Documentation menu
Start here
IntroductionGetting startedWrite an agentProject anatomyUnderstand Ayjnt
Harness engineeringTwo runtimesHuman interfacesHow agents workHost bridgeAgent capabilities
Callable methodsState & SQLiteSessions & memorySchedulingWorkflowsDurable executionInter-agent RPCSub-agentsToolsInterfaces & integrations
Browser clientRouting & middlewareVoiceBrowser toolsMCPEmailObservabilityCLI
Command overviewnewdevrunbuildcompilemigratedeployAPI reference
AgentAgentClientWorkflow classesLocal & cloudMigrationsExamplesTwo runtimes, one harness
Ayjnt separates isolated agent execution from host capabilities, then connects them through a typed, permission-aware bridge.
app.tsx browser cli.ts terminal Safe, stateful, instant.
Agents run in workerd V8 isolates, with durable state, scheduling, workflows, and agent-to-agent RPC.
Close to the machine.
Host actions run in Bun, where agents can work with files, shells, databases, processes, and local connectors.
app.tsx browser cli.ts terminal Safe, stateful, instant.
Agents reason in isolated V8 environments with durable state, scheduling, workflows, and agent-to-agent RPC.
Close to the machine.
Host actions work with files, shells, databases, processes, and local connectors.
The agent runtime
Agent classes, durable state, schedules, workflows, and in-runtime tools execute in workerd. Each stateful agent instance is backed by a V8 isolate, providing a lightweight boundary that starts quickly and scales to large numbers of concurrent agents.
This side of the harness is portable between local workerd and Cloudflare. It is the right place for coordination, model calls, state machines, and tools that do not need native host access.
The host runtime
The CLI and host tools execute in Bun. This is where a harness can use
Bun.file, Bun.$, bun:sqlite, local
processes, and connectors that belong to the machine running the harness.
Host tools declare whether they read, write, or execute. Ayjnt can then gate meaningful side effects instead of treating every tool call as equally trusted.
The bridge
An agent sees one merged tool set. Workerd-native tools execute beside the agent. Host tools are represented by typed proxies and cross an internal bridge only when called. The host validates the declared permission before running the tool.
| Concern | Agent runtime | Host runtime |
|---|---|---|
| Runtime | workerd / V8 isolates | Bun |
| Best for | state, orchestration, model loops | files, shells, native APIs |
| Tool file | tools.ts | tools.host.ts |
| Cloud deploy | Yes | No host process in cloud deployments |