deadbyte-mcp 0.15.0 → 0.15.2

package/README.txt

@@ -1,4 +1,4 @@
-DEADBYTE MCP V0.15.0 / R44 REMOTE AGENT + SKILL BASELINE
+DEADBYTE MCP V0.15.2 / R46 FILELESS POWERSHELL PRODUCT BASELINE
 =========================
 
 AUTHENTICATED MACHINE TRUTH + DURABLE AGENT + CODING + AUTONOMOUS PRODUCTION ENGINE
@@ -7,12 +7,12 @@ NPX PRIMARY OPERATOR UX
 ------------------------
 Use the npm CLI entry point instead of the legacy CMD convenience wrapper:
 
-  npx -y deadbyte-mcp@0.15.0 mcp
-  npx deadbyte-mcp@latest remote
-  npx deadbyte-mcp@latest remote status
-  npx deadbyte-mcp@latest remote restart
-  npx deadbyte-mcp@latest audit status
-  npx deadbyte-mcp@latest audit verify
+  npx -y deadbyte-mcp@0.15.2 mcp
+  npx -y deadbyte-mcp@0.15.2 remote
+  npx -y deadbyte-mcp@0.15.2 remote status
+  npx -y deadbyte-mcp@0.15.2 remote restart
+  npx -y deadbyte-mcp@0.15.2 audit status
+  npx -y deadbyte-mcp@0.15.2 audit verify
 
 The `mcp` command is the quiet stdio server entry for local MCP clients; stdout is reserved for MCP.
 The remote CLI invokes the stable active-release PowerShell launcher directly with shell=false.
@@ -33,6 +33,19 @@ The legacy CMD file remains only as an R33 compatibility artifact until activati
 proof confirms the npx path; it is not the primary operator interface. Audit data lives under the
 stable mutable state root and never inside immutable release slots.
 
+R46 FILELESS POWERSHELL PROCESS PROFILE
+--------------------------------------
+The Process plane includes a hash-pinned `powershell` profile for bounded one-shot source execution through
+`powershell.exe -Command <source>` without creating a temporary `.ps1` script file. The generated release
+policy re-pins both `cmd.exe` and Windows PowerShell from the target machine at activation time, so system
+binary hashes are never assumed portable across Windows builds. The one-shot profile is shell=false, accepts one source argument up to 8192 UTF-8 bytes, uses pipe transport,
+and remains gated by the explicit Process standing grant. R46 also ships `powershell_repl`, a separately
+policy-opted persistent PowerShell session profile. `process_session_write` accepts bounded UTF-8 input only
+for profiles with `allow_raw_input=true`; every write rechecks the standing grant and journals only byte count
+plus SHA-256, never the raw command text. Process reads support bounded waits and negative tail offsets, while
+retention remains byte-capped with an explicit earliest offset and stream digest. Signed journals remain the
+authority for session history.
+
 AUTHORITY MODEL
 ---------------
 The original containment core remains five tools:
@@ -213,7 +226,7 @@ CONTROLLER
 ----------
 Primary operator entry point:
 
-  npx deadbyte-mcp@latest remote
+  npx -y deadbyte-mcp@0.15.2 remote
 
 The legacy CMD entry remains compatibility-only for R33 rollback safety.
 
@@ -274,7 +287,7 @@ MCP CLIENT CONFIGURATION
 ------------------------
 The local stdio entry point is quiet and suitable for MCP hosts:
 
-  npx -y deadbyte-mcp@0.11.3 mcp
+  npx -y deadbyte-mcp@0.15.2 mcp
 
 CLAUDE DESKTOP
 Use the standard local-server entry in claude_desktop_config.json:
@@ -283,7 +296,7 @@ Use the standard local-server entry in claude_desktop_config.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.11.3", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.2", "mcp"]
       }
     }
   }
@@ -296,7 +309,7 @@ Create .cursor/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.11.3", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.2", "mcp"]
       }
     }
   }
@@ -309,7 +322,7 @@ Create .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.11.3", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.2", "mcp"]
       }
     }
   }
@@ -319,9 +332,9 @@ Add this to ~/.codex/config.toml:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.11.3", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.2", "mcp"]
 
-The remote device path remains `npx deadbyte-mcp@latest remote`. Remote public MCP uses the
+The remote device path remains `npx -y deadbyte-mcp@0.15.2 remote`. Remote public MCP uses the
 verified HTTPS named-tunnel URL selected by the active generation; do not commit a private device
 URL or tunnel token into a repository.
 
@@ -379,12 +392,15 @@ R36 reproducible capability evidence and comparison rules are recorded in
 `docs/R36-CAPABILITY-EVIDENCE.md`. Comparisons distinguish upstream `documented` capability from
 retained `direct_observation`; tool count is not a release verdict.
 
-Desktop Commander provides a mature local filesystem/terminal MCP and Remote Desktop Commander
-adds a hosted remote relay. DEADBYTE's measured differential is a self-owned content-addressed
-release chain, separately revocable process/coding/autonomous/host authority planes,
-hash-preconditioned edits, Ed25519 signed receipts and journals, contained fixed workers, exact
-public-catalog gates, and tested rollback/restore. This is a mechanism comparison, not a marketing
-score.
+Desktop Commander provides a mature local filesystem/terminal MCP and Remote Desktop Commander adds a hosted
+remote relay. R46 incorporates the production terminal techniques that materially close workload gaps without
+copying their authority model: persistent process sessions, bounded profile-opted stdin, waitable/tail output
+reads, chunked retained-output eviction without whole-buffer recopy, stale-aware remote reachability,
+bounded idempotent probe retry, no-retry mutation dispatch, bounded async observation-search retention,
+and restart-safe exact catalogs. DEADBYTE keeps its stronger
+self-owned content-addressed release chain, separately revocable process/coding/autonomous/desktop/host planes,
+hash-preconditioned edits, Ed25519 signed receipts/journals, contained fixed workers, exact public-catalog gates,
+and tested rollback/restore. Fuzzy mutation is deliberately not substituted for exact mutation preconditions.
 
 Serena has broader semantic language coverage through multiple language-server backends. DEADBYTE
 currently does not match that semantic breadth: its built-in semantic backend is JS/TS. For JS/TS,

package/RELEASE.json

@@ -0,0 +1,53 @@
+{
+  "schema": "deadbyte.release.v1",
+  "name": "deadbyte-mcp",
+  "version": "0.15.2",
+  "train": "R46",
+  "label": "FILELESS POWERSHELL PRODUCT BASELINE",
+  "protocol_revision": "2026-07-28",
+  "parent": {
+    "release_id": "v0.15.1-d55f00b5144dc31a",
+    "manifest_sha256": "d55f00b5144dc31a7fe39e4dc60d640a94780da6aaeca0918e87636b816d7854",
+    "generation_manifest_sha256": "00cde7bf540cc2804d679a39040d5b07193c5f8a0d49cac3b882402f8f4e6ad8"
+  },
+  "platform": {
+    "primary": "win32",
+    "architectures": [
+      "x64"
+    ]
+  },
+  "capabilities": {
+    "host_execution_modes": [
+      "script",
+      "inline",
+      "native"
+    ],
+    "hardware_queries": [
+      "cpu",
+      "gpu",
+      "memory",
+      "storage",
+      "network",
+      "pci"
+    ],
+    "compact_tool_count": 43,
+    "full_tool_count": 83,
+    "process_profiles": [
+      "ping_hold",
+      "powershell",
+      "powershell_repl"
+    ],
+    "powershell_fileless": true,
+    "powershell_source_max_arg_bytes": 8192,
+    "powershell_persistent_repl": true,
+    "process_raw_input_profile_opt_in": true,
+    "process_tail_reads": true,
+    "process_wait_reads": true,
+    "process_chunked_output_ring": true,
+    "remote_reachability_ttl": true,
+    "remote_probe_timeout_retry": true,
+    "remote_dispatch_timeout_no_retry": true,
+    "observation_search_session_ttl": true,
+    "observation_search_session_cap": 128
+  }
+}

package/SBOM.cdx.json

@@ -0,0 +1,46 @@
+{
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.6",
+  "serialNumber": "urn:uuid:deadbyte-mcp-r46-0-15-2",
+  "version": 1,
+  "metadata": {
+    "component": {
+      "type": "application",
+      "name": "deadbyte-mcp",
+      "version": "0.15.2"
+    }
+  },
+  "components": [
+    {
+      "type": "library",
+      "name": "@modelcontextprotocol/client",
+      "version": "2.0.0"
+    },
+    {
+      "type": "library",
+      "name": "@modelcontextprotocol/server",
+      "version": "2.0.0"
+    },
+    {
+      "type": "library",
+      "name": "typescript",
+      "version": "5.9.3"
+    },
+    {
+      "type": "library",
+      "name": "zod",
+      "version": "4.4.3"
+    },
+    {
+      "type": "file",
+      "name": "deadbyte-hardware-observer-r45.exe",
+      "version": "0.15.2",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "46bcd3768bb95f8c63fc3118e031efc2818a92929611cabf6c3b29c5162a6591"
+        }
+      ]
+    }
+  ]
+}

package/TEST-MATRIX.json

@@ -0,0 +1,31 @@
+{
+  "schema": "deadbyte.test-matrix.v1",
+  "version": "0.15.1",
+  "primary_platform": "win32-x64",
+  "required": [
+    {
+      "id": "parent-chain",
+      "command": "npm run r45:parent:verify",
+      "expected": "PASS"
+    },
+    {
+      "id": "machine-freedom",
+      "command": "node --test test/host-inline-r45.test.mjs test/hardware-observation-r45.test.mjs",
+      "expected": "PASS"
+    },
+    {
+      "id": "full-regression",
+      "command": "npm run r45:full:test",
+      "expected": "PASS"
+    },
+    {
+      "id": "windows-gate",
+      "command": "npm run gate:windows",
+      "expected": "PASS"
+    }
+  ],
+  "non_win32": {
+    "portable_tests": "supported where platform-independent",
+    "windows_native_tests": "SKIP/unsupported"
+  }
+}

package/controller/README.TXT

@@ -1,11 +1,11 @@
-DEADBYTE MCP V0.15.0 / R44 CONTROLLER
+DEADBYTE MCP V0.15.2 / R46 CONTROLLER
 ====================================
 
 ENTRY POINT
 -----------
 Primary operator entry point:
 
-  npx deadbyte-mcp@latest remote
+  npx -y deadbyte-mcp@0.15.2 remote
 
 Bare `remote` is a foreground device session. It starts the verified runtime, arms process,
 coding, and autonomous authority, verifies those three planes are ARMED, and requires Desktop and Host

package/controller/deadbyte-controller.ps1

@@ -16,6 +16,40 @@ $LogDir = Join-Path $RuntimeDir 'logs'
 $ConfigPath = if ($env:DEADBYTE_CONTROLLER_CONFIG) { $env:DEADBYTE_CONTROLLER_CONFIG } else { Join-Path $Root 'deadbyte-controller.config.psd1' }
 
 function Fail([string]$Message) { throw "DEADBYTE controller: $Message" }
+
+function Get-ControllerMutationMutexName {
+    $normalized = ([System.IO.Path]::GetFullPath($RuntimeDir)).TrimEnd('\\').ToLowerInvariant()
+    $sha = [System.Security.Cryptography.SHA256]::Create()
+    try {
+        $bytes = [System.Text.Encoding]::UTF8.GetBytes($normalized)
+        $digest = $sha.ComputeHash($bytes)
+    } finally {
+        $sha.Dispose()
+    }
+    $hex = ([System.BitConverter]::ToString($digest)).Replace('-', '').ToLowerInvariant().Substring(0, 24)
+    return "Local\DEADBYTE-MCP-Controller-$hex"
+}
+
+function Invoke-WithControllerMutationLock([string]$Name, [scriptblock]$Body) {
+    $mutexName = Get-ControllerMutationMutexName
+    $mutex = New-Object System.Threading.Mutex($false, $mutexName)
+    $held = $false
+    try {
+        try {
+            $held = $mutex.WaitOne([TimeSpan]::FromSeconds(180))
+        } catch [System.Threading.AbandonedMutexException] {
+            $held = $true
+        }
+        if (-not $held) { Fail "controller mutation lock timeout for '$Name'" }
+        & $Body
+    } finally {
+        if ($held) {
+            try { $mutex.ReleaseMutex() } catch {}
+        }
+        $mutex.Dispose()
+    }
+}
+
 function Ensure-Directory([string]$Path) { if (-not (Test-Path -LiteralPath $Path -PathType Container)) { New-Item -ItemType Directory -Path $Path -Force | Out-Null } }
 function Ledger-Path([string]$Name) { Join-Path $RuntimeDir ("{0}.instance.json" -f $Name.ToLowerInvariant()) }
 function Log-Path([string]$Name, [string]$Kind) { Join-Path $LogDir ("{0}.{1}.log" -f $Name.ToLowerInvariant(), $Kind) }
@@ -787,7 +821,7 @@ function Get-HostPolicyMetadata($Cfg) {
     if ([string]::IsNullOrWhiteSpace([string]$Cfg.HostPolicyFile)) { Fail 'privileged host plane is not configured' }
     $policyPath = [string]$Cfg.HostPolicyFile
     try { $policy = Get-Content -LiteralPath $policyPath -Raw -Encoding UTF8 | ConvertFrom-Json } catch { Fail "invalid host policy JSON: $policyPath" }
-    if ($policy.schema -ne 'deadbyte.host-policy.v1' -or $policy.enabled -ne $true) { Fail 'host policy schema/enabled mismatch' }
+    if (@('deadbyte.host-policy.v1','deadbyte.host-policy.v2') -notcontains [string]$policy.schema -or $policy.enabled -ne $true) { Fail 'host policy schema/enabled mismatch' }
     if ([string]::IsNullOrWhiteSpace([string]$policy.arm_file)) { Fail 'host policy arm_file missing' }
     $armFile = [System.IO.Path]::GetFullPath([string]$policy.arm_file)
     $runtimeReal = [System.IO.Path]::GetFullPath($RuntimeDir).TrimEnd('\') + '\'
@@ -1275,7 +1309,7 @@ function Clean-Stale {
     }
 }
 
-function Run-Command([string]$Name) {
+function Run-CommandCore([string]$Name) {
     $cfg = Get-Config
     Assert-ControllerRootBound $cfg
     Ensure-Directory $RuntimeDir; Ensure-Directory $LogDir
@@ -1318,6 +1352,20 @@ function Run-Command([string]$Name) {
     }
 }
 
+function Run-Command([string]$Name) {
+    $mutating = $Name -in @(
+        'start','resume','park','stop','restart','toggle','clean',
+        'armhost','disarmhost','armprocess','disarmprocess','armcoding','disarmcoding',
+        'armautonomous','disarmautonomous','armdesktop','disarmdesktop',
+        'supervisorstart','supervisorstop','supervisorrecover'
+    )
+    if (-not $mutating) {
+        Run-CommandCore $Name
+        return
+    }
+    Invoke-WithControllerMutationLock $Name { Run-CommandCore $Name }
+}
+
 if ($Command -ne 'menu') {
     $recordsStartFailure = $Command -in @('start','resume','restart')
     if ($recordsStartFailure) { Remove-Item -LiteralPath (Controller-StartFailurePath) -Force -ErrorAction SilentlyContinue }
@@ -1336,7 +1384,7 @@ while ($true) {
     Clear-Host
     $cfg = Get-Config
     Assert-ControllerRootBound $cfg
-    Write-Host 'DEADBYTE MCP ON-DEMAND CONTROLLER V0.15.0 / R44'
+    Write-Host 'DEADBYTE MCP ON-DEMAND CONTROLLER V0.15.2 / R46'
     Write-Host '======================================'
     Show-State $cfg | Out-Null
     Write-Host ''

package/controller/deadbyte-process-policy.json

@@ -19,7 +19,7 @@
   },
   "profiles": {
     "ping_hold": {
-      "executable": "C:\\Windows\\System32\\cmd.exe",
+      "executable": "C:\\WINDOWS\\System32\\cmd.exe",
       "executable_sha256": "97ac98b1a92c286054cce55239cfccdfc23a5517bd07fe693072c9ca96c7dabb",
       "root_ids": [
         "core"
@@ -42,6 +42,68 @@
       "input_actions": {
         "ping": "echo DEADBYTE_ACTION_PING\r\n"
       }
+    },
+    "powershell": {
+      "executable": "C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\powershell.exe",
+      "executable_sha256": "8bb6fa8c283b4d92120b1ef249a9b311b0f804d4cabbe9981159976c8be76a5e",
+      "root_ids": [
+        "core"
+      ],
+      "prefix_args": [
+        "-NoLogo",
+        "-NoProfile",
+        "-NonInteractive",
+        "-Command"
+      ],
+      "transport": "pipe",
+      "max_args": 1,
+      "max_arg_bytes": 8192,
+      "max_sessions": 4,
+      "max_input_bytes": 65536,
+      "max_retained_output_bytes": 1048576,
+      "env_allow": [
+        "PATH",
+        "TEMP",
+        "TMP",
+        "SystemRoot",
+        "WINDIR",
+        "USERPROFILE",
+        "PSModulePath",
+        "COMSPEC",
+        "PATHEXT"
+      ],
+      "input_actions": {}
+    },
+    "powershell_repl": {
+      "executable": "C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\powershell.exe",
+      "executable_sha256": "8bb6fa8c283b4d92120b1ef249a9b311b0f804d4cabbe9981159976c8be76a5e",
+      "root_ids": [
+        "core"
+      ],
+      "prefix_args": [
+        "-NoLogo",
+        "-NoProfile",
+        "-NonInteractive"
+      ],
+      "transport": "pipe",
+      "allow_raw_input": true,
+      "max_args": 0,
+      "max_arg_bytes": 256,
+      "max_sessions": 2,
+      "max_input_bytes": 65536,
+      "max_retained_output_bytes": 4194304,
+      "env_allow": [
+        "PATH",
+        "TEMP",
+        "TMP",
+        "SystemRoot",
+        "WINDIR",
+        "USERPROFILE",
+        "PSModulePath",
+        "COMSPEC",
+        "PATHEXT"
+      ],
+      "input_actions": {}
     }
   }
 }

package/docs/ARCHITECTURE.md

@@ -1,4 +1,4 @@
-# DEADBYTE MCP V0.15.0 / R44 ARCHITECTURE
+# DEADBYTE MCP V0.15.2 / R46 ARCHITECTURE
 
 ```mermaid
 flowchart TD
@@ -9,7 +9,7 @@ flowchart TD
     D --> MI[Optional Machine 4 Tools]
     D --> F[Optional Host 3 Tools]
     D --> G[Optional Agent 7 Tools]
-    D --> PR[Optional Process 6 Tools]
+    D --> PR[Optional Process 7 Tools]
     D --> V[Optional Coding 22 Tools]
     D --> MF[Optional Machine FS 8 Tools]
     D --> OB[Optional Observation 6 Tools]
@@ -59,8 +59,7 @@ invocation may recover a stale owner only when no live guardian remains.
 ## Exact capability catalogs
 
 Only complete combinations of base plus optional machine, host, agent, process, coding,
-machine-filesystem, observation, and autonomous surfaces are valid at the HTTP bridge. A fully
-enabled R34 runtime exposes exactly 73 tools. Process authority is independently granted;
+machine-filesystem, observation, and autonomous surfaces are valid at the HTTP bridge. The current fully enabled R46 runtime exposes exactly 83 full tools and 43 compact tools. Process authority is independently granted;
 machine-filesystem and observation reuse coding-policy roots; autonomous requires the complete
 coding surface. Partial, dependency-invalid, unknown, or extra catalogs fail closed.