deadbyte-mcp 0.15.51 → 0.15.53

package/MANIFEST.SHA256

@@ -38,7 +38,7 @@ fa0dcc4cde9c03e978c9f9dd24b62afa83f49bdada1f42ead544a9a17edd332f  bridge/src/bri
 fa2073209516279eb6324dc5e51b438c583d33922bf4bb9178c0aec8224abd94  bridge/src/public-tool-definitions.mjs
 fb5f27a0d324f5e500feb612f86069fe57f6de537aad6d3df2a3abff8923b1be  bridge/src/r40-governor.mjs
 2a54dd491431a3041ac7a48fc9af13ae5f92c8c5a6ef6869ebacc15f49e57936  bridge/src/reconnect-delay-r60.mjs
-c02261aa429166517d36cdd18f1ab9a09077d9341f9818a7955ad02cff937851  bridge/src/remote-call-claims-r60.mjs
+b963f3256f407b4216343815d310f9dce06ac61633c3b45071be6712ebb357d2  bridge/src/remote-call-claims-r60.mjs
 7e094bb44f74f1bfe0aeb065d6f8d2e61fb494587c2c898d335da2a12e24cb02  bridge/src/remote-dispatch-r60.mjs
 8653d36e373f7c604b4f5e78b446e6a9c3974bfc39a9e346c3fd5abe1f910b3c  CONTEXT.md
 3ffd977e819e0d68bd62dad2dadd7481b25c508ebd8042bec2b706cea8ce16f9  controller/deadbyte-controller.config.psd1.example
@@ -46,7 +46,7 @@ d212dfb2ed0049ea54a62fca07847143a2485a8ba09a7e20fc1cdd58593b5ce0  controller/dea
 331d168750a18d2b8e351796ddbf8f9619374c707c3cea18b8b166934f8af0d3  controller/deadbyte-desktop-policy.json
 5e8ef223b0dbc52173aaf044a075837eef8964ff0e7e16f83a595e0d17695625  controller/deadbyte-host-policy.json.example
 6f0cc469f51444dd18211fa3346c826abeea4d2ec7a8945f0200dc5c622031ef  controller/DEADBYTE-MCP.cmd
-f2a746213e85d7b0809c59c047c4bdcc993563ac87637d864454ed40c9098d08  controller/deadbyte-process-policy.json
+10f447690fb72b8f7d23678dbb3e1d2b95d071af42f4a01796b5e9a02fca912a  controller/deadbyte-process-policy.json
 d274b099a298c1033fea8f1e8849751693bbc0448778d619400acb82d4f53a3b  controller/deadbyte-semantic-lsp-config.json
 3023d2985f5b6e5cc7c0d08cb8b342b362c93dce7ebd4224635362194be40cf2  controller/README.TXT
 101e613518c73c6aa31c725fe1b5f9a24c995dc9876b7b28e1f3e97ac9f8d362  DEADBYTE-MCP-R27-FINAL/R27-ADMIN-CLOSURE.json
@@ -70,6 +70,11 @@ ad17e5eb6a04e6e01005620d2d15dfcdcf9ebaf196cf5a8689a0c4729e29b944  docs/HARNESS2-
 2f09ff118c20390f676a352d4adf77f799920a8499b7ab52ab723d2293225bf1  docs/R128-RELEASE-CANDIDATE.md
 a26a6f424451c43dd3b6202b68a88e625445c4d0e3ab5438feac4db08af67086  docs/R130-SDK-SECURITY-PATCH.md
 d5b1f94eef899e359406c115d39387d9c3377419a32b8882fb035b56557255e7  docs/R132-MANIFEST-PORTABILITY.md
+573ba4a0932b15fba75cb8cf39f56efe184197a628711d8a069b282444e8faf3  docs/R135-AUTONOMOUS-SCOPE.md
+d78c84ccc06ac54b14fba35d73773b6a89b7809248216d6599a6ef7512099bdc  docs/R136-SCOPED-OBSERVER.md
+6a0bd5309c6ef925d1f83190752b7bb2d4f1381d7091a2e20cb387365c9adb01  docs/R137-DESKTOP-COMMANDER-FOUNDATION.md
+ba759a99164f4b557ec487ee1d4948909c06bb84075238e601a0ede5d88eff4c  docs/R138-COMMANDER-WORKFLOW.md
+ac33c3f8f5423067f20b8746aaaec2c9d8df20f0d986759de29e340db6f045ba  docs/R139-COMMANDER-ERGONOMICS.md
 68b7e636d8e3091d4f571d7a0c79f81738f7bf1b89cd497a8681e0dd1f362f58  docs/R221-STRICT-OUTPUT-CONTRACT.md
 d9b68959fa7382e2a6c3dae703ac62767bba72ba21680d304048723f1671b5a0  docs/R36-CAPABILITY-EVIDENCE.md
 3c715faadfb568f094c262906c6bb8bc0caa77c6af6053c8b84aed74df3a43ef  docs/R44-ARCHITECTURE.md
@@ -139,6 +144,7 @@ d260f1370324c745240179d5cd28beb0f01ca4356df92f81efa7f42bbaccf7f8  docs/superpowe
 bf6698004f2589390d29c862c6246885b48270a50f6513863a00e7e8f55161f3  docs/superpowers/specs/2026-09-18-r36-zero-loss-autonomy-design.md
 59236e450e00da021d70057476ab21aa0e349d54b24fd9080e1e081cb64bd555  docs/superpowers/specs/2026-09-19-r40-desktop-computer-use-design.md
 2dd20995d4c6071117305d2591bc72c9676492a29fc6d5e3277023d8ae3ca58e  docs/superpowers/specs/2026-09-20-r41-deterministic-memory-design.md
+ee12b508d4c91b4ae5b58a1aec73060f7b1aff70270ff4eab66f9046cbc2c4e2  docs/THIRD-PARTY-DESKTOP-COMMANDER-MIT.md
 bb7b3b40baac8ac870efbb44783ad0b0f7843ee397e201d260bc772845c60f56  docs/TRUST.md
 a6052efc1180927ce89b331488e66254a33065380705fa0a6e6af862f89a943b  docs/V070-HARDENING.md
 50afd28cbd3834785e4c45c4f10425ec38ed8874ffde763de7a6ab8d52545ce6  docs/V071-HOST-PLANE.md
@@ -1388,8 +1394,8 @@ db605a698f917c4006462596e6526fe6a9c6eff9b8409e8472fe545d4b70027c  node_modules/z
 f67a25ded944912bd4621b68df17c7c70a52aae117278c076c0aabbc32a3abba  node_modules/zod/v4/mini/schemas.d.ts
 51b3a7869df2d3a1bd98acb9d5b6a61bbccc7653d7a3d8fca7f0e0db7e84e284  node_modules/zod/v4/mini/schemas.js
 3e3125b5a537a24c3632c1c5c09640ce7bcb3935901b127ad8ae3c37a27f133f  node_modules/zod/v4/package.json
-877853e6c76ba68e2b09bab10904d53f6d6220df782ebd1301f7c081759bfb59  package.json
-bbab7304942baa149fe9e56fc12a3e957598e9743e9998b9581e13ae18ca8700  PROVENANCE.json
+dbbbcc1804eb36bedb297cf14487a3b97fe40e9a506f6aeb0052ed3d80c415f3  package.json
+2822011499a153ddd4389dfe0805cb58195d12f0b1d84c30041fd9c0ba15ead1  PROVENANCE.json
 27ca0f3c9ee3a1b6374a9c8dd98008decdd0c7659c7a569c70ad7b9734c74655  R34-BASELINE.json
 0b7ec5ee347ddfa6cca59740fc7a8fe3fc5d51406265bb12189e82fa106319d2  R41-PARENT.json
 bd2a789b0aab5663f0d208af2ca8e4ec98179bc8c7b57e70a962d4e06a3dcfc4  R42-PARENT.json
@@ -1398,9 +1404,9 @@ f932ef78b7a72b1bb0d7aedb5fe42fbb9951c2492eb528b72442f46ddff81a6c  R44-DONORS.jso
 731b4c559fc0d25dea701e4474f02400b27e8e3f4cac9f230d5214497d4490a9  R44-PARENT.json
 d33ec5d167dd44800ba4e68372b08db43deb8d01df2ef71dd435ff004ac66c8b  R45-PARENT.json
 3dc607603fea511e2f428e9546a875ab7e38b6a0bbd5e803e4510de082f30804  R49-PARENT.json
-4326a873c73298456054feca586a92ce4052420dfe406be51fbd765a55480b00  README.txt
-0af4d3b581d4ef3d809ad0d570d5b7049c3c7d5a9868a32a5665630c869f225a  RELEASE.json
-0cb6e1bdb64428b7067901753992fcd9e3c1c3414d1a616f96e724fc99bf7158  SBOM.cdx.json
+6b5b4f90c4fdc6667722d55b7d52d6acacfd655fe9bc85e786ea724fab438661  README.txt
+a8fe4687c17920eaaf0bbe03f88d3d0e3742fbc5c0f0f4e87f984c853b40a92e  RELEASE.json
+6759a82259a0c21323dce97851c237e16bbd68b49a676637a068ef5da53985f9  SBOM.cdx.json
 7c86062c4f69db3179a129d65945ccfab1b1c1c5bcc29b91383eac097d50f2aa  scripts/activate-skill-creator-1.1.1.mjs
 bd138fe5a64088e8e1a7a5bf6104c5b17317bdc8cf3ad8191ea00ed82ace7d9b  scripts/agent-eval-r42.mjs
 8d90256a6863f3bbbff02e95cb12389fc6f9e8dbcb77bf1c20c902de371425e8  scripts/archive-source-zips.mjs
@@ -1693,6 +1699,7 @@ a13c1d11927606166f2807324513573ac1c37c72c257356cebd20e3aa02df53e  src/autonomous
 1489f7edce0649347c0f6b7e7869c7e8fd840a5a23845c07a6e44c6461923dc8  src/autonomous-policy.mjs
 f9bf3b46e4b32ab7dd7864c646809e13fea64f72accf114929588dac7dc82014  src/autonomous-progress.mjs
 4cf7786bc311b33f694475006bb091fe164ade938bf63e7cf8896e72ccf47064  src/autonomous-runtime.mjs
+879175fdd7fd51d918cc43a543b8786a48bf889a165dc5320db0ea3aefdf9a2e  src/autonomous-scope-r135.mjs
 5c2fc073cc989121f775735600e96809ec2a51bf4167c877a263f54f2aa9a680  src/autonomous-supervisor-host.mjs
 b3fbc640f5edca562ffc1f5b1d455762525baa644996ff34e92e825f98bfc82a  src/autonomous-supervisor.mjs
 61de686111e5b5d24ceb1e2adc8da175d69a4f22af08691c4edaea1c763cf859  src/autonomous-timeout-recovery.mjs
@@ -1710,10 +1717,12 @@ c4e07aa6818cd989c43ce8d027dc7d467e05c8e2fe96b5548eea291285d3bbb1  src/coding-mcp
 ade0e369cf6c9307605bfd90240c4d14cd8f50ff034bce02be822cbdd75d7c06  src/coding-task-runtime.mjs
 c34c2a96ffe7a5e41380fbf88aa716107ab9042810faf5254446b958f259fa3f  src/commander-compat-contracts.mjs
 8572050daacfde66223bac3a6470644caf60334d17162f8d353ed33ab9ca6ce8  src/commander-compat-runtime.mjs
+31dac78481a1b3115ba166abf211d8f23d274a84433a966f1123b50ec1b25b60  src/commander-config-recovery-r137.mjs
 7fda3faba6f4f26c7eed75d676abe691bbc3018bd3804ca07900b31acec68596  src/commander-core-bridge.mjs
 7db0f463037e5cc1a58e6d494a0724eb75ca85b75c609589d6008029e79ed284  src/commander-extended-bridge-r47.mjs
-cfa28d980d2aa1287c5dc9eb12a4085380276524ecf62095cb0d058b57ddfd0f  src/commander-extended-runtime.mjs
-f79517be99b7e5ff812725dbab53c8f914f4406c022639e0f1ca0d0648d6c36d  src/commander-external-process-r48.mjs
+d2b8eb576e77a866f03917b2cc521ac83c45a7e90fbf0b029f2c248779f1e2a6  src/commander-extended-runtime.mjs
+c2902f09ca85c53010b11ef087114068fdedcde370d69728ca2205b8ec6322a0  src/commander-external-process-r48.mjs
+6c0a1e5b2a83168e6c0188140a122b9dee478b9b0d0b6d7651fe651e1e46e78a  src/commander-large-text-r139.mjs
 ff373782d804e4184f648c11ebaffc01168b259e36912c2e70f726a86eb02b8b  src/commander-observability.mjs
 7379825118da8fae16d63fe7c4d89b0ddb03e7649f3754adae58a4480f8b317f  src/commander-office-reader-r48.mjs
 23cda18e86daa4163003fb5a80e0069bc19541d454f32a9a38b1d901ee39f26b  src/commander-pdf-r48.mjs
@@ -1721,7 +1730,7 @@ ad575fc45fdf02fd0f680a9f5a1d0a0fc8509922fd1832b2a80f72b2fa8c319c  src/commander-
 1d292ce65a6c01dc272c7da2d13264f80552f79d2ee9c485ee0584a9cee7fb9a  src/commander-remote-relay-r47.mjs
 fe74274c8de996839c4cc95782f8caf746679b414fbf0390880b1c2ff732d5a8  src/commander-ui-resources.mjs
 b95c6c118ba81cea6671b8959723729094b4cb5736b42b470e1e1e400b55f4f8  src/commander-url-reader-r48.mjs
-a32226e302669553d39565176fc7ef9a0ace24834d2c19d3558ba33f13016ba0  src/commander-wire-adapter-r47.mjs
+dd9c535a949ab748e75c531ce2ee614b7aa0489a1fdabd33012642b545192fd3  src/commander-wire-adapter-r47.mjs
 c652a46c996dc57fdbe44ef394ad1c073ff04e858a6c1d8540af56676bdc4757  src/compact-gateway-mcp-tools.mjs
 4218d1d1478d9e9a044d9b61c5ae205cd2ca0651a314900fad03992d0b12d286  src/compact-gateway-output-contracts.mjs
 40ac70ece531de7709d3c51686b36b48e0ae60283d1fb18d0adc037bfe6f9063  src/contained-cli.mjs
@@ -1734,7 +1743,7 @@ dcd4c9784e88e253e91ddad3c24b38cb0b36906ed737f6d7bee7712360f66f7a  src/containmen
 fe1761b98738e1aea1d25ddf3a0ba56ccad95a43d45104a89b8665197c7c9e18  src/containment-result.mjs
 705a89cb12fedb993d55dfed32a5870d33e10db26422c944d1e52223566c096c  src/containment-smoke.mjs
 63a1d4d6a53f9eb7e02197b4e42158b867da8c042c2e61848d8a36cd398b8bd8  src/context-provenance.mjs
-5519f4979ed05f8fe9dbde5d1b8e740065ba556964539fba8bf3256699a0776d  src/deadbyte-cli.mjs
+91b0dacb14cc9ea35b06fc20d1108d3a4729f415871ef927b6a1679b5599d207  src/deadbyte-cli.mjs
 9e9766d64dcc9e2c8d23c2c0a5e9dcb87b7213e8de668f79f593ad48daf15acd  src/deadline-cancellation.mjs
 fe7a8f8611c33552b3da466a9b866ce79a737bfd5b9a78a953269b30cce16274  src/desktop-contract.mjs
 f97352e510c659910c2d4a874d15be028e1291d685c6c1a7be53bdf1a335c2d8  src/desktop-input-r40.mjs
@@ -1855,6 +1864,8 @@ b72728205fce12f24ccbd0afa697644ca9902b8973a32121309c68910688fbd3  src/remote-mcp
 ce2223bf6075e96cc02505c1439acce18bb1f204c5e86cf9152bb7194daf3cd2  src/runtime-identity.mjs
 72690bb2c30ed396ae9295f05625a54ba824083c281620e88d7593cabe2478c3  src/runtime-plane-registry.mjs
 49399387be6a3b636037cc6ae035bf3139ebc99e883166b9f13c5703d89686a4  src/runtime-update.mjs
+e2435069ac8e2da5f5b590864ef42d827557f419aa6446c683bc131bb1a27207  src/scoped-observer-launcher-r136.mjs
+545e7c4b6d41c52deddf45dad793db22f4ffa89c3b07dad3439f91cc557eff0f  src/scoped-observer-worker-r136.mjs
 c61335adb38bfc415fe1cdabfe2c0a87e61579dfd1e52cce91c44d6993479457  src/search-cursor.mjs
 fc5407ef8338ebeeede16225b3249166dc4d45e903d873eb46c15c3df07dc9ad  src/semantic-backend-registry.mjs
 686e9b55b9f4352b941579f186a9b9d348d86af53d052cbd5da953e7d15470ff  src/semantic-code.mjs
@@ -1875,13 +1886,13 @@ c99c2402fb0df4f68634fa906eb198c551c55dad9f0921a7b8ed6e33d503884e  src/tunnel-std
 aa765e9a28c69ff58a5b5a0d29b49ea181af4db9076633b102dbca25861e708e  src/tunnel-stdio-compat.mjs
 642cb67d1854850e336ee73fbd71b329056bdcbdab35cea19c1a995a155ff5d9  src/verifier-cli.mjs
 8f818a4852ce3be3a380cd4736c3073a7a3e0e45cd7c7ca90588a6b843d3d022  src/verifier.mjs
-63033456af542aaf8be68be21356b8d7133a6c1632e13125e889937fdd0c8185  src/version.mjs
+45a61c47e1e6b1d8fd0787206ba73c6210e0a7e85f7b2149c2c3f58f6c0da806  src/version.mjs
 acf5f5a57779bc0529f9db3d821f0ef1b53d22063aa237041348c1ca444ea677  src/windows-powershell-environment.mjs
 7e09c57a97289360aabfaf3d531208e54872efbfb3182f3c18203d2cb88c46b5  src/worker-registry.mjs
 76361d5ae9a710273cf64a7525082197b692236bf23689875e5fd1ef4aa96d2b  src/worker-scheduler.mjs
 4da1b32f5198bb089bc68b7eb6de21ea296678b5020018a73742bf0df57d62fa  src/workload-substrate.mjs
 1bd637e7634ca0259791c5108fcf324554f70b1db49e5eac3505287c04bbc3be  STABILIZATION-PROGRESS.md
-06370121f97af775c4bd5d8e068979eb34c6fa7e760087516d52db5dbda27017  TEST-MATRIX.json
+1bc41f5442530b17745205035afd7be1fe98e590e5e8413a47473bb0ce521c91  TEST-MATRIX.json
 e4f1fb97545f23772ddff28ad3f9954a4714f9854062fca62e0e12c1cb2ec4ae  test/agent-backend-r44.test.mjs
 2a78c818058b25efdc143a3a97c832da231ccd6ff9d90c7796d681a0251b85c4  test/agent-crash-child.mjs
 d9461ab7c118ee75d37a2d6f5e637d7e43505af6a9ad8c7ddafffc8ace185a5b  test/agent-crash-worker.mjs
@@ -1953,7 +1964,7 @@ b91717e90c678a07dab88f51285717f4e986b02fa65555f00e01e164d476a3a0  test/commander
 5af8bf878968a438cfeb7792779d2b525bedf62359251eafd48f772e273ef166  test/commander-schema-differential-r48.test.mjs
 0cb2ab0b6d74ef668f275063ab061b46b81466c21f4266cee6d1464e40cc9156  test/commander-torture-r47.test.mjs
 f94f19407f25c2227a27066d3e9f475ce0c2af9184cb304a88a7205e49ed1c61  test/commander-url-reader-r48.test.mjs
-d8e884e241c705b12797f911fb967a4a33b1ec6f3e15b433735882b3de4a34e5  test/commander-wire-contract-r47.test.mjs
+66513ec9d53da819378879be781ded629da32d08e7ea4f823a7ad89ae854215f  test/commander-wire-contract-r47.test.mjs
 7301428dcf5d74d0b5b8e6dd5385e7a274946649b04c744cb6edf856e91e82c8  test/compact-catalog-r36.test.mjs
 e85951a38a9a756aac8985ba858d3611eb336bf391b1a8b06226f69f0559ddff  test/compact-gateway-r36.test.mjs
 3b5133e8cc7a8c2c5e66a7c34ac5e4f9bf2cf14b5897a7e871fb41ba82b629e5  test/compact-max-catalog-r40.test.mjs
@@ -2135,9 +2146,27 @@ ce163ee9f288e30a213636e2267b8630016ef8a170f12286e8cdd44219bdab32  test/r124-live
 17475b51e416ae678f959f8975fab8497eb7c57d13e36cac8656c0e1f7424c0c  test/r126-restore-policy-envelope.test.mjs
 1721d4bd3bb58c10ad9d86b69ad1d993ec5a1e6315c95b28fa50ab67d4ca302a  test/r127-restore-append-policy-boundary.test.mjs
 b3d3dda398c94d18e2e156bde65d1338000233407b435134ba0c16175d96620b  test/r129-sdk-security-baseline.test.mjs
-5d79ca23953114d0f0c5205d68be98bbd526869bc3e1ce1faafe1f137b4456db  test/r130-release-security-contract.test.mjs
+2f45d87bf72e4abd5df568694624d69dcbdb605bf456f6f5dd47a49bcb63a546  test/r130-release-security-contract.test.mjs
 bb7963baf412ec0f5aca183f6dd98eda9026fe763017f9af595581b521ae6cb7  test/r131-installed-manifest-boundary.test.mjs
-d3c44c4043523c49f27e73111b003533647d65e428a0deaf3db3043faa746c12  test/r132-release-identity.test.mjs
+626721a443fdec3cd0c4e8abe4f59bc56d2e01fe879e74bed3f5a1626a5b5064  test/r132-release-identity.test.mjs
+acd236a4d8ba035007bde4166a521b8d4e6044f58c52c0bae9cb42fa75338533  test/r135-autonomous-scope.test.mjs
+3fcf657aae1f8466abc5ab82bb5a619966ea9b8a33d4a95a5a5246df5bf3afa1  test/r136-scoped-command-rights.test.mjs
+e0c466f25b35eb894166df792b71b23924610d32363756c75ff437dfdaa12a4c  test/r136-scoped-observer.test.mjs
+c0e41ba5bc745abc4fabc6df08f50ffcac6957c25fd9b37fcfc309a33d313d6b  test/r137-commander-config-recovery.test.mjs
+6251b5bdbcdac3d5ba19de8c006423e86e97c71de68bf353d8dd43c9de957d88  test/r137-commander-three-version-contract.test.mjs
+c83b0d278bdae697624a878415ca7218c5e11103d3cdc992f679c7107ac256c4  test/r138-commander-process-pagination.test.mjs
+9ff247902e375716eabe53c336fa8c9582b843c19bf3c39b137f78be7153b96d  test/r138-commander-session-list.test.mjs
+0569b74444e2cf0591a7719852be392373d91dfb77155ac7f1a7c21178675730  test/r138-commander-stream-resume.test.mjs
+697df46c2b3aa61ec3b60547e457b2b01182bc14c9513f2a524efbd3192e2316  test/r139-large-text-edit.test.mjs
+989601afbc23f24495056ca0b6d4809bec191d8116dd7ae1665241b166c446e6  test/r139-large-text-read.test.mjs
+c14e6c17defb3eac062ae7429742cb9ac9a3d9aa2bd806754149a37b7dbb0180  test/r139-process-start-preview.test.mjs
+89827436ed5256abef5bfa1c141ceb26cc17164ccb854444fada9cbec1aeca2c  test/r139-search-partial.test.mjs
+414843f022f60e69d37787441e297c844bf0d99aa0e80ba0e83ce80289ec0ac0  test/r140-large-text-integrity.test.mjs
+b0af7054d5ef9e67af86b5959ff73f6e988992318dc39dd3ee64d4fa7859e8b0  test/r141-commander-tail-utf8.test.mjs
+a21d029a174c7ae069997b284d01ba6708db388dbdf4c6fa24c3a672f0133b8d  test/r141-real-windows-disk.test.mjs
+7c6dddd97f1508d46ffffc2e06b25c077ebbc8f54d44d739619a028436317bec  test/r142-native-machinefs-authority.test.mjs
+79f87493bff0c5bfa06dbd8d51845f292dc3cabc95f9bcd937e3aa90330731ef  test/r144-claim-terminal-history.test.mjs
+ef0665adaab2a2b2d6ca8611a6335ded96b8e65a9661840acd139d3c86710e62  test/r144-controller-broad-roots-cleanup.test.mjs
 3c5c3724bce89aa1fa59fe97cc346c40a5674bb5cd6dc3e2f31b86f2d62e75e4  test/r33-closeout-regression.test.mjs
 5e3700ee610442dfd7b7ae5e380263f231438be0e32790597142c41362a53c9a  test/r33-finalization.test.mjs
 7e419d3c1caf79bfc7407207f50e5645298f9b19d91a7d6f595af185b92cd55e  test/r36-finalization.test.mjs
@@ -2203,7 +2232,7 @@ ca8e23abc89f3eadeceb4b6fdad2cb4db5a7933029ece8e8beae2c6a158876b7  test/r58-owner
 8fc5ed1d3088facf45f9578d9ff8514c3a633f7f342d15eec316e129e7a916c0  test/r58-stale-owner.test.mjs
 84be7ee7d167eb06c9f9fc178930daaa81e53a91de40bad6d7df2060bd3dd165  test/r58-windows-gate.test.mjs
 76db2a4009d76b86e1da57b91a96b0d6bfeb4063bec3301ede736e2fd5832f39  test/r59-release-contract.test.mjs
-346c81f824a15e77933ca93ac0890cb2f68f6e5e1e14b9c7f6893f6067c63187  test/r59-tool-surface-compat.test.mjs
+16f1e5b1f3b95341969c604e2355b71764cf35fbcd6cdc18447ce5fd40eb9fc8  test/r59-tool-surface-compat.test.mjs
 3befd5d4dc4d8ca9e1f6cbeb9c430671e676c5696d6ee5931c2cbe3244c558a4  test/r60-authority-coherence.test.mjs
 60577e231c7d164f57a3960c574d3e369ca140d9dbc477b2444fa62dbf224e51  test/r60-authority-enforcement.test.mjs
 a1fa0b1e529da05f3659a33be6d36dab02f93808638cf0f458d057e9c6d1e35b  test/r60-bridge-dispatch.test.mjs
@@ -2301,7 +2330,7 @@ a4f4e675703d6208d2ca51151273f97e547927d6f44d8b95c88309b3ee002008  test/r72-stagi
 c26ac29f6e47e21cc3d20331391295c4f57c20bc1a9094f27079ee60c11ab75b  test/r72-staging-workspace-isolation.test.mjs
 20cc37b85fd61870fc51b01aeba7e7bb4e31fd6529dc38ad42e52b1549c412f8  test/r73-package-boundary.test.mjs
 ff8d6c7998053a20a0d6a855d4a0013f0f19e649b91731d970e647242bb66e86  test/r74-kernel-lock.test.mjs
-420b5edb688f5f365816b7dc34ab50bacac15bee3fc957ece9fdc4bd06c311b2  test/r74-prepublish-contract.test.mjs
+6903c010b285a7551d1f77fa2a3b56bad74db45b2cacd747da75fea33ef839ab  test/r74-prepublish-contract.test.mjs
 d283a882b9d7bb38b8d6a0db97882fcaf9b6dfa717aca79dd0351012cc00ba23  test/r75-activation-authority-proof.test.mjs
 38b66147b550c1d1e068ebaa9f8de93a070c08a8a99e0ddee7970b0374c4bfc5  test/r75-authority-evidence.test.mjs
 993186133dc7620bcd3057efda9a0ba1435c938656e4b24a32ace4ce57ea9735  test/r76-pinned-marker-cas.test.mjs

package/PROVENANCE.json

@@ -1,9 +1,9 @@
 {
   "schema": "deadbyte.provenance.v1",
-  "version": "0.15.51",
-  "source_model": "public npm 0.15.50 -> R131 isolated installed-manifest patch -> isolated R132 0.15.51 candidate",
+  "version": "0.15.53",
+  "source_model": "published 0.15.52 -> R144 bounded remote claim recovery and fail-closed authority cleanup",
   "signing": "ed25519",
-  "parent_tarball_sha256": "133b9f4adedee14a3e4f2fd1c9433f7ebf102742a73398161b238fd68eb42d84",
+  "parent_tarball_sha256": "ec675df8885a0d96b1486607956b7091fe47088509b4756194a7e15004d8d97f",
   "parent_activation_status": "PRODUCTION_ACTIVE",
   "parent_rollback_receipt_sha256": null,
   "runtime_predecessor": {
@@ -11,8 +11,8 @@
     "manifest_sha256": "34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc",
     "generation_manifest_sha256": "ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4"
   },
-  "source_predecessor_manifest_file_sha256": "98dd37c71adae980856adc17b9c59d58d167a01d46c61106055956d0f306fede",
-  "reproducibility": "R132 isolated successor at D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.51-r132-release-candidate; R131 parent manifest 3e5edb9987aa7c9004dda3164a278da70a60495c0c128e2602426075a5222c10; no production mutation",
+  "source_predecessor_manifest_file_sha256": "e00223a76ef6d0e0fa7e850de597fa44cd6113cd49725535492da73f1daf4244",
+  "reproducibility": "R144 isolated 0.15.53 candidate from published 0.15.52 tarball SHA-256 ec675df8885a0d96b1486607956b7091fe47088509b4756194a7e15004d8d97f; production 0.15.45 unchanged pending separate activation approval",
   "public_surface_evidence": {
     "status": "PASS",
     "baseline_release": "v0.15.35-1b5715b276facbc0",
@@ -76,12 +76,12 @@
     "stdio_aggregate_p95_delta_pct": 1.984392678457768,
     "limitations_preserved": true
   },
-  "builder": "deadbyte-r71-coding-readonly-native-diff-preview",
+  "builder": "deadbyte-r144-remote-recovery-release-candidate",
   "parent_release_id": "v0.15.45-34aa8d1241cfb8bf",
   "parent_manifest_sha256": "34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc",
   "parent_generation_manifest_sha256": "ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4",
-  "source_predecessor_version": "0.15.50",
-  "source_predecessor_tarball_sha256": "133b9f4adedee14a3e4f2fd1c9433f7ebf102742a73398161b238fd68eb42d84",
+  "source_predecessor_version": "0.15.52",
+  "source_predecessor_tarball_sha256": "ec675df8885a0d96b1486607956b7091fe47088509b4756194a7e15004d8d97f",
   "operator_override": {
     "four_hour_soak": "WAIVED_BY_OPERATOR",
     "clean_machine": "WAIVED_BY_OPERATOR",
@@ -125,7 +125,7 @@
     "package_registry_activation_rollback_restore": "PENDING",
     "stable_final_claim": false
   },
-  "parent_registry_tarball_sha1": "c3cb04f032178c967d2cb7d8688fd6c08bda741d",
+  "parent_registry_tarball_sha1": "d4d26584d5dca6b6a628404e3b7d7994cdb4a9bf",
   "r62": {
     "transaction_inventory_default_max_entries": 1024,
     "parent_state_records_observed": 341,
@@ -264,5 +264,23 @@
     "source_lineage_receipt_sha256": "94b68e9e6bdc2099fed0628ca296958bf2ed296f446586cefc3f8b823d6439ef",
     "exact_r132_full": "NOT_RUN",
     "production_deployment": "NOT_RUN"
+  },
+  "r143": {
+    "source_predecessor": "deadbyte-mcp@0.15.51",
+    "source_tarball_sha256": "69586dc07dc7a3025ec44f08e6b0eab60c1f9e75287da77c850b49e320b201ff",
+    "r142_development_receipt_sha256": "7f174869905d057fbfc57485397b3a9abc67c134d4c970f5083970845c5a5449",
+    "r142_regression": "1770_PASS_49_SKIP_0_FAIL_PREDECESSOR_ONLY",
+    "r143_exact_release_regression": "PENDING",
+    "r143_registry_publication": "NOT_RUN",
+    "production_predecessor_version": "0.15.45",
+    "production_deployment": "NOT_RUN"
+  },
+  "r144": {
+    "terminal_claim_history_recovery": "PASS_FOCUSED_AND_117K_FILE_PRODUCTION_STATE",
+    "broad_root_cleanup": "PASS_FOCUSED_NO_EPOCH_MUTATION",
+    "protected_full_regression": "PASS_1822_TOTAL_1773_PASS_49_SKIP_0_FAIL",
+    "public_named_tunnel": "PASS_SIGNED_MACHINE_PING",
+    "controller_lifecycle": "PASS_START_RESTART_STOP_ISOLATED_PROTECTED_CANDIDATE",
+    "production_activation": "DEFERRED_SEPARATE_OWNER_APPROVAL"
   }
 }

package/README.txt

@@ -1,4 +1,4 @@
-DEADBYTE MCP V0.15.51 / R132 MANIFEST PORTABILITY CANDIDATE
+DEADBYTE MCP V0.15.53 / R144 REMOTE RECOVERY
 =========================
 
 AUTHENTICATED MACHINE TRUTH + DURABLE AGENT + CODING + AUTONOMOUS PRODUCTION ENGINE
@@ -16,12 +16,12 @@ check `--version` before issuing a stateful command. The compatibility CMD
 fails with an explanation when npm is detected rather than forwarding the
 wrong command to the controller.
 
-  npx -y deadbyte-mcp@0.15.51 mcp
-  npx -y deadbyte-mcp@0.15.51 remote
-  npx -y deadbyte-mcp@0.15.51 remote status
-  npx -y deadbyte-mcp@0.15.51 remote restart
-  npx -y deadbyte-mcp@0.15.51 audit status
-  npx -y deadbyte-mcp@0.15.51 audit verify
+  npx -y deadbyte-mcp@0.15.53 mcp
+  npx -y deadbyte-mcp@0.15.53 remote
+  npx -y deadbyte-mcp@0.15.53 remote status
+  npx -y deadbyte-mcp@0.15.53 remote restart
+  npx -y deadbyte-mcp@0.15.53 audit status
+  npx -y deadbyte-mcp@0.15.53 audit verify
 
 MAJOR MCP CLIENT STDIO CONFIGS
 -------------------------------
@@ -32,7 +32,7 @@ CLAUDE DESKTOP
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.51", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.53", "mcp"]
       }
     }
   }
@@ -44,7 +44,7 @@ Save as .cursor/mcp.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.51", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.53", "mcp"]
       }
     }
   }
@@ -57,7 +57,7 @@ Save as .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.51", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.53", "mcp"]
       }
     }
   }
@@ -67,7 +67,7 @@ Add to the Codex MCP configuration:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.51", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.53", "mcp"]
 
 The `mcp` command is the quiet stdio server entry for local MCP clients; stdout is reserved for MCP.
 The remote CLI invokes the stable active-release PowerShell launcher directly with shell=false.
@@ -356,7 +356,7 @@ CONTROLLER
 ----------
 Primary operator entry point:
 
-  npx -y deadbyte-mcp@0.15.51 remote
+  npx -y deadbyte-mcp@0.15.53 remote
 
 The legacy CMD entry remains compatibility-only for R33 rollback safety.
 
@@ -417,7 +417,7 @@ MCP CLIENT CONFIGURATION
 ------------------------
 The local stdio entry point is quiet and suitable for MCP hosts:
 
-  npx -y deadbyte-mcp@0.15.51 mcp
+  npx -y deadbyte-mcp@0.15.53 mcp
 
 CLAUDE DESKTOP
 Use the standard local-server entry in claude_desktop_config.json:
@@ -426,7 +426,7 @@ Use the standard local-server entry in claude_desktop_config.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.51", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.53", "mcp"]
       }
     }
   }
@@ -439,7 +439,7 @@ Create .cursor/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.51", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.53", "mcp"]
       }
     }
   }
@@ -452,7 +452,7 @@ Create .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.51", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.53", "mcp"]
       }
     }
   }
@@ -462,9 +462,9 @@ Add this to ~/.codex/config.toml:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.51", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.53", "mcp"]
 
-The remote device path remains `npx -y deadbyte-mcp@0.15.51 remote`. Remote public MCP uses the
+The remote device path remains `npx -y deadbyte-mcp@0.15.53 remote`. Remote public MCP uses the
 verified HTTPS named-tunnel URL selected by the active generation; do not commit a private device
 URL or tunnel token into a repository.
 

package/RELEASE.json

@@ -1,9 +1,9 @@
 {
   "schema": "deadbyte.release.v1",
   "name": "deadbyte-mcp",
-  "version": "0.15.51",
-  "train": "R132",
-  "label": "R132 MANIFEST PORTABILITY PATCH / ISOLATED RELEASE CANDIDATE",
+  "version": "0.15.53",
+  "train": "R144",
+  "label": "R144 REMOTE RECOVERY / VERIFIED PUBLIC NPM CANDIDATE",
   "protocol_revision": "2026-07-28",
   "parent": {
     "version": "0.15.45",
@@ -19,10 +19,10 @@
     "generation_manifest_sha256": "ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4"
   },
   "source_predecessor": {
-    "version": "0.15.50",
-    "source_path": "C:\\Users\\DEADBYTE\\.deadbyte-mcp\\evidence\\npm-publication\\0.15.50\\deadbyte-mcp-0.15.50.tgz",
+    "version": "0.15.52",
+    "source_path": "D:\\Projects\\deadbyte-mcp\\testing\\r144-remote-recovery\\source-predecessor-0.15.52\\deadbyte-mcp-0.15.52.tgz",
     "release_status": "REGISTRY_PUBLISHED",
-    "tarball_sha256": "133b9f4adedee14a3e4f2fd1c9433f7ebf102742a73398161b238fd68eb42d84"
+    "tarball_sha256": "ec675df8885a0d96b1486607956b7091fe47088509b4756194a7e15004d8d97f"
   },
   "consolidation": {
     "frontend_status_vocabulary": true,
@@ -375,5 +375,32 @@
     "production_activation": "NOT_RUN",
     "production_rollback_restore": "NOT_RUN",
     "npm_publish": "NOT_RUN"
+  },
+  "r143": {
+    "release_candidate_version": "0.15.52",
+    "source_predecessor_version": "0.15.51",
+    "source_predecessor_tarball_sha256": "69586dc07dc7a3025ec44f08e6b0eab60c1f9e75287da77c850b49e320b201ff",
+    "production_predecessor_version": "0.15.45",
+    "r142_native_machinefs_protected_full": "1770_PASS_0_FAIL_49_SKIP",
+    "r142_evidence_status": "PREDECESSOR_ONLY_NOT_R143_RELEASE_PROOF",
+    "exact_r143_protected_full": "PENDING",
+    "exact_r143_package_verification": "PENDING",
+    "npm_publish": "NOT_RUN",
+    "production_activation": "NOT_RUN",
+    "stable_final_claim": false
+  },
+  "r144": {
+    "release_candidate_version": "0.15.53",
+    "source_predecessor_version": "0.15.52",
+    "source_predecessor_tarball_sha256": "ec675df8885a0d96b1486607956b7091fe47088509b4756194a7e15004d8d97f",
+    "production_predecessor_version": "0.15.45",
+    "terminal_claim_history_recovery": "PASS",
+    "broad_root_disarmed_cleanup": "PASS",
+    "protected_full_regression": "PASS_1822_TOTAL_1773_PASS_49_SKIP_0_FAIL",
+    "public_named_tunnel_machine_ping": "PASS",
+    "controller_start_restart_stop": "PASS_ISOLATED_PROTECTED_CANDIDATE",
+    "npm_publish": "PENDING",
+    "production_activation": "DEFERRED_SEPARATE_OWNER_APPROVAL",
+    "stable_final_claim": false
   }
 }

package/SBOM.cdx.json

@@ -1,13 +1,13 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:cdx:deadbyte-mcp:r132:0.15.51",
+  "serialNumber": "urn:cdx:deadbyte-mcp:r144:0.15.53",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
       "name": "deadbyte-mcp",
-      "version": "0.15.51"
+      "version": "0.15.53"
     }
   },
   "components": [

package/TEST-MATRIX.json

@@ -1,7 +1,7 @@
 {
   "schema": "deadbyte.test-matrix.v1",
-  "version": "0.15.51",
-  "train": "R132",
+  "version": "0.15.53",
+  "train": "R144",
   "primary_platform": "win32-x64",
   "reference": {
     "package": "@wonderwhy-er/desktop-commander",
@@ -10,6 +10,36 @@
     "schemas_sha256": "f342345e34e48769dabaefe1b932f09d41e2e207b422f7794a15ee50ffa8f140"
   },
   "required": [
+    {
+      "id": "r144-protected-native-full",
+      "command": "node --test --test-concurrency=4 test/*.test.mjs on exact protected candidate",
+      "expected": "1822 total, 1773 pass, 49 classified skip, zero failures"
+    },
+    {
+      "id": "r144-public-remote-lifecycle",
+      "command": "protected candidate controller start, signed public machine ping, restart, signed public machine ping, stop",
+      "expected": "Public named tunnel calls pass and all owned processes are stopped"
+    },
+    {
+      "id": "r144-package-and-registry",
+      "command": "node scripts/npm-release-r48.mjs --publish-only",
+      "expected": "Exact tarball identity, registry readback and external npx smoke pass; production activation deferred"
+    },
+    {
+      "id": "r143-protected-native-full",
+      "command": "node --test --test-concurrency=4 test/*.test.mjs on exact R143 protected installed tree",
+      "expected": "Zero failures, 49 classified skips preserved, installed manifest PASS"
+    },
+    {
+      "id": "r143-package-verify-only",
+      "command": "node scripts/npm-release-r48.mjs --verify-only",
+      "expected": "Exact-version doctor, manifest verification, npm package and source lineage PASS"
+    },
+    {
+      "id": "r143-publication-reconciliation",
+      "command": "Publish only after prepublish gates PASS, then inspect npm registry and npx outside repo",
+      "expected": "Published version 0.15.52 matches preserved package identity; production not activated"
+    },
     {
       "id": "r71-full-regression",
       "command": "npm test",

package/bridge/src/remote-call-claims-r60.mjs

@@ -133,9 +133,14 @@ export function openRemoteCallClaims({root,clock=Date.now}={}){
         names=await readdir(folder);
       }catch(error){if(error?.code==='ENOENT')continue;throw error;}
       if(names.length>4096)throw new Error('remote recovery shard exceeds bounded inventory');
+      // Terminal claims have no recovery work. Checking same-shard terminal names
+      // avoids re-reading large immutable history before bridge readiness.
+      // Duplicate requests still validate claim + terminal bytes in state().
+      const terminalIds=new Set(names.filter(item=>/^[0-9a-f]{64}\.terminal\.json$/.test(item)).map(item=>item.slice(0,64)));
       for(const name of names.filter(item=>/^[0-9a-f]{64}\.claim\.json$/.test(item)).sort()){
         const id=name.slice(0,64);
         if(after&&id<=after)continue;
+        if(terminalIds.has(id))continue;
         if(records.length>=limit){more=true;break;}
         const claimRecord=await readExact(files(id).claim);
         if(!claimRecord||claimRecord.schema!=='deadbyte.remote-call-claim.v1')throw new Error('remote recovery claim corrupt');

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-epoch-transition-audit-dev\\controller\\runtime\\process-grant.json",
-  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-epoch-transition-audit-dev\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r144-remote-recovery-dev\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r144-remote-recovery-dev\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-epoch-transition-audit-dev\\bin\\deadbyte-process-host.exe",
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r144-remote-recovery-dev\\bin\\deadbyte-process-host.exe",
     "sha256": "daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4"
   },
   "roots": {
     "core": {
-      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-epoch-transition-audit-dev",
+      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r144-remote-recovery-dev",
       "deny_paths": [
         "node_modules",
         "controller/runtime",

package/docs/R135-AUTONOMOUS-SCOPE.md

@@ -0,0 +1,21 @@
+# R135 — Autonomous scope isolation foundation
+
+Status: DEVELOPMENT / OFFLINE PROJECTION ONLY. Do not publish, deploy, arm any grant, or change the production pointer based on this candidate.
+
+## Observed 0.15.45 production conflict
+The manual Coding policy SHA-256 `63f2153517c2e1f3febc5e78ef7e9f766fac3483178ae098021746d5be6ba246` includes `local_c` (C:\\) and `local_d` (D:\\) with read/write/exec. The Autonomous policy names only `core`. The R70 controller rejects **any** broad Coding root at Autonomous metadata admission, even when Autonomous selects a project. This is deliberate defense against an Autonomous tool invoking the already-armed broad Coding capability. Removing only the controller assertion would be a security regression.
+
+## Isolated projection implementation
+`src/autonomous-scope-r135.mjs` exports `deriveIsolatedAutonomousScope`, a pure synchronous *policy preview* function. It takes trusted parsed manual Coding/Autonomous policies, one project root ID, and a separate existing project-scoped state root. It returns two **in-memory** JSON policy byte buffers and their SHA-256 digests, without touching manual or production policy files.
+
+The projected Coding policy retains only the nominated real project directory and commands referenced by the selected Autonomous profiles. The projected Autonomous policy is rebound to the SHA-256 of those exact projected Coding bytes. Both leases and evidence roots are redirected to the separate isolated state. The function refuses whole-drive roots, missing / redirected project roots, commands missing from Coding, profiles targeting other roots, overlapping existing manual lease storage, and preexisting child grant files.
+
+The previous R70 admission check is kept unchanged. `assertAutonomousBootstrapRoots` passes for the projected pair and still rejects the original broad manual Coding policy. The owner approval signature gate and all grant issuance/epoch controls are unchanged.
+
+## Security boundary not yet implemented
+An offline policy projection is **not** enforcement. A shared process with access to the broad manual Coding lease could still inherit broad authority. Do not install these policy bytes inside the existing production controller or arm Autonomous against its Coding policy. Before deployment, implement and test an independently hosted project-scoped runtime with its own distinct Coding grant, owner enrollment/signature, trust root, disjoint lifecycle and authority epoch, and proof of privilege noninheritance even if the manual runtime has broad roots. These policy bytes alone do not demonstrate such isolation.
+
+## Evidence and gates
+The R135 source is an isolated copy of R132B, still internally labeled version 0.15.51 and **must not republish**. R135 test files explicitly cover fail-closed scope projection, manual policy preservation, no inherited grants, and compatibility with the existing R70 whole-drive rejection. The independent production preflight R134 remains BLOCKED for live activation; unresolved historical transaction evidence remains immutable. The R135 candidate is not a 0.15.51 release artifact.
+
+Live signed owner approval and actual production activation/rollback are separate decisions. No modifications to the existing 0.15.45 runtime, grants, policies or active-release pointer are part of R135.

package/docs/R136-SCOPED-OBSERVER.md

@@ -0,0 +1,21 @@
+# R136 — Disarmed Scoped Observer Process / Coding Command-Root Closure
+
+Status: **DEV ONLY — NOT A PRIVILEGE SANDBOX, NOT READY FOR LIVE AUTONOMOUS EXECUTION**.
+
+## Predecessor and regression
+Source predecessor is R135 (development candidate), copied separately without changing the published `deadbyte-mcp@0.15.51` package or active production `0.15.45`. R135's projected Coding commands retained broad `root_ids` from parent manual Coding. This created a latent unsafe future integration path even though the R135 projection had only one root and no execution.
+
+R136 changes `deriveIsolatedAutonomousScope` to require that each selected command already allow the selected scoped root and then replace its `root_ids` with that root alone. The original manual Coding policy is byte-preserved. Tests were observed RED and then GREEN for both command closure and missing scope.
+
+## Child process
+`src/scoped-observer-launcher-r136.mjs` creates a separate Node child process running `src/scoped-observer-worker-r136.mjs` with an explicit tiny environment allowlist (Windows directory and temporary paths only). All `NODE_OPTIONS`, `DEADBYTE_*`, and other ambient user secrets are omitted. The worker verifies exact policy SHA-256 against its launch pins, checks that both policy files live under its declared isolated state, both grants are absent, Coding/Autonomous reference a single project root, and every Coding command has only the selected root. It exposes only a read-only `status` IPC response, explicit denials for privileged operations, and `shutdown`. IPC identity keys cannot be user overwritten. Exit/disposal is verified.
+
+This worker does **not** invoke `coding-plane` commands, issue grants, or access manual authority epochs. It does not attach to production or register tools with the live MCP server.
+
+## Security limitations and next gate
+A separate process with sanitized environment is NOT an OS-level security boundary. It still runs under the same Windows account and therefore potentially retains filesystem rights to broad manual Coding resources. The worker has no privileged action handlers, but adding any executor to it would require independent owner-signed grant enrollment, restricted Windows token / explicit filesystem ACL isolation, disjoint trust store and authority epoch, stronger IPC mutual authentication, process lifecycle and crash/recovery tests, and a proof that broad grants cannot be read or reused. Passing R136 does not authorize such execution.
+
+Historical 13 rollback/update records remain unchanged. R70 rejection of broad Coding roots remains unchanged and must continue passing. `0.15.51` is immutable and any deployable code requires a new version and full protected Windows release gate. No production grants, policies, pointer, running processes or settings are changed by this development patch.
+
+## Verification
+Tests: `test/r136-scoped-command-rights.test.mjs`, `test/r136-scoped-observer.test.mjs`, all prior R135 scope tests and R70 security tests. Windows real production policy fixture read only: `D:\Projects\deadbyte-mcp\testing\r136-scoped-runtime-dev\R136-LIVE-POLICY-PROBE.json`. It shows process PID, independent scope hash pins, action denials, environment scrubbing, no leases, original production SHA preservation. This is not an activation/rollback test.

package/docs/R137-DESKTOP-COMMANDER-FOUNDATION.md

@@ -0,0 +1,31 @@
+# R137 — Desktop Commander reference foundation (three pinned versions)
+
+Status: **isolated development, unsealed and unpublished**.
+
+## Purpose
+Use locally preserved Desktop Commander builds as engineering/compatibility baselines while keeping DEADBYTE MCP's compact native authority and runtime model. Do NOT embed or invoke three vendor servers, replace the existing MCP core, add network telemetry, or relax authority/grant checks. This is the small-interface strategy: preserve 26 known useful Commander tools and one reliable config file.
+
+Local reference snapshots:
+- `D:\\Projects\\deadbyte-mcp\\references\\desktop-commander v0.2.52`: package 0.2.52, MIT (package metadata). Tool schema SHA-256 `f342345e34e48769dabaefe1b932f09d41e2e207b422f7794a15ee50ffa8f140`, 27 toolArgSchemas including hidden `track_ui_event`, 26 public.
+- `D:\\Projects\\deadbyte-mcp\\references\\desktop-commander v0.3.0`: package 0.3.0, MIT (package metadata). Tool schema SHA-256 `7d4c62e2099d757d8fba68011cfe25d3088426f56c0b77d5b8fa3edb4ec49c2c`, 26 schemas incl hidden, 25 public; `get_prompts` absent. Has `config-recovery.js`, SHA-256 `f091cc7f0f62413cf9debb461f3777ee2e1d4c194501daa7ad2c4570d5ccc542`.
+- `D:\\Projects\\deadbyte-mcp\\references\\desktop-commander-0.3.1-alpha.2\\static`: package 0.3.1-alpha.2, MIT (actual LICENSE), 27 schemas incl hidden (26 public); schema SHA-256 `6a290497b29f9dc5f43d66008ea54fcf0c302edea5612af519ef52ab3816d29e`. Original tarball SHA-256 `faaf3f34f114589c0630ce4eaa7114ecc628ce2030822dfe67feac0e17fedc4b`. LICENSE SHA-256 `0fac4e4dfbd64a2a616b9ae2e14c4a3a5635d2a5fc9c43177fb834059afa58e3`.
+
+## What was actually implemented
+`src/commander-config-recovery-r137.mjs` implements a narrow recovery inspired by the 0.3.x feature but with stricter authority separation:
+- Recover only two fully parsed and bounded top-level display limits: `fileReadLineLimit` (1..1000) and `fileWriteLineLimit` (1..50).
+- Never salvage `allowedDirectories`, `blockedCommands`, `defaultShell`, `telemetryEnabled`, or any privileged or unknown setting from damaged bytes.
+- Save a distinct byte-exact `commander-config.json.corrupt.<timestamp>.<uuid>` backup before repairing; verify the original SHA on readback; replace with a new temporary file then atomic rename. Never repair oversized files silently.
+- Serialize parallel first reads to avoid duplicated recoveries; retain normal hash-preconditioned `setConfigValue` behavior.
+- Return recovery metadata as structured result of `get_config` only if recovery actually occurred.
+
+`test/r137-commander-three-version-contract.test.mjs` checks the pinned version-specific schemas and DEADBYTE normalization for each existing public name. `track_ui_event` remains deliberately hidden; no vendor telemetry is enabled. The original exhaustive R48 schema differential against 0.2.52 is preserved.
+
+This design is NOT a new filesystem or command authorization mechanism. Native DEADBYTE policy / sessions / hash-pinned mutations continue to govern actions, independent of the recovered compatibility settings.
+
+## License notice and provenance
+Desktop Commander copyright Eduard Ruzga / contributors; MIT License. The 0.3.1-alpha.2 package contains the license text in `static/LICENSE`; the other two locally retained package.json files state MIT but do not include standalone LICENSE files. The full MIT license text/notice for the reference design is included at `docs/THIRD-PARTY-DESKTOP-COMMANDER-MIT.md`. No dist scripts, vendor node_modules or telemetry SDK copied into DEADBYTE. No new runtime dependencies introduced.
+
+## Gates and operational boundary
+R137 source is an isolated copy of R136; its package.json still says `0.15.51`, a **published immutable version that must not be republished**. Full native regression should run from an independently copied protected Windows fixture with User RX ACLs, not mutable D:\\ source, as R89 native lock enforces installation trust.
+
+No production mutation; current active runtime stays 0.15.45, npm published latest stays 0.15.51, and R135/R136 autonomous process experiments are not activated. Further release requires a new version, full protected regression, owner-reviewed policy and independent activation/rollback gates.