@yadsh/dsh-qa-surface 0.4.0 → 0.5.0

package/lib/client.js

@@ -2736,7 +2736,7 @@ window.__ModuleLoader__.load({
 		}
 		let handoff;
 		const open = [];
-		const memo$6 = {
+		const memo$8 = {
 			alloc(_inst, payload, empty) {
 				const bucket = handoff;
 				if (!bucket) return empty;
@@ -2827,7 +2827,7 @@ window.__ModuleLoader__.load({
 		};
 		/** The memoizer that gives containers cycle support. `zod` installs it by default; `zod/mini` opts in with `config({ memoizer: memoizer() })`. */
 		function memoizer() {
-			return memo$6;
+			return memo$8;
 		}
 		/** Whether this value is a node a back-edge resolved to before it finished. */
 		function isBackEdge(ctx, value) {
@@ -5300,6 +5300,24 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				}).readonly()
 			}).readonly()
 		})]);
+		const _yadsh_dsh_qa_surface_qaSurface_answerApproval_parameter_0$schema = string();
+		const _yadsh_dsh_qa_surface_qaSurface_answerApproval_parameter_1$schema = string();
+		const _yadsh_dsh_qa_surface_qaSurface_answerApproval_parameter_2$schema = string();
+		const _yadsh_dsh_qa_surface_qaSurface_answerApproval_parameter_3$schema = union([literal("allowed-once"), literal("rejected")]);
+		const _yadsh_dsh_qa_surface_qaSurface_answerApproval_result$schema = boolean();
+		const _yadsh_dsh_qa_surface_qaSurface_answerQuestion_parameter_0$schema = string();
+		const _yadsh_dsh_qa_surface_qaSurface_answerQuestion_parameter_1$schema = string();
+		const _yadsh_dsh_qa_surface_qaSurface_answerQuestion_parameter_2$schema = string();
+		const _yadsh_dsh_qa_surface_qaSurface_answerQuestion_parameter_3$schema = array(object({
+			"id": string().readonly(),
+			"selected": array(string()).readonly(),
+			"custom": string().readonly().optional()
+		}));
+		const _yadsh_dsh_qa_surface_qaSurface_answerQuestion_result$schema = boolean();
+		const _yadsh_dsh_qa_surface_qaSurface_cancelQuestion_parameter_0$schema = string();
+		const _yadsh_dsh_qa_surface_qaSurface_cancelQuestion_parameter_1$schema = string();
+		const _yadsh_dsh_qa_surface_qaSurface_cancelQuestion_parameter_2$schema = string();
+		const _yadsh_dsh_qa_surface_qaSurface_cancelQuestion_result$schema = boolean();
 		const _yadsh_dsh_qa_surface_qaSurface_createSession_parameter_0$schema = string();
 		const _yadsh_dsh_qa_surface_qaSurface_createSession_result$schema = string();
 		const _yadsh_dsh_qa_surface_qaSurface_describe_result$schema = object({
@@ -5345,8 +5363,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			"suggestedQuestions": array(string()).readonly(),
 			"thinkingPhrases": array(string()).readonly(),
 			"interaction": object({
-				"approvals": literal("blocked").readonly(),
-				"questions": literal("unsupported").readonly()
+				"approvals": union([literal("blocked"), literal("interactive")]).readonly(),
+				"questions": union([literal("interactive"), literal("unsupported")]).readonly()
 			}).readonly(),
 			"lockdown": object({
 				"enabled": boolean().readonly(),
@@ -5366,7 +5384,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"toolPolicy": object({
 					"mode": literal("allow-list").readonly(),
 					"allow": array(string()).readonly()
-				}).readonly()
+				}).readonly(),
+				"sharedReadOnlyRoots": array(string()).readonly()
 			}).readonly(),
 			"embedding": object({ "frameAncestors": union([literal(null), string()]).readonly() }).readonly(),
 			"accounts": object({
@@ -5423,7 +5442,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"subagents": object({
 					"inheritSources": boolean().readonly(),
 					"enableReportToolFallback": boolean().readonly(),
-					"markIncompleteOpaqueRuns": boolean().readonly()
+					"markIncompleteOpaqueRuns": boolean().readonly(),
+					"validateReportedSources": boolean().readonly()
 				}).readonly(),
 				"legacy": object({ "parseAssistantSourcesBlock": boolean().readonly() }).readonly()
 			}).readonly(),
@@ -5435,6 +5455,34 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				"extensions": array(string()).readonly()
 			}).readonly()
 		});
+		const _yadsh_dsh_qa_surface_qaSurface_pendingApprovals_parameter_0$schema = string();
+		const _yadsh_dsh_qa_surface_qaSurface_pendingApprovals_parameter_1$schema = string();
+		const _yadsh_dsh_qa_surface_qaSurface_pendingApprovals_result$schema = array(object({
+			"id": string().readonly(),
+			"sessionId": string().readonly(),
+			"toolName": string().readonly(),
+			"reason": union([literal(null), string()]).readonly(),
+			"createdAt": number().readonly(),
+			"delegated": boolean().readonly()
+		}));
+		const _yadsh_dsh_qa_surface_qaSurface_pendingQuestions_parameter_0$schema = string();
+		const _yadsh_dsh_qa_surface_qaSurface_pendingQuestions_parameter_1$schema = string();
+		const _yadsh_dsh_qa_surface_qaSurface_pendingQuestions_result$schema = array(object({
+			"id": string().readonly(),
+			"sessionId": string().readonly(),
+			"questions": array(object({
+				"id": string().readonly(),
+				"question": string().readonly(),
+				"header": union([literal(null), string()]).readonly(),
+				"detail": union([literal(null), string()]).readonly(),
+				"options": array(object({
+					"label": string().readonly(),
+					"description": union([literal(null), string()]).readonly()
+				})).readonly(),
+				"multiSelect": boolean().readonly()
+			})).readonly(),
+			"createdAt": number().readonly()
+		}));
 		const _yadsh_dsh_qa_surface_qaSurface_readSourceFile_parameter_0$schema = string();
 		const _yadsh_dsh_qa_surface_qaSurface_readSourceFile_parameter_1$schema = string();
 		const _yadsh_dsh_qa_surface_qaSurface_readSourceFile_parameter_2$schema = string();
@@ -5614,7 +5662,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-qa-surface/src/index.ts",
-						"line": 230,
+						"line": 268,
 						"column": 3
 					}
 				},
@@ -5641,7 +5689,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-qa-surface/src/index.ts",
-						"line": 249,
+						"line": 287,
 						"column": 3
 					}
 				},
@@ -5677,7 +5725,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-qa-surface/src/index.ts",
-						"line": 218,
+						"line": 256,
 						"column": 3
 					}
 				},
@@ -5704,7 +5752,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-qa-surface/src/index.ts",
-						"line": 239,
+						"line": 277,
 						"column": 3
 					}
 				},
@@ -5740,7 +5788,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-qa-surface/src/index.ts",
-						"line": 213,
+						"line": 251,
 						"column": 3
 					}
 				},
@@ -5776,7 +5824,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-qa-surface/src/index.ts",
-						"line": 262,
+						"line": 300,
 						"column": 3
 					}
 				},
@@ -5803,10 +5851,177 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-qa-surface/src/index.ts",
-						"line": 224,
+						"line": 262,
 						"column": 3
 					}
 				},
+				{
+					id: "@yadsh/dsh-qa-surface#qaSurface/answerApproval",
+					service: "qaSurface",
+					namespace: "qaSurface",
+					method: "answerApproval",
+					invocation: { kind: "direct" },
+					parameters: [
+						{
+							name: "token",
+							wire: "token",
+							source: "json",
+							codec: {
+								mode: "strict",
+								typeSymbol: "@yadsh/dsh-qa-surface#qaSurface/answerApproval:token",
+								schema: _yadsh_dsh_qa_surface_qaSurface_answerApproval_parameter_0$schema
+							}
+						},
+						{
+							name: "sessionId",
+							wire: "sessionId",
+							source: "json",
+							codec: {
+								mode: "strict",
+								typeSymbol: "@yadsh/dsh-qa-surface#qaSurface/answerApproval:sessionId",
+								schema: _yadsh_dsh_qa_surface_qaSurface_answerApproval_parameter_1$schema
+							}
+						},
+						{
+							name: "requestId",
+							wire: "requestId",
+							source: "json",
+							codec: {
+								mode: "strict",
+								typeSymbol: "@yadsh/dsh-qa-surface#qaSurface/answerApproval:requestId",
+								schema: _yadsh_dsh_qa_surface_qaSurface_answerApproval_parameter_2$schema
+							}
+						},
+						{
+							name: "decision",
+							wire: "decision",
+							source: "json",
+							codec: {
+								mode: "strict",
+								typeSymbol: "@yadsh/dsh-qa-surface/types#QaApprovalDecision",
+								schema: _yadsh_dsh_qa_surface_qaSurface_answerApproval_parameter_3$schema
+							}
+						}
+					],
+					result: {
+						mode: "strict",
+						typeSymbol: "@yadsh/dsh-qa-surface#qaSurface/answerApproval:result",
+						schema: _yadsh_dsh_qa_surface_qaSurface_answerApproval_result$schema
+					},
+					sourceLocation: {
+						"file": "packages/dsh-qa-surface/src/index.ts",
+						"line": 455,
+						"column": 9
+					}
+				},
+				{
+					id: "@yadsh/dsh-qa-surface#qaSurface/answerQuestion",
+					service: "qaSurface",
+					namespace: "qaSurface",
+					method: "answerQuestion",
+					invocation: { kind: "direct" },
+					parameters: [
+						{
+							name: "token",
+							wire: "token",
+							source: "json",
+							codec: {
+								mode: "strict",
+								typeSymbol: "@yadsh/dsh-qa-surface#qaSurface/answerQuestion:token",
+								schema: _yadsh_dsh_qa_surface_qaSurface_answerQuestion_parameter_0$schema
+							}
+						},
+						{
+							name: "sessionId",
+							wire: "sessionId",
+							source: "json",
+							codec: {
+								mode: "strict",
+								typeSymbol: "@yadsh/dsh-qa-surface#qaSurface/answerQuestion:sessionId",
+								schema: _yadsh_dsh_qa_surface_qaSurface_answerQuestion_parameter_1$schema
+							}
+						},
+						{
+							name: "requestId",
+							wire: "requestId",
+							source: "json",
+							codec: {
+								mode: "strict",
+								typeSymbol: "@yadsh/dsh-qa-surface#qaSurface/answerQuestion:requestId",
+								schema: _yadsh_dsh_qa_surface_qaSurface_answerQuestion_parameter_2$schema
+							}
+						},
+						{
+							name: "answers",
+							wire: "answers",
+							source: "json",
+							codec: {
+								mode: "strict",
+								typeSymbol: "@yadsh/dsh-qa-surface#qaSurface/answerQuestion:answers",
+								schema: _yadsh_dsh_qa_surface_qaSurface_answerQuestion_parameter_3$schema
+							}
+						}
+					],
+					result: {
+						mode: "strict",
+						typeSymbol: "@yadsh/dsh-qa-surface#qaSurface/answerQuestion:result",
+						schema: _yadsh_dsh_qa_surface_qaSurface_answerQuestion_result$schema
+					},
+					sourceLocation: {
+						"file": "packages/dsh-qa-surface/src/index.ts",
+						"line": 484,
+						"column": 9
+					}
+				},
+				{
+					id: "@yadsh/dsh-qa-surface#qaSurface/cancelQuestion",
+					service: "qaSurface",
+					namespace: "qaSurface",
+					method: "cancelQuestion",
+					invocation: { kind: "direct" },
+					parameters: [
+						{
+							name: "token",
+							wire: "token",
+							source: "json",
+							codec: {
+								mode: "strict",
+								typeSymbol: "@yadsh/dsh-qa-surface#qaSurface/cancelQuestion:token",
+								schema: _yadsh_dsh_qa_surface_qaSurface_cancelQuestion_parameter_0$schema
+							}
+						},
+						{
+							name: "sessionId",
+							wire: "sessionId",
+							source: "json",
+							codec: {
+								mode: "strict",
+								typeSymbol: "@yadsh/dsh-qa-surface#qaSurface/cancelQuestion:sessionId",
+								schema: _yadsh_dsh_qa_surface_qaSurface_cancelQuestion_parameter_1$schema
+							}
+						},
+						{
+							name: "requestId",
+							wire: "requestId",
+							source: "json",
+							codec: {
+								mode: "strict",
+								typeSymbol: "@yadsh/dsh-qa-surface#qaSurface/cancelQuestion:requestId",
+								schema: _yadsh_dsh_qa_surface_qaSurface_cancelQuestion_parameter_2$schema
+							}
+						}
+					],
+					result: {
+						mode: "strict",
+						typeSymbol: "@yadsh/dsh-qa-surface#qaSurface/cancelQuestion:result",
+						schema: _yadsh_dsh_qa_surface_qaSurface_cancelQuestion_result$schema
+					},
+					sourceLocation: {
+						"file": "packages/dsh-qa-surface/src/index.ts",
+						"line": 496,
+						"column": 9
+					}
+				},
 				{
 					id: "@yadsh/dsh-qa-surface#qaSurface/createSession",
 					service: "qaSurface",
@@ -5830,7 +6045,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-qa-surface/src/index.ts",
-						"line": 287,
+						"line": 325,
 						"column": 9
 					}
 				},
@@ -5848,10 +6063,82 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-qa-surface/src/index.ts",
-						"line": 277,
+						"line": 315,
 						"column": 3
 					}
 				},
+				{
+					id: "@yadsh/dsh-qa-surface#qaSurface/pendingApprovals",
+					service: "qaSurface",
+					namespace: "qaSurface",
+					method: "pendingApprovals",
+					invocation: { kind: "direct" },
+					parameters: [{
+						name: "token",
+						wire: "token",
+						source: "json",
+						codec: {
+							mode: "strict",
+							typeSymbol: "@yadsh/dsh-qa-surface#qaSurface/pendingApprovals:token",
+							schema: _yadsh_dsh_qa_surface_qaSurface_pendingApprovals_parameter_0$schema
+						}
+					}, {
+						name: "sessionId",
+						wire: "sessionId",
+						source: "json",
+						codec: {
+							mode: "strict",
+							typeSymbol: "@yadsh/dsh-qa-surface#qaSurface/pendingApprovals:sessionId",
+							schema: _yadsh_dsh_qa_surface_qaSurface_pendingApprovals_parameter_1$schema
+						}
+					}],
+					result: {
+						mode: "strict",
+						typeSymbol: "@yadsh/dsh-qa-surface#qaSurface/pendingApprovals:result",
+						schema: _yadsh_dsh_qa_surface_qaSurface_pendingApprovals_result$schema
+					},
+					sourceLocation: {
+						"file": "packages/dsh-qa-surface/src/index.ts",
+						"line": 441,
+						"column": 9
+					}
+				},
+				{
+					id: "@yadsh/dsh-qa-surface#qaSurface/pendingQuestions",
+					service: "qaSurface",
+					namespace: "qaSurface",
+					method: "pendingQuestions",
+					invocation: { kind: "direct" },
+					parameters: [{
+						name: "token",
+						wire: "token",
+						source: "json",
+						codec: {
+							mode: "strict",
+							typeSymbol: "@yadsh/dsh-qa-surface#qaSurface/pendingQuestions:token",
+							schema: _yadsh_dsh_qa_surface_qaSurface_pendingQuestions_parameter_0$schema
+						}
+					}, {
+						name: "sessionId",
+						wire: "sessionId",
+						source: "json",
+						codec: {
+							mode: "strict",
+							typeSymbol: "@yadsh/dsh-qa-surface#qaSurface/pendingQuestions:sessionId",
+							schema: _yadsh_dsh_qa_surface_qaSurface_pendingQuestions_parameter_1$schema
+						}
+					}],
+					result: {
+						mode: "strict",
+						typeSymbol: "@yadsh/dsh-qa-surface#qaSurface/pendingQuestions:result",
+						schema: _yadsh_dsh_qa_surface_qaSurface_pendingQuestions_result$schema
+					},
+					sourceLocation: {
+						"file": "packages/dsh-qa-surface/src/index.ts",
+						"line": 470,
+						"column": 9
+					}
+				},
 				{
 					id: "@yadsh/dsh-qa-surface#qaSurface/readSourceFile",
 					service: "qaSurface",
@@ -5897,7 +6184,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-qa-surface/src/index.ts",
-						"line": 394,
+						"line": 507,
 						"column": 9
 					}
 				},
@@ -5933,8 +6220,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-qa-surface/src/index.ts",
-						"line": 361,
-						"column": 3
+						"line": 399,
+						"column": 9
 					}
 				},
 				{
@@ -5969,8 +6256,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					},
 					sourceLocation: {
 						"file": "packages/dsh-qa-surface/src/index.ts",
-						"line": 387,
-						"column": 3
+						"line": 428,
+						"column": 9
 					}
 				}
 			]
@@ -6459,7 +6746,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				toolPolicy: Object.freeze({
 					mode: "allow-list",
 					allow: Object.freeze([])
-				})
+				}),
+				sharedReadOnlyRoots: Object.freeze([])
 			}),
 			embedding: Object.freeze({ frameAncestors: null }),
 			accounts: Object.freeze({
@@ -6513,7 +6801,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				subagents: Object.freeze({
 					inheritSources: true,
 					enableReportToolFallback: true,
-					markIncompleteOpaqueRuns: true
+					markIncompleteOpaqueRuns: true,
+					validateReportedSources: true
 				}),
 				legacy: Object.freeze({ parseAssistantSourcesBlock: false })
 			}),
@@ -6533,6 +6822,15 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			return trimmed === "" ? null : trimmed;
 		}
 		/**
+		* Whether a configured directory is absolute. The rule reads a drive-letter
+		* path as absolute on every platform, like `session.cwd` does: a deployment
+		* profile is authored on one machine and may be read on another, so a
+		* Windows-style root is not a mistake to reject on a POSIX host.
+		*/
+		function isAbsoluteDirectoryPath(value) {
+			return /^([a-zA-Z]:[/\\]|\/)/u.test(value);
+		}
+		/**
 		* Shared numeric guard for operator-tuned limits: the value has to be a safe
 		* integer inside [min, max], and every rejection carries the same message.
 		*/
@@ -6643,8 +6941,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					cookieBootstrap: input.entry?.cookieBootstrap ?? DEFAULT_QA_SURFACE_CONFIG.entry.cookieBootstrap
 				}),
 				interaction: Object.freeze({
-					approvals: "blocked",
-					questions: "unsupported"
+					approvals: input.interaction?.approvals ?? DEFAULT_QA_SURFACE_CONFIG.interaction.approvals,
+					questions: input.interaction?.questions ?? DEFAULT_QA_SURFACE_CONFIG.interaction.questions
 				})
 			};
 		}
@@ -6656,6 +6954,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			if (names.some((value) => value.length > 200)) throw new TypeError("dsh-qa-surface: lockdown.toolPolicy.allow names must be at most 200 characters");
 			return Object.freeze(names);
 		}
+		function uniqueAbsoluteRoots(values) {
+			const roots = [...new Set(values.map((value) => value.trim()).filter(Boolean))];
+			if (roots.some((value) => !isAbsoluteDirectoryPath(value))) throw new TypeError("dsh-qa-surface: lockdown.sharedReadOnlyRoots must contain only absolute paths");
+			return Object.freeze(roots);
+		}
 		/**
 		* Resolve the lockdown domain. The capability flags are clamped shut, and
 		* showing the reset control needs an explicit authorization here, so the
@@ -6699,7 +7002,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				toolPolicy: Object.freeze({
 					mode: "allow-list",
 					allow: uniqueToolNames(input.lockdown?.toolPolicy?.allow ?? [])
-				})
+				}),
+				sharedReadOnlyRoots: uniqueAbsoluteRoots(input.lockdown?.sharedReadOnlyRoots ?? [])
 			});
 		}
 		//#endregion
@@ -6710,7 +7014,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			const fixedSessionId = optionalText(input.session?.fixedSessionId);
 			if (policy === "fixed" && fixedSessionId === null) throw new TypeError("dsh-qa-surface: session.fixedSessionId is required for fixed policy");
 			const cwd = optionalText(input.session?.cwd);
-			if (cwd !== null && !/^([a-zA-Z]:[/\\]|\/)/u.test(cwd)) throw new TypeError("dsh-qa-surface: session.cwd must be an absolute directory path");
+			if (cwd !== null && !isAbsoluteDirectoryPath(cwd)) throw new TypeError("dsh-qa-surface: session.cwd must be an absolute directory path");
 			const workspaceId = optionalText(input.session?.workspaceId);
 			if (workspaceId !== null && cwd !== null) throw new TypeError("dsh-qa-surface: session.workspaceId and session.cwd are mutually exclusive");
 			const provider = optionalText(input.session?.provider);
@@ -6777,7 +7081,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				subagents: Object.freeze({
 					inheritSources: input.sources?.subagents?.inheritSources ?? DEFAULT_QA_SURFACE_CONFIG.sources.subagents.inheritSources,
 					enableReportToolFallback: input.sources?.subagents?.enableReportToolFallback ?? DEFAULT_QA_SURFACE_CONFIG.sources.subagents.enableReportToolFallback,
-					markIncompleteOpaqueRuns: input.sources?.subagents?.markIncompleteOpaqueRuns ?? DEFAULT_QA_SURFACE_CONFIG.sources.subagents.markIncompleteOpaqueRuns
+					markIncompleteOpaqueRuns: input.sources?.subagents?.markIncompleteOpaqueRuns ?? DEFAULT_QA_SURFACE_CONFIG.sources.subagents.markIncompleteOpaqueRuns,
+					validateReportedSources: input.sources?.subagents?.validateReportedSources ?? DEFAULT_QA_SURFACE_CONFIG.sources.subagents.validateReportedSources
 				}),
 				legacy: Object.freeze({ parseAssistantSourcesBlock: input.sources?.legacy?.parseAssistantSourcesBlock ?? DEFAULT_QA_SURFACE_CONFIG.sources.legacy.parseAssistantSourcesBlock })
 			});
@@ -7493,6 +7798,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			return reason === void 0 ? null : reason;
 		}
 		function attestationHint(reason) {
+			if (reason === "agent-unavailable") return "The Host could not put a live agent behind this chat: resuming the composition its session recorded failed (a preset that no longer mounts does this). The refusal detail is in the Host logs.";
 			if (reason === "unknown-tools") return "A lockdown.toolPolicy name is not mounted in this session's tool catalog — check the deployment agent preset and the tool's server availability.";
 			if (reason === "workspace-unavailable") return "The configured session.workspaceId does not match a registered workspace - create the workspace or fix the id (session.cwd is the no-registry alternative).";
 			if (reason === "composition-mismatch") return "The session's agent preset, workspace or model no longer matches the deployment QA config.";
@@ -7726,6 +8032,194 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			}
 		};
 		//#endregion
+		//#region src/client/approvals.ts
+		/**
+		* The operator's side of a parked tool call.
+		*
+		* A composed gate's `ask` is answered on the Host, so the waiting request is
+		* Host state: it survives a page reload, and the surface learns about it by
+		* asking rather than by receiving an event. The bridge holds the last list it
+		* saw, refreshes it while a turn runs, and forwards an answer.
+		*/
+		var QaHostApprovalBridge = class {
+			approvalApi;
+			approvals = [];
+			signature = "";
+			refreshing = false;
+			answering = false;
+			/** Bumped on reset so a stale in-flight response never lands. */
+			generation = 0;
+			constructor(approvalApi) {
+				this.approvalApi = approvalApi;
+			}
+			/** Leave the chat: a chat switch drops the previous chat's requests. */
+			reset() {
+				this.generation += 1;
+				this.approvals = [];
+				this.signature = "";
+				this.refreshing = false;
+				this.answering = false;
+			}
+			/** The last list this bridge saw; empty when the deployment blocks them. */
+			list() {
+				return this.approvals;
+			}
+			/** Whether this page can ask the Host about approvals at all. */
+			get available() {
+				return this.approvalApi !== void 0;
+			}
+			/**
+			* Re-read the chat's pending requests; a changed list republishes through the
+			* callback. Overlapping calls coalesce, and a response that outlives its chat
+			* is dropped.
+			*/
+			async refresh(sessionId, token, onChanged) {
+				const api = this.approvalApi;
+				if (api === void 0 || this.refreshing) return;
+				const generation = this.generation;
+				this.refreshing = true;
+				try {
+					const result = await api.pendingApprovals(token, sessionId);
+					if (!result.ok || generation !== this.generation) return;
+					const signature = JSON.stringify(result.value);
+					if (signature === this.signature) return;
+					this.signature = signature;
+					this.approvals = result.value;
+					onChanged();
+				} catch (error) {
+					console.error("dsh-qa-surface: approval poll failed", error);
+				} finally {
+					if (generation === this.generation) this.refreshing = false;
+				}
+			}
+			/**
+			* Answer one request and re-read the list. A refusal is not an error: the
+			* request was already settled (the turn was stopped, the call went away), so
+			* the refresh — not the answer — is what the surface shows.
+			*/
+			async answer(sessionId, token, requestId, decision) {
+				const api = this.approvalApi;
+				if (api === void 0 || this.answering) return;
+				this.answering = true;
+				const generation = this.generation;
+				try {
+					await api.answerApproval(token, sessionId, requestId, decision);
+					const result = await api.pendingApprovals(token, sessionId);
+					if (generation !== this.generation) return;
+					if (result.ok) {
+						this.signature = JSON.stringify(result.value);
+						this.approvals = result.value;
+						return;
+					}
+					this.signature = "";
+					this.approvals = this.approvals.filter((approval) => approval.id !== requestId);
+				} catch (error) {
+					console.error("dsh-qa-surface: approval answer failed", error);
+				} finally {
+					this.answering = false;
+				}
+			}
+		};
+		//#endregion
+		//#region src/client/questions.ts
+		/**
+		* The operator's side of a parked `ask_user_question` call.
+		*
+		* Like a parked approval, the request lives on the Host: it survives a reload,
+		* and the surface learns about it by asking while a turn runs. Unlike an
+		* approval, an answer is a whole form — every question of the request, with the
+		* operator's selections and free text — so the bridge forwards the form and
+		* re-reads the list afterwards.
+		*/
+		var QaHostQuestionBridge = class {
+			questionApi;
+			questions = [];
+			signature = "";
+			refreshing = false;
+			answering = false;
+			/** Bumped on reset so a stale in-flight response never lands. */
+			generation = 0;
+			constructor(questionApi) {
+				this.questionApi = questionApi;
+			}
+			/** Leave the chat: a chat switch drops the previous chat's requests. */
+			reset() {
+				this.generation += 1;
+				this.questions = [];
+				this.signature = "";
+				this.refreshing = false;
+				this.answering = false;
+			}
+			/** The last list this bridge saw; empty when the deployment refuses them. */
+			list() {
+				return this.questions;
+			}
+			/** Whether this page can ask the Host about questions at all. */
+			get available() {
+				return this.questionApi !== void 0;
+			}
+			/**
+			* Re-read the chat's pending questions; a changed list republishes through
+			* the callback. Overlapping calls coalesce, and a response that outlives its
+			* chat is dropped.
+			*/
+			async refresh(sessionId, token, onChanged) {
+				const api = this.questionApi;
+				if (api === void 0 || this.refreshing) return;
+				const generation = this.generation;
+				this.refreshing = true;
+				try {
+					const result = await api.pendingQuestions(token, sessionId);
+					if (!result.ok || generation !== this.generation) return;
+					const signature = JSON.stringify(result.value);
+					if (signature === this.signature) return;
+					this.signature = signature;
+					this.questions = result.value;
+					onChanged();
+				} catch (error) {
+					console.error("dsh-qa-surface: question poll failed", error);
+				} finally {
+					if (generation === this.generation) this.refreshing = false;
+				}
+			}
+			/** Send the operator's answers to one request and re-read the list. */
+			async answer(sessionId, token, requestId, answers) {
+				await this.settle(sessionId, token, requestId, (api) => api.answerQuestion(token, sessionId, requestId, answers));
+			}
+			/** Close one request without answering it. */
+			async cancel(sessionId, token, requestId) {
+				await this.settle(sessionId, token, requestId, (api) => api.cancelQuestion(token, sessionId, requestId));
+			}
+			/**
+			* Run one write against a request, then re-read the list it belonged to. A
+			* refusal is not an error: the request was already settled (the turn was
+			* stopped, the call went away), so the refresh — not the write — is what the
+			* surface shows.
+			*/
+			async settle(sessionId, token, requestId, write) {
+				const api = this.questionApi;
+				if (api === void 0 || this.answering) return;
+				this.answering = true;
+				const generation = this.generation;
+				try {
+					await write(api);
+					const result = await api.pendingQuestions(token, sessionId);
+					if (generation !== this.generation) return;
+					if (result.ok) {
+						this.signature = JSON.stringify(result.value);
+						this.questions = result.value;
+						return;
+					}
+					this.signature = "";
+					this.questions = this.questions.filter((entry) => entry.id !== requestId);
+				} catch (error) {
+					console.error("dsh-qa-surface: question answer failed", error);
+				} finally {
+					this.answering = false;
+				}
+			}
+		};
+		//#endregion
 		//#region src/client/stream-publisher.ts
 		/**
 		* Spacing for a running turn's stream frames. A running turn's frames arrive
@@ -7785,7 +8279,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			sources: Object.freeze([]),
 			sourcesComplete: true,
 			incompleteSourceOrigins: void 0,
-			viewingSubagent: null
+			viewingSubagent: null,
+			approvals: Object.freeze([]),
+			questions: Object.freeze([])
 		});
 		//#endregion
 		//#region src/client/wait-for.ts
@@ -9029,13 +9525,20 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				sources: latest === void 0 ? [] : [...latest.sources, ...config.sources.display.showDiscovered ? latest.discovered ?? [] : []],
 				sourcesComplete: latest?.complete ?? true,
 				incompleteSourceOrigins: latest?.incompleteOrigins,
-				viewingSubagent: input.viewingSubagent
+				viewingSubagent: input.viewingSubagent,
+				approvals: input.approvals,
+				questions: input.questions
 			};
 		}
 		//#endregion
 		//#region src/client/QaSessionController.ts
 		const CONFIGURATION_ERROR = "Настройки помощника недоступны.";
 		/**
+		* Spacing of the parked-request poll. A request is answered by a person, so a
+		* second of latency is invisible; the poll only runs while a turn runs.
+		*/
+		const PENDING_POLL_MS = 1e3;
+		/**
 		* The only module that couples QA behavior to DSH Session/client APIs. It owns
 		* the chat lifecycle state machine; the observable wait, browser-local chat
 		* bookkeeping and policy-attestation details live in their own modules.
@@ -9079,6 +9582,12 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			chatsRevision = 0;
 			/** Host-side provenance of the bound chat, merged into the projection. */
 			hostSources;
+			/** Host-side approvals of the bound chat waiting for the operator. */
+			hostApprovals;
+			/** Host-side question requests of the bound chat waiting for the operator. */
+			hostQuestions;
+			/** Set while a running turn is polled for parked requests. */
+			pendingTimer;
 			constructor(options) {
 				this.sessions = options.sessions;
 				this.createSessionRemote = options.createSession;
@@ -9100,6 +9609,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				this.accounts = options.accounts;
 				this.fileUpload = options.fileUpload ?? (() => void 0);
 				this.hostSources = new QaHostSourceBridge(this.sourceApi, () => this.accounts?.token() ?? "");
+				this.hostApprovals = new QaHostApprovalBridge(options.approvalApi);
+				this.hostQuestions = new QaHostQuestionBridge(options.questionApi);
 				this.timeoutMs = options.timeoutMs ?? 15e3;
 				this.streamPublisher = new StreamPublisher(options.streamIntervalMs ?? 66);
 				this.connectedOnce = this.connection.getSnapshot() !== void 0;
@@ -9557,6 +10068,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				if (this.session !== void 0) this.assets.release(String(this.session.sessionId));
 				this.session = void 0;
 				this.hostSources.reset();
+				this.hostApprovals.reset();
+				this.hostQuestions.reset();
+				this.stopPendingPolling();
 				this.admissionPending = false;
 				this.policyReady = false;
 			}
@@ -9598,12 +10112,15 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				const projectedSourceBundles = projectTurnSources(conversationSnapshot, sessionId, this.config.session.cwd ?? void 0);
 				const sourceBundles = this.hostSources.merge(projectedSourceBundles);
 				if (!snapshot.running) this.hostSources.refresh(sessionId, () => this.publish());
+				this.syncPendingPolling(snapshot.running === true);
 				this.state = projectBoundSessionState({
 					connected,
 					sessionId,
 					sessionSnapshot: snapshot,
 					conversationSnapshot,
 					sourceBundles,
+					approvals: this.hostApprovals.list(),
+					questions: this.hostQuestions.list(),
 					author: this.accounts?.messageAuthorOf(sessionId),
 					operationError: this.operationError,
 					policyReady: this.policyReady,
@@ -9674,6 +10191,59 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			emit() {
 				for (const listener of this.listeners) listener();
 			}
+			/**
+			* Answer a request the Host parked for this chat. The Host re-checks the
+			* request against the chat, so an answer that lost its race is a no-op; the
+			* refresh that follows is what the surface renders.
+			*/
+			async answerApproval(requestId, decision) {
+				if (this.session === void 0) return;
+				await this.hostApprovals.answer(String(this.session.sessionId), this.hostToken(), requestId, decision);
+				this.publish();
+			}
+			/** Send the operator's answers to one parked question request. */
+			async answerQuestion(requestId, answers) {
+				if (this.session === void 0) return;
+				await this.hostQuestions.answer(String(this.session.sessionId), this.hostToken(), requestId, answers);
+				this.publish();
+			}
+			/** Close a parked question request without answering it. */
+			async cancelQuestion(requestId) {
+				if (this.session === void 0) return;
+				await this.hostQuestions.cancel(String(this.session.sessionId), this.hostToken(), requestId);
+				this.publish();
+			}
+			/**
+			* Poll the Host for parked requests while a turn runs. A request only exists
+			* inside an open turn, and it is Host state: polling is how the page learns
+			* about it, and how it reappears after a reload. One timer serves both seams,
+			* and each is polled only where the deployment answers it.
+			*/
+			syncPendingPolling(running) {
+				const approvals = this.hostApprovals.available ? this.config.interaction.approvals === "interactive" : false;
+				const questions = this.hostQuestions.available ? this.config.interaction.questions === "interactive" : false;
+				if (!(running && (approvals || questions) && this.viewingSubagent === null && this.session !== void 0)) {
+					this.stopPendingPolling();
+					return;
+				}
+				if (this.pendingTimer !== void 0 || this.session === void 0) return;
+				const sessionId = String(this.session.sessionId);
+				const token = this.hostToken();
+				const tick = () => {
+					if (approvals) this.hostApprovals.refresh(sessionId, token, () => this.publish());
+					if (questions) this.hostQuestions.refresh(sessionId, token, () => this.publish());
+				};
+				this.pendingTimer = setInterval(tick, PENDING_POLL_MS);
+				tick();
+			}
+			stopPendingPolling() {
+				if (this.pendingTimer === void 0) return;
+				clearInterval(this.pendingTimer);
+				this.pendingTimer = void 0;
+			}
+			hostToken() {
+				return this.accounts?.token() ?? "";
+			}
 		};
 		//#endregion
 		//#region src/client/settings/format.ts
@@ -10121,6 +10691,292 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			});
 		}
 		//#endregion
+		//#region src/client/components/QaApproval.tsx
+		/**
+		* The tool calls a composed gate parked for a person. One row per request, the
+		* gate's own reason on top, and the two answers stock DSH offers: refuse, or
+		* let this one call through. Nothing here decides on its own — an unanswered
+		* request simply keeps the turn waiting.
+		*/
+		const QaApproval = (0, react.memo)(function QaApproval(props) {
+			const [answering, setAnswering] = (0, react.useState)(null);
+			const approvals = props.approvals;
+			if (approvals.length === 0) return null;
+			const answer = (requestId, decision) => {
+				setAnswering(requestId);
+				props.onAnswer(requestId, decision).finally(() => {
+					setAnswering((current) => current === requestId ? null : current);
+				});
+			};
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: "dsh-qa-approvals",
+				"aria-label": "Запросы на одобрение",
+				children: approvals.map((approval) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+					className: "dsh-qa-approval",
+					"aria-live": "polite",
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+							className: "dsh-qa-approval__strip",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								className: "dsh-qa-approval__dot",
+								"aria-hidden": "true"
+							}), "Ожидает одобрения"]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							className: "dsh-qa-approval__reason",
+							children: approval.reason ?? `Инструмент «${approval.toolName}» запрашивает разрешение.`
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+							className: "dsh-qa-approval__tool",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", { children: approval.toolName }), approval.delegated ? " · запросил субагент" : ""]
+						}),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							className: "dsh-qa-approval__actions",
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsh-qa-approval__button",
+								disabled: answering === approval.id,
+								onClick: () => answer(approval.id, "rejected"),
+								children: "Отклонить"
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsh-qa-approval__button dsh-qa-approval__button--primary",
+								disabled: answering === approval.id,
+								onClick: () => answer(approval.id, "allowed-once"),
+								children: "Разрешить один раз"
+							})]
+						})
+					]
+				}, approval.id))
+			});
+		});
+		//#endregion
+		//#region src/client/components/QaQuestions.tsx
+		const NO_DRAFT = {
+			selected: [],
+			custom: "",
+			skipped: false
+		};
+		const isAnswered = (draft) => draft.skipped || draft.selected.length > 0 || draft.custom.trim() !== "";
+		/**
+		* Encode one question's draft the way the harness decodes it (its
+		* user-questions README): a skipped question carries no selection, free text
+		* overrides the choice in a single-select, and accompanies it in a
+		* multi-select.
+		*/
+		function encodeAnswer(question, draft) {
+			if (draft.skipped) return {
+				id: question.id,
+				selected: []
+			};
+			const custom = draft.custom.trim();
+			if (question.multiSelect) return {
+				id: question.id,
+				selected: [...draft.selected],
+				...custom === "" ? {} : { custom }
+			};
+			if (custom !== "") return {
+				id: question.id,
+				selected: [],
+				custom
+			};
+			return {
+				id: question.id,
+				selected: [...draft.selected]
+			};
+		}
+		/**
+		* One parked `ask_user_question` request: the operator's answers, a question at
+		* a time, with a pager when the model asked more than one thing at once.
+		*/
+		function QaQuestionForm({ request, onAnswer, onCancel }) {
+			const [index, setIndex] = (0, react.useState)(0);
+			const [drafts, setDrafts] = (0, react.useState)({});
+			const [busy, setBusy] = (0, react.useState)(null);
+			const [failure, setFailure] = (0, react.useState)(null);
+			const questions = request.questions;
+			const question = questions[Math.min(index, questions.length - 1)];
+			if (question === void 0) return null;
+			const draft = drafts[question.id] ?? NO_DRAFT;
+			const last = index === questions.length - 1;
+			const complete = questions.every((item) => isAnswered(drafts[item.id] ?? NO_DRAFT));
+			const edit = (next) => {
+				setDrafts((current) => ({
+					...current,
+					[question.id]: next
+				}));
+			};
+			const advance = () => {
+				setIndex((current) => Math.min(current + 1, questions.length - 1));
+			};
+			const select = (label) => {
+				if (question.multiSelect) {
+					const selected = draft.selected.includes(label) ? draft.selected.filter((item) => item !== label) : [...draft.selected, label];
+					edit({
+						...draft,
+						selected
+					});
+					return;
+				}
+				edit({
+					...draft,
+					selected: [label]
+				});
+				if (!last) advance();
+			};
+			const skip = () => {
+				edit({
+					...draft,
+					selected: [],
+					custom: "",
+					skipped: true
+				});
+				if (!last) advance();
+			};
+			const submit = () => {
+				setBusy("answer");
+				setFailure(null);
+				onAnswer(request.id, questions.map((item) => encodeAnswer(item, drafts[item.id] ?? NO_DRAFT))).catch(() => setFailure("Не удалось отправить ответ.")).finally(() => setBusy(null));
+			};
+			const cancel = () => {
+				setBusy("cancel");
+				setFailure(null);
+				onCancel(request.id).catch(() => setFailure("Не удалось закрыть вопрос.")).finally(() => setBusy(null));
+			};
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+				className: "dsh-qa-question",
+				"aria-live": "polite",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+						className: "dsh-qa-question__strip",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							className: "dsh-qa-question__dot",
+							"aria-hidden": "true"
+						}), questions.length > 1 ? `Требуется ответ · вопрос ${index + 1} из ${questions.length}` : "Требуется ответ"]
+					}),
+					question.header === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "dsh-qa-question__header",
+						children: question.header
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("fieldset", {
+						className: "dsh-qa-question__fieldset",
+						disabled: busy !== null,
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("legend", {
+								className: "dsh-qa-question__text",
+								children: question.question
+							}),
+							question.detail === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+								className: "dsh-qa-question__detail",
+								children: question.detail
+							}),
+							question.options.length === 0 ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: "dsh-qa-question__options",
+								role: question.multiSelect ? "group" : "radiogroup",
+								"aria-label": question.question,
+								children: question.options.map((option) => {
+									const checked = draft.selected.includes(option.label);
+									return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+										className: "dsh-qa-question__option",
+										"data-checked": checked ? "true" : "false",
+										children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+											type: question.multiSelect ? "checkbox" : "radio",
+											name: `qa-question-${request.id}-${question.id}`,
+											checked,
+											onChange: () => select(option.label)
+										}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+											className: "dsh-qa-question__option-text",
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												className: "dsh-qa-question__option-label",
+												children: option.label
+											}), option.description === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												className: "dsh-qa-question__option-description",
+												children: option.description
+											})]
+										})]
+									}, option.label);
+								})
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+								className: "dsh-qa-question__custom",
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: "Свой ответ" }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("textarea", {
+									rows: 2,
+									value: draft.custom,
+									placeholder: "Напечатайте ответ…",
+									onChange: (event) => edit({
+										...draft,
+										custom: event.target.value,
+										skipped: false
+									})
+								})]
+							})
+						]
+					}),
+					failure === null ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						className: "dsh-qa-question__error",
+						role: "alert",
+						children: failure
+					}),
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "dsh-qa-question__actions",
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsh-qa-question__button",
+								disabled: busy !== null,
+								onClick: cancel,
+								children: "Отмена"
+							}),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsh-qa-question__button",
+								disabled: busy !== null || draft.skipped,
+								onClick: skip,
+								children: "Пропустить"
+							}),
+							index > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsh-qa-question__button",
+								disabled: busy !== null,
+								onClick: () => setIndex((current) => Math.max(current - 1, 0)),
+								children: "Назад"
+							}) : null,
+							last ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsh-qa-question__button dsh-qa-question__button--primary",
+								disabled: busy !== null || !complete,
+								onClick: submit,
+								children: "Отправить"
+							}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								className: "dsh-qa-question__button dsh-qa-question__button--primary",
+								disabled: busy !== null || !isAnswered(draft),
+								onClick: advance,
+								children: "Далее"
+							})
+						]
+					})
+				]
+			});
+		}
+		/**
+		* The questions a running turn waits on. Answers are the operator's own: the
+		* form refuses to submit a question left blank, and a question explicitly
+		* skipped is reported as skipped rather than answered by guesswork.
+		*/
+		const QaQuestions = (0, react.memo)(function QaQuestions(props) {
+			if (props.questions.length === 0) return null;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+				className: "dsh-qa-questions",
+				"aria-label": "Вопросы помощника",
+				children: props.questions.map((request) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(QaQuestionForm, {
+					request,
+					onAnswer: props.onAnswer,
+					onCancel: props.onCancel
+				}, request.id))
+			});
+		});
+		//#endregion
 		//#region src/client/components/QaFileAttachment.tsx
 		/** Uppercase extension badge; a name without one falls back to a paper glyph. */
 		function badgeText(name) {
@@ -11842,8 +12698,29 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		}
 		//#endregion
 		//#region src/client/components/QaChangelog.tsx
-		const QA_VERSION = "0.4.0";
+		const QA_VERSION = "0.5.0";
 		const QA_CHANGELOG = [
+			{
+				version: "0.5.0",
+				date: "2026-09-14",
+				sections: [{
+					title: "Новое",
+					items: [
+						"Одобрения можно давать прямо в QA-интерфейсе: если композитная проверка (классификатор безопасности, правило-хук) помечает вызов инструмента как требующий подтверждения, а настройка interaction.approvals стоит в режиме interactive, вызов встаёт на паузу и появляется карточкой над полем ввода — с причиной проверки, именем инструмента и двумя ответами, «Отклонить» и «Разрешить один раз». Запрос хранится на сервере, поэтому переживает перезагрузку страницы, а неотвеченный закрывается вместе с остановкой хода. По умолчанию (blocked) вызов отклоняется с причиной, и ни один режим не одобряет ничего без человека.",
+						"Вопросы модели отвечаются там же: interaction.questions в режиме interactive показывает ask_user_question формой над полем ввода — вопросы листаются по одному, с вариантами одиночного и множественного выбора, свободным ответом и явными «Пропустить» и «Отменить». Пропущенный вопрос передаётся модели как пропущенный, а не выдуманный; без этой настройки запрос отклоняется с причиной, которую модель может отработать.",
+						"Модели разрешено сообщать источники, которые не сводятся к документу: настройка sources.subagents.validateReportedSources снимает сразу две проверки — отчёт принимается и от самого QA-агента, а не только от делегированного прогона, а запись без адреса сохраняет свой тип, заголовок и сниппет вместо того, чтобы отбрасываться. Ссылка, которую не удалось разобрать, сохраняется как есть, а отсутствующий заголовок заменяется последним сегментом пути. Тумблер живёт в карточке настроек, раздел «Источники», подраздел «Субагенты».",
+						"Пароль аккаунта сбрасывается из командной строки: qa-accounts set-password <почта> --password-stdin. Аккаунт сохраняет свой идентификатор, профиль и все свои чаты, а прежний пароль и выданные под ним токены перестают работать, поэтому сброс закрывает и подозрение на утечку. Пароль читается из стандартного ввода одной строкой и не остаётся в истории команд.",
+						"Общие каталоги только для чтения: lockdown.sharedReadOnlyRoots перечисляет абсолютные пути, доступные читающим инструментам (read, read_image, glob, grep и просмотр в str_replace_editor) поверх личного каталога аккаунта. Записи при этом остаются внутри каталога пользователя, и доступа к инструменту, которого нет в белом списке, это не даёт."
+					]
+				}, {
+					title: "Исправления",
+					items: [
+						"Чат, начатый до перезапуска хоста, снова открывается: поверхность сама будит агента сессии, если хост его ещё не собрал. Раньше такой чат отвечал «Не удалось открыть этот чат.», а восстановление при загрузке бросало его и поднимало новый сеанс.",
+						"Инструменты чтения Git больше не отклоняются сторожем путей по имени: границу репозитория держит отдельно настроенный Git-плагин.",
+						"Заблокированное одобрение больше не выдаётся за отказ пользователя: вызов отклоняется с собственной причиной поверхности, а не с формулировкой «пользователь отклонил»."
+					]
+				}]
+			},
 			{
 				version: "0.4.0",
 				date: "2026-09-13",
@@ -11963,7 +12840,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 								className: "dsh-qa-changelog__date",
 								children: entry.date
 							}),
-							entry.version === "0.4.0" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							entry.version === "0.5.0" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 								className: "dsh-qa-changelog__current",
 								children: "текущая"
 							}) : null
@@ -13644,6 +14521,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					secureSession: props.secureSession,
 					createSession: props.createSession,
 					sourceApi: props.sourceApi,
+					...props.approvalApi === void 0 ? {} : { approvalApi: props.approvalApi },
+					...props.questionApi === void 0 ? {} : { questionApi: props.questionApi },
 					config,
 					storage: window.localStorage,
 					accounts: facade,
@@ -13661,6 +14540,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				props.connection,
 				props.createSession,
 				props.fileUpload,
+				props.approvalApi,
+				props.questionApi,
 				props.secureSession,
 				props.sourceApi,
 				props.sessions,
@@ -13711,6 +14592,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			}, [controller]);
 			const handleSend = (0, react.useCallback)((text, attachments) => controller?.send(text, attachments) ?? Promise.resolve(false), [controller]);
 			const handleStop = (0, react.useCallback)(() => controller?.stop() ?? Promise.resolve(), [controller]);
+			const handleAnswerApproval = (0, react.useCallback)((requestId, decision) => controller?.answerApproval(requestId, decision) ?? Promise.resolve(), [controller]);
+			const handleAnswerQuestion = (0, react.useCallback)((requestId, answers) => controller?.answerQuestion(requestId, answers) ?? Promise.resolve(), [controller]);
+			const handleCancelQuestion = (0, react.useCallback)((requestId) => controller?.cancelQuestion(requestId) ?? Promise.resolve(), [controller]);
 			const handleCloseSubagent = (0, react.useCallback)(() => {
 				controller?.closeSubagent();
 			}, [controller]);
@@ -13972,31 +14856,43 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 										className: "dsh-qa-footer",
 										children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 											className: "dsh-qa-footer__inner",
-											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(QaComposer, {
-												placeholder: config.branding.placeholder,
-												quickQuestions: empty ? config.suggestedQuestions : NO_QUESTIONS,
-												canSend: state.canSend,
-												canStop: state.canStop,
-												running: state.phase === "running",
-												showStop: config.ui.showStop,
-												status,
-												attachments: pendingAttachments,
-												limits,
-												onAttachmentsChange: setPendingAttachments,
-												onSend: handleSend,
-												onStop: handleStop
-											}, state.sessionId ?? "draft"), config.branding.disclaimer === "" ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
-												className: "dsh-qa-footer__disclaimer",
-												children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("svg", {
-													viewBox: "0 0 16 16",
-													"aria-hidden": "true",
-													children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("circle", {
-														cx: "8",
-														cy: "8",
-														r: "5.75"
-													}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("path", { d: "M8 7.25v3.5m0-5.25v.5" })]
-												}), config.branding.disclaimer]
-											})]
+											children: [
+												/* @__PURE__ */ (0, react_jsx_runtime.jsx)(QaApproval, {
+													approvals: state.approvals,
+													onAnswer: handleAnswerApproval
+												}),
+												/* @__PURE__ */ (0, react_jsx_runtime.jsx)(QaQuestions, {
+													questions: state.questions,
+													onAnswer: handleAnswerQuestion,
+													onCancel: handleCancelQuestion
+												}),
+												/* @__PURE__ */ (0, react_jsx_runtime.jsx)(QaComposer, {
+													placeholder: config.branding.placeholder,
+													quickQuestions: empty ? config.suggestedQuestions : NO_QUESTIONS,
+													canSend: state.canSend,
+													canStop: state.canStop,
+													running: state.phase === "running",
+													showStop: config.ui.showStop,
+													status,
+													attachments: pendingAttachments,
+													limits,
+													onAttachmentsChange: setPendingAttachments,
+													onSend: handleSend,
+													onStop: handleStop
+												}, state.sessionId ?? "draft"),
+												config.branding.disclaimer === "" ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("p", {
+													className: "dsh-qa-footer__disclaimer",
+													children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("svg", {
+														viewBox: "0 0 16 16",
+														"aria-hidden": "true",
+														children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("circle", {
+															cx: "8",
+															cy: "8",
+															r: "5.75"
+														}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("path", { d: "M8 7.25v3.5m0-5.25v.5" })]
+													}), config.branding.disclaimer]
+												})
+											]
 										})
 									}),
 									!empty ? ["left", "right"].map((side) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(QaWidthHandle, {
@@ -14482,6 +15378,48 @@ a.dsh-qa-srcref:hover,button.dsh-qa-srcref:hover{border-color:var(--dsw-alias-la
 .dsh-qa-work-tool__body pre{max-height:260px;overflow:auto;margin:0;padding:7px 10px 10px;color:var(--dsw-alias-label-secondary);background:transparent;font-family:ui-monospace,SFMono-Regular,Consolas,monospace;font-size:12px;line-height:19px;white-space:pre-wrap;overflow-wrap:anywhere}
 .dsh-qa-error{display:flex;align-items:center;justify-content:center;gap:10px;margin:16px auto;padding:10px 12px;border:1px solid var(--dsh-qa-error);border-radius:10px;color:var(--dsw-alias-label-primary);font-size:13px}
 .dsh-qa-error button{border:0;background:transparent;color:var(--dsh-qa-accent);font:inherit;font-weight:600;cursor:pointer}
+.dsh-qa-approvals{display:flex;flex-direction:column;gap:8px;width:100%;margin-bottom:10px}
+.dsh-qa-approval{padding:12px 14px;border:1px solid var(--dsh-qa-warning30);border-radius:12px;background:var(--dsh-qa-warning10)}
+.dsh-qa-approval__strip{display:flex;align-items:center;gap:7px;margin:0 0 8px;color:var(--dsh-qa-warning-hover);font-size:12px;font-weight:600;line-height:16px}
+.dsh-qa-approval__dot{width:7px;height:7px;flex:none;border-radius:999px;background:var(--dsh-qa-warning)}
+.dsh-qa-approval__reason{margin:0;color:var(--dsw-alias-label-primary);font-size:13px;line-height:19px;overflow-wrap:anywhere}
+.dsh-qa-approval__tool{margin:6px 0 0;color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:16px}
+.dsh-qa-approval__tool code{font-family:ui-monospace,SFMono-Regular,Consolas,monospace;font-size:11px}
+.dsh-qa-approval__actions{display:flex;justify-content:flex-end;gap:8px;margin-top:10px}
+.dsh-qa-approval__button{appearance:none;padding:7px 14px;border:1px solid var(--dsw-alias-border-l2);border-radius:999px;background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);font:inherit;font-size:13px;font-weight:600;line-height:18px;cursor:pointer}
+.dsh-qa-approval__button:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}
+.dsh-qa-approval__button:disabled{opacity:.5;cursor:default}
+.dsh-qa-approval__button:focus-visible{outline:2px solid var(--dsh-qa-accent);outline-offset:1px}
+.dsh-qa-approval__button--primary{border-color:transparent;background:var(--dsh-qa-accent);color:var(--dsh-qa-accent-contrast)}
+.dsh-qa-approval__button--primary:hover:not(:disabled){background:var(--dsh-qa-accent-hover)}
+.dsh-qa-questions{display:flex;flex-direction:column;gap:8px;width:100%;margin-bottom:10px}
+.dsh-qa-question{padding:12px 14px;border:1px solid var(--dsh-qa-info30);border-radius:12px;background:var(--dsh-qa-info10)}
+.dsh-qa-question__strip{display:flex;align-items:center;gap:7px;margin:0 0 8px;color:var(--dsh-qa-info);font-size:12px;font-weight:600;line-height:16px}
+.dsh-qa-question__dot{width:7px;height:7px;flex:none;border-radius:999px;background:var(--dsh-qa-info)}
+.dsh-qa-question__header{margin:0 0 4px;color:var(--dsw-alias-label-tertiary);font-size:11px;font-weight:600;line-height:16px;text-transform:uppercase;letter-spacing:.04em}
+.dsh-qa-question__fieldset{display:flex;flex-direction:column;gap:8px;min-width:0;margin:0;padding:0;border:0}
+.dsh-qa-question__text{margin:0;padding:0;color:var(--dsw-alias-label-primary);font-size:13px;font-weight:600;line-height:19px;overflow-wrap:anywhere}
+.dsh-qa-question__detail{margin:0;color:var(--dsw-alias-label-secondary);font-size:12px;line-height:18px;white-space:pre-wrap;overflow-wrap:anywhere;max-height:220px;overflow:auto}
+.dsh-qa-question__options{display:flex;flex-direction:column;gap:6px}
+.dsh-qa-question__option{display:flex;align-items:flex-start;gap:8px;padding:7px 10px;border:1px solid var(--dsw-alias-border-l2);border-radius:10px;background:var(--dsw-alias-bg-layer-2);cursor:pointer}
+.dsh-qa-question__option[data-checked="true"]{border-color:var(--dsh-qa-info);background:color-mix(in srgb,var(--dsh-qa-info) 8%,var(--dsw-alias-bg-layer-2))}
+.dsh-qa-question__option input{margin:2px 0 0;accent-color:var(--dsh-qa-info)}
+.dsh-qa-question__option-text{display:flex;flex-direction:column;gap:2px;min-width:0}
+.dsh-qa-question__option-label{color:var(--dsw-alias-label-primary);font-size:13px;line-height:18px;overflow-wrap:anywhere}
+.dsh-qa-question__option-description{color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:17px;overflow-wrap:anywhere}
+.dsh-qa-question__custom{display:flex;flex-direction:column;gap:4px}
+.dsh-qa-question__custom span{color:var(--dsw-alias-label-tertiary);font-size:11px;line-height:16px}
+.dsh-qa-question__custom textarea{width:100%;resize:vertical;padding:8px 10px;border:1px solid var(--dsw-alias-border-l2);border-radius:10px;background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);font:inherit;font-size:13px;line-height:19px}
+.dsh-qa-question__custom textarea:focus-visible{outline:2px solid var(--dsh-qa-info);outline-offset:1px}
+.dsh-qa-question__fieldset:disabled{opacity:.6}
+.dsh-qa-question__error{margin:0;color:var(--dsh-qa-error);font-size:12px;line-height:17px}
+.dsh-qa-question__actions{display:flex;justify-content:flex-end;gap:8px;margin-top:10px}
+.dsh-qa-question__button{appearance:none;padding:7px 14px;border:1px solid var(--dsw-alias-border-l2);border-radius:999px;background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-primary);font:inherit;font-size:13px;font-weight:600;line-height:18px;cursor:pointer}
+.dsh-qa-question__button:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}
+.dsh-qa-question__button:disabled{opacity:.5;cursor:default}
+.dsh-qa-question__button:focus-visible{outline:2px solid var(--dsh-qa-info);outline-offset:1px}
+.dsh-qa-question__button--primary{border-color:transparent;background:var(--dsh-qa-accent);color:var(--dsh-qa-accent-contrast)}
+.dsh-qa-question__button--primary:hover:not(:disabled){background:var(--dsh-qa-accent-hover)}
 .dsh-qa-footer{position:relative;flex:none;padding:28px 16px max(12px,env(safe-area-inset-bottom));background:linear-gradient(180deg,color-mix(in srgb,var(--dsw-alias-bg-base) 0%,transparent) 0,var(--dsw-alias-bg-base) 28px)}
 .dsh-qa-footer__inner{width:100%;max-width:var(--dsh-qa-content-width);margin:0 auto}
 .dsh-qa-composer-wrap{display:flex;flex-direction:column;gap:10px;width:100%}
@@ -16159,6 +17097,19 @@ a.dsh-qa-srcref:hover,button.dsh-qa-srcref:hover{border-color:var(--dsw-alias-la
 											"markIncompleteOpaqueRuns"
 										], value);
 									}
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)(Toggle, {
+									checked: sources?.subagents?.validateReportedSources ?? true,
+									disabled: blocked,
+									label: "Проверять источники из отчёта",
+									hint: "С проверкой принимается только источник с путём или адресом из делегированного прогона. Без неё записывается и «факт» без адреса, и отчёт самого помощника.",
+									onChange: (value) => {
+										props.write([
+											"sources",
+											"subagents",
+											"validateReportedSources"
+										], value);
+									}
 								})
 							]
 						})]
@@ -16548,6 +17499,15 @@ textarea.qa-card-control{height:auto;padding:8px 12px;line-height:1.5;resize:ver
 					sources: (token, sessionId) => policyRemote.sources(token, sessionId),
 					readSourceFile: (token, sessionId, sourcePath) => policyRemote.readSourceFile(token, sessionId, sourcePath)
 				};
+				const questionApi = {
+					pendingQuestions: (token, sessionId) => policyRemote.pendingQuestions(token, sessionId),
+					answerQuestion: (token, sessionId, requestId, answers) => policyRemote.answerQuestion(token, sessionId, requestId, answers),
+					cancelQuestion: (token, sessionId, requestId) => policyRemote.cancelQuestion(token, sessionId, requestId)
+				};
+				const approvalApi = {
+					pendingApprovals: (token, sessionId) => policyRemote.pendingApprovals(token, sessionId),
+					answerApproval: (token, sessionId, requestId, decision) => policyRemote.answerApproval(token, sessionId, requestId, decision)
+				};
 				const accounts = new QaAccountsController({
 					remote: policyRemote,
 					storage: window.localStorage,
@@ -16660,6 +17620,8 @@ textarea.qa-card-control{height:auto;padding:8px 12px;line-height:1.5;resize:ver
 						secureSession,
 						createSession: (token) => policyRemote.createSession(token),
 						sourceApi,
+						approvalApi,
+						questionApi,
 						accounts,
 						fileUpload: () => ctx.get("fileUpload")
 					})