deadbyte-mcp 0.15.55 → 0.15.59

package/test/r153-prepublish-identity.test.mjs

@@ -0,0 +1,40 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {readFile} from 'node:fs/promises';
+import path from 'node:path';
+import {fileURLToPath} from 'node:url';
+import {verifyR153Lineage,verifyR153IdentityTree} from '../scripts/r153-prepublish-identity.mjs';
+const root=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..');
+const pkg=JSON.parse(await readFile(path.join(root,'package.json'),'utf8'));
+const release=JSON.parse(await readFile(path.join(root,'RELEASE.json'),'utf8'));
+const bridge=JSON.parse(await readFile(path.join(root,'bridge','package.json'),'utf8'));
+const copy=()=>structuredClone({pkg,release,bridge});
+test('R153 exact source and runtime lineage: metadata-only PASS',()=>{
+  assert.equal(verifyR153Lineage(copy()).status,'PASS');
+});
+test('R153 rejects original R74 source predecessor 0.15.46',()=>{
+  const state=copy();state.release.source_predecessor.version='0.15.46';
+  assert.throws(()=>verifyR153Lineage(state),/source predecessor version/);
+});
+test('R153 rejects source predecessor tarball hash drift',()=>{
+  const state=copy();state.release.source_predecessor.tarball_sha256='f'.repeat(64);
+  assert.throws(()=>verifyR153Lineage(state),/source predecessor tarball/);
+});
+test('R153 rejects runtime predecessor or parent drift',()=>{
+  const state=copy();state.release.parent.release_id='other';
+  assert.throws(()=>verifyR153Lineage(state),/parent is not exact/);
+  const state2=copy();state2.release.runtime_predecessor.version='0.15.46';
+  assert.throws(()=>verifyR153Lineage(state2),/runtime predecessor version/);
+});
+test('R153 rejects version / train / bridge identity drift',()=>{
+  const state=copy();state.pkg.version='0.15.56';
+  assert.throws(()=>verifyR153Lineage(state),/package version/);
+  const state2=copy();state2.release.train='R154';
+  assert.throws(()=>verifyR153Lineage(state2),/train/);
+  const state3=copy();state3.bridge.version='0.15.45';
+  assert.throws(()=>verifyR153Lineage(state3),/bridge version/);
+});
+test('R153 rejects tarball self-reference',()=>{
+  const state=copy();state.release.tarball_sha256='f'.repeat(64);
+  assert.throws(()=>verifyR153Lineage(state),/self-referential/);
+});

package/test/r153-restricted-reused-pid.test.mjs

@@ -0,0 +1,31 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {classifyRestrictedReusedPid} from '../src/foreground-process-identity.mjs';
+
+const expected=()=>({
+  schema:'deadbyte.foreground-process.v1',
+  pid:13328,parent_pid:8632,
+  creation_utc:'2026-10-23T16:03:48.4677330Z',
+  executable_path:'C:\\Program Files\\nodejs\\node.exe',
+  command_line_sha256:'a'.repeat(64)
+});
+const observed=()=>({
+  pid:13328,name:'svchost.exe',
+  creation_utc:'2026-10-24T02:51:48.0000000Z'
+});
+
+test('R153 definite later Windows service PID reuse can prove original foreground owner absent',()=>{
+  assert.equal(classifyRestrictedReusedPid(expected(),observed()),'REUSED');
+});
+test('R153 cannot use unchanged, older, or malformed process birth as negative proof',()=>{
+  assert.throws(()=>classifyRestrictedReusedPid(expected(),{...observed(),creation_utc:expected().creation_utc}),/unverified|ambiguous|unchanged/i);
+  assert.throws(()=>classifyRestrictedReusedPid(expected(),{...observed(),creation_utc:'2026-10-22T00:00:00Z'}),/unverified|ambiguous|unchanged/i);
+  assert.throws(()=>classifyRestrictedReusedPid(expected(),{...observed(),creation_utc:'not-a-date'}),/invalid|unverified/i);
+  assert.throws(()=>classifyRestrictedReusedPid(expected(),null),/unverified|invalid/i);
+});
+test('R153 negative evidence binds exact PID, expected Node path and narrow service class',()=>{
+  assert.throws(()=>classifyRestrictedReusedPid(expected(),{...observed(),pid:9999}),/PID|mismatch/i);
+  assert.throws(()=>classifyRestrictedReusedPid(expected(),{...observed(),name:'node.exe'}),/unverified|service/i);
+  assert.throws(()=>classifyRestrictedReusedPid(expected(),{...observed(),name:'explorer.exe'}),/unverified|service/i);
+  assert.throws(()=>classifyRestrictedReusedPid({...expected(),executable_path:'C:\\Windows\\System32\\cmd.exe'},observed()),/unverified|Node/i);
+});

package/test/r153-staging-leaf-acl.test.mjs

@@ -0,0 +1,47 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {readFileSync} from 'node:fs';
+import {fileURLToPath} from 'node:url';
+import {spawnSync} from 'node:child_process';
+
+const bootstrap=readFileSync(fileURLToPath(new URL('../scripts/bootstrap-uac-migration-r153.ps1',import.meta.url)),'utf8');
+
+test('R153 ACL hotfix grants direct leaf read only to Administrators and SYSTEM before rehash',()=>{
+  const start=bootstrap.indexOf("R153 protected staging final ACL normalization failed");
+  const repair=bootstrap.indexOf("'*S-1-5-32-544:(F)' '*S-1-5-18:(F)' '/T' '/C'");
+  const rehash=bootstrap.indexOf('R153 staged package post-ACL verification failed');
+  assert.ok(start>=0&&repair>start&&rehash>repair,'ACL repair must follow recursive inheritance stripping and precede independent rehash');
+  assert.match(bootstrap,/R153 protected staging leaf ACL restoration failed/);
+  assert.doesNotMatch(bootstrap.slice(start,rehash),/S-1-5-32-545:\(F\)|Everyone:\(F\)/);
+});
+
+test('R153 Windows ACL reproduction rejects stripped leaf ACE and restores direct read', {skip:process.platform!=='win32'},()=>{
+  const ps=String.raw`$ErrorActionPreference = 'Stop'
+$root = Join-Path $env:TEMP ('r153-native-acl-test-' + [guid]::NewGuid().ToString('N'))
+$sid = [Security.Principal.WindowsIdentity]::GetCurrent().User.Value
+$leaf = Join-Path $root 'child\file.txt'
+try {
+  New-Item -ItemType Directory -Path (Split-Path -Parent $leaf) -Force | Out-Null
+  [IO.File]::WriteAllText($leaf,'read-only regression fixture')
+  & icacls.exe $root '/inheritance:r' '/grant:r' ('*'+$sid+':(OI)(CI)(F)') '/T' '/C' | Out-Null
+  if($LASTEXITCODE -ne 0){throw 'REPRO_SETUP_FAILED'}
+  $blocked = Get-FileHash -LiteralPath $leaf -Algorithm SHA256 -ErrorAction SilentlyContinue
+  if($null -ne $blocked){throw 'REPRO_DID_NOT_STRIP_LEAF_ACE'}
+  & icacls.exe $root '/grant' ('*'+$sid+':(F)') '/T' '/C' | Out-Null
+  if($LASTEXITCODE -ne 0){throw 'LEAF_REPAIR_FAILED'}
+  $restored = Get-FileHash -LiteralPath $leaf -Algorithm SHA256
+  if($null -eq $restored -or $restored.Hash.Length -ne 64){throw 'LEAF_NOT_READABLE_AFTER_REPAIR'}
+  $acl = Get-Acl -LiteralPath $leaf
+  $allow=@($acl.Access | Where-Object {$_.AccessControlType -eq 'Allow'})
+  if($allow.Count -ne 1){throw 'LEAF_HAS_UNEXPECTED_ALLOW_ACE_COUNT'}
+  if($allow[0].IdentityReference.Translate([Security.Principal.SecurityIdentifier]).Value -ne $sid){throw 'LEAF_HAS_UNEXPECTED_TRUSTEE'}
+  Write-Output 'R153_WIN32_LEAF_ACL_REPAIR_PASS'
+} finally {
+  if(Test-Path -LiteralPath $root){Remove-Item -LiteralPath $root -Force -Recurse}
+}`;
+  const encoded=Buffer.from(ps,'utf16le').toString('base64');
+  const result=spawnSync('powershell.exe',['-NoLogo','-NoProfile','-NonInteractive','-EncodedCommand',encoded],
+    {encoding:'utf8',timeout:30000,maxBuffer:256*1024});
+  assert.equal(result.status,0,result.stderr||result.stdout||String(result.error));
+  assert.match(result.stdout,/R153_WIN32_LEAF_ACL_REPAIR_PASS/);
+});

package/test/r153-uac-approval-contract.test.mjs

@@ -0,0 +1,92 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {createUacApproval,verifyUacApproval,validateApprovalWindow,requireTrustedUacInstallation,protectedUacReceiptPath} from '../src/uac-approval-contract-r153.mjs';
+import {readFileSync} from 'node:fs';
+import {fileURLToPath} from 'node:url';
+const h=(n)=>n.repeat(64);
+const base=()=>({stateRoot:'C:\\Users\\DEADBYTE\\.deadbyte-mcp',candidateRoot:'C:\\Program Files\\DEADBYTE-R153-TEST',candidateVersion:'0.15.59',candidateManifestSha256:h('a'),tarballSha256:h('b'),markerReceiptSha256:h('c'),predecessorPointerSha256:h('d'),predecessorPolicySha256:{process:h('1'),coding:h('2'),autonomous:h('3'),desktop:h('4'),host:h('5')},preflightSubjectSha256:h('e'),nodeSha256:h('f'),deployScriptSha256:h('0'),nonce:h('6'),issuedAt:'2026-10-24T00:00:00.000Z',expiresAt:'2026-10-24T00:05:00.000Z'});
+test('R153 UAC receipt carries exact no-grants narrow migration subject',()=>{
+  const x=base(),receipt=createUacApproval(x);
+  assert.equal(receipt.schema,'deadbyte.r153-uac-approval.v1');
+  assert.equal(receipt.action,'narrow_legacy_policy_and_activate');
+  assert.deepEqual(receipt.allowed_authority_after,{process:false,coding:false,autonomous:false,desktop:false,host:false});
+  assert.match(receipt.subject_sha256,/^[0-9a-f]{64}$/);
+  assert.deepEqual(verifyUacApproval(receipt,x,{now:'2026-10-24T00:02:00.000Z'}),receipt);
+});
+test('R153 UAC receipt rejects drift across every authority/candidate/runtime input',()=>{
+  const x=base(),receipt=createUacApproval(x);
+  for(const [key,value] of Object.entries({stateRoot:'C:\\Other',candidateRoot:'C:\\Program Files\\Other',candidateVersion:'0.15.56',candidateManifestSha256:h('f'),tarballSha256:h('f'),markerReceiptSha256:h('f'),predecessorPointerSha256:h('f'),preflightSubjectSha256:h('f'),nodeSha256:h('a'),deployScriptSha256:h('a'),nonce:h('a'),issuedAt:'2026-10-24T00:00:01.000Z',expiresAt:'2026-10-24T00:06:00.000Z'})){
+    assert.throws(()=>verifyUacApproval(receipt,{...x,[key]:value},{now:'2026-10-24T00:02:00.000Z'}),undefined,key);
+  }
+  assert.throws(()=>verifyUacApproval(receipt,{...x,predecessorPolicySha256:{...x.predecessorPolicySha256,host:h('a')}},{now:'2026-10-24T00:02:00.000Z'}));
+});
+test('R153 UAC receipt fails closed on expiration, malformed, replay-like tamper and grant widening',()=>{
+  const x=base(),receipt=createUacApproval(x);
+  assert.throws(()=>verifyUacApproval(receipt,x,{now:'2026-10-24T00:05:00.000Z'}),/expired|time/i);
+  assert.throws(()=>verifyUacApproval({...receipt,action:'grant_host'},x,{now:'2026-10-24T00:02:00.000Z'}));
+  assert.throws(()=>verifyUacApproval({...receipt,allowed_authority_after:{...receipt.allowed_authority_after,coding:true}},x,{now:'2026-10-24T00:02:00.000Z'}));
+  assert.throws(()=>verifyUacApproval({...receipt,nonce:h('a')},x,{now:'2026-10-24T00:02:00.000Z'}));
+  assert.throws(()=>verifyUacApproval({...receipt,surprise:'admin'},x,{now:'2026-10-24T00:02:00.000Z'}));
+  assert.throws(()=>createUacApproval({...x,expiresAt:'2026-10-24T00:12:00.000Z'}));
+  assert.throws(()=>createUacApproval({...x,issuedAt:'not-a-date'}));
+  assert.throws(()=>createUacApproval({...x,nonce:'x'}));
+});
+test('R153 UAC scope only accepts protected root and exact v0.15.59',()=>{
+  assert.throws(()=>createUacApproval({...base(),candidateRoot:'C:\\Users\\DEADBYTE\\npm-cache'}),/protected/i);
+  assert.throws(()=>createUacApproval({...base(),candidateVersion:'0.15.55'}),/candidate/i);
+  assert.throws(()=>validateApprovalWindow('2026-10-24T00:00:00.000Z','2026-10-24T00:00:00.000Z','2026-10-24T00:00:00.000Z'));
+});
+
+
+test('R153 UAC protected installation requires explicit positive R89 verdict',()=>{
+  assert.deepEqual(requireTrustedUacInstallation({trusted:true,reason:'PROTECTED_INSTALLATION_ACL_SNAPSHOT'}),
+    {trusted:true,reason:'PROTECTED_INSTALLATION_ACL_SNAPSHOT'});
+  for(const result of [undefined,null,{}, {trusted:false,reason:'UNTRUSTED_WRITE_ACE'},
+    {trusted:'true'}, {trusted:0}, {trusted:undefined}]) {
+    assert.throws(()=>requireTrustedUacInstallation(result),/R89|protected|trust/i);
+  }
+});
+
+test('R153 CLI delegates UAC only to exact-version protected bootstrap contract',()=>{
+  const cli=readFileSync(fileURLToPath(new URL('../src/deadbyte-cli.mjs',import.meta.url)),'utf8');
+  assert.match(cli,/UAC_BOOTSTRAP_SCRIPT/);
+  assert.match(cli,/'-ExpectedVersion',DEADBYTE_VERSION/);
+  assert.match(cli,/'-ExpectedTarballSha256',artifactSha256/);
+  assert.match(cli,/'-ExpectedManifestSha256',packagedManifestSha256/);
+  assert.match(cli,/'-ExpectedBootstrapSha256',bootstrapMatch\[1\]/);
+  assert.match(cli,/REGISTRY_IDENTITY_VERIFIED/);
+  assert.doesNotMatch(cli,/protected 0\.15\.56 installation required before UAC/);
+});
+
+
+test('R153 approval lives next to, never inside, the exact candidate tree',()=>{
+  const nonce=h('6');
+  const candidate='C:\\Program Files\\DEADBYTE-R153-TEST';
+  const receipt=protectedUacReceiptPath(candidate,nonce);
+  assert.equal(receipt.toLowerCase(),`c:\\program files\\deadbyte-r153-test.r153-uac-approval-${nonce}.json`);
+  assert.equal(receipt.toLowerCase().startsWith(candidate.toLowerCase()+'\\'),false);
+  assert.equal(receipt.toLowerCase().startsWith('c:\\program files\\'),true);
+});
+
+test('R153 approval path rejects unprotected roots and malformed nonces',()=>{
+  for(const candidate of ['D:\\Build\\candidate','C:\\Users\\DEADBYTE\\candidate',
+    'C:\\Program Files','C:\\Program Files\\..\\Windows','\\\\server\\share\\candidate']){
+    assert.throws(()=>protectedUacReceiptPath(candidate,h('6')),/protected|candidate|path/i);
+  }
+  for(const nonce of ['bad',h('F'),h('6')+'.json',h('6').slice(1)]){
+    assert.throws(()=>protectedUacReceiptPath('C:\\Program Files\\candidate',nonce),/nonce/i);
+  }
+});
+
+
+test('R153 UAC issuer and deploy share exact protected sidecar boundary',()=>{
+  const issuer=readFileSync(fileURLToPath(new URL('../scripts/issue-uac-migration-r153.mjs',import.meta.url)),'utf8');
+  const deploy=readFileSync(fileURLToPath(new URL('../scripts/deploy-r48.mjs',import.meta.url)),'utf8');
+  assert.match(issuer,/const file=protectedUacReceiptPath\(root,nonce\)/);
+  assert.match(issuer,/open\(file,'wx',0o600\)/);
+  assert.match(issuer,/ownerFix\.error\|\|ownerFix\.status!==0/);
+  assert.match(issuer,/inspectTrustedInstallation\(\[file\]\)/);
+  assert.match(deploy,/const expectedApprovalPath=protectedUacReceiptPath\(root,deployArgs\.migrationNonce\)/);
+  assert.match(deploy,/requireTrustedUacInstallation\(await inspectTrustedInstallation\(\[expectedApprovalPath\]\)\)/);
+  assert.match(deploy,/UAC approval receipt path not exact candidate sidecar/);
+});

package/test/r153-uac-installed-manifest-contract.test.mjs

@@ -0,0 +1,19 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {readFile} from 'node:fs/promises';
+import path from 'node:path';
+import {fileURLToPath} from 'node:url';
+const root=path.resolve(fileURLToPath(new URL('..',import.meta.url)));
+
+test('R153 privileged issuer uses installed-tree verification, never npm pack dry-run',async()=>{
+  const issuer=await readFile(path.join(root,'scripts','issue-uac-migration-r153.mjs'),'utf8');
+  assert.match(issuer,/const verifyManifest=spawnSync\(process\.execPath,\[path\.join\(root,'scripts','release-manifest\.mjs'\),'verify-installed'\]/);
+  assert.doesNotMatch(issuer,/\[path\.join\(root,'scripts','release-manifest\.mjs'\),'verify'\]/);
+});
+test('R153 installed verifier checks exact manifested tree and has no write path',async()=>{
+  const src=await readFile(path.join(root,'scripts','release-manifest.mjs'),'utf8');
+  assert.match(src,/else if \(command === 'verify-installed'\) await verifyInstalled\(\)/);
+  assert.match(src,/async function verifyInstalled\(\) \{/);
+  assert.match(src,/await verifyManifestTreeExact\(root, entries, \{/);
+  assert.match(src,/allowedExtraPaths:\['\.npmignore','package-lock\.json'\]/);
+});

package/test/r153-uac-launch-parameter-contract.test.mjs

@@ -0,0 +1,59 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {readFileSync} from 'node:fs';
+import {fileURLToPath} from 'node:url';
+
+const source=()=>readFileSync(fileURLToPath(new URL('../scripts/request-uac-migration-r153.ps1',import.meta.url)),'utf8');
+const bootstrap=()=>readFileSync(fileURLToPath(new URL('../scripts/bootstrap-uac-migration-r153.ps1',import.meta.url)),'utf8');
+
+test('R153 UAC RunAs does not combine mutually exclusive redirection parameters',()=>{
+  const script=source();
+  const start=script.indexOf('$child = Start-Process');
+  assert.ok(start>=0,'RunAs launch must exist');
+  const end=script.indexOf('if (Test-Path -LiteralPath $StdoutPath)',start);
+  assert.ok(end>start,'RunAs launch must retain result reading');
+  const launch=script.slice(start,end);
+  assert.match(launch,/-Verb RunAs\b/);
+  assert.doesNotMatch(launch,/-RedirectStandard(Output|Error)\b/i,
+    'Windows PowerShell 5.1 -Verb RunAs cannot use RedirectStandard*');
+});
+
+test('R153 elevated UAC logging is scoped and no-clobber',()=>{
+  const script=source();
+  assert.match(script,/UAC evidence paths must remain inside state legacy-migration evidence/);
+  assert.match(script,/UAC stderr evidence identity mismatch/);
+  assert.match(script,/evidence directory ancestry contains reparse point/);
+  assert.match(script,/\[IO\.FileMode\]::CreateNew/);
+  assert.match(script,/Write-NoClobberEvidence \$StdoutPath \$stdoutText/);
+  assert.match(script,/Write-NoClobberEvidence \$StderrPath \$stderrText/);
+});
+
+test('R153 native failure stays terminal and success waits for deploy exit zero',()=>{
+  const script=source();
+  assert.match(script,/if \(\$issuerExit -ne 0\) \{ throw/);
+  assert.match(script,/if \(\$deployExit -ne 0\)/);
+  assert.match(script,/\$exitCode = 0/);
+  assert.match(script,/exit \$exitCode/);
+});
+
+test('R153 RED: mutable npx entrypoint stages exact registry package before privileged migration',()=>{
+  const script=bootstrap();
+  assert.match(script,/ExpectedTarballSha256/);
+  assert.match(script,/ExpectedManifestSha256/);
+  assert.match(script,/ExpectedBootstrapSha256/);
+  assert.match(script,/System32\\tar\.exe/);
+  assert.doesNotMatch(script,/npm-cli\.js|npm install/i);
+  assert.match(script,/Get-FileHash -LiteralPath \$file -Algorithm SHA256/);
+  assert.match(script,/NODE_OPTIONS/);
+  assert.match(script,/https:\/\/registry\.npmjs\.org\/deadbyte-mcp\/0\.15\.59/);
+  assert.match(script,/live npm registry tarball SHA-256 mismatch/);
+  assert.match(script,/live npm registry tarball integrity mismatch/);
+  assert.match(script,/DEADBYTE-R153-Stage-/);
+  assert.match(script,/fresh protected staging path collision/);
+  assert.match(script,/protected staging residue limit reached/);
+  assert.match(script,/'\/inheritance:r'/);
+  assert.match(script,/verify-protected-stage-r153\.mjs/);
+  assert.match(script,/request-uac-migration-r153\.ps1/);
+  assert.match(script,/& \$helper -Elevated/);
+  assert.match(script,/Remove-Item -LiteralPath \$prefix -Recurse -Force/);
+});

package/test/r58-concurrent-recovery.test.mjs

@@ -52,7 +52,7 @@ exit 0
   const commands=await readFile(trace,'utf8').catch(error=>error.code==='ENOENT'?'':Promise.reject(error));
   await writeFile(path.join(root,'observation.json'),JSON.stringify({commands,exits,outputs:outputs.map(o=>({stdout:o.stdout,stderr:o.stderr})),simulation:'concurrent owner-unverified stale marker'}),{flag:'wx'});
   assert.ok(exits.every(code=>code!==0));
-  for(const output of outputs)assert.match(output.stderr,/ownership unverified.*marker retained|already claimed \(startup\/recovery lock\)/i);
+  for(const output of outputs)assert.match(output.stderr,/ownership(?: identity)? unverified.*marker retained|already claimed \(startup\/recovery lock\)/i);
   assert.equal(commands,'','neither attempt may touch authority');
   assert.equal(JSON.parse(await readFile(markerPath,'utf8')).pid,2147483000);
  }finally{

package/test/r59-tool-surface-compat.test.mjs

@@ -83,7 +83,7 @@ test('R72 compact baseline permits only R64 read offset and authorized coding-on
   assert.deepEqual(diff.added,[]);
   assert.deepEqual(diff.removed,[]);
   const packageVersion=JSON.parse(await readFile(path.join(repoRoot,'package.json'),'utf8')).version;
-  if(['0.15.41','0.15.42','0.15.43','0.15.44','0.15.45','0.15.46','0.15.47','0.15.48','0.15.49','0.15.50','0.15.51','0.15.52','0.15.53','0.15.54','0.15.55'].includes(packageVersion)){
+  if(['0.15.41','0.15.42','0.15.43','0.15.44','0.15.45','0.15.46','0.15.47','0.15.48','0.15.49','0.15.50','0.15.51','0.15.52','0.15.53','0.15.54','0.15.55','0.15.56','0.15.57','0.15.58','0.15.59'].includes(packageVersion)){
     assert.deepEqual([...diff.schema_changed].sort(),['machine_fs','native_diff_preview']);
     assert.equal(diff.unchanged.length,41);
     const prior=baseline.tools.find(tool=>tool.name==='machine_fs');

package/test/r65-activation-orchestration.test.mjs

@@ -231,3 +231,23 @@ test('R146 legacy offline scope proof drift after claim never dispatches activat
   assert.equal(activated,false);
   assert.equal(released,true);
 });
+
+test('R153 UAC-bound narrowing proof is accepted without pretending to be owner-signature approval',async()=>{
+  const planes=Object.keys(policies);
+  let observation={state:'OFFLINE',local_ready:false,
+    bridge:{alive:false},core:{alive:false},cloud:{alive:false},supervisor:{running:false},
+    authority:Object.fromEntries(planes.map(plane=>[plane,{configured:true,armed:false,reason:plane==='autonomous'?'unverified':'disarmed'}])),
+    authority_proof:Object.fromEntries(planes.map(plane=>[plane,{state:plane==='autonomous'?'UNVERIFIED':'VERIFIED_DISARMED',grant_absent:true,policy_sha256:policies[plane]}])),
+    policy_sha256:policies,active_release_id:parent.release_id,active_manifest_sha256:parent.manifest_sha256,
+    active_generation_manifest_sha256:parent.generation_manifest_sha256};
+  const result=await orchestrateActivation({pointer:parent,expectedParent:parent,candidate,expectedCandidate:candidate,
+    observe:async()=>observation,command:async()=>{},claim:async()=>async()=>{},recordOutcome:async()=>{},
+    activate:async()=>{observation={...observation,state:'ONLINE',local_ready:true,...ids,supervisor:{running:true},
+      authority:Object.fromEntries(planes.map(plane=>[plane,legacyEntry(false)])),
+      authority_proof:Object.fromEntries(planes.map(plane=>[plane,{state:'VERIFIED_DISARMED',policy_sha256:policies[plane],grant_absent:true}]))};
+      return {verified:true,release_id:'v0.15.42-r153'};},
+    legacyOfflineRecovery:async({preflight_subject_sha256})=>({state:'VERIFIED_OFFLINE_LEGACY_SCOPE_REPAIR',
+      preflight_subject_sha256,candidate_manifest_sha256:candidate.manifest_sha256,
+      migration_authorization_verified:true,migration_authorization:'windows_uac_elevated',subject_sha256:'b'.repeat(64)})});
+  assert.equal(result.state,'ACTIVATED');
+});

package/test/remote-session-cli.test.mjs

@@ -571,7 +571,7 @@ winTest('bare remote retains an owner-unverified stale marker without starting o
     const ended=await boundedCompletion(output.closed);
     assert.equal(ended.timeout,undefined);
     assert.notEqual(ended.code,0);
-    assert.match(output.stderr,/ownership unverified.*marker retained/i);
+    assert.match(output.stderr,/ownership(?: identity)? unverified.*marker retained/i);
     assert.deepEqual(await traceCommands(fx.trace),[]);
     assert.equal(JSON.parse(await readFile(path.join(runtime,'remote-session.json'),'utf8')).pid,2147483000);
   }finally{

package/node_modules/which/CHANGELOG.md

@@ -1,166 +0,0 @@
-# Changes
-
-
-## 2.0.2
-
-* Rename bin to `node-which`
-
-## 2.0.1
-
-* generate changelog and publish on version bump
-* enforce 100% test coverage
-* Promise interface
-
-## 2.0.0
-
-* Parallel tests, modern JavaScript, and drop support for node < 8
-
-## 1.3.1
-
-* update deps
-* update travis
-
-## v1.3.0
-
-* Add nothrow option to which.sync
-* update tap
-
-## v1.2.14
-
-* appveyor: drop node 5 and 0.x
-* travis-ci: add node 6, drop 0.x
-
-## v1.2.13
-
-* test: Pass missing option to pass on windows
-* update tap
-* update isexe to 2.0.0
-* neveragain.tech pledge request
-
-## v1.2.12
-
-* Removed unused require
-
-## v1.2.11
-
-* Prevent changelog script from being included in package
-
-## v1.2.10
-
-* Use env.PATH only, not env.Path
-
-## v1.2.9
-
-* fix for paths starting with ../
-* Remove unused `is-absolute` module
-
-## v1.2.8
-
-* bullet items in changelog that contain (but don't start with) #
-
-## v1.2.7
-
-* strip 'update changelog' changelog entries out of changelog
-
-## v1.2.6
-
-* make the changelog bulleted
-
-## v1.2.5
-
-* make a changelog, and keep it up to date
-* don't include tests in package
-* Properly handle relative-path executables
-* appveyor
-* Attach error code to Not Found error
-* Make tests pass on Windows
-
-## v1.2.4
-
-* Fix typo
-
-## v1.2.3
-
-* update isexe, fix regression in pathExt handling
-
-## v1.2.2
-
-* update deps, use isexe module, test windows
-
-## v1.2.1
-
-* Sometimes windows PATH entries are quoted
-* Fixed a bug in the check for group and user mode bits. This bug was introduced during refactoring for supporting strict mode.
-* doc cli
-
-## v1.2.0
-
-* Add support for opt.all and -as cli flags
-* test the bin
-* update travis
-* Allow checking for multiple programs in bin/which
-* tap 2
-
-## v1.1.2
-
-* travis
-* Refactored and fixed undefined error on Windows
-* Support strict mode
-
-## v1.1.1
-
-* test +g exes against secondary groups, if available
-* Use windows exe semantics on cygwin & msys
-* cwd should be first in path on win32, not last
-* Handle lower-case 'env.Path' on Windows
-* Update docs
-* use single-quotes
-
-## v1.1.0
-
-* Add tests, depend on is-absolute
-
-## v1.0.9
-
-* which.js: root is allowed to execute files owned by anyone
-
-## v1.0.8
-
-* don't use graceful-fs
-
-## v1.0.7
-
-* add license to package.json
-
-## v1.0.6
-
-* isc license
-
-## 1.0.5
-
-* Awful typo
-
-## 1.0.4
-
-* Test for path absoluteness properly
-* win: Allow '' as a pathext if cmd has a . in it
-
-## 1.0.3
-
-* Remove references to execPath
-* Make `which.sync()` work on Windows by honoring the PATHEXT variable.
-* Make `isExe()` always return true on Windows.
-* MIT
-
-## 1.0.2
-
-* Only files can be exes
-
-## 1.0.1
-
-* Respect the PATHEXT env for win32 support
-* should 0755 the bin
-* binary
-* guts
-* package
-* 1st