deadbyte-mcp 0.15.41 → 0.15.43

package/README.txt

@@ -1,4 +1,4 @@
-DEADBYTE MCP V0.15.41 / R64 BOUNDED LARGE-FILE READS
+DEADBYTE MCP V0.15.43 / R66 DOCTOR EPOCH OBSERVATION HOTFIX
 =========================
 
 AUTHENTICATED MACHINE TRUTH + DURABLE AGENT + CODING + AUTONOMOUS PRODUCTION ENGINE
@@ -7,12 +7,21 @@ NPX PRIMARY OPERATOR UX
 ------------------------
 Use the npm CLI entry point instead of the legacy CMD convenience wrapper:
 
-  npx -y deadbyte-mcp@0.15.41 mcp
-  npx -y deadbyte-mcp@0.15.41 remote
-  npx -y deadbyte-mcp@0.15.41 remote status
-  npx -y deadbyte-mcp@0.15.41 remote restart
-  npx -y deadbyte-mcp@0.15.41 audit status
-  npx -y deadbyte-mcp@0.15.41 audit verify
+Run npx/npm exec from a directory outside a DEADBYTE source or release tree.
+On Windows the tree also contains DEADBYTE-MCP.cmd; cmd.exe can resolve that
+same-name compatibility launcher before npm's requested package bin. From a
+source tree, use `node src/deadbyte-cli.mjs` to select that source explicitly.
+To request an exact published version, change to a neutral directory first and
+check `--version` before issuing a stateful command. The compatibility CMD
+fails with an explanation when npm is detected rather than forwarding the
+wrong command to the controller.
+
+  npx -y deadbyte-mcp@0.15.43 mcp
+  npx -y deadbyte-mcp@0.15.43 remote
+  npx -y deadbyte-mcp@0.15.43 remote status
+  npx -y deadbyte-mcp@0.15.43 remote restart
+  npx -y deadbyte-mcp@0.15.43 audit status
+  npx -y deadbyte-mcp@0.15.43 audit verify
 
 MAJOR MCP CLIENT STDIO CONFIGS
 -------------------------------
@@ -23,7 +32,7 @@ CLAUDE DESKTOP
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.41", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.43", "mcp"]
       }
     }
   }
@@ -35,7 +44,7 @@ Save as .cursor/mcp.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.41", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.43", "mcp"]
       }
     }
   }
@@ -48,7 +57,7 @@ Save as .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.41", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.43", "mcp"]
       }
     }
   }
@@ -58,7 +67,7 @@ Add to the Codex MCP configuration:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.41", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.43", "mcp"]
 
 The `mcp` command is the quiet stdio server entry for local MCP clients; stdout is reserved for MCP.
 The remote CLI invokes the stable active-release PowerShell launcher directly with shell=false.
@@ -346,7 +355,7 @@ CONTROLLER
 ----------
 Primary operator entry point:
 
-  npx -y deadbyte-mcp@0.15.41 remote
+  npx -y deadbyte-mcp@0.15.43 remote
 
 The legacy CMD entry remains compatibility-only for R33 rollback safety.
 
@@ -407,7 +416,7 @@ MCP CLIENT CONFIGURATION
 ------------------------
 The local stdio entry point is quiet and suitable for MCP hosts:
 
-  npx -y deadbyte-mcp@0.15.41 mcp
+  npx -y deadbyte-mcp@0.15.43 mcp
 
 CLAUDE DESKTOP
 Use the standard local-server entry in claude_desktop_config.json:
@@ -416,7 +425,7 @@ Use the standard local-server entry in claude_desktop_config.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.41", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.43", "mcp"]
       }
     }
   }
@@ -429,7 +438,7 @@ Create .cursor/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.41", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.43", "mcp"]
       }
     }
   }
@@ -442,7 +451,7 @@ Create .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.41", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.43", "mcp"]
       }
     }
   }
@@ -452,9 +461,9 @@ Add this to ~/.codex/config.toml:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.41", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.43", "mcp"]
 
-The remote device path remains `npx -y deadbyte-mcp@0.15.41 remote`. Remote public MCP uses the
+The remote device path remains `npx -y deadbyte-mcp@0.15.43 remote`. Remote public MCP uses the
 verified HTTPS named-tunnel URL selected by the active generation; do not commit a private device
 URL or tunnel token into a repository.
 

package/RELEASE.json

@@ -1,28 +1,28 @@
 {
   "schema": "deadbyte.release.v1",
   "name": "deadbyte-mcp",
-  "version": "0.15.41",
-  "train": "R64",
-  "label": "BOUNDED LARGE-FILE READS",
+  "version": "0.15.43",
+  "train": "R66",
+  "label": "DOCTOR EPOCH OBSERVATION COMPATIBILITY HOTFIX",
   "protocol_revision": "2026-07-28",
   "parent": {
-    "version": "0.15.39",
-    "release_id": "v0.15.39-3cda3b1c65b7b7c5",
-    "manifest_sha256": "3cda3b1c65b7b7c561c5a8617156ab87d69cf162f447f3e99a4cb4a76471b3de",
-    "generation_manifest_sha256": "f47cb96083679e764725df1bde6eda53169a39f55772c173ab22f89a1dfaa7ab",
+    "version": "0.15.42",
+    "release_id": "v0.15.42-1b4754103dd4ca43",
+    "manifest_sha256": "1b4754103dd4ca43eb81f8e33cf188b36eee3051cb182396ccc6abe2a6e6c250",
+    "generation_manifest_sha256": "62dc68be55ad627f8d872b8be8c1369ecca0edf08fdedc8336c9ccee2d2809fb",
     "activation_status": "PRODUCTION_ACTIVE"
   },
   "runtime_predecessor": {
-    "release_id": "v0.15.39-3cda3b1c65b7b7c5",
-    "manifest_sha256": "3cda3b1c65b7b7c561c5a8617156ab87d69cf162f447f3e99a4cb4a76471b3de",
-    "generation_manifest_sha256": "f47cb96083679e764725df1bde6eda53169a39f55772c173ab22f89a1dfaa7ab"
+    "release_id": "v0.15.42-1b4754103dd4ca43",
+    "manifest_sha256": "1b4754103dd4ca43eb81f8e33cf188b36eee3051cb182396ccc6abe2a6e6c250",
+    "generation_manifest_sha256": "62dc68be55ad627f8d872b8be8c1369ecca0edf08fdedc8336c9ccee2d2809fb"
   },
   "source_predecessor": {
-    "version": "0.15.40",
-    "source_path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.40-r63",
-    "manifest_file_sha256": "d6f75feada9ad0ae2c248b3a833ac9cf0e04150d2430ddaa70b3dfb64a0b0a86",
-    "manifest_file_count": 2227,
-    "release_status": "NOT_PROVEN_RELEASED"
+    "version": "0.15.42",
+    "source_path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.42-r65",
+    "manifest_file_sha256": "1b4754103dd4ca43eb81f8e33cf188b36eee3051cb182396ccc6abe2a6e6c250",
+    "manifest_file_count": 2277,
+    "release_status": "PRODUCTION_RELEASED"
   },
   "consolidation": {
     "frontend_status_vocabulary": true,
@@ -276,5 +276,45 @@
     "package_verification": "PENDING",
     "publication_activation": "PROHIBITED_THIS_TRAIN",
     "release_ready": false
+  },
+  "r65_release_control_hardening": {
+    "public_surface_tool_count": 43,
+    "new_public_tools": 0,
+    "new_authority_scopes": 0,
+    "npm_publication_reconciliation": true,
+    "deterministic_precondition_terminal_receipts": true,
+    "canonical_cli_invocation_regression": true,
+    "durable_per_plane_authority_epoch": true,
+    "policy_security_envelope_binding": true,
+    "epoch_native_cross_generation_restore": true,
+    "legacy_r64_auto_restore": false,
+    "epoch_native_restore_requires_continuity_proof": true,
+    "explicit_revoke_wins": true,
+    "replacement_grant_wins": true,
+    "revoked_nonce_resurrection": false,
+    "restored_grant_requires_fresh_nonce": true,
+    "coding_dependency_protects_autonomous": true,
+    "focused_tests": "PASS_71_OF_71_PRE_METADATA_REFRESH",
+    "full_regression": "PASS_1360_TESTS_1319_PASS_41_DOCUMENTED_SKIP_0_FAIL_PRE_METADATA_REFRESH",
+    "production_mutations": 0,
+    "npm_publications": 0,
+    "stable_final_claim": false,
+    "restored_safe_semantics": "PASS_RED_2_OF_2_THEN_GREEN_2_OF_2",
+    "restored_safe_red_receipt_sha256": "f15f57a54aeb046e366292c4e91bc0b045be0f6a0780eb47fb5fbac596741eee",
+    "restored_safe_green_receipt_sha256": "d859409d33f9f1a165889c5ce4360f2f83b8f4bb66f5b6ab63980b8464678a72",
+    "final_gate_evidence_location": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.42-r65",
+    "final_gate_receipts_external_to_candidate": true
+  },
+  "r66_doctor_epoch_hotfix": {
+    "parent_release_id": "v0.15.42-1b4754103dd4ca43",
+    "doctor_epoch_observation_compatibility": true,
+    "legacy_observation_compatibility": true,
+    "strict_epoch_pair_and_armed_only": true,
+    "public_surface_tool_count": 43,
+    "new_public_tools": 0,
+    "new_authority_scopes": 0,
+    "production_r65_mutations": 0,
+    "npm_publications": 0,
+    "prepublish_only": true
   }
 }

package/SBOM.cdx.json

@@ -1,13 +1,13 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:cdx:deadbyte-mcp:r64:0.15.41",
+  "serialNumber": "urn:cdx:deadbyte-mcp:r66:0.15.43",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
       "name": "deadbyte-mcp",
-      "version": "0.15.41"
+      "version": "0.15.43"
     }
   },
   "components": [

package/TEST-MATRIX.json

@@ -1,7 +1,7 @@
 {
   "schema": "deadbyte.test-matrix.v1",
-  "version": "0.15.41",
-  "train": "R64",
+  "version": "0.15.43",
+  "train": "R66",
   "primary_platform": "win32-x64",
   "reference": {
     "package": "@wonderwhy-er/desktop-commander",
@@ -11,29 +11,24 @@
   },
   "required": [
     {
-      "id": "r64-focused",
-      "command": "npm run r64:focused:test",
-      "expected": "PASS R64 release identity, large-file pagination, bounds, replacement visibility, inherited machine fs and bridge/control contracts"
+      "id": "r66-focused",
+      "command": "npm run r66:focused:test",
+      "expected": "PASS strict doctor epoch-observation compatibility and connected controller/authority regressions"
     },
     {
-      "id": "r64-full-regression",
+      "id": "r66-full-regression",
       "command": "npm test",
-      "expected": "PASS complete current R64 regression with only documented historical/platform skips"
+      "expected": "PASS complete R66 regression with only documented historical/platform skips"
     },
     {
       "id": "windows-gate",
       "command": "npm run gate:windows",
-      "expected": "PASS exact R63 source manifest and active 0.15.39 runtime predecessor, R64 focused/full regression, manifest verify and doctor"
+      "expected": "PASS exact sealed R65 parent identity, R66 focused/full regression, manifest verify and isolated doctor"
     },
     {
       "id": "package-verify",
       "command": "node scripts/npm-release-r48.mjs --verify-only",
-      "expected": "PASS exact packed surface and isolated package version/doctor execution"
-    },
-    {
-      "id": "r64-read-benchmark",
-      "command": "node scripts/r64-read-benchmark.mjs <R63> <R64> <scratch> <output>",
-      "expected": "PASS alternating same-host R63/R64 read and control-lane measurements without unexplained material regression"
+      "expected": "PASS exact packed surface, registry-safe release checks, isolated package version and doctor without publish"
     }
   ],
   "observed_pre_release_evidence": {
@@ -243,6 +238,72 @@
       "registry": "PENDING",
       "activation_rollback_restore": "PENDING",
       "focused_receipt_sha256": "010db961ecbe0aff98edfa7ee8f7db953f462c94a8e6cf0aaf6c5df229274ba7"
+    },
+    "r65_restored_safe_tdd": {
+      "status": "PASS_RED_THEN_GREEN",
+      "red": {
+        "tests": 2,
+        "passed": 0,
+        "failed": 2,
+        "receipt_id": "092a4b944c7bb653e63908e4",
+        "receipt_sha256": "f15f57a54aeb046e366292c4e91bc0b045be0f6a0780eb47fb5fbac596741eee"
+      },
+      "green": {
+        "tests": 2,
+        "passed": 2,
+        "failed": 0,
+        "receipt_id": "10e1e5a46d1673dd1d0636e7",
+        "receipt_sha256": "d859409d33f9f1a165889c5ce4360f2f83b8f4bb66f5b6ab63980b8464678a72"
+      }
+    },
+    "r65_focused_pre_final_metadata_freeze": {
+      "status": "PASS_PRE_FINAL_METADATA_FREEZE",
+      "tests": 74,
+      "passed": 74,
+      "failed": 0,
+      "skipped": 0,
+      "receipt_id": "ab40025003536ec1cb96692d",
+      "receipt_sha256": "4a6b3c0ecef62f29f1c3b386df56afd711428ab8f2d4db6d081ef3eca1278466",
+      "request_sha256": "86351d039db5c617b49a80c863b1d9880a71c297945f19ff50406638f86b34b3"
+    },
+    "r65_full_regression_pre_final_metadata_freeze": {
+      "status": "PASS_PRE_FINAL_METADATA_FREEZE",
+      "tests": 1363,
+      "passed": 1322,
+      "failed": 0,
+      "skipped": 41,
+      "receipt_id": "b645ec173577da59ff540270",
+      "receipt_sha256": "778638208d42e9b18d7df2d5f9f59ab2623d754a90adcaab859abdab6a251379",
+      "request_sha256": "8ac5a56b5f16f7d0859de91bae7b487fdfa533b8ee6bc27544e7d512b83c43db"
+    },
+    "final_gate_evidence_contract": {
+      "status": "PENDING",
+      "location": "D:\\Projects\\deadbyte-mcp\\testing\\0.15.42-r65",
+      "note": "Final focused/full/Windows/package signed receipts are intentionally external to candidate release bytes to avoid self-referential evidence."
+    },
+    "r65_focused_pre_metadata_refresh_current": {
+      "status": "PASS_PRE_METADATA_REFRESH",
+      "tests": 71,
+      "passed": 71,
+      "failed": 0,
+      "skipped": 0,
+      "receipt_id": "795ac2683d544675eec1388c",
+      "receipt_sha256": "a772ecdaffa32098eaf67bfaca7555ec971e4fa889f25329cb321a65f2f4a0ad",
+      "request_sha256": "2b4a5dc8e01e0207fa930a3c648415443046090628c649514e889b92d32b0ca6"
+    },
+    "r65_full_regression_pre_metadata_refresh_current": {
+      "status": "PASS_PRE_METADATA_REFRESH",
+      "tests": 1360,
+      "passed": 1319,
+      "failed": 0,
+      "skipped": 41,
+      "task_id": "4c2dfd186e985fd446db26e22357f0695a5873932b8f39c446331e35b57ee4f9",
+      "receipt_id": "93dd39c895029a299f5999c7",
+      "receipt_sha256": "424d264ac50c37ce0ef385df7a6d288ba3c22eda2588af0d40f245f8692659dc",
+      "request_sha256": "7467766fdb18558701cc115d4398f6f6e779d5f9a75b24c619333a9e12a918d2",
+      "result_file_sha256": "47a835df560e303bcd15a9cc87f53be88676be421c9cc2addd594ead44cbcd7d",
+      "stdout_sha256": "b96de9c3f24e289b3656c861368333c021c020ba5a6e1e53d502c5b8bb3ed115",
+      "stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
     }
   },
   "inherited_parent_evidence": {
@@ -353,5 +414,47 @@
     "clean_machine": "WAIVED_BY_OPERATOR",
     "reason": "Operator explicitly requested immediate deployment without further testing.",
     "stable_final_claim": false
+  },
+  "r65": {
+    "parent_version": "0.15.41",
+    "parent_release_id": "v0.15.41-63a78ad159ad3003",
+    "parent_manifest_sha256": "63a78ad159ad3003db3fefafcd468bef22599c829a867f4f10a46c7a20748b3e",
+    "parent_generation_manifest_sha256": "19ae2efcdcde9f80c474f0e55851d4ada51c22813d3e05af03b11acb28c3fca5",
+    "public_surface_tool_count": 43,
+    "new_public_tools": 0,
+    "new_authority_scopes": 0,
+    "legacy_r64_auto_restore": false,
+    "epoch_native_restore_requires_continuity_proof": true,
+    "focused_pre_identity": "PASS_69_OF_69",
+    "full_regression_pre_identity": {
+      "tests": 1359,
+      "passed": 1317,
+      "failed": 2,
+      "skipped": 40,
+      "failures": [
+        "r64 historical release-contract harness drift",
+        "r65 expected identity not yet bumped"
+      ]
+    },
+    "prepublish_only": true,
+    "focused_post_identity": "PASS_69_OF_69",
+    "full_regression_post_identity": {
+      "tests": 1361,
+      "passed": 1320,
+      "failed": 0,
+      "skipped": 41,
+      "status": "PASS"
+    }
+  },
+  "r66": {
+    "parent_version": "0.15.42",
+    "parent_release_id": "v0.15.42-1b4754103dd4ca43",
+    "parent_manifest_sha256": "1b4754103dd4ca43eb81f8e33cf188b36eee3051cb182396ccc6abe2a6e6c250",
+    "parent_generation_manifest_sha256": "62dc68be55ad627f8d872b8be8c1369ecca0edf08fdedc8336c9ccee2d2809fb",
+    "doctor_epoch_observation_compatibility": true,
+    "public_surface_tool_count": 43,
+    "new_public_tools": 0,
+    "new_authority_scopes": 0,
+    "prepublish_only": true
   }
 }

package/bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-chatgpt-bridge",
-  "version": "0.15.41",
+  "version": "0.15.43",
   "private": true,
   "type": "module",
   "engines": {