@yadsh/dsh-qa-surface 0.15.6 → 0.16.0

package/lib/types/access/capability-catalog.d.ts

@@ -1,6 +1,6 @@
 import type { Agent } from "@deepseek-ai/dsh-agent";
 import type { Context } from "@deepseek-ai/cordis";
-import type { ScopeKey } from "@deepseek-ai/dsh-scope";
+import { type ScopeKey } from "@deepseek-ai/dsh-scope";
 import type { SkillSummary } from "@deepseek-ai/dsh-skill";
 import type { QaCapabilityDescriptor, QaSkillDescriptor } from "../types.js";
 export interface CapabilityCatalogSnapshot {

package/lib/types/access/service.d.ts

@@ -126,6 +126,11 @@ export declare class QaAccessService {
     reclaimDelegatedSessions(): Promise<void>;
     /** Throttled, off the critical path, and never awaited by a request. */
     private maybeSweepDelegatedSessions;
+    /** Read-only preview for the role a draft will materialize; reserves nothing. */
+    slashDraftSkills(token: string, requestedSubrole: string | null, adminPreview: boolean): Promise<{
+        skills: import("@deepseek-ai/dsh-skill").SkillSummary[];
+        policy: QaEffectiveCapabilityPolicy | undefined;
+    }>;
     current(token: string): QaCurrentAccess;
     session(token: string, sessionId: string): QaSessionAccess;
     reserveSession(token: string, sessionId: string, requestedSubrole: string | null, adminPreview: boolean): QaAccountUserPublic;
@@ -185,6 +190,8 @@ export declare class QaAccessService {
      *   foreign browser never reaches it.
      */
     policyForColdSession(token: string, sessionId: string): Promise<QaEffectiveCapabilityPolicy>;
+    /** A participant's own live ceiling, without claiming or changing the chat. */
+    participantPolicy(userId: string, sessionId: string): Promise<QaEffectiveCapabilityPolicy>;
     /** The browser's entry point: the token resolves the owning account. */
     policyForSession(token: string, sessionId: string, agent: Agent): Promise<QaResolvedSessionPolicy | undefined>;
     /** Activation history of one session, for review and quality analysis. */

package/lib/types/access.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=access.js.map

package/lib/types/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../../src/types/access.ts"],"names":[],"mappings":""}

package/lib/types/accounts/store.d.ts

@@ -448,7 +448,7 @@ export declare class QaAccounts {
      * API, which resolves its own service token — need the public shape the
      * token-shaped entries return, without a browser token to hand.
      */
-    accountById(userId: string): QaAccountUserPublic | undefined;
+    accountById(userId: string, includeDisabled?: boolean): QaAccountUserPublic | undefined;
     findUser(email: string): QaAccountUserPublic | undefined;
     /**
      * Operator write: replace one account's profile, addressed by email. The

package/lib/types/accounts.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=accounts.js.map

package/lib/types/accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts.js","sourceRoot":"","sources":["../../src/types/accounts.ts"],"names":[],"mappings":""}

package/lib/types/admin/session-log.d.ts

@@ -26,6 +26,8 @@ export interface QaStoredSessionHeader {
     readonly cwd?: string;
     /** Set on a subagent's session; such sessions are not conversations. */
     readonly parentSessionId?: string;
+    /** Ordinary seeded branch; never a delegated run. */
+    readonly isFork?: boolean;
     readonly agentPreset?: string;
 }
 export type QaSessionReadResult = {

package/lib/types/admin.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=admin.js.map

package/lib/types/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/types/admin.ts"],"names":[],"mappings":""}

package/lib/types/agent-scope.d.ts

@@ -0,0 +1,4 @@
+import { type ScopeKey } from "@deepseek-ai/dsh-scope";
+/** Resolve the context's native scope, with Agent identity as a legacy fallback. */
+export declare function qaAgentScope(agent: unknown): ScopeKey | undefined;
+//# sourceMappingURL=agent-scope.d.ts.map

package/lib/types/capability.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=capability.js.map

package/lib/types/capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.js","sourceRoot":"","sources":["../../src/types/capability.ts"],"names":[],"mappings":""}

package/lib/types/chat-sharing/native-fence.d.ts

@@ -0,0 +1,11 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { IncomingMessage, ServerResponse } from "node:http";
+declare module "@deepseek-ai/cordis" {
+    interface Events {
+        "connection/request"(request: IncomingMessage, response: ServerResponse, next: () => Promise<void>): Promise<void>;
+    }
+}
+export declare function qaNativeEndpointDenied(endpoint: string): boolean;
+/** Native operator APIs carry no QA identity. Accounts use the QA transport. */
+export declare function installQaNativeFence(ctx: Context, enabled: () => boolean): () => void;
+//# sourceMappingURL=native-fence.d.ts.map

package/lib/types/chat-sharing/resources.d.ts

@@ -0,0 +1,5 @@
+import type { Context } from "@deepseek-ai/cordis";
+/** Paths reach recipients only through the chat's sources or reported outputs. */
+export declare function qaChatPublishedFile(ctx: Context, id: string, requested: string, sourceAllowed: (id: string, path: string) => boolean): boolean;
+export declare function qaChatAttachmentPath(ctx: Context, id: string, attachmentId: string): string;
+//# sourceMappingURL=resources.d.ts.map

package/lib/types/chat-sharing/store.d.ts

@@ -0,0 +1,28 @@
+import { SqliteDatabase } from "@yadsh/dsh-plugin-kit/sqlite";
+import type { QaAccounts } from "../accounts/store.js";
+import type { QaChatAccess, QaChatGrant, QaChatMode, QaChatAuthor } from "./types.js";
+/** Separate schema: installing sharing does not upgrade the accounts CLI's DB. */
+export declare class QaChatSharingStore {
+    private readonly accounts;
+    readonly storage: SqliteDatabase;
+    constructor(filePath: string, accounts: () => QaAccounts);
+    access(token: string, sessionId: string): QaChatAccess;
+    owner(token: string, sessionId: string): QaChatAccess;
+    write(token: string, sessionId: string): QaChatAccess;
+    /** Exact address lookup after ownership, never an account directory. */
+    set(token: string, sessionId: string, email: string, mode: QaChatMode | null): readonly QaChatGrant[];
+    grants(token: string, sessionId: string): readonly QaChatGrant[];
+    visible(token: string): readonly QaChatAccess[];
+    revalidate(token: string, previous: QaChatAccess): QaChatAccess;
+    recordAuthor(token: string, access: QaChatAccess, requestId: string): void;
+    authors(token: string, sessionId: string): readonly QaChatAuthor[];
+    requestActor(sessionId: string, requestId: string): {
+        userId: string;
+        revision: number | null;
+    } | undefined;
+    /** Copy only immutable attribution for the native prefix, never memberships. */
+    forkAuthors(sourceId: string, targetId: string, requests: readonly string[]): void;
+    dropSession(id: string): void;
+    actorStillAllowed(sessionId: string, userId: string, revision: number): boolean;
+}
+//# sourceMappingURL=store.d.ts.map

package/lib/types/chat-sharing/transport.d.ts

@@ -0,0 +1,31 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { SessionControlFrame, SessionFollowFrame, SessionFollowRequest, SessionPageRequest, SessionPage, SessionListValue, SessionProjectionsValue, SessionPromptRequest, SessionPromptValue, SessionAttachmentRequest, SessionAttachmentValue, SessionRenameRequest, SessionRenameValue, SessionCancelValue, SessionUpdateQueueRequest, SessionUpdateQueueValue, SessionSearchRequest, SessionSearchValue, SessionSelectModelRequest, SessionSelectModelValue } from "@deepseek-ai/dsh-api-session-controller/types";
+import type { QaChatSharingStore } from "./store.js";
+/** Durable access is checked before and after asynchronous reads and per frame. */
+export declare class QaChatTransport {
+    private readonly ctx;
+    private readonly store;
+    private readonly admit;
+    private readonly participantPolicy?;
+    private readonly locks;
+    constructor(ctx: Context, store: () => QaChatSharingStore, admit: (token: string, id: string) => Promise<unknown>, participantPolicy?: ((userId: string, id: string) => Promise<unknown>) | undefined);
+    list(token: string, signal: AbortSignal): Promise<SessionListValue>;
+    page(token: string, request: SessionPageRequest, signal: AbortSignal): Promise<SessionPage>;
+    search(token: string, request: SessionSearchRequest, signal: AbortSignal): Promise<SessionSearchValue>;
+    projections(token: string, id: string, signal: AbortSignal): Promise<SessionProjectionsValue>;
+    follow(token: string, request: SessionFollowRequest, signal: AbortSignal): AsyncIterable<SessionFollowFrame>;
+    control(token: string, signal: AbortSignal): AsyncIterable<SessionControlFrame>;
+    /** Queue admission is serialized, rechecked after resume, and signed before insertion. */
+    prompt(token: string, request: SessionPromptRequest, signal: AbortSignal): Promise<SessionPromptValue>;
+    attachment(token: string, request: SessionAttachmentRequest): Promise<SessionAttachmentValue>;
+    rename(token: string, request: SessionRenameRequest): Promise<SessionRenameValue>;
+    selectModel(token: string, request: SessionSelectModelRequest): Promise<SessionSelectModelValue>;
+    cancel(token: string, id: string): Promise<SessionCancelValue>;
+    updateQueue(token: string, request: SessionUpdateQueueRequest): Promise<SessionUpdateQueueValue>;
+    private ownerOperation;
+    private serial;
+    private sessionAccess;
+    private addressAccess;
+    private signRecord;
+}
+//# sourceMappingURL=transport.d.ts.map

package/lib/types/chat-sharing/turn-guard.d.ts

@@ -0,0 +1,21 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { QaChatSharingStore } from "./store.js";
+import type { QaEffectiveCapabilityPolicy } from "../types.js";
+/** A mixed batch receives the intersection, never the union, of actor rights. */
+export declare class QaChatTurnGuard {
+    private readonly ctx;
+    private readonly store;
+    private readonly policy;
+    private readonly enabled;
+    private readonly resourceSafe;
+    private readonly actors;
+    private readonly disposers;
+    constructor(ctx: Context, store: () => QaChatSharingStore, policy: (userId: string, sessionId: string) => Promise<QaEffectiveCapabilityPolicy>, enabled?: () => boolean, resourceSafe?: (tool: string) => boolean);
+    private root;
+    private participants;
+    collaborative(sessionId: string): boolean;
+    /** Called after permission mutation. Only a turn carrying stale input stops. */
+    revoke(sessionId: string): void;
+    dispose(): void;
+}
+//# sourceMappingURL=turn-guard.d.ts.map

package/lib/types/chat-sharing/types.d.ts

@@ -0,0 +1,25 @@
+export type QaChatMode = "read" | "collaborate";
+export interface QaChatAccess {
+    readonly sessionId: string;
+    readonly ownerId: string;
+    readonly ownerName: string;
+    readonly actorId: string;
+    readonly mode: QaChatMode | "owner";
+    readonly revision: number;
+}
+export interface QaChatGrant {
+    readonly userId: string;
+    readonly email: string;
+    readonly displayName: string;
+    readonly mode: QaChatMode;
+}
+export interface QaChatAuthor {
+    readonly requestId: string;
+    readonly userId: string;
+    readonly displayName: string;
+}
+/** JSON-shaped native frames; the local recursive codec owns the wire schema. */
+export type QaChatJson = null | string | number | boolean | readonly QaChatJson[] | {
+    readonly [key: string]: QaChatJson;
+};
+//# sourceMappingURL=types.d.ts.map

package/lib/types/chat-sharing/uploads.d.ts

@@ -0,0 +1,5 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { QaChatSharingStore } from "./store.js";
+/** Authenticate before transferring the body, and fence every uploaded chunk. */
+export declare function installQaChatUploads(ctx: Context, store: () => QaChatSharingStore, admit: (token: string, id: string) => Promise<unknown>): () => Promise<void>;
+//# sourceMappingURL=uploads.d.ts.map

package/lib/types/client/QaAccountsController.d.ts

@@ -37,6 +37,7 @@ export type QaAccountsSnapshot = {
     readonly ownership: readonly QaOwnershipEntry[];
     /** Bumped whenever ownedIds, ownIds or ownership changes; re-projects lists. */
     readonly ownedRevision: number;
+    readonly sharedChats?: readonly import("../chat-sharing/types.js").QaChatAccess[];
 };
 /** The Host's password floor, mirrored so a refusal and its copy name the same number. */
 export declare const QA_MIN_PASSWORD_LENGTH = 8;
@@ -188,6 +189,8 @@ export declare class QaAccountsController {
     /** The admin cross-user ownership view; failures degrade to an empty map. */
     private fetchOwnership;
     /** Session id → owner display name; empty unless an admin is signed in. */
+    private fetchSharedChats;
+    /** Session id → owner display name; empty unless an admin is signed in. */
     ownerNames(): ReadonlyMap<string, string>;
     /**
      * The chat owner's display name for author labels: admins see it on

package/lib/types/client/QaConfigController.d.ts

@@ -13,7 +13,8 @@ export type QaConfigFallback = () => Promise<ResolvedQaSurfaceConfig>;
  * The DSH gateway pins settings RPCs to loopback, so a browser served over the
  * LAN always sees the namespace as `unavailable`. When the caller supplies the
  * `qaSurface/describe` Remote as a fallback, that channel answers instead: the
- * projection waits in `loading` until it settles, then reports the Host-owned
+ * projection asks this channel even while a fenced settings request remains
+ * in `loading`, then reports the Host-owned
  * configuration as `ready`. A rejected fallback returns the projection to
  * `unavailable`, exactly as when no fallback exists.
  */
@@ -43,7 +44,7 @@ export declare class QaConfigController {
     refreshFallback(): void;
     /**
      * The fallback trigger rides every refresh: the scope flips to
-     * `unavailable` whenever the browser is served over the LAN, which a
+     * `unavailable` or stuck in `loading` when the gateway fences settings, which a
      * constructor-time check can miss. The state guard makes repeats a no-op,
      * so one fetch runs per controller lifetime; the recursive refresh lets the
      * pending state surface before the first notification pass.

package/lib/types/client/QaSessionController.d.ts

@@ -1,6 +1,7 @@
 import type { ConnectionGenerationState } from "@deepseek-ai/dsh-client-connection/client";
+import type { QaSharingApi } from "./chat-sharing-api.js";
 import type { QaAttachmentDraft, QaQueueOperation, QaSessionState, ResolvedQaSurfaceConfig } from "../types.js";
-import type { QaApprovalApi, QaConversation, QaCreateSession, QaFileUpload, QaQueueStatusRemote, QaSecureSession, QaSessions, QaSessionsApi, QaQuestionApi, QaSlashApi, QaSourceApi, StorageLike } from "./types.js";
+import type { QaApprovalApi, QaConversation, QaCreateSession, QaForkSession, QaFileUpload, QaQueueStatusRemote, QaSecureSession, QaSessions, QaSessionsApi, QaQuestionApi, QaSlashApi, QaSourceApi, StorageLike } from "./types.js";
 import type { QaApprovalDecision, QaQuestionAnswerItem } from "../types.js";
 declare module "@deepseek-ai/dsh-api-session-controller/client" {
     interface SessionReferenceSourceMap {
@@ -24,9 +25,11 @@ export interface QaAccountsFacade {
     readonly onAuthRequired: () => void;
 }
 export interface QaSessionControllerOptions {
+    readonly sharingApi?: QaSharingApi;
     readonly sessions: QaSessions;
     readonly api: QaSessionsApi;
     readonly createSession: QaCreateSession;
+    readonly forkSession?: QaForkSession;
     /** Conversation assembly feeding the transcript projection. */
     readonly conversation: QaConversation;
     readonly connection: ConnectionGenerationState;
@@ -87,6 +90,9 @@ export declare class QaSessionController {
     private readonly listeners;
     private readonly sessions;
     private readonly createSessionRemote;
+    private readonly forkSessionRemote?;
+    private forking;
+    private inheritedThroughSeq;
     private readonly conversation;
     private readonly connection;
     private readonly config;
@@ -139,6 +145,9 @@ export declare class QaSessionController {
     private viewingSubagent;
     private connectedOnce;
     private disposed;
+    private chatAccess;
+    private readonly sharingApi;
+    private accessPoll;
     private generation;
     /**
      * The session the current chat identity names, or null while the chat it
@@ -192,6 +201,7 @@ export declare class QaSessionController {
     private slashError;
     private slashLoadedAt;
     private slashLoading;
+    private slashReadRevision;
     /** Last published view; its identity is the render signal. */
     private slashViewCache;
     /** Bumped to re-open a palette the user dismissed; see `QaSlashView`. */
@@ -221,7 +231,7 @@ export declare class QaSessionController {
      * call this surface makes — while a human command goes to the Host's command
      * runtime and never becomes a model message.
      */
-    send(text: string, attachments?: readonly QaAttachmentDraft[], pick?: string | null): Promise<boolean>;
+    send(text: string, attachments?: readonly QaAttachmentDraft[], pick?: string | null, fastReview?: boolean): Promise<boolean>;
     /**
      * What the stand answers about its load, or null when it does not answer.
      *
@@ -253,6 +263,7 @@ export declare class QaSessionController {
      * skill registry has no browser-facing change event, so a skill installed
      * while the page is open is only discovered by asking again.
      */
+    private slashReadTarget;
     refreshSlashCatalog(force?: boolean): Promise<void>;
     /**
      * Install one catalog answer. `null` means the deployment runs with the
@@ -281,7 +292,7 @@ export declare class QaSessionController {
      * hides the marker message, and the consecutive turns read as variants of
      * the original question (switched in the surface).
      */
-    regenerate(): Promise<boolean>;
+    regenerate(fastReview?: boolean): Promise<boolean>;
     stop(): Promise<void>;
     /**
      * Edit, send now, or drop one message that still waits for its turn. Every
@@ -327,6 +338,8 @@ export declare class QaSessionController {
      * deployment's only chance to learn the reason.
      */
     private materializeDraft;
+    /** Branch a completed answer without submitting or cancelling a turn. */
+    forkFromAnswer(answerSeq: number): Promise<void>;
     /**
      * Open one of this browser's indexed chats. The id must be present in the
      * host session list and pass policy attestation; an unknown id is forgotten
@@ -557,6 +570,7 @@ export declare class QaSessionController {
      */
     private attestPolicy;
     private emit;
+    private refreshChatAccess;
     /**
      * Answer a request the Host parked for this chat. The Host re-checks the
      * request against the chat, so an answer that lost its race is a no-op; the

package/lib/types/client/QaSurface.d.ts

@@ -3,19 +3,24 @@ import type { InjectFace, PropsRenderSlots, PropsRuntime } from "@deepseek-ai/ds
 import type { QaConfigController } from "./QaConfigController.js";
 import type { QaRouteController } from "./QaRouteController.js";
 import type { QaAccountsController } from "./QaAccountsController.js";
-import type { QaApprovalApi, QaAccessApi, QaAdminApi, QaConversation, QaCreateSession, QaFileUpload, QaQueueStatusRemote, QaSecureSession, QaSessions, QaSessionsApi, QaQuestionApi, QaSkillApi, QaSlashApi, QaSourceApi } from "./types.js";
+import type { QaApprovalApi, QaAccessApi, QaAdminApi, QaConversation, QaCreateSession, QaForkSession, QaFileUpload, QaQueueStatusRemote, QaSecureSession, QaSessions, QaSessionsApi, QaQuestionApi, QaSkillApi, QaSlashApi, QaSourceApi } from "./types.js";
 import type { QaSurfacePanelRegistry } from "./panels/registry.js";
 import type { QaUserSettingsSections } from "./settings-extensions/index.js";
 import type { QaAuditController } from "./audit/controller.js";
+import type { QaSharingApi } from "./chat-sharing-api.js";
 export interface QaSurfaceFace {
+    readonly sharingApi?: QaSharingApi;
     readonly route: QaRouteController;
     readonly config: QaConfigController;
     readonly sessions: QaSessions;
     readonly conversation: QaConversation;
+    /** Select the authenticated transport after asynchronous Host config loads. */
+    readonly resolveRuntime?: (accountsEnabled: boolean) => Pick<QaSurfaceFace, "sessions" | "conversation">;
     readonly api: QaSessionsApi;
     readonly connection: ConnectionGenerationState;
     readonly secureSession: QaSecureSession;
     readonly createSession: QaCreateSession;
+    readonly forkSession?: QaForkSession;
     readonly accessApi: QaAccessApi;
     /**
      * The administrative console's surface. Optional so an older Host that does

package/lib/types/client/account-conversation.d.ts

@@ -0,0 +1,6 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { UiConversation } from "@deepseek-ai/dsh-client-ui-conversation/client";
+import type { QaSessions } from "./types.js";
+/** Native assembly must use the same Session scope as the secured transport. */
+export declare function createQaAccountConversation(ctx: Context, sessions: QaSessions, source: UiConversation): UiConversation;
+//# sourceMappingURL=account-conversation.d.ts.map

package/lib/types/client/account-sessions.d.ts

@@ -0,0 +1,7 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { QaSessions } from "./types.js";
+import type { QaChatWire, QaSessionRemotes } from "./chat-sharing-api.js";
+import type { ConnectionGenerationState } from "@deepseek-ai/dsh-client-connection/client";
+/** Use the installed native Session class and projections with a tokenized transport. */
+export declare function createQaAccountSessions(ctx: Context, root: QaSessions, remote: QaSessionRemotes, wire: QaChatWire, token: () => string | null, generation: ConnectionGenerationState, subscribeAccount: (listener: () => void) => () => void): QaSessions;
+//# sourceMappingURL=account-sessions.d.ts.map

package/lib/types/client/account-upload.d.ts

@@ -0,0 +1,15 @@
+import type { QaFileUpload } from "./types.js";
+export interface QaUploadCarrier {
+    post(request: {
+        path: string;
+        body: Blob;
+        headers: Record<string, string>;
+        signal?: AbortSignal;
+    }): Promise<{
+        status: number;
+        body: string;
+    }>;
+}
+/** Use the native background carrier, addressed to the authenticated QA route. */
+export declare function createQaAccountUpload(carrier: () => QaUploadCarrier | undefined, token: () => string | null): QaFileUpload;
+//# sourceMappingURL=account-upload.d.ts.map

package/lib/types/client/chat-sharing-api.d.ts

@@ -0,0 +1,35 @@
+import type { createSessionControlStream } from "@deepseek-ai/dsh-api-session-controller/client";
+import type { RemoteResult, RemoteStreamHandle } from "@deepseek-ai/dsh-typert-protocol";
+import type * as Native from "@deepseek-ai/dsh-api-session-controller/types";
+import type { QaChatAccess, QaChatAuthor, QaChatGrant, QaChatMode, QaChatJson } from "../chat-sharing/types.js";
+export interface QaSharingApi {
+    attachmentPath?(token: string, id: string, attachmentId: string): Promise<RemoteResult<string>>;
+    access(token: string, id: string): Promise<RemoteResult<QaChatAccess>>;
+    visible(token: string): Promise<RemoteResult<readonly QaChatAccess[]>>;
+    grants(token: string, id: string): Promise<RemoteResult<readonly QaChatGrant[]>>;
+    set(token: string, id: string, email: string, mode: QaChatMode | null): Promise<RemoteResult<readonly QaChatGrant[]>>;
+}
+/** Handwritten face is checked against the generated transport at package build. */
+export interface QaChatWire {
+    chatAudit(token: string, id: string, full: boolean): Promise<RemoteResult<QaChatJson>>;
+    chatAttachmentPath(token: string, id: string, attachmentId: string): Promise<RemoteResult<string>>;
+    chatAccess(token: string, id: string): ReturnType<QaSharingApi["access"]>;
+    chatVisible(token: string): ReturnType<QaSharingApi["visible"]>;
+    chatGrants(token: string, id: string): ReturnType<QaSharingApi["grants"]>;
+    chatSetGrant(token: string, id: string, email: string, mode: QaChatMode | null): ReturnType<QaSharingApi["set"]>;
+    chatAuthors(token: string, id: string): Promise<RemoteResult<readonly QaChatAuthor[]>>;
+    chatList(token: string, signal?: AbortSignal): Promise<RemoteResult<Native.SessionListValue>>;
+    chatSearch(token: string, request: Native.SessionSearchRequest, signal?: AbortSignal): Promise<RemoteResult<Native.SessionSearchValue>>;
+    chatSelectModel(token: string, request: Native.SessionSelectModelRequest): Promise<RemoteResult<Native.SessionSelectModelValue>>;
+    chatPage(token: string, request: Native.SessionPageRequest, signal?: AbortSignal): Promise<RemoteResult<Native.SessionPage>>;
+    chatFollow(token: string, request: Native.SessionFollowRequest, signal?: AbortSignal): RemoteStreamHandle<Native.SessionFollowFrame, never>;
+    chatControl(token: string, signal?: AbortSignal): RemoteStreamHandle<Native.SessionControlFrame, never>;
+    chatProjections(token: string, id: string, signal?: AbortSignal): Promise<RemoteResult<Native.SessionProjectionsValue>>;
+    chatPrompt(token: string, request: Native.SessionPromptRequest, signal?: AbortSignal): Promise<RemoteResult<Native.SessionPromptValue>>;
+    chatAttachment(token: string, request: Native.SessionAttachmentRequest): Promise<RemoteResult<Native.SessionAttachmentValue>>;
+    chatRename(token: string, request: Native.SessionRenameRequest): Promise<RemoteResult<Native.SessionRenameValue>>;
+    chatCancel(token: string, id: string): Promise<RemoteResult<Native.SessionCancelValue>>;
+    chatUpdateQueue(token: string, request: Native.SessionUpdateQueueRequest): Promise<RemoteResult<Native.SessionUpdateQueueValue>>;
+}
+export type QaSessionRemotes = Parameters<typeof createSessionControlStream>[0];
+//# sourceMappingURL=chat-sharing-api.d.ts.map

package/lib/types/client/components/QaChatSharing.d.ts

@@ -0,0 +1,10 @@
+import type { QaSharingApi } from "../chat-sharing-api.js";
+import type { QaChatAccess } from "../../chat-sharing/types.js";
+export declare const qaChatModeLabel: (mode: QaChatAccess["mode"]) => string;
+export declare function QaChatSharing(props: {
+    access: QaChatAccess;
+    token: string;
+    api: QaSharingApi;
+}): import("react/jsx-runtime").JSX.Element;
+export declare const QA_SHARING_STYLES = "\n.dsh-qa-sharing{padding:8px 20px;color:var(--dsw-alias-label-secondary);font-size:13px;border-bottom:1px solid var(--dsw-alias-border-l2);display:flex;gap:12px;align-items:center;flex-wrap:wrap}\n.dsh-qa-sharing__notice{margin:0;color:var(--dsw-alias-label-tertiary)}\n.dsh-qa-sharing>span{overflow-wrap:anywhere;min-width:0}\n.dsh-qa-sharing>button,.dsh-qa-sharing__body .dsh-qa-btn{appearance:none;cursor:pointer;min-height:40px;font:inherit;color:var(--dsw-alias-label-primary);background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2);border-radius:8px;padding:8px 12px}\n.dsh-qa-sharing>button:hover,.dsh-qa-sharing__body .dsh-qa-btn:hover{background:var(--dsw-alias-bg-layer-3)}\n.dsh-qa-sharing>button:disabled,.dsh-qa-sharing__body .dsh-qa-btn:disabled{cursor:default;opacity:.55}\n.dsh-qa-sharing>button:focus-visible,.dsh-qa-sharing__body .dsh-qa-btn:focus-visible{outline:var(--dsw-focus-ring-width,2px) solid var(--dsw-focus-ring-color,var(--dsw-alias-brand-primary));outline-offset:2px}\n.dsh-qa-sharing__form{display:grid;gap:12px;margin:16px 0}\n.dsh-qa-sharing__body label{display:flex;flex-direction:column;gap:6px}\n.dsh-qa-sharing__body input,.dsh-qa-sharing__body select{font:inherit;color:var(--dsw-alias-label-primary);background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2);border-radius:8px;padding:8px;min-width:0;max-width:100%}\n.dsh-qa-sharing__people{list-style:none;padding:0;margin:16px 0}\n.dsh-qa-sharing__people li{display:flex;gap:10px;align-items:center;flex-wrap:wrap;padding:12px 0;border-top:1px solid var(--dsw-alias-border-l2)}\n.dsh-qa-sharing__people span{flex:1;min-width:140px;overflow-wrap:anywhere}\n.dsh-qa-sharing__people small{display:block;color:var(--dsw-alias-label-tertiary)}\n";
+//# sourceMappingURL=QaChatSharing.d.ts.map

package/lib/types/client/components/QaComposer.d.ts

@@ -2,6 +2,8 @@ import type { QaAttachmentDraft, QaSlashView, ResolvedQaSlashCommands } from "..
 import { type QaAttachmentLimits } from "../attachments.js";
 import type { QaQuickQuestion } from "../types.js";
 export interface QaComposerProps {
+    readonly fastMode?: boolean;
+    readonly onFastModeChange?: (enabled: boolean) => void;
     readonly placeholder: string;
     /** Shown while the chat is empty; the label reads, the prompt sends. */
     readonly quickQuestions?: readonly QaQuickQuestion[];

package/lib/types/client/components/QaFileAttachment.d.ts

@@ -1,6 +1,6 @@
 export interface QaFileAttachmentProps {
     readonly name: string;
-    readonly bytes: number;
+    readonly bytes: number | null;
     /** Pending draft vs already-sent attachment: pending offers removal. */
     readonly tone: "draft" | "sent";
     readonly onRemove?: () => void;
@@ -12,6 +12,7 @@ export interface QaFileAttachmentProps {
     readonly onOpen?: () => void;
     /** Save the file. Omitted where the surface cannot read its bytes. */
     readonly onDownload?: () => void;
+    readonly onApprove?: () => Promise<void>;
 }
 /**
  * One attached file: the extension badge, the name and the size. A sent
@@ -19,5 +20,5 @@ export interface QaFileAttachmentProps {
  * re-reads its bytes; a file the turn produced is the same chip with the two
  * controls that make it usable — open it, or take it away.
  */
-export declare function QaFileAttachment({ name, bytes, tone, onRemove, onOpen, onDownload, }: QaFileAttachmentProps): import("react/jsx-runtime").JSX.Element;
+export declare function QaFileAttachment({ name, bytes, tone, onRemove, onOpen, onDownload, onApprove, }: QaFileAttachmentProps): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=QaFileAttachment.d.ts.map

package/lib/types/client/components/QaFilesPanel.d.ts

@@ -9,8 +9,11 @@ export interface QaFilesPanelProps {
     readonly onJumpToMessage: (messageId: string) => void;
     /** Open a produced file in the workspace viewer below. */
     readonly onArtifactOpen?: (artifact: QaArtifactView) => void;
+    readonly onAttachmentOpen?: (file: import("../../types.js").QaFileView) => void;
+    readonly materialsOnly?: boolean;
     /** Save a produced file. */
     readonly onArtifactDownload?: (artifact: QaArtifactView) => void;
+    readonly onArtifactApprove?: (artifact: QaArtifactView) => Promise<void>;
     /**
      * A file to open on arrival, with the request's stamp. The stamp is what makes
      * a second click on the same card a fresh arrival rather than a no-op.
@@ -36,5 +39,5 @@ export interface QaFilesPanelProps {
  * back, and the images are the same object URLs the message showed — while the
  * workspace section reads through the Host's fenced listing and file reads.
  */
-export declare function QaFilesPanel({ groups, resolveImage, onJumpToMessage, onArtifactOpen, onArtifactDownload, openArtifact, sessionId, api, }: QaFilesPanelProps): import("react/jsx-runtime").JSX.Element;
+export declare function QaFilesPanel({ groups, resolveImage, onJumpToMessage, onArtifactOpen, onAttachmentOpen, materialsOnly, onArtifactDownload, onArtifactApprove, openArtifact, sessionId, api, }: QaFilesPanelProps): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=QaFilesPanel.d.ts.map

package/lib/types/client/components/QaMessage.d.ts

@@ -1,4 +1,4 @@
-import type { QaArtifactView, QaMessage as QaMessageModel, QaSource, QaTurnSources } from "../../types.js";
+import type { QaArtifactView, QaFileView, QaMessage as QaMessageModel, QaSource, QaTurnSources } from "../../types.js";
 import type { QaFeedbackReason } from "../../types.js";
 export interface QaMessageProps {
     readonly message: QaMessageModel;
@@ -11,6 +11,7 @@ export interface QaMessageProps {
     readonly stateKey?: string;
     /** Ask for a fresh variant of this answer; omit to hide the control. */
     readonly onRegenerate?: () => void;
+    readonly onFork?: (answerSeq: number) => Promise<void>;
     /** Resolve one durable attachment into a viewable URL. */
     readonly resolveImage?: (attachmentId: string) => Promise<string>;
     /** Open the drawer at the exact canonical snapshot shown in this footer. */
@@ -23,8 +24,10 @@ export interface QaMessageProps {
      * file without promising an action it cannot perform.
      */
     readonly onArtifactOpen?: (artifact: QaArtifactView) => void;
+    readonly onAttachmentOpen?: (file: QaFileView) => void;
     /** Save a produced file. Omitted on the same terms as {@link onArtifactOpen}. */
     readonly onArtifactDownload?: (artifact: QaArtifactView) => void;
+    readonly onArtifactApprove?: (artifact: QaArtifactView) => Promise<void>;
     /** Operator-configured running phrases; omitted reads the built-in list. */
     readonly thinkingPhrases?: readonly string[];
     /**
@@ -47,5 +50,5 @@ export interface QaMessageProps {
  * comparison is by value, which keeps fresh copies cheap to recognize.
  */
 export declare function sameMessage(a: QaMessageModel, b: QaMessageModel): boolean;
-export declare const QaMessage: import("react").MemoExoticComponent<({ message, renderMarkdown, showTimestamp, stateKey, onRegenerate, resolveImage, onOpenSources, onSourceDetail, onArtifactOpen, onArtifactDownload, thinkingPhrases, onRateFeedback, }: QaMessageProps) => import("react/jsx-runtime").JSX.Element>;
+export declare const QaMessage: import("react").MemoExoticComponent<({ message, renderMarkdown, showTimestamp, stateKey, onRegenerate, onFork, resolveImage, onOpenSources, onSourceDetail, onArtifactOpen, onAttachmentOpen, onArtifactDownload, onArtifactApprove, thinkingPhrases, onRateFeedback, }: QaMessageProps) => import("react/jsx-runtime").JSX.Element>;
 //# sourceMappingURL=QaMessage.d.ts.map

package/lib/types/client/components/QaWorkspaceBrowser.d.ts

@@ -1,4 +1,10 @@
 import type { QaBoundSourceApi } from "../types.js";
+/**
+ * Object URL for a PDF body, revoked when the payload changes or the panel
+ * closes. A blob URL is what lets the browser's own viewer draw the document
+ * without the bytes ever leaving the page.
+ */
+export declare function usePdfUrl(payload: string | undefined): string | null;
 export interface QaWorkspaceBrowserProps {
     readonly sessionId: string;
     readonly api: QaBoundSourceApi;
@@ -8,6 +14,7 @@ export interface QaWorkspaceBrowserProps {
      * turn produced previews through the same fenced read a browsed file uses.
      */
     readonly initialFile?: string;
+    readonly materialsOnly?: boolean;
 }
 /**
  * The chat's own workspace, browsable from the files rail.
@@ -17,5 +24,5 @@ export interface QaWorkspaceBrowserProps {
  * the visitor out of the chat's tree. Opening a file reads exactly that file —
  * text inline, anything else as a downloadable handle.
  */
-export declare function QaWorkspaceBrowser({ sessionId, api, initialFile, }: QaWorkspaceBrowserProps): import("react/jsx-runtime").JSX.Element;
+export declare function QaWorkspaceBrowser({ sessionId, api, initialFile, materialsOnly, }: QaWorkspaceBrowserProps): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=QaWorkspaceBrowser.d.ts.map

package/lib/types/client/components/source-refs.d.ts

@@ -12,5 +12,6 @@ export interface QaSourceRefs {
 }
 /** Display name for a file-backed source: the file name alone, case kept. */
 export declare function sourceFileName(source: QaSource): string;
+export declare function sourceRefsSignature(sources: readonly QaSource[]): string;
 export declare function buildSourceRefs(sources: readonly QaSource[]): QaSourceRefs;
 //# sourceMappingURL=source-refs.d.ts.map

package/lib/types/client/lineage.d.ts

@@ -6,14 +6,14 @@ import type { SessionSummary } from "@deepseek-ai/dsh-api-session-controller/cli
  * A delegated run is an implementation detail of a single answer: the Host
  * refuses to attest it, its sources reach the parent chat through the
  * provenance inheritance flow, and it has no owner. The host list the surface
- * already follows carries both marks (`origin` and `parentId`), so every
+ * already follows marks delegated runs with `origin`; ordinary forks also carry `parentId`, so every
  * projection that talks about chats asks this one question instead of
  * re-deriving it — and a chat row, a chat count and a claim batch can never
  * disagree about what a chat is.
  */
 export declare function isDelegatedSession(summary: Pick<SessionSummary, "origin" | "parentId"> | undefined): boolean;
 /** The session-list slice the lineage walk reads. */
-export type SessionLineage = Readonly<Record<string, Pick<SessionSummary, "parentId"> | undefined>>;
+export type SessionLineage = Readonly<Record<string, Pick<SessionSummary, "parentId" | "origin"> | undefined>>;
 /**
  * The chat a session belongs to: itself when nothing delegated it, otherwise
  * the root of its parent chain.