deadbyte-mcp 0.15.72 → 0.15.75

package/scripts/r193-evidence-relocate.ps1

@@ -0,0 +1,12 @@
+$ErrorActionPreference='Stop'
+$source='D:\Projects\deadbyte-mcp\development\deadbyte-mcp-r193-owner-uac-dev\R193-STANDARD-TOKEN-PROBE.json'
+$folder='D:\Projects\deadbyte-mcp\testing\r193'
+$dest=Join-Path $folder 'R193-STANDARD-TOKEN-PROBE.json'
+$item=Get-Item -LiteralPath $source -Force -ErrorAction Stop
+if($item.PSIsContainer -or (($item.Attributes -band [IO.FileAttributes]::ReparsePoint) -ne 0)){throw 'R193_UNSAFE_EVIDENCE'}
+$before=(Get-FileHash $source).Hash.ToLowerInvariant()
+if(Test-Path $dest){throw 'R193_DEST_EVIDENCE_ALREADY_EXISTS'}
+New-Item -ItemType Directory -Path $folder -Force -ErrorAction Stop | Out-Null
+Move-Item -LiteralPath $source -Destination $dest -ErrorAction Stop
+if((Get-FileHash $dest).Hash.ToLowerInvariant() -cne $before){throw 'R193_EVIDENCE_MOVE_CHANGED'}
+[pscustomobject]@{schema='deadbyte.r193-evidence-relocate.v1';state='VERIFIED';evidence_path=$dest;sha256=$before;source_absent=(-not(Test-Path $source));production_untouched=$true}|ConvertTo-Json -Compress

package/scripts/r193-focused-gate.mjs

@@ -0,0 +1,20 @@
+import {spawnSync} from 'node:child_process';
+import path from 'node:path';
+import {fileURLToPath} from 'node:url';
+const root=fileURLToPath(new URL('..',import.meta.url));
+const files=[
+ 'test/r188-owner-uac.test.mjs',
+ 'test/r188-uac-boundary.test.mjs',
+ 'test/r193-native-token.test.mjs'
+];
+const result=spawnSync(process.execPath,['--test','--test-concurrency=1',...files],{
+ cwd:root,encoding:'utf8',windowsHide:true,timeout:120000,maxBuffer:1024*1024,shell:false
+});
+const output=(result.stdout??'')+'\n'+(result.stderr??'');
+const summary=output.split(/\r?\n/).filter(x=>/^[ℹ#]\s*(tests|pass|fail|skipped)\s+/.test(x)).slice(-6);
+const pass=result.status===0 && summary.some(x=>/pass\s+9\b/.test(x)) && summary.some(x=>/fail\s+0\b/.test(x));
+console.log(JSON.stringify({schema:'deadbyte.r193-focused-gate.v1',
+ state:pass?'PASS':'FAIL',exit:result.status,summary,
+ output_tail:pass?null:output.slice(-11000),
+ runtime_source:'isolated_R193_only',release_activated:false,authority_granted:false}));
+if(!pass)process.exitCode=1;

package/scripts/r193-import-r188-scripts.ps1

@@ -0,0 +1,14 @@
+$ErrorActionPreference='Stop'
+$from='D:\Projects\deadbyte-mcp\development\deadbyte-mcp-0.15.69-r188-uac-consent'
+$into='D:\Projects\deadbyte-mcp\development\deadbyte-mcp-r193-owner-uac-dev'
+$names=@('scripts\r188-owner-uac-review.ps1','scripts\r188-uac-review-preview.mjs')
+foreach($n in $names){
+ $s=Join-Path $from $n
+ $d=Join-Path $into $n
+ if(Test-Path $d){throw "R193_IMPORT_ALREADY_EXISTS $n"}
+ $item=Get-Item -LiteralPath $s
+ if($item.PSIsContainer -or ($item.Attributes -band [IO.FileAttributes]::ReparsePoint)){throw "R193_UNSAFE_SOURCE $n"}
+ Copy-Item -LiteralPath $s -Destination $d -ErrorAction Stop
+ if((Get-FileHash $s).Hash -cne (Get-FileHash $d).Hash){throw "R193_IMPORT_BYTES_MISMATCH $n"}
+}
+[pscustomobject]@{state='R188_SCRIPTS_IMPORTED';scripts=$names;overwrite=$false;production_untouched=$true}|ConvertTo-Json -Compress

package/scripts/r193-limited-subject-probe.ps1

@@ -0,0 +1,25 @@
+$ErrorActionPreference='Stop'
+$root=[IO.Path]::GetFullPath((Join-Path $PSScriptRoot '..'))
+$exe=Join-Path $root 'bin\deadbyte-owner-token-r193.exe'
+$output=Join-Path $root 'R193-STANDARD-TOKEN-PROBE.json'
+$sha='d554d732872f3d671fd2fb63c11fc0dac1f8cae377259c6d64dd0c5b3762f2b8'
+if((Get-FileHash -LiteralPath $exe -Algorithm SHA256).Hash.ToLowerInvariant() -cne $sha){throw 'R193_NATIVE_BINARY_CHANGED'}
+if(Test-Path -LiteralPath $output){throw 'R193_PROBE_OUTPUT_ALREADY_EXISTS'}
+$json=@(& $exe '--require-standard')
+$exit=$LASTEXITCODE
+if($json.Count -ne 1){throw 'R193_PROBE_OUTPUT_INVALID'}
+$body=($json[0]|ConvertFrom-Json)
+$record=[ordered]@{
+ schema='deadbyte.r193-standard-token-probe.v1'
+ process_report=$body
+ probe_exit=$exit
+ native_binary_sha256=$sha
+ expected_standard=($body.status -eq 'STANDARD_TOKEN_OBSERVED' -and $exit -eq 0)
+ authority_granted=$false
+}
+$text=$record|ConvertTo-Json -Depth 6 -Compress
+$utf8=New-Object Text.UTF8Encoding($false)
+$bytes=$utf8.GetBytes($text)
+$stream=[IO.File]::Open($output,[IO.FileMode]::CreateNew,[IO.FileAccess]::Write,[IO.FileShare]::None)
+try{$stream.Write($bytes,0,$bytes.Length);$stream.Flush($true)}finally{$stream.Dispose()}
+if(-not $record.expected_standard){exit 3}

package/scripts/r193-migrate-runtime-limited.ps1

@@ -0,0 +1,103 @@
+#requires -Version 5.1
+#requires -RunAsAdministrator
+[CmdletBinding()]
+param([switch]$Execute)
+$ErrorActionPreference='Stop';Set-StrictMode -Version Latest
+$root=[IO.Path]::GetFullPath((Join-Path $PSScriptRoot '..'))
+$program=[IO.Path]::GetFullPath($env:ProgramFiles).TrimEnd('\')+'\'
+if(-not ($root.TrimEnd('\')+'\').StartsWith($program,[StringComparison]::OrdinalIgnoreCase)){
+ throw 'R193 Limited migration must run from an R89-protected Program Files package'
+}
+$state='C:\Users\DEADBYTE\.deadbyte-mcp'
+$runtime=Join-Path $state 'runtime'
+$pointer=Get-Content -Raw -LiteralPath (Join-Path $state 'active-release.json')|ConvertFrom-Json
+$manifest=Join-Path $root 'MANIFEST.SHA256'
+if((Get-FileHash $manifest).Hash.ToLowerInvariant() -cne [string]$pointer.manifest_sha256){
+ throw 'R193 Limited migration package is not the exact active release'
+}
+$controller=Join-Path $root 'controller\deadbyte-controller.ps1'
+$native=Join-Path $root 'bin\deadbyte-owner-token-r193.exe'
+$env:DEADBYTE_CONTROLLER_CONFIG=[string]$pointer.config_path
+$env:DEADBYTE_CONTROLLER_RUNTIME_ROOT=$runtime
+function Invoke-Controller([string]$Command,[switch]$Json){
+ $args=@('-NoLogo','-NoProfile','-NonInteractive','-ExecutionPolicy','Bypass','-File',$controller,$Command)
+ if($Json){$args+='-Json'}
+ $raw=@(& 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' @args 2>&1)-join [Environment]::NewLine
+ if($LASTEXITCODE -ne 0){throw "R193 controller $Command failed: $($raw.Substring(0,[Math]::Min(400,$raw.Length)))"}
+ if($Json){return $raw|ConvertFrom-Json}
+ return $raw
+}
+function Token([int]$PidValue){
+ $raw=@(& $native --inspect-pid ([string]$PidValue) 2>&1)-join [Environment]::NewLine
+ if($LASTEXITCODE -ne 0){throw "R193 token inspection failed for PID $PidValue"}
+ return $raw|ConvertFrom-Json
+}
+function AuthorityFingerprint($status,[string]$plane){
+ $p=$status.authority.$plane
+ return '{0}|{1}|{2}|{3}|{4}' -f [bool]$p.configured,[bool]$p.armed,[string]$p.reason,[string]$p.epoch_seq,[string]$p.epoch_sha256
+}
+$before=Invoke-Controller status -Json
+if([string]$before.state -cne 'ONLINE' -or -not $before.supervisor.running){throw 'R193 migration requires ONLINE runtime and verified supervisor'}
+foreach($plane in @('process','coding','autonomous','desktop','host')){
+ if([string]$before.authority.$plane.reason -eq 'unverified'){throw "R193 migration authority $plane is unverified"}
+}
+$plan=[ordered]@{schema='deadbyte.r193-limited-migration-plan.v1';active_release=[string]$pointer.release_id;
+ manifest_sha256=[string]$pointer.manifest_sha256;state='PREFLIGHT_PASS';
+ desktop_will_be_disarmed=$true;other_authority_will_not_be_rearmed=$true;
+ production_mutation_requested=[bool]$Execute}
+if(-not $Execute){$plan|ConvertTo-Json -Depth 5 -Compress;exit 0}
+$transient='DEADBYTE-MCP-R193-Limited-Supervisor'
+$stopped=$false
+try{
+ Invoke-Controller supervisorstop|Out-Null
+ Invoke-Controller stop|Out-Null
+ $stopped=$true
+ $offline=Invoke-Controller status -Json
+ if([string]$offline.state -cne 'OFFLINE'){throw 'R193 migration did not reach OFFLINE'}
+ Start-ScheduledTask -TaskName 'DEADBYTE-MCP-Runtime-Logon'
+ $deadline=[DateTime]::UtcNow.AddSeconds(60)
+ do{
+  Start-Sleep -Milliseconds 500
+  try{$online=Invoke-Controller status -Json}catch{$online=$null}
+ }while(($null -eq $online -or [string]$online.state -cne 'ONLINE') -and [DateTime]::UtcNow -lt $deadline)
+ if($null -eq $online -or [string]$online.state -cne 'ONLINE'){throw 'R193 Limited runtime task did not become ONLINE'}
+ $action=New-ScheduledTaskAction -Execute 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' -Argument ('-NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass -File "'+(Join-Path $state 'bin\DEADBYTE-MCP.ps1')+'" supervisorstart')
+ $principal=New-ScheduledTaskPrincipal -UserId ([Security.Principal.WindowsIdentity]::GetCurrent().Name) -LogonType Interactive -RunLevel Limited
+ Register-ScheduledTask -TaskName $transient -Action $action -Principal $principal -Force|Out-Null
+ Start-ScheduledTask -TaskName $transient
+ $deadline=[DateTime]::UtcNow.AddSeconds(30)
+ do{Start-Sleep -Milliseconds 500;$after=Invoke-Controller status -Json}
+ while(-not $after.supervisor.running -and [DateTime]::UtcNow -lt $deadline)
+ if(-not $after.supervisor.running){throw 'R193 Limited supervisor task did not become RUNNING'}
+ $supervisor=Get-Content -Raw -LiteralPath (Join-Path $runtime 'supervisor.instance.json')|ConvertFrom-Json
+ $tokens=@{
+  bridge=(Token ([int]$after.bridge.pid));core=(Token ([int]$after.core.pid));
+  cloud=(Token ([int]$after.cloud.pid));supervisor=(Token ([int]$supervisor.pid))
+ }
+ foreach($name in @('bridge','core','cloud','supervisor')){
+  $t=$tokens[$name]
+  if($t.elevated -or $t.admin_enabled -or [int]$t.integrity_rid -lt 8192 -or [int]$t.integrity_rid -ge 12288 -or [string]$t.token_type -cne 'primary'){
+   throw "R193 $name did not migrate to a Limited primary token"
+  }
+ }
+ foreach($plane in @('process','coding','host')){
+  if((AuthorityFingerprint $before $plane) -cne (AuthorityFingerprint $after $plane)){
+   throw "R193 migration changed $plane authority"
+  }
+ }
+ if($after.authority.autonomous.armed){throw 'R193 migration unexpectedly armed Autonomous'}
+ if($after.authority.desktop.armed -or [string]$after.authority.desktop.reason -cne 'disarmed'){
+  throw 'R193 migration expected supported stop to leave Desktop DISARMED'
+ }
+ [ordered]@{schema='deadbyte.r193-limited-migration-result.v1';state='MIGRATED_LIMITED';
+  active_release=[string]$pointer.release_id;desktop_reapproval_required=$true;
+  process_preserved=$true;coding_preserved=$true;host_preserved=$true;
+  autonomous_armed=$false;tokens=$tokens}|ConvertTo-Json -Depth 8 -Compress
+}catch{
+ if($stopped){
+  try{Invoke-Controller start|Out-Null;Invoke-Controller supervisorstart|Out-Null}catch{}
+ }
+ throw
+}finally{
+ Unregister-ScheduledTask -TaskName $transient -Confirm:$false -ErrorAction SilentlyContinue
+}

package/scripts/r193-owner-keygen.mjs

@@ -0,0 +1,43 @@
+// One-time protected owner key enrollment. No caller-selected paths.
+import {generateKeyPairSync} from 'node:crypto';
+import {lstat,open,readFile} from 'node:fs/promises';
+import path from 'node:path';
+import {fileURLToPath} from 'node:url';
+import {canonicalJson} from '../src/canonical-json.mjs';
+import {createR186OwnerAnchor} from '../src/r186-owner-anchor.mjs';
+import {inspectTrustedInstallation} from '../src/privileged-install-trust-r89.mjs';
+import {inspectR193OwnerSecretAcl} from '../src/r193-owner-secret-acl.mjs';
+import {parseManifest,verifyManifestTreeExact} from '../src/release-slot.mjs';
+const THIS=fileURLToPath(import.meta.url),ROOT=path.resolve(path.dirname(THIS),'..');
+const OWNER='C:\\Program Files\\DEADBYTE-OwnerAuthority';
+const PRIVATE=path.win32.join(OWNER,'owner-private.der');
+const PUBLIC=path.win32.join(OWNER,'owner-public.pem');
+const ANCHOR=path.win32.join(OWNER,'owner-anchor.json');
+async function exclusive(file,bytes){
+ const handle=await open(file,'wx',0o600);
+ try{await handle.writeFile(bytes);await handle.sync();}finally{await handle.close();}
+}
+async function main(){
+ if(process.platform!=='win32'||process.arch!=='x64')throw Error('R193 owner keygen requires Windows x64');
+ if(process.argv.length!==2)throw Error('R193 owner keygen accepts no arguments');
+ await inspectTrustedInstallation(['C:\\Program Files\\nodejs\\node.exe',THIS,
+  path.join(ROOT,'MANIFEST.SHA256'),path.join(ROOT,'src','r186-owner-anchor.mjs'),
+  path.join(ROOT,'src','r193-owner-secret-acl.mjs'),
+  path.join(ROOT,'src','privileged-install-trust-r89.mjs'),
+  path.join(ROOT,'src','release-slot.mjs')]);
+ const manifest=await readFile(path.join(ROOT,'MANIFEST.SHA256'),'utf8');
+ await verifyManifestTreeExact(ROOT,parseManifest(manifest));
+ const owner=await lstat(OWNER);
+ if(!owner.isDirectory()||owner.isSymbolicLink())throw Error('R193 owner directory is not a real directory');
+ const pair=generateKeyPairSync('ed25519');
+ const privateDer=pair.privateKey.export({format:'der',type:'pkcs8'});
+ const material=createR186OwnerAnchor(pair.publicKey.export({format:'pem',type:'spki'}).toString());
+ await exclusive(PRIVATE,privateDer);
+ await exclusive(PUBLIC,Buffer.from(material.public_key_pem,'utf8'));
+ await exclusive(ANCHOR,Buffer.from(canonicalJson(material.anchor)+'\n','utf8'));
+ const secret=await inspectR193OwnerSecretAcl([OWNER,PRIVATE]);
+ process.stdout.write(JSON.stringify({status:'R193_OWNER_AUTHORITY_ENROLLED',
+  owner_key_id:material.anchor.owner_key_id,secret_acl:secret.reason,
+  private_key_exported:false,authority_granted:false})+'\n');
+}
+main().catch(error=>{console.error(String(error?.message??error).slice(0,500));process.exitCode=2;});

package/scripts/r193-owner-request-live.mjs

@@ -0,0 +1,49 @@
+// Protected, fixed-scope request generation after Limited migration.
+import {createHash} from 'node:crypto';
+import {lstat,open,readFile} from 'node:fs/promises';
+import path from 'node:path';
+import {fileURLToPath} from 'node:url';
+import {canonicalJson} from '../src/canonical-json.mjs';
+import {inspectTrustedInstallation} from '../src/privileged-install-trust-r89.mjs';
+import {parseManifest,verifyManifestTreeExact} from '../src/release-slot.mjs';
+import {createR188OwnerUacRequest} from '../src/r188-owner-uac.mjs';
+import {createR193LiveMachineEpoch} from '../src/r193-live-owner-subject.mjs';
+import {observeCanonicalController} from '../src/r195-canonical-owner-observation.mjs';
+import {execFile} from 'node:child_process';
+import {promisify} from 'node:util';
+const execFileAsync=promisify(execFile);
+const THIS=fileURLToPath(import.meta.url),ROOT=path.resolve(path.dirname(THIS),'..');
+const STATE='C:\\Users\\DEADBYTE\\.deadbyte-mcp',RUNTIME=path.win32.join(STATE,'runtime');
+const PS='C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe';
+const sha=b=>createHash('sha256').update(b).digest('hex');
+async function bounded(file,limit){const s=await lstat(file);if(!s.isFile()||s.isSymbolicLink()||s.size<1||s.size>limit)throw Error('R193 request input unsafe');return readFile(file);}
+async function main(){
+ if(process.platform!=='win32'||process.arch!=='x64'||process.argv.length!==2)throw Error('R193 live request accepts no arguments');
+ const manifestPath=path.join(ROOT,'MANIFEST.SHA256');
+ await inspectTrustedInstallation(['C:\\Program Files\\nodejs\\node.exe',THIS,manifestPath,
+  path.join(ROOT,'src','r188-owner-uac.mjs'),path.join(ROOT,'src','r193-live-owner-subject.mjs'),
+  path.join(ROOT,'src','r195-canonical-owner-observation.mjs'),
+  path.join(ROOT,'src','privileged-install-trust-r89.mjs')]);
+ const manifestBytes=await bounded(manifestPath,1024*1024);
+ await verifyManifestTreeExact(ROOT,parseManifest(manifestBytes.toString('utf8')));
+ const pointer=JSON.parse((await bounded(path.win32.join(STATE,'active-release.json'),64*1024)).toString('utf8'));
+ if(pointer.manifest_sha256!==sha(manifestBytes))throw Error('R193 request package is not exact active release');
+ const codingBytes=await bounded(path.win32.join(pointer.generation_root,'coding-policy.json'),1024*1024);
+ const autonomousBytes=await bounded(path.win32.join(pointer.generation_root,'autonomous-policy.json'),1024*1024);
+ const coding=JSON.parse(codingBytes),autonomous=JSON.parse(autonomousBytes);
+ if(!coding.roots?.core?.path||!Array.isArray(autonomous.root_ids)||autonomous.root_ids.length!==1||autonomous.root_ids[0]!=='core')
+  throw Error('R193 request policy root is not the bounded core project');
+ const env={...process.env,DEADBYTE_CONTROLLER_CONFIG:pointer.config_path,DEADBYTE_CONTROLLER_RUNTIME_ROOT:RUNTIME};
+ const observation=await observeCanonicalController({stateRoot:STATE,powershell:PS,env,execFileAsync});
+ if(observation.state!=='ONLINE'||!observation.supervisor?.running)throw Error('R193 request requires ONLINE Limited runtime');
+ const machineEpoch=createR193LiveMachineEpoch({activePointer:pointer,controllerObservation:observation});
+ const request=createR188OwnerUacRequest({machineEpoch,releaseManifestSha256:sha(manifestBytes),
+  codingPolicySha256:sha(codingBytes),autonomousPolicySha256:sha(autonomousBytes),
+  rootId:'core',projectRoot:coding.roots.core.path,maxSeconds:600,now:new Date(),expiresInMs:300000});
+ const out=path.win32.join(RUNTIME,'owner-consent','r193-request-'+request.request_sha256+'.json');
+ const handle=await open(out,'wx',0o600);try{await handle.writeFile(canonicalJson(request)+'\n');await handle.sync();}finally{await handle.close();}
+ process.stdout.write(JSON.stringify({status:'R193_OWNER_REQUEST_CREATED',request_path:out,
+  request_sha256:request.request_sha256,review_phrase:request.review_phrase,
+  expires_at_utc:request.subject.expires_at_utc,authority_granted:false})+'\n');
+}
+main().catch(error=>{console.error(String(error?.message??error).slice(0,500));process.exitCode=2;});

package/scripts/r193-owner-uac-approve.ps1

@@ -0,0 +1,42 @@
+#requires -Version 5.1
+#requires -RunAsAdministrator
+[CmdletBinding()]
+param([Parameter(Mandatory=$true)][string]$RequestPath)
+$ErrorActionPreference='Stop';Set-StrictMode -Version Latest
+$root=[IO.Path]::GetFullPath((Join-Path $PSScriptRoot '..'))
+$program=[IO.Path]::GetFullPath($env:ProgramFiles).TrimEnd('\')+'\'
+if(-not ($root.TrimEnd('\')+'\').StartsWith($program,[StringComparison]::OrdinalIgnoreCase)){
+ throw 'R193 owner broker must run from an R89-protected Program Files package'
+}
+if(-not [Environment]::UserInteractive){throw 'R193 owner approval requires an interactive desktop'}
+$node='C:\Program Files\nodejs\node.exe'
+$broker=Join-Path $root 'scripts\r193-owner-uac-broker.mjs'
+$request=[IO.Path]::GetFullPath($RequestPath)
+$raw=@(& $node $broker preflight $request 2>&1) -join [Environment]::NewLine
+if($LASTEXITCODE -ne 0){throw ('R193 preflight blocked: '+$raw.Substring(0,[Math]::Min(500,$raw.Length)))}
+$preview=$raw|ConvertFrom-Json
+if([string]$preview.status -cne 'READY_FOR_OWNER_GESTURE' -or $preview.authority_granted -or $preview.owner_approved){
+ throw 'R193 owner preflight returned an invalid state'
+}
+Write-Host '';Write-Host 'DEADBYTE R193 / OWNER AUTONOMOUS APPROVAL' -ForegroundColor Yellow
+Write-Host 'This signs one short-lived exact request. It does not itself arm Autonomous.'
+Write-Host ('Request SHA-256: '+[string]$preview.request_sha256)
+Write-Host ('Project: '+[string]$preview.project_root)
+Write-Host ('Operation: '+[string]$preview.operation)
+Write-Host ('Duration cap seconds: '+[string]$preview.max_seconds)
+Write-Host ('Expires UTC: '+[string]$preview.expires_at_utc)
+$phrase=[string]$preview.review_phrase
+$entered=Read-Host ('Type '+$phrase+' to approve this exact request')
+if($entered -cne $phrase){throw 'R193 owner rejected request'}
+$owner='C:\Program Files\DEADBYTE-OwnerAuthority'
+if(-not(Test-Path -LiteralPath $owner -PathType Container)){throw 'R193 owner authority is not enrolled'}
+$gesture=[ordered]@{schema='deadbyte.r193-owner-gesture.v1';status='APPROVED';
+ request_sha256=[string]$preview.request_sha256;review_phrase=$phrase;
+ approved_at_utc=[DateTime]::UtcNow.ToString('o')}
+$gesturePath=Join-Path $owner ('gesture-'+[string]$preview.request_sha256+'.json')
+$bytes=(New-Object Text.UTF8Encoding($false)).GetBytes(($gesture|ConvertTo-Json -Compress)+[Environment]::NewLine)
+$stream=[IO.File]::Open($gesturePath,[IO.FileMode]::CreateNew,[IO.FileAccess]::Write,[IO.FileShare]::None)
+try{$stream.Write($bytes,0,$bytes.Length);$stream.Flush($true)}finally{$stream.Dispose()}
+$out=@(& $node $broker approve $request 2>&1) -join [Environment]::NewLine
+if($LASTEXITCODE -ne 0){throw ('R193 signing blocked: '+$out.Substring(0,[Math]::Min(500,$out.Length)))}
+Write-Output $out

package/scripts/r193-owner-uac-broker.mjs

@@ -0,0 +1,139 @@
+// Protected R193 owner broker. This entrypoint is intentionally fixed to the
+// local DEADBYTE state and owner-authority roots; callers choose only an exact
+// request file. It never issues authority. The R186 transaction remains the
+// sole grant/epoch mutation boundary.
+import {createHash,createPrivateKey,createPublicKey} from 'node:crypto';
+import {execFile} from 'node:child_process';
+import {promisify} from 'node:util';
+import {lstat,mkdir,open,readFile} from 'node:fs/promises';
+import path from 'node:path';
+import {fileURLToPath} from 'node:url';
+import {canonicalJson} from '../src/canonical-json.mjs';
+import {inspectTrustedInstallation} from '../src/privileged-install-trust-r89.mjs';
+import {parseManifest,verifyManifestTreeExact} from '../src/release-slot.mjs';
+import {buildR193LiveOwnerBoundary} from '../src/r193-live-owner-subject.mjs';
+import {approveR193OwnerRequest} from '../src/r193-owner-uac-broker.mjs';
+import {createR186OwnerAnchor} from '../src/r186-owner-anchor.mjs';
+import {inspectR193OwnerSecretAcl} from '../src/r193-owner-secret-acl.mjs';
+import {observeCanonicalController} from '../src/r195-canonical-owner-observation.mjs';
+
+const execFileAsync=promisify(execFile);
+const THIS=fileURLToPath(import.meta.url),ROOT=path.resolve(path.dirname(THIS),'..');
+const STATE='C:\\Users\\DEADBYTE\\.deadbyte-mcp';
+const RUNTIME=path.win32.join(STATE,'runtime');
+const OWNER='C:\\Program Files\\DEADBYTE-OwnerAuthority';
+const PRIVATE=path.win32.join(OWNER,'owner-private.der');
+const PUBLIC=path.win32.join(OWNER,'owner-public.pem');
+const ANCHOR=path.win32.join(OWNER,'owner-anchor.json');
+const NATIVE=path.join(ROOT,'bin','deadbyte-owner-token-r193.exe');
+const PS='C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe';
+const NODE='C:\\Program Files\\nodejs\\node.exe';
+const sha=bytes=>createHash('sha256').update(bytes).digest('hex');
+const block=reason=>{throw new Error('R193_OWNER_UAC_BROKER_BLOCKED: '+reason);};
+async function bounded(file,limit){
+ const stat=await lstat(file);
+ if(!stat.isFile()||stat.isSymbolicLink()||stat.size<1||stat.size>limit)block('unsafe input: '+path.basename(file));
+ return readFile(file);
+}
+async function exclusive(file,bytes){
+ await mkdir(path.dirname(file),{recursive:true});
+ const handle=await open(file,'wx',0o600);
+ try{await handle.writeFile(bytes);await handle.sync();}finally{await handle.close();}
+}
+async function exactOrWrite(file,bytes){
+ try{await exclusive(file,bytes);return 'CREATED';}
+ catch(error){
+  if(error?.code!=='EEXIST')throw error;
+  if(!(await readFile(file)).equals(bytes))block('existing output differs: '+path.basename(file));
+  return 'ALREADY_EXACT';
+ }
+}
+async function jsonExec(file,args,options={}){
+ const {stdout}=await execFileAsync(file,args,{windowsHide:true,timeout:20000,
+  maxBuffer:1024*1024,encoding:'utf8',...options});
+ try{return JSON.parse(stdout);}catch{block('invalid JSON from protected child');}
+}
+async function uacPolicy(){
+ const command=`$p=Get-ItemProperty -LiteralPath 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System';[pscustomobject]@{enable_uac=([int]$p.EnableLUA -eq 1);secure_desktop=([int]$p.PromptOnSecureDesktop -eq 1);prompt_mode=$(if([int]$p.ConsentPromptBehaviorAdmin -eq 0){'silent'}else{'explicit_secure_desktop'})}|ConvertTo-Json -Compress`;
+ return jsonExec(PS,['-NoLogo','-NoProfile','-NonInteractive','-Command',command]);
+}
+async function live(request){
+ const manifestPath=path.join(ROOT,'MANIFEST.SHA256');
+ const protectedFiles=[NODE,THIS,manifestPath,NATIVE,
+  path.join(ROOT,'src','r193-live-owner-subject.mjs'),
+  path.join(ROOT,'src','r193-owner-uac-broker.mjs'),
+  path.join(ROOT,'src','r195-canonical-owner-observation.mjs'),
+  path.join(ROOT,'src','r193-uac-r70-bridge.mjs'),
+  path.join(ROOT,'src','r193-owner-secret-acl.mjs'),
+  path.join(ROOT,'src','r188-owner-uac.mjs'),
+  path.join(ROOT,'src','r70-owner-approval.mjs'),
+  path.join(ROOT,'src','canonical-json.mjs'),
+  path.join(ROOT,'src','privileged-install-trust-r89.mjs'),
+  path.join(ROOT,'src','release-slot.mjs')];
+ const installation=await inspectTrustedInstallation(protectedFiles);
+ const manifestBytes=await bounded(manifestPath,1024*1024);
+ await verifyManifestTreeExact(ROOT,parseManifest(manifestBytes.toString('utf8')));
+ const pointer=JSON.parse((await bounded(path.win32.join(STATE,'active-release.json'),64*1024)).toString('utf8'));
+ if(pointer.manifest_sha256!==sha(manifestBytes))block('protected package is not exact active release');
+ const generation=pointer.generation_root;
+ const codingPath=path.win32.join(generation,'coding-policy.json');
+ const autonomousPath=path.win32.join(generation,'autonomous-policy.json');
+ const configPath=pointer.config_path;
+ const env={...process.env,DEADBYTE_CONTROLLER_CONFIG:configPath,
+  DEADBYTE_CONTROLLER_RUNTIME_ROOT:RUNTIME};
+ const observation=await observeCanonicalController({stateRoot:STATE,powershell:PS,env,execFileAsync});
+ const supervisor=JSON.parse((await bounded(path.win32.join(RUNTIME,'supervisor.instance.json'),64*1024)).toString('utf8'));
+ const sources={bridge:observation.bridge,core:observation.core,cloud:observation.cloud,supervisor};
+ const processReports={};
+ for(const component of ['bridge','core','cloud','supervisor'])
+  processReports[component]=await jsonExec(NATIVE,['--inspect-pid',String(sources[component]?.pid)]);
+ const [codingPolicyBytes,autonomousPolicyBytes,uac]=await Promise.all([
+  bounded(codingPath,1024*1024),bounded(autonomousPath,1024*1024),uacPolicy()]);
+ const built=buildR193LiveOwnerBoundary({request,activePointer:pointer,installedManifestBytes:manifestBytes,
+  codingPolicyBytes,autonomousPolicyBytes,controllerObservation:observation,
+  supervisorLedger:supervisor,processReports,brokerR89Trusted:installation.trusted,
+  keyAclTrusted:false,uac,ownerGesture:'pending',now:new Date()});
+ return {...built,pointer,manifestBytes,codingPolicyBytes,autonomousPolicyBytes,uac};
+}
+async function main(){
+ if(process.platform!=='win32'||process.arch!=='x64')block('Windows x64 required');
+ const [mode,requestPath]=process.argv.slice(2);
+ if(!['preflight','approve'].includes(mode)||process.argv.slice(2).length!==2||
+    !path.win32.isAbsolute(requestPath))block('usage: <preflight|approve> <absolute-request-json>');
+ await inspectTrustedInstallation([NODE,THIS,path.join(ROOT,'MANIFEST.SHA256'),NATIVE]);
+ const request=JSON.parse((await bounded(requestPath,64*1024)).toString('utf8'));
+ const state=await live(request);
+ if(mode==='preflight'){
+  process.stdout.write(JSON.stringify({status:'READY_FOR_OWNER_GESTURE',
+   request_sha256:request.request_sha256,review_phrase:request.review_phrase,
+   project_root:request.subject.project_root,operation:request.subject.operation,
+   max_seconds:request.subject.max_seconds,expires_at_utc:request.subject.expires_at_utc,
+   authority_granted:false,owner_approved:false})+'\n');
+  return;
+ }
+ const gesturePath=path.win32.join(OWNER,'gesture-'+request.request_sha256+'.json');
+ const gesture=JSON.parse((await bounded(gesturePath,16*1024)).toString('utf8'));
+ if(gesture?.schema!=='deadbyte.r193-owner-gesture.v1'||gesture?.status!=='APPROVED'||
+    gesture?.request_sha256!==request.request_sha256||gesture?.review_phrase!==request.review_phrase||
+    typeof gesture?.approved_at_utc!=='string'||Date.now()-Date.parse(gesture.approved_at_utc)<0||
+    Date.now()-Date.parse(gesture.approved_at_utc)>60000)block('owner gesture missing, stale or mismatched');
+ const secret=await inspectR193OwnerSecretAcl([OWNER,PRIVATE]);
+ const [privateKeyDer,publicPem,anchorBytes]=await Promise.all([
+  bounded(PRIVATE,8192),bounded(PUBLIC,8192),bounded(ANCHOR,4096)]);
+ const privateKey=createPrivateKey({key:privateKeyDer,format:'der',type:'pkcs8'});
+ const derived=createR186OwnerAnchor(createPublicKey(privateKey).export({format:'pem',type:'spki'}).toString());
+ const anchor=JSON.parse(anchorBytes.toString('utf8'));
+ if(derived.public_key_pem!==publicPem.toString('utf8')||
+    canonicalJson(derived.anchor)!==canonicalJson(anchor))block('owner key enrollment mismatch');
+ const result=approveR193OwnerRequest({request,expected:state.expected,privateKeyDer,
+  boundary:{...state.boundary,key_acl_trusted:secret.trusted,owner_gesture:'approved'},now:new Date()});
+ const bytes=Buffer.from(canonicalJson(result.approval)+'\n','utf8');
+ const protectedApproval=path.win32.join(OWNER,'approval-'+request.request_sha256+'.json');
+ const runtimeApproval=path.win32.join(RUNTIME,'owner-consent','autonomous-approval.json');
+ const protected_state=await exactOrWrite(protectedApproval,bytes);
+ const runtime_state=await exactOrWrite(runtimeApproval,bytes);
+ process.stdout.write(JSON.stringify({...result,approval:undefined,protected_state,runtime_state,
+  protected_approval_sha256:sha(bytes),protected_approval_path:protectedApproval,
+  runtime_approval_path:runtimeApproval})+'\n');
+}
+main().catch(error=>{console.error(String(error?.message??error).slice(0,600));process.exitCode=2;});

package/scripts/r193-owner-uac-enroll-and-approve.ps1

@@ -0,0 +1,62 @@
+#requires -Version 5.1
+#requires -RunAsAdministrator
+[CmdletBinding()]
+param([Parameter(Mandatory=$true)][string]$RequestPath)
+$ErrorActionPreference='Stop';Set-StrictMode -Version Latest
+$root=[IO.Path]::GetFullPath((Join-Path $PSScriptRoot '..'))
+$program=[IO.Path]::GetFullPath($env:ProgramFiles).TrimEnd('\')+'\'
+if(-not ($root.TrimEnd('\')+'\').StartsWith($program,[StringComparison]::OrdinalIgnoreCase)){
+ throw 'R193 enrollment must run from an R89-protected Program Files package'
+}
+if(-not [Environment]::UserInteractive){throw 'R193 enrollment requires an interactive owner desktop'}
+$node='C:\Program Files\nodejs\node.exe'
+$broker=Join-Path $root 'scripts\r193-owner-uac-broker.mjs'
+$keygen=Join-Path $root 'scripts\r193-owner-keygen.mjs'
+$request=[IO.Path]::GetFullPath($RequestPath)
+$raw=@(& $node $broker preflight $request 2>&1) -join [Environment]::NewLine
+if($LASTEXITCODE -ne 0){throw ('R193 enrollment preflight blocked: '+$raw.Substring(0,[Math]::Min(500,$raw.Length)))}
+$preview=$raw|ConvertFrom-Json
+if([string]$preview.status -cne 'READY_FOR_OWNER_GESTURE' -or $preview.authority_granted -or $preview.owner_approved){
+ throw 'R193 enrollment preflight returned an invalid state'
+}
+Write-Host '';Write-Host 'DEADBYTE R193 / ENROLL OWNER AUTHORITY' -ForegroundColor Yellow
+Write-Host 'A new owner-only Ed25519 identity will be created under Program Files.'
+Write-Host 'Limited DEADBYTE processes will not be able to read or use the private key.'
+Write-Host ('Request SHA-256: '+[string]$preview.request_sha256)
+Write-Host ('Project: '+[string]$preview.project_root)
+Write-Host ('Duration cap seconds: '+[string]$preview.max_seconds)
+$phrase=[string]$preview.review_phrase
+$entered=Read-Host ('Type '+$phrase+' to enroll and approve this exact request')
+if($entered -cne $phrase){throw 'R193 owner rejected enrollment'}
+$owner='C:\Program Files\DEADBYTE-OwnerAuthority'
+if(Test-Path -LiteralPath $owner){throw 'R193 owner authority already exists; use the approval-only workflow'}
+$admins=New-Object Security.Principal.SecurityIdentifier('S-1-5-32-544')
+$system=New-Object Security.Principal.SecurityIdentifier('S-1-5-18')
+$inherit=[Security.AccessControl.InheritanceFlags]'ContainerInherit, ObjectInherit'
+$none=[Security.AccessControl.PropagationFlags]::None
+$allow=[Security.AccessControl.AccessControlType]::Allow
+New-Item -ItemType Directory -Path $owner -ErrorAction Stop | Out-Null
+$acl=New-Object Security.AccessControl.DirectorySecurity
+$acl.SetAccessRuleProtection($true,$false);$acl.SetOwner($admins)
+$acl.AddAccessRule((New-Object Security.AccessControl.FileSystemAccessRule($admins,'FullControl',$inherit,$none,$allow)))
+$acl.AddAccessRule((New-Object Security.AccessControl.FileSystemAccessRule($system,'FullControl',$inherit,$none,$allow)))
+Set-Acl -LiteralPath $owner -AclObject $acl
+# Keygen requires the directory to exist with its final ACL. It never accepts a
+# target path and creates every key file with CreateNew/no-clobber semantics.
+$keyRaw=@(& $node $keygen 2>&1) -join [Environment]::NewLine
+if($LASTEXITCODE -ne 0){throw ('R193 protected key enrollment blocked: '+$keyRaw.Substring(0,[Math]::Min(500,$keyRaw.Length)))}
+$keyResult=$keyRaw|ConvertFrom-Json
+if([string]$keyResult.status -cne 'R193_OWNER_AUTHORITY_ENROLLED' -or $keyResult.private_key_exported -or $keyResult.authority_granted){
+ throw 'R193 key enrollment returned an invalid state'
+}
+Write-Host ('Owner key fingerprint: '+[string]$keyResult.owner_key_id) -ForegroundColor Yellow
+$gesture=[ordered]@{schema='deadbyte.r193-owner-gesture.v1';status='APPROVED';
+ request_sha256=[string]$preview.request_sha256;review_phrase=$phrase;
+ approved_at_utc=[DateTime]::UtcNow.ToString('o')}
+$gesturePath=Join-Path $owner ('gesture-'+[string]$preview.request_sha256+'.json')
+$bytes=(New-Object Text.UTF8Encoding($false)).GetBytes(($gesture|ConvertTo-Json -Compress)+[Environment]::NewLine)
+$stream=[IO.File]::Open($gesturePath,[IO.FileMode]::CreateNew,[IO.FileAccess]::Write,[IO.FileShare]::None)
+try{$stream.Write($bytes,0,$bytes.Length);$stream.Flush($true)}finally{$stream.Dispose()}
+$out=@(& $node $broker approve $request 2>&1) -join [Environment]::NewLine
+if($LASTEXITCODE -ne 0){throw ('R193 signing blocked after protected enrollment: '+$out.Substring(0,[Math]::Min(500,$out.Length)))}
+Write-Output $out

package/scripts/r193-test-limited-token.ps1

@@ -0,0 +1,49 @@
+$ErrorActionPreference='Stop'
+$root=[IO.Path]::GetFullPath((Join-Path $PSScriptRoot '..'))
+$probe=Join-Path $root 'scripts\r193-limited-subject-probe.ps1'
+$expectedSha='16317bffb0765e3856a6f64353ef728754e346636161cf2214ec0d0d3e5c7826'
+if((Get-FileHash $probe).Hash.ToLowerInvariant() -cne $expectedSha){throw 'R193_PROBE_SCRIPT_CHANGED'}
+$output=Join-Path $root 'R193-STANDARD-TOKEN-PROBE.json'
+if(Test-Path $output){throw 'R193_EXISTING_OUTPUT - read before retest'}
+$name='DEADBYTE-R193-Limited-Token-Diagnostic'
+if(Get-ScheduledTask -TaskName $name -TaskPath '\' -ErrorAction SilentlyContinue){throw 'R193_TASK_ALREADY_EXISTS'}
+$identity=[Security.Principal.WindowsIdentity]::GetCurrent()
+$account=$identity.Name
+$ps=Join-Path $env:WINDIR 'System32\WindowsPowerShell\v1.0\powershell.exe'
+$arg='-NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass -File "'+$probe+'"'
+$action=New-ScheduledTaskAction -Execute $ps -Argument $arg -WorkingDirectory $root
+$trigger=New-ScheduledTaskTrigger -Once -At ((Get-Date).AddDays(1))
+$principal=New-ScheduledTaskPrincipal -UserId $account -LogonType Interactive -RunLevel Limited
+$settings=New-ScheduledTaskSettingsSet -MultipleInstances IgnoreNew -ExecutionTimeLimit (New-TimeSpan -Minutes 1)
+$registered=$false
+try {
+  $null=Register-ScheduledTask -TaskName $name -Action $action -Trigger $trigger -Principal $principal -Settings $settings -Description 'One-shot R193 native Windows token diagnostic. No grants.' -ErrorAction Stop
+  $registered=$true
+  $task=Get-ScheduledTask -TaskName $name -ErrorAction Stop
+  if([string]$task.Principal.RunLevel -ne 'Limited' -or [string]$task.Principal.LogonType -ne 'Interactive'){throw 'R193_TASK_NOT_LIMITED'}
+  Start-ScheduledTask -TaskName $name -ErrorAction Stop
+  $done=$false
+  for($i=0;$i -lt 28;$i++){
+    Start-Sleep -Milliseconds 700
+    if(Test-Path -LiteralPath $output -PathType Leaf){$done=$true;break}
+  }
+  if(-not $done){throw 'R193_LIMITED_TASK_NO_REPORT'}
+  $report=Get-Content -LiteralPath $output -Raw | ConvertFrom-Json
+  $info=Get-ScheduledTaskInfo -TaskName $name -ErrorAction Stop
+  $pass=($report.expected_standard -eq $true -and $report.process_report.elevated -eq $false -and $report.process_report.admin_enabled -eq $false -and $report.authority_granted -eq $false -and $info.LastTaskResult -eq 0)
+  [pscustomobject]@{
+    schema='deadbyte.r193-limited-token-scheduler-smoke.v1'
+    state=$(if($pass){'PASS'}else{'FAIL'})
+    limited_task=$name
+    scheduled_runlevel=[string]$task.Principal.RunLevel
+    native_subject=$report.process_report
+    task_exit=$info.LastTaskResult
+    source_sha256=$expectedSha
+    no_grant=$true
+    production_untouched=$true
+  }|ConvertTo-Json -Depth 8 -Compress
+  if(-not $pass){throw 'R193_EXPECTED_STANDARD_TOKEN_MISSING'}
+} finally {
+  if($registered){Unregister-ScheduledTask -TaskName $name -TaskPath '\' -Confirm:$false -ErrorAction Stop}
+}
+if(Get-ScheduledTask -TaskName $name -TaskPath '\' -ErrorAction SilentlyContinue){throw 'R193_PROBE_TASK_NOT_REMOVED'}

package/scripts/r193-toolchain-inventory.ps1

@@ -0,0 +1,7 @@
+$ErrorActionPreference='Stop'
+$o=[ordered]@{schema='deadbyte.r193-toolchain.v1';toolchain=@{};disk_free_bytes=[int64](Get-PSDrive D).Free}
+foreach($name in @('cl.exe','clang++.exe','g++.exe','cmake.exe','node.exe','powershell.exe')){
+ $q=Get-Command $name -ErrorAction SilentlyContinue
+ $o.toolchain[$name]=if($null -eq $q){'MISSING'}else{[string]$q.Source}
+}
+$o|ConvertTo-Json -Depth 4 -Compress

package/scripts/r193-uac-bridge-focused.mjs

@@ -0,0 +1,21 @@
+import {spawnSync} from 'node:child_process';
+import {fileURLToPath} from 'node:url';
+const root=fileURLToPath(new URL('..',import.meta.url));
+const files=[
+ 'test/r188-owner-uac.test.mjs',
+ 'test/r188-uac-boundary.test.mjs',
+ 'test/r186-owner-grant-broker.test.mjs',
+ 'test/r193-uac-r70-bridge.test.mjs'
+];
+const r=spawnSync(process.execPath,['--test','--test-concurrency=1',...files],{
+ cwd:root,encoding:'utf8',timeout:150000,maxBuffer:1024*1024,windowsHide:true,shell:false
+});
+const output=(r.stdout??'')+'\n'+(r.stderr??'');
+const get=n=>{const m=[...output.matchAll(new RegExp('(?:^|\\n)[ℹ#]\\s*'+n+'\\s+(\\d+)','g'))];return m.length?Number(m.at(-1)[1]):null;};
+const summary={tests:get('tests'),pass:get('pass'),fail:get('fail'),skipped:get('skipped')};
+const pass=r.status===0&&summary.tests>=12&&summary.fail===0&&summary.pass===summary.tests-summary.skipped;
+console.log(JSON.stringify({schema:'deadbyte.r193-uac-bridge-focused.v1',
+ status:pass?'PASS':'FAIL',exit:r.status,summary,files,
+ no_real_owner_enrollment:true,authority_granted:false,
+ production_untouched:true,tail:pass?null:output.slice(-12000)}));
+if(!pass)process.exitCode=1;

package/scripts/r205-candidate-selection.mjs

@@ -0,0 +1,22 @@
+// Read-only bounded stdin candidate comparison. Does not promote, publish, or grant authority.
+import { evaluateCandidateSelectionR205 } from '../src/candidate-selection-r205.mjs';
+
+const MAX_BYTES=64*1024;
+let length=0;
+const parts=[];
+try{
+  for await (const chunk of process.stdin){
+    length+=chunk.length;
+    if(length>MAX_BYTES)throw Error('R205_INPUT_LIMIT_EXCEEDED');
+    parts.push(chunk);
+  }
+  if(length<1)throw Error('R205_INPUT_EMPTY');
+  const raw=Buffer.concat(parts).toString('utf8');
+  const parsed=JSON.parse(raw);
+  const result=evaluateCandidateSelectionR205(parsed);
+  process.stdout.write(JSON.stringify(result)+'\n');
+  if(result.state!=='PROVISIONAL_CANDIDATE')process.exitCode=2;
+}catch(error){
+  process.stderr.write('R205_SELECTION_REFUSED '+String(error?.message??error)+'\n');
+  process.exitCode=3;
+}