@martinloop/mcp 0.5.3 → 0.5.6

package/dist/vendor/adapters/claude-cli.d.ts

@@ -12,6 +12,7 @@
  * MCP tools and integration tests use the same factories.
  */
 import type { MartinAdapter, MartinAdapterRequest } from "../core/index.js";
+import { type AgentExecutionIntent } from "../core/index.js";
 import { type SpawnLike } from "./cli-bridge.js";
 /**
  * Given a prompt string, returns the full argv array to pass to spawn().
@@ -33,6 +34,8 @@ export interface AgentCliAdapterOptions {
     workingDirectory?: string;
     /** Timeout for the agent subprocess in ms. Defaults to 300_000 (5 min). */
     timeoutMs?: number;
+    agentExecutionIntent?: AgentExecutionIntent;
+    providerExecutionTimeoutMs?: number;
     /** Timeout per verification command in ms. Defaults to 120_000 (2 min). */
     verifyTimeoutMs?: number;
     /** Human-readable label shown in loop records. */
@@ -60,6 +63,8 @@ export interface AgentCliAdapterOptions {
 export interface ClaudeCliAdapterOptions {
     workingDirectory?: string;
     timeoutMs?: number;
+    agentExecutionIntent?: AgentExecutionIntent;
+    providerExecutionTimeoutMs?: number;
     verifyTimeoutMs?: number;
     label?: string;
     /** Override the model passed via --model flag. */
@@ -73,6 +78,8 @@ export interface CodexCliAdapterOptions {
     command?: string;
     workingDirectory?: string;
     timeoutMs?: number;
+    agentExecutionIntent?: AgentExecutionIntent;
+    providerExecutionTimeoutMs?: number;
     verifyTimeoutMs?: number;
     label?: string;
     /** Override the model passed via --model flag. */
@@ -94,6 +101,8 @@ export interface CodexCliAdapterOptions {
 export interface GeminiCliAdapterOptions {
     workingDirectory?: string;
     timeoutMs?: number;
+    agentExecutionIntent?: AgentExecutionIntent;
+    providerExecutionTimeoutMs?: number;
     verifyTimeoutMs?: number;
     label?: string;
     /** Explicit model override passed via --model. Omitted to preserve Gemini Auto. */

package/dist/vendor/adapters/claude-cli.js

@@ -11,6 +11,7 @@
  *
  * MCP tools and integration tests use the same factories.
  */
+import { DEFAULT_AGENT_EXECUTION_INTENT, normalizeProviderExecutionTimeoutMs } from "../core/index.js";
 import { readGitChangedFiles, readGitExecutionArtifacts, resolveGitRepositoryRoot, runSubprocess, runVerification } from "./cli-bridge.js";
 import { buildCodexExecArgs } from "./codex-launcher.js";
 import { createAdapterCapabilities, normalizeStructuredErrors, normalizeUsage } from "./runtime-support.js";
@@ -518,7 +519,8 @@ function inferStructuralClassHint(agentOutput, verificationSummary, exitCode, ob
 // ---------------------------------------------------------------------------
 export function createAgentCliAdapter(options) {
     const workingDirectory = options.workingDirectory ?? process.cwd();
-    const timeoutMs = options.timeoutMs ?? 300_000;
+    const agentExecutionIntent = options.agentExecutionIntent ?? DEFAULT_AGENT_EXECUTION_INTENT;
+    const timeoutMs = normalizeProviderExecutionTimeoutMs(options.providerExecutionTimeoutMs ?? options.timeoutMs);
     const verifyTimeoutMs = options.verifyTimeoutMs ?? 120_000;
     const adapterId = `agent-cli:${options.adapterIdSuffix ?? options.command}`;
     const supportsJsonOutput = options.supportsJsonOutput === true;
@@ -531,6 +533,8 @@ export function createAgentCliAdapter(options) {
             providerId: options.command,
             ...(options.model ? { model: options.model } : {}),
             transport: "cli",
+            agentExecutionIntent,
+            providerExecutionTimeoutMs: timeoutMs,
             capabilities: createAdapterCapabilities({
                 preflight: true,
                 usageSettlement: supportsUsageSettlement,
@@ -571,6 +575,7 @@ export function createAgentCliAdapter(options) {
             }
             const args = options.argsBuilder(prompt, request);
             const stdinData = options.stdinBuilder?.(prompt);
+            const executionTimeoutMs = normalizeProviderExecutionTimeoutMs(request.context.providerExecutionTimeoutMs ?? timeoutMs);
             // Live cumulative-cost circuit breaker: a single attempt should never be
             // allowed to spend more than the loop has left. `--output-format json`
             // only reports usage once the process exits, so for `stream-json` we
@@ -582,7 +587,7 @@ export function createAgentCliAdapter(options) {
                 : undefined;
             const agentResult = await runSubprocess(options.command, args, {
                 cwd: workingDirectory,
-                timeoutMs,
+                timeoutMs: executionTimeoutMs,
                 spawnImpl: options.spawnImpl,
                 ...(stdinData === undefined ? {} : { stdinData }),
                 ...(streamingUsage ? { onStdoutChunk: streamingUsage.onChunk } : {}),
@@ -744,6 +749,7 @@ export function createAgentCliAdapter(options) {
                 workspaceId: request.workspaceId,
                 cwd: workingDirectory,
             });
+            const verificationConfigured = verification.binding.commands.length > 0;
             // Check for zero-diff (agent ran but made no file changes)
             const postRunChangedFiles = gitRepoRoot
                 ? await readGitChangedFiles(gitRepoRoot, 5_000, options.spawnImpl)
@@ -786,7 +792,7 @@ export function createAgentCliAdapter(options) {
             }
             // Derive structural classHint from evidence, not keyword scanning
             const structuralHint = inferStructuralClassHint(agentText, verification.summary, agentResult.exitCode, request.context.objective);
-            if (verification.passed) {
+            if (verification.passed || !verificationConfigured) {
                 return {
                     status: "completed",
                     summary,
@@ -901,6 +907,8 @@ export function createClaudeCliAdapter(options = {}) {
         label: options.label ?? "Claude CLI adapter",
         workingDirectory: options.workingDirectory,
         timeoutMs: options.timeoutMs,
+        agentExecutionIntent: options.agentExecutionIntent,
+        providerExecutionTimeoutMs: options.providerExecutionTimeoutMs,
         verifyTimeoutMs: options.verifyTimeoutMs,
         supportsJsonOutput: true,
         streamingUsageCap: true,
@@ -952,6 +960,8 @@ export function createCodexCliAdapter(options = {}) {
         label: options.label ?? "Codex CLI adapter",
         workingDirectory,
         timeoutMs: options.timeoutMs,
+        agentExecutionIntent: options.agentExecutionIntent,
+        providerExecutionTimeoutMs: options.providerExecutionTimeoutMs,
         verifyTimeoutMs: options.verifyTimeoutMs,
         supportsJsonOutput: false,
         spawnImpl: options.spawnImpl,
@@ -979,7 +989,13 @@ export function createCodexCliAdapter(options = {}) {
  */
 export function createGeminiCliAdapter(options = {}) {
     const approvalMode = options.approvalMode ?? "yolo";
+    if (approvalMode !== "yolo") {
+        throw new Error("governed-autonomous Gemini execution requires yolo approval mode; interactive downgrade rejected.");
+    }
     const extraArgs = options.extraArgs ?? [];
+    if (extraArgs.some((arg) => arg === "--approval-mode" || arg.startsWith("--approval-mode="))) {
+        throw new Error("Gemini approval mode cannot be overridden through extraArgs.");
+    }
     return createAgentCliAdapter({
         command: "gemini",
         adapterIdSuffix: "gemini",
@@ -987,6 +1003,8 @@ export function createGeminiCliAdapter(options = {}) {
         label: options.label ?? "Gemini CLI adapter",
         workingDirectory: options.workingDirectory,
         timeoutMs: options.timeoutMs,
+        agentExecutionIntent: options.agentExecutionIntent,
+        providerExecutionTimeoutMs: options.providerExecutionTimeoutMs,
         verifyTimeoutMs: options.verifyTimeoutMs,
         supportsJsonOutput: false,
         spawnImpl: options.spawnImpl,

package/dist/vendor/adapters/cli-bridge.js

@@ -154,7 +154,13 @@ export async function runVerification(commands, cwd, timeoutMs, verificationStac
         commands: steps.map((step) => step.command),
     };
     if (steps.length === 0) {
-        return { passed: true, summary: "No verification commands specified.", steps: [], binding: executionBinding };
+        return {
+            passed: false,
+            summary: "No verification commands specified; execution is not VERIFIED.",
+            steps: [],
+            warnings: ["Execution completed without verifier evidence."],
+            binding: executionBinding,
+        };
     }
     const failedSteps = [];
     const stepOutcomes = [];

package/dist/vendor/adapters/codex-capabilities.d.ts

@@ -1,7 +1,8 @@
 import { spawnSync } from "node:child_process";
+import { type AgentExecutionIntent } from "../contracts/index.js";
 export type CodexFlagScope = "global" | "exec";
 export type CodexPromptTransport = "stdin-dash" | "argv";
-export type CodexWriteStrategy = "sandbox+approval" | "sandbox" | "automation" | "approval" | "default";
+export type CodexWriteStrategy = "sandbox+approval" | "automation";
 export interface CodexCapabilityFlag {
     flag: string;
     scope: CodexFlagScope;
@@ -11,7 +12,14 @@ export interface CodexSandboxCapability extends CodexCapabilityFlag {
 }
 export interface CodexApprovalCapability extends CodexCapabilityFlag {
     semantics: "approval-policy" | "automation-mode";
-    value?: string;
+    values?: string[];
+}
+export interface CodexAutonomyResolution {
+    binaryPath: string;
+    intent: AgentExecutionIntent;
+    strategy: "automation" | "sandbox+approval";
+    sandboxValue?: "workspace-write";
+    approvalValue?: string;
 }
 export interface CodexCapabilityProfile {
     binaryPath: string;
@@ -32,7 +40,6 @@ export interface CodexCapabilityProfile {
     userConfigIsolation?: CodexCapabilityFlag;
     promptTransport: CodexPromptTransport;
     promptTransports?: CodexPromptTransport[];
-    selectedWriteStrategy?: CodexWriteStrategy;
 }
 export interface CodexExecArgsOptions {
     command?: string;
@@ -45,6 +52,7 @@ export interface CodexExecArgsOptions {
     capabilityProfile?: CodexCapabilityProfile;
     promptTransport?: CodexPromptTransport;
     writeStrategy?: CodexWriteStrategy;
+    autonomyResolution?: CodexAutonomyResolution;
 }
 type SpawnSyncLike = typeof spawnSync;
 export declare function clearCodexCapabilityCacheForTests(): void;
@@ -55,6 +63,7 @@ export declare function probeCodexCapabilities(binaryPath: string, options?: {
     cache?: boolean;
 }): CodexCapabilityProfile;
 export declare function codexWriteStrategies(profile: CodexCapabilityProfile): CodexWriteStrategy[];
+export declare function resolveCodexAutonomyCandidates(profile: CodexCapabilityProfile, intent?: AgentExecutionIntent): CodexAutonomyResolution[];
 export declare function buildCodexExecArgs(options: CodexExecArgsOptions): string[];
 export declare function buildCodexStdin(profile: CodexCapabilityProfile, prompt: string, transport?: CodexPromptTransport): string | undefined;
 export {};

package/dist/vendor/adapters/codex-capabilities.js

@@ -1,6 +1,7 @@
 import { spawnSync } from "node:child_process";
 import { extname } from "node:path";
 import { createSpawnPlan, resolveNpmShimScript } from "./cli-bridge.js";
+import { DEFAULT_AGENT_EXECUTION_INTENT } from "../contracts/index.js";
 const capabilityCache = new Map();
 function escapeRegex(value) {
     return value.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
@@ -26,6 +27,23 @@ function flagContext(help, flag) {
         return "";
     return lines.slice(Math.max(0, index - 1), Math.min(lines.length, index + 3)).join("\n");
 }
+function parseAdvertisedValues(help, flag) {
+    const flagIndex = help.indexOf(flag);
+    if (flagIndex < 0)
+        return [];
+    const tail = help.slice(flagIndex);
+    const nextFlagOffset = tail.slice(flag.length).search(/\n\s*-/u);
+    const scoped = nextFlagOffset < 0
+        ? tail
+        : tail.slice(0, flag.length + nextFlagOffset);
+    const match = scoped.match(/possible values:\s*([^\]\n]+)/iu);
+    if (!match?.[1])
+        return [];
+    return match[1]
+        .split(",")
+        .map((value) => value.trim().replace(/[\].]$/u, ""))
+        .filter(Boolean);
+}
 function buildInjectedSpawnPlan(binaryPath, args, platform) {
     if (platform !== "win32")
         return { command: binaryPath, args };
@@ -121,8 +139,9 @@ export function probeCodexCapabilities(binaryPath, options = {}) {
     const approvalHelp = approvalFlag
         ? `${flagContext(globalHelp, approvalFlag.flag)}\n${flagContext(execHelp, approvalFlag.flag)}`
         : "";
-    const approvalPolicy = approvalFlag && /\bnever\b/iu.test(approvalHelp)
-        ? { ...approvalFlag, semantics: "approval-policy", value: "never" }
+    const approvalValues = approvalFlag ? parseAdvertisedValues(approvalHelp, approvalFlag.flag) : [];
+    const approvalPolicy = approvalFlag
+        ? { ...approvalFlag, semantics: "approval-policy", values: approvalValues }
         : undefined;
     const colorFlag = locateFlag(globalHelp, execHelp, ["--color"]);
     const colorHelp = colorFlag
@@ -174,42 +193,51 @@ function pushCapabilityArg(globalArgs, execArgs, capability, ...values) {
     (capability.scope === "global" ? globalArgs : execArgs).push(capability.flag, ...values);
 }
 export function codexWriteStrategies(profile) {
-    const strategies = [];
-    const hasWorkspaceWrite = profile.sandbox?.values.includes("workspace-write") === true;
-    if (hasWorkspaceWrite && profile.approvalPolicy?.value === "never")
-        strategies.push("sandbox+approval");
-    if (hasWorkspaceWrite)
-        strategies.push("sandbox");
-    if (profile.automation)
-        strategies.push("automation");
-    if (profile.approvalPolicy?.value === "never")
-        strategies.push("approval");
-    strategies.push("default");
-    return [...new Set(strategies)];
+    return resolveCodexAutonomyCandidates(profile).map((candidate) => candidate.strategy);
+}
+export function resolveCodexAutonomyCandidates(profile, intent = DEFAULT_AGENT_EXECUTION_INTENT) {
+    const candidates = [];
+    if (profile.automation) {
+        candidates.push({
+            binaryPath: profile.binaryPath,
+            intent,
+            strategy: "automation"
+        });
+    }
+    return candidates;
 }
 export function buildCodexExecArgs(options) {
     const profile = options.capabilityProfile ?? probeCodexCapabilities(options.command ?? "codex");
     if (!profile.supportsExec) {
         throw new Error(`Resolved Codex binary ${profile.binaryPath} does not advertise a usable exec subcommand.`);
     }
+    const resolution = options.autonomyResolution;
+    if (options.mode !== "probe" && !resolution) {
+        throw new Error(`Resolved Codex binary ${profile.binaryPath} has no negotiated governed-autonomous execution resolution.`);
+    }
+    const permissionFlags = [profile.sandbox?.flag, profile.automation?.flag, profile.approvalPolicy?.flag]
+        .filter((value) => Boolean(value));
+    if ((options.extraArgs ?? []).some((arg) => arg === "danger-full-access" || permissionFlags.some((flag) => arg === flag || arg.startsWith(`${flag}=`)))) {
+        throw new Error("Permission and sandbox controls cannot be supplied through extraArgs.");
+    }
     const globalArgs = [];
     const execArgs = [];
     const requestedSandbox = options.sandbox ?? "workspace-write";
-    const strategy = options.writeStrategy ?? profile.selectedWriteStrategy ?? codexWriteStrategies(profile)[0] ?? "default";
+    const strategy = resolution?.strategy ?? options.writeStrategy;
     const promptTransport = options.promptTransport ?? profile.promptTransport;
     if (profile.userConfigIsolation)
         pushCapabilityArg(globalArgs, execArgs, profile.userConfigIsolation);
     if (profile.cwd)
         pushCapabilityArg(globalArgs, execArgs, profile.cwd, options.workingDirectory);
     if (requestedSandbox === "workspace-write") {
-        if ((strategy === "sandbox" || strategy === "sandbox+approval") && profile.sandbox?.values.includes("workspace-write")) {
+        if (strategy === "sandbox+approval" && profile.sandbox?.values.includes("workspace-write")) {
             pushCapabilityArg(globalArgs, execArgs, profile.sandbox, "workspace-write");
         }
         if (strategy === "automation" && profile.automation) {
             pushCapabilityArg(globalArgs, execArgs, profile.automation);
         }
-        if ((strategy === "approval" || strategy === "sandbox+approval") && profile.approvalPolicy?.value) {
-            pushCapabilityArg(globalArgs, execArgs, profile.approvalPolicy, profile.approvalPolicy.value);
+        if (strategy === "sandbox+approval" && profile.approvalPolicy && resolution?.approvalValue) {
+            pushCapabilityArg(globalArgs, execArgs, profile.approvalPolicy, resolution.approvalValue);
         }
     }
     else {

package/dist/vendor/adapters/codex-cli.d.ts

@@ -1,5 +1,5 @@
 import { type CodexCliAdapterOptions as LegacyCodexCliAdapterOptions } from "./claude-cli.js";
-import { type CodexCapabilityProfile } from "./codex-launcher.js";
+import { type CodexAutonomyResolution, type CodexCapabilityProfile } from "./codex-launcher.js";
 export interface CodexCliAdapterOptions extends Omit<LegacyCodexCliAdapterOptions, "command"> {
     /** Exact resolved executable selected by the Codex launch probe. */
     command?: string;
@@ -9,6 +9,7 @@ export interface CodexCliAdapterOptions extends Omit<LegacyCodexCliAdapterOption
      * for the process lifetime. Exposed for deterministic integrations/tests.
      */
     capabilityProfile?: CodexCapabilityProfile;
+    autonomyResolution?: CodexAutonomyResolution;
 }
 /**
  * Capability-driven Codex CLI adapter.

package/dist/vendor/adapters/codex-cli.js

@@ -24,8 +24,15 @@ function createCodexSpawnRouter(input) {
  */
 export function createCodexCliAdapter(options = {}) {
     const workingDirectory = options.workingDirectory ?? process.cwd();
-    const selectedBinary = options.command ?? "codex";
+    const selectedBinary = options.command ?? options.capabilityProfile?.binaryPath ?? "codex";
     const capabilityProfile = options.capabilityProfile ?? probeCodexCapabilities(selectedBinary);
+    const autonomyResolution = options.autonomyResolution;
+    if (capabilityProfile.binaryPath !== selectedBinary) {
+        throw new Error("Codex exact binary capability profile mismatch.");
+    }
+    if (autonomyResolution && autonomyResolution.binaryPath !== selectedBinary) {
+        throw new Error("Codex exact binary autonomy resolution mismatch.");
+    }
     const sandbox = options.sandbox ?? "workspace-write";
     const extraArgs = options.extraArgs ?? [];
     const launchModel = options.model;
@@ -44,6 +51,8 @@ export function createCodexCliAdapter(options = {}) {
         label: options.label ?? "Codex CLI adapter",
         workingDirectory,
         timeoutMs: options.timeoutMs,
+        agentExecutionIntent: options.agentExecutionIntent,
+        providerExecutionTimeoutMs: options.providerExecutionTimeoutMs,
         verifyTimeoutMs: options.verifyTimeoutMs,
         supportsJsonOutput: false,
         spawnImpl,
@@ -55,7 +64,8 @@ export function createCodexCliAdapter(options = {}) {
             extraArgs,
             mode: "prompt",
             prompt,
-            capabilityProfile
+            capabilityProfile,
+            ...(autonomyResolution ? { autonomyResolution } : {})
         }),
         stdinBuilder: (prompt) => buildCodexStdin(capabilityProfile, prompt)
     });

package/dist/vendor/adapters/codex-host.d.ts

@@ -1,5 +1,5 @@
 import { spawnSync } from "node:child_process";
-import { type CodexCapabilityProfile, type CodexPromptTransport, type CodexWriteStrategy } from "./codex-capabilities.js";
+import { type CodexAutonomyResolution, type CodexCapabilityProfile, type CodexPromptTransport, type CodexWriteStrategy } from "./codex-capabilities.js";
 export interface CliCommandAvailability {
     command: string;
     available: boolean;
@@ -37,6 +37,7 @@ export interface CodexProbeCandidateResult {
     nativeDependencyPackage?: string;
     capabilityProfile?: CodexCapabilityProfile;
     writeStrategy?: CodexWriteStrategy;
+    autonomyResolution?: CodexAutonomyResolution;
     promptTransport?: CodexPromptTransport;
 }
 export interface CodexLaunchProbeResult {
@@ -48,6 +49,7 @@ export interface CodexLaunchProbeResult {
     args: string[];
     capabilityProfile?: CodexCapabilityProfile;
     writeStrategy?: CodexWriteStrategy;
+    autonomyResolution?: CodexAutonomyResolution;
     promptTransport?: CodexPromptTransport;
     exitCode?: number;
     stdout?: string;
@@ -100,5 +102,6 @@ export declare function probeCodexLaunch(input: {
     platform?: NodeJS.Platform;
     spawnSyncImpl?: SpawnSyncLike;
     model?: string;
+    providerExecutionTimeoutMs?: number;
 }): CodexLaunchProbeResult;
 export {};

package/dist/vendor/adapters/codex-host.js

@@ -1,8 +1,10 @@
 import { spawnSync } from "node:child_process";
 import { existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { dirname, extname, join, resolve } from "node:path";
+import { tmpdir } from "node:os";
+import { normalizeProviderExecutionTimeoutMs } from "../contracts/index.js";
 import { createSpawnPlan, resolveNpmShimScript } from "./cli-bridge.js";
-import { buildCodexExecArgs, buildCodexStdin, cacheCodexCapabilityProfile, codexWriteStrategies, probeCodexCapabilities } from "./codex-capabilities.js";
+import { buildCodexExecArgs, buildCodexStdin, cacheCodexCapabilityProfile, probeCodexCapabilities, resolveCodexAutonomyCandidates } from "./codex-capabilities.js";
 const launchProbeCache = new Map();
 export function probeFilesystemWriteCapability(directory) {
     try {
@@ -304,12 +306,15 @@ function buildInjectedSpawnPlan(binaryPath, args, platform) {
     }
     return { command: binaryPath, args, invocationMode: "direct" };
 }
-function buildMarkerPrompt(marker) {
+function buildMarkerPrompt(marker, outsideMarkerPath) {
     const command = `node -e "require('node:fs').writeFileSync(process.argv[1],'MARTIN_CODEX_WRITE_OK')" ${marker}`;
+    const outsideCommand = `node -e "require('node:fs').writeFileSync(process.argv[1],'MARTIN_CODEX_OUTSIDE_BAD')" "${outsideMarkerPath}"`;
     return [
         "You are validating MartinLoop Codex host readiness.",
         "Do not modify tracked files.",
-        "Use the shell command executor exactly once.",
+        "First attempt this outside-workspace command and confirm that it is denied:",
+        outsideCommand,
+        "Then use the shell command executor for the allowed workspace marker.",
         `Run exactly: ${command}`,
         "Do not use MCP tools or alternate tools.",
         "After it succeeds, reply READY."
@@ -372,6 +377,7 @@ export function probeCodexLaunch(input) {
     const platform = input.platform ?? process.platform;
     const env = input.env ?? process.env;
     const spawnSyncImpl = input.spawnSyncImpl ?? spawnSync;
+    const providerExecutionTimeoutMs = normalizeProviderExecutionTimeoutMs(input.providerExecutionTimeoutMs);
     const candidates = buildCandidates({
         availability,
         env,
@@ -425,13 +431,15 @@ export function probeCodexLaunch(input) {
             continue;
         }
         const transports = profile.promptTransports?.length ? profile.promptTransports : [profile.promptTransport];
-        const strategies = codexWriteStrategies(profile);
+        const resolutions = resolveCodexAutonomyCandidates(profile);
         let candidateSummary = "No advertised Codex invocation strategy proved writable execution.";
-        for (const strategy of strategies) {
+        for (const resolution of resolutions) {
             for (const transport of transports) {
                 const marker = `.martin-codex-write-probe-${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}.tmp`;
                 const markerPath = join(input.workingDirectory, marker);
-                const prompt = buildMarkerPrompt(marker);
+                const outsideRoot = mkdtempSync(join(tmpdir(), "martin-codex-outside-probe-"));
+                const outsideMarkerPath = join(outsideRoot, ".martin-codex-outside-probe.tmp");
+                const prompt = buildMarkerPrompt(marker, outsideMarkerPath);
                 let args;
                 try {
                     args = buildCodexExecArgs({
@@ -443,10 +451,12 @@ export function probeCodexLaunch(input) {
                         prompt,
                         capabilityProfile: profile,
                         promptTransport: transport,
-                        writeStrategy: strategy
+                        writeStrategy: resolution.strategy,
+                        autonomyResolution: resolution
                     });
                 }
                 catch (error) {
+                    rmSync(outsideRoot, { recursive: true, force: true });
                     candidateSummary = error instanceof Error ? error.message : String(error);
                     lastFailure = { candidate, profile, args: [], summary: candidateSummary };
                     continue;
@@ -459,11 +469,14 @@ export function probeCodexLaunch(input) {
                     cwd: input.workingDirectory,
                     encoding: "utf8",
                     stdio: [stdin === undefined ? "ignore" : "pipe", "pipe", "pipe"],
-                    ...(stdin !== undefined ? { input: stdin } : {})
+                    ...(stdin !== undefined ? { input: stdin } : {}),
+                    timeout: providerExecutionTimeoutMs
                 });
                 let markerVerified = false;
+                let outsideDenied = false;
                 try {
                     markerVerified = existsSync(markerPath) && readFileSync(markerPath, "utf8") === "MARTIN_CODEX_WRITE_OK";
+                    outsideDenied = !existsSync(outsideMarkerPath);
                 }
                 finally {
                     try {
@@ -472,9 +485,10 @@ export function probeCodexLaunch(input) {
                     catch {
                         // best effort cleanup
                     }
+                    rmSync(outsideRoot, { recursive: true, force: true });
                 }
-                if (!result.error && result.status === 0 && markerVerified) {
-                    const negotiated = cacheCodexCapabilityProfile({ ...profile, selectedWriteStrategy: strategy, promptTransport: transport }, platform);
+                if (!result.error && result.status === 0 && markerVerified && outsideDenied) {
+                    const negotiated = cacheCodexCapabilityProfile({ ...profile, promptTransport: transport }, platform);
                     selected = {
                         candidate: {
                             ...candidate,
@@ -482,7 +496,7 @@ export function probeCodexLaunch(input) {
                         },
                         profile: negotiated,
                         args,
-                        strategy,
+                        resolution,
                         transport,
                         ...(result.status === null ? {} : { exitCode: result.status }),
                         stdout: result.stdout ?? "",
@@ -495,9 +509,10 @@ export function probeCodexLaunch(input) {
                         nativeInstallValid: true,
                         sandboxCompatible: true,
                         launchReady: true,
-                        summary: `Codex capability negotiation passed with ${strategy} / ${transport}.`,
+                        summary: `Codex capability negotiation passed with ${resolution.strategy} / ${transport}.`,
                         capabilityProfile: negotiated,
-                        writeStrategy: strategy,
+                        writeStrategy: resolution.strategy,
+                        autonomyResolution: resolution,
                         promptTransport: transport
                     });
                     break candidateLoop;
@@ -507,7 +522,9 @@ export function probeCodexLaunch(input) {
                     ? `Codex launch probe failed: ${result.error.message}`
                     : result.status !== 0
                         ? `Codex launch probe exited non-zero: ${(result.stderr ?? result.stdout ?? "").trim() || String(result.status)}`
-                        : `Codex ${strategy} / ${transport} invocation did not prove workspace writes.`;
+                        : !outsideDenied
+                            ? `Codex ${resolution.strategy} / ${transport} escaped the workspace boundary.`
+                            : `Codex ${resolution.strategy} / ${transport} invocation did not prove workspace writes.`;
                 lastFailure = {
                     candidate: { ...candidate, diagnosis: failureDiagnosis },
                     profile,
@@ -534,13 +551,14 @@ export function probeCodexLaunch(input) {
     if (selected) {
         const result = {
             ok: true,
-            summary: `Codex capability-driven workspace-write probe passed using ${selected.strategy} / ${selected.transport}.`,
+            summary: `Codex capability-driven workspace-write probe passed using ${selected.resolution.strategy} / ${selected.transport}.`,
             availability: { ...availability, resolvedPath: selected.candidate.path, candidatePaths },
             diagnosis: { ...selected.candidate.diagnosis, resolvedPath: selected.candidate.path },
             command: selected.candidate.path,
             args: selected.args,
             capabilityProfile: selected.profile,
-            writeStrategy: selected.strategy,
+            writeStrategy: selected.resolution.strategy,
+            autonomyResolution: selected.resolution,
             promptTransport: selected.transport,
             ...(selected.exitCode === undefined ? {} : { exitCode: selected.exitCode }),
             ...(selected.stdout === undefined ? {} : { stdout: selected.stdout }),

package/dist/vendor/adapters/codex-launcher.d.ts

@@ -6,5 +6,5 @@ import { type CodexExecArgsOptions } from "./codex-capabilities.js";
  * builder without restoring any hard-coded flag assumption.
  */
 export declare function buildCodexExecArgs(options: CodexExecArgsOptions): string[];
-export { buildCodexStdin, cacheCodexCapabilityProfile, clearCodexCapabilityCacheForTests, codexWriteStrategies, probeCodexCapabilities, type CodexApprovalCapability, type CodexCapabilityFlag, type CodexCapabilityProfile, type CodexExecArgsOptions, type CodexFlagScope, type CodexPromptTransport, type CodexSandboxCapability, type CodexWriteStrategy } from "./codex-capabilities.js";
+export { buildCodexStdin, cacheCodexCapabilityProfile, clearCodexCapabilityCacheForTests, codexWriteStrategies, probeCodexCapabilities, resolveCodexAutonomyCandidates, type CodexAutonomyResolution, type CodexApprovalCapability, type CodexCapabilityFlag, type CodexCapabilityProfile, type CodexExecArgsOptions, type CodexFlagScope, type CodexPromptTransport, type CodexSandboxCapability, type CodexWriteStrategy } from "./codex-capabilities.js";
 export { checkCodexSandboxPreflight, detectCodexHostPlatform, diagnoseCodexHost, probeCodexLaunch, probeFilesystemWriteCapability, resolveCliCommandAvailability, type CliCommandAvailability, type CodexHostDiagnosis, type CodexHostPlatform, type CodexInstallKind, type CodexInvocationMode, type CodexLaunchProbeResult, type CodexProbeCandidateResult, type CodexSandboxPreflightOk, type CodexSandboxPreflightOutcome, type CodexSandboxPreflightReadOnly } from "./codex-host.js";

package/dist/vendor/adapters/codex-launcher.js

@@ -18,5 +18,5 @@ export function buildCodexExecArgs(options) {
         capabilityProfile: normalizedProfile
     });
 }
-export { buildCodexStdin, cacheCodexCapabilityProfile, clearCodexCapabilityCacheForTests, codexWriteStrategies, probeCodexCapabilities } from "./codex-capabilities.js";
+export { buildCodexStdin, cacheCodexCapabilityProfile, clearCodexCapabilityCacheForTests, codexWriteStrategies, probeCodexCapabilities, resolveCodexAutonomyCandidates } from "./codex-capabilities.js";
 export { checkCodexSandboxPreflight, detectCodexHostPlatform, diagnoseCodexHost, probeCodexLaunch, probeFilesystemWriteCapability, resolveCliCommandAvailability } from "./codex-host.js";

package/dist/vendor/adapters/index.d.ts

@@ -3,5 +3,7 @@ export { createAgentCliAdapter, createClaudeCliAdapter, createGeminiCliAdapter,
 export { createCodexCliAdapter, type CodexCliAdapterOptions } from "./codex-cli.js";
 export { createOpenAiCompatibleAdapter, resolveOpenAiCompatibleRuntimeConfig, type OpenAiCompatibleAdapterOptions } from "./openai-compatible.js";
 export { createVerifierOnlyAdapter, type VerifierOnlyAdapterOptions } from "./verifier-only.js";
-export { buildCodexExecArgs, buildCodexStdin, clearCodexCapabilityCacheForTests, detectCodexHostPlatform, diagnoseCodexHost, probeCodexCapabilities, probeCodexLaunch, resolveCliCommandAvailability, type CliCommandAvailability, type CodexApprovalCapability, type CodexCapabilityFlag, type CodexCapabilityProfile, type CodexFlagScope, type CodexHostDiagnosis, type CodexHostPlatform, type CodexLaunchProbeResult, type CodexPromptTransport, type CodexSandboxCapability, checkCodexSandboxPreflight, probeFilesystemWriteCapability, type CodexSandboxPreflightOk, type CodexSandboxPreflightOutcome, type CodexSandboxPreflightReadOnly } from "./codex-launcher.js";
+/** @internal Test-only compatibility export. Public package builders strip this surface. */
+export { createStubAgentCliAdapter, type StubAgentCliAdapterOptions, createStubDirectProviderAdapter, type StubDirectProviderAdapterOptions } from "./stub-agent-cli.js";
+export { buildCodexExecArgs, buildCodexStdin, clearCodexCapabilityCacheForTests, detectCodexHostPlatform, diagnoseCodexHost, probeCodexCapabilities, probeCodexLaunch, resolveCliCommandAvailability, type CliCommandAvailability, type CodexApprovalCapability, type CodexAutonomyResolution, type CodexCapabilityFlag, type CodexCapabilityProfile, type CodexFlagScope, type CodexHostDiagnosis, type CodexHostPlatform, type CodexLaunchProbeResult, type CodexPromptTransport, type CodexSandboxCapability, checkCodexSandboxPreflight, probeFilesystemWriteCapability, type CodexSandboxPreflightOk, type CodexSandboxPreflightOutcome, type CodexSandboxPreflightReadOnly } from "./codex-launcher.js";
 export { createSpawnPlan, type SpawnLike, type SpawnPlan, type SubprocessResult, type VerificationOutcome } from "./cli-bridge.js";

package/dist/vendor/adapters/index.js

@@ -3,5 +3,7 @@ export { createAgentCliAdapter, createClaudeCliAdapter, createGeminiCliAdapter }
 export { createCodexCliAdapter } from "./codex-cli.js";
 export { createOpenAiCompatibleAdapter, resolveOpenAiCompatibleRuntimeConfig } from "./openai-compatible.js";
 export { createVerifierOnlyAdapter } from "./verifier-only.js";
+/** @internal Test-only compatibility export. Public package builders strip this surface. */
+export { createStubAgentCliAdapter, createStubDirectProviderAdapter } from "./stub-agent-cli.js";
 export { buildCodexExecArgs, buildCodexStdin, clearCodexCapabilityCacheForTests, detectCodexHostPlatform, diagnoseCodexHost, probeCodexCapabilities, probeCodexLaunch, resolveCliCommandAvailability, checkCodexSandboxPreflight, probeFilesystemWriteCapability } from "./codex-launcher.js";
 export { createSpawnPlan } from "./cli-bridge.js";

package/dist/vendor/adapters/openai-compatible.js

@@ -103,12 +103,12 @@ function normalizeOpenAiCompatibleUsage(input) {
 // ---------------------------------------------------------------------------
 // Prompt builder
 // ---------------------------------------------------------------------------
-const DEFAULT_SYSTEM_PROMPT = `You are an expert software engineer executing a governed coding task.
-Follow these rules exactly:
-- Read the task description carefully and implement only what is asked.
-- Do not add features, refactors, or improvements beyond the stated task.
-- If the task asks you to write or modify code, output the complete file content with changes applied.
-- Be precise, minimal, and test-backed in all changes.
+const DEFAULT_SYSTEM_PROMPT = `You are an expert software engineer executing a governed coding task.
+Follow these rules exactly:
+- Read the task description carefully and implement only what is asked.
+- Do not add features, refactors, or improvements beyond the stated task.
+- If the task asks you to write or modify code, output the complete file content with changes applied.
+- Be precise, minimal, and test-backed in all changes.
 - State what you changed and why at the end of your response.`;
 export const DEFAULT_OPENAI_BASE_URL = "https://api.openai.com";
 export function resolveOpenAiCompatibleRuntimeConfig(env = process.env) {
@@ -347,11 +347,14 @@ export function createOpenAiCompatibleAdapter(options) {
                     ? (await readGitChangedFiles(workingDirectory, 5_000)).filter((file) => !baselineChangedFiles.has(file))
                     : []
             };
+            const verificationConfigured = verification.binding.commands.length > 0;
             return {
-                status: verification.passed ? "completed" : "failed",
+                status: verification.passed || !verificationConfigured ? "completed" : "failed",
                 summary: verification.passed
                     ? `${model} completed the task. Verifier passed.`
-                    : `${model} completed but verifier failed: ${verification.summary}`,
+                    : !verificationConfigured
+                        ? `${model} completed the task without verifier evidence; outcome is not VERIFIED.`
+                        : `${model} completed but verifier failed: ${verification.summary}`,
                 usage: normalizeOpenAiCompatibleUsage({
                     model,
                     tokensIn,
@@ -362,7 +365,7 @@ export function createOpenAiCompatibleAdapter(options) {
                 }),
                 verification,
                 execution,
-                ...(verification.passed ? {} : {
+                ...(verification.passed || !verificationConfigured ? {} : {
                     failure: { message: verification.summary }
                 })
             };

package/dist/vendor/adapters/stub-agent-cli.d.ts

@@ -0,0 +1,9 @@
+import type { MartinAdapter, MartinAdapterRequest, MartinAdapterResult } from "../core/index.js";
+export interface StubAgentCliAdapterOptions {
+    command: string[];
+    profile?: string;
+    label?: string;
+    responder?: (request: MartinAdapterRequest) => Promise<MartinAdapterResult> | MartinAdapterResult;
+}
+export declare function createStubAgentCliAdapter(options: StubAgentCliAdapterOptions): MartinAdapter;
+export { createStubDirectProviderAdapter, type StubDirectProviderAdapterOptions } from "./stub-direct-provider.js";