deadbyte-mcp 0.9.0 → 0.11.0

package/src/remote-mcp-r36-parity-client.mjs

@@ -0,0 +1,175 @@
+import { createHash, randomBytes } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { Client, StreamableHTTPClientTransport } from '@modelcontextprotocol/client';
+import { R34_EXPECTED_TOOLS } from './remote-mcp-r34-parity-client.mjs';
+import { loadCodingPolicy } from './coding-plane.mjs';
+import { verifyMachineFsReceiptFile } from './machine-fs.mjs';
+import { verifyObservationReceiptFile } from './observation-runtime.mjs';
+
+export const R36_EXPECTED_TOOLS=Object.freeze([...new Set([
+  ...R34_EXPECTED_TOOLS,
+  'coding_symbol_diagnostics','coding_symbol_implementations','coding_symbol_rename_preview'
+])].sort());
+if(R36_EXPECTED_TOOLS.length !== 76) throw new Error(`R36 full catalog identity mismatch: ${R36_EXPECTED_TOOLS.length}`);
+export const R36_COMPACT_GATEWAYS=Object.freeze(['capability_manifest','coding_inspect','machine_fs','machine_observe','process_session'].sort());
+export const R36_COMPACT_TOOL_LIMIT=42;
+
+const here=path.dirname(fileURLToPath(import.meta.url));
+const repoRoot=path.resolve(here,'..');
+const stateRoot=path.resolve(process.env.DEADBYTE_STATE_ROOT||path.join(os.homedir(),'.deadbyte-mcp'));
+const verifyKeyPath=path.join(stateRoot,'trust','ed25519-public.pem');
+const sha256=bytes=>createHash('sha256').update(bytes).digest('hex');
+const sleep=ms=>new Promise(resolve=>setTimeout(resolve,ms));
+
+function structured(result,label){
+  if(result.isError) throw new Error(`${label} returned error: ${JSON.stringify(result.structuredContent??result.content)}`);
+  if(!result.structuredContent||typeof result.structuredContent!=='object') throw new Error(`${label} missing structured output`);
+  return result.structuredContent;
+}
+function gateway(result,label){
+  const value=structured(result,label);
+  if(value.status!=='ok'||!value.result||typeof value.result!=='object') throw new Error(`${label} gateway status=${String(value.status)} error=${String(value.error??'')}`);
+  return value.result;
+}
+async function fileSha(relative){return sha256(await readFile(path.join(repoRoot,...relative.split('/'))));}
+async function verifyMachineReceipt(policy,receiptId,operation){
+  const checked=await verifyMachineFsReceiptFile({policy,verifyKeyPath,receiptId});
+  if(!checked.ok||checked.signature_valid!==true||checked.operation!==operation) throw new Error(`machine-fs receipt verification failed for ${operation}`);
+  return checked;
+}
+async function verifyObservationReceipt(policy,receiptId){
+  const checked=await verifyObservationReceiptFile({policy,verifyKeyPath,receiptId});
+  if(!checked.ok||checked.signature_valid!==true) throw new Error('observation receipt verification failed');
+  return checked;
+}
+async function waitSearch(client,searchId){
+  for(let attempt=0;attempt<200;attempt+=1){
+    const status=gateway(await client.callTool({name:'machine_observe',arguments:{op:'search_status',search_id:searchId}}),'search_status');
+    if(['completed','cancelled','failed'].includes(status.state)) return status;
+    await sleep(25);
+  }
+  throw new Error('R36 compact search timeout');
+}
+async function waitProcessOutput(client,sessionId){
+  for(let attempt=0;attempt<100;attempt+=1){
+    const page=gateway(await client.callTool({name:'process_session',arguments:{op:'read',session_id:sessionId,offset:0,max_bytes:65536}}),'process read');
+    if(Buffer.from(page.data_base64??'','base64').toString('utf8').includes('DEADBYTE_ACTION_PING')) return page;
+    await sleep(50);
+  }
+  throw new Error('R36 compact process output timeout');
+}
+
+export async function runR36CompactParity(endpointText){
+  const endpoint=new URL(endpointText);
+  if(endpoint.protocol!=='https:') throw new Error('R36 compact parity requires HTTPS');
+  const pointer=JSON.parse(await readFile(path.join(stateRoot,'active-release.json'),'utf8'));
+  const policy=await loadCodingPolicy(path.join(pointer.generation_root,'coding-policy.json'));
+  const client=new Client({name:'deadbyte-r36-compact-parity',version:'0.10.0'},{versionNegotiation:{mode:{pin:'2026-07-28'}}});
+  const transport=new StreamableHTTPClientTransport(endpoint);
+  const tag=randomBytes(8).toString('hex');
+  const scratchRoot='parity_scratch';
+  const target=`.deadbyte-r36-parity-${tag}.txt`;
+  let processSession=null,targetPresent=false;
+  const machineReceipts=[],observationReceipts=[];
+  try{
+    await client.connect(transport);
+    const listed=await client.listTools();
+    const names=listed.tools.map(tool=>tool.name).sort();
+    if(names.length>R36_COMPACT_TOOL_LIMIT) throw new Error(`R36 compact catalog exceeds ${R36_COMPACT_TOOL_LIMIT}: ${names.length}`);
+    for(const name of R36_COMPACT_GATEWAYS) if(!names.includes(name)) throw new Error(`R36 compact gateway missing ${name}`);
+    for(const tool of listed.tools){
+      if(tool.outputSchema?.type!=='object'||tool.outputSchema?.additionalProperties!==false||!tool.outputSchema?.properties) throw new Error(`tool ${tool.name} missing strict output schema`);
+    }
+    const manifest=gateway(await client.callTool({name:'capability_manifest',arguments:{}}),'capability_manifest');
+    if(manifest.schema!=='deadbyte.capability-manifest.v1'||manifest.profile!=='compact'||!Array.isArray(manifest.capabilities)||!/^[0-9a-f]{64}$/.test(String(manifest.ledger_sha256??''))) throw new Error('R36 compact capability manifest malformed');
+    const required=manifest.capabilities.filter(item=>item?.production===true&&item?.host_only!==true);
+    for(const item of required){
+      if(typeof item.compact_tool!=='string'||!names.includes(item.compact_tool)) throw new Error(`compact capability route missing: ${String(item.id)}`);
+    }
+    const coding=structured(await client.callTool({name:'coding_session_status',arguments:{}}),'coding_session_status');
+    const autonomous=structured(await client.callTool({name:'autonomous_session_status',arguments:{}}),'autonomous_session_status');
+    if(coding.armed!==true||autonomous.coding_armed!==true||autonomous.autonomous_armed!==true) throw new Error('R36 compact parity requires coding and autonomous standing grants');
+    const tree=structured(await client.callTool({name:'coding_tree',arguments:{root_id:'core',path:'workspaces/demo',max_depth:2,max_entries:128}}),'coding_tree');
+    if(tree.status!=='ok'||!Array.isArray(tree.entries)) throw new Error('coding_tree malformed');
+    const stat=gateway(await client.callTool({name:'coding_inspect',arguments:{op:'stat',root_id:'core',path:'package.json',hash:true}}),'coding stat');
+    if(stat.type!=='file'||!/^[0-9a-f]{64}$/.test(String(stat.sha256??''))||!/^[0-9a-f]{64}$/.test(String(stat.observation_sha256??''))) throw new Error('coding stat identity missing');
+    const search=gateway(await client.callTool({name:'coding_inspect',arguments:{op:'search',root_id:'core',path:'src',pattern:'R36_CAPABILITY_LEDGER',target:'content',mode:'literal',case_sensitive:true,max_results:20,max_file_bytes:262144,max_scan_bytes:4194304,page_size:20,cursor:null}}),'coding search');
+    if(!Array.isArray(search.matches)||search.matches.length<1) throw new Error('coding search returned no R36 ledger match');
+
+    const buildScript='scripts/autonomous-build.ps1';
+    const testScript='scripts/release-parity-tests.ps1';
+    const build=structured(await client.callTool({name:'coding_command_run',arguments:{root_id:'core',command_id:'powershell_script',script_path:buildScript,script_sha256:await fileSha(buildScript),args:[],cwd:'.',timeout_ms:120000}},{timeout:180000,maxTotalTimeout:180000}),'coding build');
+    if(build.status!=='passed'||build.exit_code!==0) throw new Error('R36 coding build failed');
+    const buildVerify=structured(await client.callTool({name:'coding_receipt_verify',arguments:{receipt_id:build.receipt_id}}),'coding build receipt');
+    if(buildVerify.ok!==true||buildVerify.signature_valid!==true) throw new Error('R36 coding build receipt invalid');
+    const tests=structured(await client.callTool({name:'coding_command_run',arguments:{root_id:'core',command_id:'powershell_script',script_path:testScript,script_sha256:await fileSha(testScript),args:[],cwd:'.',timeout_ms:300000}},{timeout:360000,maxTotalTimeout:360000}),'coding tests');
+    if(tests.status!=='passed'||tests.exit_code!==0) throw new Error('R36 coding tests failed');
+    const testVerify=structured(await client.callTool({name:'coding_receipt_verify',arguments:{receipt_id:tests.receipt_id}}),'coding test receipt');
+    if(testVerify.ok!==true||testVerify.signature_valid!==true) throw new Error('R36 coding test receipt invalid');
+
+    const initial=`needle-${tag}\n`;
+    const write=gateway(await client.callTool({name:'machine_fs',arguments:{op:'write',root_id:scratchRoot,path:target,content:initial,encoding:'utf8',expected_sha256:'absent'}}),'machine_fs write');
+    targetPresent=true;machineReceipts.push(write.receipt_id);await verifyMachineReceipt(policy,write.receipt_id,'machine_fs_write');
+    const bounded=gateway(await client.callTool({name:'machine_fs',arguments:{op:'read',root_id:scratchRoot,path:target,offset:0,max_bytes:128,hash_file:true}}),'machine_fs read');
+    if(Buffer.from(bounded.data_base64,'base64').toString('utf8')!==initial||bounded.file_sha256!==write.sha256) throw new Error('R36 bounded machine read mismatch');
+    const edit=gateway(await client.callTool({name:'machine_fs',arguments:{op:'edit_exact',root_id:scratchRoot,path:target,expected_sha256:write.sha256,old_string:'needle',new_string:'beta',expected_replacements:1}}),'machine_fs edit');
+    machineReceipts.push(edit.receipt_id);await verifyMachineReceipt(policy,edit.receipt_id,'machine_fs_edit_exact');
+    const stale=await client.callTool({name:'machine_fs',arguments:{op:'edit_exact',root_id:scratchRoot,path:target,expected_sha256:write.sha256,old_string:'beta',new_string:'bad',expected_replacements:1}});
+    const staleValue=stale.structuredContent;
+    if(!staleValue||typeof staleValue!=='object') throw new Error('R36 stale machine-fs denial missing structured output');
+    if(stale.isError!==true||staleValue.status!=='denied'||!/precondition mismatch/i.test(String(staleValue.error??''))) {
+      throw new Error(`R36 stale machine-fs precondition was not denied: ${JSON.stringify(staleValue)}`);
+    }
+
+    const searchStart=gateway(await client.callTool({name:'machine_observe',arguments:{op:'search_start',root_id:scratchRoot,path:'.',pattern:tag,case_sensitive:true,max_results:20,max_files:200,max_bytes:262144,max_file_bytes:16384}}),'observe search start');
+    const searchStatus=await waitSearch(client,searchStart.search_id);
+    if(searchStatus.state!=='completed'||!searchStatus.receipt_id) throw new Error('R36 compact observation search failed');
+    observationReceipts.push(searchStatus.receipt_id);await verifyObservationReceipt(policy,searchStatus.receipt_id);
+    const page=gateway(await client.callTool({name:'machine_observe',arguments:{op:'search_page',search_id:searchStart.search_id,limit:20,cursor:null}}),'observe search page');
+    if(!page.results.some(item=>item.path===target)) throw new Error('R36 compact search did not return parity file');
+    const system=gateway(await client.callTool({name:'machine_observe',arguments:{op:'system_status'}}),'system status');
+    observationReceipts.push(system.receipt_id);await verifyObservationReceipt(policy,system.receipt_id);
+    const machineStatus=gateway(await client.callTool({name:'machine_observe',arguments:{op:'machine_status'}}),'machine status');
+    if(machineStatus.release_id!==pointer.release_id||machineStatus.release_manifest_sha256!==pointer.manifest_sha256) throw new Error('R36 compact machine status release mismatch');
+
+    const started=gateway(await client.callTool({name:'process_session',arguments:{op:'start',profile_id:'ping_hold',root_id:'core',cwd:'.',args:[]}}),'process start');
+    processSession=started.session_id??started.session?.session_id;
+    if(!/^[0-9a-f]{64}$/.test(String(processSession??''))) throw new Error('R36 compact process session id missing');
+    const action=gateway(await client.callTool({name:'process_session',arguments:{op:'action',session_id:processSession,action_id:'ping'}}),'process action');
+    const processRead=await waitProcessOutput(client,processSession);
+    const terminated=gateway(await client.callTool({name:'process_session',arguments:{op:'terminate',session_id:processSession}}),'process terminate');
+    const terminalState=terminated.state??terminated.session?.state;
+    if(action.action_id!=='ping'||terminalState!=='terminated') throw new Error('R36 compact process lifecycle failed');
+
+    const fsStat=gateway(await client.callTool({name:'machine_fs',arguments:{op:'stat',root_id:scratchRoot,path:target,hash:true}}),'machine_fs stat');
+    const deleted=gateway(await client.callTool({name:'machine_fs',arguments:{op:'delete',root_id:scratchRoot,path:target,expected_source_identity:fsStat.identity_sha256}}),'machine_fs delete');
+    machineReceipts.push(deleted.receipt_id);await verifyMachineReceipt(policy,deleted.receipt_id,'machine_fs_delete');targetPresent=false;
+
+    return {status:'passed',protocol_revision:client.getNegotiatedProtocolVersion(),profile:'compact',tool_count:names.length,tools:names,
+      catalog_sha256:sha256(Buffer.from(JSON.stringify(names),'utf8')),strict_output_schemas:true,ledger_sha256:manifest.ledger_sha256,
+      capability_count:manifest.capabilities.length,production_non_host_capabilities:required.length,capability_closure:true,
+      gateway_count:R36_COMPACT_GATEWAYS.length,tree_entries:tree.entries.length,coding_stat_verified:true,coding_search_result_count:search.matches.length,
+      machine_fs_receipts_verified:machineReceipts.length,observation_receipts_verified:observationReceipts.length,
+      observation_search_result_count:page.results.length,process_session_id:processSession,process_output_bytes:processRead.stream_head,
+      process_journal_head_sha256:terminated.journal_head_sha256??terminated.session?.journal_head_sha256,
+      build_receipt_id:build.receipt_id,test_receipt_id:tests.receipt_id,coding_receipts_verified:2,
+      execution_provider:'deadbyte_mcp',rdc_operation_count:0};
+  } finally {
+    if(processSession) await client.callTool({name:'process_session',arguments:{op:'terminate',session_id:processSession}}).catch(()=>{});
+    if(targetPresent){
+      try{const fsStat=gateway(await client.callTool({name:'machine_fs',arguments:{op:'stat',root_id:scratchRoot,path:target,hash:false}}),'cleanup stat');
+        if(fsStat.identity_sha256) await client.callTool({name:'machine_fs',arguments:{op:'delete',root_id:scratchRoot,path:target,expected_source_identity:fsStat.identity_sha256}}).catch(()=>{});
+      }catch{}
+    }
+    await client.close().catch(()=>{});
+  }
+}
+
+if(process.argv[1]&&path.resolve(process.argv[1])===fileURLToPath(import.meta.url)){
+  const endpoint=process.argv[2];
+  if(!endpoint) throw new Error('usage: node src/remote-mcp-r36-parity-client.mjs https://host/mcp/path');
+  runR36CompactParity(endpoint).then(result=>console.log(JSON.stringify(result,null,2))).catch(error=>{console.error(error instanceof Error?error.stack:String(error));process.exitCode=1;});
+}

package/src/remote-mcp-smoke-client.mjs

@@ -30,7 +30,7 @@ const agentTools = [
 const codingTools = [
   'coding_benchmark_run', 'coding_command_run', 'coding_file_read', 'coding_file_write', 'coding_files_read',
   'coding_receipt_verify', 'coding_search', 'coding_session_status', 'coding_stat',
-  'coding_symbol_definition', 'coding_symbol_outline', 'coding_symbol_references', 'coding_symbol_replace',
+  'coding_symbol_definition', 'coding_symbol_diagnostics', 'coding_symbol_implementations', 'coding_symbol_outline', 'coding_symbol_references', 'coding_symbol_rename_preview', 'coding_symbol_replace',
   'coding_task_approve', 'coding_task_cancel', 'coding_task_events', 'coding_task_run',
   'coding_task_status', 'coding_task_submit', 'coding_task_verify', 'coding_text_replace', 'coding_tree'
 ];
@@ -39,6 +39,18 @@ const autonomousTools = [
   'autonomous_goal_status', 'autonomous_goal_submit', 'autonomous_goal_verify', 'autonomous_release_gate',
   'autonomous_session_status', 'native_diff_apply', 'native_diff_preview', 'native_diff_verify'
 ];
+const r36CompactTools = [
+  'autonomous_goal_approve','autonomous_goal_cancel','autonomous_goal_events','autonomous_goal_run','autonomous_goal_status','autonomous_goal_submit','autonomous_goal_verify','autonomous_release_gate','autonomous_session_status',
+  'capability_manifest',
+  'coding_benchmark_run','coding_command_run','coding_file_read','coding_file_write','coding_inspect','coding_receipt_verify','coding_session_status','coding_symbol_replace',
+  'coding_task_approve','coding_task_cancel','coding_task_events','coding_task_run','coding_task_status','coding_task_submit','coding_task_verify','coding_text_replace','coding_tree',
+  'evidence_verify',
+  'host_exec','host_file_read','host_file_write',
+  'machine_fs','machine_list','machine_observe','machine_ping','machine_revoke','machine_status',
+  'native_diff_apply','native_diff_preview','native_diff_verify',
+  'process_session'
+].sort();
+if (r36CompactTools.length !== 41) throw new Error(`R36 compact catalog constant drift: ${r36CompactTools.length}`);
 const allowedCatalogs = [];
 for (const machine of [false, true]) for (const host of [false, true]) for (const agent of [false, true]) {
   for (const processPlane of [false, true]) for (const machineFs of [false, true]) for (const observation of [false, true]) for (const codingMode of ['none', 'coding', 'autonomous']) {
@@ -68,13 +80,21 @@ function structured(result, label) {
   if (!result.structuredContent || typeof result.structuredContent !== 'object') throw new Error(`${label} returned no structured object`);
   return result.structuredContent;
 }
+function gateway(result, label) {
+  const value = structured(result, label);
+  if (value.status !== 'ok' || !value.result || typeof value.result !== 'object') {
+    throw new Error(`${label} gateway status=${String(value.status)} error=${String(value.error ?? '')}`);
+  }
+  return value.result;
+}
 
 try {
   await client.connect(transport);
   if (client.getProtocolEra() !== 'modern') throw new Error(`expected modern MCP era, got ${String(client.getProtocolEra())}`);
   const listed = await client.listTools();
   const names = listed.tools.map(t => t.name).sort();
-  const catalogOk = allowedCatalogs.some(expected => JSON.stringify(names) === JSON.stringify(expected));
+  const compactProfile = JSON.stringify(names) === JSON.stringify(r36CompactTools);
+  const catalogOk = compactProfile || allowedCatalogs.some(expected => JSON.stringify(names) === JSON.stringify(expected));
   if (!catalogOk) throw new Error(`tool catalog mismatch: ${JSON.stringify(names)}`);
   for (const tool of listed.tools) {
     if (tool.outputSchema?.type !== 'object' || tool.outputSchema?.additionalProperties !== false || !tool.outputSchema?.properties) {
@@ -90,72 +110,108 @@ try {
   const codingRuntime = codingTools.every(name => names.includes(name));
   const autonomousRuntime = autonomousTools.every(name => names.includes(name));
 
-  const opened = structured(await client.callTool({ name: 'workspace_open', arguments: { workspace_id: 'demo' } }), 'workspace_open');
-  if (opened.status !== 'ok') throw new Error(`workspace_open status=${String(opened.status)}`);
-
-  const proofOutput = `remote-proof.${randomBytes(8).toString('hex')}.txt`;
-  const proof = structured(await client.callTool({
-    name: 'proof_execute', arguments: { workspace_id: 'demo', input: 'input.txt', output: proofOutput }
-  }), 'proof_execute');
-  if (proof.status !== 'passed' || !/^[0-9a-f]{64}$/.test(proof.request_sha256)) throw new Error('remote proof request identity missing');
-  const proofVerify = structured(await client.callTool({
-    name: 'evidence_verify', arguments: { workspace_id: 'demo', receipt_path: proof.receipt_path }
-  }), 'evidence_verify proof');
-  if (proofVerify.ok !== true || proofVerify.signature_valid !== true || proofVerify.receipt_schema !== 'deadbyte.receipt.v2' ||
-      proofVerify.request_sha256 !== proof.request_sha256) throw new Error(`remote proof verify failed: ${JSON.stringify(proofVerify)}`);
-
+  let compact = null;
+  let proofOutput = null;
+  let proof = null;
   let contained = null;
-  if (mode === 'full') {
-    const output = `remote-contained.${randomBytes(8).toString('hex')}.txt`;
-    const exec = structured(await client.callTool({
-      name: 'contained_transform',
-      arguments: { workspace_id: 'demo', input: 'input.txt', output, operation: 'uppercase_ascii' }
-    }), 'contained_transform');
-    if (exec.status !== 'passed' || exec.output_sha256 !== '3e740f6fcf2c6659bc5f99e0706b09f3c127407bbabe74d05285d2e3276946c2' ||
-        !/^[0-9a-f]{64}$/.test(exec.request_sha256)) throw new Error(`remote contained result mismatch: ${JSON.stringify(exec)}`);
-    const verify = structured(await client.callTool({
-      name: 'evidence_verify', arguments: { workspace_id: 'demo', receipt_path: exec.receipt_path }
-    }), 'evidence_verify contained');
-    if (verify.ok !== true || verify.signature_valid !== true || verify.containment_verified !== true ||
-        verify.active_network_denial_verified !== true || verify.receipt_schema !== 'deadbyte.receipt.v2' ||
-        verify.request_sha256 !== exec.request_sha256) throw new Error(`remote contained verification failed: ${JSON.stringify(verify)}`);
-    contained = { output, receipt_sha256: exec.receipt_sha256, request_sha256: exec.request_sha256, output_sha256: exec.output_sha256 };
-  }
   let agent = null;
-  if (mode === 'full' && agentRuntime) {
-    const submissionId = `remote-gate-${randomBytes(8).toString('hex')}`;
-    const submitted = structured(await client.callTool({
-      name: 'agent_task_submit', arguments: {
-        workspace_id: 'demo', submission_id: submissionId, title: 'remote R22 gate',
-        steps: [
-          { step_id: 'proof', kind: 'proof_execute', input: { kind: 'workspace', path: 'input.txt' }, retry_limit: 0 },
-          { step_id: 'contained', kind: 'contained_transform', operation: 'uppercase_ascii', input: { kind: 'step_output', step_id: 'proof' }, retry_limit: 0 }
-        ]
+  if (compactProfile) {
+    const manifest = gateway(await client.callTool({ name: 'capability_manifest', arguments: {} }), 'capability_manifest');
+    if (manifest.schema !== 'deadbyte.capability-manifest.v1' || manifest.profile !== 'compact' ||
+        !Array.isArray(manifest.capabilities) || !/^[0-9a-f]{64}$/.test(String(manifest.ledger_sha256 ?? ''))) {
+      throw new Error('R36 compact capability manifest malformed');
+    }
+    const required = manifest.capabilities.filter(item => item?.production === true && item?.host_only !== true);
+    for (const item of required) {
+      if (typeof item.compact_tool !== 'string' || !names.includes(item.compact_tool)) {
+        throw new Error(`R36 compact capability route missing: ${String(item.id)}`);
+      }
+    }
+    const machine = gateway(await client.callTool({ name: 'machine_observe', arguments: { op: 'machine_status' } }), 'machine_status');
+    const nonce = `remote-smoke-${randomBytes(16).toString('hex')}`;
+    const ping = gateway(await client.callTool({ name: 'machine_observe', arguments: { op: 'machine_ping', nonce } }), 'machine_ping');
+    if (ping.nonce !== nonce || ping.machine_id !== machine.machine_id ||
+        ping.release_id !== machine.release_id || ping.release_manifest_sha256 !== machine.release_manifest_sha256) {
+      throw new Error('R36 compact machine ping binding mismatch');
+    }
+    compact = {
+      profile: 'compact',
+      ledger_sha256: manifest.ledger_sha256,
+      capability_count: manifest.capabilities.length,
+      production_non_host_capabilities: required.length,
+      capability_closure: true,
+      machine_id: machine.machine_id,
+      release_id: machine.release_id,
+      release_manifest_sha256: machine.release_manifest_sha256,
+      ping_signature_valid: ping.signature_valid === true
+    };
+  } else {
+    const opened = structured(await client.callTool({ name: 'workspace_open', arguments: { workspace_id: 'demo' } }), 'workspace_open');
+    if (opened.status !== 'ok') throw new Error(`workspace_open status=${String(opened.status)}`);
+
+    proofOutput = `remote-proof.${randomBytes(8).toString('hex')}.txt`;
+    proof = structured(await client.callTool({
+      name: 'proof_execute', arguments: { workspace_id: 'demo', input: 'input.txt', output: proofOutput }
+    }), 'proof_execute');
+    if (proof.status !== 'passed' || !/^[0-9a-f]{64}$/.test(proof.request_sha256)) throw new Error('remote proof request identity missing');
+    const proofVerify = structured(await client.callTool({
+      name: 'evidence_verify', arguments: { workspace_id: 'demo', receipt_path: proof.receipt_path }
+    }), 'evidence_verify proof');
+    if (proofVerify.ok !== true || proofVerify.signature_valid !== true || proofVerify.receipt_schema !== 'deadbyte.receipt.v2' ||
+        proofVerify.request_sha256 !== proof.request_sha256) throw new Error(`remote proof verify failed: ${JSON.stringify(proofVerify)}`);
+
+    if (mode === 'full') {
+      const output = `remote-contained.${randomBytes(8).toString('hex')}.txt`;
+      const exec = structured(await client.callTool({
+        name: 'contained_transform',
+        arguments: { workspace_id: 'demo', input: 'input.txt', output, operation: 'uppercase_ascii' }
+      }), 'contained_transform');
+      if (exec.status !== 'passed' || exec.output_sha256 !== '3e740f6fcf2c6659bc5f99e0706b09f3c127407bbabe74d05285d2e3276946c2' ||
+          !/^[0-9a-f]{64}$/.test(exec.request_sha256)) throw new Error(`remote contained result mismatch: ${JSON.stringify(exec)}`);
+      const verify = structured(await client.callTool({
+        name: 'evidence_verify', arguments: { workspace_id: 'demo', receipt_path: exec.receipt_path }
+      }), 'evidence_verify contained');
+      if (verify.ok !== true || verify.signature_valid !== true || verify.containment_verified !== true ||
+          verify.active_network_denial_verified !== true || verify.receipt_schema !== 'deadbyte.receipt.v2' ||
+          verify.request_sha256 !== exec.request_sha256) throw new Error(`remote contained verification failed: ${JSON.stringify(verify)}`);
+      contained = { output, receipt_sha256: exec.receipt_sha256, request_sha256: exec.request_sha256, output_sha256: exec.output_sha256 };
+    }
+    if (mode === 'full' && agentRuntime) {
+      const submissionId = `remote-gate-${randomBytes(8).toString('hex')}`;
+      const submitted = structured(await client.callTool({
+        name: 'agent_task_submit', arguments: {
+          workspace_id: 'demo', submission_id: submissionId, title: 'remote R22 gate',
+          steps: [
+            { step_id: 'proof', kind: 'proof_execute', input: { kind: 'workspace', path: 'input.txt' }, retry_limit: 0 },
+            { step_id: 'contained', kind: 'contained_transform', operation: 'uppercase_ascii', input: { kind: 'step_output', step_id: 'proof' }, retry_limit: 0 }
+          ]
+        }
+      }), 'agent_task_submit');
+      const run = structured(await client.callTool({
+        name: 'agent_task_run', arguments: { workspace_id: 'demo', task_id: submitted.task_id, max_steps: 8 }
+      }), 'agent_task_run');
+      if (run.state !== 'succeeded' || run.completed_steps !== 2) throw new Error(`agent task run failed: ${JSON.stringify(run)}`);
+      const verified = structured(await client.callTool({
+        name: 'agent_task_verify', arguments: { workspace_id: 'demo', task_id: submitted.task_id }
+      }), 'agent_task_verify');
+      if (verified.ok !== true || verified.signature_valid !== true || verified.step_receipts_verified !== 2) {
+        throw new Error(`agent task verify failed: ${JSON.stringify(verified)}`);
       }
-    }), 'agent_task_submit');
-    const run = structured(await client.callTool({
-      name: 'agent_task_run', arguments: { workspace_id: 'demo', task_id: submitted.task_id, max_steps: 8 }
-    }), 'agent_task_run');
-    if (run.state !== 'succeeded' || run.completed_steps !== 2) throw new Error(`agent task run failed: ${JSON.stringify(run)}`);
-    const verified = structured(await client.callTool({
-      name: 'agent_task_verify', arguments: { workspace_id: 'demo', task_id: submitted.task_id }
-    }), 'agent_task_verify');
-    if (verified.ok !== true || verified.signature_valid !== true || verified.step_receipts_verified !== 2) {
-      throw new Error(`agent task verify failed: ${JSON.stringify(verified)}`);
+      agent = { task_id: submitted.task_id, plan_sha256: submitted.plan_sha256,
+        task_receipt_sha256: verified.task_receipt_sha256, step_receipts_verified: verified.step_receipts_verified };
     }
-    agent = { task_id: submitted.task_id, plan_sha256: submitted.plan_sha256,
-      task_receipt_sha256: verified.task_receipt_sha256, step_receipts_verified: verified.step_receipts_verified };
   }
   console.log(JSON.stringify({
-    status: 'passed', mode,
+    status: 'passed', mode, profile: compactProfile ? 'compact' : 'legacy-full',
     protocol_revision: '2026-07-28', protocol_era: 'modern', tools: names,
     output_schemas_strict: true,
     machine_runtime: machineRuntime, privileged_host_plane: privilegedHostPlane,
     agent_runtime: agentRuntime, process_runtime: processRuntime,
     machine_fs_runtime: machineFsRuntime, observation_runtime: observationRuntime,
     coding_runtime: codingRuntime, autonomous_runtime: autonomousRuntime,
-    proof: { output: proofOutput, receipt_sha256: proof.receipt_sha256,
-      request_sha256: proof.request_sha256, signature_valid: true },
+    compact,
+    proof: proof ? { output: proofOutput, receipt_sha256: proof.receipt_sha256,
+      request_sha256: proof.request_sha256, signature_valid: true } : null,
     contained, agent
   }, null, 2));
 } finally {

package/src/runtime-update.mjs

@@ -497,6 +497,34 @@ export function runControllerStartNoCapture(ctx,timeoutMs=45000){
   const call=controllerInvocation(ctx,'start');
   return controlResult(call.exe,call.args,{cwd:call.cwd,timeoutMs,stdio:'ignore'});
 }
+export async function readControllerStartFailure(ctx){
+  const file=path.join(ctx.runtime_root,'controller-start-failure.json');
+  let bytes;
+  try { bytes=await readFile(file); }
+  catch(error){ if(error?.code==='ENOENT') return null; throw error; }
+  const text=bytes.toString('utf8').replace(/^\uFEFF/,'');
+  let value;
+  try { value=JSON.parse(text); } catch(error){ throw new Error(`controller start failure evidence JSON invalid: ${error.message}`); }
+  if(value?.schema!=='deadbyte.controller-start-failure.v1'||!['start','resume','restart'].includes(String(value?.command??''))||
+      typeof value?.message!=='string'||value.message.length<1||typeof value?.failed_at_utc!=='string') {
+    throw new Error('controller start failure evidence schema invalid');
+  }
+  return {path:file,sha256:sha256Bytes(bytes),...value};
+}
+export async function preserveControllerStartFailure(ctx,evidenceDir){
+  const evidence=await readControllerStartFailure(ctx);
+  if(!evidence) return null;
+  const source=path.join(ctx.runtime_root,'controller-start-failure.json');
+  const bytes=await readFile(source);
+  const sourceSha256=sha256Bytes(bytes);
+  if(sourceSha256!==evidence.sha256) throw new Error('controller start failure evidence changed before preservation');
+  const destination=path.join(path.resolve(evidenceDir),'controller-start-failure.json');
+  await atomicBytes(destination,bytes);
+  const persistedSha256=sha256Bytes(await readFile(destination));
+  if(persistedSha256!==sourceSha256) throw new Error('preserved controller start failure evidence SHA-256 mismatch');
+  return {path:destination,sha256:persistedSha256,schema:evidence.schema,command:evidence.command,
+    failed_at_utc:evidence.failed_at_utc,message:evidence.message};
+}
 async function readLedger(ctx,name){
   const file=path.join(ctx.runtime_root,`${name}.instance.json`);
   const value=JSON.parse((await readFile(file,'utf8')).replace(/^\uFEFF/,''));
@@ -554,12 +582,20 @@ async function waitCoreGone(runtime,timeoutMs=10000){
 }
 async function startAndVerify(ctx,oldRuntime){
   let start=null;
+  await rm(path.join(ctx.runtime_root,'controller-start-failure.json'),{force:true});
   for(let attempt=1;attempt<=3;attempt+=1){
     start=runControllerStartNoCapture(ctx,45000);
     if(!start.error&&start.status===0) break;
     if(attempt<3) await sleep(1500);
   }
-  if(start.error||start.status!==0) throw new Error(`controller start transport failed status=${start.status} error=${start.error?.message??'none'}`);
+  if(start.error||start.status!==0){
+    let detail='';
+    try {
+      const evidence=await readControllerStartFailure(ctx);
+      if(evidence) detail=` controller=${evidence.message} evidence_sha256=${evidence.sha256}`;
+    } catch(error) { detail=` controller_evidence_error=${error.message}`; }
+    throw new Error(`controller start transport failed status=${start.status} error=${start.error?.message??'none'}${detail}`);
+  }
   let statusText=''; let status=null;
   const started=Date.now();
   while(Date.now()-started<45000){
@@ -879,6 +915,18 @@ export async function performSlotUpdate({stage,developmentRoot,expectedVersion,e
     return {ok:true,update_id:updateId,state_path:statePath,receipt_path:receiptPath,receipt_sha256:receipt.receipt_sha256,
       pointer:newPointer,new_runtime:newRuntime,final_authority:finalAuthority,workspace_root:workspace.target};
   } catch(error){
+    let controllerStartFailure=null,controllerStartFailurePreservationError=null;
+    if(pointerCommitted&&newCtx){
+      try {
+        controllerStartFailure=await preserveControllerStartFailure(newCtx,evidenceDir);
+        const claimed=/evidence_sha256=([0-9a-f]{64})/.exec(String(error?.message??error));
+        if(claimed&&(!controllerStartFailure||controllerStartFailure.sha256!==claimed[1])) {
+          controllerStartFailurePreservationError=`controller start failure evidence claim mismatch expected=${claimed[1]} preserved=${controllerStartFailure?.sha256??'missing'}`;
+        }
+      } catch(preserveError) {
+        controllerStartFailurePreservationError=String(preserveError?.message??preserveError);
+      }
+    }
     const rollback={attempted:false,new_runtime_stopped:false,pointer_restored:false,launchers_restored:false,workspace_restored:false,
       mcp_url_restored:false,old_runtime_restarted:false,authority_restored:false,errors:[]};
     try {
@@ -916,6 +964,8 @@ export async function performSlotUpdate({stage,developmentRoot,expectedVersion,e
     } catch(rollbackError){ rollback.errors.push(`rollback:${rollbackError.message}`); }
     const failure={schema:FAILURE_SCHEMA,update_id:updateId,release_version:expectedVersion,candidate_manifest_sha256:expectedManifest,
       failed_at_utc:new Date().toISOString(),phase:journal.phase??'unknown',error:{name:error?.name??'Error',code:error?.code??null,message:String(error?.message??error)},
+      controller_start_failure:controllerStartFailure,
+      controller_start_failure_preservation_error:controllerStartFailurePreservationError,
       predecessor_mode:predecessor?.mode??null,prior_pointer:publicPointer(pointerInfo?.pointer??null),attempted_pointer:publicPointer(newPointer),old_runtime:generationTuple(oldRuntime),rollback};
     await writeState(statePath,journal,'failed',{failure,rollback}).catch(()=>{});
     let failureReceipt=null;

package/src/search-cursor.mjs

@@ -0,0 +1,45 @@
+import { sign as cryptoSign, verify as cryptoVerify } from 'node:crypto';
+import { canonicalJson } from './canonical-json.mjs';
+import { loadPrivateSigningKey, loadPublicVerifyKey } from './trust.mjs';
+
+const DOMAIN=Buffer.from('DEADBYTE-SEARCH-CURSOR-V1\0','utf8');
+const HEX64=/^[0-9a-f]{64}$/;
+const SCHEMA='deadbyte.search-cursor.v1';
+
+function validateBody(body){
+  if(!body||typeof body!=='object'||Array.isArray(body)||body.schema!==SCHEMA) throw new Error('search cursor body invalid');
+  if(!HEX64.test(body.query_sha256??'')) throw new Error('search cursor query identity invalid');
+  if(!HEX64.test(body.snapshot_sha256??'')) throw new Error('search cursor snapshot identity invalid');
+  if(!Number.isInteger(body.offset)||body.offset<0||body.offset>1_000_000) throw new Error('search cursor offset invalid');
+  return {schema:SCHEMA,query_sha256:body.query_sha256,snapshot_sha256:body.snapshot_sha256,offset:body.offset};
+}
+
+export function createSearchCursorCodec({signingKeyPath,verifyKeyPath}){
+  if(!signingKeyPath||!verifyKeyPath) throw new Error('search cursor codec requires signing and verify keys');
+  return Object.freeze({
+    async encode(input){
+      const body=validateBody({...input,schema:SCHEMA});
+      const signing=await loadPrivateSigningKey(signingKeyPath);
+      const bytes=Buffer.from(canonicalJson(body),'utf8');
+      const signature=cryptoSign(null,Buffer.concat([DOMAIN,bytes]),signing.privateKey).toString('base64');
+      const envelope={body,attestation:{algorithm:'ed25519',key_id:signing.keyId,signature_base64:signature}};
+      return Buffer.from(canonicalJson(envelope),'utf8').toString('base64url');
+    },
+    async decode(cursor){
+      if(typeof cursor!=='string'||cursor.length<1||cursor.length>8192) throw new Error('search cursor invalid');
+      let envelope;
+      try{envelope=JSON.parse(Buffer.from(cursor,'base64url').toString('utf8'));}catch{throw new Error('search cursor invalid');}
+      const body=validateBody(envelope?.body);
+      const verifyKey=await loadPublicVerifyKey(verifyKeyPath);
+      const att=envelope?.attestation;
+      if(att?.algorithm!=='ed25519'||att?.key_id!==verifyKey.keyId||typeof att?.signature_base64!=='string') throw new Error('search cursor attestation invalid');
+      const signature=Buffer.from(att.signature_base64,'base64');
+      if(signature.length!==64||signature.toString('base64')!==att.signature_base64) throw new Error('search cursor signature encoding invalid');
+      const bytes=Buffer.from(canonicalJson(body),'utf8');
+      if(!cryptoVerify(null,Buffer.concat([DOMAIN,bytes]),verifyKey.publicKey,signature)) throw new Error('search cursor signature invalid');
+      return body;
+    }
+  });
+}
+
+export const SEARCH_CURSOR_SCHEMA=SCHEMA;