@alexkroman1/aai 0.11.0 → 0.11.1

package/dist/{constants-CwotjpJR.js → constants-CpLN9WGY.js}

@@ -1,4 +1,4 @@
-//#region constants.ts
+//#region isolate/constants.ts
 /**
 * Centralised numeric constants — timeouts, size limits, sample rates.
 *

package/dist/{direct-executor-DAGCZOAN.js → direct-executor-DyY-Y4ZE.js}

@@ -1,117 +1,16 @@
-import { BuiltinToolSchema, DEFAULT_INSTRUCTIONS, ToolChoiceSchema, defineTool } from "./types.js";
-import { a as DEFAULT_SHUTDOWN_TIMEOUT_MS, c as FETCH_TIMEOUT_MS, d as MAX_HTML_BYTES, f as MAX_PAGE_CHARS, g as TOOL_EXECUTION_TIMEOUT_MS, h as RUN_CODE_TIMEOUT_MS, l as HOOK_TIMEOUT_MS, m as MAX_VALUE_SIZE, o as DEFAULT_STT_SAMPLE_RATE, p as MAX_TOOL_RESULT_CHARS, s as DEFAULT_TTS_SAMPLE_RATE } from "./constants-CwotjpJR.js";
-import { errorDetail, errorMessage, toolError } from "./_utils.js";
-import { callResolveTurnConfig, createAgentHooks } from "./hooks.js";
-import { ClientMessageSchema, buildReadyConfig } from "./protocol.js";
-import { matchGlob, sortAndPaginate } from "./kv.js";
+import { i as EMPTY_PARAMS, n as memoryTools, o as agentToolsToSchemas, s as toAgentConfig, t as buildSystemPrompt } from "./system-prompt-u19j6xfA.js";
+import { errorDetail, errorMessage, toolError } from "./isolate/_utils.js";
+import { a as DEFAULT_SHUTDOWN_TIMEOUT_MS, c as FETCH_TIMEOUT_MS, d as MAX_HTML_BYTES, f as MAX_PAGE_CHARS, g as TOOL_EXECUTION_TIMEOUT_MS, h as RUN_CODE_TIMEOUT_MS, l as HOOK_TIMEOUT_MS, m as MAX_VALUE_SIZE, o as DEFAULT_STT_SAMPLE_RATE, p as MAX_TOOL_RESULT_CHARS, s as DEFAULT_TTS_SAMPLE_RATE } from "./constants-CpLN9WGY.js";
+import { callResolveTurnConfig, createAgentHooks } from "./isolate/hooks.js";
+import { matchGlob, sortAndPaginate } from "./isolate/kv.js";
+import { ClientMessageSchema, buildReadyConfig } from "./isolate/protocol.js";
 import { z } from "zod";
-import WsWebSocket from "ws";
 import pTimeout from "p-timeout";
 import { createStorage, prefixStorage } from "unstorage";
 import vm from "node:vm";
 import { createNanoEvents } from "nanoevents";
-//#region runtime.ts
-/**
-* Runtime dependencies injected into the session pipeline.
-*
-* Defines the {@link Logger} interface, a default {@link consoleLogger},
-* and the {@link S2SConfig} for Speech-to-Speech endpoint configuration.
-*/
-/** Default console-backed logger. */
-const consoleLogger = {
-	info: (msg, ctx) => ctx ? console.log(msg, ctx) : console.log(msg),
-	warn: (msg, ctx) => ctx ? console.warn(msg, ctx) : console.warn(msg),
-	error: (msg, ctx) => ctx ? console.error(msg, ctx) : console.error(msg),
-	debug: (msg, ctx) => ctx ? console.debug(msg, ctx) : console.debug(msg)
-};
-/**
-* Structured JSON logger for production diagnostics. Each log entry is a
-* single-line JSON object with `timestamp`, `level`, `msg`, and any
-* caller-provided context fields.
-*/
-function jsonLog(level) {
-	return (msg, ctx) => {
-		const entry = {
-			timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-			level,
-			msg
-		};
-		if (ctx) Object.assign(entry, ctx);
-		(level === "error" || level === "warn" ? process.stderr : process.stdout).write(`${JSON.stringify(entry)}\n`);
-	};
-}
-const jsonLogger = {
-	info: jsonLog("info"),
-	warn: jsonLog("warn"),
-	error: jsonLog("error"),
-	debug: jsonLog("debug")
-};
-/** Default S2S endpoint configuration. */
-const DEFAULT_S2S_CONFIG = {
-	wssUrl: "wss://speech-to-speech.us.assemblyai.com/v1/realtime",
-	inputSampleRate: DEFAULT_STT_SAMPLE_RATE,
-	outputSampleRate: DEFAULT_TTS_SAMPLE_RATE
-};
-//#endregion
-//#region _internal-types.ts
-/**
-* Zod schema for serializable agent configuration sent over the wire.
-*
-* This is the JSON-safe subset of the agent definition that can be
-* transmitted between the worker and the host process via structured clone.
-*/
-const AgentConfigSchema = z.object({
-	name: z.string().min(1),
-	instructions: z.string(),
-	greeting: z.string(),
-	sttPrompt: z.string().optional(),
-	maxSteps: z.number().int().positive().optional(),
-	toolChoice: ToolChoiceSchema.optional(),
-	builtinTools: z.array(BuiltinToolSchema).readonly().optional(),
-	idleTimeoutMs: z.number().nonnegative().optional()
-});
-/** Extract the serializable {@link AgentConfig} subset from a source object. */
-function toAgentConfig(src) {
-	const config = {
-		name: src.name,
-		instructions: src.instructions,
-		greeting: src.greeting
-	};
-	if (src.sttPrompt !== void 0) config.sttPrompt = src.sttPrompt;
-	if (typeof src.maxSteps !== "function" && src.maxSteps !== void 0) config.maxSteps = src.maxSteps;
-	if (src.toolChoice !== void 0) config.toolChoice = src.toolChoice;
-	if (src.builtinTools) config.builtinTools = [...src.builtinTools];
-	if (src.idleTimeoutMs !== void 0) config.idleTimeoutMs = src.idleTimeoutMs;
-	return config;
-}
-/**
-* Zod schema for serialized tool definitions sent over the wire.
-*
-* `parameters` must be a valid JSON Schema object (with `type`, `properties`,
-* etc.) — the Vercel AI SDK wraps it via `jsonSchema()`.
-*/
-const ToolSchemaSchema = z.object({
-	name: z.string().min(1),
-	description: z.string().min(1),
-	parameters: z.record(z.string(), z.unknown())
-});
-/** Empty Zod object schema used as default when tools have no parameters. */
-const EMPTY_PARAMS = z.object({});
-/**
-* Convert agent tool definitions to JSON Schema format for wire transport.
-*
-* Transforms the Zod-based `parameters` of each tool into a plain JSON Schema
-* object suitable for structured clone / JSON serialization.
-*/
-function agentToolsToSchemas(tools) {
-	return Object.entries(tools).map(([name, def]) => ({
-		name,
-		description: def.description,
-		parameters: z.toJSONSchema(def.parameters ?? EMPTY_PARAMS)
-	}));
-}
-//#endregion
-//#region _run-code.ts
+import WsWebSocket from "ws";
+//#region host/_run-code.ts
 /**
 * run_code built-in tool — executes user JavaScript in a fresh `node:vm`
 * context with no network, filesystem, or process access.
@@ -181,82 +80,7 @@ async function executeInIsolate(code) {
 	}
 }
 //#endregion
-//#region memory-tools.ts
-/**
-* KV-backed memory tools for agent persistent state.
-*/
-/**
-* Returns a standard set of KV-backed memory tools: `save_memory`,
-* `recall_memory`, `list_memories`, and `forget_memory`.
-*
-* Spread the result into your agent's `tools` record.
-*
-* @example
-* ```ts
-* import { defineAgent, memoryTools } from "aai";
-*
-* export default defineAgent({
-*   name: "My Agent",
-*   tools: { ...memoryTools() },
-* });
-* ```
-*
-* @returns A record with four tool definitions: `save_memory`, `recall_memory`,
-*   `list_memories`, and `forget_memory`.
-* @public
-*/
-function memoryTools() {
-	return {
-		save_memory: defineTool({
-			description: "Save a piece of information to persistent memory. Use a descriptive key like 'user:name' or 'project:status'.",
-			parameters: z.object({
-				key: z.string().describe("A descriptive key for this memory (e.g. 'user:name', 'preference:color')"),
-				value: z.string().describe("The information to remember")
-			}),
-			execute: async ({ key, value }, ctx) => {
-				await ctx.kv.set(key, value);
-				return { saved: key };
-			}
-		}),
-		recall_memory: defineTool({
-			description: "Retrieve a previously saved memory by its key.",
-			parameters: z.object({ key: z.string().describe("The key to look up") }),
-			execute: async ({ key }, ctx) => {
-				const value = await ctx.kv.get(key);
-				if (value === null) return {
-					found: false,
-					key
-				};
-				return {
-					found: true,
-					key,
-					value
-				};
-			}
-		}),
-		list_memories: defineTool({
-			description: "List all saved memory keys, optionally filtered by a prefix (e.g. 'user:').",
-			parameters: z.object({ prefix: z.string().describe("Prefix to filter keys (e.g. 'user:'). Use empty string for all.").optional() }),
-			execute: async ({ prefix }, ctx) => {
-				const entries = await ctx.kv.list(prefix ?? "");
-				return {
-					count: entries.length,
-					keys: entries.map((e) => e.key)
-				};
-			}
-		}),
-		forget_memory: defineTool({
-			description: "Delete a previously saved memory by its key.",
-			parameters: z.object({ key: z.string().describe("The key to delete") }),
-			execute: async ({ key }, ctx) => {
-				await ctx.kv.delete(key);
-				return { deleted: key };
-			}
-		})
-	};
-}
-//#endregion
-//#region builtin-tools.ts
+//#region host/builtin-tools.ts
 /**
 * Built-in tool definitions for the AAI agent SDK.
 *
@@ -418,7 +242,50 @@ function getBuiltinToolSchemas(names) {
 	})));
 }
 //#endregion
-//#region s2s.ts
+//#region host/runtime.ts
+/**
+* Runtime dependencies injected into the session pipeline.
+*
+* Defines the {@link Logger} interface, a default {@link consoleLogger},
+* and the {@link S2SConfig} for Speech-to-Speech endpoint configuration.
+*/
+/** Default console-backed logger. */
+const consoleLogger = {
+	info: (msg, ctx) => ctx ? console.log(msg, ctx) : console.log(msg),
+	warn: (msg, ctx) => ctx ? console.warn(msg, ctx) : console.warn(msg),
+	error: (msg, ctx) => ctx ? console.error(msg, ctx) : console.error(msg),
+	debug: (msg, ctx) => ctx ? console.debug(msg, ctx) : console.debug(msg)
+};
+/**
+* Structured JSON logger for production diagnostics. Each log entry is a
+* single-line JSON object with `timestamp`, `level`, `msg`, and any
+* caller-provided context fields.
+*/
+function jsonLog(level) {
+	return (msg, ctx) => {
+		const entry = {
+			timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+			level,
+			msg
+		};
+		if (ctx) Object.assign(entry, ctx);
+		(level === "error" || level === "warn" ? process.stderr : process.stdout).write(`${JSON.stringify(entry)}\n`);
+	};
+}
+const jsonLogger = {
+	info: jsonLog("info"),
+	warn: jsonLog("warn"),
+	error: jsonLog("error"),
+	debug: jsonLog("debug")
+};
+/** Default S2S endpoint configuration. */
+const DEFAULT_S2S_CONFIG = {
+	wssUrl: "wss://speech-to-speech.us.assemblyai.com/v1/realtime",
+	inputSampleRate: DEFAULT_STT_SAMPLE_RATE,
+	outputSampleRate: DEFAULT_TTS_SAMPLE_RATE
+};
+//#endregion
+//#region host/s2s.ts
 const uint8ToBase64 = (bytes) => Buffer.from(bytes).toString("base64");
 const base64ToUint8 = (base64) => new Uint8Array(Buffer.from(base64, "base64"));
 const WS_OPEN = 1;
@@ -667,37 +534,7 @@ function connectS2s(opts) {
 	});
 }
 //#endregion
-//#region system-prompt.ts
-function getFormattedDate() {
-	return (/* @__PURE__ */ new Date()).toLocaleDateString("en-US", {
-		weekday: "long",
-		year: "numeric",
-		month: "long",
-		day: "numeric"
-	});
-}
-const VOICE_RULES = "\n\nCRITICAL OUTPUT RULES — you MUST follow these for EVERY response:\nYour response will be spoken aloud by a TTS system and displayed as plain text.\n- NEVER use markdown: no **, no *, no _, no #, no `, no [](), no ---\n- NEVER use bullet points (-, *, •) or numbered lists (1., 2.)\n- NEVER use code blocks or inline code\n- NEVER mention tools, search, APIs, or technical failures to the user. If a tool returns no results, just answer naturally without explaining why.\n- Write exactly as you would say it out loud to a friend\n- Use short conversational sentences. To list things, say \"First,\" \"Next,\" \"Finally,\"\n- Keep responses concise — 1 to 3 sentences max";
-/**
-* Build the system prompt sent to the LLM from the agent configuration.
-*
-* Assembles the default instructions, today's date, agent-specific instructions,
-* and optional sections for tool usage preamble and voice output rules.
-*
-* @param config - The serializable agent configuration (name, instructions, etc.).
-* @param opts.hasTools - When `true`, appends a preamble instructing the LLM to
-*   speak a brief phrase before each tool call to fill silence.
-* @param opts.voice - When `true`, appends strict voice-specific output rules
-*   (no markdown, no bullet points, conversational tone, concise responses).
-* @returns The assembled system prompt string.
-*/
-function buildSystemPrompt(config, opts) {
-	const { hasTools } = opts;
-	const agentInstructions = config.instructions && config.instructions !== DEFAULT_INSTRUCTIONS ? `\n\nAgent-Specific Instructions:\n${config.instructions}` : "";
-	const toolPreamble = hasTools ? "\n\nWhen you decide to use a tool, ALWAYS say a brief natural phrase BEFORE the tool call (e.g. \"Let me look that up\" or \"One moment while I check\"). This fills silence while the tool executes. Keep preambles to one short sentence." : "";
-	return DEFAULT_INSTRUCTIONS + `\n\nToday's date is ${getFormattedDate()}.` + agentInstructions + toolPreamble + (opts.voice ? VOICE_RULES : "");
-}
-//#endregion
-//#region session.ts
+//#region host/session.ts
 function buildCtx(opts) {
 	const { id, agentConfig, hooks, log } = opts;
 	const maxHistory = opts.maxHistory ?? 200;
@@ -1090,7 +927,7 @@ function createS2sSession(opts) {
 	};
 }
 //#endregion
-//#region unstorage-kv.ts
+//#region host/unstorage-kv.ts
 /**
 * Key-value store backed by unstorage.
 *
@@ -1151,7 +988,7 @@ function createUnstorageKv(options) {
 	};
 }
 //#endregion
-//#region ws-handler.ts
+//#region host/ws-handler.ts
 /**
 * WebSocket session lifecycle handler.
 *
@@ -1341,7 +1178,7 @@ function wireSessionSocket(ws, opts) {
 	});
 }
 //#endregion
-//#region direct-executor.ts
+//#region host/direct-executor.ts
 /**
 * Agent runtime — the execution engine for voice agents.
 *
@@ -1527,4 +1364,4 @@ function createRuntime(opts) {
 	};
 }
 //#endregion
-export { consoleLogger as _, _internals as a, buildSystemPrompt as c, AgentConfigSchema as d, EMPTY_PARAMS as f, DEFAULT_S2S_CONFIG as g, toAgentConfig as h, createUnstorageKv as i, connectS2s as l, agentToolsToSchemas as m, executeToolCall as n, buildCtx as o, ToolSchemaSchema as p, wireSessionSocket as r, createS2sSession as s, createRuntime as t, defaultCreateS2sWebSocket as u, jsonLogger as v };
+export { _internals as a, connectS2s as c, consoleLogger as d, jsonLogger as f, createUnstorageKv as i, defaultCreateS2sWebSocket as l, executeToolCall as n, buildCtx as o, wireSessionSocket as r, createS2sSession as s, createRuntime as t, DEFAULT_S2S_CONFIG as u };

package/dist/{_run-code.d.ts → host/_run-code.d.ts}

@@ -3,7 +3,7 @@
  * context with no network, filesystem, or process access.
  */
 import { z } from "zod";
-import type { ToolDef } from "./types.ts";
+import type { ToolDef } from "../isolate/types.ts";
 declare const runCodeParams: z.ZodObject<{
     code: z.ZodString;
 }, z.core.$strip>;

package/dist/{_runtime-conformance.d.ts → host/_runtime-conformance.d.ts}

@@ -19,7 +19,7 @@
  *
  * @example Sandbox (integration test in aai-server)
  * ```ts
- * import { testRuntime } from "@alexkroman1/aai/internal";
+ * import { testRuntime } from "@alexkroman1/aai/host";
  *
  * testRuntime("sandbox", async () => {
  *   // ... start isolate with a bundled agent
@@ -27,9 +27,9 @@
  * });
  * ```
  */
-import type { ExecuteTool } from "./_internal-types.ts";
-import type { AgentHooks } from "./hooks.ts";
-import { type AgentDef } from "./types.ts";
+import type { ExecuteTool } from "../isolate/_internal-types.ts";
+import type { AgentHooks } from "../isolate/hooks.ts";
+import { type AgentDef } from "../isolate/types.ts";
 /**
  * Minimal runtime surface needed for conformance tests.
  *

package/dist/{_test-utils.d.ts → host/_test-utils.d.ts}

@@ -1,9 +1,9 @@
-import type { AgentConfig } from "./_internal-types.ts";
-import type { ClientSink } from "./protocol.ts";
+import type { AgentConfig } from "../isolate/_internal-types.ts";
+import type { ClientSink } from "../isolate/protocol.ts";
+import type { AgentDef, ToolContext, ToolDef } from "../isolate/types.ts";
 import type { S2sEvents, S2sHandle } from "./s2s.ts";
 import type { Session } from "./session.ts";
 import { type S2sSessionOptions } from "./session.ts";
-import type { AgentDef, ToolContext, ToolDef } from "./types.ts";
 /** Yield to the microtask queue so pending promises settle. */
 export declare function flush(): Promise<void>;
 export declare function createMockToolContext(overrides?: Partial<ToolContext>): ToolContext;

package/dist/{builtin-tools.d.ts → host/builtin-tools.d.ts}

@@ -6,10 +6,10 @@
  * Network requests go through the host's fetch proxy (with SSRF protection).
  */
 import { z } from "zod";
-import { type ToolSchema } from "./_internal-types.ts";
-import type { ToolDef } from "./types.ts";
+import { type ToolSchema } from "../isolate/_internal-types.ts";
+import type { ToolDef } from "../isolate/types.ts";
+export { memoryTools } from "../isolate/memory-tools.ts";
 export { executeInIsolate } from "./_run-code.ts";
-export { memoryTools } from "./memory-tools.ts";
 /** Options for creating built-in tool definitions. */
 export type BuiltinToolOptions = {
     /** Override fetch implementation (defaults to globalThis.fetch). For testing. */

package/dist/{direct-executor.d.ts → host/direct-executor.d.ts}

@@ -5,17 +5,17 @@
  * self-hosted servers and the platform sandbox. It wires up tool execution,
  * lifecycle hooks, and session management.
  */
-import { type ExecuteTool, type ToolSchema } from "./_internal-types.ts";
-import { type AgentHooks } from "./hooks.ts";
-import type { Kv } from "./kv.ts";
-import type { ClientSink } from "./protocol.ts";
-import { type ReadyConfig } from "./protocol.ts";
+import { type ExecuteTool, type ToolSchema } from "../isolate/_internal-types.ts";
+import { type AgentHooks } from "../isolate/hooks.ts";
+import type { Kv } from "../isolate/kv.ts";
+import type { ClientSink } from "../isolate/protocol.ts";
+import { type ReadyConfig } from "../isolate/protocol.ts";
+import type { AgentDef, Message, ToolDef } from "../isolate/types.ts";
 import type { Logger, S2SConfig } from "./runtime.ts";
 import type { CreateS2sWebSocket } from "./s2s.ts";
 import { type Session } from "./session.ts";
-import type { AgentDef, Message, ToolDef } from "./types.ts";
 import { type SessionWebSocket } from "./ws-handler.ts";
-export type { ExecuteTool } from "./_internal-types.ts";
+export type { ExecuteTool } from "../isolate/_internal-types.ts";
 export type ExecuteToolCallOptions = {
     tool: ToolDef;
     env: Readonly<Record<string, string>>;

package/dist/{internal.d.ts → host/index.d.ts}

@@ -1,17 +1,16 @@
 /**
- * Internal barrel — re-exports all SDK internals for use by the platform
+ * Host barrel — re-exports all SDK internals for use by the platform
  * server (`aai-server`) and CLI. **Not a public API.**
  *
+ * Includes the full isolate-safe kernel plus host-only modules that
+ * depend on Node.js APIs (server, executor, S2S, etc.).
+ *
  * Consumer packages should import from the top-level `@alexkroman1/aai`
  * entry, `./server`, `./types`, `./kv`, `./protocol`, or `./testing`.
  */
-export * from "./_internal-types.ts";
+export * from "../isolate/index.ts";
 export * from "./_runtime-conformance.ts";
-export * from "./_utils.ts";
-export * from "./constants.ts";
 export * from "./direct-executor.ts";
-export * from "./hooks.ts";
-export * from "./protocol.ts";
 export * from "./runtime.ts";
 export * from "./s2s.ts";
 export * from "./session.ts";

package/dist/{internal.js → host/index.js}

@@ -1,12 +1,15 @@
-import { defineTool } from "./types.js";
-import { a as DEFAULT_SHUTDOWN_TIMEOUT_MS, c as FETCH_TIMEOUT_MS, d as MAX_HTML_BYTES, f as MAX_PAGE_CHARS, g as TOOL_EXECUTION_TIMEOUT_MS, h as RUN_CODE_TIMEOUT_MS, i as DEFAULT_SESSION_START_TIMEOUT_MS, l as HOOK_TIMEOUT_MS, m as MAX_VALUE_SIZE, n as DEFAULT_IDLE_TIMEOUT_MS, o as DEFAULT_STT_SAMPLE_RATE, p as MAX_TOOL_RESULT_CHARS, r as DEFAULT_MAX_HISTORY, s as DEFAULT_TTS_SAMPLE_RATE, t as AGENT_CSP, u as MAX_GLOB_PATTERN_LENGTH } from "./constants-CwotjpJR.js";
-import { _ as consoleLogger, a as _internals, c as buildSystemPrompt, d as AgentConfigSchema, f as EMPTY_PARAMS, g as DEFAULT_S2S_CONFIG, h as toAgentConfig, i as createUnstorageKv, l as connectS2s, m as agentToolsToSchemas, n as executeToolCall, o as buildCtx, p as ToolSchemaSchema, r as wireSessionSocket, s as createS2sSession, t as createRuntime, u as defaultCreateS2sWebSocket, v as jsonLogger } from "./direct-executor-DAGCZOAN.js";
-import { errorDetail, errorMessage, isReadOnlyFsOp, toolError } from "./_utils.js";
-import { callResolveTurnConfig, createAgentHooks } from "./hooks.js";
-import { AUDIO_FORMAT, ClientEventSchema, ClientMessageSchema, KvRequestSchema, ReadyConfigSchema, ServerMessageSchema, SessionErrorCodeSchema, TurnConfigSchema, buildReadyConfig } from "./protocol.js";
+import { BuiltinToolSchema, DEFAULT_GREETING, DEFAULT_INSTRUCTIONS, ToolChoiceSchema, defineAgent, defineTool, defineToolFactory } from "../isolate/types.js";
+import { a as ToolSchemaSchema, i as EMPTY_PARAMS, n as memoryTools, o as agentToolsToSchemas, r as AgentConfigSchema, s as toAgentConfig, t as buildSystemPrompt } from "../system-prompt-u19j6xfA.js";
+import { errorDetail, errorMessage, toolError } from "../isolate/_utils.js";
+import { a as DEFAULT_SHUTDOWN_TIMEOUT_MS, c as FETCH_TIMEOUT_MS, d as MAX_HTML_BYTES, f as MAX_PAGE_CHARS, g as TOOL_EXECUTION_TIMEOUT_MS, h as RUN_CODE_TIMEOUT_MS, i as DEFAULT_SESSION_START_TIMEOUT_MS, l as HOOK_TIMEOUT_MS, m as MAX_VALUE_SIZE, n as DEFAULT_IDLE_TIMEOUT_MS, o as DEFAULT_STT_SAMPLE_RATE, p as MAX_TOOL_RESULT_CHARS, r as DEFAULT_MAX_HISTORY, s as DEFAULT_TTS_SAMPLE_RATE, t as AGENT_CSP, u as MAX_GLOB_PATTERN_LENGTH } from "../constants-CpLN9WGY.js";
+import { callResolveTurnConfig, createAgentHooks } from "../isolate/hooks.js";
+import { matchGlob, sortAndPaginate } from "../isolate/kv.js";
+import { AUDIO_FORMAT, ClientEventSchema, ClientMessageSchema, KvRequestSchema, ReadyConfigSchema, ServerMessageSchema, SessionErrorCodeSchema, TurnConfigSchema, buildReadyConfig } from "../isolate/protocol.js";
+import "../isolate/index.js";
+import { a as _internals, c as connectS2s, d as consoleLogger, f as jsonLogger, i as createUnstorageKv, l as defaultCreateS2sWebSocket, n as executeToolCall, o as buildCtx, r as wireSessionSocket, s as createS2sSession, t as createRuntime, u as DEFAULT_S2S_CONFIG } from "../direct-executor-DyY-Y4ZE.js";
 import { z } from "zod";
 import { describe, expect, test } from "vitest";
-//#region _runtime-conformance.ts
+//#region host/_runtime-conformance.ts
 /**
 * Shared runtime conformance tests.
 *
@@ -28,7 +31,7 @@ import { describe, expect, test } from "vitest";
 *
 * @example Sandbox (integration test in aai-server)
 * ```ts
-* import { testRuntime } from "@alexkroman1/aai/internal";
+* import { testRuntime } from "@alexkroman1/aai/host";
 *
 * testRuntime("sandbox", async () => {
 *   // ... start isolate with a bundled agent
@@ -161,4 +164,4 @@ function testRuntime(label, getContext) {
 	});
 }
 //#endregion
-export { AGENT_CSP, AUDIO_FORMAT, AgentConfigSchema, CONFORMANCE_AGENT, ClientEventSchema, ClientMessageSchema, DEFAULT_IDLE_TIMEOUT_MS, DEFAULT_MAX_HISTORY, DEFAULT_S2S_CONFIG, DEFAULT_SESSION_START_TIMEOUT_MS, DEFAULT_SHUTDOWN_TIMEOUT_MS, DEFAULT_STT_SAMPLE_RATE, DEFAULT_TTS_SAMPLE_RATE, EMPTY_PARAMS, FETCH_TIMEOUT_MS, HOOK_TIMEOUT_MS, KvRequestSchema, MAX_GLOB_PATTERN_LENGTH, MAX_HTML_BYTES, MAX_PAGE_CHARS, MAX_TOOL_RESULT_CHARS, MAX_VALUE_SIZE, RUN_CODE_TIMEOUT_MS, ReadyConfigSchema, ServerMessageSchema, SessionErrorCodeSchema, TOOL_EXECUTION_TIMEOUT_MS, ToolSchemaSchema, TurnConfigSchema, _internals, agentToolsToSchemas, buildCtx, buildReadyConfig, buildSystemPrompt, callResolveTurnConfig, connectS2s, consoleLogger, createAgentHooks, createRuntime, createS2sSession, createUnstorageKv, defaultCreateS2sWebSocket, errorDetail, errorMessage, executeToolCall, isReadOnlyFsOp, jsonLogger, testRuntime, toAgentConfig, toolError, wireSessionSocket };
+export { AGENT_CSP, AUDIO_FORMAT, AgentConfigSchema, BuiltinToolSchema, CONFORMANCE_AGENT, ClientEventSchema, ClientMessageSchema, DEFAULT_GREETING, DEFAULT_IDLE_TIMEOUT_MS, DEFAULT_INSTRUCTIONS, DEFAULT_MAX_HISTORY, DEFAULT_S2S_CONFIG, DEFAULT_SESSION_START_TIMEOUT_MS, DEFAULT_SHUTDOWN_TIMEOUT_MS, DEFAULT_STT_SAMPLE_RATE, DEFAULT_TTS_SAMPLE_RATE, EMPTY_PARAMS, FETCH_TIMEOUT_MS, HOOK_TIMEOUT_MS, KvRequestSchema, MAX_GLOB_PATTERN_LENGTH, MAX_HTML_BYTES, MAX_PAGE_CHARS, MAX_TOOL_RESULT_CHARS, MAX_VALUE_SIZE, RUN_CODE_TIMEOUT_MS, ReadyConfigSchema, ServerMessageSchema, SessionErrorCodeSchema, TOOL_EXECUTION_TIMEOUT_MS, ToolChoiceSchema, ToolSchemaSchema, TurnConfigSchema, _internals, agentToolsToSchemas, buildCtx, buildReadyConfig, buildSystemPrompt, callResolveTurnConfig, connectS2s, consoleLogger, createAgentHooks, createRuntime, createS2sSession, createUnstorageKv, defaultCreateS2sWebSocket, defineAgent, defineTool, defineTool as tool, defineToolFactory, errorDetail, errorMessage, executeToolCall, jsonLogger, matchGlob, memoryTools, sortAndPaginate, testRuntime, toAgentConfig, toolError, wireSessionSocket };

package/dist/{matchers.js → host/matchers.js}

@@ -1,6 +1,6 @@
-import { n as TurnResult } from "./testing-Dmx-dudh.js";
+import { n as TurnResult } from "../testing-CNNg2-n-.js";
 import { expect } from "vitest";
-//#region matchers.ts
+//#region host/matchers.ts
 /**
 * Vitest custom matchers for AAI testing.
 *

package/dist/{server.d.ts → host/server.d.ts}

@@ -4,8 +4,8 @@
  * {@link createServer} wraps a {@link Runtime} with an HTTP + WebSocket
  * server using only `node:http` and `ws` (no framework dependencies).
  */
+import type { Kv } from "../isolate/kv.ts";
 import type { Runtime } from "./direct-executor.ts";
-import type { Kv } from "./kv.ts";
 import type { Logger } from "./runtime.ts";
 export { createRuntime, type Runtime, type RuntimeOptions } from "./direct-executor.ts";
 /**
@@ -29,20 +29,4 @@ export type AgentServer = {
     close(): Promise<void>;
     port: number | undefined;
 };
-/**
- * Create an HTTP + WebSocket server for self-hosted agent deployments.
- *
- * @example
- * ```ts
- * import { defineAgent } from "@alexkroman1/aai";
- * import { createRuntime, createServer } from "@alexkroman1/aai/server";
- *
- * const agent = defineAgent({ name: "my-agent" });
- * const runtime = createRuntime({ agent, env: process.env });
- * const server = createServer({ runtime, name: agent.name });
- * await server.listen(3000);
- * ```
- *
- * @public
- */
 export declare function createServer(options: ServerOptions): AgentServer;

package/dist/{server.js → host/server.js}

@@ -1,10 +1,10 @@
-import { t as AGENT_CSP } from "./constants-CwotjpJR.js";
-import { _ as consoleLogger, t as createRuntime } from "./direct-executor-DAGCZOAN.js";
+import { t as AGENT_CSP } from "../constants-CpLN9WGY.js";
+import { d as consoleLogger, t as createRuntime } from "../direct-executor-DyY-Y4ZE.js";
+import { WebSocketServer } from "ws";
 import fs from "node:fs";
 import http from "node:http";
 import path from "node:path";
-import { WebSocketServer } from "ws";
-//#region server.ts
+//#region host/server.ts
 /**
 * Self-hostable agent server.
 *
@@ -59,6 +59,26 @@ function serveStatic(dir, req, res) {
 *
 * @public
 */
+function handleKvGet(kv, req, res) {
+	const key = new URL(req.url ?? "/", "http://localhost").searchParams.get("key");
+	if (!key) {
+		res.writeHead(400, { "Content-Type": "application/json" });
+		res.end(JSON.stringify({ error: "Missing key query parameter" }));
+		return;
+	}
+	kv.get(key).then((value) => {
+		if (value === null) {
+			res.writeHead(404, { "Content-Type": "application/json" });
+			res.end("null");
+		} else {
+			res.writeHead(200, { "Content-Type": "application/json" });
+			res.end(JSON.stringify(value));
+		}
+	}).catch(() => {
+		res.writeHead(500, { "Content-Type": "application/json" });
+		res.end(JSON.stringify({ error: "KV error" }));
+	});
+}
 function createServer(options) {
 	const { runtime, clientHtml, clientDir, logger = consoleLogger, kv } = options;
 	const name = options.name ?? "agent";
@@ -78,24 +98,7 @@ function createServer(options) {
 			return;
 		}
 		if (kv && method === "GET" && url === "/kv") {
-			const key = new URL(req.url ?? "/", "http://localhost").searchParams.get("key");
-			if (!key) {
-				res.writeHead(400, { "Content-Type": "application/json" });
-				res.end(JSON.stringify({ error: "Missing key query parameter" }));
-				return;
-			}
-			kv.get(key).then((value) => {
-				if (value === null) {
-					res.writeHead(404, { "Content-Type": "application/json" });
-					res.end("null");
-				} else {
-					res.writeHead(200, { "Content-Type": "application/json" });
-					res.end(JSON.stringify(value));
-				}
-			}).catch(() => {
-				res.writeHead(500, { "Content-Type": "application/json" });
-				res.end(JSON.stringify({ error: "KV error" }));
-			});
+			handleKvGet(kv, req, res);
 			return;
 		}
 		if (clientDir && serveStatic(clientDir, req, res)) return;

package/dist/{session.d.ts → host/session.d.ts}

@@ -1,10 +1,10 @@
 /** S2S session — relays audio between client and AssemblyAI S2S API. */
-import type { AgentConfig, ExecuteTool, ToolSchema } from "./_internal-types.ts";
-import type { AgentHookMap, AgentHooks } from "./hooks.ts";
-import type { ClientSink } from "./protocol.ts";
+import type { AgentConfig, ExecuteTool, ToolSchema } from "../isolate/_internal-types.ts";
+import type { AgentHookMap, AgentHooks } from "../isolate/hooks.ts";
+import type { ClientSink } from "../isolate/protocol.ts";
+import type { Message } from "../isolate/types.ts";
 import type { Logger, S2SConfig } from "./runtime.ts";
 import { type CreateS2sWebSocket, connectS2s, type S2sHandle } from "./s2s.ts";
-import type { Message } from "./types.ts";
 export type { S2sHandle } from "./s2s.ts";
 type PendingTool = {
     callId: string;
@@ -63,9 +63,9 @@ export declare function buildCtx(opts: {
     log: Logger;
     maxHistory?: number | undefined;
 }): S2sSessionCtx;
-export type { AgentHookMap, AgentHooks } from "./hooks.ts";
-export { callResolveTurnConfig, createAgentHooks } from "./hooks.ts";
-export { buildSystemPrompt } from "./system-prompt.ts";
+export type { AgentHookMap, AgentHooks } from "../isolate/hooks.ts";
+export { callResolveTurnConfig, createAgentHooks } from "../isolate/hooks.ts";
+export { buildSystemPrompt } from "../isolate/system-prompt.ts";
 /**
  * A voice session managing the Speech-to-Speech connection for one client.
  *

package/dist/{testing.d.ts → host/testing.d.ts}

@@ -35,9 +35,9 @@
  *
  * @packageDocumentation
  */
+import type { Kv } from "../isolate/kv.ts";
+import type { AgentDef, Message } from "../isolate/types.ts";
 import { type Runtime } from "./direct-executor.ts";
-import type { Kv } from "./kv.ts";
-import type { AgentDef, Message } from "./types.ts";
 export { installMockWebSocket, MockWebSocket } from "./_mock-ws.ts";
 export { flush, makeStubSession } from "./_test-utils.ts";
 /**

package/dist/{testing.js → host/testing.js}

@@ -1,2 +1,2 @@
-import { a as makeStubSession, i as flush, n as TurnResult, o as MockWebSocket, r as createTestHarness, s as installMockWebSocket, t as TestHarness } from "./testing-Dmx-dudh.js";
+import { a as makeStubSession, i as flush, n as TurnResult, o as MockWebSocket, r as createTestHarness, s as installMockWebSocket, t as TestHarness } from "../testing-CNNg2-n-.js";
 export { MockWebSocket, TestHarness, TurnResult, createTestHarness, flush, installMockWebSocket, makeStubSession };

package/dist/{unstorage-kv.d.ts → host/unstorage-kv.d.ts}

@@ -4,7 +4,7 @@
  * Works with any unstorage driver (memory, fs, S3/R2, etc.).
  */
 import { type Storage } from "unstorage";
-import type { Kv } from "./kv.ts";
+import type { Kv } from "../isolate/kv.ts";
 /**
  * Options for creating an unstorage-backed KV store.
  */

package/dist/{vite-plugin.js → host/vite-plugin.js}

@@ -1,6 +1,6 @@
 import path from "node:path";
 import fs from "node:fs/promises";
-//#region vite-plugin.ts
+//#region host/vite-plugin.ts
 /**
 * Vite plugin for AAI agent development.
 *

package/dist/{ws-handler.d.ts → host/ws-handler.d.ts}

@@ -3,7 +3,7 @@
  *
  * Audio validation is handled at the host transport layer (see server.ts).
  */
-import type { ClientSink, ReadyConfig } from "./protocol.ts";
+import type { ClientSink, ReadyConfig } from "../isolate/protocol.ts";
 import type { Logger } from "./runtime.ts";
 import type { Session } from "./session.ts";
 /**

package/dist/index.d.ts

@@ -19,5 +19,5 @@
  * });
  * ```
  */
-export type { Kv, KvEntry, KvListOptions } from "./kv.ts";
-export { type AgentDef, type AgentOptions, type BuiltinTool, defineAgent, defineTool, defineToolFactory, type HookContext, type Message, type ToolChoice, type ToolContext, type ToolDef, type ToolResultMap, tool, } from "./types.ts";
+export type { Kv, KvEntry, KvListOptions } from "./isolate/kv.ts";
+export { type AgentDef, type AgentOptions, type BuiltinTool, defineAgent, defineTool, defineToolFactory, type HookContext, type Message, type ToolChoice, type ToolContext, type ToolDef, type ToolResultMap, tool, } from "./isolate/types.ts";

package/dist/index.js

@@ -1,2 +1,2 @@
-import { defineAgent, defineTool, defineToolFactory } from "./types.js";
+import { defineAgent, defineTool, defineToolFactory } from "./isolate/types.js";
 export { defineAgent, defineTool, defineTool as tool, defineToolFactory };

package/dist/{_utils.d.ts → isolate/_utils.d.ts}

@@ -3,7 +3,5 @@
 export declare function errorMessage(err: unknown): string;
 /** Extract a detailed error string (message + stack) for diagnostic logging. */
 export declare function errorDetail(err: unknown): string;
-/** Check whether a filesystem operation is a read-only operation. */
-export declare function isReadOnlyFsOp(op: string): boolean;
 /** Return a JSON error string for the LLM: `'{"error":"<message>"}'`. */
 export declare function toolError(message: string): string;

package/dist/{_utils.js → isolate/_utils.js}

@@ -1,4 +1,4 @@
-//#region _utils.ts
+//#region isolate/_utils.ts
 /** Shared utility functions. */
 /** Extract an error message from an unknown thrown value. */
 function errorMessage(err) {
@@ -9,20 +9,9 @@ function errorDetail(err) {
 	if (err instanceof Error) return err.stack ?? err.message;
 	return String(err);
 }
-/** Set of filesystem operations that are safe for read-only access. */
-const READ_ONLY_FS_OPS = new Set([
-	"read",
-	"stat",
-	"readdir",
-	"exists"
-]);
-/** Check whether a filesystem operation is a read-only operation. */
-function isReadOnlyFsOp(op) {
-	return READ_ONLY_FS_OPS.has(op);
-}
 /** Return a JSON error string for the LLM: `'{"error":"<message>"}'`. */
 function toolError(message) {
 	return JSON.stringify({ error: message });
 }
 //#endregion
-export { errorDetail, errorMessage, isReadOnlyFsOp, toolError };
+export { errorDetail, errorMessage, toolError };

package/dist/{hooks.js → isolate/hooks.js}

@@ -1,5 +1,5 @@
 import { createHooks } from "hookable";
-//#region hooks.ts
+//#region isolate/hooks.ts
 /**
 * Hookable-based lifecycle hook system.
 *

package/dist/isolate/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Isolate-safe barrel — re-exports all SDK modules that are guaranteed to
+ * run inside secure-exec V8 isolates (no `node:*` dependencies).
+ *
+ * This directory is compiled under a restricted `tsconfig.json` that excludes
+ * `@types/node`. Any accidental `node:*` import becomes a type error.
+ *
+ * Host-only code (server, executor, S2S, etc.) lives at the package root
+ * and is re-exported via `./host`.
+ */
+export * from "./_internal-types.ts";
+export * from "./_utils.ts";
+export * from "./constants.ts";
+export * from "./hooks.ts";
+export * from "./kv.ts";
+export * from "./memory-tools.ts";
+export * from "./protocol.ts";
+export * from "./system-prompt.ts";
+export * from "./types.ts";

package/dist/isolate/index.js

@@ -0,0 +1,8 @@
+import { BuiltinToolSchema, DEFAULT_GREETING, DEFAULT_INSTRUCTIONS, ToolChoiceSchema, defineAgent, defineTool, defineToolFactory } from "./types.js";
+import { a as ToolSchemaSchema, i as EMPTY_PARAMS, n as memoryTools, o as agentToolsToSchemas, r as AgentConfigSchema, s as toAgentConfig, t as buildSystemPrompt } from "../system-prompt-u19j6xfA.js";
+import { errorDetail, errorMessage, toolError } from "./_utils.js";
+import { a as DEFAULT_SHUTDOWN_TIMEOUT_MS, c as FETCH_TIMEOUT_MS, d as MAX_HTML_BYTES, f as MAX_PAGE_CHARS, g as TOOL_EXECUTION_TIMEOUT_MS, h as RUN_CODE_TIMEOUT_MS, i as DEFAULT_SESSION_START_TIMEOUT_MS, l as HOOK_TIMEOUT_MS, m as MAX_VALUE_SIZE, n as DEFAULT_IDLE_TIMEOUT_MS, o as DEFAULT_STT_SAMPLE_RATE, p as MAX_TOOL_RESULT_CHARS, r as DEFAULT_MAX_HISTORY, s as DEFAULT_TTS_SAMPLE_RATE, t as AGENT_CSP, u as MAX_GLOB_PATTERN_LENGTH } from "../constants-CpLN9WGY.js";
+import { callResolveTurnConfig, createAgentHooks } from "./hooks.js";
+import { matchGlob, sortAndPaginate } from "./kv.js";
+import { AUDIO_FORMAT, ClientEventSchema, ClientMessageSchema, KvRequestSchema, ReadyConfigSchema, ServerMessageSchema, SessionErrorCodeSchema, TurnConfigSchema, buildReadyConfig } from "./protocol.js";
+export { AGENT_CSP, AUDIO_FORMAT, AgentConfigSchema, BuiltinToolSchema, ClientEventSchema, ClientMessageSchema, DEFAULT_GREETING, DEFAULT_IDLE_TIMEOUT_MS, DEFAULT_INSTRUCTIONS, DEFAULT_MAX_HISTORY, DEFAULT_SESSION_START_TIMEOUT_MS, DEFAULT_SHUTDOWN_TIMEOUT_MS, DEFAULT_STT_SAMPLE_RATE, DEFAULT_TTS_SAMPLE_RATE, EMPTY_PARAMS, FETCH_TIMEOUT_MS, HOOK_TIMEOUT_MS, KvRequestSchema, MAX_GLOB_PATTERN_LENGTH, MAX_HTML_BYTES, MAX_PAGE_CHARS, MAX_TOOL_RESULT_CHARS, MAX_VALUE_SIZE, RUN_CODE_TIMEOUT_MS, ReadyConfigSchema, ServerMessageSchema, SessionErrorCodeSchema, TOOL_EXECUTION_TIMEOUT_MS, ToolChoiceSchema, ToolSchemaSchema, TurnConfigSchema, agentToolsToSchemas, buildReadyConfig, buildSystemPrompt, callResolveTurnConfig, createAgentHooks, defineAgent, defineTool, defineTool as tool, defineToolFactory, errorDetail, errorMessage, matchGlob, memoryTools, sortAndPaginate, toAgentConfig, toolError };

package/dist/{kv.js → isolate/kv.js}

@@ -1,5 +1,5 @@
-import { m as MAX_VALUE_SIZE, u as MAX_GLOB_PATTERN_LENGTH } from "./constants-CwotjpJR.js";
-//#region kv.ts
+import { m as MAX_VALUE_SIZE, u as MAX_GLOB_PATTERN_LENGTH } from "../constants-CpLN9WGY.js";
+//#region isolate/kv.ts
 /**
 * Key-value storage interface and shared utilities.
 */

package/dist/{protocol.js → isolate/protocol.js}

@@ -1,6 +1,6 @@
-import { p as MAX_TOOL_RESULT_CHARS } from "./constants-CwotjpJR.js";
+import { p as MAX_TOOL_RESULT_CHARS } from "../constants-CpLN9WGY.js";
 import { z } from "zod";
-//#region protocol.ts
+//#region isolate/protocol.ts
 /**
 * WebSocket wire-format types shared by server and client.
 *

package/dist/{types.js → isolate/types.js}

@@ -1,5 +1,5 @@
 import { z } from "zod";
-//#region types.ts
+//#region isolate/types.ts
 /**
 * Core type definitions for the AAI agent SDK.
 */

package/dist/system-prompt-u19j6xfA.js

@@ -0,0 +1,166 @@
+import { BuiltinToolSchema, DEFAULT_INSTRUCTIONS, ToolChoiceSchema, defineTool } from "./isolate/types.js";
+import { z } from "zod";
+//#region isolate/_internal-types.ts
+/**
+* Zod schema for serializable agent configuration sent over the wire.
+*
+* This is the JSON-safe subset of the agent definition that can be
+* transmitted between the worker and the host process via structured clone.
+*/
+const AgentConfigSchema = z.object({
+	name: z.string().min(1),
+	instructions: z.string(),
+	greeting: z.string(),
+	sttPrompt: z.string().optional(),
+	maxSteps: z.number().int().positive().optional(),
+	toolChoice: ToolChoiceSchema.optional(),
+	builtinTools: z.array(BuiltinToolSchema).readonly().optional(),
+	idleTimeoutMs: z.number().nonnegative().optional()
+});
+/** Extract the serializable {@link AgentConfig} subset from a source object. */
+function toAgentConfig(src) {
+	const config = {
+		name: src.name,
+		instructions: src.instructions,
+		greeting: src.greeting
+	};
+	if (src.sttPrompt !== void 0) config.sttPrompt = src.sttPrompt;
+	if (typeof src.maxSteps !== "function" && src.maxSteps !== void 0) config.maxSteps = src.maxSteps;
+	if (src.toolChoice !== void 0) config.toolChoice = src.toolChoice;
+	if (src.builtinTools) config.builtinTools = [...src.builtinTools];
+	if (src.idleTimeoutMs !== void 0) config.idleTimeoutMs = src.idleTimeoutMs;
+	return config;
+}
+/**
+* Zod schema for serialized tool definitions sent over the wire.
+*
+* `parameters` must be a valid JSON Schema object (with `type`, `properties`,
+* etc.) — the Vercel AI SDK wraps it via `jsonSchema()`.
+*/
+const ToolSchemaSchema = z.object({
+	name: z.string().min(1),
+	description: z.string().min(1),
+	parameters: z.record(z.string(), z.unknown())
+});
+/** Empty Zod object schema used as default when tools have no parameters. */
+const EMPTY_PARAMS = z.object({});
+/**
+* Convert agent tool definitions to JSON Schema format for wire transport.
+*
+* Transforms the Zod-based `parameters` of each tool into a plain JSON Schema
+* object suitable for structured clone / JSON serialization.
+*/
+function agentToolsToSchemas(tools) {
+	return Object.entries(tools).map(([name, def]) => ({
+		name,
+		description: def.description,
+		parameters: z.toJSONSchema(def.parameters ?? EMPTY_PARAMS)
+	}));
+}
+//#endregion
+//#region isolate/memory-tools.ts
+/**
+* KV-backed memory tools for agent persistent state.
+*/
+/**
+* Returns a standard set of KV-backed memory tools: `save_memory`,
+* `recall_memory`, `list_memories`, and `forget_memory`.
+*
+* Spread the result into your agent's `tools` record.
+*
+* @example
+* ```ts
+* import { defineAgent, memoryTools } from "aai";
+*
+* export default defineAgent({
+*   name: "My Agent",
+*   tools: { ...memoryTools() },
+* });
+* ```
+*
+* @returns A record with four tool definitions: `save_memory`, `recall_memory`,
+*   `list_memories`, and `forget_memory`.
+* @public
+*/
+function memoryTools() {
+	return {
+		save_memory: defineTool({
+			description: "Save a piece of information to persistent memory. Use a descriptive key like 'user:name' or 'project:status'.",
+			parameters: z.object({
+				key: z.string().describe("A descriptive key for this memory (e.g. 'user:name', 'preference:color')"),
+				value: z.string().describe("The information to remember")
+			}),
+			execute: async ({ key, value }, ctx) => {
+				await ctx.kv.set(key, value);
+				return { saved: key };
+			}
+		}),
+		recall_memory: defineTool({
+			description: "Retrieve a previously saved memory by its key.",
+			parameters: z.object({ key: z.string().describe("The key to look up") }),
+			execute: async ({ key }, ctx) => {
+				const value = await ctx.kv.get(key);
+				if (value === null) return {
+					found: false,
+					key
+				};
+				return {
+					found: true,
+					key,
+					value
+				};
+			}
+		}),
+		list_memories: defineTool({
+			description: "List all saved memory keys, optionally filtered by a prefix (e.g. 'user:').",
+			parameters: z.object({ prefix: z.string().describe("Prefix to filter keys (e.g. 'user:'). Use empty string for all.").optional() }),
+			execute: async ({ prefix }, ctx) => {
+				const entries = await ctx.kv.list(prefix ?? "");
+				return {
+					count: entries.length,
+					keys: entries.map((e) => e.key)
+				};
+			}
+		}),
+		forget_memory: defineTool({
+			description: "Delete a previously saved memory by its key.",
+			parameters: z.object({ key: z.string().describe("The key to delete") }),
+			execute: async ({ key }, ctx) => {
+				await ctx.kv.delete(key);
+				return { deleted: key };
+			}
+		})
+	};
+}
+//#endregion
+//#region isolate/system-prompt.ts
+function getFormattedDate() {
+	return (/* @__PURE__ */ new Date()).toLocaleDateString("en-US", {
+		weekday: "long",
+		year: "numeric",
+		month: "long",
+		day: "numeric"
+	});
+}
+const VOICE_RULES = "\n\nCRITICAL OUTPUT RULES — you MUST follow these for EVERY response:\nYour response will be spoken aloud by a TTS system and displayed as plain text.\n- NEVER use markdown: no **, no *, no _, no #, no `, no [](), no ---\n- NEVER use bullet points (-, *, •) or numbered lists (1., 2.)\n- NEVER use code blocks or inline code\n- NEVER mention tools, search, APIs, or technical failures to the user. If a tool returns no results, just answer naturally without explaining why.\n- Write exactly as you would say it out loud to a friend\n- Use short conversational sentences. To list things, say \"First,\" \"Next,\" \"Finally,\"\n- Keep responses concise — 1 to 3 sentences max";
+/**
+* Build the system prompt sent to the LLM from the agent configuration.
+*
+* Assembles the default instructions, today's date, agent-specific instructions,
+* and optional sections for tool usage preamble and voice output rules.
+*
+* @param config - The serializable agent configuration (name, instructions, etc.).
+* @param opts.hasTools - When `true`, appends a preamble instructing the LLM to
+*   speak a brief phrase before each tool call to fill silence.
+* @param opts.voice - When `true`, appends strict voice-specific output rules
+*   (no markdown, no bullet points, conversational tone, concise responses).
+* @returns The assembled system prompt string.
+*/
+function buildSystemPrompt(config, opts) {
+	const { hasTools } = opts;
+	const agentInstructions = config.instructions && config.instructions !== DEFAULT_INSTRUCTIONS ? `\n\nAgent-Specific Instructions:\n${config.instructions}` : "";
+	const toolPreamble = hasTools ? "\n\nWhen you decide to use a tool, ALWAYS say a brief natural phrase BEFORE the tool call (e.g. \"Let me look that up\" or \"One moment while I check\"). This fills silence while the tool executes. Keep preambles to one short sentence." : "";
+	return DEFAULT_INSTRUCTIONS + `\n\nToday's date is ${getFormattedDate()}.` + agentInstructions + toolPreamble + (opts.voice ? VOICE_RULES : "");
+}
+//#endregion
+export { ToolSchemaSchema as a, EMPTY_PARAMS as i, memoryTools as n, agentToolsToSchemas as o, AgentConfigSchema as r, toAgentConfig as s, buildSystemPrompt as t };

package/dist/{testing-Dmx-dudh.js → testing-CNNg2-n-.js}

@@ -1,10 +1,10 @@
-import "./types.js";
-import { i as createUnstorageKv, t as createRuntime } from "./direct-executor-DAGCZOAN.js";
-import { resolve } from "node:path";
+import "./isolate/types.js";
+import { i as createUnstorageKv, t as createRuntime } from "./direct-executor-DyY-Y4ZE.js";
+import { vi } from "vitest";
 import { createStorage } from "unstorage";
 import "nanoevents";
-import { vi } from "vitest";
-//#region _mock-ws.ts
+import { resolve } from "node:path";
+//#region host/_mock-ws.ts
 /**
 * A mock WebSocket implementation for testing.
 *
@@ -157,7 +157,7 @@ function installMockWebSocket() {
 	};
 }
 //#endregion
-//#region _test-utils.ts
+//#region host/_test-utils.ts
 /** Yield to the microtask queue so pending promises settle. */
 function flush() {
 	return new Promise((r) => queueMicrotask(r));
@@ -179,7 +179,7 @@ function makeStubSession(overrides) {
 vi.fn(), vi.fn(), vi.fn(), vi.fn();
 resolve(import.meta.dirname, "__fixtures__");
 //#endregion
-//#region testing.ts
+//#region host/testing.ts
 /**
 * Testing utilities for AAI agents.
 *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alexkroman1/aai",
-  "version": "0.11.0",
+  "version": "0.11.1",
   "type": "module",
   "files": [
     "dist"
@@ -11,55 +11,60 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
     },
+    "./isolate": {
+      "@dev/source": "./isolate/index.ts",
+      "types": "./dist/isolate/index.d.ts",
+      "import": "./dist/isolate/index.js"
+    },
+    "./host": {
+      "@dev/source": "./host/index.ts",
+      "types": "./dist/host/index.d.ts",
+      "import": "./dist/host/index.js"
+    },
     "./server": {
-      "@dev/source": "./server.ts",
-      "types": "./dist/server.d.ts",
-      "import": "./dist/server.js"
+      "@dev/source": "./host/server.ts",
+      "types": "./dist/host/server.d.ts",
+      "import": "./dist/host/server.js"
     },
     "./types": {
-      "@dev/source": "./types.ts",
-      "types": "./dist/types.d.ts",
-      "import": "./dist/types.js"
+      "@dev/source": "./isolate/types.ts",
+      "types": "./dist/isolate/types.d.ts",
+      "import": "./dist/isolate/types.js"
     },
     "./kv": {
-      "@dev/source": "./kv.ts",
-      "types": "./dist/kv.d.ts",
-      "import": "./dist/kv.js"
+      "@dev/source": "./isolate/kv.ts",
+      "types": "./dist/isolate/kv.d.ts",
+      "import": "./dist/isolate/kv.js"
     },
     "./protocol": {
-      "@dev/source": "./protocol.ts",
-      "types": "./dist/protocol.d.ts",
-      "import": "./dist/protocol.js"
+      "@dev/source": "./isolate/protocol.ts",
+      "types": "./dist/isolate/protocol.d.ts",
+      "import": "./dist/isolate/protocol.js"
     },
     "./testing": {
-      "@dev/source": "./testing.ts",
-      "types": "./dist/testing.d.ts",
-      "import": "./dist/testing.js"
+      "@dev/source": "./host/testing.ts",
+      "types": "./dist/host/testing.d.ts",
+      "import": "./dist/host/testing.js"
     },
     "./testing/matchers": {
-      "@dev/source": "./matchers.ts",
-      "types": "./dist/matchers.d.ts",
-      "import": "./dist/matchers.js"
-    },
-    "./internal": {
-      "@dev/source": "./internal.ts",
-      "types": "./dist/internal.d.ts",
-      "import": "./dist/internal.js"
+      "@dev/source": "./host/matchers.ts",
+      "types": "./dist/host/matchers.d.ts",
+      "import": "./dist/host/matchers.js"
     },
     "./hooks": {
-      "@dev/source": "./hooks.ts",
-      "types": "./dist/hooks.d.ts",
-      "import": "./dist/hooks.js"
+      "@dev/source": "./isolate/hooks.ts",
+      "types": "./dist/isolate/hooks.d.ts",
+      "import": "./dist/isolate/hooks.js"
     },
     "./utils": {
-      "@dev/source": "./_utils.ts",
-      "types": "./dist/_utils.d.ts",
-      "import": "./dist/_utils.js"
+      "@dev/source": "./isolate/_utils.ts",
+      "types": "./dist/isolate/_utils.d.ts",
+      "import": "./dist/isolate/_utils.js"
     },
     "./vite-plugin": {
-      "@dev/source": "./vite-plugin.ts",
-      "types": "./dist/vite-plugin.d.ts",
-      "import": "./dist/vite-plugin.js"
+      "@dev/source": "./host/vite-plugin.ts",
+      "types": "./dist/host/vite-plugin.d.ts",
+      "import": "./dist/host/vite-plugin.js"
     }
   },
   "dependencies": {
@@ -95,7 +100,7 @@
   },
   "scripts": {
     "build": "tsdown && tsc -p tsconfig.build.json",
-    "typecheck": "tsc --noEmit",
+    "typecheck": "tsc --noEmit && tsc -p isolate/tsconfig.json",
     "lint": "biome check .",
     "check:publint": "publint",
     "check:attw": "attw --pack --profile esm-only"

package/dist/{protocol.d.ts → isolate/protocol.d.ts}

@@ -39,11 +39,11 @@ export type KvRequest = z.infer<typeof KvRequestSchema>;
  */
 export declare const SessionErrorCodeSchema: z.ZodEnum<{
     tool: "tool";
-    connection: "connection";
     stt: "stt";
     llm: "llm";
     tts: "tts";
     protocol: "protocol";
+    connection: "connection";
     audio: "audio";
     internal: "internal";
 }>;
@@ -94,11 +94,11 @@ export declare const ClientEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     type: z.ZodLiteral<"error">;
     code: z.ZodEnum<{
         tool: "tool";
-        connection: "connection";
         stt: "stt";
         llm: "llm";
         tts: "tts";
         protocol: "protocol";
+        connection: "connection";
         audio: "audio";
         internal: "internal";
     }>;
@@ -182,11 +182,11 @@ export declare const ServerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     type: z.ZodLiteral<"error">;
     code: z.ZodEnum<{
         tool: "tool";
-        connection: "connection";
         stt: "stt";
         llm: "llm";
         tts: "tts";
         protocol: "protocol";
+        connection: "connection";
         audio: "audio";
         internal: "internal";
     }>;