@aspectlylabs/mikka 0.0.27 → 0.0.45

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,71 @@
+# Third-party notices
+
+## codeburn
+
+The subscription-quota readers under `packages/daemon/src/quota/`
+(`claude.ts`, `codex.ts`, `cursor.ts`, `files.ts`, and the usage-response
+parsing in `parse.ts`) are adapted from
+[codeburn](https://github.com/getagentseal/codeburn), Copyright (c) 2026
+AgentSeal, licensed under the MIT License below.
+
+The port is read-only. codeburn can refresh a Codex token and write
+`~/.codex/auth.json`; Mikka does not. See `docs/adr/0027-local-credential-quota.md`.
+
+```
+MIT License
+
+Copyright (c) 2026 AgentSeal
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
+## CUA standalone driver
+
+Mikka's optional local/isolated computer adapter invokes the standalone
+[cua-driver-rs 0.38.0](https://github.com/trycua/cua/releases/tag/cua-driver-rs-v0.38.0)
+from CUA. Its Rust workspace declares MIT at upstream revision
+`85e2b1318bd77ccf3cfa88ccdf875a4bb7eaed19`; the copyright and license below
+are reproduced from that revision's `LICENSE.md`. Mikka does not install
+`cua-perception`, OmniParser, Cua Spaces or `cua-spacesd`. The daemon npm
+package contains the adapter and this notice; users/isolated CI supply the
+separate driver binary. No CUA source is represented as Mikka-owned code.
+
+```text
+MIT License
+
+Copyright (c) 2025 Cua AI, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```

package/cli.js

@@ -2449,8 +2449,8 @@ var READ_ONLY_DENIED = [
   "git_push",
   "computer_use"
 ];
-var runPolicySchema = z2.object({
-  permissions: z2.object({
+var runPolicySchema = z2.strictObject({
+  permissions: z2.strictObject({
     install_dependency: z2.enum(PERMISSION_DECISIONS),
     write_outside_repo: z2.enum(PERMISSION_DECISIONS),
     git_push: z2.enum(PERMISSION_DECISIONS),
@@ -2728,6 +2728,14 @@ var harnessInfoSchema = z6.object({
   harness: harnessSchema,
   installed: z6.boolean(),
   models: z6.array(z6.string().trim().min(1).max(128)).max(500).optional(),
+  modelSlots: z6.array(
+    z6.object({
+      slot: z6.string().trim().min(1).max(128).refine((v2) => v2 !== "auto"),
+      model: z6.string().trim().min(1).max(128),
+      name: z6.string().trim().min(1).max(200)
+    })
+  ).max(500).optional(),
+  defaultModelSlot: z6.string().trim().min(1).max(128).optional(),
   /** Deprecated (#312, 2026-10-27): could host the native Coordinator. The server keeps that runtime switched off. */
   coordinator: z6.boolean().optional(),
   /** Set only by a runner with an isolated, owner-bound subscription broker. */
@@ -3209,9 +3217,10 @@ import { z as z12 } from "zod";
 // ../protocol/src/skill-artifact.ts
 import { z as z11 } from "zod";
 var SKILL_ARTIFACT_HEADER = "x-mikka-skill-artifacts";
+var TEAM_SKILL_HEADER = "x-mikka-team-skills";
 var skillArtifactRefSchema = z11.object({
   schemaVersion: z11.literal(1),
-  registryId: z11.literal("mikka-builtin"),
+  registryId: z11.enum(["mikka-builtin", "mikka-team"]),
   skillId: z11.uuid(),
   versionId: z11.uuid(),
   format: z11.literal("single-skill-md-v1"),
@@ -4299,7 +4308,7 @@ import { join as join3 } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.27",
+  version: "0.0.45",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -4358,7 +4367,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "a703b0efc59761627d740012d1c2f762bf218b25"
+  gitHead: "2ed99faf09cfa4dc1d7e904337353ba057dcff9b"
 };
 
 // src/paths.ts
@@ -5119,6 +5128,7 @@ var HttpServerLink = class {
           "content-type": "application/json",
           [CLIENT_VERSION_HEADER]: this.clientVersion,
           [SKILL_ARTIFACT_HEADER]: "1",
+          [TEAM_SKILL_HEADER]: "1",
           [REPO_ORIGIN_HEADER]: "1",
           [RECOVERY_WORKTREE_HEADER]: "1",
           ...token ? { authorization: `Bearer ${token}` } : {},
@@ -9841,7 +9851,54 @@ import { execa as execa9 } from "execa";
 
 // src/harness-models.ts
 import { execa as execa8 } from "execa";
-async function detectHarnessModels(harness, binary) {
+function claudeDiscoveryEnv(host = process.env) {
+  const env = buildChildEnv({ host });
+  for (const slot of ["OPUS", "SONNET", "HAIKU"]) {
+    const key2 = `ANTHROPIC_DEFAULT_${slot}_MODEL`;
+    const value = host[key2];
+    if (value && /^[a-zA-Z0-9._:/-]{1,128}$/.test(value)) env[key2] = value;
+  }
+  return env;
+}
+function claudeModelCatalogue(rows) {
+  const modelSlots = rows.filter((r) => r.resolvedModel && r.value !== "auto").map((r) => ({
+    slot: r.value,
+    model: r.resolvedModel,
+    name: r.resolvedModel
+  }));
+  return {
+    models: modelSlots.map((r) => r.slot),
+    modelSlots,
+    ...modelSlots.some((r) => r.slot === "opus") ? { defaultModelSlot: "opus" } : {}
+  };
+}
+async function detectHarnessCatalogue(harness, binary) {
+  if (harness === "claude_code") {
+    const { query: query3 } = await import("@anthropic-ai/claude-agent-sdk");
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), 5e3);
+    const session = query3({
+      prompt: (async function* () {
+      })(),
+      options: {
+        pathToClaudeCodeExecutable: binary,
+        env: claudeDiscoveryEnv(),
+        abortController: controller,
+        settingSources: ["user", "project", "local"]
+      }
+    });
+    try {
+      return claudeModelCatalogue(await session.supportedModels());
+    } catch {
+      return {};
+    } finally {
+      clearTimeout(timer);
+      session.close();
+    }
+  }
+  return await discover(harness, binary);
+}
+async function discover(harness, binary) {
   const options = {
     env: buildChildEnv(),
     extendEnv: false,
@@ -9857,9 +9914,9 @@ async function detectHarnessModels(harness, binary) {
         );
         return match ? [match[1]] : [];
       });
-      return models.length ? [...new Set(models)].slice(0, 500) : void 0;
+      return { models: [...new Set(models)].slice(0, 500) };
     }
-    if (harness !== "codex") return void 0;
+    if (harness !== "codex") return {};
     const child = execa8(binary, ["app-server"], { ...options, stdin: "pipe" });
     const completion = child.catch(() => void 0);
     child.stdin.write(
@@ -9873,7 +9930,7 @@ async function detectHarnessModels(harness, binary) {
     try {
       for await (const chunk of child.stdout) {
         pending += chunk.toString();
-        if (pending.length > 1e6) return void 0;
+        if (pending.length > 1e6) return {};
         let newline;
         while ((newline = pending.indexOf("\n")) >= 0) {
           const line = pending.slice(0, newline);
@@ -9898,14 +9955,31 @@ async function detectHarnessModels(harness, binary) {
           }
           if (reply.id === 2) {
             const rows = reply.result?.data;
-            if (!Array.isArray(rows)) return void 0;
-            return [
-              ...new Set(
-                rows.flatMap(
-                  (row) => typeof row.model === "string" && row.model.length <= 128 ? [row.model] : []
-                )
-              )
-            ];
+            if (!Array.isArray(rows)) return {};
+            const models = rows.filter(
+              (r) => typeof r.model === "string" && r.model.length <= 128
+            );
+            const modelSlots = models.map(
+              (r) => ({
+                slot: r.model,
+                model: r.model,
+                name: r.displayName ?? r.model
+              })
+            );
+            const selected = models.find(
+              (r) => r.isDefault
+            );
+            if (selected)
+              modelSlots.push({
+                slot: "default",
+                model: selected.model,
+                name: selected.displayName ?? selected.model
+              });
+            return {
+              models: models.map((r) => r.model),
+              modelSlots,
+              ...selected ? { defaultModelSlot: "default" } : {}
+            };
           }
         }
       }
@@ -9915,7 +9989,7 @@ async function detectHarnessModels(harness, binary) {
     }
   } catch {
   }
-  return void 0;
+  return {};
 }
 
 // src/harnesses.ts
@@ -9945,8 +10019,8 @@ async function detectHarnesses() {
         for (const binary of HARNESS_BINARIES[harness]) {
           const version = await versionOf(binary);
           if (version) {
-            const models = await detectHarnessModels(harness, binary);
-            return { harness, installed: true, version, ...models?.length ? { models } : {} };
+            const catalogue = await detectHarnessCatalogue(harness, binary);
+            return { harness, installed: true, version, ...catalogue };
           }
         }
         return { harness, installed: false, version: null };
@@ -12471,6 +12545,11 @@ var RunSupervisor = class {
     verifySkillAssignment(assignment);
     if (assignment.skillReceipt && (this.leases.get(runId) ?? 0) <= Date.now())
       throw new Error("Receipted Skill assignment requires a current server lease");
+    if (assignment.skillReceipt?.artifact.registryId === "mikka-team") {
+      if (!this.deps.revalidateSkillAssignment) throw new Error("Current team Skill authorization unavailable");
+      const current = await this.deps.revalidateSkillAssignment(assignment);
+      this.leases.set(runId, Date.parse(verifySkillResume(assignment, current)));
+    }
     const adapter = this.adapterFor(runId);
     if (assignment.requireSessionResume && entry.questionResumeState === "starting")
       throw new Error(
@@ -12948,7 +13027,7 @@ var RepositoryCache = class {
         "-c",
         `protocol.file.allow=${this.allowFile ? "always" : "never"}`,
         ...args
-      ], { cwd, env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }, stdin: "ignore", timeout: FETCH_TIMEOUT_MS, cancelSignal: signal });
+      ], { cwd, env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }, stdin: "ignore", timeout: FETCH_TIMEOUT_MS, cancelSignal: signal, killDescendants: true });
       if (!existsSync5(path)) {
         const temporary = `${path}.clone-${randomUUID7()}`;
         try {
@@ -13991,7 +14070,7 @@ function driverArguments(input, platform3 = process.platform) {
     scope: "desktop",
     ...platform3 === "darwin" ? {} : { coordinate_frame: "desktop" },
     delivery_mode: "foreground"
-  } : call.name === "press_key" ? { ...call.arguments, scope: "desktop", delivery_mode: "foreground" } : call.name === "scroll" ? { ...call.arguments, scope: "desktop", ...platform3 === "darwin" ? {} : { coordinate_frame: "desktop" }, delivery_mode: "foreground" } : call.arguments;
+  } : ["type_text", "press_key"].includes(call.name) ? { ...call.arguments, scope: "desktop", delivery_mode: "foreground" } : call.name === "scroll" ? { ...call.arguments, scope: "desktop", ...platform3 === "darwin" ? {} : { coordinate_frame: "desktop" }, delivery_mode: "foreground" } : call.arguments;
 }
 async function executeDriver(driver, input, display, leaseGuard, assertLive = () => {
 }, beforeAction) {

package/client.js

@@ -2095,8 +2095,8 @@ var storedPermissionsSchema = z2.strictObject({
   computer_use: z2.enum(CONFIGURABLE_PERMISSIONS.computer_use)
 }).partial();
 var guidanceSchema = z2.string().max(MAX_GUIDANCE_LENGTH);
-var runPolicySchema = z2.object({
-  permissions: z2.object({
+var runPolicySchema = z2.strictObject({
+  permissions: z2.strictObject({
     install_dependency: z2.enum(PERMISSION_DECISIONS),
     write_outside_repo: z2.enum(PERMISSION_DECISIONS),
     git_push: z2.enum(PERMISSION_DECISIONS),
@@ -2335,6 +2335,14 @@ var harnessInfoSchema = z6.object({
   harness: harnessSchema,
   installed: z6.boolean(),
   models: z6.array(z6.string().trim().min(1).max(128)).max(500).optional(),
+  modelSlots: z6.array(
+    z6.object({
+      slot: z6.string().trim().min(1).max(128).refine((v2) => v2 !== "auto"),
+      model: z6.string().trim().min(1).max(128),
+      name: z6.string().trim().min(1).max(200)
+    })
+  ).max(500).optional(),
+  defaultModelSlot: z6.string().trim().min(1).max(128).optional(),
   /** Deprecated (#312, 2026-10-27): could host the native Coordinator. The server keeps that runtime switched off. */
   coordinator: z6.boolean().optional(),
   /** Set only by a runner with an isolated, owner-bound subscription broker. */
@@ -2727,7 +2735,7 @@ import { z as z12 } from "zod";
 import { z as z11 } from "zod";
 var skillArtifactRefSchema = z11.object({
   schemaVersion: z11.literal(1),
-  registryId: z11.literal("mikka-builtin"),
+  registryId: z11.enum(["mikka-builtin", "mikka-team"]),
   skillId: z11.uuid(),
   versionId: z11.uuid(),
   format: z11.literal("single-skill-md-v1"),
@@ -3633,7 +3641,7 @@ import { join } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.27",
+  version: "0.0.45",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3692,7 +3700,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "a703b0efc59761627d740012d1c2f762bf218b25"
+  gitHead: "2ed99faf09cfa4dc1d7e904337353ba057dcff9b"
 };
 
 // src/paths.ts

package/computer/driver.mjs

@@ -1,3 +1,5 @@
+// Invokes the optional standalone cua-driver 0.38.0 (MIT), Copyright (c) 2025 Cua AI, Inc.
+// See packages/daemon/THIRD_PARTY_NOTICES.md. No perception or Spaces extension is installed here.
 import { spawn } from "node:child_process";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
@@ -161,7 +163,7 @@ export function driverArguments(input, platform = process.platform) {
     ? { ...call.arguments, scope: "desktop",
         ...(platform === "darwin" ? {} : { coordinate_frame: "desktop" }),
         delivery_mode: "foreground" }
-    : call.name === "press_key" ? { ...call.arguments, scope: "desktop", delivery_mode: "foreground" }
+    : ["type_text", "press_key"].includes(call.name) ? { ...call.arguments, scope: "desktop", delivery_mode: "foreground" }
       : call.name === "scroll" ? { ...call.arguments, scope: "desktop", ...(platform === "darwin" ? {} : { coordinate_frame: "desktop" }), delivery_mode: "foreground" }
         : call.arguments;
 }

package/http-link.js

@@ -2219,8 +2219,8 @@ var storedPermissionsSchema = z2.strictObject({
   computer_use: z2.enum(CONFIGURABLE_PERMISSIONS.computer_use)
 }).partial();
 var guidanceSchema = z2.string().max(MAX_GUIDANCE_LENGTH);
-var runPolicySchema = z2.object({
-  permissions: z2.object({
+var runPolicySchema = z2.strictObject({
+  permissions: z2.strictObject({
     install_dependency: z2.enum(PERMISSION_DECISIONS),
     write_outside_repo: z2.enum(PERMISSION_DECISIONS),
     git_push: z2.enum(PERMISSION_DECISIONS),
@@ -2323,9 +2323,10 @@ import { z as z4 } from "zod";
 // ../protocol/src/skill-artifact.ts
 import { z as z3 } from "zod";
 var SKILL_ARTIFACT_HEADER = "x-mikka-skill-artifacts";
+var TEAM_SKILL_HEADER = "x-mikka-team-skills";
 var skillArtifactRefSchema = z3.object({
   schemaVersion: z3.literal(1),
-  registryId: z3.literal("mikka-builtin"),
+  registryId: z3.enum(["mikka-builtin", "mikka-team"]),
   skillId: z3.uuid(),
   versionId: z3.uuid(),
   format: z3.literal("single-skill-md-v1"),
@@ -2828,6 +2829,14 @@ var harnessInfoSchema = z13.object({
   harness: harnessSchema,
   installed: z13.boolean(),
   models: z13.array(z13.string().trim().min(1).max(128)).max(500).optional(),
+  modelSlots: z13.array(
+    z13.object({
+      slot: z13.string().trim().min(1).max(128).refine((v2) => v2 !== "auto"),
+      model: z13.string().trim().min(1).max(128),
+      name: z13.string().trim().min(1).max(200)
+    })
+  ).max(500).optional(),
+  defaultModelSlot: z13.string().trim().min(1).max(128).optional(),
   /** Deprecated (#312, 2026-10-27): could host the native Coordinator. The server keeps that runtime switched off. */
   coordinator: z13.boolean().optional(),
   /** Set only by a runner with an isolated, owner-bound subscription broker. */
@@ -3934,7 +3943,7 @@ var InvalidIdError = class extends DaemonError {
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.27",
+  version: "0.0.45",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3993,7 +4002,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "a703b0efc59761627d740012d1c2f762bf218b25"
+  gitHead: "2ed99faf09cfa4dc1d7e904337353ba057dcff9b"
 };
 
 // src/paths.ts
@@ -4312,6 +4321,7 @@ var HttpServerLink = class {
           "content-type": "application/json",
           [CLIENT_VERSION_HEADER]: this.clientVersion,
           [SKILL_ARTIFACT_HEADER]: "1",
+          [TEAM_SKILL_HEADER]: "1",
           [REPO_ORIGIN_HEADER]: "1",
           [RECOVERY_WORKTREE_HEADER]: "1",
           ...token ? { authorization: `Bearer ${token}` } : {},

package/login.js

@@ -2091,8 +2091,8 @@ var storedPermissionsSchema = z2.strictObject({
   computer_use: z2.enum(CONFIGURABLE_PERMISSIONS.computer_use)
 }).partial();
 var guidanceSchema = z2.string().max(MAX_GUIDANCE_LENGTH);
-var runPolicySchema = z2.object({
-  permissions: z2.object({
+var runPolicySchema = z2.strictObject({
+  permissions: z2.strictObject({
     install_dependency: z2.enum(PERMISSION_DECISIONS),
     write_outside_repo: z2.enum(PERMISSION_DECISIONS),
     git_push: z2.enum(PERMISSION_DECISIONS),
@@ -2332,6 +2332,14 @@ var harnessInfoSchema = z6.object({
   harness: harnessSchema,
   installed: z6.boolean(),
   models: z6.array(z6.string().trim().min(1).max(128)).max(500).optional(),
+  modelSlots: z6.array(
+    z6.object({
+      slot: z6.string().trim().min(1).max(128).refine((v2) => v2 !== "auto"),
+      model: z6.string().trim().min(1).max(128),
+      name: z6.string().trim().min(1).max(200)
+    })
+  ).max(500).optional(),
+  defaultModelSlot: z6.string().trim().min(1).max(128).optional(),
   /** Deprecated (#312, 2026-10-27): could host the native Coordinator. The server keeps that runtime switched off. */
   coordinator: z6.boolean().optional(),
   /** Set only by a runner with an isolated, owner-bound subscription broker. */
@@ -2723,7 +2731,7 @@ import { z as z12 } from "zod";
 import { z as z11 } from "zod";
 var skillArtifactRefSchema = z11.object({
   schemaVersion: z11.literal(1),
-  registryId: z11.literal("mikka-builtin"),
+  registryId: z11.enum(["mikka-builtin", "mikka-team"]),
   skillId: z11.uuid(),
   versionId: z11.uuid(),
   format: z11.literal("single-skill-md-v1"),
@@ -3640,7 +3648,7 @@ var ServerUnreachableError = class extends DaemonError {
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.27",
+  version: "0.0.45",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3699,7 +3707,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "a703b0efc59761627d740012d1c2f762bf218b25"
+  gitHead: "2ed99faf09cfa4dc1d7e904337353ba057dcff9b"
 };
 
 // src/paths.ts