@yadsh/dsh-qa-surface 0.15.4 → 0.15.6

package/lib/types/access/model-policy.d.ts

@@ -0,0 +1,95 @@
+import type { QaModelCatalogEntry, QaModelPair, ResolvedQaSurfaceConfig } from "../types.js";
+/** The layer a resolved pair came from; the journal names it with the pair. */
+export type QaModelPolicyLayer = "account" | "subrole" | "deployment";
+/**
+ * The model policy of one session: the pair its chats open on and the layer
+ * that fixed it.
+ *
+ * That pair is what the fixed-model lockdown holds the session to. It is no
+ * longer the deployment's pair, and it is not the model the visitor picked: a
+ * role with a pair of its own is served by that pair, while a chat left on a
+ * layer some policy has since replaced is outside its policy — exactly as a chat
+ * left off the single global pair used to be.
+ */
+export interface QaSessionModelPolicy {
+    readonly pair: QaModelPair | undefined;
+    readonly layer: QaModelPolicyLayer | undefined;
+}
+/** The session fields of the resolved config, as the policy reads them. */
+type SessionSlice = ResolvedQaSurfaceConfig["session"];
+/**
+ * Normalize one configured pair.
+ *
+ * Provider and model are named together or not at all, because the Host
+ * refuses either alone; an empty pair is no pair, so a role that names nothing
+ * defers to the layer below it instead of failing the configuration.
+ * @param value - the pair as stored, or nothing.
+ * @param label - prefix for the refusal, naming the field the operator edited.
+ */
+export declare function normalizeModelPair(value: QaModelPair | null | undefined, label: string): QaModelPair | undefined;
+/** The deployment-wide pair, as the policy's last layer. */
+export declare function deploymentModelPair(session: Pick<SessionSlice, "provider" | "model" | "reasoningEffort"> | undefined): QaModelPair | undefined;
+/**
+ * Fold the named layers into one session policy.
+ *
+ * The first complete pair wins outright rather than merging field by field: an
+ * account that overrides a role says which model it means, and half of a pair
+ * from one layer over half of another is a combination no operator wrote.
+ * @param layers - the layers in priority order, `undefined` where a layer keeps
+ *   no opinion.
+ */
+export declare function resolveModelPolicy(layers: Partial<Record<QaModelPolicyLayer, QaModelPair | undefined>>): QaSessionModelPolicy;
+/**
+ * The provider, model and reasoning effort a live agent carries, as the
+ * lockdown reads them off `agent.options`.
+ */
+export interface ModelSelectionFacts {
+    readonly provider?: string;
+    readonly model?: string;
+    readonly reasoningEffort?: string;
+}
+/**
+ * Whether one agent's selection sits inside the session's model policy.
+ *
+ * A pair that names no effort constrains provider and model only, so a chat
+ * that switches effort inside its own model is not mistaken for a move to
+ * another policy — which is the reading the single-pair check already had. A
+ * policy that names no pair at all constrains nothing: there is no operator
+ * decision for the session to have left.
+ */
+export declare function modelPolicySatisfied(policy: QaSessionModelPolicy, selection: ModelSelectionFacts): boolean;
+/** The catalog shape this module projects, as the harness reports it. */
+export interface HarnessModelCatalog {
+    readonly groups: readonly {
+        readonly id: string;
+        readonly name?: string;
+        readonly models: readonly {
+            readonly id: string;
+            readonly name?: string;
+            readonly reasoning?: {
+                readonly efforts?: readonly {
+                    readonly id: string;
+                }[];
+            };
+        }[];
+    }[];
+}
+/**
+ * Project the harness catalog into the pairs the administration surface lists.
+ * @param catalog - the host's model catalog.
+ */
+export declare function projectModelCatalog(catalog: HarnessModelCatalog): readonly QaModelCatalogEntry[];
+/**
+ * Refuse a pair the Host cannot serve, in the words an operator reads in the
+ * settings surface.
+ *
+ * Without this a stand accepts a typo and then fails on the first question of
+ * every chat that policy opens, which names neither the pair nor where it came
+ * from. An empty catalog is not a refusal: a Host whose catalog read failed
+ * answers with no entries, and the policy is then checked when the chat starts.
+ * @param pair - the pair being saved.
+ * @param catalog - the projected catalog, or `undefined` to skip the check.
+ */
+export declare function assertModelPairAvailable(pair: QaModelPair | undefined, catalog: readonly QaModelCatalogEntry[] | undefined): void;
+export {};
+//# sourceMappingURL=model-policy.d.ts.map

package/lib/types/access/service.d.ts

@@ -3,8 +3,9 @@ import type { Context } from "@deepseek-ai/cordis";
 import type { PluginLogger } from "@yadsh/dsh-plugin-log";
 import type { QaAccounts } from "../accounts/store.js";
 import type { QaAgentToolGrants } from "../enforcement/tool-grants.js";
-import type { QaAccessAdminSnapshot, QaAccountUserPublic, QaCapabilityConfig, QaCapabilityDescriptor, QaCapabilitySelection, QaClaimResult, QaCurrentAccess, QaEffectiveCapabilityPolicy, QaSessionAccess, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, ResolvedQaSurfaceConfig } from "../types.js";
+import type { QaAccessAdminSnapshot, QaAccountUserPublic, QaCapabilityConfig, QaCapabilityDescriptor, QaCapabilitySelection, QaClaimResult, QaCurrentAccess, QaEffectiveCapabilityPolicy, QaModelCatalogEntry, QaModelPair, QaSessionAccess, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, ResolvedQaSurfaceConfig } from "../types.js";
 import type { QaSessionLogReader } from "../admin/session-log.js";
+import { type QaSessionModelPolicy } from "./model-policy.js";
 import { QaCapabilityCatalog, type CapabilityCatalogSnapshot, type QaPresetScopeLease } from "./capability-catalog.js";
 import { QaRoleRepository } from "./role-repository.js";
 export interface QaResolvedSessionPolicy {
@@ -193,11 +194,47 @@ export declare class QaAccessService {
     adminSnapshot(token: string): Promise<QaAccessAdminSnapshot>;
     /** Replace or clear one skill's administrator overlay. */
     updateSkillOverride(token: string, input: QaSkillAssignmentOverride): readonly QaSkillAssignmentOverride[];
-    createSubrole(token: string, input: QaSubrole): QaSubrole;
-    updateSubrole(token: string, id: string, input: QaSubrole): QaSubrole;
+    /**
+     * The provider/model pairs this Host can serve right now, for the surface
+     * that writes a policy.
+     *
+     * The operator picks out of this list rather than typing a pair: a policy
+     * that names a model the deployment does not offer does not fail when it is
+     * saved, it fails on the first question of every chat that policy opens.
+     * @param token - the administrator's browser token.
+     */
+    modelCatalog(token: string): Promise<readonly QaModelCatalogEntry[]>;
+    /**
+     * The model policy of one session: the pair its chats open on, and the layer
+     * that fixed it.
+     *
+     * Read from the role the chat was reserved under, so the answer is the same
+     * for the browser path and for the integration API, which addressed the same
+     * account through a service token. Without an account behind the chat only
+     * the deployment layer can speak, which is what a stand without accounts
+     * asked for before roles had opinions about models.
+     * @param sessionId - the chat being opened.
+     */
+    modelPolicyFor(sessionId: string): QaSessionModelPolicy;
+    /**
+     * Refuse a policy the Host cannot serve before it is stored.
+     * @param pair - the pair as edited, before normalization.
+     * @param label - the field the operator edited, for the refusal.
+     */
+    assertPairServable(pair: QaModelPair | null | undefined, label: string): Promise<void>;
+    /**
+     * Ask the Host's catalog about one named pair.
+     *
+     * Called only where a pair was actually named: an assignment or a role that
+     * says nothing about models is written the moment it was written, without
+     * waiting on a catalog read it has no use for.
+     */
+    private requireServablePair;
+    createSubrole(token: string, input: QaSubrole): Promise<QaSubrole>;
+    updateSubrole(token: string, id: string, input: QaSubrole): Promise<QaSubrole>;
     deleteSubrole(token: string, id: string, replacementId: string | null): void;
     updateCommon(token: string, input: QaCapabilitySelection): QaCapabilitySelection;
-    updateAssignment(token: string, userId: string, input: QaUserAccess): QaUserAccess;
+    updateAssignment(token: string, userId: string, input: QaUserAccess): Promise<QaUserAccess>;
     /** The accounts store, or the refusal this operation names. */
     private requireAccounts;
     /**

package/lib/types/client/admin/ModelPolicyEditor.d.ts

@@ -0,0 +1,23 @@
+import type { QaAccessApi } from "../types.js";
+import type { QaModelPair } from "../../types.js";
+/**
+ * The provider and model one policy fixes, written by picking a pair this Host
+ * actually serves.
+ *
+ * Free text was the trap: a pair nobody can serve does not fail when it is
+ * saved, it fails on the first question of every chat that policy opens, in
+ * words that name neither the pair nor the role that asked for it. So the
+ * operator chooses from the harness catalog, and a pair already stored but no
+ * longer offered stays in the list, marked as such — an editor that cannot see
+ * it would otherwise drop it while the operator was changing something else.
+ */
+export declare function ModelPolicyEditor(props: {
+    readonly api: QaAccessApi;
+    readonly token: string;
+    readonly value: QaModelPair | undefined;
+    readonly disabled: boolean;
+    /** Prefix of the test ids, so one component serves both editors. */
+    readonly testId: string;
+    readonly onChange: (value: QaModelPair | undefined) => void;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=ModelPolicyEditor.d.ts.map

package/lib/types/client/types.d.ts

@@ -1,7 +1,7 @@
 import type { ClientRemote } from "@deepseek-ai/dsh-api-gateway/client";
 import type { ISessions, SessionFace } from "@deepseek-ai/dsh-api-session-controller/client";
 import type { UiConversation } from "@deepseek-ai/dsh-client-ui-conversation/client";
-import type { QaAccountNotificationsInput, QaAccountProfileInput, QaAccountSession, QaAccountStartersInput, QaAccountStarter, QaAccountUserPublic, QaAccessAdminSnapshot, QaApprovalDecision, QaClaimResult, QaLockdownProof, QaOwnershipEntry, QaPasswordResetRequest, QaPendingApproval, QaPendingQuestion, QaQuestionAnswerItem, QaQueueStatus, QaIssuedServiceToken, QaServiceTokenCreateInput, QaServiceTokenSummary, QaSessionState, QaSkillDocument, QaSkillDraftInput, QaSkillRemoval, QaSkillSummary, QaSkillToolDescriptor, QaSkillValidation, QaSourceFilePreview, QaTurnSources, QaWhoamiResult, QaDocumentPreview, QaWorkspaceFile, QaWorkspaceListing, QaCapabilitySelection, QaCurrentAccess, QaSessionAccess, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, QaAdminAuditEvent, QaAdminOverview, QaAdminPage, QaAdminSkillScope, QaAdminSkillsView, QaAdminUserDetail, QaAdminUserRow, QaAdminUserUpdate, QaAuditQuery, QaConversationDetail, QaConversationDeletion, QaConversationQuery, QaConversationReview, QaConversationReviewInput, QaConversationSummary, QaExpertMemoryDraft, QaExpertMemoryPage, QaExpertMemoryRecord, QaExpertMemoryScope, QaFeedbackQuery, QaFeedbackRow, QaMessageFeedback, QaMessageFeedbackInput, QaQualityMetrics, QaReviewQueueItem, QaReviewQueueRow, QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, QaUserQuery } from "../types.js";
+import type { QaAccountNotificationsInput, QaAccountProfileInput, QaAccountSession, QaAccountStartersInput, QaAccountStarter, QaAccountUserPublic, QaAccessAdminSnapshot, QaApprovalDecision, QaClaimResult, QaLockdownProof, QaModelCatalogEntry, QaOwnershipEntry, QaPasswordResetRequest, QaPendingApproval, QaPendingQuestion, QaQuestionAnswerItem, QaQueueStatus, QaIssuedServiceToken, QaServiceTokenCreateInput, QaServiceTokenSummary, QaSessionState, QaSkillDocument, QaSkillDraftInput, QaSkillRemoval, QaSkillSummary, QaSkillToolDescriptor, QaSkillValidation, QaSourceFilePreview, QaTurnSources, QaWhoamiResult, QaDocumentPreview, QaWorkspaceFile, QaWorkspaceListing, QaCapabilitySelection, QaCurrentAccess, QaSessionAccess, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, QaAdminAuditEvent, QaAdminOverview, QaAdminPage, QaAdminSkillScope, QaAdminSkillsView, QaAdminUserDetail, QaAdminUserRow, QaAdminUserUpdate, QaAuditQuery, QaConversationDetail, QaConversationDeletion, QaConversationQuery, QaConversationReview, QaConversationReviewInput, QaConversationSummary, QaExpertMemoryDraft, QaExpertMemoryPage, QaExpertMemoryRecord, QaExpertMemoryScope, QaFeedbackQuery, QaFeedbackRow, QaMessageFeedback, QaMessageFeedbackInput, QaQualityMetrics, QaReviewQueueItem, QaReviewQueueRow, QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, QaUserQuery } from "../types.js";
 /** Wire content one prompt carries: text plus base64 image uploads. */
 export type QaPromptContent = Parameters<SessionFace["prompt"]>[0];
 /** DSH session runtime surface the QA controller is allowed to touch. */
@@ -48,6 +48,8 @@ export interface QaAccessApi {
     }>>;
     updateCommon(token: string, input: QaCapabilitySelection): Promise<RemoteResult<QaCapabilitySelection>>;
     updateAssignment(token: string, userId: string, input: QaUserAccess): Promise<RemoteResult<QaUserAccess>>;
+    /** The pairs the Host can serve, for writing a model policy by picking one. */
+    modelCatalog(token: string): Promise<RemoteResult<readonly QaModelCatalogEntry[]>>;
     updateSkillOverride(token: string, input: QaSkillAssignmentOverride): Promise<RemoteResult<readonly QaSkillAssignmentOverride[]>>;
     skillActivations(token: string, sessionId: string): Promise<RemoteResult<readonly QaSkillActivationRecord[]>>;
 }

package/lib/types/index.d.ts

@@ -3,7 +3,7 @@ import type { Context } from "@deepseek-ai/cordis";
 import type { QaSurfaceConfigRefs } from "./config.js";
 import type { QaAccountNotificationsInput } from "./types.js";
 import type { QaTurnSources } from "./provenance/types.js";
-import type { QaAccountProfileInput, QaAccountSession, QaAccountStartersInput, QaAccountUserPublic, QaApprovalDecision, QaClaimResult, QaDocumentPreview, QaIssuedServiceToken, QaLockdownProof, QaOwnershipEntry, QaPasswordResetRequest, QaPendingApproval, QaPendingQuestion, QaQuestionAnswerItem, QaQueueStatus, QaServiceTokenCreateInput, QaServiceTokenSummary, ResolvedQaSurfaceConfig, QaAdminSkillScope, QaAdminSkillsView, QaExpertMemoryDraft, QaExpertMemoryPage, QaExpertMemoryRecord, QaExpertMemoryScope, QaSkillDocument, QaSkillDraftInput, QaSkillRemoval, QaSkillSummary, QaSkillToolDescriptor, QaSkillValidation, QaSourceFilePreview, QaWhoamiResult, QaWorkspaceFile, QaWorkspaceListing, QaPrincipal, QaAccessAdminSnapshot, QaAdminAuditEvent, QaAdminOverview, QaAdminPage, QaAdminUserDetail, QaAdminUserRow, QaAdminUserUpdate, QaAuditQuery, QaCapabilitySelection, QaConversationDetail, QaConversationDeletion, QaConversationQuery, QaConversationReview, QaConversationReviewInput, QaConversationSummary, QaCurrentAccess, QaFeedbackHarvestEntry, QaFeedbackHarvestResult, QaFeedbackQuery, QaFeedbackRow, QaMessageFeedback, QaMessageFeedbackInput, QaQualityMetrics, QaReviewQueueItem, QaReviewQueueRow, QaSessionAccess, QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, QaUserQuery } from "./types.js";
+import type { QaAccountProfileInput, QaAccountSession, QaAccountStartersInput, QaAccountUserPublic, QaApprovalDecision, QaClaimResult, QaDocumentPreview, QaIssuedServiceToken, QaLockdownProof, QaOwnershipEntry, QaPasswordResetRequest, QaPendingApproval, QaPendingQuestion, QaQuestionAnswerItem, QaQueueStatus, QaServiceTokenCreateInput, QaServiceTokenSummary, ResolvedQaSurfaceConfig, QaAdminSkillScope, QaAdminSkillsView, QaExpertMemoryDraft, QaExpertMemoryPage, QaExpertMemoryRecord, QaExpertMemoryScope, QaSkillDocument, QaSkillDraftInput, QaSkillRemoval, QaSkillSummary, QaSkillToolDescriptor, QaSkillValidation, QaSourceFilePreview, QaWhoamiResult, QaWorkspaceFile, QaWorkspaceListing, QaPrincipal, QaAccessAdminSnapshot, QaAdminAuditEvent, QaAdminOverview, QaAdminPage, QaAdminUserDetail, QaAdminUserRow, QaAdminUserUpdate, QaAuditQuery, QaCapabilitySelection, QaConversationDetail, QaConversationDeletion, QaConversationQuery, QaConversationReview, QaConversationReviewInput, QaConversationSummary, QaCurrentAccess, QaFeedbackHarvestEntry, QaFeedbackHarvestResult, QaFeedbackQuery, QaFeedbackRow, QaMessageFeedback, QaMessageFeedbackInput, QaModelCatalogEntry, QaModelPair, QaQualityMetrics, QaReviewQueueItem, QaReviewQueueRow, QaSessionAccess, QaSlashCatalog, QaSlashExecution, QaSlashSubmitAttachment, QaSkillActivationRecord, QaSkillAssignmentOverride, QaSubrole, QaUserAccess, QaUserQuery } from "./types.js";
 export declare const name = "qa-surface";
 export declare const inject: string[];
 import { QA_SURFACE_SETTINGS_NAMESPACE } from "./shared/settings.js";
@@ -97,6 +97,20 @@ export declare class QaSurface extends TypertRemoteService {
     principalForSession(sessionId: string): QaPrincipal | undefined;
     /** Admit tools that independently enforce the same QA principal boundary. */
     registerPrincipalScopedTools(names: readonly string[]): () => void;
+    /**
+     * The provider and model the QA policy fixes for one chat, for a plugin that
+     * launches work out of it.
+     *
+     * A delegated run composes its model from its own profile, and a profile that
+     * names nothing inherits the parent — which used to mean the model some
+     * visitor had picked. This answers with the pair the role was given instead,
+     * so a delegation follows the policy of the chat it serves rather than the
+     * selection made inside it. `undefined` is the deployment naming no pair at
+     * all, which leaves the caller's own configuration in force.
+     *
+     * @param sessionId - the chat the work is delegated from.
+     */
+    modelPolicyForSession(sessionId: string): QaModelPair | undefined;
     getConfig(): ResolvedQaSurfaceConfig;
     /**
      * Ownership plus the role's user-skill grant for one slash read.
@@ -228,13 +242,15 @@ export declare class QaSurface extends TypertRemoteService {
     accessSession(token: string, sessionId: string): QaSessionAccess;
     /** Complete administrator projection; authorization is checked before discovery. */
     accessAdminSnapshot(token: string): Promise<QaAccessAdminSnapshot>;
-    accessCreateSubrole(token: string, input: QaSubrole): QaSubrole;
-    accessUpdateSubrole(token: string, id: string, input: QaSubrole): QaSubrole;
+    accessCreateSubrole(token: string, input: QaSubrole): Promise<QaSubrole>;
+    accessUpdateSubrole(token: string, id: string, input: QaSubrole): Promise<QaSubrole>;
+    /** The pairs this Host can serve, for the surface that writes a policy. */
+    accessModelCatalog(token: string): Promise<readonly QaModelCatalogEntry[]>;
     accessDeleteSubrole(token: string, id: string, replacementId: string | null): {
         readonly deleted: boolean;
     };
     accessUpdateCommon(token: string, input: QaCapabilitySelection): QaCapabilitySelection;
-    accessUpdateAssignment(token: string, userId: string, input: QaUserAccess): QaUserAccess;
+    accessUpdateAssignment(token: string, userId: string, input: QaUserAccess): Promise<QaUserAccess>;
     /** Layer one administrator assignment over what a SKILL.md declares. */
     accessUpdateSkillOverride(token: string, input: QaSkillAssignmentOverride): readonly QaSkillAssignmentOverride[];
     /** What each skill activation actually granted in this session. */

package/lib/types/secure-session.d.ts

@@ -3,6 +3,7 @@ import type { Context } from "@deepseek-ai/cordis";
 import type { PluginLogger } from "@yadsh/dsh-plugin-log";
 import { type QaSessionFacts } from "./accounts/store.js";
 import type { QaResolvedSessionPolicy } from "./access/service.js";
+import { type QaSessionModelPolicy } from "./access/model-policy.js";
 import type { QaLockdownProof, ResolvedQaSurfaceConfig } from "./types.js";
 /**
  * The accounts half of admission, resolved per call by the entry (accounts
@@ -45,6 +46,12 @@ export declare class QaPolicyAdmission {
     private readonly capabilityPolicy?;
     /** Scope-local catalog entries may be known before they are activated. */
     private readonly knownDynamicToolNames;
+    /**
+     * The session's model policy, which is what the fixed-model lockdown holds
+     * the chat to. Without a resolver the deployment pair is the whole of it —
+     * the answer a stand that keeps roles elsewhere still gets.
+     */
+    private readonly modelPolicy?;
     private readonly appliedPolicies;
     /** Host-trusted principal-scoped plugin tools enabled outside static config. */
     private readonly principalScopedTools;
@@ -83,7 +90,13 @@ export declare class QaPolicyAdmission {
         readonly id: string;
     } | undefined, sessionId: string, agent: Agent) => Promise<QaResolvedSessionPolicy | undefined>) | undefined, 
     /** Scope-local catalog entries may be known before they are activated. */
-    knownDynamicToolNames?: () => readonly string[]);
+    knownDynamicToolNames?: () => readonly string[], 
+    /**
+     * The session's model policy, which is what the fixed-model lockdown holds
+     * the chat to. Without a resolver the deployment pair is the whole of it —
+     * the answer a stand that keeps roles elsewhere still gets.
+     */
+    modelPolicy?: ((sessionId: string) => QaSessionModelPolicy) | undefined);
     /**
      * Add tools whose own executor resolves the QA principal server-side.
      * Enabling the contributing plugin is the operator decision; model arguments

package/lib/types/session-model.d.ts

@@ -0,0 +1,24 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { SessionId } from "@deepseek-ai/dsh-session/types";
+import type { PluginLogger } from "@yadsh/dsh-plugin-log";
+import { type QaSessionModelPolicy } from "./access/model-policy.js";
+import type { QaModelPair } from "./types.js";
+/**
+ * Put one fresh session on the pair its model policy names.
+ *
+ * The check runs here rather than after the selection because the Host answers
+ * an unknown model by failing the first question of the chat, in words that
+ * name neither the pair nor the policy it came from. Refusing at the door keeps
+ * the chat uncreated and the operator's journal on the same line as the reason.
+ *
+ * Absent pair means no layer of the policy spoke: the session keeps whatever
+ * the Host's own default composition gives it.
+ *
+ * @param ctx - the Host context, for the model catalog and the selection.
+ * @param sessionId - the session the Host just created.
+ * @param policy - the resolved policy of this session.
+ * @param logger - where the applied pair is recorded, with its layer.
+ * @returns the pair the session was put on, or `undefined` when none applied.
+ */
+export declare function applySessionModelPolicy(ctx: Context, sessionId: SessionId, policy: QaSessionModelPolicy, logger: PluginLogger): Promise<QaModelPair | undefined>;
+//# sourceMappingURL=session-model.d.ts.map

package/lib/types/types.d.ts

@@ -173,6 +173,16 @@ export interface QaSkillActivationRecord {
     readonly deniedTools: readonly string[];
     readonly reason?: string;
 }
+/**
+ * One provider and model pair, fixed by policy rather than chosen in the
+ * interface. `provider` and `model` are named together or not at all, because
+ * the Host refuses either of them alone.
+ */
+export interface QaModelPair {
+    readonly provider: string;
+    readonly model: string;
+    readonly reasoningEffort?: string;
+}
 /** One agent capability profile. It never grants administrative access. */
 export interface QaSubrole {
     readonly id: string;
@@ -180,6 +190,12 @@ export interface QaSubrole {
     readonly description?: string;
     readonly enabled: boolean;
     readonly capabilities: QaCapabilitySelection;
+    /**
+     * The pair every chat of this role is opened on, whatever the visitor picks
+     * in the interface. Absent means the role keeps no opinion and the
+     * deployment's pair serves it.
+     */
+    readonly model?: QaModelPair;
     readonly ui?: {
         readonly icon?: string;
         readonly accent?: string;
@@ -193,10 +209,29 @@ export interface QaCapabilityConfig {
     /** Administrator assignments layered over what each skill declares. */
     readonly skillOverrides: readonly QaSkillAssignmentOverride[];
 }
+/**
+ * One pair the Host can serve right now, as the administration surface lists
+ * it. A projection of the harness catalog, so the browser never learns the
+ * provider's own catalog shape and a policy can only be written by picking one
+ * of these.
+ */
+export interface QaModelCatalogEntry {
+    readonly provider: string;
+    readonly model: string;
+    /** The catalog's display name for the model, or its id when it has none. */
+    readonly label: string;
+    readonly reasoningEfforts: readonly string[];
+}
 /** The QA profiles one account may choose, independently of its access role. */
 export interface QaUserAccess {
     readonly allowedSubroles: readonly string[];
     readonly defaultSubrole: string;
+    /**
+     * The pair this account is opened on, ahead of what its role says: a support
+     * desk runs on the local model even when it borrows a role the rest of the
+     * deployment shares. Absent means the account keeps no opinion.
+     */
+    readonly model?: QaModelPair;
 }
 export type QaCapabilitySourceKind = "core" | "plugin" | "mcp" | "filesystem" | "runtime";
 /** One capability currently installed, or retained as a missing selection. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yadsh/dsh-qa-surface",
-  "version": "0.15.4",
+  "version": "0.15.6",
   "description": "A focused end-user QA surface backed by native DeepSeek Harness sessions",
   "repository": {
     "type": "git",
@@ -137,9 +137,9 @@
     "zod": "^4.4.3",
     "@yadsh/dsh-audit-ui": "^0.1.2",
     "@yadsh/dsh-audit-core": "^0.1.1",
-    "@yadsh/dsh-plugin-kit": "^0.5.0",
     "@yadsh/dsh-plugin-log": "^0.4.1",
-    "@yadsh/dsh-documents": "^0.6.2"
+    "@yadsh/dsh-plugin-kit": "^0.5.0",
+    "@yadsh/dsh-documents": "^0.6.3"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.4",