deadbyte-mcp 0.11.3 → 0.13.0

package/controller/deadbyte-controller.ps1

@@ -2,7 +2,7 @@
 [CmdletBinding()]
 param(
     [Parameter(Position=0)]
-    [ValidateSet('menu','start','resume','park','stop','restart','status','url','test','fulltest','toggle','clean','machinetest','armprocess','disarmprocess','processstatus','armhost','disarmhost','hoststatus','hosttest','armcoding','disarmcoding','codingstatus','codingtest','armautonomous','disarmautonomous','autonomousstatus','autonomoustest','supervisorstart','supervisorstop','supervisorstatus','supervisorrecover')]
+    [ValidateSet('menu','start','resume','park','stop','restart','status','url','test','fulltest','toggle','clean','machinetest','armprocess','disarmprocess','processstatus','armhost','disarmhost','hoststatus','hosttest','armcoding','disarmcoding','codingstatus','codingtest','armautonomous','disarmautonomous','autonomousstatus','autonomoustest','supervisorstart','supervisorstop','supervisorstatus','supervisorrecover','armdesktop','disarmdesktop','desktopstatus')]
     [string]$Command = 'menu'
 )
 
@@ -197,6 +197,19 @@ function Get-Config {
     }
     if ([bool]$cfg.ObservationRuntimeEnabled -and -not [bool]$cfg.MachineRuntimeEnabled) { Fail 'ObservationRuntimeEnabled requires MachineRuntimeEnabled' }
     if ([bool]$cfg.ObservationRuntimeEnabled -and -not [bool]$cfg.CodingRuntimeEnabled) { Fail 'ObservationRuntimeEnabled requires CodingRuntimeEnabled' }
+    if ($cfg.ContainsKey('DesktopRuntimeEnabled')) {
+        if ($cfg.DesktopRuntimeEnabled -isnot [bool]) { Fail 'DesktopRuntimeEnabled must be boolean' }
+    } else {
+        $cfg['DesktopRuntimeEnabled'] = $false
+    }
+    if ($cfg.ContainsKey('DesktopPolicyFile') -and -not [string]::IsNullOrWhiteSpace([string]$cfg.DesktopPolicyFile)) {
+        $desktopPolicy = [System.IO.Path]::GetFullPath([string]$cfg.DesktopPolicyFile)
+        if (-not (Test-Path -LiteralPath $desktopPolicy -PathType Leaf)) { Fail "DesktopPolicyFile missing: $desktopPolicy" }
+        $cfg['DesktopPolicyFile'] = $desktopPolicy
+    } else {
+        $cfg['DesktopPolicyFile'] = ''
+    }
+    if ([bool]$cfg.DesktopRuntimeEnabled -and [string]::IsNullOrWhiteSpace([string]$cfg.DesktopPolicyFile)) { Fail 'DesktopRuntimeEnabled requires DesktopPolicyFile' }
     if ($cfg.ContainsKey('AutonomousRuntimeEnabled')) {
         if ($cfg.AutonomousRuntimeEnabled -isnot [bool]) { Fail 'AutonomousRuntimeEnabled must be boolean' }
     } else {
@@ -420,6 +433,10 @@ function Start-OwnedComponent([string]$Name, $Spec, $Cfg = $null) {
     $previousMachineFsRuntimeEnv = $env:DEADBYTE_MACHINE_FS_RUNTIME
     $hadObservationRuntimeEnv = Test-Path Env:DEADBYTE_OBSERVATION_RUNTIME
     $previousObservationRuntimeEnv = $env:DEADBYTE_OBSERVATION_RUNTIME
+    $hadDesktopRuntimeEnv = Test-Path Env:DEADBYTE_DESKTOP_RUNTIME
+    $previousDesktopRuntimeEnv = $env:DEADBYTE_DESKTOP_RUNTIME
+    $hadDesktopPolicyEnv = Test-Path Env:DEADBYTE_DESKTOP_POLICY
+    $previousDesktopPolicyEnv = $env:DEADBYTE_DESKTOP_POLICY
     $hadCodingPolicyEnv = Test-Path Env:DEADBYTE_CODING_POLICY
     $previousCodingPolicyEnv = $env:DEADBYTE_CODING_POLICY
     $hadSemanticConfigEnv = Test-Path Env:DEADBYTE_SEMANTIC_LSP_CONFIG
@@ -453,6 +470,12 @@ function Start-OwnedComponent([string]$Name, $Spec, $Cfg = $null) {
             $env:DEADBYTE_CODING_RUNTIME = if ([bool]$Cfg.CodingRuntimeEnabled) { '1' } else { '0' }
             $env:DEADBYTE_MACHINE_FS_RUNTIME = if ([bool]$Cfg.MachineFsRuntimeEnabled) { '1' } else { '0' }
             $env:DEADBYTE_OBSERVATION_RUNTIME = if ([bool]$Cfg.ObservationRuntimeEnabled) { '1' } else { '0' }
+            $env:DEADBYTE_DESKTOP_RUNTIME = if ([bool]$Cfg.DesktopRuntimeEnabled) { '1' } else { '0' }
+            if (-not [string]::IsNullOrWhiteSpace([string]$Cfg.DesktopPolicyFile)) {
+                $env:DEADBYTE_DESKTOP_POLICY = [string]$Cfg.DesktopPolicyFile
+            } else {
+                Remove-Item Env:DEADBYTE_DESKTOP_POLICY -ErrorAction SilentlyContinue
+            }
             if (-not [string]::IsNullOrWhiteSpace([string]$Cfg.CodingPolicyFile)) {
                 $env:DEADBYTE_CODING_POLICY = [string]$Cfg.CodingPolicyFile
             }
@@ -481,6 +504,8 @@ function Start-OwnedComponent([string]$Name, $Spec, $Cfg = $null) {
             Remove-Item Env:DEADBYTE_PROCESS_POLICY -ErrorAction SilentlyContinue
             Remove-Item Env:DEADBYTE_MACHINE_FS_RUNTIME -ErrorAction SilentlyContinue
             Remove-Item Env:DEADBYTE_OBSERVATION_RUNTIME -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_DESKTOP_RUNTIME -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_DESKTOP_POLICY -ErrorAction SilentlyContinue
             Remove-Item Env:DEADBYTE_SEMANTIC_LSP_CONFIG -ErrorAction SilentlyContinue
             Remove-Item Env:DEADBYTE_SEMANTIC_LSP_CONFIG_SHA256 -ErrorAction SilentlyContinue
             Remove-Item Env:DEADBYTE_AUTONOMOUS_SUPERVISOR_MODE -ErrorAction SilentlyContinue
@@ -518,6 +543,10 @@ function Start-OwnedComponent([string]$Name, $Spec, $Cfg = $null) {
         else { Remove-Item Env:DEADBYTE_MACHINE_FS_RUNTIME -ErrorAction SilentlyContinue }
         if ($hadObservationRuntimeEnv) { $env:DEADBYTE_OBSERVATION_RUNTIME = $previousObservationRuntimeEnv }
         else { Remove-Item Env:DEADBYTE_OBSERVATION_RUNTIME -ErrorAction SilentlyContinue }
+        if ($hadDesktopRuntimeEnv) { $env:DEADBYTE_DESKTOP_RUNTIME = $previousDesktopRuntimeEnv }
+        else { Remove-Item Env:DEADBYTE_DESKTOP_RUNTIME -ErrorAction SilentlyContinue }
+        if ($hadDesktopPolicyEnv) { $env:DEADBYTE_DESKTOP_POLICY = $previousDesktopPolicyEnv }
+        else { Remove-Item Env:DEADBYTE_DESKTOP_POLICY -ErrorAction SilentlyContinue }
         if ($hadCodingPolicyEnv) { $env:DEADBYTE_CODING_POLICY = $previousCodingPolicyEnv }
         else { Remove-Item Env:DEADBYTE_CODING_POLICY -ErrorAction SilentlyContinue }
         if ($hadSemanticConfigEnv) { $env:DEADBYTE_SEMANTIC_LSP_CONFIG = $previousSemanticLspConfigEnv }
@@ -737,6 +766,7 @@ function Start-Deadbyte($Cfg) {
 }
 
 function Park-Deadbyte($Cfg) {
+    Disarm-Desktop $Cfg -Quiet
     Stop-OwnedComponent 'Bridge'
     $s = Get-ObservedState $Cfg
     if ($s.State -notin @('PARKED','OFFLINE')) { Fail "park gate failed: observed $($s.State)" }
@@ -744,6 +774,7 @@ function Park-Deadbyte($Cfg) {
 }
 
 function Stop-Deadbyte($Cfg) {
+    Disarm-Desktop $Cfg -Quiet
     Stop-OwnedComponent 'Bridge'
     Stop-OwnedComponent 'Cloud'
     Remove-Item -LiteralPath (Join-Path $RuntimeDir 'current-origin.txt') -Force -ErrorAction SilentlyContinue
@@ -992,6 +1023,107 @@ function Show-AutonomousStatus($Cfg) {
     return $a
 }
 
+function Get-DesktopPolicyMetadata($Cfg) {
+    if ([string]::IsNullOrWhiteSpace([string]$Cfg.DesktopPolicyFile)) { Fail 'desktop plane is not configured' }
+    $policyPath = [string]$Cfg.DesktopPolicyFile
+    try { $policy = Get-Content -LiteralPath $policyPath -Raw -Encoding UTF8 | ConvertFrom-Json } catch { Fail "invalid desktop policy JSON: $policyPath" }
+    if ($policy.schema -ne 'deadbyte.desktop-policy.v1' -or $policy.enabled -ne $true) { Fail 'desktop policy schema/enabled mismatch' }
+    if ([string]::IsNullOrWhiteSpace([string]$policy.grant_file)) { Fail 'desktop policy grant_file missing' }
+    if ([string]::IsNullOrWhiteSpace([string]$policy.evidence_dir)) { Fail 'desktop policy evidence_dir missing' }
+    $grantFile = [System.IO.Path]::GetFullPath([string]$policy.grant_file)
+    $evidenceDir = [System.IO.Path]::GetFullPath([string]$policy.evidence_dir)
+    $runtimeReal = [System.IO.Path]::GetFullPath($RuntimeDir).TrimEnd('\') + '\'
+    if (-not $grantFile.StartsWith($runtimeReal, [System.StringComparison]::OrdinalIgnoreCase)) { Fail 'desktop policy grant_file must live under controller runtime directory' }
+    if (-not ($evidenceDir.TrimEnd('\') + '\').StartsWith($runtimeReal, [System.StringComparison]::OrdinalIgnoreCase)) { Fail 'desktop policy evidence_dir must live under controller runtime directory' }
+    $knownActions = @('pointer_move','click_primary','click_secondary','double_click_primary','scroll','key_chord','text_input')
+    $actionKinds = @($policy.allowed_actions)
+    $uniqueActions = @($actionKinds | Sort-Object -Unique)
+    if ($actionKinds.Count -lt 1 -or $actionKinds.Count -ne $uniqueActions.Count -or @($actionKinds | Where-Object { $_ -notin $knownActions }).Count -gt 0) { Fail 'desktop policy allowed_actions invalid' }
+    if (-not $policy.observer -or [string]::IsNullOrWhiteSpace([string]$policy.observer.executable) -or [string]$policy.observer.sha256 -cnotmatch '^[0-9a-f]{64}$') { Fail 'desktop observer metadata invalid' }
+    if (-not $policy.input -or [string]::IsNullOrWhiteSpace([string]$policy.input.executable) -or [string]$policy.input.sha256 -cnotmatch '^[0-9a-f]{64}$') { Fail 'desktop input metadata invalid' }
+    if (-not $policy.grounder -or [string]::IsNullOrWhiteSpace([string]$policy.grounder.executable) -or [string]$policy.grounder.sha256 -cnotmatch '^[0-9a-f]{64}$') { Fail 'desktop grounder metadata invalid' }
+    $observerPath = [System.IO.Path]::GetFullPath([string]$policy.observer.executable)
+    $inputPath = [System.IO.Path]::GetFullPath([string]$policy.input.executable)
+    $grounderPath = [System.IO.Path]::GetFullPath([string]$policy.grounder.executable)
+    foreach ($provider in @(
+        [pscustomobject]@{ Name='observer'; Path=$observerPath; Sha256=([string]$policy.observer.sha256).ToLowerInvariant() },
+        [pscustomobject]@{ Name='input'; Path=$inputPath; Sha256=([string]$policy.input.sha256).ToLowerInvariant() },
+        [pscustomobject]@{ Name='grounder'; Path=$grounderPath; Sha256=([string]$policy.grounder.sha256).ToLowerInvariant() }
+    )) {
+        if (-not (Test-Path -LiteralPath $provider.Path -PathType Leaf)) { Fail "desktop $($provider.Name) executable missing: $($provider.Path)" }
+        $item = Get-Item -LiteralPath $provider.Path -Force
+        if (($item.Attributes -band [System.IO.FileAttributes]::ReparsePoint) -ne 0) { Fail "desktop $($provider.Name) executable must not be a reparse point" }
+        $actual = Get-ExecutableHash $provider.Path
+        if ($actual -ne $provider.Sha256) { Fail "desktop $($provider.Name) executable SHA-256 mismatch: expected $($provider.Sha256), found $actual" }
+    }
+    [pscustomobject]@{
+        Path=$policyPath; Sha256=Get-ExecutableHash $policyPath; GrantFile=$grantFile; EvidenceDir=$evidenceDir;
+        ActionKinds=$actionKinds; ObserverPath=$observerPath; ObserverSha256=([string]$policy.observer.sha256).ToLowerInvariant();
+        InputPath=$inputPath; InputSha256=([string]$policy.input.sha256).ToLowerInvariant();
+        GrounderPath=$grounderPath; GrounderSha256=([string]$policy.grounder.sha256).ToLowerInvariant()
+    }
+}
+
+function Get-DesktopGrantFileForRevoke($Cfg) {
+    if ([string]::IsNullOrWhiteSpace([string]$Cfg.DesktopPolicyFile)) { return '' }
+    $policyPath = [string]$Cfg.DesktopPolicyFile
+    try { $policy = Get-Content -LiteralPath $policyPath -Raw -Encoding UTF8 | ConvertFrom-Json } catch { Fail "invalid desktop policy JSON during revoke: $policyPath" }
+    if ([string]::IsNullOrWhiteSpace([string]$policy.grant_file)) { Fail 'desktop policy grant_file missing during revoke' }
+    $grantFile = [System.IO.Path]::GetFullPath([string]$policy.grant_file)
+    $runtimeReal = [System.IO.Path]::GetFullPath($RuntimeDir).TrimEnd('\') + '\'
+    if (-not $grantFile.StartsWith($runtimeReal, [System.StringComparison]::OrdinalIgnoreCase)) { Fail 'desktop policy grant_file must live under controller runtime directory' }
+    return $grantFile
+}
+
+function Get-DesktopGrantStatus($Cfg) {
+    if ([string]::IsNullOrWhiteSpace([string]$Cfg.DesktopPolicyFile)) { return [pscustomobject]@{ Configured=$false; Armed=$false; Reason='no-policy'; ActionKinds=@() } }
+    try { $meta = Get-DesktopPolicyMetadata $Cfg } catch { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason=$_.Exception.Message; ActionKinds=@() } }
+    if (-not (Test-Path -LiteralPath $meta.GrantFile -PathType Leaf)) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='disarmed'; ActionKinds=@() } }
+    try { $grant = Get-Content -LiteralPath $meta.GrantFile -Raw -Encoding UTF8 | ConvertFrom-Json } catch { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='invalid-grant'; ActionKinds=@() } }
+    if ($grant.schema -ne 'deadbyte.desktop-grant.v1') { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='grant-schema'; ActionKinds=@() } }
+    if ([string]$grant.policy_sha256 -ne [string]$meta.Sha256) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='policy-digest'; ActionKinds=@() } }
+    if ([string]$grant.instance_nonce -cnotmatch '^[0-9a-f]{64}$') { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='nonce-invalid'; ActionKinds=@() } }
+    $actions = @($grant.action_kinds)
+    $unique = @($actions | Sort-Object -Unique)
+    if ($actions.Count -lt 1 -or $actions.Count -ne $unique.Count) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='actions-invalid'; ActionKinds=@() } }
+    if (@($actions | Where-Object { $_ -notin $meta.ActionKinds }).Count -gt 0) { return [pscustomobject]@{ Configured=$true; Armed=$false; Reason='actions-outside-policy'; ActionKinds=@() } }
+    return [pscustomobject]@{ Configured=$true; Armed=$true; Reason='standing-grant'; ActionKinds=$actions }
+}
+
+function Arm-Desktop($Cfg) {
+    $meta = Get-DesktopPolicyMetadata $Cfg
+    Ensure-Directory $RuntimeDir
+    Ensure-Directory $meta.EvidenceDir
+    $nonceBytes = New-Object byte[] 32
+    $rng = [System.Security.Cryptography.RandomNumberGenerator]::Create()
+    try { $rng.GetBytes($nonceBytes) } finally { $rng.Dispose() }
+    $nonce = -join ($nonceBytes | ForEach-Object { $_.ToString('x2') })
+    $body = [ordered]@{
+        schema = 'deadbyte.desktop-grant.v1'
+        policy_sha256 = [string]$meta.Sha256
+        instance_nonce = $nonce
+        action_kinds = @($meta.ActionKinds)
+        granted_at_utc = [DateTime]::UtcNow.ToString('o')
+    }
+    $tmp = $meta.GrantFile + '.tmp'
+    $body | ConvertTo-Json -Depth 6 | Set-Content -LiteralPath $tmp -Encoding UTF8
+    Move-Item -LiteralPath $tmp -Destination $meta.GrantFile -Force
+    Write-Host ("DESKTOP PLANE ENABLED UNTIL EXPLICIT REVOKE [{0}]" -f ($meta.ActionKinds -join ','))
+}
+
+function Disarm-Desktop($Cfg, [switch]$Quiet) {
+    $grantFile = Get-DesktopGrantFileForRevoke $Cfg
+    if ([string]::IsNullOrWhiteSpace([string]$grantFile)) { return }
+    Remove-Item -LiteralPath $grantFile -Force -ErrorAction SilentlyContinue
+    if (-not $Quiet) { Write-Host 'DESKTOP PLANE DISARMED' }
+}
+
+function Show-DesktopStatus($Cfg) {
+    $d = Get-DesktopGrantStatus $Cfg
+    Write-Host ("Desktop plane : {0} [{1}]" -f $(if ($d.Armed) { 'ARMED' } elseif ($d.Configured) { 'DISARMED' } else { 'UNCONFIGURED' }), $d.Reason)
+    return $d
+}
+
 function Get-AutonomousSupervisorStatus($Cfg) {
     if (-not [bool]$Cfg.AutonomousSupervisorEnabled) { return [pscustomobject]@{ Configured=$false; Running=$false; Reason='disabled'; Owned=$null } }
     $owned = Test-OwnedInstance 'Supervisor'
@@ -1022,6 +1154,7 @@ function Show-AutonomousSupervisorStatus($Cfg) {
 
 function Recover-AutonomousSupervisor($Cfg) {
     if (-not [bool]$Cfg.AutonomousSupervisorEnabled) { Fail 'autonomous supervisor recovery requires AutonomousSupervisorEnabled' }
+    Disarm-Desktop $Cfg -Quiet
     Start-Deadbyte $Cfg | Out-Null
     try { Disarm-Autonomous $Cfg -Quiet } catch {}
     try { Disarm-Coding $Cfg } catch {}
@@ -1032,11 +1165,12 @@ function Recover-AutonomousSupervisor($Cfg) {
     $process = Get-ProcessGrantStatus $Cfg
     $coding = Get-CodingLeaseStatus $Cfg
     $autonomous = Get-AutonomousLeaseStatus $Cfg
+    $desktop = Get-DesktopGrantStatus $Cfg
     $hostStatus = Get-HostArmStatus $Cfg
-    if ($process.Armed -or $coding.Armed -or $autonomous.Armed -or $hostStatus.Armed) { Fail 'supervisor recovery final authority is not fully disarmed' }
+    if ($process.Armed -or $coding.Armed -or $autonomous.Armed -or $desktop.Armed -or $hostStatus.Armed) { Fail 'supervisor recovery final authority is not fully disarmed' }
     $supervisor = Start-AutonomousSupervisor $Cfg
     Write-Host 'AUTONOMOUS SUPERVISOR RECOVERY PASS: runtime ONLINE; privileged planes DISARMED.'
-    return [pscustomobject]@{ Runtime=$runtime; Supervisor=$supervisor; Process=$process; Coding=$coding; Autonomous=$autonomous; Host=$hostStatus }
+    return [pscustomobject]@{ Runtime=$runtime; Supervisor=$supervisor; Process=$process; Coding=$coding; Autonomous=$autonomous; Desktop=$desktop; Host=$hostStatus }
 }
 
 function Show-State($Cfg) {
@@ -1055,11 +1189,13 @@ function Show-State($Cfg) {
     Write-Host ("Coding runtime: {0}" -f $(if ([bool]$Cfg.CodingRuntimeEnabled) { 'ENABLED' } else { 'DISABLED' }))
     Write-Host ("Machine FS rt : {0}" -f $(if ([bool]$Cfg.MachineFsRuntimeEnabled) { 'ENABLED' } else { 'DISABLED' }))
     Write-Host ("Observation rt: {0}" -f $(if ([bool]$Cfg.ObservationRuntimeEnabled) { 'ENABLED' } else { 'DISABLED' }))
+    Write-Host ("Desktop runtime: {0}" -f $(if ([bool]$Cfg.DesktopRuntimeEnabled) { 'ENABLED' } else { 'DISABLED' }))
     Write-Host ("Autonomous rt : {0}" -f $(if ([bool]$Cfg.AutonomousRuntimeEnabled) { 'ENABLED' } else { 'DISABLED' }))
     Show-AutonomousSupervisorStatus $Cfg | Out-Null
     Show-ProcessStatus $Cfg | Out-Null
     Show-CodingStatus $Cfg | Out-Null
     Show-AutonomousStatus $Cfg | Out-Null
+    Show-DesktopStatus $Cfg | Out-Null
     Show-HostStatus $Cfg | Out-Null
     return $s
 }
@@ -1171,6 +1307,9 @@ function Run-Command([string]$Name) {
         'disarmautonomous' { Disarm-Autonomous $cfg; Show-AutonomousStatus $cfg | Out-Null }
         'autonomousstatus' { Show-AutonomousStatus $cfg | Out-Null }
         'autonomoustest' { Invoke-AutonomousSmoke $cfg }
+        'armdesktop' { Arm-Desktop $cfg; Show-DesktopStatus $cfg | Out-Null }
+        'disarmdesktop' { Disarm-Desktop $cfg; Show-DesktopStatus $cfg | Out-Null }
+        'desktopstatus' { Show-DesktopStatus $cfg | Out-Null }
         'supervisorstart' { Start-AutonomousSupervisor $cfg | Out-Null; Show-AutonomousSupervisorStatus $cfg | Out-Null }
         'supervisorstop' { Stop-AutonomousSupervisor $cfg | Out-Null; Show-AutonomousSupervisorStatus $cfg | Out-Null }
         'supervisorstatus' { Show-AutonomousSupervisorStatus $cfg | Out-Null }
@@ -1197,7 +1336,7 @@ while ($true) {
     Clear-Host
     $cfg = Get-Config
     Assert-ControllerRootBound $cfg
-    Write-Host 'DEADBYTE MCP ON-DEMAND CONTROLLER V0.11.3 / R39'
+    Write-Host 'DEADBYTE MCP ON-DEMAND CONTROLLER V0.13.0 / R41'
     Write-Host '======================================'
     Show-State $cfg | Out-Null
     Write-Host ''
@@ -1225,6 +1364,9 @@ while ($true) {
     Write-Host '[22] Enable process plane (standing grant)'
     Write-Host '[23] Revoke process plane'
     Write-Host '[24] Process plane status'
+    Write-Host '[25] Enable desktop plane (standing grant; never auto-armed)'
+    Write-Host '[26] Revoke desktop plane'
+    Write-Host '[27] Desktop plane status'
     Write-Host '[0] Exit controller (runtime stays as-is)'
     $choice = Read-Host 'Select'
     try {
@@ -1253,6 +1395,9 @@ while ($true) {
             '22' { Run-Command 'armprocess' }
             '23' { Run-Command 'disarmprocess' }
             '24' { Run-Command 'processstatus' }
+            '25' { Run-Command 'armdesktop' }
+            '26' { Run-Command 'disarmdesktop' }
+            '27' { Run-Command 'desktopstatus' }
             '0' { exit 0 }
             default { Write-Warning 'invalid selection' }
         }

package/controller/deadbyte-desktop-policy.json

@@ -0,0 +1,41 @@
+{
+    "schema":  "deadbyte.desktop-policy.v1",
+    "enabled":  true,
+    "grant_file":  "D:\\Projects\\deadbyte-mcp-r41-memory-dev\\controller\\runtime\\desktop-grant.json",
+    "evidence_dir":  "D:\\Projects\\deadbyte-mcp-r41-memory-dev\\controller\\runtime\\desktop-evidence",
+    "observer":  {
+                     "executable":  "D:\\Projects\\deadbyte-mcp-r41-memory-dev\\bin\\deadbyte-desktop-observer-r40.exe",
+                     "sha256":  "32671ef2b7decd68c25fcabfe064086e4b3f83a8e9d3558b9d6de3a2510c6dab",
+                     "backend":  "gdi-bitblt-fallback"
+                 },
+    "input":  {
+                  "executable":  "D:\\Projects\\deadbyte-mcp-r41-memory-dev\\bin\\deadbyte-desktop-input-r40.exe",
+                  "sha256":  "0b967fd0ef599cbb9882b96ea16db7261f086dbcccae631b56f1bc2445a8ab5b"
+              },
+    "grounder":  {
+                     "executable":  "D:\\Projects\\deadbyte-mcp-r41-memory-dev\\bin\\deadbyte-desktop-uia-r40.exe",
+                     "sha256":  "19ff558218fe8437dc04f50a8848756a8a83a84f73f464057562d77c7e19fb75"
+                 },
+    "allowed_input_desktops":  [
+                                   "Default"
+                               ],
+    "allowed_actions":  [
+                            "pointer_move",
+                            "click_primary",
+                            "click_secondary",
+                            "double_click_primary",
+                            "scroll",
+                            "key_chord",
+                            "text_input"
+                        ],
+    "limits":  {
+                   "max_frame_age_ms":  2000,
+                   "max_frame_bytes":  134217728,
+                   "capture_timeout_ms":  10000,
+                   "input_timeout_ms":  5000,
+                   "ground_timeout_ms":  5000,
+                   "post_observe_timeout_ms":  10000,
+                   "max_preview_bytes":  1048576,
+                   "max_text_bytes":  4096
+               }
+}

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "D:\\Projects\\deadbyte-mcp-r36-dev\\controller\\runtime\\process-grant.json",
-  "state_dir": "D:\\Projects\\deadbyte-mcp-r36-dev\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp-r41-memory-dev\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp-r41-memory-dev\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "D:\\Projects\\deadbyte-mcp-r36-dev\\bin\\deadbyte-process-host.exe",
+    "path": "D:\\Projects\\deadbyte-mcp-r41-memory-dev\\bin\\deadbyte-process-host.exe",
     "sha256": "59ea2026c39a1266c0d645a4cf39d7955ac2cf905f7cda812f546dfc9de636fb"
   },
   "roots": {
     "core": {
-      "path": "D:\\Projects\\deadbyte-mcp-r36-dev",
+      "path": "D:\\Projects\\deadbyte-mcp-r41-memory-dev",
       "deny_paths": [
         "node_modules",
         "controller/runtime",

package/docs/ARCHITECTURE.md

@@ -1,4 +1,4 @@
-# DEADBYTE MCP V0.11.3 / R39 ARCHITECTURE
+# DEADBYTE MCP V0.13.0 / R41 ARCHITECTURE
 
 ```mermaid
 flowchart TD
@@ -14,6 +14,11 @@ flowchart TD
     D --> MF[Optional Machine FS 8 Tools]
     D --> OB[Optional Observation 6 Tools]
     D --> AA[Optional Autonomous 12 Tools]
+    D --> DT[Optional Desktop 4 Tools]
+    DT --> DOBS[Native Windows Observation + UIA Grounding]
+    DOBS --> DGUARD[Frame/Epoch/Topology/Foreground Guard]
+    DGUARD --> DINPUT[Separate Desktop Standing Grant + SendInput]
+    DINPUT --> DPOST[Signed Post-Observation + Effect Chain]
     E --> H[Workspace Path Policy]
     E --> I[Contained Operation Policy]
     I --> J[Private Import]

package/docs/superpowers/specs/2026-09-19-r40-desktop-computer-use-design.md

@@ -0,0 +1,214 @@
+# R40 DESKTOP COMPUTER-USE DESIGN
+
+Status: R40-T1 implementation baseline
+Date: 2026-09-19
+Predecessor: PUBLIC_FINAL v0.11.3 / R39
+Development root only. The sealed v0.11.3 release slot is not modified.
+
+## Goal
+
+Add real Windows desktop computer-use without weakening DEADBYTE's authority/evidence model.
+
+Canonical chain:
+
+CAPABILITY -> AUTHORITY -> INTENT -> PRE-OBSERVATION -> GUARDED EFFECT -> POST-OBSERVATION -> EVIDENCE -> ACCEPTANCE
+
+A screenshot is evidence, not authority. A coordinate is not a target unless it is bound to a fresh frame, desktop epoch, display topology, and (when required) foreground window identity.
+
+## Research inputs
+
+The R40 design studies techniques rather than copying an upstream runtime.
+
+- Simular Agent-S: screen-grounded computer use with mouse/keyboard actions and iterative desktop observation.
+- SWE-agent / mini-SWE-agent lineage: narrow Agent-Computer Interfaces that make environment interaction explicit and model-friendly.
+- Desktop Commander / Remote Desktop Commander: persistent device sessions, remote machine process/file operations, and foreground device-agent lifecycle.
+- Serena: semantic coding remains the preferred path for source changes; desktop control is a fallback for GUI-only work, not a replacement for semantic tools.
+- Letta: persistent state should retain compact durable facts and verified trajectory summaries instead of unbounded raw context.
+- Guardrails: structured action validation and fail/repair behavior before side effects.
+- OpenManus: tool-mediated general-agent/browser workflows are useful as orchestration references; DEADBYTE keeps its own authority and evidence chain.
+- Windows platform authority remains Microsoft APIs. No upstream GUI-agent Python automation runtime becomes production authority.
+
+## Non-goals
+
+- No arbitrary Python/Bash execution for GUI control.
+- No OCR dependency in the authority path.
+- No image-only claim that an action succeeded.
+- No host-plane arm as a shortcut.
+- No Firecracker claim: DEADBYTE remains Windows-native; AppContainer/Job Object containment is not a microVM.
+- No public R40 tool until native observation, guarded input, post-observation, and adversarial acceptance all pass.
+
+## R40 construction ladder
+
+### T1 — Desktop action contract (this change)
+
+Pure deterministic contract layer:
+- desktop epoch binding;
+- virtual-desktop bounds;
+- active-window binding;
+- frame hash and topology hash;
+- maximum frame age;
+- coordinate bounds;
+- explicit action intent;
+- stale-frame rejection;
+- post-observation binding;
+- no success inference from visual change alone.
+
+No input is generated in T1.
+
+### T2 — Windows native observer
+
+Implement a fixed native helper owned by the release:
+- enumerate monitor topology;
+- capture virtual desktop frame;
+- report foreground HWND/PID;
+- report frame dimensions and DPI/topology data;
+- emit exact binary frame bytes plus metadata hash;
+- bounded capture time and frame size;
+- no caller-selected executable;
+- native helper SHA pinned in release manifest.
+
+Primary implementation candidates:
+1. Windows Graphics Capture where production-compatible;
+2. Desktop Duplication for monitor capture where appropriate;
+3. GDI only as a compatibility fallback, never as unlabelled equivalent evidence.
+
+T2 acceptance includes multi-monitor coordinates, DPI scaling, minimized/locked/secure desktop behavior, and capture-failure semantics.
+
+### T3 — Guarded input plane
+
+Add a separate Desktop authority grant. It is not Coding, Process, Autonomous, or Host authority.
+
+Allowed actions are fixed:
+- pointer move;
+- primary/secondary click;
+- double click;
+- bounded wheel scroll;
+- key chord from allowlisted key vocabulary;
+- bounded UTF-8 text insertion.
+
+Every mutating action requires:
+- explicit Desktop standing grant;
+- exact pre-frame id;
+- desktop epoch;
+- display topology hash;
+- optional required foreground-window binding;
+- frame age within policy;
+- coordinate inside captured virtual desktop;
+- fresh pre-observation immediately before effect.
+
+Windows input implementation will use fixed native APIs (for example SendInput) behind a pinned worker. Caller cannot inject arbitrary Win32 messages or choose an executable.
+
+### T4 — Post-observe + stale-frame/recovery
+
+Every Desktop effect must produce:
+- action receipt;
+- post-frame receipt;
+- before/action/after chain hash;
+- change_observed boolean;
+- foreground-window transition;
+- effect-ledger binding.
+
+A changed image is NOT equivalent to task success.
+An unchanged image is NOT automatically failure.
+The planner receives observed facts and decides/replans through the existing autonomous release/verification model.
+
+A frame becomes unusable when any required binding changes:
+- desktop epoch;
+- topology hash;
+- expected foreground window;
+- frame identity;
+- age budget.
+
+### T5 — Grounding and target selection
+
+Grounding may produce candidate regions, but it never directly generates input.
+Candidate target contract:
+- target rectangle;
+- confidence;
+- source kind (visual, UI Automation, accessibility, deterministic geometry);
+- frame id;
+- optional semantic label hash;
+- optional HWND/PID binding.
+
+R40 should prefer deterministic Windows UI Automation/accessibility targets when available and use visual grounding for applications that do not expose usable semantics.
+
+### T6 — Durable desktop memory
+
+Borrow the useful stateful-agent principle without importing an external memory runtime.
+
+Persist only authenticated summaries:
+- stable application/window identifiers;
+- verified successful navigation facts;
+- rejected/stale target fingerprints;
+- compact recent action trajectory;
+- last verified desktop epoch/topology.
+
+Do not persist raw screenshots forever by default.
+Memory cannot grant authority.
+Memory cannot override a fresh observation.
+Stale memory is planner context only.
+
+### T7 — Autonomous desktop loop
+
+Extend autonomous action kinds with desktop effects only after T2-T6 pass.
+
+Loop:
+OBSERVE -> GROUND -> PLAN -> GUARD -> ACT -> POST-OBSERVE -> VERIFY -> REPLAN
+
+Loop guard additionally blocks:
+- repeated clicks on the same target/frame family;
+- repeated no-change effects;
+- focus thrashing;
+- stale-frame retries;
+- destructive action escalation without explicit policy.
+
+### T8 — Public MCP surface
+
+Target compact gateways, names provisional:
+- desktop_observe
+- desktop_target
+- desktop_action
+- desktop_status
+
+Keep the public compact surface within an explicitly revised ceiling. Do not silently grow the R39 41-tool contract.
+
+### T9 — Acceptance
+
+Required adversarial proof:
+- stale frame denied;
+- wrong epoch denied;
+- wrong topology denied;
+- wrong foreground window denied;
+- off-screen coordinate denied;
+- integer overflow/negative coordinate denied;
+- post-observation required;
+- locked/secure desktop fails closed;
+- capture failure blocks input;
+- helper substitution detected;
+- receipt substitution detected;
+- interrupted action reconciles without blind replay;
+- Host remains DISARMED throughout;
+- old R39 coding/process/autonomous parity remains green.
+
+## Authority decision
+
+Desktop mutation gets its own standing grant.
+
+Observation does not require Desktop mutation authority.
+Desktop mutation authority does not imply Host authority.
+Autonomous authority may request Desktop effects only when Desktop authority is separately armed.
+Revoking Desktop authority cancels further GUI effects but preserves signed observations/evidence.
+
+## Completion definition
+
+R40 is not complete when it can move the mouse.
+
+R40 is complete only when a fresh public consumer can:
+1. observe a Windows desktop;
+2. bind a target to fresh evidence;
+3. perform an authorized input effect;
+4. post-observe;
+5. reject stale/replayed evidence;
+6. recover/replan after interruption;
+7. verify signed evidence;
+8. do all of the above with Host DISARMED.