@rivet-dev/agentos-core 0.2.16-rc.2 → 0.2.17

package/dist/agent-os.d.ts

@@ -109,13 +109,23 @@ import type { SoftwareInput } from "./packages.js";
 import { type AgentOsSidecarPlacement } from "./sidecar/rpc-client.js";
 export interface AgentOsSharedSidecarOptions {
     pool?: string;
+    runtime?: AgentOsSidecarRuntimeConfig;
 }
 export interface AgentOsCreateSidecarOptions {
     sidecarId?: string;
+    runtime?: AgentOsSidecarRuntimeConfig;
+}
+/** Process-wide runtime settings applied when the native sidecar starts. */
+export interface AgentOsSidecarRuntimeConfig {
+    executor?: {
+        /** Optional ceiling for concurrent V8 executors. Omit to leave admission uncapped. */
+        maxActiveVms?: number;
+    };
 }
 export type AgentOsSidecarConfig = {
     kind: "shared";
     pool?: string;
+    runtime?: AgentOsSidecarRuntimeConfig;
 } | {
     kind: "explicit";
     handle: AgentOsSidecar;
@@ -925,7 +935,7 @@ export declare class AgentOs {
 export declare function getAgentOsRuntimeAdmin(vm: AgentOs): AgentOsRuntimeAdmin;
 export declare function getAgentOsKernel(vm: AgentOs): Kernel;
 export declare class AgentOsSidecar {
-    constructor(sidecarId: string, placement: AgentOsSidecarPlacement, sharedPool?: string);
+    constructor(sidecarId: string, placement: AgentOsSidecarPlacement, sharedPool?: string, runtime?: AgentOsSidecarRuntimeConfig);
     describe(): AgentOsSidecarDescription;
     dispose(): Promise<void>;
 }

package/dist/agent-os.js

@@ -153,6 +153,13 @@ async function waitForTrackedExitPromises(promises, timeoutMs) {
         }),
     ]);
 }
+function headersToRecord(headers) {
+    const result = {};
+    headers.forEach((value, name) => {
+        result[name] = value;
+    });
+    return result;
+}
 import { OPT_AGENTOS_ROOT, } from "./agentos-package.js";
 import { getBaseEnvironment } from "./base-filesystem.js";
 import { CronManager } from "./cron/cron-manager.js";
@@ -2156,17 +2163,11 @@ export class AgentOs {
         completed = completedBeforeAdmission.has(executionId);
         if (completed)
             resolveCompletion?.();
-        let rejectAbort;
-        const aborted = !background && options.signal
-            ? new Promise((_resolve, reject) => {
-                rejectAbort = reject;
-            })
-            : undefined;
         const abort = () => {
+            // Admitted executions report cancellation through their structured result.
             void this._cancelExecution(response.response.operationId).catch((error) => {
                 console.error("[agentos] failed to cancel aborted execution", error);
             });
-            rejectAbort?.(options.signal?.reason ?? new DOMException("Aborted", "AbortError"));
         };
         options.signal?.addEventListener("abort", abort, { once: true });
         if (options.signal?.aborted)
@@ -2198,7 +2199,7 @@ export class AgentOs {
             };
         }
         try {
-            await (aborted ? Promise.race([completion, aborted]) : completion);
+            await completion;
             return await this._waitExecutionResult(response.response.operationId);
         }
         finally {
@@ -2794,6 +2795,7 @@ export class AgentOs {
             env: options.env,
             stdin: options.stdin,
             timeout: options.timeoutMs,
+            streamStdin: true,
             onStdout: (data) => {
                 recordOutput("stdout", data);
                 options?.onStdout?.(data);
@@ -3195,7 +3197,7 @@ export class AgentOs {
             port,
             method: request.method,
             path: `${url.pathname}${url.search}`,
-            headersJson: JSON.stringify(Object.fromEntries(request.headers.entries())),
+            headersJson: JSON.stringify(headersToRecord(request.headers)),
             ...(request.method !== "GET" && request.method !== "HEAD"
                 ? {
                     bodyBase64: Buffer.from(await request.arrayBuffer()).toString("base64"),
@@ -3218,7 +3220,7 @@ export class AgentOs {
             port,
             method: request.method,
             path: `${url.pathname}${url.search}`,
-            headersJson: JSON.stringify(Object.fromEntries(request.headers.entries())),
+            headersJson: JSON.stringify(headersToRecord(request.headers)),
             ...(request.method !== "GET" && request.method !== "HEAD"
                 ? {
                     bodyBase64: Buffer.from(await request.arrayBuffer()).toString("base64"),
@@ -4564,7 +4566,9 @@ export function getAgentOsKernel(vm) {
 }
 function resolveAgentOsSidecar(config) {
     if (!config || config.kind === "shared") {
-        return getSharedAgentOsSidecarInternal(config?.kind === "shared" ? { pool: config.pool } : undefined);
+        return getSharedAgentOsSidecarInternal(config?.kind === "shared"
+            ? { pool: config.pool, runtime: config.runtime }
+            : undefined);
     }
     return config.handle;
 }
@@ -4675,7 +4679,7 @@ function ensureSharedSidecarNativeProcess(sidecar) {
             const client = SidecarProcess.spawn({
                 cwd: REPO_ROOT,
                 command: ensureNativeSidecarBinary(),
-                args: [],
+                args: sidecarRuntimeArgs(state.runtime),
             });
             // Track the child immediately — BEFORE the handshake await — so a
             // failed `authenticateAndOpenSession()` can still reap it (otherwise
@@ -4738,7 +4742,7 @@ async function disposeSharedSidecarNativeProcess(state) {
     }
 }
 export class AgentOsSidecar {
-    constructor(sidecarId, placement, sharedPool) {
+    constructor(sidecarId, placement, sharedPool, runtime) {
         sidecarStates.set(this, {
             description: {
                 sidecarId,
@@ -4748,6 +4752,7 @@ export class AgentOsSidecar {
             },
             activeLeases: new Set(),
             sharedPool,
+            runtime: normalizeSidecarRuntimeConfig(runtime),
         });
     }
     describe() {
@@ -4787,7 +4792,7 @@ function createAgentOsSidecarInternal(options = {}) {
     return new AgentOsSidecar(sidecarId, {
         kind: "explicit",
         sidecarId,
-    });
+    }, undefined, options.runtime);
 }
 /**
  * Test-only escape hatch: dispose every cached shared sidecar so vitest
@@ -4816,12 +4821,37 @@ function getSharedAgentOsSidecarInternal(options = {}) {
     const pool = options.pool ?? "default";
     const existing = sharedSidecars.get(pool);
     if (existing && existing.describe().state !== "disposed") {
+        if (options.runtime !== undefined) {
+            const requested = normalizeSidecarRuntimeConfig(options.runtime);
+            const configured = getSidecarState(existing).runtime;
+            if (!sidecarRuntimeConfigsEqual(requested, configured)) {
+                throw new Error(`Shared sidecar pool ${JSON.stringify(pool)} already exists with different runtime settings`);
+            }
+        }
         return existing;
     }
-    const sidecar = new AgentOsSidecar(`agentos-shared-sidecar:${pool}`, { kind: "shared", ...(pool ? { pool } : {}) }, pool);
+    const sidecar = new AgentOsSidecar(`agentos-shared-sidecar:${pool}`, { kind: "shared", ...(pool ? { pool } : {}) }, pool, options.runtime);
     sharedSidecars.set(pool, sidecar);
     return sidecar;
 }
+function normalizeSidecarRuntimeConfig(runtime) {
+    const maxActiveVms = runtime?.executor?.maxActiveVms;
+    if (maxActiveVms === undefined)
+        return {};
+    if (!Number.isSafeInteger(maxActiveVms) || maxActiveVms <= 0) {
+        throw new Error("runtime.executor.maxActiveVms must be a positive safe integer");
+    }
+    return { executor: { maxActiveVms } };
+}
+function sidecarRuntimeConfigsEqual(left, right) {
+    return left.executor?.maxActiveVms === right.executor?.maxActiveVms;
+}
+function sidecarRuntimeArgs(runtime) {
+    const maxActiveVms = runtime.executor?.maxActiveVms;
+    return maxActiveVms === undefined
+        ? []
+        : ["--max-active-vms", String(maxActiveVms)];
+}
 async function leaseAgentOsSidecarVm(sidecar, options) {
     const state = getSidecarState(sidecar);
     if (state.description.state !== "ready") {

package/dist/cron/timer-driver.js

@@ -1,3 +1,4 @@
+/// <reference path="../long-timeout.d.ts" />
 import { clearTimeout as clearLongTimeout, setTimeout as longSetTimeout, } from "long-timeout";
 import { resolveSchedule, validateScheduleForRegistration, } from "./parse-schedule.js";
 /**

package/dist/index.d.ts

@@ -4,7 +4,7 @@ export { CronManager, InvalidScheduleError, PastScheduleError, TimerScheduleDriv
 export { createHostDirBackend, nodeModulesMount } from "./host-dir-mount.js";
 export { binding, MAX_BINDING_DESCRIPTION_LENGTH, bindings, validateBindings, } from "./bindings.js";
 export type { Binding, BindingExample, Bindings } from "./bindings.js";
-export { agentOsLimitsSchema, agentOsOptionFieldSchemas, agentOsOptionsSchema, bindingSchema, mountConfigSchema, nativeMountConfigSchema, parseAgentOsOptions, permissionsSchema, rootFilesystemConfigSchema, sharedSidecarConfigSchema, sidecarConfigSchema, bindingsSchema, } from "./options-schema.js";
+export { agentOsLimitsSchema, agentOsOptionFieldSchemas, agentOsOptionsSchema, bindingSchema, mountConfigSchema, nativeMountConfigSchema, parseAgentOsOptions, permissionsSchema, rootFilesystemConfigSchema, sharedSidecarConfigSchema, sidecarConfigSchema, bindingsSchema, sidecarRuntimeConfigSchema, } from "./options-schema.js";
 export { createSnapshotExport } from "./layers.js";
 export { defineSoftware } from "./packages.js";
 export { isPackageDescriptor, OPT_AGENTOS_BIN, OPT_AGENTOS_ROOT, tryReadAgentosPackageManifest, } from "./agentos-package.js";

package/dist/index.js

@@ -3,7 +3,7 @@ export { AgentOs, AgentOsSidecar } from "./agent-os.js";
 export { CronManager, InvalidScheduleError, PastScheduleError, TimerScheduleDriver, } from "./cron/index.js";
 export { createHostDirBackend, nodeModulesMount } from "./host-dir-mount.js";
 export { binding, MAX_BINDING_DESCRIPTION_LENGTH, bindings, validateBindings, } from "./bindings.js";
-export { agentOsLimitsSchema, agentOsOptionFieldSchemas, agentOsOptionsSchema, bindingSchema, mountConfigSchema, nativeMountConfigSchema, parseAgentOsOptions, permissionsSchema, rootFilesystemConfigSchema, sharedSidecarConfigSchema, sidecarConfigSchema, bindingsSchema, } from "./options-schema.js";
+export { agentOsLimitsSchema, agentOsOptionFieldSchemas, agentOsOptionsSchema, bindingSchema, mountConfigSchema, nativeMountConfigSchema, parseAgentOsOptions, permissionsSchema, rootFilesystemConfigSchema, sharedSidecarConfigSchema, sidecarConfigSchema, bindingsSchema, sidecarRuntimeConfigSchema, } from "./options-schema.js";
 export { createSnapshotExport } from "./layers.js";
 export { defineSoftware } from "./packages.js";
 export { isPackageDescriptor, OPT_AGENTOS_BIN, OPT_AGENTOS_ROOT, tryReadAgentosPackageManifest, } from "./agentos-package.js";

package/dist/options-schema.d.ts

@@ -249,13 +249,28 @@ export declare const mountConfigSchema: z.ZodUnion<readonly [z.ZodObject<{
         lowers: z.ZodArray<z.ZodUnknown>;
     }, z.core.$strict>;
 }, z.core.$strict>]>;
+export declare const sidecarRuntimeConfigSchema: z.ZodObject<{
+    executor: z.ZodOptional<z.ZodObject<{
+        maxActiveVms: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
 export declare const sharedSidecarConfigSchema: z.ZodObject<{
     kind: z.ZodLiteral<"shared">;
     pool: z.ZodOptional<z.ZodString>;
+    runtime: z.ZodOptional<z.ZodObject<{
+        executor: z.ZodOptional<z.ZodObject<{
+            maxActiveVms: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 export declare const sidecarConfigSchema: z.ZodUnion<readonly [z.ZodObject<{
     kind: z.ZodLiteral<"shared">;
     pool: z.ZodOptional<z.ZodString>;
+    runtime: z.ZodOptional<z.ZodObject<{
+        executor: z.ZodOptional<z.ZodObject<{
+            maxActiveVms: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"explicit">;
     handle: z.ZodUnknown;
@@ -456,6 +471,11 @@ export declare const agentOsOptionFieldSchemas: {
     readonly sidecar: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
         kind: z.ZodLiteral<"shared">;
         pool: z.ZodOptional<z.ZodString>;
+        runtime: z.ZodOptional<z.ZodObject<{
+            executor: z.ZodOptional<z.ZodObject<{
+                maxActiveVms: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"explicit">;
         handle: z.ZodUnknown;

package/dist/options-schema.js

@@ -293,10 +293,21 @@ export const mountConfigSchema = z.union([
     nativeMountConfigSchema,
     overlayMountConfigSchema,
 ]);
+export const sidecarRuntimeConfigSchema = z
+    .object({
+    executor: z
+        .object({
+        maxActiveVms: positiveInteger.max(Number.MAX_SAFE_INTEGER).optional(),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
 export const sharedSidecarConfigSchema = z
     .object({
     kind: z.literal("shared"),
     pool: z.string().optional(),
+    runtime: sidecarRuntimeConfigSchema.optional(),
 })
     .strict();
 const explicitSidecarSchema = z

package/dist/sandbox.js

@@ -8,7 +8,11 @@ function normalizeHeaders(headers) {
         return undefined;
     }
     if (headers instanceof Headers) {
-        return Object.fromEntries(headers.entries());
+        const normalized = {};
+        headers.forEach((value, name) => {
+            normalized[name] = value;
+        });
+        return normalized;
     }
     if (Array.isArray(headers)) {
         return Object.fromEntries(headers);

package/dist/types.d.ts

@@ -1,4 +1,4 @@
-export type { AgentExitEvent, AgentExitHandler, AgentOsCreateSidecarOptions, AgentOsLimits, AgentOsOptions, AgentOsSharedSidecarOptions, AgentOsSidecarConfig, AgentOsSidecarDescription, AgentRegistryEntry, AgentRestartOutcome, AgentStderrEvent, AgentStderrHandler, BatchReadResult, BatchWriteEntry, BatchWriteResult, DirEntry, DynamicMountDescriptor, ExportRootFilesystemOptions, HttpRequest, HttpResponse, LimitWarning, LimitWarningHandler, MountConfig, MountConfigJsonObject, MountConfigJsonPrimitive, MountConfigJsonValue, MountInfo, NativeMountConfig, NativeMountPluginDescriptor, NativeRootFilesystemConfig, OverlayMountConfig, OverlayRootFilesystemConfig, PlainMountConfig, ProcessOutput, ProcessTreeNode, ReaddirEntry, ReaddirRecursiveOptions, RootFilesystemConfig, RootLowerInput, ShellData, ShellExit, ShellOptions, } from "./agent-os.js";
+export type { AgentExitEvent, AgentExitHandler, AgentOsCreateSidecarOptions, AgentOsLimits, AgentOsOptions, AgentOsSharedSidecarOptions, AgentOsSidecarConfig, AgentOsSidecarDescription, AgentOsSidecarRuntimeConfig, AgentRegistryEntry, AgentRestartOutcome, AgentStderrEvent, AgentStderrHandler, BatchReadResult, BatchWriteEntry, BatchWriteResult, DirEntry, DynamicMountDescriptor, ExportRootFilesystemOptions, HttpRequest, HttpResponse, LimitWarning, LimitWarningHandler, MountConfig, MountConfigJsonObject, MountConfigJsonPrimitive, MountConfigJsonValue, MountInfo, NativeMountConfig, NativeMountPluginDescriptor, NativeRootFilesystemConfig, OverlayMountConfig, OverlayRootFilesystemConfig, PlainMountConfig, ProcessOutput, ProcessTreeNode, ReaddirEntry, ReaddirRecursiveOptions, RootFilesystemConfig, RootLowerInput, ShellData, ShellExit, ShellOptions, } from "./agent-os.js";
 export type { CodeEvaluationResult, CodeExecutionResult, ContextDescriptor, ContextState, ExecutionErrorData, ExecutionSignal, InlineExecutionOptions, JavaScriptEvaluationOptions, JavaScriptExecutionOptions, LanguageExecutionOptions, LanguageSpawnOptions, NpmPackageInstallOptions, NpmProjectInstallOptions, OutputCapture, OutputReplay, ProcessDescriptor, ProcessExit, ProcessOutputEvent, PythonInstallOptions, SpawnOptions, TypeScriptCheckOptions, TypeScriptCheckResult, TypeScriptDiagnostic, TypeScriptEvaluationOptions, TypeScriptExecutionOptions, TypeScriptFileExecutionOptions, } from "./language-execution.js";
 export type * from "./session-api.js";
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@rivet-dev/agentos-core",
-	"version": "0.2.16-rc.2",
+	"version": "0.2.17",
 	"type": "module",
 	"license": "Apache-2.0",
 	"main": "./dist/index.js",
@@ -56,7 +56,7 @@
 		"build:agentos-protocol": "node ./scripts/compile-agentos-protocol.mjs",
 		"build:protocols": "pnpm run build:agentos-protocol",
 		"test": "vitest run --exclude '**/*.nightly.test.ts' --reporter=verbose",
-		"test:unit": "vitest run tests/agent-exit-event.test.ts tests/agentos-package.test.ts tests/agentos-protocol.test.ts tests/allowed-node-builtins.test.ts tests/bindings-zod.test.ts tests/bindings.test.ts tests/cron-manager.test.ts tests/cron-timer-driver.test.ts tests/generated-protocol.test.ts tests/leak-agent-os-processes.test.ts tests/leak-rpc-client.test.ts tests/mount-descriptors.test.ts tests/mount-reconfigure.test.ts tests/options-schema.test.ts tests/public-api-exports.test.ts tests/root-filesystem-descriptors.test.ts tests/runtime-compat-mount.test.ts tests/session-event-ordering.test.ts tests/session-permission-surface.test.ts tests/sidecar-client.test.ts tests/sidecar-permission-descriptors.test.ts tests/wasm-permission-tiers.test.ts --fileParallelism=false",
+		"test:unit": "vitest run tests/agent-exit-event.test.ts tests/agentos-package.test.ts tests/agentos-protocol.test.ts tests/allowed-node-builtins.test.ts tests/bindings-zod.test.ts tests/bindings.test.ts tests/cron-manager.test.ts tests/cron-timer-driver.test.ts tests/execution-abort.test.ts tests/generated-protocol.test.ts tests/leak-agent-os-processes.test.ts tests/leak-rpc-client.test.ts tests/mount-descriptors.test.ts tests/mount-reconfigure.test.ts tests/options-schema.test.ts tests/public-api-exports.test.ts tests/root-filesystem-descriptors.test.ts tests/runtime-compat-mount.test.ts tests/session-event-ordering.test.ts tests/session-permission-surface.test.ts tests/sidecar-client.test.ts tests/sidecar-permission-descriptors.test.ts tests/wasm-permission-tiers.test.ts --fileParallelism=false",
 		"test:pr": "pnpm test:unit && vitest run tests/migration-parity.test.ts tests/acp-reactor-regression.test.ts --fileParallelism=false --reporter=verbose",
 		"test:nightly": "vitest run tests/*.nightly.test.ts --reporter=verbose --passWithNoTests"
 	},
@@ -64,19 +64,18 @@
 		"@agentclientprotocol/sdk": "0.16.1",
 		"@agentos-software/claude-code": "0.2.7",
 		"@agentos-software/codex-cli": "0.3.4",
-		"@agentos-software/common": "0.2.16-rc.2",
-		"@agentos-software/manifest": "0.2.16-rc.2",
+		"@agentos-software/common": "0.2.17",
+		"@agentos-software/manifest": "0.2.17",
 		"@agentos-software/opencode": "0.2.7",
 		"@agentos-software/pi": "0.2.7",
 		"@aws-sdk/client-s3": "^3.1019.0",
-		"@rivet-dev/agentos-sidecar": "0.2.16-rc.2",
+		"@rivet-dev/agentos-sidecar": "0.2.17",
 		"@rivetkit/bare-ts": "^0.6.2",
-		"@rivet-dev/agentos-runtime-core": "0.2.16-rc.2",
+		"@rivet-dev/agentos-runtime-core": "0.2.17",
 		"@xterm/headless": "^6.0.0",
 		"better-sqlite3": "^12.8.0",
 		"croner": "^10.0.1",
 		"googleapis": "^144.0.0",
-		"isolated-vm": "^6.0.0",
 		"long-timeout": "^0.1.1",
 		"minimatch": "^10.2.4",
 		"zod": "^4.1.11",
@@ -106,7 +105,7 @@
 		"@agentos-software/vim": "0.3.3",
 		"@agentos-software/wget": "0.3.3",
 		"@agentos-software/yq": "0.3.3",
-		"@rivet-dev/agentos-test-harness": "0.2.16-rc.2",
+		"@rivet-dev/agentos-test-harness": "0.2.17",
 		"@anthropic-ai/claude-agent-sdk": "^0.2.87",
 		"@anthropic-ai/claude-code": "^2.1.86",
 		"@bare-ts/tools": "0.15.0",
@@ -120,5 +119,10 @@
 		"vitest": "^2.1.8",
 		"ws": "^8.18.0",
 		"zod3": "npm:zod@^3.25.76"
+	},
+	"repository": {
+		"type": "git",
+		"url": "https://github.com/rivet-dev/agentos.git",
+		"directory": "packages/core"
 	}
 }