deadbyte-mcp 0.15.51 → 0.15.52

package/MANIFEST.SHA256

@@ -70,6 +70,11 @@ ad17e5eb6a04e6e01005620d2d15dfcdcf9ebaf196cf5a8689a0c4729e29b944  docs/HARNESS2-
 2f09ff118c20390f676a352d4adf77f799920a8499b7ab52ab723d2293225bf1  docs/R128-RELEASE-CANDIDATE.md
 a26a6f424451c43dd3b6202b68a88e625445c4d0e3ab5438feac4db08af67086  docs/R130-SDK-SECURITY-PATCH.md
 d5b1f94eef899e359406c115d39387d9c3377419a32b8882fb035b56557255e7  docs/R132-MANIFEST-PORTABILITY.md
+573ba4a0932b15fba75cb8cf39f56efe184197a628711d8a069b282444e8faf3  docs/R135-AUTONOMOUS-SCOPE.md
+d78c84ccc06ac54b14fba35d73773b6a89b7809248216d6599a6ef7512099bdc  docs/R136-SCOPED-OBSERVER.md
+6a0bd5309c6ef925d1f83190752b7bb2d4f1381d7091a2e20cb387365c9adb01  docs/R137-DESKTOP-COMMANDER-FOUNDATION.md
+ba759a99164f4b557ec487ee1d4948909c06bb84075238e601a0ede5d88eff4c  docs/R138-COMMANDER-WORKFLOW.md
+ac33c3f8f5423067f20b8746aaaec2c9d8df20f0d986759de29e340db6f045ba  docs/R139-COMMANDER-ERGONOMICS.md
 68b7e636d8e3091d4f571d7a0c79f81738f7bf1b89cd497a8681e0dd1f362f58  docs/R221-STRICT-OUTPUT-CONTRACT.md
 d9b68959fa7382e2a6c3dae703ac62767bba72ba21680d304048723f1671b5a0  docs/R36-CAPABILITY-EVIDENCE.md
 3c715faadfb568f094c262906c6bb8bc0caa77c6af6053c8b84aed74df3a43ef  docs/R44-ARCHITECTURE.md
@@ -139,6 +144,7 @@ d260f1370324c745240179d5cd28beb0f01ca4356df92f81efa7f42bbaccf7f8  docs/superpowe
 bf6698004f2589390d29c862c6246885b48270a50f6513863a00e7e8f55161f3  docs/superpowers/specs/2026-09-18-r36-zero-loss-autonomy-design.md
 59236e450e00da021d70057476ab21aa0e349d54b24fd9080e1e081cb64bd555  docs/superpowers/specs/2026-09-19-r40-desktop-computer-use-design.md
 2dd20995d4c6071117305d2591bc72c9676492a29fc6d5e3277023d8ae3ca58e  docs/superpowers/specs/2026-09-20-r41-deterministic-memory-design.md
+ee12b508d4c91b4ae5b58a1aec73060f7b1aff70270ff4eab66f9046cbc2c4e2  docs/THIRD-PARTY-DESKTOP-COMMANDER-MIT.md
 bb7b3b40baac8ac870efbb44783ad0b0f7843ee397e201d260bc772845c60f56  docs/TRUST.md
 a6052efc1180927ce89b331488e66254a33065380705fa0a6e6af862f89a943b  docs/V070-HARDENING.md
 50afd28cbd3834785e4c45c4f10425ec38ed8874ffde763de7a6ab8d52545ce6  docs/V071-HOST-PLANE.md
@@ -1388,8 +1394,8 @@ db605a698f917c4006462596e6526fe6a9c6eff9b8409e8472fe545d4b70027c  node_modules/z
 f67a25ded944912bd4621b68df17c7c70a52aae117278c076c0aabbc32a3abba  node_modules/zod/v4/mini/schemas.d.ts
 51b3a7869df2d3a1bd98acb9d5b6a61bbccc7653d7a3d8fca7f0e0db7e84e284  node_modules/zod/v4/mini/schemas.js
 3e3125b5a537a24c3632c1c5c09640ce7bcb3935901b127ad8ae3c37a27f133f  node_modules/zod/v4/package.json
-877853e6c76ba68e2b09bab10904d53f6d6220df782ebd1301f7c081759bfb59  package.json
-bbab7304942baa149fe9e56fc12a3e957598e9743e9998b9581e13ae18ca8700  PROVENANCE.json
+9b3041123739c4ccb8e8860d47c0ad5e9957bae60a6d878a780309e23e46114e  package.json
+54fb261169cb263aebebf05f5387e1bc0aefd9013c43c53ef2f4506135ace3a5  PROVENANCE.json
 27ca0f3c9ee3a1b6374a9c8dd98008decdd0c7659c7a569c70ad7b9734c74655  R34-BASELINE.json
 0b7ec5ee347ddfa6cca59740fc7a8fe3fc5d51406265bb12189e82fa106319d2  R41-PARENT.json
 bd2a789b0aab5663f0d208af2ca8e4ec98179bc8c7b57e70a962d4e06a3dcfc4  R42-PARENT.json
@@ -1398,9 +1404,9 @@ f932ef78b7a72b1bb0d7aedb5fe42fbb9951c2492eb528b72442f46ddff81a6c  R44-DONORS.jso
 731b4c559fc0d25dea701e4474f02400b27e8e3f4cac9f230d5214497d4490a9  R44-PARENT.json
 d33ec5d167dd44800ba4e68372b08db43deb8d01df2ef71dd435ff004ac66c8b  R45-PARENT.json
 3dc607603fea511e2f428e9546a875ab7e38b6a0bbd5e803e4510de082f30804  R49-PARENT.json
-4326a873c73298456054feca586a92ce4052420dfe406be51fbd765a55480b00  README.txt
-0af4d3b581d4ef3d809ad0d570d5b7049c3c7d5a9868a32a5665630c869f225a  RELEASE.json
-0cb6e1bdb64428b7067901753992fcd9e3c1c3414d1a616f96e724fc99bf7158  SBOM.cdx.json
+9b938cd5f3ff30c1e1e554abb3dc873a433f33ec1a9dc8e1470a17547af87be2  README.txt
+1f4bbc7a8abd5849e7162447f2935d4e245e7bf94521141a5bd3112119ac10b9  RELEASE.json
+8041efe7842db00a9a22f303e557040e495f7d0b7dc756cdaca0c7660c71fa18  SBOM.cdx.json
 7c86062c4f69db3179a129d65945ccfab1b1c1c5bcc29b91383eac097d50f2aa  scripts/activate-skill-creator-1.1.1.mjs
 bd138fe5a64088e8e1a7a5bf6104c5b17317bdc8cf3ad8191ea00ed82ace7d9b  scripts/agent-eval-r42.mjs
 8d90256a6863f3bbbff02e95cb12389fc6f9e8dbcb77bf1c20c902de371425e8  scripts/archive-source-zips.mjs
@@ -1693,6 +1699,7 @@ a13c1d11927606166f2807324513573ac1c37c72c257356cebd20e3aa02df53e  src/autonomous
 1489f7edce0649347c0f6b7e7869c7e8fd840a5a23845c07a6e44c6461923dc8  src/autonomous-policy.mjs
 f9bf3b46e4b32ab7dd7864c646809e13fea64f72accf114929588dac7dc82014  src/autonomous-progress.mjs
 4cf7786bc311b33f694475006bb091fe164ade938bf63e7cf8896e72ccf47064  src/autonomous-runtime.mjs
+879175fdd7fd51d918cc43a543b8786a48bf889a165dc5320db0ea3aefdf9a2e  src/autonomous-scope-r135.mjs
 5c2fc073cc989121f775735600e96809ec2a51bf4167c877a263f54f2aa9a680  src/autonomous-supervisor-host.mjs
 b3fbc640f5edca562ffc1f5b1d455762525baa644996ff34e92e825f98bfc82a  src/autonomous-supervisor.mjs
 61de686111e5b5d24ceb1e2adc8da175d69a4f22af08691c4edaea1c763cf859  src/autonomous-timeout-recovery.mjs
@@ -1710,10 +1717,12 @@ c4e07aa6818cd989c43ce8d027dc7d467e05c8e2fe96b5548eea291285d3bbb1  src/coding-mcp
 ade0e369cf6c9307605bfd90240c4d14cd8f50ff034bce02be822cbdd75d7c06  src/coding-task-runtime.mjs
 c34c2a96ffe7a5e41380fbf88aa716107ab9042810faf5254446b958f259fa3f  src/commander-compat-contracts.mjs
 8572050daacfde66223bac3a6470644caf60334d17162f8d353ed33ab9ca6ce8  src/commander-compat-runtime.mjs
+31dac78481a1b3115ba166abf211d8f23d274a84433a966f1123b50ec1b25b60  src/commander-config-recovery-r137.mjs
 7fda3faba6f4f26c7eed75d676abe691bbc3018bd3804ca07900b31acec68596  src/commander-core-bridge.mjs
 7db0f463037e5cc1a58e6d494a0724eb75ca85b75c609589d6008029e79ed284  src/commander-extended-bridge-r47.mjs
-cfa28d980d2aa1287c5dc9eb12a4085380276524ecf62095cb0d058b57ddfd0f  src/commander-extended-runtime.mjs
-f79517be99b7e5ff812725dbab53c8f914f4406c022639e0f1ca0d0648d6c36d  src/commander-external-process-r48.mjs
+d2b8eb576e77a866f03917b2cc521ac83c45a7e90fbf0b029f2c248779f1e2a6  src/commander-extended-runtime.mjs
+c2902f09ca85c53010b11ef087114068fdedcde370d69728ca2205b8ec6322a0  src/commander-external-process-r48.mjs
+6c0a1e5b2a83168e6c0188140a122b9dee478b9b0d0b6d7651fe651e1e46e78a  src/commander-large-text-r139.mjs
 ff373782d804e4184f648c11ebaffc01168b259e36912c2e70f726a86eb02b8b  src/commander-observability.mjs
 7379825118da8fae16d63fe7c4d89b0ddb03e7649f3754adae58a4480f8b317f  src/commander-office-reader-r48.mjs
 23cda18e86daa4163003fb5a80e0069bc19541d454f32a9a38b1d901ee39f26b  src/commander-pdf-r48.mjs
@@ -1721,7 +1730,7 @@ ad575fc45fdf02fd0f680a9f5a1d0a0fc8509922fd1832b2a80f72b2fa8c319c  src/commander-
 1d292ce65a6c01dc272c7da2d13264f80552f79d2ee9c485ee0584a9cee7fb9a  src/commander-remote-relay-r47.mjs
 fe74274c8de996839c4cc95782f8caf746679b414fbf0390880b1c2ff732d5a8  src/commander-ui-resources.mjs
 b95c6c118ba81cea6671b8959723729094b4cb5736b42b470e1e1e400b55f4f8  src/commander-url-reader-r48.mjs
-a32226e302669553d39565176fc7ef9a0ace24834d2c19d3558ba33f13016ba0  src/commander-wire-adapter-r47.mjs
+dd9c535a949ab748e75c531ce2ee614b7aa0489a1fdabd33012642b545192fd3  src/commander-wire-adapter-r47.mjs
 c652a46c996dc57fdbe44ef394ad1c073ff04e858a6c1d8540af56676bdc4757  src/compact-gateway-mcp-tools.mjs
 4218d1d1478d9e9a044d9b61c5ae205cd2ca0651a314900fad03992d0b12d286  src/compact-gateway-output-contracts.mjs
 40ac70ece531de7709d3c51686b36b48e0ae60283d1fb18d0adc037bfe6f9063  src/contained-cli.mjs
@@ -1855,6 +1864,8 @@ b72728205fce12f24ccbd0afa697644ca9902b8973a32121309c68910688fbd3  src/remote-mcp
 ce2223bf6075e96cc02505c1439acce18bb1f204c5e86cf9152bb7194daf3cd2  src/runtime-identity.mjs
 72690bb2c30ed396ae9295f05625a54ba824083c281620e88d7593cabe2478c3  src/runtime-plane-registry.mjs
 49399387be6a3b636037cc6ae035bf3139ebc99e883166b9f13c5703d89686a4  src/runtime-update.mjs
+e2435069ac8e2da5f5b590864ef42d827557f419aa6446c683bc131bb1a27207  src/scoped-observer-launcher-r136.mjs
+545e7c4b6d41c52deddf45dad793db22f4ffa89c3b07dad3439f91cc557eff0f  src/scoped-observer-worker-r136.mjs
 c61335adb38bfc415fe1cdabfe2c0a87e61579dfd1e52cce91c44d6993479457  src/search-cursor.mjs
 fc5407ef8338ebeeede16225b3249166dc4d45e903d873eb46c15c3df07dc9ad  src/semantic-backend-registry.mjs
 686e9b55b9f4352b941579f186a9b9d348d86af53d052cbd5da953e7d15470ff  src/semantic-code.mjs
@@ -1875,13 +1886,13 @@ c99c2402fb0df4f68634fa906eb198c551c55dad9f0921a7b8ed6e33d503884e  src/tunnel-std
 aa765e9a28c69ff58a5b5a0d29b49ea181af4db9076633b102dbca25861e708e  src/tunnel-stdio-compat.mjs
 642cb67d1854850e336ee73fbd71b329056bdcbdab35cea19c1a995a155ff5d9  src/verifier-cli.mjs
 8f818a4852ce3be3a380cd4736c3073a7a3e0e45cd7c7ca90588a6b843d3d022  src/verifier.mjs
-63033456af542aaf8be68be21356b8d7133a6c1632e13125e889937fdd0c8185  src/version.mjs
+c38135acfcf4db68a28d83bd09b1e33762e89f444703f79134fd80ee119c54cb  src/version.mjs
 acf5f5a57779bc0529f9db3d821f0ef1b53d22063aa237041348c1ca444ea677  src/windows-powershell-environment.mjs
 7e09c57a97289360aabfaf3d531208e54872efbfb3182f3c18203d2cb88c46b5  src/worker-registry.mjs
 76361d5ae9a710273cf64a7525082197b692236bf23689875e5fd1ef4aa96d2b  src/worker-scheduler.mjs
 4da1b32f5198bb089bc68b7eb6de21ea296678b5020018a73742bf0df57d62fa  src/workload-substrate.mjs
 1bd637e7634ca0259791c5108fcf324554f70b1db49e5eac3505287c04bbc3be  STABILIZATION-PROGRESS.md
-06370121f97af775c4bd5d8e068979eb34c6fa7e760087516d52db5dbda27017  TEST-MATRIX.json
+7c51693f64b3aceb56f03c8b3ffc86b41b9b5e2c160080ec2b88a452925c5705  TEST-MATRIX.json
 e4f1fb97545f23772ddff28ad3f9954a4714f9854062fca62e0e12c1cb2ec4ae  test/agent-backend-r44.test.mjs
 2a78c818058b25efdc143a3a97c832da231ccd6ff9d90c7796d681a0251b85c4  test/agent-crash-child.mjs
 d9461ab7c118ee75d37a2d6f5e637d7e43505af6a9ad8c7ddafffc8ace185a5b  test/agent-crash-worker.mjs
@@ -1953,7 +1964,7 @@ b91717e90c678a07dab88f51285717f4e986b02fa65555f00e01e164d476a3a0  test/commander
 5af8bf878968a438cfeb7792779d2b525bedf62359251eafd48f772e273ef166  test/commander-schema-differential-r48.test.mjs
 0cb2ab0b6d74ef668f275063ab061b46b81466c21f4266cee6d1464e40cc9156  test/commander-torture-r47.test.mjs
 f94f19407f25c2227a27066d3e9f475ce0c2af9184cb304a88a7205e49ed1c61  test/commander-url-reader-r48.test.mjs
-d8e884e241c705b12797f911fb967a4a33b1ec6f3e15b433735882b3de4a34e5  test/commander-wire-contract-r47.test.mjs
+66513ec9d53da819378879be781ded629da32d08e7ea4f823a7ad89ae854215f  test/commander-wire-contract-r47.test.mjs
 7301428dcf5d74d0b5b8e6dd5385e7a274946649b04c744cb6edf856e91e82c8  test/compact-catalog-r36.test.mjs
 e85951a38a9a756aac8985ba858d3611eb336bf391b1a8b06226f69f0559ddff  test/compact-gateway-r36.test.mjs
 3b5133e8cc7a8c2c5e66a7c34ac5e4f9bf2cf14b5897a7e871fb41ba82b629e5  test/compact-max-catalog-r40.test.mjs
@@ -2135,9 +2146,25 @@ ce163ee9f288e30a213636e2267b8630016ef8a170f12286e8cdd44219bdab32  test/r124-live
 17475b51e416ae678f959f8975fab8497eb7c57d13e36cac8656c0e1f7424c0c  test/r126-restore-policy-envelope.test.mjs
 1721d4bd3bb58c10ad9d86b69ad1d993ec5a1e6315c95b28fa50ab67d4ca302a  test/r127-restore-append-policy-boundary.test.mjs
 b3d3dda398c94d18e2e156bde65d1338000233407b435134ba0c16175d96620b  test/r129-sdk-security-baseline.test.mjs
-5d79ca23953114d0f0c5205d68be98bbd526869bc3e1ce1faafe1f137b4456db  test/r130-release-security-contract.test.mjs
+effe0e9a6b3db487a3ec748289b35a00e9f3c405195255850f7a06762e783bf7  test/r130-release-security-contract.test.mjs
 bb7963baf412ec0f5aca183f6dd98eda9026fe763017f9af595581b521ae6cb7  test/r131-installed-manifest-boundary.test.mjs
-d3c44c4043523c49f27e73111b003533647d65e428a0deaf3db3043faa746c12  test/r132-release-identity.test.mjs
+d79a7128e1a7a1a75196c51e62e39ec26d93c73ada8ab82b91ad9910ea74c7e6  test/r132-release-identity.test.mjs
+acd236a4d8ba035007bde4166a521b8d4e6044f58c52c0bae9cb42fa75338533  test/r135-autonomous-scope.test.mjs
+3fcf657aae1f8466abc5ab82bb5a619966ea9b8a33d4a95a5a5246df5bf3afa1  test/r136-scoped-command-rights.test.mjs
+e0c466f25b35eb894166df792b71b23924610d32363756c75ff437dfdaa12a4c  test/r136-scoped-observer.test.mjs
+c0e41ba5bc745abc4fabc6df08f50ffcac6957c25fd9b37fcfc309a33d313d6b  test/r137-commander-config-recovery.test.mjs
+6251b5bdbcdac3d5ba19de8c006423e86e97c71de68bf353d8dd43c9de957d88  test/r137-commander-three-version-contract.test.mjs
+c83b0d278bdae697624a878415ca7218c5e11103d3cdc992f679c7107ac256c4  test/r138-commander-process-pagination.test.mjs
+9ff247902e375716eabe53c336fa8c9582b843c19bf3c39b137f78be7153b96d  test/r138-commander-session-list.test.mjs
+0569b74444e2cf0591a7719852be392373d91dfb77155ac7f1a7c21178675730  test/r138-commander-stream-resume.test.mjs
+697df46c2b3aa61ec3b60547e457b2b01182bc14c9513f2a524efbd3192e2316  test/r139-large-text-edit.test.mjs
+989601afbc23f24495056ca0b6d4809bec191d8116dd7ae1665241b166c446e6  test/r139-large-text-read.test.mjs
+c14e6c17defb3eac062ae7429742cb9ac9a3d9aa2bd806754149a37b7dbb0180  test/r139-process-start-preview.test.mjs
+89827436ed5256abef5bfa1c141ceb26cc17164ccb854444fada9cbec1aeca2c  test/r139-search-partial.test.mjs
+414843f022f60e69d37787441e297c844bf0d99aa0e80ba0e83ce80289ec0ac0  test/r140-large-text-integrity.test.mjs
+b0af7054d5ef9e67af86b5959ff73f6e988992318dc39dd3ee64d4fa7859e8b0  test/r141-commander-tail-utf8.test.mjs
+a21d029a174c7ae069997b284d01ba6708db388dbdf4c6fa24c3a672f0133b8d  test/r141-real-windows-disk.test.mjs
+7c6dddd97f1508d46ffffc2e06b25c077ebbc8f54d44d739619a028436317bec  test/r142-native-machinefs-authority.test.mjs
 3c5c3724bce89aa1fa59fe97cc346c40a5674bb5cd6dc3e2f31b86f2d62e75e4  test/r33-closeout-regression.test.mjs
 5e3700ee610442dfd7b7ae5e380263f231438be0e32790597142c41362a53c9a  test/r33-finalization.test.mjs
 7e419d3c1caf79bfc7407207f50e5645298f9b19d91a7d6f595af185b92cd55e  test/r36-finalization.test.mjs
@@ -2203,7 +2230,7 @@ ca8e23abc89f3eadeceb4b6fdad2cb4db5a7933029ece8e8beae2c6a158876b7  test/r58-owner
 8fc5ed1d3088facf45f9578d9ff8514c3a633f7f342d15eec316e129e7a916c0  test/r58-stale-owner.test.mjs
 84be7ee7d167eb06c9f9fc178930daaa81e53a91de40bad6d7df2060bd3dd165  test/r58-windows-gate.test.mjs
 76db2a4009d76b86e1da57b91a96b0d6bfeb4063bec3301ede736e2fd5832f39  test/r59-release-contract.test.mjs
-346c81f824a15e77933ca93ac0890cb2f68f6e5e1e14b9c7f6893f6067c63187  test/r59-tool-surface-compat.test.mjs
+a2b6779e6cbc8e23859b42383440b9e08a631e9b0bfa0a92d000ec236769e423  test/r59-tool-surface-compat.test.mjs
 3befd5d4dc4d8ca9e1f6cbeb9c430671e676c5696d6ee5931c2cbe3244c558a4  test/r60-authority-coherence.test.mjs
 60577e231c7d164f57a3960c574d3e369ca140d9dbc477b2444fa62dbf224e51  test/r60-authority-enforcement.test.mjs
 a1fa0b1e529da05f3659a33be6d36dab02f93808638cf0f458d057e9c6d1e35b  test/r60-bridge-dispatch.test.mjs
@@ -2301,7 +2328,7 @@ a4f4e675703d6208d2ca51151273f97e547927d6f44d8b95c88309b3ee002008  test/r72-stagi
 c26ac29f6e47e21cc3d20331391295c4f57c20bc1a9094f27079ee60c11ab75b  test/r72-staging-workspace-isolation.test.mjs
 20cc37b85fd61870fc51b01aeba7e7bb4e31fd6529dc38ad42e52b1549c412f8  test/r73-package-boundary.test.mjs
 ff8d6c7998053a20a0d6a855d4a0013f0f19e649b91731d970e647242bb66e86  test/r74-kernel-lock.test.mjs
-420b5edb688f5f365816b7dc34ab50bacac15bee3fc957ece9fdc4bd06c311b2  test/r74-prepublish-contract.test.mjs
+6e28226fecd5a13701dbc5f2812ae4e21c9ac65b4eea14a158d040a1db3b213f  test/r74-prepublish-contract.test.mjs
 d283a882b9d7bb38b8d6a0db97882fcaf9b6dfa717aca79dd0351012cc00ba23  test/r75-activation-authority-proof.test.mjs
 38b66147b550c1d1e068ebaa9f8de93a070c08a8a99e0ddee7970b0374c4bfc5  test/r75-authority-evidence.test.mjs
 993186133dc7620bcd3057efda9a0ba1435c938656e4b24a32ace4ce57ea9735  test/r76-pinned-marker-cas.test.mjs

package/PROVENANCE.json

@@ -1,9 +1,9 @@
 {
   "schema": "deadbyte.provenance.v1",
-  "version": "0.15.51",
-  "source_model": "public npm 0.15.50 -> R131 isolated installed-manifest patch -> isolated R132 0.15.51 candidate",
+  "version": "0.15.52",
+  "source_model": "published 0.15.51 -> R137-R142 isolated Commander/MachineFS successors -> R143 0.15.52 release candidate",
   "signing": "ed25519",
-  "parent_tarball_sha256": "133b9f4adedee14a3e4f2fd1c9433f7ebf102742a73398161b238fd68eb42d84",
+  "parent_tarball_sha256": "69586dc07dc7a3025ec44f08e6b0eab60c1f9e75287da77c850b49e320b201ff",
   "parent_activation_status": "PRODUCTION_ACTIVE",
   "parent_rollback_receipt_sha256": null,
   "runtime_predecessor": {
@@ -11,8 +11,8 @@
     "manifest_sha256": "34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc",
     "generation_manifest_sha256": "ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4"
   },
-  "source_predecessor_manifest_file_sha256": "98dd37c71adae980856adc17b9c59d58d167a01d46c61106055956d0f306fede",
-  "reproducibility": "R132 isolated successor at D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.51-r132-release-candidate; R131 parent manifest 3e5edb9987aa7c9004dda3164a278da70a60495c0c128e2602426075a5222c10; no production mutation",
+  "source_predecessor_manifest_file_sha256": "ef27d35d0d3102b356fcb17478abefa82fae2375df27f913ce3b0ff0e5815a7e",
+  "reproducibility": "R143 isolated 0.15.52 candidate from R142 native-authority development, predecessor 0.15.51 published tarball SHA-256 69586dc07dc7a3025ec44f08e6b0eab60c1f9e75287da77c850b49e320b201ff; production 0.15.45 unchanged",
   "public_surface_evidence": {
     "status": "PASS",
     "baseline_release": "v0.15.35-1b5715b276facbc0",
@@ -76,12 +76,12 @@
     "stdio_aggregate_p95_delta_pct": 1.984392678457768,
     "limitations_preserved": true
   },
-  "builder": "deadbyte-r71-coding-readonly-native-diff-preview",
+  "builder": "deadbyte-r143-commander-machinefs-release-candidate",
   "parent_release_id": "v0.15.45-34aa8d1241cfb8bf",
   "parent_manifest_sha256": "34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc",
   "parent_generation_manifest_sha256": "ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4",
-  "source_predecessor_version": "0.15.50",
-  "source_predecessor_tarball_sha256": "133b9f4adedee14a3e4f2fd1c9433f7ebf102742a73398161b238fd68eb42d84",
+  "source_predecessor_version": "0.15.51",
+  "source_predecessor_tarball_sha256": "69586dc07dc7a3025ec44f08e6b0eab60c1f9e75287da77c850b49e320b201ff",
   "operator_override": {
     "four_hour_soak": "WAIVED_BY_OPERATOR",
     "clean_machine": "WAIVED_BY_OPERATOR",
@@ -125,7 +125,7 @@
     "package_registry_activation_rollback_restore": "PENDING",
     "stable_final_claim": false
   },
-  "parent_registry_tarball_sha1": "c3cb04f032178c967d2cb7d8688fd6c08bda741d",
+  "parent_registry_tarball_sha1": "d4d26584d5dca6b6a628404e3b7d7994cdb4a9bf",
   "r62": {
     "transaction_inventory_default_max_entries": 1024,
     "parent_state_records_observed": 341,
@@ -264,5 +264,15 @@
     "source_lineage_receipt_sha256": "94b68e9e6bdc2099fed0628ca296958bf2ed296f446586cefc3f8b823d6439ef",
     "exact_r132_full": "NOT_RUN",
     "production_deployment": "NOT_RUN"
+  },
+  "r143": {
+    "source_predecessor": "deadbyte-mcp@0.15.51",
+    "source_tarball_sha256": "69586dc07dc7a3025ec44f08e6b0eab60c1f9e75287da77c850b49e320b201ff",
+    "r142_development_receipt_sha256": "7f174869905d057fbfc57485397b3a9abc67c134d4c970f5083970845c5a5449",
+    "r142_regression": "1770_PASS_49_SKIP_0_FAIL_PREDECESSOR_ONLY",
+    "r143_exact_release_regression": "PENDING",
+    "r143_registry_publication": "NOT_RUN",
+    "production_predecessor_version": "0.15.45",
+    "production_deployment": "NOT_RUN"
   }
 }

package/README.txt

@@ -1,4 +1,4 @@
-DEADBYTE MCP V0.15.51 / R132 MANIFEST PORTABILITY CANDIDATE
+DEADBYTE MCP V0.15.52 / R143 ISOLATED RELEASE CANDIDATE
 =========================
 
 AUTHENTICATED MACHINE TRUTH + DURABLE AGENT + CODING + AUTONOMOUS PRODUCTION ENGINE
@@ -16,12 +16,12 @@ check `--version` before issuing a stateful command. The compatibility CMD
 fails with an explanation when npm is detected rather than forwarding the
 wrong command to the controller.
 
-  npx -y deadbyte-mcp@0.15.51 mcp
-  npx -y deadbyte-mcp@0.15.51 remote
-  npx -y deadbyte-mcp@0.15.51 remote status
-  npx -y deadbyte-mcp@0.15.51 remote restart
-  npx -y deadbyte-mcp@0.15.51 audit status
-  npx -y deadbyte-mcp@0.15.51 audit verify
+  npx -y deadbyte-mcp@0.15.52 mcp
+  npx -y deadbyte-mcp@0.15.52 remote
+  npx -y deadbyte-mcp@0.15.52 remote status
+  npx -y deadbyte-mcp@0.15.52 remote restart
+  npx -y deadbyte-mcp@0.15.52 audit status
+  npx -y deadbyte-mcp@0.15.52 audit verify
 
 MAJOR MCP CLIENT STDIO CONFIGS
 -------------------------------
@@ -32,7 +32,7 @@ CLAUDE DESKTOP
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.51", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.52", "mcp"]
       }
     }
   }
@@ -44,7 +44,7 @@ Save as .cursor/mcp.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.51", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.52", "mcp"]
       }
     }
   }
@@ -57,7 +57,7 @@ Save as .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.51", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.52", "mcp"]
       }
     }
   }
@@ -67,7 +67,7 @@ Add to the Codex MCP configuration:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.51", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.52", "mcp"]
 
 The `mcp` command is the quiet stdio server entry for local MCP clients; stdout is reserved for MCP.
 The remote CLI invokes the stable active-release PowerShell launcher directly with shell=false.
@@ -356,7 +356,7 @@ CONTROLLER
 ----------
 Primary operator entry point:
 
-  npx -y deadbyte-mcp@0.15.51 remote
+  npx -y deadbyte-mcp@0.15.52 remote
 
 The legacy CMD entry remains compatibility-only for R33 rollback safety.
 
@@ -417,7 +417,7 @@ MCP CLIENT CONFIGURATION
 ------------------------
 The local stdio entry point is quiet and suitable for MCP hosts:
 
-  npx -y deadbyte-mcp@0.15.51 mcp
+  npx -y deadbyte-mcp@0.15.52 mcp
 
 CLAUDE DESKTOP
 Use the standard local-server entry in claude_desktop_config.json:
@@ -426,7 +426,7 @@ Use the standard local-server entry in claude_desktop_config.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.51", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.52", "mcp"]
       }
     }
   }
@@ -439,7 +439,7 @@ Create .cursor/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.51", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.52", "mcp"]
       }
     }
   }
@@ -452,7 +452,7 @@ Create .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.51", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.52", "mcp"]
       }
     }
   }
@@ -462,9 +462,9 @@ Add this to ~/.codex/config.toml:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.51", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.52", "mcp"]
 
-The remote device path remains `npx -y deadbyte-mcp@0.15.51 remote`. Remote public MCP uses the
+The remote device path remains `npx -y deadbyte-mcp@0.15.52 remote`. Remote public MCP uses the
 verified HTTPS named-tunnel URL selected by the active generation; do not commit a private device
 URL or tunnel token into a repository.
 

package/RELEASE.json

@@ -1,9 +1,9 @@
 {
   "schema": "deadbyte.release.v1",
   "name": "deadbyte-mcp",
-  "version": "0.15.51",
-  "train": "R132",
-  "label": "R132 MANIFEST PORTABILITY PATCH / ISOLATED RELEASE CANDIDATE",
+  "version": "0.15.52",
+  "train": "R143",
+  "label": "R143 COMMANDER AND MACHINEFS HARDENING / ISOLATED RELEASE CANDIDATE",
   "protocol_revision": "2026-07-28",
   "parent": {
     "version": "0.15.45",
@@ -19,10 +19,10 @@
     "generation_manifest_sha256": "ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4"
   },
   "source_predecessor": {
-    "version": "0.15.50",
-    "source_path": "C:\\Users\\DEADBYTE\\.deadbyte-mcp\\evidence\\npm-publication\\0.15.50\\deadbyte-mcp-0.15.50.tgz",
+    "version": "0.15.51",
+    "source_path": "C:\\Users\\DEADBYTE\\.deadbyte-mcp\\evidence\\npm-publication\\0.15.51\\deadbyte-mcp-0.15.51.tgz",
     "release_status": "REGISTRY_PUBLISHED",
-    "tarball_sha256": "133b9f4adedee14a3e4f2fd1c9433f7ebf102742a73398161b238fd68eb42d84"
+    "tarball_sha256": "69586dc07dc7a3025ec44f08e6b0eab60c1f9e75287da77c850b49e320b201ff"
   },
   "consolidation": {
     "frontend_status_vocabulary": true,
@@ -375,5 +375,18 @@
     "production_activation": "NOT_RUN",
     "production_rollback_restore": "NOT_RUN",
     "npm_publish": "NOT_RUN"
+  },
+  "r143": {
+    "release_candidate_version": "0.15.52",
+    "source_predecessor_version": "0.15.51",
+    "source_predecessor_tarball_sha256": "69586dc07dc7a3025ec44f08e6b0eab60c1f9e75287da77c850b49e320b201ff",
+    "production_predecessor_version": "0.15.45",
+    "r142_native_machinefs_protected_full": "1770_PASS_0_FAIL_49_SKIP",
+    "r142_evidence_status": "PREDECESSOR_ONLY_NOT_R143_RELEASE_PROOF",
+    "exact_r143_protected_full": "PENDING",
+    "exact_r143_package_verification": "PENDING",
+    "npm_publish": "NOT_RUN",
+    "production_activation": "NOT_RUN",
+    "stable_final_claim": false
   }
 }

package/SBOM.cdx.json

@@ -1,13 +1,13 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:cdx:deadbyte-mcp:r132:0.15.51",
+  "serialNumber": "urn:cdx:deadbyte-mcp:r143:0.15.52",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
       "name": "deadbyte-mcp",
-      "version": "0.15.51"
+      "version": "0.15.52"
     }
   },
   "components": [

package/TEST-MATRIX.json

@@ -1,7 +1,7 @@
 {
   "schema": "deadbyte.test-matrix.v1",
-  "version": "0.15.51",
-  "train": "R132",
+  "version": "0.15.52",
+  "train": "R143",
   "primary_platform": "win32-x64",
   "reference": {
     "package": "@wonderwhy-er/desktop-commander",
@@ -10,6 +10,21 @@
     "schemas_sha256": "f342345e34e48769dabaefe1b932f09d41e2e207b422f7794a15ee50ffa8f140"
   },
   "required": [
+    {
+      "id": "r143-protected-native-full",
+      "command": "node --test --test-concurrency=4 test/*.test.mjs on exact R143 protected installed tree",
+      "expected": "Zero failures, 49 classified skips preserved, installed manifest PASS"
+    },
+    {
+      "id": "r143-package-verify-only",
+      "command": "node scripts/npm-release-r48.mjs --verify-only",
+      "expected": "Exact-version doctor, manifest verification, npm package and source lineage PASS"
+    },
+    {
+      "id": "r143-publication-reconciliation",
+      "command": "Publish only after prepublish gates PASS, then inspect npm registry and npx outside repo",
+      "expected": "Published version 0.15.52 matches preserved package identity; production not activated"
+    },
     {
       "id": "r71-full-regression",
       "command": "npm test",

package/docs/R135-AUTONOMOUS-SCOPE.md

@@ -0,0 +1,21 @@
+# R135 — Autonomous scope isolation foundation
+
+Status: DEVELOPMENT / OFFLINE PROJECTION ONLY. Do not publish, deploy, arm any grant, or change the production pointer based on this candidate.
+
+## Observed 0.15.45 production conflict
+The manual Coding policy SHA-256 `63f2153517c2e1f3febc5e78ef7e9f766fac3483178ae098021746d5be6ba246` includes `local_c` (C:\\) and `local_d` (D:\\) with read/write/exec. The Autonomous policy names only `core`. The R70 controller rejects **any** broad Coding root at Autonomous metadata admission, even when Autonomous selects a project. This is deliberate defense against an Autonomous tool invoking the already-armed broad Coding capability. Removing only the controller assertion would be a security regression.
+
+## Isolated projection implementation
+`src/autonomous-scope-r135.mjs` exports `deriveIsolatedAutonomousScope`, a pure synchronous *policy preview* function. It takes trusted parsed manual Coding/Autonomous policies, one project root ID, and a separate existing project-scoped state root. It returns two **in-memory** JSON policy byte buffers and their SHA-256 digests, without touching manual or production policy files.
+
+The projected Coding policy retains only the nominated real project directory and commands referenced by the selected Autonomous profiles. The projected Autonomous policy is rebound to the SHA-256 of those exact projected Coding bytes. Both leases and evidence roots are redirected to the separate isolated state. The function refuses whole-drive roots, missing / redirected project roots, commands missing from Coding, profiles targeting other roots, overlapping existing manual lease storage, and preexisting child grant files.
+
+The previous R70 admission check is kept unchanged. `assertAutonomousBootstrapRoots` passes for the projected pair and still rejects the original broad manual Coding policy. The owner approval signature gate and all grant issuance/epoch controls are unchanged.
+
+## Security boundary not yet implemented
+An offline policy projection is **not** enforcement. A shared process with access to the broad manual Coding lease could still inherit broad authority. Do not install these policy bytes inside the existing production controller or arm Autonomous against its Coding policy. Before deployment, implement and test an independently hosted project-scoped runtime with its own distinct Coding grant, owner enrollment/signature, trust root, disjoint lifecycle and authority epoch, and proof of privilege noninheritance even if the manual runtime has broad roots. These policy bytes alone do not demonstrate such isolation.
+
+## Evidence and gates
+The R135 source is an isolated copy of R132B, still internally labeled version 0.15.51 and **must not republish**. R135 test files explicitly cover fail-closed scope projection, manual policy preservation, no inherited grants, and compatibility with the existing R70 whole-drive rejection. The independent production preflight R134 remains BLOCKED for live activation; unresolved historical transaction evidence remains immutable. The R135 candidate is not a 0.15.51 release artifact.
+
+Live signed owner approval and actual production activation/rollback are separate decisions. No modifications to the existing 0.15.45 runtime, grants, policies or active-release pointer are part of R135.

package/docs/R136-SCOPED-OBSERVER.md

@@ -0,0 +1,21 @@
+# R136 — Disarmed Scoped Observer Process / Coding Command-Root Closure
+
+Status: **DEV ONLY — NOT A PRIVILEGE SANDBOX, NOT READY FOR LIVE AUTONOMOUS EXECUTION**.
+
+## Predecessor and regression
+Source predecessor is R135 (development candidate), copied separately without changing the published `deadbyte-mcp@0.15.51` package or active production `0.15.45`. R135's projected Coding commands retained broad `root_ids` from parent manual Coding. This created a latent unsafe future integration path even though the R135 projection had only one root and no execution.
+
+R136 changes `deriveIsolatedAutonomousScope` to require that each selected command already allow the selected scoped root and then replace its `root_ids` with that root alone. The original manual Coding policy is byte-preserved. Tests were observed RED and then GREEN for both command closure and missing scope.
+
+## Child process
+`src/scoped-observer-launcher-r136.mjs` creates a separate Node child process running `src/scoped-observer-worker-r136.mjs` with an explicit tiny environment allowlist (Windows directory and temporary paths only). All `NODE_OPTIONS`, `DEADBYTE_*`, and other ambient user secrets are omitted. The worker verifies exact policy SHA-256 against its launch pins, checks that both policy files live under its declared isolated state, both grants are absent, Coding/Autonomous reference a single project root, and every Coding command has only the selected root. It exposes only a read-only `status` IPC response, explicit denials for privileged operations, and `shutdown`. IPC identity keys cannot be user overwritten. Exit/disposal is verified.
+
+This worker does **not** invoke `coding-plane` commands, issue grants, or access manual authority epochs. It does not attach to production or register tools with the live MCP server.
+
+## Security limitations and next gate
+A separate process with sanitized environment is NOT an OS-level security boundary. It still runs under the same Windows account and therefore potentially retains filesystem rights to broad manual Coding resources. The worker has no privileged action handlers, but adding any executor to it would require independent owner-signed grant enrollment, restricted Windows token / explicit filesystem ACL isolation, disjoint trust store and authority epoch, stronger IPC mutual authentication, process lifecycle and crash/recovery tests, and a proof that broad grants cannot be read or reused. Passing R136 does not authorize such execution.
+
+Historical 13 rollback/update records remain unchanged. R70 rejection of broad Coding roots remains unchanged and must continue passing. `0.15.51` is immutable and any deployable code requires a new version and full protected Windows release gate. No production grants, policies, pointer, running processes or settings are changed by this development patch.
+
+## Verification
+Tests: `test/r136-scoped-command-rights.test.mjs`, `test/r136-scoped-observer.test.mjs`, all prior R135 scope tests and R70 security tests. Windows real production policy fixture read only: `D:\Projects\deadbyte-mcp\testing\r136-scoped-runtime-dev\R136-LIVE-POLICY-PROBE.json`. It shows process PID, independent scope hash pins, action denials, environment scrubbing, no leases, original production SHA preservation. This is not an activation/rollback test.

package/docs/R137-DESKTOP-COMMANDER-FOUNDATION.md

@@ -0,0 +1,31 @@
+# R137 — Desktop Commander reference foundation (three pinned versions)
+
+Status: **isolated development, unsealed and unpublished**.
+
+## Purpose
+Use locally preserved Desktop Commander builds as engineering/compatibility baselines while keeping DEADBYTE MCP's compact native authority and runtime model. Do NOT embed or invoke three vendor servers, replace the existing MCP core, add network telemetry, or relax authority/grant checks. This is the small-interface strategy: preserve 26 known useful Commander tools and one reliable config file.
+
+Local reference snapshots:
+- `D:\\Projects\\deadbyte-mcp\\references\\desktop-commander v0.2.52`: package 0.2.52, MIT (package metadata). Tool schema SHA-256 `f342345e34e48769dabaefe1b932f09d41e2e207b422f7794a15ee50ffa8f140`, 27 toolArgSchemas including hidden `track_ui_event`, 26 public.
+- `D:\\Projects\\deadbyte-mcp\\references\\desktop-commander v0.3.0`: package 0.3.0, MIT (package metadata). Tool schema SHA-256 `7d4c62e2099d757d8fba68011cfe25d3088426f56c0b77d5b8fa3edb4ec49c2c`, 26 schemas incl hidden, 25 public; `get_prompts` absent. Has `config-recovery.js`, SHA-256 `f091cc7f0f62413cf9debb461f3777ee2e1d4c194501daa7ad2c4570d5ccc542`.
+- `D:\\Projects\\deadbyte-mcp\\references\\desktop-commander-0.3.1-alpha.2\\static`: package 0.3.1-alpha.2, MIT (actual LICENSE), 27 schemas incl hidden (26 public); schema SHA-256 `6a290497b29f9dc5f43d66008ea54fcf0c302edea5612af519ef52ab3816d29e`. Original tarball SHA-256 `faaf3f34f114589c0630ce4eaa7114ecc628ce2030822dfe67feac0e17fedc4b`. LICENSE SHA-256 `0fac4e4dfbd64a2a616b9ae2e14c4a3a5635d2a5fc9c43177fb834059afa58e3`.
+
+## What was actually implemented
+`src/commander-config-recovery-r137.mjs` implements a narrow recovery inspired by the 0.3.x feature but with stricter authority separation:
+- Recover only two fully parsed and bounded top-level display limits: `fileReadLineLimit` (1..1000) and `fileWriteLineLimit` (1..50).
+- Never salvage `allowedDirectories`, `blockedCommands`, `defaultShell`, `telemetryEnabled`, or any privileged or unknown setting from damaged bytes.
+- Save a distinct byte-exact `commander-config.json.corrupt.<timestamp>.<uuid>` backup before repairing; verify the original SHA on readback; replace with a new temporary file then atomic rename. Never repair oversized files silently.
+- Serialize parallel first reads to avoid duplicated recoveries; retain normal hash-preconditioned `setConfigValue` behavior.
+- Return recovery metadata as structured result of `get_config` only if recovery actually occurred.
+
+`test/r137-commander-three-version-contract.test.mjs` checks the pinned version-specific schemas and DEADBYTE normalization for each existing public name. `track_ui_event` remains deliberately hidden; no vendor telemetry is enabled. The original exhaustive R48 schema differential against 0.2.52 is preserved.
+
+This design is NOT a new filesystem or command authorization mechanism. Native DEADBYTE policy / sessions / hash-pinned mutations continue to govern actions, independent of the recovered compatibility settings.
+
+## License notice and provenance
+Desktop Commander copyright Eduard Ruzga / contributors; MIT License. The 0.3.1-alpha.2 package contains the license text in `static/LICENSE`; the other two locally retained package.json files state MIT but do not include standalone LICENSE files. The full MIT license text/notice for the reference design is included at `docs/THIRD-PARTY-DESKTOP-COMMANDER-MIT.md`. No dist scripts, vendor node_modules or telemetry SDK copied into DEADBYTE. No new runtime dependencies introduced.
+
+## Gates and operational boundary
+R137 source is an isolated copy of R136; its package.json still says `0.15.51`, a **published immutable version that must not be republished**. Full native regression should run from an independently copied protected Windows fixture with User RX ACLs, not mutable D:\\ source, as R89 native lock enforces installation trust.
+
+No production mutation; current active runtime stays 0.15.45, npm published latest stays 0.15.51, and R135/R136 autonomous process experiments are not activated. Further release requires a new version, full protected regression, owner-reviewed policy and independent activation/rollback gates.

package/docs/R138-COMMANDER-WORKFLOW.md

@@ -0,0 +1,21 @@
+# R138 — Commander process, output, session workflow
+
+Status: DEVELOPMENT successor, not published, not deployed, no authority changes.
+
+The native DEADBYTE MCP runtime remains the sole executor; reference Desktop Commander 0.2.52/0.3.0/0.3.1-alpha.2 tool schemas, not vendor servers. This train focuses on making its existing Commander bridge practical without adding Autonomous privilege layers.
+
+## Process list integrity
+`src/commander-external-process-r48.mjs` now validates every observation page, including the SHA-256 snapshot identity, timestamp, max page size and cursor. It detects repeated cursors before re-querying, denies duplicate PIDs within a snapshot, denies changing timestamps or snapshot IDs, and bounds page count. A corrupt observation is rejected before the returned PID can be used for an external kill. The existing identity-bound external termination path is unchanged.
+
+## Output pagination and sessions
+`src/commander-wire-adapter-r47.mjs` now attaches byte-level resume and truncation metadata to the Commander-compatible `read_process_output` structured response. Incremental offset=0 reads return `next_byte_offset` and `more_unread`; historical offset reads return `next_byte_offset:null` because they do not consume the incremental cursor. `earliest_offset` and `truncated` report retention loss explicitly. The public tool input schemas remain exactly as before.
+
+`list_sessions` now displays child PID, profile, root, execution state and known exit outcome on one line; empty inventories are readable. Structured session data is untouched. No PID kill authority, raw command execution permissions or standing grants are expanded.
+
+## Tests and provenance
+TDD initial RED reproduced repeated cursor, duplicate PID, inconsistent snapshot timestamps, invalid cursor/identity, missing resume metadata and unreadable session list. The modified tests subsequently passed alongside the R48 Commander wire/managed/external-process regressions. The reference schema parity test for three pinned Desktop Commander versions remains present from R137.
+
+The predecessor R137 source manifest SHA-256 is `7fd24ceda2f9369293c79f8da2a12616af822fa4c1224833336e7271a662a643`. Active production pointer SHA-256 is `df926f14fca1c14478342dce5ed41aa1c4b67fb12ae733114f03c8c720ea61e9` (runtime `0.15.45`) and must remain unchanged. R138 still uses package version `0.15.51` for development and must not republish it. Any release requires a distinct version and independent full protected Windows gate.
+
+## Limits
+The Commander bridge has existing file editing/reading/search and process operations, not every Desktop Commander UX feature. R138 proves the named improvements, not full remote parity, production activation, all historical 49 skipped tests, or OS privilege isolation.

package/docs/R139-COMMANDER-ERGONOMICS.md

@@ -0,0 +1,17 @@
+# R139 — Practical Commander: large text, partial search, startup preview
+
+Status: DEVELOPMENT ONLY / not a new npm release / not production activation.
+
+Predecessor is R138 (2390 file manifest SHA-256 `8a60c3408dfc18f7593ff6a029a194ee2b503bcc2eed16c2b9ac020d490e863a`). Isolated source `D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r139-commander-ergonomics-dev`. Runtime remains `0.15.45`; published npm latest remains `0.15.51`.
+
+## Four improvements
+- **Large text reading:** `read_file` for text exceeding the former native 4 MiB compatibility-read cap now uses `src/commander-large-text-r139.mjs` to scan at most 64 MiB with 256 KiB native pages (or the stricter policy cap). It verifies an identical native full-file SHA-256 across pages and rejects malformed cursors, file changes, oversized lines, invalid UTF-8, and oversized files. Only requested line ranges are retained in memory; the full-file scan is O(file size) and may require several native reads. Regular small files and document-specific readers remain unchanged.
+- **Large text edit:** plain-text `edit_block` can modify a uniquely matched string in a UTF-8 file up to 16 MiB (or tighter native policy limit) using the *existing* native hash-preconditioned atomic write. Count of replacements must match the caller. Binary/NUL and invalid UTF-8 targets are rejected; a UTF-8 BOM is preserved. Not an unbounded text writer; DOCX/XLSX native authoring paths are unchanged.
+- **Search results sooner:** `get_more_search_results` now returns discovered matches during an unfinished multi-page search, with `isComplete:false` and `hasMoreResults:true`; it does not disguise discovered matches as zero until all pages finish. Search runtime's existing signed cursor, abort policy and limits are unchanged.
+- **Initial output preview:** `start_process` performs one nonwaiting (`waitMs:0`) 16 KiB maximum read after the process has started and returns any *already available* UTF-8 data in `structuredContent.initial_output` and text. It does not advance the independent process output cursor, so `read_process_output` will still show those bytes again; consumers should deduplicate if mixing both outputs. A failed/binary output probe does **not** disguise a successfully started process as a failed start.
+
+## Security / compatibility
+No command policies, grants, project roots, owner authority, token permissions, npm dependencies, or public tool input schemas are broadened. Existing Desktop Commander 0.2.52, 0.3.0 and 0.3.1-alpha.2 public-schema tests stay in the suite. Most large-file failures remain fail-closed rather than attempting partial destructive edits. A changed file is not rewritten, and no unrestricted subprocess or external vendor server is introduced.
+
+## Evidence
+Observed TDD RED -> GREEN for each feature using `test/r139-*.test.mjs` and existing R47/R48 tests. The new tests include large 5 MiB read/edit, SHA change during paging, binary edit refusal, exact replacement, UTF-8 BOM preservation, oversized edit refusal, partial search and immediate process-output preview. This candidate retains package version `0.15.51` and must not republish that immutable version. Production activation requires a separate decision and live/rollback gates.

package/docs/THIRD-PARTY-DESKTOP-COMMANDER-MIT.md

@@ -0,0 +1,27 @@
+# Desktop Commander reference — MIT notice
+
+The reference design and compatibility tests draw on the Desktop Commander MCP project, by Eduard Ruzga and Desktop Commander Contributors. Source: https://github.com/wonderwhy-er/DesktopCommanderMCP. Exact reference snapshots are described in R137-DESKTOP-COMMANDER-FOUNDATION.md.
+
+The following text is the license notice found in the local 0.3.1-alpha.2 distribution. Include it if copying or redistributing covered Desktop Commander software.
+
+MIT License
+
+Copyright (c) 2024-2025 Eduard Ruzga and Desktop Commander Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.51",
+  "version": "0.15.52",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",