@gaia-ai/ui 0.6.3 → 0.6.5

package/dist/src/ui-home.d.ts

@@ -10,7 +10,15 @@ export interface HomeConnection {
     jsonapiPrefix?: string | undefined;
     authPlugins: unknown[];
     configPath?: string | undefined;
+    /** The dropsh auth profile the cockpit READS as (`gaia_run` is session-only). */
     authProfile?: string | undefined;
+    /**
+     * GAIA-233: the dropsh auth profile the cockpit WRITES as, named beside the
+     * read profile so both scopes are declared in one place. `session` holds no
+     * `update gaia_ticket`, and `conductor_id` is additionally field-gated on
+     * `assign gaia conductor`.
+     */
+    writeProfile?: string | undefined;
 }
 /**
  * Resolve the default project (opaque group) from the conductor registry: the

package/dist/src/ui.d.ts

@@ -47,6 +47,16 @@ export interface RunGaiaUiOptions {
     /** GAIA-223: the deep-link target, still UNRESOLVED (the entry has no JSON:API
      *  client — Finding 1). Absent ⇒ the renderer boots its dashboard (AC-4). */
     initialRoute?: UiInitialRoute | undefined;
+    /** GAIA-233: the write-scoped JSON:API client. Absent ⇒ the renderer writes
+     *  through the read client and the server decides (spec Decision 1). */
+    writeClient?: unknown;
+}
+/** What a write-client builder needs — everything a connection already carries. */
+export interface BuildWriteClientOptions {
+    baseUrl: string;
+    jsonapiPrefix: string;
+    plugins: GaiaConnectionConfig['plugins'];
+    profile: string;
 }
 /** Test/composition seams for `gaia ui`. */
 export interface UiDeps {
@@ -91,6 +101,9 @@ export interface UiDeps {
     readRemoteUrl?: (cwd: string) => Promise<string>;
     /** Where user-facing grammar errors go; default `process.stderr`. */
     stderr?: (line: string) => void;
+    /** GAIA-233: builds the write-scoped client; default: dropsh under `pm`.
+     *  Injected so the write seam is testable without a live token endpoint. */
+    buildWriteClient?: (o: BuildWriteClientOptions) => Promise<unknown>;
 }
 /**
  * `gaia ui` — launch the interactive terminal UI. Resolves the connection

package/dist/src/ui.js

@@ -3,9 +3,38 @@ import { homedir } from 'node:os';
 import { pathToFileURL } from 'node:url';
 import { herdrAgentHost } from '@gaia-ai/addon-herdr';
 import { CommandRunner, createLogger, exec, listRegisteredConductors, loadGaiaConfig, machineContextPath, readMachineContext, setDefaultCommandRunner, } from '@gaia-ai/core';
-import { buildProgram as buildDropshProgram } from 'dropsh';
+import { buildProgram as buildDropshProgram, resolveAuth } from 'dropsh';
+import { createHttpClient, createJsonApiClient } from 'dropsh/plugin';
 import { parseTarget, resolveHere, UI_VIEW_MODES, } from './route.js';
 import { resolveAgentCommand, resolveProjectRooting, } from './ui-home.js';
+/** The auth profile `gaia ui` writes as. Reads stay on `session`. */
+const WRITE_PROFILE = 'pm';
+/**
+ * Build a second JSON:API client under a different auth profile, from the
+ * plugins core already constructed. `@dropsh/plugin-oauth2@0.5.7` derives its
+ * plugin id from the profile id, so `session` and `pm` are distinct plugins and
+ * BOTH resolve in one process — the old profile-dedupe that collapsed them is
+ * fixed (measured: `providers: … session, pm`).
+ *
+ * Throws a catchable error when the connection declares no such profile; the
+ * caller degrades explicitly rather than aborting the cockpit.
+ */
+async function buildWriteClientDefault(o) {
+    const http = createHttpClient();
+    const auth = await resolveAuth({
+        baseUrl: o.baseUrl,
+        plugins: o.plugins,
+        http,
+        now: () => Date.now(),
+        profile: o.profile,
+    });
+    return createJsonApiClient({
+        baseUrl: o.baseUrl,
+        prefix: o.jsonapiPrefix,
+        http,
+        auth,
+    });
+}
 /**
  * The current branch of `cwd`. Git resolves this PER WORKTREE, so
  * worktree-awareness for `--here` costs nothing (Decision 3). Never throws:
@@ -186,7 +215,33 @@ export async function cmdUi(deps = {}) {
         authPlugins: resolved.plugins,
         configPath: resolved.config_path,
         authProfile: 'session',
+        writeProfile: WRITE_PROFILE,
     };
+    // GAIA-233: the write client, built here because this package already holds
+    // the constructed plugins and imports dropsh — the renderer stays
+    // dropsh-decoupled and receives a finished object.
+    //
+    // A connection declaring only `session` is a supported configuration, not an
+    // error: the cockpit still reads everything. So the failure is EXPLICIT
+    // rather than fatal — no write client is injected, `writeProfile` names the
+    // profile the write will really use, and the popup says so. The server's own
+    // 403 then surfaces verbatim; there is one failure path for "wrong scope" and
+    // "no scope" alike.
+    let writeClient;
+    try {
+        writeClient = await (deps.buildWriteClient ?? buildWriteClientDefault)({
+            baseUrl: resolved.site.base_url,
+            jsonapiPrefix: resolved.site.jsonapi_prefix ?? '/jsonapi',
+            plugins: resolved.plugins,
+            profile: WRITE_PROFILE,
+        });
+    }
+    catch (err) {
+        connection.writeProfile = connection.authProfile;
+        logger.warn({ profile: WRITE_PROFILE }, `gaia ui: no '${WRITE_PROFILE}'-scoped write client ` +
+            `(${err instanceof Error ? err.message : String(err)}); ` +
+            `edits will be attempted as '${connection.authProfile}'.`);
+    }
     const rooting = resolveProjectRooting(cwd, entries, homedir());
     const ownConductorMachineId = rooting.ownConductorMachineId;
     const project = rooting.project;
@@ -277,6 +332,7 @@ export async function cmdUi(deps = {}) {
             }),
             ...(renderer ? { renderer } : {}),
             ...(initialRoute ? { initialRoute } : {}),
+            ...(writeClient !== undefined ? { writeClient } : {}),
         });
     }
     catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gaia-ai/ui",
-  "version": "0.6.3",
+  "version": "0.6.5",
   "description": "GAIA project-first cockpit: the `gaia ui` command plugin (renderer resolved dynamically).",
   "type": "module",
   "license": "MIT",
@@ -26,8 +26,8 @@
     "directory": "gaia-cli/ui"
   },
   "dependencies": {
-    "@gaia-ai/core": "^0.6.3",
-    "@gaia-ai/addon-herdr": "^0.6.3",
+    "@gaia-ai/core": "^0.6.5",
+    "@gaia-ai/addon-herdr": "^0.6.5",
     "commander": "^12.1.0",
     "dropsh": "^0.5.8"
   }