nexus-ai-pro 2.2.0 → 2.4.0

package/dist-cjs/utils/sha256.js

@@ -0,0 +1,125 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Sha256 = void 0;
+exports.sha256Hex = sha256Hex;
+const K = new Uint32Array([
+    0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5, 0xd807aa98,
+    0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174, 0xe49b69c1, 0xefbe4786,
+    0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da, 0x983e5152, 0xa831c66d, 0xb00327c8,
+    0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967, 0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13,
+    0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85, 0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819,
+    0xd6990624, 0xf40e3585, 0x106aa070, 0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a,
+    0x5b9cca4f, 0x682e6ff3, 0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7,
+    0xc67178f2,
+]);
+const encoder = new TextEncoder();
+class Sha256 {
+    state = new Uint32Array([
+        0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19,
+    ]);
+    block = new Uint8Array(64);
+    words = new Uint32Array(64);
+    filled = 0;
+    total = 0;
+    update(data) {
+        const bytes = typeof data === 'string' ? encoder.encode(data) : data;
+        this.total += bytes.length;
+        let offset = 0;
+        if (this.filled > 0) {
+            const take = Math.min(64 - this.filled, bytes.length);
+            this.block.set(bytes.subarray(0, take), this.filled);
+            this.filled += take;
+            offset = take;
+            if (this.filled < 64)
+                return this;
+            this.compress(this.block, 0);
+            this.filled = 0;
+        }
+        for (; offset + 64 <= bytes.length; offset += 64)
+            this.compress(bytes, offset);
+        if (offset < bytes.length) {
+            this.block.set(bytes.subarray(offset), 0);
+            this.filled = bytes.length - offset;
+        }
+        return this;
+    }
+    digest() {
+        const bits = this.total * 8;
+        const padding = new Uint8Array(this.filled < 56 ? 64 - this.filled : 128 - this.filled);
+        padding[0] = 0x80;
+        const view = new DataView(padding.buffer);
+        view.setUint32(padding.length - 8, Math.floor(bits / 0x100000000));
+        view.setUint32(padding.length - 4, bits >>> 0);
+        const total = this.total;
+        this.update(padding);
+        this.total = total;
+        let hex = '';
+        for (const word of this.state)
+            hex += word.toString(16).padStart(8, '0');
+        return hex;
+    }
+    compress(bytes, offset) {
+        const w = this.words;
+        for (let index = 0; index < 16; index += 1) {
+            const at = offset + index * 4;
+            w[index] =
+                (bytes[at] << 24) |
+                    (bytes[at + 1] << 16) |
+                    (bytes[at + 2] << 8) |
+                    bytes[at + 3];
+        }
+        for (let index = 16; index < 64; index += 1) {
+            const a = w[index - 15];
+            const b = w[index - 2];
+            const s0 = ((a >>> 7) | (a << 25)) ^ ((a >>> 18) | (a << 14)) ^ (a >>> 3);
+            const s1 = ((b >>> 17) | (b << 15)) ^ ((b >>> 19) | (b << 13)) ^ (b >>> 10);
+            w[index] = (w[index - 16] + s0 + w[index - 7] + s1) | 0;
+        }
+        const h = this.state;
+        let a = h[0];
+        let b = h[1];
+        let c = h[2];
+        let d = h[3];
+        let e = h[4];
+        let f = h[5];
+        let g = h[6];
+        let k = h[7];
+        for (let index = 0; index < 64; index += 1) {
+            const s1 = ((e >>> 6) | (e << 26)) ^ ((e >>> 11) | (e << 21)) ^ ((e >>> 25) | (e << 7));
+            const choose = (e & f) ^ (~e & g);
+            const t1 = (k + s1 + choose + K[index] + w[index]) | 0;
+            const s0 = ((a >>> 2) | (a << 30)) ^ ((a >>> 13) | (a << 19)) ^ ((a >>> 22) | (a << 10));
+            const majority = (a & b) ^ (a & c) ^ (b & c);
+            const t2 = (s0 + majority) | 0;
+            k = g;
+            g = f;
+            f = e;
+            e = (d + t1) | 0;
+            d = c;
+            c = b;
+            b = a;
+            a = (t1 + t2) | 0;
+        }
+        h[0] = h[0] + a;
+        h[1] = h[1] + b;
+        h[2] = h[2] + c;
+        h[3] = h[3] + d;
+        h[4] = h[4] + e;
+        h[5] = h[5] + f;
+        h[6] = h[6] + g;
+        h[7] = h[7] + k;
+    }
+}
+exports.Sha256 = Sha256;
+const nativeHash = (() => {
+    try {
+        const host = globalThis.process;
+        return host?.getBuiltinModule?.('crypto')?.createHash;
+    }
+    catch {
+        return undefined;
+    }
+})();
+function sha256Hex(data) {
+    return nativeHash ? nativeHash('sha256').update(data).digest('hex') : new Sha256().update(data).digest();
+}

package/dist-cjs/utils/tenant.d.ts

@@ -1,3 +1,4 @@
+import type { Principal } from '../types/principal.js';
 /**
  * The tenant id rule every scope shares. An id is letters, digits, `_`, and `-`, so it can never hold
  * the `/` a scoped name or key is built with: no tenant's prefix is a prefix of another's.
@@ -12,3 +13,13 @@ export declare class TenantIdError extends RangeError {
 export declare function assertTenantId(tenantId: string): string;
 /** @internal The prefix a tenant's names and keys carry in a shared store. */
 export declare function tenantPrefix(tenantId: string): string;
+/**
+ * Run options with the principal's tenant applied: the principal's `tenantId` becomes the run's when
+ * it has none, a run whose two tenants differ is refused, and the principal's `userId` is recorded
+ * in the run's metadata.
+ */
+export declare function withPrincipal<O extends {
+    tenantId?: string;
+    principal?: Principal;
+    metadata?: Record<string, unknown>;
+}>(runOptions: O): O;

package/dist-cjs/utils/tenant.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.TenantIdError = void 0;
 exports.assertTenantId = assertTenantId;
 exports.tenantPrefix = tenantPrefix;
+exports.withPrincipal = withPrincipal;
 class TenantIdError extends RangeError {
     code = 'TENANT_ID_INVALID';
     constructor(tenantId) {
@@ -20,3 +21,17 @@ function assertTenantId(tenantId) {
 function tenantPrefix(tenantId) {
     return `tenant/${assertTenantId(tenantId)}/`;
 }
+function withPrincipal(runOptions) {
+    const principal = runOptions.principal;
+    if (!principal)
+        return runOptions;
+    const tenantId = principal.tenantId;
+    if (tenantId !== undefined && runOptions.tenantId !== undefined && tenantId !== runOptions.tenantId) {
+        throw new TypeError("The run's tenantId and its principal's tenant differ");
+    }
+    return {
+        ...runOptions,
+        ...(tenantId !== undefined && runOptions.tenantId === undefined ? { tenantId } : {}),
+        ...(principal.userId !== undefined ? { metadata: { ...runOptions.metadata, userId: principal.userId } } : {}),
+    };
+}

package/dist-cjs/version.d.ts

@@ -2,4 +2,4 @@
  * This package's version, recorded where provenance matters, such as on every experiment. A test
  * keeps it equal to `package.json`.
  */
-export declare const NEXUS_VERSION = "2.2.0";
+export declare const NEXUS_VERSION = "2.4.0";

package/dist-cjs/version.js

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.NEXUS_VERSION = void 0;
-exports.NEXUS_VERSION = '2.2.0';
+exports.NEXUS_VERSION = '2.4.0';

package/llms.txt

@@ -2,10 +2,10 @@
 
 > The typed AI framework for TypeScript. One API for provider routing and failover, agent graphs and workflows that run branches in parallel and survive a restart, retrieval over any vector store, MCP, durable background operations, guardrails, cost control, images, voice, and evals — with a studio a team can share.
 
-Import only what you use. The root import is the client and nothing else, and every other capability has its own entry point with a size budget CI enforces; [the packaging guide](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/packaging.md) publishes what each one costs. The package has no required dependencies: a graph-only application loads 78 KB, and installs nothing but this package.
+Import only what you use. The root import is the client and nothing else, and every other capability has its own entry point with a size budget CI enforces; [the packaging guide](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/packaging.md) publishes what each one costs. The package has no required dependencies: a graph-only application loads 81 KB, and installs nothing but this package. The client, the provider adapters, graphs, agents, and the agent protocols run on Node.js, Deno, Bun, edge runtimes, and browsers; [the runtimes guide](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/runtimes.md) lists the entry points that need Node.js, and why.
 
 - Install with `npm install nexus-ai-pro`. It needs Node.js 22 or newer, and ships ESM and CommonJS builds with shared types. License: MIT.
-- It has 143 entry points. `nexus-ai-pro` itself is the client, and every other capability has its own subpath, such as `nexus-ai-pro/graph`.
+- It has 157 entry points. `nexus-ai-pro` itself is the client, and every other capability has its own subpath, such as `nexus-ai-pro/graph`.
 - Nothing is a required dependency. Install only the optional peers you use: `@anthropic-ai/sdk`, `@types/node`, `ajv`, `ajv-formats`, `ollama`, `openai`, `zod`.
 - Each guide explains every export of its entry points, then lists them in a reference generated from the doc comments.
 
@@ -16,9 +16,11 @@ Import only what you use. The root import is the client and nothing else, and ev
 - [Providers and routing](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/providers.md): The twelve completion providers, routing and failover, the model registry
 - [Guardrails](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/security.md): Injection, PII, secrets, schema validation, output redaction
 - [Graphs](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/graphs.md): Parallel branches, interrupts, checkpoints, time travel, subgraphs, caching, diagrams
-- [Agents and tools](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/agents.md): Graph-based agents with approvals and middleware, and the simple tool loop
+- [Agents and tools](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/agents.md): Graph-based agents with approvals, capabilities and permission policies, a sandbox contract, the middleware catalog, and the simple tool loop
+- [The deep-agent preset](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/deep-agents.md): Long, multi-step agents: a plan, a sandboxed workspace, helpers, skills, and a context that stays small
 - [Long-term memory](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/memory.md): Namespaced memory with semantic search, in memory or Redis
 - [MCP](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/mcp.md): Borrowing tools from MCP servers, a registry of many, and serving your own
+- [Agent protocols](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/protocols.md): Serving an agent to user interfaces over AG-UI, to other agents over A2A, and to code editors over ACP, and calling remote agents as tools
 - [Traces](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/tracing.md): Run trees, queries, feedback, comparison, and alerts
 - [Evaluation](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/evaluation.md): Datasets, evaluators, experiments, comparisons with a verdict, review queues, LLM judges
 - [Context hub](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/context-hub.md): Prompts, instructions, tools, and skills versioned together, promoted through gates, and moved between projects
@@ -39,6 +41,7 @@ Import only what you use. The root import is the client and nothing else, and ev
 - [Realtime voice](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/realtime.md): Browser and server realtime sessions with barge-in, tools, and exports
 - [Telephony](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/telephony.md): Calls, webhooks, phone numbers, and phone agents on realtime sessions
 - [Testing](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/testing.md): Recording and replaying provider traffic, and conformance suites
+- [Adapter kit](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/adapter-kit.md): Building a provider, store, or retriever outside this repository, and verifying it against the same contracts
 - [Studio](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/studio.md): A shared UI for traces, threads, approvals, experiments, prompts, deployments, costs, and health, as a separate package
 - [Agent server](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/server.md): Self-hosted HTTP server for assistants: threads, durable runs, resumable streams, cron, a worker queue, and metrics
 - [Deployments](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/deployments.md): Revisions and canaries with automatic rollback, autoscaling on Kubernetes and Helm, and per-tenant limits
@@ -46,6 +49,7 @@ Import only what you use. The root import is the client and nothing else, and ev
 - [Workflows](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/workflows.md): Ready-made chains and domain workflows
 - [Command line](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/cli.md): The `nexus` command
 - [Packaging and install weight](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/packaging.md): Every entry point and what it costs
+- [Runtimes](https://raw.githubusercontent.com/mkhitar-abrahamyan/nexus-ai/main/docs/runtimes.md): The portable kernel, and running the client, providers, graphs, and agents on Deno, Bun, edge runtimes, and browsers
 
 ## Project
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexus-ai-pro",
-  "version": "2.2.0",
+  "version": "2.4.0",
   "description": "Typed AI framework for TypeScript: provider routing and failover, durable agent graphs and workflows, retrieval over any vector store, MCP, evals, guardrails, and cost control",
   "type": "module",
   "main": "dist-cjs/index.js",
@@ -40,6 +40,16 @@
         "default": "./dist-cjs/core/streaming.js"
       }
     },
+    "./runtime": {
+      "import": {
+        "types": "./dist/runtime/index.d.ts",
+        "default": "./dist/runtime/index.js"
+      },
+      "require": {
+        "types": "./dist-cjs/runtime/index.d.ts",
+        "default": "./dist-cjs/runtime/index.js"
+      }
+    },
     "./config": {
       "import": {
         "types": "./dist/core/config-builder.d.ts",
@@ -540,6 +550,46 @@
         "default": "./dist-cjs/agent/index.js"
       }
     },
+    "./agent/permissions": {
+      "import": {
+        "types": "./dist/agent/permissions.d.ts",
+        "default": "./dist/agent/permissions.js"
+      },
+      "require": {
+        "types": "./dist-cjs/agent/permissions.d.ts",
+        "default": "./dist-cjs/agent/permissions.js"
+      }
+    },
+    "./agent/sandbox": {
+      "import": {
+        "types": "./dist/agent/sandbox.d.ts",
+        "default": "./dist/agent/sandbox.js"
+      },
+      "require": {
+        "types": "./dist-cjs/agent/sandbox.d.ts",
+        "default": "./dist-cjs/agent/sandbox.js"
+      }
+    },
+    "./agent/middleware": {
+      "import": {
+        "types": "./dist/agent/middleware/index.d.ts",
+        "default": "./dist/agent/middleware/index.js"
+      },
+      "require": {
+        "types": "./dist-cjs/agent/middleware/index.d.ts",
+        "default": "./dist-cjs/agent/middleware/index.js"
+      }
+    },
+    "./deep-agent": {
+      "import": {
+        "types": "./dist/deep-agent/index.d.ts",
+        "default": "./dist/deep-agent/index.js"
+      },
+      "require": {
+        "types": "./dist-cjs/deep-agent/index.d.ts",
+        "default": "./dist-cjs/deep-agent/index.js"
+      }
+    },
     "./store": {
       "import": {
         "types": "./dist/store/index.d.ts",
@@ -580,6 +630,36 @@
         "default": "./dist-cjs/mcp/registry.js"
       }
     },
+    "./protocols/ag-ui": {
+      "import": {
+        "types": "./dist/protocols/ag-ui.d.ts",
+        "default": "./dist/protocols/ag-ui.js"
+      },
+      "require": {
+        "types": "./dist-cjs/protocols/ag-ui.d.ts",
+        "default": "./dist-cjs/protocols/ag-ui.js"
+      }
+    },
+    "./protocols/a2a": {
+      "import": {
+        "types": "./dist/protocols/a2a.d.ts",
+        "default": "./dist/protocols/a2a.js"
+      },
+      "require": {
+        "types": "./dist-cjs/protocols/a2a.d.ts",
+        "default": "./dist-cjs/protocols/a2a.js"
+      }
+    },
+    "./protocols/acp": {
+      "import": {
+        "types": "./dist/protocols/acp.d.ts",
+        "default": "./dist/protocols/acp.js"
+      },
+      "require": {
+        "types": "./dist-cjs/protocols/acp.d.ts",
+        "default": "./dist-cjs/protocols/acp.js"
+      }
+    },
     "./tracing": {
       "import": {
         "types": "./dist/tracing/index.d.ts",
@@ -670,6 +750,16 @@
         "default": "./dist-cjs/postgres/vectors.js"
       }
     },
+    "./postgres/fulltext": {
+      "import": {
+        "types": "./dist/postgres/fulltext.d.ts",
+        "default": "./dist/postgres/fulltext.js"
+      },
+      "require": {
+        "types": "./dist-cjs/postgres/fulltext.d.ts",
+        "default": "./dist-cjs/postgres/fulltext.js"
+      }
+    },
     "./postgres/traces": {
       "import": {
         "types": "./dist/postgres/traces.d.ts",
@@ -780,6 +870,16 @@
         "default": "./dist-cjs/testing/index.js"
       }
     },
+    "./adapter-kit": {
+      "import": {
+        "types": "./dist/adapter-kit/index.d.ts",
+        "default": "./dist/adapter-kit/index.js"
+      },
+      "require": {
+        "types": "./dist-cjs/adapter-kit/index.d.ts",
+        "default": "./dist-cjs/adapter-kit/index.js"
+      }
+    },
     "./next": {
       "import": {
         "types": "./dist/next/route-handler.d.ts",
@@ -840,6 +940,16 @@
         "default": "./dist-cjs/server/tenancy.js"
       }
     },
+    "./server/auth": {
+      "import": {
+        "types": "./dist/server/auth.d.ts",
+        "default": "./dist/server/auth.js"
+      },
+      "require": {
+        "types": "./dist-cjs/server/auth.d.ts",
+        "default": "./dist-cjs/server/auth.js"
+      }
+    },
     "./tenancy": {
       "import": {
         "types": "./dist/tenancy/index.d.ts",
@@ -1350,6 +1460,16 @@
         "default": "./dist-cjs/rag/chroma.js"
       }
     },
+    "./rag/elasticsearch": {
+      "import": {
+        "types": "./dist/rag/elasticsearch.d.ts",
+        "default": "./dist/rag/elasticsearch.js"
+      },
+      "require": {
+        "types": "./dist-cjs/rag/elasticsearch.d.ts",
+        "default": "./dist-cjs/rag/elasticsearch.js"
+      }
+    },
     "./rag/retrievers": {
       "import": {
         "types": "./dist/rag/retrievers.d.ts",
@@ -1360,6 +1480,26 @@
         "default": "./dist-cjs/rag/retrievers.js"
       }
     },
+    "./rag/rerankers": {
+      "import": {
+        "types": "./dist/rag/rerankers.d.ts",
+        "default": "./dist/rag/rerankers.js"
+      },
+      "require": {
+        "types": "./dist-cjs/rag/rerankers.d.ts",
+        "default": "./dist-cjs/rag/rerankers.js"
+      }
+    },
+    "./rag/pipeline": {
+      "import": {
+        "types": "./dist/rag/pipeline.d.ts",
+        "default": "./dist/rag/pipeline.js"
+      },
+      "require": {
+        "types": "./dist-cjs/rag/pipeline.d.ts",
+        "default": "./dist-cjs/rag/pipeline.js"
+      }
+    },
     "./evals": {
       "import": {
         "types": "./dist/evals/index.d.ts",
@@ -1465,7 +1605,7 @@
     "test:studio-install": "node studio/scripts/install-smoke.mjs",
     "docs:guides": "node scripts/check-guide-coverage.mjs && node scripts/check-doc-imports.mjs && node scripts/root-migration.mjs --check",
     "docs:update": "node scripts/check-guide-coverage.mjs --update && node scripts/generate-llms-txt.mjs",
-    "size:update": "node scripts/check-subpath-sizes.mjs --update",
+    "size:update": "node scripts/check-subpath-sizes.mjs --update && node scripts/check-portability.mjs --update",
     "registry:generate": "node scripts/generate-model-registry.mjs",
     "registry:check": "node scripts/generate-model-registry.mjs --check",
     "llms:generate": "node scripts/generate-llms-txt.mjs",
@@ -1477,7 +1617,7 @@
     "typecheck:tests": "tsc -p tsconfig.tests.json --noEmit",
     "typecheck:examples": "tsc -p tsconfig.examples.json --noEmit && tsc -p tsconfig.deploy.json",
     "typecheck:examples:browser": "tsc -p tsconfig.examples.browser.json --noEmit",
-    "test": "npm run build && npm run test:unit && npm run test:conformance:mock && npm run test:conformance:images && npm run size:check && npm run docs:check && npm run docs:guides && npm run test:studio && npm run test:smoke && npm run test:api && npm run test:types",
+    "test": "npm run build && npm run test:unit && npm run test:conformance:mock && npm run test:conformance:images && npm run size:check && npm run test:portable && npm run docs:check && npm run docs:guides && npm run test:studio && npm run test:smoke && npm run test:api && npm run test:types",
     "test:unit": "node --import tsx --test tests/unit.ts tests/*.test.ts",
     "test:coverage": "node --import tsx --test --experimental-test-coverage --test-coverage-include=src/**/*.ts --test-coverage-lines=82 --test-coverage-branches=67 --test-coverage-functions=73 tests/unit.ts tests/*.test.ts",
     "test:smoke": "node tests/package-smoke.mjs",
@@ -1491,13 +1631,15 @@
     "bench:runtime": "node --expose-gc scripts/bench-runtime.mjs",
     "pack:dry-run": "npm pack --dry-run --cache .tmp-nexus-ai-tests/npm-cache",
     "check": "npm run format:check && npm run registry:check && npm run llms:check && npm run lint && npm test && npm run typecheck:tests && npm run studio:typecheck && npm run typecheck:examples && npm run typecheck:examples:browser && npm run test:coverage",
-    "check:release": "npm run check && npm run bench:graph && npm run bench:runtime && npm run pack:dry-run && npm run test:clean-install && npm run test:studio-install",
+    "check:release": "npm run check && npm run bench:graph && npm run bench:runtime && npm run bench:surfaces && npm run pack:dry-run && npm run test:clean-install && npm run test:studio-install",
     "prepack": "npm run build",
     "prepublishOnly": "npm run check:release",
     "build:esm": "tsc --removeComments --declaration false && tsc --emitDeclarationOnly",
     "build:cjs": "tsc -p tsconfig.cjs.json --removeComments --declaration false && tsc -p tsconfig.cjs.json --emitDeclarationOnly && node scripts/finalize-cjs.mjs",
     "test:conformance:images": "tsx tests/conformance.images.ts",
-    "conformance:images:record": "tsx tests/conformance.images.ts --record"
+    "conformance:images:record": "tsx tests/conformance.images.ts --record",
+    "test:portable": "node scripts/check-portability.mjs && node tests/portable/run.mjs node && node tests/portable/edge.mjs",
+    "bench:surfaces": "node --expose-gc --no-warnings scripts/bench-surfaces.mjs"
   },
   "keywords": [
     "ai",
@@ -1607,6 +1749,7 @@
   "devDependencies": {
     "@anthropic-ai/sdk": "^0.30.0",
     "@biomejs/biome": "^2.3.0",
+    "@edge-runtime/vm": "^5.0.0",
     "@electric-sql/pglite": "^0.5.8",
     "@electric-sql/pglite-pgvector": "^0.0.9",
     "@opentelemetry/api": "^1.9.1",
@@ -1618,9 +1761,11 @@
     "ajv": "^8.17.1",
     "ajv-formats": "^3.0.1",
     "bullmq": "^5.63.0",
+    "esbuild": "^0.28.2",
     "express": "^5.1.0",
     "nexus-ai-pro-2-0": "npm:nexus-ai-pro@^2.0.0",
     "nexus-ai-pro-2-1": "npm:nexus-ai-pro@^2.1.0",
+    "nexus-ai-pro-2-3": "npm:nexus-ai-pro@^2.3.0",
     "ollama": "^0.5.6",
     "openai": "^4.52.0",
     "tsx": "^4.16.0",
@@ -1657,7 +1802,7 @@
     "provenance": true
   },
   "overrides": {
-    "esbuild": "^0.28.1"
+    "esbuild": "$esbuild"
   },
   "module": "dist/index.js",
   "typesVersions": {
@@ -1668,6 +1813,9 @@
       "streaming": [
         "dist-cjs/core/streaming.d.ts"
       ],
+      "runtime": [
+        "dist-cjs/runtime/index.d.ts"
+      ],
       "config": [
         "dist-cjs/core/config-builder.d.ts"
       ],
@@ -1812,6 +1960,18 @@
       "agent": [
         "dist-cjs/agent/index.d.ts"
       ],
+      "agent/permissions": [
+        "dist-cjs/agent/permissions.d.ts"
+      ],
+      "agent/sandbox": [
+        "dist-cjs/agent/sandbox.d.ts"
+      ],
+      "agent/middleware": [
+        "dist-cjs/agent/middleware/index.d.ts"
+      ],
+      "deep-agent": [
+        "dist-cjs/deep-agent/index.d.ts"
+      ],
       "store": [
         "dist-cjs/store/index.d.ts"
       ],
@@ -1845,6 +2005,9 @@
       "postgres/vectors": [
         "dist-cjs/postgres/vectors.d.ts"
       ],
+      "postgres/fulltext": [
+        "dist-cjs/postgres/fulltext.d.ts"
+      ],
       "postgres/traces": [
         "dist-cjs/postgres/traces.d.ts"
       ],
@@ -1881,6 +2044,9 @@
       "testing": [
         "dist-cjs/testing/index.d.ts"
       ],
+      "adapter-kit": [
+        "dist-cjs/adapter-kit/index.d.ts"
+      ],
       "next": [
         "dist-cjs/next/route-handler.d.ts"
       ],
@@ -1896,6 +2062,9 @@
       "server/tenancy": [
         "dist-cjs/server/tenancy.d.ts"
       ],
+      "server/auth": [
+        "dist-cjs/server/auth.d.ts"
+      ],
       "tenancy": [
         "dist-cjs/tenancy/index.d.ts"
       ],
@@ -2070,9 +2239,18 @@
       "rag/chroma": [
         "dist-cjs/rag/chroma.d.ts"
       ],
+      "rag/elasticsearch": [
+        "dist-cjs/rag/elasticsearch.d.ts"
+      ],
       "rag/retrievers": [
         "dist-cjs/rag/retrievers.d.ts"
       ],
+      "rag/rerankers": [
+        "dist-cjs/rag/rerankers.d.ts"
+      ],
+      "rag/pipeline": [
+        "dist-cjs/rag/pipeline.d.ts"
+      ],
       "sqlite/vectors": [
         "dist-cjs/sqlite/vectors.d.ts"
       ],
@@ -2082,6 +2260,15 @@
       "mcp/registry": [
         "dist-cjs/mcp/registry.d.ts"
       ],
+      "protocols/ag-ui": [
+        "dist-cjs/protocols/ag-ui.d.ts"
+      ],
+      "protocols/a2a": [
+        "dist-cjs/protocols/a2a.d.ts"
+      ],
+      "protocols/acp": [
+        "dist-cjs/protocols/acp.d.ts"
+      ],
       "context-hub": [
         "dist-cjs/context-hub/index.d.ts"
       ],