@zixt/host 0.0.101 → 0.0.103

package/dist/index.js

@@ -28,7 +28,7 @@ import { homedir as homedir3 } from "node:os";
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.101",
+  version: "0.0.103",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -14670,6 +14670,10 @@ var ID_PREFIXES = {
   managerCredentialRequest: "mcr",
   /** One Manager-prepared generic API setup or invocation card (MG-20). */
   managerApiAction: "maa",
+  /** One Manager-prepared Webhook Automation setup card (MG-21). */
+  managerWebhookAction: "mwa",
+  /** One Manager-authored questionnaire waiting in a Conversation. */
+  managerQuestionnaire: "mqu",
   /** One Manager inference call's token-metering row (MG-8). */
   managerUsage: "mgu",
   /** One ordered Manager reply awaiting Slack delivery. */
@@ -14733,6 +14737,14 @@ var ManagerCredentialRequestId = idSchema(
   "Manager credential request id"
 );
 var ManagerApiActionId = idSchema(ID_PREFIXES.managerApiAction, "Manager API action id");
+var ManagerWebhookActionId = idSchema(
+  ID_PREFIXES.managerWebhookAction,
+  "Manager webhook action id"
+);
+var ManagerQuestionnaireId = idSchema(
+  ID_PREFIXES.managerQuestionnaire,
+  "Manager questionnaire id"
+);
 var ManagerEmailInboxId = idSchema(
   ID_PREFIXES.managerEmailInbox,
   "Manager email inbox id"
@@ -14976,7 +14988,9 @@ var MemberApprovalRequestContext = ApprovalRequestContext.extend({
 });
 var QuestionChoice = external_exports.object({
   label: external_exports.string().trim().min(1).max(120),
-  description: external_exports.string().trim().min(1).max(500).optional()
+  description: external_exports.string().trim().min(1).max(500).optional(),
+  /** At most one choice per question may carry this visual recommendation. */
+  recommended: external_exports.boolean().optional()
 }).strict();
 var QuestionChoices = external_exports.array(QuestionChoice).min(2).max(5).superRefine((choices, ctx) => {
   const labels = choices.map(({ label }) => label.toLocaleLowerCase());
@@ -14984,6 +14998,38 @@ var QuestionChoices = external_exports.array(QuestionChoice).min(2).max(5).super
     ctx.addIssue({ code: "custom", message: "question choice labels must be unique" });
   }
 });
+var QuestionnaireQuestion = external_exports.object({
+  /** Stable model-authored key used only to pair an answer with this snapshot. */
+  id: external_exports.string().trim().min(1).max(80),
+  question: external_exports.string().trim().min(1).max(500),
+  context: external_exports.string().trim().min(1).max(2e3).optional(),
+  /** False is A/B/C/D radio behavior; true permits several choices plus Other. */
+  allowMultiple: external_exports.boolean(),
+  choices: QuestionChoices
+}).strict().superRefine((question, ctx) => {
+  if (question.choices.filter((choice) => choice.recommended === true).length > 1) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["choices"],
+      message: "a questionnaire question may have at most one recommended choice"
+    });
+  }
+});
+var Questionnaire = external_exports.object({
+  title: external_exports.string().trim().min(1).max(160).optional(),
+  questions: external_exports.array(QuestionnaireQuestion).min(1).max(4)
+}).strict().superRefine((questionnaire, ctx) => {
+  const ids = questionnaire.questions.map(({ id }) => id.toLocaleLowerCase());
+  if (new Set(ids).size !== ids.length) {
+    ctx.addIssue({ code: "custom", path: ["questions"], message: "question ids must be unique" });
+  }
+});
+var QuestionnaireAnswer = external_exports.object({
+  questionId: external_exports.string().trim().min(1).max(80),
+  selectedChoices: external_exports.array(external_exports.string().trim().min(1).max(120)).max(5),
+  other: external_exports.string().trim().min(1).max(1e4).optional()
+}).strict();
+var QuestionnaireAnswers = external_exports.array(QuestionnaireAnswer).min(1).max(4);
 var Approval = external_exports.object({
   id: ApprovalId,
   orgId: OrgId,
@@ -14996,6 +15042,10 @@ var Approval = external_exports.object({
   payload: external_exports.string().max(5e4),
   /** Present only when ask_user supplied a bounded multiple-choice question. */
   questionChoices: QuestionChoices.optional(),
+  /** Present when ask_user supplied one submit-once multi-question questionnaire. */
+  questionnaire: Questionnaire.optional(),
+  /** Exact submitted questionnaire response, once answered. */
+  questionnaireAnswers: QuestionnaireAnswers.optional(),
   status: ApprovalStatus,
   deliveryStatus: ApprovalDeliveryStatus,
   /** Why delivery became impossible; null while pending or after delivery. */
@@ -15032,7 +15082,8 @@ var ApprovalProjection = external_exports.discriminatedUnion("metadataRedacted",
 var ListApprovalsResponse = external_exports.object({ approvals: external_exports.array(ApprovalProjection) });
 var DecideApprovalRequest = external_exports.object({
   decision: external_exports.enum(["approve", "deny"]),
-  guidance: external_exports.string().max(1e4).optional()
+  guidance: external_exports.string().max(1e4).optional(),
+  questionnaireAnswers: QuestionnaireAnswers.optional()
 });
 var UpdateGuardrailsRequest = external_exports.object({ policy: GuardrailPolicy });
 
@@ -17993,7 +18044,9 @@ var ApprovalDecision = external_exports.object({
   /** Echo of the host-minted correlation id from approval.request. */
   requestId: external_exports.string(),
   decision: external_exports.enum(["approve", "deny"]),
-  guidance: external_exports.string().nullable()
+  guidance: external_exports.string().nullable(),
+  /** Exact structured response when the request carried a questionnaire. */
+  questionnaireAnswers: QuestionnaireAnswers.optional()
 });
 var ResolvedConnection = external_exports.object({
   connectionId: external_exports.string(),
@@ -18562,7 +18615,9 @@ var ApprovalRequest = external_exports.object({
   /** Concrete action payload rendered verbatim on the approval card (GR-3). */
   payload: external_exports.string().max(5e4),
   /** Optional structured answers for agent.question; absent means free text. */
-  questionChoices: QuestionChoices.optional()
+  questionChoices: QuestionChoices.optional(),
+  /** Optional submit-once questionnaire for agent.question. */
+  questionnaire: Questionnaire.optional()
 });
 var JournalAppend = external_exports.object({
   type: external_exports.literal("journal.append"),
@@ -18761,6 +18816,138 @@ var CLOSE_CODES = {
 var UNSUPPORTED_PROTOCOL_CLOSE_REASON = "unsupported protocol version";
 var CLOSE_REASON_MAX_BYTES = 123;
 
+// ../../packages/contracts/src/webhook-automations.ts
+var WebhookHeaderName = external_exports.string().min(1).max(100).regex(/^[A-Za-z0-9-]+$/, "header names may contain letters, numbers, and hyphens");
+var WebhookSecret = external_exports.string().min(8).max(2e3);
+var RotatingSecretProjection = {
+  secretConfigured: external_exports.literal(true),
+  previousSecretValidUntil: IsoDate.nullable()
+};
+var WebhookAuthenticationProjection = external_exports.discriminatedUnion("kind", [
+  external_exports.object({ kind: external_exports.literal("none") }).strict(),
+  external_exports.object({ kind: external_exports.literal("bearer"), ...RotatingSecretProjection }).strict(),
+  external_exports.object({
+    kind: external_exports.literal("basic"),
+    username: external_exports.string().min(1).max(200),
+    ...RotatingSecretProjection
+  }).strict(),
+  external_exports.object({ kind: external_exports.literal("github"), ...RotatingSecretProjection }).strict(),
+  external_exports.object({
+    kind: external_exports.literal("stripe"),
+    toleranceSeconds: external_exports.number().int().min(30).max(86400),
+    ...RotatingSecretProjection
+  }).strict(),
+  external_exports.object({
+    kind: external_exports.literal("hmac"),
+    signatureHeader: WebhookHeaderName,
+    signaturePrefix: external_exports.string().max(40),
+    timestampHeader: WebhookHeaderName.nullable(),
+    deliveryIdHeader: WebhookHeaderName.nullable(),
+    digestEncoding: external_exports.enum(["hex", "base64"]),
+    toleranceSeconds: external_exports.number().int().min(30).max(86400),
+    ...RotatingSecretProjection
+  }).strict()
+]);
+var WebhookAuthenticationSetup = external_exports.discriminatedUnion("kind", [
+  external_exports.object({ kind: external_exports.literal("none"), acknowledgedRisk: external_exports.literal(true) }).strict(),
+  external_exports.object({ kind: external_exports.literal("bearer"), token: WebhookSecret }).strict(),
+  external_exports.object({
+    kind: external_exports.literal("basic"),
+    username: external_exports.string().min(1).max(200),
+    password: external_exports.string().min(1).max(2e3)
+  }).strict(),
+  external_exports.object({ kind: external_exports.literal("github"), secret: WebhookSecret }).strict(),
+  external_exports.object({
+    kind: external_exports.literal("stripe"),
+    secret: WebhookSecret,
+    toleranceSeconds: external_exports.number().int().min(30).max(86400).default(300)
+  }).strict(),
+  external_exports.object({
+    kind: external_exports.literal("hmac"),
+    secret: WebhookSecret,
+    signatureHeader: WebhookHeaderName.default("X-Webhook-Signature"),
+    signaturePrefix: external_exports.string().max(40).default("sha256="),
+    timestampHeader: WebhookHeaderName.nullable().default("X-Webhook-Timestamp"),
+    deliveryIdHeader: WebhookHeaderName.nullable().default("X-Webhook-Id"),
+    digestEncoding: external_exports.enum(["hex", "base64"]).default("hex"),
+    toleranceSeconds: external_exports.number().int().min(30).max(86400).default(300)
+  }).strict()
+]);
+var WebhookAutomation = external_exports.object({
+  id: WebhookAutomationId,
+  orgId: OrgId,
+  name: external_exports.string().min(1).max(120),
+  instructions: external_exports.string().min(1).max(1e5),
+  assignedAgentId: AgentId.nullable(),
+  enabled: external_exports.boolean(),
+  endpointUrl: external_exports.string().url(),
+  authentication: WebhookAuthenticationProjection,
+  rateLimitPerMinute: external_exports.number().int().min(1).max(1e3),
+  retentionDays: external_exports.number().int().min(1).max(90),
+  lastDeliveryAt: IsoDate.nullable(),
+  createdAt: IsoDate,
+  updatedAt: IsoDate
+}).strict();
+var CreateWebhookAutomationRequest = external_exports.object({
+  name: WebhookAutomation.shape.name,
+  instructions: WebhookAutomation.shape.instructions,
+  assignedAgentId: AgentId.nullable().optional(),
+  authentication: WebhookAuthenticationSetup,
+  rateLimitPerMinute: WebhookAutomation.shape.rateLimitPerMinute.optional(),
+  retentionDays: WebhookAutomation.shape.retentionDays.optional()
+}).strict();
+var UpdateWebhookAutomationRequest = external_exports.object({
+  name: WebhookAutomation.shape.name.optional(),
+  instructions: WebhookAutomation.shape.instructions.optional(),
+  assignedAgentId: AgentId.nullable().optional(),
+  enabled: external_exports.boolean().optional(),
+  rateLimitPerMinute: WebhookAutomation.shape.rateLimitPerMinute.optional(),
+  retentionDays: WebhookAutomation.shape.retentionDays.optional()
+}).strict().refine((value) => Object.keys(value).length > 0, "empty update");
+var ListWebhookAutomationsResponse = external_exports.object({ webhooks: external_exports.array(WebhookAutomation) }).strict();
+var WebhookDeliveryStatus = external_exports.enum([
+  "received",
+  "processing",
+  "needs_attention",
+  "completed",
+  "failed",
+  "rejected"
+]);
+var WebhookDeliveryFailureCode = external_exports.enum([
+  "authentication_failed",
+  "payload_too_large",
+  "rate_limited",
+  "manager_unavailable",
+  "processing_failed"
+]);
+var WebhookDelivery = external_exports.object({
+  id: WebhookDeliveryId,
+  webhookAutomationId: WebhookAutomationId,
+  status: WebhookDeliveryStatus,
+  externalDeliveryId: external_exports.string().max(500).nullable(),
+  contentType: external_exports.string().max(200),
+  byteLength: external_exports.number().int().min(0),
+  isTest: external_exports.boolean(),
+  replayedFromDeliveryId: WebhookDeliveryId.nullable(),
+  failureCode: WebhookDeliveryFailureCode.nullable(),
+  resultSummary: external_exports.string().max(4e3).nullable(),
+  receivedAt: IsoDate,
+  completedAt: IsoDate.nullable()
+}).strict();
+var WebhookDeliveryDetail = WebhookDelivery.extend({
+  /** Admin-only retained body. Null for rejected deliveries and expired bodies. */
+  payload: external_exports.string().max(1e6).nullable()
+}).strict();
+var ListWebhookDeliveriesResponse = external_exports.object({
+  deliveries: external_exports.array(WebhookDelivery).max(100),
+  nextCursor: external_exports.string().max(1e3).nullable()
+}).strict();
+var TestWebhookDeliveryRequest = external_exports.object({
+  payload: external_exports.string().min(1).max(1e5),
+  contentType: external_exports.string().min(1).max(200).default("application/json"),
+  externalDeliveryId: external_exports.string().min(1).max(500).optional()
+}).strict();
+
 // ../../packages/contracts/src/manager.ts
 var MANAGER_DEFAULT_MODEL = "gpt-5.6-luna";
 var MANAGER_DISPLAY_NAME_MAX = 60;
@@ -18925,7 +19112,11 @@ var ConversationEventProjection = external_exports.discriminatedUnion("kind", [
     /** Present only for a secure Credential entry card; never a value (MG-17). */
     credentialRequestId: ManagerCredentialRequestId.nullable().optional(),
     /** Present only for a generic API setup/invocation card; never credentials (MG-20). */
-    apiActionId: ManagerApiActionId.nullable().optional()
+    apiActionId: ManagerApiActionId.nullable().optional(),
+    /** Present only for a Webhook Automation secure setup card (MG-21). */
+    webhookActionId: ManagerWebhookActionId.nullable().optional(),
+    /** Present only for a Manager-authored questionnaire (MG-22). */
+    questionnaireId: ManagerQuestionnaireId.nullable().optional()
   }).strict(),
   /** A mirrored child-Task event: what the teammate wrote or became. */
   external_exports.object({
@@ -18947,7 +19138,9 @@ var ConversationEventProjection = external_exports.discriminatedUnion("kind", [
      * render one outcome when recovery commits those records out of order.
      * Missing on legacy/non-terminal events.
      */
-    terminalGroup: external_exports.string().min(1).max(200).nullable().optional()
+    terminalGroup: external_exports.string().min(1).max(200).nullable().optional(),
+    /** Present when this teammate question has a structured answer card. */
+    approvalId: ApprovalId.nullable().optional()
   }).strict(),
   /** A Manager loop failure a person should see (provider outage, refusal). */
   external_exports.object({
@@ -19131,6 +19324,59 @@ var ManagerApiActionResponse = external_exports.object({
   action: ManagerApiActionProjection,
   oauth: ManagerIntegrationOAuthStart.nullable()
 }).strict();
+var ManagerWebhookActionStatus = external_exports.enum([
+  "awaiting_entry",
+  "completed",
+  "cancelled",
+  "expired",
+  "failed"
+]);
+var ManagerWebhookActionBase = {
+  id: ManagerWebhookActionId,
+  conversationId: ConversationId,
+  status: ManagerWebhookActionStatus,
+  suggestedAuthentication: external_exports.enum(["hmac", "github", "stripe", "bearer", "basic", "none"]),
+  outcome: external_exports.string().max(2e3).nullable(),
+  createdAt: external_exports.string(),
+  expiresAt: external_exports.string()
+};
+var ManagerWebhookCreateActionProjection = external_exports.object({
+  ...ManagerWebhookActionBase,
+  kind: external_exports.literal("create"),
+  name: external_exports.string().min(1).max(120),
+  instructions: external_exports.string().min(1).max(1e5),
+  assignedAgentId: AgentId.nullable(),
+  rateLimitPerMinute: external_exports.number().int().min(1).max(1e3),
+  retentionDays: external_exports.number().int().min(1).max(90),
+  webhook: WebhookAutomation.nullable()
+}).strict();
+var ManagerWebhookAuthenticationActionProjection = external_exports.object({
+  ...ManagerWebhookActionBase,
+  kind: external_exports.literal("authentication"),
+  webhook: WebhookAutomation.nullable()
+}).strict();
+var ManagerWebhookActionProjection = external_exports.discriminatedUnion("kind", [
+  ManagerWebhookCreateActionProjection,
+  ManagerWebhookAuthenticationActionProjection
+]);
+var SubmitManagerWebhookActionRequest = external_exports.object({
+  requestId: external_exports.uuid(),
+  authentication: WebhookAuthenticationSetup
+}).strict();
+var ConversationQuestionnaireProjection = external_exports.object({
+  id: external_exports.union([ManagerQuestionnaireId, ApprovalId]),
+  conversationId: ConversationId,
+  source: external_exports.enum(["manager", "teammate"]),
+  taskId: TaskId.nullable(),
+  agentId: AgentId.nullable(),
+  questionnaire: Questionnaire,
+  status: external_exports.enum(["pending", "answered", "unavailable"]),
+  answers: QuestionnaireAnswers.nullable(),
+  unavailableReason: external_exports.string().max(2e3).nullable(),
+  createdAt: external_exports.string(),
+  answeredAt: external_exports.string().nullable()
+}).strict();
+var AnswerConversationQuestionnaireRequest = external_exports.object({ answers: QuestionnaireAnswers }).strict();
 var NonEmptyTaskRunnerSelection = TaskRunnerSelection.refine(
   (selection) => selection.type !== void 0 || selection.model !== void 0 || selection.effort !== void 0,
   "choose at least one runtime preference"
@@ -20235,138 +20481,6 @@ var HomeExperienceResponse = external_exports.discriminatedUnion("metadataRedact
   MemberHomeExperienceResponse
 ]);
 
-// ../../packages/contracts/src/webhook-automations.ts
-var WebhookHeaderName = external_exports.string().min(1).max(100).regex(/^[A-Za-z0-9-]+$/, "header names may contain letters, numbers, and hyphens");
-var WebhookSecret = external_exports.string().min(8).max(2e3);
-var RotatingSecretProjection = {
-  secretConfigured: external_exports.literal(true),
-  previousSecretValidUntil: IsoDate.nullable()
-};
-var WebhookAuthenticationProjection = external_exports.discriminatedUnion("kind", [
-  external_exports.object({ kind: external_exports.literal("none") }).strict(),
-  external_exports.object({ kind: external_exports.literal("bearer"), ...RotatingSecretProjection }).strict(),
-  external_exports.object({
-    kind: external_exports.literal("basic"),
-    username: external_exports.string().min(1).max(200),
-    ...RotatingSecretProjection
-  }).strict(),
-  external_exports.object({ kind: external_exports.literal("github"), ...RotatingSecretProjection }).strict(),
-  external_exports.object({
-    kind: external_exports.literal("stripe"),
-    toleranceSeconds: external_exports.number().int().min(30).max(86400),
-    ...RotatingSecretProjection
-  }).strict(),
-  external_exports.object({
-    kind: external_exports.literal("hmac"),
-    signatureHeader: WebhookHeaderName,
-    signaturePrefix: external_exports.string().max(40),
-    timestampHeader: WebhookHeaderName.nullable(),
-    deliveryIdHeader: WebhookHeaderName.nullable(),
-    digestEncoding: external_exports.enum(["hex", "base64"]),
-    toleranceSeconds: external_exports.number().int().min(30).max(86400),
-    ...RotatingSecretProjection
-  }).strict()
-]);
-var WebhookAuthenticationSetup = external_exports.discriminatedUnion("kind", [
-  external_exports.object({ kind: external_exports.literal("none"), acknowledgedRisk: external_exports.literal(true) }).strict(),
-  external_exports.object({ kind: external_exports.literal("bearer"), token: WebhookSecret }).strict(),
-  external_exports.object({
-    kind: external_exports.literal("basic"),
-    username: external_exports.string().min(1).max(200),
-    password: external_exports.string().min(1).max(2e3)
-  }).strict(),
-  external_exports.object({ kind: external_exports.literal("github"), secret: WebhookSecret }).strict(),
-  external_exports.object({
-    kind: external_exports.literal("stripe"),
-    secret: WebhookSecret,
-    toleranceSeconds: external_exports.number().int().min(30).max(86400).default(300)
-  }).strict(),
-  external_exports.object({
-    kind: external_exports.literal("hmac"),
-    secret: WebhookSecret,
-    signatureHeader: WebhookHeaderName.default("X-Webhook-Signature"),
-    signaturePrefix: external_exports.string().max(40).default("sha256="),
-    timestampHeader: WebhookHeaderName.nullable().default("X-Webhook-Timestamp"),
-    deliveryIdHeader: WebhookHeaderName.nullable().default("X-Webhook-Id"),
-    digestEncoding: external_exports.enum(["hex", "base64"]).default("hex"),
-    toleranceSeconds: external_exports.number().int().min(30).max(86400).default(300)
-  }).strict()
-]);
-var WebhookAutomation = external_exports.object({
-  id: WebhookAutomationId,
-  orgId: OrgId,
-  name: external_exports.string().min(1).max(120),
-  instructions: external_exports.string().min(1).max(1e5),
-  assignedAgentId: AgentId.nullable(),
-  enabled: external_exports.boolean(),
-  endpointUrl: external_exports.string().url(),
-  authentication: WebhookAuthenticationProjection,
-  rateLimitPerMinute: external_exports.number().int().min(1).max(1e3),
-  retentionDays: external_exports.number().int().min(1).max(90),
-  lastDeliveryAt: IsoDate.nullable(),
-  createdAt: IsoDate,
-  updatedAt: IsoDate
-}).strict();
-var CreateWebhookAutomationRequest = external_exports.object({
-  name: WebhookAutomation.shape.name,
-  instructions: WebhookAutomation.shape.instructions,
-  assignedAgentId: AgentId.nullable().optional(),
-  authentication: WebhookAuthenticationSetup,
-  rateLimitPerMinute: WebhookAutomation.shape.rateLimitPerMinute.optional(),
-  retentionDays: WebhookAutomation.shape.retentionDays.optional()
-}).strict();
-var UpdateWebhookAutomationRequest = external_exports.object({
-  name: WebhookAutomation.shape.name.optional(),
-  instructions: WebhookAutomation.shape.instructions.optional(),
-  assignedAgentId: AgentId.nullable().optional(),
-  enabled: external_exports.boolean().optional(),
-  rateLimitPerMinute: WebhookAutomation.shape.rateLimitPerMinute.optional(),
-  retentionDays: WebhookAutomation.shape.retentionDays.optional()
-}).strict().refine((value) => Object.keys(value).length > 0, "empty update");
-var ListWebhookAutomationsResponse = external_exports.object({ webhooks: external_exports.array(WebhookAutomation) }).strict();
-var WebhookDeliveryStatus = external_exports.enum([
-  "received",
-  "processing",
-  "needs_attention",
-  "completed",
-  "failed",
-  "rejected"
-]);
-var WebhookDeliveryFailureCode = external_exports.enum([
-  "authentication_failed",
-  "payload_too_large",
-  "rate_limited",
-  "manager_unavailable",
-  "processing_failed"
-]);
-var WebhookDelivery = external_exports.object({
-  id: WebhookDeliveryId,
-  webhookAutomationId: WebhookAutomationId,
-  status: WebhookDeliveryStatus,
-  externalDeliveryId: external_exports.string().max(500).nullable(),
-  contentType: external_exports.string().max(200),
-  byteLength: external_exports.number().int().min(0),
-  isTest: external_exports.boolean(),
-  replayedFromDeliveryId: WebhookDeliveryId.nullable(),
-  failureCode: WebhookDeliveryFailureCode.nullable(),
-  resultSummary: external_exports.string().max(4e3).nullable(),
-  receivedAt: IsoDate,
-  completedAt: IsoDate.nullable()
-}).strict();
-var WebhookDeliveryDetail = WebhookDelivery.extend({
-  /** Admin-only retained body. Null for rejected deliveries and expired bodies. */
-  payload: external_exports.string().max(1e6).nullable()
-}).strict();
-var ListWebhookDeliveriesResponse = external_exports.object({
-  deliveries: external_exports.array(WebhookDelivery).max(100),
-  nextCursor: external_exports.string().max(1e3).nullable()
-}).strict();
-var TestWebhookDeliveryRequest = external_exports.object({
-  payload: external_exports.string().min(1).max(1e5),
-  contentType: external_exports.string().min(1).max(200).default("application/json"),
-  externalDeliveryId: external_exports.string().min(1).max(500).optional()
-}).strict();
-
 // ../../packages/contracts/src/linear.ts
 function canonicalLinearMutationPayload(value) {
   if (value === null || typeof value !== "object") {
@@ -23869,7 +23983,7 @@ var HostClient = class _HostClient {
       const { provider: _provider, ...legacyGrant } = grant;
       return legacyGrant;
     };
-    const requestApproval = (category, summary, payload, questionChoices) => {
+    const requestApproval = (category, summary, payload, questionChoices, questionnaire) => {
       if (authorityController.signal.aborted) {
         return Promise.resolve({ approved: false, guidance: "task was cancelled" });
       }
@@ -23882,7 +23996,8 @@ var HostClient = class _HostClient {
         category: safe(category, 200),
         summary: safe(summary, 500),
         payload: safe(payload, 5e4),
-        ...questionChoices ? { questionChoices: [...questionChoices] } : {}
+        ...questionChoices ? { questionChoices: [...questionChoices] } : {},
+        ...questionnaire ? { questionnaire } : {}
       });
       return new Promise((resolve18) => {
         const waiters = this.approvalWaiters.get(cancelKey) ?? /* @__PURE__ */ new Map();
@@ -35938,7 +36053,7 @@ var CADENCE_PROPS = {
 var TOOLS = [
   {
     name: "ask_user",
-    description: "Ask the human supervising this task a question and wait for their answer. Use it whenever you need a decision, missing context, or plan approval before proceeding. When there are 2-5 concrete alternatives, provide them as choices; the person can still enter another answer. The answer arrives as text. For a credential, ask for the capability rather than the value: a Credential added under Resources reaches your next run as an environment variable and is scrubbed from everything you write, and a website sign-in belongs at the Browser panel. If the person chooses to send you a value here anyway, use it for this task and store it with set_secret if it should persist, but never print it, write it into a file you commit, or repeat it in your report.",
+    description: "Ask the human supervising this task a question and wait for their answer. Use it whenever you need a decision, missing context, or plan approval before proceeding. Use questions whenever there are concrete alternatives, including when there is only one decision: each question needs 2-5 choices, may permit multiple selections, and may mark one choice recommended. Do not ask the questions one at a time. The person can always enter another answer, and all submitted answers arrive together as text. Use question without choices only for a genuinely free-text answer. For a credential, ask for the capability rather than the value: a Credential added under Resources reaches your next run as an environment variable and is scrubbed from everything you write, and a website sign-in belongs at the Browser panel. If the person chooses to send you a value here anyway, use it for this task and store it with set_secret if it should persist, but never print it, write it into a file you commit, or repeat it in your report.",
     inputSchema: {
       type: "object",
       properties: {
@@ -35966,14 +36081,63 @@ var TOOLS = [
                 minLength: 1,
                 maxLength: 500,
                 description: "Optional consequence or detail that helps the person choose."
+              },
+              recommended: {
+                type: "boolean",
+                description: "True for the one choice you recommend; omit for all others."
               }
             },
             required: ["label"],
             additionalProperties: false
           }
+        },
+        title: {
+          type: "string",
+          minLength: 1,
+          maxLength: 160,
+          description: "Optional short heading when using questions."
+        },
+        questions: {
+          type: "array",
+          minItems: 1,
+          maxItems: 4,
+          description: "A submit-once questionnaire. Use instead of question/context/choices when several related answers are needed.",
+          items: {
+            type: "object",
+            properties: {
+              id: {
+                type: "string",
+                minLength: 1,
+                maxLength: 80,
+                description: "A unique stable key such as deployment_target."
+              },
+              question: { type: "string", minLength: 1, maxLength: 500 },
+              context: { type: "string", minLength: 1, maxLength: 2e3 },
+              allow_multiple: {
+                type: "boolean",
+                description: "True when the person may select several choices."
+              },
+              choices: {
+                type: "array",
+                minItems: 2,
+                maxItems: 5,
+                items: {
+                  type: "object",
+                  properties: {
+                    label: { type: "string", minLength: 1, maxLength: 120 },
+                    description: { type: "string", minLength: 1, maxLength: 500 },
+                    recommended: { type: "boolean" }
+                  },
+                  required: ["label"],
+                  additionalProperties: false
+                }
+              }
+            },
+            required: ["id", "question", "allow_multiple", "choices"],
+            additionalProperties: false
+          }
         }
       },
-      required: ["question"],
       additionalProperties: false
     }
   },
@@ -36605,7 +36769,8 @@ function createAskUserServer() {
         const args = rpc.params?.["arguments"] ?? {};
         if (surface.platform && name === "ask_user") {
           const question = typeof args["question"] === "string" ? args["question"] : "";
-          if (!question) {
+          const rawQuestions = args["questions"];
+          if (!question && !Array.isArray(rawQuestions)) {
             reply(200, {
               jsonrpc: "2.0",
               id: rpc.id ?? null,
@@ -36624,11 +36789,37 @@ function createAskUserServer() {
               );
               return;
             }
+            const rawQuestionnaire = Array.isArray(rawQuestions) ? {
+              ...typeof args["title"] === "string" ? { title: args["title"] } : {},
+              questions: rawQuestions.map((entry) => {
+                const candidate = typeof entry === "object" && entry !== null ? entry : {};
+                return {
+                  id: candidate["id"],
+                  question: candidate["question"],
+                  ...candidate["context"] === void 0 ? {} : { context: candidate["context"] },
+                  allowMultiple: candidate["allow_multiple"],
+                  choices: candidate["choices"]
+                };
+              })
+            } : void 0;
+            const parsedQuestionnaire = rawQuestionnaire === void 0 ? void 0 : Questionnaire.safeParse(rawQuestionnaire);
+            if (parsedQuestionnaire && !parsedQuestionnaire.success) {
+              toolText(
+                "Questions must contain 1-4 unique items, each with 2-5 unique choices and at most one recommendation.",
+                true
+              );
+              return;
+            }
+            if (parsedQuestionnaire?.success && (question || rawChoices !== void 0)) {
+              toolText("Use either question/choices or questions, not both.", true);
+              return;
+            }
             toolText(
               await handlers.askUser(
-                question,
+                question || parsedQuestionnaire?.data.title || parsedQuestionnaire?.data.questions[0].question || "A few questions",
                 context,
-                parsedChoices?.success ? parsedChoices.data : void 0
+                parsedChoices?.success ? parsedChoices.data : void 0,
+                parsedQuestionnaire?.success ? parsedQuestionnaire.data : void 0
               )
             );
           } catch (err) {
@@ -38442,14 +38633,15 @@ function createCliRunner(adapter, opts = {}) {
         throw new Error("prepared provider workspace does not match the task assignment");
       }
       const localMcpServers = askUserServer.register(runToken, {
-        askUser: async (question, context, choices) => {
+        askUser: async (question, context, choices, questionnaire) => {
           pendingAsks++;
           try {
             const decision = await task.requestApproval(
               "agent.question",
               question.slice(0, 500),
               (context || question).slice(0, MAX_APPROVAL_PAYLOAD),
-              choices
+              choices,
+              questionnaire
             );
             return decision.guidance ?? (decision.approved ? "Approved. Proceed." : "No. Do not proceed.");
           } finally {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zixt/host",
-  "version": "0.0.101",
+  "version": "0.0.103",
   "type": "module",
   "exports": {
     ".": "./src/client.ts",