deadbyte-mcp 0.15.74 → 0.15.75

package/scripts/build-native-root-probe-r197.ps1

@@ -0,0 +1,28 @@
+#requires -Version 5.1
+[CmdletBinding()]
+param([Parameter(Mandatory=$true)][ValidatePattern('^[0-9a-f]{64}$')][string]$SourceSha256)
+Set-StrictMode -Version Latest
+$ErrorActionPreference='Stop'
+$repo=Split-Path -Parent $PSScriptRoot
+$src=Join-Path $repo 'native\deadbyte-root-relative-probe-r197.cpp'
+$actual=(Get-FileHash -LiteralPath $src -Algorithm SHA256).Hash.ToLowerInvariant()
+if($actual -cne $SourceSha256){throw 'R197_NATIVE_SOURCE_HASH_DRIFT'}
+$vswhere='C:\Program Files (x86)\Microsoft Visual Studio\Installer\vswhere.exe'
+if(!(Test-Path -LiteralPath $vswhere)){throw 'R197_MSVC_UNAVAILABLE'}
+$install=(& $vswhere -latest -products * -requires Microsoft.VisualStudio.Component.VC.Tools.x86.x64 -property installationPath | Select-Object -First 1)
+if(!$install){throw 'R197_MSVC_TOOLCHAIN_MISSING'}
+$dev=Join-Path $install 'Common7\Tools\VsDevCmd.bat'
+$bin=Join-Path $repo 'bin'
+$exe=Join-Path $bin 'deadbyte-root-relative-probe-r197.exe'
+$obj=Join-Path $bin 'deadbyte-root-relative-probe-r197.obj'
+if(Test-Path -LiteralPath $exe){throw 'R197_NATIVE_OUTPUT_EXISTS'}
+if(Test-Path -LiteralPath $obj){throw 'R197_NATIVE_OBJECT_EXISTS'}
+$common='/nologo /std:c++17 /permissive- /W4 /WX /O2 /MT /EHsc /guard:cf /diagnostics:caret /utf-8 /Brepro /DUNICODE /D_UNICODE /D_WIN32_WINNT=0x0A00'
+$compile='cl {0} "{1}" /Fo:"{2}" /Fe:"{3}" /link /Brepro /INCREMENTAL:NO' -f $common,$src,$obj,$exe
+$cmd=Join-Path $env:SystemRoot 'System32\cmd.exe'
+$line='call "{0}" -no_logo -arch=x64 -host_arch=x64 && {1}' -f $dev,$compile
+& $cmd /d /s /c $line
+if($LASTEXITCODE -ne 0){throw ('R197_NATIVE_COMPILATION_FAIL exit='+$LASTEXITCODE)}
+if(!(Test-Path -LiteralPath $exe -PathType Leaf)){throw 'R197_NATIVE_OUTPUT_MISSING'}
+$hash=(Get-FileHash -LiteralPath $exe -Algorithm SHA256).Hash.ToLowerInvariant()
+Write-Output ('R197_NATIVE_BUILD_PASS exe_sha256='+$hash)

package/scripts/gate-windows-r195.ps1

@@ -0,0 +1,114 @@
+#requires -Version 5.1
+[CmdletBinding()]
+param(
+    [ValidateSet('preflight','focused','full','manifest','doctor','all')][string]$Stage='preflight'
+)
+Set-StrictMode -Version Latest
+$ErrorActionPreference='Stop'
+$repo=Split-Path -Parent $PSScriptRoot
+$productionState=Join-Path $env:USERPROFILE '.deadbyte-mcp'
+$parentId='v0.15.74-e84bf4eed16e9443'
+$parentSha='e84bf4eed16e9443fbd0bf9f0f562e26b01db778647aefcc8b12fd7f48636b47'
+$parentGen='598f896be9ce65e6b0c618e8c8f6eaa2a9d91617a76a146bf3deb385a56d19e7'
+$parentTarball='5da436a3f8068107e74caf6da58ff1e211d4a62f94266853136b601762f36f0c'
+$nativeNode='C:\Program Files\nodejs\node.exe'
+$node=if(Test-Path -LiteralPath $nativeNode -PathType Leaf){$nativeNode}else{(Get-Command node -ErrorAction Stop).Source}
+function Sha([string]$file){
+    $sha=[Security.Cryptography.SHA256]::Create()
+    try{$stream=[IO.File]::OpenRead($file);try{return ([BitConverter]::ToString($sha.ComputeHash($stream))).Replace('-','').ToLowerInvariant()}finally{$stream.Dispose()}}finally{$sha.Dispose()}
+}
+function Need([bool]$condition,[string]$message){if(-not $condition){throw $message}}
+function Run-Node([string]$label,[string[]]$nodeArgs){
+    Need ($null -ne $nodeArgs -and $nodeArgs.Count -gt 0) "R195_${label}_NO_NODE_ARGUMENTS"
+    Write-Output "R195_STAGE_START=$label"
+    $global:LASTEXITCODE=0
+    & $node @nodeArgs
+    $exit=$global:LASTEXITCODE
+    if($exit -ne 0){throw "R195_${label}_FAILED exit=$exit"}
+    Write-Output "R195_STAGE_PASS=$label"
+}
+Push-Location $repo
+$previousExpectedDevelopmentRoot=$env:DEADBYTE_EXPECTED_DEVELOPMENT_ROOT
+try{
+    $pkg=Get-Content -LiteralPath 'package.json' -Raw | ConvertFrom-Json
+    $release=Get-Content -LiteralPath 'RELEASE.json' -Raw | ConvertFrom-Json
+    Need (-not [string]::IsNullOrWhiteSpace([string]$release.r195.development_policy_root)) 'R195_DEVELOPMENT_PROVENANCE_ROOT_MISSING'
+    $env:DEADBYTE_EXPECTED_DEVELOPMENT_ROOT=[IO.Path]::GetFullPath([string]$release.r195.development_policy_root)
+    Need ($pkg.version -eq '0.15.75' -and $release.version -eq '0.15.75' -and $release.train -eq 'R195') 'R195_CANDIDATE_VERSION_DRIFT'
+    Need ($release.source_predecessor.version -eq '0.15.74' -and $release.source_predecessor.train -eq 'R194') 'R195_SOURCE_PREDECESSOR_VERSION_DRIFT'
+    Need ($release.source_predecessor.manifest_sha256 -eq $parentSha -and $release.source_predecessor.tarball_sha256 -eq $parentTarball) 'R195_SOURCE_PREDECESSOR_IDENTITY_DRIFT'
+    Need ($release.runtime_predecessor.release_id -eq $parentId -and $release.runtime_predecessor.manifest_sha256 -eq $parentSha -and $release.runtime_predecessor.generation_manifest_sha256 -eq $parentGen) 'R195_RUNTIME_PREDECESSOR_IDENTITY_DRIFT'
+    $active=Get-Content -LiteralPath (Join-Path $productionState 'active-release.json') -Raw | ConvertFrom-Json
+    Need ($active.version -eq '0.15.74' -and $active.release_id -eq $parentId -and $active.manifest_sha256 -eq $parentSha -and $active.generation_manifest_sha256 -eq $parentGen) 'R195_ACTIVE_RUNTIME_DRIFT'
+    Need ((Sha (Join-Path $active.release_root 'MANIFEST.SHA256')) -eq $parentSha) 'R195_ACTIVE_MANIFEST_MISMATCH'
+    Write-Output 'R195_PREDECESSOR_PREFLIGHT=PASS'
+    if($Stage -eq 'preflight'){return}
+    if($Stage -in @('focused','all')){
+        $focused=@(
+            'test/r70-owner-approval.test.mjs',
+            'test/r89-privileged-install-boundary.test.mjs',
+            'test/r186-controller-owner-grant.test.mjs',
+            'test/r186-owner-consent-preflight.test.mjs',
+            'test/r186-owner-enrollment.test.mjs',
+            'test/r186-owner-grant-broker.test.mjs',
+            'test/r186-owner-local-signing.test.mjs',
+            'test/r186-owner-request.test.mjs',
+            'test/r186-owner-review-export.test.mjs',
+            'test/r188-owner-uac.test.mjs',
+            'test/r188-uac-boundary.test.mjs',
+            'test/r193-limited-migration-contract.test.mjs',
+            'test/r193-live-owner-subject.test.mjs',
+            'test/r193-native-process-observer.test.mjs',
+            'test/r193-native-token.test.mjs',
+            'test/r193-owner-enrollment-entrypoint.test.mjs',
+            'test/r193-owner-secret-acl.test.mjs',
+            'test/r193-owner-uac-broker.test.mjs',
+            'test/r193-owner-uac-entrypoint.test.mjs',
+            'test/r193-release-readiness.test.mjs',
+            'test/r193-release-identity.test.mjs',
+            'test/r194-release-identity.test.mjs',
+            'test/r194-release-readiness.test.mjs',
+            'test/r193-uac-r70-bridge.test.mjs',
+            'test/r194-windows-gate.test.mjs',
+            'test/r194-npm-auth-recovery.test.mjs',
+            'test/r194-npm-preauth.test.mjs'
+            'test/r195-canonical-owner-observation.test.mjs'
+            'test/r195-release-readiness.test.mjs'
+        )
+        Run-Node -label 'focused' -nodeArgs (@('--test','--test-reporter=tap','--test-concurrency=1')+$focused)
+        if($Stage -eq 'focused'){return}
+    }
+    if($Stage -in @('full','all')){
+        $previousCrossVolume=$env:DEADBYTE_TEST_CROSS_VOLUME_ROOT
+        $tempDrive=[IO.Path]::GetPathRoot([IO.Path]::GetFullPath($env:TEMP))
+        $scratchDrive=if($tempDrive -ieq 'D:\'){'C:\'}else{'D:\'}
+        Need (Test-Path -LiteralPath $scratchDrive -PathType Container) 'R195_CROSS_VOLUME_DRIVE_UNAVAILABLE'
+        $crossVolume=Join-Path $scratchDrive 'DEADBYTE-R195-CrossVolume'
+        try{
+            [IO.Directory]::CreateDirectory($crossVolume)|Out-Null
+            $env:DEADBYTE_TEST_CROSS_VOLUME_ROOT=$crossVolume
+            Run-Node -label 'full' -nodeArgs @('--test','--test-reporter=tap','--test-concurrency=4','test/*.test.mjs')
+        }finally{$env:DEADBYTE_TEST_CROSS_VOLUME_ROOT=$previousCrossVolume}
+        if($Stage -eq 'full'){return}
+    }
+    if($Stage -in @('manifest','all')){
+        Run-Node -label 'manifest' -nodeArgs @('scripts/release-manifest.mjs','verify')
+        if($Stage -eq 'manifest'){return}
+    }
+    if($Stage -in @('doctor','all')){
+        $previousStateRoot=$env:DEADBYTE_STATE_ROOT
+        $isolated=Join-Path $env:TEMP ('deadbyte-r195-doctor-'+[guid]::NewGuid().ToString('N'))
+        try{
+            [IO.Directory]::CreateDirectory($isolated)|Out-Null
+            $env:DEADBYTE_STATE_ROOT=$isolated
+            Run-Node -label 'isolated_doctor' -nodeArgs @('src/deadbyte-cli.mjs','doctor')
+        }finally{
+            $env:DEADBYTE_STATE_ROOT=$previousStateRoot
+            Remove-Item -LiteralPath $isolated -Recurse -Force -ErrorAction SilentlyContinue
+        }
+    }
+    Write-Output 'R195_WINDOWS_CANDIDATE_GATE=PASS_PREPUBLICATION'
+}finally{
+    $env:DEADBYTE_EXPECTED_DEVELOPMENT_ROOT=$previousExpectedDevelopmentRoot
+    Pop-Location
+}

package/scripts/gate-windows-r206.ps1

@@ -0,0 +1,116 @@
+#requires -Version 5.1
+[CmdletBinding()]
+param(
+    [ValidateSet('preflight','focused','full','manifest','doctor','all')][string]$Stage='preflight'
+)
+Set-StrictMode -Version Latest
+$ErrorActionPreference='Stop'
+$repo=Split-Path -Parent $PSScriptRoot
+$productionState=Join-Path $env:USERPROFILE '.deadbyte-mcp'
+$parentId='v0.15.74-e84bf4eed16e9443'
+$parentSha='e84bf4eed16e9443fbd0bf9f0f562e26b01db778647aefcc8b12fd7f48636b47'
+$parentGen='598f896be9ce65e6b0c618e8c8f6eaa2a9d91617a76a146bf3deb385a56d19e7'
+$parentTarball='5da436a3f8068107e74caf6da58ff1e211d4a62f94266853136b601762f36f0c'
+$nativeNode='C:\Program Files\nodejs\node.exe'
+$node=if(Test-Path -LiteralPath $nativeNode -PathType Leaf){$nativeNode}else{(Get-Command node -ErrorAction Stop).Source}
+function Sha([string]$file){
+    $sha=[Security.Cryptography.SHA256]::Create()
+    try{$stream=[IO.File]::OpenRead($file);try{return ([BitConverter]::ToString($sha.ComputeHash($stream))).Replace('-','').ToLowerInvariant()}finally{$stream.Dispose()}}finally{$sha.Dispose()}
+}
+function Need([bool]$condition,[string]$message){if(-not $condition){throw $message}}
+function Run-Node([string]$label,[string[]]$nodeArgs){
+    Need ($null -ne $nodeArgs -and $nodeArgs.Count -gt 0) "R206_${label}_NO_NODE_ARGUMENTS"
+    Write-Output "R206_STAGE_START=$label"
+    $global:LASTEXITCODE=0
+    & $node @nodeArgs
+    $exit=$global:LASTEXITCODE
+    if($exit -ne 0){throw "R206_${label}_FAILED exit=$exit"}
+    Write-Output "R206_STAGE_PASS=$label"
+}
+Push-Location $repo
+$previousExpectedDevelopmentRoot=$env:DEADBYTE_EXPECTED_DEVELOPMENT_ROOT
+try{
+    $pkg=Get-Content -LiteralPath 'package.json' -Raw | ConvertFrom-Json
+    $release=Get-Content -LiteralPath 'RELEASE.json' -Raw | ConvertFrom-Json
+    Need (-not [string]::IsNullOrWhiteSpace([string]$release.r206.development_policy_root)) 'R206_DEVELOPMENT_PROVENANCE_ROOT_MISSING'
+    $env:DEADBYTE_EXPECTED_DEVELOPMENT_ROOT=[IO.Path]::GetFullPath([string]$release.r206.development_policy_root)
+    Need ($pkg.version -eq '0.15.75' -and $release.version -eq '0.15.75' -and $release.train -eq 'R206') 'R206_CANDIDATE_VERSION_DRIFT'
+    Need ($release.source_predecessor.version -eq '0.15.75' -and $release.source_predecessor.train -eq 'R205') 'R206_SOURCE_PREDECESSOR_VERSION_DRIFT'
+    Need ($release.source_predecessor.manifest_sha256 -eq '166eebde18d53a9ec46f738383c289733f9cd37918b3572b7515d1ab9b122c92' -and $null -eq $release.source_predecessor.tarball_sha256) 'R206_SOURCE_PREDECESSOR_IDENTITY_DRIFT'
+    Need ($release.runtime_predecessor.release_id -eq $parentId -and $release.runtime_predecessor.manifest_sha256 -eq $parentSha -and $release.runtime_predecessor.generation_manifest_sha256 -eq $parentGen) 'R206_RUNTIME_PREDECESSOR_IDENTITY_DRIFT'
+    $active=Get-Content -LiteralPath (Join-Path $productionState 'active-release.json') -Raw | ConvertFrom-Json
+    Need ($active.version -eq '0.15.74' -and $active.release_id -eq $parentId -and $active.manifest_sha256 -eq $parentSha -and $active.generation_manifest_sha256 -eq $parentGen) 'R206_ACTIVE_RUNTIME_DRIFT'
+    Need ((Sha (Join-Path $active.release_root 'MANIFEST.SHA256')) -eq $parentSha) 'R206_ACTIVE_MANIFEST_MISMATCH'
+    Write-Output 'R206_PREDECESSOR_PREFLIGHT=PASS'
+    if($Stage -eq 'preflight'){return}
+    if($Stage -in @('focused','all')){
+        $focused=@(
+            'test/r70-owner-approval.test.mjs',
+            'test/r89-privileged-install-boundary.test.mjs',
+            'test/r186-controller-owner-grant.test.mjs',
+            'test/r186-owner-consent-preflight.test.mjs',
+            'test/r186-owner-enrollment.test.mjs',
+            'test/r186-owner-grant-broker.test.mjs',
+            'test/r186-owner-local-signing.test.mjs',
+            'test/r186-owner-request.test.mjs',
+            'test/r186-owner-review-export.test.mjs',
+            'test/r188-owner-uac.test.mjs',
+            'test/r188-uac-boundary.test.mjs',
+            'test/r193-limited-migration-contract.test.mjs',
+            'test/r193-live-owner-subject.test.mjs',
+            'test/r193-native-process-observer.test.mjs',
+            'test/r193-native-token.test.mjs',
+            'test/r193-owner-enrollment-entrypoint.test.mjs',
+            'test/r193-owner-secret-acl.test.mjs',
+            'test/r193-owner-uac-broker.test.mjs',
+            'test/r193-owner-uac-entrypoint.test.mjs',
+            'test/r193-release-readiness.test.mjs',
+            'test/r193-release-identity.test.mjs',
+            'test/r194-release-identity.test.mjs',
+            'test/r194-release-readiness.test.mjs',
+            'test/r193-uac-r70-bridge.test.mjs',
+            'test/r194-windows-gate.test.mjs',
+            'test/r194-npm-auth-recovery.test.mjs',
+            'test/r194-npm-preauth.test.mjs'
+            'test/r195-canonical-owner-observation.test.mjs'
+            'test/r206-candidate-evidence.test.mjs'
+            'test/r206-release-contract.test.mjs'
+            'test/r206-release-readiness.test.mjs'
+        )
+        Run-Node -label 'focused' -nodeArgs (@('--test','--test-reporter=tap','--test-concurrency=1')+$focused)
+        if($Stage -eq 'focused'){return}
+    }
+    if($Stage -in @('full','all')){
+        $previousCrossVolume=$env:DEADBYTE_TEST_CROSS_VOLUME_ROOT
+        $tempDrive=[IO.Path]::GetPathRoot([IO.Path]::GetFullPath($env:TEMP))
+        $scratchDrive=if($tempDrive -ieq 'D:\'){'C:\'}else{'D:\'}
+        Need (Test-Path -LiteralPath $scratchDrive -PathType Container) 'R206_CROSS_VOLUME_DRIVE_UNAVAILABLE'
+        $crossVolume=Join-Path $scratchDrive 'DEADBYTE-R206-CrossVolume'
+        try{
+            [IO.Directory]::CreateDirectory($crossVolume)|Out-Null
+            $env:DEADBYTE_TEST_CROSS_VOLUME_ROOT=$crossVolume
+            Run-Node -label 'full' -nodeArgs @('--test','--test-reporter=tap','--test-concurrency=4','test/*.test.mjs')
+        }finally{$env:DEADBYTE_TEST_CROSS_VOLUME_ROOT=$previousCrossVolume}
+        if($Stage -eq 'full'){return}
+    }
+    if($Stage -in @('manifest','all')){
+        Run-Node -label 'manifest' -nodeArgs @('scripts/release-manifest.mjs','verify')
+        if($Stage -eq 'manifest'){return}
+    }
+    if($Stage -in @('doctor','all')){
+        $previousStateRoot=$env:DEADBYTE_STATE_ROOT
+        $isolated=Join-Path $env:TEMP ('deadbyte-r206-doctor-'+[guid]::NewGuid().ToString('N'))
+        try{
+            [IO.Directory]::CreateDirectory($isolated)|Out-Null
+            $env:DEADBYTE_STATE_ROOT=$isolated
+            Run-Node -label 'isolated_doctor' -nodeArgs @('src/deadbyte-cli.mjs','doctor')
+        }finally{
+            $env:DEADBYTE_STATE_ROOT=$previousStateRoot
+            Remove-Item -LiteralPath $isolated -Recurse -Force -ErrorAction SilentlyContinue
+        }
+    }
+    Write-Output 'R206_WINDOWS_CANDIDATE_GATE=PASS_PREPUBLICATION'
+}finally{
+    $env:DEADBYTE_EXPECTED_DEVELOPMENT_ROOT=$previousExpectedDevelopmentRoot
+    Pop-Location
+}

package/scripts/init-desktop-policy-r199.ps1

@@ -0,0 +1,85 @@
+[CmdletBinding()]
+param(
+    [string]$RuntimeRoot = '',
+    [string]$OutputPath = '',
+    [string[]]$AllowedActions = @('pointer_move','click_primary','click_secondary','double_click_primary','scroll','key_chord','text_input')
+)
+$ErrorActionPreference='Stop'
+Set-StrictMode -Version Latest
+function Get-Sha256Hex {
+    param([Parameter(Mandatory=$true)][string]$Path)
+    $Stream=[System.IO.File]::OpenRead([System.IO.Path]::GetFullPath($Path))
+    try{$Hasher=[System.Security.Cryptography.SHA256]::Create();try{return ([System.BitConverter]::ToString($Hasher.ComputeHash($Stream))).Replace('-','').ToLowerInvariant()}finally{$Hasher.Dispose()}}
+    finally{$Stream.Dispose()}
+}
+
+$Root=Split-Path -Parent $PSScriptRoot
+$Controller=Join-Path $Root 'controller'
+if([string]::IsNullOrWhiteSpace($RuntimeRoot)){ $RuntimeRoot=Join-Path $Controller 'runtime' }
+if([string]::IsNullOrWhiteSpace($OutputPath)){ $OutputPath=Join-Path $Controller 'deadbyte-desktop-policy.json' }
+$RuntimeRoot=[System.IO.Path]::GetFullPath($RuntimeRoot)
+$OutputPath=[System.IO.Path]::GetFullPath($OutputPath)
+$Observer=[System.IO.Path]::GetFullPath((Join-Path $Root 'bin\deadbyte-desktop-observer-r40.exe'))
+$Input=[System.IO.Path]::GetFullPath((Join-Path $Root 'bin\deadbyte-desktop-input-r40.exe'))
+$Grounder=[System.IO.Path]::GetFullPath((Join-Path $Root 'bin\deadbyte-desktop-uia-r199-fixed.exe'))
+if(-not (Test-Path -LiteralPath $Observer -PathType Leaf)){throw "observer binary missing: $Observer"}
+if(-not (Test-Path -LiteralPath $Input -PathType Leaf)){throw "input binary missing: $Input"}
+if(-not (Test-Path -LiteralPath $Grounder -PathType Leaf)){throw "UIA grounder binary missing: $Grounder"}
+$Known=@('pointer_move','click_primary','click_secondary','double_click_primary','scroll','key_chord','text_input')
+if($AllowedActions.Count -lt 1){throw 'AllowedActions cannot be empty'}
+$Unique=@($AllowedActions | Sort-Object -Unique)
+if($Unique.Count -ne $AllowedActions.Count -or @($AllowedActions | Where-Object { $_ -notin $Known }).Count -gt 0){throw 'AllowedActions invalid'}
+New-Item -ItemType Directory -Force -Path $RuntimeRoot | Out-Null
+$Evidence=Join-Path $RuntimeRoot 'desktop-evidence'
+New-Item -ItemType Directory -Force -Path $Evidence | Out-Null
+$Grant=Join-Path $RuntimeRoot 'desktop-grant.json'
+Remove-Item -LiteralPath $Grant -Force -ErrorAction SilentlyContinue
+$Policy=[ordered]@{
+    schema='deadbyte.desktop-policy.v1'
+    enabled=$true
+    grant_file=$Grant
+    evidence_dir=$Evidence
+    observer=[ordered]@{
+        executable=$Observer
+        sha256=Get-Sha256Hex -Path $Observer
+        backend='gdi-bitblt-fallback'
+    }
+    input=[ordered]@{
+        executable=$Input
+        sha256=Get-Sha256Hex -Path $Input
+    }
+    grounder=[ordered]@{
+        executable=$Grounder
+        sha256=Get-Sha256Hex -Path $Grounder
+    }
+    allowed_input_desktops=@('Default')
+    allowed_actions=@($AllowedActions)
+    limits=[ordered]@{
+        max_frame_age_ms=2000
+        max_frame_bytes=134217728
+        capture_timeout_ms=10000
+        input_timeout_ms=5000
+        ground_timeout_ms=5000
+        post_observe_timeout_ms=10000
+        max_preview_bytes=1048576
+        max_text_bytes=4096
+    }
+}
+$Parent=Split-Path -Parent $OutputPath
+New-Item -ItemType Directory -Force -Path $Parent | Out-Null
+$Json=$Policy | ConvertTo-Json -Depth 8
+$Utf8=New-Object System.Text.UTF8Encoding($false)
+$Tmp=$OutputPath+'.tmp'
+[System.IO.File]::WriteAllText($Tmp,$Json,$Utf8)
+Move-Item -LiteralPath $Tmp -Destination $OutputPath -Force
+[pscustomobject]@{
+    status='created'
+    policy_path=$OutputPath
+    policy_sha256=Get-Sha256Hex -Path $OutputPath
+    observer_sha256=$Policy.observer.sha256
+    input_sha256=$Policy.input.sha256
+    grounder_sha256=$Policy.grounder.sha256
+    grant_file=$Grant
+    grant_state='DISARMED'
+    action_kinds=@($AllowedActions)
+}|ConvertTo-Json -Depth 6

package/scripts/npm-release-r48.mjs

@@ -15,6 +15,8 @@ import {assertR167NpmPublishReady,assertR167PackedIdentity} from './npm-release-
 import {assertR168NpmPublishReady,assertR168PackedIdentity} from './npm-release-readiness-r168.mjs';
 import {assertR193NpmPublishReady,assertR193PackedIdentity} from './npm-release-readiness-r193.mjs';
 import {assertR194NpmPublishReady,assertR194PackedIdentity} from './npm-release-readiness-r194.mjs';
+import {assertR195NpmPublishReady,assertR195PackedIdentity} from './npm-release-readiness-r195.mjs';
+import {assertR206NpmPublishReady,assertR206PackedIdentity} from './npm-release-readiness-r206.mjs';
 import {resumePackRecord} from '../src/npm-publication-resume-r168.mjs';
 import { existsSync,mkdtempSync,readdirSync,readFileSync,rmSync } from 'node:fs';
 import { resolveStateRoot } from '../src/state-root.mjs';
@@ -157,6 +159,13 @@ async function main() {
     if (!publishOnly) throw new Error('PUBLISH_BLOCKED R194 requires --publish-only; activation remains separately authorized');
     r194Readiness=await assertR194NpmPublishReady(release,{root});
   }
+  let r195Readiness=null;
+  let r206Readiness=null;
+  if (!isVerifyOnly && version==='0.15.75') {
+    if (!publishOnly) throw new Error('PUBLISH_BLOCKED R206 requires --publish-only; owner enrollment and activation remain separate');
+    if(release.train==='R206')r206Readiness=await assertR206NpmPublishReady(release,{root});
+    else r195Readiness=await assertR195NpmPublishReady(release,{root});
+  }
   if (release.parent?.release_id !== provenance.parent_release_id ||
       release.parent?.manifest_sha256 !== provenance.parent_manifest_sha256 ||
       release.parent?.generation_manifest_sha256 !== provenance.parent_generation_manifest_sha256) {
@@ -304,6 +313,14 @@ async function main() {
       ...r194Readiness,observedSha256:createHash('sha256').update(localBytes).digest('hex'),
       observedIntegrity:localIntegrity,observedShasum:packRecord.shasum
     });
+    if(r195Readiness)assertR195PackedIdentity({
+      ...r195Readiness,observedSha256:createHash('sha256').update(localBytes).digest('hex'),
+      observedIntegrity:localIntegrity,observedShasum:packRecord.shasum
+    });
+    if(r206Readiness)assertR206PackedIdentity({
+      ...r206Readiness,observedSha256:createHash('sha256').update(localBytes).digest('hex'),
+      observedIntegrity:localIntegrity,observedShasum:packRecord.shasum
+    });
 
     console.log('[6/7] Publishing artifact to npm registry...');
     publishAttempted = true;

package/scripts/npm-release-readiness-r195.mjs

@@ -0,0 +1,72 @@
+import {createHash} from 'node:crypto';
+import {lstat,readFile} from 'node:fs/promises';
+import path from 'node:path';
+
+const sha256=bytes=>createHash('sha256').update(bytes).digest('hex');
+const hex64=value=>typeof value==='string'&&/^[0-9a-f]{64}$/.test(value);
+const fail=message=>{throw new Error(`PUBLISH_BLOCKED R195 ${message}`);};
+const required=(value,message)=>{if(!value)fail(message);};
+
+async function checkedFile(file,expected,{maxBytes=64*1024*1024}={}){
+  required(hex64(expected),'evidence digest missing');
+  let info;try{info=await lstat(file);}catch{fail('evidence file absent');}
+  required(info.isFile()&&!info.isSymbolicLink()&&info.size>0&&info.size<=maxBytes,'evidence file invalid');
+  const bytes=await readFile(file);
+  required(sha256(bytes)===expected,'evidence digest differs');
+  return bytes;
+}
+
+function tapSummary(text,label){
+  const summaries=[...text.matchAll(/^# tests (\d+)\s*\r?\n# suites (\d+)\s*\r?\n# pass (\d+)\s*\r?\n# fail (\d+)\s*\r?\n# cancelled (\d+)\s*\r?\n# skipped (\d+)/gm)];
+  required(summaries.length>0,`${label} TAP summary absent`);
+  const last=summaries.at(-1);
+  return {tests:Number(last[1]),passes:Number(last[3]),fails:Number(last[4]),cancelled:Number(last[5]),skips:Number(last[6])};
+}
+
+export function assertR195PackedIdentity({tarball_sha256,tarball_integrity,tarball_shasum,observedSha256,observedIntegrity,observedShasum}={}){
+  required(hex64(tarball_sha256)&&typeof tarball_integrity==='string'&&tarball_integrity.startsWith('sha512-')&&
+    typeof tarball_shasum==='string'&&/^[0-9a-f]{40}$/.test(tarball_shasum),'verified tarball identity invalid');
+  required(observedSha256===tarball_sha256&&observedIntegrity===tarball_integrity&&observedShasum===tarball_shasum,
+    'repacked tarball differs from verified closure bytes');
+  return true;
+}
+
+export async function assertR195NpmPublishReady(release,{root,closureRoot=process.env.DEADBYTE_R195_CLOSURE_ROOT}={}){
+  required(release?.version==='0.15.75'&&release?.train==='R195'&&
+    release?.r195?.scope==='CANONICAL_PROTECTED_OWNER_OBSERVATION','candidate metadata invalid');
+  required(release?.r195?.public_tool_delta===0&&release?.r195?.authority_scope_delta===0,'public authority surface widened');
+  required(release?.parent?.version==='0.15.74'&&release?.parent?.release_id==='v0.15.74-e84bf4eed16e9443'&&
+    release?.parent?.manifest_sha256==='e84bf4eed16e9443fbd0bf9f0f562e26b01db778647aefcc8b12fd7f48636b47'&&
+    release?.parent?.generation_manifest_sha256==='598f896be9ce65e6b0c618e8c8f6eaa2a9d91617a76a146bf3deb385a56d19e7','lineage mismatch');
+  required(root&&path.isAbsolute(root)&&closureRoot&&path.isAbsolute(closureRoot),'closure root absent');
+  const expected=path.resolve(root,'..','..','testing','r195-final-closure');
+  required(path.resolve(closureRoot).toLowerCase()===expected.toLowerCase(),'closure root outside scoped testing folder');
+  let closure;try{closure=JSON.parse(await readFile(path.join(closureRoot,'closure.json'),'utf8'));}catch{fail('closure unreadable');}
+  required(closure?.schema==='deadbyte.r195-release-closure.v1'&&closure.status==='RELEASE_READY'&&
+    closure.version==='0.15.75'&&closure.train==='R195','closure status mismatch');
+  required(closure.production_release_id===release.parent.release_id&&closure.production_manifest_sha256===release.parent.manifest_sha256&&
+    closure.production_generation_manifest_sha256===release.parent.generation_manifest_sha256,'production predecessor mismatch');
+  required(hex64(closure.manifest_sha256)&&closure.manifest_sha256===sha256(await readFile(path.join(root,'MANIFEST.SHA256'))),'final manifest drift');
+  required(closure.compact_tools===43&&closure.full_tools===117,'catalog count mismatch');
+  required(closure.owner_enrollment==='NOT_RUN'&&closure.production_activation==='NOT_RUN','prepublication closure crossed authority boundary');
+  const receipt=JSON.parse((await checkedFile(path.join(closureRoot,'protected-install-receipt.json'),closure.protected_receipt_sha256)).toString('utf8'));
+  required(receipt?.status==='PASS'&&receipt.package_version==='0.15.75'&&receipt.source_manifest_sha256===closure.manifest_sha256&&
+    receipt.protected_manifest_sha256===closure.manifest_sha256,'protected exact-byte receipt mismatch');
+  const focused=(await checkedFile(path.join(closureRoot,'windows-focused.stdout.log'),closure.focused_stdout_sha256)).toString('utf8');
+  const full=(await checkedFile(path.join(closureRoot,'windows-full.stdout.log'),closure.full_stdout_sha256)).toString('utf8');
+  const verify=(await checkedFile(path.join(closureRoot,'npm-verify.stdout.log'),closure.verify_stdout_sha256)).toString('utf8');
+  required(focused.includes('R195_STAGE_PASS=focused'),'focused protected gate incomplete');
+  const focusedSummary=tapSummary(focused,'focused');
+  required(focusedSummary.fails===0&&focusedSummary.cancelled===0&&focusedSummary.passes>=70&&focusedSummary.skips<=3,'focused regression count mismatch');
+  required(full.includes('R195_STAGE_PASS=full'),'full protected gate incomplete');
+  const summary=tapSummary(full,'full');
+  required(summary.tests>=2200&&summary.passes>=2100&&summary.fails===0&&summary.cancelled===0&&summary.skips<=70&&summary.passes+summary.skips===summary.tests,'full regression count mismatch');
+  required(verify.includes('VERIFY-ONLY PIPELINE PASS')&&verify.includes('Artifact isolation gate PASS')&&verify.includes('VERIFIED_TARBALL '),'npm exact-artifact verification incomplete');
+  const line=verify.split(/\r?\n/).find(value=>value.startsWith('VERIFIED_TARBALL '));
+  let artifact;try{artifact=JSON.parse(line.slice('VERIFIED_TARBALL '.length));}catch{fail('tarball evidence malformed');}
+  required(artifact.filename==='deadbyte-mcp-0.15.75.tgz'&&artifact.bytes>0&&artifact.sha256===closure.tarball_sha256&&
+    artifact.integrity===closure.tarball_integrity&&artifact.shasum===closure.tarball_shasum,'tarball identity mismatch');
+  return Object.freeze({status:'R195_RELEASE_READY_EVIDENCE_BOUND',manifest_sha256:closure.manifest_sha256,
+    tarball_sha256:artifact.sha256,tarball_integrity:artifact.integrity,tarball_shasum:artifact.shasum,
+    tests:summary.tests,passes:summary.passes,skips:summary.skips});
+}

package/scripts/npm-release-readiness-r206.mjs

@@ -0,0 +1,76 @@
+import {createHash} from 'node:crypto';
+import {lstat,readFile} from 'node:fs/promises';
+import path from 'node:path';
+
+const sha256=bytes=>createHash('sha256').update(bytes).digest('hex');
+const hex64=value=>typeof value==='string'&&/^[0-9a-f]{64}$/.test(value);
+const fail=message=>{throw new Error(`PUBLISH_BLOCKED R206 ${message}`);};
+const required=(value,message)=>{if(!value)fail(message);};
+
+async function checkedFile(file,expected,{maxBytes=64*1024*1024}={}){
+  required(hex64(expected),'evidence digest missing');
+  let info;try{info=await lstat(file);}catch{fail('evidence file absent');}
+  required(info.isFile()&&!info.isSymbolicLink()&&info.size>0&&info.size<=maxBytes,'evidence file invalid');
+  const bytes=await readFile(file);
+  required(sha256(bytes)===expected,'evidence digest differs');
+  return bytes;
+}
+
+function tapSummary(text,label){
+  const summaries=[...text.matchAll(/^# tests (\d+)\s*\r?\n# suites (\d+)\s*\r?\n# pass (\d+)\s*\r?\n# fail (\d+)\s*\r?\n# cancelled (\d+)\s*\r?\n# skipped (\d+)/gm)];
+  required(summaries.length>0,`${label} TAP summary absent`);
+  const last=summaries.at(-1);
+  return {tests:Number(last[1]),passes:Number(last[3]),fails:Number(last[4]),cancelled:Number(last[5]),skips:Number(last[6])};
+}
+
+export function assertR206PackedIdentity({tarball_sha256,tarball_integrity,tarball_shasum,observedSha256,observedIntegrity,observedShasum}={}){
+  required(hex64(tarball_sha256)&&typeof tarball_integrity==='string'&&tarball_integrity.startsWith('sha512-')&&
+    typeof tarball_shasum==='string'&&/^[0-9a-f]{40}$/.test(tarball_shasum),'verified tarball identity invalid');
+  required(observedSha256===tarball_sha256&&observedIntegrity===tarball_integrity&&observedShasum===tarball_shasum,
+    'repacked tarball differs from verified closure bytes');
+  return true;
+}
+
+export async function assertR206NpmPublishReady(release,{root,closureRoot=process.env.DEADBYTE_R206_CLOSURE_ROOT}={}){
+  required(release?.version==='0.15.75'&&release?.train==='R206'&&
+    release?.r206?.scope==='EVIDENCE_BOUND_CANDIDATE_SELECTION_RELEASE_CLOSURE','candidate metadata invalid');
+  required(release?.r206?.public_tool_delta===0&&release?.r206?.authority_scope_delta===0&&
+    release?.r206?.selector_release_authority===false,'public authority surface widened');
+  required(release?.source_predecessor?.train==='R205'&&
+    release?.source_predecessor?.manifest_sha256==='166eebde18d53a9ec46f738383c289733f9cd37918b3572b7515d1ab9b122c92',
+    'source predecessor mismatch');
+  required(release?.parent?.version==='0.15.74'&&release?.parent?.release_id==='v0.15.74-e84bf4eed16e9443'&&
+    release?.parent?.manifest_sha256==='e84bf4eed16e9443fbd0bf9f0f562e26b01db778647aefcc8b12fd7f48636b47'&&
+    release?.parent?.generation_manifest_sha256==='598f896be9ce65e6b0c618e8c8f6eaa2a9d91617a76a146bf3deb385a56d19e7','lineage mismatch');
+  required(root&&path.isAbsolute(root)&&closureRoot&&path.isAbsolute(closureRoot),'closure root absent');
+  const expected=path.resolve(root,'..','..','testing','r206-final-closure');
+  required(path.resolve(closureRoot).toLowerCase()===expected.toLowerCase(),'closure root outside scoped testing folder');
+  let closure;try{closure=JSON.parse(await readFile(path.join(closureRoot,'closure.json'),'utf8'));}catch{fail('closure unreadable');}
+  required(closure?.schema==='deadbyte.r206-release-closure.v1'&&closure.status==='RELEASE_READY'&&
+    closure.version==='0.15.75'&&closure.train==='R206','closure status mismatch');
+  required(closure.production_release_id===release.parent.release_id&&closure.production_manifest_sha256===release.parent.manifest_sha256&&
+    closure.production_generation_manifest_sha256===release.parent.generation_manifest_sha256,'production predecessor mismatch');
+  required(hex64(closure.manifest_sha256)&&closure.manifest_sha256===sha256(await readFile(path.join(root,'MANIFEST.SHA256'))),'final manifest drift');
+  required(closure.compact_tools===43&&closure.full_tools===117,'catalog count mismatch');
+  required(closure.owner_enrollment==='NOT_RUN'&&closure.production_activation==='NOT_RUN','prepublication closure crossed authority boundary');
+  const receipt=JSON.parse((await checkedFile(path.join(closureRoot,'protected-install-receipt.json'),closure.protected_receipt_sha256)).toString('utf8'));
+  required(receipt?.status==='PASS'&&receipt.package_version==='0.15.75'&&receipt.source_manifest_sha256===closure.manifest_sha256&&
+    receipt.protected_manifest_sha256===closure.manifest_sha256,'protected exact-byte receipt mismatch');
+  const focused=(await checkedFile(path.join(closureRoot,'windows-focused.stdout.log'),closure.focused_stdout_sha256)).toString('utf8');
+  const full=(await checkedFile(path.join(closureRoot,'windows-full.stdout.log'),closure.full_stdout_sha256)).toString('utf8');
+  const verify=(await checkedFile(path.join(closureRoot,'npm-verify.stdout.log'),closure.verify_stdout_sha256)).toString('utf8');
+  required(focused.includes('R206_STAGE_PASS=focused'),'focused protected gate incomplete');
+  const focusedSummary=tapSummary(focused,'focused');
+  required(focusedSummary.fails===0&&focusedSummary.cancelled===0&&focusedSummary.passes>=70&&focusedSummary.skips<=3,'focused regression count mismatch');
+  required(full.includes('R206_STAGE_PASS=full'),'full protected gate incomplete');
+  const summary=tapSummary(full,'full');
+  required(summary.tests>=2200&&summary.passes>=2100&&summary.fails===0&&summary.cancelled===0&&summary.skips<=70&&summary.passes+summary.skips===summary.tests,'full regression count mismatch');
+  required(verify.includes('VERIFY-ONLY PIPELINE PASS')&&verify.includes('Artifact isolation gate PASS')&&verify.includes('VERIFIED_TARBALL '),'npm exact-artifact verification incomplete');
+  const line=verify.split(/\r?\n/).find(value=>value.startsWith('VERIFIED_TARBALL '));
+  let artifact;try{artifact=JSON.parse(line.slice('VERIFIED_TARBALL '.length));}catch{fail('tarball evidence malformed');}
+  required(artifact.filename==='deadbyte-mcp-0.15.75.tgz'&&artifact.bytes>0&&artifact.sha256===closure.tarball_sha256&&
+    artifact.integrity===closure.tarball_integrity&&artifact.shasum===closure.tarball_shasum,'tarball identity mismatch');
+  return Object.freeze({status:'R206_RELEASE_READY_EVIDENCE_BOUND',manifest_sha256:closure.manifest_sha256,
+    tarball_sha256:artifact.sha256,tarball_integrity:artifact.integrity,tarball_shasum:artifact.shasum,
+    tests:summary.tests,passes:summary.passes,skips:summary.skips});
+}

package/scripts/r193-owner-request-live.mjs

@@ -1,7 +1,5 @@
 // Protected, fixed-scope request generation after Limited migration.
 import {createHash} from 'node:crypto';
-import {execFile} from 'node:child_process';
-import {promisify} from 'node:util';
 import {lstat,open,readFile} from 'node:fs/promises';
 import path from 'node:path';
 import {fileURLToPath} from 'node:url';
@@ -10,6 +8,9 @@ import {inspectTrustedInstallation} from '../src/privileged-install-trust-r89.mj
 import {parseManifest,verifyManifestTreeExact} from '../src/release-slot.mjs';
 import {createR188OwnerUacRequest} from '../src/r188-owner-uac.mjs';
 import {createR193LiveMachineEpoch} from '../src/r193-live-owner-subject.mjs';
+import {observeCanonicalController} from '../src/r195-canonical-owner-observation.mjs';
+import {execFile} from 'node:child_process';
+import {promisify} from 'node:util';
 const execFileAsync=promisify(execFile);
 const THIS=fileURLToPath(import.meta.url),ROOT=path.resolve(path.dirname(THIS),'..');
 const STATE='C:\\Users\\DEADBYTE\\.deadbyte-mcp',RUNTIME=path.win32.join(STATE,'runtime');
@@ -21,6 +22,7 @@ async function main(){
  const manifestPath=path.join(ROOT,'MANIFEST.SHA256');
  await inspectTrustedInstallation(['C:\\Program Files\\nodejs\\node.exe',THIS,manifestPath,
   path.join(ROOT,'src','r188-owner-uac.mjs'),path.join(ROOT,'src','r193-live-owner-subject.mjs'),
+  path.join(ROOT,'src','r195-canonical-owner-observation.mjs'),
   path.join(ROOT,'src','privileged-install-trust-r89.mjs')]);
  const manifestBytes=await bounded(manifestPath,1024*1024);
  await verifyManifestTreeExact(ROOT,parseManifest(manifestBytes.toString('utf8')));
@@ -32,10 +34,7 @@ async function main(){
  if(!coding.roots?.core?.path||!Array.isArray(autonomous.root_ids)||autonomous.root_ids.length!==1||autonomous.root_ids[0]!=='core')
   throw Error('R193 request policy root is not the bounded core project');
  const env={...process.env,DEADBYTE_CONTROLLER_CONFIG:pointer.config_path,DEADBYTE_CONTROLLER_RUNTIME_ROOT:RUNTIME};
- const controller=path.join(ROOT,'controller','deadbyte-controller.ps1');
- const {stdout}=await execFileAsync(PS,['-NoLogo','-NoProfile','-NonInteractive','-ExecutionPolicy','Bypass','-File',controller,'status','-Json'],
-  {env,windowsHide:true,timeout:20000,maxBuffer:1024*1024,encoding:'utf8'});
- const observation=JSON.parse(stdout);
+ const observation=await observeCanonicalController({stateRoot:STATE,powershell:PS,env,execFileAsync});
  if(observation.state!=='ONLINE'||!observation.supervisor?.running)throw Error('R193 request requires ONLINE Limited runtime');
  const machineEpoch=createR193LiveMachineEpoch({activePointer:pointer,controllerObservation:observation});
  const request=createR188OwnerUacRequest({machineEpoch,releaseManifestSha256:sha(manifestBytes),

package/scripts/r193-owner-uac-broker.mjs

@@ -15,6 +15,7 @@ import {buildR193LiveOwnerBoundary} from '../src/r193-live-owner-subject.mjs';
 import {approveR193OwnerRequest} from '../src/r193-owner-uac-broker.mjs';
 import {createR186OwnerAnchor} from '../src/r186-owner-anchor.mjs';
 import {inspectR193OwnerSecretAcl} from '../src/r193-owner-secret-acl.mjs';
+import {observeCanonicalController} from '../src/r195-canonical-owner-observation.mjs';
 
 const execFileAsync=promisify(execFile);
 const THIS=fileURLToPath(import.meta.url),ROOT=path.resolve(path.dirname(THIS),'..');
@@ -61,6 +62,7 @@ async function live(request){
  const protectedFiles=[NODE,THIS,manifestPath,NATIVE,
   path.join(ROOT,'src','r193-live-owner-subject.mjs'),
   path.join(ROOT,'src','r193-owner-uac-broker.mjs'),
+  path.join(ROOT,'src','r195-canonical-owner-observation.mjs'),
   path.join(ROOT,'src','r193-uac-r70-bridge.mjs'),
   path.join(ROOT,'src','r193-owner-secret-acl.mjs'),
   path.join(ROOT,'src','r188-owner-uac.mjs'),
@@ -77,11 +79,9 @@ async function live(request){
  const codingPath=path.win32.join(generation,'coding-policy.json');
  const autonomousPath=path.win32.join(generation,'autonomous-policy.json');
  const configPath=pointer.config_path;
- const controller=path.join(ROOT,'controller','deadbyte-controller.ps1');
  const env={...process.env,DEADBYTE_CONTROLLER_CONFIG:configPath,
   DEADBYTE_CONTROLLER_RUNTIME_ROOT:RUNTIME};
- const observation=await jsonExec(PS,['-NoLogo','-NoProfile','-NonInteractive',
-  '-ExecutionPolicy','Bypass','-File',controller,'status','-Json'],{env});
+ const observation=await observeCanonicalController({stateRoot:STATE,powershell:PS,env,execFileAsync});
  const supervisor=JSON.parse((await bounded(path.win32.join(RUNTIME,'supervisor.instance.json'),64*1024)).toString('utf8'));
  const sources={bridge:observation.bridge,core:observation.core,cloud:observation.cloud,supervisor};
  const processReports={};

package/scripts/r205-candidate-selection.mjs

@@ -0,0 +1,22 @@
+// Read-only bounded stdin candidate comparison. Does not promote, publish, or grant authority.
+import { evaluateCandidateSelectionR205 } from '../src/candidate-selection-r205.mjs';
+
+const MAX_BYTES=64*1024;
+let length=0;
+const parts=[];
+try{
+  for await (const chunk of process.stdin){
+    length+=chunk.length;
+    if(length>MAX_BYTES)throw Error('R205_INPUT_LIMIT_EXCEEDED');
+    parts.push(chunk);
+  }
+  if(length<1)throw Error('R205_INPUT_EMPTY');
+  const raw=Buffer.concat(parts).toString('utf8');
+  const parsed=JSON.parse(raw);
+  const result=evaluateCandidateSelectionR205(parsed);
+  process.stdout.write(JSON.stringify(result)+'\n');
+  if(result.state!=='PROVISIONAL_CANDIDATE')process.exitCode=2;
+}catch(error){
+  process.stderr.write('R205_SELECTION_REFUSED '+String(error?.message??error)+'\n');
+  process.exitCode=3;
+}