maka-agent 0.2.0-dev.23.20260906 → 0.2.0-dev.25.20260908

package/node_modules/@maka/storage/dist/storage-id.js

@@ -0,0 +1,28 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+const SAFE_STORAGE_ID_PATTERN = /^[A-Za-z0-9_-]{1,128}$/;
+/** Returns whether a value can safely be used as a persisted storage identity. */
+export function isSafeStorageId(value) {
+    return typeof value === 'string' && SAFE_STORAGE_ID_PATTERN.test(value);
+}
+/** Throws a TypeError unless the value is a safe persisted storage identity. */
+export function assertSafeStorageId(value, message = 'Storage identity is invalid') {
+    if (!isSafeStorageId(value))
+        throw new TypeError(message);
+}

package/node_modules/@maka/storage/dist/tool-result-archive-evidence.js

@@ -0,0 +1,138 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+import { TOOL_RESULT_ARCHIVE_EVIDENCE_MAX_BYTES as MAX_BYTES, TOOL_RESULT_ARCHIVE_EVIDENCE_MAX_TRANSITIONS as MAX_TRANSITIONS, } from '@maka/core/tool-result-archive-evidence';
+import { assertStorageRootLease, runWithStorageRootLease, } from './root-authority.js';
+import { decodeRuntimeEvent } from '@maka/core/runtime-event';
+import { decodeAgentRunEvent } from '@maka/core/agent-run';
+import { MODEL_PROJECTION_TARGET_SQL as TARGET } from './sqlite-core-execution-schema.js';
+const TRANSITIONS = 'core_agent_run_events INDEXED BY core_model_projection_target';
+const KIND = "event_type = 'model_projection_transition_recorded'";
+// SQLite may parse the containing JSON, but only these reconstruction fields
+// cross into JS or count toward the evidence budget. Raw tool bytes never do.
+const EVENT_EVIDENCE = `CASE WHEN json_valid(payload_json) THEN json_extract(payload_json,
+  '$.id', '$.sessionId', '$.runId', '$.invocationId', '$.turnId', '$.ts', '$.partial',
+  '$.author', '$.role', '$.content.kind', '$.content.id', '$.content.name',
+  '$.content.modelProjection', '$.content.providerExecuted') END`;
+/** Reader-first foundation; no archive writer or fallback is activated by opening it. */
+export async function openToolResultArchiveEvidenceReader(lease) {
+    await assertStorageRootLease(lease, 'interactive', lease.access);
+    const { acquireOperationalStateDatabase } = await import('./operational-state-store.js');
+    await assertStorageRootLease(lease, 'interactive', lease.access);
+    const database = acquireOperationalStateDatabase(lease.canonicalPath, {
+        schemaMigration: lease.access === 'read' ? 'require_current' : 'migrate',
+    });
+    let closed = false;
+    return {
+        close() {
+            if (!closed) {
+                closed = true;
+                database.close();
+            }
+        },
+        async read(input) {
+            const accepted = { ...input };
+            if (closed)
+                return { ok: false, reason: 'unavailable' };
+            try {
+                return await runWithStorageRootLease(lease, 'interactive', lease.access, async () => {
+                    if (closed)
+                        return { ok: false, reason: 'unavailable' };
+                    return database.transaction('read', () => {
+                        const db = database.database;
+                        const { sessionId, runtimeEventId } = accepted;
+                        const eventSize = db
+                            .prepare(`SELECT length(CAST(${EVENT_EVIDENCE} AS BLOB)) AS bytes FROM runtime_events WHERE event_id = ? AND session_id = ?`)
+                            .get(runtimeEventId, sessionId);
+                        if (!eventSize)
+                            return { ok: false, reason: 'not_found' };
+                        if (eventSize.bytes === null)
+                            return { ok: false, reason: 'corrupt' };
+                        // An unscoped unreadable transition prevents proving completeness.
+                        if (db
+                            .prepare(`SELECT 1 FROM ${TRANSITIONS} WHERE ${KIND} AND session_id = ? AND ${TARGET} IS NULL LIMIT 1`)
+                            .get(sessionId))
+                            return { ok: false, reason: 'corrupt' };
+                        const sizes = db
+                            .prepare(`SELECT run_id, sequence, length(CAST(record_json AS BLOB)) AS bytes FROM ${TRANSITIONS}
+              WHERE ${KIND} AND session_id = ? AND ${TARGET} = ? LIMIT ?`)
+                            .all(sessionId, runtimeEventId, MAX_TRANSITIONS + 1);
+                        if (sizes.length > MAX_TRANSITIONS)
+                            return { ok: false, reason: 'too_large' };
+                        let bytes = Number(eventSize.bytes);
+                        for (const row of sizes)
+                            bytes += Number(row.bytes);
+                        if (!Number.isSafeInteger(bytes) || bytes < 0 || bytes > MAX_BYTES)
+                            return { ok: false, reason: 'too_large' };
+                        const raw = db
+                            .prepare(`SELECT ${EVENT_EVIDENCE} AS evidence_json FROM runtime_events WHERE event_id = ? AND session_id = ?`)
+                            .get(runtimeEventId, sessionId);
+                        let event;
+                        try {
+                            const [id, sessionId, runId, invocationId, turnId, ts, partial, author, role, kind, callId, name, modelProjection, providerExecuted,] = JSON.parse(String(raw?.evidence_json));
+                            event = decodeRuntimeEvent({
+                                id,
+                                sessionId,
+                                runId,
+                                invocationId,
+                                turnId,
+                                ts,
+                                partial,
+                                author,
+                                role,
+                                content: {
+                                    kind,
+                                    id: callId,
+                                    name,
+                                    result: null,
+                                    ...(modelProjection === null ? {} : { modelProjection }),
+                                    ...(providerExecuted === null ? {} : { providerExecuted }),
+                                },
+                            });
+                        }
+                        catch {
+                            return { ok: false, reason: 'corrupt' };
+                        }
+                        if (event.sessionId !== sessionId || event.id !== runtimeEventId)
+                            return { ok: false, reason: 'corrupt' };
+                        const read = db.prepare('SELECT record_json FROM core_agent_run_events WHERE session_id = ? AND run_id = ? AND sequence = ?');
+                        const transitions = [];
+                        for (const row of sizes) {
+                            const stored = read.get(sessionId, row.run_id, row.sequence);
+                            let transition;
+                            try {
+                                transition = decodeAgentRunEvent(JSON.parse(String(stored?.record_json)));
+                            }
+                            catch {
+                                return { ok: false, reason: 'corrupt' };
+                            }
+                            if (transition.sessionId !== sessionId)
+                                return { ok: false, reason: 'corrupt' };
+                            transitions.push(transition);
+                        }
+                        return { ok: true, event, transitions, storedBytes: bytes };
+                    });
+                });
+            }
+            catch {
+                // Failure to acquire/read the store is not evidence that its records are invalid.
+                return { ok: false, reason: 'unavailable' };
+            }
+        },
+    };
+}

package/node_modules/@maka/storage/dist/workspace-identity.js

@@ -16,12 +16,11 @@
  * specific language governing permissions and limitations
  * under the License.
  */
-import { execFile } from 'node:child_process';
 import { randomUUID } from 'node:crypto';
 import { constants as fsConstants } from 'node:fs';
 import { lstat, open, realpath, stat } from 'node:fs/promises';
 import { isAbsolute, join, normalize, parse, resolve } from 'node:path';
-import { promisify } from 'node:util';
+import { execGitText } from './git-exec.js';
 import { hasEnclosingGitEntry } from './git-entry.js';
 import { publishMarkerFile, readBoundedMarkerFile } from './marker-file.js';
 export const WORKSPACE_MARKER_FILE = '.maka-workspace.json';
@@ -29,7 +28,6 @@ export const WORKSPACE_MARKER_SCHEMA_VERSION = 1;
 export const WORKSPACE_IDENTITY_PREFIX = 'workspace:v1:';
 const MAX_WORKSPACE_MARKER_BYTES = 4_096;
 const MAX_GIT_EXCLUDE_BYTES = 1024 * 1024;
-const execFileAsync = promisify(execFile);
 export class WorkspaceIdentityError extends Error {
     code;
     constructor(code, message, options) {
@@ -101,18 +99,7 @@ async function createWorkspaceMarker(snapshot, workspaceId) {
 async function ensureWorkspaceMarkerIgnored(workspacePath) {
     if (!(await hasEnclosingGitEntry(workspacePath)))
         return;
-    const env = { ...process.env, GIT_OPTIONAL_LOCKS: '0' };
-    delete env.GIT_DIR;
-    delete env.GIT_WORK_TREE;
-    delete env.GIT_INDEX_FILE;
-    delete env.GIT_COMMON_DIR;
-    const { stdout } = await execFileAsync('git', ['-C', workspacePath, 'rev-parse', '--path-format=absolute', '--git-path', 'info/exclude'], {
-        env,
-        encoding: 'utf8',
-        maxBuffer: 64 * 1024,
-        timeout: 3_000,
-        windowsHide: true,
-    });
+    const stdout = await execGitText(workspacePath, ['rev-parse', '--path-format=absolute', '--git-path', 'info/exclude'], { maxBuffer: 64 * 1024, timeoutMs: 3_000 });
     const excludePath = stdout.trim();
     if (!isAbsolute(excludePath)) {
         throw new Error(`Git returned a non-absolute exclude path: ${excludePath}`);

package/node_modules/@maka/storage/dist/workspace-version-authority-internal.js

@@ -17,7 +17,7 @@
  * under the License.
  */
 const workspaceBaselineAuthorityWriters = new WeakMap();
-export function registerWorkspaceBaselineAuthorityWriterInternal(store, writer, successorWriter, terminalWriter, bindStorageRoot, readHead, readActiveManagedMutation) {
+export function registerWorkspaceBaselineAuthorityWriterInternal(store, writer, successorWriter, terminalWriter, bindStorageRoot, readActiveManagedMutation) {
     if (workspaceBaselineAuthorityWriters.has(store)) {
         throw new Error('Workspace baseline authority writer is already registered');
     }
@@ -25,7 +25,6 @@ export function registerWorkspaceBaselineAuthorityWriterInternal(store, writer,
         writer,
         successorWriter,
         terminalWriter,
-        readHead,
         readActiveManagedMutation,
         bindStorageRoot,
     });
@@ -36,12 +35,6 @@ export function readActiveManagedMutationInternal(store, workspaceInstanceId) {
         throw new Error('Managed mutation reservation reader is unavailable');
     return registration.readActiveManagedMutation(workspaceInstanceId);
 }
-export function readWorkspaceHeadInternal(store, workspaceId, workspaceEpochId) {
-    const registration = workspaceBaselineAuthorityWriters.get(store);
-    if (!registration)
-        throw new Error('Workspace baseline authority reader is unavailable');
-    return registration.readHead(workspaceId, workspaceEpochId);
-}
 /**
  * Storage-internal authority seam. This module is deliberately absent from the
  * @maka/storage package exports. The schema-9 reader, migration, and projection

package/node_modules/@maka/storage/package.json

@@ -10,6 +10,7 @@
     "./artifact-stores": "./dist/artifact-stores.js",
     "./config-transfer": "./dist/config-transfer.js",
     "./context-offload-store": "./dist/context-offload-store.js",
+    "./tool-result-archive-evidence": "./dist/tool-result-archive-evidence.js",
     "./credential-store": "./dist/credential-store.js",
     "./daily-review-authority": "./dist/daily-review-authority.js",
     "./deep-research-authority": "./dist/deep-research-authority.js",
@@ -45,6 +46,7 @@
     "./session-bundle-policy": "./dist/session-bundle-policy.js",
     "./session-copy-cleanup": "./dist/session-copy-cleanup.js",
     "./session-todo-authority": "./dist/session-todo-authority.js",
+    "./session-message-projection": "./dist/session-message-projection.js",
     "./session-store": "./dist/session-store.js",
     "./settings-store": "./dist/settings-store.js",
     "./shell-run-authority": "./dist/shell-run-authority.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "maka-agent",
-  "version": "0.2.0-dev.23.20260906",
+  "version": "0.2.0-dev.25.20260908",
   "description": "Apache Maka (Incubating) developer snapshot; not an Apache release.",
   "license": "Apache-2.0",
   "type": "module",