@yadsh/dsh-qa-surface 0.15.7 → 0.16.0

package/lib/types/client/notifications/notification-dispatcher.d.ts

@@ -59,10 +59,14 @@ export declare function readNotificationPermission(): QaNotificationPermission;
  * asks on load — or once per finished turn — spends it on the wrong moment.
  */
 export declare function requestNotificationPermission(): Promise<QaNotificationPermission>;
-/**
- * Hand one finished turn to the desktop. Returns false when the platform
- * refuses: a notification that cannot be raised costs the reader nothing, and
- * the in-app line is already on its way.
- */
-export declare function raiseDesktopNotice(completion: QaTurnCompletion): boolean;
+/** One surface's desktop handles, retained until closed or retired. */
+export declare class QaDesktopNotices {
+    private readonly handles;
+    retain(notice: Notification, sessionId: string, onOpen?: (sessionId: string) => void): void;
+    /** Revoke callbacks even where the operating system refuses close(). */
+    close(sessionId?: string): void;
+    keep(sessionIds: ReadonlySet<string>): void;
+}
+/** The session id stays in the callback, never in the desktop payload. */
+export declare function raiseDesktopNotice(completion: QaTurnCompletion, onOpen?: (sessionId: string) => void, notices?: QaDesktopNotices): boolean;
 //# sourceMappingURL=notification-dispatcher.d.ts.map

package/lib/types/client/notifications/use-turn-notifications.d.ts

@@ -5,6 +5,10 @@ import { type QaChatActivity } from "./turn-completion-source.js";
 export interface QaTurnNotificationsInput {
     /** The sidebar's rows: this browser's chats with their running state. */
     readonly chats: readonly QaChatActivity[];
+    /** Authenticated identity, null behind the gate or with accounts disabled. */
+    readonly principal: string | null;
+    /** False while the controller or host list is still restoring. */
+    readonly chatsReady?: boolean;
     /**
      * The chats this account owns outright, which is narrower than the rows: an
      * admin's shared history lists chats it only reads, and the turn of such a

package/lib/types/client/project-session-state.d.ts

@@ -8,6 +8,7 @@ export interface QaBoundProjectionInput {
     readonly sessionId: string;
     /** Chat identity from the controller; see `QaSessionState.chatKey`. */
     readonly chatKey: number;
+    readonly inheritedThroughSeq?: number;
     readonly sessionSnapshot: ReturnType<SessionFace["getSnapshot"]>;
     /**
      * The Host's Inbox projection for this session: the messages waiting for the

package/lib/types/client/session-admission.d.ts

@@ -2,6 +2,8 @@ import type { QaSecureSession } from "./types.js";
 import type { ResolvedQaSurfaceConfig } from "../types.js";
 export type QaAttestationOutcome = {
     readonly ok: true;
+    readonly inheritedThroughSeq?: number;
+    readonly chatAccess?: import("../chat-sharing/types.js").QaChatAccess;
 } | {
     readonly ok: false;
     /** The identity is absent or expired; the caller returns to the gate. */

package/lib/types/client/session-sources.d.ts

@@ -14,6 +14,7 @@ export declare class QaHostSourceBridge {
     private refreshing;
     /** The refusal already reported, so a repeating failure reaches the console once. */
     private refusal;
+    private sessionId;
     /** Bumped on reset so a stale in-flight fetch never lands. */
     private generation;
     constructor(sourceApi: QaSourceApi, token: () => string);

package/lib/types/client/turn-sources.d.ts

@@ -8,7 +8,7 @@ export declare function chatLegacyOf(snapshot: ConversationSnapshot | undefined)
  * metadata is persisted by DSH, this projection is identical on live updates
  * and replay and requires no assistant-authored bibliography.
  */
-export declare function projectTurnSources(snapshot: ConversationSnapshot | undefined, sessionId?: string, workspaceRoot?: string): readonly QaTurnSources[];
+export declare function projectTurnSources(snapshot: ConversationSnapshot | undefined, sessionId?: string, workspaceRoot?: string, documentationRoot?: string): readonly QaTurnSources[];
 /**
  * The directory a projected source path is anchored on: the chat's own cwd.
  *

package/lib/types/client/types.d.ts

@@ -1,7 +1,7 @@
 import type { ClientRemote } from "@deepseek-ai/dsh-api-gateway/client";
 import type { ISessions, SessionFace } from "@deepseek-ai/dsh-api-session-controller/client";
 import type { UiConversation } from "@deepseek-ai/dsh-client-ui-conversation/client";
-import type { QaAccountNotificationsInput, QaAccountProfileInput, QaAccountSession, QaAccountStartersInput, QaAccountStarter, QaAccountUserPublic, QaAccessAdminSnapshot, QaApprovalDecision, QaClaimResult, QaLockdownProof, QaModelCatalogEntry, QaOwnershipEntry, QaPasswordResetRequest, QaPendingApproval, QaPendingQuestion, QaQuestionAnswerItem, QaQueueStatus, QaIssuedServiceToken, QaServiceTokenCreateInput, QaServiceTokenSummary, QaSessionState, QaSkillDocument, QaSkillDraftInput, QaSkillRemoval, QaSkillSummary, QaSkillToolDescriptor, QaSkillValidation, QaSourceFilePreview, QaTurnSources, QaWhoamiResult, QaDocumentPreview, QaWorkspaceFile, QaWorkspaceListing, QaCapabilitySelection, QaCurrentAccess, QaSessionAccess, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, QaAdminAuditEvent, QaAdminOverview, QaAdminPage, QaAdminSkillScope, QaAdminSkillsView, QaAdminUserDetail, QaAdminUserRow, QaAdminUserUpdate, QaAuditQuery, QaConversationDetail, QaConversationDeletion, QaConversationQuery, QaConversationReview, QaConversationReviewInput, QaConversationSummary, QaExpertMemoryDraft, QaExpertMemoryPage, QaExpertMemoryRecord, QaExpertMemoryScope, QaFeedbackQuery, QaFeedbackRow, QaMessageFeedback, QaMessageFeedbackInput, QaQualityMetrics, QaReviewQueueItem, QaReviewQueueRow, QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, QaUserQuery } from "../types.js";
+import type { QaAccountNotificationsInput, QaAccountProfileInput, QaAccountSession, QaAccountStartersInput, QaAccountStarter, QaAccountUserPublic, QaAccessAdminSnapshot, QaApprovalDecision, QaClaimResult, QaLockdownProof, QaModelCatalogEntry, QaOwnershipEntry, QaPasswordResetRequest, QaPendingApproval, QaPendingQuestion, QaQuestionAnswerItem, QaQueueStatus, QaIssuedServiceToken, QaServiceTokenCreateInput, QaServiceTokenSummary, QaSessionState, QaSkillDocument, QaSkillDraftInput, QaSkillRemoval, QaSkillSummary, QaSkillToolDescriptor, QaSkillValidation, QaSourceFilePreview, QaTurnSources, QaWhoamiResult, QaDocumentPreview, QaWorkspaceFile, QaWorkspaceFileChunk, QaDocumentWorkflowStatus, QaWorkspaceListing, QaCapabilitySelection, QaCurrentAccess, QaSessionAccess, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, QaAdminAuditEvent, QaAdminOverview, QaAdminPage, QaAdminSkillScope, QaAdminSkillsView, QaAdminUserDetail, QaAdminUserRow, QaAdminUserUpdate, QaAuditQuery, QaConversationDetail, QaConversationDeletion, QaConversationQuery, QaConversationReview, QaConversationReviewInput, QaConversationSummary, QaExpertMemoryDraft, QaExpertMemoryPage, QaExpertMemoryRecord, QaExpertMemoryScope, QaFeedbackQuery, QaFeedbackRow, QaMessageFeedback, QaMessageFeedbackInput, QaQualityMetrics, QaReviewQueueItem, QaReviewQueueRow, QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, QaUserQuery } from "../types.js";
 /** Wire content one prompt carries: text plus base64 image uploads. */
 export type QaPromptContent = Parameters<SessionFace["prompt"]>[0];
 /** DSH session runtime surface the QA controller is allowed to touch. */
@@ -30,6 +30,8 @@ export type QaSecureSession = (token: string, sessionId: string) => Promise<{
 }>;
 /** Host-authoritative creation: identity, cwd and policy never come from the browser. */
 export type QaCreateSession = (token: string, subroleId: string | null, adminPreview: boolean) => Promise<RemoteResult<string>>;
+/** Owner-scoped exact-history branch; the Host chooses all child policy. */
+export type QaForkSession = (token: string, sourceId: string, answerSeq: number) => Promise<RemoteResult<string>>;
 /**
  * The Host's live read of the request ceiling (`qaSurface/queueStatus`), asked
  * per send: how many questions the stand is answering and whether one more
@@ -146,6 +148,9 @@ export interface QaFileUpload {
     }>;
 }
 export interface QaSourceApi {
+    documentWorkflowStatus?(token: string, sessionId: string, workflowId: string): Promise<RemoteResult<QaDocumentWorkflowStatus>>;
+    approveDocumentWorkflow?(token: string, sessionId: string, workflowId: string, revision: number, sha256: string): Promise<RemoteResult<QaDocumentWorkflowStatus>>;
+    readWorkspaceFileChunk?(token: string, sessionId: string, path: string, offset: number, version: string | null): Promise<RemoteResult<QaWorkspaceFileChunk>>;
     sources(token: string, sessionId: string): Promise<{
         readonly ok: true;
         readonly value: readonly QaTurnSources[];
@@ -201,6 +206,7 @@ export interface QaSlashApi {
 }
 /** A source API with the account token already bound at the call site. */
 export type QaBoundSourceApi = {
+    readWorkspaceFileChunk?(sessionId: string, path: string, offset: number, version: string | null): Promise<RemoteResult<QaWorkspaceFileChunk>>;
     sources(sessionId: string): Promise<{
         readonly ok: true;
         readonly value: readonly QaTurnSources[];
@@ -339,6 +345,7 @@ export interface QaIntegrationTokenApi {
 }
 /** Account remotes exposed by the plugin's own typert namespace. */
 export interface QaAccountsApi {
+    chatVisible?(token: string): Promise<RemoteResult<readonly import("../chat-sharing/types.js").QaChatAccess[]>>;
     accountsWhoami(token: string): Promise<RemoteResult<QaWhoamiResult>>;
     accountsLogin(email: string, password: string): Promise<RemoteResult<QaAccountSession>>;
     accountsRegister(email: string, password: string): Promise<RemoteResult<QaAccountSession>>;

package/lib/types/client/workspace-download.d.ts

@@ -1,4 +1,4 @@
-import type { QaWorkspaceFile } from "../types.js";
+import type { QaWorkspaceFile, QaWorkspaceFileChunk } from "../types.js";
 /**
  * Handing one file of the chat's workspace to the person the turn produced it
  * for.
@@ -13,4 +13,12 @@ import type { QaWorkspaceFile } from "../types.js";
 export declare function fileNameOf(path: string): string;
 /** Save one workspace file under its own name. */
 export declare function downloadWorkspaceFile(file: QaWorkspaceFile): void;
+/** Read one immutable file version in full; a refusal never saves partial bytes. */
+export declare function downloadWorkspacePath(path: string, read: (offset: number, version: string | null) => Promise<{
+    readonly ok: true;
+    readonly value: QaWorkspaceFileChunk;
+} | {
+    readonly ok: false;
+    readonly error: unknown;
+}>): Promise<void>;
 //# sourceMappingURL=workspace-download.d.ts.map

package/lib/types/config.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=config.js.map

package/lib/types/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":""}

package/lib/types/documents.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=documents.js.map

package/lib/types/documents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documents.js","sourceRoot":"","sources":["../../src/types/documents.ts"],"names":[],"mappings":""}

package/lib/types/enforcement/skill-resource-paths.d.ts

@@ -0,0 +1,5 @@
+import type { SkillResourceBase } from "@deepseek-ai/dsh-skill";
+/** Guidance only: no file contents, path rewriting or permission grant. */
+export declare function skillResourcePathHint(requested: unknown, loaded: ReadonlyMap<string, SkillResourceBase>, exists?: (candidate: string) => boolean): string | undefined;
+export declare function skillResourceGuidance(resource: SkillResourceBase | undefined): string;
+//# sourceMappingURL=skill-resource-paths.d.ts.map

package/lib/types/enforcement/structured-result.d.ts

@@ -0,0 +1,11 @@
+import type { Agent } from "@deepseek-ai/dsh-agent";
+import type { Context } from "@deepseek-ai/cordis";
+/**
+ * Native delegation's result channel is not a working capability. Admit only
+ * the exact child-owned capture registration, never a global/inherited tool
+ * with the same name. Registrations and session lineage are Host-owned; model
+ * arguments cannot create either. Schema validation and authoritative capture
+ * remain the native driver's responsibility.
+ */
+export declare function isDelegatedStructuredResult(ctx: Context, agent: Agent | undefined, name: string): boolean;
+//# sourceMappingURL=structured-result.d.ts.map

package/lib/types/expert-memory.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=expert-memory.js.map

package/lib/types/expert-memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expert-memory.js","sourceRoot":"","sources":["../../src/types/expert-memory.ts"],"names":[],"mappings":""}

package/lib/types/index.d.ts

@@ -1,9 +1,11 @@
+import type { QaChatAccess, QaChatGrant, QaChatMode, QaChatAuthor, QaChatJson } from "./chat-sharing/types.js";
+import type { SessionPageRequest, SessionFollowRequest, SessionPromptRequest, SessionPromptValue, SessionAttachmentRequest, SessionAttachmentValue, SessionRenameRequest, SessionRenameValue, SessionCancelValue, SessionUpdateQueueRequest, SessionUpdateQueueValue, SessionSearchRequest, SessionSelectModelRequest, SessionSelectModelValue } from "@deepseek-ai/dsh-api-session-controller/types";
 import { TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 import type { Context } from "@deepseek-ai/cordis";
 import type { QaSurfaceConfigRefs } from "./config.js";
 import type { QaAccountNotificationsInput } from "./types.js";
 import type { QaTurnSources } from "./provenance/types.js";
-import type { QaAccountProfileInput, QaAccountSession, QaAccountStartersInput, QaAccountUserPublic, QaApprovalDecision, QaClaimResult, QaDocumentPreview, QaIssuedServiceToken, QaLockdownProof, QaOwnershipEntry, QaPasswordResetRequest, QaPendingApproval, QaPendingQuestion, QaQuestionAnswerItem, QaQueueStatus, QaServiceTokenCreateInput, QaServiceTokenSummary, ResolvedQaSurfaceConfig, QaAdminSkillScope, QaAdminSkillsView, QaExpertMemoryDraft, QaExpertMemoryPage, QaExpertMemoryRecord, QaExpertMemoryScope, QaSkillDocument, QaSkillDraftInput, QaSkillRemoval, QaSkillSummary, QaSkillToolDescriptor, QaSkillValidation, QaSourceFilePreview, QaWhoamiResult, QaWorkspaceFile, QaWorkspaceListing, QaPrincipal, QaAccessAdminSnapshot, QaAdminAuditEvent, QaAdminOverview, QaAdminPage, QaAdminUserDetail, QaAdminUserRow, QaAdminUserUpdate, QaAuditQuery, QaCapabilitySelection, QaConversationDetail, QaConversationDeletion, QaConversationQuery, QaConversationReview, QaConversationReviewInput, QaConversationSummary, QaCurrentAccess, QaFeedbackHarvestEntry, QaFeedbackHarvestResult, QaFeedbackQuery, QaFeedbackRow, QaMessageFeedback, QaMessageFeedbackInput, QaModelCatalogEntry, QaModelPair, QaQualityMetrics, QaReviewQueueItem, QaReviewQueueRow, QaSessionAccess, QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, QaUserQuery } from "./types.js";
+import type { QaAccountProfileInput, QaAccountSession, QaAccountStartersInput, QaAccountUserPublic, QaApprovalDecision, QaClaimResult, QaDocumentPreview, QaDocumentWorkflowStatus, QaIssuedServiceToken, QaLockdownProof, QaOwnershipEntry, QaPasswordResetRequest, QaPendingApproval, QaPendingQuestion, QaQuestionAnswerItem, QaQueueStatus, QaServiceTokenCreateInput, QaServiceTokenSummary, ResolvedQaSurfaceConfig, QaAdminSkillScope, QaAdminSkillsView, QaExpertMemoryDraft, QaExpertMemoryPage, QaExpertMemoryRecord, QaExpertMemoryScope, QaSkillDocument, QaSkillDraftInput, QaSkillRemoval, QaSkillSummary, QaSkillToolDescriptor, QaSkillValidation, QaSourceFilePreview, QaWhoamiResult, QaWorkspaceFile, QaWorkspaceFileChunk, QaWorkspaceListing, QaPrincipal, QaAccessAdminSnapshot, QaAdminAuditEvent, QaAdminOverview, QaAdminPage, QaAdminUserDetail, QaAdminUserRow, QaAdminUserUpdate, QaAuditQuery, QaCapabilitySelection, QaConversationDetail, QaConversationDeletion, QaConversationQuery, QaConversationReview, QaConversationReviewInput, QaConversationSummary, QaCurrentAccess, QaFeedbackHarvestEntry, QaFeedbackHarvestResult, QaFeedbackQuery, QaFeedbackRow, QaMessageFeedback, QaMessageFeedbackInput, QaModelCatalogEntry, QaModelPair, QaQualityMetrics, QaReviewQueueItem, QaReviewQueueRow, QaSessionAccess, QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, QaUserQuery } from "./types.js";
 export declare const name = "qa-surface";
 export declare const inject: string[];
 import { QA_SURFACE_SETTINGS_NAMESPACE } from "./shared/settings.js";
@@ -66,6 +68,10 @@ export declare class QaSurface extends TypertRemoteService {
      * opens the admin console never grows one.
      */
     private qualityStore;
+    private chatSharingStore;
+    private readonly chatTransport;
+    private readonly chatTurnGuard;
+    private sharing;
     constructor(ctx: Context, entry?: Partial<QaSurfaceConfigRefs>);
     /** The quality store, opening its file the first time anyone needs it. */
     private quality;
@@ -236,6 +242,8 @@ export declare class QaSurface extends TypertRemoteService {
      * intentionally not registered or attached as another DSH workspace.
      */
     createSession(token: string, subroleId: string | null, adminPreview: boolean): Promise<string>;
+    /** Create an independently admitted ordinary branch of the caller's own chat. */
+    forkSession(token: string, sourceId: string, answerSeq: number): Promise<string>;
     /** The selector model for the signed-in user; admin grants are irrelevant. */
     accessCurrent(token: string): QaCurrentAccess;
     /** The immutable role pinned to an existing session. */
@@ -341,6 +349,27 @@ export declare class QaSurface extends TypertRemoteService {
     adminAudit(token: string, query: QaAuditQuery, cursor: string | null, limit: number | null): Promise<QaAdminPage<QaAdminAuditEvent>>;
     /** Pin and attest the effective policy. The browser supplies identity only. */
     secureSession(token: string, sessionId: string): Promise<QaLockdownProof>;
+    chatVisible(token: string): readonly QaChatAccess[];
+    chatAccess(token: string, sessionId: string): QaChatAccess;
+    chatGrants(token: string, sessionId: string): readonly QaChatGrant[];
+    chatSetGrant(token: string, sessionId: string, email: string, mode: QaChatMode | null): readonly QaChatGrant[];
+    chatAuthors(token: string, sessionId: string): readonly QaChatAuthor[];
+    chatAudit(token: string, sessionId: string, full: boolean): Promise<QaChatJson>;
+    chatAttachmentPath(token: string, sessionId: string, attachmentId: string): Promise<string>;
+    chatList(token: string, signal: AbortSignal): Promise<QaChatJson>;
+    chatSearch(token: string, request: SessionSearchRequest, signal: AbortSignal): Promise<QaChatJson>;
+    chatSelectModel(token: string, request: SessionSelectModelRequest): Promise<SessionSelectModelValue>;
+    chatPage(token: string, request: SessionPageRequest, signal: AbortSignal): Promise<QaChatJson>;
+    chatFollow(token: string, request: SessionFollowRequest, signal: AbortSignal): AsyncIterable<QaChatJson>;
+    chatControl(token: string, signal: AbortSignal): AsyncIterable<QaChatJson>;
+    chatProjections(token: string, sessionId: string, signal: AbortSignal): Promise<QaChatJson>;
+    chatPrompt(token: string, request: SessionPromptRequest, signal: AbortSignal): Promise<SessionPromptValue>;
+    chatAttachment(token: string, request: SessionAttachmentRequest): Promise<SessionAttachmentValue>;
+    chatRename(token: string, request: SessionRenameRequest): Promise<SessionRenameValue>;
+    chatCancel(token: string, sessionId: string): Promise<SessionCancelValue>;
+    chatUpdateQueue(token: string, request: SessionUpdateQueueRequest): Promise<SessionUpdateQueueValue>;
+    private admitChatRead;
+    private requireChatOwner;
     /** Return canonical Host snapshots from plugin-owned durable provenance. */
     sources(token: string, sessionId: string): Promise<readonly QaTurnSources[]>;
     /**
@@ -395,6 +424,11 @@ export declare class QaSurface extends TypertRemoteService {
      * reopening a cited source.
      */
     readWorkspaceFile(token: string, sessionId: string, path: string): Promise<QaWorkspaceFile>;
+    /** Download one bounded chunk after revalidating this chat's ownership. */
+    readWorkspaceFileChunk(token: string, sessionId: string, path: string, offset: number, version: string | null): Promise<QaWorkspaceFileChunk>;
+    documentWorkflowStatus(token: string, sessionId: string, workflowId: string): Promise<QaDocumentWorkflowStatus>;
+    /** Browser-authenticated human consent; intentionally absent from the agent's tool registry. */
+    approveDocumentWorkflow(token: string, sessionId: string, workflowId: string, revision: number, sha256: string): Promise<QaDocumentWorkflowStatus>;
     /**
      * Render one Word document of the chat's workspace as a PDF for the panel.
      *

package/lib/types/policy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=policy.js.map

package/lib/types/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/types/policy.ts"],"names":[],"mappings":""}

package/lib/types/prompt-notes.d.ts

@@ -31,6 +31,7 @@ export declare const QA_DELEGATION_NOTE = "dsh-qa-surface:delegation-naming";
 export declare const QA_DOCUMENTS_NOTE = "dsh-qa-surface:attached-documents";
 /** Note name carrying the deployment's rule about where an answer comes from. */
 export declare const QA_SOURCE_PRIORITY_NOTE = "dsh-qa-surface:source-priority";
+export declare const QA_BRANCH_NOTE = "dsh-qa-surface:chat-branch";
 /**
  * Built-in note texts. Each is the fallback for its settings template
  * (`notes.*.template`); the placeholders mark the parts the injector
@@ -163,6 +164,7 @@ export declare class QaPromptNotes {
      * farthest ancestor known at that moment.
      */
     private rootSessionId;
+    private branchNotes;
     /** The owner's email and profile, or nothing while the chat is anonymous. */
     private identityOf;
 }

package/lib/types/provenance/connectors.d.ts

@@ -1,6 +1,9 @@
 import { canonicalizeUrl } from "./normalize.js";
-import type { SourceExtractor } from "./types.js";
+import type { SourceExtractor, SourceExtractorContext } from "./types.js";
+type UnknownRecord = Record<string, unknown>;
+export declare function contextRecords(context: SourceExtractorContext): UnknownRecord[];
 type UrlOptions = Parameters<typeof canonicalizeUrl>[1];
+export declare function canonicalUri(item: UnknownRecord, urlOptions: UrlOptions): string | undefined;
 export declare function createJiraExtractor(urlOptions?: UrlOptions): SourceExtractor;
 export declare function createConfluenceExtractor(urlOptions?: UrlOptions): SourceExtractor;
 export declare function createKnowledgeExtractor(urlOptions?: UrlOptions): SourceExtractor;

package/lib/types/provenance/document-preview.d.ts

@@ -25,4 +25,6 @@ export interface QaDocumentPreviewRequest extends QaAllowedFileRequest {
  * not told about that root refuses the file this check just accepted.
  */
 export declare function previewConvertibleDocument({ documents, sessionId, maxBytes, ...file }: QaDocumentPreviewRequest): Promise<QaDocumentPreview>;
+/** Native PDF or pipeline preview, after the caller has verified chat evidence. */
+export declare function previewSourceDocument(request: QaDocumentPreviewRequest): Promise<QaDocumentPreview>;
 //# sourceMappingURL=document-preview.d.ts.map

package/lib/types/provenance/extractors.d.ts

@@ -4,6 +4,8 @@ export declare const readFileExtractor: SourceExtractor;
 export declare function createWebSearchExtractor(maxPromotedPerSearch?: number, urlOptions?: Parameters<typeof canonicalizeUrl>[1]): SourceExtractor;
 export declare function createWebFetchExtractor(urlOptions?: Parameters<typeof canonicalizeUrl>[1]): SourceExtractor;
 export declare const webFetchExtractor: SourceExtractor;
+/** Document tools consume inputs; generated output paths stay artifacts. */
+export declare const documentSourceExtractor: SourceExtractor;
 export declare const fileSearchExtractor: SourceExtractor;
 export declare class SourceExtractorRegistry {
     private readonly extractors;

package/lib/types/provenance/file-download.d.ts

@@ -0,0 +1,10 @@
+import type { QaWorkspaceFileChunk } from "../types.js";
+import { type QaAllowedFileRequest } from "./file-preview.js";
+/** Each RPC stays small; downloads never use the preview's byte limit. */
+export declare const QA_DOWNLOAD_CHUNK_BYTES: number;
+export declare const QA_DOWNLOAD_MAX_BYTES: number;
+export declare function readWorkspaceFileChunk(request: QaAllowedFileRequest & {
+    readonly offset: number;
+    readonly version: string | null;
+}): Promise<QaWorkspaceFileChunk>;
+//# sourceMappingURL=file-download.d.ts.map

package/lib/types/provenance/host-store.d.ts

@@ -60,6 +60,8 @@ export declare class QaProvenanceHost {
     private forgetAll;
     bundles(sessionId: string): readonly QaTurnSources[];
     sourceAllowed(sessionId: string, path: string): boolean;
+    /** Copy only evidence of turns present in the child's durable prefix. */
+    forkSnapshots(parentId: string, childId: string, throughTurn: number): void;
     private seed;
     private observeEvent;
     private shouldCollect;

package/lib/types/provenance/integration-extractor.d.ts

@@ -0,0 +1,5 @@
+import type { SourceExtractor } from "./types.js";
+import type { canonicalizeUrl } from "./normalize.js";
+/** Successful provider retrievals with explicit addresses or object identity. */
+export declare function integrationExtractor(options?: Parameters<typeof canonicalizeUrl>[1]): SourceExtractor;
+//# sourceMappingURL=integration-extractor.d.ts.map

package/lib/types/provenance/types.d.ts

@@ -60,6 +60,8 @@ export interface SourceExtractorContext {
     readonly origin: QaSourceOrigin;
     /** Canonical session/workspace root used to make local paths portable. */
     readonly workspaceRoot?: string;
+    /** Configured documentation root for replaying legacy docs_read results. */
+    readonly documentationRoot?: string;
 }
 export interface QaReportedSource {
     readonly kind: QaSourceKind;

package/lib/types/qa-tools/docs-tools.d.ts

@@ -123,6 +123,8 @@ export interface QaDocsSearchResult extends QaDocsIdentity {
 /** The outcome of one documentation read. */
 export interface QaDocsReadResult extends QaDocsIdentity {
     readonly path: string;
+    /** Actual read target, kept out of the model-facing rendering. */
+    readonly absolutePath: string;
     readonly from: number;
     readonly to: number;
     readonly totalLines: number;

package/lib/types/quality.js

@@ -0,0 +1,7 @@
+// ---------------------------------------------------------------------------
+// Quality layer: user feedback, reviewer results, and the admin audit trail.
+// These are the durable records the admin console reads and writes; every one
+// is keyed to an exact conversation message, never to a conversation alone.
+// ---------------------------------------------------------------------------
+export {};
+//# sourceMappingURL=quality.js.map

package/lib/types/quality.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quality.js","sourceRoot":"","sources":["../../src/types/quality.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E"}

package/lib/types/session-fork-host.d.ts

@@ -0,0 +1,27 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { PluginLogger } from "@yadsh/dsh-plugin-log";
+import type { QaAccounts } from "./accounts/store.js";
+import type { QaAccessService } from "./access/service.js";
+import type { QaPolicyAdmission } from "./secure-session.js";
+import type { QaIntegrationPrincipalBindings } from "./integration-principals.js";
+import type { QaProvenanceHost } from "./provenance/host-store.js";
+import type { QaStoredSessionEraser } from "./admin/session-log.js";
+import type { ResolvedQaSurfaceConfig } from "./types.js";
+export interface QaForkHostOptions {
+    readonly ctx: Context;
+    readonly config: ResolvedQaSurfaceConfig;
+    readonly accounts: Pick<QaAccounts, "currentUser" | "ownerIdOf" | "sessionAccess" | "updateSessionAccess" | "releaseSessionReservation"> | undefined;
+    readonly access: Pick<QaAccessService, "isDelegatedChild" | "session" | "reserveSession" | "modelPolicyFor">;
+    readonly admission: Pick<QaPolicyAdmission, "secureSession" | "preflightDeployment">;
+    readonly principals: Pick<QaIntegrationPrincipalBindings, "attest">;
+    readonly provenance: Pick<QaProvenanceHost, "forkSnapshots" | "dropSession">;
+    readonly logger: PluginLogger;
+    readonly sessionFiles: QaStoredSessionEraser;
+    readonly sharing?: {
+        forkAuthors(sourceId: string, targetId: string, requests: readonly string[]): void;
+        dropSession(id: string): void;
+    };
+}
+/** Native durable prefix and agent lifecycle, admitted as an independent QA root. */
+export declare function forkQaSession(options: QaForkHostOptions, token: string, sourceId: string, answerSeq: number): Promise<string>;
+//# sourceMappingURL=session-fork-host.d.ts.map

package/lib/types/session-fork.d.ts

@@ -0,0 +1,7 @@
+import type { StoredSessionEvent } from "./admin/conversation-log.js";
+/** Resolve a selected durable answer to the end of its completed turn. */
+export declare function qaForkBoundary(events: readonly StoredSessionEvent[], answerSeq: number): {
+    readonly atSeq: number;
+    readonly turn: number;
+};
+//# sourceMappingURL=session-fork.d.ts.map

package/lib/types/session.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=session.js.map

package/lib/types/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/types/session.ts"],"names":[],"mappings":""}

package/lib/types/shared/session-lineage.d.ts

@@ -0,0 +1,7 @@
+/** A seeded ordinary child is a fork; delegated runs retain their own origin. */
+export declare function qaDelegatedHeader(header: {
+    readonly parentSession?: unknown;
+    readonly origin?: unknown;
+    readonly isSeeded?: boolean;
+}): boolean;
+//# sourceMappingURL=session-lineage.d.ts.map

package/lib/types/skills.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=skills.js.map

package/lib/types/skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../src/types/skills.ts"],"names":[],"mappings":""}

package/lib/types/slash/draft-target.d.ts

@@ -0,0 +1,7 @@
+export interface QaSlashDraftTarget {
+    readonly subroleId: string | null;
+    readonly adminPreview: boolean;
+}
+export declare function slashDraftTarget(subroleId: string | null, adminPreview: boolean): string;
+export declare function parseSlashDraftTarget(target: string): QaSlashDraftTarget | undefined;
+//# sourceMappingURL=draft-target.d.ts.map

package/lib/types/slash/remotes.d.ts

@@ -1,6 +1,8 @@
 import type { Context } from "@deepseek-ai/cordis";
 import type { PluginLogger } from "@yadsh/dsh-plugin-log";
 import type { QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, ResolvedQaSurfaceConfig } from "../types.js";
+import { type QaSlashNativeSkill } from "./catalog.js";
+import { type QaSlashDraftTarget } from "./draft-target.js";
 /**
  * Host-side bodies of the slash remotes. The `@Remote`-decorated signatures
  * stay on the `QaSurface` service class (typert code generation reads the class
@@ -19,6 +21,11 @@ export interface QaSlashRemotes {
 }
 export interface QaSlashRemotesOptions {
     readonly ctx: Context;
+    /** Reads the preset scope with the authenticated draft role, without a session. */
+    readonly draftSkills?: (token: string, target: QaSlashDraftTarget) => Promise<{
+        readonly skills: readonly QaSlashNativeSkill[];
+        readonly grantedSkills: readonly string[] | undefined;
+    }>;
     readonly getConfig: () => ResolvedQaSurfaceConfig;
     readonly logger: PluginLogger;
     /**

package/lib/types/slash.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=slash.js.map

package/lib/types/slash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slash.js","sourceRoot":"","sources":["../../src/types/slash.ts"],"names":[],"mappings":""}

package/lib/types/types/access.d.ts

@@ -0,0 +1,43 @@
+import type { QaCapabilityConfig, QaCapabilityDescriptor, QaCapabilitySelection, QaSkillAccess, QaSubrole, QaUserAccess } from "./capability.js";
+import type { QaAccountRole } from "./policy.js";
+export type QaAccessAuditAction = "subrole.created" | "subrole.updated" | "subrole.deleted" | "common.updated" | "assignment.updated" | "skill.assignment-updated";
+export interface QaAccessAuditEvent {
+    readonly timestamp: string;
+    readonly actorId: string;
+    readonly action: QaAccessAuditAction;
+    readonly targetId?: string;
+    /** JSON snapshots serialized at the storage boundary for a strict Remote type. */
+    readonly before?: string;
+    readonly after?: string;
+}
+/** Admin table row: credentials and token material are never projected. */
+export interface QaAccessUser {
+    readonly id: string;
+    readonly email: string;
+    readonly displayName: string;
+    readonly accessRole: QaAccountRole;
+    readonly disabled: boolean;
+    readonly access: QaUserAccess;
+}
+/** Ordinary user's role selector data. */
+export interface QaCurrentAccess {
+    readonly subroles: readonly QaSubrole[];
+    readonly defaultSubrole: string;
+}
+/** The role pinned to one existing session. */
+export interface QaSessionAccess {
+    readonly subrole: QaSubrole;
+    readonly adminPreview: boolean;
+}
+/** One authoritative payload for the /qa/admin application. */
+export interface QaAccessAdminSnapshot {
+    readonly config: QaCapabilityConfig;
+    /** Immutable capabilities inherited by every role; exposed read-only. */
+    readonly systemRequired: QaCapabilitySelection;
+    readonly catalog: readonly QaCapabilityDescriptor[];
+    /** Every discovered skill with its declared audience and grant ceiling. */
+    readonly skills: readonly QaSkillAccess[];
+    readonly users: readonly QaAccessUser[];
+    readonly audit: readonly QaAccessAuditEvent[];
+}
+//# sourceMappingURL=access.d.ts.map