@rivet-dev/agentos-core 0.0.0-main.2f99c77 → 0.0.0-main.5ac5a14

package/dist/options-schema.d.ts

@@ -1,6 +1,6 @@
 import { z } from "zod/v4";
 import type { AgentExitHandler, AgentOsOptions, AgentStderrHandler, LimitWarningHandler, NativeMountConfig } from "./agent-os.js";
-import type { HostTool, ToolKit } from "./host-tools.js";
+import type { Binding, Bindings } from "./bindings.js";
 export declare const permissionsSchema: z.ZodObject<{
     fs: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
         allow: "allow";
@@ -131,15 +131,18 @@ export declare const agentOsLimitsSchema: z.ZodObject<{
     http: z.ZodOptional<z.ZodObject<{
         maxFetchResponseBytes: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
-    tools: z.ZodOptional<z.ZodObject<{
-        defaultToolTimeoutMs: z.ZodOptional<z.ZodNumber>;
-        maxToolTimeoutMs: z.ZodOptional<z.ZodNumber>;
-        maxRegisteredToolkits: z.ZodOptional<z.ZodNumber>;
-        maxRegisteredToolsPerVm: z.ZodOptional<z.ZodNumber>;
-        maxToolsPerToolkit: z.ZodOptional<z.ZodNumber>;
-        maxToolSchemaBytes: z.ZodOptional<z.ZodNumber>;
-        maxToolExamplesPerTool: z.ZodOptional<z.ZodNumber>;
-        maxToolExampleInputBytes: z.ZodOptional<z.ZodNumber>;
+    tls: z.ZodOptional<z.ZodObject<{
+        maxBufferedBytes: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    bindings: z.ZodOptional<z.ZodObject<{
+        defaultBindingTimeoutMs: z.ZodOptional<z.ZodNumber>;
+        maxBindingTimeoutMs: z.ZodOptional<z.ZodNumber>;
+        maxRegisteredCollections: z.ZodOptional<z.ZodNumber>;
+        maxRegisteredBindingsPerVm: z.ZodOptional<z.ZodNumber>;
+        maxBindingsPerCollection: z.ZodOptional<z.ZodNumber>;
+        maxBindingSchemaBytes: z.ZodOptional<z.ZodNumber>;
+        maxExamplesPerBinding: z.ZodOptional<z.ZodNumber>;
+        maxBindingExampleInputBytes: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
     plugins: z.ZodOptional<z.ZodObject<{
         maxPersistedManifestBytes: z.ZodOptional<z.ZodNumber>;
@@ -148,6 +151,25 @@ export declare const agentOsLimitsSchema: z.ZodObject<{
     acp: z.ZodOptional<z.ZodObject<{
         maxReadLineBytes: z.ZodOptional<z.ZodNumber>;
         stdoutBufferByteLimit: z.ZodOptional<z.ZodNumber>;
+        maxCompletedMessageBytes: z.ZodOptional<z.ZodNumber>;
+        maxTurnOutputBytes: z.ZodOptional<z.ZodNumber>;
+        maxPromptBytes: z.ZodOptional<z.ZodNumber>;
+        maxPromptBlocks: z.ZodOptional<z.ZodNumber>;
+        maxFallbackContinuationBytes: z.ZodOptional<z.ZodNumber>;
+        maxSessionHistoryBytes: z.ZodOptional<z.ZodNumber>;
+        maxSessionHistoryEvents: z.ZodOptional<z.ZodNumber>;
+        maxHistoryPageEntries: z.ZodOptional<z.ZodNumber>;
+        maxSessionListEntries: z.ZodOptional<z.ZodNumber>;
+        maxSessionsPerVm: z.ZodOptional<z.ZodNumber>;
+        maxPromptsPerSession: z.ZodOptional<z.ZodNumber>;
+        maxPromptsPerVm: z.ZodOptional<z.ZodNumber>;
+        maxPendingPermissionsPerSession: z.ZodOptional<z.ZodNumber>;
+        maxPendingPermissionsPerVm: z.ZodOptional<z.ZodNumber>;
+        maxPermissionOutcomesPerSession: z.ZodOptional<z.ZodNumber>;
+        maxPermissionOutcomesPerVm: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    sqlite: z.ZodOptional<z.ZodObject<{
+        maxResultBytes: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
     jsRuntime: z.ZodOptional<z.ZodObject<{
         v8HeapLimitMb: z.ZodOptional<z.ZodNumber>;
@@ -172,9 +194,22 @@ export declare const agentOsLimitsSchema: z.ZodObject<{
         syncReadLimitBytes: z.ZodOptional<z.ZodNumber>;
         prewarmTimeoutMs: z.ZodOptional<z.ZodNumber>;
         runnerHeapLimitMb: z.ZodOptional<z.ZodNumber>;
+        runnerCpuTimeLimitMs: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    execution: z.ZodOptional<z.ZodObject<{
+        completedTtlMs: z.ZodOptional<z.ZodNumber>;
+        maxCompletedExecutions: z.ZodOptional<z.ZodNumber>;
+        liveExecutionWarningThreshold: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    process: z.ZodOptional<z.ZodObject<{
+        maxSpawnFileActions: z.ZodOptional<z.ZodNumber>;
+        maxSpawnFileActionBytes: z.ZodOptional<z.ZodNumber>;
+        pendingStdinBytes: z.ZodOptional<z.ZodNumber>;
+        pendingEventCount: z.ZodOptional<z.ZodNumber>;
+        pendingEventBytes: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
 }, z.core.$strict>;
-export declare const rootFilesystemConfigSchema: z.ZodObject<{
+export declare const rootFilesystemConfigSchema: z.ZodUnion<readonly [z.ZodObject<{
     type: z.ZodOptional<z.ZodLiteral<"overlay">>;
     mode: z.ZodOptional<z.ZodEnum<{
         ephemeral: "ephemeral";
@@ -187,11 +222,20 @@ export declare const rootFilesystemConfigSchema: z.ZodObject<{
         kind: z.ZodLiteral<"snapshot-export">;
         source: z.ZodUnknown;
     }, z.core.$strict>]>>>;
-}, z.core.$strict>;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"native">;
+    plugin: z.ZodObject<{
+        id: z.ZodString;
+        config: z.ZodOptional<z.ZodUnknown>;
+    }, z.core.$strict>;
+    readOnly: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>]>;
 export declare const nativeMountConfigSchema: z.ZodType<NativeMountConfig>;
 export declare const mountConfigSchema: z.ZodUnion<readonly [z.ZodObject<{
     path: z.ZodString;
     driver: z.ZodCustom<unknown, unknown>;
+    guestFstype: z.ZodOptional<z.ZodString>;
+    guestSource: z.ZodOptional<z.ZodString>;
     readOnly: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strict>, z.ZodType<NativeMountConfig, unknown, z.core.$ZodTypeInternals<NativeMountConfig, unknown>>, z.ZodObject<{
     path: z.ZodString;
@@ -216,23 +260,54 @@ export declare const sidecarConfigSchema: z.ZodUnion<readonly [z.ZodObject<{
     kind: z.ZodLiteral<"explicit">;
     handle: z.ZodUnknown;
 }, z.core.$strict>]>;
-export declare const hostToolSchema: z.ZodType<HostTool>;
-export declare const toolKitSchema: z.ZodType<ToolKit>;
+export declare const bindingSchema: z.ZodType<Binding>;
+export declare const bindingsSchema: z.ZodType<Bindings>;
 /**
  * Shared AgentOsOptions field schemas.
  *
- * Core uses the full object. The Rivet/native actor composes a narrower
- * native-safe subset in `packages/agentos/src/config.ts`; keep that subset and
- * `crates/agentos-actor-plugin/src/config.rs::AgentOsConfigJson` aligned when
- * adding options that cross the native boundary.
+ * Core and the TypeScript Rivet actor both use the full object. Runtime-owned
+ * behavior is serialized by AgentOs.create() into the sidecar VM config.
  */
 export declare const agentOsOptionFieldSchemas: {
+    readonly user: z.ZodOptional<z.ZodObject<{
+        uid: z.ZodOptional<z.ZodNumber>;
+        gid: z.ZodOptional<z.ZodNumber>;
+        euid: z.ZodOptional<z.ZodNumber>;
+        egid: z.ZodOptional<z.ZodNumber>;
+        username: z.ZodOptional<z.ZodString>;
+        homedir: z.ZodOptional<z.ZodString>;
+        shell: z.ZodOptional<z.ZodString>;
+        gecos: z.ZodOptional<z.ZodString>;
+        groupName: z.ZodOptional<z.ZodString>;
+        supplementaryGids: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+        accounts: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            uid: z.ZodNumber;
+            gid: z.ZodNumber;
+            username: z.ZodString;
+            homedir: z.ZodString;
+            shell: z.ZodString;
+            gecos: z.ZodOptional<z.ZodString>;
+            supplementaryGids: z.ZodArray<z.ZodNumber>;
+        }, z.core.$strict>>>;
+        groups: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            gid: z.ZodNumber;
+            name: z.ZodString;
+            members: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+    }, z.core.$strict>>;
     readonly software: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
     readonly defaultSoftware: z.ZodOptional<z.ZodBoolean>;
     readonly loopbackExemptPorts: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
     readonly allowedNodeBuiltins: z.ZodOptional<z.ZodArray<z.ZodString>>;
     readonly highResolutionTime: z.ZodOptional<z.ZodBoolean>;
-    readonly rootFilesystem: z.ZodOptional<z.ZodObject<{
+    readonly database: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"actor_uds">;
+        path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"sqlite_file">;
+        path: z.ZodString;
+    }, z.core.$strict>], "type">>;
+    readonly rootFilesystem: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
         type: z.ZodOptional<z.ZodLiteral<"overlay">>;
         mode: z.ZodOptional<z.ZodEnum<{
             ephemeral: "ephemeral";
@@ -245,10 +320,19 @@ export declare const agentOsOptionFieldSchemas: {
             kind: z.ZodLiteral<"snapshot-export">;
             source: z.ZodUnknown;
         }, z.core.$strict>]>>>;
-    }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"native">;
+        plugin: z.ZodObject<{
+            id: z.ZodString;
+            config: z.ZodOptional<z.ZodUnknown>;
+        }, z.core.$strict>;
+        readOnly: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>]>>;
     readonly mounts: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
         path: z.ZodString;
         driver: z.ZodCustom<unknown, unknown>;
+        guestFstype: z.ZodOptional<z.ZodString>;
+        guestSource: z.ZodOptional<z.ZodString>;
         readOnly: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strict>, z.ZodType<NativeMountConfig, unknown, z.core.$ZodTypeInternals<NativeMountConfig, unknown>>, z.ZodObject<{
         path: z.ZodString;
@@ -262,9 +346,9 @@ export declare const agentOsOptionFieldSchemas: {
             lowers: z.ZodArray<z.ZodUnknown>;
         }, z.core.$strict>;
     }, z.core.$strict>]>>>;
-    readonly additionalInstructions: z.ZodOptional<z.ZodString>;
+    readonly sandbox: z.ZodOptional<z.ZodCustom<unknown, unknown>>;
     readonly scheduleDriver: z.ZodOptional<z.ZodCustom<unknown, unknown>>;
-    readonly toolKits: z.ZodOptional<z.ZodArray<z.ZodType<ToolKit, unknown, z.core.$ZodTypeInternals<ToolKit, unknown>>>>;
+    readonly bindings: z.ZodOptional<z.ZodArray<z.ZodType<Bindings, unknown, z.core.$ZodTypeInternals<Bindings, unknown>>>>;
     readonly permissions: z.ZodOptional<z.ZodObject<{
         fs: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
             allow: "allow";
@@ -402,15 +486,18 @@ export declare const agentOsOptionFieldSchemas: {
         http: z.ZodOptional<z.ZodObject<{
             maxFetchResponseBytes: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>;
-        tools: z.ZodOptional<z.ZodObject<{
-            defaultToolTimeoutMs: z.ZodOptional<z.ZodNumber>;
-            maxToolTimeoutMs: z.ZodOptional<z.ZodNumber>;
-            maxRegisteredToolkits: z.ZodOptional<z.ZodNumber>;
-            maxRegisteredToolsPerVm: z.ZodOptional<z.ZodNumber>;
-            maxToolsPerToolkit: z.ZodOptional<z.ZodNumber>;
-            maxToolSchemaBytes: z.ZodOptional<z.ZodNumber>;
-            maxToolExamplesPerTool: z.ZodOptional<z.ZodNumber>;
-            maxToolExampleInputBytes: z.ZodOptional<z.ZodNumber>;
+        tls: z.ZodOptional<z.ZodObject<{
+            maxBufferedBytes: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        bindings: z.ZodOptional<z.ZodObject<{
+            defaultBindingTimeoutMs: z.ZodOptional<z.ZodNumber>;
+            maxBindingTimeoutMs: z.ZodOptional<z.ZodNumber>;
+            maxRegisteredCollections: z.ZodOptional<z.ZodNumber>;
+            maxRegisteredBindingsPerVm: z.ZodOptional<z.ZodNumber>;
+            maxBindingsPerCollection: z.ZodOptional<z.ZodNumber>;
+            maxBindingSchemaBytes: z.ZodOptional<z.ZodNumber>;
+            maxExamplesPerBinding: z.ZodOptional<z.ZodNumber>;
+            maxBindingExampleInputBytes: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>;
         plugins: z.ZodOptional<z.ZodObject<{
             maxPersistedManifestBytes: z.ZodOptional<z.ZodNumber>;
@@ -419,6 +506,25 @@ export declare const agentOsOptionFieldSchemas: {
         acp: z.ZodOptional<z.ZodObject<{
             maxReadLineBytes: z.ZodOptional<z.ZodNumber>;
             stdoutBufferByteLimit: z.ZodOptional<z.ZodNumber>;
+            maxCompletedMessageBytes: z.ZodOptional<z.ZodNumber>;
+            maxTurnOutputBytes: z.ZodOptional<z.ZodNumber>;
+            maxPromptBytes: z.ZodOptional<z.ZodNumber>;
+            maxPromptBlocks: z.ZodOptional<z.ZodNumber>;
+            maxFallbackContinuationBytes: z.ZodOptional<z.ZodNumber>;
+            maxSessionHistoryBytes: z.ZodOptional<z.ZodNumber>;
+            maxSessionHistoryEvents: z.ZodOptional<z.ZodNumber>;
+            maxHistoryPageEntries: z.ZodOptional<z.ZodNumber>;
+            maxSessionListEntries: z.ZodOptional<z.ZodNumber>;
+            maxSessionsPerVm: z.ZodOptional<z.ZodNumber>;
+            maxPromptsPerSession: z.ZodOptional<z.ZodNumber>;
+            maxPromptsPerVm: z.ZodOptional<z.ZodNumber>;
+            maxPendingPermissionsPerSession: z.ZodOptional<z.ZodNumber>;
+            maxPendingPermissionsPerVm: z.ZodOptional<z.ZodNumber>;
+            maxPermissionOutcomesPerSession: z.ZodOptional<z.ZodNumber>;
+            maxPermissionOutcomesPerVm: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        sqlite: z.ZodOptional<z.ZodObject<{
+            maxResultBytes: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>;
         jsRuntime: z.ZodOptional<z.ZodObject<{
             v8HeapLimitMb: z.ZodOptional<z.ZodNumber>;
@@ -443,6 +549,19 @@ export declare const agentOsOptionFieldSchemas: {
             syncReadLimitBytes: z.ZodOptional<z.ZodNumber>;
             prewarmTimeoutMs: z.ZodOptional<z.ZodNumber>;
             runnerHeapLimitMb: z.ZodOptional<z.ZodNumber>;
+            runnerCpuTimeLimitMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        execution: z.ZodOptional<z.ZodObject<{
+            completedTtlMs: z.ZodOptional<z.ZodNumber>;
+            maxCompletedExecutions: z.ZodOptional<z.ZodNumber>;
+            liveExecutionWarningThreshold: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        process: z.ZodOptional<z.ZodObject<{
+            maxSpawnFileActions: z.ZodOptional<z.ZodNumber>;
+            maxSpawnFileActionBytes: z.ZodOptional<z.ZodNumber>;
+            pendingStdinBytes: z.ZodOptional<z.ZodNumber>;
+            pendingEventCount: z.ZodOptional<z.ZodNumber>;
+            pendingEventBytes: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
     readonly onAgentStderr: z.ZodOptional<z.ZodCustom<AgentStderrHandler, AgentStderrHandler>>;

package/dist/options-schema.js

@@ -2,6 +2,46 @@ import { z } from "zod/v4";
 const stringArray = z.array(z.string());
 const nonNegativeInteger = z.number().int().nonnegative();
 const positiveInteger = z.number().int().positive();
+const vmIdSchema = z.number().int().min(0).max(0xffffffff);
+const vmAccountNameSchema = z
+    .string()
+    .min(1)
+    .refine((value) => !/[:\s\0]/u.test(value), "Invalid account name");
+const vmGuestPathSchema = z.string().startsWith("/");
+const vmUserAccountSchema = z
+    .object({
+    uid: vmIdSchema,
+    gid: vmIdSchema,
+    username: vmAccountNameSchema,
+    homedir: vmGuestPathSchema,
+    shell: vmGuestPathSchema,
+    gecos: z.string().optional(),
+    supplementaryGids: z.array(vmIdSchema).max(64),
+})
+    .strict();
+const vmGroupSchema = z
+    .object({
+    gid: vmIdSchema,
+    name: vmAccountNameSchema,
+    members: z.array(vmAccountNameSchema),
+})
+    .strict();
+const vmUserConfigSchema = z
+    .object({
+    uid: vmIdSchema.optional(),
+    gid: vmIdSchema.optional(),
+    euid: vmIdSchema.optional(),
+    egid: vmIdSchema.optional(),
+    username: z.string().optional(),
+    homedir: z.string().optional(),
+    shell: z.string().optional(),
+    gecos: z.string().optional(),
+    groupName: z.string().optional(),
+    supplementaryGids: z.array(vmIdSchema).max(64).optional(),
+    accounts: z.array(vmUserAccountSchema).max(64).optional(),
+    groups: z.array(vmGroupSchema).max(128).optional(),
+})
+    .strict();
 const functionSchema = z.custom((value) => typeof value === "function", { message: "Expected function" });
 const permissionModeSchema = z.enum(["allow", "deny"]);
 const fsPermissionRuleSchema = z
@@ -30,7 +70,10 @@ const patternRulePermissionsSchema = z
     rules: z.array(patternPermissionRuleSchema),
 })
     .strict();
-const fsPermissionsSchema = z.union([permissionModeSchema, fsRulePermissionsSchema]);
+const fsPermissionsSchema = z.union([
+    permissionModeSchema,
+    fsRulePermissionsSchema,
+]);
 const patternPermissionsSchema = z.union([
     permissionModeSchema,
     patternRulePermissionsSchema,
@@ -76,16 +119,20 @@ export const agentOsLimitsSchema = z
         .object({ maxFetchResponseBytes: positiveInteger.optional() })
         .strict()
         .optional(),
-    tools: z
+    tls: z
+        .object({ maxBufferedBytes: positiveInteger.optional() })
+        .strict()
+        .optional(),
+    bindings: z
         .object({
-        defaultToolTimeoutMs: nonNegativeInteger.optional(),
-        maxToolTimeoutMs: nonNegativeInteger.optional(),
-        maxRegisteredToolkits: positiveInteger.optional(),
-        maxRegisteredToolsPerVm: positiveInteger.optional(),
-        maxToolsPerToolkit: positiveInteger.optional(),
-        maxToolSchemaBytes: positiveInteger.optional(),
-        maxToolExamplesPerTool: nonNegativeInteger.optional(),
-        maxToolExampleInputBytes: positiveInteger.optional(),
+        defaultBindingTimeoutMs: nonNegativeInteger.optional(),
+        maxBindingTimeoutMs: nonNegativeInteger.optional(),
+        maxRegisteredCollections: positiveInteger.optional(),
+        maxRegisteredBindingsPerVm: positiveInteger.optional(),
+        maxBindingsPerCollection: positiveInteger.optional(),
+        maxBindingSchemaBytes: positiveInteger.optional(),
+        maxExamplesPerBinding: nonNegativeInteger.optional(),
+        maxBindingExampleInputBytes: positiveInteger.optional(),
     })
         .strict()
         .optional(),
@@ -100,9 +147,29 @@ export const agentOsLimitsSchema = z
         .object({
         maxReadLineBytes: positiveInteger.optional(),
         stdoutBufferByteLimit: positiveInteger.optional(),
+        maxCompletedMessageBytes: positiveInteger.optional(),
+        maxTurnOutputBytes: positiveInteger.optional(),
+        maxPromptBytes: positiveInteger.optional(),
+        maxPromptBlocks: positiveInteger.optional(),
+        maxFallbackContinuationBytes: positiveInteger.optional(),
+        maxSessionHistoryBytes: positiveInteger.optional(),
+        maxSessionHistoryEvents: positiveInteger.optional(),
+        maxHistoryPageEntries: positiveInteger.optional(),
+        maxSessionListEntries: positiveInteger.optional(),
+        maxSessionsPerVm: positiveInteger.optional(),
+        maxPromptsPerSession: positiveInteger.optional(),
+        maxPromptsPerVm: positiveInteger.optional(),
+        maxPendingPermissionsPerSession: positiveInteger.optional(),
+        maxPendingPermissionsPerVm: positiveInteger.optional(),
+        maxPermissionOutcomesPerSession: positiveInteger.optional(),
+        maxPermissionOutcomesPerVm: positiveInteger.optional(),
     })
         .strict()
         .optional(),
+    sqlite: z
+        .object({ maxResultBytes: positiveInteger.optional() })
+        .strict()
+        .optional(),
     jsRuntime: z
         .object({
         v8HeapLimitMb: positiveInteger.optional(),
@@ -133,6 +200,25 @@ export const agentOsLimitsSchema = z
         syncReadLimitBytes: positiveInteger.optional(),
         prewarmTimeoutMs: positiveInteger.optional(),
         runnerHeapLimitMb: positiveInteger.optional(),
+        runnerCpuTimeLimitMs: nonNegativeInteger.optional(),
+    })
+        .strict()
+        .optional(),
+    execution: z
+        .object({
+        completedTtlMs: positiveInteger.optional(),
+        maxCompletedExecutions: positiveInteger.optional(),
+        liveExecutionWarningThreshold: positiveInteger.optional(),
+    })
+        .strict()
+        .optional(),
+    process: z
+        .object({
+        maxSpawnFileActions: positiveInteger.optional(),
+        maxSpawnFileActionBytes: positiveInteger.optional(),
+        pendingStdinBytes: positiveInteger.optional(),
+        pendingEventCount: positiveInteger.optional(),
+        pendingEventBytes: positiveInteger.optional(),
     })
         .strict()
         .optional(),
@@ -140,9 +226,11 @@ export const agentOsLimitsSchema = z
     .strict();
 const rootLowerInputSchema = z.union([
     z.object({ kind: z.literal("bundled-base-filesystem") }).strict(),
-    z.object({ kind: z.literal("snapshot-export"), source: z.unknown() }).strict(),
+    z
+        .object({ kind: z.literal("snapshot-export"), source: z.unknown() })
+        .strict(),
 ]);
-export const rootFilesystemConfigSchema = z
+const overlayRootFilesystemConfigSchema = z
     .object({
     type: z.literal("overlay").optional(),
     mode: z.enum(["ephemeral", "read-only"]).optional(),
@@ -156,12 +244,25 @@ const nativeMountPluginSchema = z
     config: z.unknown().optional(),
 })
     .strict();
+const nativeRootFilesystemConfigSchema = z
+    .object({
+    type: z.literal("native"),
+    plugin: nativeMountPluginSchema,
+    readOnly: z.boolean().optional(),
+})
+    .strict();
+export const rootFilesystemConfigSchema = z.union([
+    overlayRootFilesystemConfigSchema,
+    nativeRootFilesystemConfigSchema,
+]);
 const plainMountConfigSchema = z
     .object({
     path: z.string(),
     driver: z.custom((value) => typeof value === "object" && value !== null, {
         message: "Expected filesystem driver object",
     }),
+    guestFstype: z.string().min(1).optional(),
+    guestSource: z.string().min(1).optional(),
     readOnly: z.boolean().optional(),
 })
     .strict();
@@ -169,6 +270,8 @@ export const nativeMountConfigSchema = z
     .object({
     path: z.string(),
     plugin: nativeMountPluginSchema,
+    guestFstype: z.string().min(1).optional(),
+    guestSource: z.string().min(1).optional(),
     readOnly: z.boolean().optional(),
 })
     .strict();
@@ -206,59 +309,89 @@ export const sidecarConfigSchema = z.union([
     sharedSidecarConfigSchema,
     explicitSidecarSchema,
 ]);
-const toolExampleSchema = z
+const bindingExampleSchema = z
     .object({
     description: z.string(),
     input: z.unknown(),
 })
     .strict();
-export const hostToolSchema = z
+export const bindingSchema = z
     .object({
     description: z.string(),
     inputSchema: z.custom((value) => typeof value === "object" && value !== null, {
         message: "Expected Zod schema object",
     }),
     execute: functionSchema,
-    examples: z.array(toolExampleSchema).optional(),
+    examples: z.array(bindingExampleSchema).optional(),
     timeout: nonNegativeInteger.optional(),
 })
     .strict();
-export const toolKitSchema = z
+export const bindingsSchema = z
     .object({
     name: z.string(),
     description: z.string(),
-    tools: z.record(z.string(), hostToolSchema),
+    bindings: z.record(z.string(), bindingSchema),
 })
     .strict();
 /**
  * Shared AgentOsOptions field schemas.
  *
- * Core uses the full object. The Rivet/native actor composes a narrower
- * native-safe subset in `packages/agentos/src/config.ts`; keep that subset and
- * `crates/agentos-actor-plugin/src/config.rs::AgentOsConfigJson` aligned when
- * adding options that cross the native boundary.
+ * Core and the TypeScript Rivet actor both use the full object. Runtime-owned
+ * behavior is serialized by AgentOs.create() into the sidecar VM config.
  */
 export const agentOsOptionFieldSchemas = {
+    user: vmUserConfigSchema.optional(),
     software: z.array(z.unknown()).optional(),
     defaultSoftware: z.boolean().optional(),
     loopbackExemptPorts: z.array(z.number().int().min(0).max(65535)).optional(),
     allowedNodeBuiltins: stringArray.optional(),
     highResolutionTime: z.boolean().optional(),
+    database: z
+        .discriminatedUnion("type", [
+        z
+            .object({
+            type: z.literal("actor_uds"),
+            path: z.string().min(1),
+        })
+            .strict(),
+        z
+            .object({
+            type: z.literal("sqlite_file"),
+            path: z.string().min(1),
+        })
+            .strict(),
+    ])
+        .optional(),
     rootFilesystem: rootFilesystemConfigSchema.optional(),
     mounts: z.array(mountConfigSchema).optional(),
-    additionalInstructions: z.string().optional(),
+    sandbox: z
+        .custom((value) => value === undefined ||
+        (typeof value === "object" && value !== null && !Array.isArray(value)), { message: "Expected sandbox options object" })
+        .optional(),
     scheduleDriver: z
         .custom((value) => typeof value === "object" && value !== null, {
         message: "Expected schedule driver object",
     })
         .optional(),
-    toolKits: z.array(toolKitSchema).optional(),
+    bindings: z.array(bindingsSchema).optional(),
     permissions: permissionsSchema.optional(),
     sidecar: sidecarConfigSchema.optional(),
     limits: agentOsLimitsSchema.optional(),
-    onAgentStderr: z.custom((value) => typeof value === "function", { message: "Expected function" }).optional(),
-    onAgentExit: z.custom((value) => typeof value === "function", { message: "Expected function" }).optional(),
-    onLimitWarning: z.custom((value) => typeof value === "function", { message: "Expected function" }).optional(),
+    onAgentStderr: z
+        .custom((value) => typeof value === "function", {
+        message: "Expected function",
+    })
+        .optional(),
+    onAgentExit: z
+        .custom((value) => typeof value === "function", {
+        message: "Expected function",
+    })
+        .optional(),
+    onLimitWarning: z
+        .custom((value) => typeof value === "function", {
+        message: "Expected function",
+    })
+        .optional(),
 };
 export const agentOsOptionsSchema = z
     .object(agentOsOptionFieldSchemas)

package/dist/packages.d.ts

@@ -1,7 +1,7 @@
 import type { SoftwarePackageRef } from "./agentos-package.js";
 /**
  * Input type for the `software` option. Software is a self-contained package
- * directory that the secure-exec sidecar materializes into the `/opt/agentos`
+ * directory that the agentos sidecar materializes into the `/opt/agentos`
  * projection. Accepts a package-dir ref or an array of refs for meta-packages.
  */
 export type SoftwareEntry = SoftwarePackageRef;

package/dist/runtime-compat.d.ts

@@ -54,7 +54,9 @@ export interface VirtualFileSystem {
     lstat(path: string): Promise<VirtualStat>;
     link(oldPath: string, newPath: string): Promise<void>;
     chmod(path: string, mode: number): Promise<void>;
-    chown(path: string, uid: number, gid: number): Promise<void>;
+    chown(path: string, uid: number, gid: number, options?: {
+        followSymlinks?: boolean;
+    }): Promise<void>;
     utimes(path: string, atime: number, mtime: number): Promise<void>;
     truncate(path: string, length: number): Promise<void>;
     pread(path: string, offset: number, length: number): Promise<Uint8Array>;
@@ -111,6 +113,7 @@ export interface ManagedProcess {
 export interface ShellHandle {
     pid: number;
     write(data: Uint8Array | string): Promise<void>;
+    /** Ordered PTY output containing stdout and stderr exactly once. */
     onData: ((data: Uint8Array) => void) | null;
     resize(cols: number, rows: number): void;
     kill(signal?: number): void;
@@ -123,6 +126,7 @@ export interface OpenShellOptions {
     cwd?: string;
     cols?: number;
     rows?: number;
+    /** Optional stderr-only diagnostic tap; do not render it alongside `onData`. */
     onStderr?: (data: Uint8Array) => void;
 }
 export interface ConnectTerminalOptions extends OpenShellOptions {
@@ -361,40 +365,6 @@ export declare class KernelError extends Error {
     readonly code: string;
     constructor(code: string, message: string);
 }
-export declare class InMemoryFileSystem implements VirtualFileSystem {
-    private readonly entries;
-    constructor();
-    readFile(targetPath: string): Promise<Uint8Array>;
-    readTextFile(targetPath: string): Promise<string>;
-    readDir(targetPath: string): Promise<string[]>;
-    readDirWithTypes(targetPath: string): Promise<VirtualDirEntry[]>;
-    writeFile(targetPath: string, content: string | Uint8Array): Promise<void>;
-    createDir(targetPath: string): Promise<void>;
-    mkdir(targetPath: string, options?: {
-        recursive?: boolean;
-    }): Promise<void>;
-    exists(targetPath: string): Promise<boolean>;
-    stat(targetPath: string): Promise<VirtualStat>;
-    removeFile(targetPath: string): Promise<void>;
-    removeDir(targetPath: string): Promise<void>;
-    rename(oldPath: string, newPath: string): Promise<void>;
-    realpath(targetPath: string): Promise<string>;
-    symlink(target: string, linkPath: string): Promise<void>;
-    readlink(targetPath: string): Promise<string>;
-    lstat(targetPath: string): Promise<VirtualStat>;
-    link(oldPath: string, newPath: string): Promise<void>;
-    chmod(targetPath: string, mode: number): Promise<void>;
-    chown(targetPath: string, uid: number, gid: number): Promise<void>;
-    utimes(targetPath: string, atime: number, mtime: number): Promise<void>;
-    truncate(targetPath: string, length: number): Promise<void>;
-    pread(targetPath: string, offset: number, length: number): Promise<Uint8Array>;
-    pwrite(targetPath: string, offset: number, data: Uint8Array): Promise<void>;
-    private resolvePath;
-    private resolveEntry;
-    private newDirectory;
-    private toStat;
-}
-export declare function createInMemoryFileSystem(): InMemoryFileSystem;
 export declare class NodeFileSystem implements VirtualFileSystem {
     readonly rootPath: string;
     constructor(options: {
@@ -488,4 +458,5 @@ export declare function createKernel(options: {
         readOnly?: boolean;
     }>;
     syncFilesystemOnDispose?: boolean;
+    maxFilesystemBytes?: number;
 }): Kernel;