@rivet-dev/agentos-core 0.2.8-rc.1 → 0.2.8-rc.3

package/dist/index.d.ts

@@ -1,12 +1,11 @@
 export { AgentOs, AgentOsSidecar } from "./agent-os.js";
 export { CronManager, InvalidScheduleError, PastScheduleError, TimerScheduleDriver, } from "./cron/index.js";
 export { createHostDirBackend, nodeModulesMount } from "./host-dir-mount.js";
-export { hostTool, MAX_TOOL_DESCRIPTION_LENGTH, toolKit, validateToolkits, } from "./host-tools.js";
-export { agentOsLimitsSchema, agentOsOptionFieldSchemas, agentOsOptionsSchema, hostToolSchema, mountConfigSchema, nativeMountConfigSchema, parseAgentOsOptions, permissionsSchema, rootFilesystemConfigSchema, sharedSidecarConfigSchema, sidecarConfigSchema, toolKitSchema, } from "./options-schema.js";
-export { createInMemoryLayerStore, createSnapshotExport, } from "./layers.js";
+export { binding, MAX_BINDING_DESCRIPTION_LENGTH, bindings, validateBindings, } from "./bindings.js";
+export { agentOsLimitsSchema, agentOsOptionFieldSchemas, agentOsOptionsSchema, bindingSchema, mountConfigSchema, nativeMountConfigSchema, parseAgentOsOptions, permissionsSchema, rootFilesystemConfigSchema, sharedSidecarConfigSchema, sidecarConfigSchema, bindingsSchema, } from "./options-schema.js";
+export { createSnapshotExport, } from "./layers.js";
 export { defineSoftware } from "./packages.js";
 export { isPackageDescriptor, OPT_AGENTOS_BIN, OPT_AGENTOS_ROOT, tryReadAgentosPackageManifest, } from "./agentos-package.js";
-export { isAcpTimeoutErrorData, isUnknownSessionErrorData, } from "./json-rpc.js";
-export { createInMemoryFileSystem, KernelError } from "./runtime-compat.js";
+export { KernelError } from "./runtime-compat.js";
 export type { ExecOptions, ExecResult, ManagedProcess, ProcessInfo, ShellHandle, VirtualDirEntry, VirtualStat, } from "./runtime.js";
 export type * from "./types.js";

package/dist/index.js

@@ -2,10 +2,9 @@
 export { AgentOs, AgentOsSidecar } from "./agent-os.js";
 export { CronManager, InvalidScheduleError, PastScheduleError, TimerScheduleDriver, } from "./cron/index.js";
 export { createHostDirBackend, nodeModulesMount } from "./host-dir-mount.js";
-export { hostTool, MAX_TOOL_DESCRIPTION_LENGTH, toolKit, validateToolkits, } from "./host-tools.js";
-export { agentOsLimitsSchema, agentOsOptionFieldSchemas, agentOsOptionsSchema, hostToolSchema, mountConfigSchema, nativeMountConfigSchema, parseAgentOsOptions, permissionsSchema, rootFilesystemConfigSchema, sharedSidecarConfigSchema, sidecarConfigSchema, toolKitSchema, } from "./options-schema.js";
-export { createInMemoryLayerStore, createSnapshotExport, } from "./layers.js";
+export { binding, MAX_BINDING_DESCRIPTION_LENGTH, bindings, validateBindings, } from "./bindings.js";
+export { agentOsLimitsSchema, agentOsOptionFieldSchemas, agentOsOptionsSchema, bindingSchema, mountConfigSchema, nativeMountConfigSchema, parseAgentOsOptions, permissionsSchema, rootFilesystemConfigSchema, sharedSidecarConfigSchema, sidecarConfigSchema, bindingsSchema, } from "./options-schema.js";
+export { createSnapshotExport, } from "./layers.js";
 export { defineSoftware } from "./packages.js";
 export { isPackageDescriptor, OPT_AGENTOS_BIN, OPT_AGENTOS_ROOT, tryReadAgentosPackageManifest, } from "./agentos-package.js";
-export { isAcpTimeoutErrorData, isUnknownSessionErrorData, } from "./json-rpc.js";
-export { createInMemoryFileSystem, KernelError } from "./runtime-compat.js";
+export { KernelError } from "./runtime-compat.js";

package/dist/layers.d.ts

@@ -1,5 +1,5 @@
 import type { BaseFilesystemSnapshot } from "./base-filesystem.js";
-import { type FilesystemEntry } from "./filesystem-snapshot.js";
+import type { FilesystemEntry } from "./filesystem-snapshot.js";
 import type { VirtualFileSystem } from "./runtime-compat.js";
 export type OverlayFilesystemMode = "ephemeral" | "read-only";
 export interface FilesystemSnapshotExport {
@@ -31,6 +31,10 @@ export type SnapshotImportSource = {
     kind: "snapshot-export";
     source: FilesystemSnapshotExport | unknown;
 };
+/**
+ * Caller-provided durable layer store. AgentOS forwards these explicit handles
+ * but does not provide a second client-side filesystem or overlay engine.
+ */
 export interface LayerStore {
     readonly storeId: string;
     createWritableLayer(): Promise<WritableLayerHandle>;
@@ -48,4 +52,3 @@ export interface LayerStore {
     dispose(): void;
 }
 export declare function createSnapshotExport(entries: FilesystemEntry[]): RootSnapshotExport;
-export declare function createInMemoryLayerStore(): LayerStore;

package/dist/layers.js

@@ -1,52 +1,3 @@
-import { randomUUID } from "node:crypto";
-import { createFilesystemFromEntries, snapshotVirtualFilesystem, } from "./filesystem-snapshot.js";
-import { createOverlayBackend } from "./overlay-filesystem.js";
-function cloneSnapshotHandle(storeId, layerId) {
-    return { kind: "snapshot", storeId, layerId };
-}
-function cloneWritableHandle(storeId, layerId, leaseId) {
-    return { kind: "writable", storeId, layerId, leaseId };
-}
-function isBaseFilesystemSnapshot(value) {
-    if (!value || typeof value !== "object") {
-        return false;
-    }
-    const filesystem = value.filesystem;
-    if (!filesystem || typeof filesystem !== "object") {
-        return false;
-    }
-    return Array.isArray(filesystem.entries);
-}
-function isFilesystemSnapshotExport(value) {
-    if (!value || typeof value !== "object") {
-        return false;
-    }
-    if (value.format !== "agentos-filesystem-snapshot-v1") {
-        return false;
-    }
-    const filesystem = value.filesystem;
-    if (!filesystem || typeof filesystem !== "object") {
-        return false;
-    }
-    return Array.isArray(filesystem.entries);
-}
-function normalizeSnapshotExport(source) {
-    if (source.kind === "base-filesystem-artifact") {
-        if (!isBaseFilesystemSnapshot(source.source)) {
-            throw new Error("Invalid base filesystem artifact");
-        }
-        return {
-            format: "agentos-filesystem-snapshot-v1",
-            filesystem: {
-                entries: source.source.filesystem.entries,
-            },
-        };
-    }
-    if (!isFilesystemSnapshotExport(source.source)) {
-        throw new Error("Invalid snapshot export");
-    }
-    return source.source;
-}
 export function createSnapshotExport(entries) {
     return {
         kind: "snapshot-export",
@@ -56,139 +7,3 @@ export function createSnapshotExport(entries) {
         },
     };
 }
-export function createInMemoryLayerStore() {
-    const storeId = `memory-layer-store:${randomUUID()}`;
-    const layers = new Map();
-    function getLayerState(handle) {
-        if (handle.storeId !== storeId) {
-            throw new Error(`Layer ${handle.layerId} belongs to store ${handle.storeId}, not ${storeId}`);
-        }
-        const state = layers.get(handle.layerId);
-        if (!state) {
-            throw new Error(`Unknown layer: ${handle.layerId}`);
-        }
-        if (state.kind !== handle.kind) {
-            throw new Error(`Layer kind mismatch for ${handle.layerId}`);
-        }
-        return state;
-    }
-    const store = {
-        storeId,
-        get retainedLayerCount() {
-            return layers.size;
-        },
-        async createWritableLayer() {
-            const layerId = randomUUID();
-            const leaseId = randomUUID();
-            layers.set(layerId, {
-                kind: "writable",
-                fs: await createFilesystemFromEntries([
-                    {
-                        path: "/",
-                        type: "directory",
-                        mode: "0755",
-                        uid: 0,
-                        gid: 0,
-                    },
-                ]),
-                leaseId,
-                valid: true,
-                activeOverlay: null,
-            });
-            return cloneWritableHandle(storeId, layerId, leaseId);
-        },
-        async importSnapshot(source) {
-            const snapshot = normalizeSnapshotExport(source);
-            const layerId = randomUUID();
-            layers.set(layerId, {
-                kind: "snapshot",
-                snapshot,
-                fs: await createFilesystemFromEntries(snapshot.filesystem.entries),
-            });
-            return cloneSnapshotHandle(storeId, layerId);
-        },
-        async openSnapshotLayer(layerId) {
-            const state = layers.get(layerId);
-            if (!state || state.kind !== "snapshot") {
-                throw new Error(`Unknown snapshot layer: ${layerId}`);
-            }
-            return cloneSnapshotHandle(storeId, layerId);
-        },
-        async sealLayer(layer) {
-            const state = getLayerState(layer);
-            if (state.kind !== "writable") {
-                throw new Error(`Layer ${layer.layerId} is not writable`);
-            }
-            const baseFs = state.activeOverlay ?? state.fs;
-            if (!state.valid || state.leaseId !== layer.leaseId || !baseFs) {
-                throw new Error(`Writable layer ${layer.layerId} is no longer valid`);
-            }
-            const entries = await snapshotVirtualFilesystem(baseFs);
-            const snapshot = createSnapshotExport(entries).source;
-            const layerId = randomUUID();
-            layers.set(layerId, {
-                kind: "snapshot",
-                snapshot,
-                fs: await createFilesystemFromEntries(snapshot.filesystem.entries),
-            });
-            // Release the writable layer's filesystem payload now that it is sealed;
-            // the invalid tombstone is retained so stale handles still report cleanly.
-            state.valid = false;
-            state.activeOverlay = null;
-            state.fs = null;
-            return cloneSnapshotHandle(storeId, layerId);
-        },
-        createOverlayFilesystem(options) {
-            const lowers = options.lowers.map((lower) => {
-                const state = getLayerState(lower);
-                if (state.kind !== "snapshot") {
-                    throw new Error(`Layer ${lower.layerId} is not a snapshot`);
-                }
-                return lower;
-            });
-            if (options.mode === "read-only") {
-                return createOverlayBackend({
-                    mode: "read-only",
-                    lowers: lowers.map((lower) => {
-                        const state = getLayerState(lower);
-                        if (state.kind !== "snapshot") {
-                            throw new Error(`Layer ${lower.layerId} is not a snapshot`);
-                        }
-                        return state.fs;
-                    }),
-                });
-            }
-            const upperState = getLayerState(options.upper);
-            if (upperState.kind !== "writable") {
-                throw new Error(`Layer ${options.upper.layerId} is not writable`);
-            }
-            if (!upperState.valid || upperState.leaseId !== options.upper.leaseId) {
-                throw new Error(`Writable layer ${options.upper.layerId} is no longer valid`);
-            }
-            if (upperState.activeOverlay) {
-                throw new Error(`Writable layer ${options.upper.layerId} is already attached to an overlay`);
-            }
-            if (!upperState.fs) {
-                throw new Error(`Writable layer ${options.upper.layerId} is no longer valid`);
-            }
-            const overlay = createOverlayBackend({
-                upper: upperState.fs,
-                lowers: lowers.map((lower) => {
-                    const state = getLayerState(lower);
-                    if (state.kind !== "snapshot") {
-                        throw new Error(`Layer ${lower.layerId} is not a snapshot`);
-                    }
-                    return state.fs;
-                }),
-            });
-            upperState.activeOverlay = overlay;
-            return overlay;
-        },
-        dispose() {
-            // Release every retained layer's filesystem payload so the store does
-            // not accumulate snapshots/writable layers for the process lifetime.
-            layers.clear();
-        },
-    };
-    return store;
-}

package/dist/options-schema.d.ts

@@ -1,6 +1,6 @@
 import { z } from "zod/v4";
 import type { AgentExitHandler, AgentOsOptions, AgentStderrHandler, LimitWarningHandler, NativeMountConfig } from "./agent-os.js";
-import type { HostTool, ToolKit } from "./host-tools.js";
+import type { Binding, Bindings } from "./bindings.js";
 export declare const permissionsSchema: z.ZodObject<{
     fs: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
         allow: "allow";
@@ -131,15 +131,15 @@ export declare const agentOsLimitsSchema: z.ZodObject<{
     http: z.ZodOptional<z.ZodObject<{
         maxFetchResponseBytes: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
-    tools: z.ZodOptional<z.ZodObject<{
-        defaultToolTimeoutMs: z.ZodOptional<z.ZodNumber>;
-        maxToolTimeoutMs: z.ZodOptional<z.ZodNumber>;
-        maxRegisteredToolkits: z.ZodOptional<z.ZodNumber>;
-        maxRegisteredToolsPerVm: z.ZodOptional<z.ZodNumber>;
-        maxToolsPerToolkit: z.ZodOptional<z.ZodNumber>;
-        maxToolSchemaBytes: z.ZodOptional<z.ZodNumber>;
-        maxToolExamplesPerTool: z.ZodOptional<z.ZodNumber>;
-        maxToolExampleInputBytes: z.ZodOptional<z.ZodNumber>;
+    bindings: z.ZodOptional<z.ZodObject<{
+        defaultBindingTimeoutMs: z.ZodOptional<z.ZodNumber>;
+        maxBindingTimeoutMs: z.ZodOptional<z.ZodNumber>;
+        maxRegisteredCollections: z.ZodOptional<z.ZodNumber>;
+        maxRegisteredCollectionsPerVm: z.ZodOptional<z.ZodNumber>;
+        maxBindingsPerCollection: z.ZodOptional<z.ZodNumber>;
+        maxBindingSchemaBytes: z.ZodOptional<z.ZodNumber>;
+        maxExamplesPerBinding: z.ZodOptional<z.ZodNumber>;
+        maxBindingExampleInputBytes: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
     plugins: z.ZodOptional<z.ZodObject<{
         maxPersistedManifestBytes: z.ZodOptional<z.ZodNumber>;
@@ -148,6 +148,25 @@ export declare const agentOsLimitsSchema: z.ZodObject<{
     acp: z.ZodOptional<z.ZodObject<{
         maxReadLineBytes: z.ZodOptional<z.ZodNumber>;
         stdoutBufferByteLimit: z.ZodOptional<z.ZodNumber>;
+        maxCompletedMessageBytes: z.ZodOptional<z.ZodNumber>;
+        maxTurnOutputBytes: z.ZodOptional<z.ZodNumber>;
+        maxPromptBytes: z.ZodOptional<z.ZodNumber>;
+        maxPromptBlocks: z.ZodOptional<z.ZodNumber>;
+        maxFallbackContinuationBytes: z.ZodOptional<z.ZodNumber>;
+        maxSessionHistoryBytes: z.ZodOptional<z.ZodNumber>;
+        maxSessionHistoryEvents: z.ZodOptional<z.ZodNumber>;
+        maxHistoryPageEntries: z.ZodOptional<z.ZodNumber>;
+        maxSessionListEntries: z.ZodOptional<z.ZodNumber>;
+        maxSessionsPerVm: z.ZodOptional<z.ZodNumber>;
+        maxPromptsPerSession: z.ZodOptional<z.ZodNumber>;
+        maxPromptsPerVm: z.ZodOptional<z.ZodNumber>;
+        maxPendingPermissionsPerSession: z.ZodOptional<z.ZodNumber>;
+        maxPendingPermissionsPerVm: z.ZodOptional<z.ZodNumber>;
+        maxPermissionOutcomesPerSession: z.ZodOptional<z.ZodNumber>;
+        maxPermissionOutcomesPerVm: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    sqlite: z.ZodOptional<z.ZodObject<{
+        maxResultBytes: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
     jsRuntime: z.ZodOptional<z.ZodObject<{
         v8HeapLimitMb: z.ZodOptional<z.ZodNumber>;
@@ -172,9 +191,17 @@ export declare const agentOsLimitsSchema: z.ZodObject<{
         syncReadLimitBytes: z.ZodOptional<z.ZodNumber>;
         prewarmTimeoutMs: z.ZodOptional<z.ZodNumber>;
         runnerHeapLimitMb: z.ZodOptional<z.ZodNumber>;
+        runnerCpuTimeLimitMs: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    process: z.ZodOptional<z.ZodObject<{
+        maxSpawnFileActions: z.ZodOptional<z.ZodNumber>;
+        maxSpawnFileActionBytes: z.ZodOptional<z.ZodNumber>;
+        pendingStdinBytes: z.ZodOptional<z.ZodNumber>;
+        pendingEventCount: z.ZodOptional<z.ZodNumber>;
+        pendingEventBytes: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
 }, z.core.$strict>;
-export declare const rootFilesystemConfigSchema: z.ZodObject<{
+export declare const rootFilesystemConfigSchema: z.ZodUnion<readonly [z.ZodObject<{
     type: z.ZodOptional<z.ZodLiteral<"overlay">>;
     mode: z.ZodOptional<z.ZodEnum<{
         ephemeral: "ephemeral";
@@ -187,11 +214,20 @@ export declare const rootFilesystemConfigSchema: z.ZodObject<{
         kind: z.ZodLiteral<"snapshot-export">;
         source: z.ZodUnknown;
     }, z.core.$strict>]>>>;
-}, z.core.$strict>;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"native">;
+    plugin: z.ZodObject<{
+        id: z.ZodString;
+        config: z.ZodOptional<z.ZodUnknown>;
+    }, z.core.$strict>;
+    readOnly: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>]>;
 export declare const nativeMountConfigSchema: z.ZodType<NativeMountConfig>;
 export declare const mountConfigSchema: z.ZodUnion<readonly [z.ZodObject<{
     path: z.ZodString;
     driver: z.ZodCustom<unknown, unknown>;
+    guestFstype: z.ZodOptional<z.ZodString>;
+    guestSource: z.ZodOptional<z.ZodString>;
     readOnly: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strict>, z.ZodType<NativeMountConfig, unknown, z.core.$ZodTypeInternals<NativeMountConfig, unknown>>, z.ZodObject<{
     path: z.ZodString;
@@ -216,23 +252,54 @@ export declare const sidecarConfigSchema: z.ZodUnion<readonly [z.ZodObject<{
     kind: z.ZodLiteral<"explicit">;
     handle: z.ZodUnknown;
 }, z.core.$strict>]>;
-export declare const hostToolSchema: z.ZodType<HostTool>;
-export declare const toolKitSchema: z.ZodType<ToolKit>;
+export declare const bindingSchema: z.ZodType<Binding>;
+export declare const bindingsSchema: z.ZodType<Bindings>;
 /**
  * Shared AgentOsOptions field schemas.
  *
- * Core uses the full object. The Rivet/native actor composes a narrower
- * native-safe subset in `packages/agentos/src/config.ts`; keep that subset and
- * `crates/agentos-actor-plugin/src/config.rs::AgentOsConfigJson` aligned when
- * adding options that cross the native boundary.
+ * Core and the TypeScript Rivet actor both use the full object. Runtime-owned
+ * behavior is serialized by AgentOs.create() into the sidecar VM config.
  */
 export declare const agentOsOptionFieldSchemas: {
+    readonly user: z.ZodOptional<z.ZodObject<{
+        uid: z.ZodOptional<z.ZodNumber>;
+        gid: z.ZodOptional<z.ZodNumber>;
+        euid: z.ZodOptional<z.ZodNumber>;
+        egid: z.ZodOptional<z.ZodNumber>;
+        username: z.ZodOptional<z.ZodString>;
+        homedir: z.ZodOptional<z.ZodString>;
+        shell: z.ZodOptional<z.ZodString>;
+        gecos: z.ZodOptional<z.ZodString>;
+        groupName: z.ZodOptional<z.ZodString>;
+        supplementaryGids: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+        accounts: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            uid: z.ZodNumber;
+            gid: z.ZodNumber;
+            username: z.ZodString;
+            homedir: z.ZodString;
+            shell: z.ZodString;
+            gecos: z.ZodOptional<z.ZodString>;
+            supplementaryGids: z.ZodArray<z.ZodNumber>;
+        }, z.core.$strict>>>;
+        groups: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            gid: z.ZodNumber;
+            name: z.ZodString;
+            members: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+    }, z.core.$strict>>;
     readonly software: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
     readonly defaultSoftware: z.ZodOptional<z.ZodBoolean>;
     readonly loopbackExemptPorts: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
     readonly allowedNodeBuiltins: z.ZodOptional<z.ZodArray<z.ZodString>>;
     readonly highResolutionTime: z.ZodOptional<z.ZodBoolean>;
-    readonly rootFilesystem: z.ZodOptional<z.ZodObject<{
+    readonly database: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"actor_uds">;
+        path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"sqlite_file">;
+        path: z.ZodString;
+    }, z.core.$strict>], "type">>;
+    readonly rootFilesystem: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
         type: z.ZodOptional<z.ZodLiteral<"overlay">>;
         mode: z.ZodOptional<z.ZodEnum<{
             ephemeral: "ephemeral";
@@ -245,10 +312,19 @@ export declare const agentOsOptionFieldSchemas: {
             kind: z.ZodLiteral<"snapshot-export">;
             source: z.ZodUnknown;
         }, z.core.$strict>]>>>;
-    }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"native">;
+        plugin: z.ZodObject<{
+            id: z.ZodString;
+            config: z.ZodOptional<z.ZodUnknown>;
+        }, z.core.$strict>;
+        readOnly: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>]>>;
     readonly mounts: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
         path: z.ZodString;
         driver: z.ZodCustom<unknown, unknown>;
+        guestFstype: z.ZodOptional<z.ZodString>;
+        guestSource: z.ZodOptional<z.ZodString>;
         readOnly: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strict>, z.ZodType<NativeMountConfig, unknown, z.core.$ZodTypeInternals<NativeMountConfig, unknown>>, z.ZodObject<{
         path: z.ZodString;
@@ -262,9 +338,8 @@ export declare const agentOsOptionFieldSchemas: {
             lowers: z.ZodArray<z.ZodUnknown>;
         }, z.core.$strict>;
     }, z.core.$strict>]>>>;
-    readonly additionalInstructions: z.ZodOptional<z.ZodString>;
     readonly scheduleDriver: z.ZodOptional<z.ZodCustom<unknown, unknown>>;
-    readonly toolKits: z.ZodOptional<z.ZodArray<z.ZodType<ToolKit, unknown, z.core.$ZodTypeInternals<ToolKit, unknown>>>>;
+    readonly bindings: z.ZodOptional<z.ZodArray<z.ZodType<Bindings, unknown, z.core.$ZodTypeInternals<Bindings, unknown>>>>;
     readonly permissions: z.ZodOptional<z.ZodObject<{
         fs: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
             allow: "allow";
@@ -402,15 +477,15 @@ export declare const agentOsOptionFieldSchemas: {
         http: z.ZodOptional<z.ZodObject<{
             maxFetchResponseBytes: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>;
-        tools: z.ZodOptional<z.ZodObject<{
-            defaultToolTimeoutMs: z.ZodOptional<z.ZodNumber>;
-            maxToolTimeoutMs: z.ZodOptional<z.ZodNumber>;
-            maxRegisteredToolkits: z.ZodOptional<z.ZodNumber>;
-            maxRegisteredToolsPerVm: z.ZodOptional<z.ZodNumber>;
-            maxToolsPerToolkit: z.ZodOptional<z.ZodNumber>;
-            maxToolSchemaBytes: z.ZodOptional<z.ZodNumber>;
-            maxToolExamplesPerTool: z.ZodOptional<z.ZodNumber>;
-            maxToolExampleInputBytes: z.ZodOptional<z.ZodNumber>;
+        bindings: z.ZodOptional<z.ZodObject<{
+            defaultBindingTimeoutMs: z.ZodOptional<z.ZodNumber>;
+            maxBindingTimeoutMs: z.ZodOptional<z.ZodNumber>;
+            maxRegisteredCollections: z.ZodOptional<z.ZodNumber>;
+            maxRegisteredCollectionsPerVm: z.ZodOptional<z.ZodNumber>;
+            maxBindingsPerCollection: z.ZodOptional<z.ZodNumber>;
+            maxBindingSchemaBytes: z.ZodOptional<z.ZodNumber>;
+            maxExamplesPerBinding: z.ZodOptional<z.ZodNumber>;
+            maxBindingExampleInputBytes: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>;
         plugins: z.ZodOptional<z.ZodObject<{
             maxPersistedManifestBytes: z.ZodOptional<z.ZodNumber>;
@@ -419,6 +494,25 @@ export declare const agentOsOptionFieldSchemas: {
         acp: z.ZodOptional<z.ZodObject<{
             maxReadLineBytes: z.ZodOptional<z.ZodNumber>;
             stdoutBufferByteLimit: z.ZodOptional<z.ZodNumber>;
+            maxCompletedMessageBytes: z.ZodOptional<z.ZodNumber>;
+            maxTurnOutputBytes: z.ZodOptional<z.ZodNumber>;
+            maxPromptBytes: z.ZodOptional<z.ZodNumber>;
+            maxPromptBlocks: z.ZodOptional<z.ZodNumber>;
+            maxFallbackContinuationBytes: z.ZodOptional<z.ZodNumber>;
+            maxSessionHistoryBytes: z.ZodOptional<z.ZodNumber>;
+            maxSessionHistoryEvents: z.ZodOptional<z.ZodNumber>;
+            maxHistoryPageEntries: z.ZodOptional<z.ZodNumber>;
+            maxSessionListEntries: z.ZodOptional<z.ZodNumber>;
+            maxSessionsPerVm: z.ZodOptional<z.ZodNumber>;
+            maxPromptsPerSession: z.ZodOptional<z.ZodNumber>;
+            maxPromptsPerVm: z.ZodOptional<z.ZodNumber>;
+            maxPendingPermissionsPerSession: z.ZodOptional<z.ZodNumber>;
+            maxPendingPermissionsPerVm: z.ZodOptional<z.ZodNumber>;
+            maxPermissionOutcomesPerSession: z.ZodOptional<z.ZodNumber>;
+            maxPermissionOutcomesPerVm: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        sqlite: z.ZodOptional<z.ZodObject<{
+            maxResultBytes: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>;
         jsRuntime: z.ZodOptional<z.ZodObject<{
             v8HeapLimitMb: z.ZodOptional<z.ZodNumber>;
@@ -443,6 +537,14 @@ export declare const agentOsOptionFieldSchemas: {
             syncReadLimitBytes: z.ZodOptional<z.ZodNumber>;
             prewarmTimeoutMs: z.ZodOptional<z.ZodNumber>;
             runnerHeapLimitMb: z.ZodOptional<z.ZodNumber>;
+            runnerCpuTimeLimitMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        process: z.ZodOptional<z.ZodObject<{
+            maxSpawnFileActions: z.ZodOptional<z.ZodNumber>;
+            maxSpawnFileActionBytes: z.ZodOptional<z.ZodNumber>;
+            pendingStdinBytes: z.ZodOptional<z.ZodNumber>;
+            pendingEventCount: z.ZodOptional<z.ZodNumber>;
+            pendingEventBytes: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
     readonly onAgentStderr: z.ZodOptional<z.ZodCustom<AgentStderrHandler, AgentStderrHandler>>;