@twinsearth/w2m-dsh-plugin 2.1.10 → 2.1.11

package/.claude-plugin/marketplace.json

@@ -5,14 +5,14 @@
   },
   "metadata": {
     "description": "The w2m fleet plugins: one account, many machines, any of Windows, macOS or Linux.",
-    "version": "2.1.10"
+    "version": "2.1.11"
   },
   "plugins": [
     {
       "name": "w2m-fleet",
       "source": "./",
       "description": "Read fleet state and dispatch commands across the machines registered to one account. Read-only MCP surface: the five exposed tools cannot change anything.",
-      "version": "2.1.10",
+      "version": "2.1.11",
       "author": {
         "name": "TwinsEarth"
       },
@@ -26,5 +26,5 @@
       ]
     }
   ],
-  "version": "2.1.10"
+  "version": "2.1.11"
 }

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "w2m-fleet",
   "description": "Drive the same project on online Windows, macOS and Linux machines from one account: read fleet state, dispatch commands and read results. The MCP surface is deliberately read-only.",
-  "version": "2.1.10",
+  "version": "2.1.11",
   "author": {
     "name": "TwinsEarth"
   },

package/CHANGELOG.md

@@ -7,6 +7,11 @@ All notable changes to this project are documented here.
 - `w2m_intent`: structured intents mapped onto allow-listed commands; unknown actions, parameters and types
   are refused by name (the fleet does not invent commands).
 
+## [2.1.11] - 2026-11-01
+
+- Account switch: refresh the account profile when `getDeviceIdentity()` has no userId. After a DeepSeek account switch the host clears its cached profile, so the identity read returns no userId until someone calls `getProfile()`; the plugin then derived no new fleet key and kept the previous account's token. It now fetches the profile once, derives the new key, detects the fleet mismatch and re-pairs. This is the remaining half of the v2.1.10 account-switch fix.
+- Tests: a stale-profile service yields the switched account's fleet key in test/chatops-account.test.mjs.
+
 ## [2.1.10] - 2026-11-01
 
 - Fleet binding: a DeepSeek account switch now re-pairs the machine instead of leaving it in the previous account's fleet. Startup compares the relay's fleet_id with the fleet id derived from the signed-in account, and a 60s watcher covers a switch without a process restart. A stored token is only valid for the account that minted it; it is no longer treated as proof of the current account.

package/README.md

@@ -92,7 +92,7 @@ w2m-mcp --help
 # 复制进你自己的 codex/mcp-servers.toml
 [mcp_servers.w2m]
 command = "npx"
-args = ["-y", "@twinsearth/w2m-dsh-plugin@2.1.10", "w2m-mcp"]
+args = ["-y", "@twinsearth/w2m-dsh-plugin@2.1.11", "w2m-mcp"]
 ```
 
 ### 5. 验证过的 release tarball（离线）

package/codex/mcp-servers.toml

@@ -12,6 +12,6 @@
 
 [mcp_servers.w2m-fleet]
 command = "npx"
-args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@2.1.10", "w2m-mcp"]
+args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@2.1.11", "w2m-mcp"]
 startup_timeout_sec = 20
 tool_timeout_sec = 60

package/docs/acceptance/2.1.11/ACCOUNT-SWITCH-PROFILE-21110.json

@@ -0,0 +1,20 @@
+{
+  "version": "2.1.11",
+  "case": "ACCOUNT-SWITCH-PROFILE-21110",
+  "kind": "positive",
+  "machines": [
+    "1bef9935-8c13-4dd9-9043-4e025320723f"
+  ],
+  "executed_at": "2026-10-31T19:11:34.238Z",
+  "executor": "lead",
+  "task_id": "account-switch-profile-21110-1793473894239",
+  "requirement": "After a DeepSeek account switch the plugin must refresh the cleared profile, derive the new fleet key and re-pair instead of keeping the previous fleet token",
+  "result": {
+    "outcome": "ok",
+    "assertions": {
+      "refresh": "identify() calls getProfile when getDeviceIdentity has no userId",
+      "key": "the switched account yields a different fleetKey",
+      "rebind": "the v2.1.10 fleet mismatch check then re-pairs"
+    }
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "2.1.10",
+  "version": "2.1.11",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "type": "module",
   "exports": {

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "twinsearth-w2m-dsh",
-  "version": "2.1.10",
+  "version": "2.1.11",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 12 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "license": "MIT",
   "keywords": [

package/src/chatops/account.mjs

@@ -300,6 +300,23 @@ export function createAccountIdentity(options = {}) {
     let identity;
     try {
       identity = await service.getDeviceIdentity();
+      /**
+       * A switched account is invisible until the profile is fetched.
+       *
+       * `getDeviceIdentity()` reads `getPlatformSession().userId`, and that is only populated
+       * from a profile already cached for the current grant. After credentials/record-updated
+       * the old profile is discarded and the session's userId is null until someone calls
+       * `getProfile()`. A machine that was paired before the switch therefore derived no new
+       * fleet key and kept its old token -- the reported "still in the previous account's
+       * fleet" state. Fetch the profile once when the identity is missing; the second read then
+       * sees the new account.
+       */
+      if ((identity?.userId == null) && typeof service.getProfile === 'function') {
+        try {
+          await service.getProfile();
+          identity = await service.getDeviceIdentity();
+        } catch { /* keep the signed-out answer if the profile cannot be read */ }
+      }
     } catch (error) {
       return { ok: false, reason: 'identity_read_failed', detail: error instanceof Error ? error.message : String(error) };
     }

package/src/plugin/tools.mjs

@@ -293,7 +293,7 @@ const MAX_STAGES = 16;
  * `package.json` during `scripts/pack.mjs` rather than hand-maintained, and `W2M_PLUGIN_VERSION`
  * overrides it at runtime for tests and packagers.
  */
-const PLUGIN_VERSION = '2.1.10';
+const PLUGIN_VERSION = '2.1.11';
 
 /** How long any single HTTP call may take before it is aborted, in milliseconds. */
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;