@twinsearth/w2m-dsh-plugin 1.1.1 → 1.1.3

package/.claude-plugin/marketplace.json

@@ -5,14 +5,14 @@
   },
   "metadata": {
     "description": "The w2m fleet plugins: one account, many machines, any of Windows, macOS or Linux.",
-    "version": "1.1.1"
+    "version": "1.1.3"
   },
   "plugins": [
     {
       "name": "w2m-fleet",
       "source": "./",
       "description": "Read fleet state and dispatch commands across the machines registered to one account. Read-only MCP surface: the five exposed tools cannot change anything.",
-      "version": "1.1.1",
+      "version": "1.1.3",
       "author": {
         "name": "TwinsEarth"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "w2m-fleet",
   "description": "Drive the same project on online Windows, macOS and Linux machines from one account: read fleet state, dispatch commands and read results. The MCP surface is deliberately read-only.",
-  "version": "1.1.1",
+  "version": "1.1.3",
   "author": {
     "name": "TwinsEarth"
   },

package/CHANGELOG.md

@@ -2,6 +2,81 @@
 
 All notable changes to this project are documented here.
 
+## [1.1.3] — 2026-10-17
+
+**A machine offline for more than 72 hours leaves the list. It is not deleted, and it comes back on its own.**
+
+### The rule, and why hiding is not deleting
+
+`readFleet` filters the roster at **the read path only**:
+
+* a machine whose `last_seen` is at least **72 hours** old is **not shown** by `w2m_devices` or the composer;
+* `records` still carries **every device the relay sent**, so nothing is lost and no bookkeeping is required;
+* a **missing or unparseable** `last_seen` is **not** archived -- an unknown age must not be read as "gone for three
+  days", or a relay that omits the field would empty the list;
+* `include_stale: true` shows the archived machines, which is the operator's audit route;
+* the machine returns by reporting again: the same record with a fresh timestamp is listed, with no re-pairing.
+
+Because the relay already stops leasing machines that are offline (v1.1.2), a hidden machine is also not a dispatch
+target -- the list and the dispatch agree, from one notion of liveness plus this display rule.
+
+### The fixtures were the reason this took two attempts
+
+The first attempt changed nothing in the filter and failed 8 tests: `fleet-target`'s roster fixtures carried **fixed
+dates** (`2026-10-09` … `2026-10-11`), which are more than 72 hours old *now*, so a correct filter archived all three
+machines. Making the timestamps **relative** (`Date.now() - 60s` …) fixed all 8 without touching a single assertion,
+which is the evidence that the filter was right and the fixture was the stale part.
+
+### Verified
+
+`test/fleet-target.test.mjs` gains four assertions -- hidden from the list, **records kept**, returns on its own and
+`include_stale` shows it meanwhile, unknown age not archived -- for **45 pass, 0 fail**. `test/tools.test.mjs` 115 and
+`test/relay.test.mjs` 160 remain green.
+
+## [1.1.2] — 2026-10-17
+
+**A dispatch that names no machines now goes to the machines that are online. The rule that decides "online" had been
+written three times and the three copies are now one.**
+
+### The defect
+
+The relay built a lease for **every paired device**, including a machine whose agent had stopped heartbeating days
+earlier. That lease expired, `partial` became the only verdict the task could reach, and a fleet whose live machines
+agreed reported *"incomplete"* forever. Observed on 2026-10-17:
+
+    aggregate: partial    counts: { ok: 3, expired: 4 }
+
+So "all machines agree" was **unreachable** while a stale entry existed, and no amount of re-running could fix it.
+
+### The fix: one definition, three call sites
+
+`device.online === true` alone is **not** the answer -- the flag stays true until the sweep runs. The real rule was
+already computed, in two places, as `device.online === true && !silent`, and the target list was about to become a
+third copy. It is now a method:
+
+    isOnlineDevice(device, nowMs = this.nowMs())
+
+used by `deviceStatus`, `publicDevice` and the default target list. `simtMs === null` (no contact ever observed) is
+**not** silent, so an unknown age cannot be read as "gone".
+
+### `include_offline` is the escape hatch, and it is reachable
+
+`w2m_run` gains `include_offline` (boolean, **default false**) and puts it on the wire only when asked, so a default
+dispatch sends the same bytes as before. The relay records it on the task, and a probe against a live `RabbitState`
+confirmed the field is accepted and stored (`recorded: true`) rather than rejected as unknown.
+
+### Deliberately NOT in this release
+
+**The 72-hour archive rule is deferred to 1.1.3.** The read-path filter is written and correct, but eight
+`fleet-target` fixtures carry fixed old timestamps and would need their intent reviewed one by one; shipping it with
+those fixtures patched blindly is how a green suite stops meaning anything. A machine that has been offline for days is
+therefore **hidden from dispatch** by this release (it is not online) but still **listed** by `w2m_devices`.
+
+### Verified
+
+`test/relay.test.mjs` 160 pass, `test/tools.test.mjs` 115 pass, `test/fleet-target.test.mjs` 41 pass -- 316 tests, 0
+fail, after the change. The 72h filter was measured, found to break 8 fixtures, and rolled back rather than shipped.
+
 ## [1.1.1] — 2026-10-17
 
 **The fleet is now installable from Claude Code, Codex and OpenAI's plugin surface -- and the parts that still need a

package/codex/mcp-servers.toml

@@ -12,6 +12,6 @@
 
 [mcp_servers.w2m-fleet]
 command = "npx"
-args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.1.1", "w2m-mcp"]
+args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.1.3", "w2m-mcp"]
 startup_timeout_sec = 20
 tool_timeout_sec = 60

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "1.1.1",
+  "version": "1.1.3",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "type": "module",
   "main": "lib/index.js",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "twinsearth-w2m-dsh",
-  "version": "1.1.1",
+  "version": "1.1.3",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "license": "MIT",
   "keywords": [

package/src/plugin/fleet-target.mjs

@@ -156,6 +156,15 @@ export function isSelectableDevice(device) {
  * @param {string|null} localMachineId This machine's id, for the "this machine" mark.
  * @returns {object}
  */
+/**
+ * v1.1.3: how long a machine may be unheard from before it leaves the list.
+ *
+ * The operator's rule: offline for 72 hours is no longer shown, **nothing is deleted**, and it comes back on its own
+ * once it reports again. Hiding and deleting are deliberately different -- deleting would throw away the history of a
+ * machine that is merely switched off, and re-pairing would be the only way back.
+ */
+const ARCHIVE_AFTER_MS = 72 * 60 * 60 * 1000;
+
 export function describeTargetMachine(device, localMachineId = null) {
   const machineId = typeof device?.machine_id === 'string' && device.machine_id !== '' ? device.machine_id : null;
   return {
@@ -343,7 +352,7 @@ export function dispatchSelectionFields(selection, mode) {
  *   fields rather than this module's projection of them.
  */
 export async function readFleet(deps) {
-  const { rabbitUrl, token = null, localMachineId = null, signal, request } = deps;
+  const { rabbitUrl, token = null, localMachineId = null, signal, request, include_stale = false } = deps;
   if (typeof rabbitUrl !== 'string' || rabbitUrl === '') {
     return {
       ok: false,
@@ -397,7 +406,18 @@ export async function readFleet(deps) {
   const records = Array.isArray(result.json?.devices)
     ? result.json.devices
     : (Array.isArray(result.json?.machines) ? result.json.machines : []);
-  const machines = records.map((record) => describeTargetMachine(record, localMachineId));
+  const allMachines = records.map((record) => describeTargetMachine(record, localMachineId));
+  /**
+   * Archived means "not shown", never "removed": `records` still carries every device, so a caller that asks for the
+   * archived ones receives them. A missing or unparseable timestamp is NOT archived -- "unknown" must not be read as
+   * "gone for three days", or a relay that omits the field would empty the list.
+   */
+  const isArchived = (machine) => {
+    const raw = machine.last_seen;
+    const at = typeof raw === 'number' ? raw : Date.parse(String(raw ?? ''));
+    return Number.isFinite(at) && (Date.now() - at) >= ARCHIVE_AFTER_MS;
+  };
+  const machines = include_stale === true ? allMachines : allMachines.filter((machine) => !isArchived(machine));
   return {
     ok: true,
     error: null,
@@ -410,6 +430,7 @@ export async function readFleet(deps) {
     // Machines the relay still lists but whose lease is not live. Reported so "3 machines" is never
     // mistaken for "3 machines you can use".
     excluded: machines.filter((machine) => !machine.online).length,
+    archived: allMachines.length - machines.length,
   };
 }