deadbyte-mcp 0.15.61 → 0.15.63

package/src/release-generation.mjs

@@ -185,6 +185,10 @@ function renderControllerConfig({currentConfig,coreRoot,workspaceRoot,processPol
   const supervisor=currentConfig.Supervisor??{},bridge=currentConfig.Bridge??{},cloud=currentConfig.Cloud??{};
   return [
     '@{',"    Schema = 'deadbyte.controller.v1'",`    CoreRoot = ${psQuote(coreRoot)}`,
+    // A pre-provisioned, OS-owned exact release copy; never auto-discover
+    // an unverified directory or grant authority while creating a generation.
+    ...(typeof currentConfig.AuthorityEpochRoot==='string'&&currentConfig.AuthorityEpochRoot.length>0
+      ?[`    AuthorityEpochRoot = ${psQuote(currentConfig.AuthorityEpochRoot)}`]:[]),
     `    WorkspaceRoot = ${psQuote(workspaceRoot)}`,
     `    MachineRuntimeEnabled = ${psBool(currentConfig.MachineRuntimeEnabled!==false)}`,
     `    AgentRuntimeEnabled = ${psBool(currentConfig.AgentRuntimeEnabled)}`,
@@ -270,6 +274,13 @@ export async function createGenerationBundle({stateRoot,releaseRoot,developmentR
   }
   if(typeof currentConfig?.Bridge?.ScriptPath!=='string'||!path.isAbsolute(currentConfig.Bridge.ScriptPath)) throw new Error('generation Bridge ScriptPath must be absolute');
   if(typeof currentConfig?.Bridge?.ScriptSha256!=='string'||!HEX64.test(currentConfig.Bridge.ScriptSha256)) throw new Error('generation Bridge ScriptSha256 invalid');
+  // Legacy generations omit Epoch binding. Present values must be explicit
+  // Windows drive-absolute paths, never an implicit writable source.
+  const epochRoot=currentConfig.AuthorityEpochRoot;
+  if(epochRoot!==undefined&&(typeof epochRoot!=='string'||!/^[A-Za-z]:[\\/]/.test(epochRoot)||
+      !path.win32.isAbsolute(epochRoot)||epochRoot.includes('\0')||
+      path.win32.parse(epochRoot).root.toLowerCase()===path.win32.normalize(epochRoot).toLowerCase()))
+    throw new Error('generation AuthorityEpochRoot must be a Windows drive-absolute directory');
   const semanticSource=String(currentConfig.SemanticLspConfigFile??'');
   const semanticExpected=String(currentConfig.SemanticLspConfigSha256??'').toLowerCase();
   if(Boolean(semanticSource)!==Boolean(semanticExpected)) throw new Error('generation semantic LSP config path/SHA must be supplied together');
@@ -316,6 +327,8 @@ export async function createGenerationBundle({stateRoot,releaseRoot,developmentR
     mcp_url_file:currentConfig.McpUrlFile??'',mcp_url_file_sha256:currentConfig.McpUrlFileSha256??'',mcp_path_file:currentConfig.McpPathFile??'',
     start_timeout_seconds:Number(currentConfig.StartTimeoutSeconds??30),probe_timeout_seconds:Number(currentConfig.ProbeTimeoutSeconds??3),
     semantic_lsp_config_sha256:semanticConfigSha256,
+    // Changing a protected code origin changes this immutable generation.
+    ...(epochRoot!==undefined?{authority_epoch_root:epochRoot}:{}),
     process_policy_sha256:processBytes?sha256(processBytes):null,
     desktop_policy_sha256:desktopBytes?sha256(desktopBytes):null,
     coding_policy_sha256:sha256(codingBytes),autonomous_policy_sha256:sha256(autonomousBytes),host_policy_sha256:hostBytes?sha256(hostBytes):null

package/src/release-slot.mjs

@@ -205,8 +205,9 @@ export function renderStableLauncherCmd(){
   return [
     '@echo off',
     'setlocal EnableExtensions DisableDelayedExpansion',
+    'if not defined SystemRoot exit /b 1',
     'if not defined DEADBYTE_STATE_ROOT set "DEADBYTE_STATE_ROOT=%USERPROFILE%\\.deadbyte-mcp"',
-    'powershell.exe -NoLogo -NoProfile -ExecutionPolicy Bypass -File "%DEADBYTE_STATE_ROOT%\\bin\\DEADBYTE-MCP.ps1" %*',
+    '"%SystemRoot%\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" -NoLogo -NoProfile -ExecutionPolicy Bypass -File "%DEADBYTE_STATE_ROOT%\\bin\\DEADBYTE-MCP.ps1" %*',
     'exit /b %ERRORLEVEL%',
     ''
   ].join('\r\n');

package/src/remote-live-log.mjs

@@ -53,6 +53,15 @@ const TOOL_ICONS_ASCII=Object.freeze({read:'R',write:'W',edit:'E',run:'>',verify
 const START_VISIBLE_PATTERNS=[/(?:^|_)file_write$/,/text_replace$/,/symbol_replace$/,/native_diff_(?:apply|preview)$/,
   /(?:command|benchmark)_run$/,/task_run$/,/goal_run$/,/goal_submit$/,/goal_approve$/,/process_session_(?:start|action|terminate)$/,/^desktop_action$/];
 
+export function formatRemoteLogResetNotice(file,reason){
+  const name=String(file).split(/[\\/]/).at(-1);
+  const rawReason=sanitizeAuditArgs(typeof reason==='string'?reason:'unknown');
+  const detail=typeof rawReason==='string'?clipped(rawReason,96):'[REDACTED]';
+  if(/^segment-\d{8}\.jsonl$/.test(name))
+    return '[LIVELOG] AUDIT_STREAM_RESET '+name+' — '+detail+'; verify signed audit continuity before trusting timeline coverage';
+  return '[LIVELOG] RUNTIME_LOG_REOPENED '+name+' — '+detail+'; console diagnostic continuity may have gaps; audit verification is separate';
+}
+
 export function selectLiveLogNames({auditNames=[],runtimeNames=[]}={}){
   if(!Array.isArray(auditNames)||!Array.isArray(runtimeNames)) throw new Error('live log names must be arrays');
   const audit=[...new Set(auditNames.filter(name=>typeof name==='string'&&/^segment-\d{8}\.jsonl$/.test(name)))].sort().slice(-2);
@@ -388,13 +397,19 @@ export function createLiveTimelineWriter({stream=process.stdout,displayMode='uni
     retention(){return Object.freeze({congested,suppressed_since_drain:suppressedSinceDrain,total_suppressed:totalSuppressed});}});
 }
 
-export function createLiveTimelineTracker({clock=()=>Date.now(),verbose=false,foldHeartbeats=false,heartbeatBurstLimit=10,heartbeatWindowMs=3000,displayMode='unicode',rootPaths={},trace=false,slowCallMs=1000}={}){
+export function defaultForegroundTimelineOptions({verbose=false}={}){
+  if(typeof verbose!=='boolean')throw new Error('default live timeline verbosity invalid');
+  return Object.freeze({commanderStyle:!verbose,foldHeartbeats:false});
+}
+
+export function createLiveTimelineTracker({clock=()=>Date.now(),verbose=false,foldHeartbeats=false,heartbeatBurstLimit=10,heartbeatWindowMs=3000,displayMode='unicode',rootPaths={},trace=false,slowCallMs=1000,commanderStyle=false}={}){
   if(typeof clock!=='function') throw new Error('live timeline clock must be a function');
   if(!REMOTE_DISPLAY_MODES.includes(displayMode)) throw new Error('remote display mode invalid');
   if(!Number.isInteger(heartbeatBurstLimit)||heartbeatBurstLimit<2||heartbeatBurstLimit>100) throw new Error('heartbeatBurstLimit invalid');
   if(!Number.isInteger(heartbeatWindowMs)||heartbeatWindowMs<250||heartbeatWindowMs>60000) throw new Error('heartbeatWindowMs invalid');
   if(!rootPaths||typeof rootPaths!=='object'||Array.isArray(rootPaths)) throw new Error('live timeline rootPaths invalid');
   if(typeof trace!=='boolean') throw new Error('live timeline trace invalid');
+  if(typeof commanderStyle!=='boolean') throw new Error('live timeline commanderStyle invalid');
   if(typeof foldHeartbeats!=='boolean') throw new Error('live timeline foldHeartbeats invalid');
   if(!Number.isInteger(slowCallMs)||slowCallMs<100||slowCallMs>600000) throw new Error('live timeline slowCallMs invalid');
   const pending=new Map();
@@ -443,6 +458,13 @@ export function createLiveTimelineTracker({clock=()=>Date.now(),verbose=false,fo
     const prefixIcon=unknown?(displayMode==='ascii'?'WARN':'⚠️'):null;
     const evidence=receipt?'  '+(displayMode==='ascii'?'RECEIPT':'🧾 receipt')+(displayMode==='ascii'?'=':'=')+receipt:'';
     const reasonSep=displayMode==='ascii'?' - ':' — ';
+    if(commanderStyle){
+      const tag=unknown?'OUTCOME_UNKNOWN':pendingResult?'pending':error?'failed':'completed';
+      const state=rawStatus?' status='+rawStatus:'';
+      return remoteDisplayText('['+displayClock(eventMs(event,clock)).slice(0,8)+'] '+(unknown?'[WARN]':error?'[FAIL]':'[DONE]')+
+        ' Tool call '+displayTool+' '+tag+' ['+shortSpanId(event.request_id)+']'+traceSuffix(span?.trace_meta)+(duration?' '+duration:'')+state+
+        (reason?reasonSep+reason:'')+evidence,displayMode);
+    }
     return remoteDisplayText(eventPrefix(event,sequence,{displayTool,icon:prefixIcon})+traceSuffix(span?.trace_meta)+(summary?'  '+summary:'')+(duration?'  '+duration:'')+slow+'  '+marker+statusDetail+evidence+(reason?reasonSep+reason:''),displayMode);
   }
   function burstLine(value){
@@ -497,6 +519,12 @@ export function createLiveTimelineTracker({clock=()=>Date.now(),verbose=false,fo
       }
       pending.set(requestId,{request_id:requestId,tool,display_tool:displayTool,summary,trace_meta:traceMeta,started_at_ms:clock()});
       peakInFlight=Math.max(peakInFlight,pending.size);
+      if(commanderStyle){
+        const safeArgs=sanitizeAuditArgs(args);
+        const visible=truncateUtf8(canonicalJson(safeArgs),768);
+        return remoteDisplayText('['+displayClock(eventMs(event,clock)).slice(0,8)+'] [CALL] Received tool call ['+
+          shortSpanId(requestId)+'] '+displayTool+traceSuffix(traceMeta)+' Arguments: '+visible,displayMode);
+      }
       if(verbose) return formatRemoteToolCall({...event,tool:displayTool},{clock,displayMode})+traceSuffix(traceMeta);
       if(visibleStart(displayTool)){
         const startMarker=displayMode==='ascii'?'START':'▶ START';
@@ -526,7 +554,7 @@ export function createLiveTimelineTracker({clock=()=>Date.now(),verbose=false,fo
         const snapshot=event.outcome?.snapshot_id,epoch=event.outcome?.state_epoch;
         if(/^[0-9a-f]{64}$/.test(String(snapshot??''))&&Number.isInteger(epoch)&&epoch>0){
           const identity=`${snapshot}:${epoch}`;
-          if(identity===lastCapability){suppressedCapability++;return null;}
+          if(identity===lastCapability&&!commanderStyle){suppressedCapability++;return null;}
           lastCapability=identity;
           const prior=flushBurst();
           const line=resultLine(event,span,sequence)+`  snapshot=${snapshot.slice(0,8)} epoch=${epoch}`;

package/src/runtime-update.mjs

@@ -22,7 +22,8 @@ import {canonicalLauncherPaths,assertCanonicalLaunchers,renderStateBoundLauncher
 import {assertStageOwnedPath,assertStagingBootstrapInputs,assertStagingControlConfig} from './staging-input-isolation.mjs';
 import { verifyProjectOwnerApproval } from './r70-owner-approval.mjs';
 import {windowsPowerShellEnvironment} from './windows-powershell-environment.mjs';
-import {verifyNarrowedPolicyGeneration} from './clean-activation-recovery-r153.mjs';
+import {verifyNarrowedPolicyGeneration} from './clean-activation-recovery-r153.mjs';
+import {parseProtectedEpochRoot,verifyTrustedEpochRelease} from './trusted-epoch-bootstrap-r158.mjs';
 
 export {windowsPowerShellEnvironment};
 
@@ -54,7 +55,7 @@ function normalizePersistentPublicOrigin(value){
   return publicOrigin.origin;
 }
 export function parseUpdateArgs(argv){
-  const out={stage:null,developmentRoot:null,expectedVersion:null,expectedManifest:null,sourceRoot:null,restoreStandingGrants:false,recoverOfflinePredecessor:false,enableMachineFs:false,enableObservation:false,enableDesktop:false,enableAutonomousSupervisor:false,cloudTransport:null,bridgeBootstrap:null,processPolicyBootstrap:null,hostPolicyBootstrap:null,codingPolicyBootstrap:null,autonomousPolicyBootstrap:null,ownerApprovalBootstrap:null,desktopPolicyBootstrap:null,semanticLspBootstrap:null,hostCommandPins:[]};
+  const out={stage:null,developmentRoot:null,expectedVersion:null,expectedManifest:null,sourceRoot:null,authorityEpochRoot:null,restoreStandingGrants:false,recoverOfflinePredecessor:false,enableMachineFs:false,enableObservation:false,enableDesktop:false,enableAutonomousSupervisor:false,cloudTransport:null,bridgeBootstrap:null,processPolicyBootstrap:null,hostPolicyBootstrap:null,codingPolicyBootstrap:null,autonomousPolicyBootstrap:null,ownerApprovalBootstrap:null,desktopPolicyBootstrap:null,semanticLspBootstrap:null,hostCommandPins:[]};
   const cloud={},bridge={},processPolicy={},hostPolicy={},codingPolicy={},autonomousPolicy={},ownerApproval={},desktopPolicy={},semanticLsp={},seen=new Set(),hostPinIds=new Set();
   const bridgeFlags=new Map([
     ['--bridge-root','root'],['--bridge-script-sha256','scriptSha256']
@@ -85,7 +86,7 @@ export function parseUpdateArgs(argv){
     ['--cloud-token-file','tokenFilePath'],['--cloud-token-sha256','tokenFileSha256'],
     ['--cloud-child-working-directory','childWorkingDirectory'],['--cloud-public-origin','publicOrigin']
   ]);
-  const valued=new Set(['--stage','--development-root','--expected-version','--expected-manifest','--source-root','--host-command-pin',...bridgeFlags.keys(),...processPolicyFlags.keys(),...hostPolicyFlags.keys(),...codingPolicyFlags.keys(),...autonomousPolicyFlags.keys(),...ownerApprovalFlags.keys(),...desktopPolicyFlags.keys(),...semanticLspFlags.keys(),...cloudFlags.keys()]);
+  const valued=new Set(['--stage','--development-root','--expected-version','--expected-manifest','--source-root','--authority-epoch-root','--host-command-pin',...bridgeFlags.keys(),...processPolicyFlags.keys(),...hostPolicyFlags.keys(),...codingPolicyFlags.keys(),...autonomousPolicyFlags.keys(),...ownerApprovalFlags.keys(),...desktopPolicyFlags.keys(),...semanticLspFlags.keys(),...cloudFlags.keys()]);
   for(let index=0;index<argv.length;index++){
     const arg=argv[index];
     if(arg==='--restore-standing-grants'||arg==='--recover-offline-predecessor'||arg==='--enable-machine-fs'||arg==='--enable-observation'||arg==='--enable-desktop'||arg==='--enable-autonomous-supervisor'){
@@ -117,7 +118,8 @@ export function parseUpdateArgs(argv){
     else if(arg==='--development-root') out.developmentRoot=path.resolve(value);
     else if(arg==='--expected-version') out.expectedVersion=value;
     else if(arg==='--expected-manifest') out.expectedManifest=value.toLowerCase();
-    else if(arg==='--source-root') out.sourceRoot=path.resolve(value);
+    else if(arg==='--source-root') out.sourceRoot=path.resolve(value);
+    else if(arg==='--authority-epoch-root') out.authorityEpochRoot=parseProtectedEpochRoot(value);
     else if(bridgeFlags.has(arg)) bridge[bridgeFlags.get(arg)]=value;
     else if(processPolicyFlags.has(arg)) processPolicy[processPolicyFlags.get(arg)]=value;
     else if(hostPolicyFlags.has(arg)) hostPolicy[hostPolicyFlags.get(arg)]=value;
@@ -1830,7 +1832,7 @@ export async function recoverInterruptedSlotUpdates({stateRoot=DEFAULT_STATE_ROO
   return {ok:true,launched,updates};
 }
 
-export async function performSlotUpdate({stage,developmentRoot,expectedVersion,expectedManifest,sourceRoot=null,stateRoot=DEFAULT_STATE_ROOT,restoreStandingGrants=false,recoverOfflinePredecessor=false,cloudTransport=null,bridgeBootstrap=null,processPolicyBootstrap=null,hostPolicyBootstrap=null,codingPolicyBootstrap=null,autonomousPolicyBootstrap=null,ownerApprovalBootstrap=null,desktopPolicyBootstrap=null,semanticLspBootstrap=null,enableMachineFs=false,enableObservation=false,enableDesktop=false,enableAutonomousSupervisor=false,hostCommandPins=[]}){
+export async function performSlotUpdate({stage,developmentRoot,expectedVersion,expectedManifest,sourceRoot=null,authorityEpochRoot=null,stateRoot=DEFAULT_STATE_ROOT,restoreStandingGrants=false,recoverOfflinePredecessor=false,cloudTransport=null,bridgeBootstrap=null,processPolicyBootstrap=null,hostPolicyBootstrap=null,codingPolicyBootstrap=null,autonomousPolicyBootstrap=null,ownerApprovalBootstrap=null,desktopPolicyBootstrap=null,semanticLspBootstrap=null,enableMachineFs=false,enableObservation=false,enableDesktop=false,enableAutonomousSupervisor=false,hostCommandPins=[]}){
   // R64 grants have no signed revocation epoch. The historical boolean restore
   // cannot prove continuity, and must never materialize a successor grant.
   if(restoreStandingGrants)throw new Error('R65 standing grant auto-restore disabled: explicit reauthorization required');
@@ -1909,6 +1911,16 @@ export async function performSlotUpdate({stage,developmentRoot,expectedVersion,e
       control.config.McpUrlFile=pinned.path;control.config.McpUrlFileSha256=pinned.sha256;
     }
     workspace=await workspacePlan(control.workspaceRoot,state);launchers=await launcherPlan(state);
+    // A protected installation is an explicit owner-provisioned candidate.
+    // No discovery/fallback to writable npm roots and no automatic grant.
+    const requestedEpochRoot=authorityEpochRoot??control.config.AuthorityEpochRoot;
+    if(requestedEpochRoot){
+      const proof=await verifyTrustedEpochRelease({
+        epochRoot:requestedEpochRoot,releaseRoot:slot.release_root,
+        nodeExecutable:control.config.Bridge.FilePath
+      });
+      control.config.AuthorityEpochRoot=proof.root;
+    }
     const generation=await createGenerationBundle({stateRoot:state,releaseRoot:slot.release_root,developmentRoot:development,workspaceRoot:workspace.target,releaseId:slot.release_id,currentConfig:control.config,codingPolicy:control.codingPolicy,autonomousPolicy:control.autonomousPolicy,hostPolicy:control.hostPolicy,processPolicy:control.processPolicy,desktopPolicy:control.desktopPolicy});
     // A newly materialized generation is still pre-pointer-switch.  Prove that
     // legacy whole-drive roots were narrowed here, while a failure is still a
@@ -2068,7 +2080,7 @@ export async function runSlotUpdateCli(argv=process.argv.slice(2),{stateRoot=DEF
   const args=parseUpdateArgs(argv);
   const result=await performSlotUpdate({
     stage:args.stage,developmentRoot:args.developmentRoot,expectedVersion:args.expectedVersion,expectedManifest:args.expectedManifest,
-    sourceRoot:args.sourceRoot,stateRoot,restoreStandingGrants:args.restoreStandingGrants,recoverOfflinePredecessor:args.recoverOfflinePredecessor,
+    sourceRoot:args.sourceRoot,authorityEpochRoot:args.authorityEpochRoot,stateRoot,restoreStandingGrants:args.restoreStandingGrants,recoverOfflinePredecessor:args.recoverOfflinePredecessor,
     cloudTransport:args.cloudTransport,bridgeBootstrap:args.bridgeBootstrap,processPolicyBootstrap:args.processPolicyBootstrap,
     hostPolicyBootstrap:args.hostPolicyBootstrap,codingPolicyBootstrap:args.codingPolicyBootstrap,
     autonomousPolicyBootstrap:args.autonomousPolicyBootstrap,ownerApprovalBootstrap:args.ownerApprovalBootstrap,desktopPolicyBootstrap:args.desktopPolicyBootstrap,

package/src/trusted-epoch-bootstrap-r158.mjs

@@ -0,0 +1,42 @@
+import {readFile,lstat} from 'node:fs/promises';
+import {createHash} from 'node:crypto';
+import path from 'node:path';
+import {inspectTrustedInstallation,privilegedEpochInstallFiles} from './privileged-install-trust-r89.mjs';
+
+const hash=buf=>createHash('sha256').update(buf).digest('hex');
+export function parseProtectedEpochRoot(input){
+  if(typeof input!=='string'||!/^[A-Za-z]:[\\/]/.test(input)||!path.win32.isAbsolute(input)||
+     input.includes('\0')||input.startsWith('\\\\'))
+    throw new Error('authority epoch root must be Windows drive-absolute');
+  const root=path.win32.normalize(input);
+  if(path.win32.parse(root).root.toLowerCase()===root.toLowerCase())
+    throw new Error('authority epoch root may not be a drive root');
+  return root;
+}
+// This is a read-only proof, not installation or an authority grant.
+// Windows ACL verification must run against OS Get-Acl, never a staged snapshot.
+export async function verifyTrustedEpochRelease({epochRoot,releaseRoot,nodeExecutable}){
+  if(process.platform!=='win32'||process.arch!=='x64')
+    throw new Error('authority epoch protected source requires Windows x64');
+  const root=parseProtectedEpochRoot(epochRoot);
+  if(typeof releaseRoot!=='string'||!path.win32.isAbsolute(releaseRoot)||
+     typeof nodeExecutable!=='string'||!path.win32.isAbsolute(nodeExecutable))
+    throw new Error('authority epoch release or Node path invalid');
+  if(path.win32.normalize(releaseRoot).toLowerCase()===root.toLowerCase())
+    throw new Error('authority epoch root must be separate from writable release');
+  await inspectTrustedInstallation(privilegedEpochInstallFiles(root,nodeExecutable));
+  const sourcePaths=privilegedEpochInstallFiles(root,nodeExecutable)
+    .filter(p=>p.toLowerCase().startsWith(root.toLowerCase()+'\\'))
+    .map(p=>path.win32.relative(root,p));
+  const required=['MANIFEST.SHA256','src\\authority-epoch-cli-r65.mjs',...sourcePaths];
+  const unique=[...new Set(required.map(p=>p.toLowerCase()))];
+  for(const relative of unique){
+    const [a,b]=[path.join(releaseRoot,relative),path.join(root,relative)];
+    const [stA,stB]=await Promise.all([lstat(a),lstat(b)]);
+    if(!stA.isFile()||stA.isSymbolicLink()||!stB.isFile()||stB.isSymbolicLink())
+      throw new Error('authority epoch protected source not regular: '+relative);
+    const [aBytes,bBytes]=await Promise.all([readFile(a),readFile(b)]);
+    if(hash(aBytes)!==hash(bBytes)) throw new Error('authority epoch exact release source hash mismatch: '+relative);
+  }
+  return {root,checked_files:unique.length,decision:'EXACT_PROTECTED_SOURCE_MATCH'};
+}

package/src/version.mjs

@@ -1,4 +1,4 @@
-export const DEADBYTE_VERSION = '0.15.61';
+export const DEADBYTE_VERSION = '0.15.63';
 export const MCP_PROTOCOL_VERSION = '2026-07-28';
 export const RECEIPT_SCHEMA_V1 = 'deadbyte.receipt.v1';
 export const RECEIPT_SCHEMA_V2 = 'deadbyte.receipt.v2';

package/src/windows-powershell-environment.mjs

@@ -7,13 +7,16 @@ export function windowsPowerShellEnvironment(base=process.env){
   const systemRoot=base.SystemRoot||base.SYSTEMROOT||'C:\\Windows';
   const userProfile=base.USERPROFILE||os.homedir();
   const programFiles=base.ProgramFiles||base.PROGRAMFILES||'C:\\Program Files';
-  const hasWindir=Object.keys(base).some(key=>key.toLowerCase()==='windir');
   const environment={...base};
   const inherited=Object.entries(base).filter(([key])=>key.toLowerCase()==='psmodulepath')
     .flatMap(([,value])=>String(value??'').split(';')).filter(Boolean);
   for(const key of Object.keys(environment))if(['psmodulepath','systemroot','windir'].includes(key.toLowerCase()))delete environment[key];
   environment.SystemRoot=systemRoot;
-  if(hasWindir)environment.WINDIR=systemRoot;
+  environment.WINDIR=systemRoot;
+  const pathExt=String(base.PATHEXT??base.Pathext??base.pathext??'')
+    .split(';').map(item=>item.trim().toUpperCase()).filter(Boolean);
+  const standard=['.COM','.EXE','.BAT','.CMD','.VBS','.VBE','.JS','.JSE','.WSF','.WSH','.MSC'];
+  environment.PATHEXT=[...new Set([...standard,...pathExt])].join(';');
   const modules=[path.join(systemRoot,'System32','WindowsPowerShell','v1.0','Modules'),
     path.join(userProfile,'Documents','WindowsPowerShell','Modules'),
     path.join(programFiles,'WindowsPowerShell','Modules'),...inherited];

package/test/r106-trusted-powershell-spawn.test.mjs

@@ -16,6 +16,7 @@ test('PowerShell child environment collapses case-variant Windows root keys',()=
   assert.deepEqual(Object.keys(environment).filter(key=>key.toLowerCase()==='windir'),['WINDIR']);
   assert.equal(environment.SystemRoot,'C:\\Windows');
   assert.equal(environment.WINDIR,'C:\\Windows');
+  assert.ok(environment.PATHEXT.split(';').includes('.EXE'));
 });
 
 test('security-sensitive Windows probes cannot select PowerShell via caller environment',

package/test/r130-release-security-contract.test.mjs

@@ -13,15 +13,15 @@ test('R130 security patch has a new immutable package identity and truthful sour
     read('SBOM.cdx.json'),read('package-lock.json'),read('TEST-MATRIX.json')]);
   assert.equal(pkg.name,'deadbyte-mcp');
   for(const actual of [pkg.version,release.version,provenance.version,matrix.version,bom.metadata.component.version,lock.version,lock.packages[''].version,DEADBYTE_VERSION])
-    assert.equal(actual,'0.15.61');
-  assert.equal(release.train,'R154');
-  assert.equal(matrix.train,'R154');
-  assert.equal(release.source_predecessor.version,'0.15.60');
-  assert.match(release.source_predecessor.source_path,/0\.15\.60/);
-  assert.equal(release.runtime_predecessor.version,'0.15.45');
-  assert.equal(provenance.source_predecessor_tarball_sha256,'b85f735f4c8be56f97ea5c78f0cc48583e8d5708a704c903596f5720e36ace83');
-  assert.equal(provenance.source_predecessor_version,'0.15.60');
-  assert.equal(provenance.source_predecessor_manifest_file_sha256,'2a19c9da7f11eb831dfb24ba6c6d9789e25a373cea2f3a25ff21d460e07fba36');
+    assert.equal(actual,'0.15.63');
+  assert.equal(release.train,'R165');
+  assert.equal(matrix.train,'R165');
+  assert.equal(release.source_predecessor.version,'0.15.62');
+  assert.equal(release.source_predecessor.train,'R163');
+  assert.match(release.source_predecessor.source_path,/0\.15\.62-r163-release-closure/i);
+  assert.equal(release.source_predecessor.manifest_status,'VERIFIED_FINAL_BYTES');
+  assert.equal(release.runtime_predecessor.version,'0.15.61');
+  assert.equal(provenance.r160.source_predecessor_manifest_status,'STALE_REJECTED');
   assert.equal(pkg.dependencies['@modelcontextprotocol/client'],'2.3.1');
   assert.equal(pkg.dependencies['@modelcontextprotocol/server'],'2.3.1');
   for(const dep of ['@modelcontextprotocol/client','@modelcontextprotocol/server'])

package/test/r132-release-identity.test.mjs

@@ -8,22 +8,24 @@ import {DEADBYTE_VERSION} from '../src/version.mjs';
 const root=path.resolve(fileURLToPath(new URL('..',import.meta.url)));
 const read=async rel=>JSON.parse(await readFile(path.join(root,rel),'utf8'));
 
-test('R144 package identities, R132 historic evidence and published predecessor are consistent',async()=>{
+test('R165 package identity preserves R132 evidence and published source predecessor',async()=>{
   const [pkg,lock,release,prov,bom,matrix]=await Promise.all([
     read('package.json'),read('package-lock.json'),read('RELEASE.json'),
     read('PROVENANCE.json'),read('SBOM.cdx.json'),read('TEST-MATRIX.json')]);
   for(const value of [pkg.version,lock.version,lock.packages[''].version,release.version,prov.version,bom.metadata.component.version,matrix.version,DEADBYTE_VERSION]){
     assert.equal(value,pkg.version);
   }
-  assert.equal(release.train,'R154');
-  assert.equal(matrix.train,'R154');
-  assert.equal(release.source_predecessor.version,'0.15.60');
-  assert.match(release.source_predecessor.source_path,/0\.15\.60/);
-  assert.equal(prov.source_predecessor_version,'0.15.60');
-  assert.equal(prov.source_predecessor_manifest_file_sha256,'2a19c9da7f11eb831dfb24ba6c6d9789e25a373cea2f3a25ff21d460e07fba36');
-  assert.equal(prov.parent_tarball_sha256,'b85f735f4c8be56f97ea5c78f0cc48583e8d5708a704c903596f5720e36ace83');
-  assert.equal(prov.parent_registry_tarball_sha1,'04cc1a1e80bcb7062ac39eee6b7bab70edd5d8c3');
-  assert.equal(release.runtime_predecessor.version,'0.15.45');
+  assert.equal(release.train,'R165');
+  assert.equal(matrix.train,'R165');
+  assert.equal(release.source_predecessor.version,'0.15.62');
+  assert.equal(release.source_predecessor.train,'R163');
+  assert.match(release.source_predecessor.source_path,/0\.15\.62-r163-release-closure/i);
+  assert.equal(prov.r160.source_predecessor_manifest_status,'STALE_REJECTED');
+  assert.equal(release.r165.published_source_manifest_sha256,'4adf7d94682fbb71c4a91eb3147ecc48076bbc5d79cb67fcb875cde6a1bb4805');
+  assert.equal(release.r165.published_source_tarball_sha256,'812e97609b7c51353ed25f2202129737e43bb4fbe0778c3adec43ec065352641');
+  assert.equal(release.source_predecessor.tarball_sha256,release.r165.published_source_tarball_sha256);
+  assert.equal(prov.source_predecessor_tarball_sha256,release.source_predecessor.tarball_sha256);
+  assert.equal(release.runtime_predecessor.version,'0.15.61');
   assert.equal(prov.runtime_predecessor.release_id,release.runtime_predecessor.release_id);
   assert.equal(prov.runtime_predecessor.manifest_sha256,release.runtime_predecessor.manifest_sha256);
   assert.equal(prov.runtime_predecessor.generation_manifest_sha256,release.runtime_predecessor.generation_manifest_sha256);

package/test/r153-prepublish-identity.test.mjs

@@ -5,10 +5,31 @@ import path from 'node:path';
 import {fileURLToPath} from 'node:url';
 import {verifyR153Lineage,verifyR153IdentityTree} from '../scripts/r153-prepublish-identity.mjs';
 const root=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..');
-const pkg=JSON.parse(await readFile(path.join(root,'package.json'),'utf8'));
-const release=JSON.parse(await readFile(path.join(root,'RELEASE.json'),'utf8'));
-const bridge=JSON.parse(await readFile(path.join(root,'bridge','package.json'),'utf8'));
-const copy=()=>structuredClone({pkg,release,bridge});
+// R153 is a frozen 0.15.61/R154 lineage rule, not the R160 release gate.
+// Exercise its historical contract with an immutable synthetic fixture.
+// Independently prove it rejects the live R160 metadata rather than trying to
+// force 0.15.62 into a 0.15.61 verifier.
+const historical=()=>{
+  const runtime={version:'0.15.45',release_id:'v0.15.45-34aa8d1241cfb8bf',
+    manifest_sha256:'34aa8d1241cfb8bf0b5ba303bf3c06e0e9e1bf01f64457bca659d6dd4d634fdc',
+    generation_manifest_sha256:'ff2b73410062688651abd7bc2dd7b2b8c87810a28e3808bfe1f4352a25b0e6e4'};
+  return {pkg:{name:'deadbyte-mcp',version:'0.15.61'},
+    bridge:{name:'deadbyte-chatgpt-bridge',version:'0.15.61'},
+    release:{name:'deadbyte-mcp',schema:'deadbyte.release.v1',version:'0.15.61',train:'R154',
+      source_predecessor:{version:'0.15.60',
+        tarball_sha256:'b85f735f4c8be56f97ea5c78f0cc48583e8d5708a704c903596f5720e36ace83',
+        release_status:'REGISTRY_PUBLISHED'},
+      runtime_predecessor:runtime,parent:{...runtime}}};
+};
+const copy=()=>historical();
+test('R153 historical verifier refuses current R160 package identity',async()=>{
+ const state={pkg:JSON.parse(await readFile(path.join(root,'package.json'),'utf8')),
+  release:JSON.parse(await readFile(path.join(root,'RELEASE.json'),'utf8')),
+  bridge:JSON.parse(await readFile(path.join(root,'bridge/package.json'),'utf8'))};
+ assert.equal(state.pkg.version,'0.15.63');
+ assert.throws(()=>verifyR153Lineage(state),/package version/);
+ await assert.rejects(verifyR153IdentityTree(root),/package version/);
+});
 test('R153 exact source and runtime lineage: metadata-only PASS',()=>{
   assert.equal(verifyR153Lineage(copy()).status,'PASS');
 });

package/test/r153-staging-leaf-acl.test.mjs

@@ -3,6 +3,8 @@ import assert from 'node:assert/strict';
 import {readFileSync} from 'node:fs';
 import {fileURLToPath} from 'node:url';
 import {spawnSync} from 'node:child_process';
+import path from 'node:path';
+import {windowsPowerShellEnvironment} from '../src/runtime-update.mjs';
 
 const bootstrap=readFileSync(fileURLToPath(new URL('../scripts/bootstrap-uac-migration-r153.ps1',import.meta.url)),'utf8');
 
@@ -51,8 +53,9 @@ try {
   }
 }`;
   const encoded=Buffer.from(ps,'utf16le').toString('base64');
-  const result=spawnSync('powershell.exe',['-NoLogo','-NoProfile','-NonInteractive','-EncodedCommand',encoded],
-    {encoding:'utf8',timeout:30000,maxBuffer:256*1024});
+  const powershell=path.join(process.env.SystemRoot||'C:\\Windows','System32','WindowsPowerShell','v1.0','powershell.exe');
+  const result=spawnSync(powershell,['-NoLogo','-NoProfile','-NonInteractive','-EncodedCommand',encoded],
+    {env:windowsPowerShellEnvironment(process.env),encoding:'utf8',timeout:30000,maxBuffer:256*1024});
   assert.equal(result.status,0,result.stderr||result.stdout||String(result.error));
   assert.match(result.stdout,/R153_WIN32_LEAF_ACL_REPAIR_PASS/);
 });

package/test/r155-commander-live-log.test.mjs

@@ -0,0 +1,44 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {createLiveTimelineTracker} from '../src/remote-live-log.mjs';
+
+test('R155 commander mode renders an individual START/DONE pair with elapsed time and correlation',()=>{
+ const tracker=createLiveTimelineTracker({commanderStyle:true,clock:()=>Date.parse('2026-10-24T14:15:00.000Z')});
+ const begin=tracker.observe({event_type:'tool.request',tool:'machine_status',request_id:'abcdef012345',args:{}},{sequence:9});
+ assert.match(begin,/\[21:15:00\].*Received tool call.*machine_status/);
+ assert.match(begin,/abcdef01/);
+ const done=tracker.observe({event_type:'tool.result',tool:'machine_status',request_id:'abcdef012345',outcome:{status:'ok',duration_ms:4}},{sequence:10});
+ assert.match(done,/\[21:15:00\].*machine_status.*completed/);
+ assert.match(done,/4ms/);
+ assert.match(tracker.summary(),/1 calls \| 1 ok/);
+});
+
+test('R155 commander mode never prints plain credentials even with opt-in detailed timeline',()=>{
+ const tracker=createLiveTimelineTracker({commanderStyle:true,clock:()=>Date.parse('2026-10-24T14:15:00.000Z')});
+ const line=tracker.observe({event_type:'tool.request',tool:'host_exec',request_id:'secret-one',args:{
+  root_id:'core',command_id:'node_script',api_key:'sk-do-not-print-this-123456',content:'top secret source payload',
+  metadata:{token:'Bearer do-not-print-token'}}},{sequence:11});
+ assert.doesNotMatch(line,/sk-do-not-print-this|top secret source payload|do-not-print-token/);
+ assert.match(line,/Received tool call/);
+});
+
+test('R155 commander mode does not classify denied or unknown mutations as completed successes',()=>{
+ const tracker=createLiveTimelineTracker({commanderStyle:true,clock:()=>Date.parse('2026-10-24T14:15:00.000Z')});
+ tracker.observe({event_type:'tool.request',tool:'host_file_write',request_id:'fail-id',args:{root_id:'core',path:'a.txt'}},{sequence:1});
+ const denied=tracker.observe({event_type:'tool.result',tool:'host_file_write',request_id:'fail-id',outcome:{status:'denied',is_error:true,duration_ms:3}},{sequence:2});
+ assert.match(denied,/denied|failed/i);
+ assert.doesNotMatch(denied,/completed.*✓|completed.*OK/);
+ tracker.observe({event_type:'tool.request',tool:'machine_fs',request_id:'unknown-id',args:{op:'write',root_id:'core'}},{sequence:3});
+ const unknown=tracker.observe({event_type:'tool.result',tool:'machine_fs',request_id:'unknown-id',outcome:{status:'interrupted',side_effect_state:'unknown'}},{sequence:4});
+ assert.match(unknown,/OUTCOME_UNKNOWN|UNKNOWN/);
+});
+
+test('R155 commander mode preserves individual heartbeat calls instead of folding bursts',()=>{
+ const tracker=createLiveTimelineTracker({commanderStyle:true,foldHeartbeats:false,clock:()=>Date.parse('2026-10-24T14:15:00.000Z')});
+ for(let n=0;n<3;n++){
+  const id='id-'+n;
+  assert.match(tracker.observe({event_type:'tool.request',tool:'machine_ping',request_id:id,args:{}},{sequence:2*n+1}),/Received tool call/);
+  assert.match(tracker.observe({event_type:'tool.result',tool:'machine_ping',request_id:id,outcome:{status:'ok',duration_ms:1}},{sequence:2*n+2}),/completed/);
+ }
+ assert.match(tracker.summary(),/3 calls \| 3 ok/);
+});

package/test/r155-default-live-log.test.mjs

@@ -0,0 +1,89 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {readFileSync} from 'node:fs';
+import {spawnSync} from 'node:child_process';
+import {fileURLToPath} from 'node:url';
+import path from 'node:path';
+import * as live from '../src/remote-live-log.mjs';
+
+const root=path.dirname(path.dirname(fileURLToPath(import.meta.url)));
+const cli=path.join(root,'src','deadbyte-cli.mjs');
+const now=()=>Date.parse('2026-10-24T15:00:00.000Z');
+function defaultTracker(){
+ assert.equal(typeof live.defaultForegroundTimelineOptions,'function','default timeline configuration must be exported');
+ return live.createLiveTimelineTracker({clock:now,...live.defaultForegroundTimelineOptions({verbose:false})});
+}
+
+test('R155 ordinary remote has per-call START and DONE without opt-in flag',()=>{
+ const tracker=defaultTracker();
+ const start=tracker.observe({event_type:'tool.request',request_id:'abc012345678',tool:'machine_status',args:{}},{sequence:1});
+ assert.match(start,/Received tool call/);
+ assert.match(start,/machine_status/);
+ const done=tracker.observe({event_type:'tool.result',request_id:'abc012345678',tool:'machine_status',outcome:{status:'ok',duration_ms:3}},{sequence:2});
+ assert.match(done,/completed/);
+ assert.match(done,/3ms/);
+});
+
+test('R155 ordinary remote does not fold successive status calls into a burst',()=>{
+ const tracker=defaultTracker();
+ for(let n=0;n<3;n++){
+  const id='repeat-'+n;
+  assert.match(tracker.observe({event_type:'tool.request',request_id:id,tool:'machine_ping',args:{}},{sequence:n*2+1}),/Received tool call/);
+  assert.match(tracker.observe({event_type:'tool.result',request_id:id,tool:'machine_ping',outcome:{status:'ok',duration_ms:1}},{sequence:n*2+2}),/completed/);
+ }
+ assert.match(tracker.summary(),/3 calls \| 3 ok/);
+ assert.doesNotMatch(tracker.summary(),/folded [1-9]/);
+});
+
+test('R155 ordinary remote keeps credentials and payload opaque by default',()=>{
+ const tracker=defaultTracker();
+ const line=tracker.observe({event_type:'tool.request',request_id:'secret-123456',tool:'host_exec',args:{
+   api_key:'sk-secret-test-1234567890',content:'PRIVATE SOURCE CONTENT',root_id:'core',
+   command_id:'node_script',path:'C:\\Safe\\test.js',
+   metadata:{token:'Bearer should-not-appear'}
+ }},{sequence:1});
+ assert.match(line,/Received tool call/);
+ assert.match(line,/node_script/);
+ assert.doesNotMatch(line,/sk-secret-test|PRIVATE SOURCE CONTENT|should-not-appear/);
+});
+
+test('R155 ordinary remote prints DENIED and UNKNOWN as failures rather than completed success',()=>{
+ const tracker=defaultTracker();
+ tracker.observe({event_type:'tool.request',request_id:'one',tool:'host_file_read',args:{path:'a.txt'}},{sequence:1});
+ const fail=tracker.observe({event_type:'tool.result',request_id:'one',tool:'host_file_read',outcome:{status:'denied',is_error:true,reason:'arm file missing'}},{sequence:2});
+ assert.match(fail,/failed/);assert.match(fail,/arm file missing/);
+ tracker.observe({event_type:'tool.request',request_id:'two',tool:'coding_file_write',args:{path:'x.txt'}},{sequence:3});
+ const unknown=tracker.observe({event_type:'tool.result',request_id:'two',tool:'coding_file_write',outcome:{status:'interrupted',side_effect_state:'unknown'}},{sequence:4});
+ assert.match(unknown,/OUTCOME_UNKNOWN/);
+});
+
+test('R155 ordinary remote has no new CLI live-log mode and wired default live behavior',()=>{
+ const source=readFileSync(cli,'utf8');
+ const help=spawnSync(process.execPath,[cli,'--help'],{encoding:'utf8',timeout:10000});
+ assert.equal(help.status,0);
+ assert.doesNotMatch(help.stdout,/live-log=commander/);
+ assert.doesNotMatch(source,/--live-log=commander|commanderLiveLog/);
+ assert.match(source,/defaultForegroundTimelineOptions\(\{verbose\}\)/);
+});
+
+test('R155 unchanged capability polling still has a matching visible DONE for every CALL',()=>{
+ const tracker=defaultTracker();
+ const snapshot='a'.repeat(64);
+ for(let n=0;n<2;n++){
+  const id='cap-'+n;
+  assert.match(tracker.observe({event_type:'tool.request',request_id:id,tool:'capability_manifest',args:{}},{sequence:n*2+1}),/Received tool call/);
+  const done=tracker.observe({event_type:'tool.result',request_id:id,tool:'capability_manifest',outcome:{status:'ok',snapshot_id:snapshot,state_epoch:1,duration_ms:2}},{sequence:n*2+2});
+  assert.match(done,/completed/);
+ }
+ assert.match(tracker.summary(),/2 calls \\| 2 ok/);
+});
+
+test('R155 runtime-only stream reset does not claim audit corruption, audit reset remains severe',()=>{
+ assert.equal(typeof live.formatRemoteLogResetNotice,'function');
+ const runtime=live.formatRemoteLogResetNotice('C:\\state\\runtime\\logs\\coregate.stdout.log','file identity changed');
+ assert.match(runtime,/RUNTIME_LOG_REOPENED/);
+ assert.doesNotMatch(runtime,/AUDIT_STREAM_RESET/);
+ const audit=live.formatRemoteLogResetNotice('C:\\state\\audit\\segment-00000012.jsonl','file identity changed');
+ assert.match(audit,/AUDIT_STREAM_RESET/);
+ assert.match(audit,/verify|audit/i);
+});

package/test/r156-epoch-route-smoke.ps1

@@ -0,0 +1,48 @@
+# R156 read-only verifier: extracts only the controller's authority routing function.
+Set-StrictMode -Version Latest
+$ErrorActionPreference='Stop'
+$root='D:\Projects\deadbyte-mcp\development\deadbyte-mcp-0.15.62-r156-loop-epoch'
+$stage='C:\Program Files\DEADBYTE-R154-Exact-01561-Activation'
+$file=Join-Path $root 'controller\deadbyte-controller.ps1'
+$tokens=$null;$errors=$null
+$ast=[System.Management.Automation.Language.Parser]::ParseFile($file,[ref]$tokens,[ref]$errors)
+if(@($errors).Count -ne 0){throw 'R156_CONTROLLER_PARSER_RED'}
+$matches=@($ast.FindAll({param($n) $n -is [System.Management.Automation.Language.FunctionDefinitionAst] -and $n.Name -in @('Invoke-AuthorityEpochCommand','Assert-ProtectedEpochSourceAcl')},$true))
+if($matches.Count -ne 2){throw 'R156_AUTHORITY_ENTRY_OR_ACL_MISSING'}
+function Fail([string]$message){throw $message}
+function Get-ExecutableHash([string]$File){(Get-FileHash -LiteralPath $File -Algorithm SHA256).Hash.ToLowerInvariant()}
+foreach($f in $matches){Invoke-Expression $f.Extent.Text}
+$cfg=@{CoreRoot=$root;AuthorityEpochRoot=$stage;Bridge=@{FilePath='C:\Program Files\nodejs\node.exe'}}
+# A bogus plane stops before invoking Node or modifying state. Reaching this
+# branch proves the protected exact source/manifest comparisons succeeded.
+$ok=$false
+try{Invoke-AuthorityEpochCommand $cfg 'invalid-plane' 'status' 'not-used'}catch{
+  if($_.Exception.Message -eq 'authority epoch plane invalid: invalid-plane'){$ok=$true}
+  else{throw}
+}
+if(-not $ok){throw 'R156_EXPECTED_POLICY_BOUNDARY_NOT_REACHED'}
+Write-Output 'R156_R89_MATCHED_PROTECTED_EPOCH_ROOT_PASS no_grants_written=true'
+$cfg.AuthorityEpochRoot='C:\Windows\System32'
+$blocked=$false
+try{Invoke-AuthorityEpochCommand $cfg 'invalid-plane' 'status' 'not-used'}catch{
+  if($_.Exception.Message -eq 'authority epoch trusted root release manifest mismatch'){$blocked=$true}
+  else{throw}
+}
+if(-not $blocked){throw 'R156_INCOMPATIBLE_ROOT_WAS_ACCEPTED'}
+Write-Output 'R156_R89_DIFFERENT_RELEASE_ROOT_REJECTED'
+# Even a byte-identical directory is not authority if the OS ACL is writable.
+$cfg.AuthorityEpochRoot=$root
+$blockedWritable=$false
+try { Invoke-AuthorityEpochCommand $cfg 'invalid-plane' 'status' 'not-used' } catch {
+  if($_.Exception.Message -match '^authority epoch protected path (owner denied|writable by an untrusted principal|reparse denied):'){$blockedWritable=$true}
+  else{throw}
+}
+if(-not $blockedWritable){throw 'R156_WRITABLE_EPOCH_COPY_WAS_ACCEPTED'}
+Write-Output 'R156_R89_WRITABLE_SAME_MANIFEST_ROOT_REJECTED'
+$cfg.AuthorityEpochRoot=$stage
+$original=Join-Path $root 'src\authority-continuity-r65.mjs'
+$protected=Join-Path $stage 'src\authority-continuity-r65.mjs'
+if((Get-ExecutableHash $original) -cne (Get-ExecutableHash $protected)){
+  throw 'R156_STAGE_SOURCE_DIFFERENT'
+}
+Write-Output 'R156_R89_SOURCE_BYTES_MATCH_PASS'