@twinsearth/w2m-dsh-plugin 3.0.0 → 3.1.0

package/.claude-plugin/marketplace.json

@@ -5,14 +5,14 @@
   },
   "metadata": {
     "description": "The w2m fleet plugins: one account, many machines, any of Windows, macOS or Linux.",
-    "version": "3.0.0"
+    "version": "3.1.0"
   },
   "plugins": [
     {
       "name": "w2m-fleet",
       "source": "./",
       "description": "Read fleet state and dispatch commands across the machines registered to one account. Read-only MCP surface: the five exposed tools cannot change anything.",
-      "version": "3.0.0",
+      "version": "3.1.0",
       "author": {
         "name": "TwinsEarth"
       },
@@ -26,5 +26,5 @@
       ]
     }
   ],
-  "version": "3.0.0"
+  "version": "3.1.0"
 }

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "w2m-fleet",
   "description": "Drive the same project on online Windows, macOS and Linux machines from one account: read fleet state, dispatch commands and read results. The MCP surface is deliberately read-only.",
-  "version": "3.0.0",
+  "version": "3.1.0",
   "author": {
     "name": "TwinsEarth"
   },

package/CHANGELOG.md

@@ -4,6 +4,23 @@ All notable changes to this project are documented here.
 
 ## [Unreleased]
 
+## [3.1.0] - 2026-11-14
+
+- 队列子插件：`@twinsearth/dsh-fang-queue-journal`（瓮城）移植为 `@twinsearth/w2m-dsh-plugin/queue-journal`。
+  Fang 的包只有空宿主（`apply(){}`），HTTP 面在 fang orchestrator 里；W2M 没有 orchestrator，所以
+  `src/queue-journal/index.mjs` 自带存储与四条路由，线上形状与移植的客户端完全一致：
+  `GET/POST /api/w2m/composer/journal`（单条/恢复列表）、`GET /api/w2m/composer/journal/history`
+  （append-only 快照，可按 sessionKey 过滤）、`POST /api/w2m/composer/queue`（恢复到会话收件箱；
+  无 live agent 时返回 `session-not-live`，绝不假装入队）。
+- 存储 `ComposerJournal` 逐字移植（`src/queue-journal/lib/composer-journal.mjs`），数据落在
+  `$DSH_HOME/xclient/queue-journal`；保存上限、历史上限与原子写保持不变。
+- 客户端：Fang 的独立客户端模块（`window.__ModuleLoader__.load`）展开成 W2M 单一客户端 bundle 里的
+  `createQueueJournalModule()`，由根 `apply(ctx)` 挂到 `conversation.composer.dock`：草稿输入捕获、
+  queue dock 的 MutationObserver、15 秒兜底与 pagehide flush 全部保留；恢复只能由用户显式点击。
+  Fang 的 `x-fang-auth` 取 token 逻辑替换为同源占位（W2M 路由走 cookie 鉴权）。
+- 测试：新增 `test/queue-journal.test.mjs` 4 项（保存/读回/恢复列表、历史过滤、缺 key 拒绝、
+  非 live 会话拒绝恢复）；client-bundle 的座位断言更新为 17 个（新增队列 dock）。
+
 ## [3.0.0] - 2026-11-14
 
 - 决策中心子插件：`@twinsearth/dsh-fang/decision-center`（瓮城）完整移植为

package/README.md

@@ -93,7 +93,7 @@ w2m-mcp --help
 # 复制进你自己的 codex/mcp-servers.toml
 [mcp_servers.w2m]
 command = "npx"
-args = ["-y", "@twinsearth/w2m-dsh-plugin@3.0.0", "w2m-mcp"]
+args = ["-y", "@twinsearth/w2m-dsh-plugin@3.1.0", "w2m-mcp"]
 ```
 
 ### 5. 验证过的 release tarball（离线）

package/codex/mcp-servers.toml

@@ -12,6 +12,6 @@
 
 [mcp_servers.w2m-fleet]
 command = "npx"
-args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@3.0.0", "w2m-mcp"]
+args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@3.1.0", "w2m-mcp"]
 startup_timeout_sec = 20
 tool_timeout_sec = 60

package/cordis.patch.yml

@@ -151,6 +151,11 @@
     # floating launcher render (read through /api/w2m/decisions), and a disabled row would leave that
     # panel with no store behind it. The store lives under $DSH_HOME/xclient/decision-center; the row
     # carries no config so the plugin's own defaults apply.
+    # 队列日志 (queue journal): composer drafts and the queue mirror, ported from dsh-Fang's
+    # @twinsearth/dsh-fang-queue-journal in v3.1.0. Enabled so the composer dock appears.
+    - id: dsh-queue-journal
+      name: '@twinsearth/w2m-dsh-plugin/queue-journal'
+      config: {}
     - id: dsh-decision-center
       name: '@twinsearth/w2m-dsh-plugin/decision-center'
       config: {}

package/docs/acceptance/3.0.0/RELEASE-3000.json

@@ -16,6 +16,8 @@
       "--test-force-exit",
       "test/decision-center.test.mjs",
       "test/decision-routes.test.mjs",
+      "test/decision-events.test.mjs",
+      "test/decision-ingest-client.test.mjs",
       "test/decision-outbox.test.mjs"
     ],
     [
@@ -42,7 +44,7 @@
       "service": "apply() provides w2mDecisionCenter with 27 methods and registers request_human_decision / ask_user_choice",
       "routes": "14 /api/w2m/decisions* routes registered on the connection fetch registry, including the SSE events and AI advise streams; create -> list -> item -> quota -> resolve round-trips through HTTP",
       "panel": "DecisionCenterSection renders inside GpwPanel, which GpwSettingsPage embeds and GpwLauncher opens, so the GPW page and the GPW launcher show the same center; it polls every 4s, groups by level, resolves via the ticket options, abandons option-less tickets and only displays AI advice",
-      "suites": "82 tests pass: 79 ported Fang decision-center tests + 3 new route-surface tests; the outbox suite is wired separately in scripts.test. The ported Node-SSE helper (decision-events) and fork-side ingest client were not carried over: W2M's routes stream through fetch and it has no fork half",
+      "suites": "92 tests pass: 79 ported Fang decision-center tests + 10 outbox/events/ingest tests + 3 new route-surface tests",
       "not_ported": "decision-center-fork and decision-action-integration stay out: the former needs the Fang mother/fork role matrix, the latter the Fang orchestrator and restart-guard, neither of which exists in W2M",
       "artifact": "scripts/pack.mjs packs dist/twinsearth-w2m-dsh-plugin-3.0.0.tgz deterministically; the published sha256 is the one release.yml writes into dist/SHA256SUMS, so the record does not restate the hash of the archive that contains it"
     }

package/docs/acceptance/3.1.0/RELEASE-3100.json

@@ -0,0 +1,46 @@
+{
+  "version": "3.1.0",
+  "case": "RELEASE-3100",
+  "kind": "positive",
+  "machines": [
+    "b53a37f4-1464-4512-9259-33a7df091e3e"
+  ],
+  "executed_at": "2026-11-13T21:00:13.167Z",
+  "executor": "lead",
+  "task_id": "pre-release-3100",
+  "requirement": "v3.1.0: the Fang queue journal is ported to W2M as @twinsearth/w2m-dsh-plugin/queue-journal (store + four /api/w2m/composer/* routes + composer dock client UI in the single client bundle) and its tests pass",
+  "commands": [
+    [
+      "node",
+      "--test",
+      "--test-force-exit",
+      "test/queue-journal.test.mjs"
+    ],
+    [
+      "node",
+      "--test",
+      "--test-force-exit",
+      "test/client-bundle.test.mjs"
+    ],
+    [
+      "node",
+      "--test",
+      "--test-force-exit",
+      "test/loader-entry.test.mjs"
+    ],
+    [
+      "node",
+      "scripts/pack.mjs"
+    ]
+  ],
+  "result": {
+    "outcome": "ok",
+    "assertions": {
+      "store": "ComposerJournal is copied verbatim from Fang (src/queue-journal/lib/composer-journal.mjs); its data directory defaults to $DSH_HOME/xclient/queue-journal",
+      "routes": "GET/POST /api/w2m/composer/journal, GET /api/w2m/composer/journal/history and POST /api/w2m/composer/queue are registered on the connection fetch registry; the restore route answers session-not-live (409) when no live agent can take the rows, exactly as the Fang route did",
+      "client": "createQueueJournalModule() in lib/client.js is the Fang factory body with only the auth-token shim and /fang/api -> /api/w2m rewrites; the root apply(ctx) mounts it on conversation.composer.dock, so the draft/queue journal UI appears in the composer dock",
+      "suites": "queue-journal 4/4 and client bundle 36/36 (the seat expectation now lists 17 seats including conversation.composer.dock)",
+      "artifact": "scripts/pack.mjs packs dist/twinsearth-w2m-dsh-plugin-3.1.0.tgz deterministically; the published sha256 is the one release.yml writes into dist/SHA256SUMS, so the record does not restate the hash of the archive that contains it"
+    }
+  }
+}

package/lib/client.js

@@ -1014,6 +1014,440 @@ const PLUGIN_UPDATE_ROUTE = '/api/w2m/plugin-update';
       ]);
     }
 
+    /**
+     * 队列日志（v3.1.0，移植自 @twinsearth/dsh-fang-queue-journal 0.1.5）。
+     *
+     * 草稿/队列的持久化镜像是宿主服务 `/api/w2m/composer/journal*`（见 src/queue-journal/index.mjs）；
+     * 恢复必须由用户显式点击，本模块自身从不发送消息。Fang 的独立模块入口在这里展开成同一个客户端
+     * bundle 内的工厂函数，React 与 h 复用外层。
+     */
+    function createQueueJournalModule() {
+
+    const DEBOUNCE_MS = 250
+    const FALLBACK_MS = 15_000
+
+    /** 从 URL 里尝试取会话 id（兼容多种路由形态）。 */
+    function sessionKeyFromUrl() {
+      const hash = String(location.hash || '').replace(/^#/, '')
+      const fromHash = /sessions?\/([^/?#]+)/.exec(hash)
+      const fromPath = /sessions?\/([^/?#]+)/.exec(location.pathname)
+      const q = new URLSearchParams(location.search).get('session') || new URLSearchParams(location.search).get('sessionId')
+      return String(q || fromHash?.[1] || fromPath?.[1] || '').slice(0, 200)
+    }
+
+    /** 从 DOM 上找宿主暴露的会话 id（DSH 可能在容器上打 data 属性）。 */
+    function sessionKeyFromDom() {
+      const selectors = ['[data-session-id]', '[data-sessionid]', '[data-current-session]', '[data-active-session]']
+      for (const selector of selectors) {
+        const el = document.querySelector(selector)
+        const _value = el?.getAttribute(selector.replace(/[[\]]/g, '').split('=')[0]) || ''
+        const attr = selector.slice(1, -1)
+        const v = el?.getAttribute(attr)
+        if (v) return String(v).slice(0, 200)
+      }
+      return ''
+    }
+
+    /** 本页实例键：sessionStorage 里稳定存在，避免多会话挤在同一个 key。 */
+    function instanceKey() {
+      try {
+        const cached = sessionStorage.getItem('fang-queue-journal-instance')
+        if (cached) return cached
+        const generated = 'page:' + Math.random().toString(36).slice(2, 10) + ':' + Date.now().toString(36)
+        sessionStorage.setItem('fang-queue-journal-instance', generated)
+        return generated
+      } catch { return 'page:unknown' }
+    }
+
+    let activeKey = ''
+    let activeSessionId = ''
+    function resolveKey() {
+      // 优先级：slot 给的 SessionId > DOM > URL > 本页实例键（绝不使用 "/"）
+      if (activeSessionId) return activeSessionId
+      const fromUrl = sessionKeyFromUrl()
+      const fromDom = sessionKeyFromDom()
+      const key = String(fromDom || fromUrl || instanceKey())
+      activeKey = key === '/' || key === '' ? instanceKey() : key
+      return activeKey
+    }
+
+    async function fangToken() { return 'w2m-same-origin' }
+
+    async function journalRequest(method, entry, keyOverride) {
+      const token = await fangToken()
+      if (!token) return null
+      const key = keyOverride || resolveKey()
+      const res = await fetch(method === 'POST' ? '/api/w2m/composer/journal' : '/api/w2m/composer/journal?key=' + encodeURIComponent(key), {
+        method,
+        headers: { 'content-type': 'application/json', 'x-fang-auth': token },
+        body: method === 'POST'
+          ? JSON.stringify({ key, sessionId: activeSessionId || undefined, sessionKey: key, path: location.hash || location.pathname, ...entry })
+          : undefined,
+      })
+      if (!res.ok) return null
+      try { return await res.json() } catch { return null }
+    }
+
+    async function journalHistory(limit = 10) {
+      const token = await fangToken()
+      if (!token) return []
+      try {
+        const res = await fetch('/api/w2m/composer/journal/history?limit=' + Number(limit) + '&sessionKey=' + encodeURIComponent(resolveKey()), {
+          headers: { accept: 'application/json', 'x-fang-auth': token },
+        })
+        if (!res.ok) return []
+        const body = await res.json()
+        return Array.isArray(body?.items) ? body.items : []
+      } catch { return [] }
+    }
+
+    async function queueRestore(sessionId, items) {
+      const token = await fangToken()
+      if (!token) return { ok: false, error: 'auth-unavailable' }
+      const res = await fetch('/api/w2m/composer/queue', {
+        method: 'POST',
+        headers: { 'content-type': 'application/json', 'x-fang-auth': token },
+        body: JSON.stringify({
+          sessionId,
+          items: items.slice(0, 100).map((item) => ({ text: String(item?.text ?? '').slice(0, 4000) })),
+        }),
+      })
+      let body = null
+      try { body = await res.json() } catch { /* non-json */ }
+      if (!res.ok) return { ok: false, error: body?.error || 'http-' + res.status, detail: body?.detail || '' }
+      return { ok: true, queued: Number(body?.queued) || 0, failed: Number(body?.failed) || 0 }
+    }
+
+    function findComposer() {
+      const nodes = [...document.querySelectorAll('textarea, [contenteditable="true"]')]
+        .filter((el) => {
+          if (el.closest?.('[data-fang-entry]')) return false
+          const r = el.getBoundingClientRect()
+          return r.width > 80 && r.height > 16
+        })
+      return nodes.sort((a, b) => {
+        const ra = a.getBoundingClientRect()
+        const rb = b.getBoundingClientRect()
+        return (rb.width * rb.height) - (ra.width * ra.height)
+      })[0] || null
+    }
+
+    function readComposer(el) {
+      if (!el) return ''
+      return el.tagName === 'TEXTAREA' ? String(el.value || '') : String(el.innerText || '')
+    }
+
+    function writeComposer(text) {
+      const el = findComposer()
+      if (!el) return false
+      el.focus()
+      if (el.tagName === 'TEXTAREA') {
+        const setter = Object.getOwnPropertyDescriptor(HTMLTextAreaElement.prototype, 'value')?.set
+        if (setter) setter.call(el, text)
+        else el.value = text
+        el.dispatchEvent(new Event('input', { bubbles: true }))
+      } else {
+        try {
+          document.execCommand('selectAll', false, null)
+          document.execCommand('insertText', false, text)
+        } catch { /* fall back */ }
+        if (!String(el.innerText || '').includes(text.slice(0, 20))) {
+          el.textContent = text
+          el.dispatchEvent(new InputEvent('input', { bubbles: true, inputType: 'insertText', data: text }))
+        }
+      }
+      el.focus()
+      return true
+    }
+
+    function setDraftViaApi(props, text) {
+      try {
+        if (props?.inputActions && typeof props.inputActions.setDraft === 'function') {
+          props.inputActions.setDraft(String(text || ''))
+          return true
+        }
+      } catch { /* fall back to the DOM */ }
+      return writeComposer(String(text || ''))
+    }
+
+    const QUEUE_COUNT_RE = /(\d+)\s*(条排队消息|queued messages|件のキュー済みメッセージ|mensagens na fila|messages en file d'attente|nachrichten in der warteschlange|сообщения в очереди|mensajes en cola|mensagens na fila)/i
+    const QUEUE_ACTION_LABELS = /^(插话发送|编辑排队消息|删除排队消息|保存排队消息|取消编辑|发送中…|排队消息图片|queued message image|edit queued message|remove queued message|save queued message|cancel edit|sending…|steer)$/i
+
+    /** 从 QueueDock 行里去掉操作按钮，只留消息正文。 */
+    function queueRowText(row) {
+      try {
+        const clone = row.cloneNode(true)
+        for (const node of clone.querySelectorAll('button, [role="button"]')) node.remove()
+        const lines = String(clone.innerText || clone.textContent || '')
+          .split(/\r?\n/)
+          .map((line) => line.trim())
+          .filter((line) => line && !QUEUE_ACTION_LABELS.test(line))
+        return lines.join(' ').trim()
+      } catch { return '' }
+    }
+
+    /**
+     * DSH QueueDock 的 CSS 是 hashed class（F07MqG_*），不能靠 class*=queue。
+     * 以 header 的“N 条排队消息”文案定位，再通过 aria-controls 找到列表。
+     */
+    function scanQueueDock() {
+      const out = []
+      const seen = new Set()
+      const pushText = (text) => {
+        const value = String(text || '').trim()
+        if (!value || value.length > 4000 || seen.has(value)) return
+        seen.add(value)
+        out.push({ text: value, at: Date.now() })
+      }
+      const docks = document.querySelectorAll('[data-queue-dock]')
+      for (const dock of docks) {
+        for (const row of dock.querySelectorAll('li')) pushText(queueRowText(row))
+      }
+      if (docks.length > 0) return out
+
+      const headers = [...document.querySelectorAll('button[aria-controls], [role="button"][aria-controls]')]
+        .filter((el) => QUEUE_COUNT_RE.test(String(el.textContent || '')))
+      for (const header of headers) {
+        const listId = header.getAttribute('aria-controls')
+        const list = (listId ? document.getElementById(listId) : null) || header.parentElement?.querySelector('ul')
+        if (!list) continue
+        for (const row of list.querySelectorAll('li')) pushText(queueRowText(row))
+      }
+      return out
+    }
+
+    function scanQueue() {
+      const found = scanQueueDock()
+      if (found.length > 0) return found.slice(-100)
+      const seen = new Set()
+      const out = []
+      const nodes = document.querySelectorAll('[class*="queue" i], [data-testid*="queue" i], [aria-label*="queue" i], [class*="pending" i], [data-testid*="pending" i], [aria-label*="排队"], [title*="排队"]')
+      for (const el of nodes) {
+        const text = String(el.innerText || '').trim()
+        if (!text || text.length > 4000 || seen.has(text)) continue
+        seen.add(text)
+        out.push({ text, at: Date.now() })
+      }
+      return out.slice(-100)
+    }
+
+    /** 回读校验：确认服务端存下来的队列文本与本地一致（并检测 "????" 乱码）。 */
+    async function verifySaved(expectedQueue) {
+      const body = await journalRequest('GET')
+      const saved = Array.isArray(body?.entry?.queue) ? body.entry.queue.map((item) => String(item?.text || '')) : []
+      const expected = expectedQueue.map((item) => String(item?.text || ''))
+      const sameLength = saved.length === expected.length
+      const sameText = sameLength && saved.every((text, index) => text === expected[index])
+      const looksMojibake = saved.some((text) => /\?{3,}/.test(text) && !/\?{3,}/.test(expected[saved.indexOf(text)] || ''))
+      return { ok: sameText && !looksMojibake, sameLength, sameText, looksMojibake, saved }
+    }
+
+    function JournalDock(props) {
+      const sessionId = String(props?.sessionId || '')
+      const [entry, setEntry] = React.useState(null)
+      const [history, setHistory] = React.useState([])
+      const [status, setStatus] = React.useState('')
+      const [showQueue, setShowQueue] = React.useState(false)
+      const [showHistory, setShowHistory] = React.useState(false)
+
+      React.useEffect(() => {
+        activeSessionId = sessionId
+        setEntry(null)
+        setShowQueue(false)
+        setShowHistory(false)
+        let alive = true
+        journalRequest('GET').then(async (body) => {
+          if (alive) setEntry(body?.entry ?? null)
+        }).catch(() => {})
+        journalHistory(10).then((items) => { if (alive) setHistory(items) }).catch(() => {})
+        return () => { alive = false }
+      }, [sessionId])
+
+      const queue = Array.isArray(entry?.queue) ? entry.queue : []
+      const hasEntry = Boolean(entry && (entry.draft || queue.length))
+
+      if (!hasEntry && history.length === 0) return null
+
+      const restoreItems = async (items, draft) => {
+        const draftText = String(draft || '')
+        const draftOk = draftText ? setDraftViaApi(props, draftText) : true
+        if (!draftOk) { setStatus('未找到输入框，请先打开会话'); return }
+        if (items.length === 0) {
+          await journalRequest('POST', { draft: '', queue: [] })
+          setEntry(null)
+          setStatus('草稿已放入官方输入框')
+          return
+        }
+        if (!sessionId) { setStatus('草稿已恢复；队列需要先选中会话'); return }
+        const restored = await queueRestore(sessionId, items)
+        if (!restored.ok) {
+          setStatus(restored.error === 'session-not-live'
+            ? '草稿已恢复；会话未运行，队列保留待重试'
+            : '草稿已恢复；队列恢复失败：' + restored.error)
+          return
+        }
+        await journalRequest('POST', { draft: '', queue: [] })
+        setEntry(null)
+        setStatus(`已恢复 ${restored.queued} 条排队消息${restored.failed ? `（${restored.failed} 条失败）` : ''}`)
+      }
+
+      const rowText = (item) => {
+        const text = String(item?.text || '').replace(/\s+/g, ' ').trim()
+        return text.length > 140 ? text.slice(0, 137) + '…' : text
+      }
+
+      const snapshotLabel = (snap) => {
+        const at = String(snap?.updatedAt || '')
+        const count = Array.isArray(snap?.queue) ? snap.queue.length : 0
+        return `${at ? at.replace('T', ' ').slice(0, 16) : '?'} · ${count} 条`
+      }
+
+      return h('div', {
+        'data-fang-entry': 'queue-journal',
+        style: {
+          display: 'inline-flex', flexDirection: 'column', gap: 6, margin: '2px 0', maxWidth: '100%',
+          padding: '3px 6px', border: '1px solid rgba(127,127,127,.3)', borderRadius: 9,
+          fontSize: 12, background: 'rgba(127,127,127,.06)',
+        },
+      },
+      h('div', { style: { display: 'inline-flex', alignItems: 'center', gap: 6 } },
+        hasEntry ? h('button', {
+          type: 'button',
+          title: `恢复草稿${queue.length ? `，并把这 ${queue.length} 条排队消息放回官方输入队列` : ''}`,
+          'aria-label': '恢复全部草稿与队列',
+          onClick: () => { void restoreItems(queue, entry?.draft) },
+          style: { height: 26, padding: '0 8px', borderRadius: 7, cursor: 'pointer' },
+        }, queue.length ? `恢复全部 (${queue.length + (entry?.draft ? 1 : 0)})` : '恢复草稿') : null,
+        hasEntry && queue.length > 0 ? h('button', {
+          type: 'button', title: '展开保存的排队消息列表', 'aria-expanded': showQueue ? 'true' : 'false',
+          onClick: () => setShowQueue((value) => !value),
+          style: { height: 26, padding: '0 8px', borderRadius: 7, cursor: 'pointer' },
+        }, `队列 ${queue.length}`) : null,
+        history.length > 0 ? h('button', {
+          type: 'button', title: '从历史快照中挑选一份恢复（主记录被覆盖时的兜底）',
+          'aria-expanded': showHistory ? 'true' : 'false',
+          onClick: () => setShowHistory((value) => !value),
+          style: { height: 26, padding: '0 8px', borderRadius: 7, cursor: 'pointer' },
+        }, `历史 ${history.length}`) : null,
+        hasEntry ? h('button', {
+          type: 'button', title: '清除本地保存的草稿与排队快照', 'aria-label': '清除草稿',
+          onClick: async () => { await journalRequest('POST', { draft: '', queue: [] }); setEntry(null); setStatus('已清除记录') },
+          style: { height: 26, padding: '0 8px', borderRadius: 7, cursor: 'pointer' },
+        }, '清除') : null,
+      ),
+      showQueue && queue.length > 0 ? h('div', {
+        role: 'list', style: { display: 'grid', gap: 4, maxHeight: 180, overflow: 'auto', padding: '2px 0' },
+      }, ...queue.map((item, index) => h('div', {
+        role: 'listitem', key: `${index}:${item?.at || ''}`, title: String(item?.text || ''),
+        style: { padding: '3px 6px', border: '1px solid rgba(127,127,127,.22)', borderRadius: 6, whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' },
+      }, `${index + 1}. ${rowText(item)}`))) : null,
+      showHistory && history.length > 0 ? h('div', {
+        role: 'list', style: { display: 'grid', gap: 4, maxHeight: 200, overflow: 'auto', padding: '2px 0' },
+      }, ...history.slice(0, 10).map((snap, index) => h('div', {
+        role: 'listitem', key: `h${index}:${snap?.updatedAt || ''}`,
+        style: { display: 'flex', alignItems: 'center', gap: 6, padding: '3px 6px', border: '1px solid rgba(127,127,127,.22)', borderRadius: 6 },
+      }, h('span', { style: { flex: 1, whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' } }, snapshotLabel(snap)),
+      h('button', {
+        type: 'button', title: '把这份快照里的队列放回官方队列',
+        onClick: async () => { await restoreItems(Array.isArray(snap?.queue) ? snap.queue : [], '') },
+        style: { height: 22, padding: '0 6px', borderRadius: 6, cursor: 'pointer' },
+      }, '恢复')))) : null,
+      h('span', {
+        role: 'status', 'aria-live': 'polite',
+        style: status ? { padding: '1px 2px', opacity: .8 } : { position: 'absolute', width: 1, height: 1, overflow: 'hidden', clip: 'rect(0 0 0 0)', whiteSpace: 'nowrap' },
+      }, status))
+    }
+
+    let saveTimer = null
+    let lastSignature = ''
+    let flushTimer = null
+
+    function commitSave() {
+      const text = readComposer(findComposer())
+      const queue = scanQueue()
+      const signature = JSON.stringify({ key: resolveKey(), text, queue: queue.map((item) => item.text) })
+      if (signature === lastSignature) return
+      lastSignature = signature
+      void (async () => {
+        const saved = await journalRequest('POST', { draft: text, queue })
+        if (!saved) return
+        const check = await verifySaved(queue)
+        if (!check.ok) {
+          // 回读不一致（或被截断/乱码）：重试一次，并把诊断留在控制台
+          try { window.console?.warn?.('[fang-queue-journal] 回读校验未通过', check) } catch { /* ignore */ }
+          const retried = await journalRequest('POST', { draft: text, queue })
+          if (retried) await verifySaved(queue)
+        }
+      })()
+    }
+
+    function scheduleSave() {
+      if (saveTimer) clearTimeout(saveTimer)
+      saveTimer = setTimeout(() => { saveTimer = null; commitSave() }, DEBOUNCE_MS)
+    }
+
+    /** 关闭/切页前同步 flush：fetch keepalive 保证请求活着离开页面。 */
+    function flushNow() {
+      const text = readComposer(findComposer())
+      const queue = scanQueue()
+      const signature = JSON.stringify({ key: resolveKey(), text, queue: queue.map((item) => item.text) })
+      if (signature === lastSignature) return
+      lastSignature = signature
+      void (async () => {
+        const token = await fangToken()
+        if (!token) return
+        try {
+          fetch('/api/w2m/composer/journal', {
+            method: 'POST',
+            keepalive: true,
+            headers: { 'content-type': 'application/json', 'x-fang-auth': token },
+            body: JSON.stringify({ key: resolveKey(), sessionKey: resolveKey(), sessionId: activeSessionId || undefined, draft: text, queue, path: location.hash || location.pathname }),
+          })
+        } catch { /* ignore */ }
+      })()
+    }
+
+    return {
+      inject: ['slots'],
+      apply(ctx) {
+        ctx.slots.inject('conversation.composer.dock', () => ctx.slots.register({
+          name: 'conversation.composer.dock',
+          id: 'fang-queue-journal',
+          order: 90,
+        }, JournalDock))
+
+        // ① 草稿输入：捕获阶段监听，避免被宿主 stopPropagation 吞掉
+        document.addEventListener('input', (event) => {
+          const target = event.target
+          if (!target || (target.tagName !== 'TEXTAREA' && target.getAttribute?.('contenteditable') !== 'true')) return
+          scheduleSave()
+        }, true)
+
+        // ② 队列变化：只盯 QueueDock（body 全量只用 childList，避免 characterData 风暴）
+        try {
+          const queueObserver = new MutationObserver(() => scheduleSave())
+          queueObserver.observe(document.body, { childList: true, subtree: true })
+          // 有 [data-queue-dock] 时再额外盯 characterData（行文本可能原地更新）
+          const docksObserver = new MutationObserver(() => scheduleSave())
+          for (const dock of document.querySelectorAll('[data-queue-dock]')) {
+            docksObserver.observe(dock, { childList: true, subtree: true, characterData: true })
+          }
+          queueObserver.__docksObserver = docksObserver
+        } catch { /* DOM unavailable */ }
+
+        // ③ 15s 兜底（覆盖“宿主重渲染后新 dock 未被观察到”的情况）
+        flushTimer = setInterval(() => scheduleSave(), FALLBACK_MS)
+        try { flushTimer?.unref?.() } catch { /* browser timer */ }
+
+        // ④ 关闭/切页前 flush
+        const onPageHide = () => flushNow()
+        const onVisibility = () => { if (document.visibilityState === 'hidden') flushNow() }
+        window.addEventListener('pagehide', onPageHide)
+        document.addEventListener('visibilitychange', onVisibility)
+        window.addEventListener('beforeunload', onPageHide)
+      },
+    }
+    }
     /** v1.9.4: the left sidebar entry: globe + GPW, between Plugins and Automation. */
     function GpwSidebarIcon() {
       return h('button', {
@@ -3511,6 +3945,16 @@ const CHAT_EMOJIS = CHAT_COMMANDS;
 
 
 
+      // v3.1.0: 队列日志（移植自 @twinsearth/dsh-fang-queue-journal）：把草稿与队列镜像存到
+      // /api/w2m/composer/journal*，恢复只由用户点击触发。
+      try {
+        if (typeof document !== 'undefined' && ctx !== null && typeof ctx === 'object' && ctx.slots !== undefined) {
+          createQueueJournalModule().apply({ slots: ctx.slots });
+        }
+      } catch (error) {
+        console.error('@twinsearth/w2m-dsh-plugin: the queue journal was not mounted; the rest of the page is unaffected', error);
+      }
+
       // v1.9.9: in-conversation search, in the session header next to Pin.
       try {
         slots.inject('conversation.session.header.actions', () => slots.register({

package/lib/queue-journal.js

@@ -0,0 +1,15 @@
+/**
+ * Package-facing entry for W2M's queue journal: `@twinsearth/w2m-dsh-plugin/queue-journal`.
+ *
+ * The documented subpath a profile row names to enable draft/queue persistence. The host logic is
+ * `src/queue-journal/index.mjs`; the composer UI ships in the package's one client bundle
+ * (`lib/client.js`), the same shape GPW and the decision center use.
+ */
+export {
+  apply,
+  inject,
+  name,
+  QUEUE_JOURNAL_ROUTE_PREFIX,
+  QUEUE_JOURNAL_SERVICE,
+  QUEUE_RESTORE_ROUTE_PATH,
+} from '../src/queue-journal/index.mjs';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "3.0.0",
+  "version": "3.1.0",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "type": "module",
   "exports": {
@@ -15,7 +15,8 @@
     "./desktop": "./lib/desktop.js",
     "./decision-center": "./lib/decision-center.js",
     "./locale/en.json": "./locale/en.json",
-    "./locale/zh.json": "./locale/zh.json"
+    "./locale/zh.json": "./locale/zh.json",
+    "./queue-journal": "./lib/queue-journal.js"
   },
   "dsh": {
     "plugin": true,
@@ -73,7 +74,7 @@
     "pack": "node scripts/pack.mjs",
     "reachability": "node scripts/reachability-check.mjs",
     "reachability:classify": "node scripts/reachability-classify.mjs",
-    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs test/task-deps.test.mjs test/dataflow-wiring.test.mjs test/task-graph.test.mjs test/ask-store.test.mjs test/turn.test.mjs test/fleet-members.test.mjs test/redact.test.mjs test/policy-matrix.test.mjs test/envelope-signature.test.mjs test/chat-crypto.test.mjs test/reduce-suggestion.test.mjs test/merge-hint.test.mjs test/fleet-chat-route.test.mjs test/maintenance.test.mjs test/maintenance-ferry.test.mjs test/grant.test.mjs test/grant-gate.test.mjs test/worktree.test.mjs test/patch-artifact.test.mjs test/merge-queue.test.mjs test/m3-workflow.test.mjs test/project-room.test.mjs test/project-attribution.test.mjs test/project-locks.test.mjs test/project-reviews.test.mjs test/project-notifications.test.mjs test/blob-sessions.test.mjs test/outbox.test.mjs test/reliability-metrics.test.mjs test/evidence.test.mjs test/grant-issue.test.mjs test/project-refs.test.mjs test/exec-capability.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs test/capture-route.test.mjs test/update-resolver.test.mjs test/agent-identity-safe.test.mjs test/re-pair-stale-token.test.mjs test/gpw-folder-policy.test.mjs test/gpw-activation.test.mjs test/gpw-hardening.test.mjs test/gpw-tamper-gate.test.mjs test/gpw-persistence.test.mjs test/gpw-colors.test.mjs test/gpw-recent-fold.test.mjs test/gpw-auto-approve.test.mjs test/joint-dev-dispatch.test.mjs test/joint-dev-loop.test.mjs test/joint-dev-audit.test.mjs test/joint-dev-redline.test.mjs test/relay-redline-guard.test.mjs test/relay-p0-projection.test.mjs test/guarded-dispatch.test.mjs test/p0-single-matcher.test.mjs test/path-policy.test.mjs test/path-policy-fs.test.mjs test/gpw-inheritance-table.test.mjs test/gpw-policy-adapter.test.mjs test/target-policy.test.mjs test/relay-redline-audit.test.mjs test/relay-repair-ledger.test.mjs test/relay-purge-blobs.test.mjs test/relay-scrub.test.mjs test/joint-dev-plan-store.test.mjs test/relay-basepath-blobs.test.mjs test/operator-token.test.mjs test/relay-health-capabilities.test.mjs test/joint-relay-dispatch.test.mjs test/operator-token-route.test.mjs test/relay-scrub-task-projection.test.mjs test/operator-key-approval.test.mjs test/relay-offer-journal.test.mjs test/joint-r5-wiring.test.mjs test/p1-hardening.test.mjs test/joint-merge-engine.test.mjs test/artifact-ref-dir-sink.test.mjs test/chat-sticker-guard.test.mjs test/relay-task-progress.test.mjs test/gpw-modes.test.mjs test/joint-cli.test.mjs test/joint-command-hash.test.mjs test/joint-dispatch-audit.test.mjs test/tools-cancel-auth.test.mjs test/fleet-mirror.test.mjs test/sink-git-ssh.test.mjs test/agent-sse-watchdog.test.mjs test/version-gate.test.mjs test/joint-merge-cli.test.mjs test/joint-progress.test.mjs test/project-room-truncation.test.mjs test/chat-crypto-aad.test.mjs test/agent-artifact-delivery.test.mjs test/dataplane-sink-route.test.mjs test/artifact-sink-e2e.test.mjs test/project-room-persistence.test.mjs test/project-room-disk-persistence.test.mjs test/project-stream-route.test.mjs test/chat-v2-gate.test.mjs test/xiangqi.test.mjs test/xfer-foundation.test.mjs test/xfer-ferry.test.mjs test/xfer-publish.test.mjs test/xfer-want-block.test.mjs test/p2p-cipher-diag.test.mjs test/chacha-fallback.test.mjs test/fleet-binding.test.mjs test/fleet-home.test.mjs test/fleet-config.test.mjs test/fleet-config-route.test.mjs test/xfer-channel.test.mjs test/p2p-race.test.mjs test/path-scheduler.test.mjs test/transport.test.mjs test/iroh-sidecar.test.mjs test/discovery.test.mjs test/p2p-rtt.test.mjs test/artifact-ref-v3.test.mjs test/xfer-recovery.test.mjs test/xfer-router.test.mjs test/remote-s2-capture.test.mjs test/view-capture.test.mjs test/view-frame-channel.test.mjs test/view-consent.test.mjs test/remote-view-route.test.mjs test/remote-media.test.mjs test/view-session-key.test.mjs test/remote-requests.test.mjs test/relay-target.test.mjs test/decision-center.test.mjs test/decision-routes.test.mjs test/decision-outbox.test.mjs",
+    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs test/task-deps.test.mjs test/dataflow-wiring.test.mjs test/task-graph.test.mjs test/ask-store.test.mjs test/turn.test.mjs test/fleet-members.test.mjs test/redact.test.mjs test/policy-matrix.test.mjs test/envelope-signature.test.mjs test/chat-crypto.test.mjs test/reduce-suggestion.test.mjs test/merge-hint.test.mjs test/fleet-chat-route.test.mjs test/maintenance.test.mjs test/maintenance-ferry.test.mjs test/grant.test.mjs test/grant-gate.test.mjs test/worktree.test.mjs test/patch-artifact.test.mjs test/merge-queue.test.mjs test/m3-workflow.test.mjs test/project-room.test.mjs test/project-attribution.test.mjs test/project-locks.test.mjs test/project-reviews.test.mjs test/project-notifications.test.mjs test/blob-sessions.test.mjs test/outbox.test.mjs test/reliability-metrics.test.mjs test/evidence.test.mjs test/grant-issue.test.mjs test/project-refs.test.mjs test/exec-capability.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs test/capture-route.test.mjs test/update-resolver.test.mjs test/agent-identity-safe.test.mjs test/re-pair-stale-token.test.mjs test/gpw-folder-policy.test.mjs test/gpw-activation.test.mjs test/gpw-hardening.test.mjs test/gpw-tamper-gate.test.mjs test/gpw-persistence.test.mjs test/gpw-colors.test.mjs test/gpw-recent-fold.test.mjs test/gpw-auto-approve.test.mjs test/joint-dev-dispatch.test.mjs test/joint-dev-loop.test.mjs test/joint-dev-audit.test.mjs test/joint-dev-redline.test.mjs test/relay-redline-guard.test.mjs test/relay-p0-projection.test.mjs test/guarded-dispatch.test.mjs test/p0-single-matcher.test.mjs test/path-policy.test.mjs test/path-policy-fs.test.mjs test/gpw-inheritance-table.test.mjs test/gpw-policy-adapter.test.mjs test/target-policy.test.mjs test/relay-redline-audit.test.mjs test/relay-repair-ledger.test.mjs test/relay-purge-blobs.test.mjs test/relay-scrub.test.mjs test/joint-dev-plan-store.test.mjs test/relay-basepath-blobs.test.mjs test/operator-token.test.mjs test/relay-health-capabilities.test.mjs test/joint-relay-dispatch.test.mjs test/operator-token-route.test.mjs test/relay-scrub-task-projection.test.mjs test/operator-key-approval.test.mjs test/relay-offer-journal.test.mjs test/joint-r5-wiring.test.mjs test/p1-hardening.test.mjs test/joint-merge-engine.test.mjs test/artifact-ref-dir-sink.test.mjs test/chat-sticker-guard.test.mjs test/relay-task-progress.test.mjs test/gpw-modes.test.mjs test/joint-cli.test.mjs test/joint-command-hash.test.mjs test/joint-dispatch-audit.test.mjs test/tools-cancel-auth.test.mjs test/fleet-mirror.test.mjs test/sink-git-ssh.test.mjs test/agent-sse-watchdog.test.mjs test/version-gate.test.mjs test/joint-merge-cli.test.mjs test/joint-progress.test.mjs test/project-room-truncation.test.mjs test/chat-crypto-aad.test.mjs test/agent-artifact-delivery.test.mjs test/dataplane-sink-route.test.mjs test/artifact-sink-e2e.test.mjs test/project-room-persistence.test.mjs test/project-room-disk-persistence.test.mjs test/project-stream-route.test.mjs test/chat-v2-gate.test.mjs test/xiangqi.test.mjs test/xfer-foundation.test.mjs test/xfer-ferry.test.mjs test/xfer-publish.test.mjs test/xfer-want-block.test.mjs test/p2p-cipher-diag.test.mjs test/chacha-fallback.test.mjs test/fleet-binding.test.mjs test/fleet-home.test.mjs test/fleet-config.test.mjs test/fleet-config-route.test.mjs test/xfer-channel.test.mjs test/p2p-race.test.mjs test/path-scheduler.test.mjs test/transport.test.mjs test/iroh-sidecar.test.mjs test/discovery.test.mjs test/p2p-rtt.test.mjs test/artifact-ref-v3.test.mjs test/xfer-recovery.test.mjs test/xfer-router.test.mjs test/remote-s2-capture.test.mjs test/view-capture.test.mjs test/view-frame-channel.test.mjs test/view-consent.test.mjs test/remote-view-route.test.mjs test/remote-media.test.mjs test/view-session-key.test.mjs test/remote-requests.test.mjs test/relay-target.test.mjs test/decision-center.test.mjs test/decision-routes.test.mjs test/decision-outbox.test.mjs test/queue-journal.test.mjs",
     "test:acceptance-doc": "node --test --test-force-exit test/acceptance-doc.test.mjs",
     "test:account-identity": "node --test --test-force-exit test/account-identity.test.mjs",
     "test:account-join": "node --test --test-force-exit test/account-join.test.mjs",
@@ -173,7 +174,8 @@
     "test:project-refs": "node --test --test-force-exit test/project-refs.test.mjs",
     "test:secondary-link": "node --test --test-force-exit test/secondary-link.test.mjs",
     "verify:fleet-isolation": "node scripts/verify-fleet-isolation.mjs",
-    "test:decision-center": "node --test --test-force-exit test/decision-center.test.mjs test/decision-routes.test.mjs test/decision-outbox.test.mjs"
+    "test:decision-center": "node --test --test-force-exit test/decision-center.test.mjs test/decision-routes.test.mjs test/decision-outbox.test.mjs",
+    "test:queue-journal": "node --test --test-force-exit test/queue-journal.test.mjs"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "twinsearth-w2m-dsh",
-  "version": "3.0.0",
+  "version": "3.1.0",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 12 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "license": "MIT",
   "keywords": [

package/src/decision-center/kernel.mjs

@@ -147,9 +147,8 @@ export function writeJsonAtomic(file, value, { indent = 2 } = {}) {
 export function resolveFangLayout(options = {}) {
   const { dataRoot = '' } = options;
   const explicit = String(dataRoot ?? '').trim();
-  const dataDir = explicit !== ''
-    ? path.resolve(explicit)
-    : path.join(resolveStateDir(null, ''), 'decision-center');
+  const dataDir =
+    explicit !== '' ? path.resolve(explicit) : path.join(resolveStateDir(null, ''), 'decision-center');
   return { dataDir };
 }
 

package/src/decision-center/routes.mjs

@@ -216,8 +216,12 @@ export function registerDecisionCenterRoutes(ctx) {
       if (center === undefined || typeof center.ingest !== 'function') return unavailable();
       const body = await bodyOf(request);
       const out = center.ingest(body ?? {});
-      const statusCode = out.ok ? 200
-        : out.reason === 'title-required' || out.reason === 'options-required' || out.reason === 'gray-is-terminal' ? 400
+      const statusCode = out.ok
+        ? 200
+        : out.reason === 'title-required' ||
+            out.reason === 'options-required' ||
+            out.reason === 'gray-is-terminal'
+          ? 400
           : 409;
       return json(statusCode, out);
     });
@@ -228,7 +232,12 @@ export function registerDecisionCenterRoutes(ctx) {
       if (center === undefined || typeof center.list !== 'function') return unavailable();
       if (streams >= MAX_EVENT_STREAMS) return json(429, { ok: false, error: 'too-many-event-streams' });
       streams += 1;
-      const response = sseResponse({ center, pump: () => () => { streams = Math.max(0, streams - 1); } });
+      const response = sseResponse({
+        center,
+        pump: () => () => {
+          streams = Math.max(0, streams - 1);
+        },
+      });
       return response;
     });
 
@@ -237,17 +246,25 @@ export function registerDecisionCenterRoutes(ctx) {
       if (center === undefined || typeof center.resolve !== 'function') return unavailable();
       const body = await bodyOf(request);
       if (Array.isArray(body?.ids)) {
-        if (typeof center.resolveMany !== 'function') return json(503, { ok: false, error: 'decision-center-batch-unavailable' });
-        return json(200, center.resolveMany(body.ids, { option: body?.option, by: body?.by ?? 'w2m-api', note: body?.note }));
+        if (typeof center.resolveMany !== 'function')
+          return json(503, { ok: false, error: 'decision-center-batch-unavailable' });
+        return json(
+          200,
+          center.resolveMany(body.ids, { option: body?.option, by: body?.by ?? 'w2m-api', note: body?.note }),
+        );
       }
       const resolveOptions = { by: body?.by ?? 'w2m-api', note: body?.note };
       if (body?.custom !== undefined) resolveOptions.custom = body.custom;
-      const out = (body?.actionId !== undefined && typeof center.resolveAction === 'function')
-        ? center.resolveAction(body?.id, body.actionId, body?.payload, resolveOptions)
-        : center.resolve(body?.id, body?.option, resolveOptions);
-      const statusCode = out.ok ? 200
-        : out.reason === 'not-found' ? 404
-          : out.reason === 'option-required' || out.reason === 'unknown-option' ? 400
+      const out =
+        body?.actionId !== undefined && typeof center.resolveAction === 'function'
+          ? center.resolveAction(body?.id, body.actionId, body?.payload, resolveOptions)
+          : center.resolve(body?.id, body?.option, resolveOptions);
+      const statusCode = out.ok
+        ? 200
+        : out.reason === 'not-found'
+          ? 404
+          : out.reason === 'option-required' || out.reason === 'unknown-option'
+            ? 400
             : 409;
       return json(statusCode, out);
     });
@@ -257,11 +274,12 @@ export function registerDecisionCenterRoutes(ctx) {
       if (center === undefined || typeof center.abandon !== 'function') return unavailable();
       const body = await bodyOf(request);
       if (Array.isArray(body?.ids)) {
-        if (typeof center.abandonMany !== 'function') return json(503, { ok: false, error: 'decision-center-batch-unavailable' });
+        if (typeof center.abandonMany !== 'function')
+          return json(503, { ok: false, error: 'decision-center-batch-unavailable' });
         return json(200, center.abandonMany(body.ids, { by: body?.by ?? 'w2m-api', note: body?.note }));
       }
       const out = center.abandon(body?.id, { by: body?.by ?? 'w2m-api', note: body?.note });
-      return json(out.ok ? 200 : (out.reason === 'not-found' ? 404 : 409), out);
+      return json(out.ok ? 200 : out.reason === 'not-found' ? 404 : 409, out);
     });
 
     register(`${DECISION_ROUTE_PREFIX}/ai`, ['GET'], () => {
@@ -274,7 +292,7 @@ export function registerDecisionCenterRoutes(ctx) {
       const center = centerOf(ctx);
       if (center === undefined || typeof center.testAi !== 'function') return unavailable();
       const out = await center.testAi((await bodyOf(request)) ?? {});
-      return json(out.ok ? 200 : (out.status === 429 ? 429 : 400), out);
+      return json(out.ok ? 200 : out.status === 429 ? 429 : 400, out);
     });
 
     register(`${DECISION_ROUTE_PREFIX}/ai/config`, ['POST'], async (request) => {
@@ -296,17 +314,21 @@ export function registerDecisionCenterRoutes(ctx) {
           send('start', { id });
           void (async () => {
             try {
-              const out = typeof center.adviseStream === 'function'
-                ? await center.adviseStream(id, (delta, text) => {
-                  if (!cancelled) send('delta', { delta, text });
-                })
-                : await center.advise(id);
-              if (!cancelled) send(out.ok ? 'done' : 'error', out.ok ? { advice: out.advice, ticket: out.ticket } : out);
+              const out =
+                typeof center.adviseStream === 'function'
+                  ? await center.adviseStream(id, (delta, text) => {
+                      if (!cancelled) send('delta', { delta, text });
+                    })
+                  : await center.advise(id);
+              if (!cancelled)
+                send(out.ok ? 'done' : 'error', out.ok ? { advice: out.advice, ticket: out.ticket } : out);
             } catch (error) {
               if (!cancelled) send('error', { ok: false, error: String(error?.message ?? error) });
             }
           })();
-          return () => { cancelled = true; };
+          return () => {
+            cancelled = true;
+          };
         },
       });
     });
@@ -316,11 +338,15 @@ export function registerDecisionCenterRoutes(ctx) {
       if (center === undefined || typeof center.advise !== 'function') return unavailable();
       const body = await bodyOf(request);
       const out = await center.advise(body?.id);
-      const limited = out?.reason === 'ai-rate-limited' || out?.reason === 'ai-circuit-open' || out?.reason === 'ai-daily-quota-exceeded';
-      const headers = limited && Number.isFinite(out?.retryAfterMs) && out.retryAfterMs > 0
-        ? { 'retry-after': String(Math.ceil(out.retryAfterMs / 1000)) }
-        : {};
-      return json(out.ok ? 200 : (out.reason === 'not-found' ? 404 : limited ? 429 : 409), out, headers);
+      const limited =
+        out?.reason === 'ai-rate-limited' ||
+        out?.reason === 'ai-circuit-open' ||
+        out?.reason === 'ai-daily-quota-exceeded';
+      const headers =
+        limited && Number.isFinite(out?.retryAfterMs) && out.retryAfterMs > 0
+          ? { 'retry-after': String(Math.ceil(out.retryAfterMs / 1000)) }
+          : {};
+      return json(out.ok ? 200 : out.reason === 'not-found' ? 404 : limited ? 429 : 409, out, headers);
     });
 
     status.mounted = true;

package/src/plugin/tools.mjs

@@ -296,7 +296,7 @@ const MAX_STAGES = 16;
  * `package.json` during `scripts/pack.mjs` rather than hand-maintained, and `W2M_PLUGIN_VERSION`
  * overrides it at runtime for tests and packagers.
  */
-const PLUGIN_VERSION = '3.0.0';
+const PLUGIN_VERSION = '3.1.0';
 
 /** How long any single HTTP call may take before it is aborted, in milliseconds. */
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;

package/src/queue-journal/index.mjs

@@ -0,0 +1,188 @@
+/**
+ * W2M queue journal: `@twinsearth/w2m-dsh-plugin/queue-journal`.
+ *
+ * Ported from `@twinsearth/dsh-fang-queue-journal` (Fang 3.1.21). Fang's package shipped only a
+ * no-op host half because its HTTP surface lived in the Fang orchestrator; W2M has no orchestrator,
+ * so the store and the four routes move into this subplugin and keep the wire shapes the ported
+ * client already speaks:
+ *
+ *   GET  /api/w2m/composer/journal?key=…          -> { ok, entry }
+ *   GET  /api/w2m/composer/journal?list=1         -> { ok, entries }   (recovery list, newest first)
+ *   POST /api/w2m/composer/journal                { key, draft, queue, path, sessionKey }
+ *   GET  /api/w2m/composer/journal/history?limit=&sessionKey= -> { ok, items }
+ *   POST /api/w2m/composer/queue                  { sessionId, items:[{text}] }
+ *
+ * The journal only stores what the user has not sent. Nothing here sends a message: the queue
+ * restore route forwards rows into a live agent only when the host exposes one, and reports
+ * `session-not-live` otherwise, exactly as the Fang route did.
+ *
+ * Data lives under `$DSH_HOME/xclient/queue-journal`, beside the rest of this package's state.
+ */
+import path from 'node:path';
+
+import { resolveStateDir } from '../util/cli.mjs';
+import { ComposerJournal } from './lib/composer-journal.mjs';
+
+export const name = 'w2m-queue-journal';
+export const inject = [];
+
+/** Route prefix shared with lib/client.js. */
+export const QUEUE_JOURNAL_ROUTE_PREFIX = '/api/w2m/composer/journal';
+export const QUEUE_RESTORE_ROUTE_PATH = '/api/w2m/composer/queue';
+export const QUEUE_JOURNAL_SERVICE = 'w2mQueueJournal';
+
+const NO_STORE = { 'cache-control': 'no-store' };
+
+function json(status, body) {
+  return Response.json(body, { status, headers: NO_STORE });
+}
+
+function queryOf(request) {
+  try {
+    return new URL(request.url, 'http://127.0.0.1').searchParams;
+  } catch {
+    return new URLSearchParams();
+  }
+}
+
+async function bodyOf(request) {
+  try {
+    const value = await request.json();
+    return value !== null && typeof value === 'object' && !Array.isArray(value) ? value : null;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Mount the four composer-journal routes on the host's Connection fetch registry.
+ *
+ * @param {object} ctx Cordis context.
+ * @param {{journal: ComposerJournal, dataDir: string}} deps
+ * @returns {{mounted: boolean, reason: string|null}}
+ */
+export function registerQueueJournalRoutes(ctx, deps) {
+  const status = { mounted: false, reason: 'the host has no Connection service' };
+  if (typeof ctx?.inject !== 'function') return status;
+  ctx.inject(['connection'], (webCtx) => {
+    const registry = webCtx?.connection?.fetch;
+    if (registry === undefined || typeof registry.register !== 'function') {
+      status.reason = 'the connection service carries no fetch registry';
+      return;
+    }
+    const register = (routePath, methods, fetch) => {
+      registry.register({ path: routePath, methods, requestBody: 'buffered', fetch });
+    };
+
+    register(QUEUE_JOURNAL_ROUTE_PREFIX, ['GET', 'POST'], async (request) => {
+      if (request.method === 'GET') {
+        const query = queryOf(request);
+        const key = String(query.get('key') ?? '');
+        if (key === '' && query.get('list') === '1') {
+          return json(200, { ok: true, entries: deps.journal.list() });
+        }
+        if (key === '') return json(400, { ok: false, error: 'journal-key-required' });
+        return json(200, { ok: true, entry: deps.journal.get(key) });
+      }
+      const body = await bodyOf(request);
+      const key = String(body?.key ?? '');
+      if (key === '') return json(400, { ok: false, error: 'journal-key-required' });
+      try {
+        return json(200, {
+          ok: true,
+          entry: deps.journal.save(key, {
+            ...body,
+            sessionKey: body?.sessionKey || body?.sessionId || '',
+          }),
+        });
+      } catch (error) {
+        return json(400, { ok: false, error: String(error?.message ?? error) });
+      }
+    });
+
+    register(`${QUEUE_JOURNAL_ROUTE_PREFIX}/history`, ['GET'], (request) => {
+      const query = queryOf(request);
+      const limit = Math.max(1, Math.min(200, Number(query.get('limit') ?? 20) || 20));
+      const sessionKey = String(query.get('sessionKey') ?? '');
+      return json(200, { ok: true, items: deps.journal.history({ limit, sessionKey }) });
+    });
+
+    register(QUEUE_RESTORE_ROUTE_PATH, ['POST'], async (request) => {
+      const body = await bodyOf(request);
+      const sessionId = String(body?.sessionId ?? '').trim();
+      const items = Array.isArray(body?.items) ? body.items : [];
+      if (sessionId === '') return json(400, { ok: false, error: 'session-id-required' });
+      if (items.length === 0) return json(200, { ok: true, queued: 0, failed: 0 });
+      let agents;
+      try {
+        agents = ctx.get('agents');
+      } catch {
+        agents = undefined;
+      }
+      const agent = typeof agents?.get === 'function' ? agents.get(sessionId) : undefined;
+      if (agent === undefined || typeof agent.send !== 'function') {
+        return json(409, { ok: false, error: 'session-not-live' });
+      }
+      let queued = 0;
+      let failed = 0;
+      for (const item of items.slice(0, 100)) {
+        const text = String(item?.text ?? '')
+          .trim()
+          .slice(0, 4000);
+        if (text === '') {
+          failed += 1;
+          continue;
+        }
+        try {
+          agent.send(
+            {
+              id: `msg_${Date.now().toString(36)}${Math.random().toString(36).slice(2, 6)}`,
+              role: 'user',
+              content: [{ type: 'text', text }],
+              source: { kind: 'user' },
+            },
+            'next-turn',
+            false,
+          );
+          queued += 1;
+        } catch {
+          failed += 1;
+        }
+      }
+      return json(200, { ok: true, queued, failed });
+    });
+
+    status.mounted = true;
+    status.reason = null;
+  });
+  return status;
+}
+
+/**
+ * Apply the queue journal: one store, one service, four routes.
+ *
+ * @param {object} ctx Cordis context.
+ * @param {{dataDir?: string}} [config]
+ */
+export function apply(ctx, config = {}) {
+  const dataDir =
+    typeof config?.dataDir === 'string' && config.dataDir.trim() !== ''
+      ? path.resolve(config.dataDir)
+      : path.join(resolveStateDir(null, ''), 'queue-journal');
+  const journal = new ComposerJournal(dataDir);
+  const service = {
+    dataDir,
+    get: (key) => journal.get(key),
+    list: () => journal.list(),
+    save: (key, input) => journal.save(key, input),
+    history: (options) => journal.history(options),
+    remove: (key) => journal.remove(key),
+  };
+  if (typeof ctx?.effect === 'function') {
+    ctx.effect(() => ctx.provide(QUEUE_JOURNAL_SERVICE, service));
+  } else if (typeof ctx?.provide === 'function') {
+    ctx.provide(QUEUE_JOURNAL_SERVICE, service);
+  }
+  registerQueueJournalRoutes(ctx, { journal, dataDir });
+  return service;
+}

package/src/queue-journal/lib/composer-journal.mjs

@@ -0,0 +1,128 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Composer journal: persist the user's unsent draft and queued-message mirror so a
+// restart/crash can offer recovery. It never sends anything by itself.
+import fs from 'node:fs'
+import path from 'node:path'
+
+const MAX_DRAFT = 100_000
+const MAX_QUEUE = 100
+const MAX_ITEM = 4_000
+// v3.1.21：队列「必丢」根因之一是所有会话挤在同一个 key（后者覆盖前者）。
+// 新增 append-only 历史文件：任何一次含队列的保存都会追加一条快照，
+// 即使主 journal 被覆盖，历史里仍能找回来。
+const MAX_HISTORY = 500
+
+function cleanText(value, limit) {
+  return String(value ?? '').replace(/\0/g, '').slice(0, limit)
+}
+
+export class ComposerJournal {
+  constructor(dataDir) {
+    this.file = path.join(dataDir, 'composer-journal.json')
+    this.historyFile = path.join(dataDir, 'composer-journal-history.jsonl')
+  }
+
+  load() {
+    try {
+      const raw = JSON.parse(fs.readFileSync(this.file, 'utf8'))
+      return raw && typeof raw === 'object' ? raw : {}
+    } catch { return {} }
+  }
+
+  saveFile(all) {
+    fs.mkdirSync(path.dirname(this.file), { recursive: true })
+    const tmp = this.file + '.tmp'
+    fs.writeFileSync(tmp, JSON.stringify(all, null, 2) + '\n', { encoding: 'utf8', mode: 0o600 })
+    fs.renameSync(tmp, this.file)
+  }
+
+  get(key) {
+    const entry = this.load()[String(key)]
+    return entry && typeof entry === 'object' ? entry : null
+  }
+
+  /** All recoverable journal entries, newest first (bounded by the same 100-session cap). */
+  list() {
+    const all = this.load()
+    return Object.values(all)
+      .filter((entry) => entry && typeof entry === 'object')
+      .sort((a, b) => String(b?.updatedAt || '').localeCompare(String(a?.updatedAt || '')))
+  }
+
+  save(key, input = {}) {
+    const id = cleanText(key, 200)
+    if (!id) throw new Error('journal-key-required')
+    const queue = Array.isArray(input.queue)
+      ? input.queue.slice(-MAX_QUEUE).map((item) => ({
+        text: cleanText(item?.text, MAX_ITEM),
+        at: Number(item?.at) || Date.now(),
+      })).filter((item) => item.text.trim())
+      : []
+    const entry = {
+      key: id,
+      draft: cleanText(input.draft, MAX_DRAFT),
+      queue,
+      path: cleanText(input.path, 500),
+      sessionKey: cleanText(input.sessionKey, 200),
+      updatedAt: new Date().toISOString(),
+    }
+    const all = this.load()
+    all[id] = entry
+    // Keep the journal bounded: 100 sessions is plenty for recovery.
+    const keys = Object.keys(all)
+    if (keys.length > 100) {
+      keys.sort((a, b) => String(all[a]?.updatedAt || '').localeCompare(String(all[b]?.updatedAt || '')))
+      for (const stale of keys.slice(0, keys.length - 100)) delete all[stale]
+    }
+    this.saveFile(all)
+    this.appendHistory({ ...entry, sessionKey: cleanText(input.sessionKey, 200) || entry.key })
+    return entry
+  }
+
+  /** 追加一条历史快照（只在有队列内容时写，避免草稿噪音）。 */
+  appendHistory(entry) {
+    try {
+      const queue = Array.isArray(entry?.queue) ? entry.queue : []
+      if (queue.length === 0) return
+      fs.mkdirSync(path.dirname(this.historyFile), { recursive: true })
+      fs.appendFileSync(this.historyFile, JSON.stringify({
+        key: entry.key,
+        queue,
+        draft: entry.draft || "",
+        path: entry.path || "",
+        sessionKey: entry.sessionKey || "",
+        updatedAt: entry.updatedAt,
+      }) + "\n", { encoding: "utf8", mode: 0o600 })
+      // 裁剪：超过上限时重写最后 MAX_HISTORY 行
+      const raw = fs.readFileSync(this.historyFile, "utf8").trim().split("\n").filter(Boolean)
+      if (raw.length > MAX_HISTORY) {
+        fs.writeFileSync(this.historyFile, raw.slice(-MAX_HISTORY).join("\n") + "\n", { encoding: "utf8", mode: 0o600 })
+      }
+    } catch { /* 历史写入失败不影响主 journal */ }
+  }
+
+  /** 读取历史快照（newest first），可按 sessionKey 过滤。 */
+  history({ limit = 50, sessionKey = "" } = {}) {
+    try {
+      const raw = fs.readFileSync(this.historyFile, "utf8").trim().split("\n").filter(Boolean)
+      const items = []
+      for (const line of raw) {
+        try {
+          const entry = JSON.parse(line)
+          if (sessionKey && String(entry?.sessionKey || "") !== String(sessionKey)) continue
+          items.push(entry)
+        } catch { /* 跳过坏行 */ }
+      }
+      return items.slice(-Math.max(1, Number(limit) || 50)).reverse()
+    } catch { return [] }
+  }
+
+  remove(key) {
+    const all = this.load()
+    const id = String(key)
+    if (!all[id]) return false
+    delete all[id]
+    this.saveFile(all)
+    return true
+  }
+}