@twinsearth/w2m-dsh-plugin 1.4.3 → 1.4.4

package/.claude-plugin/marketplace.json

@@ -5,14 +5,14 @@
   },
   "metadata": {
     "description": "The w2m fleet plugins: one account, many machines, any of Windows, macOS or Linux.",
-    "version": "1.4.3"
+    "version": "1.4.4"
   },
   "plugins": [
     {
       "name": "w2m-fleet",
       "source": "./",
       "description": "Read fleet state and dispatch commands across the machines registered to one account. Read-only MCP surface: the five exposed tools cannot change anything.",
-      "version": "1.4.3",
+      "version": "1.4.4",
       "author": {
         "name": "TwinsEarth"
       },
@@ -26,5 +26,5 @@
       ]
     }
   ],
-  "version": "1.4.3"
+  "version": "1.4.4"
 }

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "w2m-fleet",
   "description": "Drive the same project on online Windows, macOS and Linux machines from one account: read fleet state, dispatch commands and read results. The MCP surface is deliberately read-only.",
-  "version": "1.4.3",
+  "version": "1.4.4",
   "author": {
     "name": "TwinsEarth"
   },

package/CHANGELOG.md

@@ -7,6 +7,21 @@
 
 All notable changes to this project are documented here.
 
+## [1.4.4] — 2026-10-23
+
+**relay 重启不再丢失编队归属（devices.json 持久化 fleet_id）。**
+
+- 持久化修复：`devices.json` 快照新增 `fleet_id` / `fleet_source`，`restore()` 同步恢复。
+  在此之前，relay 重启后设备全在、token 仍有效，但每台设备的 fleet 归属全变成 null——
+  编队"静默消失"且没有任何错误可看（本次在共享 relay 上实测复现）。
+- 桥接 getupdates 看门狗：空闲时每 10 分钟输出 `polling ... connection live`；
+  40s 长轮询超时明确记录 `poll timeout after 40s -- reconnecting`；
+  连续 5 分钟没有一次成功轮询则退出（exit 3），由 launchd KeepAlive / systemd Restart= 拉起新连接，
+  避免"进程活着但没人知道它是否还在轮询"的静默状态。
+- 测试：relay 新增 fleet 重启往返用例（pair by fleet_key → 重启 → fleet_id/fleet_source 保留）；
+  bridge 套件 36/36；门禁 GREEN ×2。
+- 证据：docs/acceptance/1.4.4/FLEET-PERSISTENCE.json（真实 fleet task `01M5FLEETPERSIST0000000002`）。
+
 ## [1.4.3] — 2026-10-22
 
 **微信编队桥接：回复可靠性修复（不回复/静默问题）。**

package/codex/mcp-servers.toml

@@ -12,6 +12,6 @@
 
 [mcp_servers.w2m-fleet]
 command = "npx"
-args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.4.3", "w2m-mcp"]
+args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.4.4", "w2m-mcp"]
 startup_timeout_sec = 20
 tool_timeout_sec = 60

package/docs/acceptance/1.4.4/FLEET-PERSISTENCE.json

@@ -0,0 +1,20 @@
+{
+  "version": "1.4.4",
+  "case": "FLEET-PERSISTENCE",
+  "kind": "positive",
+  "machines": [
+    "d89d5817-953d-4571-883d-23800e67d20c"
+  ],
+  "executed_at": "2026-10-22T16:32:38.180Z",
+  "executor": "lead",
+  "requirement": "a relay restart keeps every device in the fleet it was paired into: devices.json persists fleet_id/fleet_source and restore rebuilds them",
+  "task_id": "01M5FLEETPERSIST0000000002",
+  "result": {
+    "outcome": "ok",
+    "assertions": {
+      "fleet_roundtrip_test": "pass",
+      "node_test_exit": 0
+    }
+  },
+  "note": "executed as a real fleet task (node --test, fleet round-trip case) on the local machine before packaging"
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "1.4.3",
+  "version": "1.4.4",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "type": "module",
   "exports": {

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "twinsearth-w2m-dsh",
-  "version": "1.4.3",
+  "version": "1.4.4",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 12 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "license": "MIT",
   "keywords": [

package/src/plugin/tools.mjs

@@ -276,7 +276,7 @@ const MAX_STAGES = 16;
  * `package.json` during `scripts/pack.mjs` rather than hand-maintained, and `W2M_PLUGIN_VERSION`
  * overrides it at runtime for tests and packagers.
  */
-const PLUGIN_VERSION = '1.4.3';
+const PLUGIN_VERSION = '1.4.4';
 
 /** How long any single HTTP call may take before it is aborted, in milliseconds. */
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;

package/src/relay/persistence.mjs

@@ -213,6 +213,18 @@ export class Persistence {
         device_token: d.device_token ?? null,
         paired_at: rfc3339(d.paired_at_ms ?? this._now()),
         re_paired: d.re_paired === true,
+        /**
+         * v1.4.4: **the fleet binding is part of the device, so it must survive a restart.**
+         *
+         * Measured on the shared relay (2026-10-23): a relay restart came back with every device
+         * present and every fleet assignment gone, because this snapshot did not carry the two
+         * fields the pairing decision had produced. The devices were still authorised, so nothing
+         * looked broken -- they simply stopped being in a fleet, which is the one thing the fleet
+         * key had been bought to guarantee. `fleet_id` is a derived hash (not a secret) and
+         * `fleet_source` is the provenance that makes a wrong binding visible.
+         */
+        fleet_id: d.fleet_id ?? null,
+        fleet_source: d.fleet_source ?? null,
       };
     }
     const body = JSON.stringify(out, null, 2);

package/src/relay/state.mjs

@@ -750,6 +750,11 @@ export class RabbitState {
           device_token: typeof d.device_token === 'string' ? d.device_token : null,
           paired_at_ms: Number.isFinite(pairedAt) ? pairedAt : this.nowMs(),
           re_paired: d.re_paired === true,
+          // v1.4.4: restore the fleet binding with the device. Without this the snapshot brought the
+          // device back but dropped the fleet it was paired into, so a restart silently un-joined
+          // every machine while leaving it fully authorised (measured 2026-10-23 on the shared relay).
+          fleet_id: typeof d.fleet_id === 'string' && d.fleet_id !== '' ? d.fleet_id : null,
+          fleet_source: typeof d.fleet_source === 'string' && d.fleet_source !== '' ? d.fleet_source : null,
           last_seen_at_ms: this.nowMs(),
           // a snapshot proves the device exists, not that it is connected
           online: false,