deadbyte-mcp 0.8.10 → 0.10.0

package/controller/deadbyte-controller.ps1

@@ -2,7 +2,7 @@
 [CmdletBinding()]
 param(
     [Parameter(Position=0)]
-    [ValidateSet('menu','start','resume','park','stop','restart','status','url','test','fulltest','toggle','clean','machinetest','armprocess','disarmprocess','processstatus','armhost','disarmhost','hoststatus','hosttest','armcoding','disarmcoding','codingstatus','codingtest','armautonomous','disarmautonomous','autonomousstatus','autonomoustest')]
+    [ValidateSet('menu','start','resume','park','stop','restart','status','url','test','fulltest','toggle','clean','machinetest','armprocess','disarmprocess','processstatus','armhost','disarmhost','hoststatus','hosttest','armcoding','disarmcoding','codingstatus','codingtest','armautonomous','disarmautonomous','autonomousstatus','autonomoustest','supervisorstart','supervisorstop','supervisorstatus','supervisorrecover')]
     [string]$Command = 'menu'
 )
 
@@ -19,6 +19,33 @@ function Fail([string]$Message) { throw "DEADBYTE controller: $Message" }
 function Ensure-Directory([string]$Path) { if (-not (Test-Path -LiteralPath $Path -PathType Container)) { New-Item -ItemType Directory -Path $Path -Force | Out-Null } }
 function Ledger-Path([string]$Name) { Join-Path $RuntimeDir ("{0}.instance.json" -f $Name.ToLowerInvariant()) }
 function Log-Path([string]$Name, [string]$Kind) { Join-Path $LogDir ("{0}.{1}.log" -f $Name.ToLowerInvariant(), $Kind) }
+function Controller-StartFailurePath { Join-Path $RuntimeDir 'controller-start-failure.json' }
+function Read-LogTailBounded([string]$Path, [int]$MaxChars = 8192) {
+    if (-not (Test-Path -LiteralPath $Path -PathType Leaf)) { return '' }
+    try {
+        $text = (@(Get-Content -LiteralPath $Path -Encoding UTF8 -Tail 80 -ErrorAction Stop) -join [Environment]::NewLine)
+        if ($text.Length -gt $MaxChars) { return $text.Substring($text.Length - $MaxChars) }
+        return $text
+    } catch { return '' }
+}
+function Write-ControllerStartFailure([string]$Name, [System.Exception]$Exception) {
+    Ensure-Directory $RuntimeDir; Ensure-Directory $LogDir
+    $body = [ordered]@{
+        schema = 'deadbyte.controller-start-failure.v1'
+        command = $Name
+        failed_at_utc = [DateTime]::UtcNow.ToString('o')
+        message = [string]$Exception.Message
+        bridge_stdout_tail = Read-LogTailBounded (Log-Path 'Bridge' 'stdout')
+        bridge_stderr_tail = Read-LogTailBounded (Log-Path 'Bridge' 'stderr')
+        cloud_stdout_tail = Read-LogTailBounded (Log-Path 'Cloud' 'stdout')
+        cloud_stderr_tail = Read-LogTailBounded (Log-Path 'Cloud' 'stderr')
+    }
+    $path = Controller-StartFailurePath
+    $tmp = $path + '.tmp'
+    $json = $body | ConvertTo-Json -Depth 4
+    [System.IO.File]::WriteAllText($tmp, $json, (New-Object System.Text.UTF8Encoding($false)))
+    Move-Item -LiteralPath $tmp -Destination $path -Force
+}
 
 
 function Read-TextFileSafe([string]$Path) {
@@ -44,7 +71,14 @@ function Get-Config {
     $workspaceRoot = [System.IO.Path]::GetFullPath($workspaceRoot)
     if (-not (Test-Path -LiteralPath $workspaceRoot -PathType Container)) { Fail "WorkspaceRoot missing: $workspaceRoot" }
     $cfg['WorkspaceRoot'] = $workspaceRoot
-    foreach ($name in @('Bridge','Cloud')) {
+    if ($cfg.ContainsKey('AutonomousSupervisorEnabled')) {
+        if ($cfg.AutonomousSupervisorEnabled -isnot [bool]) { Fail 'AutonomousSupervisorEnabled must be boolean' }
+    } else {
+        $cfg['AutonomousSupervisorEnabled'] = $false
+    }
+    $componentNames = @('Bridge','Cloud')
+    if ([bool]$cfg.AutonomousSupervisorEnabled) { $componentNames += 'Supervisor' }
+    foreach ($name in $componentNames) {
         $spec = $cfg[$name]
         if (-not $spec -or -not $spec.ContainsKey('FilePath') -or [string]::IsNullOrWhiteSpace([string]$spec.FilePath)) { Fail "$name FilePath missing" }
         if (-not $spec.ContainsKey('Arguments')) { Fail "$name Arguments field missing" }
@@ -66,13 +100,14 @@ function Get-Config {
                 if ($dependencyCount -ne 2) { Fail 'deadbyte.named-tunnel.v2 requires exactly cloudflared plus token-file pins' }
             } else { Fail 'Cloud Transport unsupported' }
         }
-        if ($name -eq 'Bridge') {
-            if (-not $spec.ContainsKey('ScriptPath') -or [string]::IsNullOrWhiteSpace([string]$spec.ScriptPath)) { Fail 'Bridge ScriptPath missing' }
-            if (-not $spec.ContainsKey('ScriptSha256') -or [string]$spec.ScriptSha256 -cnotmatch '^[0-9a-f]{64}$') { Fail 'Bridge ScriptSha256 invalid' }
+        if ($name -in @('Bridge','Supervisor')) {
+            if (-not $spec.ContainsKey('ScriptPath') -or [string]::IsNullOrWhiteSpace([string]$spec.ScriptPath)) { Fail "$name ScriptPath missing" }
+            if (-not $spec.ContainsKey('ScriptSha256') -or [string]$spec.ScriptSha256 -cnotmatch '^[0-9a-f]{64}$') { Fail "$name ScriptSha256 invalid" }
             $scriptPath = [System.IO.Path]::GetFullPath([string]$spec.ScriptPath)
-            if (-not (Test-Path -LiteralPath $scriptPath -PathType Leaf)) { Fail "Bridge ScriptPath missing: $scriptPath" }
+            if (-not (Test-Path -LiteralPath $scriptPath -PathType Leaf)) { Fail "$name ScriptPath missing: $scriptPath" }
+            if ($name -eq 'Supervisor' -and [System.IO.Path]::GetFileName($scriptPath) -ne 'autonomous-supervisor-host.mjs') { Fail 'Supervisor ScriptPath must target autonomous-supervisor-host.mjs' }
             $scriptHash = Get-ExecutableHash $scriptPath
-            if ($scriptHash -ne [string]$spec.ScriptSha256) { Fail "bridge script hash mismatch: expected $($spec.ScriptSha256), found $scriptHash" }
+            if ($scriptHash -ne [string]$spec.ScriptSha256) { Fail "$name script hash mismatch: expected $($spec.ScriptSha256), found $scriptHash" }
             $spec['ScriptPath'] = $scriptPath
         }
     }
@@ -131,6 +166,24 @@ function Get-Config {
         $cfg['CodingPolicyFile'] = ''
     }
     if ([bool]$cfg.CodingRuntimeEnabled -and [string]::IsNullOrWhiteSpace([string]$cfg.CodingPolicyFile)) { Fail 'CodingRuntimeEnabled requires CodingPolicyFile' }
+    $semanticConfigFile = if ($cfg.ContainsKey('SemanticLspConfigFile')) { [string]$cfg.SemanticLspConfigFile } else { '' }
+    $semanticConfigSha = if ($cfg.ContainsKey('SemanticLspConfigSha256')) { ([string]$cfg.SemanticLspConfigSha256).ToLowerInvariant() } else { '' }
+    if ([string]::IsNullOrWhiteSpace($semanticConfigFile) -ne [string]::IsNullOrWhiteSpace($semanticConfigSha)) { Fail 'SemanticLspConfigFile and SemanticLspConfigSha256 must be supplied together' }
+    if (-not [string]::IsNullOrWhiteSpace($semanticConfigFile)) {
+        if (-not [bool]$cfg.CodingRuntimeEnabled) { Fail 'SemanticLspConfigFile requires CodingRuntimeEnabled' }
+        if ($semanticConfigSha -cnotmatch '^[0-9a-f]{64}$') { Fail 'SemanticLspConfigSha256 invalid' }
+        $semanticConfigFile = [System.IO.Path]::GetFullPath($semanticConfigFile)
+        if (-not (Test-Path -LiteralPath $semanticConfigFile -PathType Leaf)) { Fail "SemanticLspConfigFile missing: $semanticConfigFile" }
+        $semanticItem = Get-Item -LiteralPath $semanticConfigFile -Force
+        if (($semanticItem.Attributes -band [System.IO.FileAttributes]::ReparsePoint) -ne 0) { Fail 'SemanticLspConfigFile must not be a reparse point' }
+        $semanticObserved = Get-ExecutableHash $semanticConfigFile
+        if ($semanticObserved -ne $semanticConfigSha) { Fail "semantic LSP config SHA-256 mismatch: expected $semanticConfigSha, found $semanticObserved" }
+        $cfg['SemanticLspConfigFile'] = $semanticConfigFile
+        $cfg['SemanticLspConfigSha256'] = $semanticConfigSha
+    } else {
+        $cfg['SemanticLspConfigFile'] = ''
+        $cfg['SemanticLspConfigSha256'] = ''
+    }
     if ($cfg.ContainsKey('MachineFsRuntimeEnabled')) {
         if ($cfg.MachineFsRuntimeEnabled -isnot [bool]) { Fail 'MachineFsRuntimeEnabled must be boolean' }
     } else {
@@ -158,6 +211,7 @@ function Get-Config {
     }
     if ([bool]$cfg.AutonomousRuntimeEnabled -and -not [bool]$cfg.CodingRuntimeEnabled) { Fail 'AutonomousRuntimeEnabled requires CodingRuntimeEnabled' }
     if ([bool]$cfg.AutonomousRuntimeEnabled -and [string]::IsNullOrWhiteSpace([string]$cfg.AutonomousPolicyFile)) { Fail 'AutonomousRuntimeEnabled requires AutonomousPolicyFile' }
+    if ([bool]$cfg.AutonomousSupervisorEnabled -and -not [bool]$cfg.AutonomousRuntimeEnabled) { Fail 'AutonomousSupervisorEnabled requires AutonomousRuntimeEnabled' }
     if ([int]$cfg.StartTimeoutSeconds -lt 1 -or [int]$cfg.StartTimeoutSeconds -gt 120) { Fail 'StartTimeoutSeconds out of range' }
     if ([int]$cfg.ProbeTimeoutSeconds -lt 1 -or [int]$cfg.ProbeTimeoutSeconds -gt 15) { Fail 'ProbeTimeoutSeconds out of range' }
     return $cfg
@@ -264,7 +318,7 @@ function Test-OwnedInstance([string]$Name) {
     if (-not $ledger) { return [pscustomobject]@{ Name=$Name; Alive=$false; Reason='no-ledger'; Ledger=$null; Observation=$null } }
     if ($ledger.PSObject.Properties.Name -contains 'corrupt' -and $ledger.corrupt -eq $true) { return [pscustomobject]@{ Name=$Name; Alive=$false; Reason='corrupt-ledger'; Ledger=$ledger; Observation=$null } }
     if ($ledger.schema -ne $ControllerSchema -or -not $ledger.instance_nonce) { return [pscustomobject]@{ Name=$Name; Alive=$false; Reason='ledger-schema'; Ledger=$ledger; Observation=$null } }
-    if ($Name -eq 'Bridge') {
+    if ($Name -in @('Bridge','Supervisor')) {
         if (-not ($ledger.PSObject.Properties.Name -contains 'script_path') -or -not ($ledger.PSObject.Properties.Name -contains 'script_sha256')) {
             return [pscustomobject]@{ Name=$Name; Alive=$false; Reason='ledger-schema'; Ledger=$ledger; Observation=$null }
         }
@@ -306,8 +360,8 @@ function Write-Ledger([string]$Name, $Observation, [string]$Nonce, $Spec = $null
         image_path = [string]$Observation.image_path
         image_sha256 = [string]$Observation.image_sha256
     }
-    if ($Name -eq 'Bridge') {
-        if (-not $Spec) { Fail 'Bridge ledger requires launch specification' }
+    if ($Name -in @('Bridge','Supervisor')) {
+        if (-not $Spec) { Fail "$Name ledger requires launch specification" }
         $body['script_path'] = [string]$Spec.ScriptPath
         $body['script_sha256'] = [string]$Spec.ScriptSha256
     }
@@ -337,9 +391,9 @@ function Start-OwnedComponent([string]$Name, $Spec, $Cfg = $null) {
     $componentExecutableHash = Get-ExecutableHash ([string]$Spec.FilePath)
     if ($componentExecutableHash -ne [string]$Spec.FileSha256) { Fail "$Name executable hash mismatch before start: expected $($Spec.FileSha256), found $componentExecutableHash" }
     Assert-ComponentDependencies $Name $Spec 'before start'
-    if ($Name -eq 'Bridge') {
-        $bridgeScriptHash = Get-ExecutableHash ([string]$Spec.ScriptPath)
-        if ($bridgeScriptHash -ne [string]$Spec.ScriptSha256) { Fail "bridge script hash mismatch before start: expected $($Spec.ScriptSha256), found $bridgeScriptHash" }
+    if ($Name -in @('Bridge','Supervisor')) {
+        $scriptHash = Get-ExecutableHash ([string]$Spec.ScriptPath)
+        if ($scriptHash -ne [string]$Spec.ScriptSha256) { Fail "$Name script hash mismatch before start: expected $($Spec.ScriptSha256), found $scriptHash" }
     }
     $args = [string]$Spec.Arguments
     $start = @{ FilePath=[string]$Spec.FilePath; WorkingDirectory=[string]$Spec.WorkingDirectory; PassThru=$true; WindowStyle='Hidden'; RedirectStandardOutput=$stdout; RedirectStandardError=$stderr }
@@ -368,12 +422,25 @@ function Start-OwnedComponent([string]$Name, $Spec, $Cfg = $null) {
     $previousObservationRuntimeEnv = $env:DEADBYTE_OBSERVATION_RUNTIME
     $hadCodingPolicyEnv = Test-Path Env:DEADBYTE_CODING_POLICY
     $previousCodingPolicyEnv = $env:DEADBYTE_CODING_POLICY
+    $hadSemanticConfigEnv = Test-Path Env:DEADBYTE_SEMANTIC_LSP_CONFIG
+    $previousSemanticLspConfigEnv = $env:DEADBYTE_SEMANTIC_LSP_CONFIG
+    $hadSemanticConfigShaEnv = Test-Path Env:DEADBYTE_SEMANTIC_LSP_CONFIG_SHA256
+    $previousSemanticLspConfigShaEnv = $env:DEADBYTE_SEMANTIC_LSP_CONFIG_SHA256
     $hadAutonomousRuntimeEnv = Test-Path Env:DEADBYTE_AUTONOMOUS_RUNTIME
     $previousAutonomousRuntimeEnv = $env:DEADBYTE_AUTONOMOUS_RUNTIME
     $hadAutonomousPolicyEnv = Test-Path Env:DEADBYTE_AUTONOMOUS_POLICY
     $previousAutonomousPolicyEnv = $env:DEADBYTE_AUTONOMOUS_POLICY
+    $hadSupervisorOnceEnv = Test-Path Env:DEADBYTE_SUPERVISOR_ONCE
+    $previousSupervisorOnceEnv = $env:DEADBYTE_SUPERVISOR_ONCE
+    $hadSupervisorMarkerEnv = Test-Path Env:DEADBYTE_SUPERVISOR_MARKER
+    $previousSupervisorMarkerEnv = $env:DEADBYTE_SUPERVISOR_MARKER
+    $hadAutonomousSupervisorModeEnv = Test-Path Env:DEADBYTE_AUTONOMOUS_SUPERVISOR_MODE
+    $previousAutonomousSupervisorModeEnv = $env:DEADBYTE_AUTONOMOUS_SUPERVISOR_MODE
+    $hadCapabilityProfileEnv = Test-Path Env:DEADBYTE_CAPABILITY_PROFILE
+    $previousCapabilityProfileEnv = $env:DEADBYTE_CAPABILITY_PROFILE
     try {
         if ($Name -eq 'Bridge' -and $Cfg) {
+            $env:DEADBYTE_CAPABILITY_PROFILE = 'compact'
             $env:DEADBYTE_AUDIT_RUNTIME = '1'
             $env:DEADBYTE_CORE_ROOT = [string]$Cfg.CoreRoot
             $env:DEADBYTE_WORKSPACE_ROOT = [string]$Cfg.WorkspaceRoot
@@ -389,14 +456,42 @@ function Start-OwnedComponent([string]$Name, $Spec, $Cfg = $null) {
             if (-not [string]::IsNullOrWhiteSpace([string]$Cfg.CodingPolicyFile)) {
                 $env:DEADBYTE_CODING_POLICY = [string]$Cfg.CodingPolicyFile
             }
+            if (-not [string]::IsNullOrWhiteSpace([string]$Cfg.SemanticLspConfigFile)) {
+                $env:DEADBYTE_SEMANTIC_LSP_CONFIG = [string]$Cfg.SemanticLspConfigFile
+                $env:DEADBYTE_SEMANTIC_LSP_CONFIG_SHA256 = [string]$Cfg.SemanticLspConfigSha256
+            } else {
+                Remove-Item Env:DEADBYTE_SEMANTIC_LSP_CONFIG -ErrorAction SilentlyContinue
+                Remove-Item Env:DEADBYTE_SEMANTIC_LSP_CONFIG_SHA256 -ErrorAction SilentlyContinue
+            }
             $env:DEADBYTE_AUTONOMOUS_RUNTIME = if ([bool]$Cfg.AutonomousRuntimeEnabled) { '1' } else { '0' }
+            $env:DEADBYTE_AUTONOMOUS_SUPERVISOR_MODE = if ([bool]$Cfg.AutonomousSupervisorEnabled) { 'external' } else { 'in_process' }
             if (-not [string]::IsNullOrWhiteSpace([string]$Cfg.AutonomousPolicyFile)) {
                 $env:DEADBYTE_AUTONOMOUS_POLICY = [string]$Cfg.AutonomousPolicyFile
             }
             if (-not [string]::IsNullOrWhiteSpace([string]$Cfg.HostPolicyFile)) {
                 $env:DEADBYTE_PRIVILEGED_POLICY = [string]$Cfg.HostPolicyFile
             }
+        } elseif ($Name -eq 'Supervisor' -and $Cfg) {
+            Remove-Item Env:DEADBYTE_CAPABILITY_PROFILE -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_AUDIT_RUNTIME -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_PRIVILEGED_POLICY -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_MACHINE_RUNTIME -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_AGENT_RUNTIME -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_PROCESS_RUNTIME -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_PROCESS_POLICY -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_MACHINE_FS_RUNTIME -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_OBSERVATION_RUNTIME -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_SEMANTIC_LSP_CONFIG -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_SEMANTIC_LSP_CONFIG_SHA256 -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_AUTONOMOUS_SUPERVISOR_MODE -ErrorAction SilentlyContinue
+            $env:DEADBYTE_CODING_RUNTIME = '1'
+            $env:DEADBYTE_AUTONOMOUS_RUNTIME = '1'
+            $env:DEADBYTE_CODING_POLICY = [string]$Cfg.CodingPolicyFile
+            $env:DEADBYTE_AUTONOMOUS_POLICY = [string]$Cfg.AutonomousPolicyFile
+            $env:DEADBYTE_SUPERVISOR_ONCE = '0'
+            $env:DEADBYTE_SUPERVISOR_MARKER = Join-Path $RuntimeDir 'autonomous-supervisor-owner.json'
         } else {
+            Remove-Item Env:DEADBYTE_CAPABILITY_PROFILE -ErrorAction SilentlyContinue
             Remove-Item Env:DEADBYTE_AUDIT_RUNTIME -ErrorAction SilentlyContinue
         }
         $proc = Start-Process @start
@@ -425,10 +520,22 @@ function Start-OwnedComponent([string]$Name, $Spec, $Cfg = $null) {
         else { Remove-Item Env:DEADBYTE_OBSERVATION_RUNTIME -ErrorAction SilentlyContinue }
         if ($hadCodingPolicyEnv) { $env:DEADBYTE_CODING_POLICY = $previousCodingPolicyEnv }
         else { Remove-Item Env:DEADBYTE_CODING_POLICY -ErrorAction SilentlyContinue }
+        if ($hadSemanticConfigEnv) { $env:DEADBYTE_SEMANTIC_LSP_CONFIG = $previousSemanticLspConfigEnv }
+        else { Remove-Item Env:DEADBYTE_SEMANTIC_LSP_CONFIG -ErrorAction SilentlyContinue }
+        if ($hadSemanticConfigShaEnv) { $env:DEADBYTE_SEMANTIC_LSP_CONFIG_SHA256 = $previousSemanticLspConfigShaEnv }
+        else { Remove-Item Env:DEADBYTE_SEMANTIC_LSP_CONFIG_SHA256 -ErrorAction SilentlyContinue }
         if ($hadAutonomousRuntimeEnv) { $env:DEADBYTE_AUTONOMOUS_RUNTIME = $previousAutonomousRuntimeEnv }
         else { Remove-Item Env:DEADBYTE_AUTONOMOUS_RUNTIME -ErrorAction SilentlyContinue }
         if ($hadAutonomousPolicyEnv) { $env:DEADBYTE_AUTONOMOUS_POLICY = $previousAutonomousPolicyEnv }
         else { Remove-Item Env:DEADBYTE_AUTONOMOUS_POLICY -ErrorAction SilentlyContinue }
+        if ($hadSupervisorOnceEnv) { $env:DEADBYTE_SUPERVISOR_ONCE = $previousSupervisorOnceEnv }
+        else { Remove-Item Env:DEADBYTE_SUPERVISOR_ONCE -ErrorAction SilentlyContinue }
+        if ($hadSupervisorMarkerEnv) { $env:DEADBYTE_SUPERVISOR_MARKER = $previousSupervisorMarkerEnv }
+        else { Remove-Item Env:DEADBYTE_SUPERVISOR_MARKER -ErrorAction SilentlyContinue }
+        if ($hadAutonomousSupervisorModeEnv) { $env:DEADBYTE_AUTONOMOUS_SUPERVISOR_MODE = $previousAutonomousSupervisorModeEnv }
+        else { Remove-Item Env:DEADBYTE_AUTONOMOUS_SUPERVISOR_MODE -ErrorAction SilentlyContinue }
+        if ($hadCapabilityProfileEnv) { $env:DEADBYTE_CAPABILITY_PROFILE = $previousCapabilityProfileEnv }
+        else { Remove-Item Env:DEADBYTE_CAPABILITY_PROFILE -ErrorAction SilentlyContinue }
     }
     Start-Sleep -Milliseconds 150
     $obs = Get-ProcessObservation ([int]$proc.Id)
@@ -885,6 +992,53 @@ function Show-AutonomousStatus($Cfg) {
     return $a
 }
 
+function Get-AutonomousSupervisorStatus($Cfg) {
+    if (-not [bool]$Cfg.AutonomousSupervisorEnabled) { return [pscustomobject]@{ Configured=$false; Running=$false; Reason='disabled'; Owned=$null } }
+    $owned = Test-OwnedInstance 'Supervisor'
+    [pscustomobject]@{ Configured=$true; Running=[bool]$owned.Alive; Reason=[string]$owned.Reason; Owned=$owned }
+}
+
+function Start-AutonomousSupervisor($Cfg) {
+    if (-not [bool]$Cfg.AutonomousSupervisorEnabled) { Fail 'autonomous supervisor is disabled by trusted config' }
+    if (-not [bool]$Cfg.AutonomousRuntimeEnabled) { Fail 'autonomous supervisor requires AutonomousRuntimeEnabled' }
+    Start-OwnedComponent 'Supervisor' $Cfg.Supervisor $Cfg | Out-Null
+    $status = Get-AutonomousSupervisorStatus $Cfg
+    if (-not $status.Running) { Fail "autonomous supervisor start failed: $($status.Reason)" }
+    return $status
+}
+
+function Stop-AutonomousSupervisor($Cfg) {
+    if (-not [bool]$Cfg.AutonomousSupervisorEnabled) { return Get-AutonomousSupervisorStatus $Cfg }
+    Stop-OwnedComponent 'Supervisor'
+    return Get-AutonomousSupervisorStatus $Cfg
+}
+
+function Show-AutonomousSupervisorStatus($Cfg) {
+    $s = Get-AutonomousSupervisorStatus $Cfg
+    $label = if (-not $s.Configured) { 'DISABLED' } elseif ($s.Running) { 'RUNNING' } else { 'STOPPED' }
+    Write-Host ("Loop supervisor: {0} [{1}]" -f $label, $s.Reason)
+    return $s
+}
+
+function Recover-AutonomousSupervisor($Cfg) {
+    if (-not [bool]$Cfg.AutonomousSupervisorEnabled) { Fail 'autonomous supervisor recovery requires AutonomousSupervisorEnabled' }
+    Start-Deadbyte $Cfg | Out-Null
+    try { Disarm-Autonomous $Cfg -Quiet } catch {}
+    try { Disarm-Coding $Cfg } catch {}
+    try { Disarm-Process $Cfg } catch {}
+    try { Disarm-Host $Cfg } catch {}
+    $runtime = Get-ObservedState $Cfg
+    if ($runtime.State -ne 'ONLINE') { Fail "supervisor recovery requires ONLINE runtime; observed $($runtime.State)" }
+    $process = Get-ProcessGrantStatus $Cfg
+    $coding = Get-CodingLeaseStatus $Cfg
+    $autonomous = Get-AutonomousLeaseStatus $Cfg
+    $host = Get-HostArmStatus $Cfg
+    if ($process.Armed -or $coding.Armed -or $autonomous.Armed -or $host.Armed) { Fail 'supervisor recovery final authority is not fully disarmed' }
+    $supervisor = Start-AutonomousSupervisor $Cfg
+    Write-Host 'AUTONOMOUS SUPERVISOR RECOVERY PASS: runtime ONLINE; privileged planes DISARMED.'
+    return [pscustomobject]@{ Runtime=$runtime; Supervisor=$supervisor; Process=$process; Coding=$coding; Autonomous=$autonomous; Host=$host }
+}
+
 function Show-State($Cfg) {
     $s = Get-ObservedState $Cfg
     $bp = if ($s.Bridge.Alive) { $s.Bridge.Ledger.pid } else { '-' }
@@ -902,6 +1056,7 @@ function Show-State($Cfg) {
     Write-Host ("Machine FS rt : {0}" -f $(if ([bool]$Cfg.MachineFsRuntimeEnabled) { 'ENABLED' } else { 'DISABLED' }))
     Write-Host ("Observation rt: {0}" -f $(if ([bool]$Cfg.ObservationRuntimeEnabled) { 'ENABLED' } else { 'DISABLED' }))
     Write-Host ("Autonomous rt : {0}" -f $(if ([bool]$Cfg.AutonomousRuntimeEnabled) { 'ENABLED' } else { 'DISABLED' }))
+    Show-AutonomousSupervisorStatus $Cfg | Out-Null
     Show-ProcessStatus $Cfg | Out-Null
     Show-CodingStatus $Cfg | Out-Null
     Show-AutonomousStatus $Cfg | Out-Null
@@ -974,7 +1129,7 @@ function Invoke-AutonomousSmoke($Cfg) {
 
 function Clean-Stale {
     Ensure-Directory $RuntimeDir
-    foreach ($name in @('Bridge','Cloud')) {
+    foreach ($name in @('Bridge','Cloud','Supervisor')) {
         $o = Test-OwnedInstance $name
         if ($o.Ledger -and -not $o.Alive -and $o.Reason -eq 'process-missing') {
             Remove-Item -LiteralPath (Ledger-Path $name) -Force -ErrorAction SilentlyContinue
@@ -989,11 +1144,11 @@ function Run-Command([string]$Name) {
     Assert-ControllerRootBound $cfg
     Ensure-Directory $RuntimeDir; Ensure-Directory $LogDir
     switch ($Name) {
-        'start'   { Start-Deadbyte $cfg | Out-Null; Show-State $cfg | Out-Null }
-        'resume'  { Start-Deadbyte $cfg | Out-Null; Show-State $cfg | Out-Null }
+        'start'   { Start-Deadbyte $cfg | Out-Null; if ([bool]$cfg.AutonomousSupervisorEnabled) { Start-AutonomousSupervisor $cfg | Out-Null }; Show-State $cfg | Out-Null }
+        'resume'  { Start-Deadbyte $cfg | Out-Null; if ([bool]$cfg.AutonomousSupervisorEnabled) { Start-AutonomousSupervisor $cfg | Out-Null }; Show-State $cfg | Out-Null }
         'park'    { Park-Deadbyte $cfg | Out-Null; Show-State $cfg | Out-Null }
-        'stop'    { Stop-Deadbyte $cfg | Out-Null; Show-State $cfg | Out-Null }
-        'restart' { Stop-Deadbyte $cfg | Out-Null; Start-Deadbyte $cfg | Out-Null; Show-State $cfg | Out-Null }
+        'stop'    { if ([bool]$cfg.AutonomousSupervisorEnabled) { Stop-AutonomousSupervisor $cfg | Out-Null }; Stop-Deadbyte $cfg | Out-Null; Show-State $cfg | Out-Null }
+        'restart' { if ([bool]$cfg.AutonomousSupervisorEnabled) { Stop-AutonomousSupervisor $cfg | Out-Null }; Stop-Deadbyte $cfg | Out-Null; Start-Deadbyte $cfg | Out-Null; if ([bool]$cfg.AutonomousSupervisorEnabled) { Start-AutonomousSupervisor $cfg | Out-Null }; Show-State $cfg | Out-Null }
         'status'  { Show-State $cfg | Out-Null }
         'url'     { $u=Get-CurrentUrl $cfg; if (-not $u) { Fail 'URL unavailable' }; Write-Output $u }
         'test'    { Invoke-Smoke $cfg $false }
@@ -1016,17 +1171,33 @@ function Run-Command([string]$Name) {
         'disarmautonomous' { Disarm-Autonomous $cfg; Show-AutonomousStatus $cfg | Out-Null }
         'autonomousstatus' { Show-AutonomousStatus $cfg | Out-Null }
         'autonomoustest' { Invoke-AutonomousSmoke $cfg }
+        'supervisorstart' { Start-AutonomousSupervisor $cfg | Out-Null; Show-AutonomousSupervisorStatus $cfg | Out-Null }
+        'supervisorstop' { Stop-AutonomousSupervisor $cfg | Out-Null; Show-AutonomousSupervisorStatus $cfg | Out-Null }
+        'supervisorstatus' { Show-AutonomousSupervisorStatus $cfg | Out-Null }
+        'supervisorrecover' { Recover-AutonomousSupervisor $cfg | Out-Null; Show-State $cfg | Out-Null }
         default   { Fail "unknown command '$Name'" }
     }
 }
 
-if ($Command -ne 'menu') { Run-Command $Command; exit 0 }
+if ($Command -ne 'menu') {
+    $recordsStartFailure = $Command -in @('start','resume','restart')
+    if ($recordsStartFailure) { Remove-Item -LiteralPath (Controller-StartFailurePath) -Force -ErrorAction SilentlyContinue }
+    try {
+        Run-Command $Command
+        exit 0
+    } catch {
+        if ($recordsStartFailure) {
+            try { Write-ControllerStartFailure $Command $_.Exception } catch {}
+        }
+        throw
+    }
+}
 
 while ($true) {
     Clear-Host
     $cfg = Get-Config
     Assert-ControllerRootBound $cfg
-    Write-Host 'DEADBYTE MCP ON-DEMAND CONTROLLER V0.8.10 / R33'
+    Write-Host 'DEADBYTE MCP ON-DEMAND CONTROLLER V0.10.0 / R36'
     Write-Host '======================================'
     Show-State $cfg | Out-Null
     Write-Host ''

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-r33-final-candidate-v2\\controller\\runtime\\process-grant.json",
-  "state_dir": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-r33-final-candidate-v2\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp-r36-dev\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp-r36-dev\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-r33-final-candidate-v2\\bin\\deadbyte-process-host.exe",
-    "sha256": "6e8ca7085495a04b9c56e3f7b17142a0e866b1571475ef6a6d90d87f544aab41"
+    "path": "D:\\Projects\\deadbyte-mcp-r36-dev\\bin\\deadbyte-process-host.exe",
+    "sha256": "d37cb084bfd316d8448f2381a915402c61bb306ff8a5721e4b4a364ab192748b"
   },
   "roots": {
     "core": {
-      "path": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-r33-final-candidate-v2",
+      "path": "D:\\Projects\\deadbyte-mcp-r36-dev",
       "deny_paths": [
         "node_modules",
         "controller/runtime",

package/controller/deadbyte-semantic-lsp-config.json

@@ -0,0 +1,95 @@
+{
+  "schema": "deadbyte.semantic-lsp-config.v1",
+  "servers": [
+    {
+      "id": "pyright",
+      "language_id": "python",
+      "extensions": [".py"],
+      "executable_path": "C:\\Program Files\\nodejs\\node.exe",
+      "executable_sha256": "9a4eb5f1c29c6a2e93852ead46b999e284a6a5ca8bab4d4e241d587d025a52de",
+      "args": ["D:\\Projects\\deadbyte-r35-tools\\pyright-1.1.414\\node_modules\\pyright\\langserver.index.js", "--stdio"],
+      "env": {
+        "PATH": "C:\\Program Files\\Python311;C:\\Windows\\System32;C:\\Windows",
+        "SystemRoot": "C:\\Windows",
+        "USERPROFILE": "C:\\Users\\DEADBYTE"
+      },
+      "dependencies": [
+        {"path":"D:\\Projects\\deadbyte-r35-tools\\pyright-1.1.414\\node_modules\\pyright\\langserver.index.js","expected_sha256":"f200762078eb9880faf421a5b30f9ef3055b1d85c6f10780d75db4da8d8499f1"},
+        {"path":"D:\\Projects\\deadbyte-r35-tools\\pyright-1.1.414\\node_modules\\pyright\\dist\\pyright-langserver.js","expected_sha256":"467344c79457ec74f7f7b6cb0f52c3c5ebc7ea77bf53edeb6d2dc6217687b507"},
+        {"path":"D:\\Projects\\deadbyte-r35-tools\\pyright-1.1.414\\node_modules\\pyright\\dist\\pyright-internal.js","expected_sha256":"41fb260ad72f2a16c5657e1f2fe837104d7529255d0fcd955f48432b276e7cae"},
+        {"path":"D:\\Projects\\deadbyte-r35-tools\\pyright-1.1.414\\node_modules\\pyright\\dist\\vendor.js","expected_sha256":"1c691bf9e3fa954dec751ace203beb5591b46a73e3848af5d1ee011d62540798"}
+      ],
+      "initialization_options": {},
+      "request_timeout_ms": 30000,
+      "max_message_bytes": 8388608,
+      "required": true
+    },
+    {
+      "id": "rust-analyzer",
+      "language_id": "rust",
+      "extensions": [".rs"],
+      "executable_path": "C:\\Users\\DEADBYTE\\.rustup\\toolchains\\stable-x86_64-pc-windows-msvc\\bin\\rust-analyzer.exe",
+      "executable_sha256": "d4f688ff66dca6a35d4caee9c39a98b67418dcb942537016ba61c01961930091",
+      "args": [],
+      "env": {
+        "PATH": "C:\\Users\\DEADBYTE\\.rustup\\toolchains\\stable-x86_64-pc-windows-msvc\\bin;C:\\Windows\\System32;C:\\Windows",
+        "SystemRoot": "C:\\Windows",
+        "USERPROFILE": "C:\\Users\\DEADBYTE",
+        "CARGO_HOME": "C:\\Users\\DEADBYTE\\.cargo",
+        "RUSTUP_HOME": "C:\\Users\\DEADBYTE\\.rustup"
+      },
+      "dependencies": [
+        {"path":"C:\\Users\\DEADBYTE\\.rustup\\toolchains\\stable-x86_64-pc-windows-msvc\\bin\\cargo.exe","expected_sha256":"dc19c8e6d66802d120bf0696b1924b748bd90f3ca16f21391e54a290ff12b7c5"},
+        {"path":"C:\\Users\\DEADBYTE\\.rustup\\toolchains\\stable-x86_64-pc-windows-msvc\\bin\\rustc.exe","expected_sha256":"e3ebbd547ea7b73c034d588ba569602b379f3b05ad1a3b5f8dcfab9d4478d74a"},
+        {"path":"C:\\Users\\DEADBYTE\\.rustup\\toolchains\\stable-x86_64-pc-windows-msvc\\libexec\\rust-analyzer-proc-macro-srv.exe","expected_sha256":"3e9e3737a3f05928833ec44fa0bea67bfdb2b5b6bae194edc0fb82565ce04487"}
+      ],
+      "initialization_options": {},
+      "startup_settle_ms": 3000,
+      "null_result_retry_ms": 100,
+      "null_result_max_attempts": 20,
+      "retry_empty_results": true,
+      "request_timeout_ms": 60000,
+      "max_message_bytes": 8388608,
+      "required": true
+    },
+    {
+      "id": "clangd",
+      "language_id": "cpp",
+      "extensions": [".c", ".h", ".cc", ".cpp", ".cxx", ".hpp", ".hh", ".hxx"],
+      "executable_path": "C:\\Program Files\\LLVM\\bin\\clangd.exe",
+      "executable_sha256": "91eb3cbb68ca5e50663126705127703d9c94ae0fc0d267e6602d38bcfcb74524",
+      "args": ["--background-index=false"],
+      "env": {
+        "PATH": "C:\\Program Files\\LLVM\\bin;C:\\Windows\\System32;C:\\Windows",
+        "SystemRoot": "C:\\Windows",
+        "USERPROFILE": "C:\\Users\\DEADBYTE"
+      },
+      "dependencies": [],
+      "initialization_options": {},
+      "null_result_retry_ms": 100,
+      "null_result_max_attempts": 10,
+      "retry_empty_results": true,
+      "request_timeout_ms": 30000,
+      "max_message_bytes": 8388608,
+      "required": true
+    },
+    {
+      "id": "gopls",
+      "language_id": "go",
+      "extensions": [".go"],
+      "executable_path": "D:\\Projects\\deadbyte-r35-tools\\gopls-v0.23.0\\gopls.exe",
+      "executable_sha256": "1e38a0b17f7b453f9228e68a907642de9c2f95852e9b83b1e048d68263b7270b",
+      "args": [],
+      "env": {
+        "PATH": "D:\\Projects\\deadbyte-r35-tools\\go1.27.1\\bin;C:\\Windows\\System32;C:\\Windows",
+        "SystemRoot": "C:\\Windows",
+        "USERPROFILE": "C:\\Users\\DEADBYTE"
+      },
+      "dependencies": [],
+      "initialization_options": {},
+      "request_timeout_ms": 30000,
+      "max_message_bytes": 8388608,
+      "required": false
+    }
+  ]
+}

package/docs/ADR-0001-PRODUCTION-BASELINE-SEAMS.md

@@ -0,0 +1,29 @@
+# ADR-0001: Production baseline seams
+
+Status: accepted for R34 production baseline.
+
+## Decision
+
+DEADBYTE MCP is one product with explicit seams rather than one giant privileged agent process.
+
+- **protocol**: MCP 2026-07-28 negotiation, strict schemas, stdio first, remote transport through the pinned Bridge/tunnel path.
+- **tools**: small typed capabilities with bounded input/output and structured errors.
+- **filesystem**: root-relative policy, deny paths, traversal/symlink defenses, atomic preconditioned mutation.
+- **process**: owned sessions only, bounded output, fixed policy actions, cancellation/termination, no caller-supplied shell command string.
+- **semantic**: compiler/language-service navigation scoped to coding roots; semantic mutation delegates to signed coding-plane edit primitives.
+- **remote**: authenticated persistent device path with guardian cleanup, immutable release identity, rollback, and restore.
+- **policy**: process, coding, autonomous, and host authority are independently armed/revoked and cannot widen configured roots or executables.
+- **telemetry**: structured audit records and signed receipts retain forensic detail; the default human console is compact and never dumps payloads or SHA text unless verbose diagnostics are explicitly requested.
+- **autonomous loop**: one durable plan/execute/replan loop with authenticated journal state and an out-of-band Loop Supervisor. Failure changes the hypothesis; blind retries are prohibited.
+
+## Context strategy
+
+CONTEXT.md is the domain-language source of truth. MCP resources disclose it on demand. Tools return bounded projections, pagination, hashes/receipts where machine verification needs them, and compact user logs where humans need status. Whole-repository prompt stuffing is explicitly rejected.
+
+## Tracer bullet
+
+The minimum production path is a real MCP client that negotiates the protocol, lists tools, reads a source file, performs an exact surgical edit under a file-digest precondition, runs a pinned command, verifies signed receipts, and reads the committed result back. The release gate must keep this path green.
+
+## Consequences
+
+This architecture accepts more explicit policy/evidence plumbing in exchange for reproducible behavior, reversible releases, and smaller failure domains. Semantic coverage may be backend-specific; unsupported languages must fail honestly or use an explicitly configured pinned adapter rather than silently falling back to grep and calling it semantic navigation.

package/docs/ARCHITECTURE.md

@@ -1,4 +1,4 @@
-# DEADBYTE MCP V0.8.10 / R33 ARCHITECTURE
+# DEADBYTE MCP V0.10.0 / R36 ARCHITECTURE
 
 ```mermaid
 flowchart TD
@@ -10,7 +10,7 @@ flowchart TD
     D --> F[Optional Host 3 Tools]
     D --> G[Optional Agent 7 Tools]
     D --> PR[Optional Process 6 Tools]
-    D --> V[Optional Coding 17 Tools]
+    D --> V[Optional Coding 22 Tools]
     D --> MF[Optional Machine FS 8 Tools]
     D --> OB[Optional Observation 6 Tools]
     D --> AA[Optional Autonomous 12 Tools]
@@ -42,8 +42,9 @@ The lifecycle controller is not execution authority. It starts, parks, resumes,
 observes, or stops verified owned processes and feature-gates the agent catalog;
 it cannot manufacture arbitrary MCP capabilities. The npx foreground `remote` session is an
 operator-side orchestrator over existing controller commands: it acquires the four explicit
-standing grants in dependency order, verifies their observed ARMED state, tails only newly appended
-audit/runtime logs, and revokes all four grants plus parks the Bridge on graceful session exit.
+standing grants in dependency order, verifies their observed ARMED state, shows compact completed-tool
+results by default, and revokes all four grants plus parks the Bridge on graceful session exit. Detailed
+audit/runtime and Bridge records remain available through `remote --verbose` and the persistent evidence store.
 A detached guardian is bound to the foreground owner by a random session nonce. The v2 marker
 records owner PID, guardian PID, and nonce; if the owner is hard-killed before graceful cleanup,
 the guardian independently invokes only the fixed revoke+park controller sequence and removes the
@@ -54,7 +55,7 @@ invocation may recover a stale owner only when no live guardian remains.
 
 Only complete combinations of base plus optional machine, host, agent, process, coding,
 machine-filesystem, observation, and autonomous surfaces are valid at the HTTP bridge. A fully
-enabled R33 runtime exposes exactly 68 tools. Process authority is independently granted;
+enabled R34 runtime exposes exactly 73 tools. Process authority is independently granted;
 machine-filesystem and observation reuse coding-policy roots; autonomous requires the complete
 coding surface. Partial, dependency-invalid, unknown, or extra catalogs fail closed.
 

package/docs/R36-CAPABILITY-EVIDENCE.md

@@ -0,0 +1,43 @@
+# R36 Capability Evidence
+
+Status: development evidence for R36 / planned package version 0.10.0. This document is not a release or Final claim. Release authority remains the R36 freeze, Windows gate, activation/rollback/restore, independent final closure, and npm byte-identity gates.
+
+## Reproducible DEADBYTE observation
+
+The approved R36 production-coding corpus contains 30 required cases. The latest hermetic run completed with:
+
+- cases: 30
+- correct: 30
+- capability_reachable: 30
+- evidence_verified: 30
+- stable verdict identity SHA-256: `3a1d668fcc0c3c38362d0c642c5247357ed7ec6063d89b544c7a1c090521c66e`
+- fixture identity SHA-256: `4a12567e285a4b7b59d9285e08f918357e7b560d2cb9b65f017367188839ef7e`
+- two consecutive passing observation SHA-256 values: `710d0f3ef7bbe1fa3a6b782ba6442a8161d0d5556622e3ca95f2f3baf97cbae3` and `44b52d9507dc04baeeebb5617c63d7d59dbe9b29878fc9420bc5bac3ff7fee0b` (timing-sensitive by design)
+
+The corpus covers repository exploration, literal/regex/path search, deterministic paging, bounded multi-read, stat/reparse handling, stale-edit rejection, Native Diff file and topology transactions, semantic navigation/diagnostics/implementations/rename, process lifecycle/actions/recovery, autonomous repair, release-gate refusal, provider interruption recovery, remote replay/deduplication, compact capability closure, Live Logs ordering/redaction, receipt rejection, and hermetic rollback/restore mechanism proof.
+
+The benchmark runner requires both test success and a named pass witness. A zero exit caused only by a skipped or unmatched test is not accepted as evidence. Correctness, reachability, and evidence verification are recorded as separate dimensions rather than collapsed into a marketing score.
+
+## External reference baseline
+
+The comparison references are public upstream projects:
+
+- Desktop Commander local MCP: https://github.com/wonderwhy-er/DesktopCommanderMCP
+- Remote Desktop Commander: https://github.com/desktop-commander/remote-desktop-commander
+- Serena: https://github.com/oraios/serena
+
+`documented` means a capability is described by the upstream public project documentation/source used as a behavioral reference. `direct_observation` means we executed the referenced implementation or service ourselves and retained reproducible local evidence. These evidence classes are not interchangeable.
+
+For this R36 development checkpoint, the DEADBYTE 30-case result above is `direct_observation`. Competitor capability descriptions used for design comparison are `documented` unless an explicit retained direct run is attached to a later release evidence record. Unavailable service state, quota, account requirements, or missing local authority must never be converted into a passing direct observation.
+
+## Comparison discipline
+
+R36 is evaluated for production software-engineering autonomy, not unrelated document-editing or generic desktop-administration breadth. Tool count is not a quality metric and is not used as a release verdict.
+
+The mechanisms tested directly in DEADBYTE include SHA-256 mutation preconditions, Native Diff rollback and independent verification, separately revocable process/coding/autonomous/host authority, typed capability routing, signed journals/receipts, bounded long-process observation, semantic rename through Native Diff, capability-aware autonomous execution, resumable Live Logs, compact-surface closure, and immutable release rollback/restore machinery.
+
+Desktop Commander, Remote Desktop Commander, and Serena remain useful comparison references for different strengths and breadth. Any public comparison made from R36 must name the supporting DEADBYTE benchmark case/evidence identity and identify the competitor side as `documented` or `direct_observation`. A difference in mechanism is not by itself a general product ranking.
+
+## Release boundary
+
+Case 30 is a hermetic rollback/restore mechanism test. It does not replace the production release proof. Before R36 can become Final, one exact frozen 0.10.0 candidate must still pass the full source regression and Windows gate, activate as an immutable slot, roll back to the exact sealed R35 predecessor, restore the exact same R36 candidate, pass independent final-closure verification, and then be packed and published from that verified candidate with registry tarball byte identity proved.