deadbyte-mcp 0.15.43 → 0.15.44

package/src/r67-regression-shards.mjs

@@ -0,0 +1,176 @@
+import {createHash} from 'node:crypto';
+import {lstat,readdir,readFile} from 'node:fs/promises';
+import path from 'node:path';
+const sha=value=>createHash('sha256').update(Buffer.from(JSON.stringify(value),'utf8')).digest('hex');
+
+export function createR67ShardPlan(filenames,shardCount=32){
+ if(!Array.isArray(filenames)||!Number.isInteger(shardCount)||shardCount<1||shardCount>64)throw new Error('invalid shard plan');
+ if(!filenames.length||filenames.length<shardCount)throw new Error('insufficient regression files');
+ const sorted=[...filenames].sort();
+ if(sorted.some((n,i)=>typeof n!=='string'||!/^test\/[a-z0-9._-]+\.test\.mjs$/.test(n)||(i>0&&n===sorted[i-1])))
+  throw new Error('invalid or duplicate test filename');
+ // Measured on Windows: 53.2s controller lifecycle and 110.4s remote lifecycle.
+ // Assign both to standalone tail shards; smaller shard counts reserve at least one normal shard.
+ const measured=['test/r58-controller-live-local.test.mjs','test/remote-session-cli.test.mjs'];
+ const present=measured.filter(name=>sorted.includes(name));
+ const isolated=present.slice(-Math.min(present.length,shardCount-1));
+ const isolatedSet=new Set(isolated);
+ const normal=sorted.filter(name=>!isolatedSet.has(name));
+ const normalShardCount=shardCount-isolated.length;
+ const shards=Array.from({length:shardCount},(_,index)=>({index,files:[]}));
+ normal.forEach((name,index)=>shards[index%normalShardCount].files.push(name));
+ isolated.forEach((name,index)=>shards[normalShardCount+index].files.push(name));
+ const plan_sha256=sha({schema:'deadbyte.r67-shard-plan.v1',shardCount,files:sorted,
+  assignment:'measured-slow-suites-isolation-v2',isolated});
+ return {schema:'deadbyte.r67-shard-plan.v1',plan_sha256,file_count:sorted.length,
+  shards:shards.map(s=>({...s,files_sha256:sha(s.files)}))};
+}
+export function r67ShardTimeoutMs(shard){
+ if(!shard||!Array.isArray(shard.files))throw new Error('invalid shard');
+ if(shard.files.length===1&&shard.files[0]==='test/remote-session-cli.test.mjs')return 165000;
+ if(shard.files.length===1&&shard.files[0]==='test/r58-controller-live-local.test.mjs')return 120000;
+ return 58000;
+}
+export function reconcileR67Shards(plan,receipts){
+ if(!plan||plan.schema!=='deadbyte.r67-shard-plan.v1'||!Array.isArray(plan.shards)||!Array.isArray(receipts))throw new Error('invalid shard proof input');
+ const seen=new Map();
+ for(const r of receipts){
+  if(!Number.isInteger(r?.shard_index)||r.shard_index<0||r.shard_index>=plan.shards.length)throw new Error('out-of-plan shard');
+  if(seen.has(r.shard_index))throw new Error('duplicate shard receipt');
+  seen.set(r.shard_index,r);
+ }
+ const missing=plan.shards.filter(s=>!seen.has(s.index)).map(s=>s.index);
+ let tampered=false,failed=false,unknown=false,passed=0,failureCount=0,testCount=0;
+ for(const shard of plan.shards){
+  const r=seen.get(shard.index);if(!r)continue;
+  const missingCounts=r.status==='OUTCOME_UNKNOWN'&&r.test_count===null&&r.passed===null&&r.failed===null;
+  const validCounts=Number.isInteger(r.test_count)&&r.test_count>=0&&
+    Number.isInteger(r.passed)&&r.passed>=0&&Number.isInteger(r.failed)&&r.failed>=0&&
+    r.passed+r.failed<=r.test_count;
+  if(r.plan_sha256!==plan.plan_sha256||r.files_sha256!==shard.files_sha256||
+    !['PASS','FAILED','OUTCOME_UNKNOWN'].includes(r.status)||!(missingCounts||validCounts)){tampered=true;continue;}
+  if(r.schema==='deadbyte.r67-shard-result.v2'){
+   const unknownWithoutCounts=r.status==='OUTCOME_UNKNOWN'&&missingCounts&&r.skipped===null&&r.cancelled===null&&r.todo===null;
+   const complete=validCounts&&Number.isInteger(r.skipped)&&r.skipped>=0&&
+    Number.isInteger(r.cancelled)&&r.cancelled===0&&Number.isInteger(r.todo)&&r.todo===0&&
+    r.passed+r.failed+r.skipped+r.cancelled+r.todo===r.test_count;
+   if(!(unknownWithoutCounts||complete)){tampered=true;continue;}
+  }
+  if(r.status==='PASS'&&(r.exit_code!==0||r.failed!==0||r.test_count<shard.files.length))tampered=true;
+  if(r.status==='FAILED'||r.exit_code!==0&&r.status!=='OUTCOME_UNKNOWN'||r.failed>0)failed=true;
+  if(r.status==='OUTCOME_UNKNOWN')unknown=true;
+  passed+=r.passed;failureCount+=r.failed;testCount+=r.test_count;
+ }
+ const status=tampered||failed?'FAILED':missing.length?'BLOCKED':unknown?'OUTCOME_UNKNOWN':'PASS';
+ return {schema:'deadbyte.r67-shard-reconciliation.v1',status,plan_sha256:plan.plan_sha256,
+  file_count:plan.file_count,shards_expected:plan.shards.length,shards_observed:seen.size,
+  missing,test_count:testCount,passed,failed:failureCount,integrity_failed:tampered};
+}
+
+/** Bind regression evidence to executable SOURCE bytes, not just test filenames. */
+export async function r67RegressionTreeHash(root,{roots=['src','test','scripts','controller','bridge','native','docs'],
+ topLevel=['package.json','package-lock.json'],extra=['bin/deadbyte-native-inspect-r67.exe']}={}){
+ if(typeof root!=='string'||!root)throw new Error('regression source root required');
+ const seeds=[...roots,...topLevel,...extra];
+ if(!seeds.length||seeds.some(n=>typeof n!=='string'||!n||n.includes('\\')||n.split('/').some(part=>!part||part==='.'||part==='..')))
+  throw new Error('invalid regression source scope');
+ const entries=[];
+ let total=0;
+ const seen=new Set();
+ async function visit(rel){
+  if(seen.has(rel))throw new Error('duplicate regression source path');
+  seen.add(rel);
+  const file=path.join(root,...rel.split('/'));
+  const info=await lstat(file);
+  if(info.isSymbolicLink())throw new Error('symlink forbidden in regression source tree: '+rel);
+  if(info.isDirectory()){
+   const children=(await readdir(file)).sort();
+   for(const child of children)await visit(rel+'/'+child);
+   return;
+  }
+  if(!info.isFile()||info.size>8*1024*1024)throw new Error('non-file/oversized regression source: '+rel);
+  if(entries.length>=5000||total+info.size>128*1024*1024)throw new Error('regression source budget exceeded');
+  const bytes=await readFile(file);
+  if(bytes.length!==info.size)throw new Error('regression source changed during read: '+rel);
+  total+=bytes.length;
+  entries.push([rel,bytes.length,createHash('sha256').update(bytes).digest('hex')]);
+ }
+ for(const seed of seeds)await visit(seed);
+ entries.sort((a,b)=>a[0].localeCompare(b[0],'en'));
+ return {schema:'deadbyte.r67-source-tree.v1',
+  sha256:sha({schema:'deadbyte.r67-source-tree.v1',files:entries}),
+  file_count:entries.length,bytes_total:total};
+}
+
+/** Parse complete Node TAP totals without treating missing or cancelled output as success. */
+export function parseR67TapSummary(output){
+ if(typeof output!=='string')return null;
+ const counts=Object.create(null);
+ const keys=['tests','pass','fail','cancelled','skipped','todo'];
+ for(const raw of output.split(/\r?\n/)){
+  const line=raw.trim();
+  const match=/^(?:#|ℹ)\s+(tests|pass|fail|cancelled|skipped|todo)\s+(\d+)$/u.exec(line);
+  if(!match)continue;
+  if(Object.hasOwn(counts,match[1]))return null;
+  const n=Number(match[2]);
+  if(!Number.isSafeInteger(n))return null;
+  counts[match[1]]=n;
+ }
+ if(keys.some(k=>!Number.isSafeInteger(counts[k])))return null;
+ if(counts.tests!==counts.pass+counts.fail+counts.skipped+counts.cancelled+counts.todo)return null;
+ if(counts.cancelled!==0||counts.todo!==0)return null;
+ return Object.fromEntries(keys.map(k=>[k,counts[k]]));
+}
+
+export function parseR67NonpassCases(output){
+ if(typeof output!=='string'||output.length>16*1024*1024)throw new Error('bounded TAP text required');
+ const keys=['tests','pass','fail','cancelled','skipped','todo'];
+ const totals=Object.create(null);
+ for(const raw of output.split(/\r?\n/)){
+  const line=raw.trim();
+  const m=/^(?:#|ℹ)\s+(tests|pass|fail|cancelled|skipped|todo)\s+(\d+)$/u.exec(line);
+  if(!m)continue;
+  if(Object.hasOwn(totals,m[1]))return null;
+  totals[m[1]]=Number(m[2]);
+ }
+ if(keys.some(k=>!Number.isSafeInteger(totals[k])))return null;
+ if(totals.tests!==totals.pass+totals.fail+totals.cancelled+totals.skipped+totals.todo)return null;
+ const summary=totals;
+ const cases=[];
+ const RX=/^\s*(?:ok|not ok)\s+\d+\s+-\s+(.+?)\s+#\s+(SKIP|TODO)(?:\s+(.*\S))?\s*$/u;
+ for(const line of output.split(/\r?\n/)){
+  const match=RX.exec(line);
+  if(!match)continue;
+  const name=match[1].trim(),reason=match[3]?.trim()||null;
+  cases.push({kind:match[2],name,reason});
+  if(cases.length>10000)throw new Error('case ledger budget exceeded');
+ }
+ const expected=summary.skipped+summary.todo;
+ const actual=cases.filter(c=>c.kind==='SKIP').length+cases.filter(c=>c.kind==='TODO').length;
+ const unclassified=cases.filter(c=>!c.name||!c.reason).length+Math.max(0,expected-actual);
+ const countersMatch=summary.skipped===cases.filter(c=>c.kind==='SKIP').length&&
+  summary.todo===cases.filter(c=>c.kind==='TODO').length;
+ return {cases,expected_nonpass:expected,fully_classified:countersMatch&&unclassified===0,
+  unclassified_count:unclassified,counters_match:countersMatch};
+}
+
+
+/** Diagnostic-only FAILED TAP case identities. Never export stack traces or raw assertion messages. */
+export function parseR67FailedCases(output){
+ if(typeof output!=='string'||output.length>16*1024*1024)throw new Error('bounded TAP text required');
+ const tap=parseR67TapSummary(output);
+ if(!tap)return {cases:[],count:0,complete:false,expected:null};
+ const cases=[];
+ for(const line of output.split(/\r?\n/)){
+  const match=/^\s*not ok\s+\d+\s+-\s+(.+?)\s*(?:#.*)?$/u.exec(line);
+  if(!match)continue;
+  const name=match[1].trim();
+  if(!name)continue;
+  const sensitive=/sk-(?:proj|test|live|[a-z]{10})-|bearer\s+|authorization|password\s*[:=]|(?:[A-Z]:\\Users\\|\/home\/)[^\s]+/i.test(name);
+  const printable=!/[\x00-\x1f\x7f-\x9f]/u.test(name)&&name.length<=256;
+  cases.push({name:sensitive||!printable?'[redacted]':name,
+   name_sha256:createHash('sha256').update(Buffer.from(name,'utf8')).digest('hex')});
+  if(cases.length>128)throw new Error('failed-case ledger budget exceeded');
+ }
+ return {cases,count:cases.length,expected:tap.fail,complete:tap.fail===cases.length};
+}

package/src/remote-live-log.mjs

@@ -25,7 +25,7 @@ const LIFECYCLE_ASCII=Object.freeze({
 
 function safeAtom(value){
   if(typeof value==='string'){
-    if(value.length<1||value.length>160||/[\r\n\0]/.test(value)) return null;
+    if(value.length<1||value.length>160||/[\x00-\x1f\x7f-\x9f]/u.test(value)) return null;
     return value;
   }
   if(typeof value==='number'&&Number.isFinite(value)) return String(value);
@@ -55,8 +55,10 @@ const START_VISIBLE_PATTERNS=[/(?:^|_)file_write$/,/text_replace$/,/symbol_repla
 
 export function selectLiveLogNames({auditNames=[],runtimeNames=[]}={}){
   if(!Array.isArray(auditNames)||!Array.isArray(runtimeNames)) throw new Error('live log names must be arrays');
-  const audit=auditNames.filter(name=>typeof name==='string'&&/^segment-\d{8}\.jsonl$/.test(name)).sort().slice(-2);
-  const runtime=runtimeNames.filter(name=>typeof name==='string'&&/\.log$/i.test(name)).sort();
+  const audit=[...new Set(auditNames.filter(name=>typeof name==='string'&&/^segment-\d{8}\.jsonl$/.test(name)))].sort().slice(-2);
+  // Runtime filenames come from discovery, but never trust caller-supplied path components.
+  // Bound number of active readers to prevent log-file flooding from exhausting handles.
+  const runtime=[...new Set(runtimeNames.filter(name=>typeof name==='string'&&/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}\.log$/.test(name)))].sort().slice(-64);
   return Object.freeze({audit:Object.freeze(audit),runtime:Object.freeze(runtime)});
 }
 
@@ -72,7 +74,7 @@ export function truncateUtf8(value,maxBytes,{ellipsis='…'}={}){
 }
 function clipped(value,max=72){
   if(typeof value!=='string') return '';
-  const one=value.replace(/[\r\n\t]+/g,' ').replace(/\s{2,}/g,' ').trim();
+  const one=value.replace(/[\x00-\x1f\x7f-\x9f]+/gu,' ').replace(/\s{2,}/g,' ').trim();
   return truncateUtf8(one,max);
 }
 function shortValue(value,max=12){
@@ -83,7 +85,7 @@ function payloadByteCount(value){
   return value&&typeof value==='object'&&value.redacted===true&&Number.isFinite(Number(value.byte_count))?Number(value.byte_count):null;
 }
 function safePathAtom(value){
-  if(typeof value!=='string'||value.length<1||value.length>2048||/[\r\n\0]/.test(value)) return null;
+  if(typeof value!=='string'||value.length<1||value.length>2048||/[\x00-\x1f\x7f-\x9f]/u.test(value)) return null;
   return value;
 }
 function rootedPath(args,key='path',rootPaths={}){
@@ -172,7 +174,7 @@ function displayClock(ms){
 
 export function formatRemoteToolCall(event,{clock=()=>Date.now(),displayMode='unicode'}={}){
   if(!event||typeof event!=='object'||Array.isArray(event)||event.event_type!=='tool.request'||
-     typeof event.tool!=='string'||!event.tool) return null;
+     typeof event.tool!=='string'||!/^[A-Za-z][A-Za-z0-9_.-]{0,127}$/.test(event.tool)) return null;
   if(typeof clock!=='function') throw new Error('remote tool-call clock must be a function');
   const args=sanitizeAuditArgs(event.args??{});
   return remoteDisplayText(`${eventTimestamp(event,clock)} | ${event.tool.padEnd(TOOL_COLUMN_WIDTH)} | Arguments: ${canonicalJson(args)}`,displayMode);
@@ -186,8 +188,8 @@ function formatDuration(ms){
 }
 
 export function formatCompactAuditEvent(event){
-  if(!event||typeof event!=='object'||Array.isArray(event)||typeof event.tool!=='string'||!event.tool) return null;
-  if(event.event_type==='tool.request') return `▶ RUN ${event.tool}${summarizeArgs(event.args)}`;
+  if(!event||typeof event!=='object'||Array.isArray(event)||typeof event.tool!=='string'||!/^[A-Za-z][A-Za-z0-9_.-]{0,127}$/.test(event.tool)) return null;
+  if(event.event_type==='tool.request') return `▶ RUN ${event.tool}${summarizeArgs(sanitizeAuditArgs(event.args??{}))}`;
   if(event.event_type==='tool.result'){
     const marker=event.outcome?.is_error===true?'❌ ERR':'✅ OK';
     const duration=formatDuration(event.outcome?.duration_ms);
@@ -361,7 +363,9 @@ export function createLiveTimelineTracker({clock=()=>Date.now(),verbose=false,fo
     const summary=span?.summary||'';
     const rawReason=typeof event.outcome?.reason==='string'&&event.outcome.reason?event.outcome.reason:
       (unknown&&typeof event.outcome?.recovery?.reason==='string'?event.outcome.recovery.reason:'');
-    const reason=rawReason?clipped(rawReason,180):(unknown?'terminal result unavailable; inspect state before retry':'');
+    const screenedReason=typeof rawReason==='string'?sanitizeAuditArgs(rawReason):null;
+    const sensitiveReason=typeof rawReason==='string'&&typeof screenedReason!=='string';
+    const reason=sensitiveReason?'[REDACTED_SENSITIVE_REASON]':rawReason?clipped(rawReason,180):(unknown?'terminal result unavailable; inspect state before retry':'');
     const category=categoryForTool(displayTool);
     const receipt=Array.isArray(event.outcome?.receipt_sha256s)&&typeof event.outcome.receipt_sha256s[0]==='string'
       ?shortValue(event.outcome.receipt_sha256s[0],8):'';
@@ -414,7 +418,7 @@ export function createLiveTimelineTracker({clock=()=>Date.now(),verbose=false,fo
       lastSourceSequence=sourceSequence;
     }
     const requestId=typeof event.request_id==='string'&&event.request_id?event.request_id:null;
-    const tool=typeof event.tool==='string'&&event.tool?event.tool:null;
+    const tool=typeof event.tool==='string'&&/^[A-Za-z][A-Za-z0-9_.-]{0,127}$/.test(event.tool)?event.tool:null;
     if(event.event_type==='tool.request'&&requestId&&tool){
       if(pending.has(requestId)||completed.has(requestId)) return null;
       const args=event.args??{};

package/src/tool-audit.mjs

@@ -21,7 +21,7 @@ const secretExactKeys=new Set([
 ]);
 const secretSuffixes=['_password','_passwd','_secret','_token','_credential','_credentials','_cookie','_cookies','_private_key','_recovery_code','_api_key'];
 const payloadKeys=new Set(['content','file_text','text','body','new_string','old_string','raw_input','raw_text','data_base64']);
-const secretValuePattern=/(?:^|[^a-z])(bearer\s+\S+|(?:api[-_]?key|access[-_]?token|refresh[-_]?token|token|password|secret)\s*[=:]\s*\S+|-----BEGIN [^-]*PRIVATE KEY-----)/i;
+const secretValuePattern=/(?:^|[^a-z])(bearer\s+\S+|(?:api[-_]?key|access[-_]?token|refresh[-_]?token|token|password|secret)\s*[=:]\s*\S+|sk-(?:proj-|svcacct-|admin-)?[A-Za-z0-9_-]{12,}|gh[pousr]_[A-Za-z0-9_]{12,}|github_pat_[A-Za-z0-9_]{12,}|-----BEGIN [^-]*PRIVATE KEY-----)/i;
 const sha256=bytes=>createHash('sha256').update(bytes).digest('hex');
 const utf8Bytes=value=>Buffer.from(typeof value==='string'?value:canonicalJson(value),'utf8');
 const byteCount=value=>utf8Bytes(value).length;

package/src/version.mjs

@@ -1,4 +1,4 @@
-export const DEADBYTE_VERSION = '0.15.43';
+export const DEADBYTE_VERSION = '0.15.44';
 export const MCP_PROTOCOL_VERSION = '2026-07-28';
 export const RECEIPT_SCHEMA_V1 = 'deadbyte.receipt.v1';
 export const RECEIPT_SCHEMA_V2 = 'deadbyte.receipt.v2';

package/test/agent-runtime.test.mjs

@@ -69,7 +69,7 @@ async function cleanup(f, client) {
   await rm(f.trust, { recursive: true, force: true }).catch(() => {});
 }
 
-test.skip('R44 historical agent catalog contract is frozen; current R47 runtime supersedes its base surface', async () => {
+test('R44 historical agent catalog contract is frozen; current R47 runtime supersedes its base surface',{skip:'Historical R44 13-tool catalog deliberately superseded by R47; not applicable to current release'}, async () => {
   const f = await fixture();
   let client;
   try {

package/test/autonomous-loop.test.mjs

@@ -123,7 +123,7 @@ test('R24 autonomous goal diagnoses a failing test, replans with native diff, be
       maxIterations:10 });
     assert.equal(submitted.status,'accepted');
     const result = await f.runtime.run({ goalId:submitted.goal_id, maxCycles:16 });
-    assert.equal(result.status,'completed');
+    assert.equal(result.status,'completed',JSON.stringify({status:result.status,reason:result.reason??null,loop_phase:result.loop?.phase??null}));
     assert.equal(await readFile(f.program,'utf8'),"export const value = 'fixed';\n");
     const status = await f.runtime.status({ goalId:submitted.goal_id });
     assert.equal(status.state,'succeeded');
@@ -154,7 +154,7 @@ test('historical autonomous release verification survives source drift and disar
       title:'repair program', goal:'make exported value equal fixed', acceptance:'release evidence must remain verifiable',
       maxIterations:10 });
     const result = await f.runtime.run({ goalId:submitted.goal_id, maxCycles:16 });
-    assert.equal(result.status,'completed');
+    assert.equal(result.status,'completed',JSON.stringify({status:result.status,reason:result.reason??null,loop_phase:result.loop?.phase??null}));
     assert.equal((await f.runtime.verify({ goalId:submitted.goal_id })).ok,true);
 
     await writeFile(f.program,"export const value = 'rolled-back';\n");
@@ -196,7 +196,7 @@ test('autonomous profile execution is capped by the absolute autonomous lease wi
       title:'deadline-bound profiles',goal:'make exported value equal fixed',
       acceptance:'build, test, and benchmark must pass',maxIterations:10});
     const result=await f.runtime.run({goalId:submitted.goal_id,maxCycles:16});
-    assert.equal(result.status,'completed');
+    assert.equal(result.status,'completed',JSON.stringify({status:result.status,reason:result.reason??null,loop_phase:result.loop?.phase??null}));
     assert.ok(calls.length>=3);
     assert.ok(calls.every(call=>typeof call.deadline==='string'&&Number.isFinite(Date.parse(call.deadline))));
     assert.ok(calls.every(call=>call.has_precheck===true));
@@ -239,7 +239,12 @@ test('autonomous profile nonce rotation immediately before spawn fails closed wi
     const started=journal.events.find(event=>event.type==='profile_started'&&event.payload?.profile_id==='build');
     assert.ok(started);
     assert.match(started.payload.authority_instance_nonce,/^[0-9a-f]{64}$/);
-    assert.ok(journal.events.some(event=>event.type==='goal_paused'&&event.payload?.reason==='profile_execution_without_receipt'));
+    const pause=journal.events.find(event=>event.type==='goal_paused'&&event.payload?.reason==='profile_execution_without_receipt');
+    assert.ok(pause);
+    assert.equal(pause.payload.receipt_id,started.payload.receipt_id);
+    assert.equal(pause.payload.request_sha256,started.payload.request_sha256);
+    assert.equal(typeof pause.payload.detail,'string');
+    assert.ok(pause.payload.detail.length>0&&pause.payload.detail.length<=512);
     assert.equal(journal.events.some(event=>event.type==='profile_completed'&&event.payload?.profile_id==='build'),false);
     assert.equal((await f.codingRuntime.verifyReceiptDetailed(started.payload.receipt_id)).ok,false);
   } finally {
@@ -255,7 +260,7 @@ test('provider planner repairs an invalid structured decision inside the same ru
       title:'repair after planner contract error', goal:'make exported value equal fixed',
       acceptance:'build, test, and benchmark must pass', maxIterations:10 });
     const result = await f.runtime.run({ goalId:submitted.goal_id, maxCycles:16 });
-    assert.equal(result.status,'completed');
+    assert.equal(result.status,'completed',JSON.stringify({status:result.status,reason:result.reason??null,loop_phase:result.loop?.phase??null}));
     assert.equal(await readFile(f.program,'utf8'),"export const value = 'fixed';\n");
     assert.equal(f.planner.prompts.length,6);
     assert.match(f.planner.prompts[1],/PREVIOUS_RESPONSE_REJECTED/);
@@ -337,7 +342,7 @@ test('provider supervisor adopts an OPEN circuit after restart and resumes only
       if(status.state==='cancelled') throw new Error('provider circuit supervisor cancelled goal');
       await new Promise(resolve=>setTimeout(resolve,25));
     } while(Date.now()<deadline);
-    assert.equal(status.state,'succeeded');
+    assert.equal(status.state,'succeeded',JSON.stringify({state:status.state,reason:status.reason??null,loop_phase:status.loop?.phase??null}));
     assert.ok(f.planner.prompts.length>3);
     const journal=await f.runtime.events({goalId:submitted.goal_id,fromSeq:1,limit:200});
     assert.equal(journal.events.filter(event=>event.type==='provider_probe_started').length,1);

package/test/autonomous-runtime.test.mjs

@@ -76,7 +76,7 @@ async function fixture() {
   return { root, client, transport };
 }
 
-test.skip('R44 historical hermetic autonomous catalog is frozen at 50; current R47 runtime supersedes it', async () => {
+test('R44 historical hermetic autonomous catalog is frozen at 50; current R47 runtime supersedes it',{skip:'Historical R44 autonomous catalog frozen at 50; current R47+ has a different catalog'}, async () => {
   const f = await fixture();
   try {
     await f.client.connect(f.transport);

package/test/coding-plane.test.mjs

@@ -70,7 +70,7 @@ async function fixture() {
   return { root, client, transport };
 }
 
-test.skip('R44 historical hermetic coding catalog is frozen at 38; current R47 runtime supersedes it', async () => {
+test('R44 historical hermetic coding catalog is frozen at 38; current R47 runtime supersedes it',{skip:'Historical R44 coding catalog frozen at 38; current R47+ supersedes it'}, async () => {
   const f = await fixture();
   try {
     await f.client.connect(f.transport);

package/test/full-max-catalog-r46.test.mjs

@@ -15,7 +15,7 @@ const desktopPolicyPath=path.join(repoRoot,'controller','deadbyte-desktop-policy
 const sha=bytes=>createHash('sha256').update(bytes).digest('hex');
 const absent=async p=>{try{await access(p);return false;}catch(e){if(e?.code==='ENOENT')return true;throw e;}};
 
-test.skip('R46 historical max-runtime full stdio catalog contract is frozen at 84; current R47 runtime intentionally supersedes it',async()=>{
+test('R46 historical max-runtime full stdio catalog contract is frozen at 84; current R47 runtime intentionally supersedes it',{skip:'Historical R46 max-runtime catalog frozen at 84; current R47+ intentionally supersedes it'},async()=>{
   const f=await createR34Fixture({authority:'disarmed'});
   const processPolicyPath=path.join(f.root,'process-policy.json');
   const processGrant=path.join(f.root,'process-grant.json');

package/test/output-schema.test.mjs

@@ -48,7 +48,7 @@ async function fixture() {
   return { trust, client, transport };
 }
 
-test.skip('R44 historical base-plus-agent catalog is frozen at 13; current R47 runtime supersedes it', async () => {
+test('R44 historical base-plus-agent catalog is frozen at 13; current R47 runtime supersedes it',{skip:'Historical R44 base-plus-agent catalog frozen at 13; current R47+ supersedes it'}, async () => {
   const f = await fixture();
   try {
     await f.client.connect(f.transport);

package/test/r51-live-log-polling.test.mjs

@@ -26,3 +26,15 @@ test('R51 live tail parses each audit line once and reuses the decoded event',as
   assert.match(cli,/auditTimelineRecord\(file,line,auditEvent\)/);
   assert.match(cli,/formatLogLine\(file,line,\{auditEvent,/);
 });
+
+test('R67 live log selection is bounded, deduplicated and rejects path traversal/drive prefixes',()=>{
+ const runtimeNames=['bridge.stdout.log','bridge.stdout.log','../private.log','..\\private.log','C:\\token.log','.hidden.log',
+  ...Array.from({length:180},(_,i)=>'remote-'+String(i).padStart(3,'0')+'.log')];
+ const auditNames=['segment-00000001.jsonl','segment-00000002.jsonl','segment-00000002.jsonl','segment-00000003.jsonl'];
+ const selected=selectLiveLogNames({auditNames,runtimeNames});
+ assert.deepEqual(selected.audit,['segment-00000002.jsonl','segment-00000003.jsonl']);
+ assert.ok(selected.runtime.length<=64,'cap runtime readers to a finite budget');
+ assert.equal(new Set(selected.runtime).size,selected.runtime.length);
+ assert.ok(selected.runtime.every(name=>/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}\.log$/.test(name)));
+ assert.ok(selected.runtime.includes('remote-179.log'));
+});

package/test/r53-release-contract.test.mjs

@@ -6,7 +6,7 @@ const root=new URL('../',import.meta.url);
 const read=rel=>readFile(new URL(rel,root),'utf8');
 const json=rel=>read(rel).then(JSON.parse);
 const currentPackage=await json('package.json');
-const r53test=currentPackage.version==='0.15.30'?test:test.skip;
+const r53test=currentPackage.version==='0.15.30'?test:(name,fn)=>test(name,{skip:'Historical R53 release contract requires 0.15.30; current '+currentPackage.version},fn);
 
 r53test('R53 current release identity is coherent across package lock source metadata SBOM and gate',async()=>{
   const [pkg,lock,release,provenance,matrix,sbom,versionSource]=await Promise.all([

package/test/r54-release-contract.test.mjs

@@ -6,7 +6,7 @@ const root=new URL('../',import.meta.url);
 const read=rel=>readFile(new URL(rel,root),'utf8');
 const json=rel=>read(rel).then(JSON.parse);
 const currentPackage=await json('package.json');
-const r54test=currentPackage.version==='0.15.31'?test:test.skip;
+const r54test=currentPackage.version==='0.15.31'?test:(name,fn)=>test(name,{skip:'Historical R54 release contract requires 0.15.31; current '+currentPackage.version},fn);
 
 r54test('R54 release identity is coherent across package lock source metadata SBOM and gate',async()=>{
   const [pkg,lock,release,provenance,matrix,sbom,versionSource]=await Promise.all([

package/test/r55-release-contract.test.mjs

@@ -6,7 +6,7 @@ const root=new URL('../',import.meta.url);
 const read=rel=>readFile(new URL(rel,root),'utf8');
 const json=rel=>read(rel).then(JSON.parse);
 const currentPackage=await json('package.json');
-const r55test=currentPackage.version==='0.15.32'?test:test.skip;
+const r55test=currentPackage.version==='0.15.32'?test:(name,fn)=>test(name,{skip:'Historical R55 release contract requires 0.15.32; current '+currentPackage.version},fn);
 
 r55test('R55 release identity is coherent across package lock source metadata SBOM and gate',async()=>{
   const [pkg,lock,release,provenance,matrix,sbom,versionSource]=await Promise.all([

package/test/r56-release-contract.test.mjs

@@ -6,7 +6,7 @@ const root=new URL('../',import.meta.url);
 const read=rel=>readFile(new URL(rel,root),'utf8');
 const json=rel=>read(rel).then(JSON.parse);
 const currentPackage=await json('package.json');
-const r56test=currentPackage.version==='0.15.33'?test:test.skip;
+const r56test=currentPackage.version==='0.15.33'?test:(name,fn)=>test(name,{skip:'Historical R56 release contract requires 0.15.33; current '+currentPackage.version},fn);
 
 r56test('R56 release identity is coherent across package lock source metadata SBOM and gate',async()=>{
   const [pkg,lock,release,provenance,matrix,sbom,versionSource]=await Promise.all([

package/test/r57-release-contract.test.mjs

@@ -6,7 +6,7 @@ const root=new URL('../',import.meta.url);
 const read=rel=>readFile(new URL(rel,root),'utf8');
 const json=rel=>read(rel).then(JSON.parse);
 const currentPackage=await json('package.json');
-const r57test=currentPackage.version==='0.15.34'?test:test.skip;
+const r57test=currentPackage.version==='0.15.34'?test:(name,fn)=>test(name,{skip:'Historical R57 release contract requires 0.15.34; current '+currentPackage.version},fn);
 
 r57test('R57 release identity is coherent across package lock source metadata SBOM and gate',async()=>{
   const [pkg,lock,release,provenance,matrix,sbom,versionSource]=await Promise.all([

package/test/r58-bundled-bridge.test.mjs

@@ -11,7 +11,7 @@ test('R58 deployment activates the bridge bundled inside the candidate release,
   assert.match(deploy,/const bridgeScript=path\.join\(bridgeRoot,'src','bridge\.mjs'\)/);
 });
 
-test('R58 bundled bridge package is present and version-bound to 0.15.35',{skip:currentPackage.version!=='0.15.35'},async()=>{
+test('R58 bundled bridge package is present and version-bound to 0.15.35',{skip:currentPackage.version!=='0.15.35' ? 'Historical R58 bridge artifact requires 0.15.35; current '+currentPackage.version : false},async()=>{
   const [pkg,bridgePkg,bridge]=await Promise.all([
     readFile(new URL('../package.json',import.meta.url),'utf8').then(JSON.parse),
     readFile(new URL('../bridge/package.json',import.meta.url),'utf8').then(JSON.parse),

package/test/r58-release-contract.test.mjs

@@ -6,7 +6,7 @@ const read=rel=>readFile(new URL('../'+rel,import.meta.url),'utf8');
 const json=rel=>read(rel).then(JSON.parse);
 const currentPackage=await json('package.json');
 
-test('R58 identity is coherent and parent is exact production-accepted 0.15.34',{skip:currentPackage.version!=='0.15.35'},async()=>{
+test('R58 identity is coherent and parent is exact production-accepted 0.15.34',{skip:currentPackage.version!=='0.15.35' ? 'Historical R58 release contract requires 0.15.35; current '+currentPackage.version : false},async()=>{
   const [pkg,lock,release,prov,matrix,sbom,version,bridgePkg]=await Promise.all([
     json('package.json'),json('package-lock.json'),json('RELEASE.json'),json('PROVENANCE.json'),json('TEST-MATRIX.json'),json('SBOM.cdx.json'),read('src/version.mjs'),json('bridge/package.json')
   ]);
@@ -29,7 +29,7 @@ test('R58 identity is coherent and parent is exact production-accepted 0.15.34',
   assert.equal(release.parent.tarball_sha256,'a6f7b21faf34793ca17dfb6d0e9ec03320f1468d011e75d8349098df82fc2639');
 });
 
-test('R58 consolidation evidence preserves fail-closed and non-final claims',{skip:currentPackage.version!=='0.15.35'},async()=>{
+test('R58 consolidation evidence preserves fail-closed and non-final claims',{skip:currentPackage.version!=='0.15.35' ? 'Historical R58 release contract requires 0.15.35; current '+currentPackage.version : false},async()=>{
   const [release,prov,matrix]=await Promise.all([json('RELEASE.json'),json('PROVENANCE.json'),json('TEST-MATRIX.json')]);
   assert.equal(release.consolidation.bridge_bundled_inside_release,true);
   assert.equal(release.consolidation.bridge_recursive_local_dependency_binding,true);

package/test/r58-windows-gate.test.mjs

@@ -5,7 +5,7 @@ import {readFile} from 'node:fs/promises';
 const read=rel=>readFile(new URL('../'+rel,import.meta.url),'utf8');
 const currentPackage=JSON.parse(await read('package.json'));
 
-test('R58 canonical Windows gate is final-candidate bound and leaves historical gates immutable',{skip:currentPackage.version!=='0.15.35'},async()=>{
+test('R58 canonical Windows gate is final-candidate bound and leaves historical gates immutable',{skip:currentPackage.version!=='0.15.35' ? 'Historical R58 Windows gate requires 0.15.35; current '+currentPackage.version : false},async()=>{
   const [pkgText,gate,evidence,r57Gate,r57Evidence]=await Promise.all([
     read('package.json'),read('scripts/gate-windows-r58.ps1'),read('scripts/windows-gate-evidence-r58.mjs'),
     read('scripts/gate-windows-r57.ps1'),read('scripts/windows-gate-evidence-r57.mjs')

package/test/r59-tool-surface-compat.test.mjs

@@ -83,7 +83,7 @@ test('R59 compact baseline changes only at the explicitly authorized R64 read-of
   assert.deepEqual(diff.added,[]);
   assert.deepEqual(diff.removed,[]);
   const packageVersion=JSON.parse(await readFile(path.join(repoRoot,'package.json'),'utf8')).version;
-  if(['0.15.41','0.15.42','0.15.43'].includes(packageVersion)){
+  if(['0.15.41','0.15.42','0.15.43','0.15.44'].includes(packageVersion)){
     assert.deepEqual(diff.schema_changed,['machine_fs']);
     assert.equal(diff.unchanged.length,42);
     const prior=baseline.tools.find(tool=>tool.name==='machine_fs');

package/test/r60-release-contract.test.mjs

@@ -13,7 +13,7 @@ const PARENT=Object.freeze({
   generation_manifest_sha256:'6134f9f26b680e13ed545da4ab5f3020f411ea2569062fb9c154c8a7e036c9dc'
 });
 
-test('R60 identity is coherent and binds the exact production-accepted 0.15.36 predecessor',{skip:currentPackage.version!=='0.15.37'},async()=>{
+test('R60 identity is coherent and binds the exact production-accepted 0.15.36 predecessor',{skip:currentPackage.version!=='0.15.37' ? 'Historical R60 release contract requires 0.15.37; current '+currentPackage.version : false},async()=>{
   const [pkg,lock,release,prov,matrix,sbom,version,bridgePkg,contract]=await Promise.all([
     json('package.json'),json('package-lock.json'),json('RELEASE.json'),json('PROVENANCE.json'),
     json('TEST-MATRIX.json'),json('SBOM.cdx.json'),read('src/version.mjs'),json('bridge/package.json'),
@@ -47,7 +47,7 @@ test('R60 identity is coherent and binds the exact production-accepted 0.15.36 p
   assert.match(contract,/0\.15\.37/);
 });
 
-test('R60 release contract exposes the proven remote truth semantics without widening dependencies',{skip:currentPackage.version!=='0.15.37'},async()=>{
+test('R60 release contract exposes the proven remote truth semantics without widening dependencies',{skip:currentPackage.version!=='0.15.37' ? 'Historical R60 release contract requires 0.15.37; current '+currentPackage.version : false},async()=>{
   const [pkg,release,matrix]=await Promise.all([json('package.json'),json('RELEASE.json'),json('TEST-MATRIX.json')]);
   assert.equal(Object.keys(pkg.dependencies??{}).length,4);
   assert.equal(release.r60_remote_hardening.authority_truth_coherence,true);
@@ -70,7 +70,7 @@ test('R60 release contract exposes the proven remote truth semantics without wid
   assert.equal(matrix.observed_pre_release_evidence.r60_package.status,'PASS_VERIFY_ONLY_PRE_FINAL_SEAL');
 });
 
-test('R60 package scripts bind the new focused, full-regression and Windows-gate entrypoints',{skip:currentPackage.version!=='0.15.37'},async()=>{
+test('R60 package scripts bind the new focused, full-regression and Windows-gate entrypoints',{skip:currentPackage.version!=='0.15.37' ? 'Historical R60 release contract requires 0.15.37; current '+currentPackage.version : false},async()=>{
   const [pkg,gate]=await Promise.all([json('package.json'),read('scripts/gate-windows-r60-prepublish.ps1')]);
   assert.match(pkg.scripts['r60:focused:test'],/r60-authority-coherence\.test\.mjs/);
   assert.match(pkg.scripts['r60:focused:test'],/r60-remote-call-recovery\.test\.mjs/);

package/test/r61-release-contract.test.mjs

@@ -11,7 +11,7 @@ const PARENT={
   generation_manifest_sha256:'54842021c75f01bf7ecbd5b10ab8a482ecf107765b45c46f9d39b12bab65eac4'
 };
 
-test('R61 identity binds exact sealed 0.15.37 predecessor without a public surface expansion',{skip:currentPackage.version!=='0.15.38'},async()=>{
+test('R61 identity binds exact sealed 0.15.37 predecessor without a public surface expansion',{skip:currentPackage.version!=='0.15.38' ? 'Historical R61 release contract requires 0.15.38; current '+currentPackage.version : false},async()=>{
   const [pkg,lock,bridge,release,provenance,matrix,sbom,version,gate]=await Promise.all([
     json('package.json'),json('package-lock.json'),json('bridge/package.json'),json('RELEASE.json'),
     json('PROVENANCE.json'),json('TEST-MATRIX.json'),json('SBOM.cdx.json'),read('src/version.mjs'),

package/test/r62-release-contract.test.mjs

@@ -12,7 +12,7 @@ const PARENT={
  generation_manifest_sha256:'9d320a8af1ba8e9e6a23552f35263da2670c00af1355464820552d849d9033c6'
 };
 
-test('R62 identity binds exact sealed 0.15.38 parent and transaction reconciliation scope',{skip:currentPackage.version!=='0.15.39'},async()=>{
+test('R62 identity binds exact sealed 0.15.38 parent and transaction reconciliation scope',{skip:currentPackage.version!=='0.15.39' ? 'Historical R62 release contract requires 0.15.39; current '+currentPackage.version : false},async()=>{
  const [pkg,lock,bridge,release,provenance,matrix,sbom,version,gate]=await Promise.all([
   json('package.json'),json('package-lock.json'),json('bridge/package.json'),json('RELEASE.json'),
   json('PROVENANCE.json'),json('TEST-MATRIX.json'),json('SBOM.cdx.json'),read('src/version.mjs'),

package/test/r63-release-contract.test.mjs

@@ -12,7 +12,7 @@ const PARENT={
  generation_manifest_sha256:'f47cb96083679e764725df1bde6eda53169a39f55772c173ab22f89a1dfaa7ab'
 };
 
-test('R63 identity binds exact active 0.15.39 parent and one-shot runtime coherence repair',{skip:currentPackage.version!=='0.15.40'},async()=>{
+test('R63 identity binds exact active 0.15.39 parent and one-shot runtime coherence repair',{skip:currentPackage.version!=='0.15.40' ? 'Historical R63 release contract requires 0.15.40; current '+currentPackage.version : false},async()=>{
  const pkg=await json('package.json');
  assert.equal(pkg.version,'0.15.40');
  assert.match(pkg.scripts['r63:focused:test'],/r63-one-shot-coherence\.test\.mjs/);

package/test/r64-release-contract.test.mjs

@@ -12,7 +12,7 @@ const runtime={
   generation_manifest_sha256:'f47cb96083679e764725df1bde6eda53169a39f55772c173ab22f89a1dfaa7ab'
 };
 
-test('R64 release identity distinguishes unsealed source predecessor from active runtime predecessor',{skip:currentPackage.version!=='0.15.41'},async()=>{
+test('R64 release identity distinguishes unsealed source predecessor from active runtime predecessor',{skip:currentPackage.version!=='0.15.41' ? 'Historical R64 release contract requires 0.15.41; current '+currentPackage.version : false},async()=>{
   const [pkg,lock,bridge,release,provenance,matrix,sbom,scope,gaps,version,gate]=await Promise.all([
     json('package.json'),json('package-lock.json'),json('bridge/package.json'),json('RELEASE.json'),
     json('PROVENANCE.json'),json('TEST-MATRIX.json'),json('SBOM.cdx.json'),json('docs/R64-SCOPE.json'),

package/test/r65-epoch-native-activation-integration.test.mjs

@@ -16,7 +16,7 @@ const dummy={coding:'2'.repeat(64),autonomous:'3'.repeat(64),desktop:'4'.repeat(
 
 async function optional(file){try{return await readFile(file);}catch(error){if(error?.code==='ENOENT')return null;throw error;}}
 
-test('epoch-native orchestrator uses transaction continuity engine instead of generic authority commands',async()=>{
+test('epoch-native orchestrator handles BOM-encoded process grant with transaction continuity engine',async()=>{
   const root=await mkdtemp(path.join(os.tmpdir(),'deadbyte-r65-epoch-activation-'));
   try{
     const state=path.join(root,'state'),runtime=path.join(state,'runtime'),trust=path.join(state,'trust'),policies=path.join(root,'policies');
@@ -33,7 +33,7 @@ test('epoch-native orchestrator uses transaction continuity engine instead of ge
     await writeFile(beforePath,policyBytes);await writeFile(afterPath,policyBytes);
     const oldGrant={schema:'deadbyte.process-grant.v1',policy_sha256:sha(policyBytes),instance_nonce:'8'.repeat(64),
       profile_ids:['safe'],root_ids:['core'],granted_at_utc:'2026-10-07T00:00:00Z'};
-    const oldBytes=Buffer.from(JSON.stringify(oldGrant));await writeFile(grantFile,oldBytes);
+    const oldBytes=Buffer.concat([Buffer.from([0xef,0xbb,0xbf]),Buffer.from(JSON.stringify(oldGrant))]);await writeFile(grantFile,oldBytes);
     const store=createAuthorityEpochStore({runtimeDir:runtime,policyBytes});
     await store.append({plane:'process',action:'grant',grantBytes:oldBytes,grantInstanceNonce:oldGrant.instance_nonce});
     let switched=false;
@@ -41,7 +41,7 @@ test('epoch-native orchestrator uses transaction continuity engine instead of ge
       const bytes=await optional(grantFile),head=await store.readHead({plane:'process'});
       let armed=false;
       if(bytes){
-        const grant=JSON.parse(bytes);
+        const grant=JSON.parse(new TextDecoder('utf-8',{fatal:true}).decode(bytes));
         armed=(await store.verifyGrant({plane:'process',grantBytes:bytes,grantInstanceNonce:grant.instance_nonce,policyBytes})).trusted;
       }
       return {state:'ONLINE',local_ready:true,...ids,supervisor:{running:true},authority:{
@@ -104,7 +104,7 @@ test('epoch-native explicit user revoke after transaction revoke wins over orche
       const bytes=await optional(grantFile),head=await store.readHead({plane:'process'});
       let armed=false;
       if(bytes){
-        const grant=JSON.parse(bytes);
+        const grant=JSON.parse(new TextDecoder('utf-8',{fatal:true}).decode(bytes));
         armed=(await store.verifyGrant({plane:'process',grantBytes:bytes,grantInstanceNonce:grant.instance_nonce,policyBytes})).trusted;
       }
       return {state:'ONLINE',local_ready:true,...ids,supervisor:{running:true},authority:{