@rivet-dev/agentos-runtime-core 0.0.0-main.29b0797 → 0.0.0-main.5ac5a14

package/dist/test-runtime.js

@@ -5,9 +5,9 @@ import * as path from "node:path";
 import * as posixPath from "node:path/posix";
 import { fileURLToPath } from "node:url";
 import "./native-client.js";
-import { NativeSidecarKernelProxy, SidecarProcess, serializeMountConfigForSidecar, } from "./kernel-proxy.js";
 import { resolvePublishedSidecarBinary } from "./binary.js";
 import { findCargoBinary, resolveCargoBinary } from "./cargo.js";
+import { NativeSidecarKernelProxy, SidecarProcess, serializeMountConfigForSidecar, } from "./kernel-proxy.js";
 export const AF_INET = 2;
 export const AF_UNIX = 1;
 export const SOCK_STREAM = 1;
@@ -1161,7 +1161,7 @@ class WasmVmRuntimeDescriptor {
             if (dirOffset === undefined) {
                 continue;
             }
-            guestPaths.set(name, `/__secure_exec/commands/${startIndex + dirOffset}/${name}`);
+            guestPaths.set(name, `/__agentos/commands/${startIndex + dirOffset}/${name}`);
         }
         return guestPaths;
     }
@@ -1263,9 +1263,13 @@ function createBootstrapEntries(commandNames) {
         ...KERNEL_POSIX_BOOTSTRAP_DIRS.map((entryPath) => ({
             path: entryPath,
             kind: "directory",
-            mode: entryPath === "/tmp" || entryPath === "/var/tmp" ? 0o1777 : 0o755,
-            uid: 0,
-            gid: 0,
+            mode: entryPath === "/tmp" || entryPath === "/var/tmp"
+                ? 0o1777
+                : entryPath === "/home/agentos"
+                    ? 0o2755
+                    : 0o755,
+            uid: entryPath === "/home/agentos" || entryPath === "/workspace" ? 1000 : 0,
+            gid: entryPath === "/home/agentos" || entryPath === "/workspace" ? 1000 : 0,
         })),
         {
             path: "/usr/bin/env",
@@ -1414,17 +1418,88 @@ function planNodeFilesystemPassthroughMounts(filesystem, existingMounts) {
             fs: new NodeFileSystem({ root: hostPath }),
             readOnly: true,
         });
+        if (directoryName === "node_modules") {
+            appendNodeModulesSymlinkTargetMounts(mounts, existingGuestPaths, guestPath, hostPath);
+        }
     }
     return {
         mounts,
         passthroughDirectories,
     };
 }
+function appendNodeModulesSymlinkTargetMounts(mounts, existingGuestPaths, guestRoot, hostRoot) {
+    let canonicalHostRoot;
+    try {
+        canonicalHostRoot = fsSync.realpathSync(hostRoot);
+    }
+    catch {
+        return;
+    }
+    const appendTarget = (guestPath, symlinkPath) => {
+        if (existingGuestPaths.has(guestPath))
+            return;
+        try {
+            const target = fsSync.realpathSync(symlinkPath);
+            if (!fsSync.statSync(target).isDirectory())
+                return;
+            const relativeTarget = path.relative(canonicalHostRoot, target);
+            if (relativeTarget === "" ||
+                (!relativeTarget.startsWith(`..${path.sep}`) &&
+                    relativeTarget !== ".." &&
+                    !path.isAbsolute(relativeTarget))) {
+                // pnpm and similar stores deliberately use links that remain inside
+                // node_modules. Keeping those on the root mount preserves the realpath
+                // ancestry needed to resolve their nested dependency links.
+                return;
+            }
+            mounts.push({
+                path: guestPath,
+                fs: new NodeFileSystem({ root: target }),
+                readOnly: true,
+            });
+            existingGuestPaths.add(guestPath);
+        }
+        catch {
+            // Broken or concurrently-removed links remain unavailable, matching Node.
+        }
+    };
+    let entries;
+    try {
+        entries = fsSync.readdirSync(hostRoot, { withFileTypes: true });
+    }
+    catch {
+        return;
+    }
+    for (const entry of entries) {
+        if (entry.name.startsWith("."))
+            continue;
+        const entryPath = path.join(hostRoot, entry.name);
+        if (entry.isSymbolicLink()) {
+            appendTarget(`${guestRoot}/${entry.name}`, entryPath);
+            continue;
+        }
+        if (!entry.isDirectory() || !entry.name.startsWith("@"))
+            continue;
+        let scopedEntries;
+        try {
+            scopedEntries = fsSync.readdirSync(entryPath, { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        for (const scopedEntry of scopedEntries) {
+            if (scopedEntry.name.startsWith(".") || !scopedEntry.isSymbolicLink()) {
+                continue;
+            }
+            appendTarget(`${guestRoot}/${entry.name}/${scopedEntry.name}`, path.join(entryPath, scopedEntry.name));
+        }
+    }
+}
 function collectGuestCommandPaths(commandDirs, startIndex = 0) {
     const guestPaths = new Map();
     for (const entry of discoverWasmCommandEntries(commandDirs)) {
         if (!guestPaths.has(entry.name)) {
-            guestPaths.set(entry.name, `/__secure_exec/commands/${startIndex + entry.dirOffset}/${entry.name}`);
+            guestPaths.set(entry.name, `/__agentos/commands/${startIndex + entry.dirOffset}/${entry.name}`);
         }
     }
     return guestPaths;
@@ -1435,10 +1510,7 @@ async function ensureCommandStubs(proxy, commands) {
         // `/bin` supports PATH-based test commands. `/opt/agentos/bin` mirrors
         // the package projection used by production VMs and is required by
         // upstream tools that exec private helpers via an absolute libexec path.
-        for (const stubPath of [
-            `/bin/${command}`,
-            `/opt/agentos/bin/${command}`,
-        ]) {
+        for (const stubPath of [`/bin/${command}`, `/opt/agentos/bin/${command}`]) {
             await rootView.writeFile(stubPath, KERNEL_COMMAND_STUB);
             await rootView.chmod(stubPath, 0o755);
         }
@@ -1605,9 +1677,15 @@ async function syncLiveFilesystemToBoundMethods(live, methods, paths, maxBytes)
 }
 async function snapshotLiveFilesystemPath(live, targetPath, snapshot, usage, maxBytes, knownEntry) {
     const stat = knownEntry ??
-        (targetPath === "/" ? await live.stat(targetPath) : await live.lstat(targetPath));
+        (targetPath === "/"
+            ? await live.stat(targetPath)
+            : await live.lstat(targetPath));
     if (stat.isSymbolicLink) {
-        snapshot.push({ kind: "symlink", path: targetPath, target: await live.readlink(targetPath) });
+        snapshot.push({
+            kind: "symlink",
+            path: targetPath,
+            target: await live.readlink(targetPath),
+        });
         return;
     }
     if (stat.isDirectory) {
@@ -1639,7 +1717,9 @@ async function snapshotLiveFilesystemPath(live, targetPath, snapshot, usage, max
 }
 async function applyLiveFilesystemSnapshotEntry(methods, entry) {
     if (entry.kind === "directory") {
-        await callBoundFilesystemMethod(methods, "mkdir", entry.path, { recursive: true });
+        await callBoundFilesystemMethod(methods, "mkdir", entry.path, {
+            recursive: true,
+        });
         return;
     }
     await ensureBoundParentDirectory(methods, entry.path);
@@ -1784,7 +1864,7 @@ class NativeKernel {
             collectGuestCommandPaths(commandDirs, startIndex);
         const allCommandDirs = [...this.mountedCommandDirs, ...commandDirs];
         const sidecarMounts = allCommandDirs.map((commandDir, index) => serializeMountConfigForSidecar({
-            path: `/__secure_exec/commands/${index}`,
+            path: `/__agentos/commands/${index}`,
             readOnly: true,
             plugin: {
                 id: "host_dir",
@@ -2137,6 +2217,7 @@ class NativeKernel {
                     ? { permissions: bootstrapPermissions }
                     : {}),
                 loopbackExemptPorts: this.loopbackExemptPorts,
+                ...(this.options.limits ? { limits: this.options.limits } : {}),
                 ...(this.options.jsRuntime
                     ? { jsRuntime: this.options.jsRuntime }
                     : {}),

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@rivet-dev/agentos-runtime-core",
-	"version": "0.0.0-main.29b0797",
+	"version": "0.0.0-main.5ac5a14",
 	"type": "module",
 	"license": "Apache-2.0",
 	"main": "./dist/index.js",
@@ -192,10 +192,12 @@
 		"test": "vitest run --exclude '**/*.nightly.test.ts'",
 		"test:pr": "vitest run --exclude '**/*.nightly.test.ts' --fileParallelism=false",
 		"test:nightly": "vitest run tests/integration/*.nightly.test.ts --passWithNoTests",
-		"test:ecosystem": "AGENTOS_ECOSYSTEM_E2E=1 vitest run tests/integration/e2e-project-matrix.nightly.test.ts -t 'required Node ecosystem reactor matrix' --reporter=verbose"
+		"test:ecosystem": "AGENTOS_ECOSYSTEM_E2E=1 vitest run tests/integration/e2e-project-matrix.nightly.test.ts -t 'required Node ecosystem reactor matrix' --reporter=verbose",
+		"test:ecosystem:full": "AGENTOS_ECOSYSTEM_FULL_E2E=1 vitest run tests/integration/e2e-project-matrix.nightly.test.ts -t 'full Node ecosystem matrix through kernel' --reporter=verbose",
+		"test:npm-workflows": "AGENTOS_NPM_WORKFLOWS_E2E=1 vitest run tests/integration/e2e-npm-*.nightly.test.ts tests/integration/e2e-npx-and-pipes.nightly.test.ts tests/integration/e2e-concurrently.nightly.test.ts tests/integration/e2e-nextjs-build.nightly.test.ts --reporter=verbose"
 	},
 	"dependencies": {
-		"@rivet-dev/agentos-runtime-sidecar": "0.0.0-main.29b0797",
+		"@rivet-dev/agentos-runtime-sidecar": "0.0.0-main.5ac5a14",
 		"@rivetkit/bare-ts": "^0.6.2",
 		"zod": "^4.1.11"
 	},
@@ -203,5 +205,10 @@
 		"@types/node": "^22.10.2",
 		"typescript": "^5.7.2",
 		"vitest": "^2.1.8"
+	},
+	"repository": {
+		"type": "git",
+		"url": "https://github.com/rivet-dev/agentos.git",
+		"directory": "packages/runtime-core"
 	}
 }