deadbyte-mcp 0.15.34 → 0.15.36

package/bridge/src/r40-governor.mjs

@@ -0,0 +1,206 @@
+import { createHash } from 'node:crypto';
+
+const DESKTOP_RAW_KEYS=new Set([
+  'pixels','pixel_bytes','frame_bytes','raw_bgra','raw_rgba','raw_image','screenshot_bytes','bitmap_bytes'
+]);
+const DEFAULT_LIMITS=Object.freeze({
+  normal:Object.freeze({max_active:8,max_queue:32,queue_timeout_ms:30000}),
+  autonomous:Object.freeze({max_active:2,max_queue:8,queue_timeout_ms:60000}),
+  desktop_observe:Object.freeze({max_active:2,max_queue:4,queue_timeout_ms:10000}),
+  desktop_action:Object.freeze({max_active:1,max_queue:2,queue_timeout_ms:5000})
+});
+const DEADLINES=Object.freeze({
+  normal:Object.freeze({timeout:120000,maxTotalTimeout:180000}),
+  autonomous:Object.freeze({timeout:900000,maxTotalTimeout:1200000}),
+  desktop_observe:Object.freeze({timeout:30000,maxTotalTimeout:60000}),
+  desktop_action:Object.freeze({timeout:30000,maxTotalTimeout:45000})
+});
+
+function insist(condition,message){ if(!condition) throw new Error(message); }
+function toolClass(name){
+  const value=String(name??'');
+  if(value==='autonomous_goal_run') return 'autonomous';
+  if(value==='desktop_action') return 'desktop_action';
+  if(value.startsWith('desktop_')) return 'desktop_observe';
+  return 'normal';
+}
+function estimateBase64Bytes(value){
+  if(typeof value!=='string') return 0;
+  const clean=value.replace(/\s/g,'');
+  if(clean.length===0) return 0;
+  const padding=clean.endsWith('==')?2:clean.endsWith('=')?1:0;
+  return Math.floor(clean.length*3/4)-padding;
+}
+function scanDesktopPayload(value,{maxPreviewBytes},path='result',seen=new Set()){
+  if(value===null||value===undefined) return;
+  if(typeof value==='string'||typeof value==='number'||typeof value==='boolean') return;
+  if(typeof value!=='object') return;
+  if(seen.has(value)) throw new Error('bridge desktop result contains cyclic value');
+  seen.add(value);
+  if(Array.isArray(value)){
+    for(let i=0;i<value.length;i++) scanDesktopPayload(value[i],{maxPreviewBytes},`${path}[${i}]`,seen);
+    seen.delete(value); return;
+  }
+  for(const [key,child] of Object.entries(value)){
+    const lower=key.toLowerCase();
+    if(DESKTOP_RAW_KEYS.has(lower)) throw new Error(`bridge desktop result contains forbidden raw frame field '${path}.${key}'`);
+    if((lower==='preview_png_base64'||lower==='preview_jpeg_base64')&&typeof child==='string'){
+      const bytes=estimateBase64Bytes(child);
+      if(bytes>maxPreviewBytes) throw new Error(`bridge desktop preview exceeds ${maxPreviewBytes} byte limit`);
+    }
+    if(lower==='data'&&value.type==='image'&&typeof child==='string'){
+      const bytes=estimateBase64Bytes(child);
+      if(bytes>maxPreviewBytes) throw new Error(`bridge MCP image content exceeds ${maxPreviewBytes} byte limit`);
+    }
+    scanDesktopPayload(child,{maxPreviewBytes},`${path}.${key}`,seen);
+  }
+  seen.delete(value);
+}
+
+export function bridgeToolClass(name){ return toolClass(name); }
+export function bridgeDeadlineForTool(name){ return DEADLINES[toolClass(name)]; }
+export function bridgeCatalogSha256(toolNames){
+  insist(Array.isArray(toolNames)&&toolNames.every(x=>typeof x==='string'),'bridge catalog names invalid');
+  const sorted=[...new Set(toolNames)].sort();
+  insist(sorted.length===toolNames.length,'bridge catalog contains duplicate tool name');
+  return createHash('sha256').update(JSON.stringify(sorted),'utf8').digest('hex');
+}
+export function verifyCompactCatalogAttestation(actualNames,toolResult){
+  insist(Array.isArray(actualNames)&&actualNames.every(x=>typeof x==='string'&&x.length>0),'actual bridge catalog invalid');
+  const actual=[...actualNames].sort();
+  insist(new Set(actual).size===actual.length,'actual bridge catalog contains duplicate tool name');
+  const envelope=toolResult?.structuredContent;
+  insist(envelope?.status==='ok'&&envelope?.op==='manifest','capability manifest tool result invalid');
+  const manifest=envelope.result;
+  insist(manifest?.schema==='deadbyte.capability-manifest.v2'||manifest?.schema==='deadbyte.capability-manifest.v3','capability manifest schema mismatch');
+  insist(manifest.profile==='compact','capability manifest profile mismatch');
+  insist(typeof manifest.ledger_sha256==='string'&&/^[0-9a-f]{64}$/.test(manifest.ledger_sha256),'capability manifest ledger hash invalid');
+  insist(Array.isArray(manifest.tool_catalog)&&manifest.tool_catalog.every(x=>typeof x==='string'&&x.length>0),'capability manifest tool_catalog invalid');
+  const declared=[...manifest.tool_catalog];
+  insist(declared.length===manifest.tool_count,'capability manifest tool_count mismatch');
+  insist(new Set(declared).size===declared.length,'capability manifest catalog contains duplicate tool name');
+  insist(JSON.stringify(declared)===JSON.stringify([...declared].sort()),'capability manifest catalog must be sorted');
+  const declaredSha=bridgeCatalogSha256(declared);
+  insist(declaredSha===manifest.catalog_sha256,'capability manifest catalog hash mismatch');
+  insist(JSON.stringify(actual)===JSON.stringify(declared),'bridge listTools/catalog attestation mismatch');
+  return Object.freeze({
+    ok:true,profile:'compact',tool_count:declared.length,catalog_sha256:declaredSha,ledger_sha256:manifest.ledger_sha256
+  });
+}
+
+export function enforceDesktopBridgeResult(toolName,result,{maxPreviewBytes=1024*1024}={}){
+  if(!String(toolName??'').startsWith('desktop_')) return result;
+  insist(Number.isInteger(maxPreviewBytes)&&maxPreviewBytes>=16*1024&&maxPreviewBytes<=4*1024*1024,'maxPreviewBytes invalid');
+  scanDesktopPayload(result,{maxPreviewBytes});
+  return result;
+}
+
+export function createBridgeGovernor({limits=DEFAULT_LIMITS}={}){
+  const classes=['normal','autonomous','desktop_observe','desktop_action'];
+  for(const name of classes){
+    const cfg=limits[name];
+    insist(cfg&&Number.isInteger(cfg.max_active)&&cfg.max_active>=1&&cfg.max_active<=64,`bridge limit ${name}.max_active invalid`);
+    insist(Number.isInteger(cfg.max_queue)&&cfg.max_queue>=0&&cfg.max_queue<=256,`bridge limit ${name}.max_queue invalid`);
+    insist(Number.isInteger(cfg.queue_timeout_ms)&&cfg.queue_timeout_ms>=100&&cfg.queue_timeout_ms<=120000,`bridge limit ${name}.queue_timeout_ms invalid`);
+  }
+  const state=new Map(classes.map(name=>[name,{active:0,queue:[],admitted:0,completed:0,rejected:0,timed_out:0,cancelled:0}]));
+  let sequence=0;
+  let closed=false;
+  const drainWaiters=[];
+
+  function finishDrain(){
+    if(!closed||[...state.values()].some(item=>item.active>0||item.queue.some(waiter=>!waiter.done))) return;
+    while(drainWaiters.length) drainWaiters.shift()();
+  }
+
+  function dispatch(name){
+    const cfg=limits[name],s=state.get(name);
+    while(s.active<cfg.max_active&&s.queue.length){
+      const waiter=s.queue.shift();
+      if(waiter.done) continue;
+      waiter.done=true; clearTimeout(waiter.timer); waiter.cleanup(); s.active++; s.admitted++;
+      waiter.resolve(makeTicket(name,waiter.tool,waiter.id,waiter.queuedAt));
+    }
+  }
+  function makeTicket(name,tool,id,queuedAt){
+    let released=false;
+    return Object.freeze({
+      id,class:name,tool,queued_ms:Math.max(0,Date.now()-queuedAt),
+      release(){
+        if(released) return false;
+        released=true;
+        const s=state.get(name);
+        s.active=Math.max(0,s.active-1);s.completed++;
+        dispatch(name);
+        finishDrain();
+        return true;
+      }
+    });
+  }
+  async function acquire(tool,{signal}={}){
+    const name=toolClass(tool),cfg=limits[name],s=state.get(name),id=++sequence,queuedAt=Date.now();
+    if(closed){s.rejected++;throw new Error('bridge governor closed');}
+    if(signal?.aborted){s.cancelled++;throw signal.reason instanceof Error?signal.reason:new Error('bridge request aborted');}
+    if(s.active<cfg.max_active){
+      s.active++;s.admitted++;
+      return makeTicket(name,String(tool),id,queuedAt);
+    }
+    if(s.queue.length>=cfg.max_queue){s.rejected++;throw new Error(`bridge backpressure queue full for ${name}`);}
+    return await new Promise((resolve,reject)=>{
+      const waiter={id,tool:String(tool),queuedAt,resolve,reject,done:false,timer:null,cleanup:()=>{}};
+      const abort=()=>{
+        if(waiter.done)return;
+        waiter.done=true;clearTimeout(waiter.timer);waiter.cleanup();
+        const index=s.queue.indexOf(waiter);if(index>=0)s.queue.splice(index,1);
+        s.cancelled++;reject(signal?.reason instanceof Error?signal.reason:new Error('bridge request aborted'));finishDrain();
+      };
+      waiter.cleanup=()=>signal?.removeEventListener?.('abort',abort);
+      signal?.addEventListener?.('abort',abort,{once:true});
+      waiter.timer=setTimeout(()=>{
+        if(waiter.done)return;
+        waiter.done=true;waiter.cleanup();s.timed_out++;
+        const index=s.queue.indexOf(waiter); if(index>=0)s.queue.splice(index,1);
+        reject(new Error(`bridge backpressure queue timeout for ${name}`));
+        finishDrain();
+      },cfg.queue_timeout_ms);
+      s.queue.push(waiter);
+    });
+  }
+  function close(reason='bridge governor closed'){
+    if(!closed){
+      closed=true;
+      for(const s of state.values()){
+        for(const waiter of s.queue.splice(0)){
+          if(waiter.done)continue;
+          waiter.done=true;clearTimeout(waiter.timer);waiter.cleanup();s.cancelled++;
+          waiter.reject(new Error(String(reason)));
+        }
+      }
+    }
+    if([...state.values()].every(item=>item.active===0)) return Promise.resolve();
+    return new Promise(resolve=>drainWaiters.push(resolve));
+  }
+  function reconcile(reason='bridge downstream reconciling'){
+    if(closed) return 0;
+    let removed=0;
+    for(const s of state.values()){
+      for(const waiter of s.queue.splice(0)){
+        if(waiter.done)continue;
+        waiter.done=true;clearTimeout(waiter.timer);waiter.cleanup();s.cancelled++;removed++;
+        waiter.reject(new Error(String(reason)));
+      }
+    }
+    return removed;
+  }
+  function snapshot(){
+    return Object.freeze(Object.fromEntries(classes.map(name=>{
+      const s=state.get(name),cfg=limits[name];
+      return [name,Object.freeze({active:s.active,queued:s.queue.filter(x=>!x.done).length,max_active:cfg.max_active,max_queue:cfg.max_queue,
+        admitted:s.admitted,completed:s.completed,rejected:s.rejected,timed_out:s.timed_out,cancelled:s.cancelled,saturated:s.active>=cfg.max_active})];
+    })));
+  }
+  return Object.freeze({acquire,reconcile,close,snapshot});
+}
+
+export const BRIDGE_R40_DEFAULT_LIMITS=DEFAULT_LIMITS;
+

package/controller/deadbyte-controller.ps1

@@ -3,7 +3,8 @@
 param(
     [Parameter(Position=0)]
     [ValidateSet('menu','start','resume','park','stop','restart','status','url','test','fulltest','toggle','clean','machinetest','armprocess','disarmprocess','processstatus','armhost','disarmhost','hoststatus','hosttest','armcoding','disarmcoding','codingstatus','codingtest','armautonomous','disarmautonomous','autonomousstatus','autonomoustest','supervisorstart','supervisorstop','supervisorstatus','supervisorrecover','armdesktop','disarmdesktop','desktopstatus')]
-    [string]$Command = 'menu'
+    [string]$Command = 'menu',
+    [switch]$Json
 )
 
 Set-StrictMode -Version 3.0
@@ -16,6 +17,7 @@ $LogDir = Join-Path $RuntimeDir 'logs'
 $ConfigPath = if ($env:DEADBYTE_CONTROLLER_CONFIG) { $env:DEADBYTE_CONTROLLER_CONFIG } else { Join-Path $Root 'deadbyte-controller.config.psd1' }
 
 function Fail([string]$Message) { throw "DEADBYTE controller: $Message" }
+if ($Json -and $Command -ne 'status') { Fail 'JSON observation is available only for status' }
 
 function Get-ControllerMutationMutexName {
     $normalized = ([System.IO.Path]::GetFullPath($RuntimeDir)).TrimEnd('\\').ToLowerInvariant()
@@ -683,11 +685,31 @@ function Stop-OwnedComponent([string]$Name) {
     Remove-Item -LiteralPath (Ledger-Path $Name) -Force -ErrorAction SilentlyContinue
 }
 
-function Test-LocalReady($Cfg) {
+function Get-LocalHealth($Cfg) {
+    $response = $null
+    try {
+        $request = [System.Net.HttpWebRequest]::Create([string]$Cfg.LocalReadyUri)
+        $request.Timeout = [int]$Cfg.ProbeTimeoutSeconds * 1000
+        $request.ReadWriteTimeout = [int]$Cfg.ProbeTimeoutSeconds * 1000
+        $response = $request.GetResponse()
+    } catch [System.Net.WebException] {
+        $response = $_.Exception.Response
+        if ($null -eq $response) { return [pscustomobject]@{ State='UNREACHABLE'; StatusCode=0; Diagnostic='readiness endpoint unreachable' } }
+    } catch { return [pscustomobject]@{ State='UNREACHABLE'; StatusCode=0; Diagnostic='readiness probe failed' } }
     try {
-        $r = Invoke-WebRequest -UseBasicParsing -Uri ([string]$Cfg.LocalReadyUri) -TimeoutSec ([int]$Cfg.ProbeTimeoutSeconds)
-        return ($r.StatusCode -ge 200 -and $r.StatusCode -lt 300)
-    } catch { return $false }
+        $status = [int]$response.StatusCode
+        $reader = New-Object System.IO.StreamReader($response.GetResponseStream())
+        try { $body = $reader.ReadToEnd() } finally { $reader.Dispose() }
+        try { $parsed = $body | ConvertFrom-Json } catch { return [pscustomobject]@{ State='INVALID'; StatusCode=$status; Diagnostic='readiness response JSON invalid' } }
+        if ($parsed.schema -ne 'deadbyte.bridge-health.v1' -or [string]$parsed.state -notin @('STARTING','READY','DEGRADED','RECONCILING','STOPPING')) {
+            return [pscustomobject]@{ State='INVALID'; StatusCode=$status; Diagnostic='readiness response schema invalid' }
+        }
+        return [pscustomobject]@{ State=[string]$parsed.state; StatusCode=$status; Diagnostic=[string]$parsed.diagnostic }
+    } finally { if ($null -ne $response) { $response.Dispose() } }
+}
+function Test-LocalReady($Cfg) {
+    $health = Get-LocalHealth $Cfg
+    return ($health.State -eq 'READY' -and $health.StatusCode -ge 200 -and $health.StatusCode -lt 300)
 }
 function Get-LocalReadyListenerOwners($Cfg) {
     try { $uri = [Uri]([string]$Cfg.LocalReadyUri) } catch { Fail 'LocalReadyUri is invalid' }
@@ -717,16 +739,43 @@ function Test-LocalReadyOwned($Cfg, $Bridge) {
     if ($owners.Count -ne 1 -or $owners[0] -ne [int]$Bridge.Ledger.pid) { return $false }
     return (Test-LocalReady $Cfg)
 }
+function Get-LocalHealthOwned($Cfg, $Bridge) {
+    if (-not $Bridge -or -not $Bridge.Alive) { return [pscustomobject]@{ State='UNREACHABLE'; StatusCode=0; Diagnostic='bridge not alive' } }
+    $owners = @(Get-LocalReadyListenerOwners $Cfg)
+    if ($owners.Count -ne 1 -or $owners[0] -ne [int]$Bridge.Ledger.pid) { return [pscustomobject]@{ State='UNATTRIBUTED'; StatusCode=0; Diagnostic='readiness listener ownership mismatch' } }
+    return (Get-LocalHealth $Cfg)
+}
 
 function Get-ObservedState($Cfg) {
     $bridge = Test-OwnedInstance 'Bridge'
     $cloud = Test-OwnedInstance 'Cloud'
-    $ready = if ($bridge.Alive) { try { Test-LocalReadyOwned $Cfg $bridge } catch { $false } } else { $false }
+    $core = Get-DownstreamCoreObservation $Cfg $bridge
+    $health = if ($bridge.Alive -and $core.alive) { try { Get-LocalHealthOwned $Cfg $bridge } catch { [pscustomobject]@{ State='UNREACHABLE'; StatusCode=0; Diagnostic='readiness attribution failed' } } } else { [pscustomobject]@{ State='UNREACHABLE'; StatusCode=0; Diagnostic='core not alive' } }
+    $ready = $health.State -eq 'READY'
     $state = if (-not $bridge.Alive -and -not $cloud.Alive) { 'OFFLINE' }
              elseif (-not $bridge.Alive -and $cloud.Alive) { 'PARKED' }
              elseif ($bridge.Alive -and $cloud.Alive -and $ready) { 'ONLINE' }
-             else { 'DEGRADED' }
-    [pscustomobject]@{ State=$state; Bridge=$bridge; Cloud=$cloud; LocalReady=$ready }
+             elseif ($bridge.Alive -and $cloud.Alive -and $core.alive -and $health.State -eq 'DEGRADED') { 'DEGRADED' }
+             elseif ($bridge.Alive -and $core.reason -eq 'startup-zero-child') { 'STARTING' }
+             else { 'FAILED' }
+    [pscustomobject]@{ State=$state; Bridge=$bridge; Core=$core; Cloud=$cloud; LocalReady=$ready; LocalHealth=$health }
+}
+
+function Wait-LocalOperational($Cfg) {
+    $deadline = [DateTime]::UtcNow.AddSeconds([int]$Cfg.StartTimeoutSeconds)
+    do {
+        $bridge = Test-OwnedInstance 'Bridge'
+        if (-not $bridge.Alive) { return $null }
+        $core = Get-DownstreamCoreObservation $Cfg $bridge
+        if (-not $core.alive -and $core.reason -ne 'startup-zero-child') { return $null }
+        if ($core.alive) {
+            $health = Get-LocalHealthOwned $Cfg $bridge
+            if ($health.State -in @('READY','DEGRADED')) { return $health }
+        }
+        if ([DateTime]::UtcNow -ge $deadline) { return $null }
+        Start-Sleep -Milliseconds 250
+    } while ([DateTime]::UtcNow -lt $deadline)
+    return $null
 }
 
 function Wait-LocalReady($Cfg) {
@@ -734,7 +783,10 @@ function Wait-LocalReady($Cfg) {
     do {
         $bridge = Test-OwnedInstance 'Bridge'
         if (-not $bridge.Alive) { return $false }
-        if (Test-LocalReadyOwned $Cfg $bridge) { return $true }
+        $core = Get-DownstreamCoreObservation $Cfg $bridge
+        if (-not $core.alive -and $core.reason -ne 'startup-zero-child') { return $false }
+        if ($core.alive -and (Test-LocalReadyOwned $Cfg $bridge)) { return $true }
+        if ([DateTime]::UtcNow -ge $deadline) { return $false }
         Start-Sleep -Milliseconds 250
     } while ([DateTime]::UtcNow -lt $deadline)
     return $false
@@ -835,17 +887,18 @@ function Invoke-CoreGate($Cfg, [string]$ScriptName, [string[]]$ExtraArguments =
 
 function Start-Deadbyte($Cfg) {
     $state = Get-ObservedState $Cfg
-    if ($state.State -eq 'ONLINE') { return $state }
-    if ($state.State -eq 'DEGRADED') { Fail 'runtime is DEGRADED; use status and stop only if identities remain verified' }
+    if ($state.State -in @('ONLINE','DEGRADED')) { return $state }
+    if ($state.State -in @('FAILED','STARTING')) { Fail "runtime is $($state.State); inspect status and reconcile verified owned components before restart" }
     $cloudWasAlive = [bool]$state.Cloud.Alive
     Assert-LocalReadyPortAvailable $Cfg
     try {
         Start-OwnedComponent 'Bridge' $Cfg.Bridge $Cfg | Out-Null
-        if (-not (Wait-LocalReady $Cfg)) { Fail 'bridge started but owned local readiness gate failed' }
+        $localHealth = Wait-LocalOperational $Cfg
+        if ($null -eq $localHealth) { Fail 'bridge started but owned local readiness gate failed' }
         Start-OwnedComponent 'Cloud' $Cfg.Cloud $Cfg | Out-Null
         if (-not (Wait-CurrentUrl $Cfg)) { Fail 'public endpoint metadata did not become available before timeout' }
         $final = Get-ObservedState $Cfg
-        if ($final.State -ne 'ONLINE') { Fail "start gate failed: observed $($final.State)" }
+        if ($final.State -notin @('ONLINE','DEGRADED')) { Fail "start gate failed: observed $($final.State)" }
         return $final
     } catch {
         try { Stop-OwnedComponent 'Bridge' } catch {}
@@ -872,6 +925,18 @@ function Stop-Deadbyte($Cfg) {
     return $s
 }
 
+function Assert-PolicyRootsAvailable($Policy, [string]$Plane) {
+    $rootIds = @($Policy.roots.PSObject.Properties.Name)
+    if ($rootIds.Count -lt 1) { Fail "$Plane policy requires at least one root" }
+    foreach ($rootId in $rootIds) {
+        $raw = [string]$Policy.roots.$rootId.path
+        if ([string]::IsNullOrWhiteSpace($raw)) { Fail "$Plane policy root '$rootId' path missing" }
+        try { $full = [System.IO.Path]::GetFullPath($raw) } catch { Fail "$Plane policy root '$rootId' path invalid" }
+        if (-not (Test-Path -LiteralPath $full -PathType Container)) { Fail "$Plane policy root '$rootId' missing: $full" }
+    }
+    return $rootIds
+}
+
 function Get-HostPolicyMetadata($Cfg) {
     if ([string]::IsNullOrWhiteSpace([string]$Cfg.HostPolicyFile)) { Fail 'privileged host plane is not configured' }
     $policyPath = [string]$Cfg.HostPolicyFile
@@ -881,6 +946,7 @@ function Get-HostPolicyMetadata($Cfg) {
     $armFile = [System.IO.Path]::GetFullPath([string]$policy.arm_file)
     $runtimeReal = [System.IO.Path]::GetFullPath($RuntimeDir).TrimEnd('\') + '\'
     if (-not $armFile.StartsWith($runtimeReal, [System.StringComparison]::OrdinalIgnoreCase)) { Fail 'host policy arm_file must live under controller runtime directory' }
+    Assert-PolicyRootsAvailable $policy 'host' | Out-Null
     [pscustomobject]@{
         Path = $policyPath
         Sha256 = Get-ExecutableHash $policyPath
@@ -943,7 +1009,7 @@ function Get-ProcessPolicyMetadata($Cfg) {
     $runtimeReal = [System.IO.Path]::GetFullPath($RuntimeDir).TrimEnd('\') + '\'
     if (-not $grantFile.StartsWith($runtimeReal, [System.StringComparison]::OrdinalIgnoreCase)) { Fail 'process policy grant_file must live under controller runtime directory' }
     $profileIds = @($policy.profiles.PSObject.Properties.Name)
-    $rootIds = @($policy.roots.PSObject.Properties.Name)
+    $rootIds = @(Assert-PolicyRootsAvailable $policy 'process')
     if ($profileIds.Count -lt 1 -or $rootIds.Count -lt 1) { Fail 'process policy requires profiles and roots' }
     [pscustomobject]@{ Path=$policyPath; Sha256=Get-ExecutableHash $policyPath; GrantFile=$grantFile; ProfileIds=$profileIds; RootIds=$rootIds }
 }
@@ -1003,8 +1069,7 @@ function Get-CodingPolicyMetadata($Cfg) {
     $leaseFile = [System.IO.Path]::GetFullPath([string]$policy.lease_file)
     $runtimeReal = [System.IO.Path]::GetFullPath($RuntimeDir).TrimEnd('\') + '\'
     if (-not $leaseFile.StartsWith($runtimeReal, [System.StringComparison]::OrdinalIgnoreCase)) { Fail 'coding policy lease_file must live under controller runtime directory' }
-    $rootIds = @($policy.roots.PSObject.Properties.Name)
-    if ($rootIds.Count -lt 1) { Fail 'coding policy requires at least one root' }
+    $rootIds = @(Assert-PolicyRootsAvailable $policy 'coding')
     [pscustomobject]@{ Path=$policyPath; Sha256=Get-ExecutableHash $policyPath; LeaseFile=$leaseFile; RootIds=$rootIds }
 }
 
@@ -1265,6 +1330,73 @@ function Recover-AutonomousSupervisor($Cfg) {
     return [pscustomobject]@{ Runtime=$runtime; Supervisor=$supervisor; Process=$process; Coding=$coding; Autonomous=$autonomous; Desktop=$desktop; Host=$hostStatus }
 }
 
+function Get-BoundedObservationReason($Value) {
+    $reason = [string]$Value
+    if ($reason -cmatch '^[a-z][a-z0-9-]{0,63}$') { return $reason }
+    return 'unverified'
+}
+
+function Convert-OwnedObservation($Owned) {
+    $pidValue = $null; $birth = $null
+    if ($Owned.Alive -and $Owned.Ledger) {
+        $pidValue = [int]$Owned.Ledger.pid
+        $birth = [string]$Owned.Ledger.creation_time_utc
+    }
+    [ordered]@{ alive=[bool]$Owned.Alive; reason=(Get-BoundedObservationReason $Owned.Reason); pid=$pidValue; creation_time_utc=$birth }
+}
+
+function Convert-AuthorityObservation($Authority) {
+    [ordered]@{ configured=[bool]$Authority.Configured; armed=[bool]$Authority.Armed; reason=(Get-BoundedObservationReason $Authority.Reason) }
+}
+
+function Get-DownstreamCoreObservation($Cfg, $Bridge) {
+    $out = [ordered]@{ alive=$false; reason='bridge-unavailable'; pid=$null; parent_pid=$null; creation_time_utc=$null; identity_basis=$null }
+    if (-not $Bridge.Alive) { return $out }
+    $bridgePid = [int]$Bridge.Ledger.pid
+    if (-not [string]::Equals([IO.Path]::GetFullPath([string]$Bridge.Ledger.script_path), [IO.Path]::GetFullPath([string]$Cfg.Bridge.ScriptPath), [StringComparison]::OrdinalIgnoreCase) -or [string]$Bridge.Ledger.script_sha256 -ne [string]$Cfg.Bridge.ScriptSha256) {
+        $out.reason='bridge-config-mismatch'; return $out
+    }
+    try {
+        $children = @(Get-CimInstance Win32_Process -Filter ("ParentProcessId={0} AND Name='node.exe'" -f $bridgePid) -ErrorAction Stop)
+        if ($children.Count -eq 0) { $out.reason='startup-zero-child'; return $out }
+        if ($children.Count -ne 1) { $out.reason='ambiguous-core'; return $out }
+        $child = $children[0]
+        if ([int]$child.ParentProcessId -ne $bridgePid -or [int]$child.ProcessId -lt 1 -or $null -eq $child.CreationDate) { $out.reason='core-identity-incomplete'; return $out }
+        if (-not [string]::IsNullOrWhiteSpace([string]$child.ExecutablePath) -and -not [string]::Equals([string]$child.ExecutablePath,[string]$Cfg.Bridge.FilePath,[StringComparison]::OrdinalIgnoreCase)) { $out.reason='core-image-mismatch'; return $out }
+        $command = [string]$child.CommandLine
+        $needle = (Join-Path ([string]$Cfg.CoreRoot) 'src\mcp-server.mjs').Replace('/','\').ToLowerInvariant()
+        if ([string]::IsNullOrWhiteSpace($command)) { $basis='verified-bridge-single-opaque-node-child' }
+        elseif ($command.Replace('/','\').ToLowerInvariant().Contains($needle)) { $basis='command-line' }
+        else { $out.reason='wrong-core-generation'; return $out }
+        $out.alive=$true; $out.reason='verified'; $out.pid=[int]$child.ProcessId; $out.parent_pid=$bridgePid
+        $out.creation_time_utc=$child.CreationDate.ToUniversalTime().ToString('o'); $out.identity_basis=$basis
+        return $out
+    } catch { $out.reason='core-observation-failed'; return $out }
+}
+
+function Get-StructuredObservation($Cfg) {
+    $s = Get-ObservedState $Cfg
+    $supervisor = Get-AutonomousSupervisorStatus $Cfg
+    [ordered]@{
+        schema='deadbyte.controller-observation.v1'
+        observed_at_utc=[DateTime]::UtcNow.ToString('o')
+        state=[string]$s.State
+        core_root=[string]$Cfg.CoreRoot
+        local_ready=[bool]$s.LocalReady
+        bridge=(Convert-OwnedObservation $s.Bridge)
+        core=$s.Core
+        cloud=(Convert-OwnedObservation $s.Cloud)
+        supervisor=[ordered]@{ configured=[bool]$supervisor.Configured; running=[bool]$supervisor.Running; reason=(Get-BoundedObservationReason $supervisor.Reason) }
+        authority=[ordered]@{
+            process=(Convert-AuthorityObservation (Get-ProcessGrantStatus $Cfg))
+            coding=(Convert-AuthorityObservation (Get-CodingLeaseStatus $Cfg))
+            autonomous=(Convert-AuthorityObservation (Get-AutonomousLeaseStatus $Cfg))
+            desktop=(Convert-AuthorityObservation (Get-DesktopGrantStatus $Cfg))
+            host=(Convert-AuthorityObservation (Get-HostArmStatus $Cfg))
+        }
+    }
+}
+
 function Show-State($Cfg) {
     $s = Get-ObservedState $Cfg
     $bp = if ($s.Bridge.Alive) { $s.Bridge.Ledger.pid } else { '-' }
@@ -1272,6 +1404,7 @@ function Show-State($Cfg) {
     $url = Get-CurrentUrl $Cfg
     Write-Host ("DEADBYTE MCP = {0}" -f $s.State)
     Write-Host ("Bridge PID   : {0} [{1}]" -f $bp, $s.Bridge.Reason)
+    Write-Host ("Core PID     : {0} [{1}]" -f $(if ($s.Core.alive) { $s.Core.pid } else { '-' }), $s.Core.reason)
     Write-Host ("Cloud PID    : {0} [{1}]" -f $cp, $s.Cloud.Reason)
     Write-Host ("Local ready  : {0}" -f $s.LocalReady)
     Write-Host ("URL          : {0}" -f $(if ($url) { $url } else { '<unknown>' }))
@@ -1370,14 +1503,15 @@ function Clean-Stale {
 function Run-CommandCore([string]$Name) {
     $cfg = Get-Config
     Assert-ControllerRootBound $cfg
-    Ensure-Directory $RuntimeDir; Ensure-Directory $LogDir
+    $readOnly = $Name -in @('status','url','hoststatus','processstatus','codingstatus','autonomousstatus','desktopstatus','supervisorstatus')
+    if (-not $readOnly) { Ensure-Directory $RuntimeDir; Ensure-Directory $LogDir }
     switch ($Name) {
         'start'   { Start-Deadbyte $cfg | Out-Null; if ([bool]$cfg.AutonomousSupervisorEnabled) { Start-AutonomousSupervisor $cfg | Out-Null }; Show-State $cfg | Out-Null }
         'resume'  { Start-Deadbyte $cfg | Out-Null; if ([bool]$cfg.AutonomousSupervisorEnabled) { Start-AutonomousSupervisor $cfg | Out-Null }; Show-State $cfg | Out-Null }
         'park'    { Park-Deadbyte $cfg | Out-Null; Show-State $cfg | Out-Null }
         'stop'    { if ([bool]$cfg.AutonomousSupervisorEnabled) { Stop-AutonomousSupervisor $cfg | Out-Null }; Stop-Deadbyte $cfg | Out-Null; Show-State $cfg | Out-Null }
         'restart' { if ([bool]$cfg.AutonomousSupervisorEnabled) { Stop-AutonomousSupervisor $cfg | Out-Null }; Stop-Deadbyte $cfg | Out-Null; Start-Deadbyte $cfg | Out-Null; if ([bool]$cfg.AutonomousSupervisorEnabled) { Start-AutonomousSupervisor $cfg | Out-Null }; Show-State $cfg | Out-Null }
-        'status'  { Show-State $cfg | Out-Null }
+        'status'  { if ($Json) { Get-StructuredObservation $cfg | ConvertTo-Json -Depth 6 -Compress | Write-Output } else { Show-State $cfg | Out-Null } }
         'url'     { $u=Get-CurrentUrl $cfg; if (-not $u) { Fail 'URL unavailable' }; Write-Output $u }
         'test'    { Invoke-Smoke $cfg $false }
         'fulltest'{ Invoke-Smoke $cfg $true }

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.34-r57\\controller\\runtime\\process-grant.json",
-  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.34-r57\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.36-r59\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.36-r59\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.34-r57\\bin\\deadbyte-process-host.exe",
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.36-r59\\bin\\deadbyte-process-host.exe",
     "sha256": "daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4"
   },
   "roots": {
     "core": {
-      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.34-r57",
+      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.36-r59",
       "deny_paths": [
         "node_modules",
         "controller/runtime",

package/docs/R59-TASK-CONTRACT.md

@@ -0,0 +1,26 @@
+# R59 Task Contract
+
+- TASK_ID: deadbyte-r59-robust-runtime
+- OBJECTIVE: Produce backward-compatible DEADBYTE MCP 0.15.36 with fault-isolated optional planes, live capability snapshots, resilient Bridge/Core lifecycle, and verified direct-cloudflared frontdoor operation.
+- ACTIVE_SKILL: implement-controlled-software-changes; final verification uses verify-production-implementation without repair authority.
+- LEAD_ROLE: runtime implementation
+- REVIEW_ROLES: independent release verifier after the candidate is frozen
+- SOURCES: owner-approved 0.15.35 to 0.15.36 plan; exact 0.15.35 tarball SHA-256 `8259e30946d28dd138c1e2ce2f483fe1370d1658544f2adbfebafa4db8875bba`; sealed parent manifest `1b5715b276facbc00f8e341a554472cb4829e5af60e221c357c41b66053af9d4`
+- FIXED: existing public tool names/counts/input contracts; authority planes; no Wrangler; no generic shell/PID/executable/stdin authority; no mutation of sealed 0.15.35 bytes
+- TARGETS: Core initialization, capability resolver/manifest, bundled Bridge/governor, controller diagnostics, frontdoor verification and release evidence
+- BOUNDS: optional configured planes may degrade independently; signed ledger remains the authority ceiling; no transparent replay after dispatch
+- CLASS_2_DISCRETION: bounded retry/backoff/TTL values inside owner-approved limits, reversible and test-bound
+- CLASS_3_DISCRETION: internal module boundaries, helper names and test organization
+- PROHIBITED: dynamic plugin loading; authority widening; Host/Desktop auto-arm; in-place production edits; Wrangler transport
+- METHOD_LOCK: direct cloudflared frontdoor; state-machine Bridge/Core lifecycle; signed static capability ceiling with live reducing overlay; status METHOD_CLOSED by owner instruction
+- PRODUCTION_LINEAGE: source parent 0.15.35 tarball; delivery target npm `deadbyte-mcp@0.15.36`; runtime representation signed release/generation slot
+- DEPENDENCIES: Node.js/PowerShell/MSVC already pinned by the parent; no new dependencies
+- CAPABILITY_CONTEXT: local Windows host with D: isolated test state; npm and production activation only after deterministic gates
+- ASSURANCE_MODE: HIGH_RISK
+- TESTS: focused RED/GREEN, full regression, Windows gate, isolated acceptance, four-hour soak, registry round-trip, activation/rollback/restore
+- ACCEPTANCE_ORACLES: actual MCP protocol/catalog, Ed25519 ping verification, OS process identity, protected hashes, npm registry bytes and independent receipt verifier
+- ACCEPTANCE_ENVIRONMENT: current production Windows host with isolated D: state; clean-machine proof is not claimed
+- PASS_CONDITION: every mandatory gate passes with fresh evidence and final authority is disarmed
+- STOP_CONDITION: protected parent bytes drift, authority widens, unknown mutation is replayed, mandatory gate fails, or credentials/human authentication are required
+- ROLLBACK: exact signed 0.15.35 pointer plus owned compatibility junction
+

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.34",
+  "version": "0.15.36",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
@@ -42,7 +42,7 @@
     "contained:run": "node src/contained-cli.mjs workspaces/demo input.txt",
     "contained:smoke": "node src/contained-smoke.mjs",
     "mcp:contained:smoke": "node src/mcp-contained-smoke-client.mjs",
-    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r57.ps1",
+    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r59-prepublish.ps1",
     "authority:smoke": "node src/authority-smoke.mjs",
     "mcp:remote:smoke": "node src/remote-mcp-smoke-client.mjs",
     "mcp:host:smoke": "node src/mcp-host-smoke-client.mjs",
@@ -79,7 +79,11 @@
     "r54:focused:test": "node --test --test-concurrency=1 test/r54-release-contract.test.mjs test/r54-offline-predecessor-self-exclusion.test.mjs test/r52-offline-predecessor-recovery.test.mjs test/runtime-self-update.test.mjs test/r51-runtime-coherence.test.mjs test/remote-session-cli.test.mjs",
     "r55:focused:test": "node --test --test-concurrency=1 test/r55-release-contract.test.mjs test/r55-offline-predecessor-guardian-family.test.mjs test/r54-offline-predecessor-self-exclusion.test.mjs test/r52-offline-predecessor-recovery.test.mjs test/runtime-self-update.test.mjs test/r51-runtime-coherence.test.mjs test/remote-session-cli.test.mjs",
     "r56:focused:test": "node --test --test-concurrency=1 test/r56-release-contract.test.mjs test/r56-rollback-launcher-restore.test.mjs test/r55-offline-predecessor-guardian-family.test.mjs test/r54-offline-predecessor-self-exclusion.test.mjs test/runtime-self-update.test.mjs test/release-slot.test.mjs test/r51-runtime-coherence.test.mjs",
-    "r57:focused:test": "node --test --test-concurrency=1 test/r57-release-contract.test.mjs test/r57-core-startup-race.test.mjs test/r56-rollback-launcher-restore.test.mjs test/r55-offline-predecessor-guardian-family.test.mjs test/r54-offline-predecessor-self-exclusion.test.mjs test/runtime-self-update.test.mjs test/release-slot.test.mjs test/r51-runtime-coherence.test.mjs test/remote-session-cli.test.mjs"
+    "r57:focused:test": "node --test --test-concurrency=1 test/r57-release-contract.test.mjs test/r57-core-startup-race.test.mjs test/r56-rollback-launcher-restore.test.mjs test/r55-offline-predecessor-guardian-family.test.mjs test/r54-offline-predecessor-self-exclusion.test.mjs test/runtime-self-update.test.mjs test/release-slot.test.mjs test/r51-runtime-coherence.test.mjs test/remote-session-cli.test.mjs",
+    "r58:focused:test": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/r58-focused.ps1",
+    "r58:cross-plane:test": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/r58-cross-plane.ps1",
+    "r59:focused:test": "node --test --test-concurrency=1 test/capability-snapshot-r59.test.mjs test/capability-resolver.test.mjs test/runtime-plane-registry-r59.test.mjs test/optional-plane-degraded-r59.test.mjs test/bridge-runtime-r59.test.mjs test/controller-policy-preflight-r59.test.mjs test/r59-tool-surface-compat.test.mjs test/r58-controller-state-coherence.test.mjs",
+    "r59:release:test": "node --test --test-concurrency=1 test/r59-release-contract.test.mjs test/r59-tool-surface-compat.test.mjs test/bridge-runtime-r59.test.mjs test/controller-policy-preflight-r59.test.mjs"
   },
   "bundleDependencies": [
     "@modelcontextprotocol/server",

package/proof/r59-full-regression-current.json

@@ -0,0 +1,13 @@
+{
+  "schema": "deadbyte.r59-full-regression-capture.v1",
+  "started_at_utc": "2026-10-02T18:38:13.917Z",
+  "finished_at_utc": "2026-10-02T18:43:52.171Z",
+  "exit_code": 0,
+  "signal": null,
+  "error": null,
+  "stdout_sha256": "36848d4d222085e1c7099ceb77261b91eb5daf42e540b5878c2e58024c81cf66",
+  "stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+  "stdout_bytes": 113612,
+  "stderr_bytes": 0,
+  "pass": true
+}