@yadsh/dsh-qa-surface 0.15.2 → 0.15.4

package/lib/types/access/model.d.ts

@@ -64,6 +64,19 @@ export declare function withdrawnSkillNames(config: QaCapabilityConfig): Readonl
  */
 export declare function personalUserSkillNames(config: QaCapabilityConfig, ownSkills: ReadonlySet<string> | undefined): readonly string[];
 export declare function resolveCapabilityPolicy({ config, subroleId, systemTools, systemSkills, available: installed, skillMetadata, revision, }: ResolveCapabilityPolicyInput): QaEffectiveCapabilityPolicy;
+/**
+ * The skills a person may invoke under one policy — the whole of the
+ * user-facing allow-list, and the one place it is read.
+ *
+ * An empty `userSkills` means the role keeps no separate user list, not that it
+ * grants nothing, so the model-facing set stands in for it. A typed gesture is
+ * admitted or refused by this list and the palette is narrowed by it, so both
+ * have to derive it here: a name the palette offers but the line refuses, or
+ * one the palette hides while the line would accept, is one rule read two ways.
+ *
+ * @param policy - the effective capability policy of one session.
+ */
+export declare function userInvocableSkillNames(policy: QaEffectiveCapabilityPolicy): readonly string[];
 export interface ResolveSkillAccessInput {
     readonly config: QaCapabilityConfig;
     /** Every discovered skill with its normalized metadata. */

package/lib/types/access/service.d.ts

@@ -158,6 +158,32 @@ export declare class QaAccessService {
     policyForSessionOwner(owner: {
         readonly id: string;
     } | undefined, sessionId: string, agent: Agent): Promise<QaResolvedSessionPolicy | undefined>;
+    /**
+     * The policy one session record answers with: the snapshot it froze, or the
+     * role as it is configured now when the chat has never frozen one.
+     *
+     * Every read of a session's capabilities goes through here, so a chat that is
+     * running and a chat nobody has woken cannot disagree about what its role
+     * grants.
+     */
+    private policyForRecord;
+    /**
+     * The policy of a chat this process holds no live agent for.
+     *
+     * A cold chat has an owner and a role, and the reads that name its
+     * capabilities must narrow it by the rule above — the same one a live chat is
+     * narrowed by — rather than answer "no role opinion" because the agent that
+     * carries the capability snapshot happens to be asleep. What a cold chat has
+     * no answer for is that snapshot: the catalog the deployment mounts for every
+     * chat stands in for the agent's own, which is why the project layer of this
+     * chat's workspace is missing from it, and why nothing is frozen onto the
+     * session record here — a palette read must not decide what a later turn may
+     * do.
+     *
+     * @returns the resolved policy; the ownership check is the refusal, so a
+     *   foreign browser never reaches it.
+     */
+    policyForColdSession(token: string, sessionId: string): Promise<QaEffectiveCapabilityPolicy>;
     /** The browser's entry point: the token resolves the owning account. */
     policyForSession(token: string, sessionId: string, agent: Agent): Promise<QaResolvedSessionPolicy | undefined>;
     /** Activation history of one session, for review and quality analysis. */

package/lib/types/approvals.d.ts

@@ -14,6 +14,15 @@ export interface QaApprovalExecution {
     readonly agent?: Agent;
     readonly signal?: AbortSignal;
 }
+/**
+ * How long a parked request may hold a turn before it is failed closed. The
+ * request is a question to a person who may have walked away, and while it
+ * waits the whole turn — including any parent of a delegated caller — waits
+ * with it. A stand measured one at 1 h 06 m with nothing on the operator's
+ * screen but a thinking timer; minutes is the right unit for a yes/no about
+ * one tool call, and an expired request is refused, never assumed allowed.
+ */
+export declare const QA_APPROVAL_PARK_TIMEOUT_MS: number;
 /**
  * Interactive resolution of the tool policy `ask` decision.
  *
@@ -30,6 +39,14 @@ export interface QaApprovalExecution {
  * approved automatically, and the allow-list, the workspace fence and the
  * read-only sandbox still run on the resolved call.
  *
+ * Two callers never reach the card. A delegated child is refused on the spot:
+ * it has no one to answer it — the harness already refuses a question from an
+ * agent owned by another live agent — so a parked approval of a child would
+ * hold the parent turn for a reply that cannot arrive, which is what an answer
+ * reviewer did on a stand until a person rejected it 12,5 minutes later. And a
+ * request the operator does not answer expires: the wait is bounded by
+ * `QA_APPROVAL_PARK_TIMEOUT_MS` and fails closed like a refusal.
+ *
  * Only sessions this deployment attested are touched. Any other session's ask
  * is handed back to the chain untouched, so an operator instance that also
  * serves ordinary chats keeps its own approval flow.
@@ -56,7 +73,7 @@ export declare class QaApprovalGate {
      * attested chat answers under the chat the operator is looking at.
      */
     private ownerOf;
-    /** Park one call until the operator answers, the turn is cancelled, or … */
+    /** Park one call until the operator answers, the turn ends, or the wait expires. */
     private request;
     private resolve;
     /** Fail the requests one session's agent owns; a child never holds the chat. */

package/lib/types/client/QaSessionController.d.ts

@@ -423,6 +423,29 @@ export declare class QaSessionController {
      * somebody else retired in between is no more this one's to finish.
      */
     private bind;
+    /**
+     * Whether this browser's Session catalog names one id. The Host answers a
+     * retain from exactly this set, so a refusal of a listed session is a refusal
+     * of a session it knows — never the race this adoption can wait out.
+     */
+    private catalogLists;
+    /**
+     * Wait for this browser's Session catalog to come to know one id, after
+     * {@link bind} was refused a reference to it, and answer whether the chat on
+     * screen still belongs to the adoption that asked (`false` — it moved on, and
+     * nothing is retained). Only an id the catalog does not name reaches here: a
+     * refusal of a session it already lists is not this race and goes back as it
+     * came, so there is always a row to wait for. A refusal is only final once
+     * that row has had its chance: this is the one window where the race is
+     * repairable rather than reportable, so the failure the caller reads stays the
+     * Host's own refusal, not a timeout nobody asked for.
+     *
+     * Both timestamps are logged because the race is intermittent and the stand
+     * keeps no other trace of it: the server never sees a retain, so its journal
+     * cannot say which chat lost the create, and the next round needs the id and
+     * the two moments to line this up with its own observations.
+     */
+    private awaitCatalogRow;
     /**
      * Give up on an adoption the chat on screen has outgrown, and answer whether
      * that is what happened (`true` — the caller has nothing left to publish).

package/lib/types/client/components/QaHeader.d.ts

@@ -32,7 +32,9 @@ export interface QaHeaderProps {
     readonly onToggleAgents: () => void;
     /** Whether the deployment shows the sources control in the header at all. */
     readonly sourcesVisible: boolean;
+    /** Sources of the chat so far; 0 prints no badge but never closes the panel. */
     readonly sourcesCount: number;
+    /** Whether collection has settled: a running turn's 0 is not yet a none. */
     readonly sourcesComplete: boolean;
     readonly sourcesOpen: boolean;
     readonly onOpenSources: () => void;
@@ -72,6 +74,13 @@ export interface QaHeaderProps {
     readonly showReset: boolean;
     readonly resetDisabled: boolean;
     readonly onReset: () => void;
+    /**
+     * Offered while a panel is in front of the conversation: the «Чат» marker
+     * then becomes the control that puts the conversation back, which is what its
+     * selected look already promises. Omitted while the chat is all there is —
+     * a control that returns the reader to where they stand is a dead button.
+     */
+    readonly onBackToChat?: () => void;
 }
-export declare function QaHeader({ logoUrl, title, viewingSubagent, onCloseSubagent, roleSelector, themeSwitcher, administration, agentCount, agentsOpen, onToggleAgents, sourcesVisible, sourcesCount, sourcesComplete, sourcesOpen, onOpenSources, fileCount, filesEnabled, filesOpen, onOpenFiles, settings, history, panelLauncher, showReset, resetDisabled, onReset, }: QaHeaderProps): import("react/jsx-runtime").JSX.Element;
+export declare function QaHeader({ logoUrl, title, viewingSubagent, onCloseSubagent, roleSelector, themeSwitcher, administration, agentCount, agentsOpen, onToggleAgents, sourcesVisible, sourcesCount, sourcesComplete, sourcesOpen, onOpenSources, fileCount, filesEnabled, filesOpen, onOpenFiles, settings, history, panelLauncher, showReset, resetDisabled, onReset, onBackToChat, }: QaHeaderProps): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=QaHeader.d.ts.map

package/lib/types/client/components/QaRightRail.d.ts

@@ -1,4 +1,4 @@
-import type { ReactNode } from "react";
+import { type ReactNode } from "react";
 import type { QaRailTab } from "../use-session-ui-state.js";
 /** One rail tab's strip chip: label, live count, and its body is the panel. */
 export interface QaRailTabModel {
@@ -18,6 +18,12 @@ export interface QaRightRailProps {
  * The chat's right rail: a fixed column whose top edge is the tab strip,
  * mirroring the Harness right Sidebar's chrome. Tabs are plain chips with
  * counts; the strip's last control collapses the whole column.
+ *
+ * On the phone layout the column is the whole surface, so the strip's control
+ * is the only way back and Escape has to answer from anywhere on the page —
+ * the focus may well still sit in the composer behind the panel. A dialog above
+ * the rail keeps the key: the innermost thing on the page is what the reader
+ * means to dismiss.
  */
 export declare function QaRightRail({ tabs, activeTab, onTabSelect, onClose, }: QaRightRailProps): import("react/jsx-runtime").JSX.Element | null;
 //# sourceMappingURL=QaRightRail.d.ts.map

package/lib/types/client/components/QaSidebar.d.ts

@@ -7,6 +7,11 @@ export interface QaChatRow {
     readonly running: boolean;
     readonly active: boolean;
     readonly meta: string;
+    /**
+     * The chat's whole name, held back from the row only because the row had to
+     * be cut to fit; absent when the title is shown in full.
+     */
+    readonly fullName?: string;
     readonly updatedAt: number;
     /** Chat owner's display name; present in the admin ownership view only. */
     readonly ownerName?: string;

package/lib/types/client/components/QaWorkGroup.d.ts

@@ -1,7 +1,10 @@
 import type { QaWorkItem } from "../../types.js";
 export interface QaWorkGroupProps {
-    /** "error" marks a turn the host ended with a provider failure. */
-    readonly status: "running" | "complete" | "error";
+    /**
+     * "error" marks a turn the host ended with a provider failure; "stopped"
+     * marks one a person ended, whose answer arrived as a prefix.
+     */
+    readonly status: "running" | "complete" | "error" | "stopped";
     readonly startedAt?: number;
     readonly endedAt?: number;
     readonly items: readonly QaWorkItem[];

package/lib/types/client/settings/styles.d.ts

@@ -8,6 +8,12 @@
  * pair rather than a hard-coded outline: the Host's `focus.css` suppresses an
  * outline under pointer modality at a specificity our rule cannot win, so a
  * hard-coded ring is one that goes missing rather than one that degrades.
+ *
+ * The type scale is the surface's: text the operator reads in order to decide —
+ * section titles, field labels, the values in the controls, the toggle copy —
+ * is 16px, a control's own label and an outcome line are 14px, and only chrome
+ * stays small on purpose: the «Изменено» badge (9px), the status chips (11px),
+ * the monospace data rows (11px) and the footer note (10px).
  */
 export declare const QA_SETTINGS_STYLES: string;
 //# sourceMappingURL=styles.d.ts.map

package/lib/types/index.d.ts

@@ -107,10 +107,12 @@ export declare class QaSurface extends TypertRemoteService {
      * check and the deployment's lockdown is the boundary, exactly as it is for
      * every other remote.
      *
-     * The grant mirrors `installQaSkillPolicy` to the letter — an empty
-     * `userSkills` list means the role keeps no separate user list, not that it
-     * grants nothing — so the palette can never offer a skill the typed gesture
-     * would refuse, nor hide one it would accept.
+     * The grant is {@link userInvocableSkillNames} — the one list the typed
+     * gesture is admitted or refused by — for every chat that has a role, woken
+     * or not: the palette a visitor sees before the chat runs is narrowed by that
+     * same rule, so it can neither offer a name the line would refuse nor hide
+     * one it would accept. `undefined` is answered only where the deployment has
+     * no roles to consult at all.
      */
     private slashSessionGrant;
     /**

package/lib/types/qa-tools/file-delete-gate.d.ts

@@ -2,8 +2,21 @@ import type { Context } from "@deepseek-ai/cordis";
 import type { QaSessionOwnership } from "../session-ownership.js";
 /** The one QA tool whose every call is parked for the operator. */
 export declare const QA_FILE_DELETE_TOOL = "file_delete";
-/** Why the gate answers `ask` before the chain can decide alone. */
-export declare const QA_FILE_DELETE_ASK_REASON = "deleting a workspace file requires operator confirmation";
+/**
+ * Why the gate answers `ask` before the chain can decide alone. The card the
+ * operator reads shows this verbatim, so it is written in the language of the
+ * surface rather than in the language of the tool chain.
+ */
+export declare const QA_FILE_DELETE_ASK_REASON = "\u0423\u0434\u0430\u043B\u0435\u043D\u0438\u0435 \u0444\u0430\u0439\u043B\u0430 \u0440\u0430\u0431\u043E\u0447\u0435\u0433\u043E \u043A\u0430\u0442\u0430\u043B\u043E\u0433\u0430 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043F\u043E\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043D\u0438\u044F \u043E\u043F\u0435\u0440\u0430\u0442\u043E\u0440\u0430.";
+/**
+ * Why the gate answers `deny` — not `ask` — for a delegated caller. A child has
+ * no one to confirm to it: its card would sit over the parent's composer and
+ * stop the parent turn until a person answers something they were never asked
+ * about. Deleting a file is not a step a delegation was ever given, so the call
+ * is refused where it is raised, and the reason tells the child to report
+ * instead of trying again.
+ */
+export declare const QA_FILE_DELETE_DELEGATED_DENY_REASON = "a delegated call cannot delete a workspace file: no operator can confirm it. Report the file that is in the way instead of removing it";
 /**
  * The inner half of `file_delete`'s safety: the decision that composes the
  * approval flow around one destructive tool.
@@ -20,7 +33,10 @@ export declare const QA_FILE_DELETE_ASK_REASON = "deleting a workspace file requ
  * behavior and refuses the call — nothing is ever deleted without a person.
  *
  * Any other tool, and any caller this deployment did not attest, is handed
- * back to the chain untouched.
+ * back to the chain untouched. A delegated child of an attested chat is the one
+ * attested caller that gets no card: it is refused here, on the name, whatever
+ * the deployment's approval mode is — the same refusal the answer reviewer of a
+ * stand needed before its parent turn could end.
  */
 export declare class QaFileDeleteGate {
     private readonly ctx;
@@ -33,10 +49,11 @@ export declare class QaFileDeleteGate {
     dispose(): void;
     private handle;
     /**
-     * Whether this deployment attested the chat the call belongs to, delegated
-     * children included. The same ownership service the approval gate reads,
-     * so one chat is parked under exactly one surface.
+     * The attested chat a call belongs to and the session that made it, delegated
+     * children included — the same ownership service the approval gate reads, so
+     * one chat is parked under exactly one surface. The two differ for a child,
+     * and a child is the caller that cannot be confirmed by anyone.
      */
-    private attested;
+    private rootOf;
 }
 //# sourceMappingURL=file-delete-gate.d.ts.map

package/lib/types/slash/catalog.d.ts

@@ -39,6 +39,11 @@ export interface BuildSlashCatalogOptions {
      * The session role's own user-skill grant, when the access system is on.
      * `undefined` means the role system has no opinion, which is its state on a
      * deployment that never enabled roles — not "grant nothing".
+     *
+     * This is the only grant a read may answer with, whatever the chat looks
+     * like: a chat that is running and a chat nobody has woken are narrowed by
+     * the same allow-list and the same role, because the palette that names a
+     * skill this chat may not invoke teaches the visitor a gesture that fails.
      */
     readonly grantedSkills?: readonly string[] | undefined;
     readonly commandSurface: QaSlashCommandSurface;

package/lib/types/types.d.ts

@@ -1522,8 +1522,11 @@ export type QaMessage = QaUserMessage | {
     readonly id: string;
     readonly role: "work";
     readonly turn: number;
-    /** "error" marks a turn the host ended with a provider failure. */
-    readonly status: "running" | "complete" | "error";
+    /**
+     * "error" marks a turn the host ended with a provider failure; "stopped"
+     * marks one the user ended, whose answer is a prefix rather than a reply.
+     */
+    readonly status: "running" | "complete" | "error" | "stopped";
     readonly startedAt?: number;
     readonly endedAt?: number;
     readonly items: readonly QaWorkItem[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yadsh/dsh-qa-surface",
-  "version": "0.15.2",
+  "version": "0.15.4",
   "description": "A focused end-user QA surface backed by native DeepSeek Harness sessions",
   "repository": {
     "type": "git",
@@ -135,11 +135,11 @@
   "dependencies": {
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
-    "@yadsh/dsh-audit-core": "^0.1.1",
     "@yadsh/dsh-audit-ui": "^0.1.2",
+    "@yadsh/dsh-audit-core": "^0.1.1",
     "@yadsh/dsh-plugin-kit": "^0.5.0",
-    "@yadsh/dsh-documents": "^0.6.2",
-    "@yadsh/dsh-plugin-log": "^0.4.1"
+    "@yadsh/dsh-plugin-log": "^0.4.1",
+    "@yadsh/dsh-documents": "^0.6.2"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.4",