deadbyte-mcp 0.15.43 → 0.15.44

package/README.txt

@@ -1,4 +1,4 @@
-DEADBYTE MCP V0.15.43 / R66 DOCTOR EPOCH OBSERVATION HOTFIX
+DEADBYTE MCP V0.15.44 / R67 NATIVE OBSERVATION & EVIDENCE TRUTH CANDIDATE
 =========================
 
 AUTHENTICATED MACHINE TRUTH + DURABLE AGENT + CODING + AUTONOMOUS PRODUCTION ENGINE
@@ -16,12 +16,12 @@ check `--version` before issuing a stateful command. The compatibility CMD
 fails with an explanation when npm is detected rather than forwarding the
 wrong command to the controller.
 
-  npx -y deadbyte-mcp@0.15.43 mcp
-  npx -y deadbyte-mcp@0.15.43 remote
-  npx -y deadbyte-mcp@0.15.43 remote status
-  npx -y deadbyte-mcp@0.15.43 remote restart
-  npx -y deadbyte-mcp@0.15.43 audit status
-  npx -y deadbyte-mcp@0.15.43 audit verify
+  npx -y deadbyte-mcp@0.15.44 mcp
+  npx -y deadbyte-mcp@0.15.44 remote
+  npx -y deadbyte-mcp@0.15.44 remote status
+  npx -y deadbyte-mcp@0.15.44 remote restart
+  npx -y deadbyte-mcp@0.15.44 audit status
+  npx -y deadbyte-mcp@0.15.44 audit verify
 
 MAJOR MCP CLIENT STDIO CONFIGS
 -------------------------------
@@ -32,7 +32,7 @@ CLAUDE DESKTOP
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.43", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.44", "mcp"]
       }
     }
   }
@@ -44,7 +44,7 @@ Save as .cursor/mcp.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.43", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.44", "mcp"]
       }
     }
   }
@@ -57,7 +57,7 @@ Save as .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.43", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.44", "mcp"]
       }
     }
   }
@@ -67,7 +67,7 @@ Add to the Codex MCP configuration:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.43", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.44", "mcp"]
 
 The `mcp` command is the quiet stdio server entry for local MCP clients; stdout is reserved for MCP.
 The remote CLI invokes the stable active-release PowerShell launcher directly with shell=false.
@@ -355,7 +355,7 @@ CONTROLLER
 ----------
 Primary operator entry point:
 
-  npx -y deadbyte-mcp@0.15.43 remote
+  npx -y deadbyte-mcp@0.15.44 remote
 
 The legacy CMD entry remains compatibility-only for R33 rollback safety.
 
@@ -416,7 +416,7 @@ MCP CLIENT CONFIGURATION
 ------------------------
 The local stdio entry point is quiet and suitable for MCP hosts:
 
-  npx -y deadbyte-mcp@0.15.43 mcp
+  npx -y deadbyte-mcp@0.15.44 mcp
 
 CLAUDE DESKTOP
 Use the standard local-server entry in claude_desktop_config.json:
@@ -425,7 +425,7 @@ Use the standard local-server entry in claude_desktop_config.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.43", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.44", "mcp"]
       }
     }
   }
@@ -438,7 +438,7 @@ Create .cursor/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.43", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.44", "mcp"]
       }
     }
   }
@@ -451,7 +451,7 @@ Create .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.43", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.44", "mcp"]
       }
     }
   }
@@ -461,9 +461,9 @@ Add this to ~/.codex/config.toml:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.43", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.44", "mcp"]
 
-The remote device path remains `npx -y deadbyte-mcp@0.15.43 remote`. Remote public MCP uses the
+The remote device path remains `npx -y deadbyte-mcp@0.15.44 remote`. Remote public MCP uses the
 verified HTTPS named-tunnel URL selected by the active generation; do not commit a private device
 URL or tunnel token into a repository.
 

package/RELEASE.json

@@ -1,27 +1,26 @@
 {
   "schema": "deadbyte.release.v1",
   "name": "deadbyte-mcp",
-  "version": "0.15.43",
-  "train": "R66",
-  "label": "DOCTOR EPOCH OBSERVATION COMPATIBILITY HOTFIX",
+  "version": "0.15.44",
+  "train": "R67",
+  "label": "NATIVE OBSERVATION, EVIDENCE TRUTH, OFFLINE DIAGNOSTICS AND LIVE LOG HARDENING",
   "protocol_revision": "2026-07-28",
   "parent": {
-    "version": "0.15.42",
-    "release_id": "v0.15.42-1b4754103dd4ca43",
-    "manifest_sha256": "1b4754103dd4ca43eb81f8e33cf188b36eee3051cb182396ccc6abe2a6e6c250",
-    "generation_manifest_sha256": "62dc68be55ad627f8d872b8be8c1369ecca0edf08fdedc8336c9ccee2d2809fb",
+    "version": "0.15.43",
+    "release_id": "v0.15.43-4c4a64a4c8e9f5a6",
+    "manifest_sha256": "4c4a64a4c8e9f5a6e9eecce85fd0007ebcac99121b29c07f1a1fc81d1643cd33",
+    "generation_manifest_sha256": "ef3b041e2a87c2e143d4733a98a52d9db80cd16ad7007e112fcb5202e70c77c3",
     "activation_status": "PRODUCTION_ACTIVE"
   },
   "runtime_predecessor": {
-    "release_id": "v0.15.42-1b4754103dd4ca43",
-    "manifest_sha256": "1b4754103dd4ca43eb81f8e33cf188b36eee3051cb182396ccc6abe2a6e6c250",
-    "generation_manifest_sha256": "62dc68be55ad627f8d872b8be8c1369ecca0edf08fdedc8336c9ccee2d2809fb"
+    "release_id": "v0.15.43-4c4a64a4c8e9f5a6",
+    "manifest_sha256": "4c4a64a4c8e9f5a6e9eecce85fd0007ebcac99121b29c07f1a1fc81d1643cd33",
+    "generation_manifest_sha256": "ef3b041e2a87c2e143d4733a98a52d9db80cd16ad7007e112fcb5202e70c77c3"
   },
   "source_predecessor": {
-    "version": "0.15.42",
-    "source_path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.42-r65",
-    "manifest_file_sha256": "1b4754103dd4ca43eb81f8e33cf188b36eee3051cb182396ccc6abe2a6e6c250",
-    "manifest_file_count": 2277,
+    "version": "0.15.43",
+    "source_path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.43-r66",
+    "manifest_file_sha256": "4c4a64a4c8e9f5a6e9eecce85fd0007ebcac99121b29c07f1a1fc81d1643cd33",
     "release_status": "PRODUCTION_RELEASED"
   },
   "consolidation": {
@@ -316,5 +315,20 @@
     "production_r65_mutations": 0,
     "npm_publications": 0,
     "prepublish_only": true
+  },
+  "r67_native_observation": {
+    "status": "CANDIDATE_SEALED",
+    "new_public_tools": 0,
+    "predecessor_release_id": "v0.15.43-4c4a64a4c8e9f5a6",
+    "focused_test_result": "PASS_135_CASES_CANDIDATE",
+    "full_release_gate": "PASS",
+    "independent_machine_observation": "PASS",
+    "current_source_full_shards": "PASS",
+    "skipped_tests_must_remain_skipped": true,
+    "native_fault_injection": "PASS",
+    "protocol_parity": "PASS",
+    "isolated_activation_rollback_restore": "PASS",
+    "production_activated": false,
+    "npm_published": false
   }
 }

package/SBOM.cdx.json

@@ -1,13 +1,13 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:cdx:deadbyte-mcp:r66:0.15.43",
+  "serialNumber": "urn:cdx:deadbyte-mcp:r67:0.15.44",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
       "name": "deadbyte-mcp",
-      "version": "0.15.43"
+      "version": "0.15.44"
     }
   },
   "components": [
@@ -48,6 +48,18 @@
       "name": "deadbyte-r60-node-http-adapter",
       "version": "0.15.37",
       "hash_status": "PENDING_R60_FREEZE_REGENERATION"
+    },
+    {
+      "type": "file",
+      "name": "deadbyte-native-inspect-r67.exe",
+      "version": "0.15.44",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "c814771dddac8bfb184250b868ddb6ab9f5e0e43613c04c3ed8abe09324ec4db"
+        }
+      ],
+      "evidence_status": "CANDIDATE_BINARY_PIN_ONLY_NOT_DEPLOYED"
     }
   ]
 }

package/TEST-MATRIX.json

@@ -1,7 +1,7 @@
 {
   "schema": "deadbyte.test-matrix.v1",
-  "version": "0.15.43",
-  "train": "R66",
+  "version": "0.15.44",
+  "train": "R67",
   "primary_platform": "win32-x64",
   "reference": {
     "package": "@wonderwhy-er/desktop-commander",
@@ -11,24 +11,29 @@
   },
   "required": [
     {
-      "id": "r66-focused",
-      "command": "npm run r66:focused:test",
-      "expected": "PASS strict doctor epoch-observation compatibility and connected controller/authority regressions"
+      "id": "r67-focused",
+      "command": "npm run r67:focused:test",
+      "expected": "PASS native observation, machine signer, offline diagnostics, MCP hints and live log"
     },
     {
-      "id": "r66-full-regression",
-      "command": "npm test",
-      "expected": "PASS complete R66 regression with only documented historical/platform skips"
+      "id": "r67-sharded-full",
+      "command": "npm run r67:shard:verify -- <unique-operation-id>",
+      "expected": "32 current source-bound v2 receipts, all skips classified without counting as passed"
     },
     {
       "id": "windows-gate",
       "command": "npm run gate:windows",
-      "expected": "PASS exact sealed R65 parent identity, R66 focused/full regression, manifest verify and isolated doctor"
+      "expected": "PASS exact 0.15.43 predecessor, isolated Windows native tests, manifest and doctor"
     },
     {
       "id": "package-verify",
       "command": "node scripts/npm-release-r48.mjs --verify-only",
-      "expected": "PASS exact packed surface, registry-safe release checks, isolated package version and doctor without publish"
+      "expected": "PASS exact packed artifact and dependency loading without publication"
+    },
+    {
+      "id": "rollback-restore",
+      "command": "node scripts/release-parity-r46.mjs",
+      "expected": "isolated candidate activation exact R66 rollback and same R67 restore, identity/authority consistency"
     }
   ],
   "observed_pre_release_evidence": {
@@ -456,5 +461,31 @@
     "new_public_tools": 0,
     "new_authority_scopes": 0,
     "prepublish_only": true
+  },
+  "r67_candidate": {
+    "status": "PASS_PREPUBLISH_RELEASE_READY",
+    "focused": {
+      "status": "PASS",
+      "tests": 135,
+      "failed": 0,
+      "skipped": 0
+    },
+    "full_regression": {
+      "status": "PASS",
+      "operation_id": "r67-codex-20261012b",
+      "source_tree_sha256": "1433e76a26fcaafa414c73161573e96c7a70222292561845f270ff75d887fc64",
+      "test_count": 1442,
+      "passed": 1399,
+      "failed": 0,
+      "classified_skipped": 43,
+      "unclassified_nonpass": 0,
+      "verified_receipts": 32
+    },
+    "native_signer": "PASS_MACHINE_OWNED_ISOLATED_STATE",
+    "native_fault_injection": "PASS",
+    "protocol_compat": "PASS",
+    "isolated_activation_rollback_restore": "PASS_ISOLATED_SLOT_ONLY",
+    "published": false,
+    "activated": false
   }
 }

package/bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-chatgpt-bridge",
-  "version": "0.15.43",
+  "version": "0.15.44",
   "private": true,
   "type": "module",
   "engines": {

package/controller/deadbyte-desktop-policy.json

@@ -1,19 +1,19 @@
 {
     "schema":  "deadbyte.desktop-policy.v1",
     "enabled":  true,
-    "grant_file":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.30-stabilization\\controller\\runtime\\desktop-grant.json",
-    "evidence_dir":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.30-stabilization\\controller\\runtime\\desktop-evidence",
+    "grant_file":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.44-r67\\controller\\runtime\\desktop-grant.json",
+    "evidence_dir":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.44-r67\\controller\\runtime\\desktop-evidence",
     "observer":  {
-                     "executable":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.30-stabilization\\bin\\deadbyte-desktop-observer-r40.exe",
+                     "executable":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.44-r67\\bin\\deadbyte-desktop-observer-r40.exe",
                      "sha256":  "32671ef2b7decd68c25fcabfe064086e4b3f83a8e9d3558b9d6de3a2510c6dab",
                      "backend":  "gdi-bitblt-fallback"
                  },
     "input":  {
-                  "executable":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.30-stabilization\\bin\\deadbyte-desktop-input-r40.exe",
+                  "executable":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.44-r67\\bin\\deadbyte-desktop-input-r40.exe",
                   "sha256":  "0b967fd0ef599cbb9882b96ea16db7261f086dbcccae631b56f1bc2445a8ab5b"
               },
     "grounder":  {
-                     "executable":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.30-stabilization\\bin\\deadbyte-desktop-uia-r40.exe",
+                     "executable":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.44-r67\\bin\\deadbyte-desktop-uia-r40.exe",
                      "sha256":  "19ff558218fe8437dc04f50a8848756a8a83a84f73f464057562d77c7e19fb75"
                  },
     "allowed_input_desktops":  [

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.43-r66\\controller\\runtime\\process-grant.json",
-  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.43-r66\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.44-r67\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.44-r67\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.43-r66\\bin\\deadbyte-process-host.exe",
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.44-r67\\bin\\deadbyte-process-host.exe",
     "sha256": "daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4"
   },
   "roots": {
     "core": {
-      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.43-r66",
+      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.44-r67",
       "deny_paths": [
         "node_modules",
         "controller/runtime",

package/docs/R67-ALPHA-REFERENCE-DIFFERENTIAL.md

@@ -0,0 +1,42 @@
+# R67 Desktop Commander 0.3.1-alpha.2 isolated comparison — 2026-10-11
+
+## Scope and invariants
+
+- Competitor npm package: `@wonderwhy-er/desktop-commander@0.3.1-alpha.2`.
+- Source: official npm registry package-specific metadata and immutable tarball URL.
+- Static reference path: `D:\Projects\deadbyte-mcp\references\desktop-commander-0.3.1-alpha.2`.
+- Archive SHA-256: `faaf3f34f114589c0630ce4eaa7114ecc628ce2030822dfe67feac0e17fedc4b`.
+- Archive SHA-512 integrity: `sha512-yrAd3rQisbLpOQIiaPDDxJCy6uWGZxNAbBsnuVD33G9Bu/uO4sX38qERJ56CiS3rSwYMqejIof5X6iyDYc9nKQ==`.
+- Local stable reference: `references/desktop-commander`, package version 0.2.52.
+- No alpha dependency installation, lifecycle scripts, remote session, tokens, server start, or code execution performed. Tarball is untrusted research input.
+- Comparison output: `docs/R67-ALPHA-STATIC-COMPARISON.json`. Selected dist subset: 135 alpha code/json files vs 121 stable files; 14 added, 59 changed, 62 unchanged. **These are selected-scope file comparisons, not total source-line counts, not runtime parity, and do not establish feature readiness.**
+
+## Confirmed static observations and native DEADBYTE response
+
+1. **Diagnostics collection:** Alpha's `dist/remote-device/diagnostics/{device-log,redact,report,upload}.js` are new relative to the local stable reference. `dist/npm-scripts/remote.js` advertises `remote --report` and `--no-upload`; its report source says upload happens unless `--no-upload` is specified. `upload.js` resolves a diagnostics server URL and POSTs a ZIP. This is a static code-path finding; no traffic was generated and no privacy incident is claimed.
+
+2. **Redaction:** Alpha's `diagnostics/redact.js` masks selected secret-name patterns, Bearer tokens, JWTs, emails, UUIDs and host/home identifiers. That is a denylist-style transformation. DEADBYTE candidate instead discards unrecognized log text and exports only timestamp/level/event/Win32-code fields, to reduce residual leak paths. This loses diagnostic fidelity by design and still requires independent adversarial fuzz/credential-format coverage.
+
+3. **Remote recovery:** `dist/remote-device/remote-channel.js`, `device.js`, `utils/process-tree.js` and `utils/process-detection.js` changed or were added. Static review finds jittered reconnect backoff and token-refresh/clock-skew handling. These are test ideas for future R68 crash-reconnect and side-effect reconciliation, **not** evidence that alpha is production-reliable.
+
+4. **Documents/dep loading:** Alpha changed PDF adapters and dependency-related files, including `dist/tools/pdf/markdown.js` (size delta +23,985 bytes in this comparison). Do not port these libraries into DEADBYTE without independent Windows PDF/DOM/rendering and dependency loading tests.
+
+5. **Lifecycle exposure:** npm metadata has `postinstall` which runs installation tracking and ripgrep verification. Therefore competitor artifacts were acquired as **raw verified bytes**, not through `npm install`/`npx` (which could execute package lifecycle code). Public availability does not equal trust.
+
+6. **MCP annotations:** The MCP 2026-07-28 schema documents `readOnlyHint`, `destructiveHint`, `idempotentHint`, `openWorldHint` as untrusted hints. DEADBYTE R67 candidate already adds classified annotations to four existing machine tools without changing runtime authorization enforcement. A tool annotation cannot grant authority.
+
+7. **New DEADBYTE verified ZIP reader:** The candidate now has `src/r67-diagnostics-verify.mjs` and `deadbyte diagnostics verify --input FILE`. It independently checks canonical ZIP structure, exact entry names/order, data bounds, CRC, JSON allowlist, event schema and upload-denial metadata. It intentionally claims **structural integrity, not cryptographic authenticity**. Test `r67-diagnostics-verify.test.mjs` recomputes both CRCs after malicious semantic edits and asserts rejection. No new public MCP tool or network mode was added.
+
+## Test evidence
+
+- Official npm SHA-512 and SHA-1 matched the downloaded tarball; 286 archive entries and 138 static files selected for analysis.
+- Static differential command receipt SHA-256: `1b9069af6412d5cbcd5aa69b02e02dcb064ad9e3d8068ccf0d91879f6e7e6cba`.
+- R67 focused gate (latest): **49 tests, 49 PASS, 0 FAIL, 0 SKIP**, exit code 0, command receipt SHA-256 `043ed37f200afb7c86fc534414eed7f32cd3305073099d12e1541a951dac0610`.
+
+## Decision and remaining blockers
+
+Production `v0.15.43-4c4a64a4c8e9f5a6` is unchanged. Candidate `v0.15.44-r67` is **DRAFT / UNSEALED / NOT DEPLOYED**.
+
+Do not declare R67 finished or objectively superior from a static comparison. The candidate still needs exact full regression with durable, current-source receipts (historical shard 5 had OUTCOME_UNKNOWN), runtime-signer binding for signed observations, native process-race fault injection, full Windows/transport compatibility, publish contents/digest verification, and independent release closure. Alpha was not started, so its actual runtime outcomes are UNKNOWN.
+
+The next highest-value engineering decision is to close R67 historical test-worker reconciliation and native observation authority, then verify R68 reconnect/retry behavior against fault-injected Windows processes, rather than copying upstream diagnostics auto-upload.

package/docs/R67-ALPHA-STATIC-COMPARISON.json

@@ -0,0 +1,205 @@
+{
+  "schema": "deadbyte.r67-competitor-static-compare.v1",
+  "scope": "static npm archives only; do not execute or install competitor",
+  "stable_version": "0.2.52",
+  "alpha_version": "0.3.1-alpha.2",
+  "alpha_tarball_sha256": "faaf3f34f114589c0630ce4eaa7114ecc628ce2030822dfe67feac0e17fedc4b",
+  "stable_compared_files": 121,
+  "alpha_selected_compared_files": 135,
+  "added": 14,
+  "changed": 59,
+  "unchanged": 62,
+  "removed_from_selected_scope": 0,
+  "relevant_changes": [
+    {
+      "path": "handlers/process-handlers.js",
+      "status": "UNCHANGED",
+      "stable_sha256": "9f9f53d3bf322c4dc813cb9fdf0357993fd209620a344a5025507460c99356c1",
+      "alpha_sha256": "9f9f53d3bf322c4dc813cb9fdf0357993fd209620a344a5025507460c99356c1",
+      "delta_bytes": 0
+    },
+    {
+      "path": "handlers/terminal-handlers.js",
+      "status": "UNCHANGED",
+      "stable_sha256": "e0e67f4ed78e421bd42dc438fb48f5994347f14437a5c2516fb9ed197405236d",
+      "alpha_sha256": "e0e67f4ed78e421bd42dc438fb48f5994347f14437a5c2516fb9ed197405236d",
+      "delta_bytes": 0
+    },
+    {
+      "path": "remote-device/desktop-commander-integration.js",
+      "status": "CHANGED",
+      "stable_sha256": "0b198eb1ff897e1bf9156f546f32bfd3987e72157348ff492fee03d1b887436a",
+      "alpha_sha256": "fe0a5965fe077866deae661e38c3dd4a5aa11c0e0892fb57228a948a0cd1f650",
+      "delta_bytes": -293
+    },
+    {
+      "path": "remote-device/device-authenticator.js",
+      "status": "UNCHANGED",
+      "stable_sha256": "b7884d9398135264babe96d3fbaa22bf1300b16e03259cd739ec1d44da84f170",
+      "alpha_sha256": "b7884d9398135264babe96d3fbaa22bf1300b16e03259cd739ec1d44da84f170",
+      "delta_bytes": 0
+    },
+    {
+      "path": "remote-device/device.js",
+      "status": "CHANGED",
+      "stable_sha256": "629b99b96d14baaa237f743cab6861562c722d2aa1bf925f952ece42cb6389ae",
+      "alpha_sha256": "edc2991e00fc604c118982b4b837ec9df8f99f8e58e87393690665a5bdce1372",
+      "delta_bytes": 5198
+    },
+    {
+      "path": "remote-device/diagnostics/device-log.js",
+      "status": "ADDED",
+      "stable_sha256": null,
+      "alpha_sha256": "891e994c5dd3c70ba331d5c1819b39d1c0e91162f9315c3526aaf6a5bc373f51",
+      "delta_bytes": null
+    },
+    {
+      "path": "remote-device/diagnostics/redact.js",
+      "status": "ADDED",
+      "stable_sha256": null,
+      "alpha_sha256": "a84f9654aac58d885fa6cfd60fa063abeaeb96e406cff4fdc4fec206d0baa7c5",
+      "delta_bytes": null
+    },
+    {
+      "path": "remote-device/diagnostics/report.js",
+      "status": "ADDED",
+      "stable_sha256": null,
+      "alpha_sha256": "6a777e6422742e56d09e242eab23a6120370367430a38aadd26f23fc1302cecf",
+      "delta_bytes": null
+    },
+    {
+      "path": "remote-device/diagnostics/upload.js",
+      "status": "ADDED",
+      "stable_sha256": null,
+      "alpha_sha256": "0054d7f6f28e67b2927f22781ab9717770a9112e51cdd24f6549215881b11771",
+      "delta_bytes": null
+    },
+    {
+      "path": "remote-device/remote-channel.js",
+      "status": "CHANGED",
+      "stable_sha256": "4c48a276b53183bb0753baa681d856016a367a1def295af605123036ce827ce0",
+      "alpha_sha256": "29d17eee3a76bdd8d1a95ecd2d8f7e522449289d2c8393486d032acaba64b6fe",
+      "delta_bytes": 2793
+    },
+    {
+      "path": "remote-device/scripts/blocking-offline-update.js",
+      "status": "CHANGED",
+      "stable_sha256": "fcec23e7bcfc15cf22e104d968f4f206d0959b09c31df05e9ef039f7115fed0c",
+      "alpha_sha256": "95055078e2979f7b031c92638f06ab4524eaf73097870730b620e419f6731817",
+      "delta_bytes": 2482
+    },
+    {
+      "path": "remote-device/transport-telemetry.js",
+      "status": "ADDED",
+      "stable_sha256": null,
+      "alpha_sha256": "2c96cbaae3b6671bb2c26f0bf45f6684aa548d3553daafabcfdbc9a93d3b61c5",
+      "delta_bytes": null
+    },
+    {
+      "path": "terminal-manager.js",
+      "status": "CHANGED",
+      "stable_sha256": "d4d0773b79501858be4fd45fcd03066fd98acf8cb969e65f168c89c52ee564c3",
+      "alpha_sha256": "92a97f083a5b650a86dc3ecfd029dd3a371ca7a0636d9d1f93233a2b70a68e41",
+      "delta_bytes": 6564
+    },
+    {
+      "path": "tools/improved-process-tools.js",
+      "status": "CHANGED",
+      "stable_sha256": "702d972ec92424298315a2bc551bbc9b12c337949f62a84410879576d50235fb",
+      "alpha_sha256": "044d378895df493df09f73c87fed42360a71a004cf252f050202d55e157ef803",
+      "delta_bytes": 6408
+    },
+    {
+      "path": "tools/pdf/extract-images.js",
+      "status": "CHANGED",
+      "stable_sha256": "b7830fa8758211bf89ecb9df501293e1856e1672b28dbfec01bc1a84e5adf793",
+      "alpha_sha256": "1030fd05f2542ef263b19b89eac6ee3f212896b05bf63c07a1c73d230f19c2da",
+      "delta_bytes": 275
+    },
+    {
+      "path": "tools/pdf/index.js",
+      "status": "CHANGED",
+      "stable_sha256": "d58afad5e9bb31c86859bc017e7c6c998d2ea83cfefefad8288044e2eb0985dc",
+      "alpha_sha256": "9d7de10bb791a158fae0c61ee48d3d27bd3a623b6d7150335d6b97f71ee287ef",
+      "delta_bytes": 130
+    },
+    {
+      "path": "tools/pdf/lib/pdf2md.js",
+      "status": "CHANGED",
+      "stable_sha256": "fbcff6b076b04240916b37d3969893ee3784c1ee673b32b052f96a3a9ca63ccf",
+      "alpha_sha256": "33aaa8ec3ddf44cdfc95634339fa91ebeb6685042a294421659c3b91dc797892",
+      "delta_bytes": 429
+    },
+    {
+      "path": "tools/pdf/manipulations.js",
+      "status": "CHANGED",
+      "stable_sha256": "79f60eeb790ad4f60d6774aa65ddf99d99cd2e1099f1ed6b5a1ba763838eec38",
+      "alpha_sha256": "28d473e1752fbd67dcb6299df59902d7dc24b74d383b1564fb63d74764ffaa9c",
+      "delta_bytes": 786
+    },
+    {
+      "path": "tools/pdf/markdown.js",
+      "status": "CHANGED",
+      "stable_sha256": "223a7cf36d662c04a29b9472e8b523f04fe80fdba23e3d836bf0b879c6d686a9",
+      "alpha_sha256": "61685462f9abb2517e4691fbc7baebea23260e776d3e216d941480551450e982",
+      "delta_bytes": 23985
+    },
+    {
+      "path": "tools/pdf/utils.js",
+      "status": "CHANGED",
+      "stable_sha256": "e22a4c088d4526b948187a3d49c0fd6a4048715c8e97a33e11330cbb5637ddb0",
+      "alpha_sha256": "68c382642ce8fcae86e7b24994058ee5ea86fe2bcf91ccfac7d4409c88dcadc2",
+      "delta_bytes": 165
+    },
+    {
+      "path": "tools/process.js",
+      "status": "CHANGED",
+      "stable_sha256": "e3965e913e1a0c0840a666861529e85c0b80d5e97147cada4737ddec5a6fb384",
+      "alpha_sha256": "d9c85fb1d15751f356c616c886cb2004717669227c4186b85e7442a025d4e9eb",
+      "delta_bytes": 271
+    },
+    {
+      "path": "tools/schemas.js",
+      "status": "CHANGED",
+      "stable_sha256": "f342345e34e48769dabaefe1b932f09d41e2e207b422f7794a15ee50ffa8f140",
+      "alpha_sha256": "6a290497b29f9dc5f43d66008ea54fcf0c302edea5612af519ef52ab3816d29e",
+      "delta_bytes": 776
+    },
+    {
+      "path": "utils/exit-process.js",
+      "status": "ADDED",
+      "stable_sha256": null,
+      "alpha_sha256": "b75d45fe351edc385e6f6ccceb84d79aef92c18b0db3e0ae657faca76f84776f",
+      "delta_bytes": null
+    },
+    {
+      "path": "utils/files/pdf.js",
+      "status": "CHANGED",
+      "stable_sha256": "8678f41e7513267d2d7ee659db7f4aae9624c41cc9e500d710d451ba0f920e71",
+      "alpha_sha256": "97b8250e35e5e7c5a89170cabd0d73686620c43fe12e4eb35cfc0b3acdc67b83",
+      "delta_bytes": -487
+    },
+    {
+      "path": "utils/mcp-ui-ab-test.js",
+      "status": "UNCHANGED",
+      "stable_sha256": "978c72e71812e555f6e90cf107d936be5777f60f2e2658109af92513a2a06a42",
+      "alpha_sha256": "978c72e71812e555f6e90cf107d936be5777f60f2e2658109af92513a2a06a42",
+      "delta_bytes": 0
+    },
+    {
+      "path": "utils/process-detection.js",
+      "status": "CHANGED",
+      "stable_sha256": "50b11aa5d3258692c2844befc197aa1845770fe6857e4fc51471108a9934201f",
+      "alpha_sha256": "b4273acd6c4b601602915bc1b3f2b817891c14eb51a3bbfa990cb8da1b3e5073",
+      "delta_bytes": 7354
+    },
+    {
+      "path": "utils/process-tree.js",
+      "status": "ADDED",
+      "stable_sha256": null,
+      "alpha_sha256": "ede6be5982d553ed986367942c8faa74496947f03a03ea739245dbc2d9f46f77",
+      "delta_bytes": null
+    }
+  ],
+  "caveat": "Alpha was selectively extracted; do not treat missing alpha inventory as deleted without checking full archive."
+}