@alexkroman1/aai 0.12.2 → 1.0.2

package/.turbo/turbo-build.log

@@ -0,0 +1,20 @@
+
+> @alexkroman1/aai@1.0.2 build /home/runner/work/agent/agent/packages/aai
+> tsdown && tsc -p tsconfig.build.json
+
+ℹ tsdown v0.21.7 powered by rolldown v1.0.0-rc.12
+ℹ config file: /home/runner/work/agent/agent/packages/aai/tsdown.config.ts 
+ℹ entry: index.ts, sdk/protocol.ts, host/runtime-barrel.ts, sdk/manifest-barrel.ts
+ℹ target: node22
+ℹ tsconfig: tsconfig.json
+ℹ Build start
+ℹ dist/host/runtime-barrel.js     47.10 kB │ gzip: 14.49 kB
+ℹ dist/sdk/protocol.js             4.83 kB │ gzip:  1.77 kB
+ℹ dist/index.js                    2.49 kB │ gzip:  1.04 kB
+ℹ dist/sdk/manifest-barrel.js      2.19 kB │ gzip:  0.99 kB
+ℹ dist/system-prompt-nik_iavo.js   4.77 kB │ gzip:  2.09 kB
+ℹ dist/constants-VTFoymJ-.js       2.75 kB │ gzip:  1.23 kB
+ℹ dist/types-Cfx_4QDK.js           1.74 kB │ gzip:  0.93 kB
+ℹ dist/ws-upgrade-BeOQ7fXL.js      1.14 kB │ gzip:  0.54 kB
+ℹ 8 files, total: 67.02 kB
+✔ Build complete in 36ms

package/CHANGELOG.md

@@ -0,0 +1,174 @@
+# @alexkroman1/aai
+
+## 1.0.2
+
+### Patch Changes
+
+- 76d25d4: Stop re-exporting test-only conformance suite from runtime barrel; this previously pulled `vitest` into the production bundle and crashed the deployed server with ERR_MODULE_NOT_FOUND.
+- a3d3835: Force all libraries and the server to publish/deploy after the 1.0.1
+  release failure. Restores the `@alexkroman1/` scope on publishable
+  packages so npm accepts the publish, and bumps `aai-server` to trigger
+  the Fly.io deploy job in the release workflow.
+
+## 1.0.1
+
+### Patch Changes
+
+- 5517333: Simplify codebase: fix SSRF bypass in sandbox builtins, deduplicate utilities, strengthen types
+- 5d55c12: Remove unnecessary comments that restate obvious code
+- b4ff42e: Redeploy aai-server and refresh client/CLI/SDK releases
+
+## 1.0.0
+
+### Major Changes
+
+- 837e34f: Remove self-hosted ./server API. Platform sandbox now uses Deno guest runtime with NDJSON transport.
+- 7669733: Migrate aai-ui from Preact to React 19 with simplified API: useSession, useTheme, useToolResult hooks + two-tier defineClient
+
+### Minor Changes
+
+- 8ecb7d1: Add protocol compat fixtures and harden wire format for rolling upgrades
+- befca9a: Simplify agent surface area: directory-based agent format with agent.json, tools/_.ts, hooks/_.ts replacing defineAgent/Zod
+- ab98c61: Remove unused SDK features: `tool` alias, `ctx.fetch`, `onError` hook, `toolChoice: "none"` and `toolChoice: { type: "tool" }` variants. Add `ToolResultMap` typing to solo-rpg template.
+- 14d0653: Remove kv.list() and kv.keys() from KV API — use explicit index keys instead
+- 5fd5cb3: Zod-based agent.ts authoring with agent() and tool() helpers, rename aai-core to aai
+
+### Patch Changes
+
+- 3bd18a9: Fix security vulnerabilities: run_code sandbox escape, SSRF wiring, credential key enforcement, DNS rebinding, path traversal, harness auth bypass, timing-safe hash comparison
+- 9211c65: Add default aai-ui client served by the server when no custom client is deployed. Remove zod externalization from the worker bundler — zod 4 works natively in Deno sandboxes. Update S2S API endpoint and fix load test event handling.
+- b9b5c02: Deduplicate shared utilities, fix N+1 KV list, async static serving, and race timer leak
+- 99db30d: Simplify protocol, security boundaries, and SDK structure
+- 5cc9550: Security hardening: deploy ownership check, SSRF DNS fail-closed + hostname blocking, timing-safe auth tokens, run_code timer cleanup, WebSocket payload limits, message buffer cap, clientFiles size limits, HTML escape completeness, KV error sanitization
+- 4c1cd20: Remove duplicate startSession patterns and dead resumeFrom plumbing
+- f6e7a5c: BREAKING: Align SDK naming with S2S API
+
+  - `instructions` → `systemPrompt` in AgentOptions/AgentDef
+  - `DEFAULT_INSTRUCTIONS` → `DEFAULT_SYSTEM_PROMPT`
+  - `onTurn` → `onUserTranscript` hook
+  - Protocol events renamed: `transcript` → `user_transcript_delta`, `turn` → `user_transcript`, `chat` → `agent_transcript`, `chat_delta` → `agent_transcript_delta`, `tts_done` → `reply_done`, `tool_call_start` → `tool_call`
+
+- 9d2141b: Simplify and refactor: eliminate duplicated code, fix leaky abstractions, improve hot-path efficiency
+- 05f8759: Replace hand-rolled utilities with dependencies: dotenv for .env parsing, mime-types and escape-html in dev server, p-debounce for file watcher
+- 1678546: Simplify codebase: use p-timeout for shutdown, html-to-text for HTML conversion, deduplicate secret key validation
+- 64d83b6: Add Zod validation to NDJSON guest-to-host responses, fix session state memory leak
+- 6d3ec72: Improve S2S load test concurrency: quiet mode, staggered ramp-up, zero-copy audio buffers
+
+## 0.12.3
+
+### Patch Changes
+
+- 4ebd7b6: Standardize file and directory naming to idiomatic kebab-case conventions
+
+  - Add ls-lint for file naming enforcement
+  - Drop underscore prefix from internal files in aai-server (e.g. `_schemas.ts` → `schemas.ts`)
+  - Rename `_components` → `components` and `__fixtures__` → `fixtures` in aai-ui
+  - Rename `__fixtures__` → `fixtures` in aai/host
+  - Flatten aai-server by removing `src/` directory
+
+- 68f4d84: Make more cross platform
+
+## 0.12.2
+
+## 0.12.1
+
+### Patch Changes
+
+- f4762a1: Externalize zod from agent bundles, remove storage cache, improve CI reliability
+
+## 0.12.0
+
+### Minor Changes
+
+- 99e62c3: Remove `memoryTools()` and the `"memory"` builtin tool. Users who need KV-backed memory tools should define them directly in their agent's `tools` record.
+
+## 0.11.1
+
+### Patch Changes
+
+- c25ee7e: Trigger deploy for SDK and server
+
+## 0.11.0
+
+### Patch Changes
+
+- 491ec37: CLI overhaul: remove generate command, unify output style, template descriptions
+
+  - Remove `generate` and `run` commands and AI SDK dependencies
+  - Unify CLI output to use @clack/prompts style consistently
+  - Add template descriptions shown as hints in `aai init` select prompt
+  - Fix deploy slug mismatch between bundle and deploy steps
+  - Clean deploy error messages (no stack traces)
+  - Add `@alexkroman1/aai-cli` to scaffold devDependencies
+  - Remove fly.toml from scaffold
+  - Use cyanBright for all URLs in CLI output
+  - Remove eventsource-parser patch
+  - Add link-workspace-packages to .npmrc
+  - Fix Dockerfile: run esbuild install script, remove patches references
+
+## 0.10.4
+
+### Patch Changes
+
+- 6f6a43e: Harden platform security and refactor to @hono/zod-validator
+
+  - Fix crash in sandbox-network when host.internal hit without handler
+  - Add Zod validation to KV bridge (isolate→host) replacing raw JSON.parse
+  - Refactor deploy, secret, and KV handlers to use @hono/zod-validator middleware
+  - Fix type errors in \_harness-runtime.ts and sandbox.ts
+  - Remove factory.ts, inline into orchestrator
+  - Add 185 new security tests for cross-agent isolation, SSRF, and trust boundaries
+
+## 0.10.3
+
+### Patch Changes
+
+- 8d5f616: Use Hono builtins for WebSocket, security headers, and HTML escaping
+
+  - Replace manual WebSocketServer + upgrade handling with @hono/node-ws
+  - Replace custom escapeHtml() with Hono's html tagged template
+  - Replace manual CSP string with secureHeaders middleware
+  - Fix aai rag to use local dev server in dev mode
+  - Fix vector upsert model loading in local dev mode
+  - Add missing aws4fetch dependency for unstorage S3 driver
+
+## 0.10.2
+
+### Patch Changes
+
+- 9de059e: Add repository.url for npm provenance, fix circular dependency, bump CI actions
+- 1397f37: Fix Fly deploy config path and CI improvements
+
+## 0.10.1
+
+### Patch Changes
+
+- aa23a1c: Add repository.url for npm provenance, fix circular dependency, bump CI actions
+
+## 0.10.0
+
+### Minor Changes
+
+- Replace LanceDB with sqlite-vec for vector storage, add `generate` CLI command, extract templates to giget, local dev mode improvements, auth cleanup, and graceful shutdown fixes
+
+## 0.9.4
+
+### Patch Changes
+
+- Release all packages with version increment
+
+## 0.9.3
+
+## 0.9.2
+
+## 0.9.1
+
+### Patch Changes
+
+- Update
+
+## 0.9.0
+
+### Minor Changes
+
+- Updated toolchain

package/dist/constants-VTFoymJ-.js

@@ -0,0 +1,47 @@
+//#region sdk/constants.ts
+/**
+* Centralised numeric constants — timeouts, size limits, sample rates.
+*
+* Every magic number that controls a timeout, buffer size, or threshold
+* lives here so the values are discoverable in one place.
+*/
+/** Default sample rate for speech-to-text audio in Hz (AssemblyAI). */
+const DEFAULT_STT_SAMPLE_RATE = 16e3;
+/** Default sample rate for text-to-speech audio in Hz. */
+const DEFAULT_TTS_SAMPLE_RATE = 24e3;
+/** Default timeout for tool execution in the worker. */
+const TOOL_EXECUTION_TIMEOUT_MS = 3e4;
+/** Timeout for session.start() (S2S connection setup). */
+const DEFAULT_SESSION_START_TIMEOUT_MS = 1e4;
+/** S2S session idle timeout before auto-close. */
+const DEFAULT_IDLE_TIMEOUT_MS = 3e5;
+/** Per-fetch timeout for network tools (web_search, visit_webpage, fetch_json). */
+const FETCH_TIMEOUT_MS = 15e3;
+/** Timeout for sandboxed run_code execution. */
+const RUN_CODE_TIMEOUT_MS = 5e3;
+/** Maximum time to wait for sessions to stop during graceful shutdown. */
+const DEFAULT_SHUTDOWN_TIMEOUT_MS = 3e4;
+/** Maximum length for tool result strings sent to clients. */
+const MAX_TOOL_RESULT_CHARS = 4e3;
+/** Maximum chars for webpage text after HTML-to-text conversion. */
+const MAX_PAGE_CHARS = 1e4;
+/** Maximum bytes to fetch from an HTML page before conversion. */
+const MAX_HTML_BYTES = 2e5;
+/** Maximum value size for KV store entries (bytes). */
+const MAX_VALUE_SIZE = 65536;
+/** Maximum conversation messages to retain (sliding window). */
+const DEFAULT_MAX_HISTORY = 200;
+/** Maximum WebSocket message payload size (bytes, 1 MiB). */
+const MAX_WS_PAYLOAD_BYTES = 1 * 1024 * 1024;
+/** Maximum messages buffered while session.start() is pending. */
+const MAX_MESSAGE_BUFFER_SIZE = 100;
+/** WebSocket readyState value indicating the connection is open. */
+const WS_OPEN = 1;
+/**
+* Content-Security-Policy applied to agent UI pages (both self-hosted and
+* platform). Single source of truth — used by `secureHeaders` middleware
+* and per-response CSP headers.
+*/
+const AGENT_CSP = "default-src 'self'; script-src 'self' 'unsafe-eval' blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; connect-src 'self' wss: ws:; img-src 'self' data:; font-src 'self' https://fonts.gstatic.com; object-src 'none'; base-uri 'self'";
+//#endregion
+export { WS_OPEN as _, DEFAULT_SHUTDOWN_TIMEOUT_MS as a, FETCH_TIMEOUT_MS as c, MAX_PAGE_CHARS as d, MAX_TOOL_RESULT_CHARS as f, TOOL_EXECUTION_TIMEOUT_MS as g, RUN_CODE_TIMEOUT_MS as h, DEFAULT_SESSION_START_TIMEOUT_MS as i, MAX_HTML_BYTES as l, MAX_WS_PAYLOAD_BYTES as m, DEFAULT_IDLE_TIMEOUT_MS as n, DEFAULT_STT_SAMPLE_RATE as o, MAX_VALUE_SIZE as p, DEFAULT_MAX_HISTORY as r, DEFAULT_TTS_SAMPLE_RATE as s, AGENT_CSP as t, MAX_MESSAGE_BUFFER_SIZE as u };

package/dist/host/_run-code.d.ts

@@ -3,7 +3,7 @@
  * context with no network, filesystem, or process access.
  */
 import { z } from "zod";
-import type { ToolDef } from "../isolate/types.ts";
+import type { ToolDef } from "../sdk/types.ts";
 declare const runCodeParams: z.ZodObject<{
     code: z.ZodString;
 }, z.core.$strip>;
@@ -20,7 +20,9 @@ declare const runCodeParams: z.ZodObject<{
  * The context is discarded after execution, so no state leaks between
  * invocations or across sessions.
  */
-export declare function createRunCode(): ToolDef<typeof runCodeParams>;
+export declare function createRunCode(): ToolDef<typeof runCodeParams> & {
+    guidance: string;
+};
 /**
  * Execute user code in a fresh `node:vm` context.
  *

package/dist/host/_runtime-conformance.d.ts

@@ -19,7 +19,8 @@
  *
  * @example Sandbox (integration test in aai-server)
  * ```ts
- * import { testRuntime } from "@alexkroman1/aai/host";
+ * // Internal module — import the .ts source directly from this package.
+ * import { testRuntime } from "../../aai/host/_runtime-conformance.ts";
  *
  * testRuntime("sandbox", async () => {
  *   // ... start isolate with a bundled agent
@@ -27,9 +28,8 @@
  * });
  * ```
  */
-import type { ExecuteTool } from "../isolate/_internal-types.ts";
-import type { AgentHooks } from "../isolate/hooks.ts";
-import { type AgentDef } from "../isolate/types.ts";
+import type { ExecuteTool } from "../sdk/_internal-types.ts";
+import type { AgentDef } from "../sdk/types.ts";
 /**
  * Minimal runtime surface needed for conformance tests.
  *
@@ -38,7 +38,6 @@ import { type AgentDef } from "../isolate/types.ts";
  */
 export type RuntimeTestContext = {
     executeTool: ExecuteTool;
-    hooks: AgentHooks;
 };
 /** Agent definition used by the conformance suite (direct executor path). */
 export declare const CONFORMANCE_AGENT: AgentDef;

package/dist/host/builtin-tools.d.ts

@@ -6,8 +6,8 @@
  * Network requests go through the host's fetch proxy (with SSRF protection).
  */
 import { z } from "zod";
-import { type ToolSchema } from "../isolate/_internal-types.ts";
-import type { ToolDef } from "../isolate/types.ts";
+import { type ToolSchema } from "../sdk/_internal-types.ts";
+import type { ToolDef } from "../sdk/types.ts";
 export { executeInIsolate } from "./_run-code.ts";
 /** Options for creating built-in tool definitions. */
 export type BuiltinToolOptions = {
@@ -15,10 +15,14 @@ export type BuiltinToolOptions = {
     fetch?: typeof globalThis.fetch;
 };
 type ToolDefRecord = Record<string, ToolDef<z.ZodObject<z.ZodRawShape>>>;
+/** Resolved builtins with defs, schemas, and guidance computed in a single pass. */
+export type ResolvedBuiltins = {
+    defs: ToolDefRecord;
+    schemas: ToolSchema[];
+    guidance: string[];
+};
 /**
- * Create built-in tool definitions for the given tool names.
- * For runtime use.
+ * Resolve all builtin tools in one pass, returning defs, schemas, and guidance.
+ * Avoids redundant calls to `resolveBuiltin` and `z.toJSONSchema`.
  */
-export declare function getBuiltinToolDefs(names: readonly string[], opts?: BuiltinToolOptions): ToolDefRecord;
-/** Returns JSON tool schemas for the specified builtin tools. */
-export declare function getBuiltinToolSchemas(names: readonly string[]): ToolSchema[];
+export declare function resolveAllBuiltins(names: readonly string[], opts?: BuiltinToolOptions): ResolvedBuiltins;

package/dist/host/runtime-barrel.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Runtime barrel — the full Node.js runtime engine for running agents.
+ *
+ * Used by aai-server (sandbox) and aai-cli (dev server).
+ */
+export * from "./builtin-tools.ts";
+export * from "./runtime.ts";
+export * from "./runtime-config.ts";
+export * from "./s2s.ts";
+export * from "./server.ts";
+export * from "./session.ts";
+export * from "./session-ctx.ts";
+export * from "./tool-executor.ts";
+export * from "./unstorage-kv.ts";
+export * from "./ws-handler.ts";