deadbyte-mcp 0.8.10 → 0.10.0

package/node_modules/typescript/package.json

@@ -0,0 +1,120 @@
+{
+    "name": "typescript",
+    "author": "Microsoft Corp.",
+    "homepage": "https://www.typescriptlang.org/",
+    "version": "5.9.3",
+    "license": "Apache-2.0",
+    "description": "TypeScript is a language for application scale JavaScript development",
+    "keywords": [
+        "TypeScript",
+        "Microsoft",
+        "compiler",
+        "language",
+        "javascript"
+    ],
+    "bugs": {
+        "url": "https://github.com/microsoft/TypeScript/issues"
+    },
+    "repository": {
+        "type": "git",
+        "url": "https://github.com/microsoft/TypeScript.git"
+    },
+    "main": "./lib/typescript.js",
+    "typings": "./lib/typescript.d.ts",
+    "bin": {
+        "tsc": "./bin/tsc",
+        "tsserver": "./bin/tsserver"
+    },
+    "engines": {
+        "node": ">=14.17"
+    },
+    "files": [
+        "bin",
+        "lib",
+        "!lib/enu",
+        "LICENSE.txt",
+        "README.md",
+        "SECURITY.md",
+        "ThirdPartyNoticeText.txt",
+        "!**/.gitattributes"
+    ],
+    "devDependencies": {
+        "@dprint/formatter": "^0.4.1",
+        "@dprint/typescript": "0.93.4",
+        "@esfx/canceltoken": "^1.0.0",
+        "@eslint/js": "^9.20.0",
+        "@octokit/rest": "^21.1.1",
+        "@types/chai": "^4.3.20",
+        "@types/diff": "^7.0.1",
+        "@types/minimist": "^1.2.5",
+        "@types/mocha": "^10.0.10",
+        "@types/ms": "^0.7.34",
+        "@types/node": "latest",
+        "@types/source-map-support": "^0.5.10",
+        "@types/which": "^3.0.4",
+        "@typescript-eslint/rule-tester": "^8.24.1",
+        "@typescript-eslint/type-utils": "^8.24.1",
+        "@typescript-eslint/utils": "^8.24.1",
+        "azure-devops-node-api": "^14.1.0",
+        "c8": "^10.1.3",
+        "chai": "^4.5.0",
+        "chokidar": "^4.0.3",
+        "diff": "^7.0.0",
+        "dprint": "^0.49.0",
+        "esbuild": "^0.25.0",
+        "eslint": "^9.20.1",
+        "eslint-formatter-autolinkable-stylish": "^1.4.0",
+        "eslint-plugin-regexp": "^2.7.0",
+        "fast-xml-parser": "^4.5.2",
+        "glob": "^10.4.5",
+        "globals": "^15.15.0",
+        "hereby": "^1.10.0",
+        "jsonc-parser": "^3.3.1",
+        "knip": "^5.44.4",
+        "minimist": "^1.2.8",
+        "mocha": "^10.8.2",
+        "mocha-fivemat-progress-reporter": "^0.1.0",
+        "monocart-coverage-reports": "^2.12.1",
+        "ms": "^2.1.3",
+        "picocolors": "^1.1.1",
+        "playwright": "^1.50.1",
+        "source-map-support": "^0.5.21",
+        "tslib": "^2.8.1",
+        "typescript": "^5.7.3",
+        "typescript-eslint": "^8.24.1",
+        "which": "^3.0.1"
+    },
+    "overrides": {
+        "typescript@*": "$typescript"
+    },
+    "scripts": {
+        "test": "hereby runtests-parallel --light=false",
+        "test:eslint-rules": "hereby run-eslint-rules-tests",
+        "build": "npm run build:compiler && npm run build:tests",
+        "build:compiler": "hereby local",
+        "build:tests": "hereby tests",
+        "build:tests:notypecheck": "hereby tests --no-typecheck",
+        "clean": "hereby clean",
+        "gulp": "hereby",
+        "lint": "hereby lint",
+        "knip": "hereby knip",
+        "format": "dprint fmt",
+        "setup-hooks": "node scripts/link-hooks.mjs"
+    },
+    "browser": {
+        "fs": false,
+        "os": false,
+        "path": false,
+        "crypto": false,
+        "buffer": false,
+        "source-map-support": false,
+        "inspector": false,
+        "perf_hooks": false
+    },
+    "packageManager": "npm@8.19.4",
+    "volta": {
+        "node": "20.1.0",
+        "npm": "8.19.4"
+    },
+    "gitHead": "c63de15a992d37f0d6cec03ac7631872838602cb"
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.8.10",
+  "version": "0.10.0",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP machine-truth runtime with signed audit chain, immutable release slots, contained execution, coding/autonomous production authority, and npx-first remote control.",
@@ -52,12 +52,14 @@
   "bundleDependencies": [
     "@modelcontextprotocol/server",
     "@modelcontextprotocol/client",
+    "typescript",
     "zod"
   ],
   "dependencies": {
+    "@modelcontextprotocol/client": "2.0.0",
     "@modelcontextprotocol/server": "2.0.0",
-    "zod": "4.4.3",
-    "@modelcontextprotocol/client": "2.0.0"
+    "typescript": "5.9.3",
+    "zod": "4.4.3"
   },
   "bin": {
     "deadbyte-mcp": "src/deadbyte-cli.mjs"

package/proof/CONTAINMENT-BUILD.txt

@@ -39,7 +39,7 @@ deadbyte-process-host.cpp
 exit_code=0
 ==== probe-dependencies ====
 
-Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-r33-final-candidate-v2\bin\containment-probe.exe
+Dump of file D:\Projects\deadbyte-mcp-r36-dev\bin\containment-probe.exe
 
 File Type: EXECUTABLE IMAGE
 
@@ -59,7 +59,7 @@ File Type: EXECUTABLE IMAGE
 exit_code=0
 ==== contained-launcher-dependencies ====
 
-Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-r33-final-candidate-v2\bin\deadbyte-exec.exe
+Dump of file D:\Projects\deadbyte-mcp-r36-dev\bin\deadbyte-exec.exe
 
 File Type: EXECUTABLE IMAGE
 
@@ -83,7 +83,7 @@ File Type: EXECUTABLE IMAGE
 exit_code=0
 ==== contained-worker-dependencies ====
 
-Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-r33-final-candidate-v2\bin\contained-transform-worker.exe
+Dump of file D:\Projects\deadbyte-mcp-r36-dev\bin\contained-transform-worker.exe
 
 File Type: EXECUTABLE IMAGE
 
@@ -104,7 +104,7 @@ File Type: EXECUTABLE IMAGE
 exit_code=0
 ==== contained-reverse-worker-dependencies ====
 
-Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-r33-final-candidate-v2\bin\contained-reverse-worker.exe
+Dump of file D:\Projects\deadbyte-mcp-r36-dev\bin\contained-reverse-worker.exe
 
 File Type: EXECUTABLE IMAGE
 
@@ -125,7 +125,7 @@ File Type: EXECUTABLE IMAGE
 exit_code=0
 ==== named-tunnel-host-dependencies ====
 
-Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-r33-final-candidate-v2\bin\deadbyte-tunnel-host.exe
+Dump of file D:\Projects\deadbyte-mcp-r36-dev\bin\deadbyte-tunnel-host.exe
 
 File Type: EXECUTABLE IMAGE
 
@@ -144,7 +144,7 @@ File Type: EXECUTABLE IMAGE
 exit_code=0
 ==== process-host-dependencies ====
 
-Dump of file C:\Users\DEADBYTE\Downloads\deadbyte-mcp-r33-final-candidate-v2\bin\deadbyte-process-host.exe
+Dump of file D:\Projects\deadbyte-mcp-r36-dev\bin\deadbyte-process-host.exe
 
 File Type: EXECUTABLE IMAGE
 

package/proof/R34-TASK8-SUPERVISOR-CHECKPOINT.json

@@ -0,0 +1,29 @@
+{
+  "schema": "deadbyte.r34.task8-checkpoint.v1",
+  "task": 8,
+  "status": "passed",
+  "workspace": "D:\\Projects\\deadbyte-mcp-r34-loop-engine",
+  "node_executable_sha256": "9a4eb5f1c29c6a2e93852ead46b999e284a6a5ca8bab4d4e241d587d025a52de",
+  "sources": {
+    "src/autonomous-local-supervisor.mjs": "ab0158c3f6e270ee367ae96455dd2b75a902c808b2a10ac2c5b75fdda00be6c3",
+    "src/autonomous-supervisor.mjs": "8ea06b5941de9b346ab4e97ff6ed236964b864fbe725602baee3a54dd74527c0",
+    "src/autonomous-supervisor-host.mjs": "335022086ef41e6cc9853468d928acc864deab8009383dc22518a6ec7e749fa1",
+    "src/deadbyte-cli.mjs": "0b0d41a51559502a6ff377a4f74e6f80ea77d37002a700e04bd7c4dd3f226b42",
+    "controller/deadbyte-controller.ps1": "279dfe20345193ca229cc442b25796f12d4c8ec9f9d3e2d26a607a7342b96a5a",
+    "controller/deadbyte-controller.config.psd1.example": "f20a5bf0df576dbdd32af657640b26c5c50c39dce0b465b7488c218917c729f7"
+  },
+  "regression": {
+    "tests": 40,
+    "passed": 40,
+    "failed": 0,
+    "receipt_id": "473fb1f0f7e6a2dec1ea9d80",
+    "receipt_sha256": "255e3679051eff46ae745b16f07d6a3c40f87e42259ac651ef286c9d876ceae2",
+    "receipt_signature_valid": true,
+    "marker": "TASK8_REGRESSION=PASS"
+  },
+  "authority_contract": {
+    "self_arm": false,
+    "recovery_operations": ["resume","disarmautonomous","disarmcoding","disarmprocess","disarmhost","status"],
+    "final_required": "ONLINE + process/coding/autonomous/host DISARMED"
+  }
+}

package/proof/R34-TASK9-MCP-SURFACE-CHECKPOINT.json

@@ -0,0 +1,28 @@
+{
+  "schema": "deadbyte.r34-task9-checkpoint.v1",
+  "status": "passed",
+  "workspace": "D:\\Projects\\deadbyte-mcp-r34-loop-engine",
+  "public_tool_count": 68,
+  "public_tool_unique_count": 68,
+  "public_tool_catalog_sha256": "bb7c08e116178e3da4b577b591f7058eb6caf7632358e765d28ccb20b2e36f45",
+  "mcp_server_sha256": "5a6cd82c332e4cef30c4ccfeb12f8cb3634cb6c92104931768b42ba6a84b62b3",
+  "controller_sha256": "cf8ab26a7481801da07c5c0a842df4ce1279854ed67781f967e5412da5c2aa3d",
+  "supervisor_integration_test_sha256": "127e170995460daabab88860f20f1b4c2416839e018df0e1cda23b58d032beab",
+  "exact_surface_gate": {
+    "tests": 19,
+    "pass": 19,
+    "fail": 0,
+    "receipt_id": "dc0b7e9c6c9e340c037bc54a",
+    "receipt_sha256": "f6b8ac9b6d499d51f60c7f8053a2e591e09654cdfe5bf69c449b15d133e48506"
+  },
+  "catalog_observation": {
+    "receipt_id": "7dd6df7d9b575e786101d1d0",
+    "receipt_sha256": "226e0861c01cb485ef94b91c1562a3cb70123698b9a52bb62ba883940be940cf"
+  },
+  "supervision": {
+    "in_process_compatibility": true,
+    "external_owner_mode": true,
+    "bridge_external_mode_does_not_execute_goal": true,
+    "standalone_host_advances_durable_goal": true
+  }
+}

package/scripts/capability-benchmark.mjs

@@ -0,0 +1,27 @@
+import { mkdir, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { runCapabilityBenchmark } from '../src/capability-benchmark-runner.mjs';
+
+function argValue(name){
+  const prefix=`${name}=`;
+  const hit=process.argv.slice(2).find(value=>value.startsWith(prefix));
+  return hit?hit.slice(prefix.length):null;
+}
+
+const out=argValue('--out');
+const timeoutRaw=argValue('--timeout-ms');
+const timeoutMs=timeoutRaw===null?180000:Number(timeoutRaw);
+if(!Number.isInteger(timeoutMs)||timeoutMs<1000||timeoutMs>600000) throw new Error('capability benchmark timeout invalid');
+const env={
+  DEADBYTE_R35_SEMANTIC_CONFIG:process.env.DEADBYTE_R35_SEMANTIC_CONFIG??'',
+  DEADBYTE_R35_SEMANTIC_CONFIG_SHA256:process.env.DEADBYTE_R35_SEMANTIC_CONFIG_SHA256??''
+};
+const result=await runCapabilityBenchmark({rootUrl:new URL('../',import.meta.url),env,timeoutMs});
+const text=`${JSON.stringify(result,null,2)}\n`;
+if(out){
+  const target=path.resolve(out);
+  await mkdir(path.dirname(target),{recursive:true});
+  await writeFile(target,text,{encoding:'utf8'});
+}
+process.stdout.write(text);
+if(!result.overall_correct) process.exitCode=1;

package/scripts/deferred-slot-operation.mjs

@@ -5,7 +5,7 @@ import os from 'node:os';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { parseActivePointer } from '../src/release-slot.mjs';
-import { runSlotUpdateCli, verifySlotUpdateEnvelope } from '../src/runtime-update.mjs';
+import { loadPowerShellDataFile, runSlotUpdateCli, verifySlotUpdateEnvelope } from '../src/runtime-update.mjs';
 
 const HEX64=/^[0-9a-f]{64}$/;
 const RECEIPT_ID=/^r27-[A-Za-z0-9-]+$/;
@@ -22,9 +22,33 @@ const atomicJson=async(file,value)=>{
 };
 function activationArgs(manifestSha){
   if(!HEX64.test(manifestSha??'')) throw new Error('activate requires one lowercase manifest SHA-256');
-  return ['--stage',packageRoot,'--development-root',packageRoot,'--expected-version','0.8.10',
+  return ['--stage',packageRoot,'--development-root',packageRoot,'--expected-version','0.10.0',
     '--expected-manifest',manifestSha,'--process-policy',path.join(packageRoot,'controller','deadbyte-process-policy.json'),
-    '--process-policy-sha256',null,'--enable-machine-fs','--enable-observation'];
+    '--process-policy-sha256',null,'--semantic-lsp-config',path.join(packageRoot,'controller','deadbyte-semantic-lsp-config.json'),
+    '--semantic-lsp-config-sha256',null,'--enable-machine-fs','--enable-observation','--enable-autonomous-supervisor'];
+}
+async function bridgeBootstrapArgs(explicitBridgeRoot=null,explicitBridgeSha256=null){
+  const hasRoot=typeof explicitBridgeRoot==='string'&&explicitBridgeRoot.length>0;
+  const hasSha=typeof explicitBridgeSha256==='string'&&explicitBridgeSha256.length>0;
+  if(hasRoot!==hasSha) throw new Error('bridge override requires exact root + SHA pair');
+  let bridgeRootRaw,expectedSha256=null;
+  if(hasRoot){
+    if(!path.isAbsolute(explicitBridgeRoot)||!HEX64.test(explicitBridgeSha256)) throw new Error('bridge override requires exact root + SHA pair');
+    bridgeRootRaw=explicitBridgeRoot;expectedSha256=explicitBridgeSha256;
+  }else{
+    const pointer=parseActivePointer(await readFile(path.join(stateRoot,'active-release.json'),'utf8'));
+    const config=await loadPowerShellDataFile(pointer.config_path);
+    bridgeRootRaw=config?.Bridge?.WorkingDirectory;
+    if(typeof bridgeRootRaw!=='string'||!path.isAbsolute(bridgeRootRaw)) throw new Error('active controller Bridge.WorkingDirectory must be absolute');
+  }
+  const bridgeRoot=await realpath(path.resolve(bridgeRootRaw));
+  const packageFile=path.join(bridgeRoot,'package.json');
+  const bridgeScript=path.join(bridgeRoot,'src','bridge.mjs');
+  const pkg=JSON.parse(await readFile(packageFile,'utf8'));
+  if(pkg?.name!=='deadbyte-chatgpt-bridge') throw new Error('active Bridge package identity mismatch');
+  const scriptSha256=sha256(await readFile(bridgeScript));
+  if(expectedSha256&&scriptSha256!==expectedSha256) throw new Error('bridge override SHA-256 mismatch');
+  return ['--bridge-root',bridgeRoot,'--bridge-script-sha256',scriptSha256];
 }
 async function rollbackArgs(receiptPath){
   const resolved=await realpath(path.resolve(receiptPath));
@@ -41,44 +65,60 @@ async function rollbackArgs(receiptPath){
   }
   return ['--rollback-receipt',resolved];
 }
-async function normalizedArgs(mode,value){
+async function normalizedArgs(mode,value,{explicitBridgeRoot=null,explicitBridgeSha256=null}={}){
   if(mode==='activate'){
     const args=activationArgs(value);
     args[args.indexOf('--process-policy-sha256')+1]=sha256(await readFile(path.join(packageRoot,'controller','deadbyte-process-policy.json')));
+    args[args.indexOf('--semantic-lsp-config-sha256')+1]=sha256(await readFile(path.join(packageRoot,'controller','deadbyte-semantic-lsp-config.json')));
+    args.push(...await bridgeBootstrapArgs(explicitBridgeRoot,explicitBridgeSha256));
     return args;
   }
-  if(mode==='rollback') return rollbackArgs(value);
+  if(mode==='rollback'){
+    if(explicitBridgeRoot||explicitBridgeSha256) throw new Error('rollback does not accept bridge override');
+    return rollbackArgs(value);
+  }
   throw new Error("operation must be exactly 'activate' or 'rollback'");
 }
 const rawArgs=process.argv.slice(2);
-const [mode,value,workerFlag,operationIdArg]=rawArgs;
-if(!value||!['activate','rollback'].includes(mode)||!['',undefined,'--worker'].includes(workerFlag)||
-    (workerFlag==='--worker'?rawArgs.length!==4:rawArgs.length!==2)) {
-  throw new Error('usage: deferred-slot-operation.mjs <activate manifest_sha256|rollback activation_receipt>');
+const mode=rawArgs[0],value=rawArgs[1];
+if(!value||!['activate','rollback'].includes(mode)) throw new Error('usage: deferred-slot-operation.mjs <activate manifest_sha256|rollback activation_receipt> [--bridge-root ABS --bridge-script-sha256 HEX64]');
+let cursor=2,explicitBridgeRoot=null,explicitBridgeSha256=null;
+if(rawArgs[cursor]==='--bridge-root'){
+  explicitBridgeRoot=rawArgs[cursor+1]??null;
+  if(rawArgs[cursor+2]!=='--bridge-script-sha256') throw new Error('bridge override requires exact root + SHA pair');
+  explicitBridgeSha256=rawArgs[cursor+3]??null;cursor+=4;
 }
-const args=await normalizedArgs(mode,value);
+let workerFlag=null,operationIdArg=null;
+if(rawArgs[cursor]==='--worker'){workerFlag='--worker';operationIdArg=rawArgs[cursor+1]??null;cursor+=2;}
+if(cursor!==rawArgs.length) throw new Error('deferred slot operation arguments invalid');
+if((explicitBridgeRoot===null)!==(explicitBridgeSha256===null)) throw new Error('bridge override requires exact root + SHA pair');
+if(mode==='rollback'&&(explicitBridgeRoot||explicitBridgeSha256)) throw new Error('rollback does not accept bridge override');
 if(workerFlag==='--worker'){
   if(!/^[0-9a-f]{32}$/.test(operationIdArg??'')) throw new Error('deferred worker operation id invalid');
   const statePath=path.join(evidenceRoot,`${operationIdArg}.json`);
   await new Promise(resolve=>setTimeout(resolve,4000));
-  await atomicJson(statePath,{schema:'deadbyte.deferred-slot-operation.v1',operation_id:operationIdArg,mode,state:'running',started_at_utc:new Date().toISOString()});
+  await atomicJson(statePath,{schema:'deadbyte.deferred-slot-operation.v1',operation_id:operationIdArg,mode,state:'running',started_at_utc:new Date().toISOString(),bridge_root:explicitBridgeRoot,bridge_script_sha256:explicitBridgeSha256});
   try{
+    const args=await normalizedArgs(mode,value,{explicitBridgeRoot,explicitBridgeSha256});
     const result=await runSlotUpdateCli(args,{stateRoot});
     await atomicJson(statePath,{schema:'deadbyte.deferred-slot-operation.v1',operation_id:operationIdArg,mode,state:'completed',
       completed_at_utc:new Date().toISOString(),receipt_path:result.receipt_path,receipt_sha256:result.receipt_sha256,
-      active_release:result.pointer.release_id,generation_root:result.pointer.generation_root});
+      active_release:result.pointer.release_id,generation_root:result.pointer.generation_root,bridge_root:explicitBridgeRoot,bridge_script_sha256:explicitBridgeSha256});
   }catch(error){
     await atomicJson(statePath,{schema:'deadbyte.deferred-slot-operation.v1',operation_id:operationIdArg,mode,state:'failed',
-      completed_at_utc:new Date().toISOString(),error:String(error?.message??error)});
+      completed_at_utc:new Date().toISOString(),error:String(error?.message??error),bridge_root:explicitBridgeRoot,bridge_script_sha256:explicitBridgeSha256});
     process.exitCode=1;
   }
 }else{
   const operationId=randomBytes(16).toString('hex');
   const statePath=path.join(evidenceRoot,`${operationId}.json`);
-  await atomicJson(statePath,{schema:'deadbyte.deferred-slot-operation.v1',operation_id:operationId,mode,state:'scheduled',scheduled_at_utc:new Date().toISOString()});
-  const child=spawn(process.execPath,[fileURLToPath(import.meta.url),mode,value,'--worker',operationId],{
+  await atomicJson(statePath,{schema:'deadbyte.deferred-slot-operation.v1',operation_id:operationId,mode,state:'scheduled',scheduled_at_utc:new Date().toISOString(),bridge_root:explicitBridgeRoot,bridge_script_sha256:explicitBridgeSha256});
+  const workerArgs=[fileURLToPath(import.meta.url),mode,value];
+  if(explicitBridgeRoot) workerArgs.push('--bridge-root',explicitBridgeRoot,'--bridge-script-sha256',explicitBridgeSha256);
+  workerArgs.push('--worker',operationId);
+  const child=spawn(process.execPath,workerArgs,{
     cwd:packageRoot,detached:true,stdio:'ignore',windowsHide:true,env:{...process.env,DEADBYTE_STATE_ROOT:stateRoot}
   });
   child.unref();
-  console.log(JSON.stringify({status:'scheduled',operation_id:operationId,mode,state_path:statePath,execution_provider:'deadbyte_mcp',rdc_operation_count:0}));
+  console.log(JSON.stringify({status:'scheduled',operation_id:operationId,mode,state_path:statePath,execution_provider:'deadbyte_mcp',rdc_operation_count:0,bridge_root:explicitBridgeRoot,bridge_script_sha256:explicitBridgeSha256}));
 }