@twinsearth/w2m-dsh-plugin 0.39.0 → 0.40.0

package/CHANGELOG.md

@@ -4,6 +4,62 @@ All notable changes to this project are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project
 adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.40.0] — 2026-10-15
+
+**The acceptance document, converged — and bound to the pre-flight so it cannot drift.**
+
+### Three statuses, decided by a checkable rule
+
+Every criterion now carries one of three values, and **the rule decides it rather than opinion**:
+
+| Status | Test |
+|---|---|
+| **ENFORCED** | delete the thing and run `scripts/preflight.mjs`; it goes red |
+| **MEASURED** | something checks and prints, and the run stays green |
+| **UNVERIFIED** | nothing checks it, or the check's own documentation says it cannot see this |
+
+**MEASURED is not ENFORCED, and §4 says so with the receipt:** the reachability classifier named **465
+exports** and could not tell a defect from a library, so a gate built on it would have been disabled within a
+week. **A check that cannot fail is a report.**
+
+**17 criteria are ENFORCED**, including §1.5 — the orphan gate added in 0.39.0. **Six are MEASURED**, of which
+two are the ones worth naming: **§1.6, because the classifier cannot classify**, and **§3.10, because
+`field-authority` still has no production caller.** **Seven are UNVERIFIED**, and `4.7` is the widest of them —
+**the plugin this machine runs is thirty versions behind the source under test**, so every source-level
+conclusion about its runtime is void.
+
+### The corrections, kept rather than tidied away
+
+Seven claims were written down in this span, acted on, and later found wrong. **Four of the seven were a claim
+about wiring or delivery that a single check disproved:**
+
+* *"v4.8.0 shipped"* — the block and lineage are real; **the authority-driven half was never built.**
+* *"the already-shipped rate limiter as its front door"* — **never built.**
+* *"**the connection now exists**"* (CHANGELOG 0.29.0, of `field-authority`) — **it exists inside that module
+  and nowhere else.**
+* *"v4.10.0 shipped in 0.11.0"* — the falsifying tests **are** asserted, and **nothing routed a question to
+  it** until 0.37.0.
+
+**Two of the seven were corrected by the same instrument** — the reachability classifier, which was built
+*because* the first two had happened, and which then found two more. **That is the only argument for a check
+this project accepts: it found something the previous rounds had missed.**
+
+### The document is now checked, because a parallel list is a second source of truth
+
+`test/acceptance-doc.test.mjs` reads the pre-flight's own `DECLARED_CHECKS` and fails if the document names a
+gate that does not exist, if any of the three statuses stops being defined, or if the corrections section is
+emptied. **A criterion cannot quietly become unenforced while the file keeps claiming otherwise.**
+
+### Three errors of mine, all in the test rather than the subject
+
+* I demanded eight **exact** check names; the document sensibly uses short forms.
+* I matched `gate` inside `approval-gate.mjs` and flagged **a filename as a gate**.
+* I then demanded the document name `lint` and `mojibake` — **gates on the code's tidiness, not criteria for
+  what 1.0.0 must prove.** The document was right not to list them. **A test asserting its own assumption is
+  indistinguishable from a test asserting a property, until it fails.**
+
+**6 new tests, 0 failures.**
+
 ## [0.39.0] — 2026-10-15
 
 **The orphan gate: a module nothing reaches now fails the pre-flight unless a reason is written down.**

package/docs/1.0.0-ACCEPTANCE.md

@@ -3,11 +3,20 @@
 **Status: DRAFT, and deliberately incomplete.** Nothing here is an announcement that 1.0.0 is close. This file
 exists because the goal names three properties — **分模块 / 分层级 / 分权限** — and a version number means
 nothing without a definition that can fail. It is written to be argued with, and every row says **where the
-claim is checked and whether that check is actually running**.
+claim is checked and whether that check can actually fail**.
 
 The rule applied throughout: **a criterion that nothing measures is not a criterion.** Where a check exists
 but has no caller, that is stated in its own column rather than hidden behind a tick.
 
+**Every criterion carries one of three statuses, decided by a rule rather than by opinion** — **ENFORCED**
+(the pre-flight goes red without it), **MEASURED** (something checks and prints, and the run stays green), or
+**UNVERIFIED**. **MEASURED is not ENFORCED**, and §4 says how to tell them apart in one command.
+
+**The statuses in §4 are themselves checked.** `test/acceptance-doc.test.mjs` reads the pre-flight's own
+`DECLARED_CHECKS` list and fails if this document names a check that does not exist — so a criterion cannot
+silently become unenforced while this file keeps claiming otherwise. **A document that restates what a check
+does is a second source of truth unless something binds the two together.**
+
 ---
 
 ## 1. 分模块 — modules with a declared identity
@@ -150,33 +159,100 @@ decision about who this release is for, not a defect to fix.
 
 ---
 
-## 4. What is explicitly NOT claimed
+## 4. The status of every criterion, in three values
+
+**One rule decides the status, and it is checkable rather than a matter of opinion:**
+
+| Status | What it means | How to tell |
+|---|---|---|
+| **ENFORCED** | the pre-flight **fails** if this stops being true | delete the thing and run `scripts/preflight.mjs`; it goes red |
+| **MEASURED** | something checks it and **prints**, but the run stays green | the check exists and exits 0 either way |
+| **UNVERIFIED** | nothing checks it, or the check cannot see this | there is no check, or its own documentation says it cannot |
+
+**MEASURED is not ENFORCED**, and this project has already paid for confusing them: the reachability classifier
+named **465 exports** and could not say which were defects, so a gate built on it would have been turned off
+within a week. **A check that cannot fail is a report.**
 
-Recorded here so that absence is a decision rather than an omission:
+### ENFORCED — the pre-flight goes red without it
 
-| Not claimed | Why |
-|---|---|
-| **Reachability of every module** | nothing measures it (§1.5). Three uncalled mechanisms were shipped in this span. |
-| **The gate is active** | `actorAuthorityLevel` is unset by default (§3.11). |
-| **Field authority reaches the memory layer** | `field-authority.mjs` has no production caller; `w2m_memory` does not use it. |
-| **The queue survives a restart** | it is per-plugin-lifetime by design, and is **not** an audit log. |
-| **Any scale claim** | this fleet is 3 usable machines of 5 paired. `ROADMAP.md` refuses to plan v4.11.0+ for exactly this reason, and `fleet-scale.mjs` refuses to extrapolate from five. |
-| **MacMini verification of everything** | four suites were verified on that machine in 0.28.0; the other 69 were not. **Measured in 0.32.0: the eight suites tried there did not pass, and the cause is not yet established.** |
-| **The eight suites tried on MacMini in 0.32.0** | every one of them returned non-zero there while passing here. The likely cause is a missing `node_modules` on that machine, but **that was not measured**, so it is a hypothesis and not a finding. |
-| **`P2P_PUNCH_FAILED`** | cause UNVERIFIED; three hypotheses measured and excluded. |
+| # | Criterion | The gate |
+|---|---|---|
+| 1.1 | every module belongs to exactly one declared layer | `layer-check` |
+| 1.2 | every dependency edge is declared, and every declared edge is used | `layer-check` |
+| 1.3 | every suite on disk is named by a script | `test wiring` |
+| 1.4 | every document's claim about the artifact matches the artifact | `claims`, 48 claims |
+| **1.5** | **no orphan module without a written reason** | **`reachable or accepted`** |
+| 2.1–2.4 | ranked layers, an allow-list of edges, no upward edge | `layer-check` |
+| 3.2 | every declared capability is reachable by some band | `auditCapabilities`, asserted |
+| 3.4 | the dispatch path consults the gate | `tools.test.mjs`, end to end |
+| 3.5 | an undeclared capability is refused | `permission.test.mjs` |
+| 3.6 | escalation is exactly one band | asserted across the whole table |
+| 3.7 | nothing destructive auto-settles | `mayAutoSettle`, asserted |
+| 3.9 | the queue's front door meters raising only | `approval-gate.test.mjs` |
+| 3.12 | a level is chosen by name, never typed | `authority-choice.test.mjs` |
+| 3.13 | a misconfigured level is reported | `w2m_status.actor_authority` |
+| 5.1 | the packed tarball registers all eleven tools | `packed tarball` |
+| 5.2 | the CHANGELOG is newest-first with a title above the newest entry | `CHANGELOG shape` |
+
+### MEASURED — checked, printed, and able to fail silently
+
+| # | Criterion | What is actually measured |
+|---|---|---|
+| 1.6 | **reachability itself** | 72 orphan, 14 cli. **The classifier cannot tell a defect from a library**, so the *decision* is enforced (§1.5) while the *classification* is not |
+| 3.1 | capabilities declared with a cost | the table is read by `permission.mjs`; a new capability with no caller would still be listed |
+| 3.10 | **field-level memory acceptance driven by the authority model** | the mechanism is asserted; **it has no production caller** and is on the accepted-orphan list as `interface-unrouted` |
+| 3.11 | the gate is on by default | `requireAuthorityLevel` makes it enforceable **per machine**; the default is still off |
+| 4.1 | four suites run on MacMini | verified once, in 0.28.0, with that machine's exit code. **Nothing re-runs them** |
+
+### UNVERIFIED — nothing checks this, and saying so is the point
+
+| # | Criterion | Why it is unverified |
+|---|---|---|
+| 4.2 | the other 69 suites on MacMini | eight were tried in 0.32.0 and failed; **the cause is a hypothesis, not a finding** |
+| 4.3 | `w2m_council` as a *tool* | its **modules** ran on MacMini (7 phases, dissent, recount, exit 0); the **tool registration path** has only ever run here |
+| 4.4 | `P2P_PUNCH_FAILED` | cause unverified; **three hypotheses measured and excluded** (BLAKE2s, the wider primitive set, version skew) |
+| 4.5 | the queue survives a restart | it does not, by design — and it is **not** an audit log |
+| 4.6 | any scale claim | 3 usable machines of 5. `fleet-scale.mjs` **refuses to extrapolate** from five, and `ROADMAP.md` refuses to plan v4.11.0+ for the same reason |
+| 4.7 | the plugin this machine runs is current | **installed 0.9.5 against 0.39.0 of source — thirty versions apart.** Every source-level conclusion about this machine's runtime is void |
 
 ---
 
-## 5. What would make this file finished
+## 5. Claims this work corrected, kept rather than tidied away
+
+A document that only shows its final state hides how it got there, and **every entry below was a statement that
+was written down, acted on, and later found wrong.** They are kept because the pattern is the finding: four of
+the seven were **a claim about wiring or delivery that a single check disproved.**
 
-1. **A reachability check** — every exported function has a non-test caller, or is declared as
-   interface-only with a reason. Without it, §1.5 stays open and the class of defect that produced three
-   dead mechanisms stays invisible.
-2. **A decision on §3.11**, whichever way it goes, reflected in `README.md` and in the pre-flight.
-3. **Every row above promoted to a check that runs**, so this document becomes a description of the
-   pre-flight rather than a parallel list that can drift from it. **A document that restates what the
-   pre-flight does is a second source of truth, and this project has already paid for one of those.**
+| Claim | Where it was made | What checking found |
+|---|---|---|
+| "v4.8.0 shipped, suite verified on MacMini" | `ROADMAP.md` | the block and lineage are real; **"per-field acceptance driven by the authority model" was never built** — `blocks.mjs` did not import `authority.mjs` at all |
+| "the already-shipped rate limiter as its front door" | `ROADMAP.md`, v4.9.0 | **never built** — `approval-index.mjs` imports `authority.mjs` and nothing else |
+| "**the connection now exists**" | CHANGELOG 0.29.0, of `field-authority` | **it exists inside that module and nowhere else.** Nothing imports it; it is an accepted orphan today |
+| "v4.10.0 shipped in 0.11.0" | `ROADMAP.md` | the three falsifying tests **are** asserted — and **nothing routed a question to it.** Fixed in 0.37.0 by `w2m_council` |
+| "zero is the all-clear" | `machine-test-packet.mjs` | false for every count but one; **zero means every file was ABSENT** — a total failure read as a clean run |
+| "the eight suites failed on MacMini because of `node_modules`" | CHANGELOG 0.32.0 | recorded as a hypothesis then, **and measured in 0.38.0**: `council.mjs` runs there because it needs nothing, so the suites fail on **what their fixtures reach for** |
+| "`log-bounds` fixes the 40× log growth" | CHANGELOG 0.12.0 | the module is correct and tested; **nothing calls it.** It is on the accepted-orphan list as `interface-unrouted` |
+
+**Two of these seven were corrected by the same instrument** — the reachability classifier, which was built
+*because* the first two had happened. **That is the only argument for a check that this project accepts: it
+found something the previous three rounds had missed.**
+
+---
 
-This draft deliberately stops short of those three, because each is a decision about what 1.0.0 must be
-rather than a defect to fix, and the person who owns it has not answered the question this session asked in
-round 12: **write the acceptance definition, or keep advancing the roadmap?**
+## 6. What would make this file finished
+
+1. **Flip §3.11's default.** `requireAuthorityLevel` exists and is tested; whether 1.0.0 ships with it on is a
+   decision about who the release is for. **A permission system that is off is one that has never run.**
+2. **Wire the four `interface-unrouted` orphans**, or delete them. `health` is the sensor the user asked for by
+   name; `log-bounds` is the answer to a measured 40× growth; `storage` holds the undelatable tiers;
+   `field-authority` is the half of v4.8.0 that was claimed. **Each is on the list with what would remove it.**
+3. **Re-run the 69 unverified suites on MacMini**, which needs `node_modules` there — an environment change
+   nobody has made.
+4. **Promote every MEASURED row to ENFORCED**, so this document stops being a parallel list that can drift from
+   the pre-flight. **A document that restates what a check does is a second source of truth, and this project
+   has already paid for one of those.**
+
+**This file is honest about being unfinished, which is the only useful thing a 1.0.0 definition can be before
+1.0.0 exists.** The question it was written in answer to — *write the acceptance definition, or keep advancing
+the roadmap?* — was asked in round 12 and answered by writing it. **Whether to act on items 1–4 is a decision
+the person who owns this repository still has to make.**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "0.39.0",
+  "version": "0.40.0",
   "description": "DSH: Windows2MacOS — drive the same project on online Windows and macOS machines from one DeepSeek account, across networks and regions. P2P hole punching is the default path (relay + shared server as rendezvous, ledger and fallback), with a bundled STUN responder, Tailscale/public-VPS/tunnel shapes, Rabbit relay + per-machine Localside + eight DSH tools (replicate / split), nine aggregate verdicts and signed requests.",
   "type": "module",
   "main": "lib/index.js",
@@ -113,13 +113,13 @@
     }
   },
   "scripts": {
-    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/agent.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/layer-model.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/chatops-fleet-join.test.mjs",
+    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/agent.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/chatops-fleet-join.test.mjs",
     "test:e2e": "node --test --test-force-exit test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/p2p-agent.test.mjs",
     "test:relay": "node --test --test-force-exit test/relay.test.mjs",
     "test:agent": "node --test --test-force-exit test/agent.test.mjs test/memory.test.mjs",
     "test:tools": "node --test --test-force-exit test/tools.test.mjs",
     "test:crossnetwork": "node --test --test-force-exit test/crossnetwork.test.mjs",
-    "test:all": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/agent.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/layer-model.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-agent.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/p2p-crypto.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/chatops-fleet-join.test.mjs",
+    "test:all": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/agent.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-agent.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/p2p-crypto.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/chatops-fleet-join.test.mjs",
     "pack": "node scripts/pack.mjs",
     "verify:join": "node scripts/verify-join.mjs",
     "lint": "eslint .",
@@ -154,7 +154,8 @@
     "reachability": "node scripts/reachability-check.mjs",
     "reachability:classify": "node scripts/reachability-classify.mjs",
     "test:council-session": "node --test --test-force-exit test/council-session.test.mjs",
-    "orphans": "node --test --test-force-exit test/accepted-orphans.test.mjs"
+    "orphans": "node --test --test-force-exit test/accepted-orphans.test.mjs",
+    "test:acceptance-doc": "node --test --test-force-exit test/acceptance-doc.test.mjs"
   },
   "keywords": [
     "dsh-bundle",

package/src/plugin/tools.mjs

@@ -202,7 +202,7 @@ const MAX_STAGES = 16;
  * `package.json` during `scripts/pack.mjs` rather than hand-maintained, and `W2M_PLUGIN_VERSION`
  * overrides it at runtime for tests and packagers.
  */
-const PLUGIN_VERSION = '0.39.0';
+const PLUGIN_VERSION = '0.40.0';
 
 /** How long any single HTTP call may take before it is aborted, in milliseconds. */
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;