maka-agent 0.2.0-dev.53.20260927 → 0.2.0-dev.62.20260928

package/node_modules/@maka/core/dist/relative-time-policy.js

@@ -0,0 +1,71 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+export const RELATIVE_HORIZON_MS = 7 * 24 * 60 * 60 * 1000;
+export const JUST_NOW_MS = 60_000;
+export const MINUTE_MS = 60_000;
+export const HOUR_MS = 60 * MINUTE_MS;
+export const DAY_MS = 24 * HOUR_MS;
+export const MONTH_MS = 30 * DAY_MS;
+export const YEAR_MS = 12 * MONTH_MS;
+const MAX_SIDEBAR_REFRESH_MS = 24 * DAY_MS;
+export const JUST_NOW = {
+    'zh-CN': '刚刚',
+    'zh-TW': '剛剛',
+    en: 'just now',
+};
+const SIDEBAR_TIME_BUCKETS = [
+    { unitMs: MINUTE_MS, maxValue: 60, suffix: 'min' },
+    { unitMs: HOUR_MS, maxValue: 24, suffix: 'h' },
+    { unitMs: DAY_MS, maxValue: 30, suffix: 'd' },
+    { unitMs: MONTH_MS, maxValue: 12, suffix: 'mo' },
+    { unitMs: YEAR_MS, maxValue: Number.POSITIVE_INFINITY, suffix: 'y' },
+];
+export function relativeAgeMs(timestamp, now) {
+    return Math.max(0, now - timestamp);
+}
+export function sidebarTimeBucket(ageMs) {
+    for (const bucket of SIDEBAR_TIME_BUCKETS) {
+        const value = Math.round(ageMs / bucket.unitMs);
+        if (value < bucket.maxValue)
+            return { value, unitMs: bucket.unitMs, suffix: bucket.suffix };
+    }
+    throw new Error('Sidebar time buckets must end with an unbounded bucket');
+}
+function nextRoundedBoundaryDelay(ageMs, unitMs, value) {
+    return Math.max(1, Math.ceil((value + 0.5) * unitMs - ageMs));
+}
+export function nextRelativeRefreshDelay(timestamp, now) {
+    const ageMs = relativeAgeMs(timestamp, now);
+    if (ageMs > RELATIVE_HORIZON_MS)
+        return null;
+    if (ageMs < JUST_NOW_MS)
+        return JUST_NOW_MS - ageMs;
+    if (ageMs < HOUR_MS)
+        return MINUTE_MS;
+    return 10 * MINUTE_MS;
+}
+export function nextSidebarRefreshDelay(timestamp, now) {
+    const ageMs = relativeAgeMs(timestamp, now);
+    if (!Number.isFinite(ageMs))
+        return null;
+    if (ageMs < JUST_NOW_MS)
+        return JUST_NOW_MS - ageMs;
+    const bucket = sidebarTimeBucket(ageMs);
+    return Math.min(nextRoundedBoundaryDelay(ageMs, bucket.unitMs, bucket.value), MAX_SIDEBAR_REFRESH_MS);
+}

package/node_modules/@maka/core/dist/relative-time.js

@@ -24,33 +24,7 @@
  * useful than a relative label like "300 天前".
  */
 import { uiLocaleToIntlLocale } from './ui-locale.js';
-/** Maximum age (ms) that still gets a relative bucket. Older → absolute. */
-const RELATIVE_HORIZON_MS = 7 * 24 * 60 * 60 * 1000;
-/** Age below this stays on one just-now label instead of counting seconds. */
-const JUST_NOW_MS = 60_000;
-const MINUTE_MS = 60_000;
-const HOUR_MS = 60 * MINUTE_MS;
-const DAY_MS = 24 * HOUR_MS;
-const MONTH_MS = 30 * DAY_MS;
-const YEAR_MS = 12 * MONTH_MS;
-/** Stays below the browser timer ceiling while avoiding needless daily wakes. */
-const MAX_SIDEBAR_REFRESH_MS = 24 * DAY_MS;
-const SIDEBAR_TIME_BUCKETS = [
-    { unitMs: MINUTE_MS, maxValue: 60, suffix: 'min' },
-    { unitMs: HOUR_MS, maxValue: 24, suffix: 'h' },
-    { unitMs: DAY_MS, maxValue: 30, suffix: 'd' },
-    { unitMs: MONTH_MS, maxValue: 12, suffix: 'mo' },
-    { unitMs: YEAR_MS, maxValue: Number.POSITIVE_INFINITY, suffix: 'y' },
-];
-const JUST_NOW = {
-    'zh-CN': '刚刚',
-    'zh-TW': '剛剛',
-    en: 'just now',
-};
-/** Future timestamps are treated as age zero and therefore display as just now. */
-function relativeAgeMs(ts, now) {
-    return Math.max(0, now - ts);
-}
+import { JUST_NOW, JUST_NOW_MS, RELATIVE_HORIZON_MS, relativeAgeMs, nextRelativeRefreshDelay as nextRelativeRefreshDelayPolicy, nextSidebarRefreshDelay as nextSidebarRefreshDelayPolicy, sidebarTimeBucket, } from './relative-time-policy.js';
 // One cache per formatter. They used to share `cachedLocale` and clear each
 // other on a miss, so alternating relative and absolute reads — which is what
 // the sidebar does, once per row — rebuilt an `Intl` formatter every call.
@@ -175,33 +149,8 @@ export function resetRelativeTimeFormatters() {
  * past the horizon (never re-render).
  */
 export function nextRelativeRefreshDelay(ts, now = Date.now()) {
-    const ageMs = relativeAgeMs(ts, now);
-    if (ageMs > RELATIVE_HORIZON_MS)
-        return null;
-    if (ageMs < JUST_NOW_MS)
-        return JUST_NOW_MS - ageMs;
-    if (ageMs < 60 * 60_000)
-        return 60_000;
-    return 10 * 60_000;
-}
-function nextRoundedBoundaryDelay(ageMs, unitMs, value) {
-    return Math.max(1, Math.ceil((value + 0.5) * unitMs - ageMs));
-}
-function sidebarTimeBucket(ageMs) {
-    for (const bucket of SIDEBAR_TIME_BUCKETS) {
-        const value = Math.round(ageMs / bucket.unitMs);
-        if (value < bucket.maxValue)
-            return { value, unitMs: bucket.unitMs, suffix: bucket.suffix };
-    }
-    throw new Error('Sidebar time buckets must end with an unbounded bucket');
+    return nextRelativeRefreshDelayPolicy(ts, now);
 }
-/** Refreshes at the next visible sidebar bucket, capped below the timer ceiling. */
 export function nextSidebarRefreshDelay(ts, now = Date.now()) {
-    const ageMs = relativeAgeMs(ts, now);
-    if (!Number.isFinite(ageMs))
-        return null;
-    if (ageMs < JUST_NOW_MS)
-        return JUST_NOW_MS - ageMs;
-    const bucket = sidebarTimeBucket(ageMs);
-    return Math.min(nextRoundedBoundaryDelay(ageMs, bucket.unitMs, bucket.value), MAX_SIDEBAR_REFRESH_MS);
+    return nextSidebarRefreshDelayPolicy(ts, now);
 }

package/node_modules/@maka/core/package.json

@@ -28,6 +28,7 @@
     "./execution-inspect": "./dist/execution-inspect.js",
     "./events": "./dist/events.js",
     "./provider-retry-countdown": "./dist/provider-retry-countdown.js",
+    "./message-queue-order": "./dist/message-queue-order.js",
     "./interaction": "./dist/interaction.js",
     "./session": "./dist/session.js",
     "./turn-origin": "./dist/turn-origin.js",

package/node_modules/@maka/eval/dist/egress-audit.js

@@ -0,0 +1,127 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+import { createHash } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+export const EGRESS_AUDIT_DESTINATION = 'egress-hits.jsonl';
+export const EGRESS_AUDIT_ARTIFACT_PATH = `artifacts/${EGRESS_AUDIT_DESTINATION}`;
+export function egressAuditCollection() {
+    return [
+        {
+            source: '/opt/maka-egress-state/hits.jsonl',
+            destination: EGRESS_AUDIT_DESTINATION,
+            service: 'maka-eval-mitmproxy',
+        },
+    ];
+}
+export function describeEgressAudit(bytes, required) {
+    if (!required)
+        return cleanEvidence();
+    if (bytes === undefined)
+        return missingEvidence();
+    return {
+        failureReason: null,
+        artifacts: [
+            {
+                kind: 'egress-audit',
+                path: EGRESS_AUDIT_ARTIFACT_PATH,
+                bytes: bytes.byteLength,
+                sha256: digest(bytes),
+                ...summarize(bytes),
+            },
+        ],
+    };
+}
+export async function readEgressAuditEvidence(trialPath, required) {
+    if (!required)
+        return cleanEvidence();
+    const auditPath = join(trialPath, EGRESS_AUDIT_ARTIFACT_PATH);
+    try {
+        return describeEgressAudit(await readFile(auditPath), true);
+    }
+    catch (error) {
+        const code = errorCode(error);
+        if (code === 'ENOENT')
+            return missingEvidence();
+        return {
+            failureReason: `failed to read egress audit log ${auditPath}${code ? ` (${code})` : ''}`,
+            artifacts: [{ kind: 'egress-audit-unreadable', path: EGRESS_AUDIT_ARTIFACT_PATH }],
+        };
+    }
+}
+function summarize(bytes) {
+    let truncated = false;
+    let policyErrorCount = 0;
+    let malformedLineCount = 0;
+    for (const line of jsonLines(bytes)) {
+        const record = decodeRecord(line);
+        if (record === undefined)
+            continue;
+        if (record === null) {
+            malformedLineCount += 1;
+        }
+        else if (record.ruleId === 'audit_truncated') {
+            truncated = true;
+        }
+        else if (record.ruleId === 'policy_error') {
+            policyErrorCount += 1;
+        }
+    }
+    return { truncated, policyErrorCount, malformedLineCount };
+}
+function* jsonLines(bytes) {
+    let start = 0;
+    while (start < bytes.length) {
+        const newline = bytes.indexOf(0x0a, start);
+        const end = newline === -1 ? bytes.length : newline;
+        yield bytes.subarray(start, end);
+        start = newline === -1 ? bytes.length : newline + 1;
+    }
+}
+function decodeRecord(line) {
+    if (line.length === 0)
+        return undefined;
+    try {
+        const text = new TextDecoder('utf-8', { fatal: true }).decode(line).trim();
+        if (!text)
+            return undefined;
+        const decoded = JSON.parse(text);
+        if (!decoded || typeof decoded !== 'object' || Array.isArray(decoded))
+            return null;
+        return decoded;
+    }
+    catch {
+        return null;
+    }
+}
+function cleanEvidence() {
+    return { failureReason: null, artifacts: [] };
+}
+function missingEvidence() {
+    return {
+        failureReason: 'egress audit log missing',
+        artifacts: [{ kind: 'egress-audit-missing', path: EGRESS_AUDIT_ARTIFACT_PATH }],
+    };
+}
+function digest(bytes) {
+    return `sha256:${createHash('sha256').update(bytes).digest('hex')}`;
+}
+function errorCode(error) {
+    return error instanceof Error ? error.code : undefined;
+}

package/node_modules/@maka/eval/dist/harness-executor.js

@@ -24,6 +24,7 @@ import { chmod, lstat, mkdir, readFile, readdir, unlink, writeFile } from 'node:
 import { createServer } from 'node:net';
 import { basename, dirname, join, posix, relative, resolve, sep } from 'node:path';
 import { createInterface } from 'node:readline';
+import { egressAuditCollection, readEgressAuditEvidence } from './egress-audit.js';
 import { decodeJsonObject } from './experiment.js';
 import { BUNDLED_HARNESS_RELAY_ROOT, createHarnessPreparationEnvironment, resolveRealPathWithinRoot, } from './harness-environment.js';
 import { preflightHarnessInstallation, } from './install-preflight.js';
@@ -344,13 +345,7 @@ async function startTrial(framework, options, specPath, cell, subjectCredentialN
             environment: environmentConfig,
             ...(options.egressProxy
                 ? {
-                    artifacts: [
-                        {
-                            source: '/opt/maka-egress-state/hits.jsonl',
-                            destination: EGRESS_AUDIT_DESTINATION,
-                            service: 'maka-eval-mitmproxy',
-                        },
-                    ],
+                    artifacts: egressAuditCollection(),
                 }
                 : {}),
         })}\n`, { flag: 'wx', mode: 0o600 });
@@ -555,108 +550,33 @@ async function closeServer(server) {
         server.close((error) => (error ? rejectClose(error) : resolveClose()));
     });
 }
-export const EGRESS_AUDIT_DESTINATION = 'egress-hits.jsonl';
-export const EGRESS_AUDIT_ARTIFACT_PATH = `artifacts/${EGRESS_AUDIT_DESTINATION}`;
-export function collectEgressAuditArtifact(audit, expected) {
-    if (!expected)
-        return { missing: false, failureReason: null, artifacts: [] };
-    if (audit === undefined) {
-        return {
-            missing: true,
-            failureReason: 'egress audit log missing',
-            artifacts: [{ kind: 'egress-audit-missing', path: EGRESS_AUDIT_ARTIFACT_PATH }],
-        };
-    }
-    const forensics = inspectEgressAudit(audit);
-    return {
-        missing: false,
-        failureReason: null,
-        artifacts: [
-            {
-                kind: 'egress-audit',
-                path: EGRESS_AUDIT_ARTIFACT_PATH,
-                bytes: audit.byteLength,
-                sha256: `sha256:${createHash('sha256').update(audit).digest('hex')}`,
-                truncated: forensics.truncated,
-                policyErrorCount: forensics.policyErrorCount,
-                malformedLineCount: forensics.malformedLineCount,
-            },
-        ],
-    };
-}
-function inspectEgressAudit(audit) {
-    let truncated = false;
-    let policyErrorCount = 0;
-    let malformedLineCount = 0;
-    for (const line of audit.toString('utf8').split(/\r?\n/)) {
-        const trimmed = line.trim();
-        if (!trimmed)
-            continue;
-        let record;
-        try {
-            record = JSON.parse(trimmed);
-        }
-        catch {
-            malformedLineCount += 1;
-            continue;
-        }
-        if (!record || typeof record !== 'object' || Array.isArray(record)) {
-            malformedLineCount += 1;
-            continue;
-        }
-        const ruleId = record.ruleId;
-        if (ruleId === 'audit_truncated')
-            truncated = true;
-        if (ruleId === 'policy_error')
-            policyErrorCount += 1;
-    }
-    return { truncated, policyErrorCount, malformedLineCount };
-}
-async function readVerification(state, cell, framework, expectEgressAudit) {
+async function readVerification(state, cell, framework, auditRequired) {
     const result = JSON.parse(await readFile(join(state.trialPath, 'result.json'), 'utf8'));
     const score = result.verifier_result?.rewards?.[rewardKey(cell)] ?? null;
     const subjectException = ['AgentTimeoutError', 'NonZeroAgentExitCodeError'].includes(String(result.exception_info?.exception_type));
     if (result.exception_info && !subjectException) {
         throw new Error('Trial failed outside subject execution');
     }
-    const egressAuditPath = join(state.trialPath, EGRESS_AUDIT_ARTIFACT_PATH);
-    let egressAudit;
-    try {
-        egressAudit = await readFile(egressAuditPath);
-    }
-    catch (error) {
-        const code = error.code;
-        if (expectEgressAudit && code !== 'ENOENT') {
-            return {
-                status: 'infra_failed',
-                score,
-                failureReason: `failed to read egress audit log ${egressAuditPath}${code ? ` (${code})` : ''}`,
-                artifacts: [
-                    { kind: 'trial', framework: cell.executor.kind, trialName: state.trialName },
-                    ...(await collectedArtifactInventory(state.trialPath, framework)),
-                    { kind: 'egress-audit-unreadable', path: EGRESS_AUDIT_ARTIFACT_PATH },
-                ],
-            };
-        }
-    }
-    const audit = collectEgressAuditArtifact(egressAudit, expectEgressAudit);
+    const audit = await readEgressAuditEvidence(state.trialPath, auditRequired);
+    const baseFailure = score === null ? 'verifier produced no reward' : null;
+    const status = verificationStatus(audit.failureReason, score, subjectException);
+    const collectedArtifacts = await collectedArtifactInventory(state.trialPath, framework);
     return {
-        status: audit.failureReason
-            ? 'infra_failed'
-            : score === null
-                ? 'infra_failed'
-                : subjectException
-                    ? 'subject_failed'
-                    : 'completed',
+        status,
         score,
-        failureReason: audit.failureReason ?? (score === null ? 'verifier produced no reward' : null),
+        failureReason: audit.failureReason ?? baseFailure,
         artifacts: [
             { kind: 'trial', framework: cell.executor.kind, trialName: state.trialName },
-            ...(await collectedArtifactInventory(state.trialPath, framework)),
-            ...audit.artifacts,
+            ...collectedArtifacts,
+            ...Array.from(audit.artifacts),
         ],
     };
 }
+function verificationStatus(auditFailure, score, subjectException) {
+    if (auditFailure !== null || score === null)
+        return 'infra_failed';
+    return subjectException ? 'subject_failed' : 'completed';
+}
 async function collectedArtifactInventory(trialPath, framework) {
     const root = framework === 'pier'
         ? join(trialPath, 'artifacts')

package/node_modules/@maka/eval/harbor/egress-proxy/entrypoint.sh

@@ -22,10 +22,10 @@ STATE_DIR=/opt/maka-egress-state
 CERT_DIR=/opt/maka-egress
 
 mkdir -p "$STATE_DIR" "$CERT_DIR"
-# Create the audit log if this is the first start. Truncating here would erase
-# hits already written if the proxy restarts mid-trial, and the trial would
-# look like an honest zero-hit run.
-touch "$STATE_DIR/hits.jsonl"
+AUDIT_LOG="$STATE_DIR/hits.jsonl"
+# Proxy restarts share one append-only evidence file for the whole trial.
+# Only create it when absent so an earlier process cannot lose recorded hits.
+test -e "$AUDIT_LOG" || touch "$AUDIT_LOG"
 
 # confdir holds the CA private key and this cell's audit log, so it stays
 # container-private and only the certificate reaches the volume the subject