mrkeyoor.com_
Tue 01 Sept 17:42 UTC
AI Toolsevaluationupdated 26 Aug 2026

maka review

Apache Maka (Incubating) is a local-first coding-agent workspace with desktop, terminal, and evaluation interfaces. It keeps model messages, tool calls, permissions, results, and stop events in a durable local record so a run can be inspected or recovered instead of living only in a chat window.

+998stars / 7d
Verdict

Our Maka run installed 849 packages and built successfully, but its test command exited 1 after 801 seconds with 3 of 1,095 node:test cases failed. The durable event log and shared Runtime Host are worth studying for agent work that must survive refreshes and crashes. Use it experimentally on Apple Silicon; wait if you need a supported Linux, Intel Mac, signed Windows, or Apache-approved release.

We ran it

Lab card: what happened when we ran makaScreenshot of maka (github.com/apache/maka)
Install✓ · 38s849 packages · 1420 MB
Build✓ · 23s
Tests✗ · 801s1092 passed · 3 failed of 1095 (node:test)
Known vulns00 critical · 0 high · 0 moderate · 0 low (npm audit)
Repo2774 files~853,049 lines of source · 43.2 MB · 13 CI workflows

Answers from our run

Does maka build from source?

Dependencies installed in 38 seconds (849 packages), and the build succeeded in 23 seconds. We cloned commit 2e8cd03 into a clean Debian container with 3 CPUs and no project-specific setup.

Do maka's tests pass?

Not all of them: 1092 of 1095 passed and 3 failed when we ran the project's own test command (node:test). Some failures need services or credentials a bare container does not have.

Does maka have known vulnerabilities in its dependencies?

npm audit found none in the dependency tree at the time of our run.

Who should not use maka?

Linux or Intel Mac users seeking a supported desktop build: the README says neither platform is supported yet, while Windows remains an unsigned preview.

What are the alternatives to maka?

OpenHands, Cline, Continue. Our Maka run installed 849 packages and built successfully, but its test command exited 1 after 801 seconds with 3 of 1,095 node:test cases failed.

Setup2/51,420 MB install, source build only, and the full test command failed
Docs5/5Platform limits, storage, recovery, security, and architecture are explicit
Community4/53,563 stars with active August 2026 pushes and issue work
Maturity2/5Incubating, no Apache release, narrow platform support, 3 failed tests

Who it’s for

Apple Silicon Mac developers who want a local coding workspace with desktop and terminal interfaces.
Teams that care about recoverable agent runs, explicit permission decisions, and a saved tool-call record.
Engineers comparing agent systems through repeatable evaluation cells and stored artifacts.
Developers willing to build from source and bring their own cloud, local, or compatible model connection.

Who it’s NOT for

Linux or Intel Mac users seeking a supported desktop build: the README says neither platform is supported yet, while Windows remains an unsigned preview.
Organizations that require an approved Apache source release: the project says it has not made one and recommends no prebuilt download.
Teams that forbid locally stored plaintext API keys: credential-vault.json is readable by the operating-system account rather than encrypted at rest.
Developers expecting Computer Use in the current convenience release: v0.1.11 includes the skill but excludes its executor.
Anyone who routinely runs graph tasks from a dirty repository: Maka's graph operators use isolated Git worktrees and require a clean worktree.

Setup reality

Our sandbox installed 849 npm packages in 38 seconds and used 1,420 MB. The build passed in 23 seconds. Tests exited 1 after 801 seconds even though node:test reported 1,092 passed and 3 failed of 1,095. The log tail names failing test:dist workspaces but does not show the 3 assertions. Npm audit found 0 known vulnerabilities.

Source setup needs Node.js 22.19 or newer, npm 11, Git, and ripgrep. First use also needs a configured cloud API, local model, or compatible account; Maka includes no shared model access.

The supported desktop target is Apple Silicon macOS. Windows x64 is an unsigned preview, and Linux plus Intel Macs are unsupported. The checkout has 13 CI workflows, but no Dockerfile, and the project currently recommends building from source because no Apache-approved release exists.

Maka records every agent turn as local execution data

Maka treats a coding-agent session as a saved sequence of model messages, tool calls, tool results, permission decisions, and termination events. The desktop and terminal interfaces read from that record, and later model calls receive a projection of it. Old tool output can be omitted from the next prompt without deleting the underlying evidence. That design is useful when a browser refresh, process crash, or context limit should not erase what the agent did.

The repository provides 3 surfaces: an Electron desktop app, a terminal interface with non-interactive runs, and an evaluation runner. All Maka work passes through Runtime Host, which owns sessions and tool execution. The evaluation layer builds task, repetition, and subject cells, then stores attempts, scores, usage, cost, duration, failures, and artifacts. This is more like an agent workstation than an editor extension.

Apple Silicon is supported, while 3 common targets are not

The README targets Apple Silicon macOS for the desktop release. Intel Macs and Linux are unsupported, and Windows x64 is an unsigned preview rather than a supported tier. Open issue #2142 tracks the Windows path, including signing, required CI checks, broader sandbox work, and Computer Use. A current Windows-specific issue, #3938, reports Glob failing when an approved project tree contains a nested NTFS junction.

Maka is also an Apache Incubator project. It has not produced an Apache-approved source release, and the README recommends no prebuilt download until that happens. Version 0.1.11, published August 18, 2026, is described as a convenience artifact produced during incubation. Organizations with a formal Apache release policy should treat the source build as evaluation material, not quietly relabel the existing installer.

The local record improves recovery but keeps secrets in plaintext

Runtime state lives in runtime.sqlite, with settings, artifacts, model connections, and a credential vault in the workspace directory. API keys are stored in a local plaintext JSON file restricted to the operating-system account. The renderer does not receive the keys, which limits one exposure path, but disk encryption and account access remain part of the security boundary.

Interrupted-turn resume is disabled by default. Enabling MAKA_RUNTIME_SAFE_BOUNDARY_RESUME=1 allows desktop, CLI, and startup resume behavior, and the README warns that resuming calls the model and consumes tokens. Older JSONL transcripts and Electron safeStorage credentials are not imported, so an upgraded workspace can appear empty and require credentials to be entered again. That migration boundary needs a backup plan.

What happened when we ran it

Our sandbox installed commit 2e8cd03 in 38 seconds, pulling 849 npm packages and occupying 1,420 MB. The monorepo build completed successfully in 23 seconds. Npm audit reported 0 known vulnerabilities across the installed dependency tree. The source checkout itself contained 2,774 files, about 853,049 lines, and 43.2 MB before installation.

The test command ran for 801 seconds and exited with code 1. Node's test report counted 1,092 passed and 3 failed out of 1,095. The supplied log tail says test:dist failed in @maka/runtime-host, then lists runtime, eval, desktop, storage, and runtime-host as failed workspaces. It does not include the 3 failed assertions, so we cannot say which behavior broke or why.

That distinction matters because the log also shows a very large passing set. The test run was close to green, yet a release gate that returns exit 1 is still a failure. Our Debian container had 3 CPUs, 8 GB of RAM, Node 22, no secrets, and no elevated privileges. It did not launch Electron or exercise macOS and Windows sandbox enforcement.

Built-in file tools sit behind explicit approval boundaries

Maka includes Read, Write, Edit, Bash, Glob, and Grep. Tools that leave the sandbox require approval, runs can be aborted, and failures receive classifications. Local memory and web search work when configured. Computer Use and catalog skills are optional rather than enabled by default, while the 0.1.11 release includes the Computer Use skill without its executor.

The graph mode can split implementation work across isolated Git worktrees. It requires the source project to be clean before it starts, which protects the worktree machinery but conflicts with the ordinary state of many development folders. Maka also supports MCP-related runtime behavior, and release 0.1.11 mentions hardened rediscovery. Issue #3939 reports a name collision between Maka's deferred tool_search connector and OpenAI Responses' native tool of the same name.

August activity is fast, and the contracts are still moving

GitHub recorded the last push on August 26, 2026, with 3,563 stars and 328 combined issues and pull requests. Release 0.1.11 says it contains 375 merged pull requests from 24 contributors. That is intense current activity. The README also warns that data formats, CLI commands, and experimental capabilities may change, so the same velocity raises upgrade work for early users.

The documentation is unusually candid about unsupported platforms, plaintext credentials, resume costs, data migration, and Apache release status. Our failed 801-second test command keeps this out of the dependable-default category, even with 1,092 cases passing. Maka is a good research and pilot choice for an Apple Silicon developer who values recoverable execution history. It is early infrastructure, and its own docs say so.

Alternatives

ProjectWhat it isPick it when
OpenHands gh↗An open coding-agent platform with browser, command-line, and hosted deployment paths.pick this instead when Linux or server deployment matters more than Maka's local event record.
Cline gh↗A coding agent that works inside Visual Studio Code and asks before taking actions.pick this instead when the editor is your main workspace and you do not need Maka's separate desktop application.
Continue gh↗An open coding-assistant platform centered on IDE workflows and configurable models.pick this instead when IDE integration and model configuration matter more than durable run replay.

What people are saying

  1. [github-trending] apache/maka

Sources

  1. Apache Maka repository and README
  2. Maka 0.1.11 release
  3. Windows support roadmap
  4. Windows nested junction Glob issue
  5. OpenAI Responses tool_search collision

More ai tools reviews

claudian · SkillSpector · robin · mjlab · MoGe · awesome-design-md · the whole board →