@twinsearth/w2m-dsh-plugin 1.1.17 → 1.1.19

package/.claude-plugin/marketplace.json

@@ -5,14 +5,14 @@
   },
   "metadata": {
     "description": "The w2m fleet plugins: one account, many machines, any of Windows, macOS or Linux.",
-    "version": "1.1.17"
+    "version": "1.1.19"
   },
   "plugins": [
     {
       "name": "w2m-fleet",
       "source": "./",
       "description": "Read fleet state and dispatch commands across the machines registered to one account. Read-only MCP surface: the five exposed tools cannot change anything.",
-      "version": "1.1.17",
+      "version": "1.1.19",
       "author": {
         "name": "TwinsEarth"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "w2m-fleet",
   "description": "Drive the same project on online Windows, macOS and Linux machines from one account: read fleet state, dispatch commands and read results. The MCP surface is deliberately read-only.",
-  "version": "1.1.17",
+  "version": "1.1.19",
   "author": {
     "name": "TwinsEarth"
   },

package/CHANGELOG.md

@@ -2,6 +2,81 @@
 
 All notable changes to this project are documented here.
 
+## [1.1.19] — 2026-10-18
+
+**The chat panel exists in the browser.**
+
+Fleet chat shipped as a tool in 1.1.17 and as a relay API in the same release. What was missing was the half a user actually
+touches: a control in the composer. This release adds it.
+
+- **The panel**: a "fleet chat" control beside the target-machine control opens a floating panel listing this session's
+  messages, with the relay usage shown next to them, a multi-line input, and a send button. It refreshes while open.
+- **The host route**: the browser never holds a device token. It calls `/api/w2m/chat` on the host, which proxies to the
+  relay's device-gated `/v1/fleet/messages` — so the token stays in the host process.
+- **Tool bug fixed**: `w2m_chat` resolved its token through `readDevice(cfg)`, which fails when `stateDir` is unset even
+  though a `device.json` exists elsewhere; it now resolves exactly like every other tool (`resolveToken(cfg)`).
+- **Theme discipline**: the panel carries no literal colours, only `--dsw-*` tokens, because a literal is wrong in one of
+  the two themes. The stylesheet test caught the one literal (`#fff` on the send button).
+
+The relay on the fleet host was upgraded to this line of code in the same step: it had been running 1.0.14, which has no
+`/v1/fleet/messages` route at all, so the panel would have shown "no route" forever. Verified after the restart: an
+authenticated GET returns 200 (it returned 404 before), unauthenticated returns 401, and the fleet came back with the same
+eight devices and no re-pairing.
+
+### Not in this release
+
+The coloured per-machine avatars for chat messages are designed and not built. The panel shows one style for every
+machine today.
+
+### Verified
+
+Gate GREEN, 15 of 15. 2489 tests / 2471+ pass. client-bundle 25, tools 122, claims, portable-plugins 10.
+
+## [1.1.18] — 2026-10-18
+
+**The developer declares this a STABLE release.** It ships the three-channel updater and the release plumbing that makes
+the beta channel real.
+
+### Three channels, resolved from the two releases that exist
+
+`w2m_update action:"status" channels:true` reports:
+
+| Channel | Source | Rule |
+|---|---|---|
+| `stable` | GitHub's `/releases/latest` | never a prerelease |
+| `beta` | the newest **prerelease**, fetched from `/releases` and filtered | exists only when one is published |
+| `latest` | whichever of the two is newer by SemVer | equal versions resolve to stable |
+
+Every decision comes from the existing `decideUpdate`, so the channel logic cannot drift from the install rule; this
+module only chooses which two releases to ask about. A missing beta is reported as `available: null` rather than
+substituted with stable — "there is no beta right now" is a fact the UI has to be able to show as a disabled button.
+
+**The channel report is opt-in.** A plain `status` remains local and offline; making every status call reach GitHub would
+slow the tool and break it behind a proxy. Asserted by a test that fails if any fetch happens.
+
+### Installing a channel, with the checksum enforced twice
+
+`w2m_update action:"apply" channel:"stable"|"beta"|"latest"`: the release's `SHA256SUMS` is downloaded, the hash for the
+tarball is required (no hash, no install), `downloadVerified` removes its temp file on any mismatch, and `installUpdate`
+receives `expectedSha256` as well and keeps its rollback path. A mismatch is not retried: it means the asset and its
+checksums disagree, which is never a transient condition.
+
+### The beta channel is a GitHub prerelease, and never npm
+
+`.github/workflows/beta.yml`: a bump is a beta by default; a beta becomes a **prerelease** (so neither GitHub nor npm
+resolves it as latest) gated by the `beta-access` environment, which requires a reviewer. There is **no `npm publish`
+line in that file** — a channel cannot leak into the default install if the publication cannot happen at all. npm
+receives a version only when the developer declares it stable, as this release does.
+
+`.github/workflows/packages.yml` mirrors a released stable version to GitHub Packages with the registry overridden **on
+the command line**, because `publishConfig.registry` would silently redirect the operator-channel publish too.
+
+### Verified
+
+Gate GREEN twice, 15/15. 2504 tests / 2490 pass / 0 fail / 14 skip. tools 122, update-channels 4, update-prerelease 2.
+The first GitHub Packages publication succeeded; the package page itself is confirmed by the operator, since the PAT has
+no `read:packages` scope to read it back.
+
 ## [1.1.17] — 2026-10-18
 
 **Fleet chat: messages live in a session, are refused by a byte budget rather than silently dropped, are stored

package/README.md

@@ -66,18 +66,18 @@ The manifests live in [`.claude-plugin/`](.claude-plugin/) and are version-locke
 # copy this block into your own codex/mcp-servers.toml
 [mcp_servers.w2m]
 command = "npx"
-args = ["-y", "@twinsearth/w2m-dsh-plugin@1.1.17", "w2m-mcp"]
+args = ["-y", "@twinsearth/w2m-dsh-plugin@1.1.19", "w2m-mcp"]
 ```
 
 ### 5. Verified release tarball (offline)
 
-From the `v1.1.17` release page download **both** files — `twinsearth-w2m-dsh-plugin-1.1.17.tgz` and `SHA256SUMS` —
+From the `v1.1.19` release page download **both** files — `twinsearth-w2m-dsh-plugin-1.1.19.tgz` and `SHA256SUMS` —
 then:
 
 ```bash
-curl -LO https://github.com/TwinsEarth/dsh-windows2macos/releases/download/v1.1.17/twinsearth-w2m-dsh-plugin-1.1.17.tgz
+curl -LO https://github.com/TwinsEarth/dsh-windows2macos/releases/download/v1.1.19/twinsearth-w2m-dsh-plugin-1.1.19.tgz
 sha256sum -c SHA256SUMS          # verify before installing, always
-npm install -g ./twinsearth-w2m-dsh-plugin-1.1.17.tgz
+npm install -g ./twinsearth-w2m-dsh-plugin-1.1.19.tgz
 ```
 
 Every release carries `SHA256SUMS` for exactly this reason. If a release is missing it, do not install that release.
@@ -198,6 +198,27 @@ Linux, npm + GitHub release + checksums consistent, end-to-end fleet runs on a r
 
 ---
 
+## Release channels
+
+Three channels, and only one of them is what \
+pm install\ gives you.
+
+| Channel | Where it comes from | Who should use it |
+|---|---|---|
+| **stable** | npm \latest\ — a version the developer declared stable | everyone; this is the default install |
+| **beta** | a GitHub **prerelease** (tarball + \SHA256SUMS\), **never on npm** | developers granted \eta-access\ who accept that it can fail |
+| **latest build** | the newest of the two, whatever its channel | a developer who wants the newest code and knows the above |
+
+A bump is a **beta by default**. npm receives a version only when the developer says, in so many words, that this one is a
+stable release: a beta is published as a prerelease (so neither GitHub nor npm ever resolves it as \latest\), it is
+downloadable only after the \eta-access\ environment approves the run, and installing it requires reading
+[SECURITY.md](SECURITY.md) and accepting the risk.
+
+There is no \
+pm publish\ line in the beta workflow. That is deliberate — a channel cannot leak to the default install if
+the publication cannot happen at all.
+---
+
 ## Links
 
 - [CHANGELOG](CHANGELOG.md) — every version, including what it deliberately did **not** ship
@@ -267,17 +288,17 @@ w2m-mcp --help
 # 把这段复制进你自己的 codex/mcp-servers.toml
 [mcp_servers.w2m]
 command = "npx"
-args = ["-y", "@twinsearth/w2m-dsh-plugin@1.1.17", "w2m-mcp"]
+args = ["-y", "@twinsearth/w2m-dsh-plugin@1.1.19", "w2m-mcp"]
 ```
 
 #### 5. 校验过的发布包（离线）
 
-从 `v1.1.17` 的 release 页面下载**两个**文件 —— `twinsearth-w2m-dsh-plugin-1.1.17.tgz` 与 `SHA256SUMS` —— 然后：
+从 `v1.1.19` 的 release 页面下载**两个**文件 —— `twinsearth-w2m-dsh-plugin-1.1.19.tgz` 与 `SHA256SUMS` —— 然后：
 
 ```bash
-curl -LO https://github.com/TwinsEarth/dsh-windows2macos/releases/download/v1.1.17/twinsearth-w2m-dsh-plugin-1.1.17.tgz
+curl -LO https://github.com/TwinsEarth/dsh-windows2macos/releases/download/v1.1.19/twinsearth-w2m-dsh-plugin-1.1.19.tgz
 sha256sum -c SHA256SUMS          # 安装前务必校验
-npm install -g ./twinsearth-w2m-dsh-plugin-1.1.17.tgz
+npm install -g ./twinsearth-w2m-dsh-plugin-1.1.19.tgz
 ```
 
 每个 release 都带 `SHA256SUMS` 正是为了这一步。若某个 release 缺少它，**不要安装该版本**。
@@ -372,6 +393,23 @@ CI 全绿、npm 与 GitHub 发布及校验和一致、在真实的 Linux/Mac/Win
 | 裁决总是 `partial` | 来自已下线机器的陈旧租约 | 1.1.2 已修：派发只对在线且未沉默的机器建租约 |
 | `P2P_PUNCH_FAILED` | NAT，或宿主密码学能力缺口 | 会自动降级到 relay 路径，结果不受影响 |
 
+### 发布通道（中文）
+
+三个通道，其中只有一个是你 \
+pm install\ 默认拿到的。
+
+| 通道 | 来源 | 适合谁 |
+|---|---|---|
+| **stable** | npm \latest\，开发者明确声明为稳定版 | 所有人；默认安装就是它 |
+| **beta** | GitHub **prerelease**（tarball + \SHA256SUMS\），**绝不进 npm** | 被授予 \eta-access\、且接受它可能失败的开发者 |
+| **最新构建** | 两者中版本较新的那个，不论通道 | 想要最新代码、并理解上述含义的开发者 |
+
+**默认的 bump 是 beta**。只有开发者明确说明"这次是稳定版"，npm 才会收到该版本：beta 以 prerelease 形式发布（因此
+GitHub 与 npm 都不会把它解析成 \latest\），只有在 \eta-access\ 环境审批通过后才能下载，安装前需阅读
+[SECURITY.md](SECURITY.md) 并自担风险。
+
+beta 工作流里**没有 \
+pm publish\ 这一行**，这是刻意的 —— 只要发布动作不可能发生，这个通道就不可能泄漏到默认安装。
 ### 链接
 
 - [CHANGELOG](CHANGELOG.md) —— 每个版本，包括它**故意没有**交付的内容

package/codex/mcp-servers.toml

@@ -12,6 +12,6 @@
 
 [mcp_servers.w2m-fleet]
 command = "npx"
-args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.1.17", "w2m-mcp"]
+args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.1.19", "w2m-mcp"]
 startup_timeout_sec = 20
 tool_timeout_sec = 60

package/lib/client.js

@@ -283,6 +283,24 @@ window.__ModuleLoader__.load({
       '.w2mTarget_name{min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}',
       '.w2mTarget_detail{margin-left:auto;flex:none;color:var(--dsw-alias-label-tertiary);font-size:11px;font-weight:400}',
       '.w2mTarget_option:disabled .w2mTarget_detail{color:var(--dsw-alias-label-caption)}',
+      '.w2mChat{position:relative;display:inline-flex;align-items:center}',
+      '.w2mChat_trigger{display:inline-flex;align-items:center;gap:4px;height:28px;padding:0 8px;border:none;border-radius:var(--dsw-radius-sm);background:transparent;color:var(--dsw-alias-label-secondary);font-size:13px;font-weight:500;line-height:20px;cursor:pointer;outline:none}',
+      '.w2mChat_trigger:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}',
+      '.w2mChat_trigger:disabled{color:var(--dsw-alias-label-dimmed);cursor:default}',
+      '.w2mChat_panel{position:fixed;right:16px;bottom:88px;z-index:60;display:flex;flex-direction:column;width:340px;max-height:420px;border-radius:var(--dsw-radius-lg);border:.5px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);box-shadow:var(--dsw-elevation-soft);font-size:13px;line-height:20px;color:var(--dsw-alias-label-primary);overflow:hidden}',
+      '.w2mChat_head{display:flex;align-items:center;gap:8px;padding:8px 10px;border-bottom:.5px solid var(--dsw-alias-border-l2);font-weight:600}',
+      '.w2mChat_usage{margin-left:auto;font-weight:400;color:var(--dsw-alias-label-tertiary);font-size:11px}',
+      '.w2mChat_close{border:none;background:transparent;color:var(--dsw-alias-label-secondary);cursor:pointer;font-size:16px;line-height:16px;padding:0 2px}',
+      '.w2mChat_list{flex:1;overflow-y:auto;padding:8px 10px;display:flex;flex-direction:column;gap:8px;min-height:120px}',
+      '.w2mChat_empty{color:var(--dsw-alias-label-tertiary)}',
+      '.w2mChat_msg{display:flex;flex-direction:column;gap:2px}',
+      '.w2mChat_meta{color:var(--dsw-alias-label-tertiary);font-size:11px}',
+      '.w2mChat_text{white-space:pre-wrap;word-break:break-word}',
+      '.w2mChat_compose{display:flex;gap:8px;padding:8px 10px;border-top:.5px solid var(--dsw-alias-border-l2);align-items:flex-end}',
+      '.w2mChat_input{flex:1;resize:none;box-sizing:border-box;font:inherit;color:inherit;background:var(--dsw-alias-bg-layer-2);border:.5px solid var(--dsw-alias-border-l2);border-radius:var(--dsw-radius-sm);padding:6px 8px;outline:none;min-height:38px;max-height:96px}',
+      '.w2mChat_send{flex:none;height:28px;padding:0 10px;border:none;border-radius:var(--dsw-radius-sm);background:var(--dsw-alias-state-business-primary);color:var(--dsw-alias-text-on-business);font:inherit;font-weight:500;cursor:pointer}',
+      '.w2mChat_send:disabled{opacity:.5;cursor:default}',
+      '.w2mChat_error{padding:0 10px 8px;color:var(--dsw-alias-state-error-primary);font-size:11px}',
     ].join('');
 
     /**
@@ -530,6 +548,148 @@ window.__ModuleLoader__.load({
       ]);
     }
 
+    // -------------------------------------------------------------------------------------------
+    // Fleet chat panel (v1.1.18 addition: the missing browser half of `w2m_chat`)
+    // -------------------------------------------------------------------------------------------
+    //
+    // v1.1.17 shipped fleet chat as a tool only — its own CHANGELOG records "no client UI panel
+    // beyond the generic tool card". This is that panel: a session-scoped broadcast board the
+    // operator and the agent share. Every read and write goes through the host route
+    // `/api/w2m/chat` (host-side `fleet-chat-route.mjs`), so the device token stays in the host
+    // process and this file never holds a credential.
+    const CHAT_ROUTE = '/api/w2m/chat';
+
+    /** One JSON call to the host chat route; a refusal is a value, not an exception. */
+    async function chatCall(options) {
+      let response;
+      try {
+        response = await fetch(options.url, options.init);
+      } catch (error) {
+        return { ok: false, error: `the plugin could not be reached: ${error instanceof Error ? error.message : String(error)}` };
+      }
+      let body = null;
+      try {
+        body = await response.json();
+      } catch {
+        return { ok: false, error: `the plugin answered HTTP ${response.status} with a body that is not JSON` };
+      }
+      if (response.status === 404) return { ok: false, error: 'this host does not serve the W2M chat route' };
+      if (response.ok !== true || body?.ok === false) {
+        return { ok: false, error: typeof body?.error === 'string' ? body.error : `HTTP ${response.status}` };
+      }
+      return { ok: true, state: body };
+    }
+
+    /**
+     * The fleet-chat control: opens a panel with the session's messages, a compose box and the
+     * relay's current usage. The text stays on the relay; this component keeps only the last view.
+     */
+    function FleetChat({ sessionId }) {
+      const [open, setOpen] = React.useState(false);
+      const [messages, setMessages] = React.useState([]);
+      const [usage, setUsage] = React.useState(null);
+      const [text, setText] = React.useState('');
+      const [error, setError] = React.useState(null);
+      const [busy, setBusy] = React.useState(false);
+
+      const load = React.useCallback(async (signal) => {
+        if (typeof sessionId !== 'string' || sessionId === '') return;
+        const result = await chatCall({
+          url: `${CHAT_ROUTE}?session_id=${encodeURIComponent(sessionId)}&limit=50`,
+          init: { method: 'GET', credentials: 'same-origin', headers: { accept: 'application/json' }, signal },
+        });
+        if (result.ok) {
+          setMessages(Array.isArray(result.state.messages) ? result.state.messages : []);
+          setUsage(result.state.usage ?? null);
+          setError(null);
+        } else {
+          setError(result.error);
+        }
+      }, [sessionId]);
+
+      React.useEffect(() => {
+        if (!open) return undefined;
+        const controller = new AbortController();
+        load(controller.signal);
+        const timer = setInterval(() => load(controller.signal), 3000);
+        return () => {
+          controller.abort();
+          clearInterval(timer);
+        };
+      }, [open, load]);
+
+      const send = React.useCallback(async () => {
+        const value = text.trim();
+        if (value === '' || busy) return undefined;
+        setBusy(true);
+        const result = await chatCall({
+          url: CHAT_ROUTE,
+          init: {
+            method: 'POST',
+            credentials: 'same-origin',
+            headers: { 'content-type': 'application/json', accept: 'application/json' },
+            body: JSON.stringify({ session_id: sessionId, text: value }),
+          },
+        });
+        setBusy(false);
+        if (result.ok) {
+          setText('');
+          await load();
+        } else {
+          setError(result.error);
+        }
+        return undefined;
+      }, [busy, load, sessionId, text]);
+
+      const disabled = typeof sessionId !== 'string' || sessionId === '';
+      const usageText = usage === null ? null : `${Math.round((usage.used_24h_bytes ?? 0) / 1024)} KiB/24h · ${usage.messages ?? 0} 条`;
+      const machineLabel = (message) => {
+        const id = typeof message?.machine_id === 'string' ? message.machine_id : '?';
+        return id.length > 12 ? `${id.slice(0, 8)}…` : id;
+      };
+      const timeLabel = (message) => (Number.isFinite(message?.at_ms) ? new Date(message.at_ms).toLocaleTimeString() : '');
+
+      return h('span', { className: 'w2mChat' },
+        h('button', {
+          type: 'button',
+          className: 'w2mChat_trigger',
+          title: '编队聊天（本会话广播）',
+          'aria-expanded': open,
+          disabled,
+          onClick: () => setOpen((value) => !value),
+        }, '💬', h('span', { className: 'w2mChat_label' }, '编队聊天')),
+        open
+          ? h('div', { className: 'w2mChat_panel', role: 'dialog', 'aria-label': '编队聊天' },
+              h('div', { className: 'w2mChat_head' },
+                h('span', null, '编队聊天'),
+                usageText === null ? null : h('span', { className: 'w2mChat_usage' }, usageText),
+                h('button', { type: 'button', className: 'w2mChat_close', title: '关闭', onClick: () => setOpen(false) }, '×')),
+              h('div', { className: 'w2mChat_list' },
+                error !== null ? h('div', { className: 'w2mChat_error' }, error) : null,
+                messages.length === 0
+                  ? (error === null ? h('div', { className: 'w2mChat_empty' }, '本会话还没有消息') : null)
+                  : messages.map((message) => h('div', { key: message?.message_id ?? `${message?.machine_id}:${message?.at_ms}`, className: 'w2mChat_msg' },
+                      h('div', { className: 'w2mChat_meta' }, `${machineLabel(message)} · ${timeLabel(message)}`),
+                      h('div', { className: 'w2mChat_text' }, message?.text ?? '')))),
+              h('div', { className: 'w2mChat_compose' },
+                h('textarea', {
+                  className: 'w2mChat_input',
+                  value: text,
+                  rows: 2,
+                  placeholder: '说点什么，发给本会话的机器…',
+                  disabled: busy,
+                  onChange: (event) => setText(event.target.value),
+                  onKeyDown: (event) => {
+                    if (event.key === 'Enter' && event.shiftKey !== true) {
+                      event.preventDefault();
+                      send();
+                    }
+                  },
+                }),
+                h('button', { type: 'button', className: 'w2mChat_send', disabled: busy || text.trim() === '', onClick: send }, busy ? '发送中…' : '发送')))
+          : null);
+    }
+
     /**
      * Client plugin body: install the stylesheet, register the dictionaries, take the seat.
      *
@@ -607,6 +767,24 @@ window.__ModuleLoader__.load({
           t,
         }),
       }, TargetSelect));
+
+      // The fleet-chat panel: the same session-scoped seat, one slot after the target control.
+      // Wrapped in its own try/catch on purpose — the target control is the primary half of this
+      // bundle, and a chat panel that cannot mount must not take the page (or the app) down with it.
+      try {
+        slots.inject('conversation.input.left', () => slots.register({
+          name: 'conversation.input.left',
+          id: 'w2m-chat',
+          order: 41,
+          label: 'fleet chat',
+          inject: (sessionId) => ({ sessionId }),
+        }, FleetChat));
+      } catch (error) {
+        console.error(
+          '@twinsearth/w2m-dsh-plugin: the fleet chat panel was not mounted; the rest of the page is unaffected',
+          error,
+        );
+      }
     }
 
     /**
@@ -633,6 +811,7 @@ window.__ModuleLoader__.load({
     exports.apply = apply;
     exports.inject = inject;
     exports.TargetSelect = TargetSelect;
+    exports.FleetChat = FleetChat;
     exports.injectStyle = injectStyle;
     exports.makeTranslator = makeTranslator;
     return module.exports;