@alexkroman1/aai 0.11.0 → 0.12.0

package/dist/{direct-executor-DAGCZOAN.js → direct-executor-ZUU0Ke4j.js}

@@ -1,117 +1,14 @@
-import { BuiltinToolSchema, DEFAULT_INSTRUCTIONS, ToolChoiceSchema, defineTool } from "./types.js";
-import { a as DEFAULT_SHUTDOWN_TIMEOUT_MS, c as FETCH_TIMEOUT_MS, d as MAX_HTML_BYTES, f as MAX_PAGE_CHARS, g as TOOL_EXECUTION_TIMEOUT_MS, h as RUN_CODE_TIMEOUT_MS, l as HOOK_TIMEOUT_MS, m as MAX_VALUE_SIZE, o as DEFAULT_STT_SAMPLE_RATE, p as MAX_TOOL_RESULT_CHARS, s as DEFAULT_TTS_SAMPLE_RATE } from "./constants-CwotjpJR.js";
-import { errorDetail, errorMessage, toolError } from "./_utils.js";
-import { callResolveTurnConfig, createAgentHooks } from "./hooks.js";
-import { ClientMessageSchema, buildReadyConfig } from "./protocol.js";
-import { matchGlob, sortAndPaginate } from "./kv.js";
+import { a as agentToolsToSchemas, o as toAgentConfig, r as EMPTY_PARAMS, t as buildSystemPrompt } from "./system-prompt-CVJSQJiA.js";
+import { errorDetail, errorMessage, toolError } from "./isolate/_utils.js";
+import { C as MAX_VALUE_SIZE, S as MAX_TOOL_RESULT_CHARS, T as TOOL_EXECUTION_TIMEOUT_MS, _ as FETCH_TIMEOUT_MS, b as MAX_HTML_BYTES, g as DEFAULT_TTS_SAMPLE_RATE, h as DEFAULT_STT_SAMPLE_RATE, l as buildReadyConfig, m as DEFAULT_SHUTDOWN_TIMEOUT_MS, r as ClientMessageSchema, v as HOOK_TIMEOUT_MS, w as RUN_CODE_TIMEOUT_MS, x as MAX_PAGE_CHARS, y as MAX_GLOB_PATTERN_LENGTH } from "./protocol-rcOrz7T3.js";
+import { callResolveTurnConfig, createAgentHooks } from "./isolate/hooks.js";
 import { z } from "zod";
-import WsWebSocket from "ws";
 import pTimeout from "p-timeout";
 import { createStorage, prefixStorage } from "unstorage";
 import vm from "node:vm";
 import { createNanoEvents } from "nanoevents";
-//#region runtime.ts
-/**
-* Runtime dependencies injected into the session pipeline.
-*
-* Defines the {@link Logger} interface, a default {@link consoleLogger},
-* and the {@link S2SConfig} for Speech-to-Speech endpoint configuration.
-*/
-/** Default console-backed logger. */
-const consoleLogger = {
-	info: (msg, ctx) => ctx ? console.log(msg, ctx) : console.log(msg),
-	warn: (msg, ctx) => ctx ? console.warn(msg, ctx) : console.warn(msg),
-	error: (msg, ctx) => ctx ? console.error(msg, ctx) : console.error(msg),
-	debug: (msg, ctx) => ctx ? console.debug(msg, ctx) : console.debug(msg)
-};
-/**
-* Structured JSON logger for production diagnostics. Each log entry is a
-* single-line JSON object with `timestamp`, `level`, `msg`, and any
-* caller-provided context fields.
-*/
-function jsonLog(level) {
-	return (msg, ctx) => {
-		const entry = {
-			timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-			level,
-			msg
-		};
-		if (ctx) Object.assign(entry, ctx);
-		(level === "error" || level === "warn" ? process.stderr : process.stdout).write(`${JSON.stringify(entry)}\n`);
-	};
-}
-const jsonLogger = {
-	info: jsonLog("info"),
-	warn: jsonLog("warn"),
-	error: jsonLog("error"),
-	debug: jsonLog("debug")
-};
-/** Default S2S endpoint configuration. */
-const DEFAULT_S2S_CONFIG = {
-	wssUrl: "wss://speech-to-speech.us.assemblyai.com/v1/realtime",
-	inputSampleRate: DEFAULT_STT_SAMPLE_RATE,
-	outputSampleRate: DEFAULT_TTS_SAMPLE_RATE
-};
-//#endregion
-//#region _internal-types.ts
-/**
-* Zod schema for serializable agent configuration sent over the wire.
-*
-* This is the JSON-safe subset of the agent definition that can be
-* transmitted between the worker and the host process via structured clone.
-*/
-const AgentConfigSchema = z.object({
-	name: z.string().min(1),
-	instructions: z.string(),
-	greeting: z.string(),
-	sttPrompt: z.string().optional(),
-	maxSteps: z.number().int().positive().optional(),
-	toolChoice: ToolChoiceSchema.optional(),
-	builtinTools: z.array(BuiltinToolSchema).readonly().optional(),
-	idleTimeoutMs: z.number().nonnegative().optional()
-});
-/** Extract the serializable {@link AgentConfig} subset from a source object. */
-function toAgentConfig(src) {
-	const config = {
-		name: src.name,
-		instructions: src.instructions,
-		greeting: src.greeting
-	};
-	if (src.sttPrompt !== void 0) config.sttPrompt = src.sttPrompt;
-	if (typeof src.maxSteps !== "function" && src.maxSteps !== void 0) config.maxSteps = src.maxSteps;
-	if (src.toolChoice !== void 0) config.toolChoice = src.toolChoice;
-	if (src.builtinTools) config.builtinTools = [...src.builtinTools];
-	if (src.idleTimeoutMs !== void 0) config.idleTimeoutMs = src.idleTimeoutMs;
-	return config;
-}
-/**
-* Zod schema for serialized tool definitions sent over the wire.
-*
-* `parameters` must be a valid JSON Schema object (with `type`, `properties`,
-* etc.) — the Vercel AI SDK wraps it via `jsonSchema()`.
-*/
-const ToolSchemaSchema = z.object({
-	name: z.string().min(1),
-	description: z.string().min(1),
-	parameters: z.record(z.string(), z.unknown())
-});
-/** Empty Zod object schema used as default when tools have no parameters. */
-const EMPTY_PARAMS = z.object({});
-/**
-* Convert agent tool definitions to JSON Schema format for wire transport.
-*
-* Transforms the Zod-based `parameters` of each tool into a plain JSON Schema
-* object suitable for structured clone / JSON serialization.
-*/
-function agentToolsToSchemas(tools) {
-	return Object.entries(tools).map(([name, def]) => ({
-		name,
-		description: def.description,
-		parameters: z.toJSONSchema(def.parameters ?? EMPTY_PARAMS)
-	}));
-}
-//#endregion
-//#region _run-code.ts
+import WsWebSocket from "ws";
+//#region host/_run-code.ts
 /**
 * run_code built-in tool — executes user JavaScript in a fresh `node:vm`
 * context with no network, filesystem, or process access.
@@ -181,82 +78,7 @@ async function executeInIsolate(code) {
 	}
 }
 //#endregion
-//#region memory-tools.ts
-/**
-* KV-backed memory tools for agent persistent state.
-*/
-/**
-* Returns a standard set of KV-backed memory tools: `save_memory`,
-* `recall_memory`, `list_memories`, and `forget_memory`.
-*
-* Spread the result into your agent's `tools` record.
-*
-* @example
-* ```ts
-* import { defineAgent, memoryTools } from "aai";
-*
-* export default defineAgent({
-*   name: "My Agent",
-*   tools: { ...memoryTools() },
-* });
-* ```
-*
-* @returns A record with four tool definitions: `save_memory`, `recall_memory`,
-*   `list_memories`, and `forget_memory`.
-* @public
-*/
-function memoryTools() {
-	return {
-		save_memory: defineTool({
-			description: "Save a piece of information to persistent memory. Use a descriptive key like 'user:name' or 'project:status'.",
-			parameters: z.object({
-				key: z.string().describe("A descriptive key for this memory (e.g. 'user:name', 'preference:color')"),
-				value: z.string().describe("The information to remember")
-			}),
-			execute: async ({ key, value }, ctx) => {
-				await ctx.kv.set(key, value);
-				return { saved: key };
-			}
-		}),
-		recall_memory: defineTool({
-			description: "Retrieve a previously saved memory by its key.",
-			parameters: z.object({ key: z.string().describe("The key to look up") }),
-			execute: async ({ key }, ctx) => {
-				const value = await ctx.kv.get(key);
-				if (value === null) return {
-					found: false,
-					key
-				};
-				return {
-					found: true,
-					key,
-					value
-				};
-			}
-		}),
-		list_memories: defineTool({
-			description: "List all saved memory keys, optionally filtered by a prefix (e.g. 'user:').",
-			parameters: z.object({ prefix: z.string().describe("Prefix to filter keys (e.g. 'user:'). Use empty string for all.").optional() }),
-			execute: async ({ prefix }, ctx) => {
-				const entries = await ctx.kv.list(prefix ?? "");
-				return {
-					count: entries.length,
-					keys: entries.map((e) => e.key)
-				};
-			}
-		}),
-		forget_memory: defineTool({
-			description: "Delete a previously saved memory by its key.",
-			parameters: z.object({ key: z.string().describe("The key to delete") }),
-			execute: async ({ key }, ctx) => {
-				await ctx.kv.delete(key);
-				return { deleted: key };
-			}
-		})
-	};
-}
-//#endregion
-//#region builtin-tools.ts
+//#region host/builtin-tools.ts
 /**
 * Built-in tool definitions for the AAI agent SDK.
 *
@@ -396,7 +218,6 @@ function resolveBuiltin(name, opts) {
 		case "visit_webpage": return [["visit_webpage", createVisitWebpage(opts?.fetch)]];
 		case "fetch_json": return [["fetch_json", createFetchJson(opts?.fetch)]];
 		case "run_code": return [["run_code", createRunCode()]];
-		case "memory": return Object.entries(memoryTools());
 		default: return [];
 	}
 }
@@ -418,65 +239,111 @@ function getBuiltinToolSchemas(names) {
 	})));
 }
 //#endregion
-//#region s2s.ts
+//#region host/runtime.ts
+/**
+* Runtime dependencies injected into the session pipeline.
+*
+* Defines the {@link Logger} interface, a default {@link consoleLogger},
+* and the {@link S2SConfig} for Speech-to-Speech endpoint configuration.
+*/
+/** Default console-backed logger. */
+const consoleLogger = {
+	info: (msg, ctx) => ctx ? console.log(msg, ctx) : console.log(msg),
+	warn: (msg, ctx) => ctx ? console.warn(msg, ctx) : console.warn(msg),
+	error: (msg, ctx) => ctx ? console.error(msg, ctx) : console.error(msg),
+	debug: (msg, ctx) => ctx ? console.debug(msg, ctx) : console.debug(msg)
+};
+/**
+* Structured JSON logger for production diagnostics. Each log entry is a
+* single-line JSON object with `timestamp`, `level`, `msg`, and any
+* caller-provided context fields.
+*/
+function jsonLog(level) {
+	return (msg, ctx) => {
+		const entry = {
+			timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+			level,
+			msg
+		};
+		if (ctx) Object.assign(entry, ctx);
+		(level === "error" || level === "warn" ? process.stderr : process.stdout).write(`${JSON.stringify(entry)}\n`);
+	};
+}
+const jsonLogger = {
+	info: jsonLog("info"),
+	warn: jsonLog("warn"),
+	error: jsonLog("error"),
+	debug: jsonLog("debug")
+};
+/** Default S2S endpoint configuration. */
+const DEFAULT_S2S_CONFIG = {
+	wssUrl: "wss://speech-to-speech.us.assemblyai.com/v1/realtime",
+	inputSampleRate: DEFAULT_STT_SAMPLE_RATE,
+	outputSampleRate: DEFAULT_TTS_SAMPLE_RATE
+};
+//#endregion
+//#region host/s2s.ts
 const uint8ToBase64 = (bytes) => Buffer.from(bytes).toString("base64");
 const base64ToUint8 = (base64) => new Uint8Array(Buffer.from(base64, "base64"));
 const WS_OPEN = 1;
 const defaultCreateS2sWebSocket = (url, opts) => new WsWebSocket(url, { headers: opts.headers });
-function hasStringFields(obj, ...keys) {
-	for (const k of keys) if (typeof obj[k] !== "string") return false;
-	return true;
-}
-function parseAgentTranscript(obj) {
-	if (typeof obj.text !== "string") return;
-	return {
-		type: "transcript.agent",
-		text: obj.text,
-		reply_id: typeof obj.reply_id === "string" ? obj.reply_id : "",
-		item_id: typeof obj.item_id === "string" ? obj.item_id : "",
-		interrupted: obj.interrupted === true
-	};
-}
-function parseToolCall(obj) {
-	if (typeof obj.call_id !== "string" || typeof obj.name !== "string") return;
-	const args = obj.args != null && typeof obj.args === "object" && !Array.isArray(obj.args) ? obj.args : {};
-	return {
-		type: "tool.call",
-		call_id: obj.call_id,
-		name: obj.name,
-		args
-	};
-}
-function passthrough(obj) {
-	return obj;
-}
-function requireFields(...keys) {
-	return (obj) => hasStringFields(obj, ...keys) ? obj : void 0;
-}
-const MESSAGE_VALIDATORS = new Map([
-	["session.ready", requireFields("session_id")],
-	["session.updated", passthrough],
-	["input.speech.started", passthrough],
-	["input.speech.stopped", passthrough],
-	["reply.content_part.started", passthrough],
-	["reply.content_part.done", passthrough],
-	["transcript.user.delta", requireFields("text")],
-	["transcript.user", requireFields("item_id", "text")],
-	["reply.started", requireFields("reply_id")],
-	["transcript.agent.delta", requireFields("delta")],
-	["transcript.agent", parseAgentTranscript],
-	["tool.call", parseToolCall],
-	["reply.done", (obj) => ({
-		type: "reply.done",
-		...typeof obj.status === "string" ? { status: obj.status } : {}
-	})],
-	["session.error", requireFields("code", "message")],
-	["error", requireFields("message")]
+const S2sMessageSchema = z.discriminatedUnion("type", [
+	z.object({
+		type: z.literal("session.ready"),
+		session_id: z.string()
+	}).passthrough(),
+	z.object({ type: z.literal("session.updated") }).passthrough(),
+	z.object({ type: z.literal("input.speech.started") }),
+	z.object({ type: z.literal("input.speech.stopped") }),
+	z.object({
+		type: z.literal("transcript.user.delta"),
+		text: z.string()
+	}),
+	z.object({
+		type: z.literal("transcript.user"),
+		item_id: z.string(),
+		text: z.string()
+	}),
+	z.object({
+		type: z.literal("reply.started"),
+		reply_id: z.string()
+	}),
+	z.object({
+		type: z.literal("transcript.agent.delta"),
+		delta: z.string()
+	}).passthrough(),
+	z.object({
+		type: z.literal("transcript.agent"),
+		text: z.string(),
+		reply_id: z.string().optional().default(""),
+		item_id: z.string().optional().default(""),
+		interrupted: z.boolean().optional().default(false)
+	}),
+	z.object({ type: z.literal("reply.content_part.started") }).passthrough(),
+	z.object({ type: z.literal("reply.content_part.done") }).passthrough(),
+	z.object({
+		type: z.literal("tool.call"),
+		call_id: z.string(),
+		name: z.string(),
+		args: z.record(z.string(), z.unknown()).optional().default({})
+	}),
+	z.object({
+		type: z.literal("reply.done"),
+		status: z.string().optional()
+	}),
+	z.object({
+		type: z.literal("session.error"),
+		code: z.string(),
+		message: z.string()
+	}),
+	z.object({
+		type: z.literal("error"),
+		message: z.string()
+	})
 ]);
 function parseS2sMessage(obj) {
-	const type = obj.type;
-	if (typeof type !== "string") return;
-	return MESSAGE_VALIDATORS.get(type)?.(obj);
+	const result = S2sMessageSchema.safeParse(obj);
+	return result.success ? result.data : void 0;
 }
 function dispatchS2sMessage(emitter, msg) {
 	switch (msg.type) {
@@ -667,37 +534,7 @@ function connectS2s(opts) {
 	});
 }
 //#endregion
-//#region system-prompt.ts
-function getFormattedDate() {
-	return (/* @__PURE__ */ new Date()).toLocaleDateString("en-US", {
-		weekday: "long",
-		year: "numeric",
-		month: "long",
-		day: "numeric"
-	});
-}
-const VOICE_RULES = "\n\nCRITICAL OUTPUT RULES — you MUST follow these for EVERY response:\nYour response will be spoken aloud by a TTS system and displayed as plain text.\n- NEVER use markdown: no **, no *, no _, no #, no `, no [](), no ---\n- NEVER use bullet points (-, *, •) or numbered lists (1., 2.)\n- NEVER use code blocks or inline code\n- NEVER mention tools, search, APIs, or technical failures to the user. If a tool returns no results, just answer naturally without explaining why.\n- Write exactly as you would say it out loud to a friend\n- Use short conversational sentences. To list things, say \"First,\" \"Next,\" \"Finally,\"\n- Keep responses concise — 1 to 3 sentences max";
-/**
-* Build the system prompt sent to the LLM from the agent configuration.
-*
-* Assembles the default instructions, today's date, agent-specific instructions,
-* and optional sections for tool usage preamble and voice output rules.
-*
-* @param config - The serializable agent configuration (name, instructions, etc.).
-* @param opts.hasTools - When `true`, appends a preamble instructing the LLM to
-*   speak a brief phrase before each tool call to fill silence.
-* @param opts.voice - When `true`, appends strict voice-specific output rules
-*   (no markdown, no bullet points, conversational tone, concise responses).
-* @returns The assembled system prompt string.
-*/
-function buildSystemPrompt(config, opts) {
-	const { hasTools } = opts;
-	const agentInstructions = config.instructions && config.instructions !== DEFAULT_INSTRUCTIONS ? `\n\nAgent-Specific Instructions:\n${config.instructions}` : "";
-	const toolPreamble = hasTools ? "\n\nWhen you decide to use a tool, ALWAYS say a brief natural phrase BEFORE the tool call (e.g. \"Let me look that up\" or \"One moment while I check\"). This fills silence while the tool executes. Keep preambles to one short sentence." : "";
-	return DEFAULT_INSTRUCTIONS + `\n\nToday's date is ${getFormattedDate()}.` + agentInstructions + toolPreamble + (opts.voice ? VOICE_RULES : "");
-}
-//#endregion
-//#region session.ts
+//#region host/session.ts
 function buildCtx(opts) {
 	const { id, agentConfig, hooks, log } = opts;
 	const maxHistory = opts.maxHistory ?? 200;
@@ -1090,7 +927,36 @@ function createS2sSession(opts) {
 	};
 }
 //#endregion
-//#region unstorage-kv.ts
+//#region isolate/_kv-utils.ts
+/** Internal KV helpers shared by kv.ts and unstorage-kv.ts. */
+/** Sort entries by key and apply reverse/limit options. Mutates the array. */
+function sortAndPaginate(entries, options) {
+	entries.sort((a, b) => a.key.localeCompare(b.key));
+	if (options?.reverse) entries.reverse();
+	if (options?.limit && options.limit > 0) entries.length = Math.min(entries.length, options.limit);
+	return entries;
+}
+/** Simple glob matcher — supports `*` as a wildcard for any characters. */
+function matchGlob(key, pattern) {
+	if (pattern.length > 1024) throw new Error(`Glob pattern exceeds maximum length of ${MAX_GLOB_PATTERN_LENGTH}`);
+	const parts = pattern.split("*");
+	if (parts.length === 1) return key === pattern;
+	const first = parts[0];
+	if (!key.startsWith(first)) return false;
+	const last = parts.at(-1);
+	if (key.length < first.length + last.length) return false;
+	if (!key.endsWith(last)) return false;
+	let pos = first.length;
+	const end = key.length - last.length;
+	for (const part of parts.slice(1, -1)) {
+		const idx = key.indexOf(part, pos);
+		if (idx === -1 || idx > end) return false;
+		pos = idx + part.length;
+	}
+	return pos <= end;
+}
+//#endregion
+//#region host/unstorage-kv.ts
 /**
 * Key-value store backed by unstorage.
 *
@@ -1151,7 +1017,7 @@ function createUnstorageKv(options) {
 	};
 }
 //#endregion
-//#region ws-handler.ts
+//#region host/ws-handler.ts
 /**
 * WebSocket session lifecycle handler.
 *
@@ -1341,7 +1207,7 @@ function wireSessionSocket(ws, opts) {
 	});
 }
 //#endregion
-//#region direct-executor.ts
+//#region host/direct-executor.ts
 /**
 * Agent runtime — the execution engine for voice agents.
 *
@@ -1511,8 +1377,12 @@ function createRuntime(opts) {
 			for (const r of results) if (r.status === "rejected") logger.warn(`Session stop failed during shutdown: ${r.reason}`);
 			return "done";
 		});
-		const outcome = await Promise.race([graceful, timeout]);
-		if (timer) clearTimeout(timer);
+		let outcome;
+		try {
+			outcome = await Promise.race([graceful, timeout]);
+		} finally {
+			if (timer) clearTimeout(timer);
+		}
 		if (outcome === "timeout") logger.warn(`Shutdown timeout (${shutdownTimeoutMs}ms) exceeded — force-closing ${sessions.size} remaining session(s)`);
 		sessions.clear();
 	}
@@ -1527,4 +1397,4 @@ function createRuntime(opts) {
 	};
 }
 //#endregion
-export { consoleLogger as _, _internals as a, buildSystemPrompt as c, AgentConfigSchema as d, EMPTY_PARAMS as f, DEFAULT_S2S_CONFIG as g, toAgentConfig as h, createUnstorageKv as i, connectS2s as l, agentToolsToSchemas as m, executeToolCall as n, buildCtx as o, ToolSchemaSchema as p, wireSessionSocket as r, createS2sSession as s, createRuntime as t, defaultCreateS2sWebSocket as u, jsonLogger as v };
+export { _internals as a, connectS2s as c, consoleLogger as d, jsonLogger as f, createUnstorageKv as i, defaultCreateS2sWebSocket as l, executeToolCall as n, buildCtx as o, wireSessionSocket as r, createS2sSession as s, createRuntime as t, DEFAULT_S2S_CONFIG as u };

package/dist/{_run-code.d.ts → host/_run-code.d.ts}

@@ -3,7 +3,7 @@
  * context with no network, filesystem, or process access.
  */
 import { z } from "zod";
-import type { ToolDef } from "./types.ts";
+import type { ToolDef } from "../isolate/types.ts";
 declare const runCodeParams: z.ZodObject<{
     code: z.ZodString;
 }, z.core.$strip>;

package/dist/{_runtime-conformance.d.ts → host/_runtime-conformance.d.ts}

@@ -19,7 +19,7 @@
  *
  * @example Sandbox (integration test in aai-server)
  * ```ts
- * import { testRuntime } from "@alexkroman1/aai/internal";
+ * import { testRuntime } from "@alexkroman1/aai/host";
  *
  * testRuntime("sandbox", async () => {
  *   // ... start isolate with a bundled agent
@@ -27,9 +27,9 @@
  * });
  * ```
  */
-import type { ExecuteTool } from "./_internal-types.ts";
-import type { AgentHooks } from "./hooks.ts";
-import { type AgentDef } from "./types.ts";
+import type { ExecuteTool } from "../isolate/_internal-types.ts";
+import type { AgentHooks } from "../isolate/hooks.ts";
+import { type AgentDef } from "../isolate/types.ts";
 /**
  * Minimal runtime surface needed for conformance tests.
  *

package/dist/{_test-utils.d.ts → host/_test-utils.d.ts}

@@ -1,9 +1,9 @@
-import type { AgentConfig } from "./_internal-types.ts";
-import type { ClientSink } from "./protocol.ts";
+import type { AgentConfig } from "../isolate/_internal-types.ts";
+import type { ClientSink } from "../isolate/protocol.ts";
+import type { AgentDef, ToolContext, ToolDef } from "../isolate/types.ts";
 import type { S2sEvents, S2sHandle } from "./s2s.ts";
 import type { Session } from "./session.ts";
 import { type S2sSessionOptions } from "./session.ts";
-import type { AgentDef, ToolContext, ToolDef } from "./types.ts";
 /** Yield to the microtask queue so pending promises settle. */
 export declare function flush(): Promise<void>;
 export declare function createMockToolContext(overrides?: Partial<ToolContext>): ToolContext;

package/dist/{builtin-tools.d.ts → host/builtin-tools.d.ts}

@@ -6,10 +6,9 @@
  * Network requests go through the host's fetch proxy (with SSRF protection).
  */
 import { z } from "zod";
-import { type ToolSchema } from "./_internal-types.ts";
-import type { ToolDef } from "./types.ts";
+import { type ToolSchema } from "../isolate/_internal-types.ts";
+import type { ToolDef } from "../isolate/types.ts";
 export { executeInIsolate } from "./_run-code.ts";
-export { memoryTools } from "./memory-tools.ts";
 /** Options for creating built-in tool definitions. */
 export type BuiltinToolOptions = {
     /** Override fetch implementation (defaults to globalThis.fetch). For testing. */

package/dist/{direct-executor.d.ts → host/direct-executor.d.ts}

@@ -5,17 +5,17 @@
  * self-hosted servers and the platform sandbox. It wires up tool execution,
  * lifecycle hooks, and session management.
  */
-import { type ExecuteTool, type ToolSchema } from "./_internal-types.ts";
-import { type AgentHooks } from "./hooks.ts";
-import type { Kv } from "./kv.ts";
-import type { ClientSink } from "./protocol.ts";
-import { type ReadyConfig } from "./protocol.ts";
+import { type ExecuteTool, type ToolSchema } from "../isolate/_internal-types.ts";
+import { type AgentHooks } from "../isolate/hooks.ts";
+import type { Kv } from "../isolate/kv.ts";
+import type { ClientSink } from "../isolate/protocol.ts";
+import { type ReadyConfig } from "../isolate/protocol.ts";
+import type { AgentDef, Message, ToolDef } from "../isolate/types.ts";
 import type { Logger, S2SConfig } from "./runtime.ts";
 import type { CreateS2sWebSocket } from "./s2s.ts";
 import { type Session } from "./session.ts";
-import type { AgentDef, Message, ToolDef } from "./types.ts";
 import { type SessionWebSocket } from "./ws-handler.ts";
-export type { ExecuteTool } from "./_internal-types.ts";
+export type { ExecuteTool } from "../isolate/_internal-types.ts";
 export type ExecuteToolCallOptions = {
     tool: ToolDef;
     env: Readonly<Record<string, string>>;

package/dist/{internal.d.ts → host/index.d.ts}

@@ -1,17 +1,16 @@
 /**
- * Internal barrel — re-exports all SDK internals for use by the platform
+ * Host barrel — re-exports all SDK internals for use by the platform
  * server (`aai-server`) and CLI. **Not a public API.**
  *
+ * Includes the full isolate-safe kernel plus host-only modules that
+ * depend on Node.js APIs (server, executor, S2S, etc.).
+ *
  * Consumer packages should import from the top-level `@alexkroman1/aai`
  * entry, `./server`, `./types`, `./kv`, `./protocol`, or `./testing`.
  */
-export * from "./_internal-types.ts";
+export * from "../isolate/index.ts";
 export * from "./_runtime-conformance.ts";
-export * from "./_utils.ts";
-export * from "./constants.ts";
 export * from "./direct-executor.ts";
-export * from "./hooks.ts";
-export * from "./protocol.ts";
 export * from "./runtime.ts";
 export * from "./s2s.ts";
 export * from "./session.ts";

package/dist/{internal.js → host/index.js}

@@ -1,12 +1,13 @@
-import { defineTool } from "./types.js";
-import { a as DEFAULT_SHUTDOWN_TIMEOUT_MS, c as FETCH_TIMEOUT_MS, d as MAX_HTML_BYTES, f as MAX_PAGE_CHARS, g as TOOL_EXECUTION_TIMEOUT_MS, h as RUN_CODE_TIMEOUT_MS, i as DEFAULT_SESSION_START_TIMEOUT_MS, l as HOOK_TIMEOUT_MS, m as MAX_VALUE_SIZE, n as DEFAULT_IDLE_TIMEOUT_MS, o as DEFAULT_STT_SAMPLE_RATE, p as MAX_TOOL_RESULT_CHARS, r as DEFAULT_MAX_HISTORY, s as DEFAULT_TTS_SAMPLE_RATE, t as AGENT_CSP, u as MAX_GLOB_PATTERN_LENGTH } from "./constants-CwotjpJR.js";
-import { _ as consoleLogger, a as _internals, c as buildSystemPrompt, d as AgentConfigSchema, f as EMPTY_PARAMS, g as DEFAULT_S2S_CONFIG, h as toAgentConfig, i as createUnstorageKv, l as connectS2s, m as agentToolsToSchemas, n as executeToolCall, o as buildCtx, p as ToolSchemaSchema, r as wireSessionSocket, s as createS2sSession, t as createRuntime, u as defaultCreateS2sWebSocket, v as jsonLogger } from "./direct-executor-DAGCZOAN.js";
-import { errorDetail, errorMessage, isReadOnlyFsOp, toolError } from "./_utils.js";
-import { callResolveTurnConfig, createAgentHooks } from "./hooks.js";
-import { AUDIO_FORMAT, ClientEventSchema, ClientMessageSchema, KvRequestSchema, ReadyConfigSchema, ServerMessageSchema, SessionErrorCodeSchema, TurnConfigSchema, buildReadyConfig } from "./protocol.js";
+import { BuiltinToolSchema, DEFAULT_GREETING, DEFAULT_INSTRUCTIONS, ToolChoiceSchema, defineAgent, defineTool, defineToolFactory } from "../isolate/types.js";
+import { a as agentToolsToSchemas, i as ToolSchemaSchema, n as AgentConfigSchema, o as toAgentConfig, r as EMPTY_PARAMS, t as buildSystemPrompt } from "../system-prompt-CVJSQJiA.js";
+import { errorDetail, errorMessage, toolError } from "../isolate/_utils.js";
+import { C as MAX_VALUE_SIZE, S as MAX_TOOL_RESULT_CHARS, T as TOOL_EXECUTION_TIMEOUT_MS, _ as FETCH_TIMEOUT_MS, a as ReadyConfigSchema, b as MAX_HTML_BYTES, c as TurnConfigSchema, d as DEFAULT_IDLE_TIMEOUT_MS, f as DEFAULT_MAX_HISTORY, g as DEFAULT_TTS_SAMPLE_RATE, h as DEFAULT_STT_SAMPLE_RATE, i as KvRequestSchema, l as buildReadyConfig, m as DEFAULT_SHUTDOWN_TIMEOUT_MS, n as ClientEventSchema, o as ServerMessageSchema, p as DEFAULT_SESSION_START_TIMEOUT_MS, r as ClientMessageSchema, s as SessionErrorCodeSchema, t as AUDIO_FORMAT, u as AGENT_CSP, v as HOOK_TIMEOUT_MS, w as RUN_CODE_TIMEOUT_MS, x as MAX_PAGE_CHARS, y as MAX_GLOB_PATTERN_LENGTH } from "../protocol-rcOrz7T3.js";
+import { callResolveTurnConfig, createAgentHooks } from "../isolate/hooks.js";
+import "../isolate/index.js";
+import { a as _internals, c as connectS2s, d as consoleLogger, f as jsonLogger, i as createUnstorageKv, l as defaultCreateS2sWebSocket, n as executeToolCall, o as buildCtx, r as wireSessionSocket, s as createS2sSession, t as createRuntime, u as DEFAULT_S2S_CONFIG } from "../direct-executor-ZUU0Ke4j.js";
 import { z } from "zod";
 import { describe, expect, test } from "vitest";
-//#region _runtime-conformance.ts
+//#region host/_runtime-conformance.ts
 /**
 * Shared runtime conformance tests.
 *
@@ -28,7 +29,7 @@ import { describe, expect, test } from "vitest";
 *
 * @example Sandbox (integration test in aai-server)
 * ```ts
-* import { testRuntime } from "@alexkroman1/aai/internal";
+* import { testRuntime } from "@alexkroman1/aai/host";
 *
 * testRuntime("sandbox", async () => {
 *   // ... start isolate with a bundled agent
@@ -161,4 +162,4 @@ function testRuntime(label, getContext) {
 	});
 }
 //#endregion
-export { AGENT_CSP, AUDIO_FORMAT, AgentConfigSchema, CONFORMANCE_AGENT, ClientEventSchema, ClientMessageSchema, DEFAULT_IDLE_TIMEOUT_MS, DEFAULT_MAX_HISTORY, DEFAULT_S2S_CONFIG, DEFAULT_SESSION_START_TIMEOUT_MS, DEFAULT_SHUTDOWN_TIMEOUT_MS, DEFAULT_STT_SAMPLE_RATE, DEFAULT_TTS_SAMPLE_RATE, EMPTY_PARAMS, FETCH_TIMEOUT_MS, HOOK_TIMEOUT_MS, KvRequestSchema, MAX_GLOB_PATTERN_LENGTH, MAX_HTML_BYTES, MAX_PAGE_CHARS, MAX_TOOL_RESULT_CHARS, MAX_VALUE_SIZE, RUN_CODE_TIMEOUT_MS, ReadyConfigSchema, ServerMessageSchema, SessionErrorCodeSchema, TOOL_EXECUTION_TIMEOUT_MS, ToolSchemaSchema, TurnConfigSchema, _internals, agentToolsToSchemas, buildCtx, buildReadyConfig, buildSystemPrompt, callResolveTurnConfig, connectS2s, consoleLogger, createAgentHooks, createRuntime, createS2sSession, createUnstorageKv, defaultCreateS2sWebSocket, errorDetail, errorMessage, executeToolCall, isReadOnlyFsOp, jsonLogger, testRuntime, toAgentConfig, toolError, wireSessionSocket };
+export { AGENT_CSP, AUDIO_FORMAT, AgentConfigSchema, BuiltinToolSchema, CONFORMANCE_AGENT, ClientEventSchema, ClientMessageSchema, DEFAULT_GREETING, DEFAULT_IDLE_TIMEOUT_MS, DEFAULT_INSTRUCTIONS, DEFAULT_MAX_HISTORY, DEFAULT_S2S_CONFIG, DEFAULT_SESSION_START_TIMEOUT_MS, DEFAULT_SHUTDOWN_TIMEOUT_MS, DEFAULT_STT_SAMPLE_RATE, DEFAULT_TTS_SAMPLE_RATE, EMPTY_PARAMS, FETCH_TIMEOUT_MS, HOOK_TIMEOUT_MS, KvRequestSchema, MAX_GLOB_PATTERN_LENGTH, MAX_HTML_BYTES, MAX_PAGE_CHARS, MAX_TOOL_RESULT_CHARS, MAX_VALUE_SIZE, RUN_CODE_TIMEOUT_MS, ReadyConfigSchema, ServerMessageSchema, SessionErrorCodeSchema, TOOL_EXECUTION_TIMEOUT_MS, ToolChoiceSchema, ToolSchemaSchema, TurnConfigSchema, _internals, agentToolsToSchemas, buildCtx, buildReadyConfig, buildSystemPrompt, callResolveTurnConfig, connectS2s, consoleLogger, createAgentHooks, createRuntime, createS2sSession, createUnstorageKv, defaultCreateS2sWebSocket, defineAgent, defineTool, defineTool as tool, defineToolFactory, errorDetail, errorMessage, executeToolCall, jsonLogger, testRuntime, toAgentConfig, toolError, wireSessionSocket };

package/dist/{matchers.js → host/matchers.js}

@@ -1,6 +1,6 @@
-import { n as TurnResult } from "./testing-Dmx-dudh.js";
+import { n as TurnResult } from "../testing-Bb2B5Uob.js";
 import { expect } from "vitest";
-//#region matchers.ts
+//#region host/matchers.ts
 /**
 * Vitest custom matchers for AAI testing.
 *