@yadsh/dsh-qa-surface 0.1.1 → 0.3.0

package/lib/client/components/source-refs.js

@@ -0,0 +1,78 @@
+/** http(s) URLs only, case-folded authority, hash and trailing slash gone. */
+function normalizeUrl(value) {
+    try {
+        const url = new URL(value);
+        if (url.protocol !== "http:" && url.protocol !== "https:")
+            return undefined;
+        url.hash = "";
+        if (url.pathname.length > 1) {
+            url.pathname = url.pathname.replace(/\/+$/u, "");
+        }
+        return `${url.protocol}//${url.host.toLowerCase()}${url.pathname}${url.search}`;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Separators normalized for comparison, not for display. */
+function normalizePath(value) {
+    return value.trim().replace(/\\/gu, "/").replace(/\/+$/u, "").toLowerCase();
+}
+function basename(value) {
+    const slash = value.lastIndexOf("/");
+    return slash < 0 ? value : value.slice(slash + 1);
+}
+/** Display name for a file-backed source: the file name alone, case kept. */
+export function sourceFileName(source) {
+    const normalized = (source.path ?? source.uri ?? source.title)
+        .trim()
+        .replace(/\\/gu, "/");
+    const slash = normalized.lastIndexOf("/");
+    const name = slash < 0 ? normalized : normalized.slice(slash + 1);
+    return name === "" ? source.title : name;
+}
+const NO_REFS = {
+    signature: "",
+    resolveUrl: () => undefined,
+    resolvePath: () => undefined,
+};
+export function buildSourceRefs(sources) {
+    if (sources.length === 0)
+        return NO_REFS;
+    const byUrl = new Map();
+    const paths = [];
+    for (const source of sources) {
+        if (source.uri !== undefined) {
+            const key = normalizeUrl(source.uri);
+            if (key !== undefined)
+                byUrl.set(key, source);
+        }
+        if (source.path !== undefined) {
+            paths.push({ normalized: normalizePath(source.path), source });
+        }
+    }
+    return {
+        signature: sources.map((source) => source.id).join("|"),
+        resolveUrl(url) {
+            const key = normalizeUrl(url);
+            return key === undefined ? undefined : byUrl.get(key);
+        },
+        resolvePath(token) {
+            const normalized = normalizePath(token);
+            if (normalized === "")
+                return undefined;
+            const exact = paths.find((path) => path.normalized === normalized);
+            if (exact !== undefined)
+                return exact.source;
+            if (!normalized.includes("/")) {
+                // A bare file name is ambiguous the moment two sources share it.
+                const named = paths.filter((path) => basename(path.normalized) === normalized);
+                return named.length === 1 ? named[0]?.source : undefined;
+            }
+            // A partial directory path must stay unambiguous the same way.
+            const suffix = paths.filter((path) => path.normalized.endsWith(`/${normalized}`));
+            return suffix.length === 1 ? suffix[0]?.source : undefined;
+        },
+    };
+}
+//# sourceMappingURL=source-refs.js.map

package/lib/client/components/source-refs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-refs.js","sourceRoot":"","sources":["../../../src/client/components/source-refs.ts"],"names":[],"mappings":"AAcA,8EAA8E;AAC9E,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC5E,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAAC,MAAgB;IAC7C,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC;SAC3D,IAAI,EAAE;SACN,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxB,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAClE,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED,MAAM,OAAO,GAAiB;IAC5B,SAAS,EAAE,EAAE;IACb,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS;IAC3B,WAAW,EAAE,GAAG,EAAE,CAAC,SAAS;CAC7B,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,OAA4B;IAC1D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC1C,MAAM,KAAK,GACT,EAAE,CAAC;IACL,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,GAAG,KAAK,SAAS;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACvD,UAAU,CAAC,GAAW;YACpB,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YAC9B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxD,CAAC;QACD,WAAW,CAAC,KAAa;YACvB,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,UAAU,KAAK,EAAE;gBAAE,OAAO,SAAS,CAAC;YACxC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;YACnE,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC,MAAM,CAAC;YAC7C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,iEAAiE;gBACjE,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CACxB,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,UAAU,CACnD,CAAC;gBACF,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3D,CAAC;YACD,+DAA+D;YAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACnC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC,CAC3C,CAAC;YACF,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/lib/client/create-session.js

@@ -0,0 +1,51 @@
+/** The wire failure's code plus its message — preset composition reasons (a
+ * broken loader entry, a missing tool) ride the message and never anywhere
+ * else, so collapsing to the code costs the operator the whole diagnosis. */
+function wireFailure(error) {
+    const code = typeof error === "object" && error !== null && "code" in error
+        ? String(error.code ?? "")
+        : "";
+    const message = typeof error === "object" && error !== null && "message" in error
+        ? String(error.message ?? "")
+        : "";
+    return message === "" ? code : `${code}: ${message}`;
+}
+/**
+ * Create one Host session and pin the configured preset and model onto the
+ * still-blank session. The creation wire takes no preset, so
+ * agentPresets/select recomposes the agent and durably logs
+ * `agent-preset/selected`, which the client projection replays. The session
+ * is addressed only here — no prompt can run before the caller attests the
+ * composed preset.
+ */
+export async function createQaSession(args) {
+    const { sessions, api, config } = args;
+    const created = await sessions.create({
+        ...(config.session.workspaceId !== null
+            ? { workspaceId: config.session.workspaceId }
+            : config.session.cwd !== null
+                ? { cwd: config.session.cwd }
+                : {}),
+    });
+    const id = String(created);
+    if (config.session.agentPreset !== null) {
+        const selectedPreset = await api.selectAgentPreset(id, config.session.agentPreset);
+        if (!selectedPreset.ok) {
+            throw new Error(wireFailure(selectedPreset.error));
+        }
+    }
+    if (config.session.provider !== null && config.session.model !== null) {
+        const selected = await api.selectModel({
+            sessionId: id,
+            provider: config.session.provider,
+            model: config.session.model,
+            ...(config.session.reasoningEffort === null
+                ? {}
+                : { reasoningEffort: config.session.reasoningEffort }),
+        });
+        if (!selected.ok)
+            throw new Error(wireFailure(selected.error));
+    }
+    return id;
+}
+//# sourceMappingURL=create-session.js.map

package/lib/client/create-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-session.js","sourceRoot":"","sources":["../../src/client/create-session.ts"],"names":[],"mappings":"AAKA;;6EAE6E;AAC7E,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK;QAC5D,CAAC,CAAC,MAAM,CAAE,KAA4B,CAAC,IAAI,IAAI,EAAE,CAAC;QAClD,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,OAAO,GACX,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,SAAS,IAAI,KAAK;QAC/D,CAAC,CAAC,MAAM,CAAE,KAA+B,CAAC,OAAO,IAAI,EAAE,CAAC;QACxD,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAIrC;IACC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;QACpC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,KAAK,IAAI;YACrC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAA0B,EAAE;YAC5D,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,IAAI;gBAC3B,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC7B,CAAC,CAAC,EAAE,CAAC;KACV,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACxC,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAChD,EAAe,EACf,MAAM,CAAC,OAAO,CAAC,WAAW,CAC3B,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC;YACrC,SAAS,EAAE,EAAe;YAC1B,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ;YACjC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK;YAC3B,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,KAAK,IAAI;gBACzC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;SACzD,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/lib/client/index.js

@@ -1,45 +1,176 @@
+import qaSurfaceRemote from "@yadsh/dsh-qa-surface/remote";
 import { QaConfigController } from "./QaConfigController.js";
-import { QaRouteController } from "./QaRouteController.js";
+import { matchesQaRoute, QaRouteController } from "./QaRouteController.js";
+import { QaAccountsController } from "./QaAccountsController.js";
+import { QaChatIndex } from "./chat-index.js";
 import { QaSurface } from "./QaSurface.js";
+import { QaWelcomeNoticeStep } from "./components/QaWelcomeNotice.js";
 import { QA_SURFACE_STYLES } from "./styles.js";
 const SETTINGS_NAMESPACE = "qa-surface";
-export const inject = ["slots", "sessions", "connection", "settingsScope"];
+const QA_WELCOME_SLOT_ID = "welcome-notice";
+function qaWelcomeStorageKey(config) {
+    return `${config.session.storageKey}:v1:${config.route.path}:welcome-notice`;
+}
+export const inject = [
+    "slots",
+    "sessions",
+    "uiConversation",
+    "connection",
+    "settingsScope",
+    "remote",
+];
 /** Register the route-aware, full-frame QA entry in the additive overlay slot. */
-export function apply(ctx) {
-    const route = new QaRouteController();
-    const config = new QaConfigController(ctx.settingsScope.bind({ namespace: SETTINGS_NAMESPACE }));
-    const syncRoute = () => {
-        const snapshot = config.getSnapshot();
-        route.configure(snapshot.config, snapshot.status === "ready" || snapshot.status === "unavailable");
-    };
-    syncRoute();
-    const unsubscribeConfig = config.subscribe(syncRoute);
-    ctx.effect(() => {
-        const style = document.createElement("style");
-        style.dataset.dshQaSurface = "styles";
-        style.textContent = QA_SURFACE_STYLES;
-        document.head.append(style);
-        return () => style.remove();
-    }, "dsh-qa-surface: styles");
-    ctx.effect(() => () => {
-        unsubscribeConfig();
-        config.dispose();
-        route.dispose();
-    }, "dsh-qa-surface: controllers");
-    ctx.slots.inject("shell.overlay", () => ctx.slots.register({
-        name: "shell.overlay",
-        id: "dsh-qa-surface",
-        order: -10_000,
-        inject: () => ({
-            route,
-            config,
-            sessions: ctx.sessions,
-            api: ctx.connection.api.sessions,
-            connection: ctx.connection.hostDescription,
-        }),
-    }, QaSurface));
+export async function apply(ctx) {
+    const remote = ctx.remote;
+    const disposeRemote = await remote.$mount(qaSurfaceRemote);
+    await ctx.inject(["remote.qaSurface", "remote.session", "remote.agentPresets"], (remoteContext) => {
+        const injectedRemote = remoteContext.remote;
+        const policyRemote = injectedRemote.qaSurface;
+        const secureSession = (token, sessionId) => policyRemote.secureSession(token, sessionId);
+        const qaApi = {
+            selectModel: (request) => injectedRemote.session.selectModel(request),
+            selectAgentPreset: (agentId, agentPreset) => injectedRemote.agentPresets.select(agentId, agentPreset),
+        };
+        const sourceApi = {
+            sources: (token, sessionId) => policyRemote.sources(token, sessionId),
+            readSourceFile: (token, sessionId, sourcePath) => policyRemote.readSourceFile(token, sessionId, sourcePath),
+        };
+        // The account gate rides its own remote; a stale token simply answers
+        // "not authenticated" and the browser shows the login card.
+        const accounts = new QaAccountsController({
+            remote: policyRemote,
+            storage: window.localStorage,
+            config: () => config.getSnapshot().config,
+            legacyChatIds: () => {
+                // A standalone index view over the same prefix: reads the chat ids
+                // this browser accumulated before accounts existed.
+                const snapshot = config.getSnapshot().config;
+                const index = new QaChatIndex(window.localStorage, `${snapshot.session.storageKey}:v1:${snapshot.route.path}`);
+                const ids = [...index.chatIds()];
+                const active = index.activeId();
+                if (active !== null && !ids.includes(active))
+                    ids.push(active);
+                return ids;
+            },
+            forgetChat: (sessionId) => {
+                const snapshot = config.getSnapshot().config;
+                new QaChatIndex(window.localStorage, `${snapshot.session.storageKey}:v1:${snapshot.route.path}`).forgetChat(sessionId);
+            },
+        });
+        const route = new QaRouteController();
+        const config = new QaConfigController(ctx.settingsScope.bind({
+            namespace: SETTINGS_NAMESPACE,
+        }), async () => {
+            // Settings RPCs are loopback-pinned by the gateway, so a browser the
+            // Host serves over the LAN reads the effective configuration here.
+            const described = await policyRemote.describe();
+            if (!described.ok) {
+                throw new Error(`qaSurface/describe failed: ${described.error.code}`);
+            }
+            // The generated self-remote resolves through the previous build's
+            // declarations during an incremental source typecheck.
+            return described.value;
+        });
+        const syncRoute = () => {
+            const snapshot = config.getSnapshot();
+            route.configure(snapshot.config, snapshot.status === "ready" || snapshot.status === "unavailable");
+        };
+        syncRoute();
+        const unsubscribeConfig = config.subscribe(syncRoute);
+        // After a Host restart an open page must re-read the deployment config,
+        // or the next attestation compares its proof against a stale copy and
+        // refuses. Loopback pages follow the settings mirror; this covers the
+        // describe fallback (LAN browsers). Fires on every lost→restored
+        // connection transition; while connected, ticks are ignored.
+        let connectionUp = ctx.connection.generation.getSnapshot() !== undefined;
+        const unsubscribeConnection = ctx.connection.generation.subscribe(() => {
+            const connected = ctx.connection.generation.getSnapshot() !== undefined;
+            if (connected && !connectionUp) {
+                config.refreshFallback();
+                // A boot-time whoami may have raced the lost connection; the
+                // controller no-ops unless it is still in the checking stage.
+                void accounts.start();
+            }
+            connectionUp = connected;
+        });
+        void accounts.start();
+        // The stock DSH welcome notice cannot persist its acknowledgement for
+        // non-loopback browsers. Shadow only its list-slot cell while the QA
+        // route is selected; leaving /qa immediately restores the host entry.
+        ctx.slots.inject("settings.onboarding", () => {
+            let removeEntry;
+            let mountedKey;
+            const reconcile = () => {
+                const configSnapshot = config.getSnapshot().config;
+                const routeSnapshot = route.getSnapshot();
+                const active = configSnapshot.enabled &&
+                    matchesQaRoute(routeSnapshot.pathname, configSnapshot.route);
+                const nextKey = active
+                    ? qaWelcomeStorageKey(configSnapshot)
+                    : undefined;
+                if (nextKey === mountedKey)
+                    return;
+                removeEntry?.();
+                removeEntry = undefined;
+                mountedKey = nextKey;
+                if (nextKey === undefined)
+                    return;
+                removeEntry = ctx.slots.register({
+                    name: "settings.onboarding",
+                    id: QA_WELCOME_SLOT_ID,
+                    order: -100,
+                    priority: -1_000,
+                    inject: () => ({
+                        storage: window.localStorage,
+                        storageKey: nextKey,
+                    }),
+                }, QaWelcomeNoticeStep);
+            };
+            reconcile();
+            const unsubscribeRoute = route.subscribe(reconcile);
+            const unsubscribeConfig = config.subscribe(reconcile);
+            return () => {
+                unsubscribeRoute();
+                unsubscribeConfig();
+                removeEntry?.();
+            };
+        });
+        ctx.effect(() => {
+            const style = document.createElement("style");
+            style.dataset.dshQaSurface = "styles";
+            style.textContent = QA_SURFACE_STYLES;
+            document.head.append(style);
+            return () => style.remove();
+        }, "dsh-qa-surface: styles");
+        ctx.effect(() => () => {
+            unsubscribeConfig();
+            unsubscribeConnection();
+            config.dispose();
+            route.dispose();
+        }, "dsh-qa-surface: controllers");
+        ctx.slots.inject("shell.overlay", () => ctx.slots.register({
+            name: "shell.overlay",
+            id: "dsh-qa-surface",
+            order: -10_000,
+            inject: () => ({
+                route,
+                config,
+                // The host dsh-session merge types ctx.sessions as SessionStore in
+                // this program; the client assembly provides the ISessions face.
+                sessions: ctx.sessions,
+                conversation: ctx.uiConversation,
+                api: qaApi,
+                connection: ctx.connection.generation,
+                secureSession,
+                sourceApi,
+                accounts,
+            }),
+        }, QaSurface));
+    });
+    return disposeRemote;
 }
 export { QaConfigController } from "./QaConfigController.js";
+export { QaAccountsController } from "./QaAccountsController.js";
 export { QaRouteController, matchesQaRoute } from "./QaRouteController.js";
 export { QaSessionController } from "./QaSessionController.js";
 export { projectTranscript } from "./QaTranscriptAdapter.js";

package/lib/client/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.tsx"],"names":[],"mappings":"AAMA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGhD,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAUxC,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC;AAE3E,kFAAkF;AAClF,MAAM,UAAU,KAAK,CAAC,GAAY;IAChC,MAAM,KAAK,GAAG,IAAI,iBAAiB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,kBAAkB,CACnC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAkB,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAC3E,CAAC;IACF,MAAM,SAAS,GAAG,GAAG,EAAE;QACrB,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACtC,KAAK,CAAC,SAAS,CACb,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,MAAM,KAAK,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,aAAa,CACjE,CAAC;IACJ,CAAC,CAAC;IACF,SAAS,EAAE,CAAC;IACZ,MAAM,iBAAiB,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAEtD,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;QACd,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC9C,KAAK,CAAC,OAAO,CAAC,YAAY,GAAG,QAAQ,CAAC;QACtC,KAAK,CAAC,WAAW,GAAG,iBAAiB,CAAC;QACtC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC9B,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAE7B,GAAG,CAAC,MAAM,CACR,GAAG,EAAE,CAAC,GAAG,EAAE;QACT,iBAAiB,EAAE,CAAC;QACpB,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,KAAK,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC,EACD,6BAA6B,CAC9B,CAAC;IAEF,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,GAAG,EAAE,CACrC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAChB;QACE,IAAI,EAAE,eAAe;QACrB,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,CAAC,MAAM;QACd,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACb,KAAK;YACL,MAAM;YACN,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ;YAChC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,eAAe;SAC3C,CAAC;KACH,EACD,SAAS,CACV,CACF,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.tsx"],"names":[],"mappings":"AAIA,OAAO,eAAe,MAAM,8BAA8B,CAAC;AAQ3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAOtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAWhD,MAAM,kBAAkB,GAAG,YAAY,CAAC;AA2DxC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AAE5C,SAAS,mBAAmB,CAAC,MAA+B;IAC1D,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,OAAO;IACP,UAAU;IACV,gBAAgB;IAChB,YAAY;IACZ,eAAe;IACf,QAAQ;CACT,CAAC;AAEF,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,GAAY;IACtC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAwB,CAAC;IAC5C,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC3D,MAAM,GAAG,CAAC,MAAM,CACd,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,qBAAqB,CAAC,EAC7D,CAAC,aAAa,EAAE,EAAE;QAChB,MAAM,cAAc,GAAG,aAAa,CAAC,MAAwB,CAAC;QAC9D,MAAM,YAAY,GAAG,cAAc,CAAC,SAAS,CAAC;QAC9C,MAAM,aAAa,GAAoB,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAC1D,YAAY,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAkB;YAC3B,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC;YACrE,iBAAiB,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,CAC1C,cAAc,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC;SAC3D,CAAC;QACF,MAAM,SAAS,GAAgB;YAC7B,OAAO,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAC5B,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAEpC;YACH,cAAc,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAC/C,YAAY,CAAC,cAAc,CACzB,KAAK,EACL,SAAS,EACT,UAAU,CAC6C;SAC5D,CAAC;QACF,sEAAsE;QACtE,4DAA4D;QAC5D,MAAM,QAAQ,GAAG,IAAI,oBAAoB,CAAC;YACxC,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,MAAM,CAAC,YAAY;YAC5B,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM;YACzC,aAAa,EAAE,GAAG,EAAE;gBAClB,mEAAmE;gBACnE,oDAAoD;gBACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC;gBAC7C,MAAM,KAAK,GAAG,IAAI,WAAW,CAC3B,MAAM,CAAC,YAAY,EACnB,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAC3D,CAAC;gBACF,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACjC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAChC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC/D,OAAO,GAAG,CAAC;YACb,CAAC;YACD,UAAU,EAAE,CAAC,SAAS,EAAE,EAAE;gBACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC;gBAC7C,IAAI,WAAW,CACb,MAAM,CAAC,YAAY,EACnB,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAC3D,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;SACF,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAClC,GAAG,CAAC,aAAqC,CAAC,IAAI,CAAkB;YAC/D,SAAS,EAAE,kBAAkB;SAC9B,CAAC,EACF,KAAK,IAAI,EAAE;YACT,qEAAqE;YACrE,mEAAmE;YACnE,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,CAAC;YAChD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CACb,8BAA8B,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CACrD,CAAC;YACJ,CAAC;YACD,kEAAkE;YAClE,uDAAuD;YACvD,OAAO,SAAS,CAAC,KAA2C,CAAC;QAC/D,CAAC,CACF,CAAC;QACF,MAAM,SAAS,GAAG,GAAG,EAAE;YACrB,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;YACtC,KAAK,CAAC,SAAS,CACb,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,MAAM,KAAK,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,aAAa,CACjE,CAAC;QACJ,CAAC,CAAC;QACF,SAAS,EAAE,CAAC;QACZ,MAAM,iBAAiB,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACtD,wEAAwE;QACxE,sEAAsE;QACtE,sEAAsE;QACtE,iEAAiE;QACjE,6DAA6D;QAC7D,IAAI,YAAY,GAAG,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC;QACzE,MAAM,qBAAqB,GAAG,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,EAAE;YACrE,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC;YACxE,IAAI,SAAS,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC/B,MAAM,CAAC,eAAe,EAAE,CAAC;gBACzB,6DAA6D;gBAC7D,8DAA8D;gBAC9D,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC;YACxB,CAAC;YACD,YAAY,GAAG,SAAS,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC;QAEtB,sEAAsE;QACtE,qEAAqE;QACrE,sEAAsE;QACtE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,EAAE,GAAG,EAAE;YAC3C,IAAI,WAAqC,CAAC;YAC1C,IAAI,UAA8B,CAAC;YACnC,MAAM,SAAS,GAAG,GAAG,EAAE;gBACrB,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC;gBACnD,MAAM,aAAa,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC1C,MAAM,MAAM,GACV,cAAc,CAAC,OAAO;oBACtB,cAAc,CAAC,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC/D,MAAM,OAAO,GAAG,MAAM;oBACpB,CAAC,CAAC,mBAAmB,CAAC,cAAc,CAAC;oBACrC,CAAC,CAAC,SAAS,CAAC;gBACd,IAAI,OAAO,KAAK,UAAU;oBAAE,OAAO;gBACnC,WAAW,EAAE,EAAE,CAAC;gBAChB,WAAW,GAAG,SAAS,CAAC;gBACxB,UAAU,GAAG,OAAO,CAAC;gBACrB,IAAI,OAAO,KAAK,SAAS;oBAAE,OAAO;gBAClC,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAC9B;oBACE,IAAI,EAAE,qBAAqB;oBAC3B,EAAE,EAAE,kBAAkB;oBACtB,KAAK,EAAE,CAAC,GAAG;oBACX,QAAQ,EAAE,CAAC,KAAK;oBAChB,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;wBACb,OAAO,EAAE,MAAM,CAAC,YAAY;wBAC5B,UAAU,EAAE,OAAO;qBACpB,CAAC;iBACH,EACD,mBAAmB,CACpB,CAAC;YACJ,CAAC,CAAC;YACF,SAAS,EAAE,CAAC;YACZ,MAAM,gBAAgB,GAAG,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACpD,MAAM,iBAAiB,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACtD,OAAO,GAAG,EAAE;gBACV,gBAAgB,EAAE,CAAC;gBACnB,iBAAiB,EAAE,CAAC;gBACpB,WAAW,EAAE,EAAE,CAAC;YAClB,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;YACd,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAC9C,KAAK,CAAC,OAAO,CAAC,YAAY,GAAG,QAAQ,CAAC;YACtC,KAAK,CAAC,WAAW,GAAG,iBAAiB,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAC9B,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAE7B,GAAG,CAAC,MAAM,CACR,GAAG,EAAE,CAAC,GAAG,EAAE;YACT,iBAAiB,EAAE,CAAC;YACpB,qBAAqB,EAAE,CAAC;YACxB,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC,EACD,6BAA6B,CAC9B,CAAC;QAEF,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,GAAG,EAAE,CACrC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAChB;YACE,IAAI,EAAE,eAAe;YACrB,EAAE,EAAE,gBAAgB;YACpB,KAAK,EAAE,CAAC,MAAM;YACd,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACb,KAAK;gBACL,MAAM;gBACN,mEAAmE;gBACnE,iEAAiE;gBACjE,QAAQ,EAAE,GAAG,CAAC,QAAiC;gBAC/C,YAAY,EAAE,GAAG,CAAC,cAAc;gBAChC,GAAG,EAAE,KAAK;gBACV,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,UAAU;gBACrC,aAAa;gBACb,SAAS;gBACT,QAAQ;aACT,CAAC;SACH,EACD,SAAS,CACV,CACF,CAAC;IACJ,CAAC,CACF,CAAC;IACF,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC"}

package/lib/client/project-session-state.js

@@ -0,0 +1,78 @@
+import { projectTranscript } from "./QaTranscriptAdapter.js";
+/**
+ * Project one bound chat into the observable surface state: phase, transcript
+ * with per-turn sources, footer sources, and the composer's capabilities.
+ * Side effects (host-bundle refresh, notifications) live in the controller.
+ */
+export function projectBoundSessionState(input) {
+    const { config, sessionSnapshot: snapshot } = input;
+    // A pending approval interaction is invisible to this snapshot in 0.1.5;
+    // the QA lockdown pins approval=never and strips escalation-requiring
+    // tools, so no interaction the surface cannot answer should ever arise.
+    const error = input.operationError ??
+        (snapshot.removed || snapshot.openState === "error"
+            ? "Этот чат больше недоступен."
+            : null);
+    const phase = !input.connected
+        ? "reconnecting"
+        : snapshot.removed || snapshot.openState === "error"
+            ? "error"
+            : snapshot.openState !== "open"
+                ? "creating"
+                : snapshot.running || input.admissionPending
+                    ? "running"
+                    : "ready";
+    const sourcesByTurn = new Map(input.sourceBundles.map((bundle) => [bundle.turn, bundle]));
+    const messages = projectTranscript(input.conversationSnapshot, {
+        running: snapshot.running,
+        showToolActivity: config.ui.showToolActivity,
+        showReasoning: config.ui.showReasoning,
+    }).map((message) => {
+        if (message.role === "user" && input.author !== undefined) {
+            return { ...message, author: input.author };
+        }
+        if (message.role !== "assistant" || message.turn === undefined)
+            return message;
+        const bundle = sourcesByTurn.get(message.turn);
+        const sources = bundle === undefined
+            ? undefined
+            : [
+                ...bundle.sources,
+                ...(config.sources.display.showDiscovered
+                    ? (bundle.discovered ?? [])
+                    : []),
+            ];
+        return sources === undefined || sources.length === 0
+            ? message
+            : {
+                ...message,
+                sources,
+                sourcesComplete: bundle?.complete ?? true,
+                ...(bundle?.incompleteOrigins === undefined
+                    ? {}
+                    : { incompleteSourceOrigins: bundle.incompleteOrigins }),
+            };
+    });
+    const latest = input.sourceBundles.at(-1);
+    return {
+        phase,
+        sessionId: input.sessionId,
+        messages,
+        error,
+        canSend: input.connected && phase === "ready" && input.policyReady,
+        canStop: input.connected && snapshot.running && config.ui.showStop,
+        chatsRevision: input.chatsRevision,
+        sources: latest === undefined
+            ? []
+            : [
+                ...latest.sources,
+                ...(config.sources.display.showDiscovered
+                    ? (latest.discovered ?? [])
+                    : []),
+            ],
+        sourcesComplete: latest?.complete ?? true,
+        incompleteSourceOrigins: latest?.incompleteOrigins,
+        viewingSubagent: input.viewingSubagent,
+    };
+}
+//# sourceMappingURL=project-session-state.js.map

package/lib/client/project-session-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-session-state.js","sourceRoot":"","sources":["../../src/client/project-session-state.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAuB7D;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAA6B;IAE7B,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACpD,yEAAyE;IACzE,sEAAsE;IACtE,wEAAwE;IACxE,MAAM,KAAK,GACT,KAAK,CAAC,cAAc;QACpB,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO;YACjD,CAAC,CAAC,6BAA6B;YAC/B,CAAC,CAAC,IAAI,CAAC,CAAC;IACZ,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,SAAS;QAC5B,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO;YAClD,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,QAAQ,CAAC,SAAS,KAAK,MAAM;gBAC7B,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC,gBAAgB;oBAC1C,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,OAAO,CAAC;IAClB,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAU,CAAC,CACpE,CAAC;IACF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,oBAAoB,EAAE;QAC7D,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC,gBAAgB;QAC5C,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,aAAa;KACvC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACjB,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1D,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC9C,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAC5D,OAAO,OAAO,CAAC;QACjB,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,OAAO,GACX,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC;gBACE,GAAG,MAAM,CAAC,OAAO;gBACjB,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc;oBACvC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;oBAC3B,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACR,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAClD,CAAC,CAAC,OAAO;YACT,CAAC,CAAC;gBACE,GAAG,OAAO;gBACV,OAAO;gBACP,eAAe,EAAE,MAAM,EAAE,QAAQ,IAAI,IAAI;gBACzC,GAAG,CAAC,MAAM,EAAE,iBAAiB,KAAK,SAAS;oBACzC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,uBAAuB,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC;aAC3D,CAAC;IACR,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,OAAO;QACL,KAAK;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ;QACR,KAAK;QACL,OAAO,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,CAAC,WAAW;QAClE,OAAO,EAAE,KAAK,CAAC,SAAS,IAAI,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC,QAAQ;QAClE,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,OAAO,EACL,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,GAAG,MAAM,CAAC,OAAO;gBACjB,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc;oBACvC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;oBAC3B,CAAC,CAAC,EAAE,CAAC;aACR;QACP,eAAe,EAAE,MAAM,EAAE,QAAQ,IAAI,IAAI;QACzC,uBAAuB,EAAE,MAAM,EAAE,iBAAiB;QAClD,eAAe,EAAE,KAAK,CAAC,eAAe;KACvC,CAAC;AACJ,CAAC"}

package/lib/client/session-admission.js

@@ -0,0 +1,38 @@
+import { attestationHint, attestationReasonOf, proofMatchesConfig, } from "./attestation.js";
+/**
+ * One send-time policy attestation against the Host admission gate. The
+ * QA-facing message stays generic by design; the coarse reason plus an
+ * operator hint go to the console once per refusal.
+ */
+export async function attestQaPolicy(args) {
+    try {
+        const result = await args.secureSession(args.token, args.sessionId);
+        if (!result.ok) {
+            const reason = attestationReasonOf(result.error);
+            if (reason === "auth-required") {
+                if (args.report) {
+                    console.error("dsh-qa-surface: policy attestation failed (reason: auth-required). The account token is absent or expired.");
+                }
+                return { ok: false, authRequired: true, reason };
+            }
+            return reject(args, reason);
+        }
+        if (!proofMatchesConfig(result.value, args.lockdown, args.sessionId)) {
+            return reject(args, "proof-mismatch");
+        }
+        return { ok: true };
+    }
+    catch (error) {
+        if (args.report) {
+            console.error("dsh-qa-surface: policy attestation request failed", error);
+        }
+        return { ok: false, authRequired: false, reason: null };
+    }
+}
+function reject(args, reason) {
+    if (args.report) {
+        console.error(`dsh-qa-surface: policy attestation failed (reason: ${reason ?? "unknown"}). ${attestationHint(reason)}`);
+    }
+    return { ok: false, authRequired: false, reason };
+}
+//# sourceMappingURL=session-admission.js.map

package/lib/client/session-admission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-admission.js","sourceRoot":"","sources":["../../src/client/session-admission.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAa1B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAMpC;IACC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,mBAAmB,CAChC,MAAM,CAAC,KAAsC,CAC9C,CAAC;YACF,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;gBAC/B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;oBAChB,OAAO,CAAC,KAAK,CACX,4GAA4G,CAC7G,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACnD,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACrE,OAAO,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,KAAK,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CACb,IAAkC,EAClC,MAAqB;IAErB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CACX,sDAAsD,MAAM,IAAI,SAAS,MAAM,eAAe,CAAC,MAAM,CAAC,EAAE,CACzG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACpD,CAAC"}

package/lib/client/session-assets.js

@@ -0,0 +1,52 @@
+/**
+ * Per-chat cache of resolved attachment URLs. Attachment reads are
+ * session-scoped (the loader reads the bound session's durable store), and
+ * attachment ids are only unique within a chat, so both the cache and the
+ * blob lifetime are keyed by chat, not by the page.
+ */
+export class SessionAssetRepository {
+    bySession = new Map();
+    /** Resolve one attachment of one chat, deduplicating concurrent reads. */
+    resolve(sessionId, attachmentId, load) {
+        const byAttachment = this.bySession.get(sessionId) ?? new Map();
+        this.bySession.set(sessionId, byAttachment);
+        let pending = byAttachment.get(attachmentId);
+        if (pending === undefined) {
+            pending = load(attachmentId);
+            byAttachment.set(attachmentId, pending);
+            // A failed read must not poison the slot: the broken view retries by
+            // re-resolving on demand.
+            pending.catch(() => {
+                if (byAttachment.get(attachmentId) === pending)
+                    byAttachment.delete(attachmentId);
+            });
+        }
+        return pending;
+    }
+    /**
+     * Revoke the chat's blob URLs and drop its cache. Data URLs need no
+     * revocation; a failed resolution never produced a URL at all.
+     */
+    release(sessionId) {
+        const byAttachment = this.bySession.get(sessionId);
+        if (byAttachment === undefined)
+            return;
+        this.bySession.delete(sessionId);
+        for (const pending of byAttachment.values())
+            void pending.then(revokeIfBlob, () => undefined);
+    }
+    dispose() {
+        for (const sessionId of [...this.bySession.keys()])
+            this.release(sessionId);
+    }
+}
+function revokeIfBlob(url) {
+    revokeObjectUrlIfBlob(url);
+}
+/** Revoke one blob URL; data URLs (and other runtimes) need nothing. */
+export function revokeObjectUrlIfBlob(url) {
+    if (url.startsWith("blob:") && typeof URL.revokeObjectURL === "function") {
+        URL.revokeObjectURL(url);
+    }
+}
+//# sourceMappingURL=session-assets.js.map

package/lib/client/session-assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-assets.js","sourceRoot":"","sources":["../../src/client/session-assets.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,OAAO,sBAAsB;IAChB,SAAS,GAAG,IAAI,GAAG,EAAwC,CAAC;IAE7E,0EAA0E;IAC1E,OAAO,CACL,SAAiB,EACjB,YAAoB,EACpB,IAA+C;QAE/C,MAAM,YAAY,GAChB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAA2B,CAAC;QACtE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC5C,IAAI,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;YAC7B,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACxC,qEAAqE;YACrE,0BAA0B;YAC1B,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;gBACjB,IAAI,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,OAAO;oBAC5C,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,SAAiB;QACvB,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO;QACvC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE;YACzC,KAAK,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IAED,OAAO;QACL,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9E,CAAC;CACF;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,qBAAqB,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;QACzE,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC"}

package/lib/client/session-sources.js

@@ -0,0 +1,61 @@
+/**
+ * Host-side provenance of the bound chat. The client projects turn sources
+ * from durable conversation events; the Host bundle (which also carries
+ * subagent-inherited evidence) is fetched on the side and merged by turn,
+ * Host data winning over the projection.
+ */
+export class QaHostSourceBridge {
+    sourceApi;
+    token;
+    bundles = [];
+    signature = "";
+    refreshing = false;
+    /** Bumped on reset so a stale in-flight fetch never lands. */
+    generation = 0;
+    constructor(sourceApi, token) {
+        this.sourceApi = sourceApi;
+        this.token = token;
+    }
+    /** Leave the chat: drop its bundles; merging degrades to the projection. */
+    reset() {
+        this.generation += 1;
+        this.bundles = [];
+        this.signature = "";
+        this.refreshing = false;
+    }
+    merge(projected) {
+        const merged = new Map();
+        for (const bundle of projected)
+            merged.set(bundle.turn, bundle);
+        for (const bundle of this.bundles)
+            merged.set(bundle.turn, bundle);
+        return [...merged.values()].sort((left, right) => left.turn - right.turn);
+    }
+    /**
+     * Fetch the Host bundles of one chat; a changed payload republishes through
+     * the callback. Repeated calls coalesce while one is in flight, and a
+     * response that outlives the chat is dropped.
+     */
+    async refresh(sessionId, onChanged) {
+        if (this.refreshing)
+            return;
+        const generation = this.generation;
+        this.refreshing = true;
+        try {
+            const result = await this.sourceApi.sources(this.token(), sessionId);
+            if (!result.ok || generation !== this.generation)
+                return;
+            const signature = JSON.stringify(result.value);
+            if (signature === this.signature)
+                return;
+            this.signature = signature;
+            this.bundles = result.value;
+            onChanged();
+        }
+        finally {
+            if (generation === this.generation)
+                this.refreshing = false;
+        }
+    }
+}
+//# sourceMappingURL=session-sources.js.map

package/lib/client/session-sources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-sources.js","sourceRoot":"","sources":["../../src/client/session-sources.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,MAAM,OAAO,kBAAkB;IAQV,SAAS;IACT,KAAK;IARhB,OAAO,GAA6B,EAAE,CAAC;IACvC,SAAS,GAAG,EAAE,CAAC;IACf,UAAU,GAAG,KAAK,CAAC;IAC3B,8DAA8D;IACtD,UAAU,GAAG,CAAC,CAAC;IAEvB,YACmB,SAAsB,EACtB,KAAmB;yBADnB,SAAS;qBACT,KAAK;IACrB,CAAC;IAEJ,4EAA4E;IAC5E,KAAK;QACH,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,SAAmC;QACvC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;QAChD,KAAK,MAAM,MAAM,IAAI,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChE,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5E,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,SAAqB;QACpD,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;YACrE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU;gBAAE,OAAO;YACzD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,SAAS,KAAK,IAAI,CAAC,SAAS;gBAAE,OAAO;YACzC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC3B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;YAC5B,SAAS,EAAE,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU;gBAAE,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QAC9D,CAAC;IACH,CAAC;CACF"}