deadbyte-mcp 0.15.38 → 0.15.41

package/TEST-MATRIX.json

@@ -1,7 +1,7 @@
 {
   "schema": "deadbyte.test-matrix.v1",
-  "version": "0.15.38",
-  "train": "R61",
+  "version": "0.15.41",
+  "train": "R64",
   "primary_platform": "win32-x64",
   "reference": {
     "package": "@wonderwhy-er/desktop-commander",
@@ -11,19 +11,19 @@
   },
   "required": [
     {
-      "id": "r61-focused",
-      "command": "npm run r61:focused:test",
-      "expected": "PASS R61 LIVELOG bounds, control/bulk admission, R60 authority and dispatch contracts, package boundary"
+      "id": "r64-focused",
+      "command": "npm run r64:focused:test",
+      "expected": "PASS R64 release identity, large-file pagination, bounds, replacement visibility, inherited machine fs and bridge/control contracts"
     },
     {
-      "id": "r61-full-regression",
+      "id": "r64-full-regression",
       "command": "npm test",
-      "expected": "PASS complete current R61 regression with only documented historical/platform skips"
+      "expected": "PASS complete current R64 regression with only documented historical/platform skips"
     },
     {
       "id": "windows-gate",
       "command": "npm run gate:windows",
-      "expected": "PASS exact 0.15.37 predecessor, focused/full regression, manifest verify and doctor"
+      "expected": "PASS exact R63 source manifest and active 0.15.39 runtime predecessor, R64 focused/full regression, manifest verify and doctor"
     },
     {
       "id": "package-verify",
@@ -31,24 +31,9 @@
       "expected": "PASS exact packed surface and isolated package version/doctor execution"
     },
     {
-      "id": "frontdoor",
-      "command": "node src/remote-mcp-smoke-client.mjs <active-https-mcp> smoke",
-      "expected": "PASS exact 43-tool compact catalog and independently verified Ed25519 ping after activation"
-    },
-    {
-      "id": "activation",
-      "command": "activate exact packed deadbyte-mcp@0.15.38 candidate",
-      "expected": "activate exact R61 from exact active 0.15.37 only after prepublish/package gates"
-    },
-    {
-      "id": "rollback",
-      "command": "runtime-update --rollback-receipt <signed R61 activation receipt>",
-      "expected": "restore exact signed 0.15.37 pointer/runtime and verify release/generation/machine binding"
-    },
-    {
-      "id": "restore",
-      "command": "restore exact same packed 0.15.38 candidate",
-      "expected": "restore exact immutable R61 release/generation and verify public MCP without rebuild"
+      "id": "r64-read-benchmark",
+      "command": "node scripts/r64-read-benchmark.mjs <R63> <R64> <scratch> <output>",
+      "expected": "PASS alternating same-host R63/R64 read and control-lane measurements without unexplained material regression"
     }
   ],
   "observed_pre_release_evidence": {
@@ -212,6 +197,52 @@
     },
     "r60_activation_rollback_restore": {
       "status": "PENDING"
+    },
+    "r62_transaction_reconciliation": {
+      "tdd_red_receipt_sha256": "16118ec5e0c71957ec5509de6e774e12cbf9d2e657e1fd3e62a66bc86f36c89a",
+      "budget_red_receipt_sha256": "e0793a32d9c9d80c14035da3120b502185c784be22e1640bb4e5e71719c38d0d",
+      "terminal_proof_red_receipt_sha256": "7528cbba9b90b79aea580d1ef28cb7ae61094ef59782d1c2c68d63d7db67131f",
+      "r31_consumer_red_receipt_sha256": "a1689e1401da1b1ef0b58eaab89ad252adc5b603daeb910265c59844a29468fe",
+      "r31_producer_red_receipt_sha256": "f545c8a23fd9c80bf4dec6598a0f1c5682f8042826f52857bc21995a75308836",
+      "receipt_semantics_red_receipt_sha256": "591be25ff760f5790a7ce9d82a02642fdc71f7c8519e33f4d77de4462408ea94",
+      "focused_green_receipt_sha256": "c22d815903145fcd69eec58ca8feb7d6b15357165cb87642473de681c0a401c4",
+      "r31_producer_green_receipt_sha256": "0f0211ef085f4e9609b2c86ab78a0cb29bd59c3799093bb9247fe223a0783dcd",
+      "parent_live_audit_receipt_sha256": "08eabb45edb661e3542fdbdb985148cd1645f6cbd2dd916cb3c11162ae2e8c2b",
+      "parent_states_checked": 341,
+      "parent_signed_terminal_receipts_verified": 322,
+      "parent_unresolved_unsigned_transactions": 14,
+      "historical_evidence_mutation": false,
+      "package_boundary_red_receipt_sha256": "df0173b771d7e0170c5e8b6bb4eee26e64d19b42807634af666462cac2b26bb7",
+      "package_boundary_green_receipt_sha256": "ccbe983ef796676818f5fcd9a987b589f18472b88e23b59016f5e25525435e7c",
+      "full_regression": {
+        "tests": 1264,
+        "passed": 1226,
+        "skipped": 38,
+        "failed": 0,
+        "status": "PASS_PRE_METADATA_SEAL"
+      },
+      "windows_gate": {
+        "status": "PASS_PRE_METADATA_SEAL",
+        "manifest_entries": 2223,
+        "manifest_sha256": "034afc13a19c8f7d1cb9e01e95127084f576251bd72b5408a2c378a37907b7ae"
+      },
+      "package": "PENDING",
+      "registry": "PENDING",
+      "activation_rollback_restore": "PENDING",
+      "status": "PASS_PREPUBLISH_PRE_METADATA_SEAL"
+    },
+    "r63_one_shot_runtime_coherence": {
+      "tdd_red_receipt_sha256": "3634f21b8799730a740bc12eb8b7f94c5210709d88773a985ce48b99afd6523c",
+      "tdd_green_receipt_sha256": "1fb812f695d9becff3bb5deb0bc2518cd00a870f64abacbd18e687cde5ab94cc",
+      "release_contract_red_receipt_sha256": "61dd572a186d0078dad6d3459ea34120ae459f546562eda13b649d48dda9e2a0",
+      "coherent_status_test": "PASS",
+      "focused": "PASS_34_OF_34",
+      "full_regression": "PENDING",
+      "windows_gate": "PASS_PREFLIGHT_AND_FOCUSED",
+      "package": "PENDING",
+      "registry": "PENDING",
+      "activation_rollback_restore": "PENDING",
+      "focused_receipt_sha256": "010db961ecbe0aff98edfa7ee8f7db953f462c94a8e6cf0aaf6c5df229274ba7"
     }
   },
   "inherited_parent_evidence": {
@@ -290,8 +321,29 @@
       "governor_benchmark_path": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.38\\r61-ab-nine-rounds.json",
       "governor_benchmark_status": "PASS_SCOPED_DIRECT_GOVERNOR",
       "full_mcp_performance_status": "PENDING"
+    },
+    "r62": {
+      "baseline_version": "0.15.38",
+      "candidate_version": "0.15.39",
+      "public_surface_tool_count": 43,
+      "status": "NO_MCP_HOT_PATH_CHANGE_TRANSACTION_DIAGNOSTIC_ONLY"
     }
   },
+  "r64": {
+    "source_predecessor_version": "0.15.40",
+    "source_predecessor_manifest_sha256": "d6f75feada9ad0ae2c248b3a833ac9cf0e04150d2430ddaa70b3dfb64a0b0a86",
+    "runtime_predecessor_release_id": "v0.15.39-3cda3b1c65b7b7c5",
+    "reference_corpus_roots": 7,
+    "new_public_tools": 0,
+    "new_authority_scopes": 0,
+    "read_offset_schema_widened": true,
+    "per_call_read_limit_unchanged": true,
+    "cross_page_atomic_snapshot_claim": false,
+    "prepublish_only": true,
+    "focused_pre_final_seal": "PASS_40_OF_40",
+    "full_regression_pre_final_seal": "PASS_1273_TESTS_1233_PASS_40_DOCUMENTED_SKIP_0_FAIL",
+    "benchmark_report_sha256": "7d6083b3b6fe7f80c26fa0a156b0510d57b8cf117c5456c8c2dc7011b6f6905f"
+  },
   "non_win32": {
     "portable_tests": "supported where platform-independent",
     "windows_native_tests": "SKIP/unsupported"

package/bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-chatgpt-bridge",
-  "version": "0.15.38",
+  "version": "0.15.41",
   "private": true,
   "type": "module",
   "engines": {

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.38-r61\\controller\\runtime\\process-grant.json",
-  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.38-r61\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.41-r64\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.41-r64\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.38-r61\\bin\\deadbyte-process-host.exe",
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.41-r64\\bin\\deadbyte-process-host.exe",
     "sha256": "daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4"
   },
   "roots": {
     "core": {
-      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.38-r61",
+      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.41-r64",
       "deny_paths": [
         "node_modules",
         "controller/runtime",

package/docs/R64-EVIDENCE.json

@@ -0,0 +1,95 @@
+{
+  "schema": "deadbyte.r64-evidence.v1",
+  "source_predecessor_manifest_sha256": "d6f75feada9ad0ae2c248b3a833ac9cf0e04150d2430ddaa70b3dfb64a0b0a86",
+  "red": {
+    "command": "node --test test/r64-machine-fs-large-read.test.mjs",
+    "tests": 2,
+    "failed": 2,
+    "raw_reproduction": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.41-r64\\predecessor-red-reproduced.log",
+    "raw_reproduction_note": "Fresh post-change re-execution against immutable R63 predecessor; original pre-edit console RED was observed but its raw output was not persisted",
+    "observed_boundaries": [
+      "Full machine_fs_read schema rejected offset=4194306",
+      "Runtime rejected page-two next_offset=4194306 with machine fs read offset must be in [-4194304, 4194304]"
+    ]
+  },
+  "green": {
+    "command": "node --test test/r64-machine-fs-large-read.test.mjs",
+    "tests": 8,
+    "passed": 8,
+    "raw_log": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.41-r64\\hash-cancel-behavior-green.log",
+    "focused_command": "npm run r64:focused:test",
+    "focused_tests": 42,
+    "focused_passed": 42
+  },
+  "inherited_failures_repaired_in_r64_only": [
+    "R63 source included a 0.15.39 npm tarball; R64 copy moved to testing evidence without changing R63",
+    "R63 process policy remained bound to R62 path; R64 copy repinned to its own root",
+    "R63 README still advertised 0.15.39; R64 package documentation now identifies 0.15.41",
+    "Historical R59 tool surface expected no schema changes; R64 test now requires only the authorized machine_fs input change",
+    "Historical R62 contract asserted current package=0.15.39 even on R63; version-scoped historical contract retained"
+  ],
+  "full_regression_pre_final_seal": {
+    "command": "npm test",
+    "tests": 1272,
+    "passed": 1232,
+    "skipped": 40,
+    "failed": 0,
+    "log_path": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.41-r64\\full-regression-1.log",
+    "log_sha256": "c45f4295f745b5c6674aa8f742268d35c5c922bf5a3a2dafa4bbde48ed729871"
+  },
+  "benchmark_pre_final_seal": {
+    "path": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.41-r64\\read-benchmark-v2.json",
+    "sha256": "ba5455687e2233ebfe4516ca50f8c319e70c6393b8b6258fd95d154b79518614",
+    "alternating_rounds": 7,
+    "read_ops_per_round": 400,
+    "errors": 0,
+    "median_before_ops_per_second": 3059.36,
+    "median_after_ops_per_second": 3173.65,
+    "median_before_p95_ms": 1.9078,
+    "median_after_p95_ms": 1.9296,
+    "median_before_control_p95_ms": 0.6386,
+    "median_after_control_p95_ms": 0.6086,
+    "limitation": "direct runtime and governor with local scratch I/O, not full public MCP transport; per-round variation remains"
+  },
+  "benchmark_cross_boundary": {
+    "path": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.41-r64\\read-benchmark-after-cancel.json",
+    "rounds": 7,
+    "r63_page_two": "rejected in every round",
+    "r64_page_two": "passed in every round at offset 4259840",
+    "median_before_small_page_ops_per_second": 2632.13,
+    "median_after_small_page_ops_per_second": 2624.96,
+    "median_before_small_page_p95_ms": 2.35,
+    "median_after_small_page_p95_ms": 2.32,
+    "control_probe_limitation": "local governor read/hash probe, not actual public machine_ping or machine_status",
+    "hash_file_cancellation": "R64 read timeout now aborts the default SHA-256 stream; focused source invariant and injected-worker timeout GREEN"
+  },
+  "real_control_under_bulk_benchmark": {
+    "path": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.41-r64\\real-control-after-cancel.json",
+    "rounds": 7,
+    "calls_per_round": 400,
+    "median_r63_control_p95_ms": 3.96,
+    "median_r64_control_p95_ms": 3.85,
+    "limitation": "signed machine runtime ping/status under concurrent local bulk reads; not public MCP transport"
+  },
+  "hash_file_cancellation_red_green": {
+    "red_log": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.41-r64\\hash-cancel-red-2.log",
+    "red": "default createReadStream lacked an abort signal",
+    "green_log": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.41-r64\\hash-cancel-behavior-green.log",
+    "green": "8/8 focused tests pass; injected default hash stream observed abort on timeout"
+  },
+  "production_mutation": false,
+  "publish_or_activate": false,
+  "windows_preflight_repair": {
+    "red": "npm run gate:windows exited 1 because inherited Windows PowerShell environment did not resolve Get-FileHash at R64 source manifest check",
+    "change": "Compute SHA-256 with built-in .NET cryptography without PowerShell module discovery",
+    "green": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r64-prepublish.ps1 -Stage preflight exited 0 and verified exact R63 source manifest"
+  },
+  "windows_gate": {
+    "status": "PASS_PREPACKAGE",
+    "log": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.41-r64\\windows-gate-final-2.log",
+    "focused": "40/40",
+    "full_regression": "1233 pass / 40 documented skip / 0 fail",
+    "doctor": "PASS with isolated empty state; production foreground process identity observation was inaccessible and production was not modified"
+  },
+  "package_verify_only": "PENDING"
+}

package/docs/R64-REFERENCE-GAP-MATRIX.json

@@ -0,0 +1,98 @@
+{
+  "schema": "deadbyte.reference-gap-matrix.v1",
+  "train": "R64",
+  "method": "Local read-only source comparison; ideas only, no donor source bytes copied",
+  "references": [
+    {
+      "reference": "better-remote-commander",
+      "subsystem": "remote transport",
+      "behavior": "Correlates calls and results by ID, replaces stale device sockets, and uses heartbeat supervision",
+      "evidence_paths": ["better-remote-commander/packages/relay/src/device-hub.ts"],
+      "deadbyte_equivalent": ["bridge/src/remote-dispatch-r60.mjs", "bridge/src/reconnect-delay-r60.mjs", "src/remote-result-journal.mjs"],
+      "deadbyte_state": "stronger",
+      "security_implications": "Relay socket identity alone would weaken durable mutation claim semantics",
+      "performance_implications": "No demonstrated R64 hot-path gain",
+      "license_attribution": "README declares MIT, but no bytes copied",
+      "proposed_action": "KEEP-OURS: retain durable claim and no-blind-replay behavior",
+      "priority": "SKIP"
+    },
+    {
+      "reference": "cua",
+      "subsystem": "desktop lifecycle",
+      "behavior": "Separates session lifecycle from authority and requires fresh observation after actuation",
+      "evidence_paths": ["cua/rfcs/3007-cua-driver-lifecycle-sessions.md", "cua/rfcs/3682-typed-native-window-sdk.md"],
+      "deadbyte_equivalent": ["src/desktop-runtime-r40.mjs", "src/desktop-contract.mjs"],
+      "deadbyte_state": "parity",
+      "security_implications": "Public session labels must not become authority; no desktop expansion in R64",
+      "performance_implications": "Not on the selected file-read path",
+      "license_attribution": "Component-specific licenses; architecture only, no bytes copied",
+      "proposed_action": "KEEP-OURS: retain snapshot-bound actuation and independent verification",
+      "priority": "SKIP"
+    },
+    {
+      "reference": "desktop-commander",
+      "subsystem": "bounded presentation history",
+      "behavior": "Caps stored output per entry and on-disk history size",
+      "evidence_paths": ["desktop-commander/dist/utils/toolHistory.js"],
+      "deadbyte_equivalent": ["src/workload-substrate.mjs", "src/remote-result-journal.mjs"],
+      "deadbyte_state": "parity",
+      "security_implications": "Presentation retention cannot replace signed evidence",
+      "performance_implications": "Bounded memory is already enforced in current stream and journal primitives",
+      "license_attribution": "Root LICENSE is MIT; no bytes copied",
+      "proposed_action": "KEEP-OURS: preserve separate bounded presentation and durable evidence",
+      "priority": "SKIP"
+    },
+    {
+      "reference": "open-remote-mcp",
+      "subsystem": "authority",
+      "behavior": "Relay policy can narrow but cannot widen local device authority",
+      "evidence_paths": ["open-remote-mcp/docs/ARCHITECTURE.md", "open-remote-mcp/apps/server/src/lib/security.ts"],
+      "deadbyte_equivalent": ["src/coding-plane.mjs", "bridge/src/remote-dispatch-r60.mjs"],
+      "deadbyte_state": "parity",
+      "security_implications": "Local policy remains the final enforcement authority",
+      "performance_implications": "No read-path optimization",
+      "license_attribution": "README declares MIT; NOTICE.md retained in reference; no bytes copied",
+      "proposed_action": "KEEP-OURS: no relay-created root or grant",
+      "priority": "SKIP"
+    },
+    {
+      "reference": "remcp",
+      "subsystem": "large-file reading",
+      "behavior": "read_binary accepts offsets beyond one chunk and returns a next byte offset",
+      "evidence_paths": ["remcp/packages/runtime/src/tools/files.mjs:readBinaryTool", "remcp/packages/runtime/src/catalog.mjs"],
+      "deadbyte_equivalent": ["src/machine-fs.mjs:readRange", "src/machine-fs-mcp-tools.mjs", "src/compact-gateway-mcp-tools.mjs"],
+      "deadbyte_state": "weaker",
+      "security_implications": "Widen only positional offset; keep per-call byte cap, root and authority enforcement",
+      "performance_implications": "Enables bounded paging of files over 4 MiB without whole-file buffering",
+      "license_attribution": "Runtime LICENSE is MIT; behavior reimplemented independently",
+      "proposed_action": "ADAPT: allow safe positive next_offset while preserving the existing read schema shape",
+      "priority": "P0"
+    },
+    {
+      "reference": "secure-host-mcp",
+      "subsystem": "workspace and process",
+      "behavior": "Bounds workspace reads and command output; tracks cancelable jobs",
+      "evidence_paths": ["secure-host-mcp/src/workspace.ts", "secure-host-mcp/src/executor.ts", "secure-host-mcp/test/workspace.test.ts"],
+      "deadbyte_equivalent": ["src/machine-fs.mjs", "src/process-runtime.mjs"],
+      "deadbyte_state": "stronger",
+      "security_implications": "Generic command strings and caller environment would widen DEADBYTE authority",
+      "performance_implications": "Current read/output limits already bound retained bytes",
+      "license_attribution": "README displays MIT badge, root license file absent in local corpus; no bytes copied",
+      "proposed_action": "KEEP-OURS: retain policy-pinned commands and separate process authority",
+      "priority": "SKIP"
+    },
+    {
+      "reference": "winremote-mcp",
+      "subsystem": "Windows privilege tiers",
+      "behavior": "Requires authenticated remote transport before exposing high-risk tier-3 controls",
+      "evidence_paths": ["winremote-mcp/src/winremote/tiers.py", "winremote-mcp/tests/test_security_hardening.py"],
+      "deadbyte_equivalent": ["src/desktop-policy-r40.mjs", "src/coding-plane.mjs", "bridge/src/remote-dispatch-r60.mjs"],
+      "deadbyte_state": "stronger",
+      "security_implications": "Broad tier-3 shell/file authority would weaken independently revocable planes",
+      "performance_implications": "Not on selected read path",
+      "license_attribution": "README declares MIT, root license file absent in local corpus; no bytes copied",
+      "proposed_action": "KEEP-OURS: retain fine-grained local planes, not broad capability tiers",
+      "priority": "SKIP"
+    }
+  ]
+}

package/docs/R64-SCOPE.json

@@ -0,0 +1,41 @@
+{
+  "schema": "deadbyte.r64-scope.v1",
+  "task_id": "deadbyte-r64-large-file-read",
+  "version_target": "0.15.41",
+  "train": "R64",
+  "source_predecessor": {
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.40-r63",
+    "version": "0.15.40",
+    "manifest_sha256": "d6f75feada9ad0ae2c248b3a833ac9cf0e04150d2430ddaa70b3dfb64a0b0a86",
+    "manifest_file_count": 2227,
+    "release_status": "not proven published or activated"
+  },
+  "runtime_predecessor": {
+    "release_id": "v0.15.39-3cda3b1c65b7b7c5",
+    "manifest_sha256": "3cda3b1c65b7b7c561c5a8617156ab87d69cf162f447f3e99a4cb4a76471b3de",
+    "generation_manifest_sha256": "f47cb96083679e764725df1bde6eda53169a39f55772c173ab22f89a1dfaa7ab"
+  },
+  "selected_work": [
+    "Permit machine_fs_read positive offsets through Number.MAX_SAFE_INTEGER, subject to actual file size",
+    "Apply the same numeric-bound widening in full and compact inputs without changing tool names, field names or per-call max_bytes",
+    "Document that independent pages are not an atomic whole-file snapshot",
+    "Abort default hash_file streaming when a bounded read times out; retain existing timeout and authority semantics"
+  ],
+  "rejected_work": [
+    "New file-transfer tool or chunked mutation protocol: out of scope and new authority surface",
+    "Generic remote shell, broad privilege tiers and donor subsystem ports: weaker authority model",
+    "Changing negative tail offset bounds or read length caps: unnecessary for the reproduced defect"
+  ],
+  "acceptance_criteria": [
+    "RED test proves both schema and runtime reject page two solely because offset exceeds 4 MiB",
+    "GREEN test reads page two using returned next_offset while per-call length remains capped",
+    "Invalid/unsafe offsets, out-of-file offsets, denied roots and changed-file pages are handled explicitly",
+    "Focused, full regression, Windows gate, manifest, doctor, benchmark and verify-only package gates pass on exact R64 bytes",
+    "Hashing on the default read path receives an abort signal bound to timeout"
+  ],
+  "public_surface_delta": "0 new tools; same compact 43-tool names; existing read offset numeric maximum widens only",
+  "authority_delta": "none",
+  "assurance_mode": "MATERIAL",
+  "acceptance_environment": "local production Windows host; isolated candidate and scratch files; production runtime untouched",
+  "stop_condition": "RELEASE_READY only after every prepublish gate; never publish or activate"
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.38",
+  "version": "0.15.41",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
@@ -42,7 +42,7 @@
     "contained:run": "node src/contained-cli.mjs workspaces/demo input.txt",
     "contained:smoke": "node src/contained-smoke.mjs",
     "mcp:contained:smoke": "node src/mcp-contained-smoke-client.mjs",
-    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r61-prepublish.ps1",
+    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r64-prepublish.ps1",
     "authority:smoke": "node src/authority-smoke.mjs",
     "mcp:remote:smoke": "node src/remote-mcp-smoke-client.mjs",
     "mcp:host:smoke": "node src/mcp-host-smoke-client.mjs",
@@ -86,7 +86,10 @@
     "r59:release:test": "node --test --test-concurrency=1 test/r59-release-contract.test.mjs test/r59-tool-surface-compat.test.mjs test/bridge-runtime-r59.test.mjs test/controller-policy-preflight-r59.test.mjs",
     "r60:focused:test": "node --test --test-concurrency=1 test/r60-authority-coherence.test.mjs test/r60-authority-enforcement.test.mjs test/r60-bridge-dispatch.test.mjs test/r60-clock-discipline.test.mjs test/r60-live-timeline.test.mjs test/r60-reconnect-errors.test.mjs test/r60-reconnect-jitter.test.mjs test/r60-remote-call-recovery.test.mjs test/r60-windows-log-decode.test.mjs test/r60-release-contract.test.mjs",
     "r60:full:test": "node scripts/full-regression-r60.mjs",
-    "r61:focused:test": "node --test --test-concurrency=1 test/r61-release-contract.test.mjs test/r61-release-bridge-binding.test.mjs test/r61-control-lane.test.mjs test/r61-live-timeline-bounds.test.mjs test/r61-npm-artifact-identity.test.mjs test/remote-live-log-r37.test.mjs test/bridge-runtime-r59.test.mjs test/commander-schema-differential-r48.test.mjs test/package-boundary.test.mjs test/r60-bridge-dispatch.test.mjs test/r60-authority-enforcement.test.mjs"
+    "r61:focused:test": "node --test --test-concurrency=1 test/r61-release-contract.test.mjs test/r61-release-bridge-binding.test.mjs test/r61-control-lane.test.mjs test/r61-live-timeline-bounds.test.mjs test/r61-npm-artifact-identity.test.mjs test/remote-live-log-r37.test.mjs test/bridge-runtime-r59.test.mjs test/commander-schema-differential-r48.test.mjs test/package-boundary.test.mjs test/r60-bridge-dispatch.test.mjs test/r60-authority-enforcement.test.mjs",
+    "r62:focused:test": "node --test --test-concurrency=1 test/r62-release-contract.test.mjs test/r62-doctor-transactions-reconcile.test.mjs test/r62-doctor-receipt-semantics.test.mjs test/r62-rollback-failure-receipt.test.mjs test/r58-doctor-transactions.test.mjs test/r58-completed-update-receipt.test.mjs test/runtime-self-update.test.mjs test/r56-rollback-launcher-restore.test.mjs",
+    "r63:focused:test": "node --test --test-concurrency=1 test/r63-release-contract.test.mjs test/r63-one-shot-coherence.test.mjs test/r51-runtime-coherence.test.mjs test/remote-session-cli.test.mjs",
+    "r64:focused:test": "node --test --test-concurrency=1 test/r64-release-contract.test.mjs test/r64-machine-fs-large-read.test.mjs test/machine-fs-runtime.test.mjs test/compact-gateway-r36.test.mjs test/r61-control-lane.test.mjs test/r60-bridge-dispatch.test.mjs"
   },
   "bundleDependencies": [
     "@modelcontextprotocol/server",

package/scripts/gate-windows-r62-prepublish.ps1

@@ -0,0 +1,45 @@
+param(
+  [ValidateSet('all','preflight','focused','full','manifest','doctor')]
+  [string]$Stage='all'
+)
+
+$ErrorActionPreference='Stop'
+Set-StrictMode -Version 3.0
+$root=Split-Path $PSScriptRoot -Parent
+Set-Location -LiteralPath $root
+
+function Invoke-Npm([string]$Name,[string[]]$NpmArgs){
+  Write-Host "==== $Name ===="
+  & npm.cmd @NpmArgs
+  if($LASTEXITCODE -ne 0){ throw "R62 prepublish gate failed at $Name exit=$LASTEXITCODE" }
+}
+
+$stateRoot=if(-not [string]::IsNullOrWhiteSpace($env:DEADBYTE_STATE_ROOT)){
+  [IO.Path]::GetFullPath($env:DEADBYTE_STATE_ROOT)
+}else{ Join-Path $env:USERPROFILE '.deadbyte-mcp' }
+$pointer=Join-Path $stateRoot 'active-release.json'
+if(-not (Test-Path -LiteralPath $pointer -PathType Leaf)){ throw "R62 predecessor pointer missing: $pointer" }
+$active=Get-Content -LiteralPath $pointer -Raw | ConvertFrom-Json
+if($active.release_id -ne 'v0.15.38-917901b3fcb2a77f'){ throw "R62 predecessor release mismatch: $($active.release_id)" }
+if($active.manifest_sha256 -ne '917901b3fcb2a77f696fedc539bd97c567d9dc59345779906fc633d11ea4bcfb'){ throw 'R62 predecessor manifest mismatch' }
+if($active.generation_manifest_sha256 -ne '9d320a8af1ba8e9e6a23552f35263da2670c00af1355464820552d849d9033c6'){ throw 'R62 predecessor generation mismatch' }
+if($Stage -eq 'preflight'){Write-Host '==== R62 WINDOWS GATE: PASS preflight ====';return}
+
+if($Stage -eq 'all' -or $Stage -eq 'focused'){
+  Invoke-Npm 'r62-focused' @('run','r62:focused:test')
+  if($Stage -eq 'focused'){Write-Host '==== R62 WINDOWS GATE: PASS focused ====';return}
+}
+if($Stage -eq 'all' -or $Stage -eq 'full'){
+  Invoke-Npm 'full-regression' @('test')
+  if($Stage -eq 'full'){Write-Host '==== R62 WINDOWS GATE: PASS full ====';return}
+}
+if($Stage -eq 'all' -or $Stage -eq 'manifest'){
+  Invoke-Npm 'manifest-write' @('run','manifest:write')
+  Invoke-Npm 'manifest-verify' @('run','manifest:verify')
+  if($Stage -eq 'manifest'){Write-Host '==== R62 WINDOWS GATE: PASS manifest ====';return}
+}
+if($Stage -eq 'all' -or $Stage -eq 'doctor'){
+  Invoke-Npm 'doctor' @('run','doctor')
+  if($Stage -eq 'doctor'){Write-Host '==== R62 WINDOWS GATE: PASS doctor ====';return}
+}
+Write-Host '==== R62 PREPUBLISH WINDOWS GATE: PASS ===='

package/scripts/gate-windows-r63-prepublish.ps1

@@ -0,0 +1,45 @@
+param(
+  [ValidateSet('all','preflight','focused','full','manifest','doctor')]
+  [string]$Stage='all'
+)
+
+$ErrorActionPreference='Stop'
+Set-StrictMode -Version 3.0
+$root=Split-Path $PSScriptRoot -Parent
+Set-Location -LiteralPath $root
+
+function Invoke-Npm([string]$Name,[string[]]$NpmArgs){
+  Write-Host "==== $Name ===="
+  & npm.cmd @NpmArgs
+  if($LASTEXITCODE -ne 0){ throw "R63 prepublish gate failed at $Name exit=$LASTEXITCODE" }
+}
+
+$stateRoot=if(-not [string]::IsNullOrWhiteSpace($env:DEADBYTE_STATE_ROOT)){
+  [IO.Path]::GetFullPath($env:DEADBYTE_STATE_ROOT)
+}else{ Join-Path $env:USERPROFILE '.deadbyte-mcp' }
+$pointer=Join-Path $stateRoot 'active-release.json'
+if(-not (Test-Path -LiteralPath $pointer -PathType Leaf)){ throw "R63 predecessor pointer missing: $pointer" }
+$active=Get-Content -LiteralPath $pointer -Raw | ConvertFrom-Json
+if($active.release_id -ne 'v0.15.39-3cda3b1c65b7b7c5'){ throw "R63 predecessor release mismatch: $($active.release_id)" }
+if($active.manifest_sha256 -ne '3cda3b1c65b7b7c561c5a8617156ab87d69cf162f447f3e99a4cb4a76471b3de'){ throw 'R63 predecessor manifest mismatch' }
+if($active.generation_manifest_sha256 -ne 'f47cb96083679e764725df1bde6eda53169a39f55772c173ab22f89a1dfaa7ab'){ throw 'R63 predecessor generation mismatch' }
+if($Stage -eq 'preflight'){Write-Host '==== R63 WINDOWS GATE: PASS preflight ====';return}
+
+if($Stage -eq 'all' -or $Stage -eq 'focused'){
+  Invoke-Npm 'r63-focused' @('run','r63:focused:test')
+  if($Stage -eq 'focused'){Write-Host '==== R63 WINDOWS GATE: PASS focused ====';return}
+}
+if($Stage -eq 'all' -or $Stage -eq 'full'){
+  Invoke-Npm 'full-regression' @('test')
+  if($Stage -eq 'full'){Write-Host '==== R63 WINDOWS GATE: PASS full ====';return}
+}
+if($Stage -eq 'all' -or $Stage -eq 'manifest'){
+  Invoke-Npm 'manifest-write' @('run','manifest:write')
+  Invoke-Npm 'manifest-verify' @('run','manifest:verify')
+  if($Stage -eq 'manifest'){Write-Host '==== R63 WINDOWS GATE: PASS manifest ====';return}
+}
+if($Stage -eq 'all' -or $Stage -eq 'doctor'){
+  Invoke-Npm 'doctor' @('run','doctor')
+  if($Stage -eq 'doctor'){Write-Host '==== R63 WINDOWS GATE: PASS doctor ====';return}
+}
+Write-Host '==== R63 PREPUBLISH WINDOWS GATE: PASS ===='

package/scripts/gate-windows-r64-prepublish.ps1

@@ -0,0 +1,68 @@
+param(
+  [ValidateSet('all','preflight','focused','full','manifest','doctor')]
+  [string]$Stage='all'
+)
+
+$ErrorActionPreference='Stop'
+Set-StrictMode -Version 3.0
+$root=Split-Path $PSScriptRoot -Parent
+Set-Location -LiteralPath $root
+
+function Invoke-Npm([string]$Name,[string[]]$NpmArgs){
+  Write-Host "==== $Name ===="
+  & npm.cmd @NpmArgs
+  if($LASTEXITCODE -ne 0){ throw "R64 prepublish gate failed at $Name exit=$LASTEXITCODE" }
+}
+
+function Get-FileSha256([string]$File){
+  $hasher=[Security.Cryptography.SHA256]::Create()
+  try{
+    $bytes=[IO.File]::ReadAllBytes($File)
+    return (($hasher.ComputeHash($bytes) | ForEach-Object { $_.ToString('x2') }) -join '')
+  }finally{ $hasher.Dispose() }
+}
+
+$sourceRoot='D:\Projects\deadbyte-mcp\development\deadbyte-mcp-0.15.40-r63'
+$sourceManifest='d6f75feada9ad0ae2c248b3a833ac9cf0e04150d2430ddaa70b3dfb64a0b0a86'
+if(-not (Test-Path -LiteralPath $sourceRoot -PathType Container)){ throw 'R64 source predecessor missing' }
+$observedSourceManifest=Get-FileSha256 (Join-Path $sourceRoot 'MANIFEST.SHA256')
+if($observedSourceManifest -ne $sourceManifest){ throw 'R64 source predecessor manifest identity mismatch' }
+Push-Location -LiteralPath $sourceRoot
+try{
+  & npm.cmd run manifest:verify
+  if($LASTEXITCODE -ne 0){ throw 'R64 source predecessor manifest verification failed' }
+}finally{ Pop-Location }
+
+$stateRoot=Join-Path $env:USERPROFILE '.deadbyte-mcp'
+$pointer=Join-Path $stateRoot 'active-release.json'
+if(-not (Test-Path -LiteralPath $pointer -PathType Leaf)){ throw "R64 runtime predecessor pointer missing: $pointer" }
+$active=Get-Content -LiteralPath $pointer -Raw | ConvertFrom-Json
+if($active.release_id -ne 'v0.15.39-3cda3b1c65b7b7c5'){ throw "R64 runtime predecessor release mismatch: $($active.release_id)" }
+if($active.manifest_sha256 -ne '3cda3b1c65b7b7c561c5a8617156ab87d69cf162f447f3e99a4cb4a76471b3de'){ throw 'R64 runtime predecessor manifest mismatch' }
+if($active.generation_manifest_sha256 -ne 'f47cb96083679e764725df1bde6eda53169a39f55772c173ab22f89a1dfaa7ab'){ throw 'R64 runtime predecessor generation mismatch' }
+if($Stage -eq 'preflight'){Write-Host '==== R64 WINDOWS GATE: PASS preflight ====';return}
+
+if($Stage -eq 'all' -or $Stage -eq 'focused'){
+  Invoke-Npm 'r64-focused' @('run','r64:focused:test')
+  if($Stage -eq 'focused'){Write-Host '==== R64 WINDOWS GATE: PASS focused ====';return}
+}
+if($Stage -eq 'all' -or $Stage -eq 'full'){
+  Invoke-Npm 'full-regression' @('test')
+  if($Stage -eq 'full'){Write-Host '==== R64 WINDOWS GATE: PASS full ====';return}
+}
+if($Stage -eq 'all' -or $Stage -eq 'manifest'){
+  Invoke-Npm 'manifest-write' @('run','manifest:write')
+  Invoke-Npm 'manifest-verify' @('run','manifest:verify')
+  if($Stage -eq 'manifest'){Write-Host '==== R64 WINDOWS GATE: PASS manifest ====';return}
+}
+if($Stage -eq 'all' -or $Stage -eq 'doctor'){
+  $doctorRoot='D:\Projects\deadbyte-mcp\testing\0.15.41-r64\doctor-isolated-empty'
+  if(Test-Path -LiteralPath (Join-Path $doctorRoot 'active-release.json')){ throw 'R64 isolated doctor root unexpectedly contains a release pointer' }
+  $priorStateRoot=$env:DEADBYTE_STATE_ROOT
+  try{
+    $env:DEADBYTE_STATE_ROOT=$doctorRoot
+    Invoke-Npm 'doctor-isolated-empty-state' @('run','doctor')
+  }finally{ $env:DEADBYTE_STATE_ROOT=$priorStateRoot }
+  if($Stage -eq 'doctor'){Write-Host '==== R64 WINDOWS GATE: PASS doctor ====';return}
+}
+Write-Host '==== R64 PREPUBLISH WINDOWS GATE: PASS ===='

package/scripts/npm-release-r48.mjs

@@ -1,4 +1,5 @@
 import { spawnSync } from 'node:child_process';
+import { createHash } from 'node:crypto';
 import { verifyPublishedTarballIdentity } from './npm-artifact-identity-r61.mjs';
 import { mkdtemp, readFile, rm, unlink } from 'node:fs/promises';
 import path from 'node:path';
@@ -177,6 +178,11 @@ async function main() {
     }
 
     if (isVerifyOnly) {
+      const packedBytes = await readFile(tarball);
+      const sha256 = createHash('sha256').update(packedBytes).digest('hex');
+      const sha512Integrity = `sha512-${createHash('sha512').update(packedBytes).digest('base64')}`;
+      if (packRecord.integrity !== sha512Integrity) throw new Error('npm pack integrity differs from packed tarball bytes');
+      console.log('VERIFIED_TARBALL ' + JSON.stringify({filename,bytes:packedBytes.length,sha256,integrity:sha512Integrity,shasum:packRecord.shasum}));
       console.log('[6/7] [VERIFY-ONLY] Skipping npm publish.');
       console.log('[7/7] [VERIFY-ONLY] Skipping external registry smoke test.');
       console.log('\nVERIFY-ONLY PIPELINE PASS: All pre-pack, artifact surface, and isolated sandbox gates passed successfully.');

package/scripts/r62-focused.ps1

@@ -0,0 +1,9 @@
+$ErrorActionPreference='Stop'
+$root=Split-Path -Parent $PSScriptRoot
+Push-Location $root
+try {
+  & npm.cmd run r62:focused:test
+  if($LASTEXITCODE -ne 0){ exit $LASTEXITCODE }
+} finally {
+  Pop-Location
+}