@rivet-dev/agentos-core 0.0.0-codex-actor-plugin-contract-coverage.c7d8f87 → 0.0.0-fix-main-wasm-ownership.150c49a

package/dist/sidecar/native-process-client.d.ts

@@ -1,6 +1,6 @@
 import "@rivet-dev/agentos-runtime-core/native-client";
 import { SidecarProcess } from "@rivet-dev/agentos-runtime-core/sidecar-client";
-export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "@rivet-dev/agentos-runtime-core/sidecar-client";
+export { SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "@rivet-dev/agentos-runtime-core/sidecar-client";
 export declare const NativeSidecarProcessClient: typeof SidecarProcess;
 export type { AuthenticatedSession, CreatedVm, ExtEnvelope, GuestFilesystemStat, RootFilesystemEntry, RootFilesystemLowerDescriptor, SidecarEventSelector, SidecarFsPermissionRule, SidecarLinkPackageResult, SidecarMountDescriptor, SidecarMountPluginDescriptor, SidecarPatternPermissionRule, SidecarPermissionMode, SidecarPermissionScope, SidecarPermissionsPolicy, SidecarProcessSnapshotEntry, SidecarProjectedAgent, SidecarProjectedModuleDescriptor, SidecarRegisteredHostCallbackDefinition, SidecarRegisteredHostCallbackExample, SidecarRequestFrame, SidecarRequestHandler, SidecarRequestPayload, SidecarResponseFrame, SidecarResponsePayload, SidecarRulePermissions, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSignalState, SidecarSocketStateEntry, SidecarSoftwareDescriptor, SidecarSpawnOptions, SidecarSpawnOptions as NativeSidecarSpawnOptions, SidecarZombieTimerCount, } from "@rivet-dev/agentos-runtime-core/sidecar-client";
 export type { SidecarVmConfiguredResponse as SidecarConfigureVmResult, } from "@rivet-dev/agentos-runtime-core/sidecar-client";

package/dist/sidecar/native-process-client.js

@@ -4,5 +4,5 @@
 // SidecarProcess.spawn works in this native runtime.
 import "@rivet-dev/agentos-runtime-core/native-client";
 import { SidecarProcess } from "@rivet-dev/agentos-runtime-core/sidecar-client";
-export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "@rivet-dev/agentos-runtime-core/sidecar-client";
+export { SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "@rivet-dev/agentos-runtime-core/sidecar-client";
 export const NativeSidecarProcessClient = SidecarProcess;

package/dist/sidecar/rpc-client.d.ts

@@ -35,6 +35,16 @@ interface NativeSidecarKernelProxyOptions {
     permissions?: SidecarPermissionsPolicy;
     commandPermissions?: Parameters<SidecarProcess["configureVm"]>[2]["commandPermissions"];
     loopbackExemptPorts?: number[];
+    /**
+     * The boot `configureVm` payload pieces beyond mounts/permissions. Rust
+     * `configure_vm` rebuilds the whole VM configuration from each payload, so
+     * every runtime mount reconfigure must resend these or a post-boot
+     * `mountFs()` silently drops the `/opt/agentos` package projections and
+     * binding shim commands applied at boot.
+     */
+    packages?: Parameters<SidecarProcess["configureVm"]>[2]["packages"];
+    packagesMountAt?: string;
+    bindingShimCommands?: string[];
     commandGuestPaths: ReadonlyMap<string, string>;
     onWasmCommandResolved?: (command: string) => void;
     onDispose?: () => Promise<void>;
@@ -60,9 +70,13 @@ export declare class NativeSidecarKernelProxy {
     private readonly ownsClient;
     private readonly localMounts;
     private readonly baseSidecarMounts;
+    private readonly dynamicSidecarMounts;
     private readonly permissions;
     private readonly commandPermissions;
     private readonly loopbackExemptPorts;
+    private packages;
+    private readonly packagesMountAt;
+    private readonly bindingShimCommands;
     private readonly commandDrivers;
     private readonly onWasmCommandResolved;
     private readonly onDispose;
@@ -88,6 +102,15 @@ export declare class NativeSidecarKernelProxy {
     createRootView(): VirtualFileSystem;
     get zombieTimerCount(): number;
     registerCommandGuestPaths(commandGuestPaths: ReadonlyMap<string, string>): void;
+    /**
+     * Record a runtime-linked package (`linkSoftware`) so mount reconfigures
+     * resend it. Rust `configure_vm` rebuilds the whole VM configuration from
+     * each payload, so a linked package omitted here would be silently
+     * unprojected from `/opt/agentos` by the next `mountFs`/`unmountFs`.
+     */
+    registerLinkedPackage(descriptor: {
+        path: string;
+    }): void;
     dispose(): Promise<void>;
     /** Test-only snapshot of the per-VM tracking collection sizes. */
     __trackingSizesForTest(): {
@@ -137,8 +160,15 @@ export declare class NativeSidecarKernelProxy {
     mountFs(path: string, driver: VirtualFileSystem, options?: {
         readOnly?: boolean;
         sidecarMount?: SidecarMountDescriptor;
-    }): void;
-    unmountFs(path: string): void;
+    }): Promise<void>;
+    unmountFs(path: string): Promise<void>;
+    mountDescriptor(mount: SidecarMountDescriptor): Promise<void>;
+    unmountDescriptor(path: string): Promise<void>;
+    listMounts(): Promise<Array<{
+        path: string;
+        kind: string;
+        readOnly: boolean;
+    }>>;
     private desiredSidecarMounts;
     private reconfigureSidecarMounts;
     private waitForMountReconfigure;
@@ -184,7 +214,7 @@ export declare class NativeSidecarKernelProxy {
     private updateTrackedProcessSnapshot;
 }
 export type { AuthenticatedSession, CreatedVm, GuestFilesystemStat, RootFilesystemEntry, SidecarConfigureVmResult, SidecarEventSelector, SidecarLinkPackageResult, SidecarPermissionsPolicy, SidecarProjectedAgent, SidecarRegisteredHostCallbackDefinition, SidecarRequestFrame, SidecarResponsePayload, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSocketStateEntry, SidecarSpawnOptions, } from "./native-process-client.js";
-export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, NativeSidecarProcessClient, SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "./native-process-client.js";
+export { NativeSidecarProcessClient, SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "./native-process-client.js";
 export type AgentOsSidecarPlacement = {
     kind: "shared";
     pool?: string;
@@ -240,7 +270,7 @@ export interface AgentOsSidecarTransport {
     dispose(): Promise<void>;
 }
 export interface AgentOsSidecarClientOptions {
-    createSessionTransport(bootstrap: AgentOsSidecarSessionBootstrap): Promise<AgentOsSidecarTransport>;
+    createOwnershipTransport(bootstrap: AgentOsSidecarSessionBootstrap): Promise<AgentOsSidecarTransport>;
     createId?: () => string;
     now?: () => number;
 }
@@ -262,13 +292,14 @@ export declare class AgentOsSidecarSessionHandle {
     dispose(): Promise<void>;
 }
 export declare class AgentOsSidecarClient {
-    private readonly createSessionTransport;
+    private readonly createOwnershipTransport;
     private readonly createId;
     private readonly now;
     private readonly sessions;
     private disposed;
     constructor(options: AgentOsSidecarClientOptions);
-    createSession(options?: AgentOsSidecarSessionOptions): Promise<AgentOsSidecarSessionHandle>;
+    /** Open a physical sidecar ownership scope, not a durable ACP session. */
+    createOwnershipSession(options?: AgentOsSidecarSessionOptions): Promise<AgentOsSidecarSessionHandle>;
     listSessions(): AgentOsSidecarSessionLifecycle[];
     requireSessionLifecycle(sessionId: string): AgentOsSidecarSessionLifecycle;
     listVms(sessionId: string): AgentOsSidecarVmLifecycle[];
@@ -293,6 +324,8 @@ export interface SidecarMountPluginDescriptor {
 }
 export interface SidecarMountDescriptor {
     guestPath: string;
+    guestSource?: string;
+    guestFstype?: string;
     readOnly: boolean;
     plugin: SidecarMountPluginDescriptor;
 }

package/dist/sidecar/rpc-client.js

@@ -20,7 +20,9 @@ function formatStructuredSidecarDetail(detail) {
     if (entries.length === 0) {
         return "";
     }
-    return entries.map(([key, value]) => `${key}=${JSON.stringify(value)}`).join(" ");
+    return entries
+        .map(([key, value]) => `${key}=${JSON.stringify(value)}`)
+        .join(" ");
 }
 function logStructuredSidecarEvent(name, detail) {
     if (!shouldLogStructuredSidecarEvent(name)) {
@@ -211,9 +213,15 @@ export class NativeSidecarKernelProxy {
     ownsClient;
     localMounts;
     baseSidecarMounts;
+    dynamicSidecarMounts = [];
     permissions;
     commandPermissions;
     loopbackExemptPorts;
+    // Mutable: runtime `linkSoftware` appends via `registerLinkedPackage` so
+    // later mount reconfigures resend linked packages too, not just boot ones.
+    packages;
+    packagesMountAt;
+    bindingShimCommands;
     commandDrivers;
     onWasmCommandResolved;
     onDispose;
@@ -250,6 +258,9 @@ export class NativeSidecarKernelProxy {
         this.permissions = options.permissions;
         this.commandPermissions = options.commandPermissions;
         this.loopbackExemptPorts = options.loopbackExemptPorts;
+        this.packages = options.packages ? [...options.packages] : [];
+        this.packagesMountAt = options.packagesMountAt;
+        this.bindingShimCommands = options.bindingShimCommands;
         this.commandDrivers = buildCommandMap(options.commandGuestPaths);
         this.onWasmCommandResolved = options.onWasmCommandResolved;
         this.onDispose = options.onDispose;
@@ -273,6 +284,17 @@ export class NativeSidecarKernelProxy {
             this.commandDrivers.set(name, "wasmvm");
         }
     }
+    /**
+     * Record a runtime-linked package (`linkSoftware`) so mount reconfigures
+     * resend it. Rust `configure_vm` rebuilds the whole VM configuration from
+     * each payload, so a linked package omitted here would be silently
+     * unprojected from `/opt/agentos` by the next `mountFs`/`unmountFs`.
+     */
+    registerLinkedPackage(descriptor) {
+        if (!this.packages.some((pkg) => pkg.path === descriptor.path)) {
+            this.packages.push({ path: descriptor.path });
+        }
+    }
     async dispose() {
         if (this.disposed) {
             return;
@@ -564,7 +586,7 @@ export class NativeSidecarKernelProxy {
         return proc;
     }
     openShell(options) {
-        const stdoutHandlers = new Set();
+        const terminalHandlers = new Set();
         const stderrHandlers = new Set();
         const command = options?.command ?? "sh";
         const args = options?.args ??
@@ -619,7 +641,7 @@ export class NativeSidecarKernelProxy {
             const normalized = normalizeSyntheticTerminalText(text);
             updateSyntheticCursor(normalized);
             const chunk = textEncoder.encode(normalized);
-            for (const handler of stdoutHandlers) {
+            for (const handler of terminalHandlers) {
                 handler(chunk);
             }
         };
@@ -630,7 +652,7 @@ export class NativeSidecarKernelProxy {
             const normalized = normalizeSyntheticTerminalText(text);
             updateSyntheticCursor(normalized);
             const chunk = textEncoder.encode(normalized);
-            for (const handler of stdoutHandlers) {
+            for (const handler of terminalHandlers) {
                 handler(chunk);
             }
         };
@@ -675,7 +697,7 @@ export class NativeSidecarKernelProxy {
             commandInFlight = false;
             const promptPrefix = syntheticCursorAtLineStart ? "" : "\r\n";
             const promptChunk = textEncoder.encode(`${promptPrefix}${promptText}`);
-            for (const handler of stdoutHandlers) {
+            for (const handler of terminalHandlers) {
                 handler(promptChunk);
             }
             syntheticCursorAtLineStart = false;
@@ -733,7 +755,7 @@ export class NativeSidecarKernelProxy {
             }
         };
         let onData = null;
-        stdoutHandlers.add((data) => onData?.(data));
+        terminalHandlers.add((data) => onData?.(data));
         if (options?.onStderr) {
             stderrHandlers.add(options.onStderr);
         }
@@ -902,7 +924,7 @@ export class NativeSidecarKernelProxy {
                 if (!sanitized) {
                     return;
                 }
-                for (const handler of stdoutHandlers) {
+                for (const handler of terminalHandlers) {
                     handler(sanitized);
                 }
                 if (commandInFlight) {
@@ -914,6 +936,11 @@ export class NativeSidecarKernelProxy {
                 if (!sanitized) {
                     return;
                 }
+                // `onData` is the ordered PTY rendering stream. `onStderr` remains an
+                // optional channel-specific diagnostic tap and must not also be rendered.
+                for (const handler of terminalHandlers) {
+                    handler(sanitized);
+                }
                 for (const handler of stderrHandlers) {
                     handler(sanitized);
                 }
@@ -967,13 +994,7 @@ export class NativeSidecarKernelProxy {
         const stdin = process.stdin;
         const stdout = process.stdout;
         const { onData, ...shellOptions } = options ?? {};
-        const shell = this.openShell({
-            ...shellOptions,
-            onStderr: shellOptions.onStderr ??
-                ((data) => {
-                    process.stderr.write(data);
-                }),
-        });
+        const shell = this.openShell(shellOptions);
         const outputHandler = onData ??
             ((data) => {
                 stdout.write(data);
@@ -1058,7 +1079,7 @@ export class NativeSidecarKernelProxy {
         if (local) {
             return this.readdirRecursiveLocal(local.mount.fs, local.relativePath, options?.maxDepth);
         }
-        return this.client.readdirRecursive(this.session, this.vm, path, options);
+        return (await this.client.readdirRecursive(this.session, this.vm, path, options)).map((entry) => ({ ...entry, size: Number(entry.size) }));
     }
     async removeFile(path) {
         return this.dispatchWrite(path, (mount, relativePath) => mount.fs.removeFile(relativePath), () => this.client.removeFile(this.session, this.vm, path));
@@ -1126,19 +1147,53 @@ export class NativeSidecarKernelProxy {
             sidecarMount: options?.sidecarMount,
         });
         this.localMounts.sort((left, right) => right.path.length - left.path.length);
-        void this.reconfigureSidecarMounts().catch(() => { });
+        // Resolves once the sidecar has the mount; a swallowed rejection here
+        // used to turn reconfigure failures into silently missing guest mounts.
+        // The local catch only guards callers that drop the promise — awaiting
+        // callers still observe the rejection.
+        const applied = this.reconfigureSidecarMounts();
+        applied.catch(() => { });
+        return applied;
     }
     unmountFs(path) {
         const normalized = posixPath.normalize(path);
         const index = this.localMounts.findIndex((mount) => mount.path === normalized);
-        if (index >= 0) {
-            this.localMounts.splice(index, 1);
-            void this.reconfigureSidecarMounts().catch(() => { });
+        if (index < 0) {
+            return Promise.resolve();
+        }
+        this.localMounts.splice(index, 1);
+        const applied = this.reconfigureSidecarMounts();
+        applied.catch(() => { });
+        return applied;
+    }
+    mountDescriptor(mount) {
+        const normalized = posixPath.normalize(mount.guestPath);
+        if (this.desiredSidecarMounts().some((existing) => posixPath.normalize(existing.guestPath) === normalized)) {
+            return Promise.reject(new Error(`mount already exists: ${normalized}`));
         }
+        this.dynamicSidecarMounts.push({ ...mount, guestPath: normalized });
+        const applied = this.reconfigureSidecarMounts();
+        applied.catch(() => { });
+        return applied;
+    }
+    unmountDescriptor(path) {
+        const normalized = posixPath.normalize(path);
+        const index = this.dynamicSidecarMounts.findIndex((mount) => posixPath.normalize(mount.guestPath) === normalized);
+        if (index < 0)
+            return Promise.resolve();
+        this.dynamicSidecarMounts.splice(index, 1);
+        const applied = this.reconfigureSidecarMounts();
+        applied.catch(() => { });
+        return applied;
+    }
+    async listMounts() {
+        await this.waitForMountReconfigure();
+        return this.client.listMounts(this.session, this.vm);
     }
     desiredSidecarMounts() {
         return [
             ...this.baseSidecarMounts,
+            ...this.dynamicSidecarMounts,
             ...this.localMounts.map((mount) => mount.sidecarMount ?? {
                 guestPath: mount.path,
                 readOnly: mount.readOnly,
@@ -1154,11 +1209,18 @@ export class NativeSidecarKernelProxy {
             if (this.disposed) {
                 return;
             }
+            // Rust `configure_vm` rebuilds the whole VM configuration from this
+            // payload, so resend the boot packages / binding shim commands too —
+            // omitting them here strips the `/opt/agentos` projections and binding
+            // shims from the VM as a side effect of a runtime mount change.
             await this.client.configureVm(this.session, this.vm, {
                 mounts: this.desiredSidecarMounts(),
                 permissions: this.permissions,
                 commandPermissions: this.commandPermissions,
                 loopbackExemptPorts: this.loopbackExemptPorts,
+                packages: this.packages,
+                packagesMountAt: this.packagesMountAt,
+                bindingShimCommands: this.bindingShimCommands,
             });
         };
         const previous = this.mountReconfigurePromise ?? Promise.resolve();
@@ -1957,21 +2019,27 @@ function isMissingHostProcessError(error) {
 function errnoError(code, message) {
     return Object.assign(new Error(`${code}: ${message}`), { code });
 }
+// VirtualStat is a numeric, Node-default-shaped view: u64 fields above
+// Number.MAX_SAFE_INTEGER lose precision here, same as Node's non-bigint
+// fs.stat on the host.
 function toVirtualStat(stat) {
     return {
         mode: stat.mode,
-        size: stat.size,
-        blocks: stat.blocks,
-        dev: stat.dev,
-        rdev: stat.rdev,
+        size: Number(stat.size),
+        sizeExact: stat.size,
+        blocks: Number(stat.blocks),
+        dev: Number(stat.dev),
+        rdev: Number(stat.rdev),
         isDirectory: stat.is_directory,
         isSymbolicLink: stat.is_symbolic_link,
         atimeMs: stat.atime_ms,
         mtimeMs: stat.mtime_ms,
         ctimeMs: stat.ctime_ms,
         birthtimeMs: stat.birthtime_ms,
-        ino: stat.ino,
-        nlink: stat.nlink,
+        ino: Number(stat.ino),
+        inoExact: stat.ino,
+        nlink: Number(stat.nlink),
+        nlinkExact: stat.nlink,
         uid: stat.uid,
         gid: stat.gid,
     };
@@ -2004,7 +2072,7 @@ function socketLookupKey(kind, request) {
         path: request.path ?? null,
     });
 }
-export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, NativeSidecarProcessClient, SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "./native-process-client.js";
+export { NativeSidecarProcessClient, SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "./native-process-client.js";
 export class AgentOsSidecarVmHandle {
     client;
     sessionId;
@@ -2042,17 +2110,18 @@ export class AgentOsSidecarSessionHandle {
     }
 }
 export class AgentOsSidecarClient {
-    createSessionTransport;
+    createOwnershipTransport;
     createId;
     now;
     sessions = new Map();
     disposed = false;
     constructor(options) {
-        this.createSessionTransport = options.createSessionTransport;
+        this.createOwnershipTransport = options.createOwnershipTransport;
         this.createId = options.createId ?? randomUUID;
         this.now = options.now ?? Date.now;
     }
-    async createSession(options = {}) {
+    /** Open a physical sidecar ownership scope, not a durable ACP session. */
+    async createOwnershipSession(options = {}) {
         this.assertActive();
         const sessionId = this.createId();
         const placement = clonePlacement(options.placement);
@@ -2071,7 +2140,7 @@ export class AgentOsSidecarClient {
         };
         this.sessions.set(sessionId, entry);
         try {
-            entry.transport = await this.createSessionTransport({
+            entry.transport = await this.createOwnershipTransport({
                 sessionId,
                 placement: clonePlacement(placement),
                 metadata: cloneMetadata(metadata),
@@ -2237,6 +2306,8 @@ export function serializeMountConfigForSidecar(mount) {
     if ("driver" in mount) {
         return {
             guestPath: mount.path,
+            guestSource: mount.guestSource ?? "js_bridge",
+            guestFstype: mount.guestFstype ?? "js_bridge",
             readOnly: mount.readOnly ?? false,
             plugin: {
                 id: "js_bridge",
@@ -2246,6 +2317,8 @@ export function serializeMountConfigForSidecar(mount) {
     }
     return {
         guestPath: mount.path,
+        guestSource: mount.guestSource ?? mount.plugin.id,
+        guestFstype: mount.guestFstype ?? mount.plugin.id,
         readOnly: mount.readOnly ?? false,
         plugin: {
             id: mount.plugin.id,
@@ -2254,6 +2327,14 @@ export function serializeMountConfigForSidecar(mount) {
     };
 }
 export function serializeRootFilesystemForSidecar(config, bootstrapLower) {
+    if (config?.type === "native") {
+        return {
+            mode: "ephemeral",
+            disableDefaultBaseLayer: true,
+            lowers: [],
+            bootstrapEntries: [],
+        };
+    }
     const lowerInputs = [
         ...(config?.lowers ?? []),
         ...(bootstrapLower ? [bootstrapLower] : []),

package/dist/test/runtime.d.ts

@@ -7,5 +7,6 @@
 export { type AgentOsRuntimeAdmin, getAgentOsKernel, getAgentOsRuntimeAdmin, } from "../agent-os.js";
 export type { PermissionTier, WasmVmRuntimeOptions, } from "../runtime.js";
 export type { DriverProcess, Kernel, KernelInterface, KernelRuntimeDriver, ProcessContext, VirtualFileSystem, } from "../runtime-compat.js";
-export { AF_INET, AF_UNIX, allowAll, createInMemoryFileSystem, createKernel, createNodeHostNetworkAdapter, createNodeRuntime, createWasmVmRuntime, DEFAULT_FIRST_PARTY_TIERS, NodeFileSystem, SIGTERM, SOCK_DGRAM, SOCK_STREAM, WASMVM_COMMANDS, } from "../runtime-compat.js";
+export { AF_INET, AF_UNIX, allowAll, createKernel, createNodeHostNetworkAdapter, createNodeRuntime, createWasmVmRuntime, DEFAULT_FIRST_PARTY_TIERS, NodeFileSystem, SIGTERM, SOCK_DGRAM, SOCK_STREAM, WASMVM_COMMANDS, } from "../runtime-compat.js";
+export { createInMemoryFileSystem } from "@rivet-dev/agentos-runtime-core/test-runtime";
 export { TerminalHarness } from "./terminal-harness.js";

package/dist/test/runtime.js

@@ -5,5 +5,6 @@
  * while the public SDK removes the raw vm.kernel escape hatch.
  */
 export { getAgentOsKernel, getAgentOsRuntimeAdmin, } from "../agent-os.js";
-export { AF_INET, AF_UNIX, allowAll, createInMemoryFileSystem, createKernel, createNodeHostNetworkAdapter, createNodeRuntime, createWasmVmRuntime, DEFAULT_FIRST_PARTY_TIERS, NodeFileSystem, SIGTERM, SOCK_DGRAM, SOCK_STREAM, WASMVM_COMMANDS, } from "../runtime-compat.js";
+export { AF_INET, AF_UNIX, allowAll, createKernel, createNodeHostNetworkAdapter, createNodeRuntime, createWasmVmRuntime, DEFAULT_FIRST_PARTY_TIERS, NodeFileSystem, SIGTERM, SOCK_DGRAM, SOCK_STREAM, WASMVM_COMMANDS, } from "../runtime-compat.js";
+export { createInMemoryFileSystem } from "@rivet-dev/agentos-runtime-core/test-runtime";
 export { TerminalHarness } from "./terminal-harness.js";

package/dist/test/terminal-harness.js

@@ -20,9 +20,6 @@ export class TerminalHarness {
             rows,
             env: options?.env,
             cwd: options?.cwd,
-            onStderr: (data) => {
-                this.term.write(data);
-            },
         });
         this.shell.onData = (data) => {
             this.term.write(data);

package/dist/types.d.ts

@@ -1,4 +1,5 @@
-export type { AgentCapabilities, AgentInfo, AgentOsCreateSidecarOptions, AgentOsLimits, AgentOsOptions, AgentOsSharedSidecarOptions, AgentOsSidecarConfig, AgentOsSidecarDescription, AgentExitEvent, AgentExitHandler, AgentRestartOutcome, AgentStderrEvent, AgentStderrHandler, AgentRegistryEntry, BatchReadResult, BatchWriteEntry, BatchWriteResult, CreateSessionOptions, DirEntry, LimitWarning, LimitWarningHandler, McpServerConfig, McpServerConfigLocal, McpServerConfigRemote, MountConfig, MountConfigJsonObject, MountConfigJsonPrimitive, MountConfigJsonValue, NativeMountConfig, NativeMountPluginDescriptor, OverlayMountConfig, PermissionReply, PermissionRequest, PermissionRequestHandler, PlainMountConfig, ProcessTreeNode, PromptResult, ReaddirRecursiveOptions, ResumeSessionOptions, ResumeSessionResult, RootFilesystemConfig, RootLowerInput, SessionConfigOption, SessionEventHandler, SessionInfo, SessionInitData, SessionMode, SessionModeState, SpawnedProcessInfo, } from "./agent-os.js";
+export type { AgentOsCreateSidecarOptions, AgentOsLimits, AgentOsOptions, AgentOsSharedSidecarOptions, AgentOsSidecarConfig, AgentOsSidecarDescription, AgentExitEvent, AgentExitHandler, AgentRestartOutcome, AgentStderrEvent, AgentStderrHandler, AgentRegistryEntry, BatchReadResult, BatchWriteEntry, BatchWriteResult, DirEntry, DynamicMountDescriptor, ExportRootFilesystemOptions, HttpRequest, HttpResponse, LimitWarning, LimitWarningHandler, MountConfig, MountInfo, MountConfigJsonObject, MountConfigJsonPrimitive, MountConfigJsonValue, NativeMountConfig, NativeMountPluginDescriptor, NativeRootFilesystemConfig, OverlayMountConfig, OverlayRootFilesystemConfig, PlainMountConfig, ProcessTreeNode, ProcessExit, ProcessOutput, ReaddirEntry, ReaddirRecursiveOptions, RootFilesystemConfig, RootLowerInput, SpawnedProcessInfo, SpawnOptions, ShellData, ShellExit, ShellOptions, } from "./agent-os.js";
+export type * from "./session-api.js";
 /**
  * An agent type id — the `name` of an `/opt/agentos` agent package manifest
  * (e.g. `"pi"`, `"claude"`). Agents are resolved by the SIDECAR from the projected
@@ -6,12 +7,10 @@ export type { AgentCapabilities, AgentInfo, AgentOsCreateSidecarOptions, AgentOs
  * passes only the name, so any manifest `name` is a valid agent type.
  */
 export type AgentType = string;
-export type { CronAction, CronEvent, CronEventHandler, CronJob, CronJobInfo, CronJobOptions, ScheduleDriver, ScheduleEntry, ScheduleHandle, } from "./cron/index.js";
+export type { CronAction, CronActionInfo, CronEvent, CronEventHandler, CronJob, CronJobInfo, CronJobOptions, ScheduleDriver, ScheduleEntry, ScheduleHandle, } from "./cron/index.js";
 export type { HostDirBackendOptions, HostDirMountPluginConfig, NodeModulesMountConfig, } from "./host-dir-mount.js";
-export type { HostTool, ToolExample, ToolKit } from "./host-tools.js";
-export type { AcpTimeoutErrorData, JsonRpcError, JsonRpcErrorData, JsonRpcNotification, JsonRpcRequest, JsonRpcResponse, UnknownSessionErrorData, } from "./json-rpc.js";
+export type { Binding, BindingExample, Bindings } from "./bindings.js";
 export type { FilesystemSnapshotExport, LayerHandle, LayerStore, OverlayFilesystemMode, RootSnapshotExport, SnapshotImportSource, SnapshotLayerHandle, WritableLayerHandle, } from "./layers.js";
 export type { SoftwareInput, SoftwareRoot } from "./packages.js";
 export type { AgentBlock, PackageDescriptor, PackageRef, SoftwarePackageRef, } from "./agentos-package.js";
 export type { ChildProcessPermissions, ConnectTerminalOptions, EnvPermissions, ExecOptions, ExecResult, FsPermissionRule, FsPermissions, KernelExecOptions, KernelExecResult, KernelSpawnOptions, NetworkAccessRequest, NetworkPermissions, OpenShellOptions, PatternPermissionRule, PermissionDecision, PermissionMode, Permissions, ProcessInfo, RulePermissions, StdioChannel, TimingMitigation, VirtualDirEntry, VirtualFileSystem, VirtualStat, } from "./runtime.js";
-export type { PromptCapabilities } from "./agent-session-types.js";

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@rivet-dev/agentos-core",
-	"version": "0.0.0-codex-actor-plugin-contract-coverage.c7d8f87",
+	"version": "0.0.0-fix-main-wasm-ownership.150c49a",
 	"type": "module",
 	"license": "Apache-2.0",
 	"main": "./dist/index.js",
@@ -46,24 +46,25 @@
 		}
 	},
 	"scripts": {
-		"check-types": "pnpm run build:protocols && tsc --noEmit",
+		"check-types": "pnpm run build:protocols && tsc --noEmit && tsc -p tsconfig.type-tests.json",
 		"build": "pnpm run build:protocols && tsc",
 		"build:agentos-protocol": "node ./scripts/compile-agentos-protocol.mjs",
 		"build:protocols": "pnpm run build:agentos-protocol",
 		"test": "vitest run --reporter=verbose"
 	},
 	"dependencies": {
-		"@agentos-software/claude-code": "0.0.0-codex-actor-plugin-contract-coverage.c7d8f87",
-		"@agentos-software/codex-cli": "0.3.3",
-		"@agentos-software/common": "0.0.0-codex-actor-plugin-contract-coverage.c7d8f87",
-		"@agentos-software/manifest": "0.0.0-codex-actor-plugin-contract-coverage.c7d8f87",
-		"@agentos-software/opencode": "0.0.0-codex-actor-plugin-contract-coverage.c7d8f87",
-		"@agentos-software/pi": "0.0.0-codex-actor-plugin-contract-coverage.c7d8f87",
-		"@agentos-software/pi-cli": "0.0.0-codex-actor-plugin-contract-coverage.c7d8f87",
+		"@agentclientprotocol/sdk": "0.16.1",
+		"@agentos-software/claude-code": "0.2.7",
+		"@agentos-software/codex-cli": "0.3.4",
+		"@agentos-software/common": "0.0.0-fix-main-wasm-ownership.150c49a",
+		"@agentos-software/manifest": "0.0.0-fix-main-wasm-ownership.150c49a",
+		"@agentos-software/opencode": "0.2.7",
+		"@agentos-software/pi": "0.2.7",
+		"@agentos-software/pi-cli": "0.2.7",
 		"@aws-sdk/client-s3": "^3.1019.0",
-		"@rivet-dev/agentos-sidecar": "0.0.0-codex-actor-plugin-contract-coverage.c7d8f87",
+		"@rivet-dev/agentos-sidecar": "0.0.0-fix-main-wasm-ownership.150c49a",
 		"@rivetkit/bare-ts": "^0.6.2",
-		"@rivet-dev/agentos-runtime-core": "0.0.0-codex-actor-plugin-contract-coverage.c7d8f87",
+		"@rivet-dev/agentos-runtime-core": "0.0.0-fix-main-wasm-ownership.150c49a",
 		"@xterm/headless": "^6.0.0",
 		"better-sqlite3": "^12.8.0",
 		"croner": "^10.0.1",
@@ -75,8 +76,8 @@
 		"zod-to-json-schema": "^3.25.2"
 	},
 	"devDependencies": {
-		"@agentos-software/claude-code": "0.0.0-codex-actor-plugin-contract-coverage.c7d8f87",
-		"@agentos-software/codex": "0.0.0-codex-actor-plugin-contract-coverage.c7d8f87",
+		"@agentos-software/claude-code": "0.2.7",
+		"@agentos-software/codex": "0.2.7",
 		"@agentos-software/coreutils": "0.3.3",
 		"@agentos-software/curl": "0.3.3",
 		"@agentos-software/diffutils": "0.3.3",
@@ -88,17 +89,18 @@
 		"@agentos-software/git": "0.3.3",
 		"@agentos-software/grep": "0.3.3",
 		"@agentos-software/gzip": "0.3.3",
-		"@agentos-software/http-get": "0.3.3",
 		"@agentos-software/jq": "0.3.3",
-		"@agentos-software/opencode": "0.0.0-codex-actor-plugin-contract-coverage.c7d8f87",
-		"@agentos-software/pi": "0.0.0-codex-actor-plugin-contract-coverage.c7d8f87",
-		"@agentos-software/pi-cli": "0.0.0-codex-actor-plugin-contract-coverage.c7d8f87",
+		"@agentos-software/opencode": "0.2.7",
+		"@agentos-software/pi": "0.2.7",
+		"@agentos-software/pi-cli": "0.2.7",
 		"@agentos-software/ripgrep": "0.3.3",
 		"@agentos-software/sed": "0.3.3",
 		"@agentos-software/tar": "0.3.3",
 		"@agentos-software/tree": "0.3.3",
 		"@agentos-software/vim": "0.3.3",
+		"@agentos-software/wget": "0.3.3",
 		"@agentos-software/yq": "0.3.3",
+		"@rivet-dev/agentos-test-harness": "0.0.0-fix-main-wasm-ownership.150c49a",
 		"@anthropic-ai/claude-agent-sdk": "^0.2.87",
 		"@anthropic-ai/claude-code": "^2.1.86",
 		"@bare-ts/tools": "0.15.0",

package/dist/agent-session-types.d.ts

@@ -1,67 +0,0 @@
-import type { JsonRpcNotification } from "./json-rpc.js";
-export type SessionEventHandler = (event: JsonRpcNotification) => void;
-export interface PermissionRequest {
-    permissionId: string;
-    description?: string;
-    params: Record<string, unknown>;
-}
-export type PermissionReply = "once" | "always" | "reject";
-export type PermissionRequestHandler = (request: PermissionRequest) => void;
-export interface SessionMode {
-    id: string;
-    name?: string;
-    label?: string;
-    description?: string;
-    [key: string]: unknown;
-}
-export interface SessionModeState {
-    currentModeId: string;
-    availableModes: SessionMode[];
-}
-export interface SessionConfigOption {
-    id: string;
-    category?: string;
-    label?: string;
-    description?: string;
-    currentValue?: string;
-    allowedValues?: Array<{
-        id: string;
-        label?: string;
-    }>;
-    readOnly?: boolean;
-}
-export interface PromptCapabilities {
-    audio?: boolean;
-    embeddedContext?: boolean;
-    image?: boolean;
-    [key: string]: unknown;
-}
-export interface AgentCapabilities {
-    permissions?: boolean;
-    plan_mode?: boolean;
-    questions?: boolean;
-    tool_calls?: boolean;
-    text_messages?: boolean;
-    images?: boolean;
-    file_attachments?: boolean;
-    session_lifecycle?: boolean;
-    error_events?: boolean;
-    reasoning?: boolean;
-    status?: boolean;
-    streaming_deltas?: boolean;
-    mcp_tools?: boolean;
-    promptCapabilities?: PromptCapabilities;
-    [key: string]: unknown;
-}
-export interface AgentInfo {
-    name: string;
-    title?: string;
-    version?: string;
-    [key: string]: unknown;
-}
-export interface SessionInitData {
-    modes?: SessionModeState;
-    configOptions?: SessionConfigOption[];
-    capabilities?: AgentCapabilities;
-    agentInfo?: AgentInfo;
-}