deadbyte-mcp 0.15.71 → 0.15.74

package/SBOM.cdx.json

@@ -1,13 +1,13 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:cdx:deadbyte-mcp:r191:0.15.71",
+  "serialNumber": "urn:cdx:deadbyte-mcp:r194:0.15.74",
   "version": 1,
   "metadata": {
     "component": {
       "type": "application",
       "name": "deadbyte-mcp",
-      "version": "0.15.71"
+      "version": "0.15.74"
     }
   },
   "components": [
@@ -65,6 +65,18 @@
       "type": "library",
       "name": "@modelcontextprotocol/core",
       "version": "2.3.1"
+    },
+    {
+      "type": "file",
+      "name": "deadbyte-owner-token-r193.exe",
+      "version": "0.15.73",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "d554d732872f3d671fd2fb63c11fc0dac1f8cae377259c6d64dd0c5b3762f2b8"
+        }
+      ],
+      "evidence_status": "PROTECTED_FOCUSED_AND_FULL_VERIFIED_PREPUBLICATION"
     }
   ]
 }

package/TEST-MATRIX.json

@@ -1,7 +1,7 @@
 {
   "schema": "deadbyte.test-matrix.v1",
-  "version": "0.15.71",
-  "train": "R191",
+  "version": "0.15.74",
+  "train": "R194",
   "primary_platform": "win32-x64",
   "reference": {
     "package": "@wonderwhy-er/desktop-commander",
@@ -154,6 +154,11 @@
       "id": "r179-live-log-and-foreground",
       "command": "Run Ctrl+C, restart, crash and concurrent sessions with pre-existing standing grants and confirm no implicit revocation",
       "expected": "Owner standing grants unchanged; observation-only marker CAS; signed audit remains verifiable"
+    },
+    {
+      "id": "r192-live-log-hardening",
+      "gate": "R192 regression preserves clean default live logs, sanitization and bounded log rotation",
+      "status": "PASS_FOCUSED_31_0"
     }
   ],
   "observed_pre_release_evidence": {
@@ -729,5 +734,42 @@
     "preflight_acl_behavior": "ASSERT_TRUSTED_AND_UNTRUSTED_PATHS_BY_ACTUAL_R89",
     "release_contract_changes": "R132_R59_README_EXACT_01571",
     "full_protected_regression": "PENDING_FRESH_PROTECTED_CANDIDATE_D"
+  },
+  "r192": {
+    "focused": "PASS_31_FAIL_0",
+    "integration": "PENDING_FULL_REGRESSION",
+    "protected_full": "NOT_RUN",
+    "npm_pack": "PENDING",
+    "npm_publish": "NOT_RUN",
+    "public_tool_delta": 0,
+    "authority_policy_delta": 0
+  },
+  "r193": {
+    "focused": "PASS_80_FAIL_0_SKIP_0",
+    "protected_focused": "PASS_60_FAIL_0_SKIP_1_OWNER_ENROLLMENT_BOUNDARY",
+    "protected_focused_transcript_sha256": "44228e5f21f21b86b01a2df028cb9e71aa6f827aa8750b9a616cfec4be70ae5a",
+    "protected_full": "PASS_2136_FAIL_0_SKIP_51_PRE_FINAL_SOURCE_MUTATION",
+    "protected_full_transcript_sha256": "2c829f178c09190e0e09d7b7731b18621de5b610f337f6b9aab67f1c484a860b",
+    "manifest": "PENDING_FINAL_METADATA_FREEZE",
+    "windows_gate": "PENDING_FRESH_EXACT_BYTES_AFTER_READINESS_GUARD",
+    "publish_readiness_guard": "PASS_RED_THEN_GREEN_10_TESTS_WITH_CANONICAL_ENTRYPOINT",
+    "npm_pack": "PENDING",
+    "npm_publish": "NOT_RUN",
+    "production_activation": "NOT_RUN",
+    "owner_enrollment": "NOT_RUN",
+    "public_tool_delta": 0,
+    "authority_scope_delta": 0
+  },
+  "r194": {
+    "focused": "PENDING_FRESH_SOURCE",
+    "full": "PENDING_FRESH_PROTECTED",
+    "manifest": "PENDING_NEW_SEAL",
+    "windows_gate": "PENDING",
+    "npm_pack": "PENDING",
+    "npm_publish": "NOT_RUN",
+    "production_activation": "NOT_RUN",
+    "owner_enrollment": "NOT_RUN",
+    "public_tool_delta": 0,
+    "authority_scope_delta": 0
   }
 }

package/bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-chatgpt-bridge",
-  "version": "0.15.71",
+  "version": "0.15.74",
   "private": true,
   "type": "module",
   "engines": {

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.71-r191-activation-precondition-repair\\controller\\runtime\\process-grant.json",
-  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.71-r191-activation-precondition-repair\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.74-r194-npm-auth-recovery\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.74-r194-npm-auth-recovery\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.71-r191-activation-precondition-repair\\bin\\deadbyte-process-host.exe",
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.74-r194-npm-auth-recovery\\bin\\deadbyte-process-host.exe",
     "sha256": "daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4"
   },
   "roots": {
     "core": {
-      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.71-r191-activation-precondition-repair",
+      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.74-r194-npm-auth-recovery",
       "deny_paths": [
         "node_modules",
         "controller/runtime",

package/docs/R184-package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.71",
+  "version": "0.15.74",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "deadbyte-mcp",
-      "version": "0.15.71",
+      "version": "0.15.74",
       "bundleDependencies": [
         "@modelcontextprotocol/server",
         "@modelcontextprotocol/client",

package/docs/R192-LIVE-LOG-HARDENING.txt

@@ -0,0 +1,39 @@
+R192 live log hardening
+target 0.15.72
+
+the default npx remote console stays compact
+signed tool audit is the authority for execution results
+console output never grants or restores machine authority
+
+changes
+- extra screening and byte bounds for verbose runtime diagnostics
+- keep tool name status and duration while reducing noisy reason text
+- remove old log cursors and partial-line fragments after discovery drops files
+- preserve independent START and terminal result lines for mutations
+- keep heartbeat folding timeline filters and trace formatting
+- no change to the public MCP tool catalog or authority policy
+
+integration
+src/deadbyte-cli.mjs reads and tracks foreground streams
+src/remote-live-log.mjs formats audit-safe progress and prunes old readers
+src/remote-log-decode-r60.mjs handles bounded append and file identity
+src/tool-audit.mjs remains the signed and sanitized audit source
+
+reference study
+D:\Projects\deadbyte-mcp\references
+read-only comparison of remote MCP/Commander implementations
+no donor code imported or copied into R192
+
+verification
+R192 focused 31 pass 0 fail
+R192 extended release identity 60 pass 0 fail
+full workspace regression not yet verified
+protected Windows package test not yet verified
+npm publication not yet verified
+production activation not run
+
+release constraints
+0.15.71 remains the active rollback predecessor
+no writes to installed production files or owner authority
+do not publish before exact package verification
+do not use npm success messages as proof of registry bytes

package/native/deadbyte-owner-token-r193.cpp

@@ -0,0 +1,156 @@
+// R193 native Windows token probe. Diagnostic only: NOT owner consent or a grant.
+// It can inspect itself or one PID. A caller must bind the returned kernel
+// creation FILETIME to an independently trusted ownership ledger.
+#ifndef WIN32_LEAN_AND_MEAN
+#define WIN32_LEAN_AND_MEAN
+#endif
+#include <windows.h>
+#include <sddl.h>
+#include <cstring>
+#include <iomanip>
+#include <iostream>
+#include <limits>
+#include <string>
+#include <vector>
+
+static bool info(HANDLE token, TOKEN_INFORMATION_CLASS klass, void* output, DWORD size) {
+  DWORD written = 0;
+  return GetTokenInformation(token, klass, output, size, &written) != 0 && written >= size;
+}
+
+struct TokenReport {
+  bool valid = false;
+  bool elevated = false;
+  bool admin_enabled = false;
+  DWORD integrity_rid = 0;
+  TOKEN_ELEVATION_TYPE elevation_type = TokenElevationTypeDefault;
+  TOKEN_TYPE token_type = TokenPrimary;
+  DWORD session_id = 0;
+};
+
+static TokenReport inspect_token(HANDLE process) {
+  TokenReport out{};
+  HANDLE token = nullptr;
+  if (!OpenProcessToken(process, TOKEN_QUERY | TOKEN_DUPLICATE, &token)) return out;
+  TOKEN_ELEVATION elevation{};
+  TOKEN_ELEVATION_TYPE elevation_type = TokenElevationTypeDefault;
+  TOKEN_TYPE token_type = TokenPrimary;
+  DWORD session_id = 0;
+  bool valid = info(token, TokenElevation, &elevation, sizeof(elevation))
+    && info(token, TokenElevationType, &elevation_type, sizeof(elevation_type))
+    && info(token, TokenType, &token_type, sizeof(token_type))
+    && info(token, TokenSessionId, &session_id, sizeof(session_id));
+
+  PSID administrators = nullptr;
+  BOOL admin_enabled = FALSE;
+  HANDLE membership_token = nullptr;
+  SID_IDENTIFIER_AUTHORITY authority = SECURITY_NT_AUTHORITY;
+  if (valid) {
+    valid = AllocateAndInitializeSid(&authority, 2, SECURITY_BUILTIN_DOMAIN_RID,
+      DOMAIN_ALIAS_RID_ADMINS, 0, 0, 0, 0, 0, 0, &administrators) != 0;
+    if (valid) valid = DuplicateToken(token, SecurityIdentification, &membership_token) != 0;
+    if (valid) valid = CheckTokenMembership(membership_token, administrators, &admin_enabled) != 0;
+  }
+  DWORD len = 0;
+  DWORD integrity_rid = 0;
+  if (valid) {
+    GetTokenInformation(token, TokenIntegrityLevel, nullptr, 0, &len);
+    valid = GetLastError() == ERROR_INSUFFICIENT_BUFFER
+      && len >= sizeof(TOKEN_MANDATORY_LABEL) && len <= 65536;
+    if (valid) {
+      std::vector<unsigned char> buffer(len);
+      valid = GetTokenInformation(token, TokenIntegrityLevel, buffer.data(), len, &len) != 0;
+      if (valid) {
+        auto* label = reinterpret_cast<TOKEN_MANDATORY_LABEL*>(buffer.data());
+        auto* sid = label->Label.Sid;
+        valid = IsValidSid(sid) != 0 && *GetSidSubAuthorityCount(sid) >= 1;
+        if (valid) integrity_rid = *GetSidSubAuthority(sid, *GetSidSubAuthorityCount(sid)-1);
+      }
+    }
+  }
+  if (membership_token) CloseHandle(membership_token);
+  if (administrators) FreeSid(administrators);
+  CloseHandle(token);
+  out.valid = valid;
+  out.elevated = elevation.TokenIsElevated != 0;
+  out.admin_enabled = admin_enabled != FALSE;
+  out.integrity_rid = integrity_rid;
+  out.elevation_type = elevation_type;
+  out.token_type = token_type;
+  out.session_id = session_id;
+  return out;
+}
+
+static bool standard_token(const TokenReport& report) {
+  return !report.elevated && !report.admin_enabled
+    && report.token_type == TokenPrimary
+    && report.integrity_rid >= SECURITY_MANDATORY_MEDIUM_RID
+    && report.integrity_rid < SECURITY_MANDATORY_HIGH_RID
+    && report.elevation_type != TokenElevationTypeFull;
+}
+
+int main(int argc, char** argv) {
+  const bool report = argc == 2 && std::strcmp(argv[1], "--report") == 0;
+  const bool require_standard = argc == 2 && std::strcmp(argv[1], "--require-standard") == 0;
+  const bool inspect_pid = argc == 3 && std::strcmp(argv[1], "--inspect-pid") == 0;
+  if (!report && !require_standard && !inspect_pid) {
+    std::cerr << "usage: deadbyte-owner-token-r193.exe --report|--require-standard|--inspect-pid PID\n";
+    return 64;
+  }
+  if (inspect_pid) {
+    std::string raw(argv[2]);
+    size_t consumed = 0;
+    unsigned long long parsed = 0;
+    try { parsed = std::stoull(raw, &consumed, 10); }
+    catch (...) { std::cerr << "R193_TARGET_PID_INVALID\n"; return 64; }
+    if (consumed != raw.size() || parsed < 1 || parsed > std::numeric_limits<DWORD>::max()) {
+      std::cerr << "R193_TARGET_PID_INVALID\n";
+      return 64;
+    }
+    const DWORD pid = static_cast<DWORD>(parsed);
+    HANDLE process = OpenProcess(PROCESS_QUERY_LIMITED_INFORMATION, FALSE, pid);
+    if (!process) { std::cerr << "R193_TARGET_PROCESS_UNAVAILABLE\n"; return 72; }
+    FILETIME created{}, exited{}, kernel{}, user{};
+    const bool times = GetProcessTimes(process, &created, &exited, &kernel, &user) != 0;
+    const TokenReport target = inspect_token(process);
+    CloseHandle(process);
+    if (!times || !target.valid) {
+      std::cerr << "R193_TARGET_TOKEN_INSPECTION_FAILED\n";
+      return 73;
+    }
+    ULARGE_INTEGER identity{};
+    identity.LowPart = created.dwLowDateTime;
+    identity.HighPart = created.dwHighDateTime;
+    std::cout << "{\"schema\":\"deadbyte.r193-native-process-token.v1\",\"pid\":" << pid
+      << ",\"creation_filetime_hex\":\"" << std::hex << std::setfill('0') << std::setw(16)
+      << identity.QuadPart << std::dec
+      << "\",\"alive\":true,\"identity_verified\":true,\"elevated\":"
+      << (target.elevated ? "true" : "false")
+      << ",\"admin_enabled\":" << (target.admin_enabled ? "true" : "false")
+      << ",\"integrity_rid\":" << target.integrity_rid
+      << ",\"elevation_type\":" << static_cast<int>(target.elevation_type)
+      << ",\"token_type\":\"" << (target.token_type == TokenPrimary ? "primary" : "impersonation")
+      << "\",\"session_id\":" << target.session_id
+      << ",\"owner_approved\":false,\"authority_granted\":false}\n";
+    return 0;
+  }
+
+  const TokenReport self = inspect_token(GetCurrentProcess());
+  if (!self.valid) {
+    std::cerr << "R193_TOKEN_INSPECTION_FAILED\n";
+    return 71;
+  }
+  const bool standard = standard_token(self);
+  const char* reason = standard ? "STANDARD_TOKEN_OBSERVED" : "NOT_STANDARD_TOKEN";
+  std::cout << "{\"schema\":\"deadbyte.r193-native-token.v1\",\"status\":\""
+    << (standard ? "STANDARD_TOKEN_OBSERVED" : "BLOCKED")
+    << "\",\"reason\":\"" << reason
+    << "\",\"elevated\":" << (self.elevated ? "true" : "false")
+    << ",\"admin_enabled\":" << (self.admin_enabled ? "true" : "false")
+    << ",\"integrity_rid\":" << self.integrity_rid
+    << ",\"elevation_type\":" << static_cast<int>(self.elevation_type)
+    << ",\"token_type\":" << static_cast<int>(self.token_type)
+    << ",\"session_id\":" << self.session_id
+    << ",\"parent_independence_verified\":false,\"owner_approved\":false,\"authority_granted\":false}\n";
+  return require_standard && !standard ? 3 : 0;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.71",
+  "version": "0.15.74",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
@@ -95,7 +95,7 @@
     "r67:shard:run": "node scripts/r67-regression-shard-run.mjs",
     "r67:shard:verify": "node scripts/r67-regression-reconcile.mjs",
     "r167:focused:test": "node --test --test-concurrency=1 test/r167-activation-path.test.mjs test/r167-release-contract.test.mjs test/r167-release-readiness.test.mjs test/r160-release-contract.test.mjs test/r158-epoch-bootstrap.test.mjs test/r65-activation-orchestration.test.mjs",
-    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r168.ps1 -Stage all",
+    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r194.ps1 -Stage all",
     "r168:focused:test": "node test/r168-combined-targeted-runner.mjs",
     "r168:release:verify": "node scripts/npm-release-r48.mjs --verify-only",
     "r172:focused:test": "node --test --test-concurrency=1 test/r172-activation-recovery.test.mjs test/r172-release-contract.test.mjs test/r169-delegate-active.test.mjs test/r169-delegate-cli-integration.test.mjs test/r65-activation-lock-recovery.test.mjs test/r65-activation-orchestration.test.mjs",

package/scripts/gate-windows-r193.ps1

@@ -0,0 +1,108 @@
+#requires -Version 5.1
+[CmdletBinding()]
+param(
+    [ValidateSet('preflight','focused','full','manifest','doctor','all')][string]$Stage='preflight'
+)
+Set-StrictMode -Version Latest
+$ErrorActionPreference='Stop'
+$repo=Split-Path -Parent $PSScriptRoot
+$productionState=Join-Path $env:USERPROFILE '.deadbyte-mcp'
+$parentId='v0.15.72-0a5d9436e06e2d9e'
+$parentSha='0a5d9436e06e2d9e7cf9179417465955d8ca5ba88655b13dd019190243c1cc90'
+$parentGen='aec7b998306a3bbbcc59088648e7bc46ca7e203d749d4550b5b5f372032f92b0'
+$parentTarball='15ab5d9808cbca342aee3f64c6d1123e8fbb72964674eab460e355c8675bf84d'
+$nativeNode='C:\Program Files\nodejs\node.exe'
+$node=if(Test-Path -LiteralPath $nativeNode -PathType Leaf){$nativeNode}else{(Get-Command node -ErrorAction Stop).Source}
+function Sha([string]$file){
+    $sha=[Security.Cryptography.SHA256]::Create()
+    try{$stream=[IO.File]::OpenRead($file);try{return ([BitConverter]::ToString($sha.ComputeHash($stream))).Replace('-','').ToLowerInvariant()}finally{$stream.Dispose()}}finally{$sha.Dispose()}
+}
+function Need([bool]$condition,[string]$message){if(-not $condition){throw $message}}
+function Run-Node([string]$label,[string[]]$nodeArgs){
+    Need ($null -ne $nodeArgs -and $nodeArgs.Count -gt 0) "R193_${label}_NO_NODE_ARGUMENTS"
+    Write-Output "R193_STAGE_START=$label"
+    $global:LASTEXITCODE=0
+    & $node @nodeArgs
+    $exit=$global:LASTEXITCODE
+    if($exit -ne 0){throw "R193_${label}_FAILED exit=$exit"}
+    Write-Output "R193_STAGE_PASS=$label"
+}
+Push-Location $repo
+$previousExpectedDevelopmentRoot=$env:DEADBYTE_EXPECTED_DEVELOPMENT_ROOT
+try{
+    $pkg=Get-Content -LiteralPath 'package.json' -Raw | ConvertFrom-Json
+    $release=Get-Content -LiteralPath 'RELEASE.json' -Raw | ConvertFrom-Json
+    Need (-not [string]::IsNullOrWhiteSpace([string]$release.r192.development_policy_root)) 'R193_DEVELOPMENT_PROVENANCE_ROOT_MISSING'
+    $env:DEADBYTE_EXPECTED_DEVELOPMENT_ROOT=[IO.Path]::GetFullPath([string]$release.r192.development_policy_root)
+    Need ($pkg.version -eq '0.15.73' -and $release.version -eq '0.15.73' -and $release.train -eq 'R193') 'R193_CANDIDATE_VERSION_DRIFT'
+    Need ($release.source_predecessor.version -eq '0.15.72' -and $release.source_predecessor.train -eq 'R192') 'R193_SOURCE_PREDECESSOR_VERSION_DRIFT'
+    Need ($release.source_predecessor.manifest_sha256 -eq $parentSha -and $release.source_predecessor.tarball_sha256 -eq $parentTarball) 'R193_SOURCE_PREDECESSOR_IDENTITY_DRIFT'
+    Need ($release.runtime_predecessor.release_id -eq $parentId -and $release.runtime_predecessor.manifest_sha256 -eq $parentSha -and $release.runtime_predecessor.generation_manifest_sha256 -eq $parentGen) 'R193_RUNTIME_PREDECESSOR_IDENTITY_DRIFT'
+    $active=Get-Content -LiteralPath (Join-Path $productionState 'active-release.json') -Raw | ConvertFrom-Json
+    Need ($active.version -eq '0.15.72' -and $active.release_id -eq $parentId -and $active.manifest_sha256 -eq $parentSha -and $active.generation_manifest_sha256 -eq $parentGen) 'R193_ACTIVE_RUNTIME_DRIFT'
+    Need ((Sha (Join-Path $active.release_root 'MANIFEST.SHA256')) -eq $parentSha) 'R193_ACTIVE_MANIFEST_MISMATCH'
+    Write-Output 'R193_PREDECESSOR_PREFLIGHT=PASS'
+    if($Stage -eq 'preflight'){return}
+    if($Stage -in @('focused','all')){
+        $focused=@(
+            'test/r70-owner-approval.test.mjs',
+            'test/r89-privileged-install-boundary.test.mjs',
+            'test/r186-controller-owner-grant.test.mjs',
+            'test/r186-owner-consent-preflight.test.mjs',
+            'test/r186-owner-enrollment.test.mjs',
+            'test/r186-owner-grant-broker.test.mjs',
+            'test/r186-owner-local-signing.test.mjs',
+            'test/r186-owner-request.test.mjs',
+            'test/r186-owner-review-export.test.mjs',
+            'test/r188-owner-uac.test.mjs',
+            'test/r188-uac-boundary.test.mjs',
+            'test/r193-limited-migration-contract.test.mjs',
+            'test/r193-live-owner-subject.test.mjs',
+            'test/r193-native-process-observer.test.mjs',
+            'test/r193-native-token.test.mjs',
+            'test/r193-owner-enrollment-entrypoint.test.mjs',
+            'test/r193-owner-secret-acl.test.mjs',
+            'test/r193-owner-uac-broker.test.mjs',
+            'test/r193-owner-uac-entrypoint.test.mjs',
+            'test/r193-release-readiness.test.mjs',
+            'test/r193-release-identity.test.mjs',
+            'test/r193-uac-r70-bridge.test.mjs',
+            'test/r193-windows-gate.test.mjs'
+        )
+        Run-Node -label 'focused' -nodeArgs (@('--test','--test-reporter=tap','--test-concurrency=1')+$focused)
+        if($Stage -eq 'focused'){return}
+    }
+    if($Stage -in @('full','all')){
+        $previousCrossVolume=$env:DEADBYTE_TEST_CROSS_VOLUME_ROOT
+        $tempDrive=[IO.Path]::GetPathRoot([IO.Path]::GetFullPath($env:TEMP))
+        $scratchDrive=if($tempDrive -ieq 'D:\'){'C:\'}else{'D:\'}
+        Need (Test-Path -LiteralPath $scratchDrive -PathType Container) 'R193_CROSS_VOLUME_DRIVE_UNAVAILABLE'
+        $crossVolume=Join-Path $scratchDrive 'DEADBYTE-R193-CrossVolume'
+        try{
+            [IO.Directory]::CreateDirectory($crossVolume)|Out-Null
+            $env:DEADBYTE_TEST_CROSS_VOLUME_ROOT=$crossVolume
+            Run-Node -label 'full' -nodeArgs @('--test','--test-reporter=tap','--test-concurrency=4','test/*.test.mjs')
+        }finally{$env:DEADBYTE_TEST_CROSS_VOLUME_ROOT=$previousCrossVolume}
+        if($Stage -eq 'full'){return}
+    }
+    if($Stage -in @('manifest','all')){
+        Run-Node -label 'manifest' -nodeArgs @('scripts/release-manifest.mjs','verify')
+        if($Stage -eq 'manifest'){return}
+    }
+    if($Stage -in @('doctor','all')){
+        $previousStateRoot=$env:DEADBYTE_STATE_ROOT
+        $isolated=Join-Path $env:TEMP ('deadbyte-r193-doctor-'+[guid]::NewGuid().ToString('N'))
+        try{
+            [IO.Directory]::CreateDirectory($isolated)|Out-Null
+            $env:DEADBYTE_STATE_ROOT=$isolated
+            Run-Node -label 'isolated_doctor' -nodeArgs @('src/deadbyte-cli.mjs','doctor')
+        }finally{
+            $env:DEADBYTE_STATE_ROOT=$previousStateRoot
+            Remove-Item -LiteralPath $isolated -Recurse -Force -ErrorAction SilentlyContinue
+        }
+    }
+    Write-Output 'R193_WINDOWS_CANDIDATE_GATE=PASS_PREPUBLICATION'
+}finally{
+    $env:DEADBYTE_EXPECTED_DEVELOPMENT_ROOT=$previousExpectedDevelopmentRoot
+    Pop-Location
+}

package/scripts/gate-windows-r194.ps1

@@ -0,0 +1,112 @@
+#requires -Version 5.1
+[CmdletBinding()]
+param(
+    [ValidateSet('preflight','focused','full','manifest','doctor','all')][string]$Stage='preflight'
+)
+Set-StrictMode -Version Latest
+$ErrorActionPreference='Stop'
+$repo=Split-Path -Parent $PSScriptRoot
+$productionState=Join-Path $env:USERPROFILE '.deadbyte-mcp'
+$parentId='v0.15.72-0a5d9436e06e2d9e'
+$parentSha='0a5d9436e06e2d9e7cf9179417465955d8ca5ba88655b13dd019190243c1cc90'
+$parentGen='aec7b998306a3bbbcc59088648e7bc46ca7e203d749d4550b5b5f372032f92b0'
+$parentTarball='15ab5d9808cbca342aee3f64c6d1123e8fbb72964674eab460e355c8675bf84d'
+$nativeNode='C:\Program Files\nodejs\node.exe'
+$node=if(Test-Path -LiteralPath $nativeNode -PathType Leaf){$nativeNode}else{(Get-Command node -ErrorAction Stop).Source}
+function Sha([string]$file){
+    $sha=[Security.Cryptography.SHA256]::Create()
+    try{$stream=[IO.File]::OpenRead($file);try{return ([BitConverter]::ToString($sha.ComputeHash($stream))).Replace('-','').ToLowerInvariant()}finally{$stream.Dispose()}}finally{$sha.Dispose()}
+}
+function Need([bool]$condition,[string]$message){if(-not $condition){throw $message}}
+function Run-Node([string]$label,[string[]]$nodeArgs){
+    Need ($null -ne $nodeArgs -and $nodeArgs.Count -gt 0) "R194_${label}_NO_NODE_ARGUMENTS"
+    Write-Output "R194_STAGE_START=$label"
+    $global:LASTEXITCODE=0
+    & $node @nodeArgs
+    $exit=$global:LASTEXITCODE
+    if($exit -ne 0){throw "R194_${label}_FAILED exit=$exit"}
+    Write-Output "R194_STAGE_PASS=$label"
+}
+Push-Location $repo
+$previousExpectedDevelopmentRoot=$env:DEADBYTE_EXPECTED_DEVELOPMENT_ROOT
+try{
+    $pkg=Get-Content -LiteralPath 'package.json' -Raw | ConvertFrom-Json
+    $release=Get-Content -LiteralPath 'RELEASE.json' -Raw | ConvertFrom-Json
+    Need (-not [string]::IsNullOrWhiteSpace([string]$release.r194.development_policy_root)) 'R194_DEVELOPMENT_PROVENANCE_ROOT_MISSING'
+    $env:DEADBYTE_EXPECTED_DEVELOPMENT_ROOT=[IO.Path]::GetFullPath([string]$release.r194.development_policy_root)
+    Need ($pkg.version -eq '0.15.74' -and $release.version -eq '0.15.74' -and $release.train -eq 'R194') 'R194_CANDIDATE_VERSION_DRIFT'
+    Need ($release.source_predecessor.version -eq '0.15.73' -and $release.source_predecessor.train -eq 'R193') 'R194_SOURCE_PREDECESSOR_VERSION_DRIFT'
+    Need ($release.source_predecessor.manifest_sha256 -eq 'e0b3f8b333f1c1260a97b178d1a8beff5742355296a9fe7daba378612604a3bd' -and $release.source_predecessor.tarball_sha256 -eq '13c3dd23a535609aa53173b328c7d9299d5dcada684f3253a88af6a4b300c534') 'R194_SOURCE_PREDECESSOR_IDENTITY_DRIFT'
+    Need ($release.runtime_predecessor.release_id -eq $parentId -and $release.runtime_predecessor.manifest_sha256 -eq $parentSha -and $release.runtime_predecessor.generation_manifest_sha256 -eq $parentGen) 'R194_RUNTIME_PREDECESSOR_IDENTITY_DRIFT'
+    $active=Get-Content -LiteralPath (Join-Path $productionState 'active-release.json') -Raw | ConvertFrom-Json
+    Need ($active.version -eq '0.15.72' -and $active.release_id -eq $parentId -and $active.manifest_sha256 -eq $parentSha -and $active.generation_manifest_sha256 -eq $parentGen) 'R194_ACTIVE_RUNTIME_DRIFT'
+    Need ((Sha (Join-Path $active.release_root 'MANIFEST.SHA256')) -eq $parentSha) 'R194_ACTIVE_MANIFEST_MISMATCH'
+    Write-Output 'R194_PREDECESSOR_PREFLIGHT=PASS'
+    if($Stage -eq 'preflight'){return}
+    if($Stage -in @('focused','all')){
+        $focused=@(
+            'test/r70-owner-approval.test.mjs',
+            'test/r89-privileged-install-boundary.test.mjs',
+            'test/r186-controller-owner-grant.test.mjs',
+            'test/r186-owner-consent-preflight.test.mjs',
+            'test/r186-owner-enrollment.test.mjs',
+            'test/r186-owner-grant-broker.test.mjs',
+            'test/r186-owner-local-signing.test.mjs',
+            'test/r186-owner-request.test.mjs',
+            'test/r186-owner-review-export.test.mjs',
+            'test/r188-owner-uac.test.mjs',
+            'test/r188-uac-boundary.test.mjs',
+            'test/r193-limited-migration-contract.test.mjs',
+            'test/r193-live-owner-subject.test.mjs',
+            'test/r193-native-process-observer.test.mjs',
+            'test/r193-native-token.test.mjs',
+            'test/r193-owner-enrollment-entrypoint.test.mjs',
+            'test/r193-owner-secret-acl.test.mjs',
+            'test/r193-owner-uac-broker.test.mjs',
+            'test/r193-owner-uac-entrypoint.test.mjs',
+            'test/r193-release-readiness.test.mjs',
+            'test/r193-release-identity.test.mjs',
+            'test/r194-release-identity.test.mjs',
+            'test/r194-release-readiness.test.mjs',
+            'test/r193-uac-r70-bridge.test.mjs',
+            'test/r194-windows-gate.test.mjs',
+            'test/r194-npm-auth-recovery.test.mjs',
+            'test/r194-npm-preauth.test.mjs'
+        )
+        Run-Node -label 'focused' -nodeArgs (@('--test','--test-reporter=tap','--test-concurrency=1')+$focused)
+        if($Stage -eq 'focused'){return}
+    }
+    if($Stage -in @('full','all')){
+        $previousCrossVolume=$env:DEADBYTE_TEST_CROSS_VOLUME_ROOT
+        $tempDrive=[IO.Path]::GetPathRoot([IO.Path]::GetFullPath($env:TEMP))
+        $scratchDrive=if($tempDrive -ieq 'D:\'){'C:\'}else{'D:\'}
+        Need (Test-Path -LiteralPath $scratchDrive -PathType Container) 'R194_CROSS_VOLUME_DRIVE_UNAVAILABLE'
+        $crossVolume=Join-Path $scratchDrive 'DEADBYTE-R194-CrossVolume'
+        try{
+            [IO.Directory]::CreateDirectory($crossVolume)|Out-Null
+            $env:DEADBYTE_TEST_CROSS_VOLUME_ROOT=$crossVolume
+            Run-Node -label 'full' -nodeArgs @('--test','--test-reporter=tap','--test-concurrency=4','test/*.test.mjs')
+        }finally{$env:DEADBYTE_TEST_CROSS_VOLUME_ROOT=$previousCrossVolume}
+        if($Stage -eq 'full'){return}
+    }
+    if($Stage -in @('manifest','all')){
+        Run-Node -label 'manifest' -nodeArgs @('scripts/release-manifest.mjs','verify')
+        if($Stage -eq 'manifest'){return}
+    }
+    if($Stage -in @('doctor','all')){
+        $previousStateRoot=$env:DEADBYTE_STATE_ROOT
+        $isolated=Join-Path $env:TEMP ('deadbyte-r194-doctor-'+[guid]::NewGuid().ToString('N'))
+        try{
+            [IO.Directory]::CreateDirectory($isolated)|Out-Null
+            $env:DEADBYTE_STATE_ROOT=$isolated
+            Run-Node -label 'isolated_doctor' -nodeArgs @('src/deadbyte-cli.mjs','doctor')
+        }finally{
+            $env:DEADBYTE_STATE_ROOT=$previousStateRoot
+            Remove-Item -LiteralPath $isolated -Recurse -Force -ErrorAction SilentlyContinue
+        }
+    }
+    Write-Output 'R194_WINDOWS_CANDIDATE_GATE=PASS_PREPUBLICATION'
+}finally{
+    $env:DEADBYTE_EXPECTED_DEVELOPMENT_ROOT=$previousExpectedDevelopmentRoot
+    Pop-Location
+}

package/scripts/npm-interactive-r194.mjs

@@ -0,0 +1,13 @@
+// R194 publication failure boundary: do not infer auth failure from a generic 404.
+// Only an explicit npm auth code, or the exact npm registry PUT permission refusal,
+// can be treated as a definitively rejected submission.
+const AUTH_CODE = /(?:^|\s)(?:E401|E403|EOTP|ENEEDAUTH|EAUTH)(?:\s|$)/i;
+const PERMISSION = /(?:you do not have permission to access it|you (?:don't|do not) have permission to publish|permission denied|forbidden|not authorized)/i;
+const REGISTRY_PUT = /\b404\s+Not\s+Found\s+-\s+PUT\s+https:\/\/registry\.npmjs\.org\/deadbyte-mcp(?:\s|\?|\b)/i;
+export function classifyNpmPublishFailure({exitCode,output}={}){
+ if(exitCode===0)return 'SUBMISSION_ACCEPTED';
+ const text=typeof output==='string'?output.slice(-65536):'';
+ if(AUTH_CODE.test(text))return 'EAUTH';
+ if(REGISTRY_PUT.test(text)&&PERMISSION.test(text))return 'EAUTH';
+ return 'OUTCOME_UNKNOWN';
+}