deadbyte-mcp 0.15.22 → 0.15.24

package/TEST-MATRIX.json

@@ -1,6 +1,6 @@
 {
   "schema": "deadbyte.test-matrix.v1",
-  "version": "0.15.22",
+  "version": "0.15.24",
   "train": "R48",
   "primary_platform": "win32-x64",
   "reference": {
@@ -10,94 +10,40 @@
     "schemas_sha256": "f342345e34e48769dabaefe1b932f09d41e2e207b422f7794a15ee50ffa8f140"
   },
   "required": [
-    {
-      "id": "capability-authority-truth",
-      "command": "node --test test/capability-resolver.test.mjs",
-      "expected": "PASS across disarmed Coding/Process/Autonomous/Desktop/Host plus armed Host positive control"
-    },
-    {
-      "id": "compact-authority-truth",
-      "command": "node --test test/compact-max-catalog-r45.test.mjs",
-      "expected": "PASS real compact stdio authority-state manifest truth"
-    },
-    {
-      "id": "coding-durable-event-envelope",
-      "command": "node --test test/coding-runtime.test.mjs",
-      "expected": "PASS with signed durable event envelope fields"
-    },
-    {
-      "id": "native-windows-observation",
-      "command": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-hardware-r45.ps1",
-      "expected": "PASS native registry/services/drivers/sockets/volumes/usb/wsl queries with /W4 /WX"
-    },
-    {
-      "id": "machine-fs-entry-isolation",
-      "command": "node --test test/machine-fs-runtime.test.mjs",
-      "expected": "PASS unreadable EINVAL child isolation without page failure"
-    },
-    {
-      "id": "r48-catalog",
-      "command": "npm run r48:catalog:test",
-      "expected": "PASS 116-tool full catalog with machine_windows_query; compact remains 43"
-    },
-    {
-      "id": "commander-hardening",
-      "command": "npm run r47:hardening:test",
-      "expected": "PASS"
-    },
-    {
-      "id": "r48-release",
-      "command": "npm run r48:release:test",
-      "expected": "PASS"
-    },
-    {
-      "id": "full-regression",
-      "command": "npm run r48:full:test",
-      "expected": "PASS"
-    },
-    {
-      "id": "package-boundary",
-      "command": "node --test test/package-boundary.test.mjs",
-      "expected": "PASS"
-    },
-    {
-      "id": "release-smoke",
-      "command": "node --test test/release-smoke-isolation.test.mjs",
-      "expected": "PASS"
-    },
-    {
-      "id": "runtime-update",
-      "command": "node --test test/runtime-self-update.test.mjs",
-      "expected": "PASS"
-    },
-    {
-      "id": "audit",
-      "command": "npm audit --omit=dev",
-      "expected": "0 vulnerabilities"
-    },
-    {
-      "id": "activation",
-      "command": "npx -y deadbyte-mcp@0.15.22 remote status",
-      "expected": "active runtime 0.15.22 with no VERSION SKEW"
-    },
-    {
-      "id": "machine-truth",
-      "command": "signed machine_ping",
-      "expected": "release_id and manifests bind activated 0.15.22 generation"
-    },
-    {
-      "id": "live-capability-truth",
-      "command": "capability_manifest after activation",
-      "expected": "DENIED mutating/bound reads follow disarmed authority; authority-independent reads remain AVAILABLE"
-    }
+    {"id":"capability-authority-truth","command":"node --test test/capability-resolver.test.mjs","expected":"PASS authority-state manifest truth"},
+    {"id":"compact-authority-truth","command":"node --test test/compact-max-catalog-r45.test.mjs","expected":"PASS real compact stdio authority-state manifest truth"},
+    {"id":"native-windows-observation","command":"powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-hardware-r45.ps1","expected":"PASS native Windows observation build/query gate"},
+    {"id":"r48-catalog","command":"npm run r48:catalog:test","expected":"PASS 116-tool full catalog; compact remains 43"},
+    {"id":"commander-hardening","command":"npm run r47:hardening:test","expected":"PASS"},
+    {"id":"commander-protocol-adversarial","command":"node --test test/commander-protocol-adversarial-r48.test.mjs","expected":"PASS malformed JSON, invalid request, unknown method/tool, duplicate IDs and concurrent correlation"},
+    {"id":"r48-release","command":"npm run r48:release:test","expected":"PASS"},
+    {"id":"full-regression","command":"npm run r48:full:test","expected":"PASS"},
+    {"id":"package-boundary","command":"node --test test/package-boundary.test.mjs","expected":"PASS"},
+    {"id":"release-smoke","command":"node --test test/release-smoke-isolation.test.mjs","expected":"PASS"},
+    {"id":"runtime-update","command":"node --test test/runtime-self-update.test.mjs","expected":"PASS"},
+    {"id":"audit","command":"npm audit --omit=dev","expected":"0 vulnerabilities"},
+    {"id":"activation","command":"npx -y deadbyte-mcp@0.15.24 remote status","expected":"active runtime 0.15.24 with no VERSION SKEW"},
+    {"id":"machine-truth","command":"signed machine_ping","expected":"release_id and manifests bind activated 0.15.24 generation"},
+    {"id":"rollback-restore","command":"immutable slot rollback/restore","expected":"0.15.24 -> exact 0.15.23 -> exact 0.15.24"}
   ],
+  "focused_proof": {
+    "raw_mcp_protocol": {"tests":3,"pass":3,"fail":0},
+    "commander_hardening": {"tests":101,"pass":101,"fail":0,"skip":0},
+    "npm_audit_production_vulnerabilities": 0
+  },
   "full_regression_partition_proof": {
-    "files": 207,
+    "files": 211,
     "batches": 8,
-    "tests": 1023,
-    "pass": 1014,
-    "skip": 9,
-    "fail": 0
+    "fail": 0,
+    "elapsed_ms": 196997.218,
+    "coding_task_id": "a1a10fff1520b37ac674f1861cd9e53e64e350d5a0766639036aefe5e096e235",
+    "task_receipt_sha256": "7711039e4807f6c2af02bbda897d0032b067e0a6631f789fd3bf801258160d3f",
+    "action_receipt_sha256": "095c5eb4d959b9105a769649aa196a1d33f5097b899031dd16997e5ba1b352e6"
+  },
+  "performance": {
+    "fresh_cross_reference_status": "BLOCKED_REFERENCE_RUNTIME_DEPS",
+    "reason": "Pinned Desktop Commander reference lacks package-lock.json and its staged node_modules is missing cross-fetch; no floating dependency install was used.",
+    "historical_sample_only": true
   },
   "non_win32": {
     "portable_tests": "supported where platform-independent",

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "deadbyte-mcp",
-    "version": "0.15.22",
+    "version": "0.15.24",
     "private": false,
     "type": "module",
     "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
@@ -70,8 +70,9 @@
         "r47:catalog:test": "node --test --test-concurrency=1 test/full-max-catalog-r47.test.mjs",
         "r47:hardening:test": "node scripts/commander-hardening-gate-r47.mjs",
         "r48:full:test": "node scripts/full-regression-r48.mjs",
-        "r48:release:test": "node --test --test-concurrency=1 test/r48-release-contract.test.mjs test/commander-reference-contract-r48.test.mjs test/commander-extended-wire-r48.test.mjs test/commander-external-process-r48.test.mjs test/commander-office-reader-r48.test.mjs test/commander-pdf-r48.test.mjs test/commander-url-reader-r48.test.mjs test/commander-wire-contract-r47.test.mjs",
-        "r48:catalog:test": "node --test --test-concurrency=1 test/full-max-catalog-r48.test.mjs"
+        "r48:release:test": "node --test --test-concurrency=1 test/r48-release-contract.test.mjs test/commander-reference-contract-r48.test.mjs test/commander-extended-wire-r48.test.mjs test/commander-external-process-r48.test.mjs test/commander-office-reader-r48.test.mjs test/commander-pdf-r48.test.mjs test/commander-url-reader-r48.test.mjs test/commander-wire-contract-r47.test.mjs test/commander-protocol-adversarial-r48.test.mjs",
+        "r48:catalog:test": "node --test --test-concurrency=1 test/full-max-catalog-r48.test.mjs",
+        "release:npm": "node scripts/npm-release-r48.mjs"
     },
     "bundleDependencies": [
         "@modelcontextprotocol/server",

package/proof/commander-closure-20260928/DIFFERENTIAL-CHECKPOINT.json

@@ -0,0 +1,111 @@
+{
+  "schema": "deadbyte.commander-differential-checkpoint.v1",
+  "status": "INCOMPLETE",
+  "observed_at_utc": "2026-09-28T15:19:36.8198652Z",
+  "source": {
+    "requested_path": "D:\\Projects\\deadbyte-mcp-r36-dev",
+    "requested_path_version": "0.12.0",
+    "actual_successor_workspace": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r42-agentic-dev",
+    "version": "0.15.24",
+    "git_head": "f9037d4847a7204ce4e1f808758ee3f0e9e7a738",
+    "path_drift_classification": "requested source path is a historical snapshot and cannot produce a successor of active 0.15.23"
+  },
+  "reference": {
+    "path": "D:\\Projects\\desktop-commander-stage-20260922\\desktop-commander",
+    "package": "@wonderwhy-er/desktop-commander",
+    "version": "0.2.51",
+    "server_sha256": "dfc303bb7dd2e8d01debac50fc43bb8644d00089bffdf2887e149497cff8b305",
+    "schemas_sha256": "f342345e34e48769dabaefe1b932f09d41e2e207b422f7794a15ee50ffa8f140"
+  },
+  "live": {
+    "release_id": "v0.15.23-c97e3d21e792420e",
+    "release_manifest_sha256": "c97e3d21e792420ea90dada3c1360cd56e4c1f221daa86596d611b0d1ac351ec",
+    "generation_manifest_sha256": "4d2d3a4dc103576c39171c52db3436366e62d8b872bcafa4c55f2adb6d3a1126",
+    "bridge_pid": 2804,
+    "cloud_pid": 13704,
+    "state": "ONLINE",
+    "authority": "Process/Coding/Autonomous/Desktop/Host ARMED standing-grant"
+  },
+  "findings": [
+    {
+      "id": "reference-biff8",
+      "classification": "REFERENCE_DEFECT",
+      "red": "real OLE/BIFF8 fixture is rejected by the reference ExcelJS xlsx reader",
+      "green": "independent BIFF8 fixture test proves reference read rejection and OOXML bytes emitted under .xls",
+      "fixture_sha256": "096168376d0abf282546749fdf6765309f895d12fe81d45c52a2c54bb6c0d139"
+    },
+    {
+      "id": "incremental-pdf-revisions",
+      "classification": "REAL_DEADBYTE_DEFECT_FIXED_IN_SOURCE",
+      "red": "valid independent-oracle-readable incremental PDF failed with PDF duplicate object 3 0",
+      "green": "latest revision accepted only when both revisions are bound by a validated classic xref Prev chain; PDF suite 10/10 PASS"
+    },
+    {
+      "id": "powershell-command-byte-preservation",
+      "classification": "OBSERVED_PASS",
+      "green": "real policy-bound PowerShell REPL preserved variables, quotes, pipe and Unicode and returned more than 1 MiB through bounded chunk reads"
+    },
+    {
+      "id": "atomic-mutation-post-effect-observation",
+      "classification": "REAL_DEADBYTE_DEFECT_FIXED_IN_SOURCE",
+      "red": "machine filesystem, coding, and Host public boundaries collapsed a post-rename observation failure into a generic denied/failed response without uncertainty identity",
+      "green": "shared atomic mutation marks FAILED_AFTER_UNKNOWN_EFFECT with unknown side-effect state and expected-after SHA-256; machine filesystem, coding, and Host structured outputs preserve it"
+    },
+    {
+      "id": "read-file-directory-and-binary-semantics",
+      "classification": "REAL_DEADBYTE_DEFECT_FIXED_IN_SOURCE",
+      "red": "reference returns a bounded recursive listing for read_file(directory) and explicit binary guidance, while DEADBYTE attempted a file read or lossy UTF-8 decoding",
+      "green": "compatibility read_file uses policy-bound stat plus paged listing for directories and deterministic binary classification without replacement-character data loss"
+    },
+    {
+      "id": "docx-outline-and-content-search",
+      "classification": "REAL_DEADBYTE_DEFECT_FIXED_IN_SOURCE",
+      "red": "reference exposes drawing markers, header/footer text, and literal DOCX part search while DEADBYTE omitted those document parts and searched ZIP bytes",
+      "green": "native bounded DOCX parsing now exposes drawing/header/footer evidence and searches document/header/footer w:t parts through deterministic compatibility sessions"
+    }
+  ],
+  "focused_evidence": [
+    {"scope": "schema-search", "tests": 21, "pass": 21, "fail": 0, "skip": 0},
+    {"scope": "documents-wire-url", "tests": 49, "pass": 49, "fail": 0, "skip": 0},
+    {"scope": "biff-reference", "tests": 1, "pass": 1, "fail": 0, "skip": 0},
+    {"scope": "process-adjacent", "tests": 55, "pass": 55, "fail": 0, "skip": 0},
+    {"scope": "mcp-protocol", "tests": 9, "pass": 9, "fail": 0, "skip": 0},
+    {"scope": "mcp-protocol-adversarial", "tests": 3, "pass": 3, "fail": 0, "skip": 0},
+    {"scope": "atomic-mutation-public-boundaries", "tests": 15, "pass": 14, "fail": 0, "skip": 1},
+    {"scope": "full-regression-r48", "files": 211, "batches": 8, "fail": 0, "task_receipt_sha256": "7711039e4807f6c2af02bbda897d0032b067e0a6631f789fd3bf801258160d3f"},
+    {"scope": "npm-audit-production", "vulnerabilities": 0},
+    {"scope": "real-performance-sample", "iterations_per_workload": 50, "reference_byte_pins_verified": true, "status": "HISTORICAL_ONLY_FRESH_RUN_BLOCKED_REFERENCE_RUNTIME_DEPS",
+      "results": {"read_file": {"reference_ops_per_sec": 55, "deadbyte_ops_per_sec": 1058}, "list_directory": {"reference_ops_per_sec": 3818, "deadbyte_ops_per_sec": 1959}, "get_file_info": {"reference_ops_per_sec": 1805, "deadbyte_ops_per_sec": 2231}, "read_multiple_files": {"reference_ops_per_sec": 30, "deadbyte_ops_per_sec": 562}}}
+    ,{"scope": "filesystem-document-search-adjacent", "tests": 54, "pass": 54, "fail": 0, "skip": 0}
+  ],
+  "changed_file_sha256": {
+    "src/commander-pdf-r48.mjs": "23cda18e86daa4163003fb5a80e0069bc19541d454f32a9a38b1d901ee39f26b",
+    "src/coding-search.mjs": "7f15b59bc240d896beddc2057354f8c72f296fe189db30c200d2c84a67d65773",
+    "src/commander-wire-adapter-r47.mjs": "2ac8421b3dcdd52431001ac16ee1be8cc54a5483d6aab9700b118172ce0d44bd",
+    "src/commander-office-reader-r48.mjs": "7379825118da8fae16d63fe7c4d89b0ddb03e7649f3754adae58a4480f8b317f",
+    "test/commander-pdf-r48.test.mjs": "bfc2e6d7e1aa5332c1c81687001cdb5f923a45c5ce64925097fe11fd850e9214",
+    "test/commander-biff-reference-r48.test.mjs": "8e8b20604062a0398214e159729b10bedff334cb44bddfa4b4046b1ae396520f",
+    "test/commander-schema-differential-r48.test.mjs": "fb82a21e8752ccb82cbd6b631f3366bfe5af9a4c5a433db5a128c0a1fe703c66",
+    "test/commander-real-parity-r47.test.mjs": "cad9a9fc42c50e450a3b019e9ed066e7313631015179be7edbbdd094fea00a81"
+    ,"test/commander-wire-contract-r47.test.mjs": "d8e884e241c705b12797f911fb967a4a33b1ec6f3e15b433735882b3de4a34e5"
+    ,"test/commander-office-reader-r48.test.mjs": "abf1eb0977a064101420a0e908a4c2adbf9d606e9873433709910efafa2b4453"
+    ,"test/commander-core-bridge-r47.test.mjs": "16092ed097420b9da99573c1e84f62d011fcb5db069242d70ffd1649c704fd35"
+    ,"src/atomic-mutation.mjs": "622ee1d3c34c50a6343788cc7312e47cb43a87bdace78fb37ca7f51d453b19ad"
+    ,"src/machine-fs-mcp-tools.mjs": "5413fea537f9d72f73e89137b4c750530fbca41598b16bd9ede0e1c272111488"
+    ,"src/machine-fs-output-contracts.mjs": "d94e4478b7e465fa559065e508f65b9ef3eff815a8f2d7b2481bf2a0b05224c9"
+    ,"src/coding-mcp-tools.mjs": "c4e07aa6818cd989c43ce8d027dc7d467e05c8e2fe96b5548eea291285d3bbb1"
+    ,"src/coding-output-contracts.mjs": "059b4bef2ae6a6c2d7a706c463bea6e49d364faeb619372a429ba36c53004ab7"
+    ,"src/host-plane.mjs": "0ff88bce7ee34b22f48a1494efb16586b68c74bd46c608116eb9d9daa65fdc43"
+    ,"src/output-contracts.mjs": "6cbe72d14af097dde78e989bc7b28b48b9cb8990c989d0d40783633f3a7be465"
+    ,"src/mcp-server.mjs": "16e2250e20710b358b304a0bc41bb416ecb9a586c50d5933f6a4eb2230569b21"
+    ,"test/atomic-mutation.test.mjs": "98de1fc43092c27e0fa85f391607494b11e6cc0d53eaf47b6db1ab457c6d6a4b"
+    ,"test/coding-mcp-unknown-effect.test.mjs": "f37e260c2def4c48434b3f251a4cb756a1852843784c08cf6c39dba9045dfb69"
+    ,"scripts/commander-real-performance-benchmark-r47.mjs": "d7806aa408dc7ca74f05feec535ad6cc545f8c61892c51f0fe388bb13d975290"
+  },
+  "release_created": true,
+  "candidate_version": "0.15.24",
+  "publish_attempt": {"status":"BLOCKED_NPM_AUTH","npm_whoami":"E401 Unauthorized","registry_maintainer":"deadbytes <termay10000@gmail.com>","publish_error":"E404 package not found or no permission"},
+  "published": false,
+  "activated": false,
+  "remaining_scope": "restore npm authentication, registry round-trip, successor activation, exact 0.15.23 rollback, exact successor restore and independent final closure"
+}

package/scripts/activate-skill-creator-1.1.1.mjs

@@ -0,0 +1,46 @@
+import { readFile, rename, rm, mkdir } from "node:fs/promises";
+import path from "node:path";
+import os from "node:os";
+import { createSkillPlane } from "../src/skill-plane-r44.mjs";
+
+const stateDir=path.join(os.homedir(),".deadbyte-mcp");
+const skillsRoot=path.join(stateDir,"skills");
+const active=path.join(skillsRoot,"skill-creator");
+const stageParent=path.join(stateDir,"skill-staging","skill-creator-1.1.1");
+const candidate=path.join(stageParent,"skill-creator");
+const expectedOld="f34b3953db176c8ae9a5e08e7702b39f12b60b013edcd2f4d63a6268af9ba432";
+const expectedNew="e39960cab9eab44512fa38703fc8255b8be8e8b4f6565b4255b94604eded5359";
+
+const oldEnv=JSON.parse(await readFile(path.join(active,"skill.json"),"utf8"));
+const newEnv=JSON.parse(await readFile(path.join(candidate,"skill.json"),"utf8"));
+if(oldEnv.manifest_sha256!==expectedOld||oldEnv.body.version!=="1.1.0") throw new Error("active precondition failed");
+if(newEnv.manifest_sha256!==expectedNew||newEnv.body.version!=="1.1.1") throw new Error("candidate precondition failed");
+
+const stagePlane=await createSkillPlane({root:stageParent,verifyKeyPath:path.join(stateDir,"trust","ed25519-public.pem")});
+const staged=await stagePlane.load({name:"skill-creator"});
+if(!staged.verified||staged.version!=="1.1.1") throw new Error("candidate signature verification failed");
+
+const swapRoot=path.join(stateDir,"skill-staging","swap");
+await mkdir(swapRoot,{recursive:true});
+const oldSwap=path.join(swapRoot,"skill-creator-1.1.0-"+expectedOld);
+await rm(oldSwap,{recursive:true,force:true});
+
+let movedOld=false,movedNew=false;
+try{
+  await rename(active,oldSwap); movedOld=true;
+  await rename(candidate,active); movedNew=true;
+  const livePlane=await createSkillPlane({root:skillsRoot,verifyKeyPath:path.join(stateDir,"trust","ed25519-public.pem")});
+  const live=await livePlane.load({name:"skill-creator"});
+  if(!live.verified||live.version!=="1.1.1"||live.manifest_sha256!==expectedNew) throw new Error("live verification failed after swap");
+  await rm(oldSwap,{recursive:true,force:true});
+  await rm(stageParent,{recursive:true,force:true});
+  console.log(JSON.stringify({status:"ACTIVATED",version:live.version,manifest_sha256:live.manifest_sha256,verified:live.verified},null,2));
+}catch(e){
+  try{
+    if(movedNew) await rename(active,candidate);
+    if(movedOld) await rename(oldSwap,active);
+  }catch(rollbackError){
+    e.message += "; rollback_failed="+rollbackError.message;
+  }
+  throw e;
+}

package/scripts/build-advanced-pcb-skill.mjs

@@ -0,0 +1,208 @@
+import { readFile, writeFile, mkdir, rm, mkdtemp } from "node:fs/promises";
+import path from "node:path";
+import os from "node:os";
+import { fileURLToPath } from "node:url";
+import { promisify } from "node:util";
+import { execFile } from "node:child_process";
+import { createHash, createPrivateKey, createPublicKey, sign } from "node:crypto";
+import { createSkillPlane } from "../src/skill-plane-r44.mjs";
+
+const ex = promisify(execFile);
+const here = path.dirname(fileURLToPath(import.meta.url));
+const home = os.homedir();
+const stateDir = path.join(home, ".deadbyte-mcp");
+const skillsRoot = path.join(stateDir, "skills");
+const creatorDir = path.join(skillsRoot, "skill-creator");
+const name = "deadbyte-advanced-pcb-engineering";
+const version = "1.0.0";
+const out = path.join(skillsRoot, name);
+const description = "Evidence-driven advanced PCB engineering workflow for schematic review, constraint capture, stackup-aware placement and routing, power and signal integrity, EMC, DFM/DFT, KiCad verification, manufacturing release, and hardware bring-up.";
+const creatorManifest = "e39960cab9eab44512fa38703fc8255b8be8e8b4f6565b4255b94604eded5359";
+
+const sha = b => createHash("sha256").update(b).digest("hex");
+const canonical = v => Array.isArray(v) ? v.map(canonical) : v && typeof v === "object"
+  ? Object.fromEntries(Object.keys(v).sort((a,b)=>a.localeCompare(b,"en")).map(k=>[k,canonical(v[k])]))
+  : v;
+
+const sources = [
+  ["SKILL.md", "pcb-skill-src-SKILL.md.txt", "skill"],
+  ["references/bringup-evidence.md", "pcb-skill-src-bringup-evidence.md.txt", "reference"],
+  ["references/constraint-model.md", "pcb-skill-src-constraint-model.md.txt", "reference"],
+  ["references/emc-mechanical-dfm.md", "pcb-skill-src-emc-mechanical-dfm.md.txt", "reference"],
+  ["references/high-speed-layout.md", "pcb-skill-src-high-speed-layout.md.txt", "reference"],
+  ["references/kicad-native.md", "pcb-skill-src-kicad-native.md.txt", "reference"],
+  ["references/power-integrity.md", "pcb-skill-src-power-integrity.md.txt", "reference"],
+  ["scripts/kicad_pcb_probe.py", "pcb-skill-src-kicad_pcb_probe.py.txt", "script"],
+  ["scripts/pcb_constraint_gate.py", "pcb-skill-src-pcb_constraint_gate.py.txt", "script"]
+];
+
+await rm(out, { recursive: true, force: true });
+const scaffold = await ex(process.execPath, [path.join(creatorDir, "scripts", "create-skill.mjs"), skillsRoot, name, version], { maxBuffer: 1024 * 1024 });
+
+for (const [target, src] of sources) {
+  const data = await readFile(path.join(here, src));
+  const dst = path.join(out, ...target.split("/"));
+  await mkdir(path.dirname(dst), { recursive: true });
+  await writeFile(dst, data);
+}
+
+const resources = [];
+for (const [target,, kind] of sources) {
+  if (target === "SKILL.md") continue;
+  const bytes = await readFile(path.join(out, ...target.split("/")));
+  resources.push({ path: target, sha256: sha(bytes), kind });
+}
+resources.sort((a,b)=>a.path.localeCompare(b.path,"en"));
+
+const body = {
+  schema: "deadbyte.skill-manifest.v1",
+  name,
+  version,
+  description,
+  audience: "agent",
+  skill_md_sha256: sha(await readFile(path.join(out, "SKILL.md"))),
+  resources,
+  required_capabilities: [],
+  authority_planes: ["coding"],
+  provenance: {
+    source: "skill-creator",
+    origin_url: null,
+    source_revision: "local-draft-2026-09-27-pcb-v1"
+  }
+};
+
+const bodyBytes = Buffer.from(JSON.stringify(canonical(body)), "utf8");
+const body_sha256 = sha(bodyBytes);
+const priv = createPrivateKey(await readFile(path.join(stateDir, "trust", "ed25519-private.pem")));
+const pub = createPublicKey(priv);
+const keyId = sha(pub.export({ type: "spki", format: "der" }));
+const attestation = {
+  algorithm: "ed25519",
+  domain: "DEADBYTE-SKILL-MANIFEST-V1",
+  key_id: keyId,
+  signature_base64: sign(null, Buffer.concat([Buffer.from("DEADBYTE-SKILL-MANIFEST-V1\0", "utf8"), bodyBytes]), priv).toString("base64")
+};
+const unsigned = { body, body_sha256, attestation };
+const envelope = {
+  ...unsigned,
+  manifest_sha256: sha(Buffer.from(JSON.stringify(canonical(unsigned)), "utf8"))
+};
+await writeFile(path.join(out, "skill.json"), JSON.stringify(envelope, null, 2), "utf8");
+
+const validator = await ex(process.execPath, [path.join(creatorDir, "scripts", "validate-skill.mjs"), out], { maxBuffer: 1024 * 1024 });
+
+const plane = await createSkillPlane({
+  root: skillsRoot,
+  verifyKeyPath: path.join(stateDir, "trust", "ed25519-public.pem")
+});
+const loaded = await plane.load({ name });
+if (!loaded.verified) throw new Error("skill plane returned verified=false");
+
+let python = null;
+for (const candidate of ["python", "py"]) {
+  try {
+    await ex(candidate, ["--version"], { timeout: 10000, maxBuffer: 1024 * 1024 });
+    python = candidate;
+    break;
+  } catch {}
+}
+
+let selfTest = { status: "SKIPPED", reason: "python_not_found" };
+if (python) {
+  const tmp = await mkdtemp(path.join(os.tmpdir(), "deadbyte-pcb-skill-"));
+  try {
+    const fixture = [
+      "(kicad_pcb",
+      "  (version 20240108)",
+      "  (generator pcbnew)",
+      "  (layers",
+      "    (0 \"F.Cu\" signal)",
+      "    (31 \"B.Cu\" signal)",
+      "  )",
+      "  (net 0 \"\")",
+      "  (net 1 \"GND\")",
+      "  (footprint \"TEST\" (layer \"F.Cu\"))",
+      "  (segment (start 0 0) (end 1 0) (width 0.2) (layer \"F.Cu\") (net 1))",
+      "  (via (at 1 0) (size 0.6) (drill 0.3) (layers \"F.Cu\" \"B.Cu\") (net 1))",
+      "  (zone (net 1) (net_name \"GND\") (layer \"B.Cu\"))",
+      ")",
+      ""
+    ].join("\n");
+    const fixturePath = path.join(tmp, "fixture.kicad_pcb");
+    const probePath = path.join(tmp, "probe.json");
+    const contractPath = path.join(tmp, "contract.json");
+    await writeFile(fixturePath, fixture, "utf8");
+
+    const probeScript = path.join(out, "scripts", "kicad_pcb_probe.py");
+    const gateScript = path.join(out, "scripts", "pcb_constraint_gate.py");
+    const probeRun = await ex(python, [probeScript, fixturePath, "--pretty"], { timeout: 30000, maxBuffer: 1024 * 1024 });
+    const probe = JSON.parse(probeRun.stdout);
+    if (probe.copper_layer_count !== 2 || probe.counts.footprints !== 1 || probe.counts.segments !== 1 || probe.counts.vias !== 1 || probe.track_width_mm.min !== 0.2 || probe.via_drill_mm.min !== 0.3) {
+      throw new Error("probe self-test observation mismatch");
+    }
+    await writeFile(probePath, probeRun.stdout, "utf8");
+
+    const passContract = {
+      required_layers: ["F.Cu", "B.Cu"],
+      min_copper_layers: 2,
+      min_track_width_mm: 0.15,
+      min_via_diameter_mm: 0.45,
+      min_via_drill_mm: 0.20,
+      required_nets: ["GND"],
+      min_footprints: 1,
+      min_segments: 1,
+      min_vias: 1,
+      min_zones: 1
+    };
+    await writeFile(contractPath, JSON.stringify(passContract, null, 2), "utf8");
+    const passRun = await ex(python, [gateScript, probePath, contractPath], { timeout: 30000, maxBuffer: 1024 * 1024 });
+    const passResult = JSON.parse(passRun.stdout);
+    if (passResult.status !== "PASS") throw new Error("positive gate self-test did not pass");
+
+    const failContract = { min_track_width_mm: 0.25 };
+    await writeFile(contractPath, JSON.stringify(failContract, null, 2), "utf8");
+    let negativeCaught = false;
+    try {
+      await ex(python, [gateScript, probePath, contractPath], { timeout: 30000, maxBuffer: 1024 * 1024 });
+    } catch (e) {
+      const parsed = e.stdout ? JSON.parse(e.stdout) : null;
+      if (e.code === 2 && parsed && parsed.status === "FAIL") negativeCaught = true;
+    }
+    if (!negativeCaught) throw new Error("negative gate self-test did not fail closed");
+
+    selfTest = {
+      status: "PASS",
+      python,
+      fixture_probe: {
+        copper_layers: probe.copper_layer_count,
+        footprints: probe.counts.footprints,
+        segments: probe.counts.segments,
+        vias: probe.counts.vias,
+        zones: probe.counts.zones,
+        min_track_width_mm: probe.track_width_mm.min,
+        min_via_diameter_mm: probe.via_diameter_mm.min,
+        min_via_drill_mm: probe.via_drill_mm.min
+      },
+      positive_gate: "PASS",
+      negative_gate: "FAIL_EXIT_2"
+    };
+  } finally {
+    await rm(tmp, { recursive: true, force: true });
+  }
+}
+
+console.log(JSON.stringify({
+  status: "built",
+  name,
+  version,
+  out,
+  creator_manifest: creatorManifest,
+  scaffold_stdout: scaffold.stdout.trim(),
+  manifest_sha256: envelope.manifest_sha256,
+  body_sha256,
+  resource_count: resources.length,
+  verify_key_id: keyId,
+  validator_stdout: validator.stdout.trim(),
+  skill_plane_verified: loaded.verified,
+  self_test: selfTest
+}, null, 2));

package/scripts/commander-real-performance-benchmark-r47.mjs

@@ -1,5 +1,5 @@
 import { performance } from 'node:perf_hooks';
-import { mkdtemp, writeFile, rm } from 'node:fs/promises';
+import { mkdtemp, writeFile, readFile, rm } from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 import { createHash } from 'node:crypto';
@@ -9,7 +9,16 @@ import { loadCodingPolicy } from '../src/coding-plane.mjs';
 import { createMachineFsRuntime } from '../src/machine-fs.mjs';
 
 const N=50;
-const commanderFs=await import(pathToFileURL('D:/Projects/desktop-commander-stage-20260922/desktop-commander/dist/tools/filesystem.js').href);
+const referenceRoot=path.resolve(process.env.DEADBYTE_COMMANDER_REFERENCE_RUNTIME??'D:/Projects/desktop-commander-stage-20260922/desktop-commander');
+const expectedReferenceHashes={
+  'dist/server.js':'dfc303bb7dd2e8d01debac50fc43bb8644d00089bffdf2887e149497cff8b305',
+  'dist/tools/schemas.js':'f342345e34e48769dabaefe1b932f09d41e2e207b422f7794a15ee50ffa8f140'
+};
+for(const [relative,expected] of Object.entries(expectedReferenceHashes)){
+  const actual=createHash('sha256').update(await readFile(path.join(referenceRoot,relative))).digest('hex');
+  if(actual!==expected)throw new Error(`reference byte pin mismatch: ${relative}`);
+}
+const commanderFs=await import(pathToFileURL(path.join(referenceRoot,'dist','tools','filesystem.js')).href);
 const { readFileFromDisk, readMultipleFiles, listDirectory, getFileInfo }=commanderFs;
 const sha=b=>createHash('sha256').update(b).digest('hex');
 const root=await mkdtemp(path.join(os.tmpdir(),'deadbyte-commander-bench-'));
@@ -37,5 +46,5 @@ rows.push(await t('Commander get_file_info',()=>getFileInfo(commanderFile)));
 rows.push(await t('DEADBYTE get_file_info',()=>db.stat({rootId:'bench',relativePath:'a.txt',hash:true})));
 rows.push(await t('Commander read_multiple_files',()=>readMultipleFiles([path.join(commanderDir,'a.txt'),path.join(commanderDir,'b.txt')])));
 rows.push(await t('DEADBYTE read_multiple_files', async()=>{ await db.read({rootId:'bench',relativePath:'a.txt',offset:0,maxBytes:4096}); await db.read({rootId:'bench',relativePath:'b.txt',offset:0,maxBytes:4096}); }));
-console.log(JSON.stringify({schema:'deadbyte.commander-real-performance-benchmark.v1',reference:'@wonderwhy-er/desktop-commander dist local stage',iterations:N,rows},null,2));
+console.log(JSON.stringify({schema:'deadbyte.commander-real-performance-benchmark.v1',reference:'@wonderwhy-er/desktop-commander@0.2.51',reference_hashes:expectedReferenceHashes,iterations:N,rows},null,2));
 await rm(root,{recursive:true,force:true});

package/scripts/diagnose-skill-tree.mjs

@@ -0,0 +1,8 @@
+import { readFile, readdir } from "node:fs/promises";
+import path from "node:path";
+const root=process.argv[2];
+async function walk(d,r=""){let out=[];for(const e of (await readdir(d,{withFileTypes:true})).sort((a,b)=>a.name.localeCompare(b.name,"en"))){const p=path.join(d,e.name),q=r?r+"/"+e.name:e.name;if(e.isDirectory())out.push(...await walk(p,q));else if(e.isFile())out.push(q)}return out}
+const env=JSON.parse(await readFile(path.join(root,"skill.json"),"utf8"));
+const actual=(await walk(root)).sort((a,b)=>a.localeCompare(b,"en"));
+const expected=["SKILL.md","skill.json",...env.body.resources.map(x=>x.path)].sort((a,b)=>a.localeCompare(b,"en"));
+console.log(JSON.stringify({actual,expected,extra:actual.filter(x=>!expected.includes(x)),missing:expected.filter(x=>!actual.includes(x))},null,2));