@rivet-dev/agentos-core 0.0.0-integrate-dylib-into-main.815fcda → 0.0.0-main.29b0797

package/dist/sidecar/native-process-client.d.ts

@@ -1,2 +1,6 @@
-export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, NativeSidecarProcessClient as SidecarProcess, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "@secure-exec/core/sidecar-client";
-export type { AuthenticatedSession, CreatedVm, ExtEnvelope, GuestFilesystemStat, NativeSidecarSpawnOptions as SidecarSpawnOptions, RootFilesystemEntry, RootFilesystemLowerDescriptor, SidecarEventSelector, SidecarFsPermissionRule, SidecarMountDescriptor, SidecarMountPluginDescriptor, SidecarPatternPermissionRule, SidecarPermissionMode, SidecarPermissionScope, SidecarPermissionsPolicy, SidecarProcessSnapshotEntry, SidecarProjectedModuleDescriptor, SidecarRegisteredHostCallbackDefinition, SidecarRegisteredHostCallbackExample, SidecarRequestFrame, SidecarRequestHandler, SidecarRequestPayload, SidecarResponseFrame, SidecarResponsePayload, SidecarRulePermissions, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSignalState, SidecarSocketStateEntry, SidecarSoftwareDescriptor, SidecarZombieTimerCount, } from "@secure-exec/core/sidecar-client";
+import "@rivet-dev/agentos-runtime-core/native-client";
+import { SidecarProcess } from "@rivet-dev/agentos-runtime-core/sidecar-client";
+export { SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "@rivet-dev/agentos-runtime-core/sidecar-client";
+export declare const NativeSidecarProcessClient: typeof SidecarProcess;
+export type { AuthenticatedSession, CreatedVm, ExtEnvelope, GuestFilesystemStat, RootFilesystemEntry, RootFilesystemLowerDescriptor, SidecarEventSelector, SidecarFsPermissionRule, SidecarLinkPackageResult, SidecarMountDescriptor, SidecarMountPluginDescriptor, SidecarPatternPermissionRule, SidecarPermissionMode, SidecarPermissionScope, SidecarPermissionsPolicy, SidecarProcessSnapshotEntry, SidecarProjectedAgent, SidecarProjectedModuleDescriptor, SidecarRegisteredHostCallbackDefinition, SidecarRegisteredHostCallbackExample, SidecarRequestFrame, SidecarRequestHandler, SidecarRequestPayload, SidecarResponseFrame, SidecarResponsePayload, SidecarRulePermissions, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSignalState, SidecarSocketStateEntry, SidecarSoftwareDescriptor, SidecarSpawnOptions, SidecarSpawnOptions as NativeSidecarSpawnOptions, SidecarZombieTimerCount, } from "@rivet-dev/agentos-runtime-core/sidecar-client";
+export type { SidecarVmConfiguredResponse as SidecarConfigureVmResult, } from "@rivet-dev/agentos-runtime-core/sidecar-client";

package/dist/sidecar/native-process-client.js

@@ -1 +1,8 @@
-export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, NativeSidecarProcessClient as SidecarProcess, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "@secure-exec/core/sidecar-client";
+// Register the native sidecar spawn factory (side effect). After the
+// @rivet-dev/agentos-runtime-core SidecarProcess refactor, native spawn is provided by a
+// separately-registered factory; importing native-client wires it up so
+// SidecarProcess.spawn works in this native runtime.
+import "@rivet-dev/agentos-runtime-core/native-client";
+import { SidecarProcess } from "@rivet-dev/agentos-runtime-core/sidecar-client";
+export { SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "@rivet-dev/agentos-runtime-core/sidecar-client";
+export const NativeSidecarProcessClient = SidecarProcess;

package/dist/sidecar/permissions.d.ts

@@ -1,3 +1,3 @@
-import type { PermissionsPolicy } from "@secure-exec/core/vm-config";
+import type { PermissionsPolicy } from "@rivet-dev/agentos-runtime-core/vm-config";
 import type { Permissions } from "../runtime-compat.js";
 export declare function serializePermissionsForSidecar(permissions?: Permissions): PermissionsPolicy;

package/dist/sidecar/permissions.js

@@ -28,7 +28,7 @@ export function serializePermissionsForSidecar(permissions) {
             childProcess: "deny",
             process: "deny",
             env: "deny",
-            tool: "deny",
+            binding: "deny",
         };
     }
     return {
@@ -47,8 +47,8 @@ export function serializePermissionsForSidecar(permissions) {
         env: typeof permissions.env === "string" || !permissions.env
             ? permissions.env
             : serializePatternScope(permissions.env),
-        tool: typeof permissions.tool === "string" || !permissions.tool
-            ? permissions.tool
-            : serializePatternScope(permissions.tool),
+        binding: typeof permissions.binding === "string" || !permissions.binding
+            ? permissions.binding
+            : serializePatternScope(permissions.binding),
     };
 }

package/dist/sidecar/rpc-client.d.ts

@@ -1,13 +1,14 @@
-import type { RootFilesystemConfig as VmConfigRootFilesystemConfig, RootFilesystemEntry as VmConfigRootFilesystemEntry, RootFilesystemLowerDescriptor as VmConfigRootFilesystemLowerDescriptor } from "@secure-exec/core/vm-config";
+import type { RootFilesystemConfig as VmConfigRootFilesystemConfig, RootFilesystemEntry as VmConfigRootFilesystemEntry, RootFilesystemLowerDescriptor as VmConfigRootFilesystemLowerDescriptor } from "@rivet-dev/agentos-runtime-core/vm-config";
 import type { NativeMountConfig, PlainMountConfig, RootFilesystemConfig } from "../agent-os.js";
 import type { RootSnapshotExport } from "../layers.js";
 import type { ConnectTerminalOptions, KernelExecOptions, KernelExecResult, KernelSpawnOptions, ManagedProcess, OpenShellOptions, ProcessInfo, ShellHandle, VirtualFileSystem, VirtualStat } from "../runtime-compat.js";
-import type { AuthenticatedSession, CreatedVm, SidecarProcess, SidecarSignalHandlerRegistration } from "./native-process-client.js";
+import type { AuthenticatedSession, CreatedVm, SidecarPermissionsPolicy, SidecarProcess, SidecarSignalHandlerRegistration } from "./native-process-client.js";
 export declare function toSidecarSignalName(signal: number): string;
 export interface LocalCompatMount {
     path: string;
     fs: VirtualFileSystem;
     readOnly: boolean;
+    sidecarMount?: SidecarMountDescriptor;
 }
 interface KernelSocketSnapshot {
     processId: string;
@@ -30,9 +31,31 @@ interface NativeSidecarKernelProxyOptions {
     cwd: string;
     defaultExecCwd?: string;
     localMounts: LocalCompatMount[];
+    sidecarMounts: SidecarMountDescriptor[];
+    permissions?: SidecarPermissionsPolicy;
+    commandPermissions?: Parameters<SidecarProcess["configureVm"]>[2]["commandPermissions"];
+    loopbackExemptPorts?: number[];
+    /**
+     * The boot `configureVm` payload pieces beyond mounts/permissions. Rust
+     * `configure_vm` rebuilds the whole VM configuration from each payload, so
+     * every runtime mount reconfigure must resend these or a post-boot
+     * `mountFs()` silently drops the `/opt/agentos` package projections and
+     * binding shim commands applied at boot.
+     */
+    packages?: Parameters<SidecarProcess["configureVm"]>[2]["packages"];
+    packagesMountAt?: string;
+    bindingShimCommands?: string[];
     commandGuestPaths: ReadonlyMap<string, string>;
     onWasmCommandResolved?: (command: string) => void;
     onDispose?: () => Promise<void>;
+    /**
+     * Whether this proxy owns the underlying sidecar process. When VMs share one
+     * sidecar process (the default for VMs leased from an `AgentOsSidecar`
+     * handle), each proxy tears down only its own VM on `dispose()`; the shared
+     * process is disposed when the sidecar handle is disposed. Defaults to true
+     * for the legacy one-process-per-VM path.
+     */
+    ownsClient?: boolean;
 }
 export declare class NativeSidecarKernelProxy {
     readonly env: Record<string, string>;
@@ -44,7 +67,16 @@ export declare class NativeSidecarKernelProxy {
     private readonly client;
     private readonly session;
     private readonly vm;
+    private readonly ownsClient;
     private readonly localMounts;
+    private readonly baseSidecarMounts;
+    private readonly dynamicSidecarMounts;
+    private readonly permissions;
+    private readonly commandPermissions;
+    private readonly loopbackExemptPorts;
+    private packages;
+    private readonly packagesMountAt;
+    private readonly bindingShimCommands;
     private readonly commandDrivers;
     private readonly onWasmCommandResolved;
     private readonly onDispose;
@@ -62,6 +94,7 @@ export declare class NativeSidecarKernelProxy {
     private zombieTimerCountRefresh;
     private disposed;
     private pumpError;
+    private mountReconfigurePromise;
     private nextSyntheticPid;
     private readonly eventPumpAbortController;
     private readonly eventPump;
@@ -69,7 +102,31 @@ export declare class NativeSidecarKernelProxy {
     createRootView(): VirtualFileSystem;
     get zombieTimerCount(): number;
     registerCommandGuestPaths(commandGuestPaths: ReadonlyMap<string, string>): void;
+    /**
+     * Record a runtime-linked package (`linkSoftware`) so mount reconfigures
+     * resend it. Rust `configure_vm` rebuilds the whole VM configuration from
+     * each payload, so a linked package omitted here would be silently
+     * unprojected from `/opt/agentos` by the next `mountFs`/`unmountFs`.
+     */
+    registerLinkedPackage(descriptor: {
+        path: string;
+    }): void;
     dispose(): Promise<void>;
+    /** Test-only snapshot of the per-VM tracking collection sizes. */
+    __trackingSizesForTest(): {
+        trackedProcesses: number;
+        trackedProcessesById: number;
+        signalStates: number;
+        signalRefreshes: number;
+        localMounts: number;
+    };
+    /** Test-only handle to a tracked entry so its listener Sets can be inspected. */
+    __trackedEntryForTest(pid: number): {
+        onStdout: ReadonlySet<unknown>;
+        onStderr: ReadonlySet<unknown>;
+    } | undefined;
+    /** Test-only join point for in-flight signal-state refreshes. */
+    __awaitSignalRefreshesForTest(): Promise<void>;
     exec(command: string, options?: KernelExecOptions): Promise<KernelExecResult>;
     execArgv(command: string, args?: readonly string[], options?: KernelExecOptions): Promise<KernelExecResult>;
     spawn(command: string, args: string[], options?: KernelSpawnOptions): ManagedProcess;
@@ -81,13 +138,40 @@ export declare class NativeSidecarKernelProxy {
     exists(path: string): Promise<boolean>;
     stat(path: string): Promise<VirtualStat>;
     readdir(path: string): Promise<string[]>;
+    readdirRecursive(path: string, options?: {
+        maxDepth?: number;
+    }): Promise<Array<{
+        name: string;
+        path: string;
+        isDirectory: boolean;
+        isSymbolicLink: boolean;
+        size: number;
+    }>>;
     removeFile(path: string): Promise<void>;
     removeDir(path: string): Promise<void>;
+    removePath(path: string, options?: {
+        recursive?: boolean;
+    }): Promise<void>;
+    copyPath(fromPath: string, toPath: string, options?: {
+        recursive?: boolean;
+    }): Promise<void>;
     rename(oldPath: string, newPath: string): Promise<void>;
+    movePath(oldPath: string, newPath: string): Promise<void>;
     mountFs(path: string, driver: VirtualFileSystem, options?: {
         readOnly?: boolean;
-    }): void;
-    unmountFs(path: string): void;
+        sidecarMount?: SidecarMountDescriptor;
+    }): Promise<void>;
+    unmountFs(path: string): Promise<void>;
+    mountDescriptor(mount: SidecarMountDescriptor): Promise<void>;
+    unmountDescriptor(path: string): Promise<void>;
+    listMounts(): Promise<Array<{
+        path: string;
+        kind: string;
+        readOnly: boolean;
+    }>>;
+    private desiredSidecarMounts;
+    private reconfigureSidecarMounts;
+    private waitForMountReconfigure;
     snapshotProcesses(): ProcessInfo[];
     findListener(request: {
         host?: string;
@@ -107,6 +191,7 @@ export declare class NativeSidecarKernelProxy {
     private startTrackedProcess;
     private runEventPump;
     private finishProcess;
+    private releaseProcessTrackingAfterDrain;
     private waitForTrackedProcess;
     private signalProcess;
     private flushPendingStdin;
@@ -114,6 +199,9 @@ export declare class NativeSidecarKernelProxy {
     private handleBackgroundProcessError;
     private recordCompletedProcessError;
     private emitBackgroundProcessError;
+    private readdirRecursiveLocal;
+    private removePathLocal;
+    private copyPathLocal;
     private createFilesystemView;
     private buildProcessSnapshot;
     private dispatchRead;
@@ -125,8 +213,8 @@ export declare class NativeSidecarKernelProxy {
     private assertLocalWritable;
     private updateTrackedProcessSnapshot;
 }
-export type { AuthenticatedSession, CreatedVm, GuestFilesystemStat, SidecarSpawnOptions, RootFilesystemEntry, SidecarEventSelector, SidecarPermissionsPolicy, SidecarRegisteredHostCallbackDefinition, SidecarRequestFrame, SidecarResponsePayload, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSocketStateEntry, } from "./native-process-client.js";
-export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, SidecarProcess, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "./native-process-client.js";
+export type { AuthenticatedSession, CreatedVm, GuestFilesystemStat, RootFilesystemEntry, SidecarConfigureVmResult, SidecarEventSelector, SidecarLinkPackageResult, SidecarPermissionsPolicy, SidecarProjectedAgent, SidecarRegisteredHostCallbackDefinition, SidecarRequestFrame, SidecarResponsePayload, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSocketStateEntry, SidecarSpawnOptions, } from "./native-process-client.js";
+export { NativeSidecarProcessClient, SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "./native-process-client.js";
 export type AgentOsSidecarPlacement = {
     kind: "shared";
     pool?: string;
@@ -182,7 +270,7 @@ export interface AgentOsSidecarTransport {
     dispose(): Promise<void>;
 }
 export interface AgentOsSidecarClientOptions {
-    createSessionTransport(bootstrap: AgentOsSidecarSessionBootstrap): Promise<AgentOsSidecarTransport>;
+    createOwnershipTransport(bootstrap: AgentOsSidecarSessionBootstrap): Promise<AgentOsSidecarTransport>;
     createId?: () => string;
     now?: () => number;
 }
@@ -204,13 +292,14 @@ export declare class AgentOsSidecarSessionHandle {
     dispose(): Promise<void>;
 }
 export declare class AgentOsSidecarClient {
-    private readonly createSessionTransport;
+    private readonly createOwnershipTransport;
     private readonly createId;
     private readonly now;
     private readonly sessions;
     private disposed;
     constructor(options: AgentOsSidecarClientOptions);
-    createSession(options?: AgentOsSidecarSessionOptions): Promise<AgentOsSidecarSessionHandle>;
+    /** Open a physical sidecar ownership scope, not a durable ACP session. */
+    createOwnershipSession(options?: AgentOsSidecarSessionOptions): Promise<AgentOsSidecarSessionHandle>;
     listSessions(): AgentOsSidecarSessionLifecycle[];
     requireSessionLifecycle(sessionId: string): AgentOsSidecarSessionLifecycle;
     listVms(sessionId: string): AgentOsSidecarVmLifecycle[];
@@ -235,6 +324,8 @@ export interface SidecarMountPluginDescriptor {
 }
 export interface SidecarMountDescriptor {
     guestPath: string;
+    guestSource?: string;
+    guestFstype?: string;
     readOnly: boolean;
     plugin: SidecarMountPluginDescriptor;
 }