maka-agent 0.2.0-dev.27.20260910 → 0.2.0-dev.28.20260911

package/LICENSE

@@ -261,6 +261,112 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
+Pi TUI dependency patch
+
+Source: https://www.npmjs.com/package/@earendil-works/pi-tui/v/0.84.4
+Repository: https://github.com/earendil-works/pi/tree/v0.84.4/packages/tui
+Version: 0.84.4
+Dependency patch: patches/@earendil-works+pi-tui+0.84.4.patch
+Copyright (c) 2025 Mario Zechner
+License: MIT
+
+Maka redistributes a source patch that copies mutable editor undo state while
+sharing immutable pasted strings. The following MIT License applies to that
+material:
+
+MIT License
+
+Copyright (c) 2025 Mario Zechner
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+Zod dependency patch
+
+Source: https://www.npmjs.com/package/zod/v/4.5.4
+Repository: https://github.com/colinhacks/zod
+Version: 4.5.4
+Dependency patch: patches/zod+4.5.4.patch
+Copyright (c) 2025 Colin McDonnell
+License: MIT
+
+Maka redistributes a source patch that releases recursive parse state after
+completion or failure. The following MIT License applies to that material:
+
+MIT License
+
+Copyright (c) 2025 Colin McDonnell
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+Model Context Protocol client dependency patch
+
+Source: https://www.npmjs.com/package/@modelcontextprotocol/client/v/2.0.0
+Repository: https://github.com/modelcontextprotocol/typescript-sdk
+Version: 2.0.0
+Dependency patch: patches/@modelcontextprotocol+client+2.0.0.patch
+Copyright (c) 2024-2025 Model Context Protocol a Series of LF Projects, LLC.
+Declared package license: MIT
+
+Maka redistributes a source patch that releases settled request observers under
+transport backpressure. The upstream package's LICENSE describes a transition
+from MIT to Apache-2.0: contributions with relicensing consent use Apache-2.0,
+while contributions without that consent retain their original MIT license.
+The Apache License, Version 2.0 is reproduced above. The upstream MIT notice is:
+
+MIT License
+
+Copyright (c) 2024-2025 Model Context Protocol a Series of LF Projects, LLC.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
 Sigstore dependency patch
 
 Source: https://www.npmjs.com/package/@sigstore/core/v/4.0.1

package/dist/cli-core.js

@@ -54,6 +54,8 @@ export function parseMakaCliArgs(argv, version, cliCommand = RELEASE_MAKA_CLI_LA
         return { kind: 'activate', args: argv.slice(1) };
     if (first === 'session-export')
         return { kind: 'session-export', args: argv.slice(1) };
+    if (first === 'session-import')
+        return { kind: 'session-import', args: argv.slice(1) };
     if (first === 'eval')
         return { kind: 'eval', args: argv.slice(1) };
     if (first === 'update')
@@ -100,6 +102,7 @@ function helpText(cliCommand) {
         `  ${cliCommand} run ...      Run one non-interactive model turn`,
         `  ${cliCommand} activate ... Run one Cloud Session activation and emit JSONL`,
         `  ${cliCommand} session-export --workspace-root <dir> --session <id> --out <file.maka-session>`,
+        `  ${cliCommand} session-import --workspace-root <dir> --bundle <file.maka-session>`,
         `  ${cliCommand} -p ...       Alias for ${cliCommand} run`,
         `  ${cliCommand} eval ...     Run one declarative multi-arm experiment`,
         `  ${cliCommand} update --target <latest|next|version>  Update this npm-global CLI and its local Runtime Host`,
@@ -250,6 +253,10 @@ export async function runMakaCli(argv = process.argv.slice(2), options = RELEASE
             const { runMakaSessionExportCli } = await import('./session-export-command.js');
             return runMakaSessionExportCli(command.args);
         }
+        case 'session-import': {
+            const { runMakaSessionImportCli } = await import('./session-import-command.js');
+            return runMakaSessionImportCli(command.args);
+        }
         case 'eval': {
             const { configureInstalledEvalBundle } = await import('./eval-bundle-path.js');
             configureInstalledEvalBundle();

package/dist/runtime-host-run-command.js

@@ -569,19 +569,25 @@ class NonInteractiveInteractionController {
     #tasks = new Set();
     #unsubscribe;
     #failure;
-    #failureSignal;
-    #publishFailure;
+    #failureWaiters = new Set();
     constructor(driver, stop) {
         this.#driver = driver;
         this.#stop = stop;
-        this.#failureSignal = new Promise((resolve) => {
-            this.#publishFailure = resolve;
-        });
         this.#unsubscribe = driver.subscribePendingInteractions((pending) => this.#accept(pending));
     }
     race(operation) {
         this.throwIfFailed();
-        return Promise.race([operation, this.#failureSignal.then((error) => Promise.reject(error))]);
+        return new Promise((resolve, reject) => {
+            this.#failureWaiters.add(reject);
+            // Detach completed waits so the controller does not retain consumed event payloads.
+            operation.then((value) => {
+                this.#failureWaiters.delete(reject);
+                resolve(value);
+            }, (error) => {
+                this.#failureWaiters.delete(reject);
+                reject(error);
+            });
+        });
     }
     async settle() {
         await Promise.all([...this.#tasks]);
@@ -623,7 +629,9 @@ class NonInteractiveInteractionController {
         if (this.#failure)
             return;
         this.#failure = error;
-        this.#publishFailure(error);
+        for (const reject of this.#failureWaiters)
+            reject(error);
+        this.#failureWaiters.clear();
     }
 }
 function delay(ms) {

package/dist/session-import-command.js

@@ -0,0 +1,69 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+import { importSessionBundle } from '@maka/runtime/session-import';
+const USAGE = 'maka session-import --workspace-root <dir> --bundle <file.maka-session>';
+const FAILURE_EXIT_CODES = {
+    workspace_not_found: 6,
+    bundle_unreadable: 2,
+    session_exists: 3,
+    schema_unsupported: 4,
+    conflict: 5,
+};
+function parseArgs(args) {
+    const values = {};
+    for (let index = 0; index < args.length; index += 2) {
+        const name = args[index];
+        const value = args[index + 1];
+        if (!name || !value)
+            throw new Error(USAGE);
+        if (name === '--workspace-root')
+            values.workspaceRoot = value;
+        else if (name === '--bundle')
+            values.source = value;
+        else
+            throw new Error(USAGE);
+    }
+    if (!values.workspaceRoot || !values.source)
+        throw new Error(USAGE);
+    return values;
+}
+export async function runMakaSessionImportCli(args) {
+    let parsed;
+    try {
+        parsed = parseArgs(args);
+    }
+    catch (error) {
+        process.stderr.write(`${error.message}\n`);
+        return 1;
+    }
+    const result = await importSessionBundle({
+        workspaceRoot: parsed.workspaceRoot,
+        source: parsed.source,
+    });
+    if (!result.ok) {
+        process.stderr.write(`${JSON.stringify(result.reason)}\n`);
+        return FAILURE_EXIT_CODES[result.reason.kind] ?? 1;
+    }
+    process.stdout.write(`${JSON.stringify({
+        sessionIds: result.sessionIds,
+        artifactFiles: result.artifactFiles,
+        contextRefs: result.contextRefs,
+    })}\n`);
+    return 0;
+}

package/node_modules/@earendil-works/pi-tui/dist/components/editor.js

@@ -2,7 +2,6 @@ import { getKeybindings } from "../keybindings.js";
 import { decodePrintableKey, matchesKey } from "../keys.js";
 import { KillRing } from "../kill-ring.js";
 import { CURSOR_MARKER } from "../tui.js";
-import { UndoStack } from "../undo-stack.js";
 import { cjkBreakRegex, getGraphemeSegmenter, getWordSegmenter, isWhitespaceChar, sliceByColumn, visibleWidth, } from "../utils.js";
 import { findWordBackward, findWordForward } from "../word-navigation.js";
 import { SelectList } from "./select-list.js";
@@ -243,7 +242,7 @@ export class Editor {
     // to.
     snappedFromCursorCol = null;
     // Undo support
-    undoStack = new UndoStack();
+    undoStack = [];
     onSubmit;
     onChange;
     disableSubmit = false;
@@ -1073,7 +1072,7 @@ export class Editor {
         this.pasteCounter = 0;
         this.exitHistoryBrowsing();
         this.scrollOffset = 0;
-        this.undoStack.clear();
+        this.undoStack.length = 0;
         this.lastAction = null;
         if (this.onChange)
             this.onChange("");
@@ -1700,7 +1699,13 @@ export class Editor {
         }
     }
     pushUndoSnapshot() {
-        this.undoStack.push({ state: this.state, pastes: this.pastes, pasteCounter: this.pasteCounter });
+        // Detach mutable containers, but share immutable line and paste strings.
+        // structuredClone copies every large paste again for each typed word.
+        this.undoStack.push({
+            state: { ...this.state, lines: [...this.state.lines] },
+            pastes: new Map(this.pastes),
+            pasteCounter: this.pasteCounter,
+        });
     }
     undo() {
         this.exitHistoryBrowsing();

package/node_modules/@maka/core/dist/diagnostic-log.js

@@ -71,10 +71,13 @@ function requireMinimumInteger(value, label, minimum) {
     return value;
 }
 function truncateCodePoints(value, maximum) {
-    const codePoints = [...value];
-    if (codePoints.length <= maximum)
-        return value;
-    return `${codePoints.slice(0, maximum).join('')}\n<log entry truncated>`;
+    const codePoints = [];
+    for (const point of value) {
+        if (codePoints.length === maximum)
+            return `${codePoints.join('')}\n<log entry truncated>`;
+        codePoints.push(point);
+    }
+    return value;
 }
 function truncateEncodedString(value, maximumBytes) {
     if (encodedStringBytes(value) <= maximumBytes)
@@ -96,10 +99,18 @@ function truncateEncodedString(value, maximumBytes) {
 }
 export function truncateUtf8(value, maximumBytes, marker = '') {
     requirePositiveInteger(maximumBytes, 'maximumBytes');
-    if (new TextEncoder().encode(value).byteLength <= maximumBytes)
+    if (value.length <= maximumBytes && new TextEncoder().encode(value).byteLength <= maximumBytes)
         return value;
-    const suffix = new TextEncoder().encode(marker).byteLength <= maximumBytes ? marker : '';
-    const codePoints = [...value];
+    const suffix = marker.length <= maximumBytes && new TextEncoder().encode(marker).byteLength <= maximumBytes
+        ? marker
+        : '';
+    // Every code point requires at least one UTF-8 byte, so only this prefix can fit.
+    const codePoints = [];
+    for (const point of value) {
+        if (codePoints.length === maximumBytes)
+            break;
+        codePoints.push(point);
+    }
     let low = 0;
     let high = codePoints.length;
     while (low < high) {

package/node_modules/@maka/core/dist/text-sanitize.js

@@ -75,7 +75,7 @@ const ZERO_WIDTH_REGEX = /[\u200B-\u200D\u2060-\u2064\uFEFF]/g;
  *
  * Pipeline (applied in order): NFC → control chars → space, bidi format →
  * space, zero-width/invisible → removed, whitespace collapse, trim, then
- * code-point cap. The cap uses `Array.from(...)` to iterate by code points so a
+ * code-point cap. The cap iterates by code points so a
  * surrogate pair (e.g. `🦊` = U+1F98A, two UTF-16 code units) counts as one and
  * is never split in half.
  *
@@ -91,7 +91,13 @@ export function sanitizeUnicodeText(text, opts) {
         .replace(ZERO_WIDTH_REGEX, '')
         .replace(/\s+/g, ' ')
         .trim();
-    const points = Array.from(cleaned);
+    const points = [];
+    for (const point of cleaned) {
+        points.push(point);
+        // One extra point detects truncation without expanding the entire input.
+        if (opts.maxCodePoints >= 0 && points.length > opts.maxCodePoints)
+            break;
+    }
     if (points.length <= opts.maxCodePoints)
         return cleaned;
     return points.slice(0, opts.maxCodePoints).join('') + suffix;

package/node_modules/@maka/runtime/dist/ai-sdk-turn.js

@@ -1903,15 +1903,12 @@ export class AiSdkTurn {
                         const rejectedSettlement = settlementOutcomes.find((outcome) => outcome.status === 'rejected');
                         if (rejectedSettlement)
                             throw rejectedSettlement.reason;
-                        const settlements = settlementOutcomes.map((outcome) => {
-                            // A rejected settlement was handled above, so preserving the
-                            // original array shape also preserves tool-call identity by index.
+                        settlementOutcomes.forEach((outcome, index) => {
+                            // All settlements completed and rejection was checked above;
+                            // preserve provider order for Plan and Yield result handling.
                             if (outcome.status === 'rejected')
                                 throw outcome.reason;
-                            return outcome.value;
-                        });
-                        for (let index = 0; index < settlements.length; index += 1) {
-                            const settlement = settlements[index];
+                            const settlement = outcome.value;
                             const toolCall = returnedToolCalls[index];
                             if (isPlanToolResult(settlement.result)) {
                                 this.handlePlanToolResult(settlement.result, queue);
@@ -1921,7 +1918,10 @@ export class AiSdkTurn {
                                 isAgentGraphYieldToolResult(settlement.result)) {
                                 this.handleAgentGraphYieldToolResult(settlement.result);
                             }
-                        }
+                        });
+                        // Continuation reads durable events, not raw results. Do not retain
+                        // an entire completed batch across the next provider request.
+                        settlementOutcomes.length = 0;
                         await queue.waitUntilConsumedThroughCurrent();
                         const continuationWillRun = (maxSteps === undefined || runtimeSteps < maxSteps) &&
                             !this.loopStopRequested &&

package/node_modules/@maka/runtime/dist/archive-read-tool.js

@@ -91,7 +91,9 @@ export function buildArchiveReadTool(reader) {
                     : { success: false, error: result.error };
             },
         }),
-        impl: async (input, ctx) => readToolResultArchiveResource(reader, ctx.sessionId, input, ctx.abortSignal),
+        impl: async (input, ctx) => 
+        // Detach bounded slices before active tool settlements retain their archive backing.
+        structuredClone(await readToolResultArchiveResource(reader, ctx.sessionId, input, ctx.abortSignal)),
     };
 }
 function cleanArchiveReadInput(input) {

package/node_modules/@maka/runtime/dist/bots/bot-test.js

@@ -16,7 +16,7 @@
  * specific language governing permissions and limitations
  * under the License.
  */
-import { WebClient } from '@slack/web-api';
+import { createRequire } from 'node:module';
 import { proxiedFetch } from './proxied-fetch.js';
 import { botDiagnosticMessage } from './base-adapter.js';
 import { normalizeWechatIlinkBaseUrl, testWechatBridge, testWechatIlinkCredentials, } from './wechat-bridge.js';
@@ -76,6 +76,7 @@ async function testSlack(channel) {
         return { ok: false, errorCode: 'slack_tokens_missing' };
     }
     try {
+        const { WebClient } = createRequire(import.meta.url)('@slack/web-api');
         const identity = await new WebClient(botToken).auth.test();
         if (!identity.ok)
             return { ok: false, error: identity.error ?? 'Slack auth.test failed' };

package/node_modules/@maka/runtime/dist/bots/feishu-bridge.js

@@ -16,7 +16,7 @@
  * specific language governing permissions and limitations
  * under the License.
  */
-import { Domain, LoggerLevel, createLarkChannel, } from '@larksuiteoapi/node-sdk';
+import { createRequire } from 'node:module';
 import { BaseBotAdapter, botReadinessFromSettings } from './base-adapter.js';
 const HANDSHAKE_TIMEOUT_MS = 15_000;
 /**
@@ -81,24 +81,27 @@ export class FeishuBotBridge extends BaseBotAdapter {
             return;
         }
         this.explicitlyStopped = false;
-        const isLark = this.settings.domain?.trim() === 'larksuite.com';
-        const channel = createLarkChannel({
-            appId,
-            appSecret,
-            domain: isLark ? Domain.Lark : Domain.Feishu,
-            transport: 'websocket',
-            source: 'maka',
-            loggerLevel: LoggerLevel.error,
-            handshakeTimeoutMs: HANDSHAKE_TIMEOUT_MS,
-            policy: {
-                dmMode: this.settings.allowedUserIds?.length ? 'allowlist' : 'open',
-                dmAllowlist: [...(this.settings.allowedUserIds ?? [])],
-                requireMention: false,
-            },
-        });
-        this.channel = channel;
-        this.wire(channel, appId);
+        let channel;
         try {
+            // Keep lazy loading synchronous so stop() cannot race a module-loading await.
+            const { Domain, LoggerLevel, createLarkChannel } = createRequire(import.meta.url)('@larksuiteoapi/node-sdk');
+            const isLark = this.settings.domain?.trim() === 'larksuite.com';
+            channel = createLarkChannel({
+                appId,
+                appSecret,
+                domain: isLark ? Domain.Lark : Domain.Feishu,
+                transport: 'websocket',
+                source: 'maka',
+                loggerLevel: LoggerLevel.error,
+                handshakeTimeoutMs: HANDSHAKE_TIMEOUT_MS,
+                policy: {
+                    dmMode: this.settings.allowedUserIds?.length ? 'allowlist' : 'open',
+                    dmAllowlist: [...(this.settings.allowedUserIds ?? [])],
+                    requireMention: false,
+                },
+            });
+            this.channel = channel;
+            this.wire(channel, appId);
             await channel.connect();
             if (this.explicitlyStopped || this.channel !== channel)
                 return;
@@ -106,13 +109,14 @@ export class FeishuBotBridge extends BaseBotAdapter {
             this.markConnected(channel, appId);
         }
         catch (error) {
-            if (this.explicitlyStopped || this.channel !== channel)
+            if (this.explicitlyStopped || (channel && this.channel !== channel))
                 return;
             this.running = false;
             this.recordFailure(error);
             this.readiness = 'configured';
             this.emitStatusChange();
-            await this.disconnectChannel(channel);
+            if (channel)
+                await this.disconnectChannel(channel);
         }
     }
     async stop() {

package/node_modules/@maka/runtime/dist/bots/slack-bridge.js

@@ -16,8 +16,7 @@
  * specific language governing permissions and limitations
  * under the License.
  */
-import { SocketModeClient } from '@slack/socket-mode';
-import { WebClient } from '@slack/web-api';
+import { createRequire } from 'node:module';
 import { BaseBotAdapter, botReadinessFromSettings } from './base-adapter.js';
 export function slackMessageToEvent(event, receivedAt) {
     if (event.type !== 'message' ||
@@ -57,8 +56,11 @@ export class SlackBotBridge extends BaseBotAdapter {
             this.emitStatusChange();
             return;
         }
-        this.web = new WebClient(botToken);
         try {
+            const require = createRequire(import.meta.url);
+            const { WebClient } = require('@slack/web-api');
+            const { SocketModeClient } = require('@slack/socket-mode');
+            this.web = new WebClient(botToken);
             const identity = await this.web.auth.test();
             if (!identity.ok)
                 throw new Error(identity.error ?? 'Slack auth.test failed');