@twinsearth/w2m-dsh-plugin 1.7.0 → 1.7.1

package/.claude-plugin/marketplace.json

@@ -5,14 +5,14 @@
   },
   "metadata": {
     "description": "The w2m fleet plugins: one account, many machines, any of Windows, macOS or Linux.",
-    "version": "1.7.0"
+    "version": "1.7.1"
   },
   "plugins": [
     {
       "name": "w2m-fleet",
       "source": "./",
       "description": "Read fleet state and dispatch commands across the machines registered to one account. Read-only MCP surface: the five exposed tools cannot change anything.",
-      "version": "1.7.0",
+      "version": "1.7.1",
       "author": {
         "name": "TwinsEarth"
       },
@@ -26,5 +26,5 @@
       ]
     }
   ],
-  "version": "1.7.0"
+  "version": "1.7.1"
 }

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "w2m-fleet",
   "description": "Drive the same project on online Windows, macOS and Linux machines from one account: read fleet state, dispatch commands and read results. The MCP surface is deliberately read-only.",
-  "version": "1.7.0",
+  "version": "1.7.1",
   "author": {
     "name": "TwinsEarth"
   },

package/CHANGELOG.md

@@ -7,6 +7,23 @@
 
 All notable changes to this project are documented here.
 
+## [1.7.1] — 2026-10-25
+
+**修复桌面壳下聊天截图/复制失败（permission denied）与插件更新"no supported installer available"。**
+
+- 截图：浏览器 `getDisplayMedia` 在 DSH 桌面（Electron）被拒绝（`permission denied`）。新增**宿主侧截图**
+  `POST /api/w2m/capture`（Windows PowerShell System.Drawing；macOS screencapture；返回 JPEG base64），
+  按钮与 Ctrl+P 在渲染层捕获失败时自动回退到宿主截图，并在宿主侧复制到剪贴板。
+- 复制：`navigator.clipboard` 被拒时新增**宿主剪贴板** `POST /api/w2m/clipboard`（Windows Set-Clipboard /
+  macOS osascript），单条消息复制按钮与复制文本都走这条回退链。
+- 选中：transcript 的 `user-select:text` 改为 `!important`，避免宿主全局样式覆盖导致无法选中。
+- 插件更新：`update-install` 的安装器解析新增桌面运行时布局
+  （`<app>/resources/runtime/<runtime>/dependencies/pnpm/bin/pnpm.mjs`、`~/.dsh/dsh-runtimes` 兜底），
+  并用运行时自带的 `node` 执行 pnpm（桌面壳的 `process.execPath` 不是 Node）。修复了更新按钮
+  "install update: no supported installer available"。
+
+- 测试：capture-route 4/4、fleet-chat-capture 3/3、client-bundle 26/26、update-resolver 4/4；
+  证据 `docs/acceptance/1.7.1/DESKTOP-CAPTURE-UPDATER.json`（fleet task `01M5ANYMVMN9CNQ`）。
 ## [1.7.0] — 2026-10-25
 
 **编队聊天框：截图按钮 + Ctrl+P 快捷键 + 对话内容可选中&复制。**

package/codex/mcp-servers.toml

@@ -12,6 +12,6 @@
 
 [mcp_servers.w2m-fleet]
 command = "npx"
-args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.7.0", "w2m-mcp"]
+args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.7.1", "w2m-mcp"]
 startup_timeout_sec = 20
 tool_timeout_sec = 60

package/docs/acceptance/1.7.1/DESKTOP-CAPTURE-UPDATER.json

@@ -0,0 +1,35 @@
+{
+  "version": "1.7.1",
+  "case": "DESKTOP-CAPTURE-UPDATER",
+  "kind": "positive",
+  "machines": [
+    "b53a37f4-1464-4512-9259-33a7df091e3e"
+  ],
+  "executed_at": "2026-10-24T17:01:53.420Z",
+  "executor": "lead",
+  "requirement": "on the DSH desktop shell, where the renderer denies getDisplayMedia (permission denied) and clipboard writes, the chat screenshot button and Ctrl+P still capture through the HOST, copy works through the host clipboard, and the plugin update button finds a supported installer",
+  "task_id": "01M5ANYMVMN9CNQ",
+  "result": {
+    "outcome": "ok",
+    "host_capture_smoke": {
+      "platform": "win32",
+      "ok": true,
+      "bytes": 150903,
+      "copied": true,
+      "note": "captured the real screen through PowerShell (System.Drawing) and put it on the Windows clipboard"
+    },
+    "assertions": {
+      "capture_route_tests": "4/4 pass",
+      "fleet_chat_capture": "3/3 pass",
+      "client_bundle": "26/26 pass",
+      "updater_resolver": "4/4 pass"
+    },
+    "fixes": [
+      "POST /api/w2m/capture: host-side PowerShell/macOS/Linux screenshot; returns JPEG base64 and copies on the host",
+      "POST /api/w2m/clipboard: host-side text clipboard, used when navigator.clipboard is denied",
+      "client falls back from getDisplayMedia -> host capture, and copies text through host when the renderer denies it",
+      "user-select:text!important so the transcript stays selectable under host CSS",
+      "update installer discovery: desktop resources runtime + per-user dsh-runtimes; runtime node instead of the app executable"
+    ]
+  }
+}

package/lib/client.js

@@ -395,7 +395,7 @@ const PLUGIN_UPDATE_ROUTE = '/api/w2m/plugin-update';
         '.w2mChat_threadHead{font-size:11px;color:var(--dsw-alias-label-tertiary);padding:4px 10px 0}',
         '.w2mChat_unseen{margin-left:6px;min-width:16px;padding:0 5px;border-radius:8px;background:var(--dsw-alias-accent-default);color:var(--dsw-alias-label-on-accent);font-size:10px;line-height:16px;text-align:center}',
         // v1.6.10: the transcript is selectable text; screenshots get a preview and a copy affordance.
-        '.w2mChat_panel,.w2mChat_list,.w2mChat_text,.w2mChat_meta{user-select:text;-webkit-user-select:text}',
+        '.w2mChat_panel,.w2mChat_list,.w2mChat_text,.w2mChat_meta{user-select:text!important;-webkit-user-select:text!important}',
         '.w2mChat_copy{margin-left:6px;border:none;background:transparent;color:var(--dsw-alias-label-tertiary);cursor:pointer;font-size:11px;line-height:14px;padding:0 2px;vertical-align:middle}',
         '.w2mChat_copy:hover{color:var(--dsw-alias-label-primary)}',
         '.w2mChat_shotButton{flex:none;height:28px;padding:0 8px;border:.5px solid var(--dsw-alias-border-default);border-radius:var(--dsw-radius-sm);background:var(--dsw-alias-surface-default);color:var(--dsw-alias-label-primary);font:inherit;cursor:pointer}',
@@ -751,6 +751,9 @@ function TargetSelect({ sessionId, locked: _locked, t }) {
     // `/api/w2m/chat` (host-side `fleet-chat-route.mjs`), so the device token stays in the host
     // process and this file never holds a credential.
     const CHAT_ROUTE = '/api/w2m/chat';
+    // v1.7.1: host fallbacks for the DSH desktop shell (renderer capture/clipboard are not granted there).
+    const CAPTURE_ROUTE = '/api/w2m/capture';
+    const CLIPBOARD_ROUTE = '/api/w2m/clipboard';
 
     /** One JSON call to the host chat route; a refusal is a value, not an exception. */
     async function chatCall(options) {
@@ -932,59 +935,97 @@ function TargetSelect({ sessionId, locked: _locked, t }) {
         return undefined;
       }, [busy, load, sessionId, text]);
         // v1.6.10: clipboard text with a fallback for hosts where navigator.clipboard is absent.
+        // v1.7.1: copy through the renderer when allowed, then through the host clipboard route.
+        // The DSH desktop shell rejects navigator.clipboard, which is why v1.7.0's copy button failed there.
         const copyText = React.useCallback((value) => {
           const textValue = String(value ?? '');
           if (textValue === '') return undefined;
+          const hostFallback = async () => {
+            try {
+              const response = await fetch(CLIPBOARD_ROUTE, { method: 'POST', credentials: 'same-origin', headers: { 'content-type': 'application/json', accept: 'application/json' }, body: JSON.stringify({ text: textValue }) });
+              const body = await response.json().catch(() => null);
+              if (response.ok === true && body?.ok === true) { setToast('已复制（宿主侧）'); return undefined; }
+            } catch { /* fall through to the textarea path */ }
+            try {
+              const area = document.createElement('textarea');
+              area.value = textValue; area.style.position = 'fixed'; area.style.opacity = '0';
+              document.body.appendChild(area); area.select(); document.execCommand('copy'); document.body.removeChild(area);
+              setToast('已复制');
+            } catch { setToast('复制失败'); }
+            return undefined;
+          };
           try {
             if (navigator.clipboard?.writeText) {
-              navigator.clipboard.writeText(textValue).then(() => setToast('已复制'), () => setToast('复制失败'));
+              navigator.clipboard.writeText(textValue).then(() => setToast('已复制'), () => { hostFallback(); });
               return undefined;
             }
-          } catch { /* fall through to the textarea path */ }
-          try {
-            const area = document.createElement('textarea');
-            area.value = textValue; area.style.position = 'fixed'; area.style.opacity = '0';
-            document.body.appendChild(area); area.select(); document.execCommand('copy'); document.body.removeChild(area);
-            setToast('已复制');
-          } catch { setToast('复制失败'); }
+          } catch { /* fall through */ }
+          hostFallback();
           return undefined;
         }, []);
 
         // v1.6.10: capture one frame of a user-picked screen/window, preview it, and copy the PNG to the
         // clipboard. getDisplayMedia needs the gesture the button/keypress provides; every failure is
         // reported in the panel rather than as an unhandled rejection.
+        // v1.7.1: screenshot with a host fallback. The renderer path (getDisplayMedia) is tried first;
+        // when the host forbids it -- the DSH desktop shell does -- the panel captures on the host and
+        // receives JPEG base64, so the button and Ctrl+P work in both places.
         const captureScreenshot = React.useCallback(async () => {
           if (shotBusy) return undefined;
-          if (typeof navigator?.mediaDevices?.getDisplayMedia !== 'function') {
-            setToast('当前环境不支持屏幕截图');
-            return undefined;
-          }
           setShotBusy(true); setToast(null);
-          let stream = null;
-          try {
-            stream = await navigator.mediaDevices.getDisplayMedia({ video: { frameRate: 5 }, audio: false });
-            const video = document.createElement('video');
-            video.srcObject = stream;
-            await video.play();
-            await new Promise((resolve) => { setTimeout(resolve, 180); });
-            const canvas = document.createElement('canvas');
-            canvas.width = video.videoWidth || 1280;
-            canvas.height = video.videoHeight || 720;
-            canvas.getContext('2d').drawImage(video, 0, 0, canvas.width, canvas.height);
-            const blob = await new Promise((resolve) => { canvas.toBlob(resolve, 'image/png'); });
-            if (blob === null) throw new Error('截图编码失败');
+          const showBlob = (blob, copied, source) => {
             const url = URL.createObjectURL(blob);
             setShot((previous) => { if (previous?.url) URL.revokeObjectURL(previous.url); return { url, blob, at: Date.now() }; });
+            setToast(copied ? '截图已复制到剪贴板（' + source + '）' : '截图已生成（' + source + '），可点击下载');
+          };
+          try {
+            if (typeof navigator?.mediaDevices?.getDisplayMedia === 'function') {
+              let stream = null;
+              try {
+                stream = await navigator.mediaDevices.getDisplayMedia({ video: { frameRate: 5 }, audio: false });
+                const video = document.createElement('video');
+                video.srcObject = stream;
+                await video.play();
+                await new Promise((resolve) => { setTimeout(resolve, 180); });
+                const canvas = document.createElement('canvas');
+                canvas.width = video.videoWidth || 1280;
+                canvas.height = video.videoHeight || 720;
+                canvas.getContext('2d').drawImage(video, 0, 0, canvas.width, canvas.height);
+                const blob = await new Promise((resolve) => { canvas.toBlob(resolve, 'image/png'); });
+                if (blob !== null) {
+                  let copied = false;
+                  try {
+                    if (navigator.clipboard?.write && typeof ClipboardItem !== 'undefined') {
+                      await navigator.clipboard.write([new ClipboardItem({ 'image/png': blob })]);
+                      copied = true;
+                    }
+                  } catch { /* host copies below */ }
+                  showBlob(blob, copied, '浏览器');
+                  return undefined;
+                }
+              } catch { /* the host fallback below is the whole point */ }
+              finally { try { stream?.getTracks?.().forEach((track) => track.stop()); } catch { /* gone */ } }
+            }
+            const response = await fetch(CAPTURE_ROUTE, { method: 'POST', credentials: 'same-origin', headers: { 'content-type': 'application/json', accept: 'application/json' }, body: JSON.stringify({ copy: true }) });
+            const body = await response.json().catch(() => null);
+            if (response.ok !== true || body?.ok !== true || typeof body.data_base64 !== 'string') {
+              throw new Error((body?.error ?? ('HTTP ' + response.status)) + '（宿主截图兜底也不可用）');
+            }
+            const binary = atob(body.data_base64);
+            const bytes = new Uint8Array(binary.length);
+            for (let i = 0; i < binary.length; i += 1) bytes[i] = binary.charCodeAt(i);
+            const blob = new Blob([bytes], { type: body.mime ?? 'image/jpeg' });
+            let copied = body.copied === true;
             try {
-              if (navigator.clipboard?.write && typeof ClipboardItem !== 'undefined') {
+              if (!copied && navigator.clipboard?.write && typeof ClipboardItem !== 'undefined') {
                 await navigator.clipboard.write([new ClipboardItem({ 'image/png': blob })]);
-                setToast('截图已复制到剪贴板');
-              } else { setToast('截图已生成，可点击下载'); }
-            } catch { setToast('截图已生成，可点击下载（剪贴板不可用）'); }
+                copied = true;
+              }
+            } catch { /* host already tried */ }
+            showBlob(blob, copied, '宿主');
           } catch (error) {
             setToast('截图失败：' + (error instanceof Error ? error.message : String(error)));
           } finally {
-            try { stream?.getTracks?.().forEach((track) => track.stop()); } catch { /* stream already gone */ }
             setShotBusy(false);
           }
           return undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "1.7.0",
+  "version": "1.7.1",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "type": "module",
   "exports": {
@@ -64,7 +64,7 @@
     "pack": "node scripts/pack.mjs",
     "reachability": "node scripts/reachability-check.mjs",
     "reachability:classify": "node scripts/reachability-classify.mjs",
-    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs test/task-deps.test.mjs test/dataflow-wiring.test.mjs test/task-graph.test.mjs test/ask-store.test.mjs test/turn.test.mjs test/fleet-members.test.mjs test/redact.test.mjs test/policy-matrix.test.mjs test/envelope-signature.test.mjs test/chat-crypto.test.mjs test/reduce-suggestion.test.mjs test/merge-hint.test.mjs test/fleet-chat-route.test.mjs test/maintenance.test.mjs test/maintenance-ferry.test.mjs test/grant.test.mjs test/grant-gate.test.mjs test/worktree.test.mjs test/patch-artifact.test.mjs test/merge-queue.test.mjs test/m3-workflow.test.mjs test/project-room.test.mjs test/project-attribution.test.mjs test/project-locks.test.mjs test/project-reviews.test.mjs test/project-notifications.test.mjs test/blob-sessions.test.mjs test/outbox.test.mjs test/reliability-metrics.test.mjs test/evidence.test.mjs test/grant-issue.test.mjs test/project-refs.test.mjs test/exec-capability.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs",
+    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs test/task-deps.test.mjs test/dataflow-wiring.test.mjs test/task-graph.test.mjs test/ask-store.test.mjs test/turn.test.mjs test/fleet-members.test.mjs test/redact.test.mjs test/policy-matrix.test.mjs test/envelope-signature.test.mjs test/chat-crypto.test.mjs test/reduce-suggestion.test.mjs test/merge-hint.test.mjs test/fleet-chat-route.test.mjs test/maintenance.test.mjs test/maintenance-ferry.test.mjs test/grant.test.mjs test/grant-gate.test.mjs test/worktree.test.mjs test/patch-artifact.test.mjs test/merge-queue.test.mjs test/m3-workflow.test.mjs test/project-room.test.mjs test/project-attribution.test.mjs test/project-locks.test.mjs test/project-reviews.test.mjs test/project-notifications.test.mjs test/blob-sessions.test.mjs test/outbox.test.mjs test/reliability-metrics.test.mjs test/evidence.test.mjs test/grant-issue.test.mjs test/project-refs.test.mjs test/exec-capability.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs test/capture-route.test.mjs test/update-resolver.test.mjs",
     "test:acceptance-doc": "node --test --test-force-exit test/acceptance-doc.test.mjs",
     "test:account-identity": "node --test --test-force-exit test/account-identity.test.mjs",
     "test:account-join": "node --test --test-force-exit test/account-join.test.mjs",
@@ -82,7 +82,7 @@
     "test:council-session": "node --test --test-force-exit test/council-session.test.mjs",
     "test:crossnetwork": "node --test --test-force-exit test/crossnetwork.test.mjs",
     "test:crypto-blake2s": "node --test --test-force-exit test/crypto-blake2s.test.mjs",
-    "test:e2e": "node --test --test-force-exit test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/p2p-agent.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs",
+    "test:e2e": "node --test --test-force-exit test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/p2p-agent.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs test/capture-route.test.mjs test/update-resolver.test.mjs",
     "test:exec-env": "node --test --test-force-exit test/exec-env-injection.test.mjs",
     "test:exit-channel": "node --test --test-force-exit test/exit-channel.test.mjs",
     "test:field-authority": "node --test --test-force-exit test/field-authority.test.mjs",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "twinsearth-w2m-dsh",
-  "version": "1.7.0",
+  "version": "1.7.1",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 12 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "license": "MIT",
   "keywords": [

package/src/plugin/capture-route.mjs

@@ -0,0 +1,243 @@
+/**
+ * v1.7.1 — host-side capture and clipboard fallbacks for the fleet-chat panel.
+ *
+ * ## Why this module exists
+ *
+ * v1.7.0 put a screenshot button and Ctrl+P in the chat panel, implemented in the browser with
+ * `getDisplayMedia` and `navigator.clipboard`. Field test on the DSH **desktop** shell: all three
+ * controls failed. A desktop host is not a browser tab — `getDisplayMedia` needs the embedding app to
+ * install a display-media request handler, and clipboard writes are subject to the same permission
+ * surface. When either rejects, a browser-only implementation has nowhere left to go.
+ *
+ * So the panel gains a host fallback that does not depend on renderer permissions:
+ *
+ *   POST /api/w2m/capture    { copy?: boolean }  -> capture the primary screen on the HOST, return
+ *                                                   { ok, mime, data_base64, path, copied }
+ *   POST /api/w2m/clipboard  { text }            -> put text on the HOST clipboard
+ *
+ * Windows uses PowerShell (System.Drawing + System.Windows.Forms, STA thread for the image
+ * clipboard), macOS uses `screencapture`/`pbcopy`/`osascript`, Linux uses `gnome-screenshot`/`xclip`
+ * when present. Every command is a fixed argv array — no shell, and no caller input is spliced into a
+ * script.
+ *
+ * This module is deliberately small and injectable: `run` is a parameter so the route can be tested
+ * without a screen, and `capturePlan`/`clipboardPlan` are exported as pure data for the same reason.
+ */
+import { spawn } from 'node:child_process';
+import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+
+export const CAPTURE_ROUTE_PATH = '/api/w2m/capture';
+export const CLIPBOARD_ROUTE_PATH = '/api/w2m/clipboard';
+export const CAPTURE_TIMEOUT_MS = 20_000;
+const NO_STORE = { 'cache-control': 'no-store' };
+
+/** Run a command with no shell, a bounded timeout and captured output. */
+export function runCommand(argv, { timeoutMs = CAPTURE_TIMEOUT_MS, env = process.env } = {}) {
+  return new Promise((resolvePromise) => {
+    let child;
+    try {
+      child = spawn(argv[0], argv.slice(1), { windowsHide: true, stdio: ['ignore', 'pipe', 'pipe'], env });
+    } catch (error) {
+      resolvePromise({ code: null, stdout: '', stderr: String(error?.message ?? error) });
+      return;
+    }
+    let stdout = '';
+    let stderr = '';
+    let settled = false;
+    const finish = (code) => {
+      if (settled) return;
+      settled = true;
+      resolvePromise({ code, stdout, stderr });
+    };
+    const timer = setTimeout(() => {
+      try { child.kill('SIGTERM'); } catch { /* already gone */ }
+      finish(null);
+    }, timeoutMs);
+    timer.unref?.();
+    child.stdout?.on('data', (chunk) => { stdout = (stdout + chunk.toString('utf8')).slice(-4_000_000); });
+    child.stderr?.on('data', (chunk) => { stderr = (stderr + chunk.toString('utf8')).slice(-16_384); });
+    child.on('error', (error) => { stderr = String(error?.message ?? error); finish(null); });
+    child.on('close', (code) => { clearTimeout(timer); finish(code); });
+  });
+}
+
+/**
+ * The PowerShell script that captures the primary screen as a JPEG and prints base64.
+ * `-STA` matters: `Clipboard::SetImage` throws on an MTA thread.
+ */
+const WINDOWS_CAPTURE_SCRIPT = [
+  'Add-Type -AssemblyName System.Windows.Forms,System.Drawing',
+  '$b=[System.Windows.Forms.SystemInformation]::VirtualScreen',
+  '$bmp=New-Object Drawing.Bitmap($b.Width,$b.Height)',
+  '$g=[Drawing.Graphics]::FromImage($bmp)',
+  '$g.CopyFromScreen($b.Left,$b.Top,0,0,$bmp.Size)',
+  '$max=1600',
+  'if($bmp.Width -gt $max){$r=$max/[double]$bmp.Width;$nw=[int]($bmp.Width*$r);$nh=[int]($bmp.Height*$r);$s=New-Object Drawing.Bitmap($nw,$nh);$gs=[Drawing.Graphics]::FromImage($s);$gs.InterpolationMode=[Drawing.Drawing2D.InterpolationMode]::HighQualityBicubic;$gs.DrawImage($bmp,0,0,$nw,$nh);$bmp=$s}',
+  '$ms=New-Object IO.MemoryStream',
+  '$enc=[Drawing.Imaging.ImageCodecInfo]::GetImageEncoders() | Where-Object {$_.MimeType -eq "image/jpeg"} | Select-Object -First 1',
+  '$ps=New-Object Drawing.Imaging.EncoderParameters(1)',
+  '$ps.Param[0]=New-Object Drawing.Imaging.EncoderParameter([Drawing.Imaging.Encoder]::Quality,[long]82)',
+  '$bmp.Save($ms,$enc,$ps)',
+  'if($env:W2M_CAPTURE_COPY -eq "1"){[System.Windows.Forms.Clipboard]::SetImage($bmp)}',
+  '[Convert]::ToBase64String($ms.ToArray())',
+].join('; ');
+
+/**
+ * The capture command for a platform, as pure data.
+ *
+ * Windows prints base64 to stdout; macOS/Linux write a file whose path the caller returns to Node
+ * (`file` is null on Windows).
+ *
+ * @param {NodeJS.Platform} platform
+ * @param {{copyToClipboard?: boolean}} [options]
+ * @returns {{argv: string[], file: string|null, mime: string}}
+ */
+export function capturePlan(platform, _options = {}) {
+  if (platform === 'win32') {
+    return {
+      argv: ['powershell.exe', '-NoProfile', '-NonInteractive', '-STA', '-ExecutionPolicy', 'Bypass', '-Command', WINDOWS_CAPTURE_SCRIPT],
+      file: null,
+      mime: 'image/jpeg',
+    };
+  }
+  if (platform === 'darwin') {
+    return { argv: ['/usr/sbin/screencapture', '-x', '-t', 'jpg', 'capture'], file: 'capture', mime: 'image/jpeg' };
+  }
+  if (platform === 'linux') {
+    return { argv: ['gnome-screenshot', '-f', 'capture'], file: 'capture', mime: 'image/jpeg' };
+  }
+  return { argv: [], file: null, mime: 'application/octet-stream' };
+}
+
+/** Text-clipboard command for a platform, as pure data. */
+export function clipboardPlan(platform, _text) {
+  if (platform === 'win32') return ['powershell.exe', '-NoProfile', '-NonInteractive', '-Command', 'Set-Clipboard -Value $env:W2M_CLIP_TEXT'];
+  if (platform === 'darwin') return ['pbcopy'];
+  return [];
+}
+
+/**
+ * Capture the host screen.
+ *
+ * @param {{platform?: NodeJS.Platform, run?: typeof runCommand, tempRoot?: string, copyToClipboard?: boolean}} [options]
+ * @returns {Promise<{ok: boolean, mime?: string, data_base64?: string, path?: string, copied: boolean, error?: string}>}
+ */
+export async function captureHostScreen(options = {}) {
+  const platform = options.platform ?? process.platform;
+  const run = options.run ?? runCommand;
+  const copyToClipboard = options.copyToClipboard === true;
+  const plan = capturePlan(platform, { copyToClipboard });
+  if (plan.argv.length === 0) {
+    return { ok: false, copied: false, error: `host capture is not implemented for ${platform}` };
+  }
+  if (platform === 'win32') {
+    const result = await run(plan.argv, { timeoutMs: CAPTURE_TIMEOUT_MS, env: { ...process.env, W2M_CAPTURE_COPY: copyToClipboard ? '1' : '0' } });
+    const base64 = String(result.stdout ?? '').trim().split(/\r?\n/).filter(Boolean).pop() ?? '';
+    if (result.code !== 0 || !/^[A-Za-z0-9+/=]{100,}$/.test(base64)) {
+      return { ok: false, copied: false, error: `PowerShell capture failed (exit ${result.code}): ${String(result.stderr ?? '').trim().slice(-400) || 'no output'}` };
+    }
+    return { ok: true, mime: 'image/jpeg', data_base64: base64, copied: copyToClipboard };
+  }
+  // macOS / Linux: write to a temp file, read it, and copy via the platform tool when asked.
+  const dir = mkdtempSync(join(options.tempRoot ?? tmpdir(), 'w2m-capture-'));
+  const file = join(dir, platform === 'darwin' ? 'capture.jpg' : 'capture.jpg');
+  try {
+    const argv = plan.argv.map((part) => (part === 'capture' ? file : part));
+    const result = await run(argv, { timeoutMs: CAPTURE_TIMEOUT_MS });
+    if (result.code !== 0) {
+      return { ok: false, copied: false, error: `screencapture failed (exit ${result.code}): ${String(result.stderr ?? '').trim().slice(-300)}` };
+    }
+    const data = readFileSync(file);
+    let copied = false;
+    if (copyToClipboard) {
+      if (platform === 'darwin') {
+        const script = `set the clipboard to (read (POSIX file "${file.replace(/"/g, '\\"')}") as JPEG picture)`;
+        copied = (await run(['osascript', '-e', script], { timeoutMs: CAPTURE_TIMEOUT_MS })).code === 0;
+      } else {
+        copied = (await run(['xclip', '-selection', 'clipboard', '-t', 'image/jpeg', '-i', file], { timeoutMs: CAPTURE_TIMEOUT_MS })).code === 0;
+      }
+    }
+    return { ok: true, mime: 'image/jpeg', data_base64: data.toString('base64'), path: file, copied };
+  } catch (error) {
+    return { ok: false, copied: false, error: error instanceof Error ? error.message : String(error) };
+  } finally {
+    // The base64 is already in memory; the file is only useful for the platform clipboard call.
+    try { rmSync(dir, { recursive: true, force: true }); } catch { /* best effort */ }
+  }
+}
+
+/** Put text on the host clipboard. */
+export async function copyHostText(text, options = {}) {
+  const platform = options.platform ?? process.platform;
+  const run = options.run ?? runCommand;
+  const argv = clipboardPlan(platform, text);
+  if (argv.length === 0) return { ok: false, error: `host clipboard is not implemented for ${platform}` };
+  if (platform === 'win32') {
+    const result = await run(argv, { env: { ...process.env, W2M_CLIP_TEXT: String(text ?? '') } });
+    return { ok: result.code === 0, error: result.code === 0 ? undefined : `clipboard command failed (exit ${result.code}): ${String(result.stderr ?? '').slice(-300)}` };
+  }
+  if (platform === 'darwin') {
+    // pbcopy reads stdin; keep it out of the shell by piping through a temporary spawn is overkill
+    // for this fallback — use osascript's clipboard setter instead, where the text is one argv item.
+    const script = 'set the clipboard to ' + JSON.stringify(String(text ?? ''));
+    const result = await run(['osascript', '-e', script]);
+    return { ok: result.code === 0, error: result.code === 0 ? undefined : `osascript failed: ${String(result.stderr ?? '').slice(-300)}` };
+  }
+  const result = await run(argv);
+  return { ok: result.code === 0, error: result.code === 0 ? undefined : `clipboard command failed (exit ${result.code}): ${String(result.stderr ?? '').slice(-300)}` };
+}
+
+/**
+ * Mount both routes on the host's Connection fetch registry.
+ *
+ * @param {object} ctx Cordis context
+ * @param {{platform?: NodeJS.Platform, run?: typeof runCommand, capture?: typeof captureHostScreen}} [deps]
+ * @returns {{mounted: boolean, reason: string|null}}
+ */
+export function registerCaptureRoutes(ctx, deps = {}) {
+  const status = { mounted: false, reason: 'the host has no Connection service' };
+  if (typeof ctx?.inject !== 'function') return status;
+  ctx.inject(['connection'], (webCtx) => {
+    const registry = webCtx?.connection?.fetch;
+    if (registry === undefined || typeof registry.register !== 'function') {
+      status.reason = 'the connection service carries no fetch registry';
+      return;
+    }
+    const platform = deps.platform ?? process.platform;
+    const run = deps.run ?? runCommand;
+    const capture = deps.capture ?? captureHostScreen;
+    registry.register({
+      path: CAPTURE_ROUTE_PATH,
+      methods: ['POST'],
+      requestBody: 'buffered',
+      fetch: async (request) => {
+        let body = null;
+        try { body = await request.json(); } catch { /* defaults below */ }
+        const copyToClipboard = body?.copy === true;
+        const result = await capture({ platform, run, copyToClipboard });
+        return Response.json(result, { status: result.ok === true ? 200 : 502, headers: NO_STORE });
+      },
+    });
+    registry.register({
+      path: CLIPBOARD_ROUTE_PATH,
+      methods: ['POST'],
+      requestBody: 'buffered',
+      fetch: async (request) => {
+        let body = null;
+        try { body = await request.json(); } catch { /* refused below */ }
+        if (body === null || typeof body?.text !== 'string' || body.text === '') {
+          return Response.json({ ok: false, error: 'a JSON body with {"text": "..."} is required' }, { status: 400, headers: NO_STORE });
+        }
+        // Keep the fallback bounded: a client that asks to copy a megabyte is asking for trouble.
+        const text = body.text.slice(0, 1_000_000);
+        const result = await copyHostText(text, { platform, run });
+        return Response.json(result, { status: result.ok === true ? 200 : 502, headers: NO_STORE });
+      },
+    });
+    status.mounted = true;
+    status.reason = null;
+  });
+  return status;
+}

package/src/plugin/tools.mjs

@@ -191,6 +191,7 @@ import {
 import { registerChatRoutes } from './fleet-chat-route.mjs';
 import { registerExecCapabilityRoutes } from './exec-capability-route.mjs';
 import { registerPluginUpdateRoutes } from './update-route.mjs';
+import { registerCaptureRoutes } from './capture-route.mjs';
 import { defaultExecCapabilityFile } from '../util/exec-capability.mjs';
 import { createFleetCouncil, fleetCouncilThread } from './council-fleet.mjs';
 import { renderMemoryView } from './memory-view.mjs';
@@ -282,7 +283,7 @@ const MAX_STAGES = 16;
  * `package.json` during `scripts/pack.mjs` rather than hand-maintained, and `W2M_PLUGIN_VERSION`
  * overrides it at runtime for tests and packagers.
  */
-const PLUGIN_VERSION = '1.7.0';
+const PLUGIN_VERSION = '1.7.1';
 
 /** How long any single HTTP call may take before it is aborted, in milliseconds. */
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;
@@ -3517,6 +3518,11 @@ export async function apply(ctx, config = {}) {
   // v1.6.8: the plugin panel's "更新" button: GET checks npm latest, POST installs through the
   // verified updater (SHA-256 checked, old package backed up, restart required afterwards).
   const _updateRoutes = registerPluginUpdateRoutes(ctx, { profileDir: () => cfg.profileDir });
+
+  // v1.7.1: host-side screenshot + clipboard fallbacks. The DSH desktop shell does not grant the
+  // renderer getDisplayMedia/navigator.clipboard, so the chat panel needs a host route that does not
+  // depend on those permissions.
+  registerCaptureRoutes(ctx);
   if (capabilityRoutes.mounted !== true) {
     ctx.logger?.warn?.('w2m: the execution-capability control is inactive — ' + capabilityRoutes.reason);
   }

package/src/plugin/update-install.mjs

@@ -68,7 +68,7 @@ import {
   statSync,
 } from 'node:fs';
 import { homedir } from 'node:os';
-import { basename, join, resolve } from 'node:path';
+import { basename, dirname, join, resolve } from 'node:path';
 import { gunzipSync } from 'node:zlib';
 
 /** How much of the installer's stderr is preserved when it fails. */
@@ -225,19 +225,73 @@ export function resolveDshPath(env = process.env) {
  * @param {Record<string,string|undefined>} [env]
  * @returns {string|null}
  */
+
+/**
+ * Roots that may hold a DSH runtime with its own pnpm.
+ *
+ * v1.7.1: the desktop app does not ship the CLI layout (`<DSH_HOME>/dsh-runtimes`); it bundles the
+ * runtime at `<app>/resources/runtime/<runtime>/dependencies/pnpm/bin/pnpm.mjs`. The v1.6.8 update
+ * button reported "no supported installer available" on every desktop install because only the
+ * CLI layout was searched. Both layouts are roots here, and the caller iterates their children.
+ *
+ * @param {{env?: NodeJS.ProcessEnv, execPath?: string, resourcesPath?: string}} [input]
+ * @returns {string[]}
+ */
+export function runtimeCandidates(input = {}) {
+  const env = input.env ?? process.env;
+  const execPath = input.execPath ?? process.execPath;
+  const resourcesPath = input.resourcesPath ?? process.resourcesPath;
+  const roots = [];
+  if (typeof env.W2M_RUNTIME_ROOT === 'string' && env.W2M_RUNTIME_ROOT.trim() !== '') roots.push(env.W2M_RUNTIME_ROOT.trim());
+  if (typeof resourcesPath === 'string' && resourcesPath !== '') roots.push(join(resourcesPath, 'runtime'));
+  try {
+    // Only the desktop app layout has `resources/` next to the executable; plain Node does not.
+    if (existsSync(join(dirname(execPath), 'resources'))) roots.push(join(dirname(execPath), 'resources', 'runtime'));
+  } catch { /* execPath is not a normal path */ }
+  roots.push(join(dshHome(env), 'dsh-runtimes'));
+  // The desktop shell may rewrite DSH_HOME; the per-user runtime directory is still the real one.
+  roots.push(join(homedir(), '.dsh', 'dsh-runtimes'));
+  return [...new Set(roots)];
+}
+
+/**
+ * The runtime layout puts pnpm under `<root>/<runtime>/dependencies/pnpm/bin/pnpm.mjs`; the CLI layout
+ * is the same but its root already ends with `dsh-runtimes`. Both shapes are scanned.
+ *
+ * @param {string[]} roots
+ * @returns {string[]}
+ */
+function pnpmCandidates(roots) {
+  const candidates = [];
+  for (const root of roots) {
+    candidates.push(join(root, 'dependencies', 'pnpm', 'bin', 'pnpm.mjs'));
+    let entries = [];
+    try { entries = readdirSync(root); } catch { continue; }
+    for (const entry of entries) candidates.push(join(root, entry, 'dependencies', 'pnpm', 'bin', 'pnpm.mjs'));
+  }
+  return candidates;
+}
+
+/** Locate the runtime's own Node executable (the desktop app's executable is not Node). */
+export function resolveRuntimeNode(env = process.env) {
+  const explicit = env.W2M_NODE && env.W2M_NODE.trim() !== '' ? env.W2M_NODE.trim() : null;
+  if (explicit) return existsSync(explicit) ? explicit : null;
+  const names = process.platform === 'win32' ? ['node.exe'] : ['node'];
+  for (const root of runtimeCandidates({ env })) {
+    for (const entry of (() => { try { return readdirSync(root); } catch { return []; } })()) {
+      for (const name of names) {
+        const candidate = join(root, entry, 'dependencies', 'node', 'bin', name);
+        if (existsSync(candidate)) return candidate;
+      }
+    }
+  }
+  return null;
+}
 export function resolveRuntimePnpm(env = process.env) {
   const explicit = env.W2M_PNPM && env.W2M_PNPM.trim() !== '' ? env.W2M_PNPM.trim() : null;
   if (explicit) return existsSync(explicit) ? explicit : null;
 
-  const runtimesDir = join(dshHome(env), 'dsh-runtimes');
-  let runtimes;
-  try {
-    runtimes = readdirSync(runtimesDir);
-  } catch {
-    return null;
-  }
-  for (const runtime of runtimes) {
-    const candidate = join(runtimesDir, runtime, 'dependencies', 'pnpm', 'bin', 'pnpm.mjs');
+  for (const candidate of pnpmCandidates(runtimeCandidates({ env }))) {
     if (existsSync(candidate)) return candidate;
   }
   return null;
@@ -449,7 +503,8 @@ export async function installUpdate(options = {}) {
   const stagedTarball = join(stagingDir, basename(tarballPath));
   const dshPath = options.dshPath !== undefined ? options.dshPath : resolveDshPath();
   const pnpmPath = options.pnpmPath !== undefined ? options.pnpmPath : resolveRuntimePnpm();
-  const nodePath = options.nodePath ?? process.execPath;
+  // v1.7.1: in the desktop shell `process.execPath` is the app, not Node; pnpm.mjs cannot run on it.
+    const nodePath = options.nodePath ?? resolveRuntimeNode() ?? process.execPath;
   const runner = options.runner ?? createChildProcessRunner(options.runnerOptions);
 
   // ---- 1. verify --------------------------------------------------------