fix(toolchain,ci): pack agent bin at real entry file; fix crates.io base-filesystem path

.github/workflows/publish.yaml

@@ -431,8 +431,11 @@ jobs:
           done
           git add -f crates/execution/assets/generated crates/v8-runtime/assets/generated
           mkdir -p crates/kernel/assets crates/sidecar/assets
-          cp packages/core/fixtures/base-filesystem.json crates/kernel/assets/base-filesystem.json
-          cp packages/core/fixtures/base-filesystem.json crates/sidecar/assets/base-filesystem.json
+          # The single committed base filesystem lives in the vfs crate (the vfs
+          # crate embeds it via include_str!); the old packages/core/fixtures/
+          # path no longer exists, which broke this crates.io publish job.
+          cp crates/vfs/assets/base-filesystem.json crates/kernel/assets/base-filesystem.json
+          cp crates/vfs/assets/base-filesystem.json crates/sidecar/assets/base-filesystem.json
       - name: Dry-run crate publish
         if: ${{ needs.context.outputs.trigger != 'release' }}
         run: |

crates/bridge/src/queue_tracker.rs

@@ -84,6 +84,8 @@ pub enum TrackedLimit {
     VmSocketDatagramQueueLen,
     VmFilesystemBytes,
     VmInodes,
+    VmRecursiveFsDepth,
+    VmRecursiveFsEntries,
     V8HeapBytes,
     V8CpuTimeMs,
     V8WallClockMs,
@@ -114,6 +116,8 @@ impl TrackedLimit {
             TrackedLimit::VmSocketDatagramQueueLen => "vm_socket_datagram_queue_len",
             TrackedLimit::VmFilesystemBytes => "vm_filesystem_bytes",
             TrackedLimit::VmInodes => "vm_inodes",
+            TrackedLimit::VmRecursiveFsDepth => "vm_recursive_fs_depth",
+            TrackedLimit::VmRecursiveFsEntries => "vm_recursive_fs_entries",
             TrackedLimit::V8HeapBytes => "v8_heap_bytes",
             TrackedLimit::V8CpuTimeMs => "v8_cpu_time_ms",
             TrackedLimit::V8WallClockMs => "v8_wall_clock_ms",
@@ -141,7 +145,9 @@ impl TrackedLimit {
             | TrackedLimit::VmSocketBufferedBytes
             | TrackedLimit::VmSocketDatagramQueueLen
             | TrackedLimit::VmFilesystemBytes
-            | TrackedLimit::VmInodes => LimitCategory::Resource,
+            | TrackedLimit::VmInodes
+            | TrackedLimit::VmRecursiveFsDepth
+            | TrackedLimit::VmRecursiveFsEntries => LimitCategory::Resource,
             TrackedLimit::V8HeapBytes | TrackedLimit::WasmMemoryBytes => LimitCategory::Memory,
             TrackedLimit::V8CpuTimeMs | TrackedLimit::V8WallClockMs | TrackedLimit::WasmFuelMs => {
                 LimitCategory::Cpu