deadbyte-mcp 0.15.23 → 0.15.25

package/test/output-schema.test.mjs

@@ -7,7 +7,7 @@ import { fileURLToPath } from 'node:url';
 import { Client } from '@modelcontextprotocol/client';
 import { StdioClientTransport, getDefaultEnvironment } from '@modelcontextprotocol/client/stdio';
 import { generateTrustKeypair } from '../src/trust.mjs';
-import { structuredToolResult, workspaceOpenOutputSchema } from '../src/output-contracts.mjs';
+import { hostFileWriteOutputSchema, structuredToolResult, workspaceOpenOutputSchema } from '../src/output-contracts.mjs';
 
 const here = path.dirname(fileURLToPath(import.meta.url));
 const repoRoot = path.resolve(here, '..');
@@ -85,3 +85,22 @@ test('DEADBYTE validates structured output locally even on isError paths', () =>
     /DEADBYTE output contract violation/
   );
 });
+
+test('host mutation contract preserves explicit post-effect uncertainty', () => {
+  const expected = 'a'.repeat(64);
+  const parsed = hostFileWriteOutputSchema.parse({
+    status: 'failed',
+    error: 'post-commit observation failed',
+    outcome: 'FAILED_AFTER_UNKNOWN_EFFECT',
+    side_effect_state: 'unknown',
+    expected_after_sha256: expected
+  });
+  assert.equal(parsed.expected_after_sha256, expected);
+  assert.throws(() => hostFileWriteOutputSchema.parse({
+    status: 'failed',
+    error: 'post-commit observation failed',
+    outcome: 'FAILED_AFTER_UNKNOWN_EFFECT',
+    side_effect_state: 'unknown',
+    expected_after_sha256: 'not-a-hash'
+  }));
+});

package/test/r48-release-contract.test.mjs

@@ -6,43 +6,43 @@ import { DEADBYTE_VERSION } from '../src/version.mjs';
 const root=new URL('../',import.meta.url);
 const read=rel=>readFile(new URL(rel,root),'utf8');
 
-test('R48 0.15.23 successor binds active 0.15.22 parent and livelog trace evidence',async()=>{
-  const [pkg,lock,release,provenance]=await Promise.all([
+test('R48 0.15.25 successor binds exact active immutable 0.15.24 parent',async()=>{
+  const [pkg,lock,release,provenance,matrix]=await Promise.all([
     read('package.json').then(JSON.parse),
     read('package-lock.json').then(JSON.parse),
     read('RELEASE.json').then(JSON.parse),
-    read('PROVENANCE.json').then(JSON.parse)
+    read('PROVENANCE.json').then(JSON.parse),
+    read('TEST-MATRIX.json').then(JSON.parse)
   ]);
-  assert.equal(pkg.version,'0.15.23');
-  assert.equal(lock.version,'0.15.23');
-  assert.equal(lock.packages[''].version,'0.15.23');
-  assert.equal(DEADBYTE_VERSION,'0.15.23');
-  assert.equal(release.version,'0.15.23');
-  assert.equal(provenance.version,'0.15.23');
+  assert.equal(pkg.version,'0.15.25');
+  assert.equal(lock.version,'0.15.25');
+  assert.equal(lock.packages[''].version,'0.15.25');
+  assert.equal(DEADBYTE_VERSION,'0.15.25');
+  assert.equal(release.version,'0.15.25');
+  assert.equal(provenance.version,'0.15.25');
+  assert.equal(matrix.version,'0.15.25');
   assert.equal(release.train,'R48');
-  assert.equal(release.label,'HUMAN LIVELOG TRACE + VISUAL OPCODE BASELINE');
-  assert.equal(release.parent.release_id,'v0.15.22-ed178d33bf883f68');
-  assert.equal(release.parent.manifest_sha256,'ed178d33bf883f68b4f39f2e8bb805094bc8024b30114c4e6a34b80930cfcff8');
-  assert.equal(release.parent.generation_manifest_sha256,'029b177dc1838388ddec154be38cb597a4dcfa0711b2297196d5a9e7cb8dbe18');
-  assert.equal(release.source_predecessor.version,'0.15.22');
-  assert.equal(release.source_predecessor.tarball_sha256,'fda51e06fa16116179d9c48f1466432886c10e62807482326d2dc5ccb7b66eac');
-  assert.equal(release.source_predecessor.manifest_file_sha256,'ed178d33bf883f68b4f39f2e8bb805094bc8024b30114c4e6a34b80930cfcff8');
+  assert.equal(release.label,'COMMANDER DIFFERENTIAL + PROTOCOL HARDENING BASELINE');
+  assert.equal(release.parent.release_id,'v0.15.24-c33fcbc449562285');
+  assert.equal(release.parent.manifest_sha256,'c33fcbc449562285b4a03e95a6d282d359859f266773043b34db35723dfad54e');
+  assert.equal(release.parent.generation_manifest_sha256,'6b81c4a5b940a6ef525b7d0ce8e7ff5e6b9fc9b8048d9522ea8852fa29b85395');
+  assert.equal(release.source_predecessor.version,'0.15.24');
+  assert.equal(release.source_predecessor.tarball_sha256,'23ea53fb4f331873c742c810f815d5ad18291f74c1bda1fd1d8c08475dbbd4ad');
+  assert.equal(release.source_predecessor.manifest_file_sha256,'c33fcbc449562285b4a03e95a6d282d359859f266773043b34db35723dfad54e');
   assert.equal(release.source_predecessor.reference_server_sha256,'dfc303bb7dd2e8d01debac50fc43bb8644d00089bffdf2887e149497cff8b305');
   assert.equal(release.source_predecessor.reference_schemas_sha256,'f342345e34e48769dabaefe1b932f09d41e2e207b422f7794a15ee50ffa8f140');
   assert.equal(release.capabilities.full_tool_count,116);
-  assert.equal(release.capabilities.full_tool_catalog.path,'docs/R48-FULL-TOOL-CATALOG.json');
-  assert.deepEqual(release.capabilities.windows_queries,['registry','services','drivers','sockets','volumes','usb','wsl']);
-  assert.equal(release.capabilities.machine_fs_list_entry_fault_isolation,true);
-  assert.equal(release.capabilities.capability_manifest_authority_truth,true);
-  assert.equal(release.capabilities.capability_manifest_host_grant_truth,true);
-  assert.equal(release.capabilities.human_livelog_visual_opcode,true);
-  assert.equal(release.capabilities.human_livelog_absolute_root_paths,true);
-  assert.equal(release.capabilities.human_livelog_trace_span,true);
-  assert.equal(release.capabilities.human_livelog_presentation_filter,true);
-  assert.equal(release.capabilities.human_livelog_tty_in_place_rewrite,true);
-  assert.equal(release.capabilities.human_livelog_expanded_summary,true);
+  assert.equal(release.capabilities.commander_incremental_pdf_revisions,true);
+  assert.equal(release.capabilities.commander_docx_header_footer_search,true);
+  assert.equal(release.capabilities.commander_directory_read_fallback,true);
+  assert.equal(release.capabilities.commander_binary_detection,true);
+  assert.equal(release.capabilities.commander_protocol_adversarial,true);
+  assert.equal(release.capabilities.atomic_mutation_unknown_effect,true);
   assert.equal(provenance.parent_release_id,release.parent.release_id);
   assert.equal(provenance.parent_manifest_sha256,release.parent.manifest_sha256);
   assert.equal(provenance.parent_generation_manifest_sha256,release.parent.generation_manifest_sha256);
   assert.equal(provenance.source_predecessor_tarball_sha256,release.source_predecessor.tarball_sha256);
+  assert.equal(matrix.full_regression_partition_proof.files,211);
+  assert.equal(matrix.full_regression_partition_proof.fail,0);
+  assert.equal(matrix.full_regression_partition_proof.task_receipt_sha256,'7711039e4807f6c2af02bbda897d0032b067e0a6631f789fd3bf801258160d3f');
 });

package/test/tunnel-stdio-compat.test.mjs

@@ -76,7 +76,9 @@ test('probe adapter forwards malformed and unknown input unchanged', () => {
 
 test('strict MCP core still rejects legacy at the SDK serving boundary', async () => {
   const source = await readFile(fileURLToPath(new URL('../src/mcp-server.mjs', import.meta.url)), 'utf8');
-  assert.match(source, /serveStdio\([\s\S]*\{ legacy: 'reject' \}\)/);
+  assert.match(source, /serveStdio\(/);
+  assert.match(source, /legacy:\s*'reject'/);
+  assert.match(source, /transport:\s*new DeadbyteStdioServerTransport\(\)/);
   assert.match(source, /installTunnelStdioProbeCompat/);
 });
 
@@ -143,13 +145,11 @@ test('installed stdio prefilter answers legacy startup probe and forwards split
   assert.deepEqual(hexLines, ['HEX:' + modern.toString('hex')]);
 });
 
-test('tunnel compatibility smoke preserves only base or base-plus-host modern catalogs', async () => {
+test('tunnel compatibility smoke derives exact modern catalog and explicitly disables Host', async () => {
   const smoke = await readFile(fileURLToPath(new URL('../src/tunnel-stdio-compat-smoke.mjs', import.meta.url)), 'utf8');
-  for (const name of ['contained_transform', 'evidence_verify', 'file_read', 'proof_execute', 'workspace_open']) assert.match(smoke, new RegExp(name));
-  for (const name of ['host_exec', 'host_file_read', 'host_file_write']) assert.match(smoke, new RegExp(name));
-  assert.match(smoke, /allowedCatalogs/);
-  assert.match(smoke, /baseTools/);
-  assert.match(smoke, /privilegedTools/);
+  assert.match(smoke, /expectedFullCatalogForEnv/);
+  assert.match(smoke, /assertExactCatalog/);
+  assert.match(smoke, /DEADBYTE_PRIVILEGED_POLICY: ''/);
   assert.doesNotMatch(smoke, /agent_task_/);
 });