@yadsh/dsh-qa-surface 0.15.7 → 0.17.0

package/lib/types/client/components/QaFilesPanel.d.ts

@@ -9,8 +9,11 @@ export interface QaFilesPanelProps {
     readonly onJumpToMessage: (messageId: string) => void;
     /** Open a produced file in the workspace viewer below. */
     readonly onArtifactOpen?: (artifact: QaArtifactView) => void;
+    readonly onAttachmentOpen?: (file: import("../../types.js").QaFileView) => void;
+    readonly materialsOnly?: boolean;
     /** Save a produced file. */
     readonly onArtifactDownload?: (artifact: QaArtifactView) => void;
+    readonly onArtifactApprove?: (artifact: QaArtifactView) => Promise<void>;
     /**
      * A file to open on arrival, with the request's stamp. The stamp is what makes
      * a second click on the same card a fresh arrival rather than a no-op.
@@ -36,5 +39,5 @@ export interface QaFilesPanelProps {
  * back, and the images are the same object URLs the message showed — while the
  * workspace section reads through the Host's fenced listing and file reads.
  */
-export declare function QaFilesPanel({ groups, resolveImage, onJumpToMessage, onArtifactOpen, onArtifactDownload, openArtifact, sessionId, api, }: QaFilesPanelProps): import("react/jsx-runtime").JSX.Element;
+export declare function QaFilesPanel({ groups, resolveImage, onJumpToMessage, onArtifactOpen, onAttachmentOpen, materialsOnly, onArtifactDownload, onArtifactApprove, openArtifact, sessionId, api, }: QaFilesPanelProps): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=QaFilesPanel.d.ts.map

package/lib/types/client/components/QaMarkdownPreview.d.ts

@@ -0,0 +1,13 @@
+import type { ReactNode } from "react";
+import type { MarkdownFrontmatter } from "../../markdown-frontmatter.js";
+/** Source-only rendering: original file line numbers survive frontmatter removal. */
+export declare function QaMarkdownPreview({ text, renderFrontmatter, frontmatter, lineStart, lineEnd, renderImage, requestKey, }: {
+    readonly text: string;
+    readonly renderFrontmatter: boolean;
+    readonly frontmatter?: MarkdownFrontmatter;
+    readonly lineStart?: number;
+    readonly lineEnd?: number;
+    readonly renderImage?: (src: string, alt: string) => ReactNode;
+    readonly requestKey?: unknown;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=QaMarkdownPreview.d.ts.map

package/lib/types/client/components/QaMessage.d.ts

@@ -1,4 +1,4 @@
-import type { QaArtifactView, QaMessage as QaMessageModel, QaSource, QaTurnSources } from "../../types.js";
+import type { QaArtifactView, QaFileView, QaMessage as QaMessageModel, QaSource, QaTurnSources } from "../../types.js";
 import type { QaFeedbackReason } from "../../types.js";
 export interface QaMessageProps {
     readonly message: QaMessageModel;
@@ -11,6 +11,7 @@ export interface QaMessageProps {
     readonly stateKey?: string;
     /** Ask for a fresh variant of this answer; omit to hide the control. */
     readonly onRegenerate?: () => void;
+    readonly onFork?: (answerSeq: number) => Promise<void>;
     /** Resolve one durable attachment into a viewable URL. */
     readonly resolveImage?: (attachmentId: string) => Promise<string>;
     /** Open the drawer at the exact canonical snapshot shown in this footer. */
@@ -23,8 +24,10 @@ export interface QaMessageProps {
      * file without promising an action it cannot perform.
      */
     readonly onArtifactOpen?: (artifact: QaArtifactView) => void;
+    readonly onAttachmentOpen?: (file: QaFileView) => void;
     /** Save a produced file. Omitted on the same terms as {@link onArtifactOpen}. */
     readonly onArtifactDownload?: (artifact: QaArtifactView) => void;
+    readonly onArtifactApprove?: (artifact: QaArtifactView) => Promise<void>;
     /** Operator-configured running phrases; omitted reads the built-in list. */
     readonly thinkingPhrases?: readonly string[];
     /**
@@ -47,5 +50,5 @@ export interface QaMessageProps {
  * comparison is by value, which keeps fresh copies cheap to recognize.
  */
 export declare function sameMessage(a: QaMessageModel, b: QaMessageModel): boolean;
-export declare const QaMessage: import("react").MemoExoticComponent<({ message, renderMarkdown, showTimestamp, stateKey, onRegenerate, resolveImage, onOpenSources, onSourceDetail, onArtifactOpen, onArtifactDownload, thinkingPhrases, onRateFeedback, }: QaMessageProps) => import("react/jsx-runtime").JSX.Element>;
+export declare const QaMessage: import("react").MemoExoticComponent<({ message, renderMarkdown, showTimestamp, stateKey, onRegenerate, onFork, resolveImage, onOpenSources, onSourceDetail, onArtifactOpen, onAttachmentOpen, onArtifactDownload, onArtifactApprove, thinkingPhrases, onRateFeedback, }: QaMessageProps) => import("react/jsx-runtime").JSX.Element>;
 //# sourceMappingURL=QaMessage.d.ts.map

package/lib/types/client/components/QaModal.d.ts

@@ -6,6 +6,15 @@ import { type ReactNode } from "react";
  * the dialog is turned back into a page under the scrim.
  */
 export declare function isQaModalOpen(): boolean;
+/**
+ * Join the stack from a shell that draws its own chrome rather than this
+ * panel — the image lightbox is such a shell. One Escape press then closes the
+ * innermost layer instead of every dialog under it.
+ */
+export declare function joinQaDialogStack(): {
+    readonly innermost: () => boolean;
+    readonly leave: () => void;
+};
 export interface QaModalProps {
     readonly open: boolean;
     /** Dialog title; also the dialog's accessible name. */

package/lib/types/client/components/QaRightRail.d.ts

@@ -13,9 +13,10 @@ export interface QaRightRailProps {
     readonly activeTab: QaRailTab;
     readonly onTabSelect: (tab: QaRailTab) => void;
     readonly onClose: () => void;
+    readonly stateKey?: string;
 }
 /**
- * The chat's right rail: a fixed column whose top edge is the tab strip,
+ * The chat's right rail: a resizable column whose top edge is the tab strip,
  * mirroring the Harness right Sidebar's chrome. Tabs are plain chips with
  * counts; the strip's last control collapses the whole column.
  *
@@ -25,5 +26,5 @@ export interface QaRightRailProps {
  * the rail keeps the key: the innermost thing on the page is what the reader
  * means to dismiss.
  */
-export declare function QaRightRail({ tabs, activeTab, onTabSelect, onClose, }: QaRightRailProps): import("react/jsx-runtime").JSX.Element | null;
+export declare function QaRightRail({ tabs, activeTab, onTabSelect, onClose, stateKey, }: QaRightRailProps): import("react/jsx-runtime").JSX.Element | null;
 //# sourceMappingURL=QaRightRail.d.ts.map

package/lib/types/client/components/QaRightRailResize.d.ts

@@ -0,0 +1,9 @@
+import { type RefObject } from "react";
+export declare function resolveQaRightRailWidth(requested: number | null, available: number): number;
+/** A one-sided border drag: moving left widens the panel on the right. */
+export declare function QaRightRailResize(props: {
+    root: RefObject<HTMLElement | null>;
+    storage: Pick<Storage, "getItem" | "setItem">;
+    storageKey: string;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=QaRightRailResize.d.ts.map

package/lib/types/client/components/QaSidebar.d.ts

@@ -2,6 +2,7 @@ import type { SessionSummary } from "@deepseek-ai/dsh-api-session-controller/cli
 import { type QaAuditSummary } from "../audit/types.js";
 /** One renderable row of the chat-history sidebar. */
 export interface QaChatRow {
+    readonly shareable?: boolean;
     readonly id: string;
     readonly title: string;
     readonly running: boolean;
@@ -59,6 +60,7 @@ export interface QaSidebarProps {
     readonly onNewChat: () => void;
     /** Removes a chat from this browser's index; omit to hide the control. */
     readonly onDelete?: (sessionId: string) => void;
+    readonly onShare?: (sessionId: string) => void;
     /**
      * Whether the phone layout shows this sidebar as a drawer over the
      * conversation. The state is the surface's, not the sidebar's: the control

package/lib/types/client/components/QaSourceFilters.d.ts

@@ -0,0 +1,12 @@
+import type { QaSource } from "../../types.js";
+export declare function matchesSourceText(source: QaSource, query: string): boolean;
+export declare function QaSourceFilters({ sources, query, kind, count, onQuery, onKind, onReset, }: {
+    readonly sources: readonly QaSource[];
+    readonly query: string;
+    readonly kind: QaSource["kind"] | "all";
+    readonly count: number;
+    readonly onQuery: (value: string) => void;
+    readonly onKind: (value: QaSource["kind"] | "all") => void;
+    readonly onReset: () => void;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=QaSourceFilters.d.ts.map

package/lib/types/client/components/QaSpreadsheetPreview.d.ts

@@ -0,0 +1,8 @@
+import type { QaSpreadsheetPreview as Preview, QaSpreadsheetPreviewSelection as Selection } from "../../types.js";
+export interface QaSpreadsheetPreviewProps {
+    readonly initial: Preview;
+    readonly load: (selection: Selection) => Promise<Preview>;
+}
+/** Read-only cells, with explicit paging on both axes and no formula execution. */
+export declare function QaSpreadsheetPreview({ initial, load, }: QaSpreadsheetPreviewProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=QaSpreadsheetPreview.d.ts.map

package/lib/types/client/components/QaWelcomeNotice.d.ts

@@ -1,7 +1,7 @@
 import type { SettingsOnboardingOwnerProps } from "@deepseek-ai/dsh-client-ui-settings/client";
 import type { StorageLike } from "../types.js";
 /** Bump when the notice changes materially and must be acknowledged again. */
-export declare const QA_WELCOME_NOTICE_VERSION = "2026-09-12.1";
+export declare const QA_WELCOME_NOTICE_VERSION = "2026-10-11.1";
 export declare const QA_WELCOME_NOTICE_COPY: Readonly<{
     title: "Перед началом тестирования";
     paragraphs: readonly string[];

package/lib/types/client/components/QaWorkspaceBrowser.d.ts

@@ -1,4 +1,10 @@
 import type { QaBoundSourceApi } from "../types.js";
+/**
+ * Object URL for a PDF body, revoked when the payload changes or the panel
+ * closes. A blob URL is what lets the browser's own viewer draw the document
+ * without the bytes ever leaving the page.
+ */
+export declare function usePdfUrl(payload: string | undefined): string | null;
 export interface QaWorkspaceBrowserProps {
     readonly sessionId: string;
     readonly api: QaBoundSourceApi;
@@ -8,6 +14,7 @@ export interface QaWorkspaceBrowserProps {
      * turn produced previews through the same fenced read a browsed file uses.
      */
     readonly initialFile?: string;
+    readonly materialsOnly?: boolean;
 }
 /**
  * The chat's own workspace, browsable from the files rail.
@@ -17,5 +24,5 @@ export interface QaWorkspaceBrowserProps {
  * the visitor out of the chat's tree. Opening a file reads exactly that file —
  * text inline, anything else as a downloadable handle.
  */
-export declare function QaWorkspaceBrowser({ sessionId, api, initialFile, }: QaWorkspaceBrowserProps): import("react/jsx-runtime").JSX.Element;
+export declare function QaWorkspaceBrowser({ sessionId, api, initialFile, materialsOnly, }: QaWorkspaceBrowserProps): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=QaWorkspaceBrowser.d.ts.map

package/lib/types/client/components/QaZoomImage.d.ts

@@ -0,0 +1,38 @@
+import type { ImgHTMLAttributes } from "react";
+/**
+ * A surface image at its reading size, plus the overlay it opens into.
+ *
+ * A transcript thumbnail is 132 px wide: enough to recognise a figure, not
+ * enough to read one. The thumbnail used to be an anchor to its own `blob:`
+ * address, and a browser that refuses top-level navigation to a blob answers
+ * the click with nothing at all, so the reader had no way to see the image the
+ * question was about.
+ */
+export declare function QaZoomImage({ src, alt, className, testId, openLabel, zoomable, ...image }: {
+    readonly src: string;
+    readonly alt: string;
+    readonly className: string;
+    readonly testId: string;
+    readonly openLabel?: string;
+    /**
+     * Whether the image answers a click. An image that sits inside a link does
+     * not: a control nested in an anchor is invalid, and the activation the
+     * reader meant for the link would reach the zoom as well.
+     */
+    readonly zoomable?: boolean;
+} & Omit<ImgHTMLAttributes<HTMLImageElement>, "src" | "alt" | "className">): import("react/jsx-runtime").JSX.Element;
+/**
+ * The overlay itself: the image contained to the viewport over a mask. Escape,
+ * the mask and the close control end it, and the close control takes focus on
+ * open so a keyboard reader leaves the same way it entered.
+ *
+ * The root is a span because an answer's image sits inside its paragraph, and
+ * a block-level root there is invalid nesting the browser repairs by lifting it
+ * out of the text that owns it.
+ */
+export declare function QaImageLightbox({ src, alt, onClose, }: {
+    readonly src: string;
+    readonly alt: string;
+    readonly onClose: () => void;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=QaZoomImage.d.ts.map

package/lib/types/client/components/source-refs.d.ts

@@ -12,5 +12,6 @@ export interface QaSourceRefs {
 }
 /** Display name for a file-backed source: the file name alone, case kept. */
 export declare function sourceFileName(source: QaSource): string;
+export declare function sourceRefsSignature(sources: readonly QaSource[]): string;
 export declare function buildSourceRefs(sources: readonly QaSource[]): QaSourceRefs;
 //# sourceMappingURL=source-refs.d.ts.map

package/lib/types/client/lineage.d.ts

@@ -6,14 +6,14 @@ import type { SessionSummary } from "@deepseek-ai/dsh-api-session-controller/cli
  * A delegated run is an implementation detail of a single answer: the Host
  * refuses to attest it, its sources reach the parent chat through the
  * provenance inheritance flow, and it has no owner. The host list the surface
- * already follows carries both marks (`origin` and `parentId`), so every
+ * already follows marks delegated runs with `origin`; ordinary forks also carry `parentId`, so every
  * projection that talks about chats asks this one question instead of
  * re-deriving it — and a chat row, a chat count and a claim batch can never
  * disagree about what a chat is.
  */
 export declare function isDelegatedSession(summary: Pick<SessionSummary, "origin" | "parentId"> | undefined): boolean;
 /** The session-list slice the lineage walk reads. */
-export type SessionLineage = Readonly<Record<string, Pick<SessionSummary, "parentId"> | undefined>>;
+export type SessionLineage = Readonly<Record<string, Pick<SessionSummary, "parentId" | "origin"> | undefined>>;
 /**
  * The chat a session belongs to: itself when nothing delegated it, otherwise
  * the root of its parent chain.

package/lib/types/client/markdown/SourceImage.d.ts

@@ -0,0 +1,7 @@
+/** Illustrations are fetched on approach to the viewport, never in a document-wide burst. */
+export declare function SourceImage({ src, alt, load, }: {
+    readonly src: string;
+    readonly alt: string;
+    readonly load: (path: string) => Promise<string | undefined>;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=SourceImage.d.ts.map

package/lib/types/client/markdown/blocks.d.ts

@@ -74,6 +74,10 @@ export type MarkdownBlock = {
 };
 /** A parsed document: its blocks plus the reference targets they resolve. */
 export interface ParsedMarkdown {
+    readonly ranges: readonly {
+        readonly start: number;
+        readonly end: number;
+    }[];
     readonly blocks: readonly MarkdownBlock[];
     /** Link/image definitions by upper-cased identifier. */
     readonly definitions: ReadonlyMap<string, string>;
@@ -111,5 +115,8 @@ export declare function parseMarkdown(text: string, options?: MarkdownParseOptio
  * line may still be typed.
  * @returns The container's blocks.
  */
-export declare function parseBlocks(lines: readonly string[], definitions: Map<string, string>, footnotes: Map<string, readonly MarkdownBlock[]>, depth: number, streaming?: boolean): MarkdownBlock[];
+export declare function parseBlocks(lines: readonly string[], definitions: Map<string, string>, footnotes: Map<string, readonly MarkdownBlock[]>, depth: number, streaming?: boolean, ranges?: {
+    start: number;
+    end: number;
+}[]): MarkdownBlock[];
 //# sourceMappingURL=blocks.d.ts.map

package/lib/types/client/markdown/render.d.ts

@@ -13,5 +13,9 @@ import { type MarkdownSourceContext } from "./source-chip.js";
  * @returns The document's blocks, plus the footnote section when the document
  * references a defined footnote.
  */
-export declare function renderMarkdown(text: string, context: MarkdownSourceContext, options?: MarkdownParseOptions): ReactNode[];
+export declare function renderMarkdown(text: string, context: MarkdownSourceContext, options?: MarkdownParseOptions, sourceLines?: {
+    readonly offset: number;
+    readonly start?: number;
+    readonly end?: number;
+}): ReactNode[];
 //# sourceMappingURL=render.d.ts.map

package/lib/types/client/markdown/source-chip.d.ts

@@ -3,6 +3,7 @@ import type { QaSource } from "../../types.js";
 import { type QaSourceRefs } from "../components/source-refs.js";
 /** Inline source awareness handed down from the owning assistant message. */
 export interface MarkdownSourceContext {
+    readonly renderImage?: (src: string, alt: string) => ReactNode;
     readonly refs?: QaSourceRefs;
     /** Open a path-backed source in the sources drawer's detail view. */
     readonly onSourceOpen?: (source: QaSource) => void;

package/lib/types/client/notifications/notification-dispatcher.d.ts

@@ -59,10 +59,14 @@ export declare function readNotificationPermission(): QaNotificationPermission;
  * asks on load — or once per finished turn — spends it on the wrong moment.
  */
 export declare function requestNotificationPermission(): Promise<QaNotificationPermission>;
-/**
- * Hand one finished turn to the desktop. Returns false when the platform
- * refuses: a notification that cannot be raised costs the reader nothing, and
- * the in-app line is already on its way.
- */
-export declare function raiseDesktopNotice(completion: QaTurnCompletion): boolean;
+/** One surface's desktop handles, retained until closed or retired. */
+export declare class QaDesktopNotices {
+    private readonly handles;
+    retain(notice: Notification, sessionId: string, onOpen?: (sessionId: string) => void): void;
+    /** Revoke callbacks even where the operating system refuses close(). */
+    close(sessionId?: string): void;
+    keep(sessionIds: ReadonlySet<string>): void;
+}
+/** The session id stays in the callback, never in the desktop payload. */
+export declare function raiseDesktopNotice(completion: QaTurnCompletion, onOpen?: (sessionId: string) => void, notices?: QaDesktopNotices): boolean;
 //# sourceMappingURL=notification-dispatcher.d.ts.map

package/lib/types/client/notifications/use-turn-notifications.d.ts

@@ -5,6 +5,10 @@ import { type QaChatActivity } from "./turn-completion-source.js";
 export interface QaTurnNotificationsInput {
     /** The sidebar's rows: this browser's chats with their running state. */
     readonly chats: readonly QaChatActivity[];
+    /** Authenticated identity, null behind the gate or with accounts disabled. */
+    readonly principal: string | null;
+    /** False while the controller or host list is still restoring. */
+    readonly chatsReady?: boolean;
     /**
      * The chats this account owns outright, which is narrower than the rows: an
      * admin's shared history lists chats it only reads, and the turn of such a

package/lib/types/client/project-session-state.d.ts

@@ -8,6 +8,7 @@ export interface QaBoundProjectionInput {
     readonly sessionId: string;
     /** Chat identity from the controller; see `QaSessionState.chatKey`. */
     readonly chatKey: number;
+    readonly inheritedThroughSeq?: number;
     readonly sessionSnapshot: ReturnType<SessionFace["getSnapshot"]>;
     /**
      * The Host's Inbox projection for this session: the messages waiting for the

package/lib/types/client/session-admission.d.ts

@@ -2,6 +2,8 @@ import type { QaSecureSession } from "./types.js";
 import type { ResolvedQaSurfaceConfig } from "../types.js";
 export type QaAttestationOutcome = {
     readonly ok: true;
+    readonly inheritedThroughSeq?: number;
+    readonly chatAccess?: import("../chat-sharing/types.js").QaChatAccess;
 } | {
     readonly ok: false;
     /** The identity is absent or expired; the caller returns to the gate. */

package/lib/types/client/session-sources.d.ts

@@ -14,6 +14,7 @@ export declare class QaHostSourceBridge {
     private refreshing;
     /** The refusal already reported, so a repeating failure reaches the console once. */
     private refusal;
+    private sessionId;
     /** Bumped on reset so a stale in-flight fetch never lands. */
     private generation;
     constructor(sourceApi: QaSourceApi, token: () => string);

package/lib/types/client/settings/styles.d.ts

@@ -9,11 +9,8 @@
  * outline under pointer modality at a specificity our rule cannot win, so a
  * hard-coded ring is one that goes missing rather than one that degrades.
  *
- * The type scale is the surface's: text the operator reads in order to decide —
- * section titles, field labels, the values in the controls, the toggle copy —
- * is 16px, a control's own label and an outcome line are 14px, and only chrome
- * stays small on purpose: the «Изменено» badge (9px), the status chips (11px),
- * the monospace data rows (11px) and the footer note (10px).
+ * The body controls use the plugin kit's shared type scale. Status chips,
+ * data rows and the footer retain their compact page-specific presentation.
  */
 export declare const QA_SETTINGS_STYLES: string;
 //# sourceMappingURL=styles.d.ts.map

package/lib/types/client/source-filters-styles.d.ts

@@ -0,0 +1,2 @@
+export declare const sourceFiltersStyles = "\n.dsh-qa-sourcefilters{display:flex;flex-wrap:wrap;align-items:center;gap:8px;padding:2px 12px 10px;flex:none}\n.dsh-qa-sourcefilters input,.dsh-qa-sourcefilters select{min-width:0;padding:7px 9px;border:1px solid var(--dsw-alias-border-l2);border-radius:8px;background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);font:inherit;font-size:12px}\n.dsh-qa-sourcefilters input{flex:1 1 200px;width:100%}\n.dsh-qa-sourcefilters select{flex:1 1 150px;max-width:100%}\n.dsh-qa-sourcefilters__count{color:var(--dsw-alias-label-tertiary);font-size:11px}\n.dsh-qa-sourcefilters button{margin-left:auto;border:0;background:transparent;color:var(--dsh-qa-accent);font:inherit;font-size:12px;cursor:pointer}\n.dsh-qa-sourcefilters :is(input,select,button):focus-visible{outline:var(--dsw-focus-ring-width, 2px) solid var(--dsw-focus-ring-color, var(--dsh-qa-accent));outline-offset:2px}\n.dsh-qa-sourcedetail__content-label{margin:0 0 8px;font-size:12px;font-weight:600;color:var(--dsw-alias-label-primary)}\n";
+//# sourceMappingURL=source-filters-styles.d.ts.map

package/lib/types/client/turn-sources.d.ts

@@ -8,7 +8,7 @@ export declare function chatLegacyOf(snapshot: ConversationSnapshot | undefined)
  * metadata is persisted by DSH, this projection is identical on live updates
  * and replay and requires no assistant-authored bibliography.
  */
-export declare function projectTurnSources(snapshot: ConversationSnapshot | undefined, sessionId?: string, workspaceRoot?: string): readonly QaTurnSources[];
+export declare function projectTurnSources(snapshot: ConversationSnapshot | undefined, sessionId?: string, workspaceRoot?: string, documentationRoot?: string): readonly QaTurnSources[];
 /**
  * The directory a projected source path is anchored on: the chat's own cwd.
  *

package/lib/types/client/types.d.ts

@@ -1,7 +1,7 @@
 import type { ClientRemote } from "@deepseek-ai/dsh-api-gateway/client";
 import type { ISessions, SessionFace } from "@deepseek-ai/dsh-api-session-controller/client";
 import type { UiConversation } from "@deepseek-ai/dsh-client-ui-conversation/client";
-import type { QaAccountNotificationsInput, QaAccountProfileInput, QaAccountSession, QaAccountStartersInput, QaAccountStarter, QaAccountUserPublic, QaAccessAdminSnapshot, QaApprovalDecision, QaClaimResult, QaLockdownProof, QaModelCatalogEntry, QaOwnershipEntry, QaPasswordResetRequest, QaPendingApproval, QaPendingQuestion, QaQuestionAnswerItem, QaQueueStatus, QaIssuedServiceToken, QaServiceTokenCreateInput, QaServiceTokenSummary, QaSessionState, QaSkillDocument, QaSkillDraftInput, QaSkillRemoval, QaSkillSummary, QaSkillToolDescriptor, QaSkillValidation, QaSourceFilePreview, QaTurnSources, QaWhoamiResult, QaDocumentPreview, QaWorkspaceFile, QaWorkspaceListing, QaCapabilitySelection, QaCurrentAccess, QaSessionAccess, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, QaAdminAuditEvent, QaAdminOverview, QaAdminPage, QaAdminSkillScope, QaAdminSkillsView, QaAdminUserDetail, QaAdminUserRow, QaAdminUserUpdate, QaAuditQuery, QaConversationDetail, QaConversationDeletion, QaConversationQuery, QaConversationReview, QaConversationReviewInput, QaConversationSummary, QaExpertMemoryDraft, QaExpertMemoryPage, QaExpertMemoryRecord, QaExpertMemoryScope, QaFeedbackQuery, QaFeedbackRow, QaMessageFeedback, QaMessageFeedbackInput, QaQualityMetrics, QaReviewQueueItem, QaReviewQueueRow, QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, QaUserQuery } from "../types.js";
+import type { QaAccountNotificationsInput, QaAccountProfileInput, QaAccountSession, QaAccountStartersInput, QaAccountStarter, QaAccountUserPublic, QaAccessAdminSnapshot, QaApprovalDecision, QaClaimResult, QaLockdownProof, QaModelCatalogEntry, QaOwnershipEntry, QaPasswordResetRequest, QaPendingApproval, QaPendingQuestion, QaQuestionAnswerItem, QaQueueStatus, QaIssuedServiceToken, QaServiceTokenCreateInput, QaServiceTokenSummary, QaSessionState, QaSkillDocument, QaSkillDraftInput, QaSkillRemoval, QaSkillSummary, QaSkillToolDescriptor, QaSkillValidation, QaSourceFilePreview, QaTurnSources, QaWhoamiResult, QaDocumentPreview, QaSpreadsheetPreviewSelection, QaWorkspaceFile, QaWorkspaceFileChunk, QaDocumentWorkflowStatus, QaWorkspaceListing, QaCapabilitySelection, QaCurrentAccess, QaSessionAccess, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, QaAdminAuditEvent, QaAdminOverview, QaAdminPage, QaAdminSkillScope, QaAdminSkillsView, QaAdminUserDetail, QaAdminUserRow, QaAdminUserUpdate, QaAuditQuery, QaConversationDetail, QaConversationDeletion, QaConversationQuery, QaConversationReview, QaConversationReviewInput, QaConversationSummary, QaExpertMemoryDraft, QaExpertMemoryPage, QaExpertMemoryRecord, QaExpertMemoryScope, QaFeedbackQuery, QaFeedbackRow, QaMessageFeedback, QaMessageFeedbackInput, QaQualityMetrics, QaReviewQueueItem, QaReviewQueueRow, QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, QaUserQuery } from "../types.js";
 /** Wire content one prompt carries: text plus base64 image uploads. */
 export type QaPromptContent = Parameters<SessionFace["prompt"]>[0];
 /** DSH session runtime surface the QA controller is allowed to touch. */
@@ -30,6 +30,8 @@ export type QaSecureSession = (token: string, sessionId: string) => Promise<{
 }>;
 /** Host-authoritative creation: identity, cwd and policy never come from the browser. */
 export type QaCreateSession = (token: string, subroleId: string | null, adminPreview: boolean) => Promise<RemoteResult<string>>;
+/** Owner-scoped exact-history branch; the Host chooses all child policy. */
+export type QaForkSession = (token: string, sourceId: string, answerSeq: number) => Promise<RemoteResult<string>>;
 /**
  * The Host's live read of the request ceiling (`qaSurface/queueStatus`), asked
  * per send: how many questions the stand is answering and whether one more
@@ -146,6 +148,9 @@ export interface QaFileUpload {
     }>;
 }
 export interface QaSourceApi {
+    documentWorkflowStatus?(token: string, sessionId: string, workflowId: string): Promise<RemoteResult<QaDocumentWorkflowStatus>>;
+    approveDocumentWorkflow?(token: string, sessionId: string, workflowId: string, revision: number, sha256: string): Promise<RemoteResult<QaDocumentWorkflowStatus>>;
+    readWorkspaceFileChunk?(token: string, sessionId: string, path: string, offset: number, version: string | null): Promise<RemoteResult<QaWorkspaceFileChunk>>;
     sources(token: string, sessionId: string): Promise<{
         readonly ok: true;
         readonly value: readonly QaTurnSources[];
@@ -153,13 +158,14 @@ export interface QaSourceApi {
         readonly ok: false;
         readonly error: unknown;
     }>;
-    readSourceFile(token: string, sessionId: string, sourcePath: string): Promise<{
+    readSourceFile(token: string, sessionId: string, sourcePath: string, selection?: QaSpreadsheetPreviewSelection): Promise<{
         readonly ok: true;
         readonly value: QaSourceFilePreview;
     } | {
         readonly ok: false;
         readonly error: unknown;
     }>;
+    readSourceImage?(token: string, sessionId: string, sourcePath: string, imagePath: string): Promise<RemoteResult<string>>;
     /** One directory of the chat's own workspace, for the files panel. */
     listWorkspaceFiles(token: string, sessionId: string, path: string): Promise<{
         readonly ok: true;
@@ -181,7 +187,7 @@ export interface QaSourceApi {
      * document pipeline; the panel shows the PDF the browser already knows how
      * to draw instead of uploading the bytes anywhere.
      */
-    previewWorkspaceDocument(token: string, sessionId: string, path: string): Promise<{
+    previewWorkspaceDocument(token: string, sessionId: string, path: string, selection?: QaSpreadsheetPreviewSelection): Promise<{
         readonly ok: true;
         readonly value: QaDocumentPreview;
     } | {
@@ -201,6 +207,7 @@ export interface QaSlashApi {
 }
 /** A source API with the account token already bound at the call site. */
 export type QaBoundSourceApi = {
+    readWorkspaceFileChunk?(sessionId: string, path: string, offset: number, version: string | null): Promise<RemoteResult<QaWorkspaceFileChunk>>;
     sources(sessionId: string): Promise<{
         readonly ok: true;
         readonly value: readonly QaTurnSources[];
@@ -208,13 +215,14 @@ export type QaBoundSourceApi = {
         readonly ok: false;
         readonly error: unknown;
     }>;
-    readSourceFile(sessionId: string, sourcePath: string): Promise<{
+    readSourceFile(sessionId: string, sourcePath: string, selection?: QaSpreadsheetPreviewSelection): Promise<{
         readonly ok: true;
         readonly value: QaSourceFilePreview;
     } | {
         readonly ok: false;
         readonly error: unknown;
     }>;
+    readSourceImage?(sessionId: string, sourcePath: string, imagePath: string): Promise<RemoteResult<string>>;
     listWorkspaceFiles(sessionId: string, path: string): Promise<{
         readonly ok: true;
         readonly value: QaWorkspaceListing;
@@ -229,7 +237,7 @@ export type QaBoundSourceApi = {
         readonly ok: false;
         readonly error: unknown;
     }>;
-    previewWorkspaceDocument(sessionId: string, path: string): Promise<{
+    previewWorkspaceDocument(sessionId: string, path: string, selection?: QaSpreadsheetPreviewSelection): Promise<{
         readonly ok: true;
         readonly value: QaDocumentPreview;
     } | {
@@ -336,9 +344,14 @@ export interface QaIntegrationTokenApi {
     list(): Promise<QaIntegrationTokenResult<readonly QaServiceTokenSummary[]>>;
     create(input: QaServiceTokenCreateInput): Promise<QaIntegrationTokenResult<QaIssuedServiceToken>>;
     revoke(tokenId: string): Promise<QaIntegrationTokenResult<null>>;
+    setClarifications?(tokenId: string, allowed: boolean): Promise<QaIntegrationTokenResult<null>>;
 }
 /** Account remotes exposed by the plugin's own typert namespace. */
 export interface QaAccountsApi {
+    accountsSetServiceTokenClarifications?(token: string, tokenId: string, allowed: boolean): Promise<RemoteResult<{
+        readonly updated: boolean;
+    }>>;
+    chatVisible?(token: string): Promise<RemoteResult<readonly import("../chat-sharing/types.js").QaChatAccess[]>>;
     accountsWhoami(token: string): Promise<RemoteResult<QaWhoamiResult>>;
     accountsLogin(email: string, password: string): Promise<RemoteResult<QaAccountSession>>;
     accountsRegister(email: string, password: string): Promise<RemoteResult<QaAccountSession>>;

package/lib/types/client/workspace-download.d.ts

@@ -1,4 +1,4 @@
-import type { QaWorkspaceFile } from "../types.js";
+import type { QaWorkspaceFile, QaWorkspaceFileChunk } from "../types.js";
 /**
  * Handing one file of the chat's workspace to the person the turn produced it
  * for.
@@ -13,4 +13,12 @@ import type { QaWorkspaceFile } from "../types.js";
 export declare function fileNameOf(path: string): string;
 /** Save one workspace file under its own name. */
 export declare function downloadWorkspaceFile(file: QaWorkspaceFile): void;
+/** Read one immutable file version in full; a refusal never saves partial bytes. */
+export declare function downloadWorkspacePath(path: string, read: (offset: number, version: string | null) => Promise<{
+    readonly ok: true;
+    readonly value: QaWorkspaceFileChunk;
+} | {
+    readonly ok: false;
+    readonly error: unknown;
+}>): Promise<void>;
 //# sourceMappingURL=workspace-download.d.ts.map

package/lib/types/config.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=config.js.map

package/lib/types/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":""}

package/lib/types/documents.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=documents.js.map

package/lib/types/documents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documents.js","sourceRoot":"","sources":["../../src/types/documents.ts"],"names":[],"mappings":""}

package/lib/types/enforcement/skill-resource-paths.d.ts

@@ -0,0 +1,5 @@
+import type { SkillResourceBase } from "@deepseek-ai/dsh-skill";
+/** Guidance only: no file contents, path rewriting or permission grant. */
+export declare function skillResourcePathHint(requested: unknown, loaded: ReadonlyMap<string, SkillResourceBase>, exists?: (candidate: string) => boolean): string | undefined;
+export declare function skillResourceGuidance(resource: SkillResourceBase | undefined): string;
+//# sourceMappingURL=skill-resource-paths.d.ts.map

package/lib/types/enforcement/structured-result.d.ts

@@ -0,0 +1,11 @@
+import type { Agent } from "@deepseek-ai/dsh-agent";
+import type { Context } from "@deepseek-ai/cordis";
+/**
+ * Native delegation's result channel is not a working capability. Admit only
+ * the exact child-owned capture registration, never a global/inherited tool
+ * with the same name. Registrations and session lineage are Host-owned; model
+ * arguments cannot create either. Schema validation and authoritative capture
+ * remain the native driver's responsibility.
+ */
+export declare function isDelegatedStructuredResult(ctx: Context, agent: Agent | undefined, name: string): boolean;
+//# sourceMappingURL=structured-result.d.ts.map

package/lib/types/expert-memory.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=expert-memory.js.map

package/lib/types/expert-memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expert-memory.js","sourceRoot":"","sources":["../../src/types/expert-memory.ts"],"names":[],"mappings":""}