@twinsearth/w2m-dsh-plugin 1.1.15 → 1.1.17

package/codex/mcp-servers.toml

@@ -12,6 +12,6 @@
 
 [mcp_servers.w2m-fleet]
 command = "npx"
-args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.1.15", "w2m-mcp"]
+args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.1.17", "w2m-mcp"]
 startup_timeout_sec = 20
 tool_timeout_sec = 60

package/docs/PLATFORMS.md

@@ -81,3 +81,25 @@ So the split is:
 
 Marking the last two rows "prepared" rather than "done" is deliberate: a manifest that exists is not a listing, and
 this project has already shipped a "mechanism with no caller" seven times.
+
+## Fleet chat over MCP (\w2m_chat\)
+
+\w2m_chat\ is available on **every** transport described above, because it is an ordinary MCP tool like the rest --
+nothing about it depends on the DSH host, and it is not on the deliberately-host-only list (that list contains
+\w2m_run\ only, for the reason given at the top of this document).
+
+What it does, and what it deliberately does not:
+
+- \ction: "send"\ posts plain text (≤ 4 KiB, UTF-8, no control characters) to the relay at
+  \POST /v1/fleet/messages\. The author is the **device token holder**; a body field cannot name a different machine.
+- \ction: "list"\ reads one session's flow at \GET /v1/fleet/messages?session_id=…\ and returns the messages together
+  with the fleet's current byte usage, so a client can warn before the quota refuses a write.
+- A refused write is returned with its named code (\FLEET_QUOTA_EXCEEDED\, \MESSAGE_TOO_LARGE\, \NOT_TEXT\,
+  \EMPTY_TEXT\) -- the tool does not flatten them into "failed".
+- **No push inside MCP.** The \
+ew_message\ notification is an SSE stream
+  (\GET /v1/fleet/messages/stream\, event id only, never the text); an MCP client that cannot hold a stream polls
+  \ction: "list"\ with \since_ms\. The stream is a hint; the text always comes back through the authenticated read.
+
+Encryption and sharding are server-side: history is sealed with AES-256-GCM under a key derived from the fleet key and
+split across the fleet's machines with two replicas per part. No client sees another machine's shard bodies.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "1.1.15",
+  "version": "1.1.17",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "type": "module",
   "main": "lib/index.js",
@@ -129,13 +129,13 @@
     "pack": "node scripts/pack.mjs",
     "reachability": "node scripts/reachability-check.mjs",
     "reachability:classify": "node scripts/reachability-classify.mjs",
-    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs",
+    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs",
     "test:acceptance-doc": "node --test --test-force-exit test/acceptance-doc.test.mjs",
     "test:account-identity": "node --test --test-force-exit test/account-identity.test.mjs",
     "test:admission": "node --test --test-force-exit test/admission.test.mjs",
     "test:admission-routes": "node --test --test-force-exit test/admission-routes.test.mjs",
     "test:agent": "node --test --test-force-exit test/agent.test.mjs test/memory.test.mjs",
-    "test:all": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-agent.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/p2p-crypto.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs",
+    "test:all": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-agent.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/p2p-crypto.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs",
     "test:approval-gate": "node --test --test-force-exit test/approval-gate.test.mjs",
     "test:approval-index": "node --test --test-force-exit test/approval-index.test.mjs",
     "test:authority": "node --test --test-force-exit test/authority.test.mjs",
@@ -175,7 +175,11 @@
     "verify": "node scripts/check-entrypoints.mjs && node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/agent.test.mjs test/tools.test.mjs test/e2e.test.mjs test/crossnetwork.test.mjs test/p2p-node.test.mjs test/p2p-agent.test.mjs test/client-bundle.test.mjs test/loader-entry.test.mjs",
     "verify:join": "node scripts/verify-join.mjs",
     "test:exec-env": "node --test --test-force-exit test/exec-env-injection.test.mjs",
-    "test:account-join": "node --test --test-force-exit test/account-join.test.mjs"
+    "test:account-join": "node --test --test-force-exit test/account-join.test.mjs",
+    "test:fleet-messages": "node --test --test-force-exit test/fleet-messages.test.mjs",
+    "test:message-shards": "node --test --test-force-exit test/message-shards.test.mjs",
+    "test:fleet-messages-http": "node --test --test-force-exit test/fleet-messages-http.test.mjs",
+    "test:message-notify": "node --test --test-force-exit test/message-notify.test.mjs"
   },
   "keywords": [
     "dsh-bundle",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "twinsearth-w2m-dsh",
-  "version": "1.1.15",
+  "version": "1.1.17",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "license": "MIT",
   "keywords": [

package/src/plugin/tools.mjs

@@ -1,4 +1,4 @@
-/**
+/**
  * DSH: Windows2MacO - the DSH Cordis plugin.
  *
  * # What this exposes
@@ -214,7 +214,7 @@ const MAX_STAGES = 16;
  * `package.json` during `scripts/pack.mjs` rather than hand-maintained, and `W2M_PLUGIN_VERSION`
  * overrides it at runtime for tests and packagers.
  */
-const PLUGIN_VERSION = '1.1.15';
+const PLUGIN_VERSION = '1.1.17';
 
 /** How long any single HTTP call may take before it is aborted, in milliseconds. */
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;
@@ -5228,7 +5228,7 @@ export async function apply(ctx, config = {}) {
          *         at Object.apply (src/plugin/tools.mjs:5025)
          *
          * **The throw happens while the tool is being defined, so the whole fiber fails to mount** -- the client
-         * reports the package as `异常`, none of the eleven tools appear, and **the message is only visible if
+         * reports the package as `异常`, none of the twelve tools appear, and **the message is only visible if
          * something gets far enough to print it.** This parameter has had that shape since v0.41.0, so the
          * failure dates from then.
          *
@@ -6138,6 +6138,39 @@ export async function apply(ctx, config = {}) {
         }
         const actor = { id: typeof args?.actor_id === 'string' && args.actor_id.trim() !== '' ? args.actor_id.trim() : cfg.machineName, level: args.actor_level };
         const outcome = action === 'approve' ? 'approved' : 'rejected';
+        /**
+         * v1.1.16: a fleet-admission request is settled at the RELAY, because that is where the request lives and where
+         * the quorum rules are enforced. The local index would accept the write and change nothing that matters.
+         *
+         * The actor id is the person answering; the relay records it on the decision. A refusal is reported as such
+         * (`ALREADY_DECIDED` included) rather than thrown: the caller is looking at a list that may be a second old.
+         */
+        if (/^adm-/.test(approvalId)) {
+          const decideDevice = await readDevice(cfg);
+          const decideRelay = cfg.rabbitUrl ?? null;
+          const settled = decideRelay === null || decideDevice.device_token === null
+            ? { ok: false, json: { code: 'W2M_NO_RELAY' } }
+            : await request({
+              rabbitUrl: decideRelay,
+              token: requireToken(decideDevice),
+              method: 'POST',
+              pathname: '/v1/fleet/admission/' + encodeURIComponent(approvalId) + '/decide',
+              body: { decision: action === 'approve' ? 'approve' : 'reject', decided_by: actor.id, auto: false },
+            });
+          return JSON.stringify({
+            ok: settled?.ok === true,
+            action,
+            approval_id: approvalId,
+            kind: 'fleet_admission',
+            settled: settled?.ok === true ? outcome : null,
+            reason_code: settled?.ok === true ? null : (settled?.json?.error?.code ?? settled?.json?.code ?? settled?.error?.code ?? null),
+            detail: settled?.ok === true ? null : (settled?.json?.error?.message ?? null),
+            acted_by: actor,
+            note: settled?.ok === true
+              ? 'the machine is admitted; it will appear in w2m_devices once its agent reconnects'
+              : 'the decision was refused; the request is unchanged (already decided requests are normal when the ten-second window has passed)',
+          });
+        }
         const result = queue.decide(approvalId, actor, outcome);
         return JSON.stringify({
           ok: result.ok === true,
@@ -6161,6 +6194,43 @@ export async function apply(ctx, config = {}) {
       };
       // An actor with no level still gets the list: knowing what is waiting does not require the authority to
       // answer it, and a queue only its supervisors can see is a queue that stays full.
+      /**
+       * v1.1.16: a machine waiting to join the fleet is a request waiting for a human, which is what this tool is.
+       *
+       * It is NOT a permission escalation, so it must not be shoved through `approvalRequestFor` -- that shape requires
+       * a needs-approval verdict and a capability, and faking one would record a lie in the audit trail. The list is
+       * shared; the store underneath is not.
+       *
+       * The countdown uses the RELAY's clock: `requested_at_ms` was stamped there, and three machines in this fleet
+       * disagree on the time by tens of seconds. A local-clock countdown would fire the automatic approval early on a
+       * fast machine and late on a slow one. The relay still owns the decision (it refuses to auto-approve with no
+       * member online); this is display only.
+       */
+      let admissionRows = [];
+      try {
+        const admissionDevice = await readDevice(cfg);
+        const admissionRelay = cfg.rabbitUrl ?? null;
+        // A relay URL and a device token are what the rest of this file passes on every authenticated call; omitting
+        // them made this request throw into the catch below, which is why the merged rows were silently missing.
+        const admissionPending = admissionRelay === null || admissionDevice.device_token === null
+          ? { ok: false }
+          : await request({ rabbitUrl: admissionRelay, token: requireToken(admissionDevice), method: 'GET', pathname: '/v1/fleet/admission/pending' });
+        if (admissionPending?.ok === true && Array.isArray(admissionPending.json?.pending)) {
+          const relayNow = Date.parse(String(admissionPending.json.rabbit_time ?? '')) || Date.now();
+          admissionRows = admissionPending.json.pending.map((row) => ({
+            approval_id: row.request_id,
+            kind: 'fleet_admission',
+            machine_id: row.machine_id ?? null,
+            machine_name: row.machine_name ?? null,
+            requested_at_ms: row.requested_at_ms ?? null,
+            countdown_ms: Number.isFinite(row.requested_at_ms) ? Math.max(0, 10_000 - (relayNow - row.requested_at_ms)) : null,
+            may_act: true,
+            note: 'approving admits this machine to the fleet; the ten-second window is enforced by the relay and needs a member online',
+          }));
+        }
+      } catch {
+        // The approval list must still work when the relay is unreachable: the permission queue is local.
+      }
       const rows = queue.listFor(
         actor.level === null ? { id: actor.id, level: 0 } : actor,
         { includeSettled: args?.include_settled === true },
@@ -6172,8 +6242,8 @@ export async function apply(ctx, config = {}) {
         as: actor,
         level_known: actor.level !== null,
         summary,
-        count: rows.length,
-        rows,
+        count: rows.length + admissionRows.length,
+        rows: rows.concat(admissionRows),
         note: actor.level === null
           ? 'no actor_level was supplied, so may_act is reported as if the level were 0: the queue is visible, but whether you may answer any of it is not known'
           : 'may_act reflects the actor_level supplied',
@@ -6181,6 +6251,50 @@ export async function apply(ctx, config = {}) {
     },
   }));
 
+  /**
+   * v1.1.17: fleet chat, one session at a time. The text never travels over the notification stream -- this tool reads
+   * it through the endpoint that checks who is asking, and the author of a sent message is the token holder.
+   */
+  ctx.tools.register(defineTool({
+    name: 'w2m_chat',
+    description:
+      'Fleet chat for one session: send plain text to the machines in this conversation, or read what was said. ' +
+      'A refused write comes back with its named reason (quota, size, or non-text) rather than as a bare failure.',
+    parameters: {
+      action: { type: 'string', enum: ['send', 'list'], description: 'send posts text; list reads the flow (default).', default: 'list' },
+      session_id: { type: 'string', description: 'Which conversation. Chat is scoped to a session, not a machine.' },
+      text: { type: 'string', description: 'The message for send. Plain text, UTF-8, at most 4 KiB.' },
+      since_ms: { type: 'number', description: 'For list: only messages newer than this relay timestamp.' },
+      limit: { type: 'number', description: 'For list: how many of the newest messages (default 50).' },
+    },
+    output: jsonOutput,
+    presentCall: (args) => ({ card: 'generic', title: 'w2m chat ' + (typeof args?.action === 'string' ? args.action : 'list'), kind: args?.action === 'send' ? 'write' : 'read', rawInput: {} }),
+    async execute(args, exec) {
+      throwIfAborted(exec?.signal);
+      const action = typeof args?.action === 'string' ? args.action : 'list';
+      const sessionId = typeof args?.session_id === 'string' ? args.session_id.trim() : '';
+      if (sessionId === '') throw new W2MError('W2M_CHAT_SESSION', 'W2M_CHAT_SESSION: session_id is required', { hint: 'chat is scoped to a conversation' });
+      const device = await readDevice(cfg);
+      const rabbitUrl = cfg.rabbitUrl ?? null;
+      if (rabbitUrl === null) throw new W2MError('W2M_NO_RELAY', 'W2M_NO_RELAY: no relay is configured, so chat cannot be reached', { hint: 'set rabbitUrl in the profile patch' });
+      const token = requireToken(device);
+      if (action === 'send') {
+        const posted = await request({ rabbitUrl, token, signal: exec?.signal, method: 'POST', pathname: '/v1/fleet/messages', body: { session_id: sessionId, text: typeof args?.text === 'string' ? args.text : '' } });
+        if (posted?.ok !== true) {
+          const code = posted?.json?.error?.code ?? posted?.error?.code ?? 'W2M_CHAT_SEND';
+          throw new W2MError('W2M_CHAT_SEND', code + ': the message was refused', { reason_code: code, hint: 'quota, size and non-text each need a different answer' });
+        }
+        return JSON.stringify({ ok: true, action, message: posted.json?.message ?? null });
+      }
+      const query = { session_id: sessionId };
+      if (Number.isFinite(args?.since_ms)) query.since_ms = String(args.since_ms);
+      if (Number.isInteger(args?.limit)) query.limit = String(args.limit);
+      const listed = await request({ rabbitUrl, token, signal: exec?.signal, method: 'GET', pathname: '/v1/fleet/messages', query });
+      if (listed?.ok !== true) throw new W2MError('W2M_CHAT_LIST', 'W2M_CHAT_LIST: the relay refused the read', { hint: 'check the relay and this machine token' });
+      return JSON.stringify({ ok: true, action, session_id: sessionId, messages: listed.json?.messages ?? [], count: listed.json?.count ?? 0, usage: listed.json?.usage ?? null });
+    },
+  }));
+
   /**
    * v0.37.0: the eleventh tool -- a question put to a council, and the outcome read back with its dissent.
    *