@twinsearth/w2m-dsh-plugin 1.0.15 → 1.0.16

package/CHANGELOG.md

@@ -2,6 +2,36 @@
 
 All notable changes to this project are documented here.
 
+## [1.0.16] — 2026-10-17
+
+**The last two failures on Linux CI, and one of them was a defect in the release process: a release was advertised as
+"latest" before its assets had finished uploading.**
+
+### A release must not be "latest" until it can be downloaded
+
+The release script created the release with `make_latest: 'true'` and *then* uploaded the tarball. That leaves a
+window in which `releases/latest` points at a release **with no tarball** -- and CI's live-API job read exactly that,
+failing with:
+
+> `ASSET_MISSING no release asset matches /\.(?:tgz|tar\.gz)$/i`
+
+on a release that was complete seconds later. **The ordering was the defect, not the test.** The release is now created
+without `make_latest`, the assets are attached, **and only then is it promoted** -- so a reader following the
+"latest" link always lands on something downloadable.
+
+### A test that was only true on a developer machine
+
+`test/fleet-sync.test.mjs` removes the repository's git identity to prove the tool refuses to rebase without one. It
+checked `git config user.email`, which **falls back to the global and system config** -- absent on a developer machine,
+**present on GitHub's runners**. So the tool correctly found an identity and the test's premise was false, on CI only.
+
+The test now points `GIT_CONFIG_GLOBAL` and `GIT_CONFIG_SYSTEM` at paths that do not exist, so git's config is exactly
+as empty as the test claims. It also restores every environment variable it touches.
+
+### Verified
+
+Full suite **2380 tests in 93 files, 2366 pass, 0 fail, 14 skip**; pre-flight **GREEN, 15 of 15 checks**.
+
 ## [1.0.15] — 2026-10-17
 
 **Every 1.0.x GitHub release was missing its `SHA256SUMS` asset, so updating from GitHub could not be verified and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "1.0.15",
+  "version": "1.0.16",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "type": "module",
   "main": "lib/index.js",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "twinsearth-w2m-dsh",
-  "version": "1.0.15",
+  "version": "1.0.16",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "license": "MIT",
   "keywords": [

package/src/plugin/tools.mjs

@@ -211,7 +211,7 @@ const MAX_STAGES = 16;
  * `package.json` during `scripts/pack.mjs` rather than hand-maintained, and `W2M_PLUGIN_VERSION`
  * overrides it at runtime for tests and packagers.
  */
-const PLUGIN_VERSION = '1.0.15';
+const PLUGIN_VERSION = '1.0.16';
 
 /** How long any single HTTP call may take before it is aborted, in milliseconds. */
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;