deadbyte-mcp 0.15.60 → 0.15.61

package/scripts/deploy-r48.mjs

@@ -15,6 +15,7 @@ import {proveLegacyOfflineScopeRepair} from '../src/legacy-offline-policy-proof-
 import {claimWithOneTimeMigration,verifyNarrowedPolicyGeneration} from '../src/clean-activation-recovery-r153.mjs';
 import {verifyUacApproval,uacPointerSha256,protectedUacReceiptPath,requireTrustedUacInstallation} from '../src/uac-approval-contract-r153.mjs';
 import {inspectTrustedInstallation} from '../src/privileged-install-trust-r89.mjs';
+import {normalizeHostCommandPins,hostCommandPinArgs} from '../src/host-command-pins-r154.mjs';
 
 const root=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..');
 const state=path.resolve(process.env.DEADBYTE_STATE_ROOT||path.join(os.homedir(),'.deadbyte-mcp'));
@@ -24,16 +25,14 @@ const sleep=ms=>new Promise(resolve=>setTimeout(resolve,ms));
 function parseDeployArgs(argv){
   const out={preflight:false,approvalPath:null,approvalSha256:null,uacLegacyMigration:false,
     markerReceiptPath:null,markerReceiptSha256:null,migrationNonce:null,migrationIssuedAt:null,
-    migrationExpiresAt:null,uacApprovalPath:null,uacApprovalSha256:null,hostCommandPin:null};
+    migrationExpiresAt:null,uacApprovalPath:null,uacApprovalSha256:null,hostCommandPins:[]};
   for(let index=0;index<argv.length;index++){
     const arg=argv[index];
     if(arg==='--preflight'){if(out.preflight)throw new Error('duplicate --preflight');out.preflight=true;continue;}
     if(arg==='--uac-legacy-migration'){if(out.uacLegacyMigration)throw new Error('duplicate --uac-legacy-migration');out.uacLegacyMigration=true;continue;}
     if(arg==='--host-command-pin'){
-      if(out.hostCommandPin!==null)throw new Error('duplicate --host-command-pin');
       const value=String(argv[++index]??'');
-      if(!/^powershell_script=[0-9a-f]{64}$/.test(value))throw new Error('--host-command-pin requires powershell_script=lowercase_sha256');
-      out.hostCommandPin=value;continue;
+      out.hostCommandPins.push(value);continue;
     }
     if(arg==='--marker-reconciliation-receipt'){
       if(out.markerReceiptPath)throw new Error('duplicate --marker-reconciliation-receipt');
@@ -76,7 +75,8 @@ function parseDeployArgs(argv){
   const uacFields=[out.migrationNonce,out.migrationIssuedAt,out.migrationExpiresAt,out.uacApprovalPath,out.uacApprovalSha256];
   if(out.uacLegacyMigration&&uacFields.some(value=>!value))throw new Error('UAC migration requires nonce, lifetime, and approval receipt');
   if(!out.uacLegacyMigration&&uacFields.some(value=>value))throw new Error('UAC migration arguments require --uac-legacy-migration');
-  if(out.hostCommandPin!==null&&(!out.uacLegacyMigration||out.preflight))throw new Error('explicit host repin requires the elevated UAC migration');
+  out.hostCommandPins=normalizeHostCommandPins(out.hostCommandPins);
+  if(out.hostCommandPins.length>0&&(!out.uacLegacyMigration||out.preflight))throw new Error('explicit host repin requires the elevated UAC migration');
   return out;
 }
 const deployArgs=parseDeployArgs(process.argv.slice(2));
@@ -301,6 +301,7 @@ if(deployArgs.uacLegacyMigration){
     predecessorPolicySha256:markerReceipt.predecessor_policy_sha256,
     preflightSubjectSha256:preflight.subject_sha256,nodeSha256:await sha(process.execPath),
     deployScriptSha256:await sha(fileURLToPath(import.meta.url)),
+    hostCommandPins:deployArgs.hostCommandPins,
     nonce:deployArgs.migrationNonce,issuedAt:deployArgs.migrationIssuedAt,
     expiresAt:deployArgs.migrationExpiresAt
   });
@@ -320,7 +321,7 @@ const args=[
   '--bridge-root',bridgeRoot,'--bridge-script-sha256',await sha(bridgeScript),
   '--enable-machine-fs','--enable-observation','--enable-desktop','--enable-autonomous-supervisor','--recover-offline-predecessor'
 ];
-if(deployArgs.hostCommandPin!==null)args.push('--host-command-pin',deployArgs.hostCommandPin);
+args.push(...hostCommandPinArgs(deployArgs.hostCommandPins));
 let result=null,verification=null,activationOutcomePath=null;
 let continuityEngine=null,continuityUpdateId=null;
 

package/scripts/issue-uac-migration-r153.mjs

@@ -9,6 +9,7 @@ import {parseActivePointer} from '../src/release-slot.mjs';
 import {inspectTrustedInstallation,privilegedEpochInstallFiles} from '../src/privileged-install-trust-r89.mjs';
 import {verifyMarkerReconciliationReceipt} from '../src/clean-activation-recovery-r153.mjs';
 import {createUacApproval,uacPointerSha256,protectedUacReceiptPath} from '../src/uac-approval-contract-r153.mjs';
+import {decodeHostCommandPins} from '../src/host-command-pins-r154.mjs';
 
 const root=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..');
 const sha=b=>createHash('sha256').update(b).digest('hex');
@@ -17,11 +18,15 @@ const hash=async f=>sha(await read(f));
 const fail=text=>{throw new Error('R153 UAC issuer rejected: '+text);};
 function args(argv){
   const expected=['--state-root','--marker-receipt','--marker-receipt-sha256','--preflight-subject-sha256'];
-  if(argv.length!==8||expected.some((key,i)=>argv[2*i]!==key))fail('unexpected arguments');
+  if(![8,10].includes(argv.length)||expected.some((key,i)=>argv[2*i]!==key)||
+     (argv.length===10&&argv[8]!=='--host-command-pins-json'))fail('unexpected arguments');
   const [state,receipt,receiptHash,preflight]=[argv[1],argv[3],argv[5],argv[7]];
   if(!path.win32.isAbsolute(state)||!path.win32.isAbsolute(receipt)||
      !/^[0-9a-f]{64}$/.test(receiptHash)||!/^[0-9a-f]{64}$/.test(preflight))fail('subject arguments invalid');
-  return {state:path.resolve(state),receipt:path.resolve(receipt),receiptHash,preflight};
+  let hostCommandPins=[];
+  try{hostCommandPins=decodeHostCommandPins(argv.length===10?argv[9]:'[]');}
+  catch(error){fail(error.message);}
+  return {state:path.resolve(state),receipt:path.resolve(receipt),receiptHash,preflight,hostCommandPins};
 }
 async function regular(file,label){const s=await lstat(file);if(!s.isFile()||s.isSymbolicLink())fail(label+' must be regular');return s;}
 async function absent(file,label){try{await lstat(file);fail(label+' present');}catch(e){if(e?.code!=='ENOENT')throw e;}}
@@ -33,7 +38,7 @@ async function main(){
     {encoding:'utf8',shell:false,windowsHide:true,timeout:12000});
   if(elevated.error||elevated.status!==0||String(elevated.stdout).trim().toLowerCase()!=='true')
     fail('explicit Windows UAC elevation required');
-  const {state,receipt,receiptHash,preflight}=args(process.argv.slice(2));
+  const {state,receipt,receiptHash,preflight,hostCommandPins}=args(process.argv.slice(2));
   if(path.dirname(receipt).toLowerCase()!==path.join(state,'evidence','legacy-migration').toLowerCase())
     fail('marker receipt path not in state evidence root');
   const issueFile=fileURLToPath(import.meta.url);
@@ -41,11 +46,12 @@ async function main(){
   const helperFile=path.join(root,'scripts','request-uac-migration-r153.ps1');
   const trust=await inspectTrustedInstallation([...privilegedEpochInstallFiles(root,process.execPath),
     issueFile,deployFile,helperFile,path.join(root,'package.json'),path.join(root,'MANIFEST.SHA256'),path.join(root,'RELEASE.json'),path.join(root,'src','uac-approval-contract-r153.mjs'),
-    path.join(root,'src','clean-activation-recovery-r153.mjs'),path.join(root,'src','legacy-offline-policy-proof-r146.mjs')]);
+    path.join(root,'src','clean-activation-recovery-r153.mjs'),path.join(root,'src','legacy-offline-policy-proof-r146.mjs'),
+    path.join(root,'src','host-command-pins-r154.mjs')]);
   if(trust.trusted!==true)fail('candidate not R89 protected');
   const pkg=JSON.parse((await read(path.join(root,'package.json'))).toString('utf8'));
   const rel=JSON.parse((await read(path.join(root,'RELEASE.json'))).toString('utf8'));
-  if(pkg.version!=='0.15.60'||rel.version!==pkg.version)fail('candidate release identity mismatch');
+  if(pkg.version!=='0.15.61'||rel.version!==pkg.version)fail('candidate release identity mismatch');
   const pointer=parseActivePointer((await read(path.join(state,'active-release.json'))).toString('utf8'));
   if(pointer.version!=='0.15.45'||rel.parent?.release_id!==pointer.release_id||
     rel.parent?.manifest_sha256!==pointer.manifest_sha256||
@@ -85,6 +91,7 @@ async function main(){
     predecessorPointerSha256:uacPointerSha256(pointer),
     predecessorPolicySha256:policies,preflightSubjectSha256:preflight,
     nodeSha256:await hash(process.execPath),deployScriptSha256:await hash(deployFile),
+    hostCommandPins,
     nonce,issuedAt,expiresAt});
   // The strict installation manifest disallows unmanifested files. A receipt
   // under root would turn an otherwise valid candidate into an invalid tree.

package/scripts/r153-prepublish-identity.mjs

@@ -6,9 +6,9 @@ import {fileURLToPath} from 'node:url';
 const defaultRoot=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..');
 const hex64=/^[0-9a-f]{64}$/;
 const EXPECTED=Object.freeze({
-  candidateVersion:'0.15.60', train:'R153',
-  sourceVersion:'0.15.59',
-  sourceSha256:'0c20152b8ee553f06f05dfe017f4bd823d30cd50710722e9e0874f0bd6c66c75',
+  candidateVersion:'0.15.61', train:'R154',
+  sourceVersion:'0.15.60',
+  sourceSha256:'b85f735f4c8be56f97ea5c78f0cc48583e8d5708a704c903596f5720e36ace83',
   runtimeVersion:'0.15.45',
   runtimeReleaseId:'v0.15.45-34aa8d1241cfb8bf',
   runtimeManifest:'34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc',

package/scripts/request-uac-migration-r153.ps1

@@ -7,7 +7,7 @@ param(
     [Parameter(Mandatory=$true)][string]$MarkerReceiptPath,
     [Parameter(Mandatory=$true)][ValidatePattern('^[0-9a-f]{64}$')][string]$MarkerReceiptSha256,
     [ValidatePattern('^[0-9a-f]{64}$')][string]$PreflightSubjectSha256,
-    [ValidatePattern('^powershell_script=[0-9a-f]{64}$')][string]$HostCommandPin,
+    [string]$HostCommandPinsJson = '[]',
     [switch]$Elevated
 )
 $ErrorActionPreference = 'Stop'
@@ -21,6 +21,19 @@ function Require-AbsoluteFile([string]$Value,[string]$Label) {
     return $item.FullName
 }
 function Full([string]$Value) { [IO.Path]::GetFullPath($Value).TrimEnd('\') }
+function Validate-PinsJson([string]$Value) {
+    try { $pins = @($Value | ConvertFrom-Json) } catch { throw 'R154 host command pins JSON invalid' }
+    if ($pins.Count -gt 16) { throw 'R154 host command pin limit exceeded' }
+    $seen = @{}
+    foreach ($pin in $pins) {
+        if ([string]$pin -cnotmatch '^[A-Za-z0-9._-]{1,64}=[0-9a-f]{64}$') { throw 'R154 host command pin contract invalid' }
+        $id = ([string]$pin).Split('=')[0]
+        if ($seen.ContainsKey($id)) { throw 'R154 duplicate host command pin' }
+        $seen[$id] = $true
+    }
+    return $pins
+}
+$HostCommandPins = @(Validate-PinsJson $HostCommandPinsJson)
 $NodePath = Require-AbsoluteFile $NodePath 'Node executable'
 $DeployScript = Require-AbsoluteFile $DeployScript 'Deploy script'
 $MarkerReceiptPath = Require-AbsoluteFile $MarkerReceiptPath 'Marker reconciliation receipt'
@@ -100,7 +113,7 @@ if (-not $Elevated) {
     # -Verb RunAs is the UseShellExecute parameter set. PowerShell 5.1 rejects
     # -RedirectStandardOutput/-RedirectStandardError in that same Start-Process.
     # The elevated child writes bounded, no-clobber evidence instead.
-    if ($HostCommandPin) { $arguments += @('-HostCommandPin',$HostCommandPin) }
+    if ($HostCommandPinsJson -cne '[]') { $arguments += @('-HostCommandPinsJson',('"' + $HostCommandPinsJson.Replace('"','\"') + '"')) }
     $child = Start-Process -FilePath $powershell -ArgumentList $arguments -Verb RunAs -Wait -PassThru -WindowStyle Hidden
     if (Test-Path -LiteralPath $StdoutPath) { [Console]::Out.Write([IO.File]::ReadAllText($StdoutPath)) }
     if (Test-Path -LiteralPath $StderrPath) { [Console]::Error.Write([IO.File]::ReadAllText($StderrPath)) }
@@ -123,7 +136,7 @@ try {
     try {
         $issuerOutput = @(& $NodePath $issuerScript '--state-root' $env:DEADBYTE_STATE_ROOT `
             '--marker-receipt' $MarkerReceiptPath '--marker-receipt-sha256' $MarkerReceiptSha256 `
-            '--preflight-subject-sha256' $PreflightSubjectSha256 2>&1)
+            '--preflight-subject-sha256' $PreflightSubjectSha256 '--host-command-pins-json' $HostCommandPinsJson 2>&1)
         $issuerExit = $LASTEXITCODE
     } finally { $ErrorActionPreference = $priorErrorAction }
     $issuerText = (@($issuerOutput) | ForEach-Object { [string]$_ }) -join "`n"
@@ -145,7 +158,7 @@ try {
             '--migration-expires-at',$issued.expires_at_utc,
             '--uac-approval-receipt',$issued.receipt_path,
             '--uac-approval-receipt-sha256',$issued.receipt_sha256)
-        if ($HostCommandPin) { $deployArgs += @('--host-command-pin',$HostCommandPin) }
+        foreach ($pin in $HostCommandPins) { $deployArgs += @('--host-command-pin',[string]$pin) }
         $deployOutput = @(& $NodePath $DeployScript @deployArgs 2>&1)
         $deployExit = $LASTEXITCODE
     } finally { $ErrorActionPreference = $priorErrorAction }

package/scripts/verify-protected-stage-r153.mjs

@@ -14,6 +14,7 @@ const files=[...privilegedEpochInstallFiles(root,process.execPath),
   path.join(root,'package.json'),path.join(root,'MANIFEST.SHA256'),path.join(root,'RELEASE.json'),
   path.join(root,'src','uac-approval-contract-r153.mjs'),
   path.join(root,'src','clean-activation-recovery-r153.mjs'),
+  path.join(root,'src','host-command-pins-r154.mjs'),
   path.join(root,'src','legacy-offline-policy-proof-r146.mjs')];
 const verdict=await inspectTrustedInstallation(files);
 if(verdict.trusted!==true)throw new Error('R153 protected stage trust rejected');

package/src/clean-activation-recovery-r153.mjs

@@ -32,7 +32,7 @@ export function classifyLegacyMigration(input){
   if(!input.pointer||input.pointer.version!=='0.15.45'||
     !HEX64.test(String(input.pointer.manifest_sha256??''))||!HEX64.test(String(input.pointer.generation_manifest_sha256??'')))
     return reject('predecessor identity invalid',subject);
-  if(!input.candidate||input.candidate.version!=='0.15.60'||
+  if(!input.candidate||input.candidate.version!=='0.15.61'||
     !HEX64.test(String(input.candidate.manifest_sha256??''))||!HEX64.test(String(input.candidate.tarball_sha256??'')))
     return reject('candidate identity invalid',subject);
   if(PLANES.some(plane=>!HEX64.test(String(input.policySha256?.[plane]??''))))

package/src/deadbyte-cli.mjs

@@ -27,6 +27,7 @@ import {acquireForegroundSessionLock} from './foreground-session-lock.mjs';
 import { AUTHORITY_PLANES, authorityVector, authorityRestorePlan, parseAuthorityObservation, assertAuthorityVector, assertRuntimeReadyObservation, authorityBanner } from './remote-authority.mjs';
 import { decodeRemoteLogBytes, boundedRemoteDiagnostic, readRemoteLogAppend } from './remote-log-decode-r60.mjs';
 import {reconcileStaleMarker,resumeMarkerReconciliation,recoverPublishedMarkerTerminal} from './clean-activation-recovery-r153.mjs';
+import {normalizeHostCommandPins,encodeHostCommandPins} from './host-command-pins-r154.mjs';
 
 const REMOTE_COMMANDS=new Set([
   'menu','start','resume','park','stop','restart','status','url','test','fulltest','toggle','clean','machinetest',
@@ -114,7 +115,7 @@ async function reportVersionCoherence(root,{displayMode='ascii'}={}){
   writeRemote(process.stderr,`${remoteTag('warn',displayMode)} VERSION SKEW: CLI package ${DEADBYTE_VERSION}; active runtime ${active.version} (${active.release_id})\n`,displayMode);
   return active;
 }
-async function synchronizeForegroundRuntime(ctx,{displayMode='unicode',migrationContext=null,hostCommandPin=null}={}){
+async function synchronizeForegroundRuntime(ctx,{displayMode='unicode',migrationContext=null,hostCommandPins=[]}={}){
   const packageManifestSha256=createHash('sha256').update(await readFile(path.join(CURRENT_PACKAGE_ROOT,'MANIFEST.SHA256'))).digest('hex');
   return ensureRuntimeCoherence({
     cliVersion:DEADBYTE_VERSION,
@@ -182,7 +183,7 @@ async function synchronizeForegroundRuntime(ctx,{displayMode='unicode',migration
             '-ExpectedBootstrapSha256',bootstrapMatch[1],
             '-StdoutPath',stdoutPath,'-StderrPath',stderrPath,
             '-MarkerReceiptPath',migrationContext.receipt_path,'-MarkerReceiptSha256',migrationContext.receipt_sha256,
-            ...(hostCommandPin?['-HostCommandPin',hostCommandPin]:[])],{
+            ...(hostCommandPins.length?['-HostCommandPinsJson',encodeHostCommandPins(hostCommandPins)]:[])],{
             cwd:CURRENT_PACKAGE_ROOT,env:windowsPowerShellEnvironment(process.env),encoding:'utf8',windowsHide:true,shell:false,
             timeout:REMOTE_UPDATE_TIMEOUT_MS,maxBuffer:16*1024*1024
           });
@@ -744,7 +745,7 @@ async function releaseRemoteSession(ctx,marker,{displayMode='unicode'}={}){
   if(deletePinnedRemoteMarker(remoteSessionMarker(ctx.root),snapshot.sha256)!=='REMOVED')
     throw new Error('remote session ownership marker replaced before native deletion; marker retained');
 }
-async function runRemoteSession({resumeCursor=null,verbose=false,trace=false,filterExpression='',mode='default',hostCommandPin=null}={}){
+async function runRemoteSession({resumeCursor=null,verbose=false,trace=false,filterExpression='',mode='default',hostCommandPins=[]}={}){
   const display=prepareRemoteConsole();
   const displayMode=display.mode;
   const ctx=await remoteContext();
@@ -756,7 +757,7 @@ async function runRemoteSession({resumeCursor=null,verbose=false,trace=false,fil
     startupLock.assertHeld();
     const migrationContext=await recoverRemoteSession(ctx,{displayMode});
     startupLock.assertHeld();
-    await synchronizeForegroundRuntime(ctx,{displayMode,migrationContext,hostCommandPin});
+    await synchronizeForegroundRuntime(ctx,{displayMode,migrationContext,hostCommandPins});
     startupLock.assertHeld();
     marker=await claimRemoteSession(ctx);
     startupLock.assertHeld();
@@ -869,17 +870,16 @@ async function runRemoteSession({resumeCursor=null,verbose=false,trace=false,fil
   }
 }
 async function runRemote(args){
-  let verbose=false,trace=false,filterExpression='',resumeCursor=null,mode='default',hostCommandPin=null;
+  let verbose=false,trace=false,filterExpression='',resumeCursor=null,mode='default';
+  const hostCommandPinValues=[];
   const positional=[];
   for(let index=0;index<args.length;index++){
     const arg=args[index];
     if(arg==='--verbose'||arg==='-v'){verbose=true;continue;}
     if(arg==='--trace'){trace=true;continue;}
     if(arg==='--host-command-pin'){
-      if(hostCommandPin!==null)throw new Error('remote --host-command-pin may be specified once');
       const value=String(args[++index]??'');
-      if(!/^powershell_script=[0-9a-f]{64}$/.test(value))throw new Error('remote --host-command-pin requires powershell_script=lowercase_sha256');
-      hostCommandPin=value;continue;
+      hostCommandPinValues.push(value);continue;
     }
     if(['--operator','--desktop','--host','--full'].includes(arg)){
       if(mode!=='default') throw new Error('remote authority modes are mutually exclusive');
@@ -897,8 +897,11 @@ async function runRemote(args){
     }
     positional.push(arg);
   }
-  const presentation=verbose||trace||Boolean(filterExpression)||resumeCursor!==null||mode!=='default'||hostCommandPin!==null;
-  if(positional.length===0){await runRemoteSession({resumeCursor,verbose,trace,filterExpression,mode,hostCommandPin});return;}
+  let hostCommandPins;
+  try{hostCommandPins=normalizeHostCommandPins(hostCommandPinValues);}
+  catch(error){throw new Error(`remote --host-command-pin ${error.message}`);}
+  const presentation=verbose||trace||Boolean(filterExpression)||resumeCursor!==null||mode!=='default'||hostCommandPins.length>0;
+  if(positional.length===0){await runRemoteSession({resumeCursor,verbose,trace,filterExpression,mode,hostCommandPins});return;}
   if(presentation) throw new Error('remote presentation flags are valid only for foreground session');
   if(positional.length>1) throw new Error('remote accepts one controller command');
   const command=positional[0];if(!REMOTE_COMMANDS.has(command)) throw new Error(`unsupported remote command '${command}'`);

package/src/host-command-pins-r154.mjs

@@ -0,0 +1,34 @@
+const PIN=/^([A-Za-z0-9._-]{1,64})=([0-9a-f]{64})$/;
+const LIMIT=16;
+const REPINNABLE=new Set(['powershell_script','powershell_inline','cmd_script','cmd_inline','node_script','node_inline']);
+
+export function normalizeHostCommandPins(values=[]){
+  if(!Array.isArray(values)||values.length>LIMIT)throw new Error(`host command pin limit is ${LIMIT}`);
+  const seen=new Set(),pins=[];
+  for(const value of values){
+    const match=PIN.exec(String(value??''));
+    if(!match)throw new Error('host command pin contract requires command_id=lowercase_sha256');
+    const [,command_id,sha256]=match;
+    if(!REPINNABLE.has(command_id))throw new Error(`host command '${command_id}' is not repinnable`);
+    if(seen.has(command_id))throw new Error(`duplicate host command pin '${command_id}'`);
+    seen.add(command_id);pins.push(Object.freeze({command_id,sha256}));
+  }
+  pins.sort((a,b)=>a.command_id<b.command_id?-1:a.command_id>b.command_id?1:0);
+  return Object.freeze(pins);
+}
+
+export function encodeHostCommandPins(pins=[]){
+  return JSON.stringify(normalizeHostCommandPins(pins.map(pin=>`${pin.command_id}=${pin.sha256}`))
+    .map(pin=>`${pin.command_id}=${pin.sha256}`));
+}
+
+export function decodeHostCommandPins(encoded='[]'){
+  let values;
+  try{values=JSON.parse(String(encoded));}catch{throw new Error('host command pins JSON invalid');}
+  return normalizeHostCommandPins(values);
+}
+
+export function hostCommandPinArgs(pins=[]){
+  return normalizeHostCommandPins(pins.map(pin=>`${pin.command_id}=${pin.sha256}`))
+    .flatMap(pin=>['--host-command-pin',`${pin.command_id}=${pin.sha256}`]);
+}

package/src/uac-approval-contract-r153.mjs

@@ -3,6 +3,7 @@
 // Verify it only when running elevated from an independently R89-verified install.
 import {createHash} from 'node:crypto';
 import path from 'node:path';
+import {normalizeHostCommandPins} from './host-command-pins-r154.mjs';
 
 const HEX64=/^[0-9a-f]{64}$/;
 const PLANES=['process','coding','autonomous','desktop','host'];
@@ -10,7 +11,7 @@ const ALL_DISARMED=Object.freeze(Object.fromEntries(PLANES.map(p=>[p,false])));
 const TIME=/^\d{4}-\d\d-\d\dT\d\d:\d\d:\d\d\.\d{3}Z$/;
 const FIELDS=['schema','action','state_root','candidate_root','candidate_version','candidate_manifest_sha256',
   'tarball_sha256','marker_receipt_sha256','predecessor_pointer_sha256','predecessor_policy_sha256',
-  'preflight_subject_sha256','node_sha256','deploy_script_sha256','nonce','issued_at_utc',
+  'preflight_subject_sha256','node_sha256','deploy_script_sha256','host_command_pins','nonce','issued_at_utc',
   'expires_at_utc','allowed_authority_after','subject_sha256'];
 function canonical(value){
   if(value===null)return 'null';
@@ -58,7 +59,7 @@ export function uacReceiptSubject(input){
   const candidate=windowsAbsolute(input.candidateRoot,'candidate root');
   if(!candidate.startsWith('c:\\program files\\')||candidate==='c:\\program files\\')
     throw new Error('UAC migration requires a protected candidate installation');
-  if(input.candidateVersion!=='0.15.60')throw new Error('UAC migration candidate identity unsupported');
+  if(input.candidateVersion!=='0.15.61')throw new Error('UAC migration candidate identity unsupported');
   const hashes=['candidateManifestSha256','tarballSha256','markerReceiptSha256','predecessorPointerSha256',
     'preflightSubjectSha256','nodeSha256','deployScriptSha256','nonce'];
   for(const key of hashes)if(!HEX64.test(String(input[key]??'')))throw new Error('UAC approval hash/nonce invalid: '+key);
@@ -68,6 +69,8 @@ export function uacReceiptSubject(input){
     throw new Error('UAC predecessor policy identity incomplete');
   const issued=time(input.issuedAt,'issue time'),expires=time(input.expiresAt,'expiry time');
   if(expires<=issued||expires-issued>600_000)throw new Error('UAC consent lifetime invalid');
+  const hostCommandPins=normalizeHostCommandPins((input.hostCommandPins??[]).map(pin=>
+    typeof pin==='string'?pin:`${pin?.command_id??''}=${pin?.sha256??''}`));
   return Object.freeze({schema:'deadbyte.r153-uac-approval.v1',action:'narrow_legacy_policy_and_activate',
     state_root:root,candidate_root:candidate,candidate_version:input.candidateVersion,
     candidate_manifest_sha256:input.candidateManifestSha256,tarball_sha256:input.tarballSha256,
@@ -75,7 +78,7 @@ export function uacReceiptSubject(input){
     predecessor_pointer_sha256:input.predecessorPointerSha256,
     predecessor_policy_sha256:Object.freeze(Object.fromEntries(PLANES.map(p=>[p,policies[p]]))),
     preflight_subject_sha256:input.preflightSubjectSha256,node_sha256:input.nodeSha256,
-    deploy_script_sha256:input.deployScriptSha256,nonce:input.nonce,
+    deploy_script_sha256:input.deployScriptSha256,host_command_pins:hostCommandPins,nonce:input.nonce,
     issued_at_utc:input.issuedAt,expires_at_utc:input.expiresAt,
     allowed_authority_after:Object.freeze({...ALL_DISARMED})});
 }

package/src/version.mjs

@@ -1,4 +1,4 @@
-export const DEADBYTE_VERSION = '0.15.60';
+export const DEADBYTE_VERSION = '0.15.61';
 export const MCP_PROTOCOL_VERSION = '2026-07-28';
 export const RECEIPT_SCHEMA_V1 = 'deadbyte.receipt.v1';
 export const RECEIPT_SCHEMA_V2 = 'deadbyte.receipt.v2';

package/test/r130-release-security-contract.test.mjs

@@ -13,15 +13,15 @@ test('R130 security patch has a new immutable package identity and truthful sour
     read('SBOM.cdx.json'),read('package-lock.json'),read('TEST-MATRIX.json')]);
   assert.equal(pkg.name,'deadbyte-mcp');
   for(const actual of [pkg.version,release.version,provenance.version,matrix.version,bom.metadata.component.version,lock.version,lock.packages[''].version,DEADBYTE_VERSION])
-    assert.equal(actual,'0.15.60');
-  assert.equal(release.train,'R153');
-  assert.equal(matrix.train,'R153');
-  assert.equal(release.source_predecessor.version,'0.15.59');
-  assert.match(release.source_predecessor.source_path,/0\.15\.59/);
+    assert.equal(actual,'0.15.61');
+  assert.equal(release.train,'R154');
+  assert.equal(matrix.train,'R154');
+  assert.equal(release.source_predecessor.version,'0.15.60');
+  assert.match(release.source_predecessor.source_path,/0\.15\.60/);
   assert.equal(release.runtime_predecessor.version,'0.15.45');
-  assert.equal(provenance.source_predecessor_tarball_sha256,'0c20152b8ee553f06f05dfe017f4bd823d30cd50710722e9e0874f0bd6c66c75');
-  assert.equal(provenance.source_predecessor_version,'0.15.59');
-  assert.equal(provenance.source_predecessor_manifest_file_sha256,'f727be4a63220f4215f18282a1fd89963924a64adcd07747ca3c12d8fb166d86');
+  assert.equal(provenance.source_predecessor_tarball_sha256,'b85f735f4c8be56f97ea5c78f0cc48583e8d5708a704c903596f5720e36ace83');
+  assert.equal(provenance.source_predecessor_version,'0.15.60');
+  assert.equal(provenance.source_predecessor_manifest_file_sha256,'2a19c9da7f11eb831dfb24ba6c6d9789e25a373cea2f3a25ff21d460e07fba36');
   assert.equal(pkg.dependencies['@modelcontextprotocol/client'],'2.3.1');
   assert.equal(pkg.dependencies['@modelcontextprotocol/server'],'2.3.1');
   for(const dep of ['@modelcontextprotocol/client','@modelcontextprotocol/server'])

package/test/r132-release-identity.test.mjs

@@ -15,13 +15,13 @@ test('R144 package identities, R132 historic evidence and published predecessor
   for(const value of [pkg.version,lock.version,lock.packages[''].version,release.version,prov.version,bom.metadata.component.version,matrix.version,DEADBYTE_VERSION]){
     assert.equal(value,pkg.version);
   }
-  assert.equal(release.train,'R153');
-  assert.equal(matrix.train,'R153');
-  assert.equal(release.source_predecessor.version,'0.15.59');
-  assert.match(release.source_predecessor.source_path,/0\.15\.59/);
-  assert.equal(prov.source_predecessor_version,'0.15.59');
-  assert.equal(prov.source_predecessor_manifest_file_sha256,'f727be4a63220f4215f18282a1fd89963924a64adcd07747ca3c12d8fb166d86');
-  assert.equal(prov.parent_tarball_sha256,'0c20152b8ee553f06f05dfe017f4bd823d30cd50710722e9e0874f0bd6c66c75');
+  assert.equal(release.train,'R154');
+  assert.equal(matrix.train,'R154');
+  assert.equal(release.source_predecessor.version,'0.15.60');
+  assert.match(release.source_predecessor.source_path,/0\.15\.60/);
+  assert.equal(prov.source_predecessor_version,'0.15.60');
+  assert.equal(prov.source_predecessor_manifest_file_sha256,'2a19c9da7f11eb831dfb24ba6c6d9789e25a373cea2f3a25ff21d460e07fba36');
+  assert.equal(prov.parent_tarball_sha256,'b85f735f4c8be56f97ea5c78f0cc48583e8d5708a704c903596f5720e36ace83');
   assert.equal(prov.parent_registry_tarball_sha1,'04cc1a1e80bcb7062ac39eee6b7bab70edd5d8c3');
   assert.equal(release.runtime_predecessor.version,'0.15.45');
   assert.equal(prov.runtime_predecessor.release_id,release.runtime_predecessor.release_id);

package/test/r153-clean-activation-recovery.test.mjs

@@ -22,7 +22,7 @@ const planes=['process','coding','autonomous','desktop','host'];
 const base=()=>({
   stateRoot:'C:\\Users\\owner\\.deadbyte-mcp',
   pointer:{release_id:'v0.15.45-parent',version:'0.15.45',manifest_sha256:'1'.repeat(64),generation_manifest_sha256:'2'.repeat(64)},
-  candidate:{version:'0.15.60',manifest_sha256:'3'.repeat(64),tarball_sha256:'4'.repeat(64)},
+  candidate:{version:'0.15.61',manifest_sha256:'3'.repeat(64),tarball_sha256:'4'.repeat(64)},
   observation:{state:'OFFLINE',local_ready:false,bridge:{alive:false},core:{alive:false},cloud:{alive:false},supervisor:{running:false},
     authority:Object.fromEntries(planes.map(plane=>[plane,{configured:true,armed:false,reason:plane==='autonomous'?'unverified':'disarmed'}]))},
   policySha256:Object.fromEntries(planes.map((plane,index)=>[plane,String(index+5).repeat(64)])),
@@ -55,7 +55,7 @@ test('R153 RED: UAC subject binds candidate, predecessor, policy, marker, state
     issuedAt:'2026-10-23T16:00:00.000Z',expiresAt:'2026-10-23T16:10:00.000Z'});
   assert.equal(subject.action,'narrow_legacy_policy_and_activate');
   assert.equal(subject.marker_sha256,HEX);
-  assert.equal(subject.candidate.version,'0.15.60');
+  assert.equal(subject.candidate.version,'0.15.61');
   assert.equal(subject.nonce,'b'.repeat(64));
   assert.deepEqual(subject.allowed_authority_after,Object.fromEntries(planes.map(plane=>[plane,false])));
 });

package/test/r153-prepublish-identity.test.mjs

@@ -29,7 +29,7 @@ test('R153 rejects runtime predecessor or parent drift',()=>{
 test('R153 rejects version / train / bridge identity drift',()=>{
   const state=copy();state.pkg.version='0.15.56';
   assert.throws(()=>verifyR153Lineage(state),/package version/);
-  const state2=copy();state2.release.train='R154';
+  const state2=copy();state2.release.train='R153';
   assert.throws(()=>verifyR153Lineage(state2),/train/);
   const state3=copy();state3.bridge.version='0.15.45';
   assert.throws(()=>verifyR153Lineage(state3),/bridge version/);

package/test/r153-r65-signed-precondition-recovery.test.mjs

@@ -32,13 +32,13 @@ test('signed R27 initial precondition reject safely reconciles R65 unknown claim
     const dir=path.join(updates,'r27-'+'d'.repeat(16)+'-synthetic');
     await mkdir(dir);
     const failure=seal({schema:'deadbyte.r27-slot-update-failure.v1',update_id:path.basename(dir),
-      release_version:'0.15.60',candidate_manifest_sha256:'d'.repeat(64),failed_at_utc:now(),
+      release_version:'0.15.61',candidate_manifest_sha256:'d'.repeat(64),failed_at_utc:now(),
       result:'PRECONDITION_REJECTED',phase:'initial',error:{name:'Error',message:"host command 'powershell_script' executable pin drift detected; explicit approval required"},
       prior_pointer:pointer,attempted_pointer:null,rollback:{attempted:false,errors:[]}},privateKey,publicKey);
     await writeFile(path.join(dir,'failure-receipt.json'),JSON.stringify(failure));
     await writeFile(path.join(updates,'r65-activation-outcome-test.json'),JSON.stringify({
       schema:'deadbyte.r65-activation-outcome.v1',claim_operation_id:claim.operation_id,
-      preflight_subject_sha256:claim.subject_sha256,candidate_version:'0.15.60',
+      preflight_subject_sha256:claim.subject_sha256,candidate_version:'0.15.61',
       candidate_manifest_sha256:'d'.repeat(64),predecessor_release_id:pointer.release_id,
       outcome:{state:'ACTIVATION_OUTCOME_UNKNOWN'},update_id:null,continuity_update_id:null,state_path:null,observed_at_utc:now()
     }));

package/test/r153-staging-leaf-acl.test.mjs

@@ -20,28 +20,39 @@ test('R153 Windows ACL reproduction rejects stripped leaf ACE and restores direc
 $root = Join-Path $env:TEMP ('r153-native-acl-test-' + [guid]::NewGuid().ToString('N'))
 $sid = [Security.Principal.WindowsIdentity]::GetCurrent().User.Value
 $leaf = Join-Path $root 'child\file.txt'
+function Read-Digest([string]$Path) {
+  try {
+    $sha = [Security.Cryptography.SHA256]::Create()
+    try { return ([BitConverter]::ToString($sha.ComputeHash([IO.File]::ReadAllBytes($Path)))).Replace('-','') }
+    finally { $sha.Dispose() }
+  } catch [UnauthorizedAccessException] { return $null }
+}
 try {
   New-Item -ItemType Directory -Path (Split-Path -Parent $leaf) -Force | Out-Null
   [IO.File]::WriteAllText($leaf,'read-only regression fixture')
   & icacls.exe $root '/inheritance:r' '/grant:r' ('*'+$sid+':(OI)(CI)(F)') '/T' '/C' | Out-Null
   if($LASTEXITCODE -ne 0){throw 'REPRO_SETUP_FAILED'}
-  $blocked = Get-FileHash -LiteralPath $leaf -Algorithm SHA256 -ErrorAction SilentlyContinue
+  $blocked = Read-Digest $leaf
   if($null -ne $blocked){throw 'REPRO_DID_NOT_STRIP_LEAF_ACE'}
   & icacls.exe $root '/grant' ('*'+$sid+':(F)') '/T' '/C' | Out-Null
   if($LASTEXITCODE -ne 0){throw 'LEAF_REPAIR_FAILED'}
-  $restored = Get-FileHash -LiteralPath $leaf -Algorithm SHA256
-  if($null -eq $restored -or $restored.Hash.Length -ne 64){throw 'LEAF_NOT_READABLE_AFTER_REPAIR'}
-  $acl = Get-Acl -LiteralPath $leaf
-  $allow=@($acl.Access | Where-Object {$_.AccessControlType -eq 'Allow'})
+  $restored = Read-Digest $leaf
+  if($null -eq $restored -or $restored.Length -ne 64){throw 'LEAF_NOT_READABLE_AFTER_REPAIR'}
+  $acl = [IO.File]::GetAccessControl($leaf)
+  $allow=@($acl.GetAccessRules($true,$true,[Security.Principal.SecurityIdentifier]) | Where-Object {$_.AccessControlType -eq 'Allow'})
   if($allow.Count -ne 1){throw 'LEAF_HAS_UNEXPECTED_ALLOW_ACE_COUNT'}
-  if($allow[0].IdentityReference.Translate([Security.Principal.SecurityIdentifier]).Value -ne $sid){throw 'LEAF_HAS_UNEXPECTED_TRUSTEE'}
+  if($allow[0].IdentityReference.Value -ne $sid){throw 'LEAF_HAS_UNEXPECTED_TRUSTEE'}
   Write-Output 'R153_WIN32_LEAF_ACL_REPAIR_PASS'
 } finally {
-  if(Test-Path -LiteralPath $root){Remove-Item -LiteralPath $root -Force -Recurse}
+  if(Test-Path -LiteralPath $root){
+    & icacls.exe $root '/reset' '/T' '/C' | Out-Null
+    & icacls.exe $root '/inheritance:e' '/grant:r' ('*'+$sid+':(OI)(CI)(F)') '/T' '/C' | Out-Null
+    Remove-Item -LiteralPath $root -Force -Recurse
+  }
 }`;
   const encoded=Buffer.from(ps,'utf16le').toString('base64');
   const result=spawnSync('powershell.exe',['-NoLogo','-NoProfile','-NonInteractive','-EncodedCommand',encoded],
     {encoding:'utf8',timeout:30000,maxBuffer:256*1024});
   assert.equal(result.status,0,result.stderr||result.stdout||String(result.error));
   assert.match(result.stdout,/R153_WIN32_LEAF_ACL_REPAIR_PASS/);
-});
+});

package/test/r153-uac-approval-contract.test.mjs

@@ -4,12 +4,13 @@ import {createUacApproval,verifyUacApproval,validateApprovalWindow,requireTruste
 import {readFileSync} from 'node:fs';
 import {fileURLToPath} from 'node:url';
 const h=(n)=>n.repeat(64);
-const base=()=>({stateRoot:'C:\\Users\\DEADBYTE\\.deadbyte-mcp',candidateRoot:'C:\\Program Files\\DEADBYTE-R153-TEST',candidateVersion:'0.15.60',candidateManifestSha256:h('a'),tarballSha256:h('b'),markerReceiptSha256:h('c'),predecessorPointerSha256:h('d'),predecessorPolicySha256:{process:h('1'),coding:h('2'),autonomous:h('3'),desktop:h('4'),host:h('5')},preflightSubjectSha256:h('e'),nodeSha256:h('f'),deployScriptSha256:h('0'),nonce:h('6'),issuedAt:'2026-10-24T00:00:00.000Z',expiresAt:'2026-10-24T00:05:00.000Z'});
+const base=()=>({stateRoot:'C:\\Users\\DEADBYTE\\.deadbyte-mcp',candidateRoot:'C:\\Program Files\\DEADBYTE-R153-TEST',candidateVersion:'0.15.61',candidateManifestSha256:h('a'),tarballSha256:h('b'),markerReceiptSha256:h('c'),predecessorPointerSha256:h('d'),predecessorPolicySha256:{process:h('1'),coding:h('2'),autonomous:h('3'),desktop:h('4'),host:h('5')},preflightSubjectSha256:h('e'),nodeSha256:h('f'),deployScriptSha256:h('0'),hostCommandPins:[],nonce:h('6'),issuedAt:'2026-10-24T00:00:00.000Z',expiresAt:'2026-10-24T00:05:00.000Z'});
 test('R153 UAC receipt carries exact no-grants narrow migration subject',()=>{
-  const x=base(),receipt=createUacApproval(x);
+  const x={...base(),hostCommandPins:[{command_id:'powershell_script',sha256:h('a')},{command_id:'cmd_script',sha256:h('b')}]},receipt=createUacApproval(x);
   assert.equal(receipt.schema,'deadbyte.r153-uac-approval.v1');
   assert.equal(receipt.action,'narrow_legacy_policy_and_activate');
   assert.deepEqual(receipt.allowed_authority_after,{process:false,coding:false,autonomous:false,desktop:false,host:false});
+  assert.deepEqual(receipt.host_command_pins,[{command_id:'cmd_script',sha256:h('b')},{command_id:'powershell_script',sha256:h('a')}]);
   assert.match(receipt.subject_sha256,/^[0-9a-f]{64}$/);
   assert.deepEqual(verifyUacApproval(receipt,x,{now:'2026-10-24T00:02:00.000Z'}),receipt);
 });
@@ -19,6 +20,7 @@ test('R153 UAC receipt rejects drift across every authority/candidate/runtime in
     assert.throws(()=>verifyUacApproval(receipt,{...x,[key]:value},{now:'2026-10-24T00:02:00.000Z'}),undefined,key);
   }
   assert.throws(()=>verifyUacApproval(receipt,{...x,predecessorPolicySha256:{...x.predecessorPolicySha256,host:h('a')}},{now:'2026-10-24T00:02:00.000Z'}));
+  assert.throws(()=>verifyUacApproval(receipt,{...x,hostCommandPins:[{command_id:'cmd_script',sha256:h('a')}]},{now:'2026-10-24T00:02:00.000Z'}));
 });
 test('R153 UAC receipt fails closed on expiration, malformed, replay-like tamper and grant widening',()=>{
   const x=base(),receipt=createUacApproval(x);
@@ -31,7 +33,7 @@ test('R153 UAC receipt fails closed on expiration, malformed, replay-like tamper
   assert.throws(()=>createUacApproval({...x,issuedAt:'not-a-date'}));
   assert.throws(()=>createUacApproval({...x,nonce:'x'}));
 });
-test('R153 UAC scope only accepts protected root and exact v0.15.60',()=>{
+test('R154 UAC scope only accepts protected root and exact v0.15.61',()=>{
   assert.throws(()=>createUacApproval({...base(),candidateRoot:'C:\\Users\\DEADBYTE\\npm-cache'}),/protected/i);
   assert.throws(()=>createUacApproval({...base(),candidateVersion:'0.15.55'}),/candidate/i);
   assert.throws(()=>validateApprovalWindow('2026-10-24T00:00:00.000Z','2026-10-24T00:00:00.000Z','2026-10-24T00:00:00.000Z'));

package/test/r153-uac-launch-parameter-contract.test.mjs

@@ -45,7 +45,7 @@ test('R153 RED: mutable npx entrypoint stages exact registry package before priv
   assert.doesNotMatch(script,/npm-cli\.js|npm install/i);
   assert.match(script,/Get-FileHash -LiteralPath \$file -Algorithm SHA256/);
   assert.match(script,/NODE_OPTIONS/);
-  assert.match(script,/https:\/\/registry\.npmjs\.org\/deadbyte-mcp\/0\.15\.60/);
+  assert.match(script,/https:\/\/registry\.npmjs\.org\/deadbyte-mcp\/0\.15\.61/);
   assert.match(script,/live npm registry tarball SHA-256 mismatch/);
   assert.match(script,/live npm registry tarball integrity mismatch/);
   assert.match(script,/DEADBYTE-R153-Stage-/);

package/test/r154-multipin-recovery.test.mjs

@@ -0,0 +1,45 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {spawnSync} from 'node:child_process';
+import {fileURLToPath} from 'node:url';
+import {
+  normalizeHostCommandPins,
+  encodeHostCommandPins,
+  decodeHostCommandPins
+} from '../src/host-command-pins-r154.mjs';
+
+const h=value=>value.repeat(64);
+
+test('R154 accepts a bounded set of distinct existing-command repins',()=>{
+  const pins=normalizeHostCommandPins([
+    `powershell_script=${h('a')}`,
+    `cmd_script=${h('b')}`,
+    `cmd_inline=${h('b')}`
+  ]);
+  assert.deepEqual(pins,[
+    {command_id:'cmd_inline',sha256:h('b')},
+    {command_id:'cmd_script',sha256:h('b')},
+    {command_id:'powershell_script',sha256:h('a')}
+  ]);
+  assert.deepEqual(decodeHostCommandPins(encodeHostCommandPins(pins)),pins);
+});
+
+test('R154 rejects duplicate, malformed, oversized, and delimiter-injected repins',()=>{
+  assert.throws(()=>normalizeHostCommandPins([`cmd_script=${h('a')}`,`cmd_script=${h('a')}`]),/duplicate/i);
+  assert.throws(()=>normalizeHostCommandPins([`unrelated_command=${h('a')}`]),/not repinnable/i);
+  assert.throws(()=>normalizeHostCommandPins([`bad/name=${h('a')}`]),/contract/i);
+  assert.throws(()=>normalizeHostCommandPins([`cmd_script=${h('A')}`]),/contract/i);
+  assert.throws(()=>normalizeHostCommandPins(Array.from({length:17},(_,i)=>`cmd_${i}=${h('a')}`)),/limit/i);
+  assert.throws(()=>decodeHostCommandPins('["cmd_script='+h('a')+'","evil"]'),/contract/i);
+});
+
+test('R154 CLI no longer rejects the second explicit command repin in parsing',()=>{
+  const cli=fileURLToPath(new URL('../src/deadbyte-cli.mjs',import.meta.url));
+  const run=spawnSync(process.execPath,[cli,'remote',
+    '--host-command-pin',`powershell_script=${h('a')}`,
+    '--host-command-pin',`cmd_script=${h('b')}`,
+    'status'],{encoding:'utf8',timeout:8000});
+  assert.equal(run.status,1);
+  assert.doesNotMatch(run.stderr,/may be specified once|requires powershell_script/);
+  assert.match(run.stderr,/presentation flags are valid only for foreground session/);
+});

package/test/r59-tool-surface-compat.test.mjs

@@ -83,7 +83,7 @@ test('R72 compact baseline permits only R64 read offset and authorized coding-on
   assert.deepEqual(diff.added,[]);
   assert.deepEqual(diff.removed,[]);
   const packageVersion=JSON.parse(await readFile(path.join(repoRoot,'package.json'),'utf8')).version;
-  if(['0.15.41','0.15.42','0.15.43','0.15.44','0.15.45','0.15.46','0.15.47','0.15.48','0.15.49','0.15.50','0.15.51','0.15.52','0.15.53','0.15.54','0.15.55','0.15.56','0.15.57','0.15.58','0.15.59','0.15.60'].includes(packageVersion)){
+  if(['0.15.41','0.15.42','0.15.43','0.15.44','0.15.45','0.15.46','0.15.47','0.15.48','0.15.49','0.15.50','0.15.51','0.15.52','0.15.53','0.15.54','0.15.55','0.15.56','0.15.57','0.15.58','0.15.59','0.15.60','0.15.61'].includes(packageVersion)){
     assert.deepEqual([...diff.schema_changed].sort(),['machine_fs','native_diff_preview']);
     assert.equal(diff.unchanged.length,41);
     const prior=baseline.tools.find(tool=>tool.name==='machine_fs');