@rivet-dev/agentos-core 0.2.22 → 0.4.0

package/dist/process-forest.js

@@ -0,0 +1,24 @@
+export function buildProcessForest(records, project) {
+    const keys = new Set(records.map((record) => record.key));
+    const children = new Map();
+    const roots = [];
+    for (const record of records) {
+        if (record.parentKey !== null && keys.has(record.parentKey)) {
+            const siblings = children.get(record.parentKey) ?? [];
+            siblings.push(record);
+            children.set(record.parentKey, siblings);
+        }
+        else {
+            roots.push(record);
+        }
+    }
+    const seen = new Set();
+    const visit = (record) => {
+        seen.add(record.key);
+        const descendants = (children.get(record.key) ?? [])
+            .filter((child) => !seen.has(child.key))
+            .map(visit);
+        return project(record.info, descendants);
+    };
+    return roots.map(visit);
+}

package/dist/runtime-compat.d.ts

@@ -104,6 +104,8 @@ export interface ProcessInfo {
 }
 export interface ManagedProcess {
     pid: number;
+    /** Internal sidecar routing identity for output replay. */
+    readonly processId?: string;
     writeStdin(data: Uint8Array | string): Promise<void>;
     closeStdin(): Promise<void>;
     kill(signal?: number): void;
@@ -155,11 +157,22 @@ export interface RunResult<T = unknown> {
     errorMessage?: string;
 }
 export interface KernelSpawnOptions extends ExecOptions {
+    /** Internal sidecar replay identity; absent for local/synthetic output. */
+    onStdout?: (data: Uint8Array, metadata?: {
+        sequence?: number;
+        timestampMs?: number;
+    }) => void;
+    onStderr?: (data: Uint8Array, metadata?: {
+        sequence?: number;
+        timestampMs?: number;
+    }) => void;
     stdio?: "pipe" | "inherit";
     stdinFd?: number;
     stdoutFd?: number;
     stderrFd?: number;
     streamStdin?: boolean;
+    /** Internal: ask the sidecar to retain bounded output for pull-based replay. */
+    retainOutput?: boolean;
 }
 export type KernelExecOptions = ExecOptions;
 export type KernelExecResult = ExecResult;

package/dist/runtime-compat.js

@@ -62,7 +62,7 @@ const KERNEL_POSIX_BOOTSTRAP_DIRS = [
     "/var/tmp",
 ];
 const REPO_ROOT = fileURLToPath(new URL("../../..", import.meta.url));
-const SIDECAR_BINARY = path.join(REPO_ROOT, "target/debug/agentos-sidecar");
+const SIDECAR_BINARY = path.join(REPO_ROOT, "target/debug/agentos-native-sidecar");
 const SIDECAR_BUILD_INPUTS = [
     path.join(REPO_ROOT, "Cargo.toml"),
     path.join(REPO_ROOT, "Cargo.lock"),
@@ -70,8 +70,6 @@ const SIDECAR_BUILD_INPUTS = [
     path.join(REPO_ROOT, "crates/build-support"),
     path.join(REPO_ROOT, "crates/execution"),
     path.join(REPO_ROOT, "crates/kernel"),
-    path.join(REPO_ROOT, "crates/agentos-protocol"),
-    path.join(REPO_ROOT, "crates/agentos-sidecar"),
     path.join(REPO_ROOT, "crates/native-sidecar"),
     path.join(REPO_ROOT, "crates/native-sidecar-core"),
     path.join(REPO_ROOT, "crates/sidecar-protocol"),
@@ -588,8 +586,6 @@ export const WASMVM_COMMANDS = Object.freeze([
     "users",
     "uptime",
     "stty",
-    "codex",
-    "codex-exec",
 ]);
 export const DEFAULT_FIRST_PARTY_TIERS = Object.freeze({
     sh: "full",
@@ -600,8 +596,6 @@ export const DEFAULT_FIRST_PARTY_TIERS = Object.freeze({
     nice: "full",
     nohup: "full",
     stdbuf: "full",
-    codex: "full",
-    "codex-exec": "full",
     git: "full",
     "git-remote-http": "full",
     "git-remote-https": "full",
@@ -839,13 +833,13 @@ function ensureNativeSidecarBinary() {
     if (sidecarBinaryNeedsBuild()) {
         const cargoBinary = findCargoBinary();
         if (cargoBinary) {
-            execFileSync(cargoBinary, ["build", "-q", "-p", "agentos-sidecar"], {
+            execFileSync(cargoBinary, ["build", "-q", "-p", "agentos-native-sidecar"], {
                 cwd: REPO_ROOT,
                 stdio: "pipe",
             });
         }
         else if (!fsSync.existsSync(SIDECAR_BINARY)) {
-            execFileSync(resolveCargoBinary(), ["build", "-q", "-p", "agentos-sidecar"], {
+            execFileSync(resolveCargoBinary(), ["build", "-q", "-p", "agentos-native-sidecar"], {
                 cwd: REPO_ROOT,
                 stdio: "pipe",
             });

package/dist/sidecar/binary.d.ts

@@ -3,7 +3,7 @@
  *
  * Honors `AGENTOS_SIDECAR_BIN` as an absolute-path override, otherwise
  * resolves the platform-specific binary shipped by the
- * `@rivet-dev/agentos-sidecar` package. In-repo developer builds use the local
+ * `@rivet-dev/agentos-runtime-sidecar` package. In-repo developer builds use the local
  * cargo build path instead and never reach this function.
  */
 export declare function resolvePublishedSidecarBinary(): string;

package/dist/sidecar/binary.js

@@ -5,7 +5,7 @@ import { createRequire } from "node:module";
  *
  * Honors `AGENTOS_SIDECAR_BIN` as an absolute-path override, otherwise
  * resolves the platform-specific binary shipped by the
- * `@rivet-dev/agentos-sidecar` package. In-repo developer builds use the local
+ * `@rivet-dev/agentos-runtime-sidecar` package. In-repo developer builds use the local
  * cargo build path instead and never reach this function.
  */
 export function resolvePublishedSidecarBinary() {
@@ -19,12 +19,12 @@ export function resolvePublishedSidecarBinary() {
     const require = createRequire(import.meta.url);
     let mod;
     try {
-        mod = require("@rivet-dev/agentos-sidecar");
+        mod = require("@rivet-dev/agentos-runtime-sidecar");
     }
     catch (error) {
-        throw new Error("failed to resolve the Agent OS sidecar binary: the @rivet-dev/agentos-sidecar " +
+        throw new Error("failed to resolve the agentOS runtime sidecar binary: the @rivet-dev/agentos-runtime-sidecar " +
             "package is not installed. Install it, or set AGENTOS_SIDECAR_BIN to a local " +
-            `agentos-sidecar binary. (${error.message})`);
+            `agentos-native-sidecar binary. (${error.message})`);
     }
     return mod.getSidecarPath();
 }

package/dist/sidecar/native-process-client.d.ts

@@ -2,5 +2,5 @@ import "@rivet-dev/agentos-runtime-core/native-client";
 import { SidecarProcess } from "@rivet-dev/agentos-runtime-core/sidecar-client";
 export { SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "@rivet-dev/agentos-runtime-core/sidecar-client";
 export declare const NativeSidecarProcessClient: typeof SidecarProcess;
-export type { AuthenticatedSession, CreatedVm, ExtEnvelope, GuestFilesystemStat, RootFilesystemEntry, RootFilesystemLowerDescriptor, SidecarEventSelector, SidecarFsPermissionRule, SidecarLinkPackageResult, SidecarMountDescriptor, SidecarMountPluginDescriptor, SidecarPatternPermissionRule, SidecarPermissionMode, SidecarPermissionScope, SidecarPermissionsPolicy, SidecarProcessSnapshotEntry, SidecarProjectedAgent, SidecarProjectedModuleDescriptor, SidecarRegisteredHostCallbackDefinition, SidecarRegisteredHostCallbackExample, SidecarRequestFrame, SidecarRequestHandler, SidecarRequestPayload, SidecarResponseFrame, SidecarResponsePayload, SidecarRulePermissions, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSignalState, SidecarSocketStateEntry, SidecarSoftwareDescriptor, SidecarSpawnOptions, SidecarSpawnOptions as NativeSidecarSpawnOptions, SidecarZombieTimerCount, } from "@rivet-dev/agentos-runtime-core/sidecar-client";
+export type { AuthenticatedSession, CreatedVm, ExtEnvelope, GuestFilesystemStat, RootFilesystemEntry, RootFilesystemLowerDescriptor, SidecarEventSelector, SidecarFsPermissionRule, SidecarLinkPackageResult, SidecarMountDescriptor, SidecarMountPluginDescriptor, SidecarPatternPermissionRule, SidecarPermissionMode, SidecarPermissionScope, SidecarPermissionsPolicy, SidecarProcessSnapshotEntry, SidecarProjectedModuleDescriptor, SidecarRegisteredHostCallbackDefinition, SidecarRegisteredHostCallbackExample, SidecarRequestFrame, SidecarRequestHandler, SidecarRequestPayload, SidecarResponseFrame, SidecarResponsePayload, SidecarRulePermissions, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSignalState, SidecarSocketStateEntry, SidecarSoftwareDescriptor, SidecarSpawnOptions, SidecarSpawnOptions as NativeSidecarSpawnOptions, SidecarZombieTimerCount, } from "@rivet-dev/agentos-runtime-core/sidecar-client";
 export type { SidecarVmConfiguredResponse as SidecarConfigureVmResult, } from "@rivet-dev/agentos-runtime-core/sidecar-client";

package/dist/sidecar/rpc-client.d.ts

@@ -1,6 +1,7 @@
 import type { RootFilesystemConfig as VmConfigRootFilesystemConfig, RootFilesystemEntry as VmConfigRootFilesystemEntry, RootFilesystemLowerDescriptor as VmConfigRootFilesystemLowerDescriptor } from "@rivet-dev/agentos-runtime-core/vm-config";
 import type { NativeMountConfig, PlainMountConfig, RootFilesystemConfig } from "../agent-os.js";
 import type { RootSnapshotExport } from "../layers.js";
+import type { ProcessForestRecord } from "../process-forest.js";
 import type { ConnectTerminalOptions, KernelExecOptions, KernelExecResult, KernelSpawnOptions, ManagedProcess, OpenShellOptions, ProcessInfo, ShellHandle, VirtualFileSystem, VirtualStat } from "../runtime-compat.js";
 import type { AuthenticatedSession, CreatedVm, SidecarPermissionsPolicy, SidecarProcess, SidecarSignalHandlerRegistration } from "./native-process-client.js";
 export declare function toSidecarSignalName(signal: number): string;
@@ -36,11 +37,9 @@ interface NativeSidecarKernelProxyOptions {
     commandPermissions?: Parameters<SidecarProcess["configureVm"]>[2]["commandPermissions"];
     loopbackExemptPorts?: number[];
     /**
-     * The boot `configureVm` payload pieces beyond mounts/permissions. Rust
-     * `configure_vm` rebuilds the whole VM configuration from each payload, so
-     * every runtime mount reconfigure must resend these or a post-boot
-     * `mountFs()` silently drops the `/opt/agentos` package projections and
-     * host-function shim commands applied at boot.
+     * Boot `configureVm` fields beyond mounts/permissions. Reconfiguration
+     * replaces the boot package set; the sidecar retains packages added with
+     * `linkPackage` until an explicit `unlinkPackage`.
      */
     packages?: Parameters<SidecarProcess["configureVm"]>[2]["packages"];
     packagesMountAt?: string;
@@ -74,7 +73,7 @@ export declare class NativeSidecarKernelProxy {
     private readonly permissions;
     private readonly commandPermissions;
     private readonly loopbackExemptPorts;
-    private packages;
+    private readonly packages;
     private readonly packagesMountAt;
     private readonly hostFunctionShimCommands;
     private readonly commandDrivers;
@@ -102,15 +101,7 @@ export declare class NativeSidecarKernelProxy {
     createRootView(): VirtualFileSystem;
     get zombieTimerCount(): number;
     registerCommandGuestPaths(commandGuestPaths: ReadonlyMap<string, string>): void;
-    /**
-     * Record a runtime-linked package (`linkSoftware`) so mount reconfigures
-     * resend it. Rust `configure_vm` rebuilds the whole VM configuration from
-     * each payload, so a linked package omitted here would be silently
-     * unprojected from `/opt/agentos` by the next `mountFs`/`unmountFs`.
-     */
-    registerLinkedPackage(descriptor: {
-        path: string;
-    }): void;
+    unregisterCommandGuestPaths(commandNames: readonly string[]): void;
     dispose(): Promise<void>;
     /** Test-only snapshot of the per-VM tracking collection sizes. */
     __trackingSizesForTest(): {
@@ -173,6 +164,8 @@ export declare class NativeSidecarKernelProxy {
     private reconfigureSidecarMounts;
     private waitForMountReconfigure;
     snapshotProcesses(): ProcessInfo[];
+    /** Internal, host-side topology; never part of the guest or public DTO wire. */
+    snapshotProcessTopology(): ProcessForestRecord<ProcessInfo>[];
     findListener(request: {
         host?: string;
         port?: number;
@@ -191,6 +184,8 @@ export declare class NativeSidecarKernelProxy {
     private drainTrailingProcessOutput;
     private startTrackedProcess;
     private runEventPump;
+    /** Internal: replay carries the same authoritative exit proof as a live event. */
+    reconcileReplayExit(processId: string, exitCode: number): void;
     private finishProcess;
     private releaseProcessTrackingAfterDrain;
     private waitForTrackedProcess;
@@ -198,7 +193,6 @@ export declare class NativeSidecarKernelProxy {
     private flushPendingStdin;
     private closeTrackedStdin;
     private handleBackgroundProcessError;
-    private recordCompletedProcessError;
     private emitBackgroundProcessError;
     private readdirRecursiveLocal;
     private removePathLocal;
@@ -214,7 +208,7 @@ export declare class NativeSidecarKernelProxy {
     private assertLocalWritable;
     private updateTrackedProcessSnapshot;
 }
-export type { AuthenticatedSession, CreatedVm, GuestFilesystemStat, RootFilesystemEntry, SidecarConfigureVmResult, SidecarEventSelector, SidecarLinkPackageResult, SidecarPermissionsPolicy, SidecarProjectedAgent, SidecarRegisteredHostCallbackDefinition, SidecarRequestFrame, SidecarResponsePayload, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSocketStateEntry, SidecarSpawnOptions, } from "./native-process-client.js";
+export type { AuthenticatedSession, CreatedVm, GuestFilesystemStat, RootFilesystemEntry, SidecarConfigureVmResult, SidecarEventSelector, SidecarLinkPackageResult, SidecarPermissionsPolicy, SidecarRegisteredHostCallbackDefinition, SidecarRequestFrame, SidecarResponsePayload, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSocketStateEntry, SidecarSpawnOptions, } from "./native-process-client.js";
 export { NativeSidecarProcessClient, SidecarEventBufferOverflow, SidecarProcess, SidecarProcessError, SidecarProcessExited, } from "./native-process-client.js";
 export type AgentOsSidecarPlacement = {
     kind: "shared";
@@ -299,7 +293,7 @@ export declare class AgentOsSidecarClient {
     private readonly sessions;
     private disposed;
     constructor(options: AgentOsSidecarClientOptions);
-    /** Open a physical sidecar ownership scope, not a durable ACP session. */
+    /** Open a physical sidecar ownership scope for one client connection. */
     createOwnershipSession(options?: AgentOsSidecarSessionOptions): Promise<AgentOsSidecarSessionHandle>;
     listSessions(): AgentOsSidecarSessionLifecycle[];
     requireSessionLifecycle(sessionId: string): AgentOsSidecarSessionLifecycle;