deadbyte-mcp 0.15.67 → 0.15.69

package/README.txt

@@ -1,8 +1,15 @@
-DEADBYTE MCP V0.15.67 / R172 TERMINAL ACTIVATION RECOVERY
+DEADBYTE MCP V0.15.69 / R179 FOREGROUND OBSERVER + READABLE LIVE LOGS
 =========================
 
 AUTHENTICATED MACHINE TRUTH + DURABLE AGENT + CODING + AUTONOMOUS PRODUCTION ENGINE
 
+R179 RELEASE STATE
+------------------
+0.15.69 is a release candidate until exact npm publication and registry readback.
+The protected Windows regression and independent owner-authorized Autonomous
+grant must pass before calling this a clean stable release. The npm CLI examples
+below describe the intended version once it has been published.
+
 NPX PRIMARY OPERATOR UX
 ------------------------
 Use the npm CLI entry point instead of the legacy CMD convenience wrapper:
@@ -16,17 +23,17 @@ check `--version` before issuing a stateful command. The compatibility CMD
 fails with an explanation when npm is detected rather than forwarding the
 wrong command to the controller.
 
-  npx -y deadbyte-mcp@0.15.67 mcp
-  npx -y deadbyte-mcp@0.15.67 remote
-  npx -y deadbyte-mcp@0.15.67 remote status
-  npx -y deadbyte-mcp@0.15.67 remote restart
-  npx -y deadbyte-mcp@0.15.67 audit status
-  npx -y deadbyte-mcp@0.15.67 audit verify
+  npx -y deadbyte-mcp@0.15.69 mcp
+  npx -y deadbyte-mcp@0.15.69 remote
+  npx -y deadbyte-mcp@0.15.69 remote status
+  npx -y deadbyte-mcp@0.15.69 remote restart
+  npx -y deadbyte-mcp@0.15.69 audit status
+  npx -y deadbyte-mcp@0.15.69 audit verify
 
 
-R172 TERMINAL ACTIVATION RECOVERY
+R173 EPOCH-REVOKED AUTHORITY PROOF HOTFIX
 ------------------------
-This 0.15.67 CLI keeps npm publication and local production activation separate.
+This 0.15.68 CLI keeps npm publication and local production activation separate.
 When a newer npm CLI finds an older installed runtime, one-shot remote status
 observes the existing stable launcher and prints VERSION SKEW without deploying.
 On a version mismatch, remote arm/disarm/restart and bare foreground remote
@@ -45,7 +52,7 @@ CLAUDE DESKTOP
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.67", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.69", "mcp"]
       }
     }
   }
@@ -57,7 +64,7 @@ Save as .cursor/mcp.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.67", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.69", "mcp"]
       }
     }
   }
@@ -70,7 +77,7 @@ Save as .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.67", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.69", "mcp"]
       }
     }
   }
@@ -80,23 +87,29 @@ Add to the Codex MCP configuration:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.67", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.69", "mcp"]
 
 The `mcp` command is the quiet stdio server entry for local MCP clients; stdout is reserved for MCP.
 The remote CLI invokes the stable active-release PowerShell launcher directly with shell=false.
-Bare `remote` is a foreground observation-only session. It starts/resumes the verified runtime
-without arming Process, Coding, Autonomous, Desktop, or Host; all five must be DISARMED.
-Use `remote --operator` to request Process/Coding/Autonomous explicitly, subject to
-independent R70 owner approval, bound policy and signed authority checks. Desktop observation/UIA grounding is read-only; guarded GUI input
-requires the separate explicit Desktop standing grant (`armdesktop`) and is never implied by Autonomous authority. The single remote console shows device/bridge/cloud/session readiness plus a
-unified live timeline (`RUN`, `OK`, `ERR`, interrupted/recovery, cursors, and sanitized Bridge IN/OUT/ERR
-diagnostics) without dumping raw JSON payloads, tokens, private keys, or full Bridge payload records. Session shutdown
-revokes Desktop/process/coding/autonomous authority, applies fail-safe Host disarm, and parks the Bridge. A detached
-nonce-bound guardian watches the foreground owner and performs the same revoke+park cleanup if the
-owner is hard-killed before `finally` can run. The v2 runtime marker binds owner PID, guardian PID,
-and a random 256-bit session nonce, prevents concurrent foreground sessions, and lets a later start
-recover only a dead, unguarded stale owner. Explicit subcommands such as `remote status` remain
-one-shot controller operations.
+Bare `remote` observes an already verified ONLINE runtime. Run `remote start`
+as an explicit one-shot controller action when local runtime is offline. The foreground
+observer never arms/disarms Process, Coding, Autonomous, Desktop or Host standing
+grants, and it does not restart, upgrade, activate or park the runtime.
+Existing owner standing grants are reported without changes. Ctrl+C disconnects
+the foreground log only; the guardian removes only the observation session marker.
+`remote --operator`, `remote --host`, `remote --desktop` and `remote --full`
+are blocked until distinct, signed session-owned grants are implemented. To arm
+an existing policy use explicit one-shot `remote arm*` commands. Project/successor
+Autonomous grants still require independent R70 owner enrollment; the publication
+of a package version does not itself issue that grant. Desktop guarded input needs
+a separate explicit Desktop standing grant (`armdesktop`).
+
+The default unified live timeline is compact and sanitized, with Windows paths, START,
+PASS, DENIED, UNKNOWN and grouped heartbeat polling. Exact root-mapped paths
+are shown when verified; unresolved roots are labeled, not guessed. Sensitive
+tool arguments, keys, tokens and private file bodies stay redacted. A 256-bit
+nonce and OS process identities guard concurrent foreground sessions and recovery.
+`remote status` remains a read-only one-shot controller command.
 
 R59 DEGRADED RUNTIME + BRIDGE RECONCILIATION
 ---------------------------------------------
@@ -369,7 +382,7 @@ CONTROLLER
 ----------
 Primary operator entry point:
 
-  npx -y deadbyte-mcp@0.15.67 remote
+  npx -y deadbyte-mcp@0.15.69 remote
 
 The legacy CMD entry remains compatibility-only for R33 rollback safety.
 
@@ -430,7 +443,7 @@ MCP CLIENT CONFIGURATION
 ------------------------
 The local stdio entry point is quiet and suitable for MCP hosts:
 
-  npx -y deadbyte-mcp@0.15.67 mcp
+  npx -y deadbyte-mcp@0.15.69 mcp
 
 CLAUDE DESKTOP
 Use the standard local-server entry in claude_desktop_config.json:
@@ -439,7 +452,7 @@ Use the standard local-server entry in claude_desktop_config.json:
     "mcpServers": {
       "deadbyte": {
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.67", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.69", "mcp"]
       }
     }
   }
@@ -452,7 +465,7 @@ Create .cursor/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.67", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.69", "mcp"]
       }
     }
   }
@@ -465,7 +478,7 @@ Create .vscode/mcp.json:
       "deadbyte": {
         "type": "stdio",
         "command": "npx",
-        "args": ["-y", "deadbyte-mcp@0.15.67", "mcp"]
+        "args": ["-y", "deadbyte-mcp@0.15.69", "mcp"]
       }
     }
   }
@@ -475,9 +488,9 @@ Add this to ~/.codex/config.toml:
 
   [mcp_servers.deadbyte]
   command = "npx"
-  args = ["-y", "deadbyte-mcp@0.15.67", "mcp"]
+  args = ["-y", "deadbyte-mcp@0.15.69", "mcp"]
 
-The remote device path remains `npx -y deadbyte-mcp@0.15.67 remote`. Remote public MCP uses the
+The remote device path remains `npx -y deadbyte-mcp@0.15.69 remote`. Remote public MCP uses the
 verified HTTPS named-tunnel URL selected by the active generation; do not commit a private device
 URL or tunnel token into a repository.
 

package/RELEASE.json

@@ -1,31 +1,31 @@
 {
   "schema": "deadbyte.release.v1",
   "name": "deadbyte-mcp",
-  "version": "0.15.67",
-  "train": "R172",
-  "label": "R172 terminal activation recovery release",
+  "version": "0.15.69",
+  "train": "R179",
+  "label": "R179 foreground observer and native crash guardian release candidate",
   "protocol_revision": "2026-07-28",
   "parent": {
-    "version": "0.15.61",
-    "release_id": "v0.15.61-055d1ff0aa99e60b",
-    "manifest_sha256": "055d1ff0aa99e60bbf9e9f136b02ebd4fffb8391712560f7607cff30af94dcdf",
-    "generation_manifest_sha256": "f940e794daac2dda097a66301c4b85c4b29a2df7c669e549503c05a2a55ff6c4",
+    "version": "0.15.68",
+    "release_id": "v0.15.68-ff29dbb2fbb89862",
+    "manifest_sha256": "ff29dbb2fbb898625592afb47835a4a62ef289429f1e0a89a83242398cd98885",
+    "generation_manifest_sha256": "2887d4a8d54ea6fc6b28869072f72491c892dfe28178b3537936dce958147bd2",
     "activation_status": "PRODUCTION_ACTIVE"
   },
   "runtime_predecessor": {
-    "version": "0.15.61",
-    "release_id": "v0.15.61-055d1ff0aa99e60b",
-    "manifest_sha256": "055d1ff0aa99e60bbf9e9f136b02ebd4fffb8391712560f7607cff30af94dcdf",
-    "generation_manifest_sha256": "f940e794daac2dda097a66301c4b85c4b29a2df7c669e549503c05a2a55ff6c4"
+    "version": "0.15.68",
+    "release_id": "v0.15.68-ff29dbb2fbb89862",
+    "manifest_sha256": "ff29dbb2fbb898625592afb47835a4a62ef289429f1e0a89a83242398cd98885",
+    "generation_manifest_sha256": "2887d4a8d54ea6fc6b28869072f72491c892dfe28178b3537936dce958147bd2"
   },
   "source_predecessor": {
-    "version": "0.15.66",
-    "train": "R168",
-    "source_path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.66-r168-activation-reconcile",
+    "version": "0.15.68",
+    "train": "R173",
+    "source_path": "https://registry.npmjs.org/deadbyte-mcp/-/deadbyte-mcp-0.15.68.tgz",
     "release_status": "PUBLISHED_REGISTRY_VERIFIED",
-    "manifest_status": "VERIFIED_FINAL_BYTES",
-    "manifest_sha256": "962e227dace247d59aa860211388fbde461c5f9c8a7e8a878e34a14a27d355f8",
-    "tarball_sha256": "31b194a4fbff7dbdb9f4f275b4ea49c5115f7b0bb2241c0c72d72ef690311a5d"
+    "manifest_status": "ACTIVE_PRODUCTION_MANIFEST_VERIFIED",
+    "manifest_sha256": "ff29dbb2fbb898625592afb47835a4a62ef289429f1e0a89a83242398cd98885",
+    "tarball_sha256": "1a7f1fe05a06178b8d772a140be6e0470790b743cef690c3f8f8165cc61075bf"
   },
   "consolidation": {
     "frontend_status_vocabulary": true,
@@ -534,5 +534,32 @@
     "npm_publish": "NOT_RUN",
     "production_activation": "NOT_RUN",
     "stable_final_claim": false
+  },
+  "r173": {
+    "scope": "EPOCH_REVOKED_AUTHORITY_PROOF_AND_FINAL_REMOTE_RECOVERY",
+    "source_predecessor_version": "0.15.67",
+    "source_predecessor_train": "R172",
+    "source_predecessor_manifest_sha256": "4fd7bfc76b1de6401c142b607cc84e847434b28c888bc99ceb09c9e8e5adc8f8",
+    "source_predecessor_tarball_sha256": "0fe761f035f38730a4717448da4217f55464c38cd1616126b5850ff44411cd6d",
+    "runtime_predecessor_release_id": "v0.15.61-055d1ff0aa99e60b",
+    "epoch_revoked_authority_proof": "GREEN_FOCUSED",
+    "public_tool_delta": 0,
+    "authority_scope_delta": 0,
+    "npm_publish": "NOT_RUN",
+    "production_activation": "NOT_RUN",
+    "stable_final_claim": false
+  },
+  "r179": {
+    "scope": "FOREGROUND_OBSERVATION_ONLY_CRASH_GUARDIAN_AND_READABLE_WINDOWS_LOGS",
+    "source_predecessor_version": "0.15.68",
+    "source_predecessor_manifest_sha256": "ff29dbb2fbb898625592afb47835a4a62ef289429f1e0a89a83242398cd98885",
+    "source_predecessor_tarball_sha256": "1a7f1fe05a06178b8d772a140be6e0470790b743cef690c3f8f8165cc61075bf",
+    "owner_approved_autonomous_grant": "NOT_ISSUED",
+    "protected_full_regression": "NOT_VERIFIED",
+    "windows_gate": "BLOCKED_R89_UNTRUSTED_INSTALLATION",
+    "foreground_live_integration": "NOT_VERIFIED",
+    "npm_publish": "NOT_RUN",
+    "production_activation": "NOT_RUN",
+    "stable_final_claim": false
   }
 }

package/SBOM.cdx.json

@@ -1,13 +1,13 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:cdx:deadbyte-mcp:r172:0.15.67",
+  "serialNumber": "urn:cdx:deadbyte-mcp:r179:0.15.69",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
       "name": "deadbyte-mcp",
-      "version": "0.15.67"
+      "version": "0.15.69"
     }
   },
   "components": [

package/TEST-MATRIX.json

@@ -1,7 +1,7 @@
 {
   "schema": "deadbyte.test-matrix.v1",
-  "version": "0.15.67",
-  "train": "R172",
+  "version": "0.15.69",
+  "train": "R179",
   "primary_platform": "win32-x64",
   "reference": {
     "package": "@wonderwhy-er/desktop-commander",
@@ -124,6 +124,21 @@
       "id": "r168-claim-preservation",
       "command": "Verify read-only R168 signed epoch audit and old R65 claim",
       "expected": "Unresolved claim is preserved; no test key used as owner approval; production pointer and Coding scope unchanged"
+    },
+    {
+      "id": "r179-owner-authorized-autonomous",
+      "command": "Issue independently signed owner consent from protected broker, verify exact policy and epoch, then arm Autonomous",
+      "expected": "Owner proof bound to active release, scoped project, policy hashes, expiry and independently protected signing key"
+    },
+    {
+      "id": "r179-protected-full",
+      "command": "node --test --test-concurrency=4 test/*.test.mjs in exact protected 0.15.69 installation",
+      "expected": "Zero failures; all skips reviewed; R89 trusted installation and native tests pass"
+    },
+    {
+      "id": "r179-live-log-and-foreground",
+      "command": "Run Ctrl+C, restart, crash and concurrent sessions with pre-existing standing grants and confirm no implicit revocation",
+      "expected": "Owner standing grants unchanged; observation-only marker CAS; signed audit remains verifiable"
     }
   ],
   "observed_pre_release_evidence": {
@@ -645,5 +660,13 @@
     "new_authority_scopes": 0,
     "publication": "NOT_RUN",
     "production_activation": "NOT_RUN"
+  },
+  "r179": {
+    "owner_consent": "NOT_VERIFIED",
+    "protected_full": "NOT_VERIFIED",
+    "foreground_live": "NOT_VERIFIED",
+    "package_verify_only": "PASS_2552_MANIFEST_ENTRIES",
+    "registry_publish": "NOT_RUN",
+    "production_activation": "NOT_RUN"
   }
 }

package/bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-chatgpt-bridge",
-  "version": "0.15.67",
+  "version": "0.15.69",
   "private": true,
   "type": "module",
   "engines": {

package/controller/deadbyte-controller.ps1

@@ -1015,6 +1015,10 @@ function Invoke-AuthorityEpochCommand($Cfg, [string]$Plane, [string]$Action, [st
             'src\foreground-marker-cas-win32.mjs',
             'src\foreground-process-identity.mjs',
             'src\windows-powershell-environment.mjs',
+            'scripts\r186-owner-grant-cli.mjs',
+            'src\r186-owner-grant-broker.mjs',
+            'src\r186-owner-consent-preflight.mjs',
+            'src\r70-owner-approval.mjs',
             'bin\deadbyte-epoch-lock-r85.node',
             'docs\R85-EPOCH-LOCK-BINARY.json',
             'native\deadbyte-epoch-lock-r85.cpp'
@@ -1391,6 +1395,57 @@ function Get-AutonomousLeaseStatus($Cfg) {
     return [pscustomobject]@{ Configured=$true; Armed=$true; Reason='standing-grant'; EpochSeq=$epoch.Seq; EpochSha256=$epoch.EventSha256 }
 }
 
+function Invoke-R186ProtectedAutonomousGrant($Cfg, $Meta) {
+    if (-not $Cfg.ContainsKey('AuthorityEpochRoot') -or [string]::IsNullOrWhiteSpace([string]$Cfg.AuthorityEpochRoot)) {
+        Fail 'R70_OWNER_ENROLLMENT_REQUIRED: protected authority root unavailable'
+    }
+    $protectedRoot = [System.IO.Path]::GetFullPath([string]$Cfg.AuthorityEpochRoot)
+    $releaseRoot = [System.IO.Path]::GetFullPath([string]$Cfg.CoreRoot)
+    $relativeFiles = @(
+        'scripts\r186-owner-grant-cli.mjs',
+        'src\r186-owner-grant-broker.mjs',
+        'src\r186-owner-consent-preflight.mjs',
+        'src\r70-owner-approval.mjs',
+        'src\authority-continuity-r65.mjs',
+        'src\privileged-install-trust-r89.mjs',
+        'src\epoch-lock-r85.mjs',
+        'src\canonical-json.mjs',
+        'src\text-policy.mjs',
+        'src\foreground-marker-cas-win32.mjs',
+        'src\foreground-process-identity.mjs',
+        'src\windows-powershell-environment.mjs',
+        'src\release-slot.mjs',
+        'bin\deadbyte-epoch-lock-r85.node',
+        'docs\R85-EPOCH-LOCK-BINARY.json',
+        'native\deadbyte-epoch-lock-r85.cpp'
+    )
+    $releaseManifest = Join-Path $releaseRoot 'MANIFEST.SHA256'
+    $protectedManifest = Join-Path $protectedRoot 'MANIFEST.SHA256'
+    if (-not (Test-Path -LiteralPath $releaseManifest -PathType Leaf) -or
+        -not (Test-Path -LiteralPath $protectedManifest -PathType Leaf) -or
+        (Get-ExecutableHash $releaseManifest) -cne (Get-ExecutableHash $protectedManifest)) {
+        Fail 'R186 protected owner broker release manifest mismatch'
+    }
+    foreach ($relative in $relativeFiles) {
+        $source = Join-Path $releaseRoot $relative
+        $protected = Join-Path $protectedRoot $relative
+        if (-not (Test-Path -LiteralPath $source -PathType Leaf) -or
+            -not (Test-Path -LiteralPath $protected -PathType Leaf) -or
+            (Get-ExecutableHash $source) -cne (Get-ExecutableHash $protected)) {
+            Fail "R186 protected owner broker source mismatch: $relative"
+        }
+    }
+    Assert-ProtectedEpochSourceAcl -Files @($relativeFiles | ForEach-Object { Join-Path $protectedRoot $_ })
+    $cli = Join-Path $protectedRoot 'scripts\r186-owner-grant-cli.mjs'
+    $node = [string]$Cfg.Bridge.FilePath
+    if ([string]::IsNullOrWhiteSpace($node) -or -not (Test-Path -LiteralPath $node -PathType Leaf)) { Fail 'R186 protected owner broker Node unavailable' }
+    $output = @(& $node $cli $RuntimeDir ([string]$Cfg.CodingPolicyFile) ([string]$Cfg.AutonomousPolicyFile))
+    $exit = $LASTEXITCODE
+    if ($exit -ne 0) { Fail "R70_OWNER_ENROLLMENT_REQUIRED: protected owner grant broker rejected (exit=$exit)" }
+    try { return (($output -join [Environment]::NewLine) | ConvertFrom-Json) }
+    catch { Fail 'R186 protected owner grant broker returned invalid JSON' }
+}
+
 function Arm-Autonomous($Cfg) {
     $coding = Get-CodingLeaseStatus $Cfg
     if (-not $coding.Armed) { Fail 'autonomous plane requires an active coding lease; run armcoding first' }
@@ -1403,7 +1458,16 @@ function Arm-Autonomous($Cfg) {
     $legacyOwnerPolicySha256 = '6274492644c303b38117541cc22a59e88e6ff5fdef7051a5d57ad336f45765f5'
     $selectedRoots = @($meta.RootIds)
     if ([string]$meta.Sha256 -cne $legacyOwnerPolicySha256 -or $selectedRoots.Count -ne 1 -or [string]$selectedRoots[0] -cne 'core') {
-        Fail 'R70_OWNER_ENROLLMENT_REQUIRED: project/successor Autonomous grant needs independent owner authorization before arm'
+        $ownerApproval = Join-Path $RuntimeDir 'owner-consent\autonomous-approval.json'
+        if (-not (Test-Path -LiteralPath $ownerApproval -PathType Leaf)) {
+            Fail 'R70_OWNER_ENROLLMENT_REQUIRED: bounded owner approval is absent'
+        }
+        $issued = Invoke-R186ProtectedAutonomousGrant $Cfg $meta
+        if ($null -eq $issued -or [string]$issued.status -cne 'GRANTED' -or $issued.authority_granted -ne $true) {
+            Fail 'R70_OWNER_ENROLLMENT_REQUIRED: protected owner grant broker did not issue authority'
+        }
+        Write-Host 'AUTONOMOUS PLANE ENABLED BY OWNER-SIGNED BOUNDED GRANT'
+        return
     }
     Ensure-Directory $RuntimeDir
     $nonceBytes = New-Object byte[] 32

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.67-r172-final-remote-recovery\\controller\\runtime\\process-grant.json",
-  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.67-r172-final-remote-recovery\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.69-r186-owner-consent\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.69-r186-owner-consent\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.67-r172-final-remote-recovery\\bin\\deadbyte-process-host.exe",
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.69-r186-owner-consent\\bin\\deadbyte-process-host.exe",
     "sha256": "daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4"
   },
   "roots": {
     "core": {
-      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.67-r172-final-remote-recovery",
+      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.69-r186-owner-consent",
       "deny_paths": [
         "node_modules",
         "controller/runtime",

package/docs/R184-package-lock.json

@@ -0,0 +1,97 @@
+{
+  "name": "deadbyte-mcp",
+  "version": "0.15.69",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "deadbyte-mcp",
+      "version": "0.15.69",
+      "bundleDependencies": [
+        "@modelcontextprotocol/server",
+        "@modelcontextprotocol/client",
+        "typescript",
+        "zod"
+      ],
+      "dependencies": {
+        "@modelcontextprotocol/client": "2.3.1",
+        "@modelcontextprotocol/server": "2.3.1",
+        "typescript": "5.9.3",
+        "zod": "4.4.3"
+      },
+      "bin": {
+        "deadbyte-mcp": "src/deadbyte-cli.mjs"
+      },
+      "engines": {
+        "node": ">=22"
+      }
+    },
+    "node_modules/@modelcontextprotocol/client": {
+      "version": "2.3.1",
+      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/client/-/client-2.3.1.tgz",
+      "integrity": "sha512-mIGZXpHsjnZ6lD+gD/WCMpR5k8yVQQ8nNFH1N0Srf7AvnwTUMYD6pvTY8ng2+He5FfV7YMZLmrjL7cLa/cc3dQ==",
+      "inBundle": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@modelcontextprotocol/core": "2.3.1",
+        "cross-spawn": "^7.0.5",
+        "eventsource": "^3.0.2",
+        "eventsource-parser": "^3.0.8",
+        "jose": "^6.1.3",
+        "pkce-challenge": "^5.0.0",
+        "zod": "^4.2.0"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/@modelcontextprotocol/core": {
+      "version": "2.3.1",
+      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/core/-/core-2.3.1.tgz",
+      "integrity": "sha512-laVmIhPGpWi7rG9q+0UigblRN0Hws/Yjlb6qLFtVqryXVLkc4h+yN8z731POD2LnAGQlFe7/tXhUm7Bi0YB91g==",
+      "inBundle": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "zod": "^4.2.0"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/@modelcontextprotocol/server": {
+      "version": "2.3.1",
+      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/server/-/server-2.3.1.tgz",
+      "integrity": "sha512-e59MfWuSssj6DoQ96JCTqdW1AXT5/XtnTl0WWd6MU1Ka434fFUGGosCLJbGNySDhHGvxQWoRWK137FXYFkYNWw==",
+      "inBundle": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@modelcontextprotocol/core": "2.3.1",
+        "zod": "^4.2.0"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/cross-spawn": {
+      "version": "7.0.6",
+      "inBundle": true,
+      "license": "MIT",
+      "dependencies": {"path-key":"^3.1.0","shebang-command":"^2.0.0","which":"^2.0.1"},
+      "engines": {"node":">= 8"}
+    },
+    "node_modules/eventsource": {
+      "version":"3.0.7","inBundle":true,"license":"MIT",
+      "dependencies":{"eventsource-parser":"^3.0.1"},"engines":{"node":">=18.0.0"}
+    },
+    "node_modules/eventsource-parser": {"version":"3.1.1","inBundle":true,"license":"MIT","engines":{"node":">=18.0.0"}},
+    "node_modules/isexe": {"version":"2.0.0","inBundle":true,"license":"ISC"},
+    "node_modules/jose": {"version":"6.2.10","inBundle":true,"license":"MIT","funding":{"url":"https://github.com/sponsors/panva"}},
+    "node_modules/path-key": {"version":"3.1.1","inBundle":true,"license":"MIT","engines":{"node":">=8"}},
+    "node_modules/pkce-challenge": {"version":"5.0.1","inBundle":true,"license":"MIT","engines":{"node":">=16.20.0"}},
+    "node_modules/shebang-command": {"version":"2.0.0","inBundle":true,"license":"MIT","dependencies":{"shebang-regex":"^3.0.0"},"engines":{"node":">=8"}},
+    "node_modules/shebang-regex": {"version":"3.0.0","inBundle":true,"license":"MIT","engines":{"node":">=8"}},
+    "node_modules/typescript": {"version":"5.9.3","inBundle":true,"license":"Apache-2.0","bin":{"tsc":"bin/tsc","tsserver":"bin/tsserver"},"engines":{"node":">=14.17"}},
+    "node_modules/which": {"version":"2.0.2","inBundle":true,"license":"ISC","dependencies":{"isexe":"^2.0.0"},"bin":{"node-which":"bin/node-which"},"engines":{"node":">= 8"}},
+    "node_modules/zod": {"version":"4.4.3","inBundle":true,"license":"MIT","funding":{"url":"https://github.com/sponsors/colinhacks"}}
+  }
+}

package/docs/R186-OWNER-CONSENT-HANDOFF.txt

@@ -0,0 +1,87 @@
+DEADBYTE MCP / R186 OWNER CONSENT
+2026-10-28
+
+CURRENT STATE
+
+production remains 0.15.68
+R185 exact tarball 0.15.69 is frozen and protected regression was green
+R186 is an isolated development successor and is not published or activated
+
+WHAT R186 ADDS
+
+src/r186-owner-consent-preflight.mjs
+  verifies owner Ed25519 public key against an exact pinned fingerprint
+  verifies the R70 project/policy/artifact/time-bound signature
+  returns verified_readonly and authority_granted=false
+
+scripts/r186-owner-consent-check.mjs
+  loads public owner trust only from these fixed Windows locations
+
+  C:\Program Files\DEADBYTE-OwnerTrust\owner-anchor.json
+  C:\Program Files\DEADBYTE-OwnerTrust\owner-public.pem
+
+  requires the native R89 protected ACL check for the owner files
+  requires protected exact installation for executable verifier source
+  verifies the entire installed release manifest before trusting a proof
+  derives policy SHA256 from the actual policy files
+  derives reviewed_artifact_sha256 from the exact installed MANIFEST.SHA256 bytes
+  refuses to enroll a key or grant any authority
+
+OWNER ACTION REQUIRED OUTSIDE THIS AGENT
+
+the owner must generate and retain the Ed25519 private key on an independently
+controlled device that DEADBYTE MCP and ChatGPT cannot read or execute on
+do not send private key bytes or passwords to ChatGPT or DEADBYTE MCP
+
+the owner must inspect and approve the public key fingerprint before a trusted
+administrator-only installation at the two fixed Program Files paths
+owner-anchor.json must have exactly these fields:
+
+  schema = deadbyte.r186-owner-anchor.v1
+  owner_key_id = lowercase SHA256 of Ed25519 SPKI DER public key
+
+owner-public.pem contains only that public key
+both files and their ancestor paths must pass Windows R89 ACL trust
+
+AFTER A PROTECTED R186 RELEASE EXISTS
+
+prepare an R70 owner subject for the exact installed release manifest
+bind root_id, real project_root, the exact coding and autonomous policy SHA256
+bind issued_at_utc and expires_at_utc to at most 1 hour
+
+the owner signs that exact subject using the independent private key
+the signed R70 approval is submitted as data, not as an owner key
+R186 preflight may then report verified_readonly
+
+STILL REQUIRED BEFORE ARMING OR PUBLISH
+
+a separate protected one-time acceptance broker that consumes the owner approval
+owner proof bound to native signed epoch and no-clobber race/crash recovery
+agent-writable consent receipts must never act as grant issuance authority
+controller Arm-Autonomous must invoke that protected broker on the current
+verified runtime with no fallback to a writable source or caller-supplied key
+the owner must explicitly approve this new authority issuance
+run full protected regression again on exact new tarball
+run real foreground live integration without revoking owner standing grants
+publish only after independent release gate passes
+activation is a separate user-approved step
+
+NO PUBLISH AND NO GRANT HAVE OCCURRED IN R186
+
+LIVE OWNER TRUST INVENTORY / 2026-10-28
+
+old public key: C:\Users\DEADBYTE\.deadbyte-mcp\trust\r70-owner-public.pem
+format: Ed25519 public only
+SPKI DER SHA256: b07c6312673a190af6ac40fe86830dfe8c60e2747405f5151b9ae9bb9a71ad10
+owner: local DEADBYTE account, writable to that account
+R89 result: EPOCH_NATIVE_SLOT_UNTRUSTED
+new protected C:\Program Files\DEADBYTE-OwnerTrust enrollment: NOT PRESENT
+
+this fingerprint is an observation, not independent proof of owner enrollment
+before any migration, the owner must compare it out of band with the key held
+on their independent device and approve exact scope and expiry
+
+R186 FOCUSED RESULT
+29 pass / 0 fail / 0 skip for R70, R174 and R186
+independent trust enrollment: NOT RUN
+one-time protected grant issuance: NOT IMPLEMENTED

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.67",
+  "version": "0.15.69",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
@@ -98,7 +98,8 @@
     "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r168.ps1 -Stage all",
     "r168:focused:test": "node test/r168-combined-targeted-runner.mjs",
     "r168:release:verify": "node scripts/npm-release-r48.mjs --verify-only",
-    "r172:focused:test": "node --test --test-concurrency=1 test/r172-activation-recovery.test.mjs test/r172-release-contract.test.mjs test/r169-delegate-active.test.mjs test/r169-delegate-cli-integration.test.mjs test/r65-activation-lock-recovery.test.mjs test/r65-activation-orchestration.test.mjs"
+    "r172:focused:test": "node --test --test-concurrency=1 test/r172-activation-recovery.test.mjs test/r172-release-contract.test.mjs test/r169-delegate-active.test.mjs test/r169-delegate-cli-integration.test.mjs test/r65-activation-lock-recovery.test.mjs test/r65-activation-orchestration.test.mjs",
+    "r173:focused:test": "node --test --test-concurrency=1 test/r75-authority-evidence.test.mjs test/r172-activation-recovery.test.mjs test/r173-release-contract.test.mjs test/r65-activation-preflight.test.mjs test/r65-activation-orchestration.test.mjs"
   },
   "bundleDependencies": [
     "@modelcontextprotocol/server",