deadbyte-mcp 0.15.59 → 0.15.61

package/scripts/bootstrap-uac-migration-r153.ps1

@@ -1,5 +1,5 @@
 param(
-    [Parameter(Mandatory=$true)][ValidateSet('0.15.59')][string]$ExpectedVersion,
+    [Parameter(Mandatory=$true)][ValidateSet('0.15.61')][string]$ExpectedVersion,
     [Parameter(Mandatory=$true)][string]$StateRoot,
     [Parameter(Mandatory=$true)][string]$TarballPath,
     [Parameter(Mandatory=$true)][ValidatePattern('^[0-9a-f]{64}$')][string]$ExpectedTarballSha256,
@@ -9,6 +9,7 @@ param(
     [Parameter(Mandatory=$true)][string]$StderrPath,
     [Parameter(Mandatory=$true)][string]$MarkerReceiptPath,
     [Parameter(Mandatory=$true)][ValidatePattern('^[0-9a-f]{64}$')][string]$MarkerReceiptSha256,
+    [string]$HostCommandPinsJson = '[]',
     [switch]$Bootstrap
 )
 $ErrorActionPreference = 'Stop'
@@ -20,6 +21,18 @@ function Require-Absolute([string]$Value,[string]$Label) {
     return [IO.Path]::GetFullPath($Value)
 }
 function Quote([string]$Value) { '"' + $Value.Replace('"','\"') + '"' }
+function Validate-PinsJson([string]$Value) {
+    try { $pins = @($Value | ConvertFrom-Json) } catch { throw 'R154 host command pins JSON invalid' }
+    if ($pins.Count -gt 16) { throw 'R154 host command pin limit exceeded' }
+    $seen = @{}
+    foreach ($pin in $pins) {
+        if ([string]$pin -cnotmatch '^[A-Za-z0-9._-]{1,64}=[0-9a-f]{64}$') { throw 'R154 host command pin contract invalid' }
+        $id = ([string]$pin).Split('=')[0]
+        if ($seen.ContainsKey($id)) { throw 'R154 duplicate host command pin' }
+        $seen[$id] = $true
+    }
+}
+Validate-PinsJson $HostCommandPinsJson
 
 $StateRoot = Require-Absolute $StateRoot 'State root'
 $TarballPath = Require-Absolute $TarballPath 'Exact tarball'
@@ -65,6 +78,7 @@ if (-not $Bootstrap) {
         '-ExpectedManifestSha256',$ExpectedManifestSha256,'-ExpectedBootstrapSha256',$ExpectedBootstrapSha256,
         '-StdoutPath',(Quote $StdoutPath),'-StderrPath',(Quote $StderrPath),
         '-MarkerReceiptPath',(Quote $MarkerReceiptPath),'-MarkerReceiptSha256',$MarkerReceiptSha256)
+    if ($HostCommandPinsJson -cne '[]') { $arguments += @('-HostCommandPinsJson',(Quote $HostCommandPinsJson)) }
     $child = Start-Process -FilePath $powershell -ArgumentList $arguments -Verb RunAs -Wait -PassThru -WindowStyle Hidden
     if (Test-Path -LiteralPath $StdoutPath) { [Console]::Out.Write([IO.File]::ReadAllText($StdoutPath)) }
     if (Test-Path -LiteralPath $StderrPath) { [Console]::Error.Write([IO.File]::ReadAllText($StderrPath)) }
@@ -99,7 +113,7 @@ if ($LASTEXITCODE -ne 0) { throw 'R153 protected staging initial ACL normalizati
 & $icacls $prefix '/setowner' '*S-1-5-32-544' '/T' '/C' | Out-Null
 if ($LASTEXITCODE -ne 0) { throw 'R153 protected staging initial owner normalization failed' }
 
-$metadataUri = 'https://registry.npmjs.org/deadbyte-mcp/0.15.59'
+$metadataUri = 'https://registry.npmjs.org/deadbyte-mcp/0.15.61'
 $tagsUri = 'https://registry.npmjs.org/-/package/deadbyte-mcp/dist-tags'
 [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
 $metadata = Invoke-RestMethod -UseBasicParsing -Uri $metadataUri -Method Get -TimeoutSec 30
@@ -223,9 +237,11 @@ $preflight = ($preflightOutput -join "`n") | ConvertFrom-Json
 if ($preflight.state -ne 'AUTHORITY_UNVERIFIED' -or $preflight.subject_sha256 -notmatch '^[0-9a-f]{64}$') {
     throw "R153 protected migration not applicable: $($preflight.state)"
 }
-& $helper -Elevated -NodePath $node -DeployScript $deploy -StateRoot $StateRoot `
-    -StdoutPath $StdoutPath -StderrPath $StderrPath -MarkerReceiptPath $MarkerReceiptPath `
-    -MarkerReceiptSha256 $MarkerReceiptSha256 -PreflightSubjectSha256 $preflight.subject_sha256
+$helperArgs = @('-Elevated','-NodePath',$node,'-DeployScript',$deploy,'-StateRoot',$StateRoot,
+    '-StdoutPath',$StdoutPath,'-StderrPath',$StderrPath,'-MarkerReceiptPath',$MarkerReceiptPath,
+    '-MarkerReceiptSha256',$MarkerReceiptSha256,'-PreflightSubjectSha256',$preflight.subject_sha256)
+if ($HostCommandPinsJson -cne '[]') { $helperArgs += @('-HostCommandPinsJson',$HostCommandPinsJson) }
+& $helper @helperArgs
 $helperExit = $LASTEXITCODE
 try { Remove-Item -LiteralPath $prefix -Recurse -Force -ErrorAction Stop }
 catch { [Console]::Error.WriteLine('R153_STAGE_CLEANUP_WARNING: protected stage retained for operator reconciliation') }

package/scripts/deploy-r48.mjs

@@ -15,6 +15,7 @@ import {proveLegacyOfflineScopeRepair} from '../src/legacy-offline-policy-proof-
 import {claimWithOneTimeMigration,verifyNarrowedPolicyGeneration} from '../src/clean-activation-recovery-r153.mjs';
 import {verifyUacApproval,uacPointerSha256,protectedUacReceiptPath,requireTrustedUacInstallation} from '../src/uac-approval-contract-r153.mjs';
 import {inspectTrustedInstallation} from '../src/privileged-install-trust-r89.mjs';
+import {normalizeHostCommandPins,hostCommandPinArgs} from '../src/host-command-pins-r154.mjs';
 
 const root=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..');
 const state=path.resolve(process.env.DEADBYTE_STATE_ROOT||path.join(os.homedir(),'.deadbyte-mcp'));
@@ -24,11 +25,15 @@ const sleep=ms=>new Promise(resolve=>setTimeout(resolve,ms));
 function parseDeployArgs(argv){
   const out={preflight:false,approvalPath:null,approvalSha256:null,uacLegacyMigration:false,
     markerReceiptPath:null,markerReceiptSha256:null,migrationNonce:null,migrationIssuedAt:null,
-    migrationExpiresAt:null,uacApprovalPath:null,uacApprovalSha256:null};
+    migrationExpiresAt:null,uacApprovalPath:null,uacApprovalSha256:null,hostCommandPins:[]};
   for(let index=0;index<argv.length;index++){
     const arg=argv[index];
     if(arg==='--preflight'){if(out.preflight)throw new Error('duplicate --preflight');out.preflight=true;continue;}
     if(arg==='--uac-legacy-migration'){if(out.uacLegacyMigration)throw new Error('duplicate --uac-legacy-migration');out.uacLegacyMigration=true;continue;}
+    if(arg==='--host-command-pin'){
+      const value=String(argv[++index]??'');
+      out.hostCommandPins.push(value);continue;
+    }
     if(arg==='--marker-reconciliation-receipt'){
       if(out.markerReceiptPath)throw new Error('duplicate --marker-reconciliation-receipt');
       const value=argv[++index];if(!value)throw new Error('--marker-reconciliation-receipt requires a path');
@@ -70,6 +75,8 @@ function parseDeployArgs(argv){
   const uacFields=[out.migrationNonce,out.migrationIssuedAt,out.migrationExpiresAt,out.uacApprovalPath,out.uacApprovalSha256];
   if(out.uacLegacyMigration&&uacFields.some(value=>!value))throw new Error('UAC migration requires nonce, lifetime, and approval receipt');
   if(!out.uacLegacyMigration&&uacFields.some(value=>value))throw new Error('UAC migration arguments require --uac-legacy-migration');
+  out.hostCommandPins=normalizeHostCommandPins(out.hostCommandPins);
+  if(out.hostCommandPins.length>0&&(!out.uacLegacyMigration||out.preflight))throw new Error('explicit host repin requires the elevated UAC migration');
   return out;
 }
 const deployArgs=parseDeployArgs(process.argv.slice(2));
@@ -294,6 +301,7 @@ if(deployArgs.uacLegacyMigration){
     predecessorPolicySha256:markerReceipt.predecessor_policy_sha256,
     preflightSubjectSha256:preflight.subject_sha256,nodeSha256:await sha(process.execPath),
     deployScriptSha256:await sha(fileURLToPath(import.meta.url)),
+    hostCommandPins:deployArgs.hostCommandPins,
     nonce:deployArgs.migrationNonce,issuedAt:deployArgs.migrationIssuedAt,
     expiresAt:deployArgs.migrationExpiresAt
   });
@@ -313,6 +321,7 @@ const args=[
   '--bridge-root',bridgeRoot,'--bridge-script-sha256',await sha(bridgeScript),
   '--enable-machine-fs','--enable-observation','--enable-desktop','--enable-autonomous-supervisor','--recover-offline-predecessor'
 ];
+args.push(...hostCommandPinArgs(deployArgs.hostCommandPins));
 let result=null,verification=null,activationOutcomePath=null;
 let continuityEngine=null,continuityUpdateId=null;
 

package/scripts/issue-uac-migration-r153.mjs

@@ -9,6 +9,7 @@ import {parseActivePointer} from '../src/release-slot.mjs';
 import {inspectTrustedInstallation,privilegedEpochInstallFiles} from '../src/privileged-install-trust-r89.mjs';
 import {verifyMarkerReconciliationReceipt} from '../src/clean-activation-recovery-r153.mjs';
 import {createUacApproval,uacPointerSha256,protectedUacReceiptPath} from '../src/uac-approval-contract-r153.mjs';
+import {decodeHostCommandPins} from '../src/host-command-pins-r154.mjs';
 
 const root=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..');
 const sha=b=>createHash('sha256').update(b).digest('hex');
@@ -17,11 +18,15 @@ const hash=async f=>sha(await read(f));
 const fail=text=>{throw new Error('R153 UAC issuer rejected: '+text);};
 function args(argv){
   const expected=['--state-root','--marker-receipt','--marker-receipt-sha256','--preflight-subject-sha256'];
-  if(argv.length!==8||expected.some((key,i)=>argv[2*i]!==key))fail('unexpected arguments');
+  if(![8,10].includes(argv.length)||expected.some((key,i)=>argv[2*i]!==key)||
+     (argv.length===10&&argv[8]!=='--host-command-pins-json'))fail('unexpected arguments');
   const [state,receipt,receiptHash,preflight]=[argv[1],argv[3],argv[5],argv[7]];
   if(!path.win32.isAbsolute(state)||!path.win32.isAbsolute(receipt)||
      !/^[0-9a-f]{64}$/.test(receiptHash)||!/^[0-9a-f]{64}$/.test(preflight))fail('subject arguments invalid');
-  return {state:path.resolve(state),receipt:path.resolve(receipt),receiptHash,preflight};
+  let hostCommandPins=[];
+  try{hostCommandPins=decodeHostCommandPins(argv.length===10?argv[9]:'[]');}
+  catch(error){fail(error.message);}
+  return {state:path.resolve(state),receipt:path.resolve(receipt),receiptHash,preflight,hostCommandPins};
 }
 async function regular(file,label){const s=await lstat(file);if(!s.isFile()||s.isSymbolicLink())fail(label+' must be regular');return s;}
 async function absent(file,label){try{await lstat(file);fail(label+' present');}catch(e){if(e?.code!=='ENOENT')throw e;}}
@@ -33,7 +38,7 @@ async function main(){
     {encoding:'utf8',shell:false,windowsHide:true,timeout:12000});
   if(elevated.error||elevated.status!==0||String(elevated.stdout).trim().toLowerCase()!=='true')
     fail('explicit Windows UAC elevation required');
-  const {state,receipt,receiptHash,preflight}=args(process.argv.slice(2));
+  const {state,receipt,receiptHash,preflight,hostCommandPins}=args(process.argv.slice(2));
   if(path.dirname(receipt).toLowerCase()!==path.join(state,'evidence','legacy-migration').toLowerCase())
     fail('marker receipt path not in state evidence root');
   const issueFile=fileURLToPath(import.meta.url);
@@ -41,11 +46,12 @@ async function main(){
   const helperFile=path.join(root,'scripts','request-uac-migration-r153.ps1');
   const trust=await inspectTrustedInstallation([...privilegedEpochInstallFiles(root,process.execPath),
     issueFile,deployFile,helperFile,path.join(root,'package.json'),path.join(root,'MANIFEST.SHA256'),path.join(root,'RELEASE.json'),path.join(root,'src','uac-approval-contract-r153.mjs'),
-    path.join(root,'src','clean-activation-recovery-r153.mjs'),path.join(root,'src','legacy-offline-policy-proof-r146.mjs')]);
+    path.join(root,'src','clean-activation-recovery-r153.mjs'),path.join(root,'src','legacy-offline-policy-proof-r146.mjs'),
+    path.join(root,'src','host-command-pins-r154.mjs')]);
   if(trust.trusted!==true)fail('candidate not R89 protected');
   const pkg=JSON.parse((await read(path.join(root,'package.json'))).toString('utf8'));
   const rel=JSON.parse((await read(path.join(root,'RELEASE.json'))).toString('utf8'));
-  if(pkg.version!=='0.15.59'||rel.version!==pkg.version)fail('candidate release identity mismatch');
+  if(pkg.version!=='0.15.61'||rel.version!==pkg.version)fail('candidate release identity mismatch');
   const pointer=parseActivePointer((await read(path.join(state,'active-release.json'))).toString('utf8'));
   if(pointer.version!=='0.15.45'||rel.parent?.release_id!==pointer.release_id||
     rel.parent?.manifest_sha256!==pointer.manifest_sha256||
@@ -85,6 +91,7 @@ async function main(){
     predecessorPointerSha256:uacPointerSha256(pointer),
     predecessorPolicySha256:policies,preflightSubjectSha256:preflight,
     nodeSha256:await hash(process.execPath),deployScriptSha256:await hash(deployFile),
+    hostCommandPins,
     nonce,issuedAt,expiresAt});
   // The strict installation manifest disallows unmanifested files. A receipt
   // under root would turn an otherwise valid candidate into an invalid tree.

package/scripts/r153-prepublish-identity.mjs

@@ -6,9 +6,9 @@ import {fileURLToPath} from 'node:url';
 const defaultRoot=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..');
 const hex64=/^[0-9a-f]{64}$/;
 const EXPECTED=Object.freeze({
-  candidateVersion:'0.15.59', train:'R153',
-  sourceVersion:'0.15.58',
-  sourceSha256:'4bc53cfa6b3890b5749066cb507e8773b36d6c255192a8973dadb8546a39822e',
+  candidateVersion:'0.15.61', train:'R154',
+  sourceVersion:'0.15.60',
+  sourceSha256:'b85f735f4c8be56f97ea5c78f0cc48583e8d5708a704c903596f5720e36ace83',
   runtimeVersion:'0.15.45',
   runtimeReleaseId:'v0.15.45-34aa8d1241cfb8bf',
   runtimeManifest:'34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc',

package/scripts/request-uac-migration-r153.ps1

@@ -7,6 +7,7 @@ param(
     [Parameter(Mandatory=$true)][string]$MarkerReceiptPath,
     [Parameter(Mandatory=$true)][ValidatePattern('^[0-9a-f]{64}$')][string]$MarkerReceiptSha256,
     [ValidatePattern('^[0-9a-f]{64}$')][string]$PreflightSubjectSha256,
+    [string]$HostCommandPinsJson = '[]',
     [switch]$Elevated
 )
 $ErrorActionPreference = 'Stop'
@@ -20,6 +21,19 @@ function Require-AbsoluteFile([string]$Value,[string]$Label) {
     return $item.FullName
 }
 function Full([string]$Value) { [IO.Path]::GetFullPath($Value).TrimEnd('\') }
+function Validate-PinsJson([string]$Value) {
+    try { $pins = @($Value | ConvertFrom-Json) } catch { throw 'R154 host command pins JSON invalid' }
+    if ($pins.Count -gt 16) { throw 'R154 host command pin limit exceeded' }
+    $seen = @{}
+    foreach ($pin in $pins) {
+        if ([string]$pin -cnotmatch '^[A-Za-z0-9._-]{1,64}=[0-9a-f]{64}$') { throw 'R154 host command pin contract invalid' }
+        $id = ([string]$pin).Split('=')[0]
+        if ($seen.ContainsKey($id)) { throw 'R154 duplicate host command pin' }
+        $seen[$id] = $true
+    }
+    return $pins
+}
+$HostCommandPins = @(Validate-PinsJson $HostCommandPinsJson)
 $NodePath = Require-AbsoluteFile $NodePath 'Node executable'
 $DeployScript = Require-AbsoluteFile $DeployScript 'Deploy script'
 $MarkerReceiptPath = Require-AbsoluteFile $MarkerReceiptPath 'Marker reconciliation receipt'
@@ -99,6 +113,7 @@ if (-not $Elevated) {
     # -Verb RunAs is the UseShellExecute parameter set. PowerShell 5.1 rejects
     # -RedirectStandardOutput/-RedirectStandardError in that same Start-Process.
     # The elevated child writes bounded, no-clobber evidence instead.
+    if ($HostCommandPinsJson -cne '[]') { $arguments += @('-HostCommandPinsJson',('"' + $HostCommandPinsJson.Replace('"','\"') + '"')) }
     $child = Start-Process -FilePath $powershell -ArgumentList $arguments -Verb RunAs -Wait -PassThru -WindowStyle Hidden
     if (Test-Path -LiteralPath $StdoutPath) { [Console]::Out.Write([IO.File]::ReadAllText($StdoutPath)) }
     if (Test-Path -LiteralPath $StderrPath) { [Console]::Error.Write([IO.File]::ReadAllText($StderrPath)) }
@@ -121,7 +136,7 @@ try {
     try {
         $issuerOutput = @(& $NodePath $issuerScript '--state-root' $env:DEADBYTE_STATE_ROOT `
             '--marker-receipt' $MarkerReceiptPath '--marker-receipt-sha256' $MarkerReceiptSha256 `
-            '--preflight-subject-sha256' $PreflightSubjectSha256 2>&1)
+            '--preflight-subject-sha256' $PreflightSubjectSha256 '--host-command-pins-json' $HostCommandPinsJson 2>&1)
         $issuerExit = $LASTEXITCODE
     } finally { $ErrorActionPreference = $priorErrorAction }
     $issuerText = (@($issuerOutput) | ForEach-Object { [string]$_ }) -join "`n"
@@ -135,14 +150,16 @@ try {
     $priorErrorAction = $ErrorActionPreference
     $ErrorActionPreference = 'Continue'
     try {
-        $deployOutput = @(& $NodePath $DeployScript '--uac-legacy-migration' `
-            '--marker-reconciliation-receipt' $MarkerReceiptPath `
-            '--marker-reconciliation-receipt-sha256' $MarkerReceiptSha256 `
-            '--migration-nonce' $issued.nonce `
-            '--migration-issued-at' $issued.issued_at_utc `
-            '--migration-expires-at' $issued.expires_at_utc `
-            '--uac-approval-receipt' $issued.receipt_path `
-            '--uac-approval-receipt-sha256' $issued.receipt_sha256 2>&1)
+        $deployArgs = @('--uac-legacy-migration',
+            '--marker-reconciliation-receipt',$MarkerReceiptPath,
+            '--marker-reconciliation-receipt-sha256',$MarkerReceiptSha256,
+            '--migration-nonce',$issued.nonce,
+            '--migration-issued-at',$issued.issued_at_utc,
+            '--migration-expires-at',$issued.expires_at_utc,
+            '--uac-approval-receipt',$issued.receipt_path,
+            '--uac-approval-receipt-sha256',$issued.receipt_sha256)
+        foreach ($pin in $HostCommandPins) { $deployArgs += @('--host-command-pin',[string]$pin) }
+        $deployOutput = @(& $NodePath $DeployScript @deployArgs 2>&1)
         $deployExit = $LASTEXITCODE
     } finally { $ErrorActionPreference = $priorErrorAction }
     $deployText = (@($deployOutput) | ForEach-Object { [string]$_ }) -join "`n"

package/scripts/verify-protected-stage-r153.mjs

@@ -14,6 +14,7 @@ const files=[...privilegedEpochInstallFiles(root,process.execPath),
   path.join(root,'package.json'),path.join(root,'MANIFEST.SHA256'),path.join(root,'RELEASE.json'),
   path.join(root,'src','uac-approval-contract-r153.mjs'),
   path.join(root,'src','clean-activation-recovery-r153.mjs'),
+  path.join(root,'src','host-command-pins-r154.mjs'),
   path.join(root,'src','legacy-offline-policy-proof-r146.mjs')];
 const verdict=await inspectTrustedInstallation(files);
 if(verdict.trusted!==true)throw new Error('R153 protected stage trust rejected');

package/src/activation-lock-r65.mjs

@@ -85,6 +85,41 @@ async function isSafeTerminalActivation(outcome,lock,stateRoot){
   return true;
 }
 
+async function isSafeSignedPreconditionReject(outcome,lock,stateRoot){
+  if(!outcomeMatchesLock(outcome,lock)||outcome?.outcome?.state!=='ACTIVATION_OUTCOME_UNKNOWN'||
+    outcome.update_id!==null||outcome.state_path!==null||outcome.continuity_update_id!==null||
+    typeof outcome.candidate_version!=='string'||!HEX64.test(String(outcome.candidate_manifest_sha256??''))||
+    typeof outcome.predecessor_release_id!=='string')return false;
+  const lockTime=Date.parse(lock.created_at_utc),observedTime=Date.parse(outcome.observed_at_utc);
+  if(!Number.isFinite(observedTime)||observedTime<lockTime||observedTime-lockTime>120000)return false;
+  const updatesDir=path.join(path.resolve(stateRoot),'evidence','updates');
+  let current,publicKey,files;
+  try{
+    current=JSON.parse(await readFile(path.join(stateRoot,'active-release.json'),'utf8'));
+    publicKey=createPublicKey(await readFile(path.join(stateRoot,'trust','ed25519-public.pem')));
+    files=await readdir(updatesDir,{withFileTypes:true});
+  }catch{return false;}
+  if(publicKey.asymmetricKeyType!=='ed25519'||current?.release_id!==outcome.predecessor_release_id)return false;
+  const prefix='r27-'+outcome.candidate_manifest_sha256.slice(0,16)+'-';
+  const candidates=files.filter(f=>f.name.startsWith(prefix)&&/^r27-[a-f0-9]{16}-[a-z0-9-]+$/.test(f.name));
+  if(candidates.length!==1||!candidates[0].isDirectory()||candidates[0].isSymbolicLink())return false;
+  let signed;
+  try{signed=JSON.parse(await readFile(path.join(updatesDir,candidates[0].name,'failure-receipt.json'),'utf8'));}
+  catch{return false;}
+  if(!verifySlotUpdateEnvelope(signed,publicKey))return false;
+  const body=signed.body,failedTime=Date.parse(body?.failed_at_utc??'');
+  if(body?.schema!=='deadbyte.r27-slot-update-failure.v1'||
+     body.update_id!==candidates[0].name||body.release_version!==outcome.candidate_version||
+     body.candidate_manifest_sha256!==outcome.candidate_manifest_sha256||
+     body.result!=='PRECONDITION_REJECTED'||body.phase!=='initial'||
+     body.attempted_pointer!==null||body.rollback?.attempted!==false||
+     !Array.isArray(body.rollback?.errors)||body.rollback.errors.length!==0||
+     !/^host command 'powershell_script' executable pin drift detected;/.test(String(body.error?.message??''))||
+     !Number.isFinite(failedTime)||failedTime<lockTime||failedTime>observedTime||
+     !samePointerIdentity(body.prior_pointer,current))return false;
+  return true;
+}
+
 async function findTerminalOutcome(updatesDir,lock,stateRoot){
   const names=(await readdir(updatesDir)).filter(name=>/^r65-activation-outcome-.*\.json$/.test(name)).sort();
   if(names.length>MAX_OUTCOME_SCAN)throw new Error('activation outcome inventory exceeds safe scan budget');
@@ -95,7 +130,8 @@ async function findTerminalOutcome(updatesDir,lock,stateRoot){
     catch{continue;}
     if(value?.claim_operation_id!==lock.operation_id)continue;
     if(value?.preflight_subject_sha256!==lock.subject_sha256){foreign=true;continue;}
-    if(isSafePreMutationReject(value,lock)||await isSafeTerminalActivation(value,lock,stateRoot))matched=true;
+    if(isSafePreMutationReject(value,lock)||await isSafeTerminalActivation(value,lock,stateRoot)||
+       await isSafeSignedPreconditionReject(value,lock,stateRoot))matched=true;
     else unknown=true;
   }
   return {matched,foreign,unknown};

package/src/clean-activation-recovery-r153.mjs

@@ -32,7 +32,7 @@ export function classifyLegacyMigration(input){
   if(!input.pointer||input.pointer.version!=='0.15.45'||
     !HEX64.test(String(input.pointer.manifest_sha256??''))||!HEX64.test(String(input.pointer.generation_manifest_sha256??'')))
     return reject('predecessor identity invalid',subject);
-  if(!input.candidate||input.candidate.version!=='0.15.59'||
+  if(!input.candidate||input.candidate.version!=='0.15.61'||
     !HEX64.test(String(input.candidate.manifest_sha256??''))||!HEX64.test(String(input.candidate.tarball_sha256??'')))
     return reject('candidate identity invalid',subject);
   if(PLANES.some(plane=>!HEX64.test(String(input.policySha256?.[plane]??''))))

package/src/deadbyte-cli.mjs

@@ -27,6 +27,7 @@ import {acquireForegroundSessionLock} from './foreground-session-lock.mjs';
 import { AUTHORITY_PLANES, authorityVector, authorityRestorePlan, parseAuthorityObservation, assertAuthorityVector, assertRuntimeReadyObservation, authorityBanner } from './remote-authority.mjs';
 import { decodeRemoteLogBytes, boundedRemoteDiagnostic, readRemoteLogAppend } from './remote-log-decode-r60.mjs';
 import {reconcileStaleMarker,resumeMarkerReconciliation,recoverPublishedMarkerTerminal} from './clean-activation-recovery-r153.mjs';
+import {normalizeHostCommandPins,encodeHostCommandPins} from './host-command-pins-r154.mjs';
 
 const REMOTE_COMMANDS=new Set([
   'menu','start','resume','park','stop','restart','status','url','test','fulltest','toggle','clean','machinetest',
@@ -114,7 +115,7 @@ async function reportVersionCoherence(root,{displayMode='ascii'}={}){
   writeRemote(process.stderr,`${remoteTag('warn',displayMode)} VERSION SKEW: CLI package ${DEADBYTE_VERSION}; active runtime ${active.version} (${active.release_id})\n`,displayMode);
   return active;
 }
-async function synchronizeForegroundRuntime(ctx,{displayMode='unicode',migrationContext=null}={}){
+async function synchronizeForegroundRuntime(ctx,{displayMode='unicode',migrationContext=null,hostCommandPins=[]}={}){
   const packageManifestSha256=createHash('sha256').update(await readFile(path.join(CURRENT_PACKAGE_ROOT,'MANIFEST.SHA256'))).digest('hex');
   return ensureRuntimeCoherence({
     cliVersion:DEADBYTE_VERSION,
@@ -181,7 +182,8 @@ async function synchronizeForegroundRuntime(ctx,{displayMode='unicode',migration
             '-ExpectedTarballSha256',artifactSha256,'-ExpectedManifestSha256',packagedManifestSha256,
             '-ExpectedBootstrapSha256',bootstrapMatch[1],
             '-StdoutPath',stdoutPath,'-StderrPath',stderrPath,
-            '-MarkerReceiptPath',migrationContext.receipt_path,'-MarkerReceiptSha256',migrationContext.receipt_sha256],{
+            '-MarkerReceiptPath',migrationContext.receipt_path,'-MarkerReceiptSha256',migrationContext.receipt_sha256,
+            ...(hostCommandPins.length?['-HostCommandPinsJson',encodeHostCommandPins(hostCommandPins)]:[])],{
             cwd:CURRENT_PACKAGE_ROOT,env:windowsPowerShellEnvironment(process.env),encoding:'utf8',windowsHide:true,shell:false,
             timeout:REMOTE_UPDATE_TIMEOUT_MS,maxBuffer:16*1024*1024
           });
@@ -743,7 +745,7 @@ async function releaseRemoteSession(ctx,marker,{displayMode='unicode'}={}){
   if(deletePinnedRemoteMarker(remoteSessionMarker(ctx.root),snapshot.sha256)!=='REMOVED')
     throw new Error('remote session ownership marker replaced before native deletion; marker retained');
 }
-async function runRemoteSession({resumeCursor=null,verbose=false,trace=false,filterExpression='',mode='default'}={}){
+async function runRemoteSession({resumeCursor=null,verbose=false,trace=false,filterExpression='',mode='default',hostCommandPins=[]}={}){
   const display=prepareRemoteConsole();
   const displayMode=display.mode;
   const ctx=await remoteContext();
@@ -755,7 +757,7 @@ async function runRemoteSession({resumeCursor=null,verbose=false,trace=false,fil
     startupLock.assertHeld();
     const migrationContext=await recoverRemoteSession(ctx,{displayMode});
     startupLock.assertHeld();
-    await synchronizeForegroundRuntime(ctx,{displayMode,migrationContext});
+    await synchronizeForegroundRuntime(ctx,{displayMode,migrationContext,hostCommandPins});
     startupLock.assertHeld();
     marker=await claimRemoteSession(ctx);
     startupLock.assertHeld();
@@ -869,11 +871,16 @@ async function runRemoteSession({resumeCursor=null,verbose=false,trace=false,fil
 }
 async function runRemote(args){
   let verbose=false,trace=false,filterExpression='',resumeCursor=null,mode='default';
+  const hostCommandPinValues=[];
   const positional=[];
   for(let index=0;index<args.length;index++){
     const arg=args[index];
     if(arg==='--verbose'||arg==='-v'){verbose=true;continue;}
     if(arg==='--trace'){trace=true;continue;}
+    if(arg==='--host-command-pin'){
+      const value=String(args[++index]??'');
+      hostCommandPinValues.push(value);continue;
+    }
     if(['--operator','--desktop','--host','--full'].includes(arg)){
       if(mode!=='default') throw new Error('remote authority modes are mutually exclusive');
       mode=arg.slice(2);continue;
@@ -890,8 +897,11 @@ async function runRemote(args){
     }
     positional.push(arg);
   }
-  const presentation=verbose||trace||Boolean(filterExpression)||resumeCursor!==null||mode!=='default';
-  if(positional.length===0){await runRemoteSession({resumeCursor,verbose,trace,filterExpression,mode});return;}
+  let hostCommandPins;
+  try{hostCommandPins=normalizeHostCommandPins(hostCommandPinValues);}
+  catch(error){throw new Error(`remote --host-command-pin ${error.message}`);}
+  const presentation=verbose||trace||Boolean(filterExpression)||resumeCursor!==null||mode!=='default'||hostCommandPins.length>0;
+  if(positional.length===0){await runRemoteSession({resumeCursor,verbose,trace,filterExpression,mode,hostCommandPins});return;}
   if(presentation) throw new Error('remote presentation flags are valid only for foreground session');
   if(positional.length>1) throw new Error('remote accepts one controller command');
   const command=positional[0];if(!REMOTE_COMMANDS.has(command)) throw new Error(`unsupported remote command '${command}'`);

package/src/host-command-pins-r154.mjs

@@ -0,0 +1,34 @@
+const PIN=/^([A-Za-z0-9._-]{1,64})=([0-9a-f]{64})$/;
+const LIMIT=16;
+const REPINNABLE=new Set(['powershell_script','powershell_inline','cmd_script','cmd_inline','node_script','node_inline']);
+
+export function normalizeHostCommandPins(values=[]){
+  if(!Array.isArray(values)||values.length>LIMIT)throw new Error(`host command pin limit is ${LIMIT}`);
+  const seen=new Set(),pins=[];
+  for(const value of values){
+    const match=PIN.exec(String(value??''));
+    if(!match)throw new Error('host command pin contract requires command_id=lowercase_sha256');
+    const [,command_id,sha256]=match;
+    if(!REPINNABLE.has(command_id))throw new Error(`host command '${command_id}' is not repinnable`);
+    if(seen.has(command_id))throw new Error(`duplicate host command pin '${command_id}'`);
+    seen.add(command_id);pins.push(Object.freeze({command_id,sha256}));
+  }
+  pins.sort((a,b)=>a.command_id<b.command_id?-1:a.command_id>b.command_id?1:0);
+  return Object.freeze(pins);
+}
+
+export function encodeHostCommandPins(pins=[]){
+  return JSON.stringify(normalizeHostCommandPins(pins.map(pin=>`${pin.command_id}=${pin.sha256}`))
+    .map(pin=>`${pin.command_id}=${pin.sha256}`));
+}
+
+export function decodeHostCommandPins(encoded='[]'){
+  let values;
+  try{values=JSON.parse(String(encoded));}catch{throw new Error('host command pins JSON invalid');}
+  return normalizeHostCommandPins(values);
+}
+
+export function hostCommandPinArgs(pins=[]){
+  return normalizeHostCommandPins(pins.map(pin=>`${pin.command_id}=${pin.sha256}`))
+    .flatMap(pin=>['--host-command-pin',`${pin.command_id}=${pin.sha256}`]);
+}

package/src/uac-approval-contract-r153.mjs

@@ -3,6 +3,7 @@
 // Verify it only when running elevated from an independently R89-verified install.
 import {createHash} from 'node:crypto';
 import path from 'node:path';
+import {normalizeHostCommandPins} from './host-command-pins-r154.mjs';
 
 const HEX64=/^[0-9a-f]{64}$/;
 const PLANES=['process','coding','autonomous','desktop','host'];
@@ -10,7 +11,7 @@ const ALL_DISARMED=Object.freeze(Object.fromEntries(PLANES.map(p=>[p,false])));
 const TIME=/^\d{4}-\d\d-\d\dT\d\d:\d\d:\d\d\.\d{3}Z$/;
 const FIELDS=['schema','action','state_root','candidate_root','candidate_version','candidate_manifest_sha256',
   'tarball_sha256','marker_receipt_sha256','predecessor_pointer_sha256','predecessor_policy_sha256',
-  'preflight_subject_sha256','node_sha256','deploy_script_sha256','nonce','issued_at_utc',
+  'preflight_subject_sha256','node_sha256','deploy_script_sha256','host_command_pins','nonce','issued_at_utc',
   'expires_at_utc','allowed_authority_after','subject_sha256'];
 function canonical(value){
   if(value===null)return 'null';
@@ -58,7 +59,7 @@ export function uacReceiptSubject(input){
   const candidate=windowsAbsolute(input.candidateRoot,'candidate root');
   if(!candidate.startsWith('c:\\program files\\')||candidate==='c:\\program files\\')
     throw new Error('UAC migration requires a protected candidate installation');
-  if(input.candidateVersion!=='0.15.59')throw new Error('UAC migration candidate identity unsupported');
+  if(input.candidateVersion!=='0.15.61')throw new Error('UAC migration candidate identity unsupported');
   const hashes=['candidateManifestSha256','tarballSha256','markerReceiptSha256','predecessorPointerSha256',
     'preflightSubjectSha256','nodeSha256','deployScriptSha256','nonce'];
   for(const key of hashes)if(!HEX64.test(String(input[key]??'')))throw new Error('UAC approval hash/nonce invalid: '+key);
@@ -68,6 +69,8 @@ export function uacReceiptSubject(input){
     throw new Error('UAC predecessor policy identity incomplete');
   const issued=time(input.issuedAt,'issue time'),expires=time(input.expiresAt,'expiry time');
   if(expires<=issued||expires-issued>600_000)throw new Error('UAC consent lifetime invalid');
+  const hostCommandPins=normalizeHostCommandPins((input.hostCommandPins??[]).map(pin=>
+    typeof pin==='string'?pin:`${pin?.command_id??''}=${pin?.sha256??''}`));
   return Object.freeze({schema:'deadbyte.r153-uac-approval.v1',action:'narrow_legacy_policy_and_activate',
     state_root:root,candidate_root:candidate,candidate_version:input.candidateVersion,
     candidate_manifest_sha256:input.candidateManifestSha256,tarball_sha256:input.tarballSha256,
@@ -75,7 +78,7 @@ export function uacReceiptSubject(input){
     predecessor_pointer_sha256:input.predecessorPointerSha256,
     predecessor_policy_sha256:Object.freeze(Object.fromEntries(PLANES.map(p=>[p,policies[p]]))),
     preflight_subject_sha256:input.preflightSubjectSha256,node_sha256:input.nodeSha256,
-    deploy_script_sha256:input.deployScriptSha256,nonce:input.nonce,
+    deploy_script_sha256:input.deployScriptSha256,host_command_pins:hostCommandPins,nonce:input.nonce,
     issued_at_utc:input.issuedAt,expires_at_utc:input.expiresAt,
     allowed_authority_after:Object.freeze({...ALL_DISARMED})});
 }

package/src/version.mjs

@@ -1,4 +1,4 @@
-export const DEADBYTE_VERSION = '0.15.59';
+export const DEADBYTE_VERSION = '0.15.61';
 export const MCP_PROTOCOL_VERSION = '2026-07-28';
 export const RECEIPT_SCHEMA_V1 = 'deadbyte.receipt.v1';
 export const RECEIPT_SCHEMA_V2 = 'deadbyte.receipt.v2';

package/test/r130-release-security-contract.test.mjs

@@ -13,15 +13,15 @@ test('R130 security patch has a new immutable package identity and truthful sour
     read('SBOM.cdx.json'),read('package-lock.json'),read('TEST-MATRIX.json')]);
   assert.equal(pkg.name,'deadbyte-mcp');
   for(const actual of [pkg.version,release.version,provenance.version,matrix.version,bom.metadata.component.version,lock.version,lock.packages[''].version,DEADBYTE_VERSION])
-    assert.equal(actual,'0.15.59');
-  assert.equal(release.train,'R153');
-  assert.equal(matrix.train,'R153');
-  assert.equal(release.source_predecessor.version,'0.15.58');
-  assert.match(release.source_predecessor.source_path,/0\.15\.58/);
+    assert.equal(actual,'0.15.61');
+  assert.equal(release.train,'R154');
+  assert.equal(matrix.train,'R154');
+  assert.equal(release.source_predecessor.version,'0.15.60');
+  assert.match(release.source_predecessor.source_path,/0\.15\.60/);
   assert.equal(release.runtime_predecessor.version,'0.15.45');
-  assert.equal(provenance.source_predecessor_tarball_sha256,'4bc53cfa6b3890b5749066cb507e8773b36d6c255192a8973dadb8546a39822e');
-  assert.equal(provenance.source_predecessor_version,'0.15.58');
-  assert.equal(provenance.source_predecessor_manifest_file_sha256,'ec621a8a16f264f8824aa4644c914aca8f6ce57cb3578f5bce8acf2ac77fcc18');
+  assert.equal(provenance.source_predecessor_tarball_sha256,'b85f735f4c8be56f97ea5c78f0cc48583e8d5708a704c903596f5720e36ace83');
+  assert.equal(provenance.source_predecessor_version,'0.15.60');
+  assert.equal(provenance.source_predecessor_manifest_file_sha256,'2a19c9da7f11eb831dfb24ba6c6d9789e25a373cea2f3a25ff21d460e07fba36');
   assert.equal(pkg.dependencies['@modelcontextprotocol/client'],'2.3.1');
   assert.equal(pkg.dependencies['@modelcontextprotocol/server'],'2.3.1');
   for(const dep of ['@modelcontextprotocol/client','@modelcontextprotocol/server'])

package/test/r132-release-identity.test.mjs

@@ -15,13 +15,13 @@ test('R144 package identities, R132 historic evidence and published predecessor
   for(const value of [pkg.version,lock.version,lock.packages[''].version,release.version,prov.version,bom.metadata.component.version,matrix.version,DEADBYTE_VERSION]){
     assert.equal(value,pkg.version);
   }
-  assert.equal(release.train,'R153');
-  assert.equal(matrix.train,'R153');
-  assert.equal(release.source_predecessor.version,'0.15.58');
-  assert.match(release.source_predecessor.source_path,/0\.15\.58/);
-  assert.equal(prov.source_predecessor_version,'0.15.58');
-  assert.equal(prov.source_predecessor_manifest_file_sha256,'ec621a8a16f264f8824aa4644c914aca8f6ce57cb3578f5bce8acf2ac77fcc18');
-  assert.equal(prov.parent_tarball_sha256,'4bc53cfa6b3890b5749066cb507e8773b36d6c255192a8973dadb8546a39822e');
+  assert.equal(release.train,'R154');
+  assert.equal(matrix.train,'R154');
+  assert.equal(release.source_predecessor.version,'0.15.60');
+  assert.match(release.source_predecessor.source_path,/0\.15\.60/);
+  assert.equal(prov.source_predecessor_version,'0.15.60');
+  assert.equal(prov.source_predecessor_manifest_file_sha256,'2a19c9da7f11eb831dfb24ba6c6d9789e25a373cea2f3a25ff21d460e07fba36');
+  assert.equal(prov.parent_tarball_sha256,'b85f735f4c8be56f97ea5c78f0cc48583e8d5708a704c903596f5720e36ace83');
   assert.equal(prov.parent_registry_tarball_sha1,'04cc1a1e80bcb7062ac39eee6b7bab70edd5d8c3');
   assert.equal(release.runtime_predecessor.version,'0.15.45');
   assert.equal(prov.runtime_predecessor.release_id,release.runtime_predecessor.release_id);

package/test/r153-clean-activation-recovery.test.mjs

@@ -22,7 +22,7 @@ const planes=['process','coding','autonomous','desktop','host'];
 const base=()=>({
   stateRoot:'C:\\Users\\owner\\.deadbyte-mcp',
   pointer:{release_id:'v0.15.45-parent',version:'0.15.45',manifest_sha256:'1'.repeat(64),generation_manifest_sha256:'2'.repeat(64)},
-  candidate:{version:'0.15.59',manifest_sha256:'3'.repeat(64),tarball_sha256:'4'.repeat(64)},
+  candidate:{version:'0.15.61',manifest_sha256:'3'.repeat(64),tarball_sha256:'4'.repeat(64)},
   observation:{state:'OFFLINE',local_ready:false,bridge:{alive:false},core:{alive:false},cloud:{alive:false},supervisor:{running:false},
     authority:Object.fromEntries(planes.map(plane=>[plane,{configured:true,armed:false,reason:plane==='autonomous'?'unverified':'disarmed'}]))},
   policySha256:Object.fromEntries(planes.map((plane,index)=>[plane,String(index+5).repeat(64)])),
@@ -55,7 +55,7 @@ test('R153 RED: UAC subject binds candidate, predecessor, policy, marker, state
     issuedAt:'2026-10-23T16:00:00.000Z',expiresAt:'2026-10-23T16:10:00.000Z'});
   assert.equal(subject.action,'narrow_legacy_policy_and_activate');
   assert.equal(subject.marker_sha256,HEX);
-  assert.equal(subject.candidate.version,'0.15.59');
+  assert.equal(subject.candidate.version,'0.15.61');
   assert.equal(subject.nonce,'b'.repeat(64));
   assert.deepEqual(subject.allowed_authority_after,Object.fromEntries(planes.map(plane=>[plane,false])));
 });

package/test/r153-prepublish-identity.test.mjs

@@ -29,7 +29,7 @@ test('R153 rejects runtime predecessor or parent drift',()=>{
 test('R153 rejects version / train / bridge identity drift',()=>{
   const state=copy();state.pkg.version='0.15.56';
   assert.throws(()=>verifyR153Lineage(state),/package version/);
-  const state2=copy();state2.release.train='R154';
+  const state2=copy();state2.release.train='R153';
   assert.throws(()=>verifyR153Lineage(state2),/train/);
   const state3=copy();state3.bridge.version='0.15.45';
   assert.throws(()=>verifyR153Lineage(state3),/bridge version/);

package/test/r153-r60-host-repin-e2e-contract.test.mjs

@@ -0,0 +1,30 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {readFile} from 'node:fs/promises';
+import {spawnSync} from 'node:child_process';
+import {fileURLToPath} from 'node:url';
+const root=new URL('../',import.meta.url);
+const source=async path=>readFile(new URL(path,root),'utf8');
+
+test('R60 explicit host-command pin is owner supplied and forwarded end to end',async()=>{
+  const [cli,bootstrap,helper,deploy]=await Promise.all([
+    source('src/deadbyte-cli.mjs'),source('scripts/bootstrap-uac-migration-r153.ps1'),
+    source('scripts/request-uac-migration-r153.ps1'),source('scripts/deploy-r48.mjs')]);
+  assert.match(cli,/arg===['"]--host-command-pin['"]/, 'remote CLI must parse a bounded owner-supplied pin');
+  assert.match(cli,/hostCommandPin/, 'remote must preserve the parsed pin');
+  assert.match(bootstrap,/HostCommandPin/, 'protected UAC bootstrap must receive the owner pin');
+  assert.match(helper,/HostCommandPin/, 'protected helper must carry the pin without shell injection');
+  assert.match(deploy,/hostCommandPin/, 'deploy must pass pin to R27 before activation');
+  assert.match(deploy,/explicit host repin requires the elevated UAC migration/);
+});
+
+test('R60 malformed, unrelated, and duplicate pins fail before remote context or activation',()=>{
+  const cli=fileURLToPath(new URL('../src/deadbyte-cli.mjs',import.meta.url));
+  const cases=[['powershell_script=notahash'],['other_command='+'a'.repeat(64)],
+    ['powershell_script='+'a'.repeat(64),'--host-command-pin','powershell_script='+'b'.repeat(64)]];
+  for(const args of cases){
+    const p=spawnSync(process.execPath,[cli,'remote','--host-command-pin',...args],{encoding:'utf8',timeout:8000});
+    assert.equal(p.status,1,JSON.stringify(args));
+    assert.match(p.stderr,/remote --host-command-pin/);
+  }
+});