@rivet-dev/agentos-core 0.2.20-rc.1 → 0.2.21

package/README.md

@@ -11,5 +11,5 @@ Install the public package instead:
 pnpm add @rivet-dev/agentos
 ```
 
-See the [AgentOS documentation](https://agentos-sdk.dev/docs) for supported
+See the [AgentOS documentation](https://rivet.dev/agentos/docs) for supported
 APIs.

package/dist/agent-os.d.ts

@@ -1,6 +1,6 @@
 import type { NativeMountPluginDescriptor } from "@rivet-dev/agentos-runtime-core/descriptors";
 import type { VmUserConfig } from "@rivet-dev/agentos-runtime-core/vm-config";
-import { type Bindings } from "./bindings.js";
+import { type HostFunctionCollections, type HostFunctionSchemas } from "@rivet-dev/agentos-runtime-core/host-functions";
 import type { CodeEvaluationResult, CodeExecutionResult, ContextDescriptor, ExecutionSignal, InlineExecutionOptions, JavaScriptEvaluationOptions, JavaScriptExecutionOptions, LanguageExecutionOptions, LanguageSpawnOptions, NpmPackageInstallOptions, NpmProjectInstallOptions, OutputReplay, ProcessDescriptor, ProcessExit, PythonInstallOptions, SpawnOptions, TypeScriptCheckOptions, TypeScriptCheckResult, TypeScriptEvaluationOptions, TypeScriptExecutionOptions, TypeScriptFileExecutionOptions } from "./language-execution.js";
 import type { ConnectTerminalOptions, Kernel, KernelExecOptions, KernelExecResult, OpenShellOptions, Permissions, VirtualFileSystem, VirtualStat } from "./runtime-compat.js";
 import { type AgentOsSandboxInput } from "./sandbox.js";
@@ -236,16 +236,16 @@ export interface AgentOsLimits {
     tls?: {
         maxBufferedBytes?: number;
     };
-    /** Host binding registration and invocation limits. */
-    bindings?: {
-        defaultBindingTimeoutMs?: number;
-        maxBindingTimeoutMs?: number;
+    /** Host function registration and invocation limits. */
+    hostFunctions?: {
+        defaultTimeoutMs?: number;
+        maxTimeoutMs?: number;
         maxRegisteredCollections?: number;
-        maxRegisteredBindingsPerVm?: number;
-        maxBindingsPerCollection?: number;
-        maxBindingSchemaBytes?: number;
-        maxExamplesPerBinding?: number;
-        maxBindingExampleInputBytes?: number;
+        maxRegisteredFunctionsPerVm?: number;
+        maxFunctionsPerCollection?: number;
+        maxSchemaBytes?: number;
+        maxExamplesPerFunction?: number;
+        maxExampleInputBytes?: number;
     };
     /** Mount plugin manifest size limits. */
     plugins?: {
@@ -367,7 +367,7 @@ export type LimitWarningHandler = (warning: LimitWarning) => void;
  * `packages/core/src/options-schema.ts::agentOsOptionsSchema`. The TypeScript
  * Rivet actor accepts this surface directly alongside ordinary actor options.
  */
-export interface AgentOsOptions {
+export interface AgentOsOptions<HOST_FUNCTIONS extends HostFunctionSchemas = HostFunctionSchemas> {
     /** Initial virtual Linux credentials and account record. Defaults to `1000:1000` (`agentos`). */
     user?: VmUserConfig;
     /**
@@ -404,15 +404,17 @@ export interface AgentOsOptions {
     rootFilesystem?: RootFilesystemConfig;
     /** Filesystems to mount at boot time. */
     mounts?: MountConfig[];
-    /** External sandbox mounted into this VM with process bindings. */
+    /** External sandbox mounted into this VM with process hostFunctions. */
     sandbox?: AgentOsSandboxInput;
     /** Custom schedule driver for cron jobs. Defaults to TimerScheduleDriver. */
     scheduleDriver?: ScheduleDriver;
-    /** Host-side bindings available to agents inside the VM. */
-    bindings?: Bindings[];
+    /** Host functions available to agents inside the VM. */
+    hostFunctions?: HostFunctionCollections<HOST_FUNCTIONS>;
     /**
-     * Custom permission policy for the kernel. Controls access to filesystem,
-     * network, child process, and environment operations. Defaults to allowAll.
+     * Permission policy for the kernel. By default the guest behaves like a
+     * sandboxed machine: its virtual filesystem, processes, environment, listeners,
+     * and loopback networking work, while external network access is denied. Your
+     * policy is merged over that default, so an omitted scope keeps it.
      */
     permissions?: Permissions;
     /**
@@ -470,9 +472,8 @@ export declare class AgentOs {
     private _acpTerminalCounter;
     private _softwareRoots;
     private _cronManager;
-    private _bindings;
-    private _bindingReference;
-    private _permissions;
+    private _hostFunctions;
+    private _hostFunctionReference;
     private _hostMounts;
     private _env;
     private _rootFilesystem;
@@ -623,7 +624,7 @@ export declare class AgentOs {
     private constructor();
     static createSidecar(options?: AgentOsCreateSidecarOptions): Promise<AgentOsSidecar>;
     static getSharedSidecar(options?: AgentOsSharedSidecarOptions): Promise<AgentOsSidecar>;
-    static create(options?: AgentOsOptions): Promise<AgentOs>;
+    static create<HOST_FUNCTIONS extends HostFunctionSchemas>(callerOptions?: AgentOsOptions<HOST_FUNCTIONS>): Promise<AgentOs>;
     createContext(contextId: string): Promise<void>;
     private _executionOperation;
     private _spawnLanguageOperation;