@rivet-dev/agentos-core 0.0.0-codex-agentos-native-platform-e2e.78ef941 → 0.0.0-codex-actor-plugin-contract-coverage.115ca8a

package/dist/generated/RootFilesystemConfig.d.ts

@@ -0,0 +1,9 @@
+import type { RootFilesystemEntry } from "./RootFilesystemEntry.js";
+import type { RootFilesystemLowerDescriptor } from "./RootFilesystemLowerDescriptor.js";
+import type { RootFilesystemMode } from "./RootFilesystemMode.js";
+export type RootFilesystemConfig = {
+    mode: RootFilesystemMode;
+    disableDefaultBaseLayer: boolean;
+    lowers: Array<RootFilesystemLowerDescriptor>;
+    bootstrapEntries: Array<RootFilesystemEntry>;
+};

package/dist/generated/RootFilesystemConfig.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/RootFilesystemEntry.d.ts

@@ -0,0 +1,13 @@
+import type { RootFilesystemEntryEncoding } from "./RootFilesystemEntryEncoding.js";
+import type { RootFilesystemEntryKind } from "./RootFilesystemEntryKind.js";
+export type RootFilesystemEntry = {
+    path: string;
+    kind: RootFilesystemEntryKind;
+    mode?: number;
+    uid?: number;
+    gid?: number;
+    content?: string;
+    encoding?: RootFilesystemEntryEncoding;
+    target?: string;
+    executable: boolean;
+};

package/dist/generated/RootFilesystemEntry.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/RootFilesystemEntryEncoding.d.ts

@@ -0,0 +1 @@
+export type RootFilesystemEntryEncoding = "utf8" | "base64";

package/dist/generated/RootFilesystemEntryEncoding.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/RootFilesystemEntryKind.d.ts

@@ -0,0 +1 @@
+export type RootFilesystemEntryKind = "file" | "directory" | "symlink";

package/dist/generated/RootFilesystemEntryKind.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/RootFilesystemLowerDescriptor.d.ts

@@ -0,0 +1,7 @@
+import type { RootFilesystemEntry } from "./RootFilesystemEntry.js";
+export type RootFilesystemLowerDescriptor = {
+    "kind": "snapshot";
+    entries: Array<RootFilesystemEntry>;
+} | {
+    "kind": "bundledBaseFilesystem";
+};

package/dist/generated/RootFilesystemLowerDescriptor.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/RootFilesystemMode.d.ts

@@ -0,0 +1 @@
+export type RootFilesystemMode = "ephemeral" | "read-only";

package/dist/generated/RootFilesystemMode.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/ToolLimitsConfig.d.ts

@@ -0,0 +1,10 @@
+export type ToolLimitsConfig = {
+    defaultToolTimeoutMs?: number;
+    maxToolTimeoutMs?: number;
+    maxRegisteredToolkits?: number;
+    maxRegisteredToolsPerVm?: number;
+    maxToolsPerToolkit?: number;
+    maxToolSchemaBytes?: number;
+    maxToolExamplesPerTool?: number;
+    maxToolExampleInputBytes?: number;
+};

package/dist/generated/ToolLimitsConfig.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/VmDnsConfig.d.ts

@@ -0,0 +1,6 @@
+export type VmDnsConfig = {
+    nameServers: Array<string>;
+    overrides: {
+        [key in string]?: Array<string>;
+    };
+};

package/dist/generated/VmDnsConfig.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/VmLimitsConfig.d.ts

@@ -0,0 +1,18 @@
+import type { AcpLimitsConfig } from "./AcpLimitsConfig.js";
+import type { HttpLimitsConfig } from "./HttpLimitsConfig.js";
+import type { JsRuntimeLimitsConfig } from "./JsRuntimeLimitsConfig.js";
+import type { PluginLimitsConfig } from "./PluginLimitsConfig.js";
+import type { PythonLimitsConfig } from "./PythonLimitsConfig.js";
+import type { ResourceLimitsConfig } from "./ResourceLimitsConfig.js";
+import type { ToolLimitsConfig } from "./ToolLimitsConfig.js";
+import type { WasmLimitsConfig } from "./WasmLimitsConfig.js";
+export type VmLimitsConfig = {
+    resources?: ResourceLimitsConfig;
+    http?: HttpLimitsConfig;
+    tools?: ToolLimitsConfig;
+    plugins?: PluginLimitsConfig;
+    acp?: AcpLimitsConfig;
+    jsRuntime?: JsRuntimeLimitsConfig;
+    python?: PythonLimitsConfig;
+    wasm?: WasmLimitsConfig;
+};

package/dist/generated/VmLimitsConfig.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/VmListenPolicyConfig.d.ts

@@ -0,0 +1,5 @@
+export type VmListenPolicyConfig = {
+    portMin?: number;
+    portMax?: number;
+    allowPrivileged?: boolean;
+};

package/dist/generated/VmListenPolicyConfig.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/WasmLimitsConfig.d.ts

@@ -0,0 +1,7 @@
+export type WasmLimitsConfig = {
+    maxModuleFileBytes?: number;
+    capturedOutputLimitBytes?: number;
+    syncReadLimitBytes?: number;
+    prewarmTimeoutMs?: number;
+    runnerHeapLimitMb?: number;
+};

package/dist/generated/WasmLimitsConfig.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/host-dir-mount.d.ts

@@ -1,4 +1,4 @@
-import type { MountConfigJsonObject, NativeMountPluginDescriptor } from "@secure-exec/core/descriptors";
+import type { MountConfigJsonObject, NativeMountPluginDescriptor } from "@rivet-dev/agentos-runtime-core/descriptors";
 export interface HostDirBackendOptions {
     /** Absolute path to the host directory to project into the VM. */
     hostPath: string;

package/dist/host-tools-zod.js

@@ -1,3 +1,4 @@
+import { zodToJsonSchema as zodV3ToJsonSchema } from "zod-to-json-schema";
 const OPTIONAL_WRAPPER_TYPES = new Set(["default", "optional"]);
 const TRANSPARENT_WRAPPER_TYPES = new Set([
     ...OPTIONAL_WRAPPER_TYPES,
@@ -30,6 +31,9 @@ export class HostToolSchemaConversionError extends Error {
     }
 }
 function getSchemaDef(schema) {
+    if (!schema || typeof schema !== "object") {
+        return {};
+    }
     return (schema._def ??
         schema.def ??
         {});
@@ -131,7 +135,8 @@ function validateSchema(schema, path) {
         return;
     }
     if (typeName === "array") {
-        const itemSchema = getSchemaDef(schema).element;
+        const def = getSchemaDef(schema);
+        const itemSchema = (def.element ?? def.type);
         if (!itemSchema) {
             throw new HostToolSchemaConversionError(path, displayTypeName(typeName), "array schema is missing its item schema");
         }
@@ -163,8 +168,12 @@ function validateSchema(schema, path) {
         return;
     }
     if (typeName === "literal") {
-        const values = getSchemaDef(schema).values;
-        const literalValues = Array.isArray(values) ? values : [];
+        const def = getSchemaDef(schema);
+        const literalValues = Array.isArray(def.values)
+            ? def.values
+            : "value" in def
+                ? [def.value]
+                : [];
         const [literalValue] = literalValues;
         if (literalValues.length !== 1 ||
             !("string number boolean".split(" ").includes(typeof literalValue) || literalValue === null)) {
@@ -225,12 +234,23 @@ function findUnsupportedGeneratedKeyword(value, path) {
     }
     return null;
 }
+function generateJsonSchema(schema) {
+    const nativeJsonSchema = schema.toJSONSchema?.();
+    if (nativeJsonSchema) {
+        return nativeJsonSchema;
+    }
+    const generated = zodV3ToJsonSchema(schema, {
+        $refStrategy: "none",
+        target: "jsonSchema7",
+    });
+    if (!generated || (typeof generated === "object" && Object.keys(generated).length === 0)) {
+        throw new HostToolSchemaConversionError("$", displayTypeName(normalizeTypeName(schema)), "schema cannot be converted to JSON Schema");
+    }
+    return generated;
+}
 export function zodToJsonSchema(schema) {
     validateSchema(schema, "$");
-    const jsonSchema = schema.toJSONSchema?.();
-    if (!jsonSchema) {
-        throw new HostToolSchemaConversionError("$", displayTypeName(normalizeTypeName(schema)), "schema does not expose toJSONSchema()");
-    }
+    const jsonSchema = generateJsonSchema(schema);
     const unsupportedKeyword = findUnsupportedGeneratedKeyword(jsonSchema, "$");
     if (unsupportedKeyword) {
         throw new HostToolSchemaConversionError("$", displayTypeName(normalizeTypeName(schema)), `${unsupportedKeyword.keyword} emitted at ${unsupportedKeyword.path} is not supported`);

package/dist/host-tools.js

@@ -8,16 +8,25 @@ export function hostTool(def) {
 export function toolKit(def) {
     return def;
 }
+const TOOLKIT_COMMAND_NAME_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+function validateToolCommandName(kind, name) {
+    if (TOOLKIT_COMMAND_NAME_RE.test(name)) {
+        return;
+    }
+    throw new Error(`${kind} name "${name}" must be lowercase alphanumeric with optional single hyphen separators`);
+}
 /**
  * Validate all description lengths in the given toolkits.
  * Throws if any toolkit or tool description exceeds MAX_TOOL_DESCRIPTION_LENGTH.
  */
 export function validateToolkits(toolKits) {
     for (const tk of toolKits) {
+        validateToolCommandName("Toolkit", tk.name);
         if (tk.description.length > MAX_TOOL_DESCRIPTION_LENGTH) {
             throw new Error(`Toolkit "${tk.name}" description is ${tk.description.length} characters, max is ${MAX_TOOL_DESCRIPTION_LENGTH}`);
         }
         for (const [toolName, tool] of Object.entries(tk.tools)) {
+            validateToolCommandName("Tool", toolName);
             if (tool.description.length > MAX_TOOL_DESCRIPTION_LENGTH) {
                 throw new Error(`Tool "${tk.name}/${toolName}" description is ${tool.description.length} characters, max is ${MAX_TOOL_DESCRIPTION_LENGTH}`);
             }

package/dist/index.d.ts

@@ -1,10 +1,12 @@
 export { AgentOs, AgentOsSidecar } from "./agent-os.js";
-export { AGENT_CONFIGS } from "./agents.js";
 export { CronManager, InvalidScheduleError, PastScheduleError, TimerScheduleDriver, } from "./cron/index.js";
 export { createHostDirBackend, nodeModulesMount } from "./host-dir-mount.js";
 export { hostTool, MAX_TOOL_DESCRIPTION_LENGTH, toolKit, validateToolkits, } from "./host-tools.js";
+export { agentOsLimitsSchema, agentOsOptionFieldSchemas, agentOsOptionsSchema, hostToolSchema, mountConfigSchema, nativeMountConfigSchema, parseAgentOsOptions, permissionsSchema, rootFilesystemConfigSchema, sharedSidecarConfigSchema, sidecarConfigSchema, toolKitSchema, } from "./options-schema.js";
 export { createInMemoryLayerStore, createSnapshotExport, } from "./layers.js";
 export { defineSoftware } from "./packages.js";
+export { isPackageDescriptor, OPT_AGENTOS_BIN, OPT_AGENTOS_ROOT, tryReadAgentosPackageManifest, } from "./agentos-package.js";
 export { isAcpTimeoutErrorData, isUnknownSessionErrorData, } from "./json-rpc.js";
 export { createInMemoryFileSystem, KernelError } from "./runtime-compat.js";
+export type { ExecOptions, ExecResult, ManagedProcess, ProcessInfo, ShellHandle, VirtualDirEntry, VirtualStat, } from "./runtime.js";
 export type * from "./types.js";

package/dist/index.js

@@ -1,10 +1,11 @@
 // @rivet-dev/agentos
 export { AgentOs, AgentOsSidecar } from "./agent-os.js";
-export { AGENT_CONFIGS } from "./agents.js";
 export { CronManager, InvalidScheduleError, PastScheduleError, TimerScheduleDriver, } from "./cron/index.js";
 export { createHostDirBackend, nodeModulesMount } from "./host-dir-mount.js";
 export { hostTool, MAX_TOOL_DESCRIPTION_LENGTH, toolKit, validateToolkits, } from "./host-tools.js";
+export { agentOsLimitsSchema, agentOsOptionFieldSchemas, agentOsOptionsSchema, hostToolSchema, mountConfigSchema, nativeMountConfigSchema, parseAgentOsOptions, permissionsSchema, rootFilesystemConfigSchema, sharedSidecarConfigSchema, sidecarConfigSchema, toolKitSchema, } from "./options-schema.js";
 export { createInMemoryLayerStore, createSnapshotExport, } from "./layers.js";
 export { defineSoftware } from "./packages.js";
+export { isPackageDescriptor, OPT_AGENTOS_BIN, OPT_AGENTOS_ROOT, tryReadAgentosPackageManifest, } from "./agentos-package.js";
 export { isAcpTimeoutErrorData, isUnknownSessionErrorData, } from "./json-rpc.js";
 export { createInMemoryFileSystem, KernelError } from "./runtime-compat.js";

package/dist/layers.d.ts

@@ -1,4 +1,4 @@
-import { type BaseFilesystemSnapshot } from "./base-filesystem.js";
+import type { BaseFilesystemSnapshot } from "./base-filesystem.js";
 import { type FilesystemEntry } from "./filesystem-snapshot.js";
 import type { VirtualFileSystem } from "./runtime-compat.js";
 export type OverlayFilesystemMode = "ephemeral" | "read-only";
@@ -45,7 +45,7 @@ export interface LayerStore {
         mode: "read-only";
         lowers: SnapshotLayerHandle[];
     }): VirtualFileSystem;
+    dispose(): void;
 }
 export declare function createSnapshotExport(entries: FilesystemEntry[]): RootSnapshotExport;
 export declare function createInMemoryLayerStore(): LayerStore;
-export declare function createDefaultRootLowerInput(): SnapshotImportSource;

package/dist/layers.js

@@ -1,5 +1,4 @@
 import { randomUUID } from "node:crypto";
-import { getBaseFilesystemSnapshot, } from "./base-filesystem.js";
 import { createFilesystemFromEntries, snapshotVirtualFilesystem, } from "./filesystem-snapshot.js";
 import { createOverlayBackend } from "./overlay-filesystem.js";
 function cloneSnapshotHandle(storeId, layerId) {
@@ -73,8 +72,11 @@ export function createInMemoryLayerStore() {
         }
         return state;
     }
-    return {
+    const store = {
         storeId,
+        get retainedLayerCount() {
+            return layers.size;
+        },
         async createWritableLayer() {
             const layerId = randomUUID();
             const leaseId = randomUUID();
@@ -117,10 +119,11 @@ export function createInMemoryLayerStore() {
             if (state.kind !== "writable") {
                 throw new Error(`Layer ${layer.layerId} is not writable`);
             }
-            if (!state.valid || state.leaseId !== layer.leaseId) {
+            const baseFs = state.activeOverlay ?? state.fs;
+            if (!state.valid || state.leaseId !== layer.leaseId || !baseFs) {
                 throw new Error(`Writable layer ${layer.layerId} is no longer valid`);
             }
-            const entries = await snapshotVirtualFilesystem(state.activeOverlay ?? state.fs);
+            const entries = await snapshotVirtualFilesystem(baseFs);
             const snapshot = createSnapshotExport(entries).source;
             const layerId = randomUUID();
             layers.set(layerId, {
@@ -128,8 +131,11 @@ export function createInMemoryLayerStore() {
                 snapshot,
                 fs: await createFilesystemFromEntries(snapshot.filesystem.entries),
             });
+            // Release the writable layer's filesystem payload now that it is sealed;
+            // the invalid tombstone is retained so stale handles still report cleanly.
             state.valid = false;
             state.activeOverlay = null;
+            state.fs = null;
             return cloneSnapshotHandle(storeId, layerId);
         },
         createOverlayFilesystem(options) {
@@ -162,6 +168,9 @@ export function createInMemoryLayerStore() {
             if (upperState.activeOverlay) {
                 throw new Error(`Writable layer ${options.upper.layerId} is already attached to an overlay`);
             }
+            if (!upperState.fs) {
+                throw new Error(`Writable layer ${options.upper.layerId} is no longer valid`);
+            }
             const overlay = createOverlayBackend({
                 upper: upperState.fs,
                 lowers: lowers.map((lower) => {
@@ -175,11 +184,11 @@ export function createInMemoryLayerStore() {
             upperState.activeOverlay = overlay;
             return overlay;
         },
+        dispose() {
+            // Release every retained layer's filesystem payload so the store does
+            // not accumulate snapshots/writable layers for the process lifetime.
+            layers.clear();
+        },
     };
-}
-export function createDefaultRootLowerInput() {
-    return {
-        kind: "base-filesystem-artifact",
-        source: getBaseFilesystemSnapshot(),
-    };
+    return store;
 }