@bivy/bivy 0.17.3-staging.14 → 0.17.3-staging.16

package/dist/apps/inspector.js

@@ -32,35 +32,20 @@ const selector=el=>{
   }
   return parts.join(' > ')||el.localName;
 };
-let box=null,target=null,onPicked=post,host=null;
-// Picks on pointerup: iOS never fires click for a tap on a non-clickable
-// element when only window listens, so click would miss most of the page.
-// While pointing, the app sees none of the gesture, including the click after.
-const SWALLOW=['pointerdown','mousedown','mouseup','touchend','click','dblclick','contextmenu'];
-const swallow=e=>{e.preventDefault();e.stopPropagation();};
-// A second listener, so stopping (which the shell does right after a pick)
-// doesn't also drop the guard on the rest of the tap. The tap's click ends it.
-const aftermath=e=>{swallow(e);if(e.type==='click')listen(false,aftermath);};
-const listen=(on,handler=swallow)=>{
-  const method=on?addEventListener:removeEventListener;
-  if(handler===swallow){method('pointermove',hover,true);method('pointerup',pick,true);method('keydown',key,true);}
-  for(const type of SWALLOW)method(type,handler,true);
-};
-const stop=()=>{box?.remove();box=null;target=null;listen(false);};
+let box=null,layer=null,onPicked=post,host=null;
+// While pointing, a clear layer over the page takes every tap itself, so the
+// app never sees one and no browser's event order matters (iOS sends no click
+// to a window listener for most taps). The element is looked up beneath it.
+const stop=()=>{box?.remove();layer?.remove();box=layer=null;removeEventListener('keydown',key,true);};
+const under=e=>document.elementsFromPoint(e.clientX,e.clientY).find(el=>el!==layer&&el!==box&&el!==host);
 const hover=e=>{
-  const el=document.elementFromPoint(e.clientX,e.clientY);
-  if(!el||el===box||el===host)return;target=el;const r=el.getBoundingClientRect();
+  const el=under(e);if(!el)return;const r=el.getBoundingClientRect();
   Object.assign(box.style,{left:r.left+'px',top:r.top+'px',width:r.width+'px',height:r.height+'px'});
 };
 const pick=e=>{
-  swallow(e);
-  // The event's own target, not a coordinate lookup: iOS gets elementFromPoint
-  // wrong in a frame of a zoomed page. Found nothing? Keep pointing.
-  const el=e.target instanceof Element?e.target:document.elementFromPoint(e.clientX,e.clientY)||target;
-  if(!el)return;stop();
-  // Keep eating the click (and iOS's delayed mouse events) this tap still fires.
-  listen(true,aftermath);setTimeout(()=>listen(false,aftermath),500);
-  if(el===host){onPicked({type:'picked',cancelled:true});return;}const r=el.getBoundingClientRect();
+  e.preventDefault();
+  const el=under(e);if(!el)return;stop();
+  const r=el.getBoundingClientRect();
   onPicked({type:'picked',selector:selector(el),tag:el.localName,text:(el.innerText||el.getAttribute('aria-label')||el.getAttribute('alt')||'').trim().replace(/\\s+/g,' ').slice(0,200),
     rect:{x:Math.round(r.left),y:Math.round(r.top),width:Math.round(r.width),height:Math.round(r.height)},
     viewport:{width:innerWidth,height:innerHeight},path:location.pathname+location.search+location.hash});
@@ -71,8 +56,13 @@ function startPointing(){
   box=document.createElement('div');
   box.setAttribute('aria-hidden','true');
   Object.assign(box.style,{position:'fixed',zIndex:2147483647,pointerEvents:'none',outline:'2px solid Highlight',outlineOffset:'2px',borderRadius:'4px',transition:'all 60ms ease-out'});
-  document.documentElement.append(box);
-  listen(true);
+  // One below the reviewer dock, so its controls stay usable while pointing.
+  layer=document.createElement('div');
+  layer.setAttribute('aria-hidden','true');
+  Object.assign(layer.style,{position:'fixed',inset:0,zIndex:2147483646,cursor:'crosshair',background:'transparent',touchAction:'manipulation',userSelect:'none',webkitUserSelect:'none',webkitTouchCallout:'none'});
+  layer.addEventListener('pointermove',hover);layer.addEventListener('pointerdown',hover);layer.addEventListener('click',pick);
+  document.documentElement.append(layer,box);
+  addEventListener('keydown',key,true);
 }
 addEventListener('message',e=>{
   if(!framed||e.origin!==SHELL||e.source!==parent||e.data?.type!=='bivy:point')return;
@@ -87,7 +77,8 @@ if(REVIEWER&&!framed){
     +'button{border:1px solid ButtonBorder;background:ButtonFace;color:ButtonText;border-radius:999px;padding:10px 14px;font-weight:600;cursor:pointer;min-height:44px}'
     +'.primary{background:CanvasText;color:Canvas;border-color:CanvasText}'
     +'form{width:min(340px,calc(100vw - 24px));background:Canvas;color:CanvasText;border:1px solid GrayText;border-radius:14px;padding:12px;box-shadow:0 8px 30px rgb(0 0 0/.25)}'
-    +'textarea{width:100%;min-height:5em;margin:8px 0;border:1px solid GrayText;border-radius:8px;padding:8px;background:Canvas;color:CanvasText;resize:vertical}'
+    // 16px: smaller, and iOS zooms the page in when the note box is focused.
+    +'textarea{width:100%;min-height:5em;margin:8px 0;border:1px solid GrayText;border-radius:8px;padding:8px;background:Canvas;color:CanvasText;resize:vertical;font-size:16px}'
     +'.row{display:flex;justify-content:flex-end;gap:8px}.muted{color:GrayText;font-size:12px;overflow-wrap:anywhere}[hidden]{display:none!important}</style>'
     +'<div class="dock"><p class="muted" role="status" id="status" hidden></p>'
     +'<form id="form" hidden><label for="note">Your note</label><div class="muted" id="about"></div><textarea id="note" required maxlength="1000"></textarea>'

package/dist/apps/registry.js

@@ -198,7 +198,7 @@ export class AppRegistry extends EventEmitter {
         return structuredClone(app);
     }
     list(sessionId) {
-        return structuredClone([...this.apps.values()].filter((app) => app.sessionId === sessionId));
+        return structuredClone([...this.apps.values()].filter((app) => sessionId === undefined || app.sessionId === sessionId));
     }
     getView(id) { return this.views.get(id); }
     /** An agent turn changed files: re-take changed static snapshots and bump

package/dist/apps/service.js

@@ -35,6 +35,7 @@ export class AppService {
         this.screenshots = { enabled: options.screenshots?.enabled ?? (() => false), take: options.screenshots?.take ?? takeShots };
         this.displays = options.displays ?? NO_DISPLAYS;
     }
+    /** A session's apps, or every app on this machine when no session is given. */
     list(sessionId) {
         const available = Boolean(this.gateway) && this.gateway?.available !== false;
         const apps = this.registry.list(sessionId);

package/dist/apps/styles.css

@@ -588,6 +588,12 @@ input, textarea, select { font-family: inherit; font-size: 16px; }
    discoverability pattern as .row-menu-btn — and a touch-friendly baseline
    opacity on devices with no hover. */
 .assistant-row { align-self: stretch; width: 100%; max-width: 680px; }
+/* The message "Show in chat" landed on (Artifacts / Apps pages). */
+.is-jump-target { border-radius: var(--radius-md); animation: jump-target 2.4s var(--ease-standard); }
+@keyframes jump-target {
+  0%, 50% { background: color-mix(in srgb, var(--accent) 10%, transparent); box-shadow: 0 0 0 var(--space-2) color-mix(in srgb, var(--accent) 10%, transparent); }
+  100% { background: transparent; box-shadow: 0 0 0 var(--space-2) transparent; }
+}
 .msg-actions { display: flex; align-items: center; gap: 2px; margin-top: var(--space-1); margin-left: -6px; }
 .msg-copy-btn, .msg-speak-btn {
   border: 0; background: transparent; color: var(--muted);
@@ -1412,6 +1418,62 @@ button.sheet-action:last-child { border-bottom: 0; }
   .automations-view-head-actions > .btn.primary { padding: 9px 18px; }
   .automations-view-body { padding: 8px 24px max(48px, env(safe-area-inset-bottom)); }
 }
+/* Artifacts / Apps pages (LibraryView.tsx) share the Automations page shell:
+   a quiet image grid for files, a plain list for apps. */
+.library-view:focus { outline: none; }
+.library-view .automations-view-head { width: 100%; max-width: 1080px; margin: 0 auto; box-sizing: border-box; }
+.library-body { max-width: 1080px; }
+.library-toolbar { display: flex; margin: var(--space-2) 0 var(--space-4); }
+.library-loading { display: flex; justify-content: center; padding: var(--space-8) 0; }
+.library-body > .banner { margin: var(--space-2) 0; }
+.library-note { margin: var(--space-2) 0; font-size: var(--text-sm); color: var(--muted); }
+.library-grid {
+  list-style: none; margin: var(--space-2) 0 0; padding: 0;
+  display: grid; gap: var(--space-5) var(--space-3);
+  grid-template-columns: repeat(auto-fill, minmax(150px, 1fr));
+}
+.library-tile { display: flex; flex-direction: column; gap: var(--space-2); min-width: 0; }
+.library-tile-preview {
+  width: 100%; aspect-ratio: 4 / 3; padding: 0; overflow: hidden;
+  display: grid; place-items: center;
+  border: 1px solid var(--line); border-radius: var(--radius-lg);
+  background: var(--surface-2); color: var(--muted); font: inherit; cursor: pointer;
+  transition: border-color var(--dur-fast) var(--ease-standard);
+}
+.library-tile-preview:hover:not(:disabled) { border-color: var(--line-strong); }
+.library-tile-preview:disabled { cursor: progress; }
+.library-tile-preview img { display: block; width: 100%; height: 100%; object-fit: cover; }
+.library-tile-file { display: flex; flex-direction: column; align-items: center; gap: var(--space-1); }
+.library-tile-ext { font-size: var(--text-xs); font-weight: var(--weight-semibold); letter-spacing: 0.04em; }
+.library-tile-caption { display: flex; flex-direction: column; gap: 2px; min-width: 0; padding: 0 2px; }
+.library-tile-name, .library-row-name {
+  overflow: hidden; text-overflow: ellipsis; white-space: nowrap;
+  font-size: var(--text-sm); font-weight: var(--weight-medium); color: var(--ink);
+}
+.library-tile-note { font-size: var(--text-xs); color: var(--danger); }
+.library-source {
+  align-self: flex-start; display: inline-flex; align-items: center; gap: var(--space-1);
+  max-width: 100%; min-width: 0; min-height: 28px; padding: 0; border: 0; background: transparent;
+  color: var(--muted); font: inherit; font-size: var(--text-xs); text-align: left; cursor: pointer;
+}
+.library-source:hover { color: var(--ink); }
+.library-source svg, .library-source-when { flex: none; }
+.library-source-name { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.library-list { list-style: none; margin: 0; padding: 0; }
+.library-row { display: flex; align-items: center; gap: var(--space-3); padding: var(--space-3) 0; border-bottom: 1px solid var(--line); }
+.library-row:last-child { border-bottom: 0; }
+.library-row-icon {
+  flex: none; width: 40px; height: 40px; display: grid; place-items: center;
+  border: 1px solid var(--line); border-radius: var(--radius-md); background: var(--surface-2);
+  color: var(--ink); font-weight: var(--weight-semibold);
+}
+.library-row-main { flex: 1; min-width: 0; display: flex; flex-direction: column; }
+.library-row-name { font-size: var(--text-base); }
+.library-row-kind { color: var(--muted); font-weight: var(--weight-normal); }
+@media (min-width: 640px) {
+  .library-grid { grid-template-columns: repeat(auto-fill, minmax(200px, 1fr)); gap: var(--space-6) var(--space-4); }
+}
+
 .autom-section { margin-top: 26px; }
 .autom-section-head {
   display: flex; align-items: center; justify-content: space-between; gap: 10px;

package/dist/controllers/app-commands.js

@@ -6,7 +6,7 @@ export function createAppCommands(service, workspaceFor, published = () => { })
         return workspace;
     };
     const operations = {
-        "apps.list": (msg) => service.list(String(msg.sessionId)),
+        "apps.list": (msg) => service.list(typeof msg.sessionId === "string" ? msg.sessionId : undefined),
         "apps.publish": (msg) => {
             const sessionId = String(msg.sessionId);
             const app = service.publish(sessionId, workspaceOf(sessionId), msg.manifest);

package/dist/controllers/artifact-commands.js

@@ -0,0 +1,42 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// Copyright (c) 2026 Petter André Sjulstad
+//
+// The machine-wide Artifacts index behind the sidebar's Artifacts page: every
+// file an agent sent into a chat (`bivy attach` / `attach_to_chat`), across all
+// of this machine's sessions. Built from the same event-log records attachment
+// GC already sweeps, so there is no second index to keep in sync. Only what can
+// still be opened is listed: the session exists and the blob is still stored.
+/** Newest first, bounded like the per-session projection. */
+export const MAX_MACHINE_ARTIFACTS = 500;
+/** One entry per content hash — the newest send wins, so the same report sent
+ * to two sessions links to where it was sent last. */
+export function listMachineArtifacts(deps) {
+    const byHash = new Map();
+    for (const sessionId of deps.sessionIds()) {
+        for (const record of deps.scan(sessionId)) {
+            if (record.bivyKind !== "outbound-attachment")
+                continue;
+            const { ref } = record;
+            const existing = byHash.get(ref.hash);
+            if (existing && existing.createdAt >= record.createdAt)
+                continue;
+            byHash.set(ref.hash, {
+                sessionId, hash: ref.hash, name: ref.name, mimeType: ref.mimeType, kind: ref.kind, size: ref.size,
+                ...(record.caption ? { caption: record.caption } : {}),
+                createdAt: record.createdAt,
+                artifact: Boolean(record.artifact || existing?.artifact),
+            });
+        }
+    }
+    return [...byHash.values()]
+        .filter((item) => deps.stored(item.hash))
+        .sort((a, b) => b.createdAt - a.createdAt)
+        .slice(0, MAX_MACHINE_ARTIFACTS);
+}
+export function createArtifactCommands(deps) {
+    return {
+        "artifacts.list"(msg, ctx) {
+            ctx.reply({ type: "artifacts.list.ok", requestId: msg.requestId, artifacts: listMachineArtifacts(deps) });
+        },
+    };
+}

package/dist/protocol/client-command-routes.js

@@ -4,6 +4,7 @@
  * client command registry. Relay and HTTP now differ only in framing. */
 export const CLIENT_COMMAND_ROUTES = [
     ...["list", "publish", "offers", "adopt", "open", "logs", "shot", "clearNotes", "share", "revoke", "remove"].map((action) => ({ method: "post", path: `/api/apps/${action}`, kind: `apps.${action}` })),
+    { method: "post", path: "/api/artifacts/list", kind: "artifacts.list" },
     { method: "post", path: "/api/auth/credentials/native-preview", kind: "credentials.native.preview" },
     { method: "post", path: "/api/auth/credentials/native-import", kind: "credentials.native.import" },
     { method: "post", path: "/api/session/pause", kind: "session.pause" },

package/dist/protocol/client-command-schemas.js

@@ -8,7 +8,8 @@ const optionalSession = { sessionId: Type.Optional(Type.String()) };
  * this table remains migration-compatible; adding validation is one data row. */
 export const CLIENT_COMMAND_SCHEMAS = {
     ping: Type.Object(request),
-    "apps.list": Type.Object({ ...request, ...session }),
+    "apps.list": Type.Object({ ...request, ...optionalSession }),
+    "artifacts.list": Type.Object(request),
     "apps.publish": Type.Object({ ...request, ...session, manifest: Type.Unknown() }),
     "apps.offers": Type.Object({ ...request, ...session }),
     "apps.adopt": Type.Object({ ...request, ...session, port: Type.Integer({ minimum: 1024, maximum: 65535 }) }),

package/dist/server.js

@@ -115,6 +115,7 @@ import { createCapabilitiesController } from "./controllers/capabilities.js";
 import { createAccessDeviceController, createLinkedDeviceController } from "./controllers/devices.js";
 import { createSessionControlCommands } from "./controllers/session-control.js";
 import { createPresenceCommands } from "./controllers/presence-commands.js";
+import { createArtifactCommands } from "./controllers/artifact-commands.js";
 import { PresenceBook, deviceFrom } from "./session/presence.js";
 import { createForkCommands } from "./controllers/fork-commands.js";
 import { createGithubCommands } from "./controllers/github-commands.js";
@@ -1987,6 +1988,12 @@ const appService = new AppService(appRegistry, appGateway ?? remotePreview, {
     has: (id) => terminals.has(id),
     close: (id) => { terminals.close(id); },
 }, { screenshots: { enabled: appScreenshotsEnabled }, displays: appDisplays });
+// A reviewer's note shows up in an open Apps sheet without reopening it.
+appRegistry.on("notes", (viewId) => {
+    const entry = appRegistry.getView(viewId);
+    if (entry)
+        broadcast({ type: "apps.changed", sessionId: entry.app.sessionId });
+});
 const RELAY_COMMANDS = {
     ...createAppCommands(appService, (id) => { const record = resolveSession(id); return record ? harnessDirFor(record) : undefined; }, (app) => {
         const record = resolveSession(app.sessionId);
@@ -2029,6 +2036,11 @@ const RELAY_COMMANDS = {
         const meta = attachmentStore.readMeta(hash);
         ctx.reply({ type: "attachment.data", requestId, hash, mimeType: meta?.mimeType ?? "application/octet-stream", name: meta?.name, data: bytes.toString("base64") });
     },
+    ...createArtifactCommands({
+        sessionIds: () => new Set([...metadata.listSessions().map((session) => session.id), ...[...openSessions.values()].map((record) => record.id)]),
+        scan: (id) => eventLog.scan(id, ["outbound-attachment"]),
+        stored: (hash) => attachmentStore.getPath(hash) !== null,
+    }),
     ...createPresenceCommands(presenceBook, publishPresence),
     ...createSessionControlCommands({
         resolve: (sessionId) => resolveSession(sessionId),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bivy/bivy",
-  "version": "0.17.3-staging.14",
+  "version": "0.17.3-staging.16",
   "type": "module",
   "license": "AGPL-3.0-only",
   "description": "Run coding agents on machines you own. Open-source, self-hostable agent workspace.",