@yadsh/dsh-qa-surface 0.16.0 → 0.18.0

package/lib/types/client/components/QaModal.d.ts

@@ -6,6 +6,15 @@ import { type ReactNode } from "react";
  * the dialog is turned back into a page under the scrim.
  */
 export declare function isQaModalOpen(): boolean;
+/**
+ * Join the stack from a shell that draws its own chrome rather than this
+ * panel — the image lightbox is such a shell. One Escape press then closes the
+ * innermost layer instead of every dialog under it.
+ */
+export declare function joinQaDialogStack(): {
+    readonly innermost: () => boolean;
+    readonly leave: () => void;
+};
 export interface QaModalProps {
     readonly open: boolean;
     /** Dialog title; also the dialog's accessible name. */

package/lib/types/client/components/QaRightRail.d.ts

@@ -13,9 +13,10 @@ export interface QaRightRailProps {
     readonly activeTab: QaRailTab;
     readonly onTabSelect: (tab: QaRailTab) => void;
     readonly onClose: () => void;
+    readonly stateKey?: string;
 }
 /**
- * The chat's right rail: a fixed column whose top edge is the tab strip,
+ * The chat's right rail: a resizable column whose top edge is the tab strip,
  * mirroring the Harness right Sidebar's chrome. Tabs are plain chips with
  * counts; the strip's last control collapses the whole column.
  *
@@ -25,5 +26,5 @@ export interface QaRightRailProps {
  * the rail keeps the key: the innermost thing on the page is what the reader
  * means to dismiss.
  */
-export declare function QaRightRail({ tabs, activeTab, onTabSelect, onClose, }: QaRightRailProps): import("react/jsx-runtime").JSX.Element | null;
+export declare function QaRightRail({ tabs, activeTab, onTabSelect, onClose, stateKey, }: QaRightRailProps): import("react/jsx-runtime").JSX.Element | null;
 //# sourceMappingURL=QaRightRail.d.ts.map

package/lib/types/client/components/QaRightRailResize.d.ts

@@ -0,0 +1,9 @@
+import { type RefObject } from "react";
+export declare function resolveQaRightRailWidth(requested: number | null, available: number): number;
+/** A one-sided border drag: moving left widens the panel on the right. */
+export declare function QaRightRailResize(props: {
+    root: RefObject<HTMLElement | null>;
+    storage: Pick<Storage, "getItem" | "setItem">;
+    storageKey: string;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=QaRightRailResize.d.ts.map

package/lib/types/client/components/QaSidebar.d.ts

@@ -2,6 +2,7 @@ import type { SessionSummary } from "@deepseek-ai/dsh-api-session-controller/cli
 import { type QaAuditSummary } from "../audit/types.js";
 /** One renderable row of the chat-history sidebar. */
 export interface QaChatRow {
+    readonly shareable?: boolean;
     readonly id: string;
     readonly title: string;
     readonly running: boolean;
@@ -59,6 +60,7 @@ export interface QaSidebarProps {
     readonly onNewChat: () => void;
     /** Removes a chat from this browser's index; omit to hide the control. */
     readonly onDelete?: (sessionId: string) => void;
+    readonly onShare?: (sessionId: string) => void;
     /**
      * Whether the phone layout shows this sidebar as a drawer over the
      * conversation. The state is the surface's, not the sidebar's: the control

package/lib/types/client/components/QaSourceFilters.d.ts

@@ -0,0 +1,12 @@
+import type { QaSource } from "../../types.js";
+export declare function matchesSourceText(source: QaSource, query: string): boolean;
+export declare function QaSourceFilters({ sources, query, kind, count, onQuery, onKind, onReset, }: {
+    readonly sources: readonly QaSource[];
+    readonly query: string;
+    readonly kind: QaSource["kind"] | "all";
+    readonly count: number;
+    readonly onQuery: (value: string) => void;
+    readonly onKind: (value: QaSource["kind"] | "all") => void;
+    readonly onReset: () => void;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=QaSourceFilters.d.ts.map

package/lib/types/client/components/QaSpreadsheetPreview.d.ts

@@ -0,0 +1,8 @@
+import type { QaSpreadsheetPreview as Preview, QaSpreadsheetPreviewSelection as Selection } from "../../types.js";
+export interface QaSpreadsheetPreviewProps {
+    readonly initial: Preview;
+    readonly load: (selection: Selection) => Promise<Preview>;
+}
+/** Read-only cells, with explicit paging on both axes and no formula execution. */
+export declare function QaSpreadsheetPreview({ initial, load, }: QaSpreadsheetPreviewProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=QaSpreadsheetPreview.d.ts.map

package/lib/types/client/components/QaWelcomeNotice.d.ts

@@ -1,7 +1,7 @@
 import type { SettingsOnboardingOwnerProps } from "@deepseek-ai/dsh-client-ui-settings/client";
 import type { StorageLike } from "../types.js";
 /** Bump when the notice changes materially and must be acknowledged again. */
-export declare const QA_WELCOME_NOTICE_VERSION = "2026-09-12.1";
+export declare const QA_WELCOME_NOTICE_VERSION = "2026-10-11.1";
 export declare const QA_WELCOME_NOTICE_COPY: Readonly<{
     title: "Перед началом тестирования";
     paragraphs: readonly string[];

package/lib/types/client/components/QaZoomImage.d.ts

@@ -0,0 +1,38 @@
+import type { ImgHTMLAttributes } from "react";
+/**
+ * A surface image at its reading size, plus the overlay it opens into.
+ *
+ * A transcript thumbnail is 132 px wide: enough to recognise a figure, not
+ * enough to read one. The thumbnail used to be an anchor to its own `blob:`
+ * address, and a browser that refuses top-level navigation to a blob answers
+ * the click with nothing at all, so the reader had no way to see the image the
+ * question was about.
+ */
+export declare function QaZoomImage({ src, alt, className, testId, openLabel, zoomable, ...image }: {
+    readonly src: string;
+    readonly alt: string;
+    readonly className: string;
+    readonly testId: string;
+    readonly openLabel?: string;
+    /**
+     * Whether the image answers a click. An image that sits inside a link does
+     * not: a control nested in an anchor is invalid, and the activation the
+     * reader meant for the link would reach the zoom as well.
+     */
+    readonly zoomable?: boolean;
+} & Omit<ImgHTMLAttributes<HTMLImageElement>, "src" | "alt" | "className">): import("react/jsx-runtime").JSX.Element;
+/**
+ * The overlay itself: the image contained to the viewport over a mask. Escape,
+ * the mask and the close control end it, and the close control takes focus on
+ * open so a keyboard reader leaves the same way it entered.
+ *
+ * The root is a span because an answer's image sits inside its paragraph, and
+ * a block-level root there is invalid nesting the browser repairs by lifting it
+ * out of the text that owns it.
+ */
+export declare function QaImageLightbox({ src, alt, onClose, }: {
+    readonly src: string;
+    readonly alt: string;
+    readonly onClose: () => void;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=QaZoomImage.d.ts.map

package/lib/types/client/forms-styles.d.ts

@@ -0,0 +1,2 @@
+export declare const QA_FORM_STYLES = "\n.dsh-qa-form{background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2);border-radius:12px;padding:16px;max-height:75vh;overflow:hidden;overflow-wrap:anywhere;color:var(--dsw-alias-label-primary);display:flex;flex-direction:column}\n.dsh-qa-form__content{overflow:auto;min-height:0;padding:0 2px}.dsh-qa-form>header,.dsh-qa-form>footer,.dsh-qa-form>nav,.dsh-qa-form>p{flex-shrink:0}.dsh-qa-form>footer{border-top:1px solid var(--dsw-alias-border-l2);padding-top:12px;margin-top:8px}\n.dsh-qa-form>header{max-height:96px;overflow:auto}\n.dsh-qa-form header,.dsh-qa-form footer,.dsh-qa-form nav{display:flex;gap:8px;align-items:center;flex-wrap:wrap}\n.dsh-qa-form header{justify-content:space-between}.dsh-qa-form nav{margin:12px 0}.dsh-qa-form h3{margin:12px 0}\n.dsh-qa-form button{font:inherit;color:inherit;background:var(--dsw-alias-bg-layer-3);border:1px solid var(--dsw-alias-border-l2);border-radius:8px;padding:8px 12px;cursor:pointer}\n.dsh-qa-form button:disabled{opacity:.55;cursor:default}.dsh-qa-form button:focus-visible,.dsh-qa-form input:focus-visible,.dsh-qa-form textarea:focus-visible{outline:var(--dsw-focus-ring-width,2px) solid var(--dsw-focus-ring-color,var(--dsw-alias-state-business-primary));outline-offset:2px}\n.dsh-qa-form__item{min-width:0;border:0;border-bottom:1px solid var(--dsw-alias-border-l2);padding:12px 0;margin:0 0 12px}.dsh-qa-form legend{font-weight:600}.dsh-qa-form small{font-weight:400;display:block;color:var(--dsw-alias-label-tertiary)}\n.dsh-qa-form__hint{font-size:13px;color:var(--dsw-alias-label-secondary)}.dsh-qa-form label{display:block}.dsh-qa-form input[type=text],.dsh-qa-form textarea{display:block;box-sizing:border-box;width:100%;font:inherit;color:inherit;background:var(--dsw-alias-bg-layer-3);border:1px solid var(--dsw-alias-border-l2);border-radius:8px;padding:10px;margin:6px 0}\n.dsh-qa-form__choices>label{display:flex;gap:8px;align-items:baseline;margin:8px 0}.dsh-qa-form__files{border:1px dashed var(--dsw-alias-border-l2);border-radius:8px;padding:12px;margin-top:12px}.dsh-qa-form input[type=file]{max-width:100%;display:block;margin:8px 0}.dsh-qa-form__files ul{padding-left:18px}.dsh-qa-form__files li{margin:10px 0}.dsh-qa-form__files button{margin:4px}.dsh-qa-form__review>div{border-bottom:1px solid var(--dsw-alias-border-l2);margin-bottom:12px}.dsh-qa-form [role=alert]{color:var(--dsw-alias-label-primary);border:1px solid var(--dsw-alias-border-l2);padding:10px;border-radius:8px}\n@media(max-width:600px){.dsh-qa-form{padding:12px;max-height:80vh}.dsh-qa-form footer button{flex:1 1 auto}.dsh-qa-form nav button{font-size:12px}}\n";
+//# sourceMappingURL=forms-styles.d.ts.map

package/lib/types/client/forms.d.ts

@@ -0,0 +1,23 @@
+import type { QaFormCommand, QaFormResult, QaFormView } from "../forms/types.js";
+import type { RemoteResult } from "./types.js";
+import type { QaUploadCarrier } from "./account-upload.js";
+/** Typert adds an outer transport result; domain refusals remain stable codes. */
+export interface QaFormApi {
+    list(token: string, session: string): Promise<RemoteResult<QaFormResult<QaFormView[]>>>;
+    get(token: string, session: string, id: string): Promise<RemoteResult<QaFormResult<QaFormView>>>;
+    mutate(token: string, session: string, command: QaFormCommand): Promise<RemoteResult<QaFormResult<QaFormView>>>;
+    upload(token: string, session: string, id: string, file: File, signal: AbortSignal): Promise<void>;
+    file(token: string, session: string, formId: string, resourceId: string): Promise<RemoteResult<QaFormResult<{
+        name: string;
+        media_type: string;
+        data: string;
+    }>>>;
+}
+export declare class QaFormClientError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export declare function unwrapForm<T>(result: RemoteResult<QaFormResult<T>>): T;
+/** Same protected carrier and route as ordinary QA uploads; no fabricated percentage. */
+export declare function uploadQaFormFile(carrier: QaUploadCarrier | undefined, token: string, session: string, uploadId: string, file: File, signal: AbortSignal): Promise<void>;
+//# sourceMappingURL=forms.d.ts.map

package/lib/types/client/markdown/SourceImage.d.ts

@@ -0,0 +1,7 @@
+/** Illustrations are fetched on approach to the viewport, never in a document-wide burst. */
+export declare function SourceImage({ src, alt, load, }: {
+    readonly src: string;
+    readonly alt: string;
+    readonly load: (path: string) => Promise<string | undefined>;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=SourceImage.d.ts.map

package/lib/types/client/markdown/blocks.d.ts

@@ -74,6 +74,10 @@ export type MarkdownBlock = {
 };
 /** A parsed document: its blocks plus the reference targets they resolve. */
 export interface ParsedMarkdown {
+    readonly ranges: readonly {
+        readonly start: number;
+        readonly end: number;
+    }[];
     readonly blocks: readonly MarkdownBlock[];
     /** Link/image definitions by upper-cased identifier. */
     readonly definitions: ReadonlyMap<string, string>;
@@ -111,5 +115,8 @@ export declare function parseMarkdown(text: string, options?: MarkdownParseOptio
  * line may still be typed.
  * @returns The container's blocks.
  */
-export declare function parseBlocks(lines: readonly string[], definitions: Map<string, string>, footnotes: Map<string, readonly MarkdownBlock[]>, depth: number, streaming?: boolean): MarkdownBlock[];
+export declare function parseBlocks(lines: readonly string[], definitions: Map<string, string>, footnotes: Map<string, readonly MarkdownBlock[]>, depth: number, streaming?: boolean, ranges?: {
+    start: number;
+    end: number;
+}[]): MarkdownBlock[];
 //# sourceMappingURL=blocks.d.ts.map

package/lib/types/client/markdown/render.d.ts

@@ -13,5 +13,9 @@ import { type MarkdownSourceContext } from "./source-chip.js";
  * @returns The document's blocks, plus the footnote section when the document
  * references a defined footnote.
  */
-export declare function renderMarkdown(text: string, context: MarkdownSourceContext, options?: MarkdownParseOptions): ReactNode[];
+export declare function renderMarkdown(text: string, context: MarkdownSourceContext, options?: MarkdownParseOptions, sourceLines?: {
+    readonly offset: number;
+    readonly start?: number;
+    readonly end?: number;
+}): ReactNode[];
 //# sourceMappingURL=render.d.ts.map

package/lib/types/client/markdown/source-chip.d.ts

@@ -3,6 +3,7 @@ import type { QaSource } from "../../types.js";
 import { type QaSourceRefs } from "../components/source-refs.js";
 /** Inline source awareness handed down from the owning assistant message. */
 export interface MarkdownSourceContext {
+    readonly renderImage?: (src: string, alt: string) => ReactNode;
     readonly refs?: QaSourceRefs;
     /** Open a path-backed source in the sources drawer's detail view. */
     readonly onSourceOpen?: (source: QaSource) => void;

package/lib/types/client/oidc-browser.d.ts

@@ -0,0 +1,12 @@
+import type { QaOidcStart, ResolvedQaSurfaceConfig } from "../types.js";
+export interface QaOidcBrowser {
+    begin(start: QaOidcStart): void;
+    takeHandoff(): {
+        handoff: string;
+        completionKey: string;
+    } | null;
+    logout(url: string): void;
+}
+/** Completion proof is isolated to the initiating tab and never goes in a URL. */
+export declare function createQaOidcBrowser(browser: Pick<Window, "location" | "history" | "sessionStorage">, config: () => ResolvedQaSurfaceConfig): QaOidcBrowser;
+//# sourceMappingURL=oidc-browser.d.ts.map

package/lib/types/client/settings/styles.d.ts

@@ -9,11 +9,8 @@
  * outline under pointer modality at a specificity our rule cannot win, so a
  * hard-coded ring is one that goes missing rather than one that degrades.
  *
- * The type scale is the surface's: text the operator reads in order to decide —
- * section titles, field labels, the values in the controls, the toggle copy —
- * is 16px, a control's own label and an outcome line are 14px, and only chrome
- * stays small on purpose: the «Изменено» badge (9px), the status chips (11px),
- * the monospace data rows (11px) and the footer note (10px).
+ * The body controls use the plugin kit's shared type scale. Status chips,
+ * data rows and the footer retain their compact page-specific presentation.
  */
 export declare const QA_SETTINGS_STYLES: string;
 //# sourceMappingURL=styles.d.ts.map

package/lib/types/client/source-filters-styles.d.ts

@@ -0,0 +1,2 @@
+export declare const sourceFiltersStyles = "\n.dsh-qa-sourcefilters{display:flex;flex-wrap:wrap;align-items:center;gap:8px;padding:2px 12px 10px;flex:none}\n.dsh-qa-sourcefilters input,.dsh-qa-sourcefilters select{min-width:0;padding:7px 9px;border:1px solid var(--dsw-alias-border-l2);border-radius:8px;background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);font:inherit;font-size:12px}\n.dsh-qa-sourcefilters input{flex:1 1 200px;width:100%}\n.dsh-qa-sourcefilters select{flex:1 1 150px;max-width:100%}\n.dsh-qa-sourcefilters__count{color:var(--dsw-alias-label-tertiary);font-size:11px}\n.dsh-qa-sourcefilters button{margin-left:auto;border:0;background:transparent;color:var(--dsh-qa-accent);font:inherit;font-size:12px;cursor:pointer}\n.dsh-qa-sourcefilters :is(input,select,button):focus-visible{outline:var(--dsw-focus-ring-width, 2px) solid var(--dsw-focus-ring-color, var(--dsh-qa-accent));outline-offset:2px}\n.dsh-qa-sourcedetail__content-label{margin:0 0 8px;font-size:12px;font-weight:600;color:var(--dsw-alias-label-primary)}\n";
+//# sourceMappingURL=source-filters-styles.d.ts.map

package/lib/types/client/types.d.ts

@@ -1,11 +1,14 @@
 import type { ClientRemote } from "@deepseek-ai/dsh-api-gateway/client";
 import type { ISessions, SessionFace } from "@deepseek-ai/dsh-api-session-controller/client";
 import type { UiConversation } from "@deepseek-ai/dsh-client-ui-conversation/client";
-import type { QaAccountNotificationsInput, QaAccountProfileInput, QaAccountSession, QaAccountStartersInput, QaAccountStarter, QaAccountUserPublic, QaAccessAdminSnapshot, QaApprovalDecision, QaClaimResult, QaLockdownProof, QaModelCatalogEntry, QaOwnershipEntry, QaPasswordResetRequest, QaPendingApproval, QaPendingQuestion, QaQuestionAnswerItem, QaQueueStatus, QaIssuedServiceToken, QaServiceTokenCreateInput, QaServiceTokenSummary, QaSessionState, QaSkillDocument, QaSkillDraftInput, QaSkillRemoval, QaSkillSummary, QaSkillToolDescriptor, QaSkillValidation, QaSourceFilePreview, QaTurnSources, QaWhoamiResult, QaDocumentPreview, QaWorkspaceFile, QaWorkspaceFileChunk, QaDocumentWorkflowStatus, QaWorkspaceListing, QaCapabilitySelection, QaCurrentAccess, QaSessionAccess, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, QaAdminAuditEvent, QaAdminOverview, QaAdminPage, QaAdminSkillScope, QaAdminSkillsView, QaAdminUserDetail, QaAdminUserRow, QaAdminUserUpdate, QaAuditQuery, QaConversationDetail, QaConversationDeletion, QaConversationQuery, QaConversationReview, QaConversationReviewInput, QaConversationSummary, QaExpertMemoryDraft, QaExpertMemoryPage, QaExpertMemoryRecord, QaExpertMemoryScope, QaFeedbackQuery, QaFeedbackRow, QaMessageFeedback, QaMessageFeedbackInput, QaQualityMetrics, QaReviewQueueItem, QaReviewQueueRow, QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, QaUserQuery } from "../types.js";
+import type { QaAccountNotificationsInput, QaAccountProfileInput, QaAccountSession, QaAccountStartersInput, QaAccountStarter, QaAccountUserPublic, QaAccessAdminSnapshot, QaApprovalDecision, QaClaimResult, QaLockdownProof, QaModelCatalogEntry, QaOwnershipEntry, QaPasswordResetRequest, QaPendingApproval, QaPendingQuestion, QaQuestionAnswerItem, QaQueueStatus, QaIssuedServiceToken, QaServiceTokenCreateInput, QaServiceTokenSummary, QaSessionState, QaSkillDocument, QaSkillDraftInput, QaSkillRemoval, QaSkillSummary, QaSkillToolDescriptor, QaSkillValidation, QaSourceFilePreview, QaTurnSources, QaWhoamiResult, QaDocumentPreview, QaSpreadsheetPreviewSelection, QaWorkspaceFile, QaWorkspaceFileChunk, QaDocumentWorkflowStatus, QaWorkspaceListing, QaCapabilitySelection, QaCurrentAccess, QaSessionAccess, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, QaAdminAuditEvent, QaAdminOverview, QaAdminPage, QaAdminSkillScope, QaAdminSkillsView, QaAdminUserDetail, QaAdminUserRow, QaAdminUserUpdate, QaAuditQuery, QaConversationDetail, QaConversationDeletion, QaConversationQuery, QaConversationReview, QaConversationReviewInput, QaConversationSummary, QaExpertMemoryDraft, QaExpertMemoryPage, QaExpertMemoryRecord, QaExpertMemoryScope, QaFeedbackQuery, QaFeedbackRow, QaMessageFeedback, QaMessageFeedbackInput, QaQualityMetrics, QaReviewQueueItem, QaReviewQueueRow, QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, QaUserQuery } from "../types.js";
 /** Wire content one prompt carries: text plus base64 image uploads. */
 export type QaPromptContent = Parameters<SessionFace["prompt"]>[0];
 /** DSH session runtime surface the QA controller is allowed to touch. */
-export type QaSessions = ISessions;
+export type QaSessions = ISessions & {
+    /** Register an exact id admitted by authenticated QA create/read before retain. */
+    rememberAdmitted?(sessionId: string): void;
+};
 /** Narrow client API slice used to pin the preset and model of a fresh chat. */
 export type QaSessionsApi = {
     selectModel: ClientRemote["session"]["selectModel"];
@@ -158,13 +161,14 @@ export interface QaSourceApi {
         readonly ok: false;
         readonly error: unknown;
     }>;
-    readSourceFile(token: string, sessionId: string, sourcePath: string): Promise<{
+    readSourceFile(token: string, sessionId: string, sourcePath: string, selection?: QaSpreadsheetPreviewSelection): Promise<{
         readonly ok: true;
         readonly value: QaSourceFilePreview;
     } | {
         readonly ok: false;
         readonly error: unknown;
     }>;
+    readSourceImage?(token: string, sessionId: string, sourcePath: string, imagePath: string): Promise<RemoteResult<string>>;
     /** One directory of the chat's own workspace, for the files panel. */
     listWorkspaceFiles(token: string, sessionId: string, path: string): Promise<{
         readonly ok: true;
@@ -186,7 +190,7 @@ export interface QaSourceApi {
      * document pipeline; the panel shows the PDF the browser already knows how
      * to draw instead of uploading the bytes anywhere.
      */
-    previewWorkspaceDocument(token: string, sessionId: string, path: string): Promise<{
+    previewWorkspaceDocument(token: string, sessionId: string, path: string, selection?: QaSpreadsheetPreviewSelection): Promise<{
         readonly ok: true;
         readonly value: QaDocumentPreview;
     } | {
@@ -214,13 +218,14 @@ export type QaBoundSourceApi = {
         readonly ok: false;
         readonly error: unknown;
     }>;
-    readSourceFile(sessionId: string, sourcePath: string): Promise<{
+    readSourceFile(sessionId: string, sourcePath: string, selection?: QaSpreadsheetPreviewSelection): Promise<{
         readonly ok: true;
         readonly value: QaSourceFilePreview;
     } | {
         readonly ok: false;
         readonly error: unknown;
     }>;
+    readSourceImage?(sessionId: string, sourcePath: string, imagePath: string): Promise<RemoteResult<string>>;
     listWorkspaceFiles(sessionId: string, path: string): Promise<{
         readonly ok: true;
         readonly value: QaWorkspaceListing;
@@ -235,7 +240,7 @@ export type QaBoundSourceApi = {
         readonly ok: false;
         readonly error: unknown;
     }>;
-    previewWorkspaceDocument(sessionId: string, path: string): Promise<{
+    previewWorkspaceDocument(sessionId: string, path: string, selection?: QaSpreadsheetPreviewSelection): Promise<{
         readonly ok: true;
         readonly value: QaDocumentPreview;
     } | {
@@ -342,9 +347,16 @@ export interface QaIntegrationTokenApi {
     list(): Promise<QaIntegrationTokenResult<readonly QaServiceTokenSummary[]>>;
     create(input: QaServiceTokenCreateInput): Promise<QaIntegrationTokenResult<QaIssuedServiceToken>>;
     revoke(tokenId: string): Promise<QaIntegrationTokenResult<null>>;
+    setClarifications?(tokenId: string, allowed: boolean): Promise<QaIntegrationTokenResult<null>>;
 }
 /** Account remotes exposed by the plugin's own typert namespace. */
 export interface QaAccountsApi {
+    accountsSetServiceTokenClarifications?(token: string, tokenId: string, allowed: boolean): Promise<RemoteResult<{
+        readonly updated: boolean;
+    }>>;
+    accountsOidcStart?(): Promise<RemoteResult<import("../types.js").QaOidcStart>>;
+    accountsOidcComplete?(handoff: string, completionKey: string): Promise<RemoteResult<QaAccountSession>>;
+    accountsOidcLogout?(token: string): Promise<RemoteResult<string | null>>;
     chatVisible?(token: string): Promise<RemoteResult<readonly import("../chat-sharing/types.js").QaChatAccess[]>>;
     accountsWhoami(token: string): Promise<RemoteResult<QaWhoamiResult>>;
     accountsLogin(email: string, password: string): Promise<RemoteResult<QaAccountSession>>;

package/lib/types/config-resolvers/oidc.d.ts

@@ -0,0 +1,3 @@
+import type { QaSurfaceConfig, ResolvedQaOidcConfig } from "../types.js";
+export declare function resolveOidc(input: QaSurfaceConfig): ResolvedQaOidcConfig;
+//# sourceMappingURL=oidc.d.ts.map

package/lib/types/forms/attachments.d.ts

@@ -0,0 +1,48 @@
+import { z } from "zod";
+import type { QaFormService } from "./service.js";
+import type { QaFormRecord, QaFormSubmission } from "./types.js";
+declare const fileRef: z.ZodObject<{
+    attachmentId: z.ZodString;
+    name: z.ZodString;
+    bytes: z.ZodNumber;
+}, z.core.$strip>;
+type FileRef = z.infer<typeof fileRef>;
+/** Structural port to the installed Host; receipt data is runtime-validated. */
+export interface QaFormHostAttachments {
+    readonly root: string;
+    readFileStream(file: FileRef, signal?: AbortSignal): AsyncIterable<Uint8Array>;
+    saveFile(input: {
+        data: Uint8Array;
+        name: string;
+    }): Promise<unknown>;
+    fileHostPath(file: FileRef): string | undefined;
+    validateImage?(input: {
+        data: Uint8Array;
+        mediaType: "image/png" | "image/jpeg";
+        name: string;
+    }): Promise<void>;
+}
+export declare function validateFormFile(name: string, data: Buffer): string;
+/** Durable bytes belong to the form store; Host objects are verified reader projections. */
+export declare class QaFormAttachmentAdapter {
+    private readonly service;
+    private readonly host;
+    constructor(service: () => QaFormService, host: () => QaFormHostAttachments | undefined);
+    available(): boolean;
+    check(session: string, formId: string, uploadId: string): void;
+    claim(session: string, uploadId: string): {
+        record: QaFormRecord;
+        upload: QaFormRecord["uploads"][number];
+    };
+    complete(session: string, formId: string, uploadId: string, raw: unknown, signal: AbortSignal, authorize: () => void): Promise<QaFormRecord>;
+    fail(session: string, formId: string, uploadId: string): void;
+    /** Exact saved bytes are re-projected through the Host on each successful resume. */
+    readable(submission: QaFormSubmission): Promise<QaFormSubmission & {
+        resources: {
+            resource_id: string;
+            read_path: string;
+        }[];
+    }>;
+}
+export {};
+//# sourceMappingURL=attachments.d.ts.map

package/lib/types/forms/errors.d.ts

@@ -0,0 +1,11 @@
+import type { QaFormFieldError, QaFormResult } from "./types.js";
+export declare class QaFormError extends Error {
+    readonly code: string;
+    readonly revision?: number | undefined;
+    readonly fields?: QaFormFieldError[] | undefined;
+    constructor(code: string, message: string, revision?: number | undefined, fields?: QaFormFieldError[] | undefined);
+}
+/** Deliberately redact unexpected storage/Host exceptions at the wire boundary. */
+export declare function formFailure(error: unknown): QaFormResult<never>;
+export declare function formAssert(condition: unknown, code: string, message: string): asserts condition;
+//# sourceMappingURL=errors.d.ts.map

package/lib/types/forms/fingerprint.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Stable object-key ordering for schema and idempotency fingerprints.
+ *
+ * Lives apart from the sqlite store so every store implementation hashes the
+ * same way without importing the sqlite bridge: the client test graph mounts a
+ * store too, and a browser environment must not see `@yadsh/dsh-plugin-kit/sqlite`.
+ */
+export declare function fingerprint(value: unknown): string;
+//# sourceMappingURL=fingerprint.d.ts.map

package/lib/types/forms/gate.d.ts

@@ -0,0 +1,33 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { ToolExecution } from "@deepseek-ai/dsh-tools";
+import type { QaFormService } from "./service.js";
+import type { QaFormRecord, QaFormSubmission } from "./types.js";
+type Outcome = QaFormSubmission | {
+    status: "paused";
+    form_id: string;
+    reason: string;
+};
+/** A parked tool call is transient. Never reconstruct one from a saved draft. */
+export declare class QaFormGate {
+    readonly service: () => QaFormService;
+    private readonly rootOf;
+    private readonly busy;
+    private readonly allowed;
+    private readonly filesAvailable;
+    private readonly waiters;
+    private readonly disposers;
+    private closed;
+    private readonly clients;
+    constructor(service: () => QaFormService, rootOf: (id: string) => string | undefined, busy: (id: string) => boolean, allowed: (exec: ToolExecution) => boolean, filesAvailable?: () => boolean);
+    install(ctx: Context): void;
+    waiting(id: string): boolean;
+    touch(session: string): void;
+    hasSession(session: string): boolean;
+    request(raw: unknown, exec: ToolExecution): Promise<Outcome>;
+    notify(record: QaFormRecord, pause?: boolean): void;
+    cancel(session: string): void;
+    cancelAll(): void;
+    dispose(): void;
+}
+export {};
+//# sourceMappingURL=gate.d.ts.map

package/lib/types/forms/schema.d.ts

@@ -0,0 +1,72 @@
+import { z } from "zod";
+import type { QaFormPolicy, QaFormSchema } from "./types.js";
+export declare const DEFAULT_FORM_POLICY: Readonly<QaFormPolicy>;
+export declare const formSchemaParser: z.ZodObject<{
+    schema_version: z.ZodLiteral<1>;
+    title: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    submit_label: z.ZodOptional<z.ZodString>;
+    steps: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        title: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        items: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            title: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            answer: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"text">;
+                required: z.ZodBoolean;
+                placeholder: z.ZodOptional<z.ZodString>;
+                min_length: z.ZodOptional<z.ZodNumber>;
+                max_length: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"textarea">;
+                required: z.ZodBoolean;
+                placeholder: z.ZodOptional<z.ZodString>;
+                min_length: z.ZodOptional<z.ZodNumber>;
+                max_length: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"single_select">;
+                required: z.ZodBoolean;
+                options: z.ZodArray<z.ZodObject<{
+                    value: z.ZodString;
+                    label: z.ZodString;
+                    description: z.ZodOptional<z.ZodString>;
+                    recommended: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strict>>;
+                allow_other: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"multi_select">;
+                required: z.ZodBoolean;
+                options: z.ZodArray<z.ZodObject<{
+                    value: z.ZodString;
+                    label: z.ZodString;
+                    description: z.ZodOptional<z.ZodString>;
+                    recommended: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strict>>;
+                allow_other: z.ZodOptional<z.ZodBoolean>;
+                min_selected: z.ZodOptional<z.ZodNumber>;
+                max_selected: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>], "type">>;
+            files: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                requirement: z.ZodLiteral<"none">;
+            }, z.core.$strict>, z.ZodObject<{
+                max_count: z.ZodNumber;
+                accept: z.ZodArray<z.ZodString>;
+                max_file_size_bytes: z.ZodNumber;
+                requirement: z.ZodLiteral<"required">;
+                min_count: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                max_count: z.ZodNumber;
+                accept: z.ZodArray<z.ZodString>;
+                max_file_size_bytes: z.ZodNumber;
+                requirement: z.ZodLiteral<"optional">;
+            }, z.core.$strict>], "requirement">;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+/** Shared by server and browser. No Node APIs or browser-supplied readiness. */
+export declare function parseFormSchema(input: unknown, policy: Readonly<QaFormPolicy>): QaFormSchema;
+export declare function resolveFormPolicy(input?: Partial<QaFormPolicy>): QaFormPolicy;
+//# sourceMappingURL=schema.d.ts.map

package/lib/types/forms/service.d.ts

@@ -0,0 +1,15 @@
+import type { QaFormPolicy, QaFormRecord, QaFormStoreApi, QaFormView } from "./types.js";
+export declare class QaFormService {
+    readonly store: QaFormStoreApi;
+    readonly policy: () => Readonly<QaFormPolicy>;
+    private readonly ownerOf;
+    constructor(store: QaFormStoreApi, policy: () => Readonly<QaFormPolicy>, ownerOf?: (session: string) => string);
+    enabled(): void;
+    create(session: string, key: string, input: unknown): QaFormRecord;
+    view(record: QaFormRecord, waiting?: boolean): QaFormView;
+    get(session: string, id: string): QaFormRecord;
+    step(session: string, id: string, stepId: string, revision: number): void;
+    command(session: string, raw: unknown): QaFormRecord;
+    private beginUpload;
+}
+//# sourceMappingURL=service.d.ts.map

package/lib/types/forms/store.d.ts

@@ -0,0 +1,25 @@
+import { SqliteDatabase } from "@yadsh/dsh-plugin-kit/sqlite";
+import type { QaFormRecord, QaFormStoreApi } from "./types.js";
+export { fingerprint } from "./fingerprint.js";
+/** Full synchronous commits: snapshot, revision and mutation receipt share one transaction. */
+export declare class QaFormStore implements QaFormStoreApi {
+    readonly storage: SqliteDatabase;
+    constructor(file: string);
+    list(session: string): QaFormRecord[];
+    get(session: string, id: string): QaFormRecord;
+    put(record: QaFormRecord): void;
+    create(session: string, key: string, schema: QaFormRecord["schema"], creator?: string): QaFormRecord;
+    editableOrSubmitted(record: QaFormRecord): void;
+    private mutationReceipt;
+    replayedMutation(formId: string, mutationId: string, input: unknown): QaFormRecord | null;
+    mutate(session: string, id: string, revision: number, mutationId: string, input: unknown, work: (r: QaFormRecord) => void): QaFormRecord;
+    /** Async work happens before this short final transaction; no revision captured at upload start. */
+    update(session: string, id: string, work: (r: QaFormRecord) => void): QaFormRecord;
+    resource(formId: string, id: string): Uint8Array;
+    saveResource(formId: string, id: string, data: Uint8Array): void;
+    storedBytes(session: string): number;
+    identityReservedBytes(creator: string): number;
+    cancelSession(session: string): void;
+    close(): void;
+}
+//# sourceMappingURL=store.d.ts.map