deadbyte-mcp 0.15.61 → 0.15.63

package/docs/R159-COMPLETED-HISTORY-BACKUP/legacy-marker-evidence-r159.mjs.before

@@ -0,0 +1,102 @@
+import {readdir,lstat,readFile} from 'node:fs/promises';
+import path from 'node:path';
+import {createHash} from 'node:crypto';
+
+const H=/^[0-9a-f]{64}$/;
+const digest=b=>createHash('sha256').update(b).digest('hex');
+function samePredecessor(a,b){
+  return !!a&&!!b&&['release_id','version','manifest_sha256','generation_manifest_sha256']
+    .every(k=>typeof a[k]==='string'&&a[k]===b[k]);
+}
+async function regular(file){
+  const st=await lstat(file);
+  if(!st.isFile()||st.isSymbolicLink())throw new Error('R159 evidence file must be regular and not a link');
+}
+function strictJson(bytes,label){
+  let result;
+  try{result=JSON.parse(bytes.toString('utf8').replace(/^\uFEFF/,''));}
+  catch{throw new Error('R159 '+label+' invalid JSON');}
+  if(!result||typeof result!=='object'||Array.isArray(result))
+    throw new Error('R159 '+label+' invalid object');
+  return result;
+}
+// Examine ONLY local immutable receipt candidates. It must never infer a live
+// process state, delete a marker, grant an authority plane, or mutate evidence.
+export async function selectLegacyMarkerEvidence({evidenceDir,activePointer}){
+  if(typeof evidenceDir!=='string'||!path.isAbsolute(evidenceDir))
+    throw new Error('R159 evidence root must be absolute');
+  let entries;
+  try{entries=await readdir(evidenceDir,{withFileTypes:true});}
+  catch(e){if(e?.code==='ENOENT')return {kind:'none'};throw e;}
+  if(entries.length>4096)throw new Error('R159 evidence inventory exceeds bounded scan');
+  const fileSet=new Map(entries.map(e=>[e.name,e]));
+  const locatorPath=path.join(evidenceDir,'r153-pending-migration.json');
+  let located=null;
+  const locatorEntry=fileSet.get('r153-pending-migration.json');
+  if(locatorEntry){
+    if(!locatorEntry.isFile()||locatorEntry.isSymbolicLink())
+      throw new Error('R159 locator is not regular');
+    await regular(locatorPath);
+    const locator=strictJson(await readFile(locatorPath),'legacy locator');
+    if(locator.schema!=='deadbyte.r153-pending-migration.v1'||
+        !H.test(String(locator.marker_sha256??''))||
+        !H.test(String(locator.receipt_sha256??''))||
+        typeof locator.receipt_path!=='string')
+      throw new Error('R159 legacy locator schema invalid');
+    const expected=path.join(evidenceDir,'marker-'+locator.marker_sha256+'.terminal.json');
+    if(path.resolve(locator.receipt_path).toLowerCase()!==path.resolve(expected).toLowerCase())
+      throw new Error('R159 legacy locator receipt path mismatch');
+    await regular(expected);
+    const raw=await readFile(expected);
+    if(digest(raw)!==locator.receipt_sha256)
+      throw new Error('R159 legacy locator receipt hash mismatch');
+    const terminal=strictJson(raw,'located terminal');
+    if(terminal.schema!=='deadbyte.r153-marker-reconciliation.v1'||
+       terminal.state!=='MARKER_RECONCILED'||terminal.marker_sha256!==locator.marker_sha256)
+      throw new Error('R159 located terminal identity mismatch');
+    if(samePredecessor(terminal.predecessor,activePointer))
+      located={kind:'located',receiptPath:expected,receiptSha256:locator.receipt_sha256,
+        markerSha256:locator.marker_sha256};
+  }
+  const candidates=[];
+  for(const entry of entries){
+    const match=/^marker-([a-f0-9]{64})\.intent\.json$/.exec(entry.name);
+    if(!match)continue;
+    if(!entry.isFile()||entry.isSymbolicLink())throw new Error('R159 intent is not regular');
+    const intent=path.join(evidenceDir,entry.name);
+    await regular(intent);
+    const intentBytes=await readFile(intent),value=strictJson(intentBytes,'recovery intent');
+    if(value.schema!=='deadbyte.r153-marker-reconciliation-intent.v1'||
+       value.state!=='RECONCILIATION_CLAIMED'||value.marker_sha256!==match[1])
+      throw new Error('R159 intent filename/identity mismatch');
+    if(!samePredecessor(value.predecessor,activePointer))continue;
+    const terminal=path.join(evidenceDir,'marker-'+match[1]+'.terminal.json');
+    const terminalEntry=fileSet.get(path.basename(terminal));
+    let terminalExists=false;
+    if(terminalEntry){
+      if(!terminalEntry.isFile()||terminalEntry.isSymbolicLink())
+        throw new Error('R159 terminal is not regular');
+      await regular(terminal);
+      const parsed=strictJson(await readFile(terminal),'current terminal');
+      if(parsed.schema!=='deadbyte.r153-marker-reconciliation.v1'||
+         parsed.state!=='MARKER_RECONCILED'||parsed.marker_sha256!==match[1]||
+         parsed.intent_sha256!==digest(intentBytes)||
+         !samePredecessor(parsed.predecessor,activePointer))
+        throw new Error('R159 current terminal intent/subject mismatch');
+      terminalExists=true;
+    }
+    candidates.push({markerSha256:match[1],intent,terminal,terminalExists});
+  }
+  const pending=candidates.filter(c=>!c.terminalExists);
+  if(pending.length>1)throw new Error('R159 multiple matching pending reconciliation claims; manual reconciliation required');
+  if(pending.length===1)return {kind:'pending',pending:pending[0]};
+  if(located){
+    const other=candidates.filter(c=>c.markerSha256!==located.markerSha256);
+    if(other.length)throw new Error('R159 ambiguous multiple current reconciliation receipts');
+    return located;
+  }
+  const completed=candidates.filter(c=>c.terminalExists);
+  if(completed.length>1)throw new Error('R159 ambiguous multiple completed reconciliation receipts');
+  if(completed.length===1)return {kind:'completed',pending:completed[0]};
+  return {kind:'none'};
+}

package/docs/R159-COMPLETED-HISTORY-BACKUP/r159-legacy-marker-evidence.test.mjs.before

@@ -0,0 +1,79 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {mkdtemp,mkdir,writeFile,readFile,rm} from 'node:fs/promises';
+import path from 'node:path';
+import os from 'node:os';
+import {createHash} from 'node:crypto';
+import {selectLegacyMarkerEvidence} from '../src/legacy-marker-evidence-r159.mjs';
+const sha=x=>createHash('sha256').update(x).digest('hex');
+const id=c=>c.repeat(64);
+const old={release_id:'v0.15.45-OLD',version:'0.15.45',manifest_sha256:id('1'),generation_manifest_sha256:id('2')};
+const current={release_id:'v0.15.61-CURRENT',version:'0.15.61',manifest_sha256:id('3'),generation_manifest_sha256:id('4')};
+async function fixture(t){
+ const root=await mkdtemp(path.join(os.tmpdir(),'deadbyte-r159-locator-'));
+ const evidenceDir=path.join(root,'legacy-migration');await mkdir(evidenceDir);
+ t.after(()=>rm(root,{recursive:true,force:true}));
+ async function record(marker,predecessor,opts={}){
+   const body={schema:'deadbyte.r153-marker-reconciliation-intent.v1',state:'RECONCILIATION_CLAIMED',marker_sha256:marker,predecessor,subject_sha256:id('5')};
+   const intent=path.join(evidenceDir,'marker-'+marker+'.intent.json');
+   const intentBytes=Buffer.from(JSON.stringify(body)+'\n');
+   await writeFile(intent,intentBytes);
+   let terminalFile=null;
+   if(opts.terminal!==false){
+     terminalFile=path.join(evidenceDir,'marker-'+marker+'.terminal.json');
+     await writeFile(terminalFile,JSON.stringify({schema:'deadbyte.r153-marker-reconciliation.v1',state:'MARKER_RECONCILED',marker_sha256:marker,predecessor,intent_sha256:sha(intentBytes),subject_sha256:id('6')})+'\n');
+   }
+   return {intent,terminal:terminalFile};
+ }
+ async function locator(marker,receipt){
+   await writeFile(path.join(evidenceDir,'r153-pending-migration.json'),
+     JSON.stringify({schema:'deadbyte.r153-pending-migration.v1',marker_sha256:marker,receipt_path:receipt,receipt_sha256:sha(await readFile(receipt))})+'\n');
+ }
+ return {root,evidenceDir,record,locator};
+}
+test('R159 stale singleton locator does not hide current release terminal',async t=>{
+ const f=await fixture(t),o=await f.record(id('a'),old),n=await f.record(id('b'),current);
+ await f.locator(id('a'),o.terminal);
+ const v=await selectLegacyMarkerEvidence({evidenceDir:f.evidenceDir,activePointer:current});
+ assert.equal(v.kind,'completed');assert.equal(v.pending.markerSha256,id('b'));assert.equal(v.pending.terminal,n.terminal);
+});
+test('R159 current pending intent not masked by historic locator',async t=>{
+ const f=await fixture(t),o=await f.record(id('a'),old),n=await f.record(id('b'),current,{terminal:false});
+ await f.locator(id('a'),o.terminal);
+ const v=await selectLegacyMarkerEvidence({evidenceDir:f.evidenceDir,activePointer:current});
+ assert.equal(v.kind,'pending');assert.equal(v.pending.intent,n.intent);
+});
+test('R159 two matching pending intents fail closed',async t=>{
+ const f=await fixture(t);await f.record(id('a'),current,{terminal:false});await f.record(id('b'),current,{terminal:false});
+ await assert.rejects(selectLegacyMarkerEvidence({evidenceDir:f.evidenceDir,activePointer:current}),/multiple.*pending|ambiguous/i);
+});
+test('R159 current locator accepted after hash and subject',async t=>{
+ const f=await fixture(t),c=await f.record(id('b'),current);await f.locator(id('b'),c.terminal);
+ const v=await selectLegacyMarkerEvidence({evidenceDir:f.evidenceDir,activePointer:current});
+ assert.equal(v.kind,'located');assert.equal(v.receiptPath,c.terminal);assert.match(v.receiptSha256,/^[a-f0-9]{64}$/);
+});
+test('R159 tampered locator fails closed',async t=>{
+ const f=await fixture(t),c=await f.record(id('b'),current);await f.locator(id('b'),c.terminal);await writeFile(c.terminal,'{}\n');
+ await assert.rejects(selectLegacyMarkerEvidence({evidenceDir:f.evidenceDir,activePointer:current}),/hash|invalid|mismatch/i);
+});
+test('R159 no evidence on clean start',async t=>{
+ const f=await fixture(t);const v=await selectLegacyMarkerEvidence({evidenceDir:f.evidenceDir,activePointer:current});assert.equal(v.kind,'none');
+});
+test('R159 forged terminal with wrong intent hash fails closed',async t=>{
+ const f=await fixture(t),c=await f.record(id('b'),current);
+ const forged=JSON.parse(await readFile(c.terminal,'utf8'));
+ forged.intent_sha256=id('0');
+ await writeFile(c.terminal,JSON.stringify(forged)+'\n');
+ await assert.rejects(selectLegacyMarkerEvidence({evidenceDir:f.evidenceDir,activePointer:current}),/intent|mismatch/i);
+});
+test('R159 two unlocated completed current receipts remain ambiguous',async t=>{
+ const f=await fixture(t);await f.record(id('a'),current);await f.record(id('b'),current);
+ await assert.rejects(selectLegacyMarkerEvidence({evidenceDir:f.evidenceDir,activePointer:current}),/multiple|ambiguous/i);
+});
+test('R159 remote foreground code routes historical locators through subject selection',async()=>{
+ const cli=await readFile(new URL('../src/deadbyte-cli.mjs',import.meta.url),'utf8');
+ assert.match(cli,/selectLegacyMarkerEvidence\(\{evidenceDir,activePointer\}\)/);
+ assert.match(cli,/R159 active release changed during marker recovery/);
+ assert.match(cli,/marker-'\+reconciled\.marker_sha256\+'\.locator\.json'/);
+ assert.doesNotMatch(cli,/publishExclusiveJson\(locatorPath,locator\)/);
+});

package/docs/R159-COMPLETED-HISTORY-PATCH.json

@@ -0,0 +1,26 @@
+{
+  "schema": "deadbyte.r159-completed-history-patch.v1",
+  "time": "2026-10-25T04:57:11.495Z",
+  "candidate": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.62-r159-marker-reconcile",
+  "changes": [
+    {
+      "path": "src/legacy-marker-evidence-r159.mjs",
+      "before_sha256": "f4f333350db85b58ae00fccb78ebee70b4ad38f3682ddcb5c9c2601d0f67b140",
+      "after_sha256": "c8af54e4c5e52b812aebfc3da2525e3e6f8646785e598d4ad67878556c7c6eb8",
+      "backup": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.62-r159-marker-reconcile\\docs\\R159-COMPLETED-HISTORY-BACKUP\\legacy-marker-evidence-r159.mjs.before"
+    },
+    {
+      "path": "src/deadbyte-cli.mjs",
+      "before_sha256": "4830eff142e91a99672fd3d4da848a52b4594a07918390ed8a165cf6295c8cb4",
+      "after_sha256": "942e38a2acef5ee7114d7d36f86515f7c0d3a468d4006c9dbb771de194b8c592",
+      "backup": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.62-r159-marker-reconcile\\docs\\R159-COMPLETED-HISTORY-BACKUP\\deadbyte-cli.mjs.before"
+    },
+    {
+      "path": "test/r159-legacy-marker-evidence.test.mjs",
+      "before_sha256": "aeeefc14e8e007df4182a14e6936bfdf14a764578588fe82c5679b051826d7b0",
+      "after_sha256": "ff0fc541ef9b9b1565be647d2861c29afc8827504122c1df88a94d67fd2c20bd",
+      "backup": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.62-r159-marker-reconcile\\docs\\R159-COMPLETED-HISTORY-BACKUP\\r159-legacy-marker-evidence.test.mjs.before"
+    }
+  ],
+  "scope": "isolated source and test only; no production state touched"
+}

package/docs/R159-MARKER-LOCATOR-CHECKPOINT.md

@@ -0,0 +1,46 @@
+# R159 — historical marker locator binding (candidate only)
+
+Production: 0.15.61, verified ONLINE before changes, Coding DISARMED.
+Parent: R158 isolated candidate.
+Candidate: D:\Projects\deadbyte-mcp\development\deadbyte-mcp-0.15.62-r159-marker-reconcile
+Safety: NO production mutation, UAC, grants, ACL changes, npm publish or activation.
+
+## Root cause verified from installed production evidence
+
+The original src/deadbyte-cli.mjs recoverRemoteSession() read evidence/legacy-migration/r153-pending-migration.json whenever the foreground marker was absent. It validated receipt bytes/hash but returned the receipt without comparing terminal.predecessor against the ACTIVE release.
+
+Observed on Windows:
+- historical marker 4e9706... intent and terminal bind predecessor v0.15.45-34aa8d1241cfb8bf
+- singleton r153-pending-migration.json still points to that historical terminal
+- newer marker 9cbee7... intent and terminal bind predecessor v0.15.61-055d1ff0aa99e60b
+- current active release is v0.15.61-055d1ff0aa99e60b
+- two historical intents and two terminals exist; no evidence was deleted or rewritten
+
+Blindly trusting the singleton could hand an OLD marker receipt into the upgrade migration path even though the installed active release has changed. Counting all intent files as unresolved also creates a false ambiguity.
+
+## Changes in R159 source only
+
+- src/legacy-marker-evidence-r159.mjs: new bounded read-only selector. Validates exact locator filename, SHA-256 and terminal marker; requires predecessor release_id/version/manifest/generation-manifest binding. Scans historical and current intents; prioritizes a truly pending CURRENT predecessor; denies multiple current pending or multiple unlocated current completed claims. Rejects symlinks, invalid JSON, mismatched terminal intent hashes and malformed identities. Does not execute commands or mutate authority.
+- src/deadbyte-cli.mjs: consume the selector before startup synchronization, ignore completed current terminal as historical when runtime already ONLINE, disallow pending reconciliation while runtime is not OFFLINE, reread active release before reuse/recovery to catch pointer drift, and publish marker-specific locators rather than writing over the legacy singleton. The historical r153-pending-migration.json and all terminal/intent receipts are preserved.
+- test/r159-legacy-marker-evidence.test.mjs: 9 tests for historical locator vs current release, pending precedence, conflicting claims, exact located receipts, tamper rejection, clean empty start, forged terminal, duplicate completed and actual CLI wiring.
+
+## Evidence level and gating
+
+IMPORTANT: The remote Windows test-runner action was blocked by the tool security check. The tool did not execute Node. Therefore R159 is **SOURCE_EDITED / TESTS_WRITTEN / NOT YET VERIFIED**. No RED/GREEN or integrated runtime PASS claim.
+
+The focused test that must run once the approved local executor is available:
+
+  cd D:\Projects\deadbyte-mcp\development\deadbyte-mcp-0.15.62-r159-marker-reconcile
+  node --check src\legacy-marker-evidence-r159.mjs
+  node --check src\deadbyte-cli.mjs
+  node --test test\r159-legacy-marker-evidence.test.mjs test\r153-clean-activation-recovery.test.mjs
+
+Then broader affected tests, restart/reconcile in disposable stateRoot, and exact production evidence read-only verification. Stop on unexpected behavior. Never test by destroying production markers.
+
+## Remaining dependency gates
+
+R89 production arm still fails UNTRUSTED_WRITE_ACE because production generation lacks AuthorityEpochRoot. R158 implements verified protected root bootstrap in candidate, not active generation. Owner-approved exact protected installation + signed activation/rollback remain required.
+
+R155 default LiveLogs focused tests previously passed, but full protected Windows release regression and clean tarball evidence are still outstanding. R70 owner autonomous enrollment remains unverified.
+
+Do not label 0.15.62 ready or publish from this checkpoint. Candidate package.json still identifies the old version.

package/docs/R160-ENGINEERING-HANDOFF.md

@@ -0,0 +1,32 @@
+# R160 engineering handoff
+
+## Identity
+
+- Source predecessor: `D:\Projects\deadbyte-mcp\development\deadbyte-mcp-0.15.62-r159-marker-reconcile` (unsealed; its inherited manifest was stale and rejected).
+- Development successor: `D:\Projects\deadbyte-mcp\development\deadbyte-mcp-0.15.62-r160-marker-proof`.
+- Observed runtime predecessor: `v0.15.61-055d1ff0aa99e60b`, manifest `055d1ff0aa99e60bbf9e9f136b02ebd4fffb8391712560f7607cff30af94dcdf`, generation `f940e794daac2dda097a66301c4b85c4b29a2df7c669e549503c05a2a55ff6c4`.
+- Production was observed ONLINE and all five planes DISARMED. R160 has not been published or activated.
+
+## Completed behavior work
+
+- Located legacy receipts now pass the existing R153 proof-binding verifier after locator/terminal hash checks; policy drift and a changed active pointer fail closed.
+- Remote startup verifies exact manifest entries for every recovery/startup decision module before evidence recovery or foreground claim.
+- Stable CMD launcher pins native Windows PowerShell rather than resolving an ambient `powershell.exe`.
+- Restored the release-source package lock from the exact protected 0.15.61 source after a genuine `ENOENT` release-identity RED.
+- Reference capability decisions for all twelve observed roots are in `docs/R160-REFERENCE-CAPABILITY-MATRIX.json`; no donor source bytes were copied.
+
+## Observed verification
+
+- R160 receipt/package/launcher focused tests: GREEN.
+- R155 LIVELOG and R156/R157 supervisor focused tests: GREEN.
+- Protected fixture: `C:\Program Files\DEADBYTE-R160-Protected-0.15.62-Test`; owner Administrators, inherited Program Files ACL, Users read/execute only.
+- Installed manifest verification: 2,464 files; protected tailored manifest SHA-256 `df050f750818cc95c4210137314a395df63ba66864bb51a2aef242c6de2ebaf0`.
+- R158 protected exact-source preflight with a distinct writable release view: 4/4 PASS.
+- Isolated engineering-loop proof: planning, mutation, repair, regression, restart reconciliation and no duplicate apply passed; no public tool or authority-scope change.
+
+## Pending release gates
+
+- Regenerate the final manifest after the last source/metadata change.
+- Install the exact final bytes into a fresh protected path and rerun full regression, Windows gate, doctor, package boundary, isolated install, receipt verification and performance checks.
+- Exercise isolated authority arm/revoke and rollback/restore without touching production.
+- Publication and production activation remain separate approval boundaries.

package/docs/R160-REFERENCE-CAPABILITY-MATRIX.json

@@ -0,0 +1,165 @@
+{
+  "schema": "deadbyte.r160-reference-capability-matrix.v1",
+  "observed_at_utc": "2026-10-25T06:02:31.1966596Z",
+  "method": "read-only source, test, package metadata, and license inspection; no donor executable was run and no donor source bytes were copied",
+  "public_tool_delta": 0,
+  "authority_scope_delta": 0,
+  "repositories": [
+    {
+      "reference": "better-remote-commander",
+      "evidence_paths": ["packages/agent/src/core/terminal-manager.ts", "packages/relay/src/device-hub.ts", "packages/agent/package.json"],
+      "behavior": "line-bounded process output with eviction counters and pagination; stale-socket replacement, call correlation, pong watchdog, bounded call timeout",
+      "deadbyte_state": "parity_or_stronger",
+      "deadbyte_equivalent": ["src/process-runtime.mjs", "src/process-output-contracts.mjs", "bridge/src/remote-call-claims-r60.mjs", "bridge/src/reconnect-delay-r60.mjs"],
+      "security": "relay must never widen local policy; PID alone remains non-authoritative",
+      "performance": "bounded output and watchdogs prevent memory growth and half-open stalls",
+      "license": "package metadata declares MIT; desktop-commander-derived files carry a separate notice",
+      "decision": "ADAPT",
+      "integration": "retain DEADBYTE signed claims and native ownership; reuse only adversarial eviction/watchdog/correlation test ideas",
+      "acceptance": "bounded retained bytes, monotonic cursor behavior, stale channel replacement, and no mutation replay"
+    },
+    {
+      "reference": "cua",
+      "evidence_paths": ["rfcs/3007-cua-driver-lifecycle-sessions.md", "rfcs/3682-typed-native-window-sdk.md", "libs/python/agent/tests/test_uitars_coordinate_security.py"],
+      "behavior": "lifecycle identity separated from authorization; host-held resume identity; typed exact-window snapshot/token action followed by fresh verification",
+      "deadbyte_state": "parity",
+      "deadbyte_equivalent": ["src/desktop-runtime-r40.mjs", "src/desktop-observer-r40.mjs", "src/foreground-process-identity.mjs"],
+      "security": "public session names are not bearer credentials; background action cannot silently escalate to foreground",
+      "performance": "fresh observation is paid only around desktop effects",
+      "license": "mixed monorepo licenses; pattern-only use",
+      "decision": "ADAPT",
+      "integration": "add conformance and stale-frame tests only; keep DEADBYTE desktop authority and receipt model",
+      "acceptance": "stale frame/token refusal, exact window identity, dispatched-not-verified distinction, cleanup exactly once"
+    },
+    {
+      "reference": "desktop-commander v0.2.52",
+      "evidence_paths": ["dist/terminal-manager.js", "dist/remote-device/remote-channel.js", "package.json"],
+      "behavior": "interactive process buffering, pagination, timeout, remote reconnect and command lifecycle",
+      "deadbyte_state": "parity_or_stronger",
+      "deadbyte_equivalent": ["src/process-runtime.mjs", "src/remote-live-log.mjs", "bridge/src/remote-dispatch-r60.mjs"],
+      "security": "donor process identity is weaker than DEADBYTE PID plus creation identity and signed receipts",
+      "performance": "use as a same-workload latency and retained-output baseline",
+      "license": "package metadata declares MIT",
+      "decision": "KEEP_OURS",
+      "integration": "no donor runtime import",
+      "acceptance": "DEADBYTE output remains bounded and control calls do not wait behind process output"
+    },
+    {
+      "reference": "desktop-commander v0.3.0",
+      "evidence_paths": ["dist/utils/atomic-write.js", "dist/utils/process-tree.js", "dist/remote-device/diagnostics/redact.js", "dist/remote-device/transport-telemetry.js", "vendor/telemetry-contract/transport.test.js"],
+      "behavior": "atomic configuration writes, process-tree cleanup, bounded diagnostic redaction and transport health telemetry",
+      "deadbyte_state": "parity_or_stronger",
+      "deadbyte_equivalent": ["src/atomic-mutation-r74.mjs", "src/process-runtime.mjs", "src/remote-log-decode-r60.mjs", "src/remote-result-journal.mjs"],
+      "security": "presentation telemetry cannot replace durable signed audit evidence",
+      "performance": "batch only non-authoritative presentation state",
+      "license": "package metadata declares MIT; vendor package inspected separately",
+      "decision": "ADAPT",
+      "integration": "retain DEADBYTE atomic receipts; add redaction and parent-child cleanup differential tests",
+      "acceptance": "no secret leakage, orphan, unbounded diagnostic growth, or audit weakening"
+    },
+    {
+      "reference": "desktop-commander v0.3.1",
+      "evidence_paths": ["dist/utils/atomic-write.js", "dist/utils/process-tree.js", "dist/remote-device/remote-channel.js", "dist/remote-device/realtime-health-telemetry.js"],
+      "behavior": "later transport/text-read revisions with health reporting and the same bounded process primitives",
+      "deadbyte_state": "different",
+      "deadbyte_equivalent": ["src/machine-fs-runtime.mjs", "src/remote-live-log.mjs", "bridge/src/bridge-health-r59.mjs"],
+      "security": "keep local authority final and diagnostics opt-in/local-first",
+      "performance": "compare event ordering, reconnect latency and read throughput on identical inputs",
+      "license": "package metadata declares MIT",
+      "decision": "DEFER",
+      "integration": "no R160 feature import; retain as benchmark/reference evidence",
+      "acceptance": "a future adoption requires a focused DEADBYTE RED and same-machine benchmark"
+    },
+    {
+      "reference": "desktop-commander-0.3.1-alpha.2",
+      "evidence_paths": ["static/dist/terminal-manager.js", "static/dist/remote-device/remote-channel.js", "static/dist/remote-device/diagnostics/redact.js", "static/package.json"],
+      "behavior": "alpha transport diagnostics, event grouping and bounded process presentation",
+      "deadbyte_state": "parity_or_stronger",
+      "deadbyte_equivalent": ["src/remote-live-log.mjs", "src/operation-history.mjs", "src/process-runtime.mjs"],
+      "security": "signed audit remains authority; alpha diagnostics are presentation only",
+      "performance": "grouping is acceptable only when failures and state changes remain visible",
+      "license": "static package metadata declares MIT",
+      "decision": "KEEP_OURS",
+      "integration": "R155 already preserves START and terminal lines with bounded presentation",
+      "acceptance": "no duplicate terminal result, hidden failure, raw payload, or secret"
+    },
+    {
+      "reference": "harness2-main",
+      "evidence_paths": ["harness2/core/ledger.py", "harness2/core/recursion.py", "LICENSE", "third_party/licenses/job-bench-eval.LICENSE"],
+      "behavior": "run ledger, recursion budgets, benchmark task/result accounting and resumable evaluation",
+      "deadbyte_state": "different",
+      "deadbyte_equivalent": ["src/autonomous-loop-state.mjs", "src/autonomous-progress.mjs", "src/autonomous-supervisor-host.mjs"],
+      "security": "evaluation metadata cannot grant authority or select new executable/root",
+      "performance": "use ledger metrics for wasted retry and time-to-repair measurement",
+      "license": "repository and third-party licenses present; pattern-only use",
+      "decision": "ADAPT",
+      "integration": "map bounded run ledger concepts onto existing signed autonomous journal",
+      "acceptance": "restart-safe goal state, bounded retries, repair fingerprint and evidence-backed terminal decision"
+    },
+    {
+      "reference": "open-remote-mcp",
+      "evidence_paths": ["apps/server/src/lib/security.ts", "apps/server/src/lib/security.test.ts", "apps/agent/src/index.ts"],
+      "behavior": "server policy and pairing may narrow a device but the device remains final enforcement authority",
+      "deadbyte_state": "stronger",
+      "deadbyte_equivalent": ["src/capability-resolver.mjs", "src/remote-authority.mjs", "src/authority-continuity-r65.mjs"],
+      "security": "remote policy may never mint local grants",
+      "performance": "no second relay stack is justified",
+      "license": "no root license identified in the inspected snapshot; no source reuse",
+      "decision": "KEEP_OURS",
+      "integration": "retain as negative authority-narrowing test inspiration",
+      "acceptance": "relay-selected route cannot widen local capability or authority"
+    },
+    {
+      "reference": "rea-main",
+      "evidence_paths": ["docs/reconstruction-obligation-ledgers.md", "scripts/generate-completion-ledger.mjs", "scripts/verify/recorded-crash/trace-policy.mjs", "LICENSE"],
+      "behavior": "completion-obligation ledgers and recorded-crash verification for reverse-engineering workflows",
+      "deadbyte_state": "out_of_scope",
+      "deadbyte_equivalent": ["src/autonomous-loop-state.mjs", "src/operation-history.mjs"],
+      "security": "debugger/tracer authority would expand the current scope",
+      "performance": "no comparable production workload in R160",
+      "license": "root license present with additional third-party licenses",
+      "decision": "DEFER",
+      "integration": "reuse only the concept of explicit unresolved obligations in a future bounded evaluation",
+      "acceptance": "requires separate owner-approved RE capability scope"
+    },
+    {
+      "reference": "remcp",
+      "evidence_paths": ["packages/client/src/agent.mjs", "packages/runtime/src/policy.mjs", "packages/runtime/test/extended-security.test.mjs", "packages/client/LICENSE", "packages/runtime/LICENSE"],
+      "behavior": "client/runtime split, reconnect cancellation, runtime coherence, low-dependency policy and catalog tests",
+      "deadbyte_state": "parity_or_stronger",
+      "deadbyte_equivalent": ["src/runtime-coherence.mjs", "src/remote-device-r44.mjs", "src/capability-ledger-r36.mjs"],
+      "security": "unrestricted mode and implicit upload are rejected",
+      "performance": "retain compact catalog and bounded reconnect timers",
+      "license": "client/runtime licenses and MIT package metadata present",
+      "decision": "ADAPT",
+      "integration": "reuse catalog/coherence golden-test methodology without a runtime dependency",
+      "acceptance": "43 compact tools, version coherence, cancellation and reconnect cleanup remain stable"
+    },
+    {
+      "reference": "secure-host-mcp",
+      "evidence_paths": ["src/workspace.ts", "src/executor.ts", "src/auth.ts", "src/audit.ts", "test/workspace.test.ts"],
+      "behavior": "realpath workspace confinement, bounded job output/TTL, authentication and bounded redacted audit files",
+      "deadbyte_state": "stronger_on_authority",
+      "deadbyte_equivalent": ["src/coding-runtime.mjs", "src/process-runtime.mjs", "src/audit-verify.mjs", "src/privileged-install-trust-r89.mjs"],
+      "security": "generic shell and taskkill-by-PID are weaker and rejected",
+      "performance": "bounded audit/output patterns already exist",
+      "license": "package metadata declares MIT",
+      "decision": "ADAPT",
+      "integration": "add workspace escape and retention negatives only",
+      "acceptance": "junction/symlink escape, oversized output and unauthenticated privileged execution fail closed"
+    },
+    {
+      "reference": "winremote-mcp",
+      "evidence_paths": ["src/winremote/security.py", "src/winremote/desktop.py", "src/winremote/auth.py", "tests/test_security_hardening.py"],
+      "behavior": "SSRF/private-network denial, remote auth guards and Windows desktop/window abstractions",
+      "deadbyte_state": "mixed",
+      "deadbyte_equivalent": ["src/desktop-runtime-r40.mjs", "src/remote-authority.mjs", "src/http-reader-r48.mjs"],
+      "security": "generic shell, fuzzy window action and OCR dependence are rejected",
+      "performance": "native exact-window paths remain preferred",
+      "license": "no root license identified in the inspected snapshot; no source reuse",
+      "decision": "ADAPT",
+      "integration": "reuse SSRF/auth negative test ideas and keep typed exact-window desktop flow",
+      "acceptance": "private/loopback URL fetch denial and stale/fuzzy target refusal"
+    }
+  ]
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.61",
+  "version": "0.15.63",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
@@ -42,7 +42,7 @@
     "contained:run": "node src/contained-cli.mjs workspaces/demo input.txt",
     "contained:smoke": "node src/contained-smoke.mjs",
     "mcp:contained:smoke": "node src/mcp-contained-smoke-client.mjs",
-    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r72.ps1",
+    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r160.ps1 -Stage all",
     "authority:smoke": "node src/authority-smoke.mjs",
     "mcp:remote:smoke": "node src/remote-mcp-smoke-client.mjs",
     "mcp:host:smoke": "node src/mcp-host-smoke-client.mjs",

package/scripts/gate-windows-r160.ps1

@@ -0,0 +1,57 @@
+#requires -Version 5.1
+[CmdletBinding()]
+param([ValidateSet('preflight','focused','full','manifest','doctor','all')][string]$Stage='preflight')
+Set-StrictMode -Version Latest
+$ErrorActionPreference='Stop'
+$repo=Split-Path -Parent $PSScriptRoot
+$state=Join-Path $env:USERPROFILE '.deadbyte-mcp'
+$parentId='v0.15.61-055d1ff0aa99e60b'
+$parentSha='055d1ff0aa99e60bbf9e9f136b02ebd4fffb8391712560f7607cff30af94dcdf'
+$parentGen='f940e794daac2dda097a66301c4b85c4b29a2df7c669e549503c05a2a55ff6c4'
+$nativeNode='C:\Program Files\nodejs\node.exe'
+$node=if(Test-Path -LiteralPath $nativeNode -PathType Leaf){$nativeNode}else{(Get-Command node -ErrorAction Stop).Source}
+function Sha([string]$file){
+    $sha=[Security.Cryptography.SHA256]::Create()
+    try{$stream=[IO.File]::OpenRead($file);try{return ([BitConverter]::ToString($sha.ComputeHash($stream))).Replace('-','').ToLowerInvariant()}finally{$stream.Dispose()}}finally{$sha.Dispose()}
+}
+function Run-Node([string]$label,[string[]]$nodeArgs){
+    if($null -eq $nodeArgs -or $nodeArgs.Count -lt 1){throw "R160_${label}_NO_NODE_ARGUMENTS"}
+    Write-Output "R160_STAGE_START=$label"
+    Write-Output "R160_STAGE_ARGS=$($nodeArgs.Count)"
+    $global:LASTEXITCODE=0
+    & $node @nodeArgs
+    $exit=$global:LASTEXITCODE
+    if($exit -ne 0){throw "R160_${label}_FAILED exit=$exit"}
+    Write-Output "R160_STAGE_PASS=$label"
+}
+Push-Location $repo
+try{
+    $pkg=Get-Content -LiteralPath 'package.json' -Raw | ConvertFrom-Json
+    $release=Get-Content -LiteralPath 'RELEASE.json' -Raw | ConvertFrom-Json
+    if($pkg.version -ne '0.15.62' -or $release.version -ne '0.15.62' -or $release.train -ne 'R160'){throw 'R160_CANDIDATE_VERSION_DRIFT'}
+    if($release.runtime_predecessor.release_id -ne $parentId -or $release.runtime_predecessor.manifest_sha256 -ne $parentSha -or $release.runtime_predecessor.generation_manifest_sha256 -ne $parentGen){throw 'R160_RUNTIME_PREDECESSOR_IDENTITY_DRIFT'}
+    $active=Get-Content -LiteralPath (Join-Path $state 'active-release.json') -Raw | ConvertFrom-Json
+    if($active.version -ne '0.15.61' -or $active.release_id -ne $parentId -or $active.manifest_sha256 -ne $parentSha -or $active.generation_manifest_sha256 -ne $parentGen){throw 'R160_ACTIVE_RUNTIME_DRIFT'}
+    if((Sha (Join-Path $active.release_root 'MANIFEST.SHA256')) -ne $parentSha){throw 'R160_ACTIVE_MANIFEST_MISMATCH'}
+    Write-Output 'R160_PREDECESSOR_PREFLIGHT=PASS'
+    if($Stage -eq 'preflight'){return}
+    if($Stage -in @('focused','all')){
+        Run-Node -label 'focused' -nodeArgs @('--test','--test-concurrency=1','test/r89-privileged-install-boundary.test.mjs','test/r92-acl-ace-applicability.test.mjs','test/r153-clean-activation-recovery.test.mjs','test/r155-commander-live-log.test.mjs','test/r155-default-live-log.test.mjs','test/r156-supervisor-pacing.test.mjs','test/r157-supervisor-singleflight.test.mjs','test/r158-epoch-bootstrap.test.mjs','test/r159-legacy-marker-evidence.test.mjs','test/r160-marker-proof.test.mjs','test/r160-package-decision-manifest.test.mjs','test/r160-stable-launcher.test.mjs','test/r160-release-contract.test.mjs','test/r59-tool-surface-compat.test.mjs')
+        if($Stage -eq 'focused'){return}
+    }
+    if($Stage -in @('full','all')){
+        Run-Node -label 'full' -nodeArgs @('--test','--test-concurrency=4','test/*.test.mjs')
+        if($Stage -eq 'full'){return}
+    }
+    if($Stage -in @('manifest','all')){
+        Run-Node -label 'manifest' -nodeArgs @('scripts/release-manifest.mjs','verify')
+        if($Stage -eq 'manifest'){return}
+    }
+    if($Stage -in @('doctor','all')){
+        $previous=$env:DEADBYTE_STATE_ROOT
+        $isolated=Join-Path $env:TEMP ('deadbyte-r160-doctor-'+[guid]::NewGuid().ToString('N'))
+        try{[IO.Directory]::CreateDirectory($isolated)|Out-Null;$env:DEADBYTE_STATE_ROOT=$isolated;Run-Node -label 'isolated_doctor' -nodeArgs @('src/deadbyte-cli.mjs','doctor')}
+        finally{$env:DEADBYTE_STATE_ROOT=$previous;Remove-Item -LiteralPath $isolated -Recurse -Force -ErrorAction SilentlyContinue}
+    }
+    Write-Output 'R160_WINDOWS_CANDIDATE_GATE=PASS_PREPUBLICATION'
+}finally{Pop-Location}

package/scripts/npm-release-r48.mjs

@@ -7,6 +7,8 @@ import {assertR67NpmPublishReady} from './npm-release-readiness-r67.mjs';
 import {assertR71NpmPublishReady} from './npm-release-readiness-r71.mjs';
 import {assertR72NpmPublishReady} from './npm-release-readiness-r72.mjs';
 import {assertR74NpmPublishReady} from './npm-release-readiness-r74.mjs';
+import {assertR163NpmPublishReady} from './npm-release-readiness-r163.mjs';
+import {assertR165NpmPublishReady} from './npm-release-readiness-r165.mjs';
 import { existsSync } from 'node:fs';
 import { resolveStateRoot } from '../src/state-root.mjs';
 import path from 'node:path';
@@ -95,6 +97,14 @@ async function main() {
   if (!isVerifyOnly && version==='0.15.45') assertR71NpmPublishReady(release);
   if (!isVerifyOnly && version==='0.15.46') await assertR72NpmPublishReady(release,{root});
   if (!isVerifyOnly && version==='0.15.47') await assertR74NpmPublishReady(release,{root});
+  if (!isVerifyOnly && version==='0.15.62') {
+    if (!publishOnly) throw new Error('PUBLISH_BLOCKED R163 0.15.62 requires --publish-only; production activation is a separate authority boundary');
+    await assertR163NpmPublishReady(release,{root});
+  }
+  if (!isVerifyOnly && version==='0.15.63') {
+    if (!publishOnly) throw new Error('PUBLISH_BLOCKED R165 0.15.63 requires --publish-only; production activation is a separate authority boundary');
+    await assertR165NpmPublishReady(release,{root});
+  }
   if (release.parent?.release_id !== provenance.parent_release_id ||
       release.parent?.manifest_sha256 !== provenance.parent_manifest_sha256 ||
       release.parent?.generation_manifest_sha256 !== provenance.parent_generation_manifest_sha256) {