rivetkit 2.3.0-rc.9 → 2.3.1

package/dist/tsup/agent-os/index.js

@@ -1,1394 +1,1812 @@
-// src/agent-os/actor/db.ts
-async function migrateAgentOsTables(db2) {
-  await db2.execute(`
-		CREATE TABLE IF NOT EXISTS agent_os_preview_tokens (
-			token TEXT PRIMARY KEY,
-			port INTEGER NOT NULL,
-			created_at INTEGER NOT NULL,
-			expires_at INTEGER NOT NULL
-		);
-
-		CREATE INDEX IF NOT EXISTS idx_preview_tokens_expires_at
-			ON agent_os_preview_tokens(expires_at);
-
-		CREATE TABLE IF NOT EXISTS agent_os_fs_entries (
-			path TEXT PRIMARY KEY,
-			is_directory INTEGER NOT NULL DEFAULT 0,
-			content BLOB,
-			mode INTEGER NOT NULL DEFAULT 33188,
-			uid INTEGER NOT NULL DEFAULT 0,
-			gid INTEGER NOT NULL DEFAULT 0,
-			size INTEGER NOT NULL DEFAULT 0,
-			atime_ms INTEGER NOT NULL,
-			mtime_ms INTEGER NOT NULL,
-			ctime_ms INTEGER NOT NULL,
-			birthtime_ms INTEGER NOT NULL,
-			symlink_target TEXT,
-			nlink INTEGER NOT NULL DEFAULT 1
-		);
-
-		CREATE INDEX IF NOT EXISTS idx_fs_entries_parent
-			ON agent_os_fs_entries(path);
-
-		CREATE TABLE IF NOT EXISTS agent_os_sessions (
-			session_id TEXT PRIMARY KEY,
-			agent_type TEXT NOT NULL,
-			capabilities TEXT NOT NULL,
-			agent_info TEXT,
-			created_at INTEGER NOT NULL
-		);
-
-		CREATE TABLE IF NOT EXISTS agent_os_session_events (
-			id INTEGER PRIMARY KEY AUTOINCREMENT,
-			session_id TEXT NOT NULL,
-			seq INTEGER NOT NULL,
-			event TEXT NOT NULL,
-			created_at INTEGER NOT NULL,
-			FOREIGN KEY (session_id) REFERENCES agent_os_sessions(session_id) ON DELETE CASCADE
-		);
-
-		CREATE INDEX IF NOT EXISTS idx_session_events_session_seq
-			ON agent_os_session_events(session_id, seq);
-	`);
-}
+// src/agent-os/actor/index.ts
+import { AgentOs, createInMemoryFileSystem } from "@rivet-dev/agent-os-core";
 
-// src/agent-os/fs/database-vfs.ts
-import * as posixPath from "path/posix";
-var S_IFDIR = 16384;
-var S_IFREG = 32768;
-var S_IFLNK = 40960;
-var DEFAULT_FILE_MODE = S_IFREG | 420;
-var DEFAULT_DIR_MODE = S_IFDIR | 493;
-function normPath(p) {
-  const normalized = posixPath.normalize(`/${p}`);
-  if (normalized.length > 1 && normalized.endsWith("/")) {
-    return normalized.slice(0, -1);
-  }
-  return normalized;
-}
-function parentPath(p) {
-  const parent = posixPath.dirname(p);
-  return parent;
-}
-function throwENOENT(path) {
-  const err = new Error(`ENOENT: no such file or directory: ${path}`);
-  err.name = "ENOENT";
-  throw err;
-}
-function throwEEXIST(path) {
-  const err = new Error(`EEXIST: file already exists: ${path}`);
-  err.name = "EEXIST";
-  throw err;
-}
-function throwENOTDIR(path) {
-  const err = new Error(`ENOTDIR: not a directory: ${path}`);
-  err.name = "ENOTDIR";
-  throw err;
-}
-function throwEISDIR(path) {
-  const err = new Error(`EISDIR: illegal operation on a directory: ${path}`);
-  err.name = "EISDIR";
-  throw err;
-}
-function throwENOTEMPTY(path) {
-  const err = new Error(`ENOTEMPTY: directory not empty: ${path}`);
-  err.name = "ENOTEMPTY";
-  throw err;
-}
-function throwENOSYS(op) {
-  const err = new Error(`ENOSYS: function not implemented: ${op}`);
-  err.name = "ENOSYS";
-  throw err;
-}
-function rowToStat(row) {
-  return {
-    mode: row.mode,
-    size: row.size,
-    isDirectory: row.is_directory === 1,
-    isSymbolicLink: row.symlink_target !== null,
-    atimeMs: row.atime_ms,
-    mtimeMs: row.mtime_ms,
-    ctimeMs: row.ctime_ms,
-    birthtimeMs: row.birthtime_ms,
-    ino: 0,
-    nlink: row.nlink,
-    uid: row.uid,
-    gid: row.gid
-  };
-}
-function createDatabaseVfs(options) {
-  const { db: db2 } = options;
-  async function getEntry(path) {
-    const rows = await db2.execute(
-      "SELECT * FROM agent_os_fs_entries WHERE path = ?",
-      path
+// src/actor/config.ts
+import { z } from "zod/v4";
+var DEFAULT_SLEEP_GRACE_PERIOD = 15e3;
+var zFunction = () => z.custom((val) => typeof val === "function");
+var WorkflowInspectorConfigSchema = z.object({
+  getHistory: zFunction(),
+  onHistoryUpdated: zFunction().optional(),
+  replayFromStep: zFunction().optional()
+});
+var RunInspectorConfigSchema = z.object({
+  workflow: WorkflowInspectorConfigSchema.optional()
+}).optional();
+var BUILTIN_INSPECTOR_TAB_IDS = [
+  "workflow",
+  "database",
+  "state",
+  "queue",
+  "connections",
+  "console"
+];
+var BuiltinInspectorTabIdSchema = z.enum(BUILTIN_INSPECTOR_TAB_IDS);
+var CUSTOM_INSPECTOR_TAB_ID_RE = /^[A-Za-z0-9_-]+$/;
+var CustomInspectorTabEntrySchema = z.object({
+  id: z.string().regex(
+    CUSTOM_INSPECTOR_TAB_ID_RE,
+    "inspector.tabs[].id must contain only letters, digits, underscore, or dash"
+  ),
+  label: z.string().min(1),
+  source: z.string().min(1),
+  /**
+   * Optional icon id. The dashboard maps strings to glyphs (see its
+   * icon registry); unknown ids fall back to a generic icon.
+   */
+  icon: z.string().min(1).optional(),
+  hidden: z.literal(false).optional()
+}).strict();
+var HideInspectorTabEntrySchema = z.object({
+  id: BuiltinInspectorTabIdSchema,
+  hidden: z.literal(true)
+}).strict();
+var InspectorTabEntrySchema = z.union([
+  CustomInspectorTabEntrySchema,
+  HideInspectorTabEntrySchema
+]);
+var ActorInspectorConfigSchema = z.object({
+  tabs: z.array(InspectorTabEntrySchema).default(() => [])
+}).strict().refine(
+  (data) => {
+    const ids = data.tabs.map((t) => t.id);
+    return new Set(ids).size === ids.length;
+  },
+  { message: "Duplicate id in inspector.tabs", path: ["tabs"] }
+).refine(
+  (data) => {
+    const builtinSet = new Set(BUILTIN_INSPECTOR_TAB_IDS);
+    return data.tabs.every(
+      (t) => t.hidden === true || !builtinSet.has(t.id)
     );
-    return rows[0];
-  }
-  async function getEntryOrThrow(path) {
-    const entry = await getEntry(path);
-    if (!entry) {
-      throwENOENT(path);
-    }
-    return entry;
+  },
+  {
+    message: "Custom inspector tab id collides with a built-in (use hidden: true to hide a built-in)",
+    path: ["tabs"]
   }
-  async function ensureParentExists(path) {
-    const parent = parentPath(path);
-    if (parent === path) return;
-    const entry = await getEntry(parent);
-    if (!entry) {
-      throwENOENT(parent);
-    }
-    if (entry.is_directory !== 1) {
-      throwENOTDIR(parent);
-    }
+);
+var RunConfigSchema = z.object({
+  /** Display name for the actor in the Inspector UI. */
+  name: z.string().optional(),
+  /** Icon for the actor in the Inspector UI. Can be an emoji or FontAwesome icon name. */
+  icon: z.string().optional(),
+  /** The run handler function. */
+  run: zFunction(),
+  /** Inspector integration for long-running run handlers. */
+  inspector: RunInspectorConfigSchema.optional()
+});
+var zRunHandler = z.union([zFunction(), RunConfigSchema]).optional();
+var GlobalActorOptionsBaseSchema = z.object({
+  /** Display name for the actor in the Inspector UI. */
+  name: z.string().optional(),
+  /** Icon for the actor in the Inspector UI. Can be an emoji or FontAwesome icon name. */
+  icon: z.string().optional(),
+  /**
+   * Can hibernate WebSockets for onWebSocket.
+   *
+   * WebSockets using actions/events are hibernatable by default.
+   *
+   * @experimental
+   **/
+  canHibernateWebSocket: z.union([z.boolean(), zFunction()]).default(false)
+}).strict();
+var GlobalActorOptionsSchema = GlobalActorOptionsBaseSchema.prefault(
+  () => ({})
+);
+var InstanceActorOptionsBaseSchema = z.object({
+  createVarsTimeout: z.number().positive().default(5e3),
+  createConnStateTimeout: z.number().positive().default(5e3),
+  onBeforeConnectTimeout: z.number().positive().default(5e3),
+  onConnectTimeout: z.number().positive().default(5e3),
+  onMigrateTimeout: z.number().positive().default(3e4),
+  sleepGracePeriod: z.number().positive().default(DEFAULT_SLEEP_GRACE_PERIOD),
+  /** @deprecated `onDestroyTimeout` is folded into `sleepGracePeriod`, which now bounds the entire graceful shutdown window for both sleep and destroy. Will be removed in 2.2.0. */
+  onDestroyTimeout: z.number().positive().optional(),
+  /** @deprecated `waitUntilTimeout` is folded into `sleepGracePeriod`, which now bounds the entire graceful shutdown window for both sleep and destroy. Will be removed in 2.2.0. */
+  waitUntilTimeout: z.number().positive().optional(),
+  stateSaveInterval: z.number().positive().default(1e3),
+  actionTimeout: z.number().positive().default(6e4),
+  connectionLivenessTimeout: z.number().positive().default(2500),
+  connectionLivenessInterval: z.number().positive().default(5e3),
+  /** @deprecated Use `c.keepAwake(promise)` to scope keep-awake to a specific operation, or keep `noSleep` for actors that must stay awake indefinitely. Will be removed in 2.2.0. */
+  noSleep: z.boolean().default(false),
+  sleepTimeout: z.number().positive().default(3e4),
+  maxQueueSize: z.number().positive().default(1e3),
+  maxQueueMessageSize: z.number().positive().default(64 * 1024),
+  /** Override RivetKit's workflow preload budget for this actor. Set to 0 to disable workflow preloading. */
+  preloadMaxWorkflowBytes: z.number().nonnegative().optional(),
+  /** Override RivetKit's connections preload budget for this actor. Set to 0 to disable connections preloading. */
+  preloadMaxConnectionsBytes: z.number().nonnegative().optional()
+}).strict();
+var InstanceActorOptionsSchema = InstanceActorOptionsBaseSchema.prefault(() => ({}));
+var ActorOptionsSchema = GlobalActorOptionsBaseSchema.extend(
+  InstanceActorOptionsBaseSchema.shape
+).strict().prefault(() => ({}));
+var ActorConfigSchema = z.object({
+  onCreate: zFunction().optional(),
+  onDestroy: zFunction().optional(),
+  onMigrate: zFunction().optional(),
+  onWake: zFunction().optional(),
+  onSleep: zFunction().optional(),
+  run: zRunHandler,
+  onStateChange: zFunction().optional(),
+  onBeforeConnect: zFunction().optional(),
+  onConnect: zFunction().optional(),
+  onDisconnect: zFunction().optional(),
+  onBeforeActionResponse: zFunction().optional(),
+  onRequest: zFunction().optional(),
+  onWebSocket: zFunction().optional(),
+  actions: z.record(z.string(), zFunction()).default(() => ({})),
+  actionInputSchemas: z.record(z.string(), z.any()).optional(),
+  connParamsSchema: z.any().optional(),
+  events: z.record(z.string(), z.any()).optional(),
+  queues: z.record(z.string(), z.any()).optional(),
+  state: z.any().optional(),
+  createState: zFunction().optional(),
+  connState: z.any().optional(),
+  createConnState: zFunction().optional(),
+  vars: z.any().optional(),
+  db: z.any().optional(),
+  createVars: zFunction().optional(),
+  options: ActorOptionsSchema,
+  inspector: ActorInspectorConfigSchema.optional()
+}).strict().refine(
+  (data) => !(data.state !== void 0 && data.createState !== void 0),
+  {
+    message: "Cannot define both 'state' and 'createState'",
+    path: ["state"]
   }
-  async function getChildEntries(dirPath) {
-    const prefix = dirPath === "/" ? "/" : `${dirPath}/`;
-    const rows = await db2.execute(
-      "SELECT * FROM agent_os_fs_entries WHERE path LIKE ? AND path != ?",
-      `${prefix}%`,
-      dirPath
-    );
-    return rows.filter((row) => {
-      const relative = row.path.slice(prefix.length);
-      return relative.length > 0 && !relative.includes("/");
-    });
+).refine(
+  (data) => !(data.connState !== void 0 && data.createConnState !== void 0),
+  {
+    message: "Cannot define both 'connState' and 'createConnState'",
+    path: ["connState"]
   }
-  const rootInit = (async () => {
-    const root = await getEntry("/");
-    if (!root) {
-      const now = Date.now();
-      await db2.execute(
-        `INSERT OR IGNORE INTO agent_os_fs_entries (path, is_directory, content, mode, uid, gid, size, atime_ms, mtime_ms, ctime_ms, birthtime_ms, symlink_target, nlink) VALUES (?, 1, NULL, ?, 0, 0, 0, ?, ?, ?, ?, NULL, 2)`,
-        "/",
-        DEFAULT_DIR_MODE,
-        now,
-        now,
-        now,
-        now
-      );
-    }
-  })();
-  const backend = {
-    async readFile(p) {
-      await rootInit;
-      const path = normPath(p);
-      const entry = await getEntryOrThrow(path);
-      if (entry.is_directory === 1) {
-        throwEISDIR(path);
+).refine(
+  (data) => !(data.vars !== void 0 && data.createVars !== void 0),
+  {
+    message: "Cannot define both 'vars' and 'createVars'",
+    path: ["vars"]
+  }
+);
+var DocActorOptionsSchema = z.object({
+  name: z.string().optional().describe("Display name for the actor in the Inspector UI."),
+  icon: z.string().optional().describe(
+    "Icon for the actor in the Inspector UI. Can be an emoji (e.g., '\u{1F680}') or FontAwesome icon name (e.g., 'rocket')."
+  ),
+  createVarsTimeout: z.number().optional().describe("Timeout in ms for createVars handler. Default: 5000"),
+  createConnStateTimeout: z.number().optional().describe(
+    "Timeout in ms for createConnState handler. Default: 5000"
+  ),
+  onMigrateTimeout: z.number().optional().describe("Timeout in ms for onMigrate handler. Default: 30000"),
+  onBeforeConnectTimeout: z.number().optional().describe(
+    "Timeout in ms for onBeforeConnect handler. Default: 5000"
+  ),
+  onConnectTimeout: z.number().optional().describe("Timeout in ms for onConnect handler. Default: 5000"),
+  sleepGracePeriod: z.number().optional().describe(
+    `Max time in ms for the graceful shutdown window. Covers lifecycle hooks (onSleep, onDestroy), the run handler wait, async raw WebSocket handlers, disconnect callbacks, and final state serialization. Default: ${DEFAULT_SLEEP_GRACE_PERIOD}.`
+  ),
+  onDestroyTimeout: z.number().optional().describe(
+    "Deprecated. Folded into sleepGracePeriod, which now bounds the entire graceful shutdown window for both sleep and destroy. Will be removed in 2.2.0."
+  ),
+  waitUntilTimeout: z.number().optional().describe(
+    "Deprecated. Folded into sleepGracePeriod, which now bounds the entire graceful shutdown window for both sleep and destroy. Will be removed in 2.2.0."
+  ),
+  stateSaveInterval: z.number().optional().describe(
+    "Interval in ms between automatic state saves. Default: 1000"
+  ),
+  actionTimeout: z.number().optional().describe("Timeout in ms for action handlers. Default: 60000"),
+  connectionLivenessTimeout: z.number().optional().describe(
+    "Timeout in ms for connection liveness checks. Default: 2500"
+  ),
+  connectionLivenessInterval: z.number().optional().describe(
+    "Interval in ms between connection liveness checks. Default: 5000"
+  ),
+  noSleep: z.boolean().optional().describe(
+    "Deprecated. If true, the actor will never sleep. Use c.keepAwake(promise) to scope keep-awake to a specific operation instead. Default: false"
+  ),
+  sleepTimeout: z.number().optional().describe(
+    "Time in ms of inactivity before the actor sleeps. Default: 30000"
+  ),
+  maxQueueSize: z.number().optional().describe(
+    "Maximum number of queue messages before rejecting new messages. Default: 1000"
+  ),
+  maxQueueMessageSize: z.number().optional().describe(
+    "Maximum size of each queue message in bytes. Default: 65536"
+  ),
+  canHibernateWebSocket: z.boolean().optional().describe(
+    "Whether WebSockets using onWebSocket can be hibernated. WebSockets using actions/events are hibernatable by default. Default: false"
+  ),
+  preloadMaxWorkflowBytes: z.number().optional().describe(
+    "Override RivetKit's workflow preload budget for this actor. Set to 0 to disable workflow preloading."
+  ),
+  preloadMaxConnectionsBytes: z.number().optional().describe(
+    "Override RivetKit's connections preload budget for this actor. Set to 0 to disable connections preloading."
+  )
+}).describe("Actor options for timeouts and behavior configuration.");
+var DocActorConfigSchema = z.object({
+  state: z.unknown().optional().describe(
+    "Initial state value for the actor. Cannot be used with createState."
+  ),
+  createState: z.unknown().optional().describe(
+    "Function to create initial state. Receives context and input. Cannot be used with state."
+  ),
+  connState: z.unknown().optional().describe(
+    "Initial connection state value. Cannot be used with createConnState."
+  ),
+  createConnState: z.unknown().optional().describe(
+    "Function to create connection state. Receives context and connection params. The pending connection is not visible in c.conns until this succeeds. Cannot be used with connState."
+  ),
+  vars: z.unknown().optional().describe(
+    "Initial ephemeral variables value. Cannot be used with createVars."
+  ),
+  createVars: z.unknown().optional().describe(
+    "Function to create ephemeral variables. Receives context and driver context. Cannot be used with vars."
+  ),
+  db: z.unknown().optional().describe("Database provider instance for the actor."),
+  onCreate: z.unknown().optional().describe(
+    "Called when the actor is first initialized. Use to initialize state."
+  ),
+  onDestroy: z.unknown().optional().describe("Called when the actor is destroyed."),
+  onMigrate: z.unknown().optional().describe(
+    "Called on every actor start after persisted state loads and before onWake. Use for repeatable schema migrations."
+  ),
+  onWake: z.unknown().optional().describe(
+    "Called when the actor wakes up and is ready to receive connections and actions."
+  ),
+  onSleep: z.unknown().optional().describe(
+    "Called when the actor is stopping or sleeping. Use to clean up resources."
+  ),
+  run: z.unknown().optional().describe(
+    "Called after actor starts. Does not block startup. Use for background tasks like queue processing or tick loops. If it exits, the actor follows the normal idle sleep timeout once idle. If it throws, the actor logs the error and then follows the normal idle sleep timeout once idle."
+  ),
+  onStateChange: z.unknown().optional().describe(
+    "Called when the actor's state changes. State changes within this hook won't trigger recursion."
+  ),
+  onBeforeConnect: z.unknown().optional().describe(
+    "Called before a client connects. Throw an error to reject the connection. The pending connection is not visible in c.conns while this runs."
+  ),
+  onConnect: z.unknown().optional().describe(
+    "Called when a client successfully connects. The connection is visible in c.conns before this runs."
+  ),
+  onDisconnect: z.unknown().optional().describe("Called when a client disconnects."),
+  onBeforeActionResponse: z.unknown().optional().describe(
+    "Called before sending an action response. Use to transform output."
+  ),
+  onRequest: z.unknown().optional().describe(
+    "Called for raw HTTP requests to /actors/{name}/http/* endpoints."
+  ),
+  onWebSocket: z.unknown().optional().describe(
+    "Called for raw WebSocket connections to /actors/{name}/websocket/* endpoints."
+  ),
+  actions: z.record(z.string(), z.unknown()).optional().describe(
+    "Map of action name to handler function. Defaults to an empty object."
+  ),
+  actionInputSchemas: z.record(z.string(), z.unknown()).optional().describe(
+    "Optional schema map for validating action argument tuples in native runtimes."
+  ),
+  connParamsSchema: z.unknown().optional().describe(
+    "Optional schema for validating connection params in native runtimes."
+  ),
+  events: z.record(z.string(), z.unknown()).optional().describe("Map of event names to schemas."),
+  queues: z.record(z.string(), z.unknown()).optional().describe("Map of queue names to schemas."),
+  options: DocActorOptionsSchema.optional()
+}).describe("Actor configuration passed to the actor() function.");
+
+// src/common/log.ts
+import {
+  pino,
+  stdTimeFunctions
+} from "pino";
+import { z as z2 } from "zod/v4";
+
+// src/actor/errors.ts
+function isTypedErrorTag(value) {
+  return value === "ActorError" || value === "RivetError";
+}
+function isRivetErrorLike(error) {
+  return typeof error === "object" && error !== null && "group" in error && typeof error.group === "string" && "code" in error && typeof error.code === "string" && "message" in error && typeof error.message === "string" && (!("__type" in error) || isTypedErrorTag(error.__type));
+}
+function isRivetErrorCode(error, group, code) {
+  return isRivetErrorLike(error) && error.group === group && error.code === code;
+}
+
+// package.json
+var package_default = {
+  name: "rivetkit",
+  version: "2.3.1",
+  description: "Lightweight libraries for building stateful actors on edge platforms",
+  license: "Apache-2.0",
+  keywords: [
+    "rivetkit",
+    "stateful",
+    "serverless",
+    "actors",
+    "agents",
+    "realtime",
+    "websocket",
+    "actors",
+    "framework"
+  ],
+  files: [
+    "dist",
+    "schemas",
+    "src",
+    "package.json"
+  ],
+  type: "module",
+  exports: {
+    ".": {
+      import: {
+        types: "./dist/tsup/mod.d.ts",
+        default: "./dist/tsup/mod.js"
+      },
+      require: {
+        types: "./dist/tsup/mod.d.cts",
+        default: "./dist/tsup/mod.cjs"
       }
-      return entry.content ?? new Uint8Array(0);
-    },
-    async readTextFile(p) {
-      const data = await backend.readFile(p);
-      return new TextDecoder().decode(data);
     },
-    async readDir(p) {
-      await rootInit;
-      const path = normPath(p);
-      const entry = await getEntryOrThrow(path);
-      if (entry.is_directory !== 1) {
-        throwENOTDIR(path);
+    "./workflow": {
+      import: {
+        types: "./dist/tsup/workflow/mod.d.ts",
+        default: "./dist/tsup/workflow/mod.js"
+      },
+      require: {
+        types: "./dist/tsup/workflow/mod.d.cts",
+        default: "./dist/tsup/workflow/mod.cjs"
       }
-      const children = await getChildEntries(path);
-      return children.map((child) => posixPath.basename(child.path));
     },
-    async readDirWithTypes(p) {
-      await rootInit;
-      const path = normPath(p);
-      const entry = await getEntryOrThrow(path);
-      if (entry.is_directory !== 1) {
-        throwENOTDIR(path);
+    "./test": {
+      import: {
+        types: "./dist/tsup/test/mod.d.ts",
+        default: "./dist/tsup/test/mod.js"
+      },
+      require: {
+        types: "./dist/tsup/test/mod.d.cts",
+        default: "./dist/tsup/test/mod.cjs"
       }
-      const children = await getChildEntries(path);
-      return children.map((child) => ({
-        name: posixPath.basename(child.path),
-        isDirectory: child.is_directory === 1,
-        isSymbolicLink: child.symlink_target !== null,
-        ino: 0
-      }));
     },
-    async writeFile(p, content) {
-      await rootInit;
-      const path = normPath(p);
-      await ensureParentExists(path);
-      const existing = await getEntry(path);
-      if (existing && existing.is_directory === 1) {
-        throwEISDIR(path);
-      }
-      const data = typeof content === "string" ? new TextEncoder().encode(content) : content;
-      const now = Date.now();
-      if (existing) {
-        await db2.execute(
-          `UPDATE agent_os_fs_entries SET content = ?, size = ?, mtime_ms = ?, ctime_ms = ?, atime_ms = ? WHERE path = ?`,
-          data,
-          data.byteLength,
-          now,
-          now,
-          now,
-          path
-        );
-      } else {
-        await db2.execute(
-          `INSERT INTO agent_os_fs_entries (path, is_directory, content, mode, uid, gid, size, atime_ms, mtime_ms, ctime_ms, birthtime_ms, symlink_target, nlink) VALUES (?, 0, ?, ?, 0, 0, ?, ?, ?, ?, ?, NULL, 1)`,
-          path,
-          data,
-          DEFAULT_FILE_MODE,
-          data.byteLength,
-          now,
-          now,
-          now,
-          now
-        );
+    "./db": {
+      import: {
+        types: "./dist/tsup/db/mod.d.ts",
+        default: "./dist/tsup/db/mod.js"
+      },
+      require: {
+        types: "./dist/tsup/db/mod.d.cts",
+        default: "./dist/tsup/db/mod.cjs"
       }
     },
-    async createDir(p) {
-      await rootInit;
-      const path = normPath(p);
-      await ensureParentExists(path);
-      const existing = await getEntry(path);
-      if (existing) {
-        throwEEXIST(path);
+    "./db/drizzle": {
+      import: {
+        types: "./dist/tsup/db/drizzle.d.ts",
+        default: "./dist/tsup/db/drizzle.js"
+      },
+      require: {
+        types: "./dist/tsup/db/drizzle.d.cts",
+        default: "./dist/tsup/db/drizzle.cjs"
       }
-      const now = Date.now();
-      await db2.execute(
-        `INSERT INTO agent_os_fs_entries (path, is_directory, content, mode, uid, gid, size, atime_ms, mtime_ms, ctime_ms, birthtime_ms, symlink_target, nlink) VALUES (?, 1, NULL, ?, 0, 0, 0, ?, ?, ?, ?, NULL, 2)`,
-        path,
-        DEFAULT_DIR_MODE,
-        now,
-        now,
-        now,
-        now
-      );
     },
-    async mkdir(p, options2) {
-      await rootInit;
-      const path = normPath(p);
-      if (options2 == null ? void 0 : options2.recursive) {
-        const parts = path.split("/").filter(Boolean);
-        let current = "";
-        for (const part of parts) {
-          current += `/${part}`;
-          const existing = await getEntry(current);
-          if (!existing) {
-            const now = Date.now();
-            await db2.execute(
-              `INSERT INTO agent_os_fs_entries (path, is_directory, content, mode, uid, gid, size, atime_ms, mtime_ms, ctime_ms, birthtime_ms, symlink_target, nlink) VALUES (?, 1, NULL, ?, 0, 0, 0, ?, ?, ?, ?, NULL, 2)`,
-              current,
-              DEFAULT_DIR_MODE,
-              now,
-              now,
-              now,
-              now
-            );
-          } else if (existing.is_directory !== 1) {
-            throwENOTDIR(current);
-          }
-        }
-      } else {
-        await backend.createDir(p);
+    "./dynamic": {
+      import: {
+        types: "./dist/tsup/dynamic/mod.d.ts",
+        default: "./dist/tsup/dynamic/mod.js"
+      },
+      require: {
+        types: "./dist/tsup/dynamic/mod.d.cts",
+        default: "./dist/tsup/dynamic/mod.cjs"
       }
     },
-    async exists(p) {
-      await rootInit;
-      const path = normPath(p);
-      const entry = await getEntry(path);
-      return entry !== void 0;
-    },
-    async stat(p) {
-      await rootInit;
-      const path = normPath(p);
-      const entry = await getEntryOrThrow(path);
-      return rowToStat(entry);
-    },
-    async removeFile(p) {
-      await rootInit;
-      const path = normPath(p);
-      const entry = await getEntryOrThrow(path);
-      if (entry.is_directory === 1) {
-        throwEISDIR(path);
+    "./client": {
+      import: {
+        browser: {
+          types: "./dist/browser/client.d.ts",
+          default: "./dist/browser/client.js"
+        },
+        types: "./dist/tsup/client/mod.d.ts",
+        default: "./dist/tsup/client/mod.js"
+      },
+      require: {
+        types: "./dist/tsup/client/mod.d.cts",
+        default: "./dist/tsup/client/mod.cjs"
       }
-      await db2.execute(
-        "DELETE FROM agent_os_fs_entries WHERE path = ?",
-        path
-      );
     },
-    async removeDir(p) {
-      await rootInit;
-      const path = normPath(p);
-      const entry = await getEntryOrThrow(path);
-      if (entry.is_directory !== 1) {
-        throwENOTDIR(path);
-      }
-      const children = await getChildEntries(path);
-      if (children.length > 0) {
-        throwENOTEMPTY(path);
+    "./log": {
+      import: {
+        types: "./dist/tsup/common/log.d.ts",
+        default: "./dist/tsup/common/log.js"
+      },
+      require: {
+        types: "./dist/tsup/common/log.d.cts",
+        default: "./dist/tsup/common/log.cjs"
       }
-      await db2.execute(
-        "DELETE FROM agent_os_fs_entries WHERE path = ?",
-        path
-      );
     },
-    async rename(oldPath, newPath) {
-      await rootInit;
-      const from = normPath(oldPath);
-      const to = normPath(newPath);
-      const entry = await getEntryOrThrow(from);
-      await ensureParentExists(to);
-      const destEntry = await getEntry(to);
-      if (destEntry) {
-        if (destEntry.is_directory === 1) {
-          const children = await getChildEntries(to);
-          if (children.length > 0) {
-            throwENOTEMPTY(to);
-          }
-        }
-        await db2.execute(
-          "DELETE FROM agent_os_fs_entries WHERE path = ?",
-          to
-        );
-      }
-      if (entry.is_directory === 1) {
-        const prefix = from === "/" ? "/" : `${from}/`;
-        const newPrefix = to === "/" ? "/" : `${to}/`;
-        const descendants = await db2.execute(
-          "SELECT path FROM agent_os_fs_entries WHERE path LIKE ?",
-          `${prefix}%`
-        );
-        for (const desc of descendants) {
-          const newDescPath = newPrefix + desc.path.slice(prefix.length);
-          await db2.execute(
-            "UPDATE agent_os_fs_entries SET path = ? WHERE path = ?",
-            newDescPath,
-            desc.path
-          );
-        }
+    "./errors": {
+      import: {
+        types: "./dist/tsup/actor/errors.d.ts",
+        default: "./dist/tsup/actor/errors.js"
+      },
+      require: {
+        types: "./dist/tsup/actor/errors.d.cts",
+        default: "./dist/tsup/actor/errors.cjs"
       }
-      const now = Date.now();
-      await db2.execute(
-        "UPDATE agent_os_fs_entries SET path = ?, ctime_ms = ? WHERE path = ?",
-        to,
-        now,
-        from
-      );
     },
-    async realpath(p) {
-      await rootInit;
-      const path = normPath(p);
-      const entry = await getEntryOrThrow(path);
-      if (entry.symlink_target !== null) {
-        return normPath(entry.symlink_target);
+    "./inspector": {
+      import: {
+        types: "./dist/tsup/inspector/mod.d.ts",
+        default: "./dist/tsup/inspector/mod.js"
+      },
+      require: {
+        types: "./dist/tsup/inspector/mod.d.cts",
+        default: "./dist/tsup/inspector/mod.cjs"
       }
-      return path;
     },
-    async symlink(target, linkPath) {
-      await rootInit;
-      const link = normPath(linkPath);
-      await ensureParentExists(link);
-      const existing = await getEntry(link);
-      if (existing) {
-        throwEEXIST(link);
+    "./inspector-tab": {
+      import: {
+        types: "./dist/tsup/inspector-tab/mod.d.ts",
+        default: "./dist/tsup/inspector-tab/mod.js"
+      },
+      require: {
+        types: "./dist/tsup/inspector-tab/mod.d.cts",
+        default: "./dist/tsup/inspector-tab/mod.cjs"
       }
-      const now = Date.now();
-      await db2.execute(
-        `INSERT INTO agent_os_fs_entries (path, is_directory, content, mode, uid, gid, size, atime_ms, mtime_ms, ctime_ms, birthtime_ms, symlink_target, nlink) VALUES (?, 0, NULL, ?, 0, 0, ?, ?, ?, ?, ?, ?, 1)`,
-        link,
-        S_IFLNK | 511,
-        target.length,
-        now,
-        now,
-        now,
-        now,
-        target
-      );
     },
-    async readlink(p) {
-      await rootInit;
-      const path = normPath(p);
-      const entry = await getEntryOrThrow(path);
-      if (entry.symlink_target === null) {
-        const err = new Error(`EINVAL: not a symlink: ${path}`);
-        err.name = "EINVAL";
-        throw err;
+    "./inspector/client": {
+      import: {
+        types: "./dist/browser/inspector/client.d.ts",
+        default: "./dist/browser/inspector/client.js"
       }
-      return entry.symlink_target;
     },
-    async lstat(p) {
-      return backend.stat(p);
-    },
-    async link(oldPath, newPath) {
-      throwENOSYS("link");
-    },
-    async chmod(p, mode) {
-      await rootInit;
-      const path = normPath(p);
-      await getEntryOrThrow(path);
-      const now = Date.now();
-      await db2.execute(
-        "UPDATE agent_os_fs_entries SET mode = ?, ctime_ms = ? WHERE path = ?",
-        mode,
-        now,
-        path
-      );
-    },
-    async chown(p, uid, gid) {
-      await rootInit;
-      const path = normPath(p);
-      await getEntryOrThrow(path);
-      const now = Date.now();
-      await db2.execute(
-        "UPDATE agent_os_fs_entries SET uid = ?, gid = ?, ctime_ms = ? WHERE path = ?",
-        uid,
-        gid,
-        now,
-        path
-      );
-    },
-    async utimes(p, atime, mtime) {
-      await rootInit;
-      const path = normPath(p);
-      await getEntryOrThrow(path);
-      const now = Date.now();
-      await db2.execute(
-        "UPDATE agent_os_fs_entries SET atime_ms = ?, mtime_ms = ?, ctime_ms = ? WHERE path = ?",
-        atime,
-        mtime,
-        now,
-        path
-      );
-    },
-    async truncate(p, length) {
-      await rootInit;
-      const path = normPath(p);
-      const entry = await getEntryOrThrow(path);
-      if (entry.is_directory === 1) {
-        throwEISDIR(path);
-      }
-      const existing = entry.content ?? new Uint8Array(0);
-      let newContent;
-      if (length >= existing.byteLength) {
-        newContent = new Uint8Array(length);
-        newContent.set(existing);
-      } else {
-        newContent = existing.slice(0, length);
+    "./utils": {
+      import: {
+        types: "./dist/tsup/utils.d.ts",
+        default: "./dist/tsup/utils.js"
+      },
+      require: {
+        types: "./dist/tsup/utils.d.cts",
+        default: "./dist/tsup/utils.cjs"
       }
-      const now = Date.now();
-      await db2.execute(
-        "UPDATE agent_os_fs_entries SET content = ?, size = ?, mtime_ms = ?, ctime_ms = ? WHERE path = ?",
-        newContent,
-        length,
-        now,
-        now,
-        path
-      );
     },
-    async pread(p, offset, length) {
-      await rootInit;
-      const path = normPath(p);
-      const entry = await getEntryOrThrow(path);
-      if (entry.is_directory === 1) {
-        throwEISDIR(path);
-      }
-      const content = entry.content ?? new Uint8Array(0);
-      const end = Math.min(offset + length, content.byteLength);
-      if (offset >= content.byteLength) {
-        return new Uint8Array(0);
+    "./agent-os": {
+      import: {
+        types: "./dist/tsup/agent-os/index.d.ts",
+        default: "./dist/tsup/agent-os/index.js"
+      },
+      require: {
+        types: "./dist/tsup/agent-os/index.d.cts",
+        default: "./dist/tsup/agent-os/index.cjs"
       }
-      return content.slice(offset, end);
+    }
+  },
+  engines: {
+    node: ">=22.0.0"
+  },
+  sideEffects: [
+    "./dist/tsup/chunk-*.js",
+    "./dist/tsup/chunk-*.cjs"
+  ],
+  scripts: {
+    build: "tsup src/mod.ts src/client/mod.ts src/common/log.ts src/common/websocket.ts src/actor/errors.ts src/utils.ts src/workflow/mod.ts src/test/mod.ts src/inspector/mod.ts src/inspector-tab/mod.ts src/db/mod.ts src/db/drizzle.ts src/dynamic/mod.ts && tsup src/agent-os/index.ts --no-clean --out-dir dist/tsup/agent-os",
+    "build:browser": "tsup --config tsup.browser.config.ts",
+    "check-types": "tsc --noEmit",
+    lint: "biome check . && pnpm run check:test-skips && pnpm run check:wait-for-comments",
+    "lint:fix": "biome check --write .",
+    "check:test-skips": "tsx scripts/check-annotated-skips.ts",
+    "check:wait-for-comments": "tsx scripts/check-wait-for-comments.ts",
+    format: "biome format .",
+    "format:write": "biome format --write .",
+    test: "vitest run",
+    "test:platforms": "pnpm run build && RIVETKIT_INCLUDE_PLATFORM_TESTS=1 vitest run tests/platforms --passWithNoTests",
+    "test:watch": "vitest",
+    "dump-asyncapi": "tsx scripts/dump-asyncapi.ts",
+    "registry-config-schema-gen": "tsx scripts/registry-config-schema-gen.ts",
+    "actor-config-schema-gen": "tsx scripts/actor-config-schema-gen.ts"
+  },
+  dependencies: {
+    "@hono/zod-openapi": "^1.1.5",
+    "@rivet-dev/agent-os-core": "^0.1.1",
+    "@rivetkit/bare-ts": "^0.6.2",
+    "@rivetkit/engine-cli": "workspace:*",
+    "@rivetkit/engine-envoy-protocol": "workspace:*",
+    "@rivetkit/on-change": "6.0.1",
+    "@rivetkit/rivetkit-napi": "workspace:*",
+    "@rivetkit/rivetkit-wasm": "workspace:*",
+    "@rivetkit/traces": "workspace:*",
+    "@rivetkit/virtual-websocket": "workspace:*",
+    "@rivetkit/workflow-engine": "workspace:*",
+    "cbor-x": "^1.6.0",
+    "drizzle-orm": "^0.44.2",
+    hono: "^4.7.0",
+    invariant: "^2.2.4",
+    "p-retry": "^6.2.1",
+    pino: "^9.5.0",
+    uuid: "^12.0.0",
+    vbare: "^0.0.4",
+    zod: "^4.1.0"
+  },
+  devDependencies: {
+    "@biomejs/biome": "^2.3",
+    "@copilotkit/llmock": "^1.6.0",
+    "@hono/node-server": "^1.18.2",
+    "@hono/node-ws": "^1.1.1",
+    "@rivet-dev/agent-os-common": "*",
+    "@rivet-dev/agent-os-pi": "^0.1.1",
+    "@standard-schema/spec": "^1.0.0",
+    "@types/invariant": "^2",
+    "@types/node": "^22.13.1",
+    eventsource: "^4.0.0",
+    "get-port": "^7.1.0",
+    tsup: "^8.4.0",
+    tsx: "^4.19.4",
+    typescript: "^5.7.3",
+    "vite-tsconfig-paths": "^5.1.4",
+    vitest: "^3.1.1",
+    ws: "^8.18.1"
+  },
+  peerDependencies: {
+    "drizzle-kit": "^0.31.2",
+    eventsource: "^4.0.0",
+    ws: "^8.0.0"
+  },
+  peerDependenciesMeta: {
+    "drizzle-kit": {
+      optional: true
     },
-    async pwrite(p, offset, data) {
-      await rootInit;
-      const path = normPath(p);
-      const entry = await getEntryOrThrow(path);
-      if (entry.is_directory === 1) {
-        throwEISDIR(path);
-      }
-      const content = entry.content ?? new Uint8Array(0);
-      const end = offset + data.byteLength;
-      const newSize = Math.max(content.byteLength, end);
-      const buf = new Uint8Array(newSize);
-      buf.set(content);
-      buf.set(data, offset);
-      const now = Date.now();
-      await db2.execute(
-        `UPDATE agent_os_fs_entries SET content = ?, size = ?, mtime_ms = ?, ctime_ms = ? WHERE path = ?`,
-        buf,
-        newSize,
-        now,
-        now,
-        path
-      );
+    eventsource: {
+      optional: true
+    },
+    ws: {
+      optional: true
     }
-  };
-  return backend;
+  },
+  stableVersion: "0.8.0"
+};
+
+// src/utils.ts
+var VERSION = package_default.version;
+function getEnvUniversal(key) {
+  if (typeof Deno !== "undefined") {
+    return Deno.env.get(key);
+  } else if (typeof process !== "undefined") {
+    return process.env[key];
+  }
 }
 
-// src/agent-os/actor/index.ts
-import { AgentOs, createInMemoryFileSystem } from "@rivet-dev/agent-os-core";
+// src/utils/env-vars.ts
+var getLogLevel = () => getEnvUniversal("RIVET_LOG_LEVEL") ?? getEnvUniversal("LOG_LEVEL");
+var getLogTarget = () => getEnvUniversal("RIVET_LOG_TARGET") === "1";
+var getLogTimestamp = () => getEnvUniversal("RIVET_LOG_TIMESTAMP") === "1";
 
-// src/actor/config.ts
-import { z } from "zod/v4";
-var DEFAULT_SLEEP_GRACE_PERIOD = 15e3;
-var zFunction = () => z.custom((val) => typeof val === "function");
-var WorkflowInspectorConfigSchema = z.object({
-  getHistory: zFunction(),
-  onHistoryUpdated: zFunction().optional(),
-  replayFromStep: zFunction().optional()
-});
-var RunInspectorConfigSchema = z.object({
-  workflow: WorkflowInspectorConfigSchema.optional()
-}).optional();
-var RunConfigSchema = z.object({
-  /** Display name for the actor in the Inspector UI. */
-  name: z.string().optional(),
-  /** Icon for the actor in the Inspector UI. Can be an emoji or FontAwesome icon name. */
-  icon: z.string().optional(),
-  /** The run handler function. */
-  run: zFunction(),
-  /** Inspector integration for long-running run handlers. */
-  inspector: RunInspectorConfigSchema.optional()
-});
-var zRunHandler = z.union([zFunction(), RunConfigSchema]).optional();
-var GlobalActorOptionsBaseSchema = z.object({
-  /** Display name for the actor in the Inspector UI. */
-  name: z.string().optional(),
-  /** Icon for the actor in the Inspector UI. Can be an emoji or FontAwesome icon name. */
-  icon: z.string().optional(),
-  /**
-   * Can hibernate WebSockets for onWebSocket.
-   *
-   * WebSockets using actions/events are hibernatable by default.
-   *
-   * @experimental
-   **/
-  canHibernateWebSocket: z.union([z.boolean(), zFunction()]).default(false)
-}).strict();
-var GlobalActorOptionsSchema = GlobalActorOptionsBaseSchema.prefault(
-  () => ({})
-);
-var InstanceActorOptionsBaseSchema = z.object({
-  createVarsTimeout: z.number().positive().default(5e3),
-  createConnStateTimeout: z.number().positive().default(5e3),
-  onBeforeConnectTimeout: z.number().positive().default(5e3),
-  onConnectTimeout: z.number().positive().default(5e3),
-  onMigrateTimeout: z.number().positive().default(3e4),
-  sleepGracePeriod: z.number().positive().default(DEFAULT_SLEEP_GRACE_PERIOD),
-  /** @deprecated `onDestroyTimeout` is folded into `sleepGracePeriod`, which now bounds the entire graceful shutdown window for both sleep and destroy. Will be removed in 2.2.0. */
-  onDestroyTimeout: z.number().positive().optional(),
-  /** @deprecated `waitUntilTimeout` is folded into `sleepGracePeriod`, which now bounds the entire graceful shutdown window for both sleep and destroy. Will be removed in 2.2.0. */
-  waitUntilTimeout: z.number().positive().optional(),
-  stateSaveInterval: z.number().positive().default(1e3),
-  actionTimeout: z.number().positive().default(6e4),
-  connectionLivenessTimeout: z.number().positive().default(2500),
-  connectionLivenessInterval: z.number().positive().default(5e3),
-  /** @deprecated Use `c.keepAwake(promise)` to scope keep-awake to a specific operation, or keep `noSleep` for actors that must stay awake indefinitely. Will be removed in 2.2.0. */
-  noSleep: z.boolean().default(false),
-  sleepTimeout: z.number().positive().default(3e4),
-  maxQueueSize: z.number().positive().default(1e3),
-  maxQueueMessageSize: z.number().positive().default(64 * 1024),
-  /** Override RivetKit's workflow preload budget for this actor. Set to 0 to disable workflow preloading. */
-  preloadMaxWorkflowBytes: z.number().nonnegative().optional(),
-  /** Override RivetKit's connections preload budget for this actor. Set to 0 to disable connections preloading. */
-  preloadMaxConnectionsBytes: z.number().nonnegative().optional()
-}).strict();
-var InstanceActorOptionsSchema = InstanceActorOptionsBaseSchema.prefault(() => ({}));
-var ActorOptionsSchema = GlobalActorOptionsBaseSchema.extend(
-  InstanceActorOptionsBaseSchema.shape
-).strict().prefault(() => ({}));
-var ActorConfigSchema = z.object({
-  onCreate: zFunction().optional(),
-  onDestroy: zFunction().optional(),
-  onMigrate: zFunction().optional(),
-  onWake: zFunction().optional(),
-  onSleep: zFunction().optional(),
-  run: zRunHandler,
-  onStateChange: zFunction().optional(),
-  onBeforeConnect: zFunction().optional(),
-  onConnect: zFunction().optional(),
-  onDisconnect: zFunction().optional(),
-  onBeforeActionResponse: zFunction().optional(),
-  onRequest: zFunction().optional(),
-  onWebSocket: zFunction().optional(),
-  actions: z.record(z.string(), zFunction()).default(() => ({})),
-  actionInputSchemas: z.record(z.string(), z.any()).optional(),
-  connParamsSchema: z.any().optional(),
-  events: z.record(z.string(), z.any()).optional(),
-  queues: z.record(z.string(), z.any()).optional(),
-  state: z.any().optional(),
-  createState: zFunction().optional(),
-  connState: z.any().optional(),
-  createConnState: zFunction().optional(),
-  vars: z.any().optional(),
-  db: z.any().optional(),
-  createVars: zFunction().optional(),
-  options: ActorOptionsSchema
-}).strict().refine(
-  (data) => !(data.state !== void 0 && data.createState !== void 0),
-  {
-    message: "Cannot define both 'state' and 'createState'",
-    path: ["state"]
+// src/common/log.ts
+var baseLogger;
+var configuredLogLevel;
+var loggerCache = /* @__PURE__ */ new Map();
+var LogLevelSchema = z2.enum([
+  "trace",
+  "debug",
+  "info",
+  "warn",
+  "error",
+  "fatal",
+  "silent"
+]);
+function getPinoLevel(logLevel) {
+  if (logLevel) {
+    return logLevel;
   }
-).refine(
-  (data) => !(data.connState !== void 0 && data.createConnState !== void 0),
-  {
-    message: "Cannot define both 'connState' and 'createConnState'",
-    path: ["connState"]
+  if (configuredLogLevel) {
+    return configuredLogLevel;
+  }
+  const raw = (getLogLevel() || "warn").toString().toLowerCase();
+  const parsed = LogLevelSchema.safeParse(raw);
+  if (parsed.success) {
+    return parsed.data;
+  }
+  return "info";
+}
+function getIncludeTarget() {
+  return getLogTarget();
+}
+function configureDefaultLogger(logLevel) {
+  if (logLevel) {
+    configuredLogLevel = logLevel;
+  }
+  baseLogger = pino(
+    {
+      level: getPinoLevel(logLevel),
+      messageKey: "msg",
+      // Do not include pid/hostname in output
+      base: {},
+      errorKey: "error",
+      // Keep the numeric level so the logfmt sink can match Pino's levels.
+      formatters: {
+        level(_label, number) {
+          return { level: number };
+        }
+      },
+      timestamp: getLogTimestamp() ? stdTimeFunctions.epochTime : false
+    },
+    createLogfmtDestination()
+  );
+  loggerCache.clear();
+}
+function getBaseLogger() {
+  if (!baseLogger) {
+    configureDefaultLogger();
+  }
+  return baseLogger;
+}
+function getLogger(name = "default") {
+  const cached = loggerCache.get(name);
+  if (cached) {
+    return cached;
+  }
+  const base = getBaseLogger();
+  const child = getIncludeTarget() ? base.child({ target: name }) : base;
+  loggerCache.set(name, child);
+  return child;
+}
+var PINO_LEVEL_LABELS = {
+  10: "trace",
+  20: "debug",
+  30: "info",
+  40: "warn",
+  50: "error",
+  60: "fatal"
+};
+function createLogfmtDestination() {
+  return {
+    write(msg) {
+      var _a;
+      const line = formatLogfmtLine(msg);
+      if (typeof process !== "undefined" && ((_a = process.stdout) == null ? void 0 : _a.write)) {
+        process.stdout.write(`${line}
+`);
+      } else {
+        console.log(line);
+      }
+    }
+  };
+}
+function formatLogfmtLine(raw) {
+  let data;
+  try {
+    data = JSON.parse(raw);
+  } catch {
+    return raw.trimEnd();
+  }
+  const parts = [];
+  appendLogfmtEntry(parts, "level", formatPinoLevel(data.level));
+  if (data.time !== void 0) {
+    appendLogfmtEntry(parts, "ts", data.time);
+  }
+  for (const [key, value] of Object.entries(data)) {
+    if (key === "level" || key === "time") {
+      continue;
+    }
+    appendLogfmtEntry(parts, key, value);
+  }
+  return parts.join(" ");
+}
+function formatPinoLevel(level) {
+  if (typeof level === "number") {
+    return PINO_LEVEL_LABELS[level] ?? level.toString();
+  }
+  if (typeof level === "string") {
+    return level.toLowerCase();
+  }
+  return "info";
+}
+function appendLogfmtEntry(parts, key, value) {
+  const safeKey = key.replace(/[\s="]/g, "");
+  if (safeKey.length === 0) {
+    return;
+  }
+  parts.push(`${safeKey}=${formatLogfmtValue(value)}`);
+}
+function formatLogfmtValue(value) {
+  if (typeof value === "number" || typeof value === "boolean") {
+    return String(value);
+  }
+  if (value === null || value === void 0) {
+    return "null";
+  }
+  if (typeof value === "string") {
+    return quoteLogfmtString(value);
+  }
+  return quoteLogfmtString(JSON.stringify(value));
+}
+function quoteLogfmtString(value) {
+  if (!/[\s="]/.test(value)) {
+    return value;
+  }
+  return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\n/g, "\\n")}"`;
+}
+
+// src/actor/log.ts
+function loggerWithoutContext() {
+  return getLogger("actor-runtime");
+}
+
+// src/actor/definition.ts
+var warnedDeprecatedTimeoutKeys = /* @__PURE__ */ new Set();
+function warnDeprecatedShutdownTimeoutKeys(options) {
+  if (!options || typeof options !== "object") return;
+  const opts = options;
+  for (const key of ["onDestroyTimeout", "waitUntilTimeout"]) {
+    if (opts[key] !== void 0 && !warnedDeprecatedTimeoutKeys.has(key)) {
+      warnedDeprecatedTimeoutKeys.add(key);
+      loggerWithoutContext().warn({
+        msg: `actor option \`${key}\` is deprecated and is now ignored. Configure \`sleepGracePeriod\` instead, which bounds the entire graceful shutdown window for both sleep and destroy. Will be removed in 2.2.0.`
+      });
+    }
+  }
+}
+var ActorDefinition = class {
+  #config;
+  constructor(config) {
+    this.#config = config;
+  }
+  get config() {
+    return this.#config;
+  }
+};
+function actor(input) {
+  warnDeprecatedShutdownTimeoutKeys(
+    input == null ? void 0 : input.options
+  );
+  const config = ActorConfigSchema.parse(input);
+  return new ActorDefinition(config);
+}
+
+// src/actor/schema.ts
+function event(options) {
+  return options ?? {};
+}
+
+// src/common/database/shared.ts
+function isSqliteBindingValue(value) {
+  if (value === null || typeof value === "number" || typeof value === "string" || typeof value === "bigint" || value instanceof Uint8Array) {
+    return true;
+  }
+  if (Array.isArray(value)) {
+    return value.every((item) => typeof item === "number");
+  }
+  return false;
+}
+function isPlainObject(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return false;
+  }
+  return Object.getPrototypeOf(value) === Object.prototype;
+}
+function isSqliteBindingObject(value) {
+  if (!isPlainObject(value)) {
+    return false;
+  }
+  return Object.values(value).every((entry) => isSqliteBindingValue(entry));
+}
+function toSqliteBindings(input) {
+  if (Array.isArray(input)) {
+    for (const value of input) {
+      if (!isSqliteBindingValue(value)) {
+        throw new Error(
+          `unsupported sqlite binding type: ${typeof value}`
+        );
+      }
+    }
+    return input;
+  }
+  if (isSqliteBindingObject(input)) {
+    return input;
+  }
+  throw new Error("unsupported sqlite binding collection");
+}
+
+// src/common/database/mod.ts
+function hasMultipleStatements(query) {
+  const trimmed = query.trim().replace(/;+$/, "").trimEnd();
+  return trimmed.includes(";");
+}
+function db({
+  onMigrate
+} = {}) {
+  return {
+    createClient: async (ctx) => {
+      const nativeDatabaseProvider = ctx.nativeDatabaseProvider;
+      if (!nativeDatabaseProvider) {
+        throw new Error(
+          "native SQLite is required, but the current runtime did not provide a native database provider"
+        );
+      }
+      const db2 = await nativeDatabaseProvider.open(ctx.actorId);
+      let closed = false;
+      const ensureOpen = () => {
+        if (closed) {
+          throw new Error(
+            "Database is closed. This usually means a background timer (setInterval, setTimeout) or a stray promise is still running after the actor stopped. Use c.abortSignal to clean up timers before the actor shuts down."
+          );
+        }
+      };
+      const client = {
+        execute: async (query, ...args) => {
+          var _a, _b, _c, _d;
+          ensureOpen();
+          const kvReadsBefore = ((_a = ctx.metrics) == null ? void 0 : _a.totalKvReads) ?? 0;
+          const kvWritesBefore = ((_b = ctx.metrics) == null ? void 0 : _b.totalKvWrites) ?? 0;
+          const start = performance.now();
+          try {
+            if (args.length > 0) {
+              const bindings = args.length === 1 && isSqliteBindingObject(args[0]) ? toSqliteBindings(args[0]) : toSqliteBindings(args);
+              const { rows, columns } = await db2.execute(
+                query,
+                bindings
+              );
+              return rows.map(
+                (row) => rowToObject(row, columns)
+              );
+            }
+            if (!hasMultipleStatements(query)) {
+              const { rows, columns } = await db2.execute(query);
+              return rows.map(
+                (row) => rowToObject(row, columns)
+              );
+            }
+            return await execMultiStatement(db2, query);
+          } finally {
+            const durationMs = performance.now() - start;
+            (_c = ctx.metrics) == null ? void 0 : _c.trackSql(query, durationMs);
+            if (ctx.metrics) {
+              const kvReads = ctx.metrics.totalKvReads - kvReadsBefore;
+              const kvWrites = ctx.metrics.totalKvWrites - kvWritesBefore;
+              (_d = ctx.log) == null ? void 0 : _d.debug({
+                msg: "sql query",
+                query: query.slice(0, 120),
+                durationMs,
+                kvReads,
+                kvWrites
+              });
+            }
+          }
+        },
+        close: async () => {
+          if (!closed) {
+            closed = true;
+            await db2.close();
+          }
+        },
+        nativeMetrics: () => {
+          var _a;
+          return ((_a = db2.nativeMetrics) == null ? void 0 : _a.call(db2)) ?? null;
+        }
+      };
+      return client;
+    },
+    onMigrate: async (client) => {
+      if (onMigrate) {
+        await withMigrationSavepoint(client, () => onMigrate(client));
+      }
+    }
+  };
+}
+function rowToObject(row, columns) {
+  const rowObj = {};
+  for (let i = 0; i < columns.length; i++) {
+    rowObj[columns[i]] = row[i];
   }
-).refine(
-  (data) => !(data.vars !== void 0 && data.createVars !== void 0),
-  {
-    message: "Cannot define both 'vars' and 'createVars'",
-    path: ["vars"]
+  return rowObj;
+}
+async function execMultiStatement(db2, query) {
+  const results = [];
+  let columnNames = null;
+  await db2.exec(query, (row, columns) => {
+    if (!columnNames) {
+      columnNames = columns;
+    }
+    results.push(rowToObject(row, columnNames));
+  });
+  return results;
+}
+async function withMigrationSavepoint(client, callback) {
+  await client.execute("SAVEPOINT __rivet_on_migrate");
+  try {
+    const result = await callback();
+    await client.execute("RELEASE SAVEPOINT __rivet_on_migrate");
+    return result;
+  } catch (error) {
+    try {
+      await client.execute("ROLLBACK TO SAVEPOINT __rivet_on_migrate");
+    } finally {
+      await client.execute("RELEASE SAVEPOINT __rivet_on_migrate");
+    }
+    throw error;
   }
+}
+
+// src/agent-os/config.ts
+import { z as z3 } from "zod/v4";
+var zFunction2 = () => z3.custom((val) => typeof val === "function");
+var AgentOsOptionsSchema = z3.custom(
+  (val) => typeof val === "object" && val !== null
 );
-var DocActorOptionsSchema = z.object({
-  name: z.string().optional().describe("Display name for the actor in the Inspector UI."),
-  icon: z.string().optional().describe(
-    "Icon for the actor in the Inspector UI. Can be an emoji (e.g., '\u{1F680}') or FontAwesome icon name (e.g., 'rocket')."
-  ),
-  createVarsTimeout: z.number().optional().describe("Timeout in ms for createVars handler. Default: 5000"),
-  createConnStateTimeout: z.number().optional().describe(
-    "Timeout in ms for createConnState handler. Default: 5000"
-  ),
-  onMigrateTimeout: z.number().optional().describe("Timeout in ms for onMigrate handler. Default: 30000"),
-  onBeforeConnectTimeout: z.number().optional().describe(
-    "Timeout in ms for onBeforeConnect handler. Default: 5000"
-  ),
-  onConnectTimeout: z.number().optional().describe("Timeout in ms for onConnect handler. Default: 5000"),
-  sleepGracePeriod: z.number().optional().describe(
-    `Max time in ms for the graceful shutdown window. Covers lifecycle hooks (onSleep, onDestroy), the run handler wait, async raw WebSocket handlers, disconnect callbacks, and final state serialization. Default: ${DEFAULT_SLEEP_GRACE_PERIOD}.`
-  ),
-  onDestroyTimeout: z.number().optional().describe(
-    "Deprecated. Folded into sleepGracePeriod, which now bounds the entire graceful shutdown window for both sleep and destroy. Will be removed in 2.2.0."
-  ),
-  waitUntilTimeout: z.number().optional().describe(
-    "Deprecated. Folded into sleepGracePeriod, which now bounds the entire graceful shutdown window for both sleep and destroy. Will be removed in 2.2.0."
-  ),
-  stateSaveInterval: z.number().optional().describe(
-    "Interval in ms between automatic state saves. Default: 1000"
-  ),
-  actionTimeout: z.number().optional().describe("Timeout in ms for action handlers. Default: 60000"),
-  connectionLivenessTimeout: z.number().optional().describe(
-    "Timeout in ms for connection liveness checks. Default: 2500"
-  ),
-  connectionLivenessInterval: z.number().optional().describe(
-    "Interval in ms between connection liveness checks. Default: 5000"
-  ),
-  noSleep: z.boolean().optional().describe(
-    "Deprecated. If true, the actor will never sleep. Use c.keepAwake(promise) to scope keep-awake to a specific operation instead. Default: false"
-  ),
-  sleepTimeout: z.number().optional().describe(
-    "Time in ms of inactivity before the actor sleeps. Default: 30000"
-  ),
-  maxQueueSize: z.number().optional().describe(
-    "Maximum number of queue messages before rejecting new messages. Default: 1000"
-  ),
-  maxQueueMessageSize: z.number().optional().describe(
-    "Maximum size of each queue message in bytes. Default: 65536"
-  ),
-  canHibernateWebSocket: z.boolean().optional().describe(
-    "Whether WebSockets using onWebSocket can be hibernated. WebSockets using actions/events are hibernatable by default. Default: false"
-  ),
-  preloadMaxWorkflowBytes: z.number().optional().describe(
-    "Override RivetKit's workflow preload budget for this actor. Set to 0 to disable workflow preloading."
-  ),
-  preloadMaxConnectionsBytes: z.number().optional().describe(
-    "Override RivetKit's connections preload budget for this actor. Set to 0 to disable connections preloading."
-  )
-}).describe("Actor options for timeouts and behavior configuration.");
-var DocActorConfigSchema = z.object({
-  state: z.unknown().optional().describe(
-    "Initial state value for the actor. Cannot be used with createState."
-  ),
-  createState: z.unknown().optional().describe(
-    "Function to create initial state. Receives context and input. Cannot be used with state."
-  ),
-  connState: z.unknown().optional().describe(
-    "Initial connection state value. Cannot be used with createConnState."
-  ),
-  createConnState: z.unknown().optional().describe(
-    "Function to create connection state. Receives context and connection params. The pending connection is not visible in c.conns until this succeeds. Cannot be used with connState."
-  ),
-  vars: z.unknown().optional().describe(
-    "Initial ephemeral variables value. Cannot be used with createVars."
-  ),
-  createVars: z.unknown().optional().describe(
-    "Function to create ephemeral variables. Receives context and driver context. Cannot be used with vars."
-  ),
-  db: z.unknown().optional().describe("Database provider instance for the actor."),
-  onCreate: z.unknown().optional().describe(
-    "Called when the actor is first initialized. Use to initialize state."
-  ),
-  onDestroy: z.unknown().optional().describe("Called when the actor is destroyed."),
-  onMigrate: z.unknown().optional().describe(
-    "Called on every actor start after persisted state loads and before onWake. Use for repeatable schema migrations."
-  ),
-  onWake: z.unknown().optional().describe(
-    "Called when the actor wakes up and is ready to receive connections and actions."
-  ),
-  onSleep: z.unknown().optional().describe(
-    "Called when the actor is stopping or sleeping. Use to clean up resources."
-  ),
-  run: z.unknown().optional().describe(
-    "Called after actor starts. Does not block startup. Use for background tasks like queue processing or tick loops. If it exits, the actor follows the normal idle sleep timeout once idle. If it throws, the actor logs the error and then follows the normal idle sleep timeout once idle."
-  ),
-  onStateChange: z.unknown().optional().describe(
-    "Called when the actor's state changes. State changes within this hook won't trigger recursion."
-  ),
-  onBeforeConnect: z.unknown().optional().describe(
-    "Called before a client connects. Throw an error to reject the connection. The pending connection is not visible in c.conns while this runs."
-  ),
-  onConnect: z.unknown().optional().describe(
-    "Called when a client successfully connects. The connection is visible in c.conns before this runs."
-  ),
-  onDisconnect: z.unknown().optional().describe("Called when a client disconnects."),
-  onBeforeActionResponse: z.unknown().optional().describe(
-    "Called before sending an action response. Use to transform output."
-  ),
-  onRequest: z.unknown().optional().describe(
-    "Called for raw HTTP requests to /actors/{name}/http/* endpoints."
-  ),
-  onWebSocket: z.unknown().optional().describe(
-    "Called for raw WebSocket connections to /actors/{name}/websocket/* endpoints."
-  ),
-  actions: z.record(z.string(), z.unknown()).optional().describe(
-    "Map of action name to handler function. Defaults to an empty object."
-  ),
-  actionInputSchemas: z.record(z.string(), z.unknown()).optional().describe(
-    "Optional schema map for validating action argument tuples in native runtimes."
-  ),
-  connParamsSchema: z.unknown().optional().describe(
-    "Optional schema for validating connection params in native runtimes."
-  ),
-  events: z.record(z.string(), z.unknown()).optional().describe("Map of event names to schemas."),
-  queues: z.record(z.string(), z.unknown()).optional().describe("Map of queue names to schemas."),
-  options: DocActorOptionsSchema.optional()
-}).describe("Actor configuration passed to the actor() function.");
+var agentOsActorConfigSchema = z3.object({
+  options: AgentOsOptionsSchema.optional(),
+  preview: z3.object({
+    defaultExpiresInSeconds: z3.number().positive().default(3600),
+    maxExpiresInSeconds: z3.number().positive().default(86400)
+  }).strict().prefault(() => ({})),
+  onBeforeConnect: zFunction2().optional(),
+  onSessionEvent: zFunction2().optional(),
+  onPermissionRequest: zFunction2().optional()
+}).strict();
+
+// src/agent-os/actor/db.ts
+async function migrateAgentOsTables(db2) {
+  await db2.execute(`
+		CREATE TABLE IF NOT EXISTS agent_os_preview_tokens (
+			token TEXT PRIMARY KEY,
+			port INTEGER NOT NULL,
+			created_at INTEGER NOT NULL,
+			expires_at INTEGER NOT NULL
+		);
+
+		CREATE INDEX IF NOT EXISTS idx_preview_tokens_expires_at
+			ON agent_os_preview_tokens(expires_at);
+
+		CREATE TABLE IF NOT EXISTS agent_os_fs_entries (
+			path TEXT PRIMARY KEY,
+			is_directory INTEGER NOT NULL DEFAULT 0,
+			content BLOB,
+			mode INTEGER NOT NULL DEFAULT 33188,
+			uid INTEGER NOT NULL DEFAULT 0,
+			gid INTEGER NOT NULL DEFAULT 0,
+			size INTEGER NOT NULL DEFAULT 0,
+			atime_ms INTEGER NOT NULL,
+			mtime_ms INTEGER NOT NULL,
+			ctime_ms INTEGER NOT NULL,
+			birthtime_ms INTEGER NOT NULL,
+			symlink_target TEXT,
+			nlink INTEGER NOT NULL DEFAULT 1
+		);
+
+		CREATE INDEX IF NOT EXISTS idx_fs_entries_parent
+			ON agent_os_fs_entries(path);
+
+		CREATE TABLE IF NOT EXISTS agent_os_sessions (
+			session_id TEXT PRIMARY KEY,
+			agent_type TEXT NOT NULL,
+			capabilities TEXT NOT NULL,
+			agent_info TEXT,
+			created_at INTEGER NOT NULL
+		);
 
-// src/common/log.ts
-import {
-  pino,
-  stdTimeFunctions
-} from "pino";
-import { z as z2 } from "zod/v4";
+		CREATE TABLE IF NOT EXISTS agent_os_session_events (
+			id INTEGER PRIMARY KEY AUTOINCREMENT,
+			session_id TEXT NOT NULL,
+			seq INTEGER NOT NULL,
+			event TEXT NOT NULL,
+			created_at INTEGER NOT NULL,
+			FOREIGN KEY (session_id) REFERENCES agent_os_sessions(session_id) ON DELETE CASCADE
+		);
 
-// src/actor/errors.ts
-function isTypedErrorTag(value) {
-  return value === "ActorError" || value === "RivetError";
-}
-function isRivetErrorLike(error) {
-  return typeof error === "object" && error !== null && "group" in error && typeof error.group === "string" && "code" in error && typeof error.code === "string" && "message" in error && typeof error.message === "string" && (!("__type" in error) || isTypedErrorTag(error.__type));
-}
-function isRivetErrorCode(error, group, code) {
-  return isRivetErrorLike(error) && error.group === group && error.code === code;
+		CREATE INDEX IF NOT EXISTS idx_session_events_session_seq
+			ON agent_os_session_events(session_id, seq);
+	`);
 }
 
-// package.json
-var package_default = {
-  name: "rivetkit",
-  version: "2.3.0-rc.9",
-  description: "Lightweight libraries for building stateful actors on edge platforms",
-  license: "Apache-2.0",
-  keywords: [
-    "rivetkit",
-    "stateful",
-    "serverless",
-    "actors",
-    "agents",
-    "realtime",
-    "websocket",
-    "actors",
-    "framework"
-  ],
-  files: [
-    "dist",
-    "schemas",
-    "src",
-    "package.json"
-  ],
-  type: "module",
-  exports: {
-    ".": {
-      import: {
-        types: "./dist/tsup/mod.d.ts",
-        default: "./dist/tsup/mod.js"
-      },
-      require: {
-        types: "./dist/tsup/mod.d.cts",
-        default: "./dist/tsup/mod.cjs"
-      }
+// src/agent-os/actor/filesystem.ts
+function buildFilesystemActions(config) {
+  return {
+    readFile: async (c, path) => {
+      const agentOs2 = await ensureVm(c, config);
+      return agentOs2.readFile(path);
     },
-    "./workflow": {
-      import: {
-        types: "./dist/tsup/workflow/mod.d.ts",
-        default: "./dist/tsup/workflow/mod.js"
-      },
-      require: {
-        types: "./dist/tsup/workflow/mod.d.cts",
-        default: "./dist/tsup/workflow/mod.cjs"
-      }
+    writeFile: async (c, path, content) => {
+      const agentOs2 = await ensureVm(c, config);
+      await agentOs2.writeFile(path, content);
     },
-    "./test": {
-      import: {
-        types: "./dist/tsup/test/mod.d.ts",
-        default: "./dist/tsup/test/mod.js"
-      },
-      require: {
-        types: "./dist/tsup/test/mod.d.cts",
-        default: "./dist/tsup/test/mod.cjs"
-      }
+    readFiles: async (c, paths) => {
+      const agentOs2 = await ensureVm(c, config);
+      return agentOs2.readFiles(paths);
     },
-    "./db": {
-      import: {
-        types: "./dist/tsup/db/mod.d.ts",
-        default: "./dist/tsup/db/mod.js"
-      },
-      require: {
-        types: "./dist/tsup/db/mod.d.cts",
-        default: "./dist/tsup/db/mod.cjs"
+    writeFiles: async (c, entries) => {
+      const agentOs2 = await ensureVm(c, config);
+      return agentOs2.writeFiles(entries);
+    },
+    mkdir: async (c, path, options) => {
+      const agentOs2 = await ensureVm(c, config);
+      await agentOs2.mkdir(path, options);
+    },
+    readdir: async (c, path) => {
+      const agentOs2 = await ensureVm(c, config);
+      return agentOs2.readdir(path);
+    },
+    readdirRecursive: async (c, path, options) => {
+      const agentOs2 = await ensureVm(c, config);
+      return agentOs2.readdirRecursive(path, options);
+    },
+    stat: async (c, path) => {
+      const agentOs2 = await ensureVm(c, config);
+      return agentOs2.stat(path);
+    },
+    exists: async (c, path) => {
+      const agentOs2 = await ensureVm(c, config);
+      return agentOs2.exists(path);
+    },
+    move: async (c, from, to) => {
+      const agentOs2 = await ensureVm(c, config);
+      await agentOs2.move(from, to);
+    },
+    deleteFile: async (c, path, options) => {
+      const agentOs2 = await ensureVm(c, config);
+      await agentOs2.delete(path, options);
+    },
+    // TODO: mountFs and unmountFs are not exposed as actor actions because
+    // filesystem drivers (VirtualFileSystem) are not serializable over the
+    // network. Mount filesystems via the `options.mounts` config in agentOs()
+    // instead. See: https://github.com/rivet-dev/rivet/issues/XXXX
+    listAgents: async (c) => {
+      const agentOs2 = await ensureVm(c, config);
+      return agentOs2.listAgents();
+    }
+  };
+}
+
+// src/agent-os/actor/network.ts
+function buildNetworkActions(config) {
+  return {
+    vmFetch: async (c, port, url, options) => {
+      const agentOs2 = await ensureVm(c, config);
+      const headers = new Headers(options == null ? void 0 : options.headers);
+      const request = new Request(url, {
+        method: (options == null ? void 0 : options.method) ?? "GET",
+        headers,
+        body: (options == null ? void 0 : options.body) ?? null
+      });
+      const response = await agentOs2.fetch(port, request);
+      const responseHeaders = {};
+      response.headers.forEach((value, key) => {
+        responseHeaders[key] = value;
+      });
+      const body = new Uint8Array(await response.arrayBuffer());
+      return {
+        status: response.status,
+        statusText: response.statusText,
+        headers: responseHeaders,
+        body
+      };
+    }
+  };
+}
+
+// src/agent-os/actor/preview.ts
+import crypto from "crypto";
+function generateToken() {
+  const bytes = crypto.randomBytes(32);
+  const alphabet = "abcdefghijklmnopqrstuvwxyz0123456789";
+  let token = "";
+  for (let i = 0; i < 32; i++) {
+    token += alphabet[bytes[i] % alphabet.length];
+  }
+  return token;
+}
+var CORS_HEADERS = {
+  "Access-Control-Allow-Origin": "*",
+  "Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, OPTIONS",
+  "Access-Control-Allow-Headers": "*"
+};
+function addCorsHeaders(response) {
+  const headers = new Headers(response.headers);
+  for (const [key, value] of Object.entries(CORS_HEADERS)) {
+    headers.set(key, value);
+  }
+  return new Response(response.body, {
+    status: response.status,
+    statusText: response.statusText,
+    headers
+  });
+}
+function buildOnRequestHandler(config) {
+  return async (c, request) => {
+    var _a;
+    const url = new URL(request.url);
+    const pathname = url.pathname;
+    const match = pathname.match(/^\/fetch\/([a-z0-9]+)(\/.*)?$/);
+    if (!match) {
+      return new Response("Not Found", { status: 404 });
+    }
+    if (request.method === "OPTIONS") {
+      return new Response(null, { status: 204, headers: CORS_HEADERS });
+    }
+    const token = match[1];
+    const remainingPath = match[2] ?? "/";
+    const now = Date.now();
+    const rows = await c.db.execute(
+      `SELECT port FROM agent_os_preview_tokens WHERE token = ? AND expires_at > ?`,
+      token,
+      now
+    );
+    if (rows.length === 0) {
+      c.log.warn({ msg: "agent-os preview auth failed", token });
+      return addCorsHeaders(new Response("Forbidden", { status: 403 }));
+    }
+    const port = (_a = rows[0]) == null ? void 0 : _a.port;
+    const agentOs2 = await ensureVm(
+      c,
+      config
+    );
+    const vmUrl = `http://localhost:${port}${remainingPath}${url.search}`;
+    const vmRequest = new Request(vmUrl, {
+      method: request.method,
+      headers: request.headers,
+      body: request.body,
+      duplex: "half"
+    });
+    const vmResponse = await agentOs2.fetch(port, vmRequest);
+    c.log.info({
+      msg: "agent-os preview request proxied",
+      port,
+      method: request.method,
+      path: remainingPath,
+      status: vmResponse.status
+    });
+    return addCorsHeaders(vmResponse);
+  };
+}
+function buildPreviewActions(config) {
+  return {
+    createSignedPreviewUrl: async (c, port, expiresInSeconds) => {
+      await ensureVm(c, config);
+      const effectiveExpires = expiresInSeconds ?? config.preview.defaultExpiresInSeconds;
+      const maxExpires = config.preview.maxExpiresInSeconds;
+      if (effectiveExpires < 1 || effectiveExpires > maxExpires) {
+        throw new Error(
+          `expiresInSeconds must be between 1 and ${maxExpires}`
+        );
       }
+      const token = generateToken();
+      const now = Date.now();
+      const expiresAt = now + effectiveExpires * 1e3;
+      await c.db.execute(
+        `INSERT INTO agent_os_preview_tokens (token, port, created_at, expires_at)
+				 VALUES (?, ?, ?, ?)`,
+        token,
+        port,
+        now,
+        expiresAt
+      );
+      await c.db.execute(
+        `DELETE FROM agent_os_preview_tokens WHERE expires_at <= ?`,
+        now
+      );
+      const path = `/request/fetch/${token}`;
+      c.log.info({
+        msg: "agent-os preview token created",
+        port,
+        expiresInSeconds: effectiveExpires
+      });
+      return { path, token, port, expiresAt };
     },
-    "./db/drizzle": {
-      import: {
-        types: "./dist/tsup/db/drizzle.d.ts",
-        default: "./dist/tsup/db/drizzle.js"
-      },
-      require: {
-        types: "./dist/tsup/db/drizzle.d.cts",
-        default: "./dist/tsup/db/drizzle.cjs"
-      }
+    expireSignedPreviewUrl: async (c, token) => {
+      await c.db.execute(
+        `DELETE FROM agent_os_preview_tokens WHERE token = ?`,
+        token
+      );
+      c.log.info({ msg: "agent-os preview token expired", token });
+    }
+  };
+}
+
+// src/agent-os/actor/process.ts
+function broadcastProcessEvent(c, name, payload) {
+  try {
+    c.broadcast(name, payload);
+  } catch (error) {
+    if (isRivetErrorCode(error, "actor", "stopping")) {
+      return;
+    }
+    throw error;
+  }
+}
+function buildProcessActions(config) {
+  return {
+    exec: async (c, command, options) => {
+      const agentOs2 = await ensureVm(c, config);
+      return agentOs2.exec(command, options);
     },
-    "./client": {
-      import: {
-        browser: {
-          types: "./dist/browser/client.d.ts",
-          default: "./dist/browser/client.js"
+    spawn: async (c, command, args, options) => {
+      const agentOs2 = await ensureVm(c, config);
+      const { pid } = agentOs2.spawn(command, args, {
+        ...options,
+        onStdout: (data) => {
+          var _a;
+          broadcastProcessEvent(c, "processOutput", {
+            pid,
+            stream: "stdout",
+            data
+          });
+          (_a = options == null ? void 0 : options.onStdout) == null ? void 0 : _a.call(options, data);
         },
-        types: "./dist/tsup/client/mod.d.ts",
-        default: "./dist/tsup/client/mod.js"
-      },
-      require: {
-        types: "./dist/tsup/client/mod.d.cts",
-        default: "./dist/tsup/client/mod.cjs"
-      }
+        onStderr: (data) => {
+          var _a;
+          broadcastProcessEvent(c, "processOutput", {
+            pid,
+            stream: "stderr",
+            data
+          });
+          (_a = options == null ? void 0 : options.onStderr) == null ? void 0 : _a.call(options, data);
+        }
+      });
+      c.vars.activeProcesses.add(pid);
+      syncPreventSleep(c);
+      c.log.info({
+        msg: "agent-os process spawned",
+        pid,
+        command
+      });
+      agentOs2.waitProcess(pid).then((exitCode) => {
+        broadcastProcessEvent(c, "processExit", { pid, exitCode });
+        c.log.info({
+          msg: "agent-os process exited",
+          pid,
+          exitCode
+        });
+      }).catch(() => {
+      }).finally(() => {
+        c.vars.activeProcesses.delete(pid);
+        syncPreventSleep(c);
+      });
+      return { pid };
     },
-    "./log": {
-      import: {
-        types: "./dist/tsup/common/log.d.ts",
-        default: "./dist/tsup/common/log.js"
-      },
-      require: {
-        types: "./dist/tsup/common/log.d.cts",
-        default: "./dist/tsup/common/log.cjs"
-      }
+    writeProcessStdin: async (c, pid, data) => {
+      const agentOs2 = await ensureVm(c, config);
+      agentOs2.writeProcessStdin(pid, data);
     },
-    "./errors": {
-      import: {
-        types: "./dist/tsup/actor/errors.d.ts",
-        default: "./dist/tsup/actor/errors.js"
-      },
-      require: {
-        types: "./dist/tsup/actor/errors.d.cts",
-        default: "./dist/tsup/actor/errors.cjs"
-      }
+    closeProcessStdin: async (c, pid) => {
+      const agentOs2 = await ensureVm(c, config);
+      agentOs2.closeProcessStdin(pid);
     },
-    "./inspector": {
-      import: {
-        types: "./dist/tsup/inspector/mod.d.ts",
-        default: "./dist/tsup/inspector/mod.js"
-      },
-      require: {
-        types: "./dist/tsup/inspector/mod.d.cts",
-        default: "./dist/tsup/inspector/mod.cjs"
-      }
+    waitProcess: async (c, pid) => {
+      const agentOs2 = await ensureVm(c, config);
+      return agentOs2.waitProcess(pid);
     },
-    "./inspector/client": {
-      import: {
-        types: "./dist/browser/inspector/client.d.ts",
-        default: "./dist/browser/inspector/client.js"
-      }
+    listProcesses: async (c) => {
+      const agentOs2 = await ensureVm(c, config);
+      return agentOs2.listProcesses();
     },
-    "./utils": {
-      import: {
-        types: "./dist/tsup/utils.d.ts",
-        default: "./dist/tsup/utils.js"
-      },
-      require: {
-        types: "./dist/tsup/utils.d.cts",
-        default: "./dist/tsup/utils.cjs"
-      }
+    allProcesses: async (c) => {
+      const agentOs2 = await ensureVm(c, config);
+      return agentOs2.allProcesses();
     },
-    "./agent-os": {
-      import: {
-        types: "./dist/tsup/agent-os/index.d.ts",
-        default: "./dist/tsup/agent-os/index.js"
-      },
-      require: {
-        types: "./dist/tsup/agent-os/index.d.cts",
-        default: "./dist/tsup/agent-os/index.cjs"
-      }
-    }
-  },
-  engines: {
-    node: ">=22.0.0"
-  },
-  sideEffects: [
-    "./dist/tsup/chunk-*.js",
-    "./dist/tsup/chunk-*.cjs"
-  ],
-  scripts: {
-    build: "tsup src/mod.ts src/client/mod.ts src/common/log.ts src/common/websocket.ts src/actor/errors.ts src/utils.ts src/workflow/mod.ts src/test/mod.ts src/inspector/mod.ts src/db/mod.ts src/db/drizzle.ts && tsup src/agent-os/index.ts --no-clean --out-dir dist/tsup/agent-os",
-    "build:browser": "tsup --config tsup.browser.config.ts",
-    "check-types": "tsc --noEmit",
-    lint: "biome check . && pnpm run check:test-skips && pnpm run check:wait-for-comments",
-    "lint:fix": "biome check --write .",
-    "check:test-skips": "tsx scripts/check-annotated-skips.ts",
-    "check:wait-for-comments": "tsx scripts/check-wait-for-comments.ts",
-    format: "biome format .",
-    "format:write": "biome format --write .",
-    test: "vitest run",
-    "test:platforms": "pnpm run build && RIVETKIT_INCLUDE_PLATFORM_TESTS=1 vitest run tests/platforms --passWithNoTests",
-    "test:watch": "vitest",
-    "dump-asyncapi": "tsx scripts/dump-asyncapi.ts",
-    "registry-config-schema-gen": "tsx scripts/registry-config-schema-gen.ts",
-    "actor-config-schema-gen": "tsx scripts/actor-config-schema-gen.ts"
-  },
-  dependencies: {
-    "@rivet-dev/agent-os-core": "^0.1.1",
-    "@hono/node-server": "^1.18.2",
-    "@hono/node-ws": "^1.1.1",
-    "@hono/zod-openapi": "^1.1.5",
-    "@rivetkit/bare-ts": "^0.6.2",
-    "@rivetkit/engine-cli": "workspace:*",
-    "@rivetkit/engine-envoy-protocol": "workspace:*",
-    "@rivetkit/rivetkit-napi": "workspace:*",
-    "@rivetkit/rivetkit-wasm": "workspace:*",
-    "@rivetkit/traces": "workspace:*",
-    "@rivetkit/virtual-websocket": "workspace:*",
-    "@rivetkit/workflow-engine": "workspace:*",
-    "cbor-x": "^1.6.0",
-    "drizzle-orm": "^0.44.2",
-    "get-port": "^7.1.0",
-    hono: "^4.7.0",
-    invariant: "^2.2.4",
-    "p-retry": "^6.2.1",
-    pino: "^9.5.0",
-    uuid: "^12.0.0",
-    vbare: "^0.0.4",
-    zod: "^4.1.0"
-  },
-  devDependencies: {
-    "@copilotkit/llmock": "^1.6.0",
-    "@rivet-dev/agent-os-common": "*",
-    "@rivet-dev/agent-os-pi": "^0.1.1",
-    "@biomejs/biome": "^2.3",
-    "@standard-schema/spec": "^1.0.0",
-    "@types/invariant": "^2",
-    "@types/node": "^22.13.1",
-    eventsource: "^4.0.0",
-    tsup: "^8.4.0",
-    tsx: "^4.19.4",
-    typescript: "^5.7.3",
-    "vite-tsconfig-paths": "^5.1.4",
-    vitest: "^3.1.1",
-    ws: "^8.18.1"
-  },
-  peerDependencies: {
-    "drizzle-kit": "^0.31.2",
-    eventsource: "^4.0.0",
-    ws: "^8.0.0"
-  },
-  peerDependenciesMeta: {
-    "drizzle-kit": {
-      optional: true
+    processTree: async (c) => {
+      const agentOs2 = await ensureVm(c, config);
+      return agentOs2.processTree();
+    },
+    getProcess: async (c, pid) => {
+      const agentOs2 = await ensureVm(c, config);
+      return agentOs2.getProcess(pid);
     },
-    eventsource: {
-      optional: true
+    stopProcess: async (c, pid) => {
+      const agentOs2 = await ensureVm(c, config);
+      agentOs2.stopProcess(pid);
     },
-    ws: {
-      optional: true
+    killProcess: async (c, pid) => {
+      const agentOs2 = await ensureVm(c, config);
+      agentOs2.killProcess(pid);
     }
-  },
-  stableVersion: "0.8.0"
-};
-
-// src/utils.ts
-var VERSION = package_default.version;
-function getEnvUniversal(key) {
-  if (typeof Deno !== "undefined") {
-    return Deno.env.get(key);
-  } else if (typeof process !== "undefined") {
-    return process.env[key];
-  }
+  };
 }
 
-// src/utils/env-vars.ts
-var getLogLevel = () => getEnvUniversal("RIVET_LOG_LEVEL") ?? getEnvUniversal("LOG_LEVEL");
-var getLogTarget = () => getEnvUniversal("RIVET_LOG_TARGET") === "1";
-var getLogTimestamp = () => getEnvUniversal("RIVET_LOG_TIMESTAMP") === "1";
-
-// src/common/log.ts
-var baseLogger;
-var configuredLogLevel;
-var loggerCache = /* @__PURE__ */ new Map();
-var LogLevelSchema = z2.enum([
-  "trace",
-  "debug",
-  "info",
-  "warn",
-  "error",
-  "fatal",
-  "silent"
-]);
-function getPinoLevel(logLevel) {
-  if (logLevel) {
-    return logLevel;
-  }
-  if (configuredLogLevel) {
-    return configuredLogLevel;
+// src/agent-os/actor/session.ts
+function stripFunctions(value) {
+  if (value === null || value === void 0) return value;
+  if (typeof value === "function") return void 0;
+  if (typeof value !== "object") return value;
+  if (Array.isArray(value)) return value.map(stripFunctions);
+  const out = {};
+  for (const [k, v] of Object.entries(value)) {
+    if (typeof v !== "function") {
+      out[k] = stripFunctions(v);
+    }
   }
-  const raw = (getLogLevel() || "warn").toString().toLowerCase();
-  const parsed = LogLevelSchema.safeParse(raw);
-  if (parsed.success) {
-    return parsed.data;
+  return out;
+}
+function assertSessionExists(c, sessionId) {
+  if (!c.vars.sessions.has(sessionId)) {
+    throw new Error(`session not found: ${sessionId}`);
   }
-  return "info";
 }
-function getIncludeTarget() {
-  return getLogTarget();
+function toSessionRecord(agentOs2, sessionId, agentType) {
+  return {
+    sessionId,
+    agentType,
+    capabilities: agentOs2.getSessionCapabilities(sessionId) ?? {},
+    agentInfo: agentOs2.getSessionAgentInfo(sessionId)
+  };
 }
-function configureDefaultLogger(logLevel) {
-  if (logLevel) {
-    configuredLogLevel = logLevel;
-  }
-  baseLogger = pino(
-    {
-      level: getPinoLevel(logLevel),
-      messageKey: "msg",
-      // Do not include pid/hostname in output
-      base: {},
-      // Keep the numeric level so the logfmt sink can match Pino's levels.
-      formatters: {
-        level(_label, number) {
-          return { level: number };
+async function persistSession(c, agentOs2, sessionId, agentType) {
+  const now = Date.now();
+  const capabilities = agentOs2.getSessionCapabilities(sessionId) ?? {};
+  const agentInfo = agentOs2.getSessionAgentInfo(sessionId);
+  await c.db.execute(
+    `INSERT OR REPLACE INTO agent_os_sessions (session_id, agent_type, capabilities, agent_info, created_at)
+		 VALUES (?, ?, ?, ?, ?)`,
+    sessionId,
+    agentType,
+    JSON.stringify(capabilities),
+    agentInfo ? JSON.stringify(agentInfo) : null,
+    now
+  );
+}
+async function persistSessionEvent(c, sessionId, event2) {
+  var _a;
+  const now = Date.now();
+  const rows = await c.db.execute(
+    `SELECT MAX(seq) as max_seq FROM agent_os_session_events WHERE session_id = ?`,
+    sessionId
+  );
+  const nextSeq = (((_a = rows[0]) == null ? void 0 : _a.max_seq) ?? -1) + 1;
+  await c.db.execute(
+    `INSERT INTO agent_os_session_events (session_id, seq, event, created_at)
+		 VALUES (?, ?, ?, ?)`,
+    sessionId,
+    nextSeq,
+    JSON.stringify(event2),
+    now
+  );
+}
+async function deletePersistedSession(c, sessionId) {
+  await c.db.execute(
+    `DELETE FROM agent_os_session_events WHERE session_id = ?`,
+    sessionId
+  );
+  await c.db.execute(
+    `DELETE FROM agent_os_sessions WHERE session_id = ?`,
+    sessionId
+  );
+}
+function subscribeToSession(c, agentOs2, sessionId, parsedConfig) {
+  agentOs2.onSessionEvent(sessionId, (event2) => {
+    c.broadcast(
+      "sessionEvent",
+      JSON.parse(JSON.stringify({ sessionId, event: event2 }))
+    );
+    persistSessionEvent(c, sessionId, event2).catch(
+      (error) => c.log.error({
+        msg: "agent-os failed to persist session event",
+        sessionId,
+        error
+      })
+    );
+    if (parsedConfig.onSessionEvent) {
+      runHook(
+        c,
+        "onSessionEvent",
+        () => {
+          var _a;
+          return (_a = parsedConfig.onSessionEvent) == null ? void 0 : _a.call(parsedConfig, c, sessionId, event2);
         }
-      },
-      timestamp: getLogTimestamp() ? stdTimeFunctions.epochTime : false
+      );
+    }
+  });
+  agentOs2.onPermissionRequest(sessionId, (request) => {
+    c.broadcast(
+      "permissionRequest",
+      JSON.parse(JSON.stringify({ sessionId, request }))
+    );
+    if (parsedConfig.onPermissionRequest) {
+      runHook(
+        c,
+        "onPermissionRequest",
+        () => {
+          var _a;
+          return (_a = parsedConfig.onPermissionRequest) == null ? void 0 : _a.call(parsedConfig, c, sessionId, request);
+        }
+      );
+    }
+  });
+  c.vars.sessions.add(sessionId);
+}
+function buildSessionActions(config) {
+  return {
+    createSession: async (c, agentType, options) => {
+      const agentOs2 = await ensureVm(c, config);
+      const { sessionId } = await agentOs2.createSession(
+        agentType,
+        options
+      );
+      subscribeToSession(c, agentOs2, sessionId, config);
+      await persistSession(c, agentOs2, sessionId, agentType);
+      c.log.info({
+        msg: "agent-os session created",
+        sessionId,
+        agentType
+      });
+      return toSessionRecord(agentOs2, sessionId, agentType);
+    },
+    listSessions: async (c) => {
+      const agentOs2 = await ensureVm(c, config);
+      return agentOs2.listSessions();
+    },
+    getSession: async (c, sessionId) => {
+      assertSessionExists(c, sessionId);
+      const agentOs2 = await ensureVm(c, config);
+      const info = agentOs2.listSessions().find((s) => s.sessionId === sessionId);
+      if (!info) {
+        throw new Error(`session not found: ${sessionId}`);
+      }
+      return toSessionRecord(agentOs2, sessionId, info.agentType);
+    },
+    destroySession: async (c, sessionId) => {
+      const agentOs2 = await ensureVm(c, config);
+      await agentOs2.destroySession(sessionId);
+      c.vars.sessions.delete(sessionId);
+      c.vars.activeSessionIds.delete(sessionId);
+      syncPreventSleep(c);
+      await deletePersistedSession(c, sessionId);
+      c.log.info({ msg: "agent-os session destroyed", sessionId });
+    },
+    resumeSession: async (c, sessionId) => {
+      const agentOs2 = await ensureVm(c, config);
+      return agentOs2.resumeSession(sessionId);
+    },
+    closeSession: async (c, sessionId) => {
+      const agentOs2 = await ensureVm(c, config);
+      agentOs2.closeSession(sessionId);
+      c.vars.sessions.delete(sessionId);
+      c.vars.activeSessionIds.delete(sessionId);
+      syncPreventSleep(c);
+      await deletePersistedSession(c, sessionId);
+      c.log.info({ msg: "agent-os session closed", sessionId });
+    }
+  };
+}
+function buildPromptActions(_config) {
+  return {
+    sendPrompt: async (c, sessionId, text) => {
+      if (c.aborted) {
+        throw new Error(
+          "actor is shutting down, cannot start new prompt"
+        );
+      }
+      assertSessionExists(c, sessionId);
+      const agentOs2 = c.vars.agentOs;
+      if (!agentOs2) {
+        throw new Error("VM not initialized");
+      }
+      c.vars.activeSessionIds.add(sessionId);
+      syncPreventSleep(c);
+      c.log.info({ msg: "agent-os prompt turn started", sessionId });
+      const start = Date.now();
+      try {
+        const result = await agentOs2.prompt(sessionId, text);
+        return {
+          response: JSON.parse(JSON.stringify(result.response)),
+          text: result.text
+        };
+      } finally {
+        c.vars.activeSessionIds.delete(sessionId);
+        syncPreventSleep(c);
+        c.log.info({
+          msg: "agent-os prompt turn ended",
+          sessionId,
+          durationMs: Date.now() - start
+        });
+      }
     },
-    createLogfmtDestination()
-  );
-  loggerCache.clear();
-}
-function getBaseLogger() {
-  if (!baseLogger) {
-    configureDefaultLogger();
-  }
-  return baseLogger;
-}
-function getLogger(name = "default") {
-  const cached = loggerCache.get(name);
-  if (cached) {
-    return cached;
-  }
-  const base = getBaseLogger();
-  const child = getIncludeTarget() ? base.child({ target: name }) : base;
-  loggerCache.set(name, child);
-  return child;
+    cancelPrompt: async (c, sessionId) => {
+      assertSessionExists(c, sessionId);
+      const agentOs2 = c.vars.agentOs;
+      if (!agentOs2) {
+        throw new Error("VM not initialized");
+      }
+      return stripFunctions(
+        agentOs2.cancelSession(sessionId)
+      );
+    },
+    respondPermission: async (c, sessionId, permissionId, reply) => {
+      assertSessionExists(c, sessionId);
+      const agentOs2 = c.vars.agentOs;
+      if (!agentOs2) {
+        throw new Error("VM not initialized");
+      }
+      return stripFunctions(
+        agentOs2.respondPermission(sessionId, permissionId, reply)
+      );
+    }
+  };
 }
-var PINO_LEVEL_LABELS = {
-  10: "trace",
-  20: "debug",
-  30: "info",
-  40: "warn",
-  50: "error",
-  60: "fatal"
-};
-function createLogfmtDestination() {
+function buildConfigActions(_config) {
   return {
-    write(msg) {
-      var _a;
-      const line = formatLogfmtLine(msg);
-      if (typeof process !== "undefined" && ((_a = process.stdout) == null ? void 0 : _a.write)) {
-        process.stdout.write(`${line}
-`);
-      } else {
-        console.log(line);
+    setMode: async (c, sessionId, modeId) => {
+      assertSessionExists(c, sessionId);
+      const agentOs2 = c.vars.agentOs;
+      if (!agentOs2) {
+        throw new Error("VM not initialized");
+      }
+      return stripFunctions(
+        agentOs2.setSessionMode(sessionId, modeId)
+      );
+    },
+    getModes: async (c, sessionId) => {
+      assertSessionExists(c, sessionId);
+      const agentOs2 = c.vars.agentOs;
+      if (!agentOs2) {
+        throw new Error("VM not initialized");
+      }
+      return agentOs2.getSessionModes(sessionId);
+    },
+    setModel: async (c, sessionId, model) => {
+      assertSessionExists(c, sessionId);
+      const agentOs2 = c.vars.agentOs;
+      if (!agentOs2) {
+        throw new Error("VM not initialized");
+      }
+      return stripFunctions(
+        agentOs2.setSessionModel(sessionId, model)
+      );
+    },
+    setThoughtLevel: async (c, sessionId, level) => {
+      assertSessionExists(c, sessionId);
+      const agentOs2 = c.vars.agentOs;
+      if (!agentOs2) {
+        throw new Error("VM not initialized");
+      }
+      return stripFunctions(
+        agentOs2.setSessionThoughtLevel(sessionId, level)
+      );
+    },
+    getConfigOptions: async (c, sessionId) => {
+      assertSessionExists(c, sessionId);
+      const agentOs2 = c.vars.agentOs;
+      if (!agentOs2) {
+        throw new Error("VM not initialized");
+      }
+      return agentOs2.getSessionConfigOptions(sessionId);
+    },
+    getEvents: async (c, sessionId, options) => {
+      assertSessionExists(c, sessionId);
+      const agentOs2 = c.vars.agentOs;
+      if (!agentOs2) {
+        throw new Error("VM not initialized");
+      }
+      return agentOs2.getSessionEvents(sessionId, options).map((e) => e.notification);
+    },
+    getSequencedEvents: async (c, sessionId, options) => {
+      assertSessionExists(c, sessionId);
+      const agentOs2 = c.vars.agentOs;
+      if (!agentOs2) {
+        throw new Error("VM not initialized");
+      }
+      return agentOs2.getSessionEvents(sessionId, options);
+    },
+    rawSend: async (c, sessionId, method, params) => {
+      assertSessionExists(c, sessionId);
+      const agentOs2 = c.vars.agentOs;
+      if (!agentOs2) {
+        throw new Error("VM not initialized");
       }
+      return stripFunctions(
+        agentOs2.rawSessionSend(sessionId, method, params)
+      );
     }
   };
 }
-function formatLogfmtLine(raw) {
-  let data;
-  try {
-    data = JSON.parse(raw);
-  } catch {
-    return raw.trimEnd();
-  }
-  const parts = [];
-  appendLogfmtEntry(parts, "level", formatPinoLevel(data.level));
-  if (data.time !== void 0) {
-    appendLogfmtEntry(parts, "ts", data.time);
-  }
-  for (const [key, value] of Object.entries(data)) {
-    if (key === "level" || key === "time") {
-      continue;
+function buildSessionPersistenceActions(_config) {
+  return {
+    listPersistedSessions: async (c) => {
+      const rows = await c.db.execute(
+        `SELECT session_id, agent_type, capabilities, agent_info, created_at
+				 FROM agent_os_sessions
+				 ORDER BY created_at ASC`
+      );
+      return rows.map((row) => ({
+        sessionId: row.session_id,
+        agentType: row.agent_type,
+        capabilities: JSON.parse(row.capabilities),
+        agentInfo: row.agent_info ? JSON.parse(row.agent_info) : null,
+        createdAt: row.created_at
+      }));
+    },
+    getSessionEvents: async (c, sessionId) => {
+      const rows = await c.db.execute(
+        `SELECT session_id, seq, event, created_at
+				 FROM agent_os_session_events
+				 WHERE session_id = ?
+				 ORDER BY seq ASC`,
+        sessionId
+      );
+      return rows.map((row) => ({
+        sessionId: row.session_id,
+        seq: row.seq,
+        event: JSON.parse(row.event),
+        createdAt: row.created_at
+      }));
     }
-    appendLogfmtEntry(parts, key, value);
-  }
-  return parts.join(" ");
-}
-function formatPinoLevel(level) {
-  if (typeof level === "number") {
-    return PINO_LEVEL_LABELS[level] ?? level.toString();
-  }
-  if (typeof level === "string") {
-    return level.toLowerCase();
-  }
-  return "info";
-}
-function appendLogfmtEntry(parts, key, value) {
-  const safeKey = key.replace(/[\s="]/g, "");
-  if (safeKey.length === 0) {
-    return;
-  }
-  parts.push(`${safeKey}=${formatLogfmtValue(value)}`);
-}
-function formatLogfmtValue(value) {
-  if (typeof value === "number" || typeof value === "boolean") {
-    return String(value);
-  }
-  if (value === null || value === void 0) {
-    return "null";
-  }
-  if (typeof value === "string") {
-    return quoteLogfmtString(value);
-  }
-  return quoteLogfmtString(JSON.stringify(value));
-}
-function quoteLogfmtString(value) {
-  if (!/[\s="]/.test(value)) {
-    return value;
-  }
-  return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\n/g, "\\n")}"`;
-}
-
-// src/actor/log.ts
-function loggerWithoutContext() {
-  return getLogger("actor-runtime");
+  };
 }
 
-// src/actor/definition.ts
-var warnedDeprecatedTimeoutKeys = /* @__PURE__ */ new Set();
-function warnDeprecatedShutdownTimeoutKeys(options) {
-  if (!options || typeof options !== "object") return;
-  const opts = options;
-  for (const key of ["onDestroyTimeout", "waitUntilTimeout"]) {
-    if (opts[key] !== void 0 && !warnedDeprecatedTimeoutKeys.has(key)) {
-      warnedDeprecatedTimeoutKeys.add(key);
-      loggerWithoutContext().warn({
-        msg: `actor option \`${key}\` is deprecated and is now ignored. Configure \`sleepGracePeriod\` instead, which bounds the entire graceful shutdown window for both sleep and destroy. Will be removed in 2.2.0.`
+// src/agent-os/actor/shell.ts
+function buildShellActions(config) {
+  return {
+    openShell: async (c, options) => {
+      const agentOs2 = await ensureVm(c, config);
+      const { shellId } = agentOs2.openShell(options);
+      agentOs2.onShellData(shellId, (data) => {
+        c.broadcast("shellData", { shellId, data });
       });
+      c.vars.activeShells.add(shellId);
+      syncPreventSleep(c);
+      c.log.info({ msg: "agent-os shell opened", shellId });
+      return { shellId };
+    },
+    writeShell: async (c, shellId, data) => {
+      const agentOs2 = await ensureVm(c, config);
+      agentOs2.writeShell(shellId, data);
+    },
+    resizeShell: async (c, shellId, cols, rows) => {
+      const agentOs2 = await ensureVm(c, config);
+      agentOs2.resizeShell(shellId, cols, rows);
+    },
+    closeShell: async (c, shellId) => {
+      const agentOs2 = await ensureVm(c, config);
+      agentOs2.closeShell(shellId);
+      c.vars.activeShells.delete(shellId);
+      syncPreventSleep(c);
+      c.log.info({ msg: "agent-os shell closed", shellId });
     }
-  }
-}
-var ActorDefinition = class {
-  #config;
-  constructor(config) {
-    this.#config = config;
-  }
-  get config() {
-    return this.#config;
-  }
-};
-function actor(input) {
-  warnDeprecatedShutdownTimeoutKeys(
-    input == null ? void 0 : input.options
-  );
-  const config = ActorConfigSchema.parse(input);
-  return new ActorDefinition(config);
-}
-
-// src/actor/schema.ts
-function event(options) {
-  return options ?? {};
+  };
 }
 
-// src/common/database/shared.ts
-function isSqliteBindingValue(value) {
-  if (value === null || typeof value === "number" || typeof value === "string" || typeof value === "bigint" || value instanceof Uint8Array) {
-    return true;
-  }
-  if (Array.isArray(value)) {
-    return value.every((item) => typeof item === "number");
-  }
-  return false;
-}
-function isPlainObject(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    return false;
+// src/agent-os/actor/index.ts
+async function ensureVm(c, config) {
+  if (c.vars.agentOs) {
+    return c.vars.agentOs;
   }
-  return Object.getPrototypeOf(value) === Object.prototype;
+  const start = Date.now();
+  const options = buildVmOptions(config.options);
+  const agentOs2 = await AgentOs.create(options);
+  c.vars.agentOs = agentOs2;
+  agentOs2.onCronEvent((cronEvent) => {
+    c.broadcast("cronEvent", { event: cronEvent });
+  });
+  c.broadcast("vmBooted", {});
+  c.log.info({
+    msg: "agent-os vm booted",
+    bootDurationMs: Date.now() - start
+  });
+  return agentOs2;
 }
-function isSqliteBindingObject(value) {
-  if (!isPlainObject(value)) {
-    return false;
+function buildVmOptions(userOptions) {
+  const userMounts = (userOptions == null ? void 0 : userOptions.mounts) ?? [];
+  const hasWorkdirMount = userMounts.some(
+    (m) => m.path === "/home/user"
+  );
+  if (hasWorkdirMount) {
+    return userOptions ?? {};
   }
-  return Object.values(value).every((entry) => isSqliteBindingValue(entry));
+  const memMount = {
+    path: "/home/user",
+    driver: createInMemoryFileSystem()
+  };
+  return {
+    ...userOptions,
+    mounts: [memMount, ...userMounts]
+  };
 }
-function toSqliteBindings(input) {
-  if (Array.isArray(input)) {
-    for (const value of input) {
-      if (!isSqliteBindingValue(value)) {
-        throw new Error(
-          `unsupported sqlite binding type: ${typeof value}`
-        );
-      }
-    }
-    return input;
-  }
-  if (isSqliteBindingObject(input)) {
-    return input;
-  }
-  throw new Error("unsupported sqlite binding collection");
+function syncPreventSleep(c) {
+  const shouldPrevent = c.vars.activeSessionIds.size > 0 || c.vars.activeProcesses.size > 0 || c.vars.activeHooks.size > 0 || c.vars.activeShells.size > 0;
+  c.setPreventSleep(shouldPrevent);
+  c.log.info({
+    msg: "agent-os prevent sleep sync",
+    preventSleep: shouldPrevent,
+    activeSessions: c.vars.activeSessionIds.size,
+    activeProcesses: c.vars.activeProcesses.size,
+    activeHooks: c.vars.activeHooks.size,
+    activeShells: c.vars.activeShells.size
+  });
 }
-
-// src/common/database/mod.ts
-function hasMultipleStatements(query) {
-  const trimmed = query.trim().replace(/;+$/, "").trimEnd();
-  return trimmed.includes(";");
+function runHook(c, name, callback) {
+  const promise = Promise.resolve(callback()).catch(
+    (error) => c.log.error({ msg: "agent-os hook failed", hookName: name, error })
+  ).finally(() => {
+    c.vars.activeHooks.delete(promise);
+    syncPreventSleep(c);
+  });
+  c.vars.activeHooks.add(promise);
+  syncPreventSleep(c);
+  c.waitUntil(promise);
 }
-function db({
-  onMigrate
-} = {}) {
-  return {
-    createClient: async (ctx) => {
-      const nativeDatabaseProvider = ctx.nativeDatabaseProvider;
-      if (!nativeDatabaseProvider) {
-        throw new Error(
-          "native SQLite is required, but the current runtime did not provide a native database provider"
-        );
-      }
-      const db2 = await nativeDatabaseProvider.open(ctx.actorId);
-      let closed = false;
-      const ensureOpen = () => {
-        if (closed) {
-          throw new Error(
-            "Database is closed. This usually means a background timer (setInterval, setTimeout) or a stray promise is still running after the actor stopped. Use c.abortSignal to clean up timers before the actor shuts down."
-          );
-        }
-      };
-      const client = {
-        execute: async (query, ...args) => {
-          var _a, _b, _c, _d;
-          ensureOpen();
-          const kvReadsBefore = ((_a = ctx.metrics) == null ? void 0 : _a.totalKvReads) ?? 0;
-          const kvWritesBefore = ((_b = ctx.metrics) == null ? void 0 : _b.totalKvWrites) ?? 0;
-          const start = performance.now();
-          try {
-            if (args.length > 0) {
-              const bindings = args.length === 1 && isSqliteBindingObject(args[0]) ? toSqliteBindings(args[0]) : toSqliteBindings(args);
-              const { rows, columns } = await db2.execute(
-                query,
-                bindings
-              );
-              return rows.map(
-                (row) => rowToObject(row, columns)
-              );
-            }
-            if (!hasMultipleStatements(query)) {
-              const { rows, columns } = await db2.execute(query);
-              return rows.map(
-                (row) => rowToObject(row, columns)
-              );
-            }
-            return await execMultiStatement(db2, query);
-          } finally {
-            const durationMs = performance.now() - start;
-            (_c = ctx.metrics) == null ? void 0 : _c.trackSql(query, durationMs);
-            if (ctx.metrics) {
-              const kvReads = ctx.metrics.totalKvReads - kvReadsBefore;
-              const kvWrites = ctx.metrics.totalKvWrites - kvWritesBefore;
-              (_d = ctx.log) == null ? void 0 : _d.debug({
-                msg: "sql query",
-                query: query.slice(0, 120),
-                durationMs,
-                kvReads,
-                kvWrites
-              });
-            }
-          }
-        },
-        close: async () => {
-          if (!closed) {
-            closed = true;
-            await db2.close();
-          }
-        },
-        nativeMetrics: () => {
-          var _a;
-          return ((_a = db2.nativeMetrics) == null ? void 0 : _a.call(db2)) ?? null;
-        }
-      };
-      return client;
+function agentOs(config) {
+  const parsedConfig = agentOsActorConfigSchema.parse(
+    config
+  );
+  const actions = {
+    ...buildSessionActions(parsedConfig),
+    ...buildPromptActions(parsedConfig),
+    ...buildConfigActions(parsedConfig),
+    ...buildSessionPersistenceActions(parsedConfig),
+    ...buildProcessActions(parsedConfig),
+    ...buildFilesystemActions(parsedConfig),
+    ...buildPreviewActions(parsedConfig),
+    ...buildShellActions(parsedConfig),
+    ...buildCronActions(parsedConfig),
+    ...buildNetworkActions(parsedConfig)
+  };
+  return actor({
+    options: {
+      sleepGracePeriod: 9e5,
+      actionTimeout: 9e5
     },
-    onMigrate: async (client) => {
-      if (onMigrate) {
-        await withMigrationSavepoint(client, () => onMigrate(client));
+    createState: async () => ({}),
+    createVars: () => ({
+      agentOs: null,
+      activeSessionIds: /* @__PURE__ */ new Set(),
+      activeProcesses: /* @__PURE__ */ new Set(),
+      activeHooks: /* @__PURE__ */ new Set(),
+      activeShells: /* @__PURE__ */ new Set(),
+      sessions: /* @__PURE__ */ new Set()
+    }),
+    db: db({
+      onMigrate: migrateAgentOsTables
+    }),
+    events: {
+      sessionEvent: sessionEventToken,
+      permissionRequest: permissionRequestToken,
+      vmBooted: vmBootedToken,
+      vmShutdown: vmShutdownToken,
+      processOutput: processOutputToken,
+      processExit: processExitToken,
+      shellData: shellDataToken,
+      cronEvent: cronEventToken
+    },
+    onBeforeConnect: parsedConfig.onBeforeConnect ? async (ctx, params) => {
+      var _a;
+      if (ctx.request) {
+        const url = new URL(ctx.request.url);
+        if (url.pathname.startsWith("/fetch/")) {
+          return;
+        }
       }
-    }
-  };
-}
-function rowToObject(row, columns) {
-  const rowObj = {};
-  for (let i = 0; i < columns.length; i++) {
-    rowObj[columns[i]] = row[i];
-  }
-  return rowObj;
-}
-async function execMultiStatement(db2, query) {
-  const results = [];
-  let columnNames = null;
-  await db2.exec(query, (row, columns) => {
-    if (!columnNames) {
-      columnNames = columns;
-    }
-    results.push(rowToObject(row, columnNames));
+      await ((_a = parsedConfig.onBeforeConnect) == null ? void 0 : _a.call(parsedConfig, ctx, params));
+    } : void 0,
+    onRequest: buildOnRequestHandler(parsedConfig),
+    onSleep: async (c) => {
+      c.log.info({
+        msg: "agent-os vm shutdown for sleep",
+        activeSessions: c.vars.sessions.size,
+        activeProcesses: c.vars.activeProcesses.size,
+        activeShells: c.vars.activeShells.size
+      });
+      if (c.vars.agentOs) {
+        await c.vars.agentOs.dispose();
+        c.vars.agentOs = null;
+      }
+      c.broadcast("vmShutdown", { reason: "sleep" });
+    },
+    onDestroy: async (c) => {
+      c.log.info({
+        msg: "agent-os vm shutdown for destroy",
+        activeSessions: c.vars.sessions.size,
+        activeProcesses: c.vars.activeProcesses.size,
+        activeShells: c.vars.activeShells.size
+      });
+      if (c.vars.agentOs) {
+        await c.vars.agentOs.dispose();
+        c.vars.agentOs = null;
+      }
+      c.broadcast("vmShutdown", { reason: "destroy" });
+    },
+    actions
   });
-  return results;
-}
-async function withMigrationSavepoint(client, callback) {
-  await client.execute("SAVEPOINT __rivet_on_migrate");
-  try {
-    const result = await callback();
-    await client.execute("RELEASE SAVEPOINT __rivet_on_migrate");
-    return result;
-  } catch (error) {
-    try {
-      await client.execute("ROLLBACK TO SAVEPOINT __rivet_on_migrate");
-    } finally {
-      await client.execute("RELEASE SAVEPOINT __rivet_on_migrate");
-    }
-    throw error;
-  }
 }
-
-// src/agent-os/config.ts
-import { z as z3 } from "zod/v4";
-var zFunction2 = () => z3.custom((val) => typeof val === "function");
-var AgentOsOptionsSchema = z3.custom(
-  (val) => typeof val === "object" && val !== null
-);
-var agentOsActorConfigSchema = z3.object({
-  options: AgentOsOptionsSchema.optional(),
-  preview: z3.object({
-    defaultExpiresInSeconds: z3.number().positive().default(3600),
-    maxExpiresInSeconds: z3.number().positive().default(86400)
-  }).strict().prefault(() => ({})),
-  onBeforeConnect: zFunction2().optional(),
-  onSessionEvent: zFunction2().optional(),
-  onPermissionRequest: zFunction2().optional()
-}).strict();
+var sessionEventToken = event();
+var permissionRequestToken = event();
+var vmBootedToken = event();
+var vmShutdownToken = event();
+var processOutputToken = event();
+var processExitToken = event();
+var shellDataToken = event();
+var cronEventToken = event();
 
 // src/agent-os/actor/cron.ts
 function serializeCronAction(action) {
@@ -1412,859 +1830,517 @@ function serializeCronAction(action) {
   }
 }
 function serializeCronJob(job) {
-  var _a, _b;
-  return {
-    id: job.id,
-    schedule: job.schedule,
-    action: serializeCronAction(job.action),
-    overlap: job.overlap,
-    lastRun: (_a = job.lastRun) == null ? void 0 : _a.toISOString(),
-    nextRun: (_b = job.nextRun) == null ? void 0 : _b.toISOString(),
-    runCount: job.runCount,
-    running: job.running
-  };
-}
-function buildCronActions(config) {
-  return {
-    scheduleCron: async (c, options) => {
-      const agentOs2 = await ensureVm(c, config);
-      const job = agentOs2.scheduleCron({
-        id: options.id,
-        schedule: options.schedule,
-        action: options.action,
-        overlap: options.overlap
-      });
-      c.log.info({
-        msg: "agent-os cron job scheduled",
-        jobId: job.id,
-        schedule: options.schedule
-      });
-      return { id: job.id };
-    },
-    listCronJobs: async (c) => {
-      const agentOs2 = await ensureVm(c, config);
-      return agentOs2.listCronJobs().map(serializeCronJob);
-    },
-    cancelCronJob: async (c, id) => {
-      const agentOs2 = await ensureVm(c, config);
-      agentOs2.cancelCronJob(id);
-      c.log.info({ msg: "agent-os cron job cancelled", jobId: id });
-    }
-  };
-}
-
-// src/agent-os/actor/network.ts
-function buildNetworkActions(config) {
-  return {
-    vmFetch: async (c, port, url, options) => {
-      const agentOs2 = await ensureVm(c, config);
-      const headers = new Headers(options == null ? void 0 : options.headers);
-      const request = new Request(url, {
-        method: (options == null ? void 0 : options.method) ?? "GET",
-        headers,
-        body: (options == null ? void 0 : options.body) ?? null
-      });
-      const response = await agentOs2.fetch(port, request);
-      const responseHeaders = {};
-      response.headers.forEach((value, key) => {
-        responseHeaders[key] = value;
-      });
-      const body = new Uint8Array(await response.arrayBuffer());
-      return {
-        status: response.status,
-        statusText: response.statusText,
-        headers: responseHeaders,
-        body
-      };
-    }
-  };
-}
-
-// src/agent-os/actor/preview.ts
-import crypto from "crypto";
-function generateToken() {
-  const bytes = crypto.randomBytes(32);
-  const alphabet = "abcdefghijklmnopqrstuvwxyz0123456789";
-  let token = "";
-  for (let i = 0; i < 32; i++) {
-    token += alphabet[bytes[i] % alphabet.length];
-  }
-  return token;
-}
-var CORS_HEADERS = {
-  "Access-Control-Allow-Origin": "*",
-  "Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, OPTIONS",
-  "Access-Control-Allow-Headers": "*"
-};
-function addCorsHeaders(response) {
-  const headers = new Headers(response.headers);
-  for (const [key, value] of Object.entries(CORS_HEADERS)) {
-    headers.set(key, value);
-  }
-  return new Response(response.body, {
-    status: response.status,
-    statusText: response.statusText,
-    headers
-  });
-}
-function buildOnRequestHandler(config) {
-  return async (c, request) => {
-    var _a;
-    const url = new URL(request.url);
-    const pathname = url.pathname;
-    const match = pathname.match(/^\/fetch\/([a-z0-9]+)(\/.*)?$/);
-    if (!match) {
-      return new Response("Not Found", { status: 404 });
-    }
-    if (request.method === "OPTIONS") {
-      return new Response(null, { status: 204, headers: CORS_HEADERS });
-    }
-    const token = match[1];
-    const remainingPath = match[2] ?? "/";
-    const now = Date.now();
-    const rows = await c.db.execute(
-      `SELECT port FROM agent_os_preview_tokens WHERE token = ? AND expires_at > ?`,
-      token,
-      now
-    );
-    if (rows.length === 0) {
-      c.log.warn({ msg: "agent-os preview auth failed", token });
-      return addCorsHeaders(new Response("Forbidden", { status: 403 }));
-    }
-    const port = (_a = rows[0]) == null ? void 0 : _a.port;
-    const agentOs2 = await ensureVm(
-      c,
-      config
-    );
-    const vmUrl = `http://localhost:${port}${remainingPath}${url.search}`;
-    const vmRequest = new Request(vmUrl, {
-      method: request.method,
-      headers: request.headers,
-      body: request.body,
-      duplex: "half"
-    });
-    const vmResponse = await agentOs2.fetch(port, vmRequest);
-    c.log.info({
-      msg: "agent-os preview request proxied",
-      port,
-      method: request.method,
-      path: remainingPath,
-      status: vmResponse.status
-    });
-    return addCorsHeaders(vmResponse);
-  };
-}
-function buildPreviewActions(config) {
-  return {
-    createSignedPreviewUrl: async (c, port, expiresInSeconds) => {
-      await ensureVm(c, config);
-      const effectiveExpires = expiresInSeconds ?? config.preview.defaultExpiresInSeconds;
-      const maxExpires = config.preview.maxExpiresInSeconds;
-      if (effectiveExpires < 1 || effectiveExpires > maxExpires) {
-        throw new Error(
-          `expiresInSeconds must be between 1 and ${maxExpires}`
-        );
-      }
-      const token = generateToken();
-      const now = Date.now();
-      const expiresAt = now + effectiveExpires * 1e3;
-      await c.db.execute(
-        `INSERT INTO agent_os_preview_tokens (token, port, created_at, expires_at)
-				 VALUES (?, ?, ?, ?)`,
-        token,
-        port,
-        now,
-        expiresAt
-      );
-      await c.db.execute(
-        `DELETE FROM agent_os_preview_tokens WHERE expires_at <= ?`,
-        now
-      );
-      const path = `/request/fetch/${token}`;
-      c.log.info({
-        msg: "agent-os preview token created",
-        port,
-        expiresInSeconds: effectiveExpires
-      });
-      return { path, token, port, expiresAt };
-    },
-    expireSignedPreviewUrl: async (c, token) => {
-      await c.db.execute(
-        `DELETE FROM agent_os_preview_tokens WHERE token = ?`,
-        token
-      );
-      c.log.info({ msg: "agent-os preview token expired", token });
-    }
-  };
-}
-
-// src/agent-os/actor/process.ts
-function broadcastProcessEvent(c, name, payload) {
-  try {
-    c.broadcast(name, payload);
-  } catch (error) {
-    if (isRivetErrorCode(error, "actor", "stopping")) {
-      return;
-    }
-    throw error;
-  }
+  var _a, _b;
+  return {
+    id: job.id,
+    schedule: job.schedule,
+    action: serializeCronAction(job.action),
+    overlap: job.overlap,
+    lastRun: (_a = job.lastRun) == null ? void 0 : _a.toISOString(),
+    nextRun: (_b = job.nextRun) == null ? void 0 : _b.toISOString(),
+    runCount: job.runCount,
+    running: job.running
+  };
 }
-function buildProcessActions(config) {
+function buildCronActions(config) {
   return {
-    exec: async (c, command, options) => {
-      const agentOs2 = await ensureVm(c, config);
-      return agentOs2.exec(command, options);
-    },
-    spawn: async (c, command, args, options) => {
+    scheduleCron: async (c, options) => {
       const agentOs2 = await ensureVm(c, config);
-      const { pid } = agentOs2.spawn(command, args, {
-        ...options,
-        onStdout: (data) => {
-          var _a;
-          broadcastProcessEvent(c, "processOutput", {
-            pid,
-            stream: "stdout",
-            data
-          });
-          (_a = options == null ? void 0 : options.onStdout) == null ? void 0 : _a.call(options, data);
-        },
-        onStderr: (data) => {
-          var _a;
-          broadcastProcessEvent(c, "processOutput", {
-            pid,
-            stream: "stderr",
-            data
-          });
-          (_a = options == null ? void 0 : options.onStderr) == null ? void 0 : _a.call(options, data);
-        }
+      const job = agentOs2.scheduleCron({
+        id: options.id,
+        schedule: options.schedule,
+        action: options.action,
+        overlap: options.overlap
       });
-      c.vars.activeProcesses.add(pid);
-      syncPreventSleep(c);
       c.log.info({
-        msg: "agent-os process spawned",
-        pid,
-        command
-      });
-      agentOs2.waitProcess(pid).then((exitCode) => {
-        broadcastProcessEvent(c, "processExit", { pid, exitCode });
-        c.log.info({
-          msg: "agent-os process exited",
-          pid,
-          exitCode
-        });
-      }).catch(() => {
-      }).finally(() => {
-        c.vars.activeProcesses.delete(pid);
-        syncPreventSleep(c);
+        msg: "agent-os cron job scheduled",
+        jobId: job.id,
+        schedule: options.schedule
       });
-      return { pid };
-    },
-    writeProcessStdin: async (c, pid, data) => {
-      const agentOs2 = await ensureVm(c, config);
-      agentOs2.writeProcessStdin(pid, data);
-    },
-    closeProcessStdin: async (c, pid) => {
-      const agentOs2 = await ensureVm(c, config);
-      agentOs2.closeProcessStdin(pid);
-    },
-    waitProcess: async (c, pid) => {
-      const agentOs2 = await ensureVm(c, config);
-      return agentOs2.waitProcess(pid);
-    },
-    listProcesses: async (c) => {
-      const agentOs2 = await ensureVm(c, config);
-      return agentOs2.listProcesses();
-    },
-    allProcesses: async (c) => {
-      const agentOs2 = await ensureVm(c, config);
-      return agentOs2.allProcesses();
-    },
-    processTree: async (c) => {
-      const agentOs2 = await ensureVm(c, config);
-      return agentOs2.processTree();
-    },
-    getProcess: async (c, pid) => {
-      const agentOs2 = await ensureVm(c, config);
-      return agentOs2.getProcess(pid);
+      return { id: job.id };
     },
-    stopProcess: async (c, pid) => {
+    listCronJobs: async (c) => {
       const agentOs2 = await ensureVm(c, config);
-      agentOs2.stopProcess(pid);
+      return agentOs2.listCronJobs().map(serializeCronJob);
     },
-    killProcess: async (c, pid) => {
+    cancelCronJob: async (c, id) => {
       const agentOs2 = await ensureVm(c, config);
-      agentOs2.killProcess(pid);
+      agentOs2.cancelCronJob(id);
+      c.log.info({ msg: "agent-os cron job cancelled", jobId: id });
     }
   };
 }
 
-// src/agent-os/actor/session.ts
-function stripFunctions(value) {
-  if (value === null || value === void 0) return value;
-  if (typeof value === "function") return void 0;
-  if (typeof value !== "object") return value;
-  if (Array.isArray(value)) return value.map(stripFunctions);
-  const out = {};
-  for (const [k, v] of Object.entries(value)) {
-    if (typeof v !== "function") {
-      out[k] = stripFunctions(v);
-    }
+// src/agent-os/fs/database-vfs.ts
+import * as posixPath from "path/posix";
+var S_IFDIR = 16384;
+var S_IFREG = 32768;
+var S_IFLNK = 40960;
+var DEFAULT_FILE_MODE = S_IFREG | 420;
+var DEFAULT_DIR_MODE = S_IFDIR | 493;
+function normPath(p) {
+  const normalized = posixPath.normalize(`/${p}`);
+  if (normalized.length > 1 && normalized.endsWith("/")) {
+    return normalized.slice(0, -1);
   }
-  return out;
+  return normalized;
 }
-function assertSessionExists(c, sessionId) {
-  if (!c.vars.sessions.has(sessionId)) {
-    throw new Error(`session not found: ${sessionId}`);
-  }
+function parentPath(p) {
+  const parent = posixPath.dirname(p);
+  return parent;
 }
-function toSessionRecord(agentOs2, sessionId, agentType) {
-  return {
-    sessionId,
-    agentType,
-    capabilities: agentOs2.getSessionCapabilities(sessionId) ?? {},
-    agentInfo: agentOs2.getSessionAgentInfo(sessionId)
-  };
+function throwENOENT(path) {
+  const err = new Error(`ENOENT: no such file or directory: ${path}`);
+  err.name = "ENOENT";
+  throw err;
 }
-async function persistSession(c, agentOs2, sessionId, agentType) {
-  const now = Date.now();
-  const capabilities = agentOs2.getSessionCapabilities(sessionId) ?? {};
-  const agentInfo = agentOs2.getSessionAgentInfo(sessionId);
-  await c.db.execute(
-    `INSERT OR REPLACE INTO agent_os_sessions (session_id, agent_type, capabilities, agent_info, created_at)
-		 VALUES (?, ?, ?, ?, ?)`,
-    sessionId,
-    agentType,
-    JSON.stringify(capabilities),
-    agentInfo ? JSON.stringify(agentInfo) : null,
-    now
-  );
+function throwEEXIST(path) {
+  const err = new Error(`EEXIST: file already exists: ${path}`);
+  err.name = "EEXIST";
+  throw err;
 }
-async function persistSessionEvent(c, sessionId, event2) {
-  var _a;
-  const now = Date.now();
-  const rows = await c.db.execute(
-    `SELECT MAX(seq) as max_seq FROM agent_os_session_events WHERE session_id = ?`,
-    sessionId
-  );
-  const nextSeq = (((_a = rows[0]) == null ? void 0 : _a.max_seq) ?? -1) + 1;
-  await c.db.execute(
-    `INSERT INTO agent_os_session_events (session_id, seq, event, created_at)
-		 VALUES (?, ?, ?, ?)`,
-    sessionId,
-    nextSeq,
-    JSON.stringify(event2),
-    now
-  );
+function throwENOTDIR(path) {
+  const err = new Error(`ENOTDIR: not a directory: ${path}`);
+  err.name = "ENOTDIR";
+  throw err;
 }
-async function deletePersistedSession(c, sessionId) {
-  await c.db.execute(
-    `DELETE FROM agent_os_session_events WHERE session_id = ?`,
-    sessionId
-  );
-  await c.db.execute(
-    `DELETE FROM agent_os_sessions WHERE session_id = ?`,
-    sessionId
-  );
+function throwEISDIR(path) {
+  const err = new Error(`EISDIR: illegal operation on a directory: ${path}`);
+  err.name = "EISDIR";
+  throw err;
 }
-function subscribeToSession(c, agentOs2, sessionId, parsedConfig) {
-  agentOs2.onSessionEvent(sessionId, (event2) => {
-    c.broadcast(
-      "sessionEvent",
-      JSON.parse(JSON.stringify({ sessionId, event: event2 }))
-    );
-    persistSessionEvent(c, sessionId, event2).catch(
-      (err) => c.log.error({
-        msg: "agent-os failed to persist session event",
-        sessionId,
-        error: err
-      })
+function throwENOTEMPTY(path) {
+  const err = new Error(`ENOTEMPTY: directory not empty: ${path}`);
+  err.name = "ENOTEMPTY";
+  throw err;
+}
+function throwENOSYS(op) {
+  const err = new Error(`ENOSYS: function not implemented: ${op}`);
+  err.name = "ENOSYS";
+  throw err;
+}
+function rowToStat(row) {
+  return {
+    mode: row.mode,
+    size: row.size,
+    isDirectory: row.is_directory === 1,
+    isSymbolicLink: row.symlink_target !== null,
+    atimeMs: row.atime_ms,
+    mtimeMs: row.mtime_ms,
+    ctimeMs: row.ctime_ms,
+    birthtimeMs: row.birthtime_ms,
+    ino: 0,
+    nlink: row.nlink,
+    uid: row.uid,
+    gid: row.gid
+  };
+}
+function createDatabaseVfs(options) {
+  const { db: db2 } = options;
+  async function getEntry(path) {
+    const rows = await db2.execute(
+      "SELECT * FROM agent_os_fs_entries WHERE path = ?",
+      path
     );
-    if (parsedConfig.onSessionEvent) {
-      runHook(
-        c,
-        "onSessionEvent",
-        () => {
-          var _a;
-          return (_a = parsedConfig.onSessionEvent) == null ? void 0 : _a.call(parsedConfig, c, sessionId, event2);
-        }
-      );
+    return rows[0];
+  }
+  async function getEntryOrThrow(path) {
+    const entry = await getEntry(path);
+    if (!entry) {
+      throwENOENT(path);
+    }
+    return entry;
+  }
+  async function ensureParentExists(path) {
+    const parent = parentPath(path);
+    if (parent === path) return;
+    const entry = await getEntry(parent);
+    if (!entry) {
+      throwENOENT(parent);
     }
-  });
-  agentOs2.onPermissionRequest(sessionId, (request) => {
-    c.broadcast(
-      "permissionRequest",
-      JSON.parse(JSON.stringify({ sessionId, request }))
+    if (entry.is_directory !== 1) {
+      throwENOTDIR(parent);
+    }
+  }
+  async function getChildEntries(dirPath) {
+    const prefix = dirPath === "/" ? "/" : `${dirPath}/`;
+    const rows = await db2.execute(
+      "SELECT * FROM agent_os_fs_entries WHERE path LIKE ? AND path != ?",
+      `${prefix}%`,
+      dirPath
     );
-    if (parsedConfig.onPermissionRequest) {
-      runHook(
-        c,
-        "onPermissionRequest",
-        () => {
-          var _a;
-          return (_a = parsedConfig.onPermissionRequest) == null ? void 0 : _a.call(parsedConfig, c, sessionId, request);
-        }
+    return rows.filter((row) => {
+      const relative = row.path.slice(prefix.length);
+      return relative.length > 0 && !relative.includes("/");
+    });
+  }
+  const rootInit = (async () => {
+    const root = await getEntry("/");
+    if (!root) {
+      const now = Date.now();
+      await db2.execute(
+        `INSERT OR IGNORE INTO agent_os_fs_entries (path, is_directory, content, mode, uid, gid, size, atime_ms, mtime_ms, ctime_ms, birthtime_ms, symlink_target, nlink) VALUES (?, 1, NULL, ?, 0, 0, 0, ?, ?, ?, ?, NULL, 2)`,
+        "/",
+        DEFAULT_DIR_MODE,
+        now,
+        now,
+        now,
+        now
       );
     }
-  });
-  c.vars.sessions.add(sessionId);
-}
-function buildSessionActions(config) {
-  return {
-    createSession: async (c, agentType, options) => {
-      const agentOs2 = await ensureVm(c, config);
-      const { sessionId } = await agentOs2.createSession(
-        agentType,
-        options
-      );
-      subscribeToSession(c, agentOs2, sessionId, config);
-      await persistSession(c, agentOs2, sessionId, agentType);
-      c.log.info({
-        msg: "agent-os session created",
-        sessionId,
-        agentType
-      });
-      return toSessionRecord(agentOs2, sessionId, agentType);
-    },
-    listSessions: async (c) => {
-      const agentOs2 = await ensureVm(c, config);
-      return agentOs2.listSessions();
-    },
-    getSession: async (c, sessionId) => {
-      assertSessionExists(c, sessionId);
-      const agentOs2 = await ensureVm(c, config);
-      const info = agentOs2.listSessions().find((s) => s.sessionId === sessionId);
-      if (!info) {
-        throw new Error(`session not found: ${sessionId}`);
+  })();
+  const backend = {
+    async readFile(p) {
+      await rootInit;
+      const path = normPath(p);
+      const entry = await getEntryOrThrow(path);
+      if (entry.is_directory === 1) {
+        throwEISDIR(path);
       }
-      return toSessionRecord(agentOs2, sessionId, info.agentType);
-    },
-    destroySession: async (c, sessionId) => {
-      const agentOs2 = await ensureVm(c, config);
-      await agentOs2.destroySession(sessionId);
-      c.vars.sessions.delete(sessionId);
-      c.vars.activeSessionIds.delete(sessionId);
-      syncPreventSleep(c);
-      await deletePersistedSession(c, sessionId);
-      c.log.info({ msg: "agent-os session destroyed", sessionId });
-    },
-    resumeSession: async (c, sessionId) => {
-      const agentOs2 = await ensureVm(c, config);
-      return agentOs2.resumeSession(sessionId);
+      return entry.content ?? new Uint8Array(0);
     },
-    closeSession: async (c, sessionId) => {
-      const agentOs2 = await ensureVm(c, config);
-      agentOs2.closeSession(sessionId);
-      c.vars.sessions.delete(sessionId);
-      c.vars.activeSessionIds.delete(sessionId);
-      syncPreventSleep(c);
-      await deletePersistedSession(c, sessionId);
-      c.log.info({ msg: "agent-os session closed", sessionId });
-    }
-  };
-}
-function buildPromptActions(_config) {
-  return {
-    sendPrompt: async (c, sessionId, text) => {
-      if (c.aborted) {
-        throw new Error(
-          "actor is shutting down, cannot start new prompt"
-        );
-      }
-      assertSessionExists(c, sessionId);
-      const agentOs2 = c.vars.agentOs;
-      if (!agentOs2) {
-        throw new Error("VM not initialized");
-      }
-      c.vars.activeSessionIds.add(sessionId);
-      syncPreventSleep(c);
-      c.log.info({ msg: "agent-os prompt turn started", sessionId });
-      const start = Date.now();
-      try {
-        const result = await agentOs2.prompt(sessionId, text);
-        return {
-          response: JSON.parse(JSON.stringify(result.response)),
-          text: result.text
-        };
-      } finally {
-        c.vars.activeSessionIds.delete(sessionId);
-        syncPreventSleep(c);
-        c.log.info({
-          msg: "agent-os prompt turn ended",
-          sessionId,
-          durationMs: Date.now() - start
-        });
-      }
+    async readTextFile(p) {
+      const data = await backend.readFile(p);
+      return new TextDecoder().decode(data);
     },
-    cancelPrompt: async (c, sessionId) => {
-      assertSessionExists(c, sessionId);
-      const agentOs2 = c.vars.agentOs;
-      if (!agentOs2) {
-        throw new Error("VM not initialized");
+    async readDir(p) {
+      await rootInit;
+      const path = normPath(p);
+      const entry = await getEntryOrThrow(path);
+      if (entry.is_directory !== 1) {
+        throwENOTDIR(path);
       }
-      return stripFunctions(
-        agentOs2.cancelSession(sessionId)
-      );
+      const children = await getChildEntries(path);
+      return children.map((child) => posixPath.basename(child.path));
     },
-    respondPermission: async (c, sessionId, permissionId, reply) => {
-      assertSessionExists(c, sessionId);
-      const agentOs2 = c.vars.agentOs;
-      if (!agentOs2) {
-        throw new Error("VM not initialized");
-      }
-      return stripFunctions(
-        agentOs2.respondPermission(sessionId, permissionId, reply)
-      );
-    }
-  };
-}
-function buildConfigActions(_config) {
-  return {
-    setMode: async (c, sessionId, modeId) => {
-      assertSessionExists(c, sessionId);
-      const agentOs2 = c.vars.agentOs;
-      if (!agentOs2) {
-        throw new Error("VM not initialized");
+    async readDirWithTypes(p) {
+      await rootInit;
+      const path = normPath(p);
+      const entry = await getEntryOrThrow(path);
+      if (entry.is_directory !== 1) {
+        throwENOTDIR(path);
       }
-      return stripFunctions(
-        agentOs2.setSessionMode(sessionId, modeId)
-      );
+      const children = await getChildEntries(path);
+      return children.map((child) => ({
+        name: posixPath.basename(child.path),
+        isDirectory: child.is_directory === 1,
+        isSymbolicLink: child.symlink_target !== null,
+        ino: 0
+      }));
     },
-    getModes: async (c, sessionId) => {
-      assertSessionExists(c, sessionId);
-      const agentOs2 = c.vars.agentOs;
-      if (!agentOs2) {
-        throw new Error("VM not initialized");
+    async writeFile(p, content) {
+      await rootInit;
+      const path = normPath(p);
+      await ensureParentExists(path);
+      const existing = await getEntry(path);
+      if (existing && existing.is_directory === 1) {
+        throwEISDIR(path);
       }
-      return agentOs2.getSessionModes(sessionId);
-    },
-    setModel: async (c, sessionId, model) => {
-      assertSessionExists(c, sessionId);
-      const agentOs2 = c.vars.agentOs;
-      if (!agentOs2) {
-        throw new Error("VM not initialized");
+      const data = typeof content === "string" ? new TextEncoder().encode(content) : content;
+      const now = Date.now();
+      if (existing) {
+        await db2.execute(
+          `UPDATE agent_os_fs_entries SET content = ?, size = ?, mtime_ms = ?, ctime_ms = ?, atime_ms = ? WHERE path = ?`,
+          data,
+          data.byteLength,
+          now,
+          now,
+          now,
+          path
+        );
+      } else {
+        await db2.execute(
+          `INSERT INTO agent_os_fs_entries (path, is_directory, content, mode, uid, gid, size, atime_ms, mtime_ms, ctime_ms, birthtime_ms, symlink_target, nlink) VALUES (?, 0, ?, ?, 0, 0, ?, ?, ?, ?, ?, NULL, 1)`,
+          path,
+          data,
+          DEFAULT_FILE_MODE,
+          data.byteLength,
+          now,
+          now,
+          now,
+          now
+        );
       }
-      return stripFunctions(
-        agentOs2.setSessionModel(sessionId, model)
-      );
     },
-    setThoughtLevel: async (c, sessionId, level) => {
-      assertSessionExists(c, sessionId);
-      const agentOs2 = c.vars.agentOs;
-      if (!agentOs2) {
-        throw new Error("VM not initialized");
+    async createDir(p) {
+      await rootInit;
+      const path = normPath(p);
+      await ensureParentExists(path);
+      const existing = await getEntry(path);
+      if (existing) {
+        throwEEXIST(path);
       }
-      return stripFunctions(
-        agentOs2.setSessionThoughtLevel(sessionId, level)
+      const now = Date.now();
+      await db2.execute(
+        `INSERT INTO agent_os_fs_entries (path, is_directory, content, mode, uid, gid, size, atime_ms, mtime_ms, ctime_ms, birthtime_ms, symlink_target, nlink) VALUES (?, 1, NULL, ?, 0, 0, 0, ?, ?, ?, ?, NULL, 2)`,
+        path,
+        DEFAULT_DIR_MODE,
+        now,
+        now,
+        now,
+        now
       );
     },
-    getConfigOptions: async (c, sessionId) => {
-      assertSessionExists(c, sessionId);
-      const agentOs2 = c.vars.agentOs;
-      if (!agentOs2) {
-        throw new Error("VM not initialized");
+    async mkdir(p, options2) {
+      await rootInit;
+      const path = normPath(p);
+      if (options2 == null ? void 0 : options2.recursive) {
+        const parts = path.split("/").filter(Boolean);
+        let current = "";
+        for (const part of parts) {
+          current += `/${part}`;
+          const existing = await getEntry(current);
+          if (!existing) {
+            const now = Date.now();
+            await db2.execute(
+              `INSERT INTO agent_os_fs_entries (path, is_directory, content, mode, uid, gid, size, atime_ms, mtime_ms, ctime_ms, birthtime_ms, symlink_target, nlink) VALUES (?, 1, NULL, ?, 0, 0, 0, ?, ?, ?, ?, NULL, 2)`,
+              current,
+              DEFAULT_DIR_MODE,
+              now,
+              now,
+              now,
+              now
+            );
+          } else if (existing.is_directory !== 1) {
+            throwENOTDIR(current);
+          }
+        }
+      } else {
+        await backend.createDir(p);
       }
-      return agentOs2.getSessionConfigOptions(sessionId);
     },
-    getEvents: async (c, sessionId, options) => {
-      assertSessionExists(c, sessionId);
-      const agentOs2 = c.vars.agentOs;
-      if (!agentOs2) {
-        throw new Error("VM not initialized");
-      }
-      return agentOs2.getSessionEvents(sessionId, options).map((e) => e.notification);
+    async exists(p) {
+      await rootInit;
+      const path = normPath(p);
+      const entry = await getEntry(path);
+      return entry !== void 0;
     },
-    getSequencedEvents: async (c, sessionId, options) => {
-      assertSessionExists(c, sessionId);
-      const agentOs2 = c.vars.agentOs;
-      if (!agentOs2) {
-        throw new Error("VM not initialized");
-      }
-      return agentOs2.getSessionEvents(sessionId, options);
+    async stat(p) {
+      await rootInit;
+      const path = normPath(p);
+      const entry = await getEntryOrThrow(path);
+      return rowToStat(entry);
     },
-    rawSend: async (c, sessionId, method, params) => {
-      assertSessionExists(c, sessionId);
-      const agentOs2 = c.vars.agentOs;
-      if (!agentOs2) {
-        throw new Error("VM not initialized");
+    async removeFile(p) {
+      await rootInit;
+      const path = normPath(p);
+      const entry = await getEntryOrThrow(path);
+      if (entry.is_directory === 1) {
+        throwEISDIR(path);
       }
-      return stripFunctions(
-        agentOs2.rawSessionSend(sessionId, method, params)
-      );
-    }
-  };
-}
-function buildSessionPersistenceActions(_config) {
-  return {
-    listPersistedSessions: async (c) => {
-      const rows = await c.db.execute(
-        `SELECT session_id, agent_type, capabilities, agent_info, created_at
-				 FROM agent_os_sessions
-				 ORDER BY created_at ASC`
+      await db2.execute(
+        "DELETE FROM agent_os_fs_entries WHERE path = ?",
+        path
       );
-      return rows.map((row) => ({
-        sessionId: row.session_id,
-        agentType: row.agent_type,
-        capabilities: JSON.parse(row.capabilities),
-        agentInfo: row.agent_info ? JSON.parse(row.agent_info) : null,
-        createdAt: row.created_at
-      }));
     },
-    getSessionEvents: async (c, sessionId) => {
-      const rows = await c.db.execute(
-        `SELECT session_id, seq, event, created_at
-				 FROM agent_os_session_events
-				 WHERE session_id = ?
-				 ORDER BY seq ASC`,
-        sessionId
+    async removeDir(p) {
+      await rootInit;
+      const path = normPath(p);
+      const entry = await getEntryOrThrow(path);
+      if (entry.is_directory !== 1) {
+        throwENOTDIR(path);
+      }
+      const children = await getChildEntries(path);
+      if (children.length > 0) {
+        throwENOTEMPTY(path);
+      }
+      await db2.execute(
+        "DELETE FROM agent_os_fs_entries WHERE path = ?",
+        path
       );
-      return rows.map((row) => ({
-        sessionId: row.session_id,
-        seq: row.seq,
-        event: JSON.parse(row.event),
-        createdAt: row.created_at
-      }));
-    }
-  };
-}
-
-// src/agent-os/actor/shell.ts
-function buildShellActions(config) {
-  return {
-    openShell: async (c, options) => {
-      const agentOs2 = await ensureVm(c, config);
-      const { shellId } = agentOs2.openShell(options);
-      agentOs2.onShellData(shellId, (data) => {
-        c.broadcast("shellData", { shellId, data });
-      });
-      c.vars.activeShells.add(shellId);
-      syncPreventSleep(c);
-      c.log.info({ msg: "agent-os shell opened", shellId });
-      return { shellId };
-    },
-    writeShell: async (c, shellId, data) => {
-      const agentOs2 = await ensureVm(c, config);
-      agentOs2.writeShell(shellId, data);
-    },
-    resizeShell: async (c, shellId, cols, rows) => {
-      const agentOs2 = await ensureVm(c, config);
-      agentOs2.resizeShell(shellId, cols, rows);
-    },
-    closeShell: async (c, shellId) => {
-      const agentOs2 = await ensureVm(c, config);
-      agentOs2.closeShell(shellId);
-      c.vars.activeShells.delete(shellId);
-      syncPreventSleep(c);
-      c.log.info({ msg: "agent-os shell closed", shellId });
-    }
-  };
-}
-
-// src/agent-os/actor/index.ts
-async function ensureVm(c, config) {
-  if (c.vars.agentOs) {
-    return c.vars.agentOs;
-  }
-  const start = Date.now();
-  const options = buildVmOptions(config.options);
-  const agentOs2 = await AgentOs.create(options);
-  c.vars.agentOs = agentOs2;
-  agentOs2.onCronEvent((cronEvent) => {
-    c.broadcast("cronEvent", { event: cronEvent });
-  });
-  c.broadcast("vmBooted", {});
-  c.log.info({
-    msg: "agent-os vm booted",
-    bootDurationMs: Date.now() - start
-  });
-  return agentOs2;
-}
-function buildVmOptions(userOptions) {
-  const userMounts = (userOptions == null ? void 0 : userOptions.mounts) ?? [];
-  const hasWorkdirMount = userMounts.some(
-    (m) => m.path === "/home/user"
-  );
-  if (hasWorkdirMount) {
-    return userOptions ?? {};
-  }
-  const memMount = {
-    path: "/home/user",
-    driver: createInMemoryFileSystem()
-  };
-  return {
-    ...userOptions,
-    mounts: [memMount, ...userMounts]
-  };
-}
-function syncPreventSleep(c) {
-  const shouldPrevent = c.vars.activeSessionIds.size > 0 || c.vars.activeProcesses.size > 0 || c.vars.activeHooks.size > 0 || c.vars.activeShells.size > 0;
-  c.setPreventSleep(shouldPrevent);
-  c.log.info({
-    msg: "agent-os prevent sleep sync",
-    preventSleep: shouldPrevent,
-    activeSessions: c.vars.activeSessionIds.size,
-    activeProcesses: c.vars.activeProcesses.size,
-    activeHooks: c.vars.activeHooks.size,
-    activeShells: c.vars.activeShells.size
-  });
-}
-function runHook(c, name, callback) {
-  const promise = Promise.resolve(callback()).catch(
-    (error) => c.log.error({ msg: "agent-os hook failed", hookName: name, error })
-  ).finally(() => {
-    c.vars.activeHooks.delete(promise);
-    syncPreventSleep(c);
-  });
-  c.vars.activeHooks.add(promise);
-  syncPreventSleep(c);
-  c.waitUntil(promise);
-}
-function agentOs(config) {
-  const parsedConfig = agentOsActorConfigSchema.parse(
-    config
-  );
-  return actor({
-    options: {
-      sleepGracePeriod: 9e5,
-      actionTimeout: 9e5
-    },
-    createState: async () => ({}),
-    createVars: () => ({
-      agentOs: null,
-      activeSessionIds: /* @__PURE__ */ new Set(),
-      activeProcesses: /* @__PURE__ */ new Set(),
-      activeHooks: /* @__PURE__ */ new Set(),
-      activeShells: /* @__PURE__ */ new Set(),
-      sessions: /* @__PURE__ */ new Set()
-    }),
-    db: db({
-      onMigrate: migrateAgentOsTables
-    }),
-    events: {
-      sessionEvent: sessionEventToken,
-      permissionRequest: permissionRequestToken,
-      vmBooted: vmBootedToken,
-      vmShutdown: vmShutdownToken,
-      processOutput: processOutputToken,
-      processExit: processExitToken,
-      shellData: shellDataToken,
-      cronEvent: cronEventToken
     },
-    onBeforeConnect: parsedConfig.onBeforeConnect ? async (ctx, params) => {
-      var _a;
-      if (ctx.request) {
-        const url = new URL(ctx.request.url);
-        if (url.pathname.startsWith("/fetch/")) {
-          return;
+    async rename(oldPath, newPath) {
+      await rootInit;
+      const from = normPath(oldPath);
+      const to = normPath(newPath);
+      const entry = await getEntryOrThrow(from);
+      await ensureParentExists(to);
+      const destEntry = await getEntry(to);
+      if (destEntry) {
+        if (destEntry.is_directory === 1) {
+          const children = await getChildEntries(to);
+          if (children.length > 0) {
+            throwENOTEMPTY(to);
+          }
         }
+        await db2.execute(
+          "DELETE FROM agent_os_fs_entries WHERE path = ?",
+          to
+        );
       }
-      await ((_a = parsedConfig.onBeforeConnect) == null ? void 0 : _a.call(parsedConfig, ctx, params));
-    } : void 0,
-    onRequest: buildOnRequestHandler(parsedConfig),
-    onSleep: async (c) => {
-      c.log.info({
-        msg: "agent-os vm shutdown for sleep",
-        activeSessions: c.vars.sessions.size,
-        activeProcesses: c.vars.activeProcesses.size,
-        activeShells: c.vars.activeShells.size
-      });
-      if (c.vars.agentOs) {
-        await c.vars.agentOs.dispose();
-        c.vars.agentOs = null;
+      if (entry.is_directory === 1) {
+        const prefix = from === "/" ? "/" : `${from}/`;
+        const newPrefix = to === "/" ? "/" : `${to}/`;
+        const descendants = await db2.execute(
+          "SELECT path FROM agent_os_fs_entries WHERE path LIKE ?",
+          `${prefix}%`
+        );
+        for (const desc of descendants) {
+          const newDescPath = newPrefix + desc.path.slice(prefix.length);
+          await db2.execute(
+            "UPDATE agent_os_fs_entries SET path = ? WHERE path = ?",
+            newDescPath,
+            desc.path
+          );
+        }
       }
-      c.broadcast("vmShutdown", { reason: "sleep" });
+      const now = Date.now();
+      await db2.execute(
+        "UPDATE agent_os_fs_entries SET path = ?, ctime_ms = ? WHERE path = ?",
+        to,
+        now,
+        from
+      );
     },
-    onDestroy: async (c) => {
-      c.log.info({
-        msg: "agent-os vm shutdown for destroy",
-        activeSessions: c.vars.sessions.size,
-        activeProcesses: c.vars.activeProcesses.size,
-        activeShells: c.vars.activeShells.size
-      });
-      if (c.vars.agentOs) {
-        await c.vars.agentOs.dispose();
-        c.vars.agentOs = null;
+    async realpath(p) {
+      await rootInit;
+      const path = normPath(p);
+      const entry = await getEntryOrThrow(path);
+      if (entry.symlink_target !== null) {
+        return normPath(entry.symlink_target);
       }
-      c.broadcast("vmShutdown", { reason: "destroy" });
-    },
-    actions: {
-      ...buildSessionActions(parsedConfig),
-      ...buildPromptActions(parsedConfig),
-      ...buildConfigActions(parsedConfig),
-      ...buildSessionPersistenceActions(parsedConfig),
-      ...buildProcessActions(parsedConfig),
-      ...buildFilesystemActions(parsedConfig),
-      ...buildPreviewActions(parsedConfig),
-      ...buildShellActions(parsedConfig),
-      ...buildCronActions(parsedConfig),
-      ...buildNetworkActions(parsedConfig)
-    }
-  });
-}
-var sessionEventToken = event();
-var permissionRequestToken = event();
-var vmBootedToken = event();
-var vmShutdownToken = event();
-var processOutputToken = event();
-var processExitToken = event();
-var shellDataToken = event();
-var cronEventToken = event();
-
-// src/agent-os/actor/filesystem.ts
-function buildFilesystemActions(config) {
-  return {
-    readFile: async (c, path) => {
-      const agentOs2 = await ensureVm(c, config);
-      return agentOs2.readFile(path);
-    },
-    writeFile: async (c, path, content) => {
-      const agentOs2 = await ensureVm(c, config);
-      await agentOs2.writeFile(path, content);
+      return path;
     },
-    readFiles: async (c, paths) => {
-      const agentOs2 = await ensureVm(c, config);
-      return agentOs2.readFiles(paths);
+    async symlink(target, linkPath) {
+      await rootInit;
+      const link = normPath(linkPath);
+      await ensureParentExists(link);
+      const existing = await getEntry(link);
+      if (existing) {
+        throwEEXIST(link);
+      }
+      const now = Date.now();
+      await db2.execute(
+        `INSERT INTO agent_os_fs_entries (path, is_directory, content, mode, uid, gid, size, atime_ms, mtime_ms, ctime_ms, birthtime_ms, symlink_target, nlink) VALUES (?, 0, NULL, ?, 0, 0, ?, ?, ?, ?, ?, ?, 1)`,
+        link,
+        S_IFLNK | 511,
+        target.length,
+        now,
+        now,
+        now,
+        now,
+        target
+      );
     },
-    writeFiles: async (c, entries) => {
-      const agentOs2 = await ensureVm(c, config);
-      return agentOs2.writeFiles(entries);
+    async readlink(p) {
+      await rootInit;
+      const path = normPath(p);
+      const entry = await getEntryOrThrow(path);
+      if (entry.symlink_target === null) {
+        const err = new Error(`EINVAL: not a symlink: ${path}`);
+        err.name = "EINVAL";
+        throw err;
+      }
+      return entry.symlink_target;
     },
-    mkdir: async (c, path, options) => {
-      const agentOs2 = await ensureVm(c, config);
-      await agentOs2.mkdir(path, options);
+    async lstat(p) {
+      return backend.stat(p);
     },
-    readdir: async (c, path) => {
-      const agentOs2 = await ensureVm(c, config);
-      return agentOs2.readdir(path);
+    async link(_oldPath, _newPath) {
+      throwENOSYS("link");
     },
-    readdirRecursive: async (c, path, options) => {
-      const agentOs2 = await ensureVm(c, config);
-      return agentOs2.readdirRecursive(path, options);
+    async chmod(p, mode) {
+      await rootInit;
+      const path = normPath(p);
+      await getEntryOrThrow(path);
+      const now = Date.now();
+      await db2.execute(
+        "UPDATE agent_os_fs_entries SET mode = ?, ctime_ms = ? WHERE path = ?",
+        mode,
+        now,
+        path
+      );
     },
-    stat: async (c, path) => {
-      const agentOs2 = await ensureVm(c, config);
-      return agentOs2.stat(path);
+    async chown(p, uid, gid) {
+      await rootInit;
+      const path = normPath(p);
+      await getEntryOrThrow(path);
+      const now = Date.now();
+      await db2.execute(
+        "UPDATE agent_os_fs_entries SET uid = ?, gid = ?, ctime_ms = ? WHERE path = ?",
+        uid,
+        gid,
+        now,
+        path
+      );
     },
-    exists: async (c, path) => {
-      const agentOs2 = await ensureVm(c, config);
-      return agentOs2.exists(path);
+    async utimes(p, atime, mtime) {
+      await rootInit;
+      const path = normPath(p);
+      await getEntryOrThrow(path);
+      const now = Date.now();
+      await db2.execute(
+        "UPDATE agent_os_fs_entries SET atime_ms = ?, mtime_ms = ?, ctime_ms = ? WHERE path = ?",
+        atime,
+        mtime,
+        now,
+        path
+      );
     },
-    move: async (c, from, to) => {
-      const agentOs2 = await ensureVm(c, config);
-      await agentOs2.move(from, to);
+    async truncate(p, length) {
+      await rootInit;
+      const path = normPath(p);
+      const entry = await getEntryOrThrow(path);
+      if (entry.is_directory === 1) {
+        throwEISDIR(path);
+      }
+      const existing = entry.content ?? new Uint8Array(0);
+      let newContent;
+      if (length >= existing.byteLength) {
+        newContent = new Uint8Array(length);
+        newContent.set(existing);
+      } else {
+        newContent = existing.slice(0, length);
+      }
+      const now = Date.now();
+      await db2.execute(
+        "UPDATE agent_os_fs_entries SET content = ?, size = ?, mtime_ms = ?, ctime_ms = ? WHERE path = ?",
+        newContent,
+        length,
+        now,
+        now,
+        path
+      );
     },
-    deleteFile: async (c, path, options) => {
-      const agentOs2 = await ensureVm(c, config);
-      await agentOs2.delete(path, options);
+    async pread(p, offset, length) {
+      await rootInit;
+      const path = normPath(p);
+      const entry = await getEntryOrThrow(path);
+      if (entry.is_directory === 1) {
+        throwEISDIR(path);
+      }
+      const content = entry.content ?? new Uint8Array(0);
+      const end = Math.min(offset + length, content.byteLength);
+      if (offset >= content.byteLength) {
+        return new Uint8Array(0);
+      }
+      return content.slice(offset, end);
     },
-    // TODO: mountFs and unmountFs are not exposed as actor actions because
-    // filesystem drivers (VirtualFileSystem) are not serializable over the
-    // network. Mount filesystems via the `options.mounts` config in agentOs()
-    // instead. See: https://github.com/rivet-dev/rivet/issues/XXXX
-    listAgents: async (c) => {
-      const agentOs2 = await ensureVm(c, config);
-      return agentOs2.listAgents();
+    async pwrite(p, offset, data) {
+      await rootInit;
+      const path = normPath(p);
+      const entry = await getEntryOrThrow(path);
+      if (entry.is_directory === 1) {
+        throwEISDIR(path);
+      }
+      const content = entry.content ?? new Uint8Array(0);
+      const end = offset + data.byteLength;
+      const newSize = Math.max(content.byteLength, end);
+      const buf = new Uint8Array(newSize);
+      buf.set(content);
+      buf.set(data, offset);
+      const now = Date.now();
+      await db2.execute(
+        `UPDATE agent_os_fs_entries SET content = ?, size = ?, mtime_ms = ?, ctime_ms = ? WHERE path = ?`,
+        buf,
+        newSize,
+        now,
+        now,
+        path
+      );
     }
   };
+  return backend;
 }
 export {
   agentOs,