Ev '@1\.5\.0(_|$)' || true
+  grep '^@earendil-works+' | grep -Ev '@1\.5\.2(_|$)' || true
 }
 
 # Matcher self-test on SYNTHETIC lookalikes: a healthy install tree cannot exercise either
@@ -4146,18 +4149,18 @@ check_pack_pin_matcher() {
   # Cell 1 — the version boundary. Every measured peer-hash shape is a fixture: the
   # 0.84.4-era `_@modelcontextprotocol+sdk@…`, the `_ws@8.21.3` observed on a real
   # 0.85.1 tree, and `[측정 2026-09-20]` the combined suffix a 0.86.0 install carries.
-  # None may leak; the two lookalikes must — a PREFIX-EXTENDED version (`1.5.0-beta.1`,
+  # None may leak; the two lookalikes must — a PREFIX-EXTENDED version (`1.5.2-beta.1`,
   # the prerelease shape that an unanchored match would bless) and an off-pin version.
   matcher_probe=$(printf '%s\n' \
-    '@earendil-works+pi-ai@1.5.0' \
-    '@earendil-works+pi-ai@1.5.0_@modelcontextprotocol+sdk@1.29.0_zod@4.3.6' \
-    '@earendil-works+pi-ai@1.5.0_ws@8.21.3' \
-    '@earendil-works+pi-ai@1.5.0_@modelcontextprotocol+sdk@1.29.0_zod@4.3.6__ws@8.21.3_zod@4.3.6' \
-    '@earendil-works+pi-ai@1.5.0-beta.1' \
+    '@earendil-works+pi-ai@1.5.2' \
+    '@earendil-works+pi-ai@1.5.2_@modelcontextprotocol+sdk@1.29.0_zod@4.3.6' \
+    '@earendil-works+pi-ai@1.5.2_ws@8.21.3' \
+    '@earendil-works+pi-ai@1.5.2_@modelcontextprotocol+sdk@1.29.0_zod@4.3.6__ws@8.21.3_zod@4.3.6' \
+    '@earendil-works+pi-ai@1.5.2-beta.1' \
     '@earendil-works+pi-agent-core@0.87.1' | pack_install_leaked_pi)
-  if [ "$matcher_probe" != '@earendil-works+pi-ai@1.5.0-beta.1
+  if [ "$matcher_probe" != '@earendil-works+pi-ai@1.5.2-beta.1
 @earendil-works+pi-agent-core@0.87.1' ]; then
-    fail "[QK:PACK-INSTALL-PIN-MATCHER-BOUNDED] the pin-leak matcher must flag the prefix-extended 1.5.0-beta.1 and the off-pin 0.87.1 lookalikes, and pass 1.5.0 bare or with any measured peer-hash — got: ${matcher_probe:-<nothing leaked>}"
+    fail "[QK:PACK-INSTALL-PIN-MATCHER-BOUNDED] the pin-leak matcher must flag the prefix-extended 1.5.2-beta.1 and the off-pin 0.87.1 lookalikes, and pass 1.5.2 bare or with any measured peer-hash — got: ${matcher_probe:-<nothing leaked>}"
     return 1
   fi
 
@@ -4165,9 +4168,9 @@ check_pack_pin_matcher() {
   # (0.85.0 onward, still true at 0.99.1). An off-pin chord MUST leak; the pinned one must not. A matcher narrowed
   # back to `^@earendil-works+pi-` sees nothing here and dies at this signature.
   matcher_probe=$(printf '%s\n' \
-    '@earendil-works+chord@1.5.0' \
+    '@earendil-works+chord@1.5.2' \
     '@earendil-works+chord@0.87.1' \
-    '@earendil-works+pi-ai@1.5.0' | pack_install_leaked_pi)
+    '@earendil-works+pi-ai@1.5.2' | pack_install_leaked_pi)
   if [ "$matcher_probe" != '@earendil-works+chord@0.87.1' ]; then
     fail "[QK:PACK-INSTALL-PIN-MATCHER-COVERS-CLOSURE] the pin-leak matcher must cover every @earendil-works closure member, not just the pi-* families — an off-pin @earendil-works/chord has to leak (it was a runtime dependency of pi-coding-agent, pi-agent-core, pi-client and pi-protocol — `[측정 2026-09-20]` at 0.86.0, re-measured `[측정 2026-09-22]` at 0.87.0, `[측정 2026-09-23]` at 0.87.1 and `[측정 2026-09-30]` at 0.99.1, where pi-coding-agent adds pi-codemode and pi-mcp beside them; `[측정 2026-10-13]` at 1.2.0 pi-durable alone declares it) — got: ${matcher_probe:-<nothing leaked>}"
     return 1
@@ -5089,16 +5092,16 @@ _check_pack_install_impl() {
   local install_log
   install_log=$(cd "$tmp" && pnpm add \
     "$tgz_path" \
-    "@earendil-works/pi-ai@1.5.0" \
-    "@earendil-works/pi-coding-agent@1.5.0" \
-    "@earendil-works/pi-tui@1.5.0" \
-    "@earendil-works/pi-agent-core@1.5.0" \
-    "@earendil-works/pi-telemetry@1.5.0" \
-    "@earendil-works/chord@1.5.0" \
-    "@earendil-works/pi-codemode@1.5.0" \
-    "@earendil-works/pi-mcp@1.5.0" \
-    "@earendil-works/pi-durable@1.5.0" \
-    "@earendil-works/pi-schema@1.5.0" \
+    "@earendil-works/pi-ai@1.5.2" \
+    "@earendil-works/pi-coding-agent@1.5.2" \
+    "@earendil-works/pi-tui@1.5.2" \
+    "@earendil-works/pi-agent-core@1.5.2" \
+    "@earendil-works/pi-telemetry@1.5.2" \
+    "@earendil-works/chord@1.5.2" \
+    "@earendil-works/pi-codemode@1.5.2" \
+    "@earendil-works/pi-mcp@1.5.2" \
+    "@earendil-works/pi-durable@1.5.2" \
+    "@earendil-works/pi-schema@1.5.2" \
     --ignore-workspace --ignore-scripts 2>&1) || {
     fail "[check-pack-install] pnpm add failed:"
     echo "$install_log" | tail -10 | sed 's/^/    /' >&2
@@ -5107,17 +5110,17 @@ _check_pack_install_impl() {
 
   # A pin is a wish until the resolved tree is read back. Assert it: EVERY
   # @earendil-works package present — direct or transitive, top level or nested,
-  # chord included — must be the pinned 0.86.0. Anything else means an unpinned caret
+  # chord included — must be the pinned 1.5.2. Anything else means an unpinned caret
   # floated and the rest of this gate would be exercising a runtime nobody verified,
-  # while still printing "pinned pi 0.86.0". Fail loud instead of proving the wrong floor.
+  # while still printing a pinned runtime. Fail loud instead of proving the wrong floor.
   local leaked_pi
   leaked_pi=$(ls "$tmp/node_modules/.pnpm" 2>/dev/null | pack_install_leaked_pi)
   if [ -n "$leaked_pi" ]; then
-    fail "[check-pack-install] UNVERIFIED pi runtime resolved into the install tree (expected only 1.5.0):"
+    fail "[check-pack-install] UNVERIFIED pi runtime resolved into the install tree (expected only 1.5.2):"
     printf '%s\n' "$leaked_pi" | sed 's/^/    /' >&2
     return 1
   fi
-  echo "[check-pack-install] pi runtime tree pin verified: every @earendil-works package is 1.5.0 (chord, pi-durable and pi-schema included)"
+  echo "[check-pack-install] pi runtime tree pin verified: every @earendil-works package is 1.5.2 (chord, pi-durable and pi-schema included)"
 
   # Resolve the installed package.json and confirm pi.extensions
   # arrived intact. If pi.extensions is empty or missing, the

package/scripts/check-entwurf-v2-surface.ts

@@ -92,7 +92,7 @@ function assertRailSemantics(tag: string, longDescRaw: string, intentDescRaw: st
 	);
 	ok(
 		`${tag} — long description names the THIRD result for an unsupported citizen`,
-		/mailbox-undeliverable/.test(longDesc) && /THIRD RESULT/.test(longDesc),
+		/mailbox-undeliverable/.test(longDesc) && /target without a live socket, the THIRD RESULT/.test(longDesc),
 	);
 	ok(
 		`${tag} — intent param names a rail's reject, not only its allow cell`,
@@ -139,30 +139,16 @@ function assertRailSemantics(tag: string, longDescRaw: string, intentDescRaw: st
  * whose subject (two distinct OWNED rejects) left with the `owned-outcome` intent.
  *
  * After the visible-first cut a dormant socket-domain citizen rejects delivery by v2, and
- * these four strings are the only place a caller learns that BEFORE spending a dispatch. So each
- * one must, on its own:
- *   - name the reason it will actually get back (`dormant-fire-forget-unsupported`);
- *   - name the intent that used to answer there (`owned-outcome`) — silently deleting it leaves
- *     an operator who read last week's docs with no way to find out what happened;
- *   - say it was `withdrawn`, ADJACENTLY to that name. Presence alone is not enough: naming a
- *     retired intent without the retirement verb beside it reads as an offer, which is exactly
- *     the "advertised as selectable" failure this claim exists to forbid;
- *   - carry NEITHER retired advertisement form (`owned-outcome = …` enum styling, or the old
- *     "DORMANT socket-domain citizen … never auto-converted" sentence that described picking it).
- *
- * ORDER IS LOAD-BEARING, and not for readability. `ok` throws on the FIRST failure, and the kill
- * signature is read off the failing line — so the `[QK:…]` label must sit on the assertion this
- * claim's mutant reaches FIRST. That mutant drops the reason AND the withdrawal in one edit; with
- * the reason check leading, an UNLABELLED line would throw first and the kill would read as
- * WRONG-REASON. The adjacency check therefore goes first and carries the only token; the other two
- * run unlabelled behind it — still real assertions, just not this claim's signature.
+ * both caller-facing strings must independently name the actual dormant rejection and say that
+ * delivery never launches or resumes a process. Neither may advertise the retired offer. History
+ * belongs in the issue and literal amendment, not in the current caller contract. The labelled
+ * assertion comes first because qualification reads the first failing line as the kill signature.
  */
 function assertDormantHonesty(tag: string, rawText: string): void {
 	const text = rawText;
-	const at = text.indexOf("owned-outcome");
 	ok(
-		`${tag} — names the withdrawn intent owned-outcome and says "withdrawn" beside it (not as an offer) [QK:V2SURF-DORMANT-HONESTY]`,
-		at >= 0 && /withdrawn/.test(text.slice(at, at + 200)),
+		`${tag} — delivery never launches or resumes a process and names the dormant rejection [QK:V2SURF-DORMANT-HONESTY]`,
+		/This delivery verb never launches or resumes a process/.test(text) && /dormant-fire-forget-unsupported/.test(text),
 	);
 	ok(`${tag} — names the reason a dormant target actually returns`, /dormant-fire-forget-unsupported/.test(text));
 	ok(

package/scripts/check-gate-qualification.ts

@@ -3460,7 +3460,7 @@ let manifestCount: number;
 		"pi-retire-request": 6,
 		"retirement-event": 16,
 		"control-retire": 9,
-		"control-send-receipt": 20,
+		"control-send-receipt": 23,
 		"codex-native": 95,
 		"native-push-paused": 1,
 		"chain-terminus-publication": 1,

package/scripts/check-pi-durable-send.ts

@@ -900,7 +900,10 @@ async function cell(): Promise<void> {
 			hostReceiver.ownerKind === "pi-durable-host";
 		ok(
 			`[QK:${QK}-SENDER-REPLYABILITY] the host's receiver marker is armed and owned by the spawned host, and the landed body says what that predicts: replyable (armed ${hostArmed})`,
-			hostArmed && body.includes(`session:     ${hostGid} (meta-session, replyable — reply via entwurf_v2`),
+			hostArmed &&
+				body.includes(
+					`session:     ${hostGid} (meta-session, replyable — when a reply is requested, send the result via entwurf_v2`,
+				),
 		);
 		const hostRecords = fs
 			.readdirSync(dirs.sessions)

package/scripts/lib/codex-fresh-source-receipts.ts

@@ -452,14 +452,20 @@ export function codexSourceToolReceipts(thread: unknown): SourceToolReceipt[] {
 }
 
 function exactSenderInfoSuffix(text: string, nonce: string): string | null {
-	const prefix = `${nonce}\n\n<sender_info>`;
+	// Independent expected frame: never import the producer's guidance as the receipt oracle.
+	const guidance =
+		"\n\n[entwurf: When a reply is requested, send the result via entwurf_v2 to the requested recipient (default: sender_info.sessionId); a local final is not delivery. Honor routing and no-send instructions; an absent or false wants_reply does not cancel a request. A replyable address alone needs no acknowledgment.]";
+	const open = "<sender_info>";
 	const suffix = "</sender_info>";
-	if (!text.startsWith(prefix) || !text.endsWith(suffix)) return null;
-	const json = text.slice(prefix.length, -suffix.length);
-	if (json.includes("\n") || json.includes("<sender_info>")) return null;
+	const at = text.lastIndexOf(open);
+	if (at < 0 || !text.endsWith(suffix)) return null;
+	const json = text.slice(at + open.length, -suffix.length);
+	if (json.includes("\n") || json.includes(open)) return null;
 	try {
-		const sender = JSON.parse(json) as { sessionId?: unknown };
-		return typeof sender.sessionId === "string" ? sender.sessionId : null;
+		const sender = JSON.parse(json) as { sessionId?: unknown; replyable?: unknown };
+		const prefix = `${nonce}${sender.replyable === true ? guidance : ""}\n\n${open}`;
+		if (!text.startsWith(prefix) || !text.endsWith(suffix)) return null;
+		return at === prefix.length - open.length && typeof sender.sessionId === "string" ? sender.sessionId : null;
 	} catch {
 		return null;
 	}

package/scripts/mutants/agent-guidance.json

@@ -6,8 +6,8 @@
 			"claim": "GUIDANCE-REVIEWED-REVISION",
 			"title": "a valid Root revision advances beyond the independently reviewed payload revision while every history entry and decoded tool string remains valid",
 			"subject": "ENTWURF.json",
-			"find": ["\t\"revision\": 19,", "\t\"history\": ["],
-			"replace": ["\t\"revision\": 20,", "\t\"history\": ["],
+			"find": ["\t\"revision\": 20,", "\t\"history\": ["],
+			"replace": ["\t\"revision\": 21,", "\t\"history\": ["],
 			"gate": ["bash", "run.sh", "check-agent-guidance-beside"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:GUIDANCE-REVIEWED-REVISION]",

package/scripts/mutants/codex-native.json

@@ -715,9 +715,9 @@
 			"claim": "CODEX-LIVE-RAW-CALLBACK-REQUIRED",
 			"title": "a Pi callback with arbitrary bytes after its sender envelope is accepted as exact",
 			"subject": "scripts/lib/codex-fresh-source-receipts.ts",
-			"find": ["\tif (!text.startsWith(prefix) || !text.endsWith(suffix)) return null;"],
+			"find": ["\tconst suffix = \"</sender_info>\";"],
 			"replace": [
-				"\tif (!text.startsWith(prefix)) return null;\n\tconst suffixAt = text.indexOf(suffix, prefix.length);\n\tif (suffixAt < 0) return null;\n\ttext = text.slice(0, suffixAt + suffix.length);  // mutant: discard callback suffix"
+				"\tconst suffix = \"</sender_info>\";\n\tconst suffixAt = text.indexOf(suffix);\n\tif (suffixAt >= 0) text = text.slice(0, suffixAt + suffix.length);  // mutant: discard callback suffix"
 			],
 			"gate": ["bash", "run.sh", "check-mux-fresh-call"],
 			"timeoutSeconds": 180,

package/scripts/mutants/control-send-receipt.json

@@ -11,7 +11,8 @@
 			"gate": ["bash", "run.sh", "check-control-send-receipt"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:SEND-RECEIPT-IDLE-IS-SENT]",
-			"signatureSource": "pi-extensions/lib/control-send-receipt.test.ts"
+			"signatureSource": "pi-extensions/lib/control-send-receipt.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "SEND-RECEIPT-BUSY-STEER-IS-QUEUED",
@@ -22,7 +23,8 @@
 			"gate": ["bash", "run.sh", "check-control-send-receipt"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:SEND-RECEIPT-BUSY-STEER-IS-QUEUED]",
-			"signatureSource": "pi-extensions/lib/control-send-receipt.test.ts"
+			"signatureSource": "pi-extensions/lib/control-send-receipt.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "SEND-RECEIPT-BUSY-FOLLOWUP-IS-QUEUED",
@@ -33,7 +35,8 @@
 			"gate": ["bash", "run.sh", "check-control-send-receipt"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:SEND-RECEIPT-BUSY-FOLLOWUP-IS-QUEUED]",
-			"signatureSource": "pi-extensions/lib/control-send-receipt.test.ts"
+			"signatureSource": "pi-extensions/lib/control-send-receipt.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "SEND-RECEIPT-UNKNOWN-IS-ACCEPTED-NOT-SENT",
@@ -44,7 +47,8 @@
 			"gate": ["bash", "run.sh", "check-control-send-receipt"],
 			"timeoutSeconds": 600,
 			"signature": "[QK:SEND-RECEIPT-UNKNOWN-IS-ACCEPTED-NOT-SENT]",
-			"signatureSource": "pi-extensions/lib/control-send-receipt.test.ts"
+			"signatureSource": "pi-extensions/lib/control-send-receipt.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		},
 		{
 			"claim": "SEND-BOUNDARY-CARRIED",
@@ -194,7 +198,7 @@
 			"claim": "PI-CORE-PIN-TRACKS-FLOOR",
 			"title": "the queue oracle's pi-agent-core pin drifts off the floor the rest of the pi runtime is pinned to, so the oracle keeps answering honestly — about a pi nobody in this repo runs",
 			"subject": "package.json",
-			"find": ["\"@earendil-works/pi-agent-core\": \"1.5.0\","],
+			"find": ["\"@earendil-works/pi-agent-core\": \"1.5.2\","],
 			"replace": ["\"@earendil-works/pi-agent-core\": \"0.87.1\","],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
@@ -240,15 +244,51 @@
 			"title": "the caller-facing outcome list drops the native-push rail, so a caller reading the one blurb it reads before dispatching is told the control rail's vocabulary covers a rail that answers with a direct injection instead",
 			"subject": "ENTWURF.json",
 			"find": [
-				"native-push INJECTION, a rejection, or lock-dirty. This receipt is not the colleague's reply or evidence of reading. EXISTING targets only; discover with "
+				"native-push INJECTION, a rejection, or lock-dirty. A receipt is not a reply or proof of reading. A local final is not delivery:"
 			],
 			"replace": [
-				"a rejection, or lock-dirty. This receipt is not the colleague's reply or evidence of reading. EXISTING targets only; discover with "
+				"a rejection, or lock-dirty. A receipt is not a reply or proof of reading. A local final is not delivery:"
 			],
 			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:SEND-OUTCOME-LIST-NAMES-EVERY-RAIL]",
 			"signatureSource": "scripts/check-entwurf-v2-surface.ts"
+		},
+		{
+			"claim": "PI-RECEIVED-REPLY-GUIDANCE",
+			"title": "the Pi receiver omits guidance for a replyable sender, so a local final can be mistaken for a reply",
+			"subject": "pi-extensions/lib/entwurf-control-rpc.ts",
+			"find": ["sender.replyable === true"],
+			"replace": ["sender.replyable === false"],
+			"gate": ["bash", "run.sh", "check-control-send-receipt"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:PI-RECEIVED-REPLY-GUIDANCE]",
+			"signatureSource": "pi-extensions/entwurf-control.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "MAILBOX-RECEIVED-REPLY-GUIDANCE",
+			"title": "the mailbox receiver's guidance drops the local-final boundary",
+			"subject": "pi-extensions/lib/meta-mailbox-body.ts",
+			"find": ["a local final is not delivery."],
+			"replace": ["a local final is delivery."],
+			"gate": ["bash", "run.sh", "check-control-send-receipt"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:MAILBOX-RECEIVED-REPLY-GUIDANCE]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-mailbox.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
+		},
+		{
+			"claim": "NATIVE-PUSH-RECEIVED-REPLY-GUIDANCE",
+			"title": "the native-push receiver's guidance drops the no-send boundary",
+			"subject": "pi-extensions/lib/meta-mailbox-body.ts",
+			"find": ["Honor routing and no-send instructions;"],
+			"replace": ["Ignore routing and no-send instructions;"],
+			"gate": ["bash", "run.sh", "check-control-send-receipt"],
+			"timeoutSeconds": 300,
+			"signature": "[QK:NATIVE-PUSH-RECEIVED-REPLY-GUIDANCE]",
+			"signatureSource": "pi-extensions/lib/entwurf-v2-native-push.test.ts",
+			"build": { "argv": ["bash", "scripts/build-bridge.sh"], "output": "mcp/entwurf-bridge/dist" }
 		}
 	]
 }

package/scripts/mutants/pack-install.json

@@ -6,8 +6,8 @@
 			"claim": "PACK-INSTALL-PIN-MATCHER-BOUNDED",
 			"title": "the pin-leak matcher loses its version boundary and blesses substring lookalikes \u2014 @0.85.10 reads as the pinned 0.85.1 and the gate announces a verified tree it never verified (independent review, 2026-08-25)",
 			"subject": "run.sh",
-			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.5\\.0(_|$)' || true"],
-			"replace": ["  grep '^@earendil-works+' | grep -v '@1\\.5\\.0' || true"],
+			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.5\\.2(_|$)' || true"],
+			"replace": ["  grep '^@earendil-works+' | grep -v '@1\\.5\\.2' || true"],
 			"gate": ["bash", "run.sh", "check-pack-pin-matcher"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:PACK-INSTALL-PIN-MATCHER-BOUNDED]",
@@ -17,8 +17,8 @@
 			"claim": "PACK-INSTALL-PIN-MATCHER-COVERS-CLOSURE",
 			"title": "the pin-leak matcher narrows back to the pi-* families and goes blind to a non-pi member of the same runtime closure \u2014 @earendil-works/chord (new in pi 0.85.0, a runtime dependency of pi-coding-agent/pi-agent-core/pi-client/pi-protocol) floats unpinned while the gate prints a verified pin (measured 2026-09-06 on a real 0.85.1 install tree)",
 			"subject": "run.sh",
-			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.5\\.0(_|$)' || true"],
-			"replace": ["  grep '^@earendil-works+pi-' | grep -Ev '@1\\.5\\.0(_|$)' || true"],
+			"find": ["  grep '^@earendil-works+' | grep -Ev '@1\\.5\\.2(_|$)' || true"],
+			"replace": ["  grep '^@earendil-works+pi-' | grep -Ev '@1\\.5\\.2(_|$)' || true"],
 			"gate": ["bash", "run.sh", "check-pack-pin-matcher"],
 			"timeoutSeconds": 120,
 			"signature": "[QK:PACK-INSTALL-PIN-MATCHER-COVERS-CLOSURE]",

package/scripts/mutants/pi-floor.json

@@ -7,10 +7,10 @@
 			"title": "one row of the pnpm workspace closure is left on the previous floor while every other surface moved — the shape a version bump actually fails in. Nothing else reads that file, so the stranded row surfaces only at install time, in a different command, far from the change that stranded it",
 			"subject": "pnpm-workspace.yaml",
 			"find": [
-				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2 || 1.0.4 || 1.1.0 || 1.2.0 || 1.3.0 || 1.4.0 || 1.5.0'"
+				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2 || 1.0.4 || 1.1.0 || 1.2.0 || 1.3.0 || 1.4.0 || 1.5.0 || 1.5.2'"
 			],
 			"replace": [
-				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2 || 1.0.4 || 1.1.0 || 1.2.0 || 1.3.0 || 1.4.0'"
+				"  - '@earendil-works/pi-telemetry@0.85.0 || 0.85.1 || 0.86.0 || 0.87.0 || 0.87.1 || 0.99.1 || 0.99.2 || 1.0.0 || 1.0.2 || 1.0.4 || 1.1.0 || 1.2.0 || 1.3.0 || 1.4.0 || 1.5.0'"
 			],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
@@ -21,8 +21,8 @@
 			"claim": "PI-SDK-PRODUCTION-SET",
 			"title": "the durable library's production pin falls one release behind the SDK set the pin declares, so the carrier would bind a pi-durable nobody verified it against",
 			"subject": "package.json",
-			"find": ["\"@earendil-works/pi-durable\": \"1.5.0\","],
-			"replace": ["\"@earendil-works/pi-durable\": \"1.4.0\","],
+			"find": ["\"@earendil-works/pi-durable\": \"1.5.2\","],
+			"replace": ["\"@earendil-works/pi-durable\": \"1.5.0\","],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-SDK-PRODUCTION-SET]",
@@ -33,7 +33,7 @@
 			"title": "an @earendil-works package returns as a dev dependency beside its production pin, one name in two dependency classes",
 			"subject": "package.json",
 			"find": ["\"@biomejs/biome\": \"^2.4.13\","],
-			"replace": ["\"@biomejs/biome\": \"^2.4.13\",\n\t\t\"@earendil-works/pi-ai\": \"1.5.0\","],
+			"replace": ["\"@biomejs/biome\": \"^2.4.13\",\n\t\t\"@earendil-works/pi-ai\": \"1.5.2\","],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,
 			"signature": "[QK:PI-SDK-NO-DUAL-DECLARATION]",
@@ -41,15 +41,13 @@
 		},
 		{
 			"claim": "PI-FLOOR-PUBLISHED-SCOPE",
-			"title": "a published-scope region in an operator doc names a package the frozen published manifest does not record, so the 1.4 instructions inside it would be held to a pairing no artifact ships — the doc can no longer prove which published package its install steps belong to",
+			"title": "a published-scope region in an operator doc names a package the frozen published manifest does not record, so the 1.5.0 instructions inside it would be held to a pairing no artifact ships — the doc can no longer prove which published package its install steps belong to",
 			"subject": "docs/setup-clean-host.md",
 			"find": [
-				"<!-- entwurf:published @junghanacs/entwurf@0.50.0 pi 1.4.0 -->",
-				"| Component | Requirement | Needed for |"
+				"| pi | optional-by-presence — published 0.51.0: <!-- entwurf:published @junghanacs/entwurf@0.51.0 pi 1.5.0 -->"
 			],
 			"replace": [
-				"<!-- entwurf:published @junghanacs/entwurf@0.49.0 pi 1.4.0 -->",
-				"| Component | Requirement | Needed for |"
+				"| pi | optional-by-presence — published 0.51.0: <!-- entwurf:published @junghanacs/entwurf@0.50.0 pi 1.5.0 -->"
 			],
 			"gate": ["bash", "run.sh", "check-dep-versions"],
 			"timeoutSeconds": 300,

package/scripts/mutants/v2-surface.json

@@ -22,7 +22,7 @@
 			"title": "MCP long description reverts to the false \"socket paths take a per-target lock\" claim",
 			"subject": "ENTWURF.json",
 			"find": [
-				"LOCK: taken for a control-socket-DOMAIN dispatch. The mailbox and native-push rails are lock-free — deliverability and the adapter probe guard them. mode "
+				"A control-socket-DOMAIN dispatch takes a target lock; mailbox and native-push rails are lock-free. mode "
 			],
 			"replace": ["LOCK POLICY: socket paths take a per-target lock; the mailbox path does not. mode "],
 			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
@@ -81,7 +81,7 @@
 			"title": "MCP long description advertises owned-outcome as a selectable dormant verb again and drops the reason a dormant target actually returns",
 			"subject": "ENTWURF.json",
 			"find": [
-				"A dormant socket rejects this delivery verb as dormant-fire-forget-unsupported. owned-outcome was withdrawn. Only on an explicit operator request, entwurf_resume_call may visibly reopen a proven-dormant Pi, pi-durable or Claude Code citizen under the same id, submitting no prompt; that lifecycle is separate from delivery. "
+				"A dormant socket rejects this delivery verb as dormant-fire-forget-unsupported. This delivery verb never launches or resumes a process. Only on an explicit operator request, entwurf_resume_call may visibly reopen a proven-dormant Pi, pi-durable or Claude Code citizen under the same id, submitting no prompt; that lifecycle is separate from delivery. "
 			],
 			"replace": [
 				"owned-outcome wakes a DORMANT socket-domain citizen by spawn-bg resume ONLY and is never auto-converted. "
@@ -132,11 +132,9 @@
 			"claim": "V2SURF-DESC-FITS-HOST-CAP",
 			"title": "the v2 tool description grows back past the host's 2048-char cap — the INTENT contract is silently cut off before the model that must choose an intent ever reads it",
 			"subject": "ENTWURF.json",
-			"find": [
-				"CANONICAL DELIVERY SURFACE for garden ids: message, reply, or hand off to whoever an id names. The id "
-			],
+			"find": ["Send, reply or hand off to an existing garden id; the decider selects the live rail "],
 			"replace": [
-				"CANONICAL DELIVERY SURFACE for garden ids: message, reply, or hand off to whoever an id names. The id PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING "
+				"Send, reply or hand off to an existing garden id; the decider selects the live rail PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING PADDING "
 			],
 			"gate": ["bash", "run.sh", "check-entwurf-v2-surface"],
 			"timeoutSeconds": 60,

package/scripts/smoke-acp-cortex-live.ts

@@ -354,7 +354,7 @@ async function main(): Promise<void> {
 		ok(
 			"the landed sender session IS the resident's own garden id, replyable (anchored envelope line)",
 			new RegExp(
-				`^ {2}session: {5}${rx(senderGid)} \\(replyable — reply via entwurf_v2 to this sessionId, intent=fire-and-forget\\)$`,
+				`^ {2}session: {5}${rx(senderGid)} ${rx("(replyable — when a reply is requested, send the result via entwurf_v2 (intent=fire-and-forget) to the requested recipient, defaulting to this sessionId; a local final is not delivery. Honor routing and no-send instructions; an absent or false wants_reply does not cancel a request. A replyable address alone needs no acknowledgment)")}$`,
 				"m",
 			).test(header),
 		);

package/scripts/smoke-acp-v2-send-live.ts

@@ -345,7 +345,7 @@ async function main(): Promise<void> {
 		ok(
 			"the landed sender session IS the resident's own garden id, replyable (anchored envelope line)",
 			new RegExp(
-				`^ {2}session: {5}${rx(senderGid)} \\(replyable — reply via entwurf_v2 to this sessionId, intent=fire-and-forget\\)$`,
+				`^ {2}session: {5}${rx(senderGid)} ${rx("(replyable — when a reply is requested, send the result via entwurf_v2 (intent=fire-and-forget) to the requested recipient, defaulting to this sessionId; a local final is not delivery. Honor routing and no-send instructions; an absent or false wants_reply does not cancel a request. A replyable address alone needs no acknowledgment)")}$`,
 				"m",
 			).test(header),
 		);