deadbyte-mcp 0.9.0 → 0.11.0

package/test/release-version.test.mjs

@@ -3,40 +3,49 @@ import assert from 'node:assert/strict';
 import { readFile } from 'node:fs/promises';
 import { createHash } from 'node:crypto';
 
-const root = new URL('../', import.meta.url);
-const text = rel => readFile(new URL(rel, root), 'utf8');
+const root=new URL('../',import.meta.url);
+const text=rel=>readFile(new URL(rel,root),'utf8');
+const R36_RELEASE_ID='v0.10.0-8d1e5f09745e7647';
+const R36_MANIFEST='8d1e5f09745e764796b60e0a8a0168be7334ed4bf834fad5974a80eba295b4e8';
 
-test('R35 successor release authority agrees on V0.9.0 / R35 identity', async () => {
-  const pkg = JSON.parse(await text('package.json'));
-  const [version, controller, gate, readme, architecture, controllerReadme, deferred, parity, closure, closureVerify, windowsGate, semanticConfig] = await Promise.all([
-    text('src/version.mjs'),
-    text('controller/deadbyte-controller.ps1'),
-    text('scripts/gate-windows.ps1'),
-    text('README.txt'),
-    text('docs/ARCHITECTURE.md'),
-    text('controller/README.TXT'),
-    text('scripts/deferred-slot-operation.mjs'),
-    text('src/remote-mcp-r34-parity-client.mjs'),
-    text('scripts/final-closure.mjs'),
-    text('scripts/final-closure-verify.mjs'),
-    text('scripts/windows-gate-evidence.mjs'),
+test('R37 successor release authority agrees on V0.11.0 / R37 and preserves exact public R36 predecessor',async()=>{
+  const pkg=JSON.parse(await text('package.json'));
+  const [version,controller,gate,readme,architecture,controllerReadme,deferred,parity,closure,closureVerify,windowsGate,semanticConfig]=await Promise.all([
+    text('src/version.mjs'),text('controller/deadbyte-controller.ps1'),text('scripts/gate-windows.ps1'),
+    text('README.txt'),text('docs/ARCHITECTURE.md'),text('controller/README.TXT'),
+    text('scripts/deferred-slot-operation.mjs'),text('scripts/release-parity.mjs'),text('scripts/final-closure.mjs'),
+    text('scripts/final-closure-verify.mjs'),text('scripts/windows-gate-evidence.mjs'),
     text('controller/deadbyte-semantic-lsp-config.json')
   ]);
-  assert.equal(pkg.version, '0.9.0');
-  assert.match(version, /DEADBYTE_VERSION = '0\.9\.0'/);
-  assert.match(controller, /CONTROLLER V0\.9\.0 \/ R35/);
-  assert.match(gate, /DEADBYTE V0\.9\.0 \/ R35 WINDOWS BATCH GATE: PASS/);
-  assert.match(readme, /^DEADBYTE MCP V0\.9\.0 \/ R35 PRODUCTION BASELINE$/m);
-  assert.match(architecture, /^# DEADBYTE MCP V0\.9\.0 \/ R35 ARCHITECTURE$/m);
-  assert.match(controllerReadme, /^DEADBYTE MCP V0\.9\.0 \/ R35 CONTROLLER$/m);
-  assert.match(controllerReadme, /73-tool public catalog/);
-  assert.match(deferred, /--expected-version','0\.9\.0'/);
-  assert.match(parity, /version:'0\.9\.0'/);
-  assert.match(closure, /version:'0\.9\.0'/);
-  assert.match(closureVerify, /DEADBYTE V0\.9\.0 \/ R35 WINDOWS BATCH GATE: PASS/);
-  assert.match(windowsGate, /schema:'deadbyte\.r35-windows-gate\.v1'/);
-  assert.equal(createHash('sha256').update(Buffer.from(semanticConfig,'utf8')).digest('hex'), 'd274b099a298c1033fea8f1e8849751693bbc0448778d619400acb82d4f53a3b');
-  assert.match(deferred, /--semantic-lsp-config/);
-  assert.match(deferred, /--semantic-lsp-config-sha256/);
-  assert.match(deferred, /deadbyte-semantic-lsp-config\.json/);
+  assert.equal(pkg.version,'0.11.0');
+  assert.match(version,/DEADBYTE_VERSION = '0\.11\.0'/);
+  assert.match(controller,/CONTROLLER V0\.11\.0 \/ R37/);
+  assert.match(gate,/DEADBYTE V0\.11\.0 \/ R37 WINDOWS BATCH GATE: PASS/);
+  assert.match(readme,/^DEADBYTE MCP V0\.11\.0 \/ R37 PRODUCTION BASELINE$/m);
+  assert.match(architecture,/^# DEADBYTE MCP V0\.11\.0 \/ R37 ARCHITECTURE$/m);
+  assert.match(controllerReadme,/^DEADBYTE MCP V0\.11\.0 \/ R37 CONTROLLER$/m);
+  assert.match(controllerReadme,/full 76-tool (?:profile|catalog)/);
+  assert.match(controllerReadme,/compact capability profile[^\n]*<=42 tools/);
+  assert.match(deferred,/--expected-version','0\.11\.0'/);
+  assert.match(parity,/deadbyte\.r37-parity\.v1/);
+  assert.match(parity,/version==='0\.11\.0'|version:'0\.11\.0'/);
+  assert.match(parity,new RegExp(R36_RELEASE_ID.replaceAll('.','\\.')));
+  assert.match(parity,new RegExp(R36_MANIFEST));
+  assert.match(closure,/DEADBYTE-R37-FINAL-CLOSURE-V1/);
+  assert.match(closure,/version:'0\.11\.0'/);
+  assert.match(closureVerify,/DEADBYTE V0\.11\.0 \/ R37 WINDOWS BATCH GATE: PASS/);
+  assert.match(windowsGate,/schema:'deadbyte\.r37-windows-gate\.v1'/);
+  assert.equal(createHash('sha256').update(Buffer.from(semanticConfig,'utf8')).digest('hex'),'d274b099a298c1033fea8f1e8849751693bbc0448778d619400acb82d4f53a3b');
+});
+
+test('R37 keeps the R36 capability surface contract while adding internal agent fabric',async()=>{
+  const [parity,fabric,live]=await Promise.all([
+    text('src/remote-mcp-r36-parity-client.mjs'),
+    text('src/autonomous-runtime.mjs'),
+    text('src/remote-live-log.mjs')
+  ]);
+  assert.match(parity,/R36_EXPECTED_TOOLS\.length !== 76/);
+  assert.match(parity,/R36_COMPACT_TOOL_LIMIT=42/);
+  for(const name of ['deriveAgentMemory','effectIdentity','createWorkerScheduler','issueObservationLease']) assert.match(fabric,new RegExp(name));
+  assert.match(live,/createLiveTimelineTracker/);
 });

package/test/remote-live-log-r36.test.mjs

@@ -0,0 +1,37 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { formatCompactAuditEvent } from '../src/remote-live-log.mjs';
+
+test('compact live activity shows request context without payload or secret values',()=>{
+  const line=formatCompactAuditEvent({
+    event_type:'tool.request',
+    tool:'coding_file_read',
+    request_id:'abcdef1234567890',
+    args:{
+      root_id:'projects',
+      path:'src/deadbyte-cli.mjs',
+      content:'DO_NOT_PRINT_PAYLOAD',
+      token:'DO_NOT_PRINT_TOKEN'
+    }
+  });
+  assert.equal(line,'▶ RUN coding_file_read root=projects path=src/deadbyte-cli.mjs');
+  assert.doesNotMatch(line,/DO_NOT_PRINT_PAYLOAD|DO_NOT_PRINT_TOKEN|abcdef1234567890/);
+});
+
+test('compact live activity shows successful result duration',()=>{
+  assert.equal(formatCompactAuditEvent({
+    event_type:'tool.result',tool:'coding_search',request_id:'r1',
+    outcome:{is_error:false,duration_ms:42}
+  }),'✅ OK coding_search 42ms');
+});
+
+test('compact live activity shows failed result duration',()=>{
+  assert.equal(formatCompactAuditEvent({
+    event_type:'tool.result',tool:'coding_command_run',request_id:'r2',
+    outcome:{is_error:true,duration_ms:1734}
+  }),'❌ ERR coding_command_run 1.73s');
+});
+
+test('compact live activity ignores unrelated audit events',()=>{
+  assert.equal(formatCompactAuditEvent({event_type:'checkpoint',tool:'coding_tree'}),null);
+});

package/test/remote-live-log-r37.test.mjs

@@ -0,0 +1,47 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { createLiveTimelineTracker } from '../src/remote-live-log.mjs';
+
+test('R37 live timeline correlates RUN and result with stable short span id',()=>{
+  let now=1000;
+  const tracker=createLiveTimelineTracker({clock:()=>now});
+  const run=tracker.observe({event_type:'tool.request',tool:'coding_file_read',request_id:'abcdef1234567890',
+    args:{root_id:'projects',path:'src/a.mjs',content:'SECRET',token:'SECRET'}});
+  assert.equal(run,'▶ [abcdef12] RUN coding_file_read root=projects path=src/a.mjs');
+  now=1250;
+  const done=tracker.observe({event_type:'tool.result',tool:'coding_file_read',request_id:'abcdef1234567890',
+    outcome:{is_error:false,duration_ms:250}});
+  assert.equal(done,'✓ [abcdef12] OK  coding_file_read 250ms');
+  assert.deepEqual(tracker.pending(),[]);
+  assert.doesNotMatch(run+done,/SECRET/);
+});
+
+test('R37 live timeline distinguishes result whose request was outside live tail',()=>{
+  const tracker=createLiveTimelineTracker();
+  const line=tracker.observe({event_type:'tool.result',tool:'coding_tree',request_id:'old-request-12345678',
+    outcome:{is_error:false,duration_ms:15}});
+  assert.equal(line,'↩ [old-requ] OK  coding_tree 15ms (request before live window)');
+});
+
+test('R37 live timeline deduplicates terminal result and reports interrupted spans with ids',()=>{
+  const tracker=createLiveTimelineTracker();
+  tracker.observe({event_type:'tool.request',tool:'coding_command_run',request_id:'request-23456789',args:{command_id:'node_script'}});
+  const first=tracker.observe({event_type:'tool.result',tool:'coding_command_run',request_id:'request-23456789',outcome:{is_error:true,duration_ms:900}});
+  const duplicate=tracker.observe({event_type:'tool.result',tool:'coding_command_run',request_id:'request-23456789',outcome:{is_error:true,duration_ms:900}});
+  assert.equal(first,'✗ [request-] ERR coding_command_run 900ms');
+  assert.equal(duplicate,null);
+
+  tracker.observe({event_type:'tool.request',tool:'coding_file_read',request_id:'pending-12345678',args:{path:'src/a.mjs'}});
+  assert.deepEqual(tracker.reconcileInterrupted('recovery'),[
+    '⚠ [pending-] INTERRUPTED coding_file_read — recovery ended before terminal result'
+  ]);
+});
+
+test('R37 CLI uses timeline tracker for compact live mode while keeping legacy formatter API',async()=>{
+  const {readFile}=await import('node:fs/promises');
+  const src=await readFile(new URL('../src/deadbyte-cli.mjs',import.meta.url),'utf8');
+  assert.match(src,/createLiveTimelineTracker/);
+  assert.match(src,/const activityTracker=createLiveTimelineTracker\(\)/);
+  assert.doesNotMatch(src,/remote --verbose/);
+  assert.doesNotMatch(src,/args\[0\]==='--verbose'/);
+});

package/test/remote-live-log-recovery-r36.test.mjs

@@ -0,0 +1,41 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { createLiveActivityTracker, formatRemoteLifecycle } from '../src/remote-live-log.mjs';
+
+test('R36 lifecycle formatter exposes device/connect/ready/cleanup states with bounded semantic emoji',()=>{
+  assert.equal(formatRemoteLifecycle('device_start'),'🚀 [DEVICE] Starting DEADBYTE MCP...');
+  assert.equal(formatRemoteLifecycle('bridge_connected'),'🔌 [BRIDGE] Local bridge connected');
+  assert.equal(formatRemoteLifecycle('cloud_connected'),'🔌 [CLOUD] Remote MCP connected');
+  assert.equal(formatRemoteLifecycle('session_new'),'[SESSION] New foreground session');
+  assert.equal(formatRemoteLifecycle('session_restored'),'♻️ [SESSION] Previous result stream replayed');
+  assert.equal(formatRemoteLifecycle('ready'),'✅ [READY] DEADBYTE MCP online');
+  assert.equal(formatRemoteLifecycle('cleanup'),'🔐 [AUTH] Revoking session authority...');
+  assert.throws(()=>formatRemoteLifecycle('invented'),/unknown remote lifecycle/i);
+});
+
+test('R36 live activity tracker prints RUN before terminal result and reconciles interrupted requests',()=>{
+  const tracker=createLiveActivityTracker();
+  const run=tracker.observe({event_type:'tool.request',tool:'coding_search',request_id:'request-1',args:{root_id:'projects',path:'src',pattern:'needle',token:'DO_NOT_PRINT'}});
+  assert.equal(run,'▶ RUN coding_search root=projects path=src pattern=needle');
+  assert.deepEqual(tracker.pending(),[{request_id:'request-1',tool:'coding_search'}]);
+  const ok=tracker.observe({event_type:'tool.result',tool:'coding_search',request_id:'request-1',outcome:{is_error:false,duration_ms:84}});
+  assert.equal(ok,'✅ OK coding_search 84ms');
+  assert.deepEqual(tracker.pending(),[]);
+
+  tracker.observe({event_type:'tool.request',tool:'coding_command_run',request_id:'request-2',args:{command_id:'node_script',content:'DO_NOT_PRINT_PAYLOAD'}});
+  tracker.observe({event_type:'tool.request',tool:'coding_file_read',request_id:'request-3',args:{path:'src/a.mjs',private_key:'DO_NOT_PRINT_KEY'}});
+  const interrupted=tracker.reconcileInterrupted('session_end');
+  assert.deepEqual(interrupted,[
+    '⚠️ INTERRUPTED coding_command_run — session ended before result',
+    '⚠️ INTERRUPTED coding_file_read — session ended before result'
+  ]);
+  assert.deepEqual(tracker.pending(),[]);
+  assert.doesNotMatch(interrupted.join('\n'),/DO_NOT_PRINT|request-2|request-3/);
+});
+
+test('R36 live activity tracker tolerates terminal result whose request was before the tail baseline',()=>{
+  const tracker=createLiveActivityTracker();
+  const line=tracker.observe({event_type:'tool.result',tool:'coding_tree',request_id:'old-request',outcome:{is_error:false,duration_ms:15}});
+  assert.equal(line,'✅ OK coding_tree 15ms');
+  assert.deepEqual(tracker.pending(),[]);
+});

package/test/remote-r24-catalog.test.mjs

@@ -66,6 +66,19 @@ test('R32 remote gate accepts observation only with machine plus coding configur
   assert.match(source, /observation_runtime: observationRuntime/);
 });
 
+test('R36 remote smoke accepts only the exact compact production catalog and uses read-only gateway proof', async () => {
+  const source = await readFile(sourcePath, 'utf8');
+  assert.match(source, /const r36CompactTools = \[/);
+  assert.match(source, /r36CompactTools\.length !== 41/);
+  assert.match(source, /const compactProfile = JSON\.stringify\(names\) === JSON\.stringify\(r36CompactTools\)/);
+  assert.match(source, /capability_manifest/);
+  assert.match(source, /machine_observe/);
+  assert.match(source, /op: 'machine_status'/);
+  assert.match(source, /op: 'machine_ping'/);
+  assert.match(source, /if \(compactProfile\) \{[\s\S]*?\} else \{[\s\S]*?workspace_open/);
+  assert.doesNotMatch(source, /r36CompactTools\.includes\(name\).*extras/s);
+});
+
 test('R34 disarmed public gate requires the exact canonical 73-tool catalog', async () => {
   const disarmedPath = fileURLToPath(new URL('../src/remote-mcp-r24-disarmed-smoke-client.mjs', import.meta.url));
   const source = await readFile(disarmedPath, 'utf8');

package/test/remote-session-cli.test.mjs

@@ -18,7 +18,7 @@ async function fixture({failCommand=''}={}){
   const trace=path.join(dir,'trace.txt');
   await mkdir(bin,{recursive:true});
   const launcher=path.join(bin,'DEADBYTE-MCP.ps1');
-  const ps1=`param([string]$Command)\n$ErrorActionPreference='Stop'\nfor($i=0;$i -lt 20;$i++){ try { [IO.File]::AppendAllText($env:DEADBYTE_REMOTE_TEST_TRACE,(\"$Command\" + [Environment]::NewLine),[Text.Encoding]::UTF8); break } catch { if($i -eq 19){ throw }; Start-Sleep -Milliseconds 10 } }\nif ($env:DEADBYTE_REMOTE_TEST_FAIL -and $Command -eq $env:DEADBYTE_REMOTE_TEST_FAIL) { Write-Error \"forced $Command failure\"; exit 9 }\nswitch ($Command) {\n  'start' { Write-Host 'DEADBYTE MCP = ONLINE' }\n  'processstatus' { Write-Host 'Process plane  : ARMED [standing-grant]' }\n  'codingstatus' { Write-Host 'Coding plane  : ARMED [standing-grant]' }\n  'autonomousstatus' { Write-Host 'Autonomous     : ARMED [standing-grant]' }\n  'hoststatus' { Write-Host 'Host plane    : ARMED [standing-grant]' }\n  'park' { Write-Host 'DEADBYTE MCP = PARKED' }\n  default { Write-Host \"$Command OK\" }\n}\nexit 0\n`;
+  const ps1=`param([string]$Command)\n$ErrorActionPreference='Stop'\nfor($i=0;$i -lt 20;$i++){ try { [IO.File]::AppendAllText($env:DEADBYTE_REMOTE_TEST_TRACE,(\"$Command\" + [Environment]::NewLine),[Text.Encoding]::UTF8); break } catch { if($i -eq 19){ throw }; Start-Sleep -Milliseconds 10 } }\nif ($env:DEADBYTE_REMOTE_TEST_FAIL -and $Command -eq $env:DEADBYTE_REMOTE_TEST_FAIL) { Write-Error \"forced $Command failure\"; exit 9 }\nswitch ($Command) {\n  'start' { Write-Host 'DEADBYTE MCP = ONLINE' }\n  'processstatus' { Write-Host 'Process plane  : ARMED [standing-grant]' }\n  'codingstatus' { Write-Host 'Coding plane  : ARMED [standing-grant]' }\n  'autonomousstatus' { Write-Host 'Autonomous     : ARMED [standing-grant]' }\n  'hoststatus' { Write-Host 'Host plane    : DISARMED [disarmed]' }\n  'park' { Write-Host 'DEADBYTE MCP = PARKED' }\n  default { Write-Host \"$Command OK\" }\n}\nexit 0\n`;
   await writeFile(launcher,ps1,'utf8');
   return {dir,state,trace,env:{...process.env,DEADBYTE_STATE_ROOT:state,DEADBYTE_REMOTE_TEST_TRACE:trace,DEADBYTE_REMOTE_TEST_FAIL:failCommand}};
 }
@@ -65,23 +65,29 @@ async function collect(child){
 
 const winTest=isWindows?test:test.skip;
 
-winTest('bare remote uses compact human logs by default, keeps authority semantics, then disarms and parks when the foreground session ends',async()=>{
+winTest('bare remote uses one unified live timeline, keeps authority semantics, then disarms and parks when the foreground session ends',async()=>{
   const fx=await fixture();
   let child=null;
   try{
     child=spawn(process.execPath,[cliPath,'remote'],{env:fx.env,stdio:['pipe','pipe','pipe'],windowsHide:true});
     const output=await collect(child);
-    const ready=await waitFor(fx.trace,commands=>commands.slice(0,9).join(',')==='start,armprocess,armcoding,armautonomous,armhost,processstatus,codingstatus,autonomousstatus,hoststatus');
-    assert.deepEqual(ready.slice(0,9),[
-      'start','armprocess','armcoding','armautonomous','armhost',
+    const ready=await waitFor(fx.trace,commands=>commands.slice(0,8).join(',')==='start,armprocess,armcoding,armautonomous,processstatus,codingstatus,autonomousstatus,hoststatus');
+    assert.deepEqual(ready.slice(0,8),[
+      'start','armprocess','armcoding','armautonomous',
       'processstatus','codingstatus','autonomousstatus','hoststatus'
     ]);
     assert.equal(child.exitCode,null,'remote session must remain foreground after becoming ready');
     const tailDeadline=Date.now()+3000;
-    while(Date.now()<tailDeadline&&!/\[LOG\] Live tool results/.test(output.stdout)) await sleep(50);
+    while(Date.now()<tailDeadline&&!/🔐 \[AUTH\] ARMED: process, coding, autonomous \| host DISARMED/.test(output.stdout)) await sleep(50);
+    assert.match(output.stdout,/🚀 \[DEVICE\] Starting DEADBYTE MCP/);
+    assert.match(output.stdout,/🔌 \[BRIDGE\] Local bridge connected/);
+    assert.match(output.stdout,/🔌 \[CLOUD\] Remote MCP connected/);
+    assert.match(output.stdout,/\[SESSION\] New foreground session/);
+    assert.match(output.stdout,/\[BOOT\] Starting local \+ remote runtime/);
     assert.match(output.stdout,/\[OK\] ONLINE/);
-    assert.match(output.stdout,/\[OK\] Authority ARMED: process, coding, autonomous, host/);
-    assert.match(output.stdout,/\[LOG\] Live tool results\. Ctrl\+C disconnects and revokes authority\./);
+    assert.match(output.stdout,/✅ \[READY\] DEADBYTE MCP online/);
+    assert.match(output.stdout,/🔐 \[AUTH\] ARMED: process, coding, autonomous \| host DISARMED/);
+    assert.match(output.stdout,/\[LOG\] Unified live timeline\. Ctrl\+C disconnects and revokes authority\./);
     assert.doesNotMatch(output.stdout,/Process plane\s*:/);
     assert.doesNotMatch(output.stdout,/Coding plane\s*:/);
     const auditDir=path.join(fx.state,'audit');
@@ -91,11 +97,11 @@ winTest('bare remote uses compact human logs by default, keeps authority semanti
     const marker=JSON.parse(await readFile(path.join(fx.state,'runtime','remote-session.json'),'utf8'));
     assert.match(String(marker.result_session_id||''),/^[0-9a-f]{24}$/);
     const auditEvents=[
-      {seq:1,event_type:'tool.request',tool:'coding_tree',request_id:'abcdef1234567890'},
-      {seq:2,event_type:'tool.result',tool:'coding_tree',request_id:'abcdef1234567890',outcome:{is_error:false}},
-      {seq:2,event_type:'tool.result',tool:'coding_tree',request_id:'abcdef1234567890',outcome:{is_error:false}},
-      {seq:3,event_type:'tool.request',tool:'coding_file_read',request_id:'fedcba9876543210'},
-      {seq:4,event_type:'tool.result',tool:'coding_file_read',request_id:'fedcba9876543210',outcome:{is_error:true}}
+      {seq:1,event_type:'tool.request',tool:'coding_tree',request_id:'abcdef1234567890',args:{root_id:'projects',path:'src',content:'DO_NOT_PRINT_PAYLOAD',token:'DO_NOT_PRINT_TOKEN'}},
+      {seq:2,event_type:'tool.result',tool:'coding_tree',request_id:'abcdef1234567890',outcome:{is_error:false,duration_ms:42}},
+      {seq:2,event_type:'tool.result',tool:'coding_tree',request_id:'abcdef1234567890',outcome:{is_error:false,duration_ms:42}},
+      {seq:3,event_type:'tool.request',tool:'coding_file_read',request_id:'fedcba9876543210',args:{root_id:'projects',path:'src/deadbyte-cli.mjs'}},
+      {seq:4,event_type:'tool.result',tool:'coding_file_read',request_id:'fedcba9876543210',outcome:{is_error:true,duration_ms:1734}}
     ];
     await writeFile(path.join(auditDir,'segment-00000001.jsonl'),`${auditEvents.map(event=>JSON.stringify(event)).join('\n')}\n`,'utf8');
     await writeFile(path.join(runtimeLogs,'bridge.stdout.log'),[
@@ -104,18 +110,23 @@ winTest('bare remote uses compact human logs by default, keeps authority semanti
       '[TOOL OUT] 2026-09-16T00:00:00.002Z #000002 coding_file_read {"is_error":true}'
     ].join('\n')+'\n','utf8');
     const logDeadline=Date.now()+3000;
-    while(Date.now()<logDeadline&&!/\[ERR\] coding_file_read/.test(output.stdout)) await sleep(50);
-    assert.match(output.stdout,/\[OK\] coding_tree \[cursor r1:[0-9a-f]{24}:1\]/);
-    assert.match(output.stdout,/\[ERR\] coding_file_read \[cursor r1:[0-9a-f]{24}:2\]/);
-    assert.equal((output.stdout.match(/\[OK\] coding_tree/g)||[]).length,1,'duplicate terminal result must print once');
+    while(Date.now()<logDeadline&&!/✗ \[fedcba98\] ERR coding_file_read 1\.73s/.test(output.stdout)) await sleep(50);
+    assert.match(output.stdout,/▶ \[abcdef12\] RUN coding_tree root=projects path=src/);
+    assert.match(output.stdout,/✓ \[abcdef12\] OK  coding_tree 42ms \[cursor r1:[0-9a-f]{24}:1\]/);
+    assert.match(output.stdout,/▶ \[fedcba98\] RUN coding_file_read root=projects path=src\/deadbyte-cli\.mjs/);
+    assert.match(output.stdout,/✗ \[fedcba98\] ERR coding_file_read 1\.73s \[cursor r1:[0-9a-f]{24}:2\]/);
+    assert.equal((output.stdout.match(/✓ \[abcdef12\] OK  coding_tree 42ms/g)||[]).length,1,'duplicate terminal result must print once');
     const resultJournal=JSON.parse(await readFile(path.join(fx.state,'runtime','remote-results',`${marker.result_session_id}.json`),'utf8'));
     assert.deepEqual(resultJournal.events.map(event=>event.seq),[1,2]);
     assert.equal(resultJournal.events[0].request_id,'abcdef1234567890');
     assert.ok(resultJournal.events.every(event=>/^[0-9a-f]{64}$/.test(event.payload_sha256)));
     assert.doesNotMatch(JSON.stringify(resultJournal),/TOOL IN|TOOL OUT|stdout_excerpt|stderr_excerpt/);
-    assert.doesNotMatch(output.stdout,/abcdef12|fedcba98/);
-    assert.doesNotMatch(output.stdout,/tool\.request/);
-    assert.doesNotMatch(output.stdout,/BRIDGE\.STDOUT/);
+    assert.match(output.stdout,/abcdef12/);
+    assert.match(output.stdout,/fedcba98/);
+    assert.doesNotMatch(output.stdout,/DO_NOT_PRINT_PAYLOAD|DO_NOT_PRINT_TOKEN/);
+    assert.match(output.stdout,/\[BRIDGE\.STDOUT\] IN  coding_tree/);
+    assert.match(output.stdout,/\[BRIDGE\.STDOUT\] OUT coding_tree/);
+    assert.match(output.stdout,/\[BRIDGE\.STDOUT\] ERR coding_file_read/);
     assert.doesNotMatch(output.stdout,/\[TOOL IN \]|\[TOOL OUT\]/);
     assert.doesNotMatch(output.stdout,/payload bytes=/);
     child.stdin.end();
@@ -124,9 +135,10 @@ winTest('bare remote uses compact human logs by default, keeps authority semanti
     const commands=await traceCommands(fx.trace);
     assert.deepEqual(commands.slice(-5),['disarmautonomous','disarmcoding','disarmprocess','disarmhost','park']);
     assert.match(output.stdout,/^DEADBYTE MCP$/m);
-    assert.match(output.stdout,/Live tool results/i);
+    assert.match(output.stdout,/Unified live timeline/i);
+    assert.match(output.stdout,/🔐 \[AUTH\] Revoking session authority/);
     assert.doesNotMatch(output.stdout,/disarmautonomous OK|disarmcoding OK|disarmprocess OK|disarmhost OK|DEADBYTE MCP = PARKED/);
-    const withoutApprovedEmoji=output.stdout.replace(/[📜📥📤✅❌⚠♻🛡]/gu,'');
+    const withoutApprovedEmoji=output.stdout.replace(/[📜📥📤✅❌⚠♻🛡▶🔐🚀🔌]/gu,'');
     assert.doesNotMatch(withoutApprovedEmoji,/\p{Extended_Pictographic}/u,'human live stream may use only the approved semantic emoji set');
   }finally{
     if(child?.exitCode===null) child.kill();
@@ -142,17 +154,17 @@ winTest('remote --resume replays only terminal results after the cursor before s
     const firstOutput=await collect(first);
     await waitFor(fx.trace,commands=>commands.includes('hoststatus'));
     const liveDeadline=Date.now()+3000;
-    while(Date.now()<liveDeadline&&!/\[LOG\] Live tool results/.test(firstOutput.stdout)) await sleep(50);
+    while(Date.now()<liveDeadline&&!/\[LOG\] Unified live timeline/.test(firstOutput.stdout)) await sleep(50);
     const auditDir=path.join(fx.state,'audit');await mkdir(auditDir,{recursive:true});
     const auditFile=path.join(auditDir,'segment-00000001.jsonl');
     await writeFile(auditFile,JSON.stringify({seq:1,event_type:'tool.result',tool:'coding_tree',request_id:'resume-request-1',outcome:{is_error:false}})+'\n','utf8');
     let deadline=Date.now()+3000;
-    while(Date.now()<deadline&&!/coding_tree \[cursor r1:[0-9a-f]{24}:1\]/.test(firstOutput.stdout)) await sleep(50);
-    const cursor1=firstOutput.stdout.match(/coding_tree \[cursor (r1:[0-9a-f]{24}:1)\]/)?.[1];
+    while(Date.now()<deadline&&!/coding_tree .*\[cursor r1:[0-9a-f]{24}:1\]/.test(firstOutput.stdout)) await sleep(50);
+    const cursor1=firstOutput.stdout.match(/coding_tree .*\[cursor (r1:[0-9a-f]{24}:1)\]/)?.[1];
     assert.ok(cursor1,'first result cursor missing');
     await writeFile(auditFile,JSON.stringify({seq:2,event_type:'tool.result',tool:'coding_file_read',request_id:'resume-request-2',outcome:{is_error:false}})+'\n',{encoding:'utf8',flag:'a'});
     deadline=Date.now()+3000;
-    while(Date.now()<deadline&&!/coding_file_read \[cursor r1:[0-9a-f]{24}:2\]/.test(firstOutput.stdout)) await sleep(50);
+    while(Date.now()<deadline&&!/coding_file_read .*\[cursor r1:[0-9a-f]{24}:2\]/.test(firstOutput.stdout)) await sleep(50);
     first.stdin.end();
     const firstEnded=await Promise.race([firstOutput.closed,sleep(6000).then(()=>({timeout:true}))]);
     assert.equal(firstEnded.timeout,undefined);
@@ -161,11 +173,12 @@ winTest('remote --resume replays only terminal results after the cursor before s
     const secondOutput=await collect(second);
     deadline=Date.now()+5000;
     while(Date.now()<deadline&&(!/\[REPLAY\] \[OK\] coding_file_read \[cursor r1:[0-9a-f]{24}:2\]/.test(secondOutput.stdout)||
-      !/\[LOG\] Live tool results/.test(secondOutput.stdout))) await sleep(50);
+      !/\[LOG\] Unified live timeline/.test(secondOutput.stdout))) await sleep(50);
     assert.match(secondOutput.stdout,/\[REPLAY\] \[OK\] coding_file_read \[cursor r1:[0-9a-f]{24}:2\]/);
+    assert.match(secondOutput.stdout,/♻️ \[SESSION\] Previous result stream replayed/);
     assert.doesNotMatch(secondOutput.stdout,/\[REPLAY\] \[OK\] coding_tree/);
     const replayIndex=secondOutput.stdout.indexOf('[REPLAY]');
-    const liveIndex=secondOutput.stdout.indexOf('[LOG] Live tool results');
+    const liveIndex=secondOutput.stdout.indexOf('[LOG] Unified live timeline');
     assert.ok(replayIndex>=0&&liveIndex>replayIndex,'resume replay must happen before new live tail');
     second.stdin.end();
     const secondEnded=await Promise.race([secondOutput.closed,sleep(6000).then(()=>({timeout:true}))]);
@@ -177,43 +190,17 @@ winTest('remote --resume replays only terminal results after the cursor before s
   }
 });
 
-winTest('remote --verbose preserves detailed audit and bridge log streaming for debugging',async()=>{
+winTest('remote --verbose is rejected because R37 has one unified remote mode',async()=>{
   const fx=await fixture();
-  let child=null;
   try{
-    child=spawn(process.execPath,[cliPath,'remote','--verbose'],{env:fx.env,stdio:['pipe','pipe','pipe'],windowsHide:true});
+    const child=spawn(process.execPath,[cliPath,'remote','--verbose'],{env:fx.env,stdio:['ignore','pipe','pipe'],windowsHide:true});
     const output=await collect(child);
-    const ready=await waitFor(fx.trace,commands=>commands.slice(0,9).join(',')==='start,armprocess,armcoding,armautonomous,armhost,processstatus,codingstatus,autonomousstatus,hoststatus');
-    assert.equal(ready.length>=9,true);
-    const liveDeadline=Date.now()+3000;
-    while(Date.now()<liveDeadline&&!/Live logs active/.test(output.stdout)) await sleep(50);
-    assert.match(output.stdout,/Live logs active/);
-    const auditDir=path.join(fx.state,'audit');
-    const runtimeLogs=path.join(fx.state,'runtime','logs');
-    await mkdir(auditDir,{recursive:true});
-    await mkdir(runtimeLogs,{recursive:true});
-    await writeFile(path.join(auditDir,'segment-00000001.jsonl'),[
-      JSON.stringify({seq:1,event_type:'tool.request',tool:'coding_tree',request_id:'abcdef1234567890'}),
-      JSON.stringify({seq:2,event_type:'tool.result',tool:'coding_tree',request_id:'abcdef1234567890',outcome:{is_error:false}})
-    ].join('\n')+'\n','utf8');
-    await writeFile(path.join(runtimeLogs,'bridge.stdout.log'),[
-      '[TOOL IN ] 2026-09-16T00:00:00.000Z #000001 coding_tree {}',
-      '[TOOL OUT] 2026-09-16T00:00:00.001Z #000001 coding_tree {"is_error":false}'
-    ].join('\n')+'\n','utf8');
-    const deadline=Date.now()+3000;
-    while(Date.now()<deadline&&!/\[BRIDGE\.STDOUT\] \[TOOL OUT\].*coding_tree/.test(output.stdout)) await sleep(50);
-    assert.match(output.stdout,/\[AUDIT #1\] tool\.request coding_tree abcdef12/);
-    assert.match(output.stdout,/\[AUDIT #2\] tool\.result coding_tree abcdef12/);
-    assert.match(output.stdout,/\[BRIDGE\.STDOUT\] \[TOOL IN \].*coding_tree/);
-    assert.match(output.stdout,/\[BRIDGE\.STDOUT\] \[TOOL OUT\].*coding_tree/);
-    child.stdin.end();
     const ended=await Promise.race([output.closed,sleep(6000).then(()=>({timeout:true}))]);
-    assert.equal(ended.timeout,undefined,'verbose remote session did not exit after input closed');
-    assert.equal(ended.code,0,output.stderr);
-  }finally{
-    if(child?.exitCode===null) child.kill();
-    await rm(fx.dir,{recursive:true,force:true});
-  }
+    assert.equal(ended.timeout,undefined);
+    assert.notEqual(ended.code,0);
+    assert.match(output.stderr,/unsupported remote command '--verbose'/i);
+    assert.deepEqual(await traceCommands(fx.trace),[],'rejected legacy flag must not touch runtime authority');
+  }finally{await rm(fx.dir,{recursive:true,force:true});}
 });
 
 winTest('detached guardian revokes authority, parks, and removes the session marker after the owner is hard-killed',async()=>{
@@ -222,9 +209,9 @@ winTest('detached guardian revokes authority, parks, and removes the session mar
   try{
     child=spawn(process.execPath,[cliPath,'remote'],{env:fx.env,stdio:['pipe','pipe','pipe'],windowsHide:true});
     const output=await collect(child);
-    const ready=await waitFor(fx.trace,commands=>commands.slice(0,9).join(',')==='start,armprocess,armcoding,armautonomous,armhost,processstatus,codingstatus,autonomousstatus,hoststatus');
-    assert.deepEqual(ready.slice(0,9),[
-      'start','armprocess','armcoding','armautonomous','armhost',
+    const ready=await waitFor(fx.trace,commands=>commands.slice(0,8).join(',')==='start,armprocess,armcoding,armautonomous,processstatus,codingstatus,autonomousstatus,hoststatus');
+    assert.deepEqual(ready.slice(0,8),[
+      'start','armprocess','armcoding','armautonomous',
       'processstatus','codingstatus','autonomousstatus','hoststatus'
     ]);
     const markerPath=path.join(fx.state,'runtime','remote-session.json');
@@ -259,7 +246,7 @@ winTest('detached guardian revokes authority, parks, and removes the session mar
 });
 
 winTest('bare remote rolls back authority and parks if one plane fails to arm',async()=>{
-  const fx=await fixture({failCommand:'armhost'});
+  const fx=await fixture({failCommand:'armcoding'});
   try{
     const child=spawn(process.execPath,[cliPath,'remote'],{env:fx.env,stdio:['ignore','pipe','pipe'],windowsHide:true});
     const output=await collect(child);
@@ -267,7 +254,7 @@ winTest('bare remote rolls back authority and parks if one plane fails to arm',a
     assert.equal(ended.timeout,undefined,'failed startup did not terminate');
     assert.notEqual(ended.code,0);
     const commands=await traceCommands(fx.trace);
-    assert.deepEqual(commands.slice(0,5),['start','armprocess','armcoding','armautonomous','armhost']);
+    assert.deepEqual(commands.slice(0,3),['start','armprocess','armcoding']);
     assert.deepEqual(commands.slice(-5),['disarmautonomous','disarmcoding','disarmprocess','disarmhost','park']);
     assert.doesNotMatch(output.stdout,/Live logs/i);
   }finally{await rm(fx.dir,{recursive:true,force:true});}

package/test/runtime-self-update.test.mjs

@@ -10,6 +10,7 @@ import {
   loadPowerShellDataFile,
   parseUpdateArgs,
   prepareNamedTunnelCloudSpec,
+  readControllerStartFailure,
   runControllerStartNoCapture
 } from '../scripts/runtime-self-update.mjs';
 import * as runtimeUpdate from '../scripts/runtime-self-update.mjs';
@@ -31,10 +32,12 @@ test('R32 updater loads controller data with Windows PowerShell modules isolated
   }
 });
 
-test('R32 updater applies the isolated Windows PowerShell environment to detached controller starts', async () => {
+test('R36 updater keeps detached start semantics and binds controller sidecar diagnostics', async () => {
   const source=await readFile(new URL('../src/runtime-update.mjs',import.meta.url),'utf8');
   assert.match(source,/stdio:'ignore'/);
   assert.match(source,/env:commandEnvironment\(exe,env\?\?process\.env\)/);
+  assert.match(source,/readControllerStartFailure\(ctx\)/);
+  assert.match(source,/evidence_sha256/);
   assert.match(source,/for\(let attempt=1;attempt<=3;attempt\+=1\)/);
 });
 
@@ -74,6 +77,60 @@ test('R27 controller start transport returns while its long-lived descendant is
   assert.doesNotThrow(()=>process.kill(childPid,0),'controller start returned only after descendant exited');
 });
 
+test('R36 controller start sidecar is schema-bound and hash-bound', async () => {
+  const base=await mkdtemp(path.join(os.tmpdir(),'deadbyte-r36-start-evidence-'));
+  const controllerDir=path.join(base,'controller');
+  const runtime=path.join(controllerDir,'runtime');
+  await mkdir(runtime,{recursive:true});
+  await writeFile(path.join(controllerDir,'deadbyte-controller.ps1'),"param([string]$Command)\nexit 0\n");
+  const body={
+    schema:'deadbyte.controller-start-failure.v1',
+    command:'start',
+    failed_at_utc:'2026-09-18T00:00:00.000Z',
+    message:'R36_CONTROLLER_START_SENTINEL',
+    bridge_stdout_tail:'',
+    bridge_stderr_tail:'compact bridge failed',
+    cloud_stdout_tail:'',
+    cloud_stderr_tail:''
+  };
+  const bytes=Buffer.from(JSON.stringify(body),'utf8');
+  await writeFile(path.join(runtime,'controller-start-failure.json'),bytes);
+  const evidence=await readControllerStartFailure(legacyContext(base));
+  assert.equal(evidence.message,'R36_CONTROLLER_START_SENTINEL');
+  assert.equal(evidence.command,'start');
+  assert.equal(evidence.sha256,sha(bytes));
+});
+
+test('R36 updater preserves exact controller-start failure evidence before rollback', async () => {
+  assert.equal(typeof runtimeUpdate.preserveControllerStartFailure,'function');
+  const base=await mkdtemp(path.join(os.tmpdir(),'deadbyte-r36-preserve-start-evidence-'));
+  const controllerDir=path.join(base,'controller');
+  const runtime=path.join(controllerDir,'runtime');
+  const evidenceDir=path.join(base,'evidence','updates','candidate');
+  await mkdir(runtime,{recursive:true});
+  await writeFile(path.join(controllerDir,'deadbyte-controller.ps1'),"param([string]$Command)\nexit 0\n");
+  const body={
+    schema:'deadbyte.controller-start-failure.v1',
+    command:'start',
+    failed_at_utc:'2026-09-18T00:00:00.000Z',
+    message:'R36_PRESERVE_SENTINEL',
+    bridge_stdout_tail:'bridge-out',
+    bridge_stderr_tail:'bridge-err',
+    cloud_stdout_tail:'',
+    cloud_stderr_tail:''
+  };
+  const bytes=Buffer.from(JSON.stringify(body),'utf8');
+  const source=path.join(runtime,'controller-start-failure.json');
+  await writeFile(source,bytes);
+  const preserved=await runtimeUpdate.preserveControllerStartFailure(legacyContext(base),evidenceDir);
+  assert.equal(preserved.sha256,sha(bytes));
+  assert.equal(preserved.message,'R36_PRESERVE_SENTINEL');
+  assert.equal(preserved.path,path.join(evidenceDir,'controller-start-failure.json'));
+  assert.deepEqual(await readFile(preserved.path),bytes);
+  await writeFile(source,Buffer.from('destroyed-after-snapshot','utf8'));
+  assert.deepEqual(await readFile(preserved.path),bytes,'rollback/runtime restart must not mutate preserved evidence');
+});
+
 test('R28 slot-update CLI binds direct cloudflared plus external token file as one pinned contract', () => {
   const base=['--stage','stage','--development-root','dev','--expected-version','0.8.4','--expected-manifest',hex('a')];
   assert.throws(() => parseUpdateArgs([...base,'--cloud-cloudflared','C:/cloudflared.exe']), /named tunnel bootstrap requires all|cloud/i);

package/test/semantic-lsp-backend.test.mjs

@@ -43,6 +43,15 @@ test('semantic LSP backend normalizes outline definition references diagnostics
     assert.equal(refs.locations[0].path,'main.foo');
     const diagnostics=await f.backend.diagnostics({rootId:'project',relativePath:'main.foo',maxResults:10});
     assert.equal(diagnostics.diagnostics[0].message,'fixture diagnostic');
+    assert.match(diagnostics.file_sha256,/^[0-9a-f]{64}$/); assert.match(diagnostics.result_sha256,/^[0-9a-f]{64}$/);
+    const implementations=await f.backend.implementations({rootId:'project',relativePath:'main.foo',line:0,column:18,maxResults:10});
+    assert.equal(implementations.status,'ok'); assert.equal(implementations.locations[0].path,'main.foo'); assert.match(implementations.result_sha256,/^[0-9a-f]{64}$/);
+    const unsupportedImpl=await f.backend.implementations({rootId:'project',relativePath:'main.foo',line:0,column:999,maxResults:10});
+    assert.equal(unsupportedImpl.status,'unsupported'); assert.equal(unsupportedImpl.capability,'implementations');
+    const rename=await f.backend.renameEdits({rootId:'project',relativePath:'main.foo',line:0,column:18,newName:'gamma'});
+    assert.equal(rename.status,'ok'); assert.deepEqual(rename.edits,[{path:'main.foo',start:16,length:5,new_text:'gamma'}]);
+    const unsupportedRename=await f.backend.renameEdits({rootId:'project',relativePath:'main.foo',line:0,column:18,newName:'UNSUPPORTED'});
+    assert.equal(unsupportedRename.status,'unsupported'); assert.equal(unsupportedRename.capability,'rename_preview');
     const before=await f.codingRuntime.fileRead({rootId:'project',relativePath:'main.foo'});
     const edited=await f.backend.replaceSymbol({rootId:'project',relativePath:'main.foo',symbolId:symbol.symbol_id,newBody:'export function beta() {}',expectedSha256:before.sha256});
     assert.equal(edited.status,'committed');assert.equal(edited.symbol_name,'alpha');assert.equal(edited.engine,'fixture-lsp');