@bivy/bivy 0.18.11-staging.15 → 0.18.11-staging.16

package/bin/bivy.mjs

@@ -2466,7 +2466,7 @@ async function cmdSuggest(args = []) {
 // self-contained task from this session to another agent, optionally on another
 // account machine, and get its answer back. Agent-agnostic — any agent with a
 // shell can call it — and meant for when the user asks for another agent/machine.
-const DELEGATE_USAGE = `Usage: bivy delegate "<task>" [--agent <id>] [--machine <name>] [--model <model>] [--repo owner/repo] [--wait [seconds]] [--json]
+const DELEGATE_USAGE = `Usage: bivy delegate "<task>" [--agent <id>] [--machine <name>] [--model <model>] [--repo owner/repo] [--approval never|risky|always|autonomous] [--sandbox <tier>] [--wait [seconds]] [--json]
        bivy delegate "<task>" --to <agent>[@<machine>],<agent>[@<machine>],… [--wait [seconds]]
        bivy delegate machines [--json]
        bivy delegate status <run-id> [--json]
@@ -2480,7 +2480,12 @@ to several agents/machines at once (up to 3) so the results can be compared.
 
 async function cmdDelegate(args = []) {
   if (!args.length || args.some((a) => a === "-h" || a === "--help")) { console.log(DELEGATE_USAGE); return; }
-  const flagsWithValue = new Set(["--session", "--agent", "--machine", "--model", "--repo", "--timeout", "--to"]);
+  const flagsWithValue = new Set(["--session", "--agent", "--machine", "--model", "--repo", "--timeout", "--to", "--approval", "--sandbox"]);
+  // Children inherit this session's approval/sandbox unless set here.
+  const safetyFlags = () => {
+    const safety = { approval: flag("--approval"), sandbox: flag("--sandbox") };
+    return safety.approval || safety.sandbox ? { safety } : {};
+  };
   const flag = (name) => {
     const i = args.indexOf(name);
     return i >= 0 && i + 1 < args.length ? args[i + 1] : undefined;
@@ -2556,7 +2561,7 @@ async function cmdDelegate(args = []) {
       const group = `fanout-${Date.now().toString(36)}`;
       const runs = [];
       for (const target of targets) {
-        runs.push({ target, run: await call("", { instructions, agent: target.agent, machine: target.machine, model: flag("--model"), repo: flag("--repo"), group }) });
+        runs.push({ target, run: await call("", { instructions, agent: target.agent, machine: target.machine, model: flag("--model"), repo: flag("--repo"), ...safetyFlags(), group }) });
       }
       if (waitIndex < 0) {
         if (json) console.log(JSON.stringify(runs.map((r) => r.run), null, 2));
@@ -2569,7 +2574,7 @@ async function cmdDelegate(args = []) {
       return;
     }
     const agent = flag("--agent");
-    const started = await call("", { instructions, agent: agent ? governedChatAgentId(agent) : undefined, machine: flag("--machine"), model: flag("--model"), repo: flag("--repo") });
+    const started = await call("", { instructions, agent: agent ? governedChatAgentId(agent) : undefined, machine: flag("--machine"), model: flag("--model"), repo: flag("--repo"), ...safetyFlags() });
     if (waitIndex < 0) {
       if (!json) console.log(`Delegated as run ${started.runId} (${started.status}). Follow it with 'bivy delegate wait ${started.runId}'.`);
       else print(started);

package/dist/run-tools.js

@@ -135,7 +135,9 @@ export class RunDelegationService {
             const existing = expectedSource ? recent.find((r) => r.source === expectedSource) : undefined;
             if (existing)
                 return safeRun(existing, provenance);
-            const active = recent.filter((r) => parseDelegationSource(r.source)?.parentSessionId === sessionId && !TERMINAL.has(r.status)).length;
+            // A parked child (needs_attention) runs nothing until a person acts, so it
+            // doesn't hold one of the parent's concurrent slots.
+            const active = recent.filter((r) => parseDelegationSource(r.source)?.parentSessionId === sessionId && !SETTLED.has(r.status)).length;
             if (active >= RUN_TOOL_LIMITS.maxConcurrentChildren)
                 throw new Error(`concurrent child Run limit (${RUN_TOOL_LIMITS.maxConcurrentChildren}) reached`);
             const raw = await this.backend.start(sessionId, input, provenance);

package/dist/server.js

@@ -527,7 +527,7 @@ const runDelegation = new RunDelegationService({
             throw error;
         }
     },
-    start: async (_sessionId, input, provenance) => {
+    start: async (sessionId, input, provenance) => {
         const machine = input.machine?.trim() || identity.name;
         const nodes = await delegatedRunRequest("/nodes");
         const target = Array.isArray(nodes) ? nodes.find((node) => node && typeof node === "object" && node.name === machine) : undefined;
@@ -553,8 +553,12 @@ const runDelegation = new RunDelegationService({
                 node: machine,
                 runtimeId: input.agent,
                 model: input.model,
-                approvalMode: input.safety?.approval,
-                sandbox: input.safety?.sandbox,
+                // A child acts for the same user in the same context as its parent, so
+                // it inherits the parent session's safety unless the caller set one. The
+                // queue's own default ("risky" with nobody to approve) denied ordinary
+                // commands, leaving children that could only describe what they'd do.
+                approvalMode: input.safety?.approval ?? openSessions.get(sessionId)?.approvalMode,
+                sandbox: input.safety?.sandbox ?? openSessions.get(sessionId)?.sandbox,
                 maxAttempts: input.safety?.maxAttempts ?? 2,
                 idempotencyKey: input.idempotencyKey,
                 parentSessionId: provenance.parentSessionId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bivy/bivy",
-  "version": "0.18.11-staging.15",
+  "version": "0.18.11-staging.16",
   "type": "module",
   "license": "AGPL-3.0-only",
   "description": "Run coding agents on machines you own. Open-source, self-hostable agent workspace.",