deadbyte-mcp 0.15.72 → 0.15.74

package/bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-chatgpt-bridge",
-  "version": "0.15.72",
+  "version": "0.15.74",
   "private": true,
   "type": "module",
   "engines": {

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r192-live-log-hardening-dev\\controller\\runtime\\process-grant.json",
-  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r192-live-log-hardening-dev\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.74-r194-npm-auth-recovery\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.74-r194-npm-auth-recovery\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r192-live-log-hardening-dev\\bin\\deadbyte-process-host.exe",
+    "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.74-r194-npm-auth-recovery\\bin\\deadbyte-process-host.exe",
     "sha256": "daf9cfb371bee88cafbf5597eaa507fec504dbe0b0ddd40d0c3c2e02817f49e4"
   },
   "roots": {
     "core": {
-      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-r192-live-log-hardening-dev",
+      "path": "D:\\Projects\\deadbyte-mcp\\development\\deadbyte-mcp-0.15.74-r194-npm-auth-recovery",
       "deny_paths": [
         "node_modules",
         "controller/runtime",

package/docs/R184-package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.72",
+  "version": "0.15.74",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "deadbyte-mcp",
-      "version": "0.15.72",
+      "version": "0.15.74",
       "bundleDependencies": [
         "@modelcontextprotocol/server",
         "@modelcontextprotocol/client",

package/native/deadbyte-owner-token-r193.cpp

@@ -0,0 +1,156 @@
+// R193 native Windows token probe. Diagnostic only: NOT owner consent or a grant.
+// It can inspect itself or one PID. A caller must bind the returned kernel
+// creation FILETIME to an independently trusted ownership ledger.
+#ifndef WIN32_LEAN_AND_MEAN
+#define WIN32_LEAN_AND_MEAN
+#endif
+#include <windows.h>
+#include <sddl.h>
+#include <cstring>
+#include <iomanip>
+#include <iostream>
+#include <limits>
+#include <string>
+#include <vector>
+
+static bool info(HANDLE token, TOKEN_INFORMATION_CLASS klass, void* output, DWORD size) {
+  DWORD written = 0;
+  return GetTokenInformation(token, klass, output, size, &written) != 0 && written >= size;
+}
+
+struct TokenReport {
+  bool valid = false;
+  bool elevated = false;
+  bool admin_enabled = false;
+  DWORD integrity_rid = 0;
+  TOKEN_ELEVATION_TYPE elevation_type = TokenElevationTypeDefault;
+  TOKEN_TYPE token_type = TokenPrimary;
+  DWORD session_id = 0;
+};
+
+static TokenReport inspect_token(HANDLE process) {
+  TokenReport out{};
+  HANDLE token = nullptr;
+  if (!OpenProcessToken(process, TOKEN_QUERY | TOKEN_DUPLICATE, &token)) return out;
+  TOKEN_ELEVATION elevation{};
+  TOKEN_ELEVATION_TYPE elevation_type = TokenElevationTypeDefault;
+  TOKEN_TYPE token_type = TokenPrimary;
+  DWORD session_id = 0;
+  bool valid = info(token, TokenElevation, &elevation, sizeof(elevation))
+    && info(token, TokenElevationType, &elevation_type, sizeof(elevation_type))
+    && info(token, TokenType, &token_type, sizeof(token_type))
+    && info(token, TokenSessionId, &session_id, sizeof(session_id));
+
+  PSID administrators = nullptr;
+  BOOL admin_enabled = FALSE;
+  HANDLE membership_token = nullptr;
+  SID_IDENTIFIER_AUTHORITY authority = SECURITY_NT_AUTHORITY;
+  if (valid) {
+    valid = AllocateAndInitializeSid(&authority, 2, SECURITY_BUILTIN_DOMAIN_RID,
+      DOMAIN_ALIAS_RID_ADMINS, 0, 0, 0, 0, 0, 0, &administrators) != 0;
+    if (valid) valid = DuplicateToken(token, SecurityIdentification, &membership_token) != 0;
+    if (valid) valid = CheckTokenMembership(membership_token, administrators, &admin_enabled) != 0;
+  }
+  DWORD len = 0;
+  DWORD integrity_rid = 0;
+  if (valid) {
+    GetTokenInformation(token, TokenIntegrityLevel, nullptr, 0, &len);
+    valid = GetLastError() == ERROR_INSUFFICIENT_BUFFER
+      && len >= sizeof(TOKEN_MANDATORY_LABEL) && len <= 65536;
+    if (valid) {
+      std::vector<unsigned char> buffer(len);
+      valid = GetTokenInformation(token, TokenIntegrityLevel, buffer.data(), len, &len) != 0;
+      if (valid) {
+        auto* label = reinterpret_cast<TOKEN_MANDATORY_LABEL*>(buffer.data());
+        auto* sid = label->Label.Sid;
+        valid = IsValidSid(sid) != 0 && *GetSidSubAuthorityCount(sid) >= 1;
+        if (valid) integrity_rid = *GetSidSubAuthority(sid, *GetSidSubAuthorityCount(sid)-1);
+      }
+    }
+  }
+  if (membership_token) CloseHandle(membership_token);
+  if (administrators) FreeSid(administrators);
+  CloseHandle(token);
+  out.valid = valid;
+  out.elevated = elevation.TokenIsElevated != 0;
+  out.admin_enabled = admin_enabled != FALSE;
+  out.integrity_rid = integrity_rid;
+  out.elevation_type = elevation_type;
+  out.token_type = token_type;
+  out.session_id = session_id;
+  return out;
+}
+
+static bool standard_token(const TokenReport& report) {
+  return !report.elevated && !report.admin_enabled
+    && report.token_type == TokenPrimary
+    && report.integrity_rid >= SECURITY_MANDATORY_MEDIUM_RID
+    && report.integrity_rid < SECURITY_MANDATORY_HIGH_RID
+    && report.elevation_type != TokenElevationTypeFull;
+}
+
+int main(int argc, char** argv) {
+  const bool report = argc == 2 && std::strcmp(argv[1], "--report") == 0;
+  const bool require_standard = argc == 2 && std::strcmp(argv[1], "--require-standard") == 0;
+  const bool inspect_pid = argc == 3 && std::strcmp(argv[1], "--inspect-pid") == 0;
+  if (!report && !require_standard && !inspect_pid) {
+    std::cerr << "usage: deadbyte-owner-token-r193.exe --report|--require-standard|--inspect-pid PID\n";
+    return 64;
+  }
+  if (inspect_pid) {
+    std::string raw(argv[2]);
+    size_t consumed = 0;
+    unsigned long long parsed = 0;
+    try { parsed = std::stoull(raw, &consumed, 10); }
+    catch (...) { std::cerr << "R193_TARGET_PID_INVALID\n"; return 64; }
+    if (consumed != raw.size() || parsed < 1 || parsed > std::numeric_limits<DWORD>::max()) {
+      std::cerr << "R193_TARGET_PID_INVALID\n";
+      return 64;
+    }
+    const DWORD pid = static_cast<DWORD>(parsed);
+    HANDLE process = OpenProcess(PROCESS_QUERY_LIMITED_INFORMATION, FALSE, pid);
+    if (!process) { std::cerr << "R193_TARGET_PROCESS_UNAVAILABLE\n"; return 72; }
+    FILETIME created{}, exited{}, kernel{}, user{};
+    const bool times = GetProcessTimes(process, &created, &exited, &kernel, &user) != 0;
+    const TokenReport target = inspect_token(process);
+    CloseHandle(process);
+    if (!times || !target.valid) {
+      std::cerr << "R193_TARGET_TOKEN_INSPECTION_FAILED\n";
+      return 73;
+    }
+    ULARGE_INTEGER identity{};
+    identity.LowPart = created.dwLowDateTime;
+    identity.HighPart = created.dwHighDateTime;
+    std::cout << "{\"schema\":\"deadbyte.r193-native-process-token.v1\",\"pid\":" << pid
+      << ",\"creation_filetime_hex\":\"" << std::hex << std::setfill('0') << std::setw(16)
+      << identity.QuadPart << std::dec
+      << "\",\"alive\":true,\"identity_verified\":true,\"elevated\":"
+      << (target.elevated ? "true" : "false")
+      << ",\"admin_enabled\":" << (target.admin_enabled ? "true" : "false")
+      << ",\"integrity_rid\":" << target.integrity_rid
+      << ",\"elevation_type\":" << static_cast<int>(target.elevation_type)
+      << ",\"token_type\":\"" << (target.token_type == TokenPrimary ? "primary" : "impersonation")
+      << "\",\"session_id\":" << target.session_id
+      << ",\"owner_approved\":false,\"authority_granted\":false}\n";
+    return 0;
+  }
+
+  const TokenReport self = inspect_token(GetCurrentProcess());
+  if (!self.valid) {
+    std::cerr << "R193_TOKEN_INSPECTION_FAILED\n";
+    return 71;
+  }
+  const bool standard = standard_token(self);
+  const char* reason = standard ? "STANDARD_TOKEN_OBSERVED" : "NOT_STANDARD_TOKEN";
+  std::cout << "{\"schema\":\"deadbyte.r193-native-token.v1\",\"status\":\""
+    << (standard ? "STANDARD_TOKEN_OBSERVED" : "BLOCKED")
+    << "\",\"reason\":\"" << reason
+    << "\",\"elevated\":" << (self.elevated ? "true" : "false")
+    << ",\"admin_enabled\":" << (self.admin_enabled ? "true" : "false")
+    << ",\"integrity_rid\":" << self.integrity_rid
+    << ",\"elevation_type\":" << static_cast<int>(self.elevation_type)
+    << ",\"token_type\":" << static_cast<int>(self.token_type)
+    << ",\"session_id\":" << self.session_id
+    << ",\"parent_independence_verified\":false,\"owner_approved\":false,\"authority_granted\":false}\n";
+  return require_standard && !standard ? 3 : 0;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.15.72",
+  "version": "0.15.74",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP agentic runtime with signed skills, persistent model backends, identity-bound remote devices, durable job supervision, immutable release slots, and separately revocable machine authority.",
@@ -95,7 +95,7 @@
     "r67:shard:run": "node scripts/r67-regression-shard-run.mjs",
     "r67:shard:verify": "node scripts/r67-regression-reconcile.mjs",
     "r167:focused:test": "node --test --test-concurrency=1 test/r167-activation-path.test.mjs test/r167-release-contract.test.mjs test/r167-release-readiness.test.mjs test/r160-release-contract.test.mjs test/r158-epoch-bootstrap.test.mjs test/r65-activation-orchestration.test.mjs",
-    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r168.ps1 -Stage all",
+    "gate:windows": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r194.ps1 -Stage all",
     "r168:focused:test": "node test/r168-combined-targeted-runner.mjs",
     "r168:release:verify": "node scripts/npm-release-r48.mjs --verify-only",
     "r172:focused:test": "node --test --test-concurrency=1 test/r172-activation-recovery.test.mjs test/r172-release-contract.test.mjs test/r169-delegate-active.test.mjs test/r169-delegate-cli-integration.test.mjs test/r65-activation-lock-recovery.test.mjs test/r65-activation-orchestration.test.mjs",

package/scripts/gate-windows-r193.ps1

@@ -0,0 +1,108 @@
+#requires -Version 5.1
+[CmdletBinding()]
+param(
+    [ValidateSet('preflight','focused','full','manifest','doctor','all')][string]$Stage='preflight'
+)
+Set-StrictMode -Version Latest
+$ErrorActionPreference='Stop'
+$repo=Split-Path -Parent $PSScriptRoot
+$productionState=Join-Path $env:USERPROFILE '.deadbyte-mcp'
+$parentId='v0.15.72-0a5d9436e06e2d9e'
+$parentSha='0a5d9436e06e2d9e7cf9179417465955d8ca5ba88655b13dd019190243c1cc90'
+$parentGen='aec7b998306a3bbbcc59088648e7bc46ca7e203d749d4550b5b5f372032f92b0'
+$parentTarball='15ab5d9808cbca342aee3f64c6d1123e8fbb72964674eab460e355c8675bf84d'
+$nativeNode='C:\Program Files\nodejs\node.exe'
+$node=if(Test-Path -LiteralPath $nativeNode -PathType Leaf){$nativeNode}else{(Get-Command node -ErrorAction Stop).Source}
+function Sha([string]$file){
+    $sha=[Security.Cryptography.SHA256]::Create()
+    try{$stream=[IO.File]::OpenRead($file);try{return ([BitConverter]::ToString($sha.ComputeHash($stream))).Replace('-','').ToLowerInvariant()}finally{$stream.Dispose()}}finally{$sha.Dispose()}
+}
+function Need([bool]$condition,[string]$message){if(-not $condition){throw $message}}
+function Run-Node([string]$label,[string[]]$nodeArgs){
+    Need ($null -ne $nodeArgs -and $nodeArgs.Count -gt 0) "R193_${label}_NO_NODE_ARGUMENTS"
+    Write-Output "R193_STAGE_START=$label"
+    $global:LASTEXITCODE=0
+    & $node @nodeArgs
+    $exit=$global:LASTEXITCODE
+    if($exit -ne 0){throw "R193_${label}_FAILED exit=$exit"}
+    Write-Output "R193_STAGE_PASS=$label"
+}
+Push-Location $repo
+$previousExpectedDevelopmentRoot=$env:DEADBYTE_EXPECTED_DEVELOPMENT_ROOT
+try{
+    $pkg=Get-Content -LiteralPath 'package.json' -Raw | ConvertFrom-Json
+    $release=Get-Content -LiteralPath 'RELEASE.json' -Raw | ConvertFrom-Json
+    Need (-not [string]::IsNullOrWhiteSpace([string]$release.r192.development_policy_root)) 'R193_DEVELOPMENT_PROVENANCE_ROOT_MISSING'
+    $env:DEADBYTE_EXPECTED_DEVELOPMENT_ROOT=[IO.Path]::GetFullPath([string]$release.r192.development_policy_root)
+    Need ($pkg.version -eq '0.15.73' -and $release.version -eq '0.15.73' -and $release.train -eq 'R193') 'R193_CANDIDATE_VERSION_DRIFT'
+    Need ($release.source_predecessor.version -eq '0.15.72' -and $release.source_predecessor.train -eq 'R192') 'R193_SOURCE_PREDECESSOR_VERSION_DRIFT'
+    Need ($release.source_predecessor.manifest_sha256 -eq $parentSha -and $release.source_predecessor.tarball_sha256 -eq $parentTarball) 'R193_SOURCE_PREDECESSOR_IDENTITY_DRIFT'
+    Need ($release.runtime_predecessor.release_id -eq $parentId -and $release.runtime_predecessor.manifest_sha256 -eq $parentSha -and $release.runtime_predecessor.generation_manifest_sha256 -eq $parentGen) 'R193_RUNTIME_PREDECESSOR_IDENTITY_DRIFT'
+    $active=Get-Content -LiteralPath (Join-Path $productionState 'active-release.json') -Raw | ConvertFrom-Json
+    Need ($active.version -eq '0.15.72' -and $active.release_id -eq $parentId -and $active.manifest_sha256 -eq $parentSha -and $active.generation_manifest_sha256 -eq $parentGen) 'R193_ACTIVE_RUNTIME_DRIFT'
+    Need ((Sha (Join-Path $active.release_root 'MANIFEST.SHA256')) -eq $parentSha) 'R193_ACTIVE_MANIFEST_MISMATCH'
+    Write-Output 'R193_PREDECESSOR_PREFLIGHT=PASS'
+    if($Stage -eq 'preflight'){return}
+    if($Stage -in @('focused','all')){
+        $focused=@(
+            'test/r70-owner-approval.test.mjs',
+            'test/r89-privileged-install-boundary.test.mjs',
+            'test/r186-controller-owner-grant.test.mjs',
+            'test/r186-owner-consent-preflight.test.mjs',
+            'test/r186-owner-enrollment.test.mjs',
+            'test/r186-owner-grant-broker.test.mjs',
+            'test/r186-owner-local-signing.test.mjs',
+            'test/r186-owner-request.test.mjs',
+            'test/r186-owner-review-export.test.mjs',
+            'test/r188-owner-uac.test.mjs',
+            'test/r188-uac-boundary.test.mjs',
+            'test/r193-limited-migration-contract.test.mjs',
+            'test/r193-live-owner-subject.test.mjs',
+            'test/r193-native-process-observer.test.mjs',
+            'test/r193-native-token.test.mjs',
+            'test/r193-owner-enrollment-entrypoint.test.mjs',
+            'test/r193-owner-secret-acl.test.mjs',
+            'test/r193-owner-uac-broker.test.mjs',
+            'test/r193-owner-uac-entrypoint.test.mjs',
+            'test/r193-release-readiness.test.mjs',
+            'test/r193-release-identity.test.mjs',
+            'test/r193-uac-r70-bridge.test.mjs',
+            'test/r193-windows-gate.test.mjs'
+        )
+        Run-Node -label 'focused' -nodeArgs (@('--test','--test-reporter=tap','--test-concurrency=1')+$focused)
+        if($Stage -eq 'focused'){return}
+    }
+    if($Stage -in @('full','all')){
+        $previousCrossVolume=$env:DEADBYTE_TEST_CROSS_VOLUME_ROOT
+        $tempDrive=[IO.Path]::GetPathRoot([IO.Path]::GetFullPath($env:TEMP))
+        $scratchDrive=if($tempDrive -ieq 'D:\'){'C:\'}else{'D:\'}
+        Need (Test-Path -LiteralPath $scratchDrive -PathType Container) 'R193_CROSS_VOLUME_DRIVE_UNAVAILABLE'
+        $crossVolume=Join-Path $scratchDrive 'DEADBYTE-R193-CrossVolume'
+        try{
+            [IO.Directory]::CreateDirectory($crossVolume)|Out-Null
+            $env:DEADBYTE_TEST_CROSS_VOLUME_ROOT=$crossVolume
+            Run-Node -label 'full' -nodeArgs @('--test','--test-reporter=tap','--test-concurrency=4','test/*.test.mjs')
+        }finally{$env:DEADBYTE_TEST_CROSS_VOLUME_ROOT=$previousCrossVolume}
+        if($Stage -eq 'full'){return}
+    }
+    if($Stage -in @('manifest','all')){
+        Run-Node -label 'manifest' -nodeArgs @('scripts/release-manifest.mjs','verify')
+        if($Stage -eq 'manifest'){return}
+    }
+    if($Stage -in @('doctor','all')){
+        $previousStateRoot=$env:DEADBYTE_STATE_ROOT
+        $isolated=Join-Path $env:TEMP ('deadbyte-r193-doctor-'+[guid]::NewGuid().ToString('N'))
+        try{
+            [IO.Directory]::CreateDirectory($isolated)|Out-Null
+            $env:DEADBYTE_STATE_ROOT=$isolated
+            Run-Node -label 'isolated_doctor' -nodeArgs @('src/deadbyte-cli.mjs','doctor')
+        }finally{
+            $env:DEADBYTE_STATE_ROOT=$previousStateRoot
+            Remove-Item -LiteralPath $isolated -Recurse -Force -ErrorAction SilentlyContinue
+        }
+    }
+    Write-Output 'R193_WINDOWS_CANDIDATE_GATE=PASS_PREPUBLICATION'
+}finally{
+    $env:DEADBYTE_EXPECTED_DEVELOPMENT_ROOT=$previousExpectedDevelopmentRoot
+    Pop-Location
+}

package/scripts/gate-windows-r194.ps1

@@ -0,0 +1,112 @@
+#requires -Version 5.1
+[CmdletBinding()]
+param(
+    [ValidateSet('preflight','focused','full','manifest','doctor','all')][string]$Stage='preflight'
+)
+Set-StrictMode -Version Latest
+$ErrorActionPreference='Stop'
+$repo=Split-Path -Parent $PSScriptRoot
+$productionState=Join-Path $env:USERPROFILE '.deadbyte-mcp'
+$parentId='v0.15.72-0a5d9436e06e2d9e'
+$parentSha='0a5d9436e06e2d9e7cf9179417465955d8ca5ba88655b13dd019190243c1cc90'
+$parentGen='aec7b998306a3bbbcc59088648e7bc46ca7e203d749d4550b5b5f372032f92b0'
+$parentTarball='15ab5d9808cbca342aee3f64c6d1123e8fbb72964674eab460e355c8675bf84d'
+$nativeNode='C:\Program Files\nodejs\node.exe'
+$node=if(Test-Path -LiteralPath $nativeNode -PathType Leaf){$nativeNode}else{(Get-Command node -ErrorAction Stop).Source}
+function Sha([string]$file){
+    $sha=[Security.Cryptography.SHA256]::Create()
+    try{$stream=[IO.File]::OpenRead($file);try{return ([BitConverter]::ToString($sha.ComputeHash($stream))).Replace('-','').ToLowerInvariant()}finally{$stream.Dispose()}}finally{$sha.Dispose()}
+}
+function Need([bool]$condition,[string]$message){if(-not $condition){throw $message}}
+function Run-Node([string]$label,[string[]]$nodeArgs){
+    Need ($null -ne $nodeArgs -and $nodeArgs.Count -gt 0) "R194_${label}_NO_NODE_ARGUMENTS"
+    Write-Output "R194_STAGE_START=$label"
+    $global:LASTEXITCODE=0
+    & $node @nodeArgs
+    $exit=$global:LASTEXITCODE
+    if($exit -ne 0){throw "R194_${label}_FAILED exit=$exit"}
+    Write-Output "R194_STAGE_PASS=$label"
+}
+Push-Location $repo
+$previousExpectedDevelopmentRoot=$env:DEADBYTE_EXPECTED_DEVELOPMENT_ROOT
+try{
+    $pkg=Get-Content -LiteralPath 'package.json' -Raw | ConvertFrom-Json
+    $release=Get-Content -LiteralPath 'RELEASE.json' -Raw | ConvertFrom-Json
+    Need (-not [string]::IsNullOrWhiteSpace([string]$release.r194.development_policy_root)) 'R194_DEVELOPMENT_PROVENANCE_ROOT_MISSING'
+    $env:DEADBYTE_EXPECTED_DEVELOPMENT_ROOT=[IO.Path]::GetFullPath([string]$release.r194.development_policy_root)
+    Need ($pkg.version -eq '0.15.74' -and $release.version -eq '0.15.74' -and $release.train -eq 'R194') 'R194_CANDIDATE_VERSION_DRIFT'
+    Need ($release.source_predecessor.version -eq '0.15.73' -and $release.source_predecessor.train -eq 'R193') 'R194_SOURCE_PREDECESSOR_VERSION_DRIFT'
+    Need ($release.source_predecessor.manifest_sha256 -eq 'e0b3f8b333f1c1260a97b178d1a8beff5742355296a9fe7daba378612604a3bd' -and $release.source_predecessor.tarball_sha256 -eq '13c3dd23a535609aa53173b328c7d9299d5dcada684f3253a88af6a4b300c534') 'R194_SOURCE_PREDECESSOR_IDENTITY_DRIFT'
+    Need ($release.runtime_predecessor.release_id -eq $parentId -and $release.runtime_predecessor.manifest_sha256 -eq $parentSha -and $release.runtime_predecessor.generation_manifest_sha256 -eq $parentGen) 'R194_RUNTIME_PREDECESSOR_IDENTITY_DRIFT'
+    $active=Get-Content -LiteralPath (Join-Path $productionState 'active-release.json') -Raw | ConvertFrom-Json
+    Need ($active.version -eq '0.15.72' -and $active.release_id -eq $parentId -and $active.manifest_sha256 -eq $parentSha -and $active.generation_manifest_sha256 -eq $parentGen) 'R194_ACTIVE_RUNTIME_DRIFT'
+    Need ((Sha (Join-Path $active.release_root 'MANIFEST.SHA256')) -eq $parentSha) 'R194_ACTIVE_MANIFEST_MISMATCH'
+    Write-Output 'R194_PREDECESSOR_PREFLIGHT=PASS'
+    if($Stage -eq 'preflight'){return}
+    if($Stage -in @('focused','all')){
+        $focused=@(
+            'test/r70-owner-approval.test.mjs',
+            'test/r89-privileged-install-boundary.test.mjs',
+            'test/r186-controller-owner-grant.test.mjs',
+            'test/r186-owner-consent-preflight.test.mjs',
+            'test/r186-owner-enrollment.test.mjs',
+            'test/r186-owner-grant-broker.test.mjs',
+            'test/r186-owner-local-signing.test.mjs',
+            'test/r186-owner-request.test.mjs',
+            'test/r186-owner-review-export.test.mjs',
+            'test/r188-owner-uac.test.mjs',
+            'test/r188-uac-boundary.test.mjs',
+            'test/r193-limited-migration-contract.test.mjs',
+            'test/r193-live-owner-subject.test.mjs',
+            'test/r193-native-process-observer.test.mjs',
+            'test/r193-native-token.test.mjs',
+            'test/r193-owner-enrollment-entrypoint.test.mjs',
+            'test/r193-owner-secret-acl.test.mjs',
+            'test/r193-owner-uac-broker.test.mjs',
+            'test/r193-owner-uac-entrypoint.test.mjs',
+            'test/r193-release-readiness.test.mjs',
+            'test/r193-release-identity.test.mjs',
+            'test/r194-release-identity.test.mjs',
+            'test/r194-release-readiness.test.mjs',
+            'test/r193-uac-r70-bridge.test.mjs',
+            'test/r194-windows-gate.test.mjs',
+            'test/r194-npm-auth-recovery.test.mjs',
+            'test/r194-npm-preauth.test.mjs'
+        )
+        Run-Node -label 'focused' -nodeArgs (@('--test','--test-reporter=tap','--test-concurrency=1')+$focused)
+        if($Stage -eq 'focused'){return}
+    }
+    if($Stage -in @('full','all')){
+        $previousCrossVolume=$env:DEADBYTE_TEST_CROSS_VOLUME_ROOT
+        $tempDrive=[IO.Path]::GetPathRoot([IO.Path]::GetFullPath($env:TEMP))
+        $scratchDrive=if($tempDrive -ieq 'D:\'){'C:\'}else{'D:\'}
+        Need (Test-Path -LiteralPath $scratchDrive -PathType Container) 'R194_CROSS_VOLUME_DRIVE_UNAVAILABLE'
+        $crossVolume=Join-Path $scratchDrive 'DEADBYTE-R194-CrossVolume'
+        try{
+            [IO.Directory]::CreateDirectory($crossVolume)|Out-Null
+            $env:DEADBYTE_TEST_CROSS_VOLUME_ROOT=$crossVolume
+            Run-Node -label 'full' -nodeArgs @('--test','--test-reporter=tap','--test-concurrency=4','test/*.test.mjs')
+        }finally{$env:DEADBYTE_TEST_CROSS_VOLUME_ROOT=$previousCrossVolume}
+        if($Stage -eq 'full'){return}
+    }
+    if($Stage -in @('manifest','all')){
+        Run-Node -label 'manifest' -nodeArgs @('scripts/release-manifest.mjs','verify')
+        if($Stage -eq 'manifest'){return}
+    }
+    if($Stage -in @('doctor','all')){
+        $previousStateRoot=$env:DEADBYTE_STATE_ROOT
+        $isolated=Join-Path $env:TEMP ('deadbyte-r194-doctor-'+[guid]::NewGuid().ToString('N'))
+        try{
+            [IO.Directory]::CreateDirectory($isolated)|Out-Null
+            $env:DEADBYTE_STATE_ROOT=$isolated
+            Run-Node -label 'isolated_doctor' -nodeArgs @('src/deadbyte-cli.mjs','doctor')
+        }finally{
+            $env:DEADBYTE_STATE_ROOT=$previousStateRoot
+            Remove-Item -LiteralPath $isolated -Recurse -Force -ErrorAction SilentlyContinue
+        }
+    }
+    Write-Output 'R194_WINDOWS_CANDIDATE_GATE=PASS_PREPUBLICATION'
+}finally{
+    $env:DEADBYTE_EXPECTED_DEVELOPMENT_ROOT=$previousExpectedDevelopmentRoot
+    Pop-Location
+}

package/scripts/npm-interactive-r194.mjs

@@ -0,0 +1,13 @@
+// R194 publication failure boundary: do not infer auth failure from a generic 404.
+// Only an explicit npm auth code, or the exact npm registry PUT permission refusal,
+// can be treated as a definitively rejected submission.
+const AUTH_CODE = /(?:^|\s)(?:E401|E403|EOTP|ENEEDAUTH|EAUTH)(?:\s|$)/i;
+const PERMISSION = /(?:you do not have permission to access it|you (?:don't|do not) have permission to publish|permission denied|forbidden|not authorized)/i;
+const REGISTRY_PUT = /\b404\s+Not\s+Found\s+-\s+PUT\s+https:\/\/registry\.npmjs\.org\/deadbyte-mcp(?:\s|\?|\b)/i;
+export function classifyNpmPublishFailure({exitCode,output}={}){
+ if(exitCode===0)return 'SUBMISSION_ACCEPTED';
+ const text=typeof output==='string'?output.slice(-65536):'';
+ if(AUTH_CODE.test(text))return 'EAUTH';
+ if(REGISTRY_PUT.test(text)&&PERMISSION.test(text))return 'EAUTH';
+ return 'OUTCOME_UNKNOWN';
+}

package/scripts/npm-publication-r65.mjs

@@ -55,7 +55,7 @@ function result(state,extra={}){return Object.freeze({state,...extra});}
 // The no-clobber claim is the dispatch fence: once it exists, no invocation may
 // submit the same immutable npm version again, even if the first process dies.
 export async function reconcileNpmPublication({recordPath,version,manifestSha256,localBytes,publish,lookup,tags,fetchTarball,
-  timeoutMs=180000,pollMs=1500,sleep=pause,now=()=>performance.now()}){
+  timeoutMs=180000,pollMs=1500,sleep=pause,now=()=>performance.now(),authorizeAuthRetry=null,authorizePublish=null}){
   if(!path.isAbsolute(recordPath)||!/^\d+\.\d+\.\d+$/.test(version)||!HEX64.test(String(manifestSha256))||!Buffer.isBuffer(localBytes)||
     !Number.isSafeInteger(timeoutMs)||timeoutMs<0||timeoutMs>900000||!Number.isSafeInteger(pollMs)||pollMs<1||pollMs>30000||
     [publish,lookup,tags,fetchTarball,sleep,now].some(fn=>typeof fn!=='function'))throw new Error('npm publication reconciliation inputs invalid');
@@ -97,6 +97,14 @@ export async function reconcileNpmPublication({recordPath,version,manifestSha256
   }
   if(!claim){
     if(observed)return observed; // Registry outage: do not submit while identity is unknown.
+    // R194: check authenticated package ownership before creating the irreversible claim.
+    if(authorizePublish!==null){
+      if(typeof authorizePublish!=='function')throw new Error('npm owner preflight invalid');
+      let authorized=false;
+      try{authorized=(await authorizePublish(Object.freeze({version,manifest_sha256:manifestSha256,tarball_sha256:tarballSha256})))===true;}
+      catch{return result('AUTH_REQUIRED',{reason:'owner authentication preflight failed before submission'});}
+      if(!authorized)return result('AUTH_REQUIRED',{reason:'owner authentication preflight is not confirmed'});
+    }
     let created=false;
     try{
       await publishClaim(claimFile,{schema:'deadbyte.npm-publication-claim.r65.v1',version,manifest_sha256:manifestSha256,tarball_sha256:tarballSha256,created_at_utc:new Date().toISOString()});
@@ -114,15 +122,67 @@ export async function reconcileNpmPublication({recordPath,version,manifestSha256
         await publish();
         await event(recordPath,'SUBMISSION_ACCEPTED',{tarball_sha256:tarballSha256});
       }catch(error){
-        const auth=/E401|E403|EOTP|authentication|one-time password|2FA/i.test(String(error?.code??'')+' '+String(error?.message??''));
+        const auth=/E401|E403|EOTP|EAUTH|ENEEDAUTH|authentication|one-time password|2FA/i.test(String(error?.code??'')+' '+String(error?.message??''));
         await event(recordPath,auth?'AUTH_REQUIRED':'OUTCOME_UNKNOWN',{error_code:String(error?.code??'UNKNOWN').slice(0,64)});
         return result(auth?'AUTH_REQUIRED':'OUTCOME_UNKNOWN',{reason:String(error?.code??error?.message??error)});
       }
     }
   }
   const states=await priorState(recordPath);
-  if(states.some(item=>item.state==='AUTH_REQUIRED'))return result('AUTH_REQUIRED');
-  const accepted=states.some(item=>item.state==='SUBMISSION_ACCEPTED');
+  const authRejected=states.some(item=>item.state==='AUTH_REQUIRED');
+  let accepted=states.some(item=>item.state==='SUBMISSION_ACCEPTED');
+  if(authRejected&&!accepted){
+    // An original ambiguous outcome cannot become retryable via a later login.
+    if(states.some(item=>item.state==='OUTCOME_UNKNOWN'))
+      return result('OUTCOME_UNKNOWN',{reason:'submission outcome is ambiguous; original claim retained'});
+    const retryFile=path.join(recordPath,'auth-retry-claim.json');
+    const retry=await readClaim(retryFile);
+    if(retry?.incomplete)return result('OUTCOME_UNKNOWN',{reason:'incomplete auth retry claim'});
+    if(retry){
+      if(retry.schema!=='deadbyte.npm-auth-retry-claim.r194.v1'||retry.version!==version||
+         retry.manifest_sha256!==manifestSha256||retry.tarball_sha256!==tarballSha256)
+        return result('REGISTRY_REJECTED',{reason:'auth retry claim artifact mismatch'});
+      return result('AUTH_REQUIRED',{reason:'one-time auth retry was already dispatched or claimed; do not retry'});
+    }
+    if(typeof authorizeAuthRetry!=='function')return result('AUTH_REQUIRED');
+    let allowed=false;
+    try{
+      allowed=(await authorizeAuthRetry(Object.freeze({
+        version,manifest_sha256:manifestSha256,tarball_sha256:tarballSha256
+      })))===true;
+    }catch{return result('AUTH_REQUIRED',{reason:'fresh authenticated owner check failed'});}
+    if(!allowed)return result('AUTH_REQUIRED',{reason:'authenticated owner preflight not confirmed'});
+    // Re-read registry just before the one-time retry fence.
+    const beforeRetry=await check();
+    if(beforeRetry?.state==='REGISTRY_IDENTITY_VERIFIED'||beforeRetry?.state==='REGISTRY_REJECTED')return beforeRetry;
+    if(beforeRetry?.state==='OUTCOME_UNKNOWN')return beforeRetry;
+    try{
+      await writeExclusive(retryFile,{
+        schema:'deadbyte.npm-auth-retry-claim.r194.v1',version,
+        manifest_sha256:manifestSha256,tarball_sha256:tarballSha256,
+        created_at_utc:new Date().toISOString()
+      });
+    }catch(error){
+      if(error?.code==='EEXIST')return result('AUTH_REQUIRED',{reason:'concurrent auth retry already claimed; do not dispatch'});
+      throw error;
+    }
+    // A durable retry claim is written BEFORE any additional network effect.
+    await event(recordPath,'AUTH_RETRY_STARTED',{tarball_sha256:tarballSha256});
+    try{
+      await publish();
+      await event(recordPath,'SUBMISSION_ACCEPTED',{tarball_sha256:tarballSha256,retry:'auth-only'});
+      accepted=true;
+    }catch(error){
+      const auth=/E401|E403|EOTP|EAUTH|ENEEDAUTH|authentication|one-time password|2FA/i.test(
+        String(error?.code??'')+' '+String(error?.message??''));
+      await event(recordPath,auth?'AUTH_REQUIRED':'OUTCOME_UNKNOWN',{
+        error_code:String(error?.code??'UNKNOWN').slice(0,64),retry:'auth-only'
+      });
+      return result(auth?'AUTH_REQUIRED':'OUTCOME_UNKNOWN',{
+        reason:'one-time auth retry rejected or unverified; retry claim retained'
+      });
+    }
+  }
   const started=now();
   do{
     observed=await check();