@nelsonlongxiang/dsh-open-a2a-net 0.6.36 → 0.6.37

package/cli/a2a.mjs

@@ -938,7 +938,7 @@ async function main() {
     const q = (positionals()[0] ?? '').toLowerCase()
     const rows = [
       ...['dsh'].map(t => ({ team: String(t), name: String(s.session ?? 'host'), where: 'host' })),
-      ...(s.sessions ?? []).map(x => ({ team: String(x.team ?? ''), name: String(x.label ?? ''), where: 'local' })),
+      ...(s.sessions ?? []).map(x => ({ team: String(x.team ?? ''), name: String(x.seatName ?? x.name ?? x.label ?? ''), where: 'local' })),
       ...(s.remote ?? []).map(x => ({ team: String(x.team ?? ''), name: String(x.name ?? ''), where: `remote · ${String(x.via ?? '')}` })),
     ]
     const hits = rows.filter(r => q === '' || r.team.toLowerCase().includes(q) || r.name.toLowerCase().includes(q))

package/lib/a2a-client.js

@@ -29,7 +29,7 @@ export class A2aClient {
     constructor(options) {
         this.options = options;
     }
-    headers(json, url, method) {
+    headers(json, url, method, body) {
         const headers = {};
         if (json)
             headers['Content-Type'] = 'application/json';
@@ -43,7 +43,7 @@ export class A2aClient {
         // peer request when the signer is wired (full-card reads and delivery
         // verification both ride it).
         if (this.options.originClaim !== undefined) {
-            for (const [key, value] of Object.entries(this.options.originClaim({ url, method })))
+            for (const [key, value] of Object.entries(this.options.originClaim({ url, method, ...(body !== undefined ? { body } : {}) })))
                 headers[key] = value;
         }
         return headers;
@@ -65,7 +65,7 @@ export class A2aClient {
             const url = `${baseUrl}${path}`;
             const response = await this.options.fetch(url, {
                 method: init.method,
-                headers: { ...this.headers(init.body !== undefined, url, init.method), ...(init.guard !== undefined ? { 'X-A2A-Guard': init.guard } : {}) },
+                headers: { ...this.headers(init.body !== undefined, url, init.method, init.body), ...(init.guard !== undefined ? { 'X-A2A-Guard': init.guard } : {}) },
                 ...(init.body !== undefined ? { body: init.body } : {}),
                 signal: controller.signal,
             });

package/lib/client.js

@@ -22,8 +22,8 @@ window.__ModuleLoader__.load({
 			return n;
 		}
 		//#endregion
-		//#region \0dsh-css:D:\workspace\dsh-open-a2a-net\tmp\release-0.6.36-51b18cc\src\src\client\A2aControl.module.css.mjs
-		const css = ".KfHpVG_wrap{max-width:100%;display:inline-flex;position:relative}.KfHpVG_trigger{align-items:center;gap:4px;display:inline-flex;position:relative}.KfHpVG_unreadBadge{text-align:center;color:#fff;background:var(--dsh-accent,#4c8bf5);border-radius:7px;min-width:14px;height:14px;padding:0 3px;font-size:9px;line-height:14px;animation:2s ease-in-out infinite KfHpVG_badgePulse;position:absolute;top:-6px;right:-8px}@keyframes KfHpVG_badgePulse{0%,to{box-shadow:0 0 #4c8bf573}50%{box-shadow:0 0 0 4px #4c8bf500}}@media (prefers-reduced-motion:reduce){.KfHpVG_unreadBadge{animation:none}}.KfHpVG_popover{z-index:1100;border:1px solid var(--dsh-border,#2a2a30);background:var(--dsh-surface-raised,#1c1c22);border-radius:10px;flex-direction:column;gap:8px;width:320px;max-width:calc(100vw - 16px);max-height:60vh;padding:12px;display:flex;position:fixed;overflow-y:auto;box-shadow:0 8px 24px #00000059}.KfHpVG_title{font-size:13px;font-weight:600}.KfHpVG_sectionTitle{border-top:1px solid var(--dsh-border,#2a2a30);text-transform:uppercase;letter-spacing:.04em;opacity:.65;margin-top:4px;padding-top:8px;font-size:11px;font-weight:600}.KfHpVG_stageRow{border-top:1px solid var(--dsh-border,#2a2a30);align-items:center;gap:8px;margin-top:4px;padding-top:8px;display:flex}.KfHpVG_stageTitle{text-transform:uppercase;letter-spacing:.04em;opacity:.65;font-size:11px;font-weight:600}.KfHpVG_stageLinks{gap:6px;display:flex}.KfHpVG_stageLink{border:1px solid var(--dsh-border,#2a2a30);color:inherit;border-radius:999px;align-items:center;padding:3px 8px;font-size:11px;text-decoration:none;display:inline-flex}.KfHpVG_stageLink:hover,.KfHpVG_stageLink:focus-visible{border-color:var(--dsh-accent,#4c8bf5)}.KfHpVG_empty{opacity:.7;font-size:12px}.KfHpVG_row{border:1px solid #0000;border-radius:8px;align-items:center;gap:10px;padding:8px;display:flex}.KfHpVG_joined{border-color:var(--dsh-border,#2a2a30)}.KfHpVG_facts{text-align:left;min-width:0;color:inherit;font:inherit;cursor:pointer;background:0 0;border:none;border-radius:6px;flex-direction:column;flex:1;gap:2px;padding:2px 4px;display:flex}.KfHpVG_facts:hover{background:var(--dsh-surface-hover,#ffffff0f)}.KfHpVG_nameRow{align-items:center;gap:6px;display:flex}.KfHpVG_stateDot{border-radius:50%;flex:none;width:7px;height:7px}.KfHpVG_stateDot.KfHpVG_live{background:var(--dsh-accent,#4c8bf5)}.KfHpVG_stateDot.KfHpVG_live.KfHpVG_joined{background:var(--dsh-success,#3fb96f)}.KfHpVG_stateDot.KfHpVG_cold{background:var(--dsh-warning,#d9a13c)}.KfHpVG_name{text-overflow:ellipsis;white-space:nowrap;font-size:13px;font-weight:500;overflow:hidden}.KfHpVG_description{opacity:.7;text-overflow:ellipsis;white-space:nowrap;font-size:12px;overflow:hidden}.KfHpVG_team{opacity:.55;font-size:11px;font-family:var(--dsh-mono,monospace)}.KfHpVG_note{opacity:.6;font-size:11px}.KfHpVG_searchInput{box-sizing:border-box;border:1px solid var(--dsh-border,#2a2a30);background:var(--dsh-surface,#141419);width:100%;color:inherit;border-radius:6px;padding:5px 8px;font-size:12px}.KfHpVG_searchInput:focus{outline:1px solid var(--dsh-accent,#4c8bf5)}.KfHpVG_sessionGroup{flex-direction:column;gap:2px;display:flex}.KfHpVG_groupHead{color:inherit;font:inherit;opacity:.75;cursor:pointer;text-align:left;background:0 0;border:none;align-items:center;gap:6px;padding:4px 2px;font-size:11px;font-weight:600;display:flex}.KfHpVG_groupChevron{transition:transform .12s;display:inline-block}.KfHpVG_groupChevronClosed{transform:rotate(-90deg)}.KfHpVG_groupTag{text-overflow:ellipsis;white-space:nowrap;border:1px solid var(--dsh-border,#2a2a30);opacity:.8;border-radius:999px;flex:none;max-width:90px;padding:0 6px;font-size:10px;line-height:16px;overflow:hidden}.KfHpVG_groupButton{width:24px;height:24px;color:inherit;opacity:.55;cursor:pointer;background:0 0;border:1px solid #0000;border-radius:6px;flex:none;font-size:12px;line-height:1}.KfHpVG_groupButton:hover{border-color:var(--dsh-border,#2a2a30);opacity:1}.KfHpVG_groupPicker{border:1px dashed var(--dsh-border,#2a2a30);border-radius:8px;flex-wrap:wrap;gap:6px;width:100%;padding:8px;display:flex;position:relative}.KfHpVG_groupOption{border:1px solid var(--dsh-border,#2a2a30);color:inherit;cursor:pointer;background:0 0;border-radius:999px;padding:2px 8px;font-size:11px}.KfHpVG_groupOptionActive{border-color:var(--dsh-accent,#4c8bf5);color:var(--dsh-accent,#4c8bf5)}.KfHpVG_groupNew{align-items:center;gap:6px;width:100%;margin-top:2px;display:flex}.KfHpVG_groupInput{border:1px solid var(--dsh-border,#2a2a30);background:var(--dsh-surface,#141419);min-width:0;color:inherit;border-radius:6px;flex:1;padding:4px 8px;font-size:12px}.KfHpVG_peerGrid{flex-wrap:wrap;gap:6px;display:flex}.KfHpVG_peerChip{border:1px solid var(--dsh-border,#2a2a30);border-radius:999px;align-items:center;gap:6px;padding:3px 8px;font-size:11px;display:inline-flex}.KfHpVG_peerHost{text-overflow:ellipsis;white-space:nowrap;max-width:160px;overflow:hidden}.KfHpVG_peerScore{font-family:var(--dsh-mono,monospace);opacity:.6}.KfHpVG_activityList{flex-direction:column;gap:2px;display:flex}.KfHpVG_activityRow{border-radius:4px;align-items:center;gap:8px;padding:2px 4px;font-size:11px;display:flex}.KfHpVG_activityRow[data-ok=false]{opacity:.55}.KfHpVG_activityDir{flex:none;font-weight:600}.KfHpVG_activityDir.KfHpVG_in{color:var(--dsh-success,#3fb96f)}.KfHpVG_activityDir.KfHpVG_out{color:var(--dsh-accent,#4c8bf5)}.KfHpVG_activityTeam{text-overflow:ellipsis;white-space:nowrap;min-width:0;font-family:var(--dsh-mono,monospace);opacity:.8;flex:1;overflow:hidden}.KfHpVG_activityPeer{text-overflow:ellipsis;white-space:nowrap;opacity:.55;max-width:90px;overflow:hidden}.KfHpVG_activityTime{opacity:.5;font-family:var(--dsh-mono,monospace);flex:none}.KfHpVG_activityRow[data-jump=true]{cursor:pointer}.KfHpVG_activityRow[data-jump=true]:hover{background:var(--dsh-surface-hover,#ffffff0f)}.KfHpVG_fresh{animation:1.2s ease-out 3 KfHpVG_freshFlash}@keyframes KfHpVG_freshFlash{0%{background:#4c8bf538}to{background:0 0}}@media (prefers-reduced-motion:reduce){.KfHpVG_fresh{background:#4c8bf51f;animation:none}}.KfHpVG_inFlightList{flex-direction:column;gap:2px;margin-bottom:4px;display:flex}.KfHpVG_inFlightRow{border:1px dashed var(--dsh-border,#2a2a30);border-radius:4px;align-items:center;gap:8px;padding:3px 4px;font-size:11px;display:flex}.KfHpVG_inFlightPulse{background:var(--dsh-accent,#4c8bf5);border-radius:50%;flex:none;width:7px;height:7px;animation:1.1s ease-in-out infinite KfHpVG_flightPulse}@keyframes KfHpVG_flightPulse{0%,to{opacity:1;transform:scale(1)}50%{opacity:.5;transform:scale(.55)}}@media (prefers-reduced-motion:reduce){.KfHpVG_inFlightPulse{animation:none}}.KfHpVG_versionTag{color:var(--dsh-color-text-tertiary,#888);background:var(--dsh-color-bg-secondary,#8080801f);border-radius:999px;margin-left:auto;padding:1px 6px;font-size:10px;font-weight:500}.KfHpVG_inFlightStale{opacity:.55}.KfHpVG_canvasCreate{align-items:center;gap:6px;margin-bottom:4px;display:flex}.KfHpVG_canvasCreate .KfHpVG_groupInput{flex:1;min-width:0}.KfHpVG_canvasChip{max-width:100%;color:var(--dsh-color-text-secondary,#aaa);background:var(--dsh-color-bg-secondary,#8080801f);border-radius:999px;align-items:center;gap:4px;margin:2px 4px 2px 0;padding:1px 6px;font-size:11px;display:inline-flex}.KfHpVG_canvasChip>span:not([class]){white-space:nowrap;text-overflow:ellipsis;min-width:0;overflow:hidden}.KfHpVG_canvasChipRemove{cursor:pointer;min-width:24px;min-height:24px;color:var(--dsh-color-text-tertiary,#888);background:0 0;border:none;padding:2px 5px;font-size:11px;line-height:1}.KfHpVG_canvasChipRemove:hover{color:var(--dsh-color-text-primary,#eee)}.KfHpVG_canvasChipRemove{transition:color .14s ease-out}@media (prefers-reduced-motion:reduce){.KfHpVG_canvasChipRemove{transition:none}}.KfHpVG_canvasChipRemove:focus-visible{outline:2px solid var(--dsh-color-primary,#4f8cff);outline-offset:1px;border-radius:4px}.KfHpVG_canvasActions{gap:6px;margin-top:4px;display:flex}.KfHpVG_inFlightStale .KfHpVG_inFlightPulse{opacity:.4;animation:none}.KfHpVG_failMark{color:#f87171;flex-shrink:0;font-size:11px}.KfHpVG_staleNote{color:var(--dsh-text-muted,#94a3b8b3);padding:4px 8px;font-size:11px}";
+		//#region \0dsh-css:D:\workspace\dsh-open-a2a-net\tmp\release-0.6.37-d5df179\src\src\client\A2aControl.module.css.mjs
+		const css = ".efpdCG_wrap{max-width:100%;display:inline-flex;position:relative}.efpdCG_trigger{align-items:center;gap:4px;display:inline-flex;position:relative}.efpdCG_unreadBadge{text-align:center;color:#fff;background:var(--dsh-accent,#4c8bf5);border-radius:7px;min-width:14px;height:14px;padding:0 3px;font-size:9px;line-height:14px;animation:2s ease-in-out infinite efpdCG_badgePulse;position:absolute;top:-6px;right:-8px}@keyframes efpdCG_badgePulse{0%,to{box-shadow:0 0 #4c8bf573}50%{box-shadow:0 0 0 4px #4c8bf500}}@media (prefers-reduced-motion:reduce){.efpdCG_unreadBadge{animation:none}}.efpdCG_popover{z-index:1100;border:1px solid var(--dsh-border,#2a2a30);background:var(--dsh-surface-raised,#1c1c22);border-radius:10px;flex-direction:column;gap:8px;width:320px;max-width:calc(100vw - 16px);max-height:60vh;padding:12px;display:flex;position:fixed;overflow-y:auto;box-shadow:0 8px 24px #00000059}.efpdCG_title{font-size:13px;font-weight:600}.efpdCG_sectionTitle{border-top:1px solid var(--dsh-border,#2a2a30);text-transform:uppercase;letter-spacing:.04em;opacity:.65;margin-top:4px;padding-top:8px;font-size:11px;font-weight:600}.efpdCG_stageRow{border-top:1px solid var(--dsh-border,#2a2a30);align-items:center;gap:8px;margin-top:4px;padding-top:8px;display:flex}.efpdCG_stageTitle{text-transform:uppercase;letter-spacing:.04em;opacity:.65;font-size:11px;font-weight:600}.efpdCG_stageLinks{gap:6px;display:flex}.efpdCG_stageLink{border:1px solid var(--dsh-border,#2a2a30);color:inherit;border-radius:999px;align-items:center;padding:3px 8px;font-size:11px;text-decoration:none;display:inline-flex}.efpdCG_stageLink:hover,.efpdCG_stageLink:focus-visible{border-color:var(--dsh-accent,#4c8bf5)}.efpdCG_empty{opacity:.7;font-size:12px}.efpdCG_row{border:1px solid #0000;border-radius:8px;align-items:center;gap:10px;padding:8px;display:flex}.efpdCG_joined{border-color:var(--dsh-border,#2a2a30)}.efpdCG_facts{text-align:left;min-width:0;color:inherit;font:inherit;cursor:pointer;background:0 0;border:none;border-radius:6px;flex-direction:column;flex:1;gap:2px;padding:2px 4px;display:flex}.efpdCG_facts:hover{background:var(--dsh-surface-hover,#ffffff0f)}.efpdCG_nameRow{align-items:center;gap:6px;display:flex}.efpdCG_stateDot{border-radius:50%;flex:none;width:7px;height:7px}.efpdCG_stateDot.efpdCG_live{background:var(--dsh-accent,#4c8bf5)}.efpdCG_stateDot.efpdCG_live.efpdCG_joined{background:var(--dsh-success,#3fb96f)}.efpdCG_stateDot.efpdCG_cold{background:var(--dsh-warning,#d9a13c)}.efpdCG_name{text-overflow:ellipsis;white-space:nowrap;font-size:13px;font-weight:500;overflow:hidden}.efpdCG_description{opacity:.7;text-overflow:ellipsis;white-space:nowrap;font-size:12px;overflow:hidden}.efpdCG_team{opacity:.55;font-size:11px;font-family:var(--dsh-mono,monospace)}.efpdCG_note{opacity:.6;font-size:11px}.efpdCG_searchInput{box-sizing:border-box;border:1px solid var(--dsh-border,#2a2a30);background:var(--dsh-surface,#141419);width:100%;color:inherit;border-radius:6px;padding:5px 8px;font-size:12px}.efpdCG_searchInput:focus{outline:1px solid var(--dsh-accent,#4c8bf5)}.efpdCG_sessionGroup{flex-direction:column;gap:2px;display:flex}.efpdCG_groupHead{color:inherit;font:inherit;opacity:.75;cursor:pointer;text-align:left;background:0 0;border:none;align-items:center;gap:6px;padding:4px 2px;font-size:11px;font-weight:600;display:flex}.efpdCG_groupChevron{transition:transform .12s;display:inline-block}.efpdCG_groupChevronClosed{transform:rotate(-90deg)}.efpdCG_groupTag{text-overflow:ellipsis;white-space:nowrap;border:1px solid var(--dsh-border,#2a2a30);opacity:.8;border-radius:999px;flex:none;max-width:90px;padding:0 6px;font-size:10px;line-height:16px;overflow:hidden}.efpdCG_groupButton{width:24px;height:24px;color:inherit;opacity:.55;cursor:pointer;background:0 0;border:1px solid #0000;border-radius:6px;flex:none;font-size:12px;line-height:1}.efpdCG_groupButton:hover{border-color:var(--dsh-border,#2a2a30);opacity:1}.efpdCG_groupPicker{border:1px dashed var(--dsh-border,#2a2a30);border-radius:8px;flex-wrap:wrap;gap:6px;width:100%;padding:8px;display:flex;position:relative}.efpdCG_groupOption{border:1px solid var(--dsh-border,#2a2a30);color:inherit;cursor:pointer;background:0 0;border-radius:999px;padding:2px 8px;font-size:11px}.efpdCG_groupOptionActive{border-color:var(--dsh-accent,#4c8bf5);color:var(--dsh-accent,#4c8bf5)}.efpdCG_groupNew{align-items:center;gap:6px;width:100%;margin-top:2px;display:flex}.efpdCG_groupInput{border:1px solid var(--dsh-border,#2a2a30);background:var(--dsh-surface,#141419);min-width:0;color:inherit;border-radius:6px;flex:1;padding:4px 8px;font-size:12px}.efpdCG_peerGrid{flex-wrap:wrap;gap:6px;display:flex}.efpdCG_peerChip{border:1px solid var(--dsh-border,#2a2a30);border-radius:999px;align-items:center;gap:6px;padding:3px 8px;font-size:11px;display:inline-flex}.efpdCG_peerHost{text-overflow:ellipsis;white-space:nowrap;max-width:160px;overflow:hidden}.efpdCG_peerScore{font-family:var(--dsh-mono,monospace);opacity:.6}.efpdCG_activityList{flex-direction:column;gap:2px;display:flex}.efpdCG_activityRow{border-radius:4px;align-items:center;gap:8px;padding:2px 4px;font-size:11px;display:flex}.efpdCG_activityRow[data-ok=false]{opacity:.55}.efpdCG_activityDir{flex:none;font-weight:600}.efpdCG_activityDir.efpdCG_in{color:var(--dsh-success,#3fb96f)}.efpdCG_activityDir.efpdCG_out{color:var(--dsh-accent,#4c8bf5)}.efpdCG_activityTeam{text-overflow:ellipsis;white-space:nowrap;min-width:0;font-family:var(--dsh-mono,monospace);opacity:.8;flex:1;overflow:hidden}.efpdCG_activityPeer{text-overflow:ellipsis;white-space:nowrap;opacity:.55;max-width:90px;overflow:hidden}.efpdCG_activityTime{opacity:.5;font-family:var(--dsh-mono,monospace);flex:none}.efpdCG_activityRow[data-jump=true]{cursor:pointer}.efpdCG_activityRow[data-jump=true]:hover{background:var(--dsh-surface-hover,#ffffff0f)}.efpdCG_fresh{animation:1.2s ease-out 3 efpdCG_freshFlash}@keyframes efpdCG_freshFlash{0%{background:#4c8bf538}to{background:0 0}}@media (prefers-reduced-motion:reduce){.efpdCG_fresh{background:#4c8bf51f;animation:none}}.efpdCG_inFlightList{flex-direction:column;gap:2px;margin-bottom:4px;display:flex}.efpdCG_inFlightRow{border:1px dashed var(--dsh-border,#2a2a30);border-radius:4px;align-items:center;gap:8px;padding:3px 4px;font-size:11px;display:flex}.efpdCG_inFlightPulse{background:var(--dsh-accent,#4c8bf5);border-radius:50%;flex:none;width:7px;height:7px;animation:1.1s ease-in-out infinite efpdCG_flightPulse}@keyframes efpdCG_flightPulse{0%,to{opacity:1;transform:scale(1)}50%{opacity:.5;transform:scale(.55)}}@media (prefers-reduced-motion:reduce){.efpdCG_inFlightPulse{animation:none}}.efpdCG_versionTag{color:var(--dsh-color-text-tertiary,#888);background:var(--dsh-color-bg-secondary,#8080801f);border-radius:999px;margin-left:auto;padding:1px 6px;font-size:10px;font-weight:500}.efpdCG_inFlightStale{opacity:.55}.efpdCG_canvasCreate{align-items:center;gap:6px;margin-bottom:4px;display:flex}.efpdCG_canvasCreate .efpdCG_groupInput{flex:1;min-width:0}.efpdCG_canvasChip{max-width:100%;color:var(--dsh-color-text-secondary,#aaa);background:var(--dsh-color-bg-secondary,#8080801f);border-radius:999px;align-items:center;gap:4px;margin:2px 4px 2px 0;padding:1px 6px;font-size:11px;display:inline-flex}.efpdCG_canvasChip>span:not([class]){white-space:nowrap;text-overflow:ellipsis;min-width:0;overflow:hidden}.efpdCG_canvasChipRemove{cursor:pointer;min-width:24px;min-height:24px;color:var(--dsh-color-text-tertiary,#888);background:0 0;border:none;padding:2px 5px;font-size:11px;line-height:1}.efpdCG_canvasChipRemove:hover{color:var(--dsh-color-text-primary,#eee)}.efpdCG_canvasChipRemove{transition:color .14s ease-out}@media (prefers-reduced-motion:reduce){.efpdCG_canvasChipRemove{transition:none}}.efpdCG_canvasChipRemove:focus-visible{outline:2px solid var(--dsh-color-primary,#4f8cff);outline-offset:1px;border-radius:4px}.efpdCG_canvasActions{gap:6px;margin-top:4px;display:flex}.efpdCG_inFlightStale .efpdCG_inFlightPulse{opacity:.4;animation:none}.efpdCG_failMark{color:#f87171;flex-shrink:0;font-size:11px}.efpdCG_staleNote{color:var(--dsh-text-muted,#94a3b8b3);padding:4px 8px;font-size:11px}";
 		const tagId = "@nelsonlongxiang/dsh-open-a2a-net/A2aControl.module.css";
 		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId) + "]") === null) {
 			const tag = document.createElement("style");
@@ -33,67 +33,67 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var A2aControl_module_css_default = {
-			"activityDir": "KfHpVG_activityDir",
-			"activityList": "KfHpVG_activityList",
-			"activityPeer": "KfHpVG_activityPeer",
-			"activityRow": "KfHpVG_activityRow",
-			"activityTeam": "KfHpVG_activityTeam",
-			"activityTime": "KfHpVG_activityTime",
-			"badgePulse": "KfHpVG_badgePulse",
-			"canvasActions": "KfHpVG_canvasActions",
-			"canvasChip": "KfHpVG_canvasChip",
-			"canvasChipRemove": "KfHpVG_canvasChipRemove",
-			"canvasCreate": "KfHpVG_canvasCreate",
-			"cold": "KfHpVG_cold",
-			"description": "KfHpVG_description",
-			"empty": "KfHpVG_empty",
-			"facts": "KfHpVG_facts",
-			"failMark": "KfHpVG_failMark",
-			"flightPulse": "KfHpVG_flightPulse",
-			"fresh": "KfHpVG_fresh",
-			"freshFlash": "KfHpVG_freshFlash",
-			"groupButton": "KfHpVG_groupButton",
-			"groupChevron": "KfHpVG_groupChevron",
-			"groupChevronClosed": "KfHpVG_groupChevronClosed",
-			"groupHead": "KfHpVG_groupHead",
-			"groupInput": "KfHpVG_groupInput",
-			"groupNew": "KfHpVG_groupNew",
-			"groupOption": "KfHpVG_groupOption",
-			"groupOptionActive": "KfHpVG_groupOptionActive",
-			"groupPicker": "KfHpVG_groupPicker",
-			"groupTag": "KfHpVG_groupTag",
-			"in": "KfHpVG_in",
-			"inFlightList": "KfHpVG_inFlightList",
-			"inFlightPulse": "KfHpVG_inFlightPulse",
-			"inFlightRow": "KfHpVG_inFlightRow",
-			"inFlightStale": "KfHpVG_inFlightStale",
-			"joined": "KfHpVG_joined",
-			"live": "KfHpVG_live",
-			"name": "KfHpVG_name",
-			"nameRow": "KfHpVG_nameRow",
-			"note": "KfHpVG_note",
-			"out": "KfHpVG_out",
-			"peerChip": "KfHpVG_peerChip",
-			"peerGrid": "KfHpVG_peerGrid",
-			"peerHost": "KfHpVG_peerHost",
-			"peerScore": "KfHpVG_peerScore",
-			"popover": "KfHpVG_popover",
-			"row": "KfHpVG_row",
-			"searchInput": "KfHpVG_searchInput",
-			"sectionTitle": "KfHpVG_sectionTitle",
-			"sessionGroup": "KfHpVG_sessionGroup",
-			"stageLink": "KfHpVG_stageLink",
-			"stageLinks": "KfHpVG_stageLinks",
-			"stageRow": "KfHpVG_stageRow",
-			"stageTitle": "KfHpVG_stageTitle",
-			"staleNote": "KfHpVG_staleNote",
-			"stateDot": "KfHpVG_stateDot",
-			"team": "KfHpVG_team",
-			"title": "KfHpVG_title",
-			"trigger": "KfHpVG_trigger",
-			"unreadBadge": "KfHpVG_unreadBadge",
-			"versionTag": "KfHpVG_versionTag",
-			"wrap": "KfHpVG_wrap"
+			"activityDir": "efpdCG_activityDir",
+			"activityList": "efpdCG_activityList",
+			"activityPeer": "efpdCG_activityPeer",
+			"activityRow": "efpdCG_activityRow",
+			"activityTeam": "efpdCG_activityTeam",
+			"activityTime": "efpdCG_activityTime",
+			"badgePulse": "efpdCG_badgePulse",
+			"canvasActions": "efpdCG_canvasActions",
+			"canvasChip": "efpdCG_canvasChip",
+			"canvasChipRemove": "efpdCG_canvasChipRemove",
+			"canvasCreate": "efpdCG_canvasCreate",
+			"cold": "efpdCG_cold",
+			"description": "efpdCG_description",
+			"empty": "efpdCG_empty",
+			"facts": "efpdCG_facts",
+			"failMark": "efpdCG_failMark",
+			"flightPulse": "efpdCG_flightPulse",
+			"fresh": "efpdCG_fresh",
+			"freshFlash": "efpdCG_freshFlash",
+			"groupButton": "efpdCG_groupButton",
+			"groupChevron": "efpdCG_groupChevron",
+			"groupChevronClosed": "efpdCG_groupChevronClosed",
+			"groupHead": "efpdCG_groupHead",
+			"groupInput": "efpdCG_groupInput",
+			"groupNew": "efpdCG_groupNew",
+			"groupOption": "efpdCG_groupOption",
+			"groupOptionActive": "efpdCG_groupOptionActive",
+			"groupPicker": "efpdCG_groupPicker",
+			"groupTag": "efpdCG_groupTag",
+			"in": "efpdCG_in",
+			"inFlightList": "efpdCG_inFlightList",
+			"inFlightPulse": "efpdCG_inFlightPulse",
+			"inFlightRow": "efpdCG_inFlightRow",
+			"inFlightStale": "efpdCG_inFlightStale",
+			"joined": "efpdCG_joined",
+			"live": "efpdCG_live",
+			"name": "efpdCG_name",
+			"nameRow": "efpdCG_nameRow",
+			"note": "efpdCG_note",
+			"out": "efpdCG_out",
+			"peerChip": "efpdCG_peerChip",
+			"peerGrid": "efpdCG_peerGrid",
+			"peerHost": "efpdCG_peerHost",
+			"peerScore": "efpdCG_peerScore",
+			"popover": "efpdCG_popover",
+			"row": "efpdCG_row",
+			"searchInput": "efpdCG_searchInput",
+			"sectionTitle": "efpdCG_sectionTitle",
+			"sessionGroup": "efpdCG_sessionGroup",
+			"stageLink": "efpdCG_stageLink",
+			"stageLinks": "efpdCG_stageLinks",
+			"stageRow": "efpdCG_stageRow",
+			"stageTitle": "efpdCG_stageTitle",
+			"staleNote": "efpdCG_staleNote",
+			"stateDot": "efpdCG_stateDot",
+			"team": "efpdCG_team",
+			"title": "efpdCG_title",
+			"trigger": "efpdCG_trigger",
+			"unreadBadge": "efpdCG_unreadBadge",
+			"versionTag": "efpdCG_versionTag",
+			"wrap": "efpdCG_wrap"
 		};
 		//#endregion
 		//#region lib/client/A2aControl.js

package/lib/faces/admin.js

@@ -21,7 +21,7 @@ import { fileURLToPath } from 'node:url';
 import { canvasNameReserved as reservedCanvasName, isRemoteMemberRef, validRemoteMemberRef } from "../canvas-store.js";
 import { refreshPeerCard, registerCanvasNotify } from "./canvas-notify.js";
 import { CLI_HANDLE_RE } from "../cli-deposit.js";
-import { applyOwnerSettings } from "../owner-settings.js";
+import { applyOwnerSettings, parseSeatNames } from "../owner-settings.js";
 import { rosterOp } from "../roster-op.js";
 import { resolveStageMount } from "../stage-mount.js";
 import { ARCHIVE_CAP, archivedEndedBy } from "../task-ledger.js";
@@ -112,6 +112,7 @@ export function registerAdminFaces(webServer, d) {
                     sessions.push({
                         id,
                         label: `${session}-${id8(id)}`,
+                        ...(d.ownerSeatNames[id] !== undefined ? { name: d.ownerSeatNames[id], seatName: d.ownerSeatNames[id] } : {}),
                         team: `${config.team}/${id8(id)}`,
                         joined: true,
                         live: false,
@@ -522,12 +523,13 @@ export function registerAdminFaces(webServer, d) {
                 }
                 try {
                     const target = peerUrl.replace(/\/$/, '') + '/a2a/canvas-op';
+                    const body = JSON.stringify({ op: opV, name: nameV, ...(opV === 'add-member' || opV === 'remove-member' ? { id: idV !== '' && !isRemoteMemberRef(idV) && (sessionNodes.has(idV) || joinedSessions.has(idV)) ? `${config.team}/${id8(idV)}` : idV } : {}) });
                     const reply = await d.peerFetch(target, {
                         method: 'POST',
-                        headers: { 'Content-Type': 'application/json', ...originClaimHeaders({ url: target, method: 'POST' }) },
+                        headers: { 'Content-Type': 'application/json', ...originClaimHeaders({ url: target, method: 'POST', body }) },
                         // A local session id means nothing on the peer: send its zone/id8 handle (the workbench
                         // drops a local card into a remote frame with its raw session id, which the peer refused).
-                        body: JSON.stringify({ op: opV, name: nameV, ...(opV === 'add-member' || opV === 'remove-member' ? { id: idV !== '' && !isRemoteMemberRef(idV) && (sessionNodes.has(idV) || joinedSessions.has(idV)) ? `${config.team}/${id8(idV)}` : idV } : {}) }),
+                        body,
                         signal: AbortSignal.timeout(15_000),
                     });
                     const raw = await reply.text();
@@ -602,6 +604,7 @@ export function registerAdminFaces(webServer, d) {
             if (req.method === 'GET') {
                 const payload = JSON.stringify({
                     ok: true,
+                    seatNames: { ...d.ownerSeatNames },
                     teamJoinAllowlist: [...d.ownerAllowlist],
                     teamScopeInfo: d.ownerTeamScopeInfo,
                     announce: config.announce === true,
@@ -614,6 +617,17 @@ export function registerAdminFaces(webServer, d) {
             readJsonBody(req, res, (rawBody) => {
                 const body = rawBody;
                 const changes = {};
+                if (Object.hasOwn(body, 'seatName') || Object.hasOwn(body, 'seatNames')) {
+                    const names = body.seatNames;
+                    const parsedNames = parseSeatNames(names);
+                    if (Object.hasOwn(body, 'seatName') || parsedNames === undefined) {
+                        const payload = JSON.stringify({ ok: false, error: 'seatNames must map full local session ids to nonempty display names (max 64 characters, no controls); clear by omitting the id' });
+                        res.writeHead(400, { 'Content-Type': 'application/json' });
+                        res.end(payload);
+                        return;
+                    }
+                    changes.seatNames = parsedNames;
+                }
                 if (Array.isArray(body.teamJoinAllowlist)) {
                     const list = body.teamJoinAllowlist.filter((name) => typeof name === 'string' && name !== '' && name.length <= 128);
                     changes.teamJoinAllowlist = [...new Set(list)];
@@ -634,7 +648,9 @@ export function registerAdminFaces(webServer, d) {
                     const { yaml, restartNeeded } = applyOwnerSettings(current, changes);
                     mkdirSync(home, { recursive: true });
                     writeFileSync(patchPath, yaml, 'utf8');
-                    // Hot-apply the two call-time keys.
+                    // Hot-apply the call-time owner keys.
+                    if (changes.seatNames !== undefined)
+                        d.ownerSeatNames = changes.seatNames;
                     if (changes.teamJoinAllowlist !== undefined)
                         d.ownerAllowlist = [...changes.teamJoinAllowlist];
                     if (changes.teamScopeInfo !== undefined)

package/lib/faces/canvas-notify.js

@@ -50,7 +50,7 @@ export function registerCanvasNotify(webServer, d) {
             const target = url.replace(/\/$/, '') + '/a2a/canvas-changed';
             void d.peerFetch(target, {
                 method: 'POST',
-                headers: { 'Content-Type': 'application/json', ...originClaimHeaders({ url: target, method: 'POST' }) },
+                headers: { 'Content-Type': 'application/json', ...originClaimHeaders({ url: target, method: 'POST', body: '{}' }) },
                 body: '{}',
                 signal: AbortSignal.timeout(SEND_TIMEOUT_MS),
             }).then(async (reply) => {
@@ -95,11 +95,13 @@ export function registerCanvasNotify(webServer, d) {
                 res.writeHead(200, { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(text) });
                 res.end(text);
             };
-            // The ping has no content: drain a small body without buffering it,
-            // and cut off anything larger.
+            // Retain only bounded raw ping bytes for Sig3 verification; cut off oversized uploads.
             let size = 0;
-            req.on('data', (chunk) => { size += chunk.length; if (size > 4 * 1024)
-                req.destroy(); });
+            const chunks = [];
+            req.on('data', (chunk) => { size += chunk.length; if (size > 4 * 1024) {
+                req.destroy();
+                return;
+            } chunks.push(chunk); });
             req.on('end', () => {
                 void (async () => {
                     if (req.method !== 'POST') {
@@ -115,7 +117,7 @@ export function registerCanvasNotify(webServer, d) {
                         send({ ok: false, error: 'caller is not a tracked peer of this host' });
                         return;
                     }
-                    const claim = await verifyOriginClaim(req);
+                    const claim = await verifyOriginClaim(req, { rawBody: Buffer.concat(chunks) });
                     if (!claim.ok) {
                         send({ ok: false, error: `untrusted-origin: OriginClaim verification failed (${claim.reason})` });
                         return;

package/lib/faces/wire.js

@@ -111,8 +111,13 @@ export function registerWireFaces(webServer, d) {
             req.on('end', () => {
                 void (async () => {
                     try {
-                        const body = JSON.parse(Buffer.concat(chunks).toString('utf8'));
-                        const claim = await verifyOriginClaim(req);
+                        if (size > 16 * 1024) {
+                            send(413, JSON.stringify({ ok: false, error: 'payload too large' }));
+                            return;
+                        }
+                        const rawBody = Buffer.concat(chunks);
+                        const body = JSON.parse(rawBody.toString('utf8'));
+                        const claim = await verifyOriginClaim(req, { rawBody });
                         if (!claim.ok) {
                             logger.warn(`a2a: canvas-op claim failed (${claim.reason}) — caller=${String(req.headers['x-a2a-caller'] ?? '')} url=${String(req.headers['x-a2a-caller-url'] ?? '')} ts=${String(req.headers['x-a2a-caller-ts'] ?? '')}`);
                             send(200, JSON.stringify({ ok: false, error: `untrusted-origin: OriginClaim verification failed (${claim.reason}) — canvas regulation requires a signed envelope`, code: -32000 }));
@@ -402,9 +407,10 @@ export function registerWireFaces(webServer, d) {
                     }
                     return;
                 }
+                const rawBody = Buffer.concat(chunks);
                 let body;
                 try {
-                    body = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+                    body = JSON.parse(rawBody.toString('utf8'));
                     if (body === null || typeof body !== 'object' || Array.isArray(body))
                         throw new TypeError('direct body must be a JSON object'); // #168: `null` read body.team in this async 'end' callback → unhandled rejection → host exit
                 }
@@ -474,7 +480,7 @@ export function registerWireFaces(webServer, d) {
                 // F1: only a FOREIGN CLI handle needs a bound host claim and live home card
                 // before admission. Every other caller keeps the existing admission-first order.
                 const foreignCli = config.teamScopeRouting && CLI_HANDLE_RE.test(caller) && cliDeposits.get(caller) === undefined;
-                const earlyClaim = foreignCli ? await verifyOriginClaim(req, { cli: true }) : undefined;
+                const earlyClaim = foreignCli ? await verifyOriginClaim(req, { cli: true, rawBody }) : undefined;
                 const cliProof = foreignCli && earlyClaim?.ok ? await remoteCliProof(caller, earlyClaim).catch(() => undefined) : undefined;
                 const admission = a2aCallerAdmission(caller, team, cliProof);
                 const callerRefusal = refusalOf(admission);
@@ -496,7 +502,7 @@ export function registerWireFaces(webServer, d) {
                 // after the window closes it rejects like a failed signature —
                 // N3 proves a NAME's linkability, never key possession.
                 // gh#133: the delivery face is where a deposited CLI identity signs its routes.
-                const claim = earlyClaim ?? await verifyOriginClaim(req, { cli: true });
+                const claim = earlyClaim ?? await verifyOriginClaim(req, { cli: true, rawBody });
                 if (!claim.ok) {
                     if (claim.reason !== 'absent' || config.originClaimWindow === false) {
                         recordActivity('in', team, caller, false);

package/lib/index.js

@@ -31,8 +31,10 @@ import { GroupStore } from "./group-store.js";
 import { CanvasStore, canvasNameReserved, isRemoteMemberRef } from "./canvas-store.js";
 import { decodeSessionLog, extractTranscript, TRANSCRIPT_MAX_FILE_BYTES } from "./session-transcript.js";
 import { LayoutStore } from "./layout-store.js";
+import { peerLinkDisplay } from "./peer-link-display.js";
 import { JoinedSessions } from "./joined-store.js";
 import { ExposureStore } from "./exposure-store.js";
+import { loadSeatNames } from "./owner-settings.js";
 import { CLI_HANDLE_RE, CliDepositStore } from "./cli-deposit.js";
 import { cliHomeChoices, decideCliHome } from "./cli-home.js";
 import { outboundScope } from "./outbound-scope.js";
@@ -111,6 +113,7 @@ export const Config = s.object({
      * refused join carries guidance instead of failing silently.
      */
     teamJoinAllowlist: s.array(s.string()).default([]),
+    seatNames: s.dict(s.any()).default({}),
     /**
      * S3 (phase-2 default, owner ruling 2026-09-01): route dispatch checks
      * caller↔target shared team membership before addressing — a session
@@ -570,7 +573,9 @@ export function apply(ctx, config) {
      * request) and the relay/notify faces.
      */
     function originClaimHeaders(target) {
-        return signOriginClaim(target, { caller: config.team, callerUrl: ownCardUrl, privateKey: nodePrivateKey, unbound: config.originClaimUnboundWindow !== false, now: Date.now() });
+        // No local web/card anchor yet: keep the preexisting absent-envelope migration posture, not a malformed Sig3.
+        const signedTarget = ownCardUrl === '' ? { url: target.url, method: target.method } : target;
+        return signOriginClaim(signedTarget, { caller: config.team, callerUrl: ownCardUrl, privateKey: nodePrivateKey, unbound: config.originClaimUnboundWindow !== false, now: Date.now() });
     }
     const client = new A2aClient({
         apiKey: config.apiKey,
@@ -598,6 +603,8 @@ export function apply(ctx, config) {
     // are read at call time, so the panel's write applies WITHOUT a restart;
     // announce is boot-time publishing (restart pending flag for the UI).
     let ownerAllowlist = [...(config.teamJoinAllowlist ?? [])];
+    let ownerSeatNames = loadSeatNames(config.seatNames ?? {}, reason => logger.warn(reason));
+    ctx.tools.guard(exec => exec.name.startsWith('a2a_') && exec.arguments !== null && typeof exec.arguments === 'object' && (Object.hasOwn(exec.arguments, 'seatName') || Object.hasOwn(exec.arguments, 'seatNames')) ? 'seatName is human-owned; use the workbench owner settings, not model tools' : undefined);
     // Truthiness matches the ORIGINAL read site (`if (config.teamScopeInfo)`):
     // literal compositions without the schema default carry undefined, which
     // reads as the OPEN plane — `!== false` would silently scope them.
@@ -1253,14 +1260,15 @@ export function apply(ctx, config) {
     const LEGACY_PREWARM_PROBE_TITLE = '[prewarm] 请回复 ok。';
     function nodeMetadataOf(agent) {
         const title = sessionTitleOf(agent);
-        const cwd = agent.session.header?.cwd;
+        const cwd = agent.session?.header?.cwd;
         // Display-layer fallback (pure presentation, zero data mutation): a title
         // that IS the legacy probe reads as machine junk in every directory and
         // card — surface the stable seat label instead. The session-title
         // service's stored value is untouched.
         const displayTitle = title !== undefined && title !== '' && title !== LEGACY_PREWARM_PROBE_TITLE ? title : undefined;
         return {
-            name: displayTitle !== undefined ? displayTitle : sessionLabelOf(agent),
+            name: ownerSeatNames[String(agent.id)] ?? (displayTitle !== undefined ? displayTitle : sessionLabelOf(agent)),
+            ...(ownerSeatNames[String(agent.id)] !== undefined ? { seatName: ownerSeatNames[String(agent.id)] } : {}),
             description: recentActivityOf(agent),
             ...(cwd !== undefined && cwd !== '' ? { workspace: cwd } : {}),
         };
@@ -1659,6 +1667,8 @@ export function apply(ctx, config) {
                 get unboundInboundCount() { return unboundInboundCount; },
                 get boundMissInboundCount() { return boundMissInboundCount; },
                 get ownCardUrl() { return ownCardUrl; },
+                get ownerSeatNames() { return ownerSeatNames; },
+                set ownerSeatNames(v) { ownerSeatNames = v; },
                 get ownerAllowlist() { return ownerAllowlist; },
                 set ownerAllowlist(v) { ownerAllowlist = v; },
                 get ownerTeamScopeInfo() { return ownerTeamScopeInfo; },
@@ -1776,7 +1786,7 @@ export function apply(ctx, config) {
                         ...[...sessionNodes.values()].filter(isJoinedNode).map(agent => exposureRow(sessionTeamOf(agent), nodeMetadataOf(agent))),
                         ...joinedSessions.list()
                             .filter(id => !liveRoots.has(id) && isArchived?.(id) !== true)
-                            .map(id => exposureRow(`${config.team}/${id8(id)}`, { name: `${session}-${id8(id)}`, description: 'cold — not loaded; routing here wakes the session' })),
+                            .map(id => exposureRow(`${config.team}/${id8(id)}`, { name: ownerSeatNames[id] ?? `${session}-${id8(id)}`, ...(ownerSeatNames[id] !== undefined ? { seatName: ownerSeatNames[id] } : {}), description: 'cold — not loaded; routing here wakes the session' })),
                         // gh#45/47: deposited CLI identities publish as directory rows —
                         // the fleet sees them as member cards (draggable = the operator
                         // link). Their "zone" is the agent-name. gh#47: an EXPIRED
@@ -2224,6 +2234,7 @@ export function apply(ctx, config) {
             loopbackArrival: (config.originClaimUrl ?? '') === '',
             now: Date.now(),
             ...(options?.cli === true ? { cliDeposit: cliDepositCard } : {}),
+            ...(options?.rawBody !== undefined ? { rawBody: options.rawBody } : {}),
         });
     }
     /**
@@ -2817,10 +2828,10 @@ export function apply(ctx, config) {
     }
     /**
      * gh#20 W-A: THIS host's view of one tracked peer's link state (the
-     * mirror of callerLinkedToThisHost, judged from our side about THEM):
-     *   · linked — bilateral seeding (our config.peers carries a URL of the
-     *     peer's origin AND the peer's card carries ours), or a canvas remote
-     *     ref naming the peer's zone or one of its session teams;
+     * display projection, not an admission decision:
+     *   · linked — bilateral URL seeding, or a canvas reference to an exact
+     *     nonlocal session handle uniquely advertised by that peer card key;
+     *     a shared zone or a minimal card alone never proves host identity;
      *   · stranger — no operator-established basis (a verified key is not a
      *     relationship);
      *   · verified — we hold a signature-valid cached card (the badge's
@@ -2835,6 +2846,15 @@ export function apply(ctx, config) {
      * Pure over warm caches and config; never fetches.
      */
     function peerLinkState(peerUrl) {
+        return peerLinkDisplay(peerUrl, {
+            card: cardCache.get(peerUrl)?.card, ownUrl: ownCardUrl, seeds: config.peers,
+            refs: canvasStore.list().flatMap(name => [...canvasStore.remoteMembersOf(name)]),
+            ownHandles: new Set([...joinedSessions.list(), ...liveRoots.keys()].map(id => `${config.team}/${id8(id)}`)),
+            cards: [...cardCache.values()].flatMap(entry => entry.card === undefined ? [] : [entry.card]),
+        });
+    }
+    // Compatibility for existing CLI home/admission semantics: badge projection must not change authorization.
+    function peerAdmissionLinkState(peerUrl) {
         const cached = cardCache.get(peerUrl)?.card;
         const verified = cached !== undefined;
         const zone = cached?.team ?? '';
@@ -2901,7 +2921,7 @@ export function apply(ctx, config) {
             const card = await fetchPeerCard(url).catch(() => undefined);
             if (card !== undefined)
                 cardCache.set(url, { at: Date.now(), card });
-            return { url, card, linked: card === undefined || peerLinkState(url).link === 'linked' };
+            return { url, card, linked: card === undefined || peerAdmissionLinkState(url).link === 'linked' };
         });
     }
     async function cliHomeForAdd(handle, requested) {
@@ -2935,7 +2955,7 @@ export function apply(ctx, config) {
             if (card === undefined || card.publicKey !== claim.card.publicKey)
                 continue;
             cardCache.set(url, { at: Date.now(), card });
-            if (peerLinkState(url).link !== 'linked')
+            if (peerAdmissionLinkState(url).link !== 'linked')
                 continue;
             const row = card.sessionTeams?.find(item => item.team === handle);
             if (row !== undefined)

package/lib/origin-claim.js

@@ -4,7 +4,7 @@
  * face (card, /a2a/direct, /a2a/log, /a2a/canvas-op, /a2a/canvas-changed)
  * runs.
  *
- * Two canonical forms ride the same four base headers
+ * Three canonical forms share the base caller headers
  * (X-A2A-Caller / -Url / -Ts):
  *   · bound (v2, §2.1): JSON.stringify([tag, caller, callerUrl, ts,
  *     audience, METHOD, path]) in X-A2A-Caller-Sig2, the audience origin in
@@ -14,18 +14,22 @@
  *   · unbound (v1, legacy): JSON.stringify([caller, callerUrl, ts]) in
  *     X-A2A-Caller-Sig. Emitted and accepted only while the unbound window
  *     is open (originClaimUnboundWindow); accepted ones are counted.
- * Once the window closes a present Sig2 is the only thing verified. While
+ * A present Sig3 requires the exact raw body and v3 signature, with no downgrade.
+ * Without Sig3, once the window closes a present Sig2 is the only thing verified. While
  * it is open, a Sig2 that misses (audience or signature) falls back to the
  * Sig the envelope also carries — no more than stripping Sig2 would give —
  * and the miss is counted, so a peer dialled by an unlisted name keeps
  * working through the rollout and shows on the gauge.
  */
-import { createPublicKey, sign as edSign, verify as edVerify } from 'node:crypto';
+import { createHash, createPublicKey, sign as edSign, verify as edVerify } from 'node:crypto';
 import { verifyCard } from "./card.js";
 /** ts skew tolerance (protocol constant, §7). */
 export const ORIGIN_CLAIM_SKEW_MS = 5 * 60_000;
 /** Domain tag of the bound form: a v1 signature can never verify as v2. */
 export const ORIGIN_CLAIM_BOUND_TAG = 'a2a-origin-claim/2';
+export const ORIGIN_CLAIM_BODY_TAG = 'a2a-origin-claim/3';
+/** Digest the exact UTF-8 string/bytes passed to transport, never reserialized JSON. */
+export const originBodySha256 = (body) => createHash('sha256').update(body).digest('base64url');
 /** Only the canonical origin root can claim that origin's identity. */
 export function isRootOriginUrl(value) {
     try {
@@ -62,6 +66,10 @@ export function unboundCanonical(caller, callerUrl, ts) {
 export function boundCanonical(caller, callerUrl, ts, audience, method, path) {
     return JSON.stringify([ORIGIN_CLAIM_BOUND_TAG, caller, callerUrl, ts, audience, method.toUpperCase(), path]);
 }
+/** The body-bound v3 form is domain-separated from v1/v2, with the digest appended. */
+export function bodyBoundCanonical(caller, callerUrl, ts, audience, method, path, bodySha256) {
+    return JSON.stringify([ORIGIN_CLAIM_BODY_TAG, caller, callerUrl, ts, audience, method.toUpperCase(), path, bodySha256]);
+}
 /** An origin in URL's normal form, or '' when the text is not an http(s) URL. */
 export function originOf(url) {
     try {
@@ -98,6 +106,11 @@ export function signOriginClaim(target, signer) {
     if (audience !== '') {
         headers['X-A2A-Caller-Aud'] = audience;
         headers['X-A2A-Caller-Sig2'] = sign(boundCanonical(caller, callerUrl, ts, audience, target.method, pathOf(target.url)));
+        if (target.body !== undefined) {
+            const digest = originBodySha256(target.body);
+            headers['X-A2A-Body-Sha256'] = digest;
+            headers['X-A2A-Caller-Sig3'] = sign(bodyBoundCanonical(caller, callerUrl, ts, audience, target.method, pathOf(target.url), digest));
+        }
     }
     if (signer.unbound)
         headers['X-A2A-Caller-Sig'] = sign(unboundCanonical(caller, callerUrl, ts));
@@ -153,15 +166,21 @@ export async function verifyOriginClaim(req, d) {
     const unboundSig = header('x-a2a-caller-sig');
     const boundSig = header('x-a2a-caller-sig2');
     const audience = header('x-a2a-caller-aud');
-    if (caller === '' || callerUrl === '' || !Number.isFinite(ts) || ts <= 0 || (unboundSig === '' && boundSig === ''))
-        return { ok: false, reason: 'absent' };
+    const hasBodySig = req.headers['x-a2a-caller-sig3'] !== undefined;
+    const bodySig = header('x-a2a-caller-sig3');
+    const digest = header('x-a2a-body-sha256');
+    // Presence, even malformed/empty, opts into v3. It must never become absent/legacy or fall back to Sig2/v1.
+    if (hasBodySig && (!bodySig || !/^[A-Za-z0-9_-]{43}$/.test(digest) || d.rawBody === undefined || originBodySha256(d.rawBody) !== digest))
+        return { ok: false, reason: 'body-mismatch' };
+    if (caller === '' || callerUrl === '' || !Number.isFinite(ts) || ts <= 0 || (unboundSig === '' && boundSig === '' && !hasBodySig))
+        return { ok: false, reason: hasBodySig ? 'bad-sig' : 'absent' };
     if (!originClaimCallerShape.test(caller))
         return { ok: false, reason: 'bad-caller-shape' };
     if (Math.abs(d.now - ts) > ORIGIN_CLAIM_SKEW_MS)
         return { ok: false, reason: 'bad-ts' };
-    const hasBound = boundSig !== '';
+    const hasBound = boundSig !== '' || hasBodySig;
     const audienceOk = hasBound && requestAudiences(req, d.audiences, d.loopbackArrival ?? true).has(originOf(audience));
-    const fallback = d.unboundOpen && unboundSig !== '';
+    const fallback = !hasBodySig && d.unboundOpen && unboundSig !== '';
     if (hasBound && !audienceOk && !fallback)
         return { ok: false, reason: 'wrong-audience' };
     if (!hasBound && !d.unboundOpen)
@@ -179,6 +198,10 @@ export async function verifyOriginClaim(req, d) {
     // signature is accepted for migration compatibility but remains unbound.
     let bound = false;
     const signedBy = (card) => {
+        if (hasBodySig) {
+            bound = audienceOk && verifies(card, bodyBoundCanonical(caller, callerUrl, ts, audience, req.method ?? '', pathOf(req.url ?? ''), digest), bodySig);
+            return bound;
+        }
         bound = audienceOk && verifies(card, boundCanonical(caller, callerUrl, ts, audience, req.method ?? '', pathOf(req.url ?? '')), boundSig);
         return bound || (fallback && verifies(card, unboundCanonical(caller, callerUrl, ts), unboundSig));
     };