@voicethere/agent 0.1.0 → 0.1.2

package/README.md

@@ -1,6 +1,6 @@
 # @voicethere/agent
 
-VoiceThere **customer agent SDK** — TypeScript types and runtime helpers for sandboxed child bundles running inside [`voicethere/runner`](https://github.com/voicethere/runner).
+VoiceThere **customer agent SDK** — TypeScript types and runtime helpers for sandboxed child bundles running inside the **VoiceThere agent runner** (session worker).
 
 **npm:** `@voicethere/agent`  
 **Repo:** [`voicethere/agent`](https://github.com/voicethere/agent)
@@ -9,7 +9,7 @@ VoiceThere **customer agent SDK** — TypeScript types and runtime helpers for s
 
 | Layer     | Package                                                     | Runs in                              |
 | --------- | ----------------------------------------------------------- | ------------------------------------ |
-| Parent    | [`voicethere/runner`](https://github.com/voicethere/runner) | Trusted Node + WebRTC + speech stack |
+| Parent    | VoiceThere agent runner                                     | Trusted Node + WebRTC + speech stack |
 | **Child** | **`@voicethere/agent`**                                     | Sandboxed customer `agent.js` bundle |
 
 The child receives speech lifecycle events over IPC (same shapes as `@node-webrtc-rust/sdk/voice`) and calls `speak()` to request TTS from the parent.
@@ -23,11 +23,10 @@ npm install
 npm run build
 ```
 
-Run with a local [runner](https://github.com/voicethere/runner) (clone that repo alongside this one):
+**Voice E2E:** deploy to the VoiceThere platform or run against your organization's internal agent runner. With a local runner checkout, point it at your bundle:
 
 ```bash
-cd ../runner
-AGENT_BUNDLE_PATH=../agent/dist/agent.js npm run start
+AGENT_BUNDLE_PATH=/path/to/dist/agent.js npm run start
 ```
 
 Open the runner URL in a browser, connect, and speak.
@@ -45,9 +44,9 @@ npm run verify:local
 | `npm run verify:local`    | **Default** — `npm run build`, then fork `dist/agent.js` in the sandbox and assert a `speak` reply to `user_speech_final` |
 | `npm run verify:local:only` | Re-run smoke after build; optional `AGENT_BUNDLE_PATH=./dist/agent.js` or `--bundle <path>`                               |
 
-This checks bundle load, IPC, and Node permission flags. It does **not** replace a voice roundtrip — use [`voicethere/runner`](https://github.com/voicethere/runner) for mic/WebRTC E2E.
+This checks bundle load, IPC, and Node permission flags. It does **not** replace a voice roundtrip — use the VoiceThere agent runner (platform or internal deployment) for mic/WebRTC E2E.
 
-Harness: [`scripts/sandbox/`](./scripts/sandbox/) (aligned with [`voicethere/runner`](https://github.com/voicethere/runner) child launcher).
+Harness: [`scripts/sandbox/`](./scripts/sandbox/) (aligned with the agent runner child launcher).
 
 ## API
 
@@ -82,7 +81,7 @@ defineAgent({
 | `SPEECH_EVENT_TYPE`                             | Import from `@node-webrtc-rust/sdk/voice` (runtime constants; not bundled into child) |
 | `speak`                                         | Request parent TTS                                                                    |
 | `agentLog`                                      | Forward structured logs to parent                                                     |
-| `ParentToChildMessage` / `ChildToParentMessage` | IPC contract shared with [`voicethere/runner`](https://github.com/voicethere/runner)   |
+| `ParentToChildMessage` / `ChildToParentMessage` | IPC contract shared with the VoiceThere agent runner                                   |
 
 ### Speech events (parent → child)
 
@@ -102,31 +101,29 @@ Copy [`templates/agent.ts`](./templates/agent.ts) as a starting point — exhaus
 
 ## Building your agent bundle
 
-**Recommended:** single ESM bundle (esbuild or similar):
+**Recommended:** bundle with the package CLI (same esbuild settings VoiceThere uses in production):
 
 ```bash
-npm install @voicethere/agent esbuild
-npx esbuild agent.ts --bundle --platform=node --format=esm --outfile=dist/agent.js
+npm install @voicethere/agent
+npx @voicethere/agent build
+# or: npx @voicethere/agent build --entry src/agent.ts --outfile dist/agent.js
 ```
 
-Upload `dist/agent.js` (or point `AGENT_BUNDLE_PATH` at it locally). Inlining dependencies avoids runtime `node_modules` resolution inside the sandbox.
+Defaults: entry `agent.ts`, output `dist/agent.js`. Upload the bundle (or point `AGENT_BUNDLE_PATH` at it locally). Inlining dependencies avoids runtime `node_modules` resolution inside the sandbox.
 
 ## Sandbox and security model
 
-Customer code runs in a **forked child process**, separate from the trusted runner parent (Sherpa, WebRTC, TTS). Security is layered:
+Customer code runs in a **forked child process**, separate from the trusted agent runner parent (WebRTC, speech stack, TTS). Security is layered:
 
 ```text
 ┌──────────────────────────────────────────────────────────────┐
-│  Runner parent (trusted) — full Node, WebRTC, speech stack   │
+│  Agent runner parent (trusted) — WebRTC, speech stack, TTS   │
 │    fork(loader-entry.js, execArgv: [--permission, …])       │
 │         │ IPC (process.send / on('message'))                  │
 │         ▼                                                     │
 │  Customer child — Node Permission Model + stripped env      │
 │    loader-entry.js → import(your agent.js)                   │
 └──────────────────────────────────────────────────────────────┘
-          │ same pod network namespace (K8s)
-          ▼
-   Cilium NetworkPolicy on runner pod (egress rules)
 ```
 
 ### Layer 1 — Process isolation
@@ -134,9 +131,9 @@ Customer code runs in a **forked child process**, separate from the trusted runn
 | Mechanism | What it means for your bundle |
 | --------- | ----------------------------- |
 | **Separate process** | Crash or `process.exit` in your bundle does not take down the parent voice stack |
-| **IPC only** | Talk to the platform via `defineAgent` / `speak` / `agentLog` — not direct WebRTC or STT |
-| **Stripped `process.env`** | Child receives only `NODE_ENV`, internal loader path, and allowlisted keys (`SESSION_ID`, `PROJECT_ID`, `BUILD_ID`) — not parent/kube secrets |
-| **Console redirection** | `console.log` / `warn` / `error` → IPC logs; raw stdout is not forwarded to cluster logs |
+| **IPC only for media** | WebRTC, mic, STT, and TTS go through the parent — use `defineAgent`, `speak`, and speech events |
+| **Stripped `process.env`** | Child receives only `NODE_ENV`, internal loader path, and allowlisted keys (`SESSION_ID`, `PROJECT_ID`, `BUILD_ID`) — not parent secrets |
+| **Console redirection** | `console.log` / `warn` / `error` → IPC logs |
 
 ### Layer 2 — Node `--permission` (runtime-enforced)
 
@@ -147,7 +144,7 @@ The parent starts the child with Node’s [Permission Model](https://nodejs.org/
 | Flag | Effect |
 | ---- | ------ |
 | `--permission` | Enables restriction mode |
-| `--allow-fs-read=<loaderDir>` | Read files under the runner’s child loader directory |
+| `--allow-fs-read=<loaderDir>` | Read files under the child loader directory |
 | `--allow-fs-read=<bundleParentDir>` | Read files under the **directory containing your `agent.js`** (see below) |
 
 **Not granted → blocked at runtime:**
@@ -163,6 +160,8 @@ The parent starts the child with Node’s [Permission Model](https://nodejs.org/
 
 This is **not** an import allowlist — Node gates **capability classes**, not package names. Using `node:fs` inside the allowed read tree can work; using it on `/etc/passwd` does not.
 
+**Network is not gated by `--permission`.** `fetch`, `http`, `https`, and other outbound calls use the same network namespace as the parent. On VoiceThere-hosted sessions, **public internet egress is allowed** (e.g. calling your LLM or tool APIs). **Private cluster / internal platform addresses are not reachable** from the child — use the parent IPC surface for voice, not in-cluster services.
+
 ### Bundle directory vs single file
 
 `--allow-fs-read` is applied to **`dirname(bundlePath)`**, not only the `.js` file:
@@ -185,26 +184,21 @@ This is **not** an import allowlist — Node gates **capability classes**, not p
 
 Prefer **one esbuild bundle** so production behavior matches `npm run verify:local`.
 
-### Layer 3 — Platform policy (documented; not all enforced in-process)
-
-These are **unsupported** in customer bundles even if Node might not block them today:
+### Layer 3 — Platform policy
 
-| Capability | Enforcement |
-| ---------- | ----------- |
-| **Outbound network** (`fetch`, `http`, `net`, `dns`) | Not gated by `--permission`; child shares the **pod** network. Runner pods use **Cilium NetworkPolicy** (public egress; cluster/RFC1918 denied). **Do not** rely on network from child — use parent/platform APIs. |
+| Capability | Behavior |
+| ---------- | -------- |
+| **Outbound network** (`fetch`, `http`, `https`) | **Public internet:** allowed — typical for LLM/tool calls from your agent code. **Internal platform / private network:** blocked on hosted sessions. |
 | **`process.exit`** | Not blocked — kills your agent leg; parent may play crash TTS |
 | **Direct WebRTC / mic / STT / TTS** | Parent only — use `speak()` and speech event handlers |
 
-### Layer 4 — Kubernetes (runner pod)
-
-On cluster deploy, the runner pod also has Helm hardening (non-root, read-only rootfs, dropped caps) and **NetworkPolicy** for egress. That applies to the whole pod (parent + child).
-
 ### What you should use in agent code
 
 **Supported**
 
 - `@voicethere/agent` (`defineAgent`, `speak`, `agentLog`, `onSpeechEvent`, …)
 - Pure TypeScript/JavaScript logic and in-memory state
+- **`fetch` / HTTP(S) to public APIs** (LLMs, tools, your backends on the internet)
 - Allowlisted env from `onSessionStart` (`SESSION_ID`, `PROJECT_ID`, `BUILD_ID`)
 - `SPEECH_EVENT_TYPE` from `@node-webrtc-rust/sdk/voice` at build time (avoid bundling the full SDK runtime into the child when possible)
 
@@ -215,13 +209,14 @@ On cluster deploy, the runner pod also has Helm hardening (non-root, read-only r
 - File writes
 - Native Node addons (`.node`)
 - `worker_threads` (not allowed)
-- Direct media/network stack access
+- Direct WebRTC / mic / STT / TTS (use parent IPC)
+- Reachability to internal platform addresses from hosted sessions
 
 **Pre-publish checklist**
 
 1. `npm run build` — produce `dist/agent.js`
 2. `npm run verify:local` — sandbox + IPC smoke (same flags as production child)
-3. Optional: voice E2E with [`voicethere/runner`](https://github.com/voicethere/runner)
+3. Optional: voice E2E with the VoiceThere agent runner (platform or internal deployment)
 
 ## Build outputs
 
@@ -233,7 +228,9 @@ On cluster deploy, the runner pod also has Helm hardening (non-root, read-only r
 ## Scripts
 
 ```bash
-npm run build           # library + example bundle
+npm run build           # compile SDK + example bundle (repo dev)
+npm run build:lib       # compile SDK only (tsc → dist/)
+npx @voicethere/agent build   # customer project: bundle agent.ts → dist/agent.js
 npm run verify:local    # sandbox smoke (build + fork bundle)
 npm run test:ci         # typecheck + vitest
 ```
@@ -246,6 +243,6 @@ See [`scripts/RELEASE.md`](./scripts/RELEASE.md) — tag `release/X.Y.Z` trigger
 
 | Repo                                                                          | Purpose                                                       |
 | ----------------------------------------------------------------------------- | ------------------------------------------------------------- |
-| [`voicethere/runner`](https://github.com/voicethere/runner)                   | Session worker that hosts your `agent.js` bundle              |
+| VoiceThere agent runner (internal session worker)                             | Hosts your `agent.js` bundle in production and local E2E      |
 | [`voicethere/cli`](https://github.com/voicethere/cli)                         | CLI for the VoiceThere platform (projects, deploys, sessions) |
 | [`akirilyuk/node-webrtc-rust`](https://github.com/akirilyuk/node-webrtc-rust) | WebRTC + voice SDK (`SpeechEvent` types)                      |

package/dist/build-bundle.d.ts

@@ -0,0 +1,14 @@
+import * as esbuild from "esbuild";
+export interface BuildAgentBundleOptions {
+    /** Agent source entry (TypeScript or JavaScript). */
+    entry: string;
+    /** Output bundle path (typically `dist/agent.js`). */
+    outfile: string;
+    /** Working directory for relative paths. Defaults to `process.cwd()`. */
+    cwd?: string;
+}
+/**
+ * Bundle customer agent source into a single ESM file for the sandboxed child.
+ */
+export declare function buildAgentBundle(options: BuildAgentBundleOptions): Promise<esbuild.BuildResult>;
+//# sourceMappingURL=build-bundle.d.ts.map

package/dist/build-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-bundle.d.ts","sourceRoot":"","sources":["../src/build-bundle.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AAEnC,MAAM,WAAW,uBAAuB;IACtC,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAoB9B"}

package/dist/build-bundle.js

@@ -0,0 +1,25 @@
+import { existsSync, mkdirSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import * as esbuild from "esbuild";
+/**
+ * Bundle customer agent source into a single ESM file for the sandboxed child.
+ */
+export async function buildAgentBundle(options) {
+    const cwd = options.cwd ?? process.cwd();
+    const entry = resolve(cwd, options.entry);
+    const outfile = resolve(cwd, options.outfile);
+    if (!existsSync(entry)) {
+        throw new Error(`Entry not found: ${entry}`);
+    }
+    mkdirSync(dirname(outfile), { recursive: true });
+    return esbuild.build({
+        entryPoints: [entry],
+        bundle: true,
+        platform: "node",
+        format: "esm",
+        outfile,
+        target: "node22",
+        logLevel: "warning",
+    });
+}
+//# sourceMappingURL=build-bundle.js.map

package/dist/build-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-bundle.js","sourceRoot":"","sources":["../src/build-bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AAWnC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgC;IAEhC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAE9C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEjD,OAAO,OAAO,CAAC,KAAK,CAAC;QACnB,WAAW,EAAE,CAAC,KAAK,CAAC;QACpB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,KAAK;QACb,OAAO;QACP,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,SAAS;KACpB,CAAC,CAAC;AACL,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+/**
+ * Customer-facing CLI — bundle agent source for the VoiceThere sandbox.
+ *
+ *   npx @voicethere/agent build
+ *   npx @voicethere/agent build --entry agent.ts --outfile dist/agent.js
+ */
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;GAKG"}

package/dist/cli.js

@@ -0,0 +1,91 @@
+#!/usr/bin/env node
+/**
+ * Customer-facing CLI — bundle agent source for the VoiceThere sandbox.
+ *
+ *   npx @voicethere/agent build
+ *   npx @voicethere/agent build --entry agent.ts --outfile dist/agent.js
+ */
+import { buildAgentBundle } from "./build-bundle.js";
+const DEFAULT_ENTRY = "agent.ts";
+const DEFAULT_OUTFILE = "dist/agent.js";
+function printHelp() {
+    process.stdout.write(`@voicethere/agent — bundle your voice agent for VoiceThere
+
+Usage:
+  npx @voicethere/agent build [options]
+  npx @voicethere/agent [options]          (build is the default command)
+
+Options:
+  --entry, -e <path>     Agent entry file (default: ${DEFAULT_ENTRY})
+  --outfile, -o <path>   Output bundle (default: ${DEFAULT_OUTFILE})
+  --help, -h             Show this help
+
+Example:
+  npm install @voicethere/agent
+  npx @voicethere/agent build --entry src/agent.ts --outfile dist/agent.js
+`);
+}
+function parseBuildArgs(argv) {
+    let entry = DEFAULT_ENTRY;
+    let outfile = DEFAULT_OUTFILE;
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--help" || arg === "-h") {
+            printHelp();
+            process.exit(0);
+        }
+        if (arg === "--entry" || arg === "-e") {
+            const value = argv[i + 1];
+            if (!value) {
+                throw new Error(`${arg} requires a path`);
+            }
+            entry = value;
+            i += 1;
+            continue;
+        }
+        if (arg === "--outfile" || arg === "-o") {
+            const value = argv[i + 1];
+            if (!value) {
+                throw new Error(`${arg} requires a path`);
+            }
+            outfile = value;
+            i += 1;
+            continue;
+        }
+        throw new Error(`Unknown option: ${arg}`);
+    }
+    return { entry, outfile };
+}
+async function runBuild(argv) {
+    const { entry, outfile } = parseBuildArgs(argv);
+    await buildAgentBundle({ entry, outfile });
+    process.stdout.write(`Built ${outfile} from ${entry}\n`);
+}
+async function main() {
+    const args = process.argv.slice(2);
+    if (args.length === 0) {
+        await runBuild([]);
+        return;
+    }
+    if (args[0] === "help" || args[0] === "--help" || args[0] === "-h") {
+        printHelp();
+        return;
+    }
+    if (args[0] === "build") {
+        await runBuild(args.slice(1));
+        return;
+    }
+    if (args[0]?.startsWith("-")) {
+        await runBuild(args);
+        return;
+    }
+    process.stderr.write(`Unknown command: ${args[0]}\n\n`);
+    printHelp();
+    process.exit(1);
+}
+main().catch((error) => {
+    const message = error instanceof Error ? error.message : String(error);
+    process.stderr.write(`agent build failed: ${message}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,aAAa,GAAG,UAAU,CAAC;AACjC,MAAM,eAAe,GAAG,eAAe,CAAC;AAExC,SAAS,SAAS;IAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;;;;;;;sDAO+B,aAAa;mDAChB,eAAe;;;;;;CAMjE,CAAC,CAAC;AACH,CAAC;AAOD,SAAS,cAAc,CAAC,IAAc;IACpC,IAAI,KAAK,GAAG,aAAa,CAAC;IAC1B,IAAI,OAAO,GAAG,eAAe,CAAC;IAE9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACrC,SAAS,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,kBAAkB,CAAC,CAAC;YAC5C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC;YACd,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,kBAAkB,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO,GAAG,KAAK,CAAC;YAChB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAc;IACpC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,gBAAgB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,OAAO,SAAS,KAAK,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnB,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnE,SAAS,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACxD,SAAS,EAAE,CAAC;IACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,OAAO,IAAI,CAAC,CAAC;IACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/protocol.d.ts

@@ -4,7 +4,7 @@
  * Transport: Node.js `process.send` / `process.on('message')` on a forked child.
  * Speech payloads use {@link SpeechEvent} from `@node-webrtc-rust/sdk/voice` unchanged.
  *
- * IPC shapes are shared with [`voicethere/runner`](https://github.com/voicethere/runner).
+ * IPC shapes are shared with the VoiceThere agent runner (session worker parent).
  *
  * @packageDocumentation
  */

package/dist/protocol.js

@@ -4,7 +4,7 @@
  * Transport: Node.js `process.send` / `process.on('message')` on a forked child.
  * Speech payloads use {@link SpeechEvent} from `@node-webrtc-rust/sdk/voice` unchanged.
  *
- * IPC shapes are shared with [`voicethere/runner`](https://github.com/voicethere/runner).
+ * IPC shapes are shared with the VoiceThere agent runner (session worker parent).
  *
  * @packageDocumentation
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voicethere/agent",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "VoiceThere customer agent SDK — IPC types and runtime helpers for sandboxed child bundles",
   "type": "module",
   "exports": {
@@ -9,13 +9,16 @@
       "import": "./dist/index.js"
     }
   },
+  "bin": "./dist/cli.js",
   "files": [
     "dist",
     "templates",
     "README.md"
   ],
   "scripts": {
-    "build": "tsc -p tsconfig.json && esbuild examples/agent.ts --bundle --platform=node --format=esm --outfile=dist/agent.js",
+    "build:lib": "tsc -p tsconfig.json",
+    "build:example": "node dist/cli.js build --entry examples/agent.ts --outfile dist/agent.js",
+    "build": "npm run build:lib && npm run build:example",
     "typecheck": "tsc --noEmit -p tsconfig.json && tsc --noEmit -p tsconfig.test.json",
     "test": "vitest run",
     "test:ci": "npm run typecheck && npm run build && npm run test",
@@ -45,14 +48,14 @@
   },
   "license": "UNLICENSED",
   "dependencies": {
-    "@node-webrtc-rust/sdk": "0.5.2"
+    "@node-webrtc-rust/sdk": "0.5.2",
+    "esbuild": "^0.25.12"
   },
   "peerDependencies": {
     "@node-webrtc-rust/sdk": ">=0.5.2"
   },
   "devDependencies": {
     "@types/node": "^22.10.0",
-    "esbuild": "^0.25.12",
     "tsx": "^4.19.2",
     "typescript": "^5.7.0",
     "vitest": "^2.1.8"

package/templates/README.md

@@ -17,10 +17,11 @@ Full starter bundle covering every speech event from `@node-webrtc-rust/sdk/voic
 **Build:**
 
 ```bash
-npm install @voicethere/agent esbuild
-npx esbuild agent.ts --bundle --platform=node --format=esm --outfile=dist/agent.js
+npm install @voicethere/agent
+npx @voicethere/agent build
+# optional: --entry agent.ts --outfile dist/agent.js
 ```
 
 **Verify sandbox (no WebRTC):** from the agent repo, `npm run verify:local` after building your bundle.
 
-**Voice E2E:** host with [`voicethere/runner`](https://github.com/voicethere/runner) — set `AGENT_BUNDLE_PATH` to your built `dist/agent.js`.
+**Voice E2E:** host with the VoiceThere agent runner (platform or internal deployment) — set `AGENT_BUNDLE_PATH` to your built `dist/agent.js`.

package/templates/agent.ts

@@ -6,9 +6,9 @@
  *
  * Build:
  *   npm install @voicethere/agent
- *   npx esbuild agent.ts --bundle --platform=node --format=esm --outfile=dist/agent.js
+ *   npx @voicethere/agent build
  *
- * Local runner (clone https://github.com/voicethere/runner):
+ * Voice E2E (VoiceThere agent runner — platform or internal deployment):
  *   AGENT_BUNDLE_PATH=./dist/agent.js npm run start
  */