@twinsearth/w2m-dsh-plugin 2.0.5 → 2.0.7

package/codex/mcp-servers.toml

@@ -12,6 +12,6 @@
 
 [mcp_servers.w2m-fleet]
 command = "npx"
-args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@2.0.5", "w2m-mcp"]
+args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@2.0.7", "w2m-mcp"]
 startup_timeout_sec = 20
 tool_timeout_sec = 60

package/docs/acceptance/2.0.6/RELEASE-2060.json

@@ -0,0 +1,22 @@
+{
+  "version": "2.0.6",
+  "case": "RELEASE-2060",
+  "kind": "positive",
+  "machines": [
+    "b53a37f4-1464-4512-9259-33a7df091e3e"
+  ],
+  "executed_at": "2026-10-28T17:02:50.164Z",
+  "executor": "lead",
+  "task_id": "pre-release-2060-1793206970165",
+  "requirement": "v2.0.6:CI 跨平台修复(realpath 归一) + 搜索规则(纯数字≤100拒绝/视口最多6条/滚动刷新) + 一键到顶等待加载",
+  "result": {
+    "outcome": "ok",
+    "assertions": {
+      "preflight": "16 pass / 0 fail / 1 unverifiable (GREEN)",
+      "tests": "declared suite all pass; client-bundle 27/27",
+      "lint": "0 errors",
+      "pack": "byte-identical; manifest equals tree",
+      "scope": "local code + tests only; release follows via tag v2.0.6"
+    }
+  }
+}

package/docs/acceptance/2.0.7/RELEASE-2070.json

@@ -0,0 +1,21 @@
+{
+  "version": "2.0.7",
+  "case": "RELEASE-2070",
+  "kind": "positive",
+  "machines": [
+    "b53a37f4-1464-4512-9259-33a7df091e3e"
+  ],
+  "executed_at": "2026-10-28T17:37:31.887Z",
+  "executor": "lead",
+  "task_id": "pre-release-2070-1793209051887",
+  "requirement": "v2.0.7: chat-enc-v2 门控 + encrypted mirror + v2 发送/读取；Node 执行能力开启",
+  "result": {
+    "outcome": "ok",
+    "assertions": {
+      "preflight": "GREEN",
+      "tests": "all declared suites",
+      "lint": "0 errors",
+      "scope": "local; relay already advertises chat-enc-v2"
+    }
+  }
+}

package/lib/client.js

@@ -1100,12 +1100,30 @@ function clearSearchMarks() {
     if (parent.normalize) parent.normalize();
   }
 }
+/**
+ * Search rules (v2.0.5 UI): a pure number up to 100 is not a useful query in a conversation full of
+ * ids/ports/timestamps, so it is refused outright (no marks, no scroll, no count). Only the viewport
+ * is highlighted, at most six matches per screen; scrolling re-runs the pass for the new viewport.
+ */
+const SEARCH_MAX_MARKS = 6;
+function searchQueryAllowed(query) {
+  const text = String(query ?? '').trim();
+  if (text === '') return false;
+  if (/^\d+$/.test(text)) return Number(text) > 100;
+  return true;
+}
+function viewportRect() {
+  const width = typeof window !== 'undefined' ? window.innerWidth : 1024;
+  const height = typeof window !== 'undefined' ? window.innerHeight : 768;
+  return { left: 0, top: 0, right: width, bottom: height };
+}
 function paintSearchMarks(query) {
   clearSearchMarks();
-  if (typeof document === 'undefined' || query === '') return 0;
+  if (typeof document === 'undefined' || query === '' || !searchQueryAllowed(query)) return 0;
   const needle = query.toLowerCase();
+  const view = viewportRect();
   let total = 0;
-  for (const root of searchRoots()) {
+  outer: for (const root of searchRoots()) {
     let walker;
     try {
       walker = document.createTreeWalker(root, NodeFilter.SHOW_TEXT, {
@@ -1124,21 +1142,28 @@ function paintSearchMarks(query) {
     let node = walker.nextNode();
     while (node !== null) { nodes.push(node); node = walker.nextNode(); }
     for (const textNode of nodes) {
+      // Cheap pre-filter: a text node whose element is entirely outside the viewport cannot paint.
+      const host = textNode.parentElement;
+      const hostRect = host !== null && typeof host.getBoundingClientRect === 'function' ? host.getBoundingClientRect() : null;
+      if (hostRect !== null && (hostRect.bottom < view.top || hostRect.top > view.bottom)) continue;
       const text = textNode.nodeValue ?? '';
       const lower = text.toLowerCase();
       const hits = [];
       let index = lower.indexOf(needle);
       while (index >= 0) { hits.push(index); index = lower.indexOf(needle, index + query.length); }
-      for (let k = hits.length - 1; k >= 0; k -= 1) {
+      for (const hit of hits) {
         try {
           const range = document.createRange();
-          range.setStart(textNode, hits[k]);
-          range.setEnd(textNode, hits[k] + query.length);
+          range.setStart(textNode, hit);
+          range.setEnd(textNode, hit + query.length);
+          const rect = typeof range.getBoundingClientRect === 'function' ? range.getBoundingClientRect() : null;
+          if (rect !== null && (rect.bottom < view.top || rect.top > view.bottom || rect.right < view.left || rect.left > view.right)) continue;
           const mark = document.createElement('mark');
           mark.className = 'w2mSearchMark';
           mark.setAttribute('style', 'background-color:rgba(255,235,59,.85);color:rgba(11,122,51,1)');
           range.surroundContents(mark);
           total += 1;
+          if (total >= SEARCH_MAX_MARKS) break outer;
         } catch { /* a range that crosses elements cannot be wrapped; skip it */ }
       }
     }
@@ -1381,24 +1406,54 @@ function ConversationSearch() {
   React.useEffect(() => { if (open && inputRef.current && inputRef.current.focus) inputRef.current.focus(); }, [open]);
   // v2.0.5: wait until 3s pass without new input before walking the conversation, so typing does
   // not trigger a full-tree highlight pass on every keystroke (the reported input jank).
-  const paintNow = () => {
-    const total = paintSearchMarks(query);
+  // Rules: a pure number <= 100 is refused; only the viewport is highlighted (max 6) and scrolling
+  // repaints the current viewport without yanking the scroll position.
+  const appliedRef = React.useRef('');
+  const paintRef = React.useRef(() => {});
+  paintRef.current = (focus = false) => {
+    const total = paintSearchMarks(appliedRef.current);
     setCount(total);
     setCursor(total > 0 ? 0 : -1);
-    const first = document.querySelector('mark.w2mSearchMark');
-    if (first && first.scrollIntoView) first.scrollIntoView({ block: 'center', behavior: 'smooth' });
+    if (focus === true) {
+      const first = document.querySelector('mark.w2mSearchMark');
+      if (first && first.scrollIntoView) first.scrollIntoView({ block: 'center', behavior: 'smooth' });
+    }
   };
   React.useEffect(() => {
-    if (!open) { clearSearchMarks(); setCount(0); setCursor(-1); }
+    if (!open) { appliedRef.current = ''; clearSearchMarks(); setCount(0); setCursor(-1); }
   }, [open]);
   React.useEffect(() => {
     if (!open) return undefined;
-    const timer = setTimeout(paintNow, 3000);
+    if (!searchQueryAllowed(query)) {
+      // Refused query: no marks, no count, no scroll — the input itself stays usable.
+      appliedRef.current = '';
+      clearSearchMarks();
+      setCount(0);
+      setCursor(-1);
+      return undefined;
+    }
+    const timer = setTimeout(() => { appliedRef.current = query; paintRef.current(true); }, 3000);
     return () => clearTimeout(timer);
   }, [open, query]);
+  React.useEffect(() => {
+    if (!open) return undefined;
+    let timer = null;
+    const onScroll = () => {
+      if (appliedRef.current === '') return;
+      if (timer !== null) clearTimeout(timer);
+      timer = setTimeout(() => { paintRef.current(false); }, 150);
+    };
+    window.addEventListener('scroll', onScroll, true);
+    return () => {
+      if (timer !== null) clearTimeout(timer);
+      window.removeEventListener('scroll', onScroll, true);
+    };
+  }, [open]);
   const step = (backwards) => {
-    const marks = [...document.querySelectorAll('mark.w2mSearchMark')];
-    if (marks.length === 0) { paintSearchMarks(query); return; }
+    if (appliedRef.current === '') return;
+    let marks = [...document.querySelectorAll('mark.w2mSearchMark')];
+    if (marks.length === 0) { paintRef.current(false); marks = [...document.querySelectorAll('mark.w2mSearchMark')]; }
+    if (marks.length === 0) return;
     const next = (cursor + (backwards ? -1 : 1) + marks.length) % marks.length;
     setCursor(next);
     if (marks[next] && marks[next].scrollIntoView) marks[next].scrollIntoView({ block: 'center', behavior: 'smooth' });
@@ -1424,11 +1479,14 @@ function ConversationSearch() {
       placeholder: '搜索本对话全部内容',
       onChange: (event) => setQuery(event.target.value),
       onKeyDown: (event) => {
-        if (event.key === 'Enter') { event.preventDefault(); paintNow(); step(event.shiftKey); }
+        if (event.key === 'Enter') {
+          event.preventDefault();
+          if (searchQueryAllowed(query)) { appliedRef.current = query; paintRef.current(true); step(event.shiftKey); }
+        }
         if (event.key === 'Escape') { setOpen(false); setQuery(''); }
       },
     }),
-    h('span', { key: 'count', className: 'w2mSearchCount' }, count === 0 ? (query === '' ? '' : '0') : whenCount(count, cursor)),
+    h('span', { key: 'count', className: 'w2mSearchCount' }, count === 0 ? (searchQueryAllowed(query) ? '0' : '') : whenCount(count, cursor)),
     h('button', { key: 'prev', type: 'button', className: 'w2mSearchBtn', title: '上一个', onClick: () => step(true) }, '↑'),
     h('button', { key: 'next', type: 'button', className: 'w2mSearchBtn', title: '下一个', onClick: () => step(false) }, '↓'),
     h('button', { key: 'close', type: 'button', className: 'w2mSearchBtn', title: '关闭搜索', onClick: () => { setOpen(false); setQuery(''); clearSearchMarks(); } }, '×'),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "2.0.5",
+  "version": "2.0.7",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "type": "module",
   "exports": {
@@ -64,7 +64,7 @@
     "pack": "node scripts/pack.mjs",
     "reachability": "node scripts/reachability-check.mjs",
     "reachability:classify": "node scripts/reachability-classify.mjs",
-    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs test/task-deps.test.mjs test/dataflow-wiring.test.mjs test/task-graph.test.mjs test/ask-store.test.mjs test/turn.test.mjs test/fleet-members.test.mjs test/redact.test.mjs test/policy-matrix.test.mjs test/envelope-signature.test.mjs test/chat-crypto.test.mjs test/reduce-suggestion.test.mjs test/merge-hint.test.mjs test/fleet-chat-route.test.mjs test/maintenance.test.mjs test/maintenance-ferry.test.mjs test/grant.test.mjs test/grant-gate.test.mjs test/worktree.test.mjs test/patch-artifact.test.mjs test/merge-queue.test.mjs test/m3-workflow.test.mjs test/project-room.test.mjs test/project-attribution.test.mjs test/project-locks.test.mjs test/project-reviews.test.mjs test/project-notifications.test.mjs test/blob-sessions.test.mjs test/outbox.test.mjs test/reliability-metrics.test.mjs test/evidence.test.mjs test/grant-issue.test.mjs test/project-refs.test.mjs test/exec-capability.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs test/capture-route.test.mjs test/update-resolver.test.mjs test/agent-identity-safe.test.mjs test/re-pair-stale-token.test.mjs test/gpw-folder-policy.test.mjs test/gpw-activation.test.mjs test/gpw-hardening.test.mjs test/gpw-tamper-gate.test.mjs test/gpw-persistence.test.mjs test/gpw-colors.test.mjs test/gpw-recent-fold.test.mjs test/gpw-auto-approve.test.mjs test/joint-dev-dispatch.test.mjs test/joint-dev-loop.test.mjs test/joint-dev-audit.test.mjs test/joint-dev-redline.test.mjs test/relay-redline-guard.test.mjs test/relay-p0-projection.test.mjs test/guarded-dispatch.test.mjs test/p0-single-matcher.test.mjs test/path-policy.test.mjs test/path-policy-fs.test.mjs test/gpw-inheritance-table.test.mjs test/gpw-policy-adapter.test.mjs test/target-policy.test.mjs test/relay-redline-audit.test.mjs test/relay-repair-ledger.test.mjs test/relay-purge-blobs.test.mjs test/relay-scrub.test.mjs test/joint-dev-plan-store.test.mjs test/relay-basepath-blobs.test.mjs test/operator-token.test.mjs test/relay-health-capabilities.test.mjs test/joint-relay-dispatch.test.mjs test/operator-token-route.test.mjs test/relay-scrub-task-projection.test.mjs test/operator-key-approval.test.mjs test/relay-offer-journal.test.mjs test/joint-r5-wiring.test.mjs test/p1-hardening.test.mjs test/joint-merge-engine.test.mjs test/artifact-ref-dir-sink.test.mjs test/chat-sticker-guard.test.mjs test/relay-task-progress.test.mjs test/gpw-modes.test.mjs test/joint-cli.test.mjs test/joint-command-hash.test.mjs test/joint-dispatch-audit.test.mjs test/tools-cancel-auth.test.mjs test/fleet-mirror.test.mjs test/sink-git-ssh.test.mjs test/agent-sse-watchdog.test.mjs test/version-gate.test.mjs test/joint-merge-cli.test.mjs test/joint-progress.test.mjs test/project-room-truncation.test.mjs test/chat-crypto-aad.test.mjs test/agent-artifact-delivery.test.mjs test/dataplane-sink-route.test.mjs test/artifact-sink-e2e.test.mjs test/project-room-persistence.test.mjs test/project-room-disk-persistence.test.mjs test/project-stream-route.test.mjs",
+    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs test/task-deps.test.mjs test/dataflow-wiring.test.mjs test/task-graph.test.mjs test/ask-store.test.mjs test/turn.test.mjs test/fleet-members.test.mjs test/redact.test.mjs test/policy-matrix.test.mjs test/envelope-signature.test.mjs test/chat-crypto.test.mjs test/reduce-suggestion.test.mjs test/merge-hint.test.mjs test/fleet-chat-route.test.mjs test/maintenance.test.mjs test/maintenance-ferry.test.mjs test/grant.test.mjs test/grant-gate.test.mjs test/worktree.test.mjs test/patch-artifact.test.mjs test/merge-queue.test.mjs test/m3-workflow.test.mjs test/project-room.test.mjs test/project-attribution.test.mjs test/project-locks.test.mjs test/project-reviews.test.mjs test/project-notifications.test.mjs test/blob-sessions.test.mjs test/outbox.test.mjs test/reliability-metrics.test.mjs test/evidence.test.mjs test/grant-issue.test.mjs test/project-refs.test.mjs test/exec-capability.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs test/capture-route.test.mjs test/update-resolver.test.mjs test/agent-identity-safe.test.mjs test/re-pair-stale-token.test.mjs test/gpw-folder-policy.test.mjs test/gpw-activation.test.mjs test/gpw-hardening.test.mjs test/gpw-tamper-gate.test.mjs test/gpw-persistence.test.mjs test/gpw-colors.test.mjs test/gpw-recent-fold.test.mjs test/gpw-auto-approve.test.mjs test/joint-dev-dispatch.test.mjs test/joint-dev-loop.test.mjs test/joint-dev-audit.test.mjs test/joint-dev-redline.test.mjs test/relay-redline-guard.test.mjs test/relay-p0-projection.test.mjs test/guarded-dispatch.test.mjs test/p0-single-matcher.test.mjs test/path-policy.test.mjs test/path-policy-fs.test.mjs test/gpw-inheritance-table.test.mjs test/gpw-policy-adapter.test.mjs test/target-policy.test.mjs test/relay-redline-audit.test.mjs test/relay-repair-ledger.test.mjs test/relay-purge-blobs.test.mjs test/relay-scrub.test.mjs test/joint-dev-plan-store.test.mjs test/relay-basepath-blobs.test.mjs test/operator-token.test.mjs test/relay-health-capabilities.test.mjs test/joint-relay-dispatch.test.mjs test/operator-token-route.test.mjs test/relay-scrub-task-projection.test.mjs test/operator-key-approval.test.mjs test/relay-offer-journal.test.mjs test/joint-r5-wiring.test.mjs test/p1-hardening.test.mjs test/joint-merge-engine.test.mjs test/artifact-ref-dir-sink.test.mjs test/chat-sticker-guard.test.mjs test/relay-task-progress.test.mjs test/gpw-modes.test.mjs test/joint-cli.test.mjs test/joint-command-hash.test.mjs test/joint-dispatch-audit.test.mjs test/tools-cancel-auth.test.mjs test/fleet-mirror.test.mjs test/sink-git-ssh.test.mjs test/agent-sse-watchdog.test.mjs test/version-gate.test.mjs test/joint-merge-cli.test.mjs test/joint-progress.test.mjs test/project-room-truncation.test.mjs test/chat-crypto-aad.test.mjs test/agent-artifact-delivery.test.mjs test/dataplane-sink-route.test.mjs test/artifact-sink-e2e.test.mjs test/project-room-persistence.test.mjs test/project-room-disk-persistence.test.mjs test/project-stream-route.test.mjs test/chat-v2-gate.test.mjs",
     "test:acceptance-doc": "node --test --test-force-exit test/acceptance-doc.test.mjs",
     "test:account-identity": "node --test --test-force-exit test/account-identity.test.mjs",
     "test:account-join": "node --test --test-force-exit test/account-join.test.mjs",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "twinsearth-w2m-dsh",
-  "version": "2.0.5",
+  "version": "2.0.7",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 12 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "license": "MIT",
   "keywords": [

package/src/plugin/chat-v2-gate.mjs

@@ -0,0 +1,40 @@
+/**
+ * chat-enc-v2 capability gate (A7 wiring).
+ *
+ * The relay advertises `chat-enc-v2` in `/healthz.features`; when it does not, the plugin must keep
+ * sending v1 envelopes (which every 1.x relay accepts) rather than inventing a v2 shape. The answer
+ * is cached briefly so a chatty panel does not probe healthz on every message.
+ */
+const TTL_MS = 60_000;
+const cache = new Map();
+
+export function resetChatV2Cache() {
+  cache.clear();
+}
+
+/**
+ * @param {{rabbitUrl?: string|null, fetchImpl?: Function, now?: () => number, signal?: AbortSignal, ttlMs?: number}} input
+ * @returns {Promise<boolean>}
+ */
+export async function chatEncV2Supported(input = {}) {
+  const base = typeof input.rabbitUrl === 'string' ? input.rabbitUrl.replace(/\/$/, '') : '';
+  if (base === '') return false;
+  const now = typeof input.now === 'function' ? input.now() : Date.now();
+  const ttl = Number.isInteger(input.ttlMs) ? input.ttlMs : TTL_MS;
+  const hit = cache.get(base);
+  if (hit !== undefined && now - hit.at < ttl) return hit.supported;
+  const fetchImpl = typeof input.fetchImpl === 'function' ? input.fetchImpl : globalThis.fetch;
+  let supported = false;
+  try {
+    const response = await fetchImpl(base + '/healthz', { headers: { accept: 'application/json' }, signal: input.signal });
+    if (response?.ok === true) {
+      const body = await response.json();
+      const features = Array.isArray(body?.features) ? body.features : [];
+      supported = features.includes('chat-enc-v2');
+    }
+  } catch {
+    supported = false;
+  }
+  cache.set(base, { at: now, supported });
+  return supported;
+}

package/src/plugin/dataplane-sink-route.mjs

@@ -28,7 +28,12 @@ function readConfig(stateDir) {
 }
 
 function insideStateDir(stateDir, target) {
-  const rel = relative(stateDir, target);
+  // Compare canonical paths: Windows temp dirs come back as RUNNER~1 here and runneradmin in the
+  // realpath, and macOS /var is a symlink to /private/var, so a raw prefix test lets an inside path
+  // through on CI even though it is inside the state dir.
+  let base = stateDir;
+  try { base = realpathSync.native ? realpathSync.native(stateDir) : realpathSync(stateDir); } catch { /* keep raw */ }
+  const rel = relative(base, target);
   return rel === '' || (!rel.startsWith('..') && !isAbsolute(rel));
 }
 

package/src/plugin/fleet-chat-route.mjs

@@ -22,6 +22,8 @@ import {
   decodeTranscript, extractUserMessages, sessionDirName,
 } from './session-watch.mjs';
 import { createSessionSync } from './session-sync.mjs';
+import { deriveChatKey, encryptChatTextV2 } from '../util/chat-crypto.mjs';
+import { chatEncV2Supported } from './chat-v2-gate.mjs';
 
 /** Session prompts are mirrored only when the operator opts in; the default is off. */
 export const DEFAULT_MIRROR_MODE = 'off';
@@ -174,9 +176,38 @@ export function registerChatRoutes(ctx, deps) {
   const mirrorOnce = async () => {
     const mode = mirrorModeOf(deps.cfg());
     if (mode === 'off') return;
-    if (mode === 'encrypted') return; // encrypted mirroring lands with the AEAD v2 slice
     const identity = await identityOf();
     if (identity.conversationKey === null) return;
+    if (mode === 'encrypted') {
+      // Relay gate: without chat-enc-v2 the mirror stays off (never send a shape the relay cannot
+      // validate). The fleet key derives the same group key every machine uses; the AAD binds the
+      // message to this conversation, this machine and a deterministic message id, so a ciphertext
+      // copied into another session is refused at decryption time.
+      const supported = await chatEncV2Supported({ rabbitUrl: deps.cfg()?.rabbitUrl ?? null });
+      if (!supported) return;
+      const accountMaterial = typeof deps.accountMaterial === 'function' ? await deps.accountMaterial() : null;
+      const chatKey = deriveChatKey(accountMaterial ?? deps.cfg()?.fleetKey ?? null);
+      if (chatKey === null) return;
+      const file = newestTranscript(projectDirOf());
+      if (file === null) return;
+      let messages;
+      try { messages = extractUserMessages(decodeTranscript(readFileSync(file))); } catch { return; }
+      for (const payload of sync.pending(messages)) {
+        const plain = truncateUtf8(payload.text, MIRROR_MAX_BYTES);
+        const messageId = createHash('sha256').update(identity.conversationKey + '|' + identity.machineId + '|' + plain).digest('hex').slice(0, 32);
+        const sealed = encryptChatTextV2(chatKey, plain, { sessionId: identity.conversationKey, machineId: identity.machineId, messageId });
+        if (sealed.ok !== true) continue;
+        await postToRelay(identity, {
+          text: sealed.text,
+          enc: sealed.enc,
+          machine_id: identity.machineId,
+          machine_name: identity.machineName,
+          origin: 'session',
+        });
+      }
+      return;
+    }
+    if (identity.conversationKey === null) return;
     const file = newestTranscript(projectDirOf());
     if (file === null) return;
     let messages;

package/src/plugin/tools.mjs

@@ -206,7 +206,8 @@ import { buildBoard } from './task-graph.mjs';
 import { verifyEnvelopeSignature } from '../util/envelope-signature.mjs';
 import { createAskStore } from './ask-store.mjs';
 import { deriveTurns } from './turn.mjs';
-import { decryptChatMessage, deriveChatKey, encryptChatText, isEncrypted } from '../util/chat-crypto.mjs';
+import { decryptChatMessage, deriveChatKey, encryptChatText, encryptChatTextV2, isEncrypted } from '../util/chat-crypto.mjs';
+import { chatEncV2Supported } from './chat-v2-gate.mjs';
 
 /**
  * v1.2.6 reliability: two small files beside the plugin's state.
@@ -289,7 +290,7 @@ const MAX_STAGES = 16;
  * `package.json` during `scripts/pack.mjs` rather than hand-maintained, and `W2M_PLUGIN_VERSION`
  * overrides it at runtime for tests and packagers.
  */
-const PLUGIN_VERSION = '2.0.5';
+const PLUGIN_VERSION = '2.0.7';
 
 /** How long any single HTTP call may take before it is aborted, in milliseconds. */
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;
@@ -6989,7 +6990,18 @@ hint: 'the local fleet-memory.md is unchanged; action read/show still reads loca
          */
         const chatKey = deriveChatKey(cfg.fleetKey ?? resolvedFleetKey.value ?? null);
         const plainText = typeof args?.text === 'string' ? args.text : '';
-        const sealed = chatKey === null ? null : encryptChatText(chatKey, plainText);
+        const idempotencyKey = typeof args?.idempotency_key === 'string' && args.idempotency_key.trim() !== ''
+          ? args.idempotency_key.trim()
+          : 'spool-' + Date.now() + '-' + Math.random().toString(36).slice(2);
+        // A7: v2 only when the relay advertises chat-enc-v2 AND this machine has an id to bind. Otherwise
+        // send v1 (every relay accepts it) rather than an unverifiable v2 envelope.
+        const canV2 = chatKey !== null && typeof cfg.machineId === 'string' && cfg.machineId !== ''
+          && await chatEncV2Supported({ rabbitUrl: cfg.rabbitUrl ?? null });
+        const sealed = chatKey === null
+          ? null
+          : (canV2
+            ? encryptChatTextV2(chatKey, plainText, { sessionId, machineId: cfg.machineId, messageId: idempotencyKey })
+            : encryptChatText(chatKey, plainText));
         /**
          * v1.2.6 reliability: an unreachable Rabbit does not lose the message. The exact body that could not be sent is
          * spooled to disk and replayed with the SAME idempotency key next time, so a message the relay actually received
@@ -7001,7 +7013,7 @@ hint: 'the local fleet-memory.md is unchanged; action read/show still reads loca
           ...(sealed !== null && sealed.ok === true ? { enc: sealed.enc } : {}),
           ...addressing,
           ...(mentions.length === 0 ? {} : { mentions }),
-          ...(typeof args?.idempotency_key === 'string' && args.idempotency_key.trim() !== '' ? { idempotency_key: args.idempotency_key.trim() } : { idempotency_key: 'spool-' + Date.now() + '-' + Math.random().toString(36).slice(2) }),
+          ...{ idempotency_key: idempotencyKey },
             ...(typeof args?.reply_state === 'string' && (args.reply_state === 'answered' || args.reply_state === 'refused') ? { reply_state: args.reply_state } : {}),
         };
         let posted = null;
@@ -7058,7 +7070,7 @@ hint: 'the local fleet-memory.md is unchanged; action read/show still reads loca
       const listKey = deriveChatKey(cfg.fleetKey ?? resolvedFleetKey.value ?? null);
       const messages = rawMessages.map((message) => {
         if (!isEncrypted(message)) return message;
-        const opened = decryptChatMessage(listKey, message);
+        const opened = decryptChatMessage(listKey, message, { sessionId: String(query.session_id ?? message.session_id ?? ''), machineId: typeof message.machine_id === 'string' ? message.machine_id : undefined });
         if (opened.ok === true) return { ...message, text: opened.text, decrypted: true };
         return { ...message, text: '', decrypted: false, encrypted: true, decrypt_error: opened.code };
       });