deadbyte-mcp 0.15.1 → 0.15.3

package/RELEASE.json

@@ -1,15 +1,14 @@
 {
   "schema": "deadbyte.release.v1",
   "name": "deadbyte-mcp",
-  "version": "0.15.1",
-  "train": "R45",
-  "label": "MACHINE FREEDOM FINAL BASELINE",
+  "version": "0.15.2",
+  "train": "R46",
+  "label": "FILELESS POWERSHELL PRODUCT BASELINE",
   "protocol_revision": "2026-07-28",
   "parent": {
-    "release_id": "v0.15.0-c15fa41719be61b3",
-    "manifest_sha256": "c15fa41719be61b3186e49b2367a5f4c057365cfb465102dbefb7d7355f45483",
-    "generation_manifest_sha256": "6d7429c050b7fe893492e102f00282019116e0c9e54e4f25a5791defa1661d30",
-    "final_closure_sha256": "533b7e0ff9ded04086dd90ed34e3b87bc427acc3c55c25bb9f4ec66cb448e667"
+    "release_id": "v0.15.1-d55f00b5144dc31a",
+    "manifest_sha256": "d55f00b5144dc31a7fe39e4dc60d640a94780da6aaeca0918e87636b816d7854",
+    "generation_manifest_sha256": "00cde7bf540cc2804d679a39040d5b07193c5f8a0d49cac3b882402f8f4e6ad8"
   },
   "platform": {
     "primary": "win32",
@@ -32,6 +31,23 @@
       "pci"
     ],
     "compact_tool_count": 43,
-    "full_tool_count": 82
+    "full_tool_count": 83,
+    "process_profiles": [
+      "ping_hold",
+      "powershell",
+      "powershell_repl"
+    ],
+    "powershell_fileless": true,
+    "powershell_source_max_arg_bytes": 8192,
+    "powershell_persistent_repl": true,
+    "process_raw_input_profile_opt_in": true,
+    "process_tail_reads": true,
+    "process_wait_reads": true,
+    "process_chunked_output_ring": true,
+    "remote_reachability_ttl": true,
+    "remote_probe_timeout_retry": true,
+    "remote_dispatch_timeout_no_retry": true,
+    "observation_search_session_ttl": true,
+    "observation_search_session_cap": 128
   }
 }

package/SBOM.cdx.json

@@ -1,13 +1,13 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:deadbyte-mcp-r45-0-15-1",
+  "serialNumber": "urn:uuid:deadbyte-mcp-r46-0-15-2",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
       "name": "deadbyte-mcp",
-      "version": "0.15.1"
+      "version": "0.15.2"
     }
   },
   "components": [
@@ -34,7 +34,7 @@
     {
       "type": "file",
       "name": "deadbyte-hardware-observer-r45.exe",
-      "version": "0.15.1",
+      "version": "0.15.2",
       "hashes": [
         {
           "alg": "SHA-256",

package/controller/README.TXT

@@ -1,11 +1,11 @@
-DEADBYTE MCP V0.15.1 / R45 CONTROLLER
+DEADBYTE MCP V0.15.2 / R46 CONTROLLER
 ====================================
 
 ENTRY POINT
 -----------
 Primary operator entry point:
 
-  npx -y deadbyte-mcp@0.15.1 remote
+  npx -y deadbyte-mcp@0.15.2 remote
 
 Bare `remote` is a foreground device session. It starts the verified runtime, arms process,
 coding, and autonomous authority, verifies those three planes are ARMED, and requires Desktop and Host

package/controller/deadbyte-controller.ps1

@@ -16,6 +16,40 @@ $LogDir = Join-Path $RuntimeDir 'logs'
 $ConfigPath = if ($env:DEADBYTE_CONTROLLER_CONFIG) { $env:DEADBYTE_CONTROLLER_CONFIG } else { Join-Path $Root 'deadbyte-controller.config.psd1' }
 
 function Fail([string]$Message) { throw "DEADBYTE controller: $Message" }
+
+function Get-ControllerMutationMutexName {
+    $normalized = ([System.IO.Path]::GetFullPath($RuntimeDir)).TrimEnd('\\').ToLowerInvariant()
+    $sha = [System.Security.Cryptography.SHA256]::Create()
+    try {
+        $bytes = [System.Text.Encoding]::UTF8.GetBytes($normalized)
+        $digest = $sha.ComputeHash($bytes)
+    } finally {
+        $sha.Dispose()
+    }
+    $hex = ([System.BitConverter]::ToString($digest)).Replace('-', '').ToLowerInvariant().Substring(0, 24)
+    return "Local\DEADBYTE-MCP-Controller-$hex"
+}
+
+function Invoke-WithControllerMutationLock([string]$Name, [scriptblock]$Body) {
+    $mutexName = Get-ControllerMutationMutexName
+    $mutex = New-Object System.Threading.Mutex($false, $mutexName)
+    $held = $false
+    try {
+        try {
+            $held = $mutex.WaitOne([TimeSpan]::FromSeconds(180))
+        } catch [System.Threading.AbandonedMutexException] {
+            $held = $true
+        }
+        if (-not $held) { Fail "controller mutation lock timeout for '$Name'" }
+        & $Body
+    } finally {
+        if ($held) {
+            try { $mutex.ReleaseMutex() } catch {}
+        }
+        $mutex.Dispose()
+    }
+}
+
 function Ensure-Directory([string]$Path) { if (-not (Test-Path -LiteralPath $Path -PathType Container)) { New-Item -ItemType Directory -Path $Path -Force | Out-Null } }
 function Ledger-Path([string]$Name) { Join-Path $RuntimeDir ("{0}.instance.json" -f $Name.ToLowerInvariant()) }
 function Log-Path([string]$Name, [string]$Kind) { Join-Path $LogDir ("{0}.{1}.log" -f $Name.ToLowerInvariant(), $Kind) }
@@ -1275,7 +1309,7 @@ function Clean-Stale {
     }
 }
 
-function Run-Command([string]$Name) {
+function Run-CommandCore([string]$Name) {
     $cfg = Get-Config
     Assert-ControllerRootBound $cfg
     Ensure-Directory $RuntimeDir; Ensure-Directory $LogDir
@@ -1318,6 +1352,20 @@ function Run-Command([string]$Name) {
     }
 }
 
+function Run-Command([string]$Name) {
+    $mutating = $Name -in @(
+        'start','resume','park','stop','restart','toggle','clean',
+        'armhost','disarmhost','armprocess','disarmprocess','armcoding','disarmcoding',
+        'armautonomous','disarmautonomous','armdesktop','disarmdesktop',
+        'supervisorstart','supervisorstop','supervisorrecover'
+    )
+    if (-not $mutating) {
+        Run-CommandCore $Name
+        return
+    }
+    Invoke-WithControllerMutationLock $Name { Run-CommandCore $Name }
+}
+
 if ($Command -ne 'menu') {
     $recordsStartFailure = $Command -in @('start','resume','restart')
     if ($recordsStartFailure) { Remove-Item -LiteralPath (Controller-StartFailurePath) -Force -ErrorAction SilentlyContinue }
@@ -1336,7 +1384,7 @@ while ($true) {
     Clear-Host
     $cfg = Get-Config
     Assert-ControllerRootBound $cfg
-    Write-Host 'DEADBYTE MCP ON-DEMAND CONTROLLER V0.15.1 / R45'
+    Write-Host 'DEADBYTE MCP ON-DEMAND CONTROLLER V0.15.2 / R46'
     Write-Host '======================================'
     Show-State $cfg | Out-Null
     Write-Host ''

package/controller/deadbyte-process-policy.json

@@ -19,7 +19,7 @@
   },
   "profiles": {
     "ping_hold": {
-      "executable": "C:\\Windows\\System32\\cmd.exe",
+      "executable": "C:\\WINDOWS\\System32\\cmd.exe",
       "executable_sha256": "97ac98b1a92c286054cce55239cfccdfc23a5517bd07fe693072c9ca96c7dabb",
       "root_ids": [
         "core"
@@ -42,6 +42,68 @@
       "input_actions": {
         "ping": "echo DEADBYTE_ACTION_PING\r\n"
       }
+    },
+    "powershell": {
+      "executable": "C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\powershell.exe",
+      "executable_sha256": "8bb6fa8c283b4d92120b1ef249a9b311b0f804d4cabbe9981159976c8be76a5e",
+      "root_ids": [
+        "core"
+      ],
+      "prefix_args": [
+        "-NoLogo",
+        "-NoProfile",
+        "-NonInteractive",
+        "-Command"
+      ],
+      "transport": "pipe",
+      "max_args": 1,
+      "max_arg_bytes": 8192,
+      "max_sessions": 4,
+      "max_input_bytes": 65536,
+      "max_retained_output_bytes": 1048576,
+      "env_allow": [
+        "PATH",
+        "TEMP",
+        "TMP",
+        "SystemRoot",
+        "WINDIR",
+        "USERPROFILE",
+        "PSModulePath",
+        "COMSPEC",
+        "PATHEXT"
+      ],
+      "input_actions": {}
+    },
+    "powershell_repl": {
+      "executable": "C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\powershell.exe",
+      "executable_sha256": "8bb6fa8c283b4d92120b1ef249a9b311b0f804d4cabbe9981159976c8be76a5e",
+      "root_ids": [
+        "core"
+      ],
+      "prefix_args": [
+        "-NoLogo",
+        "-NoProfile",
+        "-NonInteractive"
+      ],
+      "transport": "pipe",
+      "allow_raw_input": true,
+      "max_args": 0,
+      "max_arg_bytes": 256,
+      "max_sessions": 2,
+      "max_input_bytes": 65536,
+      "max_retained_output_bytes": 4194304,
+      "env_allow": [
+        "PATH",
+        "TEMP",
+        "TMP",
+        "SystemRoot",
+        "WINDIR",
+        "USERPROFILE",
+        "PSModulePath",
+        "COMSPEC",
+        "PATHEXT"
+      ],
+      "input_actions": {}
     }
   }
 }

package/docs/ARCHITECTURE.md

@@ -1,4 +1,4 @@
-# DEADBYTE MCP V0.15.1 / R45 ARCHITECTURE
+# DEADBYTE MCP V0.15.2 / R46 ARCHITECTURE
 
 ```mermaid
 flowchart TD
@@ -9,7 +9,7 @@ flowchart TD
     D --> MI[Optional Machine 4 Tools]
     D --> F[Optional Host 3 Tools]
     D --> G[Optional Agent 7 Tools]
-    D --> PR[Optional Process 6 Tools]
+    D --> PR[Optional Process 7 Tools]
     D --> V[Optional Coding 22 Tools]
     D --> MF[Optional Machine FS 8 Tools]
     D --> OB[Optional Observation 6 Tools]
@@ -59,8 +59,7 @@ invocation may recover a stale owner only when no live guardian remains.
 ## Exact capability catalogs
 
 Only complete combinations of base plus optional machine, host, agent, process, coding,
-machine-filesystem, observation, and autonomous surfaces are valid at the HTTP bridge. A fully
-enabled R34 runtime exposes exactly 73 tools. Process authority is independently granted;
+machine-filesystem, observation, and autonomous surfaces are valid at the HTTP bridge. The current fully enabled R46 runtime exposes exactly 83 full tools and 43 compact tools. Process authority is independently granted;
 machine-filesystem and observation reuse coding-policy roots; autonomous requires the complete
 coding surface. Partial, dependency-invalid, unknown, or extra catalogs fail closed.
 

package/package.json

@@ -1,86 +1,88 @@
-{
-  "name": "deadbyte-mcp",
-  "version": "0.15.1",
-  "private": false,
-  "type": "module",
-  "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
-  "engines": {
-    "node": ">=22"
-  },
-  "scripts": {
-    "test": "node --test test/*.test.mjs",
-    "manifest:write": "node scripts/release-manifest.mjs write",
-    "manifest:verify": "node scripts/release-manifest.mjs verify",
-    "r41:parent:verify": "node scripts/verify-r41-parent.mjs",
-    "r41:memory:verify": "node scripts/verify-memory-r41.mjs",
-    "r42:parent:verify": "node scripts/verify-r42-parent.mjs",
-    "r42:eval": "node scripts/agent-eval-r42.mjs",
-    "self-update:runtime": "node scripts/runtime-self-update.mjs",
-    "self-update:deferred": "node scripts/deferred-slot-operation-r45.mjs",
-    "release:parity": "node scripts/release-parity-r45.mjs",
-    "release:final:write": "node scripts/final-closure-r45.mjs",
-    "release:final:verify": "node scripts/final-closure-verify-r45.mjs",
-    "proof": "node src/proof-cli.mjs workspaces/demo input.txt",
-    "verify": "node src/verifier-cli.mjs workspaces/demo evidence/latest.json",
-    "trust:init": "node src/trust-init.mjs",
-    "mcp": "node src/mcp-server.mjs",
-    "mcp:smoke": "node src/mcp-smoke-client.mjs",
-    "mcp:agent:smoke": "node --test test/agent-runtime.test.mjs test/agent-runtime-adversarial.test.mjs test/agent-runtime-crash.test.mjs test/agent-task-receipt.test.mjs",
-    "mcp:coding:smoke": "node --test test/coding-plane.test.mjs test/coding-plane-adversarial.test.mjs test/coding-runtime.test.mjs test/coding-crash.test.mjs",
-    "mcp:machine-fs:smoke": "node src/machine-fs-smoke-client.mjs",
-    "mcp:observation:smoke": "node src/observation-smoke-client.mjs",
-    "mcp:process:smoke": "node src/process-smoke-client.mjs",
-    "process:policy:refresh": "node scripts/refresh-process-policy.mjs",
-    "mcp:autonomous:smoke": "node --test test/autonomous-runtime.test.mjs test/autonomous-loop.test.mjs test/autonomous-adversarial.test.mjs test/autonomous-supervisor-integration.test.mjs test/native-diff.test.mjs",
-    "containment:build": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-containment.ps1",
-    "containment:smoke": "node src/containment-smoke.mjs appcontainer",
-    "containment:bootstrap": "node src/containment-bootstrap.mjs",
-    "containment:smoke:lpac": "node src/containment-smoke.mjs lpac",
-    "containment:smoke:appcontainer": "node src/containment-smoke.mjs appcontainer",
-    "containment:construction": "node src/containment-construction.mjs",
-    "containment:child-control": "node src/containment-child-control.mjs",
-    "contained:run": "node src/contained-cli.mjs workspaces/demo input.txt",
-    "contained:smoke": "node src/contained-smoke.mjs",
-    "mcp:contained:smoke": "node src/mcp-contained-smoke-client.mjs",
-    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r45.ps1",
-    "authority:smoke": "node src/authority-smoke.mjs",
-    "mcp:remote:smoke": "node src/remote-mcp-smoke-client.mjs",
-    "mcp:host:smoke": "node src/mcp-host-smoke-client.mjs",
-    "host:policy:init": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/init-host-policy.ps1",
-    "mcp:remote:host:smoke": "node src/remote-mcp-host-smoke-client.mjs",
-    "mcp:remote:autonomous:smoke": "node src/remote-mcp-autonomous-smoke-client.mjs",
-    "mcp:tunnel-compat:smoke": "node src/tunnel-stdio-compat-smoke.mjs",
-    "audit:verify": "node src/deadbyte-cli.mjs audit verify",
-    "audit:status": "node src/deadbyte-cli.mjs audit status",
-    "desktop:build": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-desktop-r40.ps1",
-    "desktop:policy:refresh": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/init-desktop-policy-r40.ps1",
-    "r43:parent:verify": "node scripts/verify-r43-parent.mjs",
-    "r43:full:test": "node scripts/full-regression-r43.mjs",
-    "r44:parent:verify": "node scripts/verify-r44-parent.mjs",
-    "r44:full:test": "node scripts/full-regression-r44.mjs",
-    "finalize:r44": "node scripts/finalize-r44.mjs",
-    "hardware:build": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-hardware-r45.ps1",
-    "doctor": "node src/deadbyte-cli.mjs doctor",
-    "r45:parent:verify": "node scripts/verify-r45-parent.mjs",
-    "r45:full:test": "node scripts/full-regression-r45.mjs",
-    "finalize:r45": "node scripts/finalize-r45.mjs"
-  },
-  "bundleDependencies": [
-    "@modelcontextprotocol/server",
-    "@modelcontextprotocol/client",
-    "typescript",
-    "zod"
-  ],
-  "dependencies": {
-    "@modelcontextprotocol/client": "2.0.0",
-    "@modelcontextprotocol/server": "2.0.0",
-    "typescript": "5.9.3",
-    "zod": "4.4.3"
-  },
-  "bin": {
-    "deadbyte-mcp": "src/deadbyte-cli.mjs"
-  },
-  "publishConfig": {
-    "access": "public"
-  }
-}
+{
+    "name":  "deadbyte-mcp",
+    "version":  "0.15.3",
+    "private":  false,
+    "type":  "module",
+    "description":  "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
+    "engines":  {
+                    "node":  "\u003e=22"
+                },
+    "scripts":  {
+                    "test":  "node --test test/*.test.mjs",
+                    "manifest:write":  "node scripts/release-manifest.mjs write",
+                    "manifest:verify":  "node scripts/release-manifest.mjs verify",
+                    "r41:parent:verify":  "node scripts/verify-r41-parent.mjs",
+                    "r41:memory:verify":  "node scripts/verify-memory-r41.mjs",
+                    "r42:parent:verify":  "node scripts/verify-r42-parent.mjs",
+                    "r42:eval":  "node scripts/agent-eval-r42.mjs",
+                    "self-update:runtime":  "node scripts/runtime-self-update.mjs",
+                    "self-update:deferred":  "node scripts/deferred-slot-operation-r46.mjs",
+                    "release:parity":  "node scripts/release-parity-r46.mjs",
+                    "release:final:write":  "node scripts/final-closure-r46.mjs",
+                    "release:final:verify":  "node scripts/final-closure-verify-r46.mjs",
+                    "proof":  "node src/proof-cli.mjs workspaces/demo input.txt",
+                    "verify":  "node src/verifier-cli.mjs workspaces/demo evidence/latest.json",
+                    "trust:init":  "node src/trust-init.mjs",
+                    "mcp":  "node src/mcp-server.mjs",
+                    "mcp:smoke":  "node src/mcp-smoke-client.mjs",
+                    "mcp:agent:smoke":  "node --test test/agent-runtime.test.mjs test/agent-runtime-adversarial.test.mjs test/agent-runtime-crash.test.mjs test/agent-task-receipt.test.mjs",
+                    "mcp:coding:smoke":  "node --test test/coding-plane.test.mjs test/coding-plane-adversarial.test.mjs test/coding-runtime.test.mjs test/coding-crash.test.mjs",
+                    "mcp:machine-fs:smoke":  "node src/machine-fs-smoke-client.mjs",
+                    "mcp:observation:smoke":  "node src/observation-smoke-client.mjs",
+                    "mcp:process:smoke":  "node src/process-smoke-client.mjs",
+                    "process:policy:refresh":  "node scripts/refresh-process-policy.mjs",
+                    "mcp:autonomous:smoke":  "node --test test/autonomous-runtime.test.mjs test/autonomous-loop.test.mjs test/autonomous-adversarial.test.mjs test/autonomous-supervisor-integration.test.mjs test/native-diff.test.mjs",
+                    "containment:build":  "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-containment.ps1",
+                    "containment:smoke":  "node src/containment-smoke.mjs appcontainer",
+                    "containment:bootstrap":  "node src/containment-bootstrap.mjs",
+                    "containment:smoke:lpac":  "node src/containment-smoke.mjs lpac",
+                    "containment:smoke:appcontainer":  "node src/containment-smoke.mjs appcontainer",
+                    "containment:construction":  "node src/containment-construction.mjs",
+                    "containment:child-control":  "node src/containment-child-control.mjs",
+                    "contained:run":  "node src/contained-cli.mjs workspaces/demo input.txt",
+                    "contained:smoke":  "node src/contained-smoke.mjs",
+                    "mcp:contained:smoke":  "node src/mcp-contained-smoke-client.mjs",
+                    "gate:windows":  "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r46.ps1",
+                    "authority:smoke":  "node src/authority-smoke.mjs",
+                    "mcp:remote:smoke":  "node src/remote-mcp-smoke-client.mjs",
+                    "mcp:host:smoke":  "node src/mcp-host-smoke-client.mjs",
+                    "host:policy:init":  "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/init-host-policy.ps1",
+                    "mcp:remote:host:smoke":  "node src/remote-mcp-host-smoke-client.mjs",
+                    "mcp:remote:autonomous:smoke":  "node src/remote-mcp-autonomous-smoke-client.mjs",
+                    "mcp:tunnel-compat:smoke":  "node src/tunnel-stdio-compat-smoke.mjs",
+                    "audit:verify":  "node src/deadbyte-cli.mjs audit verify",
+                    "audit:status":  "node src/deadbyte-cli.mjs audit status",
+                    "desktop:build":  "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-desktop-r40.ps1",
+                    "desktop:policy:refresh":  "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/init-desktop-policy-r40.ps1",
+                    "r43:parent:verify":  "node scripts/verify-r43-parent.mjs",
+                    "r43:full:test":  "node scripts/full-regression-r43.mjs",
+                    "r44:parent:verify":  "node scripts/verify-r44-parent.mjs",
+                    "r44:full:test":  "node scripts/full-regression-r44.mjs",
+                    "finalize:r44":  "node scripts/finalize-r44.mjs",
+                    "hardware:build":  "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-hardware-r45.ps1",
+                    "doctor":  "node src/deadbyte-cli.mjs doctor",
+                    "r45:parent:verify":  "node scripts/verify-r45-parent.mjs",
+                    "r45:full:test":  "node scripts/full-regression-r45.mjs",
+                    "finalize:r45":  "node scripts/finalize-r45.mjs",
+                    "r46:fileless:test":  "node --test --test-concurrency=1 test/process-policy.test.mjs test/process-policy-refresh.test.mjs test/release-generation.test.mjs test/process-runtime.test.mjs test/process-mcp-tools.test.mjs test/compact-gateway-r36.test.mjs test/capability-ledger-r36.test.mjs test/remote-device-r44.test.mjs test/observation-runtime.test.mjs test/observation-mcp-tools.test.mjs",
+                    "r46:full:test":  "node scripts/full-regression-r46.mjs"
+                },
+    "bundleDependencies":  [
+                               "@modelcontextprotocol/server",
+                               "@modelcontextprotocol/client",
+                               "typescript",
+                               "zod"
+                           ],
+    "dependencies":  {
+                         "@modelcontextprotocol/client":  "2.0.0",
+                         "@modelcontextprotocol/server":  "2.0.0",
+                         "typescript":  "5.9.3",
+                         "zod":  "4.4.3"
+                     },
+    "bin":  {
+                "deadbyte-mcp":  "src/deadbyte-cli.mjs"
+            },
+    "publishConfig":  {
+                          "access":  "public"
+                      }
+}

package/scripts/autonomous-build.ps1

@@ -13,6 +13,7 @@ $targets = @(
 Push-Location $root
 try {
     foreach ($target in $targets) {
+        $LASTEXITCODE = 0
         & node.exe --check $target
         if ($LASTEXITCODE -ne 0) { throw "syntax gate failed: $target" }
     }

package/scripts/autonomous-tests.ps1

@@ -3,6 +3,7 @@ Set-StrictMode -Version 2.0
 $root = Split-Path -Parent $PSScriptRoot
 Push-Location $root
 try {
+    $LASTEXITCODE = 0
     & node.exe --test test/autonomous-live-fixture.test.mjs
     if ($LASTEXITCODE -ne 0) { throw "autonomous fixture test failed with exit code $LASTEXITCODE" }
     Write-Output 'R24 QUICK TEST PASS'

package/scripts/check-agent-backend-r46.mjs

@@ -0,0 +1,77 @@
+import { EventEmitter } from 'node:events';
+import { mkdtemp, readFile, rm } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { createAgentBackendR44 } from '../src/agent-backend-r44.mjs';
+
+const sleep=ms=>new Promise(resolve=>setTimeout(resolve,ms));
+const assert=(ok,message)=>{if(!ok)throw new Error(message);};
+
+class FakeTransport extends EventEmitter {
+  constructor(){super();this.sent=[];this.stopped=false;}
+  async start(){this.started=true;}
+  async send(message){
+    this.sent.push(message);
+    if(message.method==='slow.deadline'){
+      setTimeout(()=>this.emit('message',{id:message.id,result:{late:true}}),180);
+    }
+    if(message.method==='slow.cancel'){
+      setTimeout(()=>this.emit('message',{id:message.id,result:{late:true}}),180);
+    }
+  }
+  async stop(){this.stopped=true;this.emit('exit',{code:0,signal:null});}
+}
+
+const dir=await mkdtemp(path.join(os.tmpdir(),'deadbyte-agent-r46-'));
+let transport;
+const backend=await createAgentBackendR44({
+  backendId:'r46-agent-test',
+  stateDir:dir,
+  transportFactory:async()=>{transport=new FakeTransport();return transport;}
+});
+
+await backend.start();
+
+let deadlineError=null;
+try{await backend.request({method:'slow.deadline',params:{x:1},timeoutMs:100});}
+catch(error){deadlineError=error;}
+assert(deadlineError?.message==='agent backend request deadline exceeded','deadline did not produce deadline-specific error');
+await sleep(120);
+const afterDeadline=await backend.status();
+const deadlineRecord=Object.values(afterDeadline.requests).find(x=>x.method==='slow.deadline');
+assert(deadlineRecord?.state==='failed','deadline request state changed unexpectedly');
+assert(deadlineRecord?.termination?.deadline_exceeded===true,'deadline flag missing');
+assert(deadlineRecord?.termination?.physical_termination===false,'deadline was incorrectly treated as physical termination');
+assert(deadlineRecord?.termination?.verified===false,'deadline was incorrectly treated as verified termination');
+
+const cancelPromise=backend.request({method:'slow.cancel',params:{x:2},timeoutMs:500});
+await sleep(20);
+const pendingBeforeCancel=await backend.status();
+const cancelId=Object.entries(pendingBeforeCancel.requests).find(([,x])=>x.method==='slow.cancel')?.[0];
+assert(cancelId,'cancel request was not persisted as pending');
+const cancelResult=await backend.cancelRequest(cancelId,{reason:'test_cancel'});
+assert(cancelResult.status==='requested','cancel request was not accepted');
+let cancelError=null;
+try{await cancelPromise;}catch(error){cancelError=error;}
+assert(cancelError?.message==='agent backend request cancelled','cancellation did not produce cancellation-specific error');
+await sleep(220);
+const afterCancel=await backend.status();
+const cancelRecord=afterCancel.requests[cancelId];
+assert(cancelRecord?.state==='failed','cancelled request state changed unexpectedly');
+assert(cancelRecord?.termination?.cancellation_requested===true,'cancellation flag missing');
+assert(cancelRecord?.termination?.deadline_exceeded===false,'cancellation was misclassified as deadline');
+assert(cancelRecord?.termination?.physical_termination===false,'cancellation was incorrectly treated as physical termination');
+
+await backend.close();
+const state=JSON.parse(await readFile(backend.state_file,'utf8'));
+assert(state.requests[Object.keys(state.requests).find(id=>state.requests[id].method==='slow.deadline')].termination.physical_termination===false,'deadline termination invariant not persisted');
+
+await rm(dir,{recursive:true,force:true});
+console.log(JSON.stringify({
+  status:'passed',
+  invariant_timeout_not_termination:deadlineRecord.termination.physical_termination===false,
+  invariant_cancellation_not_termination:cancelRecord.termination.physical_termination===false,
+  invariant_late_response_ignored:true,
+  deadline_state:deadlineRecord.state,
+  cancellation_state:cancelRecord.state
+}));

package/scripts/check-atomic-resource-r46.mjs

@@ -0,0 +1,84 @@
+import assert from 'node:assert/strict';
+import { mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { atomicMutation } from '../src/atomic-mutation.mjs';
+import { createResourceIdentity } from '../src/resource-identity.mjs';
+import '../src/coding-plane.mjs';
+import '../src/machine-fs.mjs';
+
+const dir = await mkdtemp(path.join(os.tmpdir(), 'deadbyte-r46-atomic-'));
+try {
+  const target = path.join(dir, 'sample.txt');
+  await writeFile(target, 'before', 'utf8');
+  const beforeHash = '3a6eb0790f39ac87c94f3856b2dd2c5d1102f4d6a0b8c3f0f0e8d7a1c5d0c4f5';
+  const actualBefore = (await readFile(target)).toString('utf8');
+  assert.equal(actualBefore, 'before');
+
+  const hash = async file => {
+    const { createHash } = await import('node:crypto');
+    return createHash('sha256').update(await readFile(file)).digest('hex');
+  };
+  const expected = await hash(target);
+  const state = async file => ({ exists: true, sha256: await hash(file), bytes: (await readFile(file)).length });
+  const check = (value, wanted) => {
+    if (value.sha256 !== wanted) throw new Error('precondition mismatch');
+  };
+
+  const result = await atomicMutation({
+    target,
+    bytes: Buffer.from('after', 'utf8'),
+    expected,
+    readState: state,
+    assertExpected: check,
+    tempTag: 'r46-check'
+  });
+  assert.equal(result.before.sha256, expected);
+  assert.equal(result.after.sha256, await hash(target));
+  assert.equal(await readFile(target, 'utf8'), 'after');
+
+  const a = createResourceIdentity({
+    rootId: 'root-a',
+    relativePath: 'x/file.txt',
+    canonicalPath: 'C:/root-a/x/file.txt',
+    kind: 'file',
+    exists: true,
+    size: 5,
+    contentSha256: result.after.sha256
+  });
+  const b = createResourceIdentity({
+    rootId: 'root-b',
+    relativePath: 'x/file.txt',
+    canonicalPath: 'C:/root-b/x/file.txt',
+    kind: 'file',
+    exists: true,
+    size: 5,
+    contentSha256: result.after.sha256
+  });
+  assert.notEqual(a.resource_identity_sha256, b.resource_identity_sha256);
+  assert.equal(a.content_sha256, b.content_sha256);
+
+  let rejected = false;
+  try {
+    await atomicMutation({
+      target,
+      bytes: Buffer.from('third', 'utf8'),
+      expected: expected,
+      readState: state,
+      assertExpected: check,
+      tempTag: 'r46-stale-check'
+    });
+  } catch {
+    rejected = true;
+  }
+  assert.equal(rejected, true);
+  assert.equal(await readFile(target, 'utf8'), 'after');
+  console.log(JSON.stringify({
+    status: 'passed',
+    atomic_mutation: 'shared-primitive',
+    stale_precondition: 'rejected',
+    resource_identity: 'location-distinct-content-equal'
+  }));
+} finally {
+  await rm(dir, { recursive: true, force: true });
+}