@rivet-dev/agentos-core 0.0.0-nathan-binding-workspace.4640d5c → 0.0.0-nathan-binding-workspace.abc7ec9

package/dist/agents.js

@@ -1,7 +1,7 @@
 // Agent configurations for ACP-compatible coding agents
 export const AGENT_CONFIGS = {
     pi: {
-        acpAdapter: "@rivet-dev/agentos-pi",
+        acpAdapter: "@agentos-software/pi",
         agentPackage: "@mariozechner/pi-coding-agent",
     },
     "pi-cli": {
@@ -9,20 +9,20 @@ export const AGENT_CONFIGS = {
         agentPackage: "@mariozechner/pi-coding-agent",
     },
     opencode: {
-        acpAdapter: "@rivet-dev/agentos-opencode",
-        agentPackage: "@rivet-dev/agentos-opencode",
+        acpAdapter: "@agentos-software/opencode",
+        agentPackage: "@agentos-software/opencode",
         defaultEnv: {
             OPENCODE_DISABLE_CONFIG_DEP_INSTALL: "1",
             OPENCODE_DISABLE_EMBEDDED_WEB_UI: "1",
         },
     },
     claude: {
-        acpAdapter: "@rivet-dev/agentos-claude",
+        acpAdapter: "@agentos-software/claude-code",
         agentPackage: "@anthropic-ai/claude-agent-sdk",
         defaultEnv: {
             CLAUDE_AGENT_SDK_CLIENT_APP: "@rivet-dev/agentos",
             CLAUDE_CODE_SIMPLE: "1",
-            CLAUDE_CODE_FORCE_AGENTOS_RIPGREP: "1",
+            CLAUDE_CODE_FORCE_AGENT_OS_RIPGREP: "1",
             CLAUDE_CODE_DEFER_GROWTHBOOK_INIT: "1",
             CLAUDE_CODE_DISABLE_CWD_PERSIST: "1",
             CLAUDE_CODE_DISABLE_DEV_NULL_REDIRECT: "1",

package/dist/cron/cron-manager.d.ts

@@ -1,8 +1,8 @@
-import type { AgentOS } from "../agentos.js";
+import type { AgentOs } from "../agent-os.js";
 import type { ScheduleDriver } from "./schedule-driver.js";
 import type { CronEventHandler, CronJob, CronJobInfo, CronJobOptions } from "./types.js";
 /**
- * Internal class that bridges ScheduleDriver and AgentOS. Owns the job
+ * Internal class that bridges ScheduleDriver and AgentOs. Owns the job
  * registry, executes actions, and emits lifecycle events.
  */
 export declare class CronManager {
@@ -10,7 +10,7 @@ export declare class CronManager {
     private driver;
     private vm;
     private listeners;
-    constructor(vm: AgentOS, driver: ScheduleDriver);
+    constructor(vm: AgentOs, driver: ScheduleDriver);
     schedule(options: CronJobOptions): CronJob;
     cancel(id: string): void;
     list(): CronJobInfo[];

package/dist/cron/cron-manager.js

@@ -9,7 +9,7 @@ function computeNextTime(schedule) {
     return resolveSchedule(schedule).nextRun;
 }
 /**
- * Internal class that bridges ScheduleDriver and AgentOS. Owns the job
+ * Internal class that bridges ScheduleDriver and AgentOs. Owns the job
  * registry, executes actions, and emits lifecycle events.
  */
 export class CronManager {

package/dist/cron/types.d.ts

@@ -1,4 +1,4 @@
-import type { CreateSessionOptions } from "../agentos.js";
+import type { CreateSessionOptions } from "../agent-os.js";
 import type { AgentType } from "../agents.js";
 export type CronAction = {
     type: "session";

package/dist/host-dir-mount.d.ts

@@ -16,7 +16,7 @@ export interface HostDirMountPluginConfig extends MountConfigJsonObject {
  * mounts through the native `host_dir` plugin instead of a JS VFS backend.
  */
 export declare function createHostDirBackend(options: HostDirBackendOptions): NativeMountPluginDescriptor<HostDirMountPluginConfig>;
-/** A native `host_dir` mount, the serializable form `AgentOSOptions.mounts` accepts. */
+/** A native `host_dir` mount, the serializable form `AgentOsOptions.mounts` accepts. */
 export interface NodeModulesMountConfig {
     path: string;
     plugin: NativeMountPluginDescriptor<HostDirMountPluginConfig>;

package/dist/{bindings-zod.d.ts → host-tools-zod.d.ts}

@@ -1,5 +1,5 @@
 import type { ZodType } from "zod";
-export declare class BindingSchemaConversionError extends Error {
+export declare class HostToolSchemaConversionError extends Error {
     readonly path: string;
     readonly zodType: string;
     constructor(path: string, zodType: string, details?: string);

package/dist/{bindings-zod.js → host-tools-zod.js}

@@ -14,7 +14,7 @@ const UNSUPPORTED_TYPES = new Set([
     "pipe",
     "tuple",
 ]);
-export class BindingSchemaConversionError extends Error {
+export class HostToolSchemaConversionError extends Error {
     path;
     zodType;
     constructor(path, zodType, details) {
@@ -24,7 +24,7 @@ export class BindingSchemaConversionError extends Error {
         ]
             .filter(Boolean)
             .join(" "));
-        this.name = "BindingSchemaConversionError";
+        this.name = "HostToolSchemaConversionError";
         this.path = path;
         this.zodType = zodType;
     }
@@ -89,24 +89,24 @@ function isCustomRefinement(check) {
 }
 function validateChecks(schema, path, typeName) {
     if (getChecks(schema).some(isCustomRefinement)) {
-        throw new BindingSchemaConversionError(path, displayTypeName(typeName), "custom refinements cannot be represented faithfully in JSON Schema");
+        throw new HostToolSchemaConversionError(path, displayTypeName(typeName), "custom refinements cannot be represented faithfully in JSON Schema");
     }
 }
 function validateSchema(schema, path) {
     const typeName = normalizeTypeName(schema);
     if (metadataProducesRefs(schema)) {
-        throw new BindingSchemaConversionError(path, displayTypeName(typeName), "metadata that emits $ref/$defs is not supported");
+        throw new HostToolSchemaConversionError(path, displayTypeName(typeName), "metadata that emits $ref/$defs is not supported");
     }
     if (UNSUPPORTED_TYPES.has(typeName)) {
-        throw new BindingSchemaConversionError(path, displayTypeName(typeName));
+        throw new HostToolSchemaConversionError(path, displayTypeName(typeName));
     }
     if (typeName === "discriminatedunion") {
-        throw new BindingSchemaConversionError(path, displayTypeName(typeName));
+        throw new HostToolSchemaConversionError(path, displayTypeName(typeName));
     }
     if (TRANSPARENT_WRAPPER_TYPES.has(typeName)) {
         const inner = getInnerSchema(schema);
         if (!inner) {
-            throw new BindingSchemaConversionError(path, displayTypeName(typeName), "wrapper schema is missing its inner schema");
+            throw new HostToolSchemaConversionError(path, displayTypeName(typeName), "wrapper schema is missing its inner schema");
         }
         validateSchema(inner, path);
         return;
@@ -114,7 +114,7 @@ function validateSchema(schema, path) {
     if (typeName === "nullable") {
         const inner = getInnerSchema(schema);
         if (!inner) {
-            throw new BindingSchemaConversionError(path, displayTypeName(typeName), "nullable schema is missing its inner schema");
+            throw new HostToolSchemaConversionError(path, displayTypeName(typeName), "nullable schema is missing its inner schema");
         }
         validateSchema(inner, path);
         return;
@@ -133,7 +133,7 @@ function validateSchema(schema, path) {
     if (typeName === "array") {
         const itemSchema = getSchemaDef(schema).element;
         if (!itemSchema) {
-            throw new BindingSchemaConversionError(path, displayTypeName(typeName), "array schema is missing its item schema");
+            throw new HostToolSchemaConversionError(path, displayTypeName(typeName), "array schema is missing its item schema");
         }
         validateSchema(itemSchema, `${path}[]`);
         return;
@@ -143,11 +143,11 @@ function validateSchema(schema, path) {
         const keySchema = def.keyType;
         const valueSchema = def.valueType;
         if (!keySchema || !valueSchema) {
-            throw new BindingSchemaConversionError(path, displayTypeName(typeName), "record schema is missing its key or value schema");
+            throw new HostToolSchemaConversionError(path, displayTypeName(typeName), "record schema is missing its key or value schema");
         }
         const keyTypeName = normalizeTypeName(keySchema);
         if (keyTypeName !== "string" || getChecks(keySchema).length > 0) {
-            throw new BindingSchemaConversionError(path, displayTypeName(typeName), "record keys must be unconstrained strings");
+            throw new HostToolSchemaConversionError(path, displayTypeName(typeName), "record keys must be unconstrained strings");
         }
         validateSchema(valueSchema, `${path}<record-value>`);
         return;
@@ -155,7 +155,7 @@ function validateSchema(schema, path) {
     if (typeName === "union") {
         const options = getSchemaDef(schema).options;
         if (!Array.isArray(options) || options.length === 0) {
-            throw new BindingSchemaConversionError(path, displayTypeName(typeName), "union schema is missing its options");
+            throw new HostToolSchemaConversionError(path, displayTypeName(typeName), "union schema is missing its options");
         }
         for (let index = 0; index < options.length; index += 1) {
             validateSchema(options[index], `${path}<union:${index}>`);
@@ -168,7 +168,7 @@ function validateSchema(schema, path) {
         const [literalValue] = literalValues;
         if (literalValues.length !== 1 ||
             !("string number boolean".split(" ").includes(typeof literalValue) || literalValue === null)) {
-            throw new BindingSchemaConversionError(path, displayTypeName(typeName), "literal values must be JSON primitives");
+            throw new HostToolSchemaConversionError(path, displayTypeName(typeName), "literal values must be JSON primitives");
         }
         return;
     }
@@ -179,7 +179,7 @@ function validateSchema(schema, path) {
         typeName === "nativeenum") {
         return;
     }
-    throw new BindingSchemaConversionError(path, displayTypeName(typeName));
+    throw new HostToolSchemaConversionError(path, displayTypeName(typeName));
 }
 function sanitizeJsonSchema(value) {
     if (Array.isArray(value)) {
@@ -229,11 +229,11 @@ export function zodToJsonSchema(schema) {
     validateSchema(schema, "$");
     const jsonSchema = schema.toJSONSchema?.();
     if (!jsonSchema) {
-        throw new BindingSchemaConversionError("$", displayTypeName(normalizeTypeName(schema)), "schema does not expose toJSONSchema()");
+        throw new HostToolSchemaConversionError("$", displayTypeName(normalizeTypeName(schema)), "schema does not expose toJSONSchema()");
     }
     const unsupportedKeyword = findUnsupportedGeneratedKeyword(jsonSchema, "$");
     if (unsupportedKeyword) {
-        throw new BindingSchemaConversionError("$", displayTypeName(normalizeTypeName(schema)), `${unsupportedKeyword.keyword} emitted at ${unsupportedKeyword.path} is not supported`);
+        throw new HostToolSchemaConversionError("$", displayTypeName(normalizeTypeName(schema)), `${unsupportedKeyword.keyword} emitted at ${unsupportedKeyword.path} is not supported`);
     }
     const sanitized = sanitizeJsonSchema(jsonSchema);
     const description = getDescription(schema);

package/dist/host-tools.d.ts

@@ -0,0 +1,45 @@
+import type { ZodType } from "zod";
+/** Maximum length for tool and toolkit descriptions (characters). */
+export declare const MAX_TOOL_DESCRIPTION_LENGTH = 200;
+/**
+ * A single tool that executes on the host.
+ * Mirrors the shape of AI SDK's tool() but with host-execution semantics.
+ */
+export interface HostTool<INPUT = any, OUTPUT = any> {
+    /** Description shown to the agent in --help and prompt docs. Max 200 characters. */
+    description: string;
+    /** Zod schema for the input. Drives CLI flag generation and validation. */
+    inputSchema: ZodType<INPUT>;
+    /** Runs on the host when the agent invokes the tool. */
+    execute: (input: INPUT) => Promise<OUTPUT> | OUTPUT;
+    /** Examples included in auto-generated prompt docs. */
+    examples?: ToolExample<INPUT>[];
+    /** Timeout in ms. Default: 30000. */
+    timeout?: number;
+}
+export interface ToolExample<INPUT = any> {
+    /** Human description of what this example does. */
+    description: string;
+    /** The input args for the example. */
+    input: INPUT;
+}
+/**
+ * A named group of tools. Becomes a CLI binary: agentos-{name}.
+ */
+export interface ToolKit {
+    /** Toolkit name. Must be lowercase alphanumeric + hyphens. Becomes the CLI suffix: agentos-{name}. */
+    name: string;
+    /** Description shown in `agentos list-tools` and prompt docs. */
+    description: string;
+    /** The tools in this toolkit. Keys become subcommands. */
+    tools: Record<string, HostTool>;
+}
+/** Helper to create a HostTool with type inference. */
+export declare function hostTool<INPUT, OUTPUT>(def: HostTool<INPUT, OUTPUT>): HostTool<INPUT, OUTPUT>;
+/** Helper to create a ToolKit. */
+export declare function toolKit(def: ToolKit): ToolKit;
+/**
+ * Validate all description lengths in the given toolkits.
+ * Throws if any toolkit or tool description exceeds MAX_TOOL_DESCRIPTION_LENGTH.
+ */
+export declare function validateToolkits(toolKits: ToolKit[]): void;

package/dist/host-tools.js

@@ -0,0 +1,26 @@
+/** Maximum length for tool and toolkit descriptions (characters). */
+export const MAX_TOOL_DESCRIPTION_LENGTH = 200;
+/** Helper to create a HostTool with type inference. */
+export function hostTool(def) {
+    return def;
+}
+/** Helper to create a ToolKit. */
+export function toolKit(def) {
+    return def;
+}
+/**
+ * Validate all description lengths in the given toolkits.
+ * Throws if any toolkit or tool description exceeds MAX_TOOL_DESCRIPTION_LENGTH.
+ */
+export function validateToolkits(toolKits) {
+    for (const tk of toolKits) {
+        if (tk.description.length > MAX_TOOL_DESCRIPTION_LENGTH) {
+            throw new Error(`Toolkit "${tk.name}" description is ${tk.description.length} characters, max is ${MAX_TOOL_DESCRIPTION_LENGTH}`);
+        }
+        for (const [toolName, tool] of Object.entries(tk.tools)) {
+            if (tool.description.length > MAX_TOOL_DESCRIPTION_LENGTH) {
+                throw new Error(`Tool "${tk.name}/${toolName}" description is ${tool.description.length} characters, max is ${MAX_TOOL_DESCRIPTION_LENGTH}`);
+            }
+        }
+    }
+}

package/dist/index.d.ts

@@ -1,10 +1,10 @@
-export { AgentOS, AgentOSSidecar } from "./agentos.js";
+export { AgentOs, AgentOsSidecar } from "./agent-os.js";
 export { AGENT_CONFIGS } from "./agents.js";
 export { CronManager, InvalidScheduleError, PastScheduleError, TimerScheduleDriver, } from "./cron/index.js";
 export { createHostDirBackend, nodeModulesMount } from "./host-dir-mount.js";
-export { binding, bindings, MAX_TOOL_DESCRIPTION_LENGTH, validateBindings, } from "./bindings.js";
+export { hostTool, MAX_TOOL_DESCRIPTION_LENGTH, toolKit, validateToolkits, } from "./host-tools.js";
 export { createInMemoryLayerStore, createSnapshotExport, } from "./layers.js";
 export { defineSoftware } from "./packages.js";
-export { isAcpTimeoutErrorData } from "./json-rpc.js";
+export { isAcpTimeoutErrorData, isUnknownSessionErrorData, } from "./json-rpc.js";
 export { createInMemoryFileSystem, KernelError } from "./runtime-compat.js";
 export type * from "./types.js";

package/dist/index.js

@@ -1,10 +1,10 @@
 // @rivet-dev/agentos
-export { AgentOS, AgentOSSidecar } from "./agentos.js";
+export { AgentOs, AgentOsSidecar } from "./agent-os.js";
 export { AGENT_CONFIGS } from "./agents.js";
 export { CronManager, InvalidScheduleError, PastScheduleError, TimerScheduleDriver, } from "./cron/index.js";
 export { createHostDirBackend, nodeModulesMount } from "./host-dir-mount.js";
-export { binding, bindings, MAX_TOOL_DESCRIPTION_LENGTH, validateBindings, } from "./bindings.js";
+export { hostTool, MAX_TOOL_DESCRIPTION_LENGTH, toolKit, validateToolkits, } from "./host-tools.js";
 export { createInMemoryLayerStore, createSnapshotExport, } from "./layers.js";
 export { defineSoftware } from "./packages.js";
-export { isAcpTimeoutErrorData } from "./json-rpc.js";
+export { isAcpTimeoutErrorData, isUnknownSessionErrorData, } from "./json-rpc.js";
 export { createInMemoryFileSystem, KernelError } from "./runtime-compat.js";

package/dist/json-rpc.d.ts

@@ -8,7 +8,22 @@ export interface AcpTimeoutErrorData {
     transportState?: string;
     recentActivity: string[];
 }
-export type JsonRpcErrorData = AcpTimeoutErrorData | Record<string, unknown>;
+/**
+ * Structured error payload meaning "the session id is not known to the agent" —
+ * e.g. a `session/load` / `session/resume` against a session whose on-disk store did
+ * not survive a VM teardown. The sidecar normalizes the adapter's native error into
+ * this shape so the resume orchestration can distinguish "fall through to a fresh
+ * session" from a transport/timeout error (which must propagate). Mirrors the
+ * `acp_timeout` convention.
+ */
+export interface UnknownSessionErrorData {
+    kind: "unknown_session";
+    /** Optional metadata. The discriminator is `kind` alone — the sidecar's
+     * normalized error carries only `kind`, so this stays optional to keep the
+     * sidecar and client contracts aligned. */
+    sessionId?: string;
+}
+export type JsonRpcErrorData = AcpTimeoutErrorData | UnknownSessionErrorData | Record<string, unknown>;
 export interface JsonRpcRequest {
     jsonrpc: "2.0";
     id: number | string | null;
@@ -32,3 +47,4 @@ export interface JsonRpcNotification {
     params?: unknown;
 }
 export declare function isAcpTimeoutErrorData(value: unknown): value is AcpTimeoutErrorData;
+export declare function isUnknownSessionErrorData(value: unknown): value is UnknownSessionErrorData;

package/dist/json-rpc.js

@@ -12,3 +12,11 @@ export function isAcpTimeoutErrorData(value) {
         Array.isArray(record.recentActivity) &&
         record.recentActivity.every((entry) => typeof entry === "string"));
 }
+export function isUnknownSessionErrorData(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        return false;
+    }
+    const record = value;
+    return (record.kind === "unknown_session" &&
+        (record.sessionId === undefined || typeof record.sessionId === "string"));
+}

package/dist/packages.js

@@ -319,7 +319,7 @@ export function processSoftware(software) {
                     const vmDir = `/root/node_modules/${reqPkg}`;
                     pushPackageSoftwareRoot(softwareRoots, seenSoftwareVmPaths, hostDir, vmDir);
                 }
-                // Tool bin registration is handled by the caller (AgentOS.create)
+                // Tool bin registration is handled by the caller (AgentOs.create)
                 // since it requires kernel access.
                 break;
             }

package/dist/runtime-compat.d.ts

@@ -81,7 +81,7 @@ export type NetworkPermissions = PermissionMode | RulePermissions<PatternPermiss
 export type ChildProcessPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
 export type ProcessPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
 export type EnvPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
-export type BindingPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
+export type ToolPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
 export interface ProcessInfo {
     pid: number;
     ppid: number;
@@ -168,7 +168,7 @@ export interface Permissions {
     childProcess?: ChildProcessPermissions;
     process?: ProcessPermissions;
     env?: EnvPermissions;
-    binding?: BindingPermissions;
+    tool?: ToolPermissions;
 }
 export interface ResourceBudgets {
     maxOutputBytes?: number;

package/dist/runtime-compat.js

@@ -7,7 +7,7 @@ import { fileURLToPath } from "node:url";
 import { resolvePublishedSidecarBinary } from "./sidecar/binary.js";
 import { findCargoBinary, resolveCargoBinary } from "./sidecar/cargo.js";
 import { serializePermissionsForSidecar } from "./sidecar/permissions.js";
-import { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, NativeSidecarKernelProxy, NativeSidecarProcessClient, serializeMountConfigForSidecar, } from "./sidecar/rpc-client.js";
+import { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, NativeSidecarKernelProxy, SidecarProcess, serializeMountConfigForSidecar, } from "./sidecar/rpc-client.js";
 export const AF_INET = 2;
 export const AF_UNIX = 1;
 export const SOCK_STREAM = 1;
@@ -37,7 +37,6 @@ const KERNEL_POSIX_BOOTSTRAP_DIRS = [
     "/media",
     "/home",
     "/home/user",
-    "/workspace",
     "/usr",
     "/usr/bin",
     "/usr/games",
@@ -1633,7 +1632,7 @@ class NativeKernel {
     constructor(options) {
         this.options = options;
         this.env = { ...(options.env ?? {}) };
-        this.cwd = options.cwd ?? "/workspace";
+        this.cwd = options.cwd ?? "/home/user";
         this.socketTable = {
             hasHostNetworkAdapter: () => Boolean(options.hostNetworkAdapter),
             findListener: (request) => this.proxy?.findListener(request) ?? null,
@@ -1903,7 +1902,7 @@ class NativeKernel {
         const requestedPermissions = this.options.permissions;
         const bootstrapPermissions = requestedPermissions ? allowAll : undefined;
         if (this.loopbackExemptPorts.length > 0) {
-            createVmEnv.AGENTOS_LOOPBACK_EXEMPT_PORTS = JSON.stringify(this.loopbackExemptPorts);
+            createVmEnv.AGENT_OS_LOOPBACK_EXEMPT_PORTS = JSON.stringify(this.loopbackExemptPorts);
         }
         const rootPassthroughPlan = planNodeFilesystemPassthroughMounts(this.options.filesystem, this.pendingLocalMounts);
         const snapshotEntries = await snapshotFilesystemEntries(this.options.filesystem, "/", [], {
@@ -1922,7 +1921,7 @@ class NativeKernel {
             ],
             bootstrapEntries: [],
         };
-        const client = NativeSidecarProcessClient.spawn({
+        const client = SidecarProcess.spawn({
             cwd: REPO_ROOT,
             command: ensureNativeSidecarBinary(),
             args: [],
@@ -1988,7 +1987,7 @@ class NativeKernel {
             vm,
             env: this.env,
             cwd: this.cwd,
-            defaultExecCwd: this.options.cwd === undefined ? "/workspace" : this.cwd,
+            defaultExecCwd: this.options.cwd === undefined ? "/home/user" : this.cwd,
             localMounts: this.pendingLocalMounts,
             commandGuestPaths: new Map(),
             onWasmCommandResolved: (command) => {

package/dist/runtime.d.ts

@@ -76,7 +76,7 @@ export type NetworkPermissions = PermissionMode | RulePermissions<PatternPermiss
 export type ChildProcessPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
 export type ProcessPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
 export type EnvPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
-export type BindingPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
+export type ToolPermissions = PermissionMode | RulePermissions<PatternPermissionRule>;
 export interface ProcessInfo {
     pid: number;
     ppid: number;
@@ -163,7 +163,7 @@ export interface Permissions {
     childProcess?: ChildProcessPermissions;
     process?: ProcessPermissions;
     env?: EnvPermissions;
-    binding?: BindingPermissions;
+    tool?: ToolPermissions;
 }
 export interface ResourceBudgets {
     maxOutputBytes?: number;

package/dist/sidecar/agentos-protocol.d.ts

@@ -43,6 +43,23 @@ export type AcpCloseSessionRequest = {
 };
 export declare function readAcpCloseSessionRequest(bc: bare.ByteCursor): AcpCloseSessionRequest;
 export declare function writeAcpCloseSessionRequest(bc: bare.ByteCursor, x: AcpCloseSessionRequest): void;
+/**
+ * Resume a session that exists in durable storage but is not live in the current
+ * VM (e.g. after a Rivet actor slept and woke with a fresh VM). The sidecar runs
+ * the stateless resume state machine (native session/load when the agent supports
+ * it, else a fresh session/new + transcript continuation preamble). `cwd`/`env`
+ * describe the fresh adapter launch used by the fallback tier. `transcriptPath`,
+ * when present, is a guest-readable path the fallback preamble points the agent at.
+ */
+export type AcpResumeSessionRequest = {
+    readonly sessionId: string;
+    readonly agentType: string;
+    readonly transcriptPath: string | null;
+    readonly cwd: string;
+    readonly env: ReadonlyMap<string, string>;
+};
+export declare function readAcpResumeSessionRequest(bc: bare.ByteCursor): AcpResumeSessionRequest;
+export declare function writeAcpResumeSessionRequest(bc: bare.ByteCursor, x: AcpResumeSessionRequest): void;
 export type AcpRequest = {
     readonly tag: "AcpCreateSessionRequest";
     readonly val: AcpCreateSessionRequest;
@@ -55,6 +72,9 @@ export type AcpRequest = {
 } | {
     readonly tag: "AcpCloseSessionRequest";
     readonly val: AcpCloseSessionRequest;
+} | {
+    readonly tag: "AcpResumeSessionRequest";
+    readonly val: AcpResumeSessionRequest;
 };
 export declare function readAcpRequest(bc: bare.ByteCursor): AcpRequest;
 export declare function writeAcpRequest(bc: bare.ByteCursor, x: AcpRequest): void;
@@ -95,6 +115,19 @@ export type AcpSessionClosedResponse = {
 };
 export declare function readAcpSessionClosedResponse(bc: bare.ByteCursor): AcpSessionClosedResponse;
 export declare function writeAcpSessionClosedResponse(bc: bare.ByteCursor, x: AcpSessionClosedResponse): void;
+/**
+ * Result of AcpResumeSessionRequest. `sessionId` is the live ACP session id after
+ * resume: equal to the requested id for native loads, or the freshly assigned id
+ * for the fallback tier (the caller remaps external -> live). `mode` is "native"
+ * (session/load|resume succeeded) or "fallback" (a new session was created and the
+ * transcript-continuation preamble was armed for the next prompt).
+ */
+export type AcpSessionResumedResponse = {
+    readonly sessionId: string;
+    readonly mode: string;
+};
+export declare function readAcpSessionResumedResponse(bc: bare.ByteCursor): AcpSessionResumedResponse;
+export declare function writeAcpSessionResumedResponse(bc: bare.ByteCursor, x: AcpSessionResumedResponse): void;
 export type AcpErrorResponse = {
     readonly code: string;
     readonly message: string;
@@ -113,6 +146,9 @@ export type AcpResponse = {
 } | {
     readonly tag: "AcpSessionClosedResponse";
     readonly val: AcpSessionClosedResponse;
+} | {
+    readonly tag: "AcpSessionResumedResponse";
+    readonly val: AcpSessionResumedResponse;
 } | {
     readonly tag: "AcpErrorResponse";
     readonly val: AcpErrorResponse;

package/dist/sidecar/agentos-protocol.js

@@ -157,6 +157,22 @@ export function readAcpCloseSessionRequest(bc) {
 export function writeAcpCloseSessionRequest(bc, x) {
     bare.writeString(bc, x.sessionId);
 }
+export function readAcpResumeSessionRequest(bc) {
+    return {
+        sessionId: bare.readString(bc),
+        agentType: bare.readString(bc),
+        transcriptPath: read2(bc),
+        cwd: bare.readString(bc),
+        env: read1(bc),
+    };
+}
+export function writeAcpResumeSessionRequest(bc, x) {
+    bare.writeString(bc, x.sessionId);
+    bare.writeString(bc, x.agentType);
+    write2(bc, x.transcriptPath);
+    bare.writeString(bc, x.cwd);
+    write1(bc, x.env);
+}
 export function readAcpRequest(bc) {
     const offset = bc.offset;
     const tag = bare.readU8(bc);
@@ -169,6 +185,8 @@ export function readAcpRequest(bc) {
             return { tag: "AcpGetSessionStateRequest", val: readAcpGetSessionStateRequest(bc) };
         case 3:
             return { tag: "AcpCloseSessionRequest", val: readAcpCloseSessionRequest(bc) };
+        case 4:
+            return { tag: "AcpResumeSessionRequest", val: readAcpResumeSessionRequest(bc) };
         default: {
             bc.offset = offset;
             throw new bare.BareError(offset, "invalid tag");
@@ -197,6 +215,11 @@ export function writeAcpRequest(bc, x) {
             writeAcpCloseSessionRequest(bc, x.val);
             break;
         }
+        case "AcpResumeSessionRequest": {
+            bare.writeU8(bc, 4);
+            writeAcpResumeSessionRequest(bc, x.val);
+            break;
+        }
     }
 }
 export function encodeAcpRequest(x, config) {
@@ -310,6 +333,16 @@ export function readAcpSessionClosedResponse(bc) {
 export function writeAcpSessionClosedResponse(bc, x) {
     bare.writeString(bc, x.sessionId);
 }
+export function readAcpSessionResumedResponse(bc) {
+    return {
+        sessionId: bare.readString(bc),
+        mode: bare.readString(bc),
+    };
+}
+export function writeAcpSessionResumedResponse(bc, x) {
+    bare.writeString(bc, x.sessionId);
+    bare.writeString(bc, x.mode);
+}
 export function readAcpErrorResponse(bc) {
     return {
         code: bare.readString(bc),
@@ -333,6 +366,8 @@ export function readAcpResponse(bc) {
         case 3:
             return { tag: "AcpSessionClosedResponse", val: readAcpSessionClosedResponse(bc) };
         case 4:
+            return { tag: "AcpSessionResumedResponse", val: readAcpSessionResumedResponse(bc) };
+        case 5:
             return { tag: "AcpErrorResponse", val: readAcpErrorResponse(bc) };
         default: {
             bc.offset = offset;
@@ -362,8 +397,13 @@ export function writeAcpResponse(bc, x) {
             writeAcpSessionClosedResponse(bc, x.val);
             break;
         }
-        case "AcpErrorResponse": {
+        case "AcpSessionResumedResponse": {
             bare.writeU8(bc, 4);
+            writeAcpSessionResumedResponse(bc, x.val);
+            break;
+        }
+        case "AcpErrorResponse": {
+            bare.writeU8(bc, 5);
             writeAcpErrorResponse(bc, x.val);
             break;
         }

package/dist/sidecar/native-process-client.d.ts

@@ -1,3 +1,3 @@
 import "@secure-exec/core/native-client";
-export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, SidecarProcess as NativeSidecarProcessClient, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "@secure-exec/core/sidecar-client";
-export type { AuthenticatedSession, CreatedVm, ExtEnvelope, GuestFilesystemStat, RootFilesystemEntry, RootFilesystemLowerDescriptor, SidecarSpawnOptions as NativeSidecarSpawnOptions, SidecarEventSelector, SidecarFsPermissionRule, SidecarMountDescriptor, SidecarMountPluginDescriptor, SidecarPatternPermissionRule, SidecarPermissionMode, SidecarPermissionScope, SidecarPermissionsPolicy, SidecarProcessSnapshotEntry, SidecarProjectedModuleDescriptor, SidecarRegisteredHostCallbackDefinition, SidecarRegisteredHostCallbackExample, SidecarRequestFrame, SidecarRequestHandler, SidecarRequestPayload, SidecarResponseFrame, SidecarResponsePayload, SidecarRulePermissions, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSignalState, SidecarSocketStateEntry, SidecarSoftwareDescriptor, SidecarZombieTimerCount, } from "@secure-exec/core/sidecar-client";
+export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, SidecarProcess, SidecarProcess as NativeSidecarProcessClient, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "@secure-exec/core/sidecar-client";
+export type { AuthenticatedSession, CreatedVm, ExtEnvelope, GuestFilesystemStat, RootFilesystemEntry, RootFilesystemLowerDescriptor, SidecarEventSelector, SidecarFsPermissionRule, SidecarMountDescriptor, SidecarMountPluginDescriptor, SidecarPatternPermissionRule, SidecarPermissionMode, SidecarPermissionScope, SidecarPermissionsPolicy, SidecarProcessSnapshotEntry, SidecarProjectedModuleDescriptor, SidecarRegisteredHostCallbackDefinition, SidecarRegisteredHostCallbackExample, SidecarRequestFrame, SidecarRequestHandler, SidecarRequestPayload, SidecarResponseFrame, SidecarResponsePayload, SidecarRulePermissions, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSignalState, SidecarSocketStateEntry, SidecarSoftwareDescriptor, SidecarSpawnOptions, SidecarSpawnOptions as NativeSidecarSpawnOptions, SidecarZombieTimerCount, } from "@secure-exec/core/sidecar-client";

package/dist/sidecar/native-process-client.js

@@ -3,4 +3,4 @@
 // separately-registered factory; importing native-client wires it up so
 // SidecarProcess.spawn works in this native runtime.
 import "@secure-exec/core/native-client";
-export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, SidecarProcess as NativeSidecarProcessClient, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "@secure-exec/core/sidecar-client";
+export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, SidecarProcess, SidecarProcess as NativeSidecarProcessClient, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "@secure-exec/core/sidecar-client";

package/dist/sidecar/permissions.js

@@ -47,8 +47,8 @@ export function serializePermissionsForSidecar(permissions) {
         env: typeof permissions.env === "string" || !permissions.env
             ? permissions.env
             : serializePatternScope(permissions.env),
-        binding: typeof permissions.binding === "string" || !permissions.binding
-            ? permissions.binding
-            : serializePatternScope(permissions.binding),
+        binding: typeof permissions.tool === "string" || !permissions.tool
+            ? permissions.tool
+            : serializePatternScope(permissions.tool),
     };
 }

package/dist/sidecar/process.d.ts

@@ -1,6 +1,6 @@
-import { NativeSidecarProcessClient, type NativeSidecarSpawnOptions } from "./native-process-client.js";
-export interface AgentOSSidecarProcessHandle {
-    client: NativeSidecarProcessClient;
+import { SidecarProcess, type SidecarSpawnOptions } from "./native-process-client.js";
+export interface AgentOsSidecarProcessHandle {
+    client: SidecarProcess;
     dispose(): Promise<void>;
 }
-export declare function spawnAgentOSSidecar(options: NativeSidecarSpawnOptions): AgentOSSidecarProcessHandle;
+export declare function spawnAgentOsSidecar(options: SidecarSpawnOptions): AgentOsSidecarProcessHandle;