@yadsh/dsh-qa-surface 0.20.0 → 0.21.0

package/lib/types/client/components/QaArtifactAttachment.d.ts

@@ -0,0 +1,8 @@
+import type { QaArtifactView } from "../../types.js";
+export declare function QaArtifactAttachment({ artifact, onOpen, onDownload, onApprove, }: {
+    readonly artifact: QaArtifactView;
+    readonly onOpen?: (file: QaArtifactView) => void;
+    readonly onDownload?: (file: QaArtifactView) => void;
+    readonly onApprove?: (file: QaArtifactView) => Promise<void>;
+}): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=QaArtifactAttachment.d.ts.map

package/lib/types/client/settings/sections/file-writes.d.ts

@@ -0,0 +1,4 @@
+import { type ConfigProps } from "./common.js";
+/** The operator's refusal is returned to the model before any native write. */
+export declare function FileWritesSection(props: ConfigProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=file-writes.d.ts.map

package/lib/types/client/settings/sections.d.ts

@@ -16,6 +16,7 @@ export { AccountsSection } from "./sections/accounts.js";
 export { AttachmentsSection } from "./sections/attachments.js";
 export { BrandingSection } from "./sections/branding.js";
 export { DocsSection } from "./sections/docs.js";
+export { FileWritesSection } from "./sections/file-writes.js";
 export { EmbeddingSection } from "./sections/embedding.js";
 export { InterfaceSection } from "./sections/interface.js";
 export { LockdownSection } from "./sections/lockdown.js";

package/lib/types/client/tool-presentation.d.ts

@@ -1,6 +1,7 @@
 import type { ToolResultNode } from "@deepseek-ai/dsh-client-ui-conversation/client";
 import type { QaWorkItem } from "../types.js";
 export declare function flattenToolOutput(node: ToolResultNode): string | null;
+export declare function isDelegationTool(name: string): boolean;
 export declare function toolStatus(node: ToolResultNode): "ok" | "error" | "stopped";
 export declare function workTool(callId: string, name: string, argsRaw: string, status: "running" | "ok" | "error" | "stopped", startedAt: number | undefined, endedAt: number | undefined, output: string | null): QaWorkItem;
 //# sourceMappingURL=tool-presentation.d.ts.map

package/lib/types/prompt-notes.d.ts

@@ -41,7 +41,7 @@ export declare const QA_CODE_SOURCES_NOTE = "dsh-qa-surface:code-sources";
 export declare const QA_IDENTITY_NOTE_TEMPLATE = "{identity}\n\n{instructions}";
 export declare const QA_SOURCES_NOTE_TEMPLATE = "Source provenance is collected automatically from your tool calls; the QA surface lists what it collected beside the answer. Do not append a manual Sources/\u0418\u0441\u0442\u043E\u0447\u043D\u0438\u043A\u0438 bibliography of your own.";
 export declare const QA_SOURCES_FALLBACK_TEMPLATE = "A delegated run whose provider cannot expose tool events must call {reportTool} before finishing.";
-export declare const QA_DELEGATION_NOTE_TEMPLATE = "When you start a background subagent, give the delegation a short vivid name in its description field: two or three words in the user's language that say what the run is for (\u00AB\u0421\u0432\u0435\u0440\u043A\u0430 \u043E\u0442\u0447\u0451\u0442\u043E\u0432\u00BB, \"Log triage\"). The QA surface shows that description as the subagent's display name in the operator's panel and completion notices.";
+export declare const QA_DELEGATION_NOTE_TEMPLATE: string;
 export declare const QA_DOCUMENTS_NOTE_TEMPLATE: string;
 export declare const QA_SOURCE_PRIORITY_NOTE_TEMPLATE = "Answer from the source that owns the question: read what the conversation and its attachments already carry, then search the product documentation and ask the domain expert, and only then look in memory. Recalled memory is background from earlier sessions \u2014 a miss there is not evidence that no source exists, and it is not where a document, a page or a product fact should be looked up.";
 export interface QaIdentityRenderInput {

package/lib/types/qa-tools/catalog.d.ts

@@ -2,6 +2,7 @@ import type { CodeFilesOptions } from "./code-files.js";
 import type { Agent } from "@deepseek-ai/dsh-agent";
 import type { QaToolDescriptor } from "./types.js";
 import type { QaFormGate } from "../forms/gate.js";
+import { type QaSubagentToolsOptions } from "./subagent-tools.js";
 /**
  * Deterministic catalog identity. The durable activation marker is derived from
  * the session log rather than stored, so this version is not compared against a
@@ -10,9 +11,10 @@ import type { QaFormGate } from "../forms/gate.js";
  *
  * Bump it whenever the catalog's tool set or their schemas change.
  */
-export declare const QA_TOOL_CATALOG_VERSION = "5";
+export declare const QA_TOOL_CATALOG_VERSION = "6";
 /** What the catalog's definitions read, beyond the execution record. */
 export interface QaToolsSelfcheckDeps extends CodeFilesOptions {
+    readonly subagents?: QaSubagentToolsOptions;
     readonly forms?: QaFormGate;
     readonly formProjection?: (submission: import("../forms/types.js").QaFormSubmission, sessionId: string) => Promise<unknown>;
     readonly catalogVersion: string;

package/lib/types/qa-tools/file-write-gate.d.ts

@@ -0,0 +1,6 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { QaSessionOwnership } from "../session-ownership.js";
+import type { QaFileWritePolicy } from "../shared/file-write-policy.js";
+/** Global monotonic guard: covers attested roots, children and nested dispatch. */
+export declare function installQaFileWriteGate(ctx: Context, ownership: QaSessionOwnership, policy: () => QaFileWritePolicy): () => void;
+//# sourceMappingURL=file-write-gate.d.ts.map

package/lib/types/qa-tools/index.d.ts

@@ -3,6 +3,7 @@ import type { Context } from "@deepseek-ai/cordis";
 import type { PluginLogger } from "@yadsh/dsh-plugin-log";
 import type { QaToolActivation } from "./types.js";
 export interface QaToolsOptions {
+    readonly subagents?: import("./subagent-tools.js").QaSubagentToolsOptions;
     readonly codeSources?: import("./code-files.js").CodeFilesOptions["codeSources"];
     readonly codeReadRoots?: () => readonly string[];
     readonly forms?: import("../forms/gate.js").QaFormGate;

package/lib/types/qa-tools/subagent-tools.d.ts

@@ -0,0 +1,40 @@
+import type { Context } from "@deepseek-ai/cordis";
+import type { Agent, AgentOptions } from "@deepseek-ai/dsh-agent";
+import { type ContentBlock } from "@deepseek-ai/dsh-llm";
+import type { ToolDefinition } from "@deepseek-ai/dsh-tools";
+import { type QaSessionModelPolicy } from "../access/model-policy.js";
+/** Optional Host service: loading QA does not require a subagent backend. */
+export interface QaSubagentsFace {
+    getProvider(name: string): {
+        readonly capabilities: {
+            readonly agentOptions: boolean;
+            readonly depthLimit: boolean;
+        };
+    } | undefined;
+    resolveMaxDepth(value: undefined): number | undefined;
+    startActivation(spec: {
+        readonly provider: string;
+        readonly label: string;
+        readonly signal: AbortSignal;
+        readonly delivery: "parent";
+        readonly request: {
+            readonly parent: Agent;
+            readonly prompt: ContentBlock[];
+            readonly agentOptions: AgentOptions;
+            readonly maxDepth?: number;
+        };
+    }): Promise<{
+        readonly childId: string;
+    }>;
+}
+export interface QaSubagentToolsOptions {
+    readonly ctx: Context;
+    /** Must reject a caller outside an attested QA conversation. */
+    readonly policy: (agent: Agent) => QaSessionModelPolicy;
+    readonly runtime: () => QaSubagentsFace | undefined;
+}
+/** Only live catalog entries covered by the owner's current model grants. */
+export declare function createQaListSubagentModelsTool(options: QaSubagentToolsOptions): ToolDefinition;
+/** Start a fresh native child, with route authority supplied by QA ownership. */
+export declare function createQaSubagentTool(options: QaSubagentToolsOptions): ToolDefinition;
+//# sourceMappingURL=subagent-tools.d.ts.map

package/lib/types/shared/file-write-policy.d.ts

@@ -0,0 +1,10 @@
+/** Operator-owned policy, shared by the Host resolver and settings controls. */
+export interface QaFileWritePolicy {
+    readonly blockedExtensions: readonly string[];
+    readonly message: string;
+}
+export declare const QA_FILE_WRITE_EXTENSION_PATTERN: RegExp;
+export declare const DEFAULT_QA_FILE_WRITE_POLICY: QaFileWritePolicy;
+/** Normalize exact suffixes; wildcard and path rules are deliberately unsupported. */
+export declare function resolveFileWritePolicy(input?: Partial<QaFileWritePolicy>): QaFileWritePolicy;
+//# sourceMappingURL=file-write-policy.d.ts.map

package/lib/types/types/config.d.ts

@@ -167,6 +167,8 @@ export interface QaSurfaceConfig {
      * model request until the activation skill has actually been loaded.
      */
     readonly tools?: {
+        /** Deny native file writes by suffix; an empty list disables this policy. */
+        readonly fileWritePolicy?: Partial<import("../shared/file-write-policy.js").QaFileWritePolicy>;
         /**
          * `true` attaches the QA tools only after the activation skill loads;
          * `false` attaches them to every managed agent at creation.
@@ -511,6 +513,7 @@ export interface ResolvedQaSurfaceConfig {
         readonly allowOs: boolean;
     };
     readonly tools: {
+        readonly fileWritePolicy: import("../shared/file-write-policy.js").QaFileWritePolicy;
         readonly dynamicActivation: boolean;
         readonly activationSkill: string;
         readonly activationMode: QaToolActivationMode;

package/lib/types/types/documents.d.ts

@@ -8,6 +8,8 @@
  * this account's workspace in.
  */
 export interface QaArtifactView {
+    /** Other outputs of the same spreadsheet edit in this turn, newest first. */
+    readonly earlierEdits?: readonly QaArtifactView[];
     readonly workflow?: {
         readonly id: string;
         readonly revision: number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yadsh/dsh-qa-surface",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "description": "A focused end-user QA surface backed by native DeepSeek Harness sessions",
   "repository": {
     "type": "git",
@@ -137,11 +137,11 @@
     "openid-client": "6.8.8",
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
-    "@yadsh/dsh-audit-core": "^0.1.3",
-    "@yadsh/dsh-plugin-log": "^0.4.3",
+    "@yadsh/dsh-audit-ui": "^0.1.4",
+    "@yadsh/dsh-documents": "^0.9.0",
     "@yadsh/dsh-plugin-kit": "^0.8.0",
-    "@yadsh/dsh-documents": "^0.8.3",
-    "@yadsh/dsh-audit-ui": "^0.1.4"
+    "@yadsh/dsh-plugin-log": "^0.4.3",
+    "@yadsh/dsh-audit-core": "^0.1.3"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.5",