@yadsh/dsh-qa-surface 0.7.4 → 0.8.0

package/lib/types/types.d.ts

@@ -45,6 +45,17 @@ export type QaPermission = "users.read" | "users.manage" | "roles.read" | "roles
 export interface QaToolSelection {
     readonly always: readonly string[];
     readonly skillGrantable: readonly string[];
+    /**
+     * Names this layer takes away, whatever grants them.
+     *
+     * The deployment's pinned tools and the Common layer reach every role, so
+     * without this a system tool could only be withdrawn by editing the profile
+     * and restarting the Host. A denial beats every grant — system, Common, the
+     * role's own list and every skill — and it narrows the ceiling a delegated
+     * assistant is held to, so one checkbox takes a tool away from a role and
+     * from the experts that role may spawn.
+     */
+    readonly deny?: readonly string[];
 }
 /** Tool/skill selection shared by the common layer and one QA subrole. */
 export interface QaCapabilitySelection {
@@ -434,6 +445,16 @@ export interface QaSkillRemoval {
 }
 export interface QaSourcesConfig {
     readonly enabled?: boolean;
+    /**
+     * How much durable provenance the deployment keeps. Every bound counts
+     * turns, shards or days, and zero keeps everything for that bound.
+     */
+    readonly retention?: {
+        readonly maxTurnsPerSession?: number;
+        readonly maxSessions?: number;
+        readonly maxAgeDays?: number;
+        readonly sweepIntervalMinutes?: number;
+    };
     readonly collect?: {
         readonly parentAgent?: boolean;
         readonly subagents?: boolean;
@@ -582,6 +603,21 @@ export interface QaSurfaceConfig {
         readonly enabled?: boolean;
         readonly allowRegistration?: boolean;
         readonly sessionTtlDays?: number;
+        /**
+         * Login/registration attempts accepted per rolling minute, store-wide.
+         * The limit backs the password checks, so the default stays tight.
+         */
+        readonly maxAuthAttemptsPerMinute?: number;
+        /**
+         * What happens to ownership records of chats the Harness no longer knows.
+         * A record is a chat's auth boundary, so only vanished chats are ever
+         * swept, and only after `ownershipGraceHours`.
+         */
+        readonly retention?: {
+            readonly pruneVanishedSessions?: boolean;
+            readonly ownershipGraceHours?: number;
+            readonly sweepIntervalMinutes?: number;
+        };
         /** Let admins see chats owned by other QA accounts. */
         readonly showOtherUsersChats?: boolean;
         /**
@@ -720,8 +756,15 @@ export interface ResolvedQaSurfaceConfig {
         readonly enabled: boolean;
         readonly allowRegistration: boolean;
         readonly sessionTtlDays: number;
+        /** Login/registration attempts accepted per rolling minute, store-wide. */
+        readonly maxAuthAttemptsPerMinute: number;
         readonly showOtherUsersChats: boolean;
         readonly perUserWorkspace: boolean;
+        readonly retention: {
+            readonly pruneVanishedSessions: boolean;
+            readonly ownershipGraceHours: number;
+            readonly sweepIntervalMinutes: number;
+        };
         readonly profile: {
             readonly enabled: boolean;
             readonly inject: boolean;
@@ -757,6 +800,12 @@ export interface ResolvedQaSurfaceConfig {
     };
     readonly sources: {
         readonly enabled: boolean;
+        readonly retention: {
+            readonly maxTurnsPerSession: number;
+            readonly maxSessions: number;
+            readonly maxAgeDays: number;
+            readonly sweepIntervalMinutes: number;
+        };
         readonly collect: {
             readonly parentAgent: boolean;
             readonly subagents: boolean;
@@ -1360,7 +1409,12 @@ export interface QaAdminUserDetail {
     readonly effective: readonly {
         readonly subroleId: string;
         readonly name: string;
+        /** Visible from the first step: system-required, Common and the role. */
         readonly tools: number;
+        /** The role's ceiling for tools a loaded skill requires. */
+        readonly grantableTools: number;
+        /** Tools the profile withdraws, whatever else grants them. */
+        readonly deniedTools: number;
         readonly skills: number;
     }[];
     readonly activity: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yadsh/dsh-qa-surface",
-  "version": "0.7.4",
+  "version": "0.8.0",
   "description": "A focused end-user QA surface backed by native DeepSeek Harness sessions",
   "repository": {
     "type": "git",
@@ -131,7 +131,8 @@
   "dependencies": {
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
-    "@yadsh/dsh-plugin-log": "^0.3.1"
+    "@yadsh/dsh-plugin-kit": "^0.2.0",
+    "@yadsh/dsh-plugin-log": "^0.4.0"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.2",
@@ -175,8 +176,7 @@
     "typescript": "^7.0.2",
     "vitest": "^4.1.11",
     "@yadsh/dsh-config": "^0.0.0",
-    "@yadsh/dsh-plugin-scripts": "^0.0.0",
-    "@yadsh/dsh-plugin-kit": "^0.1.0"
+    "@yadsh/dsh-plugin-scripts": "^0.0.0"
   },
   "publishConfig": {
     "access": "public",

package/lib/client/admin/format.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"format.js","sourceRoot":"","sources":["../../../src/client/admin/format.ts"],"names":[],"mappings":"AAWA;;;;GAIG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAA4C;IACxE,KAAK,EAAE,eAAe;IACtB,QAAQ,EAAE,SAAS;IACnB,IAAI,EAAE,cAAc;CACrB,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,UAAU;CACZ,CAAC;AAEX,MAAM,CAAC,MAAM,sBAAsB,GAE/B;IACF,SAAS,EAAE,gBAAgB;IAC3B,wBAAwB,EAAE,wBAAwB;IAClD,mBAAmB,EAAE,uBAAuB;IAC5C,oBAAoB,EAAE,uBAAuB;IAC7C,UAAU,EAAE,yBAAyB;IACrC,WAAW,EAAE,kBAAkB;IAC/B,SAAS,EAAE,gBAAgB;IAC3B,KAAK,EAAE,QAAQ;CAChB,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAA6C;IAC5E,UAAU,EAAE,cAAc;IAC1B,SAAS,EAAE,UAAU;IACrB,QAAQ,EAAE,WAAW;IACrB,cAAc,EAAE,iBAAiB;CAClC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAE/B;IACF,IAAI,EAAE,SAAS;IACf,MAAM,EAAE,SAAS;IACjB,GAAG,EAAE,QAAQ;CACd,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,iBAAiB,EAAE,mBAAmB;IACtC,MAAM,EAAE,sBAAsB;IAC9B,YAAY,EAAE,kBAAkB;IAChC,SAAS,EAAE,eAAe;CAClB,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAgD;IAC1E,KAAK,EAAE,gBAAgB;IACvB,KAAK,EAAE,cAAc;IACrB,QAAQ,EAAE,aAAa;CACxB,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAGnB;IACJ;QACE,KAAK,EAAE,OAAO;QACd,MAAM,EAAE;YACN,kBAAkB;YAClB,mBAAmB;YACnB,sBAAsB;YACtB,6BAA6B;YAC7B,wBAAwB;YACxB,sBAAsB;SACvB;KACF;IACD;QACE,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE;YACN,8BAA8B;YAC9B,2BAA2B;YAC3B,4BAA4B;SAC7B;KACF;IACD;QACE,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE;YACN,sBAAsB;YACtB,4BAA4B;YAC5B,oBAAoB;YACpB,cAAc;YACd,kBAAkB;SACnB;KACF;IACD;QACE,KAAK,EAAE,qBAAqB;QAC5B,MAAM,EAAE;YACN,eAAe;YACf,aAAa;YACb,oBAAoB;YACpB,qBAAqB;SACtB;KACF;IACD;QACE,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,CAAC,2BAA2B,EAAE,6BAA6B,CAAC;KACrE;IACD,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;CACvC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GACvB,MAAM,CAAC,WAAW,CAAC;IACjB,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;IACtC,CAAC,mBAAmB,EAAE,gBAAgB,CAAC;IACvC,CAAC,sBAAsB,EAAE,kBAAkB,CAAC;IAC5C,CAAC,6BAA6B,EAAE,sBAAsB,CAAC;IACvD,CAAC,wBAAwB,EAAE,mBAAmB,CAAC;IAC/C,CAAC,sBAAsB,EAAE,eAAe,CAAC;IACzC,CAAC,8BAA8B,EAAE,0BAA0B,CAAC;IAC5D,CAAC,2BAA2B,EAAE,mBAAmB,CAAC;IAClD,CAAC,4BAA4B,EAAE,mBAAmB,CAAC;IACnD,CAAC,sBAAsB,EAAE,0BAA0B,CAAC;IACpD,CAAC,4BAA4B,EAAE,2BAA2B,CAAC;IAC3D,CAAC,oBAAoB,EAAE,gCAAgC,CAAC;IACxD,CAAC,cAAc,EAAE,kBAAkB,CAAC;IACpC,CAAC,kBAAkB,EAAE,uBAAuB,CAAC;IAC7C,CAAC,eAAe,EAAE,mBAAmB,CAAC;IACtC,CAAC,aAAa,EAAE,qBAAqB,CAAC;IACtC,CAAC,oBAAoB,EAAE,mBAAmB,CAAC;IAC3C,CAAC,qBAAqB,EAAE,+BAA+B,CAAC;IACxD,CAAC,2BAA2B,EAAE,wBAAwB,CAAC;IACvD,CAAC,6BAA6B,EAAE,oBAAoB,CAAC;IACrD,CAAC,OAAO,EAAE,QAAQ,CAAC;CACyC,CAE7D,CAAC;AAEJ,MAAM,CAAC,MAAM,aAAa,GAAkD;IAC1E,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,YAAY;IAClB,SAAS,EAAE,aAAa;IACxB,KAAK,EAAE,QAAQ;IACf,IAAI,EAAE,sBAAsB;IAC5B,UAAU,EAAE,WAAW;IACvB,qBAAqB,EAAE,4BAA4B;IACnD,OAAO,EAAE,YAAY;CACtB,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAEtC;IACF,qBAAqB,EAAE,iDAAiD;IACxE,WAAW,EAAE,6BAA6B;IAC1C,UAAU,EACR,4EAA4E;CAC/E,CAAC;AAEF,mEAAmE;AACnE,MAAM,UAAU,UAAU,CAAC,KAAoB;IAC7C,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC;AAC9D,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,WAAW,CAAC,GAAuB;IACjD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;AAC/E,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,GAAG,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC/D,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,YAAY,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,OAAO,YAAY,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACvC,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,GAAG,KAAK,UAAU,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IACpC,IAAI,IAAI,GAAG,EAAE;QAAE,OAAO,GAAG,IAAI,WAAW,CAAC;IACzC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,cAAc,CAAC,EAAsB;IACnD,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAChC,IAAI,EAAE,GAAG,KAAK;QAAE,OAAO,GAAG,EAAE,KAAK,CAAC;IAClC,OAAO,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC"}