@yadsh/dsh-qa-surface 0.3.0 → 0.4.0

package/lib/types/types.d.ts

@@ -1,6 +1,6 @@
 import type { QaTurnSources } from "./provenance/types.js";
 export type QaSessionPolicy = "browser-persistent" | "new-on-load" | "fixed";
-export type QaSandboxMode = "read-only";
+export type QaSandboxMode = "read-only" | "workspace-write";
 export type QaApprovalPolicy = "never";
 export type QaToolPolicyMode = "allow-list";
 export type QaAccountRole = "user" | "admin";
@@ -13,6 +13,36 @@ export interface QaAccountUserPublic {
     readonly createdAt: string;
     readonly lastLoginAt: string | null;
     readonly disabled: boolean;
+    /** Self-declared identity the QA prompt renders; empty until edited. */
+    readonly profile: QaAccountProfile;
+}
+/** One external system the deployment collects a handle for. */
+export interface QaAccountIdentityField {
+    /** Stable lowercase key: the profile's storage key and the prompt's label. */
+    readonly key: string;
+    /** Operator copy shown in the profile form. */
+    readonly label: string;
+}
+/**
+ * What one account says about itself. Every value is the owner's own wording,
+ * which is why the prompt renders it as self-declared rather than as a
+ * verified directory attribute.
+ */
+export interface QaAccountProfile {
+    /** Full name as the user writes it; empty when unset. */
+    readonly fullName: string;
+    /** External-system handles, keyed by the declared field key. */
+    readonly identities: Readonly<Record<string, string>>;
+    /** Free-form guidance about how the user wants answers; empty when unset. */
+    readonly instructions: string;
+    /** ISO timestamp of the last edit; null while the profile is untouched. */
+    readonly updatedAt: string | null;
+}
+/** Full-replace profile write: an absent value clears the stored one. */
+export interface QaAccountProfileInput {
+    readonly fullName: string;
+    readonly identities: Readonly<Record<string, string>>;
+    readonly instructions: string;
 }
 /** One successful login/registration: the bearer token plus the user. */
 export interface QaAccountSession {
@@ -117,10 +147,16 @@ export interface QaSurfaceConfig {
         readonly showToolActivity?: boolean;
         readonly showReasoning?: boolean;
         readonly renderMarkdown?: boolean;
-        readonly maxContentWidth?: number;
+        /** Floor for the visitor-resizable transcript/composer width; the page caps it. */
+        readonly minContentWidth?: number;
         readonly showSessionList?: boolean;
     };
     readonly suggestedQuestions?: readonly string[];
+    /**
+     * Phrases the running indicator cycles through. An empty list restores the
+     * built-in phrases: the indicator always carries a label.
+     */
+    readonly thinkingPhrases?: readonly string[];
     readonly interaction?: {
         readonly approvals?: "blocked";
         readonly questions?: "unsupported";
@@ -155,6 +191,24 @@ export interface QaSurfaceConfig {
         readonly sessionTtlDays?: number;
         /** Let admins see chats owned by other QA accounts. */
         readonly showOtherUsersChats?: boolean;
+        /**
+         * Give every account a private cwd below the configured workspaceId.
+         * The child directory is not registered as a separate DSH workspace.
+         */
+        readonly perUserWorkspace?: boolean;
+        /** Self-declared profile: storage, the owner's form, and prompt injection. */
+        readonly profile?: {
+            readonly enabled?: boolean;
+            /** Render the profile into the QA agent's system prompt. */
+            readonly inject?: boolean;
+            /** External systems to collect a handle for; empty declares none. */
+            readonly identities?: readonly {
+                readonly key?: string;
+                readonly label?: string;
+            }[];
+            /** Character cap on the user's free-form agent guidance. */
+            readonly instructionsMaxLength?: number;
+        };
     };
     readonly entry?: {
         /** Inject the root → /qa redirect for non-loopback hostnames. */
@@ -163,6 +217,26 @@ export interface QaSurfaceConfig {
         readonly cookieBootstrap?: boolean;
     };
     readonly sources?: QaSourcesConfig;
+    readonly attachments?: QaAttachmentsConfig;
+}
+/** What a QA visitor may attach to one message. */
+export interface QaAttachmentsConfig {
+    /** Offer text files (md, txt, log, …) next to images; off = images only. */
+    readonly textFiles?: boolean;
+    /**
+     * Line count above which pasted plain text becomes an attached file instead
+     * of landing in the input field. Zero never converts.
+     */
+    readonly pastedTextLines?: number;
+    /** Byte ceiling for one attached file; the composer refuses anything larger. */
+    readonly maxFileBytes?: number;
+    /**
+     * Pending attachments (images plus text files) allowed on one message. The
+     * Host keeps its own authority over assembled image batches.
+     */
+    readonly maxPending?: number;
+    /** Accepted text-file extensions, lowercase and without the dot. */
+    readonly extensions?: readonly string[];
 }
 export interface ResolvedQaSurfaceConfig {
     readonly enabled: boolean;
@@ -197,10 +271,11 @@ export interface ResolvedQaSurfaceConfig {
         readonly showToolActivity: boolean;
         readonly showReasoning: boolean;
         readonly renderMarkdown: boolean;
-        readonly maxContentWidth: number;
+        readonly minContentWidth: number;
         readonly showSessionList: boolean;
     };
     readonly suggestedQuestions: readonly string[];
+    readonly thinkingPhrases: readonly string[];
     readonly interaction: {
         readonly approvals: "blocked";
         readonly questions: "unsupported";
@@ -233,6 +308,13 @@ export interface ResolvedQaSurfaceConfig {
         readonly allowRegistration: boolean;
         readonly sessionTtlDays: number;
         readonly showOtherUsersChats: boolean;
+        readonly perUserWorkspace: boolean;
+        readonly profile: {
+            readonly enabled: boolean;
+            readonly inject: boolean;
+            readonly identities: readonly QaAccountIdentityField[];
+            readonly instructionsMaxLength: number;
+        };
     };
     readonly entry: {
         readonly redirectNonLoopback: boolean;
@@ -278,6 +360,13 @@ export interface ResolvedQaSurfaceConfig {
             readonly parseAssistantSourcesBlock: boolean;
         };
     };
+    readonly attachments: {
+        readonly textFiles: boolean;
+        readonly pastedTextLines: number;
+        readonly maxFileBytes: number;
+        readonly maxPending: number;
+        readonly extensions: readonly string[];
+    };
 }
 export interface QaSourceFilePreview {
     readonly path: string;
@@ -294,7 +383,7 @@ export interface QaLockdownProof {
     readonly agentPresetMatches: boolean;
     readonly workspaceMatches: boolean;
     readonly modelMatches: boolean;
-    readonly sandboxIsReadOnly: boolean;
+    readonly sandboxModeMatches: boolean;
     readonly approvalIsNever: boolean;
     readonly permissionPreset: string;
     readonly toolPolicyLoaded: boolean;
@@ -307,6 +396,8 @@ export type QaMessage = {
     readonly status: "committed";
     readonly timestamp?: number;
     readonly images?: readonly QaImageView[];
+    /** Durable files the user attached to this message, in prompt order. */
+    readonly files?: readonly QaFileView[];
     /**
      * Chat owner's display name, set only for an admin reading a foreign
      * chat; the owner themself sees their messages unlabeled.
@@ -348,7 +439,8 @@ export type QaMessage = {
     readonly id: string;
     readonly role: "work";
     readonly turn: number;
-    readonly status: "running" | "complete";
+    /** "error" marks a turn the host ended with a provider failure. */
+    readonly status: "running" | "complete" | "error";
     readonly startedAt?: number;
     readonly endedAt?: number;
     readonly items: readonly QaWorkItem[];
@@ -380,6 +472,7 @@ export type QaSource = import("./provenance/types.js").QaSourceReference;
 export type QaImageMediaType = "image/png" | "image/jpeg" | "image/webp" | "image/gif";
 /** One image pending in the composer, browser-owned until the prompt lands. */
 export interface QaImageDraft {
+    readonly kind: "image";
     readonly id: string;
     readonly mediaType: QaImageMediaType;
     readonly name: string;
@@ -388,11 +481,36 @@ export interface QaImageDraft {
     /** Local object URL for the preview thumbnail. */
     readonly previewUrl: string;
 }
+/**
+ * One file pending in the composer. The bytes stay in the browser until the
+ * prompt is sent: an image can ride the prompt inline, but a file must be
+ * staged through the Host upload route first and then cited by its receipt.
+ */
+export interface QaFileDraft {
+    readonly kind: "file";
+    readonly id: string;
+    readonly name: string;
+    readonly bytes: number;
+    /** Verbatim payload; a pasted blob is a File built from the pasted text. */
+    readonly blob: Blob;
+}
+/** Anything the composer may hold before the prompt is sent. */
+export type QaAttachmentDraft = QaImageDraft | QaFileDraft;
 /** A durable image attached to a sent message. */
 export interface QaImageView {
     readonly attachmentId: string;
     readonly mediaType: QaImageMediaType;
 }
+/**
+ * A durable file attached to a sent message. The browser never reads these
+ * bytes back (the attachment route serves images); the row shows the handle
+ * the model resolves, and the Host keeps the verbatim copy.
+ */
+export interface QaFileView {
+    readonly attachmentId: string;
+    readonly name: string;
+    readonly bytes: number;
+}
 /** A subagent transcript opened read-only from the agents panel. */
 export interface QaSubagentView {
     readonly id: string;

package/lib/types/user-workspace.d.ts

@@ -0,0 +1,38 @@
+/** Stable, non-workspace child used to keep account directories out of sight. */
+export declare const QA_USER_WORKSPACES_DIRECTORY = ".qa-users";
+/** Conservative fixed budgets; there is deliberately no browser override. */
+export declare const QA_USER_WORKSPACE_MAX_BYTES: number;
+export declare const QA_USER_WORKSPACE_MAX_WRITE_BYTES: number;
+export interface QaToolExecutionLike {
+    readonly name: string;
+    readonly arguments: unknown;
+}
+export declare function pathIsInside(target: string, root: string): boolean;
+/**
+ * Resolve the deepest existing ancestor, preserving the missing suffix. This
+ * catches symlink escapes for reads and for files which a write is about to
+ * create.
+ */
+export declare function canonicalCandidate(input: string): string;
+/**
+ * Materialize `<registered workspace>/.qa-users/<account UUID>` without
+ * registering the child as a DSH Workspace. Both directory levels reject
+ * symlinks, and their real paths must stay below the configured workspace.
+ */
+export declare function prepareQaUserWorkspace(workspaceRoot: string, userId: string): string;
+/** Resolve an already provisioned account directory for admission checks. */
+export declare function existingQaUserWorkspace(workspaceRoot: string, userId: string): string;
+/**
+ * Monotonic guard used in addition to DSH's workspace-write sandbox. It
+ * fences model-controlled file paths for both reads and writes, rejects tools
+ * whose implementation can walk above cwd, and enforces bounded scratch use.
+ *
+ * `attachmentRoot` is the one deliberate read exemption: an uploaded file is
+ * an immutable content-addressed copy the deployment stores outside every
+ * workspace, and the model reaches it exactly as the harness intends (the
+ * prompt carries the stored path). Reads of a single such file are allowed;
+ * directory-wide tools stay confined because the store is shared by every
+ * account, and writes are never exempted.
+ */
+export declare function qaUserWorkspaceDenial(execution: QaToolExecutionLike, root: string, attachmentRoot?: string): string | undefined;
+//# sourceMappingURL=user-workspace.d.ts.map

package/lib/user-workspace.js

@@ -0,0 +1,231 @@
+import { chmodSync, lstatSync, mkdirSync, readdirSync, realpathSync, statSync, } from "node:fs";
+import path from "node:path";
+/** Stable, non-workspace child used to keep account directories out of sight. */
+export const QA_USER_WORKSPACES_DIRECTORY = ".qa-users";
+/** Conservative fixed budgets; there is deliberately no browser override. */
+export const QA_USER_WORKSPACE_MAX_BYTES = 256 * 1024 * 1024;
+export const QA_USER_WORKSPACE_MAX_WRITE_BYTES = 10 * 1024 * 1024;
+const USER_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu;
+const PATH_DENIAL = "QA workspace boundary: path is outside this user's directory.";
+const QUOTA_DENIAL = "QA workspace boundary: storage quota exceeded.";
+function samePath(left, right) {
+    return process.platform === "win32"
+        ? left.toLowerCase() === right.toLowerCase()
+        : left === right;
+}
+export function pathIsInside(target, root) {
+    const relative = path.relative(root, target);
+    return (relative === "" ||
+        (!relative.startsWith(`..${path.sep}`) &&
+            relative !== ".." &&
+            !path.isAbsolute(relative)));
+}
+/**
+ * Resolve the deepest existing ancestor, preserving the missing suffix. This
+ * catches symlink escapes for reads and for files which a write is about to
+ * create.
+ */
+export function canonicalCandidate(input) {
+    const resolved = path.resolve(input);
+    const suffix = [];
+    let cursor = resolved;
+    for (;;) {
+        try {
+            return path.resolve(realpathSync.native(cursor), ...suffix);
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+            const parent = path.dirname(cursor);
+            if (parent === cursor)
+                throw error;
+            suffix.unshift(path.basename(cursor));
+            cursor = parent;
+        }
+    }
+}
+function assertPlainDirectory(input) {
+    const stat = lstatSync(input);
+    if (stat.isSymbolicLink() || !stat.isDirectory()) {
+        throw new Error(`QA user workspace must be a real directory: ${input}`);
+    }
+}
+/**
+ * Materialize `<registered workspace>/.qa-users/<account UUID>` without
+ * registering the child as a DSH Workspace. Both directory levels reject
+ * symlinks, and their real paths must stay below the configured workspace.
+ */
+export function prepareQaUserWorkspace(workspaceRoot, userId) {
+    if (!USER_ID_PATTERN.test(userId)) {
+        throw new Error("QA account id is not safe for a workspace directory");
+    }
+    const canonicalWorkspace = realpathSync.native(workspaceRoot);
+    const usersRoot = path.join(canonicalWorkspace, QA_USER_WORKSPACES_DIRECTORY);
+    mkdirSync(usersRoot, { recursive: true, mode: 0o700 });
+    assertPlainDirectory(usersRoot);
+    if (process.platform !== "win32")
+        chmodSync(usersRoot, 0o700);
+    const canonicalUsersRoot = realpathSync.native(usersRoot);
+    if (!pathIsInside(canonicalUsersRoot, canonicalWorkspace)) {
+        throw new Error("QA user-workspace root escapes the configured workspace");
+    }
+    const userRoot = path.join(canonicalUsersRoot, userId);
+    mkdirSync(userRoot, { recursive: true, mode: 0o700 });
+    assertPlainDirectory(userRoot);
+    if (process.platform !== "win32")
+        chmodSync(userRoot, 0o700);
+    const canonicalUserRoot = realpathSync.native(userRoot);
+    if (!pathIsInside(canonicalUserRoot, canonicalUsersRoot) ||
+        !samePath(path.dirname(canonicalUserRoot), canonicalUsersRoot)) {
+        throw new Error("QA user workspace escapes its account directory");
+    }
+    return canonicalUserRoot;
+}
+/** Resolve an already provisioned account directory for admission checks. */
+export function existingQaUserWorkspace(workspaceRoot, userId) {
+    if (!USER_ID_PATTERN.test(userId)) {
+        throw new Error("QA account id is not safe for a workspace directory");
+    }
+    const canonicalWorkspace = realpathSync.native(workspaceRoot);
+    const usersRoot = path.join(canonicalWorkspace, QA_USER_WORKSPACES_DIRECTORY);
+    const userRoot = path.join(usersRoot, userId);
+    assertPlainDirectory(usersRoot);
+    assertPlainDirectory(userRoot);
+    const canonicalUsersRoot = realpathSync.native(usersRoot);
+    const canonicalUserRoot = realpathSync.native(userRoot);
+    if (!pathIsInside(canonicalUsersRoot, canonicalWorkspace) ||
+        !pathIsInside(canonicalUserRoot, canonicalUsersRoot) ||
+        !samePath(path.dirname(canonicalUserRoot), canonicalUsersRoot)) {
+        throw new Error("QA user workspace escapes the configured workspace");
+    }
+    return canonicalUserRoot;
+}
+function record(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function requestedPaths(execution) {
+    const args = record(execution.arguments);
+    if (args === undefined)
+        return [];
+    switch (execution.name) {
+        case "read":
+        case "read_image":
+        case "write":
+        case "edit": {
+            return typeof args.file_path === "string" ? [args.file_path] : [];
+        }
+        case "glob":
+        case "grep": {
+            return [typeof args.path === "string" ? args.path : "."];
+        }
+        case "str_replace_editor": {
+            return typeof args.path === "string" ? [args.path] : [];
+        }
+        default:
+            return [];
+    }
+}
+/**
+ * Whether the named path is only read. Directory-wide tools stay confined even
+ * for reads: the attachment store is shared by every account, and only the
+ * exact file an upload produced is meant to be reachable.
+ */
+function isReadOnlyPathTool(execution) {
+    if (execution.name === "read" || execution.name === "read_image")
+        return true;
+    return (execution.name === "str_replace_editor" &&
+        record(execution.arguments)?.command === "view");
+}
+function directoryBytes(root, stopAfter) {
+    let total = 0;
+    const pending = [root];
+    while (pending.length > 0 && total <= stopAfter) {
+        const current = pending.pop();
+        for (const entry of readdirSync(current, { withFileTypes: true })) {
+            const candidate = path.join(current, entry.name);
+            if (entry.isSymbolicLink())
+                continue;
+            if (entry.isDirectory())
+                pending.push(candidate);
+            else if (entry.isFile())
+                total += statSync(candidate).size;
+            if (total > stopAfter)
+                break;
+        }
+    }
+    return total;
+}
+function requestedWriteBytes(execution) {
+    const args = record(execution.arguments);
+    if (args === undefined)
+        return 0;
+    const values = [args.content, args.new_string, args.new_str];
+    return values.reduce((total, value) => total + (typeof value === "string" ? Buffer.byteLength(value) : 0), 0);
+}
+/**
+ * Monotonic guard used in addition to DSH's workspace-write sandbox. It
+ * fences model-controlled file paths for both reads and writes, rejects tools
+ * whose implementation can walk above cwd, and enforces bounded scratch use.
+ *
+ * `attachmentRoot` is the one deliberate read exemption: an uploaded file is
+ * an immutable content-addressed copy the deployment stores outside every
+ * workspace, and the model reaches it exactly as the harness intends (the
+ * prompt carries the stored path). Reads of a single such file are allowed;
+ * directory-wide tools stay confined because the store is shared by every
+ * account, and writes are never exempted.
+ */
+export function qaUserWorkspaceDenial(execution, root, attachmentRoot) {
+    const args = record(execution.arguments);
+    if (args?.sandbox_permissions !== undefined ||
+        (execution.name === "edit" &&
+            (args?.replace_all === true || args?.replaceAll === true))) {
+        return PATH_DENIAL;
+    }
+    if (execution.name === "bash" ||
+        execution.name === "shell" ||
+        execution.name.startsWith("terminal_") ||
+        execution.name.startsWith("job_") ||
+        execution.name === "run_code" ||
+        execution.name === "lsp" ||
+        execution.name === "apply_patch" ||
+        execution.name.startsWith("dsh_git_")) {
+        return PATH_DENIAL;
+    }
+    const readsOnly = isReadOnlyPathTool(execution);
+    try {
+        for (const requested of requestedPaths(execution)) {
+            const absolute = path.isAbsolute(requested)
+                ? requested
+                : path.resolve(root, requested);
+            const canonical = canonicalCandidate(absolute);
+            if (pathIsInside(canonical, root))
+                continue;
+            // Resolved only for a path the fence would otherwise refuse, so the
+            // common case pays no extra filesystem walk.
+            if (readsOnly &&
+                attachmentRoot !== undefined &&
+                pathIsInside(canonical, canonicalCandidate(attachmentRoot))) {
+                continue;
+            }
+            return PATH_DENIAL;
+        }
+        if (execution.name === "write" ||
+            execution.name === "edit" ||
+            (execution.name === "str_replace_editor" &&
+                record(execution.arguments)?.command !== "view")) {
+            const requested = requestedWriteBytes(execution);
+            if (requested > QA_USER_WORKSPACE_MAX_WRITE_BYTES ||
+                directoryBytes(root, QA_USER_WORKSPACE_MAX_BYTES) + requested >
+                    QA_USER_WORKSPACE_MAX_BYTES) {
+                return QUOTA_DENIAL;
+            }
+        }
+        return undefined;
+    }
+    catch {
+        return PATH_DENIAL;
+    }
+}
+//# sourceMappingURL=user-workspace.js.map

package/lib/user-workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-workspace.js","sourceRoot":"","sources":["../src/user-workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,WAAW,EACX,YAAY,EACZ,QAAQ,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,iFAAiF;AACjF,MAAM,CAAC,MAAM,4BAA4B,GAAG,WAAW,CAAC;AAExD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAC7D,MAAM,CAAC,MAAM,iCAAiC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAElE,MAAM,eAAe,GACnB,6EAA6E,CAAC;AAChF,MAAM,WAAW,GACf,+DAA+D,CAAC;AAClE,MAAM,YAAY,GAAG,gDAAgD,CAAC;AAOtE,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa;IAC3C,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO;QACjC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE;QAC5C,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,IAAY;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,CACL,QAAQ,KAAK,EAAE;QACf,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YACpC,QAAQ,KAAK,IAAI;YACjB,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAC9B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,MAAM,GAAG,QAAQ,CAAC;IACtB,SAAS,CAAC;QACR,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,KAAK,CAAC;YACnC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACtC,MAAM,GAAG,MAAM,CAAC;QAClB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,+CAA+C,KAAK,EAAE,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,aAAqB,EACrB,MAAc;IAEd,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,kBAAkB,GAAG,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,4BAA4B,CAAC,CAAC;IAC9E,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC9D,MAAM,kBAAkB,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1D,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACvD,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7D,MAAM,iBAAiB,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxD,IACE,CAAC,YAAY,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;QACpD,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,kBAAkB,CAAC,EAC9D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,uBAAuB,CACrC,aAAqB,EACrB,MAAc;IAEd,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,kBAAkB,GAAG,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,4BAA4B,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC9C,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAChC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,kBAAkB,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,iBAAiB,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxD,IACE,CAAC,YAAY,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;QACrD,CAAC,YAAY,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;QACpD,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,kBAAkB,CAAC,EAC9D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,SAA8B;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAClC,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC;QACZ,KAAK,YAAY,CAAC;QAClB,KAAK,OAAO,CAAC;QACb,KAAK,MAAM,EAAE,CAAC;YACZ,OAAO,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC;QACD,KAAK,oBAAoB,EAAE,CAAC;YAC1B,OAAO,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,CAAC;QACD;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,SAA8B;IACxD,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IAC9E,OAAO,CACL,SAAS,CAAC,IAAI,KAAK,oBAAoB;QACvC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,MAAM,CAChD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,SAAiB;IACrD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAG,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAClE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,SAAS;YACrC,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;iBAC5C,IAAI,KAAK,CAAC,MAAM,EAAE;gBAAE,KAAK,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC;YAC3D,IAAI,KAAK,GAAG,SAAS;gBAAE,MAAM;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,SAA8B;IACzD,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACf,KAAK,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACpE,CAAC,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CACnC,SAA8B,EAC9B,IAAY,EACZ,cAAuB;IAEvB,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACzC,IACE,IAAI,EAAE,mBAAmB,KAAK,SAAS;QACvC,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM;YACxB,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,IAAI,IAAI,EAAE,UAAU,KAAK,IAAI,CAAC,CAAC,EAC5D,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IACE,SAAS,CAAC,IAAI,KAAK,MAAM;QACzB,SAAS,CAAC,IAAI,KAAK,OAAO;QAC1B,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QACtC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACjC,SAAS,CAAC,IAAI,KAAK,UAAU;QAC7B,SAAS,CAAC,IAAI,KAAK,KAAK;QACxB,SAAS,CAAC,IAAI,KAAK,aAAa;QAChC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EACrC,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,KAAK,MAAM,SAAS,IAAI,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;gBACzC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAClC,MAAM,SAAS,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC;gBAAE,SAAS;YAC5C,oEAAoE;YACpE,6CAA6C;YAC7C,IACE,SAAS;gBACT,cAAc,KAAK,SAAS;gBAC5B,YAAY,CAAC,SAAS,EAAE,kBAAkB,CAAC,cAAc,CAAC,CAAC,EAC3D,CAAC;gBACD,SAAS;YACX,CAAC;YACD,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,IACE,SAAS,CAAC,IAAI,KAAK,OAAO;YAC1B,SAAS,CAAC,IAAI,KAAK,MAAM;YACzB,CAAC,SAAS,CAAC,IAAI,KAAK,oBAAoB;gBACtC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC,EAClD,CAAC;YACD,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YACjD,IACE,SAAS,GAAG,iCAAiC;gBAC7C,cAAc,CAAC,IAAI,EAAE,2BAA2B,CAAC,GAAG,SAAS;oBAC3D,2BAA2B,EAC7B,CAAC;gBACD,OAAO,YAAY,CAAC;YACtB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC;IACrB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yadsh/dsh-qa-surface",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "A focused end-user QA surface backed by native DeepSeek Harness sessions",
   "repository": {
     "type": "git",
@@ -53,8 +53,10 @@
         "@deepseek-ai/dsh-api-session-controller",
         "@deepseek-ai/dsh-agent-presets",
         "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-file-upload",
         "@deepseek-ai/dsh-client-ui-layout",
         "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-settings-plugins",
         "@deepseek-ai/dsh-client-ui-theme"
       ],
       "platform": "web"
@@ -68,9 +70,6 @@
     "compatibility.json",
     "capability-policy.json",
     "README.md",
-    "CHANGELOG.md",
-    "docs/*.md",
-    "SPEC-dsh-qa-surface.md",
     "LICENSE"
   ],
   "keywords": [
@@ -78,9 +77,12 @@
     "deepseek-harness",
     "dsh",
     "dsh-plugin",
+    "cordis",
     "qa",
     "chat",
-    "web-ui"
+    "web-ui",
+    "testing",
+    "quality-assurance"
   ],
   "license": "MIT",
   "engines": {
@@ -100,9 +102,11 @@
     "@deepseek-ai/dsh-client-ui-layout": ">=0.1.5-rc.2 <0.2.0",
     "@deepseek-ai/dsh-client-ui-renderer": ">=0.1.5-rc.2 <0.2.0",
     "@deepseek-ai/dsh-client-ui-settings": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": ">=0.1.5-rc.2 <0.2.0",
     "@deepseek-ai/dsh-client-ui-slots": ">=0.1.5-rc.2 <0.2.0",
     "@deepseek-ai/dsh-client-ui-theme": ">=0.1.5-rc.2 <0.2.0",
     "@deepseek-ai/dsh-host-webserver": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-llm": ">=0.1.5-rc.2 <0.2.0",
     "@deepseek-ai/dsh-permission-presets": ">=0.1.5-rc.2 <0.2.0",
     "@deepseek-ai/dsh-session": ">=0.1.5-rc.2 <0.2.0",
     "@deepseek-ai/dsh-settings": ">=0.1.5-rc.2 <0.2.0",
@@ -115,7 +119,7 @@
   },
   "dependencies": {
     "zod": "^4.4.3",
-    "@yadsh/dsh-plugin-log": "^0.2.1"
+    "@yadsh/dsh-plugin-log": "^0.3.0"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.2",
@@ -131,9 +135,11 @@
     "@deepseek-ai/dsh-client-ui-layout": "0.1.5-rc.2",
     "@deepseek-ai/dsh-client-ui-renderer": "0.1.5-rc.2",
     "@deepseek-ai/dsh-client-ui-settings": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": "0.1.5-rc.2",
     "@deepseek-ai/dsh-client-ui-slots": "0.1.5-rc.2",
     "@deepseek-ai/dsh-client-ui-theme": "0.1.5-rc.2",
     "@deepseek-ai/dsh-host-webserver": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-llm": "0.1.5-rc.2",
     "@deepseek-ai/dsh-permission-presets": "0.1.5-rc.2",
     "@deepseek-ai/dsh-session": "0.1.5-rc.2",
     "@deepseek-ai/dsh-settings": "0.1.5-rc.2",
@@ -155,8 +161,9 @@
     "tsdown": "^0.22.14",
     "typescript": "^7.0.2",
     "vitest": "^4.1.11",
+    "@yadsh/dsh-config": "^0.0.0",
     "@yadsh/dsh-plugin-scripts": "^0.0.0",
-    "@yadsh/dsh-config": "^0.0.0"
+    "@yadsh/dsh-plugin-kit": "^0.1.0"
   },
   "publishConfig": {
     "access": "public",