maka-agent 0.2.0-dev.31.20260913 → 0.2.0-dev.32.20260914

package/node_modules/@maka/runtime-host/dist/server/plugin-platform.js

@@ -45,6 +45,7 @@ export class HostPluginPlatform {
     #tools;
     #systemPrompt;
     #commands;
+    #executors;
     #authority = emptyCompositionAuthority();
     #desired = emptyCompositionState();
     #mutation = Promise.resolve();
@@ -68,6 +69,7 @@ export class HostPluginPlatform {
         this.#tools = options.tools;
         this.#systemPrompt = options.systemPrompt;
         this.#commands = options.commands;
+        this.#executors = options.executors;
     }
     async recover() {
         if (this.#recoveryStarted ||
@@ -356,6 +358,10 @@ export class HostPluginPlatform {
         this.#assertReadable();
         return this.#commands?.inspect(rootId) ?? Object.freeze([]);
     }
+    inspectExecutors(rootId) {
+        this.#assertReadable();
+        return this.#executors?.inspect(rootId) ?? Object.freeze([]);
+    }
     async status() {
         this.#assertReadable();
         return Object.freeze({

package/node_modules/@maka/runtime-host/dist/server/session-catalog-coordinator.js

@@ -23,6 +23,7 @@ import { authorizeConnectionModel, connectionEnabledModelIds } from '@maka/core/
 import { isModelExplicitlyUnsupportedForChat } from '@maka/core/model-catalog';
 import { thinkingVariantsForConnection } from '@maka/core/model-thinking';
 import { executionBoundaryDisplayMode, } from '@maka/core/sandbox-boundary';
+import { isExecutorId } from '@maka/core/executor-id';
 import { DEFAULT_SESSION_NAME, normalizeUserSessionName } from '@maka/core/session-name';
 import { isSessionStartModeLabel as isExecutionSemanticLabel, sessionStartModeSpec, } from '@maka/core/session-start-mode';
 import { WORKHUB_COORDINATION_SESSION_ID, isWorkHubCoordinationSession, isWorkHubCoordinationSessionId, isWorkHubCoordinationSessionTarget, } from '@maka/core/session';
@@ -142,6 +143,7 @@ export class HostSessionCatalogCoordinator {
     #continuity;
     #workspaceResolver;
     #requestDrain;
+    #assertExecutorAvailable;
     #sessionAccessAuthority;
     constructor(options) {
         this.#stores = options.stores;
@@ -152,6 +154,7 @@ export class HostSessionCatalogCoordinator {
         this.#continuity = options.continuity;
         this.#workspaceResolver = options.workspaceResolver;
         this.#requestDrain = options.requestDrain;
+        this.#assertExecutorAvailable = options.assertExecutorAvailable;
         this.#sessionAccessAuthority = options.sessionAccessAuthority;
     }
     /**
@@ -201,7 +204,7 @@ export class HostSessionCatalogCoordinator {
         const prepared = await prepareCreate(input);
         return this.#workspaceResolver.runWithUsageRecorded(input.workspace, async (workspace) => {
             const [model, policy] = await Promise.all([
-                this.#resolveModel(input.modelTarget, input.thinkingLevel),
+                this.#resolveCreateExecution(input),
                 this.#readRuntimePolicy(),
             ]);
             return {
@@ -212,7 +215,8 @@ export class HostSessionCatalogCoordinator {
                     ...(workspace.projectId === null ? {} : { projectId: workspace.projectId }),
                     name: prepared.name,
                     labels: [...prepared.labels],
-                    llmConnectionId: model.connectionId,
+                    ...(model.executorId ? { executorId: model.executorId } : {}),
+                    ...(model.connectionId ? { llmConnectionId: model.connectionId } : {}),
                     llmConnectionSlug: model.connectionSlug,
                     model: model.model,
                     ...(input.thinkingLevel === undefined ? {} : { thinkingLevel: input.thinkingLevel }),
@@ -373,7 +377,7 @@ export class HostSessionCatalogCoordinator {
                 }
                 return await this.#workspaceResolver.runWithUsageRecorded(input.workspace, async (workspace) => {
                     const [model, policy] = await Promise.all([
-                        this.#resolveModel(input.modelTarget, input.thinkingLevel),
+                        this.#resolveCreateExecution(input),
                         this.#readRuntimePolicy(),
                     ]);
                     const createInput = {
@@ -381,7 +385,8 @@ export class HostSessionCatalogCoordinator {
                         ...(workspace.projectId === null ? {} : { projectId: workspace.projectId }),
                         name: prepared.name,
                         labels: [...prepared.labels],
-                        llmConnectionId: model.connectionId,
+                        ...(model.executorId ? { executorId: model.executorId } : {}),
+                        ...(model.connectionId ? { llmConnectionId: model.connectionId } : {}),
                         llmConnectionSlug: model.connectionSlug,
                         model: model.model,
                         ...(input.thinkingLevel === undefined ? {} : { thinkingLevel: input.thinkingLevel }),
@@ -806,7 +811,12 @@ export class HostSessionCatalogCoordinator {
         };
     }
     async #mergeConfigurationPatch(current, patch) {
-        if (current.llmConnectionId === undefined && patch.modelTarget === undefined) {
+        if (current.backend === 'fake' && patch.modelTarget === undefined) {
+            throw new SessionOperationFailure('operation_conflict', 'Legacy test backend configuration requires an explicit account selection');
+        }
+        if (current.backend !== 'plugin-executor' &&
+            current.llmConnectionId === undefined &&
+            patch.modelTarget === undefined) {
             throw new SessionOperationFailure('operation_conflict', 'Legacy Session configuration requires an explicit account selection');
         }
         const thinkingLevel = patch.thinkingLevel === undefined
@@ -830,8 +840,9 @@ export class HostSessionCatalogCoordinator {
             }, thinkingLevel);
         }
         return {
-            backend: 'ai-sdk',
-            ...(model.connectionId === undefined ? {} : { llmConnectionId: model.connectionId }),
+            backend: patch.modelTarget || current.backend === 'ai-sdk' ? 'ai-sdk' : 'plugin-executor',
+            executorId: patch.modelTarget ? undefined : current.executorId,
+            llmConnectionId: model.connectionId,
             llmConnectionSlug: model.connectionSlug,
             model: model.model,
             thinkingLevel,
@@ -841,6 +852,25 @@ export class HostSessionCatalogCoordinator {
             orchestrationMode: patch.orchestrationMode ?? current.orchestrationMode ?? 'default',
         };
     }
+    async #resolveCreateExecution(input) {
+        if (input.executorId) {
+            try {
+                this.#assertExecutorAvailable?.(input.sessionId, input.executorId);
+            }
+            catch {
+                throw new SessionOperationFailure('operation_unavailable', `Plugin executor is unavailable: ${input.executorId}`);
+            }
+            return {
+                executorId: input.executorId,
+                connectionSlug: `executor:${input.executorId}`,
+                model: input.executorId,
+            };
+        }
+        if (!input.modelTarget) {
+            throw new SessionOperationFailure('invalid_request', 'Session creation requires a model target or executor id');
+        }
+        return await this.#resolveModel(input.modelTarget, input.thinkingLevel);
+    }
     async #readRuntimePolicy() {
         try {
             return await this.#runtimePolicy.runtimePolicy.getSnapshot();
@@ -851,7 +881,8 @@ export class HostSessionCatalogCoordinator {
     }
 }
 function sessionConfigurationMatches(header, configuration) {
-    return (header.backend === 'ai-sdk' &&
+    return (header.backend === configuration.backend &&
+        header.executorId === configuration.executorId &&
         header.llmConnectionId === configuration.llmConnectionId &&
         header.llmConnectionSlug === configuration.llmConnectionSlug &&
         header.model === configuration.model &&
@@ -869,6 +900,12 @@ function isPermissionModeOnlyPatch(patch) {
         patch.orchestrationMode === undefined);
 }
 async function prepareCreate(input) {
+    if ((input.executorId === undefined) === (input.modelTarget === undefined)) {
+        throw new SessionOperationFailure('invalid_request', 'Session creation requires exactly one model target or executor id');
+    }
+    if (input.executorId !== undefined && !isExecutorId(input.executorId)) {
+        throw new SessionOperationFailure('invalid_request', 'Session executor id is invalid');
+    }
     if (input.labels?.some(isExecutionSemanticLabel)) {
         throw new SessionOperationFailure('invalid_request', 'Session creation cannot set reserved execution labels');
     }
@@ -894,14 +931,16 @@ function createRequestFingerprint(input, prepared) {
             : ['host_path', input.workspace.path],
         prepared.name,
         prepared.labels,
-        input.modelTarget.kind === 'default'
-            ? ['default']
-            : [
-                'explicit',
-                input.modelTarget.connectionId,
-                input.modelTarget.connectionSlug,
-                input.modelTarget.model,
-            ],
+        input.executorId
+            ? ['executor', input.executorId]
+            : input.modelTarget?.kind === 'default'
+                ? ['default']
+                : [
+                    'explicit',
+                    input.modelTarget.connectionId,
+                    input.modelTarget.connectionSlug,
+                    input.modelTarget.model,
+                ],
         input.thinkingLevel ?? null,
         input.toolProfile ?? null,
         prepared.permissionMode ?? ['runtime_default'],
@@ -969,6 +1008,7 @@ export function projectSessionCatalogRecord(record, liveRunState) {
         ...(header.revisionIndex === undefined ? {} : { revisionIndex: header.revisionIndex }),
         ...(header.revisionState === undefined ? {} : { revisionState: header.revisionState }),
         backend: header.backend,
+        ...(header.executorId ? { executorId: header.executorId } : {}),
         llmConnectionId: header.llmConnectionId ?? null,
         llmConnectionSlug: header.llmConnectionSlug,
         connectionLocked: header.connectionLocked,

package/node_modules/@maka/runtime-host/dist/server/session-continuity-coordinator.js

@@ -505,7 +505,7 @@ export class SessionContinuityCoordinator {
                 }
                 const textKey = assistantStreamKey('text', event.messageId);
                 const text = state.assistantStreams.get(textKey);
-                if (text || event.text.length > 0) {
+                if (text || event.text.length > 0 || event.interrupted) {
                     const current = text ??
                         {
                             kind: 'text',
@@ -514,7 +514,7 @@ export class SessionContinuityCoordinator {
                             text: '',
                         };
                     for (const subscriber of state.subscribers.values()) {
-                        this.#enqueueAssistantCompletion(subscriber, sessionId, runId, current, 'text', event.text);
+                        this.#enqueueAssistantCompletion(subscriber, sessionId, runId, current, 'text', event.text, event.interrupted);
                     }
                     state.assistantStreams.delete(textKey);
                 }
@@ -1247,7 +1247,7 @@ export class SessionContinuityCoordinator {
     #enqueueAssistantDelta(subscriber, sessionId, runId, event, kind, startOffset) {
         this.#enqueueAssistantText(subscriber, sessionId, runId, event, kind, startOffset, event.text);
     }
-    #enqueueAssistantCompletion(subscriber, sessionId, runId, current, kind, finalText) {
+    #enqueueAssistantCompletion(subscriber, sessionId, runId, current, kind, finalText, interrupted) {
         const extendsPrefix = finalText.startsWith(current.text);
         const suffix = extendsPrefix ? finalText.slice(current.text.length) : finalText;
         if (suffix) {
@@ -1270,6 +1270,7 @@ export class SessionContinuityCoordinator {
                 text: '',
                 ...(!extendsPrefix && finalText.length === 0 ? { reset: true } : {}),
                 complete: true,
+                ...(interrupted ? { interrupted: true } : {}),
             },
         });
     }

package/node_modules/@maka/runtime-host/dist/server/session-revision-coordinator.js

@@ -20,6 +20,7 @@ import { createHash, randomUUID } from 'node:crypto';
 import { isDeepResearchSession } from '@maka/core/deep-research';
 import { SIDE_CONVERSATION_SESSION_LABEL } from '@maka/core/side-conversation';
 import { isWorkHubCoordinationSessionId, isWorkHubCoordinationSessionTarget, sessionRevisionFamilyId, } from '@maka/core/session';
+import { runtimeHostConversationCopyUnavailableReason } from './host-session-availability.js';
 import { archivedToolResultContainsLinkedChildReferences, archivedToolResultContainsConversationOwnedReferences, cloneConversationRuntimeLedger, collectConversationCopyLinkedChildReferences, collectConversationCopySessionContextRefIds, collectConversationCopySessionFileRefs, createConversationCopySlice, prepareConversationRuntimeLedgerCopy, } from '@maka/runtime/conversation-copy';
 import { isArchivedToolResultPlaceholder } from '@maka/runtime/context-budget';
 import { decodeModelProjectionTransition, MODEL_PROJECTION_TRANSITION_EVENT_TYPE, } from '@maka/core/model-projection-transition';
@@ -204,6 +205,9 @@ export class HostSessionRevisionCoordinator {
         if (isDeepResearchSession(sourceHeader.labels)) {
             return copyFailure('operation_unavailable', 'Deep Research Sessions cannot be copied without an exact research ledger boundary');
         }
+        const copyUnavailableReason = runtimeHostConversationCopyUnavailableReason(sourceHeader);
+        if (copyUnavailableReason)
+            return copyFailure('operation_unavailable', copyUnavailableReason);
         if (kind !== 'side_conversation' && this.options.isSessionActive(input.sourceSessionId)) {
             return copyFailure('session_busy', 'Source Session has an active Turn');
         }

package/node_modules/@maka/runtime-host/dist/server/web-fetch-tool.js

@@ -17,7 +17,7 @@
  * under the License.
  */
 import { buildWebFetchTool } from '@maka/runtime/web-fetch-tool';
-import { createLocalWebFetchExecutor } from '@maka/runtime/local-web-fetch';
+import { assertAllowedTarget, createLocalWebFetchExecutor } from '@maka/runtime/local-web-fetch';
 import { createProxiedFetchTransport, } from '@maka/runtime/network/scoped-fetch-transport';
 import { toRuntimePolicyProxy } from './runtime-policy-proxy.js';
 export function createHostWebFetchService(input) {
@@ -43,6 +43,42 @@ export function createHostWebFetchService(input) {
                 await transport.close();
             }
         },
+        probe: async ({ url, abortSignal }) => {
+            const parsed = new URL(url);
+            assertAllowedTarget(parsed);
+            abortSignal.throwIfAborted();
+            const resolved = await input.policy.resolveHostOutboundExecution();
+            if (resolved.kind === 'privacy_mode')
+                throw new Error('Endpoint health checks are disabled while privacy mode is active.');
+            if (resolved.kind === 'credential_not_configured')
+                throw new Error('Configure the network proxy credential before checking an endpoint.');
+            const transport = createFetchTransport(toRuntimePolicyProxy(resolved.networkProxy, resolved.secretMaterial.networkProxy?.secret));
+            const started = Date.now();
+            const timeout = new AbortController();
+            const timer = setTimeout(() => timeout.abort(new Error('Endpoint health probe timed out.')), input.probeTimeoutMs ?? 30_000);
+            const signal = AbortSignal.any([abortSignal, timeout.signal]);
+            try {
+                let response = await transport.fetch(parsed, {
+                    method: 'HEAD',
+                    redirect: 'manual',
+                    signal,
+                });
+                await response.body?.cancel();
+                if (response.status === 405 || response.status === 501) {
+                    response = await transport.fetch(parsed, { method: 'GET', redirect: 'manual', signal });
+                    await response.body?.cancel();
+                }
+                return {
+                    status: response.status,
+                    ...(response.statusText ? { statusText: response.statusText } : {}),
+                    elapsedMs: Date.now() - started,
+                };
+            }
+            finally {
+                clearTimeout(timer);
+                await transport.close();
+            }
+        },
     };
 }
 export function createHostWebFetchTool(input) {