@nelsonlongxiang/dsh-open-a2a-net 0.6.28 → 0.6.30

package/lib/index.js

@@ -28,22 +28,20 @@ export function resolveCallerLabel(input) {
 }
 import { signCard, verifyCard } from "./card.js";
 import { GroupStore } from "./group-store.js";
-import { CanvasStore, isRemoteMemberRef, validRemoteMemberRef } from "./canvas-store.js";
+import { CanvasStore, isRemoteMemberRef } from "./canvas-store.js";
 import { decodeSessionLog, extractTranscript, TRANSCRIPT_DEFAULT_LIMIT, TRANSCRIPT_MAX_FILE_BYTES, TRANSCRIPT_MAX_LIMIT } from "./session-transcript.js";
 import { LayoutStore } from "./layout-store.js";
-import { fileURLToPath } from 'node:url';
 import { JoinedSessions } from "./joined-store.js";
 import { ExposureStore } from "./exposure-store.js";
-import { applyOwnerSettings } from "./owner-settings.js";
 import { CliDepositStore } from "./cli-deposit.js";
 import { TeamMembershipStore } from "./team-store.js";
 import { PeerStore } from "./peer-store.js";
 import { SelfReferralFilter } from "./self-suppress.js";
-import { resolveStageMount } from "./stage-mount.js";
-import { TaskLedger, TASK_STALE_TTL_MS, SUMMARY_CAP, ARCHIVE_CAP, archivedEndedBy, briefOf } from "./task-ledger.js";
+import { TaskLedger, TASK_STALE_TTL_MS, SUMMARY_CAP, briefOf } from "./task-ledger.js";
 import { formatReceipt, parseReceipt } from "./receipt.js";
 import { runReceiptLadder } from "./receipt-ladder.js";
 import { IdempotencyStore, WIRE_ERROR_IDEMPOTENCY_CONFLICT, WIRE_ERROR_REPLAY_REJECTED, peerPayloadFingerprint } from "./idempotency-store.js";
+import { createFloodGuard } from "./flood-guard.js";
 import { resolveZone } from "./zone.js";
 import { registerA2aNetworkSkill } from "./skill-registration.js";
 import s from '@deepseek-ai/schemastery';
@@ -51,7 +49,9 @@ import { defineTool } from '@deepseek-ai/dsh-tools';
 import { MessageId } from '@deepseek-ai/dsh-llm';
 import { SessionId } from '@deepseek-ai/dsh-session';
 import { A2aClient } from "./a2a-client.js";
-import { MAX_LAYOUT_BODY_BYTES, WIRE_ERROR_PAYLOAD_TOO_LARGE, withinRouteBodyCap } from "./transport-caps.js";
+import { WIRE_ERROR_PAYLOAD_TOO_LARGE } from "./transport-caps.js";
+import { registerAdminFaces } from "./faces/admin.js";
+import { registerWireFaces } from "./faces/wire.js";
 import { NATIVE_TEAMS_A2A_FACE_KEY } from "./teams-bridge.js";
 export { A2aClient } from "./a2a-client.js";
 export { NATIVE_TEAMS_A2A_FACE_KEY } from "./teams-bridge.js";
@@ -79,11 +79,13 @@ export const Config = s.object({
     wakeReconcileBackoffBaseMs: s.number().default(5_000),
     wakeReconcileMaxBackoffMs: s.number().default(600_000),
     /**
-     * S4: the joinable-team curation list. A model calling a2a_team_join may
-     * only declare membership in a team matching one of these patterns — an
-     * exact name or a trailing-`*` prefix (`dsh/canvas/*`). Default empty:
-     * the owner's no-self-join ruling, institutionalized as default-deny;
-     * a refused join carries guidance instead of failing silently.
+     * S4 (gh#11 N7): the joinable-team curation list. A model calling
+     * a2a_team_join may only declare membership in a team with an EXACT
+     * entry here — trailing-`*` patterns are readable but authorize nothing
+     * (no mint rights: a pattern pre-authorizing every future name under it
+     * would let a model mint teams nobody created). Default empty: the
+     * owner's no-self-join ruling, institutionalized as default-deny; a
+     * refused join carries guidance instead of failing silently.
      */
     teamJoinAllowlist: s.array(s.string()).default([]),
     /**
@@ -365,10 +367,10 @@ export function apply(ctx, config) {
      * @param res - the response for the malformed-body rejection.
      * @param use - receives the parsed body.
      */
-    // Wire code for boundary-refused corrupted text. -32004 is intentionally
-    // left as a reservation gap for the client-abort telemetry family seen in
-    // the wild; this lands at -32005 (cluster-C error-code registry).
-    const WIRE_ERROR_TEXT_CORRUPTED = -32005;
+    // Wire code for boundary-refused corrupted text (cluster-C error-code
+    // registry): -32004 belongs to the route verdict, -32005 to the client's
+    // DELIVERED-UNSETTLED family, so the corrupted-text guard owns -32006.
+    const WIRE_ERROR_TEXT_CORRUPTED = -32006;
     /**
      * Boundary guard for undecodable text (consumed by the readJsonBody
      * guard): U+FFFD is produced by a lossy decoder upstream of us — the bytes
@@ -586,8 +588,18 @@ export function apply(ctx, config) {
         if (teamAuditRing.length > 32)
             teamAuditRing.splice(0, teamAuditRing.length - 32);
     };
+    /**
+     * Recent routing activity for the network panel: a bounded ring of the
+     * latest inbound and outbound route outcomes, newest last. The state route
+     * serves a copy; the panel derives unread badges from new entries.
+     */
     const ACTIVITY_CAP = 20;
     const recentActivity = [];
+    /**
+     * In-flight outbound routes: a route registers on dial and unregisters on
+     * settlement, so the panel can show collaboration in progress ("who is
+     * waiting on whom") — the state route serves a snapshot.
+     */
     const inFlightRoutes = new Map();
     let inFlightSeq = 0;
     const beginRoute = (team, peer) => {
@@ -695,6 +707,7 @@ export function apply(ctx, config) {
     // executes at most once inside the 24h window — same-key replays answer
     // refused-but-idempotent, same-key different-payload answers conflict.
     const idempotencyStore = new IdempotencyStore(join(home, 'a2a', 'idempotency.json'));
+    const refuseIfFlooded = createFloodGuard(idempotencyStore, recordActivity);
     // Unmasked-identity suppression: gossip mirrors peer lists back and forth,
     // so a URL whose fetch just proved it serves this node — or an already
     // tracked node (an alias spelling) — keeps coming home as an inbound
@@ -1413,715 +1426,21 @@ export function apply(ctx, config) {
             });
         };
         whenWebServerSettled((webServer) => {
-            ctx.effect(() => webServer.register({
-                kind: 'exact',
-                path: '/__dsh_a2a/state',
-                handler: controlRoute((_req, res) => {
-                    void (async () => {
-                        const t0 = Date.now();
-                        // The panel polls this route: pruning here makes a mid-session
-                        // archive leave the network within one poll interval, no restart
-                        // required.
-                        pruneArchivedJoins();
-                        pruneCanvasMemberships();
-                        const tPrune = Date.now();
-                        const assignments = groupStore.all();
-                        const groupOf = (id) => {
-                            const name = assignments[id];
-                            return name === undefined ? undefined : name;
-                        };
-                        // Archived sessions are closed: the GUI hides them everywhere, so
-                        // the panel must not re-list them as join surface rows — joined
-                        // or not. (The prune above already took their join intents; this
-                        // covers never-joined live roots and any intent a restart left.)
-                        const isArchived = archivedSessionFilter();
-                        const tFacts0 = Date.now();
-                        const sessions = [...liveRoots.values()]
-                            .filter(agent => isArchived?.(String(agent.id)) !== true)
-                            .map(agent => ({
-                            id: String(agent.id),
-                            label: sessionLabelOf(agent),
-                            team: sessionTeamOf(agent),
-                            ...nodeMetadataOf(agent),
-                            joined: sessionNodes.has(String(agent.id)),
-                            live: true,
-                            teams: [...teamMemberships.teamsOf(String(agent.id))],
-                            // #19 D3: the session's exposure tier (linked floor /
-                            // fleet opt-up) — readable on the state face.
-                            exposure: exposureStore.tierOf(String(agent.id)),
-                            ...(canvasStore.teamsOf(String(agent.id)).length > 0 ? { canvasTeams: [...canvasStore.teamsOf(String(agent.id))] } : {}),
-                            ...(groupOf(String(agent.id)) !== undefined ? { group: groupOf(String(agent.id)) } : {}),
-                        }));
-                        // Cold joined sessions: a remembered intent whose Agent is not
-                        // back yet (host restarted, session not opened). The row carries
-                        // no facts — the Web client merges the session title from its
-                        // own list — and wakes through the normal session-open path,
-                        // after which the remount above joins it automatically.
-                        // Cold rows only exist when a joined intent lacks a live agent;
-                        // with all intents live (or none) the persistence layer is never
-                        // asked and the handler stays synchronous to its response.
-                        const tFacts1 = Date.now();
-                        const coldCandidates = joinedSessions.list().filter(id => !liveRoots.has(id));
-                        const persistence = ctx.get('sessionPersistence');
-                        const persisted = persistence !== undefined && coldCandidates.length > 0 ? await coldJoinedIds() : new Set();
-                        const tCold = Date.now();
-                        for (const id of coldCandidates) {
-                            // Archived intents are retained on disk (an archived window is
-                            // transient; the 3081 wake defect came from deleting them), so
-                            // the join surface must skip them here instead.
-                            if (!persisted.has(id) || isArchived?.(id) === true)
-                                continue;
-                            sessions.push({
-                                id,
-                                label: `${session}-${id8(id)}`,
-                                team: `${config.team}/${id8(id)}`,
-                                joined: true,
-                                live: false,
-                                teams: [...teamMemberships.teamsOf(id)],
-                                ...(canvasStore.teamsOf(id).length > 0 ? { canvasTeams: [...canvasStore.teamsOf(id)] } : {}),
-                                ...(groupOf(id) !== undefined ? { group: groupOf(id) } : {}),
-                            });
-                        }
-                        const body = JSON.stringify({
-                            nodes: true,
-                            version: PLUGIN_VERSION,
-                            sessions,
-                            groups: groupStore.list(),
-                            canvas: {
-                                teams: canvasStore.list().map(name => ({
-                                    name,
-                                    team: canvasTeamOf(name),
-                                    members: canvasStore.membersOf(name).map(id => {
-                                        // Dual shape: local members report this zone's join/live
-                                        // facts; remote refs are opaque team handles — the state
-                                        // face passes them through with remote:true for the
-                                        // workbench's member chips and pickers.
-                                        if (isRemoteMemberRef(id)) {
-                                            return { id, team: id, remote: true };
-                                        }
-                                        return {
-                                            id,
-                                            team: `${config.team}/${id8(id)}`,
-                                            joined: sessionNodes.has(id) || joinedSessions.has(id),
-                                            live: sessionNodes.has(id),
-                                        };
-                                    }),
-                                })),
-                            },
-                            host: lanIp === '' ? {} : { lanIp },
-                            // gh#20 W-C (host rail): each peer row also carries its display
-                            // name and version from the warm card (absent until a fetch),
-                            // and the last-contact timestamp for the health lamp. W-A's
-                            // link/verified ride along for the badge.
-                            peers: peerStore.list().map(url => {
-                                const card = cardCache.get(url)?.card;
-                                const lastContact = peerStore.lastContact(url);
-                                const lastContactOk = peerStore.lastContactOk(url);
-                                return {
-                                    url,
-                                    score: peerStore.score(url),
-                                    ...(card?.name !== undefined && card.name !== '' ? { name: card.name } : {}),
-                                    ...(typeof card?.version === 'string' && card.version !== '' ? { version: card.version } : {}),
-                                    ...(lastContact !== undefined ? { lastContactAt: lastContact } : {}),
-                                    ...(lastContactOk !== undefined ? { lastContactOk } : {}),
-                                    ...peerLinkState(url),
-                                };
-                            }),
-                            remote: (refreshRemoteRows(), (remoteRowsCache?.rows ?? []).map(row => {
-                                const canvasTeams = canvasStore.teamsOf(row.team);
-                                return canvasTeams.length > 0 ? { ...row, canvasTeams: [...canvasTeams] } : row;
-                            })),
-                            activity: recentActivity.slice(),
-                            inFlight: [...inFlightRoutes.values()].map(route => ({
-                                team: route.team,
-                                peer: route.peer,
-                                startedAt: route.startedAt,
-                            })),
-                            // Owed receipts: pending rows only — the cross-turn waits the
-                            // in-flight ring cannot show. Dead-lettered rows ride their own
-                            // list and settled ones just a count, all additive so the panel
-                            // keeps rendering plain owed rows until it learns the tiers.
-                            tasks: taskLedger.list()
-                                .filter(task => task.status === 'pending')
-                                .map(task => ({
-                                taskId: task.taskId, team: task.team, peer: task.peer, startedAt: task.startedAt, status: task.status,
-                                direction: task.direction ?? 'outbound', receiptExpected: task.receiptExpected !== false,
-                                // The dispatch brief rides every row: a task id and a team
-                                // say nothing about WHAT is owed — supervision cannot tell
-                                // a nudge from an abandon without it.
-                                ...(task.brief !== undefined ? { brief: task.brief } : {}),
-                                // C-ruling bucket split: a pending row is settleable while
-                                // it is young, expected, and answerable; past the stale
-                                // hour it is conversational noise waiting on the dead TTL.
-                                settleable: task.receiptExpected !== false && Date.now() - task.startedAt < 60 * 60_000,
-                            })),
-                            // C face: the stale/conversational tail as a count, so the
-                            // panel can render only truly settleable debt.
-                            tasksStaleCount: taskLedger.list().filter(task => task.status === 'pending' && (task.receiptExpected === false || Date.now() - task.startedAt >= 60 * 60_000)).length,
-                            tasksDead: taskLedger.list()
-                                .filter(task => task.status === 'dead')
-                                .map(task => ({ taskId: task.taskId, team: task.team, peer: task.peer, startedAt: task.startedAt, deadAt: task.deadAt ?? task.startedAt, reason: task.reason ?? 'unspecified', ...(task.brief !== undefined ? { brief: task.brief } : {}), ...(task.direction !== undefined ? { direction: task.direction } : {}) })),
-                            // gh#31: per-task outcomes for rows that LEFT the ledger — the
-                            // chat drawer used to guess (settled, abandoned or cancelled).
-                            // Bounded to the archive (≤64), newest first, with the
-                            // controlled-vocabulary verdict each row settled by.
-                            // gh#31 follow-up: archive() is already newest first (settles
-                            // prepend), so the projection keeps that order — the earlier
-                            // .reverse() served it oldest first. Each row also says HOW it
-                            // ended (endedBy: abandon and cancel both record outcome
-                            // 'abandoned', and so does a peer's own 'abandoned' receipt),
-                            // whether a receipt came after the caller ended it (late), and
-                            // its direction when known.
-                            archived: taskLedger.archive().slice(0, ARCHIVE_CAP).map(row => ({
-                                taskId: row.taskId,
-                                team: row.team,
-                                peer: row.peer,
-                                startedAt: row.startedAt,
-                                resolvedAt: row.resolvedAt,
-                                outcome: row.outcome ?? 'unclassified',
-                                endedBy: archivedEndedBy(row),
-                                ...(row.direction !== undefined ? { direction: row.direction } : {}),
-                                ...(row.lateReceiptAt !== undefined ? { late: true } : {}),
-                                ...(row.brief !== undefined ? { brief: row.brief } : {}),
-                                ...(row.summary !== undefined && row.summary !== '' ? { summary: row.summary.slice(0, 160) } : {}),
-                            })),
-                            archivedCount: taskLedger.archive().length,
-                            // Ledger density face: the settled archive split by verdict, so
-                            // the workbench can say WHICH way those rows settled instead of
-                            // just how many. Additive and bounded (outcome vocabulary is a
-                            // closed set); rows without an envelope outcome count as
-                            // 'unclassified' rather than being dropped.
-                            archivedSplit: (() => {
-                                const split = {};
-                                for (const row of taskLedger.archive()) {
-                                    const key = row.outcome ?? 'unclassified';
-                                    split[key] = (split[key] ?? 0) + 1;
-                                }
-                                return split;
-                            })(),
-                            // 0.5.36 observability: the idempotency window aggregate —
-                            // window occupancy, outcome split, and cumulative claim-verdict
-                            // counters (the data the UNIQUE-ization decision waits on).
-                            // Read-only; no fingerprints cross here (they are /a2a/query's
-                            // only auth material).
-                            idempotency: idempotencyStore.stats(),
-                            // gh#41 fleet planning: each tracked peer's published canvas
-                            // org (full-card canvasOrg) from the warm card cache — the
-                            // board renders REMOTE team frames from this. Absent until a
-                            // linked fetch warmed the card.
-                            peerOrg: peerStore.list().map(url => {
-                                const card = cardCache.get(url)?.card;
-                                const org = card?.canvasOrg;
-                                return Array.isArray(org)
-                                    ? { url, org: org.filter((e) => e !== null && typeof e === 'object')
-                                            .map(e => ({ name: typeof e.name === 'string' ? e.name : '', team: typeof e.team === 'string' ? e.team : '', members: Array.isArray(e.members) ? e.members.filter((m) => typeof m === 'string') : [] }))
-                                            .filter(e => e.team !== '') }
-                                    : { url, org: [] };
-                            }),
-                            // gh#9+gh#10 M1: envelope-absent deliveries during the
-                            // OriginClaim window — the operator watches this drain to
-                            // zero before closing the window.
-                            legacyInbound: legacyInboundCount,
-                            // F-observability: the boot prewarm's lifecycle — a dead or
-                            // skipped prewarm is the root shape behind "cold rows pile up
-                            // after restart" and must be readable, not a console rumor.
-                            prewarm: { ...prewarmStatus, failed: [...prewarmStatus.failed] },
-                            // F8 observability: reconciliation cadence, wake outcomes,
-                            // and per-row failure reasons with backoff and the parked
-                            // needs-repair state — the cold row's "why am I still cold".
-                            reconcile: { ...reconcileStatus, rows: [...reconcileStatus.rows] },
-                            // S1: flat node registry — local sessions and remote card
-                            // nodes in one table, zone-qualified team handles as the
-                            // stable cross-host addresses. Local ids are the session
-                            // UUIDs; remote ids are the publishing team handles. (The
-                            // `nodes` boolean above is the capability flag the panel
-                            // already consumes; this face rides its own key.)
-                            registry: {
-                                nodes: [
-                                    ...sessions.map(row => ({
-                                        id: String(row.id),
-                                        label: String(row.label ?? ''),
-                                        team: String(row.team ?? ''),
-                                        zone: config.team,
-                                        live: row.live === true,
-                                        joined: row.joined === true,
-                                        ...(typeof row.workspace === 'string' && row.workspace !== '' ? { workspace: row.workspace } : {}),
-                                        teams: [...teamMemberships.teamsOf(String(row.id))],
-                                    })),
-                                    ...(remoteRowsCache?.rows ?? []).map(row => ({
-                                        id: String(row.team),
-                                        label: String(row.name ?? ''),
-                                        team: String(row.team),
-                                        zone: String(row.team).split('/')[0] ?? config.team,
-                                        host: String(row.origin ?? ''),
-                                        ...(row.workspace !== undefined && row.workspace !== '' ? { workspace: row.workspace } : {}),
-                                        ...(row.legacy === true ? { legacy: true } : {}),
-                                        teams: [...(row.teams ?? [])],
-                                        remote: true,
-                                    })),
-                                ],
-                                // S2: local team rosters rebuilt from member declarations.
-                                teams: (() => {
-                                    const roster = new Map();
-                                    for (const entry of teamMemberships.list()) {
-                                        for (const team of entry.teams) {
-                                            const members = roster.get(team) ?? [];
-                                            members.push(entry.session);
-                                            roster.set(team, members);
-                                        }
-                                    }
-                                    return [...roster.entries()].map(([team, members]) => ({
-                                        team,
-                                        members,
-                                        live: members.filter(member => liveRoots.has(member)).length,
-                                    }));
-                                })(),
-                                // S4 audit face: join/leave attempts with outcomes — the
-                                // queryable half that rotating log lines cannot be.
-                                teamAudit: [...teamAuditRing],
-                            },
-                            // Unjoined-node reports: the one-way signal ring (design:
-                            // docs/design/unjoined-report-ingress.md), newest first.
-                            reports: [...reportRing].reverse(),
-                        });
-                        res.writeHead(200, {
-                            'Content-Type': 'application/json',
-                            'Content-Length': Buffer.byteLength(body),
-                            // Phase timing (ms since request start): prune / live-row facts /
-                            // cold-rows enumeration. Diagnostic for the poll-latency question.
-                            'X-A2A-Timing': `prune=${tPrune - t0};facts=${tFacts1 - tFacts0};cold=${tCold - tFacts1};total=${Date.now() - t0}`,
-                        });
-                        res.end(body);
-                    })();
-                }),
-            }), 'a2a: session-node state route');
-            ctx.effect(() => webServer.register({
-                kind: 'exact',
-                path: '/__dsh_a2a/join',
-                handler: controlRoute((req, res) => {
-                    readJsonBody(req, res, (body) => {
-                        const agent = typeof body.id === 'string' ? liveRoots.get(body.id) : undefined;
-                        if (agent === undefined) {
-                            const payload = JSON.stringify({ error: 'no live session with that id' });
-                            res.writeHead(404, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                            res.end(payload);
-                            return;
-                        }
-                        mountSessionNode(agent);
-                        joinedSessions.add(String(agent.id));
-                        const payload = JSON.stringify({ id: body.id, label: sessionLabelOf(agent), team: sessionTeamOf(agent) });
-                        res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                        res.end(payload);
-                    });
-                }),
-            }), 'a2a: session-node join route');
-            ctx.effect(() => webServer.register({
-                kind: 'exact',
-                path: '/__dsh_a2a/leave',
-                handler: controlRoute((req, res) => {
-                    readJsonBody(req, res, (body) => {
-                        const id = typeof body.id === 'string' ? body.id : '';
-                        if (id !== '')
-                            sessionNodes.delete(id);
-                        joinedSessions.remove(id);
-                        // Leaving the network leaves every canvas team too: membership
-                        // without join consent would be a routing backdoor. Team
-                        // roster declarations die the same way (S2 consistency).
-                        canvasStore.dropMember(id);
-                        teamMemberships.dropSession(id);
-                        const payload = JSON.stringify({ id });
-                        res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                        res.end(payload);
-                    });
-                }),
-            }), 'a2a: session-node leave route');
-            // gh#45 CLI 户口 control face (loopback/key gated like every write):
-            // publish (deposit a signed CLI card, ≤4h by ruling), revoke, list,
-            // and mailbox readout — the CLI polls this while alive.
-            ctx.effect(() => webServer.register({
-                kind: 'exact',
-                path: '/__dsh_a2a/cli-deposit',
-                handler: controlRoute((req, res) => {
-                    readJsonBody(req, res, (body) => {
-                        const action = body.action;
-                        let payload;
-                        if (action === 'publish') {
-                            const card = typeof body.card === 'string' ? body.card : '';
-                            const out = cliDeposits.deposit(card);
-                            payload = JSON.stringify(out.ok
-                                ? { ok: true, handle: out.handle, expiresAt: out.expiresAt, cardUrl: `${ownCardUrl}/a2a/cli/${encodeURIComponent(out.handle)}` }
-                                : { ok: false, error: out.error });
-                        }
-                        else if (action === 'revoke') {
-                            payload = JSON.stringify({ ok: cliDeposits.revoke(typeof body.handle === 'string' ? body.handle : '') });
-                        }
-                        else if (action === 'inbox') {
-                            const handle = typeof body.handle === 'string' ? body.handle : '';
-                            payload = JSON.stringify({ ok: true, mail: cliDeposits.readMail(handle) });
-                        }
-                        else {
-                            payload = JSON.stringify({ ok: true, deposits: cliDeposits.list().map(row => ({ handle: row.handle, name: row.name, depositedAt: row.depositedAt, expiresAt: row.expiresAt })) });
-                        }
-                        res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                        res.end(payload);
-                    });
-                }),
-            }), 'a2a: cli-deposit route');
-            // gh#41 fleet planning relay: the GUI asks THIS host to regulate a
-            // REMOTE peer's canvas team. The node key never leaves the server —
-            // the relay stamps the OriginClaim envelope and forwards to the
-            // peer's /a2a/canvas-op face; the peer's link gate authorizes.
-            ctx.effect(() => webServer.register({
-                kind: 'exact',
-                path: '/__dsh_a2a/fleet-canvas-op',
-                handler: controlRoute((req, res) => {
-                    readJsonBody(req, res, async (body) => {
-                        const { peer, op, name, id } = body;
-                        const peerUrl = typeof peer === 'string' ? peer : '';
-                        const opV = typeof op === 'string' ? op : '';
-                        const nameV = typeof name === 'string' ? name : '';
-                        const idV = typeof id === 'string' ? id : '';
-                        const send = (payload) => {
-                            res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                            res.end(payload);
-                        };
-                        if (peerUrl === '' || !/^https?:\/\//.test(peerUrl) || !['create', 'add-member', 'remove-member'].includes(opV) || (opV !== 'create' && nameV === '')) {
-                            send(JSON.stringify({ ok: false, error: 'peer (http url), op (create | add-member | remove-member), and name are required' }));
-                            return;
-                        }
-                        if (!peerStore.list().includes(peerUrl)) {
-                            send(JSON.stringify({ ok: false, error: `peer ${peerUrl} is not tracked — regulate tracked peers only` }));
-                            return;
-                        }
-                        try {
-                            const target = peerUrl.replace(/\/$/, '') + '/a2a/canvas-op';
-                            const reply = await globalThis.fetch(target, {
-                                method: 'POST',
-                                headers: { 'Content-Type': 'application/json', ...originClaimHeaders() },
-                                body: JSON.stringify({ op: opV, name: nameV, ...(opV !== 'create' ? { id: idV } : {}) }),
-                                signal: AbortSignal.timeout(15_000),
-                            });
-                            const raw = await reply.text();
-                            try {
-                                const out = JSON.parse(raw);
-                                send(JSON.stringify(out));
-                            }
-                            catch {
-                                // A non-JSON reply is a peer WITHOUT the canvas-op face (a
-                                // pre-gh41 build) or a proxy page — name the shape honestly.
-                                send(JSON.stringify({ ok: false, error: `peer ${peerUrl} answered HTTP ${String(reply.status)} without JSON — it likely runs a build without the fleet canvas-op face (pre gh#41); upgrade it, or regulate its teams on that host directly` }));
-                            }
-                        }
-                        catch (error) {
-                            send(JSON.stringify({ ok: false, error: `fleet op failed: ${error instanceof Error ? error.message : String(error)}` }));
-                        }
-                    });
-                }),
-            }), 'a2a: fleet-canvas-op relay route');
-            // gh#34 owner three-key panel: the remote build-out unlock knobs,
-            // surfaced as a control face instead of "翻配置文件". GET reads the
-            // effective values; POST writes the HOME patch layer (the
-            // authoritative surface) AND hot-applies the two call-time keys
-            // (teamJoinAllowlist / teamScopeInfo); announce is boot-time
-            // publishing, so its change lands on the next host restart and the
-            // reply says so. Same key gate as every write face.
-            ctx.effect(() => webServer.register({
-                kind: 'exact',
-                path: '/__dsh_a2a/owner-settings',
-                handler: controlRoute((req, res) => {
-                    if (req.method === 'GET') {
-                        const payload = JSON.stringify({
-                            ok: true,
-                            teamJoinAllowlist: [...ownerAllowlist],
-                            teamScopeInfo: ownerTeamScopeInfo,
-                            announce: config.announce === true,
-                            announceRestartPending: ownerAnnounceRestartPending,
-                        });
-                        res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                        res.end(payload);
-                        return;
-                    }
-                    readJsonBody(req, res, (rawBody) => {
-                        const body = rawBody;
-                        const changes = {};
-                        if (Array.isArray(body.teamJoinAllowlist)) {
-                            const list = body.teamJoinAllowlist.filter((name) => typeof name === 'string' && name !== '' && name.length <= 128);
-                            changes.teamJoinAllowlist = [...new Set(list)];
-                        }
-                        if (typeof body.teamScopeInfo === 'boolean')
-                            changes.teamScopeInfo = body.teamScopeInfo;
-                        if (typeof body.announce === 'boolean')
-                            changes.announce = body.announce;
-                        if (Object.keys(changes).length === 0) {
-                            const payload = JSON.stringify({ ok: false, error: 'no recognized keys: teamJoinAllowlist (string[]), teamScopeInfo (bool), announce (bool)' });
-                            res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                            res.end(payload);
-                            return;
-                        }
-                        try {
-                            const patchPath = join(home, 'cordis.patch.yml');
-                            const current = existsSync(patchPath) ? readFileSync(patchPath, 'utf8') : '';
-                            const { yaml, restartNeeded } = applyOwnerSettings(current, changes);
-                            mkdirSync(home, { recursive: true });
-                            writeFileSync(patchPath, yaml, 'utf8');
-                            // Hot-apply the two call-time keys.
-                            if (changes.teamJoinAllowlist !== undefined)
-                                ownerAllowlist = [...changes.teamJoinAllowlist];
-                            if (changes.teamScopeInfo !== undefined)
-                                ownerTeamScopeInfo = changes.teamScopeInfo;
-                            if (changes.announce !== undefined && changes.announce !== (config.announce === true))
-                                ownerAnnounceRestartPending = true;
-                            if (changes.announce !== undefined && changes.announce === (config.announce === true))
-                                ownerAnnounceRestartPending = false;
-                            logger.info(`a2a: owner settings updated (${Object.keys(changes).join(', ')}${restartNeeded ? ' — restart pending for announce' : ''})`);
-                            const payload = JSON.stringify({ ok: true, restartNeeded, keys: Object.keys(changes) });
-                            res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                            res.end(payload);
-                        }
-                        catch (error) {
-                            const payload = JSON.stringify({ ok: false, error: `patch-layer write failed: ${error instanceof Error ? error.message : String(error)}` });
-                            res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                            res.end(payload);
-                        }
-                    });
-                }),
-            }), 'a2a: owner-settings route');
-            // Groups control: create/remove named groups and assign sessions to
-            // them (an empty name unassigns). Same guard as join/leave — the
-            // group taxonomy enumerates session ids, so it stays behind the key.
-            // Deprecated as of 0.6.6 (canvas teams supersede manual grouping);
-            // kept working for old panels.
-            ctx.effect(() => webServer.register({
-                kind: 'exact',
-                path: '/__dsh_a2a/groups',
-                handler: controlRoute((req, res) => {
-                    readJsonBody(req, res, (body) => {
-                        const action = body.action;
-                        let payload;
-                        if (action === 'create') {
-                            const name = typeof body.name === 'string' ? body.name : '';
-                            const stored = groupStore.create(name);
-                            payload = JSON.stringify(stored === undefined ? { ok: false, error: 'invalid name or group cap reached' } : { ok: true, name: stored, groups: groupStore.list() });
-                        }
-                        else if (action === 'remove') {
-                            const name = typeof body.name === 'string' ? body.name : '';
-                            payload = JSON.stringify({ ok: groupStore.remove(name), groups: groupStore.list() });
-                        }
-                        else if (action === 'assign') {
-                            const id = typeof body.id === 'string' ? body.id : '';
-                            const name = typeof body.name === 'string' ? body.name : undefined;
-                            if (id === '' || name === undefined) {
-                                payload = JSON.stringify({ ok: false, error: 'id and name are required' });
-                            }
-                            else {
-                                payload = JSON.stringify({ ok: groupStore.assign(id, name), groups: groupStore.list() });
-                            }
-                        }
-                        else {
-                            payload = JSON.stringify({ ok: false, error: 'unknown action' });
-                        }
-                        res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                        res.end(payload);
-                    });
-                }),
-            }), 'a2a: session-group route');
-            // Canvas control: create/remove named multi-member teams and manage
-            // membership. Same key guard as join/leave — membership enumerates
-            // session ids. A member must be a joined session (live node or
-            // remembered intent): canvas routing only reaches sessions the user
-            // put on the network by gesture — no routing backdoor over unjoined
-            // sessions.
-            ctx.effect(() => webServer.register({
-                kind: 'exact',
-                path: '/__dsh_a2a/canvas',
-                handler: controlRoute((req, res) => {
-                    readJsonBody(req, res, (body) => {
-                        const action = body.action;
-                        let payload;
-                        if (action === 'create') {
-                            const name = typeof body.name === 'string' ? body.name : '';
-                            const stored = canvasStore.create(name);
-                            payload = JSON.stringify(stored === undefined ? { ok: false, error: 'invalid name or team cap reached' } : { ok: true, name: stored, teams: canvasStore.list() });
-                        }
-                        else if (action === 'remove') {
-                            const name = typeof body.name === 'string' ? body.name : '';
-                            payload = JSON.stringify({ ok: canvasStore.remove(name), teams: canvasStore.list() });
-                        }
-                        else if (action === 'add-member') {
-                            const name = typeof body.name === 'string' ? body.name : '';
-                            const id = typeof body.id === 'string' ? body.id : '';
-                            // Dual member shape: a local session id must be a joined node;
-                            // a remote ref is a zone-qualified team handle whose shape this
-                            // gate checks and whose existence the UI picker (directory
-                            // rows) vouches for. Humans compose both via the workbench.
-                            const memberValid = isRemoteMemberRef(id)
-                                ? validRemoteMemberRef(id)
-                                : id !== '' && (sessionNodes.has(id) || joinedSessions.has(id));
-                            if (name === '' || !memberValid) {
-                                payload = JSON.stringify({ ok: false, error: 'name and a member (joined session id, or a zone-qualified remote team handle like zone/a1b2c3d4) are required' });
-                            }
-                            else {
-                                canvasStore.create(name);
-                                payload = JSON.stringify({ ok: canvasStore.addMember(name, id), teams: canvasStore.list(), members: canvasStore.membersOf(name) });
-                            }
-                        }
-                        else if (action === 'remove-member') {
-                            const name = typeof body.name === 'string' ? body.name : '';
-                            const id = typeof body.id === 'string' ? body.id : '';
-                            if (name === '' || id === '') {
-                                payload = JSON.stringify({ ok: false, error: 'name and id are required' });
-                            }
-                            else {
-                                payload = JSON.stringify({ ok: canvasStore.removeMember(name, id), teams: canvasStore.list(), members: canvasStore.membersOf(name) });
-                            }
-                        }
-                        else {
-                            payload = JSON.stringify({ ok: false, error: 'unknown action' });
-                        }
-                        res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                        res.end(payload);
-                    });
-                }),
-            }), 'a2a: session-canvas route');
-            // Layout face (contract v2): whole-document GET + save/reset for the
-            // stage's spatial presentation state. Validated/clamped server-side by
-            // LayoutStore so a buggy client cannot poison persisted geometry.
-            ctx.effect(() => webServer.register({
-                kind: 'exact',
-                path: '/__dsh_a2a/canvas-layout',
-                handler: controlRoute((req, res) => {
-                    if (req.method === 'GET') {
-                        const payload = JSON.stringify({ ok: true, layout: layoutStore.get() });
-                        res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                        res.end(payload);
-                        return;
-                    }
-                    readJsonBody(req, res, (body) => {
-                        const action = body.action;
-                        if (action === 'reset') {
-                            layoutStore.reset();
-                            const payload = JSON.stringify({ ok: true, layout: null });
-                            res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                            res.end(payload);
-                            return;
-                        }
-                        if (action === 'save') {
-                            const accepted = layoutStore.save(body.layout);
-                            const payload = JSON.stringify(accepted ? { ok: true, layout: layoutStore.get() } : { ok: false, error: 'payload is not a version-1 layout document' });
-                            res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                            res.end(payload);
-                            return;
-                        }
-                        const payload = JSON.stringify({ ok: false, error: 'unknown action' });
-                        res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                        res.end(payload);
-                    }, MAX_LAYOUT_BODY_BYTES);
-                }),
-            }), 'a2a: canvas-layout route');
-            // The dsh-a2a-munder-difflin floor stage: a same-origin full-page
-            // surface adapted from the Munder Difflin office renderer (stage/,
-            // NOTICE). Serves the built Vite tree with a traversal-guarded map.
-            ctx.effect(() => webServer.register({
-                kind: 'prefix',
-                path: '/__dsh_a2a_canvas',
-                handler: (req, res) => {
-                    const rootDir = fileURLToPath(new URL('../assets/stageDist', import.meta.url));
-                    // Directory-classic resolution: the bare mount 301s onto itself
-                    // with a slash, so the shell's `./assets` references resolve
-                    // inside this tree instead of 404ing against the web root.
-                    const MOUNT = '/__dsh_a2a_canvas';
-                    const resolved = resolveStageMount(req.url ?? '/', MOUNT);
-                    if (resolved.redirectTo !== undefined) {
-                        res.writeHead(301, { Location: resolved.redirectTo, 'Cache-Control': 'no-store', 'X-A2A-Stage': 'redirect' });
-                        res.end();
-                        return;
-                    }
-                    const rel = decodeURIComponent(resolved.rel).replace(/\\/g, '/');
-                    if (rel.includes('..')) {
-                        res.writeHead(403, { 'Content-Type': 'text/plain', 'X-A2A-Stage': 'traversal' });
-                        res.end();
-                        return;
-                    }
-                    try {
-                        const file = readFileSync(join(rootDir, rel));
-                        const ext = rel.slice(rel.lastIndexOf('.') + 1);
-                        const types = {
-                            html: 'text/html; charset=utf-8',
-                            js: 'text/javascript; charset=utf-8',
-                            mjs: 'text/javascript; charset=utf-8',
-                            css: 'text/css; charset=utf-8',
-                            png: 'image/png',
-                            json: 'application/json; charset=utf-8',
-                            svg: 'image/svg+xml',
-                        };
-                        res.writeHead(200, { 'Content-Type': types[ext] ?? 'application/octet-stream', 'Cache-Control': 'no-store', 'X-A2A-Stage': 'ok:' + ext });
-                        res.end(file);
-                    }
-                    catch (err) {
-                        res.writeHead(404, { 'Content-Type': 'text/plain', 'X-A2A-Stage': 'miss' });
-                        res.end('stage-miss rel=' + rel + ' rootDir=' + rootDir + ' err=' + String(err));
-                    }
-                },
-            }), 'a2a: canvas-stage page');
-            // The dsh-a2a-nexus stage: Three.js infinite-canvas topology viewer.
-            // Serves the built Vite tree from assets/nexusDist with a traversal-
-            // guarded file map (same discipline as canvas-stage).
-            ctx.effect(() => webServer.register({
-                kind: 'prefix',
-                path: '/__dsh_a2a_nexus',
-                handler: (req, res) => {
-                    const rootDirNexus = fileURLToPath(new URL('../assets/nexusDist', import.meta.url));
-                    // Same directory-classic resolution as the canvas mount: the bare
-                    // `/__dsh_a2a_nexus` form used to serve the shell verbatim, whose
-                    // `./assets` then 404'd at the web root — a silent black viewer.
-                    const MOUNT = '/__dsh_a2a_nexus';
-                    const resolved = resolveStageMount(req.url ?? '/', MOUNT);
-                    if (resolved.redirectTo !== undefined) {
-                        res.writeHead(301, { Location: resolved.redirectTo, 'Cache-Control': 'no-store' });
-                        res.end();
-                        return;
-                    }
-                    const rel = decodeURIComponent(resolved.rel).replace(/\\/g, '/');
-                    if (rel.includes('..')) {
-                        res.writeHead(403, { 'Content-Type': 'text/plain' });
-                        res.end();
-                        return;
-                    }
-                    try {
-                        const file = readFileSync(join(rootDirNexus, rel));
-                        const ext = rel.slice(rel.lastIndexOf('.') + 1);
-                        const types = {
-                            html: 'text/html; charset=utf-8',
-                            js: 'text/javascript; charset=utf-8',
-                            mjs: 'text/javascript; charset=utf-8',
-                            css: 'text/css; charset=utf-8',
-                            png: 'image/png',
-                            json: 'application/json; charset=utf-8',
-                            svg: 'image/svg+xml',
-                        };
-                        res.writeHead(200, { 'Content-Type': types[ext] ?? 'application/octet-stream', 'Cache-Control': 'no-store' });
-                        // gh#9 §10 GUI key plumbing (REVIEW M3 fix): the shell learns
-                        // the control-plane key ONLY on the loopback leniency face —
-                        // a remote bare GET of the page serves the shell WITHOUT the
-                        // key (the reviewer proved the pre-fix shape leaked the
-                        // credential to any network-reachable fetcher on a
-                        // 0.0.0.0-bound host, contradicting §10's purpose). Loopback
-                        // localhost is exactly §10.2's stated leniency posture; keyed
-                        // hosts behind tunnels use originClaimUrl-style operator
-                        // plumbing instead.
-                        if (ext === 'html' && config.apiKey !== '' && controlTrustedWithoutKey(req)) {
-                            const injected = file.toString('utf8').replace('</head>', `<script>window.__DSH_A2A_KEY__=${JSON.stringify(config.apiKey)};</script></head>`);
-                            res.end(Buffer.from(injected, 'utf8'));
-                            return;
-                        }
-                        res.end(file);
-                    }
-                    catch {
-                        res.writeHead(404, { 'Content-Type': 'text/plain' });
-                        res.end();
-                    }
-                },
-            }), 'a2a: nexus-stage page');
+            // gh#77 B1: the admin faces live in src/faces/admin.ts.
+            registerAdminFaces(webServer, {
+                ctx, config, logger, home, session, lanIp, PLUGIN_VERSION, controlRoute, controlTrustedWithoutKey, readJsonBody, peerStore, peerLinkState, originClaimHeaders, refreshRemoteRows, joinedSessions, exposureStore, teamMemberships, cliDeposits, groupStore, canvasStore, layoutStore, taskLedger, idempotencyStore, inFlightRoutes, recentActivity, teamAuditRing, reportRing, sessionNodes, liveRoots, mountSessionNode, coldJoinedIds, prewarmStatus, reconcileStatus, id8, sessionLabelOf, sessionTeamOf, nodeMetadataOf, canvasTeamOf, archivedSessionFilter, pruneArchivedJoins, pruneCanvasMemberships, verifyOriginClaim, callerLinkedToThisHost, cachedCardFetch,
+                indexUrl: import.meta.url,
+                get cardCache() { return cardCache; },
+                get remoteRowsCache() { return remoteRowsCache; },
+                get legacyInboundCount() { return legacyInboundCount; },
+                get ownCardUrl() { return ownCardUrl; },
+                get ownerAllowlist() { return ownerAllowlist; },
+                set ownerAllowlist(v) { ownerAllowlist = v; },
+                get ownerTeamScopeInfo() { return ownerTeamScopeInfo; },
+                set ownerTeamScopeInfo(v) { ownerTeamScopeInfo = v; },
+                get ownerAnnounceRestartPending() { return ownerAnnounceRestartPending; },
+                set ownerAnnounceRestartPending(v) { ownerAnnounceRestartPending = v; },
+            });
         });
     }
     if (config.announce) {
@@ -2971,6 +2290,24 @@ ${message}`;
                 if (canvasStore.remoteMembersOf(name).includes(caller))
                     declared.add(canvasTeamOf(name));
             }
+            // gh#71 fix ②: the warm card cache's peer canvasOrg is the same-zone
+            // cross-host basis too — an org entry naming BOTH the caller's handle
+            // and one of THIS host's own handles is a shared team (双向识别: the
+            // composition gesture happened on the other host's board; both ends
+            // are named). Read-only over the cache; a caller org that never names
+            // an own handle still refuses (V5 preserved).
+            const ownHandles = new Set([config.team, ...joinedSessions.list().map(id => `${config.team}/${id8(id)}`)]);
+            for (const cached of cardCache.values()) {
+                const org = cached.card?.canvasOrg;
+                if (!Array.isArray(org))
+                    continue;
+                for (const e of org) {
+                    if (typeof e.team !== 'string' || e.team === '' || !Array.isArray(e.members))
+                        continue;
+                    if (e.members.includes(caller) && e.members.some(m => typeof m === 'string' && ownHandles.has(m)))
+                        declared.add(e.team);
+                }
+            }
         }
         const routable = new Set([config.team]);
         for (const id of joinedSessions.list())
@@ -3011,6 +2348,20 @@ ${message}`;
                     }
                     for (const name of canvasStore.teamsOf(targetSession))
                         targetLinks.add(canvasTeamOf(name));
+                    // gh#71 fix ②: the warm cache's org basis at target level too —
+                    // an org entry naming BOTH the caller and the target handle is
+                    // the shared team (same 双向识别 rule as the host-level basis).
+                    for (const cached of cardCache.values()) {
+                        const org = cached.card?.canvasOrg;
+                        if (!Array.isArray(org))
+                            continue;
+                        for (const e of org) {
+                            if (typeof e.team !== 'string' || e.team === '' || !Array.isArray(e.members))
+                                continue;
+                            if (e.members.includes(caller) && e.members.includes(targetTeam))
+                                targetLinks.add(e.team);
+                        }
+                    }
                 }
             }
             else {
@@ -3178,664 +2529,48 @@ ${message}`;
         return { ok: true, id, messages: entries.map(entry => ({ role: entry.role, text: entry.text, ...(entry.time !== undefined ? { time: entry.time } : {}) })) };
     }
     whenWebServerSettled((webServer) => {
-        // gh#45 CLI 户口卡面 (peer face, unsigned card serve): the deposited
-        // CLI's SIGNED card is served verbatim under its own base URL — an
-        // OriginClaim verification of a CLI envelope fetches exactly here
-        // (callerUrl + /.well-known/agent-card.json). Expired or unknown
-        // handles 404 (auto-deregistered — the identity is dead until
-        // re-publish).
-        ctx.effect(() => webServer.register({
-            kind: 'prefix',
-            path: '/a2a/cli',
-            handler: (req, res) => {
-                const MOUNT = '/a2a/cli';
-                const rest = (req.url ?? '').slice(MOUNT.length);
-                const m = /^\/([^/]+)\/\.well-known\/agent-card\.json$/.exec(rest);
-                if (req.method !== 'GET' || m === null) {
-                    res.writeHead(404, { 'Content-Type': 'text/plain' });
-                    res.end();
-                    return;
-                }
-                const handle = decodeURIComponent(m[1]);
-                const row = cliDeposits.get(handle);
-                if (row === undefined) {
-                    res.writeHead(404, { 'Content-Type': 'text/plain' });
-                    res.end();
-                    return;
-                }
-                res.writeHead(200, { 'Content-Type': 'application/json', 'Cache-Control': 'no-store' });
-                res.end(row.cardJson);
-            },
-        }), 'a2a: cli deposit card face');
-        // gh#41 fleet planning, peer-write face: a LINKED peer may regulate this
-        // host's canvas teams (create / add-member / remove-member) with a
-        // VERIFIED OriginClaim envelope. The owner's ruling: any peer composes
-        // and regulates the whole fleet — the bilateral/operator link IS the
-        // authorization, the envelope proves the key, and every op lands in the
-        // activity ring + host log for audit. Unlinked or unsigned callers get
-        // a refusal, never a mutation.
-        ctx.effect(() => webServer.register({
-            kind: 'exact',
-            path: '/a2a/canvas-op',
-            handler: async (req, res) => {
-                const send = (status, payload) => {
-                    res.writeHead(status, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                    res.end(payload);
-                };
-                if (req.method !== 'POST') {
-                    send(200, JSON.stringify({ ok: false, error: 'POST required' }));
-                    return;
-                }
-                const chunks = [];
-                let size = 0;
-                req.on('data', (chunk) => { size += chunk.length; if (size > 16 * 1024) {
-                    chunks.length = 0;
-                    return;
-                } chunks.push(chunk); });
-                req.on('end', () => {
-                    void (async () => {
-                        try {
-                            const body = JSON.parse(Buffer.concat(chunks).toString('utf8'));
-                            const claim = await verifyOriginClaim(req);
-                            if (!claim.ok) {
-                                logger.warn(`a2a: canvas-op claim failed (${claim.reason}) — caller=${String(req.headers['x-a2a-caller'] ?? '')} url=${String(req.headers['x-a2a-caller-url'] ?? '')} ts=${String(req.headers['x-a2a-caller-ts'] ?? '')}`);
-                                send(200, JSON.stringify({ ok: false, error: `untrusted-origin: OriginClaim verification failed (${claim.reason}) — canvas regulation requires a signed envelope`, code: -32000 }));
-                                return;
-                            }
-                            if (!callerLinkedToThisHost(claim.caller, claim.callerUrl, claim.card)) {
-                                recordActivity('in', 'fleet-canvas', claim.caller, false);
-                                send(200, JSON.stringify({ ok: false, error: `caller "${claim.caller}" is not linked to this host — canvas regulation requires the operator link (bilateral seed, canvas ref, or same-host membership)` }));
-                                return;
-                            }
-                            const op = body.op;
-                            const name = typeof body.name === 'string' ? body.name : '';
-                            const id = typeof body.id === 'string' ? body.id : '';
-                            let payload;
-                            if (op === 'create') {
-                                const stored = canvasStore.create(name);
-                                payload = stored === undefined ? { ok: false, error: 'invalid name or team cap reached' } : { ok: true, members: canvasStore.membersOf(stored) };
-                            }
-                            else if (op === 'add-member') {
-                                const memberValid = isRemoteMemberRef(id) ? validRemoteMemberRef(id) : id !== '' && (sessionNodes.has(id) || joinedSessions.has(id));
-                                payload = name === '' || !memberValid
-                                    ? { ok: false, error: 'name and a member (joined session id, or a zone-qualified remote team handle) are required' }
-                                    : (canvasStore.create(name), { ok: canvasStore.addMember(name, id), members: canvasStore.membersOf(name) });
-                            }
-                            else if (op === 'remove-member') {
-                                payload = { ok: name !== '' && canvasStore.removeMember(name, id), members: name !== '' ? canvasStore.membersOf(name) : undefined };
-                            }
-                            else {
-                                payload = { ok: false, error: 'op must be create | add-member | remove-member' };
-                            }
-                            recordActivity('in', 'fleet-canvas', `${claim.caller}:${String(op)}`, payload.ok);
-                            logger.info(`a2a: fleet canvas op from ${claim.caller} (${String(op)} ${name}${id !== '' ? ` ${id}` : ''}) -> ${payload.ok ? 'applied' : `refused: ${payload.error ?? '?'}`}`);
-                            send(200, JSON.stringify(payload));
-                        }
-                        catch (error) {
-                            send(200, JSON.stringify({ ok: false, error: `canvas-op failed: ${error instanceof Error ? error.message : String(error)}` }));
-                        }
-                    })();
-                });
-            },
-        }), 'a2a: fleet canvas-op peer route');
-        ctx.effect(() => webServer.register({
-            kind: 'exact',
-            path: '/a2a/direct',
-            handler: async (req, res) => {
-                const chunks = [];
-                let size = 0;
-                // B5 enforcement: 512 KiB hard cap. An oversized body is rejected,
-                // never truncated and never connection-killed mid-read — buffering
-                // stops at the crossing chunk, the stream drains to `end`, and the
-                // peer receives one structured 413 with a wire error code (the old
-                // behavior tore the socket down with no diagnosis at all).
-                let overflowed = false;
-                const declared = Number.parseInt(String(req.headers['content-length'] ?? ''), 10);
-                if (Number.isFinite(declared) && !withinRouteBodyCap(declared))
-                    overflowed = true;
-                req.on('data', (chunk) => {
-                    if (overflowed)
-                        return;
-                    const next = size + chunk.length;
-                    if (!withinRouteBodyCap(next)) {
-                        overflowed = true;
-                        chunks.length = 0;
-                        return;
-                    }
-                    size = next;
-                    chunks.push(chunk);
-                });
-                /* v8 ignore next 6 -- client aborts surface as 'close' via the shared
-                   webServer's per-request guard; a raw req 'error' needs a malformed
-                   HTTP stream the webServer rejects before this handler exists */
-                req.on('error', () => {
-                    if (!res.headersSent) {
-                        res.writeHead(400);
-                        res.end();
-                    }
-                });
-                req.on('end', async () => {
-                    if (overflowed) {
-                        if (!res.writableEnded && !res.headersSent) {
-                            const payload = JSON.stringify({ error: 'payload too large', code: WIRE_ERROR_PAYLOAD_TOO_LARGE });
-                            res.writeHead(413, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                            res.end(payload);
-                        }
-                        return;
-                    }
-                    let body;
-                    try {
-                        body = JSON.parse(Buffer.concat(chunks).toString('utf8'));
-                    }
-                    catch {
-                        const payload = JSON.stringify({ error: 'malformed body', code: -32000 });
-                        res.writeHead(400, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                        res.end(payload);
-                        return;
-                    }
-                    // V2 (gh#7, S1): the delivery face honors the apiKey gate exactly
-                    // like the control face — a configured key without this header
-                    // used to let anyone reachable steer sessions while the control
-                    // routes demanded the key, making it decorative for delivery.
-                    // Empty-key deployments keep the documented open posture.
-                    if (config.apiKey !== '') {
-                        const presented = String(req.headers['x-api-key'] ?? '');
-                        if (!secretEqual(presented, config.apiKey)) {
-                            const payload = JSON.stringify({ error: 'unauthorized: X-API-Key required on the delivery face (apiKey is configured)', code: -32000 });
-                            res.writeHead(401, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                            res.end(payload);
-                            return;
-                        }
-                    }
-                    const team = typeof body.team === 'string' ? body.team : '';
-                    const message = typeof body.message === 'string' ? body.message : '';
-                    const caller = typeof body.caller_session === 'string' ? body.caller_session : '';
-                    // P2 receipt-callback: where THIS node's receipt should route on
-                    // the caller's side — the caller knows its routable address best
-                    // (a joined session's node team, e.g. via the transport face's
-                    // callbackTarget mapping). Bounded; absent → the caller label
-                    // plays its usual role.
-                    const callback = typeof body.callback === 'string' && body.callback !== '' && body.callback.length <= 128 ? body.callback : '';
-                    const noWait = body.wait === false;
-                    const contextId = typeof body.context_id === 'string' && body.context_id !== '' ? body.context_id : `ctx-${Math.random().toString(16).slice(2, 10)}`;
-                    // The caller-born task id (idempotency key): echo it when present
-                    // so the receipt header correlates with the caller's own result;
-                    // pre-0.5.3 callers carry none and this node mints one.
-                    const taskId = typeof body.task_id === 'string' && body.task_id !== '' ? body.task_id : `direct-${Math.random().toString(16).slice(2, 10)}`;
-                    if (team === '' || message === '') {
-                        const payload = JSON.stringify({ error: 'team and message are required', code: -32000 });
-                        res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                        res.end(payload);
-                        return;
-                    }
-                    // Phase-3 admission (owner ruling 2026-09-01, decision-seat
-                    // filed): an inbound direct delivery must show a SHARED team.
-                    // Local-zone callers are judged synchronously and exactly — the
-                    // declaration lives in this host's own roster store, so the
-                    // Anonymous-delivery refusal (S3 phase-3b, test-seat finding
-                    // direct-001649ab): a delivery with NO caller_session field
-                    // skips the admission gate entirely (nothing to judge) — that
-                    // anonymous hole let any local process or reachable peer inject
-                    // into a live session. The protocol contract is caller_session;
-                    // its absence is now refused instead of silently waved through.
-                    // (0.6.15: the rule now lives in a2aCallerRefusal so the
-                    // read-only /a2a/log face admits callers by exactly the same
-                    // standard as message delivery.)
-                    const callerRefusal = a2aCallerRefusal(caller, team);
-                    if (callerRefusal !== undefined) {
-                        recordActivity('in', team, caller === '' ? 'anonymous' : caller, false);
-                        const payload = JSON.stringify({ error: callerRefusal, code: -32000, team, task_status: 'TASK_STATE_FAILED' });
-                        res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                        res.end(payload);
-                        return;
-                    }
-                    // gh#9+gh#10 OriginClaim on the delivery face (M1): an envelope
-                    // that is present but unverifiable rejects untrusted-origin; an
-                    // ABSENT envelope during the window walks on with a counted
-                    // legacyInbound warn (the operator watches the tail drain), and
-                    // after the window closes it rejects like a failed signature —
-                    // N3 proves a NAME's linkability, never key possession.
-                    const claim = await verifyOriginClaim(req);
-                    if (!claim.ok) {
-                        if (claim.reason !== 'absent' || config.originClaimWindow === false) {
-                            recordActivity('in', team, caller, false);
-                            const payload = JSON.stringify({ error: `untrusted-origin: OriginClaim verification failed (${claim.reason}) — present a signed envelope (X-A2A-Caller/-Url/-Ts/-Sig with your card key) or upgrade your node`, code: -32000, team, task_status: 'TASK_STATE_FAILED' });
-                            res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                            res.end(payload);
-                            return;
-                        }
-                        legacyInboundCount += 1;
-                    }
-                    // Server-side idempotency (P3/B3): one key, one execution inside
-                    // the window. Same key + same payload fingerprint ⇒ replay (409,
-                    // -32003, replay:true — the prior attempt stays authoritative);
-                    // same key + different payload ⇒ hard conflict (409, -32002).
-                    // Checked BEFORE any steering or ledger correlation: a replay must
-                    // never re-enter the target session, no matter how it settles.
-                    const idemFingerprint = peerPayloadFingerprint({ caller, message, noWait, team });
-                    const idemVerdict = idempotencyStore.claim(taskId, idemFingerprint);
-                    if (idemVerdict !== 'fresh') {
-                        const replay = idemVerdict === 'replay';
-                        // 0.5.36 observability: conflict = caller bug (graph-loop prompt
-                        // minting / key management) — warn loudly so it is never misread
-                        // as the normal-depth-defense zero-traffic shape. Replays stay
-                        // silent by design.
-                        if (!replay)
-                            logger.warn(`a2a: idempotency CONFLICT on task ${taskId.slice(0, 80)} — same key reused with a different payload (caller bug; never auto-retry)`);
-                        const payload = JSON.stringify({
-                            error: replay ? 'duplicate task id within the idempotency window' : 'task id reused with a different payload',
-                            code: replay ? WIRE_ERROR_REPLAY_REJECTED : WIRE_ERROR_IDEMPOTENCY_CONFLICT,
-                            task_id: taskId,
-                            replay,
-                        });
-                        res.writeHead(409, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                        res.end(payload);
-                        return;
-                    }
-                    // The caller-side receipt correlation: a message shaped as a
-                    // receipt resolves the task it echoes, whichever wait semantics
-                    // carried it here. Correlation is bookkeeping only — the message
-                    // steers on exactly as before.
-                    settleAndAnnounce(message);
-                    // gh#45 CLI mailbox (wire face): a delivery targeting a DEPOSITED
-                    // CLI handle never resolves a session and never wakes — it lands
-                    // in the deposit's mailbox and answers delivered. Placement here
-                    // keeps the idempotency claim (above) exactly as for sessions.
-                    const cliRow = cliDeposits.get(team);
-                    if (cliRow !== undefined) {
-                        cliDeposits.mail(team, caller, message);
-                        recordActivity('in', team, caller, true);
-                        logger.info(`a2a: cli mailbox delivery for ${team} (from ${caller})`);
-                        const payload = JSON.stringify({ routed: true, delivered: true, receipt: 'mailbox', team, task_id: taskId, task_status: 'TASK_STATE_COMPLETED', note: `delivered to the mailbox of ${team} — the CLI polls while online` });
-                        res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                        res.end(payload);
-                        return;
-                    }
-                    // Inbound routing is foreground demand: boot prewarm yields for a
-                    // quiet window around it.
-                    lastWakeDemandAt = Date.now();
-                    // wait:false delivers without the final-reply hold: steer resolves
-                    // synchronously inside routeIntoAgentFor, so by the time the agent
-                    // lookup settles the message is already in — answer delivered and
-                    // let the receipt contract carry the reply.
-                    if (noWait) {
-                        // Issue #41 companion fix: the no-wait inbound branch resolved
-                        // only bare session teams — a canvas team delivery (wait:false)
-                        // fell through to the cold tier and answered a bogus
-                        // no-match although a live member existed. Same resolution as
-                        // the waiting face (routeIntoAgent), and likewise NO initiator
-                        // skip: the wire face delivers faithfully to the first live
-                        // member, whoever the caller is.
-                        const agent = resolveAgentForTeam(team) ?? canvasLiveAgent(parseCanvasTeamName(team));
-                        const wake = agent !== undefined ? undefined : wakeColdTeam(team);
-                        const deliver = (target) => {
-                            const from = caller === '' ? 'an unknown node' : caller;
-                            // The receipt target: the caller's callback address when it
-                            // supplied one (a session node team — wake-on-route covers a
-                            // cold one), else the caller label as before.
-                            const receiptTarget = callback !== '' ? callback : from;
-                            try {
-                                // The receipt header carries the task id: the target echoes
-                                // it verbatim in "[A2A receipt] task <id> ...", closing the
-                                // correlation loop with the caller's own route result.
-                                // F1' (consumed-probe prior-running): capture the pre-steer
-                                // status first — a target that was already running (its own
-                                // turn / a brand-new session's activation window) reads
-                                // `running` after the steer whether or not our wake was
-                                // latched, so the post-steer read alone would answer a false
-                                // consumed:true and strand the message.
-                                const runningBeforeSteer = probeConsumption(target, taskId);
-                                steerRelay(target, `[A2A direct] (task ${taskId}) ${fromClause(from)} (routed to ${team}) sent:\n\n${message}\n\n(When done, route your outcome back with one call — a2a_route { team: "${receiptTarget}", message: "[A2A receipt] task ${taskId} <one-line outcome>" }.)`, from === 'an unknown node' ? undefined : from);
-                                recordActivity('in', team, caller, true);
-                                armReceiptAutosend(target, taskId, receiptTarget, message);
-                                // v0.5.23 (async-stall): "delivered" only proves the steer call
-                                // returned — not that a turn started. An idle-phase steer wakes
-                                // the driver, but a maintenance/abort window latches the wake for
-                                // replay that may never fire (defect t-mt6nd0sq-hxuhj6: seven
-                                // delivered:true routes with zero log growth). Probe the driver
-                                // shortly after: running means the message is being consumed;
-                                // still-idle means the wake was latched or dropped — surface that
-                                // honestly and arm a delayed nudge retry below.
-                                // F1': a prior-running target never trusts the single
-                                // post-steer read — answer consumed:false conservatively and
-                                // arm the nudge (a false negative costs one harmless nudge; a
-                                // false positive strands the delivered message).
-                                // F2' (receipt-settlement): the delivery is born into the
-                                // ledger — an inbound row owes a receipt only this node can
-                                // produce, and before this row existed the nudge's isPending
-                                // gate no-op'd for exactly the deliveries that stall (08-30:
-                                // zero ledger records for latched activations). Arming is
-                                // unconditional now; settlement evidence disarms in the
-                                // callback.
-                                const consumedProbe = runningBeforeSteer ? false : probeConsumption(target, taskId);
-                                // F5 (settlement integrity): the debt gate — a process-label
-                                // caller cannot receive receipts, so this delivery is born
-                                // fire-and-forget (receiptExpected:false, answered as
-                                // receipt:"none") instead of manufacturing a debt nobody can
-                                // settle. The row itself stays: stall visibility and the
-                                // nudge still apply to the TARGET side.
-                                const receiptExpectation = receiptExpectationOf(receiptTarget);
-                                taskLedger.trackInbound(taskId, team, receiptTarget, contextId === '' ? undefined : contextId, receiptExpectation !== 'process-label', briefOf(message));
-                                armAsyncNudge(target, team, taskId, config.asyncNudgeDelayMs);
-                                const payload = JSON.stringify({
-                                    routed: true,
-                                    delivered: true,
-                                    team,
-                                    session,
-                                    task_id: taskId,
-                                    context_id: contextId,
-                                    task_status: 'TASK_STATE_DELIVERED',
-                                    artifacts: [],
-                                    consumed: consumedProbe,
-                                    receipt: receiptExpectation === 'process-label' ? 'none' : 'routed',
-                                });
-                                res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                                res.end(payload);
-                            }
-                            catch (error) {
-                                recordActivity('in', team, caller, false);
-                                const payload = JSON.stringify({ error: `The DSH session rejected the message: ${String(error)}`, code: -32000, team, task_id: taskId, task_status: 'TASK_STATE_FAILED' });
-                                res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                                res.end(payload);
-                            }
-                        };
-                        if (agent !== undefined) {
-                            deliver(agent);
-                            return;
-                        }
-                        if (wake?.kind === 'flight') {
-                            void wake.flight.then(deliver, (error) => {
-                                recordActivity('in', team, caller, false);
-                                const payload = JSON.stringify({ error: `waking the session for team "${team}" failed: ${String(error)}`, code: -32000, team, task_status: 'TASK_STATE_FAILED' });
-                                res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                                res.end(payload);
-                            });
-                            return;
-                        }
-                        // Remaining candidates need one async classification (the
-                        // native-teams bridge), so the tail answers inside an IIFE.
-                        void (async () => {
-                            // Native-teams inbound bridge (opt-in): prepare BEFORE answering
-                            // delivered — claim, seam, and parent initiator are everything
-                            // that can fail fast, and a phantom dispatch must never answer
-                            // success. Past prepare, the round fires detached (noWait means
-                            // delivery, not settlement); its late outcome corrects the
-                            // activity ring and the log.
-                            const standardMiss = () => {
-                                if (team === config.team) {
-                                    const live = liveAgent();
-                                    if (live !== undefined) {
-                                        // Self-route refusal (mirrors the sync face): a caller
-                                        // naming the very agent the fallback resolves to must
-                                        // get an honest failure, never its own dispatch echoed
-                                        // home plus an auto-receipt for work nobody did.
-                                        if (callerIsAgent(live, caller)) {
-                                            recordActivity('in', team, caller, false);
-                                            const payload = JSON.stringify({ error: selfRouteText(team), code: -32000, team, task_status: 'TASK_STATE_FAILED' });
-                                            res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                                            res.end(payload);
-                                            return;
-                                        }
-                                        deliver(live);
-                                        return;
-                                    }
-                                }
-                                const payload = JSON.stringify({ error: wake?.kind === 'no-face' ? noWakeFaceText(team) : wake?.kind === 'archived' ? archivedColdMatchText(team) : noColdMatchText(team), code: -32000, team, task_status: 'TASK_STATE_FAILED' });
-                                res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                                res.end(payload);
-                            };
-                            const prepared = await nativeTeamsPrepare(team);
-                            if (!prepared.ok) {
-                                if (prepared.reason === 'error') {
-                                    recordActivity('in', team, caller, false);
-                                    const payload = JSON.stringify({ error: prepared.error, code: -32000, team, task_status: 'TASK_STATE_FAILED' });
-                                    res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                                    res.end(payload);
-                                    return;
-                                }
-                                standardMiss();
-                                return;
-                            }
-                            recordActivity('in', team, caller, true);
-                            void nativeTeamsRound(prepared, team, caller, message, taskId)
-                                .then(outcome => {
-                                if (!outcome.ok) {
-                                    recordActivity('in', team, caller, false);
-                                    logger.warn(`a2a: detached native-teams round for "${team}" failed: ${outcome.error}`);
-                                }
-                                // W7 slice-2 hook 2: only a genuinely settled detached round
-                                // records an outcome. The deadline's settled:false
-                                // projection is a placeholder, not a product — the same
-                                // ruling as hook 1's DELIVERED skip; placeholder prose never
-                                // enters the ledger a replay could adopt from.
-                                if (taskId !== '') {
-                                    if (!outcome.ok)
-                                        idempotencyStore.recordOutcome(taskId, { status: 'failed', error: outcome.error });
-                                    else if (outcome.settled)
-                                        idempotencyStore.recordOutcome(taskId, { status: 'completed', reply: outcome.reply });
-                                }
-                            });
-                            const payload = JSON.stringify({ routed: true, delivered: true, team, session, task_id: taskId, context_id: contextId, task_status: 'TASK_STATE_DELIVERED', artifacts: [], consumed: false, bridge: 'native-teams' });
-                            res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                            res.end(payload);
-                        })();
-                        return;
-                    }
-                    void routeIntoAgent(team, message, caller, taskId).then((outcome) => {
-                        recordActivity('in', team, caller, outcome.ok);
-                        // W7 slice-2 hook 1: record the settled outcome on the claim row.
-                        // Ruling: a non-COMPLETED status (TASK_STATE_DELIVERED — the
-                        // bridge-round deadline placeholder, ABORTED_WAIT likewise) is
-                        // NOT a settled outcome, and neither is a host-authored
-                        // placeholder on the reply channel (flush timeout, dead session)
-                        // — the row stays pending, because an adopted replay must never
-                        // settle a node on placeholder text (the exact hazard W7 gap B
-                        // closed, barred from resurrecting through the outcome ledger).
-                        if (taskId !== '') {
-                            if (!outcome.ok) {
-                                idempotencyStore.recordOutcome(taskId, { status: 'failed', error: outcome.error });
-                            }
-                            else if (outcome.placeholder === true) {
-                                // placeholder prose never enters the ledger
-                            }
-                            else if (outcome.status === undefined || outcome.status === 'TASK_STATE_COMPLETED') {
-                                idempotencyStore.recordOutcome(taskId, { status: 'completed', reply: outcome.reply });
-                            }
-                        }
-                        const payload = outcome.ok
-                            ? JSON.stringify({
-                                routed: true,
-                                team,
-                                session,
-                                result: { text: outcome.reply },
-                                task_id: taskId,
-                                context_id: contextId,
-                                task_status: outcome.status ?? 'TASK_STATE_COMPLETED',
-                                artifacts: [],
-                                // The bridge marker rides the wire so the caller's
-                                // trackOwedTask skips a receipt-less native round — without
-                                // it, a cross-node unsettled round books an unpayable owed
-                                // row and re-creates the TASK_CAP backlog.
-                                ...(outcome.bridge !== undefined ? { bridge: outcome.bridge } : {}),
-                            })
-                            : JSON.stringify({ error: outcome.error, code: -32000, team, task_id: taskId, task_status: 'TASK_STATE_FAILED' });
-                        res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                        res.end(payload);
-                    });
-                });
-            },
-        }), 'a2a: direct route endpoint');
-        // 0.6.15: the read-only peer log face — a peer asks for THIS node's
-        // session transcript tail (or, without id, the readable-session
-        // listing) so a remote workbench can show "what has this node been
-        // talking about". Admission is a2aCallerRefusal — exactly the rule
-        // /a2a/direct applies to message delivery: caller_session required,
-        // zone/id8 callers judged on shared teams. Read semantics are the
-        // local /__dsh_a2a/session-log face verbatim (artifact existence is
-        // the only gate; archived and never-joined sessions stay readable;
-        // caps mirror session-transcript.ts). Nothing here steers a session,
-        // claims a task, or writes state — the only side effects are the
-        // activity-ring record and the admission path's background
-        // directory learn.
-        ctx.effect(() => webServer.register({
-            kind: 'exact',
-            path: '/a2a/log',
-            handler: async (req, res) => {
-                const send = (status, body) => {
-                    const payload = JSON.stringify(body);
-                    res.writeHead(status, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                    res.end(payload);
-                };
-                if (req.method !== 'GET') {
-                    send(405, { ok: false, error: 'GET is the only method on this face' });
-                    return;
-                }
-                // V2 (gh#7, S1): the read-only log face rides the same apiKey gate
-                // as delivery — a configured key must be presented here too.
-                if (config.apiKey !== '') {
-                    const presented = String(req.headers['x-api-key'] ?? '');
-                    if (!secretEqual(presented, config.apiKey)) {
-                        send(401, { ok: false, error: 'unauthorized: X-API-Key required (apiKey is configured)', code: -32000 });
-                        return;
-                    }
-                }
-                const url = new URL(req.url ?? '/', 'http://x');
-                const caller = url.searchParams.get('caller_session') ?? '';
-                const id = url.searchParams.get('id') ?? '';
-                const limitArg = Number(url.searchParams.get('limit') ?? TRANSCRIPT_DEFAULT_LIMIT);
-                const limit = Number.isFinite(limitArg) ? Math.max(1, Math.min(TRANSCRIPT_MAX_LIMIT, Math.floor(limitArg))) : TRANSCRIPT_DEFAULT_LIMIT;
-                const refusal = a2aCallerRefusal(caller);
-                if (refusal !== undefined) {
-                    recordActivity('in', 'log', caller === '' ? 'anonymous' : caller, false);
-                    send(200, { ok: false, error: refusal, code: -32000 });
-                    return;
-                }
-                // gh#9+gh#10: the log face reuses the exact OriginClaim
-                // verification (§8.3) — same window semantics as delivery.
-                const logClaim = await verifyOriginClaim(req);
-                if (!logClaim.ok) {
-                    if (logClaim.reason !== 'absent' || config.originClaimWindow === false) {
-                        recordActivity('in', 'log', caller, false);
-                        send(200, { ok: false, error: `untrusted-origin: OriginClaim verification failed (${logClaim.reason}) — present a signed envelope or upgrade your node`, code: -32000 });
-                        return;
-                    }
-                    legacyInboundCount += 1;
-                }
-                recordActivity('in', 'log', caller, true);
-                if (id.includes('/') || id.includes('\\') || id.includes('..')) {
-                    send(200, { ok: false, error: 'id is required' });
-                    return;
-                }
-                if (id === '') {
-                    try {
-                        const rows = scanSessionLogList();
-                        send(200, { ok: true, count: rows.length, sessions: rows.slice(0, 50) });
-                    }
-                    catch (error) {
-                        send(200, { ok: false, error: `transcript list failed: ${error instanceof Error ? error.message : String(error)}` });
-                    }
-                    return;
-                }
-                try {
-                    const tail = readSessionLogTail(id, limit);
-                    if (!tail.ok)
-                        send(200, { ok: false, error: tail.error });
-                    else
-                        send(200, { ok: true, id: tail.id, count: tail.messages.length, messages: tail.messages });
-                }
-                catch (error) {
-                    send(200, { ok: false, error: `transcript failed: ${error instanceof Error ? error.message : String(error)}` });
-                }
-            },
-        }), 'a2a: peer log face endpoint');
-    });
-    whenWebServerSettled((webServer) => {
-        // W7 slice 2: the S1 outcome-retrieval surface — a READ-ONLY lookup of
-        // one claimed task's settled outcome. The body carries ONLY the task id
-        // and the submit payload's fingerprint (peerPayloadFingerprint, the
-        // gate's own shared implementation): the fingerprint match is the
-        // authorization, and the fan-out probe never leaks the original message
-        // to peers that never saw it. Constant-200 semantics — a query NEVER
-        // produces a wire error code (the frozen -32002/-32003 vocabulary stays
-        // submit-only), never claims, never steers, never enters a session: the
-        // gate's "verdict before steer" has its mirror in "a query executes
-        // nothing". Malformed fields degrade to unknown-task rather than
-        // guessing; an unparseable body answers 400 like /a2a/direct.
-        ctx.effect(() => webServer.register({
-            kind: 'exact',
-            path: '/a2a/query',
-            handler: (req, res) => {
-                const chunks = [];
-                let size = 0;
-                let overflowed = false;
-                req.on('data', (chunk) => {
-                    if (overflowed)
-                        return;
-                    const next = size + chunk.length;
-                    if (next > 65_536) {
-                        overflowed = true;
-                        chunks.length = 0;
-                        return;
-                    }
-                    size = next;
-                    chunks.push(chunk);
-                });
-                req.on('error', () => {
-                    if (!res.headersSent) {
-                        res.writeHead(400);
-                        res.end();
-                    }
-                });
-                req.on('end', () => {
-                    if (overflowed) {
-                        if (!res.writableEnded && !res.headersSent) {
-                            const payload = JSON.stringify({ error: 'payload too large', code: WIRE_ERROR_PAYLOAD_TOO_LARGE });
-                            res.writeHead(413, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                            res.end(payload);
-                        }
-                        return;
-                    }
-                    let body;
-                    try {
-                        body = JSON.parse(Buffer.concat(chunks).toString('utf8'));
-                    }
-                    catch {
-                        const payload = JSON.stringify({ error: 'malformed body', code: -32000 });
-                        res.writeHead(400, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                        res.end(payload);
-                        return;
-                    }
-                    const taskId = typeof body.task_id === 'string' ? body.task_id : '';
-                    const fingerprint = typeof body.fingerprint === 'string' ? body.fingerprint : '';
-                    const verdict = taskId === '' || fingerprint === ''
-                        ? { found: false, reason: 'unknown-task' }
-                        : idempotencyStore.query(taskId, fingerprint);
-                    const payload = JSON.stringify(verdict.found
-                        ? verdict.status === 'pending'
-                            ? { found: true, status: 'pending', task_id: taskId }
-                            : verdict.status === 'completed'
-                                ? {
-                                    found: true,
-                                    status: 'completed',
-                                    reply: verdict.reply,
-                                    settled_at: new Date(verdict.settledAt).toISOString(),
-                                    task_id: taskId,
-                                    ...(verdict.truncated === true ? { truncated: true } : {}),
-                                }
-                                : {
-                                    found: true,
-                                    status: 'failed',
-                                    error: verdict.error,
-                                    settled_at: new Date(verdict.settledAt).toISOString(),
-                                    task_id: taskId,
-                                    ...(verdict.truncated === true ? { truncated: true } : {}),
-                                }
-                        : { found: false, reason: verdict.reason, task_id: taskId });
-                    res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) });
-                    res.end(payload);
-                });
-            },
-        }), 'a2a: query endpoint');
+        registerWireFaces(webServer, {
+            ctx,
+            logger,
+            config,
+            cliDeposits,
+            canvasStore,
+            sessionNodes,
+            joinedSessions,
+            idempotencyStore,
+            verifyOriginClaim,
+            callerLinkedToThisHost,
+            recordActivity,
+            bumpLegacyInbound: () => { legacyInboundCount += 1; },
+            secretEqual,
+            a2aCallerRefusal,
+            scanSessionLogList,
+            readSessionLogTail,
+            taskLedger,
+            refuseIfFlooded,
+            settleAndAnnounce,
+            touchWakeDemand: () => { lastWakeDemandAt = Date.now(); },
+            session,
+            resolveAgentForTeam,
+            parseCanvasTeamName,
+            canvasLiveAgent,
+            wakeColdTeam,
+            probeConsumption,
+            steerRelay,
+            fromClause,
+            armReceiptAutosend,
+            receiptExpectationOf,
+            armAsyncNudge,
+            liveAgent,
+            callerIsAgent,
+            selfRouteText,
+            noWakeFaceText,
+            archivedColdMatchText,
+            noColdMatchText,
+            nativeTeamsPrepare,
+            nativeTeamsRound,
+            routeIntoAgent,
+        });
     });
     whenWebServerSettled((webServer) => {
         // Task-ledger control: explicit caller-side abandonment of one owed
@@ -4170,6 +2905,18 @@ ${message}`;
     async function fetchPeerCard(peer) {
         return settlePeerCard(peer, await client.fetchCardDetail(peer));
     }
+    /**
+     * Apply-scope shared card cache: every caller (teams listing, route
+     * candidate walks, panel sweeps) shares one TTL window per URL, so a
+     * poll-happy consumer cannot re-fetch a peer's card — or re-punish a dead
+     * one — more than once per window. Cards live for days and re-sign at
+     * TTL/4, so a 60s serve window is semantically safe. Negative results
+     * (unreachable/invalid) cache for a shorter window so a restarting peer
+     * reappears quickly. Scoring stays with the real network fetch only: a
+     * cache hit never re-scores, which is what keeps the debounced peer-store
+     * writes rare. Concurrent callers for one URL join a single in-flight
+     * fetch (single-flight) instead of racing N requests.
+     */
     const cardCache = new Map();
     const cardCacheInFlight = new Map();
     /**
@@ -4307,7 +3054,16 @@ ${message}`;
     function cachedCardFetch(url) {
         const hit = cardCache.get(url);
         const now = Date.now();
-        if (hit !== undefined && now - hit.at < (hit.card !== undefined ? config.cardCacheTtlMs : config.cardCacheNegativeTtlMs)) {
+        if (hit !== undefined && hit.card !== undefined && hit.missAt !== undefined) {
+            // Kept through a miss (PR#96 review P2-2 round 2): serve the old card
+            // for the negative window — a dead peer is refetched once per window,
+            // the same cadence as a peer that never had a card — and never past the
+            // card's own expiresAt: an old key gets no extra trust, and a dead peer
+            // leaves the directory when its card lapses.
+            if (now - hit.missAt < config.cardCacheNegativeTtlMs && hit.card.expiresAt > now)
+                return Promise.resolve(hit.card);
+        }
+        else if (hit !== undefined && now - hit.at < (hit.card !== undefined ? config.cardCacheTtlMs : config.cardCacheNegativeTtlMs)) {
             return Promise.resolve(hit.card);
         }
         const inFlight = cardCacheInFlight.get(url);
@@ -4315,6 +3071,17 @@ ${message}`;
             return inFlight;
         const fetch = fetchPeerCard(url)
             .then(card => {
+            // P2-2: a miss must not blank the mirror for callers joining this
+            // single flight nor for later readers — keep the last good entry,
+            // stamped missAt so the window above bounds the retries; a card past
+            // its own expiresAt is not kept (undefined, honest exit).
+            if (card === undefined) {
+                const old = cardCache.get(url);
+                if (old !== undefined && old.card !== undefined && old.card.expiresAt > Date.now()) {
+                    cardCache.set(url, { at: old.at, card: old.card, missAt: Date.now() });
+                    return old.card;
+                }
+            }
             cardCache.set(url, { at: Date.now(), card });
             return card;
         })
@@ -4439,7 +3206,7 @@ ${message}`;
                     allowlist: {
                         type: 'object',
                         additionalProperties: true,
-                        description: 'The owner-curated teamJoinAllowlist patterns and their net effect (deny-all / curated / allow-all).',
+                        description: 'The owner-curated teamJoinAllowlist: exact entries (the only join authority, gh#11) plus pattern entries kept readable but carrying no mint rights (deny-all / curated; allow-all only via explicit exact entries).',
                     },
                     teamScopeRouting: { type: 'boolean' },
                     note: { type: 'string', description: 'What join does and does not gate, in one sentence.' },
@@ -5177,11 +3944,12 @@ ${message}`;
         // node team when it has joined, else the node label), so the receiver
         // can answer with one a2a_route instead of an unroutable display label.
         a2aJoinGateRefusal(agent === undefined ? undefined : { agent });
-        // S3 (team-scoped routing, off by default): when the owner turns it
-        // on, collaboration happens inside teams. A session caller must have
-        // declared membership in the target team before it may address it,
-        // and a caller with no teams at all has no network — a teamless node
-        // is, by the same ruling, an unjoined one. Host-side calls (no agent)
+        // S3 (team-scoped routing, phase-2 default ON per the 2026-09-01 owner
+        // ruling; set false to restore the open outbound seam): a session
+        // caller must have declared membership in the target team before it
+        // may address it, and a caller with no teams at all has no network —
+        // a teamless node is, by the same ruling, an unjoined one. Host-side
+        // calls (no agent)
         // and the initiator face stay exempt, like the join gate; discovery
         // (a2a_teams) stays open so a teamless node can still see what to join.
         if (config.teamScopeRouting && agent !== undefined) {
@@ -5194,13 +3962,48 @@ ${message}`;
             if (!initiator) {
                 const callerTeams = teamMemberships.teamsOf(scopeCaller);
                 const team = String(args.team ?? '').trim();
-                if (callerTeams.length === 0) {
+                // gh#71: the SHARED-CANVAS basis and the warm cache's peer-org
+                // basis (an org entry naming BOTH the caller and the target
+                // handle) count as declared here too — the same link the
+                // admission core honors on the receiving side; without this the
+                // tool face refused routes the canvas itself had authorized.
+                // Canvas members mix two shapes: LOCAL sessions sit by session
+                // id, cross-host members by zone/id8 handle — match either.
+                const callerHandle = `${config.team}/${id8(scopeCaller)}`;
+                // gh#45 末修 (66abc2cf defect): a CANVAS GROUP NAME target
+                // (`<team>/canvas/<name>`) never matches member handles — a
+                // whole-group dispatch from a group member was refused. The
+                // group's own team handle (canvasTeamOf(name)) is the match
+                // (the caller sits in the very group being addressed).
+                const sharedCanvas = canvasStore.list().some(name => {
+                    const members = canvasStore.membersOf(name);
+                    const inGroup = members.includes(scopeCaller) || members.includes(callerHandle);
+                    return inGroup ? members.includes(team) || canvasTeamOf(name) === team : false;
+                });
+                let orgShared = false;
+                for (const cached of cardCache.values()) {
+                    const org = cached.card?.canvasOrg;
+                    if (!Array.isArray(org))
+                        continue;
+                    for (const e of org) {
+                        if (typeof e.team !== 'string' || e.team === '' || !Array.isArray(e.members))
+                            continue;
+                        const inOrg = e.members.includes(scopeCaller) || e.members.includes(callerHandle);
+                        if (inOrg && (e.members.includes(team) || e.team === team)) {
+                            orgShared = true;
+                            break;
+                        }
+                    }
+                    if (orgShared)
+                        break;
+                }
+                if (callerTeams.length === 0 && !sharedCanvas && !orgShared) {
                     return {
                         ok: false,
                         error: `team-scoped routing is on and this session (${id8(scopeCaller)}) has declared no team membership — a teamless node has no network. Declare one with a2a_team_join (subject to the owner's teamJoinAllowlist)`,
                     };
                 }
-                if (!callerTeams.includes(team)) {
+                if (!callerTeams.includes(team) && !sharedCanvas && !orgShared) {
                     return {
                         ok: false,
                         error: `team-scoped routing is on: routing to "${team}" requires declared membership. This session's teams: ${callerTeams.join(', ')}. a2a_team_join can declare it (subject to the owner's teamJoinAllowlist)`,
@@ -6218,8 +5021,13 @@ ${message}`;
                 // and learns its referrals, exactly like a discovery sweep would,
                 // while the outcome's stage names the failure for the report.
                 const card = settlePeerCard(url, outcome);
-                if (card !== undefined)
+                if (card !== undefined) {
+                    // gh#71 fix ①: a successful full-face fetch persists into the warm
+                    // cache — the probe is often the FIRST contact (no directory sweep
+                    // has run), and the state face's peerOrg reads exactly this cache.
+                    cardCache.set(url, { at: Date.now(), card });
                     return { url, reachable: true, ms, team: card.team };
+                }
                 if (outcome.ok)
                     return { url, reachable: false, ms, error: 'dropped: the card lists this node back as its own referral' };
                 return outcome.stage === 'unreachable'