@rivet-dev/agentos-core 0.0.0-abc-fixes-1.d8c4d95 → 0.0.0-agent-acp-codex-session-benchmark.62b1f46

package/dist/sidecar/binary.d.ts

@@ -3,7 +3,7 @@
  *
  * Honors `AGENTOS_SIDECAR_BIN` as an absolute-path override, otherwise
  * resolves the platform-specific binary shipped by the
- * `@rivet-dev/agentos-sidecar` package. In-repo developer builds use the local
- * cargo build path instead and never reach this function.
+ * `@rivet-dev/agentos-sidecar` package. Runtime SDK code never builds the
+ * sidecar from source; repository tests set `AGENTOS_SIDECAR_BIN` explicitly.
  */
 export declare function resolvePublishedSidecarBinary(): string;

package/dist/sidecar/binary.js

@@ -5,8 +5,8 @@ import { createRequire } from "node:module";
  *
  * Honors `AGENTOS_SIDECAR_BIN` as an absolute-path override, otherwise
  * resolves the platform-specific binary shipped by the
- * `@rivet-dev/agentos-sidecar` package. In-repo developer builds use the local
- * cargo build path instead and never reach this function.
+ * `@rivet-dev/agentos-sidecar` package. Runtime SDK code never builds the
+ * sidecar from source; repository tests set `AGENTOS_SIDECAR_BIN` explicitly.
  */
 export function resolvePublishedSidecarBinary() {
     const override = process.env.AGENTOS_SIDECAR_BIN;

package/dist/sidecar/native-process-client.d.ts

@@ -1,3 +1,5 @@
-import "@secure-exec/core/native-client";
-export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, SidecarProcess, SidecarProcess as NativeSidecarProcessClient, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "@secure-exec/core/sidecar-client";
-export type { AuthenticatedSession, CreatedVm, ExtEnvelope, GuestFilesystemStat, RootFilesystemEntry, RootFilesystemLowerDescriptor, SidecarEventSelector, SidecarFsPermissionRule, SidecarMountDescriptor, SidecarMountPluginDescriptor, SidecarPatternPermissionRule, SidecarPermissionMode, SidecarPermissionScope, SidecarPermissionsPolicy, SidecarProcessSnapshotEntry, SidecarProjectedModuleDescriptor, SidecarRegisteredHostCallbackDefinition, SidecarRegisteredHostCallbackExample, SidecarRequestFrame, SidecarRequestHandler, SidecarRequestPayload, SidecarResponseFrame, SidecarResponsePayload, SidecarRulePermissions, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSignalState, SidecarSocketStateEntry, SidecarSoftwareDescriptor, SidecarSpawnOptions, SidecarSpawnOptions as NativeSidecarSpawnOptions, SidecarZombieTimerCount, } from "@secure-exec/core/sidecar-client";
+import "@rivet-dev/agentos-runtime-core/native-client";
+import { SidecarProcess } from "@rivet-dev/agentos-runtime-core/sidecar-client";
+export { SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "@rivet-dev/agentos-runtime-core/sidecar-client";
+export declare const NativeSidecarProcessClient: typeof SidecarProcess;
+export type { AuthenticatedSession, CreatedVm, ExtEnvelope, GuestFilesystemStat, RootFilesystemEntry, SidecarCronAlarm, SidecarCronDispatch, SidecarCronEventRecord, SidecarCronJobEntry, SidecarCronOverlap, SidecarCronRun, SidecarEventSelector, SidecarFsPermissionRule, SidecarLinkPackageResult, SidecarMountDescriptor, SidecarMountPluginDescriptor, SidecarPatternPermissionRule, SidecarPermissionMode, SidecarPermissionScope, SidecarPermissionsPolicy, SidecarProcessSnapshotEntry, SidecarProjectedAgent, SidecarRegisteredHostCallbackDefinition, SidecarRegisteredHostCallbackExample, SidecarRequestFrame, SidecarRequestHandler, SidecarRequestPayload, SidecarResponseFrame, SidecarResponsePayload, SidecarRulePermissions, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSignalState, SidecarSocketStateEntry, SidecarSpawnOptions, SidecarSpawnOptions as NativeSidecarSpawnOptions, SidecarVmConfiguredResponse as SidecarConfigureVmResult, SidecarZombieTimerCount, } from "@rivet-dev/agentos-runtime-core/sidecar-client";

package/dist/sidecar/native-process-client.js

@@ -1,6 +1,8 @@
 // Register the native sidecar spawn factory (side effect). After the
-// @secure-exec/core SidecarProcess refactor, native spawn is provided by a
+// @rivet-dev/agentos-runtime-core SidecarProcess refactor, native spawn is provided by a
 // separately-registered factory; importing native-client wires it up so
 // SidecarProcess.spawn works in this native runtime.
-import "@secure-exec/core/native-client";
-export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, SidecarProcess, SidecarProcess as NativeSidecarProcessClient, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "@secure-exec/core/sidecar-client";
+import "@rivet-dev/agentos-runtime-core/native-client";
+import { SidecarProcess } from "@rivet-dev/agentos-runtime-core/sidecar-client";
+export { SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "@rivet-dev/agentos-runtime-core/sidecar-client";
+export const NativeSidecarProcessClient = SidecarProcess;

package/dist/sidecar/permissions.d.ts

@@ -1,3 +1,4 @@
-import type { PermissionsPolicy } from "@secure-exec/core/vm-config";
-import type { Permissions } from "../runtime-compat.js";
-export declare function serializePermissionsForSidecar(permissions?: Permissions): PermissionsPolicy;
+import type { PermissionsPolicy } from "@rivet-dev/agentos-runtime-core/vm-config";
+import type { Permissions } from "../runtime.js";
+export declare function serializePermissionsForSidecar(permissions: Permissions): PermissionsPolicy;
+export declare function serializePermissionsForSidecar(): undefined;

package/dist/sidecar/permissions.js

@@ -1,35 +1,18 @@
-const ALL_OPERATIONS = ["*"];
-const ALL_RESOURCES = ["**"];
 function serializeFilesystemScope(scope) {
     return {
         ...(scope.default === undefined ? {} : { default: scope.default }),
-        rules: scope.rules.map((rule) => ({
-            ...rule,
-            operations: rule.operations ?? ALL_OPERATIONS,
-            paths: rule.paths ?? ALL_RESOURCES,
-        })),
+        rules: scope.rules.map((rule) => ({ ...rule })),
     };
 }
 function serializePatternScope(scope) {
     return {
         ...(scope.default === undefined ? {} : { default: scope.default }),
-        rules: scope.rules.map((rule) => ({
-            ...rule,
-            operations: rule.operations ?? ALL_OPERATIONS,
-            patterns: rule.patterns ?? ALL_RESOURCES,
-        })),
+        rules: scope.rules.map((rule) => ({ ...rule })),
     };
 }
 export function serializePermissionsForSidecar(permissions) {
     if (!permissions) {
-        return {
-            fs: "deny",
-            network: "deny",
-            childProcess: "deny",
-            process: "deny",
-            env: "deny",
-            binding: "deny",
-        };
+        return undefined;
     }
     return {
         fs: typeof permissions.fs === "string" || !permissions.fs
@@ -47,8 +30,8 @@ export function serializePermissionsForSidecar(permissions) {
         env: typeof permissions.env === "string" || !permissions.env
             ? permissions.env
             : serializePatternScope(permissions.env),
-        binding: typeof permissions.tool === "string" || !permissions.tool
-            ? permissions.tool
-            : serializePatternScope(permissions.tool),
+        binding: typeof permissions.binding === "string" || !permissions.binding
+            ? permissions.binding
+            : serializePatternScope(permissions.binding),
     };
 }

package/dist/sidecar/rpc-client.d.ts

@@ -1,26 +1,13 @@
-import type { RootFilesystemConfig as VmConfigRootFilesystemConfig, RootFilesystemEntry as VmConfigRootFilesystemEntry, RootFilesystemLowerDescriptor as VmConfigRootFilesystemLowerDescriptor } from "@secure-exec/core/vm-config";
+import type { RootFilesystemConfig as VmConfigRootFilesystemConfig, RootFilesystemEntry as VmConfigRootFilesystemEntry, RootFilesystemLowerDescriptor as VmConfigRootFilesystemLowerDescriptor } from "@rivet-dev/agentos-runtime-core/vm-config";
 import type { NativeMountConfig, PlainMountConfig, RootFilesystemConfig } from "../agent-os.js";
-import type { RootSnapshotExport } from "../layers.js";
-import type { ConnectTerminalOptions, KernelExecOptions, KernelExecResult, KernelSpawnOptions, ManagedProcess, OpenShellOptions, ProcessInfo, ShellHandle, VirtualFileSystem, VirtualStat } from "../runtime-compat.js";
-import type { AuthenticatedSession, CreatedVm, SidecarProcess, SidecarSignalHandlerRegistration } from "./native-process-client.js";
+import type { KernelExecOptions, KernelExecResult, KernelSpawnOptions, ManagedProcess, OpenShellOptions, ProcessInfo, ShellHandle, VirtualFileSystem, VirtualStat } from "../runtime.js";
+import type { AuthenticatedSession, CreatedVm, SidecarProcess, SidecarProcessSnapshotEntry } from "./native-process-client.js";
 export declare function toSidecarSignalName(signal: number): string;
 export interface LocalCompatMount {
     path: string;
     fs: VirtualFileSystem;
-    readOnly: boolean;
-}
-interface KernelSocketSnapshot {
-    processId: string;
-    host?: string;
-    port?: number;
-    path?: string;
-}
-interface KernelSignalState {
-    handlers: Map<number, {
-        action: SidecarSignalHandlerRegistration["action"];
-        mask: Set<number>;
-        flags: number;
-    }>;
+    readOnly?: boolean;
+    sidecarMount?: SidecarMountDescriptor;
 }
 interface NativeSidecarKernelProxyOptions {
     client: SidecarProcess;
@@ -28,105 +15,114 @@ interface NativeSidecarKernelProxyOptions {
     vm: CreatedVm;
     env: Record<string, string>;
     cwd: string;
-    defaultExecCwd?: string;
     localMounts: LocalCompatMount[];
-    commandGuestPaths: ReadonlyMap<string, string>;
-    onWasmCommandResolved?: (command: string) => void;
+    sidecarMounts: SidecarMountDescriptor[];
     onDispose?: () => Promise<void>;
+    /**
+     * Whether this proxy owns the underlying sidecar process. When VMs share one
+     * sidecar process (the default for VMs leased from an `AgentOsSidecar`
+     * handle), each proxy tears down only its own VM on `dispose()`; the shared
+     * process is disposed when the sidecar handle is disposed. Defaults to true
+     * for the legacy one-process-per-VM path.
+     */
+    ownsClient?: boolean;
 }
 export declare class NativeSidecarKernelProxy {
     readonly env: Record<string, string>;
     readonly cwd: string;
-    readonly commands: ReadonlyMap<string, string>;
     readonly vfs: VirtualFileSystem;
     readonly processes: Map<number, ProcessInfo>;
-    private readonly defaultExecCwd;
     private readonly client;
     private readonly session;
     private readonly vm;
+    private readonly ownsClient;
     private readonly localMounts;
-    private readonly commandDrivers;
-    private readonly onWasmCommandResolved;
+    private readonly baseSidecarMounts;
     private readonly onDispose;
     private readonly trackedProcesses;
     private readonly trackedProcessesById;
-    private readonly listenerLookups;
-    private readonly boundUdpLookups;
-    private readonly signalStates;
-    private readonly signalRefreshes;
-    private sidecarProcessSnapshot;
     private processSnapshotRefresh;
-    private readonly observedProcessStartTimes;
     private readonly rootView;
-    private zombieTimerCountValue;
-    private zombieTimerCountRefresh;
     private disposed;
+    private disposePromise;
     private pumpError;
-    private nextSyntheticPid;
+    private mountReconfigurePromise;
     private readonly eventPumpAbortController;
     private readonly eventPump;
     constructor(options: NativeSidecarKernelProxyOptions);
     createRootView(): VirtualFileSystem;
-    get zombieTimerCount(): number;
-    registerCommandGuestPaths(commandGuestPaths: ReadonlyMap<string, string>): void;
+    /** Resolve the host-only backing store for an exact js_bridge mount id. */
+    hostFilesystemForMount(mountId: string): VirtualFileSystem | undefined;
     dispose(): Promise<void>;
+    private disposeOnce;
+    /** Test-only snapshot of the per-VM tracking collection sizes. */
+    __trackingSizesForTest(): {
+        trackedProcesses: number;
+        trackedProcessesById: number;
+        localMounts: number;
+    };
+    /** Test-only handle to a tracked entry so its listener Sets can be inspected. */
+    __trackedEntryForTest(pid: number): {
+        onStdout: ReadonlySet<unknown>;
+        onStderr: ReadonlySet<unknown>;
+    } | undefined;
     exec(command: string, options?: KernelExecOptions): Promise<KernelExecResult>;
     execArgv(command: string, args?: readonly string[], options?: KernelExecOptions): Promise<KernelExecResult>;
-    spawn(command: string, args: string[], options?: KernelSpawnOptions): ManagedProcess;
-    openShell(options?: OpenShellOptions): ShellHandle;
-    connectTerminal(options?: ConnectTerminalOptions): Promise<number>;
+    spawn(command: string | undefined, args: string[], options?: KernelSpawnOptions): Promise<ManagedProcess>;
+    private spawnTracked;
+    openShell(options?: OpenShellOptions): Promise<ShellHandle>;
     readFile(path: string): Promise<Uint8Array>;
     writeFile(path: string, content: string | Uint8Array): Promise<void>;
-    mkdir(path: string, recursive?: boolean): Promise<void>;
+    mkdir(path: string, options?: {
+        recursive?: boolean;
+    }): Promise<void>;
     exists(path: string): Promise<boolean>;
     stat(path: string): Promise<VirtualStat>;
     readdir(path: string): Promise<string[]>;
+    readdirRecursive(path: string, options?: {
+        maxDepth?: number;
+    }): Promise<Array<{
+        name: string;
+        path: string;
+        isDirectory: boolean;
+        isSymbolicLink: boolean;
+        size: number;
+    }>>;
     removeFile(path: string): Promise<void>;
     removeDir(path: string): Promise<void>;
+    removePath(path: string, options?: {
+        recursive?: boolean;
+    }): Promise<void>;
+    copyPath(fromPath: string, toPath: string, options?: {
+        recursive?: boolean;
+    }): Promise<void>;
     rename(oldPath: string, newPath: string): Promise<void>;
+    movePath(oldPath: string, newPath: string): Promise<void>;
     mountFs(path: string, driver: VirtualFileSystem, options?: {
         readOnly?: boolean;
-    }): void;
-    unmountFs(path: string): void;
-    snapshotProcesses(): ProcessInfo[];
-    findListener(request: {
-        host?: string;
-        port?: number;
-        path?: string;
-    }): KernelSocketSnapshot | null;
-    findBoundUdp(request: {
-        host?: string;
-        port?: number;
-    }): KernelSocketSnapshot | null;
-    getSignalState(pid: number): KernelSignalState;
-    private refreshSocketLookup;
-    private refreshSignalState;
+        sidecarMount?: SidecarMountDescriptor;
+    }): Promise<void>;
+    unmountFs(path: string): Promise<void>;
+    private desiredSidecarMounts;
+    private reconfigureSidecarMounts;
+    private waitForMountReconfigure;
+    snapshotProcesses(): Promise<ProcessInfo[]>;
+    processSnapshotById(processId: string): Promise<SidecarProcessSnapshotEntry | undefined>;
     private refreshProcessSnapshot;
-    private refreshZombieTimerCount;
-    private drainTrailingProcessOutput;
     private startTrackedProcess;
     private runEventPump;
     private finishProcess;
+    private failProcess;
+    private releaseProcessTracking;
     private waitForTrackedProcess;
     private signalProcess;
-    private flushPendingStdin;
-    private closeTrackedStdin;
-    private handleBackgroundProcessError;
-    private recordCompletedProcessError;
-    private emitBackgroundProcessError;
+    private processIdFor;
     private createFilesystemView;
     private buildProcessSnapshot;
-    private dispatchRead;
     private dispatchNativeRead;
-    private dispatchWrite;
-    private resolveLocalMount;
-    private assertGuestPathWritable;
-    private mountedChildNames;
-    private assertLocalWritable;
-    private updateTrackedProcessSnapshot;
-}
-export type { AuthenticatedSession, CreatedVm, GuestFilesystemStat, SidecarSpawnOptions, RootFilesystemEntry, SidecarEventSelector, SidecarPermissionsPolicy, SidecarRegisteredHostCallbackDefinition, SidecarRequestFrame, SidecarResponsePayload, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSocketStateEntry, } from "./native-process-client.js";
-export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, SidecarProcess, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "./native-process-client.js";
+}
+export type { AuthenticatedSession, CreatedVm, GuestFilesystemStat, RootFilesystemEntry, SidecarConfigureVmResult, SidecarEventSelector, SidecarLinkPackageResult, SidecarPermissionsPolicy, SidecarProjectedAgent, SidecarRegisteredHostCallbackDefinition, SidecarRequestFrame, SidecarResponsePayload, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSocketStateEntry, SidecarSpawnOptions, } from "./native-process-client.js";
+export { NativeSidecarProcessClient, SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "./native-process-client.js";
 export type AgentOsSidecarPlacement = {
     kind: "shared";
     pool?: string;
@@ -144,7 +140,6 @@ export interface AgentOsSidecarSessionLifecycle {
     connectedAt?: number;
     disposedAt?: number;
     lastError?: string;
-    metadata: Record<string, string>;
     vmIds: string[];
 }
 export interface AgentOsSidecarVmLifecycle {
@@ -155,26 +150,19 @@ export interface AgentOsSidecarVmLifecycle {
     readyAt?: number;
     disposedAt?: number;
     lastError?: string;
-    metadata: Record<string, string>;
 }
 export interface AgentOsSidecarSessionOptions {
     placement?: AgentOsSidecarPlacement;
-    metadata?: Record<string, string>;
     signal?: AbortSignal;
 }
-export interface AgentOsSidecarVmOptions {
-    metadata?: Record<string, string>;
-}
 export interface AgentOsSidecarSessionBootstrap {
     sessionId: string;
     placement: AgentOsSidecarPlacement;
-    metadata: Record<string, string>;
     signal?: AbortSignal;
 }
 export interface AgentOsSidecarVmBootstrap {
     vmId: string;
     sessionId: string;
-    metadata: Record<string, string>;
 }
 export interface AgentOsSidecarTransport {
     createVm?(bootstrap: AgentOsSidecarVmBootstrap): Promise<void>;
@@ -200,7 +188,7 @@ export declare class AgentOsSidecarSessionHandle {
     constructor(client: AgentOsSidecarClient, sessionId: string);
     describe(): AgentOsSidecarSessionLifecycle;
     listVms(): AgentOsSidecarVmLifecycle[];
-    createVm(options?: AgentOsSidecarVmOptions): Promise<AgentOsSidecarVmHandle>;
+    createVm(): Promise<AgentOsSidecarVmHandle>;
     dispose(): Promise<void>;
 }
 export declare class AgentOsSidecarClient {
@@ -215,7 +203,7 @@ export declare class AgentOsSidecarClient {
     requireSessionLifecycle(sessionId: string): AgentOsSidecarSessionLifecycle;
     listVms(sessionId: string): AgentOsSidecarVmLifecycle[];
     requireVmLifecycle(sessionId: string, vmId: string): AgentOsSidecarVmLifecycle;
-    createVm(sessionId: string, options?: AgentOsSidecarVmOptions): Promise<AgentOsSidecarVmHandle>;
+    createVm(sessionId: string): Promise<AgentOsSidecarVmHandle>;
     disposeVm(sessionId: string, vmId: string): Promise<void>;
     disposeSession(sessionId: string): Promise<void>;
     dispose(): Promise<void>;
@@ -227,19 +215,19 @@ export declare class AgentOsSidecarClient {
 export declare function createAgentOsSidecarClient(options: AgentOsSidecarClientOptions): AgentOsSidecarClient;
 export type MountConfigJsonValue = string | number | boolean | null | MountConfigJsonObject | MountConfigJsonValue[];
 export interface MountConfigJsonObject {
-    [key: string]: MountConfigJsonValue;
+    [key: string]: MountConfigJsonValue | undefined;
 }
 export interface SidecarMountPluginDescriptor {
     id: string;
-    config: MountConfigJsonObject;
+    config?: MountConfigJsonObject;
 }
 export interface SidecarMountDescriptor {
     guestPath: string;
-    readOnly: boolean;
+    readOnly?: boolean;
     plugin: SidecarMountPluginDescriptor;
 }
 export declare function serializeMountConfigForSidecar(mount: PlainMountConfig | NativeMountConfig): SidecarMountDescriptor;
 export type SidecarRootFilesystemDescriptor = VmConfigRootFilesystemConfig;
 export type SidecarRootFilesystemLowerDescriptor = VmConfigRootFilesystemLowerDescriptor;
 export type SidecarRootFilesystemEntry = VmConfigRootFilesystemEntry;
-export declare function serializeRootFilesystemForSidecar(config?: RootFilesystemConfig, bootstrapLower?: RootSnapshotExport | null): SidecarRootFilesystemDescriptor;
+export declare function serializeRootFilesystemForSidecar(config?: RootFilesystemConfig): SidecarRootFilesystemDescriptor;