maka-agent 0.2.0-dev.43.20260919 → 0.2.0-dev.45.20260921

package/node_modules/@maka/core/dist/model-metadata.js

@@ -413,9 +413,8 @@ function buildStaticModelMetadata(active) {
     return {
         anthropic: ANTHROPIC_MODEL_OVERRIDES,
         'claude-subscription': claudeSubscriptionModelMetadata(active),
-        // Both Command Code providers ride the same Provider-API effort table.
+        // The Command Code Provider-API plan rides the same effort table.
         commandcode: COMMAND_CODE_MODEL_METADATA,
-        'commandcode-go': COMMAND_CODE_MODEL_METADATA,
         'alibaba-token-plan-cn': {
             'qwen3.8-max': {
                 thinkingOptions: { efforts: ['none', 'low', 'medium', 'xhigh'], toggle: true },

package/node_modules/@maka/core/dist/model-thinking.js

@@ -85,6 +85,9 @@ function normalizeModelOverride(entry) {
             declared.thinkingLevels = DECLARABLE_RELAY_THINKING_LEVELS.filter((level) => declaredSet.has(level));
         }
     }
+    if (isThinkingLevel(entry.defaultThinkingLevel)) {
+        declared.defaultThinkingLevel = entry.defaultThinkingLevel;
+    }
     if (typeof entry.vision === 'boolean')
         declared.vision = entry.vision;
     for (const field of [
@@ -188,6 +191,18 @@ export function thinkingVariantsForConnection(connection, modelId) {
         return declared;
     return thinkingVariantsForModel(connection.providerType, modelId);
 }
+/**
+ * Resolve the configured new-Session default against the model's effective
+ * capability ladder. A stale declaration falls back to the provider default
+ * instead of reaching Session creation as an unsupported level.
+ */
+export function defaultThinkingLevelForConnection(connection, modelId) {
+    const configured = modelOverride(connection, modelId)?.defaultThinkingLevel;
+    return configured !== undefined &&
+        thinkingVariantsForConnection(connection, modelId).includes(configured)
+        ? configured
+        : undefined;
+}
 /**
  * Discard-semantics gate: returns the level when the model offers it,
  * `undefined` otherwise. Callers that must *reject* a bad level (IPC/session
@@ -225,7 +240,7 @@ export function thinkingVariantsForModel(providerType, modelId) {
 export function applyModelOverride(model, override) {
     if (!override)
         return model;
-    const { thinkingLevels: _thinking, serviceTier: _tier, compactionThreshold: _threshold, maxOutputTokens: _outputBudget, vision, capabilities, ...facts } = override;
+    const { thinkingLevels: _thinking, defaultThinkingLevel: _defaultThinking, serviceTier: _tier, compactionThreshold: _threshold, maxOutputTokens: _outputBudget, vision, capabilities, ...facts } = override;
     return {
         ...model,
         ...facts,

package/node_modules/@maka/core/dist/models-dev-projection.js

@@ -203,7 +203,6 @@ export function projectModelsDevModel(providerId, modelId, provider, model) {
         ...(model.knowledge !== undefined ? { knowledgeCutoff: model.knowledge } : {}),
         ...(model.structured_output !== undefined ? { structuredOutput: model.structured_output } : {}),
         ...(model.last_updated !== undefined ? { lastUpdated: model.last_updated } : {}),
-        ...(model.cost?.input === 0 ? { isFree: true } : {}),
         capabilities: {
             ...(modalities ? { vision: modalities.input.includes('image') } : {}),
             reasoning: model.reasoning === true,

package/node_modules/@maka/core/dist/provider-auth.js

@@ -22,12 +22,7 @@ import { providerAuthRequiresSecret, providerDefaultsOf, providerSupportsModelDi
  * storage coordinator actually gates — an operation with no admission point
  * does not belong here, however natural it sounds beside these three.
  */
-export const PROVIDER_AUTH_ACTIONS = [
-    'test_credentials',
-    'fetch_models',
-    'read_usage',
-    'start_oauth',
-];
+export const PROVIDER_AUTH_ACTIONS = ['test_credentials', 'fetch_models', 'start_oauth'];
 /**
  * Which credential operations a connection may run. This is an admission
  * answer, not a UI state: the storage layer refuses an unavailable action, so a
@@ -74,7 +69,6 @@ export function deriveProviderAuthContract(input) {
             fetch_models: canFetchModels && (reachableWithoutSecret || hasSecret),
             // Reading account usage needs the same reachability as a connection test:
             // a credential the provider accepts over HTTP.
-            read_usage: reachableWithoutSecret || hasSecret,
         }),
     };
 }

package/node_modules/@maka/core/dist/provider-registry.js

@@ -17,7 +17,6 @@
  * under the License.
  */
 import { GENERATED_MODELS_DEV_METADATA, GENERATED_MODELS_DEV_MODEL_PROVIDER_OVERRIDES, GENERATED_MODELS_DEV_PROVIDER_FACTS, } from './model-metadata.generated.js';
-export const OPENCODE_FREE_DEFAULT_MODEL = 'nemotron-3-ultra-free';
 const siliconflow = GENERATED_MODELS_DEV_PROVIDER_FACTS.siliconflow;
 if (!siliconflow.api)
     throw new Error('models.dev SiliconFlow provider facts are missing api');
@@ -423,37 +422,6 @@ if (opencodeGo.id !== 'opencode-go' || opencodeGo.api !== 'https://opencode.ai/z
     throw new Error('models.dev OpenCode Go provider facts are missing the stable id or API');
 }
 const opencodeGoModelIds = toolCallingModelIds('OpenCode Go', GENERATED_MODELS_DEV_METADATA['opencode-go'], ['minimax-m3']).filter((id) => GENERATED_MODELS_DEV_METADATA['opencode-go'][id]?.lifecycle !== 'deprecated');
-// opencode-free is Maka's first-class free anonymous default. It shares the
-// OpenCode Zen endpoint and model ids, exposing the active tool-capable
-// models the models.dev snapshot marks `isFree` (zero input cost). Deriving
-// the set from the snapshot lets routine metadata refreshes rotate free
-// models in and out instead of letting a hardcoded pin rot (#3409).
-//
-// Persistently broken free models, excluded with dated evidence. Deny-only:
-// a stale entry hides at most one healthy model, the opposite failure mode of
-// the allow-list pin this replaced. Entries should be re-probed on snapshot
-// refreshes and removed once the model produces content again.
-// 2026-08-21 muse-spark-1.2-contributor-free: anonymous completions return
-// 200 with an empty message and bill the full token budget (4 consecutive
-// probes, max_tokens 8–200) — a failure shape that even "the send settles it"
-// cannot surface, which is why these ids are also vetoed in
-// `authorizeConnectionModel` rather than merely dropped from this derivation.
-// 2026-08-30 x-preview-f-free (Ox Alpha Free): retired upstream — dropped from
-// the anonymous /models listing and every completion returns HTTP 401
-// {"type":"ModelError","message":"Model x-preview-f-free is not supported"}.
-// models.dev still snapshots it as free+active, so the derivation kept offering
-// it as a default-enabled, picker-visible row until this quarantine. Remove
-// once the snapshot marks it deprecated (or upstream serves it again).
-const OPENCODE_FREE_BROKEN_MODEL_IDS = new Set([
-    'muse-spark-1.2-contributor-free',
-    'x-preview-f-free',
-]);
-const opencodeFreeModelIds = toolCallingModelIds('OpenCode Free', Object.fromEntries(Object.entries(GENERATED_MODELS_DEV_METADATA.opencode).filter(([id, model]) => model.isFree === true &&
-    model.lifecycle !== 'deprecated' &&
-    !OPENCODE_FREE_BROKEN_MODEL_IDS.has(id))), [OPENCODE_FREE_DEFAULT_MODEL]);
-if (opencodeFreeModelIds[0] !== OPENCODE_FREE_DEFAULT_MODEL) {
-    throw new Error(`models.dev opencode snapshot no longer serves ${OPENCODE_FREE_DEFAULT_MODEL} as an active tool-capable free model; pick a new OPENCODE_FREE_DEFAULT_MODEL`);
-}
 const githubCopilot = GENERATED_MODELS_DEV_PROVIDER_FACTS['github-copilot'];
 if (githubCopilot.id !== 'github-copilot') {
     throw new Error('models.dev GitHub Copilot provider facts are missing stable id github-copilot');
@@ -968,22 +936,15 @@ const providerRegistry = {
         label: 'OpenCode Free',
         baseUrl: opencode.api,
         authKind: 'none',
-        fallbackModels: [...opencodeFreeModelIds],
-        // Free and keyless: nothing is spent by having every shipped model on, and
-        // a user who just added the connection can send immediately.
-        enableShippedModelsByDefault: true,
-        brokenModelIds: [...OPENCODE_FREE_BROKEN_MODEL_IDS],
-        status: 'ready',
-        runtimeAdapter: { kind: 'openai-compatible', name: 'provider' },
+        fallbackModels: [],
+        status: 'phase3-experimental',
+        runtimeAdapter: { kind: 'unavailable' },
+        retired: true,
         modelDiscovery: {
             kind: 'fallback',
-            reason: 'The anonymous /models listing describes the full Zen catalog with no cost facts; which models are FREE is a models.dev fact, so the derived candidates are the inventory and the send settles availability.',
+            reason: 'OpenCode restricts its free tier to the OpenCode client.',
         },
         category: 'overseas',
-        catalogGroup: 'plans',
-        signupUrl: 'https://opencode.ai/zen',
-        catalogOrder: 0,
-        recommendedOrder: 0,
     },
     togetherai: {
         label: together.name,
@@ -1259,20 +1220,26 @@ const providerRegistry = {
         signupUrl: 'https://commandcode.ai/docs/plans/goat',
         catalogOrder: 41.5,
     },
+    // Retired rather than removed: an existing connection must stay identifiable
+    // and must answer `provider_retired` at readiness. Removing the entry would
+    // leave it *unknown*, which `isConnectionReady` does not reject, so a send
+    // would be admitted and only fail deep in model construction. Its transport
+    // presented the official CLI's identity to a private endpoint, which is why
+    // nothing can send through it any more.
     'commandcode-go': {
         label: 'Command Code GO',
-        // The API root, not `/provider/v1`: generation posts to `/alpha/generate`
-        // and discovery reads `/provider/v1/models`, both under it.
         baseUrl: 'https://api.commandcode.ai',
         authKind: 'api_key',
         fallbackModels: [],
-        status: 'ready',
-        runtimeAdapter: { kind: 'commandcode-cli' },
-        modelDiscovery: { kind: 'protocol', path: 'provider/v1/models' },
+        status: 'phase3-experimental',
+        runtimeAdapter: { kind: 'unavailable' },
+        retired: true,
+        modelDiscovery: {
+            kind: 'fallback',
+            reason: 'The GO plan was reached through the official CLI\u2019s private transport.',
+        },
         category: 'overseas',
         catalogGroup: 'plans',
-        signupUrl: 'https://commandcode.ai/docs/plans/go',
-        catalogOrder: 41.6,
     },
     'cloudflare-workers-ai': {
         label: cloudflareWorkersAi.name,
@@ -1471,16 +1438,11 @@ export function providerDefaultsOf(providerType) {
 }
 /**
  * The models a provider offers with no live list to go on: the baseline it
- * ships, minus anything quarantined. This is the only reader of
+ * ships. This is the only reader of
  * `fallbackModels` — a provider's offline offer has exactly one authority.
- *
- * `brokenModelIds` subtracts here rather than being pruned from the baseline at
- * the source because the ids it names are ones a stored connection may still
- * carry from an older shipped list.
  */
 export function providerFallbackModelIds(defaults) {
-    const broken = new Set(defaults.brokenModelIds ?? []);
-    return defaults.fallbackModels.filter((id) => !broken.has(id));
+    return [...defaults.fallbackModels];
 }
 /**
  * The provider's name as a model row shows it, or `undefined` when this build

package/node_modules/@maka/core/dist/recall.js

@@ -59,7 +59,7 @@ import { validateWorkspacePrivacyContext } from './incognito.js';
 import { redactSecrets } from './redaction.js';
 import { SEARCH_QUERY_MAX_CHARS } from './search.js';
 import { collapseSessionRevisions } from './session-revisions.js';
-import { foldForMatch, MAX_SESSIONS_SCANNED, threadSearchMatchKind } from './thread-search.js';
+import { foldForMatch, MAX_SESSIONS_SCANNED, threadSearchMatchKind } from './transcript-search.js';
 /** Okapi BM25 term-frequency saturation, Lucene's default. */
 export const RECALL_BM25_K1 = 1.2;
 /** Okapi BM25 length normalization, Lucene's default. */
@@ -960,6 +960,10 @@ function buildPassage(anchor, transcript, session, budget, activeSessionId, span
         sessionTitle: redactSecrets(session?.name ?? ''),
         ...(anchor.turnId ? { turnId: anchor.turnId } : {}),
         anchorMessageId: anchor.message.id,
+        // The anchor's position in the transcript this passage was built from.
+        // `anchorIndex` is already `findIndex` over that exact array, so this is
+        // the same coordinate the transcript reader addresses.
+        sequence: anchorIndex,
         messages,
         matchedTerms: anchor.matchedTerms,
         score: Number(anchor.score.toFixed(4)),

package/node_modules/@maka/core/dist/runtime-policy/connection-catalog-codec.js

@@ -168,6 +168,7 @@ export function decodeModelOverridesTable(value) {
         decodeConnectionModelId(modelId);
         const entry = exactRecord(rawEntry, `relay model profile for ${modelId}`, [
             'thinkingLevels',
+            'defaultThinkingLevel',
             'vision',
             'contextWindow',
             'serviceTier',
@@ -200,6 +201,12 @@ export function decodeModelOverridesTable(value) {
             }
             declared.thinkingLevels = [...entry.thinkingLevels];
         }
+        if (entry.defaultThinkingLevel !== undefined) {
+            if (!isThinkingLevel(entry.defaultThinkingLevel)) {
+                throw domainError(`default thinking level for ${modelId} is invalid`);
+            }
+            declared.defaultThinkingLevel = entry.defaultThinkingLevel;
+        }
         if (entry.vision !== undefined) {
             declared.vision = booleanValue(entry.vision, `declared vision for ${modelId}`);
         }

package/node_modules/@maka/core/dist/runtime-policy/model-catalog-entry-codec.js

@@ -36,6 +36,7 @@ export function decodeModelCatalogEntry(value) {
         'defaultSupportsVision',
         'compactionThreshold',
         'thinkingLevels',
+        'defaultThinkingLevel',
         'contextWindow',
         'inputLimit',
         'defaultContextWindow',
@@ -49,6 +50,7 @@ export function decodeModelCatalogEntry(value) {
         id: item.id,
         ...pick(item, ['displayName', 'description', 'contextWindow', 'inputLimit', 'knowledgeCutoff']),
     });
+    const thinkingLevels = decodeThinkingLevels(item.thinkingLevels);
     return {
         ...shared,
         ...Object.fromEntries(['defaultContextWindow', 'defaultInputLimit'].flatMap((field) => item[field] === undefined
@@ -67,9 +69,20 @@ export function decodeModelCatalogEntry(value) {
                 defaultSupportsVision: booleanValue(item.defaultSupportsVision, 'entry default vision support'),
             }
             : {}),
-        thinkingLevels: decodeThinkingLevels(item.thinkingLevels),
+        thinkingLevels,
+        ...(item.defaultThinkingLevel === undefined
+            ? {}
+            : {
+                defaultThinkingLevel: decodeDefaultThinkingLevel(item.defaultThinkingLevel, thinkingLevels),
+            }),
     };
 }
+function decodeDefaultThinkingLevel(value, available) {
+    if (!isThinkingLevel(value) || !available.includes(value)) {
+        throw domainError('entry default thinking level is invalid');
+    }
+    return value;
+}
 function decodeThinkingLevels(value) {
     if (!Array.isArray(value))
         throw domainError('entry thinking levels must be an array');

package/node_modules/@maka/core/dist/session-start-mode.js

@@ -17,11 +17,6 @@
  * under the License.
  */
 export const SESSION_START_MODE_SPECS = {
-    deep_research: {
-        name: 'Deep Research',
-        labels: ['mode:deep_research'],
-        permissionMode: 'explore',
-    },
     bot: {
         labels: ['mode:bot'],
         permissionMode: 'explore',
@@ -29,6 +24,8 @@ export const SESSION_START_MODE_SPECS = {
 };
 export const SESSION_START_MODES = Object.keys(SESSION_START_MODE_SPECS);
 export const SESSION_START_MODE_LABELS = [
+    // Historical mode labels remain reserved when editing old Sessions.
+    'mode:deep_research',
     ...new Set(Object.values(SESSION_START_MODE_SPECS).flatMap((spec) => spec.labels)),
 ];
 export function isSessionStartMode(value) {

package/node_modules/@maka/core/dist/session.js

@@ -27,7 +27,6 @@ import { isTokenUsageFields } from './usage-record-schema.js';
 import { decodeCanonicalToolResultContent, decodePersistedToolResultContent, } from './tool-result-record-schema.js';
 import { markPersisted } from './persisted-value.js';
 import { decodeTurnOrigin } from './turn-origin.js';
-export { DEEP_RESEARCH_SESSION_LABEL, isDeepResearchSession } from './deep-research.js';
 /** Runtime execution states. Archive visibility is represented by `isArchived`. */
 export const SESSION_STATUSES = [
     'active',

package/node_modules/@maka/core/dist/settings.js

@@ -27,6 +27,23 @@ import { normalizeSubagentSettings } from './subagent-settings.js';
 import { isPetPackId } from './pet.js';
 export { UI_LOCALE_PREFERENCES, isUiLocalePreference } from './ui-locale.js';
 export { BOT_DELIVERY_PROVIDERS, BOT_PROVIDERS, BOT_READINESS_STATES, MAX_ALLOWED_USER_IDS, createDefaultBotChannel, hasBotChannelCredentials, isBotDeliveryProvider, isBotReadinessState, normalizeAllowedUserIds, parseAllowedUserIdsFromText, } from './bot-chat-settings.js';
+export const USAGE_SCREEN_SEARCH_MAX_BYTES = 1024;
+const USAGE_SCREEN_UTF8 = new TextEncoder();
+/** Shared domain for the Usage screen's free-text query at every boundary. */
+export function isUsageScreenSearch(value) {
+    return (typeof value === 'string' &&
+        USAGE_SCREEN_UTF8.encode(value).byteLength <= USAGE_SCREEN_SEARCH_MAX_BYTES);
+}
+/**
+ * Persisted Usage timestamps may retain sub-millisecond precision. Keep them
+ * JSON/SQLite round-trip safe so a stored value can also name a continuation.
+ */
+export function isUsageTimestamp(value) {
+    return (typeof value === 'number' &&
+        Number.isFinite(value) &&
+        value >= 0 &&
+        value <= Number.MAX_SAFE_INTEGER);
+}
 export const SETTINGS_SECTIONS = [
     'general',
     'appearance',
@@ -608,9 +625,8 @@ function defaultChatDefaultsSettings() {
 function normalizeChatDefaultsSettings(settings) {
     return {
         ...(settings.codeModeEnabled === true ? { codeModeEnabled: true } : {}),
-        // Same fail-closed reasoning as the mode below: a garbage persisted level
-        // drops to "no preference" (the model's own default) rather than reaching
-        // session creation as a rung no picker recognizes.
+        // Preserve the retired field while older settings documents still carry it.
+        // No task creation path consumes it; defaults now live on model overrides.
         thinkingLevel: isThinkingLevel(settings.thinkingLevel) ? settings.thinkingLevel : undefined,
         // A retired mode is decoded (not rejected) so an existing settings file
         // keeps working; knowing which modes are retired lives in one place.

package/node_modules/@maka/core/dist/tool-quiet-preview.js

@@ -217,13 +217,6 @@ export function formatToolInvocationLine(item, locale) {
             parts.push(`${cols}x${rows}`);
         return parts.join(' · ');
     }
-    if (name === 'deep_research_start') {
-        const objective = stringField(args, 'objective');
-        if (objective) {
-            const scopeLevel = stringField(args, 'scope_level');
-            return redactSecrets(scopeLevel ? `${objective} (${scopeLevel})` : objective);
-        }
-    }
     if (name === 'GoalSet') {
         const condition = stringField(args, 'condition');
         if (condition)
@@ -304,10 +297,6 @@ const ARGS_PREVIEW_SCALAR_KEYS = [
     'id',
     'ref',
 ];
-// This tool's objective is the compact row's durable headline. Keep it
-// explicit rather than widening the generic wire allowlist with a broad key
-// such as `input`: non-WriteStdin tools otherwise retain arbitrary payloads.
-const DEEP_RESEARCH_START_PREVIEW_SCALAR_KEYS = ['objective', 'scope_level'];
 const ARGS_PREVIEW_NUMBER_KEYS = ['offset', 'limit'];
 function boundPreviewString(value) {
     const redacted = redactSecrets(value);
@@ -387,11 +376,8 @@ export function projectToolArgsPreview(toolName, args) {
     // Apply the canonical activity projection first so WriteStdin's inputPreview
     // shape (bounded, display-safe) is what the whitelist picks up.
     const projected = asRecord(projectToolActivityArgs(toolName, args)) ?? record;
-    const scalarKeys = toolName === 'deep_research_start'
-        ? [...ARGS_PREVIEW_SCALAR_KEYS, ...DEEP_RESEARCH_START_PREVIEW_SCALAR_KEYS]
-        : ARGS_PREVIEW_SCALAR_KEYS;
     const picked = new Map();
-    for (const key of scalarKeys) {
+    for (const key of ARGS_PREVIEW_SCALAR_KEYS) {
         if (isSensitiveKey(key))
             continue;
         const value = previewStringField(projected, key);
@@ -429,7 +415,7 @@ export function projectToolArgsPreview(toolName, args) {
     // Enforce the whole-preview budget by dropping lowest-priority fields; the
     // first picked (highest-priority) field always survives.
     const keysByPriority = [
-        ...scalarKeys,
+        ...ARGS_PREVIEW_SCALAR_KEYS,
         ...ARGS_PREVIEW_NUMBER_KEYS,
         'inputPreview',
         'size',

package/node_modules/@maka/core/dist/transcript-search.js

@@ -0,0 +1,46 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+/** Max sessions scanned per query (newest first by lastMessageAt). */
+export const MAX_SESSIONS_SCANNED = 200;
+/**
+ * NFC + lowercase canonicalization for substring match. NOT a security
+ * boundary — purely for case-insensitive + composed-form matching.
+ */
+export function foldForMatch(value) {
+    return value.normalize('NFC').toLowerCase();
+}
+/** Stable result classification shared by Desktop navigation and Agent tools. */
+export function threadSearchMatchKind(message) {
+    switch (message.type) {
+        case 'user':
+            return 'user_message';
+        case 'assistant':
+            return 'assistant_message';
+        case 'tool_call':
+            return 'tool_intent';
+        case 'tool_result':
+            return 'tool_result';
+        case 'permission_decision':
+        case 'token_usage':
+        case 'turn_state':
+        case 'workhub_coordination':
+        case 'system_note':
+            throw new Error(`Message type ${message.type} is not searchable`);
+    }
+}

package/node_modules/@maka/core/package.json

@@ -82,11 +82,8 @@
     "./agent-graph-supervisor-wake": "./dist/agent-graph-supervisor-wake.js",
     "./session-todo": "./dist/session-todo.js",
     "./external-session": "./dist/external-session.js",
-    "./deep-research-run": "./dist/deep-research-run.js",
-    "./deep-research-client-progress": "./dist/deep-research-client-progress.js",
     "./daily-review": "./dist/daily-review.js",
     "./work-board": "./dist/work-board.js",
-    "./deep-research": "./dist/deep-research.js",
     "./session-start-mode": "./dist/session-start-mode.js",
     "./long-term-memory": "./dist/long-term-memory.js",
     "./local-memory": "./dist/local-memory.js",
@@ -128,7 +125,7 @@
     "./session-send-projection": "./dist/session-send-projection.js",
     "./session-name": "./dist/session-name.js",
     "./recall": "./dist/recall.js",
-    "./thread-search": "./dist/thread-search.js",
+    "./transcript-search": "./dist/transcript-search.js",
     "./agent-graph-timeline": "./dist/agent-graph-timeline.js",
     "./agent-swarm": "./dist/agent-swarm.js",
     "./bot-chat-settings": "./dist/bot-chat-settings.js",

package/node_modules/@maka/mcp/dist/index.js

@@ -31,6 +31,7 @@ import { createMcpToolBinding, parseMcpToolBinding } from './tool-binding.js';
 import { McpToolCallError, normalizeToolCallError } from './tool-call-error.js';
 import { discoverMcpTools } from './tool-discovery.js';
 import { McpToolCallPreparer } from './tool-output-validation.js';
+import { mapMcpToolProgress } from './tool-progress.js';
 import { McpCredentialCoordinator } from './credential-coordinator.js';
 import { assertTransportSecurity, urlProvenance, } from './transport-security.js';
 import { McpAuthRequiredError, McpOAuthProvider, } from './oauth.js';
@@ -597,6 +598,26 @@ export class McpClientManager {
                 entry.toolSnapshot.get(toolName)?.binding !== binding)
                 throw new McpToolCallError(serverId, toolName, 'tool binding is stale');
         };
+        const progressListener = options.onProgress ?? options.emitProgress;
+        let forwardedProgressTotal;
+        let forwardedProgressCurrent = -1;
+        const forwardProgress = (progress) => {
+            const mapped = mapMcpToolProgress(progress);
+            if (!mapped)
+                return;
+            if ((forwardedProgressTotal !== undefined && mapped.total !== forwardedProgressTotal) ||
+                mapped.current <= forwardedProgressCurrent) {
+                return;
+            }
+            forwardedProgressTotal ??= mapped.total;
+            forwardedProgressCurrent = mapped.current;
+            try {
+                progressListener?.(mapped.current, mapped.total);
+            }
+            catch {
+                // Progress is advisory: a listener failure must not fail the tool.
+            }
+        };
         try {
             const originalArguments = requestInteraction ? structuredClone(args) : args;
             let continuation = {};
@@ -618,6 +639,7 @@ export class McpClientManager {
                     signal,
                     timeout: options.timeoutMs ?? this.timeouts.callToolMs,
                     toolDefinition: structuredClone(preparation.value.definitionForSdk),
+                    ...(progressListener ? { onprogress: forwardProgress } : {}),
                     ...(requestInteraction ? { allowInputRequired: true } : {}),
                 });
                 refreshInventory();

package/node_modules/@maka/mcp/dist/oauth.js

@@ -51,6 +51,8 @@ export class McpAuthRequiredError extends Error {
  * redirectToAuthorization. The URL itself is never opened or sent in a
  * token request. */
 const BACKGROUND_REDIRECT_URL = 'http://127.0.0.1/maka-mcp-oauth-noninteractive';
+/** Product homepage sent in OAuth dynamic client registration. */
+const MCP_OAUTH_CLIENT_URI = 'https://maka.apache.org/en/';
 export class McpOAuthProvider {
     options;
     /** Present only when an interactive state was supplied — the SDK treats
@@ -68,8 +70,8 @@ export class McpOAuthProvider {
     get clientMetadata() {
         return {
             client_name: this.options.clientName,
-            client_uri: 'https://github.com/maka-agent/maka-agent',
-            software_id: 'maka-desktop',
+            client_uri: MCP_OAUTH_CLIENT_URI,
+            software_id: this.options.clientName,
             software_version: this.options.clientVersion,
             redirect_uris: this.options.interactive ? [this.options.interactive.redirectUrl] : [],
             grant_types: ['authorization_code', 'refresh_token'],

package/node_modules/@maka/mcp/dist/tool-progress.js

@@ -0,0 +1,45 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+export const MCP_TOOL_PROGRESS_MAX_TOTAL = 1_024;
+/**
+ * Map an SDK `notifications/progress` payload onto the Host progress pair.
+ * First slice: only finite step counts that the shared tool-progress codec
+ * already accepts. Missing `total`, fractions, and inverted ranges are
+ * dropped so a noisy server cannot fail the tool call.
+ */
+export function mapMcpToolProgress(value) {
+    if (!isRecord(value))
+        return undefined;
+    const current = value.progress;
+    const total = value.total;
+    if (typeof current !== 'number' || typeof total !== 'number')
+        return undefined;
+    if (!Number.isSafeInteger(current) ||
+        !Number.isSafeInteger(total) ||
+        current < 0 ||
+        total < 1 ||
+        total > MCP_TOOL_PROGRESS_MAX_TOTAL ||
+        current > total) {
+        return undefined;
+    }
+    return { current, total };
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}

package/node_modules/@maka/runtime/dist/model-factory.js

@@ -33,7 +33,6 @@ import { openResponsesUrl } from './provider-urls.js';
 import { createOpenResponsesCompatibilityFinalizer } from './open-responses-compatibility.js';
 import { resolveModelRuntime, runtimeProviderName, } from './model-runtime.js';
 import { openAiCodexHeaders } from './subscription-auth.js';
-import { CommandCodeCliLanguageModel } from './commandcode-cli-language-model.js';
 import { createRequestCustomizationFetch } from './request-customization-fetch.js';
 import { createStreamUsageFallbackFetch } from './stream-usage-fallback-fetch.js';
 import { withOpenCodeSessionHeader } from './opencode-session-header.js';
@@ -112,13 +111,6 @@ export function getAIModel(input) {
             }).chat(modelId);
         case 'cohere':
             return createCohere({ apiKey, baseURL, fetch: requestFetch })(modelId);
-        case 'commandcode-cli':
-            return new CommandCodeCliLanguageModel({
-                modelId,
-                apiKey,
-                apiBase: baseURL,
-                fetch: requestFetch,
-            });
         case 'openai-compatible': {
             if (adapter.requireBaseUrl && !baseURL) {
                 throw new Error(`${connection.providerType} connection ${connection.slug} requires a base URL`);
@@ -653,14 +645,6 @@ function buildFamilyWire(connection, modelId, level, thinkingOptions, requestedL
                     ? { thinking: { type: 'disabled' } }
                     : {},
             };
-        case 'commandcode-cli':
-            // The CLI wire takes `reasoning_effort` as the CLI's own effort words.
-            // `max` is one of them (claude-fable-5-1, moonshotai/Kimi-K3, …), so the
-            // chosen level is forwarded verbatim — rounding it down would silently
-            // send a weaker request than the user asked for.
-            return level === undefined || level === 'off'
-                ? {}
-                : { 'commandcode-cli': { reasoningEffort: level } };
         default:
             return {};
     }

package/node_modules/@maka/runtime/dist/model-fetcher.js

@@ -103,10 +103,7 @@ async function fetchProviderModelsStrict(connection, apiKey, fetchFn) {
             return filterDiscoveredModels(models, discovery.filter);
         }
         case 'openai':
-        case 'openai-compatible':
-        // The CLI transport lists models through the Provider API's `/models`,
-        // which every plan may read.
-        case 'commandcode-cli': {
+        case 'openai-compatible': {
             const r = await fetchForConnectionEffect(fetchFn, modelListUrl(baseUrl, discovery.path, discovery.query), {
                 headers: {
                     'content-type': 'application/json',

package/node_modules/@maka/runtime/dist/model-runtime.js

@@ -114,14 +114,6 @@ function adapterCalls(adapter) {
             return [{ adapter, wire: 'google-generate', reasoningReplay: { kind: 'none' } }];
         case 'cohere':
             return [{ adapter, wire: 'cohere-v2', reasoningReplay: { kind: 'none' } }];
-        case 'commandcode-cli':
-            return [
-                {
-                    adapter,
-                    wire: 'commandcode-cli',
-                    reasoningReplay: { kind: 'openai-chat-plaintext', requestField: 'reasoning' },
-                },
-            ];
         case 'openai-codex':
             return [
                 {