@twinsearth/w2m-dsh-plugin 1.0.16 → 1.1.0

package/CHANGELOG.md

@@ -2,6 +2,66 @@
 
 All notable changes to this project are documented here.
 
+## [1.1.0] — 2026-10-17
+
+**The direct path now works on runtimes whose OpenSSL has no BLAKE2s, and the compatibility gate that measures the real
+Loader was asserting a tool list that had gone stale.**
+
+### The handshake hash no longer depends on the runtime's OpenSSL
+
+One dispatch reported, per machine:
+
+> `P2P_PUNCH_FAILED: handshakeHash requires BLAKE2s-256: BLAKE2s-256 unavailable on this runtime: Digest method not
+> supported. It is a WIRE PROTOCOL primitive -- the handshake hash, the prologue hash and the session binding -- so it
+> cannot be replaced with SHA-256 without breaking interoperability with every peer.`
+
+That message names the constraint correctly and draws the wrong conclusion. **BLAKE2s is public and deterministic**, so
+the digest can be computed here instead of by OpenSSL: the bytes are identical to what a peer with a native
+implementation produces, and interoperability is preserved exactly. The alternative -- refusing to handshake -- makes
+**every** direct path fall back to the relay on that runtime, which is what the fleet was doing without saying so.
+
+* `src/agent/blake2s.mjs` — BLAKE2s-256 in plain JavaScript (unkeyed, which is all the wire protocol uses).
+* `src/agent/crypto.mjs` — `handshakeHash` tries the native digest and falls back to it; `blake2s256Support()`
+  now reports **how** the digest is reached (`native` or `js-fallback`); `cryptoCapabilities()` counts the fallback
+  as present, because what the handshake needs is the digest, not OpenSSL's implementation of it.
+* The fallback is verified before it is trusted: its empty-input digest is compared against the published vector, so a
+  broken fallback reports unavailable rather than producing hashes no peer will agree with.
+
+**The bug that made this take longer than it should have.** The first version inverted both `v[14]` and `v[15]` for
+the final block. BLAKE2 sets `f0 = 0xFFFFFFFF` on the last block and leaves `f1 = 0` for sequential hashing, so
+only `v[14]` is inverted. Inverting both produces a **stable, plausible-looking digest that matches no reference**:
+the three RFC vectors failed while the compression function -- checked against an independent implementation -- was
+correct the whole time. `test/blake2s.test.mjs` pins the vectors and compares against `node:crypto` across every
+block boundary, so that class of mistake cannot survive again.
+
+### The compatibility gate was asserting a stale tool count
+
+`test/loader-entry.test.mjs` asserted the plugin registers a fixed set of tools, under a name that still said "eight".
+The set had grown to **eleven** (`w2m_approvals` and `w2m_council` were missing), so the gate that mounts the packed
+artifact in a real profile and runs the real Loader failed at:
+
+> `registers all eight w2m_* tools`
+
+The list is now
+the actual eleven, sorted so a missing name and a renamed name fail differently, and the test says what it means.
+
+### Two configuration facts this exposed, recorded because they are not obvious
+
+A machine can be **installed, running, and still outside the fleet** -- both were true here:
+
+* `dsh.profile.bundles` must list the package. Installing it as a dependency is not enough: the host composes the
+  entry list from that array, so a package present in `node_modules` and absent from `bundles` simply never loads.
+* `autoStartAgent: true` is **off by default**, and joining happens inside the agent it starts. Without it a machine
+  never joins, no matter how correctly it is installed.
+
+With both set, this machine joined, listed its peers, accepted a dispatch and executed it (`node --version`, exit 0).
+
+### Verified
+
+Full suite green; pre-flight **GREEN**, 15 of 15 checks. `test/blake2s.test.mjs`: **10 pass, 0 fail**, including
+byte-identical agreement with `node:crypto` at lengths 0, 1, 2, 3, 31, 32, 33, 63, 64, 65, 127, 128, 129, 191, 192,
+193, 255, 256, 257 and 1000.
+
 ## [1.0.16] — 2026-10-17
 
 **The last two failures on Linux CI, and one of them was a defect in the release process: a release was advertised as

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "1.0.16",
+  "version": "1.1.0",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "type": "module",
   "main": "lib/index.js",
@@ -117,53 +117,54 @@
     }
   },
   "scripts": {
-    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs",
-    "test:e2e": "node --test --test-force-exit test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/p2p-agent.test.mjs",
-    "test:relay": "node --test --test-force-exit test/relay.test.mjs",
-    "test:agent": "node --test --test-force-exit test/agent.test.mjs test/memory.test.mjs",
-    "test:tools": "node --test --test-force-exit test/tools.test.mjs",
-    "test:crossnetwork": "node --test --test-force-exit test/crossnetwork.test.mjs",
-    "test:all": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-agent.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/p2p-crypto.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs",
-    "pack": "node scripts/pack.mjs",
-    "verify:join": "node scripts/verify-join.mjs",
-    "lint": "eslint .",
-    "lint:fix": "eslint . --fix",
     "format": "prettier --write .",
     "format:check": "prettier --check .",
-    "verify": "node scripts/check-entrypoints.mjs && node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/agent.test.mjs test/tools.test.mjs test/e2e.test.mjs test/crossnetwork.test.mjs test/p2p-node.test.mjs test/p2p-agent.test.mjs test/client-bundle.test.mjs test/loader-entry.test.mjs",
-    "test:p2p": "node --test --test-force-exit test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/stun-server.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-agent.test.mjs",
-    "test:memory": "node --test --test-force-exit test/memory.test.mjs",
+    "layer-check": "node scripts/layer-check.mjs",
+    "lint": "eslint .",
+    "lint:fix": "eslint . --fix",
+    "orphans": "node --test --test-force-exit test/accepted-orphans.test.mjs",
+    "pack": "node scripts/pack.mjs",
+    "reachability": "node scripts/reachability-check.mjs",
+    "reachability:classify": "node scripts/reachability-classify.mjs",
+    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs",
+    "test:acceptance-doc": "node --test --test-force-exit test/acceptance-doc.test.mjs",
+    "test:agent": "node --test --test-force-exit test/agent.test.mjs test/memory.test.mjs",
+    "test:all": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-agent.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/p2p-crypto.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs",
+    "test:approval-gate": "node --test --test-force-exit test/approval-gate.test.mjs",
+    "test:approval-index": "node --test --test-force-exit test/approval-index.test.mjs",
     "test:authority": "node --test --test-force-exit test/authority.test.mjs",
+    "test:authority-choice": "node --test --test-force-exit test/authority-choice.test.mjs",
+    "test:blake2s": "node --test --test-force-exit test/blake2s.test.mjs",
     "test:blocks": "node --test --test-force-exit test/blocks.test.mjs",
-    "test:approval-index": "node --test --test-force-exit test/approval-index.test.mjs",
-    "test:fleet-sync": "node --test --test-force-exit test/fleet-sync.test.mjs",
-    "test:fleet-merge": "node --test --test-force-exit test/fleet-merge.test.mjs",
-    "test:fleet-memory-e2e": "node --test --test-force-exit test/fleet-memory-e2e.test.mjs",
+    "test:council": "node --test --test-force-exit test/council.test.mjs",
+    "test:council-session": "node --test --test-force-exit test/council-session.test.mjs",
+    "test:crossnetwork": "node --test --test-force-exit test/crossnetwork.test.mjs",
+    "test:crypto-blake2s": "node --test --test-force-exit test/crypto-blake2s.test.mjs",
+    "test:e2e": "node --test --test-force-exit test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/p2p-agent.test.mjs",
+    "test:exit-channel": "node --test --test-force-exit test/exit-channel.test.mjs",
+    "test:field-authority": "node --test --test-force-exit test/field-authority.test.mjs",
     "test:fleet-concurrency": "node --test --test-force-exit test/fleet-concurrency.test.mjs",
+    "test:fleet-memory-e2e": "node --test --test-force-exit test/fleet-memory-e2e.test.mjs",
+    "test:fleet-merge": "node --test --test-force-exit test/fleet-merge.test.mjs",
     "test:fleet-merge-race": "node --test --test-force-exit test/fleet-merge-race.test.mjs",
-    "test:health": "node --test --test-force-exit test/health.test.mjs",
-    "test:storage": "node --test --test-force-exit test/storage.test.mjs",
-    "test:exit-channel": "node --test --test-force-exit test/exit-channel.test.mjs",
-    "test:council": "node --test --test-force-exit test/council.test.mjs",
-    "test:layers": "node --test --test-force-exit test/layer-model.test.mjs",
-    "test:log-bounds": "node --test --test-force-exit test/log-bounds.test.mjs",
-    "layer-check": "node scripts/layer-check.mjs",
-    "test:test-report": "node --test --test-force-exit test/test-report.test.mjs",
     "test:fleet-scale": "node --test --test-force-exit test/fleet-scale.test.mjs",
     "test:fleet-state": "node --test --test-force-exit test/fleet-state.test.mjs",
-    "test:crypto-blake2s": "node --test --test-force-exit test/crypto-blake2s.test.mjs",
+    "test:fleet-sync": "node --test --test-force-exit test/fleet-sync.test.mjs",
+    "test:health": "node --test --test-force-exit test/health.test.mjs",
     "test:installed-version": "node --test --test-force-exit test/installed-version.test.mjs",
-    "test:permission": "node --test --test-force-exit test/permission.test.mjs",
+    "test:layers": "node --test --test-force-exit test/layer-model.test.mjs",
+    "test:log-bounds": "node --test --test-force-exit test/log-bounds.test.mjs",
+    "test:memory": "node --test --test-force-exit test/memory.test.mjs",
+    "test:p2p": "node --test --test-force-exit test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/stun-server.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-agent.test.mjs",
     "test:packet": "node --test --test-force-exit test/machine-test-packet.test.mjs",
-    "test:field-authority": "node --test --test-force-exit test/field-authority.test.mjs",
-    "test:approval-gate": "node --test --test-force-exit test/approval-gate.test.mjs",
-    "test:authority-choice": "node --test --test-force-exit test/authority-choice.test.mjs",
+    "test:permission": "node --test --test-force-exit test/permission.test.mjs",
     "test:reachability": "node --test --test-force-exit test/reachability-check.test.mjs",
-    "reachability": "node scripts/reachability-check.mjs",
-    "reachability:classify": "node scripts/reachability-classify.mjs",
-    "test:council-session": "node --test --test-force-exit test/council-session.test.mjs",
-    "orphans": "node --test --test-force-exit test/accepted-orphans.test.mjs",
-    "test:acceptance-doc": "node --test --test-force-exit test/acceptance-doc.test.mjs"
+    "test:relay": "node --test --test-force-exit test/relay.test.mjs",
+    "test:storage": "node --test --test-force-exit test/storage.test.mjs",
+    "test:test-report": "node --test --test-force-exit test/test-report.test.mjs",
+    "test:tools": "node --test --test-force-exit test/tools.test.mjs",
+    "verify": "node scripts/check-entrypoints.mjs && node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/agent.test.mjs test/tools.test.mjs test/e2e.test.mjs test/crossnetwork.test.mjs test/p2p-node.test.mjs test/p2p-agent.test.mjs test/client-bundle.test.mjs test/loader-entry.test.mjs",
+    "verify:join": "node scripts/verify-join.mjs"
   },
   "keywords": [
     "dsh-bundle",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "twinsearth-w2m-dsh",
-  "version": "1.0.16",
+  "version": "1.1.0",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "license": "MIT",
   "keywords": [

package/src/agent/blake2s.mjs

@@ -0,0 +1,151 @@
+/**
+ * BLAKE2s-256 in plain JavaScript -- the handshake hash when the runtime cannot provide it.
+ *
+ * ## Why this exists
+ *
+ * `src/agent/crypto.mjs` computes the handshake hash, the prologue hash and the session binding with
+ * `createHash('blake2s256')`. On the DSH desktop runtime that call fails:
+ *
+ *     P2P_PUNCH_FAILED: handshakeHash requires BLAKE2s-256: BLAKE2s-256 unavailable on this runtime:
+ *     Digest method not supported. It is a WIRE PROTOCOL primitive -- the handshake hash, the prologue hash and
+ *     the session binding -- so it cannot be replaced with SHA-256 without breaking interoperability with every peer.
+ *
+ * That message is right about the constraint and wrong about the conclusion. BLAKE2s is **public and
+ * deterministic**, so the algorithm can be computed here instead of by OpenSSL: the bytes are identical to what a
+ * peer with a native implementation produces, and interoperability is preserved exactly. The alternative -- refusing
+ * to handshake -- makes every direct path fall back to the relay on this runtime, which is what was observed.
+ *
+ * ## Scope: unkeyed only
+ *
+ * The wire protocol needs the **unkeyed** 32-byte digest (prologue, session binding, MAC inputs). Keyed BLAKE2s
+ * (`mac1`/`mac2`) is explicitly not implemented in this build either way, so this module implements exactly the
+ * unkeyed case and refuses a key rather than pretending.
+ *
+ * ## Correctness
+ *
+ * Verified against the three published vectors (empty, "abc", the pangram) and, when the runtime does have a native
+ * `blake2s256`, cross-checked byte-for-byte against it over many lengths -- the test file asserts both.
+ *
+ * @see https://www.rfc-editor.org/rfc/rfc7693 (BLAKE2 -- BLAKE2s, 32-bit words, 10 rounds)
+ */
+
+const IV = new Uint32Array([
+  0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19,
+]);
+
+/** Message-word permutation, one row per round (10 rounds for BLAKE2s). */
+const SIGMA = [
+  [0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15],
+  [14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3],
+  [11, 8, 12, 0, 5, 2, 15, 13, 10, 14, 3, 6, 7, 1, 9, 4],
+  [7, 9, 3, 1, 13, 12, 11, 14, 2, 6, 5, 10, 4, 0, 15, 8],
+  [9, 0, 5, 7, 2, 4, 10, 15, 14, 1, 11, 12, 6, 8, 3, 13],
+  [2, 12, 6, 10, 0, 11, 8, 3, 4, 13, 7, 5, 15, 14, 1, 9],
+  [12, 5, 1, 15, 14, 13, 4, 10, 0, 7, 6, 3, 9, 2, 8, 11],
+  [13, 11, 7, 14, 12, 1, 3, 9, 5, 0, 15, 4, 8, 6, 2, 10],
+  [6, 15, 14, 9, 11, 3, 0, 8, 12, 2, 13, 7, 1, 4, 10, 5],
+  [10, 2, 8, 4, 7, 6, 1, 5, 15, 11, 9, 14, 3, 12, 13, 0],
+];
+
+const BLOCK = 64;
+const OUT_BYTES = 32;
+
+const rotr = (x, n) => ((x >>> n) | (x << (32 - n))) >>> 0;
+
+/** The G mixing function, rotation constants 16/12/8/7 for BLAKE2s. */
+function mix(v, a, b, c, d, x, y) {
+  v[a] = (v[a] + v[b] + x) >>> 0;
+  v[d] = rotr(v[d] ^ v[a], 16);
+  v[c] = (v[c] + v[d]) >>> 0;
+  v[b] = rotr(v[b] ^ v[c], 12);
+  v[a] = (v[a] + v[b] + y) >>> 0;
+  v[d] = rotr(v[d] ^ v[a], 8);
+  v[c] = (v[c] + v[d]) >>> 0;
+  v[b] = rotr(v[b] ^ v[c], 7);
+}
+
+/** Read 16 little-endian 32-bit words out of a 64-byte block. */
+function words(block, offset, m) {
+  for (let i = 0; i < 16; i += 1) {
+    const p = offset + i * 4;
+    m[i] = (block[p] | (block[p + 1] << 8) | (block[p + 2] << 16) | (block[p + 3] << 24)) >>> 0;
+  }
+}
+
+/** One compression call: 64 bytes of message, a 64-bit byte counter, and the final-block flag. */
+function compress(h, block, offset, counter, last) {
+  const v = new Uint32Array(16);
+  const m = new Uint32Array(16);
+  v.set(h, 0);
+  v.set(IV, 8);
+  v[12] ^= counter >>> 0;
+  v[13] ^= Math.floor(counter / 0x100000000) >>> 0;
+  if (last) {
+    /**
+     * Only `v[14]` is inverted -- `f0 = 0xFFFFFFFF` marks the last block, and **`f1` stays 0** for sequential
+     * hashing (it is only 1 for the last node of a tree). Inverting `v[15]` as well is the classic wrong
+     * implementation: it produces a stable, plausible-looking digest that matches no reference, which is exactly how
+     * this was found -- three RFC vectors failed and the compression function, checked against a reference
+     * implementation, turned out to be correct while the final-block setup was not.
+     */
+    v[14] = (v[14] ^ 0xffffffff) >>> 0;
+  }
+  words(block, offset, m);
+
+  for (let r = 0; r < 10; r += 1) {
+    const s = SIGMA[r];
+    mix(v, 0, 4, 8, 12, m[s[0]], m[s[1]]);
+    mix(v, 1, 5, 9, 13, m[s[2]], m[s[3]]);
+    mix(v, 2, 6, 10, 14, m[s[4]], m[s[5]]);
+    mix(v, 3, 7, 11, 15, m[s[6]], m[s[7]]);
+    mix(v, 0, 5, 10, 15, m[s[8]], m[s[9]]);
+    mix(v, 1, 6, 11, 12, m[s[10]], m[s[11]]);
+    mix(v, 2, 7, 8, 13, m[s[12]], m[s[13]]);
+    mix(v, 3, 4, 9, 14, m[s[14]], m[s[15]]);
+  }
+
+  for (let i = 0; i < 8; i += 1) h[i] = (h[i] ^ v[i] ^ v[i + 8]) >>> 0;
+}
+
+/**
+ * BLAKE2s-256 of a buffer. Unkeyed; a key is refused rather than silently ignored.
+ *
+ * @param {Buffer|Uint8Array|string} input
+ * @returns {Buffer} 32 bytes.
+ */
+export function blake2s256(input) {
+  const data = typeof input === 'string' ? Buffer.from(input, 'utf8') : Buffer.from(input);
+  const h = new Uint32Array(IV);
+  // Parameter block: digest length 32, key length 0, fanout 1, depth 1.
+  h[0] = (h[0] ^ 0x01010000 ^ OUT_BYTES) >>> 0;
+
+  let counter = 0;
+  // Every block except the last is hashed as a non-final block, so the final block (possibly all zeros) is handled
+  // separately -- BLAKE2 pads the last block and sets the final flag, it does not append an extra block.
+  const full = data.length === 0 ? 0 : Math.ceil(data.length / BLOCK) - 1;
+  for (let i = 0; i < full; i += 1) {
+    counter += BLOCK;
+    compress(h, data, i * BLOCK, counter, false);
+  }
+
+  const lastOffset = full * BLOCK;
+  const lastLength = data.length - lastOffset;
+  const tail = Buffer.alloc(BLOCK);
+  data.copy(tail, 0, lastOffset, data.length);
+  counter += lastLength;
+  compress(h, tail, 0, counter, true);
+
+  const out = Buffer.alloc(OUT_BYTES);
+  for (let i = 0; i < 8; i += 1) out.writeUInt32LE(h[i], i * 4);
+  return out;
+}
+
+/** The three RFC 7693 vectors, exported so a test can assert them without copying hex. */
+export const BLAKE2S_VECTORS = [
+  { input: '', hex: '69217a3079908094e11121d042354a7c1f55b6482ca1a51e1b250dfd1ed0eef9' },
+  { input: 'abc', hex: '508c5e8c327c14e2e1a72ba34eeb452f37458b209ed63a294d999b4c86675982' },
+  {
+    input: 'The quick brown fox jumps over the lazy dog',
+    hex: '606beeec743ccbeff6cbcdf5d5302aa855c256c29b88c8ed331ea1a6bf3c8812',
+  },
+];

package/src/agent/crypto.mjs

@@ -55,6 +55,7 @@ import {
 } from 'node:crypto';
 import { chmodSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
 import { dirname, isAbsolute, join, resolve } from 'node:path';
+import { blake2s256 as blake2s256Js } from './blake2s.mjs';
 
 /* -------------------------------------------------------------------------- */
 /* Names that travel on the wire, or into a report                             */
@@ -738,7 +739,8 @@ export function cryptoCapabilities() {
     }
   };
 
-  check('blake2s256', () => createHash('blake2s256').update('').digest().length === 32);
+  // The JavaScript fallback counts here: what the handshake needs is the digest, not OpenSSL's implementation of it.
+  check('blake2s256', () => blake2s256Support().ok);
   check('sha256', () => createHash('sha256').update('').digest().length === 32);
   check('chacha20-poly1305', () => {
     const key = randomBytes(32);
@@ -801,16 +803,47 @@ export function blake2s256Support() {
     blake2sSupport = {
       ok: bytes === 32,
       advertised,
+      source: 'native',
       detail: bytes === 32
         ? `BLAKE2s-256 available (${advertised ? 'advertised by getHashes' : 'works though not advertised'})`
         : `BLAKE2s-256 produced ${bytes} bytes rather than 32`,
     };
   } catch (e) {
-    blake2sSupport = {
-      ok: false,
-      advertised,
-      detail: `BLAKE2s-256 unavailable on this runtime: ${e?.message ?? String(e)}. It is a WIRE PROTOCOL primitive -- the handshake hash, the prologue hash and the session binding -- so it cannot be replaced with SHA-256 without breaking interoperability with every peer. This machine cannot take part in a handshake until the runtime supports it.`,
-    };
+    /**
+     * **The native digest is unavailable, but that is not the end of the handshake.**
+     *
+     * `P2P_PUNCH_FAILED: Digest method not supported` -- OpenSSL's message, naming no algorithm -- was observed on the
+     * DSH desktop runtime. BLAKE2s is public and deterministic, so the digest can be computed in JavaScript and the
+     * bytes are identical to a peer with a native implementation: **interoperability is preserved exactly**, which is
+     * the constraint the old message correctly named and then wrongly concluded from.
+     *
+     * The fallback is verified before it is trusted: its digest of the empty input is compared against the published
+     * vector, so a broken fallback reports unavailable rather than producing hashes no peer will agree with.
+     */
+    const KNOWN_EMPTY = '69217a3079908094e11121d042354a7c1f55b6482ca1a51e1b250dfd1ed0eef9';
+    let jsOk = false;
+    try {
+      jsOk = blake2s256Js(Buffer.alloc(0)).toString('hex') === KNOWN_EMPTY;
+    } catch {
+      jsOk = false;
+    }
+    blake2sSupport = jsOk
+      ? {
+        ok: true,
+        advertised,
+        source: 'js-fallback',
+        detail: `BLAKE2s-256 computed in JavaScript: the runtime's digest is unavailable (${e?.message ?? String(e)}), `
+          + 'and the fallback matches the published empty-input vector, so handshakes stay interoperable',
+      }
+      : {
+        ok: false,
+        advertised,
+        source: 'none',
+        detail: `BLAKE2s-256 unavailable on this runtime: ${e?.message ?? String(e)}, and the JavaScript fallback failed `
+          + 'its known-answer check. It is a WIRE PROTOCOL primitive -- the handshake hash, the prologue hash and the '
+          + 'session binding -- so it cannot be replaced with SHA-256 without breaking interoperability with every peer. '
+          + 'This machine cannot take part in a handshake until one of the two works.',
+      };
   }
   return blake2sSupport;
 }
@@ -826,18 +859,28 @@ export function blake2s256Support() {
  * @returns {Buffer} 32 bytes.
  */
 export function handshakeHash(...parts) {
-  let hash;
+  let out;
   try {
-    hash = createHash('blake2s256');
+    const hash = createHash('blake2s256');
+    for (const part of parts) hash.update(part);
+    out = hash.digest();
   } catch (e) {
+    /**
+     * The runtime has no native BLAKE2s. Compute the same 32 bytes in JavaScript instead of refusing the handshake:
+     * the algorithm is public and deterministic, so the bytes a peer computes are unchanged and interoperability is
+     * preserved. A runtime where neither path works still fails loudly, with the algorithm and the consequence named.
+     */
     const support = blake2s256Support();
-    const error = new Error(`handshakeHash requires BLAKE2s-256: ${support.detail}`);
-    error.code = 'CRYPTO_BLAKE2S256_UNAVAILABLE';
-    error.cause = e;
-    throw error;
+    if (!support.ok) {
+      const error = new Error(`handshakeHash requires BLAKE2s-256: ${support.detail}`);
+      error.code = 'CRYPTO_BLAKE2S256_UNAVAILABLE';
+      error.cause = e;
+      throw error;
+    }
+    out = blake2s256Js(Buffer.concat(
+      parts.map((part) => (typeof part === 'string' ? Buffer.from(part, 'utf8') : Buffer.from(part))),
+    ));
   }
-  for (const part of parts) hash.update(part);
-  const out = hash.digest();
   if (out.length !== 32) {
     const error = new Error(`handshakeHash expected a 32-byte digest and produced ${out.length}; peers would compute a different handshake hash`);
     error.code = 'CRYPTO_BLAKE2S256_WRONG_LENGTH';

package/src/plugin/tools.mjs

@@ -211,7 +211,7 @@ const MAX_STAGES = 16;
  * `package.json` during `scripts/pack.mjs` rather than hand-maintained, and `W2M_PLUGIN_VERSION`
  * overrides it at runtime for tests and packagers.
  */
-const PLUGIN_VERSION = '1.0.16';
+const PLUGIN_VERSION = '1.1.0';
 
 /** How long any single HTTP call may take before it is aborted, in milliseconds. */
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;