@rivet-dev/agentos-core 0.0.0-main.2f99c77 → 0.0.0-main.5ac5a14

package/dist/sidecar/rpc-client.d.ts

@@ -40,11 +40,11 @@ interface NativeSidecarKernelProxyOptions {
      * `configure_vm` rebuilds the whole VM configuration from each payload, so
      * every runtime mount reconfigure must resend these or a post-boot
      * `mountFs()` silently drops the `/opt/agentos` package projections and
-     * tool shim commands applied at boot.
+     * binding shim commands applied at boot.
      */
     packages?: Parameters<SidecarProcess["configureVm"]>[2]["packages"];
     packagesMountAt?: string;
-    toolShimCommands?: string[];
+    bindingShimCommands?: string[];
     commandGuestPaths: ReadonlyMap<string, string>;
     onWasmCommandResolved?: (command: string) => void;
     onDispose?: () => Promise<void>;
@@ -70,12 +70,13 @@ export declare class NativeSidecarKernelProxy {
     private readonly ownsClient;
     private readonly localMounts;
     private readonly baseSidecarMounts;
+    private readonly dynamicSidecarMounts;
     private readonly permissions;
     private readonly commandPermissions;
     private readonly loopbackExemptPorts;
     private packages;
     private readonly packagesMountAt;
-    private readonly toolShimCommands;
+    private readonly bindingShimCommands;
     private readonly commandDrivers;
     private readonly onWasmCommandResolved;
     private readonly onDispose;
@@ -161,6 +162,13 @@ export declare class NativeSidecarKernelProxy {
         sidecarMount?: SidecarMountDescriptor;
     }): Promise<void>;
     unmountFs(path: string): Promise<void>;
+    mountDescriptor(mount: SidecarMountDescriptor): Promise<void>;
+    unmountDescriptor(path: string): Promise<void>;
+    listMounts(): Promise<Array<{
+        path: string;
+        kind: string;
+        readOnly: boolean;
+    }>>;
     private desiredSidecarMounts;
     private reconfigureSidecarMounts;
     private waitForMountReconfigure;
@@ -175,6 +183,7 @@ export declare class NativeSidecarKernelProxy {
         port?: number;
     }): KernelSocketSnapshot | null;
     getSignalState(pid: number): KernelSignalState;
+    private scheduleSignalStateRefresh;
     private refreshSocketLookup;
     private refreshSignalState;
     private refreshProcessSnapshot;
@@ -262,7 +271,7 @@ export interface AgentOsSidecarTransport {
     dispose(): Promise<void>;
 }
 export interface AgentOsSidecarClientOptions {
-    createSessionTransport(bootstrap: AgentOsSidecarSessionBootstrap): Promise<AgentOsSidecarTransport>;
+    createOwnershipTransport(bootstrap: AgentOsSidecarSessionBootstrap): Promise<AgentOsSidecarTransport>;
     createId?: () => string;
     now?: () => number;
 }
@@ -284,13 +293,14 @@ export declare class AgentOsSidecarSessionHandle {
     dispose(): Promise<void>;
 }
 export declare class AgentOsSidecarClient {
-    private readonly createSessionTransport;
+    private readonly createOwnershipTransport;
     private readonly createId;
     private readonly now;
     private readonly sessions;
     private disposed;
     constructor(options: AgentOsSidecarClientOptions);
-    createSession(options?: AgentOsSidecarSessionOptions): Promise<AgentOsSidecarSessionHandle>;
+    /** Open a physical sidecar ownership scope, not a durable ACP session. */
+    createOwnershipSession(options?: AgentOsSidecarSessionOptions): Promise<AgentOsSidecarSessionHandle>;
     listSessions(): AgentOsSidecarSessionLifecycle[];
     requireSessionLifecycle(sessionId: string): AgentOsSidecarSessionLifecycle;
     listVms(sessionId: string): AgentOsSidecarVmLifecycle[];
@@ -315,6 +325,8 @@ export interface SidecarMountPluginDescriptor {
 }
 export interface SidecarMountDescriptor {
     guestPath: string;
+    guestSource?: string;
+    guestFstype?: string;
     readOnly: boolean;
     plugin: SidecarMountPluginDescriptor;
 }

package/dist/sidecar/rpc-client.js

@@ -20,7 +20,9 @@ function formatStructuredSidecarDetail(detail) {
     if (entries.length === 0) {
         return "";
     }
-    return entries.map(([key, value]) => `${key}=${JSON.stringify(value)}`).join(" ");
+    return entries
+        .map(([key, value]) => `${key}=${JSON.stringify(value)}`)
+        .join(" ");
 }
 function logStructuredSidecarEvent(name, detail) {
     if (!shouldLogStructuredSidecarEvent(name)) {
@@ -211,6 +213,7 @@ export class NativeSidecarKernelProxy {
     ownsClient;
     localMounts;
     baseSidecarMounts;
+    dynamicSidecarMounts = [];
     permissions;
     commandPermissions;
     loopbackExemptPorts;
@@ -218,7 +221,7 @@ export class NativeSidecarKernelProxy {
     // later mount reconfigures resend linked packages too, not just boot ones.
     packages;
     packagesMountAt;
-    toolShimCommands;
+    bindingShimCommands;
     commandDrivers;
     onWasmCommandResolved;
     onDispose;
@@ -257,7 +260,7 @@ export class NativeSidecarKernelProxy {
         this.loopbackExemptPorts = options.loopbackExemptPorts;
         this.packages = options.packages ? [...options.packages] : [];
         this.packagesMountAt = options.packagesMountAt;
-        this.toolShimCommands = options.toolShimCommands;
+        this.bindingShimCommands = options.bindingShimCommands;
         this.commandDrivers = buildCommandMap(options.commandGuestPaths);
         this.onWasmCommandResolved = options.onWasmCommandResolved;
         this.onDispose = options.onDispose;
@@ -358,16 +361,16 @@ export class NativeSidecarKernelProxy {
         const parsedCommand = parseSimpleExecCommand(command);
         const runAndCapture = async (proc, stdinOverride, readExitCode) => {
             if (stdinOverride !== undefined) {
-                proc.writeStdin(stdinOverride);
+                await proc.writeStdin(stdinOverride);
             }
             else if (options?.stdin !== undefined) {
-                proc.writeStdin(options.stdin);
+                await proc.writeStdin(options.stdin);
             }
             // `kernel.exec()` is a non-interactive run-to-completion API: when the
             // caller does not opt into a streaming stdin handle, the guest process
             // should observe EOF after any provided input so commands like
             // `node -e ...` do not linger behind an inherited open stdin pipe.
-            proc.closeStdin();
+            await proc.closeStdin();
             const waitPromise = proc.wait();
             const shellExitCode = typeof options?.timeout === "number"
                 ? await new Promise((resolve) => {
@@ -435,9 +438,9 @@ export class NativeSidecarKernelProxy {
         const effectiveCwd = options?.cwd ?? this.defaultExecCwd ?? this.cwd;
         const runAndCapture = async (proc) => {
             if (options?.stdin !== undefined) {
-                proc.writeStdin(options.stdin);
+                await proc.writeStdin(options.stdin);
             }
-            proc.closeStdin();
+            await proc.closeStdin();
             const waitPromise = proc.wait();
             const exitCode = typeof options?.timeout === "number"
                 ? await new Promise((resolve) => {
@@ -521,9 +524,9 @@ export class NativeSidecarKernelProxy {
             rejectWait,
             onStdout: new Set(options?.onStdout ? [options.onStdout] : []),
             onStderr: new Set(options?.onStderr ? [options.onStderr] : []),
-            pendingStdin: [],
+            pendingStdin: options?.stdin === undefined ? [] : [options.stdin],
             stdinFlushPromise: null,
-            pendingCloseStdin: false,
+            pendingCloseStdin: !options?.streamStdin,
             pendingKillSignal: null,
             waitWithFallbackPromise: null,
             hostExitObservedAt: null,
@@ -583,7 +586,7 @@ export class NativeSidecarKernelProxy {
         return proc;
     }
     openShell(options) {
-        const stdoutHandlers = new Set();
+        const terminalHandlers = new Set();
         const stderrHandlers = new Set();
         const command = options?.command ?? "sh";
         const args = options?.args ??
@@ -638,7 +641,7 @@ export class NativeSidecarKernelProxy {
             const normalized = normalizeSyntheticTerminalText(text);
             updateSyntheticCursor(normalized);
             const chunk = textEncoder.encode(normalized);
-            for (const handler of stdoutHandlers) {
+            for (const handler of terminalHandlers) {
                 handler(chunk);
             }
         };
@@ -649,7 +652,7 @@ export class NativeSidecarKernelProxy {
             const normalized = normalizeSyntheticTerminalText(text);
             updateSyntheticCursor(normalized);
             const chunk = textEncoder.encode(normalized);
-            for (const handler of stdoutHandlers) {
+            for (const handler of terminalHandlers) {
                 handler(chunk);
             }
         };
@@ -694,7 +697,7 @@ export class NativeSidecarKernelProxy {
             commandInFlight = false;
             const promptPrefix = syntheticCursorAtLineStart ? "" : "\r\n";
             const promptChunk = textEncoder.encode(`${promptPrefix}${promptText}`);
-            for (const handler of stdoutHandlers) {
+            for (const handler of terminalHandlers) {
                 handler(promptChunk);
             }
             syntheticCursorAtLineStart = false;
@@ -752,7 +755,7 @@ export class NativeSidecarKernelProxy {
             }
         };
         let onData = null;
-        stdoutHandlers.add((data) => onData?.(data));
+        terminalHandlers.add((data) => onData?.(data));
         if (options?.onStderr) {
             stderrHandlers.add(options.onStderr);
         }
@@ -921,7 +924,7 @@ export class NativeSidecarKernelProxy {
                 if (!sanitized) {
                     return;
                 }
-                for (const handler of stdoutHandlers) {
+                for (const handler of terminalHandlers) {
                     handler(sanitized);
                 }
                 if (commandInFlight) {
@@ -933,6 +936,11 @@ export class NativeSidecarKernelProxy {
                 if (!sanitized) {
                     return;
                 }
+                // `onData` is the ordered PTY rendering stream. `onStderr` remains an
+                // optional channel-specific diagnostic tap and must not also be rendered.
+                for (const handler of terminalHandlers) {
+                    handler(sanitized);
+                }
                 for (const handler of stderrHandlers) {
                     handler(sanitized);
                 }
@@ -986,20 +994,16 @@ export class NativeSidecarKernelProxy {
         const stdin = process.stdin;
         const stdout = process.stdout;
         const { onData, ...shellOptions } = options ?? {};
-        const shell = this.openShell({
-            ...shellOptions,
-            onStderr: shellOptions.onStderr ??
-                ((data) => {
-                    process.stderr.write(data);
-                }),
-        });
+        const shell = this.openShell(shellOptions);
         const outputHandler = onData ??
             ((data) => {
                 stdout.write(data);
             });
         const restoreRawMode = stdin.isTTY && typeof stdin.setRawMode === "function";
         const onStdinData = (data) => {
-            shell.write(data);
+            void shell.write(data).catch((error) => {
+                console.error("[agentos] failed to forward terminal stdin:", error);
+            });
         };
         const onResize = () => {
             shell.resize(stdout.columns, stdout.rows);
@@ -1164,9 +1168,34 @@ export class NativeSidecarKernelProxy {
         applied.catch(() => { });
         return applied;
     }
+    mountDescriptor(mount) {
+        const normalized = posixPath.normalize(mount.guestPath);
+        if (this.desiredSidecarMounts().some((existing) => posixPath.normalize(existing.guestPath) === normalized)) {
+            return Promise.reject(new Error(`mount already exists: ${normalized}`));
+        }
+        this.dynamicSidecarMounts.push({ ...mount, guestPath: normalized });
+        const applied = this.reconfigureSidecarMounts();
+        applied.catch(() => { });
+        return applied;
+    }
+    unmountDescriptor(path) {
+        const normalized = posixPath.normalize(path);
+        const index = this.dynamicSidecarMounts.findIndex((mount) => posixPath.normalize(mount.guestPath) === normalized);
+        if (index < 0)
+            return Promise.resolve();
+        this.dynamicSidecarMounts.splice(index, 1);
+        const applied = this.reconfigureSidecarMounts();
+        applied.catch(() => { });
+        return applied;
+    }
+    async listMounts() {
+        await this.waitForMountReconfigure();
+        return this.client.listMounts(this.session, this.vm);
+    }
     desiredSidecarMounts() {
         return [
             ...this.baseSidecarMounts,
+            ...this.dynamicSidecarMounts,
             ...this.localMounts.map((mount) => mount.sidecarMount ?? {
                 guestPath: mount.path,
                 readOnly: mount.readOnly,
@@ -1183,8 +1212,8 @@ export class NativeSidecarKernelProxy {
                 return;
             }
             // Rust `configure_vm` rebuilds the whole VM configuration from this
-            // payload, so resend the boot packages / tool shim commands too —
-            // omitting them here strips the `/opt/agentos` projections and tool
+            // payload, so resend the boot packages / binding shim commands too —
+            // omitting them here strips the `/opt/agentos` projections and binding
             // shims from the VM as a side effect of a runtime mount change.
             await this.client.configureVm(this.session, this.vm, {
                 mounts: this.desiredSidecarMounts(),
@@ -1193,7 +1222,7 @@ export class NativeSidecarKernelProxy {
                 loopbackExemptPorts: this.loopbackExemptPorts,
                 packages: this.packages,
                 packagesMountAt: this.packagesMountAt,
-                toolShimCommands: this.toolShimCommands,
+                bindingShimCommands: this.bindingShimCommands,
             });
         };
         const previous = this.mountReconfigurePromise ?? Promise.resolve();
@@ -1238,11 +1267,17 @@ export class NativeSidecarKernelProxy {
     }
     getSignalState(pid) {
         const entry = this.trackedProcesses.get(pid);
-        if (entry && !this.signalRefreshes.has(pid)) {
-            this.signalRefreshes.set(pid, this.refreshSignalState(entry));
-        }
+        if (entry)
+            this.scheduleSignalStateRefresh(entry);
         return this.signalStates.get(pid) ?? { handlers: new Map() };
     }
+    scheduleSignalStateRefresh(entry) {
+        if (this.signalRefreshes.has(entry.pid))
+            return;
+        const refresh = this.refreshSignalState(entry);
+        this.signalRefreshes.set(entry.pid, refresh);
+        void refresh.catch(() => { });
+    }
     async refreshSocketLookup(cache, key, lookup) {
         try {
             const socket = await lookup();
@@ -1334,7 +1369,11 @@ export class NativeSidecarKernelProxy {
         entry.started = true;
         this.updateTrackedProcessSnapshot(entry);
         void this.refreshProcessSnapshot().catch(() => { });
-        await this.refreshSignalState(entry);
+        // Signal metadata is advisory and must not hold process startup behind a
+        // second sidecar RPC. Very short binding commands can finish while the
+        // original execute response is still in flight; synchronously refreshing
+        // here creates a circular wait with their output/exit delivery.
+        this.scheduleSignalStateRefresh(entry);
         void this.flushPendingStdin(entry).catch((error) => {
             this.handleBackgroundProcessError(entry, error);
         });
@@ -1362,10 +1401,7 @@ export class NativeSidecarKernelProxy {
                     }
                     entry.outputGeneration += 1;
                     void this.refreshProcessSnapshot().catch(() => { });
-                    if (!this.signalRefreshes.has(entry.pid)) {
-                        this.signalRefreshes.set(entry.pid, this.refreshSignalState(entry));
-                        await this.signalRefreshes.get(entry.pid);
-                    }
+                    this.scheduleSignalStateRefresh(entry);
                     const chunk = event.payload.chunk;
                     const listeners = event.payload.channel === "stdout"
                         ? entry.onStdout
@@ -2083,17 +2119,18 @@ export class AgentOsSidecarSessionHandle {
     }
 }
 export class AgentOsSidecarClient {
-    createSessionTransport;
+    createOwnershipTransport;
     createId;
     now;
     sessions = new Map();
     disposed = false;
     constructor(options) {
-        this.createSessionTransport = options.createSessionTransport;
+        this.createOwnershipTransport = options.createOwnershipTransport;
         this.createId = options.createId ?? randomUUID;
         this.now = options.now ?? Date.now;
     }
-    async createSession(options = {}) {
+    /** Open a physical sidecar ownership scope, not a durable ACP session. */
+    async createOwnershipSession(options = {}) {
         this.assertActive();
         const sessionId = this.createId();
         const placement = clonePlacement(options.placement);
@@ -2112,7 +2149,7 @@ export class AgentOsSidecarClient {
         };
         this.sessions.set(sessionId, entry);
         try {
-            entry.transport = await this.createSessionTransport({
+            entry.transport = await this.createOwnershipTransport({
                 sessionId,
                 placement: clonePlacement(placement),
                 metadata: cloneMetadata(metadata),
@@ -2278,6 +2315,8 @@ export function serializeMountConfigForSidecar(mount) {
     if ("driver" in mount) {
         return {
             guestPath: mount.path,
+            guestSource: mount.guestSource ?? "js_bridge",
+            guestFstype: mount.guestFstype ?? "js_bridge",
             readOnly: mount.readOnly ?? false,
             plugin: {
                 id: "js_bridge",
@@ -2287,6 +2326,8 @@ export function serializeMountConfigForSidecar(mount) {
     }
     return {
         guestPath: mount.path,
+        guestSource: mount.guestSource ?? mount.plugin.id,
+        guestFstype: mount.guestFstype ?? mount.plugin.id,
         readOnly: mount.readOnly ?? false,
         plugin: {
             id: mount.plugin.id,
@@ -2295,6 +2336,14 @@ export function serializeMountConfigForSidecar(mount) {
     };
 }
 export function serializeRootFilesystemForSidecar(config, bootstrapLower) {
+    if (config?.type === "native") {
+        return {
+            mode: "ephemeral",
+            disableDefaultBaseLayer: true,
+            lowers: [],
+            bootstrapEntries: [],
+        };
+    }
     const lowerInputs = [
         ...(config?.lowers ?? []),
         ...(bootstrapLower ? [bootstrapLower] : []),

package/dist/test/runtime.d.ts

@@ -7,5 +7,6 @@
 export { type AgentOsRuntimeAdmin, getAgentOsKernel, getAgentOsRuntimeAdmin, } from "../agent-os.js";
 export type { PermissionTier, WasmVmRuntimeOptions, } from "../runtime.js";
 export type { DriverProcess, Kernel, KernelInterface, KernelRuntimeDriver, ProcessContext, VirtualFileSystem, } from "../runtime-compat.js";
-export { AF_INET, AF_UNIX, allowAll, createInMemoryFileSystem, createKernel, createNodeHostNetworkAdapter, createNodeRuntime, createWasmVmRuntime, DEFAULT_FIRST_PARTY_TIERS, NodeFileSystem, SIGTERM, SOCK_DGRAM, SOCK_STREAM, WASMVM_COMMANDS, } from "../runtime-compat.js";
+export { AF_INET, AF_UNIX, allowAll, createKernel, createNodeHostNetworkAdapter, createNodeRuntime, createWasmVmRuntime, DEFAULT_FIRST_PARTY_TIERS, NodeFileSystem, SIGTERM, SOCK_DGRAM, SOCK_STREAM, WASMVM_COMMANDS, } from "../runtime-compat.js";
+export { createInMemoryFileSystem } from "@rivet-dev/agentos-runtime-core/test-runtime";
 export { TerminalHarness } from "./terminal-harness.js";

package/dist/test/runtime.js

@@ -5,5 +5,6 @@
  * while the public SDK removes the raw vm.kernel escape hatch.
  */
 export { getAgentOsKernel, getAgentOsRuntimeAdmin, } from "../agent-os.js";
-export { AF_INET, AF_UNIX, allowAll, createInMemoryFileSystem, createKernel, createNodeHostNetworkAdapter, createNodeRuntime, createWasmVmRuntime, DEFAULT_FIRST_PARTY_TIERS, NodeFileSystem, SIGTERM, SOCK_DGRAM, SOCK_STREAM, WASMVM_COMMANDS, } from "../runtime-compat.js";
+export { AF_INET, AF_UNIX, allowAll, createKernel, createNodeHostNetworkAdapter, createNodeRuntime, createWasmVmRuntime, DEFAULT_FIRST_PARTY_TIERS, NodeFileSystem, SIGTERM, SOCK_DGRAM, SOCK_STREAM, WASMVM_COMMANDS, } from "../runtime-compat.js";
+export { createInMemoryFileSystem } from "@rivet-dev/agentos-runtime-core/test-runtime";
 export { TerminalHarness } from "./terminal-harness.js";

package/dist/test/terminal-harness.js

@@ -20,9 +20,6 @@ export class TerminalHarness {
             rows,
             env: options?.env,
             cwd: options?.cwd,
-            onStderr: (data) => {
-                this.term.write(data);
-            },
         });
         this.shell.onData = (data) => {
             this.term.write(data);

package/dist/types.d.ts

@@ -1,4 +1,6 @@
-export type { AgentCapabilities, AgentInfo, AgentOsCreateSidecarOptions, AgentOsLimits, AgentOsOptions, AgentOsSharedSidecarOptions, AgentOsSidecarConfig, AgentOsSidecarDescription, AgentExitEvent, AgentExitHandler, AgentRestartOutcome, AgentStderrEvent, AgentStderrHandler, AgentRegistryEntry, BatchReadResult, BatchWriteEntry, BatchWriteResult, CreateSessionOptions, DirEntry, LimitWarning, LimitWarningHandler, McpServerConfig, McpServerConfigLocal, McpServerConfigRemote, MountConfig, MountConfigJsonObject, MountConfigJsonPrimitive, MountConfigJsonValue, NativeMountConfig, NativeMountPluginDescriptor, OverlayMountConfig, PermissionReply, PermissionRequest, PermissionRequestHandler, PlainMountConfig, ProcessTreeNode, PromptResult, ReaddirRecursiveOptions, ResumeSessionOptions, ResumeSessionResult, RootFilesystemConfig, RootLowerInput, SessionConfigOption, SessionEventHandler, SessionInfo, SessionInitData, SessionMode, SessionModeState, SpawnedProcessInfo, } from "./agent-os.js";
+export type { AgentExitEvent, AgentExitHandler, AgentOsCreateSidecarOptions, AgentOsLimits, AgentOsOptions, AgentOsSharedSidecarOptions, AgentOsSidecarConfig, AgentOsSidecarDescription, AgentRegistryEntry, AgentRestartOutcome, AgentStderrEvent, AgentStderrHandler, BatchReadResult, BatchWriteEntry, BatchWriteResult, DirEntry, DynamicMountDescriptor, ExportRootFilesystemOptions, HttpRequest, HttpResponse, LimitWarning, LimitWarningHandler, MountConfig, MountConfigJsonObject, MountConfigJsonPrimitive, MountConfigJsonValue, MountInfo, NativeMountConfig, NativeMountPluginDescriptor, NativeRootFilesystemConfig, OverlayMountConfig, OverlayRootFilesystemConfig, PlainMountConfig, ProcessOutput, ProcessTreeNode, ReaddirEntry, ReaddirRecursiveOptions, RootFilesystemConfig, RootLowerInput, ShellData, ShellExit, ShellOptions, } from "./agent-os.js";
+export type { CodeEvaluationResult, CodeExecutionResult, ContextDescriptor, ContextState, ExecutionErrorData, ExecutionSignal, InlineExecutionOptions, JavaScriptEvaluationOptions, JavaScriptExecutionOptions, LanguageExecutionOptions, LanguageSpawnOptions, NpmPackageInstallOptions, NpmProjectInstallOptions, OutputCapture, OutputReplay, ProcessDescriptor, ProcessExit, ProcessOutputEvent, PythonInstallOptions, SpawnOptions, TypeScriptCheckOptions, TypeScriptCheckResult, TypeScriptDiagnostic, TypeScriptEvaluationOptions, TypeScriptExecutionOptions, TypeScriptFileExecutionOptions, } from "./language-execution.js";
+export type * from "./session-api.js";
 /**
  * An agent type id — the `name` of an `/opt/agentos` agent package manifest
  * (e.g. `"pi"`, `"claude"`). Agents are resolved by the SIDECAR from the projected
@@ -6,12 +8,11 @@ export type { AgentCapabilities, AgentInfo, AgentOsCreateSidecarOptions, AgentOs
  * passes only the name, so any manifest `name` is a valid agent type.
  */
 export type AgentType = string;
-export type { CronAction, CronEvent, CronEventHandler, CronJob, CronJobInfo, CronJobOptions, ScheduleDriver, ScheduleEntry, ScheduleHandle, } from "./cron/index.js";
+export type { AgentBlock, PackageDescriptor, PackageRef, SoftwarePackageRef, } from "./agentos-package.js";
+export type { Binding, BindingExample, Bindings } from "./bindings.js";
+export type { CronAction, CronActionInfo, CronEvent, CronEventHandler, CronJob, CronJobInfo, CronJobOptions, ScheduleDriver, ScheduleEntry, ScheduleHandle, } from "./cron/index.js";
 export type { HostDirBackendOptions, HostDirMountPluginConfig, NodeModulesMountConfig, } from "./host-dir-mount.js";
-export type { HostTool, ToolExample, ToolKit } from "./host-tools.js";
-export type { AcpTimeoutErrorData, JsonRpcError, JsonRpcErrorData, JsonRpcNotification, JsonRpcRequest, JsonRpcResponse, UnknownSessionErrorData, } from "./json-rpc.js";
 export type { FilesystemSnapshotExport, LayerHandle, LayerStore, OverlayFilesystemMode, RootSnapshotExport, SnapshotImportSource, SnapshotLayerHandle, WritableLayerHandle, } from "./layers.js";
 export type { SoftwareInput, SoftwareRoot } from "./packages.js";
-export type { AgentBlock, PackageDescriptor, PackageRef, SoftwarePackageRef, } from "./agentos-package.js";
 export type { ChildProcessPermissions, ConnectTerminalOptions, EnvPermissions, ExecOptions, ExecResult, FsPermissionRule, FsPermissions, KernelExecOptions, KernelExecResult, KernelSpawnOptions, NetworkAccessRequest, NetworkPermissions, OpenShellOptions, PatternPermissionRule, PermissionDecision, PermissionMode, Permissions, ProcessInfo, RulePermissions, StdioChannel, TimingMitigation, VirtualDirEntry, VirtualFileSystem, VirtualStat, } from "./runtime.js";
-export type { PromptCapabilities } from "./agent-session-types.js";
+export type { AgentOsSandboxClient, AgentOsSandboxClientOptions, AgentOsSandboxCommonOptions, AgentOsSandboxInput, AgentOsSandboxOptions, AgentOsSandboxProcessInfo, AgentOsSandboxProcessLogs, AgentOsSandboxProcessResult, AgentOsSandboxProvider, AgentOsSandboxProviderOptions, SandboxMountPluginConfig, } from "./sandbox.js";

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@rivet-dev/agentos-core",
-	"version": "0.0.0-main.2f99c77",
+	"version": "0.0.0-main.5ac5a14",
 	"type": "module",
 	"license": "Apache-2.0",
 	"main": "./dist/index.js",
@@ -19,6 +19,11 @@
 			"import": "./dist/runtime-compat.js",
 			"default": "./dist/runtime-compat.js"
 		},
+		"./internal/code-execution": {
+			"types": "./dist/code-execution.d.ts",
+			"import": "./dist/code-execution.js",
+			"default": "./dist/code-execution.js"
+		},
 		"./test/file-system": {
 			"types": "./dist/test/file-system.d.ts",
 			"import": "./dist/test/file-system.js",
@@ -46,59 +51,61 @@
 		}
 	},
 	"scripts": {
-		"check-types": "pnpm run build:protocols && tsc --noEmit",
+		"check-types": "pnpm run build:protocols && tsc --noEmit && tsc -p tsconfig.type-tests.json",
 		"build": "pnpm run build:protocols && tsc",
 		"build:agentos-protocol": "node ./scripts/compile-agentos-protocol.mjs",
 		"build:protocols": "pnpm run build:agentos-protocol",
-		"test": "vitest run --reporter=verbose"
+		"test": "vitest run --exclude '**/*.nightly.test.ts' --reporter=verbose",
+		"test:unit": "vitest run tests/agent-exit-event.test.ts tests/agentos-package.test.ts tests/agentos-protocol.test.ts tests/allowed-node-builtins.test.ts tests/bindings-zod.test.ts tests/bindings.test.ts tests/cron-manager.test.ts tests/cron-timer-driver.test.ts tests/execution-abort.test.ts tests/generated-protocol.test.ts tests/leak-agent-os-processes.test.ts tests/leak-rpc-client.test.ts tests/mount-descriptors.test.ts tests/mount-reconfigure.test.ts tests/options-schema.test.ts tests/public-api-exports.test.ts tests/root-filesystem-descriptors.test.ts tests/runtime-compat-mount.test.ts tests/session-event-ordering.test.ts tests/session-permission-surface.test.ts tests/sidecar-client.test.ts tests/sidecar-permission-descriptors.test.ts tests/wasm-permission-tiers.test.ts --fileParallelism=false",
+		"test:pr": "pnpm test:unit && vitest run tests/migration-parity.test.ts tests/acp-reactor-regression.test.ts --fileParallelism=false --reporter=verbose",
+		"test:nightly": "vitest run tests/*.nightly.test.ts --reporter=verbose --passWithNoTests"
 	},
 	"dependencies": {
-		"@agentos-software/claude-code": "0.0.0-main.2f99c77",
+		"@agentclientprotocol/sdk": "0.16.1",
+		"@agentos-software/claude-code": "0.2.7",
 		"@agentos-software/codex-cli": "0.3.4",
-		"@agentos-software/common": "0.0.0-main.2f99c77",
-		"@agentos-software/manifest": "0.0.0-main.2f99c77",
-		"@agentos-software/opencode": "0.0.0-main.2f99c77",
-		"@agentos-software/pi": "0.0.0-main.2f99c77",
-		"@agentos-software/pi-cli": "0.0.0-main.2f99c77",
+		"@agentos-software/common": "0.0.0-main.5ac5a14",
+		"@agentos-software/manifest": "0.0.0-main.5ac5a14",
+		"@agentos-software/opencode": "0.2.7",
+		"@agentos-software/pi": "0.2.7",
 		"@aws-sdk/client-s3": "^3.1019.0",
-		"@rivet-dev/agentos-sidecar": "0.0.0-main.2f99c77",
+		"@rivet-dev/agentos-sidecar": "0.0.0-main.5ac5a14",
 		"@rivetkit/bare-ts": "^0.6.2",
-		"@rivet-dev/agentos-runtime-core": "0.0.0-main.2f99c77",
+		"@rivet-dev/agentos-runtime-core": "0.0.0-main.5ac5a14",
 		"@xterm/headless": "^6.0.0",
 		"better-sqlite3": "^12.8.0",
 		"croner": "^10.0.1",
 		"googleapis": "^144.0.0",
-		"isolated-vm": "^6.0.0",
 		"long-timeout": "^0.1.1",
 		"minimatch": "^10.2.4",
 		"zod": "^4.1.11",
 		"zod-to-json-schema": "^3.25.2"
 	},
 	"devDependencies": {
-		"@agentos-software/claude-code": "0.0.0-main.2f99c77",
-		"@agentos-software/codex": "0.0.0-main.2f99c77",
-		"@agentos-software/coreutils": "0.3.3",
+		"@agentos-software/claude-code": "0.2.7",
+		"@agentos-software/codex": "0.2.7",
+		"@agentos-software/coreutils": "0.3.4",
 		"@agentos-software/curl": "0.3.3",
-		"@agentos-software/diffutils": "0.3.3",
+		"@agentos-software/diffutils": "0.3.4",
 		"@agentos-software/duckdb": "0.3.3",
 		"@agentos-software/fd": "0.3.3",
 		"@agentos-software/file": "0.3.3",
-		"@agentos-software/findutils": "0.3.3",
-		"@agentos-software/gawk": "0.3.3",
+		"@agentos-software/findutils": "0.3.4",
+		"@agentos-software/gawk": "0.3.4",
 		"@agentos-software/git": "0.3.3",
-		"@agentos-software/grep": "0.3.3",
-		"@agentos-software/gzip": "0.3.3",
-		"@agentos-software/http-get": "0.3.3",
+		"@agentos-software/grep": "0.3.4",
+		"@agentos-software/gzip": "0.3.4",
 		"@agentos-software/jq": "0.3.3",
-		"@agentos-software/opencode": "0.0.0-main.2f99c77",
-		"@agentos-software/pi": "0.0.0-main.2f99c77",
-		"@agentos-software/pi-cli": "0.0.0-main.2f99c77",
+		"@agentos-software/opencode": "0.2.7",
+		"@agentos-software/pi": "0.2.7",
 		"@agentos-software/ripgrep": "0.3.3",
-		"@agentos-software/sed": "0.3.3",
-		"@agentos-software/tar": "0.3.3",
+		"@agentos-software/sed": "0.3.4",
+		"@agentos-software/tar": "0.3.5",
 		"@agentos-software/tree": "0.3.3",
 		"@agentos-software/vim": "0.3.3",
+		"@agentos-software/wget": "0.3.3",
 		"@agentos-software/yq": "0.3.3",
+		"@rivet-dev/agentos-test-harness": "0.0.0-main.5ac5a14",
 		"@anthropic-ai/claude-agent-sdk": "^0.2.87",
 		"@anthropic-ai/claude-code": "^2.1.86",
 		"@bare-ts/tools": "0.15.0",
@@ -106,13 +113,16 @@
 		"@browserbasehq/cli": "0.5.4",
 		"@browserbasehq/sdk": "2.10.0",
 		"@copilotkit/llmock": "^1.6.0",
-		"@mariozechner/pi-coding-agent": "^0.60.0",
 		"@types/node": "^22.10.2",
-		"pi-acp": "^0.0.23",
 		"sandbox-agent": "^0.4.2",
 		"typescript": "^5.7.2",
 		"vitest": "^2.1.8",
 		"ws": "^8.18.0",
 		"zod3": "npm:zod@^3.25.76"
+	},
+	"repository": {
+		"type": "git",
+		"url": "https://github.com/rivet-dev/agentos.git",
+		"directory": "packages/core"
 	}
 }