@rivus/agent 0.1.0 → 0.3.1

package/dist/rivus-daemon-cli.js

@@ -6,6 +6,489 @@ import { Effect } from "effect";
 import { open, readFile, realpath, stat } from "node:fs/promises";
 import { createHash, randomUUID } from "node:crypto";
 import { constants } from "node:fs";
+//#region src/application/plugin/rivus-automation-runtime-definition.ts
+function resolveRivusAutomationRuntimeDefinition(definition, requestedToolIds, requestedSkillIds) {
+	const toolIds = Object.freeze([...new Set(requestedToolIds)].sort());
+	const toolsById = new Map(definition.tools.map((tool) => [tool.id, tool]));
+	const tools = Object.freeze(toolIds.map((toolId) => {
+		const tool = toolsById.get(toolId);
+		if (!tool) throw new Error(`Automation Runtime requests ungranted tool: ${toolId}`);
+		return tool;
+	}));
+	const skillIds = Object.freeze([...new Set(requestedSkillIds)].sort());
+	const skillsById = new Map(definition.skills.map((skill) => [skill.id, skill]));
+	const skills = Object.freeze(skillIds.map((skillId) => {
+		const skill = skillsById.get(skillId);
+		if (!skill) throw new Error(`Automation Runtime requests ungranted skill: ${skillId}`);
+		return skill;
+	}));
+	return deepFreeze({
+		...definition,
+		memory: {
+			scopes: [],
+			tool: false
+		},
+		skillGrantSet: {
+			revision: createHash("sha256").update(JSON.stringify({
+				parentRevision: definition.skillGrantSet.revision,
+				skillIds
+			})).digest("hex"),
+			skillIds
+		},
+		skills,
+		toolGrantSet: {
+			revision: createHash("sha256").update(JSON.stringify({
+				parentRevision: definition.toolGrantSet.revision,
+				toolIds
+			})).digest("hex"),
+			toolIds
+		},
+		tools
+	});
+}
+//#endregion
+//#region src/application/plugin/rivus-plugin-loader.ts
+var RivusPluginLoadError = class extends Error {
+	pluginId;
+	moduleSpecifier;
+	name = "RivusPluginLoadError";
+	constructor(pluginId, moduleSpecifier, message, options) {
+		super(message, options);
+		this.pluginId = pluginId;
+		this.moduleSpecifier = moduleSpecifier;
+	}
+};
+async function loadRivusDeployment(options) {
+	validateRivusDeploymentManifest(options.manifest);
+	const catalog = createRivusPluginCatalog();
+	const pluginStatuses = [];
+	const statusByPlugin = /* @__PURE__ */ new Map();
+	for (const declaration of options.manifest.plugins) try {
+		const plugin = await resolvePluginExport(await options.loadModule({
+			deploymentRoot: options.deploymentRoot,
+			module: declaration.module,
+			pluginId: declaration.id
+		}));
+		if (plugin.manifest.id !== declaration.id) throw new Error(`plugin manifest id ${plugin.manifest.id} does not match declaration ${declaration.id}`);
+		catalog.registerPlugin(plugin);
+		const status = Object.freeze({
+			id: declaration.id,
+			module: declaration.module,
+			required: declaration.required,
+			status: "loaded",
+			version: plugin.manifest.version
+		});
+		pluginStatuses.push(status);
+		statusByPlugin.set(declaration.id, status);
+	} catch (cause) {
+		const message = cause instanceof Error ? cause.message : String(cause);
+		if (declaration.required) throw new RivusPluginLoadError(declaration.id, declaration.module, `required plugin ${declaration.id} failed to load: ${message}`, { cause });
+		const status = Object.freeze({
+			error: message,
+			id: declaration.id,
+			module: declaration.module,
+			required: false,
+			status: "failed"
+		});
+		pluginStatuses.push(status);
+		statusByPlugin.set(declaration.id, status);
+	}
+	const agentStatuses = [];
+	const definitions = [];
+	for (const agent of options.manifest.agents) {
+		const pluginStatus = statusByPlugin.get(agent.pluginId);
+		if (pluginStatus.status === "failed") {
+			agentStatuses.push(Object.freeze({
+				agentId: agent.agentId,
+				pluginId: agent.pluginId,
+				profileId: agent.profileId,
+				reason: `plugin ${agent.pluginId} is unavailable: ${pluginStatus.error}`,
+				status: "disabled"
+			}));
+			continue;
+		}
+		try {
+			const definition = resolveRivusAgentDefinition(catalog, agent);
+			definitions.push(definition);
+			agentStatuses.push(Object.freeze({
+				agentId: agent.agentId,
+				definition,
+				pluginId: agent.pluginId,
+				profileId: agent.profileId,
+				status: "enabled"
+			}));
+		} catch (cause) {
+			const declaration = options.manifest.plugins.find(({ id }) => id === agent.pluginId);
+			const message = cause instanceof Error ? cause.message : String(cause);
+			if (declaration.required) throw new RivusPluginLoadError(declaration.id, declaration.module, `deployment ${agent.agentId} failed to resolve: ${message}`, { cause });
+			agentStatuses.push(Object.freeze({
+				agentId: agent.agentId,
+				pluginId: agent.pluginId,
+				profileId: agent.profileId,
+				reason: message,
+				status: "disabled"
+			}));
+		}
+	}
+	const agentStatusById = new Map(agentStatuses.map((agent) => [agent.agentId, agent]));
+	const automationTemplates = new Map(catalog.snapshot().automations.map((template) => [template.id, template]));
+	const automationDefinitions = [];
+	for (const automation of options.manifest.automations ?? []) {
+		const agent = agentStatusById.get(automation.agentId);
+		if (!agent || agent.status === "disabled" || !agent.definition) continue;
+		const template = automationTemplates.get(automation.templateId);
+		if (!template) throw new Error(`automation ${automation.id} references unknown template: ${automation.templateId}`);
+		if (template.pluginId !== agent.pluginId || template.profileId !== agent.profileId) throw new Error(`automation ${automation.id} template is not owned by agent profile ${agent.profileId}`);
+		automationDefinitions.push(deepFreeze({
+			...automation,
+			runtimeDefinition: resolveRivusAutomationRuntimeDefinition(agent.definition, template.requestedToolIds, template.requestedSkillIds),
+			template
+		}));
+	}
+	return Object.freeze({
+		agents: Object.freeze(agentStatuses),
+		automationDefinitions: Object.freeze(automationDefinitions),
+		catalog,
+		definitions: Object.freeze(definitions),
+		manifest: options.manifest,
+		plugins: Object.freeze(pluginStatuses)
+	});
+}
+function validateRivusDeploymentManifest(manifest) {
+	const pluginIds = /* @__PURE__ */ new Set();
+	for (const plugin of manifest.plugins) {
+		if (pluginIds.has(plugin.id)) throw new Error(`duplicate plugin declaration: ${plugin.id}`);
+		validateModuleSpecifier(plugin.module);
+		pluginIds.add(plugin.id);
+	}
+	const agentIds = /* @__PURE__ */ new Set();
+	const agentById = /* @__PURE__ */ new Map();
+	for (const agent of manifest.agents) {
+		if (agentIds.has(agent.agentId)) throw new Error(`duplicate agent deployment: ${agent.agentId}`);
+		agentIds.add(agent.agentId);
+		if (!pluginIds.has(agent.pluginId)) throw new Error(`agent ${agent.agentId} references undeclared plugin: ${agent.pluginId}`);
+		agentById.set(agent.agentId, agent);
+	}
+	const automationIds = /* @__PURE__ */ new Set();
+	for (const automation of manifest.automations ?? []) {
+		if (automationIds.has(automation.id)) throw new Error(`duplicate automation binding: ${automation.id}`);
+		automationIds.add(automation.id);
+		const agent = agentById.get(automation.agentId);
+		if (!agent) throw new Error(`automation ${automation.id} references unknown agent: ${automation.agentId}`);
+		const endpoint = manifest.endpoints.find(({ id }) => id === automation.delivery.endpointId);
+		if (!endpoint) throw new Error(`automation ${automation.id} references unknown delivery endpoint: ${automation.delivery.endpointId}`);
+		if (endpoint.agentId !== agent.agentId) throw new Error(`automation ${automation.id} delivery endpoint is bound to a different agent`);
+	}
+	const endpointIds = /* @__PURE__ */ new Set();
+	const sessionNamespaces = /* @__PURE__ */ new Set();
+	for (const endpoint of manifest.endpoints) {
+		if (endpointIds.has(endpoint.id)) throw new Error(`duplicate endpoint binding: ${endpoint.id}`);
+		endpointIds.add(endpoint.id);
+		if (sessionNamespaces.has(endpoint.sessionNamespace)) throw new Error(`duplicate endpoint session namespace: ${endpoint.sessionNamespace}`);
+		sessionNamespaces.add(endpoint.sessionNamespace);
+		const agent = agentById.get(endpoint.agentId);
+		if (!agent) throw new Error(`endpoint ${endpoint.id} references unknown agent: ${endpoint.agentId}`);
+		if (!agent.endpointIds.includes(endpoint.id)) throw new Error(`endpoint ${endpoint.id} is not declared by agent ${endpoint.agentId}`);
+	}
+	for (const agent of manifest.agents) for (const endpointId of agent.endpointIds) {
+		const endpoint = manifest.endpoints.find(({ id }) => id === endpointId);
+		if (!endpoint) throw new Error(`agent ${agent.agentId} references unknown endpoint: ${endpointId}`);
+		if (endpoint.agentId !== agent.agentId) throw new Error(`endpoint ${endpointId} is bound to a different agent`);
+	}
+	const defaultAgent = agentById.get(manifest.defaultAgentId);
+	if (!defaultAgent) throw new Error(`default agent does not exist: ${manifest.defaultAgentId}`);
+	const defaultEndpoint = manifest.endpoints.find(({ id }) => id === manifest.defaultEndpointId);
+	if (!defaultEndpoint) throw new Error(`default endpoint does not exist: ${manifest.defaultEndpointId}`);
+	if (defaultEndpoint.agentId !== defaultAgent.agentId) throw new Error("default endpoint is not bound to the default agent");
+	if (!defaultEndpoint.enabled) throw new Error("default endpoint must be enabled");
+}
+function validateModuleSpecifier(moduleSpecifier) {
+	if (moduleSpecifier.trim() === "" || isAbsolute(moduleSpecifier) || /^[a-z][a-z+.-]*:/i.test(moduleSpecifier) || moduleSpecifier.includes("\0")) throw new Error(`invalid plugin module specifier: ${moduleSpecifier}`);
+	if ((moduleSpecifier.startsWith("./") || moduleSpecifier.startsWith("../")) && moduleSpecifier.split(/[\\/]/).includes("..")) throw new Error(`plugin module escapes deployment root: ${moduleSpecifier}`);
+}
+async function resolvePluginExport(module) {
+	const candidate = "default" in module ? module.default : module;
+	const plugin = typeof candidate === "function" ? await candidate() : candidate;
+	if (plugin === null || typeof plugin !== "object" || !("manifest" in plugin) || !("register" in plugin) || typeof plugin.register !== "function") throw new Error("plugin module default export is not a RivusPlugin or factory");
+	return plugin;
+}
+//#endregion
+//#region src/infrastructure/config/local-env-file.ts
+var LocalEnvFileError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "LocalEnvFileError";
+	}
+};
+async function loadMergedLocalEnvFile(filePath, overrideEnv) {
+	return mergeRivusDaemonEnv(await loadLocalEnvFile(filePath), overrideEnv);
+}
+async function loadLocalEnvFile(filePath) {
+	return parseLocalEnvFile(await readFile(filePath, "utf8"));
+}
+function parseLocalEnvFile(contents) {
+	const env = {};
+	const lines = contents.split(/\r?\n/);
+	for (let index = 0; index < lines.length; index += 1) {
+		const trimmed = lines[index].trim();
+		if (!trimmed || trimmed.startsWith("#")) continue;
+		const match = (trimmed.startsWith("export ") ? trimmed.slice(7).trimStart() : trimmed).match(/^([A-Za-z_][A-Za-z0-9_]*)=(.*)$/);
+		if (!match) throw new LocalEnvFileError(`Invalid env file line ${index + 1}`);
+		const key = match[1];
+		const rawValue = match[2];
+		env[key] = parseEnvValue(rawValue, index + 1);
+	}
+	return env;
+}
+function mergeRivusDaemonEnv(fileEnv, overrideEnv) {
+	const merged = { ...fileEnv };
+	for (const [key, value] of Object.entries(overrideEnv)) if (value !== void 0) merged[key] = value;
+	return merged;
+}
+function parseEnvValue(rawValue, lineNumber) {
+	const value = rawValue.trim();
+	if (!value) return "";
+	if (value.startsWith("'")) {
+		if (!value.endsWith("'")) throw new LocalEnvFileError(`Invalid single-quoted env value on line ${lineNumber}`);
+		return value.slice(1, -1).replaceAll("'\\''", "'");
+	}
+	if (value.startsWith("\"")) {
+		if (!value.endsWith("\"")) throw new LocalEnvFileError(`Invalid double-quoted env value on line ${lineNumber}`);
+		return unescapeDoubleQuotedValue(value.slice(1, -1));
+	}
+	return value;
+}
+function unescapeDoubleQuotedValue(value) {
+	return value.replace(/\\(["\\nrt])/g, (_match, escaped) => {
+		switch (escaped) {
+			case "n": return "\n";
+			case "r": return "\r";
+			case "t": return "	";
+			default: return escaped;
+		}
+	});
+}
+//#endregion
+//#region src/infrastructure/config/feishu-endpoint-credentials.ts
+var FeishuEndpointCredentialError = class extends Error {
+	name = "FeishuEndpointCredentialError";
+};
+function resolveFeishuEndpointCredentials(credentialRef, env) {
+	if (!credentialRef.startsWith("env:")) throw new FeishuEndpointCredentialError("Feishu endpoint credentialRef must use env:<PREFIX>");
+	const prefix = credentialRef.slice(4);
+	if (!/^[A-Z][A-Z0-9_]*$/.test(prefix)) throw new FeishuEndpointCredentialError(`Invalid environment prefix in credentialRef: ${credentialRef}`);
+	return Object.freeze({
+		appId: required$1(env, `${prefix}_APP_ID`),
+		appSecret: required$1(env, `${prefix}_APP_SECRET`)
+	});
+}
+function required$1(env, variable) {
+	const value = env[variable]?.trim();
+	if (!value) throw new FeishuEndpointCredentialError(`${variable} is required`);
+	return value;
+}
+//#endregion
+//#region src/infrastructure/config/rivus-deployment-manifest.ts
+var RivusDeploymentManifestError = class extends Error {
+	manifestPath;
+	name = "RivusDeploymentManifestError";
+	constructor(manifestPath, message, options) {
+		super(message, options);
+		this.manifestPath = manifestPath;
+	}
+};
+async function loadRivusDeploymentManifest(manifestPath, options = {}) {
+	const maxBytes = options.maxBytes ?? 1024 * 1024;
+	try {
+		const metadata = await stat(manifestPath);
+		if (!metadata.isFile()) throw new Error("deployment manifest must be a regular file");
+		if (metadata.size > maxBytes) throw new Error(`deployment manifest exceeds ${maxBytes} byte limit`);
+		const bytes = await readFile(manifestPath);
+		const text = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+		return parseManifest(JSON.parse(text));
+	} catch (cause) {
+		if (cause instanceof RivusDeploymentManifestError) throw cause;
+		throw new RivusDeploymentManifestError(manifestPath, `failed to load Rivus deployment manifest: ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+	}
+}
+function parseManifest(value) {
+	const root = record(value, "manifest");
+	exactKeys(root, [
+		"agents",
+		"automations",
+		"defaultAgentId",
+		"defaultEndpointId",
+		"endpoints",
+		"plugins"
+	], "manifest", ["automations"]);
+	const plugins = array(root.plugins, "manifest.plugins").map((entry, index) => {
+		const plugin = record(entry, `manifest.plugins[${index}]`);
+		exactKeys(plugin, [
+			"id",
+			"module",
+			"required"
+		], `manifest.plugins[${index}]`);
+		return Object.freeze({
+			id: string(plugin.id, `manifest.plugins[${index}].id`),
+			module: string(plugin.module, `manifest.plugins[${index}].module`),
+			required: boolean(plugin.required, `manifest.plugins[${index}].required`)
+		});
+	});
+	const agents = array(root.agents, "manifest.agents").map((entry, index) => {
+		const agent = record(entry, `manifest.agents[${index}]`);
+		exactKeys(agent, [
+			"agentId",
+			"endpointIds",
+			"memory",
+			"pluginId",
+			"profileId",
+			"skills",
+			"tools"
+		], `manifest.agents[${index}]`, ["memory"]);
+		const memory = agent.memory === void 0 ? void 0 : record(agent.memory, `manifest.agents[${index}].memory`);
+		if (memory) exactKeys(memory, ["scopes", "tool"], `manifest.agents[${index}].memory`);
+		const skills = record(agent.skills, `manifest.agents[${index}].skills`);
+		exactKeys(skills, ["allow"], `manifest.agents[${index}].skills`);
+		const tools = record(agent.tools, `manifest.agents[${index}].tools`);
+		exactKeys(tools, ["allow"], `manifest.agents[${index}].tools`);
+		return Object.freeze({
+			agentId: string(agent.agentId, `manifest.agents[${index}].agentId`),
+			endpointIds: Object.freeze(array(agent.endpointIds, `manifest.agents[${index}].endpointIds`).map((item, itemIndex) => string(item, `manifest.agents[${index}].endpointIds[${itemIndex}]`))),
+			...memory ? { memory: Object.freeze({
+				scopes: Object.freeze(array(memory.scopes, `manifest.agents[${index}].memory.scopes`).map((item, itemIndex) => memoryScope(item, `manifest.agents[${index}].memory.scopes[${itemIndex}]`))),
+				tool: boolean(memory.tool, `manifest.agents[${index}].memory.tool`)
+			}) } : {},
+			pluginId: string(agent.pluginId, `manifest.agents[${index}].pluginId`),
+			profileId: string(agent.profileId, `manifest.agents[${index}].profileId`),
+			skills: Object.freeze({ allow: Object.freeze(array(skills.allow, `manifest.agents[${index}].skills.allow`).map((item, itemIndex) => string(item, `manifest.agents[${index}].skills.allow[${itemIndex}]`))) }),
+			tools: Object.freeze({ allow: Object.freeze(array(tools.allow, `manifest.agents[${index}].tools.allow`).map((item, itemIndex) => string(item, `manifest.agents[${index}].tools.allow[${itemIndex}]`))) })
+		});
+	});
+	const endpoints = array(root.endpoints, "manifest.endpoints").map((entry, index) => {
+		const endpoint = record(entry, `manifest.endpoints[${index}]`);
+		exactKeys(endpoint, [
+			"agentId",
+			"baseUrl",
+			"credentialRef",
+			"enabled",
+			"experimental",
+			"groupPolicy",
+			"id",
+			"required",
+			"sessionNamespace",
+			"streamMinIntervalMs"
+		], `manifest.endpoints[${index}]`, ["experimental"]);
+		const experimental = endpoint.experimental === void 0 ? void 0 : record(endpoint.experimental, `manifest.endpoints[${index}].experimental`);
+		if (experimental) exactKeys(experimental, ["cotMessages"], `manifest.endpoints[${index}].experimental`);
+		return Object.freeze({
+			agentId: string(endpoint.agentId, `manifest.endpoints[${index}].agentId`),
+			baseUrl: string(endpoint.baseUrl, `manifest.endpoints[${index}].baseUrl`),
+			credentialRef: string(endpoint.credentialRef, `manifest.endpoints[${index}].credentialRef`),
+			enabled: boolean(endpoint.enabled, `manifest.endpoints[${index}].enabled`),
+			...experimental ? { experimental: Object.freeze({ cotMessages: boolean(experimental.cotMessages, `manifest.endpoints[${index}].experimental.cotMessages`) }) } : {},
+			groupPolicy: groupPolicy(endpoint.groupPolicy, `manifest.endpoints[${index}].groupPolicy`),
+			id: string(endpoint.id, `manifest.endpoints[${index}].id`),
+			required: boolean(endpoint.required, `manifest.endpoints[${index}].required`),
+			sessionNamespace: string(endpoint.sessionNamespace, `manifest.endpoints[${index}].sessionNamespace`),
+			streamMinIntervalMs: positiveInteger(endpoint.streamMinIntervalMs, `manifest.endpoints[${index}].streamMinIntervalMs`)
+		});
+	});
+	const automations = array(root.automations ?? [], "manifest.automations").map((entry, index) => {
+		const automation = record(entry, `manifest.automations[${index}]`);
+		exactKeys(automation, [
+			"agentId",
+			"delivery",
+			"enabled",
+			"id",
+			"required",
+			"schedule",
+			"templateId",
+			"timeZone"
+		], `manifest.automations[${index}]`);
+		const delivery = record(automation.delivery, `manifest.automations[${index}].delivery`);
+		exactKeys(delivery, [
+			"endpointId",
+			"targetRef",
+			"targetType"
+		], `manifest.automations[${index}].delivery`);
+		return Object.freeze({
+			agentId: string(automation.agentId, `manifest.automations[${index}].agentId`),
+			delivery: Object.freeze({
+				endpointId: string(delivery.endpointId, `manifest.automations[${index}].delivery.endpointId`),
+				targetRef: string(delivery.targetRef, `manifest.automations[${index}].delivery.targetRef`),
+				targetType: automationTargetType(delivery.targetType, `manifest.automations[${index}].delivery.targetType`)
+			}),
+			enabled: boolean(automation.enabled, `manifest.automations[${index}].enabled`),
+			id: string(automation.id, `manifest.automations[${index}].id`),
+			required: boolean(automation.required, `manifest.automations[${index}].required`),
+			schedule: string(automation.schedule, `manifest.automations[${index}].schedule`),
+			templateId: string(automation.templateId, `manifest.automations[${index}].templateId`),
+			timeZone: string(automation.timeZone, `manifest.automations[${index}].timeZone`)
+		});
+	});
+	return Object.freeze({
+		agents: Object.freeze(agents),
+		automations: Object.freeze(automations),
+		defaultAgentId: string(root.defaultAgentId, "manifest.defaultAgentId"),
+		defaultEndpointId: string(root.defaultEndpointId, "manifest.defaultEndpointId"),
+		endpoints: Object.freeze(endpoints),
+		plugins: Object.freeze(plugins)
+	});
+}
+function record(value, path) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error(`${path} must be an object`);
+	return value;
+}
+function array(value, path) {
+	if (!Array.isArray(value)) throw new Error(`${path} must be an array`);
+	return value;
+}
+function string(value, path) {
+	if (typeof value !== "string" || value.trim() === "") throw new Error(`${path} must be a non-empty string`);
+	return value;
+}
+function boolean(value, path) {
+	if (typeof value !== "boolean") throw new Error(`${path} must be a boolean`);
+	return value;
+}
+function positiveInteger(value, path) {
+	if (!Number.isSafeInteger(value) || value <= 0) throw new Error(`${path} must be a positive integer`);
+	return value;
+}
+function memoryScope(value, path) {
+	if (typeof value !== "string" || !MEMORY_SCOPES.includes(value)) throw new Error(`${path} must be conversation, agent-private, or shared-user-profile`);
+	return value;
+}
+function groupPolicy(value, path) {
+	if (value !== "mention-only" && value !== "ignore-unmentioned" && value !== "default-responder") throw new Error(`${path} must be mention-only, ignore-unmentioned, or default-responder`);
+	return value;
+}
+function automationTargetType(value, path) {
+	if (value !== "chat_id" && value !== "open_id" && value !== "user_id" && value !== "union_id" && value !== "email") throw new Error(`${path} must be chat_id, open_id, user_id, union_id, or email`);
+	return value;
+}
+function exactKeys(value, allowed, path, optional = []) {
+	const unexpected = Object.keys(value).find((key) => !allowed.includes(key));
+	if (unexpected) throw new Error(`${path} contains unsupported field: ${unexpected}`);
+	const missing = allowed.find((key) => !optional.includes(key) && !Object.hasOwn(value, key));
+	if (missing) throw new Error(`${path} is missing required field: ${missing}`);
+}
+//#endregion
+//#region src/infrastructure/plugin/node-rivus-plugin-module-loader.ts
+async function loadNodeRivusPluginModule(request) {
+	return await import(pathToFileURL(await resolveNodeRivusPluginModulePath(request)).href);
+}
+async function resolveNodeRivusPluginModulePath(request) {
+	const deploymentRoot = await realpath(request.deploymentRoot);
+	const resolvedRealpath = await realpath(createRequire(join(deploymentRoot, "package.json")).resolve(request.module));
+	if (!isWithin(deploymentRoot, resolvedRealpath)) throw new Error(`plugin module ${request.module} resolves outside deployment root: ${resolvedRealpath}`);
+	return resolvedRealpath;
+}
+function isWithin(root, candidate) {
+	const child = relative(root, candidate);
+	return child === "" || !child.startsWith(`..${sep}`) && child !== ".." && !isAbsolute(child);
+}
+//#endregion
 //#region src/infrastructure/config/rivus-daemon-config.ts
 var RivusDaemonConfigError = class {
 	variable;
@@ -86,69 +569,13 @@ function optionalPositiveInteger(value, variable, fallback) {
 function required(env, variable) {
 	const value = optional(env[variable]);
 	if (value) return Effect.succeed(value);
-	return Effect.fail(new RivusDaemonConfigError(variable, `${variable} is required`));
-}
-function optionalThinkingLevel(value) {
-	const normalized = optional(value);
-	if (!normalized) return Effect.succeed(void 0);
-	if (THINKING_LEVELS$1.has(normalized)) return Effect.succeed(normalized);
-	return Effect.fail(new RivusDaemonConfigError("PI_THINKING_LEVEL", "PI_THINKING_LEVEL must be one of off, minimal, low, medium, high, xhigh"));
-}
-//#endregion
-//#region src/infrastructure/config/local-env-file.ts
-var LocalEnvFileError = class extends Error {
-	constructor(message) {
-		super(message);
-		this.name = "LocalEnvFileError";
-	}
-};
-async function loadMergedLocalEnvFile(filePath, overrideEnv) {
-	return mergeRivusDaemonEnv(await loadLocalEnvFile(filePath), overrideEnv);
-}
-async function loadLocalEnvFile(filePath) {
-	return parseLocalEnvFile(await readFile(filePath, "utf8"));
-}
-function parseLocalEnvFile(contents) {
-	const env = {};
-	const lines = contents.split(/\r?\n/);
-	for (let index = 0; index < lines.length; index += 1) {
-		const trimmed = lines[index].trim();
-		if (!trimmed || trimmed.startsWith("#")) continue;
-		const match = (trimmed.startsWith("export ") ? trimmed.slice(7).trimStart() : trimmed).match(/^([A-Za-z_][A-Za-z0-9_]*)=(.*)$/);
-		if (!match) throw new LocalEnvFileError(`Invalid env file line ${index + 1}`);
-		const key = match[1];
-		const rawValue = match[2];
-		env[key] = parseEnvValue(rawValue, index + 1);
-	}
-	return env;
-}
-function mergeRivusDaemonEnv(fileEnv, overrideEnv) {
-	const merged = { ...fileEnv };
-	for (const [key, value] of Object.entries(overrideEnv)) if (value !== void 0) merged[key] = value;
-	return merged;
-}
-function parseEnvValue(rawValue, lineNumber) {
-	const value = rawValue.trim();
-	if (!value) return "";
-	if (value.startsWith("'")) {
-		if (!value.endsWith("'")) throw new LocalEnvFileError(`Invalid single-quoted env value on line ${lineNumber}`);
-		return value.slice(1, -1).replaceAll("'\\''", "'");
-	}
-	if (value.startsWith("\"")) {
-		if (!value.endsWith("\"")) throw new LocalEnvFileError(`Invalid double-quoted env value on line ${lineNumber}`);
-		return unescapeDoubleQuotedValue(value.slice(1, -1));
-	}
-	return value;
-}
-function unescapeDoubleQuotedValue(value) {
-	return value.replace(/\\(["\\nrt])/g, (_match, escaped) => {
-		switch (escaped) {
-			case "n": return "\n";
-			case "r": return "\r";
-			case "t": return "	";
-			default: return escaped;
-		}
-	});
+	return Effect.fail(new RivusDaemonConfigError(variable, `${variable} is required`));
+}
+function optionalThinkingLevel(value) {
+	const normalized = optional(value);
+	if (!normalized) return Effect.succeed(void 0);
+	if (THINKING_LEVELS$1.has(normalized)) return Effect.succeed(normalized);
+	return Effect.fail(new RivusDaemonConfigError("PI_THINKING_LEVEL", "PI_THINKING_LEVEL must be one of off, minimal, low, medium, high, xhigh"));
 }
 //#endregion
 //#region src/infrastructure/config/openclaw-env-import.ts
@@ -294,265 +721,58 @@ function readModelId(modelReference) {
 	const separator = modelReference.indexOf("/");
 	return separator >= 0 && separator < modelReference.length - 1 ? modelReference.slice(separator + 1) : void 0;
 }
-function inferFeishuBaseUrl(domain) {
-	return domain === "lark" ? DEFAULT_LARK_BASE_URL : DEFAULT_FEISHU_BASE_URL;
-}
-function quoteEnvValue(value) {
-	return `'${value.replaceAll("'", "'\\''")}'`;
-}
-function requiredString(record, key, path) {
-	const value = optionalString(record[key]);
-	if (!value) throw new OpenClawEnvImportError(`${path} is required`);
-	return value;
-}
-function optionalString(value) {
-	return typeof value === "string" && value.trim() ? value.trim() : void 0;
-}
-function asRecord(value, path) {
-	const record = optionalRecord(value);
-	if (!record) throw new OpenClawEnvImportError(`${path} must be an object`);
-	return record;
-}
-function optionalRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
-}
-function readPath(record, path) {
-	let value = record;
-	for (const segment of path) {
-		const current = optionalRecord(value);
-		if (!current) return;
-		value = current[segment];
-	}
-	return value;
-}
-//#endregion
-//#region src/application/daemon/rivus-daemon-shutdown-controller.ts
-const DEFAULT_SIGNALS = ["SIGINT", "SIGTERM"];
-function createRivusDaemonShutdownController(options) {
-	let shutdown;
-	const handle = (signal) => {
-		shutdown ??= Effect.runPromise(options.daemon.stop()).then(() => options.onStopped?.(signal)).catch(async (error) => {
-			await options.onError?.(error, signal);
-			throw error;
-		});
-		return shutdown;
-	};
-	return {
-		handle,
-		install: () => {
-			for (const signal of options.signals ?? DEFAULT_SIGNALS) options.signalSource.on(signal, () => {
-				handle(signal);
-			});
-		},
-		stopping: () => shutdown !== void 0
-	};
-}
-//#endregion
-//#region src/application/plugin/rivus-automation-runtime-definition.ts
-function resolveRivusAutomationRuntimeDefinition(definition, requestedToolIds, requestedSkillIds) {
-	const toolIds = Object.freeze([...new Set(requestedToolIds)].sort());
-	const toolsById = new Map(definition.tools.map((tool) => [tool.id, tool]));
-	const tools = Object.freeze(toolIds.map((toolId) => {
-		const tool = toolsById.get(toolId);
-		if (!tool) throw new Error(`Automation Runtime requests ungranted tool: ${toolId}`);
-		return tool;
-	}));
-	const skillIds = Object.freeze([...new Set(requestedSkillIds)].sort());
-	const skillsById = new Map(definition.skills.map((skill) => [skill.id, skill]));
-	const skills = Object.freeze(skillIds.map((skillId) => {
-		const skill = skillsById.get(skillId);
-		if (!skill) throw new Error(`Automation Runtime requests ungranted skill: ${skillId}`);
-		return skill;
-	}));
-	return deepFreeze({
-		...definition,
-		memory: {
-			scopes: [],
-			tool: false
-		},
-		skillGrantSet: {
-			revision: createHash("sha256").update(JSON.stringify({
-				parentRevision: definition.skillGrantSet.revision,
-				skillIds
-			})).digest("hex"),
-			skillIds
-		},
-		skills,
-		toolGrantSet: {
-			revision: createHash("sha256").update(JSON.stringify({
-				parentRevision: definition.toolGrantSet.revision,
-				toolIds
-			})).digest("hex"),
-			toolIds
-		},
-		tools
-	});
-}
-//#endregion
-//#region src/application/plugin/rivus-plugin-loader.ts
-var RivusPluginLoadError = class extends Error {
-	pluginId;
-	moduleSpecifier;
-	name = "RivusPluginLoadError";
-	constructor(pluginId, moduleSpecifier, message, options) {
-		super(message, options);
-		this.pluginId = pluginId;
-		this.moduleSpecifier = moduleSpecifier;
-	}
-};
-async function loadRivusDeployment(options) {
-	validateRivusDeploymentManifest(options.manifest);
-	const catalog = createRivusPluginCatalog();
-	const pluginStatuses = [];
-	const statusByPlugin = /* @__PURE__ */ new Map();
-	for (const declaration of options.manifest.plugins) try {
-		const plugin = await resolvePluginExport(await options.loadModule({
-			deploymentRoot: options.deploymentRoot,
-			module: declaration.module,
-			pluginId: declaration.id
-		}));
-		if (plugin.manifest.id !== declaration.id) throw new Error(`plugin manifest id ${plugin.manifest.id} does not match declaration ${declaration.id}`);
-		catalog.registerPlugin(plugin);
-		const status = Object.freeze({
-			id: declaration.id,
-			module: declaration.module,
-			required: declaration.required,
-			status: "loaded",
-			version: plugin.manifest.version
-		});
-		pluginStatuses.push(status);
-		statusByPlugin.set(declaration.id, status);
-	} catch (cause) {
-		const message = cause instanceof Error ? cause.message : String(cause);
-		if (declaration.required) throw new RivusPluginLoadError(declaration.id, declaration.module, `required plugin ${declaration.id} failed to load: ${message}`, { cause });
-		const status = Object.freeze({
-			error: message,
-			id: declaration.id,
-			module: declaration.module,
-			required: false,
-			status: "failed"
-		});
-		pluginStatuses.push(status);
-		statusByPlugin.set(declaration.id, status);
-	}
-	const agentStatuses = [];
-	const definitions = [];
-	for (const agent of options.manifest.agents) {
-		const pluginStatus = statusByPlugin.get(agent.pluginId);
-		if (pluginStatus.status === "failed") {
-			agentStatuses.push(Object.freeze({
-				agentId: agent.agentId,
-				pluginId: agent.pluginId,
-				profileId: agent.profileId,
-				reason: `plugin ${agent.pluginId} is unavailable: ${pluginStatus.error}`,
-				status: "disabled"
-			}));
-			continue;
-		}
-		try {
-			const definition = resolveRivusAgentDefinition(catalog, agent);
-			definitions.push(definition);
-			agentStatuses.push(Object.freeze({
-				agentId: agent.agentId,
-				definition,
-				pluginId: agent.pluginId,
-				profileId: agent.profileId,
-				status: "enabled"
-			}));
-		} catch (cause) {
-			const declaration = options.manifest.plugins.find(({ id }) => id === agent.pluginId);
-			const message = cause instanceof Error ? cause.message : String(cause);
-			if (declaration.required) throw new RivusPluginLoadError(declaration.id, declaration.module, `deployment ${agent.agentId} failed to resolve: ${message}`, { cause });
-			agentStatuses.push(Object.freeze({
-				agentId: agent.agentId,
-				pluginId: agent.pluginId,
-				profileId: agent.profileId,
-				reason: message,
-				status: "disabled"
-			}));
-		}
-	}
-	const agentStatusById = new Map(agentStatuses.map((agent) => [agent.agentId, agent]));
-	const automationTemplates = new Map(catalog.snapshot().automations.map((template) => [template.id, template]));
-	const automationDefinitions = [];
-	for (const automation of options.manifest.automations ?? []) {
-		const agent = agentStatusById.get(automation.agentId);
-		if (!agent || agent.status === "disabled" || !agent.definition) continue;
-		const template = automationTemplates.get(automation.templateId);
-		if (!template) throw new Error(`automation ${automation.id} references unknown template: ${automation.templateId}`);
-		if (template.pluginId !== agent.pluginId || template.profileId !== agent.profileId) throw new Error(`automation ${automation.id} template is not owned by agent profile ${agent.profileId}`);
-		automationDefinitions.push(deepFreeze({
-			...automation,
-			runtimeDefinition: resolveRivusAutomationRuntimeDefinition(agent.definition, template.requestedToolIds, template.requestedSkillIds),
-			template
-		}));
-	}
-	return Object.freeze({
-		agents: Object.freeze(agentStatuses),
-		automationDefinitions: Object.freeze(automationDefinitions),
-		catalog,
-		definitions: Object.freeze(definitions),
-		manifest: options.manifest,
-		plugins: Object.freeze(pluginStatuses)
-	});
-}
-function validateRivusDeploymentManifest(manifest) {
-	const pluginIds = /* @__PURE__ */ new Set();
-	for (const plugin of manifest.plugins) {
-		if (pluginIds.has(plugin.id)) throw new Error(`duplicate plugin declaration: ${plugin.id}`);
-		validateModuleSpecifier(plugin.module);
-		pluginIds.add(plugin.id);
-	}
-	const agentIds = /* @__PURE__ */ new Set();
-	const agentById = /* @__PURE__ */ new Map();
-	for (const agent of manifest.agents) {
-		if (agentIds.has(agent.agentId)) throw new Error(`duplicate agent deployment: ${agent.agentId}`);
-		agentIds.add(agent.agentId);
-		if (!pluginIds.has(agent.pluginId)) throw new Error(`agent ${agent.agentId} references undeclared plugin: ${agent.pluginId}`);
-		agentById.set(agent.agentId, agent);
-	}
-	const automationIds = /* @__PURE__ */ new Set();
-	for (const automation of manifest.automations ?? []) {
-		if (automationIds.has(automation.id)) throw new Error(`duplicate automation binding: ${automation.id}`);
-		automationIds.add(automation.id);
-		const agent = agentById.get(automation.agentId);
-		if (!agent) throw new Error(`automation ${automation.id} references unknown agent: ${automation.agentId}`);
-		const endpoint = manifest.endpoints.find(({ id }) => id === automation.delivery.endpointId);
-		if (!endpoint) throw new Error(`automation ${automation.id} references unknown delivery endpoint: ${automation.delivery.endpointId}`);
-		if (endpoint.agentId !== agent.agentId) throw new Error(`automation ${automation.id} delivery endpoint is bound to a different agent`);
-	}
-	const endpointIds = /* @__PURE__ */ new Set();
-	const sessionNamespaces = /* @__PURE__ */ new Set();
-	for (const endpoint of manifest.endpoints) {
-		if (endpointIds.has(endpoint.id)) throw new Error(`duplicate endpoint binding: ${endpoint.id}`);
-		endpointIds.add(endpoint.id);
-		if (sessionNamespaces.has(endpoint.sessionNamespace)) throw new Error(`duplicate endpoint session namespace: ${endpoint.sessionNamespace}`);
-		sessionNamespaces.add(endpoint.sessionNamespace);
-		const agent = agentById.get(endpoint.agentId);
-		if (!agent) throw new Error(`endpoint ${endpoint.id} references unknown agent: ${endpoint.agentId}`);
-		if (!agent.endpointIds.includes(endpoint.id)) throw new Error(`endpoint ${endpoint.id} is not declared by agent ${endpoint.agentId}`);
-	}
-	for (const agent of manifest.agents) for (const endpointId of agent.endpointIds) {
-		const endpoint = manifest.endpoints.find(({ id }) => id === endpointId);
-		if (!endpoint) throw new Error(`agent ${agent.agentId} references unknown endpoint: ${endpointId}`);
-		if (endpoint.agentId !== agent.agentId) throw new Error(`endpoint ${endpointId} is bound to a different agent`);
-	}
-	const defaultAgent = agentById.get(manifest.defaultAgentId);
-	if (!defaultAgent) throw new Error(`default agent does not exist: ${manifest.defaultAgentId}`);
-	const defaultEndpoint = manifest.endpoints.find(({ id }) => id === manifest.defaultEndpointId);
-	if (!defaultEndpoint) throw new Error(`default endpoint does not exist: ${manifest.defaultEndpointId}`);
-	if (defaultEndpoint.agentId !== defaultAgent.agentId) throw new Error("default endpoint is not bound to the default agent");
-	if (!defaultEndpoint.enabled) throw new Error("default endpoint must be enabled");
+function inferFeishuBaseUrl(domain) {
+	return domain === "lark" ? DEFAULT_LARK_BASE_URL : DEFAULT_FEISHU_BASE_URL;
 }
-function validateModuleSpecifier(moduleSpecifier) {
-	if (moduleSpecifier.trim() === "" || isAbsolute(moduleSpecifier) || /^[a-z][a-z+.-]*:/i.test(moduleSpecifier) || moduleSpecifier.includes("\0")) throw new Error(`invalid plugin module specifier: ${moduleSpecifier}`);
-	if ((moduleSpecifier.startsWith("./") || moduleSpecifier.startsWith("../")) && moduleSpecifier.split(/[\\/]/).includes("..")) throw new Error(`plugin module escapes deployment root: ${moduleSpecifier}`);
+function quoteEnvValue(value) {
+	return `'${value.replaceAll("'", "'\\''")}'`;
 }
-async function resolvePluginExport(module) {
-	const candidate = "default" in module ? module.default : module;
-	const plugin = typeof candidate === "function" ? await candidate() : candidate;
-	if (plugin === null || typeof plugin !== "object" || !("manifest" in plugin) || !("register" in plugin) || typeof plugin.register !== "function") throw new Error("plugin module default export is not a RivusPlugin or factory");
-	return plugin;
+function requiredString(record, key, path) {
+	const value = optionalString(record[key]);
+	if (!value) throw new OpenClawEnvImportError(`${path} is required`);
+	return value;
+}
+function optionalString(value) {
+	return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function asRecord(value, path) {
+	const record = optionalRecord(value);
+	if (!record) throw new OpenClawEnvImportError(`${path} must be an object`);
+	return record;
+}
+function optionalRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+function readPath(record, path) {
+	let value = record;
+	for (const segment of path) {
+		const current = optionalRecord(value);
+		if (!current) return;
+		value = current[segment];
+	}
+	return value;
+}
+//#endregion
+//#region src/application/daemon/rivus-daemon-shutdown-controller.ts
+const DEFAULT_SIGNALS = ["SIGINT", "SIGTERM"];
+function createRivusDaemonShutdownController(options) {
+	let shutdown;
+	const handle = (signal) => {
+		shutdown ??= Effect.runPromise(options.daemon.stop()).then(() => options.onStopped?.(signal)).catch(async (error) => {
+			await options.onError?.(error, signal);
+			throw error;
+		});
+		return shutdown;
+	};
+	return {
+		handle,
+		install: () => {
+			for (const signal of options.signals ?? DEFAULT_SIGNALS) options.signalSource.on(signal, () => {
+				handle(signal);
+			});
+		},
+		stopping: () => shutdown !== void 0
+	};
 }
 //#endregion
 //#region src/application/support/stable-id.ts
@@ -781,10 +1001,11 @@ async function createRivusDeploymentDaemon(options) {
 	const slotById = new Map(slots.map((slot) => [slot.definition.id, slot]));
 	let lifecycle = "stopped";
 	const canRunIntake = () => lifecycle === "running" || lifecycle === "degraded";
+	const canRunEndpointIntake = (slot) => (canRunIntake() || lifecycle === "starting") && (slot.lifecycle === "running" || slot.lifecycle === "starting") && (slot.adapter?.running() ?? false);
 	const handleEndpoint = async (endpointId, input) => {
 		const slot = slotById.get(endpointId);
 		if (!slot) throw new RivusDeploymentDaemonLifecycleError(`unknown endpoint: ${endpointId}`);
-		if (!canRunIntake() || slot.lifecycle !== "running" || !(slot.adapter?.running() ?? false)) throw new RivusDeploymentDaemonLifecycleError(`endpoint ${endpointId} cannot accept intake while ${slot.lifecycle}`);
+		if (!canRunEndpointIntake(slot)) throw new RivusDeploymentDaemonLifecycleError(`endpoint ${endpointId} cannot accept intake while ${slot.lifecycle}`);
 		return host.handleEndpoint(endpointId, input);
 	};
 	const endpointStatus = (slot) => Object.freeze({
@@ -946,204 +1167,6 @@ async function stopSlots(slots, errors) {
 	}
 }
 //#endregion
-//#region src/infrastructure/config/rivus-deployment-manifest.ts
-var RivusDeploymentManifestError = class extends Error {
-	manifestPath;
-	name = "RivusDeploymentManifestError";
-	constructor(manifestPath, message, options) {
-		super(message, options);
-		this.manifestPath = manifestPath;
-	}
-};
-async function loadRivusDeploymentManifest(manifestPath, options = {}) {
-	const maxBytes = options.maxBytes ?? 1024 * 1024;
-	try {
-		const metadata = await stat(manifestPath);
-		if (!metadata.isFile()) throw new Error("deployment manifest must be a regular file");
-		if (metadata.size > maxBytes) throw new Error(`deployment manifest exceeds ${maxBytes} byte limit`);
-		const bytes = await readFile(manifestPath);
-		const text = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
-		return parseManifest(JSON.parse(text));
-	} catch (cause) {
-		if (cause instanceof RivusDeploymentManifestError) throw cause;
-		throw new RivusDeploymentManifestError(manifestPath, `failed to load Rivus deployment manifest: ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
-	}
-}
-function parseManifest(value) {
-	const root = record(value, "manifest");
-	exactKeys(root, [
-		"agents",
-		"automations",
-		"defaultAgentId",
-		"defaultEndpointId",
-		"endpoints",
-		"plugins"
-	], "manifest", ["automations"]);
-	const plugins = array(root.plugins, "manifest.plugins").map((entry, index) => {
-		const plugin = record(entry, `manifest.plugins[${index}]`);
-		exactKeys(plugin, [
-			"id",
-			"module",
-			"required"
-		], `manifest.plugins[${index}]`);
-		return Object.freeze({
-			id: string(plugin.id, `manifest.plugins[${index}].id`),
-			module: string(plugin.module, `manifest.plugins[${index}].module`),
-			required: boolean(plugin.required, `manifest.plugins[${index}].required`)
-		});
-	});
-	const agents = array(root.agents, "manifest.agents").map((entry, index) => {
-		const agent = record(entry, `manifest.agents[${index}]`);
-		exactKeys(agent, [
-			"agentId",
-			"endpointIds",
-			"memory",
-			"pluginId",
-			"profileId",
-			"skills",
-			"tools"
-		], `manifest.agents[${index}]`, ["memory"]);
-		const memory = agent.memory === void 0 ? void 0 : record(agent.memory, `manifest.agents[${index}].memory`);
-		if (memory) exactKeys(memory, ["scopes", "tool"], `manifest.agents[${index}].memory`);
-		const skills = record(agent.skills, `manifest.agents[${index}].skills`);
-		exactKeys(skills, ["allow"], `manifest.agents[${index}].skills`);
-		const tools = record(agent.tools, `manifest.agents[${index}].tools`);
-		exactKeys(tools, ["allow"], `manifest.agents[${index}].tools`);
-		return Object.freeze({
-			agentId: string(agent.agentId, `manifest.agents[${index}].agentId`),
-			endpointIds: Object.freeze(array(agent.endpointIds, `manifest.agents[${index}].endpointIds`).map((item, itemIndex) => string(item, `manifest.agents[${index}].endpointIds[${itemIndex}]`))),
-			...memory ? { memory: Object.freeze({
-				scopes: Object.freeze(array(memory.scopes, `manifest.agents[${index}].memory.scopes`).map((item, itemIndex) => memoryScope(item, `manifest.agents[${index}].memory.scopes[${itemIndex}]`))),
-				tool: boolean(memory.tool, `manifest.agents[${index}].memory.tool`)
-			}) } : {},
-			pluginId: string(agent.pluginId, `manifest.agents[${index}].pluginId`),
-			profileId: string(agent.profileId, `manifest.agents[${index}].profileId`),
-			skills: Object.freeze({ allow: Object.freeze(array(skills.allow, `manifest.agents[${index}].skills.allow`).map((item, itemIndex) => string(item, `manifest.agents[${index}].skills.allow[${itemIndex}]`))) }),
-			tools: Object.freeze({ allow: Object.freeze(array(tools.allow, `manifest.agents[${index}].tools.allow`).map((item, itemIndex) => string(item, `manifest.agents[${index}].tools.allow[${itemIndex}]`))) })
-		});
-	});
-	const endpoints = array(root.endpoints, "manifest.endpoints").map((entry, index) => {
-		const endpoint = record(entry, `manifest.endpoints[${index}]`);
-		exactKeys(endpoint, [
-			"agentId",
-			"baseUrl",
-			"credentialRef",
-			"enabled",
-			"experimental",
-			"groupPolicy",
-			"id",
-			"required",
-			"sessionNamespace",
-			"streamMinIntervalMs"
-		], `manifest.endpoints[${index}]`, ["experimental"]);
-		const experimental = endpoint.experimental === void 0 ? void 0 : record(endpoint.experimental, `manifest.endpoints[${index}].experimental`);
-		if (experimental) exactKeys(experimental, ["cotMessages"], `manifest.endpoints[${index}].experimental`);
-		return Object.freeze({
-			agentId: string(endpoint.agentId, `manifest.endpoints[${index}].agentId`),
-			baseUrl: string(endpoint.baseUrl, `manifest.endpoints[${index}].baseUrl`),
-			credentialRef: string(endpoint.credentialRef, `manifest.endpoints[${index}].credentialRef`),
-			enabled: boolean(endpoint.enabled, `manifest.endpoints[${index}].enabled`),
-			...experimental ? { experimental: Object.freeze({ cotMessages: boolean(experimental.cotMessages, `manifest.endpoints[${index}].experimental.cotMessages`) }) } : {},
-			groupPolicy: groupPolicy(endpoint.groupPolicy, `manifest.endpoints[${index}].groupPolicy`),
-			id: string(endpoint.id, `manifest.endpoints[${index}].id`),
-			required: boolean(endpoint.required, `manifest.endpoints[${index}].required`),
-			sessionNamespace: string(endpoint.sessionNamespace, `manifest.endpoints[${index}].sessionNamespace`),
-			streamMinIntervalMs: positiveInteger(endpoint.streamMinIntervalMs, `manifest.endpoints[${index}].streamMinIntervalMs`)
-		});
-	});
-	const automations = array(root.automations ?? [], "manifest.automations").map((entry, index) => {
-		const automation = record(entry, `manifest.automations[${index}]`);
-		exactKeys(automation, [
-			"agentId",
-			"delivery",
-			"enabled",
-			"id",
-			"required",
-			"schedule",
-			"templateId",
-			"timeZone"
-		], `manifest.automations[${index}]`);
-		const delivery = record(automation.delivery, `manifest.automations[${index}].delivery`);
-		exactKeys(delivery, [
-			"endpointId",
-			"targetRef",
-			"targetType"
-		], `manifest.automations[${index}].delivery`);
-		return Object.freeze({
-			agentId: string(automation.agentId, `manifest.automations[${index}].agentId`),
-			delivery: Object.freeze({
-				endpointId: string(delivery.endpointId, `manifest.automations[${index}].delivery.endpointId`),
-				targetRef: string(delivery.targetRef, `manifest.automations[${index}].delivery.targetRef`),
-				targetType: automationTargetType(delivery.targetType, `manifest.automations[${index}].delivery.targetType`)
-			}),
-			enabled: boolean(automation.enabled, `manifest.automations[${index}].enabled`),
-			id: string(automation.id, `manifest.automations[${index}].id`),
-			required: boolean(automation.required, `manifest.automations[${index}].required`),
-			schedule: string(automation.schedule, `manifest.automations[${index}].schedule`),
-			templateId: string(automation.templateId, `manifest.automations[${index}].templateId`),
-			timeZone: string(automation.timeZone, `manifest.automations[${index}].timeZone`)
-		});
-	});
-	return Object.freeze({
-		agents: Object.freeze(agents),
-		automations: Object.freeze(automations),
-		defaultAgentId: string(root.defaultAgentId, "manifest.defaultAgentId"),
-		defaultEndpointId: string(root.defaultEndpointId, "manifest.defaultEndpointId"),
-		endpoints: Object.freeze(endpoints),
-		plugins: Object.freeze(plugins)
-	});
-}
-function record(value, path) {
-	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error(`${path} must be an object`);
-	return value;
-}
-function array(value, path) {
-	if (!Array.isArray(value)) throw new Error(`${path} must be an array`);
-	return value;
-}
-function string(value, path) {
-	if (typeof value !== "string" || value.trim() === "") throw new Error(`${path} must be a non-empty string`);
-	return value;
-}
-function boolean(value, path) {
-	if (typeof value !== "boolean") throw new Error(`${path} must be a boolean`);
-	return value;
-}
-function positiveInteger(value, path) {
-	if (!Number.isSafeInteger(value) || value <= 0) throw new Error(`${path} must be a positive integer`);
-	return value;
-}
-function memoryScope(value, path) {
-	if (typeof value !== "string" || !MEMORY_SCOPES.includes(value)) throw new Error(`${path} must be conversation, agent-private, or shared-user-profile`);
-	return value;
-}
-function groupPolicy(value, path) {
-	if (value !== "mention-only" && value !== "ignore-unmentioned" && value !== "default-responder") throw new Error(`${path} must be mention-only, ignore-unmentioned, or default-responder`);
-	return value;
-}
-function automationTargetType(value, path) {
-	if (value !== "chat_id" && value !== "open_id" && value !== "user_id" && value !== "union_id" && value !== "email") throw new Error(`${path} must be chat_id, open_id, user_id, union_id, or email`);
-	return value;
-}
-function exactKeys(value, allowed, path, optional = []) {
-	const unexpected = Object.keys(value).find((key) => !allowed.includes(key));
-	if (unexpected) throw new Error(`${path} contains unsupported field: ${unexpected}`);
-	const missing = allowed.find((key) => !optional.includes(key) && !Object.hasOwn(value, key));
-	if (missing) throw new Error(`${path} is missing required field: ${missing}`);
-}
-//#endregion
-//#region src/infrastructure/plugin/node-rivus-plugin-module-loader.ts
-async function loadNodeRivusPluginModule(request) {
-	const deploymentRoot = await realpath(request.deploymentRoot);
-	const resolvedRealpath = await realpath(createRequire(join(deploymentRoot, "package.json")).resolve(request.module));
-	if (!isWithin(deploymentRoot, resolvedRealpath)) throw new Error(`plugin module ${request.module} resolves outside deployment root: ${resolvedRealpath}`);
-	return await import(pathToFileURL(resolvedRealpath).href);
-}
-function isWithin(root, candidate) {
-	const child = relative(root, candidate);
-	return child === "" || !child.startsWith(`..${sep}`) && child !== ".." && !isAbsolute(child);
-}
-//#endregion
 //#region src/infrastructure/runtime/configured-rivus-deployment-daemon.ts
 async function createConfiguredRivusDeploymentDaemon(options) {
 	const manifest = await loadRivusDeploymentManifest(options.manifestPath, options.manifestOptions);
@@ -1452,6 +1475,10 @@ const USAGE = `Usage: rivus --bootstrap <module> [--manifest <rivus.config.json>
 
 Starts a local Rivus Agent daemon from an injected bootstrap module.
 
+Project commands:
+  rivus init [directory]
+  rivus doctor [directory] [--env-file <path>]
+
 Options:
   --bootstrap <module>  Module exporting createRivusDaemonProcess(context)
   --manifest <path>     Start the manifest-driven multi-agent deployment; bootstrap exports createRivusDeploymentAdapters(context)
@@ -2596,4 +2623,4 @@ function hasRecoveryRunner(daemon) {
 	return typeof daemon.openRecoveryControl === "function";
 }
 //#endregion
-export { OpenClawEnvImportError as C, loadRivusDaemonConfig as D, RivusDaemonConfigError as E, createRivusDaemonShutdownController as S, formatRivusEnvFile as T, createAgentInstanceRegistry as _, RivusDeploymentManifestError as a, loadRivusDeployment as b, RivusDeploymentDaemonLifecycleError as c, InvalidRivusEndpointBinding as d, createRivusAgentHost as f, AgentInstanceConflict as g, createAgentRuntimePool as h, loadNodeRivusPluginModule as i, RivusDeploymentReadinessError as l, AgentRuntimeDisposed as m, createRivusDeploymentCliProcess as n, loadRivusDeploymentManifest as o, AgentInstanceBusy as p, createConfiguredRivusDeploymentDaemon as r, RivusDeploymentAutomationReadinessError as s, runRivusDaemonCli as t, createRivusDeploymentDaemon as u, createStableId as v, createRivusEnvFromOpenClawConfig as w, validateRivusDeploymentManifest as x, RivusPluginLoadError as y };
+export { loadRivusDeployment as A, resolveNodeRivusPluginModulePath as C, resolveFeishuEndpointCredentials as D, FeishuEndpointCredentialError as E, loadMergedLocalEnvFile as O, loadNodeRivusPluginModule as S, loadRivusDeploymentManifest as T, OpenClawEnvImportError as _, RivusDeploymentDaemonLifecycleError as a, RivusDaemonConfigError as b, InvalidRivusEndpointBinding as c, AgentRuntimeDisposed as d, createAgentRuntimePool as f, createRivusDaemonShutdownController as g, createStableId as h, RivusDeploymentAutomationReadinessError as i, validateRivusDeploymentManifest as j, RivusPluginLoadError as k, createRivusAgentHost as l, createAgentInstanceRegistry as m, createRivusDeploymentCliProcess as n, RivusDeploymentReadinessError as o, AgentInstanceConflict as p, createConfiguredRivusDeploymentDaemon as r, createRivusDeploymentDaemon as s, runRivusDaemonCli as t, AgentInstanceBusy as u, createRivusEnvFromOpenClawConfig as v, RivusDeploymentManifestError as w, loadRivusDaemonConfig as x, formatRivusEnvFile as y };