@nelsonlongxiang/dsh-open-a2a-net 0.6.32 → 0.6.33

package/lib/types/canvas-store.d.ts

@@ -113,3 +113,7 @@ export declare class CanvasStore {
      */
     dropMember(id: string): void;
 }
+/** One policy predicate for local and signed-remote canvas creation. */
+export declare function canvasNameReserved(raw: string, zone: string, allowlist: readonly string[], roster: {
+    membersOf(team: string): readonly string[];
+}): boolean;

package/lib/types/faces/admin.d.ts

@@ -74,6 +74,7 @@ export interface AdminFaceDeps extends Pick<CanvasNotifyDeps, 'verifyOriginClaim
         team: string;
         id: string;
         ok: boolean;
+        actor?: string;
         reason?: string;
     }[];
     readonly reportRing: {

package/lib/types/faces/wire.d.ts

@@ -120,6 +120,7 @@ export interface WireDeps {
     readonly config: Config;
     readonly cliDeposits: CliDepositStore;
     readonly canvasStore: CanvasStore;
+    readonly canvasNameReserved: (name: string) => boolean;
     readonly sessionNodes: Map<string, Agent>;
     readonly joinedSessions: JoinedSessions;
     readonly idempotencyStore: IdempotencyStore;

package/lib/types/roster-op.d.ts

@@ -0,0 +1,21 @@
+import { type TeamMembershipStore } from './team-store.ts';
+export interface RosterOpDeps {
+    zone: string;
+    home: string;
+    store: TeamMembershipStore;
+    joined: (id: string) => boolean;
+    canvasExists: (name: string) => boolean;
+    allowlist: () => readonly string[];
+    setAllowlist: (list: string[]) => void;
+    audit: (action: 'join' | 'leave', team: string, id: string, ok: boolean, reason: string) => void;
+}
+export type RosterOpResult = {
+    ok: true;
+    team: string;
+    members: string[];
+} | {
+    ok: false;
+    error: string;
+};
+/** Writes complete snapshots; on a failed second write, rolls the first back. */
+export declare function rosterOp(d: RosterOpDeps, raw: unknown): RosterOpResult;

package/lib/types/team-store.d.ts

@@ -51,6 +51,13 @@ export declare class TeamMembershipStore {
     add(session: string, team: string): void;
     /** Retract one membership; a no-op when absent. */
     remove(session: string, team: string): void;
+    /** One atomic roster replacement for the owner's workbench gesture. A failed disk write changes no in-memory membership. */
+    replaceTeam(team: string, members: readonly string[]): {
+        ok: true;
+    } | {
+        ok: false;
+        error: string;
+    };
     /** Drop every declaration of one session (a left or archived node). */
     dropSession(session: string): void;
     /**

package/nexus-stage/src/canvas-ops.ts

@@ -19,7 +19,7 @@ import type { LayoutDoc } from './layout-doc'
 export type RosterOp = { op: 'remove' | 'add'; id: string }
 
 /** The five user-facing write actions (one per design.md §3.3 row), plus the two network join/leave actions the panel-slim migration moved into the planning view. */
-export type CanvasAction =
+export type CanvasAction = (
   | { type: 'create-team'; name: string; ids: readonly string[]; /** true when the model had no such team before this action; NOT server creation provenance and never authority to delete on failure. */ created?: boolean }
   | { type: 'add-member'; team: string; ids: readonly string[]; /** gh#41: set when the target frame is a REMOTE peer's team — the wire routes the op through the host fleet relay. */ fleetPeer?: string }
   | { type: 'remove-member'; team: string; ids: readonly string[]; /** gh#41: see add-member. */ fleetPeer?: string }
@@ -29,6 +29,7 @@ export type CanvasAction =
   /** Network-level join/leave (the session joins the A2A mesh) — distinct from canvas-team membership. */
   | { type: 'join-network'; id: string }
   | { type: 'leave-network'; id: string }
+) & { roster?: boolean }
 
 /** Reverts exactly what one applyAction did (team-scoped). */
 export type Undo = () => void

package/nexus-stage/src/layout-doc.ts

@@ -66,11 +66,13 @@ function clampRect(raw: unknown): LayoutRect | undefined {
  * Normalize an untrusted layout document exactly as the host does:
  * version!==1 rejects the whole doc; non-finite coordinates drop the
  * point; coordinates round and clamp to ±COORD_LIMIT; scale clamps to
- * [SCALE_MIN, SCALE_MAX]; node keys cap at 128 chars; frame keys mirror
- * canvas team names (no '/', cap 40); rects need w>0 and h>0; caps are
+ * [SCALE_MIN, SCALE_MAX]; node keys cap at 128 chars; canvas frame names cap at 40,
+ * roster:<name> reserves seven extra characters; rects need w>0 and h>0; caps are
  * first-wins in insertion order - entries beyond are silently dropped,
  * never refused (an overflow renders, it just does not persist).
  */
+const validFrame = (name: string): boolean => name !== '' && !name.includes('/') && (name.startsWith('roster:') ? name.length > 7 && name.length <= 47 : name.length <= 40)
+
 export function clampDoc(raw: unknown): LayoutDoc | undefined {
   if (raw === null || typeof raw !== 'object') return undefined
   const rec = raw as Record<string, unknown>
@@ -96,7 +98,7 @@ export function clampDoc(raw: unknown): LayoutDoc | undefined {
   const frames: Record<string, LayoutRect> = {}
   if (rec.frames !== null && typeof rec.frames === 'object') {
     for (const [name, rect] of Object.entries(rec.frames as Record<string, unknown>)) {
-      if (typeof name !== 'string' || name === '' || name.includes('/') || name.length > 40) continue
+      if (!validFrame(name)) continue
       const r = clampRect(rect)
       if (r !== undefined) frames[name] = r
       if (Object.keys(frames).length >= LAYOUT_FRAME_CAP) break
@@ -127,7 +129,7 @@ export function buildLayoutDoc(
   }
   const docFrames: Record<string, LayoutRect> = {}
   for (const [name, r] of frames) {
-    if (typeof name !== 'string' || name === '' || name.includes('/') || name.length > 40) continue
+    if (!validFrame(name)) continue
     const w = clamp(r.w)
     const h = clamp(r.h)
     if (w <= 0 || h <= 0) continue

package/nexus-stage/src/main.ts

@@ -9,9 +9,10 @@
 import { createFaultReporter } from './fault'
 import { createWorkbench, type StateBody } from './workbench'
 import { createPlanningView } from './planning-view'
+import { rosterFrames, rosterNameOf } from './planning-roster'
 import { createSaveLoop, type LampState } from './layout-wire'
 import { createCanvasWire } from './canvas-wire'
-import type { CanvasAction } from './canvas-ops'
+import { actionTeam, type CanvasAction } from './canvas-ops'
 import './workbench.css'
 
 const app = document.getElementById('app')!
@@ -171,6 +172,24 @@ async function fleetOp(peer: string, op: 'add-member' | 'remove-member' | 'remov
   return false
 }
 
+async function rosterAction(a: CanvasAction, name: string): Promise<boolean> {
+  const post = async (body: Record<string, unknown>): Promise<boolean> => {
+    const reply = await controlFetch('/__dsh_a2a/roster-op', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ name, ...body }) }).catch(() => undefined)
+    const result = reply !== undefined ? await reply.json().catch(() => undefined) as { ok?: boolean; error?: string } | undefined : undefined
+    if (reply?.ok && result?.ok === true) return true
+    planning.notice('error', `roster 操作失败：${String(result?.error ?? (reply ? `HTTP ${reply.status}` : '无响应'))}`)
+    return false
+  }
+  if (a.type === 'create-team') return post({ op: 'create', ids: a.ids })
+  if (a.type === 'remove-team') return post({ op: 'dissolve' })
+  if (a.type === 'add-member' || a.type === 'remove-member') {
+    for (const id of a.ids) if (!(await post({ op: a.type, id }))) return false
+    return true
+  }
+  planning.notice('error', 'roster 不支持该操作')
+  return false
+}
+
 function runCanvasAction(a: CanvasAction): Promise<boolean> {
   // gh#41: a remote-frame drop forks to the fleet relay; so does dissolving
   // a mirror frame (single owner + mirror: the owner's store is the truth).
@@ -182,6 +201,12 @@ function runCanvasAction(a: CanvasAction): Promise<boolean> {
     })()
   }
   if (a.type === 'remove-team' && a.fleetPeer !== undefined) return fleetOp(a.fleetPeer, 'remove', a.name)
+  // Only a trusted registry roster frame or an explicit create choice may trigger a local roster write.
+  if (a.roster === true) {
+    const roster = rosterNameOf(actionTeam(a))
+    if (roster !== undefined) return rosterAction(a, roster)
+    planning.notice('error', '无效的 roster 框名'); return Promise.resolve(false)
+  }
   switch (a.type) {
     case 'create-team': return canvasWire.createTeam(a.name, a.ids, a.created)
     case 'add-member': return canvasWire.addMembers(a.team, a.ids)
@@ -440,7 +465,7 @@ async function poll(): Promise<void> {
     // SessionLite needs `joined: boolean` (workbench rows carry `joined?`):
     // tri-state → boolean without losing the unjoined node-list population.
     const allSessions = (body.sessions ?? []).map(s => ({ ...s, joined: s.joined === true }))
-    const teams = body.canvas?.teams ?? []
+    const teams = [...(body.canvas?.teams ?? []), ...rosterFrames(body.registry?.teams ?? [], body.zone ?? '')]
     const peers = (body.peers ?? []).filter(p => p !== null && typeof p === 'object' && typeof (p as { url?: unknown }).url === 'string')
     const inFlight = (body.inFlight ?? []).filter(r => r !== null && typeof r === 'object' && typeof (r as { team?: unknown }).team === 'string' && typeof (r as { peer?: unknown }).peer === 'string' && Number.isFinite((r as { startedAt?: unknown }).startedAt))
     const remoteTeams = (body.remote ?? [])

package/nexus-stage/src/planning-frame-hue.ts

@@ -0,0 +1,13 @@
+/** Stable team hue shared by canvas and roster frames. */
+import { FRAME_HUES } from './tokens'
+
+export function frameHue(name: string): { line: string; bg: string } {
+  let h = 0
+  for (let i = 0; i < name.length; i++) h = ((h * 31 + name.charCodeAt(i)) & 0xfffffff) >>> 0
+  const rgb = FRAME_HUES[h % FRAME_HUES.length]!
+  const line = "#" + rgb.toString(16).padStart(6, "0")
+  const r = (rgb >> 16) & 0xff
+  const g = (rgb >> 8) & 0xff
+  const b = rgb & 0xff
+  return { line, bg: `rgba(${r},${g},${b},0.05)` }
+}

package/nexus-stage/src/planning-legend.ts

@@ -27,6 +27,7 @@ export function createLegend(): HTMLDetailsElement {
   }
   row(false, '成员边（星形，框→成员）')
   row(true, '跨队多属（虚线）')
+  row(true, 'roster 网络队框（双线边框）')
   row(false, '活动边（inFlight 路由，瞬时）', 'var(--accent)')
   row(true, '联邦线（→peer）', 'var(--federal)')
   legend.append(summary, rows)

package/nexus-stage/src/planning-menus.ts

@@ -8,6 +8,7 @@
  * @module nexus-stage/planning-menus
  */
 import { reorderOps, type CanvasAction } from './canvas-ops'
+import { rosterFrameName, rosterFrameTitle } from './planning-roster'
 import type { PlanningSession, PlanningTeam } from './planning-types'
 import type { WorldModel } from './world'
 
@@ -22,6 +23,8 @@ export interface MenusDeps {
   readonly model: WorldModel
   /** Canvas teams from the latest poll. */
   teams(): ReadonlyArray<PlanningTeam>
+  joined(id: string): boolean
+  isRoster(frame: string): boolean
   /** The card or frame-head element a menu re-focuses on close. */
   anchorFor(target: MenuTarget): HTMLElement | null
   emit(a: CanvasAction): void
@@ -45,6 +48,7 @@ export interface PlanningMenus {
 
 export function createPlanningMenus(d: MenusDeps): PlanningMenus {
   const { root, netBtn, signal, model } = d
+  const titleOf = (frame: string): string => d.isRoster(frame) ? rosterFrameTitle(frame) : frame
 
   // ── 建队：selection → 命名对话框 → create-team ──
   function selectedByY(): string[] {
@@ -87,6 +91,12 @@ export function createPlanningMenus(d: MenusDeps): PlanningMenus {
     title.id = 'p-dialog-title'
     title.className = 'p-dialog-title'
     title.textContent = `组建团队（${ids.length} 个节点，自上而下即优先级）`
+    const kind = document.createElement('select')
+    kind.className = 'p-dialog-kind'
+    kind.setAttribute('aria-label', '团队类型')
+    for (const [value, label] of [['canvas', 'canvas 队'], ['roster', 'roster 网络队']]) {
+      const option = document.createElement('option'); option.value = value; option.textContent = label; kind.appendChild(option)
+    }
     const input = document.createElement('input')
     input.className = 'p-dialog-input'
     input.maxLength = 40
@@ -103,7 +113,7 @@ export function createPlanningMenus(d: MenusDeps): PlanningMenus {
     cancelBtn.type = 'button'
     cancelBtn.textContent = '取消'
     row.append(okBtn, cancelBtn)
-    panel.append(title, input, err, row)
+    panel.append(title, kind, input, err, row)
     wrap.appendChild(panel)
     root.appendChild(wrap)
 
@@ -115,25 +125,27 @@ export function createPlanningMenus(d: MenusDeps): PlanningMenus {
     }
     const nameError = (): string | null => {
       const name = input.value.trim()
-      if (name === '' || name.length > 40 || name.includes('/') || /^\d+$/.test(name)) {
-        return '队名需 1..40 字，不含“/”，不为纯数字'
-      }
+      if (name === '' || name.length > 40 || name.includes('/') || name.startsWith('roster:') || (kind.value === 'roster' && name.includes('*')) || /^\d+$/.test(name)) return '队名需 1..40 字，不含“/”、通配符或保留前缀，不为纯数字'
+      if (kind.value === 'roster' && model.getFrame(name) !== undefined) return '同名 canvas 队已存在，不能创建 roster 队'
+      if (kind.value === 'roster' && model.getFrame(rosterFrameName(name)) !== undefined && !d.isRoster(rosterFrameName(name))) return 'roster 框名已被 canvas 或镜像队占用'
+      if (kind.value === 'canvas' && model.getFrame(rosterFrameName(name)) !== undefined) return '同名 roster 队已存在，不能创建 canvas 队'
+      if (kind.value === 'roster' && ids.some(id => model.getNode(id)?.remote === true || !d.joined(id))) return 'roster 仅接受本机已入网的会话'
       return null
     }
     const confirm = (): void => {
       const problem = nameError()
       if (problem !== null) { err.textContent = problem; input.focus(); return }
-      const name = input.value.trim()
+      const name = kind.value === 'roster' ? rosterFrameName(input.value.trim()) : input.value.trim()
       close()
       if (model.getFrame(name) !== undefined) {
         // Duplicate name: host create is idempotent-ok, but the optimistic
         // create-team would WIPE the existing roster and overwrite its saved
         // frame rect. Join instead — same wire result, nothing destroyed.
-        d.notice('info', `已加入现有团队「${name}」`)
+        d.notice('info', `已加入现有团队「${kind.value === 'roster' ? rosterFrameTitle(name) : name}」`)
         d.emit({ type: 'add-member', team: name, ids })
         return
       }
-      d.emit({ type: 'create-team', name, ids, created: true })
+      d.emit({ type: 'create-team', name, ids, created: true, ...(kind.value === 'roster' ? { roster: true } : {}) })
     }
     okBtn.addEventListener('click', confirm)
     cancelBtn.addEventListener('click', close)
@@ -149,7 +161,7 @@ export function createPlanningMenus(d: MenusDeps): PlanningMenus {
       if (e.key === 'Escape') { e.preventDefault(); e.stopPropagation(); close(); return }
       if (e.key !== 'Tab') return
       e.preventDefault()
-      const focusables = Array.from(panel.querySelectorAll<HTMLElement>('input, button'))
+      const focusables = Array.from(panel.querySelectorAll<HTMLElement>('input, select, button'))
       const idx = focusables.indexOf(document.activeElement as HTMLElement)
       const next = e.shiftKey
         ? focusables[(idx - 1 + focusables.length) % focusables.length]
@@ -252,7 +264,7 @@ export function createPlanningMenus(d: MenusDeps): PlanningMenus {
     el.setAttribute('aria-label', '团队操作')
     let items: HTMLButtonElement[] = []
     if (target.kind === 'frame') {
-      items = [menuItem(`解散团队「${target.name}」`, true, () => d.emit({ type: 'remove-team', name: target.name }))]
+      items = [menuItem(`解散团队「${titleOf(target.name)}」`, true, () => d.emit({ type: 'remove-team', name: target.name }))]
     } else {
       const id = target.id
       if (level === 'root') {
@@ -278,13 +290,17 @@ export function createPlanningMenus(d: MenusDeps): PlanningMenus {
         for (const t of d.teams()) {
           if (level === 'join') {
             const already = (model.getNode(id)?.memberships.some(m => m.team === t.name)) ?? true
-            items.push(menuItem(already ? `${t.name}（已加入）` : t.name, !already, () => d.emit({ type: 'add-member', team: t.name, ids: [id] })))
+            const allowed = !d.isRoster(t.name) || (d.joined(id) && model.getNode(id)?.remote !== true)
+            const item = menuItem(already ? `${titleOf(t.name)}（已加入）` : titleOf(t.name), !already && allowed, () => d.emit({ type: 'add-member', team: t.name, ids: [id] }))
+            if (!allowed) item.title = 'roster 只接受本机已入网会话'
+            items.push(item)
           } else if (level === 'leave') {
             const member = (model.getNode(id)?.memberships.some(m => m.team === t.name)) ?? false
-            items.push(menuItem(t.name, member, () => d.emit({ type: 'remove-member', team: t.name, ids: [id] })))
+            items.push(menuItem(titleOf(t.name), member, () => d.emit({ type: 'remove-member', team: t.name, ids: [id] })))
           } else {
             const member = (model.getNode(id)?.memberships.some(m => m.team === t.name)) ?? false
-            items.push(menuItem(t.name, member, () => {
+            if (d.isRoster(t.name)) continue
+            items.push(menuItem(titleOf(t.name), member, () => {
               const current = model.teamMemberIds(t.name)
               const desired = [id, ...current.filter(x => x !== id)]
               d.emit({ type: 'reorder', team: t.name, ops: reorderOps(current, desired) })

package/nexus-stage/src/planning-roster.ts

@@ -0,0 +1,15 @@
+/** Roster frames use an independent layout namespace beside canvas frames. */
+import type { PlanningTeam } from './planning-types'
+
+export const ROSTER_PREFIX = 'roster:'
+export const rosterNameOf = (frame: string): string | undefined => frame.startsWith(ROSTER_PREFIX) ? frame.slice(ROSTER_PREFIX.length) : undefined
+export const rosterFrameName = (name: string): string => ROSTER_PREFIX + name
+export const rosterFrameTitle = (frame: string): string => { const name = rosterNameOf(frame); return name === undefined ? frame : `网络队 · roster · ${name}` }
+export function rosterFrames(rows: readonly { team: string; members: readonly string[] }[], zone: string): PlanningTeam[] {
+  return rows.flatMap(row => {
+    if (zone === '' || !row.team.startsWith(zone + '/') || !Array.isArray(row.members)) return []
+    const name = row.team.slice(zone.length + 1)
+    if (name === '' || name.length > 40 || name.includes('/') || name.startsWith(ROSTER_PREFIX) || name.includes('*')) return []
+    return [{ name: rosterFrameName(name), team: row.team, kind: 'roster' as const, members: row.members.filter(id => typeof id === 'string' && id !== '').map(id => ({ id })) }]
+  })
+}

package/nexus-stage/src/planning-types.ts

@@ -12,7 +12,7 @@ import type { SessionLite, TeamLite } from './world'
 
 /** Minimal session/team shapes consumed here (topology rows satisfy them). */
 export interface PlanningSession extends SessionLite {}
-export interface PlanningTeam extends TeamLite {}
+export interface PlanningTeam extends TeamLite { kind?: 'roster' }
 
 export interface PlanningInput {
   sessions: ReadonlyArray<PlanningSession>

package/nexus-stage/src/planning-view.ts

@@ -41,7 +41,8 @@ import { clampViewport, fitView, panBy, screenToWorld, worldTransformCss, zoomAt
 import { boardBounds, fitBelowHud, hudBottomOf } from './planning-fit'
 import { WorldModel, nodeRect, deriveInitialFrame, homeTeams, planSeatClear, planTeamClusters, NODE_W, NODE_H } from './world'
 import { applyAction, settleAction, actionTeam, innermostFrameAt, reorderOps, yOrderedMembers, type CanvasAction } from './canvas-ops'
-import { FRAME_HUES } from './tokens'
+import { frameHue } from './planning-frame-hue'
+import { rosterFrameTitle } from './planning-roster'
 import { createPlanningMenus } from './planning-menus'
 import { createNodeFlyer, mountBoardSearch } from './planning-search'
 import { applyBoardRelayout } from './planning-relayout'
@@ -58,23 +59,10 @@ import './planning.css'
 export { viewportBucket } from './planning-types'
 export type { PlanningDeps, PlanningInput, PlanningSession, PlanningTeam, PlanningView, SeamKey, SeamPointer, ViewportBucket } from './planning-types'
 
-/** Team-name hue, same 31-polynomial family as the 3D scene's getHue. */
-function frameHue(name: string): { line: string; bg: string } {
-  let h = 0
-  for (let i = 0; i < name.length; i++) h = ((h * 31 + name.charCodeAt(i)) & 0xfffffff) >>> 0
-  const rgb = FRAME_HUES[h % FRAME_HUES.length]!
-  const line = '#' + rgb.toString(16).padStart(6, '0')
-  // 5% alpha fill over the dark base, per the design system.
-  const r = (rgb >> 16) & 0xff
-  const g = (rgb >> 8) & 0xff
-  const b = rgb & 0xff
-  return { line, bg: `rgba(${r},${g},${b},0.05)` }
-}
-
 
 type Gesture =
   | { readonly kind: 'none' }
-  | { readonly kind: 'node'; ids: readonly string[]; clicked: string; last: { x: number; y: number }; moved: boolean; el: Element | null }
+  | { readonly kind: 'node'; ids: readonly string[]; clicked: string; rosterOrigin?: string; last: { x: number; y: number }; moved: boolean; el: Element | null }
   | { readonly kind: 'frame'; name: string; snap: NonNullable<ReturnType<WorldModel['beginFrameDrag']>>; origin: { x: number; y: number }; moved: boolean }
   | { readonly kind: 'frame-resize'; name: string; dir: string; startRect: { x: number; y: number; w: number; h: number }; origin: { x: number; y: number }; moved: boolean }
   | { readonly kind: 'pan'; last: { x: number; y: number }; moved: boolean }
@@ -372,7 +360,10 @@ export function createPlanningView(deps: PlanningDeps): PlanningView {
       const title = el.querySelector<HTMLElement>('.ttl')!
       const cnt = el.querySelector<HTMLElement>('.cnt')!
       const route = el.querySelector<HTMLElement>('.route')!
-      if (title.textContent !== name) title.textContent = name
+      const isRoster = rosterFramesRef.has(name)
+      const shownName = isRoster ? rosterFrameTitle(name) : name
+      if (title.textContent !== shownName) title.textContent = shownName
+      el.classList.toggle('is-roster', isRoster)
       let members = 0
       let cross = 0
       for (const m of model.allNodes()) {
@@ -385,7 +376,7 @@ export function createPlanningView(deps: PlanningDeps): PlanningView {
       if (cnt.textContent !== cntText) cnt.textContent = cntText
       const mirror = mirrorRoute(remoteFramesRef.get(name), pendingTeams.has(name)) // PR#96 single owner + mirror
       const unavailable = mirror !== undefined && reachability.hosts.has(peerHostOf(remoteFramesRef.get(name)!))
-      const routeText0 = mirror?.text ?? routeText(name)
+      const routeText0 = mirror?.text ?? (lastTeams.find(x => x.name === name)?.team ?? name)
       if (route.textContent !== routeText0) route.textContent = routeText0
       route.title = `${mirror?.title ?? ''}${unavailable ? ` · ${UNREACHABLE_HINT}` : ''}`
       showFrameReachability(el, unavailable)
@@ -400,12 +391,6 @@ export function createPlanningView(deps: PlanningDeps): PlanningView {
     }
   }
 
-  /** The mono route line `<host>/canvas/<name>` when the payload carries it. */
-  function routeText(name: string): string {
-    const t = lastTeams.find(x => x.name === name)
-    return t?.team ?? name
-  }
-
   // ── keyed diff: nodes ──
   function renderNodes(): void {
     const seen = new Set<string>()
@@ -534,10 +519,17 @@ export function createPlanningView(deps: PlanningDeps): PlanningView {
   // gh#41: remote-frame registry (frame name → peer URL), refreshed by
   // reconcile and read by emitAction's serverAction to fork remote drops.
   let remoteFramesRef = new Map<string, string>()
+  let rosterFramesRef = new Set<string>()
   let reachability = unreachableRefs({})
   const dissolving = createDissolveGuard(deps.now)
 
   function emitAction(a: CanvasAction): void {
+    const roster = (a.type === 'create-team' && a.roster === true) || rosterFramesRef.has(actionTeam(a))
+    if (roster && a.type === 'remove-team' && !window.confirm(`解散网络队「${rosterFrameTitle(a.name)}」并撤回成员与白名单？`)) return
+    if (roster && a.type === 'reorder') { notice('error', 'roster 队不支持置顶路由'); return }
+    if (roster && (a.type === 'create-team' || a.type === 'add-member') && a.ids.some(id => model.getNode(id)?.remote === true || !lastSessions.some(s => s.id === id && s.joined === true))) {
+      notice('error', 'roster 只接受本机已入网会话，远端或未入网成员未写入'); return
+    }
     // gh#20 W-B: the SERVER sees zone/id8 remote handles where the model
     // keeps its peer-<host> node id — the canvas member contract is
     // session-id-or-remote-ref. Translation happens here, one boundary;
@@ -590,14 +582,16 @@ export function createPlanningView(deps: PlanningDeps): PlanningView {
         })
       }
     }
+    if (roster && a.type === 'create-team') rosterFramesRef.add(a.name)
     const undo = applyAction(model, a)
     const team = actionTeam(a)
     pendingAdd(team)
     render()
-    const sent = serverAction(a)
+    const sent = serverAction(roster ? { ...a, roster: true } : a)
     void deps.onCanvasAction(sent).then(
       ok => {
         pendingRelease(team)
+        if (!ok && a.type === 'create-team' && roster) rosterFramesRef.delete(team)
         layoutDoc = settleAction(model, a, ok, undo, layoutDoc); markDirty(); dissolving.settled(sent, ok)
         render()
       },
@@ -606,6 +600,7 @@ export function createPlanningView(deps: PlanningDeps): PlanningView {
         // team's guard (and its optimistic state) forever — and per §3.4
         // 不吞错, the rollback surfaces to the user.
         pendingRelease(team)
+        if (a.type === 'create-team' && roster) rosterFramesRef.delete(team)
         layoutDoc = settleAction(model, a, false, undo, layoutDoc); markDirty(); dissolving.settled(sent, false)
         notice('error', '操作通道异常，已回滚')
         render()
@@ -628,6 +623,8 @@ export function createPlanningView(deps: PlanningDeps): PlanningView {
   const menus = createPlanningMenus({
     root, netBtn, signal, model,
     teams: () => lastTeams,
+    joined: id => lastSessions.some(s => s.id === id && s.joined === true),
+    isRoster: name => rosterFramesRef.has(name),
     anchorFor: (t) => (t.kind === 'node' ? nodeEls.get(t.id) : frameEls.get(t.name)) ?? null,
     emit: emitAction,
     notice,
@@ -698,8 +695,11 @@ export function createPlanningView(deps: PlanningDeps): PlanningView {
         }
       }
     }
-    // Blank drop: a position move only. No roster writes — the explicit
-    // context-menu 离队 (and the node drawer) remain the removal paths.
+    // Canvas blank drops move only; leaving a roster frame explicitly retracts those declarations.
+    if (gesture.rosterOrigin !== undefined && f !== gesture.rosterOrigin) {
+      const leaving = gesture.ids.filter(id => model.teamMemberIds(gesture.rosterOrigin!).includes(id))
+      if (leaving.length > 0) emitAction({ type: 'remove-member', team: gesture.rosterOrigin, ids: leaving })
+    }
   }
 
   function pointerDown(ev: SeamPointer): void {
@@ -768,7 +768,8 @@ export function createPlanningView(deps: PlanningDeps): PlanningView {
       const already = model.isSelected(id)
       if (!already && !ev.shiftKey) model.setSelection([id])
       const ids = ev.shiftKey || already ? (model.isSelected(id) ? model.selectedIds() : [...model.selectedIds(), id]) : [id]
-      gesture = { kind: 'node', clicked: id, ids, last: screenToWorld(vp, p.x, p.y), moved: false, el: nodeEl }
+      const origin = innermostFrameAt(new Map(model.allFrames()), screenToWorld(vp, p.x, p.y))
+      gesture = { kind: 'node', clicked: id, ids, ...(origin && rosterFramesRef.has(origin) && model.teamMemberIds(origin).includes(id) ? { rosterOrigin: origin } : {}), last: screenToWorld(vp, p.x, p.y), moved: false, el: nodeEl }
       nodeEl.classList.add('dragging')
     } else if (headEl !== null) {
       if (ev.button !== 0) return
@@ -1126,6 +1127,7 @@ export function createPlanningView(deps: PlanningDeps): PlanningView {
   function reconcile(input: PlanningInput): void {
     // gh#41: remote-frame registry shared with serverAction (drop fork).
     lastTeams = input.teams
+    rosterFramesRef = new Set([...input.teams.filter(t => t.kind === 'roster').map(t => t.name), ...[...rosterFramesRef].filter(n => pendingTeams.has(n))])
     lastPeers = input.peers ?? []
     federation.setInFlight(input.inFlight ?? [])
     // Unjoined sessions have no node on the canvas — the panel-slim

package/nexus-stage/src/planning.css

@@ -83,6 +83,8 @@
 #dsh-plan .p-frame-head .cnt{color:var(--ink-muted); font-weight:400}
 #dsh-plan .p-frame-head .route{font-size:10.5px; color:var(--ink-muted)}
 #dsh-plan .p-frame.is-mirror{border-style:dashed}
+#dsh-plan .p-frame.is-roster{border-style:double;border-width:3px}
+#dsh-plan .p-frame.is-roster .p-frame-head{border-style:dashed}
 #dsh-plan .p-frame.is-syncing .p-frame-head .route{color:var(--accent)}
 #dsh-plan .p-frame.is-unreachable{opacity:.76;border-style:dashed}
 #dsh-plan .p-frame-unreachable{position:absolute;left:8px;top:20px;max-width:calc(100% - 16px);color:var(--uupm-error);font-size:11px;pointer-events:none}

package/nexus-stage/src/workbench.ts

@@ -150,6 +150,7 @@ export interface ActivityRow {
 
 /** The /state subset the workbench consumes (additive fields ignored). */
 export interface StateBody {
+  readonly zone?: string
   readonly version?: string
   readonly sessions?: readonly SessionRow[]
   readonly canvas?: { teams?: readonly CanvasTeamRow[] }
@@ -176,6 +177,7 @@ export interface StateBody {
   readonly archived?: readonly ArchivedRow[]
   /** gh#41 fleet planning: each tracked peer's published canvas org. */
   readonly peerOrg?: readonly PeerOrgRow[]
+  readonly registry?: { teams?: ReadonlyArray<{ team: string; members: readonly string[]; live?: number }> }
   readonly archivedCount?: number
   /** Settled-archive split by verdict (the receipt outcome vocabulary — 'completed' | 'rejected' | 'failed' | … | 'abandoned' — or 'unclassified'). */
   readonly archivedSplit?: Readonly<Record<string, number>>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nelsonlongxiang/dsh-open-a2a-net",
-  "version": "0.6.32",
+  "version": "0.6.33",
   "description": "Open A2A network plugin for DeepSeek Harness: signed agent cards, decentralized peer/zone discovery, direct routing model tools, and joinable session nodes with a sidebar control",
   "type": "module",
   "main": "lib/index.js",
@@ -84,8 +84,9 @@
     "test:mesh": "vitest run tests/mesh",
     "test:live": "vitest run tests/live",
     "test:build-layout": "vitest run tests/gates/build-layout.spec.ts",
+    "verify:docs": "node scripts/doc-drift.mjs",
     "verify:nexus": "node scripts/verify-nexus-ci.mjs && npm --prefix nexus-stage run build && npm --prefix nexus-stage run test && git diff --exit-code -- assets/nexusDist/assets && git diff --ignore-cr-at-eol --exit-code -- assets/nexusDist/index.html",
-    "verify": "pnpm typecheck && pnpm build && pnpm test && pnpm test:build-layout && pnpm verify:nexus"
+    "verify": "pnpm typecheck && pnpm verify:docs && pnpm build && pnpm test && pnpm test:build-layout && pnpm verify:nexus"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": ">=4.0.1",