@yadsh/dsh-qa-surface 0.15.3 → 0.15.4

package/lib/qa-tools/file-delete-gate.js

@@ -1,7 +1,20 @@
 /** The one QA tool whose every call is parked for the operator. */
 export const QA_FILE_DELETE_TOOL = "file_delete";
-/** Why the gate answers `ask` before the chain can decide alone. */
-export const QA_FILE_DELETE_ASK_REASON = "deleting a workspace file requires operator confirmation";
+/**
+ * Why the gate answers `ask` before the chain can decide alone. The card the
+ * operator reads shows this verbatim, so it is written in the language of the
+ * surface rather than in the language of the tool chain.
+ */
+export const QA_FILE_DELETE_ASK_REASON = "Удаление файла рабочего каталога требует подтверждения оператора.";
+/**
+ * Why the gate answers `deny` — not `ask` — for a delegated caller. A child has
+ * no one to confirm to it: its card would sit over the parent's composer and
+ * stop the parent turn until a person answers something they were never asked
+ * about. Deleting a file is not a step a delegation was ever given, so the call
+ * is refused where it is raised, and the reason tells the child to report
+ * instead of trying again.
+ */
+export const QA_FILE_DELETE_DELEGATED_DENY_REASON = "a delegated call cannot delete a workspace file: no operator can confirm it. Report the file that is in the way instead of removing it";
 /**
  * The inner half of `file_delete`'s safety: the decision that composes the
  * approval flow around one destructive tool.
@@ -18,7 +31,10 @@ export const QA_FILE_DELETE_ASK_REASON = "deleting a workspace file requires ope
  * behavior and refuses the call — nothing is ever deleted without a person.
  *
  * Any other tool, and any caller this deployment did not attest, is handed
- * back to the chain untouched.
+ * back to the chain untouched. A delegated child of an attested chat is the one
+ * attested caller that gets no card: it is refused here, on the name, whatever
+ * the deployment's approval mode is — the same refusal the answer reviewer of a
+ * stand needed before its parent turn could end.
  */
 export class QaFileDeleteGate {
     ctx;
@@ -41,20 +57,29 @@ export class QaFileDeleteGate {
     async handle(execution, next) {
         if (execution.name !== QA_FILE_DELETE_TOOL)
             return next();
-        if (!this.attested(execution))
+        const root = this.rootOf(execution);
+        if (root === undefined)
             return next();
+        if (root.sessionId !== root.ownerSessionId) {
+            return { kind: "deny", reason: QA_FILE_DELETE_DELEGATED_DENY_REASON };
+        }
         return { kind: "ask", reason: QA_FILE_DELETE_ASK_REASON };
     }
     /**
-     * Whether this deployment attested the chat the call belongs to, delegated
-     * children included. The same ownership service the approval gate reads,
-     * so one chat is parked under exactly one surface.
+     * The attested chat a call belongs to and the session that made it, delegated
+     * children included — the same ownership service the approval gate reads, so
+     * one chat is parked under exactly one surface. The two differ for a child,
+     * and a child is the caller that cannot be confirmed by anyone.
      */
-    attested(execution) {
+    rootOf(execution) {
         const session = execution.agent?.session;
         if (session === undefined)
-            return false;
-        return this.ownership.rootOf(String(session.id)) !== undefined;
+            return undefined;
+        const ownerSessionId = String(session.id);
+        const sessionId = this.ownership.rootOf(ownerSessionId);
+        if (sessionId === undefined)
+            return undefined;
+        return { sessionId, ownerSessionId };
     }
 }
 //# sourceMappingURL=file-delete-gate.js.map

package/lib/qa-tools/file-delete-gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-delete-gate.js","sourceRoot":"","sources":["../../src/qa-tools/file-delete-gate.ts"],"names":[],"mappings":"AAKA,mEAAmE;AACnE,MAAM,CAAC,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAEjD,oEAAoE;AACpE,MAAM,CAAC,MAAM,yBAAyB,GACpC,0DAA0D,CAAC;AAE7D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,gBAAgB;IAIR,GAAG;IACH,SAAS;IAJX,SAAS,GAAmB,EAAE,CAAC;IAEhD,YACmB,GAAY,EACZ,SAA6B;mBAD7B,GAAG;yBACH,SAAS;IACzB,CAAC;IAEJ,2EAA2E;IAC3E,OAAO;QACL,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,IAAI,CACjB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CACnD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAC7B,CACF,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,OAAO;QACL,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;IAC5D,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,SAA8B,EAC9B,IAAoC;QAEpC,IAAI,SAAS,CAAC,IAAI,KAAK,mBAAmB;YAAE,OAAO,IAAI,EAAE,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QAC7C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC5D,CAAC;IAED;;;;OAIG;IACK,QAAQ,CAAC,SAA8B;QAC7C,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC;QACzC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;IACjE,CAAC;CACF"}
+{"version":3,"file":"file-delete-gate.js","sourceRoot":"","sources":["../../src/qa-tools/file-delete-gate.ts"],"names":[],"mappings":"AAKA,mEAAmE;AACnE,MAAM,CAAC,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAEjD;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GACpC,mEAAmE,CAAC;AAEtE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAC/C,wIAAwI,CAAC;AAE3I;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,gBAAgB;IAIR,GAAG;IACH,SAAS;IAJX,SAAS,GAAmB,EAAE,CAAC;IAEhD,YACmB,GAAY,EACZ,SAA6B;mBAD7B,GAAG;yBACH,SAAS;IACzB,CAAC;IAEJ,2EAA2E;IAC3E,OAAO;QACL,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,SAAS,CAAC,IAAI,CACjB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CACnD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAC7B,CACF,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,OAAO;QACL,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;IAC5D,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,SAA8B,EAC9B,IAAoC;QAEpC,IAAI,SAAS,CAAC,IAAI,KAAK,mBAAmB;YAAE,OAAO,IAAI,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;QACxE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC5D,CAAC;IAED;;;;;OAKG;IACK,MAAM,CACZ,SAA8B;QAE9B,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC;QACzC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC5C,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACxD,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC9C,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IACvC,CAAC;CACF"}

package/lib/qa-tools/file-delete.js

@@ -80,7 +80,7 @@ async function canonicalCandidate(input) {
 export function createFileDeleteTool() {
     return defineTool({
         name: "file_delete",
-        description: "Delete one regular file inside this session's workspace. Use it to remove scratch files a task produced and no longer needs. Directories, missing paths and anything outside the workspace — including paths that escape through a symbolic link — are refused. Every deletion is confirmed by the operator before it runs.",
+        description: "Delete one regular file inside this session's workspace. Use it to remove scratch files a task produced and no longer needs. Directories, missing paths and anything outside the workspace — including paths that escape through a symbolic link — are refused. Every deletion is confirmed by the operator before it runs, and a call delegated from another agent is refused: nothing you delete on your own can be confirmed.",
         parameters: {
             path: {
                 type: "string",

package/lib/qa-tools/file-delete.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-delete.js","sourceRoot":"","sources":["../../src/qa-tools/file-delete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EACL,QAAQ,EACR,OAAO,EACP,UAAU,EACV,QAAQ,EACR,OAAO,EACP,GAAG,GACJ,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AA4BpD;;;;;;GAMG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAE/B,IAAI;IADf,YACW,IAAyB,EAClC,OAAe,EACf,OAAO,GAAiB,EAAE;QAE1B,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAJf,IAAI;QAKb,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAaD,MAAM,iBAAiB,GACrB,iLAAiL,CAAC;AACpL,MAAM,cAAc,GAClB,sIAAsI,CAAC;AACzI,MAAM,SAAS,GACb,mIAAmI,CAAC;AACtI,MAAM,UAAU,GACd,2FAA2F,CAAC;AAE9F;;;;;;GAMG;AACH,KAAK,UAAU,eAAe,CAAC,IAA2B;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;IAC3C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,iBAAiB,CACzB,uBAAuB,EACvB,qHAAqH,CACtH,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CACzB,uBAAuB,EACvB,oGAAoG,CACrG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAY,EAAE,MAAc;IAC9C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,OAAO,CACL,QAAQ,KAAK,EAAE;QACf,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC;YAC/B,QAAQ,KAAK,IAAI;YACjB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CACzB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,kBAAkB,CAAC,KAAa;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,MAAM,GAAG,QAAQ,CAAC;IACtB,SAAS,CAAC;QACR,IAAI,CAAC;YACH,OAAO,OAAO,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,KAAK,CAAC;YACnC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACjC,MAAM,GAAG,MAAM,CAAC;QAClB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,aAAa;QACnB,WAAW,EACT,6TAA6T;QAC/T,UAAU,EAAE;YACV,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;gBACd,WAAW,EACT,uGAAuG;aAC1G;SACF;QACD,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC5C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;iBACzC;aACF;YACD,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBACvB,MAAM,MAAM,GAAG,KAA8C,CAAC;gBAC9D,OAAO;oBACL;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,WAAW,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB;qBAC3D;iBACF,CAAC;YACJ,CAAC;SACF;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC5B,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;YACzC,iEAAiE;YACjE,qEAAqE;YACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;gBACpC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBACpB,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,SAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,iBAAiB,CACzB,uBAAuB,EACvB,wGAAwG,CACzG,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;gBACjC,mEAAmE;gBACnE,4DAA4D;gBAC5D,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CACtC,CAAC,KAAc,EAAyB,EAAE,CACxC,KAA8B,CACjC,CAAC;YACF,IAAI,IAAI,YAAY,KAAK,EAAE,CAAC;gBAC1B,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC3B,MAAM,IAAI,iBAAiB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;gBACtD,CAAC;gBACD,MAAM,IAAI,iBAAiB,CACzB,uBAAuB,EACvB,2EAA2E,CAC5E,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnB,MAAM,IAAI,iBAAiB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,IAAI,SAAS,CAAC;gBAChE,MAAM,IAAI,iBAAiB,CACzB,uBAAuB,EACvB,0CAA0C,MAAM,CAAC,IAAI,CAAC,IAAI,EAC1D,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;aACpD,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"file-delete.js","sourceRoot":"","sources":["../../src/qa-tools/file-delete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EACL,QAAQ,EACR,OAAO,EACP,UAAU,EACV,QAAQ,EACR,OAAO,EACP,GAAG,GACJ,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AA4BpD;;;;;;GAMG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAE/B,IAAI;IADf,YACW,IAAyB,EAClC,OAAe,EACf,OAAO,GAAiB,EAAE;QAE1B,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAJf,IAAI;QAKb,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAaD,MAAM,iBAAiB,GACrB,iLAAiL,CAAC;AACpL,MAAM,cAAc,GAClB,sIAAsI,CAAC;AACzI,MAAM,SAAS,GACb,mIAAmI,CAAC;AACtI,MAAM,UAAU,GACd,2FAA2F,CAAC;AAE9F;;;;;;GAMG;AACH,KAAK,UAAU,eAAe,CAAC,IAA2B;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;IAC3C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,IAAI,iBAAiB,CACzB,uBAAuB,EACvB,qHAAqH,CACtH,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CACzB,uBAAuB,EACvB,oGAAoG,CACrG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAY,EAAE,MAAc;IAC9C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,OAAO,CACL,QAAQ,KAAK,EAAE;QACf,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC;YAC/B,QAAQ,KAAK,IAAI;YACjB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CACzB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,kBAAkB,CAAC,KAAa;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,MAAM,GAAG,QAAQ,CAAC;IACtB,SAAS,CAAC;QACR,IAAI,CAAC;YACH,OAAO,OAAO,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,MAAM,KAAK,MAAM;gBAAE,MAAM,KAAK,CAAC;YACnC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACjC,MAAM,GAAG,MAAM,CAAC;QAClB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,aAAa;QACnB,WAAW,EACT,kaAAka;QACpa,UAAU,EAAE;YACV,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;gBACd,WAAW,EACT,uGAAuG;aAC1G;SACF;QACD,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,oBAAoB,EAAE,KAAK;gBAC3B,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC5C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;iBACzC;aACF;YACD,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBACvB,MAAM,MAAM,GAAG,KAA8C,CAAC;gBAC9D,OAAO;oBACL;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,WAAW,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB;qBAC3D;iBACF,CAAC;YACJ,CAAC;SACF;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC5B,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;YACzC,iEAAiE;YACjE,qEAAqE;YACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;gBACpC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBACpB,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,SAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,iBAAiB,CACzB,uBAAuB,EACvB,wGAAwG,CACzG,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;gBACjC,mEAAmE;gBACnE,4DAA4D;gBAC5D,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CACtC,CAAC,KAAc,EAAyB,EAAE,CACxC,KAA8B,CACjC,CAAC;YACF,IAAI,IAAI,YAAY,KAAK,EAAE,CAAC;gBAC1B,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC3B,MAAM,IAAI,iBAAiB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;gBACtD,CAAC;gBACD,MAAM,IAAI,iBAAiB,CACzB,uBAAuB,EACvB,2EAA2E,CAC5E,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnB,MAAM,IAAI,iBAAiB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,IAAI,SAAS,CAAC;gBAChE,MAAM,IAAI,iBAAiB,CACzB,uBAAuB,EACvB,0CAA0C,MAAM,CAAC,IAAI,CAAC,IAAI,EAC1D,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;aACpD,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/lib/types/approvals.d.ts

@@ -14,6 +14,15 @@ export interface QaApprovalExecution {
     readonly agent?: Agent;
     readonly signal?: AbortSignal;
 }
+/**
+ * How long a parked request may hold a turn before it is failed closed. The
+ * request is a question to a person who may have walked away, and while it
+ * waits the whole turn — including any parent of a delegated caller — waits
+ * with it. A stand measured one at 1 h 06 m with nothing on the operator's
+ * screen but a thinking timer; minutes is the right unit for a yes/no about
+ * one tool call, and an expired request is refused, never assumed allowed.
+ */
+export declare const QA_APPROVAL_PARK_TIMEOUT_MS: number;
 /**
  * Interactive resolution of the tool policy `ask` decision.
  *
@@ -30,6 +39,14 @@ export interface QaApprovalExecution {
  * approved automatically, and the allow-list, the workspace fence and the
  * read-only sandbox still run on the resolved call.
  *
+ * Two callers never reach the card. A delegated child is refused on the spot:
+ * it has no one to answer it — the harness already refuses a question from an
+ * agent owned by another live agent — so a parked approval of a child would
+ * hold the parent turn for a reply that cannot arrive, which is what an answer
+ * reviewer did on a stand until a person rejected it 12,5 minutes later. And a
+ * request the operator does not answer expires: the wait is bounded by
+ * `QA_APPROVAL_PARK_TIMEOUT_MS` and fails closed like a refusal.
+ *
  * Only sessions this deployment attested are touched. Any other session's ask
  * is handed back to the chain untouched, so an operator instance that also
  * serves ordinary chats keeps its own approval flow.
@@ -56,7 +73,7 @@ export declare class QaApprovalGate {
      * attested chat answers under the chat the operator is looking at.
      */
     private ownerOf;
-    /** Park one call until the operator answers, the turn is cancelled, or … */
+    /** Park one call until the operator answers, the turn ends, or the wait expires. */
     private request;
     private resolve;
     /** Fail the requests one session's agent owns; a child never holds the chat. */

package/lib/types/client/QaSessionController.d.ts

@@ -423,6 +423,29 @@ export declare class QaSessionController {
      * somebody else retired in between is no more this one's to finish.
      */
     private bind;
+    /**
+     * Whether this browser's Session catalog names one id. The Host answers a
+     * retain from exactly this set, so a refusal of a listed session is a refusal
+     * of a session it knows — never the race this adoption can wait out.
+     */
+    private catalogLists;
+    /**
+     * Wait for this browser's Session catalog to come to know one id, after
+     * {@link bind} was refused a reference to it, and answer whether the chat on
+     * screen still belongs to the adoption that asked (`false` — it moved on, and
+     * nothing is retained). Only an id the catalog does not name reaches here: a
+     * refusal of a session it already lists is not this race and goes back as it
+     * came, so there is always a row to wait for. A refusal is only final once
+     * that row has had its chance: this is the one window where the race is
+     * repairable rather than reportable, so the failure the caller reads stays the
+     * Host's own refusal, not a timeout nobody asked for.
+     *
+     * Both timestamps are logged because the race is intermittent and the stand
+     * keeps no other trace of it: the server never sees a retain, so its journal
+     * cannot say which chat lost the create, and the next round needs the id and
+     * the two moments to line this up with its own observations.
+     */
+    private awaitCatalogRow;
     /**
      * Give up on an adoption the chat on screen has outgrown, and answer whether
      * that is what happened (`true` — the caller has nothing left to publish).

package/lib/types/client/components/QaHeader.d.ts

@@ -32,7 +32,9 @@ export interface QaHeaderProps {
     readonly onToggleAgents: () => void;
     /** Whether the deployment shows the sources control in the header at all. */
     readonly sourcesVisible: boolean;
+    /** Sources of the chat so far; 0 prints no badge but never closes the panel. */
     readonly sourcesCount: number;
+    /** Whether collection has settled: a running turn's 0 is not yet a none. */
     readonly sourcesComplete: boolean;
     readonly sourcesOpen: boolean;
     readonly onOpenSources: () => void;
@@ -72,6 +74,13 @@ export interface QaHeaderProps {
     readonly showReset: boolean;
     readonly resetDisabled: boolean;
     readonly onReset: () => void;
+    /**
+     * Offered while a panel is in front of the conversation: the «Чат» marker
+     * then becomes the control that puts the conversation back, which is what its
+     * selected look already promises. Omitted while the chat is all there is —
+     * a control that returns the reader to where they stand is a dead button.
+     */
+    readonly onBackToChat?: () => void;
 }
-export declare function QaHeader({ logoUrl, title, viewingSubagent, onCloseSubagent, roleSelector, themeSwitcher, administration, agentCount, agentsOpen, onToggleAgents, sourcesVisible, sourcesCount, sourcesComplete, sourcesOpen, onOpenSources, fileCount, filesEnabled, filesOpen, onOpenFiles, settings, history, panelLauncher, showReset, resetDisabled, onReset, }: QaHeaderProps): import("react/jsx-runtime").JSX.Element;
+export declare function QaHeader({ logoUrl, title, viewingSubagent, onCloseSubagent, roleSelector, themeSwitcher, administration, agentCount, agentsOpen, onToggleAgents, sourcesVisible, sourcesCount, sourcesComplete, sourcesOpen, onOpenSources, fileCount, filesEnabled, filesOpen, onOpenFiles, settings, history, panelLauncher, showReset, resetDisabled, onReset, onBackToChat, }: QaHeaderProps): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=QaHeader.d.ts.map

package/lib/types/client/components/QaRightRail.d.ts

@@ -1,4 +1,4 @@
-import type { ReactNode } from "react";
+import { type ReactNode } from "react";
 import type { QaRailTab } from "../use-session-ui-state.js";
 /** One rail tab's strip chip: label, live count, and its body is the panel. */
 export interface QaRailTabModel {
@@ -18,6 +18,12 @@ export interface QaRightRailProps {
  * The chat's right rail: a fixed column whose top edge is the tab strip,
  * mirroring the Harness right Sidebar's chrome. Tabs are plain chips with
  * counts; the strip's last control collapses the whole column.
+ *
+ * On the phone layout the column is the whole surface, so the strip's control
+ * is the only way back and Escape has to answer from anywhere on the page —
+ * the focus may well still sit in the composer behind the panel. A dialog above
+ * the rail keeps the key: the innermost thing on the page is what the reader
+ * means to dismiss.
  */
 export declare function QaRightRail({ tabs, activeTab, onTabSelect, onClose, }: QaRightRailProps): import("react/jsx-runtime").JSX.Element | null;
 //# sourceMappingURL=QaRightRail.d.ts.map

package/lib/types/client/components/QaSidebar.d.ts

@@ -7,6 +7,11 @@ export interface QaChatRow {
     readonly running: boolean;
     readonly active: boolean;
     readonly meta: string;
+    /**
+     * The chat's whole name, held back from the row only because the row had to
+     * be cut to fit; absent when the title is shown in full.
+     */
+    readonly fullName?: string;
     readonly updatedAt: number;
     /** Chat owner's display name; present in the admin ownership view only. */
     readonly ownerName?: string;

package/lib/types/client/components/QaWorkGroup.d.ts

@@ -1,7 +1,10 @@
 import type { QaWorkItem } from "../../types.js";
 export interface QaWorkGroupProps {
-    /** "error" marks a turn the host ended with a provider failure. */
-    readonly status: "running" | "complete" | "error";
+    /**
+     * "error" marks a turn the host ended with a provider failure; "stopped"
+     * marks one a person ended, whose answer arrived as a prefix.
+     */
+    readonly status: "running" | "complete" | "error" | "stopped";
     readonly startedAt?: number;
     readonly endedAt?: number;
     readonly items: readonly QaWorkItem[];

package/lib/types/client/settings/styles.d.ts

@@ -8,6 +8,12 @@
  * pair rather than a hard-coded outline: the Host's `focus.css` suppresses an
  * outline under pointer modality at a specificity our rule cannot win, so a
  * hard-coded ring is one that goes missing rather than one that degrades.
+ *
+ * The type scale is the surface's: text the operator reads in order to decide —
+ * section titles, field labels, the values in the controls, the toggle copy —
+ * is 16px, a control's own label and an outcome line are 14px, and only chrome
+ * stays small on purpose: the «Изменено» badge (9px), the status chips (11px),
+ * the monospace data rows (11px) and the footer note (10px).
  */
 export declare const QA_SETTINGS_STYLES: string;
 //# sourceMappingURL=styles.d.ts.map

package/lib/types/qa-tools/file-delete-gate.d.ts

@@ -2,8 +2,21 @@ import type { Context } from "@deepseek-ai/cordis";
 import type { QaSessionOwnership } from "../session-ownership.js";
 /** The one QA tool whose every call is parked for the operator. */
 export declare const QA_FILE_DELETE_TOOL = "file_delete";
-/** Why the gate answers `ask` before the chain can decide alone. */
-export declare const QA_FILE_DELETE_ASK_REASON = "deleting a workspace file requires operator confirmation";
+/**
+ * Why the gate answers `ask` before the chain can decide alone. The card the
+ * operator reads shows this verbatim, so it is written in the language of the
+ * surface rather than in the language of the tool chain.
+ */
+export declare const QA_FILE_DELETE_ASK_REASON = "\u0423\u0434\u0430\u043B\u0435\u043D\u0438\u0435 \u0444\u0430\u0439\u043B\u0430 \u0440\u0430\u0431\u043E\u0447\u0435\u0433\u043E \u043A\u0430\u0442\u0430\u043B\u043E\u0433\u0430 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043F\u043E\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043D\u0438\u044F \u043E\u043F\u0435\u0440\u0430\u0442\u043E\u0440\u0430.";
+/**
+ * Why the gate answers `deny` — not `ask` — for a delegated caller. A child has
+ * no one to confirm to it: its card would sit over the parent's composer and
+ * stop the parent turn until a person answers something they were never asked
+ * about. Deleting a file is not a step a delegation was ever given, so the call
+ * is refused where it is raised, and the reason tells the child to report
+ * instead of trying again.
+ */
+export declare const QA_FILE_DELETE_DELEGATED_DENY_REASON = "a delegated call cannot delete a workspace file: no operator can confirm it. Report the file that is in the way instead of removing it";
 /**
  * The inner half of `file_delete`'s safety: the decision that composes the
  * approval flow around one destructive tool.
@@ -20,7 +33,10 @@ export declare const QA_FILE_DELETE_ASK_REASON = "deleting a workspace file requ
  * behavior and refuses the call — nothing is ever deleted without a person.
  *
  * Any other tool, and any caller this deployment did not attest, is handed
- * back to the chain untouched.
+ * back to the chain untouched. A delegated child of an attested chat is the one
+ * attested caller that gets no card: it is refused here, on the name, whatever
+ * the deployment's approval mode is — the same refusal the answer reviewer of a
+ * stand needed before its parent turn could end.
  */
 export declare class QaFileDeleteGate {
     private readonly ctx;
@@ -33,10 +49,11 @@ export declare class QaFileDeleteGate {
     dispose(): void;
     private handle;
     /**
-     * Whether this deployment attested the chat the call belongs to, delegated
-     * children included. The same ownership service the approval gate reads,
-     * so one chat is parked under exactly one surface.
+     * The attested chat a call belongs to and the session that made it, delegated
+     * children included — the same ownership service the approval gate reads, so
+     * one chat is parked under exactly one surface. The two differ for a child,
+     * and a child is the caller that cannot be confirmed by anyone.
      */
-    private attested;
+    private rootOf;
 }
 //# sourceMappingURL=file-delete-gate.d.ts.map

package/lib/types/types.d.ts

@@ -1522,8 +1522,11 @@ export type QaMessage = QaUserMessage | {
     readonly id: string;
     readonly role: "work";
     readonly turn: number;
-    /** "error" marks a turn the host ended with a provider failure. */
-    readonly status: "running" | "complete" | "error";
+    /**
+     * "error" marks a turn the host ended with a provider failure; "stopped"
+     * marks one the user ended, whose answer is a prefix rather than a reply.
+     */
+    readonly status: "running" | "complete" | "error" | "stopped";
     readonly startedAt?: number;
     readonly endedAt?: number;
     readonly items: readonly QaWorkItem[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yadsh/dsh-qa-surface",
-  "version": "0.15.3",
+  "version": "0.15.4",
   "description": "A focused end-user QA surface backed by native DeepSeek Harness sessions",
   "repository": {
     "type": "git",
@@ -136,10 +136,10 @@
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
     "@yadsh/dsh-audit-ui": "^0.1.2",
-    "@yadsh/dsh-documents": "^0.6.2",
-    "@yadsh/dsh-plugin-kit": "^0.5.0",
     "@yadsh/dsh-audit-core": "^0.1.1",
-    "@yadsh/dsh-plugin-log": "^0.4.1"
+    "@yadsh/dsh-plugin-kit": "^0.5.0",
+    "@yadsh/dsh-plugin-log": "^0.4.1",
+    "@yadsh/dsh-documents": "^0.6.2"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.4",