@yadsh/dsh-qa-surface 0.4.0 → 0.5.0

package/lib/typert.remote-client.js

@@ -103,6 +103,24 @@ const _yadsh_dsh_qa_surface_qaSurface_accountsWhoami_result$schema = z.union([z.
 }).readonly(),
 }).readonly(),
 })])
+const _yadsh_dsh_qa_surface_qaSurface_answerApproval_parameter_0$schema = z.string()
+const _yadsh_dsh_qa_surface_qaSurface_answerApproval_parameter_1$schema = z.string()
+const _yadsh_dsh_qa_surface_qaSurface_answerApproval_parameter_2$schema = z.string()
+const _yadsh_dsh_qa_surface_qaSurface_answerApproval_parameter_3$schema = z.union([z.literal("allowed-once"), z.literal("rejected")])
+const _yadsh_dsh_qa_surface_qaSurface_answerApproval_result$schema = z.boolean()
+const _yadsh_dsh_qa_surface_qaSurface_answerQuestion_parameter_0$schema = z.string()
+const _yadsh_dsh_qa_surface_qaSurface_answerQuestion_parameter_1$schema = z.string()
+const _yadsh_dsh_qa_surface_qaSurface_answerQuestion_parameter_2$schema = z.string()
+const _yadsh_dsh_qa_surface_qaSurface_answerQuestion_parameter_3$schema = z.array(z.object({
+  'id': z.string().readonly(),
+  'selected': z.array(z.string()).readonly(),
+  'custom': z.string().readonly().optional(),
+}))
+const _yadsh_dsh_qa_surface_qaSurface_answerQuestion_result$schema = z.boolean()
+const _yadsh_dsh_qa_surface_qaSurface_cancelQuestion_parameter_0$schema = z.string()
+const _yadsh_dsh_qa_surface_qaSurface_cancelQuestion_parameter_1$schema = z.string()
+const _yadsh_dsh_qa_surface_qaSurface_cancelQuestion_parameter_2$schema = z.string()
+const _yadsh_dsh_qa_surface_qaSurface_cancelQuestion_result$schema = z.boolean()
 const _yadsh_dsh_qa_surface_qaSurface_createSession_parameter_0$schema = z.string()
 const _yadsh_dsh_qa_surface_qaSurface_createSession_result$schema = z.string()
 const _yadsh_dsh_qa_surface_qaSurface_describe_result$schema = z.object({
@@ -144,8 +162,8 @@ const _yadsh_dsh_qa_surface_qaSurface_describe_result$schema = z.object({
   'suggestedQuestions': z.array(z.string()).readonly(),
   'thinkingPhrases': z.array(z.string()).readonly(),
   'interaction': z.object({
-  'approvals': z.literal("blocked").readonly(),
-  'questions': z.literal("unsupported").readonly(),
+  'approvals': z.union([z.literal("blocked"), z.literal("interactive")]).readonly(),
+  'questions': z.union([z.literal("interactive"), z.literal("unsupported")]).readonly(),
 }).readonly(),
   'lockdown': z.object({
   'enabled': z.boolean().readonly(),
@@ -166,6 +184,7 @@ const _yadsh_dsh_qa_surface_qaSurface_describe_result$schema = z.object({
   'mode': z.literal("allow-list").readonly(),
   'allow': z.array(z.string()).readonly(),
 }).readonly(),
+  'sharedReadOnlyRoots': z.array(z.string()).readonly(),
 }).readonly(),
   'embedding': z.object({
   'frameAncestors': z.union([z.literal(null), z.string()]).readonly(),
@@ -225,6 +244,7 @@ const _yadsh_dsh_qa_surface_qaSurface_describe_result$schema = z.object({
   'inheritSources': z.boolean().readonly(),
   'enableReportToolFallback': z.boolean().readonly(),
   'markIncompleteOpaqueRuns': z.boolean().readonly(),
+  'validateReportedSources': z.boolean().readonly(),
 }).readonly(),
   'legacy': z.object({
   'parseAssistantSourcesBlock': z.boolean().readonly(),
@@ -238,6 +258,34 @@ const _yadsh_dsh_qa_surface_qaSurface_describe_result$schema = z.object({
   'extensions': z.array(z.string()).readonly(),
 }).readonly(),
 })
+const _yadsh_dsh_qa_surface_qaSurface_pendingApprovals_parameter_0$schema = z.string()
+const _yadsh_dsh_qa_surface_qaSurface_pendingApprovals_parameter_1$schema = z.string()
+const _yadsh_dsh_qa_surface_qaSurface_pendingApprovals_result$schema = z.array(z.object({
+  'id': z.string().readonly(),
+  'sessionId': z.string().readonly(),
+  'toolName': z.string().readonly(),
+  'reason': z.union([z.literal(null), z.string()]).readonly(),
+  'createdAt': z.number().readonly(),
+  'delegated': z.boolean().readonly(),
+}))
+const _yadsh_dsh_qa_surface_qaSurface_pendingQuestions_parameter_0$schema = z.string()
+const _yadsh_dsh_qa_surface_qaSurface_pendingQuestions_parameter_1$schema = z.string()
+const _yadsh_dsh_qa_surface_qaSurface_pendingQuestions_result$schema = z.array(z.object({
+  'id': z.string().readonly(),
+  'sessionId': z.string().readonly(),
+  'questions': z.array(z.object({
+  'id': z.string().readonly(),
+  'question': z.string().readonly(),
+  'header': z.union([z.literal(null), z.string()]).readonly(),
+  'detail': z.union([z.literal(null), z.string()]).readonly(),
+  'options': z.array(z.object({
+  'label': z.string().readonly(),
+  'description': z.union([z.literal(null), z.string()]).readonly(),
+})).readonly(),
+  'multiSelect': z.boolean().readonly(),
+})).readonly(),
+  'createdAt': z.number().readonly(),
+}))
 const _yadsh_dsh_qa_surface_qaSurface_readSourceFile_parameter_0$schema = z.string()
 const _yadsh_dsh_qa_surface_qaSurface_readSourceFile_parameter_1$schema = z.string()
 const _yadsh_dsh_qa_surface_qaSurface_readSourceFile_parameter_2$schema = z.string()
@@ -373,7 +421,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@yadsh/dsh-qa-surface/types#QaClaimResult',
         schema: _yadsh_dsh_qa_surface_qaSurface_accountsClaimSessions_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":230,"column":3},
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":268,"column":3},
     },
     {
       id: '@yadsh/dsh-qa-surface#qaSurface/accountsListOwnership',
@@ -398,7 +446,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/accountsListOwnership:result',
         schema: _yadsh_dsh_qa_surface_qaSurface_accountsListOwnership_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":249,"column":3},
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":287,"column":3},
     },
     {
       id: '@yadsh/dsh-qa-surface#qaSurface/accountsLogin',
@@ -433,7 +481,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@yadsh/dsh-qa-surface/types#QaAccountSession',
         schema: _yadsh_dsh_qa_surface_qaSurface_accountsLogin_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":218,"column":3},
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":256,"column":3},
     },
     {
       id: '@yadsh/dsh-qa-surface#qaSurface/accountsOwnedSessions',
@@ -458,7 +506,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/accountsOwnedSessions:result',
         schema: _yadsh_dsh_qa_surface_qaSurface_accountsOwnedSessions_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":239,"column":3},
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":277,"column":3},
     },
     {
       id: '@yadsh/dsh-qa-surface#qaSurface/accountsRegister',
@@ -493,7 +541,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@yadsh/dsh-qa-surface/types#QaAccountSession',
         schema: _yadsh_dsh_qa_surface_qaSurface_accountsRegister_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":213,"column":3},
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":251,"column":3},
     },
     {
       id: '@yadsh/dsh-qa-surface#qaSurface/accountsUpdateProfile',
@@ -528,7 +576,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@yadsh/dsh-qa-surface/types#QaAccountUserPublic',
         schema: _yadsh_dsh_qa_surface_qaSurface_accountsUpdateProfile_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":262,"column":3},
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":300,"column":3},
     },
     {
       id: '@yadsh/dsh-qa-surface#qaSurface/accountsWhoami',
@@ -553,7 +601,162 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@yadsh/dsh-qa-surface/types#QaWhoamiResult',
         schema: _yadsh_dsh_qa_surface_qaSurface_accountsWhoami_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":224,"column":3},
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":262,"column":3},
+    },
+    {
+      id: '@yadsh/dsh-qa-surface#qaSurface/answerApproval',
+      service: 'qaSurface',
+      namespace: 'qaSurface',
+      method: 'answerApproval',
+      invocation: { kind: 'direct' },
+      parameters: [
+        {
+          name: 'token',
+          wire: 'token',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/answerApproval:token',
+            schema: _yadsh_dsh_qa_surface_qaSurface_answerApproval_parameter_0$schema,
+          },
+        },
+        {
+          name: 'sessionId',
+          wire: 'sessionId',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/answerApproval:sessionId',
+            schema: _yadsh_dsh_qa_surface_qaSurface_answerApproval_parameter_1$schema,
+          },
+        },
+        {
+          name: 'requestId',
+          wire: 'requestId',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/answerApproval:requestId',
+            schema: _yadsh_dsh_qa_surface_qaSurface_answerApproval_parameter_2$schema,
+          },
+        },
+        {
+          name: 'decision',
+          wire: 'decision',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-qa-surface/types#QaApprovalDecision',
+            schema: _yadsh_dsh_qa_surface_qaSurface_answerApproval_parameter_3$schema,
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/answerApproval:result',
+        schema: _yadsh_dsh_qa_surface_qaSurface_answerApproval_result$schema,
+      },
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":455,"column":9},
+    },
+    {
+      id: '@yadsh/dsh-qa-surface#qaSurface/answerQuestion',
+      service: 'qaSurface',
+      namespace: 'qaSurface',
+      method: 'answerQuestion',
+      invocation: { kind: 'direct' },
+      parameters: [
+        {
+          name: 'token',
+          wire: 'token',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/answerQuestion:token',
+            schema: _yadsh_dsh_qa_surface_qaSurface_answerQuestion_parameter_0$schema,
+          },
+        },
+        {
+          name: 'sessionId',
+          wire: 'sessionId',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/answerQuestion:sessionId',
+            schema: _yadsh_dsh_qa_surface_qaSurface_answerQuestion_parameter_1$schema,
+          },
+        },
+        {
+          name: 'requestId',
+          wire: 'requestId',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/answerQuestion:requestId',
+            schema: _yadsh_dsh_qa_surface_qaSurface_answerQuestion_parameter_2$schema,
+          },
+        },
+        {
+          name: 'answers',
+          wire: 'answers',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/answerQuestion:answers',
+            schema: _yadsh_dsh_qa_surface_qaSurface_answerQuestion_parameter_3$schema,
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/answerQuestion:result',
+        schema: _yadsh_dsh_qa_surface_qaSurface_answerQuestion_result$schema,
+      },
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":484,"column":9},
+    },
+    {
+      id: '@yadsh/dsh-qa-surface#qaSurface/cancelQuestion',
+      service: 'qaSurface',
+      namespace: 'qaSurface',
+      method: 'cancelQuestion',
+      invocation: { kind: 'direct' },
+      parameters: [
+        {
+          name: 'token',
+          wire: 'token',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/cancelQuestion:token',
+            schema: _yadsh_dsh_qa_surface_qaSurface_cancelQuestion_parameter_0$schema,
+          },
+        },
+        {
+          name: 'sessionId',
+          wire: 'sessionId',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/cancelQuestion:sessionId',
+            schema: _yadsh_dsh_qa_surface_qaSurface_cancelQuestion_parameter_1$schema,
+          },
+        },
+        {
+          name: 'requestId',
+          wire: 'requestId',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/cancelQuestion:requestId',
+            schema: _yadsh_dsh_qa_surface_qaSurface_cancelQuestion_parameter_2$schema,
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/cancelQuestion:result',
+        schema: _yadsh_dsh_qa_surface_qaSurface_cancelQuestion_result$schema,
+      },
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":496,"column":9},
     },
     {
       id: '@yadsh/dsh-qa-surface#qaSurface/createSession',
@@ -578,7 +781,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/createSession:result',
         schema: _yadsh_dsh_qa_surface_qaSurface_createSession_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":287,"column":9},
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":325,"column":9},
     },
     {
       id: '@yadsh/dsh-qa-surface#qaSurface/describe',
@@ -593,7 +796,77 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@yadsh/dsh-qa-surface/types#ResolvedQaSurfaceConfig',
         schema: _yadsh_dsh_qa_surface_qaSurface_describe_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":277,"column":3},
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":315,"column":3},
+    },
+    {
+      id: '@yadsh/dsh-qa-surface#qaSurface/pendingApprovals',
+      service: 'qaSurface',
+      namespace: 'qaSurface',
+      method: 'pendingApprovals',
+      invocation: { kind: 'direct' },
+      parameters: [
+        {
+          name: 'token',
+          wire: 'token',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/pendingApprovals:token',
+            schema: _yadsh_dsh_qa_surface_qaSurface_pendingApprovals_parameter_0$schema,
+          },
+        },
+        {
+          name: 'sessionId',
+          wire: 'sessionId',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/pendingApprovals:sessionId',
+            schema: _yadsh_dsh_qa_surface_qaSurface_pendingApprovals_parameter_1$schema,
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/pendingApprovals:result',
+        schema: _yadsh_dsh_qa_surface_qaSurface_pendingApprovals_result$schema,
+      },
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":441,"column":9},
+    },
+    {
+      id: '@yadsh/dsh-qa-surface#qaSurface/pendingQuestions',
+      service: 'qaSurface',
+      namespace: 'qaSurface',
+      method: 'pendingQuestions',
+      invocation: { kind: 'direct' },
+      parameters: [
+        {
+          name: 'token',
+          wire: 'token',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/pendingQuestions:token',
+            schema: _yadsh_dsh_qa_surface_qaSurface_pendingQuestions_parameter_0$schema,
+          },
+        },
+        {
+          name: 'sessionId',
+          wire: 'sessionId',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/pendingQuestions:sessionId',
+            schema: _yadsh_dsh_qa_surface_qaSurface_pendingQuestions_parameter_1$schema,
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/pendingQuestions:result',
+        schema: _yadsh_dsh_qa_surface_qaSurface_pendingQuestions_result$schema,
+      },
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":470,"column":9},
     },
     {
       id: '@yadsh/dsh-qa-surface#qaSurface/readSourceFile',
@@ -638,7 +911,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@yadsh/dsh-qa-surface/types#QaSourceFilePreview',
         schema: _yadsh_dsh_qa_surface_qaSurface_readSourceFile_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":394,"column":9},
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":507,"column":9},
     },
     {
       id: '@yadsh/dsh-qa-surface#qaSurface/secureSession',
@@ -673,7 +946,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@yadsh/dsh-qa-surface/types#QaLockdownProof',
         schema: _yadsh_dsh_qa_surface_qaSurface_secureSession_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":361,"column":3},
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":399,"column":9},
     },
     {
       id: '@yadsh/dsh-qa-surface#qaSurface/sources',
@@ -708,7 +981,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/sources:result',
         schema: _yadsh_dsh_qa_surface_qaSurface_sources_result$schema,
       },
-      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":387,"column":3},
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":428,"column":9},
     },
   ],
 }

package/lib/types/accounts/credentials.d.ts

@@ -4,6 +4,12 @@ export interface ValidatedCredentials {
     /** Trimmed display name; empty means "derive one from the address". */
     readonly displayName: string;
 }
+/**
+ * The length gate every path that sets a password goes through — registration,
+ * the operator's addUser, and a reset — so a password good enough to register is
+ * exactly the one an operator can put back.
+ */
+export declare function validatePassword(password: string): void;
 /**
  * The email/password/display-name gate shared by self-registration and the
  * operator's addUser, so both paths reject unusable input with the same

package/lib/types/accounts/store.d.ts

@@ -99,6 +99,14 @@ export declare class QaAccounts {
     private editUser;
     /** Grant or revoke the admin role. */
     setUserRole(email: string, role: QaAccountRole): QaAccountUserPublic;
+    /**
+     * Replace an account's password, which is what a forgotten one needs. The
+     * token version bumps with it, so every token minted under the old password
+     * dies server-side: a reset is also the response to a leaked credential.
+     * Ownership, profile and the account id survive, so the user's chats are
+     * still theirs after signing in again.
+     */
+    setPassword(email: string, password: string): QaAccountUserPublic;
     /**
      * Disable an account: future logins are refused and every live token is
      * invalidated (the token version bumps). `enable` does not resurrect old

package/lib/types/approvals.d.ts

@@ -0,0 +1,65 @@
+import type { Agent } from "@deepseek-ai/dsh-agent";
+import type { Context } from "@deepseek-ai/cordis";
+import type { PluginLogger } from "@yadsh/dsh-plugin-log";
+import type { QaSessionOwnership } from "./session-ownership.js";
+import type { QaApprovalDecision, QaPendingApproval } from "./types.js";
+/**
+ * The slice of the `tools/pre-execute` execution record this gate reads. The
+ * listener is owned by the plugin context, so it is unfiltered: it also wraps
+ * the calls of a delegated child, whose scope chain never reaches the chat's
+ * own agent context.
+ */
+export interface QaApprovalExecution {
+    readonly name: string;
+    readonly agent?: Agent;
+    readonly signal?: AbortSignal;
+}
+/**
+ * Interactive resolution of the tool policy `ask` decision.
+ *
+ * A composed gate — a content classifier, a hook rule — answers `ask` for a
+ * call it will not decide alone. On an attested QA agent that ask resolves
+ * against the deployment's pinned `approval=never` policy, so the model is told
+ * the user rejected a call the user never saw. This gate sits outside every
+ * other `tools/pre-execute` listener and hands the decision to the operator
+ * instead: the request is parked here, the QA view lists it over its own
+ * remote, and the answer becomes the decision the chain would have produced.
+ *
+ * `interaction.approvals: blocked` keeps the previous fail-closed behavior —
+ * the call is refused with the surface's own reason. Either way nothing is
+ * approved automatically, and the allow-list, the workspace fence and the
+ * read-only sandbox still run on the resolved call.
+ *
+ * Only sessions this deployment attested are touched. Any other session's ask
+ * is handed back to the chain untouched, so an operator instance that also
+ * serves ordinary chats keeps its own approval flow.
+ */
+export declare class QaApprovalGate {
+    private readonly ctx;
+    private readonly interactive;
+    private readonly ownership;
+    private readonly logger;
+    private readonly pending;
+    private readonly disposers;
+    constructor(ctx: Context, interactive: () => boolean, ownership: QaSessionOwnership, logger: PluginLogger);
+    /** Wrap every tool call; other gates compose inside this listener. */
+    install(): void;
+    /** Approvals of one chat, oldest first: what the QA view lists. */
+    list(sessionId: string): readonly QaPendingApproval[];
+    /** Apply the operator's answer; an unknown or foreign id is refused. */
+    answer(sessionId: string, requestId: string, decision: QaApprovalDecision): boolean;
+    /** Detach the listener and fail every parked request. Wired as an effect. */
+    dispose(): void;
+    private handle;
+    /**
+     * The chat a call belongs to, when this deployment attested it. A child of an
+     * attested chat answers under the chat the operator is looking at.
+     */
+    private ownerOf;
+    /** Park one call until the operator answers, the turn is cancelled, or … */
+    private request;
+    private resolve;
+    /** Fail the requests one session's agent owns; a child never holds the chat. */
+    private settleOwner;
+}
+//# sourceMappingURL=approvals.d.ts.map

package/lib/types/client/QaSessionController.d.ts

@@ -1,6 +1,7 @@
 import type { ConnectionGenerationState } from "@deepseek-ai/dsh-client-connection/client";
 import type { QaAttachmentDraft, QaSessionState, ResolvedQaSurfaceConfig } from "../types.js";
-import type { QaConversation, QaCreateSession, QaFileUpload, QaSecureSession, QaSessions, QaSessionsApi, QaSourceApi, StorageLike } from "./types.js";
+import type { QaApprovalApi, QaConversation, QaCreateSession, QaFileUpload, QaSecureSession, QaSessions, QaSessionsApi, QaQuestionApi, QaSourceApi, StorageLike } from "./types.js";
+import type { QaApprovalDecision, QaQuestionAnswerItem } from "../types.js";
 export interface QaAccountsFacade {
     /** The account bearer token, or null while anonymous. */
     readonly token: () => string | null;
@@ -26,6 +27,17 @@ export interface QaSessionControllerOptions {
     readonly config: ResolvedQaSurfaceConfig;
     readonly secureSession: QaSecureSession;
     readonly sourceApi?: QaSourceApi;
+    /**
+     * The approval half of the Host namespace. Absent on a page built against a
+     * Host that does not answer approvals: the surface then never shows a
+     * request and keeps the composer as it is.
+     */
+    readonly approvalApi?: QaApprovalApi;
+    /**
+     * The question half of the Host namespace. Absent on a page whose Host build
+     * does not answer questions: the surface then only renders what it can.
+     */
+    readonly questionApi?: QaQuestionApi;
     readonly storage?: StorageLike;
     /**
      * Browser file-upload service, resolved lazily: the page may not serve the
@@ -87,6 +99,12 @@ export declare class QaSessionController {
     private chatsRevision;
     /** Host-side provenance of the bound chat, merged into the projection. */
     private readonly hostSources;
+    /** Host-side approvals of the bound chat waiting for the operator. */
+    private readonly hostApprovals;
+    /** Host-side question requests of the bound chat waiting for the operator. */
+    private readonly hostQuestions;
+    /** Set while a running turn is polled for parked requests. */
+    private pendingTimer;
     constructor(options: QaSessionControllerOptions);
     getSnapshot: () => QaSessionState;
     subscribe: (listener: () => void) => (() => void);
@@ -181,5 +199,24 @@ export declare class QaSessionController {
      */
     private attestPolicy;
     private emit;
+    /**
+     * Answer a request the Host parked for this chat. The Host re-checks the
+     * request against the chat, so an answer that lost its race is a no-op; the
+     * refresh that follows is what the surface renders.
+     */
+    answerApproval(requestId: string, decision: QaApprovalDecision): Promise<void>;
+    /** Send the operator's answers to one parked question request. */
+    answerQuestion(requestId: string, answers: readonly QaQuestionAnswerItem[]): Promise<void>;
+    /** Close a parked question request without answering it. */
+    cancelQuestion(requestId: string): Promise<void>;
+    /**
+     * Poll the Host for parked requests while a turn runs. A request only exists
+     * inside an open turn, and it is Host state: polling is how the page learns
+     * about it, and how it reappears after a reload. One timer serves both seams,
+     * and each is polled only where the deployment answers it.
+     */
+    private syncPendingPolling;
+    private stopPendingPolling;
+    private hostToken;
 }
 //# sourceMappingURL=QaSessionController.d.ts.map

package/lib/types/client/QaSurface.d.ts

@@ -3,7 +3,7 @@ import type { InjectFace, PropsRuntime } from "@deepseek-ai/dsh-client-ui-slots"
 import type { QaConfigController } from "./QaConfigController.js";
 import type { QaRouteController } from "./QaRouteController.js";
 import type { QaAccountsController } from "./QaAccountsController.js";
-import type { QaConversation, QaCreateSession, QaFileUpload, QaSecureSession, QaSessions, QaSessionsApi, QaSourceApi } from "./types.js";
+import type { QaApprovalApi, QaConversation, QaCreateSession, QaFileUpload, QaSecureSession, QaSessions, QaSessionsApi, QaQuestionApi, QaSourceApi } from "./types.js";
 export interface QaSurfaceFace {
     readonly route: QaRouteController;
     readonly config: QaConfigController;
@@ -14,6 +14,13 @@ export interface QaSurfaceFace {
     readonly secureSession: QaSecureSession;
     readonly createSession: QaCreateSession;
     readonly sourceApi: QaSourceApi;
+    /**
+     * Approval half of the plugin's namespace. Absent on a page whose Host build
+     * does not answer it; the surface then only blocks sends it cannot attest.
+     */
+    readonly approvalApi?: QaApprovalApi;
+    /** Question half of the plugin's namespace, when the Host answers it. */
+    readonly questionApi?: QaQuestionApi;
     /**
      * Browser file-upload service, when the page serves the upload plugin.
      * Resolved per send so a page that loads it later still gets file support.

package/lib/types/client/approvals.d.ts

@@ -0,0 +1,39 @@
+import type { QaApprovalDecision, QaPendingApproval } from "../types.js";
+import type { QaApprovalApi } from "./types.js";
+/**
+ * The operator's side of a parked tool call.
+ *
+ * A composed gate's `ask` is answered on the Host, so the waiting request is
+ * Host state: it survives a page reload, and the surface learns about it by
+ * asking rather than by receiving an event. The bridge holds the last list it
+ * saw, refreshes it while a turn runs, and forwards an answer.
+ */
+export declare class QaHostApprovalBridge {
+    private readonly approvalApi;
+    private approvals;
+    private signature;
+    private refreshing;
+    private answering;
+    /** Bumped on reset so a stale in-flight response never lands. */
+    private generation;
+    constructor(approvalApi: QaApprovalApi | undefined);
+    /** Leave the chat: a chat switch drops the previous chat's requests. */
+    reset(): void;
+    /** The last list this bridge saw; empty when the deployment blocks them. */
+    list(): readonly QaPendingApproval[];
+    /** Whether this page can ask the Host about approvals at all. */
+    get available(): boolean;
+    /**
+     * Re-read the chat's pending requests; a changed list republishes through the
+     * callback. Overlapping calls coalesce, and a response that outlives its chat
+     * is dropped.
+     */
+    refresh(sessionId: string, token: string, onChanged: () => void): Promise<void>;
+    /**
+     * Answer one request and re-read the list. A refusal is not an error: the
+     * request was already settled (the turn was stopped, the call went away), so
+     * the refresh — not the answer — is what the surface shows.
+     */
+    answer(sessionId: string, token: string, requestId: string, decision: QaApprovalDecision): Promise<void>;
+}
+//# sourceMappingURL=approvals.d.ts.map

package/lib/types/client/components/QaApproval.d.ts

@@ -0,0 +1,13 @@
+import type { QaApprovalDecision, QaPendingApproval } from "../../types.js";
+export interface QaApprovalProps {
+    readonly approvals: readonly QaPendingApproval[];
+    readonly onAnswer: (requestId: string, decision: QaApprovalDecision) => Promise<void>;
+}
+/**
+ * The tool calls a composed gate parked for a person. One row per request, the
+ * gate's own reason on top, and the two answers stock DSH offers: refuse, or
+ * let this one call through. Nothing here decides on its own — an unanswered
+ * request simply keeps the turn waiting.
+ */
+export declare const QaApproval: import("react").MemoExoticComponent<(props: QaApprovalProps) => import("react/jsx-runtime").JSX.Element | null>;
+//# sourceMappingURL=QaApproval.d.ts.map

package/lib/types/client/components/QaQuestions.d.ts

@@ -0,0 +1,13 @@
+import type { QaPendingQuestion, QaQuestionAnswerItem } from "../../types.js";
+export interface QaQuestionsProps {
+    readonly questions: readonly QaPendingQuestion[];
+    readonly onAnswer: (requestId: string, answers: readonly QaQuestionAnswerItem[]) => Promise<void>;
+    readonly onCancel: (requestId: string) => Promise<void>;
+}
+/**
+ * The questions a running turn waits on. Answers are the operator's own: the
+ * form refuses to submit a question left blank, and a question explicitly
+ * skipped is reported as skipped rather than answered by guesswork.
+ */
+export declare const QaQuestions: import("react").MemoExoticComponent<(props: QaQuestionsProps) => import("react/jsx-runtime").JSX.Element | null>;
+//# sourceMappingURL=QaQuestions.d.ts.map