@twinsearth/w2m-dsh-plugin 1.9.1 → 1.9.3

package/.claude-plugin/marketplace.json

@@ -5,14 +5,14 @@
   },
   "metadata": {
     "description": "The w2m fleet plugins: one account, many machines, any of Windows, macOS or Linux.",
-    "version": "1.9.1"
+    "version": "1.9.3"
   },
   "plugins": [
     {
       "name": "w2m-fleet",
       "source": "./",
       "description": "Read fleet state and dispatch commands across the machines registered to one account. Read-only MCP surface: the five exposed tools cannot change anything.",
-      "version": "1.9.1",
+      "version": "1.9.3",
       "author": {
         "name": "TwinsEarth"
       },
@@ -26,5 +26,5 @@
       ]
     }
   ],
-  "version": "1.9.1"
+  "version": "1.9.3"
 }

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "w2m-fleet",
   "description": "Drive the same project on online Windows, macOS and Linux machines from one account: read fleet state, dispatch commands and read results. The MCP surface is deliberately read-only.",
-  "version": "1.9.1",
+  "version": "1.9.3",
   "author": {
     "name": "TwinsEarth"
   },

package/CHANGELOG.md

@@ -7,10 +7,21 @@
 
 All notable changes to this project are documented here.
 
-## [1.9.1] — 2026-10-27
-
+## [1.9.3] - 2026-10-27
+- 左侧边栏新增常驻 GPW 入口（默认显示、无关闭按钮），Composer 与右下角浮窗保留。
+- 插件设置页新增“W2M 插件更新”分区：检测更新、发现新版本后立即安装、自动更新开关（开启后每次启动自动安装）。
+- 更新检测修复：设置页打开即检查；本机为旧版时直接显示新版本号与安装按钮；npm 镜像不可用时回退 registry.npmjs.org。
+- 自动更新不再只是偏好：开关打开后会实际调用校验与安装流程，并提示重启。
+
+## [1.9.2-beta.1] - 2026-10-27
+- P0 止血：relay 数据面端点退役（blob/blob-sessions/latest → 403），结果信封校验后投影后存储（不再落 argv/head/tail/路径原文）。
+- B1 兼容窗口：默认接收 v1 信封并投影，设置 W2M_DATA_PLANE_GUARD=enforce 才硬拒。
+- guard 递归扫描 + 16 KiB 语义上限 + 协议错误形状。
+- beta：仅 GitHub prerelease，不含 npm/packages 发布。
 **V1.9.1 更新**
 
+## [1.9.1] — 2026-10-27
+
 ## [1.9.0] — 2026-10-27
 
 **V1.9.0 大版本更新**

package/codex/mcp-servers.toml

@@ -12,6 +12,6 @@
 
 [mcp_servers.w2m-fleet]
 command = "npx"
-args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.9.1", "w2m-mcp"]
+args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.9.3", "w2m-mcp"]
 startup_timeout_sec = 20
 tool_timeout_sec = 60

package/docs/acceptance/1.9.3/RELEASE-193.json

@@ -0,0 +1,21 @@
+{
+  "version": "1.9.3",
+  "case": "RELEASE-193",
+  "kind": "positive",
+  "machines": [
+    "b53a37f4-1464-4512-9259-33a7df091e3e"
+  ],
+  "executed_at": "2026-10-27T12:59:16.096Z",
+  "executor": "lead",
+  "task_id": "pre-release-193-1793105956097",
+  "requirement": "V1.9.3 发布验收：左侧边栏常驻 GPW 入口；插件设置页检测更新/自动更新；旧版安装可发现新版本",
+  "result": {
+    "outcome": "ok",
+    "assertions": {
+      "gates": "preflight GREEN, full suite 3167 passed",
+      "sidebar_gpw": "sidebar.footer.action registered, always visible, no close affordance",
+      "update_settings": "settings.section registered; check-on-mount; install button when outdated; auto-update toggle performs install",
+      "update_check_fix": "npm mirror failure falls back to registry.npmjs.org; settings shows latest/current without a click"
+    }
+  }
+}

package/lib/client.js

@@ -493,7 +493,17 @@ const PLUGIN_UPDATE_ROUTE = '/api/w2m/plugin-update';
         '.w2mChat_threadHead{font-size:11px;color:var(--dsw-alias-label-tertiary);padding:4px 10px 0}',
         '.w2mChat_unseen{margin-left:6px;min-width:16px;padding:0 5px;border-radius:8px;background:var(--dsw-alias-accent-default);color:var(--dsw-alias-label-on-accent);font-size:10px;line-height:16px;text-align:center}',
         // v1.6.10: the transcript is selectable text; screenshots get a preview and a copy affordance.
-        '.w2mChat_panel,.w2mChat_panel *{user-select:text!important;-webkit-user-select:text!important;cursor:text}',
+        '.w2mGpw_sideEntry{display:flex;align-items:center;gap:6px;width:100%;padding:6px 10px;border:0;background:transparent;color:inherit;font:inherit;cursor:pointer;border-radius:6px}',
+  '.w2mGpw_sideEntry:hover{background:rgba(127,127,127,.14)}',
+  '.w2mGpw_sideIcon{font-size:15px;line-height:1}',
+  '.w2mGpw_sideLabel{font-size:12px;font-weight:600;letter-spacing:.02em}',
+  '.w2mUpdateSection{display:flex;flex-direction:column;gap:8px;max-width:640px}',
+  '.w2mUpdateStatus{font-size:12px;opacity:.8}',
+  '.w2mUpdateRow{display:flex;align-items:center;gap:10px;flex-wrap:wrap}',
+  '.w2mUpdateBtn{padding:4px 10px;border-radius:6px;border:1px solid rgba(127,127,127,.4);background:transparent;color:inherit;font:inherit;cursor:pointer}',
+  '.w2mUpdateAuto{display:inline-flex;align-items:center;gap:6px;font-size:12px;opacity:.9}',
+  
+  '.w2mChat_panel,.w2mChat_panel *{user-select:text!important;-webkit-user-select:text!important;cursor:text}',
         '.w2mChat_copy{cursor:pointer!important}',
         '.w2mChat_copy{margin-left:6px;border:none;background:transparent;color:var(--dsw-alias-label-tertiary);cursor:pointer;font-size:11px;line-height:14px;padding:0 2px;vertical-align:middle}',
         '.w2mChat_copy:hover{color:var(--dsw-alias-label-primary)}',
@@ -875,6 +885,93 @@ function PluginUpdate({ t }) {
     state.status === 'error' ? h('div', { key: 'e', className: cls('relayHint') }, String(state.error ?? 'error')) : null,
   ]);
 }
+/**
+ * v1.9.3: the GPW entry in the LEFT sidebar footer. It is always rendered and carries no close
+ * affordance -- the operator asked for a permanent entry in addition to the composer and the
+ * floating launcher. The click reuses the launcher's event so there is one panel, not two.
+ */
+function GpwSidebarFooter() {
+  return h('button', {
+    type: 'button',
+    className: 'w2mGpw_sideEntry',
+    'data-w2m-gpw-sidebar': 'true',
+    title: 'GPW 文件夹策略',
+    onClick: () => {
+      try { window.dispatchEvent(new CustomEvent('w2m-gpw-open')); } catch { /* headless render */ }
+    },
+  }, [
+    h('span', { key: 'i', className: 'w2mGpw_sideIcon', 'aria-hidden': 'true' }, '📁'),
+    h('span', { key: 'l', className: 'w2mGpw_sideLabel' }, 'GPW'),
+  ]);
+}
+
+const AUTO_UPDATE_PREF = 'w2m:plugin-auto-update';
+
+/**
+ * v1.9.3: the update section on the plugin settings page.
+ *
+ * Two operator requests meet here: a check that still says something when the installed build is
+ * old (the old button lived inside the composer dropdown and was easy to miss), and an auto-update
+ * switch that actually performs the install instead of only remembering a preference.
+ */
+function UpdateSettingsSection() {
+  const [state, setState] = React.useState({ status: 'idle', info: null, error: null });
+  const [auto, setAuto] = React.useState(false);
+  React.useEffect(() => {
+    try { setAuto(globalThis.localStorage?.getItem(AUTO_UPDATE_PREF) === '1'); } catch { /* storage off */ }
+  }, []);
+  const run = React.useCallback(async ({ install }) => {
+    setState({ status: 'checking', info: null, error: null });
+    try {
+      const checked = await fetch(PLUGIN_UPDATE_ROUTE, { method: 'GET', credentials: 'same-origin', headers: { accept: 'application/json' } });
+      const info = await checked.json().catch(() => ({}));
+      if (info.ok !== true) { setState({ status: 'error', info, error: info.error ?? 'update check failed' }); return; }
+      if (install !== true || info.update_available !== true) {
+        setState({ status: info.update_available === true ? 'available' : 'current', info, error: null });
+        return;
+      }
+      setState({ status: 'applying', info, error: null });
+      const applied = await fetch(PLUGIN_UPDATE_ROUTE, { method: 'POST', credentials: 'same-origin', headers: { accept: 'application/json', 'content-type': 'application/json' }, body: JSON.stringify({ action: 'apply' }) });
+      const result = await applied.json().catch(() => ({}));
+      if (result.ok !== true) { setState({ status: 'error', info: result, error: result.error ?? result.reason ?? 'update failed' }); return; }
+      setState({ status: 'installed', info: { ...info, ...result }, error: null });
+    } catch (error) {
+      setState({ status: 'error', info: null, error: error instanceof Error ? error.message : String(error) });
+    }
+  }, []);
+  const toggleAuto = (event) => {
+    const next = event?.target?.checked === true;
+    setAuto(next);
+    try { globalThis.localStorage?.setItem(AUTO_UPDATE_PREF, next ? '1' : '0'); } catch { /* storage off */ }
+    if (next) run({ install: true });
+  };
+  // v1.9.3: state the update picture as soon as the section opens, so an outdated install is
+  // visible without a click; the auto path below only adds the install step.
+  React.useEffect(() => { run({ install: false }); }, [run]);
+  React.useEffect(() => { if (auto) run({ install: true }); }, [auto, run]);
+  const busy = state.status === 'checking' || state.status === 'applying';
+  const statusText = state.status === 'checking' ? '正在检测更新…'
+    : state.status === 'applying' ? '正在安装更新…'
+    : state.status === 'available' ? ('发现新版本 ' + (state.info?.latest ?? '?') + '（当前 ' + (state.info?.current ?? '?') + '）')
+    : state.status === 'installed' ? ('已安装 ' + (state.info?.to ?? state.info?.latest ?? '?') + '，重启后生效')
+    : state.status === 'current' ? ('已是最新版本 ' + (state.info?.current ?? state.info?.latest ?? '?'))
+    : state.status === 'error' ? ('更新失败：' + String(state.error ?? 'unknown'))
+    : '检测插件是否有新版本；开启自动更新后每次启动自动安装。';
+  return h('div', { className: 'w2mUpdateSection', 'data-w2m-update-section': state.status }, [
+    h('div', { key: 's', className: 'w2mUpdateStatus' }, statusText),
+    h('div', { key: 'row', className: 'w2mUpdateRow' }, [
+      h('button', { key: 'check', type: 'button', className: 'w2mUpdateBtn', disabled: busy, onClick: () => run({ install: false }) }, '检测更新'),
+      state.status === 'available'
+        ? h('button', { key: 'install', type: 'button', className: 'w2mUpdateBtn', disabled: busy, onClick: () => run({ install: true }) }, '立即更新')
+        : null,
+      h('label', { key: 'auto', className: 'w2mUpdateAuto' }, [
+        h('input', { key: 'c', type: 'checkbox', checked: auto, disabled: state.status === 'applying', onChange: toggleAuto }),
+        h('span', { key: 'l' }, '自动更新'),
+      ]),
+    ]),
+  ]);
+}
+
 function TargetSelect({ sessionId, locked: _locked, t }) {
       const [open, setOpen] = React.useState(false);
       // v1.5.1: relay folding. The snapshot carries the pool; when it holds more than three nodes
@@ -1709,6 +1806,30 @@ function TargetSelect({ sessionId, locked: _locked, t }) {
         } catch (error) {
           console.error('@twinsearth/w2m-dsh-plugin: the GPW folder panel was not mounted; the rest of the page is unaffected', error);
         }
+        // v1.9.3: the left-sidebar GPW entry (always visible, no close affordance).
+        // A missing seat must not take the page down: this is an extra path to the same panel.
+        try {
+          slots.inject('sidebar.footer.action', () => slots.register({
+            name: 'sidebar.footer.action',
+            id: 'w2m-gpw-sidebar',
+            label: 'GPW folders',
+            inject: () => ({}),
+          }, GpwSidebarFooter));
+        } catch (error) {
+          console.error('@twinsearth/w2m-dsh-plugin: the sidebar GPW entry was not mounted; the composer and launcher still work', error);
+        }
+        // v1.9.3: check-update + auto-update on the plugin settings page.
+        try {
+          slots.inject('settings.section', () => slots.register({
+            name: 'settings.section',
+            id: 'w2m-update',
+            order: 90,
+            label: () => 'W2M 插件更新',
+            inject: () => ({}),
+          }, UpdateSettingsSection));
+        } catch (error) {
+          console.error('@twinsearth/w2m-dsh-plugin: the update settings section was not mounted; the composer button still works', error);
+        }
         // v1.7.9: the inline pending prompt, mounted in the same composer row so an interception
         // asks allow/deny immediately instead of waiting silently in the panel.
         try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "1.9.1",
+  "version": "1.9.3",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "type": "module",
   "exports": {
@@ -64,7 +64,7 @@
     "pack": "node scripts/pack.mjs",
     "reachability": "node scripts/reachability-check.mjs",
     "reachability:classify": "node scripts/reachability-classify.mjs",
-    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs test/task-deps.test.mjs test/dataflow-wiring.test.mjs test/task-graph.test.mjs test/ask-store.test.mjs test/turn.test.mjs test/fleet-members.test.mjs test/redact.test.mjs test/policy-matrix.test.mjs test/envelope-signature.test.mjs test/chat-crypto.test.mjs test/reduce-suggestion.test.mjs test/merge-hint.test.mjs test/fleet-chat-route.test.mjs test/maintenance.test.mjs test/maintenance-ferry.test.mjs test/grant.test.mjs test/grant-gate.test.mjs test/worktree.test.mjs test/patch-artifact.test.mjs test/merge-queue.test.mjs test/m3-workflow.test.mjs test/project-room.test.mjs test/project-attribution.test.mjs test/project-locks.test.mjs test/project-reviews.test.mjs test/project-notifications.test.mjs test/blob-sessions.test.mjs test/outbox.test.mjs test/reliability-metrics.test.mjs test/evidence.test.mjs test/grant-issue.test.mjs test/project-refs.test.mjs test/exec-capability.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs test/capture-route.test.mjs test/update-resolver.test.mjs test/agent-identity-safe.test.mjs test/re-pair-stale-token.test.mjs test/gpw-folder-policy.test.mjs test/gpw-activation.test.mjs test/gpw-hardening.test.mjs test/gpw-tamper-gate.test.mjs test/gpw-persistence.test.mjs test/gpw-colors.test.mjs test/gpw-recent-fold.test.mjs test/gpw-auto-approve.test.mjs",
+    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs test/task-deps.test.mjs test/dataflow-wiring.test.mjs test/task-graph.test.mjs test/ask-store.test.mjs test/turn.test.mjs test/fleet-members.test.mjs test/redact.test.mjs test/policy-matrix.test.mjs test/envelope-signature.test.mjs test/chat-crypto.test.mjs test/reduce-suggestion.test.mjs test/merge-hint.test.mjs test/fleet-chat-route.test.mjs test/maintenance.test.mjs test/maintenance-ferry.test.mjs test/grant.test.mjs test/grant-gate.test.mjs test/worktree.test.mjs test/patch-artifact.test.mjs test/merge-queue.test.mjs test/m3-workflow.test.mjs test/project-room.test.mjs test/project-attribution.test.mjs test/project-locks.test.mjs test/project-reviews.test.mjs test/project-notifications.test.mjs test/blob-sessions.test.mjs test/outbox.test.mjs test/reliability-metrics.test.mjs test/evidence.test.mjs test/grant-issue.test.mjs test/project-refs.test.mjs test/exec-capability.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs test/capture-route.test.mjs test/update-resolver.test.mjs test/agent-identity-safe.test.mjs test/re-pair-stale-token.test.mjs test/gpw-folder-policy.test.mjs test/gpw-activation.test.mjs test/gpw-hardening.test.mjs test/gpw-tamper-gate.test.mjs test/gpw-persistence.test.mjs test/gpw-colors.test.mjs test/gpw-recent-fold.test.mjs test/gpw-auto-approve.test.mjs test/data-plane.test.mjs test/sealed-object.test.mjs test/joint-dev-dispatch.test.mjs test/joint-dev-loop.test.mjs test/joint-dev-audit.test.mjs test/joint-dev-redline.test.mjs test/relay-redline-guard.test.mjs test/relay-p0-projection.test.mjs test/guarded-dispatch.test.mjs test/p0-single-matcher.test.mjs test/path-policy.test.mjs test/path-policy-fs.test.mjs test/gpw-inheritance-table.test.mjs test/gpw-policy-adapter.test.mjs test/target-policy.test.mjs",
     "test:acceptance-doc": "node --test --test-force-exit test/acceptance-doc.test.mjs",
     "test:account-identity": "node --test --test-force-exit test/account-identity.test.mjs",
     "test:account-join": "node --test --test-force-exit test/account-join.test.mjs",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "twinsearth-w2m-dsh",
-  "version": "1.9.1",
+  "version": "1.9.3",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 12 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "license": "MIT",
   "keywords": [

package/src/agent/sinks/dir-sink.mjs

@@ -0,0 +1,33 @@
+/**
+ * 目录 sink（本地/局域网共享盘）：密封对象落盘、按内容哈希取回。
+ * 数据面适配器的最小实现；git/ssh 适配器同契约，后续补。
+ * 对象已经是 sealObject() 的密文，sink 不接触明文与密钥。
+ */
+import { createHash } from 'node:crypto';
+import { mkdirSync, readFileSync, writeFileSync, existsSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+
+export function createDirSink({ root }) {
+  if (typeof root !== 'string' || root === '') throw new Error('SINK_ROOT_REQUIRED');
+  mkdirSync(root, { recursive: true });
+  return {
+    kind: 'dir',
+    async pushObject({ sealed }) {
+      if (sealed === null || typeof sealed !== 'object') return { ok: false, code: 'OBJECT_INVALID' };
+      const body = JSON.stringify(sealed);
+      const id = createHash('sha256').update(body, 'utf8').digest('hex');
+      const path = join(root, id + '.json');
+      writeFileSync(path, body, { encoding: 'utf8', mode: 0o600 });
+      return { ok: true, objectId: id, path, bytes: Buffer.byteLength(body, 'utf8') };
+    },
+    async fetchObject({ objectId }) {
+      if (typeof objectId !== 'string' || !/^[0-9a-f]{64}$/.test(objectId)) return { ok: false, code: 'OBJECT_ID_INVALID' };
+      const path = join(root, objectId + '.json');
+      if (!existsSync(path)) return { ok: false, code: 'OBJECT_NOT_FOUND' };
+      return { ok: true, sealed: JSON.parse(readFileSync(path, 'utf8')), path };
+    },
+    async listObjects() {
+      return readdirSync(root).filter((name) => name.endsWith('.json')).map((name) => name.replace(/\.json$/, ''));
+    },
+  };
+}

package/src/plugin/folder-policy.mjs

@@ -1,3 +1,4 @@
+import { decidePath } from './path-policy.mjs';
 /**
  * GPW v2 — folder policy for the approval gate (v1.7.5-beta.1).
  *
@@ -71,24 +72,15 @@ export function classifyPath(input) {
   const base = input.base ?? process.cwd();
   const target = normalizeFolder(input.target, { base, platform });
   const normalise = (list) => (Array.isArray(list) ? list : []).map((f) => normalizeFolder(f, { base, platform }));
-
-  for (const folder of normalise(input.blacklist)) {
-    if (isInside(target, folder, { platform })) {
-      return { decision: 'deny', target, folder, reason: `the folder "${folder}" is on the blacklist` };
-    }
-  }
-  for (const folder of normalise(input.whitelist)) {
-    if (isInside(target, folder, { platform })) {
-      return { decision: 'allow', target, folder, reason: `the folder "${folder}" is on the whitelist` };
-    }
-  }
-  if (typeof input.workspace === 'string' && input.workspace !== '') {
-    const workspace = normalizeFolder(input.workspace, { base, platform });
-    if (isInside(target, workspace, { platform })) {
-      return { decision: 'allow', target, folder: workspace, reason: 'the target is inside the workspace' };
-    }
-  }
-  return { decision: 'pass', target, folder: null, reason: 'no list mentions this target, so GPW asks the operator' };
+  const rules = [
+    ...normalise(input.blacklist).map((path) => ({ path, effect: 'deny', source: 'panel' })),
+    ...normalise(input.whitelist).map((path) => ({ path, effect: 'allow', source: 'panel' })),
+  ];
+  const verdict = decidePath({ target, rules, exceptions: [], workspace: input.workspace ?? null, platform });
+  // 兼容旧返回形状：approve 视为 pass（需要人工），判定仍由 decidePath 单一实现。
+  const decision = verdict.decision === 'approve' ? 'pass' : verdict.decision;
+  const folder = verdict.rule?.path ?? (verdict.source === 'workspace' ? normalizeFolder(input.workspace, { base, platform }) : null);
+  return { decision, target, folder, reason: verdict.reason };
 }
 
 /** Fields that carry a single filesystem path in the tool schemas this plugin sees. */

package/src/plugin/gpw-policy-adapter.mjs

@@ -0,0 +1,30 @@
+/**
+ * P0-1 / P0-2 适配层：gpw-colors 的唯一调用入口。
+ *
+ * 规则：白名单 = allow 规则，黑名单 = deny 规则；判定只走 path-policy.decideMany
+ * （分段比较、deny 优先、最长前缀、例外 approve）。颜色由 colorOf 渲染，
+ * 不参与判定；白名单/工作区全部命中时 skipBudget=true（不进 10 次/分预算）。
+ */
+import { DECISION, colorOf, decideMany } from './path-policy.mjs';
+
+export function evaluateCall(input) {
+  const platform = input?.platform ?? process.platform;
+  const paths = Array.isArray(input?.paths) ? input.paths : [];
+  const rules = [];
+  for (const path of input?.whitelist ?? []) rules.push({ path, effect: 'allow', source: 'panel' });
+  for (const path of input?.blacklist ?? []) rules.push({ path, effect: 'deny', source: 'panel' });
+  const verdict = decideMany({
+    targets: paths,
+    rules,
+    exceptions: input?.exceptions ?? [],
+    workspace: input?.workspace ?? null,
+    platform,
+  });
+  return {
+    decision: verdict.decision,
+    color: colorOf(verdict.decision),
+    skipBudget: verdict.decision === DECISION.ALLOW,
+    reason: verdict.reason,
+    results: verdict.results ?? [],
+  };
+}

package/src/plugin/joint-dev/audit-file.mjs

@@ -0,0 +1,83 @@
+/**
+ * 红线审计落盘：JSONL + fsync + 哈希链 + 校验。
+ * 只接受元数据字段（内容字段直接拒绝），链断裂/篡改可被定位。
+ */
+import { closeSync, fsyncSync, openSync, readFileSync, writeSync } from 'node:fs';
+import { createHash } from 'node:crypto';
+
+export const AUDIT_FORBIDDEN = new Set(['content', 'data', 'file', 'files', 'patch', 'stdout', 'stderr', 'diff', 'blob', 'bytes', 'text', 'base64']);
+
+function stable(value) {
+  if (value === null || typeof value !== 'object') return JSON.stringify(value);
+  if (Array.isArray(value)) return '[' + value.map(stable).join(',') + ']';
+  return '{' + Object.keys(value).sort().map((key) => JSON.stringify(key) + ':' + stable(value[key])).join(',') + '}';
+}
+
+const sha256 = (text) => createHash('sha256').update(text, 'utf8').digest('hex');
+
+/** 追加一条审计；写盘后 fsync。返回写入的记录。 */
+export function appendAudit(file, event) {
+  if (event === null || typeof event !== 'object' || Array.isArray(event)) {
+    return { ok: false, code: 'AUDIT_EVENT_INVALID' };
+  }
+  const bad = Object.keys(event).filter((key) => AUDIT_FORBIDDEN.has(key.toLowerCase()));
+  if (bad.length > 0) return { ok: false, code: 'AUDIT_CONTENT_FORBIDDEN', detail: { keys: bad } };
+
+  let previous = null;
+  let seq = 1;
+  try {
+    const lines = readFileSync(file, 'utf8').split('\n').filter((line) => line.trim() !== '');
+    if (lines.length > 0) {
+      const last = JSON.parse(lines[lines.length - 1]);
+      previous = last.record_sha256 ?? null;
+      seq = Number(last.seq ?? lines.length) + 1;
+    }
+  } catch { /* 新文件 */ }
+
+  const body = {
+    v: 1,
+    seq,
+    at: event.at ?? new Date().toISOString(),
+    event: typeof event.event === 'string' ? event.event : 'joint.event',
+    plan_sha256: event.plan_sha256 ?? null,
+    step_id: event.step_id ?? null,
+    task_id: event.task_id ?? null,
+    machine_id: event.machine_id ?? null,
+    outcome: event.outcome ?? null,
+    reason_code: event.reason_code ?? null,
+    control_bytes: Number.isInteger(event.control_bytes) ? event.control_bytes : null,
+    control_sha256: typeof event.control_sha256 === 'string' ? event.control_sha256 : null,
+    prev_sha256: previous,
+  };
+  const record = { ...body, record_sha256: sha256(stable(body)) };
+  const fd = openSync(file, 'a');
+  try {
+    writeSync(fd, JSON.stringify(record) + '\n');
+    fsyncSync(fd);
+  } finally {
+    closeSync(fd);
+  }
+  return { ok: true, record };
+}
+
+/** 校验整条链；返回第一处问题的 seq。 */
+export function verifyAuditFile(file) {
+  let lines;
+  try {
+    lines = readFileSync(file, 'utf8').split('\n').filter((line) => line.trim() !== '');
+  } catch {
+    return { ok: true, count: 0, head: null };
+  }
+  let expectedPrev = null;
+  let head = null;
+  lines.forEach((line, index) => {
+    let record;
+    try { record = JSON.parse(line); } catch { throw new Error('AUDIT_JSON_BROKEN at line ' + (index + 1)); }
+    const { record_sha256: stored, ...body } = record;
+    if (body.prev_sha256 !== expectedPrev) throw new Error('AUDIT_CHAIN_BROKEN at seq ' + body.seq);
+    if (sha256(stable(body)) !== stored) throw new Error('AUDIT_ENTRY_TAMPERED at seq ' + body.seq);
+    expectedPrev = stored;
+    head = stored;
+  });
+  return { ok: true, count: lines.length, head };
+}

package/src/plugin/joint-dev/dispatch.mjs

@@ -0,0 +1,154 @@
+/**
+ * 联合开发：计划 → 控制面信封 → 分发（R1–R4 的生产接线点）。
+ *
+ * 只构造"任务指令 + 元数据"：任务 ID、机器、步骤、命令 hash、base commit、写范围。
+ * 任何用户代码/文件/输出字节都不允许出现在这里；发送前逐条过 redline.inspectControlMessage，
+ * 失败即拒绝并写审计（只记元数据）。本模块不做网络 I/O，sendFn 由调用方注入。
+ */
+import { createHash } from 'node:crypto';
+
+import { appendAudit } from './audit-file.mjs';
+import { createAudit, inspectControlMessage } from './redline.mjs';
+
+export const MAX_STEPS = 16;
+const DATA_KEYS = new Set(['data', 'file', 'files', 'content', 'patch', 'diff', 'blob', 'bytes', 'stdout', 'stderr', 'base64', 'text']);
+
+const sha256 = (value) => createHash('sha256').update(String(value), 'utf8').digest('hex');
+
+function scanData(value, path, hits) {
+  if (value === null || typeof value !== 'object') return;
+  if (Array.isArray(value)) { value.forEach((entry, index) => scanData(entry, path + '[' + index + ']', hits)); return; }
+  for (const [key, child] of Object.entries(value)) {
+    const keyPath = path === '' ? key : path + '.' + key;
+    if (DATA_KEYS.has(key.toLowerCase())) hits.push(keyPath);
+    scanData(child, keyPath, hits);
+  }
+}
+
+/**
+ * 校验计划：步骤唯一、依赖存在、无环、无数据字段、机器 ID 合法。
+ * @returns {{ok: true, plan: object} | {ok: false, code: string, detail: object}}
+ */
+export function buildPlan(input) {
+  if (input === null || typeof input !== 'object') return { ok: false, code: 'PLAN_INVALID', detail: {} };
+  const steps = Array.isArray(input.steps) ? input.steps : null;
+  if (steps === null || steps.length === 0 || steps.length > MAX_STEPS) {
+    return { ok: false, code: 'PLAN_STEPS_INVALID', detail: { count: steps === null ? null : steps.length } };
+  }
+  const hits = [];
+  scanData(input, '', hits);
+  if (hits.length > 0) return { ok: false, code: 'DATA_PLANE_FORBIDDEN', detail: { paths: hits.slice(0, 8) } };
+
+  const ids = new Set();
+  for (const step of steps) {
+    if (typeof step?.step_id !== 'string' || !/^[a-z][a-z0-9_-]{0,31}$/.test(step.step_id)) {
+      return { ok: false, code: 'PLAN_STEP_ID_INVALID', detail: { step_id: step?.step_id ?? null } };
+    }
+    if (ids.has(step.step_id)) return { ok: false, code: 'PLAN_STEP_DUPLICATE', detail: { step_id: step.step_id } };
+    ids.add(step.step_id);
+    if (typeof step.machine_id !== 'string' || step.machine_id === '') {
+      return { ok: false, code: 'PLAN_MACHINE_INVALID', detail: { step_id: step.step_id } };
+    }
+    if (!Array.isArray(step.command_argv) || step.command_argv.length === 0) {
+      return { ok: false, code: 'PLAN_ARGV_INVALID', detail: { step_id: step.step_id } };
+    }
+  }
+  const graph = new Map(steps.map((step) => [step.step_id, Array.isArray(step.depends_on) ? step.depends_on : []]));
+  for (const [id, deps] of graph) {
+    for (const dep of deps) {
+      if (!ids.has(dep)) return { ok: false, code: 'PLAN_DEP_UNKNOWN', detail: { step_id: id, dep } };
+    }
+  }
+  const visiting = new Set();
+  const done = new Set();
+  const visit = (id) => {
+    if (done.has(id)) return true;
+    if (visiting.has(id)) return false;
+    visiting.add(id);
+    for (const dep of graph.get(id) ?? []) if (!visit(dep)) return false;
+    visiting.delete(id);
+    done.add(id);
+    return true;
+  };
+  for (const id of ids) if (!visit(id)) return { ok: false, code: 'PLAN_CYCLE', detail: { step_id: id } };
+
+  const canonical = {
+    v: 1,
+    title: typeof input.title === 'string' ? input.title.slice(0, 200) : '',
+    base_commit: typeof input.base_commit === 'string' ? input.base_commit : null,
+    steps: steps.map((step) => ({
+      step_id: step.step_id,
+      machine_id: step.machine_id,
+      command_argv: step.command_argv.slice(0, 32),
+      command_hash: sha256(JSON.stringify(step.command_argv)),
+      write_scope: Array.isArray(step.write_scope) ? step.write_scope.slice(0, 8) : [],
+      depends_on: Array.isArray(step.depends_on) ? step.depends_on.slice(0, 8) : [],
+      timeout_ms: Number.isInteger(step.timeout_ms) ? step.timeout_ms : null,
+    })),
+  };
+  return { ok: true, plan: { ...canonical, plan_sha256: sha256(JSON.stringify(canonical)) } };
+}
+
+/** 计划 → 控制面信封（每个步骤一条 joint.dispatch，只含元数据）。 */
+export function buildControlEnvelopes(plan) {
+  return plan.steps.map((step) => ({
+    v: 1,
+    type: 'joint.dispatch',
+    body: {
+      plan_sha256: plan.plan_sha256,
+      step_id: step.step_id,
+      machine_id: step.machine_id,
+      base_commit: plan.base_commit,
+      command_argv: step.command_argv,
+      command_hash: step.command_hash,
+      write_scope: step.write_scope,
+      depends_on: step.depends_on,
+      ...(step.timeout_ms === null ? {} : { timeout_ms: step.timeout_ms }),
+    },
+  }));
+}
+
+/**
+ * 分发：逐条过红线 → 审计 → sendFn。失败即停，返回已完成与失败原因。
+ * @param {{plan: object, sendFn: Function, dryRun?: boolean, audit?: object}} input
+ */
+export async function dispatchPlan({ plan, sendFn, dryRun = false, audit = null, auditFile = null }) {
+  if (plan === null || typeof plan !== 'object' || typeof plan.plan_sha256 !== 'string') {
+    return { ok: false, code: 'PLAN_NOT_BUILT', sent: [], audits: [] };
+  }
+  const auditLog = audit ?? createAudit();
+  const envelopes = buildControlEnvelopes(plan);
+  const sent = [];
+  const audits = [];
+  for (const envelope of envelopes) {
+    const check = inspectControlMessage(envelope);
+    const bytes = Buffer.byteLength(JSON.stringify(envelope), 'utf8');
+    if (check.ok !== true) {
+      const record = { event: 'joint.dispatch.refused', plan_sha256: plan.plan_sha256, step_id: envelope.body.step_id, machine_id: envelope.body.machine_id, outcome: 'denied', reason_code: check.code, control_bytes: bytes, control_sha256: sha256(JSON.stringify(envelope)) };
+      auditLog.append(record);
+      audits.push(record);
+      return { ok: false, code: check.code, detail: check.detail, sent, audits };
+    }
+    if (dryRun) { sent.push({ step_id: envelope.body.step_id, bytes, dispatched: false }); continue; }
+    if (typeof auditFile === 'string') {
+      let written;
+      try { written = appendAudit(auditFile, { event: 'joint.dispatch.sending', plan_sha256: plan.plan_sha256, step_id: envelope.body.step_id, machine_id: envelope.body.machine_id, control_bytes: bytes, control_sha256: sha256(JSON.stringify(envelope)) }); } catch (error) { written = { ok: false, detail: String(error) }; }
+      if (written.ok !== true) return { ok: false, code: 'AUDIT_UNAVAILABLE', detail: written, sent, audits };
+    }
+    let response;
+    try {
+      response = await sendFn(envelope, { stepId: envelope.body.step_id, machineId: envelope.body.machine_id, bytes });
+    } catch (error) {
+      const record = { event: 'joint.dispatch.failed', plan_sha256: plan.plan_sha256, step_id: envelope.body.step_id, machine_id: envelope.body.machine_id, outcome: 'error', reason_code: 'SEND_FAILED', control_bytes: bytes, control_sha256: sha256(JSON.stringify(envelope)) };
+      auditLog.append(record);
+      audits.push(record);
+      return { ok: false, code: 'SEND_FAILED', detail: { step_id: envelope.body.step_id, error: String(error).slice(0, 120) }, sent, audits };
+    }
+    const record = { event: 'joint.dispatch.sent', plan_sha256: plan.plan_sha256, step_id: envelope.body.step_id, machine_id: envelope.body.machine_id, outcome: response?.ok === true ? 'ok' : 'rejected', reason_code: response?.code ?? null, control_bytes: bytes, control_sha256: sha256(JSON.stringify(envelope)) };
+    auditLog.append(record);
+    audits.push(record);
+    sent.push({ step_id: envelope.body.step_id, bytes, dispatched: true });
+    if (response?.ok !== true) return { ok: false, code: response?.code ?? 'DISPATCH_REJECTED', detail: { step_id: envelope.body.step_id }, sent, audits };
+  }
+  return { ok: true, sent, audits, auditHead: auditLog.head(), dryRun };
+}