@junghanacs/entwurf 0.51.0 → 0.53.1

package/scripts/check-release-gate-outcomes.ts

@@ -260,30 +260,18 @@ function runSubcommand(sub: string, env: Record<string, string | undefined>): {
 //    is the second skip surface: some smokes never reach their .ts file at all.
 // ===========================================================================
 {
-	const viaWrapper = runSubcommand("smoke-acp-cortex-live", { LIVE: undefined });
+	const viaWrapper = runSubcommand("smoke-entwurf-v2-matrix-live", { LIVE: undefined });
 	assert.equal(
 		viaWrapper.code,
 		LIVE_SKIP_EXIT,
 		`[QK:WRAPPER-SKIP-IS-PROTOCOL-EXIT] a run.sh smoke WRAPPER that declines a prerequisite must return the protocol ` +
-			`SKIP code, not 0 — got exit ${viaWrapper.code}. The wrapper is a skip surface of its own (cortex and matrix ` +
-			"both decline before their .ts is ever reached), so fixing only the TypeScript " +
+			`SKIP code, not 0 — got exit ${viaWrapper.code}. The matrix wrapper declines before its .ts is reached, so fixing only the TypeScript ` +
 			`half would leave the aggregate counting those as PASS. Output: ${JSON.stringify(viaWrapper.output.slice(-300))}`,
 	);
 
-	// The measured Cortex cell: LIVE IS set, but the connection the adapter needs
-	// is not. Which branch declines (the wrapper's `cortex` PATH check or the
-	// smoke's own connection check) depends on the host; the OUTCOME must not.
-	const missingPrereq = runSubcommand("smoke-acp-cortex-live", {
-		LIVE: "1",
-		ENTWURF_ACP_CORTEX_CONNECTION: undefined,
-	});
-	assert.equal(
-		missingPrereq.code,
-		LIVE_SKIP_EXIT,
-		"LIVE=1 with no ENTWURF_ACP_CORTEX_CONNECTION must be a SKIP, not a PASS — this is the exact cell that made a " +
-			"cortex-less host look like cortex acceptance. Output: " +
-			JSON.stringify(missingPrereq.output.slice(-300)),
-	);
+	const disabled = runSubcommand("smoke-acp-cortex-live", { LIVE: undefined });
+	assert.equal(disabled.code, 2, "disabled Cortex smoke must refuse before a vendor probe");
+	assert.match(disabled.output, /cortex-acp-disabled/);
 }
 
 // ===========================================================================
@@ -312,11 +300,9 @@ function runSubcommand(sub: string, env: Record<string, string | undefined>): {
 		"smoke-agy-native-push-live": ["VERIFY.md", "Aggregate release-gate does not own an agy conversation id"],
 		"smoke-codex-native-push-live": ["VERIFY.md", "Aggregate release-gate does not own a loaded Codex thread"],
 		"smoke-acp-ordering-probe-live": ["docs/acp-backend-rail.md", "opt-in paired observation"],
-		// Cortex needs an external Snowflake connection the HOST owns, so an aggregate
-		// that required it would block every cut taken without that account. Excluded —
-		// NOT waived: its direct call stays required for a Cortex-rail cut, and running
-		// it without the connection still reports protocol SKIP rather than a pass.
-		"smoke-acp-cortex-live": ["VERIFY.md", "The release aggregate does not re-certify Cortex"],
+		// Cortex ACP is disabled. Its former direct LIVE requirement is historical;
+		// the retained command refuses by name without starting a vendor probe.
+		"smoke-acp-cortex-live": ["VERIFY.md", "Cortex ACP is disabled"],
 		// #116 C4: first evidence precedes promotion. The herdr rail's LIVE acceptance exists and
 		// runs on demand, but a rail whose first real acceptance run is days old has not earned a
 		// place in the aggregate that blocks every cut — and herdr is an OPTIONAL rail, so a cut
@@ -1066,7 +1052,7 @@ console.log(
 		"everything else→FAIL (never rounding a skip up), `--cut` refuses a MUST SKIP while a bare diagnostic run stays " +
 		"exit 0, no LIVE smoke still carries the pre-P1 exit-0 skip shape, and both real skip surfaces were INVOKED and " +
 		"observed to propagate the code: a smoke with LIVE unset (through run_ts, with its operator-readable marker) and " +
-		"a run.sh wrapper declining its own prerequisite (including the measured LIVE=1 no-cortex-connection cell); and every " +
+		"a run.sh wrapper declining its own prerequisite; the retired Cortex smoke refuses by name; and every " +
 		"LIVE smoke is either wired into release_gate or excluded by a sentence the docs still carry; and the moved " +
 		"check-gate-qualification stays reachable only as the schedule/dispatch drift diagnostic (absent from the " +
 		"default chain, from release_gate, from every push and from the release skill; exactly once in CI) over the " +

package/scripts/lib/codex-fresh-source-receipts.ts

@@ -452,14 +452,20 @@ export function codexSourceToolReceipts(thread: unknown): SourceToolReceipt[] {
 }
 
 function exactSenderInfoSuffix(text: string, nonce: string): string | null {
-	const prefix = `${nonce}\n\n<sender_info>`;
+	// Independent expected frame: never import the producer's guidance as the receipt oracle.
+	const guidance =
+		"\n\n[entwurf: When a reply is requested, send the result via entwurf_v2 to the requested recipient (default: sender_info.sessionId); a local final is not delivery. Honor routing and no-send instructions; an absent or false wants_reply does not cancel a request. A replyable address alone needs no acknowledgment.]";
+	const open = "<sender_info>";
 	const suffix = "</sender_info>";
-	if (!text.startsWith(prefix) || !text.endsWith(suffix)) return null;
-	const json = text.slice(prefix.length, -suffix.length);
-	if (json.includes("\n") || json.includes("<sender_info>")) return null;
+	const at = text.lastIndexOf(open);
+	if (at < 0 || !text.endsWith(suffix)) return null;
+	const json = text.slice(at + open.length, -suffix.length);
+	if (json.includes("\n") || json.includes(open)) return null;
 	try {
-		const sender = JSON.parse(json) as { sessionId?: unknown };
-		return typeof sender.sessionId === "string" ? sender.sessionId : null;
+		const sender = JSON.parse(json) as { sessionId?: unknown; replyable?: unknown };
+		const prefix = `${nonce}${sender.replyable === true ? guidance : ""}\n\n${open}`;
+		if (!text.startsWith(prefix) || !text.endsWith(suffix)) return null;
+		return at === prefix.length - open.length && typeof sender.sessionId === "string" ? sender.sessionId : null;
 	} catch {
 		return null;
 	}

package/scripts/lib/probe-cli-target.ts

@@ -92,8 +92,9 @@ export function hashFileSha256(path: string): string {
 
 /** Refuse if the given env carries the upstream override — KEY PRESENCE is the
  *  predicate, an empty string included. Upstream consumers disagree about
- *  empty (`??` at acp-agent.js:4083 treats "" as set and passes it on; a
- *  truthy check treats it as unset), and the probe refuses the ambiguity
+ *  empty (0.85.1's `??` at acp-agent.js:4083 treated "" as set and passed it
+ *  on; 0.106.0's truthy check at dist/claude-cli.js:20 treats it as unset), and
+ *  the probe refuses the ambiguity
  *  instead of picking a side. Used twice: on the runner's own process.env
  *  before resolving, and on the COMPOSED spawn env of every ACP child (adapter
  *  launch defaults / overlay overrides could inject what process.env did not

package/scripts/mutants/acp-augment.json

@@ -52,32 +52,6 @@
 			"signature": "[QK:CARRIER-FRAME-NAMES-CLAUDE-CARRIER]",
 			"signatureSource": "scripts/check-acp-carrier-augment.ts"
 		},
-		{
-			"claim": "CARRIER-FRAME-DENIES-CORTEX-CARRIER",
-			"title": "the carrier-less rail is told it has a tiny system-prompt carrier — a flat lie, since cortex's buildSessionMeta sends no _meta at all",
-			"subject": "pi-extensions/lib/acp/augment.ts",
-			"find": [
-				"\t\t\t\t\t`The ${params.backend} rail carries no system-prompt carrier at all — entwurf sends no \\`_meta.systemPrompt\\`, so everything entwurf tells you, including any operator engraving above, arrives here as user-message text.`,"
-			],
-			"replace": [
-				"\t\t\t\t\t`The ${params.backend} rail does have a system-prompt carrier (\\`_meta.systemPrompt\\`), and entwurf keeps it deliberately tiny: it carries the operator engraving only.`,"
-			],
-			"gate": ["bash", "run.sh", "check-acp-carrier-augment"],
-			"timeoutSeconds": 60,
-			"signature": "[QK:CARRIER-FRAME-DENIES-CORTEX-CARRIER]",
-			"signatureSource": "scripts/check-acp-carrier-augment.ts"
-		},
-		{
-			"claim": "CARRIER-RAIL-DIFF-IS-SOURCE-PINNED",
-			"title": "cortex grows a session carrier while the augment still tells it there is none — the frame becomes a lie and no prose check would notice",
-			"subject": "pi-extensions/lib/acp/backend-adapter.ts",
-			"find": ["\tbuildSessionMeta() {\n\t\treturn undefined;\n\t},"],
-			"replace": ["\tbuildSessionMeta() {\n\t\treturn { systemPrompt: \"x\" };\n\t},"],
-			"gate": ["bash", "run.sh", "check-acp-carrier-augment"],
-			"timeoutSeconds": 60,
-			"signature": "[QK:CARRIER-RAIL-DIFF-IS-SOURCE-PINNED]",
-			"signatureSource": "scripts/check-acp-carrier-augment.ts"
-		},
 		{
 			"claim": "CARRIER-LEADS-ITS-OWN-BLOCK",
 			"title": "the carrier loses its leading boundary — the Claude SDK's fixed sentence swallows the operator engraving again (the measured 2026-07-31 A-join)",

package/scripts/mutants/acp-cortex.json

@@ -3,205 +3,32 @@
 	"lane": "acp-cortex",
 	"mutants": [
 		{
-			"claim": "CORTEX-CURATED-FOUR-ROWS",
-			"title": "dropping a curated row silently shrinks the GLG-decided 4-row cortex surface",
-			"subject": "pi-extensions/lib/acp/model-ids.js",
-			"find": [
-				"export const SUPPORTED_CORTEX_MODEL_IDS = /** @type {const} */ ([",
-				"\t\"cortex-auto\",",
-				"\t\"cortex-claude-opus-5\",",
-				"\t\"cortex-claude-sonnet-5\",",
-				"\t\"cortex-openai-gpt-5.4\",",
-				"]);"
-			],
-			"replace": [
-				"export const SUPPORTED_CORTEX_MODEL_IDS = /** @type {const} */ ([",
-				"\t\"cortex-auto\",",
-				"\t\"cortex-claude-sonnet-5\",",
-				"\t\"cortex-openai-gpt-5.4\",",
-				"]);"
-			],
-			"gate": ["bash", "run.sh", "check-acp-cortex"],
-			"timeoutSeconds": 300,
-			"signature": "[QK:CORTEX-CURATED-FOUR-ROWS]",
-			"signatureSource": "scripts/check-acp-cortex.ts"
-		},
-		{
-			"claim": "CLAUDE-CURATED-THREE-ROWS",
-			"title": "dropping a curated CLAUDE row shrinks the operator's model list while the exact-set comparison stays green — expected derives from the same constant, so only the independent count catches it",
+			"claim": "CLAUDE-CURATED-FOUR-ROWS",
+			"title": "dropping a curated Claude row shrinks the operator's model list",
 			"subject": "pi-extensions/lib/acp/model-ids.js",
 			"find": [
 				"export const SUPPORTED_ANTHROPIC_MODEL_IDS = /** @type {const} */ ([",
 				"\t\"claude-sonnet-5-5\",",
 				"\t\"claude-opus-5-5\",",
 				"\t\"claude-fable-5-1\",",
+				"\t\"claude-fable-5-2\",",
 				"]);"
 			],
 			"replace": [
 				"export const SUPPORTED_ANTHROPIC_MODEL_IDS = /** @type {const} */ ([",
 				"\t\"claude-sonnet-5-5\",",
 				"\t\"claude-opus-5-5\",",
+				"\t\"claude-fable-5-1\",",
 				"]);"
 			],
 			"gate": ["bash", "run.sh", "check-acp-provider-surface"],
 			"timeoutSeconds": 300,
-			"signature": "[QK:CLAUDE-CURATED-THREE-ROWS]",
+			"signature": "[QK:CLAUDE-CURATED-FOUR-ROWS]",
 			"signatureSource": "scripts/check-acp-provider-surface.ts"
 		},
-		{
-			"claim": "CORTEX-AUTH-NARROW-CREDENTIAL-CACHE",
-			"title": "widening the auth passthrough to the whole cortex/cache leaks operator tool_outputs/tip_history into the child",
-			"subject": "pi-extensions/lib/acp/overlay.ts",
-			"find": [
-				"\tcortexLinkIfExists(",
-				"\t\tjoin(realSnowflake, \"cortex\", \"cache\", \"credential_cache\"),",
-				"\t\tjoin(cortexDir, \"cache\", \"credential_cache\"),",
-				"\t);"
-			],
-			"replace": [
-				"\trmSync(join(cortexDir, \"cache\"), { recursive: true, force: true });",
-				"\tcortexLinkIfExists(join(realSnowflake, \"cortex\", \"cache\"), join(cortexDir, \"cache\"));"
-			],
-			"gate": ["bash", "run.sh", "check-acp-cortex"],
-			"timeoutSeconds": 300,
-			"signature": "[QK:CORTEX-AUTH-NARROW-CREDENTIAL-CACHE]",
-			"signatureSource": "scripts/check-acp-cortex.ts"
-		},
-		{
-			"claim": "CORTEX-AUTOUPDATE-OFF",
-			"title": "flipping autoUpdate back on lets the cortex runtime replace itself on launch mid-rail (D4)",
-			"subject": "pi-extensions/lib/acp/overlay.ts",
-			"find": ["\treturn `${JSON.stringify({ autoUpdate: false }, null, \"\\t\")}\\n`;"],
-			"replace": ["\treturn `${JSON.stringify({ autoUpdate: true }, null, \"\\t\")}\\n`;"],
-			"gate": ["bash", "run.sh", "check-acp-cortex"],
-			"timeoutSeconds": 300,
-			"signature": "[QK:CORTEX-AUTOUPDATE-OFF]",
-			"signatureSource": "scripts/check-acp-cortex.ts"
-		},
-		{
-			"claim": "CORTEX-REALHOME-PLATFORM-NEUTRAL",
-			"title": "re-deriving realHome absoluteness from the POSIX flavor alone makes a drive/UNC HOME read as relative — the guard would state the host it runs on instead of the contract (PR #77, @yizixu)",
-			"subject": "pi-extensions/lib/acp/overlay.ts",
-			"find": ["\tif (!params.realHome || !(isAbsolute(params.realHome) || win32.isAbsolute(params.realHome))) {"],
-			"replace": ["\tif (!params.realHome || !params.realHome.startsWith(\"/\")) {"],
-			"gate": ["bash", "run.sh", "check-acp-cortex"],
-			"timeoutSeconds": 300,
-			"signature": "[QK:CORTEX-REALHOME-PLATFORM-NEUTRAL]",
-			"signatureSource": "scripts/check-acp-cortex.ts"
-		},
-		{
-			"claim": "CORTEX-BRIDGE-DUAL-HOME",
-			"title": "dropping the bridge-only real-HOME restore leaves the garden store cut off — tools reach the model but see an empty garden (D10)",
-			"subject": "pi-extensions/lib/acp/overlay.ts",
-			"find": ["\t\tif (stdio.name === CORTEX_DUAL_HOME_BRIDGE_SERVER) env.HOME = realHome;"],
-			"replace": ["\t\tvoid realHome;"],
-			"gate": ["bash", "run.sh", "check-acp-cortex"],
-			"timeoutSeconds": 300,
-			"signature": "[QK:CORTEX-BRIDGE-DUAL-HOME]",
-			"signatureSource": "scripts/check-acp-cortex.ts"
-		},
-		{
-			"claim": "CORTEX-MCP-NON-STDIO-FAILLOUD",
-			"title": "silently dropping a non-stdio server advertises a config the session does not have (D9 fail-loud)",
-			"subject": "pi-extensions/lib/acp/overlay.ts",
-			"find": [
-				"\t\tif (\"type\" in server && (server.type === \"http\" || server.type === \"sse\")) {",
-				"\t\t\tthrow new Error(",
-				"\t\t\t\t`entwurf: cortex mcp.json projection cannot represent ${server.type} server ` +",
-				"\t\t\t\t\t`${JSON.stringify(server.name)} — only stdio entries are measured through ` +",
-				"\t\t\t\t\t`$SNOWFLAKE_HOME/cortex/mcp.json (CP0 D9). Remove it from entwurfProvider.mcpServers ` +",
-				"\t\t\t\t\t`for cortex models or front it with a stdio bridge.`,",
-				"\t\t\t);",
-				"\t\t}"
-			],
-			"replace": [
-				"\t\tif (\"type\" in server && (server.type === \"http\" || server.type === \"sse\")) {",
-				"\t\t\tcontinue;",
-				"\t\t}"
-			],
-			"gate": ["bash", "run.sh", "check-acp-cortex"],
-			"timeoutSeconds": 300,
-			"signature": "[QK:CORTEX-MCP-NON-STDIO-FAILLOUD]",
-			"signatureSource": "scripts/check-acp-cortex.ts"
-		},
-		{
-			"claim": "CORTEX-OVERLAY-SESSION-SCOPED",
-			"title": "a static shared overlay dir lets two residents overwrite one mcp.json/envelope",
-			"subject": "pi-extensions/lib/acp/overlay.ts",
-			"find": ["\tconst scopeDir = join(overlaysRoot, cortexOverlayScopeId(params.scopeKey));"],
-			"replace": ["\tconst scopeDir = join(overlaysRoot, \"shared\");"],
-			"gate": ["bash", "run.sh", "check-acp-cortex"],
-			"timeoutSeconds": 300,
-			"signature": "[QK:CORTEX-OVERLAY-SESSION-SCOPED]",
-			"signatureSource": "scripts/check-acp-cortex.ts"
-		},
-		{
-			"claim": "CORTEX-HOME-PRESENCE-REFUSED",
-			"title": "a truthy check instead of presence lets an empty-string CORTEX_HOME slip past the refusal (D3 E2b nuance)",
-			"subject": "pi-extensions/lib/acp/backend-adapter.ts",
-			"find": ["\t\tif (\"CORTEX_HOME\" in process.env) {"],
-			"replace": ["\t\tif (process.env.CORTEX_HOME) {"],
-			"gate": ["bash", "run.sh", "check-acp-cortex"],
-			"timeoutSeconds": 300,
-			"signature": "[QK:CORTEX-HOME-PRESENCE-REFUSED]",
-			"signatureSource": "scripts/check-acp-cortex.ts"
-		},
-		{
-			"claim": "CORTEX-LAUNCH-NO-MODEL-PIN",
-			"title": "re-introducing the launch -m pin creates a second model authority that drifts from per-turn set-model",
-			"subject": "pi-extensions/lib/acp/backend-adapter.ts",
-			"find": [
-				"\tresolveLaunch({ config }) {",
-				"\t\tconst settings = config.adapterSettings as CortexAdapterSettings | undefined;",
-				"\t\tconst connection = settings?.cortexConnection?.trim() || undefined;",
-				"\t\tconst selectionArgs: string[] = [];"
-			],
-			"replace": [
-				"\tresolveLaunch({ config, nativeModelId }) {",
-				"\t\tconst settings = config.adapterSettings as CortexAdapterSettings | undefined;",
-				"\t\tconst connection = settings?.cortexConnection?.trim() || undefined;",
-				"\t\tconst selectionArgs: string[] = [\"-m\", nativeModelId];"
-			],
-			"gate": ["bash", "run.sh", "check-acp-cortex"],
-			"timeoutSeconds": 300,
-			"signature": "[QK:CORTEX-LAUNCH-NO-MODEL-PIN]",
-			"signatureSource": "scripts/check-acp-cortex.ts"
-		},
-		{
-			"claim": "CORTEX-ENFORCE-SET-MODEL",
-			"title": "enforcing a constant instead of the native id silently answers with the wrong model (CP0-M)",
-			"subject": "pi-extensions/lib/acp/backend-adapter.ts",
-			"find": [
-				"\t\tawait setConfig.call(connection, { sessionId: acpSessionId, configId: \"model\", value: nativeModelId });",
-				"\t},",
-				"",
-				"\t// A connection change must invalidate a reused session (rail: Adapter contract). Flat,"
-			],
-			"replace": [
-				"\t\tawait setConfig.call(connection, { sessionId: acpSessionId, configId: \"model\", value: \"auto\" });",
-				"\t},",
-				"",
-				"\t// A connection change must invalidate a reused session (rail: Adapter contract). Flat,"
-			],
-			"gate": ["bash", "run.sh", "check-acp-cortex"],
-			"timeoutSeconds": 300,
-			"signature": "[QK:CORTEX-ENFORCE-SET-MODEL]",
-			"signatureSource": "scripts/check-acp-cortex.ts"
-		},
-		{
-			"claim": "CORTEX-OVERLAY-KEY-IS-SESSION-KEY",
-			"title": "re-deriving the overlay scope from ambient env drops opts.sessionId — two same-process/cwd sessions alias one overlay/mcp.json",
-			"subject": "pi-extensions/lib/acp/backend-adapter.ts",
-			"find": ["\t\tconst overlay = ensureCortexDualHomeOverlay({", "\t\t\tscopeKey: sessionKey,"],
-			"replace": ["\t\tconst overlay = ensureCortexDualHomeOverlay({", "\t\t\tscopeKey: piSessionId ?? \"static\","],
-			"gate": ["bash", "run.sh", "check-acp-cortex"],
-			"timeoutSeconds": 300,
-			"signature": "[QK:CORTEX-OVERLAY-KEY-IS-SESSION-KEY]",
-			"signatureSource": "scripts/check-acp-cortex.ts"
-		},
 		{
 			"claim": "ACP-OVERLAY-SESSIONKEY-WIRED",
-			"title": "passing a cwd-derived key instead of resolveSessionKey's value silently merges distinct sessions' overlay scopes at the production call site",
+			"title": "passing a cwd-derived key instead of resolveSessionKey's value merges distinct sessions' overlay scopes",
 			"subject": "pi-extensions/lib/acp/backend.ts",
 			"find": [
 				"\t\t\tconst overlay = adapter.ensureOverlay({ cwd, modelId: model.id, nativeModelId, config, sessionKey });"
@@ -215,14 +42,14 @@
 			"signatureSource": "scripts/check-acp-session-reuse.ts"
 		},
 		{
-			"claim": "CORTEX-PROVIDER-EXACT-ROW-SURFACE",
-			"title": "filtering the cortex rows out of the REAL provider entry drops the whole backend from the operator's model list while models.ts and check-acp-cortex stay green",
+			"claim": "ACP-PROVIDER-CLAUDE-ONLY",
+			"title": "the provider entry advertises a retired Cortex row despite the admission fence",
 			"subject": "pi-extensions/acp-provider.ts",
 			"find": ["\t\tmodels: allCuratedModels(),"],
-			"replace": ["\t\tmodels: allCuratedModels().filter((m) => !m.id.startsWith(\"cortex-\")),"],
+			"replace": ["\t\tmodels: [...allCuratedModels(), { ...allCuratedModels()[0], id: \"cortex-auto\" }],"],
 			"gate": ["bash", "run.sh", "check-acp-provider-surface"],
 			"timeoutSeconds": 300,
-			"signature": "[QK:CORTEX-PROVIDER-EXACT-ROW-SURFACE]",
+			"signature": "[QK:ACP-PROVIDER-CLAUDE-ONLY]",
 			"signatureSource": "scripts/check-acp-provider-surface.ts"
 		}
 	]

package/scripts/mutants/acp-foreground-only.json

@@ -12,6 +12,17 @@
 			"timeoutSeconds": 60,
 			"signature": "[QK:ACP-CLAUDE-FOREGROUND-ONLY]",
 			"signatureSource": "pi-extensions/lib/acp/backend-adapter.test.ts"
+		},
+		{
+			"claim": "ACP-CLAUDE-NO-IDLE-COMPACTION",
+			"title": "the claude session settings lose idleCompaction:false — claude-agent-acp 0.101+ sends its own /compact prompt on an idle retained session, a model turn pi never sees",
+			"subject": "pi-extensions/lib/acp/tool-surface.ts",
+			"find": ["\t\t\tidleCompaction: false,"],
+			"replace": [""],
+			"gate": ["bash", "run.sh", "check-acp-foreground-only"],
+			"timeoutSeconds": 60,
+			"signature": "[QK:ACP-CLAUDE-NO-IDLE-COMPACTION]",
+			"signatureSource": "pi-extensions/lib/acp/backend-adapter.test.ts"
 		}
 	]
 }

package/scripts/mutants/acp-launch-namespace.json

@@ -7,7 +7,9 @@
 			"title": "the default launch names the vendor bin directly again — the child re-enters the process-name space a janitor for another harness scans by substring, which is the whole of #72",
 			"subject": "pi-extensions/lib/acp/backend-adapter.ts",
 			"find": ["\tconst launcher = fileURLToPath(new URL(\"./claude-acp-launch.js\", import.meta.url));"],
-			"replace": ["\tconst launcher = require.resolve(\"@agentclientprotocol/claude-agent-acp/dist/index.js\");"],
+			"replace": [
+				"\tconst launcher = require.resolve(\"@agentclientprotocol/claude-agent-acp/package.json\").replace(/package\\.json$/, \"dist/index.js\");"
+			],
 			"gate": ["bash", "run.sh", "check-acp-launch-namespace"],
 			"timeoutSeconds": 240,
 			"signature": "[QK:CLAUDE-LAUNCH-IS-NAMESPACED]",

package/scripts/mutants/acp-prompt-lifecycle.json

@@ -77,9 +77,9 @@
 			"title": "a backend session that died between turns is cleared but never announced — the next turn respawns silently and the operator never learns the session is gone",
 			"subject": "pi-extensions/lib/acp/backend.ts",
 			"find": [
-				"\t\t\tconst priorEnd = takeUnreportedChildEnd(sessionKey);\n\t\t\tif (priorEnd) {\n\t\t\t\tpushAcpLifecycleNotice(\n\t\t\t\t\tstate,\n\t\t\t\t\t`previous ${adapter.backend} session ended between turns (${describeChildEnd(priorEnd)}) — opening a new one`,\n\t\t\t\t);\n\t\t\t}"
+				"\t\t\tconst priorEnd = summary ? undefined : takeUnreportedChildEnd(sessionKey);\n\t\t\tif (priorEnd) {\n\t\t\t\tpushAcpLifecycleNotice(\n\t\t\t\t\tstate,\n\t\t\t\t\t`previous ${adapter.backend} session ended between turns (${describeChildEnd(priorEnd)}) — opening a new one`,\n\t\t\t\t);\n\t\t\t}"
 			],
-			"replace": ["\t\t\ttakeUnreportedChildEnd(sessionKey);"],
+			"replace": ["\t\t\tif (!summary) takeUnreportedChildEnd(sessionKey);"],
 			"gate": ["bash", "run.sh", "check-acp-prompt-lifecycle"],
 			"timeoutSeconds": 180,
 			"signature": "[QK:IDLE-DEATH-ANNOUNCED]",