@rivet-dev/agentos-core 0.0.0-integrate-dylib-into-main.815fcda → 0.0.0-nathan-binding-workspace.dd41c31

package/dist/agents.js

@@ -22,7 +22,7 @@ export const AGENT_CONFIGS = {
         defaultEnv: {
             CLAUDE_AGENT_SDK_CLIENT_APP: "@rivet-dev/agentos",
             CLAUDE_CODE_SIMPLE: "1",
-            CLAUDE_CODE_FORCE_AGENT_OS_RIPGREP: "1",
+            CLAUDE_CODE_FORCE_AGENTOS_RIPGREP: "1",
             CLAUDE_CODE_DEFER_GROWTHBOOK_INIT: "1",
             CLAUDE_CODE_DISABLE_CWD_PERSIST: "1",
             CLAUDE_CODE_DISABLE_DEV_NULL_REDIRECT: "1",

package/dist/{host-tools-zod.d.ts → bindings-zod.d.ts}

@@ -1,5 +1,5 @@
 import type { ZodType } from "zod";
-export declare class HostToolSchemaConversionError extends Error {
+export declare class BindingSchemaConversionError extends Error {
     readonly path: string;
     readonly zodType: string;
     constructor(path: string, zodType: string, details?: string);

package/dist/{host-tools-zod.js → bindings-zod.js}

@@ -14,7 +14,7 @@ const UNSUPPORTED_TYPES = new Set([
     "pipe",
     "tuple",
 ]);
-export class HostToolSchemaConversionError extends Error {
+export class BindingSchemaConversionError extends Error {
     path;
     zodType;
     constructor(path, zodType, details) {
@@ -24,7 +24,7 @@ export class HostToolSchemaConversionError extends Error {
         ]
             .filter(Boolean)
             .join(" "));
-        this.name = "HostToolSchemaConversionError";
+        this.name = "BindingSchemaConversionError";
         this.path = path;
         this.zodType = zodType;
     }
@@ -89,24 +89,24 @@ function isCustomRefinement(check) {
 }
 function validateChecks(schema, path, typeName) {
     if (getChecks(schema).some(isCustomRefinement)) {
-        throw new HostToolSchemaConversionError(path, displayTypeName(typeName), "custom refinements cannot be represented faithfully in JSON Schema");
+        throw new BindingSchemaConversionError(path, displayTypeName(typeName), "custom refinements cannot be represented faithfully in JSON Schema");
     }
 }
 function validateSchema(schema, path) {
     const typeName = normalizeTypeName(schema);
     if (metadataProducesRefs(schema)) {
-        throw new HostToolSchemaConversionError(path, displayTypeName(typeName), "metadata that emits $ref/$defs is not supported");
+        throw new BindingSchemaConversionError(path, displayTypeName(typeName), "metadata that emits $ref/$defs is not supported");
     }
     if (UNSUPPORTED_TYPES.has(typeName)) {
-        throw new HostToolSchemaConversionError(path, displayTypeName(typeName));
+        throw new BindingSchemaConversionError(path, displayTypeName(typeName));
     }
     if (typeName === "discriminatedunion") {
-        throw new HostToolSchemaConversionError(path, displayTypeName(typeName));
+        throw new BindingSchemaConversionError(path, displayTypeName(typeName));
     }
     if (TRANSPARENT_WRAPPER_TYPES.has(typeName)) {
         const inner = getInnerSchema(schema);
         if (!inner) {
-            throw new HostToolSchemaConversionError(path, displayTypeName(typeName), "wrapper schema is missing its inner schema");
+            throw new BindingSchemaConversionError(path, displayTypeName(typeName), "wrapper schema is missing its inner schema");
         }
         validateSchema(inner, path);
         return;
@@ -114,7 +114,7 @@ function validateSchema(schema, path) {
     if (typeName === "nullable") {
         const inner = getInnerSchema(schema);
         if (!inner) {
-            throw new HostToolSchemaConversionError(path, displayTypeName(typeName), "nullable schema is missing its inner schema");
+            throw new BindingSchemaConversionError(path, displayTypeName(typeName), "nullable schema is missing its inner schema");
         }
         validateSchema(inner, path);
         return;
@@ -133,7 +133,7 @@ function validateSchema(schema, path) {
     if (typeName === "array") {
         const itemSchema = getSchemaDef(schema).element;
         if (!itemSchema) {
-            throw new HostToolSchemaConversionError(path, displayTypeName(typeName), "array schema is missing its item schema");
+            throw new BindingSchemaConversionError(path, displayTypeName(typeName), "array schema is missing its item schema");
         }
         validateSchema(itemSchema, `${path}[]`);
         return;
@@ -143,11 +143,11 @@ function validateSchema(schema, path) {
         const keySchema = def.keyType;
         const valueSchema = def.valueType;
         if (!keySchema || !valueSchema) {
-            throw new HostToolSchemaConversionError(path, displayTypeName(typeName), "record schema is missing its key or value schema");
+            throw new BindingSchemaConversionError(path, displayTypeName(typeName), "record schema is missing its key or value schema");
         }
         const keyTypeName = normalizeTypeName(keySchema);
         if (keyTypeName !== "string" || getChecks(keySchema).length > 0) {
-            throw new HostToolSchemaConversionError(path, displayTypeName(typeName), "record keys must be unconstrained strings");
+            throw new BindingSchemaConversionError(path, displayTypeName(typeName), "record keys must be unconstrained strings");
         }
         validateSchema(valueSchema, `${path}<record-value>`);
         return;
@@ -155,7 +155,7 @@ function validateSchema(schema, path) {
     if (typeName === "union") {
         const options = getSchemaDef(schema).options;
         if (!Array.isArray(options) || options.length === 0) {
-            throw new HostToolSchemaConversionError(path, displayTypeName(typeName), "union schema is missing its options");
+            throw new BindingSchemaConversionError(path, displayTypeName(typeName), "union schema is missing its options");
         }
         for (let index = 0; index < options.length; index += 1) {
             validateSchema(options[index], `${path}<union:${index}>`);
@@ -168,7 +168,7 @@ function validateSchema(schema, path) {
         const [literalValue] = literalValues;
         if (literalValues.length !== 1 ||
             !("string number boolean".split(" ").includes(typeof literalValue) || literalValue === null)) {
-            throw new HostToolSchemaConversionError(path, displayTypeName(typeName), "literal values must be JSON primitives");
+            throw new BindingSchemaConversionError(path, displayTypeName(typeName), "literal values must be JSON primitives");
         }
         return;
     }
@@ -179,7 +179,7 @@ function validateSchema(schema, path) {
         typeName === "nativeenum") {
         return;
     }
-    throw new HostToolSchemaConversionError(path, displayTypeName(typeName));
+    throw new BindingSchemaConversionError(path, displayTypeName(typeName));
 }
 function sanitizeJsonSchema(value) {
     if (Array.isArray(value)) {
@@ -229,11 +229,11 @@ export function zodToJsonSchema(schema) {
     validateSchema(schema, "$");
     const jsonSchema = schema.toJSONSchema?.();
     if (!jsonSchema) {
-        throw new HostToolSchemaConversionError("$", displayTypeName(normalizeTypeName(schema)), "schema does not expose toJSONSchema()");
+        throw new BindingSchemaConversionError("$", displayTypeName(normalizeTypeName(schema)), "schema does not expose toJSONSchema()");
     }
     const unsupportedKeyword = findUnsupportedGeneratedKeyword(jsonSchema, "$");
     if (unsupportedKeyword) {
-        throw new HostToolSchemaConversionError("$", displayTypeName(normalizeTypeName(schema)), `${unsupportedKeyword.keyword} emitted at ${unsupportedKeyword.path} is not supported`);
+        throw new BindingSchemaConversionError("$", displayTypeName(normalizeTypeName(schema)), `${unsupportedKeyword.keyword} emitted at ${unsupportedKeyword.path} is not supported`);
     }
     const sanitized = sanitizeJsonSchema(jsonSchema);
     const description = getDescription(schema);

package/dist/bindings.d.ts

@@ -0,0 +1,45 @@
+import type { ZodType } from "zod";
+/** Maximum length for binding and bindings descriptions (characters). */
+export declare const MAX_TOOL_DESCRIPTION_LENGTH = 200;
+/**
+ * A single binding that executes on the host.
+ * Mirrors the shape of AI SDK's tool() but with host-execution semantics.
+ */
+export interface Binding<INPUT = any, OUTPUT = any> {
+    /** Description shown to the agent in --help and prompt docs. Max 200 characters. */
+    description: string;
+    /** Zod schema for the input. Drives CLI flag generation and validation. */
+    inputSchema: ZodType<INPUT>;
+    /** Runs on the host when the agent invokes the binding. */
+    execute: (input: INPUT) => Promise<OUTPUT> | OUTPUT;
+    /** Examples included in auto-generated prompt docs. */
+    examples?: ToolExample<INPUT>[];
+    /** Timeout in ms. Default: 30000. */
+    timeout?: number;
+}
+export interface ToolExample<INPUT = any> {
+    /** Human description of what this example does. */
+    description: string;
+    /** The input args for the example. */
+    input: INPUT;
+}
+/**
+ * A named group of bindings. Becomes a CLI binary: agentos-{name}.
+ */
+export interface Bindings {
+    /** Bindings name. Must be lowercase alphanumeric + hyphens. Becomes the CLI suffix: agentos-{name}. */
+    name: string;
+    /** Description shown in `agentos list-tools` and prompt docs. */
+    description: string;
+    /** The bindings in this group. Keys become subcommands. */
+    bindings: Record<string, Binding>;
+}
+/** Helper to create a Binding with type inference. */
+export declare function binding<INPUT, OUTPUT>(def: Binding<INPUT, OUTPUT>): Binding<INPUT, OUTPUT>;
+/** Helper to create a Bindings group. */
+export declare function bindings(def: Bindings): Bindings;
+/**
+ * Validate all description lengths in the given bindings groups.
+ * Throws if any group or binding description exceeds MAX_TOOL_DESCRIPTION_LENGTH.
+ */
+export declare function validateBindings(bindingGroups: Bindings[]): void;

package/dist/bindings.js

@@ -0,0 +1,26 @@
+/** Maximum length for binding and bindings descriptions (characters). */
+export const MAX_TOOL_DESCRIPTION_LENGTH = 200;
+/** Helper to create a Binding with type inference. */
+export function binding(def) {
+    return def;
+}
+/** Helper to create a Bindings group. */
+export function bindings(def) {
+    return def;
+}
+/**
+ * Validate all description lengths in the given bindings groups.
+ * Throws if any group or binding description exceeds MAX_TOOL_DESCRIPTION_LENGTH.
+ */
+export function validateBindings(bindingGroups) {
+    for (const tk of bindingGroups) {
+        if (tk.description.length > MAX_TOOL_DESCRIPTION_LENGTH) {
+            throw new Error(`Bindings "${tk.name}" description is ${tk.description.length} characters, max is ${MAX_TOOL_DESCRIPTION_LENGTH}`);
+        }
+        for (const [bindingName, binding] of Object.entries(tk.bindings)) {
+            if (binding.description.length > MAX_TOOL_DESCRIPTION_LENGTH) {
+                throw new Error(`Binding "${tk.name}/${bindingName}" description is ${binding.description.length} characters, max is ${MAX_TOOL_DESCRIPTION_LENGTH}`);
+            }
+        }
+    }
+}

package/dist/cron/cron-manager.d.ts

@@ -1,8 +1,8 @@
-import type { AgentOs } from "../agent-os.js";
+import type { AgentOS } from "../agentos.js";
 import type { ScheduleDriver } from "./schedule-driver.js";
 import type { CronEventHandler, CronJob, CronJobInfo, CronJobOptions } from "./types.js";
 /**
- * Internal class that bridges ScheduleDriver and AgentOs. Owns the job
+ * Internal class that bridges ScheduleDriver and AgentOS. Owns the job
  * registry, executes actions, and emits lifecycle events.
  */
 export declare class CronManager {
@@ -10,7 +10,7 @@ export declare class CronManager {
     private driver;
     private vm;
     private listeners;
-    constructor(vm: AgentOs, driver: ScheduleDriver);
+    constructor(vm: AgentOS, driver: ScheduleDriver);
     schedule(options: CronJobOptions): CronJob;
     cancel(id: string): void;
     list(): CronJobInfo[];

package/dist/cron/cron-manager.js

@@ -9,7 +9,7 @@ function computeNextTime(schedule) {
     return resolveSchedule(schedule).nextRun;
 }
 /**
- * Internal class that bridges ScheduleDriver and AgentOs. Owns the job
+ * Internal class that bridges ScheduleDriver and AgentOS. Owns the job
  * registry, executes actions, and emits lifecycle events.
  */
 export class CronManager {

package/dist/cron/types.d.ts

@@ -1,4 +1,4 @@
-import type { CreateSessionOptions } from "../agent-os.js";
+import type { CreateSessionOptions } from "../agentos.js";
 import type { AgentType } from "../agents.js";
 export type CronAction = {
     type: "session";

package/dist/host-dir-mount.d.ts

@@ -16,7 +16,7 @@ export interface HostDirMountPluginConfig extends MountConfigJsonObject {
  * mounts through the native `host_dir` plugin instead of a JS VFS backend.
  */
 export declare function createHostDirBackend(options: HostDirBackendOptions): NativeMountPluginDescriptor<HostDirMountPluginConfig>;
-/** A native `host_dir` mount, the serializable form `AgentOsOptions.mounts` accepts. */
+/** A native `host_dir` mount, the serializable form `AgentOSOptions.mounts` accepts. */
 export interface NodeModulesMountConfig {
     path: string;
     plugin: NativeMountPluginDescriptor<HostDirMountPluginConfig>;

package/dist/index.d.ts

@@ -1,10 +1,10 @@
-export { AgentOs, AgentOsSidecar } from "./agent-os.js";
+export { AgentOS, AgentOSSidecar } from "./agentos.js";
 export { AGENT_CONFIGS } from "./agents.js";
 export { CronManager, InvalidScheduleError, PastScheduleError, TimerScheduleDriver, } from "./cron/index.js";
 export { createHostDirBackend, nodeModulesMount } from "./host-dir-mount.js";
-export { hostTool, MAX_TOOL_DESCRIPTION_LENGTH, toolKit, validateToolkits, } from "./host-tools.js";
+export { binding, bindings, MAX_TOOL_DESCRIPTION_LENGTH, validateBindings, } from "./bindings.js";
 export { createInMemoryLayerStore, createSnapshotExport, } from "./layers.js";
 export { defineSoftware } from "./packages.js";
-export { isAcpTimeoutErrorData, isUnknownSessionErrorData, } from "./json-rpc.js";
+export { isAcpTimeoutErrorData } from "./json-rpc.js";
 export { createInMemoryFileSystem, KernelError } from "./runtime-compat.js";
 export type * from "./types.js";

package/dist/index.js

@@ -1,10 +1,10 @@
 // @rivet-dev/agentos
-export { AgentOs, AgentOsSidecar } from "./agent-os.js";
+export { AgentOS, AgentOSSidecar } from "./agentos.js";
 export { AGENT_CONFIGS } from "./agents.js";
 export { CronManager, InvalidScheduleError, PastScheduleError, TimerScheduleDriver, } from "./cron/index.js";
 export { createHostDirBackend, nodeModulesMount } from "./host-dir-mount.js";
-export { hostTool, MAX_TOOL_DESCRIPTION_LENGTH, toolKit, validateToolkits, } from "./host-tools.js";
+export { binding, bindings, MAX_TOOL_DESCRIPTION_LENGTH, validateBindings, } from "./bindings.js";
 export { createInMemoryLayerStore, createSnapshotExport, } from "./layers.js";
 export { defineSoftware } from "./packages.js";
-export { isAcpTimeoutErrorData, isUnknownSessionErrorData, } from "./json-rpc.js";
+export { isAcpTimeoutErrorData } from "./json-rpc.js";
 export { createInMemoryFileSystem, KernelError } from "./runtime-compat.js";

package/dist/json-rpc.d.ts

@@ -8,22 +8,7 @@ export interface AcpTimeoutErrorData {
     transportState?: string;
     recentActivity: string[];
 }
-/**
- * Structured error payload meaning "the session id is not known to the agent" —
- * e.g. a `session/load` / `session/resume` against a session whose on-disk store did
- * not survive a VM teardown. The sidecar normalizes the adapter's native error into
- * this shape so the resume orchestration can distinguish "fall through to a fresh
- * session" from a transport/timeout error (which must propagate). Mirrors the
- * `acp_timeout` convention.
- */
-export interface UnknownSessionErrorData {
-    kind: "unknown_session";
-    /** Optional metadata. The discriminator is `kind` alone — the sidecar's
-     * normalized error carries only `kind`, so this stays optional to keep the
-     * sidecar and client contracts aligned. */
-    sessionId?: string;
-}
-export type JsonRpcErrorData = AcpTimeoutErrorData | UnknownSessionErrorData | Record<string, unknown>;
+export type JsonRpcErrorData = AcpTimeoutErrorData | Record<string, unknown>;
 export interface JsonRpcRequest {
     jsonrpc: "2.0";
     id: number | string | null;
@@ -47,4 +32,3 @@ export interface JsonRpcNotification {
     params?: unknown;
 }
 export declare function isAcpTimeoutErrorData(value: unknown): value is AcpTimeoutErrorData;
-export declare function isUnknownSessionErrorData(value: unknown): value is UnknownSessionErrorData;

package/dist/json-rpc.js

@@ -12,11 +12,3 @@ export function isAcpTimeoutErrorData(value) {
         Array.isArray(record.recentActivity) &&
         record.recentActivity.every((entry) => typeof entry === "string"));
 }
-export function isUnknownSessionErrorData(value) {
-    if (!value || typeof value !== "object" || Array.isArray(value)) {
-        return false;
-    }
-    const record = value;
-    return (record.kind === "unknown_session" &&
-        (record.sessionId === undefined || typeof record.sessionId === "string"));
-}

package/dist/packages.js

@@ -319,7 +319,7 @@ export function processSoftware(software) {
                     const vmDir = `/root/node_modules/${reqPkg}`;
                     pushPackageSoftwareRoot(softwareRoots, seenSoftwareVmPaths, hostDir, vmDir);
                 }
-                // Tool bin registration is handled by the caller (AgentOs.create)
+                // Tool bin registration is handled by the caller (AgentOS.create)
                 // since it requires kernel access.
                 break;
             }

package/dist/runtime-compat.d.ts

@@ -81,7 +81,7 @@ export type NetworkPermissions = PermissionMode | RulePermissions<PatternPermiss
 export type ChildProcessPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
 export type ProcessPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
 export type EnvPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
-export type ToolPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
+export type BindingPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
 export interface ProcessInfo {
     pid: number;
     ppid: number;
@@ -168,7 +168,7 @@ export interface Permissions {
     childProcess?: ChildProcessPermissions;
     process?: ProcessPermissions;
     env?: EnvPermissions;
-    tool?: ToolPermissions;
+    binding?: BindingPermissions;
 }
 export interface ResourceBudgets {
     maxOutputBytes?: number;

package/dist/runtime-compat.js

@@ -7,7 +7,7 @@ import { fileURLToPath } from "node:url";
 import { resolvePublishedSidecarBinary } from "./sidecar/binary.js";
 import { findCargoBinary, resolveCargoBinary } from "./sidecar/cargo.js";
 import { serializePermissionsForSidecar } from "./sidecar/permissions.js";
-import { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, NativeSidecarKernelProxy, SidecarProcess, serializeMountConfigForSidecar, } from "./sidecar/rpc-client.js";
+import { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, NativeSidecarKernelProxy, NativeSidecarProcessClient, serializeMountConfigForSidecar, } from "./sidecar/rpc-client.js";
 export const AF_INET = 2;
 export const AF_UNIX = 1;
 export const SOCK_STREAM = 1;
@@ -37,6 +37,7 @@ const KERNEL_POSIX_BOOTSTRAP_DIRS = [
     "/media",
     "/home",
     "/home/user",
+    "/workspace",
     "/usr",
     "/usr/bin",
     "/usr/games",
@@ -1632,7 +1633,7 @@ class NativeKernel {
     constructor(options) {
         this.options = options;
         this.env = { ...(options.env ?? {}) };
-        this.cwd = options.cwd ?? "/home/user";
+        this.cwd = options.cwd ?? "/workspace";
         this.socketTable = {
             hasHostNetworkAdapter: () => Boolean(options.hostNetworkAdapter),
             findListener: (request) => this.proxy?.findListener(request) ?? null,
@@ -1902,7 +1903,7 @@ class NativeKernel {
         const requestedPermissions = this.options.permissions;
         const bootstrapPermissions = requestedPermissions ? allowAll : undefined;
         if (this.loopbackExemptPorts.length > 0) {
-            createVmEnv.AGENT_OS_LOOPBACK_EXEMPT_PORTS = JSON.stringify(this.loopbackExemptPorts);
+            createVmEnv.AGENTOS_LOOPBACK_EXEMPT_PORTS = JSON.stringify(this.loopbackExemptPorts);
         }
         const rootPassthroughPlan = planNodeFilesystemPassthroughMounts(this.options.filesystem, this.pendingLocalMounts);
         const snapshotEntries = await snapshotFilesystemEntries(this.options.filesystem, "/", [], {
@@ -1921,7 +1922,7 @@ class NativeKernel {
             ],
             bootstrapEntries: [],
         };
-        const client = SidecarProcess.spawn({
+        const client = NativeSidecarProcessClient.spawn({
             cwd: REPO_ROOT,
             command: ensureNativeSidecarBinary(),
             args: [],
@@ -1987,7 +1988,7 @@ class NativeKernel {
             vm,
             env: this.env,
             cwd: this.cwd,
-            defaultExecCwd: this.options.cwd === undefined ? "/home/user" : this.cwd,
+            defaultExecCwd: this.options.cwd === undefined ? "/workspace" : this.cwd,
             localMounts: this.pendingLocalMounts,
             commandGuestPaths: new Map(),
             onWasmCommandResolved: (command) => {

package/dist/runtime.d.ts

@@ -76,7 +76,7 @@ export type NetworkPermissions = PermissionMode | RulePermissions<PatternPermiss
 export type ChildProcessPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
 export type ProcessPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
 export type EnvPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
-export type ToolPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
+export type BindingPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
 export interface ProcessInfo {
     pid: number;
     ppid: number;
@@ -163,7 +163,7 @@ export interface Permissions {
     childProcess?: ChildProcessPermissions;
     process?: ProcessPermissions;
     env?: EnvPermissions;
-    tool?: ToolPermissions;
+    binding?: BindingPermissions;
 }
 export interface ResourceBudgets {
     maxOutputBytes?: number;

package/dist/sidecar/agentos-protocol.d.ts

@@ -43,23 +43,6 @@ export type AcpCloseSessionRequest = {
 };
 export declare function readAcpCloseSessionRequest(bc: bare.ByteCursor): AcpCloseSessionRequest;
 export declare function writeAcpCloseSessionRequest(bc: bare.ByteCursor, x: AcpCloseSessionRequest): void;
-/**
- * Resume a session that exists in durable storage but is not live in the current
- * VM (e.g. after a Rivet actor slept and woke with a fresh VM). The sidecar runs
- * the stateless resume state machine (native session/load when the agent supports
- * it, else a fresh session/new + transcript continuation preamble). `cwd`/`env`
- * describe the fresh adapter launch used by the fallback tier. `transcriptPath`,
- * when present, is a guest-readable path the fallback preamble points the agent at.
- */
-export type AcpResumeSessionRequest = {
-    readonly sessionId: string;
-    readonly agentType: string;
-    readonly transcriptPath: string | null;
-    readonly cwd: string;
-    readonly env: ReadonlyMap<string, string>;
-};
-export declare function readAcpResumeSessionRequest(bc: bare.ByteCursor): AcpResumeSessionRequest;
-export declare function writeAcpResumeSessionRequest(bc: bare.ByteCursor, x: AcpResumeSessionRequest): void;
 export type AcpRequest = {
     readonly tag: "AcpCreateSessionRequest";
     readonly val: AcpCreateSessionRequest;
@@ -72,9 +55,6 @@ export type AcpRequest = {
 } | {
     readonly tag: "AcpCloseSessionRequest";
     readonly val: AcpCloseSessionRequest;
-} | {
-    readonly tag: "AcpResumeSessionRequest";
-    readonly val: AcpResumeSessionRequest;
 };
 export declare function readAcpRequest(bc: bare.ByteCursor): AcpRequest;
 export declare function writeAcpRequest(bc: bare.ByteCursor, x: AcpRequest): void;
@@ -115,19 +95,6 @@ export type AcpSessionClosedResponse = {
 };
 export declare function readAcpSessionClosedResponse(bc: bare.ByteCursor): AcpSessionClosedResponse;
 export declare function writeAcpSessionClosedResponse(bc: bare.ByteCursor, x: AcpSessionClosedResponse): void;
-/**
- * Result of AcpResumeSessionRequest. `sessionId` is the live ACP session id after
- * resume: equal to the requested id for native loads, or the freshly assigned id
- * for the fallback tier (the caller remaps external -> live). `mode` is "native"
- * (session/load|resume succeeded) or "fallback" (a new session was created and the
- * transcript-continuation preamble was armed for the next prompt).
- */
-export type AcpSessionResumedResponse = {
-    readonly sessionId: string;
-    readonly mode: string;
-};
-export declare function readAcpSessionResumedResponse(bc: bare.ByteCursor): AcpSessionResumedResponse;
-export declare function writeAcpSessionResumedResponse(bc: bare.ByteCursor, x: AcpSessionResumedResponse): void;
 export type AcpErrorResponse = {
     readonly code: string;
     readonly message: string;
@@ -146,9 +113,6 @@ export type AcpResponse = {
 } | {
     readonly tag: "AcpSessionClosedResponse";
     readonly val: AcpSessionClosedResponse;
-} | {
-    readonly tag: "AcpSessionResumedResponse";
-    readonly val: AcpSessionResumedResponse;
 } | {
     readonly tag: "AcpErrorResponse";
     readonly val: AcpErrorResponse;

package/dist/sidecar/agentos-protocol.js

@@ -157,22 +157,6 @@ export function readAcpCloseSessionRequest(bc) {
 export function writeAcpCloseSessionRequest(bc, x) {
     bare.writeString(bc, x.sessionId);
 }
-export function readAcpResumeSessionRequest(bc) {
-    return {
-        sessionId: bare.readString(bc),
-        agentType: bare.readString(bc),
-        transcriptPath: read2(bc),
-        cwd: bare.readString(bc),
-        env: read1(bc),
-    };
-}
-export function writeAcpResumeSessionRequest(bc, x) {
-    bare.writeString(bc, x.sessionId);
-    bare.writeString(bc, x.agentType);
-    write2(bc, x.transcriptPath);
-    bare.writeString(bc, x.cwd);
-    write1(bc, x.env);
-}
 export function readAcpRequest(bc) {
     const offset = bc.offset;
     const tag = bare.readU8(bc);
@@ -185,8 +169,6 @@ export function readAcpRequest(bc) {
             return { tag: "AcpGetSessionStateRequest", val: readAcpGetSessionStateRequest(bc) };
         case 3:
             return { tag: "AcpCloseSessionRequest", val: readAcpCloseSessionRequest(bc) };
-        case 4:
-            return { tag: "AcpResumeSessionRequest", val: readAcpResumeSessionRequest(bc) };
         default: {
             bc.offset = offset;
             throw new bare.BareError(offset, "invalid tag");
@@ -215,11 +197,6 @@ export function writeAcpRequest(bc, x) {
             writeAcpCloseSessionRequest(bc, x.val);
             break;
         }
-        case "AcpResumeSessionRequest": {
-            bare.writeU8(bc, 4);
-            writeAcpResumeSessionRequest(bc, x.val);
-            break;
-        }
     }
 }
 export function encodeAcpRequest(x, config) {
@@ -333,16 +310,6 @@ export function readAcpSessionClosedResponse(bc) {
 export function writeAcpSessionClosedResponse(bc, x) {
     bare.writeString(bc, x.sessionId);
 }
-export function readAcpSessionResumedResponse(bc) {
-    return {
-        sessionId: bare.readString(bc),
-        mode: bare.readString(bc),
-    };
-}
-export function writeAcpSessionResumedResponse(bc, x) {
-    bare.writeString(bc, x.sessionId);
-    bare.writeString(bc, x.mode);
-}
 export function readAcpErrorResponse(bc) {
     return {
         code: bare.readString(bc),
@@ -366,8 +333,6 @@ export function readAcpResponse(bc) {
         case 3:
             return { tag: "AcpSessionClosedResponse", val: readAcpSessionClosedResponse(bc) };
         case 4:
-            return { tag: "AcpSessionResumedResponse", val: readAcpSessionResumedResponse(bc) };
-        case 5:
             return { tag: "AcpErrorResponse", val: readAcpErrorResponse(bc) };
         default: {
             bc.offset = offset;
@@ -397,13 +362,8 @@ export function writeAcpResponse(bc, x) {
             writeAcpSessionClosedResponse(bc, x.val);
             break;
         }
-        case "AcpSessionResumedResponse": {
-            bare.writeU8(bc, 4);
-            writeAcpSessionResumedResponse(bc, x.val);
-            break;
-        }
         case "AcpErrorResponse": {
-            bare.writeU8(bc, 5);
+            bare.writeU8(bc, 4);
             writeAcpErrorResponse(bc, x.val);
             break;
         }

package/dist/sidecar/native-process-client.d.ts

@@ -1,2 +1,3 @@
-export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, NativeSidecarProcessClient as SidecarProcess, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "@secure-exec/core/sidecar-client";
-export type { AuthenticatedSession, CreatedVm, ExtEnvelope, GuestFilesystemStat, NativeSidecarSpawnOptions as SidecarSpawnOptions, RootFilesystemEntry, RootFilesystemLowerDescriptor, SidecarEventSelector, SidecarFsPermissionRule, SidecarMountDescriptor, SidecarMountPluginDescriptor, SidecarPatternPermissionRule, SidecarPermissionMode, SidecarPermissionScope, SidecarPermissionsPolicy, SidecarProcessSnapshotEntry, SidecarProjectedModuleDescriptor, SidecarRegisteredHostCallbackDefinition, SidecarRegisteredHostCallbackExample, SidecarRequestFrame, SidecarRequestHandler, SidecarRequestPayload, SidecarResponseFrame, SidecarResponsePayload, SidecarRulePermissions, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSignalState, SidecarSocketStateEntry, SidecarSoftwareDescriptor, SidecarZombieTimerCount, } from "@secure-exec/core/sidecar-client";
+import "@secure-exec/core/native-client";
+export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, SidecarProcess as NativeSidecarProcessClient, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "@secure-exec/core/sidecar-client";
+export type { AuthenticatedSession, CreatedVm, ExtEnvelope, GuestFilesystemStat, RootFilesystemEntry, RootFilesystemLowerDescriptor, SidecarSpawnOptions as NativeSidecarSpawnOptions, SidecarEventSelector, SidecarFsPermissionRule, SidecarMountDescriptor, SidecarMountPluginDescriptor, SidecarPatternPermissionRule, SidecarPermissionMode, SidecarPermissionScope, SidecarPermissionsPolicy, SidecarProcessSnapshotEntry, SidecarProjectedModuleDescriptor, SidecarRegisteredHostCallbackDefinition, SidecarRegisteredHostCallbackExample, SidecarRequestFrame, SidecarRequestHandler, SidecarRequestPayload, SidecarResponseFrame, SidecarResponsePayload, SidecarRulePermissions, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSignalState, SidecarSocketStateEntry, SidecarSoftwareDescriptor, SidecarZombieTimerCount, } from "@secure-exec/core/sidecar-client";

package/dist/sidecar/native-process-client.js

@@ -1 +1,6 @@
-export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, NativeSidecarProcessClient as SidecarProcess, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "@secure-exec/core/sidecar-client";
+// Register the native sidecar spawn factory (side effect). After the
+// @secure-exec/core SidecarProcess refactor, native spawn is provided by a
+// separately-registered factory; importing native-client wires it up so
+// SidecarProcess.spawn works in this native runtime.
+import "@secure-exec/core/native-client";
+export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, SidecarProcess as NativeSidecarProcessClient, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "@secure-exec/core/sidecar-client";

package/dist/sidecar/permissions.js

@@ -28,7 +28,7 @@ export function serializePermissionsForSidecar(permissions) {
             childProcess: "deny",
             process: "deny",
             env: "deny",
-            tool: "deny",
+            binding: "deny",
         };
     }
     return {
@@ -47,8 +47,8 @@ export function serializePermissionsForSidecar(permissions) {
         env: typeof permissions.env === "string" || !permissions.env
             ? permissions.env
             : serializePatternScope(permissions.env),
-        tool: typeof permissions.tool === "string" || !permissions.tool
-            ? permissions.tool
-            : serializePatternScope(permissions.tool),
+        binding: typeof permissions.binding === "string" || !permissions.binding
+            ? permissions.binding
+            : serializePatternScope(permissions.binding),
     };
 }

package/dist/sidecar/process.d.ts

@@ -1,6 +1,6 @@
-import { SidecarProcess, type SidecarSpawnOptions } from "./native-process-client.js";
-export interface AgentOsSidecarProcessHandle {
-    client: SidecarProcess;
+import { NativeSidecarProcessClient, type NativeSidecarSpawnOptions } from "./native-process-client.js";
+export interface AgentOSSidecarProcessHandle {
+    client: NativeSidecarProcessClient;
     dispose(): Promise<void>;
 }
-export declare function spawnAgentOsSidecar(options: SidecarSpawnOptions): AgentOsSidecarProcessHandle;
+export declare function spawnAgentOSSidecar(options: NativeSidecarSpawnOptions): AgentOSSidecarProcessHandle;

package/dist/sidecar/process.js

@@ -1,6 +1,6 @@
-import { SidecarProcess, } from "./native-process-client.js";
-export function spawnAgentOsSidecar(options) {
-    const client = SidecarProcess.spawn(options);
+import { NativeSidecarProcessClient, } from "./native-process-client.js";
+export function spawnAgentOSSidecar(options) {
+    const client = NativeSidecarProcessClient.spawn(options);
     return {
         client,
         dispose: () => client.dispose(),