@martinloop/mcp 0.2.0 → 0.2.7

package/dist/vendor/adapters/openai-compatible.d.ts

@@ -0,0 +1,47 @@
+/**
+ * OpenAI-compatible adapter for MartinLoop.
+ *
+ * Routes agent execution to any endpoint that implements the OpenAI
+ * Chat Completions API (`POST /v1/chat/completions`). This covers:
+ *
+ * Hosted via OpenRouter / Together.ai / Fireworks.ai:
+ *   DeepSeek-V3, DeepSeek-R1, Qwen3-235B, Mistral Large, Codestral,
+ *   Kimi k2, Nemotron-70B, and hundreds more.
+ *
+ * Local via Ollama / LM Studio / llama.cpp:
+ *   Llama 3.x, Mistral 7B, Phi-4, Gemma 3, any GGUF model.
+ *
+ * Usage:
+ *   MARTIN_OPENAI_BASE_URL=https://openrouter.ai/api
+ *   MARTIN_OPENAI_API_KEY=sk-or-...
+ *   MARTIN_OPENAI_MODEL=deepseek/deepseek-chat
+ *   martin run "fix the bug" --engine openai
+ *
+ * Or for Ollama:
+ *   MARTIN_OPENAI_BASE_URL=http://localhost:11434
+ *   MARTIN_OPENAI_MODEL=llama3.3
+ *   martin run "fix the bug" --engine openai
+ */
+import type { MartinAdapter } from "../core/index.js";
+export interface OpenAiCompatibleAdapterOptions {
+    /** Base URL of the OpenAI-compatible API. No trailing slash. */
+    baseUrl: string;
+    /** API key. Empty string for local (Ollama/LM Studio) endpoints. */
+    apiKey?: string;
+    /** Model identifier passed as-is to the API (e.g. "deepseek/deepseek-chat"). */
+    model: string;
+    /**
+     * System prompt prepended before the MartinLoop task prompt.
+     * Default instructs the model to act as a focused coding assistant.
+     */
+    systemPrompt?: string;
+    /** Request timeout in milliseconds. Default: 300_000 (5 min). */
+    timeoutMs?: number;
+    /** Verifier timeout in milliseconds. Default: 60_000. */
+    verifyTimeoutMs?: number;
+    /** Working directory for git artifact collection and verification. */
+    workingDirectory?: string;
+    /** Optional fetch override for testing. */
+    fetchImpl?: typeof fetch;
+}
+export declare function createOpenAiCompatibleAdapter(options: OpenAiCompatibleAdapterOptions): MartinAdapter;

package/dist/vendor/adapters/openai-compatible.js

@@ -0,0 +1,242 @@
+/**
+ * OpenAI-compatible adapter for MartinLoop.
+ *
+ * Routes agent execution to any endpoint that implements the OpenAI
+ * Chat Completions API (`POST /v1/chat/completions`). This covers:
+ *
+ * Hosted via OpenRouter / Together.ai / Fireworks.ai:
+ *   DeepSeek-V3, DeepSeek-R1, Qwen3-235B, Mistral Large, Codestral,
+ *   Kimi k2, Nemotron-70B, and hundreds more.
+ *
+ * Local via Ollama / LM Studio / llama.cpp:
+ *   Llama 3.x, Mistral 7B, Phi-4, Gemma 3, any GGUF model.
+ *
+ * Usage:
+ *   MARTIN_OPENAI_BASE_URL=https://openrouter.ai/api
+ *   MARTIN_OPENAI_API_KEY=sk-or-...
+ *   MARTIN_OPENAI_MODEL=deepseek/deepseek-chat
+ *   martin run "fix the bug" --engine openai
+ *
+ * Or for Ollama:
+ *   MARTIN_OPENAI_BASE_URL=http://localhost:11434
+ *   MARTIN_OPENAI_MODEL=llama3.3
+ *   martin run "fix the bug" --engine openai
+ */
+import { runVerification, readGitExecutionArtifacts } from "./cli-bridge.js";
+import { createAdapterCapabilities, normalizeUsage } from "./runtime-support.js";
+// ---------------------------------------------------------------------------
+// OpenRouter/OpenAI-compatible model pricing ($/1K tokens)
+// Automatically used when baseUrl contains openrouter.ai or known providers.
+// Defaults to a conservative blended estimate for unknown models.
+// ---------------------------------------------------------------------------
+const KNOWN_MODEL_PRICING = {
+    // DeepSeek
+    "deepseek/deepseek-chat": { inputPer1K: 0.00027, outputPer1K: 0.0011 },
+    "deepseek/deepseek-r1": { inputPer1K: 0.0008, outputPer1K: 0.0032 },
+    "deepseek/deepseek-coder": { inputPer1K: 0.00014, outputPer1K: 0.00028 },
+    // Qwen
+    "qwen/qwen3-235b-a22b": { inputPer1K: 0.00022, outputPer1K: 0.00088 },
+    "qwen/qwen3-32b": { inputPer1K: 0.00009, outputPer1K: 0.00009 },
+    "qwen/qwen-2.5-coder-32b-instruct": { inputPer1K: 0.00007, outputPer1K: 0.00007 },
+    // Mistral
+    "mistralai/codestral-latest": { inputPer1K: 0.0003, outputPer1K: 0.0009 },
+    "mistralai/mistral-large": { inputPer1K: 0.003, outputPer1K: 0.009 },
+    "mistralai/mistral-small": { inputPer1K: 0.0001, outputPer1K: 0.0003 },
+    // Kimi
+    "moonshotai/kimi-k2": { inputPer1K: 0.00065, outputPer1K: 0.0026 },
+    // Nemotron
+    "nvidia/llama-3.1-nemotron-70b-instruct": { inputPer1K: 0.00012, outputPer1K: 0.0003 },
+    // Llama (via OpenRouter)
+    "meta-llama/llama-3.3-70b-instruct": { inputPer1K: 0.00012, outputPer1K: 0.0003 },
+    "meta-llama/llama-3.1-405b-instruct": { inputPer1K: 0.0008, outputPer1K: 0.0008 },
+};
+const FALLBACK_INPUT_PER_1K = 0.0003;
+const FALLBACK_OUTPUT_PER_1K = 0.0012;
+const CHARS_PER_TOKEN = 4;
+function estimateCost(model, inputChars, outputChars) {
+    const pricing = KNOWN_MODEL_PRICING[model] ?? {
+        inputPer1K: FALLBACK_INPUT_PER_1K,
+        outputPer1K: FALLBACK_OUTPUT_PER_1K
+    };
+    const tokensIn = Math.ceil(inputChars / CHARS_PER_TOKEN);
+    const tokensOut = Math.ceil(outputChars / CHARS_PER_TOKEN);
+    const actualUsd = (tokensIn / 1000) * pricing.inputPer1K + (tokensOut / 1000) * pricing.outputPer1K;
+    return { tokensIn, tokensOut, actualUsd };
+}
+// ---------------------------------------------------------------------------
+// Prompt builder
+// ---------------------------------------------------------------------------
+const DEFAULT_SYSTEM_PROMPT = `You are an expert software engineer executing a governed coding task.
+Follow these rules exactly:
+- Read the task description carefully and implement only what is asked.
+- Do not add features, refactors, or improvements beyond the stated task.
+- If the task asks you to write or modify code, output the complete file content with changes applied.
+- Be precise, minimal, and test-backed in all changes.
+- State what you changed and why at the end of your response.`;
+function buildPrompt(request) {
+    const lines = [
+        `TASK: ${request.context.taskTitle}`,
+        ``,
+        `OBJECTIVE:`,
+        request.context.objective,
+        ``
+    ];
+    if (request.context.focus) {
+        lines.push(`FOCUS: ${request.context.focus}`, ``);
+    }
+    if (request.context.verificationPlan.length > 0) {
+        lines.push(`VERIFICATION COMMANDS (must pass after your changes):`, ...request.context.verificationPlan.map((cmd) => `  ${cmd}`), ``);
+    }
+    if (request.previousAttempts.length > 0) {
+        const last = request.previousAttempts.at(-1);
+        if (last) {
+            lines.push(`PREVIOUS ATTEMPT SUMMARY:`, last.summary ?? "", ``);
+        }
+    }
+    lines.push(`BUDGET REMAINING: $${request.context.remainingBudgetUsd.toFixed(4)} | Iterations left: ${request.context.remainingIterations}`);
+    return lines.join("\n");
+}
+// ---------------------------------------------------------------------------
+// Factory
+// ---------------------------------------------------------------------------
+export function createOpenAiCompatibleAdapter(options) {
+    const workingDirectory = options.workingDirectory ?? process.cwd();
+    const timeoutMs = options.timeoutMs ?? 300_000;
+    const verifyTimeoutMs = options.verifyTimeoutMs ?? 60_000;
+    const systemPrompt = options.systemPrompt ?? DEFAULT_SYSTEM_PROMPT;
+    const fetchFn = options.fetchImpl ?? globalThis.fetch;
+    return {
+        adapterId: `openai-compatible:${options.model}`,
+        kind: "direct-provider",
+        label: `OpenAI-compatible: ${options.model}`,
+        metadata: {
+            providerId: "openai-compatible",
+            model: options.model,
+            transport: "http",
+            capabilities: createAdapterCapabilities({
+                preflight: true,
+                usageSettlement: true,
+                diffArtifacts: true
+            })
+        },
+        async execute(request) {
+            const prompt = buildPrompt(request);
+            const estimated = estimateCost(options.model, prompt.length, 2000);
+            // Preflight: bail if projected cost exceeds remaining budget
+            if (request.context.remainingBudgetUsd > 0 &&
+                estimated.actualUsd > request.context.remainingBudgetUsd * 0.95) {
+                return {
+                    status: "failed",
+                    summary: `Preflight: projected cost $${estimated.actualUsd.toFixed(4)} exceeds remaining budget $${request.context.remainingBudgetUsd.toFixed(4)}.`,
+                    usage: normalizeUsage({
+                        actualUsd: estimated.actualUsd,
+                        estimatedUsd: estimated.actualUsd,
+                        tokensIn: estimated.tokensIn,
+                        tokensOut: estimated.tokensOut,
+                        provenance: "estimated"
+                    }),
+                    verification: { passed: false, summary: "Stopped before execution: budget preflight failed." },
+                    failure: { message: "budget_preflight_exceeded", classHint: "budget_pressure" }
+                };
+            }
+            // Call the OpenAI-compatible endpoint
+            const endpoint = `${options.baseUrl.replace(/\/$/, "")}/v1/chat/completions`;
+            let responseText = "";
+            let tokensIn = estimated.tokensIn;
+            let tokensOut = 0;
+            const controller = new AbortController();
+            const timer = setTimeout(() => controller.abort(), timeoutMs);
+            try {
+                const headers = { "Content-Type": "application/json" };
+                if (options.apiKey)
+                    headers["Authorization"] = `Bearer ${options.apiKey}`;
+                // OpenRouter requires a site URL header for attribution
+                if (options.baseUrl.includes("openrouter")) {
+                    headers["HTTP-Referer"] = "https://martinloop.com";
+                    headers["X-Title"] = "MartinLoop";
+                }
+                const res = await fetchFn(endpoint, {
+                    method: "POST",
+                    headers,
+                    body: JSON.stringify({
+                        model: options.model,
+                        messages: [
+                            { role: "system", content: systemPrompt },
+                            { role: "user", content: prompt }
+                        ],
+                        temperature: 0.2,
+                        max_tokens: 8192
+                    }),
+                    signal: controller.signal
+                });
+                const body = (await res.json());
+                if (!res.ok || body.error) {
+                    const errMsg = body.error?.message ?? `HTTP ${res.status}`;
+                    return {
+                        status: "failed",
+                        summary: `${options.model} API error: ${errMsg}`,
+                        usage: normalizeUsage({ actualUsd: 0, tokensIn: 0, tokensOut: 0, provenance: "unavailable" }),
+                        verification: { passed: false, summary: "API call failed before verifier." },
+                        failure: { message: errMsg, classHint: "infrastructure_error" }
+                    };
+                }
+                responseText = body.choices?.[0]?.message?.content ?? "";
+                if (body.usage) {
+                    tokensIn = body.usage.prompt_tokens ?? tokensIn;
+                    tokensOut = body.usage.completion_tokens ?? 0;
+                }
+                else {
+                    tokensOut = Math.ceil(responseText.length / CHARS_PER_TOKEN);
+                }
+            }
+            catch (error) {
+                const isAbort = error instanceof Error && error.name === "AbortError";
+                const message = isAbort ? `${options.model} request timed out after ${timeoutMs}ms` : String(error);
+                return {
+                    status: "failed",
+                    summary: message,
+                    usage: normalizeUsage({ actualUsd: 0, tokensIn: 0, tokensOut: 0, provenance: "unavailable" }),
+                    verification: { passed: false, summary: isAbort ? "Request timed out." : "Network error." },
+                    failure: { message, classHint: "infrastructure_error" }
+                };
+            }
+            finally {
+                clearTimeout(timer);
+            }
+            if (!responseText.trim()) {
+                return {
+                    status: "failed",
+                    summary: `${options.model} returned an empty response.`,
+                    usage: normalizeUsage({ actualUsd: 0, tokensIn, tokensOut: 0, provenance: "actual" }),
+                    verification: { passed: false, summary: "Empty response — nothing to verify." },
+                    failure: { message: "empty_response" }
+                };
+            }
+            // Run verification
+            const verification = await runVerification(request.context.verificationPlan, workingDirectory, verifyTimeoutMs, request.context.verificationStack);
+            const execution = await readGitExecutionArtifacts(workingDirectory, 5_000);
+            const pricing = KNOWN_MODEL_PRICING[options.model] ?? {
+                inputPer1K: FALLBACK_INPUT_PER_1K,
+                outputPer1K: FALLBACK_OUTPUT_PER_1K
+            };
+            const actualUsd = (tokensIn / 1000) * pricing.inputPer1K + (tokensOut / 1000) * pricing.outputPer1K;
+            return {
+                status: verification.passed ? "completed" : "failed",
+                summary: verification.passed
+                    ? `${options.model} completed the task. Verifier passed.`
+                    : `${options.model} completed but verifier failed: ${verification.summary}`,
+                usage: normalizeUsage({
+                    actualUsd,
+                    tokensIn,
+                    tokensOut,
+                    provenance: "actual"
+                }),
+                verification,
+                execution,
+                ...(verification.passed ? {} : {
+                    failure: { message: verification.summary }
+                })
+            };
+        }
+    };
+}

package/dist/vendor/adapters/runtime-support.js

@@ -49,4 +49,3 @@ export function normalizeStructuredErrors(errors) {
 function roundUsd(value) {
     return Math.round(value * 1_000_000) / 1_000_000;
 }
-//# sourceMappingURL=runtime-support.js.map

package/dist/vendor/adapters/stub-agent-cli.js

@@ -38,4 +38,3 @@ export function createStubAgentCliAdapter(options) {
         }
     };
 }
-//# sourceMappingURL=stub-agent-cli.js.map

package/dist/vendor/adapters/stub-direct-provider.js

@@ -7,4 +7,3 @@ export function createStubDirectProviderAdapter(options) {
         responder: options.responder
     });
 }
-//# sourceMappingURL=stub-direct-provider.js.map

package/dist/vendor/adapters/verifier-only.js

@@ -54,4 +54,3 @@ export function createVerifierOnlyAdapter(options = {}) {
         }
     };
 }
-//# sourceMappingURL=verifier-only.js.map

package/dist/vendor/contracts/governance.js

@@ -9,4 +9,3 @@ export function createGovernanceSnapshot(snapshot) {
         }))
     };
 }
-//# sourceMappingURL=governance.js.map

package/dist/vendor/contracts/index.d.ts

@@ -108,6 +108,8 @@ export interface LoopRecordDraft {
     createdAt?: string;
     updatedAt?: string;
 }
+export type { MartinErrorCategory, MartinOutputMode, MartinRunListFilters, MartinRunSelector } from "./operator.js";
+export { MARTIN_ERROR_CATEGORIES } from "./operator.js";
 export interface LoopEventDraft {
     type: LoopEventType;
     lifecycleState?: LoopLifecycleState;

package/dist/vendor/contracts/index.js

@@ -1,3 +1,4 @@
+export { MARTIN_ERROR_CATEGORIES } from "./operator.js";
 export const DEFAULT_BUDGET = {
     maxUsd: 25,
     softLimitUsd: 15,
@@ -200,4 +201,3 @@ function hasText(value) {
     return typeof value === "string" && value.trim().length > 0;
 }
 export { createGovernanceSnapshot } from "./governance.js";
-//# sourceMappingURL=index.js.map

package/dist/vendor/contracts/operator.d.ts

@@ -0,0 +1,19 @@
+export declare const MARTIN_ERROR_CATEGORIES: readonly ["invalid_input", "environment", "auth", "not_found", "store_unreadable", "verification_failed", "policy_blocked", "budget_exit", "transient"];
+export type MartinErrorCategory = (typeof MARTIN_ERROR_CATEGORIES)[number];
+export type MartinOutputMode = "human" | "json" | "quiet";
+export interface MartinRunSelector {
+    runsDir?: string;
+    file?: string;
+    loopId?: string;
+    latest?: boolean;
+    attemptIndex?: number;
+}
+export interface MartinRunListFilters {
+    runsDir?: string;
+    limit?: number;
+    status?: string;
+    lifecycleState?: string;
+    adapterId?: string;
+    model?: string;
+    updatedAfter?: string;
+}

package/dist/vendor/contracts/operator.js

@@ -0,0 +1,11 @@
+export const MARTIN_ERROR_CATEGORIES = [
+    "invalid_input",
+    "environment",
+    "auth",
+    "not_found",
+    "store_unreadable",
+    "verification_failed",
+    "policy_blocked",
+    "budget_exit",
+    "transient"
+];

package/dist/vendor/core/compiler.js

@@ -50,4 +50,3 @@ export function compilePromptPacket(request) {
         }
     };
 }
-//# sourceMappingURL=compiler.js.map

package/dist/vendor/core/context-integrity.js

@@ -53,4 +53,3 @@ export async function runContextIntegrityPrecheck(runId, attemptIndex, artifacts
     }
     return precheck;
 }
-//# sourceMappingURL=context-integrity.js.map

package/dist/vendor/core/grounding.js

@@ -267,4 +267,3 @@ function matchesGlobPattern(filePath, pattern) {
         .replace(/__DOUBLESTAR__/g, ".*");
     return new RegExp(`^${regexStr}$`).test(filePath);
 }
-//# sourceMappingURL=grounding.js.map

package/dist/vendor/core/index.js

@@ -1099,7 +1099,7 @@ function resolveChangedFiles(result, repoRoot) {
         return [];
     }
     try {
-        const diff = spawnSync("git", ["diff", "--name-only", "HEAD"], {
+        const diff = spawnSync("git", ["diff", "--name-only", "HEAD", "--", "."], {
             cwd: repoRoot,
             encoding: "utf8"
         });
@@ -1254,4 +1254,3 @@ function applyPatchFailureToLoop(loop, input) {
             : attempt)
     };
 }
-//# sourceMappingURL=index.js.map

package/dist/vendor/core/leash.js

@@ -9,7 +9,7 @@ const BLOCKED_PATTERNS = [
     /(^|\s)mkfs(\.|\s|$)/u,
     /(^|\s)dd\s+if=/u,
     /(shutdown|reboot)(\s|$)/iu,
-    /:\(\)\{:\|:&\};:/u,
+    /:\(\)\s*\{\s*:\|:&\s*\}\s*;\s*:/u,
     /chmod\s+-R\s+777\s+\//iu,
     /(kubectl|docker)\s+.*\b(delete|prune|rm)\b/iu,
     /ssh\s+/iu,
@@ -314,17 +314,25 @@ function normalizeChangedFile(file, repoRoot) {
     };
 }
 function matchesPathPattern(file, pattern) {
-    const normalizedFile = file.replace(/\\/gu, "/");
-    const normalizedPattern = pattern.replace(/\\/gu, "/");
-    if (normalizedPattern.includes("**")) {
-        const prefix = normalizedPattern.split("**")[0] ?? normalizedPattern;
-        return normalizedFile.startsWith(prefix.replace(/\/$/u, ""));
+    const normalizedFile = normalizePathForMatching(file);
+    const normalizedPattern = normalizePathForMatching(pattern);
+    if (!normalizedPattern.includes("*")) {
+        return (normalizedFile === normalizedPattern ||
+            normalizedFile.startsWith(`${normalizedPattern.replace(/\/$/u, "")}/`));
     }
-    if (normalizedPattern.endsWith("*")) {
-        return normalizedFile.startsWith(normalizedPattern.replace(/\*+$/u, ""));
-    }
-    return (normalizedFile === normalizedPattern ||
-        normalizedFile.startsWith(`${normalizedPattern.replace(/\/$/u, "")}/`));
+    const regexStr = normalizedPattern
+        .replace(/[.+^${}()|[\]\\]/gu, "\\$&")
+        .replace(/\*\*/gu, "__DOUBLESTAR__")
+        .replace(/\*/gu, "[^/]*")
+        .replace(/__DOUBLESTAR__/gu, ".*");
+    return new RegExp(`^${regexStr}$`, "u").test(normalizedFile);
+}
+function normalizePathForMatching(value) {
+    return value
+        .replace(/\\/gu, "/")
+        .replace(/^\.\//u, "")
+        .replace(/\/{2,}/gu, "/")
+        .replace(/\/$/u, "");
 }
 function buildNetworkViolation(command, profile) {
     const targets = extractNetworkTargets(command);
@@ -405,4 +413,3 @@ function isConfigChangeFile(file) {
         normalized.startsWith("infrastructure/") ||
         normalized.startsWith("ops/"));
 }
-//# sourceMappingURL=leash.js.map

package/dist/vendor/core/persistence/compiler.js

@@ -32,4 +32,3 @@ export async function compileAndPersistContext(request, options) {
     }
     return { packet };
 }
-//# sourceMappingURL=compiler.js.map

package/dist/vendor/core/persistence/index.js

@@ -2,4 +2,3 @@ export { makeLedgerEvent } from "./ledger.js";
 export { artifactDir, createFileRunStore, resolveRunsRoot, runDir } from "./store.js";
 export { readAllLoopRecords, readLatestLoopRecord, readLatestLoopRecordFromFile, readLoopRecordsFromFile } from "./runs-reader.js";
 export { compileAndPersistContext } from "./compiler.js";
-//# sourceMappingURL=index.js.map

package/dist/vendor/core/persistence/ledger.js

@@ -7,4 +7,3 @@ export function makeLedgerEvent(draft, options = {}) {
         ...(draft.attemptIndex !== undefined ? { attemptIndex: draft.attemptIndex } : {})
     };
 }
-//# sourceMappingURL=ledger.js.map

package/dist/vendor/core/persistence/runs-reader.js

@@ -81,4 +81,3 @@ export async function readLatestLoopRecord(runsDir) {
         return a > b ? r : latest;
     }, records[0]);
 }
-//# sourceMappingURL=runs-reader.js.map

package/dist/vendor/core/persistence/store.js

@@ -86,4 +86,3 @@ export function createFileRunStore(options = {}) {
 async function writeJsonFile(path, value) {
     await writeFile(path, `${JSON.stringify(value, null, 2)}\n`, "utf8");
 }
-//# sourceMappingURL=store.js.map

package/dist/vendor/core/policy.js

@@ -622,4 +622,3 @@ function computeDiffRiskScore(input) {
 function roundScore(value) {
     return Math.round(value * 100) / 100;
 }
-//# sourceMappingURL=policy.js.map

package/dist/vendor/core/red-blue/red-phase.d.ts

@@ -0,0 +1,64 @@
+import { type RiskTier } from "./risk-tiers.js";
+export interface RedFinding {
+    trapId: string;
+    severity: "warn" | "block";
+    description: string;
+    resolvedAt?: string;
+}
+export interface RedFindings {
+    riskTier: RiskTier;
+    probesRun: number;
+    findingsCount: number;
+    findings: RedFinding[];
+    modelCallMade: boolean;
+    modelUsed?: string;
+    budgetUsedUsd: number;
+}
+/** Minimal interface for the Anthropic model client (mockable in tests). */
+export interface MockModelClient {
+    complete(prompt: string): Promise<{
+        findings: RedFinding[];
+        tokensUsed: number;
+        costUsd: number;
+    }>;
+}
+export interface RunRedPhaseOptions {
+    /** Inject a mock or real Anthropic client. Required for release_critical tier. */
+    modelClient?: MockModelClient;
+    /** Callback fired with each ledger event produced by the phase. */
+    onLedgerEvent?: (event: RedLedgerEvent) => void;
+}
+export interface RedLedgerEvent {
+    type: "red_phase_findings";
+    runId?: string;
+    riskTier: RiskTier;
+    probesRun: number;
+    findingsCount: number;
+    modelCallMade: boolean;
+    timestamp: string;
+}
+export interface PatchInput {
+    patchId: string;
+    diff: string;
+    changedFiles: string[];
+}
+/**
+ * Runs the Red phase for a given patch and risk tier.
+ *
+ * - baseline: programmatic probes only, no model call
+ * - high_risk: paranoid programmatic scan, no model call
+ * - release_critical: paranoid scan + one Haiku model call
+ */
+export declare function runRedPhase(patch: PatchInput, tier: RiskTier, blueBudgetUsd: number, options?: RunRedPhaseOptions): Promise<RedFindings>;
+/**
+ * Returns true only if the findings contain zero block-severity entries.
+ * A single block finding rejects the patch regardless of warn count.
+ */
+export declare function shouldAcceptPatch(findings: RedFindings): boolean;
+/**
+ * Convenience builder for RedFindings — useful in tests and policy engine.
+ */
+export declare function buildRedFindings(input: Partial<RedFindings> & {
+    riskTier: RiskTier;
+    findings: RedFinding[];
+}): RedFindings;