@rivet-dev/agentos-core 0.0.0-agentos-dylib-plugin.f065be7 → 0.0.0-codex-darwin-ci-publish.61a7af3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/dist/agent-os.d.ts +8 -0
  2. package/dist/sidecar/native-process-client.d.ts +2 -2
  3. package/dist/sidecar/native-process-client.js +1 -1
  4. package/dist/sidecar/permissions.js +2 -2
  5. package/package.json +5 -5
package/dist/agent-os.d.ts CHANGED
@@ -199,6 +199,14 @@ export interface AgentOsOptions {
199
199
  * meta-packages that export arrays of sub-packages work directly.
200
200
  */
201
201
  software?: SoftwareInput[];
202
+ /**
203
+ * Whether to auto-include the default software bundle (`@agent-os-pkgs/common`
204
+ * — `sh` + coreutils + the standard CLI tools agents rely on) in addition to
205
+ * any `software` you pass. Defaults to `true`; set `false` for a bare VM with
206
+ * only the software you list explicitly. Entries already present in `software`
207
+ * are not duplicated.
208
+ */
209
+ defaultSoftware?: boolean;
202
210
  /** Loopback ports to exempt from SSRF checks (for testing with host-side mock servers). */
203
211
  loopbackExemptPorts?: number[];
204
212
  /**
package/dist/sidecar/native-process-client.d.ts CHANGED
@@ -1,2 +1,2 @@
1
- export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, NativeSidecarProcessClient as SidecarProcess, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "@secure-exec/core/sidecar-client";
2
- export type { AuthenticatedSession, CreatedVm, ExtEnvelope, GuestFilesystemStat, NativeSidecarSpawnOptions as SidecarSpawnOptions, RootFilesystemEntry, RootFilesystemLowerDescriptor, SidecarEventSelector, SidecarFsPermissionRule, SidecarMountDescriptor, SidecarMountPluginDescriptor, SidecarPatternPermissionRule, SidecarPermissionMode, SidecarPermissionScope, SidecarPermissionsPolicy, SidecarProcessSnapshotEntry, SidecarProjectedModuleDescriptor, SidecarRegisteredHostCallbackDefinition, SidecarRegisteredHostCallbackExample, SidecarRequestFrame, SidecarRequestHandler, SidecarRequestPayload, SidecarResponseFrame, SidecarResponsePayload, SidecarRulePermissions, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSignalState, SidecarSocketStateEntry, SidecarSoftwareDescriptor, SidecarZombieTimerCount, } from "@secure-exec/core/sidecar-client";
1
+ export type { AuthenticatedSession, CreatedVm, ExtEnvelope, GuestFilesystemStat, RootFilesystemEntry, RootFilesystemLowerDescriptor, SidecarEventSelector, SidecarFsPermissionRule, SidecarMountDescriptor, SidecarMountPluginDescriptor, SidecarPatternPermissionRule, SidecarPermissionMode, SidecarPermissionScope, SidecarPermissionsPolicy, SidecarProcessSnapshotEntry, SidecarProjectedModuleDescriptor, SidecarRegisteredHostCallbackDefinition, SidecarRegisteredHostCallbackExample, SidecarRequestFrame, SidecarRequestHandler, SidecarRequestPayload, SidecarResponseFrame, SidecarResponsePayload, SidecarRulePermissions, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSignalState, SidecarSocketStateEntry, SidecarSoftwareDescriptor, SidecarSpawnOptions, SidecarZombieTimerCount, } from "@secure-exec/core/sidecar-client";
2
+ export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "@secure-exec/core/sidecar-client";
package/dist/sidecar/native-process-client.js CHANGED
@@ -1 +1 @@
1
- export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, NativeSidecarProcessClient as SidecarProcess, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "@secure-exec/core/sidecar-client";
1
+ export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "@secure-exec/core/sidecar-client";
package/dist/sidecar/permissions.js CHANGED
@@ -28,7 +28,7 @@ export function serializePermissionsForSidecar(permissions) {
28
28
  childProcess: "deny",
29
29
  process: "deny",
30
30
  env: "deny",
31
- tool: "deny",
31
+ binding: "deny",
32
32
  };
33
33
  }
34
34
  return {
@@ -47,7 +47,7 @@ export function serializePermissionsForSidecar(permissions) {
47
47
  env: typeof permissions.env === "string" || !permissions.env
48
48
  ? permissions.env
49
49
  : serializePatternScope(permissions.env),
50
- tool: typeof permissions.tool === "string" || !permissions.tool
50
+ binding: typeof permissions.tool === "string" || !permissions.tool
51
51
  ? permissions.tool
52
52
  : serializePatternScope(permissions.tool),
53
53
  };
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@rivet-dev/agentos-core",
3
- "version": "0.0.0-agentos-dylib-plugin.f065be7",
3
+ "version": "0.0.0-codex-darwin-ci-publish.61a7af3",
4
4
  "type": "module",
5
5
  "license": "Apache-2.0",
6
6
  "main": "./dist/index.js",
@@ -55,9 +55,9 @@
55
55
  },
56
56
  "dependencies": {
57
57
  "@aws-sdk/client-s3": "^3.1019.0",
58
- "@rivet-dev/agentos-sidecar": "0.0.0-agentos-dylib-plugin.f065be7",
58
+ "@rivet-dev/agentos-sidecar": "0.0.0-codex-darwin-ci-publish.61a7af3",
59
59
  "@rivetkit/bare-ts": "^0.6.2",
60
- "@secure-exec/core": "0.3.0",
60
+ "@secure-exec/core": "0.3.1-rc.2",
61
61
  "@xterm/headless": "^6.0.0",
62
62
  "better-sqlite3": "^12.8.0",
63
63
  "croner": "^10.0.1",
@@ -76,8 +76,8 @@
76
76
  "@copilotkit/llmock": "^1.6.0",
77
77
  "@rivet-dev/agentos-sandbox": "link:../agent-os-sandbox",
78
78
  "@agent-os-pkgs/git": "0.0.0-split-runtime-preview.5d46b14",
79
- "@secure-exec/google-drive": "0.3.0",
80
- "@secure-exec/s3": "0.3.0",
79
+ "@secure-exec/google-drive": "0.3.1-rc.2",
80
+ "@secure-exec/s3": "0.3.1-rc.2",
81
81
  "@mariozechner/pi-coding-agent": "^0.60.0",
82
82
  "@rivet-dev/agentos-claude": "link:../../registry/agent/claude",
83
83
  "@agent-os-pkgs/codex": "0.0.0-split-runtime-preview.5d46b14",