@yadsh/dsh-qa-surface 0.15.6 → 0.15.7

package/lib/types/secure-session.d.ts

@@ -2,6 +2,7 @@ import type { Agent } from "@deepseek-ai/dsh-agent";
 import type { Context } from "@deepseek-ai/cordis";
 import type { PluginLogger } from "@yadsh/dsh-plugin-log";
 import { type QaSessionFacts } from "./accounts/store.js";
+import type { QaIntegrationPrincipalBindings } from "./integration-principals.js";
 import type { QaResolvedSessionPolicy } from "./access/service.js";
 import { type QaSessionModelPolicy } from "./access/model-policy.js";
 import type { QaLockdownProof, ResolvedQaSurfaceConfig } from "./types.js";
@@ -52,6 +53,15 @@ export declare class QaPolicyAdmission {
      * the answer a stand that keeps roles elsewhere still gets.
      */
     private readonly modelPolicy?;
+    /**
+     * The runtime proof that a session was attested by its own account, which is
+     * what lets `@yadsh/dsh-qa-integrations` resolve a QA principal for a chat.
+     * The browser path fills it at its own remote, where the caller's identity is
+     * the token being compared (and an administrator reading a foreign chat is
+     * deliberately not a delegation); {@link secureSessionForUser} has no token
+     * to compare, so it fills it here, against the ownership record it checked.
+     */
+    private readonly principals?;
     private readonly appliedPolicies;
     /** Host-trusted principal-scoped plugin tools enabled outside static config. */
     private readonly principalScopedTools;
@@ -96,7 +106,16 @@ export declare class QaPolicyAdmission {
      * the chat to. Without a resolver the deployment pair is the whole of it —
      * the answer a stand that keeps roles elsewhere still gets.
      */
-    modelPolicy?: ((sessionId: string) => QaSessionModelPolicy) | undefined);
+    modelPolicy?: ((sessionId: string) => QaSessionModelPolicy) | undefined, 
+    /**
+     * The runtime proof that a session was attested by its own account, which is
+     * what lets `@yadsh/dsh-qa-integrations` resolve a QA principal for a chat.
+     * The browser path fills it at its own remote, where the caller's identity is
+     * the token being compared (and an administrator reading a foreign chat is
+     * deliberately not a delegation); {@link secureSessionForUser} has no token
+     * to compare, so it fills it here, against the ownership record it checked.
+     */
+    principals?: QaIntegrationPrincipalBindings | undefined);
     /**
      * Add tools whose own executor resolves the QA principal server-side.
      * Enabling the contributing plugin is the operator decision; model arguments

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yadsh/dsh-qa-surface",
-  "version": "0.15.6",
+  "version": "0.15.7",
   "description": "A focused end-user QA surface backed by native DeepSeek Harness sessions",
   "repository": {
     "type": "git",
@@ -135,10 +135,10 @@
   "dependencies": {
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
-    "@yadsh/dsh-audit-ui": "^0.1.2",
     "@yadsh/dsh-audit-core": "^0.1.1",
-    "@yadsh/dsh-plugin-log": "^0.4.1",
     "@yadsh/dsh-plugin-kit": "^0.5.0",
+    "@yadsh/dsh-audit-ui": "^0.1.2",
+    "@yadsh/dsh-plugin-log": "^0.4.1",
     "@yadsh/dsh-documents": "^0.6.3"
   },
   "devDependencies": {