deadbyte-mcp 0.15.67 → 0.15.69

package/test/r58-concurrent-recovery.test.mjs

@@ -5,6 +5,9 @@ import path from 'node:path';
 import {fileURLToPath} from 'node:url';
 import {spawn} from 'node:child_process';
 import {setTimeout as delay} from 'node:timers/promises';
+import {installExactActivePointer} from './helpers/r175-active-pointer.mjs';
+
+const packageRoot=path.resolve(fileURLToPath(new URL('..',import.meta.url)));
 
 test('R75 simultaneous owner-unverified recovery attempts both retain authority and marker', {timeout:30000},async()=>{
  const base='D:/Projects/deadbyte-mcp/testing/0.15.35/fixtures';await mkdir(base,{recursive:true});
@@ -41,6 +44,7 @@ switch($Command){
 }
 exit 0
 `);
+ await installExactActivePointer({stateRoot:root,packageRoot,launcherPath:path.join(root,'bin','DEADBYTE-MCP.ps1')});
  const children=[],outputs=[];
  try{
   for(let i=0;i<2;i++){
@@ -52,7 +56,7 @@ exit 0
   const commands=await readFile(trace,'utf8').catch(error=>error.code==='ENOENT'?'':Promise.reject(error));
   await writeFile(path.join(root,'observation.json'),JSON.stringify({commands,exits,outputs:outputs.map(o=>({stdout:o.stdout,stderr:o.stderr})),simulation:'concurrent owner-unverified stale marker'}),{flag:'wx'});
   assert.ok(exits.every(code=>code!==0));
-  for(const output of outputs)assert.match(output.stderr,/ownership(?: identity)? unverified.*marker retained|already claimed \(startup\/recovery lock\)/i);
+  for(const output of outputs)assert.match(output.stderr,/R179_LEGACY_FOREGROUND_RECOVERY_REQUIRES_EXPLICIT_OWNER_COMMAND|already claimed \(startup\/recovery lock\)/i);
   assert.equal(commands,'','neither attempt may touch authority');
   assert.equal(JSON.parse(await readFile(markerPath,'utf8')).pid,2147483000);
  }finally{

package/test/r58-stale-owner.test.mjs

@@ -5,12 +5,16 @@ import path from 'node:path';
 import {fileURLToPath} from 'node:url';
 import {spawn} from 'node:child_process';
 import {queryForegroundIdentity} from '../src/foreground-process-identity.mjs';
+import {installExactActivePointer} from './helpers/r175-active-pointer.mjs';
+
+const packageRoot=path.resolve(fileURLToPath(new URL('..',import.meta.url)));
 
 test('R58 inconsistent owner PID binding cannot trigger stale-session authority cleanup', {timeout:20000}, async()=>{
  const base='D:/Projects/deadbyte-mcp/testing/0.15.35/fixtures';await mkdir(base,{recursive:true});
  const root=await mkdtemp(path.join(base,'owner-binding-'));await mkdir(path.join(root,'runtime'));await mkdir(path.join(root,'bin'));
  const trace=path.join(root,'trace.txt');
  await writeFile(path.join(root,'bin','DEADBYTE-MCP.ps1'),`param([string]$Command)\n[IO.File]::AppendAllText('${trace.replaceAll("'","''")}',$Command+[Environment]::NewLine)\nexit 0\n`);
+ await installExactActivePointer({stateRoot:root,packageRoot,launcherPath:path.join(root,'bin','DEADBYTE-MCP.ps1')});
  const identity=queryForegroundIdentity(process.pid);
  const marker={schema:'deadbyte.remote-session.v2',owner_pid:process.pid,guardian_pid:0,session_nonce:'c'.repeat(64),owner_identity:{...identity,pid:process.pid+1}};
  const markerPath=path.join(root,'runtime','remote-session.json');const bytes=JSON.stringify(marker);await writeFile(markerPath,bytes);
@@ -18,7 +22,7 @@ test('R58 inconsistent owner PID binding cannot trigger stale-session authority
  let stderr='';child.stderr.on('data',b=>{stderr+=b;});child.stdout.resume();
  const code=await new Promise(resolve=>child.once('close',resolve));
  await writeFile(path.join(root,'observation.json'),JSON.stringify({code,stderr}),{flag:'wx'});
- assert.notEqual(code,0);assert.match(stderr,/ownership identity|binding/i);
+ assert.notEqual(code,0);assert.match(stderr,/R179_LEGACY_FOREGROUND_RECOVERY_REQUIRES_EXPLICIT_OWNER_COMMAND/i);
  assert.equal(await readFile(trace,'utf8').catch(e=>e.code==='ENOENT'?'':Promise.reject(e)),'','inconsistent marker must cause no controller actions');
  assert.equal(await readFile(markerPath,'utf8'),bytes,'retain ambiguous ownership evidence');
 });
@@ -29,6 +33,7 @@ test('R58 live unrelated PID is not accepted as a remote foreground owner', {tim
  await mkdir(path.join(root,'runtime'));await mkdir(path.join(root,'bin'));
  const trace=path.join(root,'trace.txt');
  await writeFile(path.join(root,'bin','DEADBYTE-MCP.ps1'),`param([string]$Command)\n[IO.File]::AppendAllText('${trace.replaceAll("'","''")}',$Command+[Environment]::NewLine)\nexit 0\n`);
+ await installExactActivePointer({stateRoot:root,packageRoot,launcherPath:path.join(root,'bin','DEADBYTE-MCP.ps1')});
  // The test runner is alive but neither a remote CLI nor a guardian. This
  // represents a stale numeric PID now occupied by an unrelated process.
  const marker={schema:'deadbyte.remote-session.v2',owner_pid:process.pid,guardian_pid:process.pid,session_nonce:'a'.repeat(64),started_at_utc:'2000-01-01T00:00:00.000Z'};
@@ -41,7 +46,7 @@ test('R58 live unrelated PID is not accepted as a remote foreground owner', {tim
  // Fail-closed ambiguity is acceptable; do not kill the unrelated process or
  // mutate authority based on unverified ownership. Automatic convergence still
  // requires separately observed exact owner/guardian identity evidence.
- assert.match(stderr,/identity|ownership|ambiguous|unverified/i);
+ assert.match(stderr,/R179_LEGACY_FOREGROUND_RECOVERY_REQUIRES_EXPLICIT_OWNER_COMMAND/i);
  assert.deepEqual(JSON.parse(await readFile(path.join(root,'runtime','remote-session.json'),'utf8')),marker);
  assert.notEqual(code,0);
 });
@@ -52,6 +57,7 @@ test('R75 bound stale birth identity retains marker without touching a reused PI
  await mkdir(path.join(root,'runtime'));await mkdir(path.join(root,'bin'));
  const trace=path.join(root,'trace.txt');
  await writeFile(path.join(root,'bin','DEADBYTE-MCP.ps1'),`param([string]$Command,[switch]$Json)\n[IO.File]::AppendAllText('${trace.replaceAll("'","''")}',$Command+[Environment]::NewLine)\nif ($Command -eq 'status' -and $Json) { $off=@{configured=$true;armed=$false;reason='disarmed'}; @{schema='deadbyte.controller-observation.v1';state='OFFLINE';authority=@{process=$off;coding=$off;autonomous=$off;desktop=$off;host=$off}} | ConvertTo-Json -Depth 5 -Compress }\nexit 0\n`);
+ await installExactActivePointer({stateRoot:root,packageRoot,launcherPath:path.join(root,'bin','DEADBYTE-MCP.ps1')});
  const current=queryForegroundIdentity(process.pid);
  const stale={...current,creation_utc:'2000-01-01T00:00:00.000Z'};
  const marker={schema:'deadbyte.remote-session.v2',owner_pid:process.pid,guardian_pid:process.pid,session_nonce:'b'.repeat(64),owner_identity:stale,guardian_identity:stale};
@@ -62,7 +68,7 @@ test('R75 bound stale birth identity retains marker without touching a reused PI
  const code=await new Promise(resolve=>child.once('close',resolve));
  await writeFile(path.join(root,'observation.json'),JSON.stringify({code,stdout,stderr,simulation:'birth identity drift at a live unrelated numeric PID'}),{flag:'wx'});
  assert.notEqual(code,0);
- assert.match(stderr,/owner identity mismatch; marker retained/i);
+ assert.match(stderr,/R179_LEGACY_FOREGROUND_RECOVERY_REQUIRES_EXPLICIT_OWNER_COMMAND/i);
  assert.equal(await readFile(trace,'utf8').catch(error=>error.code==='ENOENT'?'':Promise.reject(error)),'','identity drift must cause no authority commands');
  assert.deepEqual(JSON.parse(await readFile(markerPath,'utf8')),marker);
  assert.equal(foregroundAlive(),true,'unrelated live process must not be killed');

package/test/r59-tool-surface-compat.test.mjs

@@ -83,7 +83,7 @@ test('R72 compact baseline permits only R64 read offset and authorized coding-on
   assert.deepEqual(diff.added,[]);
   assert.deepEqual(diff.removed,[]);
   const packageVersion=JSON.parse(await readFile(path.join(repoRoot,'package.json'),'utf8')).version;
-  if(['0.15.41','0.15.42','0.15.43','0.15.44','0.15.45','0.15.46','0.15.47','0.15.48','0.15.49','0.15.50','0.15.51','0.15.52','0.15.53','0.15.54','0.15.55','0.15.56','0.15.57','0.15.58','0.15.59','0.15.60','0.15.61','0.15.62','0.15.63','0.15.64','0.15.65','0.15.66','0.15.67'].includes(packageVersion)){
+  if(['0.15.41','0.15.42','0.15.43','0.15.44','0.15.45','0.15.46','0.15.47','0.15.48','0.15.49','0.15.50','0.15.51','0.15.52','0.15.53','0.15.54','0.15.55','0.15.56','0.15.57','0.15.58','0.15.59','0.15.60','0.15.61','0.15.62','0.15.63','0.15.64','0.15.65','0.15.66','0.15.67','0.15.68','0.15.69'].includes(packageVersion)){
     assert.deepEqual([...diff.schema_changed].sort(),['machine_fs','native_diff_preview']);
     assert.equal(diff.unchanged.length,41);
     const prior=baseline.tools.find(tool=>tool.name==='machine_fs');

package/test/r75-authority-evidence.test.mjs

@@ -49,6 +49,38 @@ test('a present grant with controller armed=false is unverified, not clean',asyn
   }finally{await f.cleanup();}
 });
 
+test('a signed transaction revoke proves epoch-revoked disarmed while captured grant bytes remain',async()=>{
+  const stateRoot=await mkdtemp(path.join(os.tmpdir(),'deadbyte-r173-epoch-proof-'));
+  try{
+    const runtime=path.join(stateRoot,'runtime'),policies=path.join(stateRoot,'policies');
+    await mkdir(runtime);await mkdir(policies);
+    const policyPaths={},policySha256={},authority={};
+    let codingGrant=null,codingPolicyBytes=null;
+    for(const plane of planes){
+      const grant=path.join(runtime,`${plane}-grant.json`),policyPath=path.join(policies,`${plane}.json`);
+      const bytes=Buffer.from(JSON.stringify({schema:`deadbyte.${plane}-policy.v${plane==='host'?2:1}`,enabled:true,
+        [grantField[plane]]:grant,...(plane==='coding'?{roots:{project:{path:path.join(stateRoot,'project')}}}:{})}));
+      await writeFile(policyPath,bytes);policyPaths[plane]=policyPath;policySha256[plane]=sha(bytes);
+      authority[plane]={configured:true,armed:false,reason:plane==='coding'?'epoch-revoked':'disarmed'};
+      if(plane==='coding'){codingGrant=grant;codingPolicyBytes=bytes;}
+    }
+    const nonce='7'.repeat(64),grantBytes=Buffer.from(JSON.stringify({schema:'deadbyte.coding-grant.v2',
+      policy_sha256:sha(codingPolicyBytes),instance_nonce:nonce,root_ids:['project'],granted_at_utc:new Date().toISOString()}));
+    await writeFile(codingGrant,grantBytes);
+    const grantSha=sha(grantBytes),eventSha='8'.repeat(64);
+    const proof=await observeAuthorityEvidence({stateRoot,policyPaths,policySha256,authority,
+      epochStoreFactory:()=>({
+        auditHistory:async()=>({status:'PASS',verified_events:2}),
+        readHead:async()=>({action:'transaction_revoke',seq:2,event_sha256:eventSha,policy_sha256:sha(codingPolicyBytes),
+          grant_sha256:grantSha,grant_instance_nonce:nonce,update_id:'r65-'+'8'.repeat(32)}),
+        verifyGrant:async()=>({trusted:false,reason:'epoch-revoked',event_sha256:eventSha})
+      })});
+    assert.equal(proof.coding.state,'VERIFIED_DISARMED');
+    assert.equal(proof.coding.grant_absent,false);
+    assert.equal(proof.coding.transaction_revoked,true);
+  }finally{await rm(stateRoot,{recursive:true,force:true});}
+});
+
 test('malformed policy cannot provide disarmed proof',async()=>{
   const f=await fixture();
   try{

package/test/remote-live-log-r37.test.mjs

@@ -73,8 +73,8 @@ test('R40 CLI exposes explicit verbose mode while keeping default live mode comp
   const src=await readFile(new URL('../src/deadbyte-cli.mjs',import.meta.url),'utf8');
   assert.match(src,/readLiveRootPaths\(ctx\.root\)/);
   assert.match(src,/createLiveTimelineTracker\(\{verbose,displayMode,rootPaths,trace,\.\.\.defaultForegroundTimelineOptions\(\{verbose\}\)\}\)/);
-  assert.deepEqual(live.defaultForegroundTimelineOptions({verbose:false}),{commanderStyle:true,foldHeartbeats:false});
-  assert.deepEqual(live.defaultForegroundTimelineOptions({verbose:true}),{commanderStyle:false,foldHeartbeats:false});
+  assert.deepEqual(live.defaultForegroundTimelineOptions({verbose:false}),{commanderStyle:false,foldHeartbeats:true,prettyStyle:true});
+  assert.deepEqual(live.defaultForegroundTimelineOptions({verbose:true}),{commanderStyle:false,foldHeartbeats:false,prettyStyle:false});
   assert.match(src,/createLiveTimelineFilter\(filterExpression\)/);
   assert.match(src,/createLiveTimelineWriter\(\{stream:process\.stdout,displayMode,rewrite:false\}\)/);
   assert.match(src,/arg==='--verbose'\|\|arg==='-v'/);

package/test/remote-live-log-recovery-r36.test.mjs

@@ -9,7 +9,7 @@ test('R36 lifecycle formatter exposes device/connect/ready/cleanup states with b
   assert.equal(formatRemoteLifecycle('session_new'),'[SESSION] New foreground session');
   assert.equal(formatRemoteLifecycle('session_restored'),'♻️ [SESSION] Previous result stream replayed');
   assert.equal(formatRemoteLifecycle('ready'),'✅ [READY] DEADBYTE MCP online');
-  assert.equal(formatRemoteLifecycle('cleanup'),'🔐 [AUTH] Revoking session authority...');
+  assert.equal(formatRemoteLifecycle('cleanup'),'[SESSION] Closing observation session...');
   assert.throws(()=>formatRemoteLifecycle('invented'),/unknown remote lifecycle/i);
 });