@martinloop/mcp 0.5.3 → 0.5.6

package/dist/resources.js

@@ -760,173 +760,173 @@ function inferAgentNextStep(loop, verification) {
 }
 function buildMcpUsageGuide(runsRoot) {
     const metadata = buildMartinDiscoveryMetadata(MARTIN_MCP_PACKAGE_VERSION);
-    return `# Martin Loop MCP Usage
-
-Discovery revision: \`${metadata.discoveryRevision}\`
-Server version: \`${metadata.serverVersion}\`
-Runs root: \`${runsRoot}\`
-
-Martin Loop exposes governed coding workflows over MCP. Use the server health and run-store views to decide when to preflight, execute, inspect, or escalate.
-
-## Recommended Flow
-
-1. Read \`${MARTIN_STATIC_RESOURCE_URIS.serverHealth}\` or call \`martin_doctor\` to confirm the environment and run-store visibility.
-2. Use the \`martin_governed_coding_kickoff\` prompt to frame a governed coding request.
-3. Call \`martin_preflight\` before \`martin_run\` when the task or safety envelope is non-trivial.
-4. After execution, inspect \`${MARTIN_STATIC_RESOURCE_URIS.recentRuns}\`, \`martin://runs/{loopId}\`, and \`martin://runs/{loopId}/verification\`.
-5. For low-context agents, read \`${MARTIN_STATIC_RESOURCE_URIS.agentNextStep}\`, \`${MARTIN_STATIC_RESOURCE_URIS.latestSummary}\`, or \`${MARTIN_STATIC_RESOURCE_URIS.latestProofCard}\` before asking for full JSON.
-6. Read \`${MARTIN_STATIC_RESOURCE_URIS.triage}\` or call \`martin_triage_runs\` to prioritize which run needs attention first.
-7. Use \`martin_debug_failed_run\` when a loop exits failed, budget-bound, or escalated.
-
-## Current Martin MCP Surface
-
-- Tools: \`martin_run\`, \`martin_inspect\`, \`martin_status\`, \`martin_doctor\`, \`martin_preflight\`, \`martin_list_runs\`, \`martin_triage_runs\`, \`martin_get_run\`, \`martin_get_attempt\`, \`martin_get_verification_results\`, \`martin_run_dossier\`
-- Static resources: \`${MARTIN_STATIC_RESOURCE_URIS.serverHealth}\`, \`${MARTIN_STATIC_RESOURCE_URIS.recentRuns}\`, \`${MARTIN_STATIC_RESOURCE_URIS.triage}\`, \`${MARTIN_STATIC_RESOURCE_URIS.latestSummary}\`, \`${MARTIN_STATIC_RESOURCE_URIS.latestProofCard}\`, \`${MARTIN_STATIC_RESOURCE_URIS.latestBudgetStatus}\`, \`${MARTIN_STATIC_RESOURCE_URIS.latestVerifierEvidence}\`, \`${MARTIN_STATIC_RESOURCE_URIS.latestRollbackEvidence}\`, \`${MARTIN_STATIC_RESOURCE_URIS.agentNextStep}\`, \`${MARTIN_STATIC_RESOURCE_URIS.governanceStatus}\`, \`${MARTIN_STATIC_RESOURCE_URIS.modeStatus}\`, \`${MARTIN_STATIC_RESOURCE_URIS.memorySummary}\`, \`${MARTIN_STATIC_RESOURCE_URIS.mcpUsageGuide}\`, \`${MARTIN_STATIC_RESOURCE_URIS.agentStartGuide}\`, \`${MARTIN_STATIC_RESOURCE_URIS.publishReadinessGuide}\`
-- Resource templates: \`martin://runs/{loopId}\`, \`martin://runs/{loopId}/attempts/{attemptIndex}\`, \`martin://runs/{loopId}/verification\`
-- Prompts: \`martin_start\`, \`martin_preflight\`, \`martin_triage\`, \`martin_resume\`, \`martin_prove\`, \`martin_release_check\`, \`martin_governed_coding_kickoff\`, \`martin_debug_failed_run\`, \`martin_publish_readiness_review\`, \`martin_triage_run_store\`
-
-## Notes
-
-- Discovery helpers read the existing Martin run-store; they do not create new schema.
-- Verification history is derived from persisted \`verification.completed\` evidence in loop records and ledgers.
-- Attempt inspection stays aligned with the same loop selectors used by \`martin_status\` and \`martin_inspect\`.
+    return `# Martin Loop MCP Usage
+
+Discovery revision: \`${metadata.discoveryRevision}\`
+Server version: \`${metadata.serverVersion}\`
+Runs root: \`${runsRoot}\`
+
+Martin Loop exposes governed coding workflows over MCP. Use the server health and run-store views to decide when to preflight, execute, inspect, or escalate.
+
+## Recommended Flow
+
+1. Read \`${MARTIN_STATIC_RESOURCE_URIS.serverHealth}\` or call \`martin_doctor\` to confirm the environment and run-store visibility.
+2. Use the \`martin_governed_coding_kickoff\` prompt to frame a governed coding request.
+3. Call \`martin_preflight\` before \`martin_run\` when the task or safety envelope is non-trivial.
+4. After execution, inspect \`${MARTIN_STATIC_RESOURCE_URIS.recentRuns}\`, \`martin://runs/{loopId}\`, and \`martin://runs/{loopId}/verification\`.
+5. For low-context agents, read \`${MARTIN_STATIC_RESOURCE_URIS.agentNextStep}\`, \`${MARTIN_STATIC_RESOURCE_URIS.latestSummary}\`, or \`${MARTIN_STATIC_RESOURCE_URIS.latestProofCard}\` before asking for full JSON.
+6. Read \`${MARTIN_STATIC_RESOURCE_URIS.triage}\` or call \`martin_triage_runs\` to prioritize which run needs attention first.
+7. Use \`martin_debug_failed_run\` when a loop exits failed, budget-bound, or escalated.
+
+## Current Martin MCP Surface
+
+- Tools: \`martin_run\`, \`martin_inspect\`, \`martin_status\`, \`martin_doctor\`, \`martin_preflight\`, \`martin_list_runs\`, \`martin_triage_runs\`, \`martin_get_run\`, \`martin_get_attempt\`, \`martin_get_verification_results\`, \`martin_run_dossier\`
+- Static resources: \`${MARTIN_STATIC_RESOURCE_URIS.serverHealth}\`, \`${MARTIN_STATIC_RESOURCE_URIS.recentRuns}\`, \`${MARTIN_STATIC_RESOURCE_URIS.triage}\`, \`${MARTIN_STATIC_RESOURCE_URIS.latestSummary}\`, \`${MARTIN_STATIC_RESOURCE_URIS.latestProofCard}\`, \`${MARTIN_STATIC_RESOURCE_URIS.latestBudgetStatus}\`, \`${MARTIN_STATIC_RESOURCE_URIS.latestVerifierEvidence}\`, \`${MARTIN_STATIC_RESOURCE_URIS.latestRollbackEvidence}\`, \`${MARTIN_STATIC_RESOURCE_URIS.agentNextStep}\`, \`${MARTIN_STATIC_RESOURCE_URIS.governanceStatus}\`, \`${MARTIN_STATIC_RESOURCE_URIS.modeStatus}\`, \`${MARTIN_STATIC_RESOURCE_URIS.memorySummary}\`, \`${MARTIN_STATIC_RESOURCE_URIS.mcpUsageGuide}\`, \`${MARTIN_STATIC_RESOURCE_URIS.agentStartGuide}\`, \`${MARTIN_STATIC_RESOURCE_URIS.publishReadinessGuide}\`
+- Resource templates: \`martin://runs/{loopId}\`, \`martin://runs/{loopId}/attempts/{attemptIndex}\`, \`martin://runs/{loopId}/verification\`
+- Prompts: \`martin_start\`, \`martin_preflight\`, \`martin_triage\`, \`martin_resume\`, \`martin_prove\`, \`martin_release_check\`, \`martin_governed_coding_kickoff\`, \`martin_debug_failed_run\`, \`martin_publish_readiness_review\`, \`martin_triage_run_store\`
+
+## Notes
+
+- Discovery helpers read the existing Martin run-store; they do not create new schema.
+- Verification history is derived from persisted \`verification.completed\` evidence in loop records and ledgers.
+- Attempt inspection stays aligned with the same loop selectors used by \`martin_status\` and \`martin_inspect\`.
 `;
 }
 function buildAgentStartGuide(runsRoot) {
     const metadata = buildMartinDiscoveryMetadata(MARTIN_MCP_PACKAGE_VERSION);
-    return `# Agent Start Here
-
-Discovery revision: \`${metadata.discoveryRevision}\`
-Server version: \`${metadata.serverVersion}\`
-Runs root: \`${runsRoot}\`
-
-Use Martin Loop as the local governor before you spend agent tokens or retry a failed coding loop.
-
-## Cheap Default Flow
-
-1. Read \`${MARTIN_STATIC_RESOURCE_URIS.agentNextStep}\` first. It is the smallest "what should I do now?" payload.
-2. If no runs exist, call \`martin_doctor\`, then \`martin_preflight\`.
-3. If a run exists, read \`${MARTIN_STATIC_RESOURCE_URIS.latestSummary}\` before reading full run JSON.
-4. If the verifier failed, use prompt \`martin_debug_failed_run\` or \`martin_triage\`.
-5. If you need a shareable receipt, read \`${MARTIN_STATIC_RESOURCE_URIS.latestProofCard}\`.
-
-## Install Profiles
-
-- \`minimal\` (default): doctor, preflight, list, triage, dossier. Good for low tool bloat.
-- \`diagnostic\`: read-only inspection tools for debugging without execution.
-- \`full-local\`: all local tools, including \`martin_run\`.
-- \`github-review\`: review-oriented local profile for PR drafting and reviewer evidence.
-- \`starter\` and \`full\`: compatibility aliases.
-
-## Copy-Paste Agent Rule
-
-Before running or retrying an autonomous coding task, call Martin. Prefer compact resources first, then full dossiers only when the compact receipt says more evidence is needed. Never claim success unless Martin shows verifier-backed completion or a clear blocked reason.
+    return `# Agent Start Here
+
+Discovery revision: \`${metadata.discoveryRevision}\`
+Server version: \`${metadata.serverVersion}\`
+Runs root: \`${runsRoot}\`
+
+Use Martin Loop as the local governor before you spend agent tokens or retry a failed coding loop.
+
+## Cheap Default Flow
+
+1. Read \`${MARTIN_STATIC_RESOURCE_URIS.agentNextStep}\` first. It is the smallest "what should I do now?" payload.
+2. If no runs exist, call \`martin_doctor\`, then \`martin_preflight\`.
+3. If a run exists, read \`${MARTIN_STATIC_RESOURCE_URIS.latestSummary}\` before reading full run JSON.
+4. If the verifier failed, use prompt \`martin_debug_failed_run\` or \`martin_triage\`.
+5. If you need a shareable receipt, read \`${MARTIN_STATIC_RESOURCE_URIS.latestProofCard}\`.
+
+## Install Profiles
+
+- \`minimal\` (default): doctor, preflight, list, triage, dossier. Good for low tool bloat.
+- \`diagnostic\`: read-only inspection tools for debugging without execution.
+- \`full-local\`: all local tools, including \`martin_run\`.
+- \`github-review\`: review-oriented local profile for PR drafting and reviewer evidence.
+- \`starter\` and \`full\`: compatibility aliases.
+
+## Copy-Paste Agent Rule
+
+Before running or retrying an autonomous coding task, call Martin. Prefer compact resources first, then full dossiers only when the compact receipt says more evidence is needed. Never claim success unless Martin shows verifier-backed completion or a clear blocked reason.
 `;
 }
 function buildCommandMapGuide(runsRoot) {
     const metadata = buildMartinDiscoveryMetadata(MARTIN_MCP_PACKAGE_VERSION);
-    return `# Martin Command Map
-
-Discovery revision: \`${metadata.discoveryRevision}\`
-Server version: \`${metadata.serverVersion}\`
-Runs root: \`${runsRoot}\`
-
-Use this guide when an IDE or agent needs to know which Martin surface to call next.
-
-## Default Governed Sequence
-
-1. \`martin_doctor\` — confirm environment and visibility.
-2. \`martin_plan\` — propose the bounded approach without spending a run.
-3. \`martin_preflight\` — turn the plan into an explicit contract.
-4. \`martin_run\` — execute only after the contract is safe.
-5. \`martin_dossier\` — inspect what happened and what Martin prevented.
-6. \`martin_eval\` — convert the result into review posture when needed.
-
-## When To Use Which Surface
-
-- Need the smallest next action: \`${MARTIN_STATIC_RESOURCE_URIS.agentNextStep}\`
-- Need a quick receipt: \`${MARTIN_STATIC_RESOURCE_URIS.latestSummary}\`
-- Need a shareable proof object: \`${MARTIN_STATIC_RESOURCE_URIS.latestProofCard}\`
-- Need a full run review: \`martin_dossier\`
-- Need to decide whether to retry: \`martin_triage_runs\`
-- Need IDE setup guidance: \`${MARTIN_STATIC_RESOURCE_URIS.ideOnboardingGuide}\`
+    return `# Martin Command Map
+
+Discovery revision: \`${metadata.discoveryRevision}\`
+Server version: \`${metadata.serverVersion}\`
+Runs root: \`${runsRoot}\`
+
+Use this guide when an IDE or agent needs to know which Martin surface to call next.
+
+## Default Governed Sequence
+
+1. \`martin_doctor\` — confirm environment and visibility.
+2. \`martin_plan\` — propose the bounded approach without spending a run.
+3. \`martin_preflight\` — turn the plan into an explicit contract.
+4. \`martin_run\` — execute only after the contract is safe.
+5. \`martin_dossier\` — inspect what happened and what Martin prevented.
+6. \`martin_eval\` — convert the result into review posture when needed.
+
+## When To Use Which Surface
+
+- Need the smallest next action: \`${MARTIN_STATIC_RESOURCE_URIS.agentNextStep}\`
+- Need a quick receipt: \`${MARTIN_STATIC_RESOURCE_URIS.latestSummary}\`
+- Need a shareable proof object: \`${MARTIN_STATIC_RESOURCE_URIS.latestProofCard}\`
+- Need a full run review: \`martin_dossier\`
+- Need to decide whether to retry: \`martin_triage_runs\`
+- Need IDE setup guidance: \`${MARTIN_STATIC_RESOURCE_URIS.ideOnboardingGuide}\`
 `;
 }
 function buildIdeOnboardingGuide(runsRoot) {
     const metadata = buildMartinDiscoveryMetadata(MARTIN_MCP_PACKAGE_VERSION);
-    return `# Martin IDE Onboarding
-
-Discovery revision: \`${metadata.discoveryRevision}\`
-Server version: \`${metadata.serverVersion}\`
-Runs root: \`${runsRoot}\`
-
-Use this guide after the MCP server is installed so the host naturally uses MartinLoop during real work.
-
-## IDE Default Flow
-
-1. Read \`${MARTIN_STATIC_RESOURCE_URIS.agentStartGuide}\`
-2. Read \`${MARTIN_STATIC_RESOURCE_URIS.operatingRulesGuide}\`
-3. Use prompt \`martin_start\` or \`martin_governed_coding_kickoff\`
-4. Call \`martin_doctor\`
-5. Call \`martin_plan\`
-6. Call \`martin_preflight\`
-7. Only then call \`martin_run\`
-
-## Goal
-
-MartinLoop should become the normal path for coding work in the host, not a manual extra step the human has to remember.
+    return `# Martin IDE Onboarding
+
+Discovery revision: \`${metadata.discoveryRevision}\`
+Server version: \`${metadata.serverVersion}\`
+Runs root: \`${runsRoot}\`
+
+Use this guide after the MCP server is installed so the host naturally uses MartinLoop during real work.
+
+## IDE Default Flow
+
+1. Read \`${MARTIN_STATIC_RESOURCE_URIS.agentStartGuide}\`
+2. Read \`${MARTIN_STATIC_RESOURCE_URIS.operatingRulesGuide}\`
+3. Use prompt \`martin_start\` or \`martin_governed_coding_kickoff\`
+4. Call \`martin_doctor\`
+5. Call \`martin_plan\`
+6. Call \`martin_preflight\`
+7. Only then call \`martin_run\`
+
+## Goal
+
+MartinLoop should become the normal path for coding work in the host, not a manual extra step the human has to remember.
 `;
 }
 function buildOperatingRulesGuide(runsRoot) {
     const metadata = buildMartinDiscoveryMetadata(MARTIN_MCP_PACKAGE_VERSION);
-    return `# Martin Operating Rules
-
-Discovery revision: \`${metadata.discoveryRevision}\`
-Server version: \`${metadata.serverVersion}\`
-Runs root: \`${runsRoot}\`
-
-Use these rules inside the IDE or MCP host as the default MartinLoop operating posture.
-
-## Required Sequence Before Real Work
-
-1. \`martin_doctor\`
-2. \`martin_plan\`
-3. \`martin_preflight\`
-4. \`martin_run\`
-5. \`martin_dossier\`
-
-## Enforcement Rule
-
-Do not execute real coding work through MartinLoop until doctor and preflight have both been used for the current task.
-
-## Completion Rule
-
-Do not claim success until MartinLoop shows verifier-backed completion or an explicit blocked reason backed by evidence.
+    return `# Martin Operating Rules
+
+Discovery revision: \`${metadata.discoveryRevision}\`
+Server version: \`${metadata.serverVersion}\`
+Runs root: \`${runsRoot}\`
+
+Use these rules inside the IDE or MCP host as the default MartinLoop operating posture.
+
+## Required Sequence Before Real Work
+
+1. \`martin_doctor\`
+2. \`martin_plan\`
+3. \`martin_preflight\`
+4. \`martin_run\`
+5. \`martin_dossier\`
+
+## Enforcement Rule
+
+Do not execute real coding work through MartinLoop until doctor and preflight have both been used for the current task.
+
+## Completion Rule
+
+Do not claim success until MartinLoop shows verifier-backed completion or an explicit blocked reason backed by evidence.
 `;
 }
 function buildPublishReadinessGuide(runsRoot) {
     const metadata = buildMartinDiscoveryMetadata(MARTIN_MCP_PACKAGE_VERSION);
-    return `# Martin MCP Publish Readiness
-
-Discovery revision: \`${metadata.discoveryRevision}\`
-Server version: \`${metadata.serverVersion}\`
-Runs root: \`${runsRoot}\`
-
-Use this guide when reviewing whether the public MCP package is ready to publish, promote, or hand off for registry submission.
-
-## Review Areas
-
-1. Environment health: confirm \`${MARTIN_STATIC_RESOURCE_URIS.serverHealth}\` shows a sane working directory, runs root, and engine availability for the target mode.
-2. Discovery surface: verify tools, prompts, static resources, and resource templates are all discoverable and named consistently.
-3. Run evidence: inspect \`${MARTIN_STATIC_RESOURCE_URIS.recentRuns}\` and, when relevant, \`martin://runs/{loopId}/verification\` to confirm verification outcomes are explainable from persisted data.
-4. Packaging lane: run the MCP package test, build, and smoke-pack commands before calling the package publish-ready.
-5. Findings-first reporting: call out missing schema, integration gaps, triage-critical runs, and verification blockers before summarizing strengths.
-
-## Evidence Expectations
-
-- Prefer concrete run IDs, attempt indices, and verification summaries over vague statements.
-- Distinguish local package validation from live registry readiness.
-- If a discovery helper exists but is not yet wired into the server, report that as an integration gap instead of treating the capability as fully shipped.
+    return `# Martin MCP Publish Readiness
+
+Discovery revision: \`${metadata.discoveryRevision}\`
+Server version: \`${metadata.serverVersion}\`
+Runs root: \`${runsRoot}\`
+
+Use this guide when reviewing whether the public MCP package is ready to publish, promote, or hand off for registry submission.
+
+## Review Areas
+
+1. Environment health: confirm \`${MARTIN_STATIC_RESOURCE_URIS.serverHealth}\` shows a sane working directory, runs root, and engine availability for the target mode.
+2. Discovery surface: verify tools, prompts, static resources, and resource templates are all discoverable and named consistently.
+3. Run evidence: inspect \`${MARTIN_STATIC_RESOURCE_URIS.recentRuns}\` and, when relevant, \`martin://runs/{loopId}/verification\` to confirm verification outcomes are explainable from persisted data.
+4. Packaging lane: run the MCP package test, build, and smoke-pack commands before calling the package publish-ready.
+5. Findings-first reporting: call out missing schema, integration gaps, triage-critical runs, and verification blockers before summarizing strengths.
+
+## Evidence Expectations
+
+- Prefer concrete run IDs, attempt indices, and verification summaries over vague statements.
+- Distinguish local package validation from live registry readiness.
+- If a discovery helper exists but is not yet wired into the server, report that as an integration gap instead of treating the capability as fully shipped.
 `;
 }
 function withDiscoveryMetadata(value, runsRoot) {

package/dist/server-validation.js

@@ -151,6 +151,7 @@ function validateRunInput(args) {
         "maxIterations",
         "maxTokens",
         "verifyTimeoutMs",
+        "providerExecutionTimeoutMs",
         "maxMinutes",
         "maxFilesChanged",
         "maxCommands",
@@ -180,6 +181,7 @@ function validateRunInput(args) {
         ...optionalPositiveInteger(record.maxIterations, "maxIterations"),
         ...optionalPositiveInteger(record.maxTokens, "maxTokens"),
         ...optionalPositiveInteger(record.verifyTimeoutMs, "verifyTimeoutMs"),
+        ...optionalPositiveInteger(record.providerExecutionTimeoutMs, "providerExecutionTimeoutMs"),
         ...optionalPositiveInteger(record.maxMinutes, "maxMinutes"),
         ...optionalPositiveInteger(record.maxFilesChanged, "maxFilesChanged"),
         ...optionalPositiveInteger(record.maxCommands, "maxCommands"),

package/dist/server.js

@@ -26,6 +26,9 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
 import { CallToolRequestSchema, GetPromptRequestSchema, ListPromptsRequestSchema, ListResourcesRequestSchema, ListResourceTemplatesRequestSchema, ListToolsRequestSchema, ReadResourceRequestSchema } from "@modelcontextprotocol/sdk/types.js";
 import { MARTIN_MCP_PACKAGE_VERSION } from "./package-version.js";
+import { MARTIN_ARCADE_FALLBACK_TEXT, MARTIN_ARCADE_MIME_TYPE, MARTIN_ARCADE_RESOURCE_URI, MARTIN_ARCADE_UI_EXTENSION_ID, buildArcadeToolDefinitions, supportsMartinArcadeApp } from "./arcade/capabilities.js";
+import { listArcadeResources, readArcadeResource } from "./arcade/resource.js";
+import { readArcadeStatus } from "./arcade/status.js";
 import { getMartinPrompt, listMartinPrompts } from "./prompts.js";
 import { listMartinResources, listMartinResourceTemplates, readMartinResource } from "./resources.js";
 import { martinDoctorTool } from "./tools/doctor.js";
@@ -47,6 +50,7 @@ import { runLoopTool } from "./tools/run-loop.js";
 import { MARTIN_ENGINE_VALUES } from "./tools/tool-support.js";
 import { classifyRoute } from "./vendor/core/index.js";
 import { createToolErrorResult, createToolSuccessResult } from "./tools/tool-response.js";
+import { buildGovernedPlanStages, renderGovernedRunPlanMarkdown, renderVerifiedHandoffMarkdown } from "./vendor/presentation/index.js";
 import { MartinToolError, toToolFailure } from "./tools/tool-errors.js";
 import { normalizeLoopBudget } from "./tools/workflow-governance.js";
 import { resolveSafeRepoRoot, sanitizeToolErrorMessage, validateToolInput } from "./server-validation.js";
@@ -55,15 +59,6 @@ const stringArraySchema = {
     type: "array",
     items: { type: "string" }
 };
-function describeCostProvenance(provenance) {
-    if (provenance === "actual")
-        return "provider-settled actual";
-    if (provenance === "calculated")
-        return "calculated from observed usage";
-    if (provenance === "estimated")
-        return "estimated";
-    return "unavailable";
-}
 const loopPreviewSchema = {
     type: "object",
     additionalProperties: true,
@@ -77,10 +72,6 @@ const loopPreviewSchema = {
         updatedAt: { type: "string" },
         attempts: { type: "integer" },
         costUsd: { type: "number" },
-        costProvenance: {
-            type: "string",
-            enum: ["actual", "calculated", "estimated", "unavailable"]
-        },
         avoidedUsd: { type: "number" },
         pressure: { type: "string" },
         shouldStop: { type: "boolean" },
@@ -100,7 +91,6 @@ const loopPreviewSchema = {
         "lifecycleState",
         "attempts",
         "costUsd",
-        "costProvenance",
         "avoidedUsd",
         "pressure",
         "shouldStop",
@@ -266,10 +256,6 @@ const runOutputSchema = {
         reason: { type: "string" },
         attempts: { type: "integer" },
         costUsd: { type: "number" },
-        costProvenance: {
-            type: "string",
-            enum: ["actual", "calculated", "estimated", "unavailable"]
-        },
         verificationPassed: { type: "boolean" },
         loopId: { type: "string" },
         pressure: { type: "string" },
@@ -301,7 +287,6 @@ const runOutputSchema = {
         "reason",
         "attempts",
         "costUsd",
-        "costProvenance",
         "verificationPassed",
         "loopId",
         "pressure",
@@ -369,10 +354,6 @@ const statusOutputSchema = {
         lifecycleState: { type: "string" },
         attempts: { type: "integer" },
         costUsd: { type: "number" },
-        costProvenance: {
-            type: "string",
-            enum: ["actual", "calculated", "estimated", "unavailable"]
-        },
         avoidedUsd: { type: "number" },
         pressure: { type: "string" },
         shouldStop: { type: "boolean" },
@@ -396,7 +377,6 @@ const statusOutputSchema = {
         "lifecycleState",
         "attempts",
         "costUsd",
-        "costProvenance",
         "avoidedUsd",
         "pressure",
         "shouldStop",
@@ -746,7 +726,16 @@ export function createMartinMcpServer(serverInfo) {
     const server = new Server({
         name: serverInfo?.name ?? "martin-loop",
         version: serverInfo?.version ?? MARTIN_MCP_PACKAGE_VERSION
-    }, { capabilities: { tools: {}, resources: {}, prompts: {} } });
+    }, {
+        capabilities: {
+            tools: {},
+            resources: {},
+            prompts: {},
+            extensions: {
+                [MARTIN_ARCADE_UI_EXTENSION_ID]: { mimeTypes: [MARTIN_ARCADE_MIME_TYPE] }
+            }
+        }
+    });
     server.setRequestHandler(ListToolsRequestSchema, () => ({
         tools: [
             {
@@ -793,6 +782,16 @@ export function createMartinMcpServer(serverInfo) {
                             exclusiveMinimum: 0,
                             description: "Maximum total tokens across all attempts."
                         },
+                        verifyTimeoutMs: {
+                            type: "integer",
+                            exclusiveMinimum: 0,
+                            description: "Hard timeout for each verifier command in milliseconds."
+                        },
+                        providerExecutionTimeoutMs: {
+                            type: "integer",
+                            exclusiveMinimum: 0,
+                            description: "Hard timeout for each provider coding process in milliseconds."
+                        },
                         verificationPlan: {
                             type: "array",
                             items: { type: "string" },
@@ -1458,17 +1457,23 @@ export function createMartinMcpServer(serverInfo) {
                     },
                     required: ["objective", "engine", "budgetUsd", "selectedMode", "confidence", "expectedCostUsd", "expectedPreworkBurnPct", "reason"]
                 }
-            }
+            },
+            ...buildArcadeToolDefinitions(server.getClientCapabilities())
         ]
     }));
-    server.setRequestHandler(ListResourcesRequestSchema, () => ({
-        ...listMartinResources()
-    }));
+    server.setRequestHandler(ListResourcesRequestSchema, () => {
+        const listed = listMartinResources();
+        const arcade = listArcadeResources(server.getClientCapabilities());
+        return { resources: [...listed.resources, ...arcade.resources] };
+    });
     server.setRequestHandler(ListResourceTemplatesRequestSchema, () => ({
         ...listMartinResourceTemplates()
     }));
     server.setRequestHandler(ReadResourceRequestSchema, async (request) => {
         try {
+            if (request.params.uri === MARTIN_ARCADE_RESOURCE_URI) {
+                return await readArcadeResource(request.params.uri);
+            }
             return await readMartinResource({ uri: request.params.uri });
         }
         catch (error) {
@@ -1498,6 +1503,29 @@ export function createMartinMcpServer(serverInfo) {
     server.setRequestHandler(CallToolRequestSchema, async (request) => {
         const { name, arguments: args } = request.params;
         try {
+            if (name === "martin_arcade") {
+                const available = supportsMartinArcadeApp(server.getClientCapabilities());
+                return createToolSuccessResult({
+                    available,
+                    resourceUri: available ? MARTIN_ARCADE_RESOURCE_URI : null
+                }, MARTIN_ARCADE_FALLBACK_TEXT, { human: MARTIN_ARCADE_FALLBACK_TEXT });
+            }
+            if (name === "martin_arcade_status") {
+                const input = args ?? {};
+                if (!input || typeof input !== "object" || Array.isArray(input)) {
+                    throw new MartinToolError("invalid_arguments", "Arcade status input must be an object.", {
+                        category: "invalid_input"
+                    });
+                }
+                const keys = Object.keys(input);
+                if (keys.some((key) => key !== "loopId") || ("loopId" in input && typeof input.loopId !== "string")) {
+                    throw new MartinToolError("invalid_arguments", "Arcade status accepts only an optional loopId.", {
+                        category: "invalid_input"
+                    });
+                }
+                const output = await readArcadeStatus(input);
+                return createToolSuccessResult(output, `MartinLoop Arcade status for ${output.loopId}: ${output.displayOutcome ?? output.lifecycleState}.`);
+            }
             if (name === "martin_run") {
                 const input = validateToolInput("martin_run", args);
                 const runsRoot = resolveRunsRoot(process.env);
@@ -1533,7 +1561,7 @@ export function createMartinMcpServer(serverInfo) {
                 const output = await runLoopTool(input);
                 return createToolSuccessResult(output, [
                     `Run ${output.loopId} is ${output.status}/${output.lifecycleState}`,
-                    `after ${output.attempts} attempt(s); recorded cost ${output.costUsd.toFixed(2)} USD (${describeCostProvenance(output.costProvenance)}).`,
+                    `after ${output.attempts} attempt(s); spend ${output.costUsd.toFixed(2)} USD.`,
                     `Execution mode: ${output.executionMode}; governance claim eligible:`,
                     `${output.governanceClaimEligible ? "yes" : "no"}.`
                 ].join(" "));
@@ -1541,12 +1569,12 @@ export function createMartinMcpServer(serverInfo) {
             if (name === "martin_inspect") {
                 const input = validateToolInput("martin_inspect", args);
                 const output = await inspectLoopTool(input);
-                return createToolSuccessResult(output, `Inspected ${output.loopCount} run(s) from ${output.source}; total recorded cost ${output.portfolio.totalActualUsd.toFixed(2)} USD.`);
+                return createToolSuccessResult(output, `Inspected ${output.loopCount} run(s) from ${output.source}; total actual spend ${output.portfolio.totalActualUsd.toFixed(2)} USD.`);
             }
             if (name === "martin_status") {
                 const input = validateToolInput("martin_status", args);
                 const output = await getStatusTool(input);
-                return createToolSuccessResult(output, `Loop ${output.loopId} is ${output.status}/${output.lifecycleState}; recorded cost is ${output.costUsd.toFixed(2)} USD (${describeCostProvenance(output.costProvenance)}), and pressure is ${output.pressure} with ${output.remainingBudgetUsd.toFixed(2)} USD remaining.`);
+                return createToolSuccessResult(output, `Loop ${output.loopId} is ${output.status}/${output.lifecycleState}; pressure is ${output.pressure} with ${output.remainingBudgetUsd.toFixed(2)} USD remaining.`);
             }
             if (name === "martin_doctor") {
                 const input = validateToolInput("martin_doctor", args);
@@ -1594,7 +1622,23 @@ export function createMartinMcpServer(serverInfo) {
                         budget: output.normalized.budget
                     }).catch(() => { });
                 }
-                return createToolSuccessResult(output, output.summary);
+                const prefPlanView = {
+                    ready: output.ok,
+                    task: output.normalized.objective,
+                    engine: output.normalized.engine,
+                    mode: output.readiness.liveMode ? "live" : "proof",
+                    budget: output.normalized.budget,
+                    verifier: output.normalized.verificationPlan,
+                    receiptScope: output.receiptScope,
+                    policyProfile: output.policy.name,
+                    blockingIssues: output.ok ? [] : [output.summary],
+                    warnings: output.warnings,
+                    stages: []
+                };
+                prefPlanView.stages = buildGovernedPlanStages(prefPlanView);
+                return createToolSuccessResult(output, output.summary, {
+                    human: renderGovernedRunPlanMarkdown(prefPlanView)
+                });
             }
             if (name === "martin_logs") {
                 const input = validateToolInput("martin_logs", args);
@@ -1644,12 +1688,12 @@ export function createMartinMcpServer(serverInfo) {
             if (name === "martin_run_dossier") {
                 const input = validateToolInput("martin_run_dossier", args);
                 const output = await martinRunDossierTool(input);
-                return createToolSuccessResult(output, `Dossier ready for Martin run ${output.loop.loopId} with ${output.attempts.length} attempt(s).`);
+                return createToolSuccessResult(output, `Dossier ready for Martin run ${output.loop.loopId} with ${output.attempts.length} attempt(s).`, { human: renderVerifiedHandoffMarkdown(output.verifiedHandoff) });
             }
             if (name === "martin_dossier") {
                 const input = validateToolInput("martin_dossier", args);
                 const output = await martinRunDossierTool(input);
-                return createToolSuccessResult(output, `Dossier ready for Martin run ${output.loop.loopId} in ${output.format} format.`);
+                return createToolSuccessResult(output, `Dossier ready for Martin run ${output.loop.loopId} in ${output.format} format.`, { human: renderVerifiedHandoffMarkdown(output.verifiedHandoff) });
             }
             if (name === "martin_eval") {
                 const input = validateToolInput("martin_eval", args);

package/dist/tools/run-loop.d.ts

@@ -1,6 +1,6 @@
 import { type SpawnLike } from "../vendor/adapters/index.js";
 import { type RunStore } from "../vendor/core/index.js";
-import type { CostProvenance, ExecutionMode, LoopBudget, ReceiptScope } from "../vendor/contracts/index.js";
+import type { ExecutionMode, LoopBudget, ReceiptScope } from "../vendor/contracts/index.js";
 import { buildArtifactSummary, buildVerificationSummary, buildLoopPreview, type MartinEngine } from "./tool-support.js";
 export interface RunLoopInput {
     objective: string;
@@ -11,6 +11,7 @@ export interface RunLoopInput {
     maxIterations?: number;
     maxTokens?: number;
     verifyTimeoutMs?: number;
+    providerExecutionTimeoutMs?: number;
     verificationPlan?: string[];
     allowedPaths?: string[];
     deniedPaths?: string[];
@@ -23,7 +24,6 @@ export interface RunLoopOutput {
     reason: string;
     attempts: number;
     costUsd: number;
-    costProvenance: CostProvenance;
     verificationPassed: boolean;
     executionMode: ExecutionMode;
     governanceClaimEligible: boolean;