deadbyte-mcp 0.15.42 → 0.15.44

package/test/autonomous-loop.test.mjs

@@ -123,7 +123,7 @@ test('R24 autonomous goal diagnoses a failing test, replans with native diff, be
       maxIterations:10 });
     assert.equal(submitted.status,'accepted');
     const result = await f.runtime.run({ goalId:submitted.goal_id, maxCycles:16 });
-    assert.equal(result.status,'completed');
+    assert.equal(result.status,'completed',JSON.stringify({status:result.status,reason:result.reason??null,loop_phase:result.loop?.phase??null}));
     assert.equal(await readFile(f.program,'utf8'),"export const value = 'fixed';\n");
     const status = await f.runtime.status({ goalId:submitted.goal_id });
     assert.equal(status.state,'succeeded');
@@ -154,7 +154,7 @@ test('historical autonomous release verification survives source drift and disar
       title:'repair program', goal:'make exported value equal fixed', acceptance:'release evidence must remain verifiable',
       maxIterations:10 });
     const result = await f.runtime.run({ goalId:submitted.goal_id, maxCycles:16 });
-    assert.equal(result.status,'completed');
+    assert.equal(result.status,'completed',JSON.stringify({status:result.status,reason:result.reason??null,loop_phase:result.loop?.phase??null}));
     assert.equal((await f.runtime.verify({ goalId:submitted.goal_id })).ok,true);
 
     await writeFile(f.program,"export const value = 'rolled-back';\n");
@@ -196,7 +196,7 @@ test('autonomous profile execution is capped by the absolute autonomous lease wi
       title:'deadline-bound profiles',goal:'make exported value equal fixed',
       acceptance:'build, test, and benchmark must pass',maxIterations:10});
     const result=await f.runtime.run({goalId:submitted.goal_id,maxCycles:16});
-    assert.equal(result.status,'completed');
+    assert.equal(result.status,'completed',JSON.stringify({status:result.status,reason:result.reason??null,loop_phase:result.loop?.phase??null}));
     assert.ok(calls.length>=3);
     assert.ok(calls.every(call=>typeof call.deadline==='string'&&Number.isFinite(Date.parse(call.deadline))));
     assert.ok(calls.every(call=>call.has_precheck===true));
@@ -239,7 +239,12 @@ test('autonomous profile nonce rotation immediately before spawn fails closed wi
     const started=journal.events.find(event=>event.type==='profile_started'&&event.payload?.profile_id==='build');
     assert.ok(started);
     assert.match(started.payload.authority_instance_nonce,/^[0-9a-f]{64}$/);
-    assert.ok(journal.events.some(event=>event.type==='goal_paused'&&event.payload?.reason==='profile_execution_without_receipt'));
+    const pause=journal.events.find(event=>event.type==='goal_paused'&&event.payload?.reason==='profile_execution_without_receipt');
+    assert.ok(pause);
+    assert.equal(pause.payload.receipt_id,started.payload.receipt_id);
+    assert.equal(pause.payload.request_sha256,started.payload.request_sha256);
+    assert.equal(typeof pause.payload.detail,'string');
+    assert.ok(pause.payload.detail.length>0&&pause.payload.detail.length<=512);
     assert.equal(journal.events.some(event=>event.type==='profile_completed'&&event.payload?.profile_id==='build'),false);
     assert.equal((await f.codingRuntime.verifyReceiptDetailed(started.payload.receipt_id)).ok,false);
   } finally {
@@ -255,7 +260,7 @@ test('provider planner repairs an invalid structured decision inside the same ru
       title:'repair after planner contract error', goal:'make exported value equal fixed',
       acceptance:'build, test, and benchmark must pass', maxIterations:10 });
     const result = await f.runtime.run({ goalId:submitted.goal_id, maxCycles:16 });
-    assert.equal(result.status,'completed');
+    assert.equal(result.status,'completed',JSON.stringify({status:result.status,reason:result.reason??null,loop_phase:result.loop?.phase??null}));
     assert.equal(await readFile(f.program,'utf8'),"export const value = 'fixed';\n");
     assert.equal(f.planner.prompts.length,6);
     assert.match(f.planner.prompts[1],/PREVIOUS_RESPONSE_REJECTED/);
@@ -337,7 +342,7 @@ test('provider supervisor adopts an OPEN circuit after restart and resumes only
       if(status.state==='cancelled') throw new Error('provider circuit supervisor cancelled goal');
       await new Promise(resolve=>setTimeout(resolve,25));
     } while(Date.now()<deadline);
-    assert.equal(status.state,'succeeded');
+    assert.equal(status.state,'succeeded',JSON.stringify({state:status.state,reason:status.reason??null,loop_phase:status.loop?.phase??null}));
     assert.ok(f.planner.prompts.length>3);
     const journal=await f.runtime.events({goalId:submitted.goal_id,fromSeq:1,limit:200});
     assert.equal(journal.events.filter(event=>event.type==='provider_probe_started').length,1);

package/test/autonomous-runtime.test.mjs

@@ -76,7 +76,7 @@ async function fixture() {
   return { root, client, transport };
 }
 
-test.skip('R44 historical hermetic autonomous catalog is frozen at 50; current R47 runtime supersedes it', async () => {
+test('R44 historical hermetic autonomous catalog is frozen at 50; current R47 runtime supersedes it',{skip:'Historical R44 autonomous catalog frozen at 50; current R47+ has a different catalog'}, async () => {
   const f = await fixture();
   try {
     await f.client.connect(f.transport);

package/test/coding-plane.test.mjs

@@ -70,7 +70,7 @@ async function fixture() {
   return { root, client, transport };
 }
 
-test.skip('R44 historical hermetic coding catalog is frozen at 38; current R47 runtime supersedes it', async () => {
+test('R44 historical hermetic coding catalog is frozen at 38; current R47 runtime supersedes it',{skip:'Historical R44 coding catalog frozen at 38; current R47+ supersedes it'}, async () => {
   const f = await fixture();
   try {
     await f.client.connect(f.transport);

package/test/full-max-catalog-r46.test.mjs

@@ -15,7 +15,7 @@ const desktopPolicyPath=path.join(repoRoot,'controller','deadbyte-desktop-policy
 const sha=bytes=>createHash('sha256').update(bytes).digest('hex');
 const absent=async p=>{try{await access(p);return false;}catch(e){if(e?.code==='ENOENT')return true;throw e;}};
 
-test.skip('R46 historical max-runtime full stdio catalog contract is frozen at 84; current R47 runtime intentionally supersedes it',async()=>{
+test('R46 historical max-runtime full stdio catalog contract is frozen at 84; current R47 runtime intentionally supersedes it',{skip:'Historical R46 max-runtime catalog frozen at 84; current R47+ intentionally supersedes it'},async()=>{
   const f=await createR34Fixture({authority:'disarmed'});
   const processPolicyPath=path.join(f.root,'process-policy.json');
   const processGrant=path.join(f.root,'process-grant.json');

package/test/output-schema.test.mjs

@@ -48,7 +48,7 @@ async function fixture() {
   return { trust, client, transport };
 }
 
-test.skip('R44 historical base-plus-agent catalog is frozen at 13; current R47 runtime supersedes it', async () => {
+test('R44 historical base-plus-agent catalog is frozen at 13; current R47 runtime supersedes it',{skip:'Historical R44 base-plus-agent catalog frozen at 13; current R47+ supersedes it'}, async () => {
   const f = await fixture();
   try {
     await f.client.connect(f.transport);

package/test/r51-live-log-polling.test.mjs

@@ -26,3 +26,15 @@ test('R51 live tail parses each audit line once and reuses the decoded event',as
   assert.match(cli,/auditTimelineRecord\(file,line,auditEvent\)/);
   assert.match(cli,/formatLogLine\(file,line,\{auditEvent,/);
 });
+
+test('R67 live log selection is bounded, deduplicated and rejects path traversal/drive prefixes',()=>{
+ const runtimeNames=['bridge.stdout.log','bridge.stdout.log','../private.log','..\\private.log','C:\\token.log','.hidden.log',
+  ...Array.from({length:180},(_,i)=>'remote-'+String(i).padStart(3,'0')+'.log')];
+ const auditNames=['segment-00000001.jsonl','segment-00000002.jsonl','segment-00000002.jsonl','segment-00000003.jsonl'];
+ const selected=selectLiveLogNames({auditNames,runtimeNames});
+ assert.deepEqual(selected.audit,['segment-00000002.jsonl','segment-00000003.jsonl']);
+ assert.ok(selected.runtime.length<=64,'cap runtime readers to a finite budget');
+ assert.equal(new Set(selected.runtime).size,selected.runtime.length);
+ assert.ok(selected.runtime.every(name=>/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}\.log$/.test(name)));
+ assert.ok(selected.runtime.includes('remote-179.log'));
+});

package/test/r53-release-contract.test.mjs

@@ -6,7 +6,7 @@ const root=new URL('../',import.meta.url);
 const read=rel=>readFile(new URL(rel,root),'utf8');
 const json=rel=>read(rel).then(JSON.parse);
 const currentPackage=await json('package.json');
-const r53test=currentPackage.version==='0.15.30'?test:test.skip;
+const r53test=currentPackage.version==='0.15.30'?test:(name,fn)=>test(name,{skip:'Historical R53 release contract requires 0.15.30; current '+currentPackage.version},fn);
 
 r53test('R53 current release identity is coherent across package lock source metadata SBOM and gate',async()=>{
   const [pkg,lock,release,provenance,matrix,sbom,versionSource]=await Promise.all([

package/test/r54-release-contract.test.mjs

@@ -6,7 +6,7 @@ const root=new URL('../',import.meta.url);
 const read=rel=>readFile(new URL(rel,root),'utf8');
 const json=rel=>read(rel).then(JSON.parse);
 const currentPackage=await json('package.json');
-const r54test=currentPackage.version==='0.15.31'?test:test.skip;
+const r54test=currentPackage.version==='0.15.31'?test:(name,fn)=>test(name,{skip:'Historical R54 release contract requires 0.15.31; current '+currentPackage.version},fn);
 
 r54test('R54 release identity is coherent across package lock source metadata SBOM and gate',async()=>{
   const [pkg,lock,release,provenance,matrix,sbom,versionSource]=await Promise.all([

package/test/r55-release-contract.test.mjs

@@ -6,7 +6,7 @@ const root=new URL('../',import.meta.url);
 const read=rel=>readFile(new URL(rel,root),'utf8');
 const json=rel=>read(rel).then(JSON.parse);
 const currentPackage=await json('package.json');
-const r55test=currentPackage.version==='0.15.32'?test:test.skip;
+const r55test=currentPackage.version==='0.15.32'?test:(name,fn)=>test(name,{skip:'Historical R55 release contract requires 0.15.32; current '+currentPackage.version},fn);
 
 r55test('R55 release identity is coherent across package lock source metadata SBOM and gate',async()=>{
   const [pkg,lock,release,provenance,matrix,sbom,versionSource]=await Promise.all([

package/test/r56-release-contract.test.mjs

@@ -6,7 +6,7 @@ const root=new URL('../',import.meta.url);
 const read=rel=>readFile(new URL(rel,root),'utf8');
 const json=rel=>read(rel).then(JSON.parse);
 const currentPackage=await json('package.json');
-const r56test=currentPackage.version==='0.15.33'?test:test.skip;
+const r56test=currentPackage.version==='0.15.33'?test:(name,fn)=>test(name,{skip:'Historical R56 release contract requires 0.15.33; current '+currentPackage.version},fn);
 
 r56test('R56 release identity is coherent across package lock source metadata SBOM and gate',async()=>{
   const [pkg,lock,release,provenance,matrix,sbom,versionSource]=await Promise.all([

package/test/r57-release-contract.test.mjs

@@ -6,7 +6,7 @@ const root=new URL('../',import.meta.url);
 const read=rel=>readFile(new URL(rel,root),'utf8');
 const json=rel=>read(rel).then(JSON.parse);
 const currentPackage=await json('package.json');
-const r57test=currentPackage.version==='0.15.34'?test:test.skip;
+const r57test=currentPackage.version==='0.15.34'?test:(name,fn)=>test(name,{skip:'Historical R57 release contract requires 0.15.34; current '+currentPackage.version},fn);
 
 r57test('R57 release identity is coherent across package lock source metadata SBOM and gate',async()=>{
   const [pkg,lock,release,provenance,matrix,sbom,versionSource]=await Promise.all([

package/test/r58-bundled-bridge.test.mjs

@@ -11,7 +11,7 @@ test('R58 deployment activates the bridge bundled inside the candidate release,
   assert.match(deploy,/const bridgeScript=path\.join\(bridgeRoot,'src','bridge\.mjs'\)/);
 });
 
-test('R58 bundled bridge package is present and version-bound to 0.15.35',{skip:currentPackage.version!=='0.15.35'},async()=>{
+test('R58 bundled bridge package is present and version-bound to 0.15.35',{skip:currentPackage.version!=='0.15.35' ? 'Historical R58 bridge artifact requires 0.15.35; current '+currentPackage.version : false},async()=>{
   const [pkg,bridgePkg,bridge]=await Promise.all([
     readFile(new URL('../package.json',import.meta.url),'utf8').then(JSON.parse),
     readFile(new URL('../bridge/package.json',import.meta.url),'utf8').then(JSON.parse),

package/test/r58-doctor-runtime.test.mjs

@@ -43,3 +43,21 @@ test('R58 doctor surfaces corrupt grants and authority dependency loss without s
  const report=classifyDoctorControllerObservation(host,coreRoot);assert.equal(report.status,'WARN');assert.equal(host.authority.host.armed,true);
  for(const finding of report.findings.filter(f=>f.level!=='PASS'))assert.ok(finding.what&&finding.evidence&&finding.next_action);
 });
+
+test('R66 doctor accepts strict epoch metadata on armed authority observations',()=>{
+ const snapshot=online();
+ snapshot.authority.process={configured:true,armed:true,reason:'standing-grant',epoch_seq:1,epoch_sha256:'a'.repeat(64)};
+ const validated=validateDoctorControllerObservation(snapshot,coreRoot);
+ assert.equal(validated.authority.process.epoch_seq,1);
+ assert.equal(validated.authority.process.epoch_sha256,'a'.repeat(64));
+ for(const process of [
+  {configured:true,armed:true,reason:'standing-grant',epoch_seq:1},
+  {configured:true,armed:true,reason:'standing-grant',epoch_sha256:'a'.repeat(64)},
+  {configured:true,armed:true,reason:'standing-grant',epoch_seq:0,epoch_sha256:'a'.repeat(64)},
+  {configured:true,armed:true,reason:'standing-grant',epoch_seq:1,epoch_sha256:'not-a-sha'},
+  {configured:true,armed:false,reason:'disarmed',epoch_seq:1,epoch_sha256:'a'.repeat(64)},
+  {configured:true,armed:true,reason:'standing-grant',epoch_seq:1,epoch_sha256:'a'.repeat(64),injected:true}
+ ]){
+  assert.throws(()=>validateDoctorControllerObservation({...online(),authority:{...authority(),process}},coreRoot));
+ }
+});

package/test/r58-release-contract.test.mjs

@@ -6,7 +6,7 @@ const read=rel=>readFile(new URL('../'+rel,import.meta.url),'utf8');
 const json=rel=>read(rel).then(JSON.parse);
 const currentPackage=await json('package.json');
 
-test('R58 identity is coherent and parent is exact production-accepted 0.15.34',{skip:currentPackage.version!=='0.15.35'},async()=>{
+test('R58 identity is coherent and parent is exact production-accepted 0.15.34',{skip:currentPackage.version!=='0.15.35' ? 'Historical R58 release contract requires 0.15.35; current '+currentPackage.version : false},async()=>{
   const [pkg,lock,release,prov,matrix,sbom,version,bridgePkg]=await Promise.all([
     json('package.json'),json('package-lock.json'),json('RELEASE.json'),json('PROVENANCE.json'),json('TEST-MATRIX.json'),json('SBOM.cdx.json'),read('src/version.mjs'),json('bridge/package.json')
   ]);
@@ -29,7 +29,7 @@ test('R58 identity is coherent and parent is exact production-accepted 0.15.34',
   assert.equal(release.parent.tarball_sha256,'a6f7b21faf34793ca17dfb6d0e9ec03320f1468d011e75d8349098df82fc2639');
 });
 
-test('R58 consolidation evidence preserves fail-closed and non-final claims',{skip:currentPackage.version!=='0.15.35'},async()=>{
+test('R58 consolidation evidence preserves fail-closed and non-final claims',{skip:currentPackage.version!=='0.15.35' ? 'Historical R58 release contract requires 0.15.35; current '+currentPackage.version : false},async()=>{
   const [release,prov,matrix]=await Promise.all([json('RELEASE.json'),json('PROVENANCE.json'),json('TEST-MATRIX.json')]);
   assert.equal(release.consolidation.bridge_bundled_inside_release,true);
   assert.equal(release.consolidation.bridge_recursive_local_dependency_binding,true);

package/test/r58-windows-gate.test.mjs

@@ -5,7 +5,7 @@ import {readFile} from 'node:fs/promises';
 const read=rel=>readFile(new URL('../'+rel,import.meta.url),'utf8');
 const currentPackage=JSON.parse(await read('package.json'));
 
-test('R58 canonical Windows gate is final-candidate bound and leaves historical gates immutable',{skip:currentPackage.version!=='0.15.35'},async()=>{
+test('R58 canonical Windows gate is final-candidate bound and leaves historical gates immutable',{skip:currentPackage.version!=='0.15.35' ? 'Historical R58 Windows gate requires 0.15.35; current '+currentPackage.version : false},async()=>{
   const [pkgText,gate,evidence,r57Gate,r57Evidence]=await Promise.all([
     read('package.json'),read('scripts/gate-windows-r58.ps1'),read('scripts/windows-gate-evidence-r58.mjs'),
     read('scripts/gate-windows-r57.ps1'),read('scripts/windows-gate-evidence-r57.mjs')

package/test/r59-tool-surface-compat.test.mjs

@@ -83,7 +83,7 @@ test('R59 compact baseline changes only at the explicitly authorized R64 read-of
   assert.deepEqual(diff.added,[]);
   assert.deepEqual(diff.removed,[]);
   const packageVersion=JSON.parse(await readFile(path.join(repoRoot,'package.json'),'utf8')).version;
-  if(packageVersion==='0.15.41'||packageVersion==='0.15.42'){
+  if(['0.15.41','0.15.42','0.15.43','0.15.44'].includes(packageVersion)){
     assert.deepEqual(diff.schema_changed,['machine_fs']);
     assert.equal(diff.unchanged.length,42);
     const prior=baseline.tools.find(tool=>tool.name==='machine_fs');

package/test/r60-release-contract.test.mjs

@@ -13,7 +13,7 @@ const PARENT=Object.freeze({
   generation_manifest_sha256:'6134f9f26b680e13ed545da4ab5f3020f411ea2569062fb9c154c8a7e036c9dc'
 });
 
-test('R60 identity is coherent and binds the exact production-accepted 0.15.36 predecessor',{skip:currentPackage.version!=='0.15.37'},async()=>{
+test('R60 identity is coherent and binds the exact production-accepted 0.15.36 predecessor',{skip:currentPackage.version!=='0.15.37' ? 'Historical R60 release contract requires 0.15.37; current '+currentPackage.version : false},async()=>{
   const [pkg,lock,release,prov,matrix,sbom,version,bridgePkg,contract]=await Promise.all([
     json('package.json'),json('package-lock.json'),json('RELEASE.json'),json('PROVENANCE.json'),
     json('TEST-MATRIX.json'),json('SBOM.cdx.json'),read('src/version.mjs'),json('bridge/package.json'),
@@ -47,7 +47,7 @@ test('R60 identity is coherent and binds the exact production-accepted 0.15.36 p
   assert.match(contract,/0\.15\.37/);
 });
 
-test('R60 release contract exposes the proven remote truth semantics without widening dependencies',{skip:currentPackage.version!=='0.15.37'},async()=>{
+test('R60 release contract exposes the proven remote truth semantics without widening dependencies',{skip:currentPackage.version!=='0.15.37' ? 'Historical R60 release contract requires 0.15.37; current '+currentPackage.version : false},async()=>{
   const [pkg,release,matrix]=await Promise.all([json('package.json'),json('RELEASE.json'),json('TEST-MATRIX.json')]);
   assert.equal(Object.keys(pkg.dependencies??{}).length,4);
   assert.equal(release.r60_remote_hardening.authority_truth_coherence,true);
@@ -70,7 +70,7 @@ test('R60 release contract exposes the proven remote truth semantics without wid
   assert.equal(matrix.observed_pre_release_evidence.r60_package.status,'PASS_VERIFY_ONLY_PRE_FINAL_SEAL');
 });
 
-test('R60 package scripts bind the new focused, full-regression and Windows-gate entrypoints',{skip:currentPackage.version!=='0.15.37'},async()=>{
+test('R60 package scripts bind the new focused, full-regression and Windows-gate entrypoints',{skip:currentPackage.version!=='0.15.37' ? 'Historical R60 release contract requires 0.15.37; current '+currentPackage.version : false},async()=>{
   const [pkg,gate]=await Promise.all([json('package.json'),read('scripts/gate-windows-r60-prepublish.ps1')]);
   assert.match(pkg.scripts['r60:focused:test'],/r60-authority-coherence\.test\.mjs/);
   assert.match(pkg.scripts['r60:focused:test'],/r60-remote-call-recovery\.test\.mjs/);

package/test/r61-release-contract.test.mjs

@@ -11,7 +11,7 @@ const PARENT={
   generation_manifest_sha256:'54842021c75f01bf7ecbd5b10ab8a482ecf107765b45c46f9d39b12bab65eac4'
 };
 
-test('R61 identity binds exact sealed 0.15.37 predecessor without a public surface expansion',{skip:currentPackage.version!=='0.15.38'},async()=>{
+test('R61 identity binds exact sealed 0.15.37 predecessor without a public surface expansion',{skip:currentPackage.version!=='0.15.38' ? 'Historical R61 release contract requires 0.15.38; current '+currentPackage.version : false},async()=>{
   const [pkg,lock,bridge,release,provenance,matrix,sbom,version,gate]=await Promise.all([
     json('package.json'),json('package-lock.json'),json('bridge/package.json'),json('RELEASE.json'),
     json('PROVENANCE.json'),json('TEST-MATRIX.json'),json('SBOM.cdx.json'),read('src/version.mjs'),

package/test/r62-release-contract.test.mjs

@@ -12,7 +12,7 @@ const PARENT={
  generation_manifest_sha256:'9d320a8af1ba8e9e6a23552f35263da2670c00af1355464820552d849d9033c6'
 };
 
-test('R62 identity binds exact sealed 0.15.38 parent and transaction reconciliation scope',{skip:currentPackage.version!=='0.15.39'},async()=>{
+test('R62 identity binds exact sealed 0.15.38 parent and transaction reconciliation scope',{skip:currentPackage.version!=='0.15.39' ? 'Historical R62 release contract requires 0.15.39; current '+currentPackage.version : false},async()=>{
  const [pkg,lock,bridge,release,provenance,matrix,sbom,version,gate]=await Promise.all([
   json('package.json'),json('package-lock.json'),json('bridge/package.json'),json('RELEASE.json'),
   json('PROVENANCE.json'),json('TEST-MATRIX.json'),json('SBOM.cdx.json'),read('src/version.mjs'),

package/test/r63-release-contract.test.mjs

@@ -12,7 +12,7 @@ const PARENT={
  generation_manifest_sha256:'f47cb96083679e764725df1bde6eda53169a39f55772c173ab22f89a1dfaa7ab'
 };
 
-test('R63 identity binds exact active 0.15.39 parent and one-shot runtime coherence repair',{skip:currentPackage.version!=='0.15.40'},async()=>{
+test('R63 identity binds exact active 0.15.39 parent and one-shot runtime coherence repair',{skip:currentPackage.version!=='0.15.40' ? 'Historical R63 release contract requires 0.15.40; current '+currentPackage.version : false},async()=>{
  const pkg=await json('package.json');
  assert.equal(pkg.version,'0.15.40');
  assert.match(pkg.scripts['r63:focused:test'],/r63-one-shot-coherence\.test\.mjs/);

package/test/r64-release-contract.test.mjs

@@ -12,7 +12,7 @@ const runtime={
   generation_manifest_sha256:'f47cb96083679e764725df1bde6eda53169a39f55772c173ab22f89a1dfaa7ab'
 };
 
-test('R64 release identity distinguishes unsealed source predecessor from active runtime predecessor',{skip:currentPackage.version!=='0.15.41'},async()=>{
+test('R64 release identity distinguishes unsealed source predecessor from active runtime predecessor',{skip:currentPackage.version!=='0.15.41' ? 'Historical R64 release contract requires 0.15.41; current '+currentPackage.version : false},async()=>{
   const [pkg,lock,bridge,release,provenance,matrix,sbom,scope,gaps,version,gate]=await Promise.all([
     json('package.json'),json('package-lock.json'),json('bridge/package.json'),json('RELEASE.json'),
     json('PROVENANCE.json'),json('TEST-MATRIX.json'),json('SBOM.cdx.json'),json('docs/R64-SCOPE.json'),

package/test/r65-epoch-native-activation-integration.test.mjs

@@ -16,7 +16,7 @@ const dummy={coding:'2'.repeat(64),autonomous:'3'.repeat(64),desktop:'4'.repeat(
 
 async function optional(file){try{return await readFile(file);}catch(error){if(error?.code==='ENOENT')return null;throw error;}}
 
-test('epoch-native orchestrator uses transaction continuity engine instead of generic authority commands',async()=>{
+test('epoch-native orchestrator handles BOM-encoded process grant with transaction continuity engine',async()=>{
   const root=await mkdtemp(path.join(os.tmpdir(),'deadbyte-r65-epoch-activation-'));
   try{
     const state=path.join(root,'state'),runtime=path.join(state,'runtime'),trust=path.join(state,'trust'),policies=path.join(root,'policies');
@@ -33,7 +33,7 @@ test('epoch-native orchestrator uses transaction continuity engine instead of ge
     await writeFile(beforePath,policyBytes);await writeFile(afterPath,policyBytes);
     const oldGrant={schema:'deadbyte.process-grant.v1',policy_sha256:sha(policyBytes),instance_nonce:'8'.repeat(64),
       profile_ids:['safe'],root_ids:['core'],granted_at_utc:'2026-10-07T00:00:00Z'};
-    const oldBytes=Buffer.from(JSON.stringify(oldGrant));await writeFile(grantFile,oldBytes);
+    const oldBytes=Buffer.concat([Buffer.from([0xef,0xbb,0xbf]),Buffer.from(JSON.stringify(oldGrant))]);await writeFile(grantFile,oldBytes);
     const store=createAuthorityEpochStore({runtimeDir:runtime,policyBytes});
     await store.append({plane:'process',action:'grant',grantBytes:oldBytes,grantInstanceNonce:oldGrant.instance_nonce});
     let switched=false;
@@ -41,7 +41,7 @@ test('epoch-native orchestrator uses transaction continuity engine instead of ge
       const bytes=await optional(grantFile),head=await store.readHead({plane:'process'});
       let armed=false;
       if(bytes){
-        const grant=JSON.parse(bytes);
+        const grant=JSON.parse(new TextDecoder('utf-8',{fatal:true}).decode(bytes));
         armed=(await store.verifyGrant({plane:'process',grantBytes:bytes,grantInstanceNonce:grant.instance_nonce,policyBytes})).trusted;
       }
       return {state:'ONLINE',local_ready:true,...ids,supervisor:{running:true},authority:{
@@ -104,7 +104,7 @@ test('epoch-native explicit user revoke after transaction revoke wins over orche
       const bytes=await optional(grantFile),head=await store.readHead({plane:'process'});
       let armed=false;
       if(bytes){
-        const grant=JSON.parse(bytes);
+        const grant=JSON.parse(new TextDecoder('utf-8',{fatal:true}).decode(bytes));
         armed=(await store.verifyGrant({plane:'process',grantBytes:bytes,grantInstanceNonce:grant.instance_nonce,policyBytes})).trusted;
       }
       return {state:'ONLINE',local_ready:true,...ids,supervisor:{running:true},authority:{

package/test/r65-release-contract.test.mjs

@@ -4,6 +4,7 @@ import {readFile} from 'node:fs/promises';
 
 const read=rel=>readFile(new URL('../'+rel,import.meta.url),'utf8');
 const json=async rel=>JSON.parse((await read(rel)).replace(/^\uFEFF/,''));
+const currentPackage=await json('package.json');
 const PARENT={
   version:'0.15.41',
   release_id:'v0.15.41-63a78ad159ad3003',
@@ -11,7 +12,7 @@ const PARENT={
   generation_manifest_sha256:'19ae2efcdcde9f80c474f0e55851d4ada51c22813d3e05af03b11acb28c3fca5'
 };
 
-test('R65 release identity binds exact production R64 parent and durable authority-continuity train',async()=>{
+test('R65 release identity binds exact production R64 parent and durable authority-continuity train',{skip:currentPackage.version!=='0.15.42' ? 'Historical R65 release contract requires 0.15.42; current '+currentPackage.version : false},async()=>{
   const [pkg,lock,bridge,release,provenance,matrix,sbom,version,gate,gaps,design]=await Promise.all([
     json('package.json'),json('package-lock.json'),json('bridge/package.json'),json('RELEASE.json'),
     json('PROVENANCE.json'),json('TEST-MATRIX.json'),json('SBOM.cdx.json'),read('src/version.mjs'),

package/test/r66-release-contract.test.mjs

@@ -0,0 +1,57 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {readFile} from 'node:fs/promises';
+
+const read=rel=>readFile(new URL('../'+rel,import.meta.url),'utf8');
+const json=async rel=>JSON.parse((await read(rel)).replace(/^\uFEFF/,''));
+const currentPackage=await json('package.json');
+const PARENT={
+  version:'0.15.42',
+  release_id:'v0.15.42-1b4754103dd4ca43',
+  manifest_sha256:'1b4754103dd4ca43eb81f8e33cf188b36eee3051cb182396ccc6abe2a6e6c250',
+  generation_manifest_sha256:'62dc68be55ad627f8d872b8be8c1369ecca0edf08fdedc8336c9ccee2d2809fb'
+};
+
+test('R66 identity is an exact prepublish doctor hotfix of sealed R65',{skip:currentPackage.version!=='0.15.43' ? 'Historical R66 release contract requires 0.15.43; current '+currentPackage.version : false},async()=>{
+  const [pkg,lock,bridge,release,provenance,matrix,sbom,version,gate]=await Promise.all([
+    json('package.json'),json('package-lock.json'),json('bridge/package.json'),json('RELEASE.json'),
+    json('PROVENANCE.json'),json('TEST-MATRIX.json'),json('SBOM.cdx.json'),read('src/version.mjs'),
+    read('scripts/gate-windows-r66-prepublish.ps1')
+  ]);
+  assert.equal(pkg.version,'0.15.43');
+  assert.equal(lock.version,pkg.version);
+  assert.equal(lock.packages[''].version,pkg.version);
+  assert.equal(bridge.version,pkg.version);
+  assert.match(version,/DEADBYTE_VERSION = '0\.15\.43'/);
+  assert.equal(pkg.scripts['gate:windows'],'powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r66-prepublish.ps1');
+  assert.match(pkg.scripts['r66:focused:test'],/test\/r58-doctor-runtime\.test\.mjs/);
+  assert.equal(release.version,pkg.version);
+  assert.equal(release.train,'R66');
+  for(const [key,value] of Object.entries(PARENT))assert.equal(release.parent[key],value);
+  assert.deepEqual(release.runtime_predecessor,{
+    release_id:PARENT.release_id,
+    manifest_sha256:PARENT.manifest_sha256,
+    generation_manifest_sha256:PARENT.generation_manifest_sha256
+  });
+  assert.equal(release.source_predecessor.version,PARENT.version);
+  assert.equal(release.source_predecessor.manifest_file_sha256,PARENT.manifest_sha256);
+  assert.equal(release.r66_doctor_epoch_hotfix.doctor_epoch_observation_compatibility,true);
+  assert.equal(release.r66_doctor_epoch_hotfix.new_public_tools,0);
+  assert.equal(release.r66_doctor_epoch_hotfix.new_authority_scopes,0);
+  assert.equal(release.r66_doctor_epoch_hotfix.prepublish_only,true);
+  assert.equal(provenance.version,pkg.version);
+  assert.equal(provenance.parent_release_id,PARENT.release_id);
+  assert.equal(provenance.parent_manifest_sha256,PARENT.manifest_sha256);
+  assert.equal(provenance.parent_generation_manifest_sha256,PARENT.generation_manifest_sha256);
+  assert.equal(provenance.r66.new_public_tools,0);
+  assert.equal(provenance.r66.new_authority_scopes,0);
+  assert.equal(matrix.version,pkg.version);
+  assert.equal(matrix.train,'R66');
+  assert.ok(matrix.required.some(row=>row.id==='r66-focused'));
+  assert.equal(sbom.metadata.component.version,pkg.version);
+  assert.equal(sbom.serialNumber,'urn:cdx:deadbyte-mcp:r66:0.15.43');
+  assert.match(gate,/v0\.15\.42-1b4754103dd4ca43/);
+  assert.match(gate,/62dc68be55ad627f8d872b8be8c1369ecca0edf08fdedc8336c9ccee2d2809fb/);
+  assert.match(gate,/r66:focused:test/);
+  assert.doesNotMatch(gate,/npm\.cmd publish|--publish-only/);
+});

package/test/r67-cli-integration.test.mjs

@@ -0,0 +1,41 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {spawnSync} from 'node:child_process';
+import {fileURLToPath} from 'node:url';
+import path from 'node:path';
+import {nativeInspectArgs} from '../src/native-inspector-r67.mjs';
+const root=path.dirname(path.dirname(fileURLToPath(import.meta.url)));
+const cli=path.join(root,'src','deadbyte-cli.mjs');
+const exe=path.join(root,'bin','deadbyte-native-inspect-r67.exe');
+function invoke(...args){
+ const r=spawnSync(process.execPath,[cli,'inspect',...args],{cwd:root,shell:false,windowsHide:true,encoding:'utf8',timeout:30000,maxBuffer:2097152});
+ assert.equal(r.error,undefined,r.error?.message);return {r,value:JSON.parse(r.stdout.trim())};
+}
+test('R67 CLI inspect exposes native process snapshot without MCP tool additions',()=>{
+ const {r,value}=invoke('process','4');
+ assert.equal(r.status,0,r.stderr);assert.equal(value.status,'ok');assert.equal(value.operation,'process');assert.ok(value.data.processes.length<=4);
+});
+test('R67 CLI inspect memory self is metadata-only and PE uses actual bytes',()=>{
+ const m=invoke('memory','self','4');
+ assert.equal(m.r.status,0,m.r.stderr);assert.equal(m.value.status,'ok');assert.ok(m.value.data.regions.length<=4);
+ const p=invoke('pe',exe);
+ assert.equal(p.r.status,0,p.r.stderr);assert.equal(p.value.status,'ok');assert.match(p.value.data.file_sha256,/^[a-f0-9]{64}$/);
+});
+test('R67 CLI typed input rejects invalid selectors before spawning native process',()=>{
+ for(const selector of [['process','0'],['process','999999'],['memory','0'],['memory','self','9999'],['memory','4148'],['identity'],['identity','0'],['memory','4148','0'],['memory','4148','18446744073709551616'],['pe'],['unknown']]){
+  assert.throws(()=>nativeInspectArgs(selector));
+ }
+ const error=spawnSync(process.execPath,[cli,'inspect','memory','0'],{cwd:root,shell:false,windowsHide:true,encoding:'utf8',timeout:30000});
+ assert.equal(error.status,1);assert.match(error.stderr,/invalid positive limit|limit out of range|creation_filetime/);
+});
+test('R67 CLI preserves raw Windows error instead of fabricating data',()=>{
+ const {r,value}=invoke('memory','4294967295','1','4');
+ assert.equal(r.status,2);assert.equal(value.status,'failed');assert.match(value.error,/win32|PID/);
+});
+
+test('R67 CLI rejects stale PID identity before successful region inspection',()=>{
+ const {r,value}=invoke('memory',String(process.pid),'1','4');
+ assert.equal(r.status,2);
+ assert.equal(value.error_code,'PROCESS_IDENTITY_MISMATCH');
+ assert.equal(value.win32_error,0);
+});

package/test/r67-diagnostics-cli.test.mjs

@@ -0,0 +1,60 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {spawnSync} from 'node:child_process';
+import {mkdtemp,mkdir,writeFile,readFile,rm} from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import {fileURLToPath} from 'node:url';
+const root=path.dirname(path.dirname(fileURLToPath(import.meta.url)));
+const cli=path.join(root,'src','deadbyte-cli.mjs');
+test('R67 offline diagnostic CLI exports without activating remote, uploading or revealing raw log bytes',async()=>{
+ const folder=await mkdtemp(path.join(os.tmpdir(),'r67-diagnostic-cli-'));
+ try{
+  const state=path.join(folder,'state');
+  const output=path.join(folder,'report.zip');
+  await mkdir(path.join(state,'runtime','logs'),{recursive:true});
+  await writeFile(path.join(state,'active-release.json'),JSON.stringify({release_id:'v0.15.43-'+'a'.repeat(16),manifest_sha256:'a'.repeat(64)}));
+  await writeFile(path.join(state,'runtime','logs','controller-start.stderr.log'),'WARN reconnect win32=109 SECRET_CANARY_52917\n');
+  const run=spawnSync(process.execPath,[cli,'diagnostics','export','--output',output],{
+   cwd:root,env:{...process.env,DEADBYTE_STATE_ROOT:state},encoding:'utf8',shell:false,windowsHide:true,timeout:20000
+  });
+  assert.equal(run.status,0,run.stderr);
+  const result=JSON.parse(run.stdout);
+  assert.equal(result.status,'written_local_only');
+  assert.equal(result.uploaded,false);
+  const b=await readFile(output);
+  assert.equal(b.includes(Buffer.from('SECRET_CANARY_52917')),false);
+  assert.equal(b.readUInt32LE(0),0x04034b50);
+  const reject=spawnSync(process.execPath,[cli,'diagnostics','export','--output',path.join(folder,'second.zip'),'--upload'],{
+   cwd:root,env:{...process.env,DEADBYTE_STATE_ROOT:state},encoding:'utf8',shell:false,windowsHide:true,timeout:20000
+  });
+  assert.equal(reject.status,1);
+  assert.match(reject.stderr,/upload|syntax|diagnostics/i);
+ }finally{await rm(folder,{recursive:true,force:true});}
+});
+
+test('R67 diagnostic CLI verify checks local ZIP without starting remote session',async()=>{
+ const {makeOfflineDiagnosticBundle}=await import('../src/r67-diagnostic-export.mjs');
+ const folder=await mkdtemp(path.join(os.tmpdir(),'r67-diagnostic-verify-cli-'));
+ try{
+  const file=path.join(folder,'report.zip');
+  const bundle=makeOfflineDiagnosticBundle({
+   releaseId:'v0.15.43-'+'a'.repeat(16),manifestSha256:'a'.repeat(64),logs:[]
+  });
+  await writeFile(file,bundle.zip);
+  const r=spawnSync(process.execPath,[cli,'diagnostics','verify','--input',file],{
+   cwd:root,encoding:'utf8',shell:false,windowsHide:true,timeout:20000
+  });
+  assert.equal(r.status,0,r.stderr);
+  const result=JSON.parse(r.stdout);
+  assert.equal(result.status,'VERIFIED_LOCAL_STRUCTURE');
+  assert.equal(result.archive_sha256,bundle.archive_sha256);
+  const broken=Buffer.from(bundle.zip);broken[50]^=1;
+  const brokenPath=path.join(folder,'corrupt.zip');await writeFile(brokenPath,broken);
+  const denial=spawnSync(process.execPath,[cli,'diagnostics','verify','--input',brokenPath],{
+   cwd:root,encoding:'utf8',shell:false,windowsHide:true,timeout:20000
+  });
+  assert.equal(denial.status,1);
+  assert.match(denial.stderr,/integrity|ZIP|unsafe/i);
+ }finally{await rm(folder,{recursive:true,force:true});}
+});

package/test/r67-diagnostics-verify.test.mjs

@@ -0,0 +1,49 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {makeOfflineDiagnosticBundle} from '../src/r67-diagnostic-export.mjs';
+import {verifyOfflineDiagnosticsZip} from '../src/r67-diagnostics-verify.mjs';
+const sha='a'.repeat(64);
+const archive=()=>makeOfflineDiagnosticBundle({releaseId:'v0.15.43-'+'a'.repeat(16),manifestSha256:sha,
+ logs:[{source:'controller-start.stderr.log',content:'2026-10-11T03:04:05.000Z WARN reconnect win32=109 PASSWORD_CANARY_91020'}]}).zip;
+test('R67 offline diagnostic independently verifies ZIP CRC, bounded entries and fixed schemas',()=>{
+ const v=verifyOfflineDiagnosticsZip(archive());
+ assert.equal(v.status,'VERIFIED_LOCAL_STRUCTURE');
+ assert.equal(v.uploaded,false);
+ assert.equal(v.entry_count,2);
+ assert.equal(v.summary.redaction,'FIXED_FIELDS_ONLY');
+ assert.equal(v.summary.network_upload,'NEVER');
+ assert.match(v.archive_sha256,/^[a-f0-9]{64}$/);
+ assert.equal(v.summary.raw_log_lines_exported,0);
+});
+test('R67 verifier rejects byte tampering without an updated CRC',()=>{
+ const corrupted=Buffer.from(archive());
+ const phrase=Buffer.from('FIXED_FIELDS_ONLY');
+ const offset=corrupted.indexOf(phrase);
+ assert.ok(offset>0);
+ corrupted[offset]^=1;
+ assert.throws(()=>verifyOfflineDiagnosticsZip(corrupted),/CRC|hash|corrupt/i);
+});
+test('R67 verifier rejects trailing junk, extra archive entries and invalid size bounds',()=>{
+ const good=archive();
+ assert.throws(()=>verifyOfflineDiagnosticsZip(Buffer.concat([good,Buffer.alloc(20)])),/trailing|eocd|boundary|ZIP/i);
+ assert.throws(()=>verifyOfflineDiagnosticsZip(good.subarray(0,good.length-5)),/truncated|eocd|boundary|ZIP/i);
+ assert.throws(()=>verifyOfflineDiagnosticsZip(Buffer.alloc(4*1024*1024+1)),/size|large/i);
+});
+test('R67 verify rejects semantic tampering even when attacker recomputes all ZIP CRCs',()=>{
+ const buf=Buffer.from(archive());
+ const find=Buffer.from('FIXED_FIELDS_ONLY');
+ const at=buf.indexOf(find);
+ assert.ok(at>0);
+ buf.write('ALLOW_RAW_LOGS___',at,'utf8');
+ const dataStart=30+buf.readUInt16LE(26),dataLength=buf.readUInt32LE(18);
+ let crc=0xffffffff;
+ for(const byte of buf.subarray(dataStart,dataStart+dataLength)){
+  crc^=byte;
+  for(let j=0;j<8;j++)crc=(crc>>>1)^((crc&1)?0xedb88320:0);
+ }
+ crc=(crc^0xffffffff)>>>0;
+ const dir=buf.readUInt32LE(buf.length-22+16);
+ buf.writeUInt32LE(crc,14);
+ buf.writeUInt32LE(crc,dir+16);
+ assert.throws(()=>verifyOfflineDiagnosticsZip(buf),/unsafe diagnostic summary/i);
+});