@bivy/bivy 0.18.4-staging.4 → 0.18.4-staging.6

package/dist/apps/styles.css

@@ -1171,8 +1171,7 @@ button.sheet-action:last-child { border-bottom: 0; }
 /* Agent/model catalogs should not collapse into a tiny strip when the composer
    grows. Keep their normal composer clearance, but cap that reservation and
    give the scrollable catalog a stable, roomy height. */
-.sheet[data-size="large"] .sheet-body,
-.sheet[data-size="mobile-full"] .sheet-body {
+.sheet[data-size="large"] .sheet-body {
   --sheet-clear: max(
     calc(env(safe-area-inset-bottom, 0px) + var(--space-2)),
     min(calc(var(--composer-h, 108px) + var(--space-2) - var(--keyboard-h, 0px)), calc(var(--app-h, 100dvh) * 0.24))
@@ -1200,20 +1199,19 @@ button.sheet-action:last-child { border-bottom: 0; }
    page) handles a long tool list; touch scrolling + overscroll containment keep
    the fling smooth on iOS and stop it chaining to the chat underneath. */
 .sheet-content { flex: 1; overflow-y: auto; overflow-x: hidden; padding: 8px; min-height: 0; -webkit-overflow-scrolling: touch; overscroll-behavior: contain; }
-/* Embedded apps use the whole mobile viewport, including the space normally
-   reserved for the chat composer. Keep controls clear of device safe areas. */
-@media (max-width: 900px) {
-  .sheet[data-size="mobile-full"] .sheet-body {
-    height: 100%; max-height: 100%; max-width: none; margin: 0;
-    border: 0; border-radius: 0;
-    padding: env(safe-area-inset-top) env(safe-area-inset-right) env(safe-area-inset-bottom) env(safe-area-inset-left);
-  }
-  .sheet[data-size="mobile-full"] .sheet-grabber { display: none; }
-  .sheet[data-size="mobile-full"] .sheet-title { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
-  .sheet[data-size="mobile-full"] .sheet-head > button { flex-shrink: 0; min-height: var(--space-7); }
-  .sheet[data-size="mobile-full"] .sheet-content { padding: 0; }
-  .sheet[data-size="mobile-full"] .preview-peek { border-radius: 0; }
-}
+/* Embedded apps use the whole viewport on every screen size, including the
+   space normally reserved for the chat composer. Keep controls clear of
+   device safe areas. */
+.sheet[data-size="full"] .sheet-body {
+  height: 100%; max-height: 100%; max-width: none; margin: 0;
+  border: 0; border-radius: 0;
+  padding: env(safe-area-inset-top) env(safe-area-inset-right) env(safe-area-inset-bottom) env(safe-area-inset-left);
+}
+.sheet[data-size="full"] .sheet-grabber { display: none; }
+.sheet[data-size="full"] .sheet-title { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.sheet[data-size="full"] .sheet-head > button { flex-shrink: 0; min-height: var(--space-7); }
+.sheet[data-size="full"] .sheet-content { padding: 0; }
+.sheet[data-size="full"] .preview-peek { border-radius: 0; }
 .picker-search { margin-bottom: 6px; }
 /* In a picker sheet the search is a direct child of the scroll container, so pin
    it to the top: the list scrolls beneath it and every option stays reachable
@@ -2139,20 +2137,6 @@ a.queue-item:hover { border-color: var(--line-strong); background: var(--surface
 .run-sheet-recovery { display: flex; gap: 8px; margin-top: 10px; flex-wrap: wrap; }
 .run-sheet-recovery .btn.sm { padding: var(--space-1) var(--space-3); }
 
-.composer-starter {
-  display: flex; align-items: center; justify-content: space-between; gap: var(--space-3);
-  margin: 0 var(--space-3) var(--space-2); padding: var(--space-3); border: 1px solid var(--line);
-  border-radius: var(--radius-md); background: var(--surface);
-}
-.composer-starter > div { display: flex; flex-direction: column; gap: var(--space-1); min-width: 0; }
-.composer-starter strong { font-size: var(--text-sm); color: var(--ink); }
-.composer-starter span { font-size: var(--text-xs); line-height: var(--lh-sm); color: var(--muted); }
-.composer-starter .btn { flex: none; max-width: 100%; white-space: normal; overflow-wrap: anywhere; }
-@media (max-width: 520px) {
-  .composer-starter { align-items: stretch; flex-direction: column; }
-  .composer-starter .btn { min-height: var(--space-7); }
-}
-
 /* Review surface (C3): state badges, checks strip, view-mode toggle, file tree,
    per-file actions, and the split (side-by-side) diff layout. */
 .changes-meta { display: flex; flex-wrap: wrap; gap: 10px; align-items: center; padding: 6px 10px; border-bottom: 1px solid var(--line); }
@@ -3169,9 +3153,8 @@ p.setup-note .btn.link { min-height: 44px; margin-block: calc((1lh - 44px) / 2);
   letter-spacing: -0.01em;
 }
 
-/* Activation readiness strip (src/components/ReadinessChecklist.tsx) — the honest
-   "get to your first agent response" checklist shown until the agent answers. */
-.readiness { margin: 10px 12px 0; }
+/* Setup checks and the ready-to-message confirmation. */
+.readiness { margin: var(--space-3) var(--space-3) 0; }
 .readiness-head { display: flex; align-items: center; justify-content: space-between; margin-bottom: 8px; }
 .readiness-title { font-weight: 600; font-size: var(--text-base); letter-spacing: -0.01em; }
 .readiness-dismiss {
@@ -3181,8 +3164,7 @@ p.setup-note .btn.link { min-height: 44px; margin-block: calc((1lh - 44px) / 2);
 .readiness-dismiss:hover { background: var(--surface-2); color: var(--ink); }
 .readiness-passed { margin: 0 0 var(--space-2); color: var(--ok); font-size: var(--text-sm); font-weight: var(--weight-medium); }
 .readiness-checks { list-style: none; margin: 0; padding: 0; display: flex; flex-direction: column; gap: 4px; }
-/* Completed setup is summarized above. Keeping six verbose rows after five are
-   already done buried the only useful state (waiting for the first answer). */
+/* Summarize completed checks so the next setup action stays visible. */
 .readiness-check.state-passed { display: none; }
 .readiness-check { display: flex; align-items: baseline; gap: 8px; font-size: var(--text-sm); }
 .readiness-mark {

package/dist/git-auth.js

@@ -148,14 +148,22 @@ export function gitNonInteractiveEnv() {
  */
 export async function configureRepoCredentialHelper(git, dest) {
     const helper = ensureCredentialHelper();
-    await git(["-C", dest, "config", "--local", "credential.https://github.com.useHttpPath", "true"]);
     // Reset the helper chain for this repo, then set ONLY bivy's helper, so AGENT-run
     // git never falls back to an inherited host helper holding the human's personal
-    // token (see credConfigArgs for the full rationale). Clear any prior values first
-    // so re-running stays idempotent (--unset-all returns 5 when the key is absent).
-    await git(["-C", dest, "config", "--local", "--unset-all", "credential.helper"]).catch(() => { });
-    await git(["-C", dest, "config", "--local", "--unset-all", "credential.https://github.com.helper"]).catch(() => { });
+    // token (see credConfigArgs for the full rationale).
+    //
+    // Git reads `credential.helper` and `credential.<url>.helper` into ONE list in
+    // FILE order, and an empty value clears everything before it. So every reset must
+    // sit above bivy's helper in .git/config — an empty `[credential] helper` written
+    // after the `[credential "https://github.com"]` section wipes bivy's helper and
+    // leaves git with none (the lazy blob fetch in `git worktree add` then dies with
+    // "could not read Username"). `--add` appends to an existing section, so drop both
+    // sections first and write them back in order; this also repairs clones written in
+    // the old order (remove-section fails harmlessly when a section is absent).
+    await git(["-C", dest, "config", "--local", "--remove-section", "credential"]).catch(() => { });
+    await git(["-C", dest, "config", "--local", "--remove-section", "credential.https://github.com"]).catch(() => { });
     await git(["-C", dest, "config", "--local", "--add", "credential.helper", ""]);
+    await git(["-C", dest, "config", "--local", "credential.https://github.com.useHttpPath", "true"]);
     await git(["-C", dest, "config", "--local", "--add", "credential.https://github.com.helper", ""]);
     await git(["-C", dest, "config", "--local", "--add", "credential.https://github.com.helper", helper]);
 }

package/dist/runtime/activation-readiness.js

@@ -0,0 +1,15 @@
+/** Use the same configured providers as the model picker, including environment
+ * credentials. An unrelated rejected key must not hide a usable provider. */
+export async function credentialReadiness(providers, probe) {
+    const configured = providers.filter((provider) => provider.configured);
+    const results = await Promise.all(configured.map((provider) => probe(provider.id)));
+    const usable = results.find((result) => result.ok);
+    const result = usable ?? results[0];
+    return {
+        configured: configured.length > 0,
+        providers: configured.map((provider) => provider.id),
+        probed: result?.probed ?? false,
+        ok: Boolean(usable),
+        ...(result?.reason ? { reason: result.reason } : {}),
+    };
+}

package/dist/runtime/anthropic-preflight.js

@@ -85,7 +85,7 @@ export function isAnthropicAuthError(raw) {
 export async function probeAnthropicAccess(apiKey, deps = {}) {
     const key = apiKey?.trim();
     // Subscription/OAuth tokens are not API keys; there is no safe read probe.
-    if (!key || !key.startsWith("sk-"))
+    if (!key || !key.startsWith("sk-") || key.startsWith("sk-ant-oat"))
         return { probed: false, ok: true, reason: "no API key to probe" };
     const doFetch = deps.fetch ?? fetch;
     const base = (deps.baseUrl ?? "https://api.anthropic.com").replace(/\/+$/, "");

package/dist/server.js

@@ -50,6 +50,7 @@ import { passWebhookFilter } from "./automation-filter-gate.js";
 import { isModelAuthError, authProviderForSession, classifyModelAuthError } from "./runtime/auth-errors.js";
 import { createCredentialVault, migrateVaultDir } from "./runtime/credential-store.js";
 import { probeAnthropicAccess } from "./runtime/anthropic-preflight.js";
+import { credentialReadiness } from "./runtime/activation-readiness.js";
 import { createSessionNamer, fallbackSessionName } from "./session/session-namer.js";
 import { createBranchPublish } from "./session/branch-publish.js";
 import { createForkStandUp } from "./session/fork-standup.js";
@@ -10997,32 +10998,28 @@ app.get("/api/repos", async (_req, res) => {
 // live. Inconclusive provider/network failures remain "unknown" instead of
 // falsely blocking activation.
 async function activationReadinessSnapshot() {
-    const vault = createCredentialVault(credsDir, piDir);
-    const configured = await vault.list();
-    const anthropic = configured.some((entry) => entry.providerId === "anthropic")
-        ? await vault.read("anthropic")
-        : undefined;
-    const anthropicProbe = anthropic?.type === "api_key"
-        ? await probeAnthropicAccess(typeof anthropic.key === "string" ? anthropic.key : undefined)
-        : undefined;
-    const repos = await listAccessibleRepos();
-    const repositoryChosen = Boolean(await gitRepoRoot(defaultWorkspace));
+    const [credential, repositoryChosen, workspaceReady] = await Promise.all([
+        listProviders(credsDir, piDir).then((providers) => credentialReadiness(providers, async (provider) => {
+            if (provider !== "anthropic")
+                return { probed: false, ok: true };
+            const credential = await createCredentialVault(credsDir, piDir).read(provider);
+            if (credential?.type === "oauth")
+                return { probed: false, ok: true };
+            return probeAnthropicAccess(credential?.type === "api_key" && typeof credential.key === "string"
+                ? credential.key : process.env.ANTHROPIC_API_KEY);
+        })),
+        gitRepoRoot(defaultWorkspace).then(Boolean),
+        fs.promises.access(defaultWorkspace, fs.constants.R_OK | fs.constants.W_OK).then(() => true, () => false),
+    ]);
     return {
-        credential: {
-            configured: configured.length > 0,
-            providers: configured.map((entry) => entry.providerId),
-            probed: Boolean(anthropicProbe?.probed),
-            ok: configured.length > 0 && anthropicProbe?.ok !== false,
-            ...(anthropicProbe?.reason ? { reason: anthropicProbe.reason } : {}),
-        },
+        credential,
         repository: {
             chosen: repositoryChosen,
             probed: true,
-            // GitHub login proves that repositories can be listed, not that a target
-            // repository has been selected or cloned for the first task.
-            ok: repositoryChosen,
-            authed: repos.authed,
-            ...(repos.error ? { reason: repos.error } : {}),
+            // A first message can run in the default workspace without a Git repo.
+            // Listing remote repositories is unrelated and can take tens of seconds.
+            ok: workspaceReady,
+            authed: false,
         },
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bivy/bivy",
-  "version": "0.18.4-staging.4",
+  "version": "0.18.4-staging.6",
   "type": "module",
   "license": "AGPL-3.0-only",
   "description": "Run coding agents on machines you own. Open-source, self-hostable agent workspace.",