@rivus/agent 0.6.0 → 0.6.1

package/dist/index.js

@@ -1,8 +1,10 @@
 import { a as createAgentLoopSkillExecutionStart, c as createAgentLoopToolExecutionEnd, d as createAsyncIterableAgentLoop, f as createEventAgentLoop, i as createAgentLoopSkillExecutionEnd, l as createAgentLoopToolExecutionStart, m as createTextAgentLoopFromCallback, n as createAgentLoopModelExecutionEnd, o as createAgentLoopTextDelta, p as createTextAgentLoop, r as createAgentLoopModelExecutionStart, s as createAgentLoopThinkingDelta, t as createAgentLoopFromCallback, u as createAgentLoopToolExecutionUpdate } from "./agent-loop.js";
-import { a as RIVUS_MEMORY_TOOL_ID, c as createMemoryNamespace, d as InvalidRivusPlugin, f as RIVUS_PLUGIN_API_VERSION, i as MEMORY_SCOPES, l as createRivusMemoryToolContract, m as requiresToolApproval, n as resolveRivusAgentDefinition, o as RIVUS_MEMORY_TOOL_PLUGIN_ID, p as RivusToolInputRejected, s as RIVUS_MEMORY_TOOL_VERSION, t as createRivusPluginCatalog, u as restrictMemoryScopesForAudience } from "./rivus-plugin-registry.js";
+import { a as createMemoryNamespace, c as InvalidRivusPlugin, d as requiresToolApproval, i as RIVUS_MEMORY_TOOL_VERSION, l as RIVUS_PLUGIN_API_VERSION, n as RIVUS_MEMORY_TOOL_ID, o as createRivusMemoryToolContract, r as RIVUS_MEMORY_TOOL_PLUGIN_ID, s as restrictMemoryScopesForAudience, t as MEMORY_SCOPES, u as RivusToolInputRejected } from "./agent-memory.js";
+import { n as resolveRivusAgentDefinition, t as createRivusPluginCatalog } from "./rivus-plugin-registry.js";
 import { A as CardPresentationTransitionDenied, B as FeishuEndpointCredentialError, C as loadRivusDaemonConfig, D as loadRivusDeploymentManifest, E as RivusDeploymentManifestError, F as completeCardPresentationHandoff, G as validateRivusDeploymentManifest, I as createCardPresentationChain, L as failCardPresentationHandoff, M as activeCardPresentation, N as beginCardPresentationHandoff, O as DEFAULT_CARD_STREAM_LEASE_MS, P as compensateCardPresentationHandoff, R as isCardPresentationHandoffDue, S as RivusDaemonConfigError, U as RivusPluginLoadError, V as resolveFeishuEndpointCredentials, W as loadRivusDeployment, _ as createStableId, a as InvalidRivusProjectSpace, b as createRivusEnvFromOpenClawConfig, c as RivusDeploymentReadinessError, d as createRivusAgentHost, f as AgentInstanceBusy, g as createAgentInstanceRegistry, h as AgentInstanceConflict, i as resolveRivusProjectSpace, j as acceptsCardPresentationProgress, k as createFeishuCardRollover, l as createRivusDeploymentDaemon, m as createAgentRuntimePool, n as createRivusDeploymentCliProcess, o as RivusDeploymentAutomationReadinessError, p as AgentRuntimeDisposed, r as createConfiguredRivusDeploymentDaemon, s as RivusDeploymentDaemonLifecycleError, t as runRivusDaemonCli, u as InvalidRivusEndpointBinding, v as createRivusDaemonShutdownController, w as loadNodeRivusPluginModule, x as formatRivusEnvFile, y as OpenClawEnvImportError, z as markCardPresentationTerminal } from "./rivus-daemon-cli.js";
+import { a as InvalidInvocationAuthority, i as normalizeStableJson, n as InvalidToolInput, o as createInvocationAuthority, r as createToolInputDigest, s as resolveInvocationAuthority, t as InvalidStableJson } from "./tool-input-digest.js";
 import { n as assertRivusPluginConforms, r as createFakeRivusPlugin, t as RivusPluginConformanceError } from "./rivus-plugin-testkit.js";
-import { Cause, Deferred, Effect, Exit, Fiber, Option, Stream } from "effect";
+import { Cause, Deferred, Effect, Either, Exit, Fiber, Option, Stream } from "effect";
 import { createHash, randomUUID } from "node:crypto";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { appendFile, lstat, mkdir, readFile, readdir, realpath, rename, stat, unlink, writeFile } from "node:fs/promises";
@@ -14,7 +16,6 @@ import { resourceFromAttributes } from "@opentelemetry/resources";
 import { BatchSpanProcessor } from "@opentelemetry/sdk-trace-base";
 import { NodeTracerProvider } from "@opentelemetry/sdk-trace-node";
 import { ROOT_CONTEXT, SpanStatusCode, trace } from "@opentelemetry/api";
-import { Unsafe } from "typebox";
 //#region src/application/support/serial-executor.ts
 function createSerialExecutor() {
 	let tail = Promise.resolve();
@@ -1935,6 +1936,9 @@ function encodeSegment(value) {
 }
 //#endregion
 //#region src/application/feishu/feishu-message-intake.ts
+function readTenantKey(payload) {
+	return payload.event.sender?.tenant_key ?? payload.header?.tenant_key ?? "";
+}
 var UnsupportedFeishuMessage = class extends Error {
 	messageType;
 	name = "UnsupportedFeishuMessage";
@@ -2011,7 +2015,7 @@ function toSessionReference(payload, options) {
 	return {
 		agentId: options.agentId,
 		chatId: payload.event.message.chat_id,
-		tenantKey: payload.event.sender?.tenant_key ?? payload.header?.tenant_key ?? "",
+		tenantKey: readTenantKey(payload),
 		...payload.event.message.thread_id ? { threadId: payload.event.message.thread_id } : {}
 	};
 }
@@ -2092,6 +2096,7 @@ function createFeishuAgentDaemon(options) {
 		handleMessage: (payload, handleOptions) => {
 			let dedupeMessageId;
 			const sideEffectsDisabled = handleOptions?.sideEffects === "disabled";
+			const finalizeRun = options.finalizeRun ?? (() => Effect.void);
 			const prepareRun = sideEffectsDisabled ? void 0 : options.prepareRun;
 			const publish = sideEffectsDisabled ? () => Effect.void : options.publish;
 			const publishRunUpdate = sideEffectsDisabled ? void 0 : options.publishRunUpdate;
@@ -2111,12 +2116,14 @@ function createFeishuAgentDaemon(options) {
 				}
 				if (inbound.type === "cancel_run") return yield* cancelRun(inbound);
 				const projector = createFeishuStreamProjector();
+				const acceptedRunIds = /* @__PURE__ */ new Set();
 				const command = {
 					...inbound.command,
 					...options.resolveInvocation ? { invocation: options.resolveInvocation(payload, inbound.conversationId) } : {}
 				};
 				const result = yield* execution.promptWithUpdates(command, (update) => Effect.gen(function* () {
 					const event = update.event;
+					if (event.type === "agent_run_accepted") acceptedRunIds.add(event.runId);
 					if (event.type === "agent_run_accepted" && prepareRun) yield* prepareRun({
 						messageId: inbound.messageId,
 						prompt: event.prompt,
@@ -2126,7 +2133,7 @@ function createFeishuAgentDaemon(options) {
 					});
 					if (publishRunUpdate) yield* publishRunUpdate(update);
 					for (const action of projector.applyUpdate(update)) yield* publish(action);
-				}));
+				})).pipe(Effect.ensuring(Effect.forEach(acceptedRunIds, (runId) => finalizeRun(runId), { discard: true })));
 				return {
 					finalText: result.finalText,
 					messageId: inbound.messageId,
@@ -2226,9 +2233,8 @@ function createFeishuMessageQueue(options) {
 	};
 }
 function createLaneKey(payload) {
-	const tenantKey = payload.event.sender?.tenant_key ?? payload.header?.tenant_key ?? "unknown-tenant";
 	const message = payload.event.message;
-	return `${tenantKey}:${message.chat_id}:${message.thread_id ?? message.chat_id}`;
+	return `${readTenantKey(payload)}:${message.chat_id}:${message.thread_id ?? message.chat_id}`;
 }
 //#endregion
 //#region src/application/feishu/feishu-group-policy.ts
@@ -2250,7 +2256,10 @@ function createFeishuMessageWorker(options) {
 		const results = [];
 		while (options.queue.pending() > 0) {
 			const batchSize = Math.min(concurrency, options.queue.pending());
-			const batch = yield* Effect.all(Array.from({ length: batchSize }, () => options.queue.drainOne()), { concurrency: "unbounded" });
+			const outcomes = yield* Effect.all(Array.from({ length: batchSize }, () => options.queue.drainOne().pipe(Effect.either)), { concurrency: "unbounded" });
+			const failures = outcomes.filter(Either.isLeft).map((outcome) => outcome.left);
+			if (failures.length > 0) yield* Effect.fail(failures.length === 1 ? failures[0] : new AggregateError(failures, "Feishu message batch failed"));
+			const batch = outcomes.filter(Either.isRight).map((outcome) => outcome.right);
 			if (batch.every((result) => !result.handled)) break;
 			for (const result of batch) if (result.handled) results.push(result);
 		}
@@ -2654,6 +2663,7 @@ function createFeishuAgentRuntime(options) {
 	const daemon = createFeishuAgentDaemon({
 		agentId: options.agentId,
 		...options.botOpenId ? { botOpenId: options.botOpenId } : {},
+		...options.finalizeRun ? { finalizeRun: options.finalizeRun } : {},
 		harness,
 		...options.prepareRun ? { prepareRun: options.prepareRun } : {},
 		publish: options.publish
@@ -2720,7 +2730,7 @@ function isRetryableFeishuMessageError(error) {
 	return !(error instanceof AgentRunCancelled || error instanceof UnsupportedFeishuMessage || error instanceof InvalidFeishuMessageContent || error instanceof InvalidFeishuSessionReference);
 }
 function summarizeReceiveMessage(payload) {
-	const tenantKey = payload.event.sender?.tenant_key ?? payload.header?.tenant_key;
+	const tenantKey = readTenantKey(payload);
 	return {
 		chatId: payload.event.message.chat_id,
 		messageId: payload.event.message.message_id,
@@ -3135,13 +3145,6 @@ function createFeishuCardTargetPreparation(options) {
 		yield* options.presentations.bindRun(run, target);
 	});
 }
-function createConfiguredFeishuCardKitTargetPreparation(options) {
-	const creator = createConfiguredFeishuCardKitTargetCreator(options);
-	return createFeishuCardTargetPreparation({
-		createTarget: (run) => creator.createTarget(run),
-		presentations: options.presentations
-	});
-}
 function createConfiguredFeishuCardKitTargetCreator(options) {
 	return createFeishuCardKitOpenApiTargetCreator({
 		baseUrl: options.config.feishu.baseUrl,
@@ -3293,6 +3296,7 @@ function createConfiguredRivusDaemonBootstrap(options) {
 		...options.botOpenId ? { botOpenId: options.botOpenId } : {},
 		clock: options.clock,
 		eventSinks: [options.eventLog],
+		finalizeRun: (runId) => cardRollover.rollover.releaseRun(runId),
 		...options.inboxRepository ? { inboxRepository: options.inboxRepository } : {},
 		...options.initialEvents ? { initialEvents: options.initialEvents } : {},
 		...options.initialRunStates ? { initialRunStates: options.initialRunStates } : {},
@@ -4081,62 +4085,6 @@ function resolveContentMode(value) {
 	throw new LangfuseTelemetryConfigError("RIVUS_TELEMETRY_CONTENT must be either \"metadata-only\" or \"redacted\"");
 }
 //#endregion
-//#region src/infrastructure/pi/pi-skill-tool.ts
-const PI_SKILL_READER_TOOL_NAME = "rivus_read_skill";
-function createPiSkillRuntime(skills) {
-	if (skills.length === 0) return Object.freeze({ prompt: "" });
-	const skillsById = new Map(skills.map((skill) => [skill.id, skill]));
-	const prompt = [
-		"Granted Skills are versioned instructions loaded on demand.",
-		`Before following a Skill, call ${PI_SKILL_READER_TOOL_NAME} with its exact ID and follow the returned content.`,
-		"Granted Skill catalog:",
-		...skills.map((skill) => `- ${skill.id} | ${skill.title} | v${skill.version} | ${skill.digest}`)
-	].join("\n");
-	const tool = {
-		description: "Read the full versioned instructions for one Skill granted to this Agent Runtime.",
-		execute: async (_callId, input) => {
-			const skillId = readSkillId$1(input);
-			const skill = skillsById.get(skillId);
-			if (!skill) throw new Error(`Skill is not granted: ${skillId}`);
-			const details = {
-				contentLength: skill.content.length,
-				digest: skill.digest,
-				skillId: skill.id,
-				title: skill.title,
-				version: skill.version
-			};
-			return {
-				content: [{
-					text: skill.content,
-					type: "text"
-				}],
-				details
-			};
-		},
-		executionMode: "sequential",
-		label: "Read granted Skill",
-		name: PI_SKILL_READER_TOOL_NAME,
-		parameters: Unsafe({
-			additionalProperties: false,
-			properties: { skillId: {
-				description: "Exact Skill ID from the granted Skill catalog.",
-				type: "string"
-			} },
-			required: ["skillId"],
-			type: "object"
-		}),
-		promptSnippet: `${PI_SKILL_READER_TOOL_NAME}: read one granted Skill by exact ID`
-	};
-	return Object.freeze({
-		prompt,
-		tool
-	});
-}
-function readSkillId$1(input) {
-	if (input === null || typeof input !== "object" || Array.isArray(input) || typeof input.skillId !== "string") throw new Error("Skill reader input requires a string skillId");
-	return input.skillId;
-}
-//#endregion
 //#region src/infrastructure/pi/pi-agent-loop.ts
 function createPiAgentLoop(options) {
 	return createAsyncIterableAgentLoop({ run: (input) => runPiSession(input, options) });
@@ -5029,6 +4977,15 @@ function readRedactedString(serialized) {
 function createFixedClock(now) {
 	return { now: Effect.succeed(now) };
 }
+function createTestClock(initial) {
+	let now = initial;
+	return {
+		advance: (ms) => {
+			now = new Date(now.getTime() + ms);
+		},
+		now: Effect.suspend(() => Effect.succeed(now))
+	};
+}
 function createSequenceRunIds(runIds) {
 	let index = 0;
 	return { next: Effect.sync(() => {
@@ -5202,72 +5159,6 @@ function freezeView(view) {
 	return Object.freeze(view);
 }
 //#endregion
-//#region src/application/delegation/tool-authority.ts
-const authorities = /* @__PURE__ */ new WeakMap();
-var InvalidInvocationAuthority = class extends Error {
-	name = "InvalidInvocationAuthority";
-};
-function createInvocationAuthority(authority) {
-	if (!authority.sourceMessageId.trim()) throw new InvalidInvocationAuthority("invocation authority requires a trusted source message id");
-	const reference = Object.freeze({ id: `authority:${randomUUID()}` });
-	const memory = authority.memory ? Object.freeze({
-		...authority.memory,
-		scopes: Object.freeze(restrictMemoryScopesForAudience(authority.memory.scopes, authority.memory.audience))
-	}) : void 0;
-	authorities.set(reference, Object.freeze({
-		...authority,
-		...memory ? { memory } : {}
-	}));
-	return reference;
-}
-function resolveInvocationAuthority(reference) {
-	const authority = authorities.get(reference);
-	if (!authority) throw new InvalidInvocationAuthority("invocation authority was not issued by this host");
-	return authority;
-}
-//#endregion
-//#region src/application/delegation/tool-input-digest.ts
-var InvalidStableJson = class extends Error {
-	name = "InvalidStableJson";
-};
-var InvalidToolInput = class extends InvalidStableJson {
-	name = "InvalidToolInput";
-};
-function createToolInputDigest(input) {
-	let canonical;
-	try {
-		canonical = normalizeStableJson(input);
-	} catch (error) {
-		if (error instanceof InvalidStableJson) throw new InvalidToolInput(error.message);
-		throw error;
-	}
-	return `sha256:${createHash("sha256").update(JSON.stringify(canonical)).digest("hex")}`;
-}
-function normalizeStableJson(value) {
-	return canonicalize(value, /* @__PURE__ */ new Set());
-}
-function canonicalize(value, ancestors) {
-	if (value === null || typeof value === "string" || typeof value === "boolean") return value;
-	if (typeof value === "number") {
-		if (!Number.isFinite(value)) throw new InvalidStableJson("stable JSON numbers must be finite");
-		return Object.is(value, -0) ? 0 : value;
-	}
-	if (typeof value !== "object") throw new InvalidStableJson("value must contain only stable JSON values");
-	if (ancestors.has(value)) throw new InvalidStableJson("stable JSON must not contain cycles");
-	ancestors.add(value);
-	try {
-		if (Array.isArray(value)) return Array.from({ length: value.length }, (_, index) => {
-			if (!Object.hasOwn(value, index)) throw new InvalidStableJson("stable JSON arrays must not contain holes");
-			return canonicalize(value[index], ancestors);
-		});
-		const prototype = Object.getPrototypeOf(value);
-		if (prototype !== Object.prototype && prototype !== null) throw new InvalidStableJson("stable JSON objects must be plain objects");
-		return Object.fromEntries(Object.entries(value).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([key, entry]) => [key, canonicalize(entry, ancestors)]));
-	} finally {
-		ancestors.delete(value);
-	}
-}
-//#endregion
 //#region src/application/delegation/tool-operation-ledger.ts
 function createToolOperationLedger(options = {}) {
 	const records = new Map(options.initial?.map((record) => [record.operationId, structuredClone(record)]) ?? []);
@@ -5618,6 +5509,7 @@ function createFeishuDeploymentEndpoint(options) {
 		agentId: options.agentId,
 		botOpenId: options.botOpenId,
 		execution: execution.port,
+		...options.finalizeRun ? { finalizeRun: options.finalizeRun } : {},
 		...options.interactions ? { interactions: options.interactions } : {},
 		...options.prepareRun ? { prepareRun: options.prepareRun } : {},
 		publish: options.publish,
@@ -5791,7 +5683,7 @@ function createInvocation(payload, endpointId, memoryTenantId, conversationId, p
 			tenantId: memoryTenantId
 		} } : {},
 		sourceMessageId: payload.event.message.message_id,
-		tenantKey: payload.event.sender?.tenant_key ?? payload.header?.tenant_key ?? ""
+		tenantKey: readTenantKey(payload)
 	};
 }
 function namespaceSessionKey(namespace, sessionKey) {
@@ -7018,112 +6910,6 @@ function assertTimestamp(value, label) {
 	if (!Number.isFinite(Date.parse(value))) throw new HumanInteractionTransitionDenied(`${label} must be an ISO timestamp`);
 }
 //#endregion
-//#region src/infrastructure/pi/pi-tool-proxy.ts
-function createPiToolProxyDefinitions(options) {
-	const names = /* @__PURE__ */ new Set();
-	return options.tools.map((tool) => {
-		const name = toPiToolName(tool.id);
-		if (names.has(name)) throw new Error(`Pi tool name collision: ${name}`);
-		names.add(name);
-		return {
-			description: tool.description,
-			execute: async (callId, input, signal) => {
-				const activeInput = options.getActiveInput();
-				const invocation = activeInput?.invocation;
-				if (!activeInput || !invocation) throw new Error(`tool ${tool.id} requires an active agent run with a trusted invocation`);
-				if (!invocation.tenantKey) throw new Error(`tool ${tool.id} requires a trusted tenant identity`);
-				throwIfAborted(signal ?? activeInput.abortSignal);
-				const inputDigest = createToolInputDigest(input);
-				const operationId = createBoundId("operation", {
-					agentId: options.agentId,
-					inputDigest,
-					instanceId: options.instanceId,
-					sourceMessageId: invocation.sourceMessageId,
-					toolId: tool.id,
-					toolVersion: tool.version
-				});
-				const approvalId = createBoundId("approval", {
-					callId,
-					operationId,
-					runId: activeInput.runId
-				});
-				if (requiresToolApproval(tool.risk)) {
-					if (invocation.allowedActorOpenIds.length === 0) throw new Error(`tool ${tool.id} requires at least one trusted approval actor`);
-					await options.approvals.requestApproval({
-						agentId: options.agentId,
-						allowedActorOpenIds: invocation.allowedActorOpenIds,
-						approvalId,
-						callId,
-						endpointId: invocation.endpointId,
-						inputDigest,
-						instanceId: options.instanceId,
-						operationId,
-						risk: tool.risk,
-						runId: activeInput.runId,
-						sessionKey: activeInput.sessionKey,
-						signal: signal ?? activeInput.abortSignal,
-						sourceMessageId: invocation.sourceMessageId,
-						tenantKey: invocation.tenantKey,
-						toolId: tool.id,
-						toolVersion: tool.version
-					});
-					throwIfAborted(signal ?? activeInput.abortSignal);
-				}
-				const result = await options.broker.execute({
-					authority: createInvocationAuthority({
-						agentId: options.agentId,
-						instanceId: options.instanceId,
-						...invocation.memory ? { memory: {
-							...invocation.memory,
-							scopes: options.memoryScopes ?? []
-						} } : {},
-						runId: activeInput.runId,
-						sessionKey: activeInput.sessionKey,
-						sourceMessageId: invocation.sourceMessageId,
-						tenantKey: invocation.tenantKey,
-						toolGrantSet: options.toolGrantSet
-					}),
-					callId,
-					input,
-					operationId,
-					...requiresToolApproval(tool.risk) ? { approvalId } : {},
-					toolId: tool.id,
-					version: tool.version
-				});
-				return {
-					content: [{
-						text: stringifyToolResult(result),
-						type: "text"
-					}],
-					details: result
-				};
-			},
-			executionMode: "sequential",
-			label: tool.id,
-			name,
-			parameters: Unsafe(tool.inputSchema),
-			promptSnippet: `${name}: ${tool.description}`
-		};
-	});
-}
-function createPiToolNameResolver(tools) {
-	const toolIdsByPiName = new Map(tools.map((tool) => [toPiToolName(tool.id), tool.id]));
-	return (toolName) => toolIdsByPiName.get(toolName) ?? toolName;
-}
-function toPiToolName(toolId) {
-	return `rivus_${toolId.replace(/[^a-zA-Z0-9_-]/g, "_")}`;
-}
-function createBoundId(kind, binding) {
-	return `${kind}:${createHash("sha256").update(JSON.stringify(binding)).digest("hex")}`;
-}
-function throwIfAborted(signal) {
-	if (signal.aborted) throw signal.reason ?? /* @__PURE__ */ new Error("tool execution was aborted");
-}
-function stringifyToolResult(result) {
-	if (typeof result === "string") return result;
-	return JSON.stringify(result ?? null);
-}
-//#endregion
 //#region src/composition/human-interaction-tool-approval-gateway.ts
 function createHumanInteractionEndpointRegistry() {
 	const services = /* @__PURE__ */ new Map();
@@ -7640,4 +7426,4 @@ function validateDecisionInput(input) {
 	if (input.recommendedOptionId && !optionIds.includes(input.recommendedOptionId)) throw new Error("recommended user decision option must be available");
 }
 //#endregion
-export { AgentContextBudgetExceeded, AgentEventHandlerFailed, AgentEventLogStoreError, AgentEventSinkFailed, AgentHarnessBusy, AgentInstanceBusy, AgentInstanceConflict, AgentLoopFailed, AgentMemoryError, AgentRunCancelled, AgentRuntimeDisposed, AutomationMandateError, CardPresentationTransitionDenied, CompactionError, DEFAULT_CARD_STREAM_LEASE_MS, DelegationDenied, DeliveryOutboxError, FeishuCardPresentationNotFound, FeishuCardTargetNotFound, FeishuCardTargetRegistryStoreError, FeishuCotProtocolError, FeishuEndpointCredentialError, FeishuOpenApiError, FeishuTenantAccessTokenError, HumanInteractionRepositoryError, HumanInteractionTransitionDenied, InvalidFeishuCardAction, InvalidFeishuMessageContent, InvalidFeishuSessionReference, InvalidInvocationAuthority, InvalidProjectSkillCatalog, InvalidRecoveryAction, InvalidRivusEndpointBinding, InvalidRivusPlugin, InvalidRivusProjectSpace, InvalidStableJson, InvalidToolInput, InvalidWorkspaceRoot, LangfuseTelemetryConfigError, MEMORY_SCOPES, OpenClawEnvImportError, PluginStateConflict, RIVUS_MEMORY_TOOL_ID, RIVUS_MEMORY_TOOL_PLUGIN_ID, RIVUS_MEMORY_TOOL_VERSION, RIVUS_PLUGIN_API_VERSION, RivusDaemonConfigError, RivusDeploymentAutomationReadinessError, RivusDeploymentDaemonLifecycleError, RivusDeploymentManifestError, RivusDeploymentReadinessError, RivusPluginConformanceError, RivusPluginLoadError, RivusToolInputRejected, SessionSchedulerCapacityExceeded, SessionSchedulerDisposed, ToolInvocationDenied, UnsupportedFeishuCardAction, UnsupportedFeishuMessage, WorkspaceInstructionsSourceError, acceptsCardPresentationProgress, activeCardPresentation, assembleAgentContext, assertRivusPluginConforms, commitAutomationOutcome, createAgentCommandFromFeishuCardAction, createAgentCommandFromFeishuMessage, createAgentConversationMessages, createAgentDomainEventHandler, createAgentDomainEventSink, createAgentDomainEventSinkFromCallback, createAgentHarness, createAgentHarnessClient, createAgentHarnessPooledRuntime, createAgentInstanceRegistry, createAgentLoopFromCallback, createAgentLoopModelExecutionEnd, createAgentLoopModelExecutionStart, createAgentLoopPromptTransformer, createAgentLoopSkillExecutionEnd, createAgentLoopSkillExecutionStart, createAgentLoopTextDelta, createAgentLoopThinkingDelta, createAgentLoopToolExecutionEnd, createAgentLoopToolExecutionStart, createAgentLoopToolExecutionUpdate, createAgentMemoryService, createAgentRunUpdateHandler, createAgentRuntime, createAgentRuntimePool, createAgentTranscriptMessages, createAgentTranscriptTurn, createAgentsMdInstructionsProvider, createAsyncIterableAgentLoop, createAutomationMandateStore, createCoalescingFeishuPublisher, createCompactionService, createCompositeRivusDaemonTransport, createConfiguredFeishuAutomationCardSender, createConfiguredFeishuCardKitPublisher, createConfiguredFeishuCardKitTargetCreator, createConfiguredFeishuCardKitTargetPreparation, createConfiguredFeishuCardRolloverRuntime, createConfiguredFeishuHumanInteractionPresenter, createConfiguredFeishuOpenApiClient, createConfiguredFeishuTextReplySender, createConfiguredRivusDaemonBootstrap, createConfiguredRivusDeploymentDaemon, createDailyAutomationSchedule, createDefaultAgentHarness, createDefaultAgentHarnessClient, createDefaultAgentHarnessClientFromCallback, createDefaultAgentHarnessClientFromTextCallback, createDefaultAgentHarnessFromCallback, createDefaultAgentHarnessFromTextCallback, createDefaultAgentRuntime, createDefaultAgentRuntimeFromCallback, createDefaultAgentRuntimeFromTextCallback, createDelegationService, createDeliveryOutbox, createEventAgentLoop, createFakeRivusPlugin, createFeishuAgentDaemon, createFeishuAgentRunCard, createFeishuAgentRuntime, createFeishuCardActionCallbackResponse, createFeishuCardActionErrorResponse, createFeishuCardDeliveryLedger, createFeishuCardDeliveryReconciler, createFeishuCardKitOpenApiClient, createFeishuCardKitOpenApiTargetCreator, createFeishuCardKitPublisher, createFeishuCardPresentationStore, createFeishuCardRollover, createFeishuCardRolloverSupervisor, createFeishuCardTargetPreparation, createFeishuConversationId, createFeishuCotPublisher, createFeishuDeploymentEndpoint, createFeishuEventHandlers, createFeishuHumanInteractionCard, createFeishuHumanInteractionPresenter, createFeishuInboxRepository, createFeishuMessageQueue, createFeishuMessageWorker, createFeishuOpenApiClient, createFeishuPeriodicFlush, createFeishuPresentationPreparation, createFeishuSessionKey, createFeishuStreamProjector, createFeishuTenantAccessTokenProvider, createFeishuWebSocketDaemon, createFeishuWorkerLoop, createFixedClock, createHumanInteractionEndpointRegistry, createHumanInteractionService, createHumanInteractionToolApprovalGateway, createInMemoryFeishuCardTargetRegistry, createInMemoryHumanInteractionRepository, createInvocationAuthority, createJsonFetchRequest, createJsonFileFeishuCardTargetRegistry, createJsonlAgentEventLog, createJsonlHumanInteractionRepository, createLangfuseAgentTelemetry, createLazyFeishuWebSocketEventDispatcher, createMemoryNamespace, createOpenTelemetryAgentEventSink, createOpenTelemetryAgentTelemetry, createPiAgentLoop, createPiSdkAgentLoop, createPiSessionRegistry, createPiSkillRuntime, createPiToolNameResolver, createPiToolProxyDefinitions, createPluginStateStore, createProjectMemoryPromptPreparer, createRateLimitedFeishuPublisher, createRecoveryAction, createRecoveryControl, createRivusAgentHost, createRivusDaemonProcess, createRivusDaemonShutdownController, createRivusDaemonStatusHttpServer, createRivusDaemonStatusReporter, createRivusDeploymentCliProcess, createRivusDeploymentDaemon, createRivusEnvFromOpenClawConfig, createRivusMemoryTool, createRivusMemoryToolContract, createRivusMemoryToolDescriptor, createRivusPluginCatalog, createRoutedHumanInteractionToolApprovalService, createScheduledAutomation, createSequenceRunIds, createSessionScheduler, createSubagentCoordinator, createSystemClock, createTelemetryContentRedactor, createTextAgentLoop, createTextAgentLoopFromCallback, createToolBroker, createToolInputDigest, createToolOperationLedger, createUuidRunIds, createWorkspaceRootHandle, describeFeishuMessageIntake, evolveAgentRun, formatRivusEnvFile, initialAgentRunState, intersectToolIds, isAgentToolExecutionEvent, isAssistantTextDeltaEvent, isAssistantThinkingDeltaEvent, isCardPresentationHandoffDue, isTerminalAgentDomainEvent, isTerminalAgentRunPhase, loadNodeRivusPluginModule, loadRivusDaemonConfig, loadRivusDeployment, loadRivusDeploymentManifest, normalizeStableJson, openJsonAutomationTickRepository, openJsonlAgentMemoryService, openJsonlFeishuCardDeliveryLedger, openJsonlFeishuInboxRepository, openJsonlRecoveryControl, openJsonlToolOperationLedger, replayAgentHistory, replayAgentTranscript, requiresToolApproval, resolveFeishuEndpointCredentials, resolveLangfuseTelemetryConfig, resolveRivusAgentDefinition, resolveRivusProjectSpace, restoreAgentHistory, restoreConfiguredRivusDaemonBootstrap, restrictMemoryScopesForAudience, runRivusDaemonCli, shouldAcceptFeishuEndpointMessage, transitionHumanInteraction, validateProjectSkillCatalog, validateProjectSkillCommand, validateRivusDeploymentManifest };
+export { AgentContextBudgetExceeded, AgentEventHandlerFailed, AgentEventLogStoreError, AgentEventSinkFailed, AgentHarnessBusy, AgentInstanceBusy, AgentInstanceConflict, AgentLoopFailed, AgentMemoryError, AgentRunCancelled, AgentRuntimeDisposed, AutomationMandateError, CardPresentationTransitionDenied, CompactionError, DEFAULT_CARD_STREAM_LEASE_MS, DelegationDenied, DeliveryOutboxError, FeishuCardPresentationNotFound, FeishuCardTargetNotFound, FeishuCardTargetRegistryStoreError, FeishuCotProtocolError, FeishuEndpointCredentialError, FeishuOpenApiError, FeishuTenantAccessTokenError, HumanInteractionRepositoryError, HumanInteractionTransitionDenied, InvalidFeishuCardAction, InvalidFeishuMessageContent, InvalidFeishuSessionReference, InvalidInvocationAuthority, InvalidProjectSkillCatalog, InvalidRecoveryAction, InvalidRivusEndpointBinding, InvalidRivusPlugin, InvalidRivusProjectSpace, InvalidStableJson, InvalidToolInput, InvalidWorkspaceRoot, LangfuseTelemetryConfigError, MEMORY_SCOPES, OpenClawEnvImportError, PluginStateConflict, RIVUS_MEMORY_TOOL_ID, RIVUS_MEMORY_TOOL_PLUGIN_ID, RIVUS_MEMORY_TOOL_VERSION, RIVUS_PLUGIN_API_VERSION, RivusDaemonConfigError, RivusDeploymentAutomationReadinessError, RivusDeploymentDaemonLifecycleError, RivusDeploymentManifestError, RivusDeploymentReadinessError, RivusPluginConformanceError, RivusPluginLoadError, RivusToolInputRejected, SessionSchedulerCapacityExceeded, SessionSchedulerDisposed, ToolInvocationDenied, UnsupportedFeishuCardAction, UnsupportedFeishuMessage, WorkspaceInstructionsSourceError, acceptsCardPresentationProgress, activeCardPresentation, assembleAgentContext, assertRivusPluginConforms, commitAutomationOutcome, createAgentCommandFromFeishuCardAction, createAgentCommandFromFeishuMessage, createAgentConversationMessages, createAgentDomainEventHandler, createAgentDomainEventSink, createAgentDomainEventSinkFromCallback, createAgentHarness, createAgentHarnessClient, createAgentHarnessPooledRuntime, createAgentInstanceRegistry, createAgentLoopFromCallback, createAgentLoopModelExecutionEnd, createAgentLoopModelExecutionStart, createAgentLoopPromptTransformer, createAgentLoopSkillExecutionEnd, createAgentLoopSkillExecutionStart, createAgentLoopTextDelta, createAgentLoopThinkingDelta, createAgentLoopToolExecutionEnd, createAgentLoopToolExecutionStart, createAgentLoopToolExecutionUpdate, createAgentMemoryService, createAgentRunUpdateHandler, createAgentRuntime, createAgentRuntimePool, createAgentTranscriptMessages, createAgentTranscriptTurn, createAgentsMdInstructionsProvider, createAsyncIterableAgentLoop, createAutomationMandateStore, createCoalescingFeishuPublisher, createCompactionService, createCompositeRivusDaemonTransport, createConfiguredFeishuAutomationCardSender, createConfiguredFeishuCardKitPublisher, createConfiguredFeishuCardKitTargetCreator, createConfiguredFeishuCardRolloverRuntime, createConfiguredFeishuHumanInteractionPresenter, createConfiguredFeishuOpenApiClient, createConfiguredFeishuTextReplySender, createConfiguredRivusDaemonBootstrap, createConfiguredRivusDeploymentDaemon, createDailyAutomationSchedule, createDefaultAgentHarness, createDefaultAgentHarnessClient, createDefaultAgentHarnessClientFromCallback, createDefaultAgentHarnessClientFromTextCallback, createDefaultAgentHarnessFromCallback, createDefaultAgentHarnessFromTextCallback, createDefaultAgentRuntime, createDefaultAgentRuntimeFromCallback, createDefaultAgentRuntimeFromTextCallback, createDelegationService, createDeliveryOutbox, createEventAgentLoop, createFakeRivusPlugin, createFeishuAgentDaemon, createFeishuAgentRunCard, createFeishuAgentRuntime, createFeishuCardActionCallbackResponse, createFeishuCardActionErrorResponse, createFeishuCardDeliveryLedger, createFeishuCardDeliveryReconciler, createFeishuCardKitOpenApiClient, createFeishuCardKitOpenApiTargetCreator, createFeishuCardKitPublisher, createFeishuCardPresentationStore, createFeishuCardRollover, createFeishuCardRolloverSupervisor, createFeishuCardTargetPreparation, createFeishuConversationId, createFeishuCotPublisher, createFeishuDeploymentEndpoint, createFeishuEventHandlers, createFeishuHumanInteractionCard, createFeishuHumanInteractionPresenter, createFeishuInboxRepository, createFeishuMessageQueue, createFeishuMessageWorker, createFeishuOpenApiClient, createFeishuPeriodicFlush, createFeishuPresentationPreparation, createFeishuSessionKey, createFeishuStreamProjector, createFeishuTenantAccessTokenProvider, createFeishuWebSocketDaemon, createFeishuWorkerLoop, createFixedClock, createHumanInteractionEndpointRegistry, createHumanInteractionService, createHumanInteractionToolApprovalGateway, createInMemoryFeishuCardTargetRegistry, createInMemoryHumanInteractionRepository, createInvocationAuthority, createJsonFetchRequest, createJsonFileFeishuCardTargetRegistry, createJsonlAgentEventLog, createJsonlHumanInteractionRepository, createLangfuseAgentTelemetry, createLazyFeishuWebSocketEventDispatcher, createMemoryNamespace, createOpenTelemetryAgentEventSink, createOpenTelemetryAgentTelemetry, createPiAgentLoop, createPiSdkAgentLoop, createPiSessionRegistry, createPluginStateStore, createProjectMemoryPromptPreparer, createRateLimitedFeishuPublisher, createRecoveryAction, createRecoveryControl, createRivusAgentHost, createRivusDaemonProcess, createRivusDaemonShutdownController, createRivusDaemonStatusHttpServer, createRivusDaemonStatusReporter, createRivusDeploymentCliProcess, createRivusDeploymentDaemon, createRivusEnvFromOpenClawConfig, createRivusMemoryTool, createRivusMemoryToolContract, createRivusMemoryToolDescriptor, createRivusPluginCatalog, createRoutedHumanInteractionToolApprovalService, createScheduledAutomation, createSequenceRunIds, createSessionScheduler, createSubagentCoordinator, createSystemClock, createTelemetryContentRedactor, createTestClock, createTextAgentLoop, createTextAgentLoopFromCallback, createToolBroker, createToolInputDigest, createToolOperationLedger, createUuidRunIds, createWorkspaceRootHandle, describeFeishuMessageIntake, evolveAgentRun, formatRivusEnvFile, initialAgentRunState, intersectToolIds, isAgentToolExecutionEvent, isAssistantTextDeltaEvent, isAssistantThinkingDeltaEvent, isCardPresentationHandoffDue, isTerminalAgentDomainEvent, isTerminalAgentRunPhase, loadNodeRivusPluginModule, loadRivusDaemonConfig, loadRivusDeployment, loadRivusDeploymentManifest, normalizeStableJson, openJsonAutomationTickRepository, openJsonlAgentMemoryService, openJsonlFeishuCardDeliveryLedger, openJsonlFeishuInboxRepository, openJsonlRecoveryControl, openJsonlToolOperationLedger, replayAgentHistory, replayAgentTranscript, requiresToolApproval, resolveFeishuEndpointCredentials, resolveLangfuseTelemetryConfig, resolveRivusAgentDefinition, resolveRivusProjectSpace, restoreAgentHistory, restoreConfiguredRivusDaemonBootstrap, restrictMemoryScopesForAudience, runRivusDaemonCli, shouldAcceptFeishuEndpointMessage, transitionHumanInteraction, validateProjectSkillCatalog, validateProjectSkillCommand, validateRivusDeploymentManifest };

package/dist/pi-tool-proxy.d.ts

@@ -0,0 +1,194 @@
+import { s as AgentLoopInput } from "./agent-loop.js";
+import { c as MemoryScope, t as AgentMemoryAuthority } from "./agent-memory.js";
+import { A as RivusToolRisk, D as RivusToolGrantSet, b as RivusResolvedToolDescriptor, g as RivusPluginCatalog, m as RivusHostToolDescriptor } from "./rivus-plugin.js";
+import { ToolDefinition } from "@earendil-works/pi-coding-agent";
+
+//#region src/domain/recovery-action.d.ts
+interface RecoveryAction {
+  readonly actorId: string;
+  readonly at: string;
+  readonly note: string;
+}
+declare class InvalidRecoveryAction extends Error {
+  readonly name = "InvalidRecoveryAction";
+}
+declare function createRecoveryAction(input: RecoveryAction): RecoveryAction;
+//#endregion
+//#region src/application/delegation/tool-operation-ledger.d.ts
+interface ToolOperationBinding {
+  readonly agentId: string;
+  readonly inputDigest: string;
+  readonly instanceId: string;
+  readonly sourceMessageId: string;
+  readonly toolId: string;
+  readonly toolVersion: string;
+}
+type ToolOperationState = {
+  readonly status: "pending";
+} | {
+  readonly result: unknown;
+  readonly status: "completed";
+} | {
+  readonly reason: string;
+  readonly status: "reconciliation-required";
+} | {
+  readonly status: "aborted";
+};
+interface ToolOperationRecord {
+  readonly binding: ToolOperationBinding;
+  readonly operationId: string;
+  readonly reconciliation?: ToolOperationReconciliation;
+  readonly revision: number;
+  readonly state: ToolOperationState;
+}
+interface ToolOperationReconciliation extends RecoveryAction {
+  readonly outcome: "applied" | "not-applied";
+}
+type ToolOperationReconciliationOutcome = {
+  readonly result: unknown;
+  readonly status: "applied";
+} | {
+  readonly status: "not-applied";
+};
+type ToolOperationBeginResult = {
+  readonly status: "acquired";
+} | {
+  readonly result: unknown;
+  readonly status: "completed";
+} | {
+  readonly status: "blocked";
+  readonly reason: string;
+};
+type ToolOperationInspectResult = {
+  readonly status: "missing";
+} | {
+  readonly result: unknown;
+  readonly status: "completed";
+} | {
+  readonly status: "blocked";
+  readonly reason: string;
+};
+interface ToolOperationLedger {
+  abort(operationId: string, binding: ToolOperationBinding): Promise<void>;
+  begin(operationId: string, binding: ToolOperationBinding): Promise<ToolOperationBeginResult>;
+  complete(operationId: string, binding: ToolOperationBinding, result: unknown): Promise<void>;
+  inspect(operationId: string, binding: ToolOperationBinding): Promise<ToolOperationInspectResult>;
+  reconciliationRequired(): ReadonlyArray<ToolOperationRecord>;
+  reconcile(input: {
+    readonly action: RecoveryAction;
+    readonly expectedRevision: number;
+    readonly operationId: string;
+    readonly outcome: ToolOperationReconciliationOutcome;
+  }): Promise<ToolOperationRecord>;
+  requireReconciliation(operationId: string, binding: ToolOperationBinding, reason: string): Promise<void>;
+  unresolvedForSource(sourceMessageId: string): ReadonlyArray<ToolOperationRecord>;
+}
+declare function createToolOperationLedger(options?: {
+  readonly initial?: ReadonlyArray<ToolOperationRecord>;
+  readonly persist?: (record: ToolOperationRecord) => Promise<void>;
+}): ToolOperationLedger;
+//#endregion
+//#region src/application/delegation/tool-authority.d.ts
+interface InvocationAuthorityRef {
+  readonly id: string;
+}
+interface InvocationAuthority {
+  readonly agentId: string;
+  readonly instanceId: string;
+  readonly memory?: AgentMemoryAuthority;
+  readonly runId: string;
+  readonly sessionKey: string;
+  readonly sourceMessageId: string;
+  readonly tenantKey: string;
+  readonly toolGrantSet: RivusToolGrantSet;
+}
+declare class InvalidInvocationAuthority extends Error {
+  readonly name = "InvalidInvocationAuthority";
+}
+declare function createInvocationAuthority(authority: InvocationAuthority): InvocationAuthorityRef;
+//#endregion
+//#region src/application/delegation/tool-broker.d.ts
+interface AuthorizationPolicyState {
+  readonly epoch: number;
+  readonly revokedToolIds: ReadonlyArray<string>;
+}
+interface AuthorizationPolicyProvider {
+  current(): Promise<AuthorizationPolicyState>;
+}
+interface ToolApprovalRequest {
+  readonly approvalId: string;
+  readonly agentId: string;
+  readonly instanceId: string;
+  readonly inputDigest: string;
+  readonly operationId: string;
+  readonly runId: string;
+  readonly sessionKey: string;
+  readonly tenantKey: string;
+  readonly callId: string;
+  readonly toolId: string;
+  readonly toolVersion: string;
+  readonly risk: RivusToolRisk;
+}
+interface ToolApprovalService {
+  consume(request: ToolApprovalRequest): Promise<boolean>;
+}
+interface ToolBrokerOptions {
+  readonly approvals: ToolApprovalService;
+  readonly catalog: RivusPluginCatalog;
+  readonly hostTools?: ReadonlyArray<RivusHostToolDescriptor>;
+  readonly policy: AuthorizationPolicyProvider;
+  readonly operations?: ToolOperationLedger;
+}
+interface ToolExecutionRequest {
+  readonly authority: InvocationAuthorityRef;
+  readonly callId: string;
+  readonly toolId: string;
+  readonly version: string;
+  readonly input: unknown;
+  readonly operationId?: string;
+  readonly approvalId?: string;
+}
+interface ToolBroker {
+  execute(request: ToolExecutionRequest): Promise<unknown>;
+}
+declare class ToolInvocationDenied extends Error {
+  readonly name = "ToolInvocationDenied";
+}
+declare function createToolBroker(options: ToolBrokerOptions): ToolBroker;
+//#endregion
+//#region src/infrastructure/pi/pi-tool-proxy.d.ts
+interface PiToolApprovalRequest {
+  readonly agentId: string;
+  readonly allowedActorOpenIds: ReadonlyArray<string>;
+  readonly approvalId: string;
+  readonly callId: string;
+  readonly endpointId: string;
+  readonly inputDigest: string;
+  readonly instanceId: string;
+  readonly operationId: string;
+  readonly risk: RivusToolRisk;
+  readonly runId: string;
+  readonly sessionKey: string;
+  readonly signal?: AbortSignal;
+  readonly sourceMessageId: string;
+  readonly tenantKey: string;
+  readonly toolId: string;
+  readonly toolVersion: string;
+}
+interface PiToolApprovalGateway {
+  requestApproval(request: PiToolApprovalRequest): Promise<void>;
+}
+interface PiToolProxyOptions {
+  readonly agentId: string;
+  readonly approvals: PiToolApprovalGateway;
+  readonly broker: ToolBroker;
+  readonly getActiveInput: () => AgentLoopInput | undefined;
+  readonly instanceId: string;
+  readonly memoryScopes?: ReadonlyArray<MemoryScope>;
+  readonly toolGrantSet: RivusToolGrantSet;
+  readonly tools: ReadonlyArray<RivusResolvedToolDescriptor>;
+}
+declare function createPiToolProxyDefinitions(options: PiToolProxyOptions): ToolDefinition[];
+declare function createPiToolNameResolver(tools: ReadonlyArray<Pick<RivusResolvedToolDescriptor, "id">>): (toolName: string) => string;
+//#endregion
+export { createRecoveryAction as A, ToolOperationReconciliation as C, createToolOperationLedger as D, ToolOperationState as E, InvalidRecoveryAction as O, ToolOperationLedger as S, ToolOperationRecord as T, InvocationAuthorityRef as _, createPiToolProxyDefinitions as a, ToolOperationBinding as b, ToolApprovalRequest as c, ToolBrokerOptions as d, ToolExecutionRequest as f, InvocationAuthority as g, InvalidInvocationAuthority as h, createPiToolNameResolver as i, RecoveryAction as k, ToolApprovalService as l, createToolBroker as m, PiToolApprovalRequest as n, AuthorizationPolicyProvider as o, ToolInvocationDenied as p, PiToolProxyOptions as r, AuthorizationPolicyState as s, PiToolApprovalGateway as t, ToolBroker as u, createInvocationAuthority as v, ToolOperationReconciliationOutcome as w, ToolOperationInspectResult as x, ToolOperationBeginResult as y };

package/dist/pi.d.ts

@@ -1,3 +1,5 @@
+import { a as createPiToolProxyDefinitions, i as createPiToolNameResolver, n as PiToolApprovalRequest, r as PiToolProxyOptions, t as PiToolApprovalGateway } from "./pi-tool-proxy.js";
+import { o as RegisteredRivusSkill } from "./rivus-plugin.js";
 import { ToolDefinition } from "@earendil-works/pi-coding-agent";
 
 //#region src/infrastructure/pi/pi-project-skill-read-tool.d.ts
@@ -9,4 +11,11 @@ declare function createPiProjectSkillReadTool(options: {
   readonly skillPaths: ReadonlyArray<string>;
 }): ToolDefinition;
 //#endregion
-export { ProjectSkillReadDenied, createPiProjectSkillReadTool };
+//#region src/infrastructure/pi/pi-skill-tool.d.ts
+interface PiSkillRuntime {
+  readonly prompt: string;
+  readonly tool?: ToolDefinition;
+}
+declare function createPiSkillRuntime(skills: ReadonlyArray<RegisteredRivusSkill>): PiSkillRuntime;
+//#endregion
+export { type PiSkillRuntime, type PiToolApprovalGateway, type PiToolApprovalRequest, type PiToolProxyOptions, ProjectSkillReadDenied, createPiProjectSkillReadTool, createPiSkillRuntime, createPiToolNameResolver, createPiToolProxyDefinitions };