@yadsh/dsh-qa-surface 0.15.6 → 0.16.0

package/lib/index.js

@@ -33,6 +33,15 @@ var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn,
     done = true;
 };
 import { randomUUID } from "node:crypto";
+import path from "node:path";
+import { defaultAccountsFilePath } from "./accounts/store.js";
+import { QaChatSharingStore } from "./chat-sharing/store.js";
+import { QaChatTransport } from "./chat-sharing/transport.js";
+import { QaChatTurnGuard } from "./chat-sharing/turn-guard.js";
+import { installQaNativeFence } from "./chat-sharing/native-fence.js";
+import { qaChatPublishedFile, qaChatAttachmentPath, } from "./chat-sharing/resources.js";
+import { installQaChatUploads } from "./chat-sharing/uploads.js";
+import { forkQaSession } from "./session-fork-host.js";
 import { Remote, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 import { SessionId } from "@deepseek-ai/dsh-session/types";
 import { WorkspaceId } from "@deepseek-ai/dsh-workspace";
@@ -68,7 +77,8 @@ import { QaTools } from "./qa-tools/index.js";
 import { docsDefaultVersionOf } from "./config-resolvers/tools.js";
 import { QaProvenanceHost } from "./provenance/host-store.js";
 import { defaultLegacyProvenanceFilePath, defaultQaProvenanceDirectoryPath, FileQaProvenanceSnapshotStore, } from "./provenance/snapshot-store.js";
-import { previewConvertibleDocument } from "./provenance/document-preview.js";
+import { previewConvertibleDocument, previewSourceDocument, } from "./provenance/document-preview.js";
+import { readWorkspaceFileChunk } from "./provenance/file-download.js";
 import { listWorkspaceDirectory, readSourceFilePreview, readWorkspaceFile, QaSourcePreviewError, } from "./provenance/file-preview.js";
 import { existingQaUserWorkspace, prepareQaUserWorkspace, } from "./user-workspace.js";
 export const name = "qa-surface";
@@ -141,6 +151,7 @@ let QaSurface = (() => {
     let _describe_decorators;
     let _queueStatus_decorators;
     let _createSession_decorators;
+    let _forkSession_decorators;
     let _accessCurrent_decorators;
     let _accessSession_decorators;
     let _accessAdminSnapshot_decorators;
@@ -181,6 +192,25 @@ let QaSurface = (() => {
     let _adminMetrics_decorators;
     let _adminAudit_decorators;
     let _secureSession_decorators;
+    let _chatVisible_decorators;
+    let _chatAccess_decorators;
+    let _chatGrants_decorators;
+    let _chatSetGrant_decorators;
+    let _chatAuthors_decorators;
+    let _chatAudit_decorators;
+    let _chatAttachmentPath_decorators;
+    let _chatList_decorators;
+    let _chatSearch_decorators;
+    let _chatSelectModel_decorators;
+    let _chatPage_decorators;
+    let _chatFollow_decorators;
+    let _chatControl_decorators;
+    let _chatProjections_decorators;
+    let _chatPrompt_decorators;
+    let _chatAttachment_decorators;
+    let _chatRename_decorators;
+    let _chatCancel_decorators;
+    let _chatUpdateQueue_decorators;
     let _sources_decorators;
     let _pendingApprovals_decorators;
     let _answerApproval_decorators;
@@ -190,6 +220,9 @@ let QaSurface = (() => {
     let _readSourceFile_decorators;
     let _listWorkspaceFiles_decorators;
     let _readWorkspaceFile_decorators;
+    let _readWorkspaceFileChunk_decorators;
+    let _documentWorkflowStatus_decorators;
+    let _approveDocumentWorkflow_decorators;
     let _previewWorkspaceDocument_decorators;
     let _skillsList_decorators;
     let _skillsGet_decorators;
@@ -220,6 +253,7 @@ let QaSurface = (() => {
             _describe_decorators = [Remote("describe")];
             _queueStatus_decorators = [Remote("queueStatus")];
             _createSession_decorators = [Remote("createSession")];
+            _forkSession_decorators = [Remote("forkSession")];
             _accessCurrent_decorators = [Remote("accessCurrent")];
             _accessSession_decorators = [Remote("accessSession")];
             _accessAdminSnapshot_decorators = [Remote("accessAdminSnapshot")];
@@ -260,6 +294,25 @@ let QaSurface = (() => {
             _adminMetrics_decorators = [Remote("adminMetrics")];
             _adminAudit_decorators = [Remote("adminAudit")];
             _secureSession_decorators = [Remote("secureSession")];
+            _chatVisible_decorators = [Remote("chatVisible")];
+            _chatAccess_decorators = [Remote("chatAccess")];
+            _chatGrants_decorators = [Remote("chatGrants")];
+            _chatSetGrant_decorators = [Remote("chatSetGrant")];
+            _chatAuthors_decorators = [Remote("chatAuthors")];
+            _chatAudit_decorators = [Remote("chatAudit")];
+            _chatAttachmentPath_decorators = [Remote("chatAttachmentPath")];
+            _chatList_decorators = [Remote("chatList")];
+            _chatSearch_decorators = [Remote("chatSearch")];
+            _chatSelectModel_decorators = [Remote("chatSelectModel")];
+            _chatPage_decorators = [Remote("chatPage")];
+            _chatFollow_decorators = [Remote({ mode: "stream" })];
+            _chatControl_decorators = [Remote({ mode: "stream" })];
+            _chatProjections_decorators = [Remote("chatProjections")];
+            _chatPrompt_decorators = [Remote("chatPrompt")];
+            _chatAttachment_decorators = [Remote("chatAttachment")];
+            _chatRename_decorators = [Remote("chatRename")];
+            _chatCancel_decorators = [Remote("chatCancel")];
+            _chatUpdateQueue_decorators = [Remote("chatUpdateQueue")];
             _sources_decorators = [Remote("sources")];
             _pendingApprovals_decorators = [Remote("pendingApprovals")];
             _answerApproval_decorators = [Remote("answerApproval")];
@@ -269,6 +322,9 @@ let QaSurface = (() => {
             _readSourceFile_decorators = [Remote("readSourceFile")];
             _listWorkspaceFiles_decorators = [Remote("listWorkspaceFiles")];
             _readWorkspaceFile_decorators = [Remote("readWorkspaceFile")];
+            _readWorkspaceFileChunk_decorators = [Remote("readWorkspaceFileChunk")];
+            _documentWorkflowStatus_decorators = [Remote("documentWorkflowStatus")];
+            _approveDocumentWorkflow_decorators = [Remote("approveDocumentWorkflow")];
             _previewWorkspaceDocument_decorators = [Remote("previewWorkspaceDocument")];
             _skillsList_decorators = [Remote("skillsList")];
             _skillsGet_decorators = [Remote("skillsGet")];
@@ -296,6 +352,7 @@ let QaSurface = (() => {
             __esDecorate(this, null, _describe_decorators, { kind: "method", name: "describe", static: false, private: false, access: { has: obj => "describe" in obj, get: obj => obj.describe }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _queueStatus_decorators, { kind: "method", name: "queueStatus", static: false, private: false, access: { has: obj => "queueStatus" in obj, get: obj => obj.queueStatus }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _createSession_decorators, { kind: "method", name: "createSession", static: false, private: false, access: { has: obj => "createSession" in obj, get: obj => obj.createSession }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _forkSession_decorators, { kind: "method", name: "forkSession", static: false, private: false, access: { has: obj => "forkSession" in obj, get: obj => obj.forkSession }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _accessCurrent_decorators, { kind: "method", name: "accessCurrent", static: false, private: false, access: { has: obj => "accessCurrent" in obj, get: obj => obj.accessCurrent }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _accessSession_decorators, { kind: "method", name: "accessSession", static: false, private: false, access: { has: obj => "accessSession" in obj, get: obj => obj.accessSession }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _accessAdminSnapshot_decorators, { kind: "method", name: "accessAdminSnapshot", static: false, private: false, access: { has: obj => "accessAdminSnapshot" in obj, get: obj => obj.accessAdminSnapshot }, metadata: _metadata }, null, _instanceExtraInitializers);
@@ -336,6 +393,25 @@ let QaSurface = (() => {
             __esDecorate(this, null, _adminMetrics_decorators, { kind: "method", name: "adminMetrics", static: false, private: false, access: { has: obj => "adminMetrics" in obj, get: obj => obj.adminMetrics }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _adminAudit_decorators, { kind: "method", name: "adminAudit", static: false, private: false, access: { has: obj => "adminAudit" in obj, get: obj => obj.adminAudit }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _secureSession_decorators, { kind: "method", name: "secureSession", static: false, private: false, access: { has: obj => "secureSession" in obj, get: obj => obj.secureSession }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _chatVisible_decorators, { kind: "method", name: "chatVisible", static: false, private: false, access: { has: obj => "chatVisible" in obj, get: obj => obj.chatVisible }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _chatAccess_decorators, { kind: "method", name: "chatAccess", static: false, private: false, access: { has: obj => "chatAccess" in obj, get: obj => obj.chatAccess }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _chatGrants_decorators, { kind: "method", name: "chatGrants", static: false, private: false, access: { has: obj => "chatGrants" in obj, get: obj => obj.chatGrants }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _chatSetGrant_decorators, { kind: "method", name: "chatSetGrant", static: false, private: false, access: { has: obj => "chatSetGrant" in obj, get: obj => obj.chatSetGrant }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _chatAuthors_decorators, { kind: "method", name: "chatAuthors", static: false, private: false, access: { has: obj => "chatAuthors" in obj, get: obj => obj.chatAuthors }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _chatAudit_decorators, { kind: "method", name: "chatAudit", static: false, private: false, access: { has: obj => "chatAudit" in obj, get: obj => obj.chatAudit }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _chatAttachmentPath_decorators, { kind: "method", name: "chatAttachmentPath", static: false, private: false, access: { has: obj => "chatAttachmentPath" in obj, get: obj => obj.chatAttachmentPath }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _chatList_decorators, { kind: "method", name: "chatList", static: false, private: false, access: { has: obj => "chatList" in obj, get: obj => obj.chatList }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _chatSearch_decorators, { kind: "method", name: "chatSearch", static: false, private: false, access: { has: obj => "chatSearch" in obj, get: obj => obj.chatSearch }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _chatSelectModel_decorators, { kind: "method", name: "chatSelectModel", static: false, private: false, access: { has: obj => "chatSelectModel" in obj, get: obj => obj.chatSelectModel }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _chatPage_decorators, { kind: "method", name: "chatPage", static: false, private: false, access: { has: obj => "chatPage" in obj, get: obj => obj.chatPage }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _chatFollow_decorators, { kind: "method", name: "chatFollow", static: false, private: false, access: { has: obj => "chatFollow" in obj, get: obj => obj.chatFollow }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _chatControl_decorators, { kind: "method", name: "chatControl", static: false, private: false, access: { has: obj => "chatControl" in obj, get: obj => obj.chatControl }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _chatProjections_decorators, { kind: "method", name: "chatProjections", static: false, private: false, access: { has: obj => "chatProjections" in obj, get: obj => obj.chatProjections }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _chatPrompt_decorators, { kind: "method", name: "chatPrompt", static: false, private: false, access: { has: obj => "chatPrompt" in obj, get: obj => obj.chatPrompt }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _chatAttachment_decorators, { kind: "method", name: "chatAttachment", static: false, private: false, access: { has: obj => "chatAttachment" in obj, get: obj => obj.chatAttachment }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _chatRename_decorators, { kind: "method", name: "chatRename", static: false, private: false, access: { has: obj => "chatRename" in obj, get: obj => obj.chatRename }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _chatCancel_decorators, { kind: "method", name: "chatCancel", static: false, private: false, access: { has: obj => "chatCancel" in obj, get: obj => obj.chatCancel }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _chatUpdateQueue_decorators, { kind: "method", name: "chatUpdateQueue", static: false, private: false, access: { has: obj => "chatUpdateQueue" in obj, get: obj => obj.chatUpdateQueue }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _sources_decorators, { kind: "method", name: "sources", static: false, private: false, access: { has: obj => "sources" in obj, get: obj => obj.sources }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _pendingApprovals_decorators, { kind: "method", name: "pendingApprovals", static: false, private: false, access: { has: obj => "pendingApprovals" in obj, get: obj => obj.pendingApprovals }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _answerApproval_decorators, { kind: "method", name: "answerApproval", static: false, private: false, access: { has: obj => "answerApproval" in obj, get: obj => obj.answerApproval }, metadata: _metadata }, null, _instanceExtraInitializers);
@@ -345,6 +421,9 @@ let QaSurface = (() => {
             __esDecorate(this, null, _readSourceFile_decorators, { kind: "method", name: "readSourceFile", static: false, private: false, access: { has: obj => "readSourceFile" in obj, get: obj => obj.readSourceFile }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _listWorkspaceFiles_decorators, { kind: "method", name: "listWorkspaceFiles", static: false, private: false, access: { has: obj => "listWorkspaceFiles" in obj, get: obj => obj.listWorkspaceFiles }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _readWorkspaceFile_decorators, { kind: "method", name: "readWorkspaceFile", static: false, private: false, access: { has: obj => "readWorkspaceFile" in obj, get: obj => obj.readWorkspaceFile }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _readWorkspaceFileChunk_decorators, { kind: "method", name: "readWorkspaceFileChunk", static: false, private: false, access: { has: obj => "readWorkspaceFileChunk" in obj, get: obj => obj.readWorkspaceFileChunk }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _documentWorkflowStatus_decorators, { kind: "method", name: "documentWorkflowStatus", static: false, private: false, access: { has: obj => "documentWorkflowStatus" in obj, get: obj => obj.documentWorkflowStatus }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _approveDocumentWorkflow_decorators, { kind: "method", name: "approveDocumentWorkflow", static: false, private: false, access: { has: obj => "approveDocumentWorkflow" in obj, get: obj => obj.approveDocumentWorkflow }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _previewWorkspaceDocument_decorators, { kind: "method", name: "previewWorkspaceDocument", static: false, private: false, access: { has: obj => "previewWorkspaceDocument" in obj, get: obj => obj.previewWorkspaceDocument }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _skillsList_decorators, { kind: "method", name: "skillsList", static: false, private: false, access: { has: obj => "skillsList" in obj, get: obj => obj.skillsList }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _skillsGet_decorators, { kind: "method", name: "skillsGet", static: false, private: false, access: { has: obj => "skillsGet" in obj, get: obj => obj.skillsGet }, metadata: _metadata }, null, _instanceExtraInitializers);
@@ -407,6 +486,19 @@ let QaSurface = (() => {
          * opens the admin console never grows one.
          */
         qualityStore;
+        chatSharingStore;
+        chatTransport;
+        chatTurnGuard;
+        sharing() {
+            const accounts = () => {
+                const store = this.accountRemotes.resolve(this.getConfig());
+                if (store === undefined)
+                    throw new Error("QA accounts are required for chat sharing.");
+                return store;
+            };
+            accounts();
+            return (this.chatSharingStore ??= new QaChatSharingStore(path.join(path.dirname(defaultAccountsFilePath()), "qa-chat-sharing.db"), accounts));
+        }
         constructor(ctx, entry = {}) {
             super(ctx, "qaSurface", { namespace: "qaSurface" });
             // Every Config field is volatile, so the reference the Host hands here is
@@ -453,6 +545,7 @@ let QaSurface = (() => {
                 // Deletion is the console's alone: the sidebar's delete stays a
                 // per-browser row, and only an administrator removes the chat itself.
                 sessionFiles: createSessionEraser(),
+                ...(this.getConfig().accounts.enabled ? { sharing: this.sharing() } : {}),
                 dropSources: (sessionId) => this.provenance.dropSession(sessionId),
                 // The console writes skills through the same service the owner's editor
                 // uses, so an administrator's save is path-checked, validated and
@@ -472,6 +565,23 @@ let QaSurface = (() => {
             });
             this.slashRemotes = createQaSlashRemotes({
                 ctx,
+                draftSkills: async (token, target) => {
+                    this.accountRemotes.resolve(this.getConfig());
+                    const preview = await this.access.slashDraftSkills(token, target.subroleId, target.adminPreview);
+                    return {
+                        skills: preview.skills.map((skill) => ({
+                            name: skill.name,
+                            description: skill.description,
+                            modelInvocable: skill.invocation.modelInvocable,
+                            ...(skill.whenToUse === undefined
+                                ? {}
+                                : { whenToUse: skill.whenToUse }),
+                        })),
+                        grantedSkills: preview.policy === undefined
+                            ? undefined
+                            : userInvocableSkillNames(preview.policy),
+                    };
+                },
                 getConfig: () => this.getConfig(),
                 logger: this.logger,
                 sessionGrant: (token, sessionId, agent) => this.slashSessionGrant(token, sessionId, agent),
@@ -493,13 +603,32 @@ let QaSurface = (() => {
             // Legacy account-free sessions retain the dynamic catalog behavior;
             // role-managed sessions authorize its known entries through the frozen
             // capability policy instead.
-            (agent) => this.tools?.activeToolNames(agent) ?? [], (owner, sessionId, agent) => this.access.policyForSessionOwner(owner, sessionId, agent), () => this.tools?.catalogToolNames() ?? [], (sessionId) => this.access.modelPolicyFor(sessionId));
+            (agent) => this.tools?.activeToolNames(agent) ?? [], (owner, sessionId, agent) => this.access.policyForSessionOwner(owner, sessionId, agent), () => this.tools?.catalogToolNames() ?? [], (sessionId) => this.access.modelPolicyFor(sessionId), 
+            // The integration API's own attestation writes the principal here, because
+            // that is where the caller's account has just been matched against the
+            // ownership record. The browser's `secureSession` remote keeps its own
+            // write: there the compared identity is the token's.
+            this.integrationPrincipals);
             this.provenance = new QaProvenanceHost(ctx, () => this.getConfig(), 
             // Sharded per chat and bounded by the resolved retention policy: the
             // turn path must never rewrite history it did not touch.
             new FileQaProvenanceSnapshotStore(defaultQaProvenanceDirectoryPath(), () => this.getConfig().sources.retention, defaultLegacyProvenanceFilePath()), (error) => this.logger.error("sources.persistence-failed", {
                 message: error instanceof Error ? error.message : String(error),
             }));
+            this.chatTransport = new QaChatTransport(ctx, () => this.sharing(), (token, id) => this.secureSession(token, id), (userId, id) => this.access.participantPolicy(userId, id));
+            this.chatTurnGuard = new QaChatTurnGuard(ctx, () => this.sharing(), (userId, id) => this.access.participantPolicy(userId, id), () => this.getConfig().accounts.enabled);
+            ctx.effect(() => () => {
+                this.chatTurnGuard.dispose();
+                this.chatSharingStore?.storage.close();
+            }, "dsh-qa-surface.chat-sharing");
+            ctx.inject(["typertGateway", "connection"], () => {
+                const dispose = installQaNativeFence(ctx, () => this.getConfig().accounts.enabled);
+                const disposeUploads = installQaChatUploads(ctx, () => this.sharing(), (token, id) => this.secureSession(token, id));
+                return async () => {
+                    dispose();
+                    await disposeUploads();
+                };
+            });
             this.integration = new QaIntegrationService({
                 getConfig: () => this.getConfig(),
                 accounts: () => this.accountRemotes.resolve(this.getConfig()),
@@ -706,6 +835,8 @@ let QaSurface = (() => {
         }
         /** Resolve only a directly QA-owned root session; delegated children fail closed. */
         principalForSession(sessionId) {
+            if (this.chatTurnGuard.collaborative(sessionId))
+                return undefined;
             const accounts = this.accountRemotes.resolve(this.getConfig());
             if (accounts === undefined)
                 return undefined;
@@ -960,6 +1091,20 @@ let QaSurface = (() => {
                 throw new Error(qaAttestationFailureMessage("Unable to create a QA session.", error), { cause: error });
             }
         }
+        /** Create an independently admitted ordinary branch of the caller's own chat. */
+        async forkSession(token, sourceId, answerSeq) {
+            return this.accountRemotes.runAsync(() => forkQaSession({
+                ctx: this.ctx,
+                config: this.getConfig(),
+                accounts: this.accountRemotes.resolve(this.getConfig()),
+                access: this.access,
+                admission: this.admission,
+                principals: this.integrationPrincipals,
+                provenance: this.provenance,
+                sessionFiles: createSessionEraser(),
+                logger: this.logger,
+            }, token, sourceId, answerSeq), sourceId);
+        }
         /** The selector model for the signed-in user; admin grants are irrelevant. */
         accessCurrent(token) {
             return this.accountRemotes.run(() => this.access.current(token));
@@ -1120,7 +1265,13 @@ let QaSurface = (() => {
          * stays what it always was, a per-browser row.
          */
         adminDeleteConversation(token, conversationId) {
-            return this.accountRemotes.runAsync(() => this.admin.deleteConversation(token, conversationId));
+            return this.accountRemotes.runAsync(async () => {
+                const result = await this.admin.deleteConversation(token, conversationId);
+                if (this.getConfig().accounts.enabled)
+                    for (const id of result.sessions)
+                        this.sharing().dropSession(id);
+                return result;
+            });
         }
         adminFeedback(token, query, cursor, limit) {
             return this.accountRemotes.runAsync(() => this.admin.feedback(token, query, cursor ?? undefined, limit ?? undefined));
@@ -1158,16 +1309,46 @@ let QaSurface = (() => {
         /** Pin and attest the effective policy. The browser supplies identity only. */
         async secureSession(token, sessionId) {
             try {
+                const accountsForSharing = this.accountRemotes.resolve(this.getConfig());
+                const actor = accountsForSharing?.currentUser(token);
+                const actualOwnerId = accountsForSharing?.ownerIdOf(sessionId);
+                if (actualOwnerId !== undefined && actor?.id !== actualOwnerId) {
+                    let shared;
+                    try {
+                        shared = this.sharing().access(token, sessionId);
+                    }
+                    catch (error) {
+                        if (actor?.role !== "admin" ||
+                            !this.getConfig().accounts.showOtherUsersChats)
+                            throw error;
+                    }
+                    if (shared !== undefined) {
+                        const proof = await this.admission.secureSessionForUser(shared.ownerId, sessionId);
+                        this.sharing().revalidate(token, shared);
+                        return { ...proof, chatAccess: shared };
+                    }
+                }
                 const principal = this.principalForToken(token);
                 const proof = await this.admission.secureSession(token, sessionId);
                 const accounts = this.accountRemotes.resolve(this.getConfig());
                 const ownerId = accounts?.ownerIdOf(sessionId);
                 // Admin cross-user viewing is intentionally not credential delegation.
-                this.integrationPrincipals.attest(sessionId, principal?.userId, ownerId);
-                return proof;
+                if (principal?.userId === ownerId)
+                    this.integrationPrincipals.attest(sessionId, principal?.userId, ownerId);
+                const session = this.ctx.sessions.get(SessionId(sessionId));
+                const chatAccess = actualOwnerId === actor?.id && actor !== undefined
+                    ? this.sharing().access(token, sessionId)
+                    : undefined;
+                return {
+                    ...proof,
+                    ...(chatAccess === undefined ? {} : { chatAccess }),
+                    ...(session?.header.isSeeded === true &&
+                        session.header.origin !== "subagent"
+                        ? { inheritedThroughSeq: Number(session.inheritedEventCount) - 1 }
+                        : {}),
+                };
             }
             catch (error) {
-                this.integrationPrincipals.attest(sessionId, undefined, undefined);
                 // The carrier empties error.details, so the coarse reason rides the
                 // wire message for the browser console; the specific mismatch facts
                 // stay in this log only.
@@ -1184,9 +1365,110 @@ let QaSurface = (() => {
                 });
             }
         }
+        chatVisible(token) {
+            return this.sharing().visible(token);
+        }
+        chatAccess(token, sessionId) {
+            return this.sharing().access(token, sessionId);
+        }
+        chatGrants(token, sessionId) {
+            return this.sharing().grants(token, sessionId);
+        }
+        chatSetGrant(token, sessionId, email, mode) {
+            if (this.access.isDelegatedChild(sessionId) ||
+                this.getConfig().session.policy === "fixed")
+                throw new Error("Only an ordinary account-owned chat may be shared.");
+            const value = this.sharing().set(token, sessionId, email, mode);
+            this.chatTurnGuard.revoke(sessionId);
+            return value;
+        }
+        chatAuthors(token, sessionId) {
+            return this.sharing().authors(token, sessionId);
+        }
+        async chatAudit(token, sessionId, full) {
+            this.requireChatOwner(token, sessionId);
+            await this.secureSession(token, sessionId);
+            this.requireChatOwner(token, sessionId);
+            const audit = this.ctx.get("sessionAudit");
+            if (audit === undefined)
+                throw new Error("Session audit is unavailable.");
+            const value = full
+                ? await audit.audit(sessionId)
+                : audit.summary(sessionId);
+            this.requireChatOwner(token, sessionId);
+            return value;
+        }
+        async chatAttachmentPath(token, sessionId, attachmentId) {
+            const finish = await this.admitChatRead(token, sessionId);
+            const value = qaChatAttachmentPath(this.ctx, sessionId, attachmentId);
+            finish();
+            return value;
+        }
+        async chatList(token, signal) {
+            return (await this.chatTransport.list(token, signal));
+        }
+        async chatSearch(token, request, signal) {
+            return (await this.chatTransport.search(token, request, signal));
+        }
+        chatSelectModel(token, request) {
+            this.requireChatOwner(token, String(request.sessionId));
+            if (this.getConfig().lockdown.enforceFixedModel)
+                throw new Error("The chat model is fixed by its policy.");
+            return this.chatTransport.selectModel(token, request);
+        }
+        async chatPage(token, request, signal) {
+            return (await this.chatTransport.page(token, request, signal));
+        }
+        async *chatFollow(token, request, signal) {
+            for await (const frame of this.chatTransport.follow(token, request, signal))
+                yield frame;
+        }
+        async *chatControl(token, signal) {
+            for await (const frame of this.chatTransport.control(token, signal))
+                yield frame;
+        }
+        async chatProjections(token, sessionId, signal) {
+            return (await this.chatTransport.projections(token, sessionId, signal));
+        }
+        chatPrompt(token, request, signal) {
+            return this.chatTransport.prompt(token, request, signal);
+        }
+        chatAttachment(token, request) {
+            return this.chatTransport.attachment(token, request);
+        }
+        chatRename(token, request) {
+            return this.chatTransport.rename(token, request);
+        }
+        chatCancel(token, sessionId) {
+            return this.chatTransport.cancel(token, sessionId);
+        }
+        chatUpdateQueue(token, request) {
+            return this.chatTransport.updateQueue(token, request);
+        }
+        async admitChatRead(token, sessionId, filePath) {
+            if (!this.getConfig().accounts.enabled) {
+                await this.admission.secureSession(token, sessionId);
+                return () => undefined;
+            }
+            const access = this.sharing().access(token, sessionId);
+            await this.secureSession(token, sessionId);
+            this.sharing().revalidate(token, access);
+            if (filePath !== undefined &&
+                access.mode !== "owner" &&
+                !qaChatPublishedFile(this.ctx, sessionId, filePath, (id, path) => this.provenance.sourceAllowed(id, path)))
+                throw new Error("This file has not been shared in the chat.");
+            return () => {
+                this.sharing().revalidate(token, access);
+            };
+        }
+        requireChatOwner(token, sessionId) {
+            if (this.getConfig().accounts.enabled)
+                this.sharing().owner(token, sessionId);
+        }
         /** Return canonical Host snapshots from plugin-owned durable provenance. */
         async sources(token, sessionId) {
-            await this.admission.secureSession(token, sessionId);
+            const finish = await this.admitChatRead(token, sessionId);
+            finish();
             return this.provenance.bundles(sessionId);
         }
         /**
@@ -1194,7 +1476,10 @@ let QaSurface = (() => {
          * deployment with blocked approvals answers with an empty list.
          */
         async pendingApprovals(token, sessionId) {
-            await this.admission.secureSession(token, sessionId);
+            await this.secureSession(token, sessionId);
+            if (this.getConfig().accounts.enabled &&
+                this.sharing().access(token, sessionId).mode !== "owner")
+                return [];
             return this.approvals.list(sessionId);
         }
         /**
@@ -1203,7 +1488,9 @@ let QaSurface = (() => {
          * the agent went away) is refused with `false`.
          */
         async answerApproval(token, sessionId, requestId, decision) {
+            this.requireChatOwner(token, sessionId);
             await this.admission.secureSession(token, sessionId);
+            this.requireChatOwner(token, sessionId);
             return this.approvals.answer(sessionId, requestId, decision);
         }
         /**
@@ -1211,7 +1498,10 @@ let QaSurface = (() => {
          * deployment with unsupported questions answers with an empty list.
          */
         async pendingQuestions(token, sessionId) {
-            await this.admission.secureSession(token, sessionId);
+            await this.secureSession(token, sessionId);
+            if (this.getConfig().accounts.enabled &&
+                this.sharing().access(token, sessionId).mode !== "owner")
+                return [];
             return this.userQuestions.list(sessionId);
         }
         /**
@@ -1220,12 +1510,16 @@ let QaSurface = (() => {
          * a skip.
          */
         async answerQuestion(token, sessionId, requestId, answers) {
+            this.requireChatOwner(token, sessionId);
             await this.admission.secureSession(token, sessionId);
+            this.requireChatOwner(token, sessionId);
             return this.userQuestions.answer(sessionId, requestId, answers);
         }
         /** Close a parked question request without answering it. */
         async cancelQuestion(token, sessionId, requestId) {
+            this.requireChatOwner(token, sessionId);
             await this.admission.secureSession(token, sessionId);
+            this.requireChatOwner(token, sessionId);
             return this.userQuestions.cancel(sessionId, requestId);
         }
         /**
@@ -1238,7 +1532,7 @@ let QaSurface = (() => {
          * the per-account scratch directory — could never be opened in the panel.
          */
         async readSourceFile(token, sessionId, sourcePath) {
-            await this.admission.secureSession(token, sessionId);
+            const finish = await this.admitChatRead(token, sessionId, sourcePath);
             const config = this.getConfig();
             if (!config.sources.filePreview.enabled) {
                 throw sourcePreviewRefusal("unavailable");
@@ -1249,7 +1543,7 @@ let QaSurface = (() => {
                 throw sourcePreviewRefusal("unavailable");
             const attachmentRoot = this.admission.attachmentRoot();
             try {
-                return await readSourceFilePreview({
+                const value = await readSourceFilePreview({
                     sourcePath,
                     cwd,
                     isEvidence: (canonicalPath) => this.provenance.sourceAllowed(sessionId, canonicalPath),
@@ -1257,7 +1551,32 @@ let QaSurface = (() => {
                     ...(attachmentRoot === undefined ? {} : { attachmentRoot }),
                     maxBytes: config.sources.filePreview.maxBytes,
                     maxMarkdownRenderBytes: config.sources.filePreview.maxMarkdownRenderBytes,
+                }).catch(async (error) => {
+                    // Only a format refusal follows successful evidence and root checks.
+                    if (!(error instanceof QaSourcePreviewError) ||
+                        error.reason !== "unsupported")
+                        throw error;
+                    const document = await previewSourceDocument({
+                        filePath: sourcePath,
+                        cwd,
+                        sessionId,
+                        sharedReadOnlyRoots: config.lockdown.sharedReadOnlyRoots,
+                        ...(attachmentRoot === undefined ? {} : { attachmentRoot }),
+                        documents: () => this.ctx.get("documents"),
+                        maxBytes: config.sources.filePreview.maxBytes,
+                    });
+                    return {
+                        path: sourcePath,
+                        content: "",
+                        size: document.bytes,
+                        truncated: false,
+                        markdown: false,
+                        renderableMarkdown: false,
+                        document,
+                    };
                 });
+                finish();
+                return value;
             }
             catch (error) {
                 this.logger.debug("source.preview-refused", {
@@ -1276,6 +1595,7 @@ let QaSurface = (() => {
          * `readWorkspaceFile` opens one entry of such a listing.
          */
         async listWorkspaceFiles(token, sessionId, path) {
+            this.requireChatOwner(token, sessionId);
             await this.admission.secureSession(token, sessionId);
             const { config, cwd } = await this.browseContext(sessionId);
             try {
@@ -1298,11 +1618,11 @@ let QaSurface = (() => {
          * reopening a cited source.
          */
         async readWorkspaceFile(token, sessionId, path) {
-            await this.admission.secureSession(token, sessionId);
+            const finish = await this.admitChatRead(token, sessionId, path);
             const { config, cwd } = await this.browseContext(sessionId);
             const attachmentRoot = this.admission.attachmentRoot();
             try {
-                return await readWorkspaceFile({
+                const value = await readWorkspaceFile({
                     filePath: path ?? "",
                     cwd,
                     sharedReadOnlyRoots: config.lockdown.sharedReadOnlyRoots,
@@ -1310,11 +1630,77 @@ let QaSurface = (() => {
                     maxBytes: config.sources.filePreview.maxBytes,
                     maxMarkdownRenderBytes: config.sources.filePreview.maxMarkdownRenderBytes,
                 });
+                finish();
+                return value;
             }
             catch (error) {
                 throw this.browseRefusal("workspace.read-refused", sessionId, error);
             }
         }
+        /** Download one bounded chunk after revalidating this chat's ownership. */
+        async readWorkspaceFileChunk(token, sessionId, path, offset, version) {
+            const finish = await this.admitChatRead(token, sessionId, path);
+            const { config, cwd } = await this.browseContext(sessionId);
+            const attachmentRoot = this.admission.attachmentRoot();
+            try {
+                const value = await readWorkspaceFileChunk({
+                    filePath: path ?? "",
+                    cwd,
+                    sharedReadOnlyRoots: config.lockdown.sharedReadOnlyRoots,
+                    ...(attachmentRoot === undefined ? {} : { attachmentRoot }),
+                    offset,
+                    version,
+                });
+                finish();
+                return value;
+            }
+            catch (error) {
+                throw this.browseRefusal("workspace.download-refused", sessionId, error);
+            }
+        }
+        async documentWorkflowStatus(token, sessionId, workflowId) {
+            const finish = await this.admitChatRead(token, sessionId);
+            const { cwd } = await this.browseContext(sessionId);
+            const workflow = this.ctx.get("documents")
+                ?.workflow;
+            if (workflow === undefined)
+                throw new Error("Document workflow is unavailable.");
+            const view = await workflow.read({ workspaceRoot: cwd, sessionId }, workflowId);
+            finish();
+            return {
+                id: view.id,
+                revision: view.revision,
+                status: view.status,
+                sha256: view.draft?.sha256 ?? null,
+                blockers: view.blockers,
+            };
+        }
+        /** Browser-authenticated human consent; intentionally absent from the agent's tool registry. */
+        async approveDocumentWorkflow(token, sessionId, workflowId, revision, sha256) {
+            this.requireChatOwner(token, sessionId);
+            await this.admission.secureSession(token, sessionId);
+            this.requireChatOwner(token, sessionId);
+            const caller = this.principalForToken(token);
+            const ownerId = this.accountRemotes.resolve(this.getConfig())?.ownerIdOf(sessionId) ??
+                (this.getConfig().accounts.enabled
+                    ? undefined
+                    : this.principalForSession(sessionId)?.userId);
+            if (caller === undefined || ownerId !== caller.userId)
+                throw new Error("Document approval requires the chat owner's account.");
+            const { cwd } = await this.browseContext(sessionId);
+            const workflow = this.ctx.get("documents")
+                ?.workflow;
+            if (workflow === undefined)
+                throw new Error("Document workflow is unavailable.");
+            const view = await workflow.approve({ workspaceRoot: cwd, sessionId }, workflowId, revision, sha256, caller.userId);
+            return {
+                id: view.id,
+                revision: view.revision,
+                status: view.status,
+                sha256: view.draft?.sha256 ?? null,
+                blockers: view.blockers,
+            };
+        }
         /**
          * Render one Word document of the chat's workspace as a PDF for the panel.
          *
@@ -1326,11 +1712,11 @@ let QaSurface = (() => {
          * reaches an unfenced byte route.
          */
         async previewWorkspaceDocument(token, sessionId, path) {
-            await this.admission.secureSession(token, sessionId);
+            const finish = await this.admitChatRead(token, sessionId, path);
             const { config, cwd } = await this.browseContext(sessionId);
             const attachmentRoot = this.admission.attachmentRoot();
             try {
-                return await previewConvertibleDocument({
+                const value = await previewConvertibleDocument({
                     filePath: path ?? "",
                     cwd,
                     sharedReadOnlyRoots: config.lockdown.sharedReadOnlyRoots,
@@ -1339,6 +1725,8 @@ let QaSurface = (() => {
                     sessionId,
                     maxBytes: config.sources.filePreview.maxBytes,
                 });
+                finish();
+                return value;
             }
             catch (error) {
                 throw this.browseRefusal("workspace.preview-refused", sessionId, error);