deadbyte-mcp 0.15.60 → 0.15.61

package/MANIFEST.SHA256

@@ -30,7 +30,7 @@ c814771dddac8bfb184250b868ddb6ab9f5e0e43613c04c3ed8abe09324ec4db  bin/deadbyte-n
 daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4  bin/deadbyte-process-host.exe
 b55d2c4490dfb875d40f29a69df2addc5d579991cb7d094674c04d369dfcfac3  bin/deadbyte-tunnel-host.exe
 f0ce7acb1e41325cef8b6789f95bd78b6a6107423773eace57a12b49faa55095  bin/WORKER-REGISTRY.txt
-f5ccdaca2662a03dbf2aca4e00e3ba3ee6866f3db93371936115f85d6ad5c754  bridge/package.json
+6bb7654cb267a7a031683e4a54ff9dc6a5d04cc5d967c20b2034809b3fbcb310  bridge/package.json
 f99413d82f84c808f52d5b8696c190a9142dd08f517f5ec3e442f0769402d189  bridge/src/bridge-health-r59.mjs
 fa0dcc4cde9c03e978c9f9dd24b62afa83f49bdada1f42ead544a9a17edd332f  bridge/src/bridge.mjs
 471f41c84c5b339cd81a708a4f36d4470e614946817ad2f9fca295dde2c83fb6  bridge/src/canonical-json-r60.mjs
@@ -671,6 +671,7 @@ a7d00bfd54525bc694b6e32f64c7ebcf5e6b7ae3657be5cc12767bce74654a47  node_modules/t
 7b6976eec43edfa68b79a459dd089c56b7a395916dbf1a01bd11e6d86e12128f  node_modules/typescript/SECURITY.md
 1af3c68039c57e539422da82a4faada506ce6d0ea6f90e0b699d02dbcdb7a90c  node_modules/typescript/ThirdPartyNoticeText.txt
 055f0ac4eed1a1591d033d59462972968bf3483b4cc07e163589569c0fb999f0  node_modules/which/bin/node-which
+89bc599ca0b3a119d711c62855b2e3619b734bf371ef55dcc049454313f9904e  node_modules/which/CHANGELOG.md
 4ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b  node_modules/which/LICENSE
 43010039ed5e89f7186960be682b3cb5cda5ab6cdfb06cbfd4f081cf0e7b4260  node_modules/which/package.json
 0c91f714f46006bc9a543e629a3ce3b63700fa8cfbe7c6310a0bcff2738356dd  node_modules/which/README.md
@@ -1393,8 +1394,8 @@ db605a698f917c4006462596e6526fe6a9c6eff9b8409e8472fe545d4b70027c  node_modules/z
 f67a25ded944912bd4621b68df17c7c70a52aae117278c076c0aabbc32a3abba  node_modules/zod/v4/mini/schemas.d.ts
 51b3a7869df2d3a1bd98acb9d5b6a61bbccc7653d7a3d8fca7f0e0db7e84e284  node_modules/zod/v4/mini/schemas.js
 3e3125b5a537a24c3632c1c5c09640ce7bcb3935901b127ad8ae3c37a27f133f  node_modules/zod/v4/package.json
-7ce943961080ef5036c7bacd0561ee6bfd5e4d1e7f31aef68cd8fb631e0c4fac  package.json
-57d2619e30cc63924ad3b433d4760e16323de898fdcccbbb336009ce0c1482c9  PROVENANCE.json
+951c879d14621abc219ebc63bd66037cd07a8b5da24cd468737a21a6363b1789  package.json
+8fa037a55cac1d477fe7b9a259ad396aedb104adc980231efc9926616b7d09f5  PROVENANCE.json
 27ca0f3c9ee3a1b6374a9c8dd98008decdd0c7659c7a569c70ad7b9734c74655  R34-BASELINE.json
 0b7ec5ee347ddfa6cca59740fc7a8fe3fc5d51406265bb12189e82fa106319d2  R41-PARENT.json
 bd2a789b0aab5663f0d208af2ca8e4ec98179bc8c7b57e70a962d4e06a3dcfc4  R42-PARENT.json
@@ -1403,9 +1404,9 @@ f932ef78b7a72b1bb0d7aedb5fe42fbb9951c2492eb528b72442f46ddff81a6c  R44-DONORS.jso
 731b4c559fc0d25dea701e4474f02400b27e8e3f4cac9f230d5214497d4490a9  R44-PARENT.json
 d33ec5d167dd44800ba4e68372b08db43deb8d01df2ef71dd435ff004ac66c8b  R45-PARENT.json
 3dc607603fea511e2f428e9546a875ab7e38b6a0bbd5e803e4510de082f30804  R49-PARENT.json
-218348214070c7c04f7b462b4e71824248c75ee09602a97026c550552eb36341  README.txt
-27668a6a9e578af5d64232bd6e599f89d18fabbe1290c7125d75b11b71651bbd  RELEASE.json
-0df08a9ad4f7c294379f91c50e4dc788cd6208e13cd5484bf4d527dd162e5a27  SBOM.cdx.json
+ea46ca4a4fa8a3bc21e80fe8e26cb5e09794c213fae24087bd49731dd9b2f90a  README.txt
+c3fb7c5e7d8d89965a6d2672f7861789c9c96fd1d08557d650a1427570f2fa2e  RELEASE.json
+7c24b4180982bba8a5b79557cada45f9fb54ca0494de8979e9b2f52f5a7e5cd8  SBOM.cdx.json
 7c86062c4f69db3179a129d65945ccfab1b1c1c5bcc29b91383eac097d50f2aa  scripts/activate-skill-creator-1.1.1.mjs
 bd138fe5a64088e8e1a7a5bf6104c5b17317bdc8cf3ad8191ea00ed82ace7d9b  scripts/agent-eval-r42.mjs
 8d90256a6863f3bbbff02e95cb12389fc6f9e8dbcb77bf1c20c902de371425e8  scripts/archive-source-zips.mjs
@@ -1413,7 +1414,7 @@ bd138fe5a64088e8e1a7a5bf6104c5b17317bdc8cf3ad8191ea00ed82ace7d9b  scripts/agent-
 34f9318b6f4afb29948fdc5ab973edca4dfc4fbd63c9a5105478b5e95812dabf  scripts/autonomous-build.ps1
 075acd7616740135973497d676dcd0431f0437bdba87e4eedba4751cb148ff02  scripts/autonomous-tests.ps1
 f43c5e5064fb5863ce51aca156434d8b7c493ee954b8846f41625cd7130936d8  scripts/benchmark-l0-r71.mjs
-8d2ca9595df68fc2947c5f501e1c55da7853d9f97a1f37732b011cf807f0b45f  scripts/bootstrap-uac-migration-r153.ps1
+805db4c532f44fc167a4fcbe0cb463c69280ba9a5e5ff5098296ed2cbabfd87c  scripts/bootstrap-uac-migration-r153.ps1
 5d8ce87ffbe55f4737ba1ee2fa6772a8157bfa92afec9101909c0f9bead27fcb  scripts/bridge-benchmark-r58.mjs
 7c3f2a157f64aef9e605b5fe84d75fbdd88312f09d0ad89effb33de82aa39ab8  scripts/build-advanced-pcb-skill.mjs
 70bccc3572de7e26ac91154b9d87185feab0c2dbfc4cbd40f89660e5769f53b0  scripts/build-combined-skill.mjs
@@ -1447,7 +1448,7 @@ a64b6779eff80d68d90d238dee7f2feda5ada3c5c59bcaeae2ab7812bd28404e  scripts/deferr
 5af5953d67a5c494980feeb36bfc6df7d1cc8a6246f259c31cd3c64885d7e60a  scripts/deferred-slot-operation-r46.mjs
 34116370895aeff9a424475558f4aca3b05460146455d9bb0bafcacd1a270910  scripts/deferred-slot-operation.mjs
 1cee04ab67a1e9a06f42cb5fde7073298ca501a059c961d11659a578aaef5e90  scripts/deploy-r47.mjs
-1be4983bf63172064a1ef5ba0cbcc727f68f17fe1b0de1c248cd79aac89a53aa  scripts/deploy-r48.mjs
+d2887ee6fa91d833079e43dff95154f82e30f1da80a71905f1df0355f48f9438  scripts/deploy-r48.mjs
 2cc7a37231f8836a48c3bf4024887f38c10bfc89296ac483e4b98b3f18281933  scripts/derive-r45-parent.mjs
 67221c5619019a9d19611432d4361c99c365f14e89483e4c8f78451839960176  scripts/derive-r45-release.mjs
 87c6acc0df96a6e8bb6692bc7b12e8b386196a80cba554d9b214ff8bb12147fe  scripts/derive-r45-tests.mjs
@@ -1530,7 +1531,7 @@ a9d10a04324cceafafa7edc1501e8e1f8a1ae4a094d0985c8309472512529d30  scripts/gate-w
 1a771b5b8a62d57f26762d53472ed68a3e733674b1c91e08becf0dc2e4325039  scripts/inspect-active-release-r45.mjs
 de6142bd5693cf4edb8725c9c43fc77e9bdc12f5b398a757006d778d3ee3f8ed  scripts/inspect-r46-active.mjs
 06425d2a4004cb0ad66383c10c30aaa91bb020be2926bc76f9681a8f0827ddfc  scripts/inventory-reference-dist.mjs
-d952ca5bb1d315f37c2d15625756c366b100e8c015f11fedfd22919fadefbea1  scripts/issue-uac-migration-r153.mjs
+23c83eb14b1036128ae556b6088da4fe6f6b4ec827edd1ec69e23c28f3794134  scripts/issue-uac-migration-r153.mjs
 7ea8cf6bf094a1612603bc716228a3753e5f06fca8a0684d2da15a04d0710c64  scripts/list-source-zips.mjs
 4326526cbff265bb8ec2d38af1825b0bac227e3506437fff6e13f9cdb20dab33  scripts/npm-artifact-identity-r61.mjs
 2598a67b08caaef2ff75fc52eca1e268c83b79c50048202e318904952379aa4a  scripts/npm-prepublish-contract-r74.mjs
@@ -1561,7 +1562,7 @@ f682cb041e9dec3e4e99c87e9650e35c9f10d51cba458ec7040bbedc8b22f987  scripts/perfor
 6767992de09ed6f95f74a14b743bb5e5660fa63cbd2d5a6cdc2a14be3531c8cc  scripts/promote-local-d-generation.ps1
 c4e081f95bc82e45a06993c34d47f10083640e794e2e3ccc26933fcf597b0c50  scripts/public-baseline-r58.mjs
 615c670581ee3e8a30095c0af63c24edbec01db74c7370069e1a486c53989968  scripts/public-surface-r58.mjs
-3af9ef85417e0b55e00df060e345dde2b609b744b065549216c5ffa87130befa  scripts/r153-prepublish-identity.mjs
+3570b04537b426014301e1a57a4d56c03335dc48a93d34342baf2f8cf656bb18  scripts/r153-prepublish-identity.mjs
 e19a1d591ccd07af2e87d930ce23b0cc9b814bc2a395408045543847154097d7  scripts/r40-compact-ledger-probe.mjs
 68b9a60aca3f3e3e9ec239710f8368594ef3c8a98fff0816d2e9a7950df48287  scripts/r47-core-failures.mjs
 75f821cc44f8c31f67de0b28b64021d9fb160984a597e704b29c33f9f3a41dde  scripts/r47-syntax-check.mjs
@@ -1622,7 +1623,7 @@ d42efb6dd8e6abc79c66e768f8c0feb10fa3341bcce0888750461f56612f0fd3  scripts/releas
 1b83f49d9798188533c8cfca0030a98af34560fe181b3e593db790319e1b7bc5  scripts/release-parity.mjs
 21ddee002ddfc1d7c34bf92a4cc02abac38630c4814366216efda66217db6baa  scripts/remove-source-archives-r47.mjs
 817c2f5ce7f2c935a268e16f4a2d8b8611ddf89df8776682082baafb63a84921  scripts/repair-builder-template.mjs
-bb06a46f53222181618569633c177e62274bcb11b440fcfea63826b0bb22edd4  scripts/request-uac-migration-r153.ps1
+0b416b8b546b1b890763e1aa4529c0fd3d9c1f7454e18762bf95fdef3ff955e0  scripts/request-uac-migration-r153.ps1
 fb6e47bf46f86887bcbde703b2618ead594ba430a6faf298be6b34432a87e030  scripts/run-r46-full-regression-background.mjs
 46751fc8c4f25329c235e1946c662f33c23c46428d4075a2f7c9543c801c5cfd  scripts/run-r46-windows-gate-background.mjs
 cabfa63d5edb83f32b3e6e5ce22e76223644d81a3361d52a28de2dbc07e59a54  scripts/run-r46-windows-gate-background.ps1
@@ -1638,7 +1639,7 @@ f104a679ded20e1ee008182984fdab152120c051ee4a8962e08a591de7b35402  scripts/test-s
 cdd9b8d1a5f2f2debc2686f75219e750ec8eb8224512cbd3e6951b39bcae6668  scripts/verify-authority-epoch-history.mjs
 f8d9c6718cbe20e02e517297e8f35f51c7dcd51b62b8b4a483630a9cd3b1f788  scripts/verify-memory-r41.mjs
 e552634ca1f8673f5daaaf5e45302d2a7fc4b1a1eac256f60bed2c9136bafa05  scripts/verify-package.ps1
-4da9e3a9d929a988e5fe86a2a5bbe542e86a824463e1a96e7b635fe4f514e31c  scripts/verify-protected-stage-r153.mjs
+b39cc23ff700142d60f552acc7b693086386010f00861a2f243ab7bf7964a2ec  scripts/verify-protected-stage-r153.mjs
 0c22bd0d61e50d35105a146b3b78acbb6889e9821537834892737c7f5aafb75e  scripts/verify-r41-parent.mjs
 4190b6eca2dd5e0b0a4ba087c2a6218229b031ff3e95b0e149bb9f7b5ac32736  scripts/verify-r42-parent.mjs
 13713c4ffca495876ebaf746f1ca2407670da5ad70dc9d170cb0135f329a9540  scripts/verify-r43-parent.mjs
@@ -1713,7 +1714,7 @@ da5181cec30034ddf089baa5358becb5651da238a2e7cf0888007a4c60b4ea6b  src/capability
 8348e01ec8dcd3171dab02399a2aa48cf09db2d283da25bfdde721a5c3f44b03  src/capability-ledger.mjs
 dd84aab65c73906037390b07f1d9e3e118511b21145e8ba914f98d6f2a153baf  src/capability-resolver.mjs
 b3a669da30bf2d99cd5a912bdacb234b66c90215183a2aeeb3c01c91f1a55c64  src/capability-snapshot.mjs
-3e2818046625828107e2fcb6723eaf9f227648f781293b1abac475cf03ee7565  src/clean-activation-recovery-r153.mjs
+a0c47b8718f01afd85f736261fc235e8f1c0b8c7908ff9937cbb8be5dc652331  src/clean-activation-recovery-r153.mjs
 94e5aeff2453cdc0239aee4d547dbbefee183c71933cb84e5e8a418fa99bc1e8  src/codex-app-server-r44.mjs
 c4e07aa6818cd989c43ce8d027dc7d467e05c8e2fe96b5548eea291285d3bbb1  src/coding-mcp-tools.mjs
 059b4bef2ae6a6c2d7a706c463bea6e49d364faeb619372a429ba36c53004ab7  src/coding-output-contracts.mjs
@@ -1748,7 +1749,7 @@ dcd4c9784e88e253e91ddad3c24b38cb0b36906ed737f6d7bee7712360f66f7a  src/containmen
 fe1761b98738e1aea1d25ddf3a0ba56ccad95a43d45104a89b8665197c7c9e18  src/containment-result.mjs
 705a89cb12fedb993d55dfed32a5870d33e10db26422c944d1e52223566c096c  src/containment-smoke.mjs
 63a1d4d6a53f9eb7e02197b4e42158b867da8c042c2e61848d8a36cd398b8bd8  src/context-provenance.mjs
-d766b4643e1e6e7f03f51c9033b99248612ede1a995cd826923febd556563954  src/deadbyte-cli.mjs
+6fb12662df63e4948292723d4dd336bc3d19853884fa1f1ca0065787f039513e  src/deadbyte-cli.mjs
 9e9766d64dcc9e2c8d23c2c0a5e9dcb87b7213e8de668f79f593ad48daf15acd  src/deadline-cancellation.mjs
 fe7a8f8611c33552b3da466a9b866ce79a737bfd5b9a78a953269b30cce16274  src/desktop-contract.mjs
 f97352e510c659910c2d4a874d15be028e1291d685c6c1a7be53bdf1a335c2d8  src/desktop-input-r40.mjs
@@ -1778,6 +1779,7 @@ bd5b4496676d5399cfd73a684af4aff06b44af9ab51f0d5901ead00c4c540e74  src/external-j
 f6c316f52e9096a92879dbc5debf63a486953bf87b65620601c0a5a0a96eae1f  src/fuzzy-search-worker.mjs
 f89acac9935ec9e757ee611893d1ffbe04ae3c2a03c43feb87af0427da39e830  src/fuzzy-search.mjs
 264d21a4385a0a04613fe78203e7f5e231a5c06397086cfacc88076e60b89b71  src/hash.mjs
+02e30ed5745178ac9c9a2e96f77b9b9b3fafb2b02fa61f0641bd3c934824bf76  src/host-command-pins-r154.mjs
 8afb8145904f4ae6c4ff471dc9fda225036671065a7e0e45d47a242dad6d8d58  src/host-plane.mjs
 cd00584f346160c8ad16b4dcf64b3fb6499668f3bc299c199b67f53caa995746  src/ingress-mode.mjs
 e1afae872e4252a4002032f1610033d41f5224896b0b06be077f54b267ed4f4f  src/invocation.mjs
@@ -1890,16 +1892,16 @@ bac271c6f5218752ac5ff4decf5249e3893ddb35c63c092ce17238c27fc4d35b  src/trust-init
 4d934281a72922fabde7d6e988655a6d095eb3a89abf12e9b99fecc3046e3d62  src/trust.mjs
 c99c2402fb0df4f68634fa906eb198c551c55dad9f0921a7b8ed6e33d503884e  src/tunnel-stdio-compat-smoke.mjs
 aa765e9a28c69ff58a5b5a0d29b49ea181af4db9076633b102dbca25861e708e  src/tunnel-stdio-compat.mjs
-e241728ead29da4336c66011464c1204874741c92667a1bc2cd92d0b29cc04e2  src/uac-approval-contract-r153.mjs
+34719b7d54336b2abbc152ff0c5fb2f0052d4f77753f9b7538adfdd20c804b5b  src/uac-approval-contract-r153.mjs
 642cb67d1854850e336ee73fbd71b329056bdcbdab35cea19c1a995a155ff5d9  src/verifier-cli.mjs
 8f818a4852ce3be3a380cd4736c3073a7a3e0e45cd7c7ca90588a6b843d3d022  src/verifier.mjs
-b2a6b4f53b8c7b729995a2cd87c616492c9dac01d7b6de2e2c8f0b0c487ff63a  src/version.mjs
+6ac80248eabc67836be470646dec5c474f79d917238521d76fe0529b6fcbae32  src/version.mjs
 acf5f5a57779bc0529f9db3d821f0ef1b53d22063aa237041348c1ca444ea677  src/windows-powershell-environment.mjs
 7e09c57a97289360aabfaf3d531208e54872efbfb3182f3c18203d2cb88c46b5  src/worker-registry.mjs
 76361d5ae9a710273cf64a7525082197b692236bf23689875e5fd1ef4aa96d2b  src/worker-scheduler.mjs
 4da1b32f5198bb089bc68b7eb6de21ea296678b5020018a73742bf0df57d62fa  src/workload-substrate.mjs
 1bd637e7634ca0259791c5108fcf324554f70b1db49e5eac3505287c04bbc3be  STABILIZATION-PROGRESS.md
-908286ccfafec104fe2b1cf50253c579fedc3acf0275d4ebd5ed2f706b001a20  TEST-MATRIX.json
+6f76d545f378dfac1001601e5d1372505b86f5288ef37b565cc4ad588275a90f  TEST-MATRIX.json
 e4f1fb97545f23772ddff28ad3f9954a4714f9854062fca62e0e12c1cb2ec4ae  test/agent-backend-r44.test.mjs
 2a78c818058b25efdc143a3a97c832da231ccd6ff9d90c7796d681a0251b85c4  test/agent-crash-child.mjs
 d9461ab7c118ee75d37a2d6f5e637d7e43505af6a9ad8c7ddafffc8ace185a5b  test/agent-crash-worker.mjs
@@ -2153,9 +2155,9 @@ ce163ee9f288e30a213636e2267b8630016ef8a170f12286e8cdd44219bdab32  test/r124-live
 17475b51e416ae678f959f8975fab8497eb7c57d13e36cac8656c0e1f7424c0c  test/r126-restore-policy-envelope.test.mjs
 1721d4bd3bb58c10ad9d86b69ad1d993ec5a1e6315c95b28fa50ab67d4ca302a  test/r127-restore-append-policy-boundary.test.mjs
 b3d3dda398c94d18e2e156bde65d1338000233407b435134ba0c16175d96620b  test/r129-sdk-security-baseline.test.mjs
-593ea4cc04fa6f09188774cedc39978a8279f1201c3222184eb1433ebcc258b0  test/r130-release-security-contract.test.mjs
+a444fb1f1c3795b8b4fa92eb378947176c9efbb6b87266114908c7a4dcf43654  test/r130-release-security-contract.test.mjs
 bb7963baf412ec0f5aca183f6dd98eda9026fe763017f9af595581b521ae6cb7  test/r131-installed-manifest-boundary.test.mjs
-f3571a18beeeecb4073e3169acd7ffb5a7dda169406170ad40ba4867572621c4  test/r132-release-identity.test.mjs
+9875046bdab50e7b1975ac4241fcaa5bfd70407d81af014cc267671c69070472  test/r132-release-identity.test.mjs
 acd236a4d8ba035007bde4166a521b8d4e6044f58c52c0bae9cb42fa75338533  test/r135-autonomous-scope.test.mjs
 3fcf657aae1f8466abc5ab82bb5a619966ea9b8a33d4a95a5a5246df5bf3afa1  test/r136-scoped-command-rights.test.mjs
 e0c466f25b35eb894166df792b71b23924610d32363756c75ff437dfdaa12a4c  test/r136-scoped-observer.test.mjs
@@ -2178,15 +2180,16 @@ ef0665adaab2a2b2d6ca8611a6335ded96b8e65a9661840acd139d3c86710e62  test/r144-cont
 b92f914455cac010b1468cd37a31651e7d423571d0edfeb29829d2281073e1e3  test/r146-legacy-offline-policy-proof.test.mjs
 32f40b649033172384267bbe8f6009dededcba81afff1e3ca51331407197fe3b  test/r146-livelog-backpressure.test.mjs
 77b3bfcd6fa04e21c7a04206181f7b4cbd5321f799a145859d8e84d0b984d174  test/r147-remote-request-hash.test.mjs
-48157c509b03fe5661a67a5c68d931c455a71494fb1d52ef0070effb764873f3  test/r153-clean-activation-recovery.test.mjs
-b1c9d788a607e579d18a1be36e0837dcc34b343bb53d55f9fb51c202af13bacd  test/r153-prepublish-identity.test.mjs
+ad184a83ee098eac21d523adbebfd379dcf8b87d4878c2d8dcca95cb22fdc9ee  test/r153-clean-activation-recovery.test.mjs
+3fc2abc60047b0ddb64e294165564964d060f73cf9678a195e8b96702841d0dd  test/r153-prepublish-identity.test.mjs
 377b03dbb1d82ed0ddeee261a060b8173d5591dfc20a60d9ea991390a03039b4  test/r153-r60-host-repin-e2e-contract.test.mjs
-658a839860ca6bfc7a26cf8f793c58f6cdeb2a8d425744ee7872f2eca3ff4ef6  test/r153-r65-signed-precondition-recovery.test.mjs
+e2bc7995f2ca85ce5d4a15e647c209d273d8f3871d25bd353046af66ee71bb34  test/r153-r65-signed-precondition-recovery.test.mjs
 ce37fc59761ceddf43fd3844b34d57f64f1c8d191ca1d6cba13b643a5e2c02ce  test/r153-restricted-reused-pid.test.mjs
-3c8d2110e869d4a6f125c9a4978c049f54424893f2317312448813ba0f19860f  test/r153-staging-leaf-acl.test.mjs
-b3e9fb4452b3a96ddc5af1a7873eb487bd273e042aa7eb91bbd03f8f7d8f46a9  test/r153-uac-approval-contract.test.mjs
+d18d1c504846bfe58cb141639af0fdfa0f57bf72a99942a386201a81a331e59c  test/r153-staging-leaf-acl.test.mjs
+8bfbf64e65a06303f26b41aefc3844a12910bef8824f723f352271e0fa74880e  test/r153-uac-approval-contract.test.mjs
 3d6a76df732eaa52b7409aa26c933f9e4d8316b64ded5cfad4202fea51b74fcd  test/r153-uac-installed-manifest-contract.test.mjs
-7d4ac1735e2c8760a4fe424aec6ceef8def6680c882c2cde32a59bedccb5edff  test/r153-uac-launch-parameter-contract.test.mjs
+b8899a7893dbc189d859d897a21afb862288042fffee9d4a7aac4851411ec6e7  test/r153-uac-launch-parameter-contract.test.mjs
+b60c7f10f335a27207da52282888b4f111fbc3c69d9ded518c72f60962078433  test/r154-multipin-recovery.test.mjs
 3c5c3724bce89aa1fa59fe97cc346c40a5674bb5cd6dc3e2f31b86f2d62e75e4  test/r33-closeout-regression.test.mjs
 5e3700ee610442dfd7b7ae5e380263f231438be0e32790597142c41362a53c9a  test/r33-finalization.test.mjs
 7e419d3c1caf79bfc7407207f50e5645298f9b19d91a7d6f595af185b92cd55e  test/r36-finalization.test.mjs
@@ -2252,7 +2255,7 @@ ca8e23abc89f3eadeceb4b6fdad2cb4db5a7933029ece8e8beae2c6a158876b7  test/r58-owner
 8fc5ed1d3088facf45f9578d9ff8514c3a633f7f342d15eec316e129e7a916c0  test/r58-stale-owner.test.mjs
 84be7ee7d167eb06c9f9fc178930daaa81e53a91de40bad6d7df2060bd3dd165  test/r58-windows-gate.test.mjs
 76db2a4009d76b86e1da57b91a96b0d6bfeb4063bec3301ede736e2fd5832f39  test/r59-release-contract.test.mjs
-65c50d4be2fa29851a2f908da569bdd3c4f8e1b970bddfdc7fda15a153edde13  test/r59-tool-surface-compat.test.mjs
+f2a37052224160e7da78d752b9fd3d4238a03c54fa835e7b251c72b395d99dcb  test/r59-tool-surface-compat.test.mjs
 3befd5d4dc4d8ca9e1f6cbeb9c430671e676c5696d6ee5931c2cbe3244c558a4  test/r60-authority-coherence.test.mjs
 60577e231c7d164f57a3960c574d3e369ca140d9dbc477b2444fa62dbf224e51  test/r60-authority-enforcement.test.mjs
 a1fa0b1e529da05f3659a33be6d36dab02f93808638cf0f458d057e9c6d1e35b  test/r60-bridge-dispatch.test.mjs

package/PROVENANCE.json

@@ -1,9 +1,9 @@
 {
   "schema": "deadbyte.provenance.v1",
-  "version": "0.15.60",
-  "source_model": "published 0.15.59 tarball -> isolated R153 clean activation recovery successor",
+  "version": "0.15.61",
+  "source_model": "published 0.15.60 tarball -> isolated R154 multi-pin activation recovery successor",
   "signing": "ed25519",
-  "parent_tarball_sha256": "0c20152b8ee553f06f05dfe017f4bd823d30cd50710722e9e0874f0bd6c66c75",
+  "parent_tarball_sha256": "b85f735f4c8be56f97ea5c78f0cc48583e8d5708a704c903596f5720e36ace83",
   "parent_activation_status": "PRODUCTION_ACTIVE",
   "parent_rollback_receipt_sha256": null,
   "runtime_predecessor": {
@@ -11,8 +11,8 @@
     "manifest_sha256": "34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc",
     "generation_manifest_sha256": "ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4"
   },
-  "source_predecessor_manifest_file_sha256": "f727be4a63220f4215f18282a1fd89963924a64adcd07747ca3c12d8fb166d86",
-  "reproducibility": "R153 isolated successor of published 0.15.59 tarball SHA-256 0c20152b8ee553f06f05dfe017f4bd823d30cd50710722e9e0874f0bd6c66c75; production runtime 0.15.45 remains immutable until exact candidate gates pass; legacy migration is one-time Windows UAC, marker-bound, and may only narrow policy while retaining all authority disarmed",
+  "source_predecessor_manifest_file_sha256": "2a19c9da7f11eb831dfb24ba6c6d9789e25a373cea2f3a25ff21d460e07fba36",
+  "reproducibility": "R154 isolated successor of published 0.15.60 tarball SHA-256 b85f735f4c8be56f97ea5c78f0cc48583e8d5708a704c903596f5720e36ace83; production runtime 0.15.45 remains immutable until exact candidate gates pass; multi-command executable repins are one-time Windows UAC, receipt-bound, and retain all authority disarmed",
   "public_surface_evidence": {
     "status": "PASS",
     "baseline_release": "v0.15.35-1b5715b276facbc0",
@@ -76,12 +76,12 @@
     "stdio_aggregate_p95_delta_pct": 1.984392678457768,
     "limitations_preserved": true
   },
-  "builder": "deadbyte-r153-clean-activation-development",
+  "builder": "deadbyte-r154-multipin-recovery-development",
   "parent_release_id": "v0.15.45-34aa8d1241cfb8bf",
   "parent_manifest_sha256": "34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc",
   "parent_generation_manifest_sha256": "ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4",
-  "source_predecessor_version": "0.15.59",
-  "source_predecessor_tarball_sha256": "0c20152b8ee553f06f05dfe017f4bd823d30cd50710722e9e0874f0bd6c66c75",
+  "source_predecessor_version": "0.15.60",
+  "source_predecessor_tarball_sha256": "b85f735f4c8be56f97ea5c78f0cc48583e8d5708a704c903596f5720e36ace83",
   "operator_override": {
     "four_hour_soak": "WAIVED_BY_OPERATOR",
     "clean_machine": "WAIVED_BY_OPERATOR",

package/README.txt

@@ -1,4 +1,4 @@
-DEADBYTE MCP V0.15.60 / R153 CLEAN ACTIVATION RECOVERY
+DEADBYTE MCP V0.15.61 / R154 MULTI-PIN ACTIVATION RECOVERY
 =========================
 
 AUTHENTICATED MACHINE TRUTH + DURABLE AGENT + CODING + AUTONOMOUS PRODUCTION ENGINE
@@ -16,12 +16,12 @@ check `--version` before issuing a stateful command. The compatibility CMD
 fails with an explanation when npm is detected rather than forwarding the
 wrong command to the controller.
 
-  npx -y deadbyte-mcp@0.15.60 mcp
-  npx -y deadbyte-mcp@0.15.60 remote
-  npx -y deadbyte-mcp@0.15.60 remote status
-  npx -y deadbyte-mcp@0.15.60 remote restart
-  npx -y deadbyte-mcp@0.15.60 audit status
-  npx -y deadbyte-mcp@0.15.60 audit verify
+  npx -y deadbyte-mcp@0.15.61 mcp
+  npx -y deadbyte-mcp@0.15.61 remote
+  npx -y deadbyte-mcp@0.15.61 remote status
+  npx -y deadbyte-mcp@0.15.61 remote restart
+  npx -y deadbyte-mcp@0.15.61 audit status
+  npx -y deadbyte-mcp@0.15.61 audit verify
 
 MAJOR MCP CLIENT STDIO CONFIGS
 -------------------------------
@@ -32,7 +32,7 @@ CLAUDE DESKTOP
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.60", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.61", "mcp"]
       }
     }
   }
@@ -44,7 +44,7 @@ Save as .cursor/mcp.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.60", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.61", "mcp"]
       }
     }
   }
@@ -57,7 +57,7 @@ Save as .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.60", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.61", "mcp"]
       }
     }
   }
@@ -67,7 +67,7 @@ Add to the Codex MCP configuration:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.60", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.61", "mcp"]
 
 The `mcp` command is the quiet stdio server entry for local MCP clients; stdout is reserved for MCP.
 The remote CLI invokes the stable active-release PowerShell launcher directly with shell=false.
@@ -356,7 +356,7 @@ CONTROLLER
 ----------
 Primary operator entry point:
 
-  npx -y deadbyte-mcp@0.15.60 remote
+  npx -y deadbyte-mcp@0.15.61 remote
 
 The legacy CMD entry remains compatibility-only for R33 rollback safety.
 
@@ -417,7 +417,7 @@ MCP CLIENT CONFIGURATION
 ------------------------
 The local stdio entry point is quiet and suitable for MCP hosts:
 
-  npx -y deadbyte-mcp@0.15.60 mcp
+  npx -y deadbyte-mcp@0.15.61 mcp
 
 CLAUDE DESKTOP
 Use the standard local-server entry in claude_desktop_config.json:
@@ -426,7 +426,7 @@ Use the standard local-server entry in claude_desktop_config.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.60", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.61", "mcp"]
       }
     }
   }
@@ -439,7 +439,7 @@ Create .cursor/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.60", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.61", "mcp"]
       }
     }
   }
@@ -452,7 +452,7 @@ Create .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.60", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.61", "mcp"]
       }
     }
   }
@@ -462,9 +462,9 @@ Add this to ~/.codex/config.toml:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.60", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.61", "mcp"]
 
-The remote device path remains `npx -y deadbyte-mcp@0.15.60 remote`. Remote public MCP uses the
+The remote device path remains `npx -y deadbyte-mcp@0.15.61 remote`. Remote public MCP uses the
 verified HTTPS named-tunnel URL selected by the active generation; do not commit a private device
 URL or tunnel token into a repository.
 

package/RELEASE.json

@@ -1,9 +1,9 @@
 {
   "schema": "deadbyte.release.v1",
   "name": "deadbyte-mcp",
-  "version": "0.15.60",
-  "train": "R153",
-  "label": "R153 CLEAN ACTIVATION RECOVERY",
+  "version": "0.15.61",
+  "train": "R154",
+  "label": "R154 MULTI-PIN ACTIVATION RECOVERY",
   "protocol_revision": "2026-07-28",
   "parent": {
     "version": "0.15.45",
@@ -19,10 +19,10 @@
     "generation_manifest_sha256": "ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4"
   },
   "source_predecessor": {
-    "version": "0.15.59",
-    "source_path": "C:\\Users\\DEADBYTE\\.deadbyte-mcp\\evidence\\npm-publication\\0.15.59\\deadbyte-mcp-0.15.59.tgz",
+    "version": "0.15.60",
+    "source_path": "C:\\Users\\DEADBYTE\\.deadbyte-mcp\\evidence\\npm-publication\\0.15.60\\deadbyte-mcp-0.15.60.tgz",
     "release_status": "REGISTRY_PUBLISHED",
-    "tarball_sha256": "0c20152b8ee553f06f05dfe017f4bd823d30cd50710722e9e0874f0bd6c66c75"
+    "tarball_sha256": "b85f735f4c8be56f97ea5c78f0cc48583e8d5708a704c903596f5720e36ace83"
   },
   "consolidation": {
     "frontend_status_vocabulary": true,
@@ -417,7 +417,7 @@
     "stable_final_claim": false
   },
   "r153": {
-    "release_candidate_version": "0.15.60",
+    "release_candidate_version": "0.15.61",
     "source_predecessor_version": "0.15.59",
     "source_predecessor_tarball_sha256": "0c20152b8ee553f06f05dfe017f4bd823d30cd50710722e9e0874f0bd6c66c75",
     "production_predecessor_version": "0.15.45",

package/SBOM.cdx.json

@@ -1,13 +1,13 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:cdx:deadbyte-mcp:r153:0.15.60",
+  "serialNumber": "urn:cdx:deadbyte-mcp:r154:0.15.61",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
       "name": "deadbyte-mcp",
-      "version": "0.15.60"
+      "version": "0.15.61"
     }
   },
   "components": [

package/TEST-MATRIX.json

@@ -1,7 +1,7 @@
 {
   "schema": "deadbyte.test-matrix.v1",
-  "version": "0.15.60",
-  "train": "R153",
+  "version": "0.15.61",
+  "train": "R154",
   "primary_platform": "win32-x64",
   "reference": {
     "package": "@wonderwhy-er/desktop-commander",

package/bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-chatgpt-bridge",
-  "version": "0.15.60",
+  "version": "0.15.61",
   "private": true,
   "type": "module",
   "engines": {

package/node_modules/which/CHANGELOG.md

@@ -0,0 +1,166 @@
+# Changes
+
+
+## 2.0.2
+
+* Rename bin to `node-which`
+
+## 2.0.1
+
+* generate changelog and publish on version bump
+* enforce 100% test coverage
+* Promise interface
+
+## 2.0.0
+
+* Parallel tests, modern JavaScript, and drop support for node < 8
+
+## 1.3.1
+
+* update deps
+* update travis
+
+## v1.3.0
+
+* Add nothrow option to which.sync
+* update tap
+
+## v1.2.14
+
+* appveyor: drop node 5 and 0.x
+* travis-ci: add node 6, drop 0.x
+
+## v1.2.13
+
+* test: Pass missing option to pass on windows
+* update tap
+* update isexe to 2.0.0
+* neveragain.tech pledge request
+
+## v1.2.12
+
+* Removed unused require
+
+## v1.2.11
+
+* Prevent changelog script from being included in package
+
+## v1.2.10
+
+* Use env.PATH only, not env.Path
+
+## v1.2.9
+
+* fix for paths starting with ../
+* Remove unused `is-absolute` module
+
+## v1.2.8
+
+* bullet items in changelog that contain (but don't start with) #
+
+## v1.2.7
+
+* strip 'update changelog' changelog entries out of changelog
+
+## v1.2.6
+
+* make the changelog bulleted
+
+## v1.2.5
+
+* make a changelog, and keep it up to date
+* don't include tests in package
+* Properly handle relative-path executables
+* appveyor
+* Attach error code to Not Found error
+* Make tests pass on Windows
+
+## v1.2.4
+
+* Fix typo
+
+## v1.2.3
+
+* update isexe, fix regression in pathExt handling
+
+## v1.2.2
+
+* update deps, use isexe module, test windows
+
+## v1.2.1
+
+* Sometimes windows PATH entries are quoted
+* Fixed a bug in the check for group and user mode bits. This bug was introduced during refactoring for supporting strict mode.
+* doc cli
+
+## v1.2.0
+
+* Add support for opt.all and -as cli flags
+* test the bin
+* update travis
+* Allow checking for multiple programs in bin/which
+* tap 2
+
+## v1.1.2
+
+* travis
+* Refactored and fixed undefined error on Windows
+* Support strict mode
+
+## v1.1.1
+
+* test +g exes against secondary groups, if available
+* Use windows exe semantics on cygwin & msys
+* cwd should be first in path on win32, not last
+* Handle lower-case 'env.Path' on Windows
+* Update docs
+* use single-quotes
+
+## v1.1.0
+
+* Add tests, depend on is-absolute
+
+## v1.0.9
+
+* which.js: root is allowed to execute files owned by anyone
+
+## v1.0.8
+
+* don't use graceful-fs
+
+## v1.0.7
+
+* add license to package.json
+
+## v1.0.6
+
+* isc license
+
+## 1.0.5
+
+* Awful typo
+
+## 1.0.4
+
+* Test for path absoluteness properly
+* win: Allow '' as a pathext if cmd has a . in it
+
+## 1.0.3
+
+* Remove references to execPath
+* Make `which.sync()` work on Windows by honoring the PATHEXT variable.
+* Make `isExe()` always return true on Windows.
+* MIT
+
+## 1.0.2
+
+* Only files can be exes
+
+## 1.0.1
+
+* Respect the PATHEXT env for win32 support
+* should 0755 the bin
+* binary
+* guts
+* package
+* 1st

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.60",
+  "version": "0.15.61",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",

package/scripts/bootstrap-uac-migration-r153.ps1

@@ -1,5 +1,5 @@
 param(
-    [Parameter(Mandatory=$true)][ValidateSet('0.15.60')][string]$ExpectedVersion,
+    [Parameter(Mandatory=$true)][ValidateSet('0.15.61')][string]$ExpectedVersion,
     [Parameter(Mandatory=$true)][string]$StateRoot,
     [Parameter(Mandatory=$true)][string]$TarballPath,
     [Parameter(Mandatory=$true)][ValidatePattern('^[0-9a-f]{64}$')][string]$ExpectedTarballSha256,
@@ -9,7 +9,7 @@ param(
     [Parameter(Mandatory=$true)][string]$StderrPath,
     [Parameter(Mandatory=$true)][string]$MarkerReceiptPath,
     [Parameter(Mandatory=$true)][ValidatePattern('^[0-9a-f]{64}$')][string]$MarkerReceiptSha256,
-    [ValidatePattern('^powershell_script=[0-9a-f]{64}$')][string]$HostCommandPin,
+    [string]$HostCommandPinsJson = '[]',
     [switch]$Bootstrap
 )
 $ErrorActionPreference = 'Stop'
@@ -21,6 +21,18 @@ function Require-Absolute([string]$Value,[string]$Label) {
     return [IO.Path]::GetFullPath($Value)
 }
 function Quote([string]$Value) { '"' + $Value.Replace('"','\"') + '"' }
+function Validate-PinsJson([string]$Value) {
+    try { $pins = @($Value | ConvertFrom-Json) } catch { throw 'R154 host command pins JSON invalid' }
+    if ($pins.Count -gt 16) { throw 'R154 host command pin limit exceeded' }
+    $seen = @{}
+    foreach ($pin in $pins) {
+        if ([string]$pin -cnotmatch '^[A-Za-z0-9._-]{1,64}=[0-9a-f]{64}$') { throw 'R154 host command pin contract invalid' }
+        $id = ([string]$pin).Split('=')[0]
+        if ($seen.ContainsKey($id)) { throw 'R154 duplicate host command pin' }
+        $seen[$id] = $true
+    }
+}
+Validate-PinsJson $HostCommandPinsJson
 
 $StateRoot = Require-Absolute $StateRoot 'State root'
 $TarballPath = Require-Absolute $TarballPath 'Exact tarball'
@@ -66,7 +78,7 @@ if (-not $Bootstrap) {
         '-ExpectedManifestSha256',$ExpectedManifestSha256,'-ExpectedBootstrapSha256',$ExpectedBootstrapSha256,
         '-StdoutPath',(Quote $StdoutPath),'-StderrPath',(Quote $StderrPath),
         '-MarkerReceiptPath',(Quote $MarkerReceiptPath),'-MarkerReceiptSha256',$MarkerReceiptSha256)
-    if ($HostCommandPin) { $arguments += @('-HostCommandPin',$HostCommandPin) }
+    if ($HostCommandPinsJson -cne '[]') { $arguments += @('-HostCommandPinsJson',(Quote $HostCommandPinsJson)) }
     $child = Start-Process -FilePath $powershell -ArgumentList $arguments -Verb RunAs -Wait -PassThru -WindowStyle Hidden
     if (Test-Path -LiteralPath $StdoutPath) { [Console]::Out.Write([IO.File]::ReadAllText($StdoutPath)) }
     if (Test-Path -LiteralPath $StderrPath) { [Console]::Error.Write([IO.File]::ReadAllText($StderrPath)) }
@@ -101,7 +113,7 @@ if ($LASTEXITCODE -ne 0) { throw 'R153 protected staging initial ACL normalizati
 & $icacls $prefix '/setowner' '*S-1-5-32-544' '/T' '/C' | Out-Null
 if ($LASTEXITCODE -ne 0) { throw 'R153 protected staging initial owner normalization failed' }
 
-$metadataUri = 'https://registry.npmjs.org/deadbyte-mcp/0.15.60'
+$metadataUri = 'https://registry.npmjs.org/deadbyte-mcp/0.15.61'
 $tagsUri = 'https://registry.npmjs.org/-/package/deadbyte-mcp/dist-tags'
 [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
 $metadata = Invoke-RestMethod -UseBasicParsing -Uri $metadataUri -Method Get -TimeoutSec 30
@@ -228,7 +240,7 @@ if ($preflight.state -ne 'AUTHORITY_UNVERIFIED' -or $preflight.subject_sha256 -n
 $helperArgs = @('-Elevated','-NodePath',$node,'-DeployScript',$deploy,'-StateRoot',$StateRoot,
     '-StdoutPath',$StdoutPath,'-StderrPath',$StderrPath,'-MarkerReceiptPath',$MarkerReceiptPath,
     '-MarkerReceiptSha256',$MarkerReceiptSha256,'-PreflightSubjectSha256',$preflight.subject_sha256)
-if ($HostCommandPin) { $helperArgs += @('-HostCommandPin',$HostCommandPin) }
+if ($HostCommandPinsJson -cne '[]') { $helperArgs += @('-HostCommandPinsJson',$HostCommandPinsJson) }
 & $helper @helperArgs
 $helperExit = $LASTEXITCODE
 try { Remove-Item -LiteralPath $prefix -Recurse -Force -ErrorAction Stop }