@rivus/agent 0.15.0 → 0.15.1

package/dist/bootstrap/pi-feishu.js

@@ -1,5 +1,5 @@
 import { d as resolveInvocationAuthority, r as createPiSkillRuntime, s as createToolInputDigest, u as createInvocationAuthority } from "../chunks/rivus-tool.js";
-import { $t as openJsonlRecoveryControl, A as createScheduledAutomation, An as createLangfuseAgentTelemetry, Bn as createFeishuTopicContextResolver, Dn as createPiAgentLoop, Dt as createBackgroundSessionHostTools, Ei as openJsonFeishuSessionStore, En as createPiSessionRegistry, Gi as readPersistenceFile, Ii as createFeishuCardDeliveryReconciler, In as createJsonlAgentEventLog, Ji as mergePiProviderModelDeclaration, Jt as createFeishuPresentationPreparation, K as createRivusMemoryToolDescriptor, Ki as isRecord$4, Lt as createBackgroundSessionService, Nt as openJsonlBackgroundSessionDeliveryStore, Oi as openJsonlFeishuInboxRepository, Ot as createBackgroundSessionSupervisor, Pi as openJsonlFeishuCardDeliveryLedger, Qr as createUuidRunIds, Si as createJsonFetchRequest, Ti as createSessionScheduler, Tn as readAutomationPresentation, Ui as createToolBroker, Un as createConfiguredFeishuTextReplySender, W as createProjectMemoryPromptPreparer, Wi as openJsonlToolOperationLedger, Wn as createConfiguredFeishuCardRolloverRuntime, Xt as createAgentHarnessPooledRuntime, Yi as writeAtomicTextFile, Yt as createFeishuDeploymentEndpoint, Zr as createSystemClock, an as createAgentsMdInstructionsProvider, bn as createJsonFileFeishuCardTargetRegistry, c as createConfiguredFeishuAutomationCardSender, d as createHumanInteractionToolApprovalGateway, en as openJsonlToolOperationLedger$1, f as createHumanInteractionEndpointRegistry, g as loadRivusDeploymentManifest, hr as createLazyFeishuWebSocketEventDispatcher, ht as resolveFeishuDeliveryChatId, ii as createAgentHarness, j as AUTOMATION_SUPPRESSION_PREFIX, jn as resolveLangfuseTelemetryConfig, jt as openJsonlBackgroundSessionRepository, k as openJsonAutomationTickRepository, l as createRoutedHumanInteractionToolApprovalService, mn as createFeishuCotPublisher, mt as createConfiguredFeishuBackgroundSessionDelivery, n as createConfiguredFeishuHumanInteractionPresenter, o as createJsonlHumanInteractionRepository, on as createWorkspaceRootHandle, qi as mergePiProviderBaseUrlOverride, t as createHumanInteractionService, tn as createToolBroker$1, tr as createConfiguredFeishuOpenApiClient, u as createHumanInteractionModelChangeApproval, wt as resolveBackgroundSessionSupervisorIntervalMs, z as openJsonlAgentMemoryService } from "../chunks/src.js";
+import { $t as openJsonlRecoveryControl, A as createScheduledAutomation, An as createLangfuseAgentTelemetry, Bn as createFeishuTopicContextResolver, Dn as createPiAgentLoop, Dt as createBackgroundSessionHostTools, Ei as openJsonFeishuSessionStore, En as createPiSessionRegistry, Gi as readPersistenceFile, Hi as ToolInvocationDenied, Ii as createFeishuCardDeliveryReconciler, In as createJsonlAgentEventLog, Ji as mergePiProviderModelDeclaration, Jt as createFeishuPresentationPreparation, K as createRivusMemoryToolDescriptor, Ki as isRecord$4, Lt as createBackgroundSessionService, Nt as openJsonlBackgroundSessionDeliveryStore, Oi as openJsonlFeishuInboxRepository, Ot as createBackgroundSessionSupervisor, Pi as openJsonlFeishuCardDeliveryLedger, Qr as createUuidRunIds, Si as createJsonFetchRequest, Ti as createSessionScheduler, Tn as readAutomationPresentation, Ui as createToolBroker, Un as createConfiguredFeishuTextReplySender, W as createProjectMemoryPromptPreparer, Wi as openJsonlToolOperationLedger, Wn as createConfiguredFeishuCardRolloverRuntime, Xt as createAgentHarnessPooledRuntime, Yi as writeAtomicTextFile, Yt as createFeishuDeploymentEndpoint, Zr as createSystemClock, an as createAgentsMdInstructionsProvider, bn as createJsonFileFeishuCardTargetRegistry, c as createConfiguredFeishuAutomationCardSender, d as createHumanInteractionToolApprovalGateway, en as openJsonlToolOperationLedger$1, f as createHumanInteractionEndpointRegistry, g as loadRivusDeploymentManifest, hr as createLazyFeishuWebSocketEventDispatcher, ht as resolveFeishuDeliveryChatId, ii as createAgentHarness, j as AUTOMATION_SUPPRESSION_PREFIX, jn as resolveLangfuseTelemetryConfig, jt as openJsonlBackgroundSessionRepository, k as openJsonAutomationTickRepository, l as createRoutedHumanInteractionToolApprovalService, mn as createFeishuCotPublisher, mt as createConfiguredFeishuBackgroundSessionDelivery, n as createConfiguredFeishuHumanInteractionPresenter, o as createJsonlHumanInteractionRepository, on as createWorkspaceRootHandle, qi as mergePiProviderBaseUrlOverride, t as createHumanInteractionService, tn as createToolBroker$1, tr as createConfiguredFeishuOpenApiClient, u as createHumanInteractionModelChangeApproval, wt as resolveBackgroundSessionSupervisorIntervalMs, z as openJsonlAgentMemoryService } from "../chunks/src.js";
 import { I as resolveFeishuEndpointCredentials, J as migrateRivusModelManagementConfig, K as installRivusModelManagementCliLauncher, U as runDeploymentProcessEffect, X as loadMergedLocalEnvFile, Y as parseRivusModelManagementHomeConfig, q as installRivusRuntimeManagementSkill } from "../chunks/rivus-daemon-cli.js";
 import { t as createSha256Digest } from "../chunks/sha256-digest.js";
 import { a as toRivusModelManagementSubmission, i as projectRivusModelCliResponse, r as parseRivusModelManagementWireRequest, t as createRivusModelManagementFailure } from "../chunks/rivus-model-management-wire.js";
@@ -1833,6 +1833,7 @@ const TOOL_ID = "rivus.model.change";
 const TOOL_VERSION = "1";
 /** Reuses Broker policy, exact approval binding and its durable operation ledger. */
 function createModelChangeAuthorization(options) {
+	if (typeof options.managementAgentId !== "string" || options.managementAgentId.trim() === "") throw new Error("managementAgentId must be a non-empty string");
 	const serial = Effect.unsafeMakeSemaphore(1);
 	const digest = (value) => createToolInputDigest(value, options.digest);
 	const admissions = /* @__PURE__ */ new Map();
@@ -1869,7 +1870,7 @@ function createModelChangeAuthorization(options) {
 			request
 		};
 		const approved = approvedAuthorization(grant, principal, authorizationId, deadlineAt, digest);
-		const brokerAuthority = createModelChangeBrokerAuthority(run.authority, authorizationId);
+		const brokerAuthority = createModelChangeBrokerAuthority(run.authority, authorizationId, options.managementAgentId);
 		const authority = resolveInvocationAuthority(brokerAuthority);
 		const approval = {
 			agentId: authority.agentId,
@@ -1912,6 +1913,7 @@ function createModelChangeAuthorization(options) {
 			if (input.homeId !== grant.homeId || authority.endpointId !== grant.endpointId || authority.tenantKey !== grant.tenantKey || !authority.allowedActorOpenIds?.includes(grant.ownerId) || authority.allowedActorOpenIds.length !== 1) return rejected("owner_mismatch", "The current conversation is outside the model management grant.");
 			if (!grant.operations.includes(input.request.operation)) return rejected("operation_not_granted", "This model operation is outside the configured grant.");
 			if (input.current.provider !== grant.provider || input.request.target && input.request.target.provider !== grant.provider || input.current.bindingRevision !== grant.bindingRevision) return rejected("binding_changed", "The model provider or binding is outside the current grant.");
+			if (!authority.toolGrantSet.toolIds.includes(TOOL_ID)) return yield* Effect.fail(new ToolInvocationDenied(`tool is not granted for this run: ${TOOL_ID}`));
 			const principal = {
 				homeId: grant.homeId,
 				ownerId: grant.ownerId,
@@ -2010,11 +2012,12 @@ function authorizationIdentity(digest, grant, principal, request) {
 		request
 	});
 }
-function createModelChangeBrokerAuthority(run, authorizationId) {
+function createModelChangeBrokerAuthority(run, authorizationId, managementAgentId) {
 	const authority = resolveInvocationAuthority(run);
 	const operationIdentity = `model-change:${authorizationId}`;
 	return createInvocationAuthority({
 		...authority,
+		agentId: managementAgentId,
 		instanceId: operationIdentity,
 		runId: operationIdentity,
 		sessionKey: operationIdentity
@@ -3473,7 +3476,7 @@ async function openPiModelManagementDeployment(options) {
 	const statePath = join(managementDirectory, "model-state.json");
 	const markerPath = join(managementDirectory, "legacy-export.json");
 	if (!configuration.enabled && await readPersistenceFile(statePath) === void 0) return void 0;
-	if (options.agentCount !== 1) throw new Error("Model management supports exactly one Agent per Home.");
+	if (!Number.isSafeInteger(options.agentCount) || options.agentCount < 1) throw new Error("Model management requires a positive integer Agent count per Home.");
 	const homeId = createSha256Digest(await realpath(options.stateDirectory));
 	const runtimeVersion = options.runtimeVersion ?? JSON.parse(await readFile(new URL("../package.json", import.meta.resolve("@rivus/agent")), "utf8")).version;
 	const clock = { now: () => (/* @__PURE__ */ new Date()).toISOString() };
@@ -3587,6 +3590,7 @@ async function openPiModelManagementDeployment(options) {
 				try: () => readPiModelManagementGrant(options, homeId, state.current),
 				catch: (error) => error
 			}) },
+			managementAgentId: options.agentId,
 			operations,
 			resolveWorkerRun: ({ grant: currentGrant, principal, request }) => Effect.sync(() => ({
 				authority: createInvocationAuthority({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rivus/agent",
-  "version": "0.15.0",
+  "version": "0.15.1",
   "description": "A local agent daemon core built around a usable agent harness and domain events.",
   "type": "module",
   "license": "MIT",

package/skills/runtime-management/SKILL.md

@@ -29,6 +29,10 @@ rivus model status --request <request-id> --json
 
 ## Set a default model
 
+The default is shared by every Agent in the current Home, including their background Sessions. Describe that scope when
+submitting a change. If the user asks to change only one Agent, explain that per-Agent overrides are unsupported and
+resolve the requested scope before submitting a Home-wide change.
+
 Use the exact `provider/model` value confirmed by the Host. First obtain the current `revision`, then submit one request
 with a fresh request id: