@yadsh/dsh-qa-surface 0.8.0 → 0.10.0

package/lib/types/types.d.ts

@@ -20,6 +20,12 @@ export type QaApprovalInteraction = "blocked" | "interactive";
  * refuses the ask outright; `interactive` answers it from the QA view.
  */
 export type QaQuestionInteraction = "unsupported" | "interactive";
+/**
+ * What a deployment may write for the question seam. `enabled` is accepted as
+ * the spelling of `interactive` a feature request asked for; the resolved
+ * config carries one name only.
+ */
+export type QaQuestionInteractionInput = QaQuestionInteraction | "enabled";
 /** The operator's answer to one parked tool call. */
 export type QaApprovalDecision = "allowed-once" | "rejected";
 /** One answered question; `custom` is free text, and may accompany `selected`. */
@@ -36,7 +42,7 @@ export interface QaQuestionAnswerItem {
  */
 export type QaAccountRole = "user" | "reviewer" | "admin";
 /** Administrative permissions a role grants; see `admin/permissions.ts`. */
-export type QaPermission = "users.read" | "users.manage" | "roles.read" | "roles.manage" | "conversations.read.all" | "conversations.read.own" | "reviews.read" | "reviews.write" | "analytics.read" | "audit.read" | "settings.manage";
+export type QaPermission = "users.read" | "users.manage" | "roles.read" | "roles.manage" | "conversations.read.all" | "conversations.read.own" | "conversations.delete" | "reviews.read" | "reviews.write" | "analytics.read" | "audit.read" | "settings.manage";
 /**
  * Tools split by how they become available. `always` is visible from the first
  * model step; `skillGrantable` is a ceiling — the tool only appears once an
@@ -483,6 +489,7 @@ export interface QaSourcesConfig {
         readonly allowRawToggle?: boolean;
         readonly maxBytes?: number;
         readonly maxMarkdownRenderBytes?: number;
+        readonly maxListingEntries?: number;
     };
     readonly subagents?: {
         readonly inheritSources?: boolean;
@@ -498,6 +505,30 @@ export interface QaSourcesConfig {
         readonly parseAssistantSourcesBlock?: boolean;
     };
 }
+/**
+ * The ambient notes the injector writes into a QA chat as plugin-sourced user
+ * messages (`prompt-notes.ts`). Each note can be switched off and reworded;
+ * an empty template keeps the built-in wording.
+ */
+export interface QaNotesConfig {
+    /** Who the assistant is talking to; `{identity}` + `{instructions}`. */
+    readonly identity?: {
+        readonly enabled?: boolean;
+        readonly template?: string;
+    };
+    /** Source-provenance rules; `{reportTool}` names the subagent report tool. */
+    readonly sources?: {
+        readonly enabled?: boolean;
+        readonly template?: string;
+        /** The sentence appended when the report-tool fallback is on. */
+        readonly fallbackTemplate?: string;
+    };
+    /** How to label background delegations; no placeholders. */
+    readonly delegation?: {
+        readonly enabled?: boolean;
+        readonly template?: string;
+    };
+}
 export interface QaSurfaceConfig {
     readonly enabled?: boolean;
     readonly route?: {
@@ -550,7 +581,7 @@ export interface QaSurfaceConfig {
     readonly thinkingPhrases?: readonly string[];
     readonly interaction?: {
         readonly approvals?: QaApprovalInteraction;
-        readonly questions?: QaQuestionInteraction;
+        readonly questions?: QaQuestionInteractionInput;
     };
     /**
      * QA tool delivery. Dynamic activation keeps the QA tool schemas out of the
@@ -582,7 +613,14 @@ export interface QaSurfaceConfig {
         readonly approvalPolicy?: QaApprovalPolicy;
         readonly permissionPreset?: string;
         readonly allowPermissionChanges?: false;
-        readonly allowSlashCommands?: false;
+        /**
+         * Master switch for the slash interface, and the only capability flag the
+         * resolver lets a deployment turn on. It opens the palette, which then
+         * offers exactly what `slashCommands` admits — human commands stay denied
+         * until the deployment names them. Nothing here widens the tool allow-list,
+         * the sandbox or the approval policy.
+         */
+        readonly allowSlashCommands?: boolean;
         readonly allowSettingsMutation?: false;
         readonly allowSessionReset?: boolean;
         readonly allowSessionRename?: false;
@@ -595,6 +633,12 @@ export interface QaSurfaceConfig {
         /** Shared directories available to read-only filesystem tools. */
         readonly sharedReadOnlyRoots?: readonly string[];
     };
+    /**
+     * Slash interface policy. Admission only: the QA surface never implements a
+     * skill or command registry, it decides which native ones reach the palette.
+     * Inert while `lockdown.allowSlashCommands` is off.
+     */
+    readonly slashCommands?: QaSlashCommandsConfig;
     readonly embedding?: {
         readonly frameAncestors?: string | null;
     };
@@ -665,6 +709,7 @@ export interface QaSurfaceConfig {
     };
     readonly sources?: QaSourcesConfig;
     readonly attachments?: QaAttachmentsConfig;
+    readonly notes?: QaNotesConfig;
 }
 /** What a QA visitor may attach to one message. */
 export interface QaAttachmentsConfig {
@@ -737,7 +782,7 @@ export interface ResolvedQaSurfaceConfig {
         readonly approvalPolicy: QaApprovalPolicy;
         readonly permissionPreset: string;
         readonly allowPermissionChanges: false;
-        readonly allowSlashCommands: false;
+        readonly allowSlashCommands: boolean;
         readonly allowSettingsMutation: false;
         readonly allowSessionReset: boolean;
         readonly allowSessionRename: false;
@@ -749,6 +794,7 @@ export interface ResolvedQaSurfaceConfig {
         };
         readonly sharedReadOnlyRoots: readonly string[];
     };
+    readonly slashCommands: ResolvedQaSlashCommands;
     readonly embedding: {
         readonly frameAncestors: string | null;
     };
@@ -834,6 +880,7 @@ export interface ResolvedQaSurfaceConfig {
             readonly allowRawToggle: boolean;
             readonly maxBytes: number;
             readonly maxMarkdownRenderBytes: number;
+            readonly maxListingEntries: number;
         };
         readonly subagents: {
             readonly inheritSources: boolean;
@@ -852,6 +899,178 @@ export interface ResolvedQaSurfaceConfig {
         readonly maxPending: number;
         readonly extensions: readonly string[];
     };
+    readonly notes: {
+        readonly identity: {
+            readonly enabled: boolean;
+            readonly template: string;
+        };
+        readonly sources: {
+            readonly enabled: boolean;
+            readonly template: string;
+            readonly fallbackTemplate: string;
+        };
+        readonly delegation: {
+            readonly enabled: boolean;
+            readonly template: string;
+        };
+    };
+}
+/** Which native registry one unified entry came from. */
+export type QaSlashEntryKind = "skill" | "command";
+/** How one half of the catalog admits native entries. */
+export type QaSlashPolicyMode = "deny-all" | "allow-list" | "all";
+export interface QaSlashPolicyConfig {
+    readonly mode?: QaSlashPolicyMode;
+    readonly allow?: readonly string[];
+}
+export interface QaSlashPaletteConfig {
+    readonly enabled?: boolean;
+    /** Run the two weakest matcher rungs (substring, subsequence). */
+    readonly fuzzySearch?: boolean;
+    readonly maxVisible?: number;
+    readonly showDescriptions?: boolean;
+    readonly showKindBadge?: boolean;
+}
+export interface QaSlashCommandsConfig {
+    readonly skills?: QaSlashPolicyConfig;
+    readonly commands?: QaSlashPolicyConfig;
+    readonly palette?: QaSlashPaletteConfig;
+}
+export interface ResolvedQaSlashCommands {
+    /** Mirror of `lockdown.allowSlashCommands`; the one master switch. */
+    readonly enabled: boolean;
+    readonly skills: {
+        readonly mode: QaSlashPolicyMode;
+        readonly allow: readonly string[];
+    };
+    readonly commands: {
+        readonly mode: QaSlashPolicyMode;
+        readonly allow: readonly string[];
+    };
+    readonly palette: {
+        readonly enabled: boolean;
+        readonly fuzzySearch: boolean;
+        readonly maxVisible: number;
+        readonly showDescriptions: boolean;
+        readonly showKindBadge: boolean;
+    };
+    /**
+     * True when the deployment turned the master switch on without declaring a
+     * `slashCommands` section: skills then admit every user-invocable skill the
+     * session already exposes, commands stay denied. The Host logs it once, so
+     * an upgrade cannot silently widen anything.
+     */
+    readonly legacyDefaults: boolean;
+}
+/**
+ * One palette row. `id` is the routing identity: skill and command may share a
+ * name, so identity is `skill:<name>` or `command:<name>` and never the bare
+ * name the two halves would collide on.
+ */
+export interface QaSlashCatalogEntry {
+    readonly id: string;
+    readonly kind: QaSlashEntryKind;
+    readonly name: string;
+    readonly description: string;
+    /** Skill-only: the native `whenToUse`, rendered as secondary copy. */
+    readonly whenToUse?: string;
+    /** Skill-only: whether the model is also offered this skill. */
+    readonly modelInvocable?: boolean;
+    /** Command-only: the advertised argument shape. */
+    readonly inputHint?: string;
+    /** Command-only: whether the executor admits composer attachments. */
+    readonly acceptsAttachments?: boolean;
+}
+/**
+ * Whether the command half of the catalog could be read. `inactive` is the
+ * ordinary state of a cold chat: the native command registry resolves through
+ * a live Agent, and a chat with none answers with no commands rather than an
+ * error — the palette then offers skills alone.
+ */
+export type QaSlashCommandSurface = "ready" | "unavailable" | "inactive";
+export interface QaSlashCatalog {
+    /** False while `lockdown.allowSlashCommands` is off. */
+    readonly enabled: boolean;
+    readonly entries: readonly QaSlashCatalogEntry[];
+    readonly commandSurface: QaSlashCommandSurface;
+    /**
+     * User-invocable skills of this chat that the deployment or the chat's role
+     * withheld from the palette. Naming them is what lets the browser warn about
+     * a `/name` typed inside an ordinary prompt — the native gesture path never
+     * consults this list, so it is a courtesy, not an authorization.
+     */
+    readonly deniedSkills: readonly string[];
+}
+/**
+ * One composer attachment offered to a human command. The same two shapes the
+ * prompt path uses — an image rides inline, a file rides its staged receipt —
+ * because the native executor admits both through one attachment store.
+ */
+export type QaSlashSubmitAttachment = {
+    readonly type: "image";
+    readonly mediaType: QaImageMediaType;
+    readonly data: string;
+    readonly name?: string;
+} | {
+    readonly type: "file";
+    readonly receiptId: string;
+};
+/** Why a command line was refused before, or instead of, running. */
+export type QaSlashRefusal = "slash-disabled" | "unknown-command" | "not-allowed" | "attachments-unsupported" | "inactive-session";
+export type QaSlashCommandOutcome = {
+    readonly kind: "success";
+    readonly text?: string;
+    /** Earlier authoritative event this result is presented from. */
+    readonly sourceEventSeq?: number;
+} | {
+    readonly kind: "error";
+    readonly text: string;
+};
+/**
+ * The result of one admitted command. `refused` is an admission decision and
+ * costs nothing; `executed` means the native runtime ran the handler and the
+ * lifecycle is already in the session log, which is what the transcript row
+ * projects.
+ */
+export type QaSlashExecution = {
+    readonly kind: "executed";
+    readonly commandId: string;
+    readonly outcome: QaSlashCommandOutcome;
+} | {
+    readonly kind: "refused";
+    readonly reason: QaSlashRefusal;
+    /** Host-authored detail; the browser renders its own copy for `reason`. */
+    readonly message: string;
+};
+/** One entry of the palette the browser is filtering. */
+export interface QaSlashView {
+    readonly enabled: boolean;
+    readonly state: "idle" | "loading" | "ready" | "error";
+    readonly entries: readonly QaSlashCatalogEntry[];
+    readonly commandSurface: QaSlashCommandSurface;
+    readonly deniedSkills: readonly string[];
+    /** Set when the catalog could not be read; ordinary prompts keep working. */
+    readonly error: string | null;
+    /**
+     * Bumped when the surface must re-open a palette the user had dismissed —
+     * an ambiguous `/name` is the case that needs it. The composer watches the
+     * counter rather than the message, so a refusal can be re-stated.
+     */
+    readonly reopen: number;
+}
+/**
+ * One human command line projected into the transcript. Commands never enter
+ * the model conversation, so this row is their only visible trace; it is a
+ * control row, not an assistant bubble.
+ */
+export interface QaCommandActivity {
+    readonly commandId: string;
+    readonly name: string;
+    /** Verbatim text after the name, with its separator whitespace removed. */
+    readonly args?: string;
+    readonly state: "running" | "success" | "error";
+    readonly resultText?: string;
+    readonly sourceEventSeq?: number;
 }
 export interface QaSourceFilePreview {
     readonly path: string;
@@ -861,6 +1080,51 @@ export interface QaSourceFilePreview {
     readonly markdown: boolean;
     readonly renderableMarkdown: boolean;
 }
+/**
+ * A file the panel renders by conversion rather than by bytes: the document
+ * pipeline turned a Word file into PDF, and the browser shows that PDF.
+ */
+export interface QaDocumentPreview {
+    readonly kind: "pdf";
+    readonly base64: string;
+    readonly mime: "application/pdf";
+    readonly name: string;
+    readonly bytes: number;
+}
+/** One directory entry of a chat's own workspace, as the files panel browses it. */
+export interface QaWorkspaceEntry {
+    readonly name: string;
+    readonly type: "file" | "directory";
+    readonly size: number | null;
+}
+/**
+ * One directory of the chat's workspace. `path` is the canonical form of the
+ * directory as requested — the chat root itself is the empty string — so the
+ * panel can build a breadcrumb without another round trip.
+ */
+export interface QaWorkspaceListing {
+    readonly path: string;
+    readonly entries: readonly QaWorkspaceEntry[];
+    /** More children existed than one listing carries. */
+    readonly truncated: boolean;
+}
+/**
+ * One file of the chat's workspace: decoded text when it reads as UTF-8, base64
+ * bytes when it does not. The panel needs both — documents the agent produced
+ * are binary, while notes and transcripts preview as text.
+ */
+export interface QaWorkspaceFile {
+    readonly path: string;
+    readonly size: number;
+    readonly truncated: boolean;
+    readonly markdown: boolean;
+    readonly renderableMarkdown: boolean;
+    readonly mime: string;
+    /** Present when the file decoded as text; absent for binary content. */
+    readonly text?: string;
+    /** Present when the file is not text; base64 of at most the byte cap. */
+    readonly base64?: string;
+}
 /** Host-attested facts required before the QA composer may become writable. */
 export interface QaLockdownProof {
     readonly sessionId: string;
@@ -927,6 +1191,11 @@ export type QaMessage = QaUserMessage | {
     readonly text: string;
     readonly status: "info" | "error";
     readonly timestamp?: number;
+    /**
+     * Set on a human command row. Commands stay out of the model
+     * conversation, so this projection is the only trace the user sees.
+     */
+    readonly command?: QaCommandActivity;
     /** Collapsible settlement row (subagent finished/stopped/failed). */
     readonly notice?: {
         readonly title: string;
@@ -1088,6 +1357,8 @@ export interface QaSessionState {
     readonly approvals: readonly QaPendingApproval[];
     /** Question requests parked for the operator's answer, oldest first. */
     readonly questions: readonly QaPendingQuestion[];
+    /** Slash palette state, keyed to the chat this snapshot describes. */
+    readonly slash: QaSlashView;
 }
 /** Minimal server-trusted identity exposed to principal-scoped plugins. */
 export interface QaPrincipal {
@@ -1173,7 +1444,7 @@ export interface QaReviewQueueItem {
     readonly feedbackId?: string;
 }
 /** Administrative actions recorded in the audit trail. */
-export type QaAdminAuditAction = "user.created" | "user.updated" | "user.enabled" | "user.disabled" | "authorization.changed" | "subrole.assignment.changed" | "subrole.created" | "subrole.updated" | "subrole.deleted" | "common_capabilities.updated" | "conversation.reviewed" | "review.updated" | "review.queued" | "admin.settings.updated";
+export type QaAdminAuditAction = "user.created" | "user.updated" | "user.enabled" | "user.disabled" | "authorization.changed" | "subrole.assignment.changed" | "subrole.created" | "subrole.updated" | "subrole.deleted" | "common_capabilities.updated" | "conversation.reviewed" | "conversation.deleted" | "review.updated" | "review.queued" | "admin.settings.updated";
 export interface QaAdminAuditEvent {
     readonly id: string;
     readonly timestamp: string;
@@ -1266,6 +1537,17 @@ export interface QaConversationDetail {
     readonly reviews: readonly QaConversationReview[];
     readonly queueItems: readonly QaReviewQueueItem[];
 }
+/** What one administrative deletion removed, for the console to report. */
+export interface QaConversationDeletion {
+    readonly conversationId: string;
+    /**
+     * Every session whose stored log is gone, the chat first: a conversation's
+     * subagent sessions are part of it and are removed with it.
+     */
+    readonly sessions: readonly string[];
+    /** Quality rows dropped with the conversation. */
+    readonly qualityRows: number;
+}
 /**
  * Server-side filter for the conversation list. Every field is optional and
  * accepts an explicit null: the wire carries whatever the browser has, and an
@@ -1419,7 +1701,12 @@ export interface QaAdminUserDetail {
     }[];
     readonly activity: {
         readonly conversations: number;
-        readonly messages: number;
+        /**
+         * Unknown until the conversations page is opened: the count needs every
+         * conversation's log read, so the detail card reports null instead of
+         * blocking its payload on the scan.
+         */
+        readonly messages: number | null;
         readonly positiveRatings: number;
         readonly negativeRatings: number;
     };

package/lib/types/ui-mode.d.ts

@@ -0,0 +1,18 @@
+/**
+ * The deployment UI mode, as the host half of the plugin sees it.
+ *
+ * `DSH_UI_MODE=qa` (the kiosk) moves the frontend URL-space ownership from
+ * this plugin to the harness: the harness route policy serves `/qa` directly,
+ * redirects `/` into it, and answers every other frontend path with 404. The
+ * plugin's own navigation redirect route must then stay unregistered — it
+ * exists for the overlay composition, where the index is served at `/` and a
+ * browser navigation to `/qa` has to bounce through the marker hand-off —
+ * because a registered route shadows the harness fallback seat and would
+ * loop every `/qa` navigation back onto itself.
+ */
+/**
+ * Whether this harness process runs the QA kiosk UI mode.
+ * @param env - the process environment; overridable for tests.
+ */
+export declare function qaKioskDeployment(env?: Readonly<Record<string, string | undefined>>): boolean;
+//# sourceMappingURL=ui-mode.d.ts.map

package/lib/ui-mode.js

@@ -0,0 +1,22 @@
+/**
+ * The deployment UI mode, as the host half of the plugin sees it.
+ *
+ * `DSH_UI_MODE=qa` (the kiosk) moves the frontend URL-space ownership from
+ * this plugin to the harness: the harness route policy serves `/qa` directly,
+ * redirects `/` into it, and answers every other frontend path with 404. The
+ * plugin's own navigation redirect route must then stay unregistered — it
+ * exists for the overlay composition, where the index is served at `/` and a
+ * browser navigation to `/qa` has to bounce through the marker hand-off —
+ * because a registered route shadows the harness fallback seat and would
+ * loop every `/qa` navigation back onto itself.
+ */
+/** Environment variable selecting the deployment UI mode (`qa` = kiosk). */
+const UI_MODE_ENV = "DSH_UI_MODE";
+/**
+ * Whether this harness process runs the QA kiosk UI mode.
+ * @param env - the process environment; overridable for tests.
+ */
+export function qaKioskDeployment(env = process.env) {
+    return (env[UI_MODE_ENV] ?? "").trim() === "qa";
+}
+//# sourceMappingURL=ui-mode.js.map

package/lib/ui-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-mode.js","sourceRoot":"","sources":["../src/ui-mode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,4EAA4E;AAC5E,MAAM,WAAW,GAAG,aAAa,CAAC;AAElC;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAG,GAAiD,OAAO,CAAC,GAAG;IAE/D,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC;AAClD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yadsh/dsh-qa-surface",
-  "version": "0.8.0",
+  "version": "0.10.0",
   "description": "A focused end-user QA surface backed by native DeepSeek Harness sessions",
   "repository": {
     "type": "git",
@@ -16,7 +16,8 @@
   "types": "./lib/types/index.d.ts",
   "bin": {
     "qa-accounts": "./lib/cli.js",
-    "qa-repair-sessions": "./scripts/repair-session-events.mjs"
+    "qa-repair-sessions": "./scripts/repair-session-events.mjs",
+    "qa-attach-sessions": "./scripts/attach-workspace-sessions.mjs"
   },
   "exports": {
     ".": {
@@ -76,6 +77,7 @@
     "lib/**/*.js.map",
     "lib/**/*.d.ts",
     "scripts/repair-session-events.mjs",
+    "scripts/attach-workspace-sessions.mjs",
     "cordis.patch.yml",
     "compatibility.json",
     "capability-policy.json",
@@ -100,15 +102,14 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.2",
-    "@deepseek-ai/schemastery": "^3.18.2",
-    "@deepseek-ai/dsh-api-gateway": ">=0.1.5-rc.2 <0.2.0",
     "@deepseek-ai/dsh-agent": ">=0.1.5-rc.2 <0.2.0",
     "@deepseek-ai/dsh-agent-presets": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-api-gateway": ">=0.1.5-rc.2 <0.2.0",
     "@deepseek-ai/dsh-api-session-controller": ">=0.1.5-rc.2 <0.2.0",
     "@deepseek-ai/dsh-api-workspace-controller": ">=0.1.5-rc.2 <0.2.0",
     "@deepseek-ai/dsh-client-connection": ">=0.1.5-rc.2 <0.2.0",
-    "@deepseek-ai/dsh-client-ui-conversation": ">=0.1.5-rc.2 <0.2.0",
     "@deepseek-ai/dsh-client-ui-chat": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/dsh-client-ui-conversation": ">=0.1.5-rc.2 <0.2.0",
     "@deepseek-ai/dsh-client-ui-layout": ">=0.1.5-rc.2 <0.2.0",
     "@deepseek-ai/dsh-client-ui-renderer": ">=0.1.5-rc.2 <0.2.0",
     "@deepseek-ai/dsh-client-ui-settings": ">=0.1.5-rc.2 <0.2.0",
@@ -125,26 +126,29 @@
     "@deepseek-ai/dsh-tools": ">=0.1.5-rc.2 <0.2.0",
     "@deepseek-ai/dsh-typert-protocol": ">=0.1.5-rc.2 <0.2.0",
     "@deepseek-ai/dsh-workspace": ">=0.1.5-rc.2 <0.2.0",
+    "@deepseek-ai/schemastery": "^3.18.2",
     "react": "^18.2.0",
     "react-dom": "^18.2.0"
   },
   "dependencies": {
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
-    "@yadsh/dsh-plugin-kit": "^0.2.0",
+    "@yadsh/dsh-audit-core": "^0.1.0",
+    "@yadsh/dsh-audit-ui": "^0.1.0",
+    "@yadsh/dsh-documents": "^0.4.0",
+    "@yadsh/dsh-plugin-kit": "^0.3.0",
     "@yadsh/dsh-plugin-log": "^0.4.0"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.2",
-    "@deepseek-ai/schemastery": "3.18.2",
-    "@deepseek-ai/dsh-api-gateway": "0.1.5-rc.2",
     "@deepseek-ai/dsh-agent": "0.1.5-rc.2",
     "@deepseek-ai/dsh-agent-presets": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-api-gateway": "0.1.5-rc.2",
     "@deepseek-ai/dsh-api-session-controller": "0.1.5-rc.2",
     "@deepseek-ai/dsh-api-workspace-controller": "0.1.5-rc.2",
     "@deepseek-ai/dsh-client-connection": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-client-ui-conversation": "0.1.5-rc.2",
     "@deepseek-ai/dsh-client-ui-chat": "0.1.5-rc.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.5-rc.2",
     "@deepseek-ai/dsh-client-ui-layout": "0.1.5-rc.2",
     "@deepseek-ai/dsh-client-ui-renderer": "0.1.5-rc.2",
     "@deepseek-ai/dsh-client-ui-settings": "0.1.5-rc.2",
@@ -163,12 +167,14 @@
     "@deepseek-ai/dsh-typert-generator": "0.1.5-rc.2",
     "@deepseek-ai/dsh-typert-protocol": "0.1.5-rc.2",
     "@deepseek-ai/dsh-workspace": "0.1.5-rc.2",
+    "@deepseek-ai/schemastery": "3.18.2",
     "@testing-library/react": "^16.3.0",
     "@types/node": "^26.4.0",
     "@types/react": "18.3.28",
     "@types/react-dom": "18.3.7",
     "eslint": "10.9.1",
     "jsdom": "^26.1.0",
+    "katex": "^0.16.47",
     "playwright": "1.62.1",
     "react": "18.3.1",
     "react-dom": "18.3.1",