deadbyte-mcp 0.15.44 → 0.15.46

package/src/remote-mcp-machine-smoke-client.mjs

@@ -1,84 +1,84 @@
-import { randomBytes } from 'node:crypto';
-import { readFile } from 'node:fs/promises';
-import path from 'node:path';
-import { Client, StreamableHTTPClientTransport } from '@modelcontextprotocol/client';
-import { verifyMachinePingPublic } from './machine-identity.mjs';
-import { parseActivePointer } from './release-slot.mjs';
-import { probeRemoteEnforcement } from './remote-enforcement-probe-r60.mjs';
-
-const endpointText = process.argv[2];
-if (!endpointText) throw new Error('usage: node src/remote-mcp-machine-smoke-client.mjs https://host/mcp/path');
-const endpoint = new URL(endpointText);
-if (endpoint.protocol !== 'https:') throw new Error('machine live gate requires HTTPS');
-const enforcementMode=process.argv[3]??null;
-if(enforcementMode!==null&&!['default','desktop','host','full','revoked'].includes(enforcementMode))throw new Error('remote enforcement probe mode invalid');
-
-const machineTools = ['machine_list', 'machine_ping', 'machine_revoke', 'machine_status'];
-const client = new Client(
-  { name: 'deadbyte-r29-machine-gate', version: '0.8.5' },
-  { versionNegotiation: { mode: { pin: '2026-07-28' } } }
-);
-const transport = new StreamableHTTPClientTransport(endpoint);
-
-function structured(result, label) {
-  if (result.isError) throw new Error(`${label} returned tool error: ${JSON.stringify(result.structuredContent ?? result.content)}`);
-  if (!result.structuredContent || typeof result.structuredContent !== 'object') throw new Error(`${label} returned no structured object`);
-  return result.structuredContent;
-}
-
-try {
-  await client.connect(transport);
-  const listed = await client.listTools();
-  const names = listed.tools.map(tool => tool.name).sort();
-  for (const name of machineTools) if (!names.includes(name)) throw new Error(`machine tool missing: ${name}`);
-  for (const tool of listed.tools.filter(tool => machineTools.includes(tool.name))) {
-    if (tool.outputSchema?.type !== 'object' || tool.outputSchema?.additionalProperties !== false || !tool.outputSchema?.properties) {
-      throw new Error(`machine tool ${tool.name} missing strict output schema`);
-    }
-  }
-
-  const status = structured(await client.callTool({ name: 'machine_status', arguments: {} }), 'machine_status');
-  if (status.status !== 'ok') throw new Error(`machine_status status=${String(status.status)}`);
-  const machines = structured(await client.callTool({ name: 'machine_list', arguments: {} }), 'machine_list');
-  if (machines.status !== 'ok' || !Array.isArray(machines.machines)) throw new Error('machine_list invalid');
-  const self = machines.machines.find(item => item.machine_id === status.machine_id);
-  if (!self) throw new Error('machine_list does not contain current machine');
-  for (const field of ['public_key_spki_base64','identity_generation','online_epoch','release_id','release_manifest_sha256','generation_manifest_sha256']) {
-    if (self[field] !== status[field]) throw new Error(`machine_list/status mismatch: ${field}`);
-  }
-
-  const nonce = randomBytes(32).toString('hex');
-  const ping = structured(await client.callTool({ name: 'machine_ping', arguments: { nonce } }), 'machine_ping');
-  if (ping.status !== 'ok' || ping.nonce !== nonce || ping.machine_id !== status.machine_id) throw new Error('machine_ping identity/nonce mismatch');
-  for (const field of ['identity_generation','online_epoch','release_id','release_manifest_sha256','generation_manifest_sha256']) {
-    if (ping[field] !== status[field]) throw new Error(`machine_ping/status mismatch: ${field}`);
-  }
-  const signatureVerified = await verifyMachinePingPublic({ ping, publicKeySpkiBase64: status.public_key_spki_base64 });
-  if (!signatureVerified) throw new Error('machine ping public Ed25519 verification failed');
-  if(enforcementMode!==null){
-    const stateRoot=process.env.DEADBYTE_STATE_ROOT;
-    if(!stateRoot||!path.isAbsolute(stateRoot))throw new Error('remote enforcement probe state root missing');
-    const pointer=parseActivePointer(await readFile(path.join(stateRoot,'active-release.json'),'utf8'));
-    for(const [actual,expected] of [
-      [status.release_id,pointer.release_id],
-      [status.release_manifest_sha256,pointer.manifest_sha256],
-      [status.generation_manifest_sha256,pointer.generation_manifest_sha256]
-    ])if(actual!==expected)throw new Error('signed machine status does not bind active release/generation');
-    await probeRemoteEnforcement({client,mode:enforcementMode});
-  }
-
-  console.log(JSON.stringify({
-    status: 'passed',
-    protocol_revision: client.getNegotiatedProtocolVersion(),
-    tool_count: names.length,
-    machine_id: status.machine_id,
-    identity_generation: status.identity_generation,
-    release_id: status.release_id,
-    release_manifest_sha256: status.release_manifest_sha256,
-    generation_manifest_sha256: status.generation_manifest_sha256,
-    signature_verified: true,
-    ...(enforcementMode?{enforcement_mode:enforcementMode,enforcement_verified:true}:{})
-  }));
-} finally {
-  await client.close().catch(() => {});
-}
+import { randomBytes } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { Client, StreamableHTTPClientTransport } from '@modelcontextprotocol/client';
+import { verifyMachinePingPublic } from './machine-identity.mjs';
+import { parseActivePointer } from './release-slot.mjs';
+import { probeRemoteEnforcement } from './remote-enforcement-probe-r60.mjs';
+
+const endpointText = process.argv[2];
+if (!endpointText) throw new Error('usage: node src/remote-mcp-machine-smoke-client.mjs https://host/mcp/path');
+const endpoint = new URL(endpointText);
+if (endpoint.protocol !== 'https:') throw new Error('machine live gate requires HTTPS');
+const enforcementMode=process.argv[3]??null;
+if(enforcementMode!==null&&!['default','operator','desktop','host','full','revoked'].includes(enforcementMode))throw new Error('remote enforcement probe mode invalid');
+
+const machineTools = ['machine_list', 'machine_ping', 'machine_revoke', 'machine_status'];
+const client = new Client(
+  { name: 'deadbyte-r29-machine-gate', version: '0.8.5' },
+  { versionNegotiation: { mode: { pin: '2026-07-28' } } }
+);
+const transport = new StreamableHTTPClientTransport(endpoint);
+
+function structured(result, label) {
+  if (result.isError) throw new Error(`${label} returned tool error: ${JSON.stringify(result.structuredContent ?? result.content)}`);
+  if (!result.structuredContent || typeof result.structuredContent !== 'object') throw new Error(`${label} returned no structured object`);
+  return result.structuredContent;
+}
+
+try {
+  await client.connect(transport);
+  const listed = await client.listTools();
+  const names = listed.tools.map(tool => tool.name).sort();
+  for (const name of machineTools) if (!names.includes(name)) throw new Error(`machine tool missing: ${name}`);
+  for (const tool of listed.tools.filter(tool => machineTools.includes(tool.name))) {
+    if (tool.outputSchema?.type !== 'object' || tool.outputSchema?.additionalProperties !== false || !tool.outputSchema?.properties) {
+      throw new Error(`machine tool ${tool.name} missing strict output schema`);
+    }
+  }
+
+  const status = structured(await client.callTool({ name: 'machine_status', arguments: {} }), 'machine_status');
+  if (status.status !== 'ok') throw new Error(`machine_status status=${String(status.status)}`);
+  const machines = structured(await client.callTool({ name: 'machine_list', arguments: {} }), 'machine_list');
+  if (machines.status !== 'ok' || !Array.isArray(machines.machines)) throw new Error('machine_list invalid');
+  const self = machines.machines.find(item => item.machine_id === status.machine_id);
+  if (!self) throw new Error('machine_list does not contain current machine');
+  for (const field of ['public_key_spki_base64','identity_generation','online_epoch','release_id','release_manifest_sha256','generation_manifest_sha256']) {
+    if (self[field] !== status[field]) throw new Error(`machine_list/status mismatch: ${field}`);
+  }
+
+  const nonce = randomBytes(32).toString('hex');
+  const ping = structured(await client.callTool({ name: 'machine_ping', arguments: { nonce } }), 'machine_ping');
+  if (ping.status !== 'ok' || ping.nonce !== nonce || ping.machine_id !== status.machine_id) throw new Error('machine_ping identity/nonce mismatch');
+  for (const field of ['identity_generation','online_epoch','release_id','release_manifest_sha256','generation_manifest_sha256']) {
+    if (ping[field] !== status[field]) throw new Error(`machine_ping/status mismatch: ${field}`);
+  }
+  const signatureVerified = await verifyMachinePingPublic({ ping, publicKeySpkiBase64: status.public_key_spki_base64 });
+  if (!signatureVerified) throw new Error('machine ping public Ed25519 verification failed');
+  if(enforcementMode!==null){
+    const stateRoot=process.env.DEADBYTE_STATE_ROOT;
+    if(!stateRoot||!path.isAbsolute(stateRoot))throw new Error('remote enforcement probe state root missing');
+    const pointer=parseActivePointer(await readFile(path.join(stateRoot,'active-release.json'),'utf8'));
+    for(const [actual,expected] of [
+      [status.release_id,pointer.release_id],
+      [status.release_manifest_sha256,pointer.manifest_sha256],
+      [status.generation_manifest_sha256,pointer.generation_manifest_sha256]
+    ])if(actual!==expected)throw new Error('signed machine status does not bind active release/generation');
+    await probeRemoteEnforcement({client,mode:enforcementMode});
+  }
+
+  console.log(JSON.stringify({
+    status: 'passed',
+    protocol_revision: client.getNegotiatedProtocolVersion(),
+    tool_count: names.length,
+    machine_id: status.machine_id,
+    identity_generation: status.identity_generation,
+    release_id: status.release_id,
+    release_manifest_sha256: status.release_manifest_sha256,
+    generation_manifest_sha256: status.generation_manifest_sha256,
+    signature_verified: true,
+    ...(enforcementMode?{enforcement_mode:enforcementMode,enforcement_verified:true}:{})
+  }));
+} finally {
+  await client.close().catch(() => {});
+}

package/src/remote-result-journal.mjs

@@ -5,7 +5,7 @@ import { sanitizeAuditArgs } from './tool-audit.mjs';
 export const REMOTE_RESULT_JOURNAL_SCHEMA='deadbyte.remote-result-journal.v1';
 const SESSION=/^[0-9a-f]{24}$/;
 const HASH=/^[0-9a-f]{64}$/;
-const STATUS=new Set(['ok','error']);
+const STATUS=new Set(['ok','error','pending']);
 const SIDE_EFFECT_STATES=new Set(['unknown']);
 const EVENT_TYPES=new Set(['tool.call','tool.result']);