deadbyte-mcp 0.15.17 → 0.15.18

package/MANIFEST.SHA256

@@ -100,6 +100,7 @@ c40cba16657dad75b2380876d8eeaa0bc81ad68b1a4bd20876442874e92caab7  docs/V084-R28-
 18c0403516fda2d7fd135663a5b8b1d3ec29da16229dcb846d742870d6874fad  docs/V085-R47-JEV-DECISION-PLANE.md
 f31bcbc42ef171de27d19369a6012dc31f0d8c50b67add9b2f195235f300619c  harness/r42-agent-evals.json
 b9870c5f3057712b178d65b1627c02874f178d9048e11fc3dca693a2caa073a4  harness/task-contract.schema.json
+ba9c736f19e7f60b7f6764adb0b7908c0a2b394e09b6c09863528c7f2bc86095  MANIFEST.SHA256.release-backup
 3c6e49fda86d80e372403746e4be9c2c3506f1298de5fc4bc3832673dfc92f3b  mcp-server.mjs
 1c16b23afb6d1e0bccd5e2e10b5c7eb6247257d4b9f1c390ee7063fa30320f4c  miniconpty.obj
 77ccee181903f91caf53ee469e66fac9a462ddf7230070e892b7d139dd497d4e  native/appcontainer-stage.cpp
@@ -1331,7 +1332,7 @@ db605a698f917c4006462596e6526fe6a9c6eff9b8409e8472fe545d4b70027c  node_modules/z
 f67a25ded944912bd4621b68df17c7c70a52aae117278c076c0aabbc32a3abba  node_modules/zod/v4/mini/schemas.d.ts
 51b3a7869df2d3a1bd98acb9d5b6a61bbccc7653d7a3d8fca7f0e0db7e84e284  node_modules/zod/v4/mini/schemas.js
 3e3125b5a537a24c3632c1c5c09640ce7bcb3935901b127ad8ae3c37a27f133f  node_modules/zod/v4/package.json
-c90ca5fbb44d8d4095194ee9d3f2d3fca7cd4c4d84e607ec383fd8f80d22641d  package.json
+fbd3c9c18b3ecd8fff73f90575950cd209f4fcd5f3639542e29fce0cb7d8b508  package.json
 8177e3a354721a73df889f386a97e7744a2e017d150aecf4bf309f5177d18690  proof/CONTAINMENT-BUILD.txt
 a8efa13e44ff50902aee64cfca542d19605a1ae23db95280ad2d44b324f3eae7  proof/MCP-SMOKE-STATUS.txt
 7c115069cc4a343ca21b0ebdee74bd8f544b02d4aa906ffa13308725825d891a  proof/NODE-SYNTAX.txt
@@ -1391,7 +1392,7 @@ d433aaea5cccd1e184775ac4d915f34e0b39c6c99916dddd009731ad5fd6443f  proof/V073-WIN
 bd0773a9e02e8ab11475c9cc5a7db29a8313233b7eab7f837922737e75ec5938  proof/VERIFY.txt
 2c821808d4596965c577f40191daee224d3aea81989778c4af97f53a83b487db  proof/WINDOWS-CONTAINED-STATUS.txt
 f8bc839c7b4fcb0ea7b7e7ad9448847c3beae6f95f2eb4d407d1b284aaa4ff68  proof/WINDOWS-CONTAINMENT-STATUS.txt
-a407a90262f3af7d05362ff2b0b262243c0abc5ccfe427a6da2cb9238214cc33  PROVENANCE.json
+0de402842d463a66446c0c0db1f4da54fce0e3fdadc7cc631a0a39ffc3a3297b  PROVENANCE.json
 27ca0f3c9ee3a1b6374a9c8dd98008decdd0c7659c7a569c70ad7b9734c74655  R34-BASELINE.json
 0b7ec5ee347ddfa6cca59740fc7a8fe3fc5d51406265bb12189e82fa106319d2  R41-PARENT.json
 bd2a789b0aab5663f0d208af2ca8e4ec98179bc8c7b57e70a962d4e06a3dcfc4  R42-PARENT.json
@@ -1399,8 +1400,8 @@ bd2a789b0aab5663f0d208af2ca8e4ec98179bc8c7b57e70a962d4e06a3dcfc4  R42-PARENT.jso
 f932ef78b7a72b1bb0d7aedb5fe42fbb9951c2492eb528b72442f46ddff81a6c  R44-DONORS.json
 731b4c559fc0d25dea701e4474f02400b27e8e3f4cac9f230d5214497d4490a9  R44-PARENT.json
 d33ec5d167dd44800ba4e68372b08db43deb8d01df2ef71dd435ff004ac66c8b  R45-PARENT.json
-5e466d6cf0d3ad3d6bf335d9fe08404184700a90b92262c87644deac81718df3  README.txt
-ccb5edde1273d654aa67b82895948e49f2a608080e80ad27fde63260ff57b4bd  RELEASE.json
+2869e789a7bf5ebd15926889348bba42840541dd164fa205c1961f4755fca1cf  README.txt
+ffb0aef1e3fca79a57b0a8106805d777385f745231fc9d00a0c10c34420db5ff  RELEASE.json
 60339a21eae1de3b2eaf28dd87fd3ee8f5642f48414a937af7c69f71df6b56ba  SBOM.cdx.json
 bd138fe5a64088e8e1a7a5bf6104c5b17317bdc8cf3ad8191ea00ed82ace7d9b  scripts/agent-eval-r42.mjs
 8d90256a6863f3bbbff02e95cb12389fc6f9e8dbcb77bf1c20c902de371425e8  scripts/archive-source-zips.mjs
@@ -1487,7 +1488,7 @@ a0ad824eed1d8be051d5f731579f9bf4115b311f202b75ea0d03aa257b13a671  scripts/gate-w
 00a3fc5aa75763c40ff0e09173091168903eb7fcae0ce164e51876569a4e2ff1  scripts/gate-windows-r46.ps1
 9a085b34b9e54023eb0efadcea1e74a1bef44b984105d064768d66910999173e  scripts/gate-windows.ps1
 9e625bdc701298c05eb2a63c208d023a487a1baf306c05940eb29c19fb1d6544  scripts/init-desktop-policy-r40.ps1
-1f076a5d55616027d7a272c860118fb437f67a629cf4aa4258f1d4acd56043c7  scripts/init-host-policy.ps1
+c5cfa5ac5b45f028aedb07ad0bd65d9247d1618003ca729142c230ea506fb2b5  scripts/init-host-policy.ps1
 1a771b5b8a62d57f26762d53472ed68a3e733674b1c91e08becf0dc2e4325039  scripts/inspect-active-release-r45.mjs
 de6142bd5693cf4edb8725c9c43fc77e9bdc12f5b398a757006d778d3ee3f8ed  scripts/inspect-r46-active.mjs
 06425d2a4004cb0ad66383c10c30aaa91bb020be2926bc76f9681a8f0827ddfc  scripts/inventory-reference-dist.mjs
@@ -1728,7 +1729,7 @@ bac271c6f5218752ac5ff4decf5249e3893ddb35c63c092ce17238c27fc4d35b  src/trust-init
 aa765e9a28c69ff58a5b5a0d29b49ea181af4db9076633b102dbca25861e708e  src/tunnel-stdio-compat.mjs
 642cb67d1854850e336ee73fbd71b329056bdcbdab35cea19c1a995a155ff5d9  src/verifier-cli.mjs
 8f818a4852ce3be3a380cd4736c3073a7a3e0e45cd7c7ca90588a6b843d3d022  src/verifier.mjs
-b2dde57a04ad75df4a05d709158e985238dec421ca5f336b38933fc93599c335  src/version.mjs
+80577f0e21147e67e0393af823e41502840f150d572b9a2db3d95c5d3de516b2  src/version.mjs
 7e09c57a97289360aabfaf3d531208e54872efbfb3182f3c18203d2cb88c46b5  src/worker-registry.mjs
 76361d5ae9a710273cf64a7525082197b692236bf23689875e5fd1ef4aa96d2b  src/worker-scheduler.mjs
 4da1b32f5198bb089bc68b7eb6de21ea296678b5020018a73742bf0df57d62fa  src/workload-substrate.mjs
@@ -1786,7 +1787,7 @@ ecc7fa3dca82f6453a95e87d2cd39a6150bb51fdb59a5c7ae9efad59cc0cc004  test/commander
 70081d35b102c0a9a923a9bc872165171bfec86a5a9913c1a6aacf3ead0876c0  test/commander-extended-runtime-r47.test.mjs
 18f7cbd18077fb248728daecdaaa59c27c942e3e7f40f28fb6e39ba36a01a9a7  test/commander-observability-r47.test.mjs
 fc014858b70428735c5311efdc07ff814e63db9330f89426d697077f2509c264  test/commander-parity-gate-r47.test.mjs
-433e5427c2e5320ffc4e0321365c3d0e89bc48e316c95e628d3c11f32cd8845c  test/commander-protocol-r47.test.mjs
+547465a40c0b18040130e4bc6dd49d64384dadc929e9ede1e57fddbc5c3a10c3  test/commander-protocol-r47.test.mjs
 c521cdfb7ffa0e57f7f8562622011950012e49d2e9c0ad941a88ba747b73a4e1  test/commander-real-parity-r47.test.mjs
 b91717e90c678a07dab88f51285717f4e986b02fa65555f00e01e164d476a3a0  test/commander-remote-bridge-r47.test.mjs
 7bd183f57b33e4cd8c981fc906c80a6855cb856baace0bcb3f145dadf9d62127  test/commander-remote-plane-r47.test.mjs
@@ -1961,7 +1962,7 @@ d8f544bbcdfff61f7abb7705ad7e5e1f17998f5fde3c114fb33915fc66d1408f  test/r41-final
 39e2dffd4fce1d53b996183e85a2a3becb599b2dee00fb55b328a59d08b300b7  test/r44-parent.test.mjs
 2c5f2093b945c267c8d09cd2da0875c7f45911a7c01aa02a50cd64c2c1a7ccdc  test/r45-autonomous-quick-test.test.mjs
 532075c86893caf68a2d0ea09171bee4c7d60892c1892011285376a2c186ed92  test/r45-finalization.test.mjs
-2f9a5593578df8055506e985851f5da07ea92da07e8edd4fa5799e4d8efd392b  test/r47-release-contract.test.mjs
+b21096f9ce8367b1b41e8b1677ce96e980c09bf0894b17bd60be5f757b1a97b9  test/r47-release-contract.test.mjs
 e45a6cd299d8d65bdeb9bc0117ce1eb2b47fdebad89a02413ee979c9d0ae3a5c  test/release-activation-gate.test.mjs
 85f6dc2059fd19d03452309ffe67bed5b87da8e6f0ce3a85cab58cba8b197ceb  test/release-generation.test.mjs
 bb58887a2c393cd5aac3fa3bb3a04de2704bd2a30dd2083ea638543485fa7e60  test/release-manifest-windows.test.mjs

package/PROVENANCE.json

@@ -1,6 +1,6 @@
 {
   "schema": "deadbyte.provenance.v1",
-  "version": "0.15.16",
+  "version": "0.15.18",
   "builder": "deadbyte-r47-catalog-commander-parity",
   "source_model": "development-root -> MANIFEST.SHA256 -> immutable release slot -> generation bundle -> signed final closure",
   "signing": "ed25519",

package/README.txt

@@ -1,4 +1,4 @@
-DEADBYTE MCP V0.15.17 / R47 FULL CATALOG + COMMANDER PARITY
+DEADBYTE MCP V0.15.18 / R47 FULL CATALOG + COMMANDER PARITY
 =========================
 
 AUTHENTICATED MACHINE TRUTH + DURABLE AGENT + CODING + AUTONOMOUS PRODUCTION ENGINE
@@ -8,11 +8,11 @@ NPX PRIMARY OPERATOR UX
 Use the npm CLI entry point instead of the legacy CMD convenience wrapper:
 
   npx -y deadbyte-mcp@0.15.11 mcp
-  npx -y deadbyte-mcp@0.15.17 remote
-  npx -y deadbyte-mcp@0.15.17 remote status
-  npx -y deadbyte-mcp@0.15.17 remote restart
-  npx -y deadbyte-mcp@0.15.17 audit status
-  npx -y deadbyte-mcp@0.15.17 audit verify
+  npx -y deadbyte-mcp@0.15.18 remote
+  npx -y deadbyte-mcp@0.15.18 remote status
+  npx -y deadbyte-mcp@0.15.18 remote restart
+  npx -y deadbyte-mcp@0.15.18 audit status
+  npx -y deadbyte-mcp@0.15.18 audit verify
 
 The `mcp` command is the quiet stdio server entry for local MCP clients; stdout is reserved for MCP.
 The remote CLI invokes the stable active-release PowerShell launcher directly with shell=false.

package/RELEASE.json

@@ -1,7 +1,7 @@
 {
   "schema": "deadbyte.release.v1",
   "name": "deadbyte-mcp",
-  "version": "0.15.17",
+  "version": "0.15.18",
   "train": "R47",
   "label": "FULL CATALOG + COMMANDER PARITY",
   "protocol_revision": "2026-07-28",

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "deadbyte-mcp",
-    "version": "0.15.17",
+    "version": "0.15.18",
     "private": false,
     "type": "module",
     "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",

package/scripts/init-host-policy.ps1

@@ -54,7 +54,8 @@ if (Test-Path -LiteralPath $projects -PathType Container) {
 
 $rootIds = @($roots.Keys)
 $powerShellExe = Join-Path $PSHOME 'powershell.exe'
-$cmdExe = [System.IO.Path]::GetFullPath($env:ComSpec)
+$comSpec = if ([string]::IsNullOrWhiteSpace($env:ComSpec)) { Join-Path $env:SystemRoot 'System32\cmd.exe' } else { $env:ComSpec }
+$cmdExe = [System.IO.Path]::GetFullPath($comSpec)
 $nodeCommand = Get-Command node.exe -ErrorAction Stop
 $nodeExe = [System.IO.Path]::GetFullPath([string]$nodeCommand.Source)
 

package/src/version.mjs

@@ -1,4 +1,4 @@
-export const DEADBYTE_VERSION = '0.15.17';
+export const DEADBYTE_VERSION = '0.15.18';
 export const MCP_PROTOCOL_VERSION = '2026-07-28';
 export const RECEIPT_SCHEMA_V1 = 'deadbyte.receipt.v1';
 export const RECEIPT_SCHEMA_V2 = 'deadbyte.receipt.v2';

package/test/commander-protocol-r47.test.mjs

@@ -1,6 +1,9 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
-import { mkdtemp, mkdir, rm } from 'node:fs/promises';
+import { mkdtemp, mkdir, rm, writeFile, stat } from 'node:fs/promises';
+import { createHash } from 'node:crypto';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
 import os from 'node:os';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -10,13 +13,22 @@ import { generateTrustKeypair } from '../src/trust.mjs';
 
 const repoRoot=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..');
 const serverPath=path.join(repoRoot,'src','mcp-server.mjs');
+const execFileAsync=promisify(execFile);
+
+async function materializeTestHostPolicy(root){
+  const policyPath=path.join(root,'deadbyte-host-policy.json');
+  const script=path.join(repoRoot,'scripts','init-host-policy.ps1');
+  await execFileAsync('powershell.exe',['-NoLogo','-NoProfile','-ExecutionPolicy','Bypass','-File',script,'-CoreRoot',repoRoot,'-BridgeRoot',repoRoot,'-PolicyPath',policyPath],{windowsHide:true});
+  return policyPath;
+}
 
 test('Commander R47 exact 40-name surface is registered over real MCP stdio',async()=>{
   const root=await mkdtemp(path.join(os.tmpdir(),'deadbyte-commander-protocol-'));
   const trust=path.join(root,'trust'); await mkdir(trust,{recursive:true});
+  const hostPolicy=await materializeTestHostPolicy(root);
   const keys=await generateTrustKeypair({privateKeyPath:path.join(trust,'private.pem'),publicKeyPath:path.join(trust,'public.pem')});
   const client=new Client({name:'deadbyte-commander-protocol-r47',version:'0.15.15'},{versionNegotiation:{mode:{pin:'2026-07-28'}}});
-  const transport=new StdioClientTransport({command:process.execPath,args:[serverPath],cwd:repoRoot,env:{...getDefaultEnvironment(),DEADBYTE_STATE_ROOT:root,DEADBYTE_SIGNING_KEY:keys.privateKeyPath,DEADBYTE_VERIFY_KEY:keys.publicKeyPath,DEADBYTE_PRIVILEGED_POLICY:path.join(repoRoot,'controller','deadbyte-host-policy.json'),DEADBYTE_MACHINE_RUNTIME:'0',DEADBYTE_CODING_RUNTIME:'0',DEADBYTE_PROCESS_RUNTIME:'0',DEADBYTE_AUTONOMOUS_RUNTIME:'0',DEADBYTE_AUDIT_RUNTIME:'0'},stderr:'pipe'});
+  const transport=new StdioClientTransport({command:process.execPath,args:[serverPath],cwd:repoRoot,env:{...getDefaultEnvironment(),DEADBYTE_STATE_ROOT:root,DEADBYTE_SIGNING_KEY:keys.privateKeyPath,DEADBYTE_VERIFY_KEY:keys.publicKeyPath,DEADBYTE_PRIVILEGED_POLICY:hostPolicy,DEADBYTE_MACHINE_RUNTIME:'0',DEADBYTE_CODING_RUNTIME:'0',DEADBYTE_PROCESS_RUNTIME:'0',DEADBYTE_AUTONOMOUS_RUNTIME:'0',DEADBYTE_AUDIT_RUNTIME:'0'},stderr:'pipe'});
   const expected=['contained_transform','create_directory','edit_block','evidence_verify','file_preview','file_read','force_terminate','get_config','get_file_info','get_more_search_results','get_prompts','get_recent_tool_calls','get_usage_stats','give_feedback_to_desktop_commander','host_exec','host_file_read','host_file_write','interact_with_process','kill_process','list_directory','list_processes','list_searches','list_sessions','markdown_editor','move_file','proof_execute','read_file','read_multiple_files','read_process_output','remote_device','remote_mcp','resources','set_config_value','skill_catalog','start_process','start_search','stop_search','workspace_open','write_file','write_pdf'];
   try{
     await client.connect(transport);

package/test/r47-release-contract.test.mjs

@@ -16,9 +16,9 @@ test('R47 release contract binds package version, parent release, and canonical
   ]);
   const catalog=JSON.parse(catalogBytes);
   assert.equal(pkg.name,'deadbyte-mcp');
-  assert.equal(pkg.version,'0.15.17');
-  assert.equal(DEADBYTE_VERSION,'0.15.17');
-  assert.equal(release.version,'0.15.17');
+  assert.equal(pkg.version,'0.15.18');
+  assert.equal(DEADBYTE_VERSION,'0.15.18');
+  assert.equal(release.version,'0.15.18');
   assert.equal(release.train,'R47');
   assert.equal(release.label,'FULL CATALOG + COMMANDER PARITY');
   assert.equal(release.parent.release_id,'v0.15.15-6b5185db30b97c6e');