@nelsonlongxiang/dsh-open-a2a-net 0.6.38 → 0.6.39

package/cli/a2a.mjs

@@ -46,6 +46,7 @@ usage: a2a <command> [args] [--home URL] [--key <apiKey>] [--json]
 户口制:   init <name> [--uuid 16hex] [--force] · publish · inbox [--new|--wait|--hook] · revoke
 对齐面:   whoami · teams [query] · route <team> <msg…> [--sync] [--context ID] [--task ID] · status · tasks · probe · report <msg…> [--task ID]
 CLI 专有: skills [name] [--json] [--root DIR] · tools (this alignment table) · help
+独立节点: serve [--config node.json] [--host 127.0.0.1|0.0.0.0] [--port N] [--home DIR]   (the network layer without a DSH instance)
 文件通道: file send <path…> <team> [--note TEXT] · file fetch <ref> [--out DIR]   (#91: bytes never ride a message)
 
 host:     --home > $A2A_HOME > the home saved by 'a2a init --home URL' > ${DEFAULT_HOME}
@@ -108,7 +109,8 @@ function parseArgs(argv) {
   return { flags, positional }
 }
 
-const parsed = parseArgs(process.argv.slice(2))
+// `serve` owns its flags (cli/serve.mjs) and loads the node runtime lazily: the other commands never need it.
+const parsed = process.argv[2] === 'serve' ? { flags: new Map(), positional: ['serve'] } : parseArgs(process.argv.slice(2))
 const cmd = parsed.positional[0] ?? ''
 const flag = (name) => {
   const value = parsed.flags.get(name)
@@ -868,7 +870,8 @@ async function printDelivery(verb, res) {
     if (out.task_status !== undefined && out.task_status !== 'TASK_STATE_COMPLETED') console.error(`[${verb}] status ${String(out.task_status)} — the round has not settled; reconcile by task id before re-sending`)
     return
   }
-  if (out.delivered !== true) die(`[${verb}] not delivered (HTTP ${String(res.status)}): ${String(out.error ?? out.task_status ?? 'no reason given')}`)
+  // #282 S1: one actionable next step under the reason, when the host knows one.
+  if (out.delivered !== true) die(`[${verb}] not delivered (HTTP ${String(res.status)}): ${String(out.error ?? out.task_status ?? 'no reason given')}${typeof out.next === 'string' && out.next !== '' ? `\n[${verb}] next: ${out.next}` : ''}`)
   const receipt = out.receipt === 'none' ? 'no receipt will come' : 'receipt arrives in: a2a inbox'
   console.log(`[${verb}] delivered → ${String(out.team)} · task ${String(out.task_id)} · ${receipt}`)
 }
@@ -877,18 +880,23 @@ async function printDelivery(verb, res) {
 function stateCanvasTeams(s) {
   const rows = []
   const owner = String(s.ownerHost ?? home())
-  for (const team of s.canvas?.teams ?? []) rows.push({ team: String(team.team ?? String(s.zone ?? 'dsh') + '/canvas/' + team.name), name: String(team.name), kind: 'canvas', owner, memberCount: (team.members ?? []).length, where: 'local canvas', members: (team.members ?? []).map(m => typeof m === 'string' ? m : m.team ?? m.id) })
+  for (const team of s.canvas?.teams ?? []) rows.push({ team: String(team.id ?? team.team ?? String(s.zone ?? 'dsh') + '/canvas/' + team.name), name: String(team.name), kind: 'canvas', owner, memberCount: (team.members ?? []).length, where: 'local canvas', members: (team.members ?? []).map(m => typeof m === 'string' ? m : m.team ?? m.id) })
   const seen = new Set()
   for (const peer of s.peerOrg ?? []) for (const team of peer.org ?? []) {
     const key = String(peer.url) + ':' + String(team.team)
     if (seen.has(key)) continue
     seen.add(key)
-    rows.push({ team: String(team.team), name: String(team.name), kind: 'canvas', owner: String(peer.url), memberCount: (team.members ?? []).length, where: 'remote canvas', members: team.members ?? [] })
+    rows.push({ team: String(team.id || team.team), name: String(team.name), kind: 'canvas', owner: String(peer.url), memberCount: (team.members ?? []).length, where: 'remote canvas', members: team.members ?? [] })
   }
   return rows
 }
 
 async function main() {
+  if (cmd === 'serve') {
+    const { serve } = await import('./serve.mjs')
+    await serve(process.argv.slice(3))
+    return
+  }
   if (cmd === 'help' || has('--help') || has('-h')) {
     console.log(USAGE)
     return

package/cli/serve.mjs

@@ -0,0 +1,132 @@
+/**
+ * `a2a-net serve` — the A2A network layer as a standalone node, without a DSH instance
+ * (owner request 2026-11-04: the network must not go down when a DSH host restarts).
+ *
+ * It boots the same plugin a DSH host runs, in a bare cordis context with only the four
+ * services the network layer needs (system prompt, tool runtime, timer, web server) and no
+ * sessions: cards and OriginClaim, the peer directory, CLI deposits and mailboxes, one-hop
+ * forwarding, canvas ownership, the task ledger, the state face and the workbench. Delivering
+ * to an AI session still needs a DSH host — this node forwards there like any home host.
+ *
+ *   a2a-net serve [--config node.json] [--host 127.0.0.1|0.0.0.0] [--port 13090] [--home DIR]
+ *
+ * node.json holds plugin Config keys (team, session, agentName, apiKey, peers,
+ * originClaimUrl, originClaimAudiences, forwardDirect, …); flags win over the file.
+ */
+import { readFileSync, mkdirSync } from 'node:fs'
+import { homedir, hostname } from 'node:os'
+import { join, resolve } from 'node:path'
+
+/** The tested runtime set (the repo lockfile's versions); npm's `latest` tags are older and do not work. */
+export const SERVE_DEPS = {
+  '@deepseek-ai/cordis': '4.0.5',
+  '@deepseek-ai/cordis-plugin-timer': '1.1.7',
+  '@deepseek-ai/dsh-host-webserver': '0.1.7-rc.2',
+  '@deepseek-ai/dsh-tools': '0.1.7-rc.2',
+  '@deepseek-ai/dsh-system-prompt': '0.1.7-rc.2',
+  '@deepseek-ai/dsh-home-paths': '0.1.7-rc.2',
+  '@deepseek-ai/dsh-llm': '0.1.7-rc.2',
+  '@deepseek-ai/dsh-session': '0.1.7-rc.2',
+  '@deepseek-ai/schemastery': '3.18.5',
+}
+
+export const SERVE_USAGE = 'usage: a2a-net serve [--config node.json] [--host 127.0.0.1|0.0.0.0] [--port 13090] [--home DIR]'
+
+/** One `npm i` line that installs this package and the tested runtime set into a folder. */
+export function installLine(version) {
+  return 'npm i @nelsonlongxiang/dsh-open-a2a-net@' + version + ' ' + Object.entries(SERVE_DEPS).map(([name, v]) => name + '@' + v).join(' ')
+}
+
+/** Merge file config and flags into the plugin config; pure. */
+export function nodeConfig(file, flags) {
+  const raw = flags.port ?? file.port ?? 13090
+  const port = typeof raw === 'number' ? raw : /^\d+$/.test(String(raw)) ? Number(raw) : NaN
+  if (!Number.isInteger(port) || port < 0 || port > 65535) throw new Error('--port must be an integer 0-65535')
+  const home = resolve(flags.home ?? file.dshHome ?? join(homedir(), '.a2a-net', 'node'))
+  const { port: _port, host: _host, ...rest } = file
+  void _port; void _host
+  return {
+    host: flags.host ?? file.host ?? '127.0.0.1',
+    port,
+    config: {
+      team: 'dsh',
+      agentName: 'a2a-net node',
+      session: 'a2a-node-' + hostname().toLowerCase().replace(/[^a-z0-9-]/g, '-').slice(0, 24),
+      apiKey: '',
+      peers: [],
+      announce: true,
+      ...rest,
+      // The control faces (state, CLI deposits and mailboxes, canvas) are mounted with session nodes; this node
+      // composes no agents service, so there is no session to track, expose or wake.
+      sessionNodes: true,
+      wakeJoinedOnBoot: false,
+      dshHome: home,
+    },
+  }
+}
+
+/** Boot the node; resolves to { url, close }. `load` is injectable for tests. */
+export async function startNode({ host, port, config }, load = specifier => import(specifier)) {
+  const [{ Context }, timer, webServer, tools, systemPrompt, plugin] = await Promise.all([
+    load('@deepseek-ai/cordis'),
+    load('@deepseek-ai/cordis-plugin-timer'),
+    load('@deepseek-ai/dsh-host-webserver'),
+    load('@deepseek-ai/dsh-tools'),
+    load('@deepseek-ai/dsh-system-prompt'),
+    load(new URL('../lib/index.js', import.meta.url).href),
+  ])
+  mkdirSync(config.dshHome, { recursive: true })
+  const ctx = new Context()
+  await ctx.plugin(systemPrompt.default)
+  await ctx.plugin(tools.default)
+  await ctx.plugin(timer.default)
+  await ctx.plugin(webServer.default, { host, port })
+  try {
+    plugin.apply(ctx, plugin.Config(config))
+  } catch (error) {
+    await ctx.fiber.dispose() // the web server is already listening
+    throw error
+  }
+  const bound = ctx.webServer.port
+  const url = 'http://' + (host === '0.0.0.0' ? '127.0.0.1' : host) + ':' + String(bound)
+  return { url, port: bound, close: async () => { await ctx.fiber.dispose() } }
+}
+
+/** CLI entry: parse argv, boot, log one line, stay up until SIGINT/SIGTERM. */
+export async function serve(argv) {
+  const version = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8')).version
+  const flags = {}
+  if (argv.includes('--help') || argv.includes('-h')) { console.log(SERVE_USAGE); process.exit(0) }
+  for (let i = 0; i < argv.length; i++) {
+    const eq = argv[i].indexOf('=')
+    const name = eq === -1 ? argv[i] : argv[i].slice(0, eq)
+    const inline = eq === -1 ? undefined : argv[i].slice(eq + 1)
+    if (!['--config', '--host', '--port', '--home'].includes(name)) { console.error(SERVE_USAGE); process.exit(2) }
+    const value = inline ?? argv[++i]
+    if (value === undefined || value === '' || value.startsWith('--')) { console.error(SERVE_USAGE); process.exit(2) }
+    flags[name.slice(2)] = value
+  }
+  let file = {}
+  if (flags.config !== undefined) {
+    try { file = JSON.parse(readFileSync(flags.config, 'utf8')) } catch (error) { console.error('[serve] cannot read --config ' + flags.config + ': ' + error.message); process.exit(2) }
+    if (file === null || typeof file !== 'object' || Array.isArray(file)) { console.error('[serve] --config must hold a JSON object of plugin config keys'); process.exit(2) }
+  }
+  let options
+  try { options = nodeConfig(file, flags) } catch (error) { console.error('[serve] ' + error.message); process.exit(2) }
+  let node
+  try {
+    node = await startNode(options)
+  } catch (error) {
+    if (error?.code === 'ERR_MODULE_NOT_FOUND') {
+      console.error('[serve] a runtime dependency is missing: ' + error.message.split('\n')[0])
+      console.error('[serve] install the tested set into a folder and run from there:\n  ' + installLine(version) + '\n  npx a2a-net serve --config node.json')
+      process.exit(1)
+    }
+    console.error('[serve] failed to start: ' + (error?.stack ?? error))
+    process.exit(1)
+  }
+  console.log('[serve] a2a-net node on ' + node.url + ' · zone ' + options.config.team + ' · session ' + options.config.session + ' · home ' + options.config.dshHome + ' (no DSH sessions; Ctrl+C to stop)')
+  const stop = async () => { await node.close().catch(() => {}); process.exit(0) }
+  process.once('SIGINT', stop)
+  process.once('SIGTERM', stop)
+}

package/cordis.patch.yml

@@ -1,21 +1,21 @@
-# Bundle patch for @nelsonlongxiang/dsh-open-a2a-net: mounts the a2a row into
-# the host composition of a dsh profile. The plugin registers its
-# /.well-known/agent-card.json announce route, its /__dsh_a2a/* state and
-# control routes, and the a2a_teams / a2a_route model tools on the shared web
-# server and tool runtime — it owns no listener of its own, so compose it
-# beside a webserver row (the stock web profile already has one).
-#
-# Install: `dsh plugin --profile <name> add @nelsonlongxiang/dsh-open-a2a-net`
-# (npm, a local path, or Git). The `dsh plugin` command pnpm-installs the
-# package into the profile and reconciles it into the profile's
-# `dsh.profile.bundles` layer list.
-#
-# All config keys carry schema defaults: session nodes are on (the sidebar
-# join control works out of the box), announce is opt-in. Peers, zone
-# delegates, and an API key are set per deployment through row config
-# overlays, never here.
-- insert:
-    - id: a2a
-      # Node-resolvable package name — must stay in sync with package.json
-      # `name`. Quoted because `@` is a reserved YAML indicator.
-      name: '@nelsonlongxiang/dsh-open-a2a-net'
+# Bundle patch for @nelsonlongxiang/dsh-open-a2a-net: mounts the a2a row into
+# the host composition of a dsh profile. The plugin registers its
+# /.well-known/agent-card.json announce route, its /__dsh_a2a/* state and
+# control routes, and the a2a_teams / a2a_route model tools on the shared web
+# server and tool runtime — it owns no listener of its own, so compose it
+# beside a webserver row (the stock web profile already has one).
+#
+# Install: `dsh plugin --profile <name> add @nelsonlongxiang/dsh-open-a2a-net`
+# (npm, a local path, or Git). The `dsh plugin` command pnpm-installs the
+# package into the profile and reconciles it into the profile's
+# `dsh.profile.bundles` layer list.
+#
+# All config keys carry schema defaults: session nodes are on (the sidebar
+# join control works out of the box), announce is opt-in. Peers, zone
+# delegates, and an API key are set per deployment through row config
+# overlays, never here.
+- insert:
+    - id: a2a
+      # Node-resolvable package name — must stay in sync with package.json
+      # `name`. Quoted because `@` is a reserved YAML indicator.
+      name: '@nelsonlongxiang/dsh-open-a2a-net'

package/lib/canvas-id.js

@@ -0,0 +1,27 @@
+/**
+ * Owner-qualified canvas ids (#282 S2, design docs/design/simplify-2026-11.md D1).
+ * `<zone>/canvas/<name>@<fp8>`: the suffix is the first 8 hex of sha256 over the
+ * owner's signed card public key (SPKI DER), so a host that changes address keeps
+ * its id. The suffix selects a signing key, not a URL: as on master, a seeded peer
+ * serving that key's signed card core counts as an alias of the same owner, and the
+ * card's canvasOrg itself is not signed. A bare `<zone>/canvas/<name>` keeps routing
+ * exactly as before; the suffix only selects among owners.
+ */
+import { createHash } from 'node:crypto';
+const QUALIFIED = /^(.+\/canvas\/[^/]+)@([0-9a-f]{8})$/;
+/** First 8 hex of sha256 over the base64 SPKI DER public key; '' when there is no key. */
+export function canvasOwnerFingerprint(publicKey) {
+    if (publicKey === undefined || publicKey === '')
+        return '';
+    return createHash('sha256').update(Buffer.from(publicKey, 'base64')).digest('hex').slice(0, 8);
+}
+/** Split `<zone>/canvas/<name>@<fp8>` into the plain team and the owner fingerprint. */
+export function splitCanvasOwner(team) {
+    const m = QUALIFIED.exec(team);
+    return m === null ? { team } : { team: m[1], owner: m[2] };
+}
+/** The display/routing id of a canvas team owned by the card holding `publicKey`. */
+export function qualifiedCanvasId(team, publicKey) {
+    const fp = canvasOwnerFingerprint(publicKey);
+    return fp === '' ? team : `${team}@${fp}`;
+}

package/lib/canvas-store.js

@@ -56,6 +56,12 @@ function validName(raw) {
         return undefined;
     return clean;
 }
+/** A NEW canvas name: `@<8 lowercase hex>` at the end is the owner-fingerprint suffix of a routing id (#282 S2), never part of a name.
+ *  An existing canvas with such a name still loads; it is reached by its full id `<zone>/canvas/<name>@<own fp8>`. */
+function validNewName(raw) {
+    const clean = validName(raw);
+    return clean === undefined || /@[0-9a-f]{8}$/.test(clean) ? undefined : clean;
+}
 /**
  * Bounded canvas-team store with last-write-wins persistence. Pure of any
  * registry knowledge: callers validate join state and resolve members.
@@ -191,7 +197,7 @@ export class CanvasStore {
      * @returns the stored name, or undefined when rejected.
      */
     create(name) {
-        const clean = validName(name);
+        const clean = validNewName(name);
         if (clean === undefined)
             return undefined;
         if (this.hasTeam(clean))

package/lib/client.js

@@ -22,8 +22,8 @@ window.__ModuleLoader__.load({
 			return n;
 		}
 		//#endregion
-		//#region \0dsh-css:D:\workspace\dsh-open-a2a-net\tmp\release-0.6.38-35f5893\src\src\client\A2aControl.module.css.mjs
-		const css = ".pFp7aa_wrap{max-width:100%;display:inline-flex;position:relative}.pFp7aa_trigger{align-items:center;gap:4px;display:inline-flex;position:relative}.pFp7aa_unreadBadge{text-align:center;color:#fff;background:var(--dsh-accent,#4c8bf5);border-radius:7px;min-width:14px;height:14px;padding:0 3px;font-size:9px;line-height:14px;animation:2s ease-in-out infinite pFp7aa_badgePulse;position:absolute;top:-6px;right:-8px}@keyframes pFp7aa_badgePulse{0%,to{box-shadow:0 0 #4c8bf573}50%{box-shadow:0 0 0 4px #4c8bf500}}@media (prefers-reduced-motion:reduce){.pFp7aa_unreadBadge{animation:none}}.pFp7aa_popover{z-index:1100;border:1px solid var(--dsh-border,#2a2a30);background:var(--dsh-surface-raised,#1c1c22);border-radius:10px;flex-direction:column;gap:8px;width:320px;max-width:calc(100vw - 16px);max-height:60vh;padding:12px;display:flex;position:fixed;overflow-y:auto;box-shadow:0 8px 24px #00000059}.pFp7aa_title{font-size:13px;font-weight:600}.pFp7aa_sectionTitle{border-top:1px solid var(--dsh-border,#2a2a30);text-transform:uppercase;letter-spacing:.04em;opacity:.65;margin-top:4px;padding-top:8px;font-size:11px;font-weight:600}.pFp7aa_stageRow{border-top:1px solid var(--dsh-border,#2a2a30);align-items:center;gap:8px;margin-top:4px;padding-top:8px;display:flex}.pFp7aa_stageTitle{text-transform:uppercase;letter-spacing:.04em;opacity:.65;font-size:11px;font-weight:600}.pFp7aa_stageLinks{gap:6px;display:flex}.pFp7aa_stageLink{border:1px solid var(--dsh-border,#2a2a30);color:inherit;border-radius:999px;align-items:center;padding:3px 8px;font-size:11px;text-decoration:none;display:inline-flex}.pFp7aa_stageLink:hover,.pFp7aa_stageLink:focus-visible{border-color:var(--dsh-accent,#4c8bf5)}.pFp7aa_empty{opacity:.7;font-size:12px}.pFp7aa_row{border:1px solid #0000;border-radius:8px;align-items:center;gap:10px;padding:8px;display:flex}.pFp7aa_joined{border-color:var(--dsh-border,#2a2a30)}.pFp7aa_facts{text-align:left;min-width:0;color:inherit;font:inherit;cursor:pointer;background:0 0;border:none;border-radius:6px;flex-direction:column;flex:1;gap:2px;padding:2px 4px;display:flex}.pFp7aa_facts:hover{background:var(--dsh-surface-hover,#ffffff0f)}.pFp7aa_nameRow{align-items:center;gap:6px;display:flex}.pFp7aa_stateDot{border-radius:50%;flex:none;width:7px;height:7px}.pFp7aa_stateDot.pFp7aa_live{background:var(--dsh-accent,#4c8bf5)}.pFp7aa_stateDot.pFp7aa_live.pFp7aa_joined{background:var(--dsh-success,#3fb96f)}.pFp7aa_stateDot.pFp7aa_cold{background:var(--dsh-warning,#d9a13c)}.pFp7aa_name{text-overflow:ellipsis;white-space:nowrap;font-size:13px;font-weight:500;overflow:hidden}.pFp7aa_description{opacity:.7;text-overflow:ellipsis;white-space:nowrap;font-size:12px;overflow:hidden}.pFp7aa_team{opacity:.55;font-size:11px;font-family:var(--dsh-mono,monospace)}.pFp7aa_note{opacity:.6;font-size:11px}.pFp7aa_searchInput{box-sizing:border-box;border:1px solid var(--dsh-border,#2a2a30);background:var(--dsh-surface,#141419);width:100%;color:inherit;border-radius:6px;padding:5px 8px;font-size:12px}.pFp7aa_searchInput:focus{outline:1px solid var(--dsh-accent,#4c8bf5)}.pFp7aa_sessionGroup{flex-direction:column;gap:2px;display:flex}.pFp7aa_groupHead{color:inherit;font:inherit;opacity:.75;cursor:pointer;text-align:left;background:0 0;border:none;align-items:center;gap:6px;padding:4px 2px;font-size:11px;font-weight:600;display:flex}.pFp7aa_groupChevron{transition:transform .12s;display:inline-block}.pFp7aa_groupChevronClosed{transform:rotate(-90deg)}.pFp7aa_groupTag{text-overflow:ellipsis;white-space:nowrap;border:1px solid var(--dsh-border,#2a2a30);opacity:.8;border-radius:999px;flex:none;max-width:90px;padding:0 6px;font-size:10px;line-height:16px;overflow:hidden}.pFp7aa_groupButton{width:24px;height:24px;color:inherit;opacity:.55;cursor:pointer;background:0 0;border:1px solid #0000;border-radius:6px;flex:none;font-size:12px;line-height:1}.pFp7aa_groupButton:hover{border-color:var(--dsh-border,#2a2a30);opacity:1}.pFp7aa_groupPicker{border:1px dashed var(--dsh-border,#2a2a30);border-radius:8px;flex-wrap:wrap;gap:6px;width:100%;padding:8px;display:flex;position:relative}.pFp7aa_groupOption{border:1px solid var(--dsh-border,#2a2a30);color:inherit;cursor:pointer;background:0 0;border-radius:999px;padding:2px 8px;font-size:11px}.pFp7aa_groupOptionActive{border-color:var(--dsh-accent,#4c8bf5);color:var(--dsh-accent,#4c8bf5)}.pFp7aa_groupNew{align-items:center;gap:6px;width:100%;margin-top:2px;display:flex}.pFp7aa_groupInput{border:1px solid var(--dsh-border,#2a2a30);background:var(--dsh-surface,#141419);min-width:0;color:inherit;border-radius:6px;flex:1;padding:4px 8px;font-size:12px}.pFp7aa_peerGrid{flex-wrap:wrap;gap:6px;display:flex}.pFp7aa_peerChip{border:1px solid var(--dsh-border,#2a2a30);border-radius:999px;align-items:center;gap:6px;padding:3px 8px;font-size:11px;display:inline-flex}.pFp7aa_peerHost{text-overflow:ellipsis;white-space:nowrap;max-width:160px;overflow:hidden}.pFp7aa_peerScore{font-family:var(--dsh-mono,monospace);opacity:.6}.pFp7aa_activityList{flex-direction:column;gap:2px;display:flex}.pFp7aa_activityRow{border-radius:4px;align-items:center;gap:8px;padding:2px 4px;font-size:11px;display:flex}.pFp7aa_activityRow[data-ok=false]{opacity:.55}.pFp7aa_activityDir{flex:none;font-weight:600}.pFp7aa_activityDir.pFp7aa_in{color:var(--dsh-success,#3fb96f)}.pFp7aa_activityDir.pFp7aa_out{color:var(--dsh-accent,#4c8bf5)}.pFp7aa_activityTeam{text-overflow:ellipsis;white-space:nowrap;min-width:0;font-family:var(--dsh-mono,monospace);opacity:.8;flex:1;overflow:hidden}.pFp7aa_activityPeer{text-overflow:ellipsis;white-space:nowrap;opacity:.55;max-width:90px;overflow:hidden}.pFp7aa_activityTime{opacity:.5;font-family:var(--dsh-mono,monospace);flex:none}.pFp7aa_activityRow[data-jump=true]{cursor:pointer}.pFp7aa_activityRow[data-jump=true]:hover{background:var(--dsh-surface-hover,#ffffff0f)}.pFp7aa_fresh{animation:1.2s ease-out 3 pFp7aa_freshFlash}@keyframes pFp7aa_freshFlash{0%{background:#4c8bf538}to{background:0 0}}@media (prefers-reduced-motion:reduce){.pFp7aa_fresh{background:#4c8bf51f;animation:none}}.pFp7aa_inFlightList{flex-direction:column;gap:2px;margin-bottom:4px;display:flex}.pFp7aa_inFlightRow{border:1px dashed var(--dsh-border,#2a2a30);border-radius:4px;align-items:center;gap:8px;padding:3px 4px;font-size:11px;display:flex}.pFp7aa_inFlightPulse{background:var(--dsh-accent,#4c8bf5);border-radius:50%;flex:none;width:7px;height:7px;animation:1.1s ease-in-out infinite pFp7aa_flightPulse}@keyframes pFp7aa_flightPulse{0%,to{opacity:1;transform:scale(1)}50%{opacity:.5;transform:scale(.55)}}@media (prefers-reduced-motion:reduce){.pFp7aa_inFlightPulse{animation:none}}.pFp7aa_versionTag{color:var(--dsh-color-text-tertiary,#888);background:var(--dsh-color-bg-secondary,#8080801f);border-radius:999px;margin-left:auto;padding:1px 6px;font-size:10px;font-weight:500}.pFp7aa_inFlightStale{opacity:.55}.pFp7aa_canvasCreate{align-items:center;gap:6px;margin-bottom:4px;display:flex}.pFp7aa_canvasCreate .pFp7aa_groupInput{flex:1;min-width:0}.pFp7aa_canvasChip{max-width:100%;color:var(--dsh-color-text-secondary,#aaa);background:var(--dsh-color-bg-secondary,#8080801f);border-radius:999px;align-items:center;gap:4px;margin:2px 4px 2px 0;padding:1px 6px;font-size:11px;display:inline-flex}.pFp7aa_canvasChip>span:not([class]){white-space:nowrap;text-overflow:ellipsis;min-width:0;overflow:hidden}.pFp7aa_canvasChipRemove{cursor:pointer;min-width:24px;min-height:24px;color:var(--dsh-color-text-tertiary,#888);background:0 0;border:none;padding:2px 5px;font-size:11px;line-height:1}.pFp7aa_canvasChipRemove:hover{color:var(--dsh-color-text-primary,#eee)}.pFp7aa_canvasChipRemove{transition:color .14s ease-out}@media (prefers-reduced-motion:reduce){.pFp7aa_canvasChipRemove{transition:none}}.pFp7aa_canvasChipRemove:focus-visible{outline:2px solid var(--dsh-color-primary,#4f8cff);outline-offset:1px;border-radius:4px}.pFp7aa_canvasActions{gap:6px;margin-top:4px;display:flex}.pFp7aa_inFlightStale .pFp7aa_inFlightPulse{opacity:.4;animation:none}.pFp7aa_failMark{color:#f87171;flex-shrink:0;font-size:11px}.pFp7aa_staleNote{color:var(--dsh-text-muted,#94a3b8b3);padding:4px 8px;font-size:11px}";
+		//#region \0dsh-css:D:\workspace\dsh-open-a2a-net\src\client\A2aControl.module.css.mjs
+		const css = ".Q9Ky_q_wrap{max-width:100%;display:inline-flex;position:relative}.Q9Ky_q_trigger{align-items:center;gap:4px;display:inline-flex;position:relative}.Q9Ky_q_unreadBadge{text-align:center;color:#fff;background:var(--dsh-accent,#4c8bf5);border-radius:7px;min-width:14px;height:14px;padding:0 3px;font-size:9px;line-height:14px;animation:2s ease-in-out infinite Q9Ky_q_badgePulse;position:absolute;top:-6px;right:-8px}@keyframes Q9Ky_q_badgePulse{0%,to{box-shadow:0 0 #4c8bf573}50%{box-shadow:0 0 0 4px #4c8bf500}}@media (prefers-reduced-motion:reduce){.Q9Ky_q_unreadBadge{animation:none}}.Q9Ky_q_popover{z-index:1100;border:1px solid var(--dsh-border,#2a2a30);background:var(--dsh-surface-raised,#1c1c22);border-radius:10px;flex-direction:column;gap:8px;width:320px;max-width:calc(100vw - 16px);max-height:60vh;padding:12px;display:flex;position:fixed;overflow-y:auto;box-shadow:0 8px 24px #00000059}.Q9Ky_q_title{font-size:13px;font-weight:600}.Q9Ky_q_sectionTitle{border-top:1px solid var(--dsh-border,#2a2a30);text-transform:uppercase;letter-spacing:.04em;opacity:.65;margin-top:4px;padding-top:8px;font-size:11px;font-weight:600}.Q9Ky_q_stageRow{border-top:1px solid var(--dsh-border,#2a2a30);align-items:center;gap:8px;margin-top:4px;padding-top:8px;display:flex}.Q9Ky_q_stageTitle{text-transform:uppercase;letter-spacing:.04em;opacity:.65;font-size:11px;font-weight:600}.Q9Ky_q_stageLinks{gap:6px;display:flex}.Q9Ky_q_stageLink{border:1px solid var(--dsh-border,#2a2a30);color:inherit;border-radius:999px;align-items:center;padding:3px 8px;font-size:11px;text-decoration:none;display:inline-flex}.Q9Ky_q_stageLink:hover,.Q9Ky_q_stageLink:focus-visible{border-color:var(--dsh-accent,#4c8bf5)}.Q9Ky_q_empty{opacity:.7;font-size:12px}.Q9Ky_q_row{border:1px solid #0000;border-radius:8px;align-items:center;gap:10px;padding:8px;display:flex}.Q9Ky_q_joined{border-color:var(--dsh-border,#2a2a30)}.Q9Ky_q_facts{text-align:left;min-width:0;color:inherit;font:inherit;cursor:pointer;background:0 0;border:none;border-radius:6px;flex-direction:column;flex:1;gap:2px;padding:2px 4px;display:flex}.Q9Ky_q_facts:hover{background:var(--dsh-surface-hover,#ffffff0f)}.Q9Ky_q_nameRow{align-items:center;gap:6px;display:flex}.Q9Ky_q_stateDot{border-radius:50%;flex:none;width:7px;height:7px}.Q9Ky_q_stateDot.Q9Ky_q_live{background:var(--dsh-accent,#4c8bf5)}.Q9Ky_q_stateDot.Q9Ky_q_live.Q9Ky_q_joined{background:var(--dsh-success,#3fb96f)}.Q9Ky_q_stateDot.Q9Ky_q_cold{background:var(--dsh-warning,#d9a13c)}.Q9Ky_q_name{text-overflow:ellipsis;white-space:nowrap;font-size:13px;font-weight:500;overflow:hidden}.Q9Ky_q_description{opacity:.7;text-overflow:ellipsis;white-space:nowrap;font-size:12px;overflow:hidden}.Q9Ky_q_team{opacity:.55;font-size:11px;font-family:var(--dsh-mono,monospace)}.Q9Ky_q_note{opacity:.6;font-size:11px}.Q9Ky_q_searchInput{box-sizing:border-box;border:1px solid var(--dsh-border,#2a2a30);background:var(--dsh-surface,#141419);width:100%;color:inherit;border-radius:6px;padding:5px 8px;font-size:12px}.Q9Ky_q_searchInput:focus{outline:1px solid var(--dsh-accent,#4c8bf5)}.Q9Ky_q_sessionGroup{flex-direction:column;gap:2px;display:flex}.Q9Ky_q_groupHead{color:inherit;font:inherit;opacity:.75;cursor:pointer;text-align:left;background:0 0;border:none;align-items:center;gap:6px;padding:4px 2px;font-size:11px;font-weight:600;display:flex}.Q9Ky_q_groupChevron{transition:transform .12s;display:inline-block}.Q9Ky_q_groupChevronClosed{transform:rotate(-90deg)}.Q9Ky_q_groupTag{text-overflow:ellipsis;white-space:nowrap;border:1px solid var(--dsh-border,#2a2a30);opacity:.8;border-radius:999px;flex:none;max-width:90px;padding:0 6px;font-size:10px;line-height:16px;overflow:hidden}.Q9Ky_q_groupButton{width:24px;height:24px;color:inherit;opacity:.55;cursor:pointer;background:0 0;border:1px solid #0000;border-radius:6px;flex:none;font-size:12px;line-height:1}.Q9Ky_q_groupButton:hover{border-color:var(--dsh-border,#2a2a30);opacity:1}.Q9Ky_q_groupPicker{border:1px dashed var(--dsh-border,#2a2a30);border-radius:8px;flex-wrap:wrap;gap:6px;width:100%;padding:8px;display:flex;position:relative}.Q9Ky_q_groupOption{border:1px solid var(--dsh-border,#2a2a30);color:inherit;cursor:pointer;background:0 0;border-radius:999px;padding:2px 8px;font-size:11px}.Q9Ky_q_groupOptionActive{border-color:var(--dsh-accent,#4c8bf5);color:var(--dsh-accent,#4c8bf5)}.Q9Ky_q_groupNew{align-items:center;gap:6px;width:100%;margin-top:2px;display:flex}.Q9Ky_q_groupInput{border:1px solid var(--dsh-border,#2a2a30);background:var(--dsh-surface,#141419);min-width:0;color:inherit;border-radius:6px;flex:1;padding:4px 8px;font-size:12px}.Q9Ky_q_peerGrid{flex-wrap:wrap;gap:6px;display:flex}.Q9Ky_q_peerChip{border:1px solid var(--dsh-border,#2a2a30);border-radius:999px;align-items:center;gap:6px;padding:3px 8px;font-size:11px;display:inline-flex}.Q9Ky_q_peerHost{text-overflow:ellipsis;white-space:nowrap;max-width:160px;overflow:hidden}.Q9Ky_q_peerScore{font-family:var(--dsh-mono,monospace);opacity:.6}.Q9Ky_q_activityList{flex-direction:column;gap:2px;display:flex}.Q9Ky_q_activityRow{border-radius:4px;align-items:center;gap:8px;padding:2px 4px;font-size:11px;display:flex}.Q9Ky_q_activityRow[data-ok=false]{opacity:.55}.Q9Ky_q_activityDir{flex:none;font-weight:600}.Q9Ky_q_activityDir.Q9Ky_q_in{color:var(--dsh-success,#3fb96f)}.Q9Ky_q_activityDir.Q9Ky_q_out{color:var(--dsh-accent,#4c8bf5)}.Q9Ky_q_activityTeam{text-overflow:ellipsis;white-space:nowrap;min-width:0;font-family:var(--dsh-mono,monospace);opacity:.8;flex:1;overflow:hidden}.Q9Ky_q_activityPeer{text-overflow:ellipsis;white-space:nowrap;opacity:.55;max-width:90px;overflow:hidden}.Q9Ky_q_activityTime{opacity:.5;font-family:var(--dsh-mono,monospace);flex:none}.Q9Ky_q_activityRow[data-jump=true]{cursor:pointer}.Q9Ky_q_activityRow[data-jump=true]:hover{background:var(--dsh-surface-hover,#ffffff0f)}.Q9Ky_q_fresh{animation:1.2s ease-out 3 Q9Ky_q_freshFlash}@keyframes Q9Ky_q_freshFlash{0%{background:#4c8bf538}to{background:0 0}}@media (prefers-reduced-motion:reduce){.Q9Ky_q_fresh{background:#4c8bf51f;animation:none}}.Q9Ky_q_inFlightList{flex-direction:column;gap:2px;margin-bottom:4px;display:flex}.Q9Ky_q_inFlightRow{border:1px dashed var(--dsh-border,#2a2a30);border-radius:4px;align-items:center;gap:8px;padding:3px 4px;font-size:11px;display:flex}.Q9Ky_q_inFlightPulse{background:var(--dsh-accent,#4c8bf5);border-radius:50%;flex:none;width:7px;height:7px;animation:1.1s ease-in-out infinite Q9Ky_q_flightPulse}@keyframes Q9Ky_q_flightPulse{0%,to{opacity:1;transform:scale(1)}50%{opacity:.5;transform:scale(.55)}}@media (prefers-reduced-motion:reduce){.Q9Ky_q_inFlightPulse{animation:none}}.Q9Ky_q_versionTag{color:var(--dsh-color-text-tertiary,#888);background:var(--dsh-color-bg-secondary,#8080801f);border-radius:999px;margin-left:auto;padding:1px 6px;font-size:10px;font-weight:500}.Q9Ky_q_inFlightStale{opacity:.55}.Q9Ky_q_canvasCreate{align-items:center;gap:6px;margin-bottom:4px;display:flex}.Q9Ky_q_canvasCreate .Q9Ky_q_groupInput{flex:1;min-width:0}.Q9Ky_q_canvasChip{max-width:100%;color:var(--dsh-color-text-secondary,#aaa);background:var(--dsh-color-bg-secondary,#8080801f);border-radius:999px;align-items:center;gap:4px;margin:2px 4px 2px 0;padding:1px 6px;font-size:11px;display:inline-flex}.Q9Ky_q_canvasChip>span:not([class]){white-space:nowrap;text-overflow:ellipsis;min-width:0;overflow:hidden}.Q9Ky_q_canvasChipRemove{cursor:pointer;min-width:24px;min-height:24px;color:var(--dsh-color-text-tertiary,#888);background:0 0;border:none;padding:2px 5px;font-size:11px;line-height:1}.Q9Ky_q_canvasChipRemove:hover{color:var(--dsh-color-text-primary,#eee)}.Q9Ky_q_canvasChipRemove{transition:color .14s ease-out}@media (prefers-reduced-motion:reduce){.Q9Ky_q_canvasChipRemove{transition:none}}.Q9Ky_q_canvasChipRemove:focus-visible{outline:2px solid var(--dsh-color-primary,#4f8cff);outline-offset:1px;border-radius:4px}.Q9Ky_q_canvasActions{gap:6px;margin-top:4px;display:flex}.Q9Ky_q_inFlightStale .Q9Ky_q_inFlightPulse{opacity:.4;animation:none}.Q9Ky_q_failMark{color:#f87171;flex-shrink:0;font-size:11px}.Q9Ky_q_staleNote{color:var(--dsh-text-muted,#94a3b8b3);padding:4px 8px;font-size:11px}";
 		const tagId = "@nelsonlongxiang/dsh-open-a2a-net/A2aControl.module.css";
 		if (typeof document !== "undefined" && document.querySelector("style[data-plugin-css=" + JSON.stringify(tagId) + "]") === null) {
 			const tag = document.createElement("style");
@@ -33,67 +33,67 @@ window.__ModuleLoader__.load({
 			document.head.appendChild(tag);
 		}
 		var A2aControl_module_css_default = {
-			"activityDir": "pFp7aa_activityDir",
-			"activityList": "pFp7aa_activityList",
-			"activityPeer": "pFp7aa_activityPeer",
-			"activityRow": "pFp7aa_activityRow",
-			"activityTeam": "pFp7aa_activityTeam",
-			"activityTime": "pFp7aa_activityTime",
-			"badgePulse": "pFp7aa_badgePulse",
-			"canvasActions": "pFp7aa_canvasActions",
-			"canvasChip": "pFp7aa_canvasChip",
-			"canvasChipRemove": "pFp7aa_canvasChipRemove",
-			"canvasCreate": "pFp7aa_canvasCreate",
-			"cold": "pFp7aa_cold",
-			"description": "pFp7aa_description",
-			"empty": "pFp7aa_empty",
-			"facts": "pFp7aa_facts",
-			"failMark": "pFp7aa_failMark",
-			"flightPulse": "pFp7aa_flightPulse",
-			"fresh": "pFp7aa_fresh",
-			"freshFlash": "pFp7aa_freshFlash",
-			"groupButton": "pFp7aa_groupButton",
-			"groupChevron": "pFp7aa_groupChevron",
-			"groupChevronClosed": "pFp7aa_groupChevronClosed",
-			"groupHead": "pFp7aa_groupHead",
-			"groupInput": "pFp7aa_groupInput",
-			"groupNew": "pFp7aa_groupNew",
-			"groupOption": "pFp7aa_groupOption",
-			"groupOptionActive": "pFp7aa_groupOptionActive",
-			"groupPicker": "pFp7aa_groupPicker",
-			"groupTag": "pFp7aa_groupTag",
-			"in": "pFp7aa_in",
-			"inFlightList": "pFp7aa_inFlightList",
-			"inFlightPulse": "pFp7aa_inFlightPulse",
-			"inFlightRow": "pFp7aa_inFlightRow",
-			"inFlightStale": "pFp7aa_inFlightStale",
-			"joined": "pFp7aa_joined",
-			"live": "pFp7aa_live",
-			"name": "pFp7aa_name",
-			"nameRow": "pFp7aa_nameRow",
-			"note": "pFp7aa_note",
-			"out": "pFp7aa_out",
-			"peerChip": "pFp7aa_peerChip",
-			"peerGrid": "pFp7aa_peerGrid",
-			"peerHost": "pFp7aa_peerHost",
-			"peerScore": "pFp7aa_peerScore",
-			"popover": "pFp7aa_popover",
-			"row": "pFp7aa_row",
-			"searchInput": "pFp7aa_searchInput",
-			"sectionTitle": "pFp7aa_sectionTitle",
-			"sessionGroup": "pFp7aa_sessionGroup",
-			"stageLink": "pFp7aa_stageLink",
-			"stageLinks": "pFp7aa_stageLinks",
-			"stageRow": "pFp7aa_stageRow",
-			"stageTitle": "pFp7aa_stageTitle",
-			"staleNote": "pFp7aa_staleNote",
-			"stateDot": "pFp7aa_stateDot",
-			"team": "pFp7aa_team",
-			"title": "pFp7aa_title",
-			"trigger": "pFp7aa_trigger",
-			"unreadBadge": "pFp7aa_unreadBadge",
-			"versionTag": "pFp7aa_versionTag",
-			"wrap": "pFp7aa_wrap"
+			"activityDir": "Q9Ky_q_activityDir",
+			"activityList": "Q9Ky_q_activityList",
+			"activityPeer": "Q9Ky_q_activityPeer",
+			"activityRow": "Q9Ky_q_activityRow",
+			"activityTeam": "Q9Ky_q_activityTeam",
+			"activityTime": "Q9Ky_q_activityTime",
+			"badgePulse": "Q9Ky_q_badgePulse",
+			"canvasActions": "Q9Ky_q_canvasActions",
+			"canvasChip": "Q9Ky_q_canvasChip",
+			"canvasChipRemove": "Q9Ky_q_canvasChipRemove",
+			"canvasCreate": "Q9Ky_q_canvasCreate",
+			"cold": "Q9Ky_q_cold",
+			"description": "Q9Ky_q_description",
+			"empty": "Q9Ky_q_empty",
+			"facts": "Q9Ky_q_facts",
+			"failMark": "Q9Ky_q_failMark",
+			"flightPulse": "Q9Ky_q_flightPulse",
+			"fresh": "Q9Ky_q_fresh",
+			"freshFlash": "Q9Ky_q_freshFlash",
+			"groupButton": "Q9Ky_q_groupButton",
+			"groupChevron": "Q9Ky_q_groupChevron",
+			"groupChevronClosed": "Q9Ky_q_groupChevronClosed",
+			"groupHead": "Q9Ky_q_groupHead",
+			"groupInput": "Q9Ky_q_groupInput",
+			"groupNew": "Q9Ky_q_groupNew",
+			"groupOption": "Q9Ky_q_groupOption",
+			"groupOptionActive": "Q9Ky_q_groupOptionActive",
+			"groupPicker": "Q9Ky_q_groupPicker",
+			"groupTag": "Q9Ky_q_groupTag",
+			"in": "Q9Ky_q_in",
+			"inFlightList": "Q9Ky_q_inFlightList",
+			"inFlightPulse": "Q9Ky_q_inFlightPulse",
+			"inFlightRow": "Q9Ky_q_inFlightRow",
+			"inFlightStale": "Q9Ky_q_inFlightStale",
+			"joined": "Q9Ky_q_joined",
+			"live": "Q9Ky_q_live",
+			"name": "Q9Ky_q_name",
+			"nameRow": "Q9Ky_q_nameRow",
+			"note": "Q9Ky_q_note",
+			"out": "Q9Ky_q_out",
+			"peerChip": "Q9Ky_q_peerChip",
+			"peerGrid": "Q9Ky_q_peerGrid",
+			"peerHost": "Q9Ky_q_peerHost",
+			"peerScore": "Q9Ky_q_peerScore",
+			"popover": "Q9Ky_q_popover",
+			"row": "Q9Ky_q_row",
+			"searchInput": "Q9Ky_q_searchInput",
+			"sectionTitle": "Q9Ky_q_sectionTitle",
+			"sessionGroup": "Q9Ky_q_sessionGroup",
+			"stageLink": "Q9Ky_q_stageLink",
+			"stageLinks": "Q9Ky_q_stageLinks",
+			"stageRow": "Q9Ky_q_stageRow",
+			"stageTitle": "Q9Ky_q_stageTitle",
+			"staleNote": "Q9Ky_q_staleNote",
+			"stateDot": "Q9Ky_q_stateDot",
+			"team": "Q9Ky_q_team",
+			"title": "Q9Ky_q_title",
+			"trigger": "Q9Ky_q_trigger",
+			"unreadBadge": "Q9Ky_q_unreadBadge",
+			"versionTag": "Q9Ky_q_versionTag",
+			"wrap": "Q9Ky_q_wrap"
 		};
 		//#endregion
 		//#region lib/client/A2aControl.js

package/lib/config.js

@@ -0,0 +1,125 @@
+/** The plugin row's configuration: the `Config` interface and its Schemastery schema (moved out of index.ts, #77). */
+import s from '@deepseek-ai/schemastery';
+import { TASK_STALE_TTL_MS } from "./task-ledger.js";
+import { DEFAULT_TARGET_QUEUE_CAP } from "./queue-guard.js";
+/** Schemastery configuration for the A2A client plugin row. */
+export const Config = s.object({
+    apiKey: s.string().default(''),
+    session: s.string().default(''),
+    team: s.string().default('dsh'),
+    /** S4 fix ③: host-side (agent-less) routing calls — audit them (default) or refuse outright. */
+    gateAgentLessCalls: s.union(['audit', 'refuse']).default('audit'),
+    settlementAuth: s.union(['off', 'observe', 'enforce']).default('observe'),
+    announce: s.boolean().default(false),
+    isolated: s.boolean().default(false),
+    forwardDirect: s.boolean().default(true),
+    agentName: s.string().default('DeepSeek Harness A2A node'),
+    peers: s.array(s.string()).default([]),
+    delegates: s.array(s.object({ name: s.string(), url: s.string(), publicKey: s.string().default('') })).default([]),
+    dshHome: s.string().default(''),
+    sessionNodes: s.boolean().default(true),
+    wakeJoinedOnBoot: s.boolean().default(false),
+    wakePrewarmDelayMs: s.number().default(10_000),
+    wakePrewarmQuietMs: s.number().default(5_000),
+    wakeBootStaggerMs: s.number().default(3_000),
+    wakeReconcile: s.boolean().default(true),
+    wakeReconcileIntervalMs: s.number().default(60_000),
+    wakeReconcileBackoffBaseMs: s.number().default(5_000),
+    wakeReconcileMaxBackoffMs: s.number().default(600_000),
+    /**
+     * S4 (gh#11 N7): the joinable-team curation list. A model calling
+     * a2a_team_join may only declare membership in a team with an EXACT
+     * entry here — trailing-`*` patterns are readable but authorize nothing
+     * (no mint rights: a pattern pre-authorizing every future name under it
+     * would let a model mint teams nobody created). Default empty: the
+     * owner's no-self-join ruling, institutionalized as default-deny; a
+     * refused join carries guidance instead of failing silently.
+     */
+    teamJoinAllowlist: s.array(s.string()).default([]),
+    seatNames: s.dict(s.any()).default({}),
+    /**
+     * S3 (phase-2 default, owner ruling 2026-09-01): route dispatch checks
+     * caller↔target shared team membership before addressing — a session
+     * with no declared team has no network (the unteamed-peer defect the
+     * owner reproduced on 4080 and locally). Fleet compatibility rides the
+     * roster capability flag (0.5.44 cards advertise roster:true; older
+     * peers read as legacy). Set false to restore the open outbound seam.
+     */
+    teamScopeRouting: s.boolean().default(true),
+    /**
+     * S5 (default-on, owner directive 2026-10-20): the information-plane
+     * tools answer from the joined-team scope only — a2a_teams lists
+     * [this host] rows plus peer rows serving a joined team (note field
+     * explains the scope); a2a_status narrows peers / in-flight / activity
+     * to that scope (local traffic and idempotency aggregates stay);
+     * a2a_probe sweeps serving peers and refuses a single URL whose
+     * verified card cannot prove service. A host whose nodes declare no
+     * teams keeps host-internal facts only. Set false to restore
+     * fleet-wide disclosure.
+     */
+    teamScopeInfo: s.boolean().default(true),
+    /**
+     * Peer boundary model — connection layer: an empty list keeps the
+     * historical open-referral posture; a non-empty list admits a referral
+     * only when its host matches an entry (exact host[:port], bare domain
+     * suffix, or full URL). Seeds from `peers` are owner-configured and
+     * unaffected.
+     */
+    peerAllowlist: s.array(s.string()).default([]),
+    /**
+     * Peer boundary model — connection layer: when false, referral URLs are
+     * neither learned nor offered; the tracked set stays the configured seed
+     * set for the lifetime of the config that named them.
+     */
+    referralLearning: s.boolean().default(true),
+    /**
+     * gh#8 (N9): team-name resolution rides the operator-established peer
+     * basis (config seeds + delegates) only; the referral-learned tail's
+     * self-published card claims do not bind team names. Set true to restore
+     * the legacy whole-store basis (fleet migration window).
+     */
+    referralTeamResolution: s.boolean().default(false),
+    /**
+     * #19 D2 (ruling final, owner-level knob): how much of a session team's
+     * activity EXCERPT the card face publishes in sessionTeams descriptions.
+     * 'full' (default) keeps the verbatim tail excerpt; 'masked' truncates
+     * to a shape-only prefix; 'off' omits the description field entirely.
+     * Titles and team handles stay in every tier — the knob is the excerpt,
+     * not the listing.
+     */
+    exposureExcerpt: s.union(['full', 'masked', 'off']).default('full'),
+    /**
+     * gh#9+gh#10 OriginClaim window: absent envelopes still walk N3 during
+     * the window (counted as legacyInbound); closing it rejects them like
+     * failed signatures. See docs/protocol/delivery-origin-auth.md §4.
+     */
+    originClaimWindow: s.boolean().default(true),
+    /**
+     * OriginClaim unbound window: also sign/accept the legacy envelope that
+     * names no audience (counted as unboundInbound); closing it leaves the
+     * audience-bound form only. See docs/protocol/delivery-origin-auth.md §2.1.
+     */
+    originClaimUnboundWindow: s.boolean().default(true),
+    /** Extra OriginClaim audience origins (port-mapped/proxied hosts). */
+    originClaimAudiences: s.array(s.string()).default([]),
+    /** OriginClaim callerUrl override for pocket-tunneled hosts; '' = auto. */
+    originClaimUrl: s.string().default(''),
+    /**
+     * v0.5.23 (async-stall): delay before a delivered-but-unconsumed async
+     * route re-wakes its target with a one-line nudge (defect
+     * t-mt6nd0sq-hxuhj6). 0 disables the nudge entirely.
+     */
+    asyncNudgeDelayMs: s.number().default(120_000),
+    /** gh#224: at most this many receipt-owing tasks queue for one target; the next is refused (-32009). 0 disables. */
+    targetQueueCap: s.number().default(DEFAULT_TARGET_QUEUE_CAP),
+    stateColdRowsTtlMs: s.number().default(5_000),
+    cardCacheTtlMs: s.number().default(60_000),
+    cardCacheNegativeTtlMs: s.number().default(30_000),
+    remoteRowsTtlMs: s.number().default(15_000),
+    cardTtlMs: s.number().default(172_800_000),
+    flushTimeoutMs: s.number().default(300_000),
+    routeTimeoutMs: s.number().default(1_800_000),
+    taskStaleTtlMs: s.number().default(TASK_STALE_TTL_MS),
+    nativeTeamsInbound: s.boolean().default(false),
+    nativeRoundWaitMs: s.number().default(180_000),
+});