deadbyte-mcp 0.15.60 → 0.15.62

package/docs/R158-DELTA.json

@@ -0,0 +1,80 @@
+{
+    "candidate_r158":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.62-r158-epoch-rebinding",
+    "generated_at_utc":  "2026-10-24T18:16:39.7026066Z",
+    "schema":  "deadbyte.r158-delta.v1",
+    "modified_or_new":  [
+                            {
+                                "after_sha256":  "91778ea575226c67620aa7accc2dd32b9921e14b936b43096fc63e38df6b51aa",
+                                "path":  "docs\\R158-COMBINED-REGRESSION.log",
+                                "before_sha256":  null,
+                                "kind":  "added"
+                            },
+                            {
+                                "after_sha256":  "7c5dfde54d2f44d0ccae5c15619fa26baa6f0701cfd178f25277b436cecc3fb6",
+                                "path":  "docs\\R158-EPOCH-BOOTSTRAP-GREEN.log",
+                                "before_sha256":  null,
+                                "kind":  "added"
+                            },
+                            {
+                                "after_sha256":  "1969a951b6e6bc6cae90e6ea680e36064a1912170df9ca5148893293eb005f65",
+                                "path":  "docs\\R158-EPOCH-BOOTSTRAP-RED.log",
+                                "before_sha256":  null,
+                                "kind":  "added"
+                            },
+                            {
+                                "after_sha256":  "3ca1a76225bc0b25d12666e4bb90bf6da6ee138d297f781ff4a05cfe1af9942b",
+                                "path":  "docs\\R158-EPOCH-IDENTITY-RED.log",
+                                "before_sha256":  null,
+                                "kind":  "added"
+                            },
+                            {
+                                "after_sha256":  "223c531dc61a84085769de68d53fad8208b51a55df8f8444db117d8542ac69d8",
+                                "path":  "docs\\R158-FOCUSED-GREEN.log",
+                                "before_sha256":  null,
+                                "kind":  "added"
+                            },
+                            {
+                                "after_sha256":  "6bb8567c4f2eee8173f5e60f401ed2e304f21ba5210a86d0f9caf4f4eb159195",
+                                "path":  "docs\\R158-PROTECTED-EXACT-SOURCE-LIVE.log",
+                                "before_sha256":  null,
+                                "kind":  "added"
+                            },
+                            {
+                                "after_sha256":  "acd3b31290cbbcbe533ff9c716780851523b5caef3fcf4d5a7254c57111d3e08",
+                                "path":  "docs\\R158-UPDATER-REGRESSION.log",
+                                "before_sha256":  null,
+                                "kind":  "added"
+                            },
+                            {
+                                "after_sha256":  "243014bee0f5cf5ec4016c391028f07364b3807250414ae944b52cb27cae743f",
+                                "path":  "src\\release-generation.mjs",
+                                "before_sha256":  "6deb7a95b91791f76b30d3bebf2ebc36975d3bf8c0d0ec98262da767e1975c7c",
+                                "kind":  "modified"
+                            },
+                            {
+                                "after_sha256":  "a28ceee530f909ede378b7514e85031c19bb70e3e5a1ede3203acf22f9f5665b",
+                                "path":  "src\\runtime-update.mjs",
+                                "before_sha256":  "ca75323b8f2457aef065a0731e4cba806164a5353016e3e63714dd95708a7457",
+                                "kind":  "modified"
+                            },
+                            {
+                                "after_sha256":  "d1a3be6170bd6e8fbdf81b24705fc9095c4df1474462f6d40b3d8478a3eabffe",
+                                "path":  "src\\trusted-epoch-bootstrap-r158.mjs",
+                                "before_sha256":  null,
+                                "kind":  "added"
+                            },
+                            {
+                                "after_sha256":  "efc195b10b5cb706c23f3a35ba8bf07e7ee23daffcb072704e5c14ffd6db26d5",
+                                "path":  "test\\r158-epoch-bootstrap.test.mjs",
+                                "before_sha256":  null,
+                                "kind":  "added"
+                            },
+                            {
+                                "after_sha256":  "d8318a3da499eed69df2dea3e91b1ae107e5363c5c844e245c5bfbf395b1450a",
+                                "path":  "test\\release-generation.test.mjs",
+                                "before_sha256":  "87d680c4210b9bde3e5da6eb4d3da6f7be344ccfd0049fd3493e8fe72d93405f",
+                                "kind":  "modified"
+                            }
+                        ],
+    "source_r157":  "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.62-r157-reference-convergence"
+}

package/docs/R158-PROTECTED-EPOCH-VERIFIED.md

@@ -0,0 +1,43 @@
+# R158 — protected epoch source rebinding
+
+Status: **CANDIDATE / VERIFIED FOCUSED / NOT DEPLOYED**.
+Parent: R157-reference-convergence non-Git snapshot. Parent and production unchanged.
+
+## Root cause from actual installed Windows 0.15.61
+- Active release: C:\Users\DEADBYTE\.deadbyte-mcp\releases\v0.15.61-055d1ff0aa99e60b
+- Active generation config has CoreRoot under writable per-user release and **no AuthorityEpochRoot**.
+- Writable per-user release grants DEADBYTE FullControl, so R89 correctly denies grant with UNTRUSTED_WRITE_ACE.
+- OS-owned copy: C:\Program Files\DEADBYTE-R154-Exact-01561-Activation (Administrators owner; BUILTIN Users ReadAndExecute, not write).
+- Protected manifest/source/native addon hashes match exact active 0.15.61 release. Node executable under C:\Program Files\nodejs owned by SYSTEM.
+- The protected source was verified by the real R89 Get-Acl probe through R158 live read-only test, 3/3 PASS. No grant/activation/UAC occurred.
+
+## Changes
+1. src/release-generation.mjs: AuthorityEpochRoot is mandatory part of generation identity when explicitly supplied; validate Windows drive-absolute input. Legacy omission retains previous identity. Same release with distinct Epoch root now makes distinct generation rather than collision with historical config.
+2. test/release-generation.test.mjs: reproduced RED manifest collision before fix, GREEN after fix; rejects relative, UNC, drive-relative, and empty root.
+3. src/trusted-epoch-bootstrap-r158.mjs: read-only trust gate calls existing R89 protected path inspector; compares exact release MANIFEST.SHA256, native addon, source, CLI and metadata SHA-256. No new dependencies.
+4. src/runtime-update.mjs: --authority-epoch-root optional explicit CLI parameter. During staged candidate preparation verify OS owner/ACL and exact source hashes before binding into generation config. Old inherited trusted root for a different release must fail closed instead of silently reuse it. Existing gate/receipt and owner UAC semantics remain.
+5. test/r158-epoch-bootstrap.test.mjs: CLI input validation, negative unprotected path, manual live read-only protected source preflight, CLI-to-updater wire contract.
+
+## Results
+- Identity regression RED before source fix (generation manifest hash mismatch), GREEN after. 27/27 focused PASS.
+- R158 Windows protected source preflight real Get-Acl and hash check 3/3 PASS.
+- Combined R89/R153/R155/R156/R157/R158 focused suite 94/94 PASS, docs/R158-COMBINED-REGRESSION.log.
+- Updater + deploy preflight + doctor focused suite 69/69 PASS, docs/R158-UPDATER-REGRESSION.log.
+- Full protected regression, exact tarball, restart after activation, user-approved grant/revoke and UAC install are NOT RUN.
+
+## Deployment policy
+- Do not modify C:\Program Files, active-release.json, generation config, or authority grants until owner reviews exact candidate, protected install source, permission effect, downgrade plan and approves elevation.
+- Before successor activation, provision an OS-owned exact candidate release under protected Program Files through UAC. Verify file hashes, ACL/path chain and manifest. Use --authority-epoch-root only with that exact release; mismatched versions fail.
+- A new generation must be promoted through existing signed slot-update path and observed rollback. NO in-place edit to generation config because it breaks GENERATION.SHA256 and active signed binding.
+- After promote, owner explicitly arms only required authority planes. Never arm all as a side effect of activation. Autonomous requires Coding lease and independent owner enrollment.
+- Running npx deadbyte-mcp@latest arm commands against **current 0.15.61 production** will still return R89 UNTRUSTED_WRITE_ACE until protected generation is activated. This is expected; do not disable the detector.
+
+## Remaining blockers
+- R89 protected generation promotion and grant/revoke live: OWNER APPROVAL / UAC required.
+- R155 r153-pending-migration.json locator collision, full Windows regression and startup reconciliation remain unresolved.
+- R70 autonomous independent enrollment remains unresolved.
+- R156/R157 loop tests were isolated; full live project end-to-end and performance benchmarks pending.
+- npm 0.15.62 **NOT PUBLISHED**; package.json still reports 0.15.61. No CI, Git push or production mutation.
+
+## Next action
+Work on isolated R159 startup reconciliation/locator collision with RED then GREEN, preserving this R158 checkpoint. Independently review source changes. Once R89/R155 gates pass, prepare exact 0.15.62 package + owner-facing UAC promotion subject and rollback. Do not conflate unit proof with production activation.