@nelsonlongxiang/dsh-open-a2a-net 0.6.24 → 0.6.26

package/nexus-stage/src/workbench.ts

@@ -18,6 +18,10 @@
  *   state, and the active mode are view state kept across updates.
  * @module nexus-stage/workbench
  */
+import { createChatDrawer, type ChatTarget } from './wb-chat'
+import { createRailTabs } from './wb-rail'
+import { DIRECTORY_FILTERS, learnLogTitle, loadLogTitles, renderDirectory, type DirFilter } from './wb-directory'
+import { ledgerFacts, renderLedger as paintLedger } from './wb-ledger'
 
 /** One pending ledger row from /state `tasks`. */
 export interface PendingRow {
@@ -48,6 +52,35 @@ export interface DeadRow {
   readonly reason?: string
   /** First line of the dispatched message (see {@link PendingRow.brief}). */
   readonly brief?: string
+  /** gh#31: which side of the wire this row served (absent on old hosts). */
+  readonly direction?: 'inbound' | 'outbound'
+}
+
+/** gh#31: one archived row from /state `archived` (newest first) — the
+ *  per-task outcome for a task that left the ledger. Fields past `summary`
+ *  are absent on hosts that predate them. */
+export interface ArchivedRow {
+  readonly taskId: string
+  readonly team: string
+  readonly resolvedAt: number
+  readonly outcome: string
+  readonly summary?: string
+  readonly peer?: string
+  readonly startedAt?: number
+  /** How the row left the book: a receipt, a content echo, or the caller
+   *  (abandon / cancel — both archive with outcome 'abandoned'). */
+  readonly endedBy?: 'receipt' | 'echo' | 'abandoned' | 'cancelled'
+  /** A receipt arrived after the caller had already ended the row. */
+  readonly late?: boolean
+  readonly direction?: 'inbound' | 'outbound'
+  readonly brief?: string
+}
+
+/** gh#41: one tracked peer's published canvas organization (full-card
+ *  canvasOrg) — the board renders REMOTE team frames from these rows. */
+export interface PeerOrgRow {
+  readonly url: string
+  readonly org: ReadonlyArray<{ name: string; team: string; members: readonly string[] }>
 }
 
 /** One session row from /state `sessions` (live or cold joined). */
@@ -112,15 +145,31 @@ export interface StateBody {
   readonly version?: string
   readonly sessions?: readonly SessionRow[]
   readonly canvas?: { teams?: readonly CanvasTeamRow[] }
-  readonly peers?: ReadonlyArray<{ url: string; score?: number }>
+  /** gh#20 W-A/W-C: the peer row carries the link badge source, the host
+   *  rail's label/version/last-contact facts (absent on older hosts). */
+  readonly peers?: ReadonlyArray<{
+    url: string
+    score?: number
+    link?: 'linked' | 'stranger'
+    verified?: boolean
+    name?: string
+    version?: string
+    lastContactAt?: number
+    /** gh#24: whether the last contact attempt succeeded. */
+    lastContactOk?: boolean
+  }>
   readonly remote?: readonly RemoteRow[]
   readonly activity?: readonly ActivityRow[]
   readonly inFlight?: ReadonlyArray<{ team: string; peer: string; startedAt: number }>
   readonly tasks?: readonly PendingRow[]
   readonly tasksStaleCount?: number
   readonly tasksDead?: readonly DeadRow[]
+  /** gh#31: per-task outcomes for rows that left the ledger (bounded). */
+  readonly archived?: readonly ArchivedRow[]
+  /** gh#41 fleet planning: each tracked peer's published canvas org. */
+  readonly peerOrg?: readonly PeerOrgRow[]
   readonly archivedCount?: number
-  /** Settled-archive split by verdict ('completed' | 'declined' | … | 'abandoned' | 'unclassified'). */
+  /** Settled-archive split by verdict (the receipt outcome vocabulary — 'completed' | 'rejected' | 'failed' | … | 'abandoned' — or 'unclassified'). */
   readonly archivedSplit?: Readonly<Record<string, number>>
   readonly idempotency?: {
     window?: number
@@ -140,6 +189,15 @@ export interface StateBody {
 /** What the workbench can DO — the seams tests drive. */
 export interface WorkbenchDeps {
   now(): number
+  /** gh#41 fleet planning: each tracked peer's published canvas org. */
+  peerOrg?: readonly PeerOrgRow[]
+  /** gh#34: read the owner three-key panel state (GET /__dsh_a2a/owner-settings). */
+  ownerSettingsRead?(): Promise<{ ok: boolean; teamJoinAllowlist?: string[]; teamScopeInfo?: boolean; announce?: boolean; announceRestartPending?: boolean; error?: string }>
+  /** gh#34: write owner panel changes; true on success (POST the same face). */
+  ownerSettingsWrite?(changes: { teamJoinAllowlist?: string[]; teamScopeInfo?: boolean; announce?: boolean }): Promise<{ ok: boolean; restartNeeded?: boolean; error?: string }>
+  /** gh#41 fleet planning: regulate a REMOTE peer's canvas team (this host
+   *  signs the envelope and forwards; the peer's link gate authorizes). */
+  fleetCanvasOp?(peer: string, op: 'create' | 'add-member' | 'remove-member', name: string, id?: string): Promise<{ ok: boolean; members?: string[]; error?: string }>
   /** Abandon one dead-lettered task via the control route. True on success. */
   abandon(taskId: string, reason: string): Promise<boolean>
   /** Canvas team member change via the control route (0.6.6): `id` is a
@@ -155,7 +213,7 @@ export interface WorkbenchDeps {
   /** 0.6.12: list every local session holding a log artifact (newest first) —
    *  the reading face is host-scoped, so archived and never-joined sessions
    *  appear here even when the network directory shows no local rows. */
-  sessionLogList?(): Promise<{ ok: boolean; sessions?: Array<{ id: string; mtimeMs: number; sizeBytes: number }>; error?: string }>
+  sessionLogList?(): Promise<{ ok: boolean; sessions?: Array<{ id: string; mtimeMs: number; sizeBytes: number }>; count?: number; error?: string }>
   /** 0.6.15: remote transcript via the local proxy — ?team=<zone/id8>
    *  resolves the publishing peer through the directory, ?peer=<base-url>
    *  reads one tracked peer directly. Without id the peer answers its
@@ -199,30 +257,6 @@ function el<K extends keyof HTMLElementTagNameMap>(tag: K, className?: string):
   return node
 }
 
-/** One labelled counter in a pane's stat strip; `title` carries the definition
- *  (native tooltip — the definition lives with the number it explains). */
-function statChip(label: string, value: number, hint: string, tone?: 'warn' | 'danger'): HTMLElement {
-  const chip = el('span', 'wb-stat')
-  if (tone !== undefined) chip.classList.add(`wb-stat-${tone}`)
-  chip.setAttribute('title', hint)
-  chip.appendChild(el('span', 'wb-stat-k')).textContent = label
-  chip.appendChild(el('span', 'wb-stat-v')).textContent = String(value)
-  return chip
-}
-
-/** One proportional bar: label · track · count. Cheap density for a histogram. */
-function barRow(parent: HTMLElement, label: string, count: number, max: number): void {
-  const row = el('div', 'wb-bar-row')
-  row.appendChild(el('span', 'wb-bar-k')).textContent = label
-  const track = el('span', 'wb-bar-track')
-  const fill = el('span', 'wb-bar-fill')
-  fill.style.width = `${max > 0 ? Math.max(count > 0 ? 2 : 0, Math.round((count / max) * 100)) : 0}%`
-  track.appendChild(fill)
-  row.appendChild(track)
-  row.appendChild(el('span', 'wb-bar-v')).textContent = String(count)
-  parent.appendChild(row)
-}
-
 function textRow(parent: HTMLElement, label: string, value: string): void {
   const row = el('div', 'wb-kv')
   row.appendChild(el('span', 'wb-kv-k')).textContent = label
@@ -234,40 +268,9 @@ type Selection =
   | { kind: 'canvas'; row: CanvasTeamRow }
   | undefined
 
-/** Chat drawer target (0.6.13, remote 0.6.15): a node picked on the board or in the
- * directory — session/log get the local transcript tail, remote rows and peers
- * read through the /a2a/log proxy. Reading, not jumping. */
-type ChatTarget =
-  | { kind: 'session'; id: string; title: string; sub: string; team?: string; live?: boolean }
-  | { kind: 'log'; id: string; title: string; sub: string }
-  | { kind: 'peer'; id: string; title: string; sub: string; url?: string; picked?: string }
-  | { kind: 'remote'; team: string; title: string; sub: string; row?: RemoteRow }
-
-/** The four rail sections. */
-export type WorkbenchSection = 'directory' | 'ledger' | 'activity' | 'plan'
-
-/** Directory category filter (0.6.6): one chip per directory section group. */
-type DirFilter = 'all' | 'local' | 'canvas' | 'peers' | 'remote'
+/** The rail sections. */
+export type WorkbenchSection = 'directory' | 'hosts' | 'ledger' | 'activity' | 'plan'
 
-const DIRECTORY_FILTERS: ReadonlyArray<{ key: DirFilter; label: string; hint: string }> = [
-  { key: 'all', label: '全部', hint: '不过滤：目录全部条目' },
-  { key: 'local', label: '本机', hint: '本机会话节点（现场 + 冷启动）' },
-  { key: 'canvas', label: '队', hint: '画布队（人类手工分配的组队）' },
-  { key: 'peers', label: 'Peers', hint: '对等节点（peer 池）' },
-  { key: 'remote', label: '远端', hint: '远端会话队（来自对端卡片）' },
-]
-
-/** Lowercased haystack for the unified search: name/team/label/id/url/teams. */
-function rowHaystack(...parts: ReadonlyArray<string | readonly string[] | undefined>): string {
-  const flat: string[] = []
-  for (const part of parts) {
-    if (part === undefined) continue
-    if (typeof part === 'string') {
-      if (part !== '') flat.push(part)
-    } else for (const entry of part) if (entry !== '') flat.push(entry)
-  }
-  return flat.join(' ').toLowerCase()
-}
 
 /** Legacy deep-link targets: 'board' focuses the stage, sections open a rail section. */
 export type WorkbenchTab = 'board' | WorkbenchSection
@@ -289,8 +292,21 @@ export interface Workbench {
   openNodeChat(id: string): void
 }
 
+/** Bare host:port of a peer url (workbench-local twin of federation's
+ *  helper — this module keeps a zero-import posture). */
+function peerHostOf(url: string): string {
+  try {
+    return new URL(url).host
+  } catch {
+    return url
+  }
+}
+
+/** Rail tabs (2026-10-23): 主机 moved up next to 目录 — host health was the
+ *  last accordion section and sat below the fold. */
 const SECTION_DEFS: ReadonlyArray<{ key: WorkbenchSection; label: string }> = [
   { key: 'directory', label: '目录' },
+  { key: 'hosts', label: '主机' },
   { key: 'ledger', label: '台账' },
   { key: 'activity', label: '活动' },
   { key: 'plan', label: '规划' },
@@ -301,7 +317,6 @@ export function createWorkbench(deps: WorkbenchDeps): Workbench {
   let mode: WorkbenchMode = 'data'
   let selection: Selection
   let last: StateBody | null = null
-  const collapsed = new Set<WorkbenchSection>(['activity', 'plan'])
   // Directory view state (survives polls): unified search + category filter.
   let searchText = ''
   let dirFilter: DirFilter = 'all'
@@ -311,27 +326,14 @@ export function createWorkbench(deps: WorkbenchDeps): Workbench {
   // Quick-dispatch form (0.6.9), cached per target routing team the same
   // draftForm way: a textarea's draft must survive the 3s poll remount.
   let dispatchForm: { team: string; form: HTMLFormElement; text: HTMLTextAreaElement; note: HTMLElement } | null = null
-  // Chat drawer (0.6.13): the picked node + its own dispatch form cache
-  // (separate from the inspector's so both faces can hold different teams).
-  let chatTarget: ChatTarget | null = null
-  /** 0.6.17: one-shot composer focus on drawer open (consumed by renderChat). */
-  let chatFocusPending = false
-  let chatForm: { team: string; form: HTMLFormElement; text: HTMLTextAreaElement; note: HTMLElement } | null = null
-  // 0.6.11: inline transcript cache — one fetch per session id, refreshed on
-  // demand. renderInspector rebuilds every poll, so the cache keeps the
-  // transcript block from refetching on each 3s tick.
-  const transcriptCache = new Map<string, { ok: boolean; messages?: Array<{ role: string; text: string }>; error?: string } | undefined>()
-  /** 0.6.17 chat-UI convention: reading position per transcript key — the
-   *  3s poll rebuilds the body, the scroll restores instead of jumping top. */
-  const transcriptScroll = new Map<string, number>()
-  /** Owner signal (2026-10-21): transcripts default to a collapsed detail —
-   *  the seats' forensics face, not the owner's. Expansion persists per key. */
-  const expandedTranscripts = new Set<string>()
-  /** 0.6.15: peer-host session listings, cached per peer url. */
-  const peerListCache = new Map<string, { ok: boolean; sessions?: Array<{ id: string; sizeBytes: number }>; error?: string } | undefined>()
   // 0.6.12: readable local logs (host-scope list, newest first). Refreshed
   // opportunistically per poll; rows render in the directory's 本机日志 section.
   let logRows: Array<{ id: string; mtimeMs: number; sizeBytes: number }> = []
+  /** How many logs the host holds (the list face caps at 50); from the listing's count. */
+  let logTotal: number | undefined
+  /** Learned 本机日志 titles: the first user line of a transcript, captured
+   *  when the chat drawer loads it (the list face carries no titles). */
+  const logTitles = loadLogTitles()
   let logRowsBusy = false
 
   const root = el('div', 'wb')
@@ -351,6 +353,16 @@ export function createWorkbench(deps: WorkbenchDeps): Workbench {
   const versionBadge = el('span', 'wb-badge')
   title.appendChild(versionBadge)
   header.appendChild(title)
+  // gh#34 owner three-key panel: the header gear opens the inspector panel
+  // (teamJoinAllowlist / teamScopeInfo / announce) — 远程建联三件不再翻配置文件。
+  const ownerBtn = el('button', 'wb-icon-btn wb-owner-btn')
+  ownerBtn.type = 'button'
+  ownerBtn.dataset.testid = 'wb-owner-btn'
+  ownerBtn.setAttribute('aria-label', '主人设置（三键面板）')
+  ownerBtn.title = '主人设置：入网白名单 / 可见性 / 发布'
+  ownerBtn.textContent = '⚙'
+  ownerBtn.addEventListener('click', () => { ownerPanelOpen = !ownerPanelOpen; renderOwnerPanel() })
+  header.appendChild(ownerBtn)
   const headerStats = el('div', 'wb-header-stats')
   header.appendChild(headerStats)
   const railToggle = el('button', 'wb-icon-btn wb-rail-toggle')
@@ -367,32 +379,11 @@ export function createWorkbench(deps: WorkbenchDeps): Workbench {
   header.appendChild(railToggle)
 
   const body = el('div', 'wb-body')
-  const rail = el('aside', 'wb-rail')
-
-  // Rail sections (accordion). Panes are created once and re-parented
-  // between section bodies (canvas mode) and the stage stack (data mode).
-  const sectionBodies = new Map<WorkbenchSection, HTMLElement>()
-  const sectionCounts = new Map<WorkbenchSection, HTMLElement>()
-  for (const def of SECTION_DEFS) {
-    const sec = el('section', 'wb-sec')
-    sec.dataset.sec = def.key
-    const head = el('button', 'wb-sec-head')
-    head.type = 'button'
-    head.appendChild(el('span', 'wb-sec-label')).textContent = def.label
-    const count = el('span', 'wb-sec-count')
-    head.appendChild(count)
-    head.addEventListener('click', () => {
-      if (collapsed.has(def.key)) collapsed.delete(def.key)
-      else collapsed.add(def.key)
-      syncSections()
-    })
-    sec.appendChild(head)
-    const secBody = el('div', 'wb-sec-body')
-    sec.appendChild(secBody)
-    rail.appendChild(sec)
-    sectionBodies.set(def.key, secBody)
-    sectionCounts.set(def.key, count)
-  }
+  // Rail tabs (2026-10-23, wb-rail): one panel per pane, each with its own
+  // scroll. Panes are created once and re-parented between tab panels
+  // (canvas mode) and the stage stack (data mode).
+  const railTabs = createRailTabs(SECTION_DEFS)
+  const rail = railTabs.root
 
   const directoryBody = el('div', 'wb-directory')
   // Directory toolbar: unified search + category filter chips (0.6.6). Built
@@ -423,16 +414,19 @@ export function createWorkbench(deps: WorkbenchDeps): Workbench {
     filterRow.appendChild(chip)
   }
   directoryTools.appendChild(filterRow)
-  sectionBodies.get('directory')!.appendChild(directoryTools)
-  sectionBodies.get('directory')!.appendChild(directoryBody)
+  railTabs.panel('directory').appendChild(directoryTools)
+  railTabs.panel('directory').appendChild(directoryBody)
 
   const ledgerPane = el('section', 'wb-pane')
   const activityPane = el('section', 'wb-pane')
   const planPane = el('section', 'wb-pane')
+  // gh#20 W-C: the host rail pane (one row per tracked peer).
+  const hostsPane = el('section', 'wb-pane')
   const dataPanes: ReadonlyArray<[WorkbenchSection, HTMLElement]> = [
     ['ledger', ledgerPane],
     ['activity', activityPane],
     ['plan', planPane],
+    ['hosts', hostsPane],
   ]
 
   const stage = el('main', 'wb-stage')
@@ -456,64 +450,35 @@ export function createWorkbench(deps: WorkbenchDeps): Workbench {
   const inspectorBody = el('div', 'wb-inspector-body')
   inspector.appendChild(inspectorBody)
 
-  // ── Node chat drawer (0.6.13) ──
-  // Clicking a node — on the planning board or a directory session/log/peer
-  // row — opens the conversation reading face as a right-side chat UI. The
-  // transcript tail is local-only; peers get the honest cross-host note.
-  const chat = el('aside', 'wb-chat')
-  const chatHead = el('div', 'wb-chat-head')
-  const chatDot = el('span', 'wb-chat-dot')
-  const chatTitle = el('span', 'wb-chat-title')
-  const chatSub = el('span', 'wb-chat-sub')
-  const chatClose = el('button', 'wb-icon-btn')
-  chatClose.type = 'button'
-  chatClose.setAttribute('aria-label', '关闭对话')
-  chatClose.textContent = '✕'
-  chatClose.addEventListener('click', () => closeChat())
-  chatHead.appendChild(chatDot)
-  chatHead.appendChild(chatTitle)
-  chatHead.appendChild(chatSub)
-  chatHead.appendChild(chatClose)
-  const chatBody = el('div', 'wb-chat-body')
-  chat.appendChild(chatHead)
-  chat.appendChild(chatBody)
-  // 0.6.17 chat-UI convention: Escape closes the drawer. Document-scoped
-  // (a reading drawer often holds no focusable element), but it never
-  // steals Escape from another surface's text field or from the planning
-  // board's own deselect gesture.
-  document.addEventListener('keydown', ev => {
-    if (ev.key !== 'Escape' || !chat.classList.contains('is-open')) return
-    const target = ev.target
-    if (!(target instanceof HTMLElement)) return
-    const insideChat = chat.contains(target)
-    if (!insideChat) {
-      const typingElsewhere = target instanceof HTMLTextAreaElement || target instanceof HTMLInputElement || target.isContentEditable
-      const onBoard = target.closest('.wb-stage-board') !== null
-      if (typingElsewhere || onBoard) return
-    }
-    closeChat()
+  // ── Node chat drawer (0.6.13; rewritten 2026-10-23 as wb-chat) ──
+  // Clicking a node — on the planning board or a directory row — opens the
+  // conversation as a right-side chat: thread + composer + receipt tracking.
+  const chat = createChatDrawer({
+    now: deps.now,
+    sessionLog: deps.sessionLog,
+    remoteSessionLog: deps.remoteSessionLog,
+    dispatchQuick: deps.dispatchQuick,
+    onTranscript: (target, messages) => {
+      if (target.kind !== 'log' && target.kind !== 'session') return
+      if (learnLogTitle(logTitles, target.id, messages)) renderSidebar()
+    },
   })
 
   stage.appendChild(dataStack)
   body.appendChild(rail)
   body.appendChild(stage)
   body.appendChild(inspector)
-  body.appendChild(chat)
+  body.appendChild(chat.root)
   root.appendChild(header)
   root.appendChild(body)
 
-  function syncSections(): void {
-    for (const def of SECTION_DEFS) {
-      const sec = sectionBodies.get(def.key)!.parentElement!
-      sec.classList.toggle('is-collapsed', collapsed.has(def.key))
-    }
-  }
-
   /** Move the data panes to their mode home: rail sections while the board
    *  owns the stage, the stage stack when the board is out. */
   function placePanes(m: WorkbenchMode): void {
     for (const [key, pane] of dataPanes) {
-      const home = m === 'canvas' ? sectionBodies.get(key)! : dataStack
+      const home = m === 'canvas' ? railTabs.panel(key) : dataStack
+      // Data mode: the pane lives on the stage, so its tab steps aside.
+      railTabs.setHidden(key, m !== 'canvas')
       if (pane.parentElement !== home) home.appendChild(pane)
     }
   }
@@ -554,284 +519,127 @@ export function createWorkbench(deps: WorkbenchDeps): Workbench {
 
   // ── Directory section ──
   function renderSidebar(): void {
-    const box = clear(directoryBody)
     // Filter chips reflect the live view state (built once, toggled here).
     for (let i = 0; i < filterRow.children.length; i++) {
       const node = filterRow.children[i] as HTMLElement
       node.classList.toggle('is-active', node.dataset.filter === dirFilter)
     }
     if (last === null) {
-      box.appendChild(el('div', 'wb-muted')).textContent = '载入中…'
-      sectionCounts.get('directory')!.textContent = ''
+      directoryBody.replaceChildren(el('div', 'wb-muted'))
+      directoryBody.firstElementChild!.textContent = '载入中…'
+      railTabs.setBadge('directory', '')
       return
     }
-    const state = last
-    const filtering = searchText !== '' || dirFilter !== 'all'
-    /** One directory row factory with the shared search+filter gate. */
-    const admit = (cat: DirFilter, haystack: string): boolean =>
-      (dirFilter === 'all' || dirFilter === cat) && (searchText === '' || haystack.includes(searchText))
-    /** Canvas-team badge for roster annotation (▤ + short name). */
-    const badges = (item: HTMLElement, teams: readonly string[] | undefined): void => {
-      if (teams === undefined || teams.length === 0) return
-      const chip = el('span', 'wb-item-badge')
-      const names = teams.map(t => t.slice(t.lastIndexOf('/') + 1))
-      chip.textContent = `▤ ${names.slice(0, 3).join(' ')}${names.length > 3 ? ` +${names.length - 3}` : ''}`
-      chip.title = `画布队：${teams.join(' · ')}`
-      item.appendChild(chip)
-    }
-    const section = (label: string, count: number): HTMLElement => {
-      const head = el('div', 'wb-side-head')
-      head.textContent = `${label} · ${count}`
-      box.appendChild(head)
-      return box
-    }
-    const sessions = state.sessions ?? []
-    const live = sessions.filter(row => row.live === true && admit('local', rowHaystack(displayName(row), row.team, row.label, row.id, row.canvasTeams)))
-    const cold = sessions.filter(row => row.live !== true && admit('local', rowHaystack(displayName(row), row.team, row.label, row.id, row.canvasTeams)))
-    sectionCounts.get('directory')!.textContent = `${live.length}/${cold.length}${logRows.length > 0 ? ` · 档 ${logRows.length}` : ''}`
-    if (live.length > 0) {
-      section('本机 · 现场', live.length)
-      for (const row of live) {
-        const item = el('button', 'wb-item')
-        item.type = 'button'
-        item.appendChild(el('span', 'wb-dot wb-dot-live')).textContent = '●'
-        item.appendChild(el('span', 'wb-item-label')).textContent = displayName(row)
-        badges(item, row.canvasTeams)
-        item.addEventListener('click', () => openChat({ kind: 'session', id: row.id, title: displayName(row), sub: row.team, team: row.team, live: row.live }))
-        box.appendChild(item)
-      }
-    }
-    if (cold.length > 0) {
-      section('本机 · 冷启动', cold.length)
-      for (const row of cold) {
-        const item = el('button', 'wb-item')
-        item.type = 'button'
-        item.appendChild(el('span', 'wb-dot wb-dot-cold')).textContent = '○'
-        item.appendChild(el('span', 'wb-item-label')).textContent = displayName(row)
-        badges(item, row.canvasTeams)
-        item.addEventListener('click', () => openChat({ kind: 'session', id: row.id, title: displayName(row), sub: row.team, team: row.team, live: row.live }))
-        box.appendChild(item)
-      }
-    }
-    const canvases = (state.canvas?.teams ?? []).filter(row =>
-      admit('canvas', rowHaystack(row.name, row.team, row.members.map(member => member.team ?? member.id))))
-    if (canvases.length > 0) {
-      section('Canvas 队', canvases.length)
-      for (const row of canvases) {
-        const item = el('button', 'wb-item')
-        item.type = 'button'
-        item.appendChild(el('span', 'wb-dot wb-dot-canvas')).textContent = '▤'
-        const remote = row.members.filter(member => member.remote === true).length
-        item.appendChild(el('span', 'wb-item-label')).textContent =
-          `${row.name} · ${row.members.length}${remote > 0 ? `（远端 ${remote}）` : ''}`
-        item.addEventListener('click', () => select({ kind: 'canvas', row }))
-        box.appendChild(item)
-      }
-    }
-    const peers = (state.peers ?? []).filter(row => admit('peers', rowHaystack(row.url)))
-    if (peers.length > 0) {
-      section('Peers', peers.length)
-      for (const row of peers) {
-        const item = el('button', 'wb-item')
-        item.type = 'button'
-        item.appendChild(el('span', 'wb-dot wb-dot-peer')).textContent = '⇄'
-        item.appendChild(el('span', 'wb-item-label')).textContent =
-          row.url.replace(/^https?:\/\//, '') + (row.score !== undefined ? ` · ${row.score}` : '')
-        item.addEventListener('click', () => {
-          const host = row.url.replace(/^https?:\/\//, '').replace(/\/.*$/, '')
-          openChat({ kind: 'peer', id: `peer-${host}`, title: row.url, sub: host, url: row.url })
-        })
-        box.appendChild(item)
-      }
-    }
-    const remote = (state.remote ?? []).filter(row => admit('remote', rowHaystack(displayName(row), row.team, row.origin, row.workspace, row.canvasTeams)))
-    if (remote.length > 0) {
-      section('远端节点', remote.length)
-      for (const row of remote) {
-        const item = el('button', 'wb-item')
-        item.type = 'button'
-        item.appendChild(el('span', 'wb-dot wb-dot-remote')).textContent = '◇'
-        item.appendChild(el('span', 'wb-item-label')).textContent = displayName(row)
-        badges(item, row.canvasTeams)
-        // 0.6.15: remote rows open the chat drawer — the transcript now
-        // reads through the proxy instead of the where-the-records-live note.
-        item.addEventListener('click', () => openChat({ kind: 'remote', team: row.team, title: displayName(row), sub: row.team, row }))
-        box.appendChild(item)
-      }
-    }
-    // 0.6.12: 本机日志 — every local session artifact EXCEPT ids already shown
-    // as network rows (those open the same transcript from their own cards).
-    // This is the reachability fix for hosts whose cold rows are all archived:
-    // reading is host-scoped, the network directory is not the reading gate.
-    const networkIds = new Set(sessions.map(row => row.id))
-    const fmtSize = (n: number): string => n >= 1_000_000 ? `${(n / 1_000_000).toFixed(1)} MB` : n >= 1_000 ? `${Math.round(n / 1_000)} KB` : `${n} B`
-    const logs = logRows.filter(row => !networkIds.has(row.id) && admit('local', rowHaystack(row.id)))
-    if (logs.length > 0) {
-      section('本机日志', logs.length)
-      for (const row of logs) {
-        const item = el('button', 'wb-item')
-        item.type = 'button'
-        item.appendChild(el('span', 'wb-dot')).textContent = '❐'
-        const label = el('span', 'wb-item-label')
-        label.textContent = `…${row.id.slice(-12)} · ${fmtSize(row.sizeBytes)}`
-        item.title = `${row.id}\n${fmtSize(row.sizeBytes)} · ${new Date(row.mtimeMs).toLocaleString()}`
-        item.appendChild(label)
-        item.addEventListener('click', () => openChat({ kind: 'log', id: row.id, title: `…${row.id.slice(-12)}`, sub: '档案' }))
-        box.appendChild(item)
-      }
-    }
-    if (filtering && live.length + cold.length + canvases.length + peers.length + remote.length + logs.length === 0) {
-      box.appendChild(el('div', 'wb-muted')).textContent = '无匹配条目'
-    }
+    const badge = renderDirectory(directoryBody, {
+      state: last,
+      logs: logRows,
+      logTotal,
+      titles: logTitles,
+      search: searchText,
+      filter: dirFilter,
+      now: deps.now(),
+      openChat,
+      selectCanvas: (row) => select({ kind: 'canvas', row }),
+    })
+    railTabs.setBadge('directory', badge)
   }
 
-  // ── Ledger pane ──
-  /** Age buckets for debt: what the ledger is actually made of, at a glance.
-   *  Boundaries mirror the C-ruling split (1h = settleable→conversational). */
-  const AGE_BUCKETS: ReadonlyArray<{ label: string; maxMs: number }> = [
-    { label: '<10m', maxMs: 10 * 60_000 },
-    { label: '10m-1h', maxMs: 60 * 60_000 },
-    { label: '1-6h', maxMs: 6 * 60 * 60_000 },
-    { label: '6-24h', maxMs: 24 * 60 * 60_000 },
-    { label: '>24h', maxMs: Number.POSITIVE_INFINITY },
-  ]
-
-  /** Group pending rows by age bucket; returns buckets in age order with counts. */
-  function ageHistogram(rows: readonly PendingRow[], now: number): number[] {
-    const counts = AGE_BUCKETS.map(() => 0)
-    for (const row of rows) {
-      const age = now - row.startedAt
-      const index = AGE_BUCKETS.findIndex(bucket => age < bucket.maxMs)
-      counts[index === -1 ? counts.length - 1 : index]! += 1
+  /**
+   * gh#20 W-C: the host rail — one row per tracked peer host. Each row is a
+   * HOST card: operator-facing label (the peer's published card name, host
+   * fallback), the W-A tri-state badge (link class + verified mark), a
+   * health lamp driven by the last-contact recency (green ≤60s, amber
+   * ≤5min, gray older/never — tooltip carries the exact timestamp), and the
+   * peer's published version chip. Clicking drills down: the peer chat
+   * drawer (remote log entry) rides the existing face.
+   */
+  function renderHosts(): void {
+    const pane = clear(hostsPane)
+    if (last === null) {
+      railTabs.setBadge('hosts', '')
+      return
     }
-    return counts
-  }
-
-  /** Top teams by pending-row count, most loaded first (bounded to 5). */
-  function topTeams(rows: readonly PendingRow[]): Array<[string, number]> {
-    const counts = new Map<string, number>()
-    for (const row of rows) counts.set(row.team, (counts.get(row.team) ?? 0) + 1)
-    return [...counts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 5)
-  }
-
-  function renderLedger(): void {
-    const pane = clear(ledgerPane)
-    if (last === null) return
     const now = deps.now()
-    const pending = last.tasks ?? []
-    const dead = last.tasksDead ?? []
-    const stale = last.tasksStaleCount ?? 0
-    const archived = last.archivedCount ?? 0
-    sectionCounts.get('ledger')!.textContent = `待 ${pending.length} · 死 ${dead.length}`
-
-    // Stat strip: the four headline numbers, each carrying its definition.
-    const stats = el('div', 'wb-stats')
-    stats.appendChild(statChip('待回执', pending.length,
-      '等待回执的任务（pending）。其中「陈旧」= 超过 1 小时仍未回执，或本就无回执债（fire-and-forget）'))
-    stats.appendChild(statChip('陈旧', stale,
-      '陈旧尾：≥1h 无回执的旧账 + receiptExpected:false 的免回执行。它们到 24h TTL 自动转死信，不算可催办债务',
-      stale > 0 ? 'warn' : undefined))
-    stats.appendChild(statChip('死信', dead.length,
-      '超过 24h TTL 仍未结算，或目标早已离开。需清账（abandon）才能移出',
-      dead.length > 0 ? 'danger' : undefined))
-    stats.appendChild(statChip('已归档', archived,
-      '已结算并留档的任务（回执已关联）。用于审计，不再占待回执名额'))
-    pane.appendChild(stats)
-
-    // Archive verdict split: how those settled rows actually ended.
-    const split = last.archivedSplit
-    if (archived > 0 && split !== undefined) {
-      const entries = Object.entries(split).sort((a, b) => b[1] - a[1])
-      if (entries.length > 0) {
-        const line = el('div', 'wb-pane-head')
-        line.textContent = `归档结局 · ${entries.map(([key, count]) => `${key} ${count}`).join(' · ')}`
-        pane.appendChild(line)
-      }
-    }
-
-    // Forensics (moved off the header): the plumbing counters a seat reads
-    // when something looks off — muted, never the owner's first line.
-    const idem = last.idempotency
-    const reconcileState = last.reconcile?.state
-    if (idem !== undefined || reconcileState !== undefined) {
-      const parts: string[] = []
-      if (idem !== undefined) parts.push(`幂等 claims ${idem.claimsFresh ?? 0} · replays ${idem.replays ?? 0} · conflicts ${idem.conflicts ?? 0}`)
-      if (reconcileState !== undefined) parts.push(`reconcile ${reconcileState}`)
-      const line = el('div', 'wb-pane-head wb-forensics')
-      line.textContent = `取证 · ${parts.join(' · ')}`
-      pane.appendChild(line)
+    const peers = [...(last.peers ?? [])].sort((a, b) => {
+      const rank = (row: { link?: string }): number => row.link === 'linked' ? 0 : 1
+      return rank(a) - rank(b) || (b.score ?? 0) - (a.score ?? 0)
+    })
+    railTabs.setBadge('hosts', peers.length > 0 ? `${peers.filter(row => row.link === 'linked').length}/${peers.length}` : '')
+    if (peers.length === 0) {
+      pane.appendChild(el('div', 'wb-nodelist-empty')).textContent = '暂无 tracked peer——配 peers 种子或等 referral 到达'
+      return
     }
-
-    if (pending.length > 0) {
-      // Age histogram + team load: WHERE the debt sits and how old it is.
-      const counts = ageHistogram(pending, now)
-      const max = Math.max(...counts, 1)
-      const hist = el('div', 'wb-hist')
-      for (let i = 0; i < AGE_BUCKETS.length; i += 1) {
-        barRow(hist, AGE_BUCKETS[i]!.label, counts[i]!, max)
+    for (const row of peers) {
+      const host = peerHostOf(row.url)
+      const lineEl = el('div', 'wb-host-row')
+      // Health lamp (gh#24 semantics): recency alone lied — a FAILED fresh
+      // contact glowed green. Tiers by age: ≤60s live / ≤5min warm /
+      // beyond cold, overridden by the OUTCOME: a recent failure (≤5min)
+      // is red regardless of the live/warm band, and a never-contacted
+      // peer is the hollow unknown state.
+      const lamp = el('span', 'wb-host-lamp')
+      const last = row.lastContactAt
+      const age = last === undefined ? undefined : now - last
+      const ok = row.lastContactOk
+      if (age === undefined) lamp.classList.add('is-unknown')
+      else if (ok === false && age <= 5 * 60_000) lamp.classList.add('is-fail')
+      else if (age <= 60_000) lamp.classList.add('is-live')
+      else if (age <= 5 * 60_000) lamp.classList.add('is-warm')
+      else lamp.classList.add('is-cold')
+      lamp.title = last === undefined
+        ? '尚无接触记录'
+        : `最近接触 ${ageText(last, now)}${ok === false ? '（失败）' : ok === true ? '（成功）' : ''}`
+      lineEl.appendChild(lamp)
+      // Label: the peer's published name, host fallback.
+      lineEl.appendChild(el('span', 'wb-host-name')).textContent = row.name !== undefined && row.name !== '' ? row.name : host
+      // W-A badge: link class + verified mark.
+      const badge = el('span', `wb-host-badge ${row.link === 'linked' ? 'is-linked' : 'is-stranger'}`)
+      badge.textContent = `${row.link === 'linked' ? 'linked' : 'stranger'} ${row.verified === true ? '✓' : '✗'}`
+      // The tooltip follows the verified mark (gh#24): a linked ✗ must not
+      // claim a valid signature.
+      badge.title = row.link === 'linked'
+        ? `已建立运营者链接（互种或 canvas 引用）；${row.verified === true ? '验签有效' : '尚未持有验签通过的卡片'}`
+        : '无运营者关系（验签 ≠ 关系）'
+      lineEl.appendChild(badge)
+      // Version chip from the warm card.
+      if (row.version !== undefined && row.version !== '') {
+        lineEl.appendChild(el('span', 'wb-host-ver')).textContent = row.version
       }
-      pane.appendChild(hist)
-      const teams = topTeams(pending)
-      const teamLine = el('div', 'wb-pane-head')
-      teamLine.textContent = `债务队 Top${teams.length} · ${teams.map(([team, count]) => `${team} ${count}`).join(' · ')}`
-      pane.appendChild(teamLine)
+      lineEl.appendChild(el('span', 'wb-host-url mono')).textContent = host
+      lineEl.setAttribute('role', 'button')
+      lineEl.tabIndex = 0
+      lineEl.title = `${row.url} · score ${String(row.score ?? 0)}`
+      const drill = (): void => { openChat({ kind: 'peer', id: `peer-${host}`, title: row.name !== undefined && row.name !== '' ? row.name : host, sub: host, url: row.url }) }
+      lineEl.addEventListener('click', drill)
+      lineEl.addEventListener('keydown', ev => { if (ev.key === 'Enter' || ev.key === ' ') { ev.preventDefault(); drill() } })
+      pane.appendChild(lineEl)
     }
+  }
 
-    const table = el('div', 'wb-table')
-    for (const row of pending) {
-      // Owner signal (2026-10-21): the ledger is a RESULTS face — the brief
-      // is the primary copy, ids/teams/ages are muted forensics underneath.
-      // Exception-driven: only overdue (>1h) rows raise their voice; normal
-      // rows stay quiet so the debt that needs eyes stands out.
-      const overdue = now - row.startedAt > 60 * 60_000
-      const line = el('div', `wb-row wb-row-result${overdue ? ' wb-row-alert' : ''}`)
-      const briefText = row.brief ?? '（无摘要——派发未带 brief）'
-      const brief = el('span', 'wb-row-head')
-      brief.textContent = briefText
-      brief.title = briefText
-      line.appendChild(brief)
-      const badges: string[] = []
-      if (row.settleable === true) badges.push('可结算')
-      if (row.receiptExpected === false) badges.push('无回执债')
-      if (row.direction === 'inbound') badges.push('入站')
-      const meta = el('span', 'wb-row-meta-line')
-      meta.textContent = `${row.taskId} · ${row.team} · ${ageText(row.startedAt, now)}${badges.length > 0 ? ` · ${badges.join(' ')}` : ''}`
-      line.appendChild(meta)
-      table.appendChild(line)
-    }
-    pane.appendChild(table)
-    if (dead.length > 0) {
-      const deadHead = el('div', 'wb-pane-subhead')
-      deadHead.textContent = '死信（可清账）'
-      pane.appendChild(deadHead)
-      const deadTable = el('div', 'wb-table wb-table-dead')
-      for (const row of dead) {
-        // Same results-first shape, always exception-colored: dead letters
-        // ARE the alarm.
-        const line = el('div', 'wb-row wb-row-result wb-row-alert')
-        const deadBriefText = row.brief ?? '（无摘要）'
-        const deadBrief = el('span', 'wb-row-head')
-        deadBrief.textContent = deadBriefText
-        deadBrief.title = deadBriefText
-        line.appendChild(deadBrief)
-        const meta = el('span', 'wb-row-meta-line')
-        meta.textContent = `${row.taskId} · ${row.team} · ${ageText(row.deadAt, now)}${row.reason !== undefined && row.reason !== '' ? ` · ${row.reason}` : ''}`
-        line.appendChild(meta)
-        const btn = el('button', 'wb-btn')
-        btn.type = 'button'
-        btn.textContent = '清账'
-        btn.addEventListener('click', () => {
-          btn.disabled = true
-          void deps.abandon(row.taskId, 'workbench dead-letter cleanup').then(ok => {
-            btn.disabled = false
-            btn.textContent = ok ? '已清' : '失败'
-          })
-        })
-        line.appendChild(btn)
-        deadTable.appendChild(line)
-      }
-      pane.appendChild(deadTable)
+  // ── Ledger pane (wb-ledger) ──
+  function renderLedger(): void {
+    if (last === null) { ledgerPane.replaceChildren(); railTabs.setBadge('ledger', ''); return }
+    const state = last
+    const resolve = (team: string): ChatTarget | undefined => {
+      const session = (state.sessions ?? []).find(row => row.team === team)
+      if (session !== undefined) return { kind: 'session', id: session.id, title: displayName(session), sub: session.team, team: session.team, live: session.live }
+      const remote = (state.remote ?? []).find(row => row.team === team)
+      if (remote !== undefined) return { kind: 'remote', team: remote.team, title: displayName(remote), sub: remote.team, row: remote }
+      return undefined
     }
+    const out = paintLedger(ledgerPane, {
+      state,
+      now: deps.now(),
+      abandon: (taskId, reason) => deps.abandon(taskId, reason),
+      canOpenTeam: (team) => resolve(team) !== undefined,
+      openTeam: (team) => {
+        const target = resolve(team)
+        if (target === undefined) return false
+        openChat(target)
+        return true
+      },
+    })
+    railTabs.setBadge('ledger', out.badge, out.tone)
   }
 
   // ── Activity pane ──
@@ -840,7 +648,7 @@ export function createWorkbench(deps: WorkbenchDeps): Workbench {
     if (last === null) return
     const now = deps.now()
     const flights = last.inFlight ?? []
-    sectionCounts.get('activity')!.textContent = `${flights.length}+${last.activity?.length ?? 0}`
+    railTabs.setBadge('activity', flights.length > 0 ? String(flights.length) : '', flights.length > 0 ? 'accent' : undefined)
     const head = el('div', 'wb-pane-head')
     head.textContent = `在途 ${flights.length} · 活动 ${last.activity?.length ?? 0}`
     pane.appendChild(head)
@@ -881,23 +689,24 @@ export function createWorkbench(deps: WorkbenchDeps): Workbench {
   function planActions(state: StateBody): Array<{ severity: 'high' | 'normal'; text: string; brief?: string }> {
     const now = deps.now()
     const actions: Array<{ severity: 'high' | 'normal'; text: string; brief?: string }> = []
-    const dead = state.tasksDead ?? []
-    if (dead.length > 0) {
-      actions.push({ severity: 'high', text: `清账 ${dead.length} 条死信（目标早已离开或死信化，无回执可期）` })
+    // One definition with the 台账 tab: fire-forget expiries are bookkeeping,
+    // not dead letters (review L1), and only OUR stale sends are nudgeable.
+    const facts = ledgerFacts(state, now)
+    if (facts.deadLetters.length > 0) {
+      actions.push({ severity: 'high', text: `清账 ${facts.deadLetters.length} 条死信（目标早已离开或死信化，无回执可期）` })
     }
-    for (const row of state.tasks ?? []) {
-      const age = now - row.startedAt
-      if (age > 60 * 60_000 && row.settleable === true) {
-        // Quote the original ask: a nudge that only repeats a task id makes
-        // the target re-derive WHAT was owed, and the target is exactly the
-        // session that already failed to answer once.
-        const subject = row.brief === undefined || row.brief === '' ? '' : `「${row.brief}」`
-        actions.push({
-          severity: 'normal',
-          text: `催办 ${row.taskId} → ${row.team}（等待 ${ageText(row.startedAt, now)} 无回执）${subject}`,
-          brief: `a2a_route 催收回执：task ${row.taskId}（team ${row.team}）${subject === '' ? '' : `原任务「${row.brief}」`}已派发 ${ageText(row.startedAt, now)}，请回报结果或回执。`,
-        })
-      }
+    // (The old `age > 1h && settleable === true` never fired against a real
+    // host — the server's settleable means receipt-expected AND age < 1h.)
+    for (const row of facts.stale) {
+      // Quote the original ask: a nudge that only repeats a task id makes
+      // the target re-derive WHAT was owed, and the target is exactly the
+      // session that already failed to answer once.
+      const subject = row.brief === undefined || row.brief === '' ? '' : `「${row.brief}」`
+      actions.push({
+        severity: 'normal',
+        text: `催办 ${row.taskId} → ${row.team}（等待 ${ageText(row.startedAt, now)} 无回执）${subject}`,
+        brief: `a2a_route 催收回执：task ${row.taskId}（team ${row.team}）${subject === '' ? '' : `原任务「${row.brief}」`}已派发 ${ageText(row.startedAt, now)}，请回报结果或回执。`,
+      })
     }
     for (const row of state.sessions ?? []) {
       if (row.live !== true) {
@@ -920,7 +729,7 @@ export function createWorkbench(deps: WorkbenchDeps): Workbench {
     const pane = clear(planPane)
     if (last === null) return
     const actions = planActions(last)
-    sectionCounts.get('plan')!.textContent = `${actions.length}`
+    railTabs.setBadge('plan', actions.length > 0 ? String(actions.length) : '', actions.some(a => a.severity === 'high') ? 'danger' : undefined)
     const head = el('div', 'wb-pane-head')
     head.textContent = actions.length === 0 ? '网络健康——无待办行动' : `待办行动 ${actions.length}`
     pane.appendChild(head)
@@ -989,8 +798,125 @@ export function createWorkbench(deps: WorkbenchDeps): Workbench {
   }
 
   // ── Inspector (overlay card over the stage; bottom sheet on narrow) ──
+  // gh#34 owner panel state + render (the gear toggles; the inspector hosts).
+  let ownerPanelOpen = false
+  let ownerState: { teamJoinAllowlist: string[]; teamScopeInfo: boolean; announce: boolean; announceRestartPending: boolean } | null = null
+  function renderOwnerPanel(): void {
+    renderInspector()
+    if (!ownerPanelOpen) return
+    void deps.ownerSettingsRead?.().then(result => {
+      if (!ownerPanelOpen) return
+      if (result.ok !== true) { ownerState = null; renderInspector(); return }
+      ownerState = {
+        teamJoinAllowlist: result.teamJoinAllowlist ?? [],
+        teamScopeInfo: result.teamScopeInfo !== false,
+        announce: result.announce === true,
+        announceRestartPending: result.announceRestartPending === true,
+      }
+      renderInspector()
+    })
+  }
+  function renderOwnerPanelInto(box: HTMLElement): void {
+    const card = el('div', 'wb-card')
+    const head = el('div', 'wb-inspector-head')
+    head.appendChild(el('span', 'wb-inspector-title')).textContent = '主人设置'
+    const closeBtn = el('button', 'wb-icon-btn')
+    closeBtn.type = 'button'
+    closeBtn.setAttribute('aria-label', '关闭主人设置')
+    closeBtn.textContent = '✕'
+    closeBtn.addEventListener('click', () => { ownerPanelOpen = false; renderInspector() })
+    head.appendChild(closeBtn)
+    card.appendChild(head)
+    if (deps.ownerSettingsRead === undefined) {
+      const note = el('div', 'wb-hint')
+      note.textContent = '此宿主未提供主人设置面（旧版本）——升级后可用。'
+      card.appendChild(note)
+      box.appendChild(card)
+      return
+    }
+    if (ownerState === null) {
+      const note = el('div', 'wb-hint')
+      note.textContent = '读取中…'
+      card.appendChild(note)
+      box.appendChild(card)
+      return
+    }
+    const st = ownerState
+    // ① 入网白名单（精确团队名增删）
+    const alHead = el('div', 'wb-side-head')
+    alHead.textContent = '入网白名单（精确团队名）'
+    card.appendChild(alHead)
+    for (const name of st.teamJoinAllowlist) {
+      const row = el('div', 'wb-member-row')
+      row.appendChild(el('span', 'wb-member-label')).textContent = name
+      const del = el('button', 'wb-member-remove')
+      del.type = 'button'
+      del.textContent = '移除'
+      del.addEventListener('click', () => {
+        void deps.ownerSettingsWrite?.({ teamJoinAllowlist: st.teamJoinAllowlist.filter(n => n !== name) }).then(() => renderOwnerPanel())
+      })
+      row.appendChild(del)
+      card.appendChild(row)
+    }
+    const addForm = el('div', 'wb-member-add')
+    const input = el('input', 'wb-member-manual')
+    input.type = 'text'
+    input.placeholder = 'dsh/团队名（精确，无通配）'
+    input.setAttribute('aria-label', '新增白名单团队名')
+    const addBtn = el('button', 'wb-member-submit')
+    addBtn.type = 'button'
+    addBtn.textContent = '加入'
+    const doAdd = (): void => {
+      const v = input.value.trim()
+      if (v === '' || st.teamJoinAllowlist.includes(v)) return
+      void deps.ownerSettingsWrite?.({ teamJoinAllowlist: [...st.teamJoinAllowlist, v] }).then(() => renderOwnerPanel())
+    }
+    addBtn.addEventListener('click', doAdd)
+    input.addEventListener('keydown', ev => { if (ev.key === 'Enter') doAdd() })
+    addForm.append(input, addBtn)
+    card.appendChild(addForm)
+    // ② 可见性开关 + 精度固化文案
+    const tsHead = el('div', 'wb-side-head')
+    tsHead.textContent = '目录可见性（teamScopeInfo）'
+    card.appendChild(tsHead)
+    const tsRow = el('div', 'wb-member-row')
+    const tsBtn = el('button', 'wb-member-submit')
+    tsBtn.type = 'button'
+    tsBtn.textContent = st.teamScopeInfo ? '已开：仅显示已加入团队（点击放开为全舰队可见）' : '已关：全舰队可见（点击收窄为已加入团队）'
+    tsBtn.addEventListener('click', () => {
+      void deps.ownerSettingsWrite?.({ teamScopeInfo: !st.teamScopeInfo }).then(() => renderOwnerPanel())
+    })
+    tsRow.appendChild(tsBtn)
+    card.appendChild(tsRow)
+    const tsNote = el('div', 'wb-hint')
+    tsNote.textContent = '精度说明：teamScopeInfo 只管「目录显示范围」。关上它不会解锁任何通信准入——会话入网（S3）与目标级路由（F5）规则原样生效。'
+    card.appendChild(tsNote)
+    // ③ 发布开关（重启生效）
+    const anHead = el('div', 'wb-side-head')
+    anHead.textContent = '节点发布（announce）'
+    card.appendChild(anHead)
+    const anRow = el('div', 'wb-member-row')
+    const anBtn = el('button', 'wb-member-submit')
+    anBtn.type = 'button'
+    anBtn.textContent = st.announce ? '已开：本节点发布签名卡（点击关闭）' : '已关：本节点不发布（点击开启——重启宿主后生效）'
+    anBtn.addEventListener('click', () => {
+      void deps.ownerSettingsWrite?.({ announce: !st.announce }).then(() => renderOwnerPanel())
+    })
+    anRow.appendChild(anBtn)
+    card.appendChild(anRow)
+    if (st.announceRestartPending) {
+      const anNote = el('div', 'wb-hint')
+      anNote.textContent = '有 announce 变更待生效：重启宿主后按新配置发布。'
+      card.appendChild(anNote)
+    }
+    box.appendChild(card)
+  }
+
   function renderInspector(): void {
     const box = clear(inspectorBody)
+    // gh#34: the owner panel owns the inspector when open (selection cards
+    // yield; the gear closes it back).
+    if (ownerPanelOpen) { inspector.classList.add('is-open'); renderOwnerPanelInto(box); return }
     inspector.classList.toggle('is-open', selection !== undefined)
     if (selection === undefined) return
     const sel = selection
@@ -1075,6 +1001,14 @@ export function createWorkbench(deps: WorkbenchDeps): Workbench {
       }
       let remoteLabeled = false
       for (const remote of last?.remote ?? []) {
+        // gh#37: only zone/id8 HANDLES are addable members — a bare zone row
+        // (the peer's own team card, e.g. 'dsh') fails the backend shape
+        // gate and the old picker offered it anyway: the owner clicked 远端,
+        // got refused, and read the feature as broken. Rows without a '/'
+        // are skipped; when the directory carries no handles at all the
+        // hint explains why (unlinked peers serve the minimal card, which
+        // carries no session teams) instead of offering dead options.
+        if (!remote.team.includes('/')) continue
         if (memberIds.has(remote.team)) continue
         if (!remoteLabeled) {
           pick.appendChild(new Option('远端会话队（目录卡片）…', '', true, false))
@@ -1082,11 +1016,14 @@ export function createWorkbench(deps: WorkbenchDeps): Workbench {
         }
         pick.appendChild(new Option(`${displayName(remote)} — 远端`, remote.team))
       }
+      if (!remoteLabeled) {
+        pick.appendChild(new Option('（暂无可拉入的远端会话队——见下方说明）', '', true, false))
+      }
       if (keep !== '' && Array.from(pick.options).some(option => option.value === keep)) pick.value = keep
       card.appendChild(canvasForm.form)
       const hint = el('div', 'wb-hint')
       hint.textContent =
-        '成员由人类在此手工分配（agent 不可自组队）。远端成员走对端目录路由，不做本机冷唤醒；地址由目录在派发时重解析。'
+        '成员由人类在此手工分配（agent 不可自组队）。远端成员走对端目录路由，不做本机冷唤醒；地址由目录在派发时重解析。远端下拉只列 zone/id8 会话句柄——若为空，说明目录里还没有已链接对端的会话队（未链接的对端只给最小卡）；此时可在输入框手输句柄（如 dsh/xxxxxxxx）先把人拉进来，句柄本身即链接手势。'
       card.appendChild(hint)
       // Quick dispatch targets the canvas ROUTING team (0.6.9): local tiers
       // first, then the remote members in order — the seam's own priority.
@@ -1156,289 +1093,11 @@ export function createWorkbench(deps: WorkbenchDeps): Workbench {
     return wrap
   }
 
-  // ── Inline transcript (0.6.11, remote 0.6.15) ──
-  // The tail of a session's conversation log, read-only, on this page —
-  // local sessions read the host log face; remote sessions read through
-  // the proxy. Cached per cache key across the 3s poll remounts; the
-  // refresh button forces one re-read. Reading — not jumping — is the
-  // interaction.
-  type TranscriptState = { ok: boolean; messages?: Array<{ role: string; text: string }>; error?: string } | undefined
-
-  function transcriptBlock(cacheKey: string, load: () => Promise<TranscriptState>): HTMLElement {
-    const block = el('div', 'wb-transcript')
-    const head = el('div', 'wb-side-head')
-    // Owner signal (2026-10-21): log reading is the SEAT's forensics face —
-    // it defaults to a collapsed detail (展开 once per transcript; the
-    // expansion persists across the 3s poll remounts). The owner reads
-    // results in the ledger; seats click 展开 when they need the record.
-    const expand = el('button', 'wb-transcript-refresh')
-    expand.type = 'button'
-    const paintExpand = (): void => {
-      expand.textContent = expandedTranscripts.has(cacheKey) ? '收起取证' : '展开取证'
-    }
-    expand.addEventListener('click', () => {
-      if (expandedTranscripts.has(cacheKey)) expandedTranscripts.delete(cacheKey)
-      else expandedTranscripts.add(cacheKey)
-      paintExpand()
-      body.classList.toggle('is-folded', !expandedTranscripts.has(cacheKey))
-      if (expandedTranscripts.has(cacheKey)) settle()
-    })
-    paintExpand()
-    head.appendChild(expand)
-    head.appendChild(el('span', 'wb-transcript-title')).textContent = '最近对话'
-    const refresh = el('button', 'wb-transcript-refresh')
-    refresh.type = 'button'
-    refresh.textContent = '刷新'
-    head.appendChild(refresh)
-    block.appendChild(head)
-    const body = el('div', 'wb-transcript-body')
-    if (!expandedTranscripts.has(cacheKey)) body.classList.add('is-folded')
-    block.appendChild(body)
-    // 0.6.17 chat-UI conventions: the reading position survives the 3s poll
-    // remount (scroll captured on scroll, restored after every paint), and a
-    // FIRST successful load lands on the newest turn (bottom) like every
-    // chat surface. Refresh explicitly re-lands on the bottom.
-    let landed = transcriptScroll.has(cacheKey)
-    let landOnBottom = !landed
-    const settle = (): void => {
-      if (landOnBottom) {
-        body.scrollTop = body.scrollHeight
-        landOnBottom = false
-        landed = true
-      } else if (transcriptScroll.has(cacheKey)) {
-        body.scrollTop = transcriptScroll.get(cacheKey) ?? 0
-      }
-    }
-    body.addEventListener('scroll', () => {
-      if (body.scrollTop > 0 || landed) transcriptScroll.set(cacheKey, body.scrollTop)
-    })
-    const paint = (state: TranscriptState): void => {
-      body.replaceChildren()
-      if (state === undefined) {
-        body.appendChild(el('div', 'wb-muted')).textContent = '读取中…'
-        return
-      }
-      if (state.ok !== true || state.messages === undefined) {
-        body.appendChild(el('div', 'wb-muted')).textContent = `无法读取（${state.error ?? '未知错误'}）`
-        return
-      }
-      if (state.messages.length === 0) {
-        body.appendChild(el('div', 'wb-muted')).textContent = '暂无对话记录'
-        return
-      }
-      for (const message of state.messages) {
-        const row = el('div', `wb-transcript-row wb-transcript-${message.role === 'user' ? 'user' : 'assistant'}`)
-        row.appendChild(el('span', 'wb-transcript-role')).textContent = message.role === 'user' ? '问' : '答'
-        row.appendChild(el('span', 'wb-transcript-text')).textContent = message.text
-        body.appendChild(row)
-      }
-      // Scroll writes only stick on ATTACHED elements: the synchronous
-      // cache-hit path paints before the block joins the DOM, so the
-      // settle must run on the next frame, after append + layout.
-      requestAnimationFrame(() => {
-        if (body.isConnected) settle()
-      })
-    }
-    const run = (force: boolean): void => {
-      if (force) landOnBottom = true
-      if (!force && transcriptCache.has(cacheKey)) {
-        paint(transcriptCache.get(cacheKey))
-        return
-      }
-      transcriptCache.set(cacheKey, undefined)
-      paint(undefined)
-      void load().then(result => {
-        transcriptCache.set(cacheKey, result)
-        // The poll may have remounted the drawer since; only the live
-        // body repaints, the cache carries the result to the next mount.
-        if (body.isConnected) paint(result)
-      })
-    }
-    refresh.addEventListener('click', () => run(true))
-    run(false)
-    return block
-  }
-
-  function localTranscript(id: string): HTMLElement {
-    return transcriptBlock(`local:${id}`, async () => await deps.sessionLog?.(id) ?? { ok: false, error: 'sessionLog unavailable' })
-  }
-
-  function remoteTranscript(cacheKey: string, query: { team?: string; peer?: string; id?: string }): HTMLElement {
-    return transcriptBlock(cacheKey, async () => await deps.remoteSessionLog?.(query) ?? { ok: false, error: 'remoteSessionLog unavailable' })
-  }
-
-  /** Peer-host session listing (0.6.15): the list face of /a2a/log through
-   *  the proxy — recent readable sessions on that peer, click to drill. */
-  function peerLogList(url: string): HTMLElement {
-    const block = el('div', 'wb-transcript')
-    const head = el('div', 'wb-side-head')
-    head.textContent = '对端最近会话'
-    block.appendChild(head)
-    const body = el('div', 'wb-transcript-body')
-    block.appendChild(body)
-    const cacheKey = `peerlist:${url}`
-    const paint = (state: { ok: boolean; sessions?: Array<{ id: string; sizeBytes: number }>; error?: string } | undefined): void => {
-      body.replaceChildren()
-      if (state === undefined) {
-        body.appendChild(el('div', 'wb-muted')).textContent = '读取中…'
-        return
-      }
-      if (state.ok !== true || state.sessions === undefined) {
-        body.appendChild(el('div', 'wb-muted')).textContent = `无法读取（${state.error ?? '未知错误'}）`
-        return
-      }
-      if (state.sessions.length === 0) {
-        body.appendChild(el('div', 'wb-muted')).textContent = '对端没有可读会话'
-        return
-      }
-      const fmtSize = (n: number): string => n >= 1_000_000 ? `${(n / 1_000_000).toFixed(1)} MB` : n >= 1_000 ? `${Math.round(n / 1_000)} KB` : `${n} B`
-      for (const row of state.sessions) {
-        const item = el('button', 'wb-member-row')
-        item.type = 'button'
-        item.appendChild(el('span', 'wb-chat-dot is-cold')).textContent = '❐'
-        item.appendChild(el('span', 'wb-item-label')).textContent = `…${row.id.slice(-12)} · ${fmtSize(row.sizeBytes)}`
-        item.addEventListener('click', () => {
-          if (chatTarget?.kind === 'peer') chatTarget.picked = row.id
-          renderChat()
-        })
-        body.appendChild(item)
-      }
-    }
-    if (peerListCache.has(cacheKey)) paint(peerListCache.get(cacheKey))
-    else {
-      paint(undefined)
-      void deps.remoteSessionLog?.({ peer: url }).then(result => {
-        peerListCache.set(cacheKey, result)
-        if (body.isConnected) paint(result)
-      })
-    }
-    return block
-  }
-
-  // ── Node chat drawer (0.6.13) ──
-  // The right-side reading face. The transcript block is cached per id, so
-  // re-rendering across the 3s poll is cheap; the dispatch form has its own
-  // cache slot so the inspector's team and the chat's can coexist.
-  function closeChat(): void {
-    chatTarget = null
-    chatForm = null
-    chat.classList.remove('is-open')
-  }
-
   function openChat(target: ChatTarget): void {
-    chatTarget = target
-    // Keep the chat form only when it belongs to the same session team.
-    const team = target.kind === 'session' || target.kind === 'remote' ? target.team : undefined
-    if (chatForm !== null && chatForm.team !== team) chatForm = null
-    // 0.6.17: focus the composer ONCE per open — never on poll remounts,
-    // which would steal focus every 3s (the focus bug the owner hit).
-    chatFocusPending = true
-    renderChat()
-    chat.classList.add('is-open')
+    chat.open(target)
     root.classList.remove('is-rail-open')
   }
 
-  /** 0.6.17 focus law: the 3s poll rebuilds the drawer, and MOVING a
-   *  focused node (re-append) blurs it in every browser — the composer
-   *  would lose the caret mid-typing. Capture focus + selection around the
-   *  face render and restore it on the same node after (cached nodes come
-   *  back; throwaway nodes just lose focus as before). */
-  function renderChat(): void {
-    const activeBefore = document.activeElement
-    const focusWasInside = activeBefore instanceof HTMLElement && chatBody.contains(activeBefore)
-    const selection = activeBefore instanceof HTMLTextAreaElement || activeBefore instanceof HTMLInputElement
-      ? { start: activeBefore.selectionStart, end: activeBefore.selectionEnd }
-      : undefined
-    renderChatFace()
-    if (!focusWasInside || !(activeBefore instanceof HTMLElement) || !chatBody.contains(activeBefore)) return
-    activeBefore.focus({ preventScroll: true })
-    if (selection !== undefined && activeBefore instanceof HTMLTextAreaElement) {
-      activeBefore.setSelectionRange(selection.start, selection.end)
-    }
-  }
-
-  function renderChatFace(): void {
-    const t = chatTarget
-    if (t === null) return
-    chatDot.className = `wb-chat-dot ${t.kind === 'peer' ? 'is-peer' : t.kind === 'log' || t.kind === 'remote' || t.live === false ? 'is-cold' : 'is-live'}`
-    chatTitle.textContent = t.title
-    chatSub.textContent = t.sub
-    clear(chatBody)
-    if (t.kind === 'peer') {
-      // 0.6.15: the peer host is readable through the proxy — list its
-      // recent sessions, then drill into one. Without the proxy dep the
-      // honest where-the-records-live note stays.
-      const url = t.url ?? (t.title.startsWith('http') ? t.title : '')
-      if (url === '' || deps.remoteSessionLog === undefined) {
-        const note = el('div', 'wb-chat-note')
-        note.textContent = `对端主机节点（${t.sub}）—— 会话记录存放在对端机器上，本页只读本机会话日志。`
-        chatBody.appendChild(note)
-        return
-      }
-      const note = el('div', 'wb-chat-note')
-      note.textContent = '对端主机节点 —— 以下会话列表经本机代理从对端 /a2a/log 读取。'
-      chatBody.appendChild(note)
-      if (t.picked !== undefined) {
-        const back = el('button', 'wb-transcript-refresh')
-        back.type = 'button'
-        back.textContent = '← 返回会话列表'
-        back.addEventListener('click', () => {
-          if (chatTarget?.kind === 'peer') chatTarget.picked = undefined
-          renderChat()
-        })
-        chatBody.appendChild(back)
-        chatBody.appendChild(remoteTranscript(`peer:${url}:${t.picked}`, { peer: url, id: t.picked }))
-      } else {
-        chatBody.appendChild(peerLogList(url))
-      }
-      return
-    }
-    if (t.kind === 'remote') {
-      // Card metadata the old inspector face carried (origin/via/workspace),
-      // kept readable in the drawer head area.
-      const meta = el('div')
-      if (t.row?.origin !== undefined) textRow(meta, '来源', t.row.origin)
-      if (t.row?.via !== undefined) textRow(meta, '经', t.row.via)
-      if (t.row?.workspace !== undefined) textRow(meta, '工作区', t.row.workspace)
-      if (meta.childElementCount > 0) chatBody.appendChild(meta)
-      if (deps.remoteSessionLog !== undefined) {
-        const note = el('div', 'wb-chat-note')
-        note.textContent = '远端会话节点 —— 经本机代理从对端 /a2a/log 读取最近对话。'
-        chatBody.appendChild(note)
-        chatBody.appendChild(remoteTranscript(`remote:${t.team}`, { team: t.team }))
-      } else {
-        const note = el('div', 'wb-chat-note')
-        note.textContent = '远端节点的对话记录在对端机器上；本页的代理读取面未启用。'
-        chatBody.appendChild(note)
-      }
-    } else {
-      if (t.kind === 'log') {
-        const note = el('div', 'wb-chat-note')
-        note.textContent = '只读日志 —— 此会话当前不在网络目录（可能已归档或未入网）。'
-        chatBody.appendChild(note)
-      }
-      if (deps.sessionLog !== undefined) chatBody.appendChild(localTranscript(t.id))
-    }
-    const dispatchTeam = t.kind === 'session' || t.kind === 'remote' ? t.team : undefined
-    if (dispatchTeam !== undefined && dispatchTeam !== '' && deps.dispatchQuick !== undefined) {
-      const wrap = el('div', 'wb-dispatch')
-      const head = el('div', 'wb-side-head')
-      head.textContent = '发送'
-      wrap.appendChild(head)
-      if (chatForm === null) chatForm = { team: dispatchTeam, ...buildDispatchForm(dispatchTeam) }
-      wrap.appendChild(chatForm.form)
-      chatBody.appendChild(wrap)
-      if (chatFocusPending) {
-        chatFocusPending = false
-        // preventScroll: focusing must not fight the transcript's own
-        // landing scroll (bottom on first read).
-        chatForm.text.focus({ preventScroll: true })
-      }
-    } else {
-      chatFocusPending = false
-    }
-  }
-
   /** Board picks (0.6.13): resolve a node id against the latest state. */
   function openNodeChat(id: string): void {
     if (last === null) return
@@ -1467,10 +1126,15 @@ export function createWorkbench(deps: WorkbenchDeps): Workbench {
     const box = clear(headerStats)
     if (last === null) return
     const alerts: Array<{ text: string; tone: 'warn' | 'danger'; title: string }> = []
-    const dead = last.tasksDead?.length ?? 0
-    if (dead > 0) alerts.push({ text: `死信 ${dead}`, tone: 'danger', title: '超过 24h TTL 仍未结算的任务，需在台账清账' })
-    const stale = last.tasksStaleCount ?? 0
-    if (stale > 0) alerts.push({ text: `陈旧 ${stale}`, tone: 'warn', title: '≥1h 无回执的旧账（含免回执行），到 24h TTL 自动转死信' })
+    // Same definitions as the 台账 tab (wb-ledger ledgerFacts): fire-forget
+    // expiries are not dead letters, receiptless rows are never stale.
+    const facts = ledgerFacts(last, deps.now())
+    const dead = facts.deadLetters.length
+    if (dead > 0) alerts.push({ text: `死信 ${dead}`, tone: 'danger', title: '超过 24h TTL 仍未结算的任务（unconsumed），需在台账清账' })
+    const stale = facts.stale.length
+    if (stale > 0) alerts.push({ text: `陈旧 ${stale}`, tone: 'warn', title: '我方派发、要回执、已等待 ≥1h 仍未回执（可催办；免回执行不算）' })
+    const owed = facts.owedOverdue.length
+    if (owed > 0) alerts.push({ text: `欠回执 ${owed}`, tone: 'warn', title: '对方投递给本机、已等待本机回执超过 1 小时' })
     const conflicts = last.idempotency?.conflicts ?? 0
     if (conflicts > 0) alerts.push({ text: `幂等冲突 ${conflicts}`, tone: 'danger', title: '同一幂等键对应了不同载荷，需人工核查' })
     const repair = (last.reconcile?.rows ?? []).filter(row => row.needsRepair === true).length
@@ -1495,6 +1159,7 @@ export function createWorkbench(deps: WorkbenchDeps): Workbench {
       logRowsBusy = true
       deps.sessionLogList().then(result => {
         logRows = result.ok && result.sessions !== undefined ? result.sessions : []
+        logTotal = result.ok ? result.count : undefined
       }).catch(() => {}).finally(() => {
         logRowsBusy = false
         renderSidebar()
@@ -1503,17 +1168,17 @@ export function createWorkbench(deps: WorkbenchDeps): Workbench {
     renderHeader()
     renderSidebar()
     renderDraftTargets()
+    renderHosts()
     renderLedger()
-    // 0.6.13: an open chat drawer re-renders against the fresh state (title
-    // freshness + the transcript block's per-id cache answers instantly).
-    if (chatTarget !== null) renderChat()
+    // The open chat drawer refreshes in place (head + receipt statuses); its
+    // thread and composer are never rebuilt by the poll.
+    chat.update(state)
     renderActivity()
     renderPlan()
     renderInspector()
     // Mode is availability-derived every poll: canvas face down → data mode,
     // the board deactivates and the panes return to the stage stack.
     syncMode()
-    syncSections()
   }
 
   function selectTab(key: WorkbenchTab): void {
@@ -1521,8 +1186,7 @@ export function createWorkbench(deps: WorkbenchDeps): Workbench {
       syncMode()
       return
     }
-    collapsed.delete(key)
-    syncSections()
+    railTabs.select(key)
   }
 
   update(null)