@twinsearth/w2m-dsh-plugin 1.2.2 → 1.2.3

package/.claude-plugin/marketplace.json

@@ -5,14 +5,14 @@
               },
     "metadata":  {
                      "description":  "The w2m fleet plugins: one account, many machines, any of Windows, macOS or Linux.",
-                     "version":  "1.2.2"
+                     "version":  "1.2.3"
                  },
     "plugins":  [
                     {
                         "name":  "w2m-fleet",
                         "source":  "./",
                         "description":  "Read fleet state and dispatch commands across the machines registered to one account. Read-only MCP surface: the five exposed tools cannot change anything.",
-                        "version":  "1.2.2",
+                        "version":  "1.2.3",
                         "author":  {
                                        "name":  "TwinsEarth"
                                    },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
     "name":  "w2m-fleet",
     "description":  "Drive the same project on online Windows, macOS and Linux machines from one account: read fleet state, dispatch commands and read results. The MCP surface is deliberately read-only.",
-    "version":  "1.2.2",
+    "version":  "1.2.3",
     "author":  {
                    "name":  "TwinsEarth"
                },

package/CHANGELOG.md

@@ -7,6 +7,52 @@
 
 All notable changes to this project are documented here.
 
+## [1.2.3] — 2026-10-20
+
+**The packed artifact did not mount. This fixes that, and the reason it was not caught here.**
+
+`v1.2.2` was released, published to npm, and **failed Compat**: the packed artifact would not mount in a real profile.
+
+```
+JsonSchemaError: unsupported JSON schema: parameters.params.additionalProperties must be explicitly true or false
+```
+
+`w2m_intent` declared `params: { type: "object", ... }` without stating `additionalProperties`. DSH refuses such a
+schema **at mount time** -- in the profile of whoever installs the build -- and this repository had no check that would
+have said so before shipping: the local loader gate mounted the artifact on a host whose compiler path differs, so it
+stayed green while the real profile refused the entry.
+
+### What changed
+
+- `w2m_intent`'s `params` now states `additionalProperties: true`, and every tool schema is checked when it is defined.
+- New `src/plugin/schema-spec.mjs`: a pure walker over schema-shaped values, and `schemaProblems()` which returns every
+  object node that does not state `additionalProperties` as a boolean -- all of them at once, not the first one.
+- `defineTool` now runs that check, so a tool with an under-specified object parameter fails where it is written rather
+  than in someone else's profile.
+- `test/schema-spec.test.mjs`: 5 tests on the walker and the checker (nested properties, array items, unions, multiple
+  offenders, `true` accepted as well as `false`).
+
+### Panel polish
+
+- **Thread grouping**: consecutive messages that share a thread are shown under one thread head. Only consecutive runs are
+  grouped, because re-sorting by thread would put an answer above the question it answers.
+- **Unread count**: the trigger shows how many messages arrived since this conversation was last opened. The watermark is
+  local storage per conversation -- the relay stays stateless and no "who read what" is invented.
+
+- **Task board**: the panel shows the relay's own task list (up to six rows: id prefix, mode, status) through a host
+  proxy (`/api/w2m/tasks`), so the browser never holds a device token.
+
+Still missing from the panel: a timeout mark on an unanswered question, which needs the ask store from the turn state
+machine.
+### Verified
+
+Gate GREEN twice, 15 of 15: 2555 tests / 2541 pass / 0 fail / 14 skip.
+
+### Not verified
+
+Compat itself: that workflow runs in its own environment, so this release is verified by the same local gate that missed
+the defect. **Watch the Compat run for this tag.** If it fails again, the mount is failing for a different reason than the
+schema and the log will say which entry and which fiber.
 ## [1.2.2] — 2026-10-20
 
 **Fleet collaboration, part one: shared-memory writes, a council of machines, and the panel that reaches them.**
@@ -22,33 +68,33 @@ Creating the tag through the API had already triggered one run, which created th
 collided with it. A release step that cannot be retried fails for the wrong reason, so `beta.yml` now refreshes an existing
 release (notes + assets with `--clobber`) instead of refusing, and says so in the log.
 
-### What is in it
-
-- **Shared-memory writes**: `w2m_memory` gained `action: "append"` with `if_revision`. A stale revision comes back as a 409
-  the caller reads (revision, how far behind, which records it has not seen) and is deliberately **not** retried in the
-  transport -- retrying there turns a visible conflict into a silent overwrite.
-- **A council of machines**: `src/plugin/council-fleet.mjs` keeps the single-machine decision rule and changes the
-  transport to chat messages on `council-<id>`, so every machine reads the same ballots and recounts the same outcome.
-  Weights are a pure function of the ballot; a tie is refused; one ballot per machine; a late ballot is refused by name.
-  `w2m_council` exposes `fleet-open` / `fleet-vote` / `fleet-decide` / `fleet-state` / `fleet-list`.
-- **The panel**: a recipient picker (default "all"), a thread chip on messages that belong to a thread, click-to-reply with
-  a quoted line above the input, and the reply thread travelling with it. The host route refuses a single recipient that
-  is not in this fleet (`CHAT_UNKNOWN_RECIPIENT`) and says `CHAT_ROSTER_UNAVAILABLE` when the roster could not be read at
-  all -- a relay outage is not a typo in the recipient.
-- **A readable view over memory**: `w2m_memory` read now returns `view` (counts by machine and by status, one line per
-  record). A row shape it does not recognise is shown as itself rather than dropped.
-- **The beta pipeline is repeatable**: creating the tag had triggered a run that created the release, so the explicit
-  dispatch collided with it. The step now refreshes an existing release instead of refusing.
-
-### Verified
-
-Gate GREEN twice, 15 of 15: 2550 tests / 2536 pass / 0 fail / 14 skip. tools 125 (three append cases), council-fleet 12,
-memory-view 6, client-bundle 25.
-
-### Not verified
-
-The fleet council and a directed message across two live machines, and the panel against a second machine. Those need two
-machines on this build.
+### What is in it
+
+- **Shared-memory writes**: `w2m_memory` gained `action: "append"` with `if_revision`. A stale revision comes back as a 409
+  the caller reads (revision, how far behind, which records it has not seen) and is deliberately **not** retried in the
+  transport -- retrying there turns a visible conflict into a silent overwrite.
+- **A council of machines**: `src/plugin/council-fleet.mjs` keeps the single-machine decision rule and changes the
+  transport to chat messages on `council-<id>`, so every machine reads the same ballots and recounts the same outcome.
+  Weights are a pure function of the ballot; a tie is refused; one ballot per machine; a late ballot is refused by name.
+  `w2m_council` exposes `fleet-open` / `fleet-vote` / `fleet-decide` / `fleet-state` / `fleet-list`.
+- **The panel**: a recipient picker (default "all"), a thread chip on messages that belong to a thread, click-to-reply with
+  a quoted line above the input, and the reply thread travelling with it. The host route refuses a single recipient that
+  is not in this fleet (`CHAT_UNKNOWN_RECIPIENT`) and says `CHAT_ROSTER_UNAVAILABLE` when the roster could not be read at
+  all -- a relay outage is not a typo in the recipient.
+- **A readable view over memory**: `w2m_memory` read now returns `view` (counts by machine and by status, one line per
+  record). A row shape it does not recognise is shown as itself rather than dropped.
+- **The beta pipeline is repeatable**: creating the tag had triggered a run that created the release, so the explicit
+  dispatch collided with it. The step now refreshes an existing release instead of refusing.
+
+### Verified
+
+Gate GREEN twice, 15 of 15: 2550 tests / 2536 pass / 0 fail / 14 skip. tools 125 (three append cases), council-fleet 12,
+memory-view 6, client-bundle 25.
+
+### Not verified
+
+The fleet council and a directed message across two live machines, and the panel against a second machine. Those need two
+machines on this build.
 
 ## [1.2.1] — 2026-10-18
 

package/codex/mcp-servers.toml

@@ -12,6 +12,6 @@
 
 [mcp_servers.w2m-fleet]
 command = "npx"
-args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.2.2", "w2m-mcp"]
+args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.2.3", "w2m-mcp"]
 startup_timeout_sec = 20
 tool_timeout_sec = 60

package/lib/client.js

@@ -300,6 +300,12 @@ window.__ModuleLoader__.load({
         '.w2mChat_replyCancel{margin-left:auto;border:none;background:none;color:var(--dsw-alias-label-secondary);cursor:pointer}',
         '.w2mChat_msg{cursor:pointer}',
         '.w2mChat_thread{margin-left:6px;opacity:.7}',
+        '.w2mChat_threadHead{font-size:11px;color:var(--dsw-alias-label-tertiary);padding:4px 10px 0}',
+        '.w2mChat_board{display:flex;flex-direction:column;gap:2px;padding:6px 10px;border-bottom:.5px solid var(--dsw-alias-border-default)}',
+        '.w2mChat_boardTitle{font-size:11px;color:var(--dsw-alias-label-tertiary)}',
+        '.w2mChat_boardRow{font-size:11px;color:var(--dsw-alias-label-secondary);font-family:ui-monospace,monospace}',
+        '.w2mChat_threadHead{font-size:11px;color:var(--dsw-alias-label-tertiary);padding:4px 10px 0}',
+        '.w2mChat_unseen{margin-left:6px;min-width:16px;padding:0 5px;border-radius:8px;background:var(--dsw-alias-accent-default);color:var(--dsw-alias-label-on-accent);font-size:10px;line-height:16px;text-align:center}',
       '.w2mChat_text{white-space:pre-wrap;word-break:break-word}',
         '.w2mChat_msg.is-session .w2mChat_text{color:var(--dsw-danger)}',         '.w2mChat_msg.is-chat .w2mChat_text{color:var(--dsw-success)}',         '.w2mChat_msg.is-remote .w2mChat_text{color:var(--dsw-text)}',         '.w2mChat_avatar{display:inline-flex;width:16px;height:16px;margin-right:5px;vertical-align:-3px}',
       '.w2mChat_compose{display:flex;gap:8px;padding:8px 10px;border-top:.5px solid var(--dsw-alias-border-l2);align-items:flex-end}',
@@ -621,6 +627,16 @@ window.__ModuleLoader__.load({
       const [roster, setRoster] = React.useState(null);
       const [toRecipient, setToRecipient] = React.useState('all');
       const [replyTo, setReplyTo] = React.useState(null);
+      const [tasks, setTasks] = React.useState([]);
+      const [lastSeenMs, setLastSeenMs] = React.useState(() => {
+        try {
+          const raw = globalThis.localStorage?.getItem('w2m:chat:seen:' + sessionId);
+          const parsed = Number.parseInt(raw ?? '', 10);
+          return Number.isFinite(parsed) ? parsed : 0;
+        } catch {
+          return 0;
+        }
+      });
       const [text, setText] = React.useState('');
       const [error, setError] = React.useState(null);
       const [busy, setBusy] = React.useState(false);
@@ -666,6 +682,40 @@ window.__ModuleLoader__.load({
         });
         return () => controller.abort();
       }, [open, sessionId]);
+
+      // The task board is the relay's own list: the host proxies it so the panel never holds a device token.
+      React.useEffect(() => {
+        if (!open) return undefined;
+        const controller = new AbortController();
+        chatCall({ url: '/api/w2m/tasks?limit=20', init: { signal: controller.signal } })
+          .then((result) => { if (!controller.signal.aborted) setTasks(result.ok && Array.isArray(result.data?.tasks) ? result.data.tasks : []); })
+          .catch(() => { /* the board is an extra; a failed read must not break the chat */ });
+        return () => controller.abort();
+      }, [open]);
+
+      // Unread is measured against a per-conversation watermark in local storage: the relay stays stateless, and
+      // the count answers "is there anything I have not looked at" without claiming which messages a machine read.
+      React.useEffect(() => {
+        if (!open || messages.length === 0) return undefined;
+        const latest = messages.reduce((max, message) => (Number.isFinite(message?.at_ms) ? Math.max(max, message.at_ms) : max), 0);
+        if (latest <= 0 || latest <= lastSeenMs) return undefined;
+        setLastSeenMs(latest);
+        try { globalThis.localStorage?.setItem('w2m:chat:seen:' + sessionId, String(latest)); } catch { /* storage may be unavailable */ }
+        return undefined;
+      }, [open, messages, sessionId, lastSeenMs]);
+
+      // Consecutive messages that share a thread are shown under one thread head. Grouping only consecutive runs keeps
+      // the reading order the relay assigned -- re-sorting by thread would put an answer above the question it answers.
+      const groupThreads = (list) => {
+        const groups = [];
+        for (const message of list ?? []) {
+          const threadId = typeof message?.thread_id === 'string' && message.thread_id !== '' ? message.thread_id : null;
+          const last = groups[groups.length - 1] ?? null;
+          if (last !== null && last.threadId === threadId) { last.messages.push(message); continue; }
+          groups.push({ threadId, messages: [message] });
+        }
+        return groups;
+      };
 
       const send = React.useCallback(async () => {
         const value = text.trim();
@@ -696,6 +746,7 @@ window.__ModuleLoader__.load({
         return undefined;
       }, [busy, load, sessionId, text]);
 
+      const unseenCount = messages.reduce((count, message) => (Number.isFinite(message?.at_ms) && message.at_ms > lastSeenMs ? count + 1 : count), 0);
       const disabled = typeof sessionId !== 'string' || sessionId === '';
       const usageText = usage === null ? null : `${Math.round((usage.used_24h_bytes ?? 0) / 1024)} KiB/24h · ${usage.messages ?? 0} 条`;
       const machineLabel = (message) => {
@@ -722,7 +773,7 @@ window.__ModuleLoader__.load({
           'aria-expanded': open,
           disabled,
           onClick: () => setOpen((value) => !value),
-        }, '💬', h('span', { className: 'w2mChat_label' }, '编队聊天')),
+        }, '💬', h('span', { className: 'w2mChat_label' }, '编队聊天'), unseenCount > 0 && !open ? h('span', { className: 'w2mChat_unseen' }, String(unseenCount)) : null),
         open
           ? h('div', { className: 'w2mChat_panel', role: 'dialog', 'aria-label': '编队聊天' },
               h('div', { className: 'w2mChat_head' },
@@ -738,16 +789,24 @@ window.__ModuleLoader__.load({
                 h('span', null, '编队聊天'),
                 usageText === null ? null : h('span', { className: 'w2mChat_usage' }, usageText),
                 h('button', { type: 'button', className: 'w2mChat_close', title: '关闭', onClick: () => setOpen(false) }, '×')),
+              tasks.length === 0 ? null : h('div', { className: 'w2mChat_board' }, [
+                h('div', { key: 'title', className: 'w2mChat_boardTitle' }, '任务看板'),
+                ...tasks.slice(0, 6).map((task) => h('div', { key: String(task?.task_id ?? Math.random()), className: 'w2mChat_boardRow' },
+                  `${String(task?.task_id ?? '').slice(0, 8)}  ${task?.mode ?? '?'}  ${task?.status ?? '?'}`)),
+              ]),
               h('div', { className: 'w2mChat_list' },
                 error !== null ? h('div', { className: 'w2mChat_error' }, error) : null,
                 messages.length === 0
                   ? (error === null ? h('div', { className: 'w2mChat_empty' }, '本会话还没有消息') : null)
-                  : messages.map((message) => {
+                  : groupThreads(messages).flatMap((group, groupIndex) => [
+                      group.threadId === null ? null : h('div', { key: 'thread:' + group.threadId + ':' + groupIndex, className: 'w2mChat_threadHead' }, '#' + group.threadId),
+                      ...group.messages.map((message) => {
                       var kind = messageKind(message, localMachineId);
                       return h('div', { key: message?.message_id ?? `${message?.machine_id}:${message?.at_ms}`, className: 'w2mChat_msg is-' + kind, onClick: () => setReplyTo({ id: message?.message_id ?? null, threadId: message?.thread_id ?? null, text: typeof message?.text === 'string' ? message.text : '' }) },
                         h('div', { className: 'w2mChat_meta' }, h(WhaleAvatar, { machineId: message?.machine_id }), `${machineLabel(message)} · ${timeLabel(message)}`, kind === 'session' ? ' · 来自会话' : '', message?.thread_id ? h('span', { className: 'w2mChat_thread' }, '#' + message.thread_id) : null),
                         h('div', { className: 'w2mChat_text' }, message?.text ?? ''));
-                    })),
+                      }),
+                    ].filter((node) => node !== null))),
 
 
               h('div', { className: 'w2mChat_compose' },

package/package.json

@@ -1,6 +1,6 @@
 {
     "name":  "@twinsearth/w2m-dsh-plugin",
-    "version":  "1.2.2",
+    "version":  "1.2.3",
     "description":  "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
     "type":  "module",
     "exports":  {
@@ -64,14 +64,14 @@
                     "pack":  "node scripts/pack.mjs",
                     "reachability":  "node scripts/reachability-check.mjs",
                     "reachability:classify":  "node scripts/reachability-classify.mjs",
-                    "test":  "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs",
+                    "test":  "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs",
                     "test:acceptance-doc":  "node --test --test-force-exit test/acceptance-doc.test.mjs",
                     "test:account-identity":  "node --test --test-force-exit test/account-identity.test.mjs",
                     "test:account-join":  "node --test --test-force-exit test/account-join.test.mjs",
                     "test:admission":  "node --test --test-force-exit test/admission.test.mjs",
                     "test:admission-routes":  "node --test --test-force-exit test/admission-routes.test.mjs",
                     "test:agent":  "node --test --test-force-exit test/agent.test.mjs test/memory.test.mjs",
-                    "test:all":  "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-agent.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/p2p-crypto.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs",
+                    "test:all":  "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-agent.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/p2p-crypto.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs",
                     "test:approval-gate":  "node --test --test-force-exit test/approval-gate.test.mjs",
                     "test:approval-index":  "node --test --test-force-exit test/approval-index.test.mjs",
                     "test:authority":  "node --test --test-force-exit test/authority.test.mjs",
@@ -126,7 +126,9 @@
                     "test:dataflow":  "node --test --test-force-exit test/dataflow.test.mjs",
                     "test:council-fleet":  "node --test --test-force-exit test/council-fleet.test.mjs",
                     "test:fleet-memory":  "node --test --test-force-exit test/fleet-memory.test.mjs",
-                    "test:memory-view":  "node --test --test-force-exit test/memory-view.test.mjs"
+                    "test:memory-view":  "node --test --test-force-exit test/memory-view.test.mjs",
+                    "test:schema-spec":  "node --test --test-force-exit test/schema-spec.test.mjs",
+                    "test:fleet-weight-parity":  "node --test --test-force-exit test/fleet-weight-parity.test.mjs"
                 },
     "devDependencies":  {
                             "@eslint/js":  "^10.0.1",

package/plugin.json

@@ -1,7 +1,7 @@
 {
     "$schema":  "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
     "name":  "twinsearth-w2m-dsh",
-    "version":  "1.2.2",
+    "version":  "1.2.3",
     "description":  "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 12 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
     "license":  "MIT",
     "keywords":  [

package/src/plugin/fleet-chat-route.mjs

@@ -42,7 +42,10 @@ function newestTranscript(cwd) {
   return best === null ? null : best.file;
 }
 
-export const CHAT_ROUTE_PATH = '/api/w2m/chat';
+export const CHAT_ROUTE_PATH = '/api/w2m/chat';
+
+/** The light task board the panel shows beside the chat. The relay already answers GET /v1/tasks. */
+export const TASKS_ROUTE_PATH = '/api/w2m/tasks';
 export const MAX_SESSION_ID_LENGTH = 200;
 
 const NO_STORE = { 'cache-control': 'no-store' };
@@ -284,6 +287,48 @@ export function registerChatRoutes(ctx, deps) {
           }
         },
       });
+      // A light task board. The relay answers GET /v1/tasks; this proxy exists so the panel can read it with the device
+      // token that never leaves the host.
+      registry.register({
+        path: TASKS_ROUTE_PATH,
+        methods: ['GET'],
+        requestBody: 'buffered',
+        fetch: async (request) => {
+          const refuse = (httpStatus, reasonCode, error, detail) =>
+            Response.json({ ok: false, error, reason_code: reasonCode, detail }, { status: httpStatus, headers: NO_STORE });
+          if (request.method !== 'GET') {
+            return refuse(405, 'TASKS_METHOD_NOT_ALLOWED', `${request.method} is not answered here`, 'GET only');
+          }
+          const url = new URL(request.url);
+          const limitRaw = url.searchParams.get('limit');
+          const limit = limitRaw !== null && /^[0-9]+$/.test(limitRaw) ? Math.min(Number(limitRaw), 50) : 20;
+          const cfg = deps.cfg();
+          const rabbitUrl = cfg?.rabbitUrl ?? null;
+          if (rabbitUrl === null) return refuse(503, 'TASKS_NO_RELAY', 'no relay is configured', 'set rabbitUrl in the profile patch');
+          let token;
+          try {
+            token = await deps.resolveToken();
+          } catch (error) {
+            return refuse(503, 'TASKS_UNPAIRED', `this machine has no device token: ${error instanceof Error ? error.message : String(error)}`, 'pair the machine first');
+          }
+          if (typeof token !== 'string' || token === '') {
+            return refuse(503, 'TASKS_UNPAIRED', 'this machine has no device token', 'pair the machine first');
+          }
+          try {
+            const listed = await deps.request({
+              rabbitUrl, token, method: 'GET', pathname: '/v1/tasks', query: { limit: String(limit) }, signal: request.signal,
+            });
+            if (listed?.ok !== true) {
+              const code = listed?.json?.error?.code ?? 'TASKS_LIST_REFUSED';
+              return refuse(502, code, `the relay answered HTTP ${listed?.status ?? 0}`, 'the relay must run a version with /v1/tasks');
+            }
+            return Response.json({ ...listed.json, ok: true }, { headers: NO_STORE });
+          } catch (error) {
+            return refuse(502, 'TASKS_RELAY_ERROR', `the relay call failed: ${error instanceof Error ? error.message : String(error)}`, null);
+          }
+        },
+      });
+
       status.mounted = true;
       status.reason = null;
       const timer = setInterval(() => { mirrorOnce().catch(() => { /* one bad tick must not stop the next */ }); }, 2000);

package/src/plugin/schema-spec.mjs

@@ -0,0 +1,49 @@
+/**
+ * Authoring rules DSH enforces on tool schemas, checked here so the failure happens at build time in this repository
+ * rather than at mount time in someone else's profile.
+ *
+ * The rule this exists for: DSH's `parameterSchemaSpecToJsonSchema` requires an EXPLICIT `additionalProperties` on every
+ * `type: 'object'` node and throws otherwise. Local tests passed while the packed artifact failed in a real profile,
+ * which is exactly the gap a pure checker closes: the same walk runs in the suite and at registration.
+ */
+
+/**
+ * Every `type: 'object'` node in a JSON-schema-shaped value, with its path.
+ *
+ * @param {unknown} schema
+ * @param {string} [path]
+ * @returns {Array<{path: string, node: object}>}
+ */
+export function objectNodes(schema, path = 'schema') {
+  const found = [];
+  if (schema === null || typeof schema !== 'object') return found;
+  const node = schema;
+  if (node.type === 'object') found.push({ path, node });
+  if (node.properties !== null && typeof node.properties === 'object') {
+    for (const [name, child] of Object.entries(node.properties)) {
+      found.push(...objectNodes(child, path + '.properties.' + name));
+    }
+  }
+  if (node.items !== undefined) found.push(...objectNodes(node.items, path + '[]'));
+  for (const key of ['oneOf', 'anyOf', 'allOf']) {
+    if (Array.isArray(node[key])) {
+      node[key].forEach((child, index) => found.push(...objectNodes(child, path + '.' + key + '[' + index + ']')));
+    }
+  }
+  return found;
+}
+
+/**
+ * The problems a schema would be refused for, as `{path, why}` values rather than a thrown error, so a caller can report
+ * all of them at once instead of fixing one per run.
+ *
+ * @param {unknown} schema
+ * @param {string} [name] tool name, used in the path
+ * @returns {Array<{path: string, why: string}>}
+ */
+export function schemaProblems(schema, name = 'tool') {
+  return objectNodes(schema, 'parameters')
+    .filter(({ node }) => typeof node.additionalProperties !== 'boolean')
+    .map(({ path }) => ({ path: path + '.additionalProperties', why: 'an object parameter must state additionalProperties: true or false' }))
+    .map((problem) => ({ ...problem, path: name + '.' + problem.path }));
+}

package/src/plugin/tools.mjs

@@ -185,6 +185,7 @@ import {
 import { registerChatRoutes } from './fleet-chat-route.mjs';
 import { createFleetCouncil, fleetCouncilThread } from './council-fleet.mjs';
 import { renderMemoryView } from './memory-view.mjs';
+import { schemaProblems } from './schema-spec.mjs';
 import { listIntents, resolveIntent } from './intents.mjs';
 // v0.7.0: the LAN hint layer. Imported here and used in exactly one place (`w2m_devices`); see the
 // module header for why a discovered device is a candidate to *ask* and never an authorisation.
@@ -223,7 +224,7 @@ const MAX_STAGES = 16;
  * `package.json` during `scripts/pack.mjs` rather than hand-maintained, and `W2M_PLUGIN_VERSION`
  * overrides it at runtime for tests and packagers.
  */
-const PLUGIN_VERSION = '1.2.2';
+const PLUGIN_VERSION = '1.2.3';
 
 /** How long any single HTTP call may take before it is aborted, in milliseconds. */
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;
@@ -556,6 +557,15 @@ function createDefineTool(real) {
       parameters[key] = normaliseParameter(name, key, decl);
     }
 
+    // v1.2.3: DSH refuses an object parameter that does not state additionalProperties explicitly, and it
+    // refuses it at MOUNT time -- in the profile of whoever installed the build. That is the failure the packed
+    // artifact hit in a real host while this repository tests were green, so the rule is enforced here, where
+    // every tool already passes through.
+    const schemaProblemsFound = schemaProblems({ type: 'object', properties: parameters, additionalProperties: false }, name);
+    if (schemaProblemsFound.length > 0) {
+      throw new TypeError(schemaProblemsFound.map((problem) => problem.path + ': ' + problem.why).join('; '));
+    }
+
     return { ...definition, parameters };
   };
 
@@ -6173,7 +6183,7 @@ export async function apply(ctx, config = {}) {
           skipped_lines: current.skipped,
           truncated: current.truncated,
           status_tally: tally(current.records),
-          records: current.records,
+          records: current.records,
           view: renderMemoryView(current.records),
           ...(previous === null
             ? {}
@@ -6508,7 +6518,11 @@ export async function apply(ctx, config = {}) {
       'command the machine allow-list does not carry is refused with the list it checked.',
     parameters: {
       action: { type: 'string', description: 'The catalog action; call with action:"list" to read the catalog.' },
-      params: { type: 'object', description: 'Action parameters, for example { n: 3 } for shard-probe.' },
+      params: {
+        type: 'object',
+        additionalProperties: true,
+        description: 'Action parameters, for example { n: 3 } for shard-probe.',
+      },
     },
     output: jsonOutput,
     presentCall: (args) => ({ card: 'generic', title: 'w2m intent ' + (typeof args?.action === 'string' ? args.action : '?'), kind: 'read', rawInput: {} }),
@@ -6609,7 +6623,29 @@ export async function apply(ctx, config = {}) {
         }
         if (action === 'fleet-decide') {
           const decided = fleetCouncil.decide({ councilId: id });
-          return JSON.stringify({ ok: decided.ok, action, council_id: id, thread_id: threadId, reason_code: decided.code ?? null, detail: decided.detail ?? null, council: decided.council ?? null });
+          // The decision travels as an append-only memory record: a decision that exists only in one process memory
+          // is a decision nobody can audit later. Writing it is best-effort -- the outcome is returned either way and
+          // `trail` says which happened, rather than implying the record exists when it does not.
+          let trail = 'not-written';
+          if (decided.ok === true && decided.council?.decision != null) {
+            try {
+              const trailUrl = cfg?.rabbitUrl ?? null;
+              const trailToken = trailUrl === null ? null : await resolveToken(cfg);
+              if (trailUrl !== null && typeof trailToken === 'string' && trailToken !== '') {
+                const decision = decided.council.decision;
+                const line = 'council ' + String(id) + ': ' + String(decision.choice) + ' (weight ' + String(decision.weight) + ', '
+                  + String(decided.council.ballots.length) + ' ballot(s))';
+                const appended = await request({
+                  rabbitUrl: trailUrl, token: trailToken, method: 'PUT',
+                  pathname: '/v1/fleet/memory/fleet', body: { records: [line] }, signal: exec?.signal,
+                });
+                trail = appended?.ok === true ? 'appended' : 'refused';
+              }
+            } catch {
+              trail = 'error';
+            }
+          }
+          return JSON.stringify({ ok: decided.ok, action, council_id: id, thread_id: threadId, reason_code: decided.code ?? null, detail: decided.detail ?? null, trail, council: decided.council ?? null });
         }
         if (action === 'fleet-list') {
           return JSON.stringify({ ok: true, action, ...fleetCouncil.list() });