@rivet-dev/agentos-core 0.0.0-integrate-dylib-into-main.815fcda → 0.0.0-main.29b0797

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (125) hide show
  1. package/README.md +43 -43
  2. package/dist/agent-os.d.ts +313 -226
  3. package/dist/agent-os.js +1418 -1545
  4. package/dist/agentos-package.d.ts +31 -0
  5. package/dist/agentos-package.js +91 -0
  6. package/dist/base-filesystem.d.ts +2 -15
  7. package/dist/base-filesystem.js +23 -171
  8. package/dist/{host-tools-zod.d.ts → bindings-zod.d.ts} +1 -1
  9. package/dist/{host-tools-zod.js → bindings-zod.js} +52 -25
  10. package/dist/bindings.d.ts +43 -0
  11. package/dist/bindings.js +34 -0
  12. package/dist/cron/cron-manager.js +43 -10
  13. package/dist/cron/index.d.ts +1 -1
  14. package/dist/cron/types.d.ts +26 -10
  15. package/dist/default-software.d.ts +8 -0
  16. package/dist/default-software.js +10 -0
  17. package/dist/filesystem-snapshot.d.ts +1 -2
  18. package/dist/filesystem-snapshot.js +0 -43
  19. package/dist/generated/AcpLimitsConfig.d.ts +20 -0
  20. package/dist/generated/AcpLimitsConfig.js +2 -0
  21. package/dist/generated/BindingLimitsConfig.d.ts +10 -0
  22. package/dist/generated/BindingLimitsConfig.js +2 -0
  23. package/dist/generated/CreateVmConfig.d.ts +28 -0
  24. package/dist/generated/FsPermissionRule.d.ts +6 -0
  25. package/dist/generated/FsPermissionRule.js +1 -0
  26. package/dist/generated/FsPermissionRuleSet.d.ts +6 -0
  27. package/dist/generated/FsPermissionRuleSet.js +1 -0
  28. package/dist/generated/FsPermissionScope.d.ts +3 -0
  29. package/dist/generated/FsPermissionScope.js +1 -0
  30. package/dist/generated/HttpLimitsConfig.d.ts +3 -0
  31. package/dist/generated/HttpLimitsConfig.js +2 -0
  32. package/dist/generated/JsModuleResolution.d.ts +1 -0
  33. package/dist/generated/JsModuleResolution.js +2 -0
  34. package/dist/generated/JsRuntimeConfig.d.ts +31 -0
  35. package/dist/generated/JsRuntimeConfig.js +1 -0
  36. package/dist/generated/JsRuntimeLimitsConfig.d.ts +11 -0
  37. package/dist/generated/JsRuntimeLimitsConfig.js +2 -0
  38. package/dist/generated/JsRuntimePlatform.d.ts +1 -0
  39. package/dist/generated/JsRuntimePlatform.js +2 -0
  40. package/dist/generated/MountPluginDescriptor.d.ts +4 -0
  41. package/dist/generated/MountPluginDescriptor.js +2 -0
  42. package/dist/generated/NativeRootFilesystemConfig.d.ts +5 -0
  43. package/dist/generated/NativeRootFilesystemConfig.js +1 -0
  44. package/dist/generated/PatternPermissionRule.d.ts +6 -0
  45. package/dist/generated/PatternPermissionRule.js +1 -0
  46. package/dist/generated/PatternPermissionRuleSet.d.ts +6 -0
  47. package/dist/generated/PatternPermissionRuleSet.js +1 -0
  48. package/dist/generated/PatternPermissionScope.d.ts +3 -0
  49. package/dist/generated/PatternPermissionScope.js +1 -0
  50. package/dist/generated/PermissionMode.d.ts +1 -0
  51. package/dist/generated/PermissionMode.js +2 -0
  52. package/dist/generated/PermissionsPolicy.d.ts +10 -0
  53. package/dist/generated/PermissionsPolicy.js +1 -0
  54. package/dist/generated/PluginLimitsConfig.d.ts +4 -0
  55. package/dist/generated/PluginLimitsConfig.js +2 -0
  56. package/dist/generated/ProcessLimitsConfig.d.ts +7 -0
  57. package/dist/generated/ProcessLimitsConfig.js +2 -0
  58. package/dist/generated/PythonLimitsConfig.d.ts +6 -0
  59. package/dist/generated/PythonLimitsConfig.js +2 -0
  60. package/dist/generated/ResourceLimitsConfig.d.ts +24 -0
  61. package/dist/generated/ResourceLimitsConfig.js +2 -0
  62. package/dist/generated/RootFilesystemConfig.d.ts +9 -0
  63. package/dist/generated/RootFilesystemConfig.js +1 -0
  64. package/dist/generated/RootFilesystemEntry.d.ts +13 -0
  65. package/dist/generated/RootFilesystemEntry.js +1 -0
  66. package/dist/generated/RootFilesystemEntryEncoding.d.ts +1 -0
  67. package/dist/generated/RootFilesystemEntryEncoding.js +2 -0
  68. package/dist/generated/RootFilesystemEntryKind.d.ts +1 -0
  69. package/dist/generated/RootFilesystemEntryKind.js +2 -0
  70. package/dist/generated/RootFilesystemLowerDescriptor.d.ts +7 -0
  71. package/dist/generated/RootFilesystemLowerDescriptor.js +1 -0
  72. package/dist/generated/RootFilesystemMode.d.ts +1 -0
  73. package/dist/generated/RootFilesystemMode.js +2 -0
  74. package/dist/generated/VmDnsConfig.d.ts +6 -0
  75. package/dist/generated/VmDnsConfig.js +2 -0
  76. package/dist/generated/VmGroupConfig.d.ts +5 -0
  77. package/dist/generated/VmGroupConfig.js +2 -0
  78. package/dist/generated/VmLimitsConfig.d.ts +20 -0
  79. package/dist/generated/VmLimitsConfig.js +1 -0
  80. package/dist/generated/VmListenPolicyConfig.d.ts +5 -0
  81. package/dist/generated/VmListenPolicyConfig.js +2 -0
  82. package/dist/generated/VmUserAccountConfig.d.ts +9 -0
  83. package/dist/generated/VmUserAccountConfig.js +2 -0
  84. package/dist/generated/VmUserConfig.d.ts +19 -0
  85. package/dist/generated/VmUserConfig.js +1 -0
  86. package/dist/generated/WasmLimitsConfig.d.ts +8 -0
  87. package/dist/generated/WasmLimitsConfig.js +2 -0
  88. package/dist/host-dir-mount.d.ts +1 -1
  89. package/dist/index.d.ts +6 -5
  90. package/dist/index.js +5 -5
  91. package/dist/layers.d.ts +7 -4
  92. package/dist/layers.js +0 -176
  93. package/dist/options-schema.d.ts +556 -0
  94. package/dist/options-schema.js +386 -0
  95. package/dist/packages.d.ts +17 -116
  96. package/dist/packages.js +35 -322
  97. package/dist/runtime-compat.d.ts +33 -46
  98. package/dist/runtime-compat.js +197 -511
  99. package/dist/runtime.d.ts +42 -8
  100. package/dist/sandbox.d.ts +112 -0
  101. package/dist/sandbox.js +264 -0
  102. package/dist/session-api.d.ts +180 -0
  103. package/dist/session-api.js +1 -0
  104. package/dist/sidecar/agentos-protocol.d.ts +509 -20
  105. package/dist/sidecar/agentos-protocol.js +808 -81
  106. package/dist/sidecar/native-process-client.d.ts +6 -2
  107. package/dist/sidecar/native-process-client.js +8 -1
  108. package/dist/sidecar/permissions.d.ts +1 -1
  109. package/dist/sidecar/permissions.js +4 -4
  110. package/dist/sidecar/rpc-client.d.ts +100 -9
  111. package/dist/sidecar/rpc-client.js +445 -110
  112. package/dist/test/runtime.d.ts +2 -1
  113. package/dist/test/runtime.js +2 -1
  114. package/dist/test/terminal-harness.js +0 -3
  115. package/dist/types.d.ts +13 -7
  116. package/package.json +46 -35
  117. package/dist/agent-session-types.d.ts +0 -67
  118. package/dist/agents.d.ts +0 -63
  119. package/dist/agents.js +0 -42
  120. package/dist/host-tools.d.ts +0 -45
  121. package/dist/host-tools.js +0 -26
  122. package/dist/overlay-filesystem.d.ts +0 -19
  123. package/dist/overlay-filesystem.js +0 -645
  124. package/fixtures/AGENTOS_SYSTEM_PROMPT.md +0 -21
  125. /package/dist/{agent-session-types.js → generated/CreateVmConfig.js} +0 -0
@@ -0,0 +1,556 @@
1
+ import { z } from "zod/v4";
2
+ import type { AgentExitHandler, AgentOsOptions, AgentStderrHandler, LimitWarningHandler, NativeMountConfig } from "./agent-os.js";
3
+ import type { Binding, Bindings } from "./bindings.js";
4
+ export declare const permissionsSchema: z.ZodObject<{
5
+ fs: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
6
+ allow: "allow";
7
+ deny: "deny";
8
+ }>, z.ZodObject<{
9
+ default: z.ZodOptional<z.ZodEnum<{
10
+ allow: "allow";
11
+ deny: "deny";
12
+ }>>;
13
+ rules: z.ZodArray<z.ZodObject<{
14
+ mode: z.ZodEnum<{
15
+ allow: "allow";
16
+ deny: "deny";
17
+ }>;
18
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
19
+ paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
20
+ }, z.core.$strict>>;
21
+ }, z.core.$strict>]>>;
22
+ network: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
23
+ allow: "allow";
24
+ deny: "deny";
25
+ }>, z.ZodObject<{
26
+ default: z.ZodOptional<z.ZodEnum<{
27
+ allow: "allow";
28
+ deny: "deny";
29
+ }>>;
30
+ rules: z.ZodArray<z.ZodObject<{
31
+ mode: z.ZodEnum<{
32
+ allow: "allow";
33
+ deny: "deny";
34
+ }>;
35
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
36
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
37
+ }, z.core.$strict>>;
38
+ }, z.core.$strict>]>>;
39
+ childProcess: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
40
+ allow: "allow";
41
+ deny: "deny";
42
+ }>, z.ZodObject<{
43
+ default: z.ZodOptional<z.ZodEnum<{
44
+ allow: "allow";
45
+ deny: "deny";
46
+ }>>;
47
+ rules: z.ZodArray<z.ZodObject<{
48
+ mode: z.ZodEnum<{
49
+ allow: "allow";
50
+ deny: "deny";
51
+ }>;
52
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
53
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
54
+ }, z.core.$strict>>;
55
+ }, z.core.$strict>]>>;
56
+ process: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
57
+ allow: "allow";
58
+ deny: "deny";
59
+ }>, z.ZodObject<{
60
+ default: z.ZodOptional<z.ZodEnum<{
61
+ allow: "allow";
62
+ deny: "deny";
63
+ }>>;
64
+ rules: z.ZodArray<z.ZodObject<{
65
+ mode: z.ZodEnum<{
66
+ allow: "allow";
67
+ deny: "deny";
68
+ }>;
69
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
70
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
71
+ }, z.core.$strict>>;
72
+ }, z.core.$strict>]>>;
73
+ env: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
74
+ allow: "allow";
75
+ deny: "deny";
76
+ }>, z.ZodObject<{
77
+ default: z.ZodOptional<z.ZodEnum<{
78
+ allow: "allow";
79
+ deny: "deny";
80
+ }>>;
81
+ rules: z.ZodArray<z.ZodObject<{
82
+ mode: z.ZodEnum<{
83
+ allow: "allow";
84
+ deny: "deny";
85
+ }>;
86
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
87
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
88
+ }, z.core.$strict>>;
89
+ }, z.core.$strict>]>>;
90
+ binding: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
91
+ allow: "allow";
92
+ deny: "deny";
93
+ }>, z.ZodObject<{
94
+ default: z.ZodOptional<z.ZodEnum<{
95
+ allow: "allow";
96
+ deny: "deny";
97
+ }>>;
98
+ rules: z.ZodArray<z.ZodObject<{
99
+ mode: z.ZodEnum<{
100
+ allow: "allow";
101
+ deny: "deny";
102
+ }>;
103
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
104
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
105
+ }, z.core.$strict>>;
106
+ }, z.core.$strict>]>>;
107
+ }, z.core.$strict>;
108
+ export declare const agentOsLimitsSchema: z.ZodObject<{
109
+ resources: z.ZodOptional<z.ZodObject<{
110
+ cpuCount: z.ZodOptional<z.ZodNumber>;
111
+ maxProcesses: z.ZodOptional<z.ZodNumber>;
112
+ maxOpenFds: z.ZodOptional<z.ZodNumber>;
113
+ maxPipes: z.ZodOptional<z.ZodNumber>;
114
+ maxPtys: z.ZodOptional<z.ZodNumber>;
115
+ maxSockets: z.ZodOptional<z.ZodNumber>;
116
+ maxConnections: z.ZodOptional<z.ZodNumber>;
117
+ maxSocketBufferedBytes: z.ZodOptional<z.ZodNumber>;
118
+ maxSocketDatagramQueueLen: z.ZodOptional<z.ZodNumber>;
119
+ maxFilesystemBytes: z.ZodOptional<z.ZodNumber>;
120
+ maxInodeCount: z.ZodOptional<z.ZodNumber>;
121
+ maxBlockingReadMs: z.ZodOptional<z.ZodNumber>;
122
+ maxPreadBytes: z.ZodOptional<z.ZodNumber>;
123
+ maxFdWriteBytes: z.ZodOptional<z.ZodNumber>;
124
+ maxProcessArgvBytes: z.ZodOptional<z.ZodNumber>;
125
+ maxProcessEnvBytes: z.ZodOptional<z.ZodNumber>;
126
+ maxReaddirEntries: z.ZodOptional<z.ZodNumber>;
127
+ maxWasmFuel: z.ZodOptional<z.ZodNumber>;
128
+ maxWasmMemoryBytes: z.ZodOptional<z.ZodNumber>;
129
+ maxWasmStackBytes: z.ZodOptional<z.ZodNumber>;
130
+ }, z.core.$strict>>;
131
+ http: z.ZodOptional<z.ZodObject<{
132
+ maxFetchResponseBytes: z.ZodOptional<z.ZodNumber>;
133
+ }, z.core.$strict>>;
134
+ bindings: z.ZodOptional<z.ZodObject<{
135
+ defaultBindingTimeoutMs: z.ZodOptional<z.ZodNumber>;
136
+ maxBindingTimeoutMs: z.ZodOptional<z.ZodNumber>;
137
+ maxRegisteredCollections: z.ZodOptional<z.ZodNumber>;
138
+ maxRegisteredCollectionsPerVm: z.ZodOptional<z.ZodNumber>;
139
+ maxBindingsPerCollection: z.ZodOptional<z.ZodNumber>;
140
+ maxBindingSchemaBytes: z.ZodOptional<z.ZodNumber>;
141
+ maxExamplesPerBinding: z.ZodOptional<z.ZodNumber>;
142
+ maxBindingExampleInputBytes: z.ZodOptional<z.ZodNumber>;
143
+ }, z.core.$strict>>;
144
+ plugins: z.ZodOptional<z.ZodObject<{
145
+ maxPersistedManifestBytes: z.ZodOptional<z.ZodNumber>;
146
+ maxPersistedManifestFileBytes: z.ZodOptional<z.ZodNumber>;
147
+ }, z.core.$strict>>;
148
+ acp: z.ZodOptional<z.ZodObject<{
149
+ maxReadLineBytes: z.ZodOptional<z.ZodNumber>;
150
+ stdoutBufferByteLimit: z.ZodOptional<z.ZodNumber>;
151
+ maxCompletedMessageBytes: z.ZodOptional<z.ZodNumber>;
152
+ maxTurnOutputBytes: z.ZodOptional<z.ZodNumber>;
153
+ maxPromptBytes: z.ZodOptional<z.ZodNumber>;
154
+ maxPromptBlocks: z.ZodOptional<z.ZodNumber>;
155
+ maxFallbackContinuationBytes: z.ZodOptional<z.ZodNumber>;
156
+ maxSessionHistoryBytes: z.ZodOptional<z.ZodNumber>;
157
+ maxSessionHistoryEvents: z.ZodOptional<z.ZodNumber>;
158
+ maxHistoryPageEntries: z.ZodOptional<z.ZodNumber>;
159
+ maxSessionListEntries: z.ZodOptional<z.ZodNumber>;
160
+ maxSessionsPerVm: z.ZodOptional<z.ZodNumber>;
161
+ maxPromptsPerSession: z.ZodOptional<z.ZodNumber>;
162
+ maxPromptsPerVm: z.ZodOptional<z.ZodNumber>;
163
+ maxPendingPermissionsPerSession: z.ZodOptional<z.ZodNumber>;
164
+ maxPendingPermissionsPerVm: z.ZodOptional<z.ZodNumber>;
165
+ maxPermissionOutcomesPerSession: z.ZodOptional<z.ZodNumber>;
166
+ maxPermissionOutcomesPerVm: z.ZodOptional<z.ZodNumber>;
167
+ }, z.core.$strict>>;
168
+ sqlite: z.ZodOptional<z.ZodObject<{
169
+ maxResultBytes: z.ZodOptional<z.ZodNumber>;
170
+ }, z.core.$strict>>;
171
+ jsRuntime: z.ZodOptional<z.ZodObject<{
172
+ v8HeapLimitMb: z.ZodOptional<z.ZodNumber>;
173
+ syncRpcWaitTimeoutMs: z.ZodOptional<z.ZodNumber>;
174
+ cpuTimeLimitMs: z.ZodOptional<z.ZodNumber>;
175
+ wallClockLimitMs: z.ZodOptional<z.ZodNumber>;
176
+ importCacheMaterializeTimeoutMs: z.ZodOptional<z.ZodNumber>;
177
+ capturedOutputLimitBytes: z.ZodOptional<z.ZodNumber>;
178
+ stdinBufferLimitBytes: z.ZodOptional<z.ZodNumber>;
179
+ eventPayloadLimitBytes: z.ZodOptional<z.ZodNumber>;
180
+ v8IpcMaxFrameBytes: z.ZodOptional<z.ZodNumber>;
181
+ }, z.core.$strict>>;
182
+ python: z.ZodOptional<z.ZodObject<{
183
+ outputBufferMaxBytes: z.ZodOptional<z.ZodNumber>;
184
+ executionTimeoutMs: z.ZodOptional<z.ZodNumber>;
185
+ maxOldSpaceMb: z.ZodOptional<z.ZodNumber>;
186
+ vfsRpcTimeoutMs: z.ZodOptional<z.ZodNumber>;
187
+ }, z.core.$strict>>;
188
+ wasm: z.ZodOptional<z.ZodObject<{
189
+ maxModuleFileBytes: z.ZodOptional<z.ZodNumber>;
190
+ capturedOutputLimitBytes: z.ZodOptional<z.ZodNumber>;
191
+ syncReadLimitBytes: z.ZodOptional<z.ZodNumber>;
192
+ prewarmTimeoutMs: z.ZodOptional<z.ZodNumber>;
193
+ runnerHeapLimitMb: z.ZodOptional<z.ZodNumber>;
194
+ runnerCpuTimeLimitMs: z.ZodOptional<z.ZodNumber>;
195
+ }, z.core.$strict>>;
196
+ process: z.ZodOptional<z.ZodObject<{
197
+ maxSpawnFileActions: z.ZodOptional<z.ZodNumber>;
198
+ maxSpawnFileActionBytes: z.ZodOptional<z.ZodNumber>;
199
+ pendingStdinBytes: z.ZodOptional<z.ZodNumber>;
200
+ pendingEventCount: z.ZodOptional<z.ZodNumber>;
201
+ pendingEventBytes: z.ZodOptional<z.ZodNumber>;
202
+ }, z.core.$strict>>;
203
+ }, z.core.$strict>;
204
+ export declare const rootFilesystemConfigSchema: z.ZodUnion<readonly [z.ZodObject<{
205
+ type: z.ZodOptional<z.ZodLiteral<"overlay">>;
206
+ mode: z.ZodOptional<z.ZodEnum<{
207
+ ephemeral: "ephemeral";
208
+ "read-only": "read-only";
209
+ }>>;
210
+ disableDefaultBaseLayer: z.ZodOptional<z.ZodBoolean>;
211
+ lowers: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
212
+ kind: z.ZodLiteral<"bundled-base-filesystem">;
213
+ }, z.core.$strict>, z.ZodObject<{
214
+ kind: z.ZodLiteral<"snapshot-export">;
215
+ source: z.ZodUnknown;
216
+ }, z.core.$strict>]>>>;
217
+ }, z.core.$strict>, z.ZodObject<{
218
+ type: z.ZodLiteral<"native">;
219
+ plugin: z.ZodObject<{
220
+ id: z.ZodString;
221
+ config: z.ZodOptional<z.ZodUnknown>;
222
+ }, z.core.$strict>;
223
+ readOnly: z.ZodOptional<z.ZodBoolean>;
224
+ }, z.core.$strict>]>;
225
+ export declare const nativeMountConfigSchema: z.ZodType<NativeMountConfig>;
226
+ export declare const mountConfigSchema: z.ZodUnion<readonly [z.ZodObject<{
227
+ path: z.ZodString;
228
+ driver: z.ZodCustom<unknown, unknown>;
229
+ guestFstype: z.ZodOptional<z.ZodString>;
230
+ guestSource: z.ZodOptional<z.ZodString>;
231
+ readOnly: z.ZodOptional<z.ZodBoolean>;
232
+ }, z.core.$strict>, z.ZodType<NativeMountConfig, unknown, z.core.$ZodTypeInternals<NativeMountConfig, unknown>>, z.ZodObject<{
233
+ path: z.ZodString;
234
+ filesystem: z.ZodObject<{
235
+ type: z.ZodLiteral<"overlay">;
236
+ store: z.ZodUnknown;
237
+ mode: z.ZodOptional<z.ZodEnum<{
238
+ ephemeral: "ephemeral";
239
+ "read-only": "read-only";
240
+ }>>;
241
+ lowers: z.ZodArray<z.ZodUnknown>;
242
+ }, z.core.$strict>;
243
+ }, z.core.$strict>]>;
244
+ export declare const sharedSidecarConfigSchema: z.ZodObject<{
245
+ kind: z.ZodLiteral<"shared">;
246
+ pool: z.ZodOptional<z.ZodString>;
247
+ }, z.core.$strict>;
248
+ export declare const sidecarConfigSchema: z.ZodUnion<readonly [z.ZodObject<{
249
+ kind: z.ZodLiteral<"shared">;
250
+ pool: z.ZodOptional<z.ZodString>;
251
+ }, z.core.$strict>, z.ZodObject<{
252
+ kind: z.ZodLiteral<"explicit">;
253
+ handle: z.ZodUnknown;
254
+ }, z.core.$strict>]>;
255
+ export declare const bindingSchema: z.ZodType<Binding>;
256
+ export declare const bindingsSchema: z.ZodType<Bindings>;
257
+ /**
258
+ * Shared AgentOsOptions field schemas.
259
+ *
260
+ * Core and the TypeScript Rivet actor both use the full object. Runtime-owned
261
+ * behavior is serialized by AgentOs.create() into the sidecar VM config.
262
+ */
263
+ export declare const agentOsOptionFieldSchemas: {
264
+ readonly user: z.ZodOptional<z.ZodObject<{
265
+ uid: z.ZodOptional<z.ZodNumber>;
266
+ gid: z.ZodOptional<z.ZodNumber>;
267
+ euid: z.ZodOptional<z.ZodNumber>;
268
+ egid: z.ZodOptional<z.ZodNumber>;
269
+ username: z.ZodOptional<z.ZodString>;
270
+ homedir: z.ZodOptional<z.ZodString>;
271
+ shell: z.ZodOptional<z.ZodString>;
272
+ gecos: z.ZodOptional<z.ZodString>;
273
+ groupName: z.ZodOptional<z.ZodString>;
274
+ supplementaryGids: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
275
+ accounts: z.ZodOptional<z.ZodArray<z.ZodObject<{
276
+ uid: z.ZodNumber;
277
+ gid: z.ZodNumber;
278
+ username: z.ZodString;
279
+ homedir: z.ZodString;
280
+ shell: z.ZodString;
281
+ gecos: z.ZodOptional<z.ZodString>;
282
+ supplementaryGids: z.ZodArray<z.ZodNumber>;
283
+ }, z.core.$strict>>>;
284
+ groups: z.ZodOptional<z.ZodArray<z.ZodObject<{
285
+ gid: z.ZodNumber;
286
+ name: z.ZodString;
287
+ members: z.ZodArray<z.ZodString>;
288
+ }, z.core.$strict>>>;
289
+ }, z.core.$strict>>;
290
+ readonly software: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
291
+ readonly defaultSoftware: z.ZodOptional<z.ZodBoolean>;
292
+ readonly loopbackExemptPorts: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
293
+ readonly allowedNodeBuiltins: z.ZodOptional<z.ZodArray<z.ZodString>>;
294
+ readonly highResolutionTime: z.ZodOptional<z.ZodBoolean>;
295
+ readonly database: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
296
+ type: z.ZodLiteral<"actor_uds">;
297
+ path: z.ZodString;
298
+ token: z.ZodString;
299
+ }, z.core.$strict>, z.ZodObject<{
300
+ type: z.ZodLiteral<"sqlite_file">;
301
+ path: z.ZodString;
302
+ }, z.core.$strict>], "type">>;
303
+ readonly rootFilesystem: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
304
+ type: z.ZodOptional<z.ZodLiteral<"overlay">>;
305
+ mode: z.ZodOptional<z.ZodEnum<{
306
+ ephemeral: "ephemeral";
307
+ "read-only": "read-only";
308
+ }>>;
309
+ disableDefaultBaseLayer: z.ZodOptional<z.ZodBoolean>;
310
+ lowers: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
311
+ kind: z.ZodLiteral<"bundled-base-filesystem">;
312
+ }, z.core.$strict>, z.ZodObject<{
313
+ kind: z.ZodLiteral<"snapshot-export">;
314
+ source: z.ZodUnknown;
315
+ }, z.core.$strict>]>>>;
316
+ }, z.core.$strict>, z.ZodObject<{
317
+ type: z.ZodLiteral<"native">;
318
+ plugin: z.ZodObject<{
319
+ id: z.ZodString;
320
+ config: z.ZodOptional<z.ZodUnknown>;
321
+ }, z.core.$strict>;
322
+ readOnly: z.ZodOptional<z.ZodBoolean>;
323
+ }, z.core.$strict>]>>;
324
+ readonly mounts: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
325
+ path: z.ZodString;
326
+ driver: z.ZodCustom<unknown, unknown>;
327
+ guestFstype: z.ZodOptional<z.ZodString>;
328
+ guestSource: z.ZodOptional<z.ZodString>;
329
+ readOnly: z.ZodOptional<z.ZodBoolean>;
330
+ }, z.core.$strict>, z.ZodType<NativeMountConfig, unknown, z.core.$ZodTypeInternals<NativeMountConfig, unknown>>, z.ZodObject<{
331
+ path: z.ZodString;
332
+ filesystem: z.ZodObject<{
333
+ type: z.ZodLiteral<"overlay">;
334
+ store: z.ZodUnknown;
335
+ mode: z.ZodOptional<z.ZodEnum<{
336
+ ephemeral: "ephemeral";
337
+ "read-only": "read-only";
338
+ }>>;
339
+ lowers: z.ZodArray<z.ZodUnknown>;
340
+ }, z.core.$strict>;
341
+ }, z.core.$strict>]>>>;
342
+ readonly scheduleDriver: z.ZodOptional<z.ZodCustom<unknown, unknown>>;
343
+ readonly bindings: z.ZodOptional<z.ZodArray<z.ZodType<Bindings, unknown, z.core.$ZodTypeInternals<Bindings, unknown>>>>;
344
+ readonly permissions: z.ZodOptional<z.ZodObject<{
345
+ fs: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
346
+ allow: "allow";
347
+ deny: "deny";
348
+ }>, z.ZodObject<{
349
+ default: z.ZodOptional<z.ZodEnum<{
350
+ allow: "allow";
351
+ deny: "deny";
352
+ }>>;
353
+ rules: z.ZodArray<z.ZodObject<{
354
+ mode: z.ZodEnum<{
355
+ allow: "allow";
356
+ deny: "deny";
357
+ }>;
358
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
359
+ paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
360
+ }, z.core.$strict>>;
361
+ }, z.core.$strict>]>>;
362
+ network: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
363
+ allow: "allow";
364
+ deny: "deny";
365
+ }>, z.ZodObject<{
366
+ default: z.ZodOptional<z.ZodEnum<{
367
+ allow: "allow";
368
+ deny: "deny";
369
+ }>>;
370
+ rules: z.ZodArray<z.ZodObject<{
371
+ mode: z.ZodEnum<{
372
+ allow: "allow";
373
+ deny: "deny";
374
+ }>;
375
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
376
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
377
+ }, z.core.$strict>>;
378
+ }, z.core.$strict>]>>;
379
+ childProcess: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
380
+ allow: "allow";
381
+ deny: "deny";
382
+ }>, z.ZodObject<{
383
+ default: z.ZodOptional<z.ZodEnum<{
384
+ allow: "allow";
385
+ deny: "deny";
386
+ }>>;
387
+ rules: z.ZodArray<z.ZodObject<{
388
+ mode: z.ZodEnum<{
389
+ allow: "allow";
390
+ deny: "deny";
391
+ }>;
392
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
393
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
394
+ }, z.core.$strict>>;
395
+ }, z.core.$strict>]>>;
396
+ process: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
397
+ allow: "allow";
398
+ deny: "deny";
399
+ }>, z.ZodObject<{
400
+ default: z.ZodOptional<z.ZodEnum<{
401
+ allow: "allow";
402
+ deny: "deny";
403
+ }>>;
404
+ rules: z.ZodArray<z.ZodObject<{
405
+ mode: z.ZodEnum<{
406
+ allow: "allow";
407
+ deny: "deny";
408
+ }>;
409
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
410
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
411
+ }, z.core.$strict>>;
412
+ }, z.core.$strict>]>>;
413
+ env: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
414
+ allow: "allow";
415
+ deny: "deny";
416
+ }>, z.ZodObject<{
417
+ default: z.ZodOptional<z.ZodEnum<{
418
+ allow: "allow";
419
+ deny: "deny";
420
+ }>>;
421
+ rules: z.ZodArray<z.ZodObject<{
422
+ mode: z.ZodEnum<{
423
+ allow: "allow";
424
+ deny: "deny";
425
+ }>;
426
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
427
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
428
+ }, z.core.$strict>>;
429
+ }, z.core.$strict>]>>;
430
+ binding: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
431
+ allow: "allow";
432
+ deny: "deny";
433
+ }>, z.ZodObject<{
434
+ default: z.ZodOptional<z.ZodEnum<{
435
+ allow: "allow";
436
+ deny: "deny";
437
+ }>>;
438
+ rules: z.ZodArray<z.ZodObject<{
439
+ mode: z.ZodEnum<{
440
+ allow: "allow";
441
+ deny: "deny";
442
+ }>;
443
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
444
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
445
+ }, z.core.$strict>>;
446
+ }, z.core.$strict>]>>;
447
+ }, z.core.$strict>>;
448
+ readonly sidecar: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
449
+ kind: z.ZodLiteral<"shared">;
450
+ pool: z.ZodOptional<z.ZodString>;
451
+ }, z.core.$strict>, z.ZodObject<{
452
+ kind: z.ZodLiteral<"explicit">;
453
+ handle: z.ZodUnknown;
454
+ }, z.core.$strict>]>>;
455
+ readonly limits: z.ZodOptional<z.ZodObject<{
456
+ resources: z.ZodOptional<z.ZodObject<{
457
+ cpuCount: z.ZodOptional<z.ZodNumber>;
458
+ maxProcesses: z.ZodOptional<z.ZodNumber>;
459
+ maxOpenFds: z.ZodOptional<z.ZodNumber>;
460
+ maxPipes: z.ZodOptional<z.ZodNumber>;
461
+ maxPtys: z.ZodOptional<z.ZodNumber>;
462
+ maxSockets: z.ZodOptional<z.ZodNumber>;
463
+ maxConnections: z.ZodOptional<z.ZodNumber>;
464
+ maxSocketBufferedBytes: z.ZodOptional<z.ZodNumber>;
465
+ maxSocketDatagramQueueLen: z.ZodOptional<z.ZodNumber>;
466
+ maxFilesystemBytes: z.ZodOptional<z.ZodNumber>;
467
+ maxInodeCount: z.ZodOptional<z.ZodNumber>;
468
+ maxBlockingReadMs: z.ZodOptional<z.ZodNumber>;
469
+ maxPreadBytes: z.ZodOptional<z.ZodNumber>;
470
+ maxFdWriteBytes: z.ZodOptional<z.ZodNumber>;
471
+ maxProcessArgvBytes: z.ZodOptional<z.ZodNumber>;
472
+ maxProcessEnvBytes: z.ZodOptional<z.ZodNumber>;
473
+ maxReaddirEntries: z.ZodOptional<z.ZodNumber>;
474
+ maxWasmFuel: z.ZodOptional<z.ZodNumber>;
475
+ maxWasmMemoryBytes: z.ZodOptional<z.ZodNumber>;
476
+ maxWasmStackBytes: z.ZodOptional<z.ZodNumber>;
477
+ }, z.core.$strict>>;
478
+ http: z.ZodOptional<z.ZodObject<{
479
+ maxFetchResponseBytes: z.ZodOptional<z.ZodNumber>;
480
+ }, z.core.$strict>>;
481
+ bindings: z.ZodOptional<z.ZodObject<{
482
+ defaultBindingTimeoutMs: z.ZodOptional<z.ZodNumber>;
483
+ maxBindingTimeoutMs: z.ZodOptional<z.ZodNumber>;
484
+ maxRegisteredCollections: z.ZodOptional<z.ZodNumber>;
485
+ maxRegisteredCollectionsPerVm: z.ZodOptional<z.ZodNumber>;
486
+ maxBindingsPerCollection: z.ZodOptional<z.ZodNumber>;
487
+ maxBindingSchemaBytes: z.ZodOptional<z.ZodNumber>;
488
+ maxExamplesPerBinding: z.ZodOptional<z.ZodNumber>;
489
+ maxBindingExampleInputBytes: z.ZodOptional<z.ZodNumber>;
490
+ }, z.core.$strict>>;
491
+ plugins: z.ZodOptional<z.ZodObject<{
492
+ maxPersistedManifestBytes: z.ZodOptional<z.ZodNumber>;
493
+ maxPersistedManifestFileBytes: z.ZodOptional<z.ZodNumber>;
494
+ }, z.core.$strict>>;
495
+ acp: z.ZodOptional<z.ZodObject<{
496
+ maxReadLineBytes: z.ZodOptional<z.ZodNumber>;
497
+ stdoutBufferByteLimit: z.ZodOptional<z.ZodNumber>;
498
+ maxCompletedMessageBytes: z.ZodOptional<z.ZodNumber>;
499
+ maxTurnOutputBytes: z.ZodOptional<z.ZodNumber>;
500
+ maxPromptBytes: z.ZodOptional<z.ZodNumber>;
501
+ maxPromptBlocks: z.ZodOptional<z.ZodNumber>;
502
+ maxFallbackContinuationBytes: z.ZodOptional<z.ZodNumber>;
503
+ maxSessionHistoryBytes: z.ZodOptional<z.ZodNumber>;
504
+ maxSessionHistoryEvents: z.ZodOptional<z.ZodNumber>;
505
+ maxHistoryPageEntries: z.ZodOptional<z.ZodNumber>;
506
+ maxSessionListEntries: z.ZodOptional<z.ZodNumber>;
507
+ maxSessionsPerVm: z.ZodOptional<z.ZodNumber>;
508
+ maxPromptsPerSession: z.ZodOptional<z.ZodNumber>;
509
+ maxPromptsPerVm: z.ZodOptional<z.ZodNumber>;
510
+ maxPendingPermissionsPerSession: z.ZodOptional<z.ZodNumber>;
511
+ maxPendingPermissionsPerVm: z.ZodOptional<z.ZodNumber>;
512
+ maxPermissionOutcomesPerSession: z.ZodOptional<z.ZodNumber>;
513
+ maxPermissionOutcomesPerVm: z.ZodOptional<z.ZodNumber>;
514
+ }, z.core.$strict>>;
515
+ sqlite: z.ZodOptional<z.ZodObject<{
516
+ maxResultBytes: z.ZodOptional<z.ZodNumber>;
517
+ }, z.core.$strict>>;
518
+ jsRuntime: z.ZodOptional<z.ZodObject<{
519
+ v8HeapLimitMb: z.ZodOptional<z.ZodNumber>;
520
+ syncRpcWaitTimeoutMs: z.ZodOptional<z.ZodNumber>;
521
+ cpuTimeLimitMs: z.ZodOptional<z.ZodNumber>;
522
+ wallClockLimitMs: z.ZodOptional<z.ZodNumber>;
523
+ importCacheMaterializeTimeoutMs: z.ZodOptional<z.ZodNumber>;
524
+ capturedOutputLimitBytes: z.ZodOptional<z.ZodNumber>;
525
+ stdinBufferLimitBytes: z.ZodOptional<z.ZodNumber>;
526
+ eventPayloadLimitBytes: z.ZodOptional<z.ZodNumber>;
527
+ v8IpcMaxFrameBytes: z.ZodOptional<z.ZodNumber>;
528
+ }, z.core.$strict>>;
529
+ python: z.ZodOptional<z.ZodObject<{
530
+ outputBufferMaxBytes: z.ZodOptional<z.ZodNumber>;
531
+ executionTimeoutMs: z.ZodOptional<z.ZodNumber>;
532
+ maxOldSpaceMb: z.ZodOptional<z.ZodNumber>;
533
+ vfsRpcTimeoutMs: z.ZodOptional<z.ZodNumber>;
534
+ }, z.core.$strict>>;
535
+ wasm: z.ZodOptional<z.ZodObject<{
536
+ maxModuleFileBytes: z.ZodOptional<z.ZodNumber>;
537
+ capturedOutputLimitBytes: z.ZodOptional<z.ZodNumber>;
538
+ syncReadLimitBytes: z.ZodOptional<z.ZodNumber>;
539
+ prewarmTimeoutMs: z.ZodOptional<z.ZodNumber>;
540
+ runnerHeapLimitMb: z.ZodOptional<z.ZodNumber>;
541
+ runnerCpuTimeLimitMs: z.ZodOptional<z.ZodNumber>;
542
+ }, z.core.$strict>>;
543
+ process: z.ZodOptional<z.ZodObject<{
544
+ maxSpawnFileActions: z.ZodOptional<z.ZodNumber>;
545
+ maxSpawnFileActionBytes: z.ZodOptional<z.ZodNumber>;
546
+ pendingStdinBytes: z.ZodOptional<z.ZodNumber>;
547
+ pendingEventCount: z.ZodOptional<z.ZodNumber>;
548
+ pendingEventBytes: z.ZodOptional<z.ZodNumber>;
549
+ }, z.core.$strict>>;
550
+ }, z.core.$strict>>;
551
+ readonly onAgentStderr: z.ZodOptional<z.ZodCustom<AgentStderrHandler, AgentStderrHandler>>;
552
+ readonly onAgentExit: z.ZodOptional<z.ZodCustom<AgentExitHandler, AgentExitHandler>>;
553
+ readonly onLimitWarning: z.ZodOptional<z.ZodCustom<LimitWarningHandler, LimitWarningHandler>>;
554
+ };
555
+ export declare const agentOsOptionsSchema: z.ZodType<AgentOsOptions>;
556
+ export declare function parseAgentOsOptions(options?: AgentOsOptions): AgentOsOptions;