deadbyte-mcp 0.15.35 → 0.15.37

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (92) hide show
  1. package/MANIFEST.SHA256 +91 -46
  2. package/PROVENANCE.json +76 -30
  3. package/README.txt +62 -8
  4. package/RELEASE.json +78 -23
  5. package/SBOM.cdx.json +10 -25
  6. package/TEST-MATRIX.json +109 -44
  7. package/bridge/package.json +4 -2
  8. package/bridge/src/bridge-health-r59.mjs +53 -0
  9. package/bridge/src/bridge.mjs +158 -26
  10. package/bridge/src/canonical-json-r60.mjs +13 -0
  11. package/bridge/src/r40-governor.mjs +56 -10
  12. package/bridge/src/reconnect-delay-r60.mjs +31 -0
  13. package/bridge/src/remote-call-claims-r60.mjs +157 -0
  14. package/bridge/src/remote-dispatch-r60.mjs +75 -0
  15. package/controller/deadbyte-controller.ps1 +76 -13
  16. package/controller/deadbyte-process-policy.json +4 -4
  17. package/docs/R59-PROVENANCE.json +87 -0
  18. package/docs/R59-RELEASE.json +187 -0
  19. package/docs/R59-SBOM.cdx.json +68 -0
  20. package/docs/R59-TASK-CONTRACT.md +26 -0
  21. package/docs/R59-TEST-MATRIX.json +258 -0
  22. package/docs/R59-bridge-package.json +13 -0
  23. package/docs/R59-package-lock.json +184 -0
  24. package/docs/R59-package.json +106 -0
  25. package/docs/R59-version.mjs +6 -0
  26. package/docs/R60-TASK-CONTRACT.md +22 -0
  27. package/package.json +7 -3
  28. package/proof/r59-full-regression-current.json +13 -0
  29. package/proof/r59-full-regression-current.stderr.log +0 -0
  30. package/proof/r59-full-regression-current.stdout.log +1268 -0
  31. package/scripts/full-regression-r60.mjs +32 -0
  32. package/scripts/gate-windows-r59-prepublish.ps1 +41 -0
  33. package/scripts/gate-windows-r60-prepublish.ps1 +74 -0
  34. package/scripts/r59-full-regression-capture.mjs +35 -0
  35. package/src/capability-resolver.mjs +25 -7
  36. package/src/capability-snapshot.mjs +56 -0
  37. package/src/compact-gateway-mcp-tools.mjs +10 -11
  38. package/src/deadbyte-cli.mjs +80 -34
  39. package/src/mcp-server.mjs +179 -118
  40. package/src/r40-compact-disarmed-probe.mjs +1 -1
  41. package/src/r44-compact-disarmed-probe.mjs +1 -1
  42. package/src/r45-compact-disarmed-probe.mjs +1 -1
  43. package/src/remote-authority.mjs +56 -0
  44. package/src/remote-enforcement-probe-r60.mjs +17 -0
  45. package/src/remote-live-log.mjs +19 -2
  46. package/src/remote-log-decode-r60.mjs +32 -0
  47. package/src/remote-mcp-machine-smoke-client.mjs +19 -1
  48. package/src/remote-mcp-r40-parity-client.mjs +1 -1
  49. package/src/remote-mcp-r44-parity-client.mjs +1 -1
  50. package/src/remote-mcp-r45-parity-client.mjs +1 -1
  51. package/src/remote-mcp-smoke-client.mjs +1 -1
  52. package/src/remote-session-guardian.mjs +20 -3
  53. package/src/runtime-plane-registry.mjs +74 -0
  54. package/src/tool-audit.mjs +5 -0
  55. package/src/version.mjs +1 -1
  56. package/test/bridge-runtime-r59.test.mjs +60 -0
  57. package/test/capability-resolver.test.mjs +16 -0
  58. package/test/capability-snapshot-r59.test.mjs +39 -0
  59. package/test/compact-gateway-r36.test.mjs +22 -2
  60. package/test/compact-max-catalog-r44.test.mjs +1 -1
  61. package/test/compact-max-catalog-r45.test.mjs +1 -1
  62. package/test/contained.test.mjs +2 -1
  63. package/test/controller-policy-preflight-r59.test.mjs +39 -0
  64. package/test/fixtures/r59-compact-surface-v0.15.35.json +222 -0
  65. package/test/observation-integration.test.mjs +2 -3
  66. package/test/optional-plane-degraded-r59.test.mjs +44 -0
  67. package/test/r48-release-contract.test.mjs +1 -1
  68. package/test/r49-windows-gate.test.mjs +1 -1
  69. package/test/r51-runtime-coherence.test.mjs +2 -2
  70. package/test/r58-bundled-bridge.test.mjs +3 -1
  71. package/test/r58-cleanup-retention.test.mjs +9 -3
  72. package/test/r58-concurrent-recovery.test.mjs +9 -3
  73. package/test/r58-controller-live-local.test.mjs +36 -4
  74. package/test/r58-controller-state-coherence.test.mjs +1 -1
  75. package/test/r58-release-contract.test.mjs +3 -2
  76. package/test/r58-stale-owner.test.mjs +2 -2
  77. package/test/r58-windows-gate.test.mjs +2 -1
  78. package/test/r59-release-contract.test.mjs +61 -0
  79. package/test/r59-tool-surface-compat.test.mjs +90 -0
  80. package/test/r60-authority-coherence.test.mjs +36 -0
  81. package/test/r60-authority-enforcement.test.mjs +28 -0
  82. package/test/r60-bridge-dispatch.test.mjs +119 -0
  83. package/test/r60-clock-discipline.test.mjs +15 -0
  84. package/test/r60-live-timeline.test.mjs +29 -0
  85. package/test/r60-reconnect-errors.test.mjs +21 -0
  86. package/test/r60-reconnect-jitter.test.mjs +18 -0
  87. package/test/r60-release-contract.test.mjs +81 -0
  88. package/test/r60-remote-call-recovery.test.mjs +170 -0
  89. package/test/r60-windows-log-decode.test.mjs +25 -0
  90. package/test/remote-live-log-r37.test.mjs +1 -1
  91. package/test/remote-session-cli.test.mjs +200 -43
  92. package/test/runtime-plane-registry-r59.test.mjs +40 -0
@@ -0,0 +1,258 @@
1
+ {
2
+ "schema": "deadbyte.test-matrix.v1",
3
+ "version": "0.15.36",
4
+ "train": "R59",
5
+ "primary_platform": "win32-x64",
6
+ "reference": {
7
+ "package": "@wonderwhy-er/desktop-commander",
8
+ "version": "0.2.51",
9
+ "server_sha256": "dfc303bb7dd2e8d01debac50fc43bb8644d00089bffdf2887e149497cff8b305",
10
+ "schemas_sha256": "f342345e34e48769dabaefe1b932f09d41e2e207b422f7794a15ee50ffa8f140"
11
+ },
12
+ "required": [
13
+ {
14
+ "id": "r59-focused",
15
+ "command": "npm run r59:focused:test",
16
+ "expected": "PASS optional-plane degradation, capability v3, Bridge reconciliation, controller preflight and no public tool drift"
17
+ },
18
+ {
19
+ "id": "r59-release-contract",
20
+ "command": "npm run r59:release:test",
21
+ "expected": "PASS exact 0.15.35 lineage, 0.15.36 identity coherence and documented operator limitations"
22
+ },
23
+ {
24
+ "id": "full-regression",
25
+ "command": "node scripts/r59-full-regression-capture.mjs",
26
+ "expected": "PASS after final release-identity mutation"
27
+ },
28
+ {
29
+ "id": "windows-gate",
30
+ "command": "npm run gate:windows",
31
+ "expected": "PASS R59 contracts, manifest and doctor with exact 0.15.35 predecessor"
32
+ },
33
+ {
34
+ "id": "package-verify",
35
+ "command": "node scripts/npm-release-r48.mjs --verify-only",
36
+ "expected": "PASS exact packaged surface and isolated doctor"
37
+ },
38
+ {
39
+ "id": "frontdoor",
40
+ "command": "node src/remote-mcp-smoke-client.mjs \u003cactive-https-mcp\u003e smoke",
41
+ "expected": "PASS exact 43-tool compact catalog and independently verified Ed25519 ping"
42
+ },
43
+ {
44
+ "id": "activation",
45
+ "command": "npx --yes deadbyte-mcp@0.15.36 remote",
46
+ "expected": "activate exact R59 from exact active 0.15.35"
47
+ },
48
+ {
49
+ "id": "rollback",
50
+ "command": "runtime-update --rollback-receipt \u003csigned R59 activation receipt\u003e",
51
+ "expected": "restore exact signed 0.15.35 pointer/runtime, ONLINE, all authority DISARMED"
52
+ },
53
+ {
54
+ "id": "restore",
55
+ "command": "npx --yes deadbyte-mcp@0.15.36 remote",
56
+ "expected": "restore exact same immutable R59 release/generation and verify public MCP"
57
+ }
58
+ ],
59
+ "observed_pre_release_evidence": {
60
+ "bridge_dependency_first_red": {
61
+ "status": "FAIL_EXPECTED",
62
+ "tests": 3,
63
+ "failed": 3,
64
+ "receipt_id": "9ccae28950a898ed6303953f",
65
+ "receipt_sha256": "81c77105679581b927bd874d74456c057901c05578c8baeb055311bdde668339"
66
+ },
67
+ "bridge_dependency_green": {
68
+ "status": "PASS",
69
+ "tests": 3,
70
+ "failed": 0,
71
+ "receipt_id": "58e4aefc717b305ea95bb719",
72
+ "receipt_sha256": "46f66b52eb9a761ef1260c15bee618ecda3944a3df3767057aabf0541da3fd9b"
73
+ },
74
+ "bundled_bridge_first_red": {
75
+ "status": "FAIL_EXPECTED",
76
+ "tests": 2,
77
+ "failed": 2,
78
+ "receipt_id": "184fba94cec5527ca276dfb6",
79
+ "receipt_sha256": "f261242a1d007ee54a233dcb755c7b80db00b0bb1dc7825aed2c6ee3a6fe6d52"
80
+ },
81
+ "bundled_bridge_green": {
82
+ "status": "PASS",
83
+ "tests": 2,
84
+ "failed": 0,
85
+ "receipt_id": "fe63b8ef6299469b4d722e23",
86
+ "receipt_sha256": "32c8b4b5c4569928b90945d069dbc9fd46008d11114ab421d5ba72c5a117d197"
87
+ },
88
+ "isolated_live_lifecycle": {
89
+ "status": "PASS",
90
+ "tests": 1,
91
+ "failed": 0,
92
+ "receipt_id": "891a8004a121eba1feb374e1",
93
+ "receipt_sha256": "1c8454baee9c36ebefc49318a4d31d14cd91644bd91f92ef77ffa4d857788555"
94
+ },
95
+ "focused_current": {
96
+ "status": "PASS",
97
+ "tests": 98,
98
+ "failed": 0,
99
+ "receipt_id": "f7571557a3faeafea4af755a",
100
+ "receipt_sha256": "2225e2506b3a714359194fcb2657d22911eaef34904ab0a031c1e35419f293e7",
101
+ "request_sha256": "4bd1ac94df92661a950ad7c6b52b062b2c873581ea72868ce411a770b7ab3e67"
102
+ },
103
+ "performance": {
104
+ "status": "PASS_BOUNDED_PREPUBLISH",
105
+ "summary_sha256": "4586d8462ce1ae643d255315d4b4febfdd3f731dd8728e4b37b5636b622b756c",
106
+ "stdio_parent_p95_ms": 1.0380999999997584,
107
+ "stdio_candidate_p95_ms": 1.0587000000000444,
108
+ "stdio_p95_delta_pct": 1.984392678457768,
109
+ "bridge_candidate_first_reduction_pct": 63.632445348471286,
110
+ "bridge_baseline_first_reduction_pct": 43.06594367803213,
111
+ "receipts": [
112
+ "63d921dc746b3070ce359a5307d0117bbb2327fa6317bb71ab1906a925b3aa97",
113
+ "4d3aac8c4bad143dd82a1d2f8b3904fd01862708e24cb11a01285b74548cebe6",
114
+ "cf8450e1cecbdfb41cf546b8818181c4f5c141e6b050d694af87920c7f7612de",
115
+ "eff9d7e55cec4d6a778afdda3bb3b8e2e24f7a4addd9bb6ace6eaa2839f2372d"
116
+ ]
117
+ },
118
+ "cross_plane": {
119
+ "status": "PASS",
120
+ "tests": 126,
121
+ "failures": 0,
122
+ "receipts": [
123
+ "b57c8c1051655f36116a5bea4d2c6818001daede3e6cc5689049f44495f11153",
124
+ "e9aef5b21f8bfd4b4737964aa275045383540fc0569bffb57f0b7a1974dda967",
125
+ "ea1df2285e27758517259195de743ea186817888809c91f7998772acb2ad58c7",
126
+ "d6d80921d04ccbc7e1ede7ebc63a50157ee33e3f7529f2e75c8120285cbcfd52",
127
+ "27385e3e27cf7952b89bca8660369f09559f028606cd9e53c5275a178ad5057b"
128
+ ]
129
+ },
130
+ "full_regression": {
131
+ "status": "PASS",
132
+ "files": 258,
133
+ "batches": 8,
134
+ "elapsed_ms": 336694.69,
135
+ "receipt_id": "bb121ac3ce6b6806f7f46fff",
136
+ "receipt_sha256": "2d38483435dfc05a30682cd28df80d479f8e2590c636dde5ff3e278372d7463e",
137
+ "request_sha256": "130a418b22b2aef396a1aa0021bdfa0ba9a57d09af9497dcd2522adbca47aecd"
138
+ },
139
+ "package": {
140
+ "status": "PENDING"
141
+ },
142
+ "public_surface": {
143
+ "status": "PASS",
144
+ "production_tool_count": 43,
145
+ "candidate_tool_count": 43,
146
+ "drift": [
147
+
148
+ ],
149
+ "baseline_catalog_sha256": "ceabd441cc774d03322041155052a28c8fb1c63ae9847199e0278d05c4bd1b28",
150
+ "names_sha256": "dde7d10e85c52beb285e3adf41b69dece11162ab0bc8233f056e471f653776d6",
151
+ "schema_sha256": "8efb5cbcd24f1a46ef4588c92d913fa1fd72d7c71a9ad243b151f2b483a7f5cb",
152
+ "receipt_sha256": "58eefdebe2c456b171eaebf585687bf111ee81f84c92ae968091f4eb056d4c91"
153
+ },
154
+ "pre_full_package_process": {
155
+ "status": "PASS",
156
+ "tests": 17,
157
+ "failed": 0,
158
+ "receipt_id": "f1aa5d06775113d734b94149",
159
+ "receipt_sha256": "d0dce46d897422f0db690b0cd523e5ab740ffd967e4dc8e265d436d888ccff9f"
160
+ },
161
+ "r59_contracts": {
162
+ "status": "PASS",
163
+ "tests": 19,
164
+ "failed": 0,
165
+ "receipt_sha256": "2d3adcc33d010c4977974971222e6b13d613ff268097fff0eec0113e4f82f281"
166
+ },
167
+ "r59_public_surface": {
168
+ "status": "PASS",
169
+ "tool_count": 43,
170
+ "unchanged": 43,
171
+ "added": 0,
172
+ "removed": 0,
173
+ "schema_changed": 0,
174
+ "baseline_release": "v0.15.35-1b5715b276facbc0",
175
+ "surface_sha256": "8e98978b720633acb0c7d4d65c36a945243c47f6dbccfa64ab877329f2956fe3"
176
+ },
177
+ "r59_full_regression": {
178
+ "status": "PENDING_AFTER_RELEASE_IDENTITY_MUTATION"
179
+ },
180
+ "r59_package": {
181
+ "status": "PENDING"
182
+ }
183
+ },
184
+ "inherited_parent_evidence": {
185
+ "version": "0.15.35",
186
+ "parent_manifest_sha256": "1b5715b276facbc00f8e341a554472cb4829e5af60e221c357c41b66053af9d4",
187
+ "parent_generation_manifest_sha256": "047e73b62d7b7819b84201a221a09b7e647cacf21f82101ebed4fbd7e23fc430",
188
+ "parent_tarball_sha256": "8259e30946d28dd138c1e2ce2f483fe1370d1658544f2adbfebafa4db8875bba",
189
+ "parent_registry_identity": "PASS",
190
+ "parent_activation_rollback_restore": "PASS",
191
+ "four_hour_soak": "WAIVED_BY_OPERATOR",
192
+ "clean_machine": "NOT_COMPLETED"
193
+ },
194
+ "performance": {
195
+ "r51": {
196
+ "coding_command_singleflight": true,
197
+ "completed_result_cache": {
198
+ "ttl_ms": 300000,
199
+ "max_entries": 16
200
+ },
201
+ "live_log_poll_ms": 250,
202
+ "live_log_discovery_interval_ms": 1000,
203
+ "max_audit_segments_polled": 2,
204
+ "audit_json_parse_per_line": 1
205
+ },
206
+ "r52": {
207
+ "offline_predecessor_host_revoke_before_capture": true,
208
+ "status_reread_required": true,
209
+ "fail_closed_if_host_remains_armed": true
210
+ },
211
+ "r54": {
212
+ "offline_recovery_activation_ancestry_exclusion": true,
213
+ "unrelated_stale_runtime_fail_closed": true
214
+ },
215
+ "r55": {
216
+ "offline_recovery_foreground_guardian_family_exclusion": true,
217
+ "guardian_owner_parent_binding_required": true,
218
+ "guardian_session_nonce_contract_required": true,
219
+ "unrelated_stale_runtime_fail_closed": true
220
+ },
221
+ "r56": {
222
+ "signed_handoff_launcher_snapshot_required": true,
223
+ "predecessor_launcher_restored_before_pointer_commit": true,
224
+ "successor_launcher_restored_before_recovery_pointer": true
225
+ },
226
+ "r57": {
227
+ "core_startup_wait_timeout_ms": 10000,
228
+ "core_startup_poll_ms": 100,
229
+ "retry_only_zero_child": true,
230
+ "ambiguous_topology_fail_closed": true
231
+ },
232
+ "r58": {
233
+ "baseline_version": "0.15.34",
234
+ "candidate_version": "0.15.35",
235
+ "aggregate_warm_p95_target_reduction_pct": 20,
236
+ "status": "PASS_BOUNDED_PREPUBLISH",
237
+ "bridge_baseline_first_p95_reduction_pct": 43.06594367803213,
238
+ "bridge_candidate_first_p95_reduction_pct": 63.632445348471286,
239
+ "stdio_p95_delta_pct": 1.984392678457768
240
+ },
241
+ "r59": {
242
+ "baseline_version": "0.15.35",
243
+ "candidate_version": "0.15.36",
244
+ "public_surface_tool_count": 43,
245
+ "status": "NO_NEW_PERFORMANCE_CLAIM_OPERATOR_OVERRIDE"
246
+ }
247
+ },
248
+ "non_win32": {
249
+ "portable_tests": "supported where platform-independent",
250
+ "windows_native_tests": "SKIP/unsupported"
251
+ },
252
+ "operator_override": {
253
+ "four_hour_soak": "WAIVED_BY_OPERATOR",
254
+ "clean_machine": "WAIVED_BY_OPERATOR",
255
+ "reason": "Operator explicitly requested immediate deployment without further testing.",
256
+ "stable_final_claim": false
257
+ }
258
+ }
@@ -0,0 +1,13 @@
1
+ {
2
+ "name": "deadbyte-chatgpt-bridge",
3
+ "version": "0.15.36",
4
+ "private": true,
5
+ "type": "module",
6
+ "engines": {
7
+ "node": ">=22"
8
+ },
9
+ "dependencies": {
10
+ "@modelcontextprotocol/client": "2.1.0",
11
+ "@modelcontextprotocol/server": "2.1.0"
12
+ }
13
+ }
@@ -0,0 +1,184 @@
1
+ {
2
+ "name": "deadbyte-mcp",
3
+ "version": "0.15.36",
4
+ "lockfileVersion": 3,
5
+ "requires": true,
6
+ "packages": {
7
+ "": {
8
+ "name": "deadbyte-mcp",
9
+ "version": "0.15.36",
10
+ "bundleDependencies": [
11
+ "@modelcontextprotocol/server",
12
+ "@modelcontextprotocol/client",
13
+ "typescript",
14
+ "zod"
15
+ ],
16
+ "dependencies": {
17
+ "@modelcontextprotocol/client": "2.1.0",
18
+ "@modelcontextprotocol/server": "2.1.0",
19
+ "typescript": "5.9.3",
20
+ "zod": "4.4.3"
21
+ },
22
+ "bin": {
23
+ "deadbyte-mcp": "src/deadbyte-cli.mjs"
24
+ },
25
+ "engines": {
26
+ "node": ">=22"
27
+ }
28
+ },
29
+ "node_modules/@modelcontextprotocol/client": {
30
+ "version": "2.1.0",
31
+ "inBundle": true,
32
+ "license": "MIT",
33
+ "dependencies": {
34
+ "@modelcontextprotocol/core": "2.1.0",
35
+ "cross-spawn": "^7.0.5",
36
+ "eventsource": "^3.0.2",
37
+ "eventsource-parser": "^3.0.0",
38
+ "jose": "^6.1.3",
39
+ "pkce-challenge": "^5.0.0",
40
+ "zod": "^4.2.0"
41
+ },
42
+ "engines": {
43
+ "node": ">=20"
44
+ }
45
+ },
46
+ "node_modules/@modelcontextprotocol/core": {
47
+ "version": "2.1.0",
48
+ "inBundle": true,
49
+ "license": "MIT",
50
+ "dependencies": {
51
+ "zod": "^4.2.0"
52
+ },
53
+ "engines": {
54
+ "node": ">=20"
55
+ }
56
+ },
57
+ "node_modules/@modelcontextprotocol/server": {
58
+ "version": "2.1.0",
59
+ "inBundle": true,
60
+ "license": "MIT",
61
+ "dependencies": {
62
+ "@modelcontextprotocol/core": "2.1.0",
63
+ "zod": "^4.2.0"
64
+ },
65
+ "engines": {
66
+ "node": ">=20"
67
+ }
68
+ },
69
+ "node_modules/cross-spawn": {
70
+ "version": "7.0.6",
71
+ "inBundle": true,
72
+ "license": "MIT",
73
+ "dependencies": {
74
+ "path-key": "^3.1.0",
75
+ "shebang-command": "^2.0.0",
76
+ "which": "^2.0.1"
77
+ },
78
+ "engines": {
79
+ "node": ">= 8"
80
+ }
81
+ },
82
+ "node_modules/eventsource": {
83
+ "version": "3.0.7",
84
+ "inBundle": true,
85
+ "license": "MIT",
86
+ "dependencies": {
87
+ "eventsource-parser": "^3.0.1"
88
+ },
89
+ "engines": {
90
+ "node": ">=18.0.0"
91
+ }
92
+ },
93
+ "node_modules/eventsource-parser": {
94
+ "version": "3.1.1",
95
+ "inBundle": true,
96
+ "license": "MIT",
97
+ "engines": {
98
+ "node": ">=18.0.0"
99
+ }
100
+ },
101
+ "node_modules/isexe": {
102
+ "version": "2.0.0",
103
+ "inBundle": true,
104
+ "license": "ISC"
105
+ },
106
+ "node_modules/jose": {
107
+ "version": "6.2.10",
108
+ "inBundle": true,
109
+ "license": "MIT",
110
+ "funding": {
111
+ "url": "https://github.com/sponsors/panva"
112
+ }
113
+ },
114
+ "node_modules/path-key": {
115
+ "version": "3.1.1",
116
+ "inBundle": true,
117
+ "license": "MIT",
118
+ "engines": {
119
+ "node": ">=8"
120
+ }
121
+ },
122
+ "node_modules/pkce-challenge": {
123
+ "version": "5.0.1",
124
+ "inBundle": true,
125
+ "license": "MIT",
126
+ "engines": {
127
+ "node": ">=16.20.0"
128
+ }
129
+ },
130
+ "node_modules/shebang-command": {
131
+ "version": "2.0.0",
132
+ "inBundle": true,
133
+ "license": "MIT",
134
+ "dependencies": {
135
+ "shebang-regex": "^3.0.0"
136
+ },
137
+ "engines": {
138
+ "node": ">=8"
139
+ }
140
+ },
141
+ "node_modules/shebang-regex": {
142
+ "version": "3.0.0",
143
+ "inBundle": true,
144
+ "license": "MIT",
145
+ "engines": {
146
+ "node": ">=8"
147
+ }
148
+ },
149
+ "node_modules/typescript": {
150
+ "version": "5.9.3",
151
+ "inBundle": true,
152
+ "license": "Apache-2.0",
153
+ "bin": {
154
+ "tsc": "bin/tsc",
155
+ "tsserver": "bin/tsserver"
156
+ },
157
+ "engines": {
158
+ "node": ">=14.17"
159
+ }
160
+ },
161
+ "node_modules/which": {
162
+ "version": "2.0.2",
163
+ "inBundle": true,
164
+ "license": "ISC",
165
+ "dependencies": {
166
+ "isexe": "^2.0.0"
167
+ },
168
+ "bin": {
169
+ "node-which": "bin/node-which"
170
+ },
171
+ "engines": {
172
+ "node": ">= 8"
173
+ }
174
+ },
175
+ "node_modules/zod": {
176
+ "version": "4.4.3",
177
+ "inBundle": true,
178
+ "license": "MIT",
179
+ "funding": {
180
+ "url": "https://github.com/sponsors/colinhacks"
181
+ }
182
+ }
183
+ }
184
+ }
@@ -0,0 +1,106 @@
1
+ {
2
+ "name": "deadbyte-mcp",
3
+ "version": "0.15.36",
4
+ "private": false,
5
+ "type": "module",
6
+ "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
7
+ "engines": {
8
+ "node": ">=22"
9
+ },
10
+ "scripts": {
11
+ "test": "node --test test/*.test.mjs",
12
+ "manifest:write": "node scripts/release-manifest.mjs write",
13
+ "manifest:verify": "node scripts/release-manifest.mjs verify",
14
+ "r41:parent:verify": "node scripts/verify-r41-parent.mjs",
15
+ "r41:memory:verify": "node scripts/verify-memory-r41.mjs",
16
+ "r42:parent:verify": "node scripts/verify-r42-parent.mjs",
17
+ "r42:eval": "node scripts/agent-eval-r42.mjs",
18
+ "self-update:runtime": "node scripts/runtime-self-update.mjs",
19
+ "self-update:deferred": "node scripts/deferred-slot-operation-r46.mjs",
20
+ "release:parity": "node scripts/release-parity-r46.mjs",
21
+ "release:final:write": "node scripts/final-closure-r46.mjs",
22
+ "release:final:verify": "node scripts/final-closure-verify-r46.mjs",
23
+ "proof": "node src/proof-cli.mjs workspaces/demo input.txt",
24
+ "verify": "node src/verifier-cli.mjs workspaces/demo evidence/latest.json",
25
+ "trust:init": "node src/trust-init.mjs",
26
+ "mcp": "node src/mcp-server.mjs",
27
+ "mcp:smoke": "node src/mcp-smoke-client.mjs",
28
+ "mcp:agent:smoke": "node --test test/agent-runtime.test.mjs test/agent-runtime-adversarial.test.mjs test/agent-runtime-crash.test.mjs test/agent-task-receipt.test.mjs",
29
+ "mcp:coding:smoke": "node --test test/coding-plane.test.mjs test/coding-plane-adversarial.test.mjs test/coding-runtime.test.mjs test/coding-crash.test.mjs",
30
+ "mcp:machine-fs:smoke": "node src/machine-fs-smoke-client.mjs",
31
+ "mcp:observation:smoke": "node src/observation-smoke-client.mjs",
32
+ "mcp:process:smoke": "node src/process-smoke-client.mjs",
33
+ "process:policy:refresh": "node scripts/refresh-process-policy.mjs",
34
+ "mcp:autonomous:smoke": "node --test test/autonomous-runtime.test.mjs test/autonomous-loop.test.mjs test/autonomous-adversarial.test.mjs test/autonomous-supervisor-integration.test.mjs test/native-diff.test.mjs",
35
+ "containment:build": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-containment.ps1",
36
+ "containment:smoke": "node src/containment-smoke.mjs appcontainer",
37
+ "containment:bootstrap": "node src/containment-bootstrap.mjs",
38
+ "containment:smoke:lpac": "node src/containment-smoke.mjs lpac",
39
+ "containment:smoke:appcontainer": "node src/containment-smoke.mjs appcontainer",
40
+ "containment:construction": "node src/containment-construction.mjs",
41
+ "containment:child-control": "node src/containment-child-control.mjs",
42
+ "contained:run": "node src/contained-cli.mjs workspaces/demo input.txt",
43
+ "contained:smoke": "node src/contained-smoke.mjs",
44
+ "mcp:contained:smoke": "node src/mcp-contained-smoke-client.mjs",
45
+ "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r59-prepublish.ps1",
46
+ "authority:smoke": "node src/authority-smoke.mjs",
47
+ "mcp:remote:smoke": "node src/remote-mcp-smoke-client.mjs",
48
+ "mcp:host:smoke": "node src/mcp-host-smoke-client.mjs",
49
+ "host:policy:init": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/init-host-policy.ps1",
50
+ "mcp:remote:host:smoke": "node src/remote-mcp-host-smoke-client.mjs",
51
+ "mcp:remote:autonomous:smoke": "node src/remote-mcp-autonomous-smoke-client.mjs",
52
+ "mcp:tunnel-compat:smoke": "node src/tunnel-stdio-compat-smoke.mjs",
53
+ "audit:verify": "node src/deadbyte-cli.mjs audit verify",
54
+ "audit:status": "node src/deadbyte-cli.mjs audit status",
55
+ "desktop:build": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-desktop-r40.ps1",
56
+ "desktop:policy:refresh": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/init-desktop-policy-r40.ps1",
57
+ "r43:parent:verify": "node scripts/verify-r43-parent.mjs",
58
+ "r43:full:test": "node scripts/full-regression-r43.mjs",
59
+ "r44:parent:verify": "node scripts/verify-r44-parent.mjs",
60
+ "r44:full:test": "node scripts/full-regression-r44.mjs",
61
+ "finalize:r44": "node scripts/finalize-r44.mjs",
62
+ "hardware:build": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-hardware-r45.ps1",
63
+ "doctor": "node src/deadbyte-cli.mjs doctor",
64
+ "r45:parent:verify": "node scripts/verify-r45-parent.mjs",
65
+ "r45:full:test": "node scripts/full-regression-r45.mjs",
66
+ "finalize:r45": "node scripts/finalize-r45.mjs",
67
+ "r46:fileless:test": "node --test --test-concurrency=1 test/process-policy.test.mjs test/process-policy-refresh.test.mjs test/release-generation.test.mjs test/process-runtime.test.mjs test/process-mcp-tools.test.mjs test/compact-gateway-r36.test.mjs test/capability-ledger-r36.test.mjs test/remote-device-r44.test.mjs test/observation-runtime.test.mjs test/observation-mcp-tools.test.mjs",
68
+ "r46:full:test": "node scripts/full-regression-r46.mjs",
69
+ "r47:full:test": "node scripts/full-regression-r47.mjs",
70
+ "r47:catalog:test": "node --test --test-concurrency=1 test/full-max-catalog-r47.test.mjs",
71
+ "r47:hardening:test": "node scripts/commander-hardening-gate-r47.mjs",
72
+ "r48:full:test": "node scripts/full-regression-r48.mjs",
73
+ "r48:release:test": "node --test --test-concurrency=1 test/r48-release-contract.test.mjs test/commander-reference-contract-r48.test.mjs test/commander-extended-wire-r48.test.mjs test/commander-external-process-r48.test.mjs test/commander-office-reader-r48.test.mjs test/commander-pdf-r48.test.mjs test/commander-url-reader-r48.test.mjs test/commander-wire-contract-r47.test.mjs test/commander-protocol-adversarial-r48.test.mjs",
74
+ "r48:catalog:test": "node --test --test-concurrency=1 test/full-max-catalog-r48.test.mjs",
75
+ "release:npm": "node scripts/npm-release-r48.mjs",
76
+ "r51:focused:test": "node --test --test-concurrency=1 test/r51-release-contract.test.mjs test/r51-runtime-coherence.test.mjs test/r51-live-log-polling.test.mjs test/coding-runtime.test.mjs test/remote-live-log-r37.test.mjs",
77
+ "r52:focused:test": "node --test --test-concurrency=1 test/r52-release-contract.test.mjs test/r52-offline-predecessor-recovery.test.mjs test/r52-host-revocation.test.mjs test/r51-runtime-coherence.test.mjs test/r51-live-log-polling.test.mjs test/coding-runtime.test.mjs test/remote-live-log-r37.test.mjs test/runtime-self-update.test.mjs",
78
+ "r53:focused:test": "node --test --test-concurrency=1 test/r53-release-contract.test.mjs test/stabilization-update-child-root.test.mjs test/stabilization-state-root.test.mjs test/stabilization-guardian.test.mjs test/stabilization-semver.test.mjs test/stabilization-powershell.test.mjs test/release-slot.test.mjs test/runtime-self-update.test.mjs test/r51-runtime-coherence.test.mjs test/remote-session-cli.test.mjs test/r52-offline-predecessor-recovery.test.mjs test/r52-host-revocation.test.mjs",
79
+ "r54:focused:test": "node --test --test-concurrency=1 test/r54-release-contract.test.mjs test/r54-offline-predecessor-self-exclusion.test.mjs test/r52-offline-predecessor-recovery.test.mjs test/runtime-self-update.test.mjs test/r51-runtime-coherence.test.mjs test/remote-session-cli.test.mjs",
80
+ "r55:focused:test": "node --test --test-concurrency=1 test/r55-release-contract.test.mjs test/r55-offline-predecessor-guardian-family.test.mjs test/r54-offline-predecessor-self-exclusion.test.mjs test/r52-offline-predecessor-recovery.test.mjs test/runtime-self-update.test.mjs test/r51-runtime-coherence.test.mjs test/remote-session-cli.test.mjs",
81
+ "r56:focused:test": "node --test --test-concurrency=1 test/r56-release-contract.test.mjs test/r56-rollback-launcher-restore.test.mjs test/r55-offline-predecessor-guardian-family.test.mjs test/r54-offline-predecessor-self-exclusion.test.mjs test/runtime-self-update.test.mjs test/release-slot.test.mjs test/r51-runtime-coherence.test.mjs",
82
+ "r57:focused:test": "node --test --test-concurrency=1 test/r57-release-contract.test.mjs test/r57-core-startup-race.test.mjs test/r56-rollback-launcher-restore.test.mjs test/r55-offline-predecessor-guardian-family.test.mjs test/r54-offline-predecessor-self-exclusion.test.mjs test/runtime-self-update.test.mjs test/release-slot.test.mjs test/r51-runtime-coherence.test.mjs test/remote-session-cli.test.mjs",
83
+ "r58:focused:test": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/r58-focused.ps1",
84
+ "r58:cross-plane:test": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/r58-cross-plane.ps1",
85
+ "r59:focused:test": "node --test --test-concurrency=1 test/capability-snapshot-r59.test.mjs test/capability-resolver.test.mjs test/runtime-plane-registry-r59.test.mjs test/optional-plane-degraded-r59.test.mjs test/bridge-runtime-r59.test.mjs test/controller-policy-preflight-r59.test.mjs test/r59-tool-surface-compat.test.mjs test/r58-controller-state-coherence.test.mjs",
86
+ "r59:release:test": "node --test --test-concurrency=1 test/r59-release-contract.test.mjs test/r59-tool-surface-compat.test.mjs test/bridge-runtime-r59.test.mjs test/controller-policy-preflight-r59.test.mjs"
87
+ },
88
+ "bundleDependencies": [
89
+ "@modelcontextprotocol/server",
90
+ "@modelcontextprotocol/client",
91
+ "typescript",
92
+ "zod"
93
+ ],
94
+ "dependencies": {
95
+ "@modelcontextprotocol/client": "2.1.0",
96
+ "@modelcontextprotocol/server": "2.1.0",
97
+ "typescript": "5.9.3",
98
+ "zod": "4.4.3"
99
+ },
100
+ "bin": {
101
+ "deadbyte-mcp": "src/deadbyte-cli.mjs"
102
+ },
103
+ "publishConfig": {
104
+ "access": "public"
105
+ }
106
+ }
@@ -0,0 +1,6 @@
1
+ export const DEADBYTE_VERSION = '0.15.36';
2
+ export const MCP_PROTOCOL_VERSION = '2026-07-28';
3
+ export const RECEIPT_SCHEMA_V1 = 'deadbyte.receipt.v1';
4
+ export const RECEIPT_SCHEMA_V2 = 'deadbyte.receipt.v2';
5
+ export const RECEIPT_REQUEST_SCHEMA = 'deadbyte.request.v1';
6
+ export const RUNTIME_IDENTITY_SCHEMA = 'deadbyte.runtime.v1';
@@ -0,0 +1,22 @@
1
+ # R60 Task Contract
2
+
3
+ - TASK_ID: deadbyte-r60-remote-truth-resilience
4
+ - OBJECTIVE: Produce backward-compatible DEADBYTE MCP 0.15.37 with one observed authority truth, execution-backed readiness, durable keyed mutation idempotency, fail-closed keyless ambiguity, bounded reconnect recovery, and low-noise human timeline without audit loss.
5
+ - PARENT_RUNTIME: exact production-accepted 0.15.36 release v0.15.36-090d9db3e0679c0d, release manifest 090d9db3e0679c0d4943f3229ecab7b9fcccbe4f767348a568c9f3bb60d1b431, generation manifest 6134f9f26b680e13ed545da4ab5f3020f411ea2569062fb9c154c8a7e036c9dc.
6
+ - TARGET: deadbyte-mcp@0.15.37, train R60, label REMOTE TRUTH + RESILIENCE HARDENING.
7
+ - METHOD: RED -> smallest fix -> GREEN -> affected regression -> full regression -> Windows gate -> package proof -> activation rollback restore -> registry verification.
8
+ - AUTHORITY: default remote arms Process, Coding, Autonomous only; Desktop and Host stay DISARMED. --desktop, --host and --full widen only the explicitly requested session authority and must read back enforcement before READY.
9
+ - READY: transport presence alone is insufficient; Bridge, Cloud, exact Core generation, MCP execution probe, capability attestation and selected authority vector must all be observed.
10
+ - IDEMPOTENCY: stable idempotency_key plus canonical payload receives durable no-duplicate dispatch semantics across reconnect. Same key with different payload is a hard conflict.
11
+ - LEGACY_MUTATION: keyless requests remain compatible but receive no cross-reconnect exactly-once claim; ambiguous post-dispatch effects fail closed and are never blindly replayed.
12
+ - READ_ONLY_RECOVERY: only explicitly classified read-only operations may re-execute after interruption and only under their original validity and deadline contract.
13
+ - RECONNECT: bounded, jittered, shutdown-aware, one in-flight recovery per component; terminal faults are not retried.
14
+ - CLOCK: wall clock is evidence time; monotonic clocks own elapsed and retry decisions. No global Date.now monkeypatch.
15
+ - HUMAN_TIMELINE: unchanged capability_manifest polling may be suppressed only from presentation; immutable audit and replay keep every event.
16
+ - WINDOWS_TEXT: deterministic BOM and known-source decoding; no heuristic corruption repair.
17
+ - DEPENDENCIES: keep the existing four runtime dependencies. No Supabase, Tiptap, Sharp, ExcelJS, generic shell surface, telemetry, or new framework.
18
+ - PUBLIC_SURFACE: compact public tool count remains 43; R60 hardening is implemented behind existing typed gateways.
19
+ - NON_GOALS: document or UI feature expansion, arbitrary shell convenience, mandatory container runtime.
20
+ - CURRENT_EVIDENCE: R60 focused 38 of 38 PASS; pre-freeze full behavioral regression 1236 total, 1205 PASS, 31 historical or platform SKIP, 0 FAIL.
21
+ - PENDING_BEFORE_FINAL: post-freeze full regression, Windows gate, manifest and doctor, deterministic package, isolated packed-artifact smoke, production activation rollback restore, registry round-trip, final signed machine binding.
22
+ - FINAL_RULE: stable_final_claim remains false until every mandatory pending gate is fresh and green.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "deadbyte-mcp",
3
- "version": "0.15.35",
3
+ "version": "0.15.37",
4
4
  "private": false,
5
5
  "type": "module",
6
6
  "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
@@ -42,7 +42,7 @@
42
42
  "contained:run": "node src/contained-cli.mjs workspaces/demo input.txt",
43
43
  "contained:smoke": "node src/contained-smoke.mjs",
44
44
  "mcp:contained:smoke": "node src/mcp-contained-smoke-client.mjs",
45
- "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r58.ps1",
45
+ "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r60-prepublish.ps1",
46
46
  "authority:smoke": "node src/authority-smoke.mjs",
47
47
  "mcp:remote:smoke": "node src/remote-mcp-smoke-client.mjs",
48
48
  "mcp:host:smoke": "node src/mcp-host-smoke-client.mjs",
@@ -81,7 +81,11 @@
81
81
  "r56:focused:test": "node --test --test-concurrency=1 test/r56-release-contract.test.mjs test/r56-rollback-launcher-restore.test.mjs test/r55-offline-predecessor-guardian-family.test.mjs test/r54-offline-predecessor-self-exclusion.test.mjs test/runtime-self-update.test.mjs test/release-slot.test.mjs test/r51-runtime-coherence.test.mjs",
82
82
  "r57:focused:test": "node --test --test-concurrency=1 test/r57-release-contract.test.mjs test/r57-core-startup-race.test.mjs test/r56-rollback-launcher-restore.test.mjs test/r55-offline-predecessor-guardian-family.test.mjs test/r54-offline-predecessor-self-exclusion.test.mjs test/runtime-self-update.test.mjs test/release-slot.test.mjs test/r51-runtime-coherence.test.mjs test/remote-session-cli.test.mjs",
83
83
  "r58:focused:test": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/r58-focused.ps1",
84
- "r58:cross-plane:test": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/r58-cross-plane.ps1"
84
+ "r58:cross-plane:test": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/r58-cross-plane.ps1",
85
+ "r59:focused:test": "node --test --test-concurrency=1 test/capability-snapshot-r59.test.mjs test/capability-resolver.test.mjs test/runtime-plane-registry-r59.test.mjs test/optional-plane-degraded-r59.test.mjs test/bridge-runtime-r59.test.mjs test/controller-policy-preflight-r59.test.mjs test/r59-tool-surface-compat.test.mjs test/r58-controller-state-coherence.test.mjs",
86
+ "r59:release:test": "node --test --test-concurrency=1 test/r59-release-contract.test.mjs test/r59-tool-surface-compat.test.mjs test/bridge-runtime-r59.test.mjs test/controller-policy-preflight-r59.test.mjs",
87
+ "r60:focused:test": "node --test --test-concurrency=1 test/r60-authority-coherence.test.mjs test/r60-authority-enforcement.test.mjs test/r60-bridge-dispatch.test.mjs test/r60-clock-discipline.test.mjs test/r60-live-timeline.test.mjs test/r60-reconnect-errors.test.mjs test/r60-reconnect-jitter.test.mjs test/r60-remote-call-recovery.test.mjs test/r60-windows-log-decode.test.mjs test/r60-release-contract.test.mjs",
88
+ "r60:full:test": "node scripts/full-regression-r60.mjs"
85
89
  },
86
90
  "bundleDependencies": [
87
91
  "@modelcontextprotocol/server",