@alexkroman1/aai 0.11.0 → 0.12.0

package/dist/{server.d.ts → host/server.d.ts}

@@ -4,8 +4,8 @@
  * {@link createServer} wraps a {@link Runtime} with an HTTP + WebSocket
  * server using only `node:http` and `ws` (no framework dependencies).
  */
+import type { Kv } from "../isolate/kv.ts";
 import type { Runtime } from "./direct-executor.ts";
-import type { Kv } from "./kv.ts";
 import type { Logger } from "./runtime.ts";
 export { createRuntime, type Runtime, type RuntimeOptions } from "./direct-executor.ts";
 /**
@@ -29,20 +29,4 @@ export type AgentServer = {
     close(): Promise<void>;
     port: number | undefined;
 };
-/**
- * Create an HTTP + WebSocket server for self-hosted agent deployments.
- *
- * @example
- * ```ts
- * import { defineAgent } from "@alexkroman1/aai";
- * import { createRuntime, createServer } from "@alexkroman1/aai/server";
- *
- * const agent = defineAgent({ name: "my-agent" });
- * const runtime = createRuntime({ agent, env: process.env });
- * const server = createServer({ runtime, name: agent.name });
- * await server.listen(3000);
- * ```
- *
- * @public
- */
 export declare function createServer(options: ServerOptions): AgentServer;

package/dist/{server.js → host/server.js}

@@ -1,10 +1,10 @@
-import { t as AGENT_CSP } from "./constants-CwotjpJR.js";
-import { _ as consoleLogger, t as createRuntime } from "./direct-executor-DAGCZOAN.js";
+import { u as AGENT_CSP } from "../protocol-rcOrz7T3.js";
+import { d as consoleLogger, t as createRuntime } from "../direct-executor-ZUU0Ke4j.js";
+import { WebSocketServer } from "ws";
 import fs from "node:fs";
 import http from "node:http";
 import path from "node:path";
-import { WebSocketServer } from "ws";
-//#region server.ts
+//#region host/server.ts
 /**
 * Self-hostable agent server.
 *
@@ -59,6 +59,26 @@ function serveStatic(dir, req, res) {
 *
 * @public
 */
+function handleKvGet(kv, req, res) {
+	const key = new URL(req.url ?? "/", "http://localhost").searchParams.get("key");
+	if (!key) {
+		res.writeHead(400, { "Content-Type": "application/json" });
+		res.end(JSON.stringify({ error: "Missing key query parameter" }));
+		return;
+	}
+	kv.get(key).then((value) => {
+		if (value === null) {
+			res.writeHead(404, { "Content-Type": "application/json" });
+			res.end("null");
+		} else {
+			res.writeHead(200, { "Content-Type": "application/json" });
+			res.end(JSON.stringify(value));
+		}
+	}).catch(() => {
+		res.writeHead(500, { "Content-Type": "application/json" });
+		res.end(JSON.stringify({ error: "KV error" }));
+	});
+}
 function createServer(options) {
 	const { runtime, clientHtml, clientDir, logger = consoleLogger, kv } = options;
 	const name = options.name ?? "agent";
@@ -78,24 +98,7 @@ function createServer(options) {
 			return;
 		}
 		if (kv && method === "GET" && url === "/kv") {
-			const key = new URL(req.url ?? "/", "http://localhost").searchParams.get("key");
-			if (!key) {
-				res.writeHead(400, { "Content-Type": "application/json" });
-				res.end(JSON.stringify({ error: "Missing key query parameter" }));
-				return;
-			}
-			kv.get(key).then((value) => {
-				if (value === null) {
-					res.writeHead(404, { "Content-Type": "application/json" });
-					res.end("null");
-				} else {
-					res.writeHead(200, { "Content-Type": "application/json" });
-					res.end(JSON.stringify(value));
-				}
-			}).catch(() => {
-				res.writeHead(500, { "Content-Type": "application/json" });
-				res.end(JSON.stringify({ error: "KV error" }));
-			});
+			handleKvGet(kv, req, res);
 			return;
 		}
 		if (clientDir && serveStatic(clientDir, req, res)) return;
@@ -142,12 +145,18 @@ function createServer(options) {
 			});
 		},
 		async close() {
-			await runtime.shutdown();
-			wss.close();
-			if (listenPort !== void 0) await new Promise((resolve, reject) => {
-				httpServer.close((err) => err ? reject(err) : resolve());
-			});
-			listenPort = void 0;
+			try {
+				await runtime.shutdown();
+			} finally {
+				try {
+					wss.close();
+				} finally {
+					if (listenPort !== void 0) await new Promise((resolve, reject) => {
+						httpServer.close((err) => err ? reject(err) : resolve());
+					});
+					listenPort = void 0;
+				}
+			}
 		}
 	};
 }

package/dist/{session.d.ts → host/session.d.ts}

@@ -1,10 +1,10 @@
 /** S2S session — relays audio between client and AssemblyAI S2S API. */
-import type { AgentConfig, ExecuteTool, ToolSchema } from "./_internal-types.ts";
-import type { AgentHookMap, AgentHooks } from "./hooks.ts";
-import type { ClientSink } from "./protocol.ts";
+import type { AgentConfig, ExecuteTool, ToolSchema } from "../isolate/_internal-types.ts";
+import type { AgentHookMap, AgentHooks } from "../isolate/hooks.ts";
+import type { ClientSink } from "../isolate/protocol.ts";
+import type { Message } from "../isolate/types.ts";
 import type { Logger, S2SConfig } from "./runtime.ts";
 import { type CreateS2sWebSocket, connectS2s, type S2sHandle } from "./s2s.ts";
-import type { Message } from "./types.ts";
 export type { S2sHandle } from "./s2s.ts";
 type PendingTool = {
     callId: string;
@@ -63,9 +63,9 @@ export declare function buildCtx(opts: {
     log: Logger;
     maxHistory?: number | undefined;
 }): S2sSessionCtx;
-export type { AgentHookMap, AgentHooks } from "./hooks.ts";
-export { callResolveTurnConfig, createAgentHooks } from "./hooks.ts";
-export { buildSystemPrompt } from "./system-prompt.ts";
+export type { AgentHookMap, AgentHooks } from "../isolate/hooks.ts";
+export { callResolveTurnConfig, createAgentHooks } from "../isolate/hooks.ts";
+export { buildSystemPrompt } from "../isolate/system-prompt.ts";
 /**
  * A voice session managing the Speech-to-Speech connection for one client.
  *

package/dist/{testing.d.ts → host/testing.d.ts}

@@ -35,9 +35,9 @@
  *
  * @packageDocumentation
  */
+import type { Kv } from "../isolate/kv.ts";
+import type { AgentDef, Message } from "../isolate/types.ts";
 import { type Runtime } from "./direct-executor.ts";
-import type { Kv } from "./kv.ts";
-import type { AgentDef, Message } from "./types.ts";
 export { installMockWebSocket, MockWebSocket } from "./_mock-ws.ts";
 export { flush, makeStubSession } from "./_test-utils.ts";
 /**

package/dist/{testing.js → host/testing.js}

@@ -1,2 +1,2 @@
-import { a as makeStubSession, i as flush, n as TurnResult, o as MockWebSocket, r as createTestHarness, s as installMockWebSocket, t as TestHarness } from "./testing-Dmx-dudh.js";
+import { a as makeStubSession, i as flush, n as TurnResult, o as MockWebSocket, r as createTestHarness, s as installMockWebSocket, t as TestHarness } from "../testing-Bb2B5Uob.js";
 export { MockWebSocket, TestHarness, TurnResult, createTestHarness, flush, installMockWebSocket, makeStubSession };

package/dist/{unstorage-kv.d.ts → host/unstorage-kv.d.ts}

@@ -4,7 +4,7 @@
  * Works with any unstorage driver (memory, fs, S3/R2, etc.).
  */
 import { type Storage } from "unstorage";
-import type { Kv } from "./kv.ts";
+import type { Kv } from "../isolate/kv.ts";
 /**
  * Options for creating an unstorage-backed KV store.
  */

package/dist/{vite-plugin.js → host/vite-plugin.js}

@@ -1,6 +1,6 @@
 import path from "node:path";
 import fs from "node:fs/promises";
-//#region vite-plugin.ts
+//#region host/vite-plugin.ts
 /**
 * Vite plugin for AAI agent development.
 *
@@ -66,6 +66,7 @@ function aai(options) {
 				}),
 				name: agentDef.name
 			});
+			if (backendPort == null) throw new Error("backendPort was not resolved during config phase");
 			await agentServer.listen(backendPort);
 			server = agentServer;
 			viteServer.config.logger.info(`Agent backend on port ${backendPort}`);

package/dist/{ws-handler.d.ts → host/ws-handler.d.ts}

@@ -3,7 +3,7 @@
  *
  * Audio validation is handled at the host transport layer (see server.ts).
  */
-import type { ClientSink, ReadyConfig } from "./protocol.ts";
+import type { ClientSink, ReadyConfig } from "../isolate/protocol.ts";
 import type { Logger } from "./runtime.ts";
 import type { Session } from "./session.ts";
 /**

package/dist/index.d.ts

@@ -19,5 +19,5 @@
  * });
  * ```
  */
-export type { Kv, KvEntry, KvListOptions } from "./kv.ts";
-export { type AgentDef, type AgentOptions, type BuiltinTool, defineAgent, defineTool, defineToolFactory, type HookContext, type Message, type ToolChoice, type ToolContext, type ToolDef, type ToolResultMap, tool, } from "./types.ts";
+export type { Kv, KvEntry, KvListOptions } from "./isolate/kv.ts";
+export { type AgentDef, type AgentOptions, type BuiltinTool, defineAgent, defineTool, defineToolFactory, type HookContext, type Message, type ToolChoice, type ToolContext, type ToolDef, type ToolResultMap, tool, } from "./isolate/types.ts";

package/dist/index.js

@@ -1,2 +1,2 @@
-import { defineAgent, defineTool, defineToolFactory } from "./types.js";
+import { defineAgent, defineTool, defineToolFactory } from "./isolate/types.js";
 export { defineAgent, defineTool, defineTool as tool, defineToolFactory };

package/dist/{_internal-types.d.ts → isolate/_internal-types.d.ts}

@@ -39,7 +39,6 @@ export declare const AgentConfigSchema: z.ZodObject<{
         visit_webpage: "visit_webpage";
         fetch_json: "fetch_json";
         run_code: "run_code";
-        memory: "memory";
     }>>>>;
     idleTimeoutMs: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;

package/dist/isolate/_kv-utils.d.ts

@@ -0,0 +1,10 @@
+/** Internal KV helpers shared by kv.ts and unstorage-kv.ts. */
+/** Sort entries by key and apply reverse/limit options. Mutates the array. */
+export declare function sortAndPaginate<T extends {
+    key: string;
+}>(entries: T[], options?: {
+    limit?: number;
+    reverse?: boolean;
+}): T[];
+/** Simple glob matcher — supports `*` as a wildcard for any characters. */
+export declare function matchGlob(key: string, pattern: string): boolean;

package/dist/{_utils.d.ts → isolate/_utils.d.ts}

@@ -3,7 +3,5 @@
 export declare function errorMessage(err: unknown): string;
 /** Extract a detailed error string (message + stack) for diagnostic logging. */
 export declare function errorDetail(err: unknown): string;
-/** Check whether a filesystem operation is a read-only operation. */
-export declare function isReadOnlyFsOp(op: string): boolean;
 /** Return a JSON error string for the LLM: `'{"error":"<message>"}'`. */
 export declare function toolError(message: string): string;

package/dist/{_utils.js → isolate/_utils.js}

@@ -1,4 +1,4 @@
-//#region _utils.ts
+//#region isolate/_utils.ts
 /** Shared utility functions. */
 /** Extract an error message from an unknown thrown value. */
 function errorMessage(err) {
@@ -9,20 +9,9 @@ function errorDetail(err) {
 	if (err instanceof Error) return err.stack ?? err.message;
 	return String(err);
 }
-/** Set of filesystem operations that are safe for read-only access. */
-const READ_ONLY_FS_OPS = new Set([
-	"read",
-	"stat",
-	"readdir",
-	"exists"
-]);
-/** Check whether a filesystem operation is a read-only operation. */
-function isReadOnlyFsOp(op) {
-	return READ_ONLY_FS_OPS.has(op);
-}
 /** Return a JSON error string for the LLM: `'{"error":"<message>"}'`. */
 function toolError(message) {
 	return JSON.stringify({ error: message });
 }
 //#endregion
-export { errorDetail, errorMessage, isReadOnlyFsOp, toolError };
+export { errorDetail, errorMessage, toolError };

package/dist/{hooks.js → isolate/hooks.js}

@@ -1,5 +1,5 @@
 import { createHooks } from "hookable";
-//#region hooks.ts
+//#region isolate/hooks.ts
 /**
 * Hookable-based lifecycle hook system.
 *

package/dist/isolate/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Isolate-safe barrel — re-exports all SDK modules that are guaranteed to
+ * run inside secure-exec V8 isolates (no `node:*` dependencies).
+ *
+ * This directory is compiled under a restricted `tsconfig.json` that excludes
+ * `@types/node`. Any accidental `node:*` import becomes a type error.
+ *
+ * Host-only code (server, executor, S2S, etc.) lives at the package root
+ * and is re-exported via `./host`.
+ */
+export * from "./_internal-types.ts";
+export * from "./_utils.ts";
+export * from "./constants.ts";
+export * from "./hooks.ts";
+export * from "./kv.ts";
+export * from "./protocol.ts";
+export * from "./system-prompt.ts";
+export * from "./types.ts";

package/dist/isolate/index.js

@@ -0,0 +1,6 @@
+import { BuiltinToolSchema, DEFAULT_GREETING, DEFAULT_INSTRUCTIONS, ToolChoiceSchema, defineAgent, defineTool, defineToolFactory } from "./types.js";
+import { a as agentToolsToSchemas, i as ToolSchemaSchema, n as AgentConfigSchema, o as toAgentConfig, r as EMPTY_PARAMS, t as buildSystemPrompt } from "../system-prompt-CVJSQJiA.js";
+import { errorDetail, errorMessage, toolError } from "./_utils.js";
+import { C as MAX_VALUE_SIZE, S as MAX_TOOL_RESULT_CHARS, T as TOOL_EXECUTION_TIMEOUT_MS, _ as FETCH_TIMEOUT_MS, a as ReadyConfigSchema, b as MAX_HTML_BYTES, c as TurnConfigSchema, d as DEFAULT_IDLE_TIMEOUT_MS, f as DEFAULT_MAX_HISTORY, g as DEFAULT_TTS_SAMPLE_RATE, h as DEFAULT_STT_SAMPLE_RATE, i as KvRequestSchema, l as buildReadyConfig, m as DEFAULT_SHUTDOWN_TIMEOUT_MS, n as ClientEventSchema, o as ServerMessageSchema, p as DEFAULT_SESSION_START_TIMEOUT_MS, r as ClientMessageSchema, s as SessionErrorCodeSchema, t as AUDIO_FORMAT, u as AGENT_CSP, v as HOOK_TIMEOUT_MS, w as RUN_CODE_TIMEOUT_MS, x as MAX_PAGE_CHARS, y as MAX_GLOB_PATTERN_LENGTH } from "../protocol-rcOrz7T3.js";
+import { callResolveTurnConfig, createAgentHooks } from "./hooks.js";
+export { AGENT_CSP, AUDIO_FORMAT, AgentConfigSchema, BuiltinToolSchema, ClientEventSchema, ClientMessageSchema, DEFAULT_GREETING, DEFAULT_IDLE_TIMEOUT_MS, DEFAULT_INSTRUCTIONS, DEFAULT_MAX_HISTORY, DEFAULT_SESSION_START_TIMEOUT_MS, DEFAULT_SHUTDOWN_TIMEOUT_MS, DEFAULT_STT_SAMPLE_RATE, DEFAULT_TTS_SAMPLE_RATE, EMPTY_PARAMS, FETCH_TIMEOUT_MS, HOOK_TIMEOUT_MS, KvRequestSchema, MAX_GLOB_PATTERN_LENGTH, MAX_HTML_BYTES, MAX_PAGE_CHARS, MAX_TOOL_RESULT_CHARS, MAX_VALUE_SIZE, RUN_CODE_TIMEOUT_MS, ReadyConfigSchema, ServerMessageSchema, SessionErrorCodeSchema, TOOL_EXECUTION_TIMEOUT_MS, ToolChoiceSchema, ToolSchemaSchema, TurnConfigSchema, agentToolsToSchemas, buildReadyConfig, buildSystemPrompt, callResolveTurnConfig, createAgentHooks, defineAgent, defineTool, defineTool as tool, defineToolFactory, errorDetail, errorMessage, toAgentConfig, toolError };

package/dist/{kv.d.ts → isolate/kv.d.ts}

@@ -1,7 +1,6 @@
 /**
  * Key-value storage interface and shared utilities.
  */
-export { MAX_VALUE_SIZE } from "./constants.ts";
 /**
  * A single key-value entry returned by {@link Kv.list}.
  *
@@ -107,12 +106,3 @@ export type Kv = {
      */
     close?(): void;
 };
-/** Sort entries by key and apply reverse/limit options. Mutates the array. */
-export declare function sortAndPaginate<T extends {
-    key: string;
-}>(entries: T[], options?: {
-    limit?: number;
-    reverse?: boolean;
-}): T[];
-/** Simple glob matcher — supports `*` as a wildcard for any characters. */
-export declare function matchGlob(key: string, pattern: string): boolean;

package/dist/isolate/kv.js

@@ -0,0 +1 @@
+export {};

package/dist/isolate/protocol.js

@@ -0,0 +1,2 @@
+import { a as ReadyConfigSchema, c as TurnConfigSchema, i as KvRequestSchema, l as buildReadyConfig, n as ClientEventSchema, o as ServerMessageSchema, r as ClientMessageSchema, s as SessionErrorCodeSchema, t as AUDIO_FORMAT } from "../protocol-rcOrz7T3.js";
+export { AUDIO_FORMAT, ClientEventSchema, ClientMessageSchema, KvRequestSchema, ReadyConfigSchema, ServerMessageSchema, SessionErrorCodeSchema, TurnConfigSchema, buildReadyConfig };

package/dist/{types.d.ts → isolate/types.d.ts}

@@ -17,7 +17,7 @@ import type { Kv } from "./kv.ts";
  *
  * @public
  */
-export type BuiltinTool = "web_search" | "visit_webpage" | "fetch_json" | "run_code" | "memory";
+export type BuiltinTool = "web_search" | "visit_webpage" | "fetch_json" | "run_code";
 /**
  * How the LLM should select tools during a turn.
  *
@@ -375,7 +375,6 @@ export declare const BuiltinToolSchema: z.ZodEnum<{
     visit_webpage: "visit_webpage";
     fetch_json: "fetch_json";
     run_code: "run_code";
-    memory: "memory";
 }>;
 /** @internal Zod schema for {@link ToolChoice}. Exported for reuse in internal schemas. */
 export declare const ToolChoiceSchema: z.ZodUnion<readonly [z.ZodEnum<{

package/dist/{types.js → isolate/types.js}

@@ -1,5 +1,5 @@
 import { z } from "zod";
-//#region types.ts
+//#region isolate/types.ts
 /**
 * Core type definitions for the AAI agent SDK.
 */
@@ -99,8 +99,7 @@ const BuiltinToolSchema = z.enum([
 	"web_search",
 	"visit_webpage",
 	"fetch_json",
-	"run_code",
-	"memory"
+	"run_code"
 ]);
 /** @internal Zod schema for {@link ToolChoice}. Exported for reuse in internal schemas. */
 const ToolChoiceSchema = z.union([z.enum([

package/dist/{protocol.js → protocol-rcOrz7T3.js}

@@ -1,6 +1,49 @@
-import { p as MAX_TOOL_RESULT_CHARS } from "./constants-CwotjpJR.js";
 import { z } from "zod";
-//#region protocol.ts
+//#region isolate/constants.ts
+/**
+* Centralised numeric constants — timeouts, size limits, sample rates.
+*
+* Every magic number that controls a timeout, buffer size, or threshold
+* lives here so the values are discoverable in one place.
+*/
+/** Default sample rate for speech-to-text audio in Hz (AssemblyAI). */
+const DEFAULT_STT_SAMPLE_RATE = 16e3;
+/** Default sample rate for text-to-speech audio in Hz. */
+const DEFAULT_TTS_SAMPLE_RATE = 24e3;
+/** Default timeout for agent lifecycle hooks (onConnect, onTurn, etc). */
+const HOOK_TIMEOUT_MS = 5e3;
+/** Default timeout for tool execution in the worker. */
+const TOOL_EXECUTION_TIMEOUT_MS = 3e4;
+/** Timeout for session.start() (S2S connection setup). */
+const DEFAULT_SESSION_START_TIMEOUT_MS = 1e4;
+/** S2S session idle timeout before auto-close. */
+const DEFAULT_IDLE_TIMEOUT_MS = 3e5;
+/** Per-fetch timeout for network tools (web_search, visit_webpage, fetch_json). */
+const FETCH_TIMEOUT_MS = 15e3;
+/** Timeout for sandboxed run_code execution. */
+const RUN_CODE_TIMEOUT_MS = 5e3;
+/** Maximum time to wait for sessions to stop during graceful shutdown. */
+const DEFAULT_SHUTDOWN_TIMEOUT_MS = 3e4;
+/** Maximum length for tool result strings sent to clients. */
+const MAX_TOOL_RESULT_CHARS = 4e3;
+/** Maximum chars for webpage text after HTML-to-text conversion. */
+const MAX_PAGE_CHARS = 1e4;
+/** Maximum bytes to fetch from an HTML page before conversion. */
+const MAX_HTML_BYTES = 2e5;
+/** Maximum value size for KV store entries (bytes). */
+const MAX_VALUE_SIZE = 65536;
+/** Maximum glob pattern length to prevent ReDoS. */
+const MAX_GLOB_PATTERN_LENGTH = 1024;
+/** Maximum conversation messages to retain (sliding window). */
+const DEFAULT_MAX_HISTORY = 200;
+/**
+* Content-Security-Policy applied to agent UI pages (both self-hosted and
+* platform). Single source of truth — used by `secureHeaders` middleware
+* and per-response CSP headers.
+*/
+const AGENT_CSP = "default-src 'self'; script-src 'self' 'unsafe-eval' blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; connect-src 'self' wss: ws:; img-src 'self' data:; font-src 'self' https://fonts.gstatic.com; object-src 'none'; base-uri 'self'";
+//#endregion
+//#region isolate/protocol.ts
 /**
 * WebSocket wire-format types shared by server and client.
 *
@@ -137,4 +180,4 @@ function buildReadyConfig(s2sConfig) {
 /** Zod schema for {@link TurnConfig}. */
 const TurnConfigSchema = z.object({ maxSteps: z.number().int().positive().optional() });
 //#endregion
-export { AUDIO_FORMAT, ClientEventSchema, ClientMessageSchema, KvRequestSchema, ReadyConfigSchema, ServerMessageSchema, SessionErrorCodeSchema, TurnConfigSchema, buildReadyConfig };
+export { MAX_VALUE_SIZE as C, MAX_TOOL_RESULT_CHARS as S, TOOL_EXECUTION_TIMEOUT_MS as T, FETCH_TIMEOUT_MS as _, ReadyConfigSchema as a, MAX_HTML_BYTES as b, TurnConfigSchema as c, DEFAULT_IDLE_TIMEOUT_MS as d, DEFAULT_MAX_HISTORY as f, DEFAULT_TTS_SAMPLE_RATE as g, DEFAULT_STT_SAMPLE_RATE as h, KvRequestSchema as i, buildReadyConfig as l, DEFAULT_SHUTDOWN_TIMEOUT_MS as m, ClientEventSchema as n, ServerMessageSchema as o, DEFAULT_SESSION_START_TIMEOUT_MS as p, ClientMessageSchema as r, SessionErrorCodeSchema as s, AUDIO_FORMAT as t, AGENT_CSP as u, HOOK_TIMEOUT_MS as v, RUN_CODE_TIMEOUT_MS as w, MAX_PAGE_CHARS as x, MAX_GLOB_PATTERN_LENGTH as y };

package/dist/system-prompt-CVJSQJiA.js

@@ -0,0 +1,91 @@
+import { BuiltinToolSchema, DEFAULT_INSTRUCTIONS, ToolChoiceSchema } from "./isolate/types.js";
+import { z } from "zod";
+//#region isolate/_internal-types.ts
+/**
+* Zod schema for serializable agent configuration sent over the wire.
+*
+* This is the JSON-safe subset of the agent definition that can be
+* transmitted between the worker and the host process via structured clone.
+*/
+const AgentConfigSchema = z.object({
+	name: z.string().min(1),
+	instructions: z.string(),
+	greeting: z.string(),
+	sttPrompt: z.string().optional(),
+	maxSteps: z.number().int().positive().optional(),
+	toolChoice: ToolChoiceSchema.optional(),
+	builtinTools: z.array(BuiltinToolSchema).readonly().optional(),
+	idleTimeoutMs: z.number().nonnegative().optional()
+});
+/** Extract the serializable {@link AgentConfig} subset from a source object. */
+function toAgentConfig(src) {
+	const config = {
+		name: src.name,
+		instructions: src.instructions,
+		greeting: src.greeting
+	};
+	if (src.sttPrompt !== void 0) config.sttPrompt = src.sttPrompt;
+	if (typeof src.maxSteps !== "function" && src.maxSteps !== void 0) config.maxSteps = src.maxSteps;
+	if (src.toolChoice !== void 0) config.toolChoice = src.toolChoice;
+	if (src.builtinTools) config.builtinTools = [...src.builtinTools];
+	if (src.idleTimeoutMs !== void 0) config.idleTimeoutMs = src.idleTimeoutMs;
+	return config;
+}
+/**
+* Zod schema for serialized tool definitions sent over the wire.
+*
+* `parameters` must be a valid JSON Schema object (with `type`, `properties`,
+* etc.) — the Vercel AI SDK wraps it via `jsonSchema()`.
+*/
+const ToolSchemaSchema = z.object({
+	name: z.string().min(1),
+	description: z.string().min(1),
+	parameters: z.record(z.string(), z.unknown())
+});
+/** Empty Zod object schema used as default when tools have no parameters. */
+const EMPTY_PARAMS = z.object({});
+/**
+* Convert agent tool definitions to JSON Schema format for wire transport.
+*
+* Transforms the Zod-based `parameters` of each tool into a plain JSON Schema
+* object suitable for structured clone / JSON serialization.
+*/
+function agentToolsToSchemas(tools) {
+	return Object.entries(tools).map(([name, def]) => ({
+		name,
+		description: def.description,
+		parameters: z.toJSONSchema(def.parameters ?? EMPTY_PARAMS)
+	}));
+}
+//#endregion
+//#region isolate/system-prompt.ts
+function getFormattedDate() {
+	return (/* @__PURE__ */ new Date()).toLocaleDateString("en-US", {
+		weekday: "long",
+		year: "numeric",
+		month: "long",
+		day: "numeric"
+	});
+}
+const VOICE_RULES = "\n\nCRITICAL OUTPUT RULES — you MUST follow these for EVERY response:\nYour response will be spoken aloud by a TTS system and displayed as plain text.\n- NEVER use markdown: no **, no *, no _, no #, no `, no [](), no ---\n- NEVER use bullet points (-, *, •) or numbered lists (1., 2.)\n- NEVER use code blocks or inline code\n- NEVER mention tools, search, APIs, or technical failures to the user. If a tool returns no results, just answer naturally without explaining why.\n- Write exactly as you would say it out loud to a friend\n- Use short conversational sentences. To list things, say \"First,\" \"Next,\" \"Finally,\"\n- Keep responses concise — 1 to 3 sentences max";
+/**
+* Build the system prompt sent to the LLM from the agent configuration.
+*
+* Assembles the default instructions, today's date, agent-specific instructions,
+* and optional sections for tool usage preamble and voice output rules.
+*
+* @param config - The serializable agent configuration (name, instructions, etc.).
+* @param opts.hasTools - When `true`, appends a preamble instructing the LLM to
+*   speak a brief phrase before each tool call to fill silence.
+* @param opts.voice - When `true`, appends strict voice-specific output rules
+*   (no markdown, no bullet points, conversational tone, concise responses).
+* @returns The assembled system prompt string.
+*/
+function buildSystemPrompt(config, opts) {
+	const { hasTools } = opts;
+	const agentInstructions = config.instructions && config.instructions !== DEFAULT_INSTRUCTIONS ? `\n\nAgent-Specific Instructions:\n${config.instructions}` : "";
+	const toolPreamble = hasTools ? "\n\nWhen you decide to use a tool, ALWAYS say a brief natural phrase BEFORE the tool call (e.g. \"Let me look that up\" or \"One moment while I check\"). This fills silence while the tool executes. Keep preambles to one short sentence." : "";
+	return DEFAULT_INSTRUCTIONS + `\n\nToday's date is ${getFormattedDate()}.` + agentInstructions + toolPreamble + (opts.voice ? VOICE_RULES : "");
+}
+//#endregion
+export { agentToolsToSchemas as a, ToolSchemaSchema as i, AgentConfigSchema as n, toAgentConfig as o, EMPTY_PARAMS as r, buildSystemPrompt as t };

package/dist/{testing-Dmx-dudh.js → testing-Bb2B5Uob.js}

@@ -1,10 +1,10 @@
-import "./types.js";
-import { i as createUnstorageKv, t as createRuntime } from "./direct-executor-DAGCZOAN.js";
-import { resolve } from "node:path";
+import "./isolate/types.js";
+import { i as createUnstorageKv, t as createRuntime } from "./direct-executor-ZUU0Ke4j.js";
+import { vi } from "vitest";
 import { createStorage } from "unstorage";
 import "nanoevents";
-import { vi } from "vitest";
-//#region _mock-ws.ts
+import { resolve } from "node:path";
+//#region host/_mock-ws.ts
 /**
 * A mock WebSocket implementation for testing.
 *
@@ -157,7 +157,7 @@ function installMockWebSocket() {
 	};
 }
 //#endregion
-//#region _test-utils.ts
+//#region host/_test-utils.ts
 /** Yield to the microtask queue so pending promises settle. */
 function flush() {
 	return new Promise((r) => queueMicrotask(r));
@@ -179,7 +179,7 @@ function makeStubSession(overrides) {
 vi.fn(), vi.fn(), vi.fn(), vi.fn();
 resolve(import.meta.dirname, "__fixtures__");
 //#endregion
-//#region testing.ts
+//#region host/testing.ts
 /**
 * Testing utilities for AAI agents.
 *