@twinsearth/w2m-dsh-plugin 1.9.20 → 1.9.21

package/.claude-plugin/marketplace.json

@@ -5,14 +5,14 @@
   },
   "metadata": {
     "description": "The w2m fleet plugins: one account, many machines, any of Windows, macOS or Linux.",
-    "version": "1.9.20"
+    "version": "1.9.21"
   },
   "plugins": [
     {
       "name": "w2m-fleet",
       "source": "./",
       "description": "Read fleet state and dispatch commands across the machines registered to one account. Read-only MCP surface: the five exposed tools cannot change anything.",
-      "version": "1.9.20",
+      "version": "1.9.21",
       "author": {
         "name": "TwinsEarth"
       },
@@ -26,5 +26,5 @@
       ]
     }
   ],
-  "version": "1.9.20"
+  "version": "1.9.21"
 }

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "w2m-fleet",
   "description": "Drive the same project on online Windows, macOS and Linux machines from one account: read fleet state, dispatch commands and read results. The MCP surface is deliberately read-only.",
-  "version": "1.9.20",
+  "version": "1.9.21",
   "author": {
     "name": "TwinsEarth"
   },

package/CHANGELOG.md

@@ -7,6 +7,14 @@
 
 All notable changes to this project are documented here.
 
+## [1.9.21] - 2026-10-28
+
+- 发布边界：本版只发主插件；ToFuture 运维子插件由独立私有仓库另行发布，本包不包含安装/下载能力。
+- 保留与 Relay 服务器配套的隐藏上报模块：HMAC 网络标识上报（/v1/tofuture/identify，relay 侧静默比对、只存 HMAC）。
+  该能力默认关闭、不注册工具、不显示 UI；relay 需自行升级后才生效。
+- 删除本机隐藏能力（命令触发、隐藏加密存储、自助下载/安装、票据模型），避免在公共 npm 包中携带未交付的运维面。
+- 沿用 1.9.20 的浮动滚动浮标（⇧3 单击 3 轮 / 长按 3 秒到顶 + ⤒ 一键到顶）与搜索绿字黄底高亮。
+
 ## [1.9.20] - 2026-10-28
 
 - 新增浮动滚动浮标（固定在主工作区右上角，不依赖 slot 布局）：

package/codex/mcp-servers.toml

@@ -12,6 +12,6 @@
 
 [mcp_servers.w2m-fleet]
 command = "npx"
-args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.9.20", "w2m-mcp"]
+args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.9.21", "w2m-mcp"]
 startup_timeout_sec = 20
 tool_timeout_sec = 60

package/docs/acceptance/1.9.21/RELEASE-1921.json

@@ -0,0 +1,21 @@
+{
+  "version": "1.9.21",
+  "case": "RELEASE-1921",
+  "kind": "positive",
+  "machines": [
+    "b53a37f4-1464-4512-9259-33a7df091e3e"
+  ],
+  "executed_at": "2026-10-28T08:19:50.383Z",
+  "executor": "lead",
+  "task_id": "pre-release-1921-1793175590384",
+  "requirement": "v1.9.21 主插件：仅保留与 Relay 配套的 HMAC 上报模块（隐藏、默认关闭），删除本机隐藏能力；不发子插件、不部署 relay",
+  "result": {
+    "outcome": "ok",
+    "assertions": {
+      "scope": "main plugin only; no sub-plugin, no relay deployment",
+      "retained": "src/util/tofuture-hmac.mjs, src/plugin/tofuture/report.mjs, src/relay/tofuture-whitelist.mjs, POST /v1/tofuture/identify",
+      "removed": "command trigger, hidden vault, selfcheck, verify/keygen, agent ticket store, relay ticket store, download route",
+      "tests": "tofuture-s2 4/4, fleet-chat-route 6/6, lint 0 errors"
+    }
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "1.9.20",
+  "version": "1.9.21",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "type": "module",
   "exports": {
@@ -64,7 +64,7 @@
     "pack": "node scripts/pack.mjs",
     "reachability": "node scripts/reachability-check.mjs",
     "reachability:classify": "node scripts/reachability-classify.mjs",
-    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs test/task-deps.test.mjs test/dataflow-wiring.test.mjs test/task-graph.test.mjs test/ask-store.test.mjs test/turn.test.mjs test/fleet-members.test.mjs test/redact.test.mjs test/policy-matrix.test.mjs test/envelope-signature.test.mjs test/chat-crypto.test.mjs test/reduce-suggestion.test.mjs test/merge-hint.test.mjs test/fleet-chat-route.test.mjs test/maintenance.test.mjs test/maintenance-ferry.test.mjs test/grant.test.mjs test/grant-gate.test.mjs test/worktree.test.mjs test/patch-artifact.test.mjs test/merge-queue.test.mjs test/m3-workflow.test.mjs test/project-room.test.mjs test/project-attribution.test.mjs test/project-locks.test.mjs test/project-reviews.test.mjs test/project-notifications.test.mjs test/blob-sessions.test.mjs test/outbox.test.mjs test/reliability-metrics.test.mjs test/evidence.test.mjs test/grant-issue.test.mjs test/project-refs.test.mjs test/exec-capability.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs test/capture-route.test.mjs test/update-resolver.test.mjs test/agent-identity-safe.test.mjs test/re-pair-stale-token.test.mjs test/gpw-folder-policy.test.mjs test/gpw-activation.test.mjs test/gpw-hardening.test.mjs test/gpw-tamper-gate.test.mjs test/gpw-persistence.test.mjs test/gpw-colors.test.mjs test/gpw-recent-fold.test.mjs test/gpw-auto-approve.test.mjs test/data-plane.test.mjs test/sealed-object.test.mjs test/joint-dev-dispatch.test.mjs test/joint-dev-loop.test.mjs test/joint-dev-audit.test.mjs test/joint-dev-redline.test.mjs test/relay-redline-guard.test.mjs test/relay-p0-projection.test.mjs test/guarded-dispatch.test.mjs test/p0-single-matcher.test.mjs test/path-policy.test.mjs test/path-policy-fs.test.mjs test/gpw-inheritance-table.test.mjs test/gpw-policy-adapter.test.mjs test/target-policy.test.mjs test/relay-redline-audit.test.mjs test/relay-repair-ledger.test.mjs test/relay-purge-blobs.test.mjs test/relay-scrub.test.mjs test/joint-dev-plan-store.test.mjs test/relay-basepath-blobs.test.mjs test/operator-token.test.mjs test/relay-health-capabilities.test.mjs test/joint-relay-dispatch.test.mjs test/operator-token-route.test.mjs test/relay-scrub-task-projection.test.mjs test/operator-key-approval.test.mjs test/relay-offer-journal.test.mjs test/joint-r5-wiring.test.mjs test/p1-hardening.test.mjs test/joint-merge-engine.test.mjs test/artifact-ref-dir-sink.test.mjs test/chat-sticker-guard.test.mjs test/relay-task-progress.test.mjs",
+    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs test/task-deps.test.mjs test/dataflow-wiring.test.mjs test/task-graph.test.mjs test/ask-store.test.mjs test/turn.test.mjs test/fleet-members.test.mjs test/redact.test.mjs test/policy-matrix.test.mjs test/envelope-signature.test.mjs test/chat-crypto.test.mjs test/reduce-suggestion.test.mjs test/merge-hint.test.mjs test/fleet-chat-route.test.mjs test/maintenance.test.mjs test/maintenance-ferry.test.mjs test/grant.test.mjs test/grant-gate.test.mjs test/worktree.test.mjs test/patch-artifact.test.mjs test/merge-queue.test.mjs test/m3-workflow.test.mjs test/project-room.test.mjs test/project-attribution.test.mjs test/project-locks.test.mjs test/project-reviews.test.mjs test/project-notifications.test.mjs test/blob-sessions.test.mjs test/outbox.test.mjs test/reliability-metrics.test.mjs test/evidence.test.mjs test/grant-issue.test.mjs test/project-refs.test.mjs test/exec-capability.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs test/capture-route.test.mjs test/update-resolver.test.mjs test/agent-identity-safe.test.mjs test/re-pair-stale-token.test.mjs test/gpw-folder-policy.test.mjs test/gpw-activation.test.mjs test/gpw-hardening.test.mjs test/gpw-tamper-gate.test.mjs test/gpw-persistence.test.mjs test/gpw-colors.test.mjs test/gpw-recent-fold.test.mjs test/gpw-auto-approve.test.mjs test/data-plane.test.mjs test/sealed-object.test.mjs test/joint-dev-dispatch.test.mjs test/joint-dev-loop.test.mjs test/joint-dev-audit.test.mjs test/joint-dev-redline.test.mjs test/relay-redline-guard.test.mjs test/relay-p0-projection.test.mjs test/guarded-dispatch.test.mjs test/p0-single-matcher.test.mjs test/path-policy.test.mjs test/path-policy-fs.test.mjs test/gpw-inheritance-table.test.mjs test/gpw-policy-adapter.test.mjs test/target-policy.test.mjs test/relay-redline-audit.test.mjs test/relay-repair-ledger.test.mjs test/relay-purge-blobs.test.mjs test/relay-scrub.test.mjs test/joint-dev-plan-store.test.mjs test/relay-basepath-blobs.test.mjs test/operator-token.test.mjs test/relay-health-capabilities.test.mjs test/joint-relay-dispatch.test.mjs test/operator-token-route.test.mjs test/relay-scrub-task-projection.test.mjs test/operator-key-approval.test.mjs test/relay-offer-journal.test.mjs test/joint-r5-wiring.test.mjs test/p1-hardening.test.mjs test/joint-merge-engine.test.mjs test/artifact-ref-dir-sink.test.mjs test/chat-sticker-guard.test.mjs test/relay-task-progress.test.mjs test/tofuture-s2.test.mjs",
     "test:acceptance-doc": "node --test --test-force-exit test/acceptance-doc.test.mjs",
     "test:account-identity": "node --test --test-force-exit test/account-identity.test.mjs",
     "test:account-join": "node --test --test-force-exit test/account-join.test.mjs",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "twinsearth-w2m-dsh",
-  "version": "1.9.20",
+  "version": "1.9.21",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 12 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "license": "MIT",
   "keywords": [

package/src/plugin/fleet-chat-route.mjs

@@ -23,6 +23,7 @@ import {
 } from './session-watch.mjs';
 import { createSessionSync } from './session-sync.mjs';
 
+
 /**
  * The newest transcript for a cwd, or null. Reads directory listings and stat only -- this module never opens a
  * session file for writing, and \	est/session-readonly.test.mjs\ enforces that.
@@ -42,9 +43,9 @@ function newestTranscript(cwd) {
   return best === null ? null : best.file;
 }
 
-export const CHAT_ROUTE_PATH = '/api/w2m/chat';
-
-/** The light task board the panel shows beside the chat. The relay already answers GET /v1/tasks. */
+export const CHAT_ROUTE_PATH = '/api/w2m/chat';
+
+/** The light task board the panel shows beside the chat. The relay already answers GET /v1/tasks. */
 export const TASKS_ROUTE_PATH = '/api/w2m/tasks';
 export const MAX_SESSION_ID_LENGTH = 200;
 
@@ -105,36 +106,36 @@ export function registerChatRoutes(ctx, deps) {
     };
     return resolved;
   };
-
-  /**
-   * The machine ids this fleet knows, cached for five seconds.
-   *
-   * Only the HOST can check a single recipient: the relay validates the shape of a recipient, not whether a machine
-   * with that id exists. Null means the roster could not be read at all, which is deliberately a different answer from
-   * "no such machine" -- a relay outage must not be reported as a typo in the recipient.
-   */
-  let rosterAtMs = 0;
-  let rosterIds = null;
-  const knownMachineIds = async (signal) => {
-    if (rosterIds !== null && Date.now() - rosterAtMs < 5000) return rosterIds;
-    try {
-      const cfg = deps.cfg();
-      const rabbitUrl = cfg?.rabbitUrl ?? null;
-      if (rabbitUrl === null) return null;
-      const token = await deps.resolveToken();
-      if (typeof token !== 'string' || token === '') return null;
-      const listed = await deps.request({ rabbitUrl, token, method: 'GET', pathname: '/v1/devices', signal });
-      if (listed?.ok !== true) return null;
-      const devices = Array.isArray(listed.json?.devices) ? listed.json.devices : null;
-      if (devices === null) return null;
-      const ids = devices.map((device) => device?.machine_id).filter((id) => typeof id === 'string');
-      rosterIds = ids;
-      rosterAtMs = Date.now();
-      return ids;
-    } catch {
-      return null;
-    }
-  };
+
+  /**
+   * The machine ids this fleet knows, cached for five seconds.
+   *
+   * Only the HOST can check a single recipient: the relay validates the shape of a recipient, not whether a machine
+   * with that id exists. Null means the roster could not be read at all, which is deliberately a different answer from
+   * "no such machine" -- a relay outage must not be reported as a typo in the recipient.
+   */
+  let rosterAtMs = 0;
+  let rosterIds = null;
+  const knownMachineIds = async (signal) => {
+    if (rosterIds !== null && Date.now() - rosterAtMs < 5000) return rosterIds;
+    try {
+      const cfg = deps.cfg();
+      const rabbitUrl = cfg?.rabbitUrl ?? null;
+      if (rabbitUrl === null) return null;
+      const token = await deps.resolveToken();
+      if (typeof token !== 'string' || token === '') return null;
+      const listed = await deps.request({ rabbitUrl, token, method: 'GET', pathname: '/v1/devices', signal });
+      if (listed?.ok !== true) return null;
+      const devices = Array.isArray(listed.json?.devices) ? listed.json.devices : null;
+      if (devices === null) return null;
+      const ids = devices.map((device) => device?.machine_id).filter((id) => typeof id === 'string');
+      rosterIds = ids;
+      rosterAtMs = Date.now();
+      return ids;
+    } catch {
+      return null;
+    }
+  };
 
   /** Post one batch into the relay using the machine's device token, exactly as the browser route does. */
   const postToRelay = async (identity, payload) => {
@@ -156,12 +157,12 @@ export function registerChatRoutes(ctx, deps) {
    * The session files are never written and nothing is injected into DSH: the transcript is read, the user's messages
    * are extracted, and only the new ones are published. A failure here must not disturb the panel or the route.
    */
-  const MIRROR_MAX_BYTES = 3500;
-  const truncateUtf8 = (value, max) => {
-    const bytes = Buffer.from(value, 'utf8');
-    if (bytes.length <= max) return value;
-    return bytes.subarray(0, max).toString('utf8').replace(/\uFFFD+$/, '') + ' …(已截断)';
-  };
+  const MIRROR_MAX_BYTES = 3500;
+  const truncateUtf8 = (value, max) => {
+    const bytes = Buffer.from(value, 'utf8');
+    if (bytes.length <= max) return value;
+    return bytes.subarray(0, max).toString('utf8').replace(/\uFFFD+$/, '') + ' …(已截断)';
+  };
   const mirrorOnce = async () => {
     const identity = await identityOf();
     if (identity.conversationKey === null) return;
@@ -271,16 +272,16 @@ export function registerChatRoutes(ctx, deps) {
               }
               return Response.json({ ...listed.json, ok: true, local_machine_id: identity.machineId, local_machine_name: identity.machineName, conversation_key: sessionId, conversation_source: identity.source }, { headers: NO_STORE });
             }
-            // Addressing (v1.2.2): a single recipient must exist in THIS fleet.
-            if (typeof addressing.to === 'string' && addressing.to !== 'all') {
-              const roster = await knownMachineIds(request.signal);
-              if (roster === null) {
-                return refuse(503, 'CHAT_ROSTER_UNAVAILABLE', 'the machine roster could not be read', 'a recipient cannot be checked without the relay roster');
-              }
-              if (!roster.includes(addressing.to)) {
-                return refuse(400, 'CHAT_UNKNOWN_RECIPIENT', 'no machine with that id is in this fleet', 'send all, or a machine_id listed by w2m_devices');
-              }
-            }
+            // Addressing (v1.2.2): a single recipient must exist in THIS fleet.
+            if (typeof addressing.to === 'string' && addressing.to !== 'all') {
+              const roster = await knownMachineIds(request.signal);
+              if (roster === null) {
+                return refuse(503, 'CHAT_ROSTER_UNAVAILABLE', 'the machine roster could not be read', 'a recipient cannot be checked without the relay roster');
+              }
+              if (!roster.includes(addressing.to)) {
+                return refuse(400, 'CHAT_UNKNOWN_RECIPIENT', 'no machine with that id is in this fleet', 'send all, or a machine_id listed by w2m_devices');
+              }
+            }
             const posted = await deps.request({ rabbitUrl, token, method: 'POST', pathname: '/v1/fleet/messages', body: { session_id: sessionId, text: text ?? '', machine_id: identity.machineId, machine_name: identity.machineName, origin: 'chat', ...addressing }, signal: request.signal });
             if (posted?.ok !== true) {
               const code = posted?.json?.error?.code ?? posted?.error?.code ?? 'CHAT_SEND_REFUSED';
@@ -293,48 +294,48 @@ export function registerChatRoutes(ctx, deps) {
           }
         },
       });
-      // A light task board. The relay answers GET /v1/tasks; this proxy exists so the panel can read it with the device
-      // token that never leaves the host.
-      registry.register({
-        path: TASKS_ROUTE_PATH,
-        methods: ['GET'],
-        requestBody: 'buffered',
-        fetch: async (request) => {
-          const refuse = (httpStatus, reasonCode, error, detail) =>
-            Response.json({ ok: false, error, reason_code: reasonCode, detail }, { status: httpStatus, headers: NO_STORE });
-          if (request.method !== 'GET') {
-            return refuse(405, 'TASKS_METHOD_NOT_ALLOWED', `${request.method} is not answered here`, 'GET only');
-          }
-          const url = new URL(request.url);
-          const limitRaw = url.searchParams.get('limit');
-          const limit = limitRaw !== null && /^[0-9]+$/.test(limitRaw) ? Math.min(Number(limitRaw), 50) : 20;
-          const cfg = deps.cfg();
-          const rabbitUrl = cfg?.rabbitUrl ?? null;
-          if (rabbitUrl === null) return refuse(503, 'TASKS_NO_RELAY', 'no relay is configured', 'set rabbitUrl in the profile patch');
-          let token;
-          try {
-            token = await deps.resolveToken();
-          } catch (error) {
-            return refuse(503, 'TASKS_UNPAIRED', `this machine has no device token: ${error instanceof Error ? error.message : String(error)}`, 'pair the machine first');
-          }
-          if (typeof token !== 'string' || token === '') {
-            return refuse(503, 'TASKS_UNPAIRED', 'this machine has no device token', 'pair the machine first');
-          }
-          try {
-            const listed = await deps.request({
-              rabbitUrl, token, method: 'GET', pathname: '/v1/tasks', query: { limit: String(limit) }, signal: request.signal,
-            });
-            if (listed?.ok !== true) {
-              const code = listed?.json?.error?.code ?? 'TASKS_LIST_REFUSED';
-              return refuse(502, code, `the relay answered HTTP ${listed?.status ?? 0}`, 'the relay must run a version with /v1/tasks');
-            }
-            return Response.json({ ...listed.json, ok: true }, { headers: NO_STORE });
-          } catch (error) {
-            return refuse(502, 'TASKS_RELAY_ERROR', `the relay call failed: ${error instanceof Error ? error.message : String(error)}`, null);
-          }
-        },
-      });
-
+      // A light task board. The relay answers GET /v1/tasks; this proxy exists so the panel can read it with the device
+      // token that never leaves the host.
+      registry.register({
+        path: TASKS_ROUTE_PATH,
+        methods: ['GET'],
+        requestBody: 'buffered',
+        fetch: async (request) => {
+          const refuse = (httpStatus, reasonCode, error, detail) =>
+            Response.json({ ok: false, error, reason_code: reasonCode, detail }, { status: httpStatus, headers: NO_STORE });
+          if (request.method !== 'GET') {
+            return refuse(405, 'TASKS_METHOD_NOT_ALLOWED', `${request.method} is not answered here`, 'GET only');
+          }
+          const url = new URL(request.url);
+          const limitRaw = url.searchParams.get('limit');
+          const limit = limitRaw !== null && /^[0-9]+$/.test(limitRaw) ? Math.min(Number(limitRaw), 50) : 20;
+          const cfg = deps.cfg();
+          const rabbitUrl = cfg?.rabbitUrl ?? null;
+          if (rabbitUrl === null) return refuse(503, 'TASKS_NO_RELAY', 'no relay is configured', 'set rabbitUrl in the profile patch');
+          let token;
+          try {
+            token = await deps.resolveToken();
+          } catch (error) {
+            return refuse(503, 'TASKS_UNPAIRED', `this machine has no device token: ${error instanceof Error ? error.message : String(error)}`, 'pair the machine first');
+          }
+          if (typeof token !== 'string' || token === '') {
+            return refuse(503, 'TASKS_UNPAIRED', 'this machine has no device token', 'pair the machine first');
+          }
+          try {
+            const listed = await deps.request({
+              rabbitUrl, token, method: 'GET', pathname: '/v1/tasks', query: { limit: String(limit) }, signal: request.signal,
+            });
+            if (listed?.ok !== true) {
+              const code = listed?.json?.error?.code ?? 'TASKS_LIST_REFUSED';
+              return refuse(502, code, `the relay answered HTTP ${listed?.status ?? 0}`, 'the relay must run a version with /v1/tasks');
+            }
+            return Response.json({ ...listed.json, ok: true }, { headers: NO_STORE });
+          } catch (error) {
+            return refuse(502, 'TASKS_RELAY_ERROR', `the relay call failed: ${error instanceof Error ? error.message : String(error)}`, null);
+          }
+        },
+      });
+
       status.mounted = true;
       status.reason = null;
       const timer = setInterval(() => { mirrorOnce().catch(() => { /* one bad tick must not stop the next */ }); }, 2000);

package/src/plugin/tofuture/report.mjs

@@ -0,0 +1,44 @@
+/**
+ * ToFuture identity report (S2): collect every NIC, HMAC it, send only HMACs.
+ *
+ * Raw MAC/IP values exist only inside this function's local scope. The request body carries
+ * `{v, machine_id, ts_ms, nonce, entries:[{kind, salt_id, hmac}]}` and nothing else.
+ */
+import { networkInterfaces } from 'node:os';
+import { randomBytes } from 'node:crypto';
+
+import { identityHmac } from '../../util/tofuture-hmac.mjs';
+
+export function collectIdentityEntries(machineId, fleetKey) {
+  const entries = [];
+  for (const rows of Object.values(networkInterfaces())) {
+    for (const row of rows ?? []) {
+      const mac = typeof row?.mac === 'string' ? row.mac.trim() : '';
+      if (mac !== '' && mac !== '00:00:00:00:00:00') entries.push(identityHmac(fleetKey, machineId, 'mac', mac.toLowerCase()));
+      const family = row?.family === 4 || row?.family === 'IPv4' ? 'ipv4' : (row?.family === 6 || row?.family === 'IPv6' ? 'ipv6' : null);
+      if (family !== null && typeof row?.address === 'string' && row.address !== '') entries.push(identityHmac(fleetKey, machineId, family, row.address));
+    }
+  }
+  return entries;
+}
+
+export function buildIdentifyBody({ machineId, fleetKey, now = Date.now() }) {
+  return { v: 1, machine_id: machineId, ts_ms: now, nonce: randomBytes(12).toString('hex'), entries: collectIdentityEntries(machineId, fleetKey) };
+}
+
+/**
+ * @param {{request: Function, rabbitUrl: string, token: string, machineId: string, fleetKey: string, signal?: AbortSignal}} input
+ * @returns {Promise<{ok: boolean, matched?: boolean, code?: string}>} — never carries identifiers
+ */
+export async function reportIdentity(input) {
+  if (typeof input?.fleetKey !== 'string' || input.fleetKey === '') return { ok: false, code: 'HIDDEN_STATE_NO_KEY' };
+  const body = buildIdentifyBody({ machineId: input.machineId, fleetKey: input.fleetKey });
+  try {
+    const result = await input.request({ rabbitUrl: input.rabbitUrl, token: input.token, method: 'POST', pathname: '/v1/tofuture/identify', body, signal: input.signal });
+    // The relay answers 204 for both outcomes; a non-2xx is a transport/shape failure, not membership.
+    if (result?.ok === true) return { ok: true };
+    return { ok: false, code: result?.error?.code ?? 'TOFUTURE_REPORT_REFUSED' };
+  } catch {
+    return { ok: false, code: 'TOFUTURE_REPORT_FAILED' };
+  }
+}

package/src/plugin/tools.mjs

@@ -286,7 +286,7 @@ const MAX_STAGES = 16;
  * `package.json` during `scripts/pack.mjs` rather than hand-maintained, and `W2M_PLUGIN_VERSION`
  * overrides it at runtime for tests and packagers.
  */
-const PLUGIN_VERSION = '1.9.20';
+const PLUGIN_VERSION = '1.9.21';
 
 /** How long any single HTTP call may take before it is aborted, in milliseconds. */
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;

package/src/relay/server.mjs

@@ -1,3 +1,4 @@
+import { loadWhitelist, whitelistMatches } from './tofuture-whitelist.mjs';
 import { guardBlobRoute, guardResultEnvelope, guardTaskBody } from './redline-guard.mjs';
 /**
  * W2M Rabbit relay — node:http / node:https server.
@@ -1441,6 +1442,44 @@ export class RelayServer {
     this.fleetMessages ??= createFleetMessages({ now: () => this.state.nowMs() });
     this.fleetMemory ??= createFleetMemory({ now: () => this.state.nowMs() });
 
+    /* ---- v2 hidden: ToFuture identity report (silent) ---- */
+    if (method === 'POST' && path === '/v1/tofuture/identify') {
+      const body = takeJson();
+      const text = JSON.stringify(body ?? {});
+      // Red line: identifiers never travel as plaintext. Reject by field name and by shape.
+      const PLAINTEXT = new Set(['mac', 'ip', 'ipv4', 'ipv6', 'bssid', 'address', 'ssid', 'wifi']);
+      const plaintextFields = [];
+      const walk = (value) => {
+        if (value === null || typeof value !== 'object') return;
+        if (Array.isArray(value)) { value.forEach(walk); return; }
+        for (const [key, child] of Object.entries(value)) {
+          if (PLAINTEXT.has(key.toLowerCase())) plaintextFields.push(key);
+          walk(child);
+        }
+      };
+      walk(body);
+      if (plaintextFields.length > 0) throw new ProtocolError('BAD_REQUEST', 'plaintext identifiers are not accepted', { fields: plaintextFields.slice(0, 8) });
+      if (/([0-9A-Fa-f]{2}:){5}[0-9A-Fa-f]{2}/.test(text) || /\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\b/.test(text)) {
+        throw new ProtocolError('BAD_REQUEST', 'plaintext identifiers are not accepted');
+      }
+      const entries = Array.isArray(body?.entries) ? body.entries : [];
+      const nowMs = this.state.nowMs();
+      const ts = Number(body?.ts_ms);
+      const fresh = Number.isFinite(ts) && Math.abs(nowMs - ts) <= 60_000;
+      const nonce = typeof body?.nonce === 'string' ? body.nonce : '';
+      this._tofutureNonces ??= new Map();
+      const replay = nonce === '' || this._tofutureNonces.has(nonce);
+      if (nonce !== '') this._tofutureNonces.set(nonce, nowMs);
+      for (const [id, at] of this._tofutureNonces) if (nowMs - at > 120_000) this._tofutureNonces.delete(id);
+      const whitelist = loadWhitelist(this.persistence?.dir ?? null);
+      const matched = fresh === true && replay !== true && whitelistMatches(whitelist, entries);
+      this._tofutureEligible ??= new Map();
+      if (matched === true) this._tofutureEligible.set(device.machine_id, nowMs + 60_000);
+      // Silent: success and failure are the same empty response; membership is never returned.
+      res.writeHead(204, { 'cache-control': 'no-store' });
+      return res.end();
+    }
+
     if (method === 'POST' && path === '/v1/fleet/messages') {
       /**
        * v1.2.6: posting to the group is a dispatch-class action. An observer may read the flow and may not speak into it, and

package/src/relay/tofuture-whitelist.mjs

@@ -0,0 +1,46 @@
+/**
+ * Relay-side ToFuture whitelist (S2): rows are HMACs only, never identifiers.
+ *
+ * The admin provisions `<stateDir>/tofuture-whitelist.json` offline:
+ *   { "v": 1, "rows": [ { "kind": "mac", "hmac": "<64hex>", "salt_id": "<16hex>" }, ... ] }
+ *
+ * `compare(entries)` is intentionally silent: it returns only whether ANY entry matched, never
+ * which row, which kind, or how many; callers must not send that boolean to the client.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+
+const HEX64 = /^[0-9a-f]{64}$/;
+const HEX16 = /^[0-9a-f]{16}$/;
+
+export function loadWhitelist(stateDir) {
+  if (typeof stateDir !== 'string' || stateDir === '') return { ok: true, rows: [], empty: true };
+  const path = join(stateDir, 'tofuture-whitelist.json');
+  if (!existsSync(path)) return { ok: true, rows: [], empty: true, path };
+  let parsed;
+  try { parsed = JSON.parse(readFileSync(path, 'utf8')); } catch { return { ok: false, code: 'TOFUTURE_WHITELIST_INVALID', path }; }
+  const rows = Array.isArray(parsed?.rows) ? parsed.rows : [];
+  const clean = [];
+  for (const row of rows) {
+    if (row === null || typeof row !== 'object') continue;
+    if (!HEX64.test(String(row.hmac ?? ''))) continue;
+    if (!HEX16.test(String(row.salt_id ?? ''))) continue;
+    // Only the HMAC and its salt id are kept; any extra field (a leaked identifier) is dropped.
+    clean.push({ kind: typeof row.kind === 'string' ? row.kind.slice(0, 8) : 'any', hmac: String(row.hmac), salt_id: String(row.salt_id) });
+  }
+  return { ok: true, rows: clean, empty: clean.length === 0, path };
+}
+
+/** @returns {boolean} true when at least one entry matches a whitelisted HMAC. */
+export function whitelistMatches(whitelist, entries) {
+  if (whitelist === null || whitelist.ok !== true || Array.isArray(whitelist.rows) !== true) return false;
+  if (!Array.isArray(entries) || entries.length === 0) return false;
+  const byHmac = new Set(whitelist.rows.map((row) => row.hmac + '|' + row.salt_id));
+  for (const entry of entries) {
+    if (entry === null || typeof entry !== 'object') continue;
+    if (!HEX64.test(String(entry.hmac ?? ''))) continue;
+    if (!HEX16.test(String(entry.salt_id ?? ''))) continue;
+    if (byHmac.has(String(entry.hmac) + '|' + String(entry.salt_id))) return true;
+  }
+  return false;
+}

package/src/util/tofuture-hmac.mjs

@@ -0,0 +1,30 @@
+/**
+ * ToFuture identity HMAC (S2): the only form in which network identifiers leave the machine.
+ *
+ * One canonical algorithm for client, whitelist provisioning and relay comparison:
+ *   salt_id = HMAC(fleet_key, "w2m-ops-salt-v1|" + machine_id) hex[0..16]
+ *   hmac    = HMAC(fleet_key, "w2m-ops-id-v1|" + kind + "|" + value + "|" + salt_id) hex
+ *
+ * Nothing here returns, stores or logs `value`; callers pass it in memory and keep only `hmac`.
+ */
+import { createHmac } from 'node:crypto';
+
+export const ID_KINDS = Object.freeze(['mac', 'ipv4', 'ipv6', 'bssid']);
+
+const hmacHex = (key, text) => createHmac('sha256', key).update(text, 'utf8').digest('hex');
+
+export function saltIdOf(fleetKey, machineId) {
+  return hmacHex(String(fleetKey), 'w2m-ops-salt-v1|' + String(machineId)).slice(0, 16);
+}
+
+export function identityHmac(fleetKey, machineId, kind, value) {
+  const salt = saltIdOf(fleetKey, machineId);
+  return { kind, salt_id: salt, hmac: hmacHex(String(fleetKey), 'w2m-ops-id-v1|' + kind + '|' + String(value) + '|' + salt) };
+}
+
+/** Stable JSON for the request body (keys sorted) — used by tests and future attestation. */
+export function canonicalJson(value) {
+  if (value === null || typeof value !== 'object') return JSON.stringify(value);
+  if (Array.isArray(value)) return '[' + value.map(canonicalJson).join(',') + ']';
+  return '{' + Object.keys(value).sort().map((key) => JSON.stringify(key) + ':' + canonicalJson(value[key])).join(',') + '}';
+}