@yadsh/dsh-qa-surface 0.17.0 → 0.19.0

package/lib/index.js

@@ -32,7 +32,6 @@ var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn,
     if (target) Object.defineProperty(target, contextIn.name, descriptor);
     done = true;
 };
-import { randomUUID } from "node:crypto";
 import { readSourceImage as readSourceImagePreview } from "./provenance/source-image.js";
 import path from "node:path";
 import { defaultAccountsFilePath } from "./accounts/store.js";
@@ -44,9 +43,9 @@ import { QaIntegrationQuestionPolicy } from "./integration/question-policy.js";
 import { qaChatPublishedFile, qaChatAttachmentPath, } from "./chat-sharing/resources.js";
 import { installQaChatUploads } from "./chat-sharing/uploads.js";
 import { forkQaSession } from "./session-fork-host.js";
+import { createQaSession } from "./session-create.js";
 import { Remote, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 import { SessionId } from "@deepseek-ai/dsh-session/types";
-import { WorkspaceId } from "@deepseek-ai/dsh-workspace";
 import { createHostLoggerSink, getPluginLogger, } from "@yadsh/dsh-plugin-log";
 import { ConfigSchema, qaSurfaceVersion, readConfigRefs, resolveConfig, } from "./config.js";
 import { createQaAccountRemotes } from "./account-remotes.js";
@@ -55,15 +54,22 @@ import { QaQualityStore } from "./admin/quality-store.js";
 import { createSessionEraser, createSessionLogReader, } from "./admin/session-log.js";
 import { createQaPersonalSkillRemotes, QaPersonalSkillsHost, } from "./personal-skills/index.js";
 import { QaApprovalGate } from "./approvals.js";
-import { QaAttestationError, qaAttestationFailureMessage, } from "./attestation.js";
+import { QaAttestationError } from "./attestation.js";
 import { QaFileDeleteGate } from "./qa-tools/file-delete-gate.js";
 import { QaQuestionGate } from "./questions.js";
+import { QaFormStore } from "./forms/store.js";
+import { QaFormService } from "./forms/service.js";
+import { QaFormGate } from "./forms/gate.js";
+import { QaFormAttachmentAdapter, } from "./forms/attachments.js";
+import { formFailure, QaFormError } from "./forms/errors.js";
 import { QaSessionOwnership } from "./session-ownership.js";
 import { QaLlmIdentity } from "./llm-identity.js";
 import { registerTurnFailureLog } from "./turn-failure-log.js";
 import { entryRedirectRow } from "./entry-redirect.js";
 import { qaKioskDeployment } from "./ui-mode.js";
 import { registerQaNavigationRoute } from "./host-route.js";
+import { QaOidcService, oidcRefusal } from "./oidc/service.js";
+import { registerQaOidcRoute } from "./oidc/http.js";
 import { makeLaunchTokenSource } from "./launch-token.js";
 import { QaIntegrationPrincipalBindings } from "./integration-principals.js";
 import { registerQaIntegrationRoutes } from "./integration/http.js";
@@ -71,11 +77,10 @@ import { createQaIntegrationRunner } from "./integration/host-runner.js";
 import { QaIntegrationService } from "./integration/service.js";
 import { QaPolicyAdmission } from "./secure-session.js";
 import { QaAccessService } from "./access/service.js";
-import { applySessionModelPolicy } from "./session-model.js";
 import { userInvocableSkillNames } from "./access/model.js";
 import { createQaSlashRemotes } from "./slash/remotes.js";
 import { QaPromptNotes } from "./prompt-notes.js";
-import { qaActiveRequests, qaQueueStatus } from "./request-queue.js";
+import { QaRequestScheduler, qaRequestFamilyBusy, qaRequestRoots, } from "./request-scheduler.js";
 import { QaTools } from "./qa-tools/index.js";
 import { docsDefaultVersionOf } from "./config-resolvers/tools.js";
 import { QaProvenanceHost } from "./provenance/host-store.js";
@@ -83,7 +88,7 @@ import { defaultLegacyProvenanceFilePath, defaultQaProvenanceDirectoryPath, File
 import { previewConvertibleDocument, previewSourceDocument, } from "./provenance/document-preview.js";
 import { readWorkspaceFileChunk } from "./provenance/file-download.js";
 import { listWorkspaceDirectory, readSourceFilePreview, readWorkspaceFile, QaSourcePreviewError, } from "./provenance/file-preview.js";
-import { existingQaUserWorkspace, prepareQaUserWorkspace, } from "./user-workspace.js";
+import { existingQaUserWorkspace } from "./user-workspace.js";
 export const name = "qa-surface";
 export const inject = [
     "agents",
@@ -139,6 +144,9 @@ let QaSurface = (() => {
     let _instanceExtraInitializers = [];
     let _accountsRegister_decorators;
     let _accountsLogin_decorators;
+    let _accountsOidcStart_decorators;
+    let _accountsOidcComplete_decorators;
+    let _accountsOidcLogout_decorators;
     let _accountsChangePassword_decorators;
     let _accountsRequestPasswordReset_decorators;
     let _accountsWhoami_decorators;
@@ -219,6 +227,12 @@ let QaSurface = (() => {
     let _pendingApprovals_decorators;
     let _answerApproval_decorators;
     let _pendingQuestions_decorators;
+    let _listForms_decorators;
+    let _getForm_decorators;
+    let _mutateForm_decorators;
+    let _validateFormStep_decorators;
+    let _formCapabilities_decorators;
+    let _readFormAttachment_decorators;
     let _answerQuestion_decorators;
     let _cancelQuestion_decorators;
     let _readSourceFile_decorators;
@@ -243,6 +257,9 @@ let QaSurface = (() => {
             const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
             _accountsRegister_decorators = [Remote("accountsRegister")];
             _accountsLogin_decorators = [Remote("accountsLogin")];
+            _accountsOidcStart_decorators = [Remote("accountsOidcStart")];
+            _accountsOidcComplete_decorators = [Remote("accountsOidcComplete")];
+            _accountsOidcLogout_decorators = [Remote("accountsOidcLogout")];
             _accountsChangePassword_decorators = [Remote("accountsChangePassword")];
             _accountsRequestPasswordReset_decorators = [Remote("accountsRequestPasswordReset")];
             _accountsWhoami_decorators = [Remote("accountsWhoami")];
@@ -323,6 +340,12 @@ let QaSurface = (() => {
             _pendingApprovals_decorators = [Remote("pendingApprovals")];
             _answerApproval_decorators = [Remote("answerApproval")];
             _pendingQuestions_decorators = [Remote("pendingQuestions")];
+            _listForms_decorators = [Remote("listForms")];
+            _getForm_decorators = [Remote("getForm")];
+            _mutateForm_decorators = [Remote("mutateForm")];
+            _validateFormStep_decorators = [Remote("validateFormStep")];
+            _formCapabilities_decorators = [Remote("formCapabilities")];
+            _readFormAttachment_decorators = [Remote("readFormAttachment")];
             _answerQuestion_decorators = [Remote("answerQuestion")];
             _cancelQuestion_decorators = [Remote("cancelQuestion")];
             _readSourceFile_decorators = [Remote("readSourceFile")];
@@ -344,6 +367,9 @@ let QaSurface = (() => {
             _slashExecute_decorators = [Remote("slashExecute")];
             __esDecorate(this, null, _accountsRegister_decorators, { kind: "method", name: "accountsRegister", static: false, private: false, access: { has: obj => "accountsRegister" in obj, get: obj => obj.accountsRegister }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _accountsLogin_decorators, { kind: "method", name: "accountsLogin", static: false, private: false, access: { has: obj => "accountsLogin" in obj, get: obj => obj.accountsLogin }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _accountsOidcStart_decorators, { kind: "method", name: "accountsOidcStart", static: false, private: false, access: { has: obj => "accountsOidcStart" in obj, get: obj => obj.accountsOidcStart }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _accountsOidcComplete_decorators, { kind: "method", name: "accountsOidcComplete", static: false, private: false, access: { has: obj => "accountsOidcComplete" in obj, get: obj => obj.accountsOidcComplete }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _accountsOidcLogout_decorators, { kind: "method", name: "accountsOidcLogout", static: false, private: false, access: { has: obj => "accountsOidcLogout" in obj, get: obj => obj.accountsOidcLogout }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _accountsChangePassword_decorators, { kind: "method", name: "accountsChangePassword", static: false, private: false, access: { has: obj => "accountsChangePassword" in obj, get: obj => obj.accountsChangePassword }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _accountsRequestPasswordReset_decorators, { kind: "method", name: "accountsRequestPasswordReset", static: false, private: false, access: { has: obj => "accountsRequestPasswordReset" in obj, get: obj => obj.accountsRequestPasswordReset }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _accountsWhoami_decorators, { kind: "method", name: "accountsWhoami", static: false, private: false, access: { has: obj => "accountsWhoami" in obj, get: obj => obj.accountsWhoami }, metadata: _metadata }, null, _instanceExtraInitializers);
@@ -424,6 +450,12 @@ let QaSurface = (() => {
             __esDecorate(this, null, _pendingApprovals_decorators, { kind: "method", name: "pendingApprovals", static: false, private: false, access: { has: obj => "pendingApprovals" in obj, get: obj => obj.pendingApprovals }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _answerApproval_decorators, { kind: "method", name: "answerApproval", static: false, private: false, access: { has: obj => "answerApproval" in obj, get: obj => obj.answerApproval }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _pendingQuestions_decorators, { kind: "method", name: "pendingQuestions", static: false, private: false, access: { has: obj => "pendingQuestions" in obj, get: obj => obj.pendingQuestions }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _listForms_decorators, { kind: "method", name: "listForms", static: false, private: false, access: { has: obj => "listForms" in obj, get: obj => obj.listForms }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _getForm_decorators, { kind: "method", name: "getForm", static: false, private: false, access: { has: obj => "getForm" in obj, get: obj => obj.getForm }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _mutateForm_decorators, { kind: "method", name: "mutateForm", static: false, private: false, access: { has: obj => "mutateForm" in obj, get: obj => obj.mutateForm }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _validateFormStep_decorators, { kind: "method", name: "validateFormStep", static: false, private: false, access: { has: obj => "validateFormStep" in obj, get: obj => obj.validateFormStep }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _formCapabilities_decorators, { kind: "method", name: "formCapabilities", static: false, private: false, access: { has: obj => "formCapabilities" in obj, get: obj => obj.formCapabilities }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _readFormAttachment_decorators, { kind: "method", name: "readFormAttachment", static: false, private: false, access: { has: obj => "readFormAttachment" in obj, get: obj => obj.readFormAttachment }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _answerQuestion_decorators, { kind: "method", name: "answerQuestion", static: false, private: false, access: { has: obj => "answerQuestion" in obj, get: obj => obj.answerQuestion }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _cancelQuestion_decorators, { kind: "method", name: "cancelQuestion", static: false, private: false, access: { has: obj => "cancelQuestion" in obj, get: obj => obj.cancelQuestion }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _readSourceFile_decorators, { kind: "method", name: "readSourceFile", static: false, private: false, access: { has: obj => "readSourceFile" in obj, get: obj => obj.readSourceFile }, metadata: _metadata }, null, _instanceExtraInitializers);
@@ -453,6 +485,13 @@ let QaSurface = (() => {
         approvals;
         fileDeleteGate;
         userQuestions;
+        formService;
+        formGate;
+        formAttachments;
+        forms() {
+            return (this.formService ??= new QaFormService(new QaFormStore(path.join(path.dirname(defaultAccountsFilePath()), "qa-forms.db")), () => this.getConfig().forms, (session) => this.accountRemotes.resolve(this.getConfig())?.ownerIdOf(session) ??
+                session));
+        }
         provenance;
         notes;
         /** Assigned after the admission gate; that gate only reads it per execution. */
@@ -481,6 +520,12 @@ let QaSurface = (() => {
         integrationPrincipals = new QaIntegrationPrincipalBindings();
         webServer;
         disposeRoute;
+        oidc = new QaOidcService({
+            config: () => this.getConfig(),
+            accounts: () => this.accountRemotes.resolve(this.getConfig()),
+        });
+        disposeOidcRoute;
+        oidcRouteKey;
         routeKey;
         /**
          * The HTTP API an external application asks questions through. Constructed
@@ -498,6 +543,7 @@ let QaSurface = (() => {
         chatSharingStore;
         chatTransport;
         chatTurnGuard;
+        requestScheduler;
         sharing() {
             const accounts = () => {
                 const store = this.accountRemotes.resolve(this.getConfig());
@@ -514,10 +560,13 @@ let QaSurface = (() => {
             // the one live source: each read folds its current snapshots, and a settings
             // write is visible on the next read without reloading the plugin.
             this.source = () => readConfigRefs(entry);
+            this.requestScheduler = new QaRequestScheduler(() => this.getConfig().session.maxActiveRequests, () => qaRequestRoots(ctx, this.getConfig().session.maxActiveRequests > 0), Date.now, (agent) => qaRequestFamilyBusy(ctx, agent));
+            ctx.effect(() => this.requestScheduler.install(ctx), "dsh-qa-surface.request-queue");
             this.logger = getPluginLogger({
                 pluginId: "dsh-qa-surface",
                 consoleSink: createHostLoggerSink(ctx.logger),
             });
+            this.formAttachments = new QaFormAttachmentAdapter(() => this.forms(), () => ctx.get("attachments"), (sessionId, file) => this.admission.grantAttachmentFile(sessionId, file));
             this.accountRemotes = createQaAccountRemotes({
                 getConfig: () => this.getConfig(),
                 logger: this.logger,
@@ -617,7 +666,16 @@ let QaSurface = (() => {
             // that is where the caller's account has just been matched against the
             // ownership record. The browser's `secureSession` remote keeps its own
             // write: there the compared identity is the token's.
-            this.integrationPrincipals);
+            this.integrationPrincipals, {
+                readEvents: async (sessionId) => {
+                    const result = await sessionLog.read(sessionId);
+                    return result.ok ? result.events : [];
+                },
+                restoreFiles: async (sessionId) => {
+                    if (this.getConfig().forms.enabled)
+                        await this.formAttachments.restore(sessionId);
+                },
+            });
             this.provenance = new QaProvenanceHost(ctx, () => this.getConfig(), 
             // Sharded per chat and bounded by the resolved retention policy: the
             // turn path must never rewrite history it did not touch.
@@ -632,7 +690,7 @@ let QaSurface = (() => {
             }, "dsh-qa-surface.chat-sharing");
             ctx.inject(["typertGateway", "connection"], () => {
                 const dispose = installQaNativeFence(ctx, () => this.getConfig().accounts.enabled);
-                const disposeUploads = installQaChatUploads(ctx, () => this.sharing(), (token, id) => this.secureSession(token, id));
+                const disposeUploads = installQaChatUploads(ctx, () => this.sharing(), (token, id) => this.secureSession(token, id), this.formAttachments);
                 return async () => {
                     dispose();
                     await disposeUploads();
@@ -671,7 +729,20 @@ let QaSurface = (() => {
             this.approvals = new QaApprovalGate(ctx, () => this.getConfig().interaction.approvals === "interactive", ownership, this.logger);
             const integrationQuestionPolicy = new QaIntegrationQuestionPolicy(ctx, () => this.accountRemotes.resolve(this.getConfig()), (id) => ownership.rootOf(id));
             ctx.effect(() => () => integrationQuestionPolicy.dispose(), "qa-surface: integration question policy");
-            this.userQuestions = new QaQuestionGate(ctx, () => this.getConfig().interaction.questions === "interactive", ownership, this.logger, (agent) => integrationQuestionPolicy.allowed(agent));
+            this.userQuestions = new QaQuestionGate(ctx, () => this.getConfig().interaction.questions === "interactive", ownership, this.logger, (agent) => integrationQuestionPolicy.allowed(agent) &&
+                !this.formGate?.hasSession(ownership.rootOf(String(agent.session.id)) ?? ""));
+            this.formGate = new QaFormGate(() => this.forms(), (id) => ownership.rootOf(id), (id) => this.userQuestions.list(id).length > 0 ||
+                this.approvals.list(id).length > 0, (exec) => this.getConfig().forms.enabled &&
+                exec.agent !== undefined &&
+                integrationQuestionPolicy.allowed(exec.agent) &&
+                this.admission.knowsSession(String(exec.agent.session.id)), () => this.getConfig().accounts.enabled &&
+                this.ctx.get("fileUploads") !== undefined &&
+                this.formAttachments.available());
+            this.formGate.install(ctx);
+            ctx.effect(() => () => {
+                this.formGate.dispose();
+                this.formService?.store.close();
+            }, "dsh-qa-surface.forms");
             // The destructive tool of the QA catalog composes the same approval flow
             // around itself: registered without `prepend`, it sits inside the approval
             // gate and answers `ask` for every file_delete call of an attested chat,
@@ -722,6 +793,9 @@ let QaSurface = (() => {
             // The QA tool catalog is attached per agent, never at boot: nothing here
             // reaches the model until a managed agent loads the activation skill.
             this.tools = new QaTools(ctx, {
+                forms: this.formGate,
+                formsEnabled: () => this.getConfig().forms.enabled,
+                formProjection: (submission, sessionId) => this.formAttachments.readable(submission, sessionId),
                 logger: this.logger,
                 dynamicActivation: this.getConfig().tools.dynamicActivation,
                 activationSkill: this.getConfig().tools.activationSkill,
@@ -734,6 +808,12 @@ let QaSurface = (() => {
                 docsDefaultVersion: () => docsDefaultVersionOf(this.getConfig().tools),
             });
             ctx.effect(() => () => this.tools.dispose(), "dsh-qa-surface.qa-tools");
+            const listenVolatile = ctx.on.bind(ctx);
+            ctx.effect(() => listenVolatile("loader/volatile-update", () => {
+                this.tools.refreshForms();
+                if (!this.getConfig().forms.enabled)
+                    this.formGate.cancelAll();
+            }), "dsh-qa-surface.form-policy");
             // The root index gains one head script: non-loopback hostnames continue
             // into /qa, the loopback operator keeps the full harness UI. Not in the
             // kiosk composition: there the index itself is served under /qa, so the
@@ -760,6 +840,7 @@ let QaSurface = (() => {
                 const config = this.getConfig();
                 this.refreshRoute();
                 this.refreshIntegrationRoutes();
+                this.refreshOidcRoute();
                 this.warnDocumentsMoved();
                 this.warnLegacySlashDefaults();
                 this.logger.info("config.updated", {
@@ -772,11 +853,16 @@ let QaSurface = (() => {
                 this.webServer = webContext.webServer;
                 this.refreshRoute();
                 this.refreshIntegrationRoutes();
+                this.refreshOidcRoute();
                 webContext.effect(() => () => {
                     this.disposeRoute?.();
                     this.disposeRoute = undefined;
                     this.routeKey = undefined;
                     this.disposeIntegrationRoutes?.();
+                    this.disposeOidcRoute?.();
+                    this.disposeOidcRoute = undefined;
+                    this.oidcRouteKey = undefined;
+                    this.oidc.clear();
                     this.disposeIntegrationRoutes = undefined;
                     this.integrationRouteKey = undefined;
                     this.webServer = undefined;
@@ -827,6 +913,10 @@ let QaSurface = (() => {
          * cannot be opened must not fail the page that triggered it.
          */
         dropVanishedChats(sessionIds) {
+            for (const id of sessionIds) {
+                this.formGate?.cancel(id);
+                this.formService?.store.cancelSession(id);
+            }
             try {
                 const rows = this.quality().dropConversations(sessionIds);
                 this.logger.info("quality.vanished-conversations-dropped", {
@@ -927,6 +1017,17 @@ let QaSurface = (() => {
         accountsLogin(email, password) {
             return this.accountRemotes.login(email, password);
         }
+        accountsOidcStart() {
+            if (!this.disposeOidcRoute)
+                return Promise.reject(oidcRefusal());
+            return this.oidc.start();
+        }
+        accountsOidcComplete(handoff, completionKey) {
+            return this.oidc.complete(handoff, completionKey);
+        }
+        accountsOidcLogout(token) {
+            return this.oidc.logout(token);
+        }
         /** Identity probe; safe to call with an empty or expired token. */
         accountsChangePassword(token, currentPassword, nextPassword) {
             return this.accountRemotes.changePassword(token, currentPassword, nextPassword);
@@ -1028,20 +1129,15 @@ let QaSurface = (() => {
             return this.getConfig();
         }
         /**
-         * Report how much of the deployment's request ceiling the stand is using, so
-         * a browser holds its question back instead of opening another turn on a
-         * model that is busy answering the ones it allows.
-         *
-         * The count is the Host's, not the browser's: a visitor cannot see another
-         * account's chats, and the HTTP API's questions are invisible to every chat
-         * view. Read-only, and a ceiling rather than a lock — a prompt rides the
-         * native session RPC this plugin does not own, so the boundary is the
-         * browser's own courtesy, and two questions sent in the same instant can
-         * still overshoot by one. What the ceiling buys is that steady state, not a
-         * strict bound.
+         * Report server admission. Global reads expose counts only; a chat's FIFO
+         * position requires that account's current read access to the chat. The
+         * scheduler gates every root turn, including native and integration sends.
          */
-        queueStatus() {
-            return qaQueueStatus(this.getConfig().session.maxActiveRequests, qaActiveRequests(this.ctx.agents.roots()));
+        queueStatus(token, sessionId) {
+            if (sessionId !== undefined && this.getConfig().accounts.enabled) {
+                this.sharing().access(token ?? "", sessionId);
+            }
+            return this.requestScheduler.status(sessionId);
         }
         /**
          * Create a QA session from Host-owned inputs. With account workspaces on,
@@ -1050,65 +1146,26 @@ let QaSurface = (() => {
          */
         async createSession(token, subroleId, adminPreview) {
             const config = this.getConfig();
-            if (config.session.policy === "fixed") {
-                throw new Error("Fixed QA sessions cannot be created.");
-            }
-            const id = SessionId(`session-${randomUUID()}`);
             const accounts = this.accountRemotes.resolve(config);
-            const owner = accounts === undefined
-                ? undefined
-                : this.accountRemotes.run(() => this.access.reserveSession(token, String(id), subroleId, adminPreview));
-            try {
-                // Check deployment-only pins before creating a durable Host session.
-                // Full admission below still verifies the composed agent and tool view.
-                this.admission.preflightDeployment();
-                let userCwd;
-                if (config.accounts.perUserWorkspace) {
-                    const workspaceId = config.session.workspaceId;
-                    if (owner === undefined || workspaceId === null) {
-                        throw new Error("Per-user QA workspace configuration is unavailable.");
-                    }
-                    const workspace = this.ctx.workspaceRegistry.get(WorkspaceId(workspaceId));
-                    if (workspace === undefined) {
-                        throw new Error(`Configured QA workspace ${workspaceId} is unavailable.`);
-                    }
-                    userCwd = prepareQaUserWorkspace(workspace.path, owner.id);
-                }
-                const created = await this.ctx.sessionController.create({
-                    sessionId: id,
-                    ...(userCwd !== undefined
-                        ? { cwd: userCwd }
-                        : config.session.workspaceId !== null
-                            ? { workspaceId: WorkspaceId(config.session.workspaceId) }
-                            : config.session.cwd !== null
-                                ? { cwd: config.session.cwd }
-                                : {}),
-                    ...(config.session.agentPreset === null
-                        ? {}
-                        : { agentPreset: config.session.agentPreset }),
-                });
-                await applySessionModelPolicy(this.ctx, created.sessionId, this.access.modelPolicyFor(String(created.sessionId)), this.logger);
-                const sessionId = String(created.sessionId);
-                await this.admission.secureSession(token, sessionId);
-                this.integrationPrincipals.attest(sessionId, owner?.id, accounts?.ownerIdOf(sessionId));
-                return sessionId;
-            }
-            catch (error) {
-                // This call is the only way the browser could have learned the id, so a
-                // failure at any stage — the Host creating the session, selecting the
-                // model, the admission refusing the composition — leaves no chat behind
-                // and the reservation goes with it. A kept record would put an empty
-                // chat in the account's list, and nothing else would ever remove it.
-                if (owner !== undefined) {
-                    accounts?.releaseSessionReservation(owner.id, String(id));
-                }
-                this.logger.error("session.create-rejected", {
-                    sessionId: String(id),
-                    reason: error instanceof QaAttestationError ? error.reason : undefined,
-                    error: error instanceof Error ? error.message : String(error),
-                });
-                throw new Error(qaAttestationFailureMessage("Unable to create a QA session.", error), { cause: error });
-            }
+            return createQaSession({
+                ctx: this.ctx,
+                config,
+                logger: this.logger,
+                sessionFiles: createSessionEraser(),
+                reserve: (id) => accounts === undefined
+                    ? undefined
+                    : this.accountRemotes.run(() => this.access.reserveSession(token, id, subroleId, adminPreview)),
+                release: (owner, id) => accounts?.releaseSessionReservation(owner, id),
+                modelPolicy: (id) => this.access.modelPolicyFor(id),
+                preflight: () => this.admission.preflightDeployment(),
+                admit: (id) => this.admission.secureSession(token, id),
+                attest: (id, owner) => this.integrationPrincipals.attest(id, owner, accounts?.ownerIdOf(id)),
+                reject: (id) => {
+                    this.integrationPrincipals.attest(id, undefined, undefined);
+                    this.admission.rejectSession(id);
+                },
+                forget: (id) => this.admission.forgetRejectedSession(id),
+            });
         }
         /** Create an independently admitted ordinary branch of the caller's own chat. */
         async forkSession(token, sourceId, answerSeq) {
@@ -1406,7 +1463,9 @@ let QaSurface = (() => {
         }
         async chatAudit(token, sessionId, full) {
             this.requireChatOwner(token, sessionId);
-            await this.secureSession(token, sessionId);
+            // Sidebar summaries read stored audit metadata; they do not need an agent.
+            if (full)
+                await this.secureSession(token, sessionId);
             this.requireChatOwner(token, sessionId);
             const audit = this.ctx.get("sessionAudit");
             if (audit === undefined)
@@ -1523,6 +1582,115 @@ let QaSurface = (() => {
                 return [];
             return this.userQuestions.list(sessionId);
         }
+        /** Forms stay owner-scoped; UUIDs and a browser-supplied session never grant access. */
+        async admitForm(token, sessionId) {
+            try {
+                this.requireChatOwner(token, sessionId);
+                await this.secureSession(token, sessionId);
+                this.requireChatOwner(token, sessionId);
+            }
+            catch {
+                throw new QaFormError("ACCESS_DENIED", "Form access is unavailable.");
+            }
+        }
+        async listForms(token, sessionId) {
+            try {
+                await this.admitForm(token, sessionId);
+                if (!this.getConfig().forms.enabled)
+                    return { ok: true, value: [] };
+                this.formGate.touch(sessionId);
+                const service = this.forms();
+                return {
+                    ok: true,
+                    value: service.store
+                        .list(sessionId)
+                        .map((r) => service.view(r, this.formGate.waiting(r.id))),
+                };
+            }
+            catch (error) {
+                return formFailure(error);
+            }
+        }
+        async getForm(token, sessionId, formId) {
+            try {
+                await this.admitForm(token, sessionId);
+                const s = this.forms();
+                return {
+                    ok: true,
+                    value: s.view(s.get(sessionId, formId), this.formGate.waiting(formId)),
+                };
+            }
+            catch (error) {
+                return formFailure(error);
+            }
+        }
+        async mutateForm(token, sessionId, command) {
+            try {
+                await this.admitForm(token, sessionId);
+                const s = this.forms(), r = s.command(sessionId, command);
+                this.logger.info("form.mutated", {
+                    sessionId,
+                    formId: r.id,
+                    action: command.action,
+                    revision: r.revision,
+                    status: r.status,
+                });
+                this.formGate.notify(r, command.action === "pause");
+                return { ok: true, value: s.view(r, this.formGate.waiting(r.id)) };
+            }
+            catch (error) {
+                return formFailure(error);
+            }
+        }
+        async validateFormStep(token, sessionId, formId, stepId, revision) {
+            try {
+                await this.admitForm(token, sessionId);
+                this.forms().step(sessionId, formId, stepId, revision);
+                return { ok: true, value: null };
+            }
+            catch (error) {
+                return formFailure(error);
+            }
+        }
+        async formCapabilities() {
+            return {
+                enabled: this.getConfig().forms.enabled,
+                schemaVersion: 1,
+                upload: this.getConfig().accounts.enabled &&
+                    this.ctx.get("fileUploads") !== undefined &&
+                    this.formAttachments.available(),
+            };
+        }
+        async readFormAttachment(token, sessionId, formId, resourceId) {
+            try {
+                await this.admitForm(token, sessionId);
+                const s = this.forms(), r = s.get(sessionId, formId);
+                const file = Object.values(r.attachments)
+                    .flat()
+                    .find((f) => f.resource_id === resourceId);
+                if (!file)
+                    return {
+                        ok: false,
+                        error: {
+                            code: "ACCESS_DENIED",
+                            message: "File access is unavailable.",
+                        },
+                    };
+                const data = s.store.resource(formId, resourceId);
+                this.requireChatOwner(token, sessionId);
+                return {
+                    ok: true,
+                    value: {
+                        name: file.name,
+                        media_type: file.media_type,
+                        data: Buffer.from(data).toString("base64"),
+                    },
+                };
+            }
+            catch (error) {
+                return formFailure(error);
+            }
+        }
         /**
          * Apply the operator's answers to one parked question request. Every question
          * of the request must be present in `answers`; one the browser omits reads as
@@ -1901,6 +2069,28 @@ let QaSurface = (() => {
                 });
             }
         }
+        refreshOidcRoute() {
+            const config = this.getConfig();
+            const key = config.enabled && config.accounts.enabled && config.accounts.oidc.enabled
+                ? JSON.stringify([config.accounts.oidc, config.route.path])
+                : undefined;
+            if (key === this.oidcRouteKey)
+                return;
+            this.disposeOidcRoute?.();
+            this.disposeOidcRoute = undefined;
+            this.oidcRouteKey = undefined;
+            this.oidc.clear();
+            if (!key || !this.webServer)
+                return;
+            try {
+                this.disposeOidcRoute = registerQaOidcRoute(this.webServer, config, this.oidc);
+                this.oidcRouteKey = key;
+                this.logger.info("oidc.route-registered", {});
+            }
+            catch {
+                this.logger.error("oidc.route-unavailable", {});
+            }
+        }
         refreshRoute() {
             const config = this.getConfig();
             // Kiosk: the harness route policy owns the QA paths and serves the