deadbyte-mcp 0.15.34 → 0.15.36

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (101) hide show
  1. package/MANIFEST.SHA256 +100 -38
  2. package/PROVENANCE.json +87 -41
  3. package/README.txt +72 -14
  4. package/RELEASE.json +187 -150
  5. package/SBOM.cdx.json +25 -3
  6. package/TEST-MATRIX.json +258 -151
  7. package/bridge/package.json +13 -0
  8. package/bridge/src/bridge-health-r59.mjs +52 -0
  9. package/bridge/src/bridge.mjs +487 -0
  10. package/bridge/src/node-http-adapter.mjs +56 -0
  11. package/bridge/src/public-tool-definitions.mjs +14 -0
  12. package/bridge/src/r40-governor.mjs +206 -0
  13. package/controller/deadbyte-controller.ps1 +152 -18
  14. package/controller/deadbyte-process-policy.json +4 -4
  15. package/docs/R59-TASK-CONTRACT.md +26 -0
  16. package/package.json +7 -3
  17. package/proof/r59-full-regression-current.json +13 -0
  18. package/proof/r59-full-regression-current.stderr.log +0 -0
  19. package/proof/r59-full-regression-current.stdout.log +1268 -0
  20. package/scripts/bridge-benchmark-r58.mjs +67 -0
  21. package/scripts/deploy-r48.mjs +2 -3
  22. package/scripts/gate-windows-r58.ps1 +33 -0
  23. package/scripts/gate-windows-r59-prepublish.ps1 +41 -0
  24. package/scripts/owner-probe-r58.mjs +31 -0
  25. package/scripts/performance-r58.mjs +57 -0
  26. package/scripts/public-baseline-r58.mjs +72 -0
  27. package/scripts/public-surface-r58.mjs +84 -0
  28. package/scripts/r58-cross-plane.ps1 +6 -0
  29. package/scripts/r58-focused.ps1 +6 -0
  30. package/scripts/r59-full-regression-capture.mjs +35 -0
  31. package/scripts/windows-gate-evidence-r58.mjs +93 -0
  32. package/src/capability-resolver.mjs +25 -7
  33. package/src/capability-snapshot.mjs +52 -0
  34. package/src/compact-gateway-mcp-tools.mjs +10 -11
  35. package/src/deadbyte-cli.mjs +40 -12
  36. package/src/doctor-foreground-r58.mjs +44 -0
  37. package/src/doctor-installation-r58.mjs +63 -0
  38. package/src/doctor-r45.mjs +21 -4
  39. package/src/doctor-runtime-r58.mjs +82 -0
  40. package/src/doctor-transactions-r58.mjs +40 -0
  41. package/src/foreground-process-identity.mjs +27 -0
  42. package/src/foreground-session-lock.mjs +20 -0
  43. package/src/foreground-session-lock.ps1 +15 -0
  44. package/src/mcp-server.mjs +179 -118
  45. package/src/r40-compact-disarmed-probe.mjs +1 -1
  46. package/src/r44-compact-disarmed-probe.mjs +1 -1
  47. package/src/r45-compact-disarmed-probe.mjs +1 -1
  48. package/src/release-generation.mjs +1 -0
  49. package/src/release-slot.mjs +2 -1
  50. package/src/remote-mcp-r40-parity-client.mjs +1 -1
  51. package/src/remote-mcp-r44-parity-client.mjs +1 -1
  52. package/src/remote-mcp-r45-parity-client.mjs +1 -1
  53. package/src/remote-mcp-smoke-client.mjs +1 -1
  54. package/src/remote-session-guardian.mjs +8 -1
  55. package/src/runtime-plane-registry.mjs +74 -0
  56. package/src/runtime-update.mjs +85 -2
  57. package/src/version.mjs +1 -1
  58. package/test/bridge-runtime-r59.test.mjs +60 -0
  59. package/test/capability-resolver.test.mjs +16 -0
  60. package/test/capability-snapshot-r59.test.mjs +39 -0
  61. package/test/compact-gateway-r36.test.mjs +22 -2
  62. package/test/compact-max-catalog-r44.test.mjs +1 -1
  63. package/test/compact-max-catalog-r45.test.mjs +1 -1
  64. package/test/contained.test.mjs +2 -1
  65. package/test/controller-policy-preflight-r59.test.mjs +39 -0
  66. package/test/controller-r211.test.mjs +4 -1
  67. package/test/controller.test.mjs +2 -1
  68. package/test/fixtures/r59-compact-surface-v0.15.35.json +222 -0
  69. package/test/helpers/r58-doctor-fixture.mjs +26 -0
  70. package/test/observation-integration.test.mjs +2 -3
  71. package/test/optional-plane-degraded-r59.test.mjs +44 -0
  72. package/test/r49-windows-gate.test.mjs +2 -2
  73. package/test/r57-release-contract.test.mjs +5 -3
  74. package/test/r58-bridge-dependency-binding.test.mjs +62 -0
  75. package/test/r58-bundled-bridge.test.mjs +24 -0
  76. package/test/r58-cleanup-retention.test.mjs +45 -0
  77. package/test/r58-completed-update-receipt.test.mjs +76 -0
  78. package/test/r58-concurrent-recovery.test.mjs +54 -0
  79. package/test/r58-controller-core-observation.test.mjs +36 -0
  80. package/test/r58-controller-json.test.mjs +48 -0
  81. package/test/r58-controller-live-local.test.mjs +98 -0
  82. package/test/r58-controller-readonly.test.mjs +23 -0
  83. package/test/r58-controller-state-coherence.test.mjs +45 -0
  84. package/test/r58-doctor-cli.test.mjs +20 -0
  85. package/test/r58-doctor-foreground.test.mjs +50 -0
  86. package/test/r58-doctor-installation.test.mjs +55 -0
  87. package/test/r58-doctor-pointer.test.mjs +41 -0
  88. package/test/r58-doctor-runtime.test.mjs +45 -0
  89. package/test/r58-doctor-transactions.test.mjs +21 -0
  90. package/test/r58-guardian-channel.test.mjs +26 -0
  91. package/test/r58-launcher-shell.test.mjs +28 -0
  92. package/test/r58-owner-identity.test.mjs +20 -0
  93. package/test/r58-release-contract.test.mjs +50 -0
  94. package/test/r58-session-lock.test.mjs +26 -0
  95. package/test/r58-stale-owner.test.mjs +71 -0
  96. package/test/r58-windows-gate.test.mjs +32 -0
  97. package/test/r59-release-contract.test.mjs +61 -0
  98. package/test/r59-tool-surface-compat.test.mjs +90 -0
  99. package/test/release-generation.test.mjs +4 -1
  100. package/test/remote-session-cli.test.mjs +55 -2
  101. package/test/runtime-plane-registry-r59.test.mjs +40 -0
package/README.txt CHANGED
@@ -1,4 +1,4 @@
1
- DEADBYTE MCP V0.15.34 / R57 BOUNDED CORE STARTUP DISCOVERY HOTFIX
1
+ DEADBYTE MCP V0.15.36 / R59 DEGRADED RUNTIME + BRIDGE RECONCILIATION
2
2
  =========================
3
3
 
4
4
  AUTHENTICATED MACHINE TRUTH + DURABLE AGENT + CODING + AUTONOMOUS PRODUCTION ENGINE
@@ -7,12 +7,58 @@ NPX PRIMARY OPERATOR UX
7
7
  ------------------------
8
8
  Use the npm CLI entry point instead of the legacy CMD convenience wrapper:
9
9
 
10
- npx -y deadbyte-mcp@0.15.34 mcp
11
- npx -y deadbyte-mcp@0.15.34 remote
12
- npx -y deadbyte-mcp@0.15.34 remote status
13
- npx -y deadbyte-mcp@0.15.34 remote restart
14
- npx -y deadbyte-mcp@0.15.34 audit status
15
- npx -y deadbyte-mcp@0.15.34 audit verify
10
+ npx -y deadbyte-mcp@0.15.36 mcp
11
+ npx -y deadbyte-mcp@0.15.36 remote
12
+ npx -y deadbyte-mcp@0.15.36 remote status
13
+ npx -y deadbyte-mcp@0.15.36 remote restart
14
+ npx -y deadbyte-mcp@0.15.36 audit status
15
+ npx -y deadbyte-mcp@0.15.36 audit verify
16
+
17
+ MAJOR MCP CLIENT STDIO CONFIGS
18
+ -------------------------------
19
+
20
+ CLAUDE DESKTOP
21
+
22
+ {
23
+ "mcpServers": {
24
+ "deadbyte": {
25
+ "command": "npx",
26
+ "args": ["-y", "deadbyte-mcp@0.15.36", "mcp"]
27
+ }
28
+ }
29
+ }
30
+
31
+ CURSOR
32
+ Save as .cursor/mcp.json:
33
+
34
+ {
35
+ "mcpServers": {
36
+ "deadbyte": {
37
+ "command": "npx",
38
+ "args": ["-y", "deadbyte-mcp@0.15.36", "mcp"]
39
+ }
40
+ }
41
+ }
42
+
43
+ VS CODE
44
+ Save as .vscode/mcp.json:
45
+
46
+ {
47
+ "servers": {
48
+ "deadbyte": {
49
+ "type": "stdio",
50
+ "command": "npx",
51
+ "args": ["-y", "deadbyte-mcp@0.15.36", "mcp"]
52
+ }
53
+ }
54
+ }
55
+
56
+ CODEX
57
+ Add to the Codex MCP configuration:
58
+
59
+ [mcp_servers.deadbyte]
60
+ command = "npx"
61
+ args = ["-y", "deadbyte-mcp@0.15.36", "mcp"]
16
62
 
17
63
  The `mcp` command is the quiet stdio server entry for local MCP clients; stdout is reserved for MCP.
18
64
  The remote CLI invokes the stable active-release PowerShell launcher directly with shell=false.
@@ -29,6 +75,18 @@ and a random 256-bit session nonce, prevents concurrent foreground sessions, and
29
75
  recover only a dead, unguarded stale owner. Explicit subcommands such as `remote status` remain
30
76
  one-shot controller operations.
31
77
 
78
+ R59 DEGRADED RUNTIME + BRIDGE RECONCILIATION
79
+ ---------------------------------------------
80
+ 0.15.36 is the bounded successor to production-accepted 0.15.35. Optional-plane initialization failures now degrade only their dependent capabilities while preserving the stable public 43-tool compact catalog and fail-closed mutation semantics. Capability manifest v3 adds a content-bound live availability overlay without widening the signed capability ledger or creating new roots, executables, routes, or authority.
81
+
82
+ Bridge readiness now requires a fresh downstream Core identity, MCP negotiation, catalog attestation, and capability snapshot. Core loss enters bounded reconciliation: queued work is cancelled or classified, mutation and unknown outcomes are never replayed, and recovery must re-attest before returning READY. Controller preflight rejects missing policy roots before authority can be armed. Public frontdoor readiness is verified with an independently checkable Ed25519 machine ping rather than tunnel-process existence alone.
83
+
84
+ This release is operator-authorized with the four-hour soak and clean-machine proof explicitly NOT_COMPLETED. Those limitations remain recorded in release provenance and do not permit a stable/final claim.
85
+
86
+ R58 FRONTEND BACKEND BRIDGE PERFORMANCE CONSOLIDATION
87
+ ------------------------------------------------------
88
+ 0.15.35 is the published production-accepted consolidation predecessor to R59. R58 keeps its 0.15.34 predecessor immutable while unifying human/JSON runtime state, expanding read-only Doctor diagnostics, hardening foreground-session identity, and moving the Bridge into the immutable release package instead of relying on a mutable external workspace. The updater binds the bundled Bridge script plus its complete recursive local static-import dependency closure; dynamic relative imports, path escape, ambiguous core topology, and dependency byte drift remain fail-closed. The 4-hour soak and clean-machine proof were retained as NOT_COMPLETED, and the historical release did not make a stable/final claim.
89
+
32
90
  R57 BOUNDED CORE STARTUP DISCOVERY HOTFIX
33
91
  ------------------------------------------
34
92
  0.15.34 fixes the restart-verification race observed during the signed 0.15.33 -> 0.15.32 rollback acceptance. After the controller reported ONLINE and local-ready, the verifier sampled the verified bridge's downstream core process exactly once; on the failing run the bridge existed but its mcp-server child had not yet appeared in the process snapshot. R57 adds a bounded 10-second discovery wait that retries only the exact zero-child condition. Ambiguous or multiple-child topologies still fail immediately, timeout remains fail-closed, and the signed launcher/pointer rollback ordering from R56 is preserved. 0.15.33 remains immutable and published.
@@ -288,7 +346,7 @@ CONTROLLER
288
346
  ----------
289
347
  Primary operator entry point:
290
348
 
291
- npx -y deadbyte-mcp@0.15.34 remote
349
+ npx -y deadbyte-mcp@0.15.35 remote
292
350
 
293
351
  The legacy CMD entry remains compatibility-only for R33 rollback safety.
294
352
 
@@ -349,7 +407,7 @@ MCP CLIENT CONFIGURATION
349
407
  ------------------------
350
408
  The local stdio entry point is quiet and suitable for MCP hosts:
351
409
 
352
- npx -y deadbyte-mcp@0.15.34 mcp
410
+ npx -y deadbyte-mcp@0.15.35 mcp
353
411
 
354
412
  CLAUDE DESKTOP
355
413
  Use the standard local-server entry in claude_desktop_config.json:
@@ -358,7 +416,7 @@ Use the standard local-server entry in claude_desktop_config.json:
358
416
  "mcpServers": {
359
417
  "deadbyte": {
360
418
  "command": "npx",
361
- "args": ["-y", "deadbyte-mcp@0.15.34", "mcp"]
419
+ "args": ["-y", "deadbyte-mcp@0.15.35", "mcp"]
362
420
  }
363
421
  }
364
422
  }
@@ -371,7 +429,7 @@ Create .cursor/mcp.json:
371
429
  "deadbyte": {
372
430
  "type": "stdio",
373
431
  "command": "npx",
374
- "args": ["-y", "deadbyte-mcp@0.15.34", "mcp"]
432
+ "args": ["-y", "deadbyte-mcp@0.15.35", "mcp"]
375
433
  }
376
434
  }
377
435
  }
@@ -384,7 +442,7 @@ Create .vscode/mcp.json:
384
442
  "deadbyte": {
385
443
  "type": "stdio",
386
444
  "command": "npx",
387
- "args": ["-y", "deadbyte-mcp@0.15.34", "mcp"]
445
+ "args": ["-y", "deadbyte-mcp@0.15.35", "mcp"]
388
446
  }
389
447
  }
390
448
  }
@@ -394,9 +452,9 @@ Add this to ~/.codex/config.toml:
394
452
 
395
453
  [mcp_servers.deadbyte]
396
454
  command = "npx"
397
- args = ["-y", "deadbyte-mcp@0.15.34", "mcp"]
455
+ args = ["-y", "deadbyte-mcp@0.15.35", "mcp"]
398
456
 
399
- The remote device path remains `npx -y deadbyte-mcp@0.15.34 remote`. Remote public MCP uses the
457
+ The remote device path remains `npx -y deadbyte-mcp@0.15.35 remote`. Remote public MCP uses the
400
458
  verified HTTPS named-tunnel URL selected by the active generation; do not commit a private device
401
459
  URL or tunnel token into a repository.
402
460
 
package/RELEASE.json CHANGED
@@ -1,150 +1,187 @@
1
- {
2
- "schema": "deadbyte.release.v1",
3
- "name": "deadbyte-mcp",
4
- "version": "0.15.34",
5
- "train": "R57",
6
- "label": "BOUNDED CORE STARTUP DISCOVERY HOTFIX",
7
- "protocol_revision": "2026-07-28",
8
- "parent": {
9
- "version": "0.15.33",
10
- "release_id": "v0.15.33-776a51cb916e28dd",
11
- "manifest_sha256": "776a51cb916e28ddc3cbb2ecd3857151a0e73e0aaf83d4e6308e6674125dd01c",
12
- "generation_manifest_sha256": "20ccc5e4bbf8470b61e0a6d2ad181dad5e8533da980ceba7749e1d6f48d9dbd3",
13
- "tarball_sha256": "d84a6df0a972a43c50d5e31242d9217f59858b2d73c4284af296da76d2048e5f",
14
- "activation_status": "ACTIVATED_ROLLBACK_CORE_DISCOVERY_RACE_OBSERVED"
15
- },
16
- "runtime_predecessor": {
17
- "release_id": "v0.15.33-776a51cb916e28dd",
18
- "manifest_sha256": "776a51cb916e28ddc3cbb2ecd3857151a0e73e0aaf83d4e6308e6674125dd01c",
19
- "generation_manifest_sha256": "20ccc5e4bbf8470b61e0a6d2ad181dad5e8533da980ceba7749e1d6f48d9dbd3"
20
- },
21
- "source_predecessor": {
22
- "version": "0.15.33",
23
- "tarball_sha256": "d84a6df0a972a43c50d5e31242d9217f59858b2d73c4284af296da76d2048e5f",
24
- "manifest_file_sha256": "776a51cb916e28ddc3cbb2ecd3857151a0e73e0aaf83d4e6308e6674125dd01c"
25
- },
26
- "hotfix": {
27
- "defect": "runtime restart verification samples downstream core once immediately after ONLINE and can race process visibility",
28
- "bounded_core_discovery_after_online": true,
29
- "retry_only_missing_core": true,
30
- "ambiguous_core_fail_closed": true,
31
- "timeout_fail_closed": true,
32
- "parent_rollback_reached_exact_0_15_32": true,
33
- "parent_recovery_restored_exact_0_15_33": true,
34
- "exact_parent_activation_receipt_sha256": "5da29c0c6e7858d518f1ece5e3509ac9ac9e2079f4117a83827a0d432018a4d0",
35
- "observed_parent_rollback_state_sha256": "e4ffcdb92a997bb49f936dfc338701b81601ad0ded97284f5d615f4276786608",
36
- "red_parent_0_15_33": "FAIL_5_OF_5",
37
- "green_r57_candidate": "PASS_5_OF_5",
38
- "full_regression": "PASS",
39
- "stable_final_claim": false
40
- },
41
- "stabilization": {
42
- "semver_strict_validation": true,
43
- "powershell_child_environment_normalized": true,
44
- "explicit_state_root_propagation": true,
45
- "guardian_cleanup_fail_closed": true,
46
- "local_isolated_state_acceptance": "PASS",
47
- "full_regression": "PASS",
48
- "four_hour_soak": "NOT_COMPLETED_OPERATOR_BYPASS",
49
- "stable_final_claim": false
50
- },
51
- "platform": {
52
- "primary": "win32",
53
- "architectures": [
54
- "x64"
55
- ]
56
- },
57
- "capabilities": {
58
- "host_execution_modes": [
59
- "script",
60
- "inline",
61
- "native"
62
- ],
63
- "hardware_queries": [
64
- "cpu",
65
- "gpu",
66
- "memory",
67
- "storage",
68
- "network",
69
- "pci"
70
- ],
71
- "compact_tool_count": 43,
72
- "full_tool_count": 117,
73
- "full_tool_catalog": {
74
- "path": "docs/R49-FULL-TOOL-CATALOG.json",
75
- "base_sha256": "259fdc97a24575aff3f094911b5e86e4f512b07be7c2cc1286b0fd200d03a8c9"
76
- },
77
- "historical_r46_full_tool_count": 84,
78
- "commander_reference_public_tool_count": 26,
79
- "commander_additive_tool_count": 14,
80
- "commander_drop_in": true,
81
- "commander_rich_pdf": true,
82
- "commander_incremental_pdf_revisions": true,
83
- "commander_docx": true,
84
- "commander_docx_header_footer_search": true,
85
- "commander_xlsx": true,
86
- "commander_url_read": true,
87
- "commander_external_process_identity": true,
88
- "commander_directory_read_fallback": true,
89
- "commander_binary_detection": true,
90
- "commander_protocol_adversarial": true,
91
- "atomic_mutation_unknown_effect": true,
92
- "package_slot_version_coherence": true,
93
- "pid_reuse_self_recovery": true,
94
- "bounded_controller_failure_evidence": true,
95
- "durable_task_events_preserve_signed_envelope": true,
96
- "capability_manifest_authority_truth": true,
97
- "capability_manifest_host_grant_truth": true,
98
- "process_profiles": [
99
- "ping_hold",
100
- "powershell",
101
- "powershell_repl"
102
- ],
103
- "powershell_fileless": true,
104
- "powershell_source_max_arg_bytes": 8192,
105
- "powershell_persistent_repl": true,
106
- "process_raw_input_profile_opt_in": true,
107
- "process_tail_reads": true,
108
- "process_wait_reads": true,
109
- "process_chunked_output_ring": true,
110
- "remote_reachability_ttl": true,
111
- "remote_probe_timeout_retry": true,
112
- "remote_dispatch_timeout_no_retry": true,
113
- "observation_search_session_ttl": true,
114
- "observation_search_session_cap": 128,
115
- "windows_queries": [
116
- "registry",
117
- "services",
118
- "drivers",
119
- "sockets",
120
- "volumes",
121
- "usb",
122
- "wsl"
123
- ],
124
- "machine_fs_list_entry_fault_isolation": true,
125
- "native_windows_observation": true,
126
- "desktop_bounded_semantic_wait": true,
127
- "desktop_wait_signed_final_observation": true,
128
- "desktop_wait_autonomous_goal_binding": true,
129
- "native_windows_observer_sha256": "c9b46fc497b55b8f0ad1564c8e15f9c1cdf2a07f206b3c8fa7966c892058e920",
130
- "human_livelog_visual_opcode": true,
131
- "human_livelog_absolute_root_paths": true,
132
- "human_livelog_trace_span": true,
133
- "human_livelog_presentation_filter": true,
134
- "human_livelog_tty_in_place_rewrite": true,
135
- "human_livelog_expanded_summary": true,
136
- "runtime_package_auto_coherence": true,
137
- "coding_command_singleflight": true,
138
- "coding_command_result_dedup_cache": true,
139
- "foreground_desktop_host_fail_closed": true,
140
- "human_livelog_slow_call_marker": true,
141
- "human_livelog_peak_inflight": true,
142
- "human_livelog_bounded_discovery": true,
143
- "human_livelog_single_parse": true,
144
- "offline_predecessor_host_revoke_before_capture": true,
145
- "offline_recovery_self_process_exclusion": true,
146
- "offline_recovery_foreground_guardian_family_exclusion": true,
147
- "signed_rollback_launcher_snapshot_restore": true,
148
- "bounded_core_startup_discovery": true
149
- }
150
- }
1
+ {
2
+ "schema": "deadbyte.release.v1",
3
+ "name": "deadbyte-mcp",
4
+ "version": "0.15.36",
5
+ "train": "R59",
6
+ "label": "RESILIENT CORE BRIDGE CAPABILITY RUNTIME",
7
+ "protocol_revision": "2026-07-28",
8
+ "parent": {
9
+ "version": "0.15.35",
10
+ "release_id": "v0.15.35-1b5715b276facbc0",
11
+ "manifest_sha256": "1b5715b276facbc00f8e341a554472cb4829e5af60e221c357c41b66053af9d4",
12
+ "generation_manifest_sha256": "047e73b62d7b7819b84201a221a09b7e647cacf21f82101ebed4fbd7e23fc430",
13
+ "tarball_sha256": "8259e30946d28dd138c1e2ce2f483fe1370d1658544f2adbfebafa4db8875bba",
14
+ "activation_status": "PRODUCTION_ACCEPTED_WITH_SIGNED_ROLLBACK_AND_RESTORE"
15
+ },
16
+ "runtime_predecessor": {
17
+ "release_id": "v0.15.35-1b5715b276facbc0",
18
+ "manifest_sha256": "1b5715b276facbc00f8e341a554472cb4829e5af60e221c357c41b66053af9d4",
19
+ "generation_manifest_sha256": "047e73b62d7b7819b84201a221a09b7e647cacf21f82101ebed4fbd7e23fc430"
20
+ },
21
+ "source_predecessor": {
22
+ "version": "0.15.35",
23
+ "tarball_sha256": "8259e30946d28dd138c1e2ce2f483fe1370d1658544f2adbfebafa4db8875bba",
24
+ "manifest_file_sha256": "1b5715b276facbc00f8e341a554472cb4829e5af60e221c357c41b66053af9d4"
25
+ },
26
+ "consolidation": {
27
+ "frontend_status_vocabulary": true,
28
+ "read_only_structured_status": true,
29
+ "doctor_read_only_installation_runtime_transaction_checks": true,
30
+ "stale_foreground_identity_hardening": true,
31
+ "bridge_bundled_inside_release": true,
32
+ "bridge_recursive_local_dependency_binding": true,
33
+ "bridge_dynamic_relative_import_fail_closed": true,
34
+ "bridge_path_escape_fail_closed": true,
35
+ "isolated_controller_bridge_core_lifecycle": "PASS",
36
+ "performance_acceptance": "PASS_BOUNDED_PREPUBLISH",
37
+ "fresh_full_regression": "PASS",
38
+ "package_acceptance": "PENDING_R59_FINAL",
39
+ "registry_round_trip": "PENDING",
40
+ "production_activation_rollback_restore": "PENDING",
41
+ "stable_final_claim": false,
42
+ "cross_plane_acceptance": "PASS",
43
+ "public_surface_compatibility": "PASS_43_TOOLS_NO_SCHEMA_DRIFT"
44
+ },
45
+ "stabilization": {
46
+ "semver_strict_validation": true,
47
+ "powershell_child_environment_normalized": true,
48
+ "explicit_state_root_propagation": true,
49
+ "guardian_cleanup_fail_closed": true,
50
+ "local_isolated_state_acceptance": "PASS",
51
+ "full_regression": "PASS",
52
+ "four_hour_soak": "WAIVED_BY_OPERATOR",
53
+ "clean_machine": "WAIVED_BY_OPERATOR",
54
+ "stable_final_claim": false
55
+ },
56
+ "platform": {
57
+ "primary": "win32",
58
+ "architectures": [
59
+ "x64"
60
+ ]
61
+ },
62
+ "capabilities": {
63
+ "host_execution_modes": [
64
+ "script",
65
+ "inline",
66
+ "native"
67
+ ],
68
+ "hardware_queries": [
69
+ "cpu",
70
+ "gpu",
71
+ "memory",
72
+ "storage",
73
+ "network",
74
+ "pci"
75
+ ],
76
+ "compact_tool_count": 43,
77
+ "full_tool_count": 117,
78
+ "full_tool_catalog": {
79
+ "path": "docs/R49-FULL-TOOL-CATALOG.json",
80
+ "base_sha256": "259fdc97a24575aff3f094911b5e86e4f512b07be7c2cc1286b0fd200d03a8c9"
81
+ },
82
+ "historical_r46_full_tool_count": 84,
83
+ "commander_reference_public_tool_count": 26,
84
+ "commander_additive_tool_count": 14,
85
+ "commander_drop_in": true,
86
+ "commander_rich_pdf": true,
87
+ "commander_incremental_pdf_revisions": true,
88
+ "commander_docx": true,
89
+ "commander_docx_header_footer_search": true,
90
+ "commander_xlsx": true,
91
+ "commander_url_read": true,
92
+ "commander_external_process_identity": true,
93
+ "commander_directory_read_fallback": true,
94
+ "commander_binary_detection": true,
95
+ "commander_protocol_adversarial": true,
96
+ "atomic_mutation_unknown_effect": true,
97
+ "package_slot_version_coherence": true,
98
+ "pid_reuse_self_recovery": true,
99
+ "bounded_controller_failure_evidence": true,
100
+ "durable_task_events_preserve_signed_envelope": true,
101
+ "capability_manifest_authority_truth": true,
102
+ "capability_manifest_host_grant_truth": true,
103
+ "process_profiles": [
104
+ "ping_hold",
105
+ "powershell",
106
+ "powershell_repl"
107
+ ],
108
+ "powershell_fileless": true,
109
+ "powershell_source_max_arg_bytes": 8192,
110
+ "powershell_persistent_repl": true,
111
+ "process_raw_input_profile_opt_in": true,
112
+ "process_tail_reads": true,
113
+ "process_wait_reads": true,
114
+ "process_chunked_output_ring": true,
115
+ "remote_reachability_ttl": true,
116
+ "remote_probe_timeout_retry": true,
117
+ "remote_dispatch_timeout_no_retry": true,
118
+ "observation_search_session_ttl": true,
119
+ "observation_search_session_cap": 128,
120
+ "windows_queries": [
121
+ "registry",
122
+ "services",
123
+ "drivers",
124
+ "sockets",
125
+ "volumes",
126
+ "usb",
127
+ "wsl"
128
+ ],
129
+ "machine_fs_list_entry_fault_isolation": true,
130
+ "native_windows_observation": true,
131
+ "desktop_bounded_semantic_wait": true,
132
+ "desktop_wait_signed_final_observation": true,
133
+ "desktop_wait_autonomous_goal_binding": true,
134
+ "native_windows_observer_sha256": "c9b46fc497b55b8f0ad1564c8e15f9c1cdf2a07f206b3c8fa7966c892058e920",
135
+ "human_livelog_visual_opcode": true,
136
+ "human_livelog_absolute_root_paths": true,
137
+ "human_livelog_trace_span": true,
138
+ "human_livelog_presentation_filter": true,
139
+ "human_livelog_tty_in_place_rewrite": true,
140
+ "human_livelog_expanded_summary": true,
141
+ "runtime_package_auto_coherence": true,
142
+ "coding_command_singleflight": true,
143
+ "coding_command_result_dedup_cache": true,
144
+ "foreground_desktop_host_fail_closed": true,
145
+ "human_livelog_slow_call_marker": true,
146
+ "human_livelog_peak_inflight": true,
147
+ "human_livelog_bounded_discovery": true,
148
+ "human_livelog_single_parse": true,
149
+ "offline_predecessor_host_revoke_before_capture": true,
150
+ "offline_recovery_self_process_exclusion": true,
151
+ "offline_recovery_foreground_guardian_family_exclusion": true,
152
+ "signed_rollback_launcher_snapshot_restore": true,
153
+ "bounded_core_startup_discovery": true,
154
+ "bundled_release_bridge": true,
155
+ "bridge_recursive_dependency_binding": true,
156
+ "doctor_read_only_diagnostics": true,
157
+ "coherent_structured_status": true,
158
+ "optional_plane_degradation": true,
159
+ "capability_manifest_v3": true,
160
+ "bridge_bounded_reconciliation": true,
161
+ "mutation_unknown_outcome_no_replay": true,
162
+ "controller_policy_root_preflight": true
163
+ },
164
+ "r59_runtime_hardening": {
165
+ "optional_plane_degradation": true,
166
+ "stable_tool_registration_on_optional_failure": true,
167
+ "capability_manifest_v3": true,
168
+ "live_overlay_authority_ceiling": true,
169
+ "bridge_bounded_reconciliation": true,
170
+ "bridge_health_requires_fresh_child_catalog_capability_attestation": true,
171
+ "mutation_unknown_outcome_no_replay": true,
172
+ "read_only_retry_only_before_dispatch": true,
173
+ "cancellation_aware_governor": true,
174
+ "controller_policy_root_preflight": true,
175
+ "public_surface_compatibility": "PASS_43_TOOLS_NO_SCHEMA_DRIFT",
176
+ "frontdoor_signed_ping": "PASS",
177
+ "four_hour_soak": "NOT_COMPLETED",
178
+ "clean_machine": "NOT_COMPLETED",
179
+ "stable_final_claim": false
180
+ },
181
+ "operator_override": {
182
+ "four_hour_soak": "WAIVED_BY_OPERATOR",
183
+ "clean_machine": "WAIVED_BY_OPERATOR",
184
+ "reason": "Operator explicitly requested immediate deployment without further testing.",
185
+ "stable_final_claim": false
186
+ }
187
+ }
package/SBOM.cdx.json CHANGED
@@ -1,13 +1,13 @@
1
1
  {
2
2
  "bomFormat": "CycloneDX",
3
3
  "specVersion": "1.6",
4
- "serialNumber": "urn:cdx:deadbyte-mcp:r57:0.15.34",
4
+ "serialNumber": "urn:cdx:deadbyte-mcp:r59:0.15.36",
5
5
  "version": 1,
6
6
  "metadata": {
7
7
  "component": {
8
8
  "type": "application",
9
9
  "name": "deadbyte-mcp",
10
- "version": "0.15.34"
10
+ "version": "0.15.36"
11
11
  }
12
12
  },
13
13
  "components": [
@@ -34,13 +34,35 @@
34
34
  {
35
35
  "type": "file",
36
36
  "name": "deadbyte-hardware-observer-r45.exe",
37
- "version": "0.15.34",
37
+ "version": "0.15.36",
38
38
  "hashes": [
39
39
  {
40
40
  "alg": "SHA-256",
41
41
  "content": "c9b46fc497b55b8f0ad1564c8e15f9c1cdf2a07f206b3c8fa7966c892058e920"
42
42
  }
43
43
  ]
44
+ },
45
+ {
46
+ "type": "file",
47
+ "name": "deadbyte-r59-bundled-bridge",
48
+ "version": "0.15.36",
49
+ "hashes": [
50
+ {
51
+ "alg": "SHA-256",
52
+ "content": "32aa34687e26e37a1ad6b34245b37aa1c7523ce216225a2d189fed4f6c4ff346"
53
+ }
54
+ ]
55
+ },
56
+ {
57
+ "type": "file",
58
+ "name": "deadbyte-r59-node-http-adapter",
59
+ "version": "0.15.36",
60
+ "hashes": [
61
+ {
62
+ "alg": "SHA-256",
63
+ "content": "281985edd717b991d78fe1853057a6a6cbf6fc5b57cab48ed8444b09b15dcd6e"
64
+ }
65
+ ]
44
66
  }
45
67
  ]
46
68
  }