@twinsearth/w2m-dsh-plugin 1.9.6 → 1.9.7

package/.claude-plugin/marketplace.json

@@ -5,14 +5,14 @@
   },
   "metadata": {
     "description": "The w2m fleet plugins: one account, many machines, any of Windows, macOS or Linux.",
-    "version": "1.9.6"
+    "version": "1.9.7"
   },
   "plugins": [
     {
       "name": "w2m-fleet",
       "source": "./",
       "description": "Read fleet state and dispatch commands across the machines registered to one account. Read-only MCP surface: the five exposed tools cannot change anything.",
-      "version": "1.9.6",
+      "version": "1.9.7",
       "author": {
         "name": "TwinsEarth"
       },
@@ -26,5 +26,5 @@
       ]
     }
   ],
-  "version": "1.9.6"
+  "version": "1.9.7"
 }

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "w2m-fleet",
   "description": "Drive the same project on online Windows, macOS and Linux machines from one account: read fleet state, dispatch commands and read results. The MCP surface is deliberately read-only.",
-  "version": "1.9.6",
+  "version": "1.9.7",
   "author": {
     "name": "TwinsEarth"
   },

package/CHANGELOG.md

@@ -7,6 +7,12 @@
 
 All notable changes to this project are documented here.
 
+## [1.9.7] - 2026-10-28
+
+- 侧边栏与设置页入口统一命名为「GPW」，左对齐并沿用插件标签的字体、字号与间距。
+- GPW 主工作区面板与设置页面板改为管理台布局：标题 + 查询/操作卡片 + 标签页 + 数据表格（路径/类型/状态/移除），参考系统黑白名单界面。
+- 右下角浮标继续复用原弹窗面板，Composer 入口不变。
+
 ## [1.9.6] - 2026-10-28
 - 修复：左侧栏 GPW 点击无效。侧栏入口改用 `main` 槽位（key 与 panellist id 一致），点击切换到主工作区的完整 GPW 页面。
 - GPW 页面改为主工作区整页布局（960px 内容、独立滚动、卡片化分区），不再是右下角弹窗形态。

package/codex/mcp-servers.toml

@@ -12,6 +12,6 @@
 
 [mcp_servers.w2m-fleet]
 command = "npx"
-args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.9.6", "w2m-mcp"]
+args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.9.7", "w2m-mcp"]
 startup_timeout_sec = 20
 tool_timeout_sec = 60

package/docs/acceptance/1.9.7/RELEASE-197.json

@@ -0,0 +1,21 @@
+{
+  "version": "1.9.7",
+  "case": "RELEASE-197",
+  "kind": "positive",
+  "machines": [
+    "b53a37f4-1464-4512-9259-33a7df091e3e"
+  ],
+  "executed_at": "2026-10-27T22:02:43.187Z",
+  "executor": "lead",
+  "task_id": "pre-release-197-1793138563188",
+  "requirement": "V1.9.7：GPW 命名与对齐、GPW 管理台布局（主工作区与设置页），浮标弹窗保持不变",
+  "result": {
+    "outcome": "ok",
+    "assertions": {
+      "naming": "sidebar and settings labels are GPW, left aligned with nav typography",
+      "admin_page": "title + toolbar + tabs + table layout on main workspace and settings",
+      "popup": "floating launcher still uses the original popup panel",
+      "gates": "full suite + preflight expected GREEN before tag"
+    }
+  }
+}

package/lib/client.js

@@ -499,6 +499,29 @@ const PLUGIN_UPDATE_ROUTE = '/api/w2m/plugin-update';
   '.w2mChat_emoji{padding:2px 4px;border:0;background:transparent;font-size:16px;line-height:1;cursor:pointer}',
   '.w2mFleetStatus{display:flex;gap:16px;align-items:center;padding:2px 12px;font-size:11px;opacity:.8;white-space:nowrap}',
   '.w2mFleetStatusItem{white-space:nowrap}',
+    '.w2mGpw_admin{padding:24px 32px 48px;box-sizing:border-box;max-width:1400px;margin:0 auto;color:var(--dsw-alias-label-primary);font-size:13px}',
+  '.w2mGpw_adminHead{margin-bottom:16px}',
+  '.w2mGpw_adminTitle{margin:0 0 6px;font-size:22px;line-height:30px;font-weight:600}',
+  '.w2mGpw_adminSub{margin:0;font-size:13px;color:var(--dsw-alias-label-tertiary)}',
+  '.w2mGpw_adminNote{margin:0 0 12px;padding:8px 12px;border-radius:6px;border:1px solid rgba(220,120,80,.5);background:rgba(220,120,80,.12);font-size:12px}',
+  '.w2mGpw_adminCard{border:1px solid var(--dsw-alias-border-l2);border-radius:8px;padding:14px 16px;margin-bottom:14px;background:var(--dsw-alias-background-secondary)}',
+  '.w2mGpw_adminToolbar{display:flex;gap:8px;align-items:center;flex-wrap:wrap}',
+  '.w2mGpw_adminInput{height:30px;padding:0 10px;border:1px solid var(--dsw-alias-border-l2);border-radius:4px;background:transparent;color:inherit;font:inherit;min-width:220px}',
+  '.w2mGpw_adminBtn{height:28px;padding:0 12px;border:1px solid var(--dsw-alias-border-l2);border-radius:4px;background:transparent;color:inherit;font:inherit;cursor:pointer}',
+  '.w2mGpw_adminBtn:hover{background:rgba(127,127,127,.12)}',
+  '.w2mGpw_adminBtn:disabled{opacity:.5;cursor:default}',
+  '.w2mGpw_adminTabs{display:flex;gap:6px;margin-bottom:10px;flex-wrap:wrap}',
+  '.w2mGpw_adminTab{height:26px;padding:0 10px;border:0;border-radius:4px;background:transparent;color:inherit;font:inherit;cursor:pointer;opacity:.75}',
+  '.w2mGpw_adminTab.is-active{background:rgba(64,132,255,.18);opacity:1;font-weight:600}',
+  '.w2mGpw_adminTable{width:100%;border-collapse:collapse;font-size:13px}',
+  '.w2mGpw_adminTable th{text-align:left;font-weight:600;padding:10px 12px;border-bottom:1px solid rgba(127,127,127,.25);white-space:nowrap}',
+  '.w2mGpw_adminTable td{padding:10px 12px;border-bottom:1px solid rgba(127,127,127,.12);vertical-align:middle}',
+  '.w2mGpw_adminEmpty{opacity:.7;text-align:center !important;padding:22px 12px !important}',
+  '.w2mGpw_adminPath{max-width:420px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}',
+  '.w2mGpw_adminBadge{display:inline-block;padding:1px 8px;border-radius:10px;border:1px solid rgba(127,127,127,.35);font-size:12px}',
+  '.w2mGpw_adminBadge[data-kind="whitelist"]{border-color:rgba(80,180,120,.55);background:rgba(80,180,120,.12)}',
+  '.w2mGpw_adminBadge[data-kind="blacklist"]{border-color:rgba(220,120,80,.55);background:rgba(220,120,80,.12)}',
+  '.w2mGpw_sideEntry{justify-content:flex-start;text-align:left;font:inherit}',
     '.w2mGpw_mainWrap{height:100%;min-height:0;overflow-y:auto;padding:24px 16px 48px;box-sizing:border-box}',
   '.w2mGpw_mainWrap .w2mGpw_inline{max-width:960px;margin:0 auto}',
   '.w2mGpw_mainWrap .w2mGpw_card{width:100%;max-width:none;max-height:none;position:static;border:1px solid var(--dsw-alias-border-l2);border-radius:12px;background:var(--dsw-alias-background-secondary)}',
@@ -788,7 +811,118 @@ const PLUGIN_UPDATE_ROUTE = '/api/w2m/plugin-update';
 
     /** v1.9.6: the GPW page rendered in the main workspace (slot main, key w2m-gpw). */
     function GpwMainPage({ t }) {
-      return h('div', { className: 'w2mGpw_mainWrap' }, h(GpwPanel, { t, sessionId: undefined, inline: true, onClose: () => {} }));
+      return h('div', { className: 'w2mGpw_mainWrap' }, h(GpwAdminPage, { t }));
+    }
+
+    /**
+     * v1.9.7: the GPW management page, drawn as an admin console (title, filter bar, action
+     * buttons, table with row actions) rather than the floating popup card. The popup stays for
+     * the floating launcher; this page is what the sidebar row and the Settings tab open.
+     */
+    function GpwAdminPage({ sessionId }) {
+      const [state, setState] = React.useState(null);
+      const [error, setError] = React.useState(null);
+      const [busy, setBusy] = React.useState(false);
+      const [tab, setTab] = React.useState('all');
+      const [query, setQuery] = React.useState('');
+      const [manual, setManual] = React.useState('');
+      const call = async (url, init) => {
+        try {
+          const response = await fetch(url, { credentials: 'same-origin', headers: { accept: 'application/json', ...(init?.body === undefined ? {} : { 'content-type': 'application/json' }) }, ...init });
+          let body = null;
+          try { body = await response.json(); } catch { body = null; }
+          if (response.status === 404) return { ok: false, routeMissing: true, error: 'GPW route missing' };
+          if (response.ok !== true || body?.ok === false) return { ok: false, error: body?.error ?? ('HTTP ' + response.status) };
+          return { ok: true, body };
+        } catch (err) {
+          return { ok: false, error: err instanceof Error ? err.message : String(err) };
+        }
+      };
+      const load = React.useCallback(async () => {
+        const result = await call('/api/w2m/gpw/state', { method: 'GET' });
+        if (result.ok) { setState(result.body); setError(null); } else setError(result.routeMissing ? 'GPW 未启用（在插件页开启 dsh-gpw）' : (result.error ?? 'error'));
+      }, []);
+      React.useEffect(() => {
+        load();
+        const timer = setInterval(load, 3000);
+        return () => clearInterval(timer);
+      }, [load]);
+      const add = async (list, value) => {
+        if (value.trim() === '') return;
+        setBusy(true);
+        try {
+          const result = await call('/api/w2m/gpw/folders', { method: 'POST', body: JSON.stringify({ action: 'add', list, path: value.trim() }) });
+          if (result.ok) { setManual(''); await load(); } else setError(result.error ?? 'error');
+        } finally { setBusy(false); }
+      };
+      const remove = async (list, value) => {
+        setBusy(true);
+        try { await call('/api/w2m/gpw/folders', { method: 'POST', body: JSON.stringify({ action: 'remove', list, path: value }) }); await load(); } finally { setBusy(false); }
+      };
+      const decide = async (id, decision) => {
+        setBusy(true);
+        try { await call('/api/w2m/gpw/decide', { method: 'POST', body: JSON.stringify({ id, decision }) }); await load(); } finally { setBusy(false); }
+      };
+      const folders = state?.folders ?? { whitelist: [], blacklist: [] };
+      const pendingAll = Array.isArray(state?.pending) ? state.pending : [];
+      const pending = pendingAll.filter((item) => item?.session_id === null || item?.session_id === undefined || item?.session_id === sessionId);
+      const rows = [
+        ...(Array.isArray(folders.whitelist) ? folders.whitelist : []).map((path) => ({ path, list: 'whitelist' })),
+        ...(Array.isArray(folders.blacklist) ? folders.blacklist : []).map((path) => ({ path, list: 'blacklist' })),
+      ].filter((row) => (tab === 'all' || tab === row.list) && (query === '' || row.path.toLowerCase().includes(query.toLowerCase())));
+      const tabBtn = (key, label) => h('button', {
+        key,
+        type: 'button',
+        className: 'w2mGpw_adminTab' + (tab === key ? ' is-active' : ''),
+        onClick: () => setTab(key),
+      }, label);
+      return h('div', { className: 'w2mGpw_admin' }, [
+        h('div', { key: 'head', className: 'w2mGpw_adminHead' }, [
+          h('h1', { key: 'h', className: 'w2mGpw_adminTitle' }, 'GPW 文件策略'),
+          h('div', { key: 'sub', className: 'w2mGpw_adminSub' }, '白名单放行、黑名单拒绝，名单外的调用进入待审批队列'),
+        ]),
+        error === null ? null : h('div', { key: 'err', className: 'w2mGpw_adminNote' }, error),
+        state?.tampered === true ? h('div', { key: 'tampered', className: 'w2mGpw_adminNote' }, '名单被篡改，已锁定：' + (state?.tampered_reason ?? '')) : null,
+        h('div', { key: 'toolbar', className: 'w2mGpw_adminCard' }, [
+          h('div', { key: 'row', className: 'w2mGpw_adminToolbar' }, [
+            h('input', { key: 'q', className: 'w2mGpw_adminInput', value: query, placeholder: '搜索路径', onChange: (event) => setQuery(event.target.value) }),
+            h('input', { key: 'm', className: 'w2mGpw_adminInput', value: manual, placeholder: '输入绝对路径', onChange: (event) => setManual(event.target.value) }),
+            h('button', { key: 'w', type: 'button', className: 'w2mGpw_adminBtn', disabled: busy, onClick: () => add('whitelist', manual) }, '添加到白名单'),
+            h('button', { key: 'b', type: 'button', className: 'w2mGpw_adminBtn', disabled: busy, onClick: () => add('blacklist', manual) }, '添加到黑名单'),
+            h('button', { key: 'r', type: 'button', className: 'w2mGpw_adminBtn', disabled: busy, onClick: () => load() }, '刷新'),
+          ]),
+        ]),
+        h('div', { key: 'card', className: 'w2mGpw_adminCard' }, [
+          h('div', { key: 'tabs', className: 'w2mGpw_adminTabs' }, [tabBtn('all', '全部'), tabBtn('whitelist', '白名单'), tabBtn('blacklist', '黑名单'), tabBtn('pending', '待审批 (' + pending.length + ')')]),
+          tab === 'pending'
+            ? h('table', { key: 'ptable', className: 'w2mGpw_adminTable' }, [
+                h('thead', { key: 'thead' }, h('tr', null, [h('th', { key: 't' }, '工具'), h('th', { key: 'p' }, '路径'), h('th', { key: 's' }, '会话'), h('th', { key: 'a' }, '操作')])),
+                h('tbody', { key: 'tbody' }, pending.length === 0
+                  ? h('tr', null, h('td', { colSpan: 4, className: 'w2mGpw_adminEmpty' }, '没有待审批的调用'))
+                  : pending.map((item) => h('tr', { key: item.id }, [
+                      h('td', { key: 't' }, item.tool ?? 'tool'),
+                      h('td', { key: 'p', className: 'w2mGpw_adminPath' }, item.path ?? item.folder ?? '-'),
+                      h('td', { key: 's' }, item.session_id ?? '-'),
+                      h('td', { key: 'a' }, [
+                        h('button', { key: 'ok', type: 'button', className: 'w2mGpw_adminBtn', disabled: busy, onClick: () => decide(item.id, 'allow') }, '允许'),
+                        ' ',
+                        h('button', { key: 'no', type: 'button', className: 'w2mGpw_adminBtn', disabled: busy, onClick: () => decide(item.id, 'deny') }, '拒绝'),
+                      ]),
+                    ]))),
+              ])
+            : h('table', { key: 'table', className: 'w2mGpw_adminTable' }, [
+                h('thead', { key: 'thead' }, h('tr', null, [h('th', { key: 'p' }, '文件夹路径'), h('th', { key: 'k' }, '类型'), h('th', { key: 's' }, '状态'), h('th', { key: 'a' }, '操作')])),
+                h('tbody', { key: 'tbody' }, rows.length === 0
+                  ? h('tr', null, h('td', { colSpan: 4, className: 'w2mGpw_adminEmpty' }, '暂无记录'))
+                  : rows.map((row) => h('tr', { key: row.list + ':' + row.path }, [
+                      h('td', { key: 'p', className: 'w2mGpw_adminPath', title: row.path }, row.path),
+                      h('td', { key: 'k' }, h('span', { className: 'w2mGpw_adminBadge', 'data-kind': row.list }, row.list === 'whitelist' ? '白名单' : '黑名单')),
+                      h('td', { key: 's' }, '启用'),
+                      h('td', { key: 'a' }, h('button', { key: 'x', type: 'button', className: 'w2mGpw_adminBtn', disabled: busy, onClick: () => remove(row.list, row.path) }, '移除')),
+                    ]))),
+              ]),
+        ]),
+      ]);
     }
 
     /** v1.9.4: the GPW tab in Settings, between Models and Plugins. */
@@ -1913,7 +2047,7 @@ function TargetSelect({ sessionId, locked: _locked, t }) {
             name: 'conversation.input.left',
             id: 'w2m-gpw',
             order: 43,
-            label: 'GPW folders',
+            label: 'GPW',
             inject: (sessionId) => ({ t, sessionId }),
           }, GpwLauncher));
         } catch (error) {
@@ -1926,7 +2060,7 @@ function TargetSelect({ sessionId, locked: _locked, t }) {
             name: 'sidebar.panellist',
             id: 'w2m-gpw',
             order: 4,
-            label: () => 'GPW 文件夹',
+            label: () => 'GPW',
             inject: () => ({}),
           }, GpwSidebarIcon));
         } catch (error) {
@@ -1937,7 +2071,7 @@ function TargetSelect({ sessionId, locked: _locked, t }) {
           slots.inject('main', () => slots.register({
             name: 'main',
             key: 'w2m-gpw',
-            label: () => 'GPW 文件夹策略',
+            label: () => 'GPW',
             inject: () => ({ t }),
           }, GpwMainPage));
         } catch (error) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "1.9.6",
+  "version": "1.9.7",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "type": "module",
   "exports": {

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "twinsearth-w2m-dsh",
-  "version": "1.9.6",
+  "version": "1.9.7",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 12 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "license": "MIT",
   "keywords": [

package/src/plugin/tools.mjs

@@ -283,7 +283,7 @@ const MAX_STAGES = 16;
  * `package.json` during `scripts/pack.mjs` rather than hand-maintained, and `W2M_PLUGIN_VERSION`
  * overrides it at runtime for tests and packagers.
  */
-const PLUGIN_VERSION = '1.9.6';
+const PLUGIN_VERSION = '1.9.7';
 
 /** How long any single HTTP call may take before it is aborted, in milliseconds. */
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;