@rivus/agent 0.6.0 → 0.6.1

package/dist/pi.js

@@ -1,5 +1,9 @@
+import { d as requiresToolApproval } from "./agent-memory.js";
+import { l as createPiSkillRuntime, o as createInvocationAuthority, r as createToolInputDigest } from "./tool-input-digest.js";
+import { createHash } from "node:crypto";
 import { isAbsolute, relative } from "node:path";
 import { readFile, realpath, stat } from "node:fs/promises";
+import { Unsafe } from "typebox";
 import { createReadToolDefinition } from "@earendil-works/pi-coding-agent";
 //#region src/infrastructure/pi/pi-project-skill-read-tool.ts
 var ProjectSkillReadDenied = class extends Error {
@@ -30,4 +34,110 @@ async function authorize(path, sources) {
 	throw new ProjectSkillReadDenied("read is restricted to the bound Project Skill sources");
 }
 //#endregion
-export { ProjectSkillReadDenied, createPiProjectSkillReadTool };
+//#region src/infrastructure/pi/pi-tool-proxy.ts
+function createPiToolProxyDefinitions(options) {
+	const names = /* @__PURE__ */ new Set();
+	return options.tools.map((tool) => {
+		const name = toPiToolName(tool.id);
+		if (names.has(name)) throw new Error(`Pi tool name collision: ${name}`);
+		names.add(name);
+		return {
+			description: tool.description,
+			execute: async (callId, input, signal) => {
+				const activeInput = options.getActiveInput();
+				const invocation = activeInput?.invocation;
+				if (!activeInput || !invocation) throw new Error(`tool ${tool.id} requires an active agent run with a trusted invocation`);
+				if (!invocation.tenantKey) throw new Error(`tool ${tool.id} requires a trusted tenant identity`);
+				throwIfAborted(signal ?? activeInput.abortSignal);
+				const inputDigest = createToolInputDigest(input);
+				const operationId = createBoundId("operation", {
+					agentId: options.agentId,
+					inputDigest,
+					instanceId: options.instanceId,
+					sourceMessageId: invocation.sourceMessageId,
+					toolId: tool.id,
+					toolVersion: tool.version
+				});
+				const approvalId = createBoundId("approval", {
+					callId,
+					operationId,
+					runId: activeInput.runId
+				});
+				if (requiresToolApproval(tool.risk)) {
+					if (invocation.allowedActorOpenIds.length === 0) throw new Error(`tool ${tool.id} requires at least one trusted approval actor`);
+					await options.approvals.requestApproval({
+						agentId: options.agentId,
+						allowedActorOpenIds: invocation.allowedActorOpenIds,
+						approvalId,
+						callId,
+						endpointId: invocation.endpointId,
+						inputDigest,
+						instanceId: options.instanceId,
+						operationId,
+						risk: tool.risk,
+						runId: activeInput.runId,
+						sessionKey: activeInput.sessionKey,
+						signal: signal ?? activeInput.abortSignal,
+						sourceMessageId: invocation.sourceMessageId,
+						tenantKey: invocation.tenantKey,
+						toolId: tool.id,
+						toolVersion: tool.version
+					});
+					throwIfAborted(signal ?? activeInput.abortSignal);
+				}
+				const result = await options.broker.execute({
+					authority: createInvocationAuthority({
+						agentId: options.agentId,
+						instanceId: options.instanceId,
+						...invocation.memory ? { memory: {
+							...invocation.memory,
+							scopes: options.memoryScopes ?? []
+						} } : {},
+						runId: activeInput.runId,
+						sessionKey: activeInput.sessionKey,
+						sourceMessageId: invocation.sourceMessageId,
+						tenantKey: invocation.tenantKey,
+						toolGrantSet: options.toolGrantSet
+					}),
+					callId,
+					input,
+					operationId,
+					...requiresToolApproval(tool.risk) ? { approvalId } : {},
+					toolId: tool.id,
+					version: tool.version
+				});
+				return {
+					content: [{
+						text: stringifyToolResult(result),
+						type: "text"
+					}],
+					details: result
+				};
+			},
+			executionMode: "sequential",
+			label: tool.id,
+			name,
+			parameters: Unsafe(tool.inputSchema),
+			promptSnippet: `${name}: ${tool.description}`
+		};
+	});
+}
+function createPiToolNameResolver(tools) {
+	const toolIdsByPiName = new Map(tools.map((tool) => [toPiToolName(tool.id), tool.id]));
+	return (toolName) => toolIdsByPiName.get(toolName) ?? toolName;
+}
+function toPiToolName(toolId) {
+	return `rivus_${toolId.replace(/[^a-zA-Z0-9_-]/g, "_")}`;
+}
+function createBoundId(kind, binding) {
+	return `${kind}:${createHash("sha256").update(JSON.stringify(binding)).digest("hex")}`;
+}
+function throwIfAborted(signal) {
+	if (signal.aborted) throw signal.reason ?? /* @__PURE__ */ new Error("tool execution was aborted");
+}
+function stringifyToolResult(result) {
+	if (typeof result === "string") return result;
+	return JSON.stringify(result ?? null);
+}
+//#endregion
+export { ProjectSkillReadDenied, createPiProjectSkillReadTool, createPiSkillRuntime, createPiToolNameResolver, createPiToolProxyDefinitions };

package/dist/rivus-daemon-cli.js

@@ -1,4 +1,5 @@
-import { i as MEMORY_SCOPES, n as resolveRivusAgentDefinition, r as deepFreeze, t as createRivusPluginCatalog } from "./rivus-plugin-registry.js";
+import { t as MEMORY_SCOPES } from "./agent-memory.js";
+import { n as resolveRivusAgentDefinition, r as deepFreeze, t as createRivusPluginCatalog } from "./rivus-plugin-registry.js";
 import { createRequire } from "node:module";
 import { Effect } from "effect";
 import { createHash, randomUUID } from "node:crypto";
@@ -603,6 +604,9 @@ function createFeishuCardRollover(options) {
 			});
 		},
 		publish: (action) => exclusive(publishAction(action)),
+		releaseRun: (runId) => Effect.sync(() => {
+			liveRuns.delete(runId);
+		}),
 		recover: () => exclusive(Effect.gen(function* () {
 			const compensatedAt = yield* options.clock.now;
 			const compensated = yield* options.store.compensateInterruptedHandoffs(compensatedAt.toISOString());

package/dist/rivus-plugin-registry.js

@@ -1,117 +1,5 @@
+import { c as InvalidRivusPlugin, o as createRivusMemoryToolContract, r as RIVUS_MEMORY_TOOL_PLUGIN_ID, t as MEMORY_SCOPES } from "./agent-memory.js";
 import { createHash } from "node:crypto";
-//#region src/domain/rivus-plugin.ts
-const RIVUS_PLUGIN_API_VERSION = "1";
-function requiresToolApproval(risk) {
-	return risk === "irreversible" || risk === "host-control";
-}
-var RivusToolInputRejected = class extends Error {
-	name = "RivusToolInputRejected";
-};
-var InvalidRivusPlugin = class extends Error {
-	name = "InvalidRivusPlugin";
-};
-//#endregion
-//#region src/domain/agent-memory.ts
-const MEMORY_SCOPES = [
-	"conversation",
-	"agent-private",
-	"project",
-	"shared-user-profile"
-];
-const RIVUS_MEMORY_TOOL_ID = "memory";
-const RIVUS_MEMORY_TOOL_PLUGIN_ID = "rivus-core";
-const RIVUS_MEMORY_TOOL_VERSION = "1.0.0";
-function createMemoryNamespace(binding) {
-	const encode = (value) => encodeURIComponent(value);
-	switch (binding.scope) {
-		case "conversation": return [
-			binding.tenantId,
-			binding.agentId,
-			binding.subjectId,
-			binding.conversationId ?? "",
-			binding.scope
-		].map(encode).join("/");
-		case "agent-private": return [
-			binding.tenantId,
-			binding.agentId,
-			binding.subjectId,
-			binding.scope
-		].map(encode).join("/");
-		case "project": return [
-			binding.tenantId,
-			binding.agentId,
-			binding.projectId ?? "",
-			binding.scope
-		].map(encode).join("/");
-		case "shared-user-profile": return [
-			binding.tenantId,
-			binding.subjectId,
-			binding.scope
-		].map(encode).join("/");
-	}
-}
-function restrictMemoryScopesForAudience(scopes, audience) {
-	return audience === "group" ? scopes.filter((scope) => scope === "conversation" || scope === "project") : [...scopes];
-}
-function createRivusMemoryToolContract(scopes) {
-	return Object.freeze({
-		description: "Search and read Memory inside Host-bound scopes; propose or request forgetting only in writable private scopes.",
-		digest: "sha256:rivus-memory-v3",
-		id: RIVUS_MEMORY_TOOL_ID,
-		idempotency: "required",
-		inputSchema: Object.freeze({
-			additionalProperties: false,
-			properties: {
-				command: {
-					description: "One of search, read, propose, or forget_request.",
-					enum: [
-						"search",
-						"read",
-						"propose",
-						"forget_request"
-					],
-					type: "string"
-				},
-				id: {
-					description: "Required for read and forget_request.",
-					minLength: 1,
-					type: "string"
-				},
-				input: {
-					additionalProperties: false,
-					description: "Required for propose.",
-					properties: { content: {
-						minLength: 1,
-						type: "string"
-					} },
-					required: ["content"],
-					type: "object"
-				},
-				query: {
-					additionalProperties: false,
-					description: "Required for search.",
-					properties: { query: { type: "string" } },
-					required: ["query"],
-					type: "object"
-				},
-				reason: {
-					description: "Optional reason for forget_request.",
-					type: "string"
-				},
-				...scopes.length === 0 ? {} : { scope: {
-					description: "Optional Host-granted scope for search or propose. Confirmed Project and Shared User Profile Memory are read-only to the model.",
-					enum: [...scopes],
-					type: "string"
-				} }
-			},
-			required: ["command"],
-			type: "object"
-		}),
-		risk: "mutate",
-		version: RIVUS_MEMORY_TOOL_VERSION
-	});
-}
-//#endregion
 //#region src/application/plugin/deep-freeze.ts
 function deepFreeze(value) {
 	if (value !== null && typeof value === "object" && !Object.isFrozen(value)) {
@@ -321,4 +209,4 @@ function stableJson(value) {
 	return JSON.stringify(value);
 }
 //#endregion
-export { RIVUS_MEMORY_TOOL_ID as a, createMemoryNamespace as c, InvalidRivusPlugin as d, RIVUS_PLUGIN_API_VERSION as f, MEMORY_SCOPES as i, createRivusMemoryToolContract as l, requiresToolApproval as m, resolveRivusAgentDefinition as n, RIVUS_MEMORY_TOOL_PLUGIN_ID as o, RivusToolInputRejected as p, deepFreeze as r, RIVUS_MEMORY_TOOL_VERSION as s, createRivusPluginCatalog as t, restrictMemoryScopesForAudience as u };
+export { resolveRivusAgentDefinition as n, deepFreeze as r, createRivusPluginCatalog as t };

package/dist/rivus-plugin-testkit.d.ts

@@ -1,177 +1,5 @@
-import { c as MemoryScope, t as AgentMemoryAuthority } from "./agent-memory.js";
+import { h as RivusPlugin, l as RivusAgentDeployment } from "./rivus-plugin.js";
 
-//#region src/domain/rivus-plugin.d.ts
-declare const RIVUS_PLUGIN_API_VERSION = "1";
-type RivusToolRisk = "observe" | "mutate" | "irreversible" | "host-control";
-type RivusToolIdempotency = "none" | "supported" | "required";
-declare function requiresToolApproval(risk: RivusToolRisk): boolean;
-declare class RivusToolInputRejected extends Error {
-  readonly name: string;
-}
-interface RivusPluginManifest {
-  readonly apiVersion: string;
-  readonly id: string;
-  readonly version: string;
-}
-interface RivusToolExecutor {
-  execute(input: unknown, context: RivusToolExecutionContext): unknown;
-}
-interface RivusToolExecutionContext {
-  readonly agentId: string;
-  readonly instanceId: string;
-  readonly memory?: AgentMemoryAuthority;
-  readonly runId: string;
-  readonly callId: string;
-  readonly operationId?: string;
-  readonly policyEpoch: number;
-  readonly toolId: string;
-  readonly toolVersion: string;
-  readonly sessionKey: string;
-}
-interface RivusToolFactoryContext {
-  readonly toolId: string;
-  readonly toolVersion: string;
-}
-interface RivusToolDescriptor {
-  readonly id: string;
-  readonly version: string;
-  readonly digest: string;
-  readonly description: string;
-  readonly inputSchema: unknown;
-  readonly risk: RivusToolRisk;
-  readonly idempotency: RivusToolIdempotency;
-  readonly createExecutor: (context: RivusToolFactoryContext) => RivusToolExecutor;
-}
-interface RivusHostToolDescriptor extends RivusToolDescriptor {
-  readonly replayCompleted?: (input: unknown, completedResult: unknown, context: RivusToolExecutionContext) => unknown;
-}
-interface RivusSkillDescriptor {
-  readonly id: string;
-  readonly version: string;
-  readonly digest: string;
-  readonly title: string;
-  readonly content: string;
-}
-interface RivusAutomationTemplate {
-  readonly id: string;
-  readonly profileId: string;
-  readonly requestedSkillIds: ReadonlyArray<string>;
-  readonly requestedToolIds: ReadonlyArray<string>;
-  readonly createInput: (tick: RivusAutomationTickContext) => RivusAutomationInput;
-}
-interface RivusAutomationTickContext {
-  readonly occurrence: string;
-}
-interface RivusAutomationInput {
-  readonly text: string;
-}
-interface RivusAgentProfile {
-  readonly id: string;
-  readonly displayName: string;
-  readonly systemPrompt: string;
-  readonly model: Readonly<Record<string, unknown>>;
-  readonly tools: {
-    readonly allow: ReadonlyArray<string>;
-  };
-  readonly skills: {
-    readonly allow: ReadonlyArray<string>;
-  };
-  readonly memory: {
-    readonly scopes: ReadonlyArray<MemoryScope>;
-  };
-}
-interface RivusPluginRegistry {
-  registerAgentProfile(profile: RivusAgentProfile): void;
-  registerTool(tool: RivusToolDescriptor): void;
-  registerSkill(skill: RivusSkillDescriptor): void;
-  registerAutomation(template: RivusAutomationTemplate): void;
-}
-interface RivusPlugin {
-  readonly manifest: RivusPluginManifest;
-  register(registry: RivusPluginRegistry): void;
-}
-interface RegisteredRivusPlugin extends RivusPluginManifest {}
-interface RegisteredRivusTool extends RivusToolDescriptor {
-  readonly pluginId: string;
-}
-interface RegisteredRivusSkill extends RivusSkillDescriptor {
-  readonly pluginId: string;
-}
-interface RegisteredRivusAutomation extends RivusAutomationTemplate {
-  readonly pluginId: string;
-}
-interface RegisteredRivusAgentProfile extends RivusAgentProfile {
-  readonly pluginId: string;
-}
-interface RivusPluginCatalogSnapshot {
-  readonly plugins: ReadonlyArray<RegisteredRivusPlugin>;
-  readonly profiles: ReadonlyArray<RegisteredRivusAgentProfile>;
-  readonly tools: ReadonlyArray<RegisteredRivusTool>;
-  readonly skills: ReadonlyArray<RegisteredRivusSkill>;
-  readonly automations: ReadonlyArray<RegisteredRivusAutomation>;
-}
-interface RivusPluginCatalog {
-  registerPlugin(plugin: RivusPlugin): void;
-  snapshot(): RivusPluginCatalogSnapshot;
-}
-interface RivusAgentDeployment {
-  readonly agentId: string;
-  readonly pluginId: string;
-  readonly profileId: string;
-  readonly projectSpaceId?: string;
-  readonly endpointIds: ReadonlyArray<string>;
-  readonly memory?: {
-    readonly scopes: ReadonlyArray<MemoryScope>;
-    readonly tool: boolean;
-  };
-  readonly skills: {
-    readonly allow: ReadonlyArray<string>;
-  };
-  readonly tools: {
-    readonly allow: ReadonlyArray<string>;
-  };
-}
-interface RivusResolvedToolDescriptor {
-  readonly id: string;
-  readonly version: string;
-  readonly digest: string;
-  readonly description: string;
-  readonly inputSchema: unknown;
-  readonly risk: RivusToolRisk;
-  readonly idempotency: RivusToolIdempotency;
-  readonly pluginId: string;
-}
-interface RivusToolGrantSet {
-  readonly toolIds: ReadonlyArray<string>;
-  readonly revision: string;
-}
-interface RivusSkillGrantSet {
-  readonly skillIds: ReadonlyArray<string>;
-  readonly revision: string;
-}
-interface ResolvedRivusAgentDefinition {
-  readonly agentId: string;
-  readonly pluginId: string;
-  readonly profileId: string;
-  readonly projectSpaceId?: string;
-  readonly projectSpaceRevision?: string;
-  readonly endpointIds: ReadonlyArray<string>;
-  readonly profileRevision: string;
-  readonly systemPrompt: string;
-  readonly model: Readonly<Record<string, unknown>>;
-  readonly memory: {
-    readonly scopes: ReadonlyArray<MemoryScope>;
-    readonly tool: boolean;
-  };
-  readonly skillGrantSet: RivusSkillGrantSet;
-  readonly skills: ReadonlyArray<RegisteredRivusSkill>;
-  readonly tools: ReadonlyArray<RivusResolvedToolDescriptor>;
-  readonly toolGrantSet: RivusToolGrantSet;
-}
-declare class InvalidRivusPlugin extends Error {
-  readonly name = "InvalidRivusPlugin";
-}
-//#endregion
 //#region src/testing/rivus-plugin-testkit.d.ts
 interface RivusPluginLifecycleProbe {
   activate(): Promise<{
@@ -196,4 +24,4 @@ declare class RivusPluginConformanceError extends Error {
 declare function assertRivusPluginConforms(input: RivusPluginConformanceInput): Promise<RivusPluginConformanceReport>;
 declare function createFakeRivusPlugin(): RivusPlugin;
 //#endregion
-export { RivusToolExecutionContext as A, RivusPluginCatalogSnapshot as C, RivusSkillDescriptor as D, RivusResolvedToolDescriptor as E, RivusToolInputRejected as F, RivusToolRisk as I, requiresToolApproval as L, RivusToolFactoryContext as M, RivusToolGrantSet as N, RivusSkillGrantSet as O, RivusToolIdempotency as P, RivusPluginCatalog as S, RivusPluginRegistry as T, RivusAutomationInput as _, assertRivusPluginConforms as a, RivusHostToolDescriptor as b, RIVUS_PLUGIN_API_VERSION as c, RegisteredRivusPlugin as d, RegisteredRivusSkill as f, RivusAgentProfile as g, RivusAgentDeployment as h, RivusPluginLifecycleProbe as i, RivusToolExecutor as j, RivusToolDescriptor as k, RegisteredRivusAgentProfile as l, ResolvedRivusAgentDefinition as m, RivusPluginConformanceInput as n, createFakeRivusPlugin as o, RegisteredRivusTool as p, RivusPluginConformanceReport as r, InvalidRivusPlugin as s, RivusPluginConformanceError as t, RegisteredRivusAutomation as u, RivusAutomationTemplate as v, RivusPluginManifest as w, RivusPlugin as x, RivusAutomationTickContext as y };
+export { assertRivusPluginConforms as a, RivusPluginLifecycleProbe as i, RivusPluginConformanceInput as n, createFakeRivusPlugin as o, RivusPluginConformanceReport as r, RivusPluginConformanceError as t };

package/dist/rivus-plugin-testkit.js

@@ -1,4 +1,5 @@
-import { a as RIVUS_MEMORY_TOOL_ID, n as resolveRivusAgentDefinition, t as createRivusPluginCatalog } from "./rivus-plugin-registry.js";
+import { n as RIVUS_MEMORY_TOOL_ID } from "./agent-memory.js";
+import { n as resolveRivusAgentDefinition, t as createRivusPluginCatalog } from "./rivus-plugin-registry.js";
 //#region src/testing/rivus-plugin-testkit.ts
 var RivusPluginConformanceError = class extends Error {
 	name = "RivusPluginConformanceError";

package/dist/rivus-plugin.d.ts

@@ -0,0 +1,175 @@
+import { c as MemoryScope, t as AgentMemoryAuthority } from "./agent-memory.js";
+
+//#region src/domain/rivus-plugin.d.ts
+declare const RIVUS_PLUGIN_API_VERSION = "1";
+type RivusToolRisk = "observe" | "mutate" | "irreversible" | "host-control";
+type RivusToolIdempotency = "none" | "supported" | "required";
+declare function requiresToolApproval(risk: RivusToolRisk): boolean;
+declare class RivusToolInputRejected extends Error {
+  readonly name: string;
+}
+interface RivusPluginManifest {
+  readonly apiVersion: string;
+  readonly id: string;
+  readonly version: string;
+}
+interface RivusToolExecutor {
+  execute(input: unknown, context: RivusToolExecutionContext): unknown;
+}
+interface RivusToolExecutionContext {
+  readonly agentId: string;
+  readonly instanceId: string;
+  readonly memory?: AgentMemoryAuthority;
+  readonly runId: string;
+  readonly callId: string;
+  readonly operationId?: string;
+  readonly policyEpoch: number;
+  readonly toolId: string;
+  readonly toolVersion: string;
+  readonly sessionKey: string;
+}
+interface RivusToolFactoryContext {
+  readonly toolId: string;
+  readonly toolVersion: string;
+}
+interface RivusToolDescriptor {
+  readonly id: string;
+  readonly version: string;
+  readonly digest: string;
+  readonly description: string;
+  readonly inputSchema: unknown;
+  readonly risk: RivusToolRisk;
+  readonly idempotency: RivusToolIdempotency;
+  readonly createExecutor: (context: RivusToolFactoryContext) => RivusToolExecutor;
+}
+interface RivusHostToolDescriptor extends RivusToolDescriptor {
+  readonly replayCompleted?: (input: unknown, completedResult: unknown, context: RivusToolExecutionContext) => unknown;
+}
+interface RivusSkillDescriptor {
+  readonly id: string;
+  readonly version: string;
+  readonly digest: string;
+  readonly title: string;
+  readonly content: string;
+}
+interface RivusAutomationTemplate {
+  readonly id: string;
+  readonly profileId: string;
+  readonly requestedSkillIds: ReadonlyArray<string>;
+  readonly requestedToolIds: ReadonlyArray<string>;
+  readonly createInput: (tick: RivusAutomationTickContext) => RivusAutomationInput;
+}
+interface RivusAutomationTickContext {
+  readonly occurrence: string;
+}
+interface RivusAutomationInput {
+  readonly text: string;
+}
+interface RivusAgentProfile {
+  readonly id: string;
+  readonly displayName: string;
+  readonly systemPrompt: string;
+  readonly model: Readonly<Record<string, unknown>>;
+  readonly tools: {
+    readonly allow: ReadonlyArray<string>;
+  };
+  readonly skills: {
+    readonly allow: ReadonlyArray<string>;
+  };
+  readonly memory: {
+    readonly scopes: ReadonlyArray<MemoryScope>;
+  };
+}
+interface RivusPluginRegistry {
+  registerAgentProfile(profile: RivusAgentProfile): void;
+  registerTool(tool: RivusToolDescriptor): void;
+  registerSkill(skill: RivusSkillDescriptor): void;
+  registerAutomation(template: RivusAutomationTemplate): void;
+}
+interface RivusPlugin {
+  readonly manifest: RivusPluginManifest;
+  register(registry: RivusPluginRegistry): void;
+}
+interface RegisteredRivusPlugin extends RivusPluginManifest {}
+interface RegisteredRivusTool extends RivusToolDescriptor {
+  readonly pluginId: string;
+}
+interface RegisteredRivusSkill extends RivusSkillDescriptor {
+  readonly pluginId: string;
+}
+interface RegisteredRivusAutomation extends RivusAutomationTemplate {
+  readonly pluginId: string;
+}
+interface RegisteredRivusAgentProfile extends RivusAgentProfile {
+  readonly pluginId: string;
+}
+interface RivusPluginCatalogSnapshot {
+  readonly plugins: ReadonlyArray<RegisteredRivusPlugin>;
+  readonly profiles: ReadonlyArray<RegisteredRivusAgentProfile>;
+  readonly tools: ReadonlyArray<RegisteredRivusTool>;
+  readonly skills: ReadonlyArray<RegisteredRivusSkill>;
+  readonly automations: ReadonlyArray<RegisteredRivusAutomation>;
+}
+interface RivusPluginCatalog {
+  registerPlugin(plugin: RivusPlugin): void;
+  snapshot(): RivusPluginCatalogSnapshot;
+}
+interface RivusAgentDeployment {
+  readonly agentId: string;
+  readonly pluginId: string;
+  readonly profileId: string;
+  readonly projectSpaceId?: string;
+  readonly endpointIds: ReadonlyArray<string>;
+  readonly memory?: {
+    readonly scopes: ReadonlyArray<MemoryScope>;
+    readonly tool: boolean;
+  };
+  readonly skills: {
+    readonly allow: ReadonlyArray<string>;
+  };
+  readonly tools: {
+    readonly allow: ReadonlyArray<string>;
+  };
+}
+interface RivusResolvedToolDescriptor {
+  readonly id: string;
+  readonly version: string;
+  readonly digest: string;
+  readonly description: string;
+  readonly inputSchema: unknown;
+  readonly risk: RivusToolRisk;
+  readonly idempotency: RivusToolIdempotency;
+  readonly pluginId: string;
+}
+interface RivusToolGrantSet {
+  readonly toolIds: ReadonlyArray<string>;
+  readonly revision: string;
+}
+interface RivusSkillGrantSet {
+  readonly skillIds: ReadonlyArray<string>;
+  readonly revision: string;
+}
+interface ResolvedRivusAgentDefinition {
+  readonly agentId: string;
+  readonly pluginId: string;
+  readonly profileId: string;
+  readonly projectSpaceId?: string;
+  readonly projectSpaceRevision?: string;
+  readonly endpointIds: ReadonlyArray<string>;
+  readonly profileRevision: string;
+  readonly systemPrompt: string;
+  readonly model: Readonly<Record<string, unknown>>;
+  readonly memory: {
+    readonly scopes: ReadonlyArray<MemoryScope>;
+    readonly tool: boolean;
+  };
+  readonly skillGrantSet: RivusSkillGrantSet;
+  readonly skills: ReadonlyArray<RegisteredRivusSkill>;
+  readonly tools: ReadonlyArray<RivusResolvedToolDescriptor>;
+  readonly toolGrantSet: RivusToolGrantSet;
+}
+declare class InvalidRivusPlugin extends Error {
+  readonly name = "InvalidRivusPlugin";
+}
+//#endregion
+export { RivusToolRisk as A, RivusToolDescriptor as C, RivusToolGrantSet as D, RivusToolFactoryContext as E, RivusToolIdempotency as O, RivusSkillGrantSet as S, RivusToolExecutor as T, RivusPluginCatalogSnapshot as _, RegisteredRivusPlugin as a, RivusResolvedToolDescriptor as b, ResolvedRivusAgentDefinition as c, RivusAutomationInput as d, RivusAutomationTemplate as f, RivusPluginCatalog as g, RivusPlugin as h, RegisteredRivusAutomation as i, requiresToolApproval as j, RivusToolInputRejected as k, RivusAgentDeployment as l, RivusHostToolDescriptor as m, RIVUS_PLUGIN_API_VERSION as n, RegisteredRivusSkill as o, RivusAutomationTickContext as p, RegisteredRivusAgentProfile as r, RegisteredRivusTool as s, InvalidRivusPlugin as t, RivusAgentProfile as u, RivusPluginManifest as v, RivusToolExecutionContext as w, RivusSkillDescriptor as x, RivusPluginRegistry as y };