deadbyte-mcp 0.15.37 → 0.15.39

package/TEST-MATRIX.json

@@ -1,7 +1,7 @@
 {
   "schema": "deadbyte.test-matrix.v1",
-  "version": "0.15.37",
-  "train": "R60",
+  "version": "0.15.39",
+  "train": "R62",
   "primary_platform": "win32-x64",
   "reference": {
     "package": "@wonderwhy-er/desktop-commander",
@@ -11,19 +11,24 @@
   },
   "required": [
     {
-      "id": "r60-focused",
-      "command": "npm run r60:focused:test",
-      "expected": "PASS R60 authority truth, Bridge idempotency/recovery, reconnect, timeline, clock and Windows decode contracts"
+      "id": "r62-focused",
+      "command": "npm run r62:focused:test",
+      "expected": "PASS R62 release identity, signed transaction reconciliation, R31 signed failure receipt producer/consumer, inherited rollback/update contracts"
     },
     {
-      "id": "r60-full-regression",
-      "command": "npm run r60:full:test",
-      "expected": "PASS complete current successor regression; connector execution may observe the identical 16-batch partition"
+      "id": "r62-live-parent-audit",
+      "command": "node scripts/r62-live-transaction-audit.mjs",
+      "expected": "READ-ONLY complete parent inventory; verify every available signed terminal receipt; preserve unsigned residue"
+    },
+    {
+      "id": "r62-full-regression",
+      "command": "npm test",
+      "expected": "PASS complete current R62 regression with only documented historical/platform skips"
     },
     {
       "id": "windows-gate",
       "command": "npm run gate:windows",
-      "expected": "PASS exact 0.15.36 predecessor, focused/full regression, manifest verify and doctor; inherited transaction residue may remain an explicit WARN until production transition"
+      "expected": "PASS exact sealed 0.15.38 predecessor, focused/full regression, manifest verify and doctor"
     },
     {
       "id": "package-verify",
@@ -37,18 +42,18 @@
     },
     {
       "id": "activation",
-      "command": "activate exact packed deadbyte-mcp@0.15.37 candidate",
-      "expected": "activate exact R60 from exact active 0.15.36 only after prepublish/package gates"
+      "command": "activate exact packed deadbyte-mcp@0.15.39 candidate",
+      "expected": "activate exact R62 from exact active 0.15.38 only after prepublish/package gates"
     },
     {
       "id": "rollback",
-      "command": "runtime-update --rollback-receipt <signed R60 activation receipt>",
-      "expected": "restore exact signed 0.15.36 pointer/runtime and verify release/generation/machine binding"
+      "command": "runtime-update --rollback-receipt <signed R62 activation receipt>",
+      "expected": "restore exact signed 0.15.38 pointer/runtime and verify release/generation/machine binding"
     },
     {
       "id": "restore",
-      "command": "restore exact same packed 0.15.37 candidate",
-      "expected": "restore exact immutable R60 release/generation and verify public MCP without rebuild"
+      "command": "restore exact same packed 0.15.39 candidate",
+      "expected": "restore exact immutable R62 release and verify public MCP without rebuild"
     }
   ],
   "observed_pre_release_evidence": {
@@ -212,6 +217,39 @@
     },
     "r60_activation_rollback_restore": {
       "status": "PENDING"
+    },
+    "r62_transaction_reconciliation": {
+      "tdd_red_receipt_sha256": "16118ec5e0c71957ec5509de6e774e12cbf9d2e657e1fd3e62a66bc86f36c89a",
+      "budget_red_receipt_sha256": "e0793a32d9c9d80c14035da3120b502185c784be22e1640bb4e5e71719c38d0d",
+      "terminal_proof_red_receipt_sha256": "7528cbba9b90b79aea580d1ef28cb7ae61094ef59782d1c2c68d63d7db67131f",
+      "r31_consumer_red_receipt_sha256": "a1689e1401da1b1ef0b58eaab89ad252adc5b603daeb910265c59844a29468fe",
+      "r31_producer_red_receipt_sha256": "f545c8a23fd9c80bf4dec6598a0f1c5682f8042826f52857bc21995a75308836",
+      "receipt_semantics_red_receipt_sha256": "591be25ff760f5790a7ce9d82a02642fdc71f7c8519e33f4d77de4462408ea94",
+      "focused_green_receipt_sha256": "c22d815903145fcd69eec58ca8feb7d6b15357165cb87642473de681c0a401c4",
+      "r31_producer_green_receipt_sha256": "0f0211ef085f4e9609b2c86ab78a0cb29bd59c3799093bb9247fe223a0783dcd",
+      "parent_live_audit_receipt_sha256": "08eabb45edb661e3542fdbdb985148cd1645f6cbd2dd916cb3c11162ae2e8c2b",
+      "parent_states_checked": 341,
+      "parent_signed_terminal_receipts_verified": 322,
+      "parent_unresolved_unsigned_transactions": 14,
+      "historical_evidence_mutation": false,
+      "package_boundary_red_receipt_sha256": "df0173b771d7e0170c5e8b6bb4eee26e64d19b42807634af666462cac2b26bb7",
+      "package_boundary_green_receipt_sha256": "ccbe983ef796676818f5fcd9a987b589f18472b88e23b59016f5e25525435e7c",
+      "full_regression": {
+        "tests": 1264,
+        "passed": 1226,
+        "skipped": 38,
+        "failed": 0,
+        "status": "PASS_PRE_METADATA_SEAL"
+      },
+      "windows_gate": {
+        "status": "PASS_PRE_METADATA_SEAL",
+        "manifest_entries": 2223,
+        "manifest_sha256": "034afc13a19c8f7d1cb9e01e95127084f576251bd72b5408a2c378a37907b7ae"
+      },
+      "package": "PENDING",
+      "registry": "PENDING",
+      "activation_rollback_restore": "PENDING",
+      "status": "PASS_PREPUBLISH_PRE_METADATA_SEAL"
     }
   },
   "inherited_parent_evidence": {
@@ -282,6 +320,20 @@
       "candidate_version": "0.15.37",
       "public_surface_tool_count": 43,
       "status": "PENDING_POST_FREEZE_MEASUREMENT"
+    },
+    "r61": {
+      "baseline_version": "0.15.37",
+      "candidate_version": "0.15.38",
+      "public_surface_tool_count": 43,
+      "governor_benchmark_path": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.38\\r61-ab-nine-rounds.json",
+      "governor_benchmark_status": "PASS_SCOPED_DIRECT_GOVERNOR",
+      "full_mcp_performance_status": "PENDING"
+    },
+    "r62": {
+      "baseline_version": "0.15.38",
+      "candidate_version": "0.15.39",
+      "public_surface_tool_count": 43,
+      "status": "NO_MCP_HOT_PATH_CHANGE_TRANSACTION_DIAGNOSTIC_ONLY"
     }
   },
   "non_win32": {

package/bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-chatgpt-bridge",
-  "version": "0.15.37",
+  "version": "0.15.39",
   "private": true,
   "type": "module",
   "engines": {

package/bridge/src/bridge.mjs

@@ -419,9 +419,9 @@ function buildFrontServer() {
       if(!currentHealth.core||['STARTING','RECONCILING','STOPPING'].includes(currentHealth.state)) throw new Error(`bridge correlation generation=${downstreamGeneration}; downstream ${currentHealth.state.toLowerCase()}; request not dispatched`);
       if (tool.name !== 'autonomous_goal_run') {
         const audit = auditToolStart(tool.name, args);
-        const ticket = await bridgeGovernor.acquire(tool.name,{signal:ctx.mcpReq.signal});
+        const ticket = await bridgeGovernor.acquire(tool.name,{signal:ctx.mcpReq.signal,arguments:args});
         try {
-          const budget = bridgeDeadlineForTool(tool.name);
+          const budget = bridgeDeadlineForTool(tool.name,args);
           const result = await dispatchDownstream(tool,args,ctx,budget);
           enforceDesktopBridgeResult(tool.name, result);
           auditToolFinish(audit, result);
@@ -442,10 +442,10 @@ function buildFrontServer() {
         callArgs.planner_response = { request_id: state.request_id, raw_text: planner.raw_text, model: planner.model };
       }
       const audit = auditToolStart(tool.name, callArgs);
-      const ticket = await bridgeGovernor.acquire(tool.name,{signal:ctx.mcpReq.signal});
+      const ticket = await bridgeGovernor.acquire(tool.name,{signal:ctx.mcpReq.signal,arguments:callArgs});
       let result;
       try {
-        const budget = bridgeDeadlineForTool(tool.name);
+        const budget = bridgeDeadlineForTool(tool.name,callArgs);
         result = await dispatchDownstream(tool,callArgs,ctx,budget);
         auditToolFinish(audit, result);
       } catch (error) {

package/bridge/src/r40-governor.mjs

@@ -4,24 +4,39 @@ const DESKTOP_RAW_KEYS=new Set([
   'pixels','pixel_bytes','frame_bytes','raw_bgra','raw_rgba','raw_image','screenshot_bytes','bitmap_bytes'
 ]);
 const DEFAULT_LIMITS=Object.freeze({
+  control:Object.freeze({max_active:8,max_queue:16,queue_timeout_ms:5000}),
   normal:Object.freeze({max_active:8,max_queue:32,queue_timeout_ms:30000}),
+  bulk:Object.freeze({max_active:8,max_queue:16,queue_timeout_ms:30000}),
   autonomous:Object.freeze({max_active:2,max_queue:8,queue_timeout_ms:60000}),
   desktop_observe:Object.freeze({max_active:2,max_queue:4,queue_timeout_ms:10000}),
   desktop_action:Object.freeze({max_active:1,max_queue:2,queue_timeout_ms:5000})
 });
+const DEFAULT_SHARED_LIMITS=Object.freeze({max_active:9,max_non_control_active:8});
 const DEADLINES=Object.freeze({
+  control:Object.freeze({timeout:10000,maxTotalTimeout:15000}),
   normal:Object.freeze({timeout:120000,maxTotalTimeout:180000}),
+  bulk:Object.freeze({timeout:120000,maxTotalTimeout:180000}),
   autonomous:Object.freeze({timeout:900000,maxTotalTimeout:1200000}),
   desktop_observe:Object.freeze({timeout:30000,maxTotalTimeout:60000}),
   desktop_action:Object.freeze({timeout:30000,maxTotalTimeout:45000})
 });
 
 function insist(condition,message){ if(!condition) throw new Error(message); }
-function toolClass(name){
+function toolClass(name,args={}){
   const value=String(name??'');
   if(value==='autonomous_goal_run') return 'autonomous';
-  if(value==='desktop_action') return 'desktop_action';
+  if(value==='desktop_action'||(value==='desktop_control'&&['action','target'].includes(args?.op))) return 'desktop_action';
   if(value.startsWith('desktop_')) return 'desktop_observe';
+  if(value==='desktop_control') return 'desktop_observe';
+  if(['machine_ping','machine_status','machine_revoke','machine_list','capability_manifest',
+    'autonomous_session_status','coding_session_status'].includes(value))return 'control';
+  if(value==='machine_observe'&&['machine_ping','machine_status','machine_list'].includes(args?.op))return 'control';
+  if(['coding_search','coding_command_run','coding_benchmark_run','coding_task_run',
+    'process_session_start','process_session_read','process_session_action',
+    'machine_search_start','machine_search_page'].includes(value))return 'bulk';
+  if(value==='coding_inspect'&&['search','symbol_references','symbol_implementations'].includes(args?.op))return 'bulk';
+  if(value==='process_session'&&['start','read','action'].includes(args?.op))return 'bulk';
+  if(value==='machine_observe'&&['search_start','search_page','process_list'].includes(args?.op))return 'bulk';
   return 'normal';
 }
 function estimateBase64Bytes(value){
@@ -57,8 +72,8 @@ function scanDesktopPayload(value,{maxPreviewBytes},path='result',seen=new Set()
   seen.delete(value);
 }
 
-export function bridgeToolClass(name){ return toolClass(name); }
-export function bridgeDeadlineForTool(name){ return DEADLINES[toolClass(name)]; }
+export function bridgeToolClass(name,args){ return toolClass(name,args); }
+export function bridgeDeadlineForTool(name,args){ return DEADLINES[toolClass(name,args)]; }
 export function bridgeCatalogSha256(toolNames){
   insist(Array.isArray(toolNames)&&toolNames.every(x=>typeof x==='string'),'bridge catalog names invalid');
   const sorted=[...new Set(toolNames)].sort();
@@ -95,8 +110,12 @@ export function enforceDesktopBridgeResult(toolName,result,{maxPreviewBytes=1024
   return result;
 }
 
-export function createBridgeGovernor({limits=DEFAULT_LIMITS}={}){
-  const classes=['normal','autonomous','desktop_observe','desktop_action'];
+export function createBridgeGovernor({limits:overrides={},shared:sharedOverrides={}}={}){
+  const limits={...DEFAULT_LIMITS,...overrides};
+  const shared={...DEFAULT_SHARED_LIMITS,...sharedOverrides};
+  insist(Number.isInteger(shared.max_active)&&shared.max_active>=2&&shared.max_active<=64,'bridge shared max_active invalid');
+  insist(Number.isInteger(shared.max_non_control_active)&&shared.max_non_control_active>=1&&shared.max_non_control_active<shared.max_active,'bridge shared max_non_control_active invalid');
+  const classes=['control','normal','bulk','autonomous','desktop_observe','desktop_action'];
   for(const name of classes){
     const cfg=limits[name];
     insist(cfg&&Number.isInteger(cfg.max_active)&&cfg.max_active>=1&&cfg.max_active<=64,`bridge limit ${name}.max_active invalid`);
@@ -104,6 +123,7 @@ export function createBridgeGovernor({limits=DEFAULT_LIMITS}={}){
     insist(Number.isInteger(cfg.queue_timeout_ms)&&cfg.queue_timeout_ms>=100&&cfg.queue_timeout_ms<=120000,`bridge limit ${name}.queue_timeout_ms invalid`);
   }
   const state=new Map(classes.map(name=>[name,{active:0,queue:[],admitted:0,completed:0,rejected:0,timed_out:0,cancelled:0}]));
+  let sharedActive=0,sharedNonControlActive=0;
   let sequence=0;
   let closed=false;
   const drainWaiters=[];
@@ -113,13 +133,75 @@ export function createBridgeGovernor({limits=DEFAULT_LIMITS}={}){
     while(drainWaiters.length) drainWaiters.shift()();
   }
 
-  function dispatch(name){
+  function canAdmit(name){
     const cfg=limits[name],s=state.get(name);
-    while(s.active<cfg.max_active&&s.queue.length){
+    if(s.active>=cfg.max_active)return false;
+    if(sharedActive>=shared.max_active)return false;
+    if(name!=='control'&&sharedNonControlActive>=shared.max_non_control_active)return false;
+    return true;
+  }
+
+  function noteAdmit(name){
+    sharedActive++;
+    if(name!=='control')sharedNonControlActive++;
+  }
+
+  function noteRelease(name){
+    sharedActive=Math.max(0,sharedActive-1);
+    if(name!=='control')sharedNonControlActive=Math.max(0,sharedNonControlActive-1);
+  }
+
+  function dispatchOne(name){
+    const s=state.get(name);
+    if(!canAdmit(name))return false;
+
+    while(s.queue.length){
       const waiter=s.queue.shift();
-      if(waiter.done) continue;
-      waiter.done=true; clearTimeout(waiter.timer); waiter.cleanup(); s.active++; s.admitted++;
-      waiter.resolve(makeTicket(name,waiter.tool,waiter.id,waiter.queuedAt));
+      if(waiter.done)continue;
+
+      waiter.done=true;
+      clearTimeout(waiter.timer);
+      waiter.cleanup();
+
+      s.active++;
+      noteAdmit(name);
+      s.admitted++;
+
+      waiter.resolve(
+        makeTicket(name,waiter.tool,waiter.id,waiter.queuedAt)
+      );
+
+      return true;
+    }
+
+    return false;
+  }
+
+  function oldestAdmissibleQueuedClass(){
+    let selected=null;
+
+    for(const name of classes){
+      if(!canAdmit(name))continue;
+
+      const s=state.get(name);
+      const waiter=s.queue.find(item=>!item.done);
+
+      if(!waiter)continue;
+
+      if(selected===null||waiter.id<selected.id){
+        selected={name,id:waiter.id};
+      }
+    }
+
+    return selected?.name??null;
+  }
+
+  function dispatchAvailable(){
+    while(true){
+      const name=oldestAdmissibleQueuedClass();
+
+      if(name===null)break;
+      if(!dispatchOne(name))break;
     }
   }
   function makeTicket(name,tool,id,queuedAt){
@@ -130,19 +212,19 @@ export function createBridgeGovernor({limits=DEFAULT_LIMITS}={}){
         if(released) return false;
         released=true;
         const s=state.get(name);
-        s.active=Math.max(0,s.active-1);s.completed++;
-        dispatch(name);
+        s.active=Math.max(0,s.active-1);noteRelease(name);s.completed++;
+        dispatchAvailable();
         finishDrain();
         return true;
       }
     });
   }
-  async function acquire(tool,{signal}={}){
-    const name=toolClass(tool),cfg=limits[name],s=state.get(name),id=++sequence,queuedAt=Date.now();
+  async function acquire(tool,{signal,arguments:args}={}){
+    const name=toolClass(tool,args),cfg=limits[name],s=state.get(name),id=++sequence,queuedAt=Date.now();
     if(closed){s.rejected++;throw new Error('bridge governor closed');}
     if(signal?.aborted){s.cancelled++;throw signal.reason instanceof Error?signal.reason:new Error('bridge request aborted');}
-    if(s.active<cfg.max_active){
-      s.active++;s.admitted++;
+    if(canAdmit(name)){
+      s.active++;noteAdmit(name);s.admitted++;
       return makeTicket(name,String(tool),id,queuedAt);
     }
     if(s.queue.length>=cfg.max_queue){s.rejected++;throw new Error(`bridge backpressure queue full for ${name}`);}
@@ -193,14 +275,22 @@ export function createBridgeGovernor({limits=DEFAULT_LIMITS}={}){
     return removed;
   }
   function snapshot(){
-    return Object.freeze(Object.fromEntries(classes.map(name=>{
+    const lanes=Object.fromEntries(classes.map(name=>{
       const s=state.get(name),cfg=limits[name];
       return [name,Object.freeze({active:s.active,queued:s.queue.filter(x=>!x.done).length,max_active:cfg.max_active,max_queue:cfg.max_queue,
         admitted:s.admitted,completed:s.completed,rejected:s.rejected,timed_out:s.timed_out,cancelled:s.cancelled,saturated:s.active>=cfg.max_active})];
-    })));
+    }));
+    return Object.freeze({...lanes,shared:Object.freeze({
+      active:sharedActive,
+      non_control_active:sharedNonControlActive,
+      max_active:shared.max_active,
+      max_non_control_active:shared.max_non_control_active,
+      saturated:sharedActive>=shared.max_active
+    })});
   }
   return Object.freeze({acquire,reconcile,close,snapshot});
 }
 
 export const BRIDGE_R40_DEFAULT_LIMITS=DEFAULT_LIMITS;
+export const BRIDGE_R61_SHARED_LIMITS=DEFAULT_SHARED_LIMITS;
 

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.37-r60\\controller\\runtime\\process-grant.json",
-  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.37-r60\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.39-r62\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.39-r62\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.37-r60\\bin\\deadbyte-process-host.exe",
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.39-r62\\bin\\deadbyte-process-host.exe",
     "sha256": "daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4"
   },
   "roots": {
     "core": {
-      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.37-r60",
+      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.39-r62",
       "deny_paths": [
         "node_modules",
         "controller/runtime",

package/docs/R61-TASK-CONTRACT.md

@@ -0,0 +1,11 @@
+# R61 LIVELOG and multi-workload resilience
+
+- Source: a byte-verified copy of the non-Git R60 development tree at `D:\Projects\deadbyte-mcp\development\deadbyte-mcp-0.15.38-r61`, retaining its three intentional LIVELOG edits. The old R60 path remains a compatibility dependency of the live 0.15.37 generation and is not an R61 edit target.
+- Sealed predecessor: `v0.15.37-1cfecd7889419da7`; release manifest `1cfecd7889419da7800814e3a2a4ffa93d48dfdb0c344a5b7b91fe8d093230aa`; generation manifest `54842021c75f01bf7ecbd5b10ab8a482ecf107765b45c46f9d39b12bab65eac4`.
+- Target: `deadbyte-mcp@0.15.38`, R61, unchanged 43-tool compact catalog and zero new authority scopes.
+- Mechanism decisions and license observations: [r61-reference-evidence.md](r61-reference-evidence.md). No donor source was copied.
+- RED: eight admitted `coding_search` jobs blocked `machine_ping` at the governor boundary; 12,000 filtered LIVELOG requests grew an unbounded identity map; a historical schema differential test referenced a moved external source despite byte-identical canonical reference content; the active 0.15.37 generation pinned Bridge source/dependency hashes to the mutable R60 development path, so the first R61 edits caused read-only controller status/doctor to fail.
+- Fix: existing Bridge governor now separates bounded control/ordinary/bulk admission; LIVELOG presentation and filter identities are bounded and audit-sequence-aware; the historical schema test reads the canonical reference corpus and retains the exact pinned SHA-256 check. The R61 updater verifies the development Bridge input but binds the generated runtime config to the manifest-verified immutable release slot. The two trusted R60 Bridge files were restored byte-for-byte from the sealed 0.15.37 slot after R61 was copied to its own path; live status returned ONLINE without restart, revoke, or slot mutation.
+- Performance evidence: `D:\Projects\deadbyte-mcp\testing\0.15.38\r61-ab-nine-rounds.json` (SHA-256 `3f10010654f08b4347c8e22e0f7ec3c521a69872878934770a0d2c0fd5b16ef7`) and 15-round 1/8 follow-up `r61-ab-single-and-eight.json` (SHA-256 `b16143ff7cb8aeced0e685352ffebeeeb74116d648d5b3509af2c66bd1f3b8a0a`). At 32-way mixed governor load, median throughput changed 790.1 → 903.75 ops/s, control p95 31.54 → 21.82 ms, and maximum observed queue depth 23 → 14. All 108 full-matrix runs had zero errors and unknown outcomes. At 1-way follow-up, throughput 244.78 → 246.82 ops/s and total p95 46.03 → 45.93 ms. This is a direct-governor/scratch-I/O benchmark, **not** full MCP transport, signed audit, or production-load proof.
+- R61 focused gate after identity change: 47/47 PASS, 0 skip. Isolated Bridge/Core cold start, public MCP status, Core recovery and stop: PASS in one run; not a multi-workload transport benchmark.
+- Final full regression, Windows gate, release manifest/doctor, package boundary after final bytes, registry, activation, rollback and restore remain separate required gates. This document is not a release PASS claim.

package/docs/r61-reference-evidence.md

@@ -0,0 +1,18 @@
+# R61 reference-mechanism decisions
+
+This is a source-inspection record, not authority to copy donor code. R61 uses
+patterns reimplemented inside existing DEADBYTE components. No donor source
+bytes or dependencies are imported.
+
+| Reference | Inspected source | Mechanism and comparison with DEADBYTE | License/decision |
+| --- | --- | --- | --- |
+| Better Remote Commander | `references/better-remote-commander/packages/relay/src/device-hub.ts`, `mcp/invoke.ts`, `NOTICE` | Replaces stale sockets, correlates call/result and uses a pong watchdog. DEADBYTE already has a single guarded Bridge dispatch and bounded reconnect; test half-open detection and shared recovery, but do not add a fleet or new relay. | Root package declares MIT; NOTICE identifies derived Desktop Commander code. ADAPT watchdog tests only; KEEP current dispatch. |
+| CUA | `references/cua/rfcs/3007-cua-driver-lifecycle-sessions.md`, `3682-typed-native-window-sdk.md`, `libs/cua-driver/rust/crates/cua-driver-core/tests/session_lifecycle.rs` | Accepted lifecycle sessions separate cleanup from authority; typed window actions distinguish snapshot target and post-action verification. DEADBYTE already has native Desktop and stale-frame controls. Add adversarial lifecycle/fresh-observation tests only if missing. RFC 2447 is superseded and not an architecture guide. | Top-level Python metadata declares MIT; component licenses must be checked before any copying. KEEP native/adapter split; ADAPT tests. |
+| Desktop Commander | `references/desktop-commander/dist/utils/toolHistory.js`, process handlers | History caps entries, stored output bytes and file size. DEADBYTE already bounds process retained output via policy, repairs PATHEXT, supports offset reads, cancellation and bounded operation history. LIVELOG completed identity set is unbounded presentation state. | Package declares MIT. ADAPT LIVELOG retention; KEEP process runtime. |
+| Open Remote MCP | `references/open-remote-mcp/docs/ARCHITECTURE.md`, `apps/agent/src/index.ts`, `NOTICE.md` | Relay policy narrows, never widens local device capability. DEADBYTE signed ledger and separate local planes are stronger; add a focused relay/local enforcement test, not a second permission system. | Root package has no license field in inspected metadata; no source copying. KEEP local authority; ADAPT test. |
+| ReMCP | `references/remcp/docs/TOOL_SELECTION_EVAL.md`, `scripts/check-distribution.mjs`, `docs/DISTRIBUTION.md` | Golden positive/negative tool-selection cases and cross-distribution identity checks. DEADBYTE already has exact catalog, release manifest and npm closure; add a small golden routing test without a new runtime dependency. | Package declares MIT. ADAPT evaluation; KEEP release machinery. |
+| Secure Host MCP | `references/secure-host-mcp/src/workspace.ts`, `src/executor.ts`, `test/workspace.test.ts` | Rejects broad workspace roots, resolves symlink parents and bounds executor time. DEADBYTE already has explicit roots, policy-pinned profiles and native containment. Probe equivalent boundary cases; do not expose generic shell or change root policy without RED evidence. | Package declares MIT. KEEP architecture; ADAPT adversarial cases if missing. |
+| WinRemote MCP | `references/winremote-mcp/src/winremote/security.py`, `tiers.py`, `tests/test_security_hardening.py` | Capability tiers and URL/OAuth hardening. DEADBYTE authority planes are narrower and independently revocable; OCR/tier expansion would add scope. Compare URL and Windows privilege boundary tests where current interfaces overlap. | Python metadata declares MIT. KEEP planes; REJECT OCR and tier expansion. |
+
+Acceptance remains based on DEADBYTE's observed behavior, not donor popularity.
+Any newly found donor gap requires a focused RED and a narrow local fix.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.37",
+  "version": "0.15.39",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
@@ -42,7 +42,7 @@
     "contained:run": "node src/contained-cli.mjs workspaces/demo input.txt",
     "contained:smoke": "node src/contained-smoke.mjs",
     "mcp:contained:smoke": "node src/mcp-contained-smoke-client.mjs",
-    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r60-prepublish.ps1",
+    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r62-prepublish.ps1",
     "authority:smoke": "node src/authority-smoke.mjs",
     "mcp:remote:smoke": "node src/remote-mcp-smoke-client.mjs",
     "mcp:host:smoke": "node src/mcp-host-smoke-client.mjs",
@@ -85,7 +85,9 @@
     "r59:focused:test": "node --test --test-concurrency=1 test/capability-snapshot-r59.test.mjs test/capability-resolver.test.mjs test/runtime-plane-registry-r59.test.mjs test/optional-plane-degraded-r59.test.mjs test/bridge-runtime-r59.test.mjs test/controller-policy-preflight-r59.test.mjs test/r59-tool-surface-compat.test.mjs test/r58-controller-state-coherence.test.mjs",
     "r59:release:test": "node --test --test-concurrency=1 test/r59-release-contract.test.mjs test/r59-tool-surface-compat.test.mjs test/bridge-runtime-r59.test.mjs test/controller-policy-preflight-r59.test.mjs",
     "r60:focused:test": "node --test --test-concurrency=1 test/r60-authority-coherence.test.mjs test/r60-authority-enforcement.test.mjs test/r60-bridge-dispatch.test.mjs test/r60-clock-discipline.test.mjs test/r60-live-timeline.test.mjs test/r60-reconnect-errors.test.mjs test/r60-reconnect-jitter.test.mjs test/r60-remote-call-recovery.test.mjs test/r60-windows-log-decode.test.mjs test/r60-release-contract.test.mjs",
-    "r60:full:test": "node scripts/full-regression-r60.mjs"
+    "r60:full:test": "node scripts/full-regression-r60.mjs",
+    "r61:focused:test": "node --test --test-concurrency=1 test/r61-release-contract.test.mjs test/r61-release-bridge-binding.test.mjs test/r61-control-lane.test.mjs test/r61-live-timeline-bounds.test.mjs test/r61-npm-artifact-identity.test.mjs test/remote-live-log-r37.test.mjs test/bridge-runtime-r59.test.mjs test/commander-schema-differential-r48.test.mjs test/package-boundary.test.mjs test/r60-bridge-dispatch.test.mjs test/r60-authority-enforcement.test.mjs",
+    "r62:focused:test": "node --test --test-concurrency=1 test/r62-release-contract.test.mjs test/r62-doctor-transactions-reconcile.test.mjs test/r62-doctor-receipt-semantics.test.mjs test/r62-rollback-failure-receipt.test.mjs test/r58-doctor-transactions.test.mjs test/r58-completed-update-receipt.test.mjs test/runtime-self-update.test.mjs test/r56-rollback-launcher-restore.test.mjs"
   },
   "bundleDependencies": [
     "@modelcontextprotocol/server",

package/scripts/gate-windows-r61-prepublish.ps1

@@ -0,0 +1,45 @@
+param(
+  [ValidateSet('all','preflight','focused','full','manifest','doctor')]
+  [string]$Stage='all'
+)
+
+$ErrorActionPreference='Stop'
+Set-StrictMode -Version 3.0
+$root=Split-Path $PSScriptRoot -Parent
+Set-Location -LiteralPath $root
+
+function Invoke-Npm([string]$Name,[string[]]$NpmArgs){
+  Write-Host "==== $Name ===="
+  & npm.cmd @NpmArgs
+  if($LASTEXITCODE -ne 0){ throw "R61 prepublish gate failed at $Name exit=$LASTEXITCODE" }
+}
+
+$stateRoot=if(-not [string]::IsNullOrWhiteSpace($env:DEADBYTE_STATE_ROOT)){
+  [IO.Path]::GetFullPath($env:DEADBYTE_STATE_ROOT)
+}else{ Join-Path $env:USERPROFILE '.deadbyte-mcp' }
+$pointer=Join-Path $stateRoot 'active-release.json'
+if(-not (Test-Path -LiteralPath $pointer -PathType Leaf)){ throw "R61 predecessor pointer missing: $pointer" }
+$active=Get-Content -LiteralPath $pointer -Raw | ConvertFrom-Json
+if($active.release_id -ne 'v0.15.37-1cfecd7889419da7'){ throw "R61 predecessor release mismatch: $($active.release_id)" }
+if($active.manifest_sha256 -ne '1cfecd7889419da7800814e3a2a4ffa93d48dfdb0c344a5b7b91fe8d093230aa'){ throw 'R61 predecessor manifest mismatch' }
+if($active.generation_manifest_sha256 -ne '54842021c75f01bf7ecbd5b10ab8a482ecf107765b45c46f9d39b12bab65eac4'){ throw 'R61 predecessor generation mismatch' }
+if($Stage -eq 'preflight'){Write-Host '==== R61 WINDOWS GATE: PASS preflight ====';return}
+
+if($Stage -eq 'all' -or $Stage -eq 'focused'){
+  Invoke-Npm 'r61-focused' @('run','r61:focused:test')
+  if($Stage -eq 'focused'){Write-Host '==== R61 WINDOWS GATE: PASS focused ====';return}
+}
+if($Stage -eq 'all' -or $Stage -eq 'full'){
+  Invoke-Npm 'full-regression' @('test')
+  if($Stage -eq 'full'){Write-Host '==== R61 WINDOWS GATE: PASS full ====';return}
+}
+if($Stage -eq 'all' -or $Stage -eq 'manifest'){
+  Invoke-Npm 'manifest-write' @('run','manifest:write')
+  Invoke-Npm 'manifest-verify' @('run','manifest:verify')
+  if($Stage -eq 'manifest'){Write-Host '==== R61 WINDOWS GATE: PASS manifest ====';return}
+}
+if($Stage -eq 'all' -or $Stage -eq 'doctor'){
+  Invoke-Npm 'doctor' @('run','doctor')
+  if($Stage -eq 'doctor'){Write-Host '==== R61 WINDOWS GATE: PASS doctor ====';return}
+}
+Write-Host '==== R61 PREPUBLISH WINDOWS GATE: PASS ===='

package/scripts/gate-windows-r62-prepublish.ps1

@@ -0,0 +1,45 @@
+param(
+  [ValidateSet('all','preflight','focused','full','manifest','doctor')]
+  [string]$Stage='all'
+)
+
+$ErrorActionPreference='Stop'
+Set-StrictMode -Version 3.0
+$root=Split-Path $PSScriptRoot -Parent
+Set-Location -LiteralPath $root
+
+function Invoke-Npm([string]$Name,[string[]]$NpmArgs){
+  Write-Host "==== $Name ===="
+  & npm.cmd @NpmArgs
+  if($LASTEXITCODE -ne 0){ throw "R62 prepublish gate failed at $Name exit=$LASTEXITCODE" }
+}
+
+$stateRoot=if(-not [string]::IsNullOrWhiteSpace($env:DEADBYTE_STATE_ROOT)){
+  [IO.Path]::GetFullPath($env:DEADBYTE_STATE_ROOT)
+}else{ Join-Path $env:USERPROFILE '.deadbyte-mcp' }
+$pointer=Join-Path $stateRoot 'active-release.json'
+if(-not (Test-Path -LiteralPath $pointer -PathType Leaf)){ throw "R62 predecessor pointer missing: $pointer" }
+$active=Get-Content -LiteralPath $pointer -Raw | ConvertFrom-Json
+if($active.release_id -ne 'v0.15.38-917901b3fcb2a77f'){ throw "R62 predecessor release mismatch: $($active.release_id)" }
+if($active.manifest_sha256 -ne '917901b3fcb2a77f696fedc539bd97c567d9dc59345779906fc633d11ea4bcfb'){ throw 'R62 predecessor manifest mismatch' }
+if($active.generation_manifest_sha256 -ne '9d320a8af1ba8e9e6a23552f35263da2670c00af1355464820552d849d9033c6'){ throw 'R62 predecessor generation mismatch' }
+if($Stage -eq 'preflight'){Write-Host '==== R62 WINDOWS GATE: PASS preflight ====';return}
+
+if($Stage -eq 'all' -or $Stage -eq 'focused'){
+  Invoke-Npm 'r62-focused' @('run','r62:focused:test')
+  if($Stage -eq 'focused'){Write-Host '==== R62 WINDOWS GATE: PASS focused ====';return}
+}
+if($Stage -eq 'all' -or $Stage -eq 'full'){
+  Invoke-Npm 'full-regression' @('test')
+  if($Stage -eq 'full'){Write-Host '==== R62 WINDOWS GATE: PASS full ====';return}
+}
+if($Stage -eq 'all' -or $Stage -eq 'manifest'){
+  Invoke-Npm 'manifest-write' @('run','manifest:write')
+  Invoke-Npm 'manifest-verify' @('run','manifest:verify')
+  if($Stage -eq 'manifest'){Write-Host '==== R62 WINDOWS GATE: PASS manifest ====';return}
+}
+if($Stage -eq 'all' -or $Stage -eq 'doctor'){
+  Invoke-Npm 'doctor' @('run','doctor')
+  if($Stage -eq 'doctor'){Write-Host '==== R62 WINDOWS GATE: PASS doctor ====';return}
+}
+Write-Host '==== R62 PREPUBLISH WINDOWS GATE: PASS ===='

package/scripts/npm-artifact-identity-r61.mjs

@@ -0,0 +1,22 @@
+import {createHash} from 'node:crypto';
+
+const digest=(name,bytes,encoding='hex')=>createHash(name).update(bytes).digest(encoding);
+
+export function verifyPublishedTarballIdentity({version,localBytes,registryBytes,published,tags}){
+  if(typeof version!=='string'||!/^\d+\.\d+\.\d+$/.test(version)||!Buffer.isBuffer(localBytes)||!Buffer.isBuffer(registryBytes)){
+    throw new Error('npm artifact identity inputs invalid');
+  }
+  const tarballSha256=digest('sha256',localBytes);
+  const integrity='sha512-'+digest('sha512',localBytes,'base64');
+  const shasum=digest('sha1',localBytes);
+  const dist=published?.dist??published;
+  if(published?.version!==version||dist?.integrity!==integrity||dist?.shasum!==shasum||
+     dist?.tarball!==`https://registry.npmjs.org/deadbyte-mcp/-/deadbyte-mcp-${version}.tgz`){
+    throw new Error('published registry metadata does not match the exact local tarball');
+  }
+  if(tags?.latest!==version)throw new Error(`npm latest tag mismatch: expected ${version}, got ${tags?.latest??'<missing>'}`);
+  if(digest('sha256',registryBytes)!==tarballSha256||'sha512-'+digest('sha512',registryBytes,'base64')!==integrity){
+    throw new Error('registry tarball bytes differ from the exact published local artifact');
+  }
+  return Object.freeze({tarball_sha256:tarballSha256,npm_integrity:integrity,shasum});
+}