@rivet-dev/agentos-core 0.2.8-rc.1 → 0.2.8-rc.3

package/dist/sidecar/rpc-client.d.ts

@@ -40,11 +40,11 @@ interface NativeSidecarKernelProxyOptions {
      * `configure_vm` rebuilds the whole VM configuration from each payload, so
      * every runtime mount reconfigure must resend these or a post-boot
      * `mountFs()` silently drops the `/opt/agentos` package projections and
-     * tool shim commands applied at boot.
+     * binding shim commands applied at boot.
      */
     packages?: Parameters<SidecarProcess["configureVm"]>[2]["packages"];
     packagesMountAt?: string;
-    toolShimCommands?: string[];
+    bindingShimCommands?: string[];
     commandGuestPaths: ReadonlyMap<string, string>;
     onWasmCommandResolved?: (command: string) => void;
     onDispose?: () => Promise<void>;
@@ -70,12 +70,13 @@ export declare class NativeSidecarKernelProxy {
     private readonly ownsClient;
     private readonly localMounts;
     private readonly baseSidecarMounts;
+    private readonly dynamicSidecarMounts;
     private readonly permissions;
     private readonly commandPermissions;
     private readonly loopbackExemptPorts;
     private packages;
     private readonly packagesMountAt;
-    private readonly toolShimCommands;
+    private readonly bindingShimCommands;
     private readonly commandDrivers;
     private readonly onWasmCommandResolved;
     private readonly onDispose;
@@ -161,6 +162,13 @@ export declare class NativeSidecarKernelProxy {
         sidecarMount?: SidecarMountDescriptor;
     }): Promise<void>;
     unmountFs(path: string): Promise<void>;
+    mountDescriptor(mount: SidecarMountDescriptor): Promise<void>;
+    unmountDescriptor(path: string): Promise<void>;
+    listMounts(): Promise<Array<{
+        path: string;
+        kind: string;
+        readOnly: boolean;
+    }>>;
     private desiredSidecarMounts;
     private reconfigureSidecarMounts;
     private waitForMountReconfigure;
@@ -175,6 +183,7 @@ export declare class NativeSidecarKernelProxy {
         port?: number;
     }): KernelSocketSnapshot | null;
     getSignalState(pid: number): KernelSignalState;
+    private scheduleSignalStateRefresh;
     private refreshSocketLookup;
     private refreshSignalState;
     private refreshProcessSnapshot;
@@ -262,7 +271,7 @@ export interface AgentOsSidecarTransport {
     dispose(): Promise<void>;
 }
 export interface AgentOsSidecarClientOptions {
-    createSessionTransport(bootstrap: AgentOsSidecarSessionBootstrap): Promise<AgentOsSidecarTransport>;
+    createOwnershipTransport(bootstrap: AgentOsSidecarSessionBootstrap): Promise<AgentOsSidecarTransport>;
     createId?: () => string;
     now?: () => number;
 }
@@ -284,13 +293,14 @@ export declare class AgentOsSidecarSessionHandle {
     dispose(): Promise<void>;
 }
 export declare class AgentOsSidecarClient {
-    private readonly createSessionTransport;
+    private readonly createOwnershipTransport;
     private readonly createId;
     private readonly now;
     private readonly sessions;
     private disposed;
     constructor(options: AgentOsSidecarClientOptions);
-    createSession(options?: AgentOsSidecarSessionOptions): Promise<AgentOsSidecarSessionHandle>;
+    /** Open a physical sidecar ownership scope, not a durable ACP session. */
+    createOwnershipSession(options?: AgentOsSidecarSessionOptions): Promise<AgentOsSidecarSessionHandle>;
     listSessions(): AgentOsSidecarSessionLifecycle[];
     requireSessionLifecycle(sessionId: string): AgentOsSidecarSessionLifecycle;
     listVms(sessionId: string): AgentOsSidecarVmLifecycle[];
@@ -315,6 +325,8 @@ export interface SidecarMountPluginDescriptor {
 }
 export interface SidecarMountDescriptor {
     guestPath: string;
+    guestSource?: string;
+    guestFstype?: string;
     readOnly: boolean;
     plugin: SidecarMountPluginDescriptor;
 }

package/dist/sidecar/rpc-client.js

@@ -20,7 +20,9 @@ function formatStructuredSidecarDetail(detail) {
     if (entries.length === 0) {
         return "";
     }
-    return entries.map(([key, value]) => `${key}=${JSON.stringify(value)}`).join(" ");
+    return entries
+        .map(([key, value]) => `${key}=${JSON.stringify(value)}`)
+        .join(" ");
 }
 function logStructuredSidecarEvent(name, detail) {
     if (!shouldLogStructuredSidecarEvent(name)) {
@@ -211,6 +213,7 @@ export class NativeSidecarKernelProxy {
     ownsClient;
     localMounts;
     baseSidecarMounts;
+    dynamicSidecarMounts = [];
     permissions;
     commandPermissions;
     loopbackExemptPorts;
@@ -218,7 +221,7 @@ export class NativeSidecarKernelProxy {
     // later mount reconfigures resend linked packages too, not just boot ones.
     packages;
     packagesMountAt;
-    toolShimCommands;
+    bindingShimCommands;
     commandDrivers;
     onWasmCommandResolved;
     onDispose;
@@ -257,7 +260,7 @@ export class NativeSidecarKernelProxy {
         this.loopbackExemptPorts = options.loopbackExemptPorts;
         this.packages = options.packages ? [...options.packages] : [];
         this.packagesMountAt = options.packagesMountAt;
-        this.toolShimCommands = options.toolShimCommands;
+        this.bindingShimCommands = options.bindingShimCommands;
         this.commandDrivers = buildCommandMap(options.commandGuestPaths);
         this.onWasmCommandResolved = options.onWasmCommandResolved;
         this.onDispose = options.onDispose;
@@ -583,7 +586,7 @@ export class NativeSidecarKernelProxy {
         return proc;
     }
     openShell(options) {
-        const stdoutHandlers = new Set();
+        const terminalHandlers = new Set();
         const stderrHandlers = new Set();
         const command = options?.command ?? "sh";
         const args = options?.args ??
@@ -638,7 +641,7 @@ export class NativeSidecarKernelProxy {
             const normalized = normalizeSyntheticTerminalText(text);
             updateSyntheticCursor(normalized);
             const chunk = textEncoder.encode(normalized);
-            for (const handler of stdoutHandlers) {
+            for (const handler of terminalHandlers) {
                 handler(chunk);
             }
         };
@@ -649,7 +652,7 @@ export class NativeSidecarKernelProxy {
             const normalized = normalizeSyntheticTerminalText(text);
             updateSyntheticCursor(normalized);
             const chunk = textEncoder.encode(normalized);
-            for (const handler of stdoutHandlers) {
+            for (const handler of terminalHandlers) {
                 handler(chunk);
             }
         };
@@ -694,7 +697,7 @@ export class NativeSidecarKernelProxy {
             commandInFlight = false;
             const promptPrefix = syntheticCursorAtLineStart ? "" : "\r\n";
             const promptChunk = textEncoder.encode(`${promptPrefix}${promptText}`);
-            for (const handler of stdoutHandlers) {
+            for (const handler of terminalHandlers) {
                 handler(promptChunk);
             }
             syntheticCursorAtLineStart = false;
@@ -752,7 +755,7 @@ export class NativeSidecarKernelProxy {
             }
         };
         let onData = null;
-        stdoutHandlers.add((data) => onData?.(data));
+        terminalHandlers.add((data) => onData?.(data));
         if (options?.onStderr) {
             stderrHandlers.add(options.onStderr);
         }
@@ -921,7 +924,7 @@ export class NativeSidecarKernelProxy {
                 if (!sanitized) {
                     return;
                 }
-                for (const handler of stdoutHandlers) {
+                for (const handler of terminalHandlers) {
                     handler(sanitized);
                 }
                 if (commandInFlight) {
@@ -933,6 +936,11 @@ export class NativeSidecarKernelProxy {
                 if (!sanitized) {
                     return;
                 }
+                // `onData` is the ordered PTY rendering stream. `onStderr` remains an
+                // optional channel-specific diagnostic tap and must not also be rendered.
+                for (const handler of terminalHandlers) {
+                    handler(sanitized);
+                }
                 for (const handler of stderrHandlers) {
                     handler(sanitized);
                 }
@@ -986,13 +994,7 @@ export class NativeSidecarKernelProxy {
         const stdin = process.stdin;
         const stdout = process.stdout;
         const { onData, ...shellOptions } = options ?? {};
-        const shell = this.openShell({
-            ...shellOptions,
-            onStderr: shellOptions.onStderr ??
-                ((data) => {
-                    process.stderr.write(data);
-                }),
-        });
+        const shell = this.openShell(shellOptions);
         const outputHandler = onData ??
             ((data) => {
                 stdout.write(data);
@@ -1164,9 +1166,34 @@ export class NativeSidecarKernelProxy {
         applied.catch(() => { });
         return applied;
     }
+    mountDescriptor(mount) {
+        const normalized = posixPath.normalize(mount.guestPath);
+        if (this.desiredSidecarMounts().some((existing) => posixPath.normalize(existing.guestPath) === normalized)) {
+            return Promise.reject(new Error(`mount already exists: ${normalized}`));
+        }
+        this.dynamicSidecarMounts.push({ ...mount, guestPath: normalized });
+        const applied = this.reconfigureSidecarMounts();
+        applied.catch(() => { });
+        return applied;
+    }
+    unmountDescriptor(path) {
+        const normalized = posixPath.normalize(path);
+        const index = this.dynamicSidecarMounts.findIndex((mount) => posixPath.normalize(mount.guestPath) === normalized);
+        if (index < 0)
+            return Promise.resolve();
+        this.dynamicSidecarMounts.splice(index, 1);
+        const applied = this.reconfigureSidecarMounts();
+        applied.catch(() => { });
+        return applied;
+    }
+    async listMounts() {
+        await this.waitForMountReconfigure();
+        return this.client.listMounts(this.session, this.vm);
+    }
     desiredSidecarMounts() {
         return [
             ...this.baseSidecarMounts,
+            ...this.dynamicSidecarMounts,
             ...this.localMounts.map((mount) => mount.sidecarMount ?? {
                 guestPath: mount.path,
                 readOnly: mount.readOnly,
@@ -1183,8 +1210,8 @@ export class NativeSidecarKernelProxy {
                 return;
             }
             // Rust `configure_vm` rebuilds the whole VM configuration from this
-            // payload, so resend the boot packages / tool shim commands too —
-            // omitting them here strips the `/opt/agentos` projections and tool
+            // payload, so resend the boot packages / binding shim commands too —
+            // omitting them here strips the `/opt/agentos` projections and binding
             // shims from the VM as a side effect of a runtime mount change.
             await this.client.configureVm(this.session, this.vm, {
                 mounts: this.desiredSidecarMounts(),
@@ -1193,7 +1220,7 @@ export class NativeSidecarKernelProxy {
                 loopbackExemptPorts: this.loopbackExemptPorts,
                 packages: this.packages,
                 packagesMountAt: this.packagesMountAt,
-                toolShimCommands: this.toolShimCommands,
+                bindingShimCommands: this.bindingShimCommands,
             });
         };
         const previous = this.mountReconfigurePromise ?? Promise.resolve();
@@ -1238,11 +1265,17 @@ export class NativeSidecarKernelProxy {
     }
     getSignalState(pid) {
         const entry = this.trackedProcesses.get(pid);
-        if (entry && !this.signalRefreshes.has(pid)) {
-            this.signalRefreshes.set(pid, this.refreshSignalState(entry));
-        }
+        if (entry)
+            this.scheduleSignalStateRefresh(entry);
         return this.signalStates.get(pid) ?? { handlers: new Map() };
     }
+    scheduleSignalStateRefresh(entry) {
+        if (this.signalRefreshes.has(entry.pid))
+            return;
+        const refresh = this.refreshSignalState(entry);
+        this.signalRefreshes.set(entry.pid, refresh);
+        void refresh.catch(() => { });
+    }
     async refreshSocketLookup(cache, key, lookup) {
         try {
             const socket = await lookup();
@@ -1334,7 +1367,11 @@ export class NativeSidecarKernelProxy {
         entry.started = true;
         this.updateTrackedProcessSnapshot(entry);
         void this.refreshProcessSnapshot().catch(() => { });
-        await this.refreshSignalState(entry);
+        // Signal metadata is advisory and must not hold process startup behind a
+        // second sidecar RPC. Very short binding commands can finish while the
+        // original execute response is still in flight; synchronously refreshing
+        // here creates a circular wait with their output/exit delivery.
+        this.scheduleSignalStateRefresh(entry);
         void this.flushPendingStdin(entry).catch((error) => {
             this.handleBackgroundProcessError(entry, error);
         });
@@ -1362,10 +1399,7 @@ export class NativeSidecarKernelProxy {
                     }
                     entry.outputGeneration += 1;
                     void this.refreshProcessSnapshot().catch(() => { });
-                    if (!this.signalRefreshes.has(entry.pid)) {
-                        this.signalRefreshes.set(entry.pid, this.refreshSignalState(entry));
-                        await this.signalRefreshes.get(entry.pid);
-                    }
+                    this.scheduleSignalStateRefresh(entry);
                     const chunk = event.payload.chunk;
                     const listeners = event.payload.channel === "stdout"
                         ? entry.onStdout
@@ -2083,17 +2117,18 @@ export class AgentOsSidecarSessionHandle {
     }
 }
 export class AgentOsSidecarClient {
-    createSessionTransport;
+    createOwnershipTransport;
     createId;
     now;
     sessions = new Map();
     disposed = false;
     constructor(options) {
-        this.createSessionTransport = options.createSessionTransport;
+        this.createOwnershipTransport = options.createOwnershipTransport;
         this.createId = options.createId ?? randomUUID;
         this.now = options.now ?? Date.now;
     }
-    async createSession(options = {}) {
+    /** Open a physical sidecar ownership scope, not a durable ACP session. */
+    async createOwnershipSession(options = {}) {
         this.assertActive();
         const sessionId = this.createId();
         const placement = clonePlacement(options.placement);
@@ -2112,7 +2147,7 @@ export class AgentOsSidecarClient {
         };
         this.sessions.set(sessionId, entry);
         try {
-            entry.transport = await this.createSessionTransport({
+            entry.transport = await this.createOwnershipTransport({
                 sessionId,
                 placement: clonePlacement(placement),
                 metadata: cloneMetadata(metadata),
@@ -2278,6 +2313,8 @@ export function serializeMountConfigForSidecar(mount) {
     if ("driver" in mount) {
         return {
             guestPath: mount.path,
+            guestSource: mount.guestSource ?? "js_bridge",
+            guestFstype: mount.guestFstype ?? "js_bridge",
             readOnly: mount.readOnly ?? false,
             plugin: {
                 id: "js_bridge",
@@ -2287,6 +2324,8 @@ export function serializeMountConfigForSidecar(mount) {
     }
     return {
         guestPath: mount.path,
+        guestSource: mount.guestSource ?? mount.plugin.id,
+        guestFstype: mount.guestFstype ?? mount.plugin.id,
         readOnly: mount.readOnly ?? false,
         plugin: {
             id: mount.plugin.id,
@@ -2295,6 +2334,14 @@ export function serializeMountConfigForSidecar(mount) {
     };
 }
 export function serializeRootFilesystemForSidecar(config, bootstrapLower) {
+    if (config?.type === "native") {
+        return {
+            mode: "ephemeral",
+            disableDefaultBaseLayer: true,
+            lowers: [],
+            bootstrapEntries: [],
+        };
+    }
     const lowerInputs = [
         ...(config?.lowers ?? []),
         ...(bootstrapLower ? [bootstrapLower] : []),

package/dist/test/runtime.d.ts

@@ -7,5 +7,6 @@
 export { type AgentOsRuntimeAdmin, getAgentOsKernel, getAgentOsRuntimeAdmin, } from "../agent-os.js";
 export type { PermissionTier, WasmVmRuntimeOptions, } from "../runtime.js";
 export type { DriverProcess, Kernel, KernelInterface, KernelRuntimeDriver, ProcessContext, VirtualFileSystem, } from "../runtime-compat.js";
-export { AF_INET, AF_UNIX, allowAll, createInMemoryFileSystem, createKernel, createNodeHostNetworkAdapter, createNodeRuntime, createWasmVmRuntime, DEFAULT_FIRST_PARTY_TIERS, NodeFileSystem, SIGTERM, SOCK_DGRAM, SOCK_STREAM, WASMVM_COMMANDS, } from "../runtime-compat.js";
+export { AF_INET, AF_UNIX, allowAll, createKernel, createNodeHostNetworkAdapter, createNodeRuntime, createWasmVmRuntime, DEFAULT_FIRST_PARTY_TIERS, NodeFileSystem, SIGTERM, SOCK_DGRAM, SOCK_STREAM, WASMVM_COMMANDS, } from "../runtime-compat.js";
+export { createInMemoryFileSystem } from "@rivet-dev/agentos-runtime-core/test-runtime";
 export { TerminalHarness } from "./terminal-harness.js";

package/dist/test/runtime.js

@@ -5,5 +5,6 @@
  * while the public SDK removes the raw vm.kernel escape hatch.
  */
 export { getAgentOsKernel, getAgentOsRuntimeAdmin, } from "../agent-os.js";
-export { AF_INET, AF_UNIX, allowAll, createInMemoryFileSystem, createKernel, createNodeHostNetworkAdapter, createNodeRuntime, createWasmVmRuntime, DEFAULT_FIRST_PARTY_TIERS, NodeFileSystem, SIGTERM, SOCK_DGRAM, SOCK_STREAM, WASMVM_COMMANDS, } from "../runtime-compat.js";
+export { AF_INET, AF_UNIX, allowAll, createKernel, createNodeHostNetworkAdapter, createNodeRuntime, createWasmVmRuntime, DEFAULT_FIRST_PARTY_TIERS, NodeFileSystem, SIGTERM, SOCK_DGRAM, SOCK_STREAM, WASMVM_COMMANDS, } from "../runtime-compat.js";
+export { createInMemoryFileSystem } from "@rivet-dev/agentos-runtime-core/test-runtime";
 export { TerminalHarness } from "./terminal-harness.js";

package/dist/test/terminal-harness.js

@@ -20,9 +20,6 @@ export class TerminalHarness {
             rows,
             env: options?.env,
             cwd: options?.cwd,
-            onStderr: (data) => {
-                this.term.write(data);
-            },
         });
         this.shell.onData = (data) => {
             this.term.write(data);

package/dist/types.d.ts

@@ -1,4 +1,5 @@
-export type { AgentCapabilities, AgentInfo, AgentOsCreateSidecarOptions, AgentOsLimits, AgentOsOptions, AgentOsSharedSidecarOptions, AgentOsSidecarConfig, AgentOsSidecarDescription, AgentExitEvent, AgentExitHandler, AgentRestartOutcome, AgentStderrEvent, AgentStderrHandler, AgentRegistryEntry, BatchReadResult, BatchWriteEntry, BatchWriteResult, CreateSessionOptions, DirEntry, LimitWarning, LimitWarningHandler, McpServerConfig, McpServerConfigLocal, McpServerConfigRemote, MountConfig, MountConfigJsonObject, MountConfigJsonPrimitive, MountConfigJsonValue, NativeMountConfig, NativeMountPluginDescriptor, OverlayMountConfig, PermissionReply, PermissionRequest, PermissionRequestHandler, PlainMountConfig, ProcessTreeNode, PromptResult, ReaddirRecursiveOptions, ResumeSessionOptions, ResumeSessionResult, RootFilesystemConfig, RootLowerInput, SessionConfigOption, SessionEventHandler, SessionInfo, SessionInitData, SessionMode, SessionModeState, SpawnedProcessInfo, } from "./agent-os.js";
+export type { AgentOsCreateSidecarOptions, AgentOsLimits, AgentOsOptions, AgentOsSharedSidecarOptions, AgentOsSidecarConfig, AgentOsSidecarDescription, AgentExitEvent, AgentExitHandler, AgentRestartOutcome, AgentStderrEvent, AgentStderrHandler, AgentRegistryEntry, BatchReadResult, BatchWriteEntry, BatchWriteResult, DirEntry, DynamicMountDescriptor, ExportRootFilesystemOptions, HttpRequest, HttpResponse, LimitWarning, LimitWarningHandler, MountConfig, MountInfo, MountConfigJsonObject, MountConfigJsonPrimitive, MountConfigJsonValue, NativeMountConfig, NativeMountPluginDescriptor, NativeRootFilesystemConfig, OverlayMountConfig, OverlayRootFilesystemConfig, PlainMountConfig, ProcessTreeNode, ProcessExit, ProcessOutput, ReaddirEntry, ReaddirRecursiveOptions, RootFilesystemConfig, RootLowerInput, SpawnedProcessInfo, SpawnOptions, ShellData, ShellExit, ShellOptions, } from "./agent-os.js";
+export type * from "./session-api.js";
 /**
  * An agent type id — the `name` of an `/opt/agentos` agent package manifest
  * (e.g. `"pi"`, `"claude"`). Agents are resolved by the SIDECAR from the projected
@@ -6,12 +7,10 @@ export type { AgentCapabilities, AgentInfo, AgentOsCreateSidecarOptions, AgentOs
  * passes only the name, so any manifest `name` is a valid agent type.
  */
 export type AgentType = string;
-export type { CronAction, CronEvent, CronEventHandler, CronJob, CronJobInfo, CronJobOptions, ScheduleDriver, ScheduleEntry, ScheduleHandle, } from "./cron/index.js";
+export type { CronAction, CronActionInfo, CronEvent, CronEventHandler, CronJob, CronJobInfo, CronJobOptions, ScheduleDriver, ScheduleEntry, ScheduleHandle, } from "./cron/index.js";
 export type { HostDirBackendOptions, HostDirMountPluginConfig, NodeModulesMountConfig, } from "./host-dir-mount.js";
-export type { HostTool, ToolExample, ToolKit } from "./host-tools.js";
-export type { AcpTimeoutErrorData, JsonRpcError, JsonRpcErrorData, JsonRpcNotification, JsonRpcRequest, JsonRpcResponse, UnknownSessionErrorData, } from "./json-rpc.js";
+export type { Binding, BindingExample, Bindings } from "./bindings.js";
 export type { FilesystemSnapshotExport, LayerHandle, LayerStore, OverlayFilesystemMode, RootSnapshotExport, SnapshotImportSource, SnapshotLayerHandle, WritableLayerHandle, } from "./layers.js";
 export type { SoftwareInput, SoftwareRoot } from "./packages.js";
 export type { AgentBlock, PackageDescriptor, PackageRef, SoftwarePackageRef, } from "./agentos-package.js";
 export type { ChildProcessPermissions, ConnectTerminalOptions, EnvPermissions, ExecOptions, ExecResult, FsPermissionRule, FsPermissions, KernelExecOptions, KernelExecResult, KernelSpawnOptions, NetworkAccessRequest, NetworkPermissions, OpenShellOptions, PatternPermissionRule, PermissionDecision, PermissionMode, Permissions, ProcessInfo, RulePermissions, StdioChannel, TimingMitigation, VirtualDirEntry, VirtualFileSystem, VirtualStat, } from "./runtime.js";
-export type { PromptCapabilities } from "./agent-session-types.js";

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@rivet-dev/agentos-core",
-	"version": "0.2.8-rc.1",
+	"version": "0.2.8-rc.3",
 	"type": "module",
 	"license": "Apache-2.0",
 	"main": "./dist/index.js",
@@ -46,24 +46,27 @@
 		}
 	},
 	"scripts": {
-		"check-types": "pnpm run build:protocols && tsc --noEmit",
+		"check-types": "pnpm run build:protocols && tsc --noEmit && tsc -p tsconfig.type-tests.json",
 		"build": "pnpm run build:protocols && tsc",
 		"build:agentos-protocol": "node ./scripts/compile-agentos-protocol.mjs",
 		"build:protocols": "pnpm run build:agentos-protocol",
-		"test": "vitest run --reporter=verbose"
+		"test": "vitest run --exclude '**/*.nightly.test.ts' --reporter=verbose",
+		"test:unit": "vitest run tests/agent-exit-event.test.ts tests/agentos-package.test.ts tests/agentos-protocol.test.ts tests/allowed-node-builtins.test.ts tests/bindings-zod.test.ts tests/bindings.test.ts tests/cron-manager.test.ts tests/cron-timer-driver.test.ts tests/generated-protocol.test.ts tests/leak-agent-os-processes.test.ts tests/leak-rpc-client.test.ts tests/mount-descriptors.test.ts tests/mount-reconfigure.test.ts tests/options-schema.test.ts tests/public-api-exports.test.ts tests/root-filesystem-descriptors.test.ts tests/runtime-compat-mount.test.ts tests/session-event-ordering.test.ts tests/session-permission-surface.test.ts tests/sidecar-client.test.ts tests/sidecar-permission-descriptors.test.ts tests/wasm-permission-tiers.test.ts --fileParallelism=false",
+		"test:pr": "pnpm test:unit && vitest run tests/migration-parity.test.ts --fileParallelism=false --reporter=verbose",
+		"test:nightly": "vitest run tests/*.nightly.test.ts --reporter=verbose --passWithNoTests"
 	},
 	"dependencies": {
-		"@agentos-software/claude-code": "0.2.8-rc.1",
-		"@agentos-software/codex-cli": "0.3.3",
-		"@agentos-software/common": "0.2.8-rc.1",
-		"@agentos-software/manifest": "0.2.8-rc.1",
-		"@agentos-software/opencode": "0.2.8-rc.1",
-		"@agentos-software/pi": "0.2.8-rc.1",
-		"@agentos-software/pi-cli": "0.2.8-rc.1",
+		"@agentclientprotocol/sdk": "0.16.1",
+		"@agentos-software/claude-code": "0.2.7",
+		"@agentos-software/codex-cli": "0.3.4",
+		"@agentos-software/common": "0.2.8-rc.3",
+		"@agentos-software/manifest": "0.2.8-rc.3",
+		"@agentos-software/opencode": "0.2.7",
+		"@agentos-software/pi": "0.2.7",
 		"@aws-sdk/client-s3": "^3.1019.0",
-		"@rivet-dev/agentos-sidecar": "0.2.8-rc.1",
+		"@rivet-dev/agentos-sidecar": "0.2.8-rc.3",
 		"@rivetkit/bare-ts": "^0.6.2",
-		"@rivet-dev/agentos-runtime-core": "0.2.8-rc.1",
+		"@rivet-dev/agentos-runtime-core": "0.2.8-rc.3",
 		"@xterm/headless": "^6.0.0",
 		"better-sqlite3": "^12.8.0",
 		"croner": "^10.0.1",
@@ -75,8 +78,8 @@
 		"zod-to-json-schema": "^3.25.2"
 	},
 	"devDependencies": {
-		"@agentos-software/claude-code": "0.2.8-rc.1",
-		"@agentos-software/codex": "0.2.8-rc.1",
+		"@agentos-software/claude-code": "0.2.7",
+		"@agentos-software/codex": "0.2.7",
 		"@agentos-software/coreutils": "0.3.3",
 		"@agentos-software/curl": "0.3.3",
 		"@agentos-software/diffutils": "0.3.3",
@@ -88,17 +91,17 @@
 		"@agentos-software/git": "0.3.3",
 		"@agentos-software/grep": "0.3.3",
 		"@agentos-software/gzip": "0.3.3",
-		"@agentos-software/http-get": "0.3.3",
 		"@agentos-software/jq": "0.3.3",
-		"@agentos-software/opencode": "0.2.8-rc.1",
-		"@agentos-software/pi": "0.2.8-rc.1",
-		"@agentos-software/pi-cli": "0.2.8-rc.1",
+		"@agentos-software/opencode": "0.2.7",
+		"@agentos-software/pi": "0.2.7",
 		"@agentos-software/ripgrep": "0.3.3",
 		"@agentos-software/sed": "0.3.3",
 		"@agentos-software/tar": "0.3.3",
 		"@agentos-software/tree": "0.3.3",
 		"@agentos-software/vim": "0.3.3",
+		"@agentos-software/wget": "0.3.3",
 		"@agentos-software/yq": "0.3.3",
+		"@rivet-dev/agentos-test-harness": "0.2.8-rc.3",
 		"@anthropic-ai/claude-agent-sdk": "^0.2.87",
 		"@anthropic-ai/claude-code": "^2.1.86",
 		"@bare-ts/tools": "0.15.0",
@@ -106,9 +109,7 @@
 		"@browserbasehq/cli": "0.5.4",
 		"@browserbasehq/sdk": "2.10.0",
 		"@copilotkit/llmock": "^1.6.0",
-		"@mariozechner/pi-coding-agent": "^0.60.0",
 		"@types/node": "^22.10.2",
-		"pi-acp": "^0.0.23",
 		"sandbox-agent": "^0.4.2",
 		"typescript": "^5.7.2",
 		"vitest": "^2.1.8",

package/dist/agent-session-types.d.ts

@@ -1,67 +0,0 @@
-import type { JsonRpcNotification } from "./json-rpc.js";
-export type SessionEventHandler = (event: JsonRpcNotification) => void;
-export interface PermissionRequest {
-    permissionId: string;
-    description?: string;
-    params: Record<string, unknown>;
-}
-export type PermissionReply = "once" | "always" | "reject";
-export type PermissionRequestHandler = (request: PermissionRequest) => void;
-export interface SessionMode {
-    id: string;
-    name?: string;
-    label?: string;
-    description?: string;
-    [key: string]: unknown;
-}
-export interface SessionModeState {
-    currentModeId: string;
-    availableModes: SessionMode[];
-}
-export interface SessionConfigOption {
-    id: string;
-    category?: string;
-    label?: string;
-    description?: string;
-    currentValue?: string;
-    allowedValues?: Array<{
-        id: string;
-        label?: string;
-    }>;
-    readOnly?: boolean;
-}
-export interface PromptCapabilities {
-    audio?: boolean;
-    embeddedContext?: boolean;
-    image?: boolean;
-    [key: string]: unknown;
-}
-export interface AgentCapabilities {
-    permissions?: boolean;
-    plan_mode?: boolean;
-    questions?: boolean;
-    tool_calls?: boolean;
-    text_messages?: boolean;
-    images?: boolean;
-    file_attachments?: boolean;
-    session_lifecycle?: boolean;
-    error_events?: boolean;
-    reasoning?: boolean;
-    status?: boolean;
-    streaming_deltas?: boolean;
-    mcp_tools?: boolean;
-    promptCapabilities?: PromptCapabilities;
-    [key: string]: unknown;
-}
-export interface AgentInfo {
-    name: string;
-    title?: string;
-    version?: string;
-    [key: string]: unknown;
-}
-export interface SessionInitData {
-    modes?: SessionModeState;
-    configOptions?: SessionConfigOption[];
-    capabilities?: AgentCapabilities;
-    agentInfo?: AgentInfo;
-}

package/dist/generated/ToolLimitsConfig.d.ts

@@ -1,10 +0,0 @@
-export type ToolLimitsConfig = {
-    defaultToolTimeoutMs?: number;
-    maxToolTimeoutMs?: number;
-    maxRegisteredToolkits?: number;
-    maxRegisteredToolsPerVm?: number;
-    maxToolsPerToolkit?: number;
-    maxToolSchemaBytes?: number;
-    maxToolExamplesPerTool?: number;
-    maxToolExampleInputBytes?: number;
-};

package/dist/host-tools.d.ts

@@ -1,45 +0,0 @@
-import type { ZodType } from "zod";
-/** Maximum length for tool and toolkit descriptions (characters). */
-export declare const MAX_TOOL_DESCRIPTION_LENGTH = 200;
-/**
- * A single tool that executes on the host.
- * Mirrors the shape of AI SDK's tool() but with host-execution semantics.
- */
-export interface HostTool<INPUT = any, OUTPUT = any> {
-    /** Description shown to the agent in --help and prompt docs. Max 200 characters. */
-    description: string;
-    /** Zod schema for the input. Drives CLI flag generation and validation. */
-    inputSchema: ZodType<INPUT>;
-    /** Runs on the host when the agent invokes the tool. */
-    execute: (input: INPUT) => Promise<OUTPUT> | OUTPUT;
-    /** Examples included in auto-generated prompt docs. */
-    examples?: ToolExample<INPUT>[];
-    /** Timeout in ms. Default: 30000. */
-    timeout?: number;
-}
-export interface ToolExample<INPUT = any> {
-    /** Human description of what this example does. */
-    description: string;
-    /** The input args for the example. */
-    input: INPUT;
-}
-/**
- * A named group of tools. Becomes a CLI binary: agentos-{name}.
- */
-export interface ToolKit {
-    /** Toolkit name. Must be lowercase alphanumeric + hyphens. Becomes the CLI suffix: agentos-{name}. */
-    name: string;
-    /** Description shown in `agentos list-tools` and prompt docs. */
-    description: string;
-    /** The tools in this toolkit. Keys become subcommands. */
-    tools: Record<string, HostTool>;
-}
-/** Helper to create a HostTool with type inference. */
-export declare function hostTool<INPUT, OUTPUT>(def: HostTool<INPUT, OUTPUT>): HostTool<INPUT, OUTPUT>;
-/** Helper to create a ToolKit. */
-export declare function toolKit(def: ToolKit): ToolKit;
-/**
- * Validate all description lengths in the given toolkits.
- * Throws if any toolkit or tool description exceeds MAX_TOOL_DESCRIPTION_LENGTH.
- */
-export declare function validateToolkits(toolKits: ToolKit[]): void;