maka-agent 0.2.0-dev.24.20260907 → 0.2.0-dev.26.20260909

package/dist/tui-copy-catalog.js

@@ -17,6 +17,64 @@
  * under the License.
  */
 export const TUI_COPY_RESOURCES = {
+    todo: {
+        en: {
+            title: 'Current Todo',
+            markedComplete: 'marked complete',
+            open: '/todo to view',
+            usage: 'Usage: /todo',
+            progress: 'Todo',
+            unavailable: 'Todo unavailable',
+            empty: 'No Todo items',
+            loading: 'Loading Todo…',
+            hint: '↑↓/PgUp/PgDn scroll · Home/End · Esc close',
+        },
+        'zh-CN': {
+            title: '当前待办',
+            markedComplete: '标记完成',
+            open: '/todo 查看',
+            usage: '用法：/todo',
+            progress: '待办',
+            unavailable: '待办不可用',
+            empty: '暂无待办',
+            loading: '正在加载待办…',
+            hint: '↑↓/PgUp/PgDn 滚动 · Home/End · Esc 关闭',
+        },
+        'zh-TW': {
+            title: '目前待辦',
+            markedComplete: '標記完成',
+            open: '/todo 查看',
+            usage: '用法：/todo',
+            progress: '待辦',
+            unavailable: '待辦不可用',
+            empty: '沒有待辦',
+            loading: '正在載入待辦…',
+            hint: '↑↓/PgUp/PgDn 捲動 · Home/End · Esc 關閉',
+        },
+    },
+    'transcript-reader': {
+        en: {
+            title: 'DETAILED TRANSCRIPT',
+            scope: 'loaded history',
+            hint: 'Esc/Ctrl+O close · Ctrl+E details · / search · ↑↓/PgUp/PgDn · Home/End',
+            matches: 'matches in displayed text',
+            back: 'return',
+        },
+        'zh-CN': {
+            title: '详细记录',
+            scope: '已加载历史',
+            hint: 'Esc/Ctrl+O 返回 · Ctrl+E 详情 · / 搜索 · ↑↓/PgUp/PgDn · Home/End',
+            matches: '处匹配（当前显示内容）',
+            back: '回到原位置',
+        },
+        'zh-TW': {
+            title: '詳細記錄',
+            scope: '已載入歷史',
+            hint: 'Esc/Ctrl+O 返回 · Ctrl+E 詳情 · / 搜尋 · ↑↓/PgUp/PgDn · Home/End',
+            matches: '處符合（目前顯示內容）',
+            back: '回到原位置',
+        },
+    },
     'host-owner': {
         en: {
             unavailable: 'Runtime Host owner controls are unavailable.',
@@ -268,6 +326,7 @@ export const TUI_COPY_RESOURCES = {
                     'credential-cleanup-failed': 'Stored credentials could not be removed; the configuration was not changed.',
                     'publication-credential-failed': 'The provider credential could not be stored or applied.',
                     'persist-failed': 'The configuration could not be saved.',
+                    'commit-unknown': 'Configuration published; crash durability is uncertain. Check synchronization before retrying.',
                     'manager-failed': 'The MCP connection action failed.',
                     turn_active: 'MCP cannot be changed while a turn or another control action is running.',
                     invalid: 'Check the value and try again.',
@@ -366,6 +425,7 @@ export const TUI_COPY_RESOURCES = {
                     'credential-cleanup-failed': '无法删除旧凭据，配置未修改。',
                     'publication-credential-failed': '无法保存或应用 Provider 凭据。',
                     'persist-failed': '无法保存配置。',
+                    'commit-unknown': '配置已发布，但无法确认崩溃后的持久性。请先检查同步状态再重试。',
                     'manager-failed': 'MCP 连接操作失败。',
                     turn_active: 'Turn 或其他控制操作运行期间不能修改 MCP。',
                     invalid: '请检查输入后重试。',
@@ -464,6 +524,7 @@ export const TUI_COPY_RESOURCES = {
                     'credential-cleanup-failed': '無法移除已儲存的認證資料；設定未變更。',
                     'publication-credential-failed': '無法儲存或套用 Provider 認證資料。',
                     'persist-failed': '無法儲存設定。',
+                    'commit-unknown': '設定已發布，但無法確認當機後的持久性。請先檢查同步狀態再重試。',
                     'manager-failed': 'MCP 連線操作失敗。',
                     turn_active: 'Turn 或其他控制操作執行期間無法修改 MCP。',
                     invalid: '請檢查輸入後重試。',
@@ -562,10 +623,15 @@ export const TUI_COPY_RESOURCES = {
     pickers: {
         en: {
             modelPickerTitle: 'Select Model',
-            modelSwitchCacheWarning: '⚠ Switching models may rebuild the prompt cache; the next request may be slower or cost more.',
+            modelSwitchCacheWarning: '\u26a0 Switching models may rebuild the prompt cache; the next request may be slower or cost more.',
             modelSearchHint: 'Search models / providers / connections · ↑↓ select · Enter confirm · Esc cancel',
             searchLabel: 'Search',
             noMatchingModels: 'No matching models',
+            resumeSessionTitle: 'Resume Session',
+            sessionScopeCurrent: 'Current',
+            sessionScopeAll: 'All',
+            sessionSearchHint: 'Search name / id / path / model / connection · Tab scope · ↑↓ select · Enter open · Esc close',
+            noMatchingSessions: 'No matching sessions',
             selectPickerHint: '↑↓ select · Enter confirm · Esc close',
             providerConfigured: 'configured',
             addAccount: 'add account',
@@ -652,10 +718,15 @@ export const TUI_COPY_RESOURCES = {
         },
         'zh-CN': {
             modelPickerTitle: '选择模型',
-            modelSwitchCacheWarning: '⚠ 切换模型可能需要重建提示缓存；下一次请求可能更慢或成本更高。',
+            modelSwitchCacheWarning: '\u26a0 切换模型可能需要重建提示缓存；下一次请求可能更慢或成本更高。',
             modelSearchHint: '搜索模型 / 服务商 / 连接 · ↑↓ 选择 · Enter 确认 · Esc 取消',
             searchLabel: '搜索',
             noMatchingModels: '没有匹配的模型',
+            resumeSessionTitle: '恢复会话',
+            sessionScopeCurrent: '当前目录',
+            sessionScopeAll: '全部',
+            sessionSearchHint: '搜索名称 / ID / 路径 / 模型 / 连接 · Tab 切换范围 · ↑↓ 选择 · Enter 打开 · Esc 关闭',
+            noMatchingSessions: '没有匹配的会话',
             selectPickerHint: '↑↓ 选择 · Enter 确认 · Esc 关闭',
             providerConfigured: '已设置',
             addAccount: '添加账号',
@@ -741,10 +812,15 @@ export const TUI_COPY_RESOURCES = {
         },
         'zh-TW': {
             modelPickerTitle: '選擇模型',
-            modelSwitchCacheWarning: '⚠ 切換模型可能需要重建提示快取；下一次請求可能較慢或成本較高。',
+            modelSwitchCacheWarning: '\u26a0 切換模型可能需要重建提示快取；下一次請求可能較慢或成本較高。',
             modelSearchHint: '搜尋模型 / 服務商 / 連線 · ↑↓ 選擇 · Enter 確認 · Esc 取消',
             searchLabel: '搜尋',
             noMatchingModels: '沒有符合的模型',
+            resumeSessionTitle: '恢復會話',
+            sessionScopeCurrent: '目前目錄',
+            sessionScopeAll: '全部',
+            sessionSearchHint: '搜尋名稱 / ID / 路徑 / 模型 / 連線 · Tab 切換範圍 · ↑↓ 選取 · Enter 開啟 · Esc 關閉',
+            noMatchingSessions: '沒有符合的會話',
             selectPickerHint: '↑↓ 選擇 · Enter 確認 · Esc 關閉',
             providerConfigured: '已設定',
             addAccount: '新增帳號',
@@ -863,6 +939,7 @@ export const TUI_COPY_RESOURCES = {
                 skill: 'Invoke a skill (or type /skill:<name> inline)',
                 swarm: 'Show, enable, disable, or run one Swarm turn',
                 thinking: 'Set thinking level',
+                todo: 'Show the current session Todo list',
                 transcript: 'Browse the full transcript inside Maka',
             },
             help: {
@@ -870,7 +947,7 @@ export const TUI_COPY_RESOURCES = {
                 userCommand: '  !<command> — run one shell command visible only to you',
                 keybindingsHeading: 'Keybindings',
                 keybindings: [
-                    '  Ctrl+O — expand or collapse all tool output',
+                    '  Ctrl+O — open detailed transcript (Ctrl+E toggles details inside)',
                     '  Ctrl+T — expand or collapse all thinking in view',
                     '  Scroll the transcript with your terminal or trackpad',
                     '  Enter (during a turn) — steer: inject a message into the running turn',
@@ -916,6 +993,7 @@ export const TUI_COPY_RESOURCES = {
                 skill: '调用 Skill（也可直接输入 /skill:<name>）',
                 swarm: '查看、启用、停用 Swarm 模式，或执行一次 Swarm 任务',
                 thinking: '设置思考级别',
+                todo: '查看当前会话待办清单',
                 transcript: '在 Maka 内浏览完整对话记录',
             },
             help: {
@@ -923,7 +1001,7 @@ export const TUI_COPY_RESOURCES = {
                 userCommand: '  !<command> — 执行一次仅用户可见的 shell 命令',
                 keybindingsHeading: '快捷键',
                 keybindings: [
-                    '  Ctrl+O — 展开或折叠所有工具输出',
+                    '  Ctrl+O — 打开详细记录（其中 Ctrl+E 切换详情）',
                     '  Ctrl+T — 展开或折叠视图中的所有思考块',
                     '  使用终端或触控板滚动对话记录',
                     '  Enter（任务运行中）— 将消息注入当前任务',
@@ -969,6 +1047,7 @@ export const TUI_COPY_RESOURCES = {
                 skill: '呼叫 Skill（也可直接輸入 /skill:<name>）',
                 swarm: '檢視、啟用、停用 Swarm 模式，或執行一次 Swarm 任務',
                 thinking: '設定思考級別',
+                todo: '檢視目前會話待辦清單',
                 transcript: '在 Maka 內瀏覽完整對話記錄',
             },
             help: {
@@ -976,7 +1055,7 @@ export const TUI_COPY_RESOURCES = {
                 userCommand: '  !<command> — 執行一次僅使用者可見的 shell 命令',
                 keybindingsHeading: '快捷鍵',
                 keybindings: [
-                    '  Ctrl+O — 展開或摺疊所有工具輸出',
+                    '  Ctrl+O — 開啟詳細記錄（其中 Ctrl+E 切換詳情）',
                     '  Ctrl+T — 展開或摺疊檢視中的所有思考區塊',
                     '  使用終端機或觸控板捲動對話記錄',
                     '  Enter（任務執行中）— 將訊息注入目前任務',

package/dist/tui-editor-render.js

@@ -0,0 +1,36 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+export function stripUnfocusedCursorStyle(lines, focused) {
+    if (focused)
+        return lines;
+    // pi-tui 0.84.4 paints its cursor even when the editor is unfocused.
+    // Remove the reverse-video wrapper, keeping the captured text ($1):
+    //
+    // Input:  \x1b[7mhello\x1b[0m
+    //         └─────┘└───┘└─────┘
+    //         reverse text reset
+    //          remove keep remove
+    //                  $1
+    // Output: hello
+    //
+    // ([^\x1b]*) captures text without ESC, so the match cannot cross another
+    // ANSI sequence. Other text using this same wrapper would also lose its
+    // reverse styling. Recheck when changing themes or upgrading pi-tui.
+    return lines.map((line) => line.replace(/\x1b\[7m([^\x1b]*)\x1b\[0m/gu, '$1'));
+}

package/dist/tui-mcp-control.js

@@ -20,7 +20,7 @@ import { createHash, randomUUID } from 'node:crypto';
 import { MCP_CONFIG_VERSION, mcpConfigChangeRetiresCredentials, resolveMcpProtocolPreference, } from '@maka/core/mcp';
 import { createCredentialMcpOAuthStorage, McpClientManager } from '@maka/mcp';
 import { createFileCredentialStore } from '@maka/storage/credential-store';
-import { createMcpConfigStore, assertMcpEndpointPolicyOnChanges, McpConfigSourceError, normalizeMcpConfig, normalizeMcpImport, } from '@maka/storage/mcp-config-store';
+import { AtomicFileWriteCommitUnknownError, createMcpConfigStore, assertMcpEndpointPolicyOnChanges, McpConfigSourceError, normalizeMcpConfig, normalizeMcpImport, } from '@maka/storage/mcp-config-store';
 import { createMcpCapabilityProvider } from './mcp-capability-provider.js';
 const RUNTIME_HOST_CREDENTIAL_ENV = 'MAKA_RUNTIME_HOST_ACCESS_CREDENTIAL';
 export function createTuiMcpController(input, overrides = {}) {
@@ -289,10 +289,45 @@ class TuiMcpControllerImpl {
         catch (error) {
             if (error instanceof TuiMcpMutationError)
                 return error.result;
+            if (error instanceof AtomicFileWriteCommitUnknownError) {
+                // The transform has already published, including any credential
+                // retirement. Reload its authority; never replay those effects.
+                this.#preparedImport = undefined;
+                let reconciliationError;
+                if (!this.#closed) {
+                    try {
+                        ({ reconciliationError } = await this.#synchronizeCommittedConfig(await this.#deps.configStore.get()));
+                    }
+                    catch (failure) {
+                        reconciliationError = failure;
+                        this.#publicationSuppressed = false;
+                        this.#snapshot = freezeSnapshot({
+                            ...this.#snapshot,
+                            configuration: 'out_of_sync',
+                            servers: this.#snapshot.servers.map((server) => ({
+                                ...server,
+                                synchronized: false,
+                            })),
+                        });
+                        this.#notify();
+                    }
+                }
+                // Reconciliation does not establish the missing durability fence,
+                // and its own failure must not replace the original write error.
+                return {
+                    status: 'failed',
+                    reason: 'commit-unknown',
+                    cause: error,
+                    ...(reconciliationError === undefined ? {} : { reconciliationError }),
+                };
+            }
             return { status: 'failed', reason: 'persist-failed' };
         }
+        return (await this.#synchronizeCommittedConfig(committed)).result;
+    }
+    async #synchronizeCommittedConfig(committed) {
         if (this.#closed)
-            return { status: 'failed', reason: 'closed' };
+            return { result: { status: 'failed', reason: 'closed' } };
         this.#preparedImport = undefined;
         this.#config = cloneConfig(committed);
         this.#updateSnapshot({ configuration: 'synchronizing' });
@@ -301,19 +336,19 @@ class TuiMcpControllerImpl {
         try {
             await this.#deps.manager.sync(committed);
         }
-        catch {
+        catch (error) {
             this.#publicationSuppressed = false;
             this.#updateSnapshot({ configuration: 'out_of_sync' });
             this.#refreshManagerSnapshot();
             await this.#settlePublication();
-            return { status: 'applied', effect: 'sync_failed' };
+            return { result: { status: 'applied', effect: 'sync_failed' }, reconciliationError: error };
         }
         this.#publicationSuppressed = false;
         if (this.#closed)
-            return { status: 'failed', reason: 'closed' };
+            return { result: { status: 'failed', reason: 'closed' } };
         this.#updateSnapshot({ configuration: 'ready' });
         this.#refreshManagerSnapshot();
-        return { status: 'applied', effect: await this.#settlePublication() };
+        return { result: { status: 'applied', effect: await this.#settlePublication() } };
     }
     #prepareMutation(current, action) {
         const servers = { ...current.mcpServers };

package/node_modules/@maka/core/dist/agent-run.js

@@ -65,6 +65,7 @@ export const AGENT_RUN_EVENT_TYPES = [
     'sandbox_escalation_applied',
     'sandbox_escalation_failed',
     'sandbox_denial_detected',
+    'request_composition_resolved',
     'model_call_attempt_recorded',
     'history_compact_checkpoint_recorded',
     'model_projection_transition_recorded',

package/node_modules/@maka/core/dist/attachments.js

@@ -251,3 +251,6 @@ export function attachmentKindFromMimeType(mimeType, fileName) {
     }
     return 'other';
 }
+export function attachmentIngestBlocked(code) {
+    return new Error(`attachment_ingest:${code}`);
+}

package/node_modules/@maka/core/dist/canonical-json.js

@@ -0,0 +1,27 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+/**
+ * Neutral entrypoint for the strict, key-sorted JSON serializer shared by
+ * identity and persistence authorities.
+ *
+ * The implementation remains in `tool-args-identity` so its existing import
+ * path and wire behavior stay compatible while other packages use a domain-
+ * neutral name.
+ */
+export { stableJsonStringify } from './tool-args-identity.js';

package/node_modules/@maka/core/dist/capabilities.js

@@ -75,6 +75,41 @@ export const CAPABILITY_READINESS_STATES = [
     'degraded',
     'paused',
 ];
+/**
+ * Stable machine codes for capability and OS-permission reasons. Producers
+ * emit these instead of locale-bound prose; presenters own the code→copy map
+ * per locale. Bot capabilities pass their bridge status reasons through as-is
+ * (`rate-limited`, `gateway-closed-4004`, …), so signal `reason` fields stay
+ * `string` — this union types the desktop producers and the presenter maps.
+ */
+export const CAPABILITY_REASON_CODES = [
+    'disabled',
+    'platform_credentials_missing',
+    'macos_tcc_only',
+    'apple_events_tcc_status_unavailable',
+    'cu_artifact_missing',
+    'cu_backend_status',
+    'cu_backend_unavailable',
+    'cu_executor_undistributable',
+    'cu_executor_stopped',
+    'cu_executor_start_failed',
+    'cu_executor_recovering',
+    'cu_executor_ready',
+    'cu_executor_lazy_start',
+    'activity_recorder_partial',
+    'activity_recorder_probe_hint',
+    'memory_partial',
+    'memory_no_probe',
+    'accessibility_status_ambiguous',
+    'screen_recording_status_mac_only',
+    'notifications_status_unreadable_macos',
+    'notifications_status_unreadable',
+    'notifications_unsupported',
+    'permission_probe_failed',
+];
+export function isCapabilityReasonCode(value) {
+    return (typeof value === 'string' && CAPABILITY_REASON_CODES.includes(value));
+}
 export function isOsPermissionState(value) {
     return typeof value === 'string' && OS_PERMISSION_STATES.includes(value);
 }

package/node_modules/@maka/core/dist/computer-use.js

@@ -81,7 +81,6 @@ export function isComputerUseErrorCode(value) {
     return (typeof value === 'string' && COMPUTER_USE_ERROR_CODES.includes(value));
 }
 export const CU_ACTION_TYPES = ['screenshot', 'type', 'key', 'wait'];
-export const COMPUTER_USE_ACTION_TYPES = CU_ACTION_TYPES;
 /**
  * The semantic actions, which name an element rather than a pixel. They are not
  * in `CU_ACTION_TYPES` because they are not `CuAction`s — they are dispatched

package/node_modules/@maka/core/dist/display-redaction.js

@@ -28,6 +28,24 @@ const PATTERNS = [
         streamingTerminator: /[\s"'<>]/,
         streamingValueGroup: 3,
     },
+    // URL userinfo:  https://user:pass@host  /  https://token@host
+    // Structural — any authority that contains `@` is credential-bearing, so
+    // this does not depend on a provider prefix list. Runs before the query
+    // rule so only the userinfo is replaced and host/path survive.
+    // Character class matches streamingTerminator so a bare `https://host`
+    // cannot swallow later `@` across whitespace/quotes/angle brackets.
+    // Known boundary: punctuation like commas can still join a bare URL to a
+    // later `@`; a proper fix would restrict userinfo to the RFC 3986 set.
+    // http(s) only for now. Streaming cannot recognize userinfo before `@`
+    // arrives (`https://user:pa` stays clear until then); tightening earlier
+    // would eat `https://host:8080/`.
+    {
+        label: 'url userinfo',
+        regex: /(https?:\/\/)([^\s"'<>/?#]*@)/gi,
+        replacement: (m) => `${m[1]}<redacted>@`,
+        streamingTerminator: /[/?#\s"'<>]/,
+        streamingValueGroup: 2,
+    },
     // URL query secrets:  ?key=[redacted]  ?token=[redacted]  ?api_key=[redacted]  &access_token=[redacted]
     // (runs before the api-key-header rule so the URL form isn't mangled.)
     {

package/node_modules/@maka/core/dist/llm-connections.js

@@ -228,6 +228,19 @@ export function reconcileConnectionAfterModelFetch(connection, models, options)
     const previousEnabled = [
         ...new Set(connectionEnabledModelIds(connection).map((id) => supersededModelId(id, live, options?.aliases))),
     ];
+    if (options?.authoritative) {
+        // The first account-scoped fetch replaces the provider fallback guess: no
+        // user chose those bootstrap ids, and every usable model should be offered.
+        // Later refreshes preserve explicit user choices only while they remain in
+        // the account catalog; newly introduced models stay opt-in.
+        const enabledModelIds = connection.hasModelInventory
+            ? previousEnabled.filter((id) => live.has(id))
+            : liveIds;
+        const defaultModel = enabledModelIds.includes(previousDefault)
+            ? previousDefault
+            : (enabledModelIds[0] ?? '');
+        return { defaultModel, enabledModelIds };
+    }
     // Seed a first choice only for a connection that has never had a list to
     // pick from: four providers ship no `fallbackModels`, so for them discovery
     // is the only place a first default can come from.

package/node_modules/@maka/core/dist/model-call-attempt.js

@@ -83,6 +83,7 @@ const MODEL_CALL_ATTEMPT_SHAPE = defineObjectShape()([
 ], [
     'connectionSlug',
     'historyCompactRoute',
+    'requestCompositionId',
     'contextWindow',
     'captureArtifactId',
     'promptComposition',
@@ -294,6 +295,7 @@ export function decodeModelCallAttempt(value) {
         isNonEmptyString(value.runId) &&
         isNonEmptyString(value.turnId) &&
         isNonNegativeInteger(value.step) &&
+        isOptionalString(value.requestCompositionId) &&
         isNonNegativeInteger(value.attempt) &&
         MODEL_CALL_KINDS.includes(value.callKind) &&
         (value.historyCompactRoute === undefined ||

package/node_modules/@maka/core/dist/model-metadata.js

@@ -48,6 +48,10 @@ const GENERATED_METADATA_PROVIDER_ALIASES = {
 function generatedMetadataProviderType(providerType) {
     return GENERATED_METADATA_PROVIDER_ALIASES[providerType] ?? providerType;
 }
+/** Whether discovery is the complete usable model catalog for this account. */
+export function providerReportsCompleteModelCatalog(providerType) {
+    return providerType === 'github-copilot';
+}
 /**
  * Whether the active metadata describes this model at all. `lookupModelMetadata`
  * answers "no" with an empty object, and callers were reading that sentinel by

package/node_modules/@maka/core/dist/redaction.js

@@ -53,6 +53,7 @@ export function redactSecrets(value) {
 }
 function redactTextSecrets(value) {
     let next = value;
+    next = redactUrlUserinfoSecrets(next);
     next = redactUrlQuerySecrets(next);
     next = next.replace(QUOTED_SECRET_KEY_VALUE_PATTERN, (match, prefix, key) => isSensitiveKey(key) ? `${prefix}[redacted]` : match);
     next = next.replace(AUTHORIZATION_HEADER_PATTERN, (_match, boundary, prefix) => `${boundary}${prefix}[redacted]`);
@@ -134,6 +135,17 @@ function redactJsonValue(value) {
     }
     return { value: next, changed };
 }
+function redactUrlUserinfoSecrets(value) {
+    // Authority runs through the first `/`, `?`, `#`, whitespace, quote, or
+    // angle bracket. If it contains `@`, everything from the host-start through
+    // the last `@` is userinfo. The class matches display-redaction's
+    // streamingTerminator so a bare `https://host` followed later by an
+    // email/`@package` (including across JSON quotes) cannot swallow the gap.
+    // Known boundary: punctuation like commas can still join a bare URL to a
+    // later `@` into one fake credentialed match; a proper fix would restrict
+    // userinfo to the RFC 3986 set instead of exclusion. http(s) only for now.
+    return value.replace(/(https?:\/\/)[^\s"'<>/?#]*@/gi, '$1[redacted]@');
+}
 function redactUrlQuerySecrets(value) {
     return value.replace(/([?&])([^=\s&?#]+)=([^&\s#]*)/g, (match, sep, key) => {
         if (!isSensitiveKey(key))
@@ -191,6 +203,10 @@ export function classifyGeneralizedError(error) {
         return 'provider_error';
     if (lower.includes('network') ||
         lower.includes('fetch') ||
+        // Chromium network stack error codes (`net::ERR_CONNECTION_RESET`,
+        // `net::ERR_NAME_NOT_RESOLVED`, ...) never match the Node errno
+        // spellings below.
+        lower.includes('net::err') ||
         lower.includes('econn') ||
         lower.includes('enotfound'))
         return 'network_error';
@@ -231,3 +247,22 @@ export function generalizedErrorMessage(error, fallback = 'Operation failed') {
 export function isAuthenticationErrorText(message) {
     return message.replace(/\bauthorit\w*/g, '').includes('auth');
 }
+const reportedFailures = new WeakSet();
+/** Redacted diagnostics channel for unexpected operation failures. Copy
+ * catalogs live here (bare-importable) because a depended-on copy catalog may
+ * only hold bare package runtime imports. */
+export function reportUnexpectedOperation(scope, error) {
+    // One failure, one diagnostic: a rejection formatted again by an outer layer
+    // is the same defect, not a second one.
+    if (typeof error === 'object' && error !== null) {
+        if (reportedFailures.has(error))
+            return;
+        reportedFailures.add(error);
+    }
+    const detail = error instanceof Error ? (error.stack ?? `${error.name}: ${error.message}`) : String(error);
+    console.error(`[${scope}] operation failed:`, redactSecrets(detail));
+}
+export function unexpectedOperationFallback(error, fallback, scope) {
+    reportUnexpectedOperation(scope, error);
+    return fallback;
+}

package/node_modules/@maka/core/dist/run-composition.js

@@ -18,6 +18,12 @@
  */
 import { defineObjectShape, hasExactShape, isRecord } from './record-schema.js';
 export const RUN_COMPOSITION_SCHEMA_VERSION = 1;
+export const REQUEST_COMPOSITION_SCHEMA_VERSION = 1;
+// Composition evidence is exact: reject an over-bound provider surface rather
+// than silently truncating the resolved snapshot.
+export const COMPOSITION_MAX_TOOLS = 256;
+export const COMPOSITION_MAX_TOOL_NAME_LENGTH = 128;
+export const REQUEST_COMPOSITION_MAX_TOOL_DESCRIPTION_LENGTH = 16_384;
 const RUN_COMPOSITION_SHAPE = defineObjectShape()([
     'schemaVersion',
     'composerId',
@@ -30,6 +36,20 @@ const RUN_COMPOSITION_SHAPE = defineObjectShape()([
     'toolNames',
     'contextWindow',
 ], []);
+const REQUEST_COMPOSITION_SHAPE = defineObjectShape()([
+    'schemaVersion',
+    'compositionId',
+    'step',
+    'reason',
+    'sourceRevisions',
+    'systemPromptHash',
+    'toolCatalogHash',
+    'toolAvailabilityHash',
+    'providerOptionsHash',
+    'toolNames',
+    'toolSchemas',
+], []);
+const REQUEST_COMPOSITION_TOOL_SCHEMA_SHAPE = defineObjectShape()(['name', 'description', 'inputSchema'], ['providerTool']);
 const ID_PATTERN = /^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$/;
 const HASH_PATTERN = /^sha256:[a-f0-9]{64}$/;
 const SOURCE_REVISION_SHAPE = defineObjectShape()(['id', 'revision'], []);
@@ -64,6 +84,41 @@ export function createRunCompositionSnapshot(input) {
         toolNames: [...input.toolNames].sort(compareExactString),
     });
 }
+export function createRequestCompositionSnapshot(input, reason) {
+    return decodeRequestCompositionSnapshot({
+        schemaVersion: REQUEST_COMPOSITION_SCHEMA_VERSION,
+        ...input,
+        reason,
+        sourceRevisions: [...input.sourceRevisions].sort((left, right) => compareExactString(left.id, right.id)),
+        toolNames: [...input.toolNames].sort(compareExactString),
+        toolSchemas: [...input.toolSchemas].sort((left, right) => compareExactString(left.name, right.name)),
+    });
+}
+export function decodeRequestCompositionSnapshot(value) {
+    if (!isRecord(value) || !hasExactShape(value, REQUEST_COMPOSITION_SHAPE)) {
+        throw new Error('Invalid Request Composition snapshot schema');
+    }
+    const valid = value.schemaVersion === REQUEST_COMPOSITION_SCHEMA_VERSION &&
+        boundedString(value.compositionId, 128) &&
+        Number.isSafeInteger(value.step) &&
+        value.step >= 0 &&
+        (value.reason === 'initial' || value.reason === 'change') &&
+        canonicalSourceRevisions(value.sourceRevisions) &&
+        hash(value.systemPromptHash) &&
+        hash(value.toolCatalogHash) &&
+        hash(value.toolAvailabilityHash) &&
+        hash(value.providerOptionsHash) &&
+        canonicalToolNames(value.toolNames) &&
+        canonicalToolSchemas(value.toolSchemas);
+    if (!valid)
+        throw new Error('Invalid Request Composition snapshot schema');
+    return Object.freeze({
+        ...value,
+        sourceRevisions: Object.freeze(value.sourceRevisions.map((source) => Object.freeze({ ...source }))),
+        toolNames: Object.freeze([...value.toolNames]),
+        toolSchemas: Object.freeze(value.toolSchemas.map((schema) => Object.freeze(structuredClone(schema)))),
+    });
+}
 function compareExactString(left, right) {
     return left < right ? -1 : left > right ? 1 : 0;
 }
@@ -84,16 +139,36 @@ function canonicalSourceRevisions(value) {
     return true;
 }
 function canonicalToolNames(value) {
-    if (!Array.isArray(value) || value.length > 256)
+    if (!Array.isArray(value) || value.length > COMPOSITION_MAX_TOOLS)
         return false;
     let previous;
     for (const name of value) {
-        if (!boundedString(name, 128) || (previous !== undefined && previous >= name))
+        if (!boundedString(name, COMPOSITION_MAX_TOOL_NAME_LENGTH) ||
+            (previous !== undefined && previous >= name)) {
             return false;
+        }
         previous = name;
     }
     return true;
 }
+function canonicalToolSchemas(value) {
+    if (!Array.isArray(value) || value.length > COMPOSITION_MAX_TOOLS)
+        return false;
+    let previous;
+    for (const schema of value) {
+        if (!isRecord(schema) ||
+            !hasExactShape(schema, REQUEST_COMPOSITION_TOOL_SCHEMA_SHAPE) ||
+            !boundedString(schema.name, COMPOSITION_MAX_TOOL_NAME_LENGTH) ||
+            !boundedString(schema.description, REQUEST_COMPOSITION_MAX_TOOL_DESCRIPTION_LENGTH) ||
+            !isRecord(schema.inputSchema) ||
+            (schema.providerTool !== undefined && !isRecord(schema.providerTool)) ||
+            (previous !== undefined && previous >= schema.name)) {
+            return false;
+        }
+        previous = schema.name;
+    }
+    return true;
+}
 function hash(value) {
     return typeof value === 'string' && HASH_PATTERN.test(value);
 }