deadbyte-mcp 0.15.25 → 0.15.26

package/MANIFEST.SHA256

@@ -75,6 +75,8 @@ d9b68959fa7382e2a6c3dae703ac62767bba72ba21680d304048723f1671b5a0  docs/R36-CAPAB
 0de402842d463a66446c0c0db1f4da54fce0e3fdadc7cc631a0a39ffc3a3297b  docs/R47-PROVENANCE.json
 ffb0aef1e3fca79a57b0a8106805d777385f745231fc9d00a0c10c34420db5ff  docs/R47-RELEASE.json
 259fdc97a24575aff3f094911b5e86e4f512b07be7c2cc1286b0fd200d03a8c9  docs/R48-FULL-TOOL-CATALOG.json
+9c48439c091e4bffd2b9a8256a55548bccb28d6b124f2c3270eafdfadab1a812  docs/R49-FULL-TOOL-CATALOG.json
+ac2e5a16199a96da604771273c857878289e75d7481ec50bc21b4eb2b626f82a  docs/R49-REMOTE-CONTROL-DONORS.json
 aaa27193e7a639fc76d0784ce11aa07fea64a05ddfe56ca94b5dc1ef8749fee0  docs/REFERENCES.txt
 d4c46484a4493cae172a56bcc239c8c01a1f53f9fb8ce8c1cdaf06df5d83b032  docs/superpowers/plans/2026-09-14-r30-process-plane.md
 373432c3763d4d69d7737d6874ee5dd7080c008655d2e78f2e119534c6fb6e88  docs/superpowers/plans/2026-09-14-r31-process-prerequisite.md
@@ -1336,7 +1338,7 @@ db605a698f917c4006462596e6526fe6a9c6eff9b8409e8472fe545d4b70027c  node_modules/z
 f67a25ded944912bd4621b68df17c7c70a52aae117278c076c0aabbc32a3abba  node_modules/zod/v4/mini/schemas.d.ts
 51b3a7869df2d3a1bd98acb9d5b6a61bbccc7653d7a3d8fca7f0e0db7e84e284  node_modules/zod/v4/mini/schemas.js
 3e3125b5a537a24c3632c1c5c09640ce7bcb3935901b127ad8ae3c37a27f133f  node_modules/zod/v4/package.json
-031ffd3142b95fb18a6e21ee49c6369057aa7cdf0fb7067bda70de9d2bc9e91c  package.json
+d16f408d918a1c91063956e27c35b0b326fa38fa03a95fecfe9b8fbf3c04ad15  package.json
 872947dffd89755b03558b217129f009dc9f4fd1ce55e93c602fc6ea97ba8b48  proof/commander-closure-20260927/CONTINUATION.json
 2959980d295814aaa0df71fdb358d2cbfd01c1357ee36ef6b10c149875bdb262  proof/commander-closure-20260927/RESULT.json
 2c2866309ca3a6fc8de5b03d445f1dcf0778474fa25cefb822b2ab729bc91c62  proof/commander-closure-20260927/SEARCH-CONTINUATION.json
@@ -1401,7 +1403,7 @@ d433aaea5cccd1e184775ac4d915f34e0b39c6c99916dddd009731ad5fd6443f  proof/V073-WIN
 bd0773a9e02e8ab11475c9cc5a7db29a8313233b7eab7f837922737e75ec5938  proof/VERIFY.txt
 2c821808d4596965c577f40191daee224d3aea81989778c4af97f53a83b487db  proof/WINDOWS-CONTAINED-STATUS.txt
 f8bc839c7b4fcb0ea7b7e7ad9448847c3beae6f95f2eb4d407d1b284aaa4ff68  proof/WINDOWS-CONTAINMENT-STATUS.txt
-5aec9f09e147d8d815bb099285b66380bae1a999e65cb827261f2c6301901af1  PROVENANCE.json
+5ddf32cbdbd75da1d79b221673cfd9aaaac02b3b9b643d49bf85504e46cce127  PROVENANCE.json
 27ca0f3c9ee3a1b6374a9c8dd98008decdd0c7659c7a569c70ad7b9734c74655  R34-BASELINE.json
 0b7ec5ee347ddfa6cca59740fc7a8fe3fc5d51406265bb12189e82fa106319d2  R41-PARENT.json
 bd2a789b0aab5663f0d208af2ca8e4ec98179bc8c7b57e70a962d4e06a3dcfc4  R42-PARENT.json
@@ -1409,9 +1411,10 @@ bd2a789b0aab5663f0d208af2ca8e4ec98179bc8c7b57e70a962d4e06a3dcfc4  R42-PARENT.jso
 f932ef78b7a72b1bb0d7aedb5fe42fbb9951c2492eb528b72442f46ddff81a6c  R44-DONORS.json
 731b4c559fc0d25dea701e4474f02400b27e8e3f4cac9f230d5214497d4490a9  R44-PARENT.json
 d33ec5d167dd44800ba4e68372b08db43deb8d01df2ef71dd435ff004ac66c8b  R45-PARENT.json
-e236c6159a69ea654897e23987434f9c15c2a3b062f50632f177f22bf775b9cc  README.txt
-22941f9c86ae48570209218de5d34f6e95fa8b6e3d6bd9f1a87337d3b8ee6674  RELEASE.json
-d3f8aee77f036e59951d56ab95fda98a050017fba7be8cf178761eb3236383a4  SBOM.cdx.json
+3dc607603fea511e2f428e9546a875ab7e38b6a0bbd5e803e4510de082f30804  R49-PARENT.json
+69e9cccfdc0b5c24bca6a1390bc09abf663868772d954330591b73f37e53e143  README.txt
+a2663c5c15243f5b95daa78e9bbfca47b2d2650b8e57e53ca3e46372a2060cad  RELEASE.json
+80fc11669ca4aa10d51f9cf1afacf03aa558cd30fab4275d77d8a3285d7dfce5  SBOM.cdx.json
 7c86062c4f69db3179a129d65945ccfab1b1c1c5bcc29b91383eac097d50f2aa  scripts/activate-skill-creator-1.1.1.mjs
 bd138fe5a64088e8e1a7a5bf6104c5b17317bdc8cf3ad8191ea00ed82ace7d9b  scripts/agent-eval-r42.mjs
 8d90256a6863f3bbbff02e95cb12389fc6f9e8dbcb77bf1c20c902de371425e8  scripts/archive-source-zips.mjs
@@ -1444,7 +1447,7 @@ edb22517bcad07694f661a7ff237f519a01588eac18555e8c3126ee9923b13d7  scripts/deferr
 9d1cfb8c962248cbab64e5a96b437c1cf68f0e071e898d5b2cc84a87f305bd33  scripts/deferred-slot-operation-r43.mjs
 a64b6779eff80d68d90d238dee7f2feda5ada3c5c59bcaeae2ab7812bd28404e  scripts/deferred-slot-operation-r44.mjs
 751632aeb2e56b093f9589897bbe7e874db61e9238a13bd1506bde2df0b706e9  scripts/deferred-slot-operation-r45.mjs
-d4710039ceff7380f3b6a0040ad118a81eabdda2706c459f9b81f8e08978fba4  scripts/deferred-slot-operation-r46.mjs
+5af5953d67a5c494980feeb36bfc6df7d1cc8a6246f259c31cd3c64885d7e60a  scripts/deferred-slot-operation-r46.mjs
 34116370895aeff9a424475558f4aca3b05460146455d9bb0bafcacd1a270910  scripts/deferred-slot-operation.mjs
 1cee04ab67a1e9a06f42cb5fde7073298ca501a059c961d11659a578aaef5e90  scripts/deploy-r47.mjs
 1cee04ab67a1e9a06f42cb5fde7073298ca501a059c961d11659a578aaef5e90  scripts/deploy-r48.mjs
@@ -1502,6 +1505,7 @@ a0ad824eed1d8be051d5f731579f9bf4115b311f202b75ea0d03aa257b13a671  scripts/gate-w
 500b330c6d14afb1162d28efb9b99e75cec9f702a67b6b936449943c908177a9  scripts/gate-windows-r45.ps1
 00a3fc5aa75763c40ff0e09173091168903eb7fcae0ce164e51876569a4e2ff1  scripts/gate-windows-r46.ps1
 e2d555bfcdc1464834cd6541753a7edc9845fc4a72761c2ec9f2d75991616b2d  scripts/gate-windows-r48.ps1
+a76505b4a2e7702e7d61a3ae799e5fa297ced7006dc1a1df8b65d5ed1cd7604b  scripts/gate-windows-r49.ps1
 9a085b34b9e54023eb0efadcea1e74a1bef44b984105d064768d66910999173e  scripts/gate-windows.ps1
 9e625bdc701298c05eb2a63c208d023a487a1baf306c05940eb29c19fb1d6544  scripts/init-desktop-policy-r40.ps1
 01451045bff624a157e7eea79afd7edfa8cb8212ea0256c8ec744fe1e1b269ff  scripts/init-host-policy.ps1
@@ -1588,6 +1592,7 @@ d05fd67d62005aebf3cd2daf1e67f0550d124a2068baf9aa0550afb7de26f440  scripts/window
 65a259259bb33755ee4873c57ae1588665e5af3a40dd4cc83b5bccdfed228ea1  scripts/windows-gate-evidence-r45.mjs
 536f36b6d4cd86b9f874f6b8c0599d752d9efa69a2691f8971ee4b0d317c9739  scripts/windows-gate-evidence-r46.mjs
 f344639080f68b7da5cda765b518e0fb91bc8818229b6f460e82b173018ad30c  scripts/windows-gate-evidence-r48.mjs
+6fc6c98fe0ccb06891227703196743cd22135934603e600f9c6a0cb86400934b  scripts/windows-gate-evidence-r49.mjs
 2255b8eb78ca61267df54448560a671357f04893b6bb1df27b8b9fc8a944d255  scripts/windows-gate-evidence.mjs
 105a5c6dcd54e4fabb416df9eaac093654f3ea39c4233a56e0bc6d53371b2128  scripts/workload-contract-regression-r47.mjs
 c32cb9054a1b9641ae071c00622c0054272bdb0b519ea22c4ff926a1600a2b46  scripts/workload-stream-regression.mjs
@@ -1611,18 +1616,18 @@ ab0158c3f6e270ee367ae96455dd2b75a902c808b2a10ac2c5b75fdda00be6c3  src/autonomous
 7251eb0a4b9b9ccd9956dcd2bedee81af53f7a7db67131cf4d4fa1dcb7b47b44  src/autonomous-mcp-tools.mjs
 ff05f616bdcd6552affca58bf26459b899a467782f012c07f6a54da6df4e496f  src/autonomous-output-contracts.mjs
 6e73f3f438c6293917ca56b6be3c60bc3d9406e04a61f0da5ba8d754b3a10b7d  src/autonomous-plan.mjs
-2be6c1feac8954da09a247423b899909eed94f5d930455d43a0b3370435ea99d  src/autonomous-planner-contracts.mjs
-1228a83490a35a656bea9a3e2f814a13d9f568d86b0738279ca9d1a3602bce92  src/autonomous-planner.mjs
+a13c1d11927606166f2807324513573ac1c37c72c257356cebd20e3aa02df53e  src/autonomous-planner-contracts.mjs
+7f6797f8e93024bf1e3ce0060ad385e6d4714730cc1ead6c25cf9c72f0f4c77a  src/autonomous-planner.mjs
 5a85c30f9b4e30a9a366a738298928fe074e0cc6c82dc328ab85745c145f7bf4  src/autonomous-policy.mjs
 f9bf3b46e4b32ab7dd7864c646809e13fea64f72accf114929588dac7dc82014  src/autonomous-progress.mjs
-ffde3dbd761d7e642a03f0cab506a38e38fc60dcb505557c5c01279629696d57  src/autonomous-runtime.mjs
+4095a81e7b9154c8eb988ebc8aa1bf367cf6260e9eca4834a7ded2dc3cad24a1  src/autonomous-runtime.mjs
 5c2fc073cc989121f775735600e96809ec2a51bf4167c877a263f54f2aa9a680  src/autonomous-supervisor-host.mjs
 b3fbc640f5edca562ffc1f5b1d455762525baa644996ff34e92e825f98bfc82a  src/autonomous-supervisor.mjs
 61de686111e5b5d24ceb1e2adc8da175d69a4f22af08691c4edaea1c763cf859  src/autonomous-timeout-recovery.mjs
 e5f944a310ed957e3b8f7b1cab54c082acf1b35f8fdd7d9b672ebe1a80dc37ac  src/canonical-json.mjs
 da5181cec30034ddf089baa5358becb5651da238a2e7cf0888007a4c60b4ea6b  src/capability-benchmark-runner.mjs
 2b62295591f142ca4b3bc5b03e6434f7fc3c51d9502f9a40ef8a03d1f72a8899  src/capability-benchmark.mjs
-781bc425c0f3b24bb8a576b39ff7da7ee16c40ff3f394a3b5b795b123b39a5c9  src/capability-ledger.mjs
+1ef64fe14d44f26dabb3a9acb0f012dd228cc89dc3c54142b2033b6e0f1a0bab  src/capability-ledger.mjs
 6f326bec69278752f6aa280004074b59883bc05e4ad4ca6b64b041cf5f571385  src/capability-resolver.mjs
 94e5aeff2453cdc0239aee4d547dbbefee183c71933cb84e5e8a418fa99bc1e8  src/codex-app-server-r44.mjs
 c4e07aa6818cd989c43ce8d027dc7d467e05c8e2fe96b5548eea291285d3bbb1  src/coding-mcp-tools.mjs
@@ -1660,11 +1665,11 @@ e5a951612b9514baf8bea4b6500e1f1d6c7c072352a1b46a34209a6729222647  src/deadbyte-c
 9e9766d64dcc9e2c8d23c2c0a5e9dcb87b7213e8de668f79f593ad48daf15acd  src/deadline-cancellation.mjs
 fe7a8f8611c33552b3da466a9b866ce79a737bfd5b9a78a953269b30cce16274  src/desktop-contract.mjs
 f97352e510c659910c2d4a874d15be028e1291d685c6c1a7be53bdf1a335c2d8  src/desktop-input-r40.mjs
-56f242dd35c482a2a0599785f8082555ff31c81ab296f287a363ec77a7adfcf0  src/desktop-mcp-tools-r40.mjs
+1896ec0f80e3217af581d65ac2a242423059e80db828b8fbe1468493b47f74b4  src/desktop-mcp-tools-r40.mjs
 38ac215de89e9640e6f340002baac70094221b3af0829eb401b202ac574f8a9d  src/desktop-memory-r40.mjs
 c5bf28e2fe16168464294aa0d6f17b10c73d10f81a2361f6b9783cba90de0979  src/desktop-observer-r40.mjs
 535e9b9b5dbd5b77689cf52d7ad59dc86ad9d262a7233c6c5bc209e24db251b2  src/desktop-policy-r40.mjs
-2df103ab7e5437b1e5b3a8116ad20b98d73dcbd98ae7c632a813de95328077f0  src/desktop-runtime-r40.mjs
+8cbe8f4bc33dca5edfb912e76ed834dd5be4ebc7025e4a095c60f62926c1f85f  src/desktop-runtime-r40.mjs
 ec660879c7fa20bdee8fbb0f8dab373625691cb18c4f5362d022476e506d22c2  src/desktop-uia-r40.mjs
 ee488cf575e9ace5bb30d20f74d7aebaaa960608d6cd6e2818592d7a66e86ea5  src/doctor-r45.mjs
 f57fe200ad916a03480c804ca57ab12b603822cbfb8d45ba7bce4376ec3d712a  src/document-adapter.mjs
@@ -1744,12 +1749,12 @@ b5399d8075710a679687ff36073eb1cdac8fda6379a60bedfa1d58518175fe55  src/remote-mcp
 281d337978c5a7518050538a6ce1fefef5b5a41dceadfa7435e8491e6837909d  src/remote-mcp-r40-parity-client.mjs
 3ad16a063a79677c1d1047ac6c0d89cadeecd1c93dc82f2117ed03476185c447  src/remote-mcp-r44-parity-client.mjs
 077effbc76ac482965cca813494f43a8cf9fb5be28cdbf8a7f46dce165b0de6c  src/remote-mcp-r45-parity-client.mjs
-da7a51640bee04dff80e24c2ad6241ef87d160866df1fd9b8ef02c8beda6cee5  src/remote-mcp-smoke-client.mjs
+5a0f2ab379614fb9079f64f3b0d2b871039829feeac1a97fa6be8f23936be25b  src/remote-mcp-smoke-client.mjs
 450f3cfb040ccb7fafbea43fc1588c0a63938707e46f0a63279db474f4c1ca15  src/remote-result-journal.mjs
 c8fd6fd3e49e866f2c3be326ab07222b36a44528ee0fc3f7b371c34a60e3c45b  src/remote-session-guardian.mjs
 827b156eac01cc9ec6f5ca9a49219612f0da511fde770a9eb1235aa913b5e514  src/request-identity.mjs
 39251ab165bb0a0b8ea9b4c533aa0cd674934c0fa2c7f63145eac680d1d67be9  src/resource-identity.mjs
-320b162944953b3aca58d4a48e6c9507f37a84ad1a9aaebe0aeb02a497cf80cb  src/runtime-catalog-expectation.mjs
+45fcd7e9447545785e851fbeec439551c10a85c93f60a19437729870222c697c  src/runtime-catalog-expectation.mjs
 ce2223bf6075e96cc02505c1439acce18bb1f204c5e86cf9152bb7194daf3cd2  src/runtime-identity.mjs
 f2f09e79fd56c7f9005af526b12afbb5b7a64367d0556ad38ba5e6a22bca9524  src/runtime-update.mjs
 c61335adb38bfc415fe1cdabfe2c0a87e61579dfd1e52cce91c44d6993479457  src/search-cursor.mjs
@@ -1770,11 +1775,11 @@ bac271c6f5218752ac5ff4decf5249e3893ddb35c63c092ce17238c27fc4d35b  src/trust-init
 aa765e9a28c69ff58a5b5a0d29b49ea181af4db9076633b102dbca25861e708e  src/tunnel-stdio-compat.mjs
 642cb67d1854850e336ee73fbd71b329056bdcbdab35cea19c1a995a155ff5d9  src/verifier-cli.mjs
 8f818a4852ce3be3a380cd4736c3073a7a3e0e45cd7c7ca90588a6b843d3d022  src/verifier.mjs
-6934452f55187f49f689151e1d6d3a76533ee6c6650aee63d0261069a502e917  src/version.mjs
+f2c7fed24616ee3986a400a9d6695eca62c5fad409cb263293c0c7ebc9cdd9dd  src/version.mjs
 7e09c57a97289360aabfaf3d531208e54872efbfb3182f3c18203d2cb88c46b5  src/worker-registry.mjs
 76361d5ae9a710273cf64a7525082197b692236bf23689875e5fd1ef4aa96d2b  src/worker-scheduler.mjs
 4da1b32f5198bb089bc68b7eb6de21ea296678b5020018a73742bf0df57d62fa  src/workload-substrate.mjs
-bef1c8833390e77cff9be1b8ee363ed4a74bc5c677545f85806543134bd5d7f4  TEST-MATRIX.json
+3562b159a7bad028d69252a72ee1e8ba33c8158b38e4330821486ae65367e88e  TEST-MATRIX.json
 e4f1fb97545f23772ddff28ad3f9954a4714f9854062fca62e0e12c1cb2ec4ae  test/agent-backend-r44.test.mjs
 2a78c818058b25efdc143a3a97c832da231ccd6ff9d90c7796d681a0251b85c4  test/agent-crash-child.mjs
 d9461ab7c118ee75d37a2d6f5e637d7e43505af6a9ad8c7ddafffc8ace185a5b  test/agent-crash-worker.mjs
@@ -1793,7 +1798,7 @@ fc934b06364962ab4e4e168ac34704c98f6891c854c83b990c03e044a27a8b60  test/autonomou
 cc44bad58270f1f9ed889583f2279b617c580b3faebbf2d583ba8d754412ff12  test/autonomous-adversarial.test.mjs
 dc54ba0d411fa80fef6d51e27d131c0ed5bb7413998b8b8f92cfaf31ae3b825e  test/autonomous-capability-r36.test.mjs
 bb760a934f0d4cd99f61b8636491fa2cc81308d0934f932213daef25878036fb  test/autonomous-context-engine.test.mjs
-ffe2189f77f3ed85cb8afb46edb88286c63b9333a3dcd11f4a995886ad590abd  test/autonomous-desktop-r40.test.mjs
+120237a3977ae60c425114817b6e504d9fa70b60ad899e1d65bacae0c07087b5  test/autonomous-desktop-r40.test.mjs
 61dd190bbea1dec4ef2e7a2a8e7afacc208e7a0f29fe55722d287eb3bbecd3f7  test/autonomous-live-fixture.test.mjs
 40300b8f8deb8caa2b1e9a6fc4a234bedfa554e074e18b3c3afde47d7295acd6  test/autonomous-live-state.test.mjs
 41fb64092d17de00c68ae7fb7716263fde4e16aa70db3c5fc93f178dc44e4b66  test/autonomous-local-supervisor.test.mjs
@@ -1870,11 +1875,11 @@ c526724a6d10648fdd5152af917ba2fe51836dc5877daaac554bbd9e52fcd47e  test/deferred-
 1ac558f375ab1c1ecdb3def18a2079d4ad34d4c7fa68bd29f470ae3ab6938d0b  test/desktop-adversarial-r40.test.mjs
 dde37ac8ec349c02ec11ce7df3ddacd7862e742f7e45a783e0997325c704bb9d  test/desktop-contract-r40.test.mjs
 b699d116a4bf3a50c9131fd1ff0541f9ef5c01ebe7b74195d2b18b81dd9e826f  test/desktop-input-r40.test.mjs
-fecf227dd176f7ecc6a01aefd51f3fffab658d049c99a13fd9c7c61f2f07a2a5  test/desktop-mcp-tools-r40.test.mjs
+aa244ea34e4b46371f6bf60f13fcc1908f6cf0096a9da6d8339b3c85a7adef6e  test/desktop-mcp-tools-r40.test.mjs
 26e58c7dcb6ad6dfa1aba9aa9621f9b0a7f90af98d16fe2e00324ff20130aa24  test/desktop-memory-r40.test.mjs
 85beca3c05beec98f1615b2498c88d90d4d251e75240744cd6e53f7d26566291  test/desktop-observer-r40.test.mjs
 1306bb66c77a41a15e7b717bb4ca3e66289771d41f235018bfb1825771f137cb  test/desktop-policy-r40.test.mjs
-89b8c36f171211c8f5a59eaeae8f36e7c265185ca9e27031a5805d8bbec354c1  test/desktop-runtime-r40.test.mjs
+1c2d7132fb59323ac1634ed7a17f5bc2eaa92c06ffc5f78e50e80e836c90bc49  test/desktop-runtime-r40.test.mjs
 331d19fe6a85a89cc141e2fb01f13a5620f81fc5666b40ffa37a08922c8c6a91  test/desktop-uia-r40.test.mjs
 185c9bce5d1f5843577158f89ba3d5c2a2353da958d0449cecd6873d6b5464b8  test/document-adapter.test.mjs
 e5bcac7819c12b9bcc2e98b362d82cdea30e7ff47c291bd225f5da19a2c020af  test/durable-job-r44.test.mjs
@@ -1946,7 +1951,7 @@ f95c920ee2b24d5ec940a9bae277771562ce275556bd89f0071f183b13c154b8  test/fixtures/
 161cbd9839cad5623348c989bb2b8564df233e01c903de246112d8e6dc0ae9f4  test/full-max-catalog-r45.test.mjs
 2d4224bce83aad63d70f87d55cf13e06074b2867d627cdeb48c0a73ec53d3489  test/full-max-catalog-r46.test.mjs
 1a5941d5105e970174dc5400fb6341c18211ffad01352e6c7994eb1dd905432d  test/full-max-catalog-r47.test.mjs
-97e86d898361c7b11a7c11a92549617e28e51a2bd6ce115dbbe59d096ab0e8bf  test/full-max-catalog-r48.test.mjs
+b1feb6eda347bfe2041c9b239cea544cddd52fe95ec0f7e9e4840adec81e2468  test/full-max-catalog-r48.test.mjs
 3cecf2bb61027d210f6bdf65a140ce1d5bedf2d4135e02f94edfeb2ef89ae6ae  test/fuzzy-search-r46.test.mjs
 506e5437ed41da3955d006294d81230c25825ff898b266fa2758ffd885ee3d07  test/hardware-observation-r45.test.mjs
 2efdac248a608fe84588de8e9223f39ee32d4a483f71594ab05f20f1110be0c9  test/helpers/autonomous-r34-fixture.mjs
@@ -2016,7 +2021,9 @@ d8f544bbcdfff61f7abb7705ad7e5e1f17998f5fde3c114fb33915fc66d1408f  test/r41-final
 2c5f2093b945c267c8d09cd2da0875c7f45911a7c01aa02a50cd64c2c1a7ccdc  test/r45-autonomous-quick-test.test.mjs
 532075c86893caf68a2d0ea09171bee4c7d60892c1892011285376a2c186ed92  test/r45-finalization.test.mjs
 25a21ccffcf566b020b8f3c6c0a5a3b7ff06b243fff84e405207e458640ba487  test/r47-release-contract.test.mjs
-48b0be4d9c422e5368718e12541be73e9879326d43218fd16ded703b76228269  test/r48-release-contract.test.mjs
+85e15fdc44b80149fe1947b66f4475150b24f1c5bfdb805e1f6341529197b831  test/r48-release-contract.test.mjs
+ec6fc253774c318b048dc943c83b496f942d8dd034f6db9439a99a46ae3a6158  test/r49-remote-control-donors.test.mjs
+2a91b31ca8dae3041b112fb260924d528193914b457de186c3803df219d5b8ec  test/r49-windows-gate.test.mjs
 e45a6cd299d8d65bdeb9bc0117ce1eb2b47fdebad89a02413ee979c9d0ae3a5c  test/release-activation-gate.test.mjs
 85f6dc2059fd19d03452309ffe67bed5b87da8e6f0ce3a85cab58cba8b197ceb  test/release-generation.test.mjs
 bb58887a2c393cd5aac3fa3bb3a04de2704bd2a30dd2083ea638543485fa7e60  test/release-manifest-windows.test.mjs
@@ -2028,7 +2035,7 @@ ba122b4a7a6953b9fc8187a531a3e8b0f5f8519da602c551b32df8c88c85e879  test/remote-de
 3d26a0550a22c69990567d998c28e4ba0978c71429741c10c7c47f261653fbe2  test/remote-live-log-r36.test.mjs
 daf7d33e31d9fbd78e8b6c5165c7f0b7df0cb0fcf6b8c02677c53395b39f2c71  test/remote-live-log-r37.test.mjs
 02ad827dc46e3dacf1ef2cfd861f583a44c471b1411cc674f4d61cd421418ad3  test/remote-live-log-recovery-r36.test.mjs
-e7417da0df95b624d7a65fc21d6cde943cbe657644e1b9da8b32136c55a5228f  test/remote-r24-catalog.test.mjs
+7335c4ab91a83a4a4b5e0886804d798494c444728ce5b1632991c287c4dfd00b  test/remote-r24-catalog.test.mjs
 08e0a98e665783a1a4489534e3021d398d81df00c6974e6b957723445e92bad4  test/remote-result-journal.test.mjs
 23963b84df0644c04c0a6a07b1c357465adfe9dbc7d3a7918215a3d8ca96e4e4  test/remote-session-cli.test.mjs
 ef8aa55479acc923d3fee89a463096d003826cfffc356fffa4ab0ef371345070  test/runtime-host-bootstrap-r45.test.mjs

package/PROVENANCE.json

@@ -1,18 +1,18 @@
 {
   "schema": "deadbyte.provenance.v1",
-  "version": "0.15.25",
-  "builder": "deadbyte-r48-commander-differential-protocol-hardening",
-  "source_model": "development-root -> pinned Commander 0.2.51 differential oracle -> incremental PDF revision fix + explicit unknown-effect mutation semantics + directory/binary compatibility + DOCX drawing/header/footer search + raw MCP adversarial protocol proof -> bounded R48 regression -> MANIFEST.SHA256 -> immutable release slot -> generation bundle -> signed machine truth",
+  "version": "0.15.26",
+  "builder": "deadbyte-r49-bounded-semantic-desktop-wait",
+  "source_model": "immutable published 0.15.25 parent -> six byte-pinned remote-control donor audits -> native bounded semantic Desktop wait -> RED/GREEN focused proof -> full R49 regression -> MANIFEST.SHA256 -> immutable release slot -> generation bundle -> signed machine truth",
   "signing": "ed25519",
-  "parent_release_id": "v0.15.24-c33fcbc449562285",
-  "parent_manifest_sha256": "c33fcbc449562285b4a03e95a6d282d359859f266773043b34db35723dfad54e",
-  "parent_generation_manifest_sha256": "6b81c4a5b940a6ef525b7d0ce8e7ff5e6b9fc9b8048d9522ea8852fa29b85395",
-  "source_predecessor_version": "0.15.24",
-  "source_predecessor_tarball_sha256": "23ea53fb4f331873c742c810f815d5ad18291f74c1bda1fd1d8c08475dbbd4ad",
-  "source_predecessor_manifest_file_sha256": "c33fcbc449562285b4a03e95a6d282d359859f266773043b34db35723dfad54e",
+  "parent_release_id": "v0.15.25-7ed657b1aa038ee6",
+  "parent_manifest_sha256": "7ed657b1aa038ee679ff081f1a83c421a5eeb5fc7ea6b746e0f661079b69b319",
+  "parent_generation_manifest_sha256": "c9763738e27ec39b1180473995f2af088d85293a94f5693abd6a843e09cecec9",
+  "source_predecessor_version": "0.15.25",
+  "source_predecessor_tarball_sha256": "0410b41b3c891210262a4db793ee3b339862472ef069f881c9e092c1083ba6d2",
+  "source_predecessor_manifest_file_sha256": "7ed657b1aa038ee679ff081f1a83c421a5eeb5fc7ea6b746e0f661079b69b319",
   "commander_reference_version": "0.2.51",
   "commander_reference_server_sha256": "dfc303bb7dd2e8d01debac50fc43bb8644d00089bffdf2887e149497cff8b305",
   "commander_reference_schemas_sha256": "f342345e34e48769dabaefe1b932f09d41e2e207b422f7794a15ee50ffa8f140",
-  "full_regression_task_receipt_sha256": "7711039e4807f6c2af02bbda897d0032b067e0a6631f789fd3bf801258160d3f",
-  "reproducibility": "manifest-bound package bytes; exact immutable 0.15.24 registry and active runtime predecessor; reference server/schema byte pins; signed full-regression task receipt; raw MCP protocol adversarial proof; npm production audit zero vulnerabilities; signed machine truth required after activation"
+  "predecessor_r48_full_regression_task_receipt_sha256": "7711039e4807f6c2af02bbda897d0032b067e0a6631f789fd3bf801258160d3f",
+  "reproducibility": "candidate source bound to exact immutable published 0.15.25 predecessor and six donor commits; fresh R49 full-regression, manifest, package, activation, rollback and restore proof remain mandatory before release"
 }

package/R49-PARENT.json

@@ -0,0 +1,11 @@
+{
+  "schema": "deadbyte.r49-parent.v1",
+  "version": "0.15.25",
+  "release_id": "v0.15.25-7ed657b1aa038ee6",
+  "manifest_sha256": "7ed657b1aa038ee679ff081f1a83c421a5eeb5fc7ea6b746e0f661079b69b319",
+  "generation_manifest_sha256": "c9763738e27ec39b1180473995f2af088d85293a94f5693abd6a843e09cecec9",
+  "npm_shasum_sha1": "2dd232dc0ab6a5cf3327dd447f3c8e61c20712b1",
+  "npm_integrity": "sha512-NtsmaxcVkXx4nVvjLlU/173tXWFjbsJP408LKm1diqrOUgE+NKDuZV9OgQV0hLkGO4wobb0sMOMCziaU3nkZkA==",
+  "registry_tarball_sha256": "0410b41b3c891210262a4db793ee3b339862472ef069f881c9e092c1083ba6d2",
+  "immutable": true
+}

package/README.txt

@@ -1,4 +1,4 @@
-DEADBYTE MCP V0.15.25 / R48 COMMANDER DIFFERENTIAL + PROTOCOL HARDENING BASELINE
+DEADBYTE MCP V0.15.26 / R49 BOUNDED SEMANTIC DESKTOP WAIT CANDIDATE
 =========================
 
 AUTHENTICATED MACHINE TRUTH + DURABLE AGENT + CODING + AUTONOMOUS PRODUCTION ENGINE
@@ -7,12 +7,12 @@ NPX PRIMARY OPERATOR UX
 ------------------------
 Use the npm CLI entry point instead of the legacy CMD convenience wrapper:
 
-  npx -y deadbyte-mcp@0.15.25 mcp
-  npx -y deadbyte-mcp@0.15.25 remote
-  npx -y deadbyte-mcp@0.15.25 remote status
-  npx -y deadbyte-mcp@0.15.25 remote restart
-  npx -y deadbyte-mcp@0.15.25 audit status
-  npx -y deadbyte-mcp@0.15.25 audit verify
+  npx -y deadbyte-mcp@0.15.26 mcp
+  npx -y deadbyte-mcp@0.15.26 remote
+  npx -y deadbyte-mcp@0.15.26 remote status
+  npx -y deadbyte-mcp@0.15.26 remote restart
+  npx -y deadbyte-mcp@0.15.26 audit status
+  npx -y deadbyte-mcp@0.15.26 audit verify
 
 The `mcp` command is the quiet stdio server entry for local MCP clients; stdout is reserved for MCP.
 The remote CLI invokes the stable active-release PowerShell launcher directly with shell=false.
@@ -29,6 +29,15 @@ and a random 256-bit session nonce, prevents concurrent foreground sessions, and
 recover only a dead, unguarded stale owner. Explicit subcommands such as `remote status` remain
 one-shot controller operations.
 
+R49 BOUNDED SEMANTIC DESKTOP WAIT
+----------------------------------
+`desktop_wait` replaces blind fixed sleeps with a bounded, read-only observation loop. It can wait for
+frame, topology, foreground-window, or local UIA presence/absence conditions; every poll performs a fresh
+capture, and the final observation is recorded in a signed receipt. The baseline frame is goal-owned when
+used by the autonomous runtime. Waiting never dispatches input, retries an action, grants Desktop authority,
+or treats an execution receipt as proof of the requested outcome. The compact surface exposes the same
+contract as `desktop_control` operation `wait` without adding a new compact public tool.
+
 R48 HUMAN LIVELOG TRACE + VISUAL OPCODES
 ----------------------------------------
 The foreground remote console treats emoji as visual opcodes rather than decoration. File reads, writes,

package/RELEASE.json

@@ -1,19 +1,19 @@
 {
   "schema": "deadbyte.release.v1",
   "name": "deadbyte-mcp",
-  "version": "0.15.25",
-  "train": "R48",
-  "label": "COMMANDER DIFFERENTIAL + PROTOCOL HARDENING BASELINE",
+  "version": "0.15.26",
+  "train": "R49",
+  "label": "BOUNDED SEMANTIC DESKTOP WAIT + REMOTE CONTROL HARDENING",
   "protocol_revision": "2026-07-28",
   "parent": {
-    "release_id": "v0.15.24-c33fcbc449562285",
-    "manifest_sha256": "c33fcbc449562285b4a03e95a6d282d359859f266773043b34db35723dfad54e",
-    "generation_manifest_sha256": "6b81c4a5b940a6ef525b7d0ce8e7ff5e6b9fc9b8048d9522ea8852fa29b85395"
+    "release_id": "v0.15.25-7ed657b1aa038ee6",
+    "manifest_sha256": "7ed657b1aa038ee679ff081f1a83c421a5eeb5fc7ea6b746e0f661079b69b319",
+    "generation_manifest_sha256": "c9763738e27ec39b1180473995f2af088d85293a94f5693abd6a843e09cecec9"
   },
   "source_predecessor": {
-    "version": "0.15.24",
-    "tarball_sha256": "23ea53fb4f331873c742c810f815d5ad18291f74c1bda1fd1d8c08475dbbd4ad",
-    "manifest_file_sha256": "c33fcbc449562285b4a03e95a6d282d359859f266773043b34db35723dfad54e",
+    "version": "0.15.25",
+    "tarball_sha256": "0410b41b3c891210262a4db793ee3b339862472ef069f881c9e092c1083ba6d2",
+    "manifest_file_sha256": "7ed657b1aa038ee679ff081f1a83c421a5eeb5fc7ea6b746e0f661079b69b319",
     "reference_package": "@wonderwhy-er/desktop-commander@0.2.51",
     "reference_server_sha256": "dfc303bb7dd2e8d01debac50fc43bb8644d00089bffdf2887e149497cff8b305",
     "reference_schemas_sha256": "f342345e34e48769dabaefe1b932f09d41e2e207b422f7794a15ee50ffa8f140"
@@ -26,10 +26,10 @@
     "host_execution_modes": ["script", "inline", "native"],
     "hardware_queries": ["cpu", "gpu", "memory", "storage", "network", "pci"],
     "compact_tool_count": 43,
-    "full_tool_count": 116,
+    "full_tool_count": 117,
     "full_tool_catalog": {
-      "path": "docs/R48-FULL-TOOL-CATALOG.json",
-      "sha256": "259fdc97a24575aff3f094911b5e86e4f512b07be7c2cc1286b0fd200d03a8c9"
+      "path": "docs/R49-FULL-TOOL-CATALOG.json",
+      "base_sha256": "259fdc97a24575aff3f094911b5e86e4f512b07be7c2cc1286b0fd200d03a8c9"
     },
     "historical_r46_full_tool_count": 84,
     "commander_reference_public_tool_count": 26,
@@ -68,6 +68,9 @@
     "windows_queries": ["registry", "services", "drivers", "sockets", "volumes", "usb", "wsl"],
     "machine_fs_list_entry_fault_isolation": true,
     "native_windows_observation": true,
+    "desktop_bounded_semantic_wait": true,
+    "desktop_wait_signed_final_observation": true,
+    "desktop_wait_autonomous_goal_binding": true,
     "native_windows_observer_sha256": "c9b46fc497b55b8f0ad1564c8e15f9c1cdf2a07f206b3c8fa7966c892058e920",
     "human_livelog_visual_opcode": true,
     "human_livelog_absolute_root_paths": true,

package/SBOM.cdx.json

@@ -1,13 +1,13 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:cdx:deadbyte-mcp:r48:0.15.23",
+  "serialNumber": "urn:cdx:deadbyte-mcp:r49:0.15.26",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
       "name": "deadbyte-mcp",
-      "version": "0.15.23"
+      "version": "0.15.26"
     }
   },
   "components": [
@@ -34,7 +34,7 @@
     {
       "type": "file",
       "name": "deadbyte-hardware-observer-r45.exe",
-      "version": "0.15.23",
+      "version": "0.15.26",
       "hashes": [
         {
           "alg": "SHA-256",

package/TEST-MATRIX.json

@@ -1,7 +1,7 @@
 {
   "schema": "deadbyte.test-matrix.v1",
-  "version": "0.15.25",
-  "train": "R48",
+  "version": "0.15.26",
+  "train": "R49",
   "primary_platform": "win32-x64",
   "reference": {
     "package": "@wonderwhy-er/desktop-commander",
@@ -13,7 +13,9 @@
     {"id":"capability-authority-truth","command":"node --test test/capability-resolver.test.mjs","expected":"PASS authority-state manifest truth"},
     {"id":"compact-authority-truth","command":"node --test test/compact-max-catalog-r45.test.mjs","expected":"PASS real compact stdio authority-state manifest truth"},
     {"id":"native-windows-observation","command":"powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-hardware-r45.ps1","expected":"PASS native Windows observation build/query gate"},
-    {"id":"r48-catalog","command":"npm run r48:catalog:test","expected":"PASS 116-tool full catalog; compact remains 43"},
+    {"id":"r49-donor-proof","command":"node --test test/r49-remote-control-donors.test.mjs","expected":"PASS six pinned donor decisions"},
+    {"id":"r49-desktop-wait","command":"node --test test/desktop-runtime-r40.test.mjs test/desktop-mcp-tools-r40.test.mjs test/autonomous-desktop-r40.test.mjs","expected":"PASS bounded semantic wait and signed evidence"},
+    {"id":"r49-catalog","command":"npm run r48:catalog:test","expected":"PASS 117-tool full catalog; compact remains 43"},
     {"id":"commander-hardening","command":"npm run r47:hardening:test","expected":"PASS"},
     {"id":"commander-protocol-adversarial","command":"node --test test/commander-protocol-adversarial-r48.test.mjs","expected":"PASS malformed JSON, invalid request, unknown method/tool, duplicate IDs and concurrent correlation"},
     {"id":"r48-release","command":"npm run r48:release:test","expected":"PASS"},
@@ -22,23 +24,24 @@
     {"id":"release-smoke","command":"node --test test/release-smoke-isolation.test.mjs","expected":"PASS"},
     {"id":"runtime-update","command":"node --test test/runtime-self-update.test.mjs","expected":"PASS"},
     {"id":"audit","command":"npm audit --omit=dev","expected":"0 vulnerabilities"},
-    {"id":"activation","command":"npx -y deadbyte-mcp@0.15.25 remote status","expected":"active runtime 0.15.25 with no VERSION SKEW"},
-    {"id":"machine-truth","command":"signed machine_ping","expected":"release_id and manifests bind activated 0.15.25 generation"},
-    {"id":"rollback-restore","command":"immutable slot rollback/restore","expected":"0.15.25 -> exact 0.15.24 -> exact 0.15.25"}
+    {"id":"activation","command":"npx -y deadbyte-mcp@0.15.26 remote status","expected":"active runtime 0.15.26 with no VERSION SKEW"},
+    {"id":"machine-truth","command":"signed machine_ping","expected":"release_id and manifests bind activated 0.15.26 generation"},
+    {"id":"rollback-restore","command":"immutable slot rollback/restore","expected":"0.15.26 -> exact 0.15.25 -> exact 0.15.26"}
   ],
   "focused_proof": {
     "raw_mcp_protocol": {"tests":3,"pass":3,"fail":0},
     "commander_hardening": {"tests":139,"pass":139,"fail":0,"skip":0},
     "npm_audit_production_vulnerabilities": 0
   },
-  "full_regression_partition_proof": {
+  "predecessor_r48_full_regression_partition_proof": {
     "files": 211,
     "batches": 8,
     "fail": 0,
     "elapsed_ms": 196997.218,
     "coding_task_id": "a1a10fff1520b37ac674f1861cd9e53e64e350d5a0766639036aefe5e096e235",
     "task_receipt_sha256": "7711039e4807f6c2af02bbda897d0032b067e0a6631f789fd3bf801258160d3f",
-    "action_receipt_sha256": "095c5eb4d959b9105a769649aa196a1d33f5097b899031dd16997e5ba1b352e6"
+    "action_receipt_sha256": "095c5eb4d959b9105a769649aa196a1d33f5097b899031dd16997e5ba1b352e6",
+    "not_valid_as_r49_proof": true
   },
   "performance": {
     "fresh_cross_reference_status": "PASS_PINNED_REFERENCE_RUNTIME",

package/docs/R49-FULL-TOOL-CATALOG.json

@@ -0,0 +1,13 @@
+{
+  "schema": "deadbyte.r49-full-catalog-overlay.v1",
+  "train": "R49",
+  "source": "runtime.tools/list",
+  "base": {
+    "path": "docs/R48-FULL-TOOL-CATALOG.json",
+    "sha256": "259fdc97a24575aff3f094911b5e86e4f512b07be7c2cc1286b0fd200d03a8c9",
+    "tool_count": 116
+  },
+  "additions": ["desktop_wait"],
+  "removals": [],
+  "tool_count": 117
+}

package/docs/R49-REMOTE-CONTROL-DONORS.json

@@ -0,0 +1,75 @@
+{
+  "schema": "deadbyte.r49-remote-control-donors.v1",
+  "observed_at_utc": "2026-09-30T00:40:00.000Z",
+  "rule": "Reimplement proven primitives natively; never import donor runtime authority or dependencies.",
+  "donors": [
+    {
+      "repository": "https://github.com/shahidx0x/better-remote-commander",
+      "commit": "eba57dd7f77cee98981bc7d95e59b8481ef1e309",
+      "license": "MIT",
+      "useful_primitives": ["heartbeat and stale-socket replacement", "bounded call correlation", "offline-stable tool metadata", "revocable device routing"],
+      "decision": "retain DEADBYTE identity-bound tunnel and authority planes; use the reconnect and stale-generation cases as adversarial test inputs"
+    },
+    {
+      "repository": "https://github.com/Jennifer9911/open-remote-mcp",
+      "commit": "fe9a7339f8fbb0040b9e10fcb0c4d040172d5c2a",
+      "license": "MIT",
+      "useful_primitives": ["cloud policy may narrow but never broaden local authority", "device-code pairing", "realpath root enforcement", "persistent revocation audit"],
+      "decision": "already structurally stronger in DEADBYTE; preserve as release invariants and do not add a second pairing authority"
+    },
+    {
+      "repository": "https://github.com/Razewang/secure-host-mcp",
+      "commit": "200cb9474aa81b48ae79319dac63f689e6b351ee",
+      "license": "MIT",
+      "useful_primitives": ["bounded PTY ring offsets with explicit dropped bytes", "principal-owned jobs", "interrupted-not-survived recovery truth", "transactional structured patch rollback"],
+      "decision": "DEADBYTE already has stronger owned-session journals and unknown-effect semantics; use dropped-output and principal-substitution cases in compatibility gates"
+    },
+    {
+      "repository": "https://github.com/dddabtc/winremote-mcp",
+      "commit": "2185ee68428e76f29176291a2a862b1561468462",
+      "license": "MIT",
+      "useful_primitives": ["task cancellation", "risk-tier catalog selection", "loopback-by-default remote binding", "annotated screenshot fallback ladder"],
+      "decision": "keep independent DEADBYTE authority planes instead of coarse tiers; retain cancellation and bind-target tests"
+    },
+    {
+      "repository": "https://github.com/getremcp/remcp",
+      "commit": "ce32908706686df85df4ca30fd26fc93719a4be4",
+      "license": "MIT",
+      "useful_primitives": ["semantic wait_for_ui instead of fixed sleeps", "runtime crash restart", "catalog-first compact routing", "native UI then browser then OCR then coordinates ladder"],
+      "decision": "adopt bounded semantic Desktop wait natively without unrestricted mode, telemetry, or donor dependencies"
+    },
+    {
+      "repository": "https://github.com/trycua/cua",
+      "commit": "0f29c142d7fe3e05ea0ce276cee11b3a9725ba01",
+      "license": "MIT core with separately licensed optional components",
+      "useful_primitives": ["session-scoped stale references", "one action without blind retry", "typed action effect separate from postcondition", "fresh snapshot after action", "bounded semantic desktop and browser waits"],
+      "decision": "adopt only architecture semantics from MIT core documentation; do not import optional perception, model, AGPL, or CC assets"
+    }
+  ],
+  "adopted_checkpoint": {
+    "capability": "desktop.wait",
+    "full_tool": "desktop_wait",
+    "compact_tool": "desktop_control",
+    "compact_op": "wait",
+    "authority": "none",
+    "properties": [
+      "strict closed input schema",
+      "baseline-frame binding",
+      "bounded timeout and poll interval",
+      "fresh observation on every attempt",
+      "optional local UIA predicate with query hash only",
+      "signed final observation receipt",
+      "no input dispatch and no action retry",
+      "autonomous goal ownership check for baseline frame"
+    ]
+  },
+  "explicit_non_adoptions": [
+    "generic shell or caller-selected executable authority",
+    "unrestricted or god mode",
+    "coarse risk tiers replacing independent authority planes",
+    "telemetry or donor-hosted control plane",
+    "raw coordinates derived from stale observations",
+    "automatic action retry",
+    "optional CUA perception or model artifacts"
+  ]
+}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "deadbyte-mcp",
-    "version": "0.15.25",
+    "version": "0.15.26",
     "private": false,
     "type": "module",
     "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
@@ -42,7 +42,7 @@
         "contained:run": "node src/contained-cli.mjs workspaces/demo input.txt",
         "contained:smoke": "node src/contained-smoke.mjs",
         "mcp:contained:smoke": "node src/mcp-contained-smoke-client.mjs",
-        "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r48.ps1",
+    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r49.ps1",
         "authority:smoke": "node src/authority-smoke.mjs",
         "mcp:remote:smoke": "node src/remote-mcp-smoke-client.mjs",
         "mcp:host:smoke": "node src/mcp-host-smoke-client.mjs",

package/scripts/deferred-slot-operation-r46.mjs

@@ -14,6 +14,10 @@ const packageRoot=path.resolve(here,'..');
 const stateRoot=path.resolve(process.env.DEADBYTE_STATE_ROOT||path.join(os.homedir(),'.deadbyte-mcp'));
 const evidenceRoot=path.join(stateRoot,'evidence','deferred-slot-operations');
 const sha256=bytes=>createHash('sha256').update(bytes).digest('hex');
+const sleep=ms=>new Promise(resolve=>setTimeout(resolve,ms));
+const packageIdentity=JSON.parse(await readFile(path.join(packageRoot,'package.json'),'utf8'));
+if(packageIdentity?.name!=='deadbyte-mcp'||!/^[0-9]+\.[0-9]+\.[0-9]+$/.test(packageIdentity?.version??'')) throw new Error('deferred updater package identity invalid');
+const expectedVersion=packageIdentity.version;
 const atomicJson=async(file,value)=>{
   await mkdir(path.dirname(file),{recursive:true});
   const temp=`${file}.${process.pid}.${randomBytes(4).toString('hex')}.tmp`;
@@ -22,7 +26,7 @@ const atomicJson=async(file,value)=>{
 };
 function activationArgs(manifestSha){
   if(!HEX64.test(manifestSha??'')) throw new Error('activate requires one lowercase manifest SHA-256');
-  return ['--stage',packageRoot,'--development-root',packageRoot,'--expected-version','0.15.5',
+  return ['--stage',packageRoot,'--development-root',packageRoot,'--expected-version',expectedVersion,
     '--expected-manifest',manifestSha,'--process-policy',path.join(packageRoot,'controller','deadbyte-process-policy.json'),
     '--process-policy-sha256',null,'--desktop-policy',path.join(packageRoot,'controller','deadbyte-desktop-policy.json'),
     '--desktop-policy-sha256',null,'--semantic-lsp-config',path.join(packageRoot,'controller','deadbyte-semantic-lsp-config.json'),
@@ -81,6 +85,44 @@ async function normalizedArgs(mode,value,{explicitBridgeRoot=null,explicitBridge
   }
   throw new Error("operation must be exactly 'activate' or 'rollback'");
 }
+async function awaitHandoffCompletion(result,{timeoutMs=900000,pollMs=1000}={}){
+  if(result?.handed_off!==true) return result;
+  if(typeof result.handoff_path!=='string'||!path.isAbsolute(result.handoff_path)) throw new Error('slot activation handoff path invalid');
+  const evidenceDir=path.dirname(result.handoff_path);
+  const receiptPath=path.join(evidenceDir,'receipt.json');
+  const failurePath=path.join(evidenceDir,'failure-receipt.json');
+  const expected=result.pointer;
+  const publicKey=createPublicKey(await readFile(path.join(stateRoot,'trust','ed25519-public.pem')));
+  const deadline=Date.now()+timeoutMs;
+  while(Date.now()<deadline){
+    try{
+      const envelope=JSON.parse(await readFile(receiptPath,'utf8'));
+      if(!verifySlotUpdateEnvelope(envelope,publicKey)) throw new Error('activation receipt signature invalid');
+      const body=envelope.body,active=body?.active_pointer;
+      if(body?.schema!=='deadbyte.r27-slot-update-receipt.v1'||body?.rollback_performed!==false) throw new Error('activation receipt semantics invalid');
+      if(active?.release_id!==expected?.release_id||active?.version!==expected?.version||active?.manifest_sha256!==expected?.manifest_sha256||active?.generation_root!==expected?.generation_root) {
+        throw new Error('activation receipt target mismatch');
+      }
+      parseActivePointer(JSON.stringify(active));
+      const pointer=parseActivePointer(await readFile(path.join(stateRoot,'active-release.json'),'utf8'));
+      if(pointer.release_id!==active.release_id||pointer.generation_root!==active.generation_root||pointer.manifest_sha256!==active.manifest_sha256) {
+        throw new Error('active pointer does not match signed activation receipt');
+      }
+      return {receipt_path:receiptPath,receipt_sha256:envelope.receipt_sha256,pointer};
+    }catch(error){
+      if(error?.code!=='ENOENT') throw error;
+    }
+    try{
+      const failure=JSON.parse(await readFile(failurePath,'utf8'));
+      if(!verifySlotUpdateEnvelope(failure,publicKey)) throw new Error('activation failure receipt signature invalid');
+      throw new Error(`slot activation failed: ${failure.body?.error?.message??'failure receipt emitted'}`);
+    }catch(error){
+      if(error?.code!=='ENOENT') throw error;
+    }
+    await sleep(pollMs);
+  }
+  throw new Error(`slot activation timed out after ${timeoutMs}ms`);
+}
 const rawArgs=process.argv.slice(2);
 const mode=rawArgs[0],value=rawArgs[1];
 if(!value||!['activate','rollback'].includes(mode)) throw new Error('usage: deferred-slot-operation-r46.mjs <activate manifest_sha256|rollback activation_receipt> [--bridge-root ABS --bridge-script-sha256 HEX64]');
@@ -102,7 +144,7 @@ if(workerFlag==='--worker'){
   await atomicJson(statePath,{schema:'deadbyte.deferred-slot-operation.v1',operation_id:operationIdArg,mode,state:'running',started_at_utc:new Date().toISOString(),bridge_root:explicitBridgeRoot,bridge_script_sha256:explicitBridgeSha256});
   try{
     const args=await normalizedArgs(mode,value,{explicitBridgeRoot,explicitBridgeSha256});
-    const result=await runSlotUpdateCli(args,{stateRoot});
+    const result=await awaitHandoffCompletion(await runSlotUpdateCli(args,{stateRoot}));
     await atomicJson(statePath,{schema:'deadbyte.deferred-slot-operation.v1',operation_id:operationIdArg,mode,state:'completed',
       completed_at_utc:new Date().toISOString(),receipt_path:result.receipt_path,receipt_sha256:result.receipt_sha256,
       active_release:result.pointer.release_id,generation_root:result.pointer.generation_root,bridge_root:explicitBridgeRoot,bridge_script_sha256:explicitBridgeSha256});