deadbyte-mcp 0.8.8 → 0.8.9

package/MANIFEST.SHA256

@@ -1,43 +1,43 @@
-bde1964535226804e68392837f5ae331fbbc96770ba48119b6ffbab97d6de8c7  bin/appcontainer-stage.exe
-1e45ccca193a855a1459d7652d4868b3beb809dd15b1148ceecd0fa4b10b9262  bin/appcontainer-stage.obj
-6203145a96488d74a0231ec88d88098eaa7299ab86c87baf3fc32c781164effa  bin/bootstrap-advapi32.exe
-998e5eadea269f886522fa81dc94f28d06f25801614c4517d9b9aec5f3104dc0  bin/bootstrap-advapi32.obj
-cc490744c28841b0255468166e9b30be8909fde4b755a403c600348c5adbb7ac  bin/bootstrap-exitcode.exe
-2faf57970b25064b3b9b08a8fd3286925411a40b62544d5f4d83a81d095d0cca  bin/bootstrap-exitcode.obj
-9479a28a2b1d4b852aace47d22797f2e7b3f6033da67bd9704006077fd66249a  bin/bootstrap-kernel32.exe
-24ab7b165be0e1163df344eae310059e536b95989e0be62267485c7d36a8e733  bin/bootstrap-kernel32.obj
-1910d31ae61b93bb819ecd89e59647ffe3daa3756195335d921bc67033140db8  bin/child-control-probe.exe
-4d1ad4fac339be8165f6165765be4f6c53820d3f5d9ebb76d9113e010e5d0cd0  bin/child-control-probe.obj
-04de94357c2624a5c44e07dd0a73af62929b67b71d93659b24c8c89cd353efcf  bin/child-control-stage.exe
-5c43588f4b4be151b213cf85d66d5ceaa896e429080ad50330e2b9545e98417f  bin/child-control-stage.obj
-8d7c3557b65bef05c34205a2602c0a78b4f4ecc3f406b6ff12f7426841ac993f  bin/contained-reverse-worker.exe
-d719ebd54247365782249bfcb5b9c878bd68573c08f20b88a50b807457454a8f  bin/contained-reverse-worker.obj
-516c364213ba55735b2cedb2cd1a55aa4806b384e027b8c2a679c1d5a5245d44  bin/contained-transform-worker.exe
-f1d07cdf627a967f78a060eecfbec67f815fe3c152ea8282238e10d5f5afa7a7  bin/contained-transform-worker.obj
-49d90123ee929888e487fa46dc7ac9419b82e0e01c0fe5266323f3c51f5417ba  bin/containment-probe.exe
-b6e7ba245226d027fb1775517f484479243c097108e6f4cf52be28f6bbc4c83a  bin/containment-probe.obj
-1d1ad5bd3547a9cff3af75fa067a0c96100b53d3dba41224f93618937a51631d  bin/deadbyte-contain.exe
-15d1cf4eb520b2b2eb3d890fd1e9dafc777cce4c1c4cec22638d41e2a85019d4  bin/deadbyte-contain.obj
-6b01347b84461998096fe3f1ffafa7724f3b49b4c02608f828d8eaf73c512c08  bin/deadbyte-exec.exe
-c8076e6d21dc4247ddb086a8cd60572479dd70dd95b16c54d2ea8b2b1570b3d4  bin/deadbyte-exec.obj
-7db33f35d5fc8f9200825121412f78bd6c1286eb7f4d5005d392f728489fc11d  bin/deadbyte-process-host.exe
-1b8aed18a457df2e4fe8008a21871c462a7249ded9fac05c80d31fed6eba8415  bin/deadbyte-process-host.obj
-a2fd532a612837c09d8604dde04f45fea66084f5dadffdafe825741b8b23444b  bin/deadbyte-tunnel-host.exe
-71aa710bd865823cecb034c833308649ffc71bf32d7c8ca18023ce808b86bea8  bin/deadbyte-tunnel-host.obj
-2bb0c509abceb7f4523ed95286897bced769f86e9b850dad11f289356c612445  bin/WORKER-REGISTRY.txt
+abd328bd74f41ca13ddcefb5f610ef61c128c689fe6d4f9c1e769465dc175b58  bin/appcontainer-stage.exe
+7c332f858796b2b26a562ac3d418a6a5c6e76ea0cd595ffc095ed7be83dada9d  bin/appcontainer-stage.obj
+c8abc48d86298a0501afb41c24fb549a37d404edcecdfb464121b7e9824c47e1  bin/bootstrap-advapi32.exe
+618a856c6977abf12432b81815703c3878da2680086fcf4ebcbfa2d2d9604afe  bin/bootstrap-advapi32.obj
+4610acb87f8b371b27eff0c883073cbd29b6a83c0ffeb0ec39c60820daa3b33f  bin/bootstrap-exitcode.exe
+ccd7cd42a110d1e5434bbf053fa1e421a67c1f6443eeb2f97b19a14abd76e90f  bin/bootstrap-exitcode.obj
+4092b3845f5240aa0222c8e506f203c334daabc267701b1428ee6202677b2d55  bin/bootstrap-kernel32.exe
+0be7cfd0b5ef0d3d484b2d76ad686ab2d768fe2eff096590a49b82457fbe7711  bin/bootstrap-kernel32.obj
+03ab1ff4aee4c8b86c9544eef3a4f3b36d048832d505e41ae893778cdac354c7  bin/child-control-probe.exe
+cd8257fe8d125e959d85ccde823a7c82d3f7372e0056a0eb1520129c430aef81  bin/child-control-probe.obj
+1e72ac25b354d5b8e7602a4ffd93ced419082043dcd83050c0e64c9cfd1daf53  bin/child-control-stage.exe
+c3d2979c519419401d08e61fc0fb152af0d57e44ec28fa96ab387d31602c5617  bin/child-control-stage.obj
+4e574d929b8050de4ec8a3012f857e0aa3b5d08c034ebba4d8ffd822ace6ba00  bin/contained-reverse-worker.exe
+22d92162695852799b47edb04da168fb3765d0d00da66f3847e178cdd910350d  bin/contained-reverse-worker.obj
+c912a61c34142a2e1653cf4da16a5d33af3a588a0c5449752ed5af4926c092b6  bin/contained-transform-worker.exe
+cc15f0b3f005607a3aadab0c2a8f565358d703e34550e4cf115f4a963f855aa8  bin/contained-transform-worker.obj
+ddf50836212590be5d1c7c55cf5a35610c124d92f13c7ef7f5e3c6edc09e79fe  bin/containment-probe.exe
+6cc0823e78dd4fb73de18f9a2eb4e75ea8ee399e4c7a5f547f186980f223eefe  bin/containment-probe.obj
+b97521f43405c00aaaa84a39ecab1c6277d45b76f24b70d2601bf3ad8aa39da5  bin/deadbyte-contain.exe
+5f487764f9ad6c82050bf6c32cacb430ead50e357b287f8de12c33be9ea32180  bin/deadbyte-contain.obj
+3406bb25ba2d3ba8d15e12702ad657ffc536c234d0489b69730f242f912ebed7  bin/deadbyte-exec.exe
+0e88a9990a081b88aaf2ed7f06ccad49feac866d7ef94498da23a257f7ed0624  bin/deadbyte-exec.obj
+b74ab56b34653da2426d55bcfe3c03e05cca3a11e3d77477722ded0915da255e  bin/deadbyte-process-host.exe
+67325e61a3af10cfce1f6103db14b189baa537fce3542368687a09c2840b4d4d  bin/deadbyte-process-host.obj
+13c5f970c52d72c2cb9d08075d51fd488d9c9776bb6c10aeab67c2e62ba43a0c  bin/deadbyte-tunnel-host.exe
+ff42888a61933093d40c8814bb39becc1df1ec160fe21720a6eaa97a518f3484  bin/deadbyte-tunnel-host.obj
+edcbd31b9753adf5c999c24c53f440bd4bac76b80584578d02f55a41088f85d1  bin/WORKER-REGISTRY.txt
 e74d45bd9facf03c9a2a0ff52600252924deb804a87e4b5503f48662a2b45a3b  conpty-input-observer.obj
 f8e46c4bd8eaeb804ffa5af87d6543e37eba66d817d8e5555f9d0462a99e4fdb  controller/deadbyte-controller.config.psd1.example
-755376c8be51daee9039a7e3aae2a29ccc06fb2a6edff6e5f95c12315d658fde  controller/deadbyte-controller.ps1
+2850780b793df4f72f6d0a908324472a784ce0d335bc0bf0bce60983f6ceeb69  controller/deadbyte-controller.ps1
 5e8ef223b0dbc52173aaf044a075837eef8964ff0e7e16f83a595e0d17695625  controller/deadbyte-host-policy.json.example
 6f0cc469f51444dd18211fa3346c826abeea4d2ec7a8945f0200dc5c622031ef  controller/DEADBYTE-MCP.cmd
-44ba8c44a7e6e34b124af7205d5c4e4d9ff82c5d1525e3fb07e4ea6b0e5a15da  controller/deadbyte-process-policy.json
-d4210667ca937abc86a16d8a53a8003fb6f2d9d5f64f7f699d7c913cbd24f115  controller/README.TXT
+1235687eba3516724f3a041ff627eae070e12adbed651e356c7f9e7212c93211  controller/deadbyte-process-policy.json
+b5ae7c87123d36b20bdc4f6dcd55267f9dac6c36ced2ea4cf61dfe00a41bc7e8  controller/README.TXT
 101e613518c73c6aa31c725fe1b5f9a24c995dc9876b7b28e1f3e97ac9f8d362  DEADBYTE-MCP-R27-FINAL/R27-ADMIN-CLOSURE.json
 e9baf9abf4410ff8bd0f68e6b957dbbf9790fc88d9126311c5c135e943424952  DEADBYTE-MCP-R27-FINAL/R27-CLEANUP-FINAL-RECEIPT.json
 39cb483c0897af5027bf1790a35a4c3b9a8cd5f6e3a2e0440787615f69cd14b2  DEADBYTE-MCP-R27-FINAL/R27-FINAL-CLOSURE.json
 9aaf6d07e7511a1f0046ee8cc731d4b9660bbbf47dcea785a9c6b6cec95640bc  DEADBYTE-MCP-R27-FINAL/R27-SLOT-UPDATE-RECEIPT.json
 70dfccba12797ce5fea60668c97026cf71e7942cb4d886cac5853e05b362b6c1  DEADBYTE-MCP.cmd
-eb02bae01c36411cece8973323ef6d750e0cb30d06b03f483b9aa78de2d05a3e  docs/ARCHITECTURE.md
+38d10225a7a4cf645d0c806d3020b1d404da83a9081c6d3c77c126cc50fb8cb6  docs/ARCHITECTURE.md
 3f455f407933d8e044682f3415bdb51e68d7c4b508411dda7d8ed65b6e1d7e79  docs/AUTHORITY.md
 3be291331862ac5bd892345e84d6ce8d9b6d835855235d7c5f28d5cd4b04afdb  docs/CHILD-CONTROL.md
 a9cbd1e2def00aae93569835f2ee17aa5cfd181e5770d7c1185c9c62deb0769e  docs/CONSTRUCTION-LADDER.md
@@ -1159,7 +1159,7 @@ db605a698f917c4006462596e6526fe6a9c6eff9b8409e8472fe545d4b70027c  node_modules/z
 f67a25ded944912bd4621b68df17c7c70a52aae117278c076c0aabbc32a3abba  node_modules/zod/v4/mini/schemas.d.ts
 51b3a7869df2d3a1bd98acb9d5b6a61bbccc7653d7a3d8fca7f0e0db7e84e284  node_modules/zod/v4/mini/schemas.js
 3e3125b5a537a24c3632c1c5c09640ce7bcb3935901b127ad8ae3c37a27f133f  node_modules/zod/v4/package.json
-b51eb609159ab9c46bebd04de7dfe23be44327fb6c5f1e00dd91ce02c7bab0e8  package.json
+51d0b074c767c6436f937c42431cf3acbfc3c651d86a88fdaa9fee8dd20e30ad  package.json
 b3bb2324a0ee2ca81eac1e8e44ff5141fe0cb6434843c6c3325764abdca2a71a  proof/CONTAINMENT-BUILD.txt
 a8efa13e44ff50902aee64cfca542d19605a1ae23db95280ad2d44b324f3eae7  proof/MCP-SMOKE-STATUS.txt
 7c115069cc4a343ca21b0ebdee74bd8f544b02d4aa906ffa13308725825d891a  proof/NODE-SYNTAX.txt
@@ -1217,22 +1217,22 @@ d433aaea5cccd1e184775ac4d915f34e0b39c6c99916dddd009731ad5fd6443f  proof/V073-WIN
 bd0773a9e02e8ab11475c9cc5a7db29a8313233b7eab7f837922737e75ec5938  proof/VERIFY.txt
 2c821808d4596965c577f40191daee224d3aea81989778c4af97f53a83b487db  proof/WINDOWS-CONTAINED-STATUS.txt
 f8bc839c7b4fcb0ea7b7e7ad9448847c3beae6f95f2eb4d407d1b284aaa4ff68  proof/WINDOWS-CONTAINMENT-STATUS.txt
-09e05d473cdfcd5ca65207fee6c23f023ddcea9ffc9f291f11ffc4ed146bd3dc  README.txt
+27dcf49c60b78b714f8f17425925b6d2700f86b13047231c634a8eb58a78a489  README.txt
 1d4e9dee6f0669bd825334a6a72e13ee85ee29ab430dcef21d893ffd744774b5  scripts/autonomous-benchmark.mjs
 06447dea18be1fa0a5e5a1167a6e3dcbd10ddfd28dd18d7bfd17383cf5bfc080  scripts/autonomous-build.ps1
 6ae23099102eb0f0be4969598ba76600d19b00abf534a039d48e63bc7d7fffe3  scripts/autonomous-tests.ps1
 1d987d12c5af6ffbaec1fe2f95aadc4740fe25933c0f0941f362daa2d2d84f48  scripts/build-containment.ps1
 7d3c741de2b1c29f82efa96ab81fc819d8520f97413ce5ab0d4a1b1efd0e8b42  scripts/coding-live-smoke.mjs
-61406ebd8669909e01cb677c91deb8383829094dc9f0d14df1c442678714301b  scripts/deferred-slot-operation.mjs
-c9dacb54b67421ce8481b5d31f157c04cff2b348ed918881e48f174a4b253aea  scripts/final-closure-verify.mjs
-4e4e591cc80db547e2be5208b18ea12f5b11e474d14d101676ac0b0e6f8c3b79  scripts/final-closure.mjs
-2b90e787022c1abb85a76be9f57e39943a13a9e706c3218914110d3caa1eafbb  scripts/gate-windows.ps1
+6b3455903e4c229ca70a9ead24c317051fc92664abe9d5d4626974c30e2a1fa7  scripts/deferred-slot-operation.mjs
+dbcd47f4e622922b86c0135494481dc8a565321cf444baac2ce473d8f66de817  scripts/final-closure-verify.mjs
+607ee1f5a55d9ec035b0ad24718aae98acc1c79dd5a94f547be78f6934f70417  scripts/final-closure.mjs
+d6af5ec6084eb6b2ce15718a4191584b9185b2133648396c6614e55ce42a9668  scripts/gate-windows.ps1
 a64ab9a70c26495ac5d94c024a8813d8bd2bc8a708f236b672cb18556396c262  scripts/init-host-policy.ps1
 b655f2f9c63c7e4b651e7182c6461f9ec63d0991f770f24fe5d44b209ad6bdfb  scripts/refresh-process-policy.mjs
 c92b518b7232849d945f0fcd9c428a2366758e5c9410be68104ed50ef869a33e  scripts/release-manifest.mjs
 d5284978c3b82a6eaef0ddd0ded0754467791d441dfe2d2da11dc25289301607  scripts/release-parity.mjs
 caac2867971dfdf56456528b816ff56282a11cbba81510c13e1723accffac678  scripts/runtime-self-update.mjs
-557a79ac42765ad7cf80a3a87875148633466294861bf3196475200f3eba38e2  scripts/windows-gate-evidence.mjs
+dc59e4085361781a8003f014e65045dd2ed9b03caf48c7adf62bda6f6a44387f  scripts/windows-gate-evidence.mjs
 5f4a73a1c3dc178c4b5de193b6cfc4774cfc46d5ad95ef0b786d4d386d82323b  src/agent-mcp-tools.mjs
 5cca555943318990ae8dc82481ab0d172e813261c71b541cc99114f411b040fa  src/agent-runtime.mjs
 0e2d1cdcc5e592ffe36e32fa6da68d84e00f992ca3a189b7a3735d8bbac476a6  src/audit-context.mjs
@@ -1260,7 +1260,7 @@ dcd4c9784e88e253e91ddad3c24b38cb0b36906ed737f6d7bee7712360f66f7a  src/containmen
 0fd1141a749596e4314a532ad99dabfeac213eef857e400eea1aa0ad09e0383d  src/containment-construction.mjs
 fe1761b98738e1aea1d25ddf3a0ba56ccad95a43d45104a89b8665197c7c9e18  src/containment-result.mjs
 705a89cb12fedb993d55dfed32a5870d33e10db26422c944d1e52223566c096c  src/containment-smoke.mjs
-2b364866aaffb1da92a8a78ac1c827d20b7ba80c2fa321d7cf92b79fe959d19a  src/deadbyte-cli.mjs
+ab87beb7306b32e3addbd43fa1c3e391de38443ca81c0cae7df31ba983f21cac  src/deadbyte-cli.mjs
 f5fafd46052b09f71a528594eb230edc5766ee0d006432d744590ec97c9c580d  src/executor.mjs
 264d21a4385a0a04613fe78203e7f5e231a5c06397086cfacc88076e60b89b71  src/hash.mjs
 1cc648f59d739cb3269827a7aff23dc9dc6617a77c4da607ba947ca6e4626548  src/host-plane.mjs
@@ -1300,8 +1300,9 @@ a7a63ea58291e0676c7199633ae234030f46285840cdfc519c879c279ae8bb14  src/release-sl
 efd3f7ae0a3a614485933942ab5e27e874175feb81eb3e5130913c1e6837e7ca  src/remote-mcp-host-smoke-client.mjs
 aeed462a1090611ce04f2d4e453e4a6e9163091d6d99f768233943f1c24b949f  src/remote-mcp-machine-smoke-client.mjs
 510691cf1d5d1f995b835881651da9b2a7bc22c02bc4da12e3a8266713bcc7e5  src/remote-mcp-r24-disarmed-smoke-client.mjs
-56ab88d00979ee8f524c364a6548dd37adda99070f80b6c29de49eb3bef7e479  src/remote-mcp-r33-parity-client.mjs
+4b94b3431983192423aa464e313dcf6e0442d786c388a782292d4cded80060cd  src/remote-mcp-r33-parity-client.mjs
 86a641f0a1c34ad23bc8f50809a37b57d820ea7810ef86cb4315ce75d0406237  src/remote-mcp-smoke-client.mjs
+c8fd6fd3e49e866f2c3be326ab07222b36a44528ee0fc3f7b371c34a60e3c45b  src/remote-session-guardian.mjs
 827b156eac01cc9ec6f5ca9a49219612f0da511fde770a9eb1235aa913b5e514  src/request-identity.mjs
 ce2223bf6075e96cc02505c1439acce18bb1f204c5e86cf9152bb7194daf3cd2  src/runtime-identity.mjs
 7b7ab858adec2febe9459d7bf355e24500181dc48c575c47a53796735504bcb8  src/runtime-update.mjs
@@ -1313,7 +1314,7 @@ a765372ee27cf34b3f42ca77e43b839a306a4ca7d8b1c5e2fdd4367ab0c95769  src/tunnel-std
 16df134040e3ff1e73df722b568d3e8ac0a6923b097696cead7580da75aa8d2a  src/tunnel-stdio-compat.mjs
 642cb67d1854850e336ee73fbd71b329056bdcbdab35cea19c1a995a155ff5d9  src/verifier-cli.mjs
 8f818a4852ce3be3a380cd4736c3073a7a3e0e45cd7c7ca90588a6b843d3d022  src/verifier.mjs
-c8b13e6d6cb66949f701f2ef20069de4cb0c3f5f858334e62316207e3bd37766  src/version.mjs
+fe49af9733e56003b256fdc9d47e59c561f19f19423dd14711f54033a63f2760  src/version.mjs
 7e09c57a97289360aabfaf3d531208e54872efbfb3182f3c18203d2cb88c46b5  src/worker-registry.mjs
 2a78c818058b25efdc143a3a97c832da231ccd6ff9d90c7796d681a0251b85c4  test/agent-crash-child.mjs
 d9461ab7c118ee75d37a2d6f5e637d7e43505af6a9ad8c7ddafffc8ace185a5b  test/agent-crash-worker.mjs
@@ -1347,7 +1348,7 @@ a972bd20fa927427e6d8e4181699a27e792e916b02dcf8a1ac3e2b44afd238c1  test/controlle
 ceba7d1a09ccdcb20f33fe4e6de7667ffe0f0170d1bc9fefadfdba4d7f228090  test/controller-r29.test.mjs
 4d0dc810d9af13907f31c834a13acfb7e01ffbbe65575b69649fe52741e42175  test/controller-r30.test.mjs
 b013bb2a100d3e784f0c0a2ef63d9d9d57cadd71a8db4fb845cbedb4a7b2c222  test/controller.test.mjs
-7830426cd19d602cae5314d7e7a8d9bcadda152ea6751167ae9b03d882f8ce0e  test/core.test.mjs
+0cba577c7f41d3b2b1eb9cb57c330070f9f7118695d5d48059aeae5d6e781dd1  test/core.test.mjs
 7ba4b06a1c4141ba87b5b371157fb59940d15a1016b4c599a13753d63ad0d3d3  test/DEADBYTE-MCP-WRITE-PROBE.txt
 3d4b0bdef293fa3889dec60e8e321594a67e9f7095d3c541b382c82c33b2642e  test/deferred-slot-operation-behavior.test.mjs
 33eff6932951dd9cfd42d68b3333f8080f1a0b9fdc01b05aef5c96faf44b032e  test/deferred-slot-operation.test.mjs
@@ -1373,15 +1374,15 @@ b84622d07d2ecfe27b55e45f7e89949f29a2d14184d8c6f6f82ed7f1e5fa59be  test/process-n
 a54301192c4cc842cbb6e113db2615a13f448c702273ef0585cc015859716f8a  test/process-release-gate.test.mjs
 e19a477abb83c63a1fb7ab5d5d1e9925113cded95d57084186b6ecd6161780e0  test/process-runtime.test.mjs
 34afc8a01e0c21501ec2647b7b0198b73570bce89eaaa983bd50c5709bb83fb8  test/process-supervision.test.mjs
-fa43776151fceb7c6aaace6d83af2bfb1632ebf633c6d24827fea741f6184683  test/r33-closeout-regression.test.mjs
-1274d7d089fc859b2851918967ec82c3edd07bec134036df1e926d5ec140a450  test/r33-finalization.test.mjs
+d0aadb88645bba57411f79f64d5f478b30f843a7786eb82fc80f229e4114bf5d  test/r33-closeout-regression.test.mjs
+a4de241ed8f1d48d938890a9eb505e805411ef7f86597b09555e719883ded897  test/r33-finalization.test.mjs
 8776f707a78b29ccf2721b8bcf0ae4038a20022710ef9d6ccfea997c8c6d9d17  test/release-generation.test.mjs
 bb58887a2c393cd5aac3fa3bb3a04de2704bd2a30dd2083ea638543485fa7e60  test/release-manifest-windows.test.mjs
 7cc69e786bfd9e4a7e70888c4c1b5f756a264bc1a991139c468b63af23f24c38  test/release-slot.test.mjs
 0109c76b480cc600f6ed42be4519df3fa6835012bb9e4ba4ae6be6635468c4a8  test/release-smoke-isolation.test.mjs
-9fcf554d86c4bc0a4d652e32f1a5fffffafcdb0418f6fd98ae792fff12bfc025  test/release-version.test.mjs
+6629a9a0d8dcdb0c8adc44b5f012540545be79ebde176f89d16d024b1183e720  test/release-version.test.mjs
 1fdb6cbd3a51476834382086bad2b92029987b6214153576cd803f9da0b06902  test/remote-r24-catalog.test.mjs
-ea016d1a773c702e17152d73135ac5a8591baf6d220e304292758c8c7d4ee586  test/remote-session-cli.test.mjs
+dd2d0c54000255c9b41e26b6de41a2622bf33bc4617351804cd0854e614bdc8d  test/remote-session-cli.test.mjs
 c05c64db73839698fdcdd4faa2bdbd78df861f53495f7a3b68a1fb53abb7d3c2  test/runtime-self-update.test.mjs
 2f421a60ff6baa9cc3de0cbc4804ffe6b2d26805f94d4f57e6c4a1758f464afb  test/standing-grants.test.mjs
 6ecc712b7bcb2abdb934e7d40232ed97ac355f3f47665f557c2168b04d113b41  test/tool-audit.test.mjs

package/README.txt

@@ -1,4 +1,4 @@
-DEADBYTE MCP V0.8.8 / R33 FINAL MACHINE BASELINE
+DEADBYTE MCP V0.8.9 / R33 FINAL MACHINE BASELINE
 =========================
 
 AUTHENTICATED MACHINE TRUTH + DURABLE AGENT + CODING + AUTONOMOUS PRODUCTION ENGINE
@@ -17,10 +17,12 @@ The remote CLI invokes the stable active-release PowerShell launcher directly wi
 Bare `remote` is a foreground device session: it starts/resumes the verified runtime, arms process,
 coding, autonomous, and host authority in dependency order, independently checks that all four
 planes report ARMED, then streams new audit plus controller-runtime log records until Ctrl+C or the
-foreground input closes. Session shutdown revokes all four planes and parks the Bridge. A small
-runtime owner marker prevents concurrent foreground sessions; if the prior owner died, the next
-session first revokes stale authority and parks before starting cleanly. Explicit subcommands such
-as `remote status` remain one-shot controller operations.
+foreground input closes. Session shutdown revokes all four planes and parks the Bridge. A detached
+nonce-bound guardian watches the foreground owner and performs the same revoke+park cleanup if the
+owner is hard-killed before `finally` can run. The v2 runtime marker binds owner PID, guardian PID,
+and a random 256-bit session nonce, prevents concurrent foreground sessions, and lets a later start
+recover only a dead, unguarded stale owner. Explicit subcommands such as `remote status` remain
+one-shot controller operations.
 
 The legacy CMD file remains only as an R33 compatibility artifact until activation/rollback/restore
 proof confirms the npx path; it is not the primary operator interface. Audit data lives under the

package/bin/WORKER-REGISTRY.txt

@@ -2,11 +2,11 @@ schema=deadbyte.worker-registry.v1
 version=0.6.0
 policy=compile-time-operation-to-executable
 launcher.executable=deadbyte-exec.exe
-launcher.sha256=6b01347b84461998096fe3f1ffafa7724f3b49b4c02608f828d8eaf73c512c08
+launcher.sha256=3406bb25ba2d3ba8d15e12702ad657ffc536c234d0489b69730f242f912ebed7
 operation.lowercase_ascii=contained-transform-v1
 operation.reverse_bytes=contained-reverse-v1
 operation.uppercase_ascii=contained-transform-v1
 worker.contained-reverse-v1.executable=contained-reverse-worker.exe
-worker.contained-reverse-v1.sha256=8d7c3557b65bef05c34205a2602c0a78b4f4ecc3f406b6ff12f7426841ac993f
+worker.contained-reverse-v1.sha256=4e574d929b8050de4ec8a3012f857e0aa3b5d08c034ebba4d8ffd822ace6ba00
 worker.contained-transform-v1.executable=contained-transform-worker.exe
-worker.contained-transform-v1.sha256=516c364213ba55735b2cedb2cd1a55aa4806b384e027b8c2a679c1d5a5245d44
+worker.contained-transform-v1.sha256=c912a61c34142a2e1653cf4da16a5d33af3a588a0c5449752ed5af4926c092b6

package/controller/README.TXT

@@ -1,4 +1,4 @@
-DEADBYTE MCP V0.8.8 / R33 CONTROLLER
+DEADBYTE MCP V0.8.9 / R33 CONTROLLER
 ====================================
 
 ENTRY POINT
@@ -10,8 +10,11 @@ Primary operator entry point:
 Bare `remote` is a foreground device session. It starts the verified runtime, arms process,
 coding, autonomous, and host authority, verifies all four planes are ARMED, then streams new
 audit/runtime logs. Ctrl+C/SIGTERM or foreground input closure revokes all four planes and parks
-the Bridge. A stale dead-owner session is recovered by revoking authority before the next start.
-`remote status` and the other explicit remote subcommands remain one-shot operations.
+the Bridge. A detached nonce-bound guardian performs the same fixed revoke+park cleanup if the
+foreground owner is hard-killed. The v2 session marker records owner PID, guardian PID, and random
+256-bit nonce so a guardian cannot remove a replacement session marker; a later start recovers only
+a dead stale owner with no live guardian. `remote status` and other explicit subcommands remain
+one-shot operations.
 
 The package/controller CMD launchers remain compatibility-only and forward into the canonical
 controller root. A copied/misbound controller fails closed before creating command runtime state.

package/controller/deadbyte-controller.ps1

@@ -1026,7 +1026,7 @@ while ($true) {
     Clear-Host
     $cfg = Get-Config
     Assert-ControllerRootBound $cfg
-    Write-Host 'DEADBYTE MCP ON-DEMAND CONTROLLER V0.8.8 / R33'
+    Write-Host 'DEADBYTE MCP ON-DEMAND CONTROLLER V0.8.9 / R33'
     Write-Host '======================================'
     Show-State $cfg | Out-Null
     Write-Host ''

package/controller/deadbyte-process-policy.json

@@ -5,7 +5,7 @@
   "state_dir": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-r33-final-candidate-v2\\controller\\runtime\\process-state",
   "native_host": {
     "path": "C:\\Users\\DEADBYTE\\Downloads\\deadbyte-mcp-r33-final-candidate-v2\\bin\\deadbyte-process-host.exe",
-    "sha256": "7db33f35d5fc8f9200825121412f78bd6c1286eb7f4d5005d392f728489fc11d"
+    "sha256": "b74ab56b34653da2426d55bcfe3c03e05cca3a11e3d77477722ded0915da255e"
   },
   "roots": {
     "core": {

package/docs/ARCHITECTURE.md

@@ -1,4 +1,4 @@
-# DEADBYTE MCP V0.8.8 / R33 ARCHITECTURE
+# DEADBYTE MCP V0.8.9 / R33 ARCHITECTURE
 
 ```mermaid
 flowchart TD
@@ -44,8 +44,11 @@ it cannot manufacture arbitrary MCP capabilities. The npx foreground `remote` se
 operator-side orchestrator over existing controller commands: it acquires the four explicit
 standing grants in dependency order, verifies their observed ARMED state, tails only newly appended
 audit/runtime logs, and revokes all four grants plus parks the Bridge on graceful session exit.
-A PID-bound owner marker prevents concurrent sessions and lets the next invocation fail closed by
-revoking stale authority before recovery when the prior owner process died.
+A detached guardian is bound to the foreground owner by a random session nonce. The v2 marker
+records owner PID, guardian PID, and nonce; if the owner is hard-killed before graceful cleanup,
+the guardian independently invokes only the fixed revoke+park controller sequence and removes the
+marker only when the same nonce is still current. Concurrent sessions fail closed, while a later
+invocation may recover a stale owner only when no live guardian remains.
 
 ## Exact capability catalogs
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deadbyte-mcp",
-  "version": "0.8.8",
+  "version": "0.8.9",
   "private": false,
   "type": "module",
   "description": "Authenticated MCP machine-truth runtime with signed audit chain, immutable release slots, contained execution, coding/autonomous production authority, and npx-first remote control.",

package/scripts/deferred-slot-operation.mjs

@@ -22,7 +22,7 @@ const atomicJson=async(file,value)=>{
 };
 function activationArgs(manifestSha){
   if(!HEX64.test(manifestSha??'')) throw new Error('activate requires one lowercase manifest SHA-256');
-  return ['--stage',packageRoot,'--development-root',packageRoot,'--expected-version','0.8.8',
+  return ['--stage',packageRoot,'--development-root',packageRoot,'--expected-version','0.8.9',
     '--expected-manifest',manifestSha,'--process-policy',path.join(packageRoot,'controller','deadbyte-process-policy.json'),
     '--process-policy-sha256',null,'--enable-machine-fs','--enable-observation'];
 }

package/scripts/final-closure-verify.mjs

@@ -84,7 +84,7 @@ function verifyPing(ping,status,pointer){
 
 export async function verifyFinalClosureObject(envelope,{stateRoot=path.join(os.homedir(),'.deadbyte-mcp')}={}){
   insist(envelope?.body?.schema==='deadbyte.r33-final-closure.v1','closure schema mismatch');
-  insist(envelope.body.version==='0.8.8','closure version mismatch');
+  insist(envelope.body.version==='0.8.9','closure version mismatch');
   insist(envelope.body.release_label==='R33 FINAL MACHINE BASELINE','closure release label mismatch');
   const keyInfo=publicKeyInfo(await readFile(path.join(stateRoot,'trust','ed25519-public.pem')));
   const bodyBytes=Buffer.from(canonicalJson(envelope.body),'utf8');
@@ -97,7 +97,7 @@ export async function verifyFinalClosureObject(envelope,{stateRoot=path.join(os.
 
   const pointer=JSON.parse(await readFile(path.join(stateRoot,'active-release.json'),'utf8'));
   insist(same(pointer,envelope.body.active_pointer),'active pointer drift');
-  insist(pointer.version==='0.8.8','active pointer version mismatch');
+  insist(pointer.version==='0.8.9','active pointer version mismatch');
   insist(pointer.release_id===`v${pointer.version}-${pointer.manifest_sha256.slice(0,16)}`,'release id/content address mismatch');
   const releaseFiles=await verifyTree(pointer.release_root,'MANIFEST.SHA256',pointer.manifest_sha256);
   const generationFiles=await verifyTree(pointer.generation_root,'GENERATION.SHA256',pointer.generation_manifest_sha256);
@@ -129,7 +129,7 @@ export async function verifyFinalClosureObject(envelope,{stateRoot=path.join(os.
   const windowsGate=JSON.parse(await readFile(evidence.windows_gate.path,'utf8'));
   insist(windowsGate.schema==='deadbyte.r33-windows-gate.v1'&&windowsGate.status==='passed'&&windowsGate.exit_code===0,'Windows gate evidence invalid');
   insist(windowsGate.manifest_sha256===pointer.manifest_sha256,'Windows gate manifest binding mismatch');
-  insist(windowsGate.marker==='DEADBYTE V0.8.8 / R33 WINDOWS BATCH GATE: PASS','Windows gate PASS marker mismatch');
+  insist(windowsGate.marker==='DEADBYTE V0.8.9 / R33 WINDOWS BATCH GATE: PASS','Windows gate PASS marker mismatch');
 
   const machine=envelope.body.machine;
   insist(machine?.status?.release_id===pointer.release_id&&machine.status.generation_manifest_sha256===pointer.generation_manifest_sha256,'machine status binding mismatch');

package/scripts/final-closure.mjs

@@ -22,7 +22,7 @@ function structured(result,label){
 async function publicMachineEvidence(){
   const endpoint=new URL((await readFile(path.join(stateRoot,'bridge','mcp-url.txt'),'utf8')).trim());
   insist(endpoint.protocol==='https:','final closure requires HTTPS public endpoint');
-  const client=new Client({name:'deadbyte-r33-final-closure',version:'0.8.8'},
+  const client=new Client({name:'deadbyte-r33-final-closure',version:'0.8.9'},
     {versionNegotiation:{mode:{pin:'2026-07-28'}}});
   const transport=new StreamableHTTPClientTransport(endpoint);
   try{
@@ -61,7 +61,7 @@ async function atomicCreate(file,bytes){
 
 export async function writeFinalClosure({parityPath,activationPath,windowsGatePath}){
   const pointer=JSON.parse(await readFile(path.join(stateRoot,'active-release.json'),'utf8'));
-  insist(pointer.version==='0.8.8','final closure requires V0.8.8 active release');
+  insist(pointer.version==='0.8.9','final closure requires V0.8.9 active release');
   const parity=JSON.parse(await readFile(path.resolve(parityPath),'utf8'));
   insist(parity.schema==='deadbyte.r33-parity.v1'&&parity.status==='passed','parity evidence is not passed');
   insist(parity.release_id===pointer.release_id&&parity.manifest_sha256===pointer.manifest_sha256,'parity/current release mismatch');
@@ -76,7 +76,7 @@ export async function writeFinalClosure({parityPath,activationPath,windowsGatePa
     rollback:await fileEvidence(parity.rollback.receipt_path), restore:await fileEvidence(parity.restore.receipt_path),
     windows_gate:await fileEvidence(windowsGatePath)
   };
-  const body={schema:'deadbyte.r33-final-closure.v1',version:'0.8.8',release_label:'R33 FINAL MACHINE BASELINE',
+  const body={schema:'deadbyte.r33-final-closure.v1',version:'0.8.9',release_label:'R33 FINAL MACHINE BASELINE',
     completed_at_utc:new Date().toISOString(),active_pointer:pointer,evidence,
     public_catalog:{tool_count:machine.tool_count,strict_output_schemas:machine.strict_output_schemas},
     machine:{status:machine.status,ping:machine.ping,nonce:machine.nonce},

package/scripts/gate-windows.ps1

@@ -9,7 +9,7 @@ function Invoke-GateStep {
     Write-Host "==== $Name ===="
     & npm.cmd @NpmArgs
     if ($LASTEXITCODE -ne 0) {
-        throw "DEADBYTE V0.8.8 / R33 gate failed at $Name with exit code $LASTEXITCODE"
+        throw "DEADBYTE V0.8.9 / R33 gate failed at $Name with exit code $LASTEXITCODE"
     }
 }
 
@@ -36,7 +36,7 @@ Invoke-GateStep -Name 'release-manifest-final' -NpmArgs @('run', 'manifest:verif
 Write-Host '==== windows-gate-evidence ===='
 & node.exe (Join-Path $PSScriptRoot 'windows-gate-evidence.mjs')
 if ($LASTEXITCODE -ne 0) {
-    throw "DEADBYTE V0.8.8 / R33 gate failed at windows-gate-evidence with exit code $LASTEXITCODE"
+    throw "DEADBYTE V0.8.9 / R33 gate failed at windows-gate-evidence with exit code $LASTEXITCODE"
 }
 
-Write-Host '==== DEADBYTE V0.8.8 / R33 WINDOWS BATCH GATE: PASS ===='
+Write-Host '==== DEADBYTE V0.8.9 / R33 WINDOWS BATCH GATE: PASS ===='

package/scripts/windows-gate-evidence.mjs

@@ -7,7 +7,7 @@ import { fileURLToPath } from 'node:url';
 const here=path.dirname(fileURLToPath(import.meta.url));
 const root=path.resolve(here,'..');
 const sha256=bytes=>createHash('sha256').update(bytes).digest('hex');
-const marker='DEADBYTE V0.8.8 / R33 WINDOWS BATCH GATE: PASS';
+const marker='DEADBYTE V0.8.9 / R33 WINDOWS BATCH GATE: PASS';
 function insist(ok,message){if(!ok) throw new Error(message);}
 
 export async function writeWindowsGateEvidence({
@@ -19,11 +19,11 @@ export async function writeWindowsGateEvidence({
   const manifestBytes=await readFile(path.join(candidate,'MANIFEST.SHA256'));
   const manifestSha256=sha256(manifestBytes);
   const pkg=JSON.parse(await readFile(path.join(candidate,'package.json'),'utf8'));
-  insist(pkg.version==='0.8.8',`Windows gate evidence requires V0.8.8, found ${pkg.version}`);
+  insist(pkg.version==='0.8.9',`Windows gate evidence requires V0.8.9, found ${pkg.version}`);
   const completed=clock();
   insist(completed instanceof Date&&!Number.isNaN(completed.getTime()),'Windows gate evidence clock invalid');
   const evidence={
-    schema:'deadbyte.r33-windows-gate.v1',status:'passed',exit_code:0,version:'0.8.8',
+    schema:'deadbyte.r33-windows-gate.v1',status:'passed',exit_code:0,version:'0.8.9',
     marker,completed_at_utc:completed.toISOString(),manifest_sha256:manifestSha256
   };
   const bytes=Buffer.from(`${JSON.stringify(evidence,null,2)}\n`,'utf8');
@@ -39,7 +39,7 @@ export async function writeWindowsGateEvidence({
     const existingBytes=await readFile(file);
     const existing=JSON.parse(existingBytes.toString('utf8'));
     insist(existing.schema===evidence.schema&&existing.status==='passed'&&existing.exit_code===0,'existing Windows gate evidence invalid');
-    insist(existing.version==='0.8.8'&&existing.marker===marker&&existing.manifest_sha256===manifestSha256,'existing Windows gate evidence binding mismatch');
+    insist(existing.version==='0.8.9'&&existing.marker===marker&&existing.manifest_sha256===manifestSha256,'existing Windows gate evidence binding mismatch');
     return {status:'existing',path:file,sha256:sha256(existingBytes),manifest_sha256:manifestSha256};
   }
 }

package/src/deadbyte-cli.mjs

@@ -1,9 +1,11 @@
 #!/usr/bin/env node
 import { lstat, mkdir, open, readFile, readdir, rm, stat, writeFile } from 'node:fs/promises';
-import { spawnSync } from 'node:child_process';
+import { spawn, spawnSync } from 'node:child_process';
+import { randomBytes } from 'node:crypto';
 import os from 'node:os';
 import path from 'node:path';
 import { setTimeout as sleep } from 'node:timers/promises';
+import { fileURLToPath } from 'node:url';
 import { defaultPublicKeyPath } from './trust.mjs';
 import { verifyAuditChain } from './audit-verify.mjs';
 
@@ -96,7 +98,7 @@ async function tailRemoteLogs(root,signal){
   for(const file of await listLogFiles(root)){
     try{offsets.set(file,(await stat(file)).size);}catch{}
   }
-  process.stdout.write('[LOG] Live logs active. Press Ctrl+C to disconnect and revoke authority.\n');
+  process.stdout.write('📜 [LOG] Live logs active. Press Ctrl+C to disconnect and revoke authority.\n');
   while(!signal.aborted){
     for(const file of await listLogFiles(root)){
       const prior=offsets.has(file)?offsets.get(file):0;
@@ -116,36 +118,75 @@ async function cleanupRemoteSession(ctx){
     catch(error){process.stderr.write(`[WARN] cleanup ${command}: ${String(error?.message||error)}\n`);}
   }
 }
+const GUARDIAN_SCRIPT=fileURLToPath(new URL('./remote-session-guardian.mjs',import.meta.url));
 function remoteSessionMarker(root){return path.join(root,'runtime','remote-session.json');}
 function pidAlive(pid){
   try{process.kill(pid,0);return true;}
   catch(error){return error?.code!=='ESRCH';}
 }
+function remoteOwnerPid(marker){return marker?.schema==='deadbyte.remote-session.v2'?marker.owner_pid:marker?.pid;}
 async function readRemoteSessionMarker(root){
   const file=remoteSessionMarker(root);
   let text;try{text=await readFile(file,'utf8');}catch(error){if(error?.code==='ENOENT') return null;throw error;}
   let value;try{value=JSON.parse(text);}catch{throw new Error('remote session marker is invalid JSON');}
-  if(value?.schema!=='deadbyte.remote-session.v1'||!Number.isInteger(value?.pid)||value.pid<1) throw new Error('remote session marker schema invalid');
-  return value;
+  if(value?.schema==='deadbyte.remote-session.v1'){
+    if(!Number.isInteger(value?.pid)||value.pid<1) throw new Error('remote session marker schema invalid');
+    return value;
+  }
+  if(value?.schema==='deadbyte.remote-session.v2'){
+    if(!Number.isInteger(value?.owner_pid)||value.owner_pid<1||
+       !/^[0-9a-f]{64}$/.test(String(value?.session_nonce||''))||
+       !Number.isInteger(value?.guardian_pid)||value.guardian_pid<1) throw new Error('remote session marker schema invalid');
+    return value;
+  }
+  throw new Error('remote session marker schema invalid');
 }
 async function recoverRemoteSession(ctx){
-  const prior=await readRemoteSessionMarker(ctx.root);
+  let prior=await readRemoteSessionMarker(ctx.root);
   if(!prior) return;
-  if(pidAlive(prior.pid)) throw new Error(`remote session already active pid=${prior.pid}`);
-  process.stdout.write(`[RECOVERY] Stale remote session pid=${prior.pid}; revoking authority before restart.\n`);
+  const ownerPid=remoteOwnerPid(prior);
+  if(pidAlive(ownerPid)) throw new Error(`remote session already active pid=${ownerPid}`);
+  if(prior.schema==='deadbyte.remote-session.v2'&&pidAlive(prior.guardian_pid)){
+    const deadline=Date.now()+3000;
+    while(Date.now()<deadline){
+      await sleep(100);
+      prior=await readRemoteSessionMarker(ctx.root);
+      if(!prior) return;
+      if(remoteOwnerPid(prior)!==ownerPid) throw new Error('remote session ownership changed during guardian recovery');
+    }
+    throw new Error(`remote session guardian cleanup still active pid=${prior.guardian_pid}`);
+  }
+  process.stdout.write(`[RECOVERY] Stale remote session pid=${ownerPid}; revoking authority before restart.\n`);
   await cleanupRemoteSession(ctx);
   await rm(remoteSessionMarker(ctx.root),{force:true});
 }
 async function claimRemoteSession(ctx){
   const dir=path.join(ctx.root,'runtime');await mkdir(dir,{recursive:true});
-  const marker={schema:'deadbyte.remote-session.v1',pid:process.pid,started_at_utc:new Date().toISOString()};
-  try{await writeFile(remoteSessionMarker(ctx.root),`${JSON.stringify(marker)}\n`,{encoding:'utf8',flag:'wx'});}
+  const nonce=randomBytes(32).toString('hex');
+  const marker={schema:'deadbyte.remote-session.v2',owner_pid:process.pid,guardian_pid:0,session_nonce:nonce,started_at_utc:new Date().toISOString()};
+  const markerPath=remoteSessionMarker(ctx.root);
+  try{await writeFile(markerPath,`${JSON.stringify(marker)}\n`,{encoding:'utf8',flag:'wx'});}
   catch(error){if(error?.code==='EEXIST') throw new Error('remote session already claimed');throw error;}
-  return marker;
+  let guardian=null;
+  try{
+    guardian=spawn(process.execPath,[GUARDIAN_SCRIPT,'--state-root',ctx.root,'--owner-pid',String(process.pid),'--session-nonce',nonce],{
+      detached:true,stdio:'ignore',windowsHide:true,shell:false,env:process.env
+    });
+    if(!Number.isInteger(guardian.pid)||guardian.pid<1) throw new Error('remote session guardian did not start');
+    marker.guardian_pid=guardian.pid;
+    await writeFile(markerPath,`${JSON.stringify(marker)}\n`,'utf8');
+    guardian.unref();
+    return marker;
+  }catch(error){
+    try{guardian?.kill();}catch{}
+    await rm(markerPath,{force:true});
+    throw error;
+  }
 }
 async function releaseRemoteSession(ctx,marker){
   let current=null;try{current=await readRemoteSessionMarker(ctx.root);}catch(error){process.stderr.write(`[WARN] remote session marker cleanup: ${String(error?.message||error)}\n`);return;}
-  if(current&&current.pid===marker.pid) await rm(remoteSessionMarker(ctx.root),{force:true});
+  const same=current?.schema==='deadbyte.remote-session.v2'&&current.owner_pid===marker.owner_pid&&current.session_nonce===marker.session_nonce;
+  if(same) await rm(remoteSessionMarker(ctx.root),{force:true});
 }
 async function runRemoteSession(){
   const ctx=await remoteContext();

package/src/remote-mcp-r33-parity-client.mjs

@@ -67,7 +67,7 @@ export async function runR33Parity(endpointText) {
   if (endpoint.protocol !== 'https:') throw new Error('R33 parity requires HTTPS');
   const pointer = JSON.parse(await readFile(path.join(stateRoot, 'active-release.json'), 'utf8'));
   const policy = await loadCodingPolicy(path.join(pointer.generation_root, 'coding-policy.json'));
-  const client = new Client({ name:'deadbyte-r33-parity', version:'0.8.8' },
+  const client = new Client({ name:'deadbyte-r33-parity', version:'0.8.9' },
     { versionNegotiation:{ mode:{ pin:'2026-07-28' } } });
   const transport = new StreamableHTTPClientTransport(endpoint);
   const tag = randomBytes(8).toString('hex');

package/src/remote-session-guardian.mjs

@@ -0,0 +1,76 @@
+#!/usr/bin/env node
+import { lstat, readFile, rm } from 'node:fs/promises';
+import { spawnSync } from 'node:child_process';
+import os from 'node:os';
+import path from 'node:path';
+import { setTimeout as sleep } from 'node:timers/promises';
+
+const CLEANUP=['disarmautonomous','disarmcoding','disarmprocess','disarmhost','park'];
+
+function parseArgs(argv){
+  const out={};
+  for(let i=0;i<argv.length;i+=2){
+    const key=argv[i],value=argv[i+1];
+    if(!key?.startsWith('--')||value===undefined) throw new Error('guardian arguments must be key/value pairs');
+    out[key.slice(2)]=value;
+  }
+  return out;
+}
+async function requireRegular(file,label){
+  const info=await lstat(file);
+  if(!info.isFile()||info.isSymbolicLink()) throw new Error(`${label} must be a regular non-symlink file`);
+  return file;
+}
+function pidAlive(pid){
+  try{process.kill(pid,0);return true;}
+  catch(error){return error?.code!=='ESRCH';}
+}
+async function readMarker(file){
+  let text;
+  try{text=await readFile(file,'utf8');}
+  catch(error){if(error?.code==='ENOENT') return null;throw error;}
+  try{return JSON.parse(text);}catch{return null;}
+}
+function markerMatches(marker,{ownerPid,nonce}){
+  return marker?.schema==='deadbyte.remote-session.v2'&&
+    marker?.owner_pid===ownerPid&&
+    marker?.session_nonce===nonce;
+}
+function invokeCleanup(powershell,launcher,command){
+  const result=spawnSync(powershell,['-NoLogo','-NoProfile','-ExecutionPolicy','Bypass','-File',launcher,command],{
+    stdio:'ignore',windowsHide:true,shell:false
+  });
+  return !result.error&&result.status===0;
+}
+
+async function main(){
+  if(process.platform!=='win32') return;
+  const args=parseArgs(process.argv.slice(2));
+  const root=path.resolve(args['state-root']||path.join(os.homedir(),'.deadbyte-mcp'));
+  const ownerPid=Number(args['owner-pid']);
+  const nonce=String(args['session-nonce']||'');
+  if(!Number.isInteger(ownerPid)||ownerPid<1) throw new Error('guardian owner pid invalid');
+  if(!/^[0-9a-f]{64}$/.test(nonce)) throw new Error('guardian session nonce invalid');
+
+  const launcher=await requireRegular(path.join(root,'bin','DEADBYTE-MCP.ps1'),'stable DEADBYTE launcher');
+  const systemRoot=process.env.SystemRoot||process.env.WINDIR;
+  if(!systemRoot) throw new Error('SystemRoot/WINDIR missing');
+  const powershell=await requireRegular(path.join(systemRoot,'System32','WindowsPowerShell','v1.0','powershell.exe'),'Windows PowerShell');
+  const markerPath=path.join(root,'runtime','remote-session.json');
+
+  for(;;){
+    const marker=await readMarker(markerPath);
+    if(!marker||!markerMatches(marker,{ownerPid,nonce})) return;
+    if(pidAlive(ownerPid)){
+      await sleep(250);
+      continue;
+    }
+
+    for(const command of CLEANUP) invokeCleanup(powershell,launcher,command);
+    const current=await readMarker(markerPath);
+    if(current&&markerMatches(current,{ownerPid,nonce})) await rm(markerPath,{force:true});
+    return;
+  }
+}
+
+main().catch(()=>{process.exitCode=1;});

package/src/version.mjs

@@ -1,4 +1,4 @@
-export const DEADBYTE_VERSION = '0.8.8';
+export const DEADBYTE_VERSION = '0.8.9';
 export const MCP_PROTOCOL_VERSION = '2026-07-28';
 export const RECEIPT_SCHEMA_V1 = 'deadbyte.receipt.v1';
 export const RECEIPT_SCHEMA_V2 = 'deadbyte.receipt.v2';

package/test/core.test.mjs

@@ -105,7 +105,7 @@ test('proof execution creates deterministic output and signed verifiable receipt
   assert.equal(result.receipt.request.schema, 'deadbyte.request.v1');
   assert.match(result.receipt.request.nonce, /^[0-9a-f]{64}$/);
   assert.match(result.receipt.request.sha256, /^[0-9a-f]{64}$/);
-  assert.equal(result.receipt.runtime.package_version, '0.8.8');
+  assert.equal(result.receipt.runtime.package_version, '0.8.9');
   assert.match(result.receipt.runtime.mcp_ingress_adapter, /^(?:none|tunnel-stdio-probe-compat-v1)$/);
   assert.match(result.receipt.runtime.mcp_ingress_adapter_sha256, /^[0-9a-f]{64}$/);
   assert.match(result.receipt.runtime.mcp_ingress_mode_source_sha256, /^[0-9a-f]{64}$/);

package/test/r33-closeout-regression.test.mjs

@@ -103,7 +103,7 @@ test('Windows R33 gate emits manifest-bound machine-readable evidence outside th
     assert.equal(evidence.status,'passed');
     assert.equal(evidence.exit_code,0);
     assert.equal(evidence.manifest_sha256,manifestSha);
-    assert.equal(evidence.marker,'DEADBYTE V0.8.8 / R33 WINDOWS BATCH GATE: PASS');
+    assert.equal(evidence.marker,'DEADBYTE V0.8.9 / R33 WINDOWS BATCH GATE: PASS');
     assert.ok(summary.path.startsWith(path.join(stateRoot,'evidence','release')));
   }finally{await rm(stateRoot,{recursive:true,force:true});}
 });

package/test/r33-finalization.test.mjs

@@ -30,8 +30,8 @@ test('final closure verifier is implementation-independent from production helpe
   assert.match(verifier, /DEADBYTE-R27-SLOT-UPDATE-V1/);
   assert.match(verifier, /DEADBYTE-MACHINE-PING-V1/);
   assert.match(verifier, /DEADBYTE-R33-FINAL-CLOSURE-V1/);
-  assert.match(writer, /pointer\.version==='0\.8\.8'/);
-  assert.match(verifier, /envelope\.body\.version==='0\.8\.8'/);
+  assert.match(writer, /pointer\.version==='0\.8\.9'/);
+  assert.match(verifier, /envelope\.body\.version==='0\.8\.9'/);
   assert.match(verifier, /release_label==='R33 FINAL MACHINE BASELINE'/);
 });
 

package/test/release-version.test.mjs

@@ -6,7 +6,7 @@ import { fileURLToPath } from 'node:url';
 const root = new URL('../', import.meta.url);
 const text = rel => readFile(new URL(rel, root), 'utf8');
 
-test('R33 patch successor release authority agrees on V0.8.8 / R33 identity', async () => {
+test('R33 patch successor release authority agrees on V0.8.9 / R33 identity', async () => {
   const pkg = JSON.parse(await text('package.json'));
   const [version, controller, gate, readme, architecture, controllerReadme, deferred, parity, closure, closureVerify] = await Promise.all([
     text('src/version.mjs'),
@@ -20,16 +20,16 @@ test('R33 patch successor release authority agrees on V0.8.8 / R33 identity', as
     text('scripts/final-closure.mjs'),
     text('scripts/final-closure-verify.mjs')
   ]);
-  assert.equal(pkg.version, '0.8.8');
-  assert.match(version, /DEADBYTE_VERSION = '0\.8\.8'/);
-  assert.match(controller, /CONTROLLER V0\.8\.8 \/ R33/);
-  assert.match(gate, /DEADBYTE V0\.8\.8 \/ R33 WINDOWS BATCH GATE: PASS/);
-  assert.match(readme, /^DEADBYTE MCP V0\.8\.8 \/ R33 FINAL MACHINE BASELINE$/m);
-  assert.match(architecture, /^# DEADBYTE MCP V0\.8\.8 \/ R33 ARCHITECTURE$/m);
-  assert.match(controllerReadme, /^DEADBYTE MCP V0\.8\.8 \/ R33 CONTROLLER$/m);
+  assert.equal(pkg.version, '0.8.9');
+  assert.match(version, /DEADBYTE_VERSION = '0\.8\.9'/);
+  assert.match(controller, /CONTROLLER V0\.8\.9 \/ R33/);
+  assert.match(gate, /DEADBYTE V0\.8\.9 \/ R33 WINDOWS BATCH GATE: PASS/);
+  assert.match(readme, /^DEADBYTE MCP V0\.8\.9 \/ R33 FINAL MACHINE BASELINE$/m);
+  assert.match(architecture, /^# DEADBYTE MCP V0\.8\.9 \/ R33 ARCHITECTURE$/m);
+  assert.match(controllerReadme, /^DEADBYTE MCP V0\.8\.9 \/ R33 CONTROLLER$/m);
   assert.match(controllerReadme, /68-tool public catalog/);
-  assert.match(deferred, /--expected-version','0\.8\.8'/);
-  assert.match(parity, /version:'0\.8\.8'/);
-  assert.match(closure, /version:'0\.8\.8'/);
-  assert.match(closureVerify, /DEADBYTE V0\.8\.8 \/ R33 WINDOWS BATCH GATE: PASS/);
+  assert.match(deferred, /--expected-version','0\.8\.9'/);
+  assert.match(parity, /version:'0\.8\.9'/);
+  assert.match(closure, /version:'0\.8\.9'/);
+  assert.match(closureVerify, /DEADBYTE V0\.8\.9 \/ R33 WINDOWS BATCH GATE: PASS/);
 });

package/test/remote-session-cli.test.mjs

@@ -23,8 +23,16 @@ async function fixture({failCommand=''}={}){
   return {dir,state,trace,env:{...process.env,DEADBYTE_STATE_ROOT:state,DEADBYTE_REMOTE_TEST_TRACE:trace,DEADBYTE_REMOTE_TEST_FAIL:failCommand}};
 }
 
-async function traceCommands(file){
-  try{return (await readFile(file,'utf8')).split(/\r?\n/).map(x=>x.trim()).filter(Boolean);}catch(error){if(error?.code==='ENOENT') return [];throw error;}
+async function traceCommands(file,{read=readFile,retryDelayMs=10,maxAttempts=20}={}){
+  for(let attempt=1;attempt<=maxAttempts;attempt+=1){
+    try{return (await read(file,'utf8')).split(/\r?\n/).map(x=>x.trim()).filter(Boolean);}
+    catch(error){
+      if(error?.code==='ENOENT') return [];
+      if(error?.code==='EBUSY'&&attempt<maxAttempts){await sleep(retryDelayMs);continue;}
+      throw error;
+    }
+  }
+  return [];
 }
 async function waitFor(file,predicate,{timeoutMs=6000}={}){
   const deadline=Date.now()+timeoutMs;
@@ -35,6 +43,18 @@ async function waitFor(file,predicate,{timeoutMs=6000}={}){
   }
   return traceCommands(file);
 }
+
+test('trace reader tolerates a transient Windows sharing violation and returns complete commands',async()=>{
+  let calls=0;
+  const fakeRead=async()=>{
+    calls+=1;
+    if(calls<3){const error=new Error('simulated sharing violation');error.code='EBUSY';throw error;}
+    return 'start\narmprocess\n';
+  };
+  const commands=await traceCommands('ignored',{read:fakeRead,retryDelayMs:1,maxAttempts:4});
+  assert.deepEqual(commands,['start','armprocess']);
+  assert.equal(calls,3);
+});
 async function collect(child){
   let stdout='',stderr='';
   child.stdout?.on('data',chunk=>{stdout+=chunk;});
@@ -58,8 +78,8 @@ winTest('bare remote arms every authority plane, verifies ARMED state, streams l
     ]);
     assert.equal(child.exitCode,null,'remote session must remain foreground after becoming ready');
     const tailDeadline=Date.now()+3000;
-    while(Date.now()<tailDeadline&&!/\[LOG\] Live logs active/.test(output.stdout)) await sleep(50);
-    assert.match(output.stdout,/\[LOG\] Live logs active/);
+    while(Date.now()<tailDeadline&&!/📜 \[LOG\] Live logs active/.test(output.stdout)) await sleep(50);
+    assert.match(output.stdout,/📜 \[LOG\] Live logs active\. Press Ctrl\+C to disconnect and revoke authority\./);
     const auditDir=path.join(fx.state,'audit');
     await mkdir(auditDir,{recursive:true});
     await writeFile(path.join(auditDir,'segment-00000001.jsonl'),`${JSON.stringify({seq:1,event_type:'tool.request',tool:'coding_tree',request_id:'abcdef1234567890'})}\n`,'utf8');
@@ -73,6 +93,50 @@ winTest('bare remote arms every authority plane, verifies ARMED state, streams l
     assert.deepEqual(commands.slice(-5),['disarmautonomous','disarmcoding','disarmprocess','disarmhost','park']);
     assert.match(output.stdout,/DEADBYTE MCP DEVICE SESSION/i);
     assert.match(output.stdout,/Live logs/i);
+    const withoutLiveMarker=output.stdout.replace('📜 [LOG] Live logs active. Press Ctrl+C to disconnect and revoke authority.\n','');
+    assert.doesNotMatch(withoutLiveMarker,/\p{Extended_Pictographic}/u,'only the live-log marker may use emoji');
+  }finally{
+    if(child?.exitCode===null) child.kill();
+    await rm(fx.dir,{recursive:true,force:true});
+  }
+});
+
+winTest('detached guardian revokes authority, parks, and removes the session marker after the owner is hard-killed',async()=>{
+  const fx=await fixture();
+  let child=null;
+  try{
+    child=spawn(process.execPath,[cliPath,'remote'],{env:fx.env,stdio:['ignore','pipe','pipe'],windowsHide:true});
+    const output=await collect(child);
+    const ready=await waitFor(fx.trace,commands=>commands.includes('hoststatus'));
+    assert.deepEqual(ready.slice(0,9),[
+      'start','armprocess','armcoding','armautonomous','armhost',
+      'processstatus','codingstatus','autonomousstatus','hoststatus'
+    ]);
+    const markerPath=path.join(fx.state,'runtime','remote-session.json');
+    const markerDeadline=Date.now()+3000;
+    let marker=null;
+    while(Date.now()<markerDeadline){
+      try{marker=JSON.parse(await readFile(markerPath,'utf8'));if(marker?.guardian_pid) break;}catch{}
+      await sleep(50);
+    }
+    assert.equal(marker?.schema,'deadbyte.remote-session.v2');
+    assert.equal(marker?.owner_pid,child.pid);
+    assert.match(String(marker?.session_nonce||''),/^[0-9a-f]{64}$/);
+    assert.ok(Number.isInteger(marker?.guardian_pid)&&marker.guardian_pid>0,'guardian pid missing from v2 marker');
+
+    const killed=child.kill('SIGKILL');
+    assert.equal(killed,true,'failed to hard-kill remote owner');
+    await Promise.race([output.closed,sleep(3000)]);
+
+    const cleaned=await waitFor(fx.trace,commands=>commands.slice(-5).join(',')==='disarmautonomous,disarmcoding,disarmprocess,disarmhost,park',{timeoutMs:10000});
+    assert.deepEqual(cleaned.slice(-5),['disarmautonomous','disarmcoding','disarmprocess','disarmhost','park']);
+    const markerGoneDeadline=Date.now()+3000;
+    let markerGone=false;
+    while(Date.now()<markerGoneDeadline){
+      try{await readFile(markerPath,'utf8');}catch(error){if(error?.code==='ENOENT'){markerGone=true;break;}throw error;}
+      await sleep(50);
+    }
+    assert.equal(markerGone,true,'guardian left stale remote-session marker after hard kill');
   }finally{
     if(child?.exitCode===null) child.kill();
     await rm(fx.dir,{recursive:true,force:true});