@yadsh/dsh-qa-surface 0.1.1 → 0.3.0

package/lib/types/types.d.ts

@@ -1,4 +1,87 @@
+import type { QaTurnSources } from "./provenance/types.js";
 export type QaSessionPolicy = "browser-persistent" | "new-on-load" | "fixed";
+export type QaSandboxMode = "read-only";
+export type QaApprovalPolicy = "never";
+export type QaToolPolicyMode = "allow-list";
+export type QaAccountRole = "user" | "admin";
+/** The account fields projected to browsers; never includes credentials. */
+export interface QaAccountUserPublic {
+    readonly id: string;
+    readonly email: string;
+    readonly displayName: string;
+    readonly role: QaAccountRole;
+    readonly createdAt: string;
+    readonly lastLoginAt: string | null;
+    readonly disabled: boolean;
+}
+/** One successful login/registration: the bearer token plus the user. */
+export interface QaAccountSession {
+    readonly token: string;
+    readonly user: QaAccountUserPublic;
+}
+export type QaWhoamiResult = {
+    readonly authenticated: false;
+} | {
+    readonly authenticated: true;
+    readonly user: QaAccountUserPublic;
+};
+/** Bulk ownership claim outcome for one browser's local chat index. */
+export interface QaClaimResult {
+    readonly claimed: number;
+    /** Ids already owned by a different user; the browser drops them. */
+    readonly conflicts: readonly string[];
+}
+/**
+ * One chat-ownership entry as the admin views see it: the session, its owner
+ * and the owner's display name resolved at read time (a disabled account
+ * still names its chats).
+ */
+export interface QaOwnershipEntry {
+    readonly sessionId: string;
+    readonly userId: string;
+    readonly displayName: string;
+    readonly claimedAt: string;
+}
+export interface QaSourcesConfig {
+    readonly enabled?: boolean;
+    readonly collect?: {
+        readonly parentAgent?: boolean;
+        readonly subagents?: boolean;
+        readonly persistTurnEvent?: boolean;
+    };
+    readonly display?: {
+        readonly sidebar?: boolean;
+        readonly footer?: boolean;
+        readonly groupByKind?: boolean;
+        readonly showDiscovered?: boolean;
+        readonly showOriginBadges?: boolean;
+        readonly maxInitiallyVisiblePerGroup?: number;
+    };
+    readonly webSearch?: {
+        readonly promoteSearchResultsWithoutFetch?: boolean;
+        readonly maxPromotedPerSearch?: number;
+    };
+    readonly dedupe?: {
+        readonly normalizeUrls?: boolean;
+        readonly stripTrackingParams?: boolean;
+        readonly mergeFileRanges?: boolean;
+    };
+    readonly filePreview?: {
+        readonly enabled?: boolean;
+        readonly markdownRenderedByDefault?: boolean;
+        readonly allowRawToggle?: boolean;
+        readonly maxBytes?: number;
+        readonly maxMarkdownRenderBytes?: number;
+    };
+    readonly subagents?: {
+        readonly inheritSources?: boolean;
+        readonly enableReportToolFallback?: boolean;
+        readonly markIncompleteOpaqueRuns?: boolean;
+    };
+    readonly legacy?: {
+        readonly parseAssistantSourcesBlock?: boolean;
+    };
+}
 export interface QaSurfaceConfig {
     readonly enabled?: boolean;
     readonly route?: {
@@ -11,10 +94,14 @@ export interface QaSurfaceConfig {
         readonly welcomeMessage?: string;
         readonly placeholder?: string;
         readonly logoUrl?: string | null;
+        /** Data-usage notice under the composer; empty string hides the plate. */
+        readonly disclaimer?: string | null;
     };
     readonly session?: {
         readonly policy?: QaSessionPolicy;
         readonly storageKey?: string;
+        /** Absolute directory pinned as the session cwd (alternative to workspaceId). */
+        readonly cwd?: string | null;
         readonly workspaceId?: string | null;
         readonly fixedSessionId?: string | null;
         readonly agentPreset?: string | null;
@@ -31,15 +118,51 @@ export interface QaSurfaceConfig {
         readonly showReasoning?: boolean;
         readonly renderMarkdown?: boolean;
         readonly maxContentWidth?: number;
+        readonly showSessionList?: boolean;
     };
     readonly suggestedQuestions?: readonly string[];
     readonly interaction?: {
         readonly approvals?: "blocked";
         readonly questions?: "unsupported";
     };
+    readonly lockdown?: {
+        readonly enabled?: boolean;
+        readonly enforceFixedAgentPreset?: boolean;
+        readonly enforceFixedWorkspace?: boolean;
+        readonly enforceFixedModel?: boolean;
+        readonly sandboxMode?: QaSandboxMode;
+        readonly approvalPolicy?: QaApprovalPolicy;
+        readonly permissionPreset?: string;
+        readonly allowPermissionChanges?: false;
+        readonly allowSlashCommands?: false;
+        readonly allowSettingsMutation?: false;
+        readonly allowSessionReset?: boolean;
+        readonly allowSessionRename?: false;
+        readonly allowSessionDelete?: false;
+        readonly allowArbitrarySessionOpen?: false;
+        readonly toolPolicy?: {
+            readonly mode?: QaToolPolicyMode;
+            readonly allow?: readonly string[];
+        };
+    };
     readonly embedding?: {
         readonly frameAncestors?: string | null;
     };
+    readonly accounts?: {
+        /** Opt-in; the QA gate stays off until the deployment turns this on. */
+        readonly enabled?: boolean;
+        readonly allowRegistration?: boolean;
+        readonly sessionTtlDays?: number;
+        /** Let admins see chats owned by other QA accounts. */
+        readonly showOtherUsersChats?: boolean;
+    };
+    readonly entry?: {
+        /** Inject the root → /qa redirect for non-loopback hostnames. */
+        readonly redirectNonLoopback?: boolean;
+        /** Cookie-less /qa navigations go through the one-time ?token= exchange. */
+        readonly cookieBootstrap?: boolean;
+    };
+    readonly sources?: QaSourcesConfig;
 }
 export interface ResolvedQaSurfaceConfig {
     readonly enabled: boolean;
@@ -53,10 +176,12 @@ export interface ResolvedQaSurfaceConfig {
         readonly welcomeMessage: string;
         readonly placeholder: string;
         readonly logoUrl: string | null;
+        readonly disclaimer: string;
     };
     readonly session: {
         readonly policy: QaSessionPolicy;
         readonly storageKey: string;
+        readonly cwd: string | null;
         readonly workspaceId: string | null;
         readonly fixedSessionId: string | null;
         readonly agentPreset: string | null;
@@ -70,18 +195,110 @@ export interface ResolvedQaSurfaceConfig {
         readonly showStop: boolean;
         readonly showTimestamps: boolean;
         readonly showToolActivity: boolean;
-        readonly showReasoning: false;
+        readonly showReasoning: boolean;
         readonly renderMarkdown: boolean;
         readonly maxContentWidth: number;
+        readonly showSessionList: boolean;
     };
     readonly suggestedQuestions: readonly string[];
     readonly interaction: {
         readonly approvals: "blocked";
         readonly questions: "unsupported";
     };
+    readonly lockdown: {
+        readonly enabled: boolean;
+        readonly enforceFixedAgentPreset: boolean;
+        readonly enforceFixedWorkspace: boolean;
+        readonly enforceFixedModel: boolean;
+        readonly sandboxMode: QaSandboxMode;
+        readonly approvalPolicy: QaApprovalPolicy;
+        readonly permissionPreset: string;
+        readonly allowPermissionChanges: false;
+        readonly allowSlashCommands: false;
+        readonly allowSettingsMutation: false;
+        readonly allowSessionReset: boolean;
+        readonly allowSessionRename: false;
+        readonly allowSessionDelete: false;
+        readonly allowArbitrarySessionOpen: false;
+        readonly toolPolicy: {
+            readonly mode: QaToolPolicyMode;
+            readonly allow: readonly string[];
+        };
+    };
     readonly embedding: {
         readonly frameAncestors: string | null;
     };
+    readonly accounts: {
+        readonly enabled: boolean;
+        readonly allowRegistration: boolean;
+        readonly sessionTtlDays: number;
+        readonly showOtherUsersChats: boolean;
+    };
+    readonly entry: {
+        readonly redirectNonLoopback: boolean;
+        readonly cookieBootstrap: boolean;
+    };
+    readonly sources: {
+        readonly enabled: boolean;
+        readonly collect: {
+            readonly parentAgent: boolean;
+            readonly subagents: boolean;
+            readonly persistTurnEvent: boolean;
+        };
+        readonly display: {
+            readonly sidebar: boolean;
+            readonly footer: boolean;
+            readonly groupByKind: boolean;
+            readonly showDiscovered: boolean;
+            readonly showOriginBadges: boolean;
+            readonly maxInitiallyVisiblePerGroup: number;
+        };
+        readonly webSearch: {
+            readonly promoteSearchResultsWithoutFetch: boolean;
+            readonly maxPromotedPerSearch: number;
+        };
+        readonly dedupe: {
+            readonly normalizeUrls: boolean;
+            readonly stripTrackingParams: boolean;
+            readonly mergeFileRanges: boolean;
+        };
+        readonly filePreview: {
+            readonly enabled: boolean;
+            readonly markdownRenderedByDefault: boolean;
+            readonly allowRawToggle: boolean;
+            readonly maxBytes: number;
+            readonly maxMarkdownRenderBytes: number;
+        };
+        readonly subagents: {
+            readonly inheritSources: boolean;
+            readonly enableReportToolFallback: boolean;
+            readonly markIncompleteOpaqueRuns: boolean;
+        };
+        readonly legacy: {
+            readonly parseAssistantSourcesBlock: boolean;
+        };
+    };
+}
+export interface QaSourceFilePreview {
+    readonly path: string;
+    readonly content: string;
+    readonly size: number;
+    readonly truncated: boolean;
+    readonly markdown: boolean;
+    readonly renderableMarkdown: boolean;
+}
+/** Host-attested facts required before the QA composer may become writable. */
+export interface QaLockdownProof {
+    readonly sessionId: string;
+    readonly enabled: boolean;
+    readonly agentPresetMatches: boolean;
+    readonly workspaceMatches: boolean;
+    readonly modelMatches: boolean;
+    readonly sandboxIsReadOnly: boolean;
+    readonly approvalIsNever: boolean;
+    readonly permissionPreset: string;
+    readonly toolPolicyLoaded: boolean;
+    readonly toolAllowList: readonly string[];
 }
 export type QaMessage = {
     readonly id: string;
@@ -89,20 +306,98 @@ export type QaMessage = {
     readonly text: string;
     readonly status: "committed";
     readonly timestamp?: number;
+    readonly images?: readonly QaImageView[];
+    /**
+     * Chat owner's display name, set only for an admin reading a foreign
+     * chat; the owner themself sees their messages unlabeled.
+     */
+    readonly author?: string;
 } | {
     readonly id: string;
     readonly role: "assistant";
     readonly text: string;
     readonly status: "streaming" | "committed" | "failed";
     readonly timestamp?: number;
+    /** Host turn this answer belongs to; groups regenerations into variants. */
+    readonly turn?: number;
+    /** Canonical evidence snapshot shared with this answer's source drawer. */
+    readonly sources?: readonly QaSource[];
+    readonly sourcesComplete?: boolean;
+    readonly incompleteSourceOrigins?: QaTurnSources["incompleteOrigins"];
+    /** Host-recorded response timing, present on finalized messages only. */
+    readonly stats?: {
+        /** step start → final message. */
+        readonly durationMs: number;
+        /** step start → first token; null when no token delta was recorded. */
+        readonly ttftMs: number | null;
+        /** Estimated from visible text (≈4 chars/token) over the generation window. */
+        readonly tokensPerSecond: number | null;
+    };
 } | {
     readonly id: string;
     readonly role: "system";
     readonly text: string;
     readonly status: "info" | "error";
     readonly timestamp?: number;
+    /** Collapsible settlement row (subagent finished/stopped/failed). */
+    readonly notice?: {
+        readonly title: string;
+        readonly body: string;
+    };
+} | {
+    readonly id: string;
+    readonly role: "work";
+    readonly turn: number;
+    readonly status: "running" | "complete";
+    readonly startedAt?: number;
+    readonly endedAt?: number;
+    readonly items: readonly QaWorkItem[];
+};
+export type QaWorkItem = {
+    readonly id: string;
+    readonly kind: "reasoning" | "progress";
+    readonly text: string;
+    readonly status: "running" | "complete";
+} | {
+    readonly id: string;
+    readonly kind: "tool";
+    readonly name: string;
+    readonly label: string;
+    readonly summary: string;
+    readonly input: string | null;
+    readonly output: string | null;
+    readonly status: "running" | "ok" | "error" | "stopped";
+    /** Durable child id, present on subagent launch calls that started one. */
+    readonly subagentId?: string;
+    readonly startedAt?: number;
+    readonly endedAt?: number;
 };
 export type QaSessionPhase = "idle" | "creating" | "ready" | "running" | "reconnecting" | "blocked" | "error";
+export type { QaSourceEvidence, QaSourceKind, QaSourceLocation, QaSourceOrigin, QaSourceReference, QaTurnSources, } from "./provenance/types.js";
+/** Transitional UI name; the drawer now consumes the canonical source object. */
+export type QaSource = import("./provenance/types.js").QaSourceReference;
+/** Raster formats the attachment path accepts (mirrors the host contract). */
+export type QaImageMediaType = "image/png" | "image/jpeg" | "image/webp" | "image/gif";
+/** One image pending in the composer, browser-owned until the prompt lands. */
+export interface QaImageDraft {
+    readonly id: string;
+    readonly mediaType: QaImageMediaType;
+    readonly name: string;
+    /** Canonical base64 of the image bytes, without the data: URL prefix. */
+    readonly data: string;
+    /** Local object URL for the preview thumbnail. */
+    readonly previewUrl: string;
+}
+/** A durable image attached to a sent message. */
+export interface QaImageView {
+    readonly attachmentId: string;
+    readonly mediaType: QaImageMediaType;
+}
+/** A subagent transcript opened read-only from the agents panel. */
+export interface QaSubagentView {
+    readonly id: string;
+    readonly title: string;
+}
 export interface QaSessionState {
     readonly phase: QaSessionPhase;
     readonly sessionId: string | null;
@@ -110,5 +405,13 @@ export interface QaSessionState {
     readonly error: string | null;
     readonly canSend: boolean;
     readonly canStop: boolean;
+    /** Bumped whenever this browser's chat index changes (add/forget). */
+    readonly chatsRevision: number;
+    /** Tool-derived sources of the current chat (web targets and files read). */
+    readonly sources: readonly QaSource[];
+    readonly sourcesComplete: boolean;
+    readonly incompleteSourceOrigins: QaTurnSources["incompleteOrigins"];
+    /** Set while the bound session is a subagent watched from the panel. */
+    readonly viewingSubagent: QaSubagentView | null;
 }
 //# sourceMappingURL=types.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yadsh/dsh-qa-surface",
-  "version": "0.1.1",
+  "version": "0.3.0",
   "description": "A focused end-user QA surface backed by native DeepSeek Harness sessions",
   "repository": {
     "type": "git",
@@ -14,6 +14,9 @@
   "type": "module",
   "main": "./lib/index.js",
   "types": "./lib/types/index.d.ts",
+  "bin": {
+    "qa-accounts": "./lib/cli.js"
+  },
   "exports": {
     ".": {
       "types": "./lib/types/index.d.ts",
@@ -23,6 +26,14 @@
       "types": "./lib/types/client/index.d.ts",
       "default": "./lib/client.js"
     },
+    "./remote": {
+      "types": "./lib/typert.remote-client.d.ts",
+      "default": "./lib/typert.remote-client.js"
+    },
+    "./typert": {
+      "types": "./lib/typert.host.d.ts",
+      "default": "./lib/typert.host.js"
+    },
     "./types": {
       "types": "./lib/types/types.d.ts",
       "default": "./lib/types.js"
@@ -39,8 +50,9 @@
       ],
       "inject": [
         "@deepseek-ai/dsh-api-gateway",
+        "@deepseek-ai/dsh-api-session-controller",
+        "@deepseek-ai/dsh-agent-presets",
         "@deepseek-ai/dsh-client-connection",
-        "@deepseek-ai/dsh-client-runtime",
         "@deepseek-ai/dsh-client-ui-layout",
         "@deepseek-ai/dsh-client-ui-settings",
         "@deepseek-ai/dsh-client-ui-theme"
@@ -51,9 +63,10 @@
   "files": [
     "lib/**/*.js",
     "lib/**/*.js.map",
-    "lib/types/**/*.d.ts",
+    "lib/**/*.d.ts",
     "cordis.patch.yml",
     "compatibility.json",
+    "capability-policy.json",
     "README.md",
     "CHANGELOG.md",
     "docs/*.md",
@@ -74,45 +87,75 @@
     "node": "^22.19.0 || >=24.0.0"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/schemastery": "^3.18.1",
-    "@deepseek-ai/dsh-api-gateway": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-connection": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-runtime": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-layout": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-theme": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-host-webserver": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-settings": ">=0.1.1-rc.2 <0.2.0",
-    "react": "^18.2.0"
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/schemastery": "^3.18.2",
+    "@deepseek-ai/dsh-api-gateway": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-agent": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-agent-presets": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-api-session-controller": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-api-workspace-controller": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-connection": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-conversation": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-chat": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-layout": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-renderer": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-theme": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-host-webserver": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-permission-presets": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-session": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-settings": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-system-prompt": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-tools": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-typert-protocol": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-workspace": ">=0.1.5-rc.2 <0.2.0",
+    "react": "^18.2.0",
+    "react-dom": "^18.2.0"
   },
   "dependencies": {
+    "zod": "^4.4.3",
     "@yadsh/dsh-plugin-log": "^0.2.1"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "4.0.1",
-    "@deepseek-ai/schemastery": "3.18.1",
-    "@deepseek-ai/dsh-api-gateway": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-connection": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-runtime": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-layout": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-slots": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-theme": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-host-webserver": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-settings": "0.1.1-rc.2",
+    "@deepseek-ai/cordis": "4.0.2",
+    "@deepseek-ai/schemastery": "3.18.2",
+    "@deepseek-ai/dsh-api-gateway": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-agent": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-agent-presets": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-api-session-controller": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-api-workspace-controller": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-connection": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-chat": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-layout": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-theme": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-host-webserver": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-permission-presets": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-tools": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-typert-generator": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-workspace": "0.1.5-rc.2",
     "@testing-library/react": "^16.3.0",
     "@types/node": "^26.4.0",
     "@types/react": "18.3.28",
+    "@types/react-dom": "18.3.7",
     "eslint": "10.9.1",
     "jsdom": "^26.1.0",
     "playwright": "1.62.1",
     "prettier": "^3.6.2",
     "react": "18.3.1",
+    "react-dom": "18.3.1",
     "tsdown": "^0.22.14",
     "typescript": "^7.0.2",
     "vitest": "^4.1.11",
+    "@yadsh/dsh-plugin-scripts": "^0.0.0",
     "@yadsh/dsh-config": "^0.0.0"
   },
   "publishConfig": {
@@ -121,7 +164,7 @@
   },
   "scripts": {
     "clean": "node -e \"require('node:fs').rmSync('lib', { recursive: true, force: true })\"",
-    "build": "pnpm run clean && tsdown && tsc -p tsconfig.build.json",
+    "build": "pnpm run lint && pnpm run clean && node scripts/generate-typert.mjs && tsc -p tsconfig.build.json && tsdown",
     "lint": "eslint src tests scripts tsdown.config.ts",
     "format": "prettier --check . --end-of-line auto",
     "format:write": "prettier --write . --end-of-line auto",