@bivy/bivy 0.12.0-staging.404 → 0.12.0-staging.405

package/dist/server.js

@@ -2878,6 +2878,17 @@ const RELAY_COMMANDS = {
             });
             return;
         }
+        const remoteSessionRequestId = requestId ?? randomUUID();
+        const sessionAdmission = await admitRelaySessionCreate(remoteSessionRequestId);
+        if (!sessionAdmission.allowed) {
+            relay?.sendEvent({
+                type: "session.error",
+                code: sessionAdmission.code || "remote_session_limit",
+                error: sessionAdmission.error,
+                requestId,
+            });
+            return;
+        }
         let record;
         try {
             // Deduped by requestId so a client's post-reconnect retry adopts the
@@ -3131,6 +3142,24 @@ async function modelAuthFetch(pathname, init = {}) {
         headers.set("content-type", "application/json");
     return fetch(`${sessionAdvertiseTarget.controlPlaneUrl.replace(/\/$/, "")}${pathname}`, { ...init, headers });
 }
+async function admitRelaySessionCreate(idempotencyKey) {
+    // Self-hosted/direct deployments without an account extension stay unrestricted:
+    // the control plane answers allowed when no deployment extension is configured.
+    const res = await modelAuthFetch("/node/policy/check", {
+        method: "POST",
+        body: JSON.stringify({ operation: "session.create", idempotencyKey }),
+    });
+    if (!res)
+        return { allowed: true };
+    const decision = await res.json().catch(() => ({}));
+    if (res.ok && decision.allowed !== false)
+        return { allowed: true };
+    return {
+        allowed: false,
+        code: decision.code,
+        error: decision.reason || decision.error || "This account has reached its remote session allowance.",
+    };
+}
 // Debounced model-auth sync trigger. A relay wake (`work.available`) fires this
 // so peers answer a new node's vault-key request promptly (event-driven) instead
 // of on the steady 30s poll. Coalesces a burst of wakes into one sync.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bivy/bivy",
-  "version": "0.12.0-staging.404",
+  "version": "0.12.0-staging.405",
   "type": "module",
   "license": "AGPL-3.0-only",
   "description": "Run coding agents on machines you own. Open-source, self-hostable agent workspace.",