@martinloop/mcp 0.5.3 → 0.5.5

package/dist/tools/tool-support.js

@@ -21,9 +21,8 @@ export function resolveExecutionMode() {
 export function detectCliAvailability(command) {
     const cacheKey = `${process.platform}:${command}`;
     const cached = cliAvailabilityCache.get(cacheKey);
-    if (cached && cached.expiresAt > Date.now()) {
+    if (cached && cached.expiresAt > Date.now())
         return cached.value;
-    }
     const locator = process.platform === "win32" ? "path-scan(win32)" : "path-scan(posix)";
     const resolvedPath = findCommandOnPath(command);
     const value = resolvedPath
@@ -34,7 +33,7 @@ export function detectCliAvailability(command) {
             detail: isOnPathDirectly(command, resolvedPath)
                 ? `${command} is available on PATH.`
                 : `${command} found at ${resolvedPath} (not on PATH, auto-discovered).`,
-            ...(resolvedPath ? { resolvedPath } : {})
+            resolvedPath
         }
         : {
             command,
@@ -42,10 +41,7 @@ export function detectCliAvailability(command) {
             locator,
             detail: `${command} is not installed. ${suggestInstallCommand(command)}`
         };
-    cliAvailabilityCache.set(cacheKey, {
-        expiresAt: Date.now() + CLI_CACHE_TTL_MS,
-        value
-    });
+    cliAvailabilityCache.set(cacheKey, { expiresAt: Date.now() + CLI_CACHE_TTL_MS, value });
     return value;
 }
 function findCommandOnPath(command) {
@@ -53,80 +49,47 @@ function findCommandOnPath(command) {
     const rawPath = pathKey ? process.env[pathKey] : undefined;
     const hasExtension = /\.[A-Za-z0-9]+$/u.test(command);
     const candidateNames = process.platform === "win32" && !hasExtension
-        ? (process.env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD")
-            .split(";")
-            .map((extension) => extension.trim())
-            .filter(Boolean)
-            .map((extension) => `${command}${extension.toLowerCase()}`)
+        ? (process.env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").map((extension) => extension.trim()).filter(Boolean).map((extension) => `${command}${extension.toLowerCase()}`)
         : [command];
-    // 1. Search PATH entries
     if (rawPath) {
-        const pathEntries = rawPath
-            .split(process.platform === "win32" ? ";" : ":")
-            .map((entry) => entry.trim())
-            .filter(Boolean);
+        const pathEntries = rawPath.split(process.platform === "win32" ? ";" : ":").map((entry) => entry.trim()).filter(Boolean);
         for (const directory of pathEntries) {
             for (const candidateName of candidateNames) {
                 const candidatePath = join(directory, candidateName);
-                if (isExecutablePath(candidatePath)) {
+                if (isExecutablePath(candidatePath))
                     return candidatePath;
-                }
             }
         }
     }
-    // 2. Search common install locations when PATH didn't find it.
-    //    This catches CLIs installed via npm/brew/pip that aren't on the
-    //    current shell's PATH (common in IDEs, CI, and agent environments).
     for (const directory of discoverCommonInstallDirectories(command)) {
         for (const candidateName of candidateNames) {
             const candidatePath = join(directory, candidateName);
-            if (isExecutablePath(candidatePath)) {
+            if (isExecutablePath(candidatePath))
                 return candidatePath;
-            }
         }
     }
     return undefined;
 }
-/**
- * Returns directories where CLI tools are commonly installed but may not
- * be on PATH. Checked only as a fallback after PATH search fails.
- */
 function discoverCommonInstallDirectories(command) {
     const dirs = [];
     const home = process.env.HOME ?? process.env.USERPROFILE ?? "";
     if (process.platform === "win32") {
-        // npm global bin (Roaming)
         const appData = process.env.APPDATA;
-        if (appData) {
+        if (appData)
             dirs.push(join(appData, "npm"));
-        }
-        // Codex desktop install
         const localAppData = process.env.LOCALAPPDATA;
-        if (localAppData) {
+        if (localAppData)
             dirs.push(join(localAppData, "OpenAI", "Codex", "bin"));
-        }
-        // Scoop
-        if (home) {
+        if (home)
             dirs.push(join(home, "scoop", "shims"));
-        }
     }
     else {
-        // Common Unix install paths
         dirs.push("/usr/local/bin", "/opt/homebrew/bin");
-        if (home) {
-            dirs.push(join(home, ".local", "bin"), // pip, pipx
-            join(home, ".npm-global", "bin"), // npm prefix
-            join(home, ".bun", "bin"), // bun
-            join(home, ".cargo", "bin"), // cargo
-            join(home, "go", "bin") // go install
-            );
-        }
-        // nvm managed node
+        if (home)
+            dirs.push(join(home, ".local", "bin"), join(home, ".npm-global", "bin"), join(home, ".bun", "bin"), join(home, ".cargo", "bin"), join(home, "go", "bin"));
         const nvmDir = process.env.NVM_DIR;
-        if (nvmDir) {
-            const nvmBin = join(nvmDir, "current", "bin");
-            dirs.push(nvmBin);
-        }
+        if (nvmDir)
+            dirs.push(join(nvmDir, "current", "bin"));
     }
     return dirs.filter(Boolean);
 }
@@ -139,27 +102,15 @@ function isExecutablePath(candidatePath) {
         return false;
     }
 }
-/**
- * Returns true if the resolved path is inside a directory that's already
- * on PATH (i.e., it was found via normal PATH lookup, not auto-discovery).
- */
-function isOnPathDirectly(command, resolvedPath) {
+function isOnPathDirectly(_command, resolvedPath) {
     const pathKey = Object.keys(process.env).find((key) => key.toLowerCase() === "path");
     const rawPath = pathKey ? process.env[pathKey] : undefined;
     if (!rawPath)
         return false;
-    const pathEntries = rawPath
-        .split(process.platform === "win32" ? ";" : ":")
-        .map((entry) => entry.trim().replace(/[\\/]+$/u, ""))
-        .filter(Boolean);
-    const resolvedDir = resolvedPath
-        .replace(/[\\/][^\\/]+$/u, "")
-        .replace(/[\\/]+$/u, "");
+    const pathEntries = rawPath.split(process.platform === "win32" ? ";" : ":").map((entry) => entry.trim().replace(/[\\/]+$/u, "")).filter(Boolean);
+    const resolvedDir = resolvedPath.replace(/[\\/][^\\/]+$/u, "").replace(/[\\/]+$/u, "");
     return pathEntries.some((entry) => entry.toLowerCase() === resolvedDir.toLowerCase());
 }
-/**
- * Returns a platform-specific one-liner install command for a known CLI.
- */
 function suggestInstallCommand(command) {
     const npmInstalls = {
         claude: "npm install -g @anthropic-ai/claude-code",
@@ -167,21 +118,13 @@ function suggestInstallCommand(command) {
         gemini: "npm install -g @google/gemini-cli"
     };
     const install = npmInstalls[command];
-    if (install) {
-        return `Install with: ${install}`;
-    }
-    return `Install ${command} and ensure it is on PATH.`;
+    return install ? `Install with: ${install}` : `Install ${command} and ensure it is on PATH.`;
 }
 export function getEngineAvailability(engine) {
     return detectCliAvailability(engine);
 }
 export function createSkippedCliAvailability(command, detail = "Verification-only mode skipped live CLI availability detection; governed VERIFIED is unavailable.") {
-    return {
-        command,
-        available: false,
-        locator: "skipped",
-        detail
-    };
+    return { command, available: false, locator: "skipped", detail };
 }
 export function formatUsd(value) {
     return `$${value.toFixed(2)}`;
@@ -227,10 +170,7 @@ function buildRoutingEconomicsSummary(economics) {
         totalCostUsd: economics.totalCostUsd,
         ...(economics.timeToFirstDeltaMs !== undefined ? { timeToFirstDeltaMs: economics.timeToFirstDeltaMs } : {}),
         ...(economics.costPerAcceptedChange !== undefined ? { costPerAcceptedChange: economics.costPerAcceptedChange } : {}),
-        ...(economics.routeRecommendation ? {
-            routeRecommendation: economics.routeRecommendation,
-            routeRecommendationReason: economics.routeRecommendationReason
-        } : {})
+        ...(economics.routeRecommendation ? { routeRecommendation: economics.routeRecommendation, routeRecommendationReason: economics.routeRecommendationReason } : {})
     };
 }
 export function buildAttemptSummary(attempt, artifacts) {
@@ -256,12 +196,7 @@ export function buildArtifactSummary(loop) {
     return {
         totalCount: artifacts.length,
         kinds,
-        highlights: artifacts.slice(0, 5).map((artifact) => ({
-            artifactId: artifact.artifactId,
-            kind: artifact.kind,
-            label: artifact.label,
-            uri: artifact.uri
-        }))
+        highlights: artifacts.slice(0, 5).map((artifact) => ({ artifactId: artifact.artifactId, kind: artifact.kind, label: artifact.label, uri: artifact.uri }))
     };
 }
 export function buildVerificationSummary(loop, ledgerEvents = []) {
@@ -270,88 +205,43 @@ export function buildVerificationSummary(loop, ledgerEvents = []) {
     const warnings = [];
     const integrity = resolveReceiptIntegrity(loop);
     const ledgerWarnings = getLedgerWarnings(ledgerEvents);
-    if (integrity.state !== "verified") {
+    if (integrity.state !== "verified")
         warnings.push(`Receipt integrity is ${integrity.state}; persisted verifier evidence is not trustworthy yet.`);
-    }
     warnings.push(...ledgerWarnings);
-    if (verificationEvents.length === 0) {
-        warnings.push(verificationLedgerEvents.length > 0
-            ? "No verification.completed events were found in the loop record; using ledger evidence."
-            : "No verification.completed events were found in the loop record.");
-    }
-    if (verificationLedgerEvents.length === 0 && ledgerWarnings.length === 0) {
+    if (verificationEvents.length === 0)
+        warnings.push(verificationLedgerEvents.length > 0 ? "No verification.completed events were found in the loop record; using ledger evidence." : "No verification.completed events were found in the loop record.");
+    if (verificationLedgerEvents.length === 0 && ledgerWarnings.length === 0)
         warnings.push("No verification.completed ledger events were found for this run.");
-    }
     const selectedEvidence = selectLatestVerificationEvidence(loop, verificationEvents, verificationLedgerEvents);
     warnings.push(...selectedEvidence.warnings);
     const latestEvidence = selectedEvidence.evidence;
-    if (!latestEvidence) {
-        return {
-            status: "not_run",
-            eventCount: verificationEvents.length,
-            ledgerEventCount: verificationLedgerEvents.length,
-            warnings
-        };
-    }
-    const contradicted = latestEvidence.passed === true &&
-        warnings.some((warning) => warning.toLowerCase().includes("conflicts for the latest attempt"));
+    if (!latestEvidence)
+        return { status: "not_run", eventCount: verificationEvents.length, ledgerEventCount: verificationLedgerEvents.length, warnings };
+    const contradicted = latestEvidence.passed === true && warnings.some((warning) => warning.toLowerCase().includes("conflicts for the latest attempt"));
     return {
-        status: contradicted
-            ? "contradicted"
-            : latestEvidence.passed === true
-                ? "passed"
-                : latestEvidence.passed === false
-                    ? "failed"
-                    : "not_run",
+        status: contradicted ? "contradicted" : latestEvidence.passed === true ? "passed" : latestEvidence.passed === false ? "failed" : "not_run",
         eventCount: verificationEvents.length,
         ledgerEventCount: verificationLedgerEvents.length,
         ...(latestEvidence.attemptIndex !== undefined ? { latestAttemptIndex: latestEvidence.attemptIndex } : {}),
         ...(latestEvidence.timestamp ? { completedAt: latestEvidence.timestamp } : {}),
-        ...(typeof latestEvidence.summary === "string" && latestEvidence.summary.trim().length > 0
-            ? { summary: latestEvidence.summary.trim() }
-            : {}),
+        ...(typeof latestEvidence.summary === "string" && latestEvidence.summary.trim().length > 0 ? { summary: latestEvidence.summary.trim() } : {}),
         warnings
     };
 }
 export function resolveReceiptIntegrity(loop) {
-    return (loop.receiptIntegrity ?? {
-        state: "selector_noncanonical",
-        reason: "Receipt integrity metadata was not available on the loop record."
-    });
+    return loop.receiptIntegrity ?? { state: "selector_noncanonical", reason: "Receipt integrity metadata was not available on the loop record." };
 }
 export function buildEventSummaries(loop, limit = 5) {
-    return (loop.events ?? [])
-        .slice(-limit)
-        .reverse()
-        .map((event) => ({
-        type: event.type,
-        ...(event.timestamp ? { timestamp: event.timestamp } : {}),
-        ...(event.lifecycleState ? { lifecycleState: event.lifecycleState } : {}),
-        payload: event.payload ?? {}
-    }));
+    return (loop.events ?? []).slice(-limit).reverse().map((event) => ({ type: event.type, ...(event.timestamp ? { timestamp: event.timestamp } : {}), ...(event.lifecycleState ? { lifecycleState: event.lifecycleState } : {}), payload: event.payload ?? {} }));
 }
 export function buildLoopCollectionSummary(loops) {
-    const previews = loops
-        .map((loop) => buildLoopPreview(loop))
-        .sort((left, right) => {
-        const leftTime = toPreviewTimestamp(left);
-        const rightTime = toPreviewTimestamp(right);
-        return rightTime - leftTime;
-    });
-    const statusBreakdown = countBy(previews, "status");
-    const lifecycleBreakdown = countBy(previews, "lifecycleState");
-    return {
-        ...(previews[0] ? { latestRun: previews[0] } : {}),
-        recentRuns: previews.slice(0, 5),
-        statusBreakdown,
-        lifecycleBreakdown
-    };
+    const previews = loops.map((loop) => buildLoopPreview(loop)).sort((left, right) => toPreviewTimestamp(right) - toPreviewTimestamp(left));
+    return { ...(previews[0] ? { latestRun: previews[0] } : {}), recentRuns: previews.slice(0, 5), statusBreakdown: countBy(previews, "status"), lifecycleBreakdown: countBy(previews, "lifecycleState") };
 }
 export async function inspectRunsRoot(runsRoot = resolveRunsRoot(process.env)) {
     const cached = runStoreInspectionCache.get(runsRoot);
-    if (cached && cached.expiresAt > Date.now()) {
+    if (cached && cached.expiresAt > Date.now())
         return cached.value;
-    }
     let exists = false;
     try {
         exists = (await stat(runsRoot)).isDirectory();
@@ -371,20 +261,12 @@ export async function inspectRunsRoot(runsRoot = resolveRunsRoot(process.env)) {
         lifecycleBreakdown: summary.lifecycleBreakdown,
         warnings: inspected.warnings
     };
-    runStoreInspectionCache.set(runsRoot, {
-        expiresAt: Date.now() + RUN_STORE_CACHE_TTL_MS,
-        value
-    });
+    runStoreInspectionCache.set(runsRoot, { expiresAt: Date.now() + RUN_STORE_CACHE_TTL_MS, value });
     return value;
 }
 export function buildRunRecordPaths(runsRoot, loopId) {
     const runDirectory = join(runsRoot, loopId);
-    return {
-        runsRoot,
-        runDirectory,
-        loopRecordPath: join(runDirectory, "loop-record.json"),
-        ledgerPath: join(runDirectory, "ledger.jsonl")
-    };
+    return { runsRoot, runDirectory, loopRecordPath: join(runDirectory, "loop-record.json"), ledgerPath: join(runDirectory, "ledger.jsonl") };
 }
 export function buildAttemptArtifactDirectory(runsRoot, loopId, attemptIndex) {
     return join(runsRoot, loopId, "artifacts", `attempt-${String(attemptIndex).padStart(3, "0")}`);
@@ -393,18 +275,10 @@ export async function buildAttemptArtifactsReference(runsRoot, loopId, attemptIn
     const directory = buildAttemptArtifactDirectory(runsRoot, loopId, attemptIndex);
     try {
         const entries = await readdir(directory, { withFileTypes: true });
-        return {
-            directory,
-            available: true,
-            files: entries.filter((entry) => entry.isFile()).map((entry) => entry.name).sort()
-        };
+        return { directory, available: true, files: entries.filter((entry) => entry.isFile()).map((entry) => entry.name).sort() };
     }
     catch {
-        return {
-            directory,
-            available: false,
-            files: []
-        };
+        return { directory, available: false, files: [] };
     }
 }
 export function buildCostSnapshot(cost) {
@@ -417,62 +291,16 @@ export function buildCostSnapshot(cost) {
     };
 }
 export function buildBudgetSnapshot(budget) {
-    return {
-        maxUsd: budget.maxUsd,
-        softLimitUsd: budget.softLimitUsd,
-        maxIterations: budget.maxIterations,
-        maxTokens: budget.maxTokens
-    };
+    return { maxUsd: budget.maxUsd, softLimitUsd: budget.softLimitUsd, maxIterations: budget.maxIterations, maxTokens: budget.maxTokens };
 }
 export function buildSuggestedResourceUris(loopId) {
-    return [
-        "martin://server/health",
-        "martin://runs/recent",
-        "martin://runs/triage",
-        "martin://runs/latest",
-        "martin://runs/latest/summary",
-        "martin://runs/latest/proof-card",
-        "martin://runs/latest/budget-status",
-        "martin://runs/latest/verifier-evidence",
-        "martin://runs/latest/rollback-evidence",
-        "martin://policies/current",
-        "martin://repo/risk-map",
-        "martin://verifiers/results",
-        "martin://agent/next-step",
-        `martin://runs/${loopId}`,
-        `martin://runs/${loopId}/dossier`,
-        `martin://runs/${loopId}/verification`,
-        "martin://guides/mcp-usage",
-        "martin://guides/agent-start",
-        "martin://guides/publish-readiness"
-    ];
+    return ["martin://server/health", "martin://runs/recent", "martin://runs/triage", "martin://runs/latest", "martin://runs/latest/summary", "martin://runs/latest/proof-card", "martin://runs/latest/budget-status", "martin://runs/latest/verifier-evidence", "martin://runs/latest/rollback-evidence", "martin://policies/current", "martin://repo/risk-map", "martin://verifiers/results", "martin://agent/next-step", `martin://runs/${loopId}`, `martin://runs/${loopId}/dossier`, `martin://runs/${loopId}/verification`, "martin://guides/mcp-usage", "martin://guides/agent-start", "martin://guides/publish-readiness"];
 }
 export function buildSuggestedPromptNames() {
-    return [
-        "martin_start",
-        "martin_preflight",
-        "martin_triage",
-        "martin_resume",
-        "martin_prove",
-        "martin_release_check",
-        "martin_governed_coding_kickoff",
-        "martin_debug_failed_run",
-        "martin_publish_readiness_review",
-        "martin_triage_run_store",
-        "safe_bug_fix",
-        "write_tests_first",
-        "small_refactor",
-        "security_review",
-        "pr_review",
-        "release_check"
-    ];
+    return ["martin_start", "martin_preflight", "martin_triage", "martin_resume", "martin_prove", "martin_release_check", "martin_governed_coding_kickoff", "martin_debug_failed_run", "martin_publish_readiness_review", "martin_triage_run_store", "safe_bug_fix", "write_tests_first", "small_refactor", "security_review", "pr_review", "release_check"];
 }
 function countBy(values, key) {
-    return values.reduce((accumulator, value) => {
-        const bucket = String(value[key]);
-        accumulator[bucket] = (accumulator[bucket] ?? 0) + 1;
-        return accumulator;
-    }, {});
+    return values.reduce((accumulator, value) => { const bucket = String(value[key]); accumulator[bucket] = (accumulator[bucket] ?? 0) + 1; return accumulator; }, {});
 }
 function toPreviewTimestamp(loop) {
     const value = loop.updatedAt ?? loop.createdAt;
@@ -480,59 +308,33 @@ function toPreviewTimestamp(loop) {
 }
 function selectLatestVerificationEvidence(loop, verificationEvents, verificationLedgerEvents) {
     const warnings = [];
-    const futureEvidenceCount = [
-        ...verificationEvents.map((event) => event.timestamp),
-        ...verificationLedgerEvents.map((event) => event.timestamp)
-    ].filter(isFutureVerificationTimestamp).length;
-    if (futureEvidenceCount > 0) {
+    const futureEvidenceCount = [...verificationEvents.map((event) => event.timestamp), ...verificationLedgerEvents.map((event) => event.timestamp)].filter(isFutureVerificationTimestamp).length;
+    if (futureEvidenceCount > 0)
         warnings.push(`Ignored ${futureEvidenceCount} future-dated verification evidence item(s) that cannot be trusted yet.`);
-    }
-    const evidence = [
-        ...verificationEvents.map((event) => normalizeLoopVerificationEvidence(loop, event)),
-        ...verificationLedgerEvents.map((event) => normalizeLedgerVerificationEvidence(loop, event))
-    ].filter((candidate) => candidate !== undefined);
-    if (evidence.length === 0) {
+    const evidence = [...verificationEvents.map((event) => normalizeLoopVerificationEvidence(loop, event)), ...verificationLedgerEvents.map((event) => normalizeLedgerVerificationEvidence(loop, event))].filter((candidate) => candidate !== undefined);
+    if (evidence.length === 0)
         return { warnings };
-    }
     evidence.sort((left, right) => new Date(right.timestamp).getTime() - new Date(left.timestamp).getTime());
     const latest = evidence[0];
-    if (!latest) {
+    if (!latest)
         return { warnings };
-    }
-    const latestAttemptEvidence = evidence.filter((candidate) => latest.attemptId
-        ? candidate.attemptId === latest.attemptId
-        : latest.attemptIndex !== undefined
-            ? candidate.attemptIndex === latest.attemptIndex
-            : false);
-    const distinctStatuses = new Set(latestAttemptEvidence
-        .map((candidate) => candidate.passed)
-        .filter((candidate) => typeof candidate === "boolean"));
+    const latestAttemptEvidence = evidence.filter((candidate) => latest.attemptId ? candidate.attemptId === latest.attemptId : latest.attemptIndex !== undefined ? candidate.attemptIndex === latest.attemptIndex : false);
+    const distinctStatuses = new Set(latestAttemptEvidence.map((candidate) => candidate.passed).filter((candidate) => typeof candidate === "boolean"));
     if (distinctStatuses.size > 1) {
         warnings.push("Verification evidence conflicts for the latest attempt; marking verification as contradicted.");
         return { warnings };
     }
-    return {
-        evidence: latest,
-        warnings
-    };
+    return { evidence: latest, warnings };
 }
 function normalizeLoopVerificationEvidence(loop, event) {
-    if (!isTrustedVerificationTimestamp(event.timestamp)) {
+    if (!isTrustedVerificationTimestamp(event.timestamp))
         return undefined;
-    }
     const payload = isRecord(event.payload) ? event.payload : undefined;
     const attemptId = typeof payload?.["attemptId"] === "string" ? payload["attemptId"] : undefined;
-    const attemptIndex = typeof payload?.["attemptIndex"] === "number" && Number.isInteger(payload["attemptIndex"])
-        ? payload["attemptIndex"]
-        : undefined;
-    const matchedAttempt = attemptId
-        ? loop.attempts.find((attempt) => attempt.attemptId === attemptId)
-        : attemptIndex !== undefined
-            ? loop.attempts.find((attempt) => attempt.index === attemptIndex)
-            : undefined;
-    if (!matchedAttempt) {
+    const attemptIndex = typeof payload?.["attemptIndex"] === "number" && Number.isInteger(payload["attemptIndex"]) ? payload["attemptIndex"] : undefined;
+    const matchedAttempt = attemptId ? loop.attempts.find((attempt) => attempt.attemptId === attemptId) : attemptIndex !== undefined ? loop.attempts.find((attempt) => attempt.index === attemptIndex) : undefined;
+    if (!matchedAttempt)
         return undefined;
-    }
     return {
         timestamp: event.timestamp,
         ...(matchedAttempt.attemptId ? { attemptId: matchedAttempt.attemptId } : {}),
@@ -542,20 +344,17 @@ function normalizeLoopVerificationEvidence(loop, event) {
     };
 }
 function normalizeLedgerVerificationEvidence(loop, event) {
-    if (!isTrustedVerificationTimestamp(event.timestamp)) {
+    if (!isTrustedVerificationTimestamp(event.timestamp))
         return undefined;
-    }
-    if (event.attemptIndex === undefined || !Number.isInteger(event.attemptIndex)) {
+    if (event.attemptIndex === undefined || !Number.isInteger(event.attemptIndex))
         return undefined;
-    }
     const payload = isRecord(event.payload) ? event.payload : undefined;
     const matchedAttempt = loop.attempts.find((attempt) => attempt.index === event.attemptIndex);
-    if (!matchedAttempt) {
+    if (!matchedAttempt)
         return undefined;
-    }
     return {
         timestamp: event.timestamp,
-        ...(matchedAttempt?.attemptId ? { attemptId: matchedAttempt.attemptId } : {}),
+        ...(matchedAttempt.attemptId ? { attemptId: matchedAttempt.attemptId } : {}),
         attemptIndex: event.attemptIndex,
         ...(typeof payload?.["passed"] === "boolean" ? { passed: payload["passed"] } : {}),
         ...(typeof payload?.["summary"] === "string" ? { summary: payload["summary"] } : {})
@@ -563,23 +362,15 @@ function normalizeLedgerVerificationEvidence(loop, event) {
 }
 function isTrustedVerificationTimestamp(value) {
     const timestamp = new Date(value).getTime();
-    if (!Number.isFinite(timestamp)) {
-        return false;
-    }
-    return timestamp <= Date.now() + 5 * 60_000;
+    return Number.isFinite(timestamp) && timestamp <= Date.now() + 5 * 60_000;
 }
 function isFutureVerificationTimestamp(value) {
     const timestamp = new Date(value).getTime();
-    if (!Number.isFinite(timestamp)) {
-        return false;
-    }
-    return timestamp > Date.now() + 5 * 60_000;
+    return Number.isFinite(timestamp) && timestamp > Date.now() + 5 * 60_000;
 }
 function getLedgerWarnings(ledgerEvents) {
     const diagnostics = ledgerEvents;
-    return Array.isArray(diagnostics.warnings)
-        ? diagnostics.warnings.filter((warning) => typeof warning === "string")
-        : [];
+    return Array.isArray(diagnostics.warnings) ? diagnostics.warnings.filter((warning) => typeof warning === "string") : [];
 }
 function isRecord(value) {
     return typeof value === "object" && value !== null;

package/dist/vendor/adapters/claude-cli.d.ts

@@ -12,6 +12,7 @@
  * MCP tools and integration tests use the same factories.
  */
 import type { MartinAdapter, MartinAdapterRequest } from "../core/index.js";
+import { type AgentExecutionIntent } from "../core/index.js";
 import { type SpawnLike } from "./cli-bridge.js";
 /**
  * Given a prompt string, returns the full argv array to pass to spawn().
@@ -33,6 +34,8 @@ export interface AgentCliAdapterOptions {
     workingDirectory?: string;
     /** Timeout for the agent subprocess in ms. Defaults to 300_000 (5 min). */
     timeoutMs?: number;
+    agentExecutionIntent?: AgentExecutionIntent;
+    providerExecutionTimeoutMs?: number;
     /** Timeout per verification command in ms. Defaults to 120_000 (2 min). */
     verifyTimeoutMs?: number;
     /** Human-readable label shown in loop records. */
@@ -60,6 +63,8 @@ export interface AgentCliAdapterOptions {
 export interface ClaudeCliAdapterOptions {
     workingDirectory?: string;
     timeoutMs?: number;
+    agentExecutionIntent?: AgentExecutionIntent;
+    providerExecutionTimeoutMs?: number;
     verifyTimeoutMs?: number;
     label?: string;
     /** Override the model passed via --model flag. */
@@ -73,6 +78,8 @@ export interface CodexCliAdapterOptions {
     command?: string;
     workingDirectory?: string;
     timeoutMs?: number;
+    agentExecutionIntent?: AgentExecutionIntent;
+    providerExecutionTimeoutMs?: number;
     verifyTimeoutMs?: number;
     label?: string;
     /** Override the model passed via --model flag. */
@@ -94,6 +101,8 @@ export interface CodexCliAdapterOptions {
 export interface GeminiCliAdapterOptions {
     workingDirectory?: string;
     timeoutMs?: number;
+    agentExecutionIntent?: AgentExecutionIntent;
+    providerExecutionTimeoutMs?: number;
     verifyTimeoutMs?: number;
     label?: string;
     /** Explicit model override passed via --model. Omitted to preserve Gemini Auto. */

package/dist/vendor/adapters/claude-cli.js

@@ -11,6 +11,7 @@
  *
  * MCP tools and integration tests use the same factories.
  */
+import { DEFAULT_AGENT_EXECUTION_INTENT, normalizeProviderExecutionTimeoutMs } from "../core/index.js";
 import { readGitChangedFiles, readGitExecutionArtifacts, resolveGitRepositoryRoot, runSubprocess, runVerification } from "./cli-bridge.js";
 import { buildCodexExecArgs } from "./codex-launcher.js";
 import { createAdapterCapabilities, normalizeStructuredErrors, normalizeUsage } from "./runtime-support.js";
@@ -518,7 +519,8 @@ function inferStructuralClassHint(agentOutput, verificationSummary, exitCode, ob
 // ---------------------------------------------------------------------------
 export function createAgentCliAdapter(options) {
     const workingDirectory = options.workingDirectory ?? process.cwd();
-    const timeoutMs = options.timeoutMs ?? 300_000;
+    const agentExecutionIntent = options.agentExecutionIntent ?? DEFAULT_AGENT_EXECUTION_INTENT;
+    const timeoutMs = normalizeProviderExecutionTimeoutMs(options.providerExecutionTimeoutMs ?? options.timeoutMs);
     const verifyTimeoutMs = options.verifyTimeoutMs ?? 120_000;
     const adapterId = `agent-cli:${options.adapterIdSuffix ?? options.command}`;
     const supportsJsonOutput = options.supportsJsonOutput === true;
@@ -531,6 +533,8 @@ export function createAgentCliAdapter(options) {
             providerId: options.command,
             ...(options.model ? { model: options.model } : {}),
             transport: "cli",
+            agentExecutionIntent,
+            providerExecutionTimeoutMs: timeoutMs,
             capabilities: createAdapterCapabilities({
                 preflight: true,
                 usageSettlement: supportsUsageSettlement,
@@ -571,6 +575,7 @@ export function createAgentCliAdapter(options) {
             }
             const args = options.argsBuilder(prompt, request);
             const stdinData = options.stdinBuilder?.(prompt);
+            const executionTimeoutMs = normalizeProviderExecutionTimeoutMs(request.context.providerExecutionTimeoutMs ?? timeoutMs);
             // Live cumulative-cost circuit breaker: a single attempt should never be
             // allowed to spend more than the loop has left. `--output-format json`
             // only reports usage once the process exits, so for `stream-json` we
@@ -582,7 +587,7 @@ export function createAgentCliAdapter(options) {
                 : undefined;
             const agentResult = await runSubprocess(options.command, args, {
                 cwd: workingDirectory,
-                timeoutMs,
+                timeoutMs: executionTimeoutMs,
                 spawnImpl: options.spawnImpl,
                 ...(stdinData === undefined ? {} : { stdinData }),
                 ...(streamingUsage ? { onStdoutChunk: streamingUsage.onChunk } : {}),
@@ -901,6 +906,8 @@ export function createClaudeCliAdapter(options = {}) {
         label: options.label ?? "Claude CLI adapter",
         workingDirectory: options.workingDirectory,
         timeoutMs: options.timeoutMs,
+        agentExecutionIntent: options.agentExecutionIntent,
+        providerExecutionTimeoutMs: options.providerExecutionTimeoutMs,
         verifyTimeoutMs: options.verifyTimeoutMs,
         supportsJsonOutput: true,
         streamingUsageCap: true,
@@ -952,6 +959,8 @@ export function createCodexCliAdapter(options = {}) {
         label: options.label ?? "Codex CLI adapter",
         workingDirectory,
         timeoutMs: options.timeoutMs,
+        agentExecutionIntent: options.agentExecutionIntent,
+        providerExecutionTimeoutMs: options.providerExecutionTimeoutMs,
         verifyTimeoutMs: options.verifyTimeoutMs,
         supportsJsonOutput: false,
         spawnImpl: options.spawnImpl,
@@ -979,7 +988,13 @@ export function createCodexCliAdapter(options = {}) {
  */
 export function createGeminiCliAdapter(options = {}) {
     const approvalMode = options.approvalMode ?? "yolo";
+    if (approvalMode !== "yolo") {
+        throw new Error("governed-autonomous Gemini execution requires yolo approval mode; interactive downgrade rejected.");
+    }
     const extraArgs = options.extraArgs ?? [];
+    if (extraArgs.some((arg) => arg === "--approval-mode" || arg.startsWith("--approval-mode="))) {
+        throw new Error("Gemini approval mode cannot be overridden through extraArgs.");
+    }
     return createAgentCliAdapter({
         command: "gemini",
         adapterIdSuffix: "gemini",
@@ -987,6 +1002,8 @@ export function createGeminiCliAdapter(options = {}) {
         label: options.label ?? "Gemini CLI adapter",
         workingDirectory: options.workingDirectory,
         timeoutMs: options.timeoutMs,
+        agentExecutionIntent: options.agentExecutionIntent,
+        providerExecutionTimeoutMs: options.providerExecutionTimeoutMs,
         verifyTimeoutMs: options.verifyTimeoutMs,
         supportsJsonOutput: false,
         spawnImpl: options.spawnImpl,