deadbyte-mcp 0.15.24 → 0.15.26

package/docs/R49-REMOTE-CONTROL-DONORS.json

@@ -0,0 +1,75 @@
+{
+  "schema": "deadbyte.r49-remote-control-donors.v1",
+  "observed_at_utc": "2026-09-30T00:40:00.000Z",
+  "rule": "Reimplement proven primitives natively; never import donor runtime authority or dependencies.",
+  "donors": [
+    {
+      "repository": "https://github.com/shahidx0x/better-remote-commander",
+      "commit": "eba57dd7f77cee98981bc7d95e59b8481ef1e309",
+      "license": "MIT",
+      "useful_primitives": ["heartbeat and stale-socket replacement", "bounded call correlation", "offline-stable tool metadata", "revocable device routing"],
+      "decision": "retain DEADBYTE identity-bound tunnel and authority planes; use the reconnect and stale-generation cases as adversarial test inputs"
+    },
+    {
+      "repository": "https://github.com/Jennifer9911/open-remote-mcp",
+      "commit": "fe9a7339f8fbb0040b9e10fcb0c4d040172d5c2a",
+      "license": "MIT",
+      "useful_primitives": ["cloud policy may narrow but never broaden local authority", "device-code pairing", "realpath root enforcement", "persistent revocation audit"],
+      "decision": "already structurally stronger in DEADBYTE; preserve as release invariants and do not add a second pairing authority"
+    },
+    {
+      "repository": "https://github.com/Razewang/secure-host-mcp",
+      "commit": "200cb9474aa81b48ae79319dac63f689e6b351ee",
+      "license": "MIT",
+      "useful_primitives": ["bounded PTY ring offsets with explicit dropped bytes", "principal-owned jobs", "interrupted-not-survived recovery truth", "transactional structured patch rollback"],
+      "decision": "DEADBYTE already has stronger owned-session journals and unknown-effect semantics; use dropped-output and principal-substitution cases in compatibility gates"
+    },
+    {
+      "repository": "https://github.com/dddabtc/winremote-mcp",
+      "commit": "2185ee68428e76f29176291a2a862b1561468462",
+      "license": "MIT",
+      "useful_primitives": ["task cancellation", "risk-tier catalog selection", "loopback-by-default remote binding", "annotated screenshot fallback ladder"],
+      "decision": "keep independent DEADBYTE authority planes instead of coarse tiers; retain cancellation and bind-target tests"
+    },
+    {
+      "repository": "https://github.com/getremcp/remcp",
+      "commit": "ce32908706686df85df4ca30fd26fc93719a4be4",
+      "license": "MIT",
+      "useful_primitives": ["semantic wait_for_ui instead of fixed sleeps", "runtime crash restart", "catalog-first compact routing", "native UI then browser then OCR then coordinates ladder"],
+      "decision": "adopt bounded semantic Desktop wait natively without unrestricted mode, telemetry, or donor dependencies"
+    },
+    {
+      "repository": "https://github.com/trycua/cua",
+      "commit": "0f29c142d7fe3e05ea0ce276cee11b3a9725ba01",
+      "license": "MIT core with separately licensed optional components",
+      "useful_primitives": ["session-scoped stale references", "one action without blind retry", "typed action effect separate from postcondition", "fresh snapshot after action", "bounded semantic desktop and browser waits"],
+      "decision": "adopt only architecture semantics from MIT core documentation; do not import optional perception, model, AGPL, or CC assets"
+    }
+  ],
+  "adopted_checkpoint": {
+    "capability": "desktop.wait",
+    "full_tool": "desktop_wait",
+    "compact_tool": "desktop_control",
+    "compact_op": "wait",
+    "authority": "none",
+    "properties": [
+      "strict closed input schema",
+      "baseline-frame binding",
+      "bounded timeout and poll interval",
+      "fresh observation on every attempt",
+      "optional local UIA predicate with query hash only",
+      "signed final observation receipt",
+      "no input dispatch and no action retry",
+      "autonomous goal ownership check for baseline frame"
+    ]
+  },
+  "explicit_non_adoptions": [
+    "generic shell or caller-selected executable authority",
+    "unrestricted or god mode",
+    "coarse risk tiers replacing independent authority planes",
+    "telemetry or donor-hosted control plane",
+    "raw coordinates derived from stale observations",
+    "automatic action retry",
+    "optional CUA perception or model artifacts"
+  ]
+}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "deadbyte-mcp",
-    "version": "0.15.24",
+    "version": "0.15.26",
     "private": false,
     "type": "module",
     "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
@@ -42,7 +42,7 @@
         "contained:run": "node src/contained-cli.mjs workspaces/demo input.txt",
         "contained:smoke": "node src/contained-smoke.mjs",
         "mcp:contained:smoke": "node src/mcp-contained-smoke-client.mjs",
-        "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r46.ps1",
+    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r49.ps1",
         "authority:smoke": "node src/authority-smoke.mjs",
         "mcp:remote:smoke": "node src/remote-mcp-smoke-client.mjs",
         "mcp:host:smoke": "node src/mcp-host-smoke-client.mjs",

package/proof/commander-closure-20260928/DIFFERENTIAL-CHECKPOINT.json

@@ -1,12 +1,12 @@
 {
   "schema": "deadbyte.commander-differential-checkpoint.v1",
   "status": "INCOMPLETE",
-  "observed_at_utc": "2026-09-28T15:19:36.8198652Z",
+  "observed_at_utc": "2026-09-29T13:36:00.000Z",
   "source": {
     "requested_path": "D:\\Projects\\deadbyte-mcp-r36-dev",
     "requested_path_version": "0.12.0",
     "actual_successor_workspace": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r42-agentic-dev",
-    "version": "0.15.24",
+    "version": "0.15.25",
     "git_head": "f9037d4847a7204ce4e1f808758ee3f0e9e7a738",
     "path_drift_classification": "requested source path is a historical snapshot and cannot produce a successor of active 0.15.23"
   },
@@ -62,6 +62,12 @@
       "classification": "REAL_DEADBYTE_DEFECT_FIXED_IN_SOURCE",
       "red": "reference exposes drawing markers, header/footer text, and literal DOCX part search while DEADBYTE omitted those document parts and searched ZIP bytes",
       "green": "native bounded DOCX parsing now exposes drawing/header/footer evidence and searches document/header/footer w:t parts through deterministic compatibility sessions"
+    },
+    {
+      "id": "interactive-output-quiescence",
+      "classification": "REAL_DEADBYTE_DEFECT_FIXED_IN_SOURCE",
+      "red": "interact_with_process returned after the first stream advance and could omit the final END marker from a 1.1 MiB response",
+      "green": "bounded stream-quiescence waiting plus unconditional test cleanup passed 20 consecutive real PowerShell repetitions and the expanded 139-test hardening gate"
     }
   ],
   "focused_evidence": [
@@ -73,6 +79,8 @@
     {"scope": "mcp-protocol-adversarial", "tests": 3, "pass": 3, "fail": 0, "skip": 0},
     {"scope": "atomic-mutation-public-boundaries", "tests": 15, "pass": 14, "fail": 0, "skip": 1},
     {"scope": "full-regression-r48", "files": 211, "batches": 8, "fail": 0, "task_receipt_sha256": "7711039e4807f6c2af02bbda897d0032b067e0a6631f789fd3bf801258160d3f"},
+    {"scope": "expanded-commander-hardening", "tests": 139, "pass": 139, "fail": 0, "skip": 0},
+    {"scope": "powershell-large-output-repeat", "runs": 20, "pass": 20, "fail": 0},
     {"scope": "npm-audit-production", "vulnerabilities": 0},
     {"scope": "real-performance-sample", "iterations_per_workload": 50, "reference_byte_pins_verified": true, "status": "HISTORICAL_ONLY_FRESH_RUN_BLOCKED_REFERENCE_RUNTIME_DEPS",
       "results": {"read_file": {"reference_ops_per_sec": 55, "deadbyte_ops_per_sec": 1058}, "list_directory": {"reference_ops_per_sec": 3818, "deadbyte_ops_per_sec": 1959}, "get_file_info": {"reference_ops_per_sec": 1805, "deadbyte_ops_per_sec": 2231}, "read_multiple_files": {"reference_ops_per_sec": 30, "deadbyte_ops_per_sec": 562}}}
@@ -81,12 +89,12 @@
   "changed_file_sha256": {
     "src/commander-pdf-r48.mjs": "23cda18e86daa4163003fb5a80e0069bc19541d454f32a9a38b1d901ee39f26b",
     "src/coding-search.mjs": "7f15b59bc240d896beddc2057354f8c72f296fe189db30c200d2c84a67d65773",
-    "src/commander-wire-adapter-r47.mjs": "2ac8421b3dcdd52431001ac16ee1be8cc54a5483d6aab9700b118172ce0d44bd",
+    "src/commander-wire-adapter-r47.mjs": "a32226e302669553d39565176fc7ef9a0ace24834d2c19d3558ba33f13016ba0",
     "src/commander-office-reader-r48.mjs": "7379825118da8fae16d63fe7c4d89b0ddb03e7649f3754adae58a4480f8b317f",
     "test/commander-pdf-r48.test.mjs": "bfc2e6d7e1aa5332c1c81687001cdb5f923a45c5ce64925097fe11fd850e9214",
     "test/commander-biff-reference-r48.test.mjs": "8e8b20604062a0398214e159729b10bedff334cb44bddfa4b4046b1ae396520f",
     "test/commander-schema-differential-r48.test.mjs": "fb82a21e8752ccb82cbd6b631f3366bfe5af9a4c5a433db5a128c0a1fe703c66",
-    "test/commander-real-parity-r47.test.mjs": "cad9a9fc42c50e450a3b019e9ed066e7313631015179be7edbbdd094fea00a81"
+    "test/commander-real-parity-r47.test.mjs": "5709ea1cf4e65c4f1759206123216cac6cb66d8a383c0b0a6c00f4a551d9c727"
     ,"test/commander-wire-contract-r47.test.mjs": "d8e884e241c705b12797f911fb967a4a33b1ec6f3e15b433735882b3de4a34e5"
     ,"test/commander-office-reader-r48.test.mjs": "abf1eb0977a064101420a0e908a4c2adbf9d606e9873433709910efafa2b4453"
     ,"test/commander-core-bridge-r47.test.mjs": "16092ed097420b9da99573c1e84f62d011fcb5db069242d70ffd1649c704fd35"
@@ -101,10 +109,13 @@
     ,"test/atomic-mutation.test.mjs": "98de1fc43092c27e0fa85f391607494b11e6cc0d53eaf47b6db1ab457c6d6a4b"
     ,"test/coding-mcp-unknown-effect.test.mjs": "f37e260c2def4c48434b3f251a4cb756a1852843784c08cf6c39dba9045dfb69"
     ,"scripts/commander-real-performance-benchmark-r47.mjs": "d7806aa408dc7ca74f05feec535ad6cc545f8c61892c51f0fe388bb13d975290"
+    ,"scripts/commander-hardening-gate-r47.mjs": "6d6e18b2a17448dad569dfbf60ac103c6c8bcfe73c49af93506816c3c0b7fe73"
+    ,"src/stdio-protocol-guard.mjs": "71e0ddc5e7abaedbb4659bdfb91b6e2db43a642cbec83eee62c16fb069a3c202"
+    ,"test/commander-protocol-adversarial-r48.test.mjs": "bacb96828ea0431cd5f3a8ecb637894f0bdf80b5f52e9308ba0cbb982f50bd2a"
   },
   "release_created": true,
-  "candidate_version": "0.15.24",
-  "publish_attempt": {"status":"BLOCKED_NPM_AUTH","npm_whoami":"E401 Unauthorized","registry_maintainer":"deadbytes <termay10000@gmail.com>","publish_error":"E404 package not found or no permission"},
+  "candidate_version": "0.15.25",
+  "publish_attempt": {"status":"PENDING_AUTH","npm_whoami":"E401 Unauthorized","registry_predecessor_version":"0.15.24","registry_predecessor_tarball_sha256":"23ea53fb4f331873c742c810f815d5ad18291f74c1bda1fd1d8c08475dbbd4ad"},
   "published": false,
   "activated": false,
   "remaining_scope": "restore npm authentication, registry round-trip, successor activation, exact 0.15.23 rollback, exact successor restore and independent final closure"

package/scripts/commander-hardening-gate-r47.mjs

@@ -13,7 +13,16 @@ const suites = [
   'test/commander-exhaustive-surface-r47.test.mjs',
   'test/commander-core-bridge-r47.test.mjs',
   'test/commander-wire-contract-r47.test.mjs',
-  'test/commander-protocol-r47.test.mjs'
+  'test/commander-reference-contract-r48.test.mjs',
+  'test/commander-schema-differential-r48.test.mjs',
+  'test/commander-biff-reference-r48.test.mjs',
+  'test/commander-office-reader-r48.test.mjs',
+  'test/commander-pdf-r48.test.mjs',
+  'test/commander-url-reader-r48.test.mjs',
+  'test/commander-external-process-r48.test.mjs',
+  'test/commander-protocol-r47.test.mjs',
+  'test/commander-protocol-adversarial-r48.test.mjs',
+  'test/prompts-resources.test.mjs'
 ];
 
 const startedAt = new Date().toISOString();

package/scripts/deferred-slot-operation-r46.mjs

@@ -14,6 +14,10 @@ const packageRoot=path.resolve(here,'..');
 const stateRoot=path.resolve(process.env.DEADBYTE_STATE_ROOT||path.join(os.homedir(),'.deadbyte-mcp'));
 const evidenceRoot=path.join(stateRoot,'evidence','deferred-slot-operations');
 const sha256=bytes=>createHash('sha256').update(bytes).digest('hex');
+const sleep=ms=>new Promise(resolve=>setTimeout(resolve,ms));
+const packageIdentity=JSON.parse(await readFile(path.join(packageRoot,'package.json'),'utf8'));
+if(packageIdentity?.name!=='deadbyte-mcp'||!/^[0-9]+\.[0-9]+\.[0-9]+$/.test(packageIdentity?.version??'')) throw new Error('deferred updater package identity invalid');
+const expectedVersion=packageIdentity.version;
 const atomicJson=async(file,value)=>{
   await mkdir(path.dirname(file),{recursive:true});
   const temp=`${file}.${process.pid}.${randomBytes(4).toString('hex')}.tmp`;
@@ -22,7 +26,7 @@ const atomicJson=async(file,value)=>{
 };
 function activationArgs(manifestSha){
   if(!HEX64.test(manifestSha??'')) throw new Error('activate requires one lowercase manifest SHA-256');
-  return ['--stage',packageRoot,'--development-root',packageRoot,'--expected-version','0.15.5',
+  return ['--stage',packageRoot,'--development-root',packageRoot,'--expected-version',expectedVersion,
     '--expected-manifest',manifestSha,'--process-policy',path.join(packageRoot,'controller','deadbyte-process-policy.json'),
     '--process-policy-sha256',null,'--desktop-policy',path.join(packageRoot,'controller','deadbyte-desktop-policy.json'),
     '--desktop-policy-sha256',null,'--semantic-lsp-config',path.join(packageRoot,'controller','deadbyte-semantic-lsp-config.json'),
@@ -81,6 +85,44 @@ async function normalizedArgs(mode,value,{explicitBridgeRoot=null,explicitBridge
   }
   throw new Error("operation must be exactly 'activate' or 'rollback'");
 }
+async function awaitHandoffCompletion(result,{timeoutMs=900000,pollMs=1000}={}){
+  if(result?.handed_off!==true) return result;
+  if(typeof result.handoff_path!=='string'||!path.isAbsolute(result.handoff_path)) throw new Error('slot activation handoff path invalid');
+  const evidenceDir=path.dirname(result.handoff_path);
+  const receiptPath=path.join(evidenceDir,'receipt.json');
+  const failurePath=path.join(evidenceDir,'failure-receipt.json');
+  const expected=result.pointer;
+  const publicKey=createPublicKey(await readFile(path.join(stateRoot,'trust','ed25519-public.pem')));
+  const deadline=Date.now()+timeoutMs;
+  while(Date.now()<deadline){
+    try{
+      const envelope=JSON.parse(await readFile(receiptPath,'utf8'));
+      if(!verifySlotUpdateEnvelope(envelope,publicKey)) throw new Error('activation receipt signature invalid');
+      const body=envelope.body,active=body?.active_pointer;
+      if(body?.schema!=='deadbyte.r27-slot-update-receipt.v1'||body?.rollback_performed!==false) throw new Error('activation receipt semantics invalid');
+      if(active?.release_id!==expected?.release_id||active?.version!==expected?.version||active?.manifest_sha256!==expected?.manifest_sha256||active?.generation_root!==expected?.generation_root) {
+        throw new Error('activation receipt target mismatch');
+      }
+      parseActivePointer(JSON.stringify(active));
+      const pointer=parseActivePointer(await readFile(path.join(stateRoot,'active-release.json'),'utf8'));
+      if(pointer.release_id!==active.release_id||pointer.generation_root!==active.generation_root||pointer.manifest_sha256!==active.manifest_sha256) {
+        throw new Error('active pointer does not match signed activation receipt');
+      }
+      return {receipt_path:receiptPath,receipt_sha256:envelope.receipt_sha256,pointer};
+    }catch(error){
+      if(error?.code!=='ENOENT') throw error;
+    }
+    try{
+      const failure=JSON.parse(await readFile(failurePath,'utf8'));
+      if(!verifySlotUpdateEnvelope(failure,publicKey)) throw new Error('activation failure receipt signature invalid');
+      throw new Error(`slot activation failed: ${failure.body?.error?.message??'failure receipt emitted'}`);
+    }catch(error){
+      if(error?.code!=='ENOENT') throw error;
+    }
+    await sleep(pollMs);
+  }
+  throw new Error(`slot activation timed out after ${timeoutMs}ms`);
+}
 const rawArgs=process.argv.slice(2);
 const mode=rawArgs[0],value=rawArgs[1];
 if(!value||!['activate','rollback'].includes(mode)) throw new Error('usage: deferred-slot-operation-r46.mjs <activate manifest_sha256|rollback activation_receipt> [--bridge-root ABS --bridge-script-sha256 HEX64]');
@@ -102,7 +144,7 @@ if(workerFlag==='--worker'){
   await atomicJson(statePath,{schema:'deadbyte.deferred-slot-operation.v1',operation_id:operationIdArg,mode,state:'running',started_at_utc:new Date().toISOString(),bridge_root:explicitBridgeRoot,bridge_script_sha256:explicitBridgeSha256});
   try{
     const args=await normalizedArgs(mode,value,{explicitBridgeRoot,explicitBridgeSha256});
-    const result=await runSlotUpdateCli(args,{stateRoot});
+    const result=await awaitHandoffCompletion(await runSlotUpdateCli(args,{stateRoot}));
     await atomicJson(statePath,{schema:'deadbyte.deferred-slot-operation.v1',operation_id:operationIdArg,mode,state:'completed',
       completed_at_utc:new Date().toISOString(),receipt_path:result.receipt_path,receipt_sha256:result.receipt_sha256,
       active_release:result.pointer.release_id,generation_root:result.pointer.generation_root,bridge_root:explicitBridgeRoot,bridge_script_sha256:explicitBridgeSha256});

package/scripts/gate-windows-r48.ps1

@@ -0,0 +1,45 @@
+$ErrorActionPreference = 'Stop'
+Set-StrictMode -Version 3.0
+
+function Invoke-GateStep {
+    param([Parameter(Mandatory)][string]$Name,[Parameter(Mandatory)][string[]]$NpmArgs)
+    Write-Host "==== $Name ===="
+    & npm.cmd @NpmArgs
+    if ($LASTEXITCODE -ne 0) { throw "DEADBYTE 0.15.25 / R48 gate failed at $Name with exit code $LASTEXITCODE" }
+}
+
+Invoke-GateStep 'containment-build' @('run','containment:build')
+Invoke-GateStep 'process-policy-refresh' @('run','process:policy:refresh')
+Invoke-GateStep 'desktop-policy-refresh' @('run','desktop:policy:refresh')
+Invoke-GateStep 'hardware-build' @('run','hardware:build')
+
+$hostPolicy = [System.IO.Path]::GetFullPath((Join-Path $PSScriptRoot '..\controller\deadbyte-host-policy.json'))
+Remove-Item -LiteralPath $hostPolicy -Force -ErrorAction SilentlyContinue
+if (Test-Path -LiteralPath $hostPolicy) { throw 'could not establish hermetic Host policy absence' }
+
+Invoke-GateStep 'r48-release-focused' @('run','r48:release:test')
+Invoke-GateStep 'r48-catalog' @('run','r48:catalog:test')
+Invoke-GateStep 'commander-hardening' @('run','r47:hardening:test')
+Invoke-GateStep 'full-regression' @('run','r48:full:test')
+Invoke-GateStep 'mcp-smoke' @('run','mcp:smoke')
+Invoke-GateStep 'mcp-agent-smoke' @('run','mcp:agent:smoke')
+Invoke-GateStep 'mcp-coding-smoke' @('run','mcp:coding:smoke')
+Invoke-GateStep 'mcp-machine-fs-smoke' @('run','mcp:machine-fs:smoke')
+Invoke-GateStep 'mcp-observation-smoke' @('run','mcp:observation:smoke')
+Invoke-GateStep 'mcp-process-smoke' @('run','mcp:process:smoke')
+Invoke-GateStep 'mcp-autonomous-smoke' @('run','mcp:autonomous:smoke')
+Invoke-GateStep 'tunnel-stdio-compat-smoke' @('run','mcp:tunnel-compat:smoke')
+Invoke-GateStep 'containment-smoke' @('run','containment:smoke')
+Invoke-GateStep 'contained-smoke' @('run','contained:smoke')
+Invoke-GateStep 'mcp-contained-smoke' @('run','mcp:contained:smoke')
+Invoke-GateStep 'host-policy-refresh' @('run','host:policy:init')
+Invoke-GateStep 'manifest-write' @('run','manifest:write')
+Invoke-GateStep 'manifest-verify' @('run','manifest:verify')
+Invoke-GateStep 'doctor' @('run','doctor')
+Invoke-GateStep 'mcp-host-smoke' @('run','mcp:host:smoke')
+Invoke-GateStep 'authority-smoke' @('run','authority:smoke')
+Invoke-GateStep 'manifest-final-verify' @('run','manifest:verify')
+
+& node.exe (Join-Path $PSScriptRoot 'windows-gate-evidence-r48.mjs')
+if ($LASTEXITCODE -ne 0) { throw "R48 evidence writer failed with exit code $LASTEXITCODE" }
+Write-Host '==== DEADBYTE 0.15.25 / R48 WINDOWS GATE: PASS ===='

package/scripts/gate-windows-r49.ps1

@@ -0,0 +1,54 @@
+$ErrorActionPreference = 'Stop'
+Set-StrictMode -Version 3.0
+
+function Invoke-GateStep {
+    param([Parameter(Mandatory)][string]$Name,[Parameter(Mandatory)][string[]]$NpmArgs)
+    Write-Host "==== $Name ===="
+    & npm.cmd @NpmArgs
+    if ($LASTEXITCODE -ne 0) { throw "DEADBYTE 0.15.26 / R49 gate failed at $Name with exit code $LASTEXITCODE" }
+}
+
+function Invoke-NodeTest {
+    param([Parameter(Mandatory)][string]$Name,[Parameter(Mandatory)][string[]]$TestFiles)
+    Write-Host "==== $Name ===="
+    & node.exe --test --test-concurrency=1 @TestFiles
+    if ($LASTEXITCODE -ne 0) { throw "DEADBYTE 0.15.26 / R49 gate failed at $Name with exit code $LASTEXITCODE" }
+}
+
+Invoke-GateStep 'containment-build' @('run','containment:build')
+Invoke-GateStep 'process-policy-refresh' @('run','process:policy:refresh')
+Invoke-GateStep 'desktop-policy-refresh' @('run','desktop:policy:refresh')
+Invoke-GateStep 'hardware-build' @('run','hardware:build')
+
+$hostPolicy = [System.IO.Path]::GetFullPath((Join-Path $PSScriptRoot '..\controller\deadbyte-host-policy.json'))
+Remove-Item -LiteralPath $hostPolicy -Force -ErrorAction SilentlyContinue
+if (Test-Path -LiteralPath $hostPolicy) { throw 'could not establish hermetic Host policy absence' }
+
+Invoke-GateStep 'r49-release-focused' @('run','r48:release:test')
+Invoke-NodeTest 'r49-donor-proof' @('test/r49-remote-control-donors.test.mjs')
+Invoke-NodeTest 'r49-desktop-wait' @('test/desktop-runtime-r40.test.mjs','test/desktop-mcp-tools-r40.test.mjs','test/autonomous-desktop-r40.test.mjs')
+Invoke-GateStep 'r49-catalog' @('run','r48:catalog:test')
+Invoke-GateStep 'commander-hardening' @('run','r47:hardening:test')
+Invoke-GateStep 'full-regression' @('run','r48:full:test')
+Invoke-GateStep 'mcp-smoke' @('run','mcp:smoke')
+Invoke-GateStep 'mcp-agent-smoke' @('run','mcp:agent:smoke')
+Invoke-GateStep 'mcp-coding-smoke' @('run','mcp:coding:smoke')
+Invoke-GateStep 'mcp-machine-fs-smoke' @('run','mcp:machine-fs:smoke')
+Invoke-GateStep 'mcp-observation-smoke' @('run','mcp:observation:smoke')
+Invoke-GateStep 'mcp-process-smoke' @('run','mcp:process:smoke')
+Invoke-GateStep 'mcp-autonomous-smoke' @('run','mcp:autonomous:smoke')
+Invoke-GateStep 'tunnel-stdio-compat-smoke' @('run','mcp:tunnel-compat:smoke')
+Invoke-GateStep 'containment-smoke' @('run','containment:smoke')
+Invoke-GateStep 'contained-smoke' @('run','contained:smoke')
+Invoke-GateStep 'mcp-contained-smoke' @('run','mcp:contained:smoke')
+Invoke-GateStep 'host-policy-refresh' @('run','host:policy:init')
+Invoke-GateStep 'manifest-write' @('run','manifest:write')
+Invoke-GateStep 'manifest-verify' @('run','manifest:verify')
+Invoke-GateStep 'doctor' @('run','doctor')
+Invoke-GateStep 'mcp-host-smoke' @('run','mcp:host:smoke')
+Invoke-GateStep 'authority-smoke' @('run','authority:smoke')
+Invoke-GateStep 'manifest-final-verify' @('run','manifest:verify')
+
+& node.exe (Join-Path $PSScriptRoot 'windows-gate-evidence-r49.mjs')
+if ($LASTEXITCODE -ne 0) { throw "R49 evidence writer failed with exit code $LASTEXITCODE" }
+Write-Host '==== DEADBYTE 0.15.26 / R49 WINDOWS GATE: PASS ===='

package/scripts/init-host-policy.ps1

@@ -10,7 +10,15 @@ Set-StrictMode -Version 3.0
 $ErrorActionPreference = 'Stop'
 
 function Get-Sha256Lower([string]$Path) {
-    (Get-FileHash -LiteralPath $Path -Algorithm SHA256).Hash.ToLowerInvariant()
+    $stream = [System.IO.File]::OpenRead($Path)
+    try {
+        $sha = [System.Security.Cryptography.SHA256]::Create()
+        try {
+            ([System.BitConverter]::ToString($sha.ComputeHash($stream))).Replace('-', '').ToLowerInvariant()
+        }
+        finally { $sha.Dispose() }
+    }
+    finally { $stream.Dispose() }
 }
 
 if ([string]::IsNullOrWhiteSpace($CoreRoot)) {

package/scripts/npm-release-r48.mjs

@@ -105,7 +105,8 @@ async function main() {
 
   console.log('[3/7] Packing artifact with npm pack...');
   const packed = parseJson(runNpm(['pack', '--json'], { timeout: 180000 }));
-  const filename = packed?.[0]?.filename;
+  const packRecord = Array.isArray(packed) ? packed[0] : packed?.[pkg.name];
+  const filename = packRecord?.filename;
   if (!filename) throw new Error('npm pack did not return a tarball filename');
   const tarball = path.join(root, filename);
   let releaseSucceeded = false;

package/scripts/windows-gate-evidence-r48.mjs

@@ -0,0 +1,27 @@
+import {createHash} from 'node:crypto';
+import {mkdir,open,readFile} from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import {fileURLToPath} from 'node:url';
+import {doctor} from '../src/doctor-r45.mjs';
+
+const root=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..');
+const stateRoot=path.resolve(process.env.DEADBYTE_STATE_ROOT||path.join(os.homedir(),'.deadbyte-mcp'));
+const sha256=bytes=>createHash('sha256').update(bytes).digest('hex');
+const insist=(ok,message)=>{if(!ok)throw new Error(message);};
+const pkg=JSON.parse(await readFile(path.join(root,'package.json'),'utf8'));
+const release=JSON.parse(await readFile(path.join(root,'RELEASE.json'),'utf8'));
+const active=JSON.parse(await readFile(path.join(stateRoot,'active-release.json'),'utf8'));
+const manifestSha256=sha256(await readFile(path.join(root,'MANIFEST.SHA256')));
+insist(pkg.version==='0.15.25'&&release.version===pkg.version&&release.train==='R48','R48 candidate identity mismatch');
+insist(active.release_id===release.parent.release_id&&active.manifest_sha256===release.parent.manifest_sha256&&active.generation_manifest_sha256===release.parent.generation_manifest_sha256,'active runtime is not the exact sealed R48 parent');
+const health=await doctor();
+insist(health.status==='ok'&&health.package_version===pkg.version&&health.manifest?.verified===true,'R48 doctor evidence invalid');
+insist(health.policy?.host_v2_ready===true,'R48 Host policy v2 is not ready');
+const evidence={schema:'deadbyte.r48-windows-gate.v1',status:'passed',exit_code:0,version:pkg.version,train:'R48',completed_at_utc:new Date().toISOString(),manifest_sha256:manifestSha256,parent:release.parent,active_predecessor:{release_id:active.release_id,version:active.version,manifest_sha256:active.manifest_sha256,generation_manifest_sha256:active.generation_manifest_sha256},doctor:{verified_entries:health.manifest.verified_entries,host_v2_ready:true},gates:{full_regression:true,commander_hardening:true,exact_catalog:true,stdio_smokes:true,manifest_final_verify:true}};
+const bytes=Buffer.from(`${JSON.stringify(evidence,null,2)}\n`);
+const dir=path.join(stateRoot,'evidence','release'); await mkdir(dir,{recursive:true});
+const target=path.join(dir,`r48-windows-gate-${manifestSha256.slice(0,16)}.json`);
+try{const handle=await open(target,'wx',0o600);try{await handle.writeFile(bytes);await handle.sync();}finally{await handle.close();}}
+catch(error){if(error?.code!=='EEXIST')throw error;const prior=JSON.parse(await readFile(target,'utf8'));insist(prior.schema===evidence.schema&&prior.status==='passed'&&prior.version===evidence.version&&prior.manifest_sha256===manifestSha256&&prior.parent?.release_id===release.parent.release_id,'conflicting R48 gate evidence identity');}
+console.log(JSON.stringify({status:'passed',path:target,sha256:sha256(bytes),manifest_sha256:manifestSha256}));

package/scripts/windows-gate-evidence-r49.mjs

@@ -0,0 +1,27 @@
+import {createHash} from 'node:crypto';
+import {mkdir,open,readFile} from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import {fileURLToPath} from 'node:url';
+import {doctor} from '../src/doctor-r45.mjs';
+
+const root=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..');
+const stateRoot=path.resolve(process.env.DEADBYTE_STATE_ROOT||path.join(os.homedir(),'.deadbyte-mcp'));
+const sha256=bytes=>createHash('sha256').update(bytes).digest('hex');
+const insist=(ok,message)=>{if(!ok)throw new Error(message);};
+const pkg=JSON.parse(await readFile(path.join(root,'package.json'),'utf8'));
+const release=JSON.parse(await readFile(path.join(root,'RELEASE.json'),'utf8'));
+const active=JSON.parse(await readFile(path.join(stateRoot,'active-release.json'),'utf8'));
+const manifestSha256=sha256(await readFile(path.join(root,'MANIFEST.SHA256')));
+insist(pkg.version==='0.15.26'&&release.version===pkg.version&&release.train==='R49','R49 candidate identity mismatch');
+insist(active.release_id===release.parent.release_id&&active.manifest_sha256===release.parent.manifest_sha256&&active.generation_manifest_sha256===release.parent.generation_manifest_sha256,'active runtime is not the exact sealed R49 parent');
+const health=await doctor();
+insist(health.status==='ok'&&health.package_version===pkg.version&&health.manifest?.verified===true,'R49 doctor evidence invalid');
+insist(health.policy?.host_v2_ready===true,'R49 Host policy v2 is not ready');
+const evidence={schema:'deadbyte.r49-windows-gate.v1',status:'passed',exit_code:0,version:pkg.version,train:'R49',completed_at_utc:new Date().toISOString(),manifest_sha256:manifestSha256,parent:release.parent,active_predecessor:{release_id:active.release_id,version:active.version,manifest_sha256:active.manifest_sha256,generation_manifest_sha256:active.generation_manifest_sha256},doctor:{verified_entries:health.manifest.verified_entries,host_v2_ready:true},gates:{full_regression:true,commander_hardening:true,donor_proof:true,desktop_wait:true,exact_catalog:true,stdio_smokes:true,manifest_final_verify:true}};
+const bytes=Buffer.from(`${JSON.stringify(evidence,null,2)}\n`);
+const dir=path.join(stateRoot,'evidence','release'); await mkdir(dir,{recursive:true});
+const target=path.join(dir,`r49-windows-gate-${manifestSha256.slice(0,16)}.json`);
+try{const handle=await open(target,'wx',0o600);try{await handle.writeFile(bytes);await handle.sync();}finally{await handle.close();}}
+catch(error){if(error?.code!=='EEXIST')throw error;const prior=JSON.parse(await readFile(target,'utf8'));insist(prior.schema===evidence.schema&&prior.status==='passed'&&prior.version===evidence.version&&prior.manifest_sha256===manifestSha256&&prior.parent?.release_id===release.parent.release_id,'conflicting R49 gate evidence identity');}
+console.log(JSON.stringify({status:'passed',path:target,sha256:sha256(bytes),manifest_sha256:manifestSha256}));

package/src/autonomous-planner-contracts.mjs

@@ -132,6 +132,7 @@ const r36TypedActionSchemas=[
   z.strictObject({kind:z.literal('observation_system_status')}),
   z.strictObject({kind:z.literal('desktop_status')}),
   z.strictObject({kind:z.literal('desktop_observe')}),
+  z.strictObject({kind:z.literal('desktop_wait'),baseline_frame_id:z.string().regex(HEX64),until:z.enum(['frame_changed','topology_changed','foreground_changed','uia_present','uia_absent']),uia_query:plannerDesktopQuery.nullable().default(null),timeout_ms:z.number().int().min(100).max(30000).default(5000),poll_ms:z.number().int().min(50).max(1000).default(100)}),
   z.strictObject({kind:z.literal('desktop_target'),frame_id:z.string().regex(HEX64),uia_query:plannerDesktopQuery}),
   z.strictObject({
     kind:z.literal('desktop_action'),action_kind:plannerDesktopActionKind,expected_frame_id:z.string().regex(HEX64),

package/src/autonomous-planner.mjs

@@ -134,11 +134,17 @@ function validateR36TypedAction(action) {
   if (typeof action.destination_path === 'string') pathFields.push(action.destination_path);
   for (const item of action.files ?? []) if (typeof item?.path === 'string') pathFields.push(item.path);
   for (const candidate of pathFields) validatePortableRelativePath(candidate);
-  if(action.kind==='desktop_target'){
+  if(action.kind==='desktop_target'||action.kind==='desktop_wait'){
     const q=action.uia_query;
-    if(q.kind==='root'&&q.value!=='') throw new Error('desktop root query value must be empty');
-    if(q.kind!=='root'&&q.value.length<1) throw new Error('desktop UIA query value required');
-    if(q.ordinal>=q.max_results) throw new Error('desktop UIA ordinal must be below max_results');
+    const needsQuery=action.kind==='desktop_target'||action.until==='uia_present'||action.until==='uia_absent';
+    if(needsQuery&&!q)throw new Error('desktop UIA query required');
+    if(!needsQuery&&q)throw new Error('desktop non-UIA wait cannot carry query');
+    if(q){
+      if(q.kind==='root'&&q.value!=='') throw new Error('desktop root query value must be empty');
+      if(q.kind!=='root'&&q.value.length<1) throw new Error('desktop UIA query value required');
+      if(q.ordinal>=q.max_results) throw new Error('desktop UIA ordinal must be below max_results');
+    }
+    if(action.kind==='desktop_wait'&&action.poll_ms>action.timeout_ms)throw new Error('desktop wait poll exceeds timeout');
   }
   if(action.kind==='desktop_action'){
     const pointer=['pointer_move','click_primary','click_secondary','double_click_primary','scroll'].includes(action.action_kind);
@@ -372,7 +378,7 @@ export function buildPlannerPrompt({ goal, policy, view }) {
     'patch: operations are DEADBYTE Native Diff operations (write, replace, delete) and MUST use exact SHA-256 preconditions from supplied context.',
     'run_profile: profile_id must be one of the policy profile ids in state.',
     'delegate: operation is one bounded existing-runtime action. Allowed kinds: machine_stat, machine_list, machine_read, observation_search_start, observation_search_status, observation_search_page, observation_search_cancel, observation_process_list, observation_system_status, process_start, process_read, process_status, process_list, process_action, process_terminate.',
-    'When Desktop capabilities are present, use typed desktop_status, desktop_observe, desktop_target with one bounded UIA query, and desktop_action. desktop_action requires separate Desktop authority; Autonomous authority never implies Desktop authority. After stale or unknown Desktop evidence, observe again and replan; never blindly repeat an action.',
+    'When Desktop capabilities are present, use typed desktop_status, desktop_observe, bounded desktop_wait, desktop_target with one bounded UIA query, and desktop_action. desktop_wait is read-only and replaces fixed sleeps; it never retries an action. desktop_action requires separate Desktop authority; Autonomous authority never implies Desktop authority. After stale or unknown Desktop evidence, observe again and replan; never blindly repeat an action.',
     'Delegate paths are relative to the goal root. Process start accepts only profile_id and cwd; process_action accepts only session_id and fixed action_id. Never emit raw stdin, executable, PID, environment, shell command, or process arguments.',
     'finish only when the goal is actually satisfied. Required release profiles are enforced by the engine and cannot be bypassed.',
     'clarify only when one bounded operator choice is genuinely required. Ask one concrete question and provide 2-5 short mutually exclusive choices.',

package/src/autonomous-runtime.mjs

@@ -726,7 +726,7 @@ const CAPABILITY_BY_ACTION=Object.freeze({
   machine_stat:'machine_fs.stat',machine_list:'machine_fs.list',machine_read:'machine_fs.read',
   observation_search_start:'observation.search_start',observation_search_status:'observation.search_status',observation_search_page:'observation.search_page',observation_search_cancel:'observation.search_cancel',
   observation_process_list:'observation.process_list',observation_system_status:'observation.system_status',
-  desktop_status:'desktop.status',desktop_observe:'desktop.observe',desktop_target:'desktop.target',desktop_action:'desktop.action'
+  desktop_status:'desktop.status',desktop_observe:'desktop.observe',desktop_wait:'desktop.wait',desktop_target:'desktop.target',desktop_action:'desktop.action'
 });
 function capabilityIdForOperation(operation){return CAPABILITY_BY_ACTION[operation?.kind]??null;}
 function assertDelegatedIdentity(events, operation) {
@@ -745,6 +745,12 @@ function assertDelegatedIdentity(events, operation) {
       event.payload?.operation?.kind==='desktop_observe'&&event.payload?.result?.frame?.frame_id===operation.frame_id);
     if(!owned) throw new Error(`desktop frame '${operation.frame_id}' was not freshly observed by this goal`);
   }
+  if(operation.kind==='desktop_wait'){
+    const owned=events.some(event=>event.type==='delegated_action_completed'&&
+      ['desktop_observe','desktop_wait','desktop_target'].includes(event.payload?.operation?.kind)&&
+      event.payload?.result?.frame?.frame_id===operation.baseline_frame_id);
+    if(!owned)throw new Error(`desktop wait baseline '${operation.baseline_frame_id}' was not freshly observed by this goal`);
+  }
   if(operation.kind==='desktop_action'){
     const frameOwned=events.some(event=>event.type==='delegated_action_completed'&&
       ['desktop_observe','desktop_target'].includes(event.payload?.operation?.kind)&&
@@ -856,6 +862,9 @@ async function invokeDelegatedOperation(goal, operation, runtimes, desktopContex
     case 'desktop_observe':
       if(!desktopRuntime) throw new Error('desktop runtime unavailable');
       return desktopRuntime.observe({preview:false});
+    case 'desktop_wait':
+      if(!desktopRuntime) throw new Error('desktop runtime unavailable');
+      return desktopRuntime.wait({baselineFrameId:operation.baseline_frame_id,until:operation.until,query:operation.uia_query,timeoutMs:operation.timeout_ms,pollMs:operation.poll_ms,preview:false});
     case 'desktop_target':
       if(!desktopRuntime) throw new Error('desktop runtime unavailable');
       return desktopRuntime.ground({frameId:operation.frame_id,query:operation.uia_query});
@@ -903,6 +912,7 @@ async function verifyDelegatedEvidence(operation, result, runtimes, verifyKeyPat
     if(!runtimes.desktopRuntime?.verifyReceipt) throw new Error('desktop receipt verifier unavailable');
     const refs=[];
     if(operation.kind==='desktop_observe'&&result?.receipt_id) refs.push([result.receipt_id,result.receipt_sha256,'desktop_observation']);
+    if(operation.kind==='desktop_wait'&&result?.receipt_id) refs.push([result.receipt_id,result.receipt_sha256,'desktop_wait_observation']);
     if(operation.kind==='desktop_target'&&result?.grounding?.receipt_id) refs.push([result.grounding.receipt_id,result.grounding.receipt_sha256,'desktop_grounding']);
     if(operation.kind==='desktop_action'){
       refs.push(

package/src/capability-ledger.mjs

@@ -147,6 +147,7 @@ export const R36_CAPABILITY_ENTRIES=Object.freeze([
 
   gateway('desktop.status','desktop_status','desktop_control','status','DEADBYTE_DESKTOP_RUNTIME','none',{receipt_class:'desktop'}),
   gateway('desktop.observe','desktop_observe','desktop_control','observe','DEADBYTE_DESKTOP_RUNTIME','none',{receipt_class:'desktop'}),
+  gateway('desktop.wait','desktop_wait','desktop_control','wait','DEADBYTE_DESKTOP_RUNTIME','none',{receipt_class:'desktop'}),
   gateway('desktop.target','desktop_target','desktop_control','target','DEADBYTE_DESKTOP_RUNTIME','none',{receipt_class:'desktop'}),
   gateway('desktop.action','desktop_action','desktop_control','action','DEADBYTE_DESKTOP_RUNTIME','desktop',{mutating:true,receipt_class:'desktop'}),
 

package/src/commander-wire-adapter-r47.mjs

@@ -581,6 +581,19 @@ export function createCommanderWireAdapter({machineFsRuntime=null,processRuntime
     }
     return null;
   }
+  async function waitForStreamQuiescence(sessionId,observed,timeoutMs,settleMs=100){
+    const deadline=Date.now()+timeoutMs;
+    let current=observed;
+    while(current.state==='running'&&Date.now()<deadline){
+      const baseline=current.stream_head;
+      const waitMs=Math.min(settleMs,Math.max(1,deadline-Date.now()));
+      const next=await processRuntime.read({sessionId,offset:baseline,maxBytes:1,waitMs});
+      if(next.state!=='running') return next;
+      if(next.stream_head>baseline){ current=next; continue; }
+      return next;
+    }
+    return current;
+  }
   async function readProcessRange(sessionId,start,end){
     if(!Number.isInteger(start)||!Number.isInteger(end)||start<0||end<start) throw new Error('native process range invalid');
     if(end-start>RDC_PROCESS_SNAPSHOT_MAX) throw new Error(`RDC process response exceeds ${RDC_PROCESS_SNAPSHOT_MAX} byte compatibility bound`);
@@ -710,6 +723,9 @@ export function createCommanderWireAdapter({machineFsRuntime=null,processRuntime
     if((observed.stream_head??before.stream_head)<=before.stream_head&&observed.state==='running'&&waitMs>0){
       observed=await waitForStreamAdvance(sessionId,before.stream_head,waitMs)??observed;
     }
+    if((observed.stream_head??before.stream_head)>before.stream_head&&observed.state==='running'&&waitMs>0){
+      observed=await waitForStreamQuiescence(sessionId,observed,waitMs);
+    }
     const streamHead=Number.isInteger(observed.stream_head)?observed.stream_head:before.stream_head;
     const earliest=Number.isInteger(observed.earliest_offset)?observed.earliest_offset:observed.offset;
     const start=Math.max(before.stream_head,earliest);