@martinloop/mcp 0.5.0 → 0.5.3

package/dist/vendor/adapters/index.d.ts

@@ -1,6 +1,7 @@
 export { createDirectProviderAdapter, type DirectProviderAdapterOptions } from "./direct-provider.js";
-export { createStubDirectProviderAdapter, type StubDirectProviderAdapterOptions } from "./stub-direct-provider.js";
-export { createAgentCliAdapter, createClaudeCliAdapter, createCodexCliAdapter, createGeminiCliAdapter, type AgentCliAdapterOptions, type ClaudeCliAdapterOptions, type CodexCliAdapterOptions, type GeminiCliAdapterOptions, type CliArgsBuilder } from "./claude-cli.js";
+export { createAgentCliAdapter, createClaudeCliAdapter, createGeminiCliAdapter, type AgentCliAdapterOptions, type ClaudeCliAdapterOptions, type GeminiCliAdapterOptions, type CliArgsBuilder } from "./claude-cli.js";
+export { createCodexCliAdapter, type CodexCliAdapterOptions } from "./codex-cli.js";
 export { createOpenAiCompatibleAdapter, resolveOpenAiCompatibleRuntimeConfig, type OpenAiCompatibleAdapterOptions } from "./openai-compatible.js";
-export { detectCodexHostPlatform, diagnoseCodexHost, probeCodexLaunch, resolveCliCommandAvailability, type CliCommandAvailability, type CodexHostDiagnosis, type CodexHostPlatform, type CodexLaunchProbeResult, checkCodexSandboxPreflight, probeFilesystemWriteCapability, type CodexSandboxPreflightOk, type CodexSandboxPreflightOutcome, type CodexSandboxPreflightReadOnly } from "./codex-launcher.js";
+export { createVerifierOnlyAdapter, type VerifierOnlyAdapterOptions } from "./verifier-only.js";
+export { buildCodexExecArgs, buildCodexStdin, clearCodexCapabilityCacheForTests, detectCodexHostPlatform, diagnoseCodexHost, probeCodexCapabilities, probeCodexLaunch, resolveCliCommandAvailability, type CliCommandAvailability, type CodexApprovalCapability, type CodexCapabilityFlag, type CodexCapabilityProfile, type CodexFlagScope, type CodexHostDiagnosis, type CodexHostPlatform, type CodexLaunchProbeResult, type CodexPromptTransport, type CodexSandboxCapability, checkCodexSandboxPreflight, probeFilesystemWriteCapability, type CodexSandboxPreflightOk, type CodexSandboxPreflightOutcome, type CodexSandboxPreflightReadOnly } from "./codex-launcher.js";
 export { createSpawnPlan, type SpawnLike, type SpawnPlan, type SubprocessResult, type VerificationOutcome } from "./cli-bridge.js";

package/dist/vendor/adapters/index.js

@@ -1,6 +1,7 @@
 export { createDirectProviderAdapter } from "./direct-provider.js";
-export { createStubDirectProviderAdapter } from "./stub-direct-provider.js";
-export { createAgentCliAdapter, createClaudeCliAdapter, createCodexCliAdapter, createGeminiCliAdapter } from "./claude-cli.js";
+export { createAgentCliAdapter, createClaudeCliAdapter, createGeminiCliAdapter } from "./claude-cli.js";
+export { createCodexCliAdapter } from "./codex-cli.js";
 export { createOpenAiCompatibleAdapter, resolveOpenAiCompatibleRuntimeConfig } from "./openai-compatible.js";
-export { detectCodexHostPlatform, diagnoseCodexHost, probeCodexLaunch, resolveCliCommandAvailability, checkCodexSandboxPreflight, probeFilesystemWriteCapability } from "./codex-launcher.js";
+export { createVerifierOnlyAdapter } from "./verifier-only.js";
+export { buildCodexExecArgs, buildCodexStdin, clearCodexCapabilityCacheForTests, detectCodexHostPlatform, diagnoseCodexHost, probeCodexCapabilities, probeCodexLaunch, resolveCliCommandAvailability, checkCodexSandboxPreflight, probeFilesystemWriteCapability } from "./codex-launcher.js";
 export { createSpawnPlan } from "./cli-bridge.js";

package/dist/vendor/adapters/openai-compatible.d.ts

@@ -14,7 +14,7 @@
  * Usage:
  *   # Defaults to OpenAI's hosted endpoint when MARTIN_OPENAI_BASE_URL is unset.
  *   MARTIN_OPENAI_API_KEY=sk-...
- *   MARTIN_OPENAI_MODEL=gpt-4.1-mini
+ *   MARTIN_OPENAI_MODEL=<provider-model-id>
  *   martin-loop run "fix the bug" --engine openai
  *
  *   # Or route to a third-party / self-hosted OpenAI-compatible endpoint:
@@ -51,10 +51,9 @@ export interface OpenAiCompatibleAdapterOptions {
     fetchImpl?: typeof fetch;
 }
 export declare const DEFAULT_OPENAI_BASE_URL = "https://api.openai.com";
-export declare const DEFAULT_OPENAI_MODEL = "gpt-4.1-mini";
 export declare function resolveOpenAiCompatibleRuntimeConfig(env?: NodeJS.ProcessEnv): {
     baseUrl: string;
-    model: string;
+    model?: string;
     apiKey: string;
     apiKeyConfigured: boolean;
     authPosture: "api_key" | "anonymous_or_local";

package/dist/vendor/adapters/openai-compatible.js

@@ -14,7 +14,7 @@
  * Usage:
  *   # Defaults to OpenAI's hosted endpoint when MARTIN_OPENAI_BASE_URL is unset.
  *   MARTIN_OPENAI_API_KEY=sk-...
- *   MARTIN_OPENAI_MODEL=gpt-4.1-mini
+ *   MARTIN_OPENAI_MODEL=<provider-model-id>
  *   martin-loop run "fix the bug" --engine openai
  *
  *   # Or route to a third-party / self-hosted OpenAI-compatible endpoint:
@@ -77,13 +77,27 @@ function normalizeOpenAiCompatibleUsage(input) {
     };
     const actualUsd = (input.tokensIn / 1000) * pricing.inputPer1K +
         (input.tokensOut / 1000) * pricing.outputPer1K;
-    const provenance = input.usageWasFullyProviderReported && hasKnownPricing ? "actual" : "estimated";
+    const provenance = input.usageWasFullyProviderReported && hasKnownPricing ? "calculated" : "estimated";
     return normalizeUsage({
         actualUsd,
         ...(provenance === "estimated" ? { estimatedUsd: actualUsd } : {}),
         tokensIn: input.tokensIn,
         tokensOut: input.tokensOut,
-        provenance
+        provenance,
+        providerSettlement: {
+            providerId: "openai-compatible",
+            model: input.model,
+            transport: "http",
+            source: input.usageWasFullyProviderReported ? "openai_compatible_json" : "estimated_fallback",
+            inputTokens: input.tokensIn,
+            outputTokens: input.tokensOut,
+            billingMode: input.billingMode,
+            modelSource: input.modelSource,
+            pricingSource: hasKnownPricing ? "static_catalog" : "blended_fallback",
+            pricingVersion: "embedded-v1",
+            rawUsageAvailable: input.usageWasFullyProviderReported,
+            settledAt: new Date().toISOString()
+        }
     });
 }
 // ---------------------------------------------------------------------------
@@ -97,12 +111,11 @@ Follow these rules exactly:
 - Be precise, minimal, and test-backed in all changes.
 - State what you changed and why at the end of your response.`;
 export const DEFAULT_OPENAI_BASE_URL = "https://api.openai.com";
-export const DEFAULT_OPENAI_MODEL = "gpt-4.1-mini";
 export function resolveOpenAiCompatibleRuntimeConfig(env = process.env) {
     const apiKey = env["MARTIN_OPENAI_API_KEY"] ?? "";
     return {
         baseUrl: env["MARTIN_OPENAI_BASE_URL"] ?? DEFAULT_OPENAI_BASE_URL,
-        model: env["MARTIN_OPENAI_MODEL"] ?? DEFAULT_OPENAI_MODEL,
+        ...(env["MARTIN_OPENAI_MODEL"] ? { model: env["MARTIN_OPENAI_MODEL"] } : {}),
         apiKey,
         apiKeyConfigured: apiKey.length > 0,
         authPosture: apiKey.length > 0 ? "api_key" : "anonymous_or_local"
@@ -143,7 +156,16 @@ export function createOpenAiCompatibleAdapter(options) {
     const runtimeConfig = resolveOpenAiCompatibleRuntimeConfig();
     const baseUrl = (options.baseUrl ?? runtimeConfig.baseUrl).replace(/\/$/, "");
     const model = options.model ?? runtimeConfig.model;
+    if (!model) {
+        throw new Error("MODEL_CONFIGURATION_REQUIRED: set --model or MARTIN_OPENAI_MODEL for direct OpenAI-compatible execution.");
+    }
     const apiKey = options.apiKey ?? runtimeConfig.apiKey;
+    const modelSource = options.model ? "explicit_override" : "provider_configured";
+    const billingMode = /^(?:https?:\/\/)?(?:localhost|127\.0\.0\.1|\[::1\])/iu.test(baseUrl)
+        ? "local_unmetered"
+        : apiKey
+            ? "metered_api"
+            : "unknown";
     return {
         adapterId: `openai-compatible:${model}`,
         kind: "direct-provider",
@@ -306,7 +328,9 @@ export function createOpenAiCompatibleAdapter(options) {
                         model,
                         tokensIn,
                         tokensOut: 0,
-                        usageWasFullyProviderReported
+                        usageWasFullyProviderReported,
+                        modelSource,
+                        billingMode
                     }),
                     verification: { passed: false, summary: "Empty response — nothing to verify." },
                     failure: { message: "empty_response" }
@@ -332,7 +356,9 @@ export function createOpenAiCompatibleAdapter(options) {
                     model,
                     tokensIn,
                     tokensOut,
-                    usageWasFullyProviderReported
+                    usageWasFullyProviderReported,
+                    modelSource,
+                    billingMode
                 }),
                 verification,
                 execution,

package/dist/vendor/adapters/verifier-only.d.ts

@@ -0,0 +1,9 @@
+import type { MartinAdapter } from "../core/index.js";
+import { type SpawnLike } from "./cli-bridge.js";
+export interface VerifierOnlyAdapterOptions {
+    workingDirectory?: string;
+    verifyTimeoutMs?: number;
+    label?: string;
+    spawnImpl?: SpawnLike;
+}
+export declare function createVerifierOnlyAdapter(options?: VerifierOnlyAdapterOptions): MartinAdapter;

package/dist/vendor/adapters/verifier-only.js

@@ -0,0 +1,68 @@
+import { readGitChangedFiles, runVerification } from "./cli-bridge.js";
+import { createAdapterCapabilities, normalizeUsage } from "./runtime-support.js";
+export function createVerifierOnlyAdapter(options = {}) {
+    const workingDirectory = options.workingDirectory ?? process.cwd();
+    const verifyTimeoutMs = options.verifyTimeoutMs ?? 120_000;
+    return {
+        adapterId: "direct:verifier:verify-only",
+        kind: "direct-provider",
+        label: options.label ?? "Verifier-only adapter",
+        metadata: {
+            providerId: "verifier",
+            model: "verify-only",
+            transport: "cli",
+            capabilities: createAdapterCapabilities({
+                usageSettlement: true,
+                diffArtifacts: true,
+                workspaceMutations: false
+            })
+        },
+        async execute(request) {
+            const shouldTrackVerifierWrites = request.context.verificationPlan.length > 0 ||
+                (request.context.verificationStack?.length ?? 0) > 0;
+            const baselineChangedFiles = shouldTrackVerifierWrites
+                ? new Set(await readGitChangedFiles(workingDirectory, 5_000))
+                : new Set();
+            const verification = await runVerification(request.context.verificationPlan, workingDirectory, verifyTimeoutMs, request.context.verificationStack, options.spawnImpl, {
+                runId: request.loopId,
+                workspaceId: request.workspaceId,
+                cwd: workingDirectory
+            });
+            const changedFiles = shouldTrackVerifierWrites
+                ? (await readGitChangedFiles(workingDirectory, 5_000)).filter((file) => !baselineChangedFiles.has(file))
+                : [];
+            const execution = { changedFiles };
+            if (verification.passed) {
+                return {
+                    status: "completed",
+                    summary: changedFiles.length > 0
+                        ? `Verifier-only run completed but modified files: ${changedFiles.join(", ")}`
+                        : "Verifier-only run completed without file edits.",
+                    usage: normalizeUsage({
+                        actualUsd: 0,
+                        tokensIn: 0,
+                        tokensOut: 0,
+                        provenance: "actual"
+                    }),
+                    verification,
+                    execution
+                };
+            }
+            return {
+                status: "failed",
+                summary: "Verifier-only run failed.",
+                usage: normalizeUsage({
+                    actualUsd: 0,
+                    tokensIn: 0,
+                    tokensOut: 0,
+                    provenance: "actual"
+                }),
+                verification,
+                execution,
+                failure: {
+                    message: verification.summary
+                }
+            };
+        }
+    };
+}

package/dist/vendor/contracts/index.d.ts

@@ -66,17 +66,27 @@ export interface LoopCost {
     estimatedUsd?: number;
     provenance?: CostProvenance;
     providerSettlement?: ProviderUsageSettlement;
+    savingsBaseline?: {
+        usd: number;
+        source: "measured_control" | "operator_supplied" | "fixture";
+        provenance: CostProvenance;
+    };
 }
-export type UsageSettlementSource = "claude_json" | "codex_jsonl" | "gemini_json" | "estimated_fallback" | "unavailable";
+export type UsageSettlementSource = "claude_json" | "codex_jsonl" | "gemini_json" | "openai_compatible_json" | "estimated_fallback" | "unavailable";
 export interface ProviderUsageSettlement {
     providerId: string;
-    model: string;
+    model?: string;
     transport?: "cli" | "http" | "routed_http";
     source: UsageSettlementSource;
     inputTokens: number;
     cachedInputTokens?: number;
     outputTokens: number;
     reasoningOutputTokens?: number;
+    cacheCreationInputTokens?: number;
+    billingMode?: "metered_api" | "subscription" | "local_unmetered" | "unknown";
+    modelSource?: "provider_reported" | "explicit_override" | "provider_configured" | "agent_default" | "unavailable";
+    pricingSource?: "provider_reported_total" | "static_catalog" | "blended_fallback" | "none";
+    pricingVersion?: string;
     rawUsageAvailable: boolean;
     settledAt: string;
 }
@@ -141,7 +151,7 @@ export interface LoopAttempt {
     attemptId: string;
     index: number;
     adapterId: string;
-    model: string;
+    model?: string;
     startedAt: string;
     completedAt?: string;
     summary?: string;
@@ -335,7 +345,7 @@ export interface MachineState {
  * Cost provenance label — every budget metric must carry this.
  * Never conflate actual with estimated or unavailable.
  */
-export type CostProvenance = "actual" | "estimated" | "unavailable";
+export type CostProvenance = "actual" | "calculated" | "estimated" | "unavailable";
 /**
  * Per-attempt budget preflight estimate produced before admission.
  * Used to gate attempts before any tokens are spent.
@@ -443,8 +453,8 @@ export { CONTEXT_SHADOW_MANIFEST_VERSION, CONTEXT_C5_VERSION } from "./context-s
 export type { ContextC5EnvelopeV1, ContextEvidence, ContextShadowDecisionV1, ContextShadowManifestV1, ContextShadowSegmentInput, ContextShadowSegmentKind } from "./context-shadow.js";
 export { CONTEXT_MANIFEST_VERSION, CONTEXT_LEDGER_VERSION } from "./context-manifest.js";
 export type { ContinuationCheckpoint, ContextBudget, ContextCandidateDecision, ContextFaultRequest, ContextFaultResult, ContextKind, ContextLedgerEntry, ContextManifest, ContextObject, ContextPolicy, ContextPriority, ContextSensitivity, ContextTrust, TaskItem, UsageEvidence } from "./context-manifest.js";
-export { EVIDENCE_STATUSES, TEST_INTEGRITY_STATUSES, TEST_INTEGRITY_VERDICTS, VERIFIED_HANDOFF_OUTCOMES, } from "./verified-handoff.js";
-export type { EvidenceStatus, TestIntegrityStatus, TestIntegrityVerdict, VerifiedHandoffCheckV1, VerifiedHandoffOutcome, VerifiedHandoffRecoveryV1, VerifiedHandoffRequirementV1, VerifiedHandoffScopeV1, VerifiedHandoffTestIntegrityV1, VerifiedHandoffV1, } from "./verified-handoff.js";
+export { EVIDENCE_STATUSES, EXECUTION_MODES, TEST_INTEGRITY_STATUSES, TEST_INTEGRITY_VERDICTS, VERIFIED_HANDOFF_OUTCOMES, } from "./verified-handoff.js";
+export type { EvidenceStatus, ExecutionMode, TestIntegrityStatus, TestIntegrityVerdict, VerifiedHandoffCheckV1, VerifiedHandoffOutcome, VerifiedHandoffRecoveryV1, VerifiedHandoffRequirementV1, VerifiedHandoffScopeV1, VerifiedHandoffTestIntegrityV1, VerifiedHandoffV1, } from "./verified-handoff.js";
 export { HANDOFF_SCHEMA_VERSION } from "./context-handoff.js";
 export type { ChainIntegrityState, ContextCircuitBreakResult, ContextExclusionDecision, ContextHandoffArtifact, ContextHandoffClaim, ContextHandoffReceipt, ContextHandoffVerification, HandoffClaimState } from "./context-handoff.js";
 export { MISSION_SCHEMA_VERSION, MISSION_STATUSES, ALLOWED_MISSION_TRANSITIONS, createMissionRecord, isMissionTransitionAllowed } from './mission.js';

package/dist/vendor/contracts/index.js

@@ -243,7 +243,7 @@ export { CONTEXT_SHADOW_MANIFEST_VERSION, CONTEXT_C5_VERSION } from "./context-s
 // ─── Context Runtime — A-CTX-1 ───────────────────────────────────────────────
 export { CONTEXT_MANIFEST_VERSION, CONTEXT_LEDGER_VERSION } from "./context-manifest.js";
 // ─── Track A — Verified Handoff ───────────────────────────────────────────────
-export { EVIDENCE_STATUSES, TEST_INTEGRITY_STATUSES, TEST_INTEGRITY_VERDICTS, VERIFIED_HANDOFF_OUTCOMES, } from "./verified-handoff.js";
+export { EVIDENCE_STATUSES, EXECUTION_MODES, TEST_INTEGRITY_STATUSES, TEST_INTEGRITY_VERDICTS, VERIFIED_HANDOFF_OUTCOMES, } from "./verified-handoff.js";
 // ─── Context Handoff — A-CTX-2 ───────────────────────────────────────────────
 export { HANDOFF_SCHEMA_VERSION } from "./context-handoff.js";
 export { MISSION_SCHEMA_VERSION, MISSION_STATUSES, ALLOWED_MISSION_TRANSITIONS, createMissionRecord, isMissionTransitionAllowed } from './mission.js';

package/dist/vendor/contracts/verified-handoff.d.ts

@@ -1,6 +1,8 @@
 import type { CostProvenance, LoopLifecycleState, LoopStatus, ReceiptIntegritySummary } from "./index.js";
 export declare const VERIFIED_HANDOFF_OUTCOMES: readonly ["VERIFIED", "STOPPED", "NEEDS_REVIEW"];
 export type VerifiedHandoffOutcome = (typeof VERIFIED_HANDOFF_OUTCOMES)[number];
+export declare const EXECUTION_MODES: readonly ["governed", "verification_only", "simulated"];
+export type ExecutionMode = (typeof EXECUTION_MODES)[number];
 export declare const EVIDENCE_STATUSES: readonly ["PASSED", "FAILED", "CONTRADICTED", "NOT_RUN", "NOT_EVALUATED"];
 export type EvidenceStatus = (typeof EVIDENCE_STATUSES)[number];
 /**
@@ -71,6 +73,10 @@ export interface VerifiedHandoffV1 {
         verificationPlan: string[];
     };
     outcome: VerifiedHandoffOutcome;
+    /** Added compatibly in 1.0.0; missing legacy values must be treated as non-governed. */
+    executionMode?: ExecutionMode;
+    /** Only an explicit true value is eligible for a governed VERIFIED claim. */
+    governanceClaimEligible?: boolean;
     sourceStatus: {
         status: LoopStatus;
         lifecycleState: LoopLifecycleState;

package/dist/vendor/contracts/verified-handoff.js

@@ -5,6 +5,11 @@ export const VERIFIED_HANDOFF_OUTCOMES = [
     "STOPPED",
     "NEEDS_REVIEW",
 ];
+export const EXECUTION_MODES = [
+    "governed",
+    "verification_only",
+    "simulated",
+];
 export const EVIDENCE_STATUSES = [
     "PASSED",
     "FAILED",

package/dist/vendor/core/grounding.d.ts

@@ -9,6 +9,7 @@ export interface RepoGroundingIndex {
     createdAt: string;
     fileCount: number;
     files: RepoGroundingFile[];
+    repositoryFingerprint?: string;
 }
 export interface RepoGroundingHit {
     path: string;
@@ -18,7 +19,7 @@ export interface RepoGroundingHit {
 }
 export declare function resolveGroundingRoot(env?: NodeJS.ProcessEnv): string;
 export declare function loadOrBuildRepoGroundingIndex(repoRoot: string): Promise<RepoGroundingIndex>;
-export declare function buildRepoGroundingIndex(repoRoot: string): Promise<RepoGroundingIndex>;
+export declare function buildRepoGroundingIndex(repoRoot: string, repositoryFingerprint?: string): Promise<RepoGroundingIndex>;
 export declare function queryRepoGroundingIndex(index: RepoGroundingIndex, query: string, limit?: number): RepoGroundingHit[];
 export type GroundingViolationKind = "file_not_found" | "symbol_not_found" | "import_not_found" | "patch_outside_allowed_paths";
 export interface GroundingViolation {

package/dist/vendor/core/grounding.js

@@ -1,4 +1,5 @@
-import { mkdir, readdir, readFile, writeFile } from "node:fs/promises";
+import { createHash } from "node:crypto";
+import { mkdir, readdir, readFile, stat, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { extname, join, relative } from "node:path";
 const TEXT_EXTENSIONS = new Set([
@@ -18,14 +19,16 @@ export function resolveGroundingRoot(env = process.env) {
 }
 export async function loadOrBuildRepoGroundingIndex(repoRoot) {
     const cachePath = getGroundingCachePath(repoRoot);
+    const repositoryFingerprint = await computeRepositoryFingerprint(repoRoot);
     try {
         const cached = JSON.parse(await readFile(cachePath, "utf8"));
-        if (cached?.schemaVersion === "martin.grounding.v1") {
+        if (cached?.schemaVersion === "martin.grounding.v1" &&
+            cached.repositoryFingerprint === repositoryFingerprint) {
             return cached;
         }
     }
     catch { }
-    const index = await buildRepoGroundingIndex(repoRoot);
+    const index = await buildRepoGroundingIndex(repoRoot, repositoryFingerprint);
     try {
         await mkdir(resolveGroundingRoot(), { recursive: true });
         await writeFile(cachePath, JSON.stringify(index, null, 2), "utf8");
@@ -36,7 +39,7 @@ export async function loadOrBuildRepoGroundingIndex(repoRoot) {
     }
     return index;
 }
-export async function buildRepoGroundingIndex(repoRoot) {
+export async function buildRepoGroundingIndex(repoRoot, repositoryFingerprint) {
     const files = [];
     const discovered = await walk(repoRoot, repoRoot, files, { count: 0 });
     return {
@@ -44,9 +47,41 @@ export async function buildRepoGroundingIndex(repoRoot) {
         repoRoot,
         createdAt: new Date().toISOString(),
         fileCount: discovered.count,
-        files
+        files,
+        repositoryFingerprint: repositoryFingerprint ?? await computeRepositoryFingerprint(repoRoot)
     };
 }
+async function computeRepositoryFingerprint(repoRoot) {
+    const entries = [];
+    await collectFingerprintEntries(repoRoot, repoRoot, entries, { count: 0 });
+    entries.sort();
+    return createHash("sha256").update(entries.join("\n")).digest("hex");
+}
+async function collectFingerprintEntries(repoRoot, currentDir, entries, state) {
+    if (state.count >= MAX_FILES)
+        return;
+    const directoryEntries = await readdir(currentDir, { withFileTypes: true });
+    for (const entry of directoryEntries) {
+        if (state.count >= MAX_FILES)
+            break;
+        const absPath = join(currentDir, entry.name);
+        if (entry.isDirectory()) {
+            if (!IGNORED_DIRS.has(entry.name)) {
+                await collectFingerprintEntries(repoRoot, absPath, entries, state);
+            }
+            continue;
+        }
+        if (!entry.isFile() || !TEXT_EXTENSIONS.has(extname(entry.name).toLowerCase()))
+            continue;
+        try {
+            const metadata = await stat(absPath);
+            const relPath = relative(repoRoot, absPath).replace(/\\/g, "/");
+            entries.push(`${relPath}:${metadata.size}:${metadata.mtimeMs}`);
+            state.count += 1;
+        }
+        catch { }
+    }
+}
 export function queryRepoGroundingIndex(index, query, limit = 6) {
     const terms = tokenize(query);
     if (terms.length === 0)

package/dist/vendor/core/index.d.ts

@@ -19,8 +19,8 @@ export { compileExecutionPolicy } from "./policy-compiler.js";
 export { assessTrajectory, decideCircuitBreak } from "./trajectory.js";
 export { calculateAvoidedUsd, calculateLoopAvoidedUsd } from "./savings.js";
 export type { AvoidedUsdInput } from "./savings.js";
-export { classifyRoute, evaluatePreworkBurnPolicy, resolveModelForTier, selectBestEngine } from "./routing.js";
-export type { RouteDecision, RouteClassificationInput, AvailableEngine } from "./routing.js";
+export { classifyRoute, evaluatePreworkBurnPolicy } from "./routing.js";
+export type { RouteDecision, RouteClassificationInput } from "./routing.js";
 export { validateTestIntegrity, snapshotTestFiles, identifyNewTests, findTestFiles, isTestFile, extractImports, hasTrivialAssertionsOnly, importsPreExistingCode } from "./test-integrity.js";
 export type { TestIntegrityReport, TestIntegrityFinding } from "./test-integrity.js";
 export { analyzeRepoStyle, buildPromptDirectives } from "./repo-analyzer.js";
@@ -29,7 +29,7 @@ export { runContextIntegrityPrecheck } from "./context-integrity.js";
 export type { ContextIntegrityPrecheck, ContextIntegrityVerdict } from "./context-integrity.js";
 export { compilePromptPacket } from "./compiler.js";
 export type { PromptPacket, CompilerAdapterRequest } from "./compiler.js";
-export { buildVerifiedHandoff, resolveVerifiedHandoffOutcome, toTestIntegrityVerdict, verifierActuallyPassed, } from "./verified-handoff.js";
+export { buildVerifiedHandoff, deriveVerifiedHandoffExecutionBoundary, resolveVerifiedHandoffOutcome, toTestIntegrityVerdict, verifierActuallyPassed, } from "./verified-handoff.js";
 export type { BoundVerifierEvidence, BuildVerifiedHandoffInput, VerifierExecutionBinding, } from "./verified-handoff.js";
 export { createFileRunStore, makeLedgerEvent, readAllLoopRecords, readLatestLoopRecord, readLatestLoopRecordFromFile, readLoopRecordsFromFile, resolveRunsRoot, resolveReceiptIntegrityPath, verifyReceiptIntegrityFromFiles, writeReceiptIntegrityMaterial } from "./persistence/index.js";
 export type { AttemptArtifacts, LedgerEvent, LedgerEventKind, LoopAttemptRecord, LoopRunRecord, ReceiptIntegrityChainEntry, RunContract, RunStore, StoredReceiptIntegrityMaterial } from "./persistence/index.js";
@@ -142,7 +142,7 @@ export interface MartinAdapter {
     label: string;
     metadata: {
         providerId: string;
-        model: string;
+        model?: string;
         transport?: "cli" | "http" | "routed_http";
         capabilities?: {
             preflight?: boolean;
@@ -155,7 +155,6 @@ export interface MartinAdapter {
         [key: string]: unknown;
     };
     execute(request: MartinAdapterRequest): Promise<MartinAdapterResult>;
-    withModel?(model: string): MartinAdapter;
 }
 export interface DistilledContext {
     focus: string;
@@ -193,7 +192,6 @@ export interface RunMartinInput {
     now?: () => string;
     idFactory?: (prefix: string) => string;
     maxRecentAttempts?: number;
-    fallbackModels?: string[];
     fallbackAdapters?: MartinAdapter[];
     receiptScope?: ReceiptScope;
     /** Optional persistence store. When provided, runMartin writes artifacts on each lifecycle event. */

package/dist/vendor/core/index.js

@@ -22,7 +22,7 @@ export { compileExecutionPolicy } from "./policy-compiler.js";
 export { assessTrajectory, decideCircuitBreak } from "./trajectory.js";
 export { calculateAvoidedUsd, calculateLoopAvoidedUsd } from "./savings.js";
 // ─── Routing economics ─────────────────────────────────────────────────────
-export { classifyRoute, evaluatePreworkBurnPolicy, resolveModelForTier, selectBestEngine } from "./routing.js";
+export { classifyRoute, evaluatePreworkBurnPolicy } from "./routing.js";
 // ─── Test Integrity Validation ──────────────────────────────────────────────
 export { validateTestIntegrity, snapshotTestFiles, identifyNewTests, findTestFiles, isTestFile, extractImports, hasTrivialAssertionsOnly, importsPreExistingCode } from "./test-integrity.js";
 // ─── Repo Style Analyzer ────────────────────────────────────────────────────
@@ -32,7 +32,7 @@ export { runContextIntegrityPrecheck } from "./context-integrity.js";
 // ─── Prompt packet compiler ──────────────────────────────────────────────────
 export { compilePromptPacket } from "./compiler.js";
 // ─── Verified Handoff builder ────────────────────────────────────────────────
-export { buildVerifiedHandoff, resolveVerifiedHandoffOutcome, toTestIntegrityVerdict, verifierActuallyPassed, } from "./verified-handoff.js";
+export { buildVerifiedHandoff, deriveVerifiedHandoffExecutionBoundary, resolveVerifiedHandoffOutcome, toTestIntegrityVerdict, verifierActuallyPassed, } from "./verified-handoff.js";
 // ─── Persistence (RunStore, LedgerEvent, FileRunStore) ──────────────────────
 export { createFileRunStore, makeLedgerEvent, readAllLoopRecords, readLatestLoopRecord, readLatestLoopRecordFromFile, readLoopRecordsFromFile, resolveRunsRoot, resolveReceiptIntegrityPath, verifyReceiptIntegrityFromFiles, writeReceiptIntegrityMaterial } from "./persistence/index.js";
 export { compileAndPersistContext } from "./persistence/index.js";
@@ -265,11 +265,6 @@ export async function runMartin(input) {
             }));
         }
     }
-    const DEFAULT_FALLBACK_MODELS = [
-        "claude-haiku-4-5",
-        "claude-sonnet-4-6",
-        "claude-opus-4-6"
-    ];
     const adapterChain = [input.adapter, ...(input.fallbackAdapters ?? [])];
     let currentAdapterIndex = 0;
     let currentAdapter = adapterChain[currentAdapterIndex] ?? input.adapter;
@@ -803,7 +798,7 @@ export async function runMartin(input) {
                 attemptId,
                 index: currentAttemptIndex,
                 adapterId: executingAdapter.adapterId,
-                model: executingAdapter.metadata.model,
+                ...(executingAdapter.metadata.model ? { model: executingAdapter.metadata.model } : {}),
                 startedAt: attemptStartedAt,
                 completedAt: attemptCompletedAt,
                 summary: result.summary,
@@ -864,13 +859,6 @@ export async function runMartin(input) {
                         adapterSwitched = true;
                     }
                 }
-                if (failure.recommendedIntervention === "change_model" && currentAdapter.withModel) {
-                    const fallbackModels = input.fallbackModels ?? DEFAULT_FALLBACK_MODELS;
-                    const nextModel = fallbackModels[loop.attempts.length % fallbackModels.length];
-                    if (nextModel) {
-                        currentAdapter = currentAdapter.withModel(nextModel);
-                    }
-                }
                 loop = appendLoopEvent(loop, {
                     type: "failure.classified",
                     lifecycleState: "running",
@@ -1138,12 +1126,17 @@ export async function runMartin(input) {
             // Uses the task's repoRoot to build/load the grounding index, then scans any diff
             let groundingScanResult;
             const patchDiff = buildPatchDiff(result, changedFiles);
-            if (patchDiff && input.task.repoRoot) {
+            const workspaceMutationCapable = executingAdapter.metadata.capabilities?.workspaceMutations !== false;
+            const hasReportedOrObservedChanges = changedFiles.length > 0 || (result.execution?.changedFiles?.length ?? 0) > 0;
+            const groundingEvidenceRequired = result.status === "completed" && workspaceMutationCapable && hasReportedOrObservedChanges;
+            let groundingEvidenceAvailable = !groundingEvidenceRequired;
+            if (groundingEvidenceRequired && patchDiff && input.task.repoRoot) {
                 try {
                     const groundingIndex = await loadOrBuildRepoGroundingIndex(input.task.repoRoot);
                     groundingScanResult = reconcileExistingGroundingFiles(scanPatchForGroundingViolations(patchDiff, groundingIndex, {
                         allowedPaths: input.task.allowedPaths
                     }), input.task.repoRoot, rollbackBoundary);
+                    groundingEvidenceAvailable = true;
                     if (input.store && groundingScanResult.violations.length > 0) {
                         await input.store.appendLedger(loop.loopId, makeLedgerEvent({
                             kind: "grounding.violations_found",
@@ -1159,10 +1152,22 @@ export async function runMartin(input) {
                     }
                 }
                 catch {
-                    // Grounding scan is best-effort — never fail the loop because of a scan error
+                    // Availability is persisted below so scanner failures and missing
+                    // grounding inputs follow the same recover-forward trust contract.
                 }
             }
-            const shouldEvaluatePatchTruth = result.status === "completed" && tracksWorkspaceMutations;
+            if (groundingEvidenceRequired && !groundingEvidenceAvailable) {
+                // The completed work remains useful, but unavailable grounding evidence
+                // cannot be converted into a zero-violation governance claim.
+                loop = {
+                    ...loop,
+                    metadata: {
+                        ...loop.metadata,
+                        groundingEvidenceStatus: "unavailable"
+                    }
+                };
+            }
+            const shouldEvaluatePatchTruth = result.status === "completed" && tracksWorkspaceMutations && groundingEvidenceAvailable;
             let patchDecision;
             if (shouldEvaluatePatchTruth) {
                 patchDecision = evaluatePatchDecision({
@@ -1548,7 +1553,8 @@ function getUsageProvenance(usage) {
 const COST_PROVENANCE_RANK = {
     unavailable: 0,
     estimated: 1,
-    actual: 2
+    calculated: 2,
+    actual: 3
 };
 /**
  * Aggregates cost provenance across attempts. The cumulative loop provenance

package/dist/vendor/core/persistence/runs-reader.d.ts

@@ -6,6 +6,7 @@
  * - legacy root JSONL files: <runsRoot>/*.jsonl
  * - canonical run trees: <runsRoot>/<loopId>/loop-record.json
  */
+import type { CostProvenance } from "../../contracts/index.js";
 export interface LoopAttemptRecord {
     index: number;
     model?: string;
@@ -32,6 +33,7 @@ export interface LoopRunRecord {
         tokensIn: number;
         tokensOut: number;
         avoidedUsd?: number;
+        provenance?: CostProvenance;
     };
     attempts: LoopAttemptRecord[];
     task: {

package/dist/vendor/core/policy.js

@@ -152,14 +152,14 @@ export function classifyFailure(input) {
             failureClass: "logic_error",
             rationale: "Oscillating failure pattern detected — switching strategy to break the cycle.",
             retryable: true,
-            recommendedIntervention: "change_model"
+            recommendedIntervention: "compress_context"
         };
     }
     return {
         failureClass: repeatedFailure ?? "logic_error",
         rationale: "The loop is still failing to produce a correct implementation.",
         retryable: true,
-        recommendedIntervention: repeatedFailure === "logic_error" ? "change_model" : "compress_context"
+        recommendedIntervention: "compress_context"
     };
 }
 export function evaluateCostGovernor(input) {
@@ -318,7 +318,7 @@ function mapClassHintToAssessment(classHint, attempts) {
                 failureClass: "hallucination",
                 rationale: "Structural evidence: suspiciously short or trivial agent response.",
                 retryable: true,
-                recommendedIntervention: repeatedFailure === "hallucination" ? "change_model" : "run_verifier"
+                recommendedIntervention: repeatedFailure === "hallucination" ? "compress_context" : "run_verifier"
             };
         case "verification_failure":
         case "test_regression":
@@ -333,7 +333,7 @@ function mapClassHintToAssessment(classHint, attempts) {
                 failureClass: classHint,
                 rationale: "Structural hint provided by adapter.",
                 retryable: true,
-                recommendedIntervention: repeatedFailure ? "change_model" : "compress_context"
+                recommendedIntervention: "compress_context"
             };
     }
 }
@@ -472,7 +472,7 @@ export function selectRecoveryRecipe(evidence) {
             return {
                 recipe: "strategy_swap",
                 rationale: "Very low diff novelty across repeated retries. Swap strategy.",
-                intervention: "change_model"
+                intervention: "compress_context"
             };
         }
         return {
@@ -485,7 +485,7 @@ export function selectRecoveryRecipe(evidence) {
         return {
             recipe: "downgrade_model",
             rationale: "Cost efficiency is degrading or retries are exhausted. Downgrade the model.",
-            intervention: "change_model"
+            intervention: "compress_context"
         };
     }
     return {