@twinsearth/w2m-dsh-plugin 1.9.9 → 1.9.10

package/.claude-plugin/marketplace.json

@@ -5,14 +5,14 @@
   },
   "metadata": {
     "description": "The w2m fleet plugins: one account, many machines, any of Windows, macOS or Linux.",
-    "version": "1.9.9"
+    "version": "1.9.10"
   },
   "plugins": [
     {
       "name": "w2m-fleet",
       "source": "./",
       "description": "Read fleet state and dispatch commands across the machines registered to one account. Read-only MCP surface: the five exposed tools cannot change anything.",
-      "version": "1.9.9",
+      "version": "1.9.10",
       "author": {
         "name": "TwinsEarth"
       },
@@ -26,5 +26,5 @@
       ]
     }
   ],
-  "version": "1.9.9"
+  "version": "1.9.10"
 }

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "w2m-fleet",
   "description": "Drive the same project on online Windows, macOS and Linux machines from one account: read fleet state, dispatch commands and read results. The MCP surface is deliberately read-only.",
-  "version": "1.9.9",
+  "version": "1.9.10",
   "author": {
     "name": "TwinsEarth"
   },

package/CHANGELOG.md

@@ -7,6 +7,12 @@
 
 All notable changes to this project are documented here.
 
+## [1.9.10] - 2026-10-28
+
+- 新增 `bin/w2m-self-update.mjs`：可被编队任务直接下发的自更新入口，读取 GitHub Release、校验 SHA256SUMS、调用已验证安装器，输出一行 JSON，不重启 DSH。
+- 固化升级策略：优先下发自更新指令；失败才使用 Node 远程执行回退（macOS 用 mac-self-update，Windows 用 node 替换+备份）。
+- 参数：--profile、--dry-run、--allow-prerelease；环境变量 W2M_PROFILE_DIR / W2M_UPDATE_REPO。
+
 ## [1.9.9] - 2026-10-28
 
 - 对话主工作区新增全文搜索：会话头部（置顶按钮同排）🔍 图标，点击展开搜索框，Enter/Shift+Enter 或 ↑/↓ 在已渲染对话中查找并高亮（Electron/Chromium find）。

package/bin/w2m-self-update.mjs

@@ -0,0 +1,107 @@
+#!/usr/bin/env node
+/**
+ * Remote-triggerable, verified self-update for the W2M plugin.
+ *
+ * Fleet policy (operator): a machine is upgraded by dispatching this script as a task
+ * (`node <profile>/node_modules/@twinsearth/w2m-dsh-plugin/bin/w2m-self-update.mjs`), and only
+ * when that fails is a Node remote-execution fallback used. This file is therefore headless:
+ * it checks the configured GitHub release, verifies the published sha256, installs through the
+ * same updater the plugin UI uses, and prints one JSON line. It never restarts DSH.
+ *
+ * Usage:
+ *   node bin/w2m-self-update.mjs [--profile <dir|name>] [--dry-run] [--allow-prerelease] [--json]
+ *
+ * Exit codes: 0 installed or already current; 1 check/install failed; 2 usage error.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+
+import { createAutoUpdater, findProfileDir } from '../src/plugin/auto-update.mjs';
+
+const DEFAULT_REPO = 'TwinsEarth/dsh-windows2macos';
+const PACKAGE_NAME = '@twinsearth/w2m-dsh-plugin';
+
+function parseArgs(argv) {
+  const args = { profile: null, dryRun: false, allowPrerelease: false };
+  for (let i = 0; i < argv.length; i += 1) {
+    const arg = argv[i];
+    if (arg === '--profile') { args.profile = argv[i + 1] ?? null; i += 1; continue; }
+    if (arg === '--dry-run') { args.dryRun = true; continue; }
+    if (arg === '--allow-prerelease') { args.allowPrerelease = true; continue; }
+    if (arg === '--help' || arg === '-h') { args.help = true; continue; }
+    if (arg === '--json') { args.json = true; continue; }
+    args.unknown = arg;
+  }
+  return args;
+}
+
+function readInstalledVersion(profileDir) {
+  try {
+    const manifest = JSON.parse(readFileSync(join(profileDir, 'node_modules', ...PACKAGE_NAME.split('/'), 'package.json'), 'utf8'));
+    return typeof manifest.version === 'string' ? manifest.version : null;
+  } catch {
+    return null;
+  }
+}
+
+function resolveProfile(input) {
+  if (input !== null) {
+    if (existsSync(input)) return input;
+    // A bare profile name resolves under the DSH home directory.
+    const named = join(process.env.DSH_HOME ?? join(process.env.USERPROFILE ?? process.env.HOME ?? '', '.dsh'), 'profiles', input);
+    if (existsSync(named)) return named;
+    return null;
+  }
+  if (typeof process.env.W2M_PROFILE_DIR === 'string' && existsSync(process.env.W2M_PROFILE_DIR)) return process.env.W2M_PROFILE_DIR;
+  return findProfileDir() ?? null;
+}
+
+const args = parseArgs(process.argv.slice(2));
+if (args.help === true) {
+  process.stdout.write(
+    'Usage: w2m-self-update [--profile <dir|name>] [--dry-run] [--allow-prerelease]\n' +
+    'Checks GitHub releases, verifies sha256, installs the newer plugin build for the next start.\n',
+  );
+  process.exit(0);
+}
+if (args.unknown !== undefined) {
+  process.stderr.write(`unknown argument: ${args.unknown}\n`);
+  process.exit(2);
+}
+
+const profileDir = resolveProfile(args.profile);
+if (profileDir === null) {
+  process.stdout.write(JSON.stringify({ ok: false, outcome: 'error', error: 'no DSH profile directory found; pass --profile <dir>' }) + '\n');
+  process.exit(2);
+}
+
+const currentVersion = readInstalledVersion(profileDir);
+const updater = createAutoUpdater({
+  profileDir,
+  currentVersion,
+  repo: process.env.W2M_UPDATE_REPO ?? DEFAULT_REPO,
+  dryRun: args.dryRun,
+  allowPrerelease: args.allowPrerelease,
+  enabled: false,
+});
+
+let result;
+try {
+  result = await updater.check('manual');
+} catch (error) {
+  process.stdout.write(JSON.stringify({ ok: false, outcome: 'error', error: error instanceof Error ? error.message : String(error) }) + '\n');
+  process.exit(1);
+}
+
+const outcome = result?.outcome ?? 'unknown';
+const ok = result?.ok === true && (outcome === 'installed' || outcome === 'up-to-date' || outcome === 'current' || outcome === 'skipped');
+process.stdout.write(JSON.stringify({
+  ok,
+  outcome,
+  current: currentVersion,
+  latest: result?.tag ?? result?.to ?? null,
+  reason: result?.reason ?? null,
+  error: result?.error ?? null,
+  restart_required: outcome === 'installed',
+}) + '\n');
+process.exit(ok ? 0 : 1);

package/codex/mcp-servers.toml

@@ -12,6 +12,6 @@
 
 [mcp_servers.w2m-fleet]
 command = "npx"
-args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.9.9", "w2m-mcp"]
+args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@1.9.10", "w2m-mcp"]
 startup_timeout_sec = 20
 tool_timeout_sec = 60

package/docs/acceptance/1.9.10/RELEASE-1910.json

@@ -0,0 +1,21 @@
+{
+  "version": "1.9.10",
+  "case": "RELEASE-1910",
+  "kind": "positive",
+  "machines": [
+    "b53a37f4-1464-4512-9259-33a7df091e3e"
+  ],
+  "executed_at": "2026-10-27T23:24:12.342Z",
+  "executor": "lead",
+  "task_id": "pre-release-1910-1793143452343",
+  "requirement": "V1.9.10：可下发的自更新 CLI 与编队升级策略",
+  "result": {
+    "outcome": "ok",
+    "assertions": {
+      "cli": "bin/w2m-self-update.mjs --help exit 0",
+      "dry_run": "current 1.9.9, latest v1.9.9, skipped, exit 0",
+      "policy": "prefer dispatch; Node remote-execution fallback; operator token required",
+      "gates": "full suite + preflight expected GREEN before tag"
+    }
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "1.9.9",
+  "version": "1.9.10",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "type": "module",
   "exports": {
@@ -205,7 +205,8 @@
     "w2m-secondary-link": "bin/w2m-secondary-link.mjs",
     "w2m-bootstrap": "bin/w2m-bootstrap.mjs",
     "w2m-bootstrap-sign": "bin/w2m-bootstrap-sign.mjs",
-    "w2m-hidden-task": "bin/w2m-hidden-task.mjs"
+    "w2m-hidden-task": "bin/w2m-hidden-task.mjs",
+    "w2m-self-update": "bin/w2m-self-update.mjs"
   },
   "disclosure": {
     "cloud": true,

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "twinsearth-w2m-dsh",
-  "version": "1.9.9",
+  "version": "1.9.10",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 12 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "license": "MIT",
   "keywords": [

package/src/plugin/tools.mjs

@@ -283,7 +283,7 @@ const MAX_STAGES = 16;
  * `package.json` during `scripts/pack.mjs` rather than hand-maintained, and `W2M_PLUGIN_VERSION`
  * overrides it at runtime for tests and packagers.
  */
-const PLUGIN_VERSION = '1.9.9';
+const PLUGIN_VERSION = '1.9.10';
 
 /** How long any single HTTP call may take before it is aborted, in milliseconds. */
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;