@rivet-dev/agentos-core 0.4.0 → 0.4.2

package/dist/agent-os.d.ts

@@ -1,7 +1,7 @@
 import type { NativeMountPluginDescriptor } from "@rivet-dev/agentos-runtime-core/descriptors";
 import type { CreateVmConfig, VmUserConfig } from "@rivet-dev/agentos-runtime-core/vm-config";
 import { type HostFunctionCollections, type HostFunctionSchemas } from "@rivet-dev/agentos-runtime-core/host-functions";
-import type { CodeEvaluationResult, CodeExecutionResult, ContextDescriptor, ExecutionSignal, InlineExecutionOptions, JavaScriptEvaluationOptions, JavaScriptExecutionOptions, JsonValue, LanguageExecutionOptions, LanguageSpawnOptions, NpmPackageInstallOptions, NpmProjectInstallOptions, OutputReplay, ProcessDescriptor, ProcessExit, PythonInstallOptions, SpawnOptions, TypeScriptCheckOptions, TypeScriptCheckResult, TypeScriptEvaluationOptions, TypeScriptExecutionOptions, TypeScriptFileExecutionOptions } from "./language-execution.js";
+import type { CodeEvaluationResult, CodeExecutionResult, ContextDescriptor, ExecutionSignal, InlineExecutionOptions, JavaScriptEvaluationOptions, JavaScriptExecutionOptions, JsonValue, LanguageExecutionOptions, LanguageSpawnOptions, NpmPackageInstallOptions, NpmProjectInstallOptions, OutputReplay, ProcessDescriptor, ProcessExit, ProcessSpawnOptions, PythonInstallOptions, TypeScriptCheckOptions, TypeScriptCheckResult, TypeScriptEvaluationOptions, TypeScriptExecutionOptions, TypeScriptFileExecutionOptions } from "./language-execution.js";
 import type { ConnectTerminalOptions, Kernel, KernelExecOptions, KernelExecResult, OpenShellOptions, Permissions, VirtualFileSystem, VirtualStat } from "./runtime-compat.js";
 import { type AgentOsSandboxInput } from "./sandbox.js";
 import { type ReplayReadOptions } from "./output-replay.js";
@@ -461,7 +461,7 @@ export declare class AgentOs {
     readonly process: {
         exec: (command: string, options?: LanguageExecutionOptions) => Promise<CodeExecutionResult>;
         execFile: (command: string, args?: readonly string[], options?: Omit<LanguageExecutionOptions, "args">) => Promise<CodeExecutionResult>;
-        spawn: (command: string, args?: string[], options?: SpawnOptions) => Promise<ProcessDescriptor>;
+        spawn: (command: string, args?: string[], options?: ProcessSpawnOptions) => Promise<ProcessDescriptor>;
         get: (pid: number) => Promise<ProcessDescriptor>;
         list: () => Promise<ProcessDescriptor[]>;
         tree: () => Promise<ProcessTreeNode[]>;
@@ -630,7 +630,7 @@ export declare class AgentOs {
     private _reserveProcessRegistrySlot;
     private _pruneExitedProcesses;
     private _spawnProcess;
-    spawn(command: string, args?: string[], options?: SpawnOptions): Promise<ProcessDescriptor>;
+    spawn(command: string, args?: string[], options?: ProcessSpawnOptions): Promise<ProcessDescriptor>;
     /** Write data to a process's stdin. */
     private _writeProcessStdin;
     /** Close a process's stdin stream. */

package/dist/agent-os.js

@@ -2648,7 +2648,7 @@ export class AgentOs {
                 env: options.env,
                 stdin: options.stdin,
                 timeout: options.timeoutMs,
-                streamStdin: true,
+                streamStdin: options.streamStdin ?? true,
                 retainOutput: options.output?.retainEvents ?? false,
                 onStdout: (data, metadata) => {
                     options?.onStdout?.(data);
@@ -3926,6 +3926,17 @@ function ensureSharedSidecarNativeProcess(sidecar) {
             applySharedSidecarHold(state);
             try {
                 const session = await client.authenticateAndOpenSession();
+                // A transport that fails for good (process exit, silence watchdog,
+                // event buffer overflow, undecodable frame) leaves the VMs out of
+                // reach. Stop the process, as the Rust client does, and report the
+                // handle disposed so a shared pool spawns a fresh sidecar.
+                const child = state.sharedChild;
+                client.onClose(() => {
+                    child?.kill?.("SIGKILL");
+                    if (state.description.state === "ready") {
+                        state.description.state = "disposed";
+                    }
+                });
                 return { client, session };
             }
             catch (error) {

package/dist/default-software/coreutils.aospkg

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/dist/default-software/coreutils.aospkg
-size: 67400857 bytes
-sha256: e269c2e6a04b2d0027e66d0efb49a2937304decc7963dcb66f394cdd5dad4186
+size: 67548825 bytes
+sha256: be05ed39037fb797efb65701f766f9a9bac8b11f80596226fcfaad4d52488656

package/dist/language-execution.d.ts

@@ -110,6 +110,13 @@ export interface SpawnOptions {
     };
 }
 export type LanguageSpawnOptions = SpawnOptions;
+export interface ProcessSpawnOptions extends SpawnOptions {
+    /**
+     * Keep stdin open for `writeStdin`. Defaults to `true`. With `false` the
+     * process reads EOF as soon as it starts, as with `</dev/null`.
+     */
+    streamStdin?: boolean;
+}
 export interface ExecutionErrorData {
     code: string;
     name: string;

package/dist/sidecar/rpc-client.d.ts

@@ -2,7 +2,7 @@ import type { RootFilesystemConfig as VmConfigRootFilesystemConfig, RootFilesyst
 import type { NativeMountConfig, PlainMountConfig, RootFilesystemConfig } from "../agent-os.js";
 import type { RootSnapshotExport } from "../layers.js";
 import type { ProcessForestRecord } from "../process-forest.js";
-import type { ConnectTerminalOptions, KernelExecOptions, KernelExecResult, KernelSpawnOptions, ManagedProcess, OpenShellOptions, ProcessInfo, ShellHandle, VirtualFileSystem, VirtualStat } from "../runtime-compat.js";
+import { type ConnectTerminalOptions, type KernelExecOptions, type KernelExecResult, type KernelSpawnOptions, type ManagedProcess, type OpenShellOptions, type ProcessInfo, type ShellHandle, type VirtualFileSystem, type VirtualStat } from "../runtime-compat.js";
 import type { AuthenticatedSession, CreatedVm, SidecarPermissionsPolicy, SidecarProcess, SidecarSignalHandlerRegistration } from "./native-process-client.js";
 export declare function toSidecarSignalName(signal: number): string;
 export interface LocalCompatMount {

package/dist/sidecar/rpc-client.js

@@ -2,6 +2,7 @@ import { randomUUID } from "node:crypto";
 import { constants as osConstants } from "node:os";
 import { posix as posixPath } from "node:path";
 import { SidecarRejectedError } from "@rivet-dev/agentos-runtime-core/sidecar-errors";
+import { KernelError, } from "../runtime-compat.js";
 const SYNTHETIC_PID_BASE = 1_000_000;
 const MISSING_EXIT_EVENT_GRACE_MS = 500;
 const PROTECTED_READ_ONLY_GUEST_ROOTS = ["/etc/agentos"];
@@ -458,11 +459,13 @@ export class NativeSidecarKernelProxy {
         const parsedCommand = parseSimpleExecCommand(command);
         const runAndCapture = async (proc, stdinOverride, readExitCode) => {
             const shellExitCode = await runManagedProcessToCompletion(proc, async () => {
+                // A command may exit without reading its input, as `true` does in
+                // `echo x | true`; its exit status is the result.
                 if (stdinOverride !== undefined) {
-                    await proc.writeStdin(stdinOverride);
+                    await proc.writeStdin(stdinOverride).catch(ignoreBrokenPipe);
                 }
                 else if (options?.stdin !== undefined) {
-                    await proc.writeStdin(options.stdin);
+                    await proc.writeStdin(options.stdin).catch(ignoreBrokenPipe);
                 }
                 // Non-interactive runs must observe EOF after any provided input.
                 await proc.closeStdin();
@@ -527,7 +530,7 @@ export class NativeSidecarKernelProxy {
         const runAndCapture = async (proc) => {
             const exitCode = await runManagedProcessToCompletion(proc, async () => {
                 if (options?.stdin !== undefined) {
-                    await proc.writeStdin(options.stdin);
+                    await proc.writeStdin(options.stdin).catch(ignoreBrokenPipe);
                 }
                 await proc.closeStdin();
             }, deadlineMs);
@@ -620,7 +623,7 @@ export class NativeSidecarKernelProxy {
             processId,
             writeStdin: (data) => {
                 if (entry.exitCode !== null) {
-                    return Promise.resolve();
+                    return Promise.reject(stdinHasNoReader(entry.pid));
                 }
                 if (entry.waitError)
                     return Promise.reject(entry.waitError);
@@ -1712,7 +1715,10 @@ export class NativeSidecarKernelProxy {
             if (entry.waitError)
                 throw entry.waitError;
             if (entry.exitCode !== null) {
-                return;
+                if (entry.pendingStdin.length === 0)
+                    return;
+                entry.pendingStdin.length = 0;
+                throw stdinHasNoReader(entry.pid);
             }
             while (entry.pendingStdin.length > 0) {
                 const chunk = entry.pendingStdin.shift();
@@ -1725,9 +1731,9 @@ export class NativeSidecarKernelProxy {
             .catch((error) => {
             if (entry.exitCode !== null &&
                 (isNoSuchProcessError(error) || isUnknownVmError(error))) {
-                return;
+                throw stdinHasNoReader(entry.pid);
             }
-            throw error;
+            throw guestStdinError(error) ?? error;
         })
             .finally(() => {
             entry.stdinFlushPromise = null;
@@ -1745,7 +1751,8 @@ export class NativeSidecarKernelProxy {
         await entry.startPromise;
         if (entry.waitError)
             throw entry.waitError;
-        await this.flushPendingStdin(entry);
+        // Closing stdin succeeds after exit even though queued writes had no reader.
+        await this.flushPendingStdin(entry).catch(ignoreBrokenPipe);
         if (entry.exitCode !== null || !entry.pendingCloseStdin) {
             return;
         }
@@ -1758,10 +1765,14 @@ export class NativeSidecarKernelProxy {
                 (isNoSuchProcessError(error) || isUnknownVmError(error))) {
                 return;
             }
-            throw error;
+            throw guestStdinError(error) ?? error;
         }
     }
     handleBackgroundProcessError(entry, error) {
+        // The writer already received the errno; a stdin write the guest
+        // refused is not a process failure.
+        if (isRefusedStdinWrite(error))
+            return;
         if (entry.exitCode !== null) {
             // An I/O failure after exit must never rewrite the guest's real status.
             if (!isNoSuchProcessError(error) && !isUnknownVmError(error)) {
@@ -2194,6 +2205,32 @@ function buildCommandMap(commandGuestPaths) {
     }
     return commands;
 }
+/** Stdin written after its process exited, as a pipe write with no reader on Linux. */
+function stdinHasNoReader(pid) {
+    return new KernelError("EPIPE", `process ${pid} has exited, so its stdin has no reader`);
+}
+/**
+ * A stdin rejection that carries a guest errno, such as EBADF for a write
+ * after closeStdin, as the KernelError the Rust client also returns.
+ */
+function guestStdinError(error) {
+    if (!(error instanceof SidecarRejectedError) || !error.detail.errno)
+        return null;
+    return new KernelError(error.detail.errno, error.detail.message);
+}
+/** EPIPE (no reader) or EBADF (stdin closed): the guest refused the write. */
+function isRefusedStdinWrite(error) {
+    return (error instanceof KernelError &&
+        (error.code === "EPIPE" || error.code === "EBADF"));
+}
+function isBrokenPipe(error) {
+    return error instanceof KernelError && error.code === "EPIPE";
+}
+function ignoreBrokenPipe(error) {
+    if (isBrokenPipe(error))
+        return;
+    throw error;
+}
 function isNoSuchProcessError(error) {
     if (!(error instanceof Error)) {
         return false;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@rivet-dev/agentos-core",
-	"version": "0.4.0",
+	"version": "0.4.2",
 	"type": "module",
 	"license": "Apache-2.0",
 	"main": "./dist/index.js",
@@ -60,8 +60,8 @@
 	},
 	"dependencies": {
 		"@aws-sdk/client-s3": "^3.1019.0",
-		"@rivet-dev/agentos-runtime-sidecar": "0.4.0",
-		"@rivet-dev/agentos-runtime-core": "0.4.0",
+		"@rivet-dev/agentos-runtime-sidecar": "0.4.2",
+		"@rivet-dev/agentos-runtime-core": "0.4.2",
 		"@xterm/headless": "^6.0.0",
 		"better-sqlite3": "^12.8.0",
 		"croner": "^10.0.1",
@@ -73,7 +73,7 @@
 	},
 	"devDependencies": {
 		"@bare-ts/lib": "^0.4.0",
-		"@rivet-dev/agentos-test-harness": "0.4.0",
+		"@rivet-dev/agentos-test-harness": "0.4.2",
 		"@browserbasehq/browse-cli": "0.5.0",
 		"@browserbasehq/cli": "0.5.4",
 		"@browserbasehq/sdk": "2.10.0",