deadbyte-mcp 0.15.45 → 0.15.46

package/bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-chatgpt-bridge",
-  "version": "0.15.45",
+  "version": "0.15.46",
   "private": true,
   "type": "module",
   "engines": {

package/controller/deadbyte-controller.ps1

@@ -1346,15 +1346,29 @@ function Arm-Autonomous($Cfg) {
     Write-Host 'AUTONOMOUS PLANE ENABLED UNTIL EXPLICIT REVOKE'
 }
 
+function Get-AutonomousRevocationLeaseFile($Cfg) {
+    if ([string]::IsNullOrWhiteSpace([string]$Cfg.AutonomousPolicyFile)) { return $null }
+    # Revocation may not depend on approval/root checks used only for issuing grants.
+    # The source remains the bound policy snapshot, never a caller-supplied path.
+    $snapshot = Read-ControllerPolicySnapshot ([string]$Cfg.AutonomousPolicyFile) 'autonomous'
+    $policy = $snapshot.Policy
+    if ($policy.schema -ne 'deadbyte.autonomous-policy.v1' -or $policy.enabled -ne $true) { Fail 'autonomous policy schema/enabled mismatch' }
+    if ([string]::IsNullOrWhiteSpace([string]$policy.lease_file)) { Fail 'autonomous policy lease_file missing' }
+    $leaseFile = [System.IO.Path]::GetFullPath([string]$policy.lease_file)
+    $runtimeReal = [System.IO.Path]::GetFullPath($RuntimeDir).TrimEnd('\') + '\'
+    if (-not $leaseFile.StartsWith($runtimeReal, [System.StringComparison]::OrdinalIgnoreCase)) { Fail 'autonomous policy lease_file must live under controller runtime directory' }
+    return $leaseFile
+}
+
 function Disarm-Autonomous($Cfg, [switch]$Quiet) {
     if ([string]::IsNullOrWhiteSpace([string]$Cfg.AutonomousPolicyFile)) { return }
-    $meta = Get-AutonomousPolicyMetadata $Cfg
+    $leaseFile = Get-AutonomousRevocationLeaseFile $Cfg
     $epochError = $null
-    if (Test-Path -LiteralPath $meta.LeaseFile -PathType Leaf) {
-        try { Invoke-AuthorityEpochCommand $Cfg 'autonomous' 'user-revoke' $meta.LeaseFile | Out-Null } catch { $epochError = $_.Exception }
-        Remove-Item -LiteralPath $meta.LeaseFile -Force -ErrorAction SilentlyContinue
+    if (Test-Path -LiteralPath $leaseFile -PathType Leaf) {
+        try { Invoke-AuthorityEpochCommand $Cfg 'autonomous' 'user-revoke' $leaseFile | Out-Null } catch { $epochError = $_.Exception }
+        Remove-Item -LiteralPath $leaseFile -Force -ErrorAction SilentlyContinue
     }
-    if (Test-Path -LiteralPath $meta.LeaseFile) { throw 'Autonomous authority revocation failed: grant remains present' }
+    if (Test-Path -LiteralPath $leaseFile) { throw 'Autonomous authority revocation failed: grant remains present' }
     if ($null -ne $epochError) { throw $epochError }
     if (-not $Quiet) { Write-Host 'AUTONOMOUS PLANE DISARMED' }
 }
@@ -1642,7 +1656,7 @@ function Invoke-MachineSmoke($Cfg) {
     Wait-PublicDnsReady $Cfg $url
     $probeArgs = @($url)
     if (-not [string]::IsNullOrWhiteSpace([string]$env:DEADBYTE_REMOTE_PROBE_MODE)) {
-        if ([string]$env:DEADBYTE_REMOTE_PROBE_MODE -notin @('default','desktop','host','full','revoked')) { Fail 'invalid remote enforcement probe mode' }
+        if ([string]$env:DEADBYTE_REMOTE_PROBE_MODE -notin @('default','operator','desktop','host','full','revoked')) { Fail 'invalid remote enforcement probe mode' }
         $probeArgs += [string]$env:DEADBYTE_REMOTE_PROBE_MODE
     }
     Invoke-CoreGate $Cfg 'remote-mcp-machine-smoke-client.mjs' $probeArgs

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.45-r71\\controller\\runtime\\process-grant.json",
-  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.45-r71\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.46-r72\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.46-r72\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.45-r71\\bin\\deadbyte-process-host.exe",
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.46-r72\\bin\\deadbyte-process-host.exe",
     "sha256": "daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4"
   },
   "roots": {
     "core": {
-      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.45-r71",
+      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.46-r72",
       "deny_paths": [
         "node_modules",
         "controller/runtime",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.45",
+  "version": "0.15.46",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
@@ -42,7 +42,7 @@
     "contained:run": "node src/contained-cli.mjs workspaces/demo input.txt",
     "contained:smoke": "node src/contained-smoke.mjs",
     "mcp:contained:smoke": "node src/mcp-contained-smoke-client.mjs",
-    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r71.ps1",
+    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r72.ps1",
     "authority:smoke": "node src/authority-smoke.mjs",
     "mcp:remote:smoke": "node src/remote-mcp-smoke-client.mjs",
     "mcp:host:smoke": "node src/mcp-host-smoke-client.mjs",

package/scripts/gate-windows-r72.ps1

@@ -0,0 +1,76 @@
+#requires -Version 5.1
+[CmdletBinding()]
+param([ValidateSet('preflight','focused','full','manifest','doctor','all')][string]$Stage='preflight')
+Set-StrictMode -Version Latest
+$ErrorActionPreference='Stop'
+$repo=Split-Path -Parent $PSScriptRoot
+$state=Join-Path $env:USERPROFILE '.deadbyte-mcp'
+$parentId='v0.15.45-34aa8d1241cfb8bf'
+$parentSha='34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc'
+$parentGen='ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4'
+function Sha([string]$file){
+    $sha=[System.Security.Cryptography.SHA256]::Create()
+    try {
+        $stream=[System.IO.File]::OpenRead($file)
+        try {return ([BitConverter]::ToString($sha.ComputeHash($stream))).Replace('-','').ToLowerInvariant()}
+        finally {$stream.Dispose()}
+    } finally {$sha.Dispose()}
+}
+function Run-Node([string]$label,[string[]]$nodeArgs) {
+    Write-Output "R72_STAGE_START=$label"
+    & node @nodeArgs
+    if($LASTEXITCODE -ne 0){throw "R72_${label}_FAILED exit=$LASTEXITCODE"}
+    Write-Output "R72_STAGE_PASS=$label"
+}
+Push-Location $repo
+try {
+    $pkg=Get-Content -LiteralPath 'package.json' -Raw | ConvertFrom-Json
+    $release=Get-Content -LiteralPath 'RELEASE.json' -Raw | ConvertFrom-Json
+    if($pkg.version -ne '0.15.46' -or $release.version -ne '0.15.46' -or $release.train -ne 'R72'){
+        throw 'R72_CANDIDATE_VERSION_DRIFT'
+    }
+    if($release.parent.release_id -ne $parentId -or $release.parent.manifest_sha256 -ne $parentSha -or
+       $release.parent.generation_manifest_sha256 -ne $parentGen){throw 'R72_PARENT_IDENTITY_DRIFT'}
+    $parentRoot=Join-Path $state "releases\$parentId"
+    if(-not (Test-Path -LiteralPath $parentRoot -PathType Container)){throw 'R72_PARENT_SLOT_MISSING'}
+    if((Sha (Join-Path $parentRoot 'MANIFEST.SHA256')) -ne $parentSha){throw 'R72_PARENT_MANIFEST_MISMATCH'}
+    $active=Get-Content -LiteralPath (Join-Path $state 'active-release.json') -Raw | ConvertFrom-Json
+    if($active.version -ne '0.15.45' -or $active.release_id -ne $parentId -or
+       $active.manifest_sha256 -ne $parentSha -or $active.generation_manifest_sha256 -ne $parentGen){
+        throw 'R72_PRODUCTION_PREDECESSOR_DRIFT'
+    }
+    Write-Output 'R72_PREDECESSOR_PREFLIGHT=PASS'
+    if($Stage -eq 'preflight'){return}
+    if($Stage -in @('focused','all')){
+        Run-Node -label 'focused' -nodeArgs @('--test','--test-concurrency=1',
+            'test/r72-remote-safe-contract.test.mjs','test/r72-publication-fence.test.mjs',
+            'test/r60-authority-coherence.test.mjs','test/r58-cleanup-retention.test.mjs',
+            'test/remote-session-cli.test.mjs','test/r70-controller-autonomous-root.test.mjs',
+            'test/r70-controller-owner-issue-boundary.test.mjs','test/r71-release-identity.test.mjs',
+            'test/r71-isolated-slot-rollback-restore.test.mjs','test/r59-tool-surface-compat.test.mjs')
+        if($Stage -eq 'focused'){return}
+    }
+    if($Stage -in @('full','all')){
+        & powershell -NoLogo -NoProfile -ExecutionPolicy Bypass -File (Join-Path $repo 'scripts\verify-r70-full-regression.ps1')
+        if($LASTEXITCODE -ne 0){throw "R72_FULL_REGRESSION_FAILED exit=$LASTEXITCODE"}
+        Write-Output 'R72_FULL_REGRESSION_PASS'
+        if($Stage -eq 'full'){return}
+    }
+    if($Stage -in @('manifest','all')){
+        Run-Node -label 'manifest' -nodeArgs @('scripts/release-manifest.mjs','verify')
+        if($Stage -eq 'manifest'){return}
+    }
+    if($Stage -in @('doctor','all')){
+        $previous=$env:DEADBYTE_STATE_ROOT
+        $isolated=Join-Path $env:TEMP ('deadbyte-r72-doctor-'+[guid]::NewGuid().ToString('N'))
+        try{
+            New-Item -ItemType Directory -Path $isolated -Force | Out-Null
+            $env:DEADBYTE_STATE_ROOT=$isolated
+            Run-Node -label 'isolated_doctor' -nodeArgs @('src/deadbyte-cli.mjs','doctor')
+        }finally{
+            $env:DEADBYTE_STATE_ROOT=$previous
+            Remove-Item -LiteralPath $isolated -Recurse -Force -ErrorAction SilentlyContinue
+        }
+    }
+    Write-Output 'R72_WINDOWS_CANDIDATE_GATE=PASS_PREPUBLICATION'
+}finally{Pop-Location}

package/scripts/npm-release-r48.mjs

@@ -5,6 +5,7 @@ import { mkdtemp, readFile, rm, unlink, mkdir } from 'node:fs/promises';
 import {preserveNpmTarball,assertVacantPackDestination} from './npm-preserve-artifact-r67.mjs';
 import {assertR67NpmPublishReady} from './npm-release-readiness-r67.mjs';
 import {assertR71NpmPublishReady} from './npm-release-readiness-r71.mjs';
+import {assertR72NpmPublishReady} from './npm-release-readiness-r72.mjs';
 import { existsSync } from 'node:fs';
 import { resolveStateRoot } from '../src/state-root.mjs';
 import path from 'node:path';
@@ -91,6 +92,7 @@ async function main() {
   }
   if (!isVerifyOnly && version==='0.15.44') assertR67NpmPublishReady(release);
   if (!isVerifyOnly && version==='0.15.45') assertR71NpmPublishReady(release);
+  if (!isVerifyOnly && version==='0.15.46') await assertR72NpmPublishReady(release,{root});
   if (release.parent?.release_id !== provenance.parent_release_id ||
       release.parent?.manifest_sha256 !== provenance.parent_manifest_sha256 ||
       release.parent?.generation_manifest_sha256 !== provenance.parent_generation_manifest_sha256) {

package/scripts/npm-release-readiness-r72.mjs

@@ -0,0 +1,76 @@
+/** R72 publication fence: exact v0.15.45 parent, final manifest and external gate evidence.
+ * This deliberately does NOT generate, sign or upgrade release evidence. */
+import {createHash} from 'node:crypto';
+import {readFile,lstat} from 'node:fs/promises';
+import path from 'node:path';
+
+const HEX64=/^[0-9a-f]{64}$/;
+const expectedParent=Object.freeze({
+  version:'0.15.45',
+  release_id:'v0.15.45-34aa8d1241cfb8bf',
+  manifest_sha256:'34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc',
+  generation_manifest_sha256:'ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4'
+});
+const evidenceGates=['full_regression','windows_lifecycle','package_acceptance','independent_judge'];
+const sha=bytes=>createHash('sha256').update(bytes).digest('hex');
+function reject(reason){throw new Error(`PUBLISH_BLOCKED R72 ${reason}`);}
+function exactParent(subject){return expectedParent.version===subject?.version&&
+  expectedParent.release_id===subject?.release_id&&
+  expectedParent.manifest_sha256===subject?.manifest_sha256&&
+  expectedParent.generation_manifest_sha256===subject?.generation_manifest_sha256;}
+
+export async function assertR72NpmPublishReady(release,{root}={}){
+  if(release?.version!=='0.15.46'||release?.train!=='R72'||
+     release?.name!=='deadbyte-mcp'||!exactParent(release?.parent)||
+     !exactParent(release?.runtime_predecessor))reject('release identity or predecessor mismatch');
+  const status=release.r72_hotfix;
+  for(const [name,value] of Object.entries({
+    status:'CANDIDATE_SEALED',windows_regression:'PASS',package_acceptance:'PASS',
+    manifest:'PASS',remote_lifecycle:'PASS',security_gate:'PASS',independent_judge:'PASS'
+  }))if(status?.[name]!==value)reject(`${name}=${String(status?.[name]??'MISSING')}; require ${value}`);
+  if(!root||!path.isAbsolute(root))reject('candidate root missing');
+  const manifest=await readFile(path.join(root,'MANIFEST.SHA256')).catch(()=>reject('candidate manifest unavailable'));
+  const manifestSha256=sha(manifest);
+  const evidenceRoot=path.join(root,'testing','r72-release-evidence');
+  // Evidence and transcript storage must not be junctions/symlinks to another tree.
+  for(const dir of [evidenceRoot,path.join(evidenceRoot,'outputs')]){
+    const info=await lstat(dir).catch(()=>reject('evidence/output directory missing'));
+    if(!info.isDirectory()||info.isSymbolicLink())reject('evidence/output directory is not a real directory');
+  }
+  let ready;
+  try{ready=JSON.parse(await readFile(path.join(evidenceRoot,'ready.json'),'utf8'));}
+  catch{reject('independent release evidence index missing/invalid');}
+  if(ready?.schema!=='deadbyte.r72-release-evidence-index.v1'||ready?.version!=='0.15.46'||
+     ready?.manifest_sha256!==manifestSha256||!exactParent(ready?.parent))reject('evidence index subject mismatch');
+  for(const gate of evidenceGates){
+    const hash=ready?.gate_sha256?.[gate];
+    if(!HEX64.test(String(hash??'')))reject(`${gate} receipt identity missing`);
+    let bytes,receipt;
+    try{bytes=await readFile(path.join(evidenceRoot,`${gate}.json`));receipt=JSON.parse(bytes.toString('utf8'));}
+    catch{reject(`${gate} receipt missing/invalid`);}
+    if(sha(bytes)!==hash||receipt?.schema!=='deadbyte.r72-gate-result.v1'||
+       receipt?.gate!==gate||receipt?.version!=='0.15.46'||
+       receipt?.manifest_sha256!==manifestSha256||
+       receipt?.status!=='PASS'||receipt?.exit_code!==0)reject(`${gate} receipt tamper or failed gate`);
+    if(!HEX64.test(String(receipt.output_sha256??'')))reject(`${gate} missing bound command output`);
+    // Exact, gate-specific transcript path: a self-declared digest alone is not evidence.
+    const relativeOutput=`outputs/${gate}.log`;
+    if(receipt.output_file!==relativeOutput)reject(`${gate} output path identity mismatch`);
+    const outputPath=path.join(evidenceRoot,'outputs',`${gate}.log`);
+    const outputInfo=await lstat(outputPath).catch(()=>reject(`${gate} output missing/unavailable`));
+    if(!outputInfo.isFile()||outputInfo.isSymbolicLink())reject(`${gate} output must be a regular non-symlink file`);
+    if(outputInfo.size<1||outputInfo.size>64*1024*1024)reject(`${gate} output size invalid`);
+    const output=await readFile(outputPath).catch(()=>reject(`${gate} output unavailable`));
+    if(sha(output)!==receipt.output_sha256)reject(`${gate} output hash mismatch`);
+    if(gate==='full_regression'&&(!Number.isSafeInteger(receipt.pass_count)||receipt.pass_count<1||receipt.fail_count!==0))
+      reject('full regression count contract invalid');
+    if(gate==='windows_lifecycle'&&(
+       receipt.safe_default_arm_count!==0||receipt.operator_owner_consent_enforced!==true||
+       receipt.stale_owner_recovery_verified!==true||receipt.signed_epoch_fail_closed!==true))
+      reject('Windows lifecycle or R70 owner authority verification missing');
+    if(gate==='independent_judge'&&receipt.independent_verification!=='PASS')
+      reject('independent judge verdict unavailable');
+  }
+  return Object.freeze({status:'R72_RELEASE_READY_EVIDENCE_BOUND',version:'0.15.46',
+    manifest_sha256:manifestSha256,evidence_count:evidenceGates.length});
+}