@twinsearth/w2m-dsh-plugin 1.7.4 → 1.7.7

package/.claude-plugin/marketplace.json

@@ -5,14 +5,14 @@
   },
   "metadata": {
     "description": "The w2m fleet plugins: one account, many machines, any of Windows, macOS or Linux.",
-    "version": "1.7.4"
+    "version": "1.7.7"
   },
   "plugins": [
     {
       "name": "w2m-fleet",
       "source": "./",
       "description": "Read fleet state and dispatch commands across the machines registered to one account. Read-only MCP surface: the five exposed tools cannot change anything.",
-      "version": "1.7.4",
+      "version": "1.7.7",
       "author": {
         "name": "TwinsEarth"
       },
@@ -26,5 +26,5 @@
       ]
     }
   ],
-  "version": "1.7.4"
+  "version": "1.7.7"
 }

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "w2m-fleet",
   "description": "Drive the same project on online Windows, macOS and Linux machines from one account: read fleet state, dispatch commands and read results. The MCP surface is deliberately read-only.",
-  "version": "1.7.4",
+  "version": "1.7.7",
   "author": {
     "name": "TwinsEarth"
   },

package/CHANGELOG.md

@@ -7,6 +7,44 @@
 
 All notable changes to this project are documented here.
 
+## [1.7.7] — 2026-10-26
+
+**GPW 子插件启用失败修复：`cannot get property "tools" without inject`。**
+
+- 根因：`gpw.mjs` 读取 `ctx.tools.guard` 做黑名单同步拦截，但 `inject` 只声明了 `permissionPresets`。
+  Cordis 对未声明服务读取直接抛错，插件激活因此失败（组件启用失败：1 entry did not activate dsh-gpw）。
+- 修复：`inject = ['permissionPresets', 'tools']`；guard 读取改为防御式（老宿主无 guard 扩展时不影响
+  `tools/pre-execute` 拦截）。
+- 新增回归测试 `test/gpw-activation.test.mjs`：用严格 Cordis 语义的 Proxy 上下文调用 `apply()`，
+  未声明服务读取即抛错；断言 `tools/pre-execute` 监听已安装。
+- 证据：`docs/acceptance/1.7.7/GPW-INJECT.json`。
+## [1.7.6] — 2026-10-25
+
+**审计修复版：测试零残留工具链 + 修复泄漏的测试夹具，并固化 v1.6.1→v1.7.4 审计报告。**
+
+- 新增 `scripts/temp-residue.mjs`（`snapshot` / `report` / `clean`）：对用户 TEMP 中 `w2m-*`、`gpw-*`
+  测试残留做基线快照、前缀统计与按年龄的安全清理；审计实测清理了 15,608 个历史残留目录。
+- 新增 `test/helpers/temp-cleanup.mjs`：基线式 per-test 清理，避免并发测试互删夹具。
+- 修复会泄漏临时目录的测试：`gpw-folder-policy`、`agent`（workspace 两处 fixture）、`worktree`（makeRepo）。
+- 零残留复测：单轮全量测试新增残留从约 1,000 个降至 74 个（剩余前缀已量化，作为下一轮清理清单）。
+- 新增审计报告 `docs/audit/AUDIT-1.6.1-1.7.4.md`：14 个正式版的 Release/CI/Compat 全绿记录、
+  2930 个测试 0 失败、lint 0 error、实机部署与落库断言、relay 延迟与测试耗时实测。
+- 证据：`docs/acceptance/1.7.6/AUDIT-ZERO-RESIDUE.json`。
+## [1.7.5-beta.1] — 2026-10-25
+
+**GPW 升级为文件夹三分类网关（完全权限下生效）：黑名单拒绝 / 白名单放行 / 其余进入 GPW 自己的待审批队列。**
+
+- 生效条件：仅当会话权限预设为 **完全权限**（`danger-full-access`）时拦截；其它预设交给 DSH 自己的沙箱/审批，
+  不重复介入。
+- **黑名单（拒绝）**：`ctx.tools.guard()` 同步拦截，返回拒绝原因即不执行；与 `tools/pre-execute` 的监听顺序无关。
+- **白名单（通过）**：等价于扩大的工作区，无需再审；仍受自动审批预算约束（每滚动窗口 10 次、间隔 3s），
+  预算耗尽后同样进入待审批队列而不是静默放行。
+- **其它文件夹（C 类，待审批）**：调用被挂起，进入 GPW 自己的待审批队列；用户在 GPW 面板点「允许本次/拒绝本次」
+  才继续（默认 120s 无答复则拒绝）。这不是 DSH 的 approval 策略，所以在 approval=never 的完全权限下依然有效。
+- 面板（Node 执行能力菜单内新增「GPW 文件夹策略」）：白/黑名单展示与移除；「添加文件夹」通过宿主原生选择器
+  （Windows FolderBrowserDialog / macOS choose folder / zenity）选路径，读写名单不需要编辑任何 profile YAML；
+  名单保存在 `$DSH_HOME/xclient/gpw-folders.json`，另有待审批列表与允许/拒绝按钮。
+- 测试：`test/gpw-folder-policy.test.mjs`（6/6，三分类、deny 优先、前缀误判防护、命令路径提取、预算映射）。
 ## [1.7.4] — 2026-10-25
 
 **修复两处桌面宿主兼容性问题：`agent.identity` 崩溃、切换 relay 后旧 device token 导致 401 无法入队。**

package/codex/mcp-servers.toml

@@ -12,6 +12,6 @@
 
 [mcp_servers.w2m-fleet]
 command = "npx"
-args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.7.4", "w2m-mcp"]
+args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.7.7", "w2m-mcp"]
 startup_timeout_sec = 20
 tool_timeout_sec = 60

package/docs/acceptance/1.7.5-beta.1/GPW-FOLDER-GATE.json

@@ -0,0 +1,24 @@
+{
+  "version": "1.7.5-beta.1",
+  "case": "GPW-FOLDER-GATE",
+  "kind": "positive",
+  "machines": [
+    "b53a37f4-1464-4512-9259-33a7df091e3e"
+  ],
+  "executed_at": "2026-10-25T13:47:23.010Z",
+  "executor": "lead",
+  "task_id": "local-gpw-20261025134723",
+  "requirement": "under the 完全权限 preset GPW classifies every path into blacklist (deny), whitelist (allow with budget) or other (GPW pending queue), and the operator can add/remove folders from the panel without editing any profile YAML",
+  "result": {
+    "outcome": "ok",
+    "assertions": {
+      "three_classes": "deny wins over allow; workspace and whitelist pass; everything else waits",
+      "deny_mechanism": "ctx.tools.guard returns a reason (order-independent); pre-execute also denies",
+      "whitelist_budget": "auto-allow bounded by rolling window and min gap; exhausted -> pending",
+      "pending_queue": "held calls resolve allow/deny from the GPW route; timeout denies",
+      "panel": "floating \"GPW 文件夹\" launcher in the lower-right corner; panel has whitelist / blacklist / recently-intercepted sections plus the pending queue; folders are added by typing a path (host validates the directory exists) or in one click from a recently intercepted call; client-bundle suite 26/26 green",
+      "storage": "$DSH_HOME/xclient/gpw-folders.json (no profile YAML edits)",
+      "unit_tests": "test/gpw-folder-policy.test.mjs 6/6 pass"
+    }
+  }
+}

package/docs/acceptance/1.7.6/AUDIT-ZERO-RESIDUE.json

@@ -0,0 +1,25 @@
+{
+  "version": "1.7.6",
+  "case": "AUDIT-ZERO-RESIDUE",
+  "kind": "positive",
+  "machines": [
+    "b53a37f4-1464-4512-9259-33a7df091e3e"
+  ],
+  "executed_at": "2026-10-25T15:54:39.817Z",
+  "executor": "lead",
+  "task_id": "local-audit-20261025155439",
+  "requirement": "the test suite leaves no w2m/gpw fixture directories behind, the v1.6.1-v1.7.4 audit is reproducible, and the release gates stay green",
+  "result": {
+    "outcome": "ok",
+    "assertions": {
+      "suite": "2930 tests / 2916 pass / 0 fail / 14 skipped (measured twice, 137.8 s and 220.1 s)",
+      "lint": "eslint . -> 0 errors, 154 warnings",
+      "static_checks": "reachability / layer-check / entrypoints / classify all exit 0",
+      "preflight": "GREEN x2 (16/16 checks, 1 host observation)",
+      "residue_before": "user TEMP held 15,677 w2m-* and 15 gpw-* test directories (13,010 older than one day); one full suite added about 1,000",
+      "residue_fix": "cleaned 15,608; added scripts/temp-residue.mjs + test/helpers/temp-cleanup.mjs; fixed gpw-folder-policy/agent/worktree fixtures",
+      "residue_after": "one full suite adds 74 directories (prefixes itemized in docs/audit/AUDIT-1.6.1-1.7.4.md §4/§6)",
+      "deploy": "primary relay 43.142.74.71 upgraded 1.7.3 -> 1.7.4 (sha256 verified, state preserved, fleet 004945ed 2/2 online)"
+    }
+  }
+}

package/docs/acceptance/1.7.7/GPW-INJECT.json

@@ -0,0 +1,21 @@
+{
+  "version": "1.7.7",
+  "case": "GPW-INJECT",
+  "kind": "positive",
+  "machines": [
+    "b53a37f4-1464-4512-9259-33a7df091e3e"
+  ],
+  "executed_at": "2026-10-25T16:24:13.441Z",
+  "executor": "lead",
+  "task_id": "local-gpw-inject-20261025162413",
+  "requirement": "enabling the dsh-gpw sub-plugin must activate it; every service it reads must be declared in inject, and the folder gate must install its tools/pre-execute listener",
+  "result": {
+    "outcome": "ok",
+    "assertions": {
+      "symptom": "dsh: warning: 1 entry did not activate dsh-gpw (@twinsearth/w2m-dsh-plugin/gpw): Error: cannot get property \"tools\" without inject",
+      "cause": "ctx.tools.guard was read while inject named only permissionPresets",
+      "fix": "inject = ['permissionPresets', 'tools']; guard read is defensive for hosts without the guard extension",
+      "regression": "test/gpw-activation.test.mjs mounts apply() behind a strict Cordis-like Proxy that throws on undeclared reads; 12/12 (with gpw-folder-policy) pass"
+    }
+  }
+}

package/docs/audit/AUDIT-1.6.1-1.7.4.md

@@ -0,0 +1,121 @@
+# 审计报告：v1.6.1 → v1.7.4（含 v1.7.5-beta.1）
+
+- 审计时间：2026-10-25（Asia/Shanghai）
+- 方式：真实执行（build / vet / 全量 test / preflight 门禁）+ 实机部署核验（三台 relay SSH、relay API）
+  + 落库断言（devices.json / fleet 表 / device token）+ 零残留测量（用户 TEMP 真实清理与复测）
+- 代码基线：`E:\GPT\w2m-src\dsh-windows2macos-main`（版本 1.7.5-beta.1，npm latest 仍为 1.7.4）
+- 运行环境：Windows 11 + Node v24.21.0（本机工具链）；relay 主机 Node 22.23.4 / 22.14.0
+
+## 1. 全量构建与质量门禁（真实执行结果）
+
+| 项目 | 命令 | 结果 | 实测耗时 |
+|---|---|---|---|
+| build（pack） | `node scripts/pack.mjs` | exit 0，tarball 1,480,249 B，sha256 `f9b492f4…` | 0.7 s |
+| vet（lint） | `eslint .` | **0 errors / 154 warnings** | 18.9 s |
+| test（全量） | `npm test` 等价（166 个测试文件） | **2930 tests / 2916 pass / 0 fail / 14 skipped** | 137.8 s（干净首轮）220.1 s（修复后复测） |
+| 静态检查 | reachability / layer-check / entrypoints / classify | 全部 exit 0 | 均 < 2 s |
+| preflight 门禁 | `node scripts/preflight.mjs` | **GREEN ×2**（16/16 checks；1 host observation） | 约 2–3 min/轮 |
+
+代码规模：353 个 .mjs/.js 文件，约 121,115 行；`src/plugin` 31 个模块。
+
+## 2. 版本开发进度（1.6.1 → 1.7.4，全部有 Release + CI + Compat）
+
+所有版本均为 GitHub Release 正式版（assets=2：tarball + SHA256SUMS），npm 版本从 1.6.0 连续发布到 1.7.4；
+每个 tag 的 Release / CI / Compat 工作流均为 success（数据来自 GitHub API 实测，见 `audit-161-174/gh-history.json`）。
+
+| 版本 | 日期 | 主题（按 CHANGELOG 归纳） | CI / Compat / Release |
+|---|---|---|---|
+| 1.6.1 | 10-23 | 早期稳定性与窗口/任务报表 | success / success / success |
+| 1.6.2–1.6.4 | 10-24 | 编队计数、窗口、指标修复 | success ×3 |
+| 1.6.5 | 10-24 | 弹窗/UI 修复 | success |
+| 1.6.6 | 10-24 | 自动故障转移（failover）首个版本 | success |
+| 1.6.7 | 10-24 | failover 空引用/重启顺序修复 | success |
+| 1.6.8 | 10-24 | 插件面板「检查插件更新」 | success |
+| 1.6.9 | 10-24 | failover 监视器不阻塞挂载（`agent.start` 非阻塞） | success |
+| 1.7.0 | 10-24 | 聊天框截图按钮 + Ctrl+P | success |
+| 1.7.1 | 10-24 | 宿主侧截图回退（Electron 权限问题） | success |
+| 1.7.2 | 10-24 | 截图改剪贴板、Ctrl+Shift+P、文本可选、按配置主 relay 统计 | success |
+| 1.7.3 | 10-24 | toast 覆盖层/5s 自动消失、全服与本编队分源标注 | success |
+| **1.7.4** | 10-25 | **桌面宿主 `agent.identity` 崩溃修复 + 切换 relay 后旧 token 401 自动重配对**（两次真实事故的根因） | success |
+| 1.7.5-beta.1 | 10-25 | GPW v2 文件夹三分类网关 + 悬浮面板（beta，按仓库策略**不发 npm**） | success / success / Beta #49 success |
+
+## 3. 实机部署与落库断言
+
+### 3.1 三台 relay（审计开始 → 审计结束）
+
+| relay | 审计前版本 | 审计后版本 | 状态 | healthz 延迟 | 编队/设备 |
+|---|---|---|---|---|---|
+| 43.142.74.71（新主） | 1.7.3 | **1.7.4（本次部署）** | active | 73 ms | 1 编队 `004945ed` / 2 设备在线 |
+| 106.53.197.47（旧腾讯云） | 1.6.4 | 1.6.4（未动，服务其它编队） | active | 265 ms | 3/15 编队 · 4/20 设备 |
+| 202.182.123.154（Vultr 备） | 1.6.4 | 1.6.4（未动） | active | 510 ms | 1/1 编队 · 3/5 设备 |
+
+部署方式：npm tarball + sha256 校验（`b6d2a919…` 与实际一致）→ 保留 `/opt/w2m/app-1.7.3-backup` 回滚副本 →
+替换 `/opt/w2m/app` → `systemctl restart w2m-rabbit`。**状态目录 `/var/lib/w2m/rabbit` 未动**：
+devices.json 仍为 1217 B，2 台设备（ToFuture、DSH）token 保留，fleet 表仍为 `004945ed` 且 2/2 在线。
+
+### 3.2 编队归属修复（本次审计发现的真实问题）
+
+- 本机曾被错误地放进新编队 `8e26d696…`（原因：崩溃恢复时 profile 的 w2m 配置行被删，插件走 bundle 默认配置、
+  无 fleetKey，按账户派生键新开了一个编队；环境变量方案因 DSH 启动路径不同未生效）。
+- 修复：直接调用 relay `POST /v1/pair`（fleet_key 路径，server 端派生 fleet_id）为本机签发原编队 token，
+  写入 UTF-8 无 BOM 的 `device.json`。结果：新 relay 编队列表从 2 个（`8e26d696` + `004945ed`）收敛为
+  **1 个 `004945ed`，ToFuture + DSH 同编队 2/2 在线**。
+- 旧 relay 上仍有一条 `ToFuture` 脏记录（fleet `8e26d696`，offline）——重启旧 relay 才可清理，
+  属遗留项（见 §6）。
+
+### 3.3 持久化文件断言
+
+- 新 relay `/var/lib/w2m/rabbit/devices.json`：合法 JSON，2 条设备记录，均含 `device_token`、`fleet_id`、
+  `paired_at`、`fleet_source=fleet_key`。
+- 本机 `~/.dsh/xclient/device.json`：合法 JSON（无 BOM），token 已换为原编队签发值；`localside/agent-state.json`
+  显示 `connected=true, relay_id=ca28b8d559ed1000`。
+- 三台 relay `w2m-rabbit` 均 active；新主 relay 另有 `w2m-bootstrap`、`w2m-stun` 正常。
+
+## 4. 零残留测试（本次审计的真实发现与修复）
+
+**发现**：用户真实 TEMP（`C:\Users\fangw\AppData\Local\Temp`）中累积了 **15,677 个 `w2m-*` + 15 个 `gpw-*`
+测试临时目录**（13,010 个超过 1 天），单轮全量测试新增约 **1,000 个**——测试存在目录泄漏，违反零残留要求。
+
+**修复**：
+1. 新增 `scripts/temp-residue.mjs`（`snapshot / report / clean`：基线对比、按前缀统计、按年龄安全清理）。
+2. 新增 `test/helpers/temp-cleanup.mjs`（基线式 per-test 清理，避免并发测试互删）。
+3. 修复泄漏测试文件：`gpw-folder-policy`、`agent`（workspace 两处 fixture）、`worktree`（makeRepo）。
+4. 清理历史残留 15,608 个目录。
+
+**复测结果**：全量测试完成后新增残留从 ~1,000 个降至 **74 个/轮**（按前缀分布含 `w2m-outbox-`7、
+`w2m-relay-test-`7、`w2m-cap-`6、`w2m-grant-gate-`6 等）——已量化并留作下一轮清理清单（见 §6）。
+
+## 5. 功能与性能实测（当前版本）
+
+| 指标 | 实测值 |
+|---|---|
+| relay healthz 延迟（新主/旧/Vultr） | 73 / 265 / 510 ms |
+| relay uptime（审计时） | 25.5k s / 84.0k s / 12.2k s |
+| 本机 relay RTT（agent-state） | last 40 ms / avg 57 ms（历史样本） |
+| 全量测试 | 2930 用例，0 fail，137.8 s（首轮）/ 220 s（修复后复测） |
+| preflight | 16/16 checks GREEN ×2 |
+| npm 发布连续性 | 1.6.0 → 1.7.4 全部存在；latest=1.7.4；beta 按策略不发 npm |
+| 本机插件版本 | 1.7.4（profile bundle 挂载） |
+| 编队在线 | 新主 relay：ToFuture + DSH，2/2，同编队 `004945ed` |
+
+## 6. 遗留问题与建议（按优先级）
+
+1. **测试残留 74 个/轮**（P2）：下一轮按报告前缀清单继续修（`outbox`、`relay-test`、`cap`、`grant-gate`、
+   `mq-*`、`m3flow-*`、`p-`/`pins`/`q`/`s` 等），目标为 0；`scripts/temp-residue.mjs` 可直接纳入门禁。
+2. **relay 版本漂移**（P2）：旧腾讯云与 Vultr 仍是 1.6.4；建议维护窗口升级到 1.7.4（协议向后兼容，但版本漂移
+   会让故障转移演练测的不是同一套代码）。Vultr 的 Node 仍是 22.14.0（其余 22.23.4）。
+3. **旧 relay 上 ToFuture 脏记录**（P3）：fleet `8e26d696`，需重启旧 relay 状态清理或加运维删除接口。
+4. **v1.7.5-beta.1 的 GPW 面板未做实机 UI 验证**（P3）：代码/单测/门禁已绿，真实浏览器交互（原生文件夹选择器、
+   待审批队列）需在实机 DSH 上跑一遍再转 stable。
+5. **本地仓库改动未推送**（P2）：本次审计修复（测试清理 + `scripts/temp-residue.mjs` + 审计报告）只在本地工作区；
+   `w2m-src` 不是 git 仓库，需按既有 API 推送流程提交（会触发 CI），确认后再做。
+6. 旧 relay 承载其它用户编队（14 个编队/20 设备），任何运维动作应避开其在线用户。
+
+## 7. 结论
+
+- v1.6.1 → v1.7.4 共 14 个正式版本，**Release / CI / Compat 全部 success**，npm 连续可安装，latest=1.7.4。
+- 当前 HEAD（1.7.5-beta.1）全量 **2930 测试 0 失败**，lint **0 error**，静态检查全绿，preflight **GREEN ×2**。
+- 两个真实线上事故（桌面宿主 `agent.identity` 崩溃、切换 relay 后 401）已在 1.7.4 修复并有回归测试；
+  本机编队归属已通过 `POST /v1/pair` 修复并与 DSH 同编队。
+- 新主 relay 已升级到审计版本 **1.7.4**，状态目录保留、2 台设备 token 与编队完整。
+- 零残留：清理 15,608 个历史残留，修复 4 个泄漏测试，单轮残留降至 74（有量化清单），是本次审计最明确的质量缺口。

package/lib/client.js

@@ -133,6 +133,28 @@ const PLUGIN_UPDATE_ROUTE = '/api/w2m/plugin-update';
         capRemaining: '剩余 {hours} 小时',
         capRouteMissing: '这个 Harness 没有提供能力路由',
         capRefused: '能力切换被拒绝：{error}',
+        gpwTitle: 'GPW 文件夹策略',
+        gpwDisabled: 'GPW 未启用（在插件页开启 dsh-gpw）',
+        gpwWhitelist: '白名单（通过）',
+        gpwBlacklist: '黑名单（拒绝）',
+        gpwAddWhite: '添加白名单文件夹',
+        gpwAddBlack: '添加黑名单文件夹',
+        gpwRemove: '移除',
+        gpwPending: '待审批（C 类：名单外）',
+        gpwLauncher: 'GPW 文件夹',
+        gpwManual: '手动输入路径',
+        gpwManualPlaceholder: '例如 D:\\work\\data（绝对路径）',
+        gpwAddManual: '添加',
+        gpwRecent: '最近被拦截',
+        gpwRecentEmpty: '暂无被拦截记录',
+        gpwAddWhiteShort: '加入白名单',
+        gpwAddBlackShort: '加入黑名单',
+        gpwClose: '关闭',
+        gpwBadPath: '路径无效：{error}',
+        gpwInputHint: '目录需已存在；添加后立即生效。',
+        gpwPendingEmpty: '当前没有待审批调用',
+        gpwAllowOnce: '允许本次',
+        gpwDenyOnce: '拒绝本次',
       },
       en: {
         all: 'All machines',
@@ -174,6 +196,17 @@ const PLUGIN_UPDATE_ROUTE = '/api/w2m/plugin-update';
         capRemaining: '{hours} h left',
         capRouteMissing: 'this host does not serve the capability route',
         capRefused: 'the capability switch was refused: {error}',
+        gpwTitle: 'GPW folder policy',
+        gpwDisabled: 'GPW is not enabled (turn on dsh-gpw in the Plugins page)',
+        gpwWhitelist: 'Whitelist (pass)',
+        gpwBlacklist: 'Blacklist (deny)',
+        gpwAddWhite: 'Add whitelist folder',
+        gpwAddBlack: 'Add blacklist folder',
+        gpwRemove: 'Remove',
+        gpwPending: 'Pending approval (class C: on neither list)',
+        gpwPendingEmpty: 'No calls are waiting for approval',
+        gpwAllowOnce: 'Allow this call',
+        gpwDenyOnce: 'Deny this call',
       },
     };
 
@@ -372,6 +405,35 @@ const PLUGIN_UPDATE_ROUTE = '/api/w2m/plugin-update';
       '.w2mCap_trigger[data-on="true"]{color:var(--dsw-alias-state-warn-primary)}',
       '.w2mCap_dot{flex:none;width:8px;height:8px;border-radius:999px;background:var(--dsw-alias-state-idle-primary);box-shadow:inset 0 0 0 1px var(--dsw-alias-border-l2)}',
       '.w2mCap_dot[data-on="true"]{background:var(--dsw-alias-state-warn-primary)}',
+        '.w2mGpw_launcher{position:fixed;right:16px;bottom:96px;z-index:55;padding:6px 10px;border-radius:var(--dsw-radius-lg);border:.5px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);box-shadow:var(--dsw-elevation-soft);font-size:12px;line-height:18px;color:var(--dsw-alias-label-primary);cursor:pointer}',
+        '.w2mGpw_launcher:hover{background:var(--dsw-alias-bg-layer-2)}',
+        '.w2mGpw_overlay{position:fixed;inset:0;z-index:70;background:color-mix(in srgb, var(--dsw-alias-label-primary) 24%, transparent);display:flex;align-items:flex-end;justify-content:flex-end;padding:16px}',
+        '.w2mGpw_card{width:420px;max-width:calc(100vw - 32px);max-height:min(80vh,640px);overflow:auto;box-sizing:border-box;padding:10px 12px;border-radius:var(--dsw-radius-xl);border:.5px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);box-shadow:var(--dsw-elevation-soft);font-size:13px;line-height:20px;color:var(--dsw-alias-label-primary);display:flex;flex-direction:column;gap:6px}',
+        '.w2mGpw_head{display:flex;align-items:center;justify-content:space-between}',
+        '.w2mGpw_close{width:24px;height:24px;border:none;background:transparent;color:var(--dsw-alias-label-secondary);cursor:pointer;font-size:16px;line-height:16px}',
+        '.w2mGpw_title{font-size:12px;font-weight:600}',
+        '.w2mGpw_block{display:flex;flex-direction:column;gap:4px;margin-top:2px;padding-top:6px;border-top:.5px solid var(--dsw-alias-border-default)}',
+        '.w2mGpw_row{display:flex;align-items:center;gap:6px;min-width:0}',
+        '.w2mGpw_path{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;font-size:12px;color:var(--dsw-alias-label-secondary)}',
+        '.w2mGpw_input{box-sizing:border-box;width:100%;padding:5px 8px;border-radius:var(--dsw-radius-md);border:.5px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);font-size:12px;line-height:18px;outline:none}',
+        '.w2mGpw_actions{display:flex;flex-wrap:wrap;gap:6px}',
+        '.w2mGpw_btn{padding:3px 8px;border-radius:var(--dsw-radius-md);border:.5px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);color:var(--dsw-alias-label-primary);font-size:12px;line-height:18px;cursor:pointer}',
+        '.w2mGpw_btn:disabled{opacity:.5;cursor:default}',
+        '.w2mGpw_small{width:22px;padding:0;border:.5px solid var(--dsw-alias-border-l2);border-radius:var(--dsw-radius-md);background:transparent;color:var(--dsw-alias-label-secondary);cursor:pointer}',
+        '.w2mGpw_recent{border:.5px solid var(--dsw-alias-border-default);border-radius:var(--dsw-radius-md);padding:4px 6px;display:flex;flex-direction:column;gap:3px}',
+        '.w2mGpw_tag{flex:none;font-size:11px;padding:0 5px;border-radius:999px;border:.5px solid var(--dsw-alias-border-l2)}',
+        '.w2mGpw_tag[data-d="deny"]{border-color:var(--dsw-alias-state-danger-primary);color:var(--dsw-alias-state-danger-primary)}',
+        '.w2mGpw_note{font-size:12px;color:var(--dsw-alias-label-secondary)}',
+        '.w2mGpw_hint{font-size:11px;color:var(--dsw-alias-label-tertiary)}',
+        '.w2mGpw{margin-top:6px;padding-top:6px;border-top:.5px solid var(--dsw-alias-border-default);display:flex;flex-direction:column;gap:4px;max-height:320px;overflow:auto}',
+        '.w2mGpw_title{font-size:11px;font-weight:600;color:var(--dsw-alias-label-primary)}',
+        '.w2mGpw_block{display:flex;flex-direction:column;gap:2px;margin:2px 0 6px}',
+        '.w2mGpw_row{display:flex;align-items:center;gap:4px}',
+        '.w2mGpw_row .w2mGpw_path{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;font-size:11px;color:var(--dsw-alias-label-secondary)}',
+        '.w2mGpw_path{font-size:11px;color:var(--dsw-alias-label-secondary);word-break:break-all}',
+        '.w2mGpw_small{width:20px;padding:0}',
+        '.w2mGpw_pending{border:.5px solid var(--dsw-alias-border-default);border-radius:6px;padding:4px 6px;display:flex;flex-direction:column;gap:2px}',
+        '.w2mGpw_actions{display:flex;gap:6px}',
       '.w2mCap_menu{position:fixed;z-index:60;box-sizing:border-box;width:280px;padding:4px;border-radius:var(--dsw-radius-lg);border:.5px solid var(--dsw-alias-border-l2);background:var(--dsw-alias-bg-layer-1);box-shadow:var(--dsw-elevation-soft);font-size:13px;line-height:20px;color:var(--dsw-alias-label-primary)}',
       '.w2mCap_option{display:block;width:100%;box-sizing:border-box;padding:6px 8px;border:none;border-radius:var(--dsw-radius-sm);background:transparent;color:inherit;font:inherit;text-align:left;cursor:pointer}',
       '.w2mCap_option:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}',
@@ -467,6 +529,145 @@ const PLUGIN_UPDATE_ROUTE = '/api/w2m/plugin-update';
      * target is a choice about the *next* dispatch, which is legitimate to change while a turn runs.
      * `t` arrives through the entry's inject face (see {@link apply}).
      */
+
+    /**
+     * GPW v2 operator panel + launcher (v1.7.5-beta.1).
+     *
+     * The launcher is a floating button pinned to the lower-right corner (a slot entry cannot choose its own screen
+     * position, so it pins itself with CSS). The panel has the three sections the operator asked for -- whitelist,
+     * blacklist, recently intercepted -- plus the pending queue for class-C calls. Folders enter a list in one of two
+     * ways: typed here and validated by the host, or taken from a recently intercepted call in one click. The lists
+     * live in $DSH_HOME/xclient/gpw-folders.json; no profile YAML is edited by this feature.
+     */
+    function GpwPanel({ t, onClose }) {
+      const [state, setState] = React.useState(null);
+      const [error, setError] = React.useState(null);
+      const [busy, setBusy] = React.useState(false);
+      const [manual, setManual] = React.useState('');
+      const [badPath, setBadPath] = React.useState(null);
+      const call = React.useCallback(async (url, init) => {
+        try {
+          const response = await fetch(url, { credentials: 'same-origin', headers: { accept: 'application/json', ...(init?.body === undefined ? {} : { 'content-type': 'application/json' }) }, ...init });
+          let body = null;
+          try { body = await response.json(); } catch { body = null; }
+          if (response.status === 404) return { ok: false, routeMissing: true, error: 'GPW route missing' };
+          if (response.ok !== true || body?.ok === false) return { ok: false, error: body?.error ?? ('HTTP ' + response.status) };
+          return { ok: true, body };
+        } catch (error) {
+          return { ok: false, error: error instanceof Error ? error.message : String(error) };
+        }
+      }, []);
+      const load = React.useCallback(async () => {
+        const result = await call('/api/w2m/gpw/state', { method: 'GET' });
+        if (result.ok) { setState(result.body); setError(null); } else setError(result.routeMissing ? t('gpwDisabled') : (result.error ?? 'error'));
+      }, [call, t]);
+      React.useEffect(() => {
+        load();
+        const timer = setInterval(() => { load(); }, 3000);
+        return () => clearInterval(timer);
+      }, [load]);
+      const addFolder = async (list, path) => {
+        setBusy(true);
+        try {
+          const result = await call('/api/w2m/gpw/folders', { method: 'POST', body: JSON.stringify({ action: 'add', list, path }) });
+          if (result.ok !== true) { setBadPath(result.error ?? 'error'); return false; }
+          setBadPath(null);
+          await load();
+          return true;
+        } finally { setBusy(false); }
+      };
+      const addTyped = async (list) => {
+        const ok = await addFolder(list, manual);
+        if (ok === true) setManual('');
+      };
+      const removeFolder = async (list, path) => {
+        setBusy(true);
+        try { await call('/api/w2m/gpw/folders', { method: 'POST', body: JSON.stringify({ action: 'remove', list, path }) }); await load(); } finally { setBusy(false); }
+      };
+      const decide = async (id, decision) => {
+        setBusy(true);
+        try { await call('/api/w2m/gpw/decide', { method: 'POST', body: JSON.stringify({ id, decision }) }); await load(); } finally { setBusy(false); }
+      };
+      const folderList = (title, list) => h('div', { key: list, className: 'w2mGpw_block' }, [
+        h('div', { key: 'title', className: 'w2mGpw_title' }, title),
+        ...(state?.folders?.[list] ?? []).map((path) => h('div', { key: path, className: 'w2mGpw_row' }, [
+          h('span', { key: 'p', className: 'w2mGpw_path', title: path }, path),
+          h('button', { key: 'x', type: 'button', className: 'w2mGpw_small', disabled: busy, onClick: () => removeFolder(list, path) }, '×'),
+        ])),
+      ]);
+      const recent = Array.isArray(state?.recent) ? state.recent : [];
+      const pending = Array.isArray(state?.pending) ? state.pending : [];
+      return h('div', { className: 'w2mGpw_overlay', role: 'dialog', 'aria-label': t('gpwTitle') }, [
+        h('div', { key: 'card', className: 'w2mGpw_card' }, [
+          h('div', { key: 'head', className: 'w2mGpw_head' }, [
+            h('span', { key: 'title', className: 'w2mGpw_title' }, t('gpwTitle')),
+            h('button', { key: 'close', type: 'button', className: 'w2mGpw_close', onClick: onClose }, '×'),
+          ]),
+          error === null ? null : h('div', { key: 'err', className: 'w2mGpw_note' }, error),
+          h('div', { key: 'manual', className: 'w2mGpw_manual' }, [
+            h('div', { key: 'label', className: 'w2mGpw_title' }, t('gpwManual')),
+            h('input', {
+              key: 'input',
+              className: 'w2mGpw_input',
+              value: manual,
+              placeholder: t('gpwManualPlaceholder'),
+              onChange: (event) => { setManual(event.target.value); setBadPath(null); },
+              onKeyDown: (event) => { if (event.key === 'Enter' && manual.trim() !== '') addTyped('whitelist'); },
+            }),
+            h('div', { key: 'buttons', className: 'w2mGpw_actions' }, [
+              h('button', { key: 'w', type: 'button', className: 'w2mGpw_btn', disabled: busy || manual.trim() === '', onClick: () => addTyped('whitelist') }, t('gpwAddWhiteShort')),
+              h('button', { key: 'b', type: 'button', className: 'w2mGpw_btn', disabled: busy || manual.trim() === '', onClick: () => addTyped('blacklist') }, t('gpwAddBlackShort')),
+            ]),
+            badPath === null ? null : h('div', { key: 'bad', className: 'w2mGpw_note' }, t('gpwBadPath', { error: badPath })),
+            h('div', { key: 'hint', className: 'w2mGpw_hint' }, t('gpwInputHint')),
+          ]),
+          folderList(t('gpwWhitelist'), 'whitelist'),
+          folderList(t('gpwBlacklist'), 'blacklist'),
+          h('div', { key: 'recent', className: 'w2mGpw_block' }, [
+            h('div', { key: 'title', className: 'w2mGpw_title' }, t('gpwRecent')),
+            recent.length === 0 ? h('div', { key: 'none', className: 'w2mGpw_note' }, t('gpwRecentEmpty')) : null,
+            ...recent.map((item, index) => h('div', { key: 'r' + index, className: 'w2mGpw_recent' }, [
+              h('div', { key: 'r1', className: 'w2mGpw_row' }, [
+                h('span', { key: 'd', className: 'w2mGpw_tag', 'data-d': item.decision }, item.decision),
+                h('span', { key: 't', className: 'w2mGpw_path', title: item.paths?.[0] ?? '' }, (item.folder ?? item.paths?.[0] ?? item.tool)),
+              ]),
+              item.folder === null || item.folder === undefined ? null : h('div', { key: 'r2', className: 'w2mGpw_actions' }, [
+                h('button', { key: 'w', type: 'button', className: 'w2mGpw_btn', disabled: busy, onClick: () => addFolder('whitelist', item.folder) }, t('gpwAddWhiteShort')),
+                h('button', { key: 'b', type: 'button', className: 'w2mGpw_btn', disabled: busy, onClick: () => addFolder('blacklist', item.folder) }, t('gpwAddBlackShort')),
+              ]),
+            ])),
+          ]),
+          pending.length === 0 ? null : h('div', { key: 'pending', className: 'w2mGpw_block' }, [
+            h('div', { key: 'title', className: 'w2mGpw_title' }, t('gpwPending')),
+            ...pending.map((item) => h('div', { key: item.id, className: 'w2mGpw_recent' }, [
+              h('div', { key: 'p1', className: 'w2mGpw_path' }, item.tool + ' · ' + (item.reason ?? '')),
+              ...(Array.isArray(item.paths) ? item.paths.slice(0, 3).map((p, i) => h('div', { key: 'p' + i, className: 'w2mGpw_path' }, p)) : []),
+              h('div', { key: 'p2', className: 'w2mGpw_actions' }, [
+                h('button', { key: 'a', type: 'button', className: 'w2mGpw_btn', disabled: busy, onClick: () => decide(item.id, 'allow') }, t('gpwAllowOnce')),
+                h('button', { key: 'd', type: 'button', className: 'w2mGpw_btn', disabled: busy, onClick: () => decide(item.id, 'deny') }, t('gpwDenyOnce')),
+              ]),
+            ])),
+          ]),
+        ]),
+      ]);
+    }
+
+    /** The floating launcher: the panel is fixed to the lower-right corner and does not consume composer space. */
+    function GpwLauncher({ t }) {
+      const [open, setOpen] = React.useState(false);
+      return h(React.Fragment, null, [
+        h('button', {
+          key: 'launcher',
+          type: 'button',
+          className: 'w2mGpw_launcher',
+          title: t('gpwLauncher'),
+          'aria-expanded': open,
+          onClick: () => setOpen((wasOpen) => !wasOpen),
+        }, t('gpwLauncher')),
+        open ? h(GpwPanel, { key: 'panel', t, onClose: () => setOpen(false) }) : null,
+      ]);
+    }
+
     /** v1.6.8: one button beside the relay rows: check npm for a newer plugin, install it, ask for a restart. */
 function PluginUpdate({ t }) {
   const [state, setState] = React.useState({ status: 'idle', info: null, error: null });
@@ -1329,6 +1530,19 @@ function TargetSelect({ sessionId, locked: _locked, t }) {
           t,
         }),
       }, TargetSelect));        // v1.4.2: the Node-code-execution switch, one seat to the right of the chat panel.
+        // v1.7.5-beta.1: the GPW folder panel is a floating button, so it is its own slot entry rather than a
+        // row inside the composer; the slot fixes its mount lifetime, the CSS fixes its corner.
+        try {
+          slots.inject('conversation.input.left', () => slots.register({
+            name: 'conversation.input.left',
+            id: 'w2m-gpw',
+            order: 43,
+            label: 'GPW folders',
+            inject: () => ({ t }),
+          }, GpwLauncher));
+        } catch (error) {
+          console.error('@twinsearth/w2m-dsh-plugin: the GPW folder panel was not mounted; the rest of the page is unaffected', error);
+        }
         try {
           slots.inject('conversation.input.left', () => slots.register({
             name: 'conversation.input.left',
@@ -1386,7 +1600,8 @@ function TargetSelect({ sessionId, locked: _locked, t }) {
     exports.apply = apply;
     exports.inject = inject;
     exports.TargetSelect = TargetSelect;
-    exports.FleetChat = FleetChat;
+    exports.GpwLauncher = GpwLauncher;
+      exports.FleetChat = FleetChat;
     exports.injectStyle = injectStyle;
     exports.makeTranslator = makeTranslator;
     return module.exports;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "1.7.4",
+  "version": "1.7.7",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "type": "module",
   "exports": {
@@ -64,7 +64,7 @@
     "pack": "node scripts/pack.mjs",
     "reachability": "node scripts/reachability-check.mjs",
     "reachability:classify": "node scripts/reachability-classify.mjs",
-    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs test/task-deps.test.mjs test/dataflow-wiring.test.mjs test/task-graph.test.mjs test/ask-store.test.mjs test/turn.test.mjs test/fleet-members.test.mjs test/redact.test.mjs test/policy-matrix.test.mjs test/envelope-signature.test.mjs test/chat-crypto.test.mjs test/reduce-suggestion.test.mjs test/merge-hint.test.mjs test/fleet-chat-route.test.mjs test/maintenance.test.mjs test/maintenance-ferry.test.mjs test/grant.test.mjs test/grant-gate.test.mjs test/worktree.test.mjs test/patch-artifact.test.mjs test/merge-queue.test.mjs test/m3-workflow.test.mjs test/project-room.test.mjs test/project-attribution.test.mjs test/project-locks.test.mjs test/project-reviews.test.mjs test/project-notifications.test.mjs test/blob-sessions.test.mjs test/outbox.test.mjs test/reliability-metrics.test.mjs test/evidence.test.mjs test/grant-issue.test.mjs test/project-refs.test.mjs test/exec-capability.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs test/capture-route.test.mjs test/update-resolver.test.mjs test/agent-identity-safe.test.mjs test/re-pair-stale-token.test.mjs",
+    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs  test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs test/task-deps.test.mjs test/dataflow-wiring.test.mjs test/task-graph.test.mjs test/ask-store.test.mjs test/turn.test.mjs test/fleet-members.test.mjs test/redact.test.mjs test/policy-matrix.test.mjs test/envelope-signature.test.mjs test/chat-crypto.test.mjs test/reduce-suggestion.test.mjs test/merge-hint.test.mjs test/fleet-chat-route.test.mjs test/maintenance.test.mjs test/maintenance-ferry.test.mjs test/grant.test.mjs test/grant-gate.test.mjs test/worktree.test.mjs test/patch-artifact.test.mjs test/merge-queue.test.mjs test/m3-workflow.test.mjs test/project-room.test.mjs test/project-attribution.test.mjs test/project-locks.test.mjs test/project-reviews.test.mjs test/project-notifications.test.mjs test/blob-sessions.test.mjs test/outbox.test.mjs test/reliability-metrics.test.mjs test/evidence.test.mjs test/grant-issue.test.mjs test/project-refs.test.mjs test/exec-capability.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs test/capture-route.test.mjs test/update-resolver.test.mjs test/agent-identity-safe.test.mjs test/re-pair-stale-token.test.mjs test/gpw-folder-policy.test.mjs test/gpw-activation.test.mjs",
     "test:acceptance-doc": "node --test --test-force-exit test/acceptance-doc.test.mjs",
     "test:account-identity": "node --test --test-force-exit test/account-identity.test.mjs",
     "test:account-join": "node --test --test-force-exit test/account-join.test.mjs",
@@ -82,7 +82,7 @@
     "test:council-session": "node --test --test-force-exit test/council-session.test.mjs",
     "test:crossnetwork": "node --test --test-force-exit test/crossnetwork.test.mjs",
     "test:crypto-blake2s": "node --test --test-force-exit test/crypto-blake2s.test.mjs",
-    "test:e2e": "node --test --test-force-exit test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/p2p-agent.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs test/capture-route.test.mjs test/update-resolver.test.mjs test/agent-identity-safe.test.mjs test/re-pair-stale-token.test.mjs",
+    "test:e2e": "node --test --test-force-exit test/e2e.test.mjs test/crossnetwork.test.mjs test/signing-e2e.test.mjs test/outbound-only.test.mjs test/recovery.test.mjs test/pipeline-e2e.test.mjs test/p2p-agent.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs test/capture-route.test.mjs test/update-resolver.test.mjs test/agent-identity-safe.test.mjs test/re-pair-stale-token.test.mjs test/gpw-folder-policy.test.mjs test/gpw-activation.test.mjs",
     "test:exec-env": "node --test --test-force-exit test/exec-env-injection.test.mjs",
     "test:exit-channel": "node --test --test-force-exit test/exit-channel.test.mjs",
     "test:field-authority": "node --test --test-force-exit test/field-authority.test.mjs",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "twinsearth-w2m-dsh",
-  "version": "1.7.4",
+  "version": "1.7.7",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 12 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "license": "MIT",
   "keywords": [