maka-agent 0.2.0-dev.14.20260902 → 0.2.0-dev.16.20260903

package/node_modules/@maka/core/dist/llm-connections.js

@@ -308,6 +308,10 @@ function interactiveOAuthConnectionSlugBase(providerType) {
             return 'codex-subscription';
         case 'xai-oauth':
             return 'xai-oauth';
+        // Shared with the local `gh` credential import so both routes to a Copilot
+        // account land on one Connection instead of two.
+        case 'github-copilot':
+            return 'github-copilot';
     }
 }
 /** Derive an unused OAuth Connection slug without moving allocation into a surface. */

package/node_modules/@maka/core/dist/local-memory.js

@@ -17,6 +17,7 @@
  * under the License.
  */
 import { redactSecrets } from './redaction.js';
+import { truncateUtf16Safe } from './text-sanitize.js';
 export const LOCAL_MEMORY_MAX_BYTES = 128 * 1024;
 export const LOCAL_MEMORY_PROMPT_MAX_CHARS = 12_000;
 export const LOCAL_MEMORY_PROMPT_TRUNCATION_MARKER = '[本地记忆已按长度截断]';
@@ -69,8 +70,7 @@ export function buildLocalMemoryPromptBody(input, context = {}) {
         return undefined;
     if (body.length <= LOCAL_MEMORY_PROMPT_MAX_CHARS)
         return body;
-    const truncated = body.slice(0, LOCAL_MEMORY_PROMPT_MAX_CHARS);
-    const boundarySafe = /[\uD800-\uDBFF]$/.test(truncated) ? truncated.slice(0, -1) : truncated;
+    const boundarySafe = truncateUtf16Safe(body, LOCAL_MEMORY_PROMPT_MAX_CHARS);
     return `${boundarySafe.trimEnd()}\n\n${LOCAL_MEMORY_PROMPT_TRUNCATION_MARKER}`;
 }
 export function appendManualLocalMemoryEntryDraft(currentDraft, input) {

package/node_modules/@maka/core/dist/model-call-usage-projection.js

@@ -106,6 +106,7 @@ export function projectModelCallUsageSummary(attempts, query, now) {
         total: 0,
     };
     let totalCostUsd = 0;
+    let totalDurationMs = 0;
     let cacheHitRequests = 0;
     let cacheCreateRequests = 0;
     let errorRequests = 0;
@@ -119,6 +120,7 @@ export function projectModelCallUsageSummary(attempts, query, now) {
         totals.reasoning += t.reasoning;
         totals.total += t.total;
         totalCostUsd += pricedCost(attempt);
+        totalDurationMs += attempt.latencyMs;
         if (t.cacheRead > 0)
             cacheHitRequests += 1;
         if (t.cacheWrite > 0)
@@ -130,6 +132,7 @@ export function projectModelCallUsageSummary(attempts, query, now) {
         range,
         totalRequests: rows.length,
         totalCostUsd,
+        totalDurationMs,
         totalTokens: totals,
         cacheHitRequests,
         cacheCreateRequests,

package/node_modules/@maka/core/dist/model-metadata.js

@@ -215,11 +215,18 @@ const VOLCENGINE_CODING_PLAN_MODEL_METADATA = {
     'kimi-k2.6': planModel('Kimi-K2.6', true, 256_000, 32_000),
     'kimi-k2.7-code': planModel('Kimi-K2.7-Code', true, 256_000, 32_000),
 };
+// Hand-maintained mirror of the official Agent Plan personal plan page
+// (docs.volcengine.com/docs/82379/2366394) and its model release/retirement
+// announcements (82379/2578669, 82379/2578673): the gateway has no
+// model-list endpoint its plan key can reach and models.dev has no snapshot.
+// The page's table lists windows as "1024k"/"128k"; transcribe those
+// literals as 1_024_000/128_000 (its prose "1M" is the same figure rounded).
+// Re-check the page before editing an entry here.
 const VOLCENGINE_AGENT_PLAN_MODEL_METADATA = {
     'ark-code-latest': agentPlanModel('Ark Code Latest', 256_000, 32_000, { vision: true }),
-    // Agent Plan currently exposes GLM-5.3 in its ark-code-latest routing catalog.
-    // The underlying model's published limits are 1M context and 128K output.
-    'glm-5.3': agentPlanModel('GLM-5.3', 1_000_000, 131_072),
+    // The plan page lists "glm-5.3 (glm-latest)": thinking is on by default and
+    // cannot be turned off.
+    'glm-5.3': agentPlanModel('GLM-5.3', 1_024_000, 128_000),
     'doubao-seed-2.0-mini': agentPlanModel('Doubao Seed 2.0 Mini', 256_000, 128_000, {
         vision: true,
     }),
@@ -239,11 +246,23 @@ const VOLCENGINE_AGENT_PLAN_MODEL_METADATA = {
     'doubao-seed-2.0-pro': agentPlanModel('Doubao Seed 2.0 Pro', 256_000, 128_000, {
         lifecycle: 'deprecated',
     }),
-    'minimax-m2.7': agentPlanModel('MiniMax-M2.7', 200_000, 128_000),
-    'minimax-m3': agentPlanModel('MiniMax-M3', 512_000, 128_000, { vision: true }),
-    'glm-5.2': agentPlanModel('GLM-5.2', 1_024_000, 128_000),
+    'minimax-m2.7': agentPlanModel('MiniMax-M2.7', 200_000, 128_000, {
+        // Upstream retirement notice of 2026-08-04; the gateway routes to minimax-m3.
+        lifecycle: 'deprecated',
+    }),
+    'minimax-m3': agentPlanModel('MiniMax-M3', 1_024_000, 128_000, { vision: true }),
+    'glm-5.2': agentPlanModel('GLM-5.2', 1_024_000, 128_000, {
+        // Upstream service ended 2026-08-31; the gateway routes to glm-5.3.
+        lifecycle: 'deprecated',
+    }),
+    // Official alias of glm-5.3 (the plan page lists "glm-5.3 (glm-latest)").
     'glm-latest': agentPlanModel('GLM Latest', 1_024_000, 128_000),
-    'kimi-k2.6': agentPlanModel('Kimi-K2.6', 256_000, 32_000, { vision: true }),
+    'glm-5.3-flash': agentPlanModel('GLM-5.3-Flash', 1_024_000, 128_000, { vision: true }),
+    'kimi-k2.6': agentPlanModel('Kimi-K2.6', 256_000, 32_000, {
+        // Upstream service ended 2026-08-18; migrate to kimi-k2.7-code or kimi-k3.
+        lifecycle: 'deprecated',
+        vision: true,
+    }),
     'kimi-k2.7-code': agentPlanModel('Kimi-K2.7-Code', 256_000, 32_000, { vision: true }),
     'deepseek-v4-pro': agentPlanModel('DeepSeek-V4-Pro', 1_024_000, 384_000),
     'kimi-k3': agentPlanModel('Kimi-K3', 1_024_000, 128_000, { vision: true }),

package/node_modules/@maka/core/dist/model-thinking.js

@@ -143,6 +143,23 @@ export function pruneRelayModelProfiles(table, enabledModelIds) {
 export function relayModelProfile(connection, modelId) {
     return normalizeRelayModelProfile(connection.relayModelProfiles?.[modelId]);
 }
+/**
+ * The context window the USER declared for a model — the Maka window: the
+ * proactive compaction target, and nothing else. Exactly two sources count as
+ * a declaration: a model-facts pin (`factOverriddenFields` includes
+ * `contextWindow`, narrowest of window/input limit) and a relay model profile.
+ * A provider's `/models` report and generated metadata describe the model and
+ * are shown as a hint; they never become a threshold on their own. This is the
+ * single owner of that rule for runtime and UI (#4559).
+ */
+export function declaredContextWindow(connection, modelId) {
+    const model = connection.models?.find((candidate) => candidate.id === modelId);
+    if (model?.factOverriddenFields?.includes('contextWindow')) {
+        const values = [model.contextWindow, model.inputLimit].filter((value) => typeof value === 'number' && Number.isFinite(value) && value > 0);
+        return values.length > 0 ? Math.min(...values) : undefined;
+    }
+    return relayModelProfile(connection, modelId)?.contextWindow;
+}
 /**
  * Mirrors @ai-sdk/openai@4.0.42 priority-processing detection. The UI and
  * runtime share this gate so a saved Fast declaration always reaches the wire.

package/node_modules/@maka/core/dist/provider-registry.js

@@ -171,6 +171,7 @@ const volcengineCodingPlanModelIds = [
 const volcengineAgentPlanModelIds = [
     'ark-code-latest',
     'glm-5.3',
+    'glm-5.3-flash',
     'doubao-seed-2.0-mini',
     'doubao-seed-2.0-lite',
     'deepseek-v4-flash',

package/node_modules/@maka/core/dist/runtime-event.js

@@ -32,7 +32,7 @@
  * projection, or ledger logic lives here. Those arrive in later nodes.
  */
 import { isMessageContent, normalizeMessageContent, } from './events.js';
-import { INTERACTION_ID_MAX_BYTES, INTERACTION_TOOL_NAME_MAX_BYTES } from './interaction.js';
+import { INTERACTION_ID_MAX_BYTES, INTERACTION_TOOL_NAME_MAX_BYTES, decodeInteractionRequest, } from './interaction.js';
 import { decodeTurnOrigin } from './turn-origin.js';
 import { defineObjectShape, hasExactShape, isFiniteNumber, isOptionalMember, isOptionalString, isRecord, isStringArray, } from './record-schema.js';
 import { isPermissionDecisionFields, isPermissionRequestPayload, isUserQuestionRequest, } from './interaction-record-schema.js';
@@ -183,6 +183,8 @@ const RUNTIME_ACTIONS_SHAPE = defineObjectShape()([], [
     'permissionClosureAccepted',
     'userQuestionRequest',
     'userQuestionAnswerAccepted',
+    'formRequest',
+    'formAnswerAccepted',
     'transferToAgent',
     'endInvocation',
     'tokenUsage',
@@ -415,6 +417,9 @@ function isRuntimeEventActions(value) {
         (value.userQuestionRequest === undefined || isUserQuestionRequest(value.userQuestionRequest)) &&
         (value.userQuestionAnswerAccepted === undefined ||
             isRuntimeEventAnswerAcceptedIdentity(value.userQuestionAnswerAccepted)) &&
+        (value.formRequest === undefined || isRuntimeEventFormRequest(value.formRequest)) &&
+        (value.formAnswerAccepted === undefined ||
+            isRuntimeEventAnswerAcceptedIdentity(value.formAnswerAccepted)) &&
         isOptionalString(value.transferToAgent) &&
         (value.endInvocation === undefined || typeof value.endInvocation === 'boolean') &&
         (value.tokenUsage === undefined || isRuntimeTokenUsage(value.tokenUsage)) &&
@@ -428,6 +433,23 @@ function isRuntimeEventActions(value) {
         (value.managedMutationTerminal === undefined ||
             isRuntimeManagedMutationTerminal(value.managedMutationTerminal)));
 }
+function isRuntimeEventFormRequest(value) {
+    if (!isRecord(value))
+        return false;
+    const { requestId, ...request } = value;
+    if (typeof requestId !== 'string' ||
+        requestId.length === 0 ||
+        UTF8.encode(requestId).byteLength > INTERACTION_ID_MAX_BYTES) {
+        return false;
+    }
+    try {
+        decodeInteractionRequest({ kind: 'form', ...request });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
 function isRuntimeManagedMutationTerminal(value) {
     return (isRecord(value) &&
         hasExactShape(value, RUNTIME_MANAGED_MUTATION_TERMINAL_SHAPE) &&

package/node_modules/@maka/core/dist/scheduled-task.js

@@ -399,6 +399,9 @@ function normalizeExecution(value) {
         return fail('agent_run requires execution template');
     if (typeof value.cwd !== 'string' || !value.cwd.trim())
         return fail('execution.cwd is required');
+    if (typeof value.llmConnectionId !== 'string' || !value.llmConnectionId.trim()) {
+        return fail('execution.llmConnectionId is required');
+    }
     if (typeof value.llmConnectionSlug !== 'string' || !value.llmConnectionSlug.trim()) {
         return fail('execution.llmConnectionSlug is required');
     }
@@ -428,6 +431,7 @@ function normalizeExecution(value) {
         value: {
             cwd: value.cwd.trim(),
             ...(projectId === undefined ? {} : { projectId }),
+            llmConnectionId: value.llmConnectionId.trim(),
             llmConnectionSlug: value.llmConnectionSlug.trim(),
             model: value.model.trim(),
             ...(value.thinkingLevel === undefined ? {} : { thinkingLevel: value.thinkingLevel }),

package/node_modules/@maka/core/dist/session.js

@@ -101,7 +101,7 @@ const SUBAGENT_SESSION_RUNTIME_SHAPE = defineObjectShape()([
  */
 const RETIRED_SUBAGENT_RUNTIME_KEYS = ['permissionCeiling'];
 const SUBAGENT_SESSION_SPAWN_IDENTITY_SHAPE = defineObjectShape()(['schemaVersion', 'requestFingerprint', 'initialTurnId', 'initialRunId'], []);
-const SESSION_CONVERSATION_COPY_SHAPE = defineObjectShape()(['kind', 'sourceSessionId', 'sourceTurnId', 'requestFingerprint', 'state'], ['intent']);
+const SESSION_CONVERSATION_COPY_SHAPE = defineObjectShape()(['kind', 'sourceSessionId', 'requestFingerprint', 'state'], ['sourceTurnId', 'intent']);
 const SESSION_LINEAGE_ID_MAX_CHARS = 512;
 const SESSION_LINEAGE_CONTROL_CHARACTERS = /[\u0000-\u001f\u007f]/;
 const SUBAGENT_RUNTIME_NAME_MAX_CHARS = 512;
@@ -185,7 +185,9 @@ export function isSessionConversationCopy(value) {
         (value.intent === undefined ||
             (value.kind === 'branch' && value.intent === 'side_conversation')) &&
         isSessionLineageId(value.sourceSessionId) &&
-        isSessionLineageId(value.sourceTurnId) &&
+        (value.sourceTurnId === undefined
+            ? value.kind === 'branch' && value.intent === 'side_conversation'
+            : isSessionLineageId(value.sourceTurnId)) &&
         typeof value.requestFingerprint === 'string' &&
         /^sha256:[0-9a-f]{64}$/.test(value.requestFingerprint) &&
         (value.state === 'preparing' || value.state === 'committed'));
@@ -287,6 +289,11 @@ export function userFacingText(message) {
 const USER_VISIBLE_SESSION_SYSTEM_NOTES = new Set([
     'context_compacted',
     'context_compaction_failed_open',
+    'context_provider_dropping',
+    'context_window_suggestion',
+    'context_window_overrun',
+    'context_reported_window_exceeded',
+    'context_overflow_after_compaction',
     'step_limit',
 ]);
 /** Closed policy for system notes that are part of the user-visible transcript. */
@@ -295,6 +302,15 @@ export function isUserVisibleSessionSystemNote(kind) {
 }
 export const WORKHUB_COORDINATION_RECORD_SCHEMA_VERSION = 1;
 export const WORKHUB_COORDINATION_REPLACEMENT_SCHEMA_VERSION = 2;
+export const WORKHUB_COORDINATION_STOP_SCHEMA_VERSION = 3;
+function isWorkHubDelegationStopResolution(outcome, targetTurnId) {
+    const hasTargetTurnId = typeof targetTurnId === 'string' && targetTurnId.length > 0;
+    if (outcome === 'stop_delivered' || outcome === 'not_owned')
+        return hasTargetTurnId;
+    if (outcome === 'cancelled_pending')
+        return targetTurnId === undefined;
+    return outcome === 'already_terminal' && (targetTurnId === undefined || hasTargetTurnId);
+}
 const USER_MESSAGE_SHAPE = defineObjectShape()(['type', 'id', 'turnId', 'ts', 'text'], [
     'displayText',
     'attachments',
@@ -426,6 +442,38 @@ const WORKHUB_DELEGATION_REPLACEMENT_ABORTED_MESSAGE_SHAPE = defineObjectShape()
     'targetSessionId',
     'reason',
 ], []);
+const WORKHUB_DELEGATION_STOP_REQUESTED_MESSAGE_SHAPE = defineObjectShape()([
+    'type',
+    'id',
+    'turnId',
+    'ts',
+    'schemaVersion',
+    'kind',
+    'actionId',
+    'actionFingerprint',
+    'coordinationTurnId',
+    'stopsActionId',
+    'stopsDelegationId',
+    'targetSessionId',
+    'targetMessageId',
+    'targetSessionName',
+    'userText',
+], []);
+const WORKHUB_DELEGATION_STOP_RESOLVED_MESSAGE_SHAPE = defineObjectShape()([
+    'type',
+    'id',
+    'turnId',
+    'ts',
+    'schemaVersion',
+    'kind',
+    'actionId',
+    'actionFingerprint',
+    'coordinationTurnId',
+    'stopsActionId',
+    'stopsDelegationId',
+    'targetSessionId',
+    'outcome',
+], ['targetTurnId']);
 const WORKHUB_DELEGATION_CREATE_SHAPE = defineObjectShape()(['title', 'workspace'], []);
 const WORKHUB_DELEGATION_PROJECT_WORKSPACE_SHAPE = defineObjectShape()(['kind', 'projectId'], []);
 const WORKHUB_DELEGATION_HOST_PATH_WORKSPACE_SHAPE = defineObjectShape()(['kind', 'path'], []);
@@ -439,6 +487,11 @@ const SYSTEM_NOTE_KINDS = new Set([
     'model_change',
     'context_compacted',
     'context_compaction_failed_open',
+    'context_provider_dropping',
+    'context_window_suggestion',
+    'context_window_overrun',
+    'context_reported_window_exceeded',
+    'context_overflow_after_compaction',
     'step_limit',
     'error',
     'abort',
@@ -562,6 +615,37 @@ function decodeMessage(value, decodeToolResultContent) {
     throw new Error('Invalid stored message schema');
 }
 function isWorkHubCoordinationMessage(message) {
+    if (message.kind === 'delegation_stop_requested') {
+        return (hasMessageEnvelope(message, true) &&
+            hasExactShape(message, WORKHUB_DELEGATION_STOP_REQUESTED_MESSAGE_SHAPE) &&
+            message.schemaVersion === WORKHUB_COORDINATION_STOP_SCHEMA_VERSION &&
+            isWorkHubActionIdentity(message) &&
+            typeof message.stopsActionId === 'string' &&
+            message.stopsActionId.length > 0 &&
+            typeof message.stopsDelegationId === 'string' &&
+            message.stopsDelegationId.length > 0 &&
+            typeof message.targetSessionId === 'string' &&
+            message.targetSessionId.length > 0 &&
+            typeof message.targetMessageId === 'string' &&
+            message.targetMessageId.length > 0 &&
+            typeof message.targetSessionName === 'string' &&
+            message.targetSessionName.trim().length > 0 &&
+            typeof message.userText === 'string' &&
+            message.userText.trim().length > 0);
+    }
+    if (message.kind === 'delegation_stop_resolved') {
+        return (hasMessageEnvelope(message, true) &&
+            hasExactShape(message, WORKHUB_DELEGATION_STOP_RESOLVED_MESSAGE_SHAPE) &&
+            message.schemaVersion === WORKHUB_COORDINATION_STOP_SCHEMA_VERSION &&
+            isWorkHubActionIdentity(message) &&
+            typeof message.stopsActionId === 'string' &&
+            message.stopsActionId.length > 0 &&
+            typeof message.stopsDelegationId === 'string' &&
+            message.stopsDelegationId.length > 0 &&
+            typeof message.targetSessionId === 'string' &&
+            message.targetSessionId.length > 0 &&
+            isWorkHubDelegationStopResolution(message.outcome, message.targetTurnId));
+    }
     if (message.kind === 'delegation_replacement_aborted') {
         return (hasMessageEnvelope(message, true) &&
             hasExactShape(message, WORKHUB_DELEGATION_REPLACEMENT_ABORTED_MESSAGE_SHAPE) &&
@@ -642,6 +726,15 @@ function isWorkHubCoordinationMessage(message) {
                 typeof message.replacesDelegationId === 'string' &&
                 message.replacesDelegationId.length > 0)));
 }
+function isWorkHubActionIdentity(message) {
+    return (typeof message.actionId === 'string' &&
+        message.actionId.length > 0 &&
+        typeof message.actionFingerprint === 'string' &&
+        /^sha256:[a-f0-9]{64}$/u.test(message.actionFingerprint) &&
+        typeof message.coordinationTurnId === 'string' &&
+        message.coordinationTurnId.length > 0 &&
+        message.turnId === message.coordinationTurnId);
+}
 function isWorkHubDelegationCreateSpec(value) {
     if (!isRecord(value) ||
         !hasExactShape(value, WORKHUB_DELEGATION_CREATE_SHAPE) ||

package/node_modules/@maka/core/dist/text-sanitize.js

@@ -96,3 +96,22 @@ export function sanitizeUnicodeText(text, opts) {
         return cleaned;
     return points.slice(0, opts.maxCodePoints).join('') + suffix;
 }
+/**
+ * Truncate to at most `maxUnits` UTF-16 code units without ending on an
+ * unpaired high surrogate: when the cut lands inside a surrogate pair, the
+ * dangling high half is dropped with the rest of the clipped tail, so the
+ * result survives a UTF-8 round trip (durable storage, model requests)
+ * instead of decoding as U+FFFD.
+ *
+ * Budgets here are code *units*, not code points — callers clip against
+ * provider/storage limits measured in UTF-16 lengths. Marker/suffix policy
+ * stays with the caller, per the boundary note above.
+ */
+export function truncateUtf16Safe(text, maxUnits) {
+    if (maxUnits <= 0)
+        return '';
+    if (text.length <= maxUnits)
+        return text;
+    const kept = text.slice(0, maxUnits);
+    return /[\uD800-\uDBFF]$/.test(kept) ? kept.slice(0, -1) : kept;
+}

package/node_modules/@maka/core/dist/usage-ledger-merge.js

@@ -72,6 +72,9 @@ export function mergeUsageSummary(legacy, canonical, query, now) {
         range: projected.range,
         totalRequests: legacy.totalRequests + projected.totalRequests,
         totalCostUsd: legacy.totalCostUsd + projected.totalCostUsd,
+        // The projection always measures the attempts it counted, and every legacy
+        // summary carries the same field.
+        totalDurationMs: legacy.totalDurationMs + projected.totalDurationMs,
         totalTokens: {
             input: legacy.totalTokens.input + projected.totalTokens.input,
             output: legacy.totalTokens.output + projected.totalTokens.output,

package/node_modules/@maka/core/dist/usage-record-schema.js

@@ -54,7 +54,6 @@ const CURRENT_CONTEXT_BUDGET_SHAPE = defineObjectShape()([
     'droppedEvents',
 ], [
     'policyName',
-    'maxHistoryEstimatedTokens',
     'prunedToolResults',
     'prunedToolResultEstimatedTokensBefore',
     'prunedToolResultEstimatedTokensAfter',
@@ -75,6 +74,7 @@ const CURRENT_CONTEXT_BUDGET_SHAPE = defineObjectShape()([
  * produce them through ContextBudgetDiagnostic.
  */
 const RETIRED_CONTEXT_BUDGET_KEYS = [
+    'maxHistoryEstimatedTokens',
     'maxHistoryTurns',
     'semanticCompactEnabled',
     'semanticCompactMode',
@@ -213,14 +213,20 @@ const CONTEXT_NUMBERS = [
     'activeEstimatedTokensSaved',
 ];
 const CONTEXT_REASON_COUNTS = ['archivePlaceholderReasonCounts'];
-const LAST_REQUEST_ANCHOR_SHAPE = defineObjectShape()(['inputTokens', 'payloadChars'], []);
+const LAST_REQUEST_ANCHOR_SHAPE = defineObjectShape()(['inputTokens'], ['outputTokens', 'modelId', 'connectionId']);
+const RETIRED_LAST_REQUEST_ANCHOR_KEYS = ['payloadChars'];
+const LAST_REQUEST_ANCHOR_DECODE_SHAPE = {
+    required: LAST_REQUEST_ANCHOR_SHAPE.required,
+    allowed: new Set([...LAST_REQUEST_ANCHOR_SHAPE.allowed, ...RETIRED_LAST_REQUEST_ANCHOR_KEYS]),
+};
 export function isLastRequestAnchor(value) {
     return (isRecord(value) &&
-        hasExactShape(value, LAST_REQUEST_ANCHOR_SHAPE) &&
+        hasExactShape(value, LAST_REQUEST_ANCHOR_DECODE_SHAPE) &&
         isFiniteNumber(value.inputTokens) &&
-        isFiniteNumber(value.payloadChars) &&
         value.inputTokens > 0 &&
-        value.payloadChars > 0);
+        (value.outputTokens === undefined ||
+            (isFiniteNumber(value.outputTokens) && value.outputTokens >= 0)) &&
+        (value.payloadChars === undefined || isFiniteNumber(value.payloadChars)));
 }
 export function isTokenUsageFields(value) {
     if (!isRecord(value))

package/node_modules/@maka/core/dist/workhub-creation-intent.js

@@ -65,6 +65,9 @@ const TERMINAL_CHINESE_WITHDRAWAL = /(?:^|[\r\n，。；！？—–-]|然后|
 const CREATION_REQUEST_PREFIX = /^(?:(?:please|kindly|(?:can|could|would)\s+you|i\s+(?:want|need|would\s+like)\s+to|we\s+need\s+to|let['’]s)|(?:请|帮我|请帮我|麻烦(?:你)?|我想|我要|我们需要))?\s*$/iu;
 const NAMED_CREATION_TITLE_INTRODUCER = /\b(?:new|brand[- ]new)\s+(?:session|work|task)[\s,，:：-]+(?:(?:called|named|titled)|with\s+(?:the\s+)?title)\s+|(?:新的?|全新的?)?\s*(?:Session|会话|工作|任务)[\s,，:：-]*(?:叫做?|名叫|名为|命名为|标题为|名称为|名字为)\s*/iu;
 const LEADING_CORRECTION_SEPARATOR = /^[\s,.;:!?，。；：！？—–-]+/u;
+const DIRECT_STOP_REQUEST = /^\s*(?:(?:please|kindly)\s+)?(?:stop|cancel|terminate|halt)\s+(?:(?:the|this)\s+)?(?:(?:session|work|task|job)\s+)?(.+?)\s*[.!。！]?\s*$/iu;
+const DIRECT_CHINESE_STOP_REQUEST = /^\s*(?:(?:请|请帮我|帮我|麻烦你?)\s*)?(?:停止|取消|终止|中止)\s*(?:(?:这个|该)?(?:会话|工作|任务)\s*)?(.+?)\s*[。！]?\s*$/iu;
+const UNSAFE_STOP_TARGET = /^(?:it|this|that|one|everything|all|current|session|work|task|job|(?:this|that|current)\s+(?:session|work|task|job)|它|这个|那个|全部|当前|会话|工作|任务|(?:这个|那个|当前)(?:会话|工作|任务))$/iu;
 /**
  * Whether trusted user text affirmatively asks WorkHub to create a new Session.
  *
@@ -202,6 +205,8 @@ export function readWorkHubRequestIntent(value) {
             : { kind: 'unusable' };
     const correctionCue = hasWorkHubCorrectionCue(source);
     const existingTarget = affirmativeWorkHubExistingCorrectionTarget(source);
+    const stopCue = directWorkHubStopCue(source, literalMask.malformed);
+    const stopTarget = stopCue ? directWorkHubStopTarget(source, false) : undefined;
     const actions = allMatches(masked, EXECUTION_ACTION);
     const execution = literalMask.malformed || naming.kind === 'unusable' || hasDominatingDeliberation(masked)
         ? 'non_executable'
@@ -217,6 +222,11 @@ export function readWorkHubRequestIntent(value) {
             cue: correctionCue,
             ...(existingTarget ? { existingTarget } : {}),
         },
+        stop: {
+            cue: stopCue,
+            imperative: Boolean(stopTarget),
+            ...(stopTarget ? { target: stopTarget } : {}),
+        },
     };
 }
 /** Whether a parsed correction names exactly this Session. */
@@ -270,11 +280,20 @@ function affirmativeWorkHubExistingCorrectionTarget(value) {
     }
     return lastTarget;
 }
-function correctionTargetMatchesSession(target, sessionName) {
-    const normalizedTarget = normalizeCorrectionIdentity(target);
+/**
+ * The one rule for reading a Session name out of a trusted reference.
+ *
+ * It is deliberately action-agnostic: it reports where the name matched and
+ * what text was left over, and says nothing about whether that leftover is
+ * acceptable. Each action's policy owns that question, because the answer
+ * genuinely differs — a stop reference may carry only punctuation after the
+ * name, while a correction may carry a further instruction.
+ */
+export function matchWorkHubSessionName(reference, sessionName) {
+    const normalizedTarget = normalizeCorrectionIdentity(reference);
     const normalizedName = normalizeCorrectionIdentity(sessionName);
     if (!normalizedName)
-        return false;
+        return { kind: 'none' };
     const quotedNames = [
         `"${normalizedName}"`,
         `“${normalizedName}”`,
@@ -285,15 +304,32 @@ function correctionTargetMatchesSession(target, sessionName) {
         .sort((left, right) => right.length - left.length)
         .find((candidate) => normalizedTarget.startsWith(candidate) &&
         !/[\p{L}\p{N}]/u.test(normalizedTarget[candidate.length] ?? ''));
-    if (!matchedName)
-        return false;
+    if (!matchedName) {
+        // A name whose own trailing punctuation the reference dropped still names
+        // it, but nothing may follow: there is no boundary left to trust.
+        return /[.!。！]$/u.test(normalizedName) &&
+            normalizedTarget === normalizedName.replace(/[.!。！]+$/u, '').trim()
+            ? { kind: 'elided_name_punctuation' }
+            : { kind: 'none' };
+    }
     if (matchedName === normalizedName && hasUnsafeUnquotedHardClauseBoundary(sessionName)) {
-        return false;
+        return { kind: 'none' };
     }
-    if (hasUnquotedTerminalWithdrawal(target)) {
+    return { kind: 'named', remainder: normalizedTarget.slice(matchedName.length).trim() };
+}
+/**
+ * The correction policy's tail rule. A correction may name its target and then
+ * say what to do with it, but a withdrawal anywhere in the reference retracts
+ * the whole thing.
+ *
+ * It takes a match rather than a Session name so that a caller which already
+ * resolved candidates through the shared Session Resolver applies exactly this
+ * rule to exactly that recall, instead of matching names a second time.
+ */
+export function workHubCorrectionAdmitsReference(reference, match) {
+    if (match.kind !== 'named' || hasUnquotedTerminalWithdrawal(reference))
         return false;
-    }
-    const remainder = normalizedTarget.slice(matchedName.length).trim();
+    const { remainder } = match;
     if (!remainder || /^(?:instead\s*)?[.!?。！？]?$/iu.test(remainder))
         return true;
     const supplemental = remainder.match(/^[,;，；]\s*(.+)$/u)?.[1]?.trim();
@@ -302,6 +338,36 @@ function correctionTargetMatchesSession(target, sessionName) {
         !/[\r\n,.!?;，。！？；—–]|\b(?:and|then|but|however|actually)\b|(?:然后|随后|但|不过|其实)/iu.test(supplementalBody) &&
         readWorkHubRequestIntent(supplementalBody).execution === 'imperative');
 }
+function correctionTargetMatchesSession(target, sessionName) {
+    return workHubCorrectionAdmitsReference(target, matchWorkHubSessionName(target, sessionName));
+}
+function directWorkHubStopTarget(value, malformedLiteral) {
+    if (malformedLiteral || /[?？]\s*$/u.test(value))
+        return undefined;
+    const match = DIRECT_STOP_REQUEST.exec(value) ?? DIRECT_CHINESE_STOP_REQUEST.exec(value);
+    const rawTarget = match?.[1]?.trim();
+    if (!rawTarget)
+        return undefined;
+    const target = stripMatchingStopQuotes(rawTarget.replace(/[.!。！]+\s*$/u, '').trim());
+    if (!target || UNSAFE_STOP_TARGET.test(target))
+        return undefined;
+    return target;
+}
+function directWorkHubStopCue(value, malformedLiteral) {
+    if (malformedLiteral || /[?？]\s*$/u.test(value))
+        return false;
+    return Boolean(DIRECT_STOP_REQUEST.test(value) || DIRECT_CHINESE_STOP_REQUEST.test(value));
+}
+function stripMatchingStopQuotes(value) {
+    const pairs = new Map([
+        ['"', '"'],
+        ["'", "'"],
+        ['“', '”'],
+        ['‘', '’'],
+    ]);
+    const closer = pairs.get(value[0] ?? '');
+    return closer && value.endsWith(closer) ? value.slice(1, -1).trim() : value;
+}
 function normalizeCorrectionIdentity(value) {
     return value.normalize('NFKC').toLocaleLowerCase().replace(/\s+/gu, ' ').trim();
 }

package/node_modules/@maka/core/dist/workhub-session-resolver.js

@@ -0,0 +1,50 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+import { matchWorkHubSessionName, } from './workhub-creation-intent.js';
+/**
+ * The temporary deterministic baseline: a reference resolves only when it names
+ * one visible Session exactly. Exact display names are conservative retrieval
+ * evidence, not the long-term product boundary, and this implementation exists
+ * to keep the port real while a ranked resolver is built behind it.
+ *
+ * It can be removed once every target-bearing WorkHub action resolves through
+ * this port, the replacement resolver passes the common routing evaluation, and
+ * its rollout retains a tested rollback path.
+ */
+export function createExactNameSessionResolver() {
+    return {
+        resolve({ reference, sessions }) {
+            const candidates = [];
+            for (const session of sessions) {
+                const match = matchWorkHubSessionName(reference.text, session.sessionName);
+                if (match.kind === 'none')
+                    continue;
+                candidates.push({ ref: session.ref, evidence: match });
+            }
+            const [first, ...rest] = candidates;
+            if (!first)
+                return { kind: 'none' };
+            // Exact naming has no score to separate equals by, so more than one match
+            // is ambiguity rather than a ranking a policy could safely act on.
+            if (rest.length > 0)
+                return { kind: 'ambiguous', candidates };
+            return { kind: 'ranked', candidates: [first] };
+        },
+    };
+}

package/node_modules/@maka/core/package.json

@@ -77,6 +77,7 @@
     "./daily-review": "./dist/daily-review.js",
     "./work-board": "./dist/work-board.js",
     "./workhub-creation-intent": "./dist/workhub-creation-intent.js",
+    "./workhub-session-resolver": "./dist/workhub-session-resolver.js",
     "./deep-research": "./dist/deep-research.js",
     "./session-start-mode": "./dist/session-start-mode.js",
     "./long-term-memory": "./dist/long-term-memory.js",
@@ -140,6 +141,7 @@
     "./task-submission-readiness": "./dist/task-submission-readiness.js",
     "./terminal-input": "./dist/terminal-input.js",
     "./terminal-mouse-input": "./dist/terminal-mouse-input.js",
+    "./text-sanitize": "./dist/text-sanitize.js",
     "./tool-activity-args": "./dist/tool-activity-args.js",
     "./tool-quiet-preview": "./dist/tool-quiet-preview.js",
     "./tool-result-record-schema": "./dist/tool-result-record-schema.js",

package/node_modules/@maka/eval/dist/harbor-external-subject.js

@@ -28,6 +28,7 @@ import { decodePreverifiedToolchain, isExternalProfile, } from './toolchain-veri
 import { isInferenceAdmissionEvent } from './provider-admission.js';
 import { DEEPSEEK_V4_FLASH_COST, deriveMetering, } from './provider-metering.js';
 import { removeEvalWebTools } from './provider-web-tool-surface.js';
+import { terminateProcess } from './process-termination.js';
 import { takeRelayResultToken, writeRelayResult } from './relay-result-frame.js';
 const resultToken = takeRelayResultToken();
 // The profile directory this wrapper writes. `dsh` has no environment variable
@@ -277,7 +278,7 @@ let stopped = false;
 const stop = (signal) => {
     stopped = true;
     removeCredential();
-    child?.kill(signal);
+    void terminateProcess(child, signal);
 };
 const terminate = () => stop('SIGTERM');
 const interrupt = () => stop('SIGINT');