deadbyte-mcp 0.8.10 → 0.9.0

package/controller/deadbyte-controller.ps1

@@ -2,7 +2,7 @@
 [CmdletBinding()]
 param(
     [Parameter(Position=0)]
-    [ValidateSet('menu','start','resume','park','stop','restart','status','url','test','fulltest','toggle','clean','machinetest','armprocess','disarmprocess','processstatus','armhost','disarmhost','hoststatus','hosttest','armcoding','disarmcoding','codingstatus','codingtest','armautonomous','disarmautonomous','autonomousstatus','autonomoustest')]
+    [ValidateSet('menu','start','resume','park','stop','restart','status','url','test','fulltest','toggle','clean','machinetest','armprocess','disarmprocess','processstatus','armhost','disarmhost','hoststatus','hosttest','armcoding','disarmcoding','codingstatus','codingtest','armautonomous','disarmautonomous','autonomousstatus','autonomoustest','supervisorstart','supervisorstop','supervisorstatus','supervisorrecover')]
     [string]$Command = 'menu'
 )
 
@@ -44,7 +44,14 @@ function Get-Config {
     $workspaceRoot = [System.IO.Path]::GetFullPath($workspaceRoot)
     if (-not (Test-Path -LiteralPath $workspaceRoot -PathType Container)) { Fail "WorkspaceRoot missing: $workspaceRoot" }
     $cfg['WorkspaceRoot'] = $workspaceRoot
-    foreach ($name in @('Bridge','Cloud')) {
+    if ($cfg.ContainsKey('AutonomousSupervisorEnabled')) {
+        if ($cfg.AutonomousSupervisorEnabled -isnot [bool]) { Fail 'AutonomousSupervisorEnabled must be boolean' }
+    } else {
+        $cfg['AutonomousSupervisorEnabled'] = $false
+    }
+    $componentNames = @('Bridge','Cloud')
+    if ([bool]$cfg.AutonomousSupervisorEnabled) { $componentNames += 'Supervisor' }
+    foreach ($name in $componentNames) {
         $spec = $cfg[$name]
         if (-not $spec -or -not $spec.ContainsKey('FilePath') -or [string]::IsNullOrWhiteSpace([string]$spec.FilePath)) { Fail "$name FilePath missing" }
         if (-not $spec.ContainsKey('Arguments')) { Fail "$name Arguments field missing" }
@@ -66,13 +73,14 @@ function Get-Config {
                 if ($dependencyCount -ne 2) { Fail 'deadbyte.named-tunnel.v2 requires exactly cloudflared plus token-file pins' }
             } else { Fail 'Cloud Transport unsupported' }
         }
-        if ($name -eq 'Bridge') {
-            if (-not $spec.ContainsKey('ScriptPath') -or [string]::IsNullOrWhiteSpace([string]$spec.ScriptPath)) { Fail 'Bridge ScriptPath missing' }
-            if (-not $spec.ContainsKey('ScriptSha256') -or [string]$spec.ScriptSha256 -cnotmatch '^[0-9a-f]{64}$') { Fail 'Bridge ScriptSha256 invalid' }
+        if ($name -in @('Bridge','Supervisor')) {
+            if (-not $spec.ContainsKey('ScriptPath') -or [string]::IsNullOrWhiteSpace([string]$spec.ScriptPath)) { Fail "$name ScriptPath missing" }
+            if (-not $spec.ContainsKey('ScriptSha256') -or [string]$spec.ScriptSha256 -cnotmatch '^[0-9a-f]{64}$') { Fail "$name ScriptSha256 invalid" }
             $scriptPath = [System.IO.Path]::GetFullPath([string]$spec.ScriptPath)
-            if (-not (Test-Path -LiteralPath $scriptPath -PathType Leaf)) { Fail "Bridge ScriptPath missing: $scriptPath" }
+            if (-not (Test-Path -LiteralPath $scriptPath -PathType Leaf)) { Fail "$name ScriptPath missing: $scriptPath" }
+            if ($name -eq 'Supervisor' -and [System.IO.Path]::GetFileName($scriptPath) -ne 'autonomous-supervisor-host.mjs') { Fail 'Supervisor ScriptPath must target autonomous-supervisor-host.mjs' }
             $scriptHash = Get-ExecutableHash $scriptPath
-            if ($scriptHash -ne [string]$spec.ScriptSha256) { Fail "bridge script hash mismatch: expected $($spec.ScriptSha256), found $scriptHash" }
+            if ($scriptHash -ne [string]$spec.ScriptSha256) { Fail "$name script hash mismatch: expected $($spec.ScriptSha256), found $scriptHash" }
             $spec['ScriptPath'] = $scriptPath
         }
     }
@@ -131,6 +139,24 @@ function Get-Config {
         $cfg['CodingPolicyFile'] = ''
     }
     if ([bool]$cfg.CodingRuntimeEnabled -and [string]::IsNullOrWhiteSpace([string]$cfg.CodingPolicyFile)) { Fail 'CodingRuntimeEnabled requires CodingPolicyFile' }
+    $semanticConfigFile = if ($cfg.ContainsKey('SemanticLspConfigFile')) { [string]$cfg.SemanticLspConfigFile } else { '' }
+    $semanticConfigSha = if ($cfg.ContainsKey('SemanticLspConfigSha256')) { ([string]$cfg.SemanticLspConfigSha256).ToLowerInvariant() } else { '' }
+    if ([string]::IsNullOrWhiteSpace($semanticConfigFile) -ne [string]::IsNullOrWhiteSpace($semanticConfigSha)) { Fail 'SemanticLspConfigFile and SemanticLspConfigSha256 must be supplied together' }
+    if (-not [string]::IsNullOrWhiteSpace($semanticConfigFile)) {
+        if (-not [bool]$cfg.CodingRuntimeEnabled) { Fail 'SemanticLspConfigFile requires CodingRuntimeEnabled' }
+        if ($semanticConfigSha -cnotmatch '^[0-9a-f]{64}$') { Fail 'SemanticLspConfigSha256 invalid' }
+        $semanticConfigFile = [System.IO.Path]::GetFullPath($semanticConfigFile)
+        if (-not (Test-Path -LiteralPath $semanticConfigFile -PathType Leaf)) { Fail "SemanticLspConfigFile missing: $semanticConfigFile" }
+        $semanticItem = Get-Item -LiteralPath $semanticConfigFile -Force
+        if (($semanticItem.Attributes -band [System.IO.FileAttributes]::ReparsePoint) -ne 0) { Fail 'SemanticLspConfigFile must not be a reparse point' }
+        $semanticObserved = Get-ExecutableHash $semanticConfigFile
+        if ($semanticObserved -ne $semanticConfigSha) { Fail "semantic LSP config SHA-256 mismatch: expected $semanticConfigSha, found $semanticObserved" }
+        $cfg['SemanticLspConfigFile'] = $semanticConfigFile
+        $cfg['SemanticLspConfigSha256'] = $semanticConfigSha
+    } else {
+        $cfg['SemanticLspConfigFile'] = ''
+        $cfg['SemanticLspConfigSha256'] = ''
+    }
     if ($cfg.ContainsKey('MachineFsRuntimeEnabled')) {
         if ($cfg.MachineFsRuntimeEnabled -isnot [bool]) { Fail 'MachineFsRuntimeEnabled must be boolean' }
     } else {
@@ -158,6 +184,7 @@ function Get-Config {
     }
     if ([bool]$cfg.AutonomousRuntimeEnabled -and -not [bool]$cfg.CodingRuntimeEnabled) { Fail 'AutonomousRuntimeEnabled requires CodingRuntimeEnabled' }
     if ([bool]$cfg.AutonomousRuntimeEnabled -and [string]::IsNullOrWhiteSpace([string]$cfg.AutonomousPolicyFile)) { Fail 'AutonomousRuntimeEnabled requires AutonomousPolicyFile' }
+    if ([bool]$cfg.AutonomousSupervisorEnabled -and -not [bool]$cfg.AutonomousRuntimeEnabled) { Fail 'AutonomousSupervisorEnabled requires AutonomousRuntimeEnabled' }
     if ([int]$cfg.StartTimeoutSeconds -lt 1 -or [int]$cfg.StartTimeoutSeconds -gt 120) { Fail 'StartTimeoutSeconds out of range' }
     if ([int]$cfg.ProbeTimeoutSeconds -lt 1 -or [int]$cfg.ProbeTimeoutSeconds -gt 15) { Fail 'ProbeTimeoutSeconds out of range' }
     return $cfg
@@ -264,7 +291,7 @@ function Test-OwnedInstance([string]$Name) {
     if (-not $ledger) { return [pscustomobject]@{ Name=$Name; Alive=$false; Reason='no-ledger'; Ledger=$null; Observation=$null } }
     if ($ledger.PSObject.Properties.Name -contains 'corrupt' -and $ledger.corrupt -eq $true) { return [pscustomobject]@{ Name=$Name; Alive=$false; Reason='corrupt-ledger'; Ledger=$ledger; Observation=$null } }
     if ($ledger.schema -ne $ControllerSchema -or -not $ledger.instance_nonce) { return [pscustomobject]@{ Name=$Name; Alive=$false; Reason='ledger-schema'; Ledger=$ledger; Observation=$null } }
-    if ($Name -eq 'Bridge') {
+    if ($Name -in @('Bridge','Supervisor')) {
         if (-not ($ledger.PSObject.Properties.Name -contains 'script_path') -or -not ($ledger.PSObject.Properties.Name -contains 'script_sha256')) {
             return [pscustomobject]@{ Name=$Name; Alive=$false; Reason='ledger-schema'; Ledger=$ledger; Observation=$null }
         }
@@ -306,8 +333,8 @@ function Write-Ledger([string]$Name, $Observation, [string]$Nonce, $Spec = $null
         image_path = [string]$Observation.image_path
         image_sha256 = [string]$Observation.image_sha256
     }
-    if ($Name -eq 'Bridge') {
-        if (-not $Spec) { Fail 'Bridge ledger requires launch specification' }
+    if ($Name -in @('Bridge','Supervisor')) {
+        if (-not $Spec) { Fail "$Name ledger requires launch specification" }
         $body['script_path'] = [string]$Spec.ScriptPath
         $body['script_sha256'] = [string]$Spec.ScriptSha256
     }
@@ -337,9 +364,9 @@ function Start-OwnedComponent([string]$Name, $Spec, $Cfg = $null) {
     $componentExecutableHash = Get-ExecutableHash ([string]$Spec.FilePath)
     if ($componentExecutableHash -ne [string]$Spec.FileSha256) { Fail "$Name executable hash mismatch before start: expected $($Spec.FileSha256), found $componentExecutableHash" }
     Assert-ComponentDependencies $Name $Spec 'before start'
-    if ($Name -eq 'Bridge') {
-        $bridgeScriptHash = Get-ExecutableHash ([string]$Spec.ScriptPath)
-        if ($bridgeScriptHash -ne [string]$Spec.ScriptSha256) { Fail "bridge script hash mismatch before start: expected $($Spec.ScriptSha256), found $bridgeScriptHash" }
+    if ($Name -in @('Bridge','Supervisor')) {
+        $scriptHash = Get-ExecutableHash ([string]$Spec.ScriptPath)
+        if ($scriptHash -ne [string]$Spec.ScriptSha256) { Fail "$Name script hash mismatch before start: expected $($Spec.ScriptSha256), found $scriptHash" }
     }
     $args = [string]$Spec.Arguments
     $start = @{ FilePath=[string]$Spec.FilePath; WorkingDirectory=[string]$Spec.WorkingDirectory; PassThru=$true; WindowStyle='Hidden'; RedirectStandardOutput=$stdout; RedirectStandardError=$stderr }
@@ -368,10 +395,20 @@ function Start-OwnedComponent([string]$Name, $Spec, $Cfg = $null) {
     $previousObservationRuntimeEnv = $env:DEADBYTE_OBSERVATION_RUNTIME
     $hadCodingPolicyEnv = Test-Path Env:DEADBYTE_CODING_POLICY
     $previousCodingPolicyEnv = $env:DEADBYTE_CODING_POLICY
+    $hadSemanticConfigEnv = Test-Path Env:DEADBYTE_SEMANTIC_LSP_CONFIG
+    $previousSemanticLspConfigEnv = $env:DEADBYTE_SEMANTIC_LSP_CONFIG
+    $hadSemanticConfigShaEnv = Test-Path Env:DEADBYTE_SEMANTIC_LSP_CONFIG_SHA256
+    $previousSemanticLspConfigShaEnv = $env:DEADBYTE_SEMANTIC_LSP_CONFIG_SHA256
     $hadAutonomousRuntimeEnv = Test-Path Env:DEADBYTE_AUTONOMOUS_RUNTIME
     $previousAutonomousRuntimeEnv = $env:DEADBYTE_AUTONOMOUS_RUNTIME
     $hadAutonomousPolicyEnv = Test-Path Env:DEADBYTE_AUTONOMOUS_POLICY
     $previousAutonomousPolicyEnv = $env:DEADBYTE_AUTONOMOUS_POLICY
+    $hadSupervisorOnceEnv = Test-Path Env:DEADBYTE_SUPERVISOR_ONCE
+    $previousSupervisorOnceEnv = $env:DEADBYTE_SUPERVISOR_ONCE
+    $hadSupervisorMarkerEnv = Test-Path Env:DEADBYTE_SUPERVISOR_MARKER
+    $previousSupervisorMarkerEnv = $env:DEADBYTE_SUPERVISOR_MARKER
+    $hadAutonomousSupervisorModeEnv = Test-Path Env:DEADBYTE_AUTONOMOUS_SUPERVISOR_MODE
+    $previousAutonomousSupervisorModeEnv = $env:DEADBYTE_AUTONOMOUS_SUPERVISOR_MODE
     try {
         if ($Name -eq 'Bridge' -and $Cfg) {
             $env:DEADBYTE_AUDIT_RUNTIME = '1'
@@ -389,13 +426,39 @@ function Start-OwnedComponent([string]$Name, $Spec, $Cfg = $null) {
             if (-not [string]::IsNullOrWhiteSpace([string]$Cfg.CodingPolicyFile)) {
                 $env:DEADBYTE_CODING_POLICY = [string]$Cfg.CodingPolicyFile
             }
+            if (-not [string]::IsNullOrWhiteSpace([string]$Cfg.SemanticLspConfigFile)) {
+                $env:DEADBYTE_SEMANTIC_LSP_CONFIG = [string]$Cfg.SemanticLspConfigFile
+                $env:DEADBYTE_SEMANTIC_LSP_CONFIG_SHA256 = [string]$Cfg.SemanticLspConfigSha256
+            } else {
+                Remove-Item Env:DEADBYTE_SEMANTIC_LSP_CONFIG -ErrorAction SilentlyContinue
+                Remove-Item Env:DEADBYTE_SEMANTIC_LSP_CONFIG_SHA256 -ErrorAction SilentlyContinue
+            }
             $env:DEADBYTE_AUTONOMOUS_RUNTIME = if ([bool]$Cfg.AutonomousRuntimeEnabled) { '1' } else { '0' }
+            $env:DEADBYTE_AUTONOMOUS_SUPERVISOR_MODE = if ([bool]$Cfg.AutonomousSupervisorEnabled) { 'external' } else { 'in_process' }
             if (-not [string]::IsNullOrWhiteSpace([string]$Cfg.AutonomousPolicyFile)) {
                 $env:DEADBYTE_AUTONOMOUS_POLICY = [string]$Cfg.AutonomousPolicyFile
             }
             if (-not [string]::IsNullOrWhiteSpace([string]$Cfg.HostPolicyFile)) {
                 $env:DEADBYTE_PRIVILEGED_POLICY = [string]$Cfg.HostPolicyFile
             }
+        } elseif ($Name -eq 'Supervisor' -and $Cfg) {
+            Remove-Item Env:DEADBYTE_AUDIT_RUNTIME -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_PRIVILEGED_POLICY -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_MACHINE_RUNTIME -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_AGENT_RUNTIME -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_PROCESS_RUNTIME -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_PROCESS_POLICY -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_MACHINE_FS_RUNTIME -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_OBSERVATION_RUNTIME -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_SEMANTIC_LSP_CONFIG -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_SEMANTIC_LSP_CONFIG_SHA256 -ErrorAction SilentlyContinue
+            Remove-Item Env:DEADBYTE_AUTONOMOUS_SUPERVISOR_MODE -ErrorAction SilentlyContinue
+            $env:DEADBYTE_CODING_RUNTIME = '1'
+            $env:DEADBYTE_AUTONOMOUS_RUNTIME = '1'
+            $env:DEADBYTE_CODING_POLICY = [string]$Cfg.CodingPolicyFile
+            $env:DEADBYTE_AUTONOMOUS_POLICY = [string]$Cfg.AutonomousPolicyFile
+            $env:DEADBYTE_SUPERVISOR_ONCE = '0'
+            $env:DEADBYTE_SUPERVISOR_MARKER = Join-Path $RuntimeDir 'autonomous-supervisor-owner.json'
         } else {
             Remove-Item Env:DEADBYTE_AUDIT_RUNTIME -ErrorAction SilentlyContinue
         }
@@ -425,10 +488,20 @@ function Start-OwnedComponent([string]$Name, $Spec, $Cfg = $null) {
         else { Remove-Item Env:DEADBYTE_OBSERVATION_RUNTIME -ErrorAction SilentlyContinue }
         if ($hadCodingPolicyEnv) { $env:DEADBYTE_CODING_POLICY = $previousCodingPolicyEnv }
         else { Remove-Item Env:DEADBYTE_CODING_POLICY -ErrorAction SilentlyContinue }
+        if ($hadSemanticConfigEnv) { $env:DEADBYTE_SEMANTIC_LSP_CONFIG = $previousSemanticLspConfigEnv }
+        else { Remove-Item Env:DEADBYTE_SEMANTIC_LSP_CONFIG -ErrorAction SilentlyContinue }
+        if ($hadSemanticConfigShaEnv) { $env:DEADBYTE_SEMANTIC_LSP_CONFIG_SHA256 = $previousSemanticLspConfigShaEnv }
+        else { Remove-Item Env:DEADBYTE_SEMANTIC_LSP_CONFIG_SHA256 -ErrorAction SilentlyContinue }
         if ($hadAutonomousRuntimeEnv) { $env:DEADBYTE_AUTONOMOUS_RUNTIME = $previousAutonomousRuntimeEnv }
         else { Remove-Item Env:DEADBYTE_AUTONOMOUS_RUNTIME -ErrorAction SilentlyContinue }
         if ($hadAutonomousPolicyEnv) { $env:DEADBYTE_AUTONOMOUS_POLICY = $previousAutonomousPolicyEnv }
         else { Remove-Item Env:DEADBYTE_AUTONOMOUS_POLICY -ErrorAction SilentlyContinue }
+        if ($hadSupervisorOnceEnv) { $env:DEADBYTE_SUPERVISOR_ONCE = $previousSupervisorOnceEnv }
+        else { Remove-Item Env:DEADBYTE_SUPERVISOR_ONCE -ErrorAction SilentlyContinue }
+        if ($hadSupervisorMarkerEnv) { $env:DEADBYTE_SUPERVISOR_MARKER = $previousSupervisorMarkerEnv }
+        else { Remove-Item Env:DEADBYTE_SUPERVISOR_MARKER -ErrorAction SilentlyContinue }
+        if ($hadAutonomousSupervisorModeEnv) { $env:DEADBYTE_AUTONOMOUS_SUPERVISOR_MODE = $previousAutonomousSupervisorModeEnv }
+        else { Remove-Item Env:DEADBYTE_AUTONOMOUS_SUPERVISOR_MODE -ErrorAction SilentlyContinue }
     }
     Start-Sleep -Milliseconds 150
     $obs = Get-ProcessObservation ([int]$proc.Id)
@@ -885,6 +958,53 @@ function Show-AutonomousStatus($Cfg) {
     return $a
 }
 
+function Get-AutonomousSupervisorStatus($Cfg) {
+    if (-not [bool]$Cfg.AutonomousSupervisorEnabled) { return [pscustomobject]@{ Configured=$false; Running=$false; Reason='disabled'; Owned=$null } }
+    $owned = Test-OwnedInstance 'Supervisor'
+    [pscustomobject]@{ Configured=$true; Running=[bool]$owned.Alive; Reason=[string]$owned.Reason; Owned=$owned }
+}
+
+function Start-AutonomousSupervisor($Cfg) {
+    if (-not [bool]$Cfg.AutonomousSupervisorEnabled) { Fail 'autonomous supervisor is disabled by trusted config' }
+    if (-not [bool]$Cfg.AutonomousRuntimeEnabled) { Fail 'autonomous supervisor requires AutonomousRuntimeEnabled' }
+    Start-OwnedComponent 'Supervisor' $Cfg.Supervisor $Cfg | Out-Null
+    $status = Get-AutonomousSupervisorStatus $Cfg
+    if (-not $status.Running) { Fail "autonomous supervisor start failed: $($status.Reason)" }
+    return $status
+}
+
+function Stop-AutonomousSupervisor($Cfg) {
+    if (-not [bool]$Cfg.AutonomousSupervisorEnabled) { return Get-AutonomousSupervisorStatus $Cfg }
+    Stop-OwnedComponent 'Supervisor'
+    return Get-AutonomousSupervisorStatus $Cfg
+}
+
+function Show-AutonomousSupervisorStatus($Cfg) {
+    $s = Get-AutonomousSupervisorStatus $Cfg
+    $label = if (-not $s.Configured) { 'DISABLED' } elseif ($s.Running) { 'RUNNING' } else { 'STOPPED' }
+    Write-Host ("Loop supervisor: {0} [{1}]" -f $label, $s.Reason)
+    return $s
+}
+
+function Recover-AutonomousSupervisor($Cfg) {
+    if (-not [bool]$Cfg.AutonomousSupervisorEnabled) { Fail 'autonomous supervisor recovery requires AutonomousSupervisorEnabled' }
+    Start-Deadbyte $Cfg | Out-Null
+    try { Disarm-Autonomous $Cfg -Quiet } catch {}
+    try { Disarm-Coding $Cfg } catch {}
+    try { Disarm-Process $Cfg } catch {}
+    try { Disarm-Host $Cfg } catch {}
+    $runtime = Get-ObservedState $Cfg
+    if ($runtime.State -ne 'ONLINE') { Fail "supervisor recovery requires ONLINE runtime; observed $($runtime.State)" }
+    $process = Get-ProcessGrantStatus $Cfg
+    $coding = Get-CodingLeaseStatus $Cfg
+    $autonomous = Get-AutonomousLeaseStatus $Cfg
+    $host = Get-HostArmStatus $Cfg
+    if ($process.Armed -or $coding.Armed -or $autonomous.Armed -or $host.Armed) { Fail 'supervisor recovery final authority is not fully disarmed' }
+    $supervisor = Start-AutonomousSupervisor $Cfg
+    Write-Host 'AUTONOMOUS SUPERVISOR RECOVERY PASS: runtime ONLINE; privileged planes DISARMED.'
+    return [pscustomobject]@{ Runtime=$runtime; Supervisor=$supervisor; Process=$process; Coding=$coding; Autonomous=$autonomous; Host=$host }
+}
+
 function Show-State($Cfg) {
     $s = Get-ObservedState $Cfg
     $bp = if ($s.Bridge.Alive) { $s.Bridge.Ledger.pid } else { '-' }
@@ -902,6 +1022,7 @@ function Show-State($Cfg) {
     Write-Host ("Machine FS rt : {0}" -f $(if ([bool]$Cfg.MachineFsRuntimeEnabled) { 'ENABLED' } else { 'DISABLED' }))
     Write-Host ("Observation rt: {0}" -f $(if ([bool]$Cfg.ObservationRuntimeEnabled) { 'ENABLED' } else { 'DISABLED' }))
     Write-Host ("Autonomous rt : {0}" -f $(if ([bool]$Cfg.AutonomousRuntimeEnabled) { 'ENABLED' } else { 'DISABLED' }))
+    Show-AutonomousSupervisorStatus $Cfg | Out-Null
     Show-ProcessStatus $Cfg | Out-Null
     Show-CodingStatus $Cfg | Out-Null
     Show-AutonomousStatus $Cfg | Out-Null
@@ -974,7 +1095,7 @@ function Invoke-AutonomousSmoke($Cfg) {
 
 function Clean-Stale {
     Ensure-Directory $RuntimeDir
-    foreach ($name in @('Bridge','Cloud')) {
+    foreach ($name in @('Bridge','Cloud','Supervisor')) {
         $o = Test-OwnedInstance $name
         if ($o.Ledger -and -not $o.Alive -and $o.Reason -eq 'process-missing') {
             Remove-Item -LiteralPath (Ledger-Path $name) -Force -ErrorAction SilentlyContinue
@@ -989,11 +1110,11 @@ function Run-Command([string]$Name) {
     Assert-ControllerRootBound $cfg
     Ensure-Directory $RuntimeDir; Ensure-Directory $LogDir
     switch ($Name) {
-        'start'   { Start-Deadbyte $cfg | Out-Null; Show-State $cfg | Out-Null }
-        'resume'  { Start-Deadbyte $cfg | Out-Null; Show-State $cfg | Out-Null }
+        'start'   { Start-Deadbyte $cfg | Out-Null; if ([bool]$cfg.AutonomousSupervisorEnabled) { Start-AutonomousSupervisor $cfg | Out-Null }; Show-State $cfg | Out-Null }
+        'resume'  { Start-Deadbyte $cfg | Out-Null; if ([bool]$cfg.AutonomousSupervisorEnabled) { Start-AutonomousSupervisor $cfg | Out-Null }; Show-State $cfg | Out-Null }
         'park'    { Park-Deadbyte $cfg | Out-Null; Show-State $cfg | Out-Null }
-        'stop'    { Stop-Deadbyte $cfg | Out-Null; Show-State $cfg | Out-Null }
-        'restart' { Stop-Deadbyte $cfg | Out-Null; Start-Deadbyte $cfg | Out-Null; Show-State $cfg | Out-Null }
+        'stop'    { if ([bool]$cfg.AutonomousSupervisorEnabled) { Stop-AutonomousSupervisor $cfg | Out-Null }; Stop-Deadbyte $cfg | Out-Null; Show-State $cfg | Out-Null }
+        'restart' { if ([bool]$cfg.AutonomousSupervisorEnabled) { Stop-AutonomousSupervisor $cfg | Out-Null }; Stop-Deadbyte $cfg | Out-Null; Start-Deadbyte $cfg | Out-Null; if ([bool]$cfg.AutonomousSupervisorEnabled) { Start-AutonomousSupervisor $cfg | Out-Null }; Show-State $cfg | Out-Null }
         'status'  { Show-State $cfg | Out-Null }
         'url'     { $u=Get-CurrentUrl $cfg; if (-not $u) { Fail 'URL unavailable' }; Write-Output $u }
         'test'    { Invoke-Smoke $cfg $false }
@@ -1016,6 +1137,10 @@ function Run-Command([string]$Name) {
         'disarmautonomous' { Disarm-Autonomous $cfg; Show-AutonomousStatus $cfg | Out-Null }
         'autonomousstatus' { Show-AutonomousStatus $cfg | Out-Null }
         'autonomoustest' { Invoke-AutonomousSmoke $cfg }
+        'supervisorstart' { Start-AutonomousSupervisor $cfg | Out-Null; Show-AutonomousSupervisorStatus $cfg | Out-Null }
+        'supervisorstop' { Stop-AutonomousSupervisor $cfg | Out-Null; Show-AutonomousSupervisorStatus $cfg | Out-Null }
+        'supervisorstatus' { Show-AutonomousSupervisorStatus $cfg | Out-Null }
+        'supervisorrecover' { Recover-AutonomousSupervisor $cfg | Out-Null; Show-State $cfg | Out-Null }
         default   { Fail "unknown command '$Name'" }
     }
 }
@@ -1026,7 +1151,7 @@ while ($true) {
     Clear-Host
     $cfg = Get-Config
     Assert-ControllerRootBound $cfg
-    Write-Host 'DEADBYTE MCP ON-DEMAND CONTROLLER V0.8.10 / R33'
+    Write-Host 'DEADBYTE MCP ON-DEMAND CONTROLLER V0.9.0 / R35'
     Write-Host '======================================'
     Show-State $cfg | Out-Null
     Write-Host ''

package/controller/deadbyte-process-policy.json

@@ -1,15 +1,15 @@
 {
   "schema": "deadbyte.process-policy.v1",
   "enabled": true,
-  "grant_file": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-r33-final-candidate-v2\\controller\\runtime\\process-grant.json",
-  "state_dir": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-r33-final-candidate-v2\\controller\\runtime\\process-state",
+  "grant_file": "D:\\Projects\\deadbyte-mcp-r35-release-v0.9.0-r2\\controller\\runtime\\process-grant.json",
+  "state_dir": "D:\\Projects\\deadbyte-mcp-r35-release-v0.9.0-r2\\controller\\runtime\\process-state",
   "native_host": {
-    "path": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-r33-final-candidate-v2\\bin\\deadbyte-process-host.exe",
-    "sha256": "6e8ca7085495a04b9c56e3f7b17142a0e866b1571475ef6a6d90d87f544aab41"
+    "path": "D:\\Projects\\deadbyte-mcp-r35-release-v0.9.0-r2\\bin\\deadbyte-process-host.exe",
+    "sha256": "9fa67a2aa66a40b67828dd537ca24b1feb118d386955b81b2df2e1bf5b7b57d7"
   },
   "roots": {
     "core": {
-      "path": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-r33-final-candidate-v2",
+      "path": "D:\\Projects\\deadbyte-mcp-r35-release-v0.9.0-r2",
       "deny_paths": [
         "node_modules",
         "controller/runtime",

package/controller/deadbyte-semantic-lsp-config.json

@@ -0,0 +1,95 @@
+{
+  "schema": "deadbyte.semantic-lsp-config.v1",
+  "servers": [
+    {
+      "id": "pyright",
+      "language_id": "python",
+      "extensions": [".py"],
+      "executable_path": "C:\\Program Files\\nodejs\\node.exe",
+      "executable_sha256": "9a4eb5f1c29c6a2e93852ead46b999e284a6a5ca8bab4d4e241d587d025a52de",
+      "args": ["D:\\Projects\\deadbyte-r35-tools\\pyright-1.1.414\\node_modules\\pyright\\langserver.index.js", "--stdio"],
+      "env": {
+        "PATH": "C:\\Program Files\\Python311;C:\\Windows\\System32;C:\\Windows",
+        "SystemRoot": "C:\\Windows",
+        "USERPROFILE": "C:\\Users\\DEADBYTE"
+      },
+      "dependencies": [
+        {"path":"D:\\Projects\\deadbyte-r35-tools\\pyright-1.1.414\\node_modules\\pyright\\langserver.index.js","expected_sha256":"f200762078eb9880faf421a5b30f9ef3055b1d85c6f10780d75db4da8d8499f1"},
+        {"path":"D:\\Projects\\deadbyte-r35-tools\\pyright-1.1.414\\node_modules\\pyright\\dist\\pyright-langserver.js","expected_sha256":"467344c79457ec74f7f7b6cb0f52c3c5ebc7ea77bf53edeb6d2dc6217687b507"},
+        {"path":"D:\\Projects\\deadbyte-r35-tools\\pyright-1.1.414\\node_modules\\pyright\\dist\\pyright-internal.js","expected_sha256":"41fb260ad72f2a16c5657e1f2fe837104d7529255d0fcd955f48432b276e7cae"},
+        {"path":"D:\\Projects\\deadbyte-r35-tools\\pyright-1.1.414\\node_modules\\pyright\\dist\\vendor.js","expected_sha256":"1c691bf9e3fa954dec751ace203beb5591b46a73e3848af5d1ee011d62540798"}
+      ],
+      "initialization_options": {},
+      "request_timeout_ms": 30000,
+      "max_message_bytes": 8388608,
+      "required": true
+    },
+    {
+      "id": "rust-analyzer",
+      "language_id": "rust",
+      "extensions": [".rs"],
+      "executable_path": "C:\\Users\\DEADBYTE\\.rustup\\toolchains\\stable-x86_64-pc-windows-msvc\\bin\\rust-analyzer.exe",
+      "executable_sha256": "d4f688ff66dca6a35d4caee9c39a98b67418dcb942537016ba61c01961930091",
+      "args": [],
+      "env": {
+        "PATH": "C:\\Users\\DEADBYTE\\.rustup\\toolchains\\stable-x86_64-pc-windows-msvc\\bin;C:\\Windows\\System32;C:\\Windows",
+        "SystemRoot": "C:\\Windows",
+        "USERPROFILE": "C:\\Users\\DEADBYTE",
+        "CARGO_HOME": "C:\\Users\\DEADBYTE\\.cargo",
+        "RUSTUP_HOME": "C:\\Users\\DEADBYTE\\.rustup"
+      },
+      "dependencies": [
+        {"path":"C:\\Users\\DEADBYTE\\.rustup\\toolchains\\stable-x86_64-pc-windows-msvc\\bin\\cargo.exe","expected_sha256":"dc19c8e6d66802d120bf0696b1924b748bd90f3ca16f21391e54a290ff12b7c5"},
+        {"path":"C:\\Users\\DEADBYTE\\.rustup\\toolchains\\stable-x86_64-pc-windows-msvc\\bin\\rustc.exe","expected_sha256":"e3ebbd547ea7b73c034d588ba569602b379f3b05ad1a3b5f8dcfab9d4478d74a"},
+        {"path":"C:\\Users\\DEADBYTE\\.rustup\\toolchains\\stable-x86_64-pc-windows-msvc\\libexec\\rust-analyzer-proc-macro-srv.exe","expected_sha256":"3e9e3737a3f05928833ec44fa0bea67bfdb2b5b6bae194edc0fb82565ce04487"}
+      ],
+      "initialization_options": {},
+      "startup_settle_ms": 3000,
+      "null_result_retry_ms": 100,
+      "null_result_max_attempts": 20,
+      "retry_empty_results": true,
+      "request_timeout_ms": 60000,
+      "max_message_bytes": 8388608,
+      "required": true
+    },
+    {
+      "id": "clangd",
+      "language_id": "cpp",
+      "extensions": [".c", ".h", ".cc", ".cpp", ".cxx", ".hpp", ".hh", ".hxx"],
+      "executable_path": "C:\\Program Files\\LLVM\\bin\\clangd.exe",
+      "executable_sha256": "91eb3cbb68ca5e50663126705127703d9c94ae0fc0d267e6602d38bcfcb74524",
+      "args": ["--background-index=false"],
+      "env": {
+        "PATH": "C:\\Program Files\\LLVM\\bin;C:\\Windows\\System32;C:\\Windows",
+        "SystemRoot": "C:\\Windows",
+        "USERPROFILE": "C:\\Users\\DEADBYTE"
+      },
+      "dependencies": [],
+      "initialization_options": {},
+      "null_result_retry_ms": 100,
+      "null_result_max_attempts": 10,
+      "retry_empty_results": true,
+      "request_timeout_ms": 30000,
+      "max_message_bytes": 8388608,
+      "required": true
+    },
+    {
+      "id": "gopls",
+      "language_id": "go",
+      "extensions": [".go"],
+      "executable_path": "D:\\Projects\\deadbyte-r35-tools\\gopls-v0.23.0\\gopls.exe",
+      "executable_sha256": "1e38a0b17f7b453f9228e68a907642de9c2f95852e9b83b1e048d68263b7270b",
+      "args": [],
+      "env": {
+        "PATH": "D:\\Projects\\deadbyte-r35-tools\\go1.27.1\\bin;C:\\Windows\\System32;C:\\Windows",
+        "SystemRoot": "C:\\Windows",
+        "USERPROFILE": "C:\\Users\\DEADBYTE"
+      },
+      "dependencies": [],
+      "initialization_options": {},
+      "request_timeout_ms": 30000,
+      "max_message_bytes": 8388608,
+      "required": false
+    }
+  ]
+}

package/docs/ADR-0001-PRODUCTION-BASELINE-SEAMS.md

@@ -0,0 +1,29 @@
+# ADR-0001: Production baseline seams
+
+Status: accepted for R34 production baseline.
+
+## Decision
+
+DEADBYTE MCP is one product with explicit seams rather than one giant privileged agent process.
+
+- **protocol**: MCP 2026-07-28 negotiation, strict schemas, stdio first, remote transport through the pinned Bridge/tunnel path.
+- **tools**: small typed capabilities with bounded input/output and structured errors.
+- **filesystem**: root-relative policy, deny paths, traversal/symlink defenses, atomic preconditioned mutation.
+- **process**: owned sessions only, bounded output, fixed policy actions, cancellation/termination, no caller-supplied shell command string.
+- **semantic**: compiler/language-service navigation scoped to coding roots; semantic mutation delegates to signed coding-plane edit primitives.
+- **remote**: authenticated persistent device path with guardian cleanup, immutable release identity, rollback, and restore.
+- **policy**: process, coding, autonomous, and host authority are independently armed/revoked and cannot widen configured roots or executables.
+- **telemetry**: structured audit records and signed receipts retain forensic detail; the default human console is compact and never dumps payloads or SHA text unless verbose diagnostics are explicitly requested.
+- **autonomous loop**: one durable plan/execute/replan loop with authenticated journal state and an out-of-band Loop Supervisor. Failure changes the hypothesis; blind retries are prohibited.
+
+## Context strategy
+
+CONTEXT.md is the domain-language source of truth. MCP resources disclose it on demand. Tools return bounded projections, pagination, hashes/receipts where machine verification needs them, and compact user logs where humans need status. Whole-repository prompt stuffing is explicitly rejected.
+
+## Tracer bullet
+
+The minimum production path is a real MCP client that negotiates the protocol, lists tools, reads a source file, performs an exact surgical edit under a file-digest precondition, runs a pinned command, verifies signed receipts, and reads the committed result back. The release gate must keep this path green.
+
+## Consequences
+
+This architecture accepts more explicit policy/evidence plumbing in exchange for reproducible behavior, reversible releases, and smaller failure domains. Semantic coverage may be backend-specific; unsupported languages must fail honestly or use an explicitly configured pinned adapter rather than silently falling back to grep and calling it semantic navigation.

package/docs/ARCHITECTURE.md

@@ -1,4 +1,4 @@
-# DEADBYTE MCP V0.8.10 / R33 ARCHITECTURE
+# DEADBYTE MCP V0.9.0 / R35 ARCHITECTURE
 
 ```mermaid
 flowchart TD
@@ -10,7 +10,7 @@ flowchart TD
     D --> F[Optional Host 3 Tools]
     D --> G[Optional Agent 7 Tools]
     D --> PR[Optional Process 6 Tools]
-    D --> V[Optional Coding 17 Tools]
+    D --> V[Optional Coding 22 Tools]
     D --> MF[Optional Machine FS 8 Tools]
     D --> OB[Optional Observation 6 Tools]
     D --> AA[Optional Autonomous 12 Tools]
@@ -42,8 +42,9 @@ The lifecycle controller is not execution authority. It starts, parks, resumes,
 observes, or stops verified owned processes and feature-gates the agent catalog;
 it cannot manufacture arbitrary MCP capabilities. The npx foreground `remote` session is an
 operator-side orchestrator over existing controller commands: it acquires the four explicit
-standing grants in dependency order, verifies their observed ARMED state, tails only newly appended
-audit/runtime logs, and revokes all four grants plus parks the Bridge on graceful session exit.
+standing grants in dependency order, verifies their observed ARMED state, shows compact completed-tool
+results by default, and revokes all four grants plus parks the Bridge on graceful session exit. Detailed
+audit/runtime and Bridge records remain available through `remote --verbose` and the persistent evidence store.
 A detached guardian is bound to the foreground owner by a random session nonce. The v2 marker
 records owner PID, guardian PID, and nonce; if the owner is hard-killed before graceful cleanup,
 the guardian independently invokes only the fixed revoke+park controller sequence and removes the
@@ -54,7 +55,7 @@ invocation may recover a stale owner only when no live guardian remains.
 
 Only complete combinations of base plus optional machine, host, agent, process, coding,
 machine-filesystem, observation, and autonomous surfaces are valid at the HTTP bridge. A fully
-enabled R33 runtime exposes exactly 68 tools. Process authority is independently granted;
+enabled R34 runtime exposes exactly 73 tools. Process authority is independently granted;
 machine-filesystem and observation reuse coding-policy roots; autonomous requires the complete
 coding surface. Partial, dependency-invalid, unknown, or extra catalogs fail closed.