@yadsh/dsh-qa-surface 0.2.0 → 0.4.0

package/docs/ARCHITECTURE.md

@@ -1,66 +0,0 @@
-# Architecture
-
-The Host half validates the Loader configuration, registers the `qa-surface`
-settings namespace and owns one narrow GET/HEAD route for the configured QA
-path. Published DSH `0.1.1-rc.2` returns 404 for unknown frontend paths, so the
-route redirects navigation through the canonical `/` index with an encoded
-same-origin path marker. It also exposes one typed
-`secureSession(sessionId)` operation whose policy is read only from Host
-settings. The entry delegates that operation to `QaPolicyAdmission`
-(`secure-session.ts`), the Host-side admission boundary. It does not serve
-HTML, create another server, replace the frontend fallback, or touch
-API/plugin routes. The browser removes the
-marker and restores the requested path with `history.replaceState` before
-route matching. The Host creates no sessions itself.
-
-The browser half registers `QaSurface` in the root-scoped `shell.overlay` list.
-`QaRouteController` keeps that entry dormant outside the configured path and
-reversibly observes `pushState`, `replaceState` and `popstate`.
-
-`QaSessionController` is the only browser-side DSH session-coupled module. It uses
-`connection.api.sessions.create/selectModel` for creation policy and the public
-`SessionFace` for prompt, cancel and snapshots; the shared client contracts and
-the idle state live in `client/types.ts`. Its supporting modules are pure
-helpers: `client/wait-for.ts` waits on observable stores, `client/chat-index.ts`
-(`QaChatIndex`) keeps the browser-local chat index and persisted active
-session in storage, and `client/attestation.ts` parses Host reason markers and
-validates proofs against the deployed lockdown config. `QaTranscriptAdapter`
-projects session snapshots to plugin-local messages. "New chat" enters a
-draft that materializes an attested session only when the first prompt is
-sent, and the chat list orders by the host's `updatedAt`. The log is
-append-only and there is no truncation seam, so regeneration prompts a
-hidden instruction and projects the follow-up turns as variants of one
-question; the same projection flattens tool activity into the sources
-drawer (web targets, searches, files read). Subagent delegation, when the
-deployment opts it in, renders launches and settlement notices inline, and
-the agents drawer opens a child session as a read-only live transcript: the
-binding skips attestation and every send path stays closed. By default it excludes
-reasoning, tool arguments and tool results. When explicitly enabled, it
-correlates assistant blocks, paired tool results, running calls and turn
-timings into one plugin-local work group per turn; `QaWorkGroup` owns
-disclosure state and collapses the group when the turn completes. System
-context and raw failures remain excluded.
-
-In locked mode the Host operation verifies immutable session composition,
-refuses to adopt a non-QA session with user history, validates the named
-permission preset, installs `ToolRestriction.allow`, installs an agent-scoped
-monotonic execution guard, selects the permission preset, and returns only a
-sanitized proof. The controller remains non-writable until every proof field
-matches its Host-delivered config and repeats the check before prompt
-admission. No private RPC handler, slash command, direct provider API, or DSH
-core patch is used.
-
-This narrows a QA agent's effective session/tool policy, but a route overlay on
-a shared privileged Host is not an authorization boundary for other DSH
-clients. Strong isolation requires a dedicated process/profile, restricted
-identity and network boundary.
-
-All interaction colors come from the company interaction palette
-("Цвета взаимодействия"), defined once as the `QA_BRAND_PALETTE` object at the
-top of `styles.ts` and emitted as `--dsh-qa-*` custom properties on the
-overlay root; surfaces and typography keep using the themed `--dsw-alias-*`
-tokens so light and dark hosts stay coherent.
-
-The overlay locks document scrolling and contains keyboard focus while active.
-It does not locate AppFrame through generated CSS classes and does not dispose
-global DSH runtime services when the route changes.

package/docs/COMPATIBILITY.md

@@ -1,14 +0,0 @@
-# Compatibility
-
-| Plugin version | Tested DSH release | Required public contracts                                                                                                                                                              |
-| -------------- | ------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| 0.1.x          | 0.1.1-rc.2         | `shell.overlay`, Typert remote, `agentPresets.composedPreset`, `permissionPresets`, agent-scoped `tools.restrict/guard`, `workspaceRegistry`, session/model APIs, `webServer.register` |
-
-DSH is developer-preview software. Compatibility-sensitive calls are isolated
-in `QaSessionController`, `QaTranscriptAdapter`, `QaConfigController` and
-`QaRouteController`; Host lockdown coupling is isolated in
-`QaSurface.secureSession`. The Host navigation adapter also works around this tested
-release's exact-index static serving: `/qa` is redirected through `/`, then the
-client restores the original pathname. Missing settings fall back to default
-browser config; missing required client services prevent the browser plugin
-from being injected rather than patching DSH internals.

package/docs/CONFIGURATION.md

@@ -1,112 +0,0 @@
-# Configuration reference
-
-Defaults and constraints are documented in the root README. Important runtime
-rules are:
-
-- `route.path` starts with `/`, has trailing slashes removed, and cannot claim
-  `/`, `/api` or `/plugins`;
-- `fixed` requires `fixedSessionId`;
-- `provider` and `model` are either both absent or both present;
-- `maxContentWidth` is an integer from 480 through 1600;
-- duplicate/blank suggested questions are removed;
-- approval and question policies are fixed to safe blocking behavior;
-- reasoning and tool details are opt-in through `ui.showReasoning` and
-  `ui.showToolActivity`; enable them only where those contents are appropriate
-  for the QA audience;
-- lockdown defaults to enabled and requires a non-empty permission preset;
-- the preset must resolve on the Host to exactly `read-only` + `never`;
-- permission, slash-command, settings, rename, delete and arbitrary-open
-  capability flags cannot be enabled;
-- `showReset` requires the independent `allowSessionReset` opt-in;
-- the tool policy is an allow-list; unknown configured tool names fail closed.
-  A name only resolves while its tool is actually mounted: MCP tools
-  (`mcp__<server>__*`) exist only while their server is reachable, so keep
-  them out of the allow list on hosts that cannot reach the server. Tools
-  mounted by an agent preset live in that preset's ancestor scope; the Host
-  validates and restricts the complete agent-scoped view, not just globals.
-
-## Pinning chats to a directory
-
-By default a QA chat is created against the Host working directory. Two
-mutually exclusive pins anchor every new chat (and its subagents) to the
-deployment's own directory:
-
-- `session.cwd: "D:/qa-docs"` - an absolute directory used directly as the
-  session cwd; no registration needed. Attestation compares the session's
-  recorded cwd case- and separator-insensitively on Windows.
-- `session.workspaceId: "<uuid>"` - a registered DSH workspace (created in
-  the web UI or via the workspace API; the id is a generated uuid, not the
-  path). Sessions attach to the workspace, so they group under it in the
-  host UI. When the id does not resolve, attestation refuses with
-  `reason: workspace-unavailable` instead of an opaque mismatch.
-
-With `lockdown.enforceFixedWorkspace: true` (the default) a chat created
-anywhere else refuses to attest, so the QA audience can never pull the
-assistant out of the pinned directory.
-
-Browser persistence stores only the DSH session id under
-`<storageKey>:v1:<route>:session`, plus — when `ui.showSessionList` is
-enabled — a per-browser chat index under `<storageKey>:v1:<route>:chats`
-(session ids only, capped at 50). Transcript content, credentials and tool
-results remain in the Host-owned DSH Session and are never copied to browser
-storage.
-
-When either work-detail flag is enabled, the QA transcript groups reasoning,
-intermediate assistant progress, and tool rows by DSH turn. Running work is
-expanded. Completed work is collapsed behind a duration summary and can be
-reopened; each tool row can separately reveal its formatted input and output.
-These controls change presentation only and never widen the Host allow-list.
-
-The browser cannot override lockdown settings. Before binding and immediately
-before every prompt, it requests a Host attestation for the selected session.
-Any unproved agent preset, workspace, model, permission bundle or tool policy
-disables Send with the generic message `Настройки помощника недоступны.`
-Detailed mismatch facts are written only to Host logs; the
-browser console additionally prints one line with a stable coarse reason code
-(`reason: unknown-tools`, `workspace-unavailable`, `composition-mismatch`, `permission-preset`,
-`adoption-refused`, `proof-mismatch` or `attestation-failed`) plus an operator
-hint, so a refused surface can be diagnosed without Host log access.
-
-The built-in branding, controls, status messages and accessibility labels are
-Russian. The default quick questions are rendered directly above the composer
-only while the current chat is empty. Set `suggestedQuestions: []` to hide
-them, or provide a deployment-specific list to replace them.
-
-When adding tools, update the deployment's reviewed capability inventory as
-part of the same change. The package's
-[default inventory](../capability-policy.json) is intentionally empty, matching
-the default `toolPolicy.allow`.
-
-## Configuration channel over the LAN
-
-The browser normally reads the effective configuration from the Host-owned
-`qa-surface` settings namespace. DSH pins settings RPCs to loopback, so a
-browser served over the LAN always sees that namespace as unavailable. In
-that case the client calls the plugin's `qaSurface/describe` Host Remote and
-uses the returned effective configuration; a rejected call falls back to the
-client defaults with the same `unavailable` status as before. Only one
-describe request runs per page load, and a settled answer survives scope
-updates — the namespace (when readable) stays the authority and keeps
-delivering live changes.
-
-Host-side enforcement never depended on the browser's read path: `secureSession`
-attestation re-derives everything from the Host-owned configuration on every
-bind and every prompt.
-
-## Skill catalog scope
-
-The deployment's agent preset controls which skills the QA assistant sees.
-The shipped `qa-research` preset mounts the skill filesystem with
-`includeDefaultRoots: false`: project-root skills (for example the harness
-checkout's own `.dsh/skills`) and user-home skills stay out of the catalog,
-and skills enter only through plugin providers or an explicit
-`customSkillDirs` list in the preset. Keep the QA catalog to exactly the
-skills the audience is meant to use.
-
-## Deleting chats
-
-The sidebar delete control removes a chat from this browser's index only;
-the Host session stays on disk. Deleting the chat that is currently open
-continues in a fresh attested session when `lockdown.allowSessionReset` is
-enabled. There is no Host session-deletion API in DSH 0.1.x for the plugin
-to call.

package/docs/EMBEDDING.md

@@ -1,13 +0,0 @@
-# Embedding and reverse proxies
-
-Serve `/qa` through the normal DSH origin so it shares the established browser
-connection, authentication and trust policy. The plugin's narrow navigation
-route redirects GET/HEAD requests through DSH's canonical `/` document; the
-client immediately restores `/qa` before mounting. Reverse proxies must pass
-the configured QA path to DSH instead of replacing it with a separately hosted
-page.
-
-Iframe embedding is disabled or allowed by deployment headers, not by this
-plugin. Configure an explicit CSP `frame-ancestors` allowlist at a trusted
-reverse proxy and keep the DSH API same-origin. Do not enable wildcard CORS or
-expose settings/session APIs without the deployment's authentication layer.

package/lib/client/components/QaSourcesDrawer.js

@@ -1,46 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { useState } from "react";
-/** Split text into plain runs and safe http(s) links. */
-function linkify(text) {
-    const nodes = [];
-    const pattern = /https?:\/\/[^\s<>"')]+/gu;
-    let offset = 0;
-    for (const match of text.matchAll(pattern)) {
-        const index = match.index;
-        if (index > offset)
-            nodes.push(text.slice(offset, index));
-        const href = match[0];
-        nodes.push(_jsx("a", { href: href, target: "_blank", rel: "noreferrer", children: href }, href + String(index)));
-        offset = index + href.length;
-    }
-    if (offset < text.length)
-        nodes.push(text.slice(offset));
-    return nodes;
-}
-function SourceIcon({ kind }) {
-    if (kind === "web") {
-        return (_jsxs("svg", { viewBox: "0 0 16 16", "aria-hidden": "true", children: [_jsx("circle", { cx: "8", cy: "8", r: "5.75" }), _jsx("path", { d: "M2.25 8h11.5M8 2.25c1.6 1.55 2.4 3.5 2.4 5.75S9.6 12.2 8 13.75C6.4 12.2 5.6 10.25 5.6 8S6.4 3.8 8 2.25Z" })] }));
-    }
-    if (kind === "search") {
-        return (_jsxs("svg", { viewBox: "0 0 16 16", "aria-hidden": "true", children: [_jsx("circle", { cx: "7.1", cy: "7.1", r: "4.3" }), _jsx("path", { d: "m10.3 10.3 2.9 2.9" })] }));
-    }
-    return (_jsxs("svg", { viewBox: "0 0 16 16", "aria-hidden": "true", children: [_jsx("path", { d: "M9.25 2.5H4.75A1.25 1.25 0 0 0 3.5 3.75v8.5a1.25 1.25 0 0 0 1.25 1.25h6.5a1.25 1.25 0 0 0 1.25-1.25V5.75L9.25 2.5Z" }), _jsx("path", { d: "M9.25 2.5v3.25h3.25" })] }));
-}
-function QaSourceCard({ source, onOpen, }) {
-    return (_jsxs("button", { type: "button", className: "dsh-qa-sources__item", onClick: onOpen, children: [_jsx("span", { className: "dsh-qa-sources__kind", "data-kind": source.kind, children: _jsx(SourceIcon, { kind: source.kind }) }), _jsxs("span", { className: "dsh-qa-sources__text", children: [_jsx("span", { className: "dsh-qa-sources__title", children: source.title }), _jsx("span", { className: "dsh-qa-sources__target", children: source.target }), source.snippet === "" ? null : _jsx("p", { children: source.snippet })] })] }));
-}
-function QaSourceDetail({ source, onBack, }) {
-    const external = source.kind === "web" && /^https?:\/\//iu.test(source.target)
-        ? source.target
-        : undefined;
-    return (_jsxs("div", { className: "dsh-qa-sourcedetail", children: [_jsxs("div", { className: "dsh-qa-sourcedetail__head", children: [_jsx("button", { type: "button", className: "dsh-qa-sourcedetail__back", "aria-label": "\u041A\u043E \u0432\u0441\u0435\u043C \u0438\u0441\u0442\u043E\u0447\u043D\u0438\u043A\u0430\u043C", title: "\u041A\u043E \u0432\u0441\u0435\u043C \u0438\u0441\u0442\u043E\u0447\u043D\u0438\u043A\u0430\u043C", onClick: onBack, children: _jsx("svg", { viewBox: "0 0 14 14", "aria-hidden": "true", children: _jsx("path", { d: "m8.75 3.5-3.5 3.5 3.5 3.5" }) }) }), _jsx("span", { className: "dsh-qa-sourcedetail__kind", children: _jsx(SourceIcon, { kind: source.kind }) }), _jsx("span", { className: "dsh-qa-sourcedetail__title", children: source.title }), external === undefined ? null : (_jsx("a", { className: "dsh-qa-sourcedetail__open", href: external, target: "_blank", rel: "noreferrer", children: "\u041E\u0442\u043A\u0440\u044B\u0442\u044C" }))] }), _jsx("div", { className: "dsh-qa-sourcedetail__target", children: source.target }), _jsx("div", { className: "dsh-qa-sourcedetail__body", children: source.output === "" ? (_jsx("p", { className: "dsh-qa-sourcedetail__empty", children: "\u0423 \u0438\u0441\u0442\u043E\u0447\u043D\u0438\u043A\u0430 \u043D\u0435\u0442 \u0442\u0435\u043A\u0441\u0442\u043E\u0432\u043E\u0433\u043E \u0432\u044B\u0432\u043E\u0434\u0430." })) : (linkify(source.output)) })] }));
-}
-/** Right-hand panel listing tool-derived sources with a detail pane. */
-export function QaSourcesDrawer({ sources, onClose }) {
-    const [detailId, setDetailId] = useState(null);
-    const detail = detailId === null
-        ? undefined
-        : sources.find((source) => source.id === detailId);
-    return (_jsxs("aside", { className: "dsh-qa-sources", "aria-label": "\u0418\u0441\u0442\u043E\u0447\u043D\u0438\u043A\u0438", children: [_jsxs("div", { className: "dsh-qa-sources__head", children: [_jsx("span", { children: detail === undefined ? `Источники (${sources.length})` : "Источник" }), _jsx("button", { type: "button", "aria-label": "\u0417\u0430\u043A\u0440\u044B\u0442\u044C \u0438\u0441\u0442\u043E\u0447\u043D\u0438\u043A\u0438", title: "\u0417\u0430\u043A\u0440\u044B\u0442\u044C", onClick: onClose, children: _jsx("svg", { viewBox: "0 0 16 16", "aria-hidden": "true", children: _jsx("path", { d: "m4 4 8 8m0-8-8 8" }) }) })] }), detail === undefined ? (_jsx("div", { className: "dsh-qa-sources__list", children: sources.map((source) => (_jsx(QaSourceCard, { source: source, onOpen: () => setDetailId(source.id) }, source.id))) })) : (_jsx(QaSourceDetail, { source: detail, onBack: () => setDetailId(null) }))] }));
-}
-//# sourceMappingURL=QaSourcesDrawer.js.map

package/lib/client/components/QaSourcesDrawer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"QaSourcesDrawer.js","sourceRoot":"","sources":["../../../src/client/components/QaSourcesDrawer.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAIjC,yDAAyD;AACzD,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,0BAA0B,CAAC;IAC3C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC1B,IAAI,KAAK,GAAG,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,KAAK,CAAC,IAAI,CACR,YAEE,IAAI,EAAE,IAAI,EACV,MAAM,EAAC,QAAQ,EACf,GAAG,EAAC,YAAY,YAEf,IAAI,IALA,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAMvB,CACL,CAAC;QACF,MAAM,GAAG,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;IAC/B,CAAC;IACD,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,EAAE,IAAI,EAAuC;IAC/D,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,OAAO,CACL,eAAK,OAAO,EAAC,WAAW,iBAAa,MAAM,aACzC,iBAAQ,EAAE,EAAC,GAAG,EAAC,EAAE,EAAC,GAAG,EAAC,CAAC,EAAC,MAAM,GAAG,EACjC,eAAM,CAAC,EAAC,yGAAyG,GAAG,IAChH,CACP,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO,CACL,eAAK,OAAO,EAAC,WAAW,iBAAa,MAAM,aACzC,iBAAQ,EAAE,EAAC,KAAK,EAAC,EAAE,EAAC,KAAK,EAAC,CAAC,EAAC,KAAK,GAAG,EACpC,eAAM,CAAC,EAAC,oBAAoB,GAAG,IAC3B,CACP,CAAC;IACJ,CAAC;IACD,OAAO,CACL,eAAK,OAAO,EAAC,WAAW,iBAAa,MAAM,aACzC,eAAM,CAAC,EAAC,oHAAoH,GAAG,EAC/H,eAAM,CAAC,EAAC,qBAAqB,GAAG,IAC5B,CACP,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,EACpB,MAAM,EACN,MAAM,GAIP;IACC,OAAO,CACL,kBAAQ,IAAI,EAAC,QAAQ,EAAC,SAAS,EAAC,sBAAsB,EAAC,OAAO,EAAE,MAAM,aACpE,eAAM,SAAS,EAAC,sBAAsB,eAAY,MAAM,CAAC,IAAI,YAC3D,KAAC,UAAU,IAAC,IAAI,EAAE,MAAM,CAAC,IAAI,GAAI,GAC5B,EACP,gBAAM,SAAS,EAAC,sBAAsB,aACpC,eAAM,SAAS,EAAC,uBAAuB,YAAE,MAAM,CAAC,KAAK,GAAQ,EAC7D,eAAM,SAAS,EAAC,wBAAwB,YAAE,MAAM,CAAC,MAAM,GAAQ,EAC9D,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAI,MAAM,CAAC,OAAO,GAAK,IAClD,IACA,CACV,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,EACtB,MAAM,EACN,MAAM,GAIP;IACC,MAAM,QAAQ,GACZ,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAC3D,CAAC,CAAC,MAAM,CAAC,MAAM;QACf,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,CACL,eAAK,SAAS,EAAC,qBAAqB,aAClC,eAAK,SAAS,EAAC,2BAA2B,aACxC,iBACE,IAAI,EAAC,QAAQ,EACb,SAAS,EAAC,2BAA2B,gBAC1B,oGAAoB,EAC/B,KAAK,EAAC,oGAAoB,EAC1B,OAAO,EAAE,MAAM,YAEf,cAAK,OAAO,EAAC,WAAW,iBAAa,MAAM,YACzC,eAAM,CAAC,EAAC,2BAA2B,GAAG,GAClC,GACC,EACT,eAAM,SAAS,EAAC,2BAA2B,YACzC,KAAC,UAAU,IAAC,IAAI,EAAE,MAAM,CAAC,IAAI,GAAI,GAC5B,EACP,eAAM,SAAS,EAAC,4BAA4B,YAAE,MAAM,CAAC,KAAK,GAAQ,EACjE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAC/B,YACE,SAAS,EAAC,2BAA2B,EACrC,IAAI,EAAE,QAAQ,EACd,MAAM,EAAC,QAAQ,EACf,GAAG,EAAC,YAAY,2DAGd,CACL,IACG,EACN,cAAK,SAAS,EAAC,6BAA6B,YAAE,MAAM,CAAC,MAAM,GAAO,EAClE,cAAK,SAAS,EAAC,2BAA2B,YACvC,MAAM,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,CACtB,YAAG,SAAS,EAAC,4BAA4B,oMAErC,CACL,CAAC,CAAC,CAAC,CACF,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CACvB,GACG,IACF,CACP,CAAC;AACJ,CAAC;AAOD,wEAAwE;AACxE,MAAM,UAAU,eAAe,CAAC,EAAE,OAAO,EAAE,OAAO,EAAwB;IACxE,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAC9D,MAAM,MAAM,GACV,QAAQ,KAAK,IAAI;QACf,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IACvD,OAAO,CACL,iBAAO,SAAS,EAAC,gBAAgB,gBAAY,wDAAW,aACtD,eAAK,SAAS,EAAC,sBAAsB,aACnC,yBACG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,UAAU,GAC/D,EACP,iBACE,IAAI,EAAC,QAAQ,gBACF,mGAAmB,EAC9B,KAAK,EAAC,4CAAS,EACf,OAAO,EAAE,OAAO,YAEhB,cAAK,OAAO,EAAC,WAAW,iBAAa,MAAM,YACzC,eAAM,CAAC,EAAC,kBAAkB,GAAG,GACzB,GACC,IACL,EACL,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CACtB,cAAK,SAAS,EAAC,sBAAsB,YAClC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CACvB,KAAC,YAAY,IAEX,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,IAF/B,MAAM,CAAC,EAAE,CAGd,CACH,CAAC,GACE,CACP,CAAC,CAAC,CAAC,CACF,KAAC,cAAc,IAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,GAAI,CACpE,IACK,CACT,CAAC;AACJ,CAAC"}

package/lib/types/client/components/QaSourcesDrawer.d.ts

@@ -1,8 +0,0 @@
-import type { QaSource } from "../../types.js";
-export interface QaSourcesDrawerProps {
-    readonly sources: readonly QaSource[];
-    readonly onClose: () => void;
-}
-/** Right-hand panel listing tool-derived sources with a detail pane. */
-export declare function QaSourcesDrawer({ sources, onClose }: QaSourcesDrawerProps): import("react/jsx-runtime").JSX.Element;
-//# sourceMappingURL=QaSourcesDrawer.d.ts.map