deadbyte-mcp 0.11.3 → 0.13.0

package/test/remote-result-journal.test.mjs

@@ -56,3 +56,18 @@ test('cursor parser rejects foreign sessions and malformed cursors',async()=>{
     await assert.rejects(journal.replayAfter('r1:'+'b'.repeat(24)+':0',{limit:8}),/cursor session mismatch/);
   }finally{await rm(root,{recursive:true,force:true});}
 });
+
+
+test('remote result journal preserves explicit unknown side-effect state across restart and replay',async()=>{
+  const root=await mkdtemp(path.join(os.tmpdir(),'deadbyte-r40-remote-unknown-'));
+  const file=path.join(root,'journal.json');
+  try{
+    let journal=await openRemoteResultJournal({filePath:file,sessionId:session,maxEntries:8});
+    await journal.recordTerminal({...item('req-unknown',H('4'),'error'),side_effect_state:'unknown',reason:'runtime_restart'});
+    journal=await openRemoteResultJournal({filePath:file,sessionId:session,maxEntries:8});
+    const replay=await journal.replayAfter('r1:'+session+':0',{limit:8});
+    assert.equal(replay.events[0].side_effect_state,'unknown');
+    assert.equal(replay.events[0].reason,'runtime_restart');
+    await assert.rejects(journal.recordTerminal({...item('req-invalid',H('5'),'error'),side_effect_state:'committed'}),/side_effect_state invalid/);
+  }finally{await rm(root,{recursive:true,force:true});}
+});

package/test/remote-session-cli.test.mjs

@@ -84,8 +84,9 @@ winTest('bare remote reuses a fully verified ONLINE runtime without invoking blo
     assert.equal(child.exitCode,null,'remote session must remain foreground after reusing ONLINE runtime');
     assert.match(output.stdout,/Runtime already ONLINE; reusing verified bridge\/cloud\/supervisor/);
     const authDeadline=Date.now()+3000;
-    while(Date.now()<authDeadline&&!/🔐 \[AUTH\] ARMED: process, coding, autonomous \| host DISARMED/.test(output.stdout)) await sleep(50);
-    assert.match(output.stdout,/🔐 \[AUTH\] ARMED: process, coding, autonomous \| host DISARMED/);
+    while(Date.now()<authDeadline&&!/\[AUTH\] ARMED: process, coding, autonomous \| host DISARMED/.test(output.stdout)) await sleep(50);
+    assert.match(output.stdout,/\[DISPLAY\] ASCII fallback: stdout_not_tty/);
+    assert.match(output.stdout,/\[AUTH\] ARMED: process, coding, autonomous \| host DISARMED/);
     child.kill('SIGINT');
     await output.closed;
   }finally{
@@ -137,16 +138,17 @@ winTest('bare remote uses one unified live timeline, keeps authority semantics,
     ]);
     assert.equal(child.exitCode,null,'remote session must remain foreground after becoming ready');
     const tailDeadline=Date.now()+3000;
-    while(Date.now()<tailDeadline&&!/🔐 \[AUTH\] ARMED: process, coding, autonomous \| host DISARMED/.test(output.stdout)) await sleep(50);
-    assert.match(output.stdout,/🚀 \[DEVICE\] Starting DEADBYTE MCP/);
-    assert.match(output.stdout,/🔌 \[BRIDGE\] Local bridge connected/);
-    assert.match(output.stdout,/🔌 \[CLOUD\] Remote MCP connected/);
+    while(Date.now()<tailDeadline&&!/\[AUTH\] ARMED: process, coding, autonomous \| host DISARMED/.test(output.stdout)) await sleep(50);
+    assert.match(output.stdout,/\[DISPLAY\] ASCII fallback: stdout_not_tty/);
+    assert.match(output.stdout,/\[DEVICE\] Starting DEADBYTE MCP/);
+    assert.match(output.stdout,/\[BRIDGE\] Local bridge connected/);
+    assert.match(output.stdout,/\[CLOUD\] Remote MCP connected/);
     assert.match(output.stdout,/\[SESSION\] New foreground session/);
     assert.match(output.stdout,/\[BOOT\] Starting local \+ remote runtime/);
     assert.match(output.stdout,/\[OK\] ONLINE/);
-    assert.match(output.stdout,/✅ \[READY\] DEADBYTE MCP online/);
-    assert.match(output.stdout,/🔐 \[AUTH\] ARMED: process, coding, autonomous \| host DISARMED/);
-    assert.match(output.stdout,/\[LOG\] Unified live timeline\. Ctrl\+C disconnects and revokes authority\./);
+    assert.match(output.stdout,/\[READY\] DEADBYTE MCP online/);
+    assert.match(output.stdout,/\[AUTH\] ARMED: process, coding, autonomous \| host DISARMED/);
+    assert.match(output.stdout,/\[LOG\] Human live timeline\. Transport IN\/OUT hidden; full replay\/audit detail remains on disk\./);
     assert.doesNotMatch(output.stdout,/Process plane\s*:/);
     assert.doesNotMatch(output.stdout,/Coding plane\s*:/);
     const auditDir=path.join(fx.state,'audit');
@@ -169,12 +171,12 @@ winTest('bare remote uses one unified live timeline, keeps authority semantics,
       '[TOOL OUT] 2026-09-16T00:00:00.002Z #000002 coding_file_read {"is_error":true}'
     ].join('\n')+'\n','utf8');
     const logDeadline=Date.now()+3000;
-    while(Date.now()<logDeadline&&!/✗ \[fedcba98\] ERR coding_file_read 1\.73s/.test(output.stdout)) await sleep(50);
-    assert.match(output.stdout,/^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}\.[0-9]{3}\+07:00 \| coding_tree\s+\| Arguments: .*\"path\":\"src\".*\"root_id\":\"projects\".*\[cursor r1:[0-9a-f]{24}:1\]$/m);
-    assert.match(output.stdout,/✓ \[abcdef12\] OK  coding_tree 42ms \[cursor r1:[0-9a-f]{24}:2\]/);
-    assert.match(output.stdout,/^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}\.[0-9]{3}\+07:00 \| coding_file_read\s+\| Arguments: \{\"path\":\"src\/deadbyte-cli\.mjs\",\"root_id\":\"projects\"\} \[cursor r1:[0-9a-f]{24}:3\]$/m);
-    assert.match(output.stdout,/✗ \[fedcba98\] ERR coding_file_read 1\.73s \[cursor r1:[0-9a-f]{24}:4\]/);
-    assert.equal((output.stdout.match(/✓ \[abcdef12\] OK  coding_tree 42ms/g)||[]).length,1,'duplicate terminal result must print once');
+    while(Date.now()<logDeadline&&!/^R  .*#4  \[fedcba98\]  coding_file_read  projects:src\/deadbyte-cli\.mjs  1\.73s  ERR$/m.test(output.stdout)) await sleep(50);
+    assert.doesNotMatch(output.stdout,/\| Arguments:/,'default human view must not print request JSON');
+    assert.match(output.stdout,/^S  .*#2  \[abcdef12\]  coding_tree  projects:src  42ms  OK$/m);
+    assert.match(output.stdout,/^R  .*#4  \[fedcba98\]  coding_file_read  projects:src\/deadbyte-cli\.mjs  1\.73s  ERR$/m);
+    assert.equal((output.stdout.match(/\[abcdef12\].*coding_tree.*42ms.*OK/g)||[]).length,1,'duplicate terminal result must print once');
+    assert.doesNotMatch(output.stdout,/\[cursor r1:/,'full replay cursor belongs in the journal, not every human line');
     const resultJournal=JSON.parse(await readFile(path.join(fx.state,'runtime','remote-results',`${marker.result_session_id}.json`),'utf8'));
     assert.deepEqual(resultJournal.events.map(event=>event.seq),[1,2,3,4]);
     assert.deepEqual(resultJournal.events.map(event=>event.event_type),['tool.call','tool.result','tool.call','tool.result']);
@@ -184,9 +186,7 @@ winTest('bare remote uses one unified live timeline, keeps authority semantics,
     assert.match(output.stdout,/abcdef12/);
     assert.match(output.stdout,/fedcba98/);
     assert.doesNotMatch(output.stdout,/DO_NOT_PRINT_PAYLOAD|DO_NOT_PRINT_TOKEN/);
-    assert.match(output.stdout,/\[BRIDGE\.STDOUT\] IN  coding_tree/);
-    assert.match(output.stdout,/\[BRIDGE\.STDOUT\] OUT coding_tree/);
-    assert.match(output.stdout,/\[BRIDGE\.STDOUT\] ERR coding_file_read/);
+    assert.doesNotMatch(output.stdout,/\[BRIDGE\.(?:STDOUT|DEBUG)\]/,'transport diagnostics are hidden in default human mode');
     assert.doesNotMatch(output.stdout,/\[TOOL IN \]|\[TOOL OUT\]/);
     assert.doesNotMatch(output.stdout,/payload bytes=/);
     child.stdin.end();
@@ -195,11 +195,10 @@ winTest('bare remote uses one unified live timeline, keeps authority semantics,
     const commands=await traceCommands(fx.trace);
     assert.deepEqual(commands.slice(-5),['disarmautonomous','disarmcoding','disarmprocess','disarmhost','park']);
     assert.match(output.stdout,/^DEADBYTE MCP$/m);
-    assert.match(output.stdout,/Unified live timeline/i);
-    assert.match(output.stdout,/🔐 \[AUTH\] Revoking session authority/);
+    assert.match(output.stdout,/Human live timeline/i);
+    assert.match(output.stdout,/\[AUTH\] Revoking session authority/);
     assert.doesNotMatch(output.stdout,/disarmautonomous OK|disarmcoding OK|disarmprocess OK|disarmhost OK|DEADBYTE MCP = PARKED/);
-    const withoutApprovedEmoji=output.stdout.replace(/[📜📥📤✅❌⚠♻🛡▶🔐🚀🔌]/gu,'');
-    assert.doesNotMatch(withoutApprovedEmoji,/\p{Extended_Pictographic}/u,'human live stream may use only the approved semantic emoji set');
+    assert.doesNotMatch(output.stdout,/\p{Extended_Pictographic}/u,'piped Windows fallback must remain ASCII-safe');
   }finally{
     if(child?.exitCode===null) child.kill();
     await rm(fx.dir,{recursive:true,force:true});
@@ -214,7 +213,9 @@ winTest('remote --resume replays sanitized tool-call and terminal result events
     const firstOutput=await collect(first);
     await waitFor(fx.trace,commands=>commands.includes('hoststatus'));
     const liveDeadline=Date.now()+3000;
-    while(Date.now()<liveDeadline&&!/\[LOG\] Unified live timeline/.test(firstOutput.stdout)) await sleep(50);
+    while(Date.now()<liveDeadline&&!/\[LOG\] Human live timeline/.test(firstOutput.stdout)) await sleep(50);
+    const marker=JSON.parse(await readFile(path.join(fx.state,'runtime','remote-session.json'),'utf8'));
+    assert.match(String(marker.result_session_id||''),/^[0-9a-f]{24}$/);
     const auditDir=path.join(fx.state,'audit');await mkdir(auditDir,{recursive:true});
     const auditFile=path.join(auditDir,'segment-00000001.jsonl');
     const firstBatch=[
@@ -223,16 +224,19 @@ winTest('remote --resume replays sanitized tool-call and terminal result events
     ];
     await writeFile(auditFile,firstBatch.map(JSON.stringify).join('\n')+'\n','utf8');
     let deadline=Date.now()+3000;
-    while(Date.now()<deadline&&!/coding_tree .*\[cursor r1:[0-9a-f]{24}:2\]/.test(firstOutput.stdout)) await sleep(50);
-    const cursor1=firstOutput.stdout.match(/coding_tree .*\[cursor (r1:[0-9a-f]{24}:2)\]/)?.[1];
-    assert.ok(cursor1,'first result cursor missing');
+    while(Date.now()<deadline&&!/^S  .*#2  \[resume-r\]  coding_tree  projects:src.*OK$/m.test(firstOutput.stdout)) await sleep(50);
+    const journalFile=path.join(fx.state,'runtime','remote-results',`${marker.result_session_id}.json`);
+    const firstJournal=JSON.parse(await readFile(journalFile,'utf8'));
+    assert.deepEqual(firstJournal.events.map(event=>event.seq),[1,2]);
+    const cursor1=`r1:${marker.result_session_id}:2`;
+    assert.doesNotMatch(firstOutput.stdout,/\[cursor r1:/);
     const secondBatch=[
       {seq:3,event_type:'tool.request',tool:'coding_file_read',request_id:'resume-request-2',created_at_utc:'2026-09-18T16:30:01.000Z',args:{root_id:'projects',path:'src/deadbyte-cli.mjs',token:'DO_NOT_REPLAY_SECRET'}},
       {seq:4,event_type:'tool.result',tool:'coding_file_read',request_id:'resume-request-2',created_at_utc:'2026-09-18T16:30:01.100Z',outcome:{is_error:false}}
     ];
     await writeFile(auditFile,secondBatch.map(JSON.stringify).join('\n')+'\n',{encoding:'utf8',flag:'a'});
     deadline=Date.now()+3000;
-    while(Date.now()<deadline&&!/coding_file_read .*\[cursor r1:[0-9a-f]{24}:4\]/.test(firstOutput.stdout)) await sleep(50);
+    while(Date.now()<deadline&&!/^R  .*#4  \[resume-r\]  coding_file_read  projects:src\/deadbyte-cli\.mjs.*OK$/m.test(firstOutput.stdout)) await sleep(50);
     first.stdin.end();
     const firstEnded=await Promise.race([firstOutput.closed,sleep(6000).then(()=>({timeout:true}))]);
     assert.equal(firstEnded.timeout,undefined);
@@ -240,19 +244,19 @@ winTest('remote --resume replays sanitized tool-call and terminal result events
     second=spawn(process.execPath,[cliPath,'remote','--resume',cursor1],{env:fx.env,stdio:['pipe','pipe','pipe'],windowsHide:true});
     const secondOutput=await collect(second);
     deadline=Date.now()+5000;
-    while(Date.now()<deadline&&(!/coding_file_read\s+\| Arguments: .*REPLAY cursor r1:[0-9a-f]{24}:3/.test(secondOutput.stdout)||
-      !/\[REPLAY\] \[OK\] coding_file_read \[cursor r1:[0-9a-f]{24}:4\]/.test(secondOutput.stdout)||
-      !/\[LOG\] Unified live timeline/.test(secondOutput.stdout))) await sleep(50);
-    assert.match(secondOutput.stdout,/^2026-09-18T23:30:01\.000\+07:00 \| coding_file_read\s+\| Arguments: .*\"path\":\"src\/deadbyte-cli\.mjs\".*REPLAY cursor r1:[0-9a-f]{24}:3$/m);
-    assert.match(secondOutput.stdout,/\[REPLAY\] \[OK\] coding_file_read \[cursor r1:[0-9a-f]{24}:4\]/);
-    assert.match(secondOutput.stdout,/♻️ \[SESSION\] Previous result stream replayed/);
+    while(Date.now()<deadline&&(!/coding_file_read\s+\| Arguments: .*\| REPLAY #3/.test(secondOutput.stdout)||
+      !/\[REPLAY\] #4 coding_file_read OK/.test(secondOutput.stdout)||
+      !/\[LOG\] Human live timeline/.test(secondOutput.stdout))) await sleep(50);
+    assert.match(secondOutput.stdout,/^2026-09-18T23:30:01\.000\+07:00 \| coding_file_read\s+\| Arguments: .*"path":"src\/deadbyte-cli\.mjs".*\| REPLAY #3$/m);
+    assert.match(secondOutput.stdout,/\[REPLAY\] #4 coding_file_read OK/);
+    assert.match(secondOutput.stdout,/\[SESSION\] Previous result stream replayed/);
     assert.doesNotMatch(secondOutput.stdout,/DO_NOT_REPLAY_SECRET/);
-    assert.doesNotMatch(secondOutput.stdout,/\[REPLAY\] \[OK\] coding_tree/);
+    assert.doesNotMatch(secondOutput.stdout,/\[REPLAY\].*coding_tree/);
     assert.equal((secondOutput.stdout.match(/\| coding_file_read\s+\| Arguments:/g)||[]).length,1,'tool-call replay duplicated');
-    assert.equal((secondOutput.stdout.match(/\[REPLAY\] \[OK\] coding_file_read/g)||[]).length,1,'terminal replay duplicated');
+    assert.equal((secondOutput.stdout.match(/\[REPLAY\] #4 coding_file_read OK/g)||[]).length,1,'terminal replay duplicated');
     const callReplayIndex=secondOutput.stdout.indexOf('| coding_file_read');
-    const resultReplayIndex=secondOutput.stdout.indexOf('[REPLAY] [OK] coding_file_read');
-    const liveIndex=secondOutput.stdout.indexOf('[LOG] Unified live timeline');
+    const resultReplayIndex=secondOutput.stdout.indexOf('[REPLAY] #4 coding_file_read OK');
+    const liveIndex=secondOutput.stdout.indexOf('[LOG] Human live timeline');
     assert.ok(callReplayIndex>=0&&resultReplayIndex>callReplayIndex&&liveIndex>resultReplayIndex,'resume ordering must be call -> result -> live tail');
     second.stdin.end();
     const secondEnded=await Promise.race([secondOutput.closed,sleep(6000).then(()=>({timeout:true}))]);
@@ -264,17 +268,35 @@ winTest('remote --resume replays sanitized tool-call and terminal result events
   }
 });
 
-winTest('remote --verbose is rejected because R37 has one unified remote mode',async()=>{
+winTest('remote --verbose enables sanitized request detail while preserving foreground authority cleanup',async()=>{
   const fx=await fixture();
+  let child=null;
   try{
-    const child=spawn(process.execPath,[cliPath,'remote','--verbose'],{env:fx.env,stdio:['ignore','pipe','pipe'],windowsHide:true});
+    child=spawn(process.execPath,[cliPath,'remote','--verbose'],{env:fx.env,stdio:['pipe','pipe','pipe'],windowsHide:true});
     const output=await collect(child);
+    await waitFor(fx.trace,commands=>commands.includes('hoststatus'));
+    assert.equal(child.exitCode,null,'verbose remote remains a foreground session');
+    assert.match(output.stdout,/\[LOG\] Verbose live timeline\. Full sanitized request detail enabled/);
+    const auditDir=path.join(fx.state,'audit');await mkdir(auditDir,{recursive:true});
+    const audit=[
+      {event_type:'tool.request',tool:'coding_tree',request_id:'verbose-request-1',created_at_utc:'2026-09-19T00:00:00.000Z',args:{root_id:'projects',path:'src',token:'DO_NOT_PRINT_VERBOSE_SECRET'}},
+      {event_type:'tool.result',tool:'coding_tree',request_id:'verbose-request-1',created_at_utc:'2026-09-19T00:00:00.050Z',outcome:{is_error:false,duration_ms:50}}
+    ];
+    await writeFile(path.join(auditDir,'segment-00000001.jsonl'),audit.map(JSON.stringify).join('\n')+'\n','utf8');
+    const deadline=Date.now()+3000;
+    while(Date.now()<deadline&&!/coding_tree\s+\| Arguments:/.test(output.stdout)) await sleep(50);
+    assert.match(output.stdout,/coding_tree\s+\| Arguments: .*"path":"src".*"root_id":"projects"/);
+    assert.doesNotMatch(output.stdout,/DO_NOT_PRINT_VERBOSE_SECRET/);
+    child.stdin.end();
     const ended=await Promise.race([output.closed,sleep(6000).then(()=>({timeout:true}))]);
     assert.equal(ended.timeout,undefined);
-    assert.notEqual(ended.code,0);
-    assert.match(output.stderr,/unsupported remote command '--verbose'/i);
-    assert.deepEqual(await traceCommands(fx.trace),[],'rejected legacy flag must not touch runtime authority');
-  }finally{await rm(fx.dir,{recursive:true,force:true});}
+    assert.equal(ended.code,0,output.stderr);
+    const commands=await traceCommands(fx.trace);
+    assert.deepEqual(commands.slice(-5),['disarmautonomous','disarmcoding','disarmprocess','disarmhost','park']);
+  }finally{
+    if(child?.exitCode===null) child.kill('SIGKILL');
+    await rm(fx.dir,{recursive:true,force:true});
+  }
 });
 
 winTest('detached guardian revokes authority, parks, and removes the session marker after the owner is hard-killed',async()=>{
@@ -347,7 +369,7 @@ winTest('bare remote recovers a stale crashed session before arming a new one',a
     assert.deepEqual(ready.slice(0,5),['disarmautonomous','disarmcoding','disarmprocess','disarmhost','park']);
     assert.equal(ready[5],'status');
     assert.equal(ready[6],'start');
-    assert.match(output.stdout,/♻️ \[RECOVERY\] Stale remote session pid=2147483000; revoking authority before restart\./);
+    assert.match(output.stdout,/\[RECOVERY\] Stale remote session pid=2147483000; revoking authority before restart\./);
     child.stdin.end();
     const ended=await Promise.race([output.closed,sleep(6000).then(()=>({timeout:true}))]);
     assert.equal(ended.timeout,undefined);
@@ -358,7 +380,7 @@ winTest('bare remote recovers a stale crashed session before arming a new one',a
   }
 });
 
-winTest('remote warning lines use the approved warning emoji without changing the warning token',async()=>{
+winTest('remote warning lines use deterministic ASCII fallback on piped Windows output',async()=>{
   const fx=await fixture();
   let child=null;
   try{
@@ -370,7 +392,8 @@ winTest('remote warning lines use the approved warning emoji without changing th
     child.stdin.end();
     const ended=await Promise.race([output.closed,sleep(6000).then(()=>({timeout:true}))]);
     assert.equal(ended.timeout,undefined,'remote session did not exit after warning fixture');
-    assert.match(output.stderr,/⚠️ \[WARN\] remote session marker cleanup:/);
+    assert.match(output.stderr,/^\[WARN\] remote session marker cleanup:/m);
+    assert.doesNotMatch(output.stderr,/\p{Extended_Pictographic}/u);
   }finally{
     if(child?.exitCode===null) child.kill();
     await rm(fx.dir,{recursive:true,force:true});

package/test/runtime-self-update.test.mjs

@@ -263,6 +263,50 @@ test('R31 slot-update CLI binds process-policy bootstrap and machine-FS enable e
   assert.equal(parsed.enableMachineFs,true);
 });
 
+test('R40 slot-update CLI binds Desktop policy as one exact pair and enables runtime only explicitly', () => {
+  const base=['--stage','stage','--development-root','dev','--expected-version','0.12.0','--expected-manifest',hex('a')];
+  assert.throws(()=>parseUpdateArgs([...base,'--desktop-policy','C:/candidate/desktop.json']),/desktop policy.*pair/i);
+  assert.throws(()=>parseUpdateArgs([...base,'--desktop-policy-sha256',hex('b')]),/desktop policy.*pair/i);
+  const plain=parseUpdateArgs([...base,'--desktop-policy','C:/candidate/desktop.json','--desktop-policy-sha256',hex('b')]);
+  assert.equal(plain.desktopPolicyBootstrap.path,path.resolve('C:/candidate/desktop.json'));
+  assert.equal(plain.desktopPolicyBootstrap.sha256,hex('b'));
+  assert.equal(plain.enableDesktop,false);
+  const enabled=parseUpdateArgs([...base,'--desktop-policy','C:/candidate/desktop.json','--desktop-policy-sha256',hex('b'),'--enable-desktop']);
+  assert.equal(enabled.enableDesktop,true);
+  assert.throws(()=>parseUpdateArgs([...base,'--enable-desktop','--enable-desktop']),/duplicate self-update argument/i);
+});
+
+test('R40 Desktop policy bootstrap accepts only exact pinned enabled policy bytes',async()=>{
+  const root=await mkdtemp(path.join(os.tmpdir(),'deadbyte-r40-desktop-bootstrap-'));
+  const file=path.join(root,'desktop.json');
+  const policy={schema:'deadbyte.desktop-policy.v1',enabled:true,grant_file:'C:/old/grant.json',evidence_dir:'C:/old/evidence',
+    allowed_actions:['click_primary'],allowed_input_desktops:['Default'],limits:{},
+    observer:{executable:'C:/old/observer.exe',sha256:hex('1')},
+    input:{executable:'C:/old/input.exe',sha256:hex('2')},
+    grounder:{executable:'C:/old/uia.exe',sha256:hex('3')}};
+  const bytes=Buffer.from(JSON.stringify(policy)+'\n','utf8');await writeFile(file,bytes);
+  assert.equal(typeof runtimeUpdate.prepareDesktopPolicyBootstrap,'function');
+  const accepted=await runtimeUpdate.prepareDesktopPolicyBootstrap({path:file,sha256:sha(bytes)});
+  assert.equal(accepted.sha256,sha(bytes));assert.deepEqual(accepted.policy,policy);
+  await assert.rejects(runtimeUpdate.prepareDesktopPolicyBootstrap({path:file,sha256:hex('f')}),/desktop policy.*SHA-256 mismatch/i);
+  const bad=path.join(root,'bad.json');await writeFile(bad,JSON.stringify({...policy,enabled:false}));
+  await assert.rejects(runtimeUpdate.prepareDesktopPolicyBootstrap({path:bad,sha256:sha(await readFile(bad))}),/desktop policy schema\/enabled/i);
+});
+
+test('R40 updater threads Desktop policy into generation and never restores Desktop authority automatically',async()=>{
+  const source=await readFile(new URL('../src/runtime-update.mjs',import.meta.url),'utf8');
+  assert.match(source,/prepareDesktopPolicyBootstrap\(desktopPolicyBootstrap\)/);
+  assert.match(source,/control\.desktopPolicy=desktopBootstrap\.policy/);
+  assert.match(source,/control\.config\.DesktopRuntimeEnabled=true/);
+  assert.match(source,/desktopPolicy:control\.desktopPolicy/);
+  assert.match(source,/desktopPolicyBootstrap:args\.desktopPolicyBootstrap/);
+  assert.match(source,/enableDesktop:args\.enableDesktop/);
+  assert.match(source,/controllerCaptured\(ctx,'disarmdesktop',15000\)/);
+  assert.doesNotMatch(source,/controllerCaptured\(ctx,'armdesktop',15000\)/);
+  assert.match(source,/desktop plane must remain disarmed after slot switch/);
+  assert.match(source,/desktop_restore_policy:'explicit-rearm-required'/);
+});
+
 test('R35 slot-update CLI binds semantic LSP config as one exact path plus SHA-256 pair', () => {
   const base=['--stage','stage','--development-root','dev','--expected-version','0.9.0','--expected-manifest',hex('a')];
   assert.throws(() => parseUpdateArgs([...base,'--semantic-lsp-config','C:/candidate/semantic.json']), /semantic LSP config.*pair/i);