@yadsh/dsh-qa-surface 0.4.0 → 0.6.0

package/README.md

@@ -15,22 +15,43 @@ Session and Agent Loop.
   a responsive first-party-style conversation layout;
 - optionally shows a minimal per-browser chat-history sidebar
   (`ui.showSessionList`) whose switching re-runs policy attestation;
-- blocks unsupported approvals/questions instead of auto-approving them;
+- blocks unsupported approvals/questions instead of auto-approving them, and can
+  park them for the operator to answer (`interaction.approvals: interactive`,
+  `interaction.questions: interactive`) instead of refusing or stalling on a
+  card the QA view cannot show;
 - pins locked sessions to the configured `read-only` or isolated
   `workspace-write` policy plus `approval=never` before Send is enabled;
 - applies a Host-side tool allow-list plus a monotonic execution guard;
+- attaches its own QA tool catalog per agent only after the activation skill
+  loads (`tools.dynamicActivation`), keeping every QA schema out of the initial
+  request and restoring the catalog on resume from the session's own journal;
 - optionally gates the surface behind email + password accounts
   (`accounts.enabled`) with server-side session ownership, a first-login
   migration of the browser's existing chats, a `qa-accounts` management CLI
-  (list/add/set-role/disable/revoke), and a coarse honest boundary:
+  (list/add/set-password/set-role/disable/revoke), and a coarse honest boundary:
   accounts identify QA users, they do not fence the harness root;
+- gives each account a `Настройки` dialog — profile, starter messages,
+  general, and **personal skills**: ordinary Agent Skills stored as `SKILL.md` in the account's own
+  directory (`accounts.skills`), edited with a catalog, an invocation-flag
+  form, a Markdown body, a tool picker over the deployment's registry, and a
+  preview of the exact file a save writes. Skills reach the model through a
+  provider this plugin registers instead of the filesystem one, so no account
+  can see another's, and `allowed-tools` is stored as declared but never
+  grants anything the session does not already allow;
 - optionally redirects non-loopback hostnames from the harness root into the
   QA route (`entry.redirectNonLoopback`), keeping the operator's localhost
   harness UI untouched;
 - ships an operator settings card (Settings → Plugins → plugin configuration →
   «Помощник QA») that edits the `qa-surface` namespace in place — route,
-  branding, session, interface, lockdown, accounts, sources, embedding — and
-  reports the configuration the running Host resolved;
+  branding, session, interface, lockdown, accounts, sources, attachments,
+  documents, embedding — and reports the configuration the running Host
+  resolved;
+- registers four document tools (`document_create`, `document_to_markdown`,
+  `document_convert`, `document_inspect`) behind `documents.enabled`: the agent
+  writes Markdown and receives DOCX/PDF, or hands over a DOCX/PDF and receives
+  Markdown, while the pipeline owns every backend command line, keeps source,
+  assets, outputs and a manifest in one artifact bundle, and is visible to a QA
+  chat only through the tool allow-list;
 - uses the existing same-origin DSH connection and trust boundary.
 
 It does not add another HTTP server, provider proxy, permissive CORS rule, or
@@ -125,6 +146,9 @@ config:
       inject: true
       identities: [] # e.g. [{ key: jira, label: Jira }]
       instructionsMaxLength: 2000
+    # Per-account starter buttons above an empty composer (optional).
+    starters:
+      enabled: true
   suggestedQuestions:
     - Как запросить доступ?
     - Где лежит инструкция?
@@ -142,7 +166,11 @@ config:
     maxPending: 8
     extensions: [md, txt, log, json, yaml, csv, sql]
   interaction:
+    # blocked: refuse a composed gate's `ask` with the QA reason.
+    # interactive: park it over the composer for the operator to answer.
     approvals: blocked
+    # unsupported: refuse ask_user_question with an actionable reason.
+    # interactive: park the request over the composer as an answerable form.
     questions: unsupported
   lockdown:
     enabled: true
@@ -192,8 +220,18 @@ config:
       inheritSources: true
       enableReportToolFallback: true
       markIncompleteOpaqueRuns: true
+      validateReportedSources: true
     legacy:
       parseAssistantSourcesBlock: false
+  # QA tool delivery (optional). The plugin's own tool catalog stays out of the
+  # model request until the activation skill has actually been loaded.
+  tools:
+    dynamicActivation: true
+    activationSkill: qa-surface
+    activationMode: all
+    # Presets whose sessions may unlock the catalog. Empty leaves the gate open:
+    # only do that when this Host serves one agent composition.
+    activationPresets: []
 ```
 
 `workspaceId` is recommended for a deterministic assistant. Without it, DSH
@@ -201,6 +239,46 @@ uses the Host's normal default working directory. Put the system prompt, tools,
 skills, knowledge connections and permission policy in `agentPreset`, not in
 this UI plugin.
 
+### Dynamic QA tools
+
+A QA deployment tends to grow a large toolset, and attaching all of it at boot
+puts every schema into every request — including the first small talk of a chat
+that will never use them. `tools.dynamicActivation` (the default) inverts that:
+the plugin's catalog is registered into the agent's own scope only after the
+model successfully loads `tools.activationSkill`, and `qa_tools_selfcheck`
+reports the resulting state.
+
+The trigger is the authoritative result of the built-in `skill` tool, not the
+model's attempt, not a keyword in the transcript, and not a coincidentally
+matching skill description. A failed or refused load activates nothing, loading
+an unrelated skill activates nothing, and loading the same skill again is a
+no-op. If one tool fails to register, the whole attempt is unwound and the agent
+stays inactive — a half-attached surface would leave the model with a tool it
+cannot rely on. Registrations live exactly as long as the agent that owns them,
+so disposal and plugin unload leave no scoped tool behind.
+
+A resumed chat is restored from its own journal: the successful `skill` load is
+already recorded there as a standard `tool/call`/`tool/result` pair, so the
+current catalog is re-attached before the first model step. The plugin appends
+no session event of its own — an unknown event type without an `ignorable`
+marker makes the whole log unreadable to a harness that does not mount this
+plugin.
+
+Set `tools.activationPresets` to the preset your QA surface pins (`qa-research`
+in the deploy kit) in any Host that composes more than one agent type. With an
+empty list the catalog is reachable by any agent that loads a skill of the same
+name. `tools.dynamicActivation: false` restores the always-on behaviour and
+attaches the catalog to every managed agent at creation — useful for a
+deployment that would rather debug the tool surface than the trigger.
+
+These tools are not `lockdown.toolPolicy.allow` entries, and cannot be: that
+list is validated against the mounted catalog at attestation time, and a tool
+that only appears later would fail the check. The QA execution guard authorizes
+exactly the names the activation manager reports for the calling agent, so a
+dynamically attached tool gets the same scrutiny as an allow-listed one. Tool
+visibility is not an authorization boundary — a QA tool that writes must still
+enforce its own permissions.
+
 ### Writable per-user research space
 
 Set `accounts.perUserWorkspace: true` only together with accounts, a registered
@@ -221,7 +299,24 @@ lockdown:
   permissionPreset: qa-workspace-write
   toolPolicy:
     mode: allow-list
-    allow: [read, read_image, glob, grep, write, edit, web_search, web_fetch]
+    allow:
+      [
+        read,
+        read_image,
+        glob,
+        grep,
+        write,
+        edit,
+        web_search,
+        web_fetch,
+        dsh_git_context,
+        dsh_git_history,
+        dsh_git_show,
+        dsh_git_blame,
+      ]
+  sharedReadOnlyRoots:
+    - E:/qa-assistant/workspaces/docs
+    - E:/qa-assistant/workspaces/code
 ```
 
 The Host resolves that Workspace record's path and creates
@@ -233,12 +328,19 @@ global DSH session list rather than creating one Workspace row per account.
 The boundary combines DSH `workspace-write` with a Host tool guard for both
 read and write paths, canonicalizes existing ancestors to reject symlink
 escapes, propagates the root to subagent sessions, rejects shell/process/LSP
-and `dsh_git_*` escape hatches, limits one model-controlled write to 10 MiB,
+escape hatches, permits filesystem reads in explicitly configured shared
+read-only roots, and leaves repository selection to the separately configured
+read-only Git plugin. Writes remain confined to the account directory. The
+guard limits one model-controlled write to 10 MiB,
 and limits an account directory to 256 MiB. `web_fetch` plus `write` is the
 intended bounded research-download path; there is no unrestricted URL-to-disk
 or shell downloader. Account directories are persistent scratch space and are
 not deleted automatically.
 
+For the layout above, configure `@yadsh/dsh-git-readonly` separately with
+`repositoryRoots: ["E:/qa-assistant/workspaces/code"]`. That plugin is the
+single repository-selection authority and exposes no mutating Git operation.
+
 Model override is opt-in: `provider` and `model` must be set together. Slash
 commands are rejected as plain QA input. Reasoning and tool details remain
 hidden by default. Enabling `ui.showReasoning` and `ui.showToolActivity` adds a
@@ -283,6 +385,19 @@ in. See
 [Configuration](https://github.com/xarleyn/dsh-plugins/blob/main/plugins/dsh-qa-surface/docs/CONFIGURATION.md)
 for the limits and the prompt's exact wording.
 
+### Starter messages
+
+The same `Настройки` dialog carries a «Быстрые сообщения» section where the
+signed-in user defines their own starter buttons: each entry is a label (what
+the button reads) and a prompt (what pressing it sends), so a button can say
+«Мои задачи» while sending a full tracker request. The deployment's
+`suggestedQuestions` stay visible next to the user's own buttons unless the
+user hides them with the section's toggle. The list is stored on the account
+(next to the profile, in the accounts file), replaces wholesale on save, and
+is pure UI preference — none of it reaches the agent prompt.
+`accounts.starters.enabled` (default `true`) turns the section off for
+deployments that want the buttons to stay operator-defined.
+
 Session policies:
 
 - `browser-persistent` restores the id stored in this browser, replacing stale
@@ -309,15 +424,30 @@ Sources are structured Host-owned provenance, independent of
 `ui.showToolActivity`. Successful reads/fetches, bounded web-search evidence,
 Jira/Confluence/knowledge results, and inherited subagent sources are
 normalized and deduplicated into one turn bundle. That exact bundle feeds the
-answer footer and the right rail's sources tab and is persisted as
-`qa/sources`, so reload does not rerun tools. Search-only discovery stays
-hidden by default.
+answer footer and the right rail's sources tab and is persisted in the
+plugin-owned `$DSH_HOME/qa-sources.json`, so reload does not rerun tools and
+no custom event enters the Harness session journal. Search-only discovery
+stays hidden by default.
+
+Legacy sessions written by earlier releases can be repaired while DSH is
+stopped. Preview changes first, then apply them with an automatic backup:
+
+```bash
+qa-repair-sessions
+qa-repair-sessions --write
+```
+
+The repair only marks legacy `safety-gate/*` and `qa/sources` records as
+ignorable; it does not delete them. Each changed session file is backed up as
+`*.pre-plugin-event-repair.bak` before atomic replacement.
 
 Local file cards open a source-scoped, read-only preview after Host-side real
-path validation against the attested session root. Markdown opens rendered by
-default with an HTML-free renderer and offers `Rendered / Raw`; raw mode jumps
-to recorded line ranges. The endpoint cannot browse or write files and refuses
-paths that are not evidence in the canonical bundle.
+path validation against the roots the QA read policy opens: the chat's own
+directory, the configured shared read-only directories, and the attachment
+store. Markdown opens rendered by default with an HTML-free renderer and offers
+`Rendered / Raw`; raw mode jumps to recorded line ranges. The endpoint cannot
+browse or write files and refuses paths that are not evidence in the canonical
+bundle.
 
 Observable local subagents are inherited recursively. The internal
 `qa_report_sources` tool covers opaque delegated providers and is admitted as
@@ -357,6 +487,90 @@ transcript shows and image thumbnails resolved from the session's asset
 repository; each group jumps back to its message. Below 600px the rail goes
 full-bleed. The agents drawer keeps its own header drawer for now.
 
+### Panel extensions
+
+QA Surface can host optional feature panels without importing those features.
+The shell owns the launcher, side-by-side/fullscreen layout, resizing and
+generic close chrome; an extension owns its feature state and controls. No
+panel is shown, and no launcher space is reserved, when no extension is
+installed.
+
+An external client plugin uses two registrations. Metadata and navigation go
+through the `qaSurfacePanels` service; the React body is registered separately
+in the keyed `qa.surface.panel` slot under the same implementation id:
+
+```ts
+import type { Context } from "@deepseek-ai/cordis"
+import type { PropsRuntime } from "@deepseek-ai/dsh-client-ui-slots"
+import type {} from "@deepseek-ai/dsh-client-ui-renderer/client"
+import { QA_SURFACE_PANEL_SLOT } from "@yadsh/dsh-qa-surface/client/panels"
+
+const id = "@example/dsh-qa-browser"
+
+function BrowserPanel(props: PropsRuntime<typeof QA_SURFACE_PANEL_SLOT>) {
+  // panelId, panelKind, sessionId, visible, presentation, params,
+  // actions and a registration-lifetime AbortSignal arrive in props.
+  return null
+}
+
+export const inject = ["slots", "qaSurfacePanels"]
+
+export function apply(ctx: Context) {
+  ctx.effect(() => ctx.qaSurfacePanels.register({
+    id,
+    kind: "browser",
+    title: () => "Browser",
+    icon: "browser",
+    order: 100,
+    keepMounted: true,
+  }))
+
+  ctx.slots.inject(QA_SURFACE_PANEL_SLOT, () =>
+    ctx.slots.register(
+      { name: QA_SURFACE_PANEL_SLOT, key: id },
+      BrowserPanel,
+    ),
+  )
+
+  ctx.qaSurfacePanels.open("browser", {
+    reason: "extension",
+    focus: false,
+  })
+}
+```
+
+The extension should declare both `slots` and `qaSurfacePanels` in its client
+`inject` list instead of polling for load order. `keepMounted: true` preserves
+local/continuous UI state while another panel is active; hidden retained bodies
+are removed from keyboard navigation. Presentation state is browser-local and
+never enters the DSH Session log. Browser processes, tools, security policy and
+artifacts remain the responsibility of the Browser plugin, not QA Surface.
+
+### User Settings extensions
+
+An optional client plugin can add a first-class page to the signed-in user's
+existing `Настройки` dialog through the published
+`@yadsh/dsh-qa-surface/client/settings` contract. Register the page with the
+`qaUserSettingsSections` service; QA Surface owns the navigation and supplies
+only the current account token to the selected page. The extension must still
+authorize every Host call server-side and must not persist credentials in the
+browser.
+
+```ts
+import type { Context } from "@deepseek-ai/cordis"
+
+export const inject = ["qaUserSettingsSections"]
+
+export function apply(ctx: Context) {
+  ctx.effect(() => ctx.qaUserSettingsSections.register({
+    id: "integrations",
+    title: "Интеграции",
+    order: 40,
+    component: IntegrationsPage,
+  }))
+}
+```
+
 Subagents: the deployment may opt the delegation family (`subagent`,
 `subagent_fork`, `send_message`, `list_agents`, `interrupt_agent`) into the
 lockdown allow-list; the preset must mount them. Launches then render as
@@ -374,7 +588,11 @@ used first) and intersects it with the Host session list, so users sharing the
 deployment never see each other's chats. An admin can explicitly enable
 `accounts.showOtherUsersChats: true` to add chats owned by other QA accounts,
 grouped by owner. Switching re-runs the full policy
-attestation; a chat the Host no longer lists is pruned from the index. Each
+attestation, and that attestation materializes the chat's agent when the Host
+does not hold one: DSH builds an agent on demand, so a chat restored after a
+Host restart still opens (its composition is resumed from what the session
+recorded) instead of failing as unavailable. A chat the Host no longer lists is
+pruned from the index. Each
 row carries a two-click delete control that removes the chat from this
 browser's index; deleting the chat that is currently open continues in a
 fresh attested session. Host-side sessions are not deleted — DSH 0.1.x
@@ -430,6 +648,9 @@ from the actual deployment. A name that is not registered fails closed. The
 Host restriction retains exact allow-listed tools from the agent preset's
 ancestor scope, and the additional execution guard also denies session-scoped
 tools and `run_code` unless their exact names are allowed.
+Host-installed integration plugins may add their own narrowly scoped tool names
+through the QA Surface service; those executors must independently resolve the
+owner-attested root principal and fail closed for unowned or child sessions.
 
 ## Security and deployment
 

package/compatibility.json

@@ -11,10 +11,12 @@
       "sessions.binding",
       "settingsScope",
       "settings.onboarding list-slot shadowing",
+      "keyed child slots with owner props",
       "webServer.register",
       "typert.remote",
       "agentPresets.composedPreset",
       "permissionPresets.set",
+      "tools.schemas",
       "tools.restrict",
       "tools.guard",
       "tools.register",
@@ -22,8 +24,15 @@
       "agent.turn-stopping",
       "agent.currentInitiator",
       "systemPrompt.section",
-      "workspaceRegistry.get"
+      "workspaceRegistry.get",
+      "skills.registerProvider",
+      "skills.change"
     ]
   },
+  "qaSurfacePanelExtensions": {
+    "version": 1,
+    "service": "qaSurfacePanels",
+    "bodySlot": "qa.surface.panel"
+  },
   "node": "^22.19.0 || >=24.0.0"
 }

package/cordis.patch.yml

@@ -9,6 +9,14 @@
           matchChildren: true
         ui:
           showReset: false
+        # Fail closed: a composed tool gate's `ask` is refused, not answered.
+        # A deployment that wants the operator to answer it opts in with
+        # `interaction: { approvals: interactive }`.
+        interaction:
+          approvals: blocked
+          # Ask_user_question is refused, not answered (the tool is mounted per
+          # preset; opt in with `interaction: { questions: interactive }`).
+          questions: unsupported
         lockdown:
           enabled: true
           sandboxMode: read-only
@@ -17,4 +25,13 @@
           allowSessionReset: false
           toolPolicy:
             mode: allow-list
+            # Documents are the plugin's own tools, not preset tools: the four
+            # names below are registered by `documents.enabled` (default true)
+            # and stay invisible to a chat until they are listed here. They
+            # write an artifact bundle into the session workspace themselves,
+            # so `sandboxMode: read-only` is not what stops them.
+            #   - document_create
+            #   - document_to_markdown
+            #   - document_convert
+            #   - document_inspect
             allow: []

package/lib/account-remotes.js

@@ -95,6 +95,16 @@ export function createQaAccountRemotes(options) {
                 return store.updateOwnProfile(token, input);
             });
         },
+        updateStarters: (token, input) => {
+            const config = getConfig();
+            const store = requireAccounts();
+            return run(() => {
+                if (!config.accounts.starters.enabled) {
+                    throw new QaAccountsError("starters-disabled", "self-service starter messages are disabled on this deployment");
+                }
+                return store.updateOwnStarters(token, input);
+            });
+        },
     };
 }
 //# sourceMappingURL=account-remotes.js.map

package/lib/account-remotes.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-remotes.js","sourceRoot":"","sources":["../src/account-remotes.ts"],"names":[],"mappings":"AACA,OAAO,EACL,UAAU,EACV,eAAe,EACf,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAW7B,MAAM,uBAAuB,GAC3B,iDAAiD,CAAC;AAqCpD,8EAA8E;AAC9E,MAAM,UAAU,sBAAsB,CAAC,OAGtC;IACC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACtC,2EAA2E;IAC3E,8CAA8C;IAC9C,IAAI,QAAgC,CAAC;IACrC,IAAI,eAAmC,CAAC;IAExC,MAAM,OAAO,GAAG,CAAC,MAA+B,EAA0B,EAAE;QAC1E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7B,MAAM,CAAC,QAAQ,CAAC,cAAc;YAC9B,MAAM,CAAC,QAAQ,CAAC,iBAAiB;YACjC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,qBAAqB;YAC7C,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU;SACnC,CAAC,CAAC;QACH,IAAI,QAAQ,KAAK,SAAS,IAAI,eAAe,KAAK,OAAO,EAAE,CAAC;YAC1D,QAAQ,GAAG,IAAI,UAAU,CAAC,uBAAuB,EAAE,EAAE;gBACnD,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;gBAC9C,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,iBAAiB;gBACpD,qBAAqB,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,qBAAqB;gBACpE,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU;aACnD,CAAC,CAAC;YACH,eAAe,GAAG,OAAO,CAAC;QAC5B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,4EAA4E;IAC5E,MAAM,eAAe,GAAG,GAAe,EAAE;QACvC,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,CAAI,SAAkB,EAAE,eAAwB,EAAK,EAAE;QACjE,IAAI,CAAC;YACH,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;gBACrC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE;oBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,eAAe;iBAC3B,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CACb,4CAA4C,KAAK,CAAC,MAAM,GAAG,EAC3D;oBACE,KAAK,EAAE,KAAK;iBACb,CACF,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,OAAO;QACP,GAAG;QACH,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;YAC5B,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,KAAK,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;YACzB,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAChB,IAAI,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,OAAO;gBAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;YACnE,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,aAAa,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;YACnC,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,IAAI,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,OAAO;gBAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,IAAI,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YAC1D,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,aAAa,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;oBACrC,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,uDAAuD,CACxD,CAAC;gBACJ,CAAC;gBACD,OAAO,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"account-remotes.js","sourceRoot":"","sources":["../src/account-remotes.ts"],"names":[],"mappings":"AACA,OAAO,EACL,UAAU,EACV,eAAe,EACf,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAY7B,MAAM,uBAAuB,GAC3B,iDAAiD,CAAC;AA0CpD,8EAA8E;AAC9E,MAAM,UAAU,sBAAsB,CAAC,OAGtC;IACC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACtC,2EAA2E;IAC3E,8CAA8C;IAC9C,IAAI,QAAgC,CAAC;IACrC,IAAI,eAAmC,CAAC;IAExC,MAAM,OAAO,GAAG,CAAC,MAA+B,EAA0B,EAAE;QAC1E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7B,MAAM,CAAC,QAAQ,CAAC,cAAc;YAC9B,MAAM,CAAC,QAAQ,CAAC,iBAAiB;YACjC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,qBAAqB;YAC7C,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU;SACnC,CAAC,CAAC;QACH,IAAI,QAAQ,KAAK,SAAS,IAAI,eAAe,KAAK,OAAO,EAAE,CAAC;YAC1D,QAAQ,GAAG,IAAI,UAAU,CAAC,uBAAuB,EAAE,EAAE;gBACnD,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;gBAC9C,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,iBAAiB;gBACpD,qBAAqB,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,qBAAqB;gBACpE,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU;aACnD,CAAC,CAAC;YACH,eAAe,GAAG,OAAO,CAAC;QAC5B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,4EAA4E;IAC5E,MAAM,eAAe,GAAG,GAAe,EAAE;QACvC,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,CAAI,SAAkB,EAAE,eAAwB,EAAK,EAAE;QACjE,IAAI,CAAC;YACH,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;gBACrC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE;oBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,eAAe;iBAC3B,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CACb,4CAA4C,KAAK,CAAC,MAAM,GAAG,EAC3D;oBACE,KAAK,EAAE,KAAK;iBACb,CACF,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,OAAO;QACP,GAAG;QACH,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;YAC5B,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,KAAK,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;YACzB,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAChB,IAAI,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,OAAO;gBAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;YACnE,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,aAAa,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;YACnC,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,IAAI,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,OAAO;gBAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,IAAI,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YAC1D,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,aAAa,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;oBACrC,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,uDAAuD,CACxD,CAAC;gBACJ,CAAC;gBACD,OAAO,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC;QACL,CAAC;QACD,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC/B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACtC,MAAM,IAAI,eAAe,CACvB,mBAAmB,EACnB,+DAA+D,CAChE,CAAC;gBACJ,CAAC;gBACD,OAAO,KAAK,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/lib/accounts/credentials.js

@@ -3,6 +3,17 @@ const MIN_PASSWORD_LENGTH = 8;
 const MAX_PASSWORD_LENGTH = 200;
 const MAX_DISPLAY_NAME_LENGTH = 100;
 const EMAIL_PATTERN = /^[^\s@]+@[^\s@]+\.[^\s@]+$/u;
+/**
+ * The length gate every path that sets a password goes through — registration,
+ * the operator's addUser, and a reset — so a password good enough to register is
+ * exactly the one an operator can put back.
+ */
+export function validatePassword(password) {
+    if (password.length < MIN_PASSWORD_LENGTH ||
+        password.length > MAX_PASSWORD_LENGTH) {
+        throw new QaAccountsError("weak-password", `password must be ${MIN_PASSWORD_LENGTH} to ${MAX_PASSWORD_LENGTH} characters`);
+    }
+}
 /**
  * The email/password/display-name gate shared by self-registration and the
  * operator's addUser, so both paths reject unusable input with the same
@@ -14,10 +25,7 @@ export function validateCredentials(email, password, displayName) {
     if (!EMAIL_PATTERN.test(normalized) || normalized.length > 254) {
         throw new QaAccountsError("invalid-email", "email is not a usable address");
     }
-    if (password.length < MIN_PASSWORD_LENGTH ||
-        password.length > MAX_PASSWORD_LENGTH) {
-        throw new QaAccountsError("weak-password", `password must be ${MIN_PASSWORD_LENGTH} to ${MAX_PASSWORD_LENGTH} characters`);
-    }
+    validatePassword(password);
     const name = (displayName ?? "").trim();
     if (name.length > MAX_DISPLAY_NAME_LENGTH) {
         throw new QaAccountsError("invalid-display-name", `display name must be at most ${MAX_DISPLAY_NAME_LENGTH} characters`);

package/lib/accounts/credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/accounts/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,aAAa,GAAG,6BAA6B,CAAC;AASpD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAa,EACb,QAAgB,EAChB,WAA+B;IAE/B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC/D,MAAM,IAAI,eAAe,CAAC,eAAe,EAAE,+BAA+B,CAAC,CAAC;IAC9E,CAAC;IACD,IACE,QAAQ,CAAC,MAAM,GAAG,mBAAmB;QACrC,QAAQ,CAAC,MAAM,GAAG,mBAAmB,EACrC,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,eAAe,EACf,oBAAoB,mBAAmB,OAAO,mBAAmB,aAAa,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,IAAI,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAC1C,MAAM,IAAI,eAAe,CACvB,sBAAsB,EACtB,gCAAgC,uBAAuB,aAAa,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC"}
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/accounts/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,aAAa,GAAG,6BAA6B,CAAC;AASpD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,IACE,QAAQ,CAAC,MAAM,GAAG,mBAAmB;QACrC,QAAQ,CAAC,MAAM,GAAG,mBAAmB,EACrC,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,eAAe,EACf,oBAAoB,mBAAmB,OAAO,mBAAmB,aAAa,CAC/E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAa,EACb,QAAgB,EAChB,WAA+B;IAE/B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC/D,MAAM,IAAI,eAAe,CAAC,eAAe,EAAE,+BAA+B,CAAC,CAAC;IAC9E,CAAC;IACD,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,IAAI,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAC1C,MAAM,IAAI,eAAe,CACvB,sBAAsB,EACtB,gCAAgC,uBAAuB,aAAa,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC"}

package/lib/accounts/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/accounts/errors.ts"],"names":[],"mappings":"AAqBA,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAE7B,MAAM;IADjB,YACW,MAA6B,EACtC,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;sBAHN,MAAM;QAIf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/accounts/errors.ts"],"names":[],"mappings":"AAuBA,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAE7B,MAAM;IADjB,YACW,MAA6B,EACtC,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;sBAHN,MAAM;QAIf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF"}

package/lib/accounts/file.js.map

@@ -1 +1 @@
-{"version":3,"file":"file.js","sourceRoot":"","sources":["../../src/accounts/file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC;AAEjB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAwDvC,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB;IAChC,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAW;IACjC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB,yEAAyE;AACzE,MAAM,UAAU,uBAAuB;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1C,OAAO,IAAI,CAAC,IAAI,CACd,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EACxD,kBAAkB,CACnB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,KAAmB;IAEnB,IAAI,GAAW,CAAC;IAChB,IAAI,IAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qEAAqE;QACrE,kEAAkE;QAClE,qDAAqD;QACrD,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,MAAM,OAAO,GAAiB;YAC5B,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,SAAS,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;YAC5C,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,EAAE;SACd,CAAC;QACF,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9C,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACd,MAAuB,CAAC,OAAO,KAAK,CAAC;QACtC,OAAQ,MAAuB,CAAC,MAAM,KAAK,QAAQ;QACnD,CAAC,KAAK,CAAC,OAAO,CAAE,MAAuB,CAAC,KAAK,CAAC,EAC9C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,gBAAgB,QAAQ,gEAAgE,CACzF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAsB,CAAC;IACpC,IAAI,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;KAChC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,IAAkB,EAClB,KAAmB;IAEnB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,wEAAwE;IACxE,MAAM,IAAI,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClE,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3B,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAAgB,EAChB,KAAmB;IAEnB,IAAI,IAAW,CAAC;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;QACjE,kEAAkE;QAClE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,OAAO;QACtC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,IAAI,EAChC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC3C,CAAC"}
+{"version":3,"file":"file.js","sourceRoot":"","sources":["../../src/accounts/file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC;AAEjB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAgEvC,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB;IAChC,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAW;IACjC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB,yEAAyE;AACzE,MAAM,UAAU,uBAAuB;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1C,OAAO,IAAI,CAAC,IAAI,CACd,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EACxD,kBAAkB,CACnB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,KAAmB;IAEnB,IAAI,GAAW,CAAC;IAChB,IAAI,IAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qEAAqE;QACrE,kEAAkE;QAClE,qDAAqD;QACrD,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,MAAM,OAAO,GAAiB;YAC5B,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,SAAS,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;YAC5C,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,EAAE;SACd,CAAC;QACF,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9C,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACd,MAAuB,CAAC,OAAO,KAAK,CAAC;QACtC,OAAQ,MAAuB,CAAC,MAAM,KAAK,QAAQ;QACnD,CAAC,KAAK,CAAC,OAAO,CAAE,MAAuB,CAAC,KAAK,CAAC,EAC9C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,gBAAgB,QAAQ,gEAAgE,CACzF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAsB,CAAC;IACpC,IAAI,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;KAChC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,IAAkB,EAClB,KAAmB;IAEnB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,wEAAwE;IACxE,MAAM,IAAI,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClE,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3B,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAAgB,EAChB,KAAmB;IAEnB,IAAI,IAAW,CAAC;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;QACjE,kEAAkE;QAClE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,OAAO;QACtC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,IAAI,EAChC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC3C,CAAC"}

package/lib/accounts/store.js

@@ -1,6 +1,7 @@
 import { randomBytes, randomUUID, scryptSync, timingSafeEqual, } from "node:crypto";
 import { QA_PROFILE_DEFAULT_INSTRUCTIONS_MAX, normalizeProfile, validateProfileWrite, } from "../profile.js";
-import { validateCredentials } from "./credentials.js";
+import { normalizeStarters, validateStartersWrite } from "../starters.js";
+import { validateCredentials, validatePassword } from "./credentials.js";
 import { QaAccountsError } from "./errors.js";
 import { createFileStampRef, defaultAccountsFilePath, loadAccountsFile, persistAccountsFile, reloadAccountsFileIfChanged, } from "./file.js";
 import { mintToken, verifyToken } from "./token.js";
@@ -19,6 +20,7 @@ function toPublic(user) {
         lastLoginAt: user.lastLoginAt,
         disabled: user.disabled === true,
         profile: normalizeProfile(user.profile),
+        starters: normalizeStarters(user.starters),
     };
 }
 function hashPassword(password) {
@@ -361,6 +363,21 @@ export class QaAccounts {
     setUserRole(email, role) {
         return toPublic(this.editUser(email, (user) => ({ ...user, role })));
     }
+    /**
+     * Replace an account's password, which is what a forgotten one needs. The
+     * token version bumps with it, so every token minted under the old password
+     * dies server-side: a reset is also the response to a leaked credential.
+     * Ownership, profile and the account id survive, so the user's chats are
+     * still theirs after signing in again.
+     */
+    setPassword(email, password) {
+        validatePassword(password);
+        return toPublic(this.editUser(email, (user) => ({
+            ...user,
+            passwordHash: hashPassword(password),
+            tokenVersion: (user.tokenVersion ?? 0) + 1,
+        })));
+    }
     /**
      * Disable an account: future logins are refused and every live token is
      * invalidated (the token version bumps). `enable` does not resurrect old
@@ -432,6 +449,26 @@ export class QaAccounts {
         const user = this.requireUser(token);
         return this.setProfile(user.email, input);
     }
+    /**
+     * Replace the token account's starter buttons. Same self-service shape as
+     * {@link updateOwnProfile}: the token is the only identity, and a rejected
+     * write leaves the stored record untouched.
+     */
+    updateOwnStarters(token, input) {
+        this.reloadIfChanged();
+        const user = this.requireUser(token);
+        const result = validateStartersWrite(input);
+        if (!result.ok) {
+            throw new QaAccountsError("invalid-starters", result.message);
+        }
+        return toPublic(this.editUser(user.email, (current) => ({
+            ...current,
+            starters: {
+                items: result.value.items.map((item) => ({ ...item })),
+                hideDefaults: result.value.hideDefaults,
+            },
+        })));
+    }
     /**
      * Validate one profile write and stamp it onto the account. Throws before
      * anything is mutated, so a rejected write leaves the stored profile, and