@rivet-dev/agentos-core 0.0.0-codex-agentos-native-platform-e2e.78ef941 → 0.0.0-glibc.4af31c1

package/dist/sidecar/agentos-protocol.js

@@ -96,7 +96,6 @@ export function readAcpCreateSessionRequest(bc) {
     return {
         agentType: bare.readString(bc),
         runtime: readAcpRuntimeKind(bc),
-        adapterEntrypoint: bare.readString(bc),
         cwd: bare.readString(bc),
         args: read0(bc),
         env: read1(bc),
@@ -110,7 +109,6 @@ export function readAcpCreateSessionRequest(bc) {
 export function writeAcpCreateSessionRequest(bc, x) {
     bare.writeString(bc, x.agentType);
     writeAcpRuntimeKind(bc, x.runtime);
-    bare.writeString(bc, x.adapterEntrypoint);
     bare.writeString(bc, x.cwd);
     write0(bc, x.args);
     write1(bc, x.env);
@@ -141,6 +139,51 @@ export function writeAcpSessionRequest(bc, x) {
     bare.writeString(bc, x.method);
     write3(bc, x.params);
 }
+export function readAcpListAgentsRequest(bc) {
+    return {
+        reserved: bare.readBool(bc),
+    };
+}
+export function writeAcpListAgentsRequest(bc, x) {
+    bare.writeBool(bc, x.reserved);
+}
+export function readAcpAgentEntry(bc) {
+    return {
+        id: bare.readString(bc),
+        installed: bare.readBool(bc),
+        adapterEntrypoint: bare.readString(bc),
+    };
+}
+export function writeAcpAgentEntry(bc, x) {
+    bare.writeString(bc, x.id);
+    bare.writeBool(bc, x.installed);
+    bare.writeString(bc, x.adapterEntrypoint);
+}
+function read4(bc) {
+    const len = bare.readUintSafe(bc);
+    if (len === 0) {
+        return [];
+    }
+    const result = [readAcpAgentEntry(bc)];
+    for (let i = 1; i < len; i++) {
+        result[i] = readAcpAgentEntry(bc);
+    }
+    return result;
+}
+function write4(bc, x) {
+    bare.writeUintSafe(bc, x.length);
+    for (let i = 0; i < x.length; i++) {
+        writeAcpAgentEntry(bc, x[i]);
+    }
+}
+export function readAcpListAgentsResponse(bc) {
+    return {
+        agents: read4(bc),
+    };
+}
+export function writeAcpListAgentsResponse(bc, x) {
+    write4(bc, x.agents);
+}
 export function readAcpGetSessionStateRequest(bc) {
     return {
         sessionId: bare.readString(bc),
@@ -173,6 +216,16 @@ export function writeAcpResumeSessionRequest(bc, x) {
     bare.writeString(bc, x.cwd);
     write1(bc, x.env);
 }
+export function readAcpDeliverAgentOutputRequest(bc) {
+    return {
+        processId: bare.readString(bc),
+        chunk: bare.readData(bc),
+    };
+}
+export function writeAcpDeliverAgentOutputRequest(bc, x) {
+    bare.writeString(bc, x.processId);
+    bare.writeData(bc, x.chunk);
+}
 export function readAcpRequest(bc) {
     const offset = bc.offset;
     const tag = bare.readU8(bc);
@@ -187,6 +240,10 @@ export function readAcpRequest(bc) {
             return { tag: "AcpCloseSessionRequest", val: readAcpCloseSessionRequest(bc) };
         case 4:
             return { tag: "AcpResumeSessionRequest", val: readAcpResumeSessionRequest(bc) };
+        case 5:
+            return { tag: "AcpDeliverAgentOutputRequest", val: readAcpDeliverAgentOutputRequest(bc) };
+        case 6:
+            return { tag: "AcpListAgentsRequest", val: readAcpListAgentsRequest(bc) };
         default: {
             bc.offset = offset;
             throw new bare.BareError(offset, "invalid tag");
@@ -220,6 +277,16 @@ export function writeAcpRequest(bc, x) {
             writeAcpResumeSessionRequest(bc, x.val);
             break;
         }
+        case "AcpDeliverAgentOutputRequest": {
+            bare.writeU8(bc, 5);
+            writeAcpDeliverAgentOutputRequest(bc, x.val);
+            break;
+        }
+        case "AcpListAgentsRequest": {
+            bare.writeU8(bc, 6);
+            writeAcpListAgentsRequest(bc, x.val);
+            break;
+        }
     }
 }
 export function encodeAcpRequest(x, config) {
@@ -236,16 +303,16 @@ export function decodeAcpRequest(bytes) {
     }
     return result;
 }
-function read4(bc) {
+function read5(bc) {
     return bare.readBool(bc) ? bare.readU32(bc) : null;
 }
-function write4(bc, x) {
+function write5(bc, x) {
     bare.writeBool(bc, x != null);
     if (x != null) {
         bare.writeU32(bc, x);
     }
 }
-function read5(bc) {
+function read6(bc) {
     const len = bare.readUintSafe(bc);
     if (len === 0) {
         return [];
@@ -256,7 +323,7 @@ function read5(bc) {
     }
     return result;
 }
-function write5(bc, x) {
+function write6(bc, x) {
     bare.writeUintSafe(bc, x.length);
     for (let i = 0; i < x.length; i++) {
         writeJsonUtf8(bc, x[i]);
@@ -265,18 +332,18 @@ function write5(bc, x) {
 export function readAcpSessionCreatedResponse(bc) {
     return {
         sessionId: bare.readString(bc),
-        pid: read4(bc),
+        pid: read5(bc),
         modes: read3(bc),
-        configOptions: read5(bc),
+        configOptions: read6(bc),
         agentCapabilities: read3(bc),
         agentInfo: read3(bc),
     };
 }
 export function writeAcpSessionCreatedResponse(bc, x) {
     bare.writeString(bc, x.sessionId);
-    write4(bc, x.pid);
+    write5(bc, x.pid);
     write3(bc, x.modes);
-    write5(bc, x.configOptions);
+    write6(bc, x.configOptions);
     write3(bc, x.agentCapabilities);
     write3(bc, x.agentInfo);
 }
@@ -290,10 +357,10 @@ export function writeAcpSessionRpcResponse(bc, x) {
     bare.writeString(bc, x.sessionId);
     writeJsonUtf8(bc, x.response);
 }
-function read6(bc) {
+function read7(bc) {
     return bare.readBool(bc) ? bare.readI32(bc) : null;
 }
-function write6(bc, x) {
+function write7(bc, x) {
     bare.writeBool(bc, x != null);
     if (x != null) {
         bare.writeI32(bc, x);
@@ -304,11 +371,11 @@ export function readAcpSessionStateResponse(bc) {
         sessionId: bare.readString(bc),
         agentType: bare.readString(bc),
         processId: bare.readString(bc),
-        pid: read4(bc),
+        pid: read5(bc),
         closed: bare.readBool(bc),
-        exitCode: read6(bc),
+        exitCode: read7(bc),
         modes: read3(bc),
-        configOptions: read5(bc),
+        configOptions: read6(bc),
         agentCapabilities: read3(bc),
         agentInfo: read3(bc),
     };
@@ -317,11 +384,11 @@ export function writeAcpSessionStateResponse(bc, x) {
     bare.writeString(bc, x.sessionId);
     bare.writeString(bc, x.agentType);
     bare.writeString(bc, x.processId);
-    write4(bc, x.pid);
+    write5(bc, x.pid);
     bare.writeBool(bc, x.closed);
-    write6(bc, x.exitCode);
+    write7(bc, x.exitCode);
     write3(bc, x.modes);
-    write5(bc, x.configOptions);
+    write6(bc, x.configOptions);
     write3(bc, x.agentCapabilities);
     write3(bc, x.agentInfo);
 }
@@ -353,6 +420,14 @@ export function writeAcpErrorResponse(bc, x) {
     bare.writeString(bc, x.code);
     bare.writeString(bc, x.message);
 }
+export function readAcpPendingResponse(bc) {
+    return {
+        processId: bare.readString(bc),
+    };
+}
+export function writeAcpPendingResponse(bc, x) {
+    bare.writeString(bc, x.processId);
+}
 export function readAcpResponse(bc) {
     const offset = bc.offset;
     const tag = bare.readU8(bc);
@@ -369,6 +444,10 @@ export function readAcpResponse(bc) {
             return { tag: "AcpSessionResumedResponse", val: readAcpSessionResumedResponse(bc) };
         case 5:
             return { tag: "AcpErrorResponse", val: readAcpErrorResponse(bc) };
+        case 6:
+            return { tag: "AcpPendingResponse", val: readAcpPendingResponse(bc) };
+        case 7:
+            return { tag: "AcpListAgentsResponse", val: readAcpListAgentsResponse(bc) };
         default: {
             bc.offset = offset;
             throw new bare.BareError(offset, "invalid tag");
@@ -407,6 +486,16 @@ export function writeAcpResponse(bc, x) {
             writeAcpErrorResponse(bc, x.val);
             break;
         }
+        case "AcpPendingResponse": {
+            bare.writeU8(bc, 6);
+            writeAcpPendingResponse(bc, x.val);
+            break;
+        }
+        case "AcpListAgentsResponse": {
+            bare.writeU8(bc, 7);
+            writeAcpListAgentsResponse(bc, x.val);
+            break;
+        }
     }
 }
 export function encodeAcpResponse(x, config) {
@@ -447,6 +536,26 @@ export function writeAcpAgentStderrEvent(bc, x) {
     bare.writeString(bc, x.processId);
     bare.writeData(bc, x.chunk);
 }
+export function readAcpAgentExitedEvent(bc) {
+    return {
+        sessionId: bare.readString(bc),
+        agentType: bare.readString(bc),
+        processId: bare.readString(bc),
+        exitCode: read7(bc),
+        restart: bare.readString(bc),
+        restartCount: bare.readU32(bc),
+        maxRestarts: bare.readU32(bc),
+    };
+}
+export function writeAcpAgentExitedEvent(bc, x) {
+    bare.writeString(bc, x.sessionId);
+    bare.writeString(bc, x.agentType);
+    bare.writeString(bc, x.processId);
+    write7(bc, x.exitCode);
+    bare.writeString(bc, x.restart);
+    bare.writeU32(bc, x.restartCount);
+    bare.writeU32(bc, x.maxRestarts);
+}
 export function readAcpEvent(bc) {
     const offset = bc.offset;
     const tag = bare.readU8(bc);
@@ -455,6 +564,8 @@ export function readAcpEvent(bc) {
             return { tag: "AcpSessionEvent", val: readAcpSessionEvent(bc) };
         case 1:
             return { tag: "AcpAgentStderrEvent", val: readAcpAgentStderrEvent(bc) };
+        case 2:
+            return { tag: "AcpAgentExitedEvent", val: readAcpAgentExitedEvent(bc) };
         default: {
             bc.offset = offset;
             throw new bare.BareError(offset, "invalid tag");
@@ -473,6 +584,11 @@ export function writeAcpEvent(bc, x) {
             writeAcpAgentStderrEvent(bc, x.val);
             break;
         }
+        case "AcpAgentExitedEvent": {
+            bare.writeU8(bc, 2);
+            writeAcpAgentExitedEvent(bc, x.val);
+            break;
+        }
     }
 }
 export function encodeAcpEvent(x, config) {

package/dist/sidecar/native-process-client.d.ts

@@ -1,3 +1,6 @@
-import "@secure-exec/core/native-client";
-export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, SidecarProcess, SidecarProcess as NativeSidecarProcessClient, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "@secure-exec/core/sidecar-client";
-export type { AuthenticatedSession, CreatedVm, ExtEnvelope, GuestFilesystemStat, RootFilesystemEntry, RootFilesystemLowerDescriptor, SidecarEventSelector, SidecarFsPermissionRule, SidecarMountDescriptor, SidecarMountPluginDescriptor, SidecarPatternPermissionRule, SidecarPermissionMode, SidecarPermissionScope, SidecarPermissionsPolicy, SidecarProcessSnapshotEntry, SidecarProjectedModuleDescriptor, SidecarRegisteredHostCallbackDefinition, SidecarRegisteredHostCallbackExample, SidecarRequestFrame, SidecarRequestHandler, SidecarRequestPayload, SidecarResponseFrame, SidecarResponsePayload, SidecarRulePermissions, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSignalState, SidecarSocketStateEntry, SidecarSoftwareDescriptor, SidecarSpawnOptions, SidecarSpawnOptions as NativeSidecarSpawnOptions, SidecarZombieTimerCount, } from "@secure-exec/core/sidecar-client";
+import "@rivet-dev/agentos-runtime-core/native-client";
+import { SidecarProcess } from "@rivet-dev/agentos-runtime-core/sidecar-client";
+export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "@rivet-dev/agentos-runtime-core/sidecar-client";
+export declare const NativeSidecarProcessClient: typeof SidecarProcess;
+export type { AuthenticatedSession, CreatedVm, ExtEnvelope, GuestFilesystemStat, RootFilesystemEntry, RootFilesystemLowerDescriptor, SidecarEventSelector, SidecarFsPermissionRule, SidecarLinkPackageResult, SidecarMountDescriptor, SidecarMountPluginDescriptor, SidecarPatternPermissionRule, SidecarPermissionMode, SidecarPermissionScope, SidecarPermissionsPolicy, SidecarProcessSnapshotEntry, SidecarProjectedAgent, SidecarProjectedModuleDescriptor, SidecarRegisteredHostCallbackDefinition, SidecarRegisteredHostCallbackExample, SidecarRequestFrame, SidecarRequestHandler, SidecarRequestPayload, SidecarResponseFrame, SidecarResponsePayload, SidecarRulePermissions, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSignalState, SidecarSocketStateEntry, SidecarSoftwareDescriptor, SidecarSpawnOptions, SidecarSpawnOptions as NativeSidecarSpawnOptions, SidecarZombieTimerCount, } from "@rivet-dev/agentos-runtime-core/sidecar-client";
+export type { SidecarVmConfiguredResponse as SidecarConfigureVmResult, } from "@rivet-dev/agentos-runtime-core/sidecar-client";

package/dist/sidecar/native-process-client.js

@@ -1,6 +1,8 @@
 // Register the native sidecar spawn factory (side effect). After the
-// @secure-exec/core SidecarProcess refactor, native spawn is provided by a
+// @rivet-dev/agentos-runtime-core SidecarProcess refactor, native spawn is provided by a
 // separately-registered factory; importing native-client wires it up so
 // SidecarProcess.spawn works in this native runtime.
-import "@secure-exec/core/native-client";
-export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, SidecarProcess, SidecarProcess as NativeSidecarProcessClient, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "@secure-exec/core/sidecar-client";
+import "@rivet-dev/agentos-runtime-core/native-client";
+import { SidecarProcess } from "@rivet-dev/agentos-runtime-core/sidecar-client";
+export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "@rivet-dev/agentos-runtime-core/sidecar-client";
+export const NativeSidecarProcessClient = SidecarProcess;

package/dist/sidecar/permissions.d.ts

@@ -1,3 +1,3 @@
-import type { PermissionsPolicy } from "@secure-exec/core/vm-config";
+import type { PermissionsPolicy } from "@rivet-dev/agentos-runtime-core/vm-config";
 import type { Permissions } from "../runtime-compat.js";
 export declare function serializePermissionsForSidecar(permissions?: Permissions): PermissionsPolicy;

package/dist/sidecar/permissions.js

@@ -47,8 +47,8 @@ export function serializePermissionsForSidecar(permissions) {
         env: typeof permissions.env === "string" || !permissions.env
             ? permissions.env
             : serializePatternScope(permissions.env),
-        binding: typeof permissions.tool === "string" || !permissions.tool
-            ? permissions.tool
-            : serializePatternScope(permissions.tool),
+        binding: typeof permissions.binding === "string" || !permissions.binding
+            ? permissions.binding
+            : serializePatternScope(permissions.binding),
     };
 }

package/dist/sidecar/rpc-client.d.ts

@@ -1,13 +1,14 @@
-import type { RootFilesystemConfig as VmConfigRootFilesystemConfig, RootFilesystemEntry as VmConfigRootFilesystemEntry, RootFilesystemLowerDescriptor as VmConfigRootFilesystemLowerDescriptor } from "@secure-exec/core/vm-config";
+import type { RootFilesystemConfig as VmConfigRootFilesystemConfig, RootFilesystemEntry as VmConfigRootFilesystemEntry, RootFilesystemLowerDescriptor as VmConfigRootFilesystemLowerDescriptor } from "@rivet-dev/agentos-runtime-core/vm-config";
 import type { NativeMountConfig, PlainMountConfig, RootFilesystemConfig } from "../agent-os.js";
 import type { RootSnapshotExport } from "../layers.js";
 import type { ConnectTerminalOptions, KernelExecOptions, KernelExecResult, KernelSpawnOptions, ManagedProcess, OpenShellOptions, ProcessInfo, ShellHandle, VirtualFileSystem, VirtualStat } from "../runtime-compat.js";
-import type { AuthenticatedSession, CreatedVm, SidecarProcess, SidecarSignalHandlerRegistration } from "./native-process-client.js";
+import type { AuthenticatedSession, CreatedVm, SidecarPermissionsPolicy, SidecarProcess, SidecarSignalHandlerRegistration } from "./native-process-client.js";
 export declare function toSidecarSignalName(signal: number): string;
 export interface LocalCompatMount {
     path: string;
     fs: VirtualFileSystem;
     readOnly: boolean;
+    sidecarMount?: SidecarMountDescriptor;
 }
 interface KernelSocketSnapshot {
     processId: string;
@@ -30,9 +31,21 @@ interface NativeSidecarKernelProxyOptions {
     cwd: string;
     defaultExecCwd?: string;
     localMounts: LocalCompatMount[];
+    sidecarMounts: SidecarMountDescriptor[];
+    permissions?: SidecarPermissionsPolicy;
+    commandPermissions?: Parameters<SidecarProcess["configureVm"]>[2]["commandPermissions"];
+    loopbackExemptPorts?: number[];
     commandGuestPaths: ReadonlyMap<string, string>;
     onWasmCommandResolved?: (command: string) => void;
     onDispose?: () => Promise<void>;
+    /**
+     * Whether this proxy owns the underlying sidecar process. When VMs share one
+     * sidecar process (the default for VMs leased from an `AgentOsSidecar`
+     * handle), each proxy tears down only its own VM on `dispose()`; the shared
+     * process is disposed when the sidecar handle is disposed. Defaults to true
+     * for the legacy one-process-per-VM path.
+     */
+    ownsClient?: boolean;
 }
 export declare class NativeSidecarKernelProxy {
     readonly env: Record<string, string>;
@@ -44,7 +57,12 @@ export declare class NativeSidecarKernelProxy {
     private readonly client;
     private readonly session;
     private readonly vm;
+    private readonly ownsClient;
     private readonly localMounts;
+    private readonly baseSidecarMounts;
+    private readonly permissions;
+    private readonly commandPermissions;
+    private readonly loopbackExemptPorts;
     private readonly commandDrivers;
     private readonly onWasmCommandResolved;
     private readonly onDispose;
@@ -62,6 +80,7 @@ export declare class NativeSidecarKernelProxy {
     private zombieTimerCountRefresh;
     private disposed;
     private pumpError;
+    private mountReconfigurePromise;
     private nextSyntheticPid;
     private readonly eventPumpAbortController;
     private readonly eventPump;
@@ -70,6 +89,21 @@ export declare class NativeSidecarKernelProxy {
     get zombieTimerCount(): number;
     registerCommandGuestPaths(commandGuestPaths: ReadonlyMap<string, string>): void;
     dispose(): Promise<void>;
+    /** Test-only snapshot of the per-VM tracking collection sizes. */
+    __trackingSizesForTest(): {
+        trackedProcesses: number;
+        trackedProcessesById: number;
+        signalStates: number;
+        signalRefreshes: number;
+        localMounts: number;
+    };
+    /** Test-only handle to a tracked entry so its listener Sets can be inspected. */
+    __trackedEntryForTest(pid: number): {
+        onStdout: ReadonlySet<unknown>;
+        onStderr: ReadonlySet<unknown>;
+    } | undefined;
+    /** Test-only join point for in-flight signal-state refreshes. */
+    __awaitSignalRefreshesForTest(): Promise<void>;
     exec(command: string, options?: KernelExecOptions): Promise<KernelExecResult>;
     execArgv(command: string, args?: readonly string[], options?: KernelExecOptions): Promise<KernelExecResult>;
     spawn(command: string, args: string[], options?: KernelSpawnOptions): ManagedProcess;
@@ -81,13 +115,33 @@ export declare class NativeSidecarKernelProxy {
     exists(path: string): Promise<boolean>;
     stat(path: string): Promise<VirtualStat>;
     readdir(path: string): Promise<string[]>;
+    readdirRecursive(path: string, options?: {
+        maxDepth?: number;
+    }): Promise<Array<{
+        name: string;
+        path: string;
+        isDirectory: boolean;
+        isSymbolicLink: boolean;
+        size: number;
+    }>>;
     removeFile(path: string): Promise<void>;
     removeDir(path: string): Promise<void>;
+    removePath(path: string, options?: {
+        recursive?: boolean;
+    }): Promise<void>;
+    copyPath(fromPath: string, toPath: string, options?: {
+        recursive?: boolean;
+    }): Promise<void>;
     rename(oldPath: string, newPath: string): Promise<void>;
+    movePath(oldPath: string, newPath: string): Promise<void>;
     mountFs(path: string, driver: VirtualFileSystem, options?: {
         readOnly?: boolean;
+        sidecarMount?: SidecarMountDescriptor;
     }): void;
     unmountFs(path: string): void;
+    private desiredSidecarMounts;
+    private reconfigureSidecarMounts;
+    private waitForMountReconfigure;
     snapshotProcesses(): ProcessInfo[];
     findListener(request: {
         host?: string;
@@ -107,6 +161,7 @@ export declare class NativeSidecarKernelProxy {
     private startTrackedProcess;
     private runEventPump;
     private finishProcess;
+    private releaseProcessTrackingAfterDrain;
     private waitForTrackedProcess;
     private signalProcess;
     private flushPendingStdin;
@@ -114,6 +169,9 @@ export declare class NativeSidecarKernelProxy {
     private handleBackgroundProcessError;
     private recordCompletedProcessError;
     private emitBackgroundProcessError;
+    private readdirRecursiveLocal;
+    private removePathLocal;
+    private copyPathLocal;
     private createFilesystemView;
     private buildProcessSnapshot;
     private dispatchRead;
@@ -125,8 +183,8 @@ export declare class NativeSidecarKernelProxy {
     private assertLocalWritable;
     private updateTrackedProcessSnapshot;
 }
-export type { AuthenticatedSession, CreatedVm, GuestFilesystemStat, SidecarSpawnOptions, RootFilesystemEntry, SidecarEventSelector, SidecarPermissionsPolicy, SidecarRegisteredHostCallbackDefinition, SidecarRequestFrame, SidecarResponsePayload, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSocketStateEntry, } from "./native-process-client.js";
-export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, SidecarProcess, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "./native-process-client.js";
+export type { AuthenticatedSession, CreatedVm, GuestFilesystemStat, RootFilesystemEntry, SidecarConfigureVmResult, SidecarEventSelector, SidecarLinkPackageResult, SidecarPermissionsPolicy, SidecarProjectedAgent, SidecarRegisteredHostCallbackDefinition, SidecarRequestFrame, SidecarResponsePayload, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSocketStateEntry, SidecarSpawnOptions, } from "./native-process-client.js";
+export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, NativeSidecarProcessClient, SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "./native-process-client.js";
 export type AgentOsSidecarPlacement = {
     kind: "shared";
     pool?: string;