@rivet-dev/agentos-core 0.0.0-integrate-dylib-into-main.815fcda → 0.0.0-main.29b0797

package/dist/generated/RootFilesystemMode.d.ts

@@ -0,0 +1 @@
+export type RootFilesystemMode = "ephemeral" | "read-only";

package/dist/generated/RootFilesystemMode.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/VmDnsConfig.d.ts

@@ -0,0 +1,6 @@
+export type VmDnsConfig = {
+    nameServers: Array<string>;
+    overrides: {
+        [key in string]?: Array<string>;
+    };
+};

package/dist/generated/VmDnsConfig.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/VmGroupConfig.d.ts

@@ -0,0 +1,5 @@
+export type VmGroupConfig = {
+    gid: number;
+    name: string;
+    members: Array<string>;
+};

package/dist/generated/VmGroupConfig.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/VmLimitsConfig.d.ts

@@ -0,0 +1,20 @@
+import type { AcpLimitsConfig } from "./AcpLimitsConfig.js";
+import type { BindingLimitsConfig } from "./BindingLimitsConfig.js";
+import type { HttpLimitsConfig } from "./HttpLimitsConfig.js";
+import type { JsRuntimeLimitsConfig } from "./JsRuntimeLimitsConfig.js";
+import type { PluginLimitsConfig } from "./PluginLimitsConfig.js";
+import type { ProcessLimitsConfig } from "./ProcessLimitsConfig.js";
+import type { PythonLimitsConfig } from "./PythonLimitsConfig.js";
+import type { ResourceLimitsConfig } from "./ResourceLimitsConfig.js";
+import type { WasmLimitsConfig } from "./WasmLimitsConfig.js";
+export type VmLimitsConfig = {
+    resources?: ResourceLimitsConfig;
+    http?: HttpLimitsConfig;
+    bindings?: BindingLimitsConfig;
+    plugins?: PluginLimitsConfig;
+    acp?: AcpLimitsConfig;
+    jsRuntime?: JsRuntimeLimitsConfig;
+    python?: PythonLimitsConfig;
+    wasm?: WasmLimitsConfig;
+    process?: ProcessLimitsConfig;
+};

package/dist/generated/VmLimitsConfig.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/VmListenPolicyConfig.d.ts

@@ -0,0 +1,5 @@
+export type VmListenPolicyConfig = {
+    portMin?: number;
+    portMax?: number;
+    allowPrivileged?: boolean;
+};

package/dist/generated/VmListenPolicyConfig.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/VmUserAccountConfig.d.ts

@@ -0,0 +1,9 @@
+export type VmUserAccountConfig = {
+    uid: number;
+    gid: number;
+    username: string;
+    homedir: string;
+    shell: string;
+    gecos?: string;
+    supplementaryGids: Array<number>;
+};

package/dist/generated/VmUserAccountConfig.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/VmUserConfig.d.ts

@@ -0,0 +1,19 @@
+import type { VmGroupConfig } from "./VmGroupConfig.js";
+import type { VmUserAccountConfig } from "./VmUserAccountConfig.js";
+/**
+ * Initial Linux-style credentials and account record for processes in a VM.
+ */
+export type VmUserConfig = {
+    uid?: number;
+    gid?: number;
+    euid?: number;
+    egid?: number;
+    username?: string;
+    homedir?: string;
+    shell?: string;
+    gecos?: string;
+    groupName?: string;
+    supplementaryGids?: Array<number>;
+    accounts?: Array<VmUserAccountConfig>;
+    groups?: Array<VmGroupConfig>;
+};

package/dist/generated/VmUserConfig.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/WasmLimitsConfig.d.ts

@@ -0,0 +1,8 @@
+export type WasmLimitsConfig = {
+    maxModuleFileBytes?: number;
+    capturedOutputLimitBytes?: number;
+    syncReadLimitBytes?: number;
+    prewarmTimeoutMs?: number;
+    runnerHeapLimitMb?: number;
+    runnerCpuTimeLimitMs?: number;
+};

package/dist/generated/WasmLimitsConfig.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/host-dir-mount.d.ts

@@ -1,4 +1,4 @@
-import type { MountConfigJsonObject, NativeMountPluginDescriptor } from "@secure-exec/core/descriptors";
+import type { MountConfigJsonObject, NativeMountPluginDescriptor } from "@rivet-dev/agentos-runtime-core/descriptors";
 export interface HostDirBackendOptions {
     /** Absolute path to the host directory to project into the VM. */
     hostPath: string;

package/dist/index.d.ts

@@ -1,10 +1,11 @@
 export { AgentOs, AgentOsSidecar } from "./agent-os.js";
-export { AGENT_CONFIGS } from "./agents.js";
 export { CronManager, InvalidScheduleError, PastScheduleError, TimerScheduleDriver, } from "./cron/index.js";
 export { createHostDirBackend, nodeModulesMount } from "./host-dir-mount.js";
-export { hostTool, MAX_TOOL_DESCRIPTION_LENGTH, toolKit, validateToolkits, } from "./host-tools.js";
-export { createInMemoryLayerStore, createSnapshotExport, } from "./layers.js";
+export { binding, MAX_BINDING_DESCRIPTION_LENGTH, bindings, validateBindings, } from "./bindings.js";
+export { agentOsLimitsSchema, agentOsOptionFieldSchemas, agentOsOptionsSchema, bindingSchema, mountConfigSchema, nativeMountConfigSchema, parseAgentOsOptions, permissionsSchema, rootFilesystemConfigSchema, sharedSidecarConfigSchema, sidecarConfigSchema, bindingsSchema, } from "./options-schema.js";
+export { createSnapshotExport, } from "./layers.js";
 export { defineSoftware } from "./packages.js";
-export { isAcpTimeoutErrorData, isUnknownSessionErrorData, } from "./json-rpc.js";
-export { createInMemoryFileSystem, KernelError } from "./runtime-compat.js";
+export { isPackageDescriptor, OPT_AGENTOS_BIN, OPT_AGENTOS_ROOT, tryReadAgentosPackageManifest, } from "./agentos-package.js";
+export { KernelError } from "./runtime-compat.js";
+export type { ExecOptions, ExecResult, ManagedProcess, ProcessInfo, ShellHandle, VirtualDirEntry, VirtualStat, } from "./runtime.js";
 export type * from "./types.js";

package/dist/index.js

@@ -1,10 +1,10 @@
 // @rivet-dev/agentos
 export { AgentOs, AgentOsSidecar } from "./agent-os.js";
-export { AGENT_CONFIGS } from "./agents.js";
 export { CronManager, InvalidScheduleError, PastScheduleError, TimerScheduleDriver, } from "./cron/index.js";
 export { createHostDirBackend, nodeModulesMount } from "./host-dir-mount.js";
-export { hostTool, MAX_TOOL_DESCRIPTION_LENGTH, toolKit, validateToolkits, } from "./host-tools.js";
-export { createInMemoryLayerStore, createSnapshotExport, } from "./layers.js";
+export { binding, MAX_BINDING_DESCRIPTION_LENGTH, bindings, validateBindings, } from "./bindings.js";
+export { agentOsLimitsSchema, agentOsOptionFieldSchemas, agentOsOptionsSchema, bindingSchema, mountConfigSchema, nativeMountConfigSchema, parseAgentOsOptions, permissionsSchema, rootFilesystemConfigSchema, sharedSidecarConfigSchema, sidecarConfigSchema, bindingsSchema, } from "./options-schema.js";
+export { createSnapshotExport, } from "./layers.js";
 export { defineSoftware } from "./packages.js";
-export { isAcpTimeoutErrorData, isUnknownSessionErrorData, } from "./json-rpc.js";
-export { createInMemoryFileSystem, KernelError } from "./runtime-compat.js";
+export { isPackageDescriptor, OPT_AGENTOS_BIN, OPT_AGENTOS_ROOT, tryReadAgentosPackageManifest, } from "./agentos-package.js";
+export { KernelError } from "./runtime-compat.js";

package/dist/layers.d.ts

@@ -1,5 +1,5 @@
-import { type BaseFilesystemSnapshot } from "./base-filesystem.js";
-import { type FilesystemEntry } from "./filesystem-snapshot.js";
+import type { BaseFilesystemSnapshot } from "./base-filesystem.js";
+import type { FilesystemEntry } from "./filesystem-snapshot.js";
 import type { VirtualFileSystem } from "./runtime-compat.js";
 export type OverlayFilesystemMode = "ephemeral" | "read-only";
 export interface FilesystemSnapshotExport {
@@ -31,6 +31,10 @@ export type SnapshotImportSource = {
     kind: "snapshot-export";
     source: FilesystemSnapshotExport | unknown;
 };
+/**
+ * Caller-provided durable layer store. AgentOS forwards these explicit handles
+ * but does not provide a second client-side filesystem or overlay engine.
+ */
 export interface LayerStore {
     readonly storeId: string;
     createWritableLayer(): Promise<WritableLayerHandle>;
@@ -45,7 +49,6 @@ export interface LayerStore {
         mode: "read-only";
         lowers: SnapshotLayerHandle[];
     }): VirtualFileSystem;
+    dispose(): void;
 }
 export declare function createSnapshotExport(entries: FilesystemEntry[]): RootSnapshotExport;
-export declare function createInMemoryLayerStore(): LayerStore;
-export declare function createDefaultRootLowerInput(): SnapshotImportSource;

package/dist/layers.js

@@ -1,53 +1,3 @@
-import { randomUUID } from "node:crypto";
-import { getBaseFilesystemSnapshot, } from "./base-filesystem.js";
-import { createFilesystemFromEntries, snapshotVirtualFilesystem, } from "./filesystem-snapshot.js";
-import { createOverlayBackend } from "./overlay-filesystem.js";
-function cloneSnapshotHandle(storeId, layerId) {
-    return { kind: "snapshot", storeId, layerId };
-}
-function cloneWritableHandle(storeId, layerId, leaseId) {
-    return { kind: "writable", storeId, layerId, leaseId };
-}
-function isBaseFilesystemSnapshot(value) {
-    if (!value || typeof value !== "object") {
-        return false;
-    }
-    const filesystem = value.filesystem;
-    if (!filesystem || typeof filesystem !== "object") {
-        return false;
-    }
-    return Array.isArray(filesystem.entries);
-}
-function isFilesystemSnapshotExport(value) {
-    if (!value || typeof value !== "object") {
-        return false;
-    }
-    if (value.format !== "agentos-filesystem-snapshot-v1") {
-        return false;
-    }
-    const filesystem = value.filesystem;
-    if (!filesystem || typeof filesystem !== "object") {
-        return false;
-    }
-    return Array.isArray(filesystem.entries);
-}
-function normalizeSnapshotExport(source) {
-    if (source.kind === "base-filesystem-artifact") {
-        if (!isBaseFilesystemSnapshot(source.source)) {
-            throw new Error("Invalid base filesystem artifact");
-        }
-        return {
-            format: "agentos-filesystem-snapshot-v1",
-            filesystem: {
-                entries: source.source.filesystem.entries,
-            },
-        };
-    }
-    if (!isFilesystemSnapshotExport(source.source)) {
-        throw new Error("Invalid snapshot export");
-    }
-    return source.source;
-}
 export function createSnapshotExport(entries) {
     return {
         kind: "snapshot-export",
@@ -57,129 +7,3 @@ export function createSnapshotExport(entries) {
         },
     };
 }
-export function createInMemoryLayerStore() {
-    const storeId = `memory-layer-store:${randomUUID()}`;
-    const layers = new Map();
-    function getLayerState(handle) {
-        if (handle.storeId !== storeId) {
-            throw new Error(`Layer ${handle.layerId} belongs to store ${handle.storeId}, not ${storeId}`);
-        }
-        const state = layers.get(handle.layerId);
-        if (!state) {
-            throw new Error(`Unknown layer: ${handle.layerId}`);
-        }
-        if (state.kind !== handle.kind) {
-            throw new Error(`Layer kind mismatch for ${handle.layerId}`);
-        }
-        return state;
-    }
-    return {
-        storeId,
-        async createWritableLayer() {
-            const layerId = randomUUID();
-            const leaseId = randomUUID();
-            layers.set(layerId, {
-                kind: "writable",
-                fs: await createFilesystemFromEntries([
-                    {
-                        path: "/",
-                        type: "directory",
-                        mode: "0755",
-                        uid: 0,
-                        gid: 0,
-                    },
-                ]),
-                leaseId,
-                valid: true,
-                activeOverlay: null,
-            });
-            return cloneWritableHandle(storeId, layerId, leaseId);
-        },
-        async importSnapshot(source) {
-            const snapshot = normalizeSnapshotExport(source);
-            const layerId = randomUUID();
-            layers.set(layerId, {
-                kind: "snapshot",
-                snapshot,
-                fs: await createFilesystemFromEntries(snapshot.filesystem.entries),
-            });
-            return cloneSnapshotHandle(storeId, layerId);
-        },
-        async openSnapshotLayer(layerId) {
-            const state = layers.get(layerId);
-            if (!state || state.kind !== "snapshot") {
-                throw new Error(`Unknown snapshot layer: ${layerId}`);
-            }
-            return cloneSnapshotHandle(storeId, layerId);
-        },
-        async sealLayer(layer) {
-            const state = getLayerState(layer);
-            if (state.kind !== "writable") {
-                throw new Error(`Layer ${layer.layerId} is not writable`);
-            }
-            if (!state.valid || state.leaseId !== layer.leaseId) {
-                throw new Error(`Writable layer ${layer.layerId} is no longer valid`);
-            }
-            const entries = await snapshotVirtualFilesystem(state.activeOverlay ?? state.fs);
-            const snapshot = createSnapshotExport(entries).source;
-            const layerId = randomUUID();
-            layers.set(layerId, {
-                kind: "snapshot",
-                snapshot,
-                fs: await createFilesystemFromEntries(snapshot.filesystem.entries),
-            });
-            state.valid = false;
-            state.activeOverlay = null;
-            return cloneSnapshotHandle(storeId, layerId);
-        },
-        createOverlayFilesystem(options) {
-            const lowers = options.lowers.map((lower) => {
-                const state = getLayerState(lower);
-                if (state.kind !== "snapshot") {
-                    throw new Error(`Layer ${lower.layerId} is not a snapshot`);
-                }
-                return lower;
-            });
-            if (options.mode === "read-only") {
-                return createOverlayBackend({
-                    mode: "read-only",
-                    lowers: lowers.map((lower) => {
-                        const state = getLayerState(lower);
-                        if (state.kind !== "snapshot") {
-                            throw new Error(`Layer ${lower.layerId} is not a snapshot`);
-                        }
-                        return state.fs;
-                    }),
-                });
-            }
-            const upperState = getLayerState(options.upper);
-            if (upperState.kind !== "writable") {
-                throw new Error(`Layer ${options.upper.layerId} is not writable`);
-            }
-            if (!upperState.valid || upperState.leaseId !== options.upper.leaseId) {
-                throw new Error(`Writable layer ${options.upper.layerId} is no longer valid`);
-            }
-            if (upperState.activeOverlay) {
-                throw new Error(`Writable layer ${options.upper.layerId} is already attached to an overlay`);
-            }
-            const overlay = createOverlayBackend({
-                upper: upperState.fs,
-                lowers: lowers.map((lower) => {
-                    const state = getLayerState(lower);
-                    if (state.kind !== "snapshot") {
-                        throw new Error(`Layer ${lower.layerId} is not a snapshot`);
-                    }
-                    return state.fs;
-                }),
-            });
-            upperState.activeOverlay = overlay;
-            return overlay;
-        },
-    };
-}
-export function createDefaultRootLowerInput() {
-    return {
-        kind: "base-filesystem-artifact",
-        source: getBaseFilesystemSnapshot(),
-    };
-}