@yadsh/dsh-qa-surface 0.15.7 → 0.17.0

package/lib/types/index.d.ts

@@ -1,9 +1,11 @@
+import type { QaChatAccess, QaChatGrant, QaChatMode, QaChatAuthor, QaChatJson } from "./chat-sharing/types.js";
+import type { SessionPageRequest, SessionFollowRequest, SessionPromptRequest, SessionPromptValue, SessionAttachmentRequest, SessionAttachmentValue, SessionRenameRequest, SessionRenameValue, SessionCancelValue, SessionUpdateQueueRequest, SessionUpdateQueueValue, SessionSearchRequest, SessionSelectModelRequest, SessionSelectModelValue } from "@deepseek-ai/dsh-api-session-controller/types";
 import { TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 import type { Context } from "@deepseek-ai/cordis";
 import type { QaSurfaceConfigRefs } from "./config.js";
 import type { QaAccountNotificationsInput } from "./types.js";
 import type { QaTurnSources } from "./provenance/types.js";
-import type { QaAccountProfileInput, QaAccountSession, QaAccountStartersInput, QaAccountUserPublic, QaApprovalDecision, QaClaimResult, QaDocumentPreview, QaIssuedServiceToken, QaLockdownProof, QaOwnershipEntry, QaPasswordResetRequest, QaPendingApproval, QaPendingQuestion, QaQuestionAnswerItem, QaQueueStatus, QaServiceTokenCreateInput, QaServiceTokenSummary, ResolvedQaSurfaceConfig, QaAdminSkillScope, QaAdminSkillsView, QaExpertMemoryDraft, QaExpertMemoryPage, QaExpertMemoryRecord, QaExpertMemoryScope, QaSkillDocument, QaSkillDraftInput, QaSkillRemoval, QaSkillSummary, QaSkillToolDescriptor, QaSkillValidation, QaSourceFilePreview, QaWhoamiResult, QaWorkspaceFile, QaWorkspaceListing, QaPrincipal, QaAccessAdminSnapshot, QaAdminAuditEvent, QaAdminOverview, QaAdminPage, QaAdminUserDetail, QaAdminUserRow, QaAdminUserUpdate, QaAuditQuery, QaCapabilitySelection, QaConversationDetail, QaConversationDeletion, QaConversationQuery, QaConversationReview, QaConversationReviewInput, QaConversationSummary, QaCurrentAccess, QaFeedbackHarvestEntry, QaFeedbackHarvestResult, QaFeedbackQuery, QaFeedbackRow, QaMessageFeedback, QaMessageFeedbackInput, QaModelCatalogEntry, QaModelPair, QaQualityMetrics, QaReviewQueueItem, QaReviewQueueRow, QaSessionAccess, QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, QaUserQuery } from "./types.js";
+import type { QaAccountProfileInput, QaAccountSession, QaAccountStartersInput, QaAccountUserPublic, QaApprovalDecision, QaClaimResult, QaDocumentPreview, QaSpreadsheetPreviewSelection, QaDocumentWorkflowStatus, QaIssuedServiceToken, QaLockdownProof, QaOwnershipEntry, QaPasswordResetRequest, QaPendingApproval, QaPendingQuestion, QaQuestionAnswerItem, QaQueueStatus, QaServiceTokenCreateInput, QaServiceTokenSummary, ResolvedQaSurfaceConfig, QaAdminSkillScope, QaAdminSkillsView, QaExpertMemoryDraft, QaExpertMemoryPage, QaExpertMemoryRecord, QaExpertMemoryScope, QaSkillDocument, QaSkillDraftInput, QaSkillRemoval, QaSkillSummary, QaSkillToolDescriptor, QaSkillValidation, QaSourceFilePreview, QaWhoamiResult, QaWorkspaceFile, QaWorkspaceFileChunk, QaWorkspaceListing, QaPrincipal, QaAccessAdminSnapshot, QaAdminAuditEvent, QaAdminOverview, QaAdminPage, QaAdminUserDetail, QaAdminUserRow, QaAdminUserUpdate, QaAuditQuery, QaCapabilitySelection, QaConversationDetail, QaConversationDeletion, QaConversationQuery, QaConversationReview, QaConversationReviewInput, QaConversationSummary, QaCurrentAccess, QaFeedbackHarvestEntry, QaFeedbackHarvestResult, QaFeedbackQuery, QaFeedbackRow, QaMessageFeedback, QaMessageFeedbackInput, QaModelCatalogEntry, QaModelPair, QaQualityMetrics, QaReviewQueueItem, QaReviewQueueRow, QaSessionAccess, QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, QaUserQuery } from "./types.js";
 export declare const name = "qa-surface";
 export declare const inject: string[];
 import { QA_SURFACE_SETTINGS_NAMESPACE } from "./shared/settings.js";
@@ -66,6 +68,10 @@ export declare class QaSurface extends TypertRemoteService {
      * opens the admin console never grows one.
      */
     private qualityStore;
+    private chatSharingStore;
+    private readonly chatTransport;
+    private readonly chatTurnGuard;
+    private sharing;
     constructor(ctx: Context, entry?: Partial<QaSurfaceConfigRefs>);
     /** The quality store, opening its file the first time anyone needs it. */
     private quality;
@@ -208,6 +214,9 @@ export declare class QaSurface extends TypertRemoteService {
     accountsRevokeServiceToken(token: string, tokenId: string): {
         readonly revoked: boolean;
     };
+    accountsSetServiceTokenClarifications(token: string, tokenId: string, allowed: boolean): {
+        readonly updated: boolean;
+    };
     /**
      * Serve the effective QA configuration to the browser. The DSH gateway pins
      * settings RPCs to loopback, so a browser served over the LAN always sees
@@ -236,6 +245,8 @@ export declare class QaSurface extends TypertRemoteService {
      * intentionally not registered or attached as another DSH workspace.
      */
     createSession(token: string, subroleId: string | null, adminPreview: boolean): Promise<string>;
+    /** Create an independently admitted ordinary branch of the caller's own chat. */
+    forkSession(token: string, sourceId: string, answerSeq: number): Promise<string>;
     /** The selector model for the signed-in user; admin grants are irrelevant. */
     accessCurrent(token: string): QaCurrentAccess;
     /** The immutable role pinned to an existing session. */
@@ -341,6 +352,27 @@ export declare class QaSurface extends TypertRemoteService {
     adminAudit(token: string, query: QaAuditQuery, cursor: string | null, limit: number | null): Promise<QaAdminPage<QaAdminAuditEvent>>;
     /** Pin and attest the effective policy. The browser supplies identity only. */
     secureSession(token: string, sessionId: string): Promise<QaLockdownProof>;
+    chatVisible(token: string): readonly QaChatAccess[];
+    chatAccess(token: string, sessionId: string): QaChatAccess;
+    chatGrants(token: string, sessionId: string): readonly QaChatGrant[];
+    chatSetGrant(token: string, sessionId: string, email: string, mode: QaChatMode | null): readonly QaChatGrant[];
+    chatAuthors(token: string, sessionId: string): readonly QaChatAuthor[];
+    chatAudit(token: string, sessionId: string, full: boolean): Promise<QaChatJson>;
+    chatAttachmentPath(token: string, sessionId: string, attachmentId: string): Promise<string>;
+    chatList(token: string, signal: AbortSignal): Promise<QaChatJson>;
+    chatSearch(token: string, request: SessionSearchRequest, signal: AbortSignal): Promise<QaChatJson>;
+    chatSelectModel(token: string, request: SessionSelectModelRequest): Promise<SessionSelectModelValue>;
+    chatPage(token: string, request: SessionPageRequest, signal: AbortSignal): Promise<QaChatJson>;
+    chatFollow(token: string, request: SessionFollowRequest, signal: AbortSignal): AsyncIterable<QaChatJson>;
+    chatControl(token: string, signal: AbortSignal): AsyncIterable<QaChatJson>;
+    chatProjections(token: string, sessionId: string, signal: AbortSignal): Promise<QaChatJson>;
+    chatPrompt(token: string, request: SessionPromptRequest, signal: AbortSignal): Promise<SessionPromptValue>;
+    chatAttachment(token: string, request: SessionAttachmentRequest): Promise<SessionAttachmentValue>;
+    chatRename(token: string, request: SessionRenameRequest): Promise<SessionRenameValue>;
+    chatCancel(token: string, sessionId: string): Promise<SessionCancelValue>;
+    chatUpdateQueue(token: string, request: SessionUpdateQueueRequest): Promise<SessionUpdateQueueValue>;
+    private admitChatRead;
+    private requireChatOwner;
     /** Return canonical Host snapshots from plugin-owned durable provenance. */
     sources(token: string, sessionId: string): Promise<readonly QaTurnSources[]>;
     /**
@@ -376,7 +408,9 @@ export declare class QaSurface extends TypertRemoteService {
      * read — the normal case for a deployment whose docs and code live beside
      * the per-account scratch directory — could never be opened in the panel.
      */
-    readSourceFile(token: string, sessionId: string, sourcePath: string): Promise<QaSourceFilePreview>;
+    readSourceFile(token: string, sessionId: string, sourcePath: string, selection?: QaSpreadsheetPreviewSelection): Promise<QaSourceFilePreview>;
+    /** Load one relative raster illustration of an attested Markdown source. */
+    readSourceImage(token: string, sessionId: string, sourcePath: string, imagePath: string): Promise<string>;
     /**
      * List one directory of the chat's own workspace for the files panel.
      *
@@ -395,6 +429,11 @@ export declare class QaSurface extends TypertRemoteService {
      * reopening a cited source.
      */
     readWorkspaceFile(token: string, sessionId: string, path: string): Promise<QaWorkspaceFile>;
+    /** Download one bounded chunk after revalidating this chat's ownership. */
+    readWorkspaceFileChunk(token: string, sessionId: string, path: string, offset: number, version: string | null): Promise<QaWorkspaceFileChunk>;
+    documentWorkflowStatus(token: string, sessionId: string, workflowId: string): Promise<QaDocumentWorkflowStatus>;
+    /** Browser-authenticated human consent; intentionally absent from the agent's tool registry. */
+    approveDocumentWorkflow(token: string, sessionId: string, workflowId: string, revision: number, sha256: string): Promise<QaDocumentWorkflowStatus>;
     /**
      * Render one Word document of the chat's workspace as a PDF for the panel.
      *
@@ -405,7 +444,7 @@ export declare class QaSurface extends TypertRemoteService {
      * produced PDF is read back here and travels as base64, so the audience never
      * reaches an unfenced byte route.
      */
-    previewWorkspaceDocument(token: string, sessionId: string, path: string): Promise<QaDocumentPreview>;
+    previewWorkspaceDocument(token: string, sessionId: string, path: string, selection?: QaSpreadsheetPreviewSelection): Promise<QaDocumentPreview>;
     /**
      * Shared admission facts of both browse methods: the preview switch is what
      * opens the panel's file reading at all, and the chat's cwd is the tree that

package/lib/types/integration/contract.d.ts

@@ -166,6 +166,7 @@ export interface QaIntegrationRunner {
         /** The chat to continue, or null for a new conversation. */
         readonly chatId: string | null;
         readonly message: string;
+        readonly allowClarifications?: boolean;
         readonly attachments: readonly QaIntegrationAttachment[];
         readonly ticketKey: string | null;
         /** Ends the wait: the caller's own lifetime merged with the deployment's budget. */

package/lib/types/integration/question-policy.d.ts

@@ -0,0 +1,20 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { Agent } from "@deepseek-ai/dsh-agent";
+import type { QaAccounts } from "../accounts/store.js";
+export declare const QA_INTEGRATION_NO_CLARIFICATIONS = "Clarifying questions are disabled for this integration turn. Do not call ask_user_question or ask follow-up questions in your answer. Answer from available evidence, label assumptions and missing facts, and state what cannot be determined when evidence is insufficient. Do not invent facts or bypass permission approvals.";
+/** A queued request's durable policy follows its turn and its delegated agents. */
+export declare class QaIntegrationQuestionPolicy {
+    private readonly ctx;
+    private readonly accounts;
+    private readonly qaRoot;
+    private readonly turns;
+    private readonly notes;
+    private readonly disposers;
+    constructor(ctx: Context, accounts: () => QaAccounts | undefined, qaRoot?: (id: string) => string | undefined);
+    allowed(agent: Agent): boolean;
+    private root;
+    /** Recover after a plugin reload from consumed messages, never queued future input. */
+    private recover;
+    dispose(): void;
+}
+//# sourceMappingURL=question-policy.d.ts.map

package/lib/types/integration/service.d.ts

@@ -31,6 +31,7 @@ export declare const QA_INTEGRATION_MAX_CITATIONS = 5;
 export declare function sourceCitations(sources: readonly QaSourceReference[]): readonly string[];
 /** Who a presented credential turned out to be. */
 export interface QaIntegrationIdentity {
+    readonly allowClarifications: boolean;
     readonly tokenId: string;
     readonly userId: string;
     readonly scopes: readonly QaServiceTokenScope[];

package/lib/types/llm-identity.d.ts

@@ -0,0 +1,20 @@
+import { Service, type Context } from "@deepseek-ai/cordis";
+import type { QaAccounts } from "./accounts/store.js";
+interface IdentityAccounts {
+    ownerIdOf: QaAccounts["ownerIdOf"];
+    accountById: QaAccounts["accountById"];
+}
+export interface QaLlmIdentityOptions {
+    /** Resolves only roots attested by this QA deployment and their live children. */
+    rootOf(sessionId: string): string | undefined;
+    accounts(): IdentityAccounts | undefined;
+}
+/** Runtime-only identity seam; it grants no account or tool access. */
+export declare class QaLlmIdentity extends Service {
+    private readonly options;
+    constructor(ctx: Context, options: QaLlmIdentityOptions);
+    /** Stable pseudonym of the chat's active owner, never the browser viewing it. */
+    forSession(sessionId: string): string | undefined;
+}
+export {};
+//# sourceMappingURL=llm-identity.d.ts.map

package/lib/types/markdown-frontmatter.d.ts

@@ -0,0 +1,10 @@
+import type { QaSourceMetadata } from "./provenance/types.js";
+export interface MarkdownFrontmatter {
+    readonly body: string;
+    /** Physical lines removed, including both fences. */
+    readonly offset: number;
+    readonly fields: QaSourceMetadata;
+}
+/** Only a complete, bounded YAML mapping at the start earns a metadata card. */
+export declare function readFrontmatter(text: string): MarkdownFrontmatter | undefined;
+//# sourceMappingURL=markdown-frontmatter.d.ts.map

package/lib/types/markdown-images.d.ts

@@ -0,0 +1,3 @@
+/** Exact image destinations from the same grammar the source preview renders. */
+export declare function markdownImageTargets(text: string): ReadonlySet<string>;
+//# sourceMappingURL=markdown-images.d.ts.map

package/lib/types/policy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=policy.js.map

package/lib/types/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/types/policy.ts"],"names":[],"mappings":""}

package/lib/types/prompt-notes.d.ts

@@ -31,6 +31,7 @@ export declare const QA_DELEGATION_NOTE = "dsh-qa-surface:delegation-naming";
 export declare const QA_DOCUMENTS_NOTE = "dsh-qa-surface:attached-documents";
 /** Note name carrying the deployment's rule about where an answer comes from. */
 export declare const QA_SOURCE_PRIORITY_NOTE = "dsh-qa-surface:source-priority";
+export declare const QA_BRANCH_NOTE = "dsh-qa-surface:chat-branch";
 /**
  * Built-in note texts. Each is the fallback for its settings template
  * (`notes.*.template`); the placeholders mark the parts the injector
@@ -40,7 +41,7 @@ export declare const QA_IDENTITY_NOTE_TEMPLATE = "{identity}\n\n{instructions}";
 export declare const QA_SOURCES_NOTE_TEMPLATE = "Source provenance is collected automatically from your tool calls; the QA surface lists what it collected beside the answer. Do not append a manual Sources/\u0418\u0441\u0442\u043E\u0447\u043D\u0438\u043A\u0438 bibliography of your own.";
 export declare const QA_SOURCES_FALLBACK_TEMPLATE = "A delegated run whose provider cannot expose tool events must call {reportTool} before finishing.";
 export declare const QA_DELEGATION_NOTE_TEMPLATE = "When you start a background subagent, give the delegation a short vivid name in its description field: two or three words in the user's language that say what the run is for (\u00AB\u0421\u0432\u0435\u0440\u043A\u0430 \u043E\u0442\u0447\u0451\u0442\u043E\u0432\u00BB, \"Log triage\"). The QA surface shows that description as the subagent's display name in the operator's panel and completion notices.";
-export declare const QA_DOCUMENTS_NOTE_TEMPLATE = "A document a chat user attached is a path on disk, not text: read it with the deployment's document pipeline \u2014 `document_inspect` says what a DOCX or PDF is, `document_to_markdown` extracts its text, `document_from_url` stores the text of an attachment that only exists behind a URL. The plain file reader refuses those formats as binary, so that refusal is expected and is not a hint to go looking for the file somewhere else. When the pipeline itself refuses a path, report the refusal and the path it named instead of trying another reader.";
+export declare const QA_DOCUMENTS_NOTE_TEMPLATE = "A document a chat user attached is a path on disk, not text: read it with the deployment's document pipeline \u2014 `document_inspect` says what a DOCX or PDF is, `document_to_markdown` extracts its text, `document_from_url` stores the text of an attachment that only exists behind a URL. For XLSX, CSV, TSV, ODS or FODS, `spreadsheet_inspect` lists all sheets and detects text delimiter/encoding, `spreadsheet_read` reads pages, and `spreadsheet_create` creates a file in the selected format. CSV/TSV have one Data sheet with string fields; reuse detected delimiter and encoding when paging. XLSX/ODS/FODS support multiple sheets. Inspect all sheet names before selecting data; formula values are saved caches, not recalculated results. The plain file reader refuses those formats as binary, so that refusal is expected and is not a hint to go looking for the file somewhere else. When the pipeline itself refuses a path, report the refusal and the path it named instead of trying another reader.";
 export declare const QA_SOURCE_PRIORITY_NOTE_TEMPLATE = "Answer from the source that owns the question: read what the conversation and its attachments already carry, then search the product documentation and ask the domain expert, and only then look in memory. Recalled memory is background from earlier sessions \u2014 a miss there is not evidence that no source exists, and it is not where a document, a page or a product fact should be looked up.";
 export interface QaIdentityRenderInput {
     /** The owner's account address; the one fact accounts always provide. */
@@ -163,6 +164,7 @@ export declare class QaPromptNotes {
      * farthest ancestor known at that moment.
      */
     private rootSessionId;
+    private branchNotes;
     /** The owner's email and profile, or nothing while the chat is anonymous. */
     private identityOf;
 }

package/lib/types/provenance/connectors.d.ts

@@ -1,6 +1,9 @@
 import { canonicalizeUrl } from "./normalize.js";
-import type { SourceExtractor } from "./types.js";
+import type { SourceExtractor, SourceExtractorContext } from "./types.js";
+type UnknownRecord = Record<string, unknown>;
+export declare function contextRecords(context: SourceExtractorContext): UnknownRecord[];
 type UrlOptions = Parameters<typeof canonicalizeUrl>[1];
+export declare function canonicalUri(item: UnknownRecord, urlOptions: UrlOptions): string | undefined;
 export declare function createJiraExtractor(urlOptions?: UrlOptions): SourceExtractor;
 export declare function createConfluenceExtractor(urlOptions?: UrlOptions): SourceExtractor;
 export declare function createKnowledgeExtractor(urlOptions?: UrlOptions): SourceExtractor;

package/lib/types/provenance/document-preview.d.ts

@@ -1,5 +1,5 @@
 import type { DocumentsFace } from "@yadsh/dsh-documents";
-import type { QaDocumentPreview } from "../types.js";
+import type { QaDocumentPreview, QaSpreadsheetPreviewSelection } from "../types.js";
 import { type QaAllowedFileRequest } from "./file-preview.js";
 /** Look up the document subsystem a sibling Host plugin published. */
 export type DocumentsLookup = () => DocumentsFace | undefined;
@@ -9,6 +9,7 @@ export interface QaDocumentPreviewRequest extends QaAllowedFileRequest {
     readonly sessionId: string;
     /** Bytes of the rendered PDF the panel accepts before it gives up. */
     readonly maxBytes: number;
+    readonly selection?: QaSpreadsheetPreviewSelection;
 }
 /**
  * Render one Word document as a PDF for the files panel.
@@ -24,5 +25,7 @@ export interface QaDocumentPreviewRequest extends QaAllowedFileRequest {
  * an uploaded Word file lives in the attachment store, and a pipeline that is
  * not told about that root refuses the file this check just accepted.
  */
-export declare function previewConvertibleDocument({ documents, sessionId, maxBytes, ...file }: QaDocumentPreviewRequest): Promise<QaDocumentPreview>;
+export declare function previewConvertibleDocument({ documents, sessionId, maxBytes, selection, ...file }: QaDocumentPreviewRequest): Promise<QaDocumentPreview>;
+/** Native PDF or pipeline preview, after the caller has verified chat evidence. */
+export declare function previewSourceDocument(request: QaDocumentPreviewRequest): Promise<QaDocumentPreview>;
 //# sourceMappingURL=document-preview.d.ts.map

package/lib/types/provenance/extractors.d.ts

@@ -4,6 +4,8 @@ export declare const readFileExtractor: SourceExtractor;
 export declare function createWebSearchExtractor(maxPromotedPerSearch?: number, urlOptions?: Parameters<typeof canonicalizeUrl>[1]): SourceExtractor;
 export declare function createWebFetchExtractor(urlOptions?: Parameters<typeof canonicalizeUrl>[1]): SourceExtractor;
 export declare const webFetchExtractor: SourceExtractor;
+/** Document tools consume inputs; generated output paths stay artifacts. */
+export declare const documentSourceExtractor: SourceExtractor;
 export declare const fileSearchExtractor: SourceExtractor;
 export declare class SourceExtractorRegistry {
     private readonly extractors;

package/lib/types/provenance/file-download.d.ts

@@ -0,0 +1,10 @@
+import type { QaWorkspaceFileChunk } from "../types.js";
+import { type QaAllowedFileRequest } from "./file-preview.js";
+/** Each RPC stays small; downloads never use the preview's byte limit. */
+export declare const QA_DOWNLOAD_CHUNK_BYTES: number;
+export declare const QA_DOWNLOAD_MAX_BYTES: number;
+export declare function readWorkspaceFileChunk(request: QaAllowedFileRequest & {
+    readonly offset: number;
+    readonly version: string | null;
+}): Promise<QaWorkspaceFileChunk>;
+//# sourceMappingURL=file-download.d.ts.map

package/lib/types/provenance/file-preview.d.ts

@@ -40,6 +40,7 @@ export interface QaSourceFilePreviewRequest {
     readonly attachmentRoot?: string;
     readonly maxBytes: number;
     readonly maxMarkdownRenderBytes: number;
+    readonly renderFrontmatter?: boolean;
 }
 /** A file request the panel may make: the chat's own tree or a shared root. */
 export interface QaAllowedFileRequest {
@@ -77,7 +78,7 @@ export declare function resolveAllowedFile({ filePath, cwd, sharedReadOnlyRoots,
  * same way before it is matched, or a file inside the chat's own workspace is
  * refused as foreign evidence.
  */
-export declare function readSourceFilePreview({ sourcePath, cwd, isEvidence, sharedReadOnlyRoots, attachmentRoot, maxBytes, maxMarkdownRenderBytes, }: QaSourceFilePreviewRequest): Promise<QaSourceFilePreview>;
+export declare function readSourceFilePreview({ sourcePath, cwd, isEvidence, sharedReadOnlyRoots, attachmentRoot, maxBytes, maxMarkdownRenderBytes, renderFrontmatter, }: QaSourceFilePreviewRequest): Promise<QaSourceFilePreview>;
 /** One directory request from the files panel. */
 export interface QaWorkspaceListRequest {
     /** The directory to list, absolute or relative to the chat cwd. Empty = root. */

package/lib/types/provenance/host-store.d.ts

@@ -60,6 +60,8 @@ export declare class QaProvenanceHost {
     private forgetAll;
     bundles(sessionId: string): readonly QaTurnSources[];
     sourceAllowed(sessionId: string, path: string): boolean;
+    /** Copy only evidence of turns present in the child's durable prefix. */
+    forkSnapshots(parentId: string, childId: string, throughTurn: number): void;
     private seed;
     private observeEvent;
     private shouldCollect;

package/lib/types/provenance/integration-extractor.d.ts

@@ -0,0 +1,5 @@
+import type { SourceExtractor } from "./types.js";
+import type { canonicalizeUrl } from "./normalize.js";
+/** Successful provider retrievals with explicit addresses or object identity. */
+export declare function integrationExtractor(options?: Parameters<typeof canonicalizeUrl>[1]): SourceExtractor;
+//# sourceMappingURL=integration-extractor.d.ts.map

package/lib/types/provenance/source-content.d.ts

@@ -0,0 +1,19 @@
+/** Text retained from a single addressed tool result, never from model prose. */
+export declare const MAX_SOURCE_CONTENT = 32000;
+type RecordValue = Record<string, unknown>;
+export declare function retainedSourceContent(value: string | undefined, partial?: boolean): {
+    content?: undefined;
+    contentTruncated?: undefined;
+} | {
+    content: string;
+    contentTruncated: boolean;
+};
+export declare function structuredSourceContent(item: RecordValue): {
+    content?: undefined;
+    contentTruncated?: undefined;
+} | {
+    content: string;
+    contentTruncated: boolean;
+};
+export {};
+//# sourceMappingURL=source-content.d.ts.map

package/lib/types/provenance/source-image.d.ts

@@ -0,0 +1,4 @@
+import { type QaSourceFilePreviewRequest } from "./file-preview.js";
+/** The image must be named by an attested Markdown file and stay inside allowed roots. */
+export declare function readSourceImage(request: QaSourceFilePreviewRequest, imagePath: string): Promise<string>;
+//# sourceMappingURL=source-image.d.ts.map

package/lib/types/provenance/spreadsheet-preview.d.ts

@@ -0,0 +1,5 @@
+import type { QaDocumentPreviewRequest } from "./document-preview.js";
+import type { QaSpreadsheetPreview } from "../types.js";
+/** Reuse the agent's bounded parser and the panel's canonical root fence. */
+export declare function previewSpreadsheetDocument(request: QaDocumentPreviewRequest): Promise<QaSpreadsheetPreview>;
+//# sourceMappingURL=spreadsheet-preview.d.ts.map

package/lib/types/provenance/types.d.ts

@@ -33,6 +33,9 @@ export interface QaSourceReference {
     readonly uri?: string;
     readonly path?: string;
     readonly snippet?: string;
+    /** Bounded text actually returned for this source by a retrieval tool. */
+    readonly content?: string;
+    readonly contentTruncated?: boolean;
     readonly locations: readonly QaSourceLocation[];
     readonly evidence: QaSourceEvidence;
     readonly origins: readonly QaSourceOrigin[];
@@ -60,6 +63,8 @@ export interface SourceExtractorContext {
     readonly origin: QaSourceOrigin;
     /** Canonical session/workspace root used to make local paths portable. */
     readonly workspaceRoot?: string;
+    /** Configured documentation root for replaying legacy docs_read results. */
+    readonly documentationRoot?: string;
 }
 export interface QaReportedSource {
     readonly kind: QaSourceKind;

package/lib/types/qa-tools/docs-tools.d.ts

@@ -123,6 +123,8 @@ export interface QaDocsSearchResult extends QaDocsIdentity {
 /** The outcome of one documentation read. */
 export interface QaDocsReadResult extends QaDocsIdentity {
     readonly path: string;
+    /** Actual read target, kept out of the model-facing rendering. */
+    readonly absolutePath: string;
     readonly from: number;
     readonly to: number;
     readonly totalLines: number;

package/lib/types/quality.js

@@ -0,0 +1,7 @@
+// ---------------------------------------------------------------------------
+// Quality layer: user feedback, reviewer results, and the admin audit trail.
+// These are the durable records the admin console reads and writes; every one
+// is keyed to an exact conversation message, never to a conversation alone.
+// ---------------------------------------------------------------------------
+export {};
+//# sourceMappingURL=quality.js.map

package/lib/types/quality.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quality.js","sourceRoot":"","sources":["../../src/types/quality.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E"}

package/lib/types/questions.d.ts

@@ -62,9 +62,10 @@ export declare class QaQuestionGate {
     private readonly interactive;
     private readonly ownership;
     private readonly logger;
+    private readonly questionsAllowed;
     private readonly pending;
     private readonly disposers;
-    constructor(ctx: Context, interactive: () => boolean, ownership: QaSessionOwnership, logger: PluginLogger);
+    constructor(ctx: Context, interactive: () => boolean, ownership: QaSessionOwnership, logger: PluginLogger, questionsAllowed?: (agent: Agent) => boolean);
     /** Claim question requests for the chats this deployment answers. */
     install(): void;
     /** Questions of one chat, oldest first: what the QA view renders. */

package/lib/types/session-fork-host.d.ts

@@ -0,0 +1,27 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { PluginLogger } from "@yadsh/dsh-plugin-log";
+import type { QaAccounts } from "./accounts/store.js";
+import type { QaAccessService } from "./access/service.js";
+import type { QaPolicyAdmission } from "./secure-session.js";
+import type { QaIntegrationPrincipalBindings } from "./integration-principals.js";
+import type { QaProvenanceHost } from "./provenance/host-store.js";
+import type { QaStoredSessionEraser } from "./admin/session-log.js";
+import type { ResolvedQaSurfaceConfig } from "./types.js";
+export interface QaForkHostOptions {
+    readonly ctx: Context;
+    readonly config: ResolvedQaSurfaceConfig;
+    readonly accounts: Pick<QaAccounts, "currentUser" | "ownerIdOf" | "sessionAccess" | "updateSessionAccess" | "releaseSessionReservation"> | undefined;
+    readonly access: Pick<QaAccessService, "isDelegatedChild" | "session" | "reserveSession" | "modelPolicyFor">;
+    readonly admission: Pick<QaPolicyAdmission, "secureSession" | "preflightDeployment">;
+    readonly principals: Pick<QaIntegrationPrincipalBindings, "attest">;
+    readonly provenance: Pick<QaProvenanceHost, "forkSnapshots" | "dropSession">;
+    readonly logger: PluginLogger;
+    readonly sessionFiles: QaStoredSessionEraser;
+    readonly sharing?: {
+        forkAuthors(sourceId: string, targetId: string, requests: readonly string[]): void;
+        dropSession(id: string): void;
+    };
+}
+/** Native durable prefix and agent lifecycle, admitted as an independent QA root. */
+export declare function forkQaSession(options: QaForkHostOptions, token: string, sourceId: string, answerSeq: number): Promise<string>;
+//# sourceMappingURL=session-fork-host.d.ts.map

package/lib/types/session-fork.d.ts

@@ -0,0 +1,7 @@
+import type { StoredSessionEvent } from "./admin/conversation-log.js";
+/** Resolve a selected durable answer to the end of its completed turn. */
+export declare function qaForkBoundary(events: readonly StoredSessionEvent[], answerSeq: number): {
+    readonly atSeq: number;
+    readonly turn: number;
+};
+//# sourceMappingURL=session-fork.d.ts.map

package/lib/types/session.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=session.js.map

package/lib/types/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/types/session.ts"],"names":[],"mappings":""}

package/lib/types/shared/documents.d.ts

@@ -17,4 +17,6 @@ export declare const QA_PDF_MEDIA_TYPE = "application/pdf";
  * previewable (Markdown as text, PDF through the browser's own viewer).
  */
 export declare function isConvertibleDocument(mediaType: string): boolean;
+export declare function isSpreadsheetDocument(mediaType: string): boolean;
+export declare function isPreviewableDocument(mediaType: string): boolean;
 //# sourceMappingURL=documents.d.ts.map

package/lib/types/shared/session-lineage.d.ts

@@ -0,0 +1,7 @@
+/** A seeded ordinary child is a fork; delegated runs retain their own origin. */
+export declare function qaDelegatedHeader(header: {
+    readonly parentSession?: unknown;
+    readonly origin?: unknown;
+    readonly isSeeded?: boolean;
+}): boolean;
+//# sourceMappingURL=session-lineage.d.ts.map

package/lib/types/skills.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=skills.js.map

package/lib/types/skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../src/types/skills.ts"],"names":[],"mappings":""}

package/lib/types/slash/draft-target.d.ts

@@ -0,0 +1,7 @@
+export interface QaSlashDraftTarget {
+    readonly subroleId: string | null;
+    readonly adminPreview: boolean;
+}
+export declare function slashDraftTarget(subroleId: string | null, adminPreview: boolean): string;
+export declare function parseSlashDraftTarget(target: string): QaSlashDraftTarget | undefined;
+//# sourceMappingURL=draft-target.d.ts.map

package/lib/types/slash/remotes.d.ts

@@ -1,6 +1,8 @@
 import type { Context } from "@deepseek-ai/cordis";
 import type { PluginLogger } from "@yadsh/dsh-plugin-log";
 import type { QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, ResolvedQaSurfaceConfig } from "../types.js";
+import { type QaSlashNativeSkill } from "./catalog.js";
+import { type QaSlashDraftTarget } from "./draft-target.js";
 /**
  * Host-side bodies of the slash remotes. The `@Remote`-decorated signatures
  * stay on the `QaSurface` service class (typert code generation reads the class
@@ -19,6 +21,11 @@ export interface QaSlashRemotes {
 }
 export interface QaSlashRemotesOptions {
     readonly ctx: Context;
+    /** Reads the preset scope with the authenticated draft role, without a session. */
+    readonly draftSkills?: (token: string, target: QaSlashDraftTarget) => Promise<{
+        readonly skills: readonly QaSlashNativeSkill[];
+        readonly grantedSkills: readonly string[] | undefined;
+    }>;
     readonly getConfig: () => ResolvedQaSurfaceConfig;
     readonly logger: PluginLogger;
     /**

package/lib/types/slash.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=slash.js.map

package/lib/types/slash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slash.js","sourceRoot":"","sources":["../../src/types/slash.ts"],"names":[],"mappings":""}

package/lib/types/types/access.d.ts

@@ -0,0 +1,43 @@
+import type { QaCapabilityConfig, QaCapabilityDescriptor, QaCapabilitySelection, QaSkillAccess, QaSubrole, QaUserAccess } from "./capability.js";
+import type { QaAccountRole } from "./policy.js";
+export type QaAccessAuditAction = "subrole.created" | "subrole.updated" | "subrole.deleted" | "common.updated" | "assignment.updated" | "skill.assignment-updated";
+export interface QaAccessAuditEvent {
+    readonly timestamp: string;
+    readonly actorId: string;
+    readonly action: QaAccessAuditAction;
+    readonly targetId?: string;
+    /** JSON snapshots serialized at the storage boundary for a strict Remote type. */
+    readonly before?: string;
+    readonly after?: string;
+}
+/** Admin table row: credentials and token material are never projected. */
+export interface QaAccessUser {
+    readonly id: string;
+    readonly email: string;
+    readonly displayName: string;
+    readonly accessRole: QaAccountRole;
+    readonly disabled: boolean;
+    readonly access: QaUserAccess;
+}
+/** Ordinary user's role selector data. */
+export interface QaCurrentAccess {
+    readonly subroles: readonly QaSubrole[];
+    readonly defaultSubrole: string;
+}
+/** The role pinned to one existing session. */
+export interface QaSessionAccess {
+    readonly subrole: QaSubrole;
+    readonly adminPreview: boolean;
+}
+/** One authoritative payload for the /qa/admin application. */
+export interface QaAccessAdminSnapshot {
+    readonly config: QaCapabilityConfig;
+    /** Immutable capabilities inherited by every role; exposed read-only. */
+    readonly systemRequired: QaCapabilitySelection;
+    readonly catalog: readonly QaCapabilityDescriptor[];
+    /** Every discovered skill with its declared audience and grant ceiling. */
+    readonly skills: readonly QaSkillAccess[];
+    readonly users: readonly QaAccessUser[];
+    readonly audit: readonly QaAccessAuditEvent[];
+}
+//# sourceMappingURL=access.d.ts.map