maka-agent 0.2.0-dev.24.20260907 → 0.2.0-dev.25.20260908

package/dist/tui-copy-catalog.js

@@ -17,6 +17,64 @@
  * under the License.
  */
 export const TUI_COPY_RESOURCES = {
+    todo: {
+        en: {
+            title: 'Current Todo',
+            markedComplete: 'marked complete',
+            open: '/todo to view',
+            usage: 'Usage: /todo',
+            progress: 'Todo',
+            unavailable: 'Todo unavailable',
+            empty: 'No Todo items',
+            loading: 'Loading Todo…',
+            hint: '↑↓/PgUp/PgDn scroll · Home/End · Esc close',
+        },
+        'zh-CN': {
+            title: '当前待办',
+            markedComplete: '标记完成',
+            open: '/todo 查看',
+            usage: '用法：/todo',
+            progress: '待办',
+            unavailable: '待办不可用',
+            empty: '暂无待办',
+            loading: '正在加载待办…',
+            hint: '↑↓/PgUp/PgDn 滚动 · Home/End · Esc 关闭',
+        },
+        'zh-TW': {
+            title: '目前待辦',
+            markedComplete: '標記完成',
+            open: '/todo 查看',
+            usage: '用法：/todo',
+            progress: '待辦',
+            unavailable: '待辦不可用',
+            empty: '沒有待辦',
+            loading: '正在載入待辦…',
+            hint: '↑↓/PgUp/PgDn 捲動 · Home/End · Esc 關閉',
+        },
+    },
+    'transcript-reader': {
+        en: {
+            title: 'DETAILED TRANSCRIPT',
+            scope: 'loaded history',
+            hint: 'Esc/Ctrl+O close · Ctrl+E details · / search · ↑↓/PgUp/PgDn · Home/End',
+            matches: 'matches in displayed text',
+            back: 'return',
+        },
+        'zh-CN': {
+            title: '详细记录',
+            scope: '已加载历史',
+            hint: 'Esc/Ctrl+O 返回 · Ctrl+E 详情 · / 搜索 · ↑↓/PgUp/PgDn · Home/End',
+            matches: '处匹配（当前显示内容）',
+            back: '回到原位置',
+        },
+        'zh-TW': {
+            title: '詳細記錄',
+            scope: '已載入歷史',
+            hint: 'Esc/Ctrl+O 返回 · Ctrl+E 詳情 · / 搜尋 · ↑↓/PgUp/PgDn · Home/End',
+            matches: '處符合（目前顯示內容）',
+            back: '回到原位置',
+        },
+    },
     'host-owner': {
         en: {
             unavailable: 'Runtime Host owner controls are unavailable.',
@@ -566,6 +624,11 @@ export const TUI_COPY_RESOURCES = {
             modelSearchHint: 'Search models / providers / connections · ↑↓ select · Enter confirm · Esc cancel',
             searchLabel: 'Search',
             noMatchingModels: 'No matching models',
+            resumeSessionTitle: 'Resume Session',
+            sessionScopeCurrent: 'Current',
+            sessionScopeAll: 'All',
+            sessionSearchHint: 'Search name / id / path / model / connection · Tab scope · ↑↓ select · Enter open · Esc close',
+            noMatchingSessions: 'No matching sessions',
             selectPickerHint: '↑↓ select · Enter confirm · Esc close',
             providerConfigured: 'configured',
             addAccount: 'add account',
@@ -656,6 +719,11 @@ export const TUI_COPY_RESOURCES = {
             modelSearchHint: '搜索模型 / 服务商 / 连接 · ↑↓ 选择 · Enter 确认 · Esc 取消',
             searchLabel: '搜索',
             noMatchingModels: '没有匹配的模型',
+            resumeSessionTitle: '恢复会话',
+            sessionScopeCurrent: '当前目录',
+            sessionScopeAll: '全部',
+            sessionSearchHint: '搜索名称 / ID / 路径 / 模型 / 连接 · Tab 切换范围 · ↑↓ 选择 · Enter 打开 · Esc 关闭',
+            noMatchingSessions: '没有匹配的会话',
             selectPickerHint: '↑↓ 选择 · Enter 确认 · Esc 关闭',
             providerConfigured: '已设置',
             addAccount: '添加账号',
@@ -745,6 +813,11 @@ export const TUI_COPY_RESOURCES = {
             modelSearchHint: '搜尋模型 / 服務商 / 連線 · ↑↓ 選擇 · Enter 確認 · Esc 取消',
             searchLabel: '搜尋',
             noMatchingModels: '沒有符合的模型',
+            resumeSessionTitle: '恢復會話',
+            sessionScopeCurrent: '目前目錄',
+            sessionScopeAll: '全部',
+            sessionSearchHint: '搜尋名稱 / ID / 路徑 / 模型 / 連線 · Tab 切換範圍 · ↑↓ 選取 · Enter 開啟 · Esc 關閉',
+            noMatchingSessions: '沒有符合的會話',
             selectPickerHint: '↑↓ 選擇 · Enter 確認 · Esc 關閉',
             providerConfigured: '已設定',
             addAccount: '新增帳號',
@@ -863,6 +936,7 @@ export const TUI_COPY_RESOURCES = {
                 skill: 'Invoke a skill (or type /skill:<name> inline)',
                 swarm: 'Show, enable, disable, or run one Swarm turn',
                 thinking: 'Set thinking level',
+                todo: 'Show the current session Todo list',
                 transcript: 'Browse the full transcript inside Maka',
             },
             help: {
@@ -870,7 +944,7 @@ export const TUI_COPY_RESOURCES = {
                 userCommand: '  !<command> — run one shell command visible only to you',
                 keybindingsHeading: 'Keybindings',
                 keybindings: [
-                    '  Ctrl+O — expand or collapse all tool output',
+                    '  Ctrl+O — open detailed transcript (Ctrl+E toggles details inside)',
                     '  Ctrl+T — expand or collapse all thinking in view',
                     '  Scroll the transcript with your terminal or trackpad',
                     '  Enter (during a turn) — steer: inject a message into the running turn',
@@ -916,6 +990,7 @@ export const TUI_COPY_RESOURCES = {
                 skill: '调用 Skill（也可直接输入 /skill:<name>）',
                 swarm: '查看、启用、停用 Swarm 模式，或执行一次 Swarm 任务',
                 thinking: '设置思考级别',
+                todo: '查看当前会话待办清单',
                 transcript: '在 Maka 内浏览完整对话记录',
             },
             help: {
@@ -923,7 +998,7 @@ export const TUI_COPY_RESOURCES = {
                 userCommand: '  !<command> — 执行一次仅用户可见的 shell 命令',
                 keybindingsHeading: '快捷键',
                 keybindings: [
-                    '  Ctrl+O — 展开或折叠所有工具输出',
+                    '  Ctrl+O — 打开详细记录（其中 Ctrl+E 切换详情）',
                     '  Ctrl+T — 展开或折叠视图中的所有思考块',
                     '  使用终端或触控板滚动对话记录',
                     '  Enter（任务运行中）— 将消息注入当前任务',
@@ -969,6 +1044,7 @@ export const TUI_COPY_RESOURCES = {
                 skill: '呼叫 Skill（也可直接輸入 /skill:<name>）',
                 swarm: '檢視、啟用、停用 Swarm 模式，或執行一次 Swarm 任務',
                 thinking: '設定思考級別',
+                todo: '檢視目前會話待辦清單',
                 transcript: '在 Maka 內瀏覽完整對話記錄',
             },
             help: {
@@ -976,7 +1052,7 @@ export const TUI_COPY_RESOURCES = {
                 userCommand: '  !<command> — 執行一次僅使用者可見的 shell 命令',
                 keybindingsHeading: '快捷鍵',
                 keybindings: [
-                    '  Ctrl+O — 展開或摺疊所有工具輸出',
+                    '  Ctrl+O — 開啟詳細記錄（其中 Ctrl+E 切換詳情）',
                     '  Ctrl+T — 展開或摺疊檢視中的所有思考區塊',
                     '  使用終端機或觸控板捲動對話記錄',
                     '  Enter（任務執行中）— 將訊息注入目前任務',

package/node_modules/@maka/core/dist/agent-run.js

@@ -65,6 +65,7 @@ export const AGENT_RUN_EVENT_TYPES = [
     'sandbox_escalation_applied',
     'sandbox_escalation_failed',
     'sandbox_denial_detected',
+    'request_composition_resolved',
     'model_call_attempt_recorded',
     'history_compact_checkpoint_recorded',
     'model_projection_transition_recorded',

package/node_modules/@maka/core/dist/attachments.js

@@ -251,3 +251,6 @@ export function attachmentKindFromMimeType(mimeType, fileName) {
     }
     return 'other';
 }
+export function attachmentIngestBlocked(code) {
+    return new Error(`attachment_ingest:${code}`);
+}

package/node_modules/@maka/core/dist/canonical-json.js

@@ -0,0 +1,27 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+/**
+ * Neutral entrypoint for the strict, key-sorted JSON serializer shared by
+ * identity and persistence authorities.
+ *
+ * The implementation remains in `tool-args-identity` so its existing import
+ * path and wire behavior stay compatible while other packages use a domain-
+ * neutral name.
+ */
+export { stableJsonStringify } from './tool-args-identity.js';

package/node_modules/@maka/core/dist/capabilities.js

@@ -75,6 +75,41 @@ export const CAPABILITY_READINESS_STATES = [
     'degraded',
     'paused',
 ];
+/**
+ * Stable machine codes for capability and OS-permission reasons. Producers
+ * emit these instead of locale-bound prose; presenters own the code→copy map
+ * per locale. Bot capabilities pass their bridge status reasons through as-is
+ * (`rate-limited`, `gateway-closed-4004`, …), so signal `reason` fields stay
+ * `string` — this union types the desktop producers and the presenter maps.
+ */
+export const CAPABILITY_REASON_CODES = [
+    'disabled',
+    'platform_credentials_missing',
+    'macos_tcc_only',
+    'apple_events_tcc_status_unavailable',
+    'cu_artifact_missing',
+    'cu_backend_status',
+    'cu_backend_unavailable',
+    'cu_executor_undistributable',
+    'cu_executor_stopped',
+    'cu_executor_start_failed',
+    'cu_executor_recovering',
+    'cu_executor_ready',
+    'cu_executor_lazy_start',
+    'activity_recorder_partial',
+    'activity_recorder_probe_hint',
+    'memory_partial',
+    'memory_no_probe',
+    'accessibility_status_ambiguous',
+    'screen_recording_status_mac_only',
+    'notifications_status_unreadable_macos',
+    'notifications_status_unreadable',
+    'notifications_unsupported',
+    'permission_probe_failed',
+];
+export function isCapabilityReasonCode(value) {
+    return (typeof value === 'string' && CAPABILITY_REASON_CODES.includes(value));
+}
 export function isOsPermissionState(value) {
     return typeof value === 'string' && OS_PERMISSION_STATES.includes(value);
 }

package/node_modules/@maka/core/dist/computer-use.js

@@ -81,7 +81,6 @@ export function isComputerUseErrorCode(value) {
     return (typeof value === 'string' && COMPUTER_USE_ERROR_CODES.includes(value));
 }
 export const CU_ACTION_TYPES = ['screenshot', 'type', 'key', 'wait'];
-export const COMPUTER_USE_ACTION_TYPES = CU_ACTION_TYPES;
 /**
  * The semantic actions, which name an element rather than a pixel. They are not
  * in `CU_ACTION_TYPES` because they are not `CuAction`s — they are dispatched

package/node_modules/@maka/core/dist/display-redaction.js

@@ -28,6 +28,24 @@ const PATTERNS = [
         streamingTerminator: /[\s"'<>]/,
         streamingValueGroup: 3,
     },
+    // URL userinfo:  https://user:pass@host  /  https://token@host
+    // Structural — any authority that contains `@` is credential-bearing, so
+    // this does not depend on a provider prefix list. Runs before the query
+    // rule so only the userinfo is replaced and host/path survive.
+    // Character class matches streamingTerminator so a bare `https://host`
+    // cannot swallow later `@` across whitespace/quotes/angle brackets.
+    // Known boundary: punctuation like commas can still join a bare URL to a
+    // later `@`; a proper fix would restrict userinfo to the RFC 3986 set.
+    // http(s) only for now. Streaming cannot recognize userinfo before `@`
+    // arrives (`https://user:pa` stays clear until then); tightening earlier
+    // would eat `https://host:8080/`.
+    {
+        label: 'url userinfo',
+        regex: /(https?:\/\/)([^\s"'<>/?#]*@)/gi,
+        replacement: (m) => `${m[1]}<redacted>@`,
+        streamingTerminator: /[/?#\s"'<>]/,
+        streamingValueGroup: 2,
+    },
     // URL query secrets:  ?key=[redacted]  ?token=[redacted]  ?api_key=[redacted]  &access_token=[redacted]
     // (runs before the api-key-header rule so the URL form isn't mangled.)
     {

package/node_modules/@maka/core/dist/llm-connections.js

@@ -228,6 +228,19 @@ export function reconcileConnectionAfterModelFetch(connection, models, options)
     const previousEnabled = [
         ...new Set(connectionEnabledModelIds(connection).map((id) => supersededModelId(id, live, options?.aliases))),
     ];
+    if (options?.authoritative) {
+        // The first account-scoped fetch replaces the provider fallback guess: no
+        // user chose those bootstrap ids, and every usable model should be offered.
+        // Later refreshes preserve explicit user choices only while they remain in
+        // the account catalog; newly introduced models stay opt-in.
+        const enabledModelIds = connection.hasModelInventory
+            ? previousEnabled.filter((id) => live.has(id))
+            : liveIds;
+        const defaultModel = enabledModelIds.includes(previousDefault)
+            ? previousDefault
+            : (enabledModelIds[0] ?? '');
+        return { defaultModel, enabledModelIds };
+    }
     // Seed a first choice only for a connection that has never had a list to
     // pick from: four providers ship no `fallbackModels`, so for them discovery
     // is the only place a first default can come from.

package/node_modules/@maka/core/dist/model-call-attempt.js

@@ -83,6 +83,7 @@ const MODEL_CALL_ATTEMPT_SHAPE = defineObjectShape()([
 ], [
     'connectionSlug',
     'historyCompactRoute',
+    'requestCompositionId',
     'contextWindow',
     'captureArtifactId',
     'promptComposition',
@@ -294,6 +295,7 @@ export function decodeModelCallAttempt(value) {
         isNonEmptyString(value.runId) &&
         isNonEmptyString(value.turnId) &&
         isNonNegativeInteger(value.step) &&
+        isOptionalString(value.requestCompositionId) &&
         isNonNegativeInteger(value.attempt) &&
         MODEL_CALL_KINDS.includes(value.callKind) &&
         (value.historyCompactRoute === undefined ||

package/node_modules/@maka/core/dist/model-metadata.js

@@ -48,6 +48,10 @@ const GENERATED_METADATA_PROVIDER_ALIASES = {
 function generatedMetadataProviderType(providerType) {
     return GENERATED_METADATA_PROVIDER_ALIASES[providerType] ?? providerType;
 }
+/** Whether discovery is the complete usable model catalog for this account. */
+export function providerReportsCompleteModelCatalog(providerType) {
+    return providerType === 'github-copilot';
+}
 /**
  * Whether the active metadata describes this model at all. `lookupModelMetadata`
  * answers "no" with an empty object, and callers were reading that sentinel by

package/node_modules/@maka/core/dist/redaction.js

@@ -53,6 +53,7 @@ export function redactSecrets(value) {
 }
 function redactTextSecrets(value) {
     let next = value;
+    next = redactUrlUserinfoSecrets(next);
     next = redactUrlQuerySecrets(next);
     next = next.replace(QUOTED_SECRET_KEY_VALUE_PATTERN, (match, prefix, key) => isSensitiveKey(key) ? `${prefix}[redacted]` : match);
     next = next.replace(AUTHORIZATION_HEADER_PATTERN, (_match, boundary, prefix) => `${boundary}${prefix}[redacted]`);
@@ -134,6 +135,17 @@ function redactJsonValue(value) {
     }
     return { value: next, changed };
 }
+function redactUrlUserinfoSecrets(value) {
+    // Authority runs through the first `/`, `?`, `#`, whitespace, quote, or
+    // angle bracket. If it contains `@`, everything from the host-start through
+    // the last `@` is userinfo. The class matches display-redaction's
+    // streamingTerminator so a bare `https://host` followed later by an
+    // email/`@package` (including across JSON quotes) cannot swallow the gap.
+    // Known boundary: punctuation like commas can still join a bare URL to a
+    // later `@` into one fake credentialed match; a proper fix would restrict
+    // userinfo to the RFC 3986 set instead of exclusion. http(s) only for now.
+    return value.replace(/(https?:\/\/)[^\s"'<>/?#]*@/gi, '$1[redacted]@');
+}
 function redactUrlQuerySecrets(value) {
     return value.replace(/([?&])([^=\s&?#]+)=([^&\s#]*)/g, (match, sep, key) => {
         if (!isSensitiveKey(key))
@@ -191,6 +203,10 @@ export function classifyGeneralizedError(error) {
         return 'provider_error';
     if (lower.includes('network') ||
         lower.includes('fetch') ||
+        // Chromium network stack error codes (`net::ERR_CONNECTION_RESET`,
+        // `net::ERR_NAME_NOT_RESOLVED`, ...) never match the Node errno
+        // spellings below.
+        lower.includes('net::err') ||
         lower.includes('econn') ||
         lower.includes('enotfound'))
         return 'network_error';
@@ -231,3 +247,22 @@ export function generalizedErrorMessage(error, fallback = 'Operation failed') {
 export function isAuthenticationErrorText(message) {
     return message.replace(/\bauthorit\w*/g, '').includes('auth');
 }
+const reportedFailures = new WeakSet();
+/** Redacted diagnostics channel for unexpected operation failures. Copy
+ * catalogs live here (bare-importable) because a depended-on copy catalog may
+ * only hold bare package runtime imports. */
+export function reportUnexpectedOperation(scope, error) {
+    // One failure, one diagnostic: a rejection formatted again by an outer layer
+    // is the same defect, not a second one.
+    if (typeof error === 'object' && error !== null) {
+        if (reportedFailures.has(error))
+            return;
+        reportedFailures.add(error);
+    }
+    const detail = error instanceof Error ? (error.stack ?? `${error.name}: ${error.message}`) : String(error);
+    console.error(`[${scope}] operation failed:`, redactSecrets(detail));
+}
+export function unexpectedOperationFallback(error, fallback, scope) {
+    reportUnexpectedOperation(scope, error);
+    return fallback;
+}

package/node_modules/@maka/core/dist/run-composition.js

@@ -18,6 +18,12 @@
  */
 import { defineObjectShape, hasExactShape, isRecord } from './record-schema.js';
 export const RUN_COMPOSITION_SCHEMA_VERSION = 1;
+export const REQUEST_COMPOSITION_SCHEMA_VERSION = 1;
+// Composition evidence is exact: reject an over-bound provider surface rather
+// than silently truncating the resolved snapshot.
+export const COMPOSITION_MAX_TOOLS = 256;
+export const COMPOSITION_MAX_TOOL_NAME_LENGTH = 128;
+export const REQUEST_COMPOSITION_MAX_TOOL_DESCRIPTION_LENGTH = 16_384;
 const RUN_COMPOSITION_SHAPE = defineObjectShape()([
     'schemaVersion',
     'composerId',
@@ -30,6 +36,20 @@ const RUN_COMPOSITION_SHAPE = defineObjectShape()([
     'toolNames',
     'contextWindow',
 ], []);
+const REQUEST_COMPOSITION_SHAPE = defineObjectShape()([
+    'schemaVersion',
+    'compositionId',
+    'step',
+    'reason',
+    'sourceRevisions',
+    'systemPromptHash',
+    'toolCatalogHash',
+    'toolAvailabilityHash',
+    'providerOptionsHash',
+    'toolNames',
+    'toolSchemas',
+], []);
+const REQUEST_COMPOSITION_TOOL_SCHEMA_SHAPE = defineObjectShape()(['name', 'description', 'inputSchema'], ['providerTool']);
 const ID_PATTERN = /^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$/;
 const HASH_PATTERN = /^sha256:[a-f0-9]{64}$/;
 const SOURCE_REVISION_SHAPE = defineObjectShape()(['id', 'revision'], []);
@@ -64,6 +84,41 @@ export function createRunCompositionSnapshot(input) {
         toolNames: [...input.toolNames].sort(compareExactString),
     });
 }
+export function createRequestCompositionSnapshot(input, reason) {
+    return decodeRequestCompositionSnapshot({
+        schemaVersion: REQUEST_COMPOSITION_SCHEMA_VERSION,
+        ...input,
+        reason,
+        sourceRevisions: [...input.sourceRevisions].sort((left, right) => compareExactString(left.id, right.id)),
+        toolNames: [...input.toolNames].sort(compareExactString),
+        toolSchemas: [...input.toolSchemas].sort((left, right) => compareExactString(left.name, right.name)),
+    });
+}
+export function decodeRequestCompositionSnapshot(value) {
+    if (!isRecord(value) || !hasExactShape(value, REQUEST_COMPOSITION_SHAPE)) {
+        throw new Error('Invalid Request Composition snapshot schema');
+    }
+    const valid = value.schemaVersion === REQUEST_COMPOSITION_SCHEMA_VERSION &&
+        boundedString(value.compositionId, 128) &&
+        Number.isSafeInteger(value.step) &&
+        value.step >= 0 &&
+        (value.reason === 'initial' || value.reason === 'change') &&
+        canonicalSourceRevisions(value.sourceRevisions) &&
+        hash(value.systemPromptHash) &&
+        hash(value.toolCatalogHash) &&
+        hash(value.toolAvailabilityHash) &&
+        hash(value.providerOptionsHash) &&
+        canonicalToolNames(value.toolNames) &&
+        canonicalToolSchemas(value.toolSchemas);
+    if (!valid)
+        throw new Error('Invalid Request Composition snapshot schema');
+    return Object.freeze({
+        ...value,
+        sourceRevisions: Object.freeze(value.sourceRevisions.map((source) => Object.freeze({ ...source }))),
+        toolNames: Object.freeze([...value.toolNames]),
+        toolSchemas: Object.freeze(value.toolSchemas.map((schema) => Object.freeze(structuredClone(schema)))),
+    });
+}
 function compareExactString(left, right) {
     return left < right ? -1 : left > right ? 1 : 0;
 }
@@ -84,16 +139,36 @@ function canonicalSourceRevisions(value) {
     return true;
 }
 function canonicalToolNames(value) {
-    if (!Array.isArray(value) || value.length > 256)
+    if (!Array.isArray(value) || value.length > COMPOSITION_MAX_TOOLS)
         return false;
     let previous;
     for (const name of value) {
-        if (!boundedString(name, 128) || (previous !== undefined && previous >= name))
+        if (!boundedString(name, COMPOSITION_MAX_TOOL_NAME_LENGTH) ||
+            (previous !== undefined && previous >= name)) {
             return false;
+        }
         previous = name;
     }
     return true;
 }
+function canonicalToolSchemas(value) {
+    if (!Array.isArray(value) || value.length > COMPOSITION_MAX_TOOLS)
+        return false;
+    let previous;
+    for (const schema of value) {
+        if (!isRecord(schema) ||
+            !hasExactShape(schema, REQUEST_COMPOSITION_TOOL_SCHEMA_SHAPE) ||
+            !boundedString(schema.name, COMPOSITION_MAX_TOOL_NAME_LENGTH) ||
+            !boundedString(schema.description, REQUEST_COMPOSITION_MAX_TOOL_DESCRIPTION_LENGTH) ||
+            !isRecord(schema.inputSchema) ||
+            (schema.providerTool !== undefined && !isRecord(schema.providerTool)) ||
+            (previous !== undefined && previous >= schema.name)) {
+            return false;
+        }
+        previous = schema.name;
+    }
+    return true;
+}
 function hash(value) {
     return typeof value === 'string' && HASH_PATTERN.test(value);
 }

package/node_modules/@maka/core/dist/session.js

@@ -18,7 +18,7 @@
  */
 import { MODEL_FAILURE_MESSAGE_MAX_BYTES, isModelRetryDecision, } from './model-failure.js';
 import { decodeMessageContent, TOOL_ACTIVITY_KINDS, } from './events.js';
-import { isToolCategory, } from './permission.js';
+import { isPermissionMode, isToolCategory, } from './permission.js';
 import { defineObjectShape, hasExactShape, isFiniteNumber, isOptionalString, isRecord, pickShape, } from './record-schema.js';
 import { isPermissionDecisionFields } from './interaction-record-schema.js';
 import { isTokenUsageFields } from './usage-record-schema.js';
@@ -283,6 +283,19 @@ export function isUserVisibleSessionSystemNote(kind) {
 export const WORKHUB_COORDINATION_RECORD_SCHEMA_VERSION = 1;
 export const WORKHUB_COORDINATION_REPLACEMENT_SCHEMA_VERSION = 2;
 export const WORKHUB_COORDINATION_STOP_SCHEMA_VERSION = 3;
+export function isWorkHubCreateDefaults(value) {
+    if (!isRecord(value) ||
+        Object.keys(value).some((key) => key !== 'model' && key !== 'permissionMode'))
+        return false;
+    if (value.permissionMode !== undefined && !isPermissionMode(value.permissionMode))
+        return false;
+    if (value.model === undefined)
+        return true;
+    const model = value.model;
+    return (isRecord(model) &&
+        Object.keys(model).length === 3 &&
+        ['llmConnectionId', 'llmConnectionSlug', 'model'].every((key) => typeof model[key] === 'string' && model[key].trim().length > 0 && model[key].length <= 512));
+}
 function isWorkHubDelegationStopResolution(outcome, targetTurnId) {
     const hasTargetTurnId = typeof targetTurnId === 'string' && targetTurnId.length > 0;
     if (outcome === 'stop_delivered' || outcome === 'not_owned')
@@ -405,7 +418,7 @@ const WORKHUB_DELEGATION_ASSIGNED_MESSAGE_SHAPE = defineObjectShape()([
     'targetTurnId',
     'targetMessageId',
     'targetSessionName',
-], ['create', 'steered', 'replacesActionId', 'replacesDelegationId']);
+], ['attachments', 'create', 'steered', 'replacesActionId', 'replacesDelegationId']);
 const WORKHUB_DELEGATION_REPLACEMENT_REQUESTED_MESSAGE_SHAPE = defineObjectShape()([
     'type',
     'id',
@@ -424,7 +437,7 @@ const WORKHUB_DELEGATION_REPLACEMENT_REQUESTED_MESSAGE_SHAPE = defineObjectShape
     'replacedTargetSessionId',
     'replacedTargetMessageId',
     'targetSessionName',
-], ['create']);
+], ['attachments', 'create']);
 const WORKHUB_DELEGATION_SUPERSEDED_MESSAGE_SHAPE = defineObjectShape()([
     'type',
     'id',
@@ -486,7 +499,7 @@ const WORKHUB_DELEGATION_STOP_RESOLVED_MESSAGE_SHAPE = defineObjectShape()([
     'targetSessionId',
     'outcome',
 ], ['targetTurnId']);
-const WORKHUB_DELEGATION_CREATE_SHAPE = defineObjectShape()(['title', 'workspace'], []);
+const WORKHUB_DELEGATION_CREATE_SHAPE = defineObjectShape()(['title', 'workspace'], ['defaults']);
 const WORKHUB_DELEGATION_PROJECT_WORKSPACE_SHAPE = defineObjectShape()(['kind', 'projectId'], []);
 const WORKHUB_DELEGATION_HOST_PATH_WORKSPACE_SHAPE = defineObjectShape()(['kind', 'path'], []);
 const SYSTEM_NOTE_MESSAGE_SHAPE = defineObjectShape()(['type', 'id', 'ts', 'kind'], ['turnId', 'data']);
@@ -694,6 +707,7 @@ function isWorkHubCoordinationMessage(message) {
         typeof message.targetSessionId === 'string' &&
         typeof message.userText === 'string' &&
         message.userText.trim().length > 0 &&
+        isWorkHubMessageAttachments(message.attachments) &&
         ((message.disposition === 'delegate_existing' && message.create === undefined) ||
             (message.disposition === 'create_new' && isWorkHubDelegationCreateSpec(message.create))) &&
         (message.disposition === 'delegate_existing' || message.disposition === 'create_new');
@@ -739,9 +753,21 @@ function isWorkHubActionIdentity(message) {
         message.coordinationTurnId.length > 0 &&
         message.turnId === message.coordinationTurnId);
 }
+function isWorkHubMessageAttachments(value) {
+    if (value === undefined)
+        return true;
+    try {
+        decodeMessageContent({ text: '', attachments: value });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
 function isWorkHubDelegationCreateSpec(value) {
     if (!isRecord(value) ||
         !hasExactShape(value, WORKHUB_DELEGATION_CREATE_SHAPE) ||
+        (value.defaults !== undefined && !isWorkHubCreateDefaults(value.defaults)) ||
         typeof value.title !== 'string' ||
         value.title.trim().length === 0 ||
         !isRecord(value.workspace)) {

package/node_modules/@maka/core/dist/slash-command-catalog.js

@@ -40,6 +40,7 @@ export const SLASH_COMMAND_CATALOG = [
     { id: 'skill', session: 'required', surfaces: ['tui'] },
     { id: 'swarm', session: 'none', surfaces: ['desktop', 'tui'] },
     { id: 'thinking', session: 'required', surfaces: ['tui'] },
+    { id: 'todo', session: 'required', surfaces: ['tui'] },
     { id: 'transcript', session: 'required', surfaces: ['tui'] },
     { id: 'update', session: 'none', surfaces: ['tui'] },
 ];

package/node_modules/@maka/core/dist/tool-result-record-schema.js

@@ -37,7 +37,7 @@ const ARCHIVED_SHAPE = defineObjectShape()([
     'originalBytes',
     'rewriteVersion',
     'reason',
-], ['artifactId', 'bodySha256']);
+], ['artifactId', 'resourceRef', 'bodySha256']);
 const IMAGE_SHAPE = defineObjectShape()(['kind', 'mimeType', 'ref'], []);
 const SUMMARY_SHAPE = defineObjectShape()(['kind', 'original', 'summarized', 'reason'], []);
 const WEB_SEARCH_SHAPE = defineObjectShape()(['kind', 'provider', 'query', 'rows'], []);
@@ -157,6 +157,7 @@ function isNonShellToolResultContent(value) {
                 typeof value.toolCallId === 'string' &&
                 typeof value.toolName === 'string' &&
                 isOptionalString(value.artifactId) &&
+                isOptionalString(value.resourceRef) &&
                 isOptionalString(value.bodySha256) &&
                 isFiniteNumber(value.originalEstimatedTokens) &&
                 isFiniteNumber(value.originalBytes) &&

package/node_modules/@maka/core/package.json

@@ -9,6 +9,7 @@
     "./durable-tool-result-projection": "./dist/durable-tool-result-projection.js",
     "./model-projection-transition": "./dist/model-projection-transition.js",
     "./canonical-runtime-event": "./dist/canonical-runtime-event.js",
+    "./canonical-json": "./dist/canonical-json.js",
     "./runtime-boundary": "./dist/runtime-boundary.js",
     "./runtime-handoff": "./dist/runtime-handoff.js",
     "./runtime-logical-execution": "./dist/runtime-logical-execution.js",