@twinsearth/w2m-dsh-plugin 1.9.11 → 1.9.14

package/.claude-plugin/marketplace.json

@@ -5,14 +5,14 @@
   },
   "metadata": {
     "description": "The w2m fleet plugins: one account, many machines, any of Windows, macOS or Linux.",
-    "version": "1.9.11"
+    "version": "1.9.14"
   },
   "plugins": [
     {
       "name": "w2m-fleet",
       "source": "./",
       "description": "Read fleet state and dispatch commands across the machines registered to one account. Read-only MCP surface: the five exposed tools cannot change anything.",
-      "version": "1.9.11",
+      "version": "1.9.14",
       "author": {
         "name": "TwinsEarth"
       },
@@ -26,5 +26,5 @@
       ]
     }
   ],
-  "version": "1.9.11"
+  "version": "1.9.14"
 }

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "w2m-fleet",
   "description": "Drive the same project on online Windows, macOS and Linux machines from one account: read fleet state, dispatch commands and read results. The MCP surface is deliberately read-only.",
-  "version": "1.9.11",
+  "version": "1.9.14",
   "author": {
     "name": "TwinsEarth"
   },

package/CHANGELOG.md

@@ -7,6 +7,24 @@
 
 All notable changes to this project are documented here.
 
+## [1.9.14] - 2026-10-28
+
+- 修复「立即更新」失败（fetch failed）：GitHub Release 下载被网络阻断时，自动回退到 npm registry 的同一版本 tarball；下载前校验 registry 的 sha512 integrity（缺失时 sha1 shasum），再由现有安装器做 sha256 校验、备份与回滚。
+- 安装器仍走运行时 pnpm（Windows 不再尝试 dsh.cmd）。
+- 更新相关测试 66/66 通过。
+
+## [1.9.13] - 2026-10-28
+
+- 新增操作员联合开发 CLI `w2m-joint`：plan create/list/get、approve（人签、authority≥70、TTL 默认 10 分钟）、status、dispatch --dry-run（打印控制信封，真实发送未接线并返回 DISPATCH_NOT_WIRED）。
+- 该 CLI 是 SOP 的操作员入口：计划先落盘、人工审批、再允许派发；dispatch 真发仍要求 operator token 与 relay 能力广告（下一片）。
+- 端到端本机冒烟：create → approve → status(dispatch_allowed=true) → dispatch --dry-run(2 envelopes)。
+
+## [1.9.12] - 2026-10-28
+
+- 联合开发安全门（S1/S2 预置）：plan-store 保存与读取都重算 plan_sha256（篡改即 PLAN_TAMPERED）、planSha 强制 64 位十六进制（拒绝路径穿越）、审批绑定 plan_sha/approver/authority/TTL 并重算 approval_sha256（篡改/过期/低权限拒绝）、原子写。
+- 全部机器选中真实性（S1）：w2m_run 在派发前用当前设备名册重校验被选机器（离线即 TARGET_UNAVAILABLE，不换机）；派发后按 relay 的 leases 校验，发现未被点名的机器也拿到租约即取消任务并返回 SELECTION_NOT_HONOURED。
+- 新增 test/joint-dev-plan-store.test.mjs（11 项）。
+
 ## [1.9.11] - 2026-10-28
 
 - 修复左侧栏只剩图标：GPW 名称恢复到入口内（🌐 GPW），侧栏 label 仍为空，避免再次重复。

package/bin/w2m-joint.mjs

@@ -0,0 +1,151 @@
+#!/usr/bin/env node
+/**
+ * Operator CLI for joint-dev plans (v2 S2 slice).
+ *
+ * This is the operator side of the SOP, not an agent tool: a plan is created here, approved here by
+ * a human, and only then may a dispatch run. It never talks to a relay in this slice; `dispatch
+ * --dry-run` prints the control envelopes that would be sent. Real dispatch needs the operator token
+ * and the relay capability check, which land in the next slice.
+ *
+ * Usage:
+ *   node bin/w2m-joint.mjs plan create --state <dir> --steps <steps.json> [--base-commit <sha>] [--title <text>]
+ *   node bin/w2m-joint.mjs plan list  --state <dir>
+ *   node bin/w2m-joint.mjs plan get   --state <dir> --plan <sha>
+ *   node bin/w2m-joint.mjs approve    --state <dir> --plan <sha> --approver <name> --authority <n> [--ttl-min <n>] [--note <text>]
+ *   node bin/w2m-joint.mjs status     --state <dir> --plan <sha>
+ *   node bin/w2m-joint.mjs dispatch   --state <dir> --plan <sha> --dry-run
+ *
+ * Exit codes: 0 ok, 1 refusal (named code), 2 usage error.
+ */
+import { readFileSync } from 'node:fs';
+
+import { buildControlEnvelopes, buildPlan } from '../src/plugin/joint-dev/dispatch.mjs';
+import {
+  approvePlan,
+  assertDispatchAllowed,
+  listPlans,
+  loadApproval,
+  loadPlan,
+  savePlan,
+} from '../src/plugin/joint-dev/plan-store.mjs';
+
+function parseArgs(argv) {
+  const out = { _: [] };
+  for (let i = 0; i < argv.length; i += 1) {
+    const arg = argv[i];
+    if (arg.startsWith('--')) {
+      const key = arg.slice(2);
+      const next = argv[i + 1];
+      if (next !== undefined && !next.startsWith('--')) { out[key] = next; i += 1; }
+      else out[key] = true;
+    } else out._.push(arg);
+  }
+  return out;
+}
+
+const print = (value) => process.stdout.write(JSON.stringify(value, null, 2) + '\n');
+const fail = (code, detail) => { print({ ok: false, code, detail: detail ?? null }); process.exit(1); };
+
+const args = parseArgs(process.argv.slice(2));
+const [command, action] = args._;
+const stateDir = typeof args.state === 'string' ? args.state : (process.env.W2M_JOINT_STATE ?? null);
+if (stateDir === null) fail('STATE_DIR_REQUIRED', 'pass --state <dir> (the joint-dev state directory)');
+
+if (command === 'plan' && action === 'create') {
+  if (typeof args.steps !== 'string') fail('STEPS_REQUIRED', 'pass --steps <steps.json>');
+  let steps;
+  try { steps = JSON.parse(readFileSync(args.steps, 'utf8').replace(/^\\uFEFF/, '')); } catch (error) {
+    fail('STEPS_UNREADABLE', error instanceof Error ? error.message : String(error));
+  }
+  if (!Array.isArray(steps)) fail('STEPS_INVALID', 'steps.json must be a JSON array');
+  const built = buildPlan({
+    base_commit: typeof args['base-commit'] === 'string' ? args['base-commit'] : undefined,
+    title: typeof args.title === 'string' ? args.title : undefined,
+    steps,
+  });
+  if (built.ok !== true) fail(built.code ?? 'PLAN_INVALID', built.detail ?? null);
+  const saved = savePlan({ stateDir, plan: built.plan });
+  if (saved.ok !== true) fail(saved.code ?? 'PLAN_SAVE_FAILED', saved.detail ?? null);
+  print({
+    ok: true,
+    plan_sha256: built.plan.plan_sha256,
+    steps: built.plan.steps.length,
+    machines: [...new Set(built.plan.steps.map((step) => step.machine_id))],
+    path: saved.path,
+    reused: saved.reused,
+  });
+  process.exit(0);
+}
+
+if (command === 'plan' && action === 'list') {
+  const listed = listPlans({ stateDir, limit: Number(args.limit) || 50 });
+  if (listed.ok !== true) fail(listed.code ?? 'PLAN_LIST_FAILED');
+  print({ ok: true, total: listed.total, plans: listed.plans });
+  process.exit(0);
+}
+
+if (command === 'plan' && action === 'get') {
+  if (typeof args.plan !== 'string') fail('PLAN_REQUIRED', 'pass --plan <sha256>');
+  const loaded = loadPlan({ stateDir, planSha: args.plan });
+  if (loaded.ok !== true) fail(loaded.code ?? 'PLAN_NOT_FOUND', loaded.detail ?? null);
+  print({ ok: true, plan: loaded.plan, saved_at: loaded.saved_at });
+  process.exit(0);
+}
+
+if (command === 'approve') {
+  if (typeof args.plan !== 'string') fail('PLAN_REQUIRED', 'pass --plan <sha256>');
+  if (typeof args.approver !== 'string') fail('APPROVER_REQUIRED', 'pass --approver <name>');
+  const authority = Number.parseInt(String(args.authority ?? ''), 10);
+  if (!Number.isInteger(authority)) fail('AUTHORITY_REQUIRED', 'pass --authority <0..100>');
+  const ttlMin = Number.parseInt(String(args['ttl-min'] ?? '10'), 10);
+  const approved = approvePlan({
+    stateDir,
+    planSha: args.plan,
+    approver: args.approver,
+    authority,
+    note: typeof args.note === 'string' ? args.note : '',
+    ttlMs: (Number.isFinite(ttlMin) ? ttlMin : 10) * 60_000,
+  });
+  if (approved.ok !== true) fail(approved.code ?? 'APPROVAL_FAILED', approved.detail ?? null);
+  print({ ok: true, approval: approved.approval, path: approved.path });
+  process.exit(0);
+}
+
+if (command === 'status') {
+  if (typeof args.plan !== 'string') fail('PLAN_REQUIRED', 'pass --plan <sha256>');
+  const plan = loadPlan({ stateDir, planSha: args.plan });
+  if (plan.ok !== true) fail(plan.code ?? 'PLAN_NOT_FOUND');
+  const approval = loadApproval({ stateDir, planSha: args.plan });
+  const gate = assertDispatchAllowed({ stateDir, planSha: args.plan });
+  print({
+    ok: true,
+    plan_sha256: plan.plan.plan_sha256,
+    steps: plan.plan.steps.map((step) => ({ step_id: step.step_id, machine_id: step.machine_id, command_hash: step.command_hash })),
+    approval: approval.ok ? { approver: approval.approval.approver, authority: approval.approval.authority, expires_at: approval.approval.expires_at } : { state: approval.code },
+    dispatch_allowed: gate.ok === true,
+    blocked_by: gate.ok === true ? null : gate.code,
+  });
+  process.exit(0);
+}
+
+if (command === 'dispatch') {
+  if (typeof args.plan !== 'string') fail('PLAN_REQUIRED', 'pass --plan <sha256>');
+  const gate = assertDispatchAllowed({ stateDir, planSha: args.plan });
+  if (gate.ok !== true) fail(gate.code ?? 'APPROVAL_REQUIRED', 'dispatch refused before anything was sent');
+  if (args['dry-run'] !== true) {
+    fail('DISPATCH_NOT_WIRED', 'real dispatch is the next slice: it needs the operator token and a relay with target_machines/capability advertisement; use --dry-run to inspect the envelopes');
+  }
+  const envelopes = buildControlEnvelopes(gate.plan);
+  print({
+    ok: true,
+    dry_run: true,
+    plan_sha256: gate.plan.plan_sha256,
+    approval_sha256: gate.approval.approval_sha256,
+    envelopes: envelopes.length,
+    control: envelopes.map((envelope) => ({ type: envelope.type, body: envelope.body })),
+  });
+  process.exit(0);
+}
+
+process.stderr.write('usage: node bin/w2m-joint.mjs <plan create|list|get|approve|status|dispatch> [options]\n');
+process.exit(2);

package/codex/mcp-servers.toml

@@ -12,6 +12,6 @@
 
 [mcp_servers.w2m-fleet]
 command = "npx"
-args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.9.11", "w2m-mcp"]
+args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.9.14", "w2m-mcp"]
 startup_timeout_sec = 20
 tool_timeout_sec = 60

package/docs/acceptance/1.9.12/RELEASE-1912.json

@@ -0,0 +1,20 @@
+{
+  "version": "1.9.12",
+  "case": "RELEASE-1912",
+  "kind": "positive",
+  "machines": [
+    "b53a37f4-1464-4512-9259-33a7df091e3e"
+  ],
+  "executed_at": "2026-10-28T00:07:11.551Z",
+  "executor": "lead",
+  "task_id": "pre-release-1912-1793146031552",
+  "requirement": "V1.9.12：联合开发安全门（plan/approval）与选中真实性（派发前重校验 + 派发后租约校验）",
+  "result": {
+    "outcome": "ok",
+    "assertions": {
+      "plan_store": "plan hash recompute, traversal refusal, approval signature/TTL, atomic write; 11 tests",
+      "selection": "pre-dispatch roster revalidation (TARGET_UNAVAILABLE) and post-dispatch foreign-lease refusal (SELECTION_NOT_HONOURED)",
+      "tests": "tools/broadcast/fleet-target 209/209 green"
+    }
+  }
+}

package/docs/acceptance/1.9.13/RELEASE-1913.json

@@ -0,0 +1,20 @@
+{
+  "version": "1.9.13",
+  "case": "RELEASE-1913",
+  "kind": "positive",
+  "machines": [
+    "b53a37f4-1464-4512-9259-33a7df091e3e"
+  ],
+  "executed_at": "2026-10-28T00:31:27.437Z",
+  "executor": "lead",
+  "task_id": "pre-release-1913-1793147487438",
+  "requirement": "V1.9.13：操作员联合开发 CLI（计划/审批/状态/派发 dry-run）",
+  "result": {
+    "outcome": "ok",
+    "assertions": {
+      "cli": "w2m-joint plan create/list/get, approve, status, dispatch --dry-run",
+      "smoke": "create -> approve(authority 80, TTL 10m) -> status dispatch_allowed=true -> dry-run 2 envelopes",
+      "limits": "real dispatch returns DISPATCH_NOT_WIRED until operator token + relay capability slice"
+    }
+  }
+}

package/docs/acceptance/1.9.14/RELEASE-1914.json

@@ -0,0 +1,20 @@
+{
+  "version": "1.9.14",
+  "case": "RELEASE-1914",
+  "kind": "positive",
+  "machines": [
+    "b53a37f4-1464-4512-9259-33a7df091e3e"
+  ],
+  "executed_at": "2026-10-28T00:46:07.739Z",
+  "executor": "lead",
+  "task_id": "pre-release-1914-1793148367740",
+  "requirement": "V1.9.14：立即更新 fetch failed 的 npm 回退",
+  "result": {
+    "outcome": "ok",
+    "assertions": {
+      "npm_fallback": "fetchNpmTarball verifies registry integrity then installs",
+      "route": "update-route falls back when GitHub install is not installed",
+      "tests": "npm-update/update-wiring/update-install 66/66"
+    }
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "1.9.11",
+  "version": "1.9.14",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "type": "module",
   "exports": {
@@ -64,7 +64,7 @@
     "pack": "node scripts/pack.mjs",
     "reachability": "node scripts/reachability-check.mjs",
     "reachability:classify": "node scripts/reachability-classify.mjs",
-    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs test/task-deps.test.mjs test/dataflow-wiring.test.mjs test/task-graph.test.mjs test/ask-store.test.mjs test/turn.test.mjs test/fleet-members.test.mjs test/redact.test.mjs test/policy-matrix.test.mjs test/envelope-signature.test.mjs test/chat-crypto.test.mjs test/reduce-suggestion.test.mjs test/merge-hint.test.mjs test/fleet-chat-route.test.mjs test/maintenance.test.mjs test/maintenance-ferry.test.mjs test/grant.test.mjs test/grant-gate.test.mjs test/worktree.test.mjs test/patch-artifact.test.mjs test/merge-queue.test.mjs test/m3-workflow.test.mjs test/project-room.test.mjs test/project-attribution.test.mjs test/project-locks.test.mjs test/project-reviews.test.mjs test/project-notifications.test.mjs test/blob-sessions.test.mjs test/outbox.test.mjs test/reliability-metrics.test.mjs test/evidence.test.mjs test/grant-issue.test.mjs test/project-refs.test.mjs test/exec-capability.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs test/capture-route.test.mjs test/update-resolver.test.mjs test/agent-identity-safe.test.mjs test/re-pair-stale-token.test.mjs test/gpw-folder-policy.test.mjs test/gpw-activation.test.mjs test/gpw-hardening.test.mjs test/gpw-tamper-gate.test.mjs test/gpw-persistence.test.mjs test/gpw-colors.test.mjs test/gpw-recent-fold.test.mjs test/gpw-auto-approve.test.mjs test/data-plane.test.mjs test/sealed-object.test.mjs test/joint-dev-dispatch.test.mjs test/joint-dev-loop.test.mjs test/joint-dev-audit.test.mjs test/joint-dev-redline.test.mjs test/relay-redline-guard.test.mjs test/relay-p0-projection.test.mjs test/guarded-dispatch.test.mjs test/p0-single-matcher.test.mjs test/path-policy.test.mjs test/path-policy-fs.test.mjs test/gpw-inheritance-table.test.mjs test/gpw-policy-adapter.test.mjs test/target-policy.test.mjs test/relay-redline-audit.test.mjs",
+    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs test/task-deps.test.mjs test/dataflow-wiring.test.mjs test/task-graph.test.mjs test/ask-store.test.mjs test/turn.test.mjs test/fleet-members.test.mjs test/redact.test.mjs test/policy-matrix.test.mjs test/envelope-signature.test.mjs test/chat-crypto.test.mjs test/reduce-suggestion.test.mjs test/merge-hint.test.mjs test/fleet-chat-route.test.mjs test/maintenance.test.mjs test/maintenance-ferry.test.mjs test/grant.test.mjs test/grant-gate.test.mjs test/worktree.test.mjs test/patch-artifact.test.mjs test/merge-queue.test.mjs test/m3-workflow.test.mjs test/project-room.test.mjs test/project-attribution.test.mjs test/project-locks.test.mjs test/project-reviews.test.mjs test/project-notifications.test.mjs test/blob-sessions.test.mjs test/outbox.test.mjs test/reliability-metrics.test.mjs test/evidence.test.mjs test/grant-issue.test.mjs test/project-refs.test.mjs test/exec-capability.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs test/capture-route.test.mjs test/update-resolver.test.mjs test/agent-identity-safe.test.mjs test/re-pair-stale-token.test.mjs test/gpw-folder-policy.test.mjs test/gpw-activation.test.mjs test/gpw-hardening.test.mjs test/gpw-tamper-gate.test.mjs test/gpw-persistence.test.mjs test/gpw-colors.test.mjs test/gpw-recent-fold.test.mjs test/gpw-auto-approve.test.mjs test/data-plane.test.mjs test/sealed-object.test.mjs test/joint-dev-dispatch.test.mjs test/joint-dev-loop.test.mjs test/joint-dev-audit.test.mjs test/joint-dev-redline.test.mjs test/relay-redline-guard.test.mjs test/relay-p0-projection.test.mjs test/guarded-dispatch.test.mjs test/p0-single-matcher.test.mjs test/path-policy.test.mjs test/path-policy-fs.test.mjs test/gpw-inheritance-table.test.mjs test/gpw-policy-adapter.test.mjs test/target-policy.test.mjs test/relay-redline-audit.test.mjs test/relay-repair-ledger.test.mjs test/relay-purge-blobs.test.mjs test/relay-scrub.test.mjs test/joint-dev-plan-store.test.mjs test/relay-basepath-blobs.test.mjs",
     "test:acceptance-doc": "node --test --test-force-exit test/acceptance-doc.test.mjs",
     "test:account-identity": "node --test --test-force-exit test/account-identity.test.mjs",
     "test:account-join": "node --test --test-force-exit test/account-join.test.mjs",
@@ -206,7 +206,8 @@
     "w2m-bootstrap": "bin/w2m-bootstrap.mjs",
     "w2m-bootstrap-sign": "bin/w2m-bootstrap-sign.mjs",
     "w2m-hidden-task": "bin/w2m-hidden-task.mjs",
-    "w2m-self-update": "bin/w2m-self-update.mjs"
+    "w2m-self-update": "bin/w2m-self-update.mjs",
+    "w2m-joint": "bin/w2m-joint.mjs"
   },
   "disclosure": {
     "cloud": true,

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "twinsearth-w2m-dsh",
-  "version": "1.9.11",
+  "version": "1.9.14",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 12 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "license": "MIT",
   "keywords": [

package/src/plugin/joint-dev/plan-store.mjs

@@ -1,46 +1,108 @@
 /**
  * joint-dev 计划持久化与人工审批门（本地文件，0600）。
- * 未审批的计划禁止 dispatch；审批绑定 plan_sha256 与候选人。
+ *
+ * 安全不变量（v2 预置）：
+ *   · plan_sha256 必须由本模块重算，与文件内容不符即 PLAN_TAMPERED；
+ *   · planSha 必须是 64 位小写十六进制，禁止路径穿越；
+ *   · 审批绑定 plan_sha256 + approver + authority + 过期时间，approval_sha256 读回时重算；
+ *   · 未审批的计划禁止 dispatch（assertDispatchAllowed 是唯一入口）。
+ *
+ * 审批只由操作员 CLI/UI 写入，不暴露为 agent 工具。
  */
 import { createHash } from 'node:crypto';
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, statSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 
 const sha256 = (text) => createHash('sha256').update(text, 'utf8').digest('hex');
+const PLAN_SHA = /^[0-9a-f]{64}$/;
+const DEFAULT_APPROVAL_TTL_MS = 24 * 60 * 60 * 1000;
+
 const planDir = (stateDir) => join(stateDir, 'joint-dev', 'plans');
 const approvalDir = (stateDir) => join(stateDir, 'joint-dev', 'approvals');
 
+/** Hash of the plan body WITHOUT plan_sha256 — the same rule buildPlan uses. */
+export function planHashOf(plan) {
+  if (plan === null || typeof plan !== 'object') return null;
+  const { plan_sha256: _ignored, ...canonical } = plan;
+  return sha256(JSON.stringify(canonical));
+}
+
+function readPlanFile(stateDir, planSha) {
+  if (!PLAN_SHA.test(String(planSha ?? ''))) return { ok: false, code: 'PLAN_SHA_INVALID' };
+  const path = join(planDir(stateDir), planSha + '.json');
+  if (!existsSync(path)) return { ok: false, code: 'PLAN_NOT_FOUND' };
+  let parsed;
+  try { parsed = JSON.parse(readFileSync(path, 'utf8')); } catch { return { ok: false, code: 'PLAN_UNREADABLE' }; }
+  const plan = parsed?.plan;
+  if (plan === null || typeof plan !== 'object') return { ok: false, code: 'PLAN_INVALID' };
+  const recomputed = planHashOf(plan);
+  if (recomputed !== plan.plan_sha256 || recomputed !== planSha) {
+    return { ok: false, code: 'PLAN_TAMPERED', detail: { declared: plan.plan_sha256, recomputed, path } };
+  }
+  return { ok: true, plan, path, saved_at: parsed.saved_at ?? null };
+}
+
 export function savePlan({ stateDir, plan, now = Date.now() }) {
-  if (typeof plan?.plan_sha256 !== 'string' || plan.plan_sha256.length !== 64) return { ok: false, code: 'PLAN_INVALID' };
+  if (plan === null || typeof plan !== 'object' || !PLAN_SHA.test(String(plan.plan_sha256 ?? ''))) {
+    return { ok: false, code: 'PLAN_INVALID' };
+  }
+  const recomputed = planHashOf(plan);
+  if (recomputed !== plan.plan_sha256) {
+    return { ok: false, code: 'PLAN_HASH_MISMATCH', detail: { declared: plan.plan_sha256, recomputed } };
+  }
   mkdirSync(planDir(stateDir), { recursive: true });
   const path = join(planDir(stateDir), plan.plan_sha256 + '.json');
   if (existsSync(path)) return { ok: true, path, reused: true };
-  writeFileSync(path, JSON.stringify({ plan, saved_at: new Date(now).toISOString() }, null, 2), { encoding: 'utf8', mode: 0o600 });
+  const tmp = path + '.tmp-' + process.pid;
+  writeFileSync(tmp, JSON.stringify({ plan, saved_at: new Date(now).toISOString() }, null, 2), { encoding: 'utf8', mode: 0o600 });
+  // rename is atomic on the same volume; a crash leaves only the tmp file behind.
+  renameSync(tmp, path);
   return { ok: true, path, reused: false };
 }
 
 export function loadPlan({ stateDir, planSha }) {
-  const path = join(planDir(stateDir), planSha + '.json');
-  if (!existsSync(path)) return { ok: false, code: 'PLAN_NOT_FOUND' };
-  return { ok: true, ...JSON.parse(readFileSync(path, 'utf8')), path };
+  const loaded = readPlanFile(stateDir, planSha);
+  if (loaded.ok !== true) return loaded;
+  return { ok: true, plan: loaded.plan, saved_at: loaded.saved_at, path: loaded.path };
+}
+
+export function listPlans({ stateDir, limit = 50 }) {
+  const dir = planDir(stateDir);
+  if (!existsSync(dir)) return { ok: true, plans: [], total: 0 };
+  const entries = [];
+  for (const name of readdirSync(dir)) {
+    if (!name.endsWith('.json')) continue;
+    const path = join(dir, name);
+    try {
+      const stat = statSync(path);
+      entries.push({ plan_sha256: name.slice(0, -5), saved_at_ms: stat.mtimeMs });
+    } catch { /* a vanished plan is simply absent */ }
+  }
+  entries.sort((a, b) => b.saved_at_ms - a.saved_at_ms);
+  return { ok: true, plans: entries.slice(0, Math.max(1, Math.min(200, limit))), total: entries.length };
 }
 
 /**
- * 人工审批。authority 建议 ≥70；审批只由操作员 CLI/UI 写入，不暴露给 agent 工具。
+ * 人工审批。authority 最低 70；TTL 默认 24h；过期/哈希不符/计划被替换时 dispatch 拒绝。
  */
-export function approvePlan({ stateDir, planSha, approver, authority, note = '', now = Date.now() }) {
-  if (typeof planSha !== 'string' || planSha.length !== 64) return { ok: false, code: 'PLAN_SHA_INVALID' };
-  if (typeof approver !== 'string' || approver === '') return { ok: false, code: 'APPROVER_REQUIRED' };
+export function approvePlan({ stateDir, planSha, approver, authority, note = '', now = Date.now(), ttlMs = DEFAULT_APPROVAL_TTL_MS }) {
+  if (!PLAN_SHA.test(String(planSha ?? ''))) return { ok: false, code: 'PLAN_SHA_INVALID' };
+  if (typeof approver !== 'string' || approver.trim() === '') return { ok: false, code: 'APPROVER_REQUIRED' };
   if (!Number.isInteger(authority) || authority < 70) return { ok: false, code: 'APPROVAL_AUTHORITY_TOO_LOW', detail: { authority } };
-  if (!existsSync(join(planDir(stateDir), planSha + '.json'))) return { ok: false, code: 'PLAN_NOT_FOUND' };
+  if (!Number.isInteger(ttlMs) || ttlMs < 60_000 || ttlMs > 7 * 24 * 60 * 60 * 1000) {
+    return { ok: false, code: 'APPROVAL_TTL_INVALID', detail: { ttlMs } };
+  }
+  const loaded = readPlanFile(stateDir, planSha);
+  if (loaded.ok !== true) return loaded;
   mkdirSync(approvalDir(stateDir), { recursive: true });
   const body = {
-    v: 1,
+    v: 2,
     plan_sha256: planSha,
     approver,
     authority,
     note: String(note).slice(0, 200),
     approved_at: new Date(now).toISOString(),
+    expires_at: new Date(now + ttlMs).toISOString(),
   };
   const record = { ...body, approval_sha256: sha256(JSON.stringify(body)) };
   const path = join(approvalDir(stateDir), planSha + '.json');
@@ -48,19 +110,28 @@ export function approvePlan({ stateDir, planSha, approver, authority, note = '',
   return { ok: true, approval: record, path };
 }
 
-export function loadApproval({ stateDir, planSha }) {
+export function loadApproval({ stateDir, planSha, now = Date.now() }) {
+  if (!PLAN_SHA.test(String(planSha ?? ''))) return { ok: false, code: 'PLAN_SHA_INVALID' };
   const path = join(approvalDir(stateDir), planSha + '.json');
   if (!existsSync(path)) return { ok: false, code: 'APPROVAL_REQUIRED' };
-  const record = JSON.parse(readFileSync(path, 'utf8'));
-  if (record.plan_sha256 !== planSha) return { ok: false, code: 'APPROVAL_STALE' };
+  let record;
+  try { record = JSON.parse(readFileSync(path, 'utf8')); } catch { return { ok: false, code: 'APPROVAL_UNREADABLE' }; }
+  if (record?.plan_sha256 !== planSha) return { ok: false, code: 'APPROVAL_STALE' };
+  const { approval_sha256: declared, ...body } = record;
+  if (sha256(JSON.stringify(body)) !== declared) return { ok: false, code: 'APPROVAL_SIGNATURE_INVALID' };
+  if (!Number.isInteger(record.authority) || record.authority < 70) {
+    return { ok: false, code: 'APPROVAL_AUTHORITY_TOO_LOW', detail: { authority: record.authority } };
+  }
+  const expires = Date.parse(record.expires_at ?? '');
+  if (Number.isFinite(expires) && now > expires) return { ok: false, code: 'APPROVAL_EXPIRED', detail: { expires_at: record.expires_at } };
   return { ok: true, approval: record };
 }
 
-/** dispatch 前置门：计划必须存在且已审批。 */
-export function assertDispatchAllowed({ stateDir, planSha }) {
+/** dispatch 前置门：计划必须存在、未被篡改，且已审批、未过期。 */
+export function assertDispatchAllowed({ stateDir, planSha, now = Date.now() }) {
   const plan = loadPlan({ stateDir, planSha });
-  if (plan.ok !== true) return { ok: false, code: 'PLAN_NOT_FOUND' };
-  const approval = loadApproval({ stateDir, planSha });
-  if (approval.ok !== true) return { ok: false, code: 'APPROVAL_REQUIRED' };
+  if (plan.ok !== true) return { ok: false, code: plan.code ?? 'PLAN_NOT_FOUND' };
+  const approval = loadApproval({ stateDir, planSha, now });
+  if (approval.ok !== true) return { ok: false, code: approval.code ?? 'APPROVAL_REQUIRED' };
   return { ok: true, plan: plan.plan, approval: approval.approval };
 }

package/src/plugin/npm-update.mjs

@@ -8,6 +8,10 @@
  * package in the profile, and takes a backup. Keeping the check pure is what makes "NPM 对比" testable
  * without a network or a profile.
  */
+import { createHash } from 'node:crypto';
+import { mkdirSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+
 import { compareVersions } from './update-source.mjs';
 
 /** The package this plugin is. */
@@ -83,3 +87,61 @@ export async function checkNpmUpdate(input) {
   return decideNpmUpdate({ latest: last, currentVersion: input?.currentVersion ?? null });
 }
 
+
+
+/** Registry package documents to try, in order (mirror first, then npmjs). */
+export const NPM_PACKAGE_DOC_URLS = [
+  `https://registry.npmmirror.com/${encodeURIComponent(PLUGIN_PACKAGE_NAME)}`,
+  `https://registry.npmjs.org/${encodeURIComponent(PLUGIN_PACKAGE_NAME)}`,
+];
+
+/**
+ * Download an exact npm version and verify it against the registry's own integrity field before it
+ * can be installed. This is the fallback for "immediately update failed: fetch failed": GitHub
+ * release downloads are blocked on some networks while the npm registry is reachable.
+ */
+export async function fetchNpmTarball(input) {
+  const fetchImpl = input?.fetchImpl ?? globalThis.fetch;
+  const version = typeof input?.version === 'string' ? input.version.trim() : '';
+  if (version === '') return { ok: false, error: 'version is required' };
+  const destDir = input?.destDir;
+  if (typeof destDir !== 'string' || destDir === '') return { ok: false, error: 'destDir is required' };
+  const timeoutMs = Number.isInteger(input?.timeoutMs) ? input.timeoutMs : NPM_CHECK_TIMEOUT_MS;
+  const urls = Array.isArray(input?.urls) ? input.urls : NPM_PACKAGE_DOC_URLS;
+  const signalOf = () => (typeof AbortSignal !== 'undefined' && typeof AbortSignal.timeout === 'function' ? AbortSignal.timeout(timeoutMs) : undefined);
+  let meta = null;
+  let lastError = 'npm package document could not be read';
+  for (const url of urls) {
+    try {
+      const response = await fetchImpl(url, { headers: { accept: 'application/json' }, signal: signalOf() });
+      if (response?.ok !== true) { lastError = `npm registry answered HTTP ${response?.status ?? '?'}`; continue; }
+      const doc = await response.json();
+      const candidate = doc?.versions?.[version];
+      if (candidate?.dist?.tarball === undefined) { lastError = `npm has no version ${version} with a tarball`; continue; }
+      meta = candidate;
+      break;
+    } catch (error) { lastError = error instanceof Error ? error.message : String(error); }
+  }
+  if (meta === null) return { ok: false, error: lastError };
+  try {
+    const response = await fetchImpl(meta.dist.tarball, { signal: signalOf() });
+    if (response?.ok !== true) return { ok: false, error: `npm tarball answered HTTP ${response?.status ?? '?'}` };
+    const bytes = Buffer.from(await response.arrayBuffer());
+    const integrity = typeof meta.dist.integrity === 'string' ? meta.dist.integrity : null;
+    if (integrity !== null && /^sha512-/.test(integrity)) {
+      const actual = createHash('sha512').update(bytes).digest('base64');
+      if (actual !== integrity.slice('sha512-'.length)) return { ok: false, error: 'NPM_INTEGRITY_MISMATCH' };
+    } else if (typeof meta.dist.shasum === 'string') {
+      const actual = createHash('sha1').update(bytes).digest('hex');
+      if (actual !== meta.dist.shasum) return { ok: false, error: 'NPM_SHASUM_MISMATCH' };
+    } else {
+      return { ok: false, error: 'NPM_NO_INTEGRITY' };
+    }
+    mkdirSync(destDir, { recursive: true });
+    const path = join(destDir, `w2m-dsh-plugin-${version}.tgz`);
+    writeFileSync(path, bytes);
+    return { ok: true, path, bytes: bytes.length, sha256: createHash('sha256').update(bytes).digest('hex'), version, tarball: meta.dist.tarball, integrityVerified: true };
+  } catch (error) {
+    return { ok: false, error: error instanceof Error ? error.message : String(error) };
+  }
+}