@yadsh/dsh-qa-surface 0.2.0 → 0.3.0

package/lib/types/provenance/host-store.d.ts

@@ -0,0 +1,54 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { QaTurnSources } from "./types.js";
+import type { ResolvedQaSurfaceConfig } from "../types.js";
+export declare const QA_REPORT_SOURCES_TOOL = "qa_report_sources";
+declare module "@deepseek-ai/dsh-session" {
+    interface SessionEventMap {
+        "qa/sources": QaTurnSources;
+    }
+}
+interface SubagentInfo {
+    readonly runId: string;
+    readonly provider: string;
+    readonly id: string;
+    readonly local: boolean;
+}
+declare module "@deepseek-ai/cordis" {
+    interface Events {
+        "subagent/start"(info: SubagentInfo): void;
+        "subagent/end"(info: SubagentInfo): void;
+    }
+}
+/** Host authority for collection, replay, delegation inheritance and snapshots. */
+export declare class QaProvenanceHost {
+    private readonly ctx;
+    private readonly config;
+    private readonly collectors;
+    private readonly snapshots;
+    private readonly calls;
+    private readonly lineage;
+    private readonly disposers;
+    constructor(ctx: Context, config: () => ResolvedQaSurfaceConfig);
+    dispose(): void;
+    /**
+     * Drop every per-session record of one chat. Long-lived servers outlive
+     * their sessions by weeks; without this the collector, snapshot, call and
+     * lineage maps grow with every chat and turn forever.
+     */
+    private forget;
+    private forgetAll;
+    bundles(sessionId: string): readonly QaTurnSources[];
+    sourceAllowed(sessionId: string, path: string): boolean;
+    private seed;
+    private observeEvent;
+    private shouldCollect;
+    private materialize;
+    private startSubagent;
+    private endSubagent;
+    private registerReportTool;
+    private collector;
+    private sessionCalls;
+    private sessionSnapshots;
+}
+export {};
+//# sourceMappingURL=host-store.d.ts.map

package/lib/types/provenance/index.d.ts

@@ -0,0 +1,10 @@
+export * from "./collector.js";
+export * from "./connectors.js";
+export * from "./dedupe.js";
+export * from "./extractors.js";
+export * from "./file-preview.js";
+export * from "./host-store.js";
+export * from "./normalize.js";
+export * from "./reported.js";
+export type * from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/lib/types/provenance/normalize.d.ts

@@ -0,0 +1,13 @@
+import type { QaSourceLocation } from "./types.js";
+/** Strip model-added XML-like wrappers without interpreting arbitrary prose. */
+export declare function unwrapSourceTarget(value: string): string;
+/** Canonical HTTP(S) identity while retaining business-relevant parameters. */
+export declare function canonicalizeUrl(value: string, options?: {
+    readonly normalize?: boolean;
+    readonly stripTrackingParams?: boolean;
+}): string | null;
+/** Normalize separators and, when possible, make a path workspace-relative. */
+export declare function canonicalizeWorkspacePath(value: string, workspaceRoot?: string): string;
+/** Union exact anchors and compact overlapping or adjacent ranges. */
+export declare function compactLocations(locations: readonly QaSourceLocation[]): readonly QaSourceLocation[];
+//# sourceMappingURL=normalize.d.ts.map

package/lib/types/provenance/reported.d.ts

@@ -0,0 +1,5 @@
+import { canonicalizeUrl } from "./normalize.js";
+import type { QaReportedSource, QaSourceOrigin, QaSourceReference } from "./types.js";
+/** Normalize a source explicitly reported by a delegated provider. */
+export declare function normalizeReportedSource(source: QaReportedSource, origin: QaSourceOrigin, workspaceRoot?: string, urlOptions?: Parameters<typeof canonicalizeUrl>[1]): QaSourceReference | null;
+//# sourceMappingURL=reported.d.ts.map

package/lib/types/provenance/types.d.ts

@@ -0,0 +1,78 @@
+export type QaSourceKind = "file" | "code" | "web" | "jira" | "confluence" | "knowledge" | "other";
+export type QaSourceEvidence = "read" | "fetched" | "queried" | "reported" | "inherited" | "discovered";
+export type QaSourceMetadataValue = string | number | boolean | null | readonly QaSourceMetadataValue[] | {
+    readonly [key: string]: QaSourceMetadataValue;
+};
+export interface QaSourceMetadata {
+    readonly [key: string]: QaSourceMetadataValue;
+}
+export interface QaSourceLocation {
+    readonly path?: string;
+    readonly lineStart?: number;
+    readonly lineEnd?: number;
+    readonly anchor?: string;
+    readonly jiraKey?: string;
+    readonly confluencePageId?: string;
+}
+export interface QaSourceOrigin {
+    readonly sessionId: string;
+    readonly turn: number;
+    readonly step?: number;
+    readonly toolCallId?: string;
+    readonly toolName?: string;
+    readonly agentId?: string;
+    readonly role: "parent" | "subagent";
+    readonly subagentRunId?: string;
+    readonly subagentSessionId?: string;
+}
+export interface QaSourceReference {
+    /** Stable identity after path, URL or provider-specific normalization. */
+    readonly id: string;
+    readonly kind: QaSourceKind;
+    readonly title: string;
+    readonly uri?: string;
+    readonly path?: string;
+    readonly snippet?: string;
+    readonly locations: readonly QaSourceLocation[];
+    readonly evidence: QaSourceEvidence;
+    readonly origins: readonly QaSourceOrigin[];
+    readonly score: number;
+    readonly metadata?: QaSourceMetadata;
+}
+export interface QaTurnSources {
+    readonly version: 1;
+    readonly sessionId: string;
+    readonly turn: number;
+    readonly sources: readonly QaSourceReference[];
+    readonly discovered?: readonly QaSourceReference[];
+    readonly complete: boolean;
+    readonly incompleteOrigins?: readonly {
+        readonly subagentRunId?: string;
+        readonly provider?: string;
+        readonly reason: string;
+    }[];
+}
+export interface SourceExtractorContext {
+    readonly toolName: string;
+    readonly args: unknown;
+    readonly result: unknown;
+    readonly presentation?: unknown;
+    readonly origin: QaSourceOrigin;
+    /** Canonical session/workspace root used to make local paths portable. */
+    readonly workspaceRoot?: string;
+}
+export interface QaReportedSource {
+    readonly kind: QaSourceKind;
+    readonly title: string;
+    readonly uri?: string;
+    readonly path?: string;
+    readonly snippet?: string;
+    readonly locations?: readonly QaSourceLocation[];
+    readonly metadata?: QaSourceMetadata;
+}
+export interface SourceExtractor {
+    readonly id: string;
+    matches(context: SourceExtractorContext): boolean;
+    extract(context: SourceExtractorContext): readonly QaSourceReference[];
+}
+//# sourceMappingURL=types.d.ts.map

package/lib/types/secure-session.d.ts

@@ -1,6 +1,14 @@
 import type { Context } from "@deepseek-ai/cordis";
 import type { PluginLogger } from "@yadsh/dsh-plugin-log";
 import type { QaLockdownProof, ResolvedQaSurfaceConfig } from "./types.js";
+/**
+ * The accounts half of admission, resolved per call by the entry (accounts
+ * may be toggled at runtime). A gate must either accept the token/session
+ * pair or throw the coarse `QaAttestationError`; see {@link QaAccounts}.
+ */
+export interface QaAccountsGate {
+    enforceSessionAccess(token: string, sessionId: string): void;
+}
 /**
  * Host-side QA policy admission boundary — the only browser-callable operation
  * that turns a session into a locked QA session. It verifies the immutable
@@ -13,9 +21,10 @@ export declare class QaPolicyAdmission {
     private readonly ctx;
     private readonly config;
     private readonly logger;
+    private readonly accounts?;
     private readonly appliedPolicies;
-    constructor(ctx: Context, config: () => ResolvedQaSurfaceConfig, logger: PluginLogger);
-    secureSession(sessionId: string): QaLockdownProof;
+    constructor(ctx: Context, config: () => ResolvedQaSurfaceConfig, logger: PluginLogger, accounts?: QaAccountsGate | undefined);
+    secureSession(token: string, sessionId: string): QaLockdownProof;
     /** Detach every pinned tool policy; wired as a disposal effect by the entry. */
     dispose(): void;
 }

package/lib/types/types.d.ts

@@ -1,7 +1,87 @@
+import type { QaTurnSources } from "./provenance/types.js";
 export type QaSessionPolicy = "browser-persistent" | "new-on-load" | "fixed";
 export type QaSandboxMode = "read-only";
 export type QaApprovalPolicy = "never";
 export type QaToolPolicyMode = "allow-list";
+export type QaAccountRole = "user" | "admin";
+/** The account fields projected to browsers; never includes credentials. */
+export interface QaAccountUserPublic {
+    readonly id: string;
+    readonly email: string;
+    readonly displayName: string;
+    readonly role: QaAccountRole;
+    readonly createdAt: string;
+    readonly lastLoginAt: string | null;
+    readonly disabled: boolean;
+}
+/** One successful login/registration: the bearer token plus the user. */
+export interface QaAccountSession {
+    readonly token: string;
+    readonly user: QaAccountUserPublic;
+}
+export type QaWhoamiResult = {
+    readonly authenticated: false;
+} | {
+    readonly authenticated: true;
+    readonly user: QaAccountUserPublic;
+};
+/** Bulk ownership claim outcome for one browser's local chat index. */
+export interface QaClaimResult {
+    readonly claimed: number;
+    /** Ids already owned by a different user; the browser drops them. */
+    readonly conflicts: readonly string[];
+}
+/**
+ * One chat-ownership entry as the admin views see it: the session, its owner
+ * and the owner's display name resolved at read time (a disabled account
+ * still names its chats).
+ */
+export interface QaOwnershipEntry {
+    readonly sessionId: string;
+    readonly userId: string;
+    readonly displayName: string;
+    readonly claimedAt: string;
+}
+export interface QaSourcesConfig {
+    readonly enabled?: boolean;
+    readonly collect?: {
+        readonly parentAgent?: boolean;
+        readonly subagents?: boolean;
+        readonly persistTurnEvent?: boolean;
+    };
+    readonly display?: {
+        readonly sidebar?: boolean;
+        readonly footer?: boolean;
+        readonly groupByKind?: boolean;
+        readonly showDiscovered?: boolean;
+        readonly showOriginBadges?: boolean;
+        readonly maxInitiallyVisiblePerGroup?: number;
+    };
+    readonly webSearch?: {
+        readonly promoteSearchResultsWithoutFetch?: boolean;
+        readonly maxPromotedPerSearch?: number;
+    };
+    readonly dedupe?: {
+        readonly normalizeUrls?: boolean;
+        readonly stripTrackingParams?: boolean;
+        readonly mergeFileRanges?: boolean;
+    };
+    readonly filePreview?: {
+        readonly enabled?: boolean;
+        readonly markdownRenderedByDefault?: boolean;
+        readonly allowRawToggle?: boolean;
+        readonly maxBytes?: number;
+        readonly maxMarkdownRenderBytes?: number;
+    };
+    readonly subagents?: {
+        readonly inheritSources?: boolean;
+        readonly enableReportToolFallback?: boolean;
+        readonly markIncompleteOpaqueRuns?: boolean;
+    };
+    readonly legacy?: {
+        readonly parseAssistantSourcesBlock?: boolean;
+    };
+}
 export interface QaSurfaceConfig {
     readonly enabled?: boolean;
     readonly route?: {
@@ -68,6 +148,21 @@ export interface QaSurfaceConfig {
     readonly embedding?: {
         readonly frameAncestors?: string | null;
     };
+    readonly accounts?: {
+        /** Opt-in; the QA gate stays off until the deployment turns this on. */
+        readonly enabled?: boolean;
+        readonly allowRegistration?: boolean;
+        readonly sessionTtlDays?: number;
+        /** Let admins see chats owned by other QA accounts. */
+        readonly showOtherUsersChats?: boolean;
+    };
+    readonly entry?: {
+        /** Inject the root → /qa redirect for non-loopback hostnames. */
+        readonly redirectNonLoopback?: boolean;
+        /** Cookie-less /qa navigations go through the one-time ?token= exchange. */
+        readonly cookieBootstrap?: boolean;
+    };
+    readonly sources?: QaSourcesConfig;
 }
 export interface ResolvedQaSurfaceConfig {
     readonly enabled: boolean;
@@ -133,6 +228,64 @@ export interface ResolvedQaSurfaceConfig {
     readonly embedding: {
         readonly frameAncestors: string | null;
     };
+    readonly accounts: {
+        readonly enabled: boolean;
+        readonly allowRegistration: boolean;
+        readonly sessionTtlDays: number;
+        readonly showOtherUsersChats: boolean;
+    };
+    readonly entry: {
+        readonly redirectNonLoopback: boolean;
+        readonly cookieBootstrap: boolean;
+    };
+    readonly sources: {
+        readonly enabled: boolean;
+        readonly collect: {
+            readonly parentAgent: boolean;
+            readonly subagents: boolean;
+            readonly persistTurnEvent: boolean;
+        };
+        readonly display: {
+            readonly sidebar: boolean;
+            readonly footer: boolean;
+            readonly groupByKind: boolean;
+            readonly showDiscovered: boolean;
+            readonly showOriginBadges: boolean;
+            readonly maxInitiallyVisiblePerGroup: number;
+        };
+        readonly webSearch: {
+            readonly promoteSearchResultsWithoutFetch: boolean;
+            readonly maxPromotedPerSearch: number;
+        };
+        readonly dedupe: {
+            readonly normalizeUrls: boolean;
+            readonly stripTrackingParams: boolean;
+            readonly mergeFileRanges: boolean;
+        };
+        readonly filePreview: {
+            readonly enabled: boolean;
+            readonly markdownRenderedByDefault: boolean;
+            readonly allowRawToggle: boolean;
+            readonly maxBytes: number;
+            readonly maxMarkdownRenderBytes: number;
+        };
+        readonly subagents: {
+            readonly inheritSources: boolean;
+            readonly enableReportToolFallback: boolean;
+            readonly markIncompleteOpaqueRuns: boolean;
+        };
+        readonly legacy: {
+            readonly parseAssistantSourcesBlock: boolean;
+        };
+    };
+}
+export interface QaSourceFilePreview {
+    readonly path: string;
+    readonly content: string;
+    readonly size: number;
+    readonly truncated: boolean;
+    readonly markdown: boolean;
+    readonly renderableMarkdown: boolean;
 }
 /** Host-attested facts required before the QA composer may become writable. */
 export interface QaLockdownProof {
@@ -154,6 +307,11 @@ export type QaMessage = {
     readonly status: "committed";
     readonly timestamp?: number;
     readonly images?: readonly QaImageView[];
+    /**
+     * Chat owner's display name, set only for an admin reading a foreign
+     * chat; the owner themself sees their messages unlabeled.
+     */
+    readonly author?: string;
 } | {
     readonly id: string;
     readonly role: "assistant";
@@ -162,6 +320,10 @@ export type QaMessage = {
     readonly timestamp?: number;
     /** Host turn this answer belongs to; groups regenerations into variants. */
     readonly turn?: number;
+    /** Canonical evidence snapshot shared with this answer's source drawer. */
+    readonly sources?: readonly QaSource[];
+    readonly sourcesComplete?: boolean;
+    readonly incompleteSourceOrigins?: QaTurnSources["incompleteOrigins"];
     /** Host-recorded response timing, present on finalized messages only. */
     readonly stats?: {
         /** step start → final message. */
@@ -211,17 +373,9 @@ export type QaWorkItem = {
     readonly endedAt?: number;
 };
 export type QaSessionPhase = "idle" | "creating" | "ready" | "running" | "reconnecting" | "blocked" | "error";
-/** One tool-derived source shown in the sources drawer. */
-export interface QaSource {
-    readonly id: string;
-    readonly kind: "web" | "search" | "file";
-    /** URL, filesystem path or search query as the model supplied it. */
-    readonly target: string;
-    readonly title: string;
-    readonly snippet: string;
-    /** The tool's full text output, capped for the detail pane. */
-    readonly output: string;
-}
+export type { QaSourceEvidence, QaSourceKind, QaSourceLocation, QaSourceOrigin, QaSourceReference, QaTurnSources, } from "./provenance/types.js";
+/** Transitional UI name; the drawer now consumes the canonical source object. */
+export type QaSource = import("./provenance/types.js").QaSourceReference;
 /** Raster formats the attachment path accepts (mirrors the host contract). */
 export type QaImageMediaType = "image/png" | "image/jpeg" | "image/webp" | "image/gif";
 /** One image pending in the composer, browser-owned until the prompt lands. */
@@ -255,6 +409,8 @@ export interface QaSessionState {
     readonly chatsRevision: number;
     /** Tool-derived sources of the current chat (web targets and files read). */
     readonly sources: readonly QaSource[];
+    readonly sourcesComplete: boolean;
+    readonly incompleteSourceOrigins: QaTurnSources["incompleteOrigins"];
     /** Set while the bound session is a subagent watched from the panel. */
     readonly viewingSubagent: QaSubagentView | null;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yadsh/dsh-qa-surface",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "A focused end-user QA surface backed by native DeepSeek Harness sessions",
   "repository": {
     "type": "git",
@@ -14,6 +14,9 @@
   "type": "module",
   "main": "./lib/index.js",
   "types": "./lib/types/index.d.ts",
+  "bin": {
+    "qa-accounts": "./lib/cli.js"
+  },
   "exports": {
     ".": {
       "types": "./lib/types/index.d.ts",
@@ -47,8 +50,9 @@
       ],
       "inject": [
         "@deepseek-ai/dsh-api-gateway",
+        "@deepseek-ai/dsh-api-session-controller",
+        "@deepseek-ai/dsh-agent-presets",
         "@deepseek-ai/dsh-client-connection",
-        "@deepseek-ai/dsh-client-runtime",
         "@deepseek-ai/dsh-client-ui-layout",
         "@deepseek-ai/dsh-client-ui-settings",
         "@deepseek-ai/dsh-client-ui-theme"
@@ -83,58 +87,71 @@
     "node": "^22.19.0 || >=24.0.0"
   },
   "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/schemastery": "^3.18.1",
-    "@deepseek-ai/dsh-api-gateway": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-agent": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-agent-presets": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-connection": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-runtime": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-layout": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-theme": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-host-webserver": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-permission-presets": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-session": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-settings": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-tools": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-typert-protocol": ">=0.1.1-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-workspace": ">=0.1.1-rc.2 <0.2.0",
-    "react": "^18.2.0"
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/schemastery": "^3.18.2",
+    "@deepseek-ai/dsh-api-gateway": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-agent": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-agent-presets": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-api-session-controller": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-api-workspace-controller": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-connection": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-conversation": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-chat": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-layout": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-renderer": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-settings": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-slots": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-theme": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-host-webserver": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-permission-presets": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-session": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-settings": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-system-prompt": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-tools": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-typert-protocol": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-workspace": ">=0.1.5-rc.2 <0.2.0",
+    "react": "^18.2.0",
+    "react-dom": "^18.2.0"
   },
   "dependencies": {
     "zod": "^4.4.3",
     "@yadsh/dsh-plugin-log": "^0.2.1"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "4.0.1",
-    "@deepseek-ai/schemastery": "3.18.1",
-    "@deepseek-ai/dsh-api-gateway": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-agent": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-agent-presets": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-connection": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-runtime": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-layout": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-slots": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-theme": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-host-webserver": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-permission-presets": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-session": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-settings": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-tools": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-typert-generator": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-typert-protocol": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-workspace": "0.1.1-rc.2",
+    "@deepseek-ai/cordis": "4.0.2",
+    "@deepseek-ai/schemastery": "3.18.2",
+    "@deepseek-ai/dsh-api-gateway": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-agent": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-agent-presets": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-api-session-controller": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-api-workspace-controller": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-connection": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-chat": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-layout": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-theme": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-host-webserver": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-permission-presets": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-session": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-system-prompt": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-tools": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-typert-generator": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-typert-protocol": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-workspace": "0.1.5-rc.2",
     "@testing-library/react": "^16.3.0",
     "@types/node": "^26.4.0",
     "@types/react": "18.3.28",
+    "@types/react-dom": "18.3.7",
     "eslint": "10.9.1",
     "jsdom": "^26.1.0",
     "playwright": "1.62.1",
     "prettier": "^3.6.2",
     "react": "18.3.1",
+    "react-dom": "18.3.1",
     "tsdown": "^0.22.14",
     "typescript": "^7.0.2",
     "vitest": "^4.1.11",
@@ -147,7 +164,7 @@
   },
   "scripts": {
     "clean": "node -e \"require('node:fs').rmSync('lib', { recursive: true, force: true })\"",
-    "build": "pnpm run clean && node scripts/generate-typert.mjs && tsc -p tsconfig.build.json && tsdown",
+    "build": "pnpm run lint && pnpm run clean && node scripts/generate-typert.mjs && tsc -p tsconfig.build.json && tsdown",
     "lint": "eslint src tests scripts tsdown.config.ts",
     "format": "prettier --check . --end-of-line auto",
     "format:write": "prettier --write . --end-of-line auto",