@piagent/platform 1.15.2 → 1.16.1

package/packages/piagent-webui/dist/client/index.html

@@ -7,7 +7,7 @@
     <meta name="csp-nonce" content="__PIAGENT_CSP_NONCE__" />
     <meta name="piagent-webui-mode" content="__PIAGENT_WEBUI_MODE__" />
     <title>Piagent WebUI</title>
-    <script type="module" crossorigin src="/assets/index-bE2DKmc1.js"></script>
+    <script type="module" crossorigin src="/assets/index-Bs8l37SR.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-Z91z6SlN.css">
   </head>
   <body>

package/packages/piagent-webui/gateway/gateway-service.ts

@@ -71,7 +71,8 @@ function capabilities(gatewayInstanceRef: string, runtimeAvailable = false, mana
         abort: runtimeAvailable ? available() : unavailable("session-runtime-not-enabled"),
         setModel: runtimeAvailable && !managed ? available() : unavailable("model-managed-by-studio"),
         setThinking: runtimeAvailable ? available() : unavailable("session-runtime-not-enabled"),
-        setPermission: runtimeAvailable && !managed ? available() : unavailable("permissions-managed-by-studio"),
+        // A company conversation offers "Ask first" or Bypass (no read-only).
+        setPermission: runtimeAvailable ? available() : unavailable("session-runtime-not-enabled"),
         rename: runtimeAvailable ? available() : unavailable("session-runtime-not-enabled"),
         pin: runtimeAvailable ? available() : unavailable("session-runtime-not-enabled"),
         archive: runtimeAvailable ? available() : unavailable("session-runtime-not-enabled"),

package/packages/piagent-webui/gateway/managed-projection.ts

@@ -17,7 +17,9 @@ export function managedProjection(context: any, entries: any[]) {
   // Helpers the Harness enables (up to four); a conversation recorded before
   // that was known says two.
   const maximum = Number.isInteger(counter?.maximum) && counter.maximum >= 0 && counter.maximum <= 4 ? counter.maximum : 2;
-  return {modelLabel:'agent-watch-auto', managedHelpers:{active:Number.isInteger(counter?.active) && counter.active>=0 && counter.active<=maximum ? counter.active : 0, maximum},
+  // The member's access choice: "trusted-full-access" is Bypass.
+  const permission = last('agent-watch-permission')?.mode === 'trusted-full-access' ? 'trusted-full-access' : 'workspace-write';
+  return {modelLabel:'agent-watch-auto', managedPermission: permission, managedHelpers:{active:Number.isInteger(counter?.active) && counter.active>=0 && counter.active<=maximum ? counter.active : 0, maximum},
     ...(Array.isArray(capabilities)?{managedThinkingLevels:levels.filter(level=>capabilities.includes(level))}:{}),
     ...(steps ? {managedPlan:{steps}} : {}), ...(process ? {managedProcess:process} : {})};
 }

package/packages/piagent-webui/gateway/runtime-session-controls.ts

@@ -15,7 +15,13 @@ type RuntimeCommandOutput = {
 
 export async function executePermissionCommand(session: any,
   permissionMode: "read-only" | "workspace-write" | "trusted-full-access"): Promise<void> {
-  if (session.managedExecution) throw new Error("managed-permissions-controlled-by-studio");
+  // A company conversation: "Ask first" or "Bypass" (no read-only mode); the
+  // runtime keeps the choice in the conversation.
+  if (session.managedExecution) {
+    if (typeof session.managedSetPermission !== "function" || permissionMode === "read-only") throw new Error("managed-permission-unavailable");
+    session.managedSetPermission(permissionMode);
+    return;
+  }
   const before = Array.isArray(session.messages) ? session.messages.length : 0;
   await session.prompt(`/permission ${permissionMode}`);
   const messages = Array.isArray(session.messages) ? session.messages.slice(before) : [];

package/packages/piagent-webui/gateway/session-catalog.ts

@@ -47,7 +47,7 @@ function catalogRef(key: Buffer, namespace: string, value: string): string {
 }
 
 export type SessionOwnerProjection = Pick<SessionRow, "state" | "liveState" | "composerAvailable" | "needsAttention" | "owner" | "reasonCode">;
-export type SessionOptionProjection = Pick<SessionRow, "modelLabel" | "thinkingLevel" | "managedHelpers" | "managedThinkingLevels" | "managedPlan" | "managedProcess">;
+export type SessionOptionProjection = Pick<SessionRow, "modelLabel" | "thinkingLevel" | "managedHelpers" | "managedThinkingLevels" | "managedPermission" | "managedPlan" | "managedProcess">;
 
 function display(value: unknown, maximum: number, fallback: string): string {
   const clean = redactSensitiveText(String(value ?? "")).text
@@ -126,6 +126,7 @@ function row(key: Buffer, info: PiSessionInfo, metadata: SessionMetadata | undef
     ...(sessionOptions?.managedHelpers ? {managedHelpers:{...sessionOptions.managedHelpers,
       active: ownership?.liveState === 'idle' ? 0 : ownership?.liveState === 'running' || ownership?.liveState === 'waiting-approval' ? sessionOptions.managedHelpers.active : null}} : {}),
     ...(sessionOptions?.managedThinkingLevels ? {managedThinkingLevels:sessionOptions.managedThinkingLevels} : {}),
+    ...(sessionOptions?.managedPermission ? {managedPermission:sessionOptions.managedPermission} : {}),
     ...(sessionOptions?.managedPlan ? {managedPlan:sessionOptions.managedPlan} : {}),
     ...(sessionOptions?.managedProcess ? {managedProcess:sessionOptions.managedProcess} : {}),
     modelLabel: sessionOptions?.modelLabel ?? null,
@@ -136,7 +137,7 @@ function row(key: Buffer, info: PiSessionInfo, metadata: SessionMetadata | undef
       ? { kind: "none", ownerEpoch: null, gatewayInstanceRef: null, runtimeInstanceRef: null, continuity: "released" }
       : ownership?.owner ?? { kind: "none", ownerEpoch: null, gatewayInstanceRef: null, runtimeInstanceRef: null, continuity: "unknown" },
     sessionRevision: revision(key, [info.path, info.modified.toISOString(), info.messageCount, info.name ?? null, metadata?.revision ?? null,
-      sessionOptions?.modelLabel ?? null, sessionOptions?.thinkingLevel ?? "unknown", sessionOptions?.managedHelpers, sessionOptions?.managedThinkingLevels, sessionOptions?.managedPlan, sessionOptions?.managedProcess,
+      sessionOptions?.modelLabel ?? null, sessionOptions?.thinkingLevel ?? "unknown", sessionOptions?.managedHelpers, sessionOptions?.managedThinkingLevels, sessionOptions?.managedPermission ?? null, sessionOptions?.managedPlan, sessionOptions?.managedProcess,
       metadata?.archived ? "archived" : ownership ? [ownership.state, ownership.liveState, ownership.owner.kind,
         ownership.owner.ownerEpoch, ownership.owner.runtimeInstanceRef, ownership.reasonCode] : "offline"]),
     reasonCode: metadata?.archived ? metadataReason : ownership?.reasonCode ?? metadataReason

package/packages/piagent-webui/gateway/update-center.ts

@@ -10,13 +10,14 @@ import { compareReleaseVersions, releaseVersion, writeUpdateCache } from "../../
 // past the version the newest Piagent pins (its peer dependency): that is the
 // host its managed runtime is qualified on. A newer Pi is shown as untested.
 //
-// The registry is asked in the background, at most every 6 hours unless the
+// The registry is asked in the background, at most every hour unless the
 // member asks now; the dashboard reads the cached answer. Everything read from
 // outside (registry answers, the cache and job files any local process could
 // write) is accepted only as release versions and known codes.
 const PLATFORM = "@piagent/platform";
 const HOST = "@earendil-works/pi-coding-agent";
-export const CHECK_EVERY_MS = 6 * 60 * 60 * 1000;
+// Releases ship several times a day; members should hear within the hour.
+export const CHECK_EVERY_MS = 60 * 60 * 1000;
 const FORCED_CHECK_GAP_MS = 30_000;
 const PROBE_TIMEOUT_MS = 20_000;
 const MAX_FILE_BYTES = 4096;

package/packages/piagent-webui/server/loopback-server.ts

@@ -448,6 +448,7 @@ export async function startLoopbackServer(options: {
   });
   const address = server.address();
   if (!address || typeof address === "string" || address.address !== "127.0.0.1") { server.close(); throw new Error("loopback-bind-failed"); }
+  auth.bindPort(address.port);
   origin = `http://127.0.0.1:${address.port}`;
   return {
     origin,

package/packages/piagent-webui/server/session-auth.ts

@@ -1,6 +1,10 @@
 import { createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import type { IncomingMessage } from "node:http";
 
+// Cookies are scoped by host, not by port: every Piagent server on 127.0.0.1
+// (the Gateway, a company service, an older launch) shares one cookie jar.
+// The name carries the port once bound, so one server's launch no longer
+// replaces the session of another server's open tab.
 const SESSION_COOKIE = "piagent_webui_session";
 
 function secret(): string { return randomBytes(32).toString("base64url"); }
@@ -23,6 +27,7 @@ export class SessionAuthority {
   readonly #bootstrapTtlMs: number;
   readonly #sessionTtlMs: number;
   readonly #cookieSigningKey = randomBytes(32);
+  #cookieName = SESSION_COOKIE;
   #bootstraps = new Map<string, number>();
   #sessions = new Map<string, BrowserSession>();
 
@@ -33,6 +38,12 @@ export class SessionAuthority {
   }
 
   get bootstrapCapability(): string { return this.#initialBootstrap; }
+  get cookieName(): string { return this.#cookieName; }
+
+  bindPort(port: number): void {
+    if (!Number.isInteger(port) || port < 1 || port > 65_535) throw new Error("invalid-session-port");
+    this.#cookieName = `${SESSION_COOKIE}_${port}`;
+  }
 
   issueBootstrapCapability(now = Date.now()): string {
     for (const [value, createdAt] of this.#bootstraps) {
@@ -54,7 +65,7 @@ export class SessionAuthority {
   }
 
   authenticate(request: IncomingMessage, now = Date.now()): BrowserSession | null {
-    const value = cookie(request, SESSION_COOKIE);
+    const value = cookie(request, this.#cookieName);
     if (!value) return null;
     const separator = value.lastIndexOf(".");
     if (separator < 1) return null;
@@ -77,7 +88,7 @@ export class SessionAuthority {
   cookieHeader(session: BrowserSession): string {
     const seconds = Math.max(1, Math.floor((session.expiresAt - Date.now()) / 1000));
     const token = `${session.id}.${this.#cookieSignature(session.id)}`;
-    return `${SESSION_COOKIE}=${token}; HttpOnly; SameSite=Strict; Path=/; Max-Age=${seconds}`;
+    return `${this.#cookieName}=${token}; HttpOnly; SameSite=Strict; Path=/; Max-Age=${seconds}`;
   }
 
   #cookieSignature(id: string): string {

package/schemas/piagent-webui/session-catalog-v1.schema.json

@@ -92,7 +92,7 @@
         "composerAvailable": { "type": "boolean" },
         "needsAttention": { "type": "boolean" },
         "managedHelpers": { "type": "object", "additionalProperties": false, "required": ["active", "maximum"], "properties": {"active": {"type": ["integer", "null"], "minimum": 0, "maximum": 4}, "maximum": {"type": "integer", "minimum": 0, "maximum": 4}} },
-        "managedThinkingLevels": {"type": "array", "uniqueItems": true, "maxItems": 7, "items": {"enum": ["off","minimal","low","medium","high","xhigh","max"]}},
+        "managedThinkingLevels": {"type": "array", "uniqueItems": true, "maxItems": 7, "items": {"enum": ["off","minimal","low","medium","high","xhigh","max"]}}, "managedPermission": {"enum": ["workspace-write","trusted-full-access"]},
         "managedPlan": { "type": "object", "additionalProperties": false, "required": ["steps"], "properties": {
           "steps": { "type": "array", "minItems": 1, "maxItems": 30, "items": { "type": "object", "additionalProperties": false, "required": ["step", "status"], "properties": {
             "step": { "type": "string", "minLength": 1, "maxLength": 200 }, "status": { "enum": ["pending", "in_progress", "completed"] } } } } } },