@rivet-dev/agentos-core 0.0.0-main.29b0797 → 0.0.0-main.5ac5a14

package/dist/sandbox.js

@@ -241,24 +241,37 @@ export async function resolveSandboxOptions(options) {
         return rest;
     }
     const normalizedSandbox = await normalizeSandboxInput(sandbox);
-    const sandboxOptions = normalizedSandbox.options;
-    const expanded = rest;
-    const mountPath = sandboxOptions.mountPath ?? "/mnt/sandbox";
-    const mounts = [
-        ...(expanded.mounts ?? []),
-        {
-            path: mountPath,
-            plugin: createSandboxFs(sandboxOptions),
-            readOnly: sandboxOptions.readOnly,
-        },
-    ];
-    const bindings = [
-        ...(expanded.bindings ?? []),
-        createSandboxBindings(sandboxOptions),
-    ];
-    return attachSandboxDisposeHooks({
-        ...expanded,
-        mounts,
-        bindings,
-    }, normalizedSandbox.dispose ? [normalizedSandbox.dispose] : []);
+    try {
+        const sandboxOptions = normalizedSandbox.options;
+        const expanded = rest;
+        const mountPath = sandboxOptions.mountPath ?? "/mnt/sandbox";
+        const mounts = [
+            ...(expanded.mounts ?? []),
+            {
+                path: mountPath,
+                plugin: createSandboxFs(sandboxOptions),
+                readOnly: sandboxOptions.readOnly,
+            },
+        ];
+        const bindings = [
+            ...(expanded.bindings ?? []),
+            createSandboxBindings(sandboxOptions),
+        ];
+        return attachSandboxDisposeHooks({
+            ...expanded,
+            mounts,
+            bindings,
+        }, normalizedSandbox.dispose ? [normalizedSandbox.dispose] : []);
+    }
+    catch (error) {
+        if (!normalizedSandbox.dispose)
+            throw error;
+        try {
+            await normalizedSandbox.dispose();
+        }
+        catch (disposeError) {
+            throw new AggregateError([error, disposeError], "Sandbox configuration and cleanup failed");
+        }
+        throw error;
+    }
 }

package/dist/sidecar/agentos-protocol.d.ts

@@ -23,6 +23,7 @@ export type AcpCreateSessionRequest = {
     readonly agentType: string;
     readonly runtime: AcpRuntimeKind;
     readonly cwd: string;
+    readonly additionalDirectories: readonly string[];
     readonly args: readonly string[];
     readonly env: ReadonlyMap<string, string>;
     readonly protocolVersion: i32;
@@ -235,15 +236,19 @@ export declare function writeAcpCloseSessionRequest(bc: bare.ByteCursor, x: AcpC
  * Resume a session that exists in durable storage but is not live in the current
  * VM (e.g. after a Rivet actor slept and woke with a fresh VM). The sidecar runs
  * the stateless resume state machine (native session/load when the agent supports
- * it, else a fresh session/new + transcript continuation preamble). `cwd`/`env`
- * describe the fresh adapter launch used by the fallback tier. `transcriptPath`,
- * when present, is a guest-readable path the fallback preamble points the agent at.
+ * it, else a fresh session/new + transcript continuation preamble). `runtime`,
+ * `cwd`, and `env` describe the fresh adapter launch used by the fallback tier.
+ * `transcriptPath`, when present, is a guest-readable path the fallback preamble
+ * points the agent at.
  */
 export type AcpResumeSessionRequest = {
     readonly sessionId: string;
     readonly agentType: string;
+    readonly runtime: AcpRuntimeKind;
     readonly transcriptPath: string | null;
     readonly cwd: string;
+    readonly additionalDirectories: readonly string[];
+    readonly mcpServers: JsonUtf8;
     readonly env: ReadonlyMap<string, string>;
 };
 export declare function readAcpResumeSessionRequest(bc: bare.ByteCursor): AcpResumeSessionRequest;
@@ -475,6 +480,12 @@ export declare function writeAcpSessionCreatedResponse(bc: bare.ByteCursor, x: A
 export type AcpSessionRpcResponse = {
     readonly sessionId: string;
     readonly response: JsonUtf8;
+    /**
+     * Number of request-scoped AcpSessionEvent frames emitted before this
+     * terminal response. Clients use this as an event-delivery barrier because
+     * response and event frames travel on separate priority lanes.
+     */
+    readonly eventCount: u32;
 };
 export declare function readAcpSessionRpcResponse(bc: bare.ByteCursor): AcpSessionRpcResponse;
 export declare function writeAcpSessionRpcResponse(bc: bare.ByteCursor, x: AcpSessionRpcResponse): void;

package/dist/sidecar/agentos-protocol.js

@@ -97,6 +97,7 @@ export function readAcpCreateSessionRequest(bc) {
         agentType: bare.readString(bc),
         runtime: readAcpRuntimeKind(bc),
         cwd: bare.readString(bc),
+        additionalDirectories: read0(bc),
         args: read0(bc),
         env: read1(bc),
         protocolVersion: bare.readI32(bc),
@@ -110,6 +111,7 @@ export function writeAcpCreateSessionRequest(bc, x) {
     bare.writeString(bc, x.agentType);
     writeAcpRuntimeKind(bc, x.runtime);
     bare.writeString(bc, x.cwd);
+    write0(bc, x.additionalDirectories);
     write0(bc, x.args);
     write1(bc, x.env);
     bare.writeI32(bc, x.protocolVersion);
@@ -371,16 +373,22 @@ export function readAcpResumeSessionRequest(bc) {
     return {
         sessionId: bare.readString(bc),
         agentType: bare.readString(bc),
+        runtime: readAcpRuntimeKind(bc),
         transcriptPath: read2(bc),
         cwd: bare.readString(bc),
+        additionalDirectories: read0(bc),
+        mcpServers: readJsonUtf8(bc),
         env: read1(bc),
     };
 }
 export function writeAcpResumeSessionRequest(bc, x) {
     bare.writeString(bc, x.sessionId);
     bare.writeString(bc, x.agentType);
+    writeAcpRuntimeKind(bc, x.runtime);
     write2(bc, x.transcriptPath);
     bare.writeString(bc, x.cwd);
+    write0(bc, x.additionalDirectories);
+    writeJsonUtf8(bc, x.mcpServers);
     write1(bc, x.env);
 }
 export function readAcpDeliverAgentOutputRequest(bc) {
@@ -851,11 +859,13 @@ export function readAcpSessionRpcResponse(bc) {
     return {
         sessionId: bare.readString(bc),
         response: readJsonUtf8(bc),
+        eventCount: bare.readU32(bc),
     };
 }
 export function writeAcpSessionRpcResponse(bc, x) {
     bare.writeString(bc, x.sessionId);
     writeJsonUtf8(bc, x.response);
+    bare.writeU32(bc, x.eventCount);
 }
 function read11(bc) {
     return bare.readBool(bc) ? bare.readI32(bc) : null;

package/dist/sidecar/rpc-client.d.ts

@@ -183,6 +183,7 @@ export declare class NativeSidecarKernelProxy {
         port?: number;
     }): KernelSocketSnapshot | null;
     getSignalState(pid: number): KernelSignalState;
+    private scheduleSignalStateRefresh;
     private refreshSocketLookup;
     private refreshSignalState;
     private refreshProcessSnapshot;

package/dist/sidecar/rpc-client.js

@@ -361,16 +361,16 @@ export class NativeSidecarKernelProxy {
         const parsedCommand = parseSimpleExecCommand(command);
         const runAndCapture = async (proc, stdinOverride, readExitCode) => {
             if (stdinOverride !== undefined) {
-                proc.writeStdin(stdinOverride);
+                await proc.writeStdin(stdinOverride);
             }
             else if (options?.stdin !== undefined) {
-                proc.writeStdin(options.stdin);
+                await proc.writeStdin(options.stdin);
             }
             // `kernel.exec()` is a non-interactive run-to-completion API: when the
             // caller does not opt into a streaming stdin handle, the guest process
             // should observe EOF after any provided input so commands like
             // `node -e ...` do not linger behind an inherited open stdin pipe.
-            proc.closeStdin();
+            await proc.closeStdin();
             const waitPromise = proc.wait();
             const shellExitCode = typeof options?.timeout === "number"
                 ? await new Promise((resolve) => {
@@ -438,9 +438,9 @@ export class NativeSidecarKernelProxy {
         const effectiveCwd = options?.cwd ?? this.defaultExecCwd ?? this.cwd;
         const runAndCapture = async (proc) => {
             if (options?.stdin !== undefined) {
-                proc.writeStdin(options.stdin);
+                await proc.writeStdin(options.stdin);
             }
-            proc.closeStdin();
+            await proc.closeStdin();
             const waitPromise = proc.wait();
             const exitCode = typeof options?.timeout === "number"
                 ? await new Promise((resolve) => {
@@ -524,9 +524,9 @@ export class NativeSidecarKernelProxy {
             rejectWait,
             onStdout: new Set(options?.onStdout ? [options.onStdout] : []),
             onStderr: new Set(options?.onStderr ? [options.onStderr] : []),
-            pendingStdin: [],
+            pendingStdin: options?.stdin === undefined ? [] : [options.stdin],
             stdinFlushPromise: null,
-            pendingCloseStdin: false,
+            pendingCloseStdin: !options?.streamStdin,
             pendingKillSignal: null,
             waitWithFallbackPromise: null,
             hostExitObservedAt: null,
@@ -1001,7 +1001,9 @@ export class NativeSidecarKernelProxy {
             });
         const restoreRawMode = stdin.isTTY && typeof stdin.setRawMode === "function";
         const onStdinData = (data) => {
-            shell.write(data);
+            void shell.write(data).catch((error) => {
+                console.error("[agentos] failed to forward terminal stdin:", error);
+            });
         };
         const onResize = () => {
             shell.resize(stdout.columns, stdout.rows);
@@ -1265,11 +1267,17 @@ export class NativeSidecarKernelProxy {
     }
     getSignalState(pid) {
         const entry = this.trackedProcesses.get(pid);
-        if (entry && !this.signalRefreshes.has(pid)) {
-            this.signalRefreshes.set(pid, this.refreshSignalState(entry));
-        }
+        if (entry)
+            this.scheduleSignalStateRefresh(entry);
         return this.signalStates.get(pid) ?? { handlers: new Map() };
     }
+    scheduleSignalStateRefresh(entry) {
+        if (this.signalRefreshes.has(entry.pid))
+            return;
+        const refresh = this.refreshSignalState(entry);
+        this.signalRefreshes.set(entry.pid, refresh);
+        void refresh.catch(() => { });
+    }
     async refreshSocketLookup(cache, key, lookup) {
         try {
             const socket = await lookup();
@@ -1361,7 +1369,11 @@ export class NativeSidecarKernelProxy {
         entry.started = true;
         this.updateTrackedProcessSnapshot(entry);
         void this.refreshProcessSnapshot().catch(() => { });
-        await this.refreshSignalState(entry);
+        // Signal metadata is advisory and must not hold process startup behind a
+        // second sidecar RPC. Very short binding commands can finish while the
+        // original execute response is still in flight; synchronously refreshing
+        // here creates a circular wait with their output/exit delivery.
+        this.scheduleSignalStateRefresh(entry);
         void this.flushPendingStdin(entry).catch((error) => {
             this.handleBackgroundProcessError(entry, error);
         });
@@ -1389,10 +1401,7 @@ export class NativeSidecarKernelProxy {
                     }
                     entry.outputGeneration += 1;
                     void this.refreshProcessSnapshot().catch(() => { });
-                    if (!this.signalRefreshes.has(entry.pid)) {
-                        this.signalRefreshes.set(entry.pid, this.refreshSignalState(entry));
-                        await this.signalRefreshes.get(entry.pid);
-                    }
+                    this.scheduleSignalStateRefresh(entry);
                     const chunk = event.payload.chunk;
                     const listeners = event.payload.channel === "stdout"
                         ? entry.onStdout

package/dist/types.d.ts

@@ -1,4 +1,5 @@
-export type { AgentOsCreateSidecarOptions, AgentOsLimits, AgentOsOptions, AgentOsSharedSidecarOptions, AgentOsSidecarConfig, AgentOsSidecarDescription, AgentExitEvent, AgentExitHandler, AgentRestartOutcome, AgentStderrEvent, AgentStderrHandler, AgentRegistryEntry, BatchReadResult, BatchWriteEntry, BatchWriteResult, DirEntry, DynamicMountDescriptor, ExportRootFilesystemOptions, HttpRequest, HttpResponse, LimitWarning, LimitWarningHandler, MountConfig, MountInfo, MountConfigJsonObject, MountConfigJsonPrimitive, MountConfigJsonValue, NativeMountConfig, NativeMountPluginDescriptor, NativeRootFilesystemConfig, OverlayMountConfig, OverlayRootFilesystemConfig, PlainMountConfig, ProcessTreeNode, ProcessExit, ProcessOutput, ReaddirEntry, ReaddirRecursiveOptions, RootFilesystemConfig, RootLowerInput, SpawnedProcessInfo, SpawnOptions, ShellData, ShellExit, ShellOptions, } from "./agent-os.js";
+export type { AgentExitEvent, AgentExitHandler, AgentOsCreateSidecarOptions, AgentOsLimits, AgentOsOptions, AgentOsSharedSidecarOptions, AgentOsSidecarConfig, AgentOsSidecarDescription, AgentRegistryEntry, AgentRestartOutcome, AgentStderrEvent, AgentStderrHandler, BatchReadResult, BatchWriteEntry, BatchWriteResult, DirEntry, DynamicMountDescriptor, ExportRootFilesystemOptions, HttpRequest, HttpResponse, LimitWarning, LimitWarningHandler, MountConfig, MountConfigJsonObject, MountConfigJsonPrimitive, MountConfigJsonValue, MountInfo, NativeMountConfig, NativeMountPluginDescriptor, NativeRootFilesystemConfig, OverlayMountConfig, OverlayRootFilesystemConfig, PlainMountConfig, ProcessOutput, ProcessTreeNode, ReaddirEntry, ReaddirRecursiveOptions, RootFilesystemConfig, RootLowerInput, ShellData, ShellExit, ShellOptions, } from "./agent-os.js";
+export type { CodeEvaluationResult, CodeExecutionResult, ContextDescriptor, ContextState, ExecutionErrorData, ExecutionSignal, InlineExecutionOptions, JavaScriptEvaluationOptions, JavaScriptExecutionOptions, LanguageExecutionOptions, LanguageSpawnOptions, NpmPackageInstallOptions, NpmProjectInstallOptions, OutputCapture, OutputReplay, ProcessDescriptor, ProcessExit, ProcessOutputEvent, PythonInstallOptions, SpawnOptions, TypeScriptCheckOptions, TypeScriptCheckResult, TypeScriptDiagnostic, TypeScriptEvaluationOptions, TypeScriptExecutionOptions, TypeScriptFileExecutionOptions, } from "./language-execution.js";
 export type * from "./session-api.js";
 /**
  * An agent type id — the `name` of an `/opt/agentos` agent package manifest
@@ -7,10 +8,11 @@ export type * from "./session-api.js";
  * passes only the name, so any manifest `name` is a valid agent type.
  */
 export type AgentType = string;
+export type { AgentBlock, PackageDescriptor, PackageRef, SoftwarePackageRef, } from "./agentos-package.js";
+export type { Binding, BindingExample, Bindings } from "./bindings.js";
 export type { CronAction, CronActionInfo, CronEvent, CronEventHandler, CronJob, CronJobInfo, CronJobOptions, ScheduleDriver, ScheduleEntry, ScheduleHandle, } from "./cron/index.js";
 export type { HostDirBackendOptions, HostDirMountPluginConfig, NodeModulesMountConfig, } from "./host-dir-mount.js";
-export type { Binding, BindingExample, Bindings } from "./bindings.js";
 export type { FilesystemSnapshotExport, LayerHandle, LayerStore, OverlayFilesystemMode, RootSnapshotExport, SnapshotImportSource, SnapshotLayerHandle, WritableLayerHandle, } from "./layers.js";
 export type { SoftwareInput, SoftwareRoot } from "./packages.js";
-export type { AgentBlock, PackageDescriptor, PackageRef, SoftwarePackageRef, } from "./agentos-package.js";
 export type { ChildProcessPermissions, ConnectTerminalOptions, EnvPermissions, ExecOptions, ExecResult, FsPermissionRule, FsPermissions, KernelExecOptions, KernelExecResult, KernelSpawnOptions, NetworkAccessRequest, NetworkPermissions, OpenShellOptions, PatternPermissionRule, PermissionDecision, PermissionMode, Permissions, ProcessInfo, RulePermissions, StdioChannel, TimingMitigation, VirtualDirEntry, VirtualFileSystem, VirtualStat, } from "./runtime.js";
+export type { AgentOsSandboxClient, AgentOsSandboxClientOptions, AgentOsSandboxCommonOptions, AgentOsSandboxInput, AgentOsSandboxOptions, AgentOsSandboxProcessInfo, AgentOsSandboxProcessLogs, AgentOsSandboxProcessResult, AgentOsSandboxProvider, AgentOsSandboxProviderOptions, SandboxMountPluginConfig, } from "./sandbox.js";

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@rivet-dev/agentos-core",
-	"version": "0.0.0-main.29b0797",
+	"version": "0.0.0-main.5ac5a14",
 	"type": "module",
 	"license": "Apache-2.0",
 	"main": "./dist/index.js",
@@ -19,6 +19,11 @@
 			"import": "./dist/runtime-compat.js",
 			"default": "./dist/runtime-compat.js"
 		},
+		"./internal/code-execution": {
+			"types": "./dist/code-execution.d.ts",
+			"import": "./dist/code-execution.js",
+			"default": "./dist/code-execution.js"
+		},
 		"./test/file-system": {
 			"types": "./dist/test/file-system.d.ts",
 			"import": "./dist/test/file-system.js",
@@ -51,27 +56,26 @@
 		"build:agentos-protocol": "node ./scripts/compile-agentos-protocol.mjs",
 		"build:protocols": "pnpm run build:agentos-protocol",
 		"test": "vitest run --exclude '**/*.nightly.test.ts' --reporter=verbose",
-		"test:pr": "vitest run tests/migration-parity.test.ts --fileParallelism=false --reporter=verbose",
+		"test:unit": "vitest run tests/agent-exit-event.test.ts tests/agentos-package.test.ts tests/agentos-protocol.test.ts tests/allowed-node-builtins.test.ts tests/bindings-zod.test.ts tests/bindings.test.ts tests/cron-manager.test.ts tests/cron-timer-driver.test.ts tests/execution-abort.test.ts tests/generated-protocol.test.ts tests/leak-agent-os-processes.test.ts tests/leak-rpc-client.test.ts tests/mount-descriptors.test.ts tests/mount-reconfigure.test.ts tests/options-schema.test.ts tests/public-api-exports.test.ts tests/root-filesystem-descriptors.test.ts tests/runtime-compat-mount.test.ts tests/session-event-ordering.test.ts tests/session-permission-surface.test.ts tests/sidecar-client.test.ts tests/sidecar-permission-descriptors.test.ts tests/wasm-permission-tiers.test.ts --fileParallelism=false",
+		"test:pr": "pnpm test:unit && vitest run tests/migration-parity.test.ts tests/acp-reactor-regression.test.ts --fileParallelism=false --reporter=verbose",
 		"test:nightly": "vitest run tests/*.nightly.test.ts --reporter=verbose --passWithNoTests"
 	},
 	"dependencies": {
 		"@agentclientprotocol/sdk": "0.16.1",
 		"@agentos-software/claude-code": "0.2.7",
 		"@agentos-software/codex-cli": "0.3.4",
-		"@agentos-software/common": "0.0.0-main.29b0797",
-		"@agentos-software/manifest": "0.0.0-main.29b0797",
+		"@agentos-software/common": "0.0.0-main.5ac5a14",
+		"@agentos-software/manifest": "0.0.0-main.5ac5a14",
 		"@agentos-software/opencode": "0.2.7",
 		"@agentos-software/pi": "0.2.7",
-		"@agentos-software/pi-cli": "0.2.7",
 		"@aws-sdk/client-s3": "^3.1019.0",
-		"@rivet-dev/agentos-sidecar": "0.0.0-main.29b0797",
+		"@rivet-dev/agentos-sidecar": "0.0.0-main.5ac5a14",
 		"@rivetkit/bare-ts": "^0.6.2",
-		"@rivet-dev/agentos-runtime-core": "0.0.0-main.29b0797",
+		"@rivet-dev/agentos-runtime-core": "0.0.0-main.5ac5a14",
 		"@xterm/headless": "^6.0.0",
 		"better-sqlite3": "^12.8.0",
 		"croner": "^10.0.1",
 		"googleapis": "^144.0.0",
-		"isolated-vm": "^6.0.0",
 		"long-timeout": "^0.1.1",
 		"minimatch": "^10.2.4",
 		"zod": "^4.1.11",
@@ -80,29 +84,28 @@
 	"devDependencies": {
 		"@agentos-software/claude-code": "0.2.7",
 		"@agentos-software/codex": "0.2.7",
-		"@agentos-software/coreutils": "0.3.3",
+		"@agentos-software/coreutils": "0.3.4",
 		"@agentos-software/curl": "0.3.3",
-		"@agentos-software/diffutils": "0.3.3",
+		"@agentos-software/diffutils": "0.3.4",
 		"@agentos-software/duckdb": "0.3.3",
 		"@agentos-software/fd": "0.3.3",
 		"@agentos-software/file": "0.3.3",
-		"@agentos-software/findutils": "0.3.3",
-		"@agentos-software/gawk": "0.3.3",
+		"@agentos-software/findutils": "0.3.4",
+		"@agentos-software/gawk": "0.3.4",
 		"@agentos-software/git": "0.3.3",
-		"@agentos-software/grep": "0.3.3",
-		"@agentos-software/gzip": "0.3.3",
+		"@agentos-software/grep": "0.3.4",
+		"@agentos-software/gzip": "0.3.4",
 		"@agentos-software/jq": "0.3.3",
 		"@agentos-software/opencode": "0.2.7",
 		"@agentos-software/pi": "0.2.7",
-		"@agentos-software/pi-cli": "0.2.7",
 		"@agentos-software/ripgrep": "0.3.3",
-		"@agentos-software/sed": "0.3.3",
-		"@agentos-software/tar": "0.3.3",
+		"@agentos-software/sed": "0.3.4",
+		"@agentos-software/tar": "0.3.5",
 		"@agentos-software/tree": "0.3.3",
 		"@agentos-software/vim": "0.3.3",
 		"@agentos-software/wget": "0.3.3",
 		"@agentos-software/yq": "0.3.3",
-		"@rivet-dev/agentos-test-harness": "0.0.0-main.29b0797",
+		"@rivet-dev/agentos-test-harness": "0.0.0-main.5ac5a14",
 		"@anthropic-ai/claude-agent-sdk": "^0.2.87",
 		"@anthropic-ai/claude-code": "^2.1.86",
 		"@bare-ts/tools": "0.15.0",
@@ -110,13 +113,16 @@
 		"@browserbasehq/cli": "0.5.4",
 		"@browserbasehq/sdk": "2.10.0",
 		"@copilotkit/llmock": "^1.6.0",
-		"@mariozechner/pi-coding-agent": "^0.60.0",
 		"@types/node": "^22.10.2",
-		"pi-acp": "^0.0.23",
 		"sandbox-agent": "^0.4.2",
 		"typescript": "^5.7.2",
 		"vitest": "^2.1.8",
 		"ws": "^8.18.0",
 		"zod3": "npm:zod@^3.25.76"
+	},
+	"repository": {
+		"type": "git",
+		"url": "https://github.com/rivet-dev/agentos.git",
+		"directory": "packages/core"
 	}
 }