@rivet-dev/agentos-core 0.0.0-integrate-dylib-into-main.815fcda → 0.0.0-main.2f99c77

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (101) hide show
  1. package/README.md +5 -8
  2. package/dist/agent-os.d.ts +176 -48
  3. package/dist/agent-os.js +829 -548
  4. package/dist/agentos-package.d.ts +29 -0
  5. package/dist/agentos-package.js +88 -0
  6. package/dist/base-filesystem.d.ts +2 -15
  7. package/dist/base-filesystem.js +23 -171
  8. package/dist/cron/types.d.ts +1 -1
  9. package/dist/default-software.d.ts +8 -0
  10. package/dist/default-software.js +10 -0
  11. package/dist/generated/AcpLimitsConfig.d.ts +4 -0
  12. package/dist/generated/AcpLimitsConfig.js +2 -0
  13. package/dist/generated/CreateVmConfig.d.ts +26 -0
  14. package/dist/generated/CreateVmConfig.js +1 -0
  15. package/dist/generated/FsPermissionRule.d.ts +6 -0
  16. package/dist/generated/FsPermissionRule.js +1 -0
  17. package/dist/generated/FsPermissionRuleSet.d.ts +6 -0
  18. package/dist/generated/FsPermissionRuleSet.js +1 -0
  19. package/dist/generated/FsPermissionScope.d.ts +3 -0
  20. package/dist/generated/FsPermissionScope.js +1 -0
  21. package/dist/generated/HttpLimitsConfig.d.ts +3 -0
  22. package/dist/generated/HttpLimitsConfig.js +2 -0
  23. package/dist/generated/JsModuleResolution.d.ts +1 -0
  24. package/dist/generated/JsModuleResolution.js +2 -0
  25. package/dist/generated/JsRuntimeConfig.d.ts +31 -0
  26. package/dist/generated/JsRuntimeConfig.js +1 -0
  27. package/dist/generated/JsRuntimeLimitsConfig.d.ts +11 -0
  28. package/dist/generated/JsRuntimeLimitsConfig.js +2 -0
  29. package/dist/generated/JsRuntimePlatform.d.ts +1 -0
  30. package/dist/generated/JsRuntimePlatform.js +2 -0
  31. package/dist/generated/MountPluginDescriptor.d.ts +4 -0
  32. package/dist/generated/MountPluginDescriptor.js +2 -0
  33. package/dist/generated/NativeRootFilesystemConfig.d.ts +5 -0
  34. package/dist/generated/NativeRootFilesystemConfig.js +1 -0
  35. package/dist/generated/PatternPermissionRule.d.ts +6 -0
  36. package/dist/generated/PatternPermissionRule.js +1 -0
  37. package/dist/generated/PatternPermissionRuleSet.d.ts +6 -0
  38. package/dist/generated/PatternPermissionRuleSet.js +1 -0
  39. package/dist/generated/PatternPermissionScope.d.ts +3 -0
  40. package/dist/generated/PatternPermissionScope.js +1 -0
  41. package/dist/generated/PermissionMode.d.ts +1 -0
  42. package/dist/generated/PermissionMode.js +2 -0
  43. package/dist/generated/PermissionsPolicy.d.ts +10 -0
  44. package/dist/generated/PermissionsPolicy.js +1 -0
  45. package/dist/generated/PluginLimitsConfig.d.ts +4 -0
  46. package/dist/generated/PluginLimitsConfig.js +2 -0
  47. package/dist/generated/PythonLimitsConfig.d.ts +6 -0
  48. package/dist/generated/PythonLimitsConfig.js +2 -0
  49. package/dist/generated/ResourceLimitsConfig.d.ts +24 -0
  50. package/dist/generated/ResourceLimitsConfig.js +2 -0
  51. package/dist/generated/RootFilesystemConfig.d.ts +9 -0
  52. package/dist/generated/RootFilesystemConfig.js +1 -0
  53. package/dist/generated/RootFilesystemEntry.d.ts +13 -0
  54. package/dist/generated/RootFilesystemEntry.js +1 -0
  55. package/dist/generated/RootFilesystemEntryEncoding.d.ts +1 -0
  56. package/dist/generated/RootFilesystemEntryEncoding.js +2 -0
  57. package/dist/generated/RootFilesystemEntryKind.d.ts +1 -0
  58. package/dist/generated/RootFilesystemEntryKind.js +2 -0
  59. package/dist/generated/RootFilesystemLowerDescriptor.d.ts +7 -0
  60. package/dist/generated/RootFilesystemLowerDescriptor.js +1 -0
  61. package/dist/generated/RootFilesystemMode.d.ts +1 -0
  62. package/dist/generated/RootFilesystemMode.js +2 -0
  63. package/dist/generated/ToolLimitsConfig.d.ts +10 -0
  64. package/dist/generated/ToolLimitsConfig.js +2 -0
  65. package/dist/generated/VmDnsConfig.d.ts +6 -0
  66. package/dist/generated/VmDnsConfig.js +2 -0
  67. package/dist/generated/VmLimitsConfig.d.ts +18 -0
  68. package/dist/generated/VmLimitsConfig.js +1 -0
  69. package/dist/generated/VmListenPolicyConfig.d.ts +5 -0
  70. package/dist/generated/VmListenPolicyConfig.js +2 -0
  71. package/dist/generated/WasmLimitsConfig.d.ts +7 -0
  72. package/dist/generated/WasmLimitsConfig.js +2 -0
  73. package/dist/host-dir-mount.d.ts +1 -1
  74. package/dist/host-tools-zod.js +27 -7
  75. package/dist/host-tools.js +9 -0
  76. package/dist/index.d.ts +3 -1
  77. package/dist/index.js +2 -1
  78. package/dist/layers.d.ts +2 -2
  79. package/dist/layers.js +19 -10
  80. package/dist/options-schema.d.ts +453 -0
  81. package/dist/options-schema.js +268 -0
  82. package/dist/packages.d.ts +17 -116
  83. package/dist/packages.js +35 -322
  84. package/dist/runtime-compat.d.ts +27 -11
  85. package/dist/runtime-compat.js +133 -147
  86. package/dist/runtime.d.ts +37 -7
  87. package/dist/sandbox.d.ts +112 -0
  88. package/dist/sandbox.js +264 -0
  89. package/dist/sidecar/agentos-protocol.d.ts +99 -1
  90. package/dist/sidecar/agentos-protocol.js +155 -18
  91. package/dist/sidecar/native-process-client.d.ts +6 -2
  92. package/dist/sidecar/native-process-client.js +8 -1
  93. package/dist/sidecar/permissions.d.ts +1 -1
  94. package/dist/sidecar/permissions.js +4 -4
  95. package/dist/sidecar/rpc-client.d.ts +86 -6
  96. package/dist/sidecar/rpc-client.js +388 -93
  97. package/dist/types.d.ts +10 -3
  98. package/package.json +40 -33
  99. package/dist/agents.d.ts +0 -63
  100. package/dist/agents.js +0 -42
  101. package/fixtures/AGENTOS_SYSTEM_PROMPT.md +0 -21
@@ -0,0 +1,453 @@
1
+ import { z } from "zod/v4";
2
+ import type { AgentExitHandler, AgentOsOptions, AgentStderrHandler, LimitWarningHandler, NativeMountConfig } from "./agent-os.js";
3
+ import type { HostTool, ToolKit } from "./host-tools.js";
4
+ export declare const permissionsSchema: z.ZodObject<{
5
+ fs: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
6
+ allow: "allow";
7
+ deny: "deny";
8
+ }>, z.ZodObject<{
9
+ default: z.ZodOptional<z.ZodEnum<{
10
+ allow: "allow";
11
+ deny: "deny";
12
+ }>>;
13
+ rules: z.ZodArray<z.ZodObject<{
14
+ mode: z.ZodEnum<{
15
+ allow: "allow";
16
+ deny: "deny";
17
+ }>;
18
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
19
+ paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
20
+ }, z.core.$strict>>;
21
+ }, z.core.$strict>]>>;
22
+ network: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
23
+ allow: "allow";
24
+ deny: "deny";
25
+ }>, z.ZodObject<{
26
+ default: z.ZodOptional<z.ZodEnum<{
27
+ allow: "allow";
28
+ deny: "deny";
29
+ }>>;
30
+ rules: z.ZodArray<z.ZodObject<{
31
+ mode: z.ZodEnum<{
32
+ allow: "allow";
33
+ deny: "deny";
34
+ }>;
35
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
36
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
37
+ }, z.core.$strict>>;
38
+ }, z.core.$strict>]>>;
39
+ childProcess: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
40
+ allow: "allow";
41
+ deny: "deny";
42
+ }>, z.ZodObject<{
43
+ default: z.ZodOptional<z.ZodEnum<{
44
+ allow: "allow";
45
+ deny: "deny";
46
+ }>>;
47
+ rules: z.ZodArray<z.ZodObject<{
48
+ mode: z.ZodEnum<{
49
+ allow: "allow";
50
+ deny: "deny";
51
+ }>;
52
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
53
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
54
+ }, z.core.$strict>>;
55
+ }, z.core.$strict>]>>;
56
+ process: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
57
+ allow: "allow";
58
+ deny: "deny";
59
+ }>, z.ZodObject<{
60
+ default: z.ZodOptional<z.ZodEnum<{
61
+ allow: "allow";
62
+ deny: "deny";
63
+ }>>;
64
+ rules: z.ZodArray<z.ZodObject<{
65
+ mode: z.ZodEnum<{
66
+ allow: "allow";
67
+ deny: "deny";
68
+ }>;
69
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
70
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
71
+ }, z.core.$strict>>;
72
+ }, z.core.$strict>]>>;
73
+ env: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
74
+ allow: "allow";
75
+ deny: "deny";
76
+ }>, z.ZodObject<{
77
+ default: z.ZodOptional<z.ZodEnum<{
78
+ allow: "allow";
79
+ deny: "deny";
80
+ }>>;
81
+ rules: z.ZodArray<z.ZodObject<{
82
+ mode: z.ZodEnum<{
83
+ allow: "allow";
84
+ deny: "deny";
85
+ }>;
86
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
87
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
88
+ }, z.core.$strict>>;
89
+ }, z.core.$strict>]>>;
90
+ binding: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
91
+ allow: "allow";
92
+ deny: "deny";
93
+ }>, z.ZodObject<{
94
+ default: z.ZodOptional<z.ZodEnum<{
95
+ allow: "allow";
96
+ deny: "deny";
97
+ }>>;
98
+ rules: z.ZodArray<z.ZodObject<{
99
+ mode: z.ZodEnum<{
100
+ allow: "allow";
101
+ deny: "deny";
102
+ }>;
103
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
104
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
105
+ }, z.core.$strict>>;
106
+ }, z.core.$strict>]>>;
107
+ }, z.core.$strict>;
108
+ export declare const agentOsLimitsSchema: z.ZodObject<{
109
+ resources: z.ZodOptional<z.ZodObject<{
110
+ cpuCount: z.ZodOptional<z.ZodNumber>;
111
+ maxProcesses: z.ZodOptional<z.ZodNumber>;
112
+ maxOpenFds: z.ZodOptional<z.ZodNumber>;
113
+ maxPipes: z.ZodOptional<z.ZodNumber>;
114
+ maxPtys: z.ZodOptional<z.ZodNumber>;
115
+ maxSockets: z.ZodOptional<z.ZodNumber>;
116
+ maxConnections: z.ZodOptional<z.ZodNumber>;
117
+ maxSocketBufferedBytes: z.ZodOptional<z.ZodNumber>;
118
+ maxSocketDatagramQueueLen: z.ZodOptional<z.ZodNumber>;
119
+ maxFilesystemBytes: z.ZodOptional<z.ZodNumber>;
120
+ maxInodeCount: z.ZodOptional<z.ZodNumber>;
121
+ maxBlockingReadMs: z.ZodOptional<z.ZodNumber>;
122
+ maxPreadBytes: z.ZodOptional<z.ZodNumber>;
123
+ maxFdWriteBytes: z.ZodOptional<z.ZodNumber>;
124
+ maxProcessArgvBytes: z.ZodOptional<z.ZodNumber>;
125
+ maxProcessEnvBytes: z.ZodOptional<z.ZodNumber>;
126
+ maxReaddirEntries: z.ZodOptional<z.ZodNumber>;
127
+ maxWasmFuel: z.ZodOptional<z.ZodNumber>;
128
+ maxWasmMemoryBytes: z.ZodOptional<z.ZodNumber>;
129
+ maxWasmStackBytes: z.ZodOptional<z.ZodNumber>;
130
+ }, z.core.$strict>>;
131
+ http: z.ZodOptional<z.ZodObject<{
132
+ maxFetchResponseBytes: z.ZodOptional<z.ZodNumber>;
133
+ }, z.core.$strict>>;
134
+ tools: z.ZodOptional<z.ZodObject<{
135
+ defaultToolTimeoutMs: z.ZodOptional<z.ZodNumber>;
136
+ maxToolTimeoutMs: z.ZodOptional<z.ZodNumber>;
137
+ maxRegisteredToolkits: z.ZodOptional<z.ZodNumber>;
138
+ maxRegisteredToolsPerVm: z.ZodOptional<z.ZodNumber>;
139
+ maxToolsPerToolkit: z.ZodOptional<z.ZodNumber>;
140
+ maxToolSchemaBytes: z.ZodOptional<z.ZodNumber>;
141
+ maxToolExamplesPerTool: z.ZodOptional<z.ZodNumber>;
142
+ maxToolExampleInputBytes: z.ZodOptional<z.ZodNumber>;
143
+ }, z.core.$strict>>;
144
+ plugins: z.ZodOptional<z.ZodObject<{
145
+ maxPersistedManifestBytes: z.ZodOptional<z.ZodNumber>;
146
+ maxPersistedManifestFileBytes: z.ZodOptional<z.ZodNumber>;
147
+ }, z.core.$strict>>;
148
+ acp: z.ZodOptional<z.ZodObject<{
149
+ maxReadLineBytes: z.ZodOptional<z.ZodNumber>;
150
+ stdoutBufferByteLimit: z.ZodOptional<z.ZodNumber>;
151
+ }, z.core.$strict>>;
152
+ jsRuntime: z.ZodOptional<z.ZodObject<{
153
+ v8HeapLimitMb: z.ZodOptional<z.ZodNumber>;
154
+ syncRpcWaitTimeoutMs: z.ZodOptional<z.ZodNumber>;
155
+ cpuTimeLimitMs: z.ZodOptional<z.ZodNumber>;
156
+ wallClockLimitMs: z.ZodOptional<z.ZodNumber>;
157
+ importCacheMaterializeTimeoutMs: z.ZodOptional<z.ZodNumber>;
158
+ capturedOutputLimitBytes: z.ZodOptional<z.ZodNumber>;
159
+ stdinBufferLimitBytes: z.ZodOptional<z.ZodNumber>;
160
+ eventPayloadLimitBytes: z.ZodOptional<z.ZodNumber>;
161
+ v8IpcMaxFrameBytes: z.ZodOptional<z.ZodNumber>;
162
+ }, z.core.$strict>>;
163
+ python: z.ZodOptional<z.ZodObject<{
164
+ outputBufferMaxBytes: z.ZodOptional<z.ZodNumber>;
165
+ executionTimeoutMs: z.ZodOptional<z.ZodNumber>;
166
+ maxOldSpaceMb: z.ZodOptional<z.ZodNumber>;
167
+ vfsRpcTimeoutMs: z.ZodOptional<z.ZodNumber>;
168
+ }, z.core.$strict>>;
169
+ wasm: z.ZodOptional<z.ZodObject<{
170
+ maxModuleFileBytes: z.ZodOptional<z.ZodNumber>;
171
+ capturedOutputLimitBytes: z.ZodOptional<z.ZodNumber>;
172
+ syncReadLimitBytes: z.ZodOptional<z.ZodNumber>;
173
+ prewarmTimeoutMs: z.ZodOptional<z.ZodNumber>;
174
+ runnerHeapLimitMb: z.ZodOptional<z.ZodNumber>;
175
+ }, z.core.$strict>>;
176
+ }, z.core.$strict>;
177
+ export declare const rootFilesystemConfigSchema: z.ZodObject<{
178
+ type: z.ZodOptional<z.ZodLiteral<"overlay">>;
179
+ mode: z.ZodOptional<z.ZodEnum<{
180
+ ephemeral: "ephemeral";
181
+ "read-only": "read-only";
182
+ }>>;
183
+ disableDefaultBaseLayer: z.ZodOptional<z.ZodBoolean>;
184
+ lowers: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
185
+ kind: z.ZodLiteral<"bundled-base-filesystem">;
186
+ }, z.core.$strict>, z.ZodObject<{
187
+ kind: z.ZodLiteral<"snapshot-export">;
188
+ source: z.ZodUnknown;
189
+ }, z.core.$strict>]>>>;
190
+ }, z.core.$strict>;
191
+ export declare const nativeMountConfigSchema: z.ZodType<NativeMountConfig>;
192
+ export declare const mountConfigSchema: z.ZodUnion<readonly [z.ZodObject<{
193
+ path: z.ZodString;
194
+ driver: z.ZodCustom<unknown, unknown>;
195
+ readOnly: z.ZodOptional<z.ZodBoolean>;
196
+ }, z.core.$strict>, z.ZodType<NativeMountConfig, unknown, z.core.$ZodTypeInternals<NativeMountConfig, unknown>>, z.ZodObject<{
197
+ path: z.ZodString;
198
+ filesystem: z.ZodObject<{
199
+ type: z.ZodLiteral<"overlay">;
200
+ store: z.ZodUnknown;
201
+ mode: z.ZodOptional<z.ZodEnum<{
202
+ ephemeral: "ephemeral";
203
+ "read-only": "read-only";
204
+ }>>;
205
+ lowers: z.ZodArray<z.ZodUnknown>;
206
+ }, z.core.$strict>;
207
+ }, z.core.$strict>]>;
208
+ export declare const sharedSidecarConfigSchema: z.ZodObject<{
209
+ kind: z.ZodLiteral<"shared">;
210
+ pool: z.ZodOptional<z.ZodString>;
211
+ }, z.core.$strict>;
212
+ export declare const sidecarConfigSchema: z.ZodUnion<readonly [z.ZodObject<{
213
+ kind: z.ZodLiteral<"shared">;
214
+ pool: z.ZodOptional<z.ZodString>;
215
+ }, z.core.$strict>, z.ZodObject<{
216
+ kind: z.ZodLiteral<"explicit">;
217
+ handle: z.ZodUnknown;
218
+ }, z.core.$strict>]>;
219
+ export declare const hostToolSchema: z.ZodType<HostTool>;
220
+ export declare const toolKitSchema: z.ZodType<ToolKit>;
221
+ /**
222
+ * Shared AgentOsOptions field schemas.
223
+ *
224
+ * Core uses the full object. The Rivet/native actor composes a narrower
225
+ * native-safe subset in `packages/agentos/src/config.ts`; keep that subset and
226
+ * `crates/agentos-actor-plugin/src/config.rs::AgentOsConfigJson` aligned when
227
+ * adding options that cross the native boundary.
228
+ */
229
+ export declare const agentOsOptionFieldSchemas: {
230
+ readonly software: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
231
+ readonly defaultSoftware: z.ZodOptional<z.ZodBoolean>;
232
+ readonly loopbackExemptPorts: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
233
+ readonly allowedNodeBuiltins: z.ZodOptional<z.ZodArray<z.ZodString>>;
234
+ readonly highResolutionTime: z.ZodOptional<z.ZodBoolean>;
235
+ readonly rootFilesystem: z.ZodOptional<z.ZodObject<{
236
+ type: z.ZodOptional<z.ZodLiteral<"overlay">>;
237
+ mode: z.ZodOptional<z.ZodEnum<{
238
+ ephemeral: "ephemeral";
239
+ "read-only": "read-only";
240
+ }>>;
241
+ disableDefaultBaseLayer: z.ZodOptional<z.ZodBoolean>;
242
+ lowers: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
243
+ kind: z.ZodLiteral<"bundled-base-filesystem">;
244
+ }, z.core.$strict>, z.ZodObject<{
245
+ kind: z.ZodLiteral<"snapshot-export">;
246
+ source: z.ZodUnknown;
247
+ }, z.core.$strict>]>>>;
248
+ }, z.core.$strict>>;
249
+ readonly mounts: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
250
+ path: z.ZodString;
251
+ driver: z.ZodCustom<unknown, unknown>;
252
+ readOnly: z.ZodOptional<z.ZodBoolean>;
253
+ }, z.core.$strict>, z.ZodType<NativeMountConfig, unknown, z.core.$ZodTypeInternals<NativeMountConfig, unknown>>, z.ZodObject<{
254
+ path: z.ZodString;
255
+ filesystem: z.ZodObject<{
256
+ type: z.ZodLiteral<"overlay">;
257
+ store: z.ZodUnknown;
258
+ mode: z.ZodOptional<z.ZodEnum<{
259
+ ephemeral: "ephemeral";
260
+ "read-only": "read-only";
261
+ }>>;
262
+ lowers: z.ZodArray<z.ZodUnknown>;
263
+ }, z.core.$strict>;
264
+ }, z.core.$strict>]>>>;
265
+ readonly additionalInstructions: z.ZodOptional<z.ZodString>;
266
+ readonly scheduleDriver: z.ZodOptional<z.ZodCustom<unknown, unknown>>;
267
+ readonly toolKits: z.ZodOptional<z.ZodArray<z.ZodType<ToolKit, unknown, z.core.$ZodTypeInternals<ToolKit, unknown>>>>;
268
+ readonly permissions: z.ZodOptional<z.ZodObject<{
269
+ fs: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
270
+ allow: "allow";
271
+ deny: "deny";
272
+ }>, z.ZodObject<{
273
+ default: z.ZodOptional<z.ZodEnum<{
274
+ allow: "allow";
275
+ deny: "deny";
276
+ }>>;
277
+ rules: z.ZodArray<z.ZodObject<{
278
+ mode: z.ZodEnum<{
279
+ allow: "allow";
280
+ deny: "deny";
281
+ }>;
282
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
283
+ paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
284
+ }, z.core.$strict>>;
285
+ }, z.core.$strict>]>>;
286
+ network: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
287
+ allow: "allow";
288
+ deny: "deny";
289
+ }>, z.ZodObject<{
290
+ default: z.ZodOptional<z.ZodEnum<{
291
+ allow: "allow";
292
+ deny: "deny";
293
+ }>>;
294
+ rules: z.ZodArray<z.ZodObject<{
295
+ mode: z.ZodEnum<{
296
+ allow: "allow";
297
+ deny: "deny";
298
+ }>;
299
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
300
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
301
+ }, z.core.$strict>>;
302
+ }, z.core.$strict>]>>;
303
+ childProcess: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
304
+ allow: "allow";
305
+ deny: "deny";
306
+ }>, z.ZodObject<{
307
+ default: z.ZodOptional<z.ZodEnum<{
308
+ allow: "allow";
309
+ deny: "deny";
310
+ }>>;
311
+ rules: z.ZodArray<z.ZodObject<{
312
+ mode: z.ZodEnum<{
313
+ allow: "allow";
314
+ deny: "deny";
315
+ }>;
316
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
317
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
318
+ }, z.core.$strict>>;
319
+ }, z.core.$strict>]>>;
320
+ process: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
321
+ allow: "allow";
322
+ deny: "deny";
323
+ }>, z.ZodObject<{
324
+ default: z.ZodOptional<z.ZodEnum<{
325
+ allow: "allow";
326
+ deny: "deny";
327
+ }>>;
328
+ rules: z.ZodArray<z.ZodObject<{
329
+ mode: z.ZodEnum<{
330
+ allow: "allow";
331
+ deny: "deny";
332
+ }>;
333
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
334
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
335
+ }, z.core.$strict>>;
336
+ }, z.core.$strict>]>>;
337
+ env: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
338
+ allow: "allow";
339
+ deny: "deny";
340
+ }>, z.ZodObject<{
341
+ default: z.ZodOptional<z.ZodEnum<{
342
+ allow: "allow";
343
+ deny: "deny";
344
+ }>>;
345
+ rules: z.ZodArray<z.ZodObject<{
346
+ mode: z.ZodEnum<{
347
+ allow: "allow";
348
+ deny: "deny";
349
+ }>;
350
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
351
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
352
+ }, z.core.$strict>>;
353
+ }, z.core.$strict>]>>;
354
+ binding: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
355
+ allow: "allow";
356
+ deny: "deny";
357
+ }>, z.ZodObject<{
358
+ default: z.ZodOptional<z.ZodEnum<{
359
+ allow: "allow";
360
+ deny: "deny";
361
+ }>>;
362
+ rules: z.ZodArray<z.ZodObject<{
363
+ mode: z.ZodEnum<{
364
+ allow: "allow";
365
+ deny: "deny";
366
+ }>;
367
+ operations: z.ZodOptional<z.ZodArray<z.ZodString>>;
368
+ patterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
369
+ }, z.core.$strict>>;
370
+ }, z.core.$strict>]>>;
371
+ }, z.core.$strict>>;
372
+ readonly sidecar: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
373
+ kind: z.ZodLiteral<"shared">;
374
+ pool: z.ZodOptional<z.ZodString>;
375
+ }, z.core.$strict>, z.ZodObject<{
376
+ kind: z.ZodLiteral<"explicit">;
377
+ handle: z.ZodUnknown;
378
+ }, z.core.$strict>]>>;
379
+ readonly limits: z.ZodOptional<z.ZodObject<{
380
+ resources: z.ZodOptional<z.ZodObject<{
381
+ cpuCount: z.ZodOptional<z.ZodNumber>;
382
+ maxProcesses: z.ZodOptional<z.ZodNumber>;
383
+ maxOpenFds: z.ZodOptional<z.ZodNumber>;
384
+ maxPipes: z.ZodOptional<z.ZodNumber>;
385
+ maxPtys: z.ZodOptional<z.ZodNumber>;
386
+ maxSockets: z.ZodOptional<z.ZodNumber>;
387
+ maxConnections: z.ZodOptional<z.ZodNumber>;
388
+ maxSocketBufferedBytes: z.ZodOptional<z.ZodNumber>;
389
+ maxSocketDatagramQueueLen: z.ZodOptional<z.ZodNumber>;
390
+ maxFilesystemBytes: z.ZodOptional<z.ZodNumber>;
391
+ maxInodeCount: z.ZodOptional<z.ZodNumber>;
392
+ maxBlockingReadMs: z.ZodOptional<z.ZodNumber>;
393
+ maxPreadBytes: z.ZodOptional<z.ZodNumber>;
394
+ maxFdWriteBytes: z.ZodOptional<z.ZodNumber>;
395
+ maxProcessArgvBytes: z.ZodOptional<z.ZodNumber>;
396
+ maxProcessEnvBytes: z.ZodOptional<z.ZodNumber>;
397
+ maxReaddirEntries: z.ZodOptional<z.ZodNumber>;
398
+ maxWasmFuel: z.ZodOptional<z.ZodNumber>;
399
+ maxWasmMemoryBytes: z.ZodOptional<z.ZodNumber>;
400
+ maxWasmStackBytes: z.ZodOptional<z.ZodNumber>;
401
+ }, z.core.$strict>>;
402
+ http: z.ZodOptional<z.ZodObject<{
403
+ maxFetchResponseBytes: z.ZodOptional<z.ZodNumber>;
404
+ }, z.core.$strict>>;
405
+ tools: z.ZodOptional<z.ZodObject<{
406
+ defaultToolTimeoutMs: z.ZodOptional<z.ZodNumber>;
407
+ maxToolTimeoutMs: z.ZodOptional<z.ZodNumber>;
408
+ maxRegisteredToolkits: z.ZodOptional<z.ZodNumber>;
409
+ maxRegisteredToolsPerVm: z.ZodOptional<z.ZodNumber>;
410
+ maxToolsPerToolkit: z.ZodOptional<z.ZodNumber>;
411
+ maxToolSchemaBytes: z.ZodOptional<z.ZodNumber>;
412
+ maxToolExamplesPerTool: z.ZodOptional<z.ZodNumber>;
413
+ maxToolExampleInputBytes: z.ZodOptional<z.ZodNumber>;
414
+ }, z.core.$strict>>;
415
+ plugins: z.ZodOptional<z.ZodObject<{
416
+ maxPersistedManifestBytes: z.ZodOptional<z.ZodNumber>;
417
+ maxPersistedManifestFileBytes: z.ZodOptional<z.ZodNumber>;
418
+ }, z.core.$strict>>;
419
+ acp: z.ZodOptional<z.ZodObject<{
420
+ maxReadLineBytes: z.ZodOptional<z.ZodNumber>;
421
+ stdoutBufferByteLimit: z.ZodOptional<z.ZodNumber>;
422
+ }, z.core.$strict>>;
423
+ jsRuntime: z.ZodOptional<z.ZodObject<{
424
+ v8HeapLimitMb: z.ZodOptional<z.ZodNumber>;
425
+ syncRpcWaitTimeoutMs: z.ZodOptional<z.ZodNumber>;
426
+ cpuTimeLimitMs: z.ZodOptional<z.ZodNumber>;
427
+ wallClockLimitMs: z.ZodOptional<z.ZodNumber>;
428
+ importCacheMaterializeTimeoutMs: z.ZodOptional<z.ZodNumber>;
429
+ capturedOutputLimitBytes: z.ZodOptional<z.ZodNumber>;
430
+ stdinBufferLimitBytes: z.ZodOptional<z.ZodNumber>;
431
+ eventPayloadLimitBytes: z.ZodOptional<z.ZodNumber>;
432
+ v8IpcMaxFrameBytes: z.ZodOptional<z.ZodNumber>;
433
+ }, z.core.$strict>>;
434
+ python: z.ZodOptional<z.ZodObject<{
435
+ outputBufferMaxBytes: z.ZodOptional<z.ZodNumber>;
436
+ executionTimeoutMs: z.ZodOptional<z.ZodNumber>;
437
+ maxOldSpaceMb: z.ZodOptional<z.ZodNumber>;
438
+ vfsRpcTimeoutMs: z.ZodOptional<z.ZodNumber>;
439
+ }, z.core.$strict>>;
440
+ wasm: z.ZodOptional<z.ZodObject<{
441
+ maxModuleFileBytes: z.ZodOptional<z.ZodNumber>;
442
+ capturedOutputLimitBytes: z.ZodOptional<z.ZodNumber>;
443
+ syncReadLimitBytes: z.ZodOptional<z.ZodNumber>;
444
+ prewarmTimeoutMs: z.ZodOptional<z.ZodNumber>;
445
+ runnerHeapLimitMb: z.ZodOptional<z.ZodNumber>;
446
+ }, z.core.$strict>>;
447
+ }, z.core.$strict>>;
448
+ readonly onAgentStderr: z.ZodOptional<z.ZodCustom<AgentStderrHandler, AgentStderrHandler>>;
449
+ readonly onAgentExit: z.ZodOptional<z.ZodCustom<AgentExitHandler, AgentExitHandler>>;
450
+ readonly onLimitWarning: z.ZodOptional<z.ZodCustom<LimitWarningHandler, LimitWarningHandler>>;
451
+ };
452
+ export declare const agentOsOptionsSchema: z.ZodType<AgentOsOptions>;
453
+ export declare function parseAgentOsOptions(options?: AgentOsOptions): AgentOsOptions;