@bivy/bivy 0.18.10-staging.3 → 0.18.10

package/bin/bivy.mjs

@@ -1827,7 +1827,7 @@ function cmdCompletions(args = []) {
   const shell = (args[0] || "").toLowerCase();
   const commands = [
     "run", "runs", "sessions", "ls", "resume", "promote", "rename", "nodes", "agent", "agents", "agents:install", "shim", "takeover", "token", "exec",
-    "send", "attach", "kill", "setup", "start", "stop", "restart", "status", "doctor", "diagnostics", "capabilities", "logs", "login", "logout", "signout", "provider", "model",
+    "send", "attach", "suggest", "kill", "setup", "start", "stop", "restart", "status", "doctor", "diagnostics", "capabilities", "logs", "login", "logout", "signout", "provider", "model",
     "update", "update:log", "audit", "automation", "config", "plugin", "open", "service", "secrets", "voice", "link", "relay:setup",
     "github:connect", "github:app-create", "github:app-connect", "github:app-sync", "prune", "uninstall", "help", "version",
   ];
@@ -2428,6 +2428,40 @@ async function cmdAttach(args = []) {
   console.log(c.green(`Attached ${body.name} (${body.kind}, ${body.size} bytes) to the chat.`));
 }
 
+// `bivy suggest "<task>" [--title "…"] [--session <id>]` — propose a task the
+// user can start in one tap, beside this session or in it. For an agent
+// offering next steps: write the task as a complete instruction.
+async function cmdSuggest(args = []) {
+  const flagsWithValue = new Set(["--session", "--title"]);
+  const flag = (name) => {
+    const i = args.indexOf(name);
+    return i >= 0 && i + 1 < args.length ? args[i + 1] : undefined;
+  };
+  const text = args.filter((a, i) => !a.startsWith("-") && !(i > 0 && flagsWithValue.has(args[i - 1]))).join(" ").trim();
+  const sessionId = resolveAttachSessionId({ sessionFlag: flag("--session"), env: process.env });
+  if (!text) { console.error(c.red('Usage: bivy suggest "<task>" [--title "short label"] [--session <id>]')); process.exit(1); return; }
+  if (!sessionId) { console.error(c.red("No session id. Set --session <id> or run inside an agent session ($BIVY_SESSION_ID).")); process.exit(1); return; }
+  const config = loadConfig();
+  if (!(await ensureNodeRunning(config))) { console.error(c.red(`Could not reach the Bivy node at ${url(config)}.`)); process.exit(1); return; }
+  let token;
+  try { token = await localDeviceToken(config); } catch { token = undefined; }
+  let res;
+  try {
+    res = await fetch(`${url(config)}/api/session/${encodeURIComponent(sessionId)}/suggest`, {
+      method: "POST",
+      headers: { "content-type": "application/json", ...(token ? { authorization: `Bearer ${token}` } : {}) },
+      body: JSON.stringify({ text, title: flag("--title") }),
+    });
+  } catch (error) {
+    console.error(c.red(`Could not reach the Bivy node: ${error?.message || String(error)}`));
+    process.exit(1);
+    return;
+  }
+  const body = await res.json().catch(() => ({}));
+  if (!res.ok) { console.error(c.red(`Suggest failed (${res.status}): ${body?.error || "unknown error"}`)); process.exit(1); return; }
+  console.log(c.green("Suggested in the chat. The user can start it in one tap."));
+}
+
 // Universal app publishing: every agent that can write JSON and run a command
 // uses the same contract. Relative static directories are manifest-relative.
 async function cmdApp(args = []) {
@@ -5419,6 +5453,9 @@ An agent's own --help passes through, e.g. 'bivy run claude --help'.`);
     case "attach":
       await cmdAttach(args);
       break;
+    case "suggest":
+      await cmdSuggest(args);
+      break;
     case "completions":
     case "completion":
       cmdCompletions(args);

package/dist/agent-instructions.js

@@ -38,6 +38,10 @@ export const BIVY_AGENT_NOTE = [
         "`bivy app run -- <command>` (a desktop app) gives the user a live preview; `bivy app shot` screenshots it so you " +
         "can check your work; `bivy app present` tells the user a visible change is ready to look at. " +
         "`bivy app --help` has the details.",
+    "- Proposing tasks the user could hand you (next steps, ideas, options): post each with " +
+        '`bivy suggest "<complete instruction>" [--title "short label"]` instead of only listing them. The user can ' +
+        "start each in one tap, in this session or in a parallel one that works in its own copy of the project, so " +
+        "write it to stand on its own, with paths relative to the project root.",
 ].join("\n");
 const PREAMBLE = "The user's global Bivy instructions follow. They apply to every workspace; where they conflict with " +
     "instructions from the current repository (AGENTS.md, CLAUDE.md, …), the repository's instructions win.";

package/dist/apps/gateway.js

@@ -195,6 +195,7 @@ export class AppGateway {
     returnOrigins;
     signIn;
     captureNote;
+    badge;
     server;
     template;
     tickets = new Map();
@@ -211,11 +212,12 @@ export class AppGateway {
     displays = new WebSocketServer({ noServer: true, maxPayload: 1024 * 1024, perMessageDeflate: false });
     /** `signIn` sends a signed-out visit to a view's stable address back
      * through Bivy, which re-opens it for a signed-in device. */
-    constructor(registry, originTemplate, returnOrigins = () => [], signIn, captureNote) {
+    constructor(registry, originTemplate, returnOrigins = () => [], signIn, captureNote, badge) {
         this.registry = registry;
         this.returnOrigins = returnOrigins;
         this.signIn = signIn;
         this.captureNote = captureNote;
+        this.badge = badge;
         this.template = previewOriginTemplate(originTemplate);
         this.server = http.createServer((req, res) => { void this.handle(req, res).catch(() => { if (!res.headersSent)
             res.writeHead(502); res.end("Preview request failed."); }); });
@@ -365,7 +367,9 @@ export class AppGateway {
                 return;
             }
             res.setHeader("Content-Type", "application/json");
-            res.end(JSON.stringify({ name: entry.app.name, origin: this.origin(id), returnTo: grant.returnTo, ...(grant.reusable ? { reviewer: true } : {}), ...(entry.target.kind === "display" ? { inspect: false } : {}) }));
+            // Someone opening a shared link sees "Made with Bivy" under the app; the owner doesn't.
+            const badge = grant.reusable && this.badge ? await this.badge().catch(() => true) : false;
+            res.end(JSON.stringify({ name: entry.app.name, origin: this.origin(id), returnTo: grant.returnTo, ...(grant.reusable ? { reviewer: true } : {}), ...(badge ? { badge: true } : {}), ...(entry.target.kind === "display" ? { inspect: false } : {}) }));
             return;
         }
         res.writeHead(404);

package/dist/apps/preview-shell.js

@@ -81,11 +81,16 @@ nav .btn[aria-pressed="true"] { background:var(--accent-soft); color:var(--accen
 #compare[data-drawing] #compare-slider, #compare[data-drawing] #compare-hint, #compare[data-drawing] #compare-draw { display:none; }
 .label-narrow { display:none; }
 @media (max-width: 699px) { #lens { display:none; } #name { display:none; } .label-wide { display:none; } .label-narrow { display:inline; } }
+/* "Made with Bivy": a quiet strip under a shared app, never over it. */
+#made-with { flex-shrink:0; display:flex; align-items:center; justify-content:center; gap:var(--space-1); min-height:var(--space-6); padding:0 var(--space-3) env(safe-area-inset-bottom); box-sizing:border-box; background:var(--surface); border-top:thin solid var(--line); color:var(--muted); font-size:var(--text-xs); text-decoration:none; }
+#made-with:hover, #made-with:focus-visible { color:var(--ink); }
+body.badged #dock { bottom:calc(var(--space-2) + var(--space-6) + env(safe-area-inset-bottom)); }
 [hidden] { display:none !important; }
 </style></head><body>
 <div class="banner" data-tone="warn" id="down" hidden><span class="banner-text" id="down-text" role="status"></span><span class="banner-actions"><button class="btn sm" id="ask" hidden>Ask agent to fix</button></span></div>
 <p id="status" role="status">Opening app…</p>
 <div id="stage" data-lens="full"><iframe id="app" title="App preview" hidden sandbox="allow-scripts allow-same-origin allow-forms allow-downloads allow-popups" referrerpolicy="no-referrer"></iframe></div>
+<a id="made-with" href="https://bivy.sh/?ref=preview" target="_blank" rel="noopener" hidden>Made with <strong>Bivy</strong><span aria-hidden="true">↗</span><span class="sr-only"> (opens in a new tab)</span></a>
 <div id="ink" hidden aria-hidden="true"><svg id="ink-marks"></svg></div>
 <div id="dock">
   <section class="panel" id="console" hidden aria-labelledby="console-title">
@@ -157,6 +162,8 @@ function show(data,launch){
     $('draft-text').maxLength=1000;
     $('send-errors').textContent='Leave a note…';
   }
+  $('made-with').hidden=!data.badge;
+  document.body.classList.toggle('badged',Boolean(data.badge));
   $('title').textContent=data.name;
   $('title').title=data.name;
   document.title='Bivy · '+data.name;

package/dist/apps/remote-preview.js

@@ -10,16 +10,18 @@ export class RemotePreview {
     returnOrigins;
     signIn;
     captureNote;
+    badge;
     gateway;
     origin;
     relayUrl;
     online = false;
     sockets = new Set();
-    constructor(registry, returnOrigins, signIn, captureNote) {
+    constructor(registry, returnOrigins, signIn, captureNote, badge) {
         this.registry = registry;
         this.returnOrigins = returnOrigins;
         this.signIn = signIn;
         this.captureNote = captureNote;
+        this.badge = badge;
     }
     get available() { return this.online && Boolean(this.gateway); }
     ready(origin, relayUrl) {
@@ -32,7 +34,7 @@ export class RemotePreview {
             return;
         if (this.origin !== template) {
             this.gateway?.close();
-            this.gateway = new AppGateway(this.registry, template, this.returnOrigins, this.signIn, this.captureNote);
+            this.gateway = new AppGateway(this.registry, template, this.returnOrigins, this.signIn, this.captureNote, this.badge);
             this.origin = template;
         }
         this.relayUrl = relayUrl.replace(/\/$/, "") + "/preview/stream";

package/dist/apps/styles.css

@@ -1054,16 +1054,17 @@ button.sheet-action:last-child { border-bottom: 0; }
 .followup-card { flex: none; padding: 0; overflow: hidden; }
 .followup-card.locked { opacity: 0.75; }
 .followup-card-row {
-  display: flex; align-items: flex-start; gap: 8px; padding: 8px 10px;
+  display: flex; flex-wrap: wrap; align-items: flex-start; gap: 8px; padding: 8px 10px;
 }
 .followup-card-row:focus-visible { outline: 2px solid var(--accent); outline-offset: -2px; border-radius: var(--radius-md); }
 .followup-reorder { display: flex; flex-direction: column; gap: 2px; flex: none; }
-.followup-body { flex: 1; min-width: 0; display: flex; flex-direction: column; gap: 3px; }
+/* The text keeps a readable width; on a phone the actions wrap onto their own line. */
+.followup-body { flex: 1 1 12rem; min-width: 0; display: flex; flex-direction: column; gap: 3px; }
 .followup-status { font-size: 11px; font-weight: 600; color: var(--muted); text-transform: uppercase; letter-spacing: 0.02em; }
 .followup-card.locked .followup-status { color: var(--accent); }
 .followup-text { font-size: 14px; color: var(--ink); white-space: pre-wrap; overflow-wrap: anywhere; }
 .followup-attachments { display: flex; flex-wrap: wrap; gap: 6px; margin-top: 2px; }
-.followup-card-actions { display: flex; align-items: center; gap: 6px; flex: none; flex-wrap: wrap; justify-content: flex-end; }
+.followup-card-actions { display: flex; align-items: center; gap: 6px; flex: none; flex-wrap: wrap; justify-content: flex-end; margin-left: auto; }
 .followup-edit { display: flex; flex-direction: column; gap: 8px; padding: 8px 10px; }
 .followup-edit-input { resize: vertical; min-height: 44px; }
 .followup-edit-actions { display: flex; justify-content: flex-end; gap: 8px; }
@@ -3095,6 +3096,15 @@ p.setup-note .btn.link { min-height: 44px; margin-block: calc((1lh - 44px) / 2);
 .app-row-meta { color: var(--muted); font-size: var(--text-xs); line-height: var(--lh-xs); }
 .app-row-action { flex: none; display: flex; align-items: center; gap: var(--space-1); }
 .app-message { margin-block: var(--space-2); }
+/* Suggested task (SuggestionCard.tsx): a task the agent proposed, one tap to
+   start in its own session. Shell from .card; layout only here. */
+.suggestion-card { max-inline-size: 440px; display: flex; flex-direction: column; gap: var(--space-1); }
+.suggestion-eyebrow { margin: 0; color: var(--muted); font-size: var(--text-xs); font-weight: var(--weight-semibold); }
+.suggestion-title { margin: 0; font-size: var(--text-base); font-weight: var(--weight-semibold); overflow-wrap: anywhere; }
+.suggestion-text { margin: 0; color: var(--muted); font-size: var(--text-sm); white-space: pre-wrap; overflow-wrap: anywhere; display: -webkit-box; -webkit-line-clamp: 4; -webkit-box-orient: vertical; overflow: hidden; }
+.suggestion-actions, .suggestion-all { display: flex; flex-wrap: wrap; gap: var(--space-2); margin-top: var(--space-2); }
+.suggestion-all { padding-top: var(--space-2); border-top: 1px solid var(--line); }
+.suggestion-status { margin: var(--space-2) 0 0; display: flex; align-items: center; gap: var(--space-2); color: var(--ok); font-size: var(--text-sm); font-weight: var(--weight-medium); }
 /* Review card (ReviewCard.tsx): the app at a moment worth judging. The
    screenshot is shown whole, phone-shaped, on a quiet stage; Before/Now is the
    canonical .segmented switch; one primary action. */

package/dist/config-cli.js

@@ -109,6 +109,7 @@ const ENV_FOR_KEY = {
     "defaults.approval": "BIVY_APPROVAL_MODE",
     "sessions.autoAttachToolImages": "BIVY_AUTO_ATTACH_TOOL_IMAGES",
     "sessions.appScreenshots": "BIVY_APP_SCREENSHOTS",
+    "sessions.previewBadge": "BIVY_PREVIEW_BADGE",
     "automation.checks": "BIVY_AUTOMATION_CHECKS",
     "automation.checkTimeoutMinutes": "BIVY_AUTOMATION_CHECK_TIMEOUT_MS",
 };
@@ -124,6 +125,7 @@ const BUILTIN_VALUES = {
     "sessions.resume": "auto",
     "sessions.autoAttachToolImages": false,
     "sessions.appScreenshots": false,
+    "sessions.previewBadge": true,
     "automation.checks": ["test", "lint", "typecheck"],
     "automation.checkTimeoutMinutes": 10,
 };

package/dist/node-config.js

@@ -74,7 +74,7 @@ export function validateNodeConfig(value) {
     const node = section(root, "node", ["workspace", "port", "maxConcurrentAutomations", "capabilities"], errors);
     const defaults = section(root, "defaults", ["agent", "model", "sandbox", "approval"], errors);
     const safety = section(root, "safety", ["maxSandbox", "approvalFloor"], errors);
-    const sessions = section(root, "sessions", ["sync", "worktreeSync", "standbyNodeId", "resume", "autoAttachToolImages", "appScreenshots", "forkWorkspaceMaxBytes", "wedgedTurnMinutes"], errors);
+    const sessions = section(root, "sessions", ["sync", "worktreeSync", "standbyNodeId", "resume", "autoAttachToolImages", "appScreenshots", "previewBadge", "forkWorkspaceMaxBytes", "wedgedTurnMinutes"], errors);
     const github = section(root, "github", ["issuePrompt"], errors);
     const automation = section(root, "automation", ["checks", "checkTimeoutMinutes"], errors);
     const agentsRaw = section(root, "agents", Object.keys(record(root.agents) ?? {}), errors);
@@ -134,6 +134,7 @@ export function validateNodeConfig(value) {
         errors.push("sessions.resume must be auto or manual");
     const autoAttachToolImages = optionalBoolean(sessions.autoAttachToolImages, "sessions.autoAttachToolImages", errors);
     const appScreenshots = optionalBoolean(sessions.appScreenshots, "sessions.appScreenshots", errors);
+    const previewBadge = optionalBoolean(sessions.previewBadge, "sessions.previewBadge", errors);
     const forkWorkspaceMaxBytes = optionalInteger(sessions.forkWorkspaceMaxBytes, "sessions.forkWorkspaceMaxBytes", errors, 1_048_576, 1_073_741_824);
     // Upper bound is the wall-clock turn cap (60 min): a wedged window at/above it
     // would never fire before the cap. 0 disables the band.
@@ -217,7 +218,7 @@ export function validateNodeConfig(value) {
         ...(Object.keys(node).length ? { node: { workspace, port, maxConcurrentAutomations, capabilities } } : {}),
         ...(Object.keys(defaults).length ? { defaults: { agent, model, sandbox, approval } } : {}),
         ...(Object.keys(safety).length ? { safety: { maxSandbox, approvalFloor } } : {}),
-        ...(Object.keys(sessions).length ? { sessions: { sync, worktreeSync, standbyNodeId, resume, autoAttachToolImages, appScreenshots, forkWorkspaceMaxBytes, wedgedTurnMinutes } } : {}),
+        ...(Object.keys(sessions).length ? { sessions: { sync, worktreeSync, standbyNodeId, resume, autoAttachToolImages, appScreenshots, previewBadge, forkWorkspaceMaxBytes, wedgedTurnMinutes } } : {}),
         ...(Object.keys(github).length ? { github: { issuePrompt } } : {}),
         ...(Object.keys(automation).length ? { automation: { checks, checkTimeoutMinutes } } : {}),
         ...(Object.keys(agents).length ? { agents } : {}),
@@ -274,6 +275,7 @@ export function configToLegacySettings(config) {
         ...(config.sessions?.resume ? { sessionResumeMode: config.sessions.resume } : {}),
         ...(config.sessions?.autoAttachToolImages !== undefined ? { autoAttachToolImages: config.sessions.autoAttachToolImages } : {}),
         ...(config.sessions?.appScreenshots !== undefined ? { appScreenshots: config.sessions.appScreenshots } : {}),
+        ...(config.sessions?.previewBadge !== undefined ? { previewBadge: config.sessions.previewBadge } : {}),
         ...(config.sessions?.forkWorkspaceMaxBytes !== undefined ? { forkWorkspaceMaxBytes: config.sessions.forkWorkspaceMaxBytes } : {}),
     };
 }
@@ -338,6 +340,7 @@ export function mergeLegacyIntoNodeConfig(cli, settings) {
             resume: settings.sessionResumeMode === "manual" ? "manual" : "auto",
             autoAttachToolImages: settings.autoAttachToolImages === true,
             appScreenshots: settings.appScreenshots === true,
+            previewBadge: settings.previewBadge !== false,
             forkWorkspaceMaxBytes: Number.isInteger(settings.forkWorkspaceMaxBytes) ? Number(settings.forkWorkspaceMaxBytes) : undefined,
         },
         github: { issuePrompt: typeof settings.githubIssuePrompt === "string" ? settings.githubIssuePrompt : undefined },
@@ -364,7 +367,7 @@ export function setConfigValue(config, dotted, value) {
         "node.workspace", "node.port", "node.maxConcurrentAutomations", "node.capabilities",
         "defaults.agent", "defaults.model", "defaults.sandbox", "defaults.approval",
         "safety.maxSandbox", "safety.approvalFloor",
-        "sessions.sync", "sessions.worktreeSync", "sessions.standbyNodeId", "sessions.resume", "sessions.autoAttachToolImages", "sessions.appScreenshots", "sessions.forkWorkspaceMaxBytes", "sessions.wedgedTurnMinutes",
+        "sessions.sync", "sessions.worktreeSync", "sessions.standbyNodeId", "sessions.resume", "sessions.autoAttachToolImages", "sessions.appScreenshots", "sessions.previewBadge", "sessions.forkWorkspaceMaxBytes", "sessions.wedgedTurnMinutes",
         "github.issuePrompt", "automation.checks", "automation.checkTimeoutMinutes",
     ]);
     if (!allowed.has(dotted) && !/^agents\.[a-z][a-z0-9-]{1,47}$/.test(dotted) && !/^environment\.[A-Z][A-Z0-9_]+$/.test(dotted))

package/dist/server.js

@@ -72,6 +72,8 @@ import { createSessionEngine } from "./session/engine.js";
 import { exportProviderAuth, exportAccountApiKeys, exportAccountOAuthCredentials, importAccountOAuthCredentials, exportSyncableProviderAuth, exportProviderAuthTombstones, importProviderAuth, removeProvider, setProviderApiKey, listCredentialRecords, setProviderApiKeyLabeled, setProviderReferenceLabeled, removeProviderCredential, setCredentialSync, setCredentialUnattended, exportUnattendedRecords, unattendedCredentialRevision, getCredentialPresets, setActiveCredentialPreset, setCredentialPresetMapping, exportSyncableRecords, exportRecordTombstones, importCredentialRecords, reconcileHostedCredentialRecords } from "./credentials/api.js";
 import { listProviders } from "./runtime/provider-catalog.js";
 import { exportLocalModels, importLocalModels } from "./runtime/local-model-store.js";
+import { sessionLikeFields } from "./session/start-like.js";
+import { MAX_SUGGESTION_TEXT, MAX_SUGGESTION_TITLE, isTaskSuggestion } from "./session/suggestions.js";
 import { BIVY_AGENT_NOTE, mergeSyncedAgentInstructions, readAgentInstructions, sessionInstructions, writeAgentInstructions, MAX_AGENT_INSTRUCTIONS_BYTES } from "./agent-instructions.js";
 import { execEphemeralRequest } from "./ephemeral-exec.js";
 import { ApprovalManager } from "./approval.js";
@@ -1918,8 +1920,32 @@ const captureReviewerNote = async (entry, mark) => {
     const ref = attachmentStore.put(Buffer.from(image.data, "base64"), { name: "Reviewer note (approximate).png", mimeType: "image/png", kind: "image" });
     return { hash: ref.hash, size: ref.size, width: image.width, height: image.height };
 };
-const appGateway = process.env.BIVY_APPS_ORIGIN ? new AppGateway(appRegistry, process.env.BIVY_APPS_ORIGIN, appReturnOrigins, appSignIn, captureReviewerNote) : undefined;
-const remotePreview = new RemotePreview(appRegistry, appReturnOrigins, appSignIn, captureReviewerNote);
+/** "Made with Bivy" under shared previews. Shown unless this machine turned it
+ *  off (sessions.previewBadge / BIVY_PREVIEW_BADGE) and — when it belongs to an
+ *  account — the control plane allows that account to hide it. Without a
+ *  control plane the machine's owner decides. Allowance cached for 10 minutes;
+ *  if it can't be checked, the badge shows. */
+let previewBadgeAllowance;
+async function previewBadgeShown() {
+    const env = process.env.BIVY_PREVIEW_BADGE;
+    const off = env === "0" || env === "false" || (env === undefined && readSettings().previewBadge === false);
+    if (!off)
+        return true;
+    if (!sessionAdvertiseTarget)
+        return false;
+    if (!previewBadgeAllowance || Date.now() - previewBadgeAllowance.at > 10 * 60_000) {
+        try {
+            const body = await delegatedRunRequest("/node/preview-badge");
+            previewBadgeAllowance = { at: Date.now(), hideAllowed: body.hideAllowed === true };
+        }
+        catch {
+            return true;
+        }
+    }
+    return !previewBadgeAllowance.hideAllowed;
+}
+const appGateway = process.env.BIVY_APPS_ORIGIN ? new AppGateway(appRegistry, process.env.BIVY_APPS_ORIGIN, appReturnOrigins, appSignIn, captureReviewerNote, previewBadgeShown) : undefined;
+const remotePreview = new RemotePreview(appRegistry, appReturnOrigins, appSignIn, captureReviewerNote, previewBadgeShown);
 // Desktop app views: one private display per view, started on first open.
 const appDisplays = createDisplayHost(appDir);
 /** Review cards: screenshots become encrypted attachments (fetched by hash
@@ -3021,12 +3047,25 @@ const RELAY_COMMANDS = {
             broadcast({ type: "session.error", sessionId: record.id, error: sessionAgentError(record, error) });
         });
     },
-    async "session.new"(msg) {
+    async "session.new"(msg, ctx) {
         // Start a fresh session. With `repo` ("owner/repo"), clone it and branch
         // off origin/main (or, with `branch`, the requested remote branch) into a
         // new git worktree named from `title` (the user's first message). With an
         // explicit `workspace` path, start in that folder. Otherwise use the
         // default Bivy workspace.
+        //
+        // `like: <sessionId>` starts another session like that one (same project,
+        // agent, model and safety; explicit fields still win), and `prompt` sends
+        // it a first message — so a client can start parallel work in the
+        // background without switching to it.
+        if (typeof msg.like === "string" && msg.like) {
+            const source = openSessions.get(msg.like);
+            if (!source) {
+                relay?.sendEvent({ type: "session.error", requestId: typeof msg.requestId === "string" ? msg.requestId : undefined, error: "Session not found" });
+                return;
+            }
+            msg = { ...sessionLikeFields(source), ...msg };
+        }
         const repoInput = typeof msg.repo === "string" ? msg.repo.trim() : "";
         const workspaceInput = typeof msg.workspace === "string" ? msg.workspace.trim() : "";
         const title = typeof msg.title === "string" ? msg.title : undefined;
@@ -3112,6 +3151,9 @@ const RELAY_COMMANDS = {
             }),
             requestId,
         });
+        if (typeof msg.prompt === "string" && msg.prompt.trim()) {
+            await clientCommands.dispatch("prompt", { kind: "prompt", sessionId: record.id, text: msg.prompt, ...(msg.attachments ? { attachments: msg.attachments } : {}) }, ctx);
+        }
     },
 };
 const clientCommands = new CommandRegistry(RELAY_COMMANDS, CLIENT_COMMAND_SCHEMAS);
@@ -10404,6 +10446,13 @@ app.get("/api/session/history", async (req, res) => {
 });
 app.post("/api/session", async (req, res, next) => {
     try {
+        // `like` / `prompt`: see the relay `session.new` handler.
+        if (typeof req.body?.like === "string" && req.body.like) {
+            const source = openSessions.get(req.body.like);
+            if (!source)
+                return res.status(404).json({ error: "Session not found" });
+            req.body = { ...sessionLikeFields(source), ...req.body };
+        }
         // A git-workspace session: clone "owner/repo" and branch off origin/main into
         // a new worktree named from `title` (the user's first message), mirroring the
         // relay `session.new` repo path. Takes precedence over a manual workspace path.
@@ -10466,6 +10515,12 @@ app.post("/api/session", async (req, res, next) => {
         session.contract = computeSessionContract({ runtime: getRuntime(session.runtimeId), preview: false, sandbox: session.sandbox, approvalMode: session.approvalMode, acknowledgedAt: acknowledgeReducedProtections ? gateNow : undefined }, gateNow);
         persistSessionMetadata(session);
         res.json({ id: session.id, workspace: session.workspace, source: session.source, branch: session.worktree?.branch, prUrl: session.prUrl, sessionFile: session.sessionFile, name: session.session.getName(), runtimeId: session.runtimeId, agentName: getRuntime(session.runtimeId).displayName, model: publicModel(session.session.getCurrentModel(), session.session.getCurrentModel()), sessionState: sessionState(session) });
+        if (typeof req.body?.prompt === "string" && req.body.prompt.trim()) {
+            const { prompt, attachments } = req.body;
+            // The response is already sent; a failed turn reaches clients as session.error.
+            void clientCommands.dispatch("prompt", { kind: "prompt", sessionId: session.id, text: prompt, ...(attachments ? { attachments } : {}) }, { reply: broadcast, broadcast })
+                .catch((error) => console.warn("[session] first prompt failed:", error instanceof Error ? error.message : error));
+        }
     }
     catch (error) {
         // Creating an empty session does not contact the model provider. Failures
@@ -11174,6 +11229,21 @@ app.post("/api/session/:id/attach", (req, res) => {
     const { hash, name, mimeType, size, kind } = result.ref;
     res.json({ ok: true, hash, name, mimeType, size, kind });
 });
+// `bivy suggest "<task>"`: the agent proposes a task the user can start in one
+// tap, here or in a parallel session (see packages/web SuggestionCard).
+app.post("/api/session/:id/suggest", (req, res) => {
+    const record = openSessions.get(String(req.params.id));
+    if (!record)
+        return res.status(404).json({ error: "Session not found" });
+    const text = typeof req.body?.text === "string" ? req.body.text.trim() : "";
+    const title = typeof req.body?.title === "string" && req.body.title.trim() ? req.body.title.trim() : undefined;
+    const suggestion = { id: `suggestion-${randomBytes(8).toString("hex")}`, text, ...(title ? { title } : {}) };
+    if (!isTaskSuggestion(suggestion))
+        return res.status(400).json({ error: `A suggestion needs text (up to ${MAX_SUGGESTION_TEXT} characters) and an optional title (up to ${MAX_SUGGESTION_TITLE}).` });
+    eventLog.appendSuggestion(record.id, { afterMessageCount: record.session.getMessages().length, suggestion });
+    broadcast(stampSessionEvent({ type: "session.event", sessionId: record.id, event: { type: "suggestion", id: suggestion.id, suggestion } }));
+    res.json({ ok: true, id: suggestion.id });
+});
 // Explicit child Run API for first-party/user-directed workflows. These routes
 // are intentionally not advertised to agents as tools; the service still
 // authorizes every status lookup against this parent Session's provenance.

package/dist/session/event-log.js

@@ -30,6 +30,7 @@ import fs from "node:fs";
 import path from "node:path";
 import { normalizedIntermediateText, thinkingTextFromContent, mergeTranscript } from "./transcript-merge.js";
 import { APP_PUBLICATION_BLOCK, APP_REVIEW_BLOCK, isAppReference, isAppReview } from "../apps/types.js";
+import { SUGGESTION_BLOCK, isTaskSuggestion } from "./suggestions.js";
 /**
  * Decompose a transcript message into serialization-independent "atoms": the
  * agent's own tool ids (unique + identical across serializations) and its text
@@ -241,6 +242,12 @@ function isAppPublication(value) {
     const entry = value;
     return entry.bivyKind === "app-publication" && typeof entry.id === "string" && typeof entry.createdAt === "number" && typeof entry.afterMessageCount === "number" && isAppReference(entry.app);
 }
+function isSuggestionEntry(value) {
+    if (!value || typeof value !== "object")
+        return false;
+    const entry = value;
+    return entry.bivyKind === "suggestion" && typeof entry.id === "string" && typeof entry.createdAt === "number" && typeof entry.afterMessageCount === "number" && isTaskSuggestion(entry.suggestion);
+}
 function isAppReviewEntry(value) {
     if (!value || typeof value !== "object")
         return false;
@@ -248,7 +255,7 @@ function isAppReviewEntry(value) {
     return entry.bivyKind === "app-review" && typeof entry.id === "string" && typeof entry.createdAt === "number" && typeof entry.afterMessageCount === "number" && isAppReview(entry.review);
 }
 function isRecord(value) {
-    return isOverlay(value) || isBase(value) || isAttachment(value) || isOutboundAttachment(value) || isInlineImage(value) || isAppPublication(value) || isAppReviewEntry(value);
+    return isOverlay(value) || isBase(value) || isAttachment(value) || isOutboundAttachment(value) || isInlineImage(value) || isAppPublication(value) || isAppReviewEntry(value) || isSuggestionEntry(value);
 }
 /**
  * Fold attachment records into a text→refs list: last write wins per text (a
@@ -370,7 +377,11 @@ export function replayExtras(entries) {
         role: "assistant", content: [{ type: APP_REVIEW_BLOCK, review: entry.review }],
         id: entry.id, afterMessageCount: entry.afterMessageCount, createdAt: entry.createdAt,
     }));
-    return [...foldIntermediate(intermediate), ...foldTool(tool), ...replayOutboundAttachments(entries), ...publications, ...cards];
+    const suggestions = entries.filter((entry) => entry.bivyKind === "suggestion").map((entry) => ({
+        role: "assistant", content: [{ type: SUGGESTION_BLOCK, suggestion: entry.suggestion }],
+        id: entry.id, afterMessageCount: entry.afterMessageCount, createdAt: entry.createdAt,
+    }));
+    return [...foldIntermediate(intermediate), ...foldTool(tool), ...replayOutboundAttachments(entries), ...publications, ...cards, ...suggestions];
 }
 /**
  * Fold the outbound (agent-sent) attachment records into time-anchored synthetic
@@ -670,6 +681,10 @@ export class EventLog {
         this.load(id);
         this.enqueue(id, `review:${entry.review.id}`, { bivyKind: "app-review", createdAt: entry.createdAt ?? Date.now(), afterMessageCount: entry.afterMessageCount, id: entry.review.id, review: structuredClone(entry.review) });
     }
+    appendSuggestion(id, entry) {
+        this.load(id);
+        this.enqueue(id, `suggestion:${entry.suggestion.id}`, { bivyKind: "suggestion", createdAt: Date.now(), afterMessageCount: entry.afterMessageCount, id: entry.suggestion.id, suggestion: { ...entry.suggestion } });
+    }
     appendOutboundAttachment(id, entry) {
         this.load(id);
         const record = {

package/dist/session/start-like.js

@@ -0,0 +1,16 @@
+/**
+ * The creation fields of an existing session, for "start another like it"
+ * (`session.new` with `like`): same project, agent, model and safety. A git
+ * worktree session points back at its checkout, so the new session gets its own
+ * worktree off the default branch instead of sharing this one's; a plain folder
+ * is shared, as any new session in it would be.
+ */
+export function sessionLikeFields(source) {
+    const model = source.session.getCurrentModel();
+    return {
+        workspace: source.worktree?.repoRoot ?? source.workspace,
+        agent: source.runtimeId,
+        ...(source.sandbox ? { sandbox: source.sandbox } : {}),
+        ...(model?.id ? { model: { provider: String(model.provider ?? ""), id: String(model.id) } } : {}),
+    };
+}

package/dist/session/suggestions.js

@@ -0,0 +1,13 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// Copyright (c) 2026 Petter André Sjulstad
+export const SUGGESTION_BLOCK = "bivy_suggestion";
+export const MAX_SUGGESTION_TEXT = 4000;
+export const MAX_SUGGESTION_TITLE = 120;
+export function isTaskSuggestion(value) {
+    if (!value || typeof value !== "object")
+        return false;
+    const s = value;
+    return typeof s.id === "string" && s.id.length > 0
+        && typeof s.text === "string" && s.text.length > 0 && s.text.length <= MAX_SUGGESTION_TEXT
+        && (s.title === undefined || (typeof s.title === "string" && s.title.length <= MAX_SUGGESTION_TITLE));
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bivy/bivy",
-  "version": "0.18.10-staging.3",
+  "version": "0.18.10",
   "type": "module",
   "license": "AGPL-3.0-only",
   "description": "Run coding agents on machines you own. Open-source, self-hostable agent workspace.",