@rivet-dev/agentos-core 0.0.0-nathan-agentos-combined.e833bb7 → 0.0.0-nathan-agentos-package-resolution.3785b9a

package/README.md

@@ -157,10 +157,7 @@ await vm.dispose();
 - `MountConfigCustom` — Caller-provided VirtualFileSystem
 - `NativeMountConfig` — Declarative sidecar mount plugin configuration
 - `MountConfigOverlay` — Copy-on-write overlay (lower + upper layers)
-
-**Companion Filesystem Packages**
-- `createGoogleDriveBackend()` — Declarative Google Drive native mount helper from `@secure-exec/google-drive`
-- `createS3Backend()` — Declarative S3-compatible native mount helper from `@secure-exec/s3`
+- `chunkedS3MountPlugin()` — Declarative S3-compatible native mount plugin descriptor (from `@secure-exec/core/descriptors`)
 
 **MCP Servers**
 - `McpServerConfig` — Union of local and remote MCP configs

package/dist/agent-os.d.ts

@@ -46,8 +46,12 @@ export interface BatchReadResult {
 /** Entry in the agent registry, describing an available agent type. */
 export interface AgentRegistryEntry {
     id: string;
-    acpAdapter: string;
-    agentPackage: string;
+    /** npm adapter package (legacy agents) — absent for `/opt/agentos` packages. */
+    acpAdapter?: string;
+    /** npm agent package (legacy agents) — absent for `/opt/agentos` packages. */
+    agentPackage?: string;
+    /** Pre-resolved adapter command path for an `/opt/agentos` agent package. */
+    adapterEntrypoint?: string;
     installed: boolean;
 }
 import { type AgentType } from "./agents.js";
@@ -55,6 +59,7 @@ import type { ScheduleDriver } from "./cron/schedule-driver.js";
 import type { CronEventHandler, CronJob, CronJobInfo, CronJobOptions } from "./cron/types.js";
 import { type LayerStore, type OverlayFilesystemMode, type RootSnapshotExport, type SnapshotLayerHandle } from "./layers.js";
 import { type SoftwareInput } from "./packages.js";
+import { type PackageDescriptor } from "./agentos-package.js";
 import { type AgentOsSidecarPlacement } from "./sidecar/rpc-client.js";
 export interface AgentOsSharedSidecarOptions {
     pool?: string;
@@ -198,6 +203,25 @@ export interface AgentStderrEvent {
     chunk: Uint8Array;
 }
 export type AgentStderrHandler = (event: AgentStderrEvent) => void;
+/**
+ * A near-capacity warning for one bounded limit (a queue/buffer, a saturating
+ * resource cap, or a memory envelope) inside the VM runtime. Delivered the moment
+ * usage crosses the runtime's warning threshold (~80%), once per crossing — the
+ * runtime applies edge-triggering + hysteresis, so this never spams.
+ */
+export interface LimitWarning {
+    /** Stable limit name, e.g. `"javascript_event_channel"` or `"vm_open_fds"`. */
+    limit: string;
+    /** Limit class: `"queue"`, `"resource"`, or `"memory"`. */
+    category: string;
+    /** Current observed usage. */
+    observed: number;
+    /** Configured capacity. */
+    capacity: number;
+    /** Observed fill as a percentage of capacity (0–100). */
+    fillPercent: number;
+}
+export type LimitWarningHandler = (warning: LimitWarning) => void;
 /**
  * Public core VM options.
  *
@@ -267,6 +291,12 @@ export interface AgentOsOptions {
      * `process.stderr`.
      */
     onAgentStderr?: AgentStderrHandler;
+    /**
+     * Called when a bounded limit inside the VM runtime approaches capacity
+     * (~80%, edge-triggered with hysteresis so it does not spam). Use it to alert
+     * on a slow consumer or a runaway guest before the limit is actually hit.
+     */
+    onLimitWarning?: LimitWarningHandler;
 }
 /** Configuration for a local MCP server (spawned as a child process). */
 export interface McpServerConfigLocal {
@@ -367,6 +397,8 @@ export declare class AgentOs {
     private _closedShellIds;
     private _pendingShellExitPromises;
     private _shellCounter;
+    /** Command names linked into `/opt/agentos/bin` at runtime (via the sidecar). */
+    private _linkedCommands;
     private _acpTerminals;
     private _acpTerminalCounter;
     private _softwareRoots;
@@ -378,12 +410,14 @@ export declare class AgentOs {
     private _hostMounts;
     private _env;
     private _rootFilesystem;
+    private readonly _additionalInstructions;
     private _sidecarLease;
     private readonly _sidecarClient;
     private readonly _sidecarSession;
     private readonly _sidecarVm;
     private readonly _disposeSidecarEventListener;
     private readonly _agentStderrHandler?;
+    private readonly _limitWarningHandler?;
     private constructor();
     static createSidecar(options?: AgentOsCreateSidecarOptions): Promise<AgentOsSidecar>;
     static getSharedSidecar(options?: AgentOsSharedSidecarOptions): Promise<AgentOsSidecar>;
@@ -395,9 +429,9 @@ export declare class AgentOs {
         pid: number;
     };
     /** Write data to a process's stdin. */
-    writeProcessStdin(pid: number, data: string | Uint8Array): void;
+    writeProcessStdin(pid: number, data: string | Uint8Array): Promise<void>;
     /** Close a process's stdin stream. */
-    closeProcessStdin(pid: number): void;
+    closeProcessStdin(pid: number): Promise<void>;
     /** Subscribe to stdout data from a process. Returns an unsubscribe function. */
     onProcessStdout(pid: number, handler: (data: Uint8Array) => void): () => void;
     /** Subscribe to stderr data from a process. Returns an unsubscribe function. */
@@ -438,11 +472,13 @@ export declare class AgentOs {
     };
     connectTerminal(options?: ConnectTerminalOptions): Promise<number>;
     /** Write data to a shell's PTY input. */
-    writeShell(shellId: string, data: string | Uint8Array): void;
+    writeShell(shellId: string, data: string | Uint8Array): Promise<void>;
     /** Subscribe to data output from a shell. Returns an unsubscribe function. */
     onShellData(shellId: string, handler: (data: Uint8Array) => void): () => void;
     /** Notify a shell of terminal resize. */
     resizeShell(shellId: string, cols: number, rows: number): void;
+    /** Wait for a shell to exit and return its process exit code. */
+    waitShell(shellId: string): Promise<number>;
     /** Kill a shell process and remove it from tracking. */
     closeShell(shellId: string): void;
     private _resolveVmPathToHostPath;
@@ -462,6 +498,15 @@ export declare class AgentOs {
     listSessions(): SessionInfo[];
     /** Internal helper: retrieve a session or throw. */
     private _requireSession;
+    /**
+     * Dynamically link a software package into the RUNNING VM. The package's
+     * `bin/` commands appear under `/opt/agentos/bin` (on `$PATH`) and its `share/man`
+     * pages under MANPATH immediately — the `/opt/agentos` mount is host-backed, so
+     * writing into its staging dir is reflected live with no reboot. An `agent`
+     * block registers the package for `createSession(name)`. Persists for the VM's
+     * lifetime (and across a snapshot iff the volume persists).
+     */
+    linkSoftware(descriptor: PackageDescriptor): Promise<void>;
     /** Returns all registered agents with their installation status. */
     listAgents(): AgentRegistryEntry[];
     private _syncSessionState;
@@ -469,9 +514,27 @@ export declare class AgentOs {
     private _recordSessionNotification;
     private _dispatchSessionEvent;
     private _subscribeSessionEvents;
+    /**
+     * Warn once per session (host-visible) that a tool-permission request was
+     * auto-denied because no `onPermissionRequest` handler is registered. Shared
+     * by both the bare-callback and JSON-RPC permission paths so the message and
+     * the once-per-session guard cannot drift between them.
+     */
+    private _warnNoPermissionHandlerOnce;
+    /** Best-effort human label for the tool named in a permission request. */
+    private _permissionToolLabel;
+    /**
+     * Emit a host-visible warning for a session through the same agent-process log
+     * channel that surfaces adapter stderr (`onAgentStderr`, default: process
+     * stderr). Used for agent-os-owned diagnostics — e.g. a permission request
+     * that was auto-denied because no host hook is registered — so they never fire
+     * silently inside the sidecar.
+     */
+    private _emitSessionWarning;
     private _recordAgentStderr;
     private _applySyntheticConfigOverrides;
     private _handleSidecarEvent;
+    private _handleLimitWarning;
     private _handleAcpExtEvent;
     private _unsupportedConfigResponse;
     private _sendAcpRequest;
@@ -503,22 +566,6 @@ export declare class AgentOs {
      * there is no surviving store and the fallback tier always runs.
      */
     resumeSession(sessionId: string, agentType: AgentType | string, options?: ResumeSessionOptions): Promise<ResumeSessionResult>;
-    /**
-     * Resolve the VM bin entry point of an ACP adapter package.
-     * Reads from the host filesystem since kernel.readFile() resolves through
-     * mounts; adapter package.json is read directly off the host dir backing
-     * the relevant mount.
-     */
-    private _resolveAdapterBin;
-    /**
-     * Parent of the host directory backing the `/root/node_modules` mount, if
-     * the caller supplied one (e.g. via `nodeModulesMount(...)`). Used as the
-     * `resolvePackageDir` start dir for adapter/agent package resolution when no
-     * software root matches. `nodeModulesMount` mounts `<dir>/node_modules`, so
-     * the start dir is `<dir>` (one level above the node_modules tree).
-     */
-    private _nodeModulesHostRoot;
-    private _resolvePackageBin;
     private _installSidecarRequestHandler;
     private _handleAcpExtSidecarRequest;
     private _dispatchAcpSidecarRequest;