@yadsh/dsh-qa-surface 0.6.1 → 0.7.0

package/lib/types/types.d.ts

@@ -1,4 +1,3 @@
-import type { QaDocumentsConfig, ResolvedQaDocumentsConfig } from "./documents/config.js";
 import type { QaTurnSources } from "./provenance/types.js";
 export type QaSessionPolicy = "browser-persistent" | "new-on-load" | "fixed";
 export type QaSandboxMode = "read-only" | "workspace-write";
@@ -29,7 +28,236 @@ export interface QaQuestionAnswerItem {
     readonly selected: readonly string[];
     readonly custom?: string;
 }
-export type QaAccountRole = "user" | "admin";
+/**
+ * Authorization inside QA Surface. It is deliberately independent of a QA
+ * subrole: an admin may work as any analyst profile while still holding the
+ * administrative permissions, and a reviewer answers conversations without
+ * being able to manage accounts.
+ */
+export type QaAccountRole = "user" | "reviewer" | "admin";
+/** Administrative permissions a role grants; see `admin/permissions.ts`. */
+export type QaPermission = "users.read" | "users.manage" | "roles.read" | "roles.manage" | "conversations.read.all" | "conversations.read.own" | "reviews.read" | "reviews.write" | "analytics.read" | "audit.read" | "settings.manage";
+/**
+ * Tools split by how they become available. `always` is visible from the first
+ * model step; `skillGrantable` is a ceiling — the tool only appears once an
+ * activated skill requires it, and never outside this list.
+ */
+export interface QaToolSelection {
+    readonly always: readonly string[];
+    readonly skillGrantable: readonly string[];
+}
+/** Tool/skill selection shared by the common layer and one QA subrole. */
+export interface QaCapabilitySelection {
+    readonly tools: QaToolSelection;
+    readonly skills: readonly string[];
+    /** Reserved extension seams; v1 enforcement intentionally ignores them. */
+    readonly mcpServers?: readonly string[];
+    readonly knowledgeSources?: readonly string[];
+    readonly promptAdditions?: readonly string[];
+}
+/** Audience one skill declares for itself in its own SKILL.md metadata. */
+export type QaSkillAudience = {
+    readonly type: "unassigned";
+} | {
+    readonly type: "common";
+} | {
+    readonly type: "subroles";
+    readonly include: readonly string[];
+};
+/**
+ * Normalized `metadata.qa-surface` of one skill. Discovery never throws on a
+ * malformed block: the fields fall back to the fail-closed defaults and every
+ * complaint lands in `warnings` for the administration surface.
+ */
+export interface QaSkillDescriptor {
+    readonly name: string;
+    readonly audience: QaSkillAudience;
+    /** Tools the skill needs to work; the role ceiling still decides the grant. */
+    readonly requiredTools: readonly string[];
+    /** Whether activation must be refused when one required tool is unavailable. */
+    readonly requireAll: boolean;
+    readonly lifecycle: "session";
+    /** `metadata.qa-surface.version`; 0 when the block declared none. */
+    readonly schemaVersion: number;
+    /** Whether the skill carried a readable qa-surface metadata block. */
+    readonly declared: boolean;
+    readonly warnings: readonly string[];
+}
+/**
+ * Administrator overlay over one skill's declared audience. The skill file is
+ * never rewritten: assignments are stored beside the policy and merged here.
+ */
+export interface QaSkillAssignmentOverride {
+    readonly skillName: string;
+    readonly addToSubroles?: readonly string[];
+    readonly removeFromSubroles?: readonly string[];
+    readonly forceCommon?: boolean;
+    readonly disabled?: boolean;
+}
+export type QaSkillHealth = "healthy" | "degraded" | "blocked" | "unassigned";
+/** Per-role projection of one skill: what the role sees and what it may grant. */
+export interface QaSkillRoleGrant {
+    readonly roleId: string;
+    readonly visible: boolean;
+    readonly declared: boolean;
+    readonly addedByAdmin: boolean;
+    readonly removedByAdmin: boolean;
+    readonly disabled: boolean;
+    /** Required tools this role's ceiling admits. */
+    readonly grantableTools: readonly string[];
+    /** Required tools this role cannot grant: outside the ceiling or not installed. */
+    readonly unavailableTools: readonly string[];
+}
+/** One row of the administration Skills table plus its detail view. */
+export interface QaSkillAccess {
+    readonly name: string;
+    readonly description?: string;
+    readonly whenToUse?: string;
+    readonly source: QaCapabilityDescriptor["source"];
+    readonly status: "available" | "missing";
+    readonly descriptor: QaSkillDescriptor;
+    /** Roles whose policy currently exposes the skill. */
+    readonly visibleTo: readonly string[];
+    readonly disabled: boolean;
+    readonly forceCommon: boolean;
+    readonly overridden: boolean;
+    readonly health: QaSkillHealth;
+    /** Every required tool with the union of roles that could grant it. */
+    readonly tools: readonly {
+        readonly id: string;
+        readonly installed: boolean;
+        readonly grantableBy: readonly string[];
+        readonly blockedFor: readonly string[];
+    }[];
+    readonly roles: readonly QaSkillRoleGrant[];
+}
+/** Why a skill activation was attempted; recorded for conversation review. */
+export type QaSkillActivationOrigin = "model" | "user" | "preview";
+/**
+ * One activation attempt on a live session, appended to the session record.
+ * `denied` covers an audience refusal, `rejected` a failed `requireAll` check.
+ */
+export interface QaSkillActivationRecord {
+    readonly timestamp: string;
+    readonly skillName: string;
+    readonly origin: QaSkillActivationOrigin;
+    readonly outcome: "activated" | "rejected" | "denied";
+    readonly requestedTools: readonly string[];
+    readonly grantedTools: readonly string[];
+    readonly deniedTools: readonly string[];
+    readonly reason?: string;
+}
+/** One agent capability profile. It never grants administrative access. */
+export interface QaSubrole {
+    readonly id: string;
+    readonly name: string;
+    readonly description?: string;
+    readonly enabled: boolean;
+    readonly capabilities: QaCapabilitySelection;
+    readonly ui?: {
+        readonly icon?: string;
+        readonly accent?: string;
+    };
+}
+/** Host-owned, versioned capability configuration. */
+export interface QaCapabilityConfig {
+    readonly version: 1;
+    readonly common: QaCapabilitySelection;
+    readonly subroles: readonly QaSubrole[];
+    /** Administrator assignments layered over what each skill declares. */
+    readonly skillOverrides: readonly QaSkillAssignmentOverride[];
+}
+/** The QA profiles one account may choose, independently of its access role. */
+export interface QaUserAccess {
+    readonly allowedSubroles: readonly string[];
+    readonly defaultSubrole: string;
+}
+export type QaCapabilitySourceKind = "core" | "plugin" | "mcp" | "filesystem" | "runtime";
+/** One capability currently installed, or retained as a missing selection. */
+export interface QaCapabilityDescriptor {
+    readonly type: "tool" | "skill";
+    readonly id: string;
+    readonly title: string;
+    readonly description?: string;
+    readonly source: {
+        readonly kind: QaCapabilitySourceKind;
+        readonly name?: string;
+    };
+    readonly status: "available" | "missing";
+    readonly modelInvocable?: boolean;
+    readonly userInvocable?: boolean;
+}
+/** JSON-safe projection of an immutable policy snapshot. */
+export interface QaEffectiveCapabilityPolicy {
+    readonly subroleId: string;
+    /** Tools visible from the first model step, before any skill is loaded. */
+    readonly tools: readonly string[];
+    /** Ceiling for the tools an activated skill may add to this session. */
+    readonly grantableTools: readonly string[];
+    /** Skills the model may see and load for the frozen subrole. */
+    readonly skills: readonly string[];
+    /**
+     * Visible skills a person may invoke with `/name`, including skills that
+     * opted out of model invocation and therefore stay out of the catalog.
+     */
+    readonly userSkills: readonly string[];
+    readonly sources: {
+        readonly systemTools: readonly string[];
+        readonly commonTools: readonly string[];
+        readonly roleTools: readonly string[];
+        readonly commonGrantableTools: readonly string[];
+        readonly roleGrantableTools: readonly string[];
+        readonly systemSkills: readonly string[];
+        readonly commonSkills: readonly string[];
+        readonly roleSkills: readonly string[];
+        /** Skills this subrole received from their own SKILL.md audience. */
+        readonly declaredSkills: readonly string[];
+    };
+    readonly missingTools: readonly string[];
+    readonly missingSkills: readonly string[];
+    /** Revision of the resolved policy, recorded with the session snapshot. */
+    readonly policyRevision: string;
+}
+export type QaAccessAuditAction = "subrole.created" | "subrole.updated" | "subrole.deleted" | "common.updated" | "assignment.updated" | "skill.assignment-updated";
+export interface QaAccessAuditEvent {
+    readonly timestamp: string;
+    readonly actorId: string;
+    readonly action: QaAccessAuditAction;
+    readonly targetId?: string;
+    /** JSON snapshots serialized at the storage boundary for a strict Remote type. */
+    readonly before?: string;
+    readonly after?: string;
+}
+/** Admin table row: credentials and token material are never projected. */
+export interface QaAccessUser {
+    readonly id: string;
+    readonly email: string;
+    readonly displayName: string;
+    readonly accessRole: QaAccountRole;
+    readonly disabled: boolean;
+    readonly access: QaUserAccess;
+}
+/** Ordinary user's role selector data. */
+export interface QaCurrentAccess {
+    readonly subroles: readonly QaSubrole[];
+    readonly defaultSubrole: string;
+}
+/** The role pinned to one existing session. */
+export interface QaSessionAccess {
+    readonly subrole: QaSubrole;
+    readonly adminPreview: boolean;
+}
+/** One authoritative payload for the /qa/admin application. */
+export interface QaAccessAdminSnapshot {
+    readonly config: QaCapabilityConfig;
+    /** Immutable capabilities inherited by every role; exposed read-only. */
+    readonly systemRequired: QaCapabilitySelection;
+    readonly catalog: readonly QaCapabilityDescriptor[];
+    /** Every discovered skill with its declared audience and grant ceiling. */
+    readonly skills: readonly QaSkillAccess[];
+    readonly users: readonly QaAccessUser[];
+    readonly audit: readonly QaAccessAuditEvent[];
+}
 /** The account fields projected to browsers; never includes credentials. */
 export interface QaAccountUserPublic {
     readonly id: string;
@@ -401,8 +629,6 @@ export interface QaSurfaceConfig {
     };
     readonly sources?: QaSourcesConfig;
     readonly attachments?: QaAttachmentsConfig;
-    /** Document pipeline: creation, conversion and extraction (see documents/). */
-    readonly documents?: QaDocumentsConfig;
 }
 /** What a QA visitor may attach to one message. */
 export interface QaAttachmentsConfig {
@@ -577,7 +803,6 @@ export interface ResolvedQaSurfaceConfig {
         readonly maxPending: number;
         readonly extensions: readonly string[];
     };
-    readonly documents: ResolvedQaDocumentsConfig;
 }
 export interface QaSourceFilePreview {
     readonly path: string;
@@ -626,6 +851,12 @@ export type QaMessage = QaUserMessage | {
     readonly text: string;
     readonly status: "streaming" | "committed" | "failed";
     readonly timestamp?: number;
+    /**
+     * Position of this answer in the session's durable event log. Feedback is
+     * keyed to it: a rating survives a replay, a reload and a role change,
+     * while the browser's own message id does not.
+     */
+    readonly seq?: number;
     /** Host turn this answer belongs to; groups regenerations into variants. */
     readonly turn?: number;
     /** Canonical evidence snapshot shared with this answer's source drawer. */
@@ -813,4 +1044,336 @@ export interface QaSessionState {
 export interface QaPrincipal {
     readonly userId: string;
 }
+/** A user's verdict on one assistant message. Binary by design. */
+export type QaFeedbackRating = "positive" | "negative";
+/**
+ * Optional negative-feedback reasons. The list is short on purpose: asking for
+ * a precise cause at rating time costs more answers than it buys insight, and
+ * a reviewer classifies the hard cases afterwards.
+ */
+export type QaFeedbackReason = "incorrect" | "instruction_not_followed" | "missing_information" | "outdated_information" | "tool_issue" | "too_verbose" | "too_short" | "other";
+/** One user's rating of one assistant message. */
+export interface QaMessageFeedback {
+    readonly id: string;
+    readonly conversationId: string;
+    readonly messageId: string;
+    readonly userId: string;
+    readonly rating: QaFeedbackRating;
+    readonly reasons?: readonly QaFeedbackReason[];
+    readonly comment?: string;
+    readonly createdAt: string;
+    readonly updatedAt?: string;
+}
+/** The rating fields a browser may write; identity and time are Host-owned. */
+export interface QaMessageFeedbackInput {
+    readonly rating: QaFeedbackRating;
+    readonly reasons?: readonly QaFeedbackReason[];
+    readonly comment?: string;
+}
+/** Review workflow state of a conversation or one of its messages. */
+export type QaReviewStatus = "unreviewed" | "in_review" | "reviewed" | "needs_followup";
+/**
+ * Reviewer taxonomy, grouped the way the spec groups it. Issue ids stay flat so
+ * aggregations never depend on walking a tree in the browser.
+ */
+export type QaQualityIssueType = "answer.incorrect" | "answer.incomplete" | "answer.hallucination" | "answer.request_not_followed" | "answer.poor_formatting" | "answer.communication" | "context.missing_conversation" | "context.missing_knowledge" | "context.outdated_knowledge" | "tool.wrong_selection" | "tool.should_have_been_used" | "tool.bad_arguments" | "tool.failure" | "tool.unavailable" | "skill.missing" | "skill.wrong" | "skill.not_followed" | "skill.prompt_policy" | "access.missing_capability" | "access.excessive_capability" | "other";
+export type QaQualitySeverity = "minor" | "major" | "critical";
+/** Where a reviewer thinks the fix belongs; the loop's change target. */
+export type QaRemediationTarget = "prompt" | "skill" | "tool" | "knowledge" | "role" | "model" | "product_ux" | "user_misunderstanding" | "unknown";
+/** One reviewer result. `needs_followup` keeps the item in the queue. */
+export interface QaConversationReview {
+    readonly id: string;
+    readonly conversationId: string;
+    readonly messageId?: string;
+    readonly reviewerId: string;
+    readonly status: "reviewed" | "needs_followup";
+    readonly issues: readonly QaQualityIssueType[];
+    readonly severity: QaQualitySeverity;
+    readonly notes?: string;
+    readonly target?: QaRemediationTarget;
+    readonly suggestedAction?: string;
+    readonly createdAt: string;
+    readonly updatedAt?: string;
+}
+/** A reviewer's write; ids, author and first-seen time are Host-owned. */
+export interface QaConversationReviewInput {
+    readonly conversationId: string;
+    readonly messageId?: string;
+    readonly status: "reviewed" | "needs_followup";
+    readonly issues: readonly QaQualityIssueType[];
+    readonly severity: QaQualitySeverity;
+    readonly notes?: string;
+    readonly target?: QaRemediationTarget;
+    readonly suggestedAction?: string;
+}
+/** Why a conversation entered the review queue. */
+export type QaReviewReason = "negative_feedback" | "manual" | "tool_failure" | "automatic";
+export type QaReviewPriority = "low" | "normal" | "high";
+/** One queue row: a conversation needing attention, with its derived state. */
+export interface QaReviewQueueItem {
+    readonly conversationId: string;
+    readonly messageId?: string;
+    readonly reason: QaReviewReason;
+    readonly priority: QaReviewPriority;
+    readonly status: QaReviewStatus;
+    readonly assignedReviewerId?: string;
+    /** ISO time of the signal that put the item in the queue. */
+    readonly raisedAt: string;
+    readonly reviewerId?: string;
+    readonly reviewId?: string;
+    readonly feedbackId?: string;
+}
+/** Administrative actions recorded in the audit trail. */
+export type QaAdminAuditAction = "user.created" | "user.updated" | "user.enabled" | "user.disabled" | "authorization.changed" | "subrole.assignment.changed" | "subrole.created" | "subrole.updated" | "subrole.deleted" | "common_capabilities.updated" | "conversation.reviewed" | "review.updated" | "review.queued" | "admin.settings.updated";
+export interface QaAdminAuditEvent {
+    readonly id: string;
+    readonly timestamp: string;
+    readonly actorId: string;
+    readonly action: QaAdminAuditAction;
+    readonly targetType?: string;
+    readonly targetId?: string;
+    /** JSON snapshots serialized at the storage boundary for a strict Remote type. */
+    readonly before?: string;
+    readonly after?: string;
+}
+/**
+ * One tool call as the review viewer shows it. `arguments` and `result` are
+ * preview strings, not raw payloads: the admin redaction seam owns trimming.
+ */
+export interface QaConversationToolCall {
+    readonly callId: string;
+    readonly name: string;
+    readonly arguments: string;
+    readonly result?: string;
+    readonly error?: string;
+    readonly time?: number;
+    readonly durationMs?: number;
+}
+/** Token accounting of one assistant message, when the log carries it. */
+export interface QaMessageUsage {
+    readonly inputTokens: number;
+    readonly outputTokens: number;
+    readonly totalTokens?: number;
+}
+/** One message in the review viewer, in log order. */
+export interface QaConversationMessage {
+    /** Stable message identity: the session event seq it was projected from. */
+    readonly id: string;
+    readonly seq: number;
+    readonly role: "user" | "assistant" | "system";
+    readonly text: string;
+    readonly time: number;
+    readonly model?: string;
+    readonly provider?: string;
+    readonly usage?: QaMessageUsage;
+    readonly interrupted?: boolean;
+    readonly toolCalls?: readonly QaConversationToolCall[];
+    /** Ratings of this message by its owner, newest first. */
+    readonly feedback?: readonly QaMessageFeedback[];
+    /** Reviewer results attached to this exact message. */
+    readonly reviews?: readonly QaConversationReview[];
+}
+/**
+ * What the agent could use in a conversation, frozen when the session was
+ * reserved. Reviewing an old answer against today's role configuration would
+ * answer the wrong question.
+ */
+export interface QaConversationRuntime {
+    readonly subroleId: string;
+    readonly adminPreview: boolean;
+    readonly model?: string;
+    readonly provider?: string;
+    readonly agentPreset?: string;
+    readonly effectiveTools?: readonly string[];
+    readonly effectiveSkills?: readonly string[];
+    /** Skills the model actually loaded, derived from the log's skill tool calls. */
+    readonly loadedSkills?: readonly string[];
+    /** True when the stored log could not be read; counts stay 0 and text is absent. */
+    readonly transcriptUnavailable?: QaTranscriptUnavailableReason;
+}
+/** Why a stored transcript could not be projected for the reviewer. */
+export type QaTranscriptUnavailableReason = "storage-unavailable" | "not-found" | "unreadable";
+/** One conversation row of the administrative list. */
+export interface QaConversationSummary {
+    readonly conversationId: string;
+    readonly userId: string;
+    readonly displayName: string;
+    readonly subroleId: string;
+    readonly createdAt: string;
+    /** Newest activity the deployment can see: creation, log tail, or a review. */
+    readonly updatedAt: string;
+    readonly title?: string;
+    readonly messageCount: number;
+    readonly positiveFeedback: number;
+    readonly negativeFeedback: number;
+    readonly reviewStatus: QaReviewStatus;
+}
+/** The full review payload of one conversation. */
+export interface QaConversationDetail {
+    readonly conversationId: string;
+    readonly summary: QaConversationSummary;
+    readonly runtime: QaConversationRuntime;
+    readonly messages: readonly QaConversationMessage[];
+    readonly reviews: readonly QaConversationReview[];
+    readonly queueItems: readonly QaReviewQueueItem[];
+}
+/**
+ * Server-side filter for the conversation list. Every field is optional and
+ * accepts an explicit null: the wire carries whatever the browser has, and an
+ * absent filter must never be mistaken for a filter on `null`.
+ */
+export interface QaConversationQuery {
+    readonly userId?: string | null;
+    readonly subroleId?: string | null;
+    readonly from?: string | null;
+    readonly to?: string | null;
+    readonly rating?: QaFeedbackRating | null;
+    readonly reviewStatus?: QaReviewStatus | null;
+    /** Search matches the conversation title and the owner's name or email. */
+    readonly search?: string | null;
+}
+/** Server-side filter for the feedback table. */
+export interface QaFeedbackQuery {
+    readonly rating?: QaFeedbackRating | null;
+    readonly userId?: string | null;
+    readonly subroleId?: string | null;
+    readonly reason?: QaFeedbackReason | null;
+    readonly from?: string | null;
+    readonly to?: string | null;
+    readonly reviewStatus?: QaReviewStatus | null;
+}
+/** Server-side filter for the audit table. */
+export interface QaAuditQuery {
+    readonly actorId?: string | null;
+    readonly action?: QaAdminAuditAction | null;
+    readonly from?: string | null;
+    readonly to?: string | null;
+}
+/** Server-side filter for the user list. */
+export interface QaUserQuery {
+    readonly search?: string | null;
+    readonly status?: "active" | "disabled" | null;
+    readonly role?: QaAccountRole | null;
+    readonly subroleId?: string | null;
+}
+/** Cursor page of any admin list. `nextCursor` is null on the last page. */
+export interface QaAdminPage<T> {
+    readonly items: readonly T[];
+    readonly nextCursor: string | null;
+    readonly total: number;
+}
+/** One pending item of the review queue, with the context to triage it. */
+export interface QaReviewQueueRow extends QaReviewQueueItem {
+    readonly displayName: string;
+    readonly subroleId: string;
+    readonly title?: string;
+    readonly raisedAtLabel: string;
+    readonly issueSummary?: readonly QaQualityIssueType[];
+    readonly severity?: QaQualitySeverity;
+}
+/** One row of the feedback table (spec §33). */
+export interface QaFeedbackRow extends QaMessageFeedback {
+    readonly displayName: string;
+    readonly subroleId: string;
+    readonly conversationTitle?: string;
+    readonly reviewStatus: QaReviewStatus;
+}
+/** Aggregated quality counters (spec §27). */
+export interface QaQualityIssueCount {
+    readonly issue: QaQualityIssueType;
+    readonly count: number;
+}
+export interface QaQualityRatingBreakdown {
+    readonly key: string;
+    readonly label: string;
+    readonly rated: number;
+    readonly positive: number;
+    readonly negative: number;
+    readonly positiveRate: number | null;
+}
+export interface QaQualityTrendPoint {
+    /** ISO date (UTC) of the bucket. */
+    readonly date: string;
+    readonly rated: number;
+    readonly positive: number;
+    readonly negative: number;
+}
+export interface QaQualityMetrics {
+    readonly conversations: number;
+    readonly activeUsers: number;
+    readonly assistantMessages: number;
+    readonly ratedMessages: number;
+    readonly positiveRatings: number;
+    readonly negativeRatings: number;
+    /** Share of assistant messages that carry a rating; null without messages. */
+    readonly ratingRate: number | null;
+    /** Share of positive ratings among rated messages; null without ratings. */
+    readonly positiveRate: number | null;
+    readonly unreviewedNegatives: number;
+    readonly reviewedItems: number;
+    readonly issues: readonly QaQualityIssueCount[];
+    readonly bySubrole: readonly QaQualityRatingBreakdown[];
+    readonly trend: readonly QaQualityTrendPoint[];
+}
+/**
+ * One attention line on the admin overview. The Host reports the condition and
+ * its numbers; the browser owns the wording, so an operator's language never
+ * depends on the deployment's locale.
+ */
+export interface QaOverviewAlert {
+    readonly level: "critical" | "warning" | "info";
+    readonly code: "unreviewed-negatives" | "subrole-satisfaction" | "recurring-reason";
+    readonly count: number;
+    /** Subrole id or feedback reason, when the condition names one. */
+    readonly subject?: string;
+    /** Positive-feedback share of the subject, when the condition measured one. */
+    readonly rate?: number;
+}
+/** The /qa/admin landing payload. */
+export interface QaAdminOverview {
+    readonly metrics: QaQualityMetrics;
+    readonly alerts: readonly QaOverviewAlert[];
+    readonly recentFeedback: readonly QaFeedbackRow[];
+    readonly queue: readonly QaReviewQueueRow[];
+}
+/** The account columns the store owns, without any joined counters. */
+export interface QaAdminAccountRow {
+    readonly id: string;
+    readonly email: string;
+    readonly displayName: string;
+    readonly fullName: string;
+    readonly role: QaAccountRole;
+    readonly disabled: boolean;
+    readonly createdAt: string;
+    readonly lastLoginAt: string | null;
+    readonly access: QaUserAccess;
+}
+/** One user row of the admin user list (spec §5). */
+export interface QaAdminUserRow extends QaAdminAccountRow {
+    readonly conversations: number;
+    readonly feedbackGiven: number;
+}
+/** Everything the user detail page renders, in one payload (spec §6). */
+export interface QaAdminUserDetail {
+    readonly user: QaAdminUserRow;
+    /** Effective capability counts per assigned subrole, for the access preview. */
+    readonly effective: readonly {
+        readonly subroleId: string;
+        readonly name: string;
+        readonly tools: number;
+        readonly skills: number;
+    }[];
+    readonly activity: {
+        readonly conversations: number;
+        readonly messages: number;
+        readonly positiveRatings: number;
+        readonly negativeRatings: number;
+    };
+}
+/** The administrative write of one account; absent fields stay unchanged. */
+export interface QaAdminUserUpdate {
+    readonly role?: QaAccountRole | null;
+    readonly disabled?: boolean | null;
+    readonly access?: QaUserAccess | null;
+}
 //# sourceMappingURL=types.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yadsh/dsh-qa-surface",
-  "version": "0.6.1",
+  "version": "0.7.0",
   "description": "A focused end-user QA surface backed by native DeepSeek Harness sessions",
   "repository": {
     "type": "git",