deadbyte-mcp 0.15.60 → 0.15.62

package/scripts/gate-windows-r160.ps1

@@ -0,0 +1,57 @@
+#requires -Version 5.1
+[CmdletBinding()]
+param([ValidateSet('preflight','focused','full','manifest','doctor','all')][string]$Stage='preflight')
+Set-StrictMode -Version Latest
+$ErrorActionPreference='Stop'
+$repo=Split-Path -Parent $PSScriptRoot
+$state=Join-Path $env:USERPROFILE '.deadbyte-mcp'
+$parentId='v0.15.61-055d1ff0aa99e60b'
+$parentSha='055d1ff0aa99e60bbf9e9f136b02ebd4fffb8391712560f7607cff30af94dcdf'
+$parentGen='f940e794daac2dda097a66301c4b85c4b29a2df7c669e549503c05a2a55ff6c4'
+$nativeNode='C:\Program Files\nodejs\node.exe'
+$node=if(Test-Path -LiteralPath $nativeNode -PathType Leaf){$nativeNode}else{(Get-Command node -ErrorAction Stop).Source}
+function Sha([string]$file){
+    $sha=[Security.Cryptography.SHA256]::Create()
+    try{$stream=[IO.File]::OpenRead($file);try{return ([BitConverter]::ToString($sha.ComputeHash($stream))).Replace('-','').ToLowerInvariant()}finally{$stream.Dispose()}}finally{$sha.Dispose()}
+}
+function Run-Node([string]$label,[string[]]$nodeArgs){
+    if($null -eq $nodeArgs -or $nodeArgs.Count -lt 1){throw "R160_${label}_NO_NODE_ARGUMENTS"}
+    Write-Output "R160_STAGE_START=$label"
+    Write-Output "R160_STAGE_ARGS=$($nodeArgs.Count)"
+    $global:LASTEXITCODE=0
+    & $node @nodeArgs
+    $exit=$global:LASTEXITCODE
+    if($exit -ne 0){throw "R160_${label}_FAILED exit=$exit"}
+    Write-Output "R160_STAGE_PASS=$label"
+}
+Push-Location $repo
+try{
+    $pkg=Get-Content -LiteralPath 'package.json' -Raw | ConvertFrom-Json
+    $release=Get-Content -LiteralPath 'RELEASE.json' -Raw | ConvertFrom-Json
+    if($pkg.version -ne '0.15.62' -or $release.version -ne '0.15.62' -or $release.train -ne 'R160'){throw 'R160_CANDIDATE_VERSION_DRIFT'}
+    if($release.runtime_predecessor.release_id -ne $parentId -or $release.runtime_predecessor.manifest_sha256 -ne $parentSha -or $release.runtime_predecessor.generation_manifest_sha256 -ne $parentGen){throw 'R160_RUNTIME_PREDECESSOR_IDENTITY_DRIFT'}
+    $active=Get-Content -LiteralPath (Join-Path $state 'active-release.json') -Raw | ConvertFrom-Json
+    if($active.version -ne '0.15.61' -or $active.release_id -ne $parentId -or $active.manifest_sha256 -ne $parentSha -or $active.generation_manifest_sha256 -ne $parentGen){throw 'R160_ACTIVE_RUNTIME_DRIFT'}
+    if((Sha (Join-Path $active.release_root 'MANIFEST.SHA256')) -ne $parentSha){throw 'R160_ACTIVE_MANIFEST_MISMATCH'}
+    Write-Output 'R160_PREDECESSOR_PREFLIGHT=PASS'
+    if($Stage -eq 'preflight'){return}
+    if($Stage -in @('focused','all')){
+        Run-Node -label 'focused' -nodeArgs @('--test','--test-concurrency=1','test/r89-privileged-install-boundary.test.mjs','test/r92-acl-ace-applicability.test.mjs','test/r153-clean-activation-recovery.test.mjs','test/r155-commander-live-log.test.mjs','test/r155-default-live-log.test.mjs','test/r156-supervisor-pacing.test.mjs','test/r157-supervisor-singleflight.test.mjs','test/r158-epoch-bootstrap.test.mjs','test/r159-legacy-marker-evidence.test.mjs','test/r160-marker-proof.test.mjs','test/r160-package-decision-manifest.test.mjs','test/r160-stable-launcher.test.mjs','test/r160-release-contract.test.mjs','test/r59-tool-surface-compat.test.mjs')
+        if($Stage -eq 'focused'){return}
+    }
+    if($Stage -in @('full','all')){
+        Run-Node -label 'full' -nodeArgs @('--test','--test-concurrency=4','test/*.test.mjs')
+        if($Stage -eq 'full'){return}
+    }
+    if($Stage -in @('manifest','all')){
+        Run-Node -label 'manifest' -nodeArgs @('scripts/release-manifest.mjs','verify')
+        if($Stage -eq 'manifest'){return}
+    }
+    if($Stage -in @('doctor','all')){
+        $previous=$env:DEADBYTE_STATE_ROOT
+        $isolated=Join-Path $env:TEMP ('deadbyte-r160-doctor-'+[guid]::NewGuid().ToString('N'))
+        try{[IO.Directory]::CreateDirectory($isolated)|Out-Null;$env:DEADBYTE_STATE_ROOT=$isolated;Run-Node -label 'isolated_doctor' -nodeArgs @('src/deadbyte-cli.mjs','doctor')}
+        finally{$env:DEADBYTE_STATE_ROOT=$previous;Remove-Item -LiteralPath $isolated -Recurse -Force -ErrorAction SilentlyContinue}
+    }
+    Write-Output 'R160_WINDOWS_CANDIDATE_GATE=PASS_PREPUBLICATION'
+}finally{Pop-Location}

package/scripts/issue-uac-migration-r153.mjs

@@ -9,6 +9,7 @@ import {parseActivePointer} from '../src/release-slot.mjs';
 import {inspectTrustedInstallation,privilegedEpochInstallFiles} from '../src/privileged-install-trust-r89.mjs';
 import {verifyMarkerReconciliationReceipt} from '../src/clean-activation-recovery-r153.mjs';
 import {createUacApproval,uacPointerSha256,protectedUacReceiptPath} from '../src/uac-approval-contract-r153.mjs';
+import {decodeHostCommandPins} from '../src/host-command-pins-r154.mjs';
 
 const root=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..');
 const sha=b=>createHash('sha256').update(b).digest('hex');
@@ -17,11 +18,15 @@ const hash=async f=>sha(await read(f));
 const fail=text=>{throw new Error('R153 UAC issuer rejected: '+text);};
 function args(argv){
   const expected=['--state-root','--marker-receipt','--marker-receipt-sha256','--preflight-subject-sha256'];
-  if(argv.length!==8||expected.some((key,i)=>argv[2*i]!==key))fail('unexpected arguments');
+  if(![8,10].includes(argv.length)||expected.some((key,i)=>argv[2*i]!==key)||
+     (argv.length===10&&argv[8]!=='--host-command-pins-json'))fail('unexpected arguments');
   const [state,receipt,receiptHash,preflight]=[argv[1],argv[3],argv[5],argv[7]];
   if(!path.win32.isAbsolute(state)||!path.win32.isAbsolute(receipt)||
      !/^[0-9a-f]{64}$/.test(receiptHash)||!/^[0-9a-f]{64}$/.test(preflight))fail('subject arguments invalid');
-  return {state:path.resolve(state),receipt:path.resolve(receipt),receiptHash,preflight};
+  let hostCommandPins=[];
+  try{hostCommandPins=decodeHostCommandPins(argv.length===10?argv[9]:'[]');}
+  catch(error){fail(error.message);}
+  return {state:path.resolve(state),receipt:path.resolve(receipt),receiptHash,preflight,hostCommandPins};
 }
 async function regular(file,label){const s=await lstat(file);if(!s.isFile()||s.isSymbolicLink())fail(label+' must be regular');return s;}
 async function absent(file,label){try{await lstat(file);fail(label+' present');}catch(e){if(e?.code!=='ENOENT')throw e;}}
@@ -33,7 +38,7 @@ async function main(){
     {encoding:'utf8',shell:false,windowsHide:true,timeout:12000});
   if(elevated.error||elevated.status!==0||String(elevated.stdout).trim().toLowerCase()!=='true')
     fail('explicit Windows UAC elevation required');
-  const {state,receipt,receiptHash,preflight}=args(process.argv.slice(2));
+  const {state,receipt,receiptHash,preflight,hostCommandPins}=args(process.argv.slice(2));
   if(path.dirname(receipt).toLowerCase()!==path.join(state,'evidence','legacy-migration').toLowerCase())
     fail('marker receipt path not in state evidence root');
   const issueFile=fileURLToPath(import.meta.url);
@@ -41,11 +46,12 @@ async function main(){
   const helperFile=path.join(root,'scripts','request-uac-migration-r153.ps1');
   const trust=await inspectTrustedInstallation([...privilegedEpochInstallFiles(root,process.execPath),
     issueFile,deployFile,helperFile,path.join(root,'package.json'),path.join(root,'MANIFEST.SHA256'),path.join(root,'RELEASE.json'),path.join(root,'src','uac-approval-contract-r153.mjs'),
-    path.join(root,'src','clean-activation-recovery-r153.mjs'),path.join(root,'src','legacy-offline-policy-proof-r146.mjs')]);
+    path.join(root,'src','clean-activation-recovery-r153.mjs'),path.join(root,'src','legacy-offline-policy-proof-r146.mjs'),
+    path.join(root,'src','host-command-pins-r154.mjs')]);
   if(trust.trusted!==true)fail('candidate not R89 protected');
   const pkg=JSON.parse((await read(path.join(root,'package.json'))).toString('utf8'));
   const rel=JSON.parse((await read(path.join(root,'RELEASE.json'))).toString('utf8'));
-  if(pkg.version!=='0.15.60'||rel.version!==pkg.version)fail('candidate release identity mismatch');
+  if(pkg.version!=='0.15.61'||rel.version!==pkg.version)fail('candidate release identity mismatch');
   const pointer=parseActivePointer((await read(path.join(state,'active-release.json'))).toString('utf8'));
   if(pointer.version!=='0.15.45'||rel.parent?.release_id!==pointer.release_id||
     rel.parent?.manifest_sha256!==pointer.manifest_sha256||
@@ -85,6 +91,7 @@ async function main(){
     predecessorPointerSha256:uacPointerSha256(pointer),
     predecessorPolicySha256:policies,preflightSubjectSha256:preflight,
     nodeSha256:await hash(process.execPath),deployScriptSha256:await hash(deployFile),
+    hostCommandPins,
     nonce,issuedAt,expiresAt});
   // The strict installation manifest disallows unmanifested files. A receipt
   // under root would turn an otherwise valid candidate into an invalid tree.

package/scripts/npm-release-r48.mjs

@@ -7,6 +7,7 @@ import {assertR67NpmPublishReady} from './npm-release-readiness-r67.mjs';
 import {assertR71NpmPublishReady} from './npm-release-readiness-r71.mjs';
 import {assertR72NpmPublishReady} from './npm-release-readiness-r72.mjs';
 import {assertR74NpmPublishReady} from './npm-release-readiness-r74.mjs';
+import {assertR163NpmPublishReady} from './npm-release-readiness-r163.mjs';
 import { existsSync } from 'node:fs';
 import { resolveStateRoot } from '../src/state-root.mjs';
 import path from 'node:path';
@@ -95,6 +96,10 @@ async function main() {
   if (!isVerifyOnly && version==='0.15.45') assertR71NpmPublishReady(release);
   if (!isVerifyOnly && version==='0.15.46') await assertR72NpmPublishReady(release,{root});
   if (!isVerifyOnly && version==='0.15.47') await assertR74NpmPublishReady(release,{root});
+  if (!isVerifyOnly && version==='0.15.62') {
+    if (!publishOnly) throw new Error('PUBLISH_BLOCKED R163 0.15.62 requires --publish-only; production activation is a separate authority boundary');
+    await assertR163NpmPublishReady(release,{root});
+  }
   if (release.parent?.release_id !== provenance.parent_release_id ||
       release.parent?.manifest_sha256 !== provenance.parent_manifest_sha256 ||
       release.parent?.generation_manifest_sha256 !== provenance.parent_generation_manifest_sha256) {

package/scripts/npm-release-readiness-r163.mjs

@@ -0,0 +1,67 @@
+/** R163 0.15.62 publication fence. No evidence generation or authority mutation. */
+import {createHash} from 'node:crypto';
+import {readFile,lstat} from 'node:fs/promises';
+import path from 'node:path';
+
+const sha=b=>createHash('sha256').update(b).digest('hex');
+const parent='v0.15.61-055d1ff0aa99e60b';
+const parentManifest='055d1ff0aa99e60bbf9e9f136b02ebd4fffb8391712560f7607cff30af94dcdf';
+const parentGen='f940e794daac2dda097a66301c4b85c4b29a2df7c669e549503c05a2a55ff6c4';
+const reject=(m)=>{throw new Error('PUBLISH_BLOCKED R163 '+m);};
+const hex=x=>typeof x==='string'&&/^[0-9a-f]{64}$/.test(x);
+const readJson=async f=>JSON.parse(await readFile(f,'utf8'));
+async function checkedEvidenceFile(file,digest,{allowEmpty=false}={}){
+  if(!hex(digest))reject('missing exact evidence digest');
+  const info=await lstat(file).catch(()=>reject('evidence file missing '+file));
+  if(!info.isFile()||info.isSymbolicLink()||(!allowEmpty&&info.size<1)||info.size>16*1024*1024)reject('invalid evidence file');
+  const bytes=await readFile(file);
+  if(sha(bytes)!==digest)reject('evidence SHA-256 mismatch '+file);
+  return bytes;
+}
+function boundedEvidence(root,relative){
+  if(typeof relative!=='string'||!relative||relative.includes('\\'))reject('invalid evidence relative path');
+  const p=path.resolve(root,relative),r=path.relative(root,p);
+  if(!r||r.startsWith('..')||path.isAbsolute(r))reject('evidence path escape');
+  return p;
+}
+export async function assertR163NpmPublishReady(release,{root,evidenceRoot=process.env.DEADBYTE_R163_CLOSURE_ROOT}={}){
+  if(release?.name!=='deadbyte-mcp'||release?.version!=='0.15.62'||release?.train!=='R160'||release?.r163?.publication_mode!=='PUBLISH_ONLY')reject('release metadata not R163-closed');
+  if(release?.parent?.release_id!==parent||release?.parent?.manifest_sha256!==parentManifest||release?.parent?.generation_manifest_sha256!==parentGen||release?.runtime_predecessor?.release_id!==parent)reject('active predecessor lineage mismatch');
+  if(!root||!path.isAbsolute(root))reject('candidate root missing');
+  if(!evidenceRoot||!path.isAbsolute(evidenceRoot))reject('closure evidence path missing');
+  const testRoot=path.resolve(root,'..','..','testing','r163-release-closure');
+  const evidence=path.resolve(evidenceRoot);
+  const relative=path.relative(testRoot,evidence);
+  if(!relative||relative.startsWith('..')||path.isAbsolute(relative))reject('evidence outside bounded R163 testing root');
+  for(const p of [testRoot,evidence]){const st=await lstat(p).catch(()=>reject('evidence directory absent'));if(!st.isDirectory()||st.isSymbolicLink())reject('evidence directory is reparse/symlink');}
+  const closurePath=path.join(evidence,'closure.json');
+  const closureInfo=await lstat(closurePath).catch(()=>reject('closure missing'));
+  if(!closureInfo.isFile()||closureInfo.isSymbolicLink()||closureInfo.size<1||closureInfo.size>1024*1024)reject('closure file not regular/bounded');
+  const closure=await readJson(closurePath).catch(()=>reject('closure missing/invalid'));
+  if(closure?.schema!=='deadbyte.r163-release-closure.v1'||closure?.version!=='0.15.62'||closure?.status!=='PASS'||closure?.production_release_id!==parent)reject('closure subject/status mismatch');
+  const manifestSha=sha(await readFile(path.join(root,'MANIFEST.SHA256')));
+  if(closure.source_manifest_sha256!==manifestSha)reject('final manifest differs from closure');
+  const files=closure?.files;
+  if(!files||!['protected_receipt','protected_stdout','protected_stderr','verify_receipt','verify_stdout','verify_stderr'].every(k=>files[k]&&typeof files[k].path==='string'&&hex(files[k].sha256)))reject('required receipts missing');
+  const data={};
+  for(const [key,info] of Object.entries(files)) data[key]=await checkedEvidenceFile(boundedEvidence(testRoot,info.path),info.sha256,{allowEmpty:key.endsWith('_stderr')});
+  let protectedReceipt,verifyReceipt;
+  try{protectedReceipt=JSON.parse(data.protected_receipt);verifyReceipt=JSON.parse(data.verify_receipt);}
+  catch{reject('gate receipts invalid JSON');}
+  if(protectedReceipt?.schema!=='deadbyte.r163-protected-windows-gate.v1'||protectedReceipt?.stage!=='full'||protectedReceipt?.exit_code!==0||protectedReceipt?.source_manifest_sha256!==manifestSha||protectedReceipt?.active_release_id!==parent)reject('protected gate missing or unbound');
+  if(protectedReceipt.stdout_sha256!==sha(data.protected_stdout)||protectedReceipt.stderr_sha256!==sha(data.protected_stderr))reject('protected log mismatch');
+  const stdout=data.protected_stdout.toString('utf8');
+  const counts=Object.fromEntries(['tests','pass','fail','skipped'].map(k=>[k,Number(new RegExp('^# '+k+' (\\d+)\\s*$','m').exec(stdout)?.[1]??NaN)]));
+  if(counts.tests<1951||counts.pass<1902||counts.fail!==0||counts.skipped!==49||counts.pass+counts.skipped!==counts.tests||/^not ok\s+\d+/m.test(stdout))reject('full regression totals mismatch');
+  if(!/^ok\s+\d+\s+-\s+R163 isolated immutable slot activates, rolls back, and restores 0\.15\.62/m.test(stdout))reject('R163 live rollback proof missing');
+  const skips=stdout.split(/\r?\n/).filter(x=>/^ok\s+\d+\s+-.*# SKIP/.test(x));
+  if(skips.length!==49||skips.some(x=>!/historical|R35 external semantic backend|POSIX|R100 POSIX/i.test(x)))reject('unexpected unclassified skipped test');
+  if(verifyReceipt?.schema!=='deadbyte.r163-release-verify.v1'||verifyReceipt?.status!=='PASS'||verifyReceipt?.version!=='0.15.62'||verifyReceipt?.source_manifest_sha256!==manifestSha||verifyReceipt?.production_release_id!==parent||verifyReceipt?.exit_code!==0)reject('verify-only receipt subject/status mismatch');
+  if(verifyReceipt.stdout_sha256!==sha(data.verify_stdout)||verifyReceipt.stderr_sha256!==sha(data.verify_stderr))reject('verify-only transcript hash mismatch');
+  const vout=data.verify_stdout.toString('utf8');
+  if(!vout.includes('VERIFY-ONLY PIPELINE PASS')||!vout.includes('Artifact isolation gate PASS')||!vout.includes('VERIFIED_TARBALL '))reject('npm verify-only output missing');
+  const tarLine=vout.split(/\r?\n/).find(x=>x.startsWith('VERIFIED_TARBALL '));
+  try{const p=JSON.parse(tarLine.slice('VERIFIED_TARBALL '.length));if(p.filename!=='deadbyte-mcp-0.15.62.tgz'||!hex(p.sha256)||p.bytes<1)reject('npm tarball identity invalid');}
+  catch{reject('npm tarball evidence invalid');}
+  return Object.freeze({status:'R163_RELEASE_READY_EVIDENCE_BOUND',version:'0.15.62',manifest_sha256:manifestSha,checks:6});
+}

package/scripts/r153-prepublish-identity.mjs

@@ -6,9 +6,9 @@ import {fileURLToPath} from 'node:url';
 const defaultRoot=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..');
 const hex64=/^[0-9a-f]{64}$/;
 const EXPECTED=Object.freeze({
-  candidateVersion:'0.15.60', train:'R153',
-  sourceVersion:'0.15.59',
-  sourceSha256:'0c20152b8ee553f06f05dfe017f4bd823d30cd50710722e9e0874f0bd6c66c75',
+  candidateVersion:'0.15.61', train:'R154',
+  sourceVersion:'0.15.60',
+  sourceSha256:'b85f735f4c8be56f97ea5c78f0cc48583e8d5708a704c903596f5720e36ace83',
   runtimeVersion:'0.15.45',
   runtimeReleaseId:'v0.15.45-34aa8d1241cfb8bf',
   runtimeManifest:'34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc',

package/scripts/request-uac-migration-r153.ps1

@@ -7,7 +7,7 @@ param(
     [Parameter(Mandatory=$true)][string]$MarkerReceiptPath,
     [Parameter(Mandatory=$true)][ValidatePattern('^[0-9a-f]{64}$')][string]$MarkerReceiptSha256,
     [ValidatePattern('^[0-9a-f]{64}$')][string]$PreflightSubjectSha256,
-    [ValidatePattern('^powershell_script=[0-9a-f]{64}$')][string]$HostCommandPin,
+    [string]$HostCommandPinsJson = '[]',
     [switch]$Elevated
 )
 $ErrorActionPreference = 'Stop'
@@ -21,6 +21,19 @@ function Require-AbsoluteFile([string]$Value,[string]$Label) {
     return $item.FullName
 }
 function Full([string]$Value) { [IO.Path]::GetFullPath($Value).TrimEnd('\') }
+function Validate-PinsJson([string]$Value) {
+    try { $pins = @($Value | ConvertFrom-Json) } catch { throw 'R154 host command pins JSON invalid' }
+    if ($pins.Count -gt 16) { throw 'R154 host command pin limit exceeded' }
+    $seen = @{}
+    foreach ($pin in $pins) {
+        if ([string]$pin -cnotmatch '^[A-Za-z0-9._-]{1,64}=[0-9a-f]{64}$') { throw 'R154 host command pin contract invalid' }
+        $id = ([string]$pin).Split('=')[0]
+        if ($seen.ContainsKey($id)) { throw 'R154 duplicate host command pin' }
+        $seen[$id] = $true
+    }
+    return $pins
+}
+$HostCommandPins = @(Validate-PinsJson $HostCommandPinsJson)
 $NodePath = Require-AbsoluteFile $NodePath 'Node executable'
 $DeployScript = Require-AbsoluteFile $DeployScript 'Deploy script'
 $MarkerReceiptPath = Require-AbsoluteFile $MarkerReceiptPath 'Marker reconciliation receipt'
@@ -100,7 +113,7 @@ if (-not $Elevated) {
     # -Verb RunAs is the UseShellExecute parameter set. PowerShell 5.1 rejects
     # -RedirectStandardOutput/-RedirectStandardError in that same Start-Process.
     # The elevated child writes bounded, no-clobber evidence instead.
-    if ($HostCommandPin) { $arguments += @('-HostCommandPin',$HostCommandPin) }
+    if ($HostCommandPinsJson -cne '[]') { $arguments += @('-HostCommandPinsJson',('"' + $HostCommandPinsJson.Replace('"','\"') + '"')) }
     $child = Start-Process -FilePath $powershell -ArgumentList $arguments -Verb RunAs -Wait -PassThru -WindowStyle Hidden
     if (Test-Path -LiteralPath $StdoutPath) { [Console]::Out.Write([IO.File]::ReadAllText($StdoutPath)) }
     if (Test-Path -LiteralPath $StderrPath) { [Console]::Error.Write([IO.File]::ReadAllText($StderrPath)) }
@@ -123,7 +136,7 @@ try {
     try {
         $issuerOutput = @(& $NodePath $issuerScript '--state-root' $env:DEADBYTE_STATE_ROOT `
             '--marker-receipt' $MarkerReceiptPath '--marker-receipt-sha256' $MarkerReceiptSha256 `
-            '--preflight-subject-sha256' $PreflightSubjectSha256 2>&1)
+            '--preflight-subject-sha256' $PreflightSubjectSha256 '--host-command-pins-json' $HostCommandPinsJson 2>&1)
         $issuerExit = $LASTEXITCODE
     } finally { $ErrorActionPreference = $priorErrorAction }
     $issuerText = (@($issuerOutput) | ForEach-Object { [string]$_ }) -join "`n"
@@ -145,7 +158,7 @@ try {
             '--migration-expires-at',$issued.expires_at_utc,
             '--uac-approval-receipt',$issued.receipt_path,
             '--uac-approval-receipt-sha256',$issued.receipt_sha256)
-        if ($HostCommandPin) { $deployArgs += @('--host-command-pin',$HostCommandPin) }
+        foreach ($pin in $HostCommandPins) { $deployArgs += @('--host-command-pin',[string]$pin) }
         $deployOutput = @(& $NodePath $DeployScript @deployArgs 2>&1)
         $deployExit = $LASTEXITCODE
     } finally { $ErrorActionPreference = $priorErrorAction }

package/scripts/verify-protected-stage-r153.mjs

@@ -14,6 +14,7 @@ const files=[...privilegedEpochInstallFiles(root,process.execPath),
   path.join(root,'package.json'),path.join(root,'MANIFEST.SHA256'),path.join(root,'RELEASE.json'),
   path.join(root,'src','uac-approval-contract-r153.mjs'),
   path.join(root,'src','clean-activation-recovery-r153.mjs'),
+  path.join(root,'src','host-command-pins-r154.mjs'),
   path.join(root,'src','legacy-offline-policy-proof-r146.mjs')];
 const verdict=await inspectTrustedInstallation(files);
 if(verdict.trusted!==true)throw new Error('R153 protected stage trust rejected');

package/src/autonomous-supervisor.mjs

@@ -24,7 +24,7 @@ async function listGoalIds(policy) {
 export function startAutonomousSupervisor({ runtime, policy = runtime?.policy,
   idleDelayMs = 750, maxCycles = 32, logger = console, continuous = true } = {}) {
   if (!runtime || !policy) throw new Error('autonomous supervisor requires runtime + policy');
-  const providerBacked = ['openai_compatible','openai_responses'].includes(policy.planner.backend);
+  const providerBacked = ['openai_compatible','openai_responses','codex_app_server'].includes(policy.planner.backend);
   if (!Number.isInteger(idleDelayMs) || idleDelayMs < 25 || idleDelayMs > 60_000) {
     throw new Error('autonomous supervisor idleDelayMs out of range');
   }
@@ -41,6 +41,10 @@ export function startAutonomousSupervisor({ runtime, policy = runtime?.policy,
     let runnable = 0;
     for (const goalId of await listGoalIds(policy)) {
       if (abort.signal.aborted) break;
+      // A known retry deadline is authoritative until elapsed. Avoid
+      // polling goal state again just to rediscover the same backoff.
+      const pendingRetry=failures.get(goalId);
+      if (pendingRetry && Date.now() < pendingRetry.retry_at) continue;
       let status;
       try { status = await runtime.status({ goalId }); }
       catch (error) { logger.warn?.(`DEADBYTE supervisor status ${goalId}: ${String(error)}`); continue; }
@@ -61,9 +65,10 @@ export function startAutonomousSupervisor({ runtime, policy = runtime?.policy,
           failures.delete(goalId); continue;
         }
       }
-      runnable += 1;
       const failure = failures.get(goalId);
       if (failure && Date.now() < failure.retry_at) continue;
+      // Only an eligible dispatch is runnable. Backoff is not useful work.
+      runnable += 1;
       try {
         const result = await runtime.run({ goalId, maxCycles });
         if (result.status === 'paused' && result.reason === 'provider_circuit_open') {
@@ -89,10 +94,22 @@ export function startAutonomousSupervisor({ runtime, policy = runtime?.policy,
     return runnable;
   }
 
+  // One supervisor, one in-flight scan. A manual scan and the polling
+  // loop must never race to dispatch the same durable goal.
+  let inFlightPass=null;
+  function scanOnce(){
+    if(inFlightPass)return inFlightPass;
+    const task=pass();
+    inFlightPass=task;
+    const clear=()=>{if(inFlightPass===task)inFlightPass=null;};
+    task.then(clear,clear);
+    return task;
+  }
+
   const done = continuous ? (async () => {
     while (!abort.signal.aborted) {
       let runnable = 0;
-      try { runnable = await pass(); }
+      try { runnable = await scanOnce(); }
       catch (error) { logger.error?.(`DEADBYTE supervisor scan failed: ${String(error)}`); }
       if (abort.signal.aborted) break;
       await delay(runnable > 0 ? 25 : idleDelayMs, abort.signal);
@@ -103,7 +120,7 @@ export function startAutonomousSupervisor({ runtime, policy = runtime?.policy,
     get running() { return !abort.signal.aborted; },
     get passes() { return passes; },
     failures,
-    async scanNow() { return pass(); },
+    async scanNow() { return scanOnce(); },
     async stop() { abort.abort(); await done; }
   });
 }

package/src/clean-activation-recovery-r153.mjs

@@ -32,7 +32,7 @@ export function classifyLegacyMigration(input){
   if(!input.pointer||input.pointer.version!=='0.15.45'||
     !HEX64.test(String(input.pointer.manifest_sha256??''))||!HEX64.test(String(input.pointer.generation_manifest_sha256??'')))
     return reject('predecessor identity invalid',subject);
-  if(!input.candidate||input.candidate.version!=='0.15.60'||
+  if(!input.candidate||input.candidate.version!=='0.15.61'||
     !HEX64.test(String(input.candidate.manifest_sha256??''))||!HEX64.test(String(input.candidate.tarball_sha256??'')))
     return reject('candidate identity invalid',subject);
   if(PLANES.some(plane=>!HEX64.test(String(input.policySha256?.[plane]??''))))