@rivus/gateway 0.16.6 → 0.17.0

package/dist/chunks/rivus-node-entrypoint.js

@@ -1,217 +1,18 @@
-import { l as narrowBackgroundSessionDefinition, o as createBackgroundSessionToolContracts } from "./background-session-authority.js";
-import { C as parseRivusModelCliArguments, D as deepFreeze, E as runDeploymentProcessEffect, M as disposeRuntimeCacheEntries, N as invokeRuntimeControl, O as toEffectAgentRuntime, S as createRivusModelManagementWireRequest, T as renderRivusModelCliHelp, a as InvalidRivusProjectSpace, c as RIVUS_RELEASE_DESCRIPTOR, f as gatewayTemplateDirectory, i as resolveFeishuEndpointCredentials, j as createRuntimeCache, k as toEffectAgentRuntimeInput, m as loadRivusDaemonConfig, n as loadRivusDeploymentManifest, o as validateRivusDeploymentManifest, s as validateRivusProjectSpaceDeployment, u as gatewayPackageManifestPath, w as renderRivusModelCliArgumentError, y as loadMergedLocalEnvFile } from "./node-rivus-deployment-manifest.js";
+import { S as deepFreeze, _ as loadMergedLocalEnvFile, b as validateRivusDeploymentManifest, c as parseRivusModelCliArguments, f as gatewayPackageManifestPath, g as loadRivusDaemonConfig, h as loadRivusDeploymentManifest, i as RIVUS_RELEASE_DESCRIPTOR, l as renderRivusModelCliArgumentError, m as gatewayTemplateDirectory, n as disposeRuntimeCacheEntries, r as invokeRuntimeControl, s as createRivusModelManagementWireRequest, t as createRuntimeCache, u as renderRivusModelCliHelp, v as resolveFeishuEndpointCredentials, x as validateRivusProjectSpaceDeployment, y as InvalidRivusProjectSpace } from "./runtime-cache.js";
+import { n as narrowBackgroundSessionDefinition, t as createBackgroundSessionToolContracts } from "./background-session-authority.js";
 import { createRequire } from "node:module";
-import { Cause, Effect, Either, Exit } from "effect";
-import { RIVUS_MEMORY_TOOL_PLUGIN_ID, RIVUS_RUNTIME_TOOL_IDS, createRivusMemoryToolContract, isRivusRuntimeToolId } from "@rivus/runtime";
 import { createSha256Digest, createStableId } from "@rivus/platform/identity";
-import { randomUUID } from "node:crypto";
-import { lstat, mkdir, open, readFile, readdir, realpath, rmdir, stat, unlink, writeFile } from "node:fs/promises";
-import { createConnection } from "node:net";
-import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+import { RIVUS_MEMORY_TOOL_PLUGIN_ID, RIVUS_RUNTIME_TOOL_IDS, createRivusMemoryToolContract, isRivusRuntimeToolId } from "@rivus/runtime";
 import { homedir } from "node:os";
+import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
+import { Cause, Effect, Either, Exit } from "effect";
+import { lstat, mkdir, open, readFile, readdir, realpath, rmdir, stat, unlink, writeFile } from "node:fs/promises";
+import { randomUUID } from "node:crypto";
 import { assertPathWithin, isPathWithin } from "@rivus/platform/filesystem";
+import { createConnection } from "node:net";
 import { constants as constants$1 } from "node:fs";
-//#region src/core/application/agent-host/registry/agent-instance-registry.ts
-var AgentInstanceConflict = class extends Error {
-	name = "AgentInstanceConflict";
-};
-function createEffectAgentInstanceRegistry(identity, options = {}) {
-	const records = /* @__PURE__ */ new Map();
-	for (const record of options.initialRecords ?? []) {
-		if (bindingKey(record.binding, record.agentId) !== record.bindingKey) throw new AgentInstanceConflict(`invalid binding key: ${record.bindingKey}`);
-		if (records.has(record.bindingKey)) throw new AgentInstanceConflict(`duplicate binding: ${record.bindingKey}`);
-		records.set(record.bindingKey, freezeRecord(record));
-	}
-	const resolveBinding = (instanceBinding, definition) => Effect.try({
-		try: () => {
-			const runtimeGenerationId = identity.createRuntimeGenerationId({
-				agentId: definition.agentId,
-				profileRevision: definition.profileRevision,
-				projectSpaceId: definition.projectSpaceId ?? null,
-				projectSpaceRevision: definition.projectSpaceRevision ?? null,
-				runtimeToolGrantRevision: definition.runtimeToolGrantSet.revision,
-				skillGrantRevision: definition.skillGrantSet.revision,
-				toolGrantRevision: definition.toolGrantSet.revision
-			});
-			const key = bindingKey(instanceBinding, definition.agentId);
-			const existing = records.get(key);
-			if (existing) {
-				if (existing.runtimeGenerationId !== runtimeGenerationId) throw new AgentInstanceConflict(`binding ${key} belongs to a different runtime generation`);
-				return existing;
-			}
-			const record = freezeRecord({
-				agentId: definition.agentId,
-				binding: instanceBinding,
-				bindingKey: key,
-				instanceId: identity.createInstanceId({
-					bindingKey: key,
-					runtimeGenerationId
-				}),
-				runtimeGenerationId
-			});
-			records.set(key, record);
-			return record;
-		},
-		catch: (error) => error instanceof AgentInstanceConflict ? error : new AgentInstanceConflict(String(error))
-	});
-	return {
-		resolveAutomation: (automationId, definition) => resolveBinding({
-			automationId,
-			kind: "automation"
-		}, definition),
-		resolveBackgroundSession: (agentId, definition) => resolveBinding({
-			agentId,
-			kind: "background-session"
-		}, definition),
-		resolveEndpoint: (endpointId, definition) => resolveBinding({
-			endpointId,
-			kind: "endpoint"
-		}, definition),
-		snapshot: () => Effect.sync(() => Object.freeze([...records.values()]))
-	};
-}
-function bindingKey(binding, agentId) {
-	const bindingId = binding.kind === "endpoint" ? binding.endpointId : binding.kind === "automation" ? binding.automationId : binding.agentId;
-	return `${binding.kind}:${bindingId}:${agentId}`;
-}
-function freezeRecord(record) {
-	return Object.freeze({
-		...record,
-		binding: Object.freeze({ ...record.binding })
-	});
-}
-//#endregion
-//#region src/core/application/agent-host/routing/agent-host.ts
-var InvalidAgentHostBinding = class extends Error {
-	name = "InvalidAgentHostBinding";
-};
-function createEffectAgentHost(options) {
-	return Effect.gen(function* () {
-		const definitions = new Map(options.definitions.map((definition) => [definition.agentId, definition]));
-		const endpoints = /* @__PURE__ */ new Map();
-		const automations = /* @__PURE__ */ new Map();
-		const backgroundSessions = /* @__PURE__ */ new Map();
-		for (const endpoint of options.endpoints) {
-			if (endpoints.has(endpoint.id)) return yield* Effect.fail(new InvalidAgentHostBinding(`duplicate endpoint: ${endpoint.id}`));
-			const definition = definitions.get(endpoint.agentId);
-			if (!definition) return yield* Effect.fail(new InvalidAgentHostBinding(`unknown endpoint agent: ${endpoint.agentId}`));
-			if (!definition.endpointIds.includes(endpoint.id)) return yield* Effect.fail(new InvalidAgentHostBinding(`endpoint ${endpoint.id} is not declared by ${endpoint.agentId}`));
-			endpoints.set(endpoint.id, yield* options.registry.resolveEndpoint(endpoint.id, definition));
-		}
-		for (const automation of options.automations ?? []) {
-			if (automations.has(automation.id)) return yield* Effect.fail(new InvalidAgentHostBinding(`duplicate automation: ${automation.id}`));
-			if (!definitions.has(automation.definition.agentId)) return yield* Effect.fail(new InvalidAgentHostBinding(`unknown automation agent: ${automation.definition.agentId}`));
-			automations.set(automation.id, yield* options.registry.resolveAutomation(automation.id, automation.definition));
-		}
-		for (const backgroundSession of options.backgroundSessions ?? []) {
-			if (backgroundSession.definition.agentId !== backgroundSession.agentId) return yield* Effect.fail(new InvalidAgentHostBinding(`background session ${backgroundSession.agentId} cannot bind definition ${backgroundSession.definition.agentId}`));
-			if (backgroundSessions.has(backgroundSession.agentId)) return yield* Effect.fail(new InvalidAgentHostBinding(`duplicate background session agent: ${backgroundSession.agentId}`));
-			if (!definitions.has(backgroundSession.agentId)) return yield* Effect.fail(new InvalidAgentHostBinding(`unknown background session agent: ${backgroundSession.agentId}`));
-			backgroundSessions.set(backgroundSession.agentId, yield* options.registry.resolveBackgroundSession(backgroundSession.agentId, backgroundSession.definition));
-		}
-		const resolve = (records, id, message) => {
-			const instance = records.get(id);
-			return instance ? Effect.succeed(instance) : Effect.fail(new InvalidAgentHostBinding(message));
-		};
-		const resolveEndpoint = (endpointId) => resolve(endpoints, endpointId, `unknown endpoint: ${endpointId}`);
-		const resolveAutomation = (automationId) => resolve(automations, automationId, `unknown automation: ${automationId}`);
-		const resolveBackgroundSession = (agentId) => resolve(backgroundSessions, agentId, `unknown background session agent: ${agentId}`);
-		return {
-			cancelBackgroundSession: (agentId, input) => resolveBackgroundSession(agentId).pipe(Effect.flatMap((instance) => options.runtime.cancel(instance, input))),
-			cancelEndpoint: (endpointId, input) => resolveEndpoint(endpointId).pipe(Effect.flatMap((instance) => options.runtime.cancel(instance, input))),
-			dispose: () => options.runtime.disposeAll(),
-			handleAutomation: (automationId, input) => resolveAutomation(automationId).pipe(Effect.flatMap((instance) => options.runtime.run(instance, input))),
-			handleBackgroundSession: (agentId, input) => resolveBackgroundSession(agentId).pipe(Effect.flatMap((instance) => options.runtime.run(instance, input))),
-			handleEndpoint: (endpointId, input) => resolveEndpoint(endpointId).pipe(Effect.flatMap((instance) => options.runtime.run(instance, input))),
-			resolveAutomation,
-			resolveBackgroundSession,
-			resolveEndpoint,
-			steerEndpoint: (endpointId, input) => resolveEndpoint(endpointId).pipe(Effect.flatMap((instance) => options.runtime.steer(instance, input)))
-		};
-	});
-}
-//#endregion
-//#region src/platform/runtime-pool/runtime-pool.ts
-var RuntimeResourceBusy = class extends Error {
-	name = "RuntimeResourceBusy";
-};
-var RuntimeResourceDisposed = class extends Error {
-	name = "RuntimeResourceDisposed";
-};
-var RuntimePoolDisposalTimedOut = class extends Error {
-	name = "RuntimePoolDisposalTimedOut";
-};
-const DEFAULT_RUNTIME_DISPOSE_TIMEOUT_MS = 1e4;
-function createEffectRuntimePool(options) {
-	const runtimes = createRuntimeCache();
-	const active = /* @__PURE__ */ new Map();
-	const lifecycle = Effect.unsafeMakeSemaphore(1);
-	const existingRuntime = (instance) => Effect.gen(function* () {
-		const selected = yield* runtimes.getExisting(instance.instanceId);
-		if (!selected || !(yield* runtimes.isCurrent(instance.instanceId, selected.entry))) return void 0;
-		return selected.runtime;
-	});
-	return {
-		cancel: (instance, input) => invokeRuntimeControl(existingRuntime(instance), (runtime) => runtime.cancel?.(input)),
-		disposeAll: () => Effect.gen(function* () {
-			const entries = yield* runtimes.drain();
-			yield* lifecycle.withPermits(1)(Effect.sync(() => active.clear()));
-			yield* disposeRuntimeCacheEntries({
-				dispose: (runtime) => runtime.dispose?.() ?? Effect.void,
-				entries,
-				failureMessage: "runtime pool disposal failed",
-				timeout: {
-					milliseconds: options.disposeTimeoutMs ?? DEFAULT_RUNTIME_DISPOSE_TIMEOUT_MS,
-					onTimeout: () => new RuntimePoolDisposalTimedOut(`runtime pool disposal timed out after ${options.disposeTimeoutMs ?? DEFAULT_RUNTIME_DISPOSE_TIMEOUT_MS}ms`)
-				}
-			});
-		}),
-		run: (instance, input) => Effect.gen(function* () {
-			const selected = yield* runtimes.getOrCreate(instance.instanceId, () => options.createRuntime(instance));
-			if (!(yield* runtimes.isCurrent(instance.instanceId, selected.entry))) return yield* Effect.fail(new RuntimeResourceDisposed(`runtime was disposed before run start: ${instance.instanceId}`));
-			if (selected.runtime.concurrency === "managed") return yield* selected.runtime.run(input);
-			const token = yield* lifecycle.withPermits(1)(Effect.gen(function* () {
-				if (!(yield* runtimes.isCurrent(instance.instanceId, selected.entry))) return yield* Effect.fail(new RuntimeResourceDisposed(`runtime was disposed before run start: ${instance.instanceId}`));
-				if (active.has(instance.instanceId)) return yield* Effect.fail(new RuntimeResourceBusy(`runtime already has an active run: ${instance.instanceId}`));
-				const activeToken = Symbol(instance.instanceId);
-				active.set(instance.instanceId, activeToken);
-				return activeToken;
-			}));
-			return yield* selected.runtime.run(input).pipe(Effect.ensuring(lifecycle.withPermits(1)(Effect.sync(() => {
-				if (active.get(instance.instanceId) === token) active.delete(instance.instanceId);
-			}))));
-		}),
-		steer: (instance, input) => invokeRuntimeControl(existingRuntime(instance), (runtime) => runtime.steer?.(input))
-	};
-}
-//#endregion
-//#region src/adapters/agent/runtime/effect-agent-runtime-pool.ts
-var AgentInstanceBusy = class extends Error {
-	name = "AgentInstanceBusy";
-};
-var AgentRuntimeDisposed = class extends Error {
-	name = "AgentRuntimeDisposed";
-};
-function createAgentHostRuntimePool(factory, disposeTimeoutMs) {
-	const pool = createEffectRuntimePool({
-		createRuntime: (instance) => factory.create(instance),
-		...disposeTimeoutMs === void 0 ? {} : { disposeTimeoutMs }
-	});
-	return {
-		cancel: (instance, input) => pool.cancel(instance, input),
-		disposeAll: () => pool.disposeAll().pipe(Effect.mapError(mapRuntimePoolError)),
-		run: (instance, input) => pool.run(instance, input).pipe(Effect.mapError(mapRuntimePoolError)),
-		steer: (instance, steering) => pool.steer(instance, steering)
-	};
-}
-function mapRuntimePoolError(error) {
-	if (error instanceof RuntimeResourceBusy) return new AgentInstanceBusy(error.message.replace(/^runtime /, "agent instance "));
-	if (error instanceof RuntimeResourceDisposed) return new AgentRuntimeDisposed(error.message.replace(/^runtime /, "agent runtime "));
-	if (error instanceof RuntimePoolDisposalTimedOut) return new AgentRuntimeDisposed(error.message.replace(/^runtime pool /, "agent runtime "));
-	return error;
-}
-//#endregion
+import { unwrapExit } from "@rivus/platform/effect";
 //#region src/core/application/agent-catalog/contracts/rivus-plugin.ts
 const RIVUS_PLUGIN_API_VERSION = "1";
 var InvalidRivusPlugin = class extends Error {
@@ -276,7 +77,7 @@ function uniqueRivusRuntimeToolIds(ids, owner) {
 }
 //#endregion
 //#region src/core/application/agent-catalog/catalog/rivus-plugin-catalog.ts
-function createRivusPluginCatalog(runtime) {
+function createRivusPluginCatalog$1(runtime) {
 	const plugins = /* @__PURE__ */ new Map();
 	const profiles = /* @__PURE__ */ new Map();
 	const tools = /* @__PURE__ */ new Map();
@@ -352,19 +153,6 @@ function narrowRivusToolGrantSet(parent, restrictions, runtime) {
 		toolIds
 	});
 }
-function intersectRivusToolIds(sets, runtime) {
-	const toolIds = intersectToolIds(sets);
-	return runtime.deepFreeze({
-		revision: runtime.digest(JSON.stringify(toolIds)),
-		toolIds
-	});
-}
-function createRivusToolGrantSetOperations(runtime) {
-	return Object.freeze({
-		intersect: (sets) => intersectRivusToolIds(sets, runtime),
-		narrow: (parent, restrictions) => narrowRivusToolGrantSet(parent, restrictions, runtime)
-	});
-}
 function intersectToolIds(sets) {
 	const [first = [], ...rest] = sets;
 	return [...new Set(first)].filter((id) => rest.every((set) => set.includes(id))).sort();
@@ -435,17 +223,17 @@ function uniqueScopes(scopes) {
 //#endregion
 //#region src/core/application/agent-catalog/resolution/rivus-agent-definition-resolver.ts
 function createRivusAgentDefinitionResolver(providers, runtime) {
-	return Object.freeze({ resolve: (catalog, deployment) => resolveRivusAgentDefinition(catalog, deployment, providers, runtime) });
+	return Object.freeze({ resolve: (catalog, deployment) => resolveRivusAgentDefinition$1(catalog, deployment, providers, runtime) });
 }
 function createRivusAgentCatalog(providers, runtime) {
 	const resolver = createRivusAgentDefinitionResolver(providers, runtime);
 	return Object.freeze({
-		createPluginCatalog: () => createRivusPluginCatalog(runtime),
+		createPluginCatalog: () => createRivusPluginCatalog$1(runtime),
 		resolve: (catalog, deployment) => resolver.resolve(catalog, deployment),
 		restrictGrants: (definition, restriction) => restrictRivusAgentDefinitionGrants(definition, restriction, runtime)
 	});
 }
-function resolveRivusAgentDefinition(catalog, deployment, providers, runtime) {
+function resolveRivusAgentDefinition$1(catalog, deployment, providers, runtime) {
 	const snapshot = catalog.snapshot();
 	const plugin = snapshot.plugins.find((candidate) => candidate.id === deployment.pluginId);
 	if (!plugin) throw new InvalidRivusPlugin(`unknown deployment plugin: ${deployment.pluginId}`);
@@ -632,239 +420,19 @@ function toRuntimeContribution(tool) {
 	});
 }
 //#endregion
-//#region src/platform/project/setup/rivus-project-initializer.ts
-const TEMPLATE_FILES = Object.freeze({
-	"current-weather.mjs": "current-weather.mjs",
-	"https-response-reader.mjs": "https-response-reader.mjs",
-	"rivus-agents.plugin.mjs": "rivus-starter.plugin.mjs",
-	"rivus.bootstrap.ts": "pi-feishu-deployment.bootstrap.ts"
+//#region src/bootstrap/catalog/rivus-agent-catalog.ts
+const runtime = Object.freeze({
+	digest: createSha256Digest,
+	deepFreeze
 });
-async function initializeRivusProject(options) {
-	const directory = resolve(options.directory);
-	const descriptor = options.releaseDescriptor ?? RIVUS_RELEASE_DESCRIPTOR;
-	const files = /* @__PURE__ */ new Map([
-		[".env.example", environmentTemplate$1()],
-		[".gitignore", ".env.local\n.rivus/\nnode_modules/\n"],
-		["deploy/launchd/com.rivus.agent.plist", launchdService(directory, options.nodeExecutable)],
-		["deploy/systemd/rivus.service", systemdService(directory, options.nodeExecutable)],
-		["package.json", projectPackageJson(directory, descriptor)],
-		["rivus.config.json", deploymentManifest$1()]
-	]);
-	for (const [target, source] of Object.entries(TEMPLATE_FILES)) files.set(target, await readFile(join(options.templateDirectory, source), "utf8"));
-	const paths = [...files.keys()].sort();
-	await assertSafeProjectAncestors(directory, paths);
-	const conflicts = await findConflicts(directory, paths);
-	if (conflicts.length > 0) throw new Error(`Rivus project initialization refused; refusing to overwrite: ${conflicts.join(", ")}`);
-	const createdDirectories = [];
-	const createdFiles = [];
-	const writeProjectFile = options.writeProjectFile ?? writeExclusiveProjectFile;
-	try {
-		for (const path of paths) {
-			const destination = join(directory, path);
-			await ensureDirectory(dirname(destination), directory, createdDirectories);
-			await assertSafeProjectAncestors(directory, [path]);
-			await writeProjectFile(destination, files.get(path));
-			createdFiles.push(destination);
-		}
-	} catch (error) {
-		const rollbackErrors = await rollbackCreatedPaths(createdFiles, createdDirectories);
-		if (rollbackErrors.length > 0) throw new AggregateError([error, ...rollbackErrors], "Rivus project initialization failed and rollback was incomplete");
-		throw error;
-	}
-	return {
-		directory,
-		files: Object.freeze(paths)
-	};
-}
-async function writeExclusiveProjectFile(path, contents) {
-	await writeFile(path, contents, {
-		encoding: "utf8",
-		flag: "wx"
-	});
-}
-async function assertSafeProjectAncestors(directory, paths) {
-	const rootState = await lstatOrUndefined(directory);
-	if (rootState?.isSymbolicLink()) throw new Error("Rivus project initialization refused; symbolic link ancestor: .");
-	if (rootState && !rootState.isDirectory()) throw new Error("Rivus project initialization refused; project path is not a directory");
-	if (!rootState) return;
-	for (const path of paths) {
-		let current = directory;
-		for (const segment of path.split("/").slice(0, -1)) {
-			current = join(current, segment);
-			const state = await lstatOrUndefined(current);
-			if (!state) break;
-			if (state.isSymbolicLink()) throw new Error(`Rivus project initialization refused; symbolic link ancestor: ${relative(directory, current)}`);
-			if (!state.isDirectory()) throw new Error(`Rivus project initialization refused; non-directory ancestor: ${relative(directory, current)}`);
-		}
-	}
-}
-async function ensureDirectory(path, projectRoot, createdDirectories) {
-	try {
-		await mkdir(path);
-		createdDirectories.push(path);
-	} catch (error) {
-		if (isMissingPath$1(error)) {
-			const parent = dirname(path);
-			if (parent === path) throw error;
-			await ensureDirectory(parent, projectRoot, createdDirectories);
-			await ensureDirectory(path, projectRoot, createdDirectories);
-			return;
-		}
-		if (!isAlreadyExists(error)) throw error;
-		const state = await lstat(path);
-		if (state.isSymbolicLink()) {
-			if (isPathWithin(projectRoot, path)) throw new Error(`Rivus project initialization refused; symbolic link ancestor: ${relative(projectRoot, path) || "."}`);
-			if ((await stat(path)).isDirectory()) return;
-		}
-		if (!state.isDirectory()) throw new Error(`Rivus project initialization refused; non-directory ancestor: ${path}`);
-	}
-}
-async function rollbackCreatedPaths(files, directories) {
-	const errors = [];
-	for (const path of files.reverse()) try {
-		await unlink(path);
-	} catch (error) {
-		if (!isMissingPath$1(error)) errors.push(asError$1(error));
-	}
-	for (const path of directories.reverse()) try {
-		await rmdir(path);
-	} catch (error) {
-		if (!isMissingPath$1(error) && !isDirectoryNotEmpty(error)) errors.push(asError$1(error));
-	}
-	return errors;
-}
-async function lstatOrUndefined(path) {
-	try {
-		return await lstat(path);
-	} catch (error) {
-		if (isMissingPath$1(error)) return void 0;
-		throw error;
-	}
-}
-function isAlreadyExists(error) {
-	return error instanceof Error && "code" in error && error.code === "EEXIST";
-}
-function isDirectoryNotEmpty(error) {
-	return error instanceof Error && "code" in error && error.code === "ENOTEMPTY";
-}
-function asError$1(error) {
-	return error instanceof Error ? error : new Error(String(error));
-}
-async function findConflicts(directory, paths) {
-	const conflicts = [];
-	for (const path of paths) try {
-		await lstat(join(directory, path));
-		conflicts.push(path);
-	} catch (error) {
-		if (!isMissingPath$1(error)) throw error;
-	}
-	return conflicts;
-}
-function isMissingPath$1(error) {
-	return error instanceof Error && "code" in error && error.code === "ENOENT";
-}
-function projectPackageJson(directory, descriptor) {
-	const { dependencies, version } = descriptor;
-	const projectName = sanitizePackageName(basename(directory));
-	return `${JSON.stringify({
-		name: projectName,
-		private: true,
-		type: "module",
-		scripts: {
-			"check-config": "rivus --manifest ./rivus.config.json --check-config",
-			doctor: "rivus doctor .",
-			start: "rivus --env-file .env.local --bootstrap ./rivus.bootstrap.ts --manifest ./rivus.config.json"
-		},
-		dependencies: {
-			"@earendil-works/pi-coding-agent": dependencies["@earendil-works/pi-coding-agent"],
-			"@larksuiteoapi/node-sdk": dependencies["@larksuiteoapi/node-sdk"],
-			"@rivus/agent": `^${version}`,
-			effect: dependencies.effect
-		}
-	}, null, 2)}\n`;
-}
-function sanitizePackageName(value) {
-	return value.toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/^[._-]+|[._-]+$/g, "") || "rivus-app";
-}
-function deploymentManifest$1() {
-	return `${JSON.stringify({
-		plugins: [{
-			id: "rivus-starter",
-			module: "./rivus-agents.plugin.mjs",
-			required: true
-		}],
-		agents: [{
-			agentId: "agent-a",
-			endpointIds: ["feishu-agent-a"],
-			pluginId: "rivus-starter",
-			profileId: "agent-a",
-			skills: { allow: [] },
-			tools: { allow: ["rivus-starter/current-weather"] }
-		}],
-		defaultAgentId: "agent-a",
-		defaultEndpointId: "feishu-agent-a",
-		endpoints: [{
-			agentId: "agent-a",
-			baseUrl: "https://open.feishu.cn",
-			cardStreamLeaseMs: 51e4,
-			credentialRef: "env:RIVUS_FEISHU",
-			enabled: true,
-			experimental: { cotMessages: false },
-			groupPolicy: "mention-only",
-			id: "feishu-agent-a",
-			progressDisplay: "collapsed",
-			required: true,
-			sessionNamespace: "rivus-starter",
-			streamMinIntervalMs: 200
-		}]
-	}, null, 2)}\n`;
-}
-function environmentTemplate$1() {
-	return [
-		"# Copy this file to .env.local and keep the real values untracked.",
-		"RIVUS_FEISHU_APP_ID=",
-		"RIVUS_FEISHU_APP_SECRET=",
-		"PI_MODEL=",
-		"PI_API_KEY=",
-		"# PI_BASE_URL=",
-		"RIVUS_WEATHER_DEFAULT_LOCATION=上海",
-		"# LANGFUSE_BASE_URL=https://jp.cloud.langfuse.com",
-		"# LANGFUSE_PUBLIC_KEY=",
-		"# LANGFUSE_SECRET_KEY=",
-		"# RIVUS_TELEMETRY_CONTENT=redacted",
-		""
-	].join("\n");
-}
-function systemdService(directory, nodeExecutable) {
-	const cli = join(directory, "node_modules", "@rivus", "agent", "dist", "cli.js");
-	return `[Unit]\nDescription=Rivus Agent\nAfter=network-online.target\nWants=network-online.target\n\n[Service]\nType=simple\nWorkingDirectory=${systemdPath(directory)}\nExecStart=${systemdQuote(nodeExecutable)} ${systemdQuote(cli)} --env-file .env.local --bootstrap ./rivus.bootstrap.ts --manifest ./rivus.config.json\nRestart=on-failure\nRestartSec=5\nEnvironment=NODE_ENV=production\n\n[Install]\nWantedBy=default.target\n`;
-}
-function systemdPath(value) {
-	return value.replaceAll("%", "%%");
-}
-function systemdQuote(value) {
-	return `"${value.replace(/%/g, "%%").replace(/\$/g, () => "$$").replace(/\\/g, "\\\\").replace(/"/g, "\\\"")}"`;
-}
-function launchdService(directory, nodeExecutable) {
-	return `<?xml version="1.0" encoding="UTF-8"?>\n<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">\n<plist version="1.0">\n<dict>\n  <key>Label</key>\n  <string>com.rivus.agent</string>\n  <key>ProgramArguments</key>\n  <array>\n${[
-		nodeExecutable,
-		join(directory, "node_modules", "@rivus", "agent", "dist", "cli.js"),
-		"--env-file",
-		".env.local",
-		"--bootstrap",
-		"./rivus.bootstrap.ts",
-		"--manifest",
-		"./rivus.config.json"
-	].map((value) => `    <string>${xmlEscape(value)}</string>`).join("\n")}\n  </array>\n  <key>WorkingDirectory</key>\n  <string>${xmlEscape(directory)}</string>\n  <key>RunAtLoad</key>\n  <true/>\n  <key>KeepAlive</key>\n  <dict>\n    <key>SuccessfulExit</key>\n    <false/>\n  </dict>\n  <key>ThrottleInterval</key>\n  <integer>5</integer>\n</dict>\n</plist>\n`;
+function createRivusPluginCatalog() {
+	return createRivusPluginCatalog$1(runtime);
 }
-function xmlEscape(value) {
-	return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+function createBootstrapAgentCatalog(backgroundSessions = false) {
+	return createRivusAgentCatalog([createRivusHostToolDescriptorProvider({ backgroundSessions })], runtime);
 }
-//#endregion
-//#region src/adapters/deployment/plugin/rivus-builtin-specifiers.ts
-const RIVUS_BUILTIN_SPECIFIERS = /* @__PURE__ */ new Map([["@rivus/agent/bootstrap/pi-feishu", "@rivus/gateway/bootstrap/pi-feishu"], ["@rivus/agent/plugin/starter", "@rivus/gateway/plugin/starter"]]);
-function resolveRivusBuiltinSpecifier(specifier) {
-	return RIVUS_BUILTIN_SPECIFIERS.get(specifier) ?? specifier;
+function resolveRivusAgentDefinition(catalog, deployment, options = {}) {
+	return createBootstrapAgentCatalog(options.backgroundSessions === true).resolve(catalog, deployment);
 }
 //#endregion
 //#region src/adapters/deployment/plugin/rivus-plugin-module.ts
@@ -872,13 +440,13 @@ function resolveRivusPluginModule(module) {
 	const candidate = "default" in module ? module.default : module;
 	return (typeof candidate === "function" ? Effect.tryPromise({
 		try: () => Promise.resolve(candidate()),
-		catch: toError$5
+		catch: toError$4
 	}) : Effect.succeed(candidate)).pipe(Effect.flatMap((plugin) => isRivusPlugin(plugin) ? Effect.succeed(plugin) : Effect.fail(/* @__PURE__ */ new Error("plugin module default export is not a RivusPlugin or factory"))));
 }
 function isRivusPlugin(value) {
 	return value !== null && typeof value === "object" && "manifest" in value && "register" in value && typeof value.register === "function";
 }
-function toError$5(error) {
+function toError$4(error) {
 	return error instanceof Error ? error : new Error(String(error));
 }
 //#endregion
@@ -886,7 +454,8 @@ function toError$5(error) {
 function findTrustedPackageRoot(packageManifestPath) {
 	return Effect.tryPromise({
 		try: async () => {
-			const packageRoot = dirname(await realpath(packageManifestPath));
+			const manifestRealpath = await realpath(packageManifestPath);
+			const packageRoot = dirname(manifestRealpath);
 			let current = packageRoot;
 			for (;;) {
 				if (basename(current) === "node_modules") return current;
@@ -917,206 +486,50 @@ function createNodeRivusPluginModuleLoader(options = {}) {
 function loadNodeRivusPluginModule(request, options = {}) {
 	return resolveNodeRivusPluginModulePath(request, options).pipe(Effect.flatMap((resolvedRealpath) => Effect.tryPromise({
 		try: () => import(pathToFileURL(resolvedRealpath).href),
-		catch: toError$4
+		catch: toError$3
 	})));
 }
 function resolveNodeRivusPluginModulePath(request, options = {}) {
 	return Effect.gen(function* () {
 		const deploymentRoot = yield* Effect.tryPromise({
 			try: () => realpath(request.deploymentRoot),
-			catch: toError$4
+			catch: toError$3
 		});
-		const moduleSpecifier = resolveRivusBuiltinSpecifier(request.module);
+		const moduleSpecifier = request.module;
 		const relativeModule = moduleSpecifier.startsWith("./") || moduleSpecifier.startsWith("../");
 		const resolutionManifest = relativeModule ? join(deploymentRoot, "package.json") : options.packageManifestPath ?? join(deploymentRoot, "package.json");
 		const resolved = yield* Effect.try({
 			try: () => createRequire(resolutionManifest).resolve(moduleSpecifier),
-			catch: toError$4
+			catch: toError$3
 		});
 		const resolvedRealpath = yield* Effect.tryPromise({
 			try: () => realpath(resolved),
-			catch: toError$4
+			catch: toError$3
 		});
 		return yield* validateTrustedModulePath(relativeModule ? deploymentRoot : options.packageManifestPath ? yield* findTrustedPackageRoot(options.packageManifestPath) : deploymentRoot, resolvedRealpath, `plugin module ${request.module}`);
 	});
 }
-function toError$4(error) {
+function toError$3(error) {
 	return error instanceof Error ? error : new Error(String(error));
 }
 //#endregion
-//#region src/adapters/deployment/inspection/rivus-project-doctor.ts
-const REQUIRED_FILES = Object.freeze([
-	"package.json",
-	"rivus.bootstrap.ts",
-	"rivus.config.json"
-]);
-const REQUIRED_DEPENDENCIES = Object.freeze([
-	"@rivus/agent",
-	"@earendil-works/pi-coding-agent",
-	"@larksuiteoapi/node-sdk",
-	"effect"
-]);
-function diagnoseRivusProject(options) {
-	return Effect.gen(function* () {
-		const directory = resolve(options.directory);
-		const checks = [checkNode$1(options.nodeVersion)];
-		checks.push(yield* Effect.tryPromise({
-			try: () => checkFiles(directory),
-			catch: toError$3
-		}));
-		checks.push(yield* Effect.tryPromise({
-			try: () => checkDependencies(directory),
-			catch: toError$3
-		}));
-		const manifestResult = yield* checkManifest$1(directory);
-		checks.push(manifestResult.check);
-		const envFilePath = resolve(directory, options.envFilePath ?? ".env.local");
-		checks.push(yield* Effect.tryPromise({
-			try: () => checkCredentials$1(manifestResult.manifest, envFilePath, options.env),
-			catch: toError$3
-		}));
-		return Object.freeze({
-			checks: Object.freeze(checks),
-			directory,
-			ready: checks.every(({ status }) => status === "pass")
-		});
-	});
-}
-function checkNode$1(version) {
-	const [major, minor] = version.split(".").map(Number);
-	if (major === 24 && Number.isInteger(minor) && minor >= 11) return {
-		message: `Node.js ${version} satisfies the supported ^24.11 runtime`,
-		name: "node",
-		status: "pass"
-	};
-	return {
-		message: `Node.js 24.11 or newer on major 24 is required; current version is ${version}`,
-		name: "node",
-		status: "fail"
-	};
+//#region src/adapters/deployment/inspection/rivus-home-deployment-inspector.ts
+const DEFAULT_BOOTSTRAP_PEERS = Object.freeze(["@earendil-works/pi-coding-agent", "@larksuiteoapi/node-sdk"]);
+function createRivusHomeDeploymentInspector(options = {}) {
+	const resolveModule = options.resolveModule ?? ((specifier) => defaultResolveModule(specifier, options.packageManifestPath));
+	const resolvePluginModule = options.resolvePluginModule ?? ((request) => resolveNodeRivusPluginModulePath(request, options.packageManifestPath ? { packageManifestPath: options.packageManifestPath } : {}));
+	return { inspect: (input) => Effect.gen(function* () {
+		const manifestResult = yield* checkManifest$1(input.home);
+		const credentials = yield* checkCredentials$1(input.home, manifestResult.manifest, input.env, input.envFilePath);
+		const modules = yield* checkModules(input.home, manifestResult.manifest, resolveModule, resolvePluginModule);
+		return {
+			credentials,
+			manifest: manifestResult.check,
+			modules
+		};
+	}) };
 }
-async function checkFiles(directory) {
-	const missing = await missingRegularFiles(directory, REQUIRED_FILES);
-	return missing.length === 0 ? {
-		message: "required project files are present",
-		name: "files",
-		status: "pass"
-	} : {
-		message: `required project files are missing: ${missing.join(", ")}`,
-		name: "files",
-		status: "fail"
-	};
-}
-async function checkDependencies(directory) {
-	const packageFiles = REQUIRED_DEPENDENCIES.map((name) => join("node_modules", ...name.split("/"), "package.json"));
-	const missingIndexes = new Set((await missingRegularFiles(directory, packageFiles)).map((path) => packageFiles.indexOf(path)));
-	const missing = REQUIRED_DEPENDENCIES.filter((_, index) => missingIndexes.has(index));
-	return missing.length === 0 ? {
-		message: "Rivus, Pi, Feishu, and Effect dependencies are installed",
-		name: "dependencies",
-		status: "pass"
-	} : {
-		message: `run npm install; missing local dependencies: ${missing.join(", ")}`,
-		name: "dependencies",
-		status: "fail"
-	};
-}
-function checkManifest$1(directory) {
-	return loadRivusDeploymentManifest(join(directory, "rivus.config.json")).pipe(Effect.flatMap((manifest) => Effect.gen(function* () {
-		validateRivusDeploymentManifest(manifest);
-		const missingModules = [];
-		for (const plugin of manifest.plugins) {
-			const result = yield* resolveNodeRivusPluginModulePath({
-				deploymentRoot: directory,
-				module: plugin.module,
-				pluginId: plugin.id
-			}).pipe(Effect.either);
-			if (Either.isLeft(result)) missingModules.push(plugin.module);
-		}
-		if (missingModules.length > 0) return { check: {
-			message: `manifest Plugin modules are missing: ${missingModules.join(", ")}`,
-			name: "manifest",
-			status: "fail"
-		} };
-		return {
-			check: {
-				message: "deployment manifest is valid",
-				name: "manifest",
-				status: "pass"
-			},
-			manifest
-		};
-	})), Effect.catchAll((error) => Effect.succeed({ check: {
-		message: `deployment manifest is invalid: ${error.message}`,
-		name: "manifest",
-		status: "fail"
-	} })));
-}
-async function checkCredentials$1(manifest, envFilePath, env) {
-	let mergedEnv;
-	try {
-		mergedEnv = await loadMergedLocalEnvFile(envFilePath, env);
-	} catch (error) {
-		return {
-			message: `required env file is unavailable at ${envFilePath}: ${error instanceof Error ? error.message : String(error)}`,
-			name: "credentials",
-			status: "fail"
-		};
-	}
-	if (!manifest) return {
-		message: "enabled Endpoint credentials cannot be checked until the deployment manifest is valid",
-		name: "credentials",
-		status: "fail"
-	};
-	try {
-		for (const endpoint of manifest.endpoints.filter(({ enabled }) => enabled)) resolveFeishuEndpointCredentials(endpoint.credentialRef, mergedEnv);
-		return {
-			message: "enabled Endpoint credential references resolve",
-			name: "credentials",
-			status: "pass"
-		};
-	} catch (error) {
-		return {
-			message: `enabled Endpoint credentials are incomplete: ${error instanceof Error ? error.message : String(error)}`,
-			name: "credentials",
-			status: "fail"
-		};
-	}
-}
-async function missingRegularFiles(directory, paths) {
-	const missing = [];
-	for (const path of paths) try {
-		if (!(await stat(resolve(directory, path))).isFile()) missing.push(path);
-	} catch (error) {
-		if (!isMissingPath(error)) throw error;
-		missing.push(path);
-	}
-	return missing;
-}
-function isMissingPath(error) {
-	return error instanceof Error && "code" in error && error.code === "ENOENT";
-}
-function toError$3(error) {
-	return error instanceof Error ? error : new Error(String(error));
-}
-//#endregion
-//#region src/adapters/deployment/inspection/rivus-home-deployment-inspector.ts
-const DEFAULT_BOOTSTRAP_PEERS = Object.freeze(["@earendil-works/pi-coding-agent", "@larksuiteoapi/node-sdk"]);
-function createRivusHomeDeploymentInspector(options = {}) {
-	const resolveModule = options.resolveModule ?? ((specifier) => defaultResolveModule(specifier, options.packageManifestPath));
-	const resolvePluginModule = options.resolvePluginModule ?? ((request) => resolveNodeRivusPluginModulePath(request, options.packageManifestPath ? { packageManifestPath: options.packageManifestPath } : {}));
-	return { inspect: (input) => Effect.gen(function* () {
-		const manifestResult = yield* checkManifest(input.home);
-		const credentials = yield* checkCredentials(input.home, manifestResult.manifest, input.env, input.envFilePath);
-		const modules = yield* checkModules(input.home, manifestResult.manifest, resolveModule, resolvePluginModule);
-		return {
-			credentials,
-			manifest: manifestResult.check,
-			modules
-		};
-	}) };
-}
-function checkManifest(home) {
+function checkManifest$1(home) {
 	return loadRivusDeploymentManifest(home.manifestPath).pipe(Effect.map((manifest) => {
 		validateRivusDeploymentManifest(manifest);
 		return {
@@ -1139,7 +552,7 @@ function checkModules(home, manifest, resolveModule, resolvePluginModule) {
 		name: "modules",
 		status: "fail"
 	});
-	const specifiers = [resolveRivusBuiltinSpecifier(home.bootstrap), ...home.bootstrap === "@rivus/agent/bootstrap/pi-feishu" || home.bootstrap === "@rivus/gateway/bootstrap/pi-feishu" ? DEFAULT_BOOTSTRAP_PEERS : []];
+	const specifiers = [home.bootstrap, ...home.bootstrap === "@rivus/gateway/bootstrap/pi-feishu" ? DEFAULT_BOOTSTRAP_PEERS : []];
 	return Effect.gen(function* () {
 		const missing = [];
 		for (const specifier of specifiers) {
@@ -1149,7 +562,7 @@ function checkModules(home, manifest, resolveModule, resolvePluginModule) {
 		for (const plugin of manifest.plugins) {
 			const result = yield* toEffect(() => resolvePluginModule({
 				deploymentRoot: home.directory,
-				module: resolveRivusBuiltinSpecifier(plugin.module),
+				module: plugin.module,
 				pluginId: plugin.id
 			})).pipe(Effect.either);
 			if (result._tag === "Left") missing.push(`${plugin.module} (${formatError(result.left)})`);
@@ -1179,7 +592,7 @@ function toEffect(read) {
 		}
 	});
 }
-function checkCredentials(home, manifest, env, envFilePath) {
+function checkCredentials$1(home, manifest, env, envFilePath) {
 	if (!manifest) return Effect.succeed({
 		message: "credentials cannot be checked until manifest is valid",
 		name: "credentials",
@@ -1239,7 +652,7 @@ function loadRivusHome(directoryPath) {
 				workspaceDirectory: resolveHomePath(directory, config.workspace, "workspace")
 			};
 		},
-		catch: asError
+		catch: asError$1
 	});
 }
 function parseRivusHomeConfig(value) {
@@ -1279,14 +692,14 @@ function record(value, owner) {
 	if (typeof value !== "object" || value === null || Array.isArray(value)) throw new Error(`${owner} must be an object`);
 	return value;
 }
-function asError(error) {
+function asError$1(error) {
 	return error instanceof Error ? error : new Error(String(error));
 }
 //#endregion
 //#region src/platform/home/doctor/rivus-home-doctor.ts
 function diagnoseRivusHome(input, options) {
 	return Effect.gen(function* () {
-		const checks = [checkNode(input.nodeVersion)];
+		const checks = [checkNode$1(input.nodeVersion)];
 		const loaded = yield* options.load(input.directory).pipe(Effect.either);
 		if (Either.isLeft(loaded)) {
 			checks.push({
@@ -1312,7 +725,7 @@ function diagnoseRivusHome(input, options) {
 		return report(input.directory, checks);
 	});
 }
-function checkNode(version) {
+function checkNode$1(version) {
 	const [major, minor] = version.split(".").map(Number);
 	return major === 24 && Number.isInteger(minor) && minor >= 11 ? {
 		message: `Node.js ${version} satisfies the supported ^24.11 runtime`,
@@ -1366,10 +779,10 @@ function createRivusHomeLayout() {
 	return {
 		directories: HOME_DIRECTORIES,
 		files: /* @__PURE__ */ new Map([
-			[".env.example", environmentTemplate()],
+			[".env.example", environmentTemplate$1()],
 			[".gitignore", ".DS_Store\n.env\nlogs/\nstate/\nworkspace/work/tmp/\n"],
 			["config.json", homeConfig()],
-			["rivus.config.json", deploymentManifest()],
+			["rivus.config.json", deploymentManifest$1()],
 			["workspace/AGENTS.md", agentsTemplate()],
 			["workspace/IDENTITY.md", "# Identity\n\nName: Rivus\n\nRole: Personal agent\n"],
 			["workspace/MEMORY.md", "# Curated Memory\n\nStore confirmed, durable facts and decisions here.\n"],
@@ -1395,7 +808,7 @@ function homeConfig() {
 		workspace: "workspace"
 	}, null, 2)}\n`;
 }
-function deploymentManifest() {
+function deploymentManifest$1() {
 	return `${JSON.stringify({
 		agents: [{
 			agentId: "personal",
@@ -1448,7 +861,7 @@ function deploymentManifest() {
 		}]
 	}, null, 2)}\n`;
 }
-function environmentTemplate() {
+function environmentTemplate$1() {
 	return [
 		"# Copy this file to .env and keep the real values untracked.",
 		"RIVUS_FEISHU_APP_ID=",
@@ -1632,7 +1045,7 @@ function shellQuote(value) {
 }
 //#endregion
 //#region src/adapters/cli/model/rivus-model-management-socket-client.ts
-const MAX_FRAME_BYTES = 64 * 1024;
+const MAX_FRAME_BYTES = 65536;
 const DEFAULT_TIMEOUT_MS = 1e4;
 var RivusModelManagementTransportError = class extends Error {
 	code;
@@ -1705,7 +1118,8 @@ function resolveRivusModelSocketPath(options) {
 		return resolve(configured);
 	}
 	const configuredHome = optional(options.env.RIVUS_HOME);
-	return join(configuredHome ? resolveAbsoluteHome(configuredHome) : resolve(options.homeDirectory, ".rivus-agent"), RIVUS_MODEL_SOCKET_RELATIVE_PATH);
+	const home = configuredHome ? resolveAbsoluteHome(configuredHome) : resolve(options.homeDirectory, ".rivus-agent");
+	return join(home, RIVUS_MODEL_SOCKET_RELATIVE_PATH);
 }
 function isRivusModelManagementEnabled(env) {
 	const value = optional(env[RIVUS_MODEL_MANAGEMENT_ENABLED_ENV]);
@@ -1715,8 +1129,393 @@ function resolveAbsoluteHome(value) {
 	if (!isAbsolute(value)) throw new Error("RIVUS_HOME must be an absolute path");
 	return resolve(value);
 }
-function optional(value) {
-	return value?.trim() || void 0;
+function optional(value) {
+	return value?.trim() || void 0;
+}
+//#endregion
+//#region src/adapters/deployment/inspection/rivus-project-doctor.ts
+const REQUIRED_FILES = Object.freeze([
+	"package.json",
+	"rivus.bootstrap.ts",
+	"rivus.config.json"
+]);
+const REQUIRED_DEPENDENCIES = Object.freeze([
+	"@rivus/agent",
+	"@earendil-works/pi-coding-agent",
+	"@larksuiteoapi/node-sdk",
+	"effect"
+]);
+function diagnoseRivusProject(options) {
+	return Effect.gen(function* () {
+		const directory = resolve(options.directory);
+		const checks = [checkNode(options.nodeVersion)];
+		checks.push(yield* Effect.tryPromise({
+			try: () => checkFiles(directory),
+			catch: toError$1
+		}));
+		checks.push(yield* Effect.tryPromise({
+			try: () => checkDependencies(directory),
+			catch: toError$1
+		}));
+		const manifestResult = yield* checkManifest(directory);
+		checks.push(manifestResult.check);
+		const envFilePath = resolve(directory, options.envFilePath ?? ".env.local");
+		checks.push(yield* Effect.tryPromise({
+			try: () => checkCredentials(manifestResult.manifest, envFilePath, options.env),
+			catch: toError$1
+		}));
+		return Object.freeze({
+			checks: Object.freeze(checks),
+			directory,
+			ready: checks.every(({ status }) => status === "pass")
+		});
+	});
+}
+function checkNode(version) {
+	const [major, minor] = version.split(".").map(Number);
+	if (major === 24 && Number.isInteger(minor) && minor >= 11) return {
+		message: `Node.js ${version} satisfies the supported ^24.11 runtime`,
+		name: "node",
+		status: "pass"
+	};
+	return {
+		message: `Node.js 24.11 or newer on major 24 is required; current version is ${version}`,
+		name: "node",
+		status: "fail"
+	};
+}
+async function checkFiles(directory) {
+	const missing = await missingRegularFiles(directory, REQUIRED_FILES);
+	return missing.length === 0 ? {
+		message: "required project files are present",
+		name: "files",
+		status: "pass"
+	} : {
+		message: `required project files are missing: ${missing.join(", ")}`,
+		name: "files",
+		status: "fail"
+	};
+}
+async function checkDependencies(directory) {
+	const packageFiles = REQUIRED_DEPENDENCIES.map((name) => join("node_modules", ...name.split("/"), "package.json"));
+	const missingIndexes = new Set((await missingRegularFiles(directory, packageFiles)).map((path) => packageFiles.indexOf(path)));
+	const missing = REQUIRED_DEPENDENCIES.filter((_, index) => missingIndexes.has(index));
+	return missing.length === 0 ? {
+		message: "Rivus, Pi, Feishu, and Effect dependencies are installed",
+		name: "dependencies",
+		status: "pass"
+	} : {
+		message: `run npm install; missing local dependencies: ${missing.join(", ")}`,
+		name: "dependencies",
+		status: "fail"
+	};
+}
+function checkManifest(directory) {
+	return loadRivusDeploymentManifest(join(directory, "rivus.config.json")).pipe(Effect.flatMap((manifest) => Effect.gen(function* () {
+		validateRivusDeploymentManifest(manifest);
+		const missingModules = [];
+		for (const plugin of manifest.plugins) {
+			const result = yield* resolveNodeRivusPluginModulePath({
+				deploymentRoot: directory,
+				module: plugin.module,
+				pluginId: plugin.id
+			}).pipe(Effect.either);
+			if (Either.isLeft(result)) missingModules.push(plugin.module);
+		}
+		if (missingModules.length > 0) return { check: {
+			message: `manifest Plugin modules are missing: ${missingModules.join(", ")}`,
+			name: "manifest",
+			status: "fail"
+		} };
+		return {
+			check: {
+				message: "deployment manifest is valid",
+				name: "manifest",
+				status: "pass"
+			},
+			manifest
+		};
+	})), Effect.catchAll((error) => Effect.succeed({ check: {
+		message: `deployment manifest is invalid: ${error.message}`,
+		name: "manifest",
+		status: "fail"
+	} })));
+}
+async function checkCredentials(manifest, envFilePath, env) {
+	let mergedEnv;
+	try {
+		mergedEnv = await loadMergedLocalEnvFile(envFilePath, env);
+	} catch (error) {
+		return {
+			message: `required env file is unavailable at ${envFilePath}: ${error instanceof Error ? error.message : String(error)}`,
+			name: "credentials",
+			status: "fail"
+		};
+	}
+	if (!manifest) return {
+		message: "enabled Endpoint credentials cannot be checked until the deployment manifest is valid",
+		name: "credentials",
+		status: "fail"
+	};
+	try {
+		for (const endpoint of manifest.endpoints.filter(({ enabled }) => enabled)) resolveFeishuEndpointCredentials(endpoint.credentialRef, mergedEnv);
+		return {
+			message: "enabled Endpoint credential references resolve",
+			name: "credentials",
+			status: "pass"
+		};
+	} catch (error) {
+		return {
+			message: `enabled Endpoint credentials are incomplete: ${error instanceof Error ? error.message : String(error)}`,
+			name: "credentials",
+			status: "fail"
+		};
+	}
+}
+async function missingRegularFiles(directory, paths) {
+	const missing = [];
+	for (const path of paths) try {
+		if (!(await stat(resolve(directory, path))).isFile()) missing.push(path);
+	} catch (error) {
+		if (!isMissingPath$1(error)) throw error;
+		missing.push(path);
+	}
+	return missing;
+}
+function isMissingPath$1(error) {
+	return error instanceof Error && "code" in error && error.code === "ENOENT";
+}
+function toError$1(error) {
+	return error instanceof Error ? error : new Error(String(error));
+}
+//#endregion
+//#region src/platform/project/setup/rivus-project-initializer.ts
+const TEMPLATE_FILES = Object.freeze({
+	"current-weather.mjs": "current-weather.mjs",
+	"https-response-reader.mjs": "https-response-reader.mjs",
+	"rivus-agents.plugin.mjs": "rivus-starter.plugin.mjs",
+	"rivus.bootstrap.ts": "pi-feishu-deployment.bootstrap.ts"
+});
+async function initializeRivusProject(options) {
+	const directory = resolve(options.directory);
+	const descriptor = options.releaseDescriptor ?? RIVUS_RELEASE_DESCRIPTOR;
+	const files = /* @__PURE__ */ new Map([
+		[".env.example", environmentTemplate()],
+		[".gitignore", ".env.local\n.rivus/\nnode_modules/\n"],
+		["deploy/launchd/com.rivus.agent.plist", launchdService(directory, options.nodeExecutable)],
+		["deploy/systemd/rivus.service", systemdService(directory, options.nodeExecutable)],
+		["package.json", projectPackageJson(directory, descriptor)],
+		["rivus.config.json", deploymentManifest()]
+	]);
+	for (const [target, source] of Object.entries(TEMPLATE_FILES)) files.set(target, await readFile(join(options.templateDirectory, source), "utf8"));
+	const paths = [...files.keys()].sort();
+	await assertSafeProjectAncestors(directory, paths);
+	const conflicts = await findConflicts(directory, paths);
+	if (conflicts.length > 0) throw new Error(`Rivus project initialization refused; refusing to overwrite: ${conflicts.join(", ")}`);
+	const createdDirectories = [];
+	const createdFiles = [];
+	const writeProjectFile = options.writeProjectFile ?? writeExclusiveProjectFile;
+	try {
+		for (const path of paths) {
+			const destination = join(directory, path);
+			await ensureDirectory(dirname(destination), directory, createdDirectories);
+			await assertSafeProjectAncestors(directory, [path]);
+			await writeProjectFile(destination, files.get(path));
+			createdFiles.push(destination);
+		}
+	} catch (error) {
+		const rollbackErrors = await rollbackCreatedPaths(createdFiles, createdDirectories);
+		if (rollbackErrors.length > 0) throw new AggregateError([error, ...rollbackErrors], "Rivus project initialization failed and rollback was incomplete");
+		throw error;
+	}
+	return {
+		directory,
+		files: Object.freeze(paths)
+	};
+}
+async function writeExclusiveProjectFile(path, contents) {
+	await writeFile(path, contents, {
+		encoding: "utf8",
+		flag: "wx"
+	});
+}
+async function assertSafeProjectAncestors(directory, paths) {
+	const rootState = await lstatOrUndefined(directory);
+	if (rootState?.isSymbolicLink()) throw new Error("Rivus project initialization refused; symbolic link ancestor: .");
+	if (rootState && !rootState.isDirectory()) throw new Error("Rivus project initialization refused; project path is not a directory");
+	if (!rootState) return;
+	for (const path of paths) {
+		let current = directory;
+		for (const segment of path.split("/").slice(0, -1)) {
+			current = join(current, segment);
+			const state = await lstatOrUndefined(current);
+			if (!state) break;
+			if (state.isSymbolicLink()) throw new Error(`Rivus project initialization refused; symbolic link ancestor: ${relative(directory, current)}`);
+			if (!state.isDirectory()) throw new Error(`Rivus project initialization refused; non-directory ancestor: ${relative(directory, current)}`);
+		}
+	}
+}
+async function ensureDirectory(path, projectRoot, createdDirectories) {
+	try {
+		await mkdir(path);
+		createdDirectories.push(path);
+	} catch (error) {
+		if (isMissingPath(error)) {
+			const parent = dirname(path);
+			if (parent === path) throw error;
+			await ensureDirectory(parent, projectRoot, createdDirectories);
+			await ensureDirectory(path, projectRoot, createdDirectories);
+			return;
+		}
+		if (!isAlreadyExists(error)) throw error;
+		const state = await lstat(path);
+		if (state.isSymbolicLink()) {
+			if (isPathWithin(projectRoot, path)) throw new Error(`Rivus project initialization refused; symbolic link ancestor: ${relative(projectRoot, path) || "."}`);
+			if ((await stat(path)).isDirectory()) return;
+		}
+		if (!state.isDirectory()) throw new Error(`Rivus project initialization refused; non-directory ancestor: ${path}`);
+	}
+}
+async function rollbackCreatedPaths(files, directories) {
+	const errors = [];
+	for (const path of files.reverse()) try {
+		await unlink(path);
+	} catch (error) {
+		if (!isMissingPath(error)) errors.push(asError(error));
+	}
+	for (const path of directories.reverse()) try {
+		await rmdir(path);
+	} catch (error) {
+		if (!isMissingPath(error) && !isDirectoryNotEmpty(error)) errors.push(asError(error));
+	}
+	return errors;
+}
+async function lstatOrUndefined(path) {
+	try {
+		return await lstat(path);
+	} catch (error) {
+		if (isMissingPath(error)) return;
+		throw error;
+	}
+}
+function isAlreadyExists(error) {
+	return error instanceof Error && "code" in error && error.code === "EEXIST";
+}
+function isDirectoryNotEmpty(error) {
+	return error instanceof Error && "code" in error && error.code === "ENOTEMPTY";
+}
+function asError(error) {
+	return error instanceof Error ? error : new Error(String(error));
+}
+async function findConflicts(directory, paths) {
+	const conflicts = [];
+	for (const path of paths) try {
+		await lstat(join(directory, path));
+		conflicts.push(path);
+	} catch (error) {
+		if (!isMissingPath(error)) throw error;
+	}
+	return conflicts;
+}
+function isMissingPath(error) {
+	return error instanceof Error && "code" in error && error.code === "ENOENT";
+}
+function projectPackageJson(directory, descriptor) {
+	const { dependencies, version } = descriptor;
+	const projectName = sanitizePackageName(basename(directory));
+	return `${JSON.stringify({
+		name: projectName,
+		private: true,
+		type: "module",
+		scripts: {
+			"check-config": "rivus --manifest ./rivus.config.json --check-config",
+			doctor: "rivus doctor .",
+			start: "rivus --env-file .env.local --bootstrap ./rivus.bootstrap.ts --manifest ./rivus.config.json"
+		},
+		dependencies: {
+			"@earendil-works/pi-coding-agent": dependencies["@earendil-works/pi-coding-agent"],
+			"@larksuiteoapi/node-sdk": dependencies["@larksuiteoapi/node-sdk"],
+			"@rivus/agent": `^${version}`,
+			effect: dependencies.effect
+		}
+	}, null, 2)}\n`;
+}
+function sanitizePackageName(value) {
+	return value.toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/^[._-]+|[._-]+$/g, "") || "rivus-app";
+}
+function deploymentManifest() {
+	return `${JSON.stringify({
+		plugins: [{
+			id: "rivus-starter",
+			module: "./rivus-agents.plugin.mjs",
+			required: true
+		}],
+		agents: [{
+			agentId: "agent-a",
+			endpointIds: ["feishu-agent-a"],
+			pluginId: "rivus-starter",
+			profileId: "agent-a",
+			skills: { allow: [] },
+			tools: { allow: ["rivus-starter/current-weather"] }
+		}],
+		defaultAgentId: "agent-a",
+		defaultEndpointId: "feishu-agent-a",
+		endpoints: [{
+			agentId: "agent-a",
+			baseUrl: "https://open.feishu.cn",
+			cardStreamLeaseMs: 51e4,
+			credentialRef: "env:RIVUS_FEISHU",
+			enabled: true,
+			experimental: { cotMessages: false },
+			groupPolicy: "mention-only",
+			id: "feishu-agent-a",
+			progressDisplay: "collapsed",
+			required: true,
+			sessionNamespace: "rivus-starter",
+			streamMinIntervalMs: 200
+		}]
+	}, null, 2)}\n`;
+}
+function environmentTemplate() {
+	return [
+		"# Copy this file to .env.local and keep the real values untracked.",
+		"RIVUS_FEISHU_APP_ID=",
+		"RIVUS_FEISHU_APP_SECRET=",
+		"PI_MODEL=",
+		"PI_API_KEY=",
+		"# PI_BASE_URL=",
+		"RIVUS_WEATHER_DEFAULT_LOCATION=上海",
+		"# LANGFUSE_BASE_URL=https://jp.cloud.langfuse.com",
+		"# LANGFUSE_PUBLIC_KEY=",
+		"# LANGFUSE_SECRET_KEY=",
+		"# RIVUS_TELEMETRY_CONTENT=redacted",
+		""
+	].join("\n");
+}
+function systemdService(directory, nodeExecutable) {
+	const cli = join(directory, "node_modules", "@rivus", "agent", "dist", "cli.js");
+	return `[Unit]\nDescription=Rivus Agent\nAfter=network-online.target\nWants=network-online.target\n\n[Service]\nType=simple\nWorkingDirectory=${systemdPath(directory)}\nExecStart=${systemdQuote(nodeExecutable)} ${systemdQuote(cli)} --env-file .env.local --bootstrap ./rivus.bootstrap.ts --manifest ./rivus.config.json\nRestart=on-failure\nRestartSec=5\nEnvironment=NODE_ENV=production\n\n[Install]\nWantedBy=default.target\n`;
+}
+function systemdPath(value) {
+	return value.replaceAll("%", "%%");
+}
+function systemdQuote(value) {
+	return `"${value.replace(/%/g, "%%").replace(/\$/g, () => "$$").replace(/\\/g, "\\\\").replace(/"/g, "\\\"")}"`;
+}
+function launchdService(directory, nodeExecutable) {
+	return `<?xml version="1.0" encoding="UTF-8"?>\n<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">\n<plist version="1.0">\n<dict>\n  <key>Label</key>\n  <string>com.rivus.agent</string>\n  <key>ProgramArguments</key>\n  <array>\n${[
+		nodeExecutable,
+		join(directory, "node_modules", "@rivus", "agent", "dist", "cli.js"),
+		"--env-file",
+		".env.local",
+		"--bootstrap",
+		"./rivus.bootstrap.ts",
+		"--manifest",
+		"./rivus.config.json"
+	].map((value) => `    <string>${xmlEscape(value)}</string>`).join("\n")}\n  </array>\n  <key>WorkingDirectory</key>\n  <string>${xmlEscape(directory)}</string>\n  <key>RunAtLoad</key>\n  <true/>\n  <key>KeepAlive</key>\n  <dict>\n    <key>SuccessfulExit</key>\n    <false/>\n  </dict>\n  <key>ThrottleInterval</key>\n  <integer>5</integer>\n</dict>\n</plist>\n`;
+}
+function xmlEscape(value) {
+	return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 }
 //#endregion
 //#region src/adapters/openclaw/config/openclaw-env-import.ts
@@ -1987,12 +1786,12 @@ async function runRivusRecoveryCliCommand(control, command) {
 			deliveryId: command.deliveryId,
 			endpointId: command.endpointId,
 			expectedRevision: command.expectedRevision,
-			note: await readPrivateTextFile(command.noteFilePath, "Recovery note", 16 * 1024)
+			note: await readPrivateTextFile(command.noteFilePath, "Recovery note", 16384)
 		}));
 		case "resolve-tool-operation": {
-			const note = await readPrivateTextFile(command.noteFilePath, "Recovery note", 16 * 1024);
+			const note = await readPrivateTextFile(command.noteFilePath, "Recovery note", 16384);
 			const outcome = command.outcome.status === "applied" ? {
-				result: parseToolResult(await readPrivateTextFile(command.outcome.resultFilePath, "Tool result", 1024 * 1024)),
+				result: parseToolResult(await readPrivateTextFile(command.outcome.resultFilePath, "Tool result", 1048576)),
 				status: "applied"
 			} : command.outcome;
 			return Effect.runPromise(control.resolveToolOperation({
@@ -3056,98 +2855,210 @@ function createRivusDaemonShutdownController(options) {
 	};
 }
 //#endregion
-//#region src/adapters/deployment/process/process-deployment-adapters.ts
-function createProcessDeploymentAdapterPorts(factories, runEffect) {
+//#region src/platform/runtime-pool/runtime-pool.ts
+var RuntimeResourceBusy = class extends Error {
+	name = "RuntimeResourceBusy";
+};
+var RuntimeResourceDisposed = class extends Error {
+	name = "RuntimeResourceDisposed";
+};
+var RuntimePoolDisposalTimedOut = class extends Error {
+	name = "RuntimePoolDisposalTimedOut";
+};
+const DEFAULT_RUNTIME_DISPOSE_TIMEOUT_MS = 1e4;
+function createEffectRuntimePool(options) {
+	const runtimes = createRuntimeCache();
+	const active = /* @__PURE__ */ new Map();
+	const lifecycle = Effect.unsafeMakeSemaphore(1);
+	const existingRuntime = (instance) => Effect.gen(function* () {
+		const selected = yield* runtimes.getExisting(instance.instanceId);
+		if (!selected || !(yield* runtimes.isCurrent(instance.instanceId, selected.entry))) return;
+		return selected.runtime;
+	});
 	return {
-		...factories.createAutomation ? { automationFactory: { create: (input) => adaptAutomationFactory(factories.createAutomation, input, runEffect) } } : {},
-		...factories.createBackgroundSession ? { backgroundSessionFactory: { create: (input) => adaptBackgroundSessionFactory(factories.createBackgroundSession, input, runEffect) } } : {},
-		endpointFactory: { create: (input) => adaptEndpointFactory(factories.createEndpoint, input, runEffect) },
-		runtimeFactory: { create: (input) => Effect.tryPromise({
-			try: () => Promise.resolve(factories.createRuntime(input)),
-			catch: toError$1
-		}).pipe(Effect.map((runtime) => toEffectAgentRuntime(runtime, runEffect))) }
+		cancel: (instance, input) => invokeRuntimeControl(existingRuntime(instance), (runtime) => runtime.cancel?.(input)),
+		disposeAll: () => Effect.gen(function* () {
+			const entries = yield* runtimes.drain();
+			yield* lifecycle.withPermits(1)(Effect.sync(() => active.clear()));
+			yield* disposeRuntimeCacheEntries({
+				dispose: (runtime) => runtime.dispose?.() ?? Effect.void,
+				entries,
+				failureMessage: "runtime pool disposal failed",
+				timeout: {
+					milliseconds: options.disposeTimeoutMs ?? DEFAULT_RUNTIME_DISPOSE_TIMEOUT_MS,
+					onTimeout: () => new RuntimePoolDisposalTimedOut(`runtime pool disposal timed out after ${options.disposeTimeoutMs ?? DEFAULT_RUNTIME_DISPOSE_TIMEOUT_MS}ms`)
+				}
+			});
+		}),
+		run: (instance, input) => Effect.gen(function* () {
+			const selected = yield* runtimes.getOrCreate(instance.instanceId, () => options.createRuntime(instance));
+			if (!(yield* runtimes.isCurrent(instance.instanceId, selected.entry))) return yield* Effect.fail(new RuntimeResourceDisposed(`runtime was disposed before run start: ${instance.instanceId}`));
+			if (selected.runtime.concurrency === "managed") return yield* selected.runtime.run(input);
+			const token = yield* lifecycle.withPermits(1)(Effect.gen(function* () {
+				if (!(yield* runtimes.isCurrent(instance.instanceId, selected.entry))) return yield* Effect.fail(new RuntimeResourceDisposed(`runtime was disposed before run start: ${instance.instanceId}`));
+				if (active.has(instance.instanceId)) return yield* Effect.fail(new RuntimeResourceBusy(`runtime already has an active run: ${instance.instanceId}`));
+				const activeToken = Symbol(instance.instanceId);
+				active.set(instance.instanceId, activeToken);
+				return activeToken;
+			}));
+			return yield* selected.runtime.run(input).pipe(Effect.ensuring(lifecycle.withPermits(1)(Effect.sync(() => {
+				if (active.get(instance.instanceId) === token) active.delete(instance.instanceId);
+			}))));
+		}),
+		steer: (instance, input) => invokeRuntimeControl(existingRuntime(instance), (runtime) => runtime.steer?.(input))
 	};
 }
-function adaptEndpointFactory(create, input, runEffect) {
-	return Effect.tryPromise({
-		try: async () => {
-			return toLifecycleAdapter(await create({
-				agentId: input.agentId,
-				cancel: (request) => runEffect(input.cancel(request)),
-				definition: input.definition,
-				endpointId: input.endpointId,
-				handle: (request) => runEffect(input.handle(toEffectAgentRuntimeInput(request))),
-				instanceId: input.instanceId,
-				...input.projectSpaceId ? { projectSpaceId: input.projectSpaceId } : {},
-				steer: (request) => runEffect(input.steer(request))
-			}));
-		},
-		catch: toError$1
+//#endregion
+//#region src/adapters/agent/runtime/effect-agent-runtime-pool.ts
+var AgentInstanceBusy = class extends Error {
+	name = "AgentInstanceBusy";
+};
+var AgentRuntimeDisposed = class extends Error {
+	name = "AgentRuntimeDisposed";
+};
+function createAgentHostRuntimePool(factory, disposeTimeoutMs) {
+	const pool = createEffectRuntimePool({
+		createRuntime: (instance) => factory.create(instance),
+		...disposeTimeoutMs === void 0 ? {} : { disposeTimeoutMs }
 	});
+	return {
+		cancel: (instance, input) => pool.cancel(instance, input),
+		disposeAll: () => pool.disposeAll().pipe(Effect.mapError((error) => error instanceof AggregateError && error.errors.length === 1 ? error.errors[0] : mapRuntimePoolError(error))),
+		run: (instance, input) => pool.run(instance, input).pipe(Effect.mapError(mapRuntimePoolError)),
+		steer: (instance, steering) => pool.steer(instance, steering)
+	};
 }
-function adaptAutomationFactory(create, input, runEffect) {
-	return Effect.tryPromise({
-		try: async () => toLifecycleAdapter(await create({
-			automationId: input.automationId,
-			definition: input.definition,
-			deliveryEndpoint: input.deliveryEndpoint,
-			instanceId: input.instanceId,
-			run: (request) => runEffect(input.run(request))
-		})),
-		catch: toError$1
-	});
+function mapRuntimePoolError(error) {
+	if (error instanceof RuntimeResourceBusy) return new AgentInstanceBusy(error.message.replace(/^runtime /, "agent instance "));
+	if (error instanceof RuntimeResourceDisposed) return new AgentRuntimeDisposed(error.message.replace(/^runtime /, "agent runtime "));
+	if (error instanceof RuntimePoolDisposalTimedOut) return new AgentRuntimeDisposed(error.message.replace(/^runtime pool /, "agent runtime "));
+	return error;
 }
-function adaptBackgroundSessionFactory(create, input, runEffect) {
-	return Effect.tryPromise({
-		try: async () => {
-			const adapter = await create({
-				agentIds: input.agentIds,
-				cancel: (request) => runEffect(input.cancel(request)),
-				config: input.config,
-				run: (request) => runEffect(input.run({
-					agentId: request.agentId,
-					invocation: request.invocation,
-					...request.onUpdate ? { onUpdate: (update) => Effect.tryPromise({
-						try: async () => request.onUpdate(update),
-						catch: toError$1
-					}) } : {},
-					sessionKey: request.sessionKey,
-					text: request.text
-				}))
+//#endregion
+//#region src/core/application/agent-host/registry/agent-instance-registry.ts
+var AgentInstanceConflict = class extends Error {
+	name = "AgentInstanceConflict";
+};
+function createEffectAgentInstanceRegistry(identity, options = {}) {
+	const records = /* @__PURE__ */ new Map();
+	for (const record of options.initialRecords ?? []) {
+		if (bindingKey(record.binding, record.agentId) !== record.bindingKey) throw new AgentInstanceConflict(`invalid binding key: ${record.bindingKey}`);
+		if (records.has(record.bindingKey)) throw new AgentInstanceConflict(`duplicate binding: ${record.bindingKey}`);
+		records.set(record.bindingKey, freezeRecord(record));
+	}
+	const resolveBinding = (instanceBinding, definition) => Effect.try({
+		try: () => {
+			const runtimeGenerationId = identity.createRuntimeGenerationId({
+				agentId: definition.agentId,
+				profileRevision: definition.profileRevision,
+				projectSpaceId: definition.projectSpaceId ?? null,
+				projectSpaceRevision: definition.projectSpaceRevision ?? null,
+				runtimeToolGrantRevision: definition.runtimeToolGrantSet.revision,
+				skillGrantRevision: definition.skillGrantSet.revision,
+				toolGrantRevision: definition.toolGrantSet.revision
 			});
-			return {
-				...toLifecycleAdapter(adapter),
-				...adapter.status ? { status: () => adapter.status() } : {}
-			};
+			const key = bindingKey(instanceBinding, definition.agentId);
+			const existing = records.get(key);
+			if (existing) {
+				if (existing.runtimeGenerationId !== runtimeGenerationId) throw new AgentInstanceConflict(`binding ${key} belongs to a different runtime generation`);
+				return existing;
+			}
+			const record = freezeRecord({
+				agentId: definition.agentId,
+				binding: instanceBinding,
+				bindingKey: key,
+				instanceId: identity.createInstanceId({
+					bindingKey: key,
+					runtimeGenerationId
+				}),
+				runtimeGenerationId
+			});
+			records.set(key, record);
+			return record;
 		},
-		catch: toError$1
+		catch: (error) => error instanceof AgentInstanceConflict ? error : new AgentInstanceConflict(String(error))
 	});
-}
-function toLifecycleAdapter(adapter) {
 	return {
-		running: () => adapter.running(),
-		start: () => Effect.tryPromise({
-			try: () => Promise.resolve(adapter.start()),
-			catch: toError$1
-		}),
-		stop: () => Effect.tryPromise({
-			try: () => Promise.resolve(adapter.stop()),
-			catch: toError$1
-		})
+		resolveAutomation: (automationId, definition) => resolveBinding({
+			automationId,
+			kind: "automation"
+		}, definition),
+		resolveBackgroundSession: (agentId, definition) => resolveBinding({
+			agentId,
+			kind: "background-session"
+		}, definition),
+		resolveEndpoint: (endpointId, definition) => resolveBinding({
+			endpointId,
+			kind: "endpoint"
+		}, definition),
+		snapshot: () => Effect.sync(() => Object.freeze([...records.values()]))
 	};
 }
-function toError$1(error) {
-	return error instanceof Error ? error : new Error(String(error));
+function bindingKey(binding, agentId) {
+	const bindingId = binding.kind === "endpoint" ? binding.endpointId : binding.kind === "automation" ? binding.automationId : binding.agentId;
+	return `${binding.kind}:${bindingId}:${agentId}`;
+}
+function freezeRecord(record) {
+	return Object.freeze({
+		...record,
+		binding: Object.freeze({ ...record.binding })
+	});
+}
+//#endregion
+//#region src/core/application/agent-host/routing/agent-host.ts
+var InvalidAgentHostBinding = class extends Error {
+	name = "InvalidAgentHostBinding";
+};
+function createEffectAgentHost(options) {
+	return Effect.gen(function* () {
+		const definitions = new Map(options.definitions.map((definition) => [definition.agentId, definition]));
+		const endpoints = /* @__PURE__ */ new Map();
+		const automations = /* @__PURE__ */ new Map();
+		const backgroundSessions = /* @__PURE__ */ new Map();
+		for (const endpoint of options.endpoints) {
+			if (endpoints.has(endpoint.id)) return yield* Effect.fail(new InvalidAgentHostBinding(`duplicate endpoint: ${endpoint.id}`));
+			const definition = definitions.get(endpoint.agentId);
+			if (!definition) return yield* Effect.fail(new InvalidAgentHostBinding(`unknown endpoint agent: ${endpoint.agentId}`));
+			if (!definition.endpointIds.includes(endpoint.id)) return yield* Effect.fail(new InvalidAgentHostBinding(`endpoint ${endpoint.id} is not declared by ${endpoint.agentId}`));
+			endpoints.set(endpoint.id, yield* options.registry.resolveEndpoint(endpoint.id, definition));
+		}
+		for (const automation of options.automations ?? []) {
+			if (automations.has(automation.id)) return yield* Effect.fail(new InvalidAgentHostBinding(`duplicate automation: ${automation.id}`));
+			if (!definitions.has(automation.definition.agentId)) return yield* Effect.fail(new InvalidAgentHostBinding(`unknown automation agent: ${automation.definition.agentId}`));
+			automations.set(automation.id, yield* options.registry.resolveAutomation(automation.id, automation.definition));
+		}
+		for (const backgroundSession of options.backgroundSessions ?? []) {
+			if (backgroundSession.definition.agentId !== backgroundSession.agentId) return yield* Effect.fail(new InvalidAgentHostBinding(`background session ${backgroundSession.agentId} cannot bind definition ${backgroundSession.definition.agentId}`));
+			if (backgroundSessions.has(backgroundSession.agentId)) return yield* Effect.fail(new InvalidAgentHostBinding(`duplicate background session agent: ${backgroundSession.agentId}`));
+			if (!definitions.has(backgroundSession.agentId)) return yield* Effect.fail(new InvalidAgentHostBinding(`unknown background session agent: ${backgroundSession.agentId}`));
+			backgroundSessions.set(backgroundSession.agentId, yield* options.registry.resolveBackgroundSession(backgroundSession.agentId, backgroundSession.definition));
+		}
+		const resolve = (records, id, message) => {
+			const instance = records.get(id);
+			return instance ? Effect.succeed(instance) : Effect.fail(new InvalidAgentHostBinding(message));
+		};
+		const resolveEndpoint = (endpointId) => resolve(endpoints, endpointId, `unknown endpoint: ${endpointId}`);
+		const resolveAutomation = (automationId) => resolve(automations, automationId, `unknown automation: ${automationId}`);
+		const resolveBackgroundSession = (agentId) => resolve(backgroundSessions, agentId, `unknown background session agent: ${agentId}`);
+		return {
+			cancelBackgroundSession: (agentId, input) => resolveBackgroundSession(agentId).pipe(Effect.flatMap((instance) => options.runtime.cancel(instance, input))),
+			cancelEndpoint: (endpointId, input) => resolveEndpoint(endpointId).pipe(Effect.flatMap((instance) => options.runtime.cancel(instance, input))),
+			dispose: () => options.runtime.disposeAll(),
+			handleAutomation: (automationId, input) => resolveAutomation(automationId).pipe(Effect.flatMap((instance) => options.runtime.run(instance, input))),
+			handleBackgroundSession: (agentId, input) => resolveBackgroundSession(agentId).pipe(Effect.flatMap((instance) => options.runtime.run(instance, input))),
+			handleEndpoint: (endpointId, input) => resolveEndpoint(endpointId).pipe(Effect.flatMap((instance) => options.runtime.run(instance, input))),
+			resolveAutomation,
+			resolveBackgroundSession,
+			resolveEndpoint,
+			steerEndpoint: (endpointId, input) => resolveEndpoint(endpointId).pipe(Effect.flatMap((instance) => options.runtime.steer(instance, input)))
+		};
+	});
 }
 //#endregion
 //#region src/bootstrap/deployment/deployment-control-ports.ts
-const agentCatalogRuntime = Object.freeze({
-	digest: createSha256Digest,
-	deepFreeze
-});
-function createProcessDeploymentControlPorts(factories, backgroundSessions, runEffect) {
+function createProcessDeploymentControlPorts(factories, backgroundSessions) {
 	return {
-		agentCatalog: createRivusAgentCatalog([createRivusHostToolDescriptorProvider({ backgroundSessions })], agentCatalogRuntime),
+		agentCatalog: createBootstrapAgentCatalog(backgroundSessions),
 		agentHostFactory: { create: (input) => {
 			const registry = createEffectAgentInstanceRegistry({
 				createInstanceId: (identity) => createStableId("instance", identity),
@@ -3163,7 +3074,10 @@ function createProcessDeploymentControlPorts(factories, backgroundSessions, runE
 				runtime
 			});
 		} },
-		...createProcessDeploymentAdapterPorts(factories, runEffect)
+		runtimeFactory: { create: factories.createRuntime },
+		endpointFactory: { create: factories.createEndpoint },
+		...factories.createAutomation ? { automationFactory: { create: factories.createAutomation } } : {},
+		...factories.createBackgroundSession ? { backgroundSessionFactory: { create: factories.createBackgroundSession } } : {}
 	};
 }
 //#endregion
@@ -3473,7 +3387,8 @@ function prepareDeployment(input) {
 			definitions,
 			deployment: effectiveDeployment,
 			endpointSlots,
-			host
+			host,
+			projectSpaces
 		};
 	});
 }
@@ -3612,6 +3527,8 @@ function makeDeploymentControl(input) {
 				let degraded = input.deployment.plugins.some(({ status: pluginStatus }) => pluginStatus === "failed");
 				for (const slot of input.endpointSlots) degraded = (yield* startSlot(slot, slot.agentEnabled, `endpoint ${slot.definition.id}`, () => Effect.gen(function* () {
 					const instance = yield* input.host.resolveEndpoint(slot.definition.id);
+					const agentDefinition = input.definitions.get(slot.definition.agentId);
+					const projectSpace = agentDefinition?.projectSpaceId ? input.projectSpaces.get(agentDefinition.projectSpaceId) : void 0;
 					return yield* input.endpointFactory.create({
 						agentId: slot.definition.agentId,
 						cancel: (request) => input.host.cancelEndpoint(slot.definition.id, request),
@@ -3619,7 +3536,9 @@ function makeDeploymentControl(input) {
 						endpointId: slot.definition.id,
 						handle: (request) => handleEndpoint(slot.definition.id, request),
 						instanceId: instance.instanceId,
-						...input.definitions.get(slot.definition.agentId)?.projectSpaceId ? { projectSpaceId: input.definitions.get(slot.definition.agentId).projectSpaceId } : {},
+						...agentDefinition ? { runtimeDefinition: agentDefinition } : {},
+						...projectSpace ? { projectSpace } : {},
+						...agentDefinition?.projectSpaceId ? { projectSpaceId: agentDefinition.projectSpaceId } : {},
 						steer: (request) => input.host.steerEndpoint(slot.definition.id, request)
 					});
 				}))) || degraded;
@@ -3888,22 +3807,22 @@ function trimOptional(value) {
 async function createRivusDeploymentCliProcess(factory, context) {
 	const adapters = await factory(context);
 	let adaptersDisposed = false;
-	let recoveryControlPromise;
 	const disposeAdapters = async () => {
 		if (adaptersDisposed) return;
 		adaptersDisposed = true;
 		await adapters.dispose?.();
 	};
 	let daemon;
+	let openRecovery;
 	try {
-		daemon = await runDeploymentProcessEffect(loadRivusDeploymentManifest(context.manifestPath).pipe(Effect.flatMap((manifest) => {
+		const constructed = unwrapExit(await Effect.runPromiseExit(loadRivusDeploymentManifest(context.manifestPath).pipe(Effect.flatMap((manifest) => {
 			const assemblyInput = {
 				...createProcessDeploymentControlPorts({
 					...adapters.createAutomation ? { createAutomation: adapters.createAutomation } : {},
 					...adapters.createBackgroundSession ? { createBackgroundSession: adapters.createBackgroundSession } : {},
 					createEndpoint: adapters.createEndpoint,
 					createRuntime: adapters.createRuntime
-				}, manifest.backgroundSessions?.enabled === true, runDeploymentProcessEffect),
+				}, manifest.backgroundSessions?.enabled === true),
 				deploymentRoot: dirname(context.manifestPath),
 				...adapters.initialInstanceRecords ? { initialInstanceRecords: adapters.initialInstanceRecords } : {},
 				manifest,
@@ -3922,7 +3841,15 @@ async function createRivusDeploymentCliProcess(factory, context) {
 				deployment,
 				digest: createSha256Digest
 			})));
-		})));
+		})).pipe(Effect.flatMap((control) => Effect.gen(function* () {
+			const [cached, invalidate] = yield* Effect.cachedInvalidateWithTTL(Effect.suspend(() => adapters.createRecoveryControl ? adapters.createRecoveryControl() : Effect.fail(/* @__PURE__ */ new Error("Deployment bootstrap does not expose Recovery Control"))), Infinity);
+			return {
+				control,
+				openRecovery: cached.pipe(Effect.onExit((exit) => Exit.isFailure(exit) && !Cause.isInterruptedOnly(exit.cause) ? invalidate : Effect.void))
+			};
+		})))));
+		daemon = constructed.control;
+		openRecovery = constructed.openRecovery;
 	} catch (constructionError) {
 		try {
 			await disposeAdapters();
@@ -3931,91 +3858,45 @@ async function createRivusDeploymentCliProcess(factory, context) {
 		}
 		throw constructionError;
 	}
-	const start = async () => {
-		if (adaptersDisposed) throw new Error("Rivus deployment process cannot restart after its adapters have been disposed");
-		try {
-			await runDeploymentProcessEffect(daemon.start());
-		} catch (startError) {
-			const cleanupErrors = [];
-			try {
-				await runDeploymentProcessEffect(daemon.stop());
-			} catch (error) {
-				cleanupErrors.push(error);
-			}
-			try {
-				await disposeAdapters();
-			} catch (error) {
-				cleanupErrors.push(error);
-			}
-			if (cleanupErrors.length > 0) throw new AggregateError([startError, ...cleanupErrors], "deployment startup and cleanup failed");
-			throw startError;
-		}
-	};
-	const stop = async () => {
-		const errors = [];
-		try {
-			await runDeploymentProcessEffect(daemon.stop());
-		} catch (error) {
-			errors.push(error);
-		}
-		try {
-			await disposeAdapters();
-		} catch (error) {
-			errors.push(error);
-		}
-		if (errors.length === 1) throw errors[0];
-		if (errors.length > 1) throw new AggregateError(errors, "deployment and adapter cleanup failed");
-	};
+	const cleanupErrors = Effect.all([Effect.exit(Effect.suspend(() => daemon.stop())), Effect.exit(Effect.tryPromise({
+		try: disposeAdapters,
+		catch: (error) => error
+	}))]).pipe(Effect.map((exits) => exits.filter(Exit.isFailure).map((exit) => Cause.squash(exit.cause))));
+	const startDeployment = Effect.uninterruptible(Effect.suspend(() => {
+		if (adaptersDisposed) return Effect.fail(/* @__PURE__ */ new Error("Rivus deployment process cannot restart after its adapters have been disposed"));
+		return Effect.suspend(() => daemon.start()).pipe(Effect.catchAllCause((cause) => {
+			const startError = Cause.squash(cause);
+			return cleanupErrors.pipe(Effect.flatMap((errors) => Effect.fail(errors.length > 0 ? new AggregateError([startError, ...errors], "deployment startup and cleanup failed") : startError)));
+		}));
+	}));
+	const stopDeployment = Effect.uninterruptible(cleanupErrors.pipe(Effect.flatMap((errors) => {
+		if (errors.length === 1) return Effect.fail(errors[0]);
+		if (errors.length > 1) return Effect.fail(new AggregateError(errors, "deployment and adapter cleanup failed"));
+		return Effect.void;
+	})));
 	const process = {
 		defaultSessionKey: `local:${daemon.deployment.manifest.defaultAgentId}:cli`,
-		openRecoveryControl: () => Effect.tryPromise({
-			try: async () => {
-				if (adaptersDisposed) throw new Error("Rivus deployment process cannot open Recovery Control after disposal");
-				if (!adapters.createRecoveryControl) throw new Error("Deployment bootstrap does not expose Recovery Control");
-				recoveryControlPromise ??= Promise.resolve().then(() => adapters.createRecoveryControl());
-				try {
-					return await recoveryControlPromise;
-				} catch (error) {
-					recoveryControlPromise = void 0;
-					throw error;
-				}
-			},
-			catch: (error) => error
-		}),
+		openRecoveryControl: () => Effect.suspend(() => adaptersDisposed ? Effect.fail(/* @__PURE__ */ new Error("Rivus deployment process cannot open Recovery Control after disposal")) : openRecovery),
 		running: () => daemon.running(),
-		start: () => Effect.tryPromise({
-			try: start,
-			catch: (error) => error
-		}),
+		start: () => startDeployment,
 		status: () => Effect.sync(() => daemon.status()),
-		stop: () => Effect.tryPromise({
-			try: stop,
-			catch: (error) => error
-		}),
-		promptText: (command) => Effect.tryPromise({
-			try: async () => {
-				if (adaptersDisposed) throw new Error("Rivus deployment process cannot restart after its adapters have been disposed");
-				const projectSpaceId = daemon.deployment.definitions.find(({ agentId }) => agentId === daemon.deployment.manifest.defaultAgentId)?.projectSpaceId;
-				return readPromptFinalText(await runDeploymentProcessEffect(daemon.runDefaultAgent({
-					invocation: createLocalCliAgentInvocation({
-						endpointId: daemon.deployment.manifest.defaultEndpointId,
-						env: context.env,
-						...projectSpaceId ? { projectSpaceId } : {}
-					}),
-					sessionKey: command.sessionKey,
-					text: command.text
-				})));
-			},
-			catch: (error) => error
-		})
+		stop: () => stopDeployment,
+		promptText: (command) => Effect.suspend(() => {
+			if (adaptersDisposed) return Effect.fail(/* @__PURE__ */ new Error("Rivus deployment process cannot restart after its adapters have been disposed"));
+			const projectSpaceId = daemon.deployment.definitions.find(({ agentId }) => agentId === daemon.deployment.manifest.defaultAgentId)?.projectSpaceId;
+			return daemon.runDefaultAgent({
+				invocation: createLocalCliAgentInvocation({
+					endpointId: daemon.deployment.manifest.defaultEndpointId,
+					env: context.env,
+					...projectSpaceId ? { projectSpaceId } : {}
+				}),
+				sessionKey: command.sessionKey,
+				text: command.text
+			}).pipe(Effect.map(readPromptFinalText));
+		}).pipe(Effect.catchAllCause((cause) => Effect.fail(Cause.squash(cause))))
 	};
 	const replayReceiveMessage = adapters.replayReceiveMessage;
-	if (replayReceiveMessage) process.replayReceiveMessage = (payload, options) => Effect.tryPromise({
-		try: async () => {
-			if (!daemon.running()) await start();
-		},
-		catch: (error) => error
-	}).pipe(Effect.flatMap(() => replayReceiveMessage((input) => runDeploymentProcessEffect(daemon.handleDefault(toEffectAgentRuntimeInput(input))), payload, options)));
+	if (replayReceiveMessage) process.replayReceiveMessage = (payload, options) => Effect.suspend(() => daemon.running() ? Effect.void : startDeployment).pipe(Effect.flatMap(() => replayReceiveMessage((input) => daemon.handleDefault(input), payload, options)));
 	return process;
 }
 function readPromptFinalText(result) {
@@ -4063,8 +3944,7 @@ function runRivusDaemonCli(options) {
 			try: () => loadCliEnv(parsed.envFilePath, options.env),
 			catch: (error) => error
 		});
-		const configuredBootstrapSpecifier = parsed.bootstrap ?? env.RIVUS_BOOTSTRAP_MODULE?.trim();
-		const bootstrapSpecifier = configuredBootstrapSpecifier ? resolveRivusBuiltinSpecifier(configuredBootstrapSpecifier) : void 0;
+		const bootstrapSpecifier = parsed.bootstrap ?? env.RIVUS_BOOTSTRAP_MODULE?.trim();
 		if (!parsed.checkConfig && !bootstrapSpecifier) {
 			options.stderr.write(formatRivusDaemonUsageError("Missing --bootstrap <module> or RIVUS_BOOTSTRAP_MODULE"));
 			return 1;
@@ -4461,4 +4341,5 @@ function toImportSpecifier(specifier) {
 	return specifier;
 }
 //#endregion
-export { InvalidRivusPlugin as A, createRivusHostToolDescriptorProvider as C, validateRivusCatalogIdentifier as D, createRivusPluginCatalog as E, InvalidAgentHostBinding as F, createEffectAgentHost as I, AgentInstanceConflict as L, AgentInstanceBusy as M, AgentRuntimeDisposed as N, validateRivusCatalogRegistration as O, createAgentHostRuntimePool as P, createEffectAgentInstanceRegistry as R, initializeRivusProject as S, createRivusToolGrantSetOperations as T, formatRivusEnvFile as _, resolveRivusProjectSpace as a, loadNodeRivusPluginModule as b, RivusDeploymentReadinessError as c, RivusPluginLoadError as d, resolveRivusDeployment as f, createRivusEnvFromOpenClawConfig as g, OpenClawEnvImportError as h, createRivusDeploymentCliProcess as i, RIVUS_PLUGIN_API_VERSION as j, validateRivusPluginManifest as k, createRivusDeploymentControl as l, createRivusDaemonShutdownController as m, runRivusCli as n, RivusDeploymentAutomationReadinessError as o, createProcessDeploymentControlPorts as p, runRivusDaemonCli as r, RivusDeploymentBackgroundSessionReadinessError as s, runRivusNodeEntrypoint as t, RivusDeploymentDaemonLifecycleError as u, diagnoseRivusProject as v, createRivusAgentCatalog as w, resolveRivusPluginModule as x, createNodeRivusPluginModuleLoader as y };
+export { RIVUS_PLUGIN_API_VERSION as i, createRivusPluginCatalog as n, resolveRivusAgentDefinition as r, runRivusNodeEntrypoint as t };
+