@yadsh/dsh-qa-surface 0.15.7 → 0.17.0

package/lib/types/access/capability-catalog.d.ts

@@ -1,6 +1,6 @@
 import type { Agent } from "@deepseek-ai/dsh-agent";
 import type { Context } from "@deepseek-ai/cordis";
-import type { ScopeKey } from "@deepseek-ai/dsh-scope";
+import { type ScopeKey } from "@deepseek-ai/dsh-scope";
 import type { SkillSummary } from "@deepseek-ai/dsh-skill";
 import type { QaCapabilityDescriptor, QaSkillDescriptor } from "../types.js";
 export interface CapabilityCatalogSnapshot {

package/lib/types/access/service.d.ts

@@ -126,6 +126,11 @@ export declare class QaAccessService {
     reclaimDelegatedSessions(): Promise<void>;
     /** Throttled, off the critical path, and never awaited by a request. */
     private maybeSweepDelegatedSessions;
+    /** Read-only preview for the role a draft will materialize; reserves nothing. */
+    slashDraftSkills(token: string, requestedSubrole: string | null, adminPreview: boolean): Promise<{
+        skills: import("@deepseek-ai/dsh-skill").SkillSummary[];
+        policy: QaEffectiveCapabilityPolicy | undefined;
+    }>;
     current(token: string): QaCurrentAccess;
     session(token: string, sessionId: string): QaSessionAccess;
     reserveSession(token: string, sessionId: string, requestedSubrole: string | null, adminPreview: boolean): QaAccountUserPublic;
@@ -185,6 +190,8 @@ export declare class QaAccessService {
      *   foreign browser never reaches it.
      */
     policyForColdSession(token: string, sessionId: string): Promise<QaEffectiveCapabilityPolicy>;
+    /** A participant's own live ceiling, without claiming or changing the chat. */
+    participantPolicy(userId: string, sessionId: string): Promise<QaEffectiveCapabilityPolicy>;
     /** The browser's entry point: the token resolves the owning account. */
     policyForSession(token: string, sessionId: string, agent: Agent): Promise<QaResolvedSessionPolicy | undefined>;
     /** Activation history of one session, for review and quality analysis. */

package/lib/types/access.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=access.js.map

package/lib/types/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../../src/types/access.ts"],"names":[],"mappings":""}

package/lib/types/account-remotes.d.ts

@@ -81,6 +81,9 @@ export interface QaAccountRemotes {
     revokeServiceToken(token: string, tokenId: string): {
         readonly revoked: boolean;
     };
+    setServiceTokenClarifications(token: string, tokenId: string, allowed: boolean): {
+        readonly updated: boolean;
+    };
 }
 /** Build the account-remotes context for one `QaSurface` service instance. */
 export declare function createQaAccountRemotes(options: {

package/lib/types/accounts/database.d.ts

@@ -13,6 +13,7 @@ interface PasswordResetRow {
  * nowhere else.
  */
 export interface StoredServiceToken {
+    readonly allowClarifications: boolean;
     readonly id: string;
     readonly userId: string;
     readonly label: string;
@@ -95,6 +96,10 @@ export declare class QaAccountsDatabase {
     deleteOwnership(sessionIds: readonly string[]): void;
     /** Record one freshly minted integration token (digest only, never a secret). */
     insertServiceToken(token: StoredServiceToken): void;
+    /** Store the authenticated token policy before admitting its request to the inbox. */
+    recordIntegrationRequestPolicy(sessionId: string, requestId: string, allowed: boolean): void;
+    integrationClarificationsAllowed(sessionId: string, requestId: string): boolean;
+    setServiceTokenClarifications(userId: string, tokenId: string, allowed: boolean): boolean;
     /**
      * One integration token by id, revoked and expired ones included.
      *

package/lib/types/accounts/store.d.ts

@@ -41,8 +41,9 @@ export interface QaSessionFacts {
 export interface QaServiceTokenIssueInput {
     /** A note for the operator's token list; empty becomes a generic label. */
     readonly label?: string;
-    /** Requested scopes; unknown ones are dropped, empty falls back to `ask`. */
+    /** Requested scopes; unknown ones are dropped, explicit empty grants none. */
     readonly scopes?: readonly string[];
+    readonly allowClarifications?: boolean;
     /** How long the token lives; bounded, and the session TTL when omitted. */
     readonly ttlDays?: number;
     /**
@@ -54,6 +55,7 @@ export interface QaServiceTokenIssueInput {
 }
 /** What a presented integration token resolved to. */
 export interface QaVerifiedServiceToken {
+    readonly allowClarifications: boolean;
     readonly tokenId: string;
     readonly userId: string;
     readonly scopes: readonly QaServiceTokenScope[];
@@ -421,6 +423,9 @@ export declare class QaAccounts {
      * @returns true when a live token was revoked.
      */
     revokeServiceToken(token: string, tokenId: string): boolean;
+    recordIntegrationRequestPolicy(sessionId: string, requestId: string, allowed: boolean): void;
+    setServiceTokenClarifications(token: string, tokenId: string, allowed: boolean): boolean;
+    integrationClarificationsAllowed(sessionId: string, requestId: string): boolean;
     /** Revoke one integration token of an account the caller has established. */
     revokeServiceTokenFor(user: QaAccountUserPublic, tokenId: string): boolean;
     /** The caller if it administers the deployment, or a refusal. */
@@ -448,7 +453,7 @@ export declare class QaAccounts {
      * API, which resolves its own service token — need the public shape the
      * token-shaped entries return, without a browser token to hand.
      */
-    accountById(userId: string): QaAccountUserPublic | undefined;
+    accountById(userId: string, includeDisabled?: boolean): QaAccountUserPublic | undefined;
     findUser(email: string): QaAccountUserPublic | undefined;
     /**
      * Operator write: replace one account's profile, addressed by email. The

package/lib/types/accounts.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=accounts.js.map

package/lib/types/accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts.js","sourceRoot":"","sources":["../../src/types/accounts.ts"],"names":[],"mappings":""}

package/lib/types/admin/session-log.d.ts

@@ -26,6 +26,8 @@ export interface QaStoredSessionHeader {
     readonly cwd?: string;
     /** Set on a subagent's session; such sessions are not conversations. */
     readonly parentSessionId?: string;
+    /** Ordinary seeded branch; never a delegated run. */
+    readonly isFork?: boolean;
     readonly agentPreset?: string;
 }
 export type QaSessionReadResult = {

package/lib/types/admin.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=admin.js.map

package/lib/types/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/types/admin.ts"],"names":[],"mappings":""}

package/lib/types/agent-scope.d.ts

@@ -0,0 +1,4 @@
+import { type ScopeKey } from "@deepseek-ai/dsh-scope";
+/** Resolve the context's native scope, with Agent identity as a legacy fallback. */
+export declare function qaAgentScope(agent: unknown): ScopeKey | undefined;
+//# sourceMappingURL=agent-scope.d.ts.map

package/lib/types/answer-review.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=answer-review.js.map

package/lib/types/answer-review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"answer-review.js","sourceRoot":"","sources":["../../src/types/answer-review.ts"],"names":[],"mappings":""}

package/lib/types/capability.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=capability.js.map

package/lib/types/capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.js","sourceRoot":"","sources":["../../src/types/capability.ts"],"names":[],"mappings":""}

package/lib/types/chat-sharing/native-fence.d.ts

@@ -0,0 +1,11 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { IncomingMessage, ServerResponse } from "node:http";
+declare module "@deepseek-ai/cordis" {
+    interface Events {
+        "connection/request"(request: IncomingMessage, response: ServerResponse, next: () => Promise<void>): Promise<void>;
+    }
+}
+export declare function qaNativeEndpointDenied(endpoint: string): boolean;
+/** Native operator APIs carry no QA identity. Accounts use the QA transport. */
+export declare function installQaNativeFence(ctx: Context, enabled: () => boolean): () => void;
+//# sourceMappingURL=native-fence.d.ts.map

package/lib/types/chat-sharing/resources.d.ts

@@ -0,0 +1,5 @@
+import type { Context } from "@deepseek-ai/cordis";
+/** Paths reach recipients only through the chat's sources or reported outputs. */
+export declare function qaChatPublishedFile(ctx: Context, id: string, requested: string, sourceAllowed: (id: string, path: string) => boolean): boolean;
+export declare function qaChatAttachmentPath(ctx: Context, id: string, attachmentId: string): string;
+//# sourceMappingURL=resources.d.ts.map

package/lib/types/chat-sharing/store.d.ts

@@ -0,0 +1,29 @@
+import { SqliteDatabase } from "@yadsh/dsh-plugin-kit/sqlite";
+import type { QaAccounts } from "../accounts/store.js";
+import type { QaChatAccess, QaChatGrant, QaChatMode, QaChatAuthor } from "./types.js";
+/** Separate schema: installing sharing does not upgrade the accounts CLI's DB. */
+export declare class QaChatSharingStore {
+    private readonly accounts;
+    readonly storage: SqliteDatabase;
+    constructor(filePath: string, accounts: () => QaAccounts);
+    access(token: string, sessionId: string): QaChatAccess;
+    private accessForActor;
+    owner(token: string, sessionId: string): QaChatAccess;
+    write(token: string, sessionId: string): QaChatAccess;
+    /** Exact address lookup after ownership, never an account directory. */
+    set(token: string, sessionId: string, email: string, mode: QaChatMode | null): readonly QaChatGrant[];
+    grants(token: string, sessionId: string): readonly QaChatGrant[];
+    visible(token: string): readonly QaChatAccess[];
+    revalidate(token: string, previous: QaChatAccess): QaChatAccess;
+    recordAuthor(token: string, access: QaChatAccess, requestId: string): void;
+    authors(token: string, sessionId: string): readonly QaChatAuthor[];
+    requestActor(sessionId: string, requestId: string): {
+        userId: string;
+        revision: number | null;
+    } | undefined;
+    /** Copy only immutable attribution for the native prefix, never memberships. */
+    forkAuthors(sourceId: string, targetId: string, requests: readonly string[]): void;
+    dropSession(id: string): void;
+    actorStillAllowed(sessionId: string, userId: string, revision: number): boolean;
+}
+//# sourceMappingURL=store.d.ts.map

package/lib/types/chat-sharing/transport.d.ts

@@ -0,0 +1,32 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { SessionControlFrame, SessionFollowFrame, SessionFollowRequest, SessionPageRequest, SessionPage, SessionListValue, SessionProjectionsValue, SessionPromptRequest, SessionPromptValue, SessionAttachmentRequest, SessionAttachmentValue, SessionRenameRequest, SessionRenameValue, SessionCancelValue, SessionUpdateQueueRequest, SessionUpdateQueueValue, SessionSearchRequest, SessionSearchValue, SessionSelectModelRequest, SessionSelectModelValue } from "@deepseek-ai/dsh-api-session-controller/types";
+import type { QaChatSharingStore } from "./store.js";
+/** Durable access is checked before and after asynchronous reads and per frame. */
+export declare class QaChatTransport {
+    private readonly ctx;
+    private readonly store;
+    private readonly admit;
+    private readonly participantPolicy?;
+    private readonly locks;
+    constructor(ctx: Context, store: () => QaChatSharingStore, admit: (token: string, id: string) => Promise<unknown>, participantPolicy?: ((userId: string, id: string) => Promise<unknown>) | undefined);
+    list(token: string, signal: AbortSignal): Promise<SessionListValue>;
+    private filterListing;
+    page(token: string, request: SessionPageRequest, signal: AbortSignal): Promise<SessionPage>;
+    search(token: string, request: SessionSearchRequest, signal: AbortSignal): Promise<SessionSearchValue>;
+    projections(token: string, id: string, signal: AbortSignal): Promise<SessionProjectionsValue>;
+    follow(token: string, request: SessionFollowRequest, signal: AbortSignal): AsyncIterable<SessionFollowFrame>;
+    control(token: string, signal: AbortSignal): AsyncIterable<SessionControlFrame>;
+    /** Queue admission is serialized, rechecked after resume, and signed before insertion. */
+    prompt(token: string, request: SessionPromptRequest, signal: AbortSignal): Promise<SessionPromptValue>;
+    attachment(token: string, request: SessionAttachmentRequest): Promise<SessionAttachmentValue>;
+    rename(token: string, request: SessionRenameRequest): Promise<SessionRenameValue>;
+    selectModel(token: string, request: SessionSelectModelRequest): Promise<SessionSelectModelValue>;
+    cancel(token: string, id: string): Promise<SessionCancelValue>;
+    updateQueue(token: string, request: SessionUpdateQueueRequest): Promise<SessionUpdateQueueValue>;
+    private ownerOperation;
+    private serial;
+    private sessionAccess;
+    private addressAccess;
+    private signRecord;
+}
+//# sourceMappingURL=transport.d.ts.map

package/lib/types/chat-sharing/turn-guard.d.ts

@@ -0,0 +1,21 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { QaChatSharingStore } from "./store.js";
+import type { QaEffectiveCapabilityPolicy } from "../types.js";
+/** A mixed batch receives the intersection, never the union, of actor rights. */
+export declare class QaChatTurnGuard {
+    private readonly ctx;
+    private readonly store;
+    private readonly policy;
+    private readonly enabled;
+    private readonly resourceSafe;
+    private readonly actors;
+    private readonly disposers;
+    constructor(ctx: Context, store: () => QaChatSharingStore, policy: (userId: string, sessionId: string) => Promise<QaEffectiveCapabilityPolicy>, enabled?: () => boolean, resourceSafe?: (tool: string) => boolean);
+    private root;
+    private participants;
+    collaborative(sessionId: string): boolean;
+    /** Called after permission mutation. Only a turn carrying stale input stops. */
+    revoke(sessionId: string): void;
+    dispose(): void;
+}
+//# sourceMappingURL=turn-guard.d.ts.map

package/lib/types/chat-sharing/types.d.ts

@@ -0,0 +1,25 @@
+export type QaChatMode = "read" | "collaborate";
+export interface QaChatAccess {
+    readonly sessionId: string;
+    readonly ownerId: string;
+    readonly ownerName: string;
+    readonly actorId: string;
+    readonly mode: QaChatMode | "owner";
+    readonly revision: number;
+}
+export interface QaChatGrant {
+    readonly userId: string;
+    readonly email: string;
+    readonly displayName: string;
+    readonly mode: QaChatMode;
+}
+export interface QaChatAuthor {
+    readonly requestId: string;
+    readonly userId: string;
+    readonly displayName: string;
+}
+/** JSON-shaped native frames; the local recursive codec owns the wire schema. */
+export type QaChatJson = null | string | number | boolean | readonly QaChatJson[] | {
+    readonly [key: string]: QaChatJson;
+};
+//# sourceMappingURL=types.d.ts.map

package/lib/types/chat-sharing/uploads.d.ts

@@ -0,0 +1,5 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { QaChatSharingStore } from "./store.js";
+/** Authenticate before transferring the body, and fence every uploaded chunk. */
+export declare function installQaChatUploads(ctx: Context, store: () => QaChatSharingStore, admit: (token: string, id: string) => Promise<unknown>): () => Promise<void>;
+//# sourceMappingURL=uploads.d.ts.map

package/lib/types/client/QaAccountsController.d.ts

@@ -37,6 +37,7 @@ export type QaAccountsSnapshot = {
     readonly ownership: readonly QaOwnershipEntry[];
     /** Bumped whenever ownedIds, ownIds or ownership changes; re-projects lists. */
     readonly ownedRevision: number;
+    readonly sharedChats?: readonly import("../chat-sharing/types.js").QaChatAccess[];
 };
 /** The Host's password floor, mirrored so a refusal and its copy name the same number. */
 export declare const QA_MIN_PASSWORD_LENGTH = 8;
@@ -180,6 +181,7 @@ export declare class QaAccountsController {
      * authority on whose token it is; a refusal is shown as it arrives.
      */
     revokeServiceToken(tokenId: string): Promise<QaIntegrationTokenResult<null>>;
+    setServiceTokenClarifications(tokenId: string, allowed: boolean): Promise<QaIntegrationTokenResult<null>>;
     private authenticate;
     /** Own the account, migrate the legacy index, replay held ratings, then auth. */
     private enterSession;
@@ -188,6 +190,8 @@ export declare class QaAccountsController {
     /** The admin cross-user ownership view; failures degrade to an empty map. */
     private fetchOwnership;
     /** Session id → owner display name; empty unless an admin is signed in. */
+    private fetchSharedChats;
+    /** Session id → owner display name; empty unless an admin is signed in. */
     ownerNames(): ReadonlyMap<string, string>;
     /**
      * The chat owner's display name for author labels: admins see it on

package/lib/types/client/QaConfigController.d.ts

@@ -13,7 +13,8 @@ export type QaConfigFallback = () => Promise<ResolvedQaSurfaceConfig>;
  * The DSH gateway pins settings RPCs to loopback, so a browser served over the
  * LAN always sees the namespace as `unavailable`. When the caller supplies the
  * `qaSurface/describe` Remote as a fallback, that channel answers instead: the
- * projection waits in `loading` until it settles, then reports the Host-owned
+ * projection asks this channel even while a fenced settings request remains
+ * in `loading`, then reports the Host-owned
  * configuration as `ready`. A rejected fallback returns the projection to
  * `unavailable`, exactly as when no fallback exists.
  */
@@ -43,7 +44,7 @@ export declare class QaConfigController {
     refreshFallback(): void;
     /**
      * The fallback trigger rides every refresh: the scope flips to
-     * `unavailable` whenever the browser is served over the LAN, which a
+     * `unavailable` or stuck in `loading` when the gateway fences settings, which a
      * constructor-time check can miss. The state guard makes repeats a no-op,
      * so one fetch runs per controller lifetime; the recursive refresh lets the
      * pending state surface before the first notification pass.

package/lib/types/client/QaSessionController.d.ts

@@ -1,6 +1,7 @@
 import type { ConnectionGenerationState } from "@deepseek-ai/dsh-client-connection/client";
+import type { QaSharingApi } from "./chat-sharing-api.js";
 import type { QaAttachmentDraft, QaQueueOperation, QaSessionState, ResolvedQaSurfaceConfig } from "../types.js";
-import type { QaApprovalApi, QaConversation, QaCreateSession, QaFileUpload, QaQueueStatusRemote, QaSecureSession, QaSessions, QaSessionsApi, QaQuestionApi, QaSlashApi, QaSourceApi, StorageLike } from "./types.js";
+import type { QaApprovalApi, QaConversation, QaCreateSession, QaForkSession, QaFileUpload, QaQueueStatusRemote, QaSecureSession, QaSessions, QaSessionsApi, QaQuestionApi, QaSlashApi, QaSourceApi, StorageLike } from "./types.js";
 import type { QaApprovalDecision, QaQuestionAnswerItem } from "../types.js";
 declare module "@deepseek-ai/dsh-api-session-controller/client" {
     interface SessionReferenceSourceMap {
@@ -24,9 +25,11 @@ export interface QaAccountsFacade {
     readonly onAuthRequired: () => void;
 }
 export interface QaSessionControllerOptions {
+    readonly sharingApi?: QaSharingApi;
     readonly sessions: QaSessions;
     readonly api: QaSessionsApi;
     readonly createSession: QaCreateSession;
+    readonly forkSession?: QaForkSession;
     /** Conversation assembly feeding the transcript projection. */
     readonly conversation: QaConversation;
     readonly connection: ConnectionGenerationState;
@@ -87,6 +90,9 @@ export declare class QaSessionController {
     private readonly listeners;
     private readonly sessions;
     private readonly createSessionRemote;
+    private readonly forkSessionRemote?;
+    private forking;
+    private inheritedThroughSeq;
     private readonly conversation;
     private readonly connection;
     private readonly config;
@@ -139,6 +145,9 @@ export declare class QaSessionController {
     private viewingSubagent;
     private connectedOnce;
     private disposed;
+    private chatAccess;
+    private readonly sharingApi;
+    private accessPoll;
     private generation;
     /**
      * The session the current chat identity names, or null while the chat it
@@ -192,6 +201,7 @@ export declare class QaSessionController {
     private slashError;
     private slashLoadedAt;
     private slashLoading;
+    private slashReadRevision;
     /** Last published view; its identity is the render signal. */
     private slashViewCache;
     /** Bumped to re-open a palette the user dismissed; see `QaSlashView`. */
@@ -221,7 +231,7 @@ export declare class QaSessionController {
      * call this surface makes — while a human command goes to the Host's command
      * runtime and never becomes a model message.
      */
-    send(text: string, attachments?: readonly QaAttachmentDraft[], pick?: string | null): Promise<boolean>;
+    send(text: string, attachments?: readonly QaAttachmentDraft[], pick?: string | null, fastReview?: boolean): Promise<boolean>;
     /**
      * What the stand answers about its load, or null when it does not answer.
      *
@@ -253,6 +263,7 @@ export declare class QaSessionController {
      * skill registry has no browser-facing change event, so a skill installed
      * while the page is open is only discovered by asking again.
      */
+    private slashReadTarget;
     refreshSlashCatalog(force?: boolean): Promise<void>;
     /**
      * Install one catalog answer. `null` means the deployment runs with the
@@ -281,7 +292,7 @@ export declare class QaSessionController {
      * hides the marker message, and the consecutive turns read as variants of
      * the original question (switched in the surface).
      */
-    regenerate(): Promise<boolean>;
+    regenerate(fastReview?: boolean): Promise<boolean>;
     stop(): Promise<void>;
     /**
      * Edit, send now, or drop one message that still waits for its turn. Every
@@ -327,6 +338,8 @@ export declare class QaSessionController {
      * deployment's only chance to learn the reason.
      */
     private materializeDraft;
+    /** Branch a completed answer without submitting or cancelling a turn. */
+    forkFromAnswer(answerSeq: number): Promise<void>;
     /**
      * Open one of this browser's indexed chats. The id must be present in the
      * host session list and pass policy attestation; an unknown id is forgotten
@@ -557,6 +570,7 @@ export declare class QaSessionController {
      */
     private attestPolicy;
     private emit;
+    private refreshChatAccess;
     /**
      * Answer a request the Host parked for this chat. The Host re-checks the
      * request against the chat, so an answer that lost its race is a no-op; the

package/lib/types/client/QaSurface.d.ts

@@ -3,19 +3,24 @@ import type { InjectFace, PropsRenderSlots, PropsRuntime } from "@deepseek-ai/ds
 import type { QaConfigController } from "./QaConfigController.js";
 import type { QaRouteController } from "./QaRouteController.js";
 import type { QaAccountsController } from "./QaAccountsController.js";
-import type { QaApprovalApi, QaAccessApi, QaAdminApi, QaConversation, QaCreateSession, QaFileUpload, QaQueueStatusRemote, QaSecureSession, QaSessions, QaSessionsApi, QaQuestionApi, QaSkillApi, QaSlashApi, QaSourceApi } from "./types.js";
+import type { QaApprovalApi, QaAccessApi, QaAdminApi, QaConversation, QaCreateSession, QaForkSession, QaFileUpload, QaQueueStatusRemote, QaSecureSession, QaSessions, QaSessionsApi, QaQuestionApi, QaSkillApi, QaSlashApi, QaSourceApi } from "./types.js";
 import type { QaSurfacePanelRegistry } from "./panels/registry.js";
 import type { QaUserSettingsSections } from "./settings-extensions/index.js";
 import type { QaAuditController } from "./audit/controller.js";
+import type { QaSharingApi } from "./chat-sharing-api.js";
 export interface QaSurfaceFace {
+    readonly sharingApi?: QaSharingApi;
     readonly route: QaRouteController;
     readonly config: QaConfigController;
     readonly sessions: QaSessions;
     readonly conversation: QaConversation;
+    /** Select the authenticated transport after asynchronous Host config loads. */
+    readonly resolveRuntime?: (accountsEnabled: boolean) => Pick<QaSurfaceFace, "sessions" | "conversation">;
     readonly api: QaSessionsApi;
     readonly connection: ConnectionGenerationState;
     readonly secureSession: QaSecureSession;
     readonly createSession: QaCreateSession;
+    readonly forkSession?: QaForkSession;
     readonly accessApi: QaAccessApi;
     /**
      * The administrative console's surface. Optional so an older Host that does

package/lib/types/client/account-conversation.d.ts

@@ -0,0 +1,6 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { UiConversation } from "@deepseek-ai/dsh-client-ui-conversation/client";
+import type { QaSessions } from "./types.js";
+/** Native assembly must use the same Session scope as the secured transport. */
+export declare function createQaAccountConversation(ctx: Context, sessions: QaSessions, source: UiConversation): UiConversation;
+//# sourceMappingURL=account-conversation.d.ts.map

package/lib/types/client/account-sessions.d.ts

@@ -0,0 +1,7 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { QaSessions } from "./types.js";
+import type { QaChatWire, QaSessionRemotes } from "./chat-sharing-api.js";
+import type { ConnectionGenerationState } from "@deepseek-ai/dsh-client-connection/client";
+/** Use the installed native Session class and projections with a tokenized transport. */
+export declare function createQaAccountSessions(ctx: Context, root: QaSessions, remote: QaSessionRemotes, wire: QaChatWire, token: () => string | null, generation: ConnectionGenerationState, subscribeAccount: (listener: () => void) => () => void): QaSessions;
+//# sourceMappingURL=account-sessions.d.ts.map

package/lib/types/client/account-upload.d.ts

@@ -0,0 +1,15 @@
+import type { QaFileUpload } from "./types.js";
+export interface QaUploadCarrier {
+    post(request: {
+        path: string;
+        body: Blob;
+        headers: Record<string, string>;
+        signal?: AbortSignal;
+    }): Promise<{
+        status: number;
+        body: string;
+    }>;
+}
+/** Use the native background carrier, addressed to the authenticated QA route. */
+export declare function createQaAccountUpload(carrier: () => QaUploadCarrier | undefined, token: () => string | null): QaFileUpload;
+//# sourceMappingURL=account-upload.d.ts.map

package/lib/types/client/answer-review.d.ts

@@ -0,0 +1,16 @@
+import type { SessionEventLike } from "@deepseek-ai/dsh-api-session-controller/client";
+import type { ConversationNodeDefinition, ConversationSnapshot } from "@deepseek-ai/dsh-client-ui-conversation/client";
+import type { QaAnswerReview } from "../types/answer-review.js";
+export declare const QA_REVIEW_NODE = "qa-answer-review";
+declare module "@deepseek-ai/dsh-client-ui-chat/client" {
+    interface ChatNodeDataMap {
+        "qa-answer-review": QaAnswerReview;
+    }
+}
+/** Read only the gate's producer metadata; answer prose never supplies a verdict. */
+export declare function readAnswerReview(event: SessionEventLike): QaAnswerReview | null;
+export declare function parseAnswerReview(receipt: unknown): QaAnswerReview | null;
+/** One current result per human request, with the latest answer's anchor. */
+export declare const answerReviewConversationDefinition: ConversationNodeDefinition<QaAnswerReview>;
+export declare function answerReviewsOf(snapshot: ConversationSnapshot | undefined): ReadonlyMap<number, QaAnswerReview>;
+//# sourceMappingURL=answer-review.d.ts.map

package/lib/types/client/chat-sharing-api.d.ts

@@ -0,0 +1,35 @@
+import type { createSessionControlStream } from "@deepseek-ai/dsh-api-session-controller/client";
+import type { RemoteResult, RemoteStreamHandle } from "@deepseek-ai/dsh-typert-protocol";
+import type * as Native from "@deepseek-ai/dsh-api-session-controller/types";
+import type { QaChatAccess, QaChatAuthor, QaChatGrant, QaChatMode, QaChatJson } from "../chat-sharing/types.js";
+export interface QaSharingApi {
+    attachmentPath?(token: string, id: string, attachmentId: string): Promise<RemoteResult<string>>;
+    access(token: string, id: string): Promise<RemoteResult<QaChatAccess>>;
+    visible(token: string): Promise<RemoteResult<readonly QaChatAccess[]>>;
+    grants(token: string, id: string): Promise<RemoteResult<readonly QaChatGrant[]>>;
+    set(token: string, id: string, email: string, mode: QaChatMode | null): Promise<RemoteResult<readonly QaChatGrant[]>>;
+}
+/** Handwritten face is checked against the generated transport at package build. */
+export interface QaChatWire {
+    chatAudit(token: string, id: string, full: boolean): Promise<RemoteResult<QaChatJson>>;
+    chatAttachmentPath(token: string, id: string, attachmentId: string): Promise<RemoteResult<string>>;
+    chatAccess(token: string, id: string): ReturnType<QaSharingApi["access"]>;
+    chatVisible(token: string): ReturnType<QaSharingApi["visible"]>;
+    chatGrants(token: string, id: string): ReturnType<QaSharingApi["grants"]>;
+    chatSetGrant(token: string, id: string, email: string, mode: QaChatMode | null): ReturnType<QaSharingApi["set"]>;
+    chatAuthors(token: string, id: string): Promise<RemoteResult<readonly QaChatAuthor[]>>;
+    chatList(token: string, signal?: AbortSignal): Promise<RemoteResult<Native.SessionListValue>>;
+    chatSearch(token: string, request: Native.SessionSearchRequest, signal?: AbortSignal): Promise<RemoteResult<Native.SessionSearchValue>>;
+    chatSelectModel(token: string, request: Native.SessionSelectModelRequest): Promise<RemoteResult<Native.SessionSelectModelValue>>;
+    chatPage(token: string, request: Native.SessionPageRequest, signal?: AbortSignal): Promise<RemoteResult<Native.SessionPage>>;
+    chatFollow(token: string, request: Native.SessionFollowRequest, signal?: AbortSignal): RemoteStreamHandle<Native.SessionFollowFrame, never>;
+    chatControl(token: string, signal?: AbortSignal): RemoteStreamHandle<Native.SessionControlFrame, never>;
+    chatProjections(token: string, id: string, signal?: AbortSignal): Promise<RemoteResult<Native.SessionProjectionsValue>>;
+    chatPrompt(token: string, request: Native.SessionPromptRequest, signal?: AbortSignal): Promise<RemoteResult<Native.SessionPromptValue>>;
+    chatAttachment(token: string, request: Native.SessionAttachmentRequest): Promise<RemoteResult<Native.SessionAttachmentValue>>;
+    chatRename(token: string, request: Native.SessionRenameRequest): Promise<RemoteResult<Native.SessionRenameValue>>;
+    chatCancel(token: string, id: string): Promise<RemoteResult<Native.SessionCancelValue>>;
+    chatUpdateQueue(token: string, request: Native.SessionUpdateQueueRequest): Promise<RemoteResult<Native.SessionUpdateQueueValue>>;
+}
+export type QaSessionRemotes = Parameters<typeof createSessionControlStream>[0];
+//# sourceMappingURL=chat-sharing-api.d.ts.map

package/lib/types/client/components/QaAnswerReviewStatus.d.ts

@@ -0,0 +1,8 @@
+import type { PropsRuntime } from "@deepseek-ai/dsh-client-ui-slots";
+import type { QaAnswerReview } from "../../types/answer-review.js";
+export declare function QaAnswerReviewStatus({ review, }: {
+    readonly review: QaAnswerReview;
+}): import("react/jsx-runtime").JSX.Element;
+export declare function QaNativeAnswerReviewStatus({ node, }: PropsRuntime<"conversation.chat.node", "qa-answer-review">): import("react/jsx-runtime").JSX.Element;
+export declare const QA_REVIEW_STYLES = "\n.dsh-qa-review-row{padding:4px 0 12px}\n.dsh-qa-review{display:inline-flex;align-items:center;gap:6px;max-width:100%;margin:8px 0 0;padding:4px 9px;border:1px solid var(--dsw-alias-border-l2);border-radius:999px;color:var(--dsw-alias-label-secondary);background:var(--dsw-alias-bg-layer-2);font-size:12px;line-height:18px}\n.dsh-qa-review svg{width:14px;height:14px;flex:none;fill:none;stroke:currentColor;stroke-width:1.5;stroke-linecap:round;stroke-linejoin:round}\n.dsh-qa-review[data-status=pass]{color:var(--dsw-alias-state-success-primary,var(--dsw-alias-label-primary))}\n";
+//# sourceMappingURL=QaAnswerReviewStatus.d.ts.map

package/lib/types/client/components/QaChatActions.d.ts

@@ -0,0 +1,7 @@
+/** Quiet actions attached to one owned chat, outside the conversation header. */
+export declare function QaChatActions(props: {
+    name: string;
+    onShare: () => void;
+    onDelete?: (trigger: HTMLButtonElement) => void;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=QaChatActions.d.ts.map

package/lib/types/client/components/QaChatSharing.d.ts

@@ -0,0 +1,12 @@
+import type { QaSharingApi } from "../chat-sharing-api.js";
+import type { QaChatAccess } from "../../chat-sharing/types.js";
+export declare const qaChatModeLabel: (mode: QaChatAccess["mode"]) => string;
+export declare function QaChatSharing(props: {
+    access: QaChatAccess;
+    token: string;
+    api: QaSharingApi;
+    open: boolean;
+    onClose: () => void;
+}): import("react/jsx-runtime").JSX.Element | null;
+export declare const QA_SHARING_STYLES = "\n.dsh-qa-sharing__body{font-size:13px;color:var(--dsw-alias-label-secondary)}\n.dsh-qa-sharing__intro{margin:0 0 8px;line-height:1.5}\n.dsh-qa-sharing__details{color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:1.5}\n.dsh-qa-sharing__details summary{cursor:pointer}\n.dsh-qa-sharing__body .dsh-qa-btn{appearance:none;cursor:pointer;min-height:36px;font:inherit;color:var(--dsw-alias-label-primary);background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2);border-radius:8px;padding:7px 12px}\n.dsh-qa-sharing__body .dsh-qa-btn:hover{background:var(--dsw-alias-bg-layer-3)}\n.dsh-qa-sharing__body .dsh-qa-btn:disabled{cursor:default;opacity:.55}\n.dsh-qa-sharing__body .dsh-qa-btn:focus-visible{outline:var(--dsw-focus-ring-width,2px) solid var(--dsw-focus-ring-color,var(--dsw-alias-brand-primary));outline-offset:2px}\n.dsh-qa-sharing__form{display:grid;grid-template-columns:minmax(0,1fr) minmax(0,160px);gap:12px;margin:20px 0}\n.dsh-qa-sharing__form>.dsh-qa-btn{grid-column:1/-1;justify-self:start}\n.dsh-qa-sharing__body label{display:flex;flex-direction:column;gap:6px}\n.dsh-qa-sharing__body input,.dsh-qa-sharing__body select{font:inherit;color:var(--dsw-alias-label-primary);background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2);border-radius:8px;padding:8px;min-width:0;max-width:100%}\n.dsh-qa-sharing__people{list-style:none;padding:0;margin:16px 0}\n.dsh-qa-sharing__people li{display:flex;gap:10px;align-items:center;flex-wrap:wrap;padding:12px 0;border-top:1px solid var(--dsw-alias-border-l2)}\n.dsh-qa-sharing__people span{flex:1;min-width:140px;overflow-wrap:anywhere}\n.dsh-qa-sharing__people small{display:block;color:var(--dsw-alias-label-tertiary)}\n@media(max-width:480px){.dsh-qa-sharing__form{grid-template-columns:minmax(0,1fr)}}\n";
+//# sourceMappingURL=QaChatSharing.d.ts.map

package/lib/types/client/components/QaComposer.d.ts

@@ -2,6 +2,8 @@ import type { QaAttachmentDraft, QaSlashView, ResolvedQaSlashCommands } from "..
 import { type QaAttachmentLimits } from "../attachments.js";
 import type { QaQuickQuestion } from "../types.js";
 export interface QaComposerProps {
+    readonly fastMode?: boolean;
+    readonly onFastModeChange?: (enabled: boolean) => void;
     readonly placeholder: string;
     /** Shown while the chat is empty; the label reads, the prompt sends. */
     readonly quickQuestions?: readonly QaQuickQuestion[];

package/lib/types/client/components/QaFileAttachment.d.ts

@@ -1,6 +1,6 @@
 export interface QaFileAttachmentProps {
     readonly name: string;
-    readonly bytes: number;
+    readonly bytes: number | null;
     /** Pending draft vs already-sent attachment: pending offers removal. */
     readonly tone: "draft" | "sent";
     readonly onRemove?: () => void;
@@ -12,6 +12,7 @@ export interface QaFileAttachmentProps {
     readonly onOpen?: () => void;
     /** Save the file. Omitted where the surface cannot read its bytes. */
     readonly onDownload?: () => void;
+    readonly onApprove?: () => Promise<void>;
 }
 /**
  * One attached file: the extension badge, the name and the size. A sent
@@ -19,5 +20,5 @@ export interface QaFileAttachmentProps {
  * re-reads its bytes; a file the turn produced is the same chip with the two
  * controls that make it usable — open it, or take it away.
  */
-export declare function QaFileAttachment({ name, bytes, tone, onRemove, onOpen, onDownload, }: QaFileAttachmentProps): import("react/jsx-runtime").JSX.Element;
+export declare function QaFileAttachment({ name, bytes, tone, onRemove, onOpen, onDownload, onApprove, }: QaFileAttachmentProps): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=QaFileAttachment.d.ts.map