@yadsh/dsh-qa-surface 0.16.0 → 0.17.0

package/lib/types/account-remotes.d.ts

@@ -81,6 +81,9 @@ export interface QaAccountRemotes {
     revokeServiceToken(token: string, tokenId: string): {
         readonly revoked: boolean;
     };
+    setServiceTokenClarifications(token: string, tokenId: string, allowed: boolean): {
+        readonly updated: boolean;
+    };
 }
 /** Build the account-remotes context for one `QaSurface` service instance. */
 export declare function createQaAccountRemotes(options: {

package/lib/types/accounts/database.d.ts

@@ -13,6 +13,7 @@ interface PasswordResetRow {
  * nowhere else.
  */
 export interface StoredServiceToken {
+    readonly allowClarifications: boolean;
     readonly id: string;
     readonly userId: string;
     readonly label: string;
@@ -95,6 +96,10 @@ export declare class QaAccountsDatabase {
     deleteOwnership(sessionIds: readonly string[]): void;
     /** Record one freshly minted integration token (digest only, never a secret). */
     insertServiceToken(token: StoredServiceToken): void;
+    /** Store the authenticated token policy before admitting its request to the inbox. */
+    recordIntegrationRequestPolicy(sessionId: string, requestId: string, allowed: boolean): void;
+    integrationClarificationsAllowed(sessionId: string, requestId: string): boolean;
+    setServiceTokenClarifications(userId: string, tokenId: string, allowed: boolean): boolean;
     /**
      * One integration token by id, revoked and expired ones included.
      *

package/lib/types/accounts/store.d.ts

@@ -41,8 +41,9 @@ export interface QaSessionFacts {
 export interface QaServiceTokenIssueInput {
     /** A note for the operator's token list; empty becomes a generic label. */
     readonly label?: string;
-    /** Requested scopes; unknown ones are dropped, empty falls back to `ask`. */
+    /** Requested scopes; unknown ones are dropped, explicit empty grants none. */
     readonly scopes?: readonly string[];
+    readonly allowClarifications?: boolean;
     /** How long the token lives; bounded, and the session TTL when omitted. */
     readonly ttlDays?: number;
     /**
@@ -54,6 +55,7 @@ export interface QaServiceTokenIssueInput {
 }
 /** What a presented integration token resolved to. */
 export interface QaVerifiedServiceToken {
+    readonly allowClarifications: boolean;
     readonly tokenId: string;
     readonly userId: string;
     readonly scopes: readonly QaServiceTokenScope[];
@@ -421,6 +423,9 @@ export declare class QaAccounts {
      * @returns true when a live token was revoked.
      */
     revokeServiceToken(token: string, tokenId: string): boolean;
+    recordIntegrationRequestPolicy(sessionId: string, requestId: string, allowed: boolean): void;
+    setServiceTokenClarifications(token: string, tokenId: string, allowed: boolean): boolean;
+    integrationClarificationsAllowed(sessionId: string, requestId: string): boolean;
     /** Revoke one integration token of an account the caller has established. */
     revokeServiceTokenFor(user: QaAccountUserPublic, tokenId: string): boolean;
     /** The caller if it administers the deployment, or a refusal. */

package/lib/types/answer-review.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=answer-review.js.map

package/lib/types/answer-review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"answer-review.js","sourceRoot":"","sources":["../../src/types/answer-review.ts"],"names":[],"mappings":""}

package/lib/types/chat-sharing/store.d.ts

@@ -7,6 +7,7 @@ export declare class QaChatSharingStore {
     readonly storage: SqliteDatabase;
     constructor(filePath: string, accounts: () => QaAccounts);
     access(token: string, sessionId: string): QaChatAccess;
+    private accessForActor;
     owner(token: string, sessionId: string): QaChatAccess;
     write(token: string, sessionId: string): QaChatAccess;
     /** Exact address lookup after ownership, never an account directory. */

package/lib/types/chat-sharing/transport.d.ts

@@ -10,6 +10,7 @@ export declare class QaChatTransport {
     private readonly locks;
     constructor(ctx: Context, store: () => QaChatSharingStore, admit: (token: string, id: string) => Promise<unknown>, participantPolicy?: ((userId: string, id: string) => Promise<unknown>) | undefined);
     list(token: string, signal: AbortSignal): Promise<SessionListValue>;
+    private filterListing;
     page(token: string, request: SessionPageRequest, signal: AbortSignal): Promise<SessionPage>;
     search(token: string, request: SessionSearchRequest, signal: AbortSignal): Promise<SessionSearchValue>;
     projections(token: string, id: string, signal: AbortSignal): Promise<SessionProjectionsValue>;

package/lib/types/client/QaAccountsController.d.ts

@@ -181,6 +181,7 @@ export declare class QaAccountsController {
      * authority on whose token it is; a refusal is shown as it arrives.
      */
     revokeServiceToken(tokenId: string): Promise<QaIntegrationTokenResult<null>>;
+    setServiceTokenClarifications(tokenId: string, allowed: boolean): Promise<QaIntegrationTokenResult<null>>;
     private authenticate;
     /** Own the account, migrate the legacy index, replay held ratings, then auth. */
     private enterSession;

package/lib/types/client/answer-review.d.ts

@@ -0,0 +1,16 @@
+import type { SessionEventLike } from "@deepseek-ai/dsh-api-session-controller/client";
+import type { ConversationNodeDefinition, ConversationSnapshot } from "@deepseek-ai/dsh-client-ui-conversation/client";
+import type { QaAnswerReview } from "../types/answer-review.js";
+export declare const QA_REVIEW_NODE = "qa-answer-review";
+declare module "@deepseek-ai/dsh-client-ui-chat/client" {
+    interface ChatNodeDataMap {
+        "qa-answer-review": QaAnswerReview;
+    }
+}
+/** Read only the gate's producer metadata; answer prose never supplies a verdict. */
+export declare function readAnswerReview(event: SessionEventLike): QaAnswerReview | null;
+export declare function parseAnswerReview(receipt: unknown): QaAnswerReview | null;
+/** One current result per human request, with the latest answer's anchor. */
+export declare const answerReviewConversationDefinition: ConversationNodeDefinition<QaAnswerReview>;
+export declare function answerReviewsOf(snapshot: ConversationSnapshot | undefined): ReadonlyMap<number, QaAnswerReview>;
+//# sourceMappingURL=answer-review.d.ts.map

package/lib/types/client/components/QaAnswerReviewStatus.d.ts

@@ -0,0 +1,8 @@
+import type { PropsRuntime } from "@deepseek-ai/dsh-client-ui-slots";
+import type { QaAnswerReview } from "../../types/answer-review.js";
+export declare function QaAnswerReviewStatus({ review, }: {
+    readonly review: QaAnswerReview;
+}): import("react/jsx-runtime").JSX.Element;
+export declare function QaNativeAnswerReviewStatus({ node, }: PropsRuntime<"conversation.chat.node", "qa-answer-review">): import("react/jsx-runtime").JSX.Element;
+export declare const QA_REVIEW_STYLES = "\n.dsh-qa-review-row{padding:4px 0 12px}\n.dsh-qa-review{display:inline-flex;align-items:center;gap:6px;max-width:100%;margin:8px 0 0;padding:4px 9px;border:1px solid var(--dsw-alias-border-l2);border-radius:999px;color:var(--dsw-alias-label-secondary);background:var(--dsw-alias-bg-layer-2);font-size:12px;line-height:18px}\n.dsh-qa-review svg{width:14px;height:14px;flex:none;fill:none;stroke:currentColor;stroke-width:1.5;stroke-linecap:round;stroke-linejoin:round}\n.dsh-qa-review[data-status=pass]{color:var(--dsw-alias-state-success-primary,var(--dsw-alias-label-primary))}\n";
+//# sourceMappingURL=QaAnswerReviewStatus.d.ts.map

package/lib/types/client/components/QaChatActions.d.ts

@@ -0,0 +1,7 @@
+/** Quiet actions attached to one owned chat, outside the conversation header. */
+export declare function QaChatActions(props: {
+    name: string;
+    onShare: () => void;
+    onDelete?: (trigger: HTMLButtonElement) => void;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=QaChatActions.d.ts.map

package/lib/types/client/components/QaChatSharing.d.ts

@@ -5,6 +5,8 @@ export declare function QaChatSharing(props: {
     access: QaChatAccess;
     token: string;
     api: QaSharingApi;
-}): import("react/jsx-runtime").JSX.Element;
-export declare const QA_SHARING_STYLES = "\n.dsh-qa-sharing{padding:8px 20px;color:var(--dsw-alias-label-secondary);font-size:13px;border-bottom:1px solid var(--dsw-alias-border-l2);display:flex;gap:12px;align-items:center;flex-wrap:wrap}\n.dsh-qa-sharing__notice{margin:0;color:var(--dsw-alias-label-tertiary)}\n.dsh-qa-sharing>span{overflow-wrap:anywhere;min-width:0}\n.dsh-qa-sharing>button,.dsh-qa-sharing__body .dsh-qa-btn{appearance:none;cursor:pointer;min-height:40px;font:inherit;color:var(--dsw-alias-label-primary);background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2);border-radius:8px;padding:8px 12px}\n.dsh-qa-sharing>button:hover,.dsh-qa-sharing__body .dsh-qa-btn:hover{background:var(--dsw-alias-bg-layer-3)}\n.dsh-qa-sharing>button:disabled,.dsh-qa-sharing__body .dsh-qa-btn:disabled{cursor:default;opacity:.55}\n.dsh-qa-sharing>button:focus-visible,.dsh-qa-sharing__body .dsh-qa-btn:focus-visible{outline:var(--dsw-focus-ring-width,2px) solid var(--dsw-focus-ring-color,var(--dsw-alias-brand-primary));outline-offset:2px}\n.dsh-qa-sharing__form{display:grid;gap:12px;margin:16px 0}\n.dsh-qa-sharing__body label{display:flex;flex-direction:column;gap:6px}\n.dsh-qa-sharing__body input,.dsh-qa-sharing__body select{font:inherit;color:var(--dsw-alias-label-primary);background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2);border-radius:8px;padding:8px;min-width:0;max-width:100%}\n.dsh-qa-sharing__people{list-style:none;padding:0;margin:16px 0}\n.dsh-qa-sharing__people li{display:flex;gap:10px;align-items:center;flex-wrap:wrap;padding:12px 0;border-top:1px solid var(--dsw-alias-border-l2)}\n.dsh-qa-sharing__people span{flex:1;min-width:140px;overflow-wrap:anywhere}\n.dsh-qa-sharing__people small{display:block;color:var(--dsw-alias-label-tertiary)}\n";
+    open: boolean;
+    onClose: () => void;
+}): import("react/jsx-runtime").JSX.Element | null;
+export declare const QA_SHARING_STYLES = "\n.dsh-qa-sharing__body{font-size:13px;color:var(--dsw-alias-label-secondary)}\n.dsh-qa-sharing__intro{margin:0 0 8px;line-height:1.5}\n.dsh-qa-sharing__details{color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:1.5}\n.dsh-qa-sharing__details summary{cursor:pointer}\n.dsh-qa-sharing__body .dsh-qa-btn{appearance:none;cursor:pointer;min-height:36px;font:inherit;color:var(--dsw-alias-label-primary);background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2);border-radius:8px;padding:7px 12px}\n.dsh-qa-sharing__body .dsh-qa-btn:hover{background:var(--dsw-alias-bg-layer-3)}\n.dsh-qa-sharing__body .dsh-qa-btn:disabled{cursor:default;opacity:.55}\n.dsh-qa-sharing__body .dsh-qa-btn:focus-visible{outline:var(--dsw-focus-ring-width,2px) solid var(--dsw-focus-ring-color,var(--dsw-alias-brand-primary));outline-offset:2px}\n.dsh-qa-sharing__form{display:grid;grid-template-columns:minmax(0,1fr) minmax(0,160px);gap:12px;margin:20px 0}\n.dsh-qa-sharing__form>.dsh-qa-btn{grid-column:1/-1;justify-self:start}\n.dsh-qa-sharing__body label{display:flex;flex-direction:column;gap:6px}\n.dsh-qa-sharing__body input,.dsh-qa-sharing__body select{font:inherit;color:var(--dsw-alias-label-primary);background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2);border-radius:8px;padding:8px;min-width:0;max-width:100%}\n.dsh-qa-sharing__people{list-style:none;padding:0;margin:16px 0}\n.dsh-qa-sharing__people li{display:flex;gap:10px;align-items:center;flex-wrap:wrap;padding:12px 0;border-top:1px solid var(--dsw-alias-border-l2)}\n.dsh-qa-sharing__people span{flex:1;min-width:140px;overflow-wrap:anywhere}\n.dsh-qa-sharing__people small{display:block;color:var(--dsw-alias-label-tertiary)}\n@media(max-width:480px){.dsh-qa-sharing__form{grid-template-columns:minmax(0,1fr)}}\n";
 //# sourceMappingURL=QaChatSharing.d.ts.map

package/lib/types/client/components/QaMarkdownPreview.d.ts

@@ -0,0 +1,13 @@
+import type { ReactNode } from "react";
+import type { MarkdownFrontmatter } from "../../markdown-frontmatter.js";
+/** Source-only rendering: original file line numbers survive frontmatter removal. */
+export declare function QaMarkdownPreview({ text, renderFrontmatter, frontmatter, lineStart, lineEnd, renderImage, requestKey, }: {
+    readonly text: string;
+    readonly renderFrontmatter: boolean;
+    readonly frontmatter?: MarkdownFrontmatter;
+    readonly lineStart?: number;
+    readonly lineEnd?: number;
+    readonly renderImage?: (src: string, alt: string) => ReactNode;
+    readonly requestKey?: unknown;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=QaMarkdownPreview.d.ts.map

package/lib/types/client/components/QaModal.d.ts

@@ -6,6 +6,15 @@ import { type ReactNode } from "react";
  * the dialog is turned back into a page under the scrim.
  */
 export declare function isQaModalOpen(): boolean;
+/**
+ * Join the stack from a shell that draws its own chrome rather than this
+ * panel — the image lightbox is such a shell. One Escape press then closes the
+ * innermost layer instead of every dialog under it.
+ */
+export declare function joinQaDialogStack(): {
+    readonly innermost: () => boolean;
+    readonly leave: () => void;
+};
 export interface QaModalProps {
     readonly open: boolean;
     /** Dialog title; also the dialog's accessible name. */

package/lib/types/client/components/QaRightRail.d.ts

@@ -13,9 +13,10 @@ export interface QaRightRailProps {
     readonly activeTab: QaRailTab;
     readonly onTabSelect: (tab: QaRailTab) => void;
     readonly onClose: () => void;
+    readonly stateKey?: string;
 }
 /**
- * The chat's right rail: a fixed column whose top edge is the tab strip,
+ * The chat's right rail: a resizable column whose top edge is the tab strip,
  * mirroring the Harness right Sidebar's chrome. Tabs are plain chips with
  * counts; the strip's last control collapses the whole column.
  *
@@ -25,5 +26,5 @@ export interface QaRightRailProps {
  * the rail keeps the key: the innermost thing on the page is what the reader
  * means to dismiss.
  */
-export declare function QaRightRail({ tabs, activeTab, onTabSelect, onClose, }: QaRightRailProps): import("react/jsx-runtime").JSX.Element | null;
+export declare function QaRightRail({ tabs, activeTab, onTabSelect, onClose, stateKey, }: QaRightRailProps): import("react/jsx-runtime").JSX.Element | null;
 //# sourceMappingURL=QaRightRail.d.ts.map

package/lib/types/client/components/QaRightRailResize.d.ts

@@ -0,0 +1,9 @@
+import { type RefObject } from "react";
+export declare function resolveQaRightRailWidth(requested: number | null, available: number): number;
+/** A one-sided border drag: moving left widens the panel on the right. */
+export declare function QaRightRailResize(props: {
+    root: RefObject<HTMLElement | null>;
+    storage: Pick<Storage, "getItem" | "setItem">;
+    storageKey: string;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=QaRightRailResize.d.ts.map

package/lib/types/client/components/QaSidebar.d.ts

@@ -2,6 +2,7 @@ import type { SessionSummary } from "@deepseek-ai/dsh-api-session-controller/cli
 import { type QaAuditSummary } from "../audit/types.js";
 /** One renderable row of the chat-history sidebar. */
 export interface QaChatRow {
+    readonly shareable?: boolean;
     readonly id: string;
     readonly title: string;
     readonly running: boolean;
@@ -59,6 +60,7 @@ export interface QaSidebarProps {
     readonly onNewChat: () => void;
     /** Removes a chat from this browser's index; omit to hide the control. */
     readonly onDelete?: (sessionId: string) => void;
+    readonly onShare?: (sessionId: string) => void;
     /**
      * Whether the phone layout shows this sidebar as a drawer over the
      * conversation. The state is the surface's, not the sidebar's: the control

package/lib/types/client/components/QaSourceFilters.d.ts

@@ -0,0 +1,12 @@
+import type { QaSource } from "../../types.js";
+export declare function matchesSourceText(source: QaSource, query: string): boolean;
+export declare function QaSourceFilters({ sources, query, kind, count, onQuery, onKind, onReset, }: {
+    readonly sources: readonly QaSource[];
+    readonly query: string;
+    readonly kind: QaSource["kind"] | "all";
+    readonly count: number;
+    readonly onQuery: (value: string) => void;
+    readonly onKind: (value: QaSource["kind"] | "all") => void;
+    readonly onReset: () => void;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=QaSourceFilters.d.ts.map

package/lib/types/client/components/QaSpreadsheetPreview.d.ts

@@ -0,0 +1,8 @@
+import type { QaSpreadsheetPreview as Preview, QaSpreadsheetPreviewSelection as Selection } from "../../types.js";
+export interface QaSpreadsheetPreviewProps {
+    readonly initial: Preview;
+    readonly load: (selection: Selection) => Promise<Preview>;
+}
+/** Read-only cells, with explicit paging on both axes and no formula execution. */
+export declare function QaSpreadsheetPreview({ initial, load, }: QaSpreadsheetPreviewProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=QaSpreadsheetPreview.d.ts.map

package/lib/types/client/components/QaWelcomeNotice.d.ts

@@ -1,7 +1,7 @@
 import type { SettingsOnboardingOwnerProps } from "@deepseek-ai/dsh-client-ui-settings/client";
 import type { StorageLike } from "../types.js";
 /** Bump when the notice changes materially and must be acknowledged again. */
-export declare const QA_WELCOME_NOTICE_VERSION = "2026-09-12.1";
+export declare const QA_WELCOME_NOTICE_VERSION = "2026-10-11.1";
 export declare const QA_WELCOME_NOTICE_COPY: Readonly<{
     title: "Перед началом тестирования";
     paragraphs: readonly string[];

package/lib/types/client/components/QaZoomImage.d.ts

@@ -0,0 +1,38 @@
+import type { ImgHTMLAttributes } from "react";
+/**
+ * A surface image at its reading size, plus the overlay it opens into.
+ *
+ * A transcript thumbnail is 132 px wide: enough to recognise a figure, not
+ * enough to read one. The thumbnail used to be an anchor to its own `blob:`
+ * address, and a browser that refuses top-level navigation to a blob answers
+ * the click with nothing at all, so the reader had no way to see the image the
+ * question was about.
+ */
+export declare function QaZoomImage({ src, alt, className, testId, openLabel, zoomable, ...image }: {
+    readonly src: string;
+    readonly alt: string;
+    readonly className: string;
+    readonly testId: string;
+    readonly openLabel?: string;
+    /**
+     * Whether the image answers a click. An image that sits inside a link does
+     * not: a control nested in an anchor is invalid, and the activation the
+     * reader meant for the link would reach the zoom as well.
+     */
+    readonly zoomable?: boolean;
+} & Omit<ImgHTMLAttributes<HTMLImageElement>, "src" | "alt" | "className">): import("react/jsx-runtime").JSX.Element;
+/**
+ * The overlay itself: the image contained to the viewport over a mask. Escape,
+ * the mask and the close control end it, and the close control takes focus on
+ * open so a keyboard reader leaves the same way it entered.
+ *
+ * The root is a span because an answer's image sits inside its paragraph, and
+ * a block-level root there is invalid nesting the browser repairs by lifting it
+ * out of the text that owns it.
+ */
+export declare function QaImageLightbox({ src, alt, onClose, }: {
+    readonly src: string;
+    readonly alt: string;
+    readonly onClose: () => void;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=QaZoomImage.d.ts.map

package/lib/types/client/markdown/SourceImage.d.ts

@@ -0,0 +1,7 @@
+/** Illustrations are fetched on approach to the viewport, never in a document-wide burst. */
+export declare function SourceImage({ src, alt, load, }: {
+    readonly src: string;
+    readonly alt: string;
+    readonly load: (path: string) => Promise<string | undefined>;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=SourceImage.d.ts.map

package/lib/types/client/markdown/blocks.d.ts

@@ -74,6 +74,10 @@ export type MarkdownBlock = {
 };
 /** A parsed document: its blocks plus the reference targets they resolve. */
 export interface ParsedMarkdown {
+    readonly ranges: readonly {
+        readonly start: number;
+        readonly end: number;
+    }[];
     readonly blocks: readonly MarkdownBlock[];
     /** Link/image definitions by upper-cased identifier. */
     readonly definitions: ReadonlyMap<string, string>;
@@ -111,5 +115,8 @@ export declare function parseMarkdown(text: string, options?: MarkdownParseOptio
  * line may still be typed.
  * @returns The container's blocks.
  */
-export declare function parseBlocks(lines: readonly string[], definitions: Map<string, string>, footnotes: Map<string, readonly MarkdownBlock[]>, depth: number, streaming?: boolean): MarkdownBlock[];
+export declare function parseBlocks(lines: readonly string[], definitions: Map<string, string>, footnotes: Map<string, readonly MarkdownBlock[]>, depth: number, streaming?: boolean, ranges?: {
+    start: number;
+    end: number;
+}[]): MarkdownBlock[];
 //# sourceMappingURL=blocks.d.ts.map

package/lib/types/client/markdown/render.d.ts

@@ -13,5 +13,9 @@ import { type MarkdownSourceContext } from "./source-chip.js";
  * @returns The document's blocks, plus the footnote section when the document
  * references a defined footnote.
  */
-export declare function renderMarkdown(text: string, context: MarkdownSourceContext, options?: MarkdownParseOptions): ReactNode[];
+export declare function renderMarkdown(text: string, context: MarkdownSourceContext, options?: MarkdownParseOptions, sourceLines?: {
+    readonly offset: number;
+    readonly start?: number;
+    readonly end?: number;
+}): ReactNode[];
 //# sourceMappingURL=render.d.ts.map

package/lib/types/client/markdown/source-chip.d.ts

@@ -3,6 +3,7 @@ import type { QaSource } from "../../types.js";
 import { type QaSourceRefs } from "../components/source-refs.js";
 /** Inline source awareness handed down from the owning assistant message. */
 export interface MarkdownSourceContext {
+    readonly renderImage?: (src: string, alt: string) => ReactNode;
     readonly refs?: QaSourceRefs;
     /** Open a path-backed source in the sources drawer's detail view. */
     readonly onSourceOpen?: (source: QaSource) => void;

package/lib/types/client/settings/styles.d.ts

@@ -9,11 +9,8 @@
  * outline under pointer modality at a specificity our rule cannot win, so a
  * hard-coded ring is one that goes missing rather than one that degrades.
  *
- * The type scale is the surface's: text the operator reads in order to decide —
- * section titles, field labels, the values in the controls, the toggle copy —
- * is 16px, a control's own label and an outcome line are 14px, and only chrome
- * stays small on purpose: the «Изменено» badge (9px), the status chips (11px),
- * the monospace data rows (11px) and the footer note (10px).
+ * The body controls use the plugin kit's shared type scale. Status chips,
+ * data rows and the footer retain their compact page-specific presentation.
  */
 export declare const QA_SETTINGS_STYLES: string;
 //# sourceMappingURL=styles.d.ts.map

package/lib/types/client/source-filters-styles.d.ts

@@ -0,0 +1,2 @@
+export declare const sourceFiltersStyles = "\n.dsh-qa-sourcefilters{display:flex;flex-wrap:wrap;align-items:center;gap:8px;padding:2px 12px 10px;flex:none}\n.dsh-qa-sourcefilters input,.dsh-qa-sourcefilters select{min-width:0;padding:7px 9px;border:1px solid var(--dsw-alias-border-l2);border-radius:8px;background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);font:inherit;font-size:12px}\n.dsh-qa-sourcefilters input{flex:1 1 200px;width:100%}\n.dsh-qa-sourcefilters select{flex:1 1 150px;max-width:100%}\n.dsh-qa-sourcefilters__count{color:var(--dsw-alias-label-tertiary);font-size:11px}\n.dsh-qa-sourcefilters button{margin-left:auto;border:0;background:transparent;color:var(--dsh-qa-accent);font:inherit;font-size:12px;cursor:pointer}\n.dsh-qa-sourcefilters :is(input,select,button):focus-visible{outline:var(--dsw-focus-ring-width, 2px) solid var(--dsw-focus-ring-color, var(--dsh-qa-accent));outline-offset:2px}\n.dsh-qa-sourcedetail__content-label{margin:0 0 8px;font-size:12px;font-weight:600;color:var(--dsw-alias-label-primary)}\n";
+//# sourceMappingURL=source-filters-styles.d.ts.map

package/lib/types/client/types.d.ts

@@ -1,7 +1,7 @@
 import type { ClientRemote } from "@deepseek-ai/dsh-api-gateway/client";
 import type { ISessions, SessionFace } from "@deepseek-ai/dsh-api-session-controller/client";
 import type { UiConversation } from "@deepseek-ai/dsh-client-ui-conversation/client";
-import type { QaAccountNotificationsInput, QaAccountProfileInput, QaAccountSession, QaAccountStartersInput, QaAccountStarter, QaAccountUserPublic, QaAccessAdminSnapshot, QaApprovalDecision, QaClaimResult, QaLockdownProof, QaModelCatalogEntry, QaOwnershipEntry, QaPasswordResetRequest, QaPendingApproval, QaPendingQuestion, QaQuestionAnswerItem, QaQueueStatus, QaIssuedServiceToken, QaServiceTokenCreateInput, QaServiceTokenSummary, QaSessionState, QaSkillDocument, QaSkillDraftInput, QaSkillRemoval, QaSkillSummary, QaSkillToolDescriptor, QaSkillValidation, QaSourceFilePreview, QaTurnSources, QaWhoamiResult, QaDocumentPreview, QaWorkspaceFile, QaWorkspaceFileChunk, QaDocumentWorkflowStatus, QaWorkspaceListing, QaCapabilitySelection, QaCurrentAccess, QaSessionAccess, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, QaAdminAuditEvent, QaAdminOverview, QaAdminPage, QaAdminSkillScope, QaAdminSkillsView, QaAdminUserDetail, QaAdminUserRow, QaAdminUserUpdate, QaAuditQuery, QaConversationDetail, QaConversationDeletion, QaConversationQuery, QaConversationReview, QaConversationReviewInput, QaConversationSummary, QaExpertMemoryDraft, QaExpertMemoryPage, QaExpertMemoryRecord, QaExpertMemoryScope, QaFeedbackQuery, QaFeedbackRow, QaMessageFeedback, QaMessageFeedbackInput, QaQualityMetrics, QaReviewQueueItem, QaReviewQueueRow, QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, QaUserQuery } from "../types.js";
+import type { QaAccountNotificationsInput, QaAccountProfileInput, QaAccountSession, QaAccountStartersInput, QaAccountStarter, QaAccountUserPublic, QaAccessAdminSnapshot, QaApprovalDecision, QaClaimResult, QaLockdownProof, QaModelCatalogEntry, QaOwnershipEntry, QaPasswordResetRequest, QaPendingApproval, QaPendingQuestion, QaQuestionAnswerItem, QaQueueStatus, QaIssuedServiceToken, QaServiceTokenCreateInput, QaServiceTokenSummary, QaSessionState, QaSkillDocument, QaSkillDraftInput, QaSkillRemoval, QaSkillSummary, QaSkillToolDescriptor, QaSkillValidation, QaSourceFilePreview, QaTurnSources, QaWhoamiResult, QaDocumentPreview, QaSpreadsheetPreviewSelection, QaWorkspaceFile, QaWorkspaceFileChunk, QaDocumentWorkflowStatus, QaWorkspaceListing, QaCapabilitySelection, QaCurrentAccess, QaSessionAccess, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, QaAdminAuditEvent, QaAdminOverview, QaAdminPage, QaAdminSkillScope, QaAdminSkillsView, QaAdminUserDetail, QaAdminUserRow, QaAdminUserUpdate, QaAuditQuery, QaConversationDetail, QaConversationDeletion, QaConversationQuery, QaConversationReview, QaConversationReviewInput, QaConversationSummary, QaExpertMemoryDraft, QaExpertMemoryPage, QaExpertMemoryRecord, QaExpertMemoryScope, QaFeedbackQuery, QaFeedbackRow, QaMessageFeedback, QaMessageFeedbackInput, QaQualityMetrics, QaReviewQueueItem, QaReviewQueueRow, QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, QaUserQuery } from "../types.js";
 /** Wire content one prompt carries: text plus base64 image uploads. */
 export type QaPromptContent = Parameters<SessionFace["prompt"]>[0];
 /** DSH session runtime surface the QA controller is allowed to touch. */
@@ -158,13 +158,14 @@ export interface QaSourceApi {
         readonly ok: false;
         readonly error: unknown;
     }>;
-    readSourceFile(token: string, sessionId: string, sourcePath: string): Promise<{
+    readSourceFile(token: string, sessionId: string, sourcePath: string, selection?: QaSpreadsheetPreviewSelection): Promise<{
         readonly ok: true;
         readonly value: QaSourceFilePreview;
     } | {
         readonly ok: false;
         readonly error: unknown;
     }>;
+    readSourceImage?(token: string, sessionId: string, sourcePath: string, imagePath: string): Promise<RemoteResult<string>>;
     /** One directory of the chat's own workspace, for the files panel. */
     listWorkspaceFiles(token: string, sessionId: string, path: string): Promise<{
         readonly ok: true;
@@ -186,7 +187,7 @@ export interface QaSourceApi {
      * document pipeline; the panel shows the PDF the browser already knows how
      * to draw instead of uploading the bytes anywhere.
      */
-    previewWorkspaceDocument(token: string, sessionId: string, path: string): Promise<{
+    previewWorkspaceDocument(token: string, sessionId: string, path: string, selection?: QaSpreadsheetPreviewSelection): Promise<{
         readonly ok: true;
         readonly value: QaDocumentPreview;
     } | {
@@ -214,13 +215,14 @@ export type QaBoundSourceApi = {
         readonly ok: false;
         readonly error: unknown;
     }>;
-    readSourceFile(sessionId: string, sourcePath: string): Promise<{
+    readSourceFile(sessionId: string, sourcePath: string, selection?: QaSpreadsheetPreviewSelection): Promise<{
         readonly ok: true;
         readonly value: QaSourceFilePreview;
     } | {
         readonly ok: false;
         readonly error: unknown;
     }>;
+    readSourceImage?(sessionId: string, sourcePath: string, imagePath: string): Promise<RemoteResult<string>>;
     listWorkspaceFiles(sessionId: string, path: string): Promise<{
         readonly ok: true;
         readonly value: QaWorkspaceListing;
@@ -235,7 +237,7 @@ export type QaBoundSourceApi = {
         readonly ok: false;
         readonly error: unknown;
     }>;
-    previewWorkspaceDocument(sessionId: string, path: string): Promise<{
+    previewWorkspaceDocument(sessionId: string, path: string, selection?: QaSpreadsheetPreviewSelection): Promise<{
         readonly ok: true;
         readonly value: QaDocumentPreview;
     } | {
@@ -342,9 +344,13 @@ export interface QaIntegrationTokenApi {
     list(): Promise<QaIntegrationTokenResult<readonly QaServiceTokenSummary[]>>;
     create(input: QaServiceTokenCreateInput): Promise<QaIntegrationTokenResult<QaIssuedServiceToken>>;
     revoke(tokenId: string): Promise<QaIntegrationTokenResult<null>>;
+    setClarifications?(tokenId: string, allowed: boolean): Promise<QaIntegrationTokenResult<null>>;
 }
 /** Account remotes exposed by the plugin's own typert namespace. */
 export interface QaAccountsApi {
+    accountsSetServiceTokenClarifications?(token: string, tokenId: string, allowed: boolean): Promise<RemoteResult<{
+        readonly updated: boolean;
+    }>>;
     chatVisible?(token: string): Promise<RemoteResult<readonly import("../chat-sharing/types.js").QaChatAccess[]>>;
     accountsWhoami(token: string): Promise<RemoteResult<QaWhoamiResult>>;
     accountsLogin(email: string, password: string): Promise<RemoteResult<QaAccountSession>>;

package/lib/types/index.d.ts

@@ -5,7 +5,7 @@ import type { Context } from "@deepseek-ai/cordis";
 import type { QaSurfaceConfigRefs } from "./config.js";
 import type { QaAccountNotificationsInput } from "./types.js";
 import type { QaTurnSources } from "./provenance/types.js";
-import type { QaAccountProfileInput, QaAccountSession, QaAccountStartersInput, QaAccountUserPublic, QaApprovalDecision, QaClaimResult, QaDocumentPreview, QaDocumentWorkflowStatus, QaIssuedServiceToken, QaLockdownProof, QaOwnershipEntry, QaPasswordResetRequest, QaPendingApproval, QaPendingQuestion, QaQuestionAnswerItem, QaQueueStatus, QaServiceTokenCreateInput, QaServiceTokenSummary, ResolvedQaSurfaceConfig, QaAdminSkillScope, QaAdminSkillsView, QaExpertMemoryDraft, QaExpertMemoryPage, QaExpertMemoryRecord, QaExpertMemoryScope, QaSkillDocument, QaSkillDraftInput, QaSkillRemoval, QaSkillSummary, QaSkillToolDescriptor, QaSkillValidation, QaSourceFilePreview, QaWhoamiResult, QaWorkspaceFile, QaWorkspaceFileChunk, QaWorkspaceListing, QaPrincipal, QaAccessAdminSnapshot, QaAdminAuditEvent, QaAdminOverview, QaAdminPage, QaAdminUserDetail, QaAdminUserRow, QaAdminUserUpdate, QaAuditQuery, QaCapabilitySelection, QaConversationDetail, QaConversationDeletion, QaConversationQuery, QaConversationReview, QaConversationReviewInput, QaConversationSummary, QaCurrentAccess, QaFeedbackHarvestEntry, QaFeedbackHarvestResult, QaFeedbackQuery, QaFeedbackRow, QaMessageFeedback, QaMessageFeedbackInput, QaModelCatalogEntry, QaModelPair, QaQualityMetrics, QaReviewQueueItem, QaReviewQueueRow, QaSessionAccess, QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, QaUserQuery } from "./types.js";
+import type { QaAccountProfileInput, QaAccountSession, QaAccountStartersInput, QaAccountUserPublic, QaApprovalDecision, QaClaimResult, QaDocumentPreview, QaSpreadsheetPreviewSelection, QaDocumentWorkflowStatus, QaIssuedServiceToken, QaLockdownProof, QaOwnershipEntry, QaPasswordResetRequest, QaPendingApproval, QaPendingQuestion, QaQuestionAnswerItem, QaQueueStatus, QaServiceTokenCreateInput, QaServiceTokenSummary, ResolvedQaSurfaceConfig, QaAdminSkillScope, QaAdminSkillsView, QaExpertMemoryDraft, QaExpertMemoryPage, QaExpertMemoryRecord, QaExpertMemoryScope, QaSkillDocument, QaSkillDraftInput, QaSkillRemoval, QaSkillSummary, QaSkillToolDescriptor, QaSkillValidation, QaSourceFilePreview, QaWhoamiResult, QaWorkspaceFile, QaWorkspaceFileChunk, QaWorkspaceListing, QaPrincipal, QaAccessAdminSnapshot, QaAdminAuditEvent, QaAdminOverview, QaAdminPage, QaAdminUserDetail, QaAdminUserRow, QaAdminUserUpdate, QaAuditQuery, QaCapabilitySelection, QaConversationDetail, QaConversationDeletion, QaConversationQuery, QaConversationReview, QaConversationReviewInput, QaConversationSummary, QaCurrentAccess, QaFeedbackHarvestEntry, QaFeedbackHarvestResult, QaFeedbackQuery, QaFeedbackRow, QaMessageFeedback, QaMessageFeedbackInput, QaModelCatalogEntry, QaModelPair, QaQualityMetrics, QaReviewQueueItem, QaReviewQueueRow, QaSessionAccess, QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, QaUserQuery } from "./types.js";
 export declare const name = "qa-surface";
 export declare const inject: string[];
 import { QA_SURFACE_SETTINGS_NAMESPACE } from "./shared/settings.js";
@@ -214,6 +214,9 @@ export declare class QaSurface extends TypertRemoteService {
     accountsRevokeServiceToken(token: string, tokenId: string): {
         readonly revoked: boolean;
     };
+    accountsSetServiceTokenClarifications(token: string, tokenId: string, allowed: boolean): {
+        readonly updated: boolean;
+    };
     /**
      * Serve the effective QA configuration to the browser. The DSH gateway pins
      * settings RPCs to loopback, so a browser served over the LAN always sees
@@ -405,7 +408,9 @@ export declare class QaSurface extends TypertRemoteService {
      * read — the normal case for a deployment whose docs and code live beside
      * the per-account scratch directory — could never be opened in the panel.
      */
-    readSourceFile(token: string, sessionId: string, sourcePath: string): Promise<QaSourceFilePreview>;
+    readSourceFile(token: string, sessionId: string, sourcePath: string, selection?: QaSpreadsheetPreviewSelection): Promise<QaSourceFilePreview>;
+    /** Load one relative raster illustration of an attested Markdown source. */
+    readSourceImage(token: string, sessionId: string, sourcePath: string, imagePath: string): Promise<string>;
     /**
      * List one directory of the chat's own workspace for the files panel.
      *
@@ -439,7 +444,7 @@ export declare class QaSurface extends TypertRemoteService {
      * produced PDF is read back here and travels as base64, so the audience never
      * reaches an unfenced byte route.
      */
-    previewWorkspaceDocument(token: string, sessionId: string, path: string): Promise<QaDocumentPreview>;
+    previewWorkspaceDocument(token: string, sessionId: string, path: string, selection?: QaSpreadsheetPreviewSelection): Promise<QaDocumentPreview>;
     /**
      * Shared admission facts of both browse methods: the preview switch is what
      * opens the panel's file reading at all, and the chat's cwd is the tree that

package/lib/types/integration/contract.d.ts

@@ -166,6 +166,7 @@ export interface QaIntegrationRunner {
         /** The chat to continue, or null for a new conversation. */
         readonly chatId: string | null;
         readonly message: string;
+        readonly allowClarifications?: boolean;
         readonly attachments: readonly QaIntegrationAttachment[];
         readonly ticketKey: string | null;
         /** Ends the wait: the caller's own lifetime merged with the deployment's budget. */

package/lib/types/integration/question-policy.d.ts

@@ -0,0 +1,20 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { Agent } from "@deepseek-ai/dsh-agent";
+import type { QaAccounts } from "../accounts/store.js";
+export declare const QA_INTEGRATION_NO_CLARIFICATIONS = "Clarifying questions are disabled for this integration turn. Do not call ask_user_question or ask follow-up questions in your answer. Answer from available evidence, label assumptions and missing facts, and state what cannot be determined when evidence is insufficient. Do not invent facts or bypass permission approvals.";
+/** A queued request's durable policy follows its turn and its delegated agents. */
+export declare class QaIntegrationQuestionPolicy {
+    private readonly ctx;
+    private readonly accounts;
+    private readonly qaRoot;
+    private readonly turns;
+    private readonly notes;
+    private readonly disposers;
+    constructor(ctx: Context, accounts: () => QaAccounts | undefined, qaRoot?: (id: string) => string | undefined);
+    allowed(agent: Agent): boolean;
+    private root;
+    /** Recover after a plugin reload from consumed messages, never queued future input. */
+    private recover;
+    dispose(): void;
+}
+//# sourceMappingURL=question-policy.d.ts.map

package/lib/types/integration/service.d.ts

@@ -31,6 +31,7 @@ export declare const QA_INTEGRATION_MAX_CITATIONS = 5;
 export declare function sourceCitations(sources: readonly QaSourceReference[]): readonly string[];
 /** Who a presented credential turned out to be. */
 export interface QaIntegrationIdentity {
+    readonly allowClarifications: boolean;
     readonly tokenId: string;
     readonly userId: string;
     readonly scopes: readonly QaServiceTokenScope[];

package/lib/types/llm-identity.d.ts

@@ -0,0 +1,20 @@
+import { Service, type Context } from "@deepseek-ai/cordis";
+import type { QaAccounts } from "./accounts/store.js";
+interface IdentityAccounts {
+    ownerIdOf: QaAccounts["ownerIdOf"];
+    accountById: QaAccounts["accountById"];
+}
+export interface QaLlmIdentityOptions {
+    /** Resolves only roots attested by this QA deployment and their live children. */
+    rootOf(sessionId: string): string | undefined;
+    accounts(): IdentityAccounts | undefined;
+}
+/** Runtime-only identity seam; it grants no account or tool access. */
+export declare class QaLlmIdentity extends Service {
+    private readonly options;
+    constructor(ctx: Context, options: QaLlmIdentityOptions);
+    /** Stable pseudonym of the chat's active owner, never the browser viewing it. */
+    forSession(sessionId: string): string | undefined;
+}
+export {};
+//# sourceMappingURL=llm-identity.d.ts.map

package/lib/types/markdown-frontmatter.d.ts

@@ -0,0 +1,10 @@
+import type { QaSourceMetadata } from "./provenance/types.js";
+export interface MarkdownFrontmatter {
+    readonly body: string;
+    /** Physical lines removed, including both fences. */
+    readonly offset: number;
+    readonly fields: QaSourceMetadata;
+}
+/** Only a complete, bounded YAML mapping at the start earns a metadata card. */
+export declare function readFrontmatter(text: string): MarkdownFrontmatter | undefined;
+//# sourceMappingURL=markdown-frontmatter.d.ts.map

package/lib/types/markdown-images.d.ts

@@ -0,0 +1,3 @@
+/** Exact image destinations from the same grammar the source preview renders. */
+export declare function markdownImageTargets(text: string): ReadonlySet<string>;
+//# sourceMappingURL=markdown-images.d.ts.map

package/lib/types/prompt-notes.d.ts

@@ -41,7 +41,7 @@ export declare const QA_IDENTITY_NOTE_TEMPLATE = "{identity}\n\n{instructions}";
 export declare const QA_SOURCES_NOTE_TEMPLATE = "Source provenance is collected automatically from your tool calls; the QA surface lists what it collected beside the answer. Do not append a manual Sources/\u0418\u0441\u0442\u043E\u0447\u043D\u0438\u043A\u0438 bibliography of your own.";
 export declare const QA_SOURCES_FALLBACK_TEMPLATE = "A delegated run whose provider cannot expose tool events must call {reportTool} before finishing.";
 export declare const QA_DELEGATION_NOTE_TEMPLATE = "When you start a background subagent, give the delegation a short vivid name in its description field: two or three words in the user's language that say what the run is for (\u00AB\u0421\u0432\u0435\u0440\u043A\u0430 \u043E\u0442\u0447\u0451\u0442\u043E\u0432\u00BB, \"Log triage\"). The QA surface shows that description as the subagent's display name in the operator's panel and completion notices.";
-export declare const QA_DOCUMENTS_NOTE_TEMPLATE = "A document a chat user attached is a path on disk, not text: read it with the deployment's document pipeline \u2014 `document_inspect` says what a DOCX or PDF is, `document_to_markdown` extracts its text, `document_from_url` stores the text of an attachment that only exists behind a URL. The plain file reader refuses those formats as binary, so that refusal is expected and is not a hint to go looking for the file somewhere else. When the pipeline itself refuses a path, report the refusal and the path it named instead of trying another reader.";
+export declare const QA_DOCUMENTS_NOTE_TEMPLATE = "A document a chat user attached is a path on disk, not text: read it with the deployment's document pipeline \u2014 `document_inspect` says what a DOCX or PDF is, `document_to_markdown` extracts its text, `document_from_url` stores the text of an attachment that only exists behind a URL. For XLSX, CSV, TSV, ODS or FODS, `spreadsheet_inspect` lists all sheets and detects text delimiter/encoding, `spreadsheet_read` reads pages, and `spreadsheet_create` creates a file in the selected format. CSV/TSV have one Data sheet with string fields; reuse detected delimiter and encoding when paging. XLSX/ODS/FODS support multiple sheets. Inspect all sheet names before selecting data; formula values are saved caches, not recalculated results. The plain file reader refuses those formats as binary, so that refusal is expected and is not a hint to go looking for the file somewhere else. When the pipeline itself refuses a path, report the refusal and the path it named instead of trying another reader.";
 export declare const QA_SOURCE_PRIORITY_NOTE_TEMPLATE = "Answer from the source that owns the question: read what the conversation and its attachments already carry, then search the product documentation and ask the domain expert, and only then look in memory. Recalled memory is background from earlier sessions \u2014 a miss there is not evidence that no source exists, and it is not where a document, a page or a product fact should be looked up.";
 export interface QaIdentityRenderInput {
     /** The owner's account address; the one fact accounts always provide. */

package/lib/types/provenance/document-preview.d.ts

@@ -1,5 +1,5 @@
 import type { DocumentsFace } from "@yadsh/dsh-documents";
-import type { QaDocumentPreview } from "../types.js";
+import type { QaDocumentPreview, QaSpreadsheetPreviewSelection } from "../types.js";
 import { type QaAllowedFileRequest } from "./file-preview.js";
 /** Look up the document subsystem a sibling Host plugin published. */
 export type DocumentsLookup = () => DocumentsFace | undefined;
@@ -9,6 +9,7 @@ export interface QaDocumentPreviewRequest extends QaAllowedFileRequest {
     readonly sessionId: string;
     /** Bytes of the rendered PDF the panel accepts before it gives up. */
     readonly maxBytes: number;
+    readonly selection?: QaSpreadsheetPreviewSelection;
 }
 /**
  * Render one Word document as a PDF for the files panel.
@@ -24,7 +25,7 @@ export interface QaDocumentPreviewRequest extends QaAllowedFileRequest {
  * an uploaded Word file lives in the attachment store, and a pipeline that is
  * not told about that root refuses the file this check just accepted.
  */
-export declare function previewConvertibleDocument({ documents, sessionId, maxBytes, ...file }: QaDocumentPreviewRequest): Promise<QaDocumentPreview>;
+export declare function previewConvertibleDocument({ documents, sessionId, maxBytes, selection, ...file }: QaDocumentPreviewRequest): Promise<QaDocumentPreview>;
 /** Native PDF or pipeline preview, after the caller has verified chat evidence. */
 export declare function previewSourceDocument(request: QaDocumentPreviewRequest): Promise<QaDocumentPreview>;
 //# sourceMappingURL=document-preview.d.ts.map