deadbyte-mcp 0.15.36 → 0.15.38

package/docs/r61-reference-evidence.md

@@ -0,0 +1,18 @@
+# R61 reference-mechanism decisions
+
+This is a source-inspection record, not authority to copy donor code. R61 uses
+patterns reimplemented inside existing DEADBYTE components. No donor source
+bytes or dependencies are imported.
+
+| Reference | Inspected source | Mechanism and comparison with DEADBYTE | License/decision |
+| --- | --- | --- | --- |
+| Better Remote Commander | `references/better-remote-commander/packages/relay/src/device-hub.ts`, `mcp/invoke.ts`, `NOTICE` | Replaces stale sockets, correlates call/result and uses a pong watchdog. DEADBYTE already has a single guarded Bridge dispatch and bounded reconnect; test half-open detection and shared recovery, but do not add a fleet or new relay. | Root package declares MIT; NOTICE identifies derived Desktop Commander code. ADAPT watchdog tests only; KEEP current dispatch. |
+| CUA | `references/cua/rfcs/3007-cua-driver-lifecycle-sessions.md`, `3682-typed-native-window-sdk.md`, `libs/cua-driver/rust/crates/cua-driver-core/tests/session_lifecycle.rs` | Accepted lifecycle sessions separate cleanup from authority; typed window actions distinguish snapshot target and post-action verification. DEADBYTE already has native Desktop and stale-frame controls. Add adversarial lifecycle/fresh-observation tests only if missing. RFC 2447 is superseded and not an architecture guide. | Top-level Python metadata declares MIT; component licenses must be checked before any copying. KEEP native/adapter split; ADAPT tests. |
+| Desktop Commander | `references/desktop-commander/dist/utils/toolHistory.js`, process handlers | History caps entries, stored output bytes and file size. DEADBYTE already bounds process retained output via policy, repairs PATHEXT, supports offset reads, cancellation and bounded operation history. LIVELOG completed identity set is unbounded presentation state. | Package declares MIT. ADAPT LIVELOG retention; KEEP process runtime. |
+| Open Remote MCP | `references/open-remote-mcp/docs/ARCHITECTURE.md`, `apps/agent/src/index.ts`, `NOTICE.md` | Relay policy narrows, never widens local device capability. DEADBYTE signed ledger and separate local planes are stronger; add a focused relay/local enforcement test, not a second permission system. | Root package has no license field in inspected metadata; no source copying. KEEP local authority; ADAPT test. |
+| ReMCP | `references/remcp/docs/TOOL_SELECTION_EVAL.md`, `scripts/check-distribution.mjs`, `docs/DISTRIBUTION.md` | Golden positive/negative tool-selection cases and cross-distribution identity checks. DEADBYTE already has exact catalog, release manifest and npm closure; add a small golden routing test without a new runtime dependency. | Package declares MIT. ADAPT evaluation; KEEP release machinery. |
+| Secure Host MCP | `references/secure-host-mcp/src/workspace.ts`, `src/executor.ts`, `test/workspace.test.ts` | Rejects broad workspace roots, resolves symlink parents and bounds executor time. DEADBYTE already has explicit roots, policy-pinned profiles and native containment. Probe equivalent boundary cases; do not expose generic shell or change root policy without RED evidence. | Package declares MIT. KEEP architecture; ADAPT adversarial cases if missing. |
+| WinRemote MCP | `references/winremote-mcp/src/winremote/security.py`, `tiers.py`, `tests/test_security_hardening.py` | Capability tiers and URL/OAuth hardening. DEADBYTE authority planes are narrower and independently revocable; OCR/tier expansion would add scope. Compare URL and Windows privilege boundary tests where current interfaces overlap. | Python metadata declares MIT. KEEP planes; REJECT OCR and tier expansion. |
+
+Acceptance remains based on DEADBYTE's observed behavior, not donor popularity.
+Any newly found donor gap requires a focused RED and a narrow local fix.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.36",
+  "version": "0.15.38",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
@@ -42,7 +42,7 @@
     "contained:run": "node src/contained-cli.mjs workspaces/demo input.txt",
     "contained:smoke": "node src/contained-smoke.mjs",
     "mcp:contained:smoke": "node src/mcp-contained-smoke-client.mjs",
-    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r59-prepublish.ps1",
+    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r61-prepublish.ps1",
     "authority:smoke": "node src/authority-smoke.mjs",
     "mcp:remote:smoke": "node src/remote-mcp-smoke-client.mjs",
     "mcp:host:smoke": "node src/mcp-host-smoke-client.mjs",
@@ -83,7 +83,10 @@
     "r58:focused:test": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/r58-focused.ps1",
     "r58:cross-plane:test": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/r58-cross-plane.ps1",
     "r59:focused:test": "node --test --test-concurrency=1 test/capability-snapshot-r59.test.mjs test/capability-resolver.test.mjs test/runtime-plane-registry-r59.test.mjs test/optional-plane-degraded-r59.test.mjs test/bridge-runtime-r59.test.mjs test/controller-policy-preflight-r59.test.mjs test/r59-tool-surface-compat.test.mjs test/r58-controller-state-coherence.test.mjs",
-    "r59:release:test": "node --test --test-concurrency=1 test/r59-release-contract.test.mjs test/r59-tool-surface-compat.test.mjs test/bridge-runtime-r59.test.mjs test/controller-policy-preflight-r59.test.mjs"
+    "r59:release:test": "node --test --test-concurrency=1 test/r59-release-contract.test.mjs test/r59-tool-surface-compat.test.mjs test/bridge-runtime-r59.test.mjs test/controller-policy-preflight-r59.test.mjs",
+    "r60:focused:test": "node --test --test-concurrency=1 test/r60-authority-coherence.test.mjs test/r60-authority-enforcement.test.mjs test/r60-bridge-dispatch.test.mjs test/r60-clock-discipline.test.mjs test/r60-live-timeline.test.mjs test/r60-reconnect-errors.test.mjs test/r60-reconnect-jitter.test.mjs test/r60-remote-call-recovery.test.mjs test/r60-windows-log-decode.test.mjs test/r60-release-contract.test.mjs",
+    "r60:full:test": "node scripts/full-regression-r60.mjs",
+    "r61:focused:test": "node --test --test-concurrency=1 test/r61-release-contract.test.mjs test/r61-release-bridge-binding.test.mjs test/r61-control-lane.test.mjs test/r61-live-timeline-bounds.test.mjs test/r61-npm-artifact-identity.test.mjs test/remote-live-log-r37.test.mjs test/bridge-runtime-r59.test.mjs test/commander-schema-differential-r48.test.mjs test/package-boundary.test.mjs test/r60-bridge-dispatch.test.mjs test/r60-authority-enforcement.test.mjs"
   },
   "bundleDependencies": [
     "@modelcontextprotocol/server",

package/scripts/full-regression-r60.mjs

@@ -0,0 +1,32 @@
+import { readdir, stat } from 'node:fs/promises';
+import path from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+
+const here=path.dirname(fileURLToPath(import.meta.url));
+const root=path.resolve(here,'..');
+const testDir=path.join(root,'test');
+const excluded=new Set(['full-max-catalog-r44.test.mjs','full-max-catalog-r45.test.mjs','full-max-catalog-r46.test.mjs']);
+const files=(await readdir(testDir,{withFileTypes:true}))
+  .filter(entry=>entry.isFile()&&entry.name.endsWith('.test.mjs')&&!excluded.has(entry.name));
+const weighted=[];
+for(const entry of files) weighted.push({path:path.join('test',entry.name),size:(await stat(path.join(testDir,entry.name))).size});
+weighted.sort((a,b)=>b.size-a.size||a.path.localeCompare(b.path,'en'));
+const batchCount=16;
+const batches=Array.from({length:batchCount},()=>[]);
+weighted.forEach((entry,index)=>batches[index%batchCount].push(entry.path));
+const match=process.argv.slice(2).map(String).find(arg=>/^--batch=\d+$/.test(arg));
+const selected=match?Number(match.slice('--batch='.length)):null;
+if(selected!==null&&(!Number.isInteger(selected)||selected<1||selected>batchCount))throw new Error(`R60 regression batch must be 1..${batchCount}`);
+const indexes=selected===null?[...Array(batchCount).keys()]:[selected-1];
+let total=0;
+for(const index of indexes){
+  const batch=batches[index].sort((a,b)=>a.localeCompare(b,'en'));
+  console.log(`R60-BOUNDED-REGRESSION batch=${index+1}/${batchCount} files=${batch.length}`);
+  const result=spawnSync(process.execPath,['--test','--test-concurrency=1',...batch],{cwd:root,stdio:'inherit',windowsHide:true,shell:false});
+  if(result.error)throw result.error;
+  if(result.signal)throw new Error(`R60 regression batch ${index+1} terminated by ${result.signal}`);
+  if(result.status!==0)throw new Error(`R60 regression batch ${index+1} failed with exit code ${result.status}`);
+  total+=batch.length;
+}
+console.log(`R60-BOUNDED-REGRESSION PASS files=${total} batches=${indexes.length}`);

package/scripts/gate-windows-r60-prepublish.ps1

@@ -0,0 +1,74 @@
+# R60 staged gate revision 3: final pre-package metadata seal identity
+param(
+  [ValidateSet('all','preflight','focused','full-batch','manifest','doctor')]
+  [string]$Stage='all',
+  [ValidateRange(1,16)]
+  [int]$Batch=1
+)
+
+$ErrorActionPreference='Stop'
+Set-StrictMode -Version 3.0
+$root=Split-Path $PSScriptRoot -Parent
+Set-Location -LiteralPath $root
+
+function Invoke-NodeTest([string]$Name,[string[]]$Files){
+  Write-Host "==== $Name ===="
+  & node.exe --test --test-concurrency=1 @Files
+  if($LASTEXITCODE -ne 0){ throw "R60 prepublish gate failed at $Name exit=$LASTEXITCODE" }
+}
+function Invoke-Npm([string]$Name,[string[]]$NpmArgs){
+  Write-Host "==== $Name ===="
+  & npm.cmd @NpmArgs
+  if($LASTEXITCODE -ne 0){ throw "R60 prepublish gate failed at $Name exit=$LASTEXITCODE" }
+}
+function Assert-R60Predecessor {
+  $active=Get-Content -LiteralPath (Join-Path $env:USERPROFILE '.deadbyte-mcp\active-release.json') -Raw | ConvertFrom-Json
+  if($active.release_id -ne 'v0.15.36-090d9db3e0679c0d'){ throw "R60 predecessor release mismatch: $($active.release_id)" }
+  if($active.manifest_sha256 -ne '090d9db3e0679c0d4943f3229ecab7b9fcccbe4f767348a568c9f3bb60d1b431'){ throw 'R60 predecessor manifest mismatch' }
+  if($active.generation_manifest_sha256 -ne '6134f9f26b680e13ed545da4ab5f3020f411ea2569062fb9c154c8a7e036c9dc'){ throw 'R60 predecessor generation mismatch' }
+}
+
+Assert-R60Predecessor
+if($Stage -eq 'preflight'){
+  Write-Host '==== R60 PREPUBLISH WINDOWS GATE STAGE: PASS preflight ===='
+  return
+}
+
+if($Stage -eq 'all' -or $Stage -eq 'focused'){
+  Invoke-Npm 'r60-focused' @('run','r60:focused:test')
+  if($Stage -eq 'focused'){
+    Write-Host '==== R60 PREPUBLISH WINDOWS GATE STAGE: PASS focused ===='
+    return
+  }
+}
+
+if($Stage -eq 'full-batch'){
+  Write-Host "==== r60-full-regression-batch-$Batch ===="
+  & node.exe scripts/full-regression-r60.mjs "--batch=$Batch"
+  if($LASTEXITCODE -ne 0){ throw "R60 prepublish gate failed at full-batch-$Batch exit=$LASTEXITCODE" }
+  Write-Host "==== R60 PREPUBLISH WINDOWS GATE STAGE: PASS full-batch-$Batch ===="
+  return
+}
+
+if($Stage -eq 'all'){
+  Invoke-Npm 'r60-full-regression' @('run','r60:full:test')
+}
+
+if($Stage -eq 'all' -or $Stage -eq 'manifest'){
+  Invoke-Npm 'manifest-write' @('run','manifest:write')
+  Invoke-Npm 'manifest-verify' @('run','manifest:verify')
+  if($Stage -eq 'manifest'){
+    Write-Host '==== R60 PREPUBLISH WINDOWS GATE STAGE: PASS manifest ===='
+    return
+  }
+}
+
+if($Stage -eq 'all' -or $Stage -eq 'doctor'){
+  Invoke-Npm 'doctor' @('run','doctor')
+  if($Stage -eq 'doctor'){
+    Write-Host '==== R60 PREPUBLISH WINDOWS GATE STAGE: PASS doctor ===='
+    return
+  }
+}
+
+Write-Host '==== R60 PREPUBLISH WINDOWS GATE: PASS ===='

package/scripts/gate-windows-r61-prepublish.ps1

@@ -0,0 +1,45 @@
+param(
+  [ValidateSet('all','preflight','focused','full','manifest','doctor')]
+  [string]$Stage='all'
+)
+
+$ErrorActionPreference='Stop'
+Set-StrictMode -Version 3.0
+$root=Split-Path $PSScriptRoot -Parent
+Set-Location -LiteralPath $root
+
+function Invoke-Npm([string]$Name,[string[]]$NpmArgs){
+  Write-Host "==== $Name ===="
+  & npm.cmd @NpmArgs
+  if($LASTEXITCODE -ne 0){ throw "R61 prepublish gate failed at $Name exit=$LASTEXITCODE" }
+}
+
+$stateRoot=if(-not [string]::IsNullOrWhiteSpace($env:DEADBYTE_STATE_ROOT)){
+  [IO.Path]::GetFullPath($env:DEADBYTE_STATE_ROOT)
+}else{ Join-Path $env:USERPROFILE '.deadbyte-mcp' }
+$pointer=Join-Path $stateRoot 'active-release.json'
+if(-not (Test-Path -LiteralPath $pointer -PathType Leaf)){ throw "R61 predecessor pointer missing: $pointer" }
+$active=Get-Content -LiteralPath $pointer -Raw | ConvertFrom-Json
+if($active.release_id -ne 'v0.15.37-1cfecd7889419da7'){ throw "R61 predecessor release mismatch: $($active.release_id)" }
+if($active.manifest_sha256 -ne '1cfecd7889419da7800814e3a2a4ffa93d48dfdb0c344a5b7b91fe8d093230aa'){ throw 'R61 predecessor manifest mismatch' }
+if($active.generation_manifest_sha256 -ne '54842021c75f01bf7ecbd5b10ab8a482ecf107765b45c46f9d39b12bab65eac4'){ throw 'R61 predecessor generation mismatch' }
+if($Stage -eq 'preflight'){Write-Host '==== R61 WINDOWS GATE: PASS preflight ====';return}
+
+if($Stage -eq 'all' -or $Stage -eq 'focused'){
+  Invoke-Npm 'r61-focused' @('run','r61:focused:test')
+  if($Stage -eq 'focused'){Write-Host '==== R61 WINDOWS GATE: PASS focused ====';return}
+}
+if($Stage -eq 'all' -or $Stage -eq 'full'){
+  Invoke-Npm 'full-regression' @('test')
+  if($Stage -eq 'full'){Write-Host '==== R61 WINDOWS GATE: PASS full ====';return}
+}
+if($Stage -eq 'all' -or $Stage -eq 'manifest'){
+  Invoke-Npm 'manifest-write' @('run','manifest:write')
+  Invoke-Npm 'manifest-verify' @('run','manifest:verify')
+  if($Stage -eq 'manifest'){Write-Host '==== R61 WINDOWS GATE: PASS manifest ====';return}
+}
+if($Stage -eq 'all' -or $Stage -eq 'doctor'){
+  Invoke-Npm 'doctor' @('run','doctor')
+  if($Stage -eq 'doctor'){Write-Host '==== R61 WINDOWS GATE: PASS doctor ====';return}
+}
+Write-Host '==== R61 PREPUBLISH WINDOWS GATE: PASS ===='

package/scripts/npm-artifact-identity-r61.mjs

@@ -0,0 +1,22 @@
+import {createHash} from 'node:crypto';
+
+const digest=(name,bytes,encoding='hex')=>createHash(name).update(bytes).digest(encoding);
+
+export function verifyPublishedTarballIdentity({version,localBytes,registryBytes,published,tags}){
+  if(typeof version!=='string'||!/^\d+\.\d+\.\d+$/.test(version)||!Buffer.isBuffer(localBytes)||!Buffer.isBuffer(registryBytes)){
+    throw new Error('npm artifact identity inputs invalid');
+  }
+  const tarballSha256=digest('sha256',localBytes);
+  const integrity='sha512-'+digest('sha512',localBytes,'base64');
+  const shasum=digest('sha1',localBytes);
+  const dist=published?.dist??published;
+  if(published?.version!==version||dist?.integrity!==integrity||dist?.shasum!==shasum||
+     dist?.tarball!==`https://registry.npmjs.org/deadbyte-mcp/-/deadbyte-mcp-${version}.tgz`){
+    throw new Error('published registry metadata does not match the exact local tarball');
+  }
+  if(tags?.latest!==version)throw new Error(`npm latest tag mismatch: expected ${version}, got ${tags?.latest??'<missing>'}`);
+  if(digest('sha256',registryBytes)!==tarballSha256||'sha512-'+digest('sha512',registryBytes,'base64')!==integrity){
+    throw new Error('registry tarball bytes differ from the exact published local artifact');
+  }
+  return Object.freeze({tarball_sha256:tarballSha256,npm_integrity:integrity,shasum});
+}

package/scripts/npm-release-r48.mjs

@@ -1,4 +1,5 @@
 import { spawnSync } from 'node:child_process';
+import { verifyPublishedTarballIdentity } from './npm-artifact-identity-r61.mjs';
 import { mkdtemp, readFile, rm, unlink } from 'node:fs/promises';
 import path from 'node:path';
 import os from 'node:os';
@@ -58,6 +59,8 @@ const allowedUnmanifested = new Set([
 
 async function main() {
   const isVerifyOnly = process.argv.includes('--verify-only') || process.argv.includes('--dry-run');
+  const publishOnly = process.argv.includes('--publish-only');
+  if (isVerifyOnly && publishOnly) throw new Error('--publish-only conflicts with verify-only mode');
 
   console.log(`[1/7] Reading package.json and checking registry publication status... ${isVerifyOnly ? '(MODE: VERIFY-ONLY / DRY-RUN)' : '(MODE: PUBLISH)'}`);
   const pkg = JSON.parse(await readFile(path.join(root, 'package.json'), 'utf8'));
@@ -180,6 +183,8 @@ async function main() {
       return;
     }
 
+    const localBytes = await readFile(tarball);
+
     console.log('[6/7] Publishing artifact to npm registry...');
     publishAttempted = true;
     let publishOut;
@@ -193,8 +198,15 @@ async function main() {
       }
       throw publishError;
     }
-    const published = parseJson(runNpm(['view', `deadbyte-mcp@${version}`, 'version', 'dist.integrity', 'dist.tarball', '--json'], { timeout: 120000 }));
+    const viewed = parseJson(runNpm(['view', `deadbyte-mcp@${version}`, 'version', 'dist.integrity', 'dist.shasum', 'dist.tarball', '--json'], { timeout: 120000 }));
+    const published = Array.isArray(viewed) ? viewed[0] : viewed;
+    const dist = published?.dist ?? published;
+    if(typeof dist?.tarball !== 'string')throw new Error('published registry tarball URL missing');
+    const registryResponse = await fetch(dist.tarball,{signal:AbortSignal.timeout(120000)});
+    if(!registryResponse.ok) throw new Error(`registry tarball fetch failed status=${registryResponse.status}`);
+    const registryBytes = Buffer.from(await registryResponse.arrayBuffer());
     const tags = parseJson(runNpm(['view', 'deadbyte-mcp', 'dist-tags', '--json'], { timeout: 120000 }));
+    const identity=verifyPublishedTarballIdentity({version,localBytes,registryBytes,published,tags});
 
     console.log('[7/7] Post-publish external registry smoke test (executed outside repo in temp)...');
     const tempDir = os.tmpdir();
@@ -211,16 +223,20 @@ async function main() {
       timeout: 300000,
     });
 
-    console.log('[8/8] Activating the published release into the live immutable slot and waiting for verified handoff...');
-    run(node, [path.join(root, 'scripts', 'deploy-r48.mjs')], { cwd: root, timeout: 900000 });
+    if(!publishOnly){
+      console.log('[8/8] Activating the published release into the live immutable slot and waiting for verified handoff...');
+      run(node, [path.join(root, 'scripts', 'deploy-r48.mjs')], { cwd: root, timeout: 900000 });
+    }else console.log('[8/8] Publication verified; activation deliberately deferred to the separate production gate.');
 
     releaseSucceeded = true;
     console.log('\nRELEASE SUCCESSFUL:');
     console.log(JSON.stringify({
-      status: 'published',
+      status: publishOnly?'published_verified_activation_pending':'published',
       name: pkg.name,
       version,
       tarball: filename,
+      tarball_sha256: identity.tarball_sha256,
+      npm_integrity: identity.npm_integrity,
       published,
       published_output_tail: publishOut.slice(-2000),
       dist_tags: tags,
@@ -231,7 +247,7 @@ async function main() {
     }, null, 2));
 
   } finally {
-    if (releaseSucceeded || !publishAttempted) {
+    if ((releaseSucceeded && !publishOnly) || !publishAttempted) {
       await unlink(tarball).catch(() => {});
     } else {
       console.error('Release artifact preserved after failure: ' + tarball);

package/scripts/r61-mixed-lane-benchmark.mjs

@@ -0,0 +1,98 @@
+import {mkdtemp,mkdir,readFile,readdir,stat,writeFile,open,rm} from 'node:fs/promises';
+import {spawn} from 'node:child_process';
+import {createHash} from 'node:crypto';
+import {monitorEventLoopDelay,performance} from 'node:perf_hooks';
+import {pathToFileURL} from 'node:url';
+import os from 'node:os';
+import path from 'node:path';
+
+const roots=process.argv.slice(2);
+if(roots.length!==2||roots.some(item=>!path.isAbsolute(item)))throw new Error('two absolute governor module paths required');
+const levels=(process.env.DEADBYTE_R61_BENCH_LEVELS??'1,2,4,8,16,32').split(',').map(Number);
+if(!levels.length||levels.some(level=>![1,2,4,8,16,32].includes(level))||new Set(levels).size!==levels.length)throw new Error('benchmark levels invalid');
+const ROUNDS=Number(process.env.DEADBYTE_R61_BENCH_ROUNDS??3),OPS=160;
+if(!Number.isInteger(ROUNDS)||ROUNDS<3||ROUNDS>15)throw new Error('benchmark rounds must be 3..15');
+const scratchRoot=process.env.DEADBYTE_R61_SCRATCH_ROOT;
+if(!scratchRoot||!path.isAbsolute(scratchRoot))throw new Error('explicit absolute DEADBYTE_R61_SCRATCH_ROOT required');
+const quant=(values,p)=>{const ordered=[...values].sort((a,b)=>a-b);return ordered[Math.max(0,Math.ceil(ordered.length*p)-1)]};
+const sha=value=>createHash('sha256').update(value).digest('hex');
+
+async function childOutput(){
+  const child=spawn(process.execPath,['-e','process.stdout.write("R61_CHILD_OK")'],{windowsHide:true,stdio:['ignore','pipe','pipe']});
+  let output='';for await(const chunk of child.stdout)output+=chunk;
+  const exit=await new Promise(resolve=>child.once('close',resolve));
+  if(exit!==0||output!=='R61_CHILD_OK')throw new Error('bounded child process oracle failed');
+}
+
+async function runCase(modulePath,level,round){
+  const {createBridgeGovernor}=await import(pathToFileURL(modulePath).href);
+  await mkdir(scratchRoot,{recursive:true});
+  const scratch=await mkdtemp(path.join(scratchRoot,'deadbyte-r61-bench-'));
+  const fixture=path.join(scratch,'fixture'),audit=path.join(scratch,'presentation.jsonl');
+  await mkdir(fixture);
+  const sample='deadbyte bounded corpus สวัสดี\n'.repeat(512);
+  for(let i=0;i<16;i++)await writeFile(path.join(fixture,`f${i}.txt`),sample);
+  const governor=createBridgeGovernor();
+  const calls=[],control=[],counts={error:0,unknown:0},peak={rss:process.memoryUsage().rss,queue:0,active:0};
+  const delay=monitorEventLoopDelay({resolution:20});delay.enable();
+  let next=0;
+  const started=performance.now();
+  async function worker(){
+    while(next<OPS){
+      const i=next++;
+      const kind=i%16;
+      const tool=kind<3?(kind===0?'machine_ping':'machine_status'):
+        kind<5?'capability_manifest':kind<8?'machine_fs_read':kind<10?'coding_search':
+        kind<12?'machine_fs_write':kind===12?'process_session_start':kind<15?'coding_file_read':'machine_process_list';
+      const t=performance.now();let ticket;
+      try{
+        ticket=await governor.acquire(tool);
+        if(tool==='machine_ping')sha(`nonce-${round}-${i}`);
+        else if(tool==='machine_status')await stat(fixture);
+        else if(tool==='capability_manifest')sha(await readFile(roots[0]));
+        else if(tool==='coding_search'){
+          const names=await readdir(fixture);
+          for(const name of names)if((await readFile(path.join(fixture,name),'utf8')).includes('bounded'))break;
+        }else if(tool==='machine_fs_write')await writeFile(path.join(scratch,`out-${i}.txt`),sample.slice(0,128));
+        else if(tool==='process_session_start')await childOutput();
+        else if(tool==='machine_process_list')os.cpus().length;
+        else await readFile(path.join(fixture,`f${i%16}.txt`));
+        const line=JSON.stringify({kind,at:i,hash:sha(String(i))})+'\n';
+        const handle=await open(audit,'a');try{await handle.writeFile(line);await handle.sync();}finally{await handle.close();}
+      }catch(error){counts.error++;throw error;}
+      finally{
+        ticket?.release();
+        const elapsed=performance.now()-t;
+        calls.push(elapsed);if(kind<3)control.push(elapsed);
+        const state=governor.snapshot();
+        peak.rss=Math.max(peak.rss,process.memoryUsage().rss);
+        peak.queue=Math.max(peak.queue,...Object.values(state).map(value=>value.queued));
+        peak.active=Math.max(peak.active,...Object.values(state).map(value=>value.active));
+      }
+    }
+  }
+  try{
+    await Promise.all(Array.from({length:level},()=>worker()));
+    await governor.close();
+    const total=performance.now()-started;
+    return {level,round,n:calls.length,throughput_ops_s:OPS*1000/total,p50_ms:quant(calls,.5),p95_ms:quant(calls,.95),
+      p99_ms:quant(calls,.99),max_ms:Math.max(...calls),control_p95_ms:quant(control,.95),
+      event_loop_p95_ms:delay.percentile(95)/1e6,peak_rss_bytes:peak.rss,peak_queue:peak.queue,
+      peak_active:peak.active,errors:counts.error,unknown:counts.unknown};
+  }finally{delay.disable();await rm(scratch,{recursive:true,force:true});}
+}
+
+const results=[];
+for(const level of levels)for(let round=0;round<ROUNDS;round++){
+  const order=round%2===0?[0,1]:[1,0];
+  for(const index of order)results.push({target:index,...await runCase(roots[index],level,round)});
+}
+const report={schema:'deadbyte.r61.mixed-lane-benchmark.v1',node:process.version,platform:process.platform,
+  governor_sha256:await Promise.all(roots.map(async value=>sha(await readFile(value)))),levels,rounds:ROUNDS,operations_per_run:OPS,
+  limitations:['direct governor and real scratch I/O, not full MCP transport','presentation traffic is fsynced fixture data, not signed audit'],results};
+const outputPath=process.env.DEADBYTE_R61_BENCH_OUTPUT;
+if(outputPath){
+  if(!path.isAbsolute(outputPath))throw new Error('benchmark output must be absolute');
+  await writeFile(outputPath,JSON.stringify(report,null,2)+'\n',{flag:'wx'});
+  console.log(JSON.stringify({schema:report.schema,output_path:outputPath,result_count:results.length,governor_sha256:report.governor_sha256}));
+}else console.log(JSON.stringify(report,null,2));

package/src/capability-snapshot.mjs

@@ -39,7 +39,12 @@ export function createCapabilitySnapshotTracker({clock=Date.now,ttlMs=5000}={}){
     const body={profile,ledger_sha256:ledger.ledger_sha256,tool_catalog:[...toolCatalog],tool_count:toolCatalog.length,
       catalog_sha256:catalogSha256,capabilities,effective_capabilities:[...(resolution.effective_capabilities??[])],
       unavailable_capabilities:[...(resolution.unavailable_capabilities??[])],degraded_capabilities:[...(resolution.degraded_capabilities??[])],
-      bindings:safeBindings,planes:safePlanes};
+      bindings:safeBindings,planes:safePlanes,
+      // Informational transport contract, not an authority-bearing ledger entry.
+      remote_dispatch_contract:Object.freeze({scope:'bridge_ingress_only',schema:'deadbyte.remote-dispatch.v1',
+        keyed_mutation:'same stable key and canonical payload: no duplicate dispatch; unknown post-dispatch outcome is not retried',
+        read_only_recovery:'a proven read-only interrupted call may re-execute under its original deadline',
+        keyless_mutation:'cross-reconnect logical retry safety unavailable; ambiguous outcome is not auto-replayed'})};
     const fingerprint=sha(body);
     if(fingerprint!==lastFingerprint){stateEpoch++;lastFingerprint=fingerprint;lastSnapshotId=sha({fingerprint,state_epoch:stateEpoch});}
     const observed=Number(clock());
@@ -49,4 +54,3 @@ export function createCapabilitySnapshotTracker({clock=Date.now,ttlMs=5000}={}){
   }
   return Object.freeze({snapshot});
 }
-