@twinsearth/w2m-dsh-plugin 1.4.0 → 1.4.1

package/.claude-plugin/marketplace.json

@@ -5,14 +5,14 @@
   },
   "metadata": {
     "description": "The w2m fleet plugins: one account, many machines, any of Windows, macOS or Linux.",
-    "version": "1.4.0"
+    "version": "1.4.1"
   },
   "plugins": [
     {
       "name": "w2m-fleet",
       "source": "./",
       "description": "Read fleet state and dispatch commands across the machines registered to one account. Read-only MCP surface: the five exposed tools cannot change anything.",
-      "version": "1.4.0",
+      "version": "1.4.1",
       "author": {
         "name": "TwinsEarth"
       },
@@ -26,5 +26,5 @@
       ]
     }
   ],
-  "version": "1.4.0"
+  "version": "1.4.1"
 }

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "w2m-fleet",
   "description": "Drive the same project on online Windows, macOS and Linux machines from one account: read fleet state, dispatch commands and read results. The MCP surface is deliberately read-only.",
-  "version": "1.4.0",
+  "version": "1.4.1",
   "author": {
     "name": "TwinsEarth"
   },

package/CHANGELOG.md

@@ -7,6 +7,36 @@
 
 All notable changes to this project are documented here.
 
+## [1.4.1] — 2026-10-22
+
+**修复：授权模型在从未 bootstrap 的机器上不可用（真机发现）。**
+
+- relay 的 offer 对 **grant 任务**也携带 `operator_key`（此前只有 maintenance 请求携带）。在空 allow-list 的机器上，
+  agent 首次收到 offer 时据此 TOFU pin；修复前该机器只会得到 `GRANT_NO_PINNED_KEY`，即"显式授权"形同虚设。
+- 任务台账记录 `operator_key`，relay 重启回放恢复 `workspace / grant / grant_summary / maintenance / operator_key`：
+  修复前重启后 re-offer 会丢失授权字段，机器会以错误的理由拒绝任务。
+
+真机验收（relay 1.4.1 候选，TwinsEarth 插件 1.4.0、allow-list 为空）：
+
+- 无 grant 的 `node --version` → `COMMAND_NOT_ALLOWED`
+- operator grant 授权的 `node -e` → **ok**，输出 `{plugin:"1.4.0", pinned:"^1.4.0", node:"v24.21.0"}`
+- relay M1 diag（root runner）→ ok，66,046 bytes
+- 证据：`docs/acceptance/1.4.1/TWIN-GRANT-LIVE.json`、`M1-LIVE-DIAG.json`
+
+Verified: relay TOFU offer 测试 1/1、grant/ledger 相关 3/3；候选部署后真机全部通过。
+
+## [1.4.1-beta.1] — 2026-10-22
+
+**候选：授权模型在"从未 bootstrap 的机器"上可用。**
+
+- relay 的 offer 现在对 **grant 任务**也携带 `operator_key`（此前只有 maintenance 请求携带），首次见到该键的
+  agent 因此可以 TOFU pin；在此之前，空 allow-list 的新机器收到 grant 只会得到 `GRANT_NO_PINNED_KEY`。
+- 任务台账记录 `operator_key`，重启回放恢复 `workspace / grant / grant_summary / maintenance / operator_key`：
+  此前 relay 重启后 re-offer 的任务会丢失授权/工作区字段，机器会以错误的理由拒绝。
+- 真机验证路径：TwinsEarth（allow-list 为空、插件 1.4.0）用 operator grant 执行 `node -e` 读取版本。
+
+Verified: relay TOFU offer 测试 1/1，grant/ledger 相关 3/3；候选部署到 relay 后做真机验收。
+
 ## [1.4.0] — 2026-10-22
 
 **稳定版：执行授权、任务、协作三个模型的第一版落地。**

package/codex/mcp-servers.toml

@@ -12,6 +12,6 @@
 
 [mcp_servers.w2m-fleet]
 command = "npx"
-args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.4.0", "w2m-mcp"]
+args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.4.1", "w2m-mcp"]
 startup_timeout_sec = 20
 tool_timeout_sec = 60

package/docs/acceptance/1.4.1/M1-LIVE-DIAG.json

@@ -0,0 +1,17 @@
+{
+  "version": "1.4.1-beta.1",
+  "executed_at": "2026-10-22T04:32:10.058Z",
+  "executor": "lead",
+  "case": "M1-LIVE-DIAG",
+  "kind": "positive",
+  "machines": [
+    "1c14d7d2-d9e2-43dd-a7e5-eda98f4864bc"
+  ],
+  "requirement": "the 1.4.1 candidate executes a signed maintenance diag request on the relay host",
+  "task_id": "01M5GY2TVNKG3FB49WPCKGH9PA",
+  "result": {
+    "outcome": "ok",
+    "stdout_bytes": 66046,
+    "deployed_version": "1.4.1-beta.1"
+  }
+}

package/docs/acceptance/1.4.1/TWIN-GRANT-LIVE.json

@@ -0,0 +1,23 @@
+{
+  "version": "1.4.1-beta.1",
+  "executed_at": "2026-10-22T04:32:10.058Z",
+  "executor": "lead",
+  "case": "TWIN-GRANT-LIVE",
+  "kind": "positive",
+  "machines": [
+    "6c92b251-3728-48bc-82a9-56cc40df48f2"
+  ],
+  "requirement": "a machine with an empty allow-list executes a command only through an explicit operator grant, and is refused without one",
+  "task_id": "01M5TWINGRANTOK0000000000001",
+  "result": {
+    "outcome": "ok",
+    "assertions": {
+      "plain_refused": "COMMAND_NOT_ALLOWED",
+      "granted_outcome": "ok",
+      "granted_stdout": "{\"node\":\"v24.21.0\",\"platform\":\"win32\",\"plugin\":\"1.4.0\",\"pinned\":\"^1.4.0\"}\n",
+      "grant_id": "gr-mvj1ns5e-8b1745e3a9",
+      "relay_version": "1.4.1-beta.1"
+    }
+  },
+  "note": "TwinsEarth runs plugin 1.4.0 with an empty allow-list; the grant path required the relay operator_key offer fix (1.4.1)"
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "1.4.0",
+  "version": "1.4.1",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "type": "module",
   "exports": {

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "twinsearth-w2m-dsh",
-  "version": "1.4.0",
+  "version": "1.4.1",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 12 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "license": "MIT",
   "keywords": [

package/src/plugin/tools.mjs

@@ -274,7 +274,7 @@ const MAX_STAGES = 16;
  * `package.json` during `scripts/pack.mjs` rather than hand-maintained, and `W2M_PLUGIN_VERSION`
  * overrides it at runtime for tests and packagers.
  */
-const PLUGIN_VERSION = '1.4.0';
+const PLUGIN_VERSION = '1.4.1';
 
 /** How long any single HTTP call may take before it is aborted, in milliseconds. */
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;

package/src/relay/state.mjs

@@ -821,6 +821,14 @@ export class RabbitState {
           depends_on: Array.isArray(t.depends_on) ? t.depends_on : [],
           assignee: typeof t.assignee === 'string' && t.assignee !== '' ? t.assignee : null,
           project_id: typeof t.project_id === 'string' ? t.project_id : null,
+          // v1.4.1: an authorization or workspace must survive a relay restart, or a re-offered task reaches the machine
+          // without the grant/key/workspace it was dispatched with and the machine's own gate refuses it for the wrong reason.
+          workspace: t.workspace ?? null,
+          grant: t.grant ?? null,
+          grant_summary: t.grant_summary ?? null,
+          maintenance: t.maintenance ?? null,
+          maintenance_summary: t.maintenance_summary ?? null,
+          operator_key: t.operator_key ?? null,
         reduce_of: typeof t.reduce_of === 'string' ? t.reduce_of : null,
           reduce_inputs: Array.isArray(t.reduce_inputs) ? t.reduce_inputs : [],
           leases: new Map(),
@@ -2241,6 +2249,7 @@ export class RabbitState {
             reduce_of: task.reduce_of ?? null,
             maintenance_summary: task.maintenance_summary ?? null,
             grant_summary: task.grant_summary ?? null,
+            operator_key: task.operator_key ?? null,
             reduce_inputs: Array.isArray(task.reduce_inputs) ? task.reduce_inputs : [],
         origin_machine_id: task.origin_machine_id ?? null,
         p2p: task.p2p ?? null,
@@ -2361,7 +2370,10 @@ export class RabbitState {
       // v1.2.10: present only on a reduce task, so a normal offer stays byte-identical.
       ...(task.reduce_of !== null ? { reduce_of: task.reduce_of, reduce_inputs: task.reduce_inputs } : {}),
       // v1.3.10-beta.2: the signed request and its operator key travel together; the agent pins the key on first sight.
-      ...(task.maintenance !== null && task.maintenance !== undefined ? { maintenance: task.maintenance, operator_key: task.operator_key } : {}),
+      ...(task.maintenance !== null && task.maintenance !== undefined ? { maintenance: task.maintenance } : {}),
+      // v1.4.1: a grant on a machine that has never pinned the operator key is useless unless the offer carries the key it should
+      // trust. Maintenance requests always shipped it; grants must too, or the TOFU pin path is unreachable.
+      ...(task.operator_key !== null && task.operator_key !== undefined ? { operator_key: task.operator_key } : {}),
       ...(task.workspace !== null && task.workspace !== undefined ? { workspace: task.workspace } : {}),
       ...(task.grant !== null && task.grant !== undefined ? { grant: task.grant } : {}),
       cwd_rel: task.cwd_rel,