deadbyte-mcp 0.8.9 → 0.9.0

package/test/release-version.test.mjs

@@ -1,14 +1,14 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { readFile } from 'node:fs/promises';
-import { fileURLToPath } from 'node:url';
+import { createHash } from 'node:crypto';
 
 const root = new URL('../', import.meta.url);
 const text = rel => readFile(new URL(rel, root), 'utf8');
 
-test('R33 patch successor release authority agrees on V0.8.9 / R33 identity', async () => {
+test('R35 successor release authority agrees on V0.9.0 / R35 identity', async () => {
   const pkg = JSON.parse(await text('package.json'));
-  const [version, controller, gate, readme, architecture, controllerReadme, deferred, parity, closure, closureVerify] = await Promise.all([
+  const [version, controller, gate, readme, architecture, controllerReadme, deferred, parity, closure, closureVerify, windowsGate, semanticConfig] = await Promise.all([
     text('src/version.mjs'),
     text('controller/deadbyte-controller.ps1'),
     text('scripts/gate-windows.ps1'),
@@ -16,20 +16,27 @@ test('R33 patch successor release authority agrees on V0.8.9 / R33 identity', as
     text('docs/ARCHITECTURE.md'),
     text('controller/README.TXT'),
     text('scripts/deferred-slot-operation.mjs'),
-    text('src/remote-mcp-r33-parity-client.mjs'),
+    text('src/remote-mcp-r34-parity-client.mjs'),
     text('scripts/final-closure.mjs'),
-    text('scripts/final-closure-verify.mjs')
+    text('scripts/final-closure-verify.mjs'),
+    text('scripts/windows-gate-evidence.mjs'),
+    text('controller/deadbyte-semantic-lsp-config.json')
   ]);
-  assert.equal(pkg.version, '0.8.9');
-  assert.match(version, /DEADBYTE_VERSION = '0\.8\.9'/);
-  assert.match(controller, /CONTROLLER V0\.8\.9 \/ R33/);
-  assert.match(gate, /DEADBYTE V0\.8\.9 \/ R33 WINDOWS BATCH GATE: PASS/);
-  assert.match(readme, /^DEADBYTE MCP V0\.8\.9 \/ R33 FINAL MACHINE BASELINE$/m);
-  assert.match(architecture, /^# DEADBYTE MCP V0\.8\.9 \/ R33 ARCHITECTURE$/m);
-  assert.match(controllerReadme, /^DEADBYTE MCP V0\.8\.9 \/ R33 CONTROLLER$/m);
-  assert.match(controllerReadme, /68-tool public catalog/);
-  assert.match(deferred, /--expected-version','0\.8\.9'/);
-  assert.match(parity, /version:'0\.8\.9'/);
-  assert.match(closure, /version:'0\.8\.9'/);
-  assert.match(closureVerify, /DEADBYTE V0\.8\.9 \/ R33 WINDOWS BATCH GATE: PASS/);
+  assert.equal(pkg.version, '0.9.0');
+  assert.match(version, /DEADBYTE_VERSION = '0\.9\.0'/);
+  assert.match(controller, /CONTROLLER V0\.9\.0 \/ R35/);
+  assert.match(gate, /DEADBYTE V0\.9\.0 \/ R35 WINDOWS BATCH GATE: PASS/);
+  assert.match(readme, /^DEADBYTE MCP V0\.9\.0 \/ R35 PRODUCTION BASELINE$/m);
+  assert.match(architecture, /^# DEADBYTE MCP V0\.9\.0 \/ R35 ARCHITECTURE$/m);
+  assert.match(controllerReadme, /^DEADBYTE MCP V0\.9\.0 \/ R35 CONTROLLER$/m);
+  assert.match(controllerReadme, /73-tool public catalog/);
+  assert.match(deferred, /--expected-version','0\.9\.0'/);
+  assert.match(parity, /version:'0\.9\.0'/);
+  assert.match(closure, /version:'0\.9\.0'/);
+  assert.match(closureVerify, /DEADBYTE V0\.9\.0 \/ R35 WINDOWS BATCH GATE: PASS/);
+  assert.match(windowsGate, /schema:'deadbyte\.r35-windows-gate\.v1'/);
+  assert.equal(createHash('sha256').update(Buffer.from(semanticConfig,'utf8')).digest('hex'), 'd274b099a298c1033fea8f1e8849751693bbc0448778d619400acb82d4f53a3b');
+  assert.match(deferred, /--semantic-lsp-config/);
+  assert.match(deferred, /--semantic-lsp-config-sha256/);
+  assert.match(deferred, /deadbyte-semantic-lsp-config\.json/);
 });

package/test/remote-r24-catalog.test.mjs

@@ -66,10 +66,11 @@ test('R32 remote gate accepts observation only with machine plus coding configur
   assert.match(source, /observation_runtime: observationRuntime/);
 });
 
-test('R32 disarmed public gate requires the fully enabled 68-tool catalog', async () => {
+test('R34 disarmed public gate requires the exact canonical 73-tool catalog', async () => {
   const disarmedPath = fileURLToPath(new URL('../src/remote-mcp-r24-disarmed-smoke-client.mjs', import.meta.url));
   const source = await readFile(disarmedPath, 'utf8');
-  assert.match(source, /listed\.tools\.length !== 68/);
-  assert.match(source, /tool_count:68/);
-  assert.doesNotMatch(source, /expected 61 tools/);
+  assert.match(source, /R34_EXPECTED_TOOLS/);
+  assert.match(source, /JSON\.stringify\(names\).*JSON\.stringify\(R34_EXPECTED_TOOLS\)/s);
+  assert.match(source, /tool_count:R34_EXPECTED_TOOLS\.length/);
+  assert.doesNotMatch(source, /listed\.tools\.length !== 68/);
 });

package/test/remote-result-journal.test.mjs

@@ -0,0 +1,58 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { mkdtemp, readFile, rm } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { openRemoteResultJournal, parseRemoteResultCursor } from '../src/remote-result-journal.mjs';
+
+const H=c=>c.repeat(64);
+const session='a'.repeat(24);
+const item=(requestId,payload,status='ok')=>({request_id:requestId,tool:'coding_tree',status,
+  observed_at_utc:'2026-09-17T00:00:00.000Z',payload_sha256:payload});
+
+test('remote result journal is monotonic, restart-safe, and suppresses duplicate terminal results',async()=>{
+  const root=await mkdtemp(path.join(os.tmpdir(),'deadbyte-r35-remote-results-'));
+  const file=path.join(root,'journal.json');
+  try{
+    const first=await openRemoteResultJournal({filePath:file,sessionId:session,maxEntries:8});
+    const a=await first.recordTerminal(item('req-1',H('1')));
+    const duplicate=await first.recordTerminal(item('req-1',H('1')));
+    const b=await first.recordTerminal(item('req-2',H('2'),'error'));
+    assert.equal(a.event.seq,1);assert.equal(duplicate.duplicate,true);assert.equal(duplicate.event.seq,1);
+    assert.equal(b.event.seq,2);assert.equal(first.cursor(),'r1:'+session+':2');
+
+    const restarted=await openRemoteResultJournal({filePath:file,sessionId:session,maxEntries:8});
+    const c=await restarted.recordTerminal(item('req-3',H('3')));
+    assert.equal(c.event.seq,3);
+    const replay=await restarted.replayAfter('r1:'+session+':1',{limit:8});
+    assert.deepEqual(replay.events.map(event=>event.seq),[2,3]);
+    assert.equal(replay.next_cursor,'r1:'+session+':3');
+  }finally{await rm(root,{recursive:true,force:true});}
+});
+
+test('bounded retention rejects stale cursor and never stores raw payload bytes',async()=>{
+  const root=await mkdtemp(path.join(os.tmpdir(),'deadbyte-r35-remote-retention-'));
+  const file=path.join(root,'journal.json');
+  try{
+    const journal=await openRemoteResultJournal({filePath:file,sessionId:session,maxEntries:2});
+    await journal.recordTerminal(item('req-1',H('1')));
+    await journal.recordTerminal(item('req-2',H('2')));
+    await journal.recordTerminal(item('req-3',H('3')));
+    await assert.rejects(journal.replayAfter('r1:'+session+':0',{limit:8}),/cursor_outside_retention/);
+    const text=await readFile(file,'utf8');
+    assert.doesNotMatch(text,/stdout|stderr|payload\s*:/i);
+    const stored=JSON.parse(text);
+    assert.deepEqual(stored.events.map(event=>event.seq),[2,3]);
+    assert.equal(stored.next_seq,4);
+  }finally{await rm(root,{recursive:true,force:true});}
+});
+
+test('cursor parser rejects foreign sessions and malformed cursors',async()=>{
+  assert.deepEqual(parseRemoteResultCursor('r1:'+session+':42'),{session_id:session,seq:42});
+  assert.throws(()=>parseRemoteResultCursor('bad'),/cursor/i);
+  const root=await mkdtemp(path.join(os.tmpdir(),'deadbyte-r35-remote-cursor-'));
+  try{
+    const journal=await openRemoteResultJournal({filePath:path.join(root,'j.json'),sessionId:session,maxEntries:8});
+    await assert.rejects(journal.replayAfter('r1:'+'b'.repeat(24)+':0',{limit:8}),/cursor session mismatch/);
+  }finally{await rm(root,{recursive:true,force:true});}
+});

package/test/remote-session-cli.test.mjs

@@ -18,7 +18,7 @@ async function fixture({failCommand=''}={}){
   const trace=path.join(dir,'trace.txt');
   await mkdir(bin,{recursive:true});
   const launcher=path.join(bin,'DEADBYTE-MCP.ps1');
-  const ps1=`param([string]$Command)\nAdd-Content -LiteralPath $env:DEADBYTE_REMOTE_TEST_TRACE -Value $Command -Encoding UTF8\nif ($env:DEADBYTE_REMOTE_TEST_FAIL -and $Command -eq $env:DEADBYTE_REMOTE_TEST_FAIL) { Write-Error \"forced $Command failure\"; exit 9 }\nswitch ($Command) {\n  'start' { Write-Host 'DEADBYTE MCP = ONLINE' }\n  'processstatus' { Write-Host 'Process plane  : ARMED [standing-grant]' }\n  'codingstatus' { Write-Host 'Coding plane  : ARMED [standing-grant]' }\n  'autonomousstatus' { Write-Host 'Autonomous     : ARMED [standing-grant]' }\n  'hoststatus' { Write-Host 'Host plane    : ARMED [standing-grant]' }\n  'park' { Write-Host 'DEADBYTE MCP = PARKED' }\n  default { Write-Host \"$Command OK\" }\n}\nexit 0\n`;
+  const ps1=`param([string]$Command)\n$ErrorActionPreference='Stop'\nfor($i=0;$i -lt 20;$i++){ try { [IO.File]::AppendAllText($env:DEADBYTE_REMOTE_TEST_TRACE,(\"$Command\" + [Environment]::NewLine),[Text.Encoding]::UTF8); break } catch { if($i -eq 19){ throw }; Start-Sleep -Milliseconds 10 } }\nif ($env:DEADBYTE_REMOTE_TEST_FAIL -and $Command -eq $env:DEADBYTE_REMOTE_TEST_FAIL) { Write-Error \"forced $Command failure\"; exit 9 }\nswitch ($Command) {\n  'start' { Write-Host 'DEADBYTE MCP = ONLINE' }\n  'processstatus' { Write-Host 'Process plane  : ARMED [standing-grant]' }\n  'codingstatus' { Write-Host 'Coding plane  : ARMED [standing-grant]' }\n  'autonomousstatus' { Write-Host 'Autonomous     : ARMED [standing-grant]' }\n  'hoststatus' { Write-Host 'Host plane    : ARMED [standing-grant]' }\n  'park' { Write-Host 'DEADBYTE MCP = PARKED' }\n  default { Write-Host \"$Command OK\" }\n}\nexit 0\n`;
   await writeFile(launcher,ps1,'utf8');
   return {dir,state,trace,env:{...process.env,DEADBYTE_STATE_ROOT:state,DEADBYTE_REMOTE_TEST_TRACE:trace,DEADBYTE_REMOTE_TEST_FAIL:failCommand}};
 }
@@ -34,7 +34,7 @@ async function traceCommands(file,{read=readFile,retryDelayMs=10,maxAttempts=20}
   }
   return [];
 }
-async function waitFor(file,predicate,{timeoutMs=6000}={}){
+async function waitFor(file,predicate,{timeoutMs=12000}={}){
   const deadline=Date.now()+timeoutMs;
   while(Date.now()<deadline){
     const commands=await traceCommands(file);
@@ -65,36 +65,151 @@ async function collect(child){
 
 const winTest=isWindows?test:test.skip;
 
-winTest('bare remote arms every authority plane, verifies ARMED state, streams logs, then disarms and parks when the foreground session ends',async()=>{
+winTest('bare remote uses compact human logs by default, keeps authority semantics, then disarms and parks when the foreground session ends',async()=>{
   const fx=await fixture();
   let child=null;
   try{
     child=spawn(process.execPath,[cliPath,'remote'],{env:fx.env,stdio:['pipe','pipe','pipe'],windowsHide:true});
     const output=await collect(child);
-    const ready=await waitFor(fx.trace,commands=>commands.includes('hoststatus'));
+    const ready=await waitFor(fx.trace,commands=>commands.slice(0,9).join(',')==='start,armprocess,armcoding,armautonomous,armhost,processstatus,codingstatus,autonomousstatus,hoststatus');
     assert.deepEqual(ready.slice(0,9),[
       'start','armprocess','armcoding','armautonomous','armhost',
       'processstatus','codingstatus','autonomousstatus','hoststatus'
     ]);
     assert.equal(child.exitCode,null,'remote session must remain foreground after becoming ready');
     const tailDeadline=Date.now()+3000;
-    while(Date.now()<tailDeadline&&!/📜 \[LOG\] Live logs active/.test(output.stdout)) await sleep(50);
-    assert.match(output.stdout,/📜 \[LOG\] Live logs active\. Press Ctrl\+C to disconnect and revoke authority\./);
+    while(Date.now()<tailDeadline&&!/\[LOG\] Live tool results/.test(output.stdout)) await sleep(50);
+    assert.match(output.stdout,/\[OK\] ONLINE/);
+    assert.match(output.stdout,/\[OK\] Authority ARMED: process, coding, autonomous, host/);
+    assert.match(output.stdout,/\[LOG\] Live tool results\. Ctrl\+C disconnects and revokes authority\./);
+    assert.doesNotMatch(output.stdout,/Process plane\s*:/);
+    assert.doesNotMatch(output.stdout,/Coding plane\s*:/);
     const auditDir=path.join(fx.state,'audit');
+    const runtimeLogs=path.join(fx.state,'runtime','logs');
     await mkdir(auditDir,{recursive:true});
-    await writeFile(path.join(auditDir,'segment-00000001.jsonl'),`${JSON.stringify({seq:1,event_type:'tool.request',tool:'coding_tree',request_id:'abcdef1234567890'})}\n`,'utf8');
+    await mkdir(runtimeLogs,{recursive:true});
+    const marker=JSON.parse(await readFile(path.join(fx.state,'runtime','remote-session.json'),'utf8'));
+    assert.match(String(marker.result_session_id||''),/^[0-9a-f]{24}$/);
+    const auditEvents=[
+      {seq:1,event_type:'tool.request',tool:'coding_tree',request_id:'abcdef1234567890'},
+      {seq:2,event_type:'tool.result',tool:'coding_tree',request_id:'abcdef1234567890',outcome:{is_error:false}},
+      {seq:2,event_type:'tool.result',tool:'coding_tree',request_id:'abcdef1234567890',outcome:{is_error:false}},
+      {seq:3,event_type:'tool.request',tool:'coding_file_read',request_id:'fedcba9876543210'},
+      {seq:4,event_type:'tool.result',tool:'coding_file_read',request_id:'fedcba9876543210',outcome:{is_error:true}}
+    ];
+    await writeFile(path.join(auditDir,'segment-00000001.jsonl'),`${auditEvents.map(event=>JSON.stringify(event)).join('\n')}\n`,'utf8');
+    await writeFile(path.join(runtimeLogs,'bridge.stdout.log'),[
+      '[TOOL IN ] 2026-09-16T00:00:00.000Z #000001 coding_tree {}',
+      '[TOOL OUT] 2026-09-16T00:00:00.001Z #000001 coding_tree {"is_error":false}',
+      '[TOOL OUT] 2026-09-16T00:00:00.002Z #000002 coding_file_read {"is_error":true}'
+    ].join('\n')+'\n','utf8');
     const logDeadline=Date.now()+3000;
-    while(Date.now()<logDeadline&&!/\[AUDIT #1\] tool\.request coding_tree abcdef12/.test(output.stdout)) await sleep(50);
-    assert.match(output.stdout,/\[AUDIT #1\] tool\.request coding_tree abcdef12/);
+    while(Date.now()<logDeadline&&!/\[ERR\] coding_file_read/.test(output.stdout)) await sleep(50);
+    assert.match(output.stdout,/\[OK\] coding_tree \[cursor r1:[0-9a-f]{24}:1\]/);
+    assert.match(output.stdout,/\[ERR\] coding_file_read \[cursor r1:[0-9a-f]{24}:2\]/);
+    assert.equal((output.stdout.match(/\[OK\] coding_tree/g)||[]).length,1,'duplicate terminal result must print once');
+    const resultJournal=JSON.parse(await readFile(path.join(fx.state,'runtime','remote-results',`${marker.result_session_id}.json`),'utf8'));
+    assert.deepEqual(resultJournal.events.map(event=>event.seq),[1,2]);
+    assert.equal(resultJournal.events[0].request_id,'abcdef1234567890');
+    assert.ok(resultJournal.events.every(event=>/^[0-9a-f]{64}$/.test(event.payload_sha256)));
+    assert.doesNotMatch(JSON.stringify(resultJournal),/TOOL IN|TOOL OUT|stdout_excerpt|stderr_excerpt/);
+    assert.doesNotMatch(output.stdout,/abcdef12|fedcba98/);
+    assert.doesNotMatch(output.stdout,/tool\.request/);
+    assert.doesNotMatch(output.stdout,/BRIDGE\.STDOUT/);
+    assert.doesNotMatch(output.stdout,/\[TOOL IN \]|\[TOOL OUT\]/);
+    assert.doesNotMatch(output.stdout,/payload bytes=/);
     child.stdin.end();
     const ended=await Promise.race([output.closed,sleep(6000).then(()=>({timeout:true}))]);
     assert.equal(ended.timeout,undefined,'remote session did not exit after foreground input closed');
     const commands=await traceCommands(fx.trace);
     assert.deepEqual(commands.slice(-5),['disarmautonomous','disarmcoding','disarmprocess','disarmhost','park']);
-    assert.match(output.stdout,/DEADBYTE MCP DEVICE SESSION/i);
-    assert.match(output.stdout,/Live logs/i);
-    const withoutLiveMarker=output.stdout.replace('📜 [LOG] Live logs active. Press Ctrl+C to disconnect and revoke authority.\n','');
-    assert.doesNotMatch(withoutLiveMarker,/\p{Extended_Pictographic}/u,'only the live-log marker may use emoji');
+    assert.match(output.stdout,/^DEADBYTE MCP$/m);
+    assert.match(output.stdout,/Live tool results/i);
+    assert.doesNotMatch(output.stdout,/disarmautonomous OK|disarmcoding OK|disarmprocess OK|disarmhost OK|DEADBYTE MCP = PARKED/);
+    const withoutApprovedEmoji=output.stdout.replace(/[📜📥📤✅❌⚠♻🛡]/gu,'');
+    assert.doesNotMatch(withoutApprovedEmoji,/\p{Extended_Pictographic}/u,'human live stream may use only the approved semantic emoji set');
+  }finally{
+    if(child?.exitCode===null) child.kill();
+    await rm(fx.dir,{recursive:true,force:true});
+  }
+});
+
+winTest('remote --resume replays only terminal results after the cursor before starting a new live session',async()=>{
+  const fx=await fixture();
+  let first=null,second=null;
+  try{
+    first=spawn(process.execPath,[cliPath,'remote'],{env:fx.env,stdio:['pipe','pipe','pipe'],windowsHide:true});
+    const firstOutput=await collect(first);
+    await waitFor(fx.trace,commands=>commands.includes('hoststatus'));
+    const liveDeadline=Date.now()+3000;
+    while(Date.now()<liveDeadline&&!/\[LOG\] Live tool results/.test(firstOutput.stdout)) await sleep(50);
+    const auditDir=path.join(fx.state,'audit');await mkdir(auditDir,{recursive:true});
+    const auditFile=path.join(auditDir,'segment-00000001.jsonl');
+    await writeFile(auditFile,JSON.stringify({seq:1,event_type:'tool.result',tool:'coding_tree',request_id:'resume-request-1',outcome:{is_error:false}})+'\n','utf8');
+    let deadline=Date.now()+3000;
+    while(Date.now()<deadline&&!/coding_tree \[cursor r1:[0-9a-f]{24}:1\]/.test(firstOutput.stdout)) await sleep(50);
+    const cursor1=firstOutput.stdout.match(/coding_tree \[cursor (r1:[0-9a-f]{24}:1)\]/)?.[1];
+    assert.ok(cursor1,'first result cursor missing');
+    await writeFile(auditFile,JSON.stringify({seq:2,event_type:'tool.result',tool:'coding_file_read',request_id:'resume-request-2',outcome:{is_error:false}})+'\n',{encoding:'utf8',flag:'a'});
+    deadline=Date.now()+3000;
+    while(Date.now()<deadline&&!/coding_file_read \[cursor r1:[0-9a-f]{24}:2\]/.test(firstOutput.stdout)) await sleep(50);
+    first.stdin.end();
+    const firstEnded=await Promise.race([firstOutput.closed,sleep(6000).then(()=>({timeout:true}))]);
+    assert.equal(firstEnded.timeout,undefined);
+
+    second=spawn(process.execPath,[cliPath,'remote','--resume',cursor1],{env:fx.env,stdio:['pipe','pipe','pipe'],windowsHide:true});
+    const secondOutput=await collect(second);
+    deadline=Date.now()+5000;
+    while(Date.now()<deadline&&(!/\[REPLAY\] \[OK\] coding_file_read \[cursor r1:[0-9a-f]{24}:2\]/.test(secondOutput.stdout)||
+      !/\[LOG\] Live tool results/.test(secondOutput.stdout))) await sleep(50);
+    assert.match(secondOutput.stdout,/\[REPLAY\] \[OK\] coding_file_read \[cursor r1:[0-9a-f]{24}:2\]/);
+    assert.doesNotMatch(secondOutput.stdout,/\[REPLAY\] \[OK\] coding_tree/);
+    const replayIndex=secondOutput.stdout.indexOf('[REPLAY]');
+    const liveIndex=secondOutput.stdout.indexOf('[LOG] Live tool results');
+    assert.ok(replayIndex>=0&&liveIndex>replayIndex,'resume replay must happen before new live tail');
+    second.stdin.end();
+    const secondEnded=await Promise.race([secondOutput.closed,sleep(6000).then(()=>({timeout:true}))]);
+    assert.equal(secondEnded.timeout,undefined);
+    assert.equal(secondEnded.code,0,secondOutput.stderr);
+  }finally{
+    if(first?.exitCode===null) first.kill();if(second?.exitCode===null) second.kill();
+    await rm(fx.dir,{recursive:true,force:true});
+  }
+});
+
+winTest('remote --verbose preserves detailed audit and bridge log streaming for debugging',async()=>{
+  const fx=await fixture();
+  let child=null;
+  try{
+    child=spawn(process.execPath,[cliPath,'remote','--verbose'],{env:fx.env,stdio:['pipe','pipe','pipe'],windowsHide:true});
+    const output=await collect(child);
+    const ready=await waitFor(fx.trace,commands=>commands.slice(0,9).join(',')==='start,armprocess,armcoding,armautonomous,armhost,processstatus,codingstatus,autonomousstatus,hoststatus');
+    assert.equal(ready.length>=9,true);
+    const liveDeadline=Date.now()+3000;
+    while(Date.now()<liveDeadline&&!/Live logs active/.test(output.stdout)) await sleep(50);
+    assert.match(output.stdout,/Live logs active/);
+    const auditDir=path.join(fx.state,'audit');
+    const runtimeLogs=path.join(fx.state,'runtime','logs');
+    await mkdir(auditDir,{recursive:true});
+    await mkdir(runtimeLogs,{recursive:true});
+    await writeFile(path.join(auditDir,'segment-00000001.jsonl'),[
+      JSON.stringify({seq:1,event_type:'tool.request',tool:'coding_tree',request_id:'abcdef1234567890'}),
+      JSON.stringify({seq:2,event_type:'tool.result',tool:'coding_tree',request_id:'abcdef1234567890',outcome:{is_error:false}})
+    ].join('\n')+'\n','utf8');
+    await writeFile(path.join(runtimeLogs,'bridge.stdout.log'),[
+      '[TOOL IN ] 2026-09-16T00:00:00.000Z #000001 coding_tree {}',
+      '[TOOL OUT] 2026-09-16T00:00:00.001Z #000001 coding_tree {"is_error":false}'
+    ].join('\n')+'\n','utf8');
+    const deadline=Date.now()+3000;
+    while(Date.now()<deadline&&!/\[BRIDGE\.STDOUT\] \[TOOL OUT\].*coding_tree/.test(output.stdout)) await sleep(50);
+    assert.match(output.stdout,/\[AUDIT #1\] tool\.request coding_tree abcdef12/);
+    assert.match(output.stdout,/\[AUDIT #2\] tool\.result coding_tree abcdef12/);
+    assert.match(output.stdout,/\[BRIDGE\.STDOUT\] \[TOOL IN \].*coding_tree/);
+    assert.match(output.stdout,/\[BRIDGE\.STDOUT\] \[TOOL OUT\].*coding_tree/);
+    child.stdin.end();
+    const ended=await Promise.race([output.closed,sleep(6000).then(()=>({timeout:true}))]);
+    assert.equal(ended.timeout,undefined,'verbose remote session did not exit after input closed');
+    assert.equal(ended.code,0,output.stderr);
   }finally{
     if(child?.exitCode===null) child.kill();
     await rm(fx.dir,{recursive:true,force:true});
@@ -105,9 +220,9 @@ winTest('detached guardian revokes authority, parks, and removes the session mar
   const fx=await fixture();
   let child=null;
   try{
-    child=spawn(process.execPath,[cliPath,'remote'],{env:fx.env,stdio:['ignore','pipe','pipe'],windowsHide:true});
+    child=spawn(process.execPath,[cliPath,'remote'],{env:fx.env,stdio:['pipe','pipe','pipe'],windowsHide:true});
     const output=await collect(child);
-    const ready=await waitFor(fx.trace,commands=>commands.includes('hoststatus'));
+    const ready=await waitFor(fx.trace,commands=>commands.slice(0,9).join(',')==='start,armprocess,armcoding,armautonomous,armhost,processstatus,codingstatus,autonomousstatus,hoststatus');
     assert.deepEqual(ready.slice(0,9),[
       'start','armprocess','armcoding','armautonomous','armhost',
       'processstatus','codingstatus','autonomousstatus','hoststatus'
@@ -170,6 +285,7 @@ winTest('bare remote recovers a stale crashed session before arming a new one',a
     const ready=await waitFor(fx.trace,commands=>commands.includes('hoststatus'));
     assert.deepEqual(ready.slice(0,5),['disarmautonomous','disarmcoding','disarmprocess','disarmhost','park']);
     assert.equal(ready[5],'start');
+    assert.match(output.stdout,/♻️ \[RECOVERY\] Stale remote session pid=2147483000; revoking authority before restart\./);
     child.stdin.end();
     const ended=await Promise.race([output.closed,sleep(6000).then(()=>({timeout:true}))]);
     assert.equal(ended.timeout,undefined);
@@ -180,6 +296,25 @@ winTest('bare remote recovers a stale crashed session before arming a new one',a
   }
 });
 
+winTest('remote warning lines use the approved warning emoji without changing the warning token',async()=>{
+  const fx=await fixture();
+  let child=null;
+  try{
+    child=spawn(process.execPath,[cliPath,'remote'],{env:fx.env,stdio:['pipe','pipe','pipe'],windowsHide:true});
+    const output=await collect(child);
+    await waitFor(fx.trace,commands=>commands.includes('hoststatus'));
+    const markerPath=path.join(fx.state,'runtime','remote-session.json');
+    await writeFile(markerPath,'{invalid-json\n','utf8');
+    child.stdin.end();
+    const ended=await Promise.race([output.closed,sleep(6000).then(()=>({timeout:true}))]);
+    assert.equal(ended.timeout,undefined,'remote session did not exit after warning fixture');
+    assert.match(output.stderr,/⚠️ \[WARN\] remote session marker cleanup:/);
+  }finally{
+    if(child?.exitCode===null) child.kill();
+    await rm(fx.dir,{recursive:true,force:true});
+  }
+});
+
 winTest('bare remote refuses a second live foreground session without touching authority',async()=>{
   const fx=await fixture();
   let child=null;

package/test/runtime-self-update.test.mjs

@@ -206,6 +206,40 @@ test('R31 slot-update CLI binds process-policy bootstrap and machine-FS enable e
   assert.equal(parsed.enableMachineFs,true);
 });
 
+test('R35 slot-update CLI binds semantic LSP config as one exact path plus SHA-256 pair', () => {
+  const base=['--stage','stage','--development-root','dev','--expected-version','0.9.0','--expected-manifest',hex('a')];
+  assert.throws(() => parseUpdateArgs([...base,'--semantic-lsp-config','C:/candidate/semantic.json']), /semantic LSP config.*pair/i);
+  assert.throws(() => parseUpdateArgs([...base,'--semantic-lsp-config-sha256',hex('b')]), /semantic LSP config.*pair/i);
+  const parsed=parseUpdateArgs([...base,'--semantic-lsp-config','C:/candidate/semantic.json','--semantic-lsp-config-sha256',hex('b')]);
+  assert.equal(parsed.semanticLspBootstrap.path,path.resolve('C:/candidate/semantic.json'));
+  assert.equal(parsed.semanticLspBootstrap.sha256,hex('b'));
+});
+
+test('R35 semantic LSP bootstrap accepts only exact pinned semantic config bytes', async () => {
+  const root=await mkdtemp(path.join(os.tmpdir(),'deadbyte-r35-semantic-bootstrap-'));
+  const file=path.join(root,'semantic.json');
+  const config={schema:'deadbyte.semantic-lsp-config.v1',servers:[]};
+  const bytes=Buffer.from(`${JSON.stringify(config)}\n`,'utf8');
+  await writeFile(file,bytes);
+  assert.equal(typeof runtimeUpdate.prepareSemanticLspConfigBootstrap,'function');
+  const accepted=await runtimeUpdate.prepareSemanticLspConfigBootstrap({path:file,sha256:sha(bytes)});
+  assert.equal(accepted.path,path.resolve(file));
+  assert.equal(accepted.sha256,sha(bytes));
+  await assert.rejects(runtimeUpdate.prepareSemanticLspConfigBootstrap({path:file,sha256:hex('f')}),/semantic LSP config.*SHA-256 mismatch/i);
+  const bad=path.join(root,'bad.json');
+  const badBytes=Buffer.from(`${JSON.stringify({schema:'wrong',servers:[]})}\n`,'utf8');
+  await writeFile(bad,badBytes);
+  await assert.rejects(runtimeUpdate.prepareSemanticLspConfigBootstrap({path:bad,sha256:sha(badBytes)}),/semantic LSP config schema/i);
+});
+
+test('R35 updater threads pinned semantic LSP config into successor generation', async () => {
+  const source=await readFile(new URL('../src/runtime-update.mjs',import.meta.url),'utf8');
+  assert.match(source,/prepareSemanticLspConfigBootstrap\(semanticLspBootstrap\)/);
+  assert.match(source,/SemanticLspConfigFile=semanticBootstrap\.path/);
+  assert.match(source,/SemanticLspConfigSha256=semanticBootstrap\.sha256/);
+  assert.match(source,/semanticLspBootstrap:args\.semanticLspBootstrap/);
+});
+
 test('R32 slot-update CLI enables observation only by explicit flag', () => {
   const base=['--stage','stage','--development-root','dev','--expected-version','0.8.6','--expected-manifest',hex('a')];
   const plain=parseUpdateArgs(base);
@@ -215,6 +249,35 @@ test('R32 slot-update CLI enables observation only by explicit flag', () => {
   assert.throws(() => parseUpdateArgs([...base,'--enable-observation','--enable-observation']),/duplicate self-update argument/i);
 });
 
+test('R34 slot-update CLI enables the out-of-band supervisor only by explicit flag', () => {
+  const base=['--stage','stage','--development-root','dev','--expected-version','0.8.11','--expected-manifest',hex('a')];
+  const plain=parseUpdateArgs(base);
+  assert.equal(plain.enableAutonomousSupervisor,false);
+  const enabled=parseUpdateArgs([...base,'--enable-autonomous-supervisor']);
+  assert.equal(enabled.enableAutonomousSupervisor,true);
+  assert.throws(() => parseUpdateArgs([...base,'--enable-autonomous-supervisor','--enable-autonomous-supervisor']),/duplicate self-update argument/i);
+});
+
+test('R34 supervisor bootstrap derives exact release-bound script identity from trusted Bridge executable', async () => {
+  assert.equal(typeof runtimeUpdate.prepareAutonomousSupervisorSpec,'function');
+  const base=await mkdtemp(path.join(os.tmpdir(),'deadbyte-r34-supervisor-bootstrap-'));
+  const release=path.join(base,'release'),src=path.join(release,'src'); await mkdir(src,{recursive:true});
+  const script=Buffer.from('console.log("supervisor-r34")\n','utf8');
+  await writeFile(path.join(src,'autonomous-supervisor-host.mjs'),script);
+  const nodeHash=sha(await readFile(process.execPath));
+  const config={AutonomousRuntimeEnabled:true,AutonomousSupervisorEnabled:false,
+    Bridge:{FilePath:process.execPath,FileSha256:nodeHash}};
+  const bound=await runtimeUpdate.prepareAutonomousSupervisorSpec(config,{releaseRoot:release,enable:true});
+  assert.equal(bound.AutonomousSupervisorEnabled,true);
+  assert.deepEqual(bound.Supervisor,{
+    FilePath:process.execPath,FileSha256:nodeHash,Arguments:'src\\autonomous-supervisor-host.mjs',
+    WorkingDirectory:path.resolve(release),ScriptPath:path.join(path.resolve(release),'src','autonomous-supervisor-host.mjs'),ScriptSha256:sha(script)
+  });
+  const untouched=await runtimeUpdate.prepareAutonomousSupervisorSpec(config,{releaseRoot:release,enable:false});
+  assert.equal(untouched.AutonomousSupervisorEnabled,false);
+  assert.equal(untouched.Supervisor,undefined);
+});
+
 test('R31 process-policy bootstrap accepts only an exact pinned enabled process policy', async () => {
   const root=await mkdtemp(path.join(os.tmpdir(),'deadbyte-r31-process-bootstrap-'));
   const file=path.join(root,'process-policy.json');

package/test/semantic-backend-registry.test.mjs

@@ -0,0 +1,29 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { createSemanticBackendRegistry } from '../src/semantic-backend-registry.mjs';
+
+const backend=(id,extensions)=>({id,extensions:new Set(extensions),outline(){},definition(){},references(){},replaceSymbol(){},diagnostics(){}});
+
+test('semantic backend registry resolves normalized extensions and exposes stable languages',()=>{
+  const ts=backend('typescript',['.ts','.tsx']);
+  const py=backend('python',['.py']);
+  const registry=createSemanticBackendRegistry({backends:[py,ts]});
+  assert.equal(registry.backendForPath('SRC/MAIN.TS'),ts);
+  assert.equal(registry.backendForPath('pkg/mod.py'),py);
+  assert.deepEqual(registry.languages(),[
+    {id:'python',extensions:['.py']},
+    {id:'typescript',extensions:['.ts','.tsx']}
+  ]);
+});
+
+test('semantic backend registry fails closed for unsupported languages',()=>{
+  const registry=createSemanticBackendRegistry({backends:[backend('typescript',['.ts'])]});
+  assert.throws(()=>registry.backendForPath('main.rs'),/unsupported semantic language: \.rs/i);
+  assert.throws(()=>registry.backendForPath('README'),/unsupported semantic language: <none>/i);
+});
+
+test('semantic backend registry rejects duplicate ids, extension ownership, and incomplete backends',()=>{
+  assert.throws(()=>createSemanticBackendRegistry({backends:[backend('a',['.x']),backend('a',['.y'])]}),/duplicate semantic backend id/i);
+  assert.throws(()=>createSemanticBackendRegistry({backends:[backend('a',['.x']),backend('b',['.X'])]}),/semantic extension.*already owned/i);
+  assert.throws(()=>createSemanticBackendRegistry({backends:[{id:'bad',extensions:new Set(['.x'])}]}),/missing method.*outline/i);
+});

package/test/semantic-code.test.mjs

@@ -0,0 +1,66 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { createHash } from 'node:crypto';
+import { mkdtemp, mkdir, readFile, rm, writeFile } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { Client } from '@modelcontextprotocol/client';
+import { StdioClientTransport, getDefaultEnvironment } from '@modelcontextprotocol/client/stdio';
+import { generateTrustKeypair } from '../src/trust.mjs';
+import { loadCodingPolicy } from '../src/coding-plane.mjs';
+
+const here=path.dirname(fileURLToPath(import.meta.url));
+const repoRoot=path.resolve(here,'..');
+const serverPath=path.join(repoRoot,'src','mcp-server.mjs');
+const sha256=bytes=>createHash('sha256').update(bytes).digest('hex');
+const sha256File=async file=>sha256(await readFile(file));
+function structured(value,label){if(value.isError)throw new Error(`${label}: ${JSON.stringify(value.structuredContent??value.content)}`);return value.structuredContent;}
+
+async function fixture(){
+  const root=await mkdtemp(path.join(os.tmpdir(),'deadbyte-semantic-'));
+  const project=path.join(root,'project'); const trust=path.join(root,'trust');
+  await mkdir(project); await mkdir(trust);
+  const keys=await generateTrustKeypair({privateKeyPath:path.join(trust,'private.pem'),publicKeyPath:path.join(trust,'public.pem')});
+  const math=`export function add(a: number, b: number) {\n  return a + b;\n}\n\nexport function twice(x: number) {\n  return add(x, x);\n}\n`;
+  const main=`import { add } from './math.js';\nexport const total = add(2, 3);\n`;
+  await writeFile(path.join(project,'math.ts'),math,'utf8'); await writeFile(path.join(project,'main.ts'),main,'utf8');
+  await writeFile(path.join(project,'tsconfig.json'),JSON.stringify({compilerOptions:{target:'ES2022',module:'NodeNext',moduleResolution:'NodeNext',strict:true},include:['*.ts']},null,2),'utf8');
+  const policyPath=path.join(root,'coding-policy.json'); const leasePath=path.join(root,'coding-lease.json');
+  await writeFile(policyPath,JSON.stringify({schema:'deadbyte.coding-policy.v1',enabled:true,lease_file:leasePath,evidence_dir:path.join(root,'evidence'),roots:{project:{path:project,read:true,write:true,exec:true,deny_paths:['.git','node_modules']}},commands:{node_script:{kind:'script',executable:process.execPath,executable_sha256:await sha256File(process.execPath),root_ids:['project'],prefix_args:[],extensions:['.mjs','.js'],timeout_ms:30000,max_output_bytes:262144}},max_read_bytes:524288,max_write_bytes:2097152},null,2),'utf8');
+  const policy=await loadCodingPolicy(policyPath);
+  await writeFile(leasePath,JSON.stringify({schema:'deadbyte.coding-lease.v1',policy_sha256:policy.policy_sha256,instance_nonce:'c'.repeat(64),root_ids:['project'],armed_at_utc:new Date().toISOString(),expires_at_utc:new Date(Date.now()+3600000).toISOString()}),'utf8');
+  const client=new Client({name:'deadbyte-semantic-test',version:'0.8.11'},{versionNegotiation:{mode:{pin:'2026-07-28'}}});
+  const transport=new StdioClientTransport({command:process.execPath,args:[serverPath],cwd:repoRoot,env:{...getDefaultEnvironment(),DEADBYTE_SIGNING_KEY:keys.privateKeyPath,DEADBYTE_VERIFY_KEY:keys.publicKeyPath,DEADBYTE_CODING_RUNTIME:'1',DEADBYTE_CODING_POLICY:policyPath},stderr:'pipe'});
+  return {root,project,client,transport,math,main};
+}
+
+test('semantic tools provide outline, definition, references and receipt-backed edit by symbol',async()=>{
+  const f=await fixture();
+  try{
+    await f.client.connect(f.transport);
+    const names=new Set((await f.client.listTools()).tools.map(t=>t.name));
+    for(const name of ['coding_symbol_outline','coding_symbol_definition','coding_symbol_references','coding_symbol_replace']) assert.ok(names.has(name),`missing semantic tool ${name}`);
+
+    const outline=structured(await f.client.callTool({name:'coding_symbol_outline',arguments:{root_id:'project',path:'math.ts',max_symbols:100}}),'outline');
+    assert.equal(outline.status,'ok');
+    const add=outline.symbols.find(s=>s.name==='add'&&s.kind==='function');
+    assert.ok(add,'add function missing from outline'); assert.match(add.symbol_id,/^[0-9a-f]{64}$/);
+
+    const useColumn=f.main.split('\n')[1].indexOf('add');
+    const definition=structured(await f.client.callTool({name:'coding_symbol_definition',arguments:{root_id:'project',path:'main.ts',line:1,column:useColumn,max_results:20}}),'definition');
+    assert.ok(definition.locations.some(x=>x.path==='math.ts'&&x.name==='add'));
+
+    const references=structured(await f.client.callTool({name:'coding_symbol_references',arguments:{root_id:'project',path:'math.ts',line:add.name_start_line,column:add.name_start_column,max_results:50}}),'references');
+    assert.ok(references.locations.some(x=>x.path==='main.ts'));
+    assert.ok(references.locations.some(x=>x.path==='math.ts'&&x.start_line===5));
+
+    const before=structured(await f.client.callTool({name:'coding_file_read',arguments:{root_id:'project',path:'math.ts',encoding:'utf8'}}),'before');
+    const replacement='export function add(a: number, b: number) {\n  return a - b;\n}';
+    const edited=structured(await f.client.callTool({name:'coding_symbol_replace',arguments:{root_id:'project',path:'math.ts',symbol_id:add.symbol_id,new_body:replacement,expected_sha256:before.sha256}}),'replace-symbol');
+    assert.equal(edited.status,'committed'); assert.equal(edited.symbol_name,'add');
+    const verified=structured(await f.client.callTool({name:'coding_receipt_verify',arguments:{receipt_id:edited.receipt_id}}),'receipt');
+    assert.equal(verified.ok,true); assert.equal(verified.signature_valid,true);
+    assert.match(await readFile(path.join(f.project,'math.ts'),'utf8'),/return a - b/);
+  } finally {await f.client.close().catch(()=>{}); await rm(f.root,{recursive:true,force:true}).catch(()=>{});}
+});