@rivus/agent 0.6.0 → 0.6.2

package/dist/rivus-plugin-testkit.d.ts

@@ -1,177 +1,5 @@
-import { c as MemoryScope, t as AgentMemoryAuthority } from "./agent-memory.js";
+import { h as RivusPlugin, l as RivusAgentDeployment } from "./rivus-plugin.js";
 
-//#region src/domain/rivus-plugin.d.ts
-declare const RIVUS_PLUGIN_API_VERSION = "1";
-type RivusToolRisk = "observe" | "mutate" | "irreversible" | "host-control";
-type RivusToolIdempotency = "none" | "supported" | "required";
-declare function requiresToolApproval(risk: RivusToolRisk): boolean;
-declare class RivusToolInputRejected extends Error {
-  readonly name: string;
-}
-interface RivusPluginManifest {
-  readonly apiVersion: string;
-  readonly id: string;
-  readonly version: string;
-}
-interface RivusToolExecutor {
-  execute(input: unknown, context: RivusToolExecutionContext): unknown;
-}
-interface RivusToolExecutionContext {
-  readonly agentId: string;
-  readonly instanceId: string;
-  readonly memory?: AgentMemoryAuthority;
-  readonly runId: string;
-  readonly callId: string;
-  readonly operationId?: string;
-  readonly policyEpoch: number;
-  readonly toolId: string;
-  readonly toolVersion: string;
-  readonly sessionKey: string;
-}
-interface RivusToolFactoryContext {
-  readonly toolId: string;
-  readonly toolVersion: string;
-}
-interface RivusToolDescriptor {
-  readonly id: string;
-  readonly version: string;
-  readonly digest: string;
-  readonly description: string;
-  readonly inputSchema: unknown;
-  readonly risk: RivusToolRisk;
-  readonly idempotency: RivusToolIdempotency;
-  readonly createExecutor: (context: RivusToolFactoryContext) => RivusToolExecutor;
-}
-interface RivusHostToolDescriptor extends RivusToolDescriptor {
-  readonly replayCompleted?: (input: unknown, completedResult: unknown, context: RivusToolExecutionContext) => unknown;
-}
-interface RivusSkillDescriptor {
-  readonly id: string;
-  readonly version: string;
-  readonly digest: string;
-  readonly title: string;
-  readonly content: string;
-}
-interface RivusAutomationTemplate {
-  readonly id: string;
-  readonly profileId: string;
-  readonly requestedSkillIds: ReadonlyArray<string>;
-  readonly requestedToolIds: ReadonlyArray<string>;
-  readonly createInput: (tick: RivusAutomationTickContext) => RivusAutomationInput;
-}
-interface RivusAutomationTickContext {
-  readonly occurrence: string;
-}
-interface RivusAutomationInput {
-  readonly text: string;
-}
-interface RivusAgentProfile {
-  readonly id: string;
-  readonly displayName: string;
-  readonly systemPrompt: string;
-  readonly model: Readonly<Record<string, unknown>>;
-  readonly tools: {
-    readonly allow: ReadonlyArray<string>;
-  };
-  readonly skills: {
-    readonly allow: ReadonlyArray<string>;
-  };
-  readonly memory: {
-    readonly scopes: ReadonlyArray<MemoryScope>;
-  };
-}
-interface RivusPluginRegistry {
-  registerAgentProfile(profile: RivusAgentProfile): void;
-  registerTool(tool: RivusToolDescriptor): void;
-  registerSkill(skill: RivusSkillDescriptor): void;
-  registerAutomation(template: RivusAutomationTemplate): void;
-}
-interface RivusPlugin {
-  readonly manifest: RivusPluginManifest;
-  register(registry: RivusPluginRegistry): void;
-}
-interface RegisteredRivusPlugin extends RivusPluginManifest {}
-interface RegisteredRivusTool extends RivusToolDescriptor {
-  readonly pluginId: string;
-}
-interface RegisteredRivusSkill extends RivusSkillDescriptor {
-  readonly pluginId: string;
-}
-interface RegisteredRivusAutomation extends RivusAutomationTemplate {
-  readonly pluginId: string;
-}
-interface RegisteredRivusAgentProfile extends RivusAgentProfile {
-  readonly pluginId: string;
-}
-interface RivusPluginCatalogSnapshot {
-  readonly plugins: ReadonlyArray<RegisteredRivusPlugin>;
-  readonly profiles: ReadonlyArray<RegisteredRivusAgentProfile>;
-  readonly tools: ReadonlyArray<RegisteredRivusTool>;
-  readonly skills: ReadonlyArray<RegisteredRivusSkill>;
-  readonly automations: ReadonlyArray<RegisteredRivusAutomation>;
-}
-interface RivusPluginCatalog {
-  registerPlugin(plugin: RivusPlugin): void;
-  snapshot(): RivusPluginCatalogSnapshot;
-}
-interface RivusAgentDeployment {
-  readonly agentId: string;
-  readonly pluginId: string;
-  readonly profileId: string;
-  readonly projectSpaceId?: string;
-  readonly endpointIds: ReadonlyArray<string>;
-  readonly memory?: {
-    readonly scopes: ReadonlyArray<MemoryScope>;
-    readonly tool: boolean;
-  };
-  readonly skills: {
-    readonly allow: ReadonlyArray<string>;
-  };
-  readonly tools: {
-    readonly allow: ReadonlyArray<string>;
-  };
-}
-interface RivusResolvedToolDescriptor {
-  readonly id: string;
-  readonly version: string;
-  readonly digest: string;
-  readonly description: string;
-  readonly inputSchema: unknown;
-  readonly risk: RivusToolRisk;
-  readonly idempotency: RivusToolIdempotency;
-  readonly pluginId: string;
-}
-interface RivusToolGrantSet {
-  readonly toolIds: ReadonlyArray<string>;
-  readonly revision: string;
-}
-interface RivusSkillGrantSet {
-  readonly skillIds: ReadonlyArray<string>;
-  readonly revision: string;
-}
-interface ResolvedRivusAgentDefinition {
-  readonly agentId: string;
-  readonly pluginId: string;
-  readonly profileId: string;
-  readonly projectSpaceId?: string;
-  readonly projectSpaceRevision?: string;
-  readonly endpointIds: ReadonlyArray<string>;
-  readonly profileRevision: string;
-  readonly systemPrompt: string;
-  readonly model: Readonly<Record<string, unknown>>;
-  readonly memory: {
-    readonly scopes: ReadonlyArray<MemoryScope>;
-    readonly tool: boolean;
-  };
-  readonly skillGrantSet: RivusSkillGrantSet;
-  readonly skills: ReadonlyArray<RegisteredRivusSkill>;
-  readonly tools: ReadonlyArray<RivusResolvedToolDescriptor>;
-  readonly toolGrantSet: RivusToolGrantSet;
-}
-declare class InvalidRivusPlugin extends Error {
-  readonly name = "InvalidRivusPlugin";
-}
-//#endregion
 //#region src/testing/rivus-plugin-testkit.d.ts
 interface RivusPluginLifecycleProbe {
   activate(): Promise<{
@@ -196,4 +24,4 @@ declare class RivusPluginConformanceError extends Error {
 declare function assertRivusPluginConforms(input: RivusPluginConformanceInput): Promise<RivusPluginConformanceReport>;
 declare function createFakeRivusPlugin(): RivusPlugin;
 //#endregion
-export { RivusToolExecutionContext as A, RivusPluginCatalogSnapshot as C, RivusSkillDescriptor as D, RivusResolvedToolDescriptor as E, RivusToolInputRejected as F, RivusToolRisk as I, requiresToolApproval as L, RivusToolFactoryContext as M, RivusToolGrantSet as N, RivusSkillGrantSet as O, RivusToolIdempotency as P, RivusPluginCatalog as S, RivusPluginRegistry as T, RivusAutomationInput as _, assertRivusPluginConforms as a, RivusHostToolDescriptor as b, RIVUS_PLUGIN_API_VERSION as c, RegisteredRivusPlugin as d, RegisteredRivusSkill as f, RivusAgentProfile as g, RivusAgentDeployment as h, RivusPluginLifecycleProbe as i, RivusToolExecutor as j, RivusToolDescriptor as k, RegisteredRivusAgentProfile as l, ResolvedRivusAgentDefinition as m, RivusPluginConformanceInput as n, createFakeRivusPlugin as o, RegisteredRivusTool as p, RivusPluginConformanceReport as r, InvalidRivusPlugin as s, RivusPluginConformanceError as t, RegisteredRivusAutomation as u, RivusAutomationTemplate as v, RivusPluginManifest as w, RivusPlugin as x, RivusAutomationTickContext as y };
+export { assertRivusPluginConforms as a, RivusPluginLifecycleProbe as i, RivusPluginConformanceInput as n, createFakeRivusPlugin as o, RivusPluginConformanceReport as r, RivusPluginConformanceError as t };

package/dist/rivus-plugin-testkit.js

@@ -1,4 +1,5 @@
-import { a as RIVUS_MEMORY_TOOL_ID, n as resolveRivusAgentDefinition, t as createRivusPluginCatalog } from "./rivus-plugin-registry.js";
+import { n as RIVUS_MEMORY_TOOL_ID } from "./agent-memory.js";
+import { n as resolveRivusAgentDefinition, t as createRivusPluginCatalog } from "./rivus-plugin-registry.js";
 //#region src/testing/rivus-plugin-testkit.ts
 var RivusPluginConformanceError = class extends Error {
 	name = "RivusPluginConformanceError";

package/dist/rivus-plugin.d.ts

@@ -0,0 +1,175 @@
+import { c as MemoryScope, t as AgentMemoryAuthority } from "./agent-memory.js";
+
+//#region src/domain/rivus-plugin.d.ts
+declare const RIVUS_PLUGIN_API_VERSION = "1";
+type RivusToolRisk = "observe" | "mutate" | "irreversible" | "host-control";
+type RivusToolIdempotency = "none" | "supported" | "required";
+declare function requiresToolApproval(risk: RivusToolRisk): boolean;
+declare class RivusToolInputRejected extends Error {
+  readonly name: string;
+}
+interface RivusPluginManifest {
+  readonly apiVersion: string;
+  readonly id: string;
+  readonly version: string;
+}
+interface RivusToolExecutor {
+  execute(input: unknown, context: RivusToolExecutionContext): unknown;
+}
+interface RivusToolExecutionContext {
+  readonly agentId: string;
+  readonly instanceId: string;
+  readonly memory?: AgentMemoryAuthority;
+  readonly runId: string;
+  readonly callId: string;
+  readonly operationId?: string;
+  readonly policyEpoch: number;
+  readonly toolId: string;
+  readonly toolVersion: string;
+  readonly sessionKey: string;
+}
+interface RivusToolFactoryContext {
+  readonly toolId: string;
+  readonly toolVersion: string;
+}
+interface RivusToolDescriptor {
+  readonly id: string;
+  readonly version: string;
+  readonly digest: string;
+  readonly description: string;
+  readonly inputSchema: unknown;
+  readonly risk: RivusToolRisk;
+  readonly idempotency: RivusToolIdempotency;
+  readonly createExecutor: (context: RivusToolFactoryContext) => RivusToolExecutor;
+}
+interface RivusHostToolDescriptor extends RivusToolDescriptor {
+  readonly replayCompleted?: (input: unknown, completedResult: unknown, context: RivusToolExecutionContext) => unknown;
+}
+interface RivusSkillDescriptor {
+  readonly id: string;
+  readonly version: string;
+  readonly digest: string;
+  readonly title: string;
+  readonly content: string;
+}
+interface RivusAutomationTemplate {
+  readonly id: string;
+  readonly profileId: string;
+  readonly requestedSkillIds: ReadonlyArray<string>;
+  readonly requestedToolIds: ReadonlyArray<string>;
+  readonly createInput: (tick: RivusAutomationTickContext) => RivusAutomationInput;
+}
+interface RivusAutomationTickContext {
+  readonly occurrence: string;
+}
+interface RivusAutomationInput {
+  readonly text: string;
+}
+interface RivusAgentProfile {
+  readonly id: string;
+  readonly displayName: string;
+  readonly systemPrompt: string;
+  readonly model: Readonly<Record<string, unknown>>;
+  readonly tools: {
+    readonly allow: ReadonlyArray<string>;
+  };
+  readonly skills: {
+    readonly allow: ReadonlyArray<string>;
+  };
+  readonly memory: {
+    readonly scopes: ReadonlyArray<MemoryScope>;
+  };
+}
+interface RivusPluginRegistry {
+  registerAgentProfile(profile: RivusAgentProfile): void;
+  registerTool(tool: RivusToolDescriptor): void;
+  registerSkill(skill: RivusSkillDescriptor): void;
+  registerAutomation(template: RivusAutomationTemplate): void;
+}
+interface RivusPlugin {
+  readonly manifest: RivusPluginManifest;
+  register(registry: RivusPluginRegistry): void;
+}
+interface RegisteredRivusPlugin extends RivusPluginManifest {}
+interface RegisteredRivusTool extends RivusToolDescriptor {
+  readonly pluginId: string;
+}
+interface RegisteredRivusSkill extends RivusSkillDescriptor {
+  readonly pluginId: string;
+}
+interface RegisteredRivusAutomation extends RivusAutomationTemplate {
+  readonly pluginId: string;
+}
+interface RegisteredRivusAgentProfile extends RivusAgentProfile {
+  readonly pluginId: string;
+}
+interface RivusPluginCatalogSnapshot {
+  readonly plugins: ReadonlyArray<RegisteredRivusPlugin>;
+  readonly profiles: ReadonlyArray<RegisteredRivusAgentProfile>;
+  readonly tools: ReadonlyArray<RegisteredRivusTool>;
+  readonly skills: ReadonlyArray<RegisteredRivusSkill>;
+  readonly automations: ReadonlyArray<RegisteredRivusAutomation>;
+}
+interface RivusPluginCatalog {
+  registerPlugin(plugin: RivusPlugin): void;
+  snapshot(): RivusPluginCatalogSnapshot;
+}
+interface RivusAgentDeployment {
+  readonly agentId: string;
+  readonly pluginId: string;
+  readonly profileId: string;
+  readonly projectSpaceId?: string;
+  readonly endpointIds: ReadonlyArray<string>;
+  readonly memory?: {
+    readonly scopes: ReadonlyArray<MemoryScope>;
+    readonly tool: boolean;
+  };
+  readonly skills: {
+    readonly allow: ReadonlyArray<string>;
+  };
+  readonly tools: {
+    readonly allow: ReadonlyArray<string>;
+  };
+}
+interface RivusResolvedToolDescriptor {
+  readonly id: string;
+  readonly version: string;
+  readonly digest: string;
+  readonly description: string;
+  readonly inputSchema: unknown;
+  readonly risk: RivusToolRisk;
+  readonly idempotency: RivusToolIdempotency;
+  readonly pluginId: string;
+}
+interface RivusToolGrantSet {
+  readonly toolIds: ReadonlyArray<string>;
+  readonly revision: string;
+}
+interface RivusSkillGrantSet {
+  readonly skillIds: ReadonlyArray<string>;
+  readonly revision: string;
+}
+interface ResolvedRivusAgentDefinition {
+  readonly agentId: string;
+  readonly pluginId: string;
+  readonly profileId: string;
+  readonly projectSpaceId?: string;
+  readonly projectSpaceRevision?: string;
+  readonly endpointIds: ReadonlyArray<string>;
+  readonly profileRevision: string;
+  readonly systemPrompt: string;
+  readonly model: Readonly<Record<string, unknown>>;
+  readonly memory: {
+    readonly scopes: ReadonlyArray<MemoryScope>;
+    readonly tool: boolean;
+  };
+  readonly skillGrantSet: RivusSkillGrantSet;
+  readonly skills: ReadonlyArray<RegisteredRivusSkill>;
+  readonly tools: ReadonlyArray<RivusResolvedToolDescriptor>;
+  readonly toolGrantSet: RivusToolGrantSet;
+}
+declare class InvalidRivusPlugin extends Error {
+  readonly name = "InvalidRivusPlugin";
+}
+//#endregion
+export { RivusToolRisk as A, RivusToolDescriptor as C, RivusToolGrantSet as D, RivusToolFactoryContext as E, RivusToolIdempotency as O, RivusSkillGrantSet as S, RivusToolExecutor as T, RivusPluginCatalogSnapshot as _, RegisteredRivusPlugin as a, RivusResolvedToolDescriptor as b, ResolvedRivusAgentDefinition as c, RivusAutomationInput as d, RivusAutomationTemplate as f, RivusPluginCatalog as g, RivusPlugin as h, RegisteredRivusAutomation as i, requiresToolApproval as j, RivusToolInputRejected as k, RivusAgentDeployment as l, RivusHostToolDescriptor as m, RIVUS_PLUGIN_API_VERSION as n, RegisteredRivusSkill as o, RivusAutomationTickContext as p, RegisteredRivusAgentProfile as r, RegisteredRivusTool as s, InvalidRivusPlugin as t, RivusAgentProfile as u, RivusPluginManifest as v, RivusToolExecutionContext as w, RivusSkillDescriptor as x, RivusPluginRegistry as y };

package/dist/tool-input-digest.js

@@ -0,0 +1,126 @@
+import { s as restrictMemoryScopesForAudience } from "./agent-memory.js";
+import { createHash, randomUUID } from "node:crypto";
+import { Unsafe } from "typebox";
+//#region src/infrastructure/pi/pi-skill-tool.ts
+const PI_SKILL_READER_TOOL_NAME = "rivus_read_skill";
+function createPiSkillRuntime(skills) {
+	if (skills.length === 0) return Object.freeze({ prompt: "" });
+	const skillsById = new Map(skills.map((skill) => [skill.id, skill]));
+	const prompt = [
+		"Granted Skills are versioned instructions loaded on demand.",
+		`Before following a Skill, call ${PI_SKILL_READER_TOOL_NAME} with its exact ID and follow the returned content.`,
+		"Granted Skill catalog:",
+		...skills.map((skill) => `- ${skill.id} | ${skill.title} | v${skill.version} | ${skill.digest}`)
+	].join("\n");
+	const tool = {
+		description: "Read the full versioned instructions for one Skill granted to this Agent Runtime.",
+		execute: async (_callId, input) => {
+			const skillId = readSkillId(input);
+			const skill = skillsById.get(skillId);
+			if (!skill) throw new Error(`Skill is not granted: ${skillId}`);
+			const details = {
+				contentLength: skill.content.length,
+				digest: skill.digest,
+				skillId: skill.id,
+				title: skill.title,
+				version: skill.version
+			};
+			return {
+				content: [{
+					text: skill.content,
+					type: "text"
+				}],
+				details
+			};
+		},
+		executionMode: "sequential",
+		label: "Read granted Skill",
+		name: PI_SKILL_READER_TOOL_NAME,
+		parameters: Unsafe({
+			additionalProperties: false,
+			properties: { skillId: {
+				description: "Exact Skill ID from the granted Skill catalog.",
+				type: "string"
+			} },
+			required: ["skillId"],
+			type: "object"
+		}),
+		promptSnippet: `${PI_SKILL_READER_TOOL_NAME}: read one granted Skill by exact ID`
+	};
+	return Object.freeze({
+		prompt,
+		tool
+	});
+}
+function readSkillId(input) {
+	if (input === null || typeof input !== "object" || Array.isArray(input) || typeof input.skillId !== "string") throw new Error("Skill reader input requires a string skillId");
+	return input.skillId;
+}
+//#endregion
+//#region src/application/delegation/tool-authority.ts
+const authorities = /* @__PURE__ */ new WeakMap();
+var InvalidInvocationAuthority = class extends Error {
+	name = "InvalidInvocationAuthority";
+};
+function createInvocationAuthority(authority) {
+	if (!authority.sourceMessageId.trim()) throw new InvalidInvocationAuthority("invocation authority requires a trusted source message id");
+	const reference = Object.freeze({ id: `authority:${randomUUID()}` });
+	const memory = authority.memory ? Object.freeze({
+		...authority.memory,
+		scopes: Object.freeze(restrictMemoryScopesForAudience(authority.memory.scopes, authority.memory.audience))
+	}) : void 0;
+	authorities.set(reference, Object.freeze({
+		...authority,
+		...memory ? { memory } : {}
+	}));
+	return reference;
+}
+function resolveInvocationAuthority(reference) {
+	const authority = authorities.get(reference);
+	if (!authority) throw new InvalidInvocationAuthority("invocation authority was not issued by this host");
+	return authority;
+}
+//#endregion
+//#region src/application/delegation/tool-input-digest.ts
+var InvalidStableJson = class extends Error {
+	name = "InvalidStableJson";
+};
+var InvalidToolInput = class extends InvalidStableJson {
+	name = "InvalidToolInput";
+};
+function createToolInputDigest(input) {
+	let canonical;
+	try {
+		canonical = normalizeStableJson(input);
+	} catch (error) {
+		if (error instanceof InvalidStableJson) throw new InvalidToolInput(error.message);
+		throw error;
+	}
+	return `sha256:${createHash("sha256").update(JSON.stringify(canonical)).digest("hex")}`;
+}
+function normalizeStableJson(value) {
+	return canonicalize(value, /* @__PURE__ */ new Set());
+}
+function canonicalize(value, ancestors) {
+	if (value === null || typeof value === "string" || typeof value === "boolean") return value;
+	if (typeof value === "number") {
+		if (!Number.isFinite(value)) throw new InvalidStableJson("stable JSON numbers must be finite");
+		return Object.is(value, -0) ? 0 : value;
+	}
+	if (typeof value !== "object") throw new InvalidStableJson("value must contain only stable JSON values");
+	if (ancestors.has(value)) throw new InvalidStableJson("stable JSON must not contain cycles");
+	ancestors.add(value);
+	try {
+		if (Array.isArray(value)) return Array.from({ length: value.length }, (_, index) => {
+			if (!Object.hasOwn(value, index)) throw new InvalidStableJson("stable JSON arrays must not contain holes");
+			return canonicalize(value[index], ancestors);
+		});
+		const prototype = Object.getPrototypeOf(value);
+		if (prototype !== Object.prototype && prototype !== null) throw new InvalidStableJson("stable JSON objects must be plain objects");
+		return Object.fromEntries(Object.entries(value).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([key, entry]) => [key, canonicalize(entry, ancestors)]));
+	} finally {
+		ancestors.delete(value);
+	}
+}
+//#endregion
+export { InvalidInvocationAuthority as a, PI_SKILL_READER_TOOL_NAME as c, normalizeStableJson as i, createPiSkillRuntime as l, InvalidToolInput as n, createInvocationAuthority as o, createToolInputDigest as r, resolveInvocationAuthority as s, InvalidStableJson as t };

package/examples/pi-feishu-deployment.bootstrap.ts

@@ -36,9 +36,6 @@ import {
   createLazyFeishuWebSocketEventDispatcher,
   createPiAgentLoop,
   createProjectMemoryPromptPreparer,
-  createPiSkillRuntime,
-  createPiToolNameResolver,
-  createPiToolProxyDefinitions,
   createPiSessionRegistry,
   createRoutedHumanInteractionToolApprovalService,
   createSessionScheduler,
@@ -66,7 +63,12 @@ import {
   type RivusDeploymentBootstrapContext,
   type RivusThinkingLevel
 } from "@rivus/agent";
-import { createPiProjectSkillReadTool } from "@rivus/agent/pi";
+import {
+  createPiProjectSkillReadTool,
+  createPiSkillRuntime,
+  createPiToolNameResolver,
+  createPiToolProxyDefinitions
+} from "@rivus/agent/pi";
 
 type PiSessionOptions = NonNullable<Parameters<typeof createAgentSession>[0]>;
 
@@ -233,6 +235,7 @@ export async function createRivusDeploymentAdapters(context: RivusDeploymentBoot
         agentId: input.agentId,
         botOpenId,
         cardRollover: cardRollover.transport,
+        finalizeRun: (runId) => cardRollover.rollover.releaseRun(runId),
         cancel: input.cancel,
         endpointId: input.endpointId,
         eventDispatcher: createLazyFeishuWebSocketEventDispatcher(() => new Lark.EventDispatcher({})),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rivus/agent",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "A local agent daemon core built around a usable agent harness and domain events.",
   "type": "module",
   "license": "MIT",