@bivy/bivy 0.18.6 → 0.18.7-staging.2

package/dist/apps/registry.js

@@ -208,8 +208,10 @@ export class AppRegistry extends EventEmitter {
             this.views.set(entry.view.id, entry);
         this.persisted.set(app.id, { sessionId, workspace, manifest: structuredClone(input), id: app.id, viewIds: app.views.map((v) => v.id), createdAt: app.createdAt, ...(app.reviewMode ? { reviewMode: app.reviewMode } : {}), ...(app.agentNotes ? { agentNotes: true } : {}) });
         this.persistNotes(app.id);
-        if (!restore)
+        if (!restore) {
             this.save();
+            this.emit("published", app.id);
+        }
         return structuredClone(app);
     }
     list(sessionId) {

package/dist/credentials/resolver.js

@@ -78,14 +78,29 @@ export class NodeCredentialResolver {
         // under the store lock).
         let token = typeof cred.access === "string" ? cred.access : "";
         const expires = Number(cred.expires) || 0;
-        if (!token || expires <= Date.now() + OAUTH_REFRESH_SKEW_MS || context?.rejectedToken === token) {
+        // Spent: the provider already refused this exact token, or its lifetime is
+        // over. A token merely inside the refresh skew is still live — that case
+        // refreshes early but may keep the current token if the refresh fails.
+        // An unknown expiry (0) is never assumed spent.
+        const spent = !token || context?.rejectedToken === token || (expires > 0 && expires <= Date.now());
+        if (spent || expires <= Date.now() + OAUTH_REFRESH_SKEW_MS) {
             // Refresh the SELECTED record (its label), not just the provider default —
             // so a second account on the same provider is left untouched. A provider
             // 401 forces refresh even before expiry; the rejected-token guard is
             // re-checked under the OAuth store lock to avoid duplicate rotations.
             const refreshed = await this.oauth.refresh(id, selection.record.label, context?.rejectedToken).catch(() => undefined);
-            if (refreshed)
+            if (refreshed && refreshed !== token)
                 token = refreshed;
+            // The refresh failed (commonly: the provider's own CLI rotated the refresh
+            // token out from under this copy) and what we hold is spent. Report NO
+            // credential rather than handing the agent a token that cannot work:
+            // Bivy's env var outranks the agent's own login, so returning it shadows a
+            // perfectly good `claude`/`codex` CLI session on this machine with a dead
+            // one — the "it ignored my local credentials" failure. With none, the
+            // agent falls back to that login, and an agent with no login of its own
+            // gets the vault's actionable "no credential" message instead of a 401.
+            else if (spent)
+                return undefined;
         }
         if (!token)
             return undefined;

package/dist/server.js

@@ -1938,6 +1938,8 @@ const appService = new AppService(appRegistry, appGateway ?? remotePreview, {
 // the owner gets one push per burst of notes on a view ("2 notes on
 // Storefront"), which opens the Apps sheet at that app. Counts, names and IDs
 // only: the note text never goes through push.
+// The session advert carries published app IDs (operator reporting only).
+appRegistry.on("published", () => scheduleAdvertise());
 const NOTES_NOTIFY_MS = 20_000;
 const noteBursts = new Map();
 appRegistry.on("notes", (viewId) => {
@@ -4169,7 +4171,7 @@ async function advertiseSessions() {
         await fetch(`${sessionAdvertiseTarget.controlPlaneUrl.replace(/\/$/, "")}/node/sessions`, {
             method: "POST",
             headers: { "content-type": "application/json", authorization: `Bearer ${sessionAdvertiseTarget.enrollmentToken}` },
-            body: JSON.stringify({ sessions }),
+            body: JSON.stringify({ sessions, apps: appRegistry.list().map((app) => app.id) }),
         });
     }
     catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bivy/bivy",
-  "version": "0.18.6",
+  "version": "0.18.7-staging.2",
   "type": "module",
   "license": "AGPL-3.0-only",
   "description": "Run coding agents on machines you own. Open-source, self-hostable agent workspace.",