@bivy/bivy 0.9.1-staging.126 → 0.9.1-staging.128

package/README.md

@@ -7,10 +7,14 @@ prompts into governed agent runs on your laptop, server, or cloud account. Choos
 the node, agent, and model; burst onto a short-lived runner in your own cloud;
 then watch, steer, and approve from a phone, browser, or terminal.
 
-Agents run with your repository, keys, and toolchain. Bivy's relay and control
-plane do not receive repository contents, prompts, transcripts, or model keys.
-Bivy adds routing, durable sessions, approvals, fallback rules, and outcome
-reports around agents you already use.
+Agents run with your repository, keys, and toolchain. Interactive session
+traffic is end-to-end encrypted between your node and devices; Bivy's relay and
+control plane do not receive repository contents, interactive prompts,
+transcripts, or model keys. Inbound Slack commands and generic webhook
+instructions necessarily reach the control plane and are retained with their
+queue item until it is deleted; GitHub and Linear issue text is fetched directly
+by the node instead. Bivy adds routing, durable sessions, approvals, fallback
+rules, and outcome reports around agents you already use.
 
 - **Website:** [bivy.sh](https://bivy.sh)
 - **Documentation:** [`docs/`](docs/README.md) — start with the [quickstart](docs/quickstart.md)
@@ -136,7 +140,9 @@ See [`docs/remote-access.md`](docs/remote-access.md) and
 
 ## Supported agents
 
-Nineteen agents are available in the picker, each driven through its native interface:
+Nineteen agents are available in the picker, each driven through its native interface.
+Pi, Claude Code, Codex, and OpenCode are the release-tested **Supported** paths;
+the rest are explicitly Beta in the picker and support matrix:
 
 | Agent | Command | Notes |
 |---|---|---|
@@ -230,8 +236,10 @@ picker's Protection label. **Bivy does not currently ship its own OS-level jail.
 ## Credentials
 
 Provider credentials stay on the node or in a vault you control. Bivy Cloud does
-not receive model keys, GitHub repository tokens, OAuth refresh tokens, prompts,
-transcripts, or workspace files.
+not receive model keys, GitHub repository tokens, OAuth refresh tokens,
+interactive session prompts, transcripts, or workspace files. See the
+[security model](docs/security-model.md#what-the-control-plane-sees) for the
+separate inbound-automation data boundary.
 
 ```bash
 bivy secrets list
@@ -250,9 +258,11 @@ Label an issue `bivy` (or `bivy/<node>` to target a machine), or mention the Biv
 GitHub App in a comment. A node you own claims the work, runs the agent in an
 isolated worktree, and the agent opens the pull request itself.
 
-Available on every plan: interactive CLI/app sessions are unlimited. Free
-accounts also get 10 unattended automations per rolling 7-day window across
-GitHub, Slack, webhooks, and schedules; Pro removes the automation cap.
+Available on every plan. On Bivy Cloud, the free trial shows the first 25
+distinct sessions in the hosted app and includes 10 unattended automations per
+rolling 7-day window across GitHub, Slack, webhooks, and schedules. Sessions keep
+running on your machines after the hosted trial is exhausted, but new ones are
+hidden from the hosted app until you subscribe. Pro removes both limits.
 Self-hosted stacks are unlimited.
 
 A private GitHub App only installs on the account that owns it, so connect one

package/dist/server.js

@@ -2803,24 +2803,7 @@ const RELAY_COMMANDS = {
         const record = resolveSession(msg.sessionId);
         if (!record || !sessionBusy(record))
             return;
-        // A wedged runtime may never resolve abort() or emit agent_end. Settle the
-        // daemon and client first, then make the SDK abort best-effort. The synthetic
-        // agent_end also closes running tool cards and drains visible follow-ups.
-        forceAbortTurn({
-            settle: () => {
-                questionManager.cancelForSession(record.id);
-                approvals.cancelForSession(record.id);
-                clearSessionWorking(record, "idle");
-            },
-            notifySettled: () => ctx.broadcast({
-                type: "session.event",
-                sessionId: record.id,
-                event: { type: "agent_end", aborted: true },
-            }),
-            abort: () => record.session.abort(),
-            onAbortError: (error) => console.warn(`[session-abort] runtime abort failed for ${record.id}:`, error),
-        });
-        record.abortRecovery = recoverRecordAfterAbort(record);
+        abortSessionRecord(record, ctx.broadcast);
     },
     async "session.command.invoke"(msg, ctx) {
         // Invoke a protocol-mode agent command (AgentCommand.mode === "protocol")
@@ -8204,6 +8187,27 @@ async function recoverRecordAfterAbort(record) {
         record.abortRecovery = undefined;
     }
 }
+/** Shared Stop path for relay/web clients and the local HTTP/CLI API. */
+function abortSessionRecord(record, emit = broadcast) {
+    // A wedged runtime may never resolve abort() or emit agent_end. Settle the
+    // daemon and client first, then make the SDK abort best-effort. The synthetic
+    // agent_end also closes running tool cards and drains visible follow-ups.
+    forceAbortTurn({
+        settle: () => {
+            questionManager.cancelForSession(record.id);
+            approvals.cancelForSession(record.id);
+            clearSessionWorking(record, "idle");
+        },
+        notifySettled: () => emit({
+            type: "session.event",
+            sessionId: record.id,
+            event: { type: "agent_end", aborted: true },
+        }),
+        abort: () => record.session.abort(),
+        onAbortError: (error) => console.warn(`[session-abort] runtime abort failed for ${record.id}:`, error),
+    });
+    record.abortRecovery = recoverRecordAfterAbort(record);
+}
 async function createSession(workspace = defaultWorkspace, sessionFile, opts = {}) {
     const makeActive = opts.makeActive !== false;
     // Normalize the resume ref into the token the owning runtime actually expects.
@@ -10959,12 +10963,13 @@ app.post("/api/sessions/pr/refresh", async (_req, res, next) => {
         next(error);
     }
 });
-app.post("/api/session/abort", async (req, res, next) => {
+app.post("/api/session/abort", (req, res, next) => {
     try {
         const record = resolveSession(req.body?.sessionId);
         if (!record)
             return res.status(404).json({ error: "No active session" });
-        await record.session.abort();
+        if (sessionBusy(record))
+            abortSessionRecord(record);
         res.json({ ok: true });
     }
     catch (error) {