Module config 

Configuration types: AgentOsConfig (= TS AgentOsOptions), the permissions tree, root filesystem config, mount config, and the schedule-driver abstraction.

Ported from packages/core/src/agent-os.ts (AgentOsOptions), runtime.ts (Permissions), layers.ts / overlay-filesystem.ts (root/overlay), and cron/ (schedule driver).

Non-serializable parameters (MountConfig::Plain.driver, CronAction::Callback) are in-process only and become Arc<dyn ...> trait objects; they cannot cross the wire and are gated exactly as the actor layer gates them.

Structs

AcpLimits

AgentOsConfig

Resolved client options (= TS AgentOsOptions). All fields optional with documented defaults.

AgentOsConfigBuilder

Builder for AgentOsConfig.

AgentOsLimits

Operator-tunable runtime limits for a VM. Every field is optional; unset fields fall back to the sidecar defaults.

FsPermissionRule

{ mode; operations?; paths? }.

HostFunction

A single host function. The key it is registered under names it, and the input schema’s description documents it for the agent.

HostFunctionLimits

HttpLimits

JsRuntimeLimits

MountPlugin

A native mount plugin descriptor.

OverlayMountConfig

Overlay mount filesystem config.

PackageRef

A reference to a packed .aospkg package for the /opt/agentos projection. A directory path remains accepted for local transition fixtures.

PatternPermissionRule

{ mode; operations?; patterns? }.

Permissions

Top-level permission policy. All domains optional (allowAll when omitted).

PluginLimits

ProcessLimits

PythonLimits

ResolvedHostFunction

A host function resolved to the names the VM uses.

ResolvedHostFunctions

A collection resolved to the names the VM uses. Keys arrive as identifiers and are converted once here, so the rest of the client and the sidecar only ever see kebab-case command names.

ResourceLimits

RootFilesystemConfig

Root filesystem configuration. Default: overlay + bundled base snapshot.

RulePermissions

{ default?: PermissionMode; rules: T[] }.

ScheduleEntry

A schedule entry handed to a ScheduleDriver. Mirrors TS ScheduleEntry (cron/schedule-driver.ts).

ScheduleHandle

Handle to a scheduled entry. Mirrors TS ScheduleHandle { id }. Identifies the entry to cancel via ScheduleDriver::cancel.

SidecarJsBridgeCall

A sidecar-initiated js_bridge-style filesystem callback.

SoftwareInput

A flattened software package input.

SqliteLimits

TimerScheduleDriver

Default schedule driver backed by tokio timers and the system clock.

VmGroupConfig

VmUserAccountConfig

VmUserConfig

Initial Linux-style credentials and account record for processes in a VM.

WasmLimits

Enums

AgentOsSidecarConfig

How the client obtains its sidecar handle.

FsPermissions

PermissionMode | RulePermissions<FsPermissionRule>.

MountConfig

A filesystem mount. Plain.driver is an in-process trait object and cannot cross the wire.

PatternPermissions

PermissionMode | RulePermissions<PatternPermissionRule> (network/childProcess/process/env/hostFunction).

PermissionMode

"allow" or "deny".

RootFilesystemKind

The root filesystem kind.

RootFilesystemMode

Root filesystem mode.

RootLowerInput

A lower (immutable) snapshot layer input.

SoftwareKind

The kind of a software package, which decides how it is mounted into the VM. Mirrors the TS descriptor type discriminator (packages/core/src/packages.ts).

Traits

ScheduleDriver

Driver-owned scheduling abstraction. Mirrors the TS ScheduleDriver interface (cron/schedule-driver.ts) exactly: the driver parses the schedule, arms the timer, reschedules cron entries after each fire, and tears everything down on ScheduleDriver::dispose. This is the documented extension point: a custom driver (deterministic virtual-time test driver, fire-immediately driver, etc.) fully controls timing.

Functions

host_function_command_name

Convert a registration key to its command name. listOrders and list-orders both become list-orders, so the guest sees one spelling whichever the caller wrote. Mirrors hostFunctionCommandName in the TypeScript client.

node_modules_mount

Mount a host node_modules directory into the VM at /root/node_modules.

resolve_host_functions

Resolve the caller’s collections into the shape the client and sidecar use. Fails on a key that cannot become a command name, and on two keys that collide once converted.

Type Aliases

HostFunctionCallback

A host-side host function callback. Receives the validated JSON input, returns a JSON result or an error string. Stays host-side (never crosses to the guest); the guest invokes it by name via the sidecar host-callback channel.

HostFunctionCollection

One collection of host functions, keyed by function name. Each key becomes a subcommand of the collection’s CLI binary and a method on its guest global.

HostFunctionCollections

Host function collections, keyed by collection name (in-process; implementations stay host-side). Each key becomes the CLI binary agentos-{name} and a frozen guest global; functions are exposed to the guest as <collection>:<function> and dispatched back to HostFunction::execute via the sidecar host-callback channel.

ScheduleCallback

The callback fired by a ScheduleDriver when a schedule entry triggers.

SidecarJsBridgeCallback

Host-side handler for sidecar JsBridgeCallRequest payloads.