@martinloop/mcp 0.5.0 → 0.5.1

package/dist/vendor/adapters/claude-cli.js

@@ -68,7 +68,22 @@ function calculateUsageCost(usage, pricing) {
         (usage.cacheCreationInputTokens / 1000) * (pricing.cacheCreationInputPer1K ?? pricing.inputPer1K) +
         (usage.outputTokens / 1000) * pricing.outputPer1K);
 }
-function extractUsage(parsed, modelLabel) {
+const EMBEDDED_PRICING_VERSION = "embedded-v1";
+function extractClaudeObservedModel(stdout) {
+    for (const line of stdout.split(/\r?\n/u)) {
+        try {
+            const event = JSON.parse(line);
+            if (event.type === "system" && event.subtype === "init" && typeof event.model === "string") {
+                return event.model;
+            }
+        }
+        catch {
+            // Ignore non-JSON stream fragments.
+        }
+    }
+    return undefined;
+}
+function extractUsage(parsed, modelLabel, modelSource) {
     if (!parsed?.usage) {
         return normalizeUsage({
             actualUsd: 0,
@@ -102,15 +117,24 @@ function extractUsage(parsed, modelLabel) {
         tokensIn,
         tokensOut,
         cachedInputTokens,
-        provenance: hasAuthoritativeCost ? "actual" : pricingResolution.pricing ? "estimated" : "unavailable",
+        provenance: hasAuthoritativeCost ? "actual" : pricingResolution.pricing ? "calculated" : "unavailable",
         providerSettlement: {
             providerId: "claude",
-            model: modelLabel ?? "claude",
+            ...(modelLabel ? { model: modelLabel } : {}),
             transport: "cli",
             source: "claude_json",
             inputTokens: promptTokens + cacheCreationInputTokens,
             cachedInputTokens,
+            cacheCreationInputTokens,
             outputTokens: tokensOut,
+            billingMode: "unknown",
+            modelSource,
+            pricingSource: hasAuthoritativeCost
+                ? "provider_reported_total"
+                : pricingResolution.pricing
+                    ? "static_catalog"
+                    : "none",
+            ...(pricingResolution.pricing ? { pricingVersion: EMBEDDED_PRICING_VERSION } : {}),
             rawUsageAvailable: true,
             settledAt: new Date().toISOString()
         }
@@ -152,7 +176,7 @@ function extractCodexJsonlResult(stdout, modelLabel) {
                 provenance: "unavailable",
                 providerSettlement: {
                     providerId: "codex",
-                    model: modelLabel ?? "codex",
+                    ...(modelLabel ? { model: modelLabel } : {}),
                     transport: "cli",
                     source: "unavailable",
                     inputTokens: 0,
@@ -169,8 +193,8 @@ function extractCodexJsonlResult(stdout, modelLabel) {
     const reasoningOutputTokens = latestTurnCompleted.usage.reasoning_output_tokens ?? 0;
     const tokensIn = promptTokens + cachedInputTokens;
     const tokensOut = outputTokens + reasoningOutputTokens;
-    const pricing = (modelLabel ? MODEL_PRICING[modelLabel] : undefined) ??
-        MODEL_PRICING["codex"] ??
+    const exactPricing = modelLabel ? MODEL_PRICING[modelLabel] : undefined;
+    const pricing = exactPricing ?? MODEL_PRICING["codex"] ??
         { inputPer1K: BLENDED_INPUT_COST_PER_1K, outputPer1K: BLENDED_OUTPUT_COST_PER_1K };
     const actualUsd = (promptTokens / 1000) * pricing.inputPer1K +
         (cachedInputTokens / 1000) * (pricing.cachedInputPer1K ?? pricing.inputPer1K) +
@@ -183,16 +207,20 @@ function extractCodexJsonlResult(stdout, modelLabel) {
             tokensOut,
             cachedInputTokens,
             reasoningTokensOut: reasoningOutputTokens,
-            provenance: "actual",
+            provenance: exactPricing ? "calculated" : "estimated",
             providerSettlement: {
                 providerId: "codex",
-                model: modelLabel ?? "codex",
+                ...(modelLabel ? { model: modelLabel } : {}),
                 transport: "cli",
                 source: "codex_jsonl",
                 inputTokens: promptTokens,
                 cachedInputTokens,
                 outputTokens,
                 reasoningOutputTokens,
+                billingMode: "unknown",
+                modelSource: modelLabel ? "explicit_override" : "agent_default",
+                pricingSource: exactPricing ? "static_catalog" : "blended_fallback",
+                pricingVersion: EMBEDDED_PRICING_VERSION,
                 rawUsageAvailable: true,
                 settledAt: new Date().toISOString()
             }
@@ -228,7 +256,7 @@ function extractGeminiJsonResult(stdout, modelLabel) {
                 provenance: "unavailable",
                 providerSettlement: {
                     providerId: "gemini",
-                    model: modelLabel ?? "flash",
+                    ...(modelLabel ? { model: modelLabel } : {}),
                     transport: "cli",
                     source: "unavailable",
                     inputTokens: 0,
@@ -254,16 +282,20 @@ function extractGeminiJsonResult(stdout, modelLabel) {
             tokensOut,
             cachedInputTokens,
             reasoningTokensOut: reasoningOutputTokens,
-            provenance: "actual",
+            provenance: "estimated",
             providerSettlement: {
                 providerId: "gemini",
-                model: modelLabel ?? "flash",
+                ...(modelLabel ? { model: modelLabel } : {}),
                 transport: "cli",
                 source: "gemini_json",
                 inputTokens: promptTokens,
                 cachedInputTokens,
                 outputTokens,
                 reasoningOutputTokens,
+                billingMode: "unknown",
+                modelSource: modelLabel ? "explicit_override" : "agent_default",
+                pricingSource: "blended_fallback",
+                pricingVersion: EMBEDDED_PRICING_VERSION,
                 rawUsageAvailable: true,
                 settledAt: new Date().toISOString()
             }
@@ -497,7 +529,7 @@ export function createAgentCliAdapter(options) {
         label: options.label ?? `${options.command} CLI adapter`,
         metadata: {
             providerId: options.command,
-            model: options.model ?? options.command,
+            ...(options.model ? { model: options.model } : {}),
             transport: "cli",
             capabilities: createAdapterCapabilities({
                 preflight: true,
@@ -665,8 +697,15 @@ export function createAgentCliAdapter(options) {
                 parsed?.result ??
                 agentResult.stdout.trim();
             const summary = truncate(agentText, 2000);
+            const observedClaudeModel = options.streamingUsageCap
+                ? extractClaudeObservedModel(agentResult.stdout)
+                : undefined;
             const usage = parsed?.usage
-                ? extractUsage(parsed, options.model)
+                ? extractUsage(parsed, observedClaudeModel ?? options.model, observedClaudeModel
+                    ? "provider_reported"
+                    : options.model
+                        ? "explicit_override"
+                        : "agent_default")
                 : codexJsonlResult?.usage ??
                     geminiJsonResult?.usage ??
                     normalizeUsage({
@@ -678,7 +717,7 @@ export function createAgentCliAdapter(options) {
                         providerSettlement: options.command === "codex"
                             ? {
                                 providerId: "codex",
-                                model: options.model ?? "codex",
+                                ...(options.model ? { model: options.model } : {}),
                                 transport: "cli",
                                 source: "estimated_fallback",
                                 inputTokens: estimatedUsage.tokensIn,
@@ -689,7 +728,7 @@ export function createAgentCliAdapter(options) {
                             : options.command === "gemini"
                                 ? {
                                     providerId: "gemini",
-                                    model: options.model ?? "flash",
+                                    ...(options.model ? { model: options.model } : {}),
                                     transport: "cli",
                                     source: "estimated_fallback",
                                     inputTokens: estimatedUsage.tokensIn,
@@ -830,18 +869,6 @@ export function createAgentCliAdapter(options) {
                     ...(classHint ? { classHint } : {})
                 }
             };
-        },
-        /**
-         * Return a new adapter instance with a different model.
-         * Used by run-martin.ts when a change_model intervention fires.
-         * Model escalation order: haiku → sonnet → opus (cheapest-first, escalate on repeated failure).
-         */
-        withModel(newModel) {
-            return createAgentCliAdapter({
-                ...options,
-                model: newModel,
-                adapterIdSuffix: `${options.adapterIdSuffix ?? options.command}:${newModel}`
-            });
         }
     };
     return adapter;
@@ -870,7 +897,7 @@ export function createClaudeCliAdapter(options = {}) {
     return createAgentCliAdapter({
         command: "claude",
         adapterIdSuffix: "claude",
-        model: options.model ?? "claude-sonnet-4-6",
+        model: options.model,
         label: options.label ?? "Claude CLI adapter",
         workingDirectory: options.workingDirectory,
         timeoutMs: options.timeoutMs,
@@ -921,7 +948,7 @@ export function createCodexCliAdapter(options = {}) {
     return createAgentCliAdapter({
         command,
         adapterIdSuffix: "codex",
-        model: options.model ?? "codex",
+        model: options.model,
         label: options.label ?? "Codex CLI adapter",
         workingDirectory,
         timeoutMs: options.timeoutMs,
@@ -942,7 +969,7 @@ export function createCodexCliAdapter(options = {}) {
 // Pre-configured: Gemini CLI
 // ---------------------------------------------------------------------------
 /**
- * Spawns `gemini --model <model> --prompt "" --approval-mode <mode> --output-format json [...]`.
+ * Spawns `gemini [--model <explicit-model>] --prompt "" --approval-mode <mode> --output-format json [...]`.
  *
  * The prompt is delivered via stdin while forcing headless mode with `--prompt ""`,
  * which keeps large MartinLoop prompts off the command line on Windows.
@@ -951,13 +978,12 @@ export function createCodexCliAdapter(options = {}) {
  *   npm install -g @google/gemini-cli
  */
 export function createGeminiCliAdapter(options = {}) {
-    const model = options.model ?? "flash";
     const approvalMode = options.approvalMode ?? "yolo";
     const extraArgs = options.extraArgs ?? [];
     return createAgentCliAdapter({
         command: "gemini",
         adapterIdSuffix: "gemini",
-        model,
+        model: options.model,
         label: options.label ?? "Gemini CLI adapter",
         workingDirectory: options.workingDirectory,
         timeoutMs: options.timeoutMs,
@@ -965,8 +991,7 @@ export function createGeminiCliAdapter(options = {}) {
         supportsJsonOutput: false,
         spawnImpl: options.spawnImpl,
         argsBuilder: () => [
-            "--model",
-            model,
+            ...(options.model ? ["--model", options.model] : []),
             "--prompt",
             "",
             "--approval-mode",

package/dist/vendor/adapters/index.d.ts

@@ -1,6 +1,6 @@
 export { createDirectProviderAdapter, type DirectProviderAdapterOptions } from "./direct-provider.js";
-export { createStubDirectProviderAdapter, type StubDirectProviderAdapterOptions } from "./stub-direct-provider.js";
 export { createAgentCliAdapter, createClaudeCliAdapter, createCodexCliAdapter, createGeminiCliAdapter, type AgentCliAdapterOptions, type ClaudeCliAdapterOptions, type CodexCliAdapterOptions, type GeminiCliAdapterOptions, type CliArgsBuilder } from "./claude-cli.js";
 export { createOpenAiCompatibleAdapter, resolveOpenAiCompatibleRuntimeConfig, type OpenAiCompatibleAdapterOptions } from "./openai-compatible.js";
+export { createVerifierOnlyAdapter, type VerifierOnlyAdapterOptions } from "./verifier-only.js";
 export { detectCodexHostPlatform, diagnoseCodexHost, probeCodexLaunch, resolveCliCommandAvailability, type CliCommandAvailability, type CodexHostDiagnosis, type CodexHostPlatform, type CodexLaunchProbeResult, checkCodexSandboxPreflight, probeFilesystemWriteCapability, type CodexSandboxPreflightOk, type CodexSandboxPreflightOutcome, type CodexSandboxPreflightReadOnly } from "./codex-launcher.js";
 export { createSpawnPlan, type SpawnLike, type SpawnPlan, type SubprocessResult, type VerificationOutcome } from "./cli-bridge.js";

package/dist/vendor/adapters/index.js

@@ -1,6 +1,6 @@
 export { createDirectProviderAdapter } from "./direct-provider.js";
-export { createStubDirectProviderAdapter } from "./stub-direct-provider.js";
 export { createAgentCliAdapter, createClaudeCliAdapter, createCodexCliAdapter, createGeminiCliAdapter } from "./claude-cli.js";
 export { createOpenAiCompatibleAdapter, resolveOpenAiCompatibleRuntimeConfig } from "./openai-compatible.js";
+export { createVerifierOnlyAdapter } from "./verifier-only.js";
 export { detectCodexHostPlatform, diagnoseCodexHost, probeCodexLaunch, resolveCliCommandAvailability, checkCodexSandboxPreflight, probeFilesystemWriteCapability } from "./codex-launcher.js";
 export { createSpawnPlan } from "./cli-bridge.js";

package/dist/vendor/adapters/openai-compatible.d.ts

@@ -14,7 +14,7 @@
  * Usage:
  *   # Defaults to OpenAI's hosted endpoint when MARTIN_OPENAI_BASE_URL is unset.
  *   MARTIN_OPENAI_API_KEY=sk-...
- *   MARTIN_OPENAI_MODEL=gpt-4.1-mini
+ *   MARTIN_OPENAI_MODEL=<provider-model-id>
  *   martin-loop run "fix the bug" --engine openai
  *
  *   # Or route to a third-party / self-hosted OpenAI-compatible endpoint:
@@ -51,10 +51,9 @@ export interface OpenAiCompatibleAdapterOptions {
     fetchImpl?: typeof fetch;
 }
 export declare const DEFAULT_OPENAI_BASE_URL = "https://api.openai.com";
-export declare const DEFAULT_OPENAI_MODEL = "gpt-4.1-mini";
 export declare function resolveOpenAiCompatibleRuntimeConfig(env?: NodeJS.ProcessEnv): {
     baseUrl: string;
-    model: string;
+    model?: string;
     apiKey: string;
     apiKeyConfigured: boolean;
     authPosture: "api_key" | "anonymous_or_local";

package/dist/vendor/adapters/openai-compatible.js

@@ -14,7 +14,7 @@
  * Usage:
  *   # Defaults to OpenAI's hosted endpoint when MARTIN_OPENAI_BASE_URL is unset.
  *   MARTIN_OPENAI_API_KEY=sk-...
- *   MARTIN_OPENAI_MODEL=gpt-4.1-mini
+ *   MARTIN_OPENAI_MODEL=<provider-model-id>
  *   martin-loop run "fix the bug" --engine openai
  *
  *   # Or route to a third-party / self-hosted OpenAI-compatible endpoint:
@@ -77,13 +77,27 @@ function normalizeOpenAiCompatibleUsage(input) {
     };
     const actualUsd = (input.tokensIn / 1000) * pricing.inputPer1K +
         (input.tokensOut / 1000) * pricing.outputPer1K;
-    const provenance = input.usageWasFullyProviderReported && hasKnownPricing ? "actual" : "estimated";
+    const provenance = input.usageWasFullyProviderReported && hasKnownPricing ? "calculated" : "estimated";
     return normalizeUsage({
         actualUsd,
         ...(provenance === "estimated" ? { estimatedUsd: actualUsd } : {}),
         tokensIn: input.tokensIn,
         tokensOut: input.tokensOut,
-        provenance
+        provenance,
+        providerSettlement: {
+            providerId: "openai-compatible",
+            model: input.model,
+            transport: "http",
+            source: input.usageWasFullyProviderReported ? "openai_compatible_json" : "estimated_fallback",
+            inputTokens: input.tokensIn,
+            outputTokens: input.tokensOut,
+            billingMode: input.billingMode,
+            modelSource: input.modelSource,
+            pricingSource: hasKnownPricing ? "static_catalog" : "blended_fallback",
+            pricingVersion: "embedded-v1",
+            rawUsageAvailable: input.usageWasFullyProviderReported,
+            settledAt: new Date().toISOString()
+        }
     });
 }
 // ---------------------------------------------------------------------------
@@ -97,12 +111,11 @@ Follow these rules exactly:
 - Be precise, minimal, and test-backed in all changes.
 - State what you changed and why at the end of your response.`;
 export const DEFAULT_OPENAI_BASE_URL = "https://api.openai.com";
-export const DEFAULT_OPENAI_MODEL = "gpt-4.1-mini";
 export function resolveOpenAiCompatibleRuntimeConfig(env = process.env) {
     const apiKey = env["MARTIN_OPENAI_API_KEY"] ?? "";
     return {
         baseUrl: env["MARTIN_OPENAI_BASE_URL"] ?? DEFAULT_OPENAI_BASE_URL,
-        model: env["MARTIN_OPENAI_MODEL"] ?? DEFAULT_OPENAI_MODEL,
+        ...(env["MARTIN_OPENAI_MODEL"] ? { model: env["MARTIN_OPENAI_MODEL"] } : {}),
         apiKey,
         apiKeyConfigured: apiKey.length > 0,
         authPosture: apiKey.length > 0 ? "api_key" : "anonymous_or_local"
@@ -143,7 +156,16 @@ export function createOpenAiCompatibleAdapter(options) {
     const runtimeConfig = resolveOpenAiCompatibleRuntimeConfig();
     const baseUrl = (options.baseUrl ?? runtimeConfig.baseUrl).replace(/\/$/, "");
     const model = options.model ?? runtimeConfig.model;
+    if (!model) {
+        throw new Error("MODEL_CONFIGURATION_REQUIRED: set --model or MARTIN_OPENAI_MODEL for direct OpenAI-compatible execution.");
+    }
     const apiKey = options.apiKey ?? runtimeConfig.apiKey;
+    const modelSource = options.model ? "explicit_override" : "provider_configured";
+    const billingMode = /^(?:https?:\/\/)?(?:localhost|127\.0\.0\.1|\[::1\])/iu.test(baseUrl)
+        ? "local_unmetered"
+        : apiKey
+            ? "metered_api"
+            : "unknown";
     return {
         adapterId: `openai-compatible:${model}`,
         kind: "direct-provider",
@@ -306,7 +328,9 @@ export function createOpenAiCompatibleAdapter(options) {
                         model,
                         tokensIn,
                         tokensOut: 0,
-                        usageWasFullyProviderReported
+                        usageWasFullyProviderReported,
+                        modelSource,
+                        billingMode
                     }),
                     verification: { passed: false, summary: "Empty response — nothing to verify." },
                     failure: { message: "empty_response" }
@@ -332,7 +356,9 @@ export function createOpenAiCompatibleAdapter(options) {
                     model,
                     tokensIn,
                     tokensOut,
-                    usageWasFullyProviderReported
+                    usageWasFullyProviderReported,
+                    modelSource,
+                    billingMode
                 }),
                 verification,
                 execution,

package/dist/vendor/adapters/verifier-only.d.ts

@@ -0,0 +1,9 @@
+import type { MartinAdapter } from "../core/index.js";
+import { type SpawnLike } from "./cli-bridge.js";
+export interface VerifierOnlyAdapterOptions {
+    workingDirectory?: string;
+    verifyTimeoutMs?: number;
+    label?: string;
+    spawnImpl?: SpawnLike;
+}
+export declare function createVerifierOnlyAdapter(options?: VerifierOnlyAdapterOptions): MartinAdapter;

package/dist/vendor/adapters/verifier-only.js

@@ -0,0 +1,68 @@
+import { readGitChangedFiles, runVerification } from "./cli-bridge.js";
+import { createAdapterCapabilities, normalizeUsage } from "./runtime-support.js";
+export function createVerifierOnlyAdapter(options = {}) {
+    const workingDirectory = options.workingDirectory ?? process.cwd();
+    const verifyTimeoutMs = options.verifyTimeoutMs ?? 120_000;
+    return {
+        adapterId: "direct:verifier:verify-only",
+        kind: "direct-provider",
+        label: options.label ?? "Verifier-only adapter",
+        metadata: {
+            providerId: "verifier",
+            model: "verify-only",
+            transport: "cli",
+            capabilities: createAdapterCapabilities({
+                usageSettlement: true,
+                diffArtifacts: true,
+                workspaceMutations: false
+            })
+        },
+        async execute(request) {
+            const shouldTrackVerifierWrites = request.context.verificationPlan.length > 0 ||
+                (request.context.verificationStack?.length ?? 0) > 0;
+            const baselineChangedFiles = shouldTrackVerifierWrites
+                ? new Set(await readGitChangedFiles(workingDirectory, 5_000))
+                : new Set();
+            const verification = await runVerification(request.context.verificationPlan, workingDirectory, verifyTimeoutMs, request.context.verificationStack, options.spawnImpl, {
+                runId: request.loopId,
+                workspaceId: request.workspaceId,
+                cwd: workingDirectory
+            });
+            const changedFiles = shouldTrackVerifierWrites
+                ? (await readGitChangedFiles(workingDirectory, 5_000)).filter((file) => !baselineChangedFiles.has(file))
+                : [];
+            const execution = { changedFiles };
+            if (verification.passed) {
+                return {
+                    status: "completed",
+                    summary: changedFiles.length > 0
+                        ? `Verifier-only run completed but modified files: ${changedFiles.join(", ")}`
+                        : "Verifier-only run completed without file edits.",
+                    usage: normalizeUsage({
+                        actualUsd: 0,
+                        tokensIn: 0,
+                        tokensOut: 0,
+                        provenance: "actual"
+                    }),
+                    verification,
+                    execution
+                };
+            }
+            return {
+                status: "failed",
+                summary: "Verifier-only run failed.",
+                usage: normalizeUsage({
+                    actualUsd: 0,
+                    tokensIn: 0,
+                    tokensOut: 0,
+                    provenance: "actual"
+                }),
+                verification,
+                execution,
+                failure: {
+                    message: verification.summary
+                }
+            };
+        }
+    };
+}

package/dist/vendor/contracts/index.d.ts

@@ -66,17 +66,27 @@ export interface LoopCost {
     estimatedUsd?: number;
     provenance?: CostProvenance;
     providerSettlement?: ProviderUsageSettlement;
+    savingsBaseline?: {
+        usd: number;
+        source: "measured_control" | "operator_supplied" | "fixture";
+        provenance: CostProvenance;
+    };
 }
-export type UsageSettlementSource = "claude_json" | "codex_jsonl" | "gemini_json" | "estimated_fallback" | "unavailable";
+export type UsageSettlementSource = "claude_json" | "codex_jsonl" | "gemini_json" | "openai_compatible_json" | "estimated_fallback" | "unavailable";
 export interface ProviderUsageSettlement {
     providerId: string;
-    model: string;
+    model?: string;
     transport?: "cli" | "http" | "routed_http";
     source: UsageSettlementSource;
     inputTokens: number;
     cachedInputTokens?: number;
     outputTokens: number;
     reasoningOutputTokens?: number;
+    cacheCreationInputTokens?: number;
+    billingMode?: "metered_api" | "subscription" | "local_unmetered" | "unknown";
+    modelSource?: "provider_reported" | "explicit_override" | "provider_configured" | "agent_default" | "unavailable";
+    pricingSource?: "provider_reported_total" | "static_catalog" | "blended_fallback" | "none";
+    pricingVersion?: string;
     rawUsageAvailable: boolean;
     settledAt: string;
 }
@@ -141,7 +151,7 @@ export interface LoopAttempt {
     attemptId: string;
     index: number;
     adapterId: string;
-    model: string;
+    model?: string;
     startedAt: string;
     completedAt?: string;
     summary?: string;
@@ -335,7 +345,7 @@ export interface MachineState {
  * Cost provenance label — every budget metric must carry this.
  * Never conflate actual with estimated or unavailable.
  */
-export type CostProvenance = "actual" | "estimated" | "unavailable";
+export type CostProvenance = "actual" | "calculated" | "estimated" | "unavailable";
 /**
  * Per-attempt budget preflight estimate produced before admission.
  * Used to gate attempts before any tokens are spent.
@@ -443,8 +453,8 @@ export { CONTEXT_SHADOW_MANIFEST_VERSION, CONTEXT_C5_VERSION } from "./context-s
 export type { ContextC5EnvelopeV1, ContextEvidence, ContextShadowDecisionV1, ContextShadowManifestV1, ContextShadowSegmentInput, ContextShadowSegmentKind } from "./context-shadow.js";
 export { CONTEXT_MANIFEST_VERSION, CONTEXT_LEDGER_VERSION } from "./context-manifest.js";
 export type { ContinuationCheckpoint, ContextBudget, ContextCandidateDecision, ContextFaultRequest, ContextFaultResult, ContextKind, ContextLedgerEntry, ContextManifest, ContextObject, ContextPolicy, ContextPriority, ContextSensitivity, ContextTrust, TaskItem, UsageEvidence } from "./context-manifest.js";
-export { EVIDENCE_STATUSES, TEST_INTEGRITY_STATUSES, TEST_INTEGRITY_VERDICTS, VERIFIED_HANDOFF_OUTCOMES, } from "./verified-handoff.js";
-export type { EvidenceStatus, TestIntegrityStatus, TestIntegrityVerdict, VerifiedHandoffCheckV1, VerifiedHandoffOutcome, VerifiedHandoffRecoveryV1, VerifiedHandoffRequirementV1, VerifiedHandoffScopeV1, VerifiedHandoffTestIntegrityV1, VerifiedHandoffV1, } from "./verified-handoff.js";
+export { EVIDENCE_STATUSES, EXECUTION_MODES, TEST_INTEGRITY_STATUSES, TEST_INTEGRITY_VERDICTS, VERIFIED_HANDOFF_OUTCOMES, } from "./verified-handoff.js";
+export type { EvidenceStatus, ExecutionMode, TestIntegrityStatus, TestIntegrityVerdict, VerifiedHandoffCheckV1, VerifiedHandoffOutcome, VerifiedHandoffRecoveryV1, VerifiedHandoffRequirementV1, VerifiedHandoffScopeV1, VerifiedHandoffTestIntegrityV1, VerifiedHandoffV1, } from "./verified-handoff.js";
 export { HANDOFF_SCHEMA_VERSION } from "./context-handoff.js";
 export type { ChainIntegrityState, ContextCircuitBreakResult, ContextExclusionDecision, ContextHandoffArtifact, ContextHandoffClaim, ContextHandoffReceipt, ContextHandoffVerification, HandoffClaimState } from "./context-handoff.js";
 export { MISSION_SCHEMA_VERSION, MISSION_STATUSES, ALLOWED_MISSION_TRANSITIONS, createMissionRecord, isMissionTransitionAllowed } from './mission.js';

package/dist/vendor/contracts/index.js

@@ -243,7 +243,7 @@ export { CONTEXT_SHADOW_MANIFEST_VERSION, CONTEXT_C5_VERSION } from "./context-s
 // ─── Context Runtime — A-CTX-1 ───────────────────────────────────────────────
 export { CONTEXT_MANIFEST_VERSION, CONTEXT_LEDGER_VERSION } from "./context-manifest.js";
 // ─── Track A — Verified Handoff ───────────────────────────────────────────────
-export { EVIDENCE_STATUSES, TEST_INTEGRITY_STATUSES, TEST_INTEGRITY_VERDICTS, VERIFIED_HANDOFF_OUTCOMES, } from "./verified-handoff.js";
+export { EVIDENCE_STATUSES, EXECUTION_MODES, TEST_INTEGRITY_STATUSES, TEST_INTEGRITY_VERDICTS, VERIFIED_HANDOFF_OUTCOMES, } from "./verified-handoff.js";
 // ─── Context Handoff — A-CTX-2 ───────────────────────────────────────────────
 export { HANDOFF_SCHEMA_VERSION } from "./context-handoff.js";
 export { MISSION_SCHEMA_VERSION, MISSION_STATUSES, ALLOWED_MISSION_TRANSITIONS, createMissionRecord, isMissionTransitionAllowed } from './mission.js';

package/dist/vendor/contracts/verified-handoff.d.ts

@@ -1,6 +1,8 @@
 import type { CostProvenance, LoopLifecycleState, LoopStatus, ReceiptIntegritySummary } from "./index.js";
 export declare const VERIFIED_HANDOFF_OUTCOMES: readonly ["VERIFIED", "STOPPED", "NEEDS_REVIEW"];
 export type VerifiedHandoffOutcome = (typeof VERIFIED_HANDOFF_OUTCOMES)[number];
+export declare const EXECUTION_MODES: readonly ["governed", "verification_only", "simulated"];
+export type ExecutionMode = (typeof EXECUTION_MODES)[number];
 export declare const EVIDENCE_STATUSES: readonly ["PASSED", "FAILED", "CONTRADICTED", "NOT_RUN", "NOT_EVALUATED"];
 export type EvidenceStatus = (typeof EVIDENCE_STATUSES)[number];
 /**
@@ -71,6 +73,10 @@ export interface VerifiedHandoffV1 {
         verificationPlan: string[];
     };
     outcome: VerifiedHandoffOutcome;
+    /** Added compatibly in 1.0.0; missing legacy values must be treated as non-governed. */
+    executionMode?: ExecutionMode;
+    /** Only an explicit true value is eligible for a governed VERIFIED claim. */
+    governanceClaimEligible?: boolean;
     sourceStatus: {
         status: LoopStatus;
         lifecycleState: LoopLifecycleState;

package/dist/vendor/contracts/verified-handoff.js

@@ -5,6 +5,11 @@ export const VERIFIED_HANDOFF_OUTCOMES = [
     "STOPPED",
     "NEEDS_REVIEW",
 ];
+export const EXECUTION_MODES = [
+    "governed",
+    "verification_only",
+    "simulated",
+];
 export const EVIDENCE_STATUSES = [
     "PASSED",
     "FAILED",

package/dist/vendor/core/grounding.d.ts

@@ -9,6 +9,7 @@ export interface RepoGroundingIndex {
     createdAt: string;
     fileCount: number;
     files: RepoGroundingFile[];
+    repositoryFingerprint?: string;
 }
 export interface RepoGroundingHit {
     path: string;
@@ -18,7 +19,7 @@ export interface RepoGroundingHit {
 }
 export declare function resolveGroundingRoot(env?: NodeJS.ProcessEnv): string;
 export declare function loadOrBuildRepoGroundingIndex(repoRoot: string): Promise<RepoGroundingIndex>;
-export declare function buildRepoGroundingIndex(repoRoot: string): Promise<RepoGroundingIndex>;
+export declare function buildRepoGroundingIndex(repoRoot: string, repositoryFingerprint?: string): Promise<RepoGroundingIndex>;
 export declare function queryRepoGroundingIndex(index: RepoGroundingIndex, query: string, limit?: number): RepoGroundingHit[];
 export type GroundingViolationKind = "file_not_found" | "symbol_not_found" | "import_not_found" | "patch_outside_allowed_paths";
 export interface GroundingViolation {

package/dist/vendor/core/grounding.js

@@ -1,4 +1,5 @@
-import { mkdir, readdir, readFile, writeFile } from "node:fs/promises";
+import { createHash } from "node:crypto";
+import { mkdir, readdir, readFile, stat, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { extname, join, relative } from "node:path";
 const TEXT_EXTENSIONS = new Set([
@@ -18,14 +19,16 @@ export function resolveGroundingRoot(env = process.env) {
 }
 export async function loadOrBuildRepoGroundingIndex(repoRoot) {
     const cachePath = getGroundingCachePath(repoRoot);
+    const repositoryFingerprint = await computeRepositoryFingerprint(repoRoot);
     try {
         const cached = JSON.parse(await readFile(cachePath, "utf8"));
-        if (cached?.schemaVersion === "martin.grounding.v1") {
+        if (cached?.schemaVersion === "martin.grounding.v1" &&
+            cached.repositoryFingerprint === repositoryFingerprint) {
             return cached;
         }
     }
     catch { }
-    const index = await buildRepoGroundingIndex(repoRoot);
+    const index = await buildRepoGroundingIndex(repoRoot, repositoryFingerprint);
     try {
         await mkdir(resolveGroundingRoot(), { recursive: true });
         await writeFile(cachePath, JSON.stringify(index, null, 2), "utf8");
@@ -36,7 +39,7 @@ export async function loadOrBuildRepoGroundingIndex(repoRoot) {
     }
     return index;
 }
-export async function buildRepoGroundingIndex(repoRoot) {
+export async function buildRepoGroundingIndex(repoRoot, repositoryFingerprint) {
     const files = [];
     const discovered = await walk(repoRoot, repoRoot, files, { count: 0 });
     return {
@@ -44,9 +47,41 @@ export async function buildRepoGroundingIndex(repoRoot) {
         repoRoot,
         createdAt: new Date().toISOString(),
         fileCount: discovered.count,
-        files
+        files,
+        repositoryFingerprint: repositoryFingerprint ?? await computeRepositoryFingerprint(repoRoot)
     };
 }
+async function computeRepositoryFingerprint(repoRoot) {
+    const entries = [];
+    await collectFingerprintEntries(repoRoot, repoRoot, entries, { count: 0 });
+    entries.sort();
+    return createHash("sha256").update(entries.join("\n")).digest("hex");
+}
+async function collectFingerprintEntries(repoRoot, currentDir, entries, state) {
+    if (state.count >= MAX_FILES)
+        return;
+    const directoryEntries = await readdir(currentDir, { withFileTypes: true });
+    for (const entry of directoryEntries) {
+        if (state.count >= MAX_FILES)
+            break;
+        const absPath = join(currentDir, entry.name);
+        if (entry.isDirectory()) {
+            if (!IGNORED_DIRS.has(entry.name)) {
+                await collectFingerprintEntries(repoRoot, absPath, entries, state);
+            }
+            continue;
+        }
+        if (!entry.isFile() || !TEXT_EXTENSIONS.has(extname(entry.name).toLowerCase()))
+            continue;
+        try {
+            const metadata = await stat(absPath);
+            const relPath = relative(repoRoot, absPath).replace(/\\/g, "/");
+            entries.push(`${relPath}:${metadata.size}:${metadata.mtimeMs}`);
+            state.count += 1;
+        }
+        catch { }
+    }
+}
 export function queryRepoGroundingIndex(index, query, limit = 6) {
     const terms = tokenize(query);
     if (terms.length === 0)