@yadsh/dsh-qa-surface 0.5.0 → 0.6.1

package/lib/types/account-remotes.d.ts

@@ -1,6 +1,6 @@
 import type { PluginLogger } from "@yadsh/dsh-plugin-log";
 import { QaAccounts } from "./accounts/store.js";
-import type { QaAccountProfileInput, QaAccountSession, QaAccountUserPublic, QaClaimResult, QaOwnershipEntry, QaWhoamiResult, ResolvedQaSurfaceConfig } from "./types.js";
+import type { QaAccountProfileInput, QaAccountSession, QaAccountStartersInput, QaAccountUserPublic, QaClaimResult, QaOwnershipEntry, QaWhoamiResult, ResolvedQaSurfaceConfig } from "./types.js";
 /**
  * Host-side bodies of the account remotes the `QaSurface` service exposes.
  * The `@Remote`-decorated signatures stay on the service class (typert code
@@ -33,6 +33,8 @@ export interface QaAccountRemotes {
     };
     /** Replace the caller's own self-declared profile; the token is the identity. */
     updateProfile(token: string, input: QaAccountProfileInput): QaAccountUserPublic;
+    /** Replace the caller's own starter buttons; the token is the identity. */
+    updateStarters(token: string, input: QaAccountStartersInput): QaAccountUserPublic;
 }
 /** Build the account-remotes context for one `QaSurface` service instance. */
 export declare function createQaAccountRemotes(options: {

package/lib/types/accounts/errors.d.ts

@@ -3,7 +3,7 @@
  * marker pattern the attestation path established; the browser maps them to
  * audience-safe copy and the precise cause stays in the Host logs.
  */
-export type QaAccountsErrorReason = "auth-required" | "admin-required" | "invalid-credentials" | "account-disabled" | "email-taken" | "invalid-email" | "invalid-display-name" | "invalid-profile" | "profile-disabled" | "invalid-role" | "weak-password" | "registration-disabled" | "rate-limited" | "session-owned-elsewhere";
+export type QaAccountsErrorReason = "auth-required" | "admin-required" | "invalid-credentials" | "account-disabled" | "email-taken" | "invalid-email" | "invalid-display-name" | "invalid-profile" | "profile-disabled" | "invalid-starters" | "starters-disabled" | "invalid-role" | "weak-password" | "registration-disabled" | "rate-limited" | "session-owned-elsewhere";
 export declare class QaAccountsError extends Error {
     readonly reason: QaAccountsErrorReason;
     constructor(reason: QaAccountsErrorReason, message: string);

package/lib/types/accounts/file.d.ts

@@ -7,6 +7,14 @@ export interface StoredProfile {
     instructions?: string;
     updatedAt?: string;
 }
+/** One account's starter buttons as they rest in the accounts file. */
+export interface StoredStarters {
+    items?: {
+        label?: string;
+        prompt?: string;
+    }[];
+    hideDefaults?: boolean;
+}
 export interface StoredUser {
     readonly id: string;
     readonly email: string;
@@ -28,6 +36,8 @@ export interface StoredUser {
     tokenVersion?: number;
     /** Absent until the owner fills the profile form for the first time. */
     profile?: StoredProfile;
+    /** Absent until the owner customizes the starter buttons. */
+    starters?: StoredStarters;
 }
 export interface AccountsFile {
     readonly version: 1;

package/lib/types/accounts/store.d.ts

@@ -1,4 +1,4 @@
-import type { QaAccountIdentityField, QaAccountProfile, QaAccountProfileInput, QaAccountRole, QaAccountSession, QaAccountUserPublic, QaClaimResult, QaOwnershipEntry, QaWhoamiResult } from "../types.js";
+import type { QaAccountIdentityField, QaAccountProfile, QaAccountProfileInput, QaAccountRole, QaAccountSession, QaAccountStartersInput, QaAccountUserPublic, QaClaimResult, QaOwnershipEntry, QaWhoamiResult } from "../types.js";
 import type { StoredUser } from "./file.js";
 export { QaAccountsError } from "./errors.js";
 export type { QaAccountsErrorReason } from "./errors.js";
@@ -142,6 +142,12 @@ export declare class QaAccounts {
      * first, so a browser can only ever edit the profile it is signed in as.
      */
     updateOwnProfile(token: string, input: QaAccountProfileInput): QaAccountUserPublic;
+    /**
+     * Replace the token account's starter buttons. Same self-service shape as
+     * {@link updateOwnProfile}: the token is the only identity, and a rejected
+     * write leaves the stored record untouched.
+     */
+    updateOwnStarters(token: string, input: QaAccountStartersInput): QaAccountUserPublic;
     /**
      * Validate one profile write and stamp it onto the account. Throws before
      * anything is mutated, so a rejected write leaves the stored profile, and

package/lib/types/attestation.d.ts

@@ -14,4 +14,6 @@ export declare class QaAttestationError extends Error {
     readonly reason: QaAttestationReason;
     constructor(reason: QaAttestationReason, message: string);
 }
+/** Keep deployment details in Host logs while preserving a stable wire hint. */
+export declare function qaAttestationFailureMessage(message: string, error: unknown): string;
 //# sourceMappingURL=attestation.d.ts.map

package/lib/types/client/QaAccountsController.d.ts

@@ -1,4 +1,4 @@
-import type { QaAccountProfileInput, QaAccountUserPublic, QaOwnershipEntry, ResolvedQaSurfaceConfig } from "../types.js";
+import type { QaAccountProfileInput, QaAccountStartersInput, QaAccountUserPublic, QaOwnershipEntry, ResolvedQaSurfaceConfig } from "../types.js";
 import type { QaAccountsApi, StorageLike } from "./types.js";
 export type QaAccountsSnapshot = {
     readonly stage: "checking";
@@ -79,6 +79,12 @@ export declare class QaAccountsController {
      * rather than through the gate's state machine.
      */
     updateProfile(input: QaAccountProfileInput): Promise<string | null>;
+    /**
+     * Replace the signed-in user's own starter buttons, mirroring
+     * {@link updateProfile}: refusal copy on rejection, null once the snapshot
+     * carries the stored record, so the composer picks the new buttons up.
+     */
+    updateStarters(input: QaAccountStartersInput): Promise<string | null>;
     private authenticate;
     /** Own the account, migrate the legacy index, then project authed. */
     private enterSession;

package/lib/types/client/QaSessionController.d.ts

@@ -88,7 +88,11 @@ export declare class QaSessionController {
     private materializing;
     private operationError;
     private admissionPending;
+    private pendingSubmission;
+    private pendingSequence;
     private policyReady;
+    /** Historical transcript retained after the Host classifies policy drift. */
+    private compatibilityReadOnly;
     private drafting;
     /** The chat session to return to when a subagent view closes. */
     private chatSessionId;
@@ -110,6 +114,8 @@ export declare class QaSessionController {
     subscribe: (listener: () => void) => (() => void);
     ensureSession(): Promise<void>;
     send(text: string, attachments?: readonly QaAttachmentDraft[]): Promise<boolean>;
+    /** Publish a browser-only copy before any network or Host admission awaits. */
+    private beginSubmission;
     /**
      * Ask for a fresh variant of the previous answer. The session has no
      * truncation seam, so this sends the hidden regeneration instruction as an
@@ -190,6 +196,14 @@ export declare class QaSessionController {
      * (first frame at once, further frames absorbed) lives in the publisher. */
     private publishSessionUpdate;
     private publish;
+    /**
+     * Display names of the known subagent sessions keyed by session id, for
+     * settlement notices to sign with. The durable catalogs carry each
+     * delegation's description verbatim; a child the host listed without a
+     * catalog falls back to its own list title. Tolerates a host bundle older
+     * than either field: an absent snapshot piece just contributes no names.
+     */
+    private subagentNames;
     private fail;
     /**
      * Attest the currently bound session. `ok` carries the session id the proof

package/lib/types/client/QaSurface.d.ts

@@ -1,9 +1,11 @@
 import type { ConnectionGenerationState } from "@deepseek-ai/dsh-client-connection/client";
-import type { InjectFace, PropsRuntime } from "@deepseek-ai/dsh-client-ui-slots";
+import type { InjectFace, PropsRenderSlots, PropsRuntime } from "@deepseek-ai/dsh-client-ui-slots";
 import type { QaConfigController } from "./QaConfigController.js";
 import type { QaRouteController } from "./QaRouteController.js";
 import type { QaAccountsController } from "./QaAccountsController.js";
-import type { QaApprovalApi, QaConversation, QaCreateSession, QaFileUpload, QaSecureSession, QaSessions, QaSessionsApi, QaQuestionApi, QaSourceApi } from "./types.js";
+import type { QaApprovalApi, QaConversation, QaCreateSession, QaFileUpload, QaSecureSession, QaSessions, QaSessionsApi, QaQuestionApi, QaSkillApi, QaSourceApi } from "./types.js";
+import type { QaSurfacePanelRegistry } from "./panels/registry.js";
+import type { QaUserSettingsSections } from "./settings-extensions/index.js";
 export interface QaSurfaceFace {
     readonly route: QaRouteController;
     readonly config: QaConfigController;
@@ -14,6 +16,11 @@ export interface QaSurfaceFace {
     readonly secureSession: QaSecureSession;
     readonly createSession: QaCreateSession;
     readonly sourceApi: QaSourceApi;
+    /**
+     * Personal-skill half of the plugin's namespace. Absent on a page whose Host
+     * build does not answer it; the settings dialog then has no skills section.
+     */
+    readonly skillApi?: QaSkillApi;
     /**
      * Approval half of the plugin's namespace. Absent on a page whose Host build
      * does not answer it; the surface then only blocks sends it cannot attest.
@@ -28,8 +35,11 @@ export interface QaSurfaceFace {
     readonly fileUpload?: () => QaFileUpload | undefined;
     /** Present when the deployment mounts the QA account gate. */
     readonly accounts?: QaAccountsController;
+    /** Global client-only panel metadata and presentation navigation. */
+    readonly panels: QaSurfacePanelRegistry;
+    /** First-class settings pages registered by additive QA plugins. */
+    readonly settingsSections: QaUserSettingsSections;
 }
-type QaSurfaceProps = PropsRuntime<"shell.overlay"> & InjectFace<QaSurfaceFace>;
+export type QaSurfaceProps = PropsRuntime<"shell.overlay"> & PropsRenderSlots<"qa.surface.panel"> & InjectFace<QaSurfaceFace>;
 export declare function QaSurface(props: QaSurfaceProps): import("react/jsx-runtime").JSX.Element | null;
-export {};
 //# sourceMappingURL=QaSurface.d.ts.map

package/lib/types/client/QaSurfaceGuard.d.ts

@@ -0,0 +1,27 @@
+import { type ReactNode } from "react";
+import { type QaSurfaceProps } from "./QaSurface.js";
+/**
+ * The registered `shell.overlay` entry: the surface behind an error boundary
+ * the host never sees past. The host's per-slot isolation retires a crashed
+ * entry, which for this slot means the QA overlay disappears and the operator
+ * shell beneath it becomes reachable — a render crash must never be allowed
+ * to make that trade. The boundary keeps the overlay mounted and swaps the
+ * surface for a fullscreen failure card; the reload button is the recovery,
+ * because after a render crash the component state below (controllers,
+ * stores) is untrustworthy.
+ *
+ * The body mask (`data-dsh-qa-surface`) is owned here, above the boundary:
+ * React unmounts a crashed subtree, and the stylesheet that hides the host
+ * frame's own columns hangs off that attribute, so a crash unmounting the
+ * surface must not lift the mask with it. Deleting the overlay element in
+ * the browser then reveals a blank page, not the shell.
+ *
+ * The wrapper is a function component only because the slot contract types
+ * entries as call signatures; its render is trivial and cannot itself throw
+ * into the host boundary. It also covers a face that failed to assemble: the
+ * slot inject hands over an empty face in that case, a missing route reads
+ * as permanently active, and the surface's first hook read throws into the
+ * boundary below.
+ */
+export declare function QaSurfaceGuard(props: QaSurfaceProps): ReactNode;
+//# sourceMappingURL=QaSurfaceGuard.d.ts.map

package/lib/types/client/QaTranscriptAdapter.d.ts

@@ -13,5 +13,12 @@ export declare function projectTranscript(snapshot: ConversationSnapshot | undef
     readonly running?: boolean;
     readonly showToolActivity?: boolean;
     readonly showReasoning?: boolean;
+    /**
+     * The chat's subagent display names keyed by session id, read from the
+     * host list snapshot; settlement notices prefer them over the raw ids.
+     */
+    readonly subagentNames?: Readonly<Record<string, string>>;
+    /** Sign settlement titles with deterministic codenames. */
+    readonly subagentCodenames?: boolean;
 }): readonly QaMessage[];
 //# sourceMappingURL=QaTranscriptAdapter.d.ts.map

package/lib/types/client/attestation.d.ts

@@ -6,8 +6,15 @@ import type { QaLockdownProof, ResolvedQaSurfaceConfig } from "../types.js";
  * reason class and an operator hint.
  */
 export declare class QaPolicyAttestationError extends Error {
-    constructor();
+    readonly reason: string | null;
+    constructor(reason?: string | null);
 }
+/**
+ * Refusals that classify an existing chat as belonging to an older deployment
+ * composition. Keeping only its transcript is safe: policyReady stays false,
+ * so no prompt, cancel, approval or question reaches the Host.
+ */
+export declare function canOpenAsCompatibilityReadOnly(reason: string | null): boolean;
 /**
  * Extract the coarse attestation reason code from a Host wire failure, if the
  * failure carries the marker.

package/lib/types/client/components/QaComposer.d.ts

@@ -1,8 +1,10 @@
 import type { QaAttachmentDraft } from "../../types.js";
 import { type QaAttachmentLimits } from "../attachments.js";
+import type { QaQuickQuestion } from "../types.js";
 export interface QaComposerProps {
     readonly placeholder: string;
-    readonly quickQuestions?: readonly string[];
+    /** Shown while the chat is empty; the label reads, the prompt sends. */
+    readonly quickQuestions?: readonly QaQuickQuestion[];
     readonly canSend: boolean;
     readonly canStop: boolean;
     readonly running: boolean;

package/lib/types/client/components/QaHeader.d.ts

@@ -4,6 +4,7 @@
  * rendering — the badge counts move with the session state anyway, so
  * reference guards would never pay off here.
  */
+import type { ReactNode } from "react";
 /**
  * The subagent indication for headerless deployments: a slim status line
  * above the transcript with the way back to the parent chat. With a header,
@@ -33,9 +34,10 @@ export interface QaHeaderProps {
     readonly fileCount: number;
     readonly filesOpen: boolean;
     readonly onOpenFiles: () => void;
+    readonly panelLauncher?: ReactNode;
     readonly showReset: boolean;
     readonly resetDisabled: boolean;
     readonly onReset: () => void;
 }
-export declare function QaHeader({ logoUrl, title, viewingSubagent, onCloseSubagent, agentPreset, agentCount, agentsOpen, onToggleAgents, sourcesVisible, sourcesCount, sourcesComplete, sourcesOpen, onOpenSources, fileCount, filesOpen, onOpenFiles, showReset, resetDisabled, onReset, }: QaHeaderProps): import("react/jsx-runtime").JSX.Element;
+export declare function QaHeader({ logoUrl, title, viewingSubagent, onCloseSubagent, agentPreset, agentCount, agentsOpen, onToggleAgents, sourcesVisible, sourcesCount, sourcesComplete, sourcesOpen, onOpenSources, fileCount, filesOpen, onOpenFiles, panelLauncher, showReset, resetDisabled, onReset, }: QaHeaderProps): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=QaHeader.d.ts.map

package/lib/types/client/components/QaModal.d.ts

@@ -9,12 +9,13 @@ export interface QaModalProps {
     readonly children: ReactNode;
     /** Actions pinned under the body; omit for a body-only dialog. */
     readonly footer?: ReactNode;
+    readonly wide?: boolean;
     /**
-     * Wider panel, for a dialog whose prose must not wrap mid-sentence: the
-     * profile form and the changelog both take it. The default width stays with
-     * the text-list dialogs it was sized for.
+     * Panel size: `wide` fits prose that must not wrap mid-sentence, and
+     * `settings` the sectioned user-settings dialog, which needs both a
+     * comfortable height and a two-column body.
      */
-    readonly wide?: boolean;
+    readonly size?: "default" | "wide" | "settings";
 }
 /**
  * The shared QA dialog shell: backdrop, panel, head with the close control,

package/lib/types/client/components/QaSidebar.d.ts

@@ -1,5 +1,4 @@
 import type { SessionSummary } from "@deepseek-ai/dsh-api-session-controller/client";
-import type { QaAccountIdentityField, QaAccountProfile, QaAccountProfileInput } from "../../types.js";
 /** One renderable row of the chat-history sidebar. */
 export interface QaChatRow {
     readonly id: string;
@@ -58,17 +57,15 @@ export interface QaSidebarProps {
         readonly role: string;
         readonly onLogout: () => void;
         /**
-         * Self-service profile editing. Omitted when the deployment turns the
-         * feature off, which also leaves the footer name as plain text. Memoized
-         * by the caller: this object is compared by reference.
+         * Entry point of the user-settings dialog: the name to show and the way to
+         * open it. Omitted when the deployment gives the account nothing to
+         * configure, which also leaves the footer name as plain text. Memoized by
+         * the caller: this object is compared by reference.
          */
-        readonly profileDialog?: {
-            readonly profile: QaAccountProfile;
-            /** Handle fields the dialog renders, in the deployment's order. */
-            readonly fields: readonly QaAccountIdentityField[];
-            readonly instructionsMaxLength: number;
-            /** Persist edited fields; resolves to refusal copy, or null. */
-            readonly onSave: (input: QaAccountProfileInput) => Promise<string | null>;
+        readonly settings?: {
+            /** Full name the user wrote, or the email when they wrote none. */
+            readonly label: string;
+            readonly onOpen: () => void;
         };
     };
 }

package/lib/types/client/components/QaWidthHandle.d.ts

@@ -6,6 +6,19 @@ import { type RefObject } from "react";
  * lets the transcript fill it.
  */
 export declare const QA_CONTENT_EDGE_BUDGET = 176;
+/**
+ * Band between the text column edge and the handle strip: the transcript keeps
+ * 16px of side padding and the strip's inner edge sits 24px outside the content
+ * box. A bled block that grows past this band slides under the 40px drag
+ * target, so the stylesheet holds the bleed inside it.
+ */
+export declare const QA_HANDLE_FREE_BAND = 40;
+/**
+ * Ceiling for the assistant bleed (fenced code blocks) per side. Eight pixels
+ * short of the free band, so both the strip and its glow stay on empty gutter
+ * at every width; the stylesheet caps it once more by the live side gutter.
+ */
+export declare const QA_BLEED_MAX_WIDTH: number;
 export declare function readQaContentWidth(storage: Pick<Storage, "getItem">, key: string): number | null;
 export declare function writeQaContentWidth(storage: Pick<Storage, "setItem">, key: string, width: number): void;
 /**

package/lib/types/client/index.d.ts

@@ -13,4 +13,5 @@ export { QaAccountsController } from "./QaAccountsController.js";
 export { QaRouteController, matchesQaRoute } from "./QaRouteController.js";
 export { QaSessionController } from "./QaSessionController.js";
 export { projectTranscript } from "./QaTranscriptAdapter.js";
+export type { QaSurfacePanelDefinition, QaSurfacePanelOpenOptions, QaSurfacePanelOwnerProps, QaSurfacePanelPresentation, QaSurfacePanels, } from "./panels/contract.js";
 //# sourceMappingURL=index.d.ts.map

package/lib/types/client/panels/PanelHost.d.ts

@@ -0,0 +1,18 @@
+import type { PropsRenderSlots } from "@deepseek-ai/dsh-client-ui-slots";
+import type { QaSurfacePanelRegistry } from "./registry.js";
+export declare const QA_PANEL_DEFAULT_RATIO = 0.42;
+export declare const QA_PANEL_MIN_PX = 320;
+export declare const QA_CHAT_MIN_PX = 400;
+export declare const QA_PANEL_MAX_RATIO = 0.7;
+export declare const QA_PANEL_MOBILE_BREAKPOINT_PX = 768;
+type RenderPanelSlot = PropsRenderSlots<"qa.surface.panel">["renderSlot"];
+export declare function clampQaPanelWidth(width: number, available: number): number;
+export interface QaPanelHostProps {
+    readonly panels: QaSurfacePanelRegistry;
+    readonly sessionId: string | null;
+    readonly qaToken?: string;
+    readonly renderSlot: RenderPanelSlot;
+}
+export declare function QaPanelHost({ panels, sessionId, qaToken, renderSlot, }: QaPanelHostProps): import("react/jsx-runtime").JSX.Element | null;
+export {};
+//# sourceMappingURL=PanelHost.d.ts.map

package/lib/types/client/panels/PanelLauncher.d.ts

@@ -0,0 +1,5 @@
+import type { QaSurfacePanelRegistry } from "./registry.js";
+export declare function QaPanelLauncher({ panels, }: {
+    readonly panels: QaSurfacePanelRegistry;
+}): import("react/jsx-runtime").JSX.Element | null;
+//# sourceMappingURL=PanelLauncher.d.ts.map

package/lib/types/client/panels/contract.d.ts

@@ -0,0 +1,83 @@
+export declare const QA_SURFACE_PANEL_SLOT: "qa.surface.panel";
+export type QaSurfacePanelOpenReason = "user" | "extension" | "activity";
+export type QaSurfacePanelCloseReason = "user" | "extension";
+export type QaSurfacePanelPresentation = "side" | "fullscreen";
+export interface QaSurfacePanelDefinition {
+    /** Globally unique implementation identity. Package names are preferred. */
+    readonly id: string;
+    /** Stable logical identity used by navigation. */
+    readonly kind: string;
+    /** User-facing, lazily localized title. */
+    readonly title: () => string;
+    readonly description?: () => string;
+    /** Presentation token interpreted by QA Surface, never a React value. */
+    readonly icon?: string;
+    readonly order?: number;
+    /** Defaults to true. Programmatic navigation remains available when false. */
+    readonly userVisible?: boolean;
+    /** Defaults to false. Hidden retained bodies stay mounted but inert. */
+    readonly keepMounted?: boolean;
+}
+export interface QaSurfacePanelOpenOptions {
+    readonly focus?: boolean;
+    readonly params?: unknown;
+    readonly reason?: QaSurfacePanelOpenReason;
+}
+export interface QaSurfacePanelOwnerProps {
+    readonly panelId: string;
+    readonly panelKind: string;
+    readonly sessionId: string | null;
+    /**
+     * Current QA bearer credential for Host remotes that authorize access to
+     * `sessionId`. Panel plugins must not persist, log, or place it in URLs.
+     * Empty when QA accounts are disabled.
+     */
+    readonly qaToken: string;
+    readonly visible: boolean;
+    readonly presentation: QaSurfacePanelPresentation;
+    readonly params: unknown;
+    readonly actions: {
+        close(): void;
+        reveal(options?: {
+            readonly focus?: boolean;
+        }): void;
+    };
+    /** Aborts with registration/body lifetime, never merely because it is hidden. */
+    readonly signal: AbortSignal;
+}
+export interface QaSurfacePanelContext {
+    readonly sessionId: string | null;
+    readonly qaToken: string;
+}
+export interface QaSurfacePanels {
+    register(definition: QaSurfacePanelDefinition): () => void;
+    open(kind: string, options?: QaSurfacePanelOpenOptions): boolean;
+    close(options?: {
+        readonly reason?: QaSurfacePanelCloseReason;
+    }): void;
+    toggle(kind: string): boolean;
+    isRegistered(kind: string): boolean;
+    getActiveKind(): string | null;
+    /** Current QA session/credential pair for activity-driven extensions. */
+    getContext(): QaSurfacePanelContext;
+    list(): readonly QaSurfacePanelDefinition[];
+}
+declare module "@deepseek-ai/cordis" {
+    interface Context {
+        qaSurfacePanels: QaSurfacePanels;
+    }
+}
+declare module "@deepseek-ai/dsh-client-ui-slots" {
+    interface SlotMap {
+        /**
+         * QA Surface owns this keyed seat. Panel plugins register their body under
+         * the exact `QaSurfacePanelDefinition.id` used by the metadata service.
+         */
+        "qa.surface.panel": {
+            kind: "keyed";
+            scope: "root";
+            owner: QaSurfacePanelOwnerProps;
+        };
+    }
+}
+//# sourceMappingURL=contract.d.ts.map

package/lib/types/client/panels/index.d.ts

@@ -0,0 +1,3 @@
+export { QA_SURFACE_PANEL_SLOT } from "./contract.js";
+export type { QaSurfacePanelContext, QaSurfacePanelCloseReason, QaSurfacePanelDefinition, QaSurfacePanelOpenOptions, QaSurfacePanelOpenReason, QaSurfacePanelOwnerProps, QaSurfacePanelPresentation, QaSurfacePanels, } from "./contract.js";
+//# sourceMappingURL=index.d.ts.map

package/lib/types/client/panels/registry.d.ts

@@ -0,0 +1,40 @@
+import type { QaSurfacePanelDefinition, QaSurfacePanelContext, QaSurfacePanelOpenOptions, QaSurfacePanels } from "./contract.js";
+export interface QaSurfacePanelsSnapshot {
+    readonly definitions: readonly QaSurfacePanelDefinition[];
+    readonly activeKind: string | null;
+    readonly params: unknown;
+    readonly focusRequest: number;
+    readonly focus: boolean;
+}
+/** Client-only metadata/navigation registry. It never stores React components. */
+export declare class QaSurfacePanelRegistry implements QaSurfacePanels {
+    private readonly byId;
+    private readonly byKind;
+    private readonly listeners;
+    private readonly paramsByKind;
+    private activeKind;
+    private focusRequest;
+    private focus;
+    private snapshot;
+    private context;
+    private disposed;
+    readonly subscribe: (listener: () => void) => (() => void);
+    readonly getSnapshot: () => QaSurfacePanelsSnapshot;
+    register(definition: QaSurfacePanelDefinition): () => void;
+    open(kind: string, options?: QaSurfacePanelOpenOptions): boolean;
+    close(_options?: {
+        readonly reason?: "user" | "extension";
+    }): void;
+    toggle(kind: string): boolean;
+    isRegistered(kind: string): boolean;
+    getActiveKind(): string | null;
+    getContext(): QaSurfacePanelContext;
+    /** QA Surface-owned lifecycle update; extensions consume it read-only. */
+    setContext(context: QaSurfacePanelContext): void;
+    list(): readonly QaSurfacePanelDefinition[];
+    signal(kind: string): AbortSignal | undefined;
+    params(kind: string): unknown;
+    dispose(): void;
+    private publish;
+}
+//# sourceMappingURL=registry.d.ts.map

package/lib/types/client/project-session-state.d.ts

@@ -18,10 +18,17 @@ export interface QaBoundProjectionInput {
     readonly questions: readonly QaPendingQuestion[];
     readonly operationError: string | null;
     readonly policyReady: boolean;
+    /** Historical binding retained for transcript access after policy drift. */
+    readonly compatibilityReadOnly?: boolean;
     readonly admissionPending: boolean;
     readonly chatsRevision: number;
     readonly viewingSubagent: QaSubagentView | null;
     readonly config: ResolvedQaSurfaceConfig;
+    /**
+     * The chat's subagent display names keyed by session id, read from the
+     * host list snapshot; settlement notices prefer them over the raw ids.
+     */
+    readonly subagentNames?: Readonly<Record<string, string>>;
     /**
      * The chat owner's display name for author labels; present only when an
      * admin reads a foreign chat (chat-level, not per-message).

package/lib/types/client/settings/sections/documents.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Documents: the document pipeline's deployment knobs.
+ *
+ * Everything here is optional — the defaults are usable as they are — but two
+ * of them decide whether the four document tools work at all in a given
+ * deployment: the Docling endpoint and the executables the renderer needs.
+ * The section therefore shows the effective values the Host resolved, not only
+ * what this browser has written.
+ */
+import { type ConfigProps } from "./common.js";
+/** Document creation, conversion and extraction. */
+export declare function DocumentsSection(props: ConfigProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=documents.d.ts.map

package/lib/types/client/settings/sections.d.ts

@@ -15,6 +15,7 @@ export { AccessSection } from "./sections/access.js";
 export { AccountsSection } from "./sections/accounts.js";
 export { AttachmentsSection } from "./sections/attachments.js";
 export { BrandingSection } from "./sections/branding.js";
+export { DocumentsSection } from "./sections/documents.js";
 export { EmbeddingSection } from "./sections/embedding.js";
 export { InterfaceSection } from "./sections/interface.js";
 export { LockdownSection } from "./sections/lockdown.js";

package/lib/types/client/settings-extensions/contract.d.ts

@@ -0,0 +1,32 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { ComponentType } from "react";
+/** Trusted browser identity supplied by QA Surface to a settings extension. */
+export interface QaUserSettingsSectionProps {
+    /** Current QA account token. It is used only as transport authentication. */
+    readonly token: string;
+}
+/** One first-class page in the signed-in user's QA settings dialog. */
+export interface QaUserSettingsSectionRegistration {
+    readonly id: string;
+    readonly title: string;
+    readonly order?: number;
+    readonly component: ComponentType<QaUserSettingsSectionProps>;
+}
+export interface QaUserSettingsSectionsSnapshot {
+    readonly sections: readonly QaUserSettingsSectionRegistration[];
+    readonly revision: number;
+}
+/** Client-side registry exposed by QA Surface to additive plugins. */
+export interface QaUserSettingsSections {
+    readonly subscribe: (listener: () => void) => () => void;
+    readonly getSnapshot: () => QaUserSettingsSectionsSnapshot;
+    register(section: QaUserSettingsSectionRegistration): () => void;
+}
+declare module "@deepseek-ai/cordis" {
+    interface Context {
+        qaUserSettingsSections: QaUserSettingsSections;
+    }
+}
+/** Structural face used by consumers that do not otherwise depend on Cordis. */
+export type QaUserSettingsSectionsContext = Pick<Context, "qaUserSettingsSections">;
+//# sourceMappingURL=contract.d.ts.map

package/lib/types/client/settings-extensions/index.d.ts

@@ -0,0 +1,3 @@
+export type { QaUserSettingsSectionProps, QaUserSettingsSectionRegistration, QaUserSettingsSections, QaUserSettingsSectionsContext, QaUserSettingsSectionsSnapshot, } from "./contract.js";
+export { QaUserSettingsSectionRegistry } from "./registry.js";
+//# sourceMappingURL=index.d.ts.map

package/lib/types/client/settings-extensions/registry.d.ts

@@ -0,0 +1,15 @@
+import type { QaUserSettingsSectionRegistration, QaUserSettingsSections, QaUserSettingsSectionsSnapshot } from "./contract.js";
+/** Deterministic, observable registry backing the settings extension service. */
+export declare class QaUserSettingsSectionRegistry implements QaUserSettingsSections {
+    private readonly entries;
+    private readonly listeners;
+    private revision;
+    private disposed;
+    private snapshot;
+    readonly subscribe: (listener: () => void) => (() => void);
+    readonly getSnapshot: () => QaUserSettingsSectionsSnapshot;
+    register(section: QaUserSettingsSectionRegistration): () => void;
+    dispose(): void;
+    private publish;
+}
+//# sourceMappingURL=registry.d.ts.map