deadbyte-mcp 0.15.33 → 0.15.35

package/bridge/src/node-http-adapter.mjs

@@ -0,0 +1,56 @@
+import {once} from 'node:events';
+
+function requestHeaders(headers){
+  const out=new Headers();
+  for(const [name,value] of Object.entries(headers??{})){
+    if(value===undefined) continue;
+    if(Array.isArray(value)){for(const item of value) out.append(name,String(item));}
+    else out.append(name,String(value));
+  }
+  return out;
+}
+async function requestBody(req,maxBodyBytes){
+  const method=String(req.method??'GET').toUpperCase();
+  if(method==='GET'||method==='HEAD') return undefined;
+  const chunks=[];let total=0;
+  for await(const chunk of req){
+    const bytes=Buffer.isBuffer(chunk)?chunk:Buffer.from(chunk);
+    total+=bytes.length;
+    if(total>maxBodyBytes) throw new Error(`bridge request body exceeds ${maxBodyBytes} bytes`);
+    chunks.push(bytes);
+  }
+  return Buffer.concat(chunks,total);
+}
+async function writeResponse(res,response){
+  const headers={};
+  for(const [name,value] of response.headers.entries()) headers[name]=value;
+  res.writeHead(response.status,headers);
+  if(!response.body){res.end();return;}
+  const reader=response.body.getReader();
+  try{
+    while(true){
+      const {done,value}=await reader.read();
+      if(done) break;
+      if(res.destroyed){await reader.cancel().catch(()=>{});return;}
+      if(!res.write(value)) await once(res,'drain');
+    }
+  }finally{reader.releaseLock();}
+  if(!res.destroyed) res.end();
+}
+
+export function createDeadbyteNodeHandler(handler,{maxBodyBytes=1024*1024}={}){
+  if(!handler||typeof handler.fetch!=='function') throw new Error('bridge node adapter requires fetch-shaped MCP handler');
+  if(!Number.isInteger(maxBodyBytes)||maxBodyBytes<1024||maxBodyBytes>4*1024*1024) throw new Error('bridge node adapter maxBodyBytes invalid');
+  return async function nodeHandler(req,res){
+    const method=String(req.method??'GET').toUpperCase();
+    const url=new URL(String(req.url??'/'),'http://127.0.0.1');
+    const body=await requestBody(req,maxBodyBytes);
+    const init={method,headers:requestHeaders(req.headers)};
+    if(body!==undefined) init.body=body;
+    const request=new Request(url,init);
+    const options=req.auth?{authInfo:req.auth}:undefined;
+    const response=await handler.fetch(request,options);
+    if(!(response instanceof Response)) throw new Error('bridge MCP handler returned non-Response');
+    await writeResponse(res,response);
+  };
+}

package/bridge/src/public-tool-definitions.mjs

@@ -0,0 +1,14 @@
+import {fromJsonSchema} from '@modelcontextprotocol/server';
+
+// Catalog is fixed by the existing downstream startup attestation. Only schema
+// definitions/validators are shared; servers, callbacks and requestState aren't.
+export function preparePublicToolDefinitions(tools){
+ return Object.freeze(tools.map(tool=>{
+  const input=structuredClone(tool.inputSchema??{type:'object',properties:{},additionalProperties:false});
+  if(tool.name==='autonomous_goal_run'){
+   if(input.properties&&typeof input.properties==='object')delete input.properties.planner_response;
+   if(Array.isArray(input.required))input.required=input.required.filter(name=>name!=='planner_response');
+  }
+  return Object.freeze({...tool,inputSchema:fromJsonSchema(input),outputSchema:tool.outputSchema?fromJsonSchema(tool.outputSchema):undefined});
+ }));
+}

package/bridge/src/r40-governor.mjs

@@ -0,0 +1,160 @@
+import { createHash } from 'node:crypto';
+
+const DESKTOP_RAW_KEYS=new Set([
+  'pixels','pixel_bytes','frame_bytes','raw_bgra','raw_rgba','raw_image','screenshot_bytes','bitmap_bytes'
+]);
+const DEFAULT_LIMITS=Object.freeze({
+  normal:Object.freeze({max_active:8,max_queue:32,queue_timeout_ms:30000}),
+  autonomous:Object.freeze({max_active:2,max_queue:8,queue_timeout_ms:60000}),
+  desktop_observe:Object.freeze({max_active:2,max_queue:4,queue_timeout_ms:10000}),
+  desktop_action:Object.freeze({max_active:1,max_queue:2,queue_timeout_ms:5000})
+});
+const DEADLINES=Object.freeze({
+  normal:Object.freeze({timeout:120000,maxTotalTimeout:180000}),
+  autonomous:Object.freeze({timeout:900000,maxTotalTimeout:1200000}),
+  desktop_observe:Object.freeze({timeout:30000,maxTotalTimeout:60000}),
+  desktop_action:Object.freeze({timeout:30000,maxTotalTimeout:45000})
+});
+
+function insist(condition,message){ if(!condition) throw new Error(message); }
+function toolClass(name){
+  const value=String(name??'');
+  if(value==='autonomous_goal_run') return 'autonomous';
+  if(value==='desktop_action') return 'desktop_action';
+  if(value.startsWith('desktop_')) return 'desktop_observe';
+  return 'normal';
+}
+function estimateBase64Bytes(value){
+  if(typeof value!=='string') return 0;
+  const clean=value.replace(/\s/g,'');
+  if(clean.length===0) return 0;
+  const padding=clean.endsWith('==')?2:clean.endsWith('=')?1:0;
+  return Math.floor(clean.length*3/4)-padding;
+}
+function scanDesktopPayload(value,{maxPreviewBytes},path='result',seen=new Set()){
+  if(value===null||value===undefined) return;
+  if(typeof value==='string'||typeof value==='number'||typeof value==='boolean') return;
+  if(typeof value!=='object') return;
+  if(seen.has(value)) throw new Error('bridge desktop result contains cyclic value');
+  seen.add(value);
+  if(Array.isArray(value)){
+    for(let i=0;i<value.length;i++) scanDesktopPayload(value[i],{maxPreviewBytes},`${path}[${i}]`,seen);
+    seen.delete(value); return;
+  }
+  for(const [key,child] of Object.entries(value)){
+    const lower=key.toLowerCase();
+    if(DESKTOP_RAW_KEYS.has(lower)) throw new Error(`bridge desktop result contains forbidden raw frame field '${path}.${key}'`);
+    if((lower==='preview_png_base64'||lower==='preview_jpeg_base64')&&typeof child==='string'){
+      const bytes=estimateBase64Bytes(child);
+      if(bytes>maxPreviewBytes) throw new Error(`bridge desktop preview exceeds ${maxPreviewBytes} byte limit`);
+    }
+    if(lower==='data'&&value.type==='image'&&typeof child==='string'){
+      const bytes=estimateBase64Bytes(child);
+      if(bytes>maxPreviewBytes) throw new Error(`bridge MCP image content exceeds ${maxPreviewBytes} byte limit`);
+    }
+    scanDesktopPayload(child,{maxPreviewBytes},`${path}.${key}`,seen);
+  }
+  seen.delete(value);
+}
+
+export function bridgeToolClass(name){ return toolClass(name); }
+export function bridgeDeadlineForTool(name){ return DEADLINES[toolClass(name)]; }
+export function bridgeCatalogSha256(toolNames){
+  insist(Array.isArray(toolNames)&&toolNames.every(x=>typeof x==='string'),'bridge catalog names invalid');
+  const sorted=[...new Set(toolNames)].sort();
+  insist(sorted.length===toolNames.length,'bridge catalog contains duplicate tool name');
+  return createHash('sha256').update(JSON.stringify(sorted),'utf8').digest('hex');
+}
+export function verifyCompactCatalogAttestation(actualNames,toolResult){
+  insist(Array.isArray(actualNames)&&actualNames.every(x=>typeof x==='string'&&x.length>0),'actual bridge catalog invalid');
+  const actual=[...actualNames].sort();
+  insist(new Set(actual).size===actual.length,'actual bridge catalog contains duplicate tool name');
+  const envelope=toolResult?.structuredContent;
+  insist(envelope?.status==='ok'&&envelope?.op==='manifest','capability manifest tool result invalid');
+  const manifest=envelope.result;
+  insist(manifest?.schema==='deadbyte.capability-manifest.v2'||manifest?.schema==='deadbyte.capability-manifest.v3','capability manifest schema mismatch');
+  insist(manifest.profile==='compact','capability manifest profile mismatch');
+  insist(typeof manifest.ledger_sha256==='string'&&/^[0-9a-f]{64}$/.test(manifest.ledger_sha256),'capability manifest ledger hash invalid');
+  insist(Array.isArray(manifest.tool_catalog)&&manifest.tool_catalog.every(x=>typeof x==='string'&&x.length>0),'capability manifest tool_catalog invalid');
+  const declared=[...manifest.tool_catalog];
+  insist(declared.length===manifest.tool_count,'capability manifest tool_count mismatch');
+  insist(new Set(declared).size===declared.length,'capability manifest catalog contains duplicate tool name');
+  insist(JSON.stringify(declared)===JSON.stringify([...declared].sort()),'capability manifest catalog must be sorted');
+  const declaredSha=bridgeCatalogSha256(declared);
+  insist(declaredSha===manifest.catalog_sha256,'capability manifest catalog hash mismatch');
+  insist(JSON.stringify(actual)===JSON.stringify(declared),'bridge listTools/catalog attestation mismatch');
+  return Object.freeze({
+    ok:true,profile:'compact',tool_count:declared.length,catalog_sha256:declaredSha,ledger_sha256:manifest.ledger_sha256
+  });
+}
+
+export function enforceDesktopBridgeResult(toolName,result,{maxPreviewBytes=1024*1024}={}){
+  if(!String(toolName??'').startsWith('desktop_')) return result;
+  insist(Number.isInteger(maxPreviewBytes)&&maxPreviewBytes>=16*1024&&maxPreviewBytes<=4*1024*1024,'maxPreviewBytes invalid');
+  scanDesktopPayload(result,{maxPreviewBytes});
+  return result;
+}
+
+export function createBridgeGovernor({limits=DEFAULT_LIMITS}={}){
+  const classes=['normal','autonomous','desktop_observe','desktop_action'];
+  for(const name of classes){
+    const cfg=limits[name];
+    insist(cfg&&Number.isInteger(cfg.max_active)&&cfg.max_active>=1&&cfg.max_active<=64,`bridge limit ${name}.max_active invalid`);
+    insist(Number.isInteger(cfg.max_queue)&&cfg.max_queue>=0&&cfg.max_queue<=256,`bridge limit ${name}.max_queue invalid`);
+    insist(Number.isInteger(cfg.queue_timeout_ms)&&cfg.queue_timeout_ms>=100&&cfg.queue_timeout_ms<=120000,`bridge limit ${name}.queue_timeout_ms invalid`);
+  }
+  const state=new Map(classes.map(name=>[name,{active:0,queue:[]}]));
+  let sequence=0;
+
+  function dispatch(name){
+    const cfg=limits[name],s=state.get(name);
+    while(s.active<cfg.max_active&&s.queue.length){
+      const waiter=s.queue.shift();
+      if(waiter.done) continue;
+      waiter.done=true; clearTimeout(waiter.timer); s.active++;
+      waiter.resolve(makeTicket(name,waiter.tool,waiter.id,waiter.queuedAt));
+    }
+  }
+  function makeTicket(name,tool,id,queuedAt){
+    let released=false;
+    return Object.freeze({
+      id,class:name,tool,queued_ms:Math.max(0,Date.now()-queuedAt),
+      release(){
+        if(released) return false;
+        released=true;
+        const s=state.get(name);
+        s.active=Math.max(0,s.active-1);
+        dispatch(name);
+        return true;
+      }
+    });
+  }
+  async function acquire(tool){
+    const name=toolClass(tool),cfg=limits[name],s=state.get(name),id=++sequence,queuedAt=Date.now();
+    if(s.active<cfg.max_active){
+      s.active++;
+      return makeTicket(name,String(tool),id,queuedAt);
+    }
+    if(s.queue.length>=cfg.max_queue) throw new Error(`bridge backpressure queue full for ${name}`);
+    return await new Promise((resolve,reject)=>{
+      const waiter={id,tool:String(tool),queuedAt,resolve,reject,done:false,timer:null};
+      waiter.timer=setTimeout(()=>{
+        if(waiter.done)return;
+        waiter.done=true;
+        const index=s.queue.indexOf(waiter); if(index>=0)s.queue.splice(index,1);
+        reject(new Error(`bridge backpressure queue timeout for ${name}`));
+      },cfg.queue_timeout_ms);
+      s.queue.push(waiter);
+    });
+  }
+  function snapshot(){
+    return Object.freeze(Object.fromEntries(classes.map(name=>{
+      const s=state.get(name),cfg=limits[name];
+      return [name,Object.freeze({active:s.active,queued:s.queue.filter(x=>!x.done).length,max_active:cfg.max_active,max_queue:cfg.max_queue})];
+    })));
+  }
+  return Object.freeze({acquire,snapshot});
+}
+
+export const BRIDGE_R40_DEFAULT_LIMITS=DEFAULT_LIMITS;
+

package/controller/deadbyte-controller.ps1

@@ -3,7 +3,8 @@
 param(
     [Parameter(Position=0)]
     [ValidateSet('menu','start','resume','park','stop','restart','status','url','test','fulltest','toggle','clean','machinetest','armprocess','disarmprocess','processstatus','armhost','disarmhost','hoststatus','hosttest','armcoding','disarmcoding','codingstatus','codingtest','armautonomous','disarmautonomous','autonomousstatus','autonomoustest','supervisorstart','supervisorstop','supervisorstatus','supervisorrecover','armdesktop','disarmdesktop','desktopstatus')]
-    [string]$Command = 'menu'
+    [string]$Command = 'menu',
+    [switch]$Json
 )
 
 Set-StrictMode -Version 3.0
@@ -16,6 +17,7 @@ $LogDir = Join-Path $RuntimeDir 'logs'
 $ConfigPath = if ($env:DEADBYTE_CONTROLLER_CONFIG) { $env:DEADBYTE_CONTROLLER_CONFIG } else { Join-Path $Root 'deadbyte-controller.config.psd1' }
 
 function Fail([string]$Message) { throw "DEADBYTE controller: $Message" }
+if ($Json -and $Command -ne 'status') { Fail 'JSON observation is available only for status' }
 
 function Get-ControllerMutationMutexName {
     $normalized = ([System.IO.Path]::GetFullPath($RuntimeDir)).TrimEnd('\\').ToLowerInvariant()
@@ -721,12 +723,14 @@ function Test-LocalReadyOwned($Cfg, $Bridge) {
 function Get-ObservedState($Cfg) {
     $bridge = Test-OwnedInstance 'Bridge'
     $cloud = Test-OwnedInstance 'Cloud'
-    $ready = if ($bridge.Alive) { try { Test-LocalReadyOwned $Cfg $bridge } catch { $false } } else { $false }
+    $core = Get-DownstreamCoreObservation $Cfg $bridge
+    $ready = if ($bridge.Alive -and $core.alive) { try { Test-LocalReadyOwned $Cfg $bridge } catch { $false } } else { $false }
     $state = if (-not $bridge.Alive -and -not $cloud.Alive) { 'OFFLINE' }
              elseif (-not $bridge.Alive -and $cloud.Alive) { 'PARKED' }
              elseif ($bridge.Alive -and $cloud.Alive -and $ready) { 'ONLINE' }
-             else { 'DEGRADED' }
-    [pscustomobject]@{ State=$state; Bridge=$bridge; Cloud=$cloud; LocalReady=$ready }
+             elseif ($bridge.Alive -and $core.reason -eq 'startup-zero-child') { 'STARTING' }
+             else { 'FAILED' }
+    [pscustomobject]@{ State=$state; Bridge=$bridge; Core=$core; Cloud=$cloud; LocalReady=$ready }
 }
 
 function Wait-LocalReady($Cfg) {
@@ -734,7 +738,10 @@ function Wait-LocalReady($Cfg) {
     do {
         $bridge = Test-OwnedInstance 'Bridge'
         if (-not $bridge.Alive) { return $false }
-        if (Test-LocalReadyOwned $Cfg $bridge) { return $true }
+        $core = Get-DownstreamCoreObservation $Cfg $bridge
+        if (-not $core.alive -and $core.reason -ne 'startup-zero-child') { return $false }
+        if ($core.alive -and (Test-LocalReadyOwned $Cfg $bridge)) { return $true }
+        if ([DateTime]::UtcNow -ge $deadline) { return $false }
         Start-Sleep -Milliseconds 250
     } while ([DateTime]::UtcNow -lt $deadline)
     return $false
@@ -836,7 +843,7 @@ function Invoke-CoreGate($Cfg, [string]$ScriptName, [string[]]$ExtraArguments =
 function Start-Deadbyte($Cfg) {
     $state = Get-ObservedState $Cfg
     if ($state.State -eq 'ONLINE') { return $state }
-    if ($state.State -eq 'DEGRADED') { Fail 'runtime is DEGRADED; use status and stop only if identities remain verified' }
+    if ($state.State -in @('FAILED','STARTING')) { Fail "runtime is $($state.State); inspect status and reconcile verified owned components before restart" }
     $cloudWasAlive = [bool]$state.Cloud.Alive
     Assert-LocalReadyPortAvailable $Cfg
     try {
@@ -1265,6 +1272,73 @@ function Recover-AutonomousSupervisor($Cfg) {
     return [pscustomobject]@{ Runtime=$runtime; Supervisor=$supervisor; Process=$process; Coding=$coding; Autonomous=$autonomous; Desktop=$desktop; Host=$hostStatus }
 }
 
+function Get-BoundedObservationReason($Value) {
+    $reason = [string]$Value
+    if ($reason -cmatch '^[a-z][a-z0-9-]{0,63}$') { return $reason }
+    return 'unverified'
+}
+
+function Convert-OwnedObservation($Owned) {
+    $pidValue = $null; $birth = $null
+    if ($Owned.Alive -and $Owned.Ledger) {
+        $pidValue = [int]$Owned.Ledger.pid
+        $birth = [string]$Owned.Ledger.creation_time_utc
+    }
+    [ordered]@{ alive=[bool]$Owned.Alive; reason=(Get-BoundedObservationReason $Owned.Reason); pid=$pidValue; creation_time_utc=$birth }
+}
+
+function Convert-AuthorityObservation($Authority) {
+    [ordered]@{ configured=[bool]$Authority.Configured; armed=[bool]$Authority.Armed; reason=(Get-BoundedObservationReason $Authority.Reason) }
+}
+
+function Get-DownstreamCoreObservation($Cfg, $Bridge) {
+    $out = [ordered]@{ alive=$false; reason='bridge-unavailable'; pid=$null; parent_pid=$null; creation_time_utc=$null; identity_basis=$null }
+    if (-not $Bridge.Alive) { return $out }
+    $bridgePid = [int]$Bridge.Ledger.pid
+    if (-not [string]::Equals([IO.Path]::GetFullPath([string]$Bridge.Ledger.script_path), [IO.Path]::GetFullPath([string]$Cfg.Bridge.ScriptPath), [StringComparison]::OrdinalIgnoreCase) -or [string]$Bridge.Ledger.script_sha256 -ne [string]$Cfg.Bridge.ScriptSha256) {
+        $out.reason='bridge-config-mismatch'; return $out
+    }
+    try {
+        $children = @(Get-CimInstance Win32_Process -Filter ("ParentProcessId={0} AND Name='node.exe'" -f $bridgePid) -ErrorAction Stop)
+        if ($children.Count -eq 0) { $out.reason='startup-zero-child'; return $out }
+        if ($children.Count -ne 1) { $out.reason='ambiguous-core'; return $out }
+        $child = $children[0]
+        if ([int]$child.ParentProcessId -ne $bridgePid -or [int]$child.ProcessId -lt 1 -or $null -eq $child.CreationDate) { $out.reason='core-identity-incomplete'; return $out }
+        if (-not [string]::IsNullOrWhiteSpace([string]$child.ExecutablePath) -and -not [string]::Equals([string]$child.ExecutablePath,[string]$Cfg.Bridge.FilePath,[StringComparison]::OrdinalIgnoreCase)) { $out.reason='core-image-mismatch'; return $out }
+        $command = [string]$child.CommandLine
+        $needle = (Join-Path ([string]$Cfg.CoreRoot) 'src\mcp-server.mjs').Replace('/','\').ToLowerInvariant()
+        if ([string]::IsNullOrWhiteSpace($command)) { $basis='verified-bridge-single-opaque-node-child' }
+        elseif ($command.Replace('/','\').ToLowerInvariant().Contains($needle)) { $basis='command-line' }
+        else { $out.reason='wrong-core-generation'; return $out }
+        $out.alive=$true; $out.reason='verified'; $out.pid=[int]$child.ProcessId; $out.parent_pid=$bridgePid
+        $out.creation_time_utc=$child.CreationDate.ToUniversalTime().ToString('o'); $out.identity_basis=$basis
+        return $out
+    } catch { $out.reason='core-observation-failed'; return $out }
+}
+
+function Get-StructuredObservation($Cfg) {
+    $s = Get-ObservedState $Cfg
+    $supervisor = Get-AutonomousSupervisorStatus $Cfg
+    [ordered]@{
+        schema='deadbyte.controller-observation.v1'
+        observed_at_utc=[DateTime]::UtcNow.ToString('o')
+        state=[string]$s.State
+        core_root=[string]$Cfg.CoreRoot
+        local_ready=[bool]$s.LocalReady
+        bridge=(Convert-OwnedObservation $s.Bridge)
+        core=$s.Core
+        cloud=(Convert-OwnedObservation $s.Cloud)
+        supervisor=[ordered]@{ configured=[bool]$supervisor.Configured; running=[bool]$supervisor.Running; reason=(Get-BoundedObservationReason $supervisor.Reason) }
+        authority=[ordered]@{
+            process=(Convert-AuthorityObservation (Get-ProcessGrantStatus $Cfg))
+            coding=(Convert-AuthorityObservation (Get-CodingLeaseStatus $Cfg))
+            autonomous=(Convert-AuthorityObservation (Get-AutonomousLeaseStatus $Cfg))
+            desktop=(Convert-AuthorityObservation (Get-DesktopGrantStatus $Cfg))
+            host=(Convert-AuthorityObservation (Get-HostArmStatus $Cfg))
+        }
+    }
+}
+
 function Show-State($Cfg) {
     $s = Get-ObservedState $Cfg
     $bp = if ($s.Bridge.Alive) { $s.Bridge.Ledger.pid } else { '-' }
@@ -1272,6 +1346,7 @@ function Show-State($Cfg) {
     $url = Get-CurrentUrl $Cfg
     Write-Host ("DEADBYTE MCP = {0}" -f $s.State)
     Write-Host ("Bridge PID   : {0} [{1}]" -f $bp, $s.Bridge.Reason)
+    Write-Host ("Core PID     : {0} [{1}]" -f $(if ($s.Core.alive) { $s.Core.pid } else { '-' }), $s.Core.reason)
     Write-Host ("Cloud PID    : {0} [{1}]" -f $cp, $s.Cloud.Reason)
     Write-Host ("Local ready  : {0}" -f $s.LocalReady)
     Write-Host ("URL          : {0}" -f $(if ($url) { $url } else { '<unknown>' }))
@@ -1370,14 +1445,15 @@ function Clean-Stale {
 function Run-CommandCore([string]$Name) {
     $cfg = Get-Config
     Assert-ControllerRootBound $cfg
-    Ensure-Directory $RuntimeDir; Ensure-Directory $LogDir
+    $readOnly = $Name -in @('status','url','hoststatus','processstatus','codingstatus','autonomousstatus','desktopstatus','supervisorstatus')
+    if (-not $readOnly) { Ensure-Directory $RuntimeDir; Ensure-Directory $LogDir }
     switch ($Name) {
         'start'   { Start-Deadbyte $cfg | Out-Null; if ([bool]$cfg.AutonomousSupervisorEnabled) { Start-AutonomousSupervisor $cfg | Out-Null }; Show-State $cfg | Out-Null }
         'resume'  { Start-Deadbyte $cfg | Out-Null; if ([bool]$cfg.AutonomousSupervisorEnabled) { Start-AutonomousSupervisor $cfg | Out-Null }; Show-State $cfg | Out-Null }
         'park'    { Park-Deadbyte $cfg | Out-Null; Show-State $cfg | Out-Null }
         'stop'    { if ([bool]$cfg.AutonomousSupervisorEnabled) { Stop-AutonomousSupervisor $cfg | Out-Null }; Stop-Deadbyte $cfg | Out-Null; Show-State $cfg | Out-Null }
         'restart' { if ([bool]$cfg.AutonomousSupervisorEnabled) { Stop-AutonomousSupervisor $cfg | Out-Null }; Stop-Deadbyte $cfg | Out-Null; Start-Deadbyte $cfg | Out-Null; if ([bool]$cfg.AutonomousSupervisorEnabled) { Start-AutonomousSupervisor $cfg | Out-Null }; Show-State $cfg | Out-Null }
-        'status'  { Show-State $cfg | Out-Null }
+        'status'  { if ($Json) { Get-StructuredObservation $cfg | ConvertTo-Json -Depth 6 -Compress | Write-Output } else { Show-State $cfg | Out-Null } }
         'url'     { $u=Get-CurrentUrl $cfg; if (-not $u) { Fail 'URL unavailable' }; Write-Output $u }
         'test'    { Invoke-Smoke $cfg $false }
         'fulltest'{ Invoke-Smoke $cfg $true }

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.33-r56\\controller\\runtime\\process-grant.json",
-  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.33-r56\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.35-r58\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.35-r58\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.33-r56\\bin\\deadbyte-process-host.exe",
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.35-r58\\bin\\deadbyte-process-host.exe",
     "sha256": "daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4"
   },
   "roots": {
     "core": {
-      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.33-r56",
+      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.35-r58",
       "deny_paths": [
         "node_modules",
         "controller/runtime",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.33",
+  "version": "0.15.35",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
@@ -42,7 +42,7 @@
     "contained:run": "node src/contained-cli.mjs workspaces/demo input.txt",
     "contained:smoke": "node src/contained-smoke.mjs",
     "mcp:contained:smoke": "node src/mcp-contained-smoke-client.mjs",
-    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r56.ps1",
+    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r58.ps1",
     "authority:smoke": "node src/authority-smoke.mjs",
     "mcp:remote:smoke": "node src/remote-mcp-smoke-client.mjs",
     "mcp:host:smoke": "node src/mcp-host-smoke-client.mjs",
@@ -78,7 +78,10 @@
     "r53:focused:test": "node --test --test-concurrency=1 test/r53-release-contract.test.mjs test/stabilization-update-child-root.test.mjs test/stabilization-state-root.test.mjs test/stabilization-guardian.test.mjs test/stabilization-semver.test.mjs test/stabilization-powershell.test.mjs test/release-slot.test.mjs test/runtime-self-update.test.mjs test/r51-runtime-coherence.test.mjs test/remote-session-cli.test.mjs test/r52-offline-predecessor-recovery.test.mjs test/r52-host-revocation.test.mjs",
     "r54:focused:test": "node --test --test-concurrency=1 test/r54-release-contract.test.mjs test/r54-offline-predecessor-self-exclusion.test.mjs test/r52-offline-predecessor-recovery.test.mjs test/runtime-self-update.test.mjs test/r51-runtime-coherence.test.mjs test/remote-session-cli.test.mjs",
     "r55:focused:test": "node --test --test-concurrency=1 test/r55-release-contract.test.mjs test/r55-offline-predecessor-guardian-family.test.mjs test/r54-offline-predecessor-self-exclusion.test.mjs test/r52-offline-predecessor-recovery.test.mjs test/runtime-self-update.test.mjs test/r51-runtime-coherence.test.mjs test/remote-session-cli.test.mjs",
-    "r56:focused:test": "node --test --test-concurrency=1 test/r56-release-contract.test.mjs test/r56-rollback-launcher-restore.test.mjs test/r55-offline-predecessor-guardian-family.test.mjs test/r54-offline-predecessor-self-exclusion.test.mjs test/runtime-self-update.test.mjs test/release-slot.test.mjs test/r51-runtime-coherence.test.mjs"
+    "r56:focused:test": "node --test --test-concurrency=1 test/r56-release-contract.test.mjs test/r56-rollback-launcher-restore.test.mjs test/r55-offline-predecessor-guardian-family.test.mjs test/r54-offline-predecessor-self-exclusion.test.mjs test/runtime-self-update.test.mjs test/release-slot.test.mjs test/r51-runtime-coherence.test.mjs",
+    "r57:focused:test": "node --test --test-concurrency=1 test/r57-release-contract.test.mjs test/r57-core-startup-race.test.mjs test/r56-rollback-launcher-restore.test.mjs test/r55-offline-predecessor-guardian-family.test.mjs test/r54-offline-predecessor-self-exclusion.test.mjs test/runtime-self-update.test.mjs test/release-slot.test.mjs test/r51-runtime-coherence.test.mjs test/remote-session-cli.test.mjs",
+    "r58:focused:test": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/r58-focused.ps1",
+    "r58:cross-plane:test": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/r58-cross-plane.ps1"
   },
   "bundleDependencies": [
     "@modelcontextprotocol/server",

package/scripts/bridge-benchmark-r58.mjs

@@ -0,0 +1,67 @@
+import {mkdir,readFile,writeFile,rm} from 'node:fs/promises';
+import {spawn} from 'node:child_process';
+import {randomBytes,createHash} from 'node:crypto';
+import {createServer} from 'node:net';
+import {performance} from 'node:perf_hooks';
+import {setTimeout as delay} from 'node:timers/promises';
+import path from 'node:path';
+import {pathToFileURL} from 'node:url';
+import {Client,StreamableHTTPClientTransport} from '@modelcontextprotocol/client';
+import {generateTrustKeypair} from '../src/trust.mjs';
+import {loadCodingPolicy} from '../src/coding-plane.mjs';
+
+const run=path.resolve(process.argv[2]||'');const base=path.resolve('D:/Projects/deadbyte-mcp/testing/0.15.35');const rel=path.relative(base,run);
+if(!rel||rel.startsWith('..')||path.isAbsolute(rel))throw new Error('new D: R58 run root required');await mkdir(run);
+const core='C:/Users/DEADBYTE/.deadbyte-mcp/releases/v0.15.34-2199bb59f0e0fc20';
+const targets={baseline:'D:/Projects/deadbyte-chatgpt-bridge-r40-dev',candidate:'D:/Projects/deadbyte-mcp/development/deadbyte-mcp-0.15.35-r58/bridge'};
+const entries=Object.entries(targets);if(process.argv[3]==='candidate-first')entries.reverse();
+const sha=b=>createHash('sha256').update(b).digest('hex');
+if(sha(await readFile(path.join(core,'MANIFEST.SHA256')))!=='2199bb59f0e0fc205d470d11f990d3ce3df444be5eba2a7d8dbc60d5f5b790bb')throw new Error('core baseline drift');
+const summaries={};
+const extended=process.argv.includes('--extended');
+const corpus=[{name:'coding_session_status',arguments:{}},{name:'capability_manifest',arguments:{}}];
+if(extended)corpus.push({name:'coding_file_read',arguments:{root_id:'bench',path:'input.txt'}},{name:'coding_tree',arguments:{root_id:'bench',path:'.',max_depth:2,max_entries:100}});
+for(const [label,target] of entries){
+ const root=path.join(run,label);await mkdir(root);const state=path.join(root,'state'),workspace=path.join(root,'workspace'),temp=path.join(root,'temp');
+ for(const dir of [state,workspace,temp])await mkdir(dir);
+ const keys=await generateTrustKeypair({privateKeyPath:path.join(root,'private.pem'),publicKeyPath:path.join(root,'public.pem')});
+ const policy=path.join(root,'policy.json');
+ await writeFile(policy,JSON.stringify({schema:'deadbyte.coding-policy.v1',enabled:true,lease_file:path.join(state,'grant.json'),evidence_dir:path.join(state,'evidence'),roots:{bench:{path:workspace,read:true,write:false,exec:false,deny_paths:[]}},commands:{},max_read_bytes:65536,max_write_bytes:65536}),{flag:'wx'});
+ const fixture='bounded fixture alpha\n'.repeat(100);await writeFile(path.join(workspace,'input.txt'),fixture,{flag:'wx'});
+ if(extended){const loaded=await loadCodingPolicy(policy);await writeFile(path.join(state,'grant.json'),JSON.stringify({schema:'deadbyte.coding-grant.v2',policy_sha256:loaded.policy_sha256,instance_nonce:randomBytes(32).toString('hex'),root_ids:['bench']}),{flag:'wx'});}
+ const reservation=createServer();await new Promise(resolve=>reservation.listen(0,'127.0.0.1',resolve));const port=reservation.address().port;await new Promise(resolve=>reservation.close(resolve));
+ const token=randomBytes(32).toString('hex');const env={...process.env};for(const key of Object.keys(env))if(key.startsWith('DEADBYTE_'))delete env[key];
+ Object.assign(env,{TEMP:temp,TMP:temp,npm_config_cache:path.join(root,'npm-cache'),DEADBYTE_CORE_ROOT:core,DEADBYTE_STATE_ROOT:state,DEADBYTE_WORKSPACE_ROOT:workspace,DEADBYTE_BRIDGE_PORT:String(port),DEADBYTE_BRIDGE_PATH_TOKEN:token,DEADBYTE_SIGNING_KEY:keys.privateKeyPath,DEADBYTE_VERIFY_KEY:keys.publicKeyPath,DEADBYTE_PRIVILEGED_POLICY:'',DEADBYTE_CAPABILITY_PROFILE:'compact',DEADBYTE_MACHINE_RUNTIME:'0',DEADBYTE_AGENT_RUNTIME:'0',DEADBYTE_PROCESS_RUNTIME:'0',DEADBYTE_CODING_RUNTIME:'1',DEADBYTE_CODING_POLICY:policy,DEADBYTE_MACHINE_FS_RUNTIME:'0',DEADBYTE_OBSERVATION_RUNTIME:'0',DEADBYTE_DESKTOP_RUNTIME:'0',DEADBYTE_AUTONOMOUS_RUNTIME:'0',DEADBYTE_AUDIT_RUNTIME:'0'});
+ const bridgePath=path.join(target,'src/bridge.mjs');const script=`process.on('message',m=>{if(m==='stop')process.emit('SIGTERM')});await import(${JSON.stringify(pathToFileURL(bridgePath).href)});`;
+ const start=performance.now();const child=spawn(process.execPath,['--input-type=module','-e',script],{cwd:target,env,windowsHide:true,stdio:['ignore','pipe','pipe','ipc']});
+ let stdout='',stderr='';child.stdout.on('data',b=>{stdout+=b;});child.stderr.on('data',b=>{stderr+=b;});const exited=new Promise(resolve=>child.once('exit',code=>resolve(code)));
+ const samples=[];let catalog;
+ try{
+  const deadline=Date.now()+20000;while(!stdout.includes('BRIDGE_READY')&&child.exitCode===null&&Date.now()<deadline)await delay(20);
+  if(!stdout.includes('BRIDGE_READY'))throw new Error(`${label} bridge startup failed: ${stderr}`);
+  const startup=performance.now()-start;
+  for(let batch=0;batch<3;batch++){
+   const client=new Client({name:'r58-isolated-bridge-benchmark',version:'1.0.0'},{versionNegotiation:{mode:{pin:'2026-07-28'}}});
+   try{
+    await client.connect(new StreamableHTTPClientTransport(new URL(`http://127.0.0.1:${port}/mcp/${token}`)));
+    const tools=(await client.listTools()).tools;if(!catalog){catalog=tools;await writeFile(path.join(root,'catalog.json'),JSON.stringify(tools,null,2),{flag:'wx'});}
+    for(let iteration=0;iteration<120;iteration++)for(const request of corpus){
+     const {name}=request;const t=performance.now();const result=await client.callTool(request);const elapsed=performance.now()-t;
+     if(result.isError||!result.structuredContent)throw new Error(`${label} benchmark tool failed: ${name}`);
+     if(name==='coding_file_read'&&(result.structuredContent.content!==fixture||result.structuredContent.sha256!==sha(fixture)))throw new Error('read behavior/hash oracle mismatch');
+     if(iteration>=20)samples.push({batch,iteration:iteration-20,tool:name,roundtrip_ms:elapsed});
+    }
+   }finally{await client.close();}
+  }
+  const quant=values=>{const v=[...values].sort((a,b)=>a-b),q=p=>v[Math.ceil(v.length*p)-1];return{n:v.length,min:v[0],p50:q(.5),p90:q(.9),p95:q(.95),p99:q(.99),max:v.at(-1)}};
+  summaries[label]={startup_ms:startup,script_sha256:sha(await readFile(bridgePath)),catalog_count:catalog.length,rows:Object.fromEntries(corpus.map(({name})=>[name,quant(samples.filter(s=>s.tool===name).map(s=>s.roundtrip_ms))])),aggregate:quant(samples.map(s=>s.roundtrip_ms))};
+  await writeFile(path.join(root,'raw.json'),JSON.stringify(samples),{flag:'wx'});
+ }finally{
+  await rm(path.join(state,'grant.json'),{force:true});
+  if(child.connected)child.send('stop');
+  const code=await Promise.race([exited,delay(5000).then(()=>null)]);if(code===null){child.kill();throw new Error('owned fixture bridge did not close through normal shutdown');}
+  await writeFile(path.join(root,'stdout.log'),stdout,{flag:'wx'});await writeFile(path.join(root,'stderr.log'),stderr,{flag:'wx'});
+ }
+}
+const result={schema:'deadbyte.r58.isolated-bridge-performance.v1',status:'MEASURED_NOT_FULL_PERFORMANCE_ACCEPTANCE',core,corpus,workload_sha256:sha(JSON.stringify(corpus)),test_read_grant:extended,grant_removed_after_target:true,summaries,p95_reduction_pct:100*(1-summaries.candidate.aggregate.p95/summaries.baseline.aggregate.p95),limitations:['bounded read-only categories only','not production machine ping/public transport','no mutation/build/test/durable workload','sequential target order; no statistical inference','no production activation']};
+await writeFile(path.join(run,'summary.json'),JSON.stringify(result,null,2),{flag:'wx'});console.log(JSON.stringify(result,null,2));

package/scripts/deploy-r48.mjs

@@ -4,7 +4,7 @@ import os from 'node:os';
 import path from 'node:path';
 import { spawnSync } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
-import { loadPowerShellDataFile, runSlotUpdateCli } from '../src/runtime-update.mjs';
+import { runSlotUpdateCli } from '../src/runtime-update.mjs';
 import { parseActivePointer } from '../src/release-slot.mjs';
 
 const root=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..');
@@ -58,8 +58,7 @@ async function waitForActivation({handoffPath,expectedVersion,expectedManifest,t
 
 const manifest=await sha(path.join(root,'MANIFEST.SHA256'));
 const pointer=JSON.parse(await readFile(path.join(state,'active-release.json'),'utf8'));
-const cfg=await loadPowerShellDataFile(pointer.config_path);
-const bridgeRoot=path.resolve(cfg.Bridge.WorkingDirectory);
+const bridgeRoot=path.join(root,'bridge');
 const bridgeScript=path.join(bridgeRoot,'src','bridge.mjs');
 const pkg=JSON.parse(await readFile(path.join(root,'package.json'),'utf8'));
 const expectedVersion=pkg.version;

package/scripts/gate-windows-r57.ps1

@@ -0,0 +1,27 @@
+$ErrorActionPreference = 'Stop'
+Set-StrictMode -Version 3.0
+
+function Invoke-GateStep {
+    param([Parameter(Mandatory)][string]$Name,[Parameter(Mandatory)][string[]]$NpmArgs)
+    Write-Host "==== $Name ===="
+    & npm.cmd @NpmArgs
+    if ($LASTEXITCODE -ne 0) { throw "DEADBYTE 0.15.34 / R57 gate failed at $Name with exit code $LASTEXITCODE" }
+}
+function Invoke-NodeTest {
+    param([Parameter(Mandatory)][string]$Name,[Parameter(Mandatory)][string[]]$TestFiles)
+    Write-Host "==== $Name ===="
+    & node.exe --test --test-concurrency=1 @TestFiles
+    if ($LASTEXITCODE -ne 0) { throw "DEADBYTE 0.15.34 / R57 gate failed at $Name with exit code $LASTEXITCODE" }
+}
+
+Invoke-NodeTest 'r57-package-boundary' @('test/package-boundary.test.mjs')
+Invoke-GateStep 'r57-focused-contracts' @('run','r57:focused:test')
+Write-Host '==== full-regression-evidence ===='
+$matrix=Get-Content -LiteralPath (Join-Path (Split-Path $PSScriptRoot -Parent) 'TEST-MATRIX.json') -Raw | ConvertFrom-Json
+if($matrix.observed_pre_release_evidence.full_regression.status -ne 'PASS'){ throw 'R57 full regression evidence is not PASS' }
+Invoke-GateStep 'manifest-write' @('run','manifest:write')
+Invoke-GateStep 'manifest-verify' @('run','manifest:verify')
+Invoke-GateStep 'doctor' @('run','doctor')
+& node.exe (Join-Path $PSScriptRoot 'windows-gate-evidence-r57.mjs')
+if ($LASTEXITCODE -ne 0) { throw "R57 evidence writer failed with exit code $LASTEXITCODE" }
+Write-Host '==== DEADBYTE 0.15.34 / R57 WINDOWS GATE: PASS ===='

package/scripts/gate-windows-r58.ps1

@@ -0,0 +1,33 @@
+$ErrorActionPreference = 'Stop'
+Set-StrictMode -Version 3.0
+
+function Invoke-GateStep {
+    param([Parameter(Mandatory)][string]$Name,[Parameter(Mandatory)][string[]]$NpmArgs)
+    Write-Host "==== $Name ===="
+    & npm.cmd @NpmArgs
+    if ($LASTEXITCODE -ne 0) { throw "DEADBYTE 0.15.35 / R58 gate failed at $Name with exit code $LASTEXITCODE" }
+}
+function Invoke-NodeTest {
+    param([Parameter(Mandatory)][string]$Name,[Parameter(Mandatory)][string[]]$TestFiles)
+    Write-Host "==== $Name ===="
+    & node.exe --test --test-concurrency=1 @TestFiles
+    if ($LASTEXITCODE -ne 0) { throw "DEADBYTE 0.15.35 / R58 gate failed at $Name with exit code $LASTEXITCODE" }
+}
+
+Invoke-NodeTest 'r58-package-boundary' @('test/package-boundary.test.mjs','test/r58-bundled-bridge.test.mjs')
+Invoke-NodeTest 'r58-process-policy' @('test/process-policy-refresh.test.mjs','test/process-release-gate.test.mjs')
+Invoke-GateStep 'r58-focused-contracts' @('run','r58:focused:test')
+
+Write-Host '==== recorded-prepublish-evidence ===='
+$matrix=Get-Content -LiteralPath (Join-Path (Split-Path $PSScriptRoot -Parent) 'TEST-MATRIX.json') -Raw | ConvertFrom-Json
+if($matrix.observed_pre_release_evidence.performance.status -ne 'PASS_BOUNDED_PREPUBLISH'){ throw 'R58 performance evidence is not PASS_BOUNDED_PREPUBLISH' }
+if($matrix.observed_pre_release_evidence.cross_plane.status -ne 'PASS'){ throw 'R58 cross-plane evidence is not PASS' }
+if($matrix.observed_pre_release_evidence.public_surface.status -ne 'PASS'){ throw 'R58 public surface evidence is not PASS' }
+if($matrix.observed_pre_release_evidence.full_regression.status -ne 'PASS'){ throw 'R58 fresh full regression evidence is not PASS' }
+
+Invoke-GateStep 'manifest-write' @('run','manifest:write')
+Invoke-GateStep 'manifest-verify' @('run','manifest:verify')
+Invoke-GateStep 'doctor' @('run','doctor')
+& node.exe (Join-Path $PSScriptRoot 'windows-gate-evidence-r58.mjs')
+if ($LASTEXITCODE -ne 0) { throw "R58 evidence writer failed with exit code $LASTEXITCODE" }
+Write-Host '==== DEADBYTE 0.15.35 / R58 WINDOWS GATE: PASS ===='

package/scripts/owner-probe-r58.mjs

@@ -0,0 +1,31 @@
+import {spawn,spawnSync} from 'node:child_process';
+import {writeFile} from 'node:fs/promises';
+import {performance} from 'node:perf_hooks';
+import {createHash} from 'node:crypto';
+import path from 'node:path';
+import {windowsPowerShellEnvironment} from '../src/runtime-update.mjs';
+
+// Diagnostic only. Queries only a child created and held by this process.
+// Not an ownership authority, cleanup path, or public PID control tool.
+const out=path.resolve(process.argv[2]||'');
+const base=path.resolve('D:/Projects/deadbyte-mcp/testing/0.15.35');
+const rel=path.relative(base,out);
+if(!rel||rel.startsWith('..')||path.isAbsolute(rel))throw new Error('D: R58 evidence destination required');
+const ps=path.join(process.env.SystemRoot,'System32/WindowsPowerShell/v1.0/powershell.exe');
+const child=spawn(process.execPath,['-e','setTimeout(()=>{},30000)'],{stdio:'ignore',windowsHide:true});
+const closed=new Promise(resolve=>child.once('close',resolve));
+const samples=[];
+try{
+ if(!Number.isInteger(child.pid)||child.pid<1)throw new Error('diagnostic child failed');
+ for(let i=0;i<3;i++){
+  const query=`$p=Get-CimInstance Win32_Process -Filter 'ProcessId=${child.pid}'; if ($null -eq $p) {exit 2}; [pscustomobject]@{pid=$p.ProcessId; parent_pid=$p.ParentProcessId; creation_utc=$p.CreationDate.ToUniversalTime().ToString('o'); executable_path=$p.ExecutablePath; command_line=$p.CommandLine} | ConvertTo-Json -Compress`;
+  const t=performance.now();const result=spawnSync(ps,['-NoLogo','-NoProfile','-Command',query],{encoding:'utf8',windowsHide:true,env:windowsPowerShellEnvironment(process.env),timeout:15000});
+  if(result.error||result.status!==0)throw new Error('narrow process diagnostic failed');
+  const info=JSON.parse(result.stdout);
+  if(info.pid!==child.pid||info.parent_pid!==process.pid||path.resolve(info.executable_path).toLowerCase()!==path.resolve(process.execPath).toLowerCase())throw new Error('owned diagnostic process identity mismatch');
+  samples.push({pid:info.pid,parent_pid:info.parent_pid,creation_utc:info.creation_utc,executable_path:info.executable_path,command_line_sha256:createHash('sha256').update(info.command_line).digest('hex'),query_ms:performance.now()-t});
+ }
+ if(new Set(samples.map(s=>s.creation_utc)).size!==1)throw new Error('creation identity changed');
+ await writeFile(out,JSON.stringify({schema:'deadbyte.r58.owner-probe.v1',observed_at:new Date().toISOString(),status:'DIAGNOSTIC_ONLY',samples,limitations:['not production ownership verification','not PID-reuse recovery acceptance','CIM spawn latency unsuitable for frequent guardian polling without measured redesign']},null,2),{flag:'wx'});
+ console.log(JSON.stringify({status:'DIAGNOSTIC_ONLY',samples:samples.length,query_ms:samples.map(s=>s.query_ms)}));
+} finally {if(child.exitCode===null)child.kill();await closed;}