@twinsearth/w2m-dsh-plugin 1.2.3 → 1.2.6

package/codex/mcp-servers.toml

@@ -12,6 +12,6 @@
 
 [mcp_servers.w2m-fleet]
 command = "npx"
-args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.2.3", "w2m-mcp"]
+args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.2.6", "w2m-mcp"]
 startup_timeout_sec = 20
 tool_timeout_sec = 60

package/package.json

@@ -1,6 +1,6 @@
 {
     "name":  "@twinsearth/w2m-dsh-plugin",
-    "version":  "1.2.3",
+    "version":  "1.2.6",
     "description":  "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
     "type":  "module",
     "exports":  {
@@ -64,14 +64,14 @@
                     "pack":  "node scripts/pack.mjs",
                     "reachability":  "node scripts/reachability-check.mjs",
                     "reachability:classify":  "node scripts/reachability-classify.mjs",
-                    "test":  "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs",
+                    "test":  "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs test/task-deps.test.mjs test/dataflow-wiring.test.mjs test/task-graph.test.mjs test/ask-store.test.mjs test/turn.test.mjs test/fleet-members.test.mjs test/redact.test.mjs test/policy-matrix.test.mjs test/envelope-signature.test.mjs test/chat-crypto.test.mjs",
                     "test:acceptance-doc":  "node --test --test-force-exit test/acceptance-doc.test.mjs",
                     "test:account-identity":  "node --test --test-force-exit test/account-identity.test.mjs",
                     "test:account-join":  "node --test --test-force-exit test/account-join.test.mjs",
                     "test:admission":  "node --test --test-force-exit test/admission.test.mjs",
                     "test:admission-routes":  "node --test --test-force-exit test/admission-routes.test.mjs",
                     "test:agent":  "node --test --test-force-exit test/agent.test.mjs test/memory.test.mjs",
-                    "test:all":  "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-agent.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/p2p-crypto.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs",
+                    "test:all":  "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-agent.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/p2p-crypto.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs test/task-deps.test.mjs test/dataflow-wiring.test.mjs test/task-graph.test.mjs test/ask-store.test.mjs test/turn.test.mjs test/fleet-members.test.mjs test/redact.test.mjs test/policy-matrix.test.mjs test/envelope-signature.test.mjs test/chat-crypto.test.mjs",
                     "test:approval-gate":  "node --test --test-force-exit test/approval-gate.test.mjs",
                     "test:approval-index":  "node --test --test-force-exit test/approval-index.test.mjs",
                     "test:authority":  "node --test --test-force-exit test/authority.test.mjs",
@@ -128,7 +128,17 @@
                     "test:fleet-memory":  "node --test --test-force-exit test/fleet-memory.test.mjs",
                     "test:memory-view":  "node --test --test-force-exit test/memory-view.test.mjs",
                     "test:schema-spec":  "node --test --test-force-exit test/schema-spec.test.mjs",
-                    "test:fleet-weight-parity":  "node --test --test-force-exit test/fleet-weight-parity.test.mjs"
+                    "test:fleet-weight-parity":  "node --test --test-force-exit test/fleet-weight-parity.test.mjs",
+                    "test:task-deps":  "node --test --test-force-exit test/task-deps.test.mjs",
+                    "test:dataflow-wiring":  "node --test --test-force-exit test/dataflow-wiring.test.mjs",
+                    "test:task-graph":  "node --test --test-force-exit test/task-graph.test.mjs",
+                    "test:ask-store":  "node --test --test-force-exit test/ask-store.test.mjs",
+                    "test:turn":  "node --test --test-force-exit test/turn.test.mjs",
+                    "test:fleet-members":  "node --test --test-force-exit test/fleet-members.test.mjs",
+                    "test:redact":  "node --test --test-force-exit test/redact.test.mjs",
+                    "test:policy-matrix":  "node --test --test-force-exit test/policy-matrix.test.mjs",
+                    "test:envelope-signature":  "node --test --test-force-exit test/envelope-signature.test.mjs",
+                    "test:chat-crypto":  "node --test --test-force-exit test/chat-crypto.test.mjs"
                 },
     "devDependencies":  {
                             "@eslint/js":  "^10.0.1",

package/plugin.json

@@ -1,7 +1,7 @@
 {
     "$schema":  "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
     "name":  "twinsearth-w2m-dsh",
-    "version":  "1.2.3",
+    "version":  "1.2.6",
     "description":  "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 12 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
     "license":  "MIT",
     "keywords":  [

package/src/agent/agent.mjs

@@ -25,7 +25,7 @@ import { Readable } from 'node:stream';
 import { access, constants as fsConstants } from 'node:fs/promises';
 import { existsSync, mkdirSync, renameSync, unlinkSync, writeFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
-import { randomUUID } from 'node:crypto';
+import { randomUUID , sign as signBytes } from 'node:crypto';
 
 import {
   EMPTY_SHA256,
@@ -50,10 +50,13 @@ import {
 import { createSpool } from './spool.mjs';
 import { MEMORY_FILE, appendMemory, memoryRecord } from './memory.mjs';
 import { matchAllowedCommand, parseAllowedCommands } from './allowed-commands.mjs';
-import { CRYPTO_REASON, DEVICE_KEY_FILE, DeviceKey, PeerKeyStore } from './crypto.mjs';
+import { CRYPTO_REASON, DEVICE_KEY_FILE, DeviceKey, PeerKeyStore, deriveSigningKey } from './crypto.mjs';
 import { DEFAULT_P2P_MODE, P2P_DEFAULTS, P2PNode, normalizeP2PMode, normalizeP2PPort } from './p2p-node.mjs';
 import { punchSession, reverseDialSession } from './p2p.mjs';
 import { createSigner } from '../signing.mjs';
+import { planStageOutput } from '../util/dataflow.mjs';
+import { redactEnvelope } from '../util/redact.mjs';
+import { canonicalSignedPayload } from '../util/envelope-signature.mjs';
 import { joinUrl, resolveBaseUrl } from './url.mjs';
 
 /** Wire protocol version (§1). */
@@ -996,6 +999,8 @@ export function createAgent(options) {
     fetchImpl = globalThis.fetch,
     heartbeatIntervalMs = HEARTBEAT_INTERVAL_MS,
     maxOutputBytes,
+    // v1.2.6: filter secrets out of the readable envelope fields. Off is allowed and marked `unredacted: true`.
+    redactOutput = true,
     objectMode = 'temp',
     tmpDir,
     onceIdleMs = 0,
@@ -2208,6 +2213,42 @@ export function createAgent(options) {
     return result;
   }
 
+  /**
+   * PUT one stage's stdout to the relay's content-addressed blob store (v1.2.4).
+   *
+   * The relay's blob route is device-gated and content-addressed: the name IS the hash, so a body that does not hash to it
+   * would be stored under the wrong name. The caller hashes first and passes that name, which also means the assistant's
+   * envelope can refer to the blob before the upload finishes without inventing an identifier.
+   *
+   * Returns the refusal instead of throwing: a pipeline stage fails as a stage, with BLOB_UPLOAD_FAILED, because that is
+   * the fact a reader needs. `{ status }` is the HTTP status when there was a response, 0 when the call itself failed.
+   *
+   * @param {string} sha256
+   * @param {string} body
+   * @returns {Promise<{ok: boolean, status: number, sha256?: string, code?: string}>}
+   */
+  async function putBlobBytes(sha256, body) {
+    const path = `/v1/fleet/blobs/${sha256}`;
+    // The stage's stdout arrives as a Buffer. Work on BYTES: the name must be the hash of exactly what is sent, and the
+    // signature must cover those same bytes -- decoding and re-encoding would replace invalid UTF-8 and change the hash.
+    const bytes = Buffer.isBuffer(body) ? body : Buffer.from(String(body ?? ''), 'utf8');
+    const headers = { 'content-type': 'application/octet-stream', accept: 'application/json' };
+    if (token()) headers.authorization = `Bearer ${token()}`;
+    Object.assign(headers, signingHeaders('PUT', path, bytes.toString('utf8')));
+    try {
+      const response = await fetchImpl(url(path), { method: 'PUT', headers, body: bytes });
+      if (response.ok) return { ok: true, status: response.status, sha256 };
+      let code = `HTTP_${response.status}`;
+      try {
+        const parsed = JSON.parse(await response.text());
+        if (typeof parsed?.error?.code === 'string') code = parsed.error.code;
+      } catch { /* the code is then the HTTP status, which is still a name */ }
+      return { ok: false, status: response.status, code };
+    } catch (error) {
+      return { ok: false, status: 0, code: error instanceof Error ? 'BLOB_UPLOAD_FAILED' : 'BLOB_UPLOAD_FAILED' };
+    }
+  }
+
   /** @param {string} path @param {object} body @param {number} [retries] */
   async function postJsonWithRetry(path, body, retries = resultRetries) {
     let lastError = null;
@@ -2295,6 +2336,15 @@ export function createAgent(options) {
       platform,
       caps,
     };
+    /**
+     * v1.2.6: the public half of this machine's envelope-signing key. It is not a secret, and pairing is the one moment the
+     * relay has a reason to believe it belongs to this machine -- so a later result can be checked against the key that was
+     * registered here rather than against whichever key the result happens to carry.
+     */
+    {
+      const signing = deriveSigningKey(deviceKey);
+      if (signing !== null) body.public_key = signing.publicKeyBase64;
+    }
     /**
      * Send only the discriminator that was actually given.
      *
@@ -2520,6 +2570,7 @@ export function createAgent(options) {
       anchorsBefore,
       anchorsAfter,
       execution,
+      blobSha256 = null,
       status,
       refusalReason,
       warnings,
@@ -2591,14 +2642,17 @@ export function createAgent(options) {
       refusal_reason: refusalReason ?? null,
       stdout_sha256: execution ? execution.stdout_sha256 : EMPTY_SHA256,
       stdout_bytes: execution ? execution.stdout_bytes : 0,
+      ...(blobSha256 === null ? {} : { blob_sha256: blobSha256, output_mode: 'blob' }),
       stderr_sha256: execution ? execution.stderr_sha256 : EMPTY_SHA256,
       stderr_bytes: execution ? execution.stderr_bytes : 0,
       warnings,
       // Optional fields (§5.2): present on both machines for the same task, so
       // they stay comparable; head/tail are informational only.
       stdout_normalized_sha256: sha256Hex(normalized),
-      stdout_head: execution?.stdout_head ?? '',
-      stdout_tail: execution?.stdout_tail ?? '',
+      // v1.2.4: when the stage's output became a blob, the envelope names it and does NOT also inline the first/last 4 KiB --
+      // carrying both would make two readers disagree about which one is authoritative.
+      stdout_head: blobSha256 === null ? (execution?.stdout_head ?? '') : '',
+      stdout_tail: blobSha256 === null ? (execution?.stdout_tail ?? '') : '',
       stderr_head: execution?.stderr_head ?? '',
       stderr_tail: execution?.stderr_tail ?? '',
       untracked: anchorsAfter?.untracked ?? anchorsBefore?.untracked ?? [],
@@ -2606,6 +2660,18 @@ export function createAgent(options) {
       toolchain: toolchain ?? null,
     };
     if (execution?.signal) envelope.signal = execution.signal;
+
+    /**
+     * v1.2.6: secrets a command printed are replaced before the envelope leaves this machine. The hashes above stay the
+     * evidence of the raw bytes; only the readable heads/tails are filtered. `redactOutput: false` disables it and marks the
+     * envelope `unredacted: true`, because a silent no-op would be worse than no redaction.
+     */
+    if (redactOutput !== false) {
+      const filtered = redactEnvelope(envelope, { enabled: true });
+      Object.assign(envelope, filtered.envelope);
+    } else {
+      envelope.unredacted = true;
+    }
     if (offer.write === true) envelope.write = true;
 
     // v0.3.3 `pipeline` (§5.2 optional). Present only for a chain, so a single-command envelope is
@@ -2671,6 +2737,32 @@ export function createAgent(options) {
       ? { written: true, file: MEMORY_FILE, rotated: memoryWrite.rotated === true }
       : { written: false, reason_code: memoryWrite.error };
 
+    /**
+     * v1.2.6: sign the four facts that identify THE COMMAND. The signature covers the tuple only, because everything else in
+     * the envelope is a report about the run rather than a claim about which command ran. `unsigned` is a fact a reader can
+     * see (an older build, or no device key); it is not silently claimed as signed.
+     */
+    const signingKey = deviceKey === null ? null : deriveSigningKey(deviceKey);
+    if (signingKey !== null) {
+      const payload = canonicalSignedPayload({
+        task_id: envelope.task_id,
+        argv_hash: envelope.command_hash,
+        machine_id: envelope.machine_id,
+        ts: endedAt,
+      });
+      try {
+        envelope.signature = {
+          alg: 'ed25519',
+          value: signBytes(null, Buffer.from(payload, 'utf8'), signingKey.privateKey).toString('base64'),
+          public_key: signingKey.publicKeyBase64,
+          ts: endedAt,
+        };
+      } catch {
+        // The failure is reported by the envelope arriving unsigned; a key that cannot sign must not fail the run.
+        // A key that cannot sign must not fail the run: the envelope simply arrives unsigned, which readers report.
+      }
+    }
+
     return buildEnvelope(envelope);
   }
 
@@ -2969,6 +3061,8 @@ export function createAgent(options) {
       const chainStartedAt = Date.now();
 
       const stageReports = [];
+      /** The last stage's blob reference, so the envelope can name it without re-deriving anything. */
+      let lastBlobSha256 = null;
       /** The last stage's execution, used for the envelope's top-level exit code and output hashes. */
       let execution = null;
       let stoppedAt = null;
@@ -3038,6 +3132,60 @@ export function createAgent(options) {
         for (const warning of ran.warnings) if (!warnings.includes(warning)) warnings.push(warning);
 
         const stageStatus = classifyExit(ran);
+        /**
+         * v1.2.4: a stage whose stdout is large leaves it as a blob, and the stage record carries the reference instead of
+         * the text. The upload is authoritative: a blob that did not land FAILS the stage (BLOB_UPLOAD_FAILED) rather than
+         * leaving a reference to nothing, because a reduce over a partial fleet that calls itself complete is worse than a
+         * failed stage.
+         */
+        const stagePlan = planStageOutput({
+          machineId: identity.machine_id,
+          stageIndex: stage.index,
+          stdoutBytes: ran.stdout_bytes,
+        });
+        if (stagePlan.ok !== true) {
+          stageReports.push({
+            index: stage.index,
+            command_argv: stage.command_argv,
+            cwd_rel: stageCwdOutcome.cwd_rel ?? stage.cwd_rel,
+            continue_on_failure: stage.continue_on_failure,
+            status: 'failed',
+            refusal_reason: stagePlan.code,
+            exit_code: ran.exit_code,
+            duration_ms: ran.duration_ms,
+            stdout_sha256: ran.stdout_sha256,
+            stderr_sha256: ran.stderr_sha256,
+          });
+          stoppedAt = stage.index;
+          break;
+        }
+        let blobSha256 = null;
+        if (stagePlan.mode === 'blob') {
+          // The agent caps what it keeps in memory; if that cap was hit the blob holds the same bytes the hash covers, and
+          // the warning says so instead of letting a reader assume the stage printed exactly this much.
+          if (ran.truncated_stdout === true && !warnings.includes('PIPELINE_STDOUT_TRUNCATED')) warnings.push('PIPELINE_STDOUT_TRUNCATED');
+          const uploaded = await putBlobBytes(ran.stdout_sha256, ran.stdout);
+          if (uploaded.ok !== true) {
+            log("warn", offer.task_id + " stage " + stage.index + ": blob upload failed", { code: uploaded.code });
+            stageReports.push({
+              index: stage.index,
+              command_argv: stage.command_argv,
+              cwd_rel: stageCwdOutcome.cwd_rel ?? stage.cwd_rel,
+              continue_on_failure: stage.continue_on_failure,
+              status: 'failed',
+              refusal_reason: 'BLOB_UPLOAD_FAILED',
+              detail: { code: uploaded.code, http_status: uploaded.status },
+              exit_code: ran.exit_code,
+              duration_ms: ran.duration_ms,
+              stdout_sha256: ran.stdout_sha256,
+              stderr_sha256: ran.stderr_sha256,
+            });
+            stoppedAt = stage.index;
+            break;
+          }
+          blobSha256 = uploaded.sha256;
+          lastBlobSha256 = blobSha256;
+        }
         stageReports.push({
           index: stage.index,
           command_argv: stage.command_argv,
@@ -3050,6 +3198,12 @@ export function createAgent(options) {
           duration_ms: ran.duration_ms,
           stdout_sha256: ran.stdout_sha256,
           stderr_sha256: ran.stderr_sha256,
+          ...(blobSha256 === null
+            ? {}
+            : {
+                blob_sha256: blobSha256,
+                output_mode: 'blob',
+              }),
         });
 
         if (ran.timed_out) log('warn', `${offer.task_id} stage ${stage.index} timed out`);
@@ -3081,6 +3235,7 @@ export function createAgent(options) {
         anchorsBefore,
         anchorsAfter,
         execution,
+        blobSha256: lastBlobSha256,
         status,
         refusalReason: null,
         warnings,
@@ -3350,6 +3505,9 @@ export function createAgent(options) {
     // envelope above and released with it, so a long-lived agent keeps one record per *live* task.
     releaseDialRecord(envelope.task_id);
     scheduleChannelRelease(envelope.task_id);
+
+
+
     return envelope;
   }
 

package/src/agent/crypto.mjs

@@ -336,6 +336,37 @@ export function rawPrivateOf(privateKey) {
  * stored: the public half is derived, which is what makes a hand-edited file unable to publish a
  * public key that does not match its private key.
  */
+/**
+ * v1.2.6: the Ed25519 key this machine signs envelopes with.
+ *
+ * ## Why derived rather than a second file
+ *
+ * `DeviceKey` is X25519: it does key agreement for the p2p handshake and cannot sign (the runtime refuses it outright). A second
+ * on-disk key would be a second thing to back up, rotate and lose. The device's 32-byte private scalar is a perfectly good
+ * Ed25519 seed, so the signing key is derived from it: one secret to protect, and a machine that re-pairs cannot end up with a
+ * signature key nobody can verify.
+ *
+ * The public half travels INSIDE the signature so a reader can verify the tuple without knowing this machine beforehand. Binding
+ * that key to the relay's device record is the remaining step for non-repudiation across machines -- recorded in the roadmap.
+ *
+ * @param {DeviceKey} deviceKey
+ * @returns {{privateKey: import('node:crypto').KeyObject, publicKeyBase64: string}|null}
+ */
+export function deriveSigningKey(deviceKey) {
+  if (!(deviceKey instanceof DeviceKey)) return null;
+  try {
+    const seed = rawPrivateOf(deviceKey.privateKey);
+    if (seed.length !== 32) return null;
+    const pkcs8 = Buffer.concat([Buffer.from('302e020100300506032b657004220420', 'hex'), seed]);
+    const privateKey = createPrivateKey({ key: pkcs8, format: 'der', type: 'pkcs8' });
+    const publicKey = createPublicKey(privateKey);
+    const raw = publicKey.export({ format: 'der', type: 'spki' }).subarray(-32);
+    return { privateKey, publicKeyBase64: raw.toString('base64') };
+  } catch {
+    return null;
+  }
+}
+
 export class DeviceKey {
   /**
    * @param {object} options

package/src/plugin/ask-store.mjs

@@ -0,0 +1,167 @@
+/**
+ * Open questions and their answers, on disk.
+ *
+ * ## Why a file, when the answer also arrives by chat
+ *
+ * An `await` that is answered while the asking process is being restarted has to survive the restart: the question is still
+ * the machine's question, and the answer is still an answer. Keeping the state in memory made the outcome depend on uptime.
+ *
+ * ## The two states that are easy to get wrong
+ *
+ * - **timeout is not final.** A late answer is recorded as `answered_after_timeout` rather than overwriting the timeout or
+ *   being dropped: the operator asked, something answered, and when it answered is a fact worth keeping.
+ * - **a settled question is never reopened.** `settle` on a decided ask returns the existing record with `settled: false`, so
+ *   two replies cannot race into one slot.
+ *
+ * Records are appended as JSON lines; `compact` rewrites atomically through a temporary file, which is the only writer of the
+ * whole file.
+ */
+import { mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+
+export const ASK_STATE = Object.freeze(['open', 'answered', 'refused', 'timeout', 'answered_after_timeout']);
+
+/** The states that are still waiting for something. */
+export const OPEN_STATES = Object.freeze(['open']);
+
+/**
+ * @param {{now?: () => number, maxRecords?: number}} [options]
+ */
+export function createAskStore(options = {}) {
+  const now = typeof options.now === 'function' ? options.now : () => Date.now();
+  const maxRecords = Number.isInteger(options.maxRecords) && options.maxRecords > 0 ? options.maxRecords : 2_000;
+  /** ask_id -> record */
+  const asks = new Map();
+  let seq = 0;
+  const file = typeof options.stateDir === 'string' && options.stateDir !== ''
+    ? join(options.stateDir, 'ask-store.jsonl')
+    : null;
+
+  /**
+   * Load whatever a previous process wrote. A malformed line is skipped rather than fatal: an unfinished write is the
+   * expected shape of a crash, and losing the whole store over the last line would be worse than losing the line.
+   */
+  if (file !== null) {
+    try {
+      const text = readFileSync(file, 'utf8');
+      for (const line of text.split('\n')) {
+        if (line.trim() === '') continue;
+        try { const record = JSON.parse(line); if (typeof record?.ask_id === 'string') asks.set(record.ask_id, record); } catch { /* one bad line */ }
+      }
+    } catch { /* no store yet */ }
+  }
+
+  /** Rewrite the file atomically: a reader never sees half a record. */
+  function persist() {
+    if (file === null) return;
+    try {
+      mkdirSync(dirname(file), { recursive: true });
+      const body = exportAll().map((record) => JSON.stringify(record)).join('\n') + '\n';
+      const temporary = file + '.tmp';
+      writeFileSync(temporary, body, 'utf8');
+      renameSync(temporary, file);
+    } catch { /* the in-memory store is still correct; persistence is best effort and says so by not throwing */ }
+  }
+
+  function openAsk(input = {}) {
+    const sessionId = typeof input.sessionId === 'string' && input.sessionId !== '' ? input.sessionId : null;
+    const messageId = typeof input.messageId === 'string' && input.messageId !== '' ? input.messageId : null;
+    if (sessionId === null || messageId === null) return { ok: false, code: 'ASK_BAD_INPUT' };
+    const askId = 'ask_' + (++seq) + '_' + now();
+    const record = {
+      ask_id: askId,
+      session_id: sessionId,
+      message_id: messageId,
+      thread_id: typeof input.threadId === 'string' ? input.threadId : null,
+      to: typeof input.to === 'string' ? input.to : null,
+      opened_at_ms: now(),
+      deadline_ms: now() + (Number.isFinite(input.timeoutMs) ? Math.max(1, input.timeoutMs) : 60_000),
+      state: 'open',
+      reply_message_id: null,
+      settled_at_ms: null,
+    };
+    asks.set(askId, record);
+    trim();
+    persist();
+    return { ok: true, ask: { ...record } };
+  }
+
+  function settle(askId, state, reply = {}) {
+    const record = asks.get(askId) ?? null;
+    if (record === null) return { ok: false, code: 'ASK_UNKNOWN', detail: { askId } };
+    if (!ASK_STATE.includes(state) || state === 'open') return { ok: false, code: 'ASK_BAD_STATE', detail: { state } };
+    if (record.state !== 'open' && record.state !== 'timeout') {
+      return { ok: true, ask: { ...record }, settled: false };
+    }
+    // A reply after the deadline is recorded as such: "answered late" and "answered" are different facts.
+    const late = record.state === 'timeout';
+    record.state = late ? 'answered_after_timeout' : state;
+    record.reply_message_id = typeof reply.messageId === 'string' ? reply.messageId : null;
+    record.settled_at_ms = now();
+    persist();
+    return { ok: true, ask: { ...record }, settled: true };
+  }
+
+  function expire(askId) {
+    const record = asks.get(askId) ?? null;
+    if (record === null) return { ok: false, code: 'ASK_UNKNOWN', detail: { askId } };
+    if (record.state !== 'open') return { ok: true, ask: { ...record }, expired: false };
+    record.state = 'timeout';
+    record.settled_at_ms = now();
+    persist();
+    return { ok: true, ask: { ...record }, expired: true };
+  }
+
+  function expireDue() {
+    const due = [];
+    for (const record of asks.values()) {
+      if (record.state === 'open' && record.deadline_ms <= now()) {
+        record.state = 'timeout';
+        record.settled_at_ms = now();
+        due.push(record.ask_id);
+      }
+    }
+    if (due.length > 0) persist();
+    return { ok: true, expired: due };
+  }
+
+  /** @param {{state?: string, sessionId?: string}} [filter] */
+  function list(filter = {}) {
+    const wanted = typeof filter.state === 'string' ? filter.state : null;
+    const session = typeof filter.sessionId === 'string' ? filter.sessionId : null;
+    return {
+      ok: true,
+      asks: [...asks.values()]
+        .filter((record) => (wanted === null || record.state === wanted) && (session === null || record.session_id === session))
+        .sort((a, b) => a.opened_at_ms - b.opened_at_ms)
+        .map((record) => ({ ...record })),
+    };
+  }
+
+  function restore(records) {
+    const restored = [];
+    for (const record of Array.isArray(records) ? records : []) {
+      const askId = typeof record?.ask_id === 'string' ? record.ask_id : null;
+      if (askId === null || !ASK_STATE.includes(record.state)) continue;
+      asks.set(askId, { ...record });
+      restored.push(askId);
+    }
+    persist();
+    return { ok: true, restored: restored.length };
+  }
+
+  /** The records that survive a restart, oldest first. */
+  function exportAll() {
+    return [...asks.values()].sort((a, b) => a.opened_at_ms - b.opened_at_ms).map((record) => ({ ...record }));
+  }
+
+  function trim() {
+    while (asks.size > maxRecords) {
+      const oldest = [...asks.values()].sort((a, b) => a.opened_at_ms - b.opened_at_ms)[0];
+      if (oldest === undefined) return;
+      asks.delete(oldest.ask_id);
+    }
+  }
+
+  return { openAsk, settle, expire, expireDue, list, restore, exportAll, _asks: asks };
+}

package/src/plugin/schema-spec.mjs

@@ -47,3 +47,36 @@ export function schemaProblems(schema, name = 'tool') {
     .map(({ path }) => ({ path: path + '.additionalProperties', why: 'an object parameter must state additionalProperties: true or false' }))
     .map((problem) => ({ ...problem, path: name + '.' + problem.path }));
 }
+
+
+/** Keys a parameter declaration may carry. Anything else is a typo or a parameter nested by accident. */
+const PARAM_KEYS = new Set(['type', 'items', 'description', 'default', 'required', 'enum', 'properties', 'additionalProperties', 'oneOf', 'anyOf']);
+
+/**
+ * Parameters nested inside another parameter's declaration.
+ *
+ * This is the shape that shipped in the 1.2.4 build: a parameter block pasted inside its predecessor. Every local schema check
+ * was green, and the real host refused the whole entry ("parameters.poll_ms.reducer_machine_id is not supported by the value
+ * schema DSL") -- because to JavaScript it is a perfectly good object.
+ *
+ * @param {Record<string, object>} parameters
+ * @param {string} [name]
+ * @returns {Array<{path: string, why: string}>}
+ */
+export function strayParameterProblems(parameters, name = 'tool') {
+  const problems = [];
+  for (const [key, decl] of Object.entries(parameters ?? {})) {
+    if (decl === null || typeof decl !== 'object') continue;
+    for (const nested of Object.keys(decl)) {
+      if (PARAM_KEYS.has(nested)) continue;
+      const looksLikeParameter = decl[nested] !== null && typeof decl[nested] === 'object' && typeof decl[nested].type === 'string';
+      if (looksLikeParameter) {
+        problems.push({
+          path: name + '.parameters.' + key + '.' + nested,
+          why: 'a parameter declaration is nested inside another parameter; move it to the parameters object',
+        });
+      }
+    }
+  }
+  return problems;
+}