@rivet-dev/agentos-core 0.2.5-rc.2 → 0.2.5-rc.4

package/dist/agentos-package.d.ts

@@ -18,9 +18,9 @@ export declare const OPT_AGENTOS_ROOT = "/opt/agentos";
 export declare const OPT_AGENTOS_BIN = "/opt/agentos/bin";
 export type AgentBlock = PackageAgentDescriptor;
 export type PackageRef = ManifestPackageRef;
-export interface SoftwarePackageRef {
-    packageDir: string;
-}
+export type SoftwarePackageRef = {
+    packagePath: string;
+};
 /** @deprecated Package software is now represented by its package directory. */
 export type PackageDescriptor = PackageRef;
 /** Discriminate the dir-only package reference. */

package/dist/agentos-package.js

@@ -50,7 +50,13 @@ function validateAgentosPackageManifest(value, source) {
     if (!isPlainObject(value) || typeof value.name !== "string") {
         throw new Error(`Invalid agentOS package manifest at ${source}: missing name`);
     }
-    const manifest = { name: value.name };
+    if (typeof value.version !== "string") {
+        throw new Error(`Invalid agentOS package manifest at ${source}: missing version`);
+    }
+    const manifest = {
+        name: value.name,
+        version: value.version,
+    };
     if (value.agent !== undefined) {
         if (!isPlainObject(value.agent) ||
             typeof value.agent.acpEntrypoint !== "string") {

package/dist/cron/types.d.ts

@@ -1,5 +1,5 @@
 import type { CreateSessionOptions } from "../agent-os.js";
-import type { AgentType } from "../agents.js";
+import type { AgentType } from "../types.js";
 export type CronAction = {
     type: "session";
     agentType: AgentType;

package/dist/default-software.d.ts

@@ -1,48 +1,8 @@
+import type { SoftwarePackageRef } from "@agentos-software/manifest";
 /**
- * Default software + on-demand agents — FULLY DYNAMIC, no hardcoded lists.
- *
- * This package's own `@agentos-software/*` runtime dependencies (from
- * `dependencies`, never `devDependencies`) are the entire universe:
- *
- * - `resolveDefaultSoftware()` — the set a bare `AgentOs.create()` projects:
- *   every NON-agent dependency's registry-built descriptor (`{ packageDir }`,
- *   or an ARRAY for meta-packages like `@agentos-software/common`). Agent
- *   packages are deliberately NOT projected by default — each carries a full
- *   node closure (and pi a V8 snapshot bundle), so they enter a VM only when a
- *   session actually needs them.
- * - `resolveDependencyAgents()` — the agent packages, keyed by their manifest
- *   `name` (the `createSession(id)` id). `createSession` links the matching
- *   package into the running VM on first use (`linkSoftware`), which registers
- *   its entrypoint/env from the package's own `agentos-package.json`.
- *
- * Adding a default command set or an available agent = adding a dependency.
- * Resolution THROWS with build instructions instead of silently skipping: a
- * missing artifact means either `pnpm install` was not run or, with the
- * file-linked deps, the sibling secure-exec registry was not built.
+ * Default software for a bare `AgentOs.create()`: the `@agentos-software/common`
+ * coreutils bundle, imported like any other package. The client makes NO
+ * npm/node_modules assumptions (see root CLAUDE.md) — no dep scan, no
+ * require.resolve. Opt out with `defaultSoftware: false`; add more via `software`.
  */
-/** A registry package descriptor: a package dir, or `{ packageDir }`. */
-type SoftwareDescriptor = string | {
-    packageDir: string;
-};
-/**
- * The default (non-agent) software set: every `@agentos-software/*`
- * dependency's descriptor(s) whose packed manifest has no `agent` entry.
- * Library deps (e.g. `@agentos-software/manifest`) export no descriptor and
- * are skipped. Opt out with `AgentOs.create({ defaultSoftware: false })`.
- */
-export declare function resolveDefaultSoftware(): Promise<SoftwareDescriptor[]>;
-export interface DependencyAgent {
-    /** The dependency package name (e.g. `@agentos-software/pi`). */
-    dependency: string;
-    /** The packed runtime dir to `linkSoftware`. */
-    packageDir: string;
-    /** The agent's ACP entrypoint command name. */
-    acpEntrypoint: string;
-}
-/**
- * Agent packages among the dependencies, keyed by manifest `name` (the
- * `createSession(id)` id). Sync (no module import — the packed manifest is
- * read straight from `<dep>/dist/package/`). Unbuilt agent deps THROW.
- */
-export declare function resolveDependencyAgents(): Map<string, DependencyAgent>;
-export {};
+export declare function resolveDefaultSoftware(): SoftwarePackageRef[];

package/dist/default-software.js

@@ -1,93 +1,10 @@
-import { existsSync, readFileSync } from "node:fs";
-import { createRequire } from "node:module";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-const PACKAGE_ROOT = join(dirname(fileURLToPath(import.meta.url)), "..");
-const requireFromHere = createRequire(import.meta.url);
-const BUILD_INSTRUCTIONS = "With file-linked deps, build the registry in the sibling secure-exec " +
-    "checkout: `just registry-build` (see its registry/README.md).";
-function dependencyNames() {
-    const manifest = JSON.parse(readFileSync(join(PACKAGE_ROOT, "package.json"), "utf8"));
-    return Object.keys(manifest.dependencies ?? {})
-        .filter((name) => name.startsWith("@agentos-software/"))
-        .sort();
-}
-function descriptorDir(ref) {
-    return typeof ref === "string" ? ref : ref.packageDir;
-}
-function readPackedManifest(dir) {
-    const path = join(dir, "agentos-package.json");
-    if (!existsSync(path))
-        return undefined;
-    try {
-        return JSON.parse(readFileSync(path, "utf8"));
-    }
-    catch {
-        return undefined;
-    }
-}
-function assertBuilt(name, dir) {
-    if (!existsSync(join(dir, "package.json"))) {
-        throw new Error(`software package ${name} is not BUILT (missing ${dir}). ${BUILD_INSTRUCTIONS}`);
-    }
-}
-/**
- * The default (non-agent) software set: every `@agentos-software/*`
- * dependency's descriptor(s) whose packed manifest has no `agent` entry.
- * Library deps (e.g. `@agentos-software/manifest`) export no descriptor and
- * are skipped. Opt out with `AgentOs.create({ defaultSoftware: false })`.
- */
-export async function resolveDefaultSoftware() {
-    const software = [];
-    for (const name of dependencyNames()) {
-        let mod;
-        try {
-            mod = (await import(name));
-        }
-        catch (error) {
-            throw new Error(`software package ${name} could not be imported — run \`pnpm install\` ` +
-                `(it is a dependency of this package): ${String(error)}`);
-        }
-        if (mod.default === undefined)
-            continue; // library dep, not software
-        for (const descriptor of [mod.default].flat()) {
-            const dir = descriptorDir(descriptor);
-            assertBuilt(name, dir);
-            if (readPackedManifest(dir)?.agent)
-                continue; // agents load lazily
-            software.push(descriptor);
-        }
-    }
-    return software;
-}
+import common from "@agentos-software/common";
 /**
- * Agent packages among the dependencies, keyed by manifest `name` (the
- * `createSession(id)` id). Sync (no module import — the packed manifest is
- * read straight from `<dep>/dist/package/`). Unbuilt agent deps THROW.
+ * Default software for a bare `AgentOs.create()`: the `@agentos-software/common`
+ * coreutils bundle, imported like any other package. The client makes NO
+ * npm/node_modules assumptions (see root CLAUDE.md) — no dep scan, no
+ * require.resolve. Opt out with `defaultSoftware: false`; add more via `software`.
  */
-export function resolveDependencyAgents() {
-    const agents = new Map();
-    for (const name of dependencyNames()) {
-        let entry;
-        try {
-            entry = requireFromHere.resolve(name); // -> <pkg>/dist/index.js
-        }
-        catch {
-            continue; // not installed — surfaced by resolveDefaultSoftware/import paths
-        }
-        const dir = join(dirname(entry), "package");
-        const manifest = readPackedManifest(dir);
-        if (!manifest?.agent)
-            continue;
-        if (!manifest.name || !manifest.agent.acpEntrypoint) {
-            throw new Error(`agent package ${name} has an invalid packed manifest (${dir}/agentos-package.json) — rebuild it (\`just registry-build\`)`);
-        }
-        assertBuilt(name, dir);
-        agents.set(manifest.name, {
-            dependency: name,
-            packageDir: dir,
-            acpEntrypoint: manifest.agent.acpEntrypoint,
-        });
-    }
-    return agents;
+export function resolveDefaultSoftware() {
+    return [common].flat();
 }

package/dist/generated/AcpLimitsConfig.d.ts

@@ -0,0 +1,4 @@
+export type AcpLimitsConfig = {
+    maxReadLineBytes?: number;
+    stdoutBufferByteLimit?: number;
+};

package/dist/generated/AcpLimitsConfig.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/CreateVmConfig.d.ts

@@ -0,0 +1,26 @@
+import type { JsRuntimeConfig } from "./JsRuntimeConfig.js";
+import type { NativeRootFilesystemConfig } from "./NativeRootFilesystemConfig.js";
+import type { PermissionsPolicy } from "./PermissionsPolicy.js";
+import type { RootFilesystemConfig } from "./RootFilesystemConfig.js";
+import type { VmDnsConfig } from "./VmDnsConfig.js";
+import type { VmLimitsConfig } from "./VmLimitsConfig.js";
+import type { VmListenPolicyConfig } from "./VmListenPolicyConfig.js";
+/**
+ * Canonical Rust-side VM config. Unknown fields must stay rejected here and in
+ * the TS preflight schema at
+ * `packages/core/src/node-runtime-options-schema.ts`; update both when a
+ * public `NodeRuntime.create(...)` option changes the generated VM config.
+ */
+export type CreateVmConfig = {
+    cwd?: string;
+    env: Record<string, string>;
+    rootFilesystem: RootFilesystemConfig;
+    permissions?: PermissionsPolicy;
+    limits?: VmLimitsConfig;
+    dns?: VmDnsConfig;
+    nativeRoot?: NativeRootFilesystemConfig;
+    listen?: VmListenPolicyConfig;
+    loopbackExemptPorts: Array<number>;
+    jsRuntime?: JsRuntimeConfig;
+    bootstrapCommands?: Array<string>;
+};

package/dist/generated/CreateVmConfig.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/FsPermissionRule.d.ts

@@ -0,0 +1,6 @@
+import type { PermissionMode } from "./PermissionMode.js";
+export type FsPermissionRule = {
+    mode: PermissionMode;
+    operations: Array<string>;
+    paths: Array<string>;
+};

package/dist/generated/FsPermissionRule.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/FsPermissionRuleSet.d.ts

@@ -0,0 +1,6 @@
+import type { FsPermissionRule } from "./FsPermissionRule.js";
+import type { PermissionMode } from "./PermissionMode.js";
+export type FsPermissionRuleSet = {
+    default?: PermissionMode;
+    rules: Array<FsPermissionRule>;
+};

package/dist/generated/FsPermissionRuleSet.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/FsPermissionScope.d.ts

@@ -0,0 +1,3 @@
+import type { FsPermissionRuleSet } from "./FsPermissionRuleSet.js";
+import type { PermissionMode } from "./PermissionMode.js";
+export type FsPermissionScope = PermissionMode | FsPermissionRuleSet;

package/dist/generated/FsPermissionScope.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/HttpLimitsConfig.d.ts

@@ -0,0 +1,3 @@
+export type HttpLimitsConfig = {
+    maxFetchResponseBytes?: number;
+};

package/dist/generated/HttpLimitsConfig.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/JsModuleResolution.d.ts

@@ -0,0 +1 @@
+export type JsModuleResolution = "node" | "relative" | "none";

package/dist/generated/JsModuleResolution.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/JsRuntimeConfig.d.ts

@@ -0,0 +1,31 @@
+import type { JsModuleResolution } from "./JsModuleResolution.js";
+import type { JsRuntimePlatform } from "./JsRuntimePlatform.js";
+/**
+ * Guest JavaScript host-environment configuration.
+ *
+ * Selects which globals/builtins/module-resolution surface guest JS sees,
+ * modeled on esbuild's `platform`. Omitting this preserves full Node.js
+ * emulation (`platform = node`).
+ */
+export type JsRuntimeConfig = {
+    /**
+     * Which host environment to emulate for guest JS. Default `node`.
+     */
+    platform: JsRuntimePlatform;
+    /**
+     * How bare import specifiers resolve. Independent of `platform`.
+     * Default `node`.
+     */
+    moduleResolution: JsModuleResolution;
+    /**
+     * Node builtin-module allow-list. Only valid when `platform = node`.
+     * `None` => engine default allow-list. `Some([])` => deny all builtins.
+     * `Some([..])` => exactly those.
+     */
+    allowedBuiltins?: Array<string>;
+    /**
+     * Opt in to a high-resolution monotonic guest clock. Default false keeps
+     * the security-oriented 1ms timer resolution.
+     */
+    highResolutionTime?: boolean;
+};

package/dist/generated/JsRuntimeConfig.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/JsRuntimeLimitsConfig.d.ts

@@ -0,0 +1,11 @@
+export type JsRuntimeLimitsConfig = {
+    v8HeapLimitMb?: number;
+    syncRpcWaitTimeoutMs?: number;
+    cpuTimeLimitMs?: number;
+    wallClockLimitMs?: number;
+    importCacheMaterializeTimeoutMs?: number;
+    capturedOutputLimitBytes?: number;
+    stdinBufferLimitBytes?: number;
+    eventPayloadLimitBytes?: number;
+    v8IpcMaxFrameBytes?: number;
+};

package/dist/generated/JsRuntimeLimitsConfig.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/JsRuntimePlatform.d.ts

@@ -0,0 +1 @@
+export type JsRuntimePlatform = "node" | "browser" | "neutral" | "bare";

package/dist/generated/JsRuntimePlatform.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/MountPluginDescriptor.d.ts

@@ -0,0 +1,4 @@
+export type MountPluginDescriptor = {
+    id: string;
+    config: import("@rivet-dev/agentos-runtime-core/descriptors").MountConfigJsonValue;
+};

package/dist/generated/MountPluginDescriptor.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/NativeRootFilesystemConfig.d.ts

@@ -0,0 +1,5 @@
+import type { MountPluginDescriptor } from "./MountPluginDescriptor.js";
+export type NativeRootFilesystemConfig = {
+    plugin: MountPluginDescriptor;
+    readOnly: boolean;
+};

package/dist/generated/NativeRootFilesystemConfig.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/PatternPermissionRule.d.ts

@@ -0,0 +1,6 @@
+import type { PermissionMode } from "./PermissionMode.js";
+export type PatternPermissionRule = {
+    mode: PermissionMode;
+    operations: Array<string>;
+    patterns: Array<string>;
+};

package/dist/generated/PatternPermissionRule.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/PatternPermissionRuleSet.d.ts

@@ -0,0 +1,6 @@
+import type { PatternPermissionRule } from "./PatternPermissionRule.js";
+import type { PermissionMode } from "./PermissionMode.js";
+export type PatternPermissionRuleSet = {
+    default?: PermissionMode;
+    rules: Array<PatternPermissionRule>;
+};

package/dist/generated/PatternPermissionRuleSet.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/PatternPermissionScope.d.ts

@@ -0,0 +1,3 @@
+import type { PatternPermissionRuleSet } from "./PatternPermissionRuleSet.js";
+import type { PermissionMode } from "./PermissionMode.js";
+export type PatternPermissionScope = PermissionMode | PatternPermissionRuleSet;

package/dist/generated/PatternPermissionScope.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/PermissionMode.d.ts

@@ -0,0 +1 @@
+export type PermissionMode = "allow" | "ask" | "deny";

package/dist/generated/PermissionMode.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/PermissionsPolicy.d.ts

@@ -0,0 +1,10 @@
+import type { FsPermissionScope } from "./FsPermissionScope.js";
+import type { PatternPermissionScope } from "./PatternPermissionScope.js";
+export type PermissionsPolicy = {
+    fs?: FsPermissionScope;
+    network?: PatternPermissionScope;
+    childProcess?: PatternPermissionScope;
+    process?: PatternPermissionScope;
+    env?: PatternPermissionScope;
+    binding?: PatternPermissionScope;
+};

package/dist/generated/PermissionsPolicy.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/PluginLimitsConfig.d.ts

@@ -0,0 +1,4 @@
+export type PluginLimitsConfig = {
+    maxPersistedManifestBytes?: number;
+    maxPersistedManifestFileBytes?: number;
+};

package/dist/generated/PluginLimitsConfig.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/PythonLimitsConfig.d.ts

@@ -0,0 +1,6 @@
+export type PythonLimitsConfig = {
+    outputBufferMaxBytes?: number;
+    executionTimeoutMs?: number;
+    maxOldSpaceMb?: number;
+    vfsRpcTimeoutMs?: number;
+};

package/dist/generated/PythonLimitsConfig.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/ResourceLimitsConfig.d.ts

@@ -0,0 +1,24 @@
+export type ResourceLimitsConfig = {
+    cpuCount?: number;
+    maxProcesses?: number;
+    maxOpenFds?: number;
+    maxPipes?: number;
+    maxPtys?: number;
+    maxSockets?: number;
+    maxConnections?: number;
+    maxSocketBufferedBytes?: number;
+    maxSocketDatagramQueueLen?: number;
+    maxFilesystemBytes?: number;
+    maxInodeCount?: number;
+    maxBlockingReadMs?: number;
+    maxPreadBytes?: number;
+    maxFdWriteBytes?: number;
+    maxProcessArgvBytes?: number;
+    maxProcessEnvBytes?: number;
+    maxReaddirEntries?: number;
+    maxRecursiveFsDepth?: number;
+    maxRecursiveFsEntries?: number;
+    maxWasmFuel?: number;
+    maxWasmMemoryBytes?: number;
+    maxWasmStackBytes?: number;
+};

package/dist/generated/ResourceLimitsConfig.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/RootFilesystemConfig.d.ts

@@ -0,0 +1,9 @@
+import type { RootFilesystemEntry } from "./RootFilesystemEntry.js";
+import type { RootFilesystemLowerDescriptor } from "./RootFilesystemLowerDescriptor.js";
+import type { RootFilesystemMode } from "./RootFilesystemMode.js";
+export type RootFilesystemConfig = {
+    mode: RootFilesystemMode;
+    disableDefaultBaseLayer: boolean;
+    lowers: Array<RootFilesystemLowerDescriptor>;
+    bootstrapEntries: Array<RootFilesystemEntry>;
+};

package/dist/generated/RootFilesystemConfig.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/RootFilesystemEntry.d.ts

@@ -0,0 +1,13 @@
+import type { RootFilesystemEntryEncoding } from "./RootFilesystemEntryEncoding.js";
+import type { RootFilesystemEntryKind } from "./RootFilesystemEntryKind.js";
+export type RootFilesystemEntry = {
+    path: string;
+    kind: RootFilesystemEntryKind;
+    mode?: number;
+    uid?: number;
+    gid?: number;
+    content?: string;
+    encoding?: RootFilesystemEntryEncoding;
+    target?: string;
+    executable: boolean;
+};

package/dist/generated/RootFilesystemEntry.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/RootFilesystemEntryEncoding.d.ts

@@ -0,0 +1 @@
+export type RootFilesystemEntryEncoding = "utf8" | "base64";

package/dist/generated/RootFilesystemEntryEncoding.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/RootFilesystemEntryKind.d.ts

@@ -0,0 +1 @@
+export type RootFilesystemEntryKind = "file" | "directory" | "symlink";

package/dist/generated/RootFilesystemEntryKind.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/RootFilesystemLowerDescriptor.d.ts

@@ -0,0 +1,7 @@
+import type { RootFilesystemEntry } from "./RootFilesystemEntry.js";
+export type RootFilesystemLowerDescriptor = {
+    "kind": "snapshot";
+    entries: Array<RootFilesystemEntry>;
+} | {
+    "kind": "bundledBaseFilesystem";
+};

package/dist/generated/RootFilesystemLowerDescriptor.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/RootFilesystemMode.d.ts

@@ -0,0 +1 @@
+export type RootFilesystemMode = "ephemeral" | "read-only";

package/dist/generated/RootFilesystemMode.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/ToolLimitsConfig.d.ts

@@ -0,0 +1,10 @@
+export type ToolLimitsConfig = {
+    defaultToolTimeoutMs?: number;
+    maxToolTimeoutMs?: number;
+    maxRegisteredToolkits?: number;
+    maxRegisteredToolsPerVm?: number;
+    maxToolsPerToolkit?: number;
+    maxToolSchemaBytes?: number;
+    maxToolExamplesPerTool?: number;
+    maxToolExampleInputBytes?: number;
+};

package/dist/generated/ToolLimitsConfig.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/VmDnsConfig.d.ts

@@ -0,0 +1,6 @@
+export type VmDnsConfig = {
+    nameServers: Array<string>;
+    overrides: {
+        [key in string]?: Array<string>;
+    };
+};

package/dist/generated/VmDnsConfig.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/VmLimitsConfig.d.ts

@@ -0,0 +1,18 @@
+import type { AcpLimitsConfig } from "./AcpLimitsConfig.js";
+import type { HttpLimitsConfig } from "./HttpLimitsConfig.js";
+import type { JsRuntimeLimitsConfig } from "./JsRuntimeLimitsConfig.js";
+import type { PluginLimitsConfig } from "./PluginLimitsConfig.js";
+import type { PythonLimitsConfig } from "./PythonLimitsConfig.js";
+import type { ResourceLimitsConfig } from "./ResourceLimitsConfig.js";
+import type { ToolLimitsConfig } from "./ToolLimitsConfig.js";
+import type { WasmLimitsConfig } from "./WasmLimitsConfig.js";
+export type VmLimitsConfig = {
+    resources?: ResourceLimitsConfig;
+    http?: HttpLimitsConfig;
+    tools?: ToolLimitsConfig;
+    plugins?: PluginLimitsConfig;
+    acp?: AcpLimitsConfig;
+    jsRuntime?: JsRuntimeLimitsConfig;
+    python?: PythonLimitsConfig;
+    wasm?: WasmLimitsConfig;
+};

package/dist/generated/VmLimitsConfig.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/VmListenPolicyConfig.d.ts

@@ -0,0 +1,5 @@
+export type VmListenPolicyConfig = {
+    portMin?: number;
+    portMax?: number;
+    allowPrivileged?: boolean;
+};

package/dist/generated/VmListenPolicyConfig.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/generated/WasmLimitsConfig.d.ts

@@ -0,0 +1,7 @@
+export type WasmLimitsConfig = {
+    maxModuleFileBytes?: number;
+    capturedOutputLimitBytes?: number;
+    syncReadLimitBytes?: number;
+    prewarmTimeoutMs?: number;
+    runnerHeapLimitMb?: number;
+};

package/dist/generated/WasmLimitsConfig.js

@@ -0,0 +1,2 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+export {};

package/dist/host-dir-mount.d.ts

@@ -1,4 +1,4 @@
-import type { MountConfigJsonObject, NativeMountPluginDescriptor } from "@secure-exec/core/descriptors";
+import type { MountConfigJsonObject, NativeMountPluginDescriptor } from "@rivet-dev/agentos-runtime-core/descriptors";
 export interface HostDirBackendOptions {
     /** Absolute path to the host directory to project into the VM. */
     hostPath: string;

package/dist/index.d.ts

@@ -1,5 +1,4 @@
 export { AgentOs, AgentOsSidecar } from "./agent-os.js";
-export { AGENT_CONFIGS } from "./agents.js";
 export { CronManager, InvalidScheduleError, PastScheduleError, TimerScheduleDriver, } from "./cron/index.js";
 export { createHostDirBackend, nodeModulesMount } from "./host-dir-mount.js";
 export { hostTool, MAX_TOOL_DESCRIPTION_LENGTH, toolKit, validateToolkits, } from "./host-tools.js";