deadbyte-mcp 0.15.34 → 0.15.36
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/MANIFEST.SHA256 +100 -38
- package/PROVENANCE.json +87 -41
- package/README.txt +72 -14
- package/RELEASE.json +187 -150
- package/SBOM.cdx.json +25 -3
- package/TEST-MATRIX.json +258 -151
- package/bridge/package.json +13 -0
- package/bridge/src/bridge-health-r59.mjs +52 -0
- package/bridge/src/bridge.mjs +487 -0
- package/bridge/src/node-http-adapter.mjs +56 -0
- package/bridge/src/public-tool-definitions.mjs +14 -0
- package/bridge/src/r40-governor.mjs +206 -0
- package/controller/deadbyte-controller.ps1 +152 -18
- package/controller/deadbyte-process-policy.json +4 -4
- package/docs/R59-TASK-CONTRACT.md +26 -0
- package/package.json +7 -3
- package/proof/r59-full-regression-current.json +13 -0
- package/proof/r59-full-regression-current.stderr.log +0 -0
- package/proof/r59-full-regression-current.stdout.log +1268 -0
- package/scripts/bridge-benchmark-r58.mjs +67 -0
- package/scripts/deploy-r48.mjs +2 -3
- package/scripts/gate-windows-r58.ps1 +33 -0
- package/scripts/gate-windows-r59-prepublish.ps1 +41 -0
- package/scripts/owner-probe-r58.mjs +31 -0
- package/scripts/performance-r58.mjs +57 -0
- package/scripts/public-baseline-r58.mjs +72 -0
- package/scripts/public-surface-r58.mjs +84 -0
- package/scripts/r58-cross-plane.ps1 +6 -0
- package/scripts/r58-focused.ps1 +6 -0
- package/scripts/r59-full-regression-capture.mjs +35 -0
- package/scripts/windows-gate-evidence-r58.mjs +93 -0
- package/src/capability-resolver.mjs +25 -7
- package/src/capability-snapshot.mjs +52 -0
- package/src/compact-gateway-mcp-tools.mjs +10 -11
- package/src/deadbyte-cli.mjs +40 -12
- package/src/doctor-foreground-r58.mjs +44 -0
- package/src/doctor-installation-r58.mjs +63 -0
- package/src/doctor-r45.mjs +21 -4
- package/src/doctor-runtime-r58.mjs +82 -0
- package/src/doctor-transactions-r58.mjs +40 -0
- package/src/foreground-process-identity.mjs +27 -0
- package/src/foreground-session-lock.mjs +20 -0
- package/src/foreground-session-lock.ps1 +15 -0
- package/src/mcp-server.mjs +179 -118
- package/src/r40-compact-disarmed-probe.mjs +1 -1
- package/src/r44-compact-disarmed-probe.mjs +1 -1
- package/src/r45-compact-disarmed-probe.mjs +1 -1
- package/src/release-generation.mjs +1 -0
- package/src/release-slot.mjs +2 -1
- package/src/remote-mcp-r40-parity-client.mjs +1 -1
- package/src/remote-mcp-r44-parity-client.mjs +1 -1
- package/src/remote-mcp-r45-parity-client.mjs +1 -1
- package/src/remote-mcp-smoke-client.mjs +1 -1
- package/src/remote-session-guardian.mjs +8 -1
- package/src/runtime-plane-registry.mjs +74 -0
- package/src/runtime-update.mjs +85 -2
- package/src/version.mjs +1 -1
- package/test/bridge-runtime-r59.test.mjs +60 -0
- package/test/capability-resolver.test.mjs +16 -0
- package/test/capability-snapshot-r59.test.mjs +39 -0
- package/test/compact-gateway-r36.test.mjs +22 -2
- package/test/compact-max-catalog-r44.test.mjs +1 -1
- package/test/compact-max-catalog-r45.test.mjs +1 -1
- package/test/contained.test.mjs +2 -1
- package/test/controller-policy-preflight-r59.test.mjs +39 -0
- package/test/controller-r211.test.mjs +4 -1
- package/test/controller.test.mjs +2 -1
- package/test/fixtures/r59-compact-surface-v0.15.35.json +222 -0
- package/test/helpers/r58-doctor-fixture.mjs +26 -0
- package/test/observation-integration.test.mjs +2 -3
- package/test/optional-plane-degraded-r59.test.mjs +44 -0
- package/test/r49-windows-gate.test.mjs +2 -2
- package/test/r57-release-contract.test.mjs +5 -3
- package/test/r58-bridge-dependency-binding.test.mjs +62 -0
- package/test/r58-bundled-bridge.test.mjs +24 -0
- package/test/r58-cleanup-retention.test.mjs +45 -0
- package/test/r58-completed-update-receipt.test.mjs +76 -0
- package/test/r58-concurrent-recovery.test.mjs +54 -0
- package/test/r58-controller-core-observation.test.mjs +36 -0
- package/test/r58-controller-json.test.mjs +48 -0
- package/test/r58-controller-live-local.test.mjs +98 -0
- package/test/r58-controller-readonly.test.mjs +23 -0
- package/test/r58-controller-state-coherence.test.mjs +45 -0
- package/test/r58-doctor-cli.test.mjs +20 -0
- package/test/r58-doctor-foreground.test.mjs +50 -0
- package/test/r58-doctor-installation.test.mjs +55 -0
- package/test/r58-doctor-pointer.test.mjs +41 -0
- package/test/r58-doctor-runtime.test.mjs +45 -0
- package/test/r58-doctor-transactions.test.mjs +21 -0
- package/test/r58-guardian-channel.test.mjs +26 -0
- package/test/r58-launcher-shell.test.mjs +28 -0
- package/test/r58-owner-identity.test.mjs +20 -0
- package/test/r58-release-contract.test.mjs +50 -0
- package/test/r58-session-lock.test.mjs +26 -0
- package/test/r58-stale-owner.test.mjs +71 -0
- package/test/r58-windows-gate.test.mjs +32 -0
- package/test/r59-release-contract.test.mjs +61 -0
- package/test/r59-tool-surface-compat.test.mjs +90 -0
- package/test/release-generation.test.mjs +4 -1
- package/test/remote-session-cli.test.mjs +55 -2
- package/test/runtime-plane-registry-r59.test.mjs +40 -0
package/README.txt
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
DEADBYTE MCP V0.15.
|
|
1
|
+
DEADBYTE MCP V0.15.36 / R59 DEGRADED RUNTIME + BRIDGE RECONCILIATION
|
|
2
2
|
=========================
|
|
3
3
|
|
|
4
4
|
AUTHENTICATED MACHINE TRUTH + DURABLE AGENT + CODING + AUTONOMOUS PRODUCTION ENGINE
|
|
@@ -7,12 +7,58 @@ NPX PRIMARY OPERATOR UX
|
|
|
7
7
|
------------------------
|
|
8
8
|
Use the npm CLI entry point instead of the legacy CMD convenience wrapper:
|
|
9
9
|
|
|
10
|
-
npx -y deadbyte-mcp@0.15.
|
|
11
|
-
npx -y deadbyte-mcp@0.15.
|
|
12
|
-
npx -y deadbyte-mcp@0.15.
|
|
13
|
-
npx -y deadbyte-mcp@0.15.
|
|
14
|
-
npx -y deadbyte-mcp@0.15.
|
|
15
|
-
npx -y deadbyte-mcp@0.15.
|
|
10
|
+
npx -y deadbyte-mcp@0.15.36 mcp
|
|
11
|
+
npx -y deadbyte-mcp@0.15.36 remote
|
|
12
|
+
npx -y deadbyte-mcp@0.15.36 remote status
|
|
13
|
+
npx -y deadbyte-mcp@0.15.36 remote restart
|
|
14
|
+
npx -y deadbyte-mcp@0.15.36 audit status
|
|
15
|
+
npx -y deadbyte-mcp@0.15.36 audit verify
|
|
16
|
+
|
|
17
|
+
MAJOR MCP CLIENT STDIO CONFIGS
|
|
18
|
+
-------------------------------
|
|
19
|
+
|
|
20
|
+
CLAUDE DESKTOP
|
|
21
|
+
|
|
22
|
+
{
|
|
23
|
+
"mcpServers": {
|
|
24
|
+
"deadbyte": {
|
|
25
|
+
"command": "npx",
|
|
26
|
+
"args": ["-y", "deadbyte-mcp@0.15.36", "mcp"]
|
|
27
|
+
}
|
|
28
|
+
}
|
|
29
|
+
}
|
|
30
|
+
|
|
31
|
+
CURSOR
|
|
32
|
+
Save as .cursor/mcp.json:
|
|
33
|
+
|
|
34
|
+
{
|
|
35
|
+
"mcpServers": {
|
|
36
|
+
"deadbyte": {
|
|
37
|
+
"command": "npx",
|
|
38
|
+
"args": ["-y", "deadbyte-mcp@0.15.36", "mcp"]
|
|
39
|
+
}
|
|
40
|
+
}
|
|
41
|
+
}
|
|
42
|
+
|
|
43
|
+
VS CODE
|
|
44
|
+
Save as .vscode/mcp.json:
|
|
45
|
+
|
|
46
|
+
{
|
|
47
|
+
"servers": {
|
|
48
|
+
"deadbyte": {
|
|
49
|
+
"type": "stdio",
|
|
50
|
+
"command": "npx",
|
|
51
|
+
"args": ["-y", "deadbyte-mcp@0.15.36", "mcp"]
|
|
52
|
+
}
|
|
53
|
+
}
|
|
54
|
+
}
|
|
55
|
+
|
|
56
|
+
CODEX
|
|
57
|
+
Add to the Codex MCP configuration:
|
|
58
|
+
|
|
59
|
+
[mcp_servers.deadbyte]
|
|
60
|
+
command = "npx"
|
|
61
|
+
args = ["-y", "deadbyte-mcp@0.15.36", "mcp"]
|
|
16
62
|
|
|
17
63
|
The `mcp` command is the quiet stdio server entry for local MCP clients; stdout is reserved for MCP.
|
|
18
64
|
The remote CLI invokes the stable active-release PowerShell launcher directly with shell=false.
|
|
@@ -29,6 +75,18 @@ and a random 256-bit session nonce, prevents concurrent foreground sessions, and
|
|
|
29
75
|
recover only a dead, unguarded stale owner. Explicit subcommands such as `remote status` remain
|
|
30
76
|
one-shot controller operations.
|
|
31
77
|
|
|
78
|
+
R59 DEGRADED RUNTIME + BRIDGE RECONCILIATION
|
|
79
|
+
---------------------------------------------
|
|
80
|
+
0.15.36 is the bounded successor to production-accepted 0.15.35. Optional-plane initialization failures now degrade only their dependent capabilities while preserving the stable public 43-tool compact catalog and fail-closed mutation semantics. Capability manifest v3 adds a content-bound live availability overlay without widening the signed capability ledger or creating new roots, executables, routes, or authority.
|
|
81
|
+
|
|
82
|
+
Bridge readiness now requires a fresh downstream Core identity, MCP negotiation, catalog attestation, and capability snapshot. Core loss enters bounded reconciliation: queued work is cancelled or classified, mutation and unknown outcomes are never replayed, and recovery must re-attest before returning READY. Controller preflight rejects missing policy roots before authority can be armed. Public frontdoor readiness is verified with an independently checkable Ed25519 machine ping rather than tunnel-process existence alone.
|
|
83
|
+
|
|
84
|
+
This release is operator-authorized with the four-hour soak and clean-machine proof explicitly NOT_COMPLETED. Those limitations remain recorded in release provenance and do not permit a stable/final claim.
|
|
85
|
+
|
|
86
|
+
R58 FRONTEND BACKEND BRIDGE PERFORMANCE CONSOLIDATION
|
|
87
|
+
------------------------------------------------------
|
|
88
|
+
0.15.35 is the published production-accepted consolidation predecessor to R59. R58 keeps its 0.15.34 predecessor immutable while unifying human/JSON runtime state, expanding read-only Doctor diagnostics, hardening foreground-session identity, and moving the Bridge into the immutable release package instead of relying on a mutable external workspace. The updater binds the bundled Bridge script plus its complete recursive local static-import dependency closure; dynamic relative imports, path escape, ambiguous core topology, and dependency byte drift remain fail-closed. The 4-hour soak and clean-machine proof were retained as NOT_COMPLETED, and the historical release did not make a stable/final claim.
|
|
89
|
+
|
|
32
90
|
R57 BOUNDED CORE STARTUP DISCOVERY HOTFIX
|
|
33
91
|
------------------------------------------
|
|
34
92
|
0.15.34 fixes the restart-verification race observed during the signed 0.15.33 -> 0.15.32 rollback acceptance. After the controller reported ONLINE and local-ready, the verifier sampled the verified bridge's downstream core process exactly once; on the failing run the bridge existed but its mcp-server child had not yet appeared in the process snapshot. R57 adds a bounded 10-second discovery wait that retries only the exact zero-child condition. Ambiguous or multiple-child topologies still fail immediately, timeout remains fail-closed, and the signed launcher/pointer rollback ordering from R56 is preserved. 0.15.33 remains immutable and published.
|
|
@@ -288,7 +346,7 @@ CONTROLLER
|
|
|
288
346
|
----------
|
|
289
347
|
Primary operator entry point:
|
|
290
348
|
|
|
291
|
-
npx -y deadbyte-mcp@0.15.
|
|
349
|
+
npx -y deadbyte-mcp@0.15.35 remote
|
|
292
350
|
|
|
293
351
|
The legacy CMD entry remains compatibility-only for R33 rollback safety.
|
|
294
352
|
|
|
@@ -349,7 +407,7 @@ MCP CLIENT CONFIGURATION
|
|
|
349
407
|
------------------------
|
|
350
408
|
The local stdio entry point is quiet and suitable for MCP hosts:
|
|
351
409
|
|
|
352
|
-
npx -y deadbyte-mcp@0.15.
|
|
410
|
+
npx -y deadbyte-mcp@0.15.35 mcp
|
|
353
411
|
|
|
354
412
|
CLAUDE DESKTOP
|
|
355
413
|
Use the standard local-server entry in claude_desktop_config.json:
|
|
@@ -358,7 +416,7 @@ Use the standard local-server entry in claude_desktop_config.json:
|
|
|
358
416
|
"mcpServers": {
|
|
359
417
|
"deadbyte": {
|
|
360
418
|
"command": "npx",
|
|
361
|
-
"args": ["-y", "deadbyte-mcp@0.15.
|
|
419
|
+
"args": ["-y", "deadbyte-mcp@0.15.35", "mcp"]
|
|
362
420
|
}
|
|
363
421
|
}
|
|
364
422
|
}
|
|
@@ -371,7 +429,7 @@ Create .cursor/mcp.json:
|
|
|
371
429
|
"deadbyte": {
|
|
372
430
|
"type": "stdio",
|
|
373
431
|
"command": "npx",
|
|
374
|
-
"args": ["-y", "deadbyte-mcp@0.15.
|
|
432
|
+
"args": ["-y", "deadbyte-mcp@0.15.35", "mcp"]
|
|
375
433
|
}
|
|
376
434
|
}
|
|
377
435
|
}
|
|
@@ -384,7 +442,7 @@ Create .vscode/mcp.json:
|
|
|
384
442
|
"deadbyte": {
|
|
385
443
|
"type": "stdio",
|
|
386
444
|
"command": "npx",
|
|
387
|
-
"args": ["-y", "deadbyte-mcp@0.15.
|
|
445
|
+
"args": ["-y", "deadbyte-mcp@0.15.35", "mcp"]
|
|
388
446
|
}
|
|
389
447
|
}
|
|
390
448
|
}
|
|
@@ -394,9 +452,9 @@ Add this to ~/.codex/config.toml:
|
|
|
394
452
|
|
|
395
453
|
[mcp_servers.deadbyte]
|
|
396
454
|
command = "npx"
|
|
397
|
-
args = ["-y", "deadbyte-mcp@0.15.
|
|
455
|
+
args = ["-y", "deadbyte-mcp@0.15.35", "mcp"]
|
|
398
456
|
|
|
399
|
-
The remote device path remains `npx -y deadbyte-mcp@0.15.
|
|
457
|
+
The remote device path remains `npx -y deadbyte-mcp@0.15.35 remote`. Remote public MCP uses the
|
|
400
458
|
verified HTTPS named-tunnel URL selected by the active generation; do not commit a private device
|
|
401
459
|
URL or tunnel token into a repository.
|
|
402
460
|
|
package/RELEASE.json
CHANGED
|
@@ -1,150 +1,187 @@
|
|
|
1
|
-
{
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
"
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
"
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
"
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
106
|
-
|
|
107
|
-
|
|
108
|
-
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
|
|
113
|
-
|
|
114
|
-
|
|
115
|
-
|
|
116
|
-
|
|
117
|
-
|
|
118
|
-
|
|
119
|
-
|
|
120
|
-
|
|
121
|
-
|
|
122
|
-
|
|
123
|
-
|
|
124
|
-
|
|
125
|
-
|
|
126
|
-
|
|
127
|
-
|
|
128
|
-
|
|
129
|
-
|
|
130
|
-
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
|
|
134
|
-
|
|
135
|
-
|
|
136
|
-
|
|
137
|
-
|
|
138
|
-
|
|
139
|
-
|
|
140
|
-
|
|
141
|
-
|
|
142
|
-
|
|
143
|
-
|
|
144
|
-
|
|
145
|
-
|
|
146
|
-
|
|
147
|
-
|
|
148
|
-
|
|
149
|
-
|
|
150
|
-
|
|
1
|
+
{
|
|
2
|
+
"schema": "deadbyte.release.v1",
|
|
3
|
+
"name": "deadbyte-mcp",
|
|
4
|
+
"version": "0.15.36",
|
|
5
|
+
"train": "R59",
|
|
6
|
+
"label": "RESILIENT CORE BRIDGE CAPABILITY RUNTIME",
|
|
7
|
+
"protocol_revision": "2026-07-28",
|
|
8
|
+
"parent": {
|
|
9
|
+
"version": "0.15.35",
|
|
10
|
+
"release_id": "v0.15.35-1b5715b276facbc0",
|
|
11
|
+
"manifest_sha256": "1b5715b276facbc00f8e341a554472cb4829e5af60e221c357c41b66053af9d4",
|
|
12
|
+
"generation_manifest_sha256": "047e73b62d7b7819b84201a221a09b7e647cacf21f82101ebed4fbd7e23fc430",
|
|
13
|
+
"tarball_sha256": "8259e30946d28dd138c1e2ce2f483fe1370d1658544f2adbfebafa4db8875bba",
|
|
14
|
+
"activation_status": "PRODUCTION_ACCEPTED_WITH_SIGNED_ROLLBACK_AND_RESTORE"
|
|
15
|
+
},
|
|
16
|
+
"runtime_predecessor": {
|
|
17
|
+
"release_id": "v0.15.35-1b5715b276facbc0",
|
|
18
|
+
"manifest_sha256": "1b5715b276facbc00f8e341a554472cb4829e5af60e221c357c41b66053af9d4",
|
|
19
|
+
"generation_manifest_sha256": "047e73b62d7b7819b84201a221a09b7e647cacf21f82101ebed4fbd7e23fc430"
|
|
20
|
+
},
|
|
21
|
+
"source_predecessor": {
|
|
22
|
+
"version": "0.15.35",
|
|
23
|
+
"tarball_sha256": "8259e30946d28dd138c1e2ce2f483fe1370d1658544f2adbfebafa4db8875bba",
|
|
24
|
+
"manifest_file_sha256": "1b5715b276facbc00f8e341a554472cb4829e5af60e221c357c41b66053af9d4"
|
|
25
|
+
},
|
|
26
|
+
"consolidation": {
|
|
27
|
+
"frontend_status_vocabulary": true,
|
|
28
|
+
"read_only_structured_status": true,
|
|
29
|
+
"doctor_read_only_installation_runtime_transaction_checks": true,
|
|
30
|
+
"stale_foreground_identity_hardening": true,
|
|
31
|
+
"bridge_bundled_inside_release": true,
|
|
32
|
+
"bridge_recursive_local_dependency_binding": true,
|
|
33
|
+
"bridge_dynamic_relative_import_fail_closed": true,
|
|
34
|
+
"bridge_path_escape_fail_closed": true,
|
|
35
|
+
"isolated_controller_bridge_core_lifecycle": "PASS",
|
|
36
|
+
"performance_acceptance": "PASS_BOUNDED_PREPUBLISH",
|
|
37
|
+
"fresh_full_regression": "PASS",
|
|
38
|
+
"package_acceptance": "PENDING_R59_FINAL",
|
|
39
|
+
"registry_round_trip": "PENDING",
|
|
40
|
+
"production_activation_rollback_restore": "PENDING",
|
|
41
|
+
"stable_final_claim": false,
|
|
42
|
+
"cross_plane_acceptance": "PASS",
|
|
43
|
+
"public_surface_compatibility": "PASS_43_TOOLS_NO_SCHEMA_DRIFT"
|
|
44
|
+
},
|
|
45
|
+
"stabilization": {
|
|
46
|
+
"semver_strict_validation": true,
|
|
47
|
+
"powershell_child_environment_normalized": true,
|
|
48
|
+
"explicit_state_root_propagation": true,
|
|
49
|
+
"guardian_cleanup_fail_closed": true,
|
|
50
|
+
"local_isolated_state_acceptance": "PASS",
|
|
51
|
+
"full_regression": "PASS",
|
|
52
|
+
"four_hour_soak": "WAIVED_BY_OPERATOR",
|
|
53
|
+
"clean_machine": "WAIVED_BY_OPERATOR",
|
|
54
|
+
"stable_final_claim": false
|
|
55
|
+
},
|
|
56
|
+
"platform": {
|
|
57
|
+
"primary": "win32",
|
|
58
|
+
"architectures": [
|
|
59
|
+
"x64"
|
|
60
|
+
]
|
|
61
|
+
},
|
|
62
|
+
"capabilities": {
|
|
63
|
+
"host_execution_modes": [
|
|
64
|
+
"script",
|
|
65
|
+
"inline",
|
|
66
|
+
"native"
|
|
67
|
+
],
|
|
68
|
+
"hardware_queries": [
|
|
69
|
+
"cpu",
|
|
70
|
+
"gpu",
|
|
71
|
+
"memory",
|
|
72
|
+
"storage",
|
|
73
|
+
"network",
|
|
74
|
+
"pci"
|
|
75
|
+
],
|
|
76
|
+
"compact_tool_count": 43,
|
|
77
|
+
"full_tool_count": 117,
|
|
78
|
+
"full_tool_catalog": {
|
|
79
|
+
"path": "docs/R49-FULL-TOOL-CATALOG.json",
|
|
80
|
+
"base_sha256": "259fdc97a24575aff3f094911b5e86e4f512b07be7c2cc1286b0fd200d03a8c9"
|
|
81
|
+
},
|
|
82
|
+
"historical_r46_full_tool_count": 84,
|
|
83
|
+
"commander_reference_public_tool_count": 26,
|
|
84
|
+
"commander_additive_tool_count": 14,
|
|
85
|
+
"commander_drop_in": true,
|
|
86
|
+
"commander_rich_pdf": true,
|
|
87
|
+
"commander_incremental_pdf_revisions": true,
|
|
88
|
+
"commander_docx": true,
|
|
89
|
+
"commander_docx_header_footer_search": true,
|
|
90
|
+
"commander_xlsx": true,
|
|
91
|
+
"commander_url_read": true,
|
|
92
|
+
"commander_external_process_identity": true,
|
|
93
|
+
"commander_directory_read_fallback": true,
|
|
94
|
+
"commander_binary_detection": true,
|
|
95
|
+
"commander_protocol_adversarial": true,
|
|
96
|
+
"atomic_mutation_unknown_effect": true,
|
|
97
|
+
"package_slot_version_coherence": true,
|
|
98
|
+
"pid_reuse_self_recovery": true,
|
|
99
|
+
"bounded_controller_failure_evidence": true,
|
|
100
|
+
"durable_task_events_preserve_signed_envelope": true,
|
|
101
|
+
"capability_manifest_authority_truth": true,
|
|
102
|
+
"capability_manifest_host_grant_truth": true,
|
|
103
|
+
"process_profiles": [
|
|
104
|
+
"ping_hold",
|
|
105
|
+
"powershell",
|
|
106
|
+
"powershell_repl"
|
|
107
|
+
],
|
|
108
|
+
"powershell_fileless": true,
|
|
109
|
+
"powershell_source_max_arg_bytes": 8192,
|
|
110
|
+
"powershell_persistent_repl": true,
|
|
111
|
+
"process_raw_input_profile_opt_in": true,
|
|
112
|
+
"process_tail_reads": true,
|
|
113
|
+
"process_wait_reads": true,
|
|
114
|
+
"process_chunked_output_ring": true,
|
|
115
|
+
"remote_reachability_ttl": true,
|
|
116
|
+
"remote_probe_timeout_retry": true,
|
|
117
|
+
"remote_dispatch_timeout_no_retry": true,
|
|
118
|
+
"observation_search_session_ttl": true,
|
|
119
|
+
"observation_search_session_cap": 128,
|
|
120
|
+
"windows_queries": [
|
|
121
|
+
"registry",
|
|
122
|
+
"services",
|
|
123
|
+
"drivers",
|
|
124
|
+
"sockets",
|
|
125
|
+
"volumes",
|
|
126
|
+
"usb",
|
|
127
|
+
"wsl"
|
|
128
|
+
],
|
|
129
|
+
"machine_fs_list_entry_fault_isolation": true,
|
|
130
|
+
"native_windows_observation": true,
|
|
131
|
+
"desktop_bounded_semantic_wait": true,
|
|
132
|
+
"desktop_wait_signed_final_observation": true,
|
|
133
|
+
"desktop_wait_autonomous_goal_binding": true,
|
|
134
|
+
"native_windows_observer_sha256": "c9b46fc497b55b8f0ad1564c8e15f9c1cdf2a07f206b3c8fa7966c892058e920",
|
|
135
|
+
"human_livelog_visual_opcode": true,
|
|
136
|
+
"human_livelog_absolute_root_paths": true,
|
|
137
|
+
"human_livelog_trace_span": true,
|
|
138
|
+
"human_livelog_presentation_filter": true,
|
|
139
|
+
"human_livelog_tty_in_place_rewrite": true,
|
|
140
|
+
"human_livelog_expanded_summary": true,
|
|
141
|
+
"runtime_package_auto_coherence": true,
|
|
142
|
+
"coding_command_singleflight": true,
|
|
143
|
+
"coding_command_result_dedup_cache": true,
|
|
144
|
+
"foreground_desktop_host_fail_closed": true,
|
|
145
|
+
"human_livelog_slow_call_marker": true,
|
|
146
|
+
"human_livelog_peak_inflight": true,
|
|
147
|
+
"human_livelog_bounded_discovery": true,
|
|
148
|
+
"human_livelog_single_parse": true,
|
|
149
|
+
"offline_predecessor_host_revoke_before_capture": true,
|
|
150
|
+
"offline_recovery_self_process_exclusion": true,
|
|
151
|
+
"offline_recovery_foreground_guardian_family_exclusion": true,
|
|
152
|
+
"signed_rollback_launcher_snapshot_restore": true,
|
|
153
|
+
"bounded_core_startup_discovery": true,
|
|
154
|
+
"bundled_release_bridge": true,
|
|
155
|
+
"bridge_recursive_dependency_binding": true,
|
|
156
|
+
"doctor_read_only_diagnostics": true,
|
|
157
|
+
"coherent_structured_status": true,
|
|
158
|
+
"optional_plane_degradation": true,
|
|
159
|
+
"capability_manifest_v3": true,
|
|
160
|
+
"bridge_bounded_reconciliation": true,
|
|
161
|
+
"mutation_unknown_outcome_no_replay": true,
|
|
162
|
+
"controller_policy_root_preflight": true
|
|
163
|
+
},
|
|
164
|
+
"r59_runtime_hardening": {
|
|
165
|
+
"optional_plane_degradation": true,
|
|
166
|
+
"stable_tool_registration_on_optional_failure": true,
|
|
167
|
+
"capability_manifest_v3": true,
|
|
168
|
+
"live_overlay_authority_ceiling": true,
|
|
169
|
+
"bridge_bounded_reconciliation": true,
|
|
170
|
+
"bridge_health_requires_fresh_child_catalog_capability_attestation": true,
|
|
171
|
+
"mutation_unknown_outcome_no_replay": true,
|
|
172
|
+
"read_only_retry_only_before_dispatch": true,
|
|
173
|
+
"cancellation_aware_governor": true,
|
|
174
|
+
"controller_policy_root_preflight": true,
|
|
175
|
+
"public_surface_compatibility": "PASS_43_TOOLS_NO_SCHEMA_DRIFT",
|
|
176
|
+
"frontdoor_signed_ping": "PASS",
|
|
177
|
+
"four_hour_soak": "NOT_COMPLETED",
|
|
178
|
+
"clean_machine": "NOT_COMPLETED",
|
|
179
|
+
"stable_final_claim": false
|
|
180
|
+
},
|
|
181
|
+
"operator_override": {
|
|
182
|
+
"four_hour_soak": "WAIVED_BY_OPERATOR",
|
|
183
|
+
"clean_machine": "WAIVED_BY_OPERATOR",
|
|
184
|
+
"reason": "Operator explicitly requested immediate deployment without further testing.",
|
|
185
|
+
"stable_final_claim": false
|
|
186
|
+
}
|
|
187
|
+
}
|
package/SBOM.cdx.json
CHANGED
|
@@ -1,13 +1,13 @@
|
|
|
1
1
|
{
|
|
2
2
|
"bomFormat": "CycloneDX",
|
|
3
3
|
"specVersion": "1.6",
|
|
4
|
-
"serialNumber": "urn:cdx:deadbyte-mcp:
|
|
4
|
+
"serialNumber": "urn:cdx:deadbyte-mcp:r59:0.15.36",
|
|
5
5
|
"version": 1,
|
|
6
6
|
"metadata": {
|
|
7
7
|
"component": {
|
|
8
8
|
"type": "application",
|
|
9
9
|
"name": "deadbyte-mcp",
|
|
10
|
-
"version": "0.15.
|
|
10
|
+
"version": "0.15.36"
|
|
11
11
|
}
|
|
12
12
|
},
|
|
13
13
|
"components": [
|
|
@@ -34,13 +34,35 @@
|
|
|
34
34
|
{
|
|
35
35
|
"type": "file",
|
|
36
36
|
"name": "deadbyte-hardware-observer-r45.exe",
|
|
37
|
-
"version": "0.15.
|
|
37
|
+
"version": "0.15.36",
|
|
38
38
|
"hashes": [
|
|
39
39
|
{
|
|
40
40
|
"alg": "SHA-256",
|
|
41
41
|
"content": "c9b46fc497b55b8f0ad1564c8e15f9c1cdf2a07f206b3c8fa7966c892058e920"
|
|
42
42
|
}
|
|
43
43
|
]
|
|
44
|
+
},
|
|
45
|
+
{
|
|
46
|
+
"type": "file",
|
|
47
|
+
"name": "deadbyte-r59-bundled-bridge",
|
|
48
|
+
"version": "0.15.36",
|
|
49
|
+
"hashes": [
|
|
50
|
+
{
|
|
51
|
+
"alg": "SHA-256",
|
|
52
|
+
"content": "32aa34687e26e37a1ad6b34245b37aa1c7523ce216225a2d189fed4f6c4ff346"
|
|
53
|
+
}
|
|
54
|
+
]
|
|
55
|
+
},
|
|
56
|
+
{
|
|
57
|
+
"type": "file",
|
|
58
|
+
"name": "deadbyte-r59-node-http-adapter",
|
|
59
|
+
"version": "0.15.36",
|
|
60
|
+
"hashes": [
|
|
61
|
+
{
|
|
62
|
+
"alg": "SHA-256",
|
|
63
|
+
"content": "281985edd717b991d78fe1853057a6a6cbf6fc5b57cab48ed8444b09b15dcd6e"
|
|
64
|
+
}
|
|
65
|
+
]
|
|
44
66
|
}
|
|
45
67
|
]
|
|
46
68
|
}
|