@yadsh/dsh-qa-surface 0.9.0 → 0.11.0

package/lib/index.js

@@ -37,7 +37,7 @@ import { Remote, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 import { SessionId } from "@deepseek-ai/dsh-session/types";
 import { WorkspaceId } from "@deepseek-ai/dsh-workspace";
 import { createHostLoggerSink, getPluginLogger, } from "@yadsh/dsh-plugin-log";
-import { ConfigSchema, resolveConfig } from "./config.js";
+import { ConfigSchema, qaSurfaceVersion, resolveConfig } from "./config.js";
 import { createQaAccountRemotes } from "./account-remotes.js";
 import { QaAdminService } from "./admin/service.js";
 import { QaQualityStore } from "./admin/quality-store.js";
@@ -45,12 +45,17 @@ import { createSessionEraser, createSessionLogReader, } from "./admin/session-lo
 import { createQaPersonalSkillRemotes, QaPersonalSkillsHost, } from "./personal-skills/index.js";
 import { QaApprovalGate } from "./approvals.js";
 import { QaAttestationError, qaAttestationFailureMessage, } from "./attestation.js";
+import { QaFileDeleteGate } from "./qa-tools/file-delete-gate.js";
 import { QaQuestionGate } from "./questions.js";
 import { QaSessionOwnership } from "./session-ownership.js";
 import { entryRedirectRow } from "./entry-redirect.js";
+import { qaKioskDeployment } from "./ui-mode.js";
 import { registerQaNavigationRoute } from "./host-route.js";
 import { makeLaunchTokenSource } from "./launch-token.js";
 import { QaIntegrationPrincipalBindings } from "./integration-principals.js";
+import { registerQaIntegrationRoutes } from "./integration/http.js";
+import { createQaIntegrationRunner } from "./integration/host-runner.js";
+import { QaIntegrationService } from "./integration/service.js";
 import { QaPolicyAdmission } from "./secure-session.js";
 import { QaAccessService } from "./access/service.js";
 import { createQaSlashRemotes } from "./slash/remotes.js";
@@ -58,7 +63,8 @@ import { QaPromptNotes } from "./prompt-notes.js";
 import { QaTools } from "./qa-tools/index.js";
 import { QaProvenanceHost } from "./provenance/host-store.js";
 import { defaultLegacyProvenanceFilePath, defaultQaProvenanceDirectoryPath, FileQaProvenanceSnapshotStore, } from "./provenance/snapshot-store.js";
-import { readSourceFilePreview, QaSourcePreviewError, } from "./provenance/file-preview.js";
+import { previewConvertibleDocument } from "./provenance/document-preview.js";
+import { listWorkspaceDirectory, readSourceFilePreview, readWorkspaceFile, QaSourcePreviewError, } from "./provenance/file-preview.js";
 import { existingQaUserWorkspace, prepareQaUserWorkspace, } from "./user-workspace.js";
 export const name = "qa-surface";
 export const inject = [
@@ -90,12 +96,17 @@ let QaSurface = (() => {
     let _instanceExtraInitializers = [];
     let _accountsRegister_decorators;
     let _accountsLogin_decorators;
+    let _accountsChangePassword_decorators;
+    let _accountsRequestPasswordReset_decorators;
     let _accountsWhoami_decorators;
     let _accountsClaimSessions_decorators;
     let _accountsOwnedSessions_decorators;
     let _accountsListOwnership_decorators;
     let _accountsUpdateProfile_decorators;
     let _accountsUpdateStarters_decorators;
+    let _accountsListServiceTokens_decorators;
+    let _accountsCreateServiceToken_decorators;
+    let _accountsRevokeServiceToken_decorators;
     let _describe_decorators;
     let _createSession_decorators;
     let _accessCurrent_decorators;
@@ -108,10 +119,18 @@ let QaSurface = (() => {
     let _accessUpdateAssignment_decorators;
     let _accessUpdateSkillOverride_decorators;
     let _accessSkillActivations_decorators;
+    let _adminSkills_decorators;
+    let _adminSkill_decorators;
+    let _adminSkillSave_decorators;
+    let _adminSkillDelete_decorators;
+    let _adminSkillValidate_decorators;
+    let _adminSkillTools_decorators;
     let _adminOverview_decorators;
     let _adminUsers_decorators;
     let _adminUser_decorators;
     let _adminUpdateUser_decorators;
+    let _adminPasswordResetRequests_decorators;
+    let _adminResetPassword_decorators;
     let _adminConversations_decorators;
     let _adminConversation_decorators;
     let _adminDeleteConversation_decorators;
@@ -130,6 +149,9 @@ let QaSurface = (() => {
     let _answerQuestion_decorators;
     let _cancelQuestion_decorators;
     let _readSourceFile_decorators;
+    let _listWorkspaceFiles_decorators;
+    let _readWorkspaceFile_decorators;
+    let _previewWorkspaceDocument_decorators;
     let _skillsList_decorators;
     let _skillsGet_decorators;
     let _skillsCreate_decorators;
@@ -144,12 +166,17 @@ let QaSurface = (() => {
             const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
             _accountsRegister_decorators = [Remote("accountsRegister")];
             _accountsLogin_decorators = [Remote("accountsLogin")];
+            _accountsChangePassword_decorators = [Remote("accountsChangePassword")];
+            _accountsRequestPasswordReset_decorators = [Remote("accountsRequestPasswordReset")];
             _accountsWhoami_decorators = [Remote("accountsWhoami")];
             _accountsClaimSessions_decorators = [Remote("accountsClaimSessions")];
             _accountsOwnedSessions_decorators = [Remote("accountsOwnedSessions")];
             _accountsListOwnership_decorators = [Remote("accountsListOwnership")];
             _accountsUpdateProfile_decorators = [Remote("accountsUpdateProfile")];
             _accountsUpdateStarters_decorators = [Remote("accountsUpdateStarters")];
+            _accountsListServiceTokens_decorators = [Remote("accountsListServiceTokens")];
+            _accountsCreateServiceToken_decorators = [Remote("accountsCreateServiceToken")];
+            _accountsRevokeServiceToken_decorators = [Remote("accountsRevokeServiceToken")];
             _describe_decorators = [Remote("describe")];
             _createSession_decorators = [Remote("createSession")];
             _accessCurrent_decorators = [Remote("accessCurrent")];
@@ -162,10 +189,18 @@ let QaSurface = (() => {
             _accessUpdateAssignment_decorators = [Remote("accessUpdateAssignment")];
             _accessUpdateSkillOverride_decorators = [Remote("accessUpdateSkillOverride")];
             _accessSkillActivations_decorators = [Remote("accessSkillActivations")];
+            _adminSkills_decorators = [Remote("adminSkills")];
+            _adminSkill_decorators = [Remote("adminSkill")];
+            _adminSkillSave_decorators = [Remote("adminSkillSave")];
+            _adminSkillDelete_decorators = [Remote("adminSkillDelete")];
+            _adminSkillValidate_decorators = [Remote("adminSkillValidate")];
+            _adminSkillTools_decorators = [Remote("adminSkillTools")];
             _adminOverview_decorators = [Remote("adminOverview")];
             _adminUsers_decorators = [Remote("adminUsers")];
             _adminUser_decorators = [Remote("adminUser")];
             _adminUpdateUser_decorators = [Remote("adminUpdateUser")];
+            _adminPasswordResetRequests_decorators = [Remote("adminPasswordResetRequests")];
+            _adminResetPassword_decorators = [Remote("adminResetPassword")];
             _adminConversations_decorators = [Remote("adminConversations")];
             _adminConversation_decorators = [Remote("adminConversation")];
             _adminDeleteConversation_decorators = [Remote("adminDeleteConversation")];
@@ -184,6 +219,9 @@ let QaSurface = (() => {
             _answerQuestion_decorators = [Remote("answerQuestion")];
             _cancelQuestion_decorators = [Remote("cancelQuestion")];
             _readSourceFile_decorators = [Remote("readSourceFile")];
+            _listWorkspaceFiles_decorators = [Remote("listWorkspaceFiles")];
+            _readWorkspaceFile_decorators = [Remote("readWorkspaceFile")];
+            _previewWorkspaceDocument_decorators = [Remote("previewWorkspaceDocument")];
             _skillsList_decorators = [Remote("skillsList")];
             _skillsGet_decorators = [Remote("skillsGet")];
             _skillsCreate_decorators = [Remote("skillsCreate")];
@@ -195,12 +233,17 @@ let QaSurface = (() => {
             _slashExecute_decorators = [Remote("slashExecute")];
             __esDecorate(this, null, _accountsRegister_decorators, { kind: "method", name: "accountsRegister", static: false, private: false, access: { has: obj => "accountsRegister" in obj, get: obj => obj.accountsRegister }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _accountsLogin_decorators, { kind: "method", name: "accountsLogin", static: false, private: false, access: { has: obj => "accountsLogin" in obj, get: obj => obj.accountsLogin }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _accountsChangePassword_decorators, { kind: "method", name: "accountsChangePassword", static: false, private: false, access: { has: obj => "accountsChangePassword" in obj, get: obj => obj.accountsChangePassword }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _accountsRequestPasswordReset_decorators, { kind: "method", name: "accountsRequestPasswordReset", static: false, private: false, access: { has: obj => "accountsRequestPasswordReset" in obj, get: obj => obj.accountsRequestPasswordReset }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _accountsWhoami_decorators, { kind: "method", name: "accountsWhoami", static: false, private: false, access: { has: obj => "accountsWhoami" in obj, get: obj => obj.accountsWhoami }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _accountsClaimSessions_decorators, { kind: "method", name: "accountsClaimSessions", static: false, private: false, access: { has: obj => "accountsClaimSessions" in obj, get: obj => obj.accountsClaimSessions }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _accountsOwnedSessions_decorators, { kind: "method", name: "accountsOwnedSessions", static: false, private: false, access: { has: obj => "accountsOwnedSessions" in obj, get: obj => obj.accountsOwnedSessions }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _accountsListOwnership_decorators, { kind: "method", name: "accountsListOwnership", static: false, private: false, access: { has: obj => "accountsListOwnership" in obj, get: obj => obj.accountsListOwnership }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _accountsUpdateProfile_decorators, { kind: "method", name: "accountsUpdateProfile", static: false, private: false, access: { has: obj => "accountsUpdateProfile" in obj, get: obj => obj.accountsUpdateProfile }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _accountsUpdateStarters_decorators, { kind: "method", name: "accountsUpdateStarters", static: false, private: false, access: { has: obj => "accountsUpdateStarters" in obj, get: obj => obj.accountsUpdateStarters }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _accountsListServiceTokens_decorators, { kind: "method", name: "accountsListServiceTokens", static: false, private: false, access: { has: obj => "accountsListServiceTokens" in obj, get: obj => obj.accountsListServiceTokens }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _accountsCreateServiceToken_decorators, { kind: "method", name: "accountsCreateServiceToken", static: false, private: false, access: { has: obj => "accountsCreateServiceToken" in obj, get: obj => obj.accountsCreateServiceToken }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _accountsRevokeServiceToken_decorators, { kind: "method", name: "accountsRevokeServiceToken", static: false, private: false, access: { has: obj => "accountsRevokeServiceToken" in obj, get: obj => obj.accountsRevokeServiceToken }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _describe_decorators, { kind: "method", name: "describe", static: false, private: false, access: { has: obj => "describe" in obj, get: obj => obj.describe }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _createSession_decorators, { kind: "method", name: "createSession", static: false, private: false, access: { has: obj => "createSession" in obj, get: obj => obj.createSession }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _accessCurrent_decorators, { kind: "method", name: "accessCurrent", static: false, private: false, access: { has: obj => "accessCurrent" in obj, get: obj => obj.accessCurrent }, metadata: _metadata }, null, _instanceExtraInitializers);
@@ -213,10 +256,18 @@ let QaSurface = (() => {
             __esDecorate(this, null, _accessUpdateAssignment_decorators, { kind: "method", name: "accessUpdateAssignment", static: false, private: false, access: { has: obj => "accessUpdateAssignment" in obj, get: obj => obj.accessUpdateAssignment }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _accessUpdateSkillOverride_decorators, { kind: "method", name: "accessUpdateSkillOverride", static: false, private: false, access: { has: obj => "accessUpdateSkillOverride" in obj, get: obj => obj.accessUpdateSkillOverride }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _accessSkillActivations_decorators, { kind: "method", name: "accessSkillActivations", static: false, private: false, access: { has: obj => "accessSkillActivations" in obj, get: obj => obj.accessSkillActivations }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _adminSkills_decorators, { kind: "method", name: "adminSkills", static: false, private: false, access: { has: obj => "adminSkills" in obj, get: obj => obj.adminSkills }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _adminSkill_decorators, { kind: "method", name: "adminSkill", static: false, private: false, access: { has: obj => "adminSkill" in obj, get: obj => obj.adminSkill }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _adminSkillSave_decorators, { kind: "method", name: "adminSkillSave", static: false, private: false, access: { has: obj => "adminSkillSave" in obj, get: obj => obj.adminSkillSave }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _adminSkillDelete_decorators, { kind: "method", name: "adminSkillDelete", static: false, private: false, access: { has: obj => "adminSkillDelete" in obj, get: obj => obj.adminSkillDelete }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _adminSkillValidate_decorators, { kind: "method", name: "adminSkillValidate", static: false, private: false, access: { has: obj => "adminSkillValidate" in obj, get: obj => obj.adminSkillValidate }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _adminSkillTools_decorators, { kind: "method", name: "adminSkillTools", static: false, private: false, access: { has: obj => "adminSkillTools" in obj, get: obj => obj.adminSkillTools }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _adminOverview_decorators, { kind: "method", name: "adminOverview", static: false, private: false, access: { has: obj => "adminOverview" in obj, get: obj => obj.adminOverview }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _adminUsers_decorators, { kind: "method", name: "adminUsers", static: false, private: false, access: { has: obj => "adminUsers" in obj, get: obj => obj.adminUsers }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _adminUser_decorators, { kind: "method", name: "adminUser", static: false, private: false, access: { has: obj => "adminUser" in obj, get: obj => obj.adminUser }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _adminUpdateUser_decorators, { kind: "method", name: "adminUpdateUser", static: false, private: false, access: { has: obj => "adminUpdateUser" in obj, get: obj => obj.adminUpdateUser }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _adminPasswordResetRequests_decorators, { kind: "method", name: "adminPasswordResetRequests", static: false, private: false, access: { has: obj => "adminPasswordResetRequests" in obj, get: obj => obj.adminPasswordResetRequests }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _adminResetPassword_decorators, { kind: "method", name: "adminResetPassword", static: false, private: false, access: { has: obj => "adminResetPassword" in obj, get: obj => obj.adminResetPassword }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _adminConversations_decorators, { kind: "method", name: "adminConversations", static: false, private: false, access: { has: obj => "adminConversations" in obj, get: obj => obj.adminConversations }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _adminConversation_decorators, { kind: "method", name: "adminConversation", static: false, private: false, access: { has: obj => "adminConversation" in obj, get: obj => obj.adminConversation }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _adminDeleteConversation_decorators, { kind: "method", name: "adminDeleteConversation", static: false, private: false, access: { has: obj => "adminDeleteConversation" in obj, get: obj => obj.adminDeleteConversation }, metadata: _metadata }, null, _instanceExtraInitializers);
@@ -235,6 +286,9 @@ let QaSurface = (() => {
             __esDecorate(this, null, _answerQuestion_decorators, { kind: "method", name: "answerQuestion", static: false, private: false, access: { has: obj => "answerQuestion" in obj, get: obj => obj.answerQuestion }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _cancelQuestion_decorators, { kind: "method", name: "cancelQuestion", static: false, private: false, access: { has: obj => "cancelQuestion" in obj, get: obj => obj.cancelQuestion }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _readSourceFile_decorators, { kind: "method", name: "readSourceFile", static: false, private: false, access: { has: obj => "readSourceFile" in obj, get: obj => obj.readSourceFile }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _listWorkspaceFiles_decorators, { kind: "method", name: "listWorkspaceFiles", static: false, private: false, access: { has: obj => "listWorkspaceFiles" in obj, get: obj => obj.listWorkspaceFiles }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _readWorkspaceFile_decorators, { kind: "method", name: "readWorkspaceFile", static: false, private: false, access: { has: obj => "readWorkspaceFile" in obj, get: obj => obj.readWorkspaceFile }, metadata: _metadata }, null, _instanceExtraInitializers);
+            __esDecorate(this, null, _previewWorkspaceDocument_decorators, { kind: "method", name: "previewWorkspaceDocument", static: false, private: false, access: { has: obj => "previewWorkspaceDocument" in obj, get: obj => obj.previewWorkspaceDocument }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _skillsList_decorators, { kind: "method", name: "skillsList", static: false, private: false, access: { has: obj => "skillsList" in obj, get: obj => obj.skillsList }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _skillsGet_decorators, { kind: "method", name: "skillsGet", static: false, private: false, access: { has: obj => "skillsGet" in obj, get: obj => obj.skillsGet }, metadata: _metadata }, null, _instanceExtraInitializers);
             __esDecorate(this, null, _skillsCreate_decorators, { kind: "method", name: "skillsCreate", static: false, private: false, access: { has: obj => "skillsCreate" in obj, get: obj => obj.skillsCreate }, metadata: _metadata }, null, _instanceExtraInitializers);
@@ -252,6 +306,7 @@ let QaSurface = (() => {
         logger;
         admission;
         approvals;
+        fileDeleteGate;
         userQuestions;
         provenance;
         notes;
@@ -282,6 +337,14 @@ let QaSurface = (() => {
         webServer;
         disposeRoute;
         routeKey;
+        /**
+         * The HTTP API an external application asks questions through. Constructed
+         * always — it is cheap and stateless until a request arrives — and exposed
+         * on the network only while the deployment turns it on.
+         */
+        integration;
+        disposeIntegrationRoutes;
+        integrationRouteKey;
         /**
          * The quality store opens its file on first use, so a deployment that never
          * opens the admin console never grows one.
@@ -332,6 +395,10 @@ let QaSurface = (() => {
                 // per-browser row, and only an administrator removes the chat itself.
                 sessionFiles: createSessionEraser(),
                 dropSources: (sessionId) => this.provenance.dropSession(sessionId),
+                // The console writes skills through the same service the owner's editor
+                // uses, so an administrator's save is path-checked, validated and
+                // published to DSH by exactly the one code path that already does it.
+                skills: () => this.personalSkills.service,
                 logger: this.logger,
             });
             this.skillRemotes = createQaPersonalSkillRemotes({
@@ -355,17 +422,41 @@ let QaSurface = (() => {
                         ?.ensureSessionAccess(token, sessionId, facts);
                 },
                 userWorkspace: (userId, registeredWorkspacePath) => existingQaUserWorkspace(registeredWorkspacePath, userId),
+                // Read only by the integration API, whose caller proved an account
+                // with a service token instead of a browser one. The ownership
+                // record stays the authority either way.
+                ownerIdOf: (sessionId) => this.accountRemotes.resolve(this.getConfig())?.ownerIdOf(sessionId),
             }, 
             // Legacy account-free sessions retain the dynamic catalog behavior;
             // role-managed sessions authorize its known entries through the frozen
             // capability policy instead.
-            (agent) => this.tools?.activeToolNames(agent) ?? [], (token, sessionId, agent) => this.access.policyForSession(token, sessionId, agent), () => this.tools?.catalogToolNames() ?? []);
+            (agent) => this.tools?.activeToolNames(agent) ?? [], (owner, sessionId, agent) => this.access.policyForSessionOwner(owner, sessionId, agent), () => this.tools?.catalogToolNames() ?? []);
             this.provenance = new QaProvenanceHost(ctx, () => this.getConfig(), 
             // Sharded per chat and bounded by the resolved retention policy: the
             // turn path must never rewrite history it did not touch.
             new FileQaProvenanceSnapshotStore(defaultQaProvenanceDirectoryPath(), () => this.getConfig().sources.retention, defaultLegacyProvenanceFilePath()), (error) => this.logger.error("sources.persistence-failed", {
                 message: error instanceof Error ? error.message : String(error),
             }));
+            this.integration = new QaIntegrationService({
+                getConfig: () => this.getConfig(),
+                accounts: () => this.accountRemotes.resolve(this.getConfig()),
+                runner: createQaIntegrationRunner({
+                    ctx,
+                    getConfig: () => this.getConfig(),
+                    accounts: () => this.accountRemotes.resolve(this.getConfig()),
+                    admission: this.admission,
+                    access: this.access,
+                    sessionLog,
+                    provenance: this.provenance,
+                    // Resolved per call, like the files panel does it: the document plugin
+                    // may install after this one, and a document attachment that arrives
+                    // before it did is refused with the caller's own fallback signal.
+                    documents: () => ctx.get("documents"),
+                    logger: this.logger,
+                }),
+                logger: this.logger,
+                version: qaSurfaceVersion(),
+            });
             // The one place a composed gate's `ask` becomes a decision for an attested
             // chat: refused outright while approvals are blocked, parked for the
             // operator's answer while they are interactive. The question seam shares
@@ -373,8 +464,15 @@ let QaSurface = (() => {
             const ownership = new QaSessionOwnership((sessionId) => this.admission.knowsSession(sessionId));
             this.approvals = new QaApprovalGate(ctx, () => this.getConfig().interaction.approvals === "interactive", ownership, this.logger);
             this.userQuestions = new QaQuestionGate(ctx, () => this.getConfig().interaction.questions === "interactive", ownership, this.logger);
+            // The destructive tool of the QA catalog composes the same approval flow
+            // around itself: registered without `prepend`, it sits inside the approval
+            // gate and answers `ask` for every file_delete call of an attested chat,
+            // so the interactive card parks it for the operator (or the blocked
+            // configuration refuses it — nothing is deleted without a person).
+            this.fileDeleteGate = new QaFileDeleteGate(ctx, ownership);
             this.approvals.install();
             this.userQuestions.install();
+            this.fileDeleteGate.install();
             // The identity note and the provenance rule ride the conversation as
             // durable context messages, delegated experts included: the QA preset's
             // complete persona closes the system prompt to plugins, the conversation
@@ -394,6 +492,7 @@ let QaSurface = (() => {
             ctx.effect(() => async () => this.logger.close(), "dsh-qa-surface.logger");
             ctx.effect(() => () => this.admission.dispose(), "dsh-qa-surface.lockdown-policies");
             ctx.effect(() => () => this.approvals.dispose(), "dsh-qa-surface.approvals");
+            ctx.effect(() => () => this.fileDeleteGate.dispose(), "dsh-qa-surface.file-delete-gate");
             ctx.effect(() => () => this.userQuestions.dispose(), "dsh-qa-surface.user-questions");
             ctx.effect(() => () => this.provenance.dispose(), "dsh-qa-surface.provenance");
             ctx.effect(() => () => this.notes.dispose(), "dsh-qa-surface.prompt-notes");
@@ -411,12 +510,17 @@ let QaSurface = (() => {
             });
             ctx.effect(() => () => this.tools.dispose(), "dsh-qa-surface.qa-tools");
             // The root index gains one head script: non-loopback hostnames continue
-            // into /qa, the loopback operator keeps the full harness UI.
-            ctx.on("webserver/index-inject", (table) => {
-                const row = entryRedirectRow(this.getConfig());
-                if (row !== undefined)
-                    table.push(row);
-            });
+            // into /qa, the loopback operator keeps the full harness UI. Not in the
+            // kiosk composition: there the index itself is served under /qa, so the
+            // script would meet its own target on every load and reload the page in
+            // a loop, and the server policy already routes the site root into /qa.
+            if (!qaKioskDeployment()) {
+                ctx.on("webserver/index-inject", (table) => {
+                    const row = entryRedirectRow(this.getConfig());
+                    if (row !== undefined)
+                        table.push(row);
+                });
+            }
             ctx.inject(["settings"], (settingsCtx) => {
                 settingsCtx.settings.installSection(ctx, QA_SURFACE_SETTINGS_NAMESPACE, ConfigSchema, entry, {
                     setSource: (source) => {
@@ -425,6 +529,7 @@ let QaSurface = (() => {
                     onChange: () => {
                         const config = this.getConfig();
                         this.refreshRoute();
+                        this.refreshIntegrationRoutes();
                         this.warnDocumentsMoved();
                         this.warnLegacySlashDefaults();
                         this.logger.info("config.updated", {
@@ -441,10 +546,14 @@ let QaSurface = (() => {
             ctx.inject(["webServer"], (webContext) => {
                 this.webServer = webContext.webServer;
                 this.refreshRoute();
+                this.refreshIntegrationRoutes();
                 webContext.effect(() => () => {
                     this.disposeRoute?.();
                     this.disposeRoute = undefined;
                     this.routeKey = undefined;
+                    this.disposeIntegrationRoutes?.();
+                    this.disposeIntegrationRoutes = undefined;
+                    this.integrationRouteKey = undefined;
                     this.webServer = undefined;
                 }, "dsh-qa-surface.navigation-route");
             });
@@ -570,6 +679,18 @@ let QaSurface = (() => {
             return this.accountRemotes.login(email, password);
         }
         /** Identity probe; safe to call with an empty or expired token. */
+        accountsChangePassword(token, currentPassword, nextPassword) {
+            return this.accountRemotes.changePassword(token, currentPassword, nextPassword);
+        }
+        /**
+         * The sign-in screen's "забыли пароль?" path. It answers the same way for
+         * every address: whether an account exists is not something this endpoint
+         * tells a caller.
+         */
+        accountsRequestPasswordReset(email) {
+            this.accountRemotes.requestPasswordReset(email);
+            return { accepted: true };
+        }
         accountsWhoami(token) {
             return this.accountRemotes.whoami(token);
         }
@@ -610,6 +731,31 @@ let QaSurface = (() => {
         accountsUpdateStarters(token, input) {
             return this.accountRemotes.updateStarters(token, input);
         }
+        /**
+         * The caller's own integration tokens. The list is the account's own: the
+         * token names it, and a secret is never part of a summary, so reading this
+         * cannot repeat a credential that was already handed over.
+         */
+        accountsListServiceTokens(token) {
+            return this.accountRemotes.listServiceTokens(token);
+        }
+        /**
+         * Mint one integration token for the caller. The answer carries the
+         * plaintext exactly once — nothing stores it, so nothing can repeat it — and
+         * the account is always the authenticated one: there is no owner field on
+         * the wire.
+         */
+        accountsCreateServiceToken(token, input) {
+            return this.accountRemotes.createServiceToken(token, input);
+        }
+        /**
+         * Revoke one of the caller's own integration tokens. This is the immediate
+         * kill switch the profile page offers: the next request that presents the
+         * credential is refused, without waiting for its expiry.
+         */
+        accountsRevokeServiceToken(token, tokenId) {
+            return this.accountRemotes.revokeServiceToken(token, tokenId);
+        }
         /**
          * Serve the effective QA configuration to the browser. The DSH gateway pins
          * settings RPCs to loopback, so a browser served over the LAN always sees
@@ -745,6 +891,38 @@ let QaSurface = (() => {
         // Administrative console. Every method names its permission inside the
         // service; the wire carries a token and never an identity.
         // ---------------------------------------------------------------------------
+        /**
+         * The skill catalog of one scope: the deployment's shared skills, or the
+         * personal skills of the account the scope names. Reading another account's
+         * skills is an administrative act, so it needs `skills.manage`.
+         */
+        adminSkills(token, scope) {
+            return this.accountRemotes.runAsync(() => this.admin.skills(token, scope));
+        }
+        /** One skill file with the body, revision and administrator mark. */
+        adminSkill(token, scope, name) {
+            return this.accountRemotes.runAsync(() => this.admin.skill(token, scope, name));
+        }
+        /**
+         * Create (`name` null) or replace one skill in place. The write is recorded
+         * as this administrator's, and the owner sees that it was.
+         */
+        adminSkillSave(token, scope, name, input) {
+            return this.accountRemotes.runAsync(() => this.admin.saveSkill(token, scope, name, input));
+        }
+        /** Remove one skill into the trash beside its own skills root. */
+        adminSkillDelete(token, scope, name, expectedRevision) {
+            return this.accountRemotes.runAsync(() => this.admin.removeSkill(token, scope, name, expectedRevision));
+        }
+        /** The file a save would write, plus every diagnostic for the draft. */
+        adminSkillValidate(token, scope, name, input) {
+            return this.accountRemotes.runAsync(() => this.admin.validateSkill(token, scope, name, input));
+        }
+        /** The tool catalog the picker offers for one scope. */
+        async adminSkillTools(token, scope) {
+            const tools = await this.accountRemotes.runAsync(() => this.admin.skillTools(token, scope));
+            return { tools };
+        }
         /** Counters, attention lines and the newest quality signals. */
         adminOverview(token) {
             return this.accountRemotes.runAsync(() => this.admin.overview(token));
@@ -759,6 +937,12 @@ let QaSurface = (() => {
         adminUpdateUser(token, userId, update) {
             return this.accountRemotes.runAsync(() => this.admin.updateUser(token, userId, update));
         }
+        adminPasswordResetRequests(token) {
+            return this.accountRemotes.runAsync(() => this.admin.passwordResetRequests(token));
+        }
+        adminResetPassword(token, userId, password) {
+            return this.accountRemotes.runAsync(() => this.admin.resetUserPassword(token, userId, password));
+        }
         adminConversations(token, query, cursor, limit) {
             return this.accountRemotes.runAsync(() => this.admin.conversations(token, query, cursor ?? undefined, limit ?? undefined));
         }
@@ -912,6 +1096,105 @@ let QaSurface = (() => {
                 throw sourcePreviewRefusal(error instanceof QaSourcePreviewError ? error.reason : "unavailable");
             }
         }
+        /**
+         * List one directory of the chat's own workspace for the files panel.
+         *
+         * Browsing is deliberately narrower than the source preview: it stays inside
+         * the chat's own directory tree, so a visitor can look at what their
+         * conversation produced and at nothing else of the deployment.
+         * `readWorkspaceFile` opens one entry of such a listing.
+         */
+        async listWorkspaceFiles(token, sessionId, path) {
+            await this.admission.secureSession(token, sessionId);
+            const { config, cwd } = await this.browseContext(sessionId);
+            try {
+                return await listWorkspaceDirectory({
+                    dirPath: path ?? "",
+                    cwd,
+                    maxEntries: config.sources.filePreview.maxListingEntries,
+                });
+            }
+            catch (error) {
+                throw this.browseRefusal("workspace.list-refused", sessionId, error);
+            }
+        }
+        /**
+         * Read one file of the chat's workspace: text when it decodes as UTF-8, bytes
+         * when it does not, so a document the agent produced can be downloaded while
+         * a note previews inline. The readable roots are the ones the model itself
+         * may read; unlike the source preview this does not require the file to be
+         * recorded evidence, because the panel is browsing a tree rather than
+         * reopening a cited source.
+         */
+        async readWorkspaceFile(token, sessionId, path) {
+            await this.admission.secureSession(token, sessionId);
+            const { config, cwd } = await this.browseContext(sessionId);
+            const attachmentRoot = this.admission.attachmentRoot();
+            try {
+                return await readWorkspaceFile({
+                    filePath: path ?? "",
+                    cwd,
+                    sharedReadOnlyRoots: config.lockdown.sharedReadOnlyRoots,
+                    ...(attachmentRoot === undefined ? {} : { attachmentRoot }),
+                    maxBytes: config.sources.filePreview.maxBytes,
+                    maxMarkdownRenderBytes: config.sources.filePreview.maxMarkdownRenderBytes,
+                });
+            }
+            catch (error) {
+                throw this.browseRefusal("workspace.read-refused", sessionId, error);
+            }
+        }
+        /**
+         * Render one Word document of the chat's workspace as a PDF for the panel.
+         *
+         * The conversion is the document pipeline's own, reached through the service
+         * `@yadsh/dsh-documents` publishes for its Host siblings — the panel gets the
+         * same providers, limits and refusals the `document_*` tools see, and a
+         * deployment without that plugin refuses instead of showing a guess. The
+         * produced PDF is read back here and travels as base64, so the audience never
+         * reaches an unfenced byte route.
+         */
+        async previewWorkspaceDocument(token, sessionId, path) {
+            await this.admission.secureSession(token, sessionId);
+            const { config, cwd } = await this.browseContext(sessionId);
+            const attachmentRoot = this.admission.attachmentRoot();
+            try {
+                return await previewConvertibleDocument({
+                    filePath: path ?? "",
+                    cwd,
+                    sharedReadOnlyRoots: config.lockdown.sharedReadOnlyRoots,
+                    ...(attachmentRoot === undefined ? {} : { attachmentRoot }),
+                    documents: () => this.ctx.get("documents"),
+                    sessionId,
+                    maxBytes: config.sources.filePreview.maxBytes,
+                });
+            }
+            catch (error) {
+                throw this.browseRefusal("workspace.preview-refused", sessionId, error);
+            }
+        }
+        /**
+         * Shared admission facts of both browse methods: the preview switch is what
+         * opens the panel's file reading at all, and the chat's cwd is the tree that
+         * browsing is confined to.
+         */
+        async browseContext(sessionId) {
+            const config = this.getConfig();
+            if (!config.sources.filePreview.enabled) {
+                throw sourcePreviewRefusal("unavailable");
+            }
+            const agent = this.ctx.agents.get((await import("@deepseek-ai/dsh-session/types")).SessionId(sessionId));
+            const cwd = agent?.session.header.cwd;
+            if (cwd === undefined)
+                throw sourcePreviewRefusal("unavailable");
+            return { config, cwd };
+        }
+        /** One browse refusal, logged with its coarse reason and rethrown for the wire. */
+        browseRefusal(event, sessionId, error) {
+            const reason = error instanceof QaSourcePreviewError ? error.reason : "unavailable";
+            this.logger.debug(event, { sessionId, reason });
+            return sourcePreviewRefusal(reason);
+        }
         /** Every personal skill of the token's account, sorted by name. */
         skillsList(token) {
             return this.skillRemotes.list(token);
@@ -975,11 +1258,57 @@ let QaSurface = (() => {
         slashExecute(token, sessionId, line, attachments) {
             return this.slashRemotes.execute(token, sessionId, line, attachments);
         }
-        refreshRoute() {
+        /**
+         * Register (or drop) the integration API's routes for the current config.
+         *
+         * The key is the whole registration decision — whether the API is on and
+         * where it lives — so a config change that does not move the endpoints
+         * leaves the live routes alone, and turning the API off disposes them
+         * immediately rather than at the next restart.
+         */
+        refreshIntegrationRoutes() {
             const config = this.getConfig();
-            const key = config.enabled
-                ? `${config.route.path}:${config.route.matchChildren}`
+            const key = config.integration.enabled && config.accounts.enabled
+                ? `${config.integration.basePath}:${String(config.integration.maxRequestBytes)}:${String(config.integration.maxAttachmentBytes)}`
                 : undefined;
+            if (key === this.integrationRouteKey)
+                return;
+            this.disposeIntegrationRoutes?.();
+            this.disposeIntegrationRoutes = undefined;
+            this.integrationRouteKey = undefined;
+            if (key === undefined || this.webServer === undefined)
+                return;
+            try {
+                this.disposeIntegrationRoutes = registerQaIntegrationRoutes(this.webServer, { config, service: this.integration, logger: this.logger });
+                this.integrationRouteKey = key;
+                this.logger.info("integration.routes-registered", {
+                    basePath: config.integration.basePath,
+                });
+            }
+            catch (error) {
+                // A collision on (kind, path) means another plugin owns the namespace.
+                // The page and the accounts keep working; only the API stays off, and
+                // the operator sees why.
+                this.logger.error("integration.routes-failed", {
+                    basePath: config.integration.basePath,
+                    message: error instanceof Error ? error.message : String(error),
+                });
+            }
+        }
+        refreshRoute() {
+            const config = this.getConfig();
+            // Kiosk: the harness route policy owns the QA paths and serves the
+            // application there directly. This plugin's navigation redirect route
+            // must not register — a named route shadows the fallback seat, so it
+            // would bounce every /qa navigation to /?marker while the policy bounces
+            // / back to /qa: a redirect loop. The kiosk key keeps the transition
+            // machinery honest (dispose on entering kiosk, no re-registration, one
+            // log line per transition).
+            const key = qaKioskDeployment()
+                ? "kiosk"
+                : config.enabled
+                    ? `${config.route.path}:${config.route.matchChildren}`
+                    : undefined;
             if (key === this.routeKey)
                 return;
             this.disposeRoute?.();
@@ -987,6 +1316,13 @@ let QaSurface = (() => {
             this.routeKey = undefined;
             if (key === undefined || this.webServer === undefined)
                 return;
+            if (key === "kiosk") {
+                this.logger.info("route.kiosk", {
+                    message: "DSH_UI_MODE=qa: the navigation redirect route is not registered; the harness route policy serves the QA surface directly",
+                });
+                this.routeKey = key;
+                return;
+            }
             this.disposeRoute = registerQaNavigationRoute(this.webServer, config, {
                 launchToken: this.launchToken,
             });