@bivy/bivy 0.20.9-staging.8 → 0.21.0-staging.1

package/README.md

@@ -228,8 +228,7 @@ bivy secrets ref github.repo-token op://Bivy/GitHub/repo-token
 
 **Not every CLI login syncs.** Native agent logins may still be per-machine;
 GitHub App private-key sync is separately opt-in. If you lose every node and
-device able to unwrap a vault, you must sign in to providers again. Explicit
-hosted-provisioning custody grants are separate from ordinary encrypted sync.
+device able to unwrap a vault, you must sign in to providers again.
 
 [Credential sync and runtime coverage →](docs/credential-sync.md) ·
 [Credentials guide →](docs/credentials-guide.md) ·

package/dist/agent-instructions.js

@@ -30,10 +30,20 @@ export const MAX_AGENT_INSTRUCTIONS_BYTES = 16 * 1024;
 export const BIVY_AGENT_NOTE = [
     "You are running inside Bivy. The user follows this session in a chat app (web or phone): they cannot see your " +
         "terminal or files you only write to disk. $BIVY_SESSION_ID identifies this session; the `bivy` commands below use it.",
-    "- Show a LOCAL file or image (report, screenshot, chart, a file they asked for): run " +
-        '`bivy attach <path> [--caption "short note"]`, or call the `attach_to_chat` tool if you have it. Images render ' +
-        "inline, other files as downloads; the path must be inside the session workspace. Markdown image syntax like " +
-        "![](path) does not render a local path. A REMOTE `https://` image in markdown does render.",
+    "- Show an IMAGE (a screenshot, or a picture you rendered to a file) inside your reply: write it as markdown, " +
+        "`![short caption](relative/path.png)`, where you want it to appear. The path must be inside the session " +
+        "workspace; a remote `https://` image works too. No tool call needed.",
+    "- Show a FILE (a report, a log, data they asked for) inside your reply: put " +
+        '`::view{src=relative/path.pdf caption="what it is"}` on its own line, where you want it. Same workspace-only ' +
+        "rule. A `.csv`/`.tsv` renders as a table; anything else arrives as a download.",
+    "- Show a NUMBER or a CHART inside your reply: fence a spec as ```bivy. A number is " +
+        '`{"type":"metric","value":"4 650 kWh","label":"per year"}`; a chart is a plain Vega-Lite spec with its data ' +
+        "inline, or pointing at a workspace data file with `\"data\":{\"url\":\"data/use.csv\"}` (.csv/.tsv/.json). " +
+        "A chart cannot fetch a remote URL.",
+    "- Send a file WITHOUT writing a reply (or from a script): run " +
+        '`bivy attach <path> [--caption "short note"]`, or call the `attach_to_chat` tool if you have it.',
+    "- Put a published app's preview INSIDE your reply: `::view{app=<app id>}` on its own line. It frames the app " +
+        "where you wrote it, and still opens full screen on demand.",
     "- Something with a UI: `bivy app publish <manifest.json>` (a web server's port, a static build, a terminal) or " +
         "`bivy app run -- <command>` (a desktop app) gives the user a live preview; `bivy app shot` screenshots it so you " +
         "can check your work; `bivy app present` tells the user a visible change is ready to look at, and " +

package/dist/apps/remote-preview.js

@@ -3,6 +3,7 @@
 import { WebSocket } from "ws";
 import { AppGateway, previewOriginTemplate } from "./gateway.js";
 import { PreviewStream } from "./preview-stream.js";
+const RECENT_USE_MS = 2 * 60_000;
 /** Automatically discovered preview delivery. The app gateway receives ONLY
  * HTTP streams on a private in-process socket, never a publicly bound port. */
 export class RemotePreview {
@@ -16,6 +17,7 @@ export class RemotePreview {
     relayUrl;
     online = false;
     sockets = new Set();
+    lastConnectAt = -Infinity;
     constructor(registry, returnOrigins, signIn, captureNote, badge) {
         this.registry = registry;
         this.returnOrigins = returnOrigins;
@@ -24,6 +26,10 @@ export class RemotePreview {
         this.badge = badge;
     }
     get available() { return this.online && Boolean(this.gateway); }
+    /** Someone loaded part of a preview recently. Each request burst opens a
+     * stream; an open but silent live-reload socket from a forgotten tab doesn't
+     * count, so it can't keep a sleeping machine awake. */
+    inUse(now = Date.now()) { return now - this.lastConnectAt < RECENT_USE_MS; }
     ready(origin, relayUrl) {
         this.disconnect();
         if (!origin)
@@ -44,6 +50,7 @@ export class RemotePreview {
         if (!this.available || !this.relayUrl || !/^[a-f0-9]{64}$/.test(ticket) || this.sockets.size >= 64)
             return;
         const gateway = this.gateway;
+        this.lastConnectAt = Date.now();
         const ws = new WebSocket(this.relayUrl, { headers: { authorization: `Bearer ${ticket}` }, maxPayload: 64 * 1024, handshakeTimeout: 10_000, perMessageDeflate: false, followRedirects: false });
         this.sockets.add(ws);
         ws.on("error", () => ws.terminate());

package/dist/apps/service.js

@@ -814,8 +814,13 @@ export class AppService {
                 return;
             const now = Date.now();
             server.restarts = server.restarts.filter((at) => now - at < RESTART_WINDOW);
-            if (server.restarts.length >= MAX_RESTARTS)
+            // A crash loop stays down until the view is opened again, rather than
+            // retrying every time the window rolls over.
+            if (server.restarts.length >= MAX_RESTARTS) {
+                clearInterval(server.timer);
+                server.timer = undefined;
                 return;
+            }
             server.restarts.push(now);
             server.termId = undefined;
             void this.ensureServer(current).catch(() => { });

package/dist/apps/styles.css

@@ -639,6 +639,29 @@ input, textarea, select { font-family: inherit; font-size: 16px; }
 .msg.assistant .mermaid-diagram:first-child { margin-top: 0; }
 .msg.assistant .mermaid-diagram:last-child { margin-bottom: 0; }
 .msg.assistant .mermaid-diagram svg { display: inline-block; max-width: none; height: auto; vertical-align: top; }
+/* Mount point for a component the agent placed in its message (::view{…}, a
+   ```bivy fence). Layout only: what renders inside is an existing component
+   (.msg-attachment, .card), so this must not restyle its shell — it only gives
+   it the same vertical rhythm as a paragraph. Empty until the portal mounts,
+   and empty forever if a reference never resolves, so it carries no border or
+   background of its own that would leave a visible hole. */
+.msg.assistant .md-component { margin: 0.75em 0; }
+.msg.assistant .md-component:first-child { margin-top: 0; }
+.msg.assistant .md-component:last-child { margin-bottom: 0; }
+.msg.assistant .md-component:empty { margin: 0; }
+/* A placed component is a block in the reading column, not a tile in a row: it
+   fills the message width so every kind lines up with every other one and with
+   the prose around it. The fixed chip width belongs to the composer's wrapping
+   attachment list, where several chips share a line. */
+.msg.assistant .md-component > * { width: 100%; }
+/* A single number the agent wants read at a glance. Inherits .card's shell;
+   only the value's type scale is its own. */
+.metric-component { text-align: center; }
+.metric-value { font-size: var(--text-3xl); line-height: var(--lh-3xl); font-weight: var(--weight-semibold); }
+/* A table from a CSV or a spec reuses .markdown-table-wrap, so it reads exactly
+   like a table the agent wrote as markdown. The caption is the only addition. */
+.table-component { margin: 0; }
+.table-component figcaption { margin-top: var(--space-2); }
 /* Syntax highlighting for fenced code blocks (highlight.js token classes).
    Colors use light-dark() so one rule set tracks the app's light/dark scheme
    (color-scheme is set on :root). A GitHub-flavored palette that sits well on
@@ -1469,10 +1492,8 @@ button.sheet-action:last-child { border-bottom: 0; }
 }
 /* Password-manager-style provider credential vault. Saved items are the primary
    list; the provider catalog appears only inside Add. */
-/* Wide settings panels that read as a shallow "vault": the credential vault and
-   the isolated-machine-profiles panel share this container + header layout. */
-.credential-vault, .machine-profiles { gap: 14px; max-width: 680px; width: 100%; }
-.credential-vault { overflow-wrap: anywhere; }
+/* The credential vault: a wide settings panel that reads as a shallow "vault". */
+.credential-vault { gap: 14px; max-width: 680px; width: 100%; overflow-wrap: anywhere; }
 .vault-title-row { display: flex; align-items: flex-start; justify-content: space-between; gap: 14px; }
 .vault-title-row > div { min-width: 0; }
 /* The header action (e.g. "+ Add profile") never shrinks or wraps — the title
@@ -1496,7 +1517,6 @@ button.sheet-action:last-child { border-bottom: 0; }
 .vault-detail-grid { display: grid; grid-template-columns: minmax(110px, auto) 1fr; gap: 10px 18px; padding: 14px; border: 1px solid var(--line); border-radius: var(--radius-md); background: var(--surface-2); }
 .vault-detail-grid strong { min-width: 0; overflow-wrap: anywhere; }
 .vault-detail-grid code { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
-.vault-custody-note { padding: 12px 14px; border-left: 3px solid var(--accent); border-radius: var(--radius-sm) var(--radius-md) var(--radius-md) var(--radius-sm); background: var(--surface-2); line-height: 1.5; }
 .vault-advanced { padding: 10px 0; border-top: 1px solid var(--line); }
 .vault-advanced summary { cursor: pointer; color: var(--ink); font-weight: 600; }
 .vault-advanced[open] summary { margin-bottom: 10px; }
@@ -1857,21 +1877,8 @@ button.template-card.is-featured .template-card-icon {
 }
 .automation-row .row-menu-btn { opacity: 0.72; }
 .automation-row:hover .row-menu-btn { opacity: 1; }
-.run-row { align-items: center; }
-.run-row-open {
-  appearance: none; border: 0; background: transparent; color: inherit; font: inherit;
-  text-align: left; padding: 0; cursor: pointer;
-}
-.run-row-open:disabled { cursor: default; }
-.run-row-open:not(:disabled):hover .automation-row-title strong { color: var(--accent); }
-.run-row-chevron {
-  display: grid; place-items: center; flex: none; width: 40px; min-height: 40px;
-  border: 0; border-radius: var(--radius-md); padding: 0; background: transparent;
-  color: var(--muted); font: inherit; font-size: 24px; line-height: 1; cursor: pointer;
-}
-.run-row-chevron:hover { color: var(--ink); background: var(--surface-2); }
 .runs-setup {
-  margin-top: 8px; border: 1px solid var(--line); border-radius: var(--radius-md);
+  margin-top: var(--space-6); border: 1px solid var(--line); border-radius: var(--radius-md);
   background: var(--surface); overflow: hidden;
 }
 .runs-setup > summary {
@@ -1886,16 +1893,13 @@ button.template-card.is-featured .template-card-icon {
 .runs-setup[open] .runs-setup-chevron { transform: rotate(90deg); }
 .runs-setup-body { display: flex; flex-direction: column; gap: 12px; padding: 14px; border-top: 1px solid var(--line); }
 .runs-setup-body .picker-search { max-width: 100%; box-sizing: border-box; }
-.runs-overview { margin-top: 18px; }
-.runs-overview .autom-section-head > div { min-width: 0; }
-.runs-overview .autom-section-head .settings-hint { margin: 3px 0 0; }
-/* Keep a single refresh action compact; stretching it to half the sheet makes
-   the run controls look like a form instead of a feed toolbar. */
-.runs-overview .autom-section-actions { justify-content: flex-end; }
-.runs-overview .autom-section-actions .btn { min-width: 96px; }
-.incoming-work { margin-top: 22px; }
-.incoming-work > .autom-section-label { margin-bottom: 8px; }
-.incoming-work > .settings-form { gap: 14px; }
+/* Runs feed: grouped like the session list (attention, in progress, by day). */
+.run-history { margin-top: var(--space-2); }
+.run-history .session-group-label { margin: 0; padding-inline: 0; }
+.run-history > .settings-form { gap: var(--space-2); padding: 0 0 var(--space-3); border-bottom: 1px solid var(--line); }
+.run-history > .settings-form:empty { display: none; }
+.run-history-failure { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.automation-history-row:disabled { cursor: default; }
 
 /* A runner is a first-class requirement, not a tiny select hidden under the
    prompt. Pairing/key readiness is visible before Save can become disabled. */
@@ -1911,6 +1915,7 @@ button.template-card.is-featured .template-card-icon {
 .autom-runner-select-copy span { color: var(--muted); font-size: 12px; line-height: 1.35; }
 .autom-runner-select-row .autom-inline-select { flex: none; width: min(42%, 190px); }
 .autom-runner-help {
+  display: flex; align-items: center; flex-wrap: wrap; gap: var(--space-2);
   padding: 10px 12px; border-top: 1px solid var(--line);
   color: var(--ink); background: color-mix(in srgb, var(--warn) 9%, var(--surface));
   font-size: 12px; line-height: 1.45;
@@ -1947,14 +1952,6 @@ button.template-card.is-featured .template-card-icon {
 .run-timeline li span { color: var(--muted); font-size: 12px; }
 .run-timeline p { grid-column: 1 / -1; margin: 0; color: var(--muted); font-size: 12px; line-height: 1.4; }
 .run-timeline code { grid-column: 1 / -1; overflow-wrap: anywhere; font-size: 11px; }
-.run-history-filters {
-  display: flex; flex-wrap: wrap; gap: 6px; margin: 12px 0;
-}
-.run-history-filters .btn { white-space: nowrap; }
-@media (max-width: 479px) {
-  .run-history-filters { flex-wrap: nowrap; overflow-x: auto; margin-inline: -4px; padding-inline: 4px; scrollbar-width: none; }
-  .run-history-filters::-webkit-scrollbar { display: none; }
-}
 .run-details .run-sheet-failure { margin-top: 14px; border: 1px solid color-mix(in srgb, var(--danger) 35%, var(--line)); border-radius: var(--radius-md); }
 .run-details-receipt { margin-top: 18px !important; }
 .run-details-state {
@@ -2139,7 +2136,7 @@ button.template-card.is-featured .template-card-icon {
 .automation-detail-head .icon { flex-shrink: 0; }
 .automation-detail-head svg { width: var(--space-5); height: var(--space-5); }
 .automations-view.is-history .automations-view-body { flex: 1; padding: var(--space-5) var(--space-4); }
-.automation-history-view, .automation-history-view .runs-overview { margin-top: 0; }
+.automation-history-view { margin-top: 0; }
 .automation-history-row {
   display: flex; align-items: center; gap: var(--space-3); width: 100%;
   padding: var(--space-4) 0; border: 0; border-bottom: 1px solid var(--line);
@@ -2499,16 +2496,6 @@ a.queue-item:hover { border-color: var(--line-strong); background: var(--surface
   .automation-row-actions { width: auto; justify-content: flex-end; border-top: 0; padding-top: 0; }
   .automation-row-actions .btn { min-height: 40px; }
   .automation-row .row-menu-btn { min-width: 40px; min-height: 40px; opacity: 1; }
-  .run-row { align-items: flex-start; flex-wrap: wrap; }
-  .run-row .automation-row-main { flex-basis: 100%; }
-  .run-row .automation-row-actions { width: 100%; padding-top: 6px; }
-  .run-row-chevron { margin-left: auto; }
-  .runs-overview .autom-section-head { align-items: stretch; flex-direction: column; }
-  .runs-overview .autom-section-actions { display: grid; grid-template-columns: 1fr 1fr; width: 100%; }
-  /* Keep two actions balanced when needed, but don't make a lone Refresh button
-     occupy half the screen. */
-  .runs-overview .autom-section-actions:has(> :only-child) { display: flex; justify-content: flex-start; }
-  .runs-overview .autom-section-actions .btn { min-width: 96px; width: auto; }
   .queue-head { align-items: flex-start; gap: 10px; }
   .queue-head-actions { justify-content: flex-end; gap: 8px; min-width: 0; text-align: right; }
   .queue-head-actions .btn.link { overflow-wrap: anywhere; }
@@ -2609,15 +2596,6 @@ a.queue-item:hover { border-color: var(--line-strong); background: var(--surface
   transition: border-color 0.15s ease, box-shadow 0.15s ease;
 }
 .connect-option:hover { border-color: var(--line-strong); box-shadow: var(--shadow-md); }
-.connect-option-head { display: flex; align-items: flex-start; gap: 12px; }
-.connect-option-badge {
-  flex: none; width: 36px; height: 36px; display: grid; place-items: center;
-  border-radius: var(--radius-md); color: var(--accent);
-  background: color-mix(in srgb, var(--accent) 12%, transparent);
-}
-.connect-option-copy { min-width: 0; }
-.connect-option-copy h3 { margin: 1px 0 3px; font-size: 15px; }
-.connect-option-copy p { margin: 0; color: var(--muted); font-size: 13px; line-height: 1.45; }
 
 .connect-command {
   display: flex; align-items: center; gap: 8px; padding: 4px 4px 4px 12px;
@@ -2637,7 +2615,6 @@ a.queue-item:hover { border-color: var(--line-strong); background: var(--surface
 .connect-option-links { display: flex; flex-wrap: wrap; align-items: center; gap: var(--space-2); }
 .connect-option-link { align-self: flex-start; color: var(--accent); font-size: 12.5px; font-weight: 600; text-decoration: none; }
 .connect-option-link:hover { text-decoration: underline; }
-.connect-option-cta { align-self: flex-start; }
 /* A one-time "next step" card above the composer (automations, notifications). */
 .next-step { box-sizing: border-box; width: min(100% - 2 * var(--space-3), 800px - 2 * var(--space-3)); margin: 0 auto var(--space-3); display: flex; align-items: center; justify-content: space-between; gap: var(--space-3); }
 .next-step p { margin: var(--space-1) 0 0; color: var(--muted); font-size: var(--text-sm); }
@@ -3608,21 +3585,13 @@ p.setup-note .btn.link { min-height: 44px; margin-block: calc((1lh - 44px) / 2);
 
   /* Compact, thumb-friendly automation list: the row is the editor link. */
   .automation-list { gap: var(--space-2); border: 0; }
-  .automation-row:not(.run-row) {
+  .automation-row {
     min-height: 0; padding: var(--space-3); border: 1px solid var(--line);
     border-radius: var(--radius-lg); background: var(--surface-2);
     grid-template-columns: 36px minmax(0, 1fr) auto; gap: var(--space-3);
     align-items: center;
   }
-  .run-row {
-    display: flex; flex-wrap: wrap; align-items: flex-start;
-    gap: var(--space-3); padding: var(--space-4);
-  }
-  .run-row-open { flex: 1 1 100%; min-width: 0; }
-  .run-row .automation-row-main { width: 100%; }
-  .run-row .automation-row-actions { width: 100%; justify-content: flex-start; flex-wrap: wrap; }
-  .run-row .run-row-chevron { margin-left: auto; }
-  .automation-row:not(.run-row):hover { background: var(--surface-3); }
+  .automation-row:hover { background: var(--surface-3); }
   .automation-row:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
   .automation-row-icon { width: 36px; height: 36px; }
   .automation-row-icon svg { width: 18px; height: 18px; }
@@ -3649,8 +3618,6 @@ p.setup-note .btn.link { min-height: 44px; margin-block: calc((1lh - 44px) / 2);
   .automation-history-view .autom-section-head { margin-bottom: var(--space-3); }
   .automation-history-view .automation-list { gap: var(--space-2); }
   .automation-history-view .automation-row { padding: var(--space-3); }
-  .automation-history-view .run-history-filters { flex-wrap: nowrap; overflow-x: auto; scrollbar-width: none; padding-bottom: var(--space-1); }
-  .automation-history-view .run-history-filters::-webkit-scrollbar { display: none; }
   .automations-view.is-history .automations-view-head-actions > .btn.primary { display: none; }
   .automation-history-view .autom-section-head { align-items: flex-start; gap: var(--space-3); }
   .automation-history-view .autom-section-head > strong { min-width: 0; line-height: var(--lh-lg); }
@@ -3666,3 +3633,22 @@ p.setup-note .btn.link { min-height: 44px; margin-block: calc((1lh - 44px) / 2);
   font-family: var(--font-serif);
   font-weight: var(--weight-medium);
 }
+/* A Vega-Lite chart an agent placed in a message. Vega owns the SVG inside
+   .chart-host, so nothing here styles its internals — colors come from the
+   tokens read in vega.ts, which is how the chart tracks light/dark. */
+.chart-component { margin: 0; }
+.chart-component .chart-host {
+  width: 100%; overflow-x: auto; -webkit-overflow-scrolling: touch; padding: 10px;
+  border: 1px solid var(--line); border-radius: var(--radius-sm); background: var(--surface);
+}
+.chart-component figcaption { margin-top: var(--space-2); }
+/* An app preview framed inside a message. Same bordered surface as a chart or
+   a mermaid diagram — all three are a figure in the prose, and should not read
+   as three different things. */
+.inline-app { margin: 0; }
+.inline-app-frame {
+  display: block; width: 100%; height: 420px; border: 1px solid var(--line);
+  border-radius: var(--radius-sm); background: var(--surface);
+}
+.inline-app figcaption { display: flex; gap: var(--space-2); align-items: baseline; justify-content: space-between; margin-top: var(--space-2); }
+.inline-app-open { flex: none; }

package/dist/automation-reseal.js

@@ -0,0 +1,30 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// Copyright (c) 2026 Petter André Sjulstad
+import { open, seal } from "./e2e.js";
+export async function resealAutomationTemplates(opts) {
+    const prefix = `bivy-room-v1:${opts.nodeId}:`;
+    const result = { resealed: 0, unreadable: [] };
+    for (const template of opts.templates) {
+        if (!template.templateCiphertext.startsWith(prefix))
+            continue;
+        const payload = template.templateCiphertext.slice(prefix.length);
+        if (tryOpen(opts.current, payload) !== undefined)
+            continue;
+        const plaintext = opts.retired.map((key) => tryOpen(key, payload)).find((text) => text !== undefined);
+        if (plaintext === undefined) {
+            result.unreadable.push(template.id);
+            continue;
+        }
+        await opts.save(template.id, `${prefix}${seal(opts.current, plaintext)}`);
+        result.resealed += 1;
+    }
+    return result;
+}
+function tryOpen(key, payload) {
+    try {
+        return open(key, payload);
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/config-cli.js

@@ -112,6 +112,7 @@ const ENV_FOR_KEY = {
     "sessions.previewBadge": "BIVY_PREVIEW_BADGE",
     "automation.checks": "BIVY_AUTOMATION_CHECKS",
     "automation.checkTimeoutMinutes": "BIVY_AUTOMATION_CHECK_TIMEOUT_MS",
+    "automation.slackPrompts": "BIVY_SLACK_PROMPTS",
 };
 const BUILTIN_VALUES = {
     "node.port": 4317,
@@ -128,6 +129,7 @@ const BUILTIN_VALUES = {
     "sessions.previewBadge": true,
     "automation.checks": ["test", "lint", "typecheck"],
     "automation.checkTimeoutMinutes": 10,
+    "automation.slackPrompts": false,
 };
 function baseEffectiveValue(config, key) {
     const configured = getConfigValue(config, key);

package/dist/controllers/credential-commands.js

@@ -10,7 +10,7 @@
 // provider-list helpers) as composition deps.
 import { testProviderCredential } from "../runtime/credentials.js";
 import { NativeAuthPreviewService } from "../runtime/native-auth-preview.js";
-import { exportAccountApiKeys, exportAccountOAuthCredentials, importAccountOAuthCredentials, exportRecordTombstones, listCredentialRecords, removeProviderCredential, setProviderApiKeyLabeled, setProviderReferenceLabeled, setCredentialSync, setCredentialUnattended, getCredentialPresets, setActiveCredentialPreset, setCredentialPresetMapping, } from "../credentials/api.js";
+import { exportAccountApiKeys, exportAccountOAuthCredentials, importAccountOAuthCredentials, exportRecordTombstones, listCredentialRecords, removeProviderCredential, setProviderApiKeyLabeled, setProviderReferenceLabeled, setCredentialSync, getCredentialPresets, setActiveCredentialPreset, setCredentialPresetMapping, } from "../credentials/api.js";
 export function createCredentialCommands(deps) {
     const { credsDir } = deps;
     const nativeAuth = new NativeAuthPreviewService(credsDir);
@@ -95,8 +95,7 @@ export function createCredentialCommands(deps) {
         async "credential.remove"(msg, ctx) {
             try {
                 await removeProviderCredential(credsDir, String(msg.provider ?? ""), String(msg.label ?? ""));
-                // Deleting a granted credential must also remove its escrowed cloud copy.
-                await deps.pushModelAuthToControlPlane({ allowEmptyHostedEscrow: true });
+                await deps.pushModelAuthToControlPlane();
                 await deps.refreshSessionAfterAuth();
                 deps.sendEvent({ type: "credentials.records", records: await listCredentialRecords(credsDir) });
                 deps.broadcast({ type: "providers.list", providers: await deps.listProvidersUnified() });
@@ -112,8 +111,7 @@ export function createCredentialCommands(deps) {
             try {
                 const sync = msg.sync === "node" ? "node" : "account";
                 await setCredentialSync(credsDir, String(msg.provider ?? ""), String(msg.label ?? ""), sync);
-                // Demoting to machine-only revokes any custody grant; let it clear the escrow.
-                await deps.pushModelAuthToControlPlane({ allowEmptyHostedEscrow: sync === "node" });
+                await deps.pushModelAuthToControlPlane();
                 deps.sendEvent({ type: "credentials.records", records: await listCredentialRecords(credsDir) });
                 ctx.reply({ type: "credential.sync.set.ok", requestId: msg.requestId });
             }
@@ -123,28 +121,6 @@ export function createCredentialCommands(deps) {
                 ctx.reply({ type: "credential.sync.set.error", requestId: msg.requestId, error: message });
             }
         },
-        async "credential.unattended.set"(msg, ctx) {
-            const provider = String(msg.provider ?? "");
-            const label = String(msg.label ?? "");
-            const previous = (await listCredentialRecords(credsDir)).find((record) => record.provider === provider.trim().toLowerCase() && record.label === label)?.unattended === true;
-            try {
-                await setCredentialUnattended(credsDir, provider, label, msg.unattended === true);
-                // Fail loud: the grant reply must reflect whether the encrypted cloud
-                // copy actually reached the control plane. An explicit disable is the
-                // one caller allowed to publish an empty escrow snapshot.
-                await deps.pushModelAuthToControlPlane({ throwOnFailure: true, allowEmptyHostedEscrow: msg.unattended !== true });
-                deps.sendEvent({ type: "credentials.records", records: await listCredentialRecords(credsDir) });
-                ctx.reply({ type: "credential.unattended.set.ok", requestId: msg.requestId });
-            }
-            catch (error) {
-                // The UI must never claim an encrypted Cloud copy exists when custody
-                // publication failed. Restore the prior local grant before rejecting.
-                await setCredentialUnattended(credsDir, provider, label, previous).catch(() => { });
-                deps.sendEvent({ type: "credentials.records", records: await listCredentialRecords(credsDir) });
-                const message = error instanceof Error ? error.message : String(error);
-                ctx.reply({ type: "credential.unattended.set.error", requestId: msg.requestId, error: message });
-            }
-        },
         // "Test connection": a bounded, non-secret liveness probe for one credential
         // record (see credentials/api.ts testCredential). The reply carries only
         // ok/at/reason — the credential's own token never leaves this handler.

package/dist/credentials/api.js

@@ -132,18 +132,6 @@ export async function importCredentialRecords(credsDir, records, deletedAt = {})
     }
     return createCredentialVault(credsDir).importRecords(list, tombstones);
 }
-/** Apply a hosted custody snapshot as an authoritative filtered set. */
-export async function reconcileHostedCredentialRecords(credsDir, records, previous) {
-    const current = Object.values(records ?? {}).filter((record) => Boolean(record) && typeof record === "object" && typeof record.provider === "string" && typeof record.label === "string");
-    const currentIds = new Set(current.map((record) => `${record.provider}\u0000${record.label}`));
-    const store = createCredentialVault(credsDir);
-    for (const prior of previous) {
-        if (!currentIds.has(`${prior.provider}\u0000${prior.label}`))
-            await store.deleteRecord(prior.provider, prior.label);
-    }
-    await importCredentialRecords(credsDir, records);
-    return current.map((record) => ({ provider: record.provider, label: record.label }));
-}
 /** Export provider revocations for cross-node convergence. */
 export async function exportProviderAuthTombstones(credsDir) {
     return createCredentialVault(credsDir).exportTombstones();
@@ -225,7 +213,7 @@ export async function listCredentialRecords(credsDir) {
         const verification = await vault.readVerification(record.provider, record.label).catch(() => undefined);
         const verified = verification ? { lastVerifiedAt: verification.at, lastVerifiedOk: verification.ok } : {};
         if (source.kind === "reference") {
-            return { provider: record.provider, label: record.label, kind: "reference", sync: record.sync, origin: record.origin, unattended: record.unattended === true, ref: source.ref, testable: false, ...verified };
+            return { provider: record.provider, label: record.label, kind: "reference", sync: record.sync, origin: record.origin, ref: source.ref, testable: false, ...verified };
         }
         const cred = source.cred;
         const summary = {
@@ -234,7 +222,6 @@ export async function listCredentialRecords(credsDir) {
             kind: cred.type,
             sync: record.sync,
             origin: record.origin,
-            unattended: record.unattended === true,
             testable: isTestableProvider(record.provider),
             ...verified,
         };
@@ -253,7 +240,6 @@ async function labeledMeta(credsDir, provider, label) {
     return {
         sync: existing?.sync ?? defaultSyncFor("bivy"),
         origin: existing?.origin ?? "bivy",
-        ...(existing?.unattended === true ? { unattended: true } : {}),
     };
 }
 /** Store an API key under a specific label (multi-account). */
@@ -404,33 +390,6 @@ export function getCredentialIngestPolicy(credsDir) {
 export function setCredentialIngestPolicy(credsDir, policy) {
     setIngestPolicyFile(defaultPresetsPath(credsDir), policy);
 }
-/** Explicitly grant/revoke use by separately escrowed unattended runners. */
-export async function setCredentialUnattended(credsDir, provider, label, unattended) {
-    const id = provider.trim().toLowerCase();
-    if (!id)
-        throw new Error("Provider is required");
-    const store = createCredentialVault(credsDir);
-    const existing = await store.readRecord(id, label);
-    if (!existing)
-        throw new Error(`No credential for ${id}:${normalizeLabel(label)}`);
-    if (existing.sync !== "account" && unattended)
-        throw new Error("A machine-only credential cannot be granted to unattended runners");
-    if (existing.source.kind === "reference" && unattended)
-        throw new Error("Password-manager references cannot be resolved by unattended runners");
-    await store.putRecord({ ...existing, unattended });
-}
-/** Credentials included in the explicit hosted custody snapshot. */
-export async function exportUnattendedRecords(credsDir) {
-    const records = await createCredentialVault(credsDir).exportSyncableRecords();
-    return Object.fromEntries(Object.entries(records).filter(([, record]) => record.unattended === true && record.source.kind === "stored"));
-}
-/** Monotonic logical revision for the filtered custody projection. */
-export async function unattendedCredentialRevision(credsDir) {
-    const store = createCredentialVault(credsDir);
-    const records = await store.listRecords();
-    const deletedAt = await store.exportRecordTombstones();
-    return Math.max(0, ...records.map((record) => Number(record.updatedAt) || 0), ...Object.values(deletedAt).map((stamp) => Number(stamp) || 0));
-}
 /** Set a labeled credential's sync tier — the per-credential opt-out toggle. */
 export async function setCredentialSync(credsDir, provider, label, sync) {
     const id = provider.trim().toLowerCase();
@@ -445,5 +404,5 @@ export async function setCredentialSync(credsDir, provider, label, sync) {
     if (existing.source.kind === "reference" && existing.source.backend === "command" && sync === "account") {
         throw new Error("A cmd:// reference is node-local (it runs a command on this machine) and cannot be synced.");
     }
-    await store.putRecord({ ...existing, sync, ...(sync === "node" ? { unattended: false } : {}) });
+    await store.putRecord({ ...existing, sync });
 }

package/dist/credentials/document.js

@@ -137,12 +137,11 @@ export function preferIncomingRecord(local, incoming) {
     const incomingOauth = oauthOf(incoming);
     if (!localOauth || !incomingOauth)
         return true;
-    // Identical token content means this is a metadata-only change (an
-    // unattended-runs grant/revoke, a sync-tier move). Token freshness cannot
-    // order those, so the newer record write wins — without this, a grant made
-    // on one machine never reaches its peers, and a peer's next hosted-escrow
-    // push would read as "nothing granted". Equal stamps fall back to canonical
-    // record content so both merge directions still converge.
+    // Identical token content means this is a metadata-only change (a sync-tier
+    // move). Token freshness cannot order those, so the newer record write wins —
+    // without this, a change made on one machine never reaches its peers. Equal
+    // stamps fall back to canonical record content so both merge directions still
+    // converge.
     if (canonicalCredential(localOauth) === canonicalCredential(incomingOauth)) {
         const localAt = Number(local.updatedAt) || 0;
         const incomingAt = Number(incoming.updatedAt) || 0;
@@ -269,14 +268,7 @@ export function mergeDocuments(local, incomingCredentials, incomingDeletedAt = {
             continue;
         if (!(key in credentials))
             imported += 1;
-        // An incoming record with no opinion on unattended custody (undefined — the
-        // v2 wire and plaintext ingest never carry the flag) must not strip an
-        // explicit local grant/revoke: agent-side token refreshes flow through this
-        // merge, and dropping the flag would make the node's next escrow push
-        // silently revoke the encrypted cloud copy the user still relies on.
-        credentials[key] = localRecord && incoming.unattended === undefined && localRecord.unattended !== undefined
-            ? { ...incoming, unattended: localRecord.unattended }
-            : incoming;
+        credentials[key] = incoming;
         const incomingUpdatedAt = Number(incoming.updatedAt);
         if (!Number.isFinite(deletedAt[key]) || incomingUpdatedAt > deletedAt[key])
             delete deletedAt[key];

package/dist/credentials/store.js

@@ -555,11 +555,11 @@ export class BivyCredentialStore {
             // tombstone-newer-wins — see document.ts).
             const incoming = migrateToV3({ v: 2, providers: snapshot, deletedAt });
             // The v2 wire carries no record metadata, so migrateToV3 synthesizes
-            // defaults (sync: "account", origin: "bivy", no unattended flag). Those
-            // defaults must not clobber local intent — a machine-only sync tier or an
-            // unattended-runs custody grant — when only the token content is newer
-            // (e.g. an agent's own TUI refreshed the OAuth token set). Inherit the
-            // existing record's metadata; the merge engine still decides freshness.
+            // defaults (sync: "account", origin: "bivy"). Those defaults must not
+            // clobber local intent — a machine-only sync tier — when only the token
+            // content is newer (e.g. an agent's own TUI refreshed the OAuth token
+            // set). Inherit the existing record's metadata; the merge engine still
+            // decides freshness.
             for (const [key, record] of Object.entries(incoming.credentials)) {
                 const existing = document.credentials[key];
                 if (!existing)
@@ -568,7 +568,6 @@ export class BivyCredentialStore {
                     ...record,
                     sync: existing.sync,
                     origin: existing.origin,
-                    ...(existing.unattended !== undefined ? { unattended: existing.unattended } : {}),
                 };
             }
             const result = mergeDocuments(document, incoming.credentials, incoming.deletedAt);

package/dist/device-registry.js

@@ -7,6 +7,7 @@ import { generatePairingKeypair, generateRoomKey, generatePairSecret, deriveWrap
 import { seal, open } from "./e2e.js";
 const DEFAULT_PAIR_TTL_MS = 5 * 60_000;
 const ROOM_KEY_BYTES = 32;
+const MAX_RETIRED_ROOM_KEYS = 8;
 /**
  * Validate + canonicalize a pre-shared room-key seed. Returns the canonical
  * base64 of a well-formed 32-byte key, or undefined for anything malformed
@@ -81,6 +82,7 @@ export class PairingStore {
             return new PairingStore(filePath, {
                 nodeKeypair: parsed.nodeKeypair,
                 roomKeyB64: parsed.roomKeyB64,
+                ...(Array.isArray(parsed.retiredRoomKeysB64) && parsed.retiredRoomKeysB64.length ? { retiredRoomKeysB64: parsed.retiredRoomKeysB64 } : {}),
                 devices: Array.isArray(parsed.devices) ? parsed.devices : [],
             });
         }
@@ -130,6 +132,30 @@ export class PairingStore {
     roomKey() {
         return Buffer.from(this.data.roomKeyB64, "base64");
     }
+    /** Room keys replaced by earlier rotations that still guard stored data. */
+    retiredRoomKeys() {
+        return (this.data.retiredRoomKeysB64 ?? []).map((key) => Buffer.from(key, "base64"));
+    }
+    /** Drop retired room keys once nothing stored is sealed under them. */
+    forgetRetiredRoomKeys() {
+        if (!this.data.retiredRoomKeysB64)
+            return;
+        delete this.data.retiredRoomKeysB64;
+        this.persist();
+    }
+    /** Open a payload sealed under the current room key or a retired one. */
+    openSealed(payload) {
+        let lastError;
+        for (const key of [this.roomKey(), ...this.retiredRoomKeys()]) {
+            try {
+                return open(key, payload);
+            }
+            catch (error) {
+                lastError = error;
+            }
+        }
+        throw lastError;
+    }
     /** Issue a single-use, expiring pairing secret to embed in a linking QR. */
     issuePairSecret(ttlMs = DEFAULT_PAIR_TTL_MS) {
         this.sweepSecrets();
@@ -215,6 +241,7 @@ export class PairingStore {
     }
     /** Rotate the room key and re-wrap it for all current devices. */
     rotateRoomKey() {
+        this.data.retiredRoomKeysB64 = [this.data.roomKeyB64, ...(this.data.retiredRoomKeysB64 ?? [])].slice(0, MAX_RETIRED_ROOM_KEYS);
         this.data.roomKeyB64 = generateRoomKey().toString("base64");
         this.persist();
         const roomKey = this.roomKey();