@rivet-dev/agentos-runtime-core 0.2.14 → 0.2.15

package/dist/kernel-proxy.js

@@ -26,7 +26,7 @@ export function serializeMountConfigForSidecar(mount) {
 }
 const SYNTHETIC_PID_BASE = 1_000_000;
 const MISSING_EXIT_EVENT_GRACE_MS = 500;
-const PROTECTED_READ_ONLY_GUEST_ROOTS = ["/etc/secure-exec"];
+const PROTECTED_READ_ONLY_GUEST_ROOTS = ["/etc/agentos"];
 const TRAILING_OUTPUT_DRAIN_INTERVAL_MS = 10;
 const TRAILING_OUTPUT_DRAIN_MAX_MS = 250;
 const TRAILING_OUTPUT_DRAIN_QUIET_TURNS = 2;

package/dist/node-runtime.js

@@ -35,7 +35,7 @@ const REPO_COMMANDS_DIR = path.join(REPO_ROOT, "toolchain/target/wasm32-wasip1/r
 /**
  * Commands vendored into the published `@rivet-dev/agentos-runtime-core` package by
  * `scripts/copy-wasm-commands.mjs` (listed in `files` as `commands`). This is
- * the directory a real `npm install secure-exec` resolves: from the compiled
+ * the directory a real `npm install agentos` resolves: from the compiled
  * `dist/node-runtime.js` it sits at `<package>/commands`. This is the analogue
  * of how the sidecar binary ships inside `@rivet-dev/agentos-runtime-sidecar`.
  */
@@ -222,7 +222,7 @@ export class NodeRuntime {
      * `node <file>`; it runs as standard ESM (top-level `await`, `import`).
      */
     async exec(code, options = {}) {
-        const programPath = `/tmp/secure-exec-program-${nextProgramId++}.mjs`;
+        const programPath = `/tmp/agentos-program-${nextProgramId++}.mjs`;
         await this.kernel.writeFile(programPath, withBindingPreamble(code));
         return this.runProgram(programPath, options);
     }
@@ -328,7 +328,7 @@ export class NodeRuntime {
      * ```
      */
     async spawn(code, options = {}) {
-        const programPath = `/tmp/secure-exec-program-${nextProgramId++}.mjs`;
+        const programPath = `/tmp/agentos-program-${nextProgramId++}.mjs`;
         await this.kernel.writeFile(programPath, withBindingPreamble(code));
         const proc = this.kernel.spawn("node", [programPath], {
             env: options.env,
@@ -442,8 +442,8 @@ export class NodeRuntime {
      */
     async run(code, options = {}) {
         const id = nextProgramId++;
-        const resultPath = `/tmp/secure-exec-result-${id}.json`;
-        const programPath = `/tmp/secure-exec-program-${id}.mjs`;
+        const resultPath = `/tmp/agentos-result-${id}.json`;
+        const programPath = `/tmp/agentos-program-${id}.mjs`;
         // Inject the __return helper as a module-level preamble, then the user
         // code at module top level. Import declarations (preamble's and the
         // user's) are hoisted, so __return is defined before the user's

package/dist/request-payloads.d.ts

@@ -171,6 +171,98 @@ export type LiveRequestPayload = {
     type: "persistence_flush";
     key: string;
     payload_size_bytes: number;
+} | {
+    type: "shell_execution";
+    request: protocol.ShellExecutionRequest;
+} | {
+    type: "argv_execution";
+    request: protocol.ArgvExecutionRequest;
+} | {
+    type: "javascript_execution";
+    request: protocol.JavaScriptExecutionRequest;
+} | {
+    type: "javascript_evaluation";
+    request: protocol.JavaScriptEvaluationRequest;
+} | {
+    type: "javascript_file_execution";
+    request: protocol.JavaScriptFileExecutionRequest;
+} | {
+    type: "typescript_execution";
+    request: protocol.TypeScriptExecutionRequest;
+} | {
+    type: "typescript_evaluation";
+    request: protocol.TypeScriptEvaluationRequest;
+} | {
+    type: "typescript_file_execution";
+    request: protocol.TypeScriptFileExecutionRequest;
+} | {
+    type: "typescript_check";
+    request: protocol.TypeScriptCheckRequest;
+} | {
+    type: "typescript_project_check";
+    request: protocol.TypeScriptProjectCheckRequest;
+} | {
+    type: "npm_project_install";
+    request: protocol.NpmProjectInstallRequest;
+} | {
+    type: "npm_package_install";
+    request: protocol.NpmPackageInstallRequest;
+} | {
+    type: "npm_script_execution";
+    request: protocol.NpmScriptExecutionRequest;
+} | {
+    type: "npm_package_execution";
+    request: protocol.NpmPackageExecutionRequest;
+} | {
+    type: "python_execution";
+    request: protocol.PythonExecutionRequest;
+} | {
+    type: "python_evaluation";
+    request: protocol.PythonEvaluationRequest;
+} | {
+    type: "python_file_execution";
+    request: protocol.PythonFileExecutionRequest;
+} | {
+    type: "python_module_execution";
+    request: protocol.PythonModuleExecutionRequest;
+} | {
+    type: "python_install";
+    request: protocol.PythonInstallRequest;
+} | {
+    type: "create_context";
+    request: protocol.CreateContextRequest;
+} | {
+    type: "get_execution";
+    request: protocol.GetExecutionRequest;
+} | {
+    type: "list_executions";
+} | {
+    type: "wait_execution";
+    request: protocol.WaitExecutionRequest;
+} | {
+    type: "cancel_execution";
+    request: protocol.CancelExecutionRequest;
+} | {
+    type: "signal_execution";
+    request: protocol.SignalExecutionRequest;
+} | {
+    type: "reset_execution";
+    request: protocol.ResetExecutionRequest;
+} | {
+    type: "delete_execution";
+    request: protocol.DeleteExecutionRequest;
+} | {
+    type: "write_execution_stdin";
+    request: protocol.WriteExecutionStdinRequest;
+} | {
+    type: "close_execution_stdin";
+    request: protocol.CloseExecutionStdinRequest;
+} | {
+    type: "resize_execution_pty";
+    request: protocol.ResizeExecutionPtyRequest;
+} | {
+    type: "read_execution_output";
+    request: protocol.ReadExecutionOutputRequest;
 } | {
     type: "ext";
     envelope: LiveExtEnvelope;

package/dist/request-payloads.js

@@ -266,6 +266,68 @@ export function toGeneratedRequestPayload(payload) {
                     payloadSizeBytes: BigInt(payload.payload_size_bytes),
                 },
             };
+        case "shell_execution":
+            return { tag: "ShellExecutionRequest", val: payload.request };
+        case "argv_execution":
+            return { tag: "ArgvExecutionRequest", val: payload.request };
+        case "javascript_execution":
+            return { tag: "JavaScriptExecutionRequest", val: payload.request };
+        case "javascript_evaluation":
+            return { tag: "JavaScriptEvaluationRequest", val: payload.request };
+        case "javascript_file_execution":
+            return { tag: "JavaScriptFileExecutionRequest", val: payload.request };
+        case "typescript_execution":
+            return { tag: "TypeScriptExecutionRequest", val: payload.request };
+        case "typescript_evaluation":
+            return { tag: "TypeScriptEvaluationRequest", val: payload.request };
+        case "typescript_file_execution":
+            return { tag: "TypeScriptFileExecutionRequest", val: payload.request };
+        case "typescript_check":
+            return { tag: "TypeScriptCheckRequest", val: payload.request };
+        case "typescript_project_check":
+            return { tag: "TypeScriptProjectCheckRequest", val: payload.request };
+        case "npm_project_install":
+            return { tag: "NpmProjectInstallRequest", val: payload.request };
+        case "npm_package_install":
+            return { tag: "NpmPackageInstallRequest", val: payload.request };
+        case "npm_script_execution":
+            return { tag: "NpmScriptExecutionRequest", val: payload.request };
+        case "npm_package_execution":
+            return { tag: "NpmPackageExecutionRequest", val: payload.request };
+        case "python_execution":
+            return { tag: "PythonExecutionRequest", val: payload.request };
+        case "python_evaluation":
+            return { tag: "PythonEvaluationRequest", val: payload.request };
+        case "python_file_execution":
+            return { tag: "PythonFileExecutionRequest", val: payload.request };
+        case "python_module_execution":
+            return { tag: "PythonModuleExecutionRequest", val: payload.request };
+        case "python_install":
+            return { tag: "PythonInstallRequest", val: payload.request };
+        case "create_context":
+            return { tag: "CreateContextRequest", val: payload.request };
+        case "get_execution":
+            return { tag: "GetExecutionRequest", val: payload.request };
+        case "list_executions":
+            return { tag: "ListExecutionsRequest", val: null };
+        case "wait_execution":
+            return { tag: "WaitExecutionRequest", val: payload.request };
+        case "cancel_execution":
+            return { tag: "CancelExecutionRequest", val: payload.request };
+        case "signal_execution":
+            return { tag: "SignalExecutionRequest", val: payload.request };
+        case "reset_execution":
+            return { tag: "ResetExecutionRequest", val: payload.request };
+        case "delete_execution":
+            return { tag: "DeleteExecutionRequest", val: payload.request };
+        case "write_execution_stdin":
+            return { tag: "WriteExecutionStdinRequest", val: payload.request };
+        case "close_execution_stdin":
+            return { tag: "CloseExecutionStdinRequest", val: payload.request };
+        case "resize_execution_pty":
+            return { tag: "ResizeExecutionPtyRequest", val: payload.request };
+        case "read_execution_output":
+            return { tag: "ReadExecutionOutputRequest", val: payload.request };
         case "ext":
             return {
                 tag: "ExtEnvelope",

package/dist/response-payloads.d.ts

@@ -200,6 +200,33 @@ export type LiveResponsePayload = {
     configuration_path: string | null;
     retryable: boolean | null;
     errno: string | null;
+} | {
+    type: "execution_accepted";
+    response: protocol.ExecutionAcceptedResponse;
+} | {
+    type: "execution_completed";
+    response: protocol.ExecutionCompletedResponse;
+} | {
+    type: "execution_evaluation";
+    response: protocol.ExecutionEvaluationResponse;
+} | {
+    type: "typescript_check";
+    response: protocol.TypeScriptCheckResponse;
+} | {
+    type: "execution_descriptor";
+    response: protocol.ExecutionDescriptorResponse;
+} | {
+    type: "execution_list";
+    response: protocol.ExecutionListResponse;
+} | {
+    type: "execution_deleted";
+    response: protocol.ExecutionDeletedResponse;
+} | {
+    type: "execution_io";
+    response: protocol.ExecutionIoResponse;
+} | {
+    type: "execution_output_page";
+    response: protocol.ExecutionOutputPageResponse;
 } | {
     type: "ext_result";
     envelope: LiveExtEnvelope;

package/dist/response-payloads.js

@@ -271,6 +271,24 @@ export function fromGeneratedResponsePayload(payload) {
                 type: "ext_result",
                 envelope: fromGeneratedExtEnvelope(payload.val),
             };
+        case "ExecutionAcceptedResponse":
+            return { type: "execution_accepted", response: payload.val };
+        case "ExecutionCompletedResponse":
+            return { type: "execution_completed", response: payload.val };
+        case "ExecutionEvaluationResponse":
+            return { type: "execution_evaluation", response: payload.val };
+        case "TypeScriptCheckResponse":
+            return { type: "typescript_check", response: payload.val };
+        case "ExecutionDescriptorResponse":
+            return { type: "execution_descriptor", response: payload.val };
+        case "ExecutionListResponse":
+            return { type: "execution_list", response: payload.val };
+        case "ExecutionDeletedResponse":
+            return { type: "execution_deleted", response: payload.val };
+        case "ExecutionIoResponse":
+            return { type: "execution_io", response: payload.val };
+        case "ExecutionOutputPageResponse":
+            return { type: "execution_output_page", response: payload.val };
     }
 }
 function fromGeneratedAgentosProjectedAgent(agent) {

package/dist/sidecar-process.d.ts

@@ -7,7 +7,8 @@ import type { SidecarProcessTransport } from "./sidecar-client.js";
 import { type LiveFsPermissionRule, type LivePatternPermissionRule, type LivePermissionMode, type LivePermissionScope, type LiveRulePermissions } from "./permissions.js";
 import type { LiveFilesystemOperation, LiveGuestRuntimeKind, LiveWasmPermissionTier } from "./protocol-maps.js";
 import { type LiveEventFrame, type LiveSidecarRequestHandler, type LiveSidecarRequestFrame, type LiveSidecarResponseFrame, type ProtocolFramePayloadCodec } from "./protocol-frames.js";
-import type { LiveGuestDirEntry } from "./response-payloads.js";
+import { type LiveRequestPayload } from "./request-payloads.js";
+import type { LiveGuestDirEntry, LiveResponsePayload } from "./response-payloads.js";
 import { type LiveGuestFilesystemStat } from "./state.js";
 export { SidecarProcessError, SidecarProcessExited, SidecarSilenceTimeout, } from "./sidecar-errors.js";
 export { SidecarEventBufferOverflow } from "./event-buffer.js";
@@ -368,6 +369,8 @@ export declare class SidecarProcess {
     waitForEvent(matcher: SidecarEventSelector | ((event: EventFrame) => boolean), timeoutMs?: number, options?: {
         signal?: AbortSignal;
     }): Promise<EventFrame>;
+    /** Internal semantic request entrypoint used by the AgentOS client surface. */
+    sendVmRequest(session: AuthenticatedSession, vm: CreatedVm, payload: LiveRequestPayload): Promise<LiveResponsePayload>;
     dispose(): Promise<void>;
     private sendRequest;
     private guestFilesystemCall;

package/dist/sidecar-process.js

@@ -53,8 +53,8 @@ export class SidecarProcess {
             },
             payload: {
                 type: "authenticate",
-                client_name: "secure-exec-core-client",
-                auth_token: "secure-exec-core-client-token",
+                client_name: "agentos-core-client",
+                auth_token: "agentos-core-client-token",
                 protocol_version: SIDECAR_PROTOCOL_SCHEMA.version,
                 bridge_version: BRIDGE_CONTRACT_VERSION,
             },
@@ -946,6 +946,19 @@ export class SidecarProcess {
     async waitForEvent(matcher, timeoutMs, options) {
         return await this.protocolClient.waitForEvent(matcher, timeoutMs, options);
     }
+    /** Internal semantic request entrypoint used by the AgentOS client surface. */
+    async sendVmRequest(session, vm, payload) {
+        const response = await this.sendRequest({
+            ownership: {
+                scope: "vm",
+                connection_id: session.connectionId,
+                session_id: session.sessionId,
+                vm_id: vm.vmId,
+            },
+            payload,
+        });
+        return response.payload;
+    }
     async dispose() {
         await this.protocolClient.dispose();
     }

package/dist/test-runtime.js

@@ -1161,7 +1161,7 @@ class WasmVmRuntimeDescriptor {
             if (dirOffset === undefined) {
                 continue;
             }
-            guestPaths.set(name, `/__secure_exec/commands/${startIndex + dirOffset}/${name}`);
+            guestPaths.set(name, `/__agentos/commands/${startIndex + dirOffset}/${name}`);
         }
         return guestPaths;
     }
@@ -1499,7 +1499,7 @@ function collectGuestCommandPaths(commandDirs, startIndex = 0) {
     const guestPaths = new Map();
     for (const entry of discoverWasmCommandEntries(commandDirs)) {
         if (!guestPaths.has(entry.name)) {
-            guestPaths.set(entry.name, `/__secure_exec/commands/${startIndex + entry.dirOffset}/${entry.name}`);
+            guestPaths.set(entry.name, `/__agentos/commands/${startIndex + entry.dirOffset}/${entry.name}`);
         }
     }
     return guestPaths;
@@ -1864,7 +1864,7 @@ class NativeKernel {
             collectGuestCommandPaths(commandDirs, startIndex);
         const allCommandDirs = [...this.mountedCommandDirs, ...commandDirs];
         const sidecarMounts = allCommandDirs.map((commandDir, index) => serializeMountConfigForSidecar({
-            path: `/__secure_exec/commands/${index}`,
+            path: `/__agentos/commands/${index}`,
             readOnly: true,
             plugin: {
                 id: "host_dir",

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@rivet-dev/agentos-runtime-core",
-	"version": "0.2.14",
+	"version": "0.2.15",
 	"type": "module",
 	"license": "Apache-2.0",
 	"main": "./dist/index.js",
@@ -197,7 +197,7 @@
 		"test:npm-workflows": "AGENTOS_NPM_WORKFLOWS_E2E=1 vitest run tests/integration/e2e-npm-*.nightly.test.ts tests/integration/e2e-npx-and-pipes.nightly.test.ts tests/integration/e2e-concurrently.nightly.test.ts tests/integration/e2e-nextjs-build.nightly.test.ts --reporter=verbose"
 	},
 	"dependencies": {
-		"@rivet-dev/agentos-runtime-sidecar": "0.2.14",
+		"@rivet-dev/agentos-runtime-sidecar": "0.2.15",
 		"@rivetkit/bare-ts": "^0.6.2",
 		"zod": "^4.1.11"
 	},