docs(approval): state label and icon source ownership

docs/subsystems/user-questions.md

@@ -52,9 +52,9 @@ type AskUserQuestionIntent = {
   reject: string
   /** Optional persistent grant offered only when the caller supports it. */
   always?: string
-  /** Metadata for human recognition, independent of the caller's authorization identity. */
+  /** Metadata for human recognition; the caller admits icon sources, which the UI may load as URLs. Never an authorization identity. */
   subject?: { name: string; icon?: string }
-  /** Localized presentation; option labels remain the wire answer values. */
+  /** Localized question and limited-grant label; fixed cards own reject/always wording. Option labels remain answer values. */
   display?: {
     question: { en: string; [locale: string]: string }
     detail?: { en: string; [locale: string]: string }

docs/subsystems/user-questions.zh.md

@@ -52,9 +52,9 @@ type AskUserQuestionIntent = {
   reject: string
   /** Optional persistent grant offered only when the caller supports it. */
   always?: string
-  /** Metadata for human recognition, independent of the caller's authorization identity. */
+  /** Metadata for human recognition; the caller admits icon sources, which the UI may load as URLs. Never an authorization identity. */
   subject?: { name: string; icon?: string }
-  /** Localized presentation; option labels remain the wire answer values. */
+  /** Localized question and limited-grant label; fixed cards own reject/always wording. Option labels remain answer values. */
   display?: {
     question: { en: string; [locale: string]: string }
     detail?: { en: string; [locale: string]: string }

packages/client/ui-approval/src/client/contract/slots.ts

@@ -211,7 +211,7 @@ export interface ApprovalCardInput {
   title: string
   /** Localized scope or consequence of the decision. */
   description?: string
-  /** Subject metadata for human recognition; never an authorization identity. */
+  /** Subject metadata for human recognition; the caller admits icon URLs. Never an authorization identity. */
   subject?: { name: string; icon?: string }
   /** Optional tool-owned detail rendered through the existing child slot. */
   callId?: ToolCallId

packages/interaction/user-questions/src/types.ts

@@ -41,9 +41,9 @@ export type AskUserQuestionIntent = {
   reject: string
   /** Optional persistent grant offered only when the caller supports it. */
   always?: string
-  /** Metadata for human recognition, independent of the caller's authorization identity. */
+  /** Metadata for human recognition; the caller admits icon sources, which the UI may load as URLs. Never an authorization identity. */
   subject?: { name: string; icon?: string }
-  /** Localized presentation; option labels remain the wire answer values. */
+  /** Localized question and limited-grant label; fixed cards own reject/always wording. Option labels remain answer values. */
   display?: {
     question: { en: string; [locale: string]: string }
     detail?: { en: string; [locale: string]: string }