@martinloop/mcp 0.6.1 → 0.6.3

package/dist/package-version.d.ts

@@ -1 +1 @@
-export declare const MARTIN_MCP_PACKAGE_VERSION = "0.6.1";
+export declare const MARTIN_MCP_PACKAGE_VERSION = "0.6.3";

package/dist/package-version.js

@@ -1,3 +1,3 @@
 // Auto-generated by build — do not edit by hand.
 // Source of truth: packages/mcp/package.json#version
-export const MARTIN_MCP_PACKAGE_VERSION = "0.6.1";
+export const MARTIN_MCP_PACKAGE_VERSION = "0.6.3";

package/dist/vendor/adapters/codex-capabilities.d.ts

@@ -55,6 +55,8 @@ export interface CodexExecArgsOptions {
     autonomyResolution?: CodexAutonomyResolution;
 }
 type SpawnSyncLike = typeof spawnSync;
+export declare function markCodexAutonomyResolutionVerifiedByLaunchProbe(resolution: CodexAutonomyResolution): CodexAutonomyResolution;
+export declare function isCodexAutonomyResolutionVerifiedByLaunchProbe(resolution: CodexAutonomyResolution): boolean;
 export declare function clearCodexCapabilityCacheForTests(): void;
 export declare function cacheCodexCapabilityProfile(profile: CodexCapabilityProfile, platform?: NodeJS.Platform): CodexCapabilityProfile;
 export declare function probeCodexCapabilities(binaryPath: string, options?: {

package/dist/vendor/adapters/codex-capabilities.js

@@ -3,6 +3,14 @@ import { extname } from "node:path";
 import { createSpawnPlan, resolveNpmShimScript } from "./cli-bridge.js";
 import { DEFAULT_AGENT_EXECUTION_INTENT } from "../contracts/index.js";
 const capabilityCache = new Map();
+const launchProbeVerifiedAutonomyResolutions = new WeakSet();
+export function markCodexAutonomyResolutionVerifiedByLaunchProbe(resolution) {
+    launchProbeVerifiedAutonomyResolutions.add(resolution);
+    return resolution;
+}
+export function isCodexAutonomyResolutionVerifiedByLaunchProbe(resolution) {
+    return launchProbeVerifiedAutonomyResolutions.has(resolution);
+}
 function escapeRegex(value) {
     return value.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
 }
@@ -197,6 +205,20 @@ export function codexWriteStrategies(profile) {
 }
 export function resolveCodexAutonomyCandidates(profile, intent = DEFAULT_AGENT_EXECUTION_INTENT) {
     const candidates = [];
+    // Prefer the least-privileged advertised workspace-write mode. The launch
+    // probe still has final authority: it must prove an in-workspace write and
+    // prove the paired outside-workspace marker was denied before this
+    // resolution can be selected for a governed run.
+    if (profile.sandbox?.values.includes("workspace-write")) {
+        candidates.push({
+            binaryPath: profile.binaryPath,
+            intent,
+            strategy: "sandbox+approval",
+            sandboxValue: "workspace-write"
+        });
+    }
+    // Keep provider automation as a compatibility fallback. It is never trusted
+    // merely because it is advertised; the same boundary probe must prove it.
     if (profile.automation) {
         candidates.push({
             binaryPath: profile.binaryPath,

package/dist/vendor/adapters/codex-cli.js

@@ -1,6 +1,6 @@
 import { spawn } from "node:child_process";
 import { createAgentCliAdapter } from "./claude-cli.js";
-import { buildCodexExecArgs, buildCodexStdin, probeCodexCapabilities } from "./codex-launcher.js";
+import { buildCodexExecArgs, buildCodexStdin, isCodexAutonomyResolutionVerifiedByLaunchProbe, probeCodexCapabilities } from "./codex-launcher.js";
 import { createSpawnPlan } from "./cli-bridge.js";
 function createCodexSpawnRouter(input) {
     if (input.injectedSpawn) {
@@ -33,6 +33,9 @@ export function createCodexCliAdapter(options = {}) {
     if (autonomyResolution && autonomyResolution.binaryPath !== selectedBinary) {
         throw new Error("Codex exact binary autonomy resolution mismatch.");
     }
+    if (autonomyResolution && !isCodexAutonomyResolutionVerifiedByLaunchProbe(autonomyResolution)) {
+        throw new Error("Codex autonomy resolution was not verified by the launch probe.");
+    }
     const sandbox = options.sandbox ?? "workspace-write";
     const extraArgs = options.extraArgs ?? [];
     const launchModel = options.model;

package/dist/vendor/adapters/codex-launcher.d.ts

@@ -1,4 +1,5 @@
 import { type CodexExecArgsOptions } from "./codex-capabilities.js";
+import { probeCodexLaunch as probeCodexLaunchHost, type CodexLaunchProbeResult } from "./codex-host.js";
 /**
  * Compatibility facade for callers that still populate the original
  * `approval` profile field. Internally automation modes and approval policies
@@ -6,5 +7,11 @@ import { type CodexExecArgsOptions } from "./codex-capabilities.js";
  * builder without restoring any hard-coded flag assumption.
  */
 export declare function buildCodexExecArgs(options: CodexExecArgsOptions): string[];
-export { buildCodexStdin, cacheCodexCapabilityProfile, clearCodexCapabilityCacheForTests, codexWriteStrategies, probeCodexCapabilities, resolveCodexAutonomyCandidates, type CodexAutonomyResolution, type CodexApprovalCapability, type CodexCapabilityFlag, type CodexCapabilityProfile, type CodexExecArgsOptions, type CodexFlagScope, type CodexPromptTransport, type CodexSandboxCapability, type CodexWriteStrategy } from "./codex-capabilities.js";
-export { checkCodexSandboxPreflight, detectCodexHostPlatform, diagnoseCodexHost, probeCodexLaunch, probeFilesystemWriteCapability, resolveCliCommandAvailability, type CliCommandAvailability, type CodexHostDiagnosis, type CodexHostPlatform, type CodexInstallKind, type CodexInvocationMode, type CodexLaunchProbeResult, type CodexProbeCandidateResult, type CodexSandboxPreflightOk, type CodexSandboxPreflightOutcome, type CodexSandboxPreflightReadOnly } from "./codex-host.js";
+/**
+ * Public launch-probe facade. Only a successful probe may brand an autonomy
+ * resolution as safe for adapter execution; structurally similar objects
+ * supplied directly by callers remain untrusted.
+ */
+export declare function probeCodexLaunch(input: Parameters<typeof probeCodexLaunchHost>[0]): CodexLaunchProbeResult;
+export { buildCodexStdin, cacheCodexCapabilityProfile, clearCodexCapabilityCacheForTests, codexWriteStrategies, isCodexAutonomyResolutionVerifiedByLaunchProbe, probeCodexCapabilities, resolveCodexAutonomyCandidates, type CodexAutonomyResolution, type CodexApprovalCapability, type CodexCapabilityFlag, type CodexCapabilityProfile, type CodexExecArgsOptions, type CodexFlagScope, type CodexPromptTransport, type CodexSandboxCapability, type CodexWriteStrategy } from "./codex-capabilities.js";
+export { checkCodexSandboxPreflight, detectCodexHostPlatform, diagnoseCodexHost, probeFilesystemWriteCapability, resolveCliCommandAvailability, type CliCommandAvailability, type CodexHostDiagnosis, type CodexHostPlatform, type CodexInstallKind, type CodexInvocationMode, type CodexLaunchProbeResult, type CodexProbeCandidateResult, type CodexSandboxPreflightOk, type CodexSandboxPreflightOutcome, type CodexSandboxPreflightReadOnly } from "./codex-host.js";

package/dist/vendor/adapters/codex-launcher.js

@@ -1,4 +1,5 @@
-import { buildCodexExecArgs as buildCapabilityDrivenCodexExecArgs } from "./codex-capabilities.js";
+import { buildCodexExecArgs as buildCapabilityDrivenCodexExecArgs, markCodexAutonomyResolutionVerifiedByLaunchProbe } from "./codex-capabilities.js";
+import { probeCodexLaunch as probeCodexLaunchHost } from "./codex-host.js";
 /**
  * Compatibility facade for callers that still populate the original
  * `approval` profile field. Internally automation modes and approval policies
@@ -18,5 +19,17 @@ export function buildCodexExecArgs(options) {
         capabilityProfile: normalizedProfile
     });
 }
-export { buildCodexStdin, cacheCodexCapabilityProfile, clearCodexCapabilityCacheForTests, codexWriteStrategies, probeCodexCapabilities, resolveCodexAutonomyCandidates } from "./codex-capabilities.js";
-export { checkCodexSandboxPreflight, detectCodexHostPlatform, diagnoseCodexHost, probeCodexLaunch, probeFilesystemWriteCapability, resolveCliCommandAvailability } from "./codex-host.js";
+/**
+ * Public launch-probe facade. Only a successful probe may brand an autonomy
+ * resolution as safe for adapter execution; structurally similar objects
+ * supplied directly by callers remain untrusted.
+ */
+export function probeCodexLaunch(input) {
+    const result = probeCodexLaunchHost(input);
+    if (result.ok && result.autonomyResolution) {
+        markCodexAutonomyResolutionVerifiedByLaunchProbe(result.autonomyResolution);
+    }
+    return result;
+}
+export { buildCodexStdin, cacheCodexCapabilityProfile, clearCodexCapabilityCacheForTests, codexWriteStrategies, isCodexAutonomyResolutionVerifiedByLaunchProbe, probeCodexCapabilities, resolveCodexAutonomyCandidates } from "./codex-capabilities.js";
+export { checkCodexSandboxPreflight, detectCodexHostPlatform, diagnoseCodexHost, probeFilesystemWriteCapability, resolveCliCommandAvailability } from "./codex-host.js";

package/package.json

@@ -1,16 +1,16 @@
 {
   "name": "@martinloop/mcp",
-  "version": "0.6.1",
+  "version": "0.6.3",
   "mcpName": "io.github.Keesan12/martin-loop",
   "private": false,
   "type": "module",
-  "description": "MCP server for AI coding agents — verifier gates, stop limits, and Verified Handoffs.",
+  "description": "MCP server for AI coding agents — verifier gates, stop limits, and Verified Handoffs.",
   "license": "Apache-2.0",
   "author": "MartinLoop contributors",
   "homepage": "https://martinloop.com/",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/Keesan12/martin-loop.git",
+    "url": "https://github.com/Keesan12/martin-loop",
     "directory": "packages/mcp"
   },
   "bugs": {
@@ -41,11 +41,6 @@
     "martin-loop-mcp": "./dist/server.js"
   },
   "exports": {
-    ".": {
-      "types": "./dist/server.d.ts",
-      "import": "./dist/server.js",
-      "default": "./dist/server.js"
-    },
     "./server.json": "./server.json",
     "./package.json": "./package.json"
   },
@@ -79,12 +74,12 @@
     "mcpb:smoke": "node ./mcpb/smoke-mcpb.mjs"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "1.29.0",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "@open-policy-agent/opa-wasm": "^1.10.0",
-    "@opentelemetry/api-logs": "^0.221.0",
-    "@opentelemetry/exporter-logs-otlp-http": "^0.221.0",
-    "@opentelemetry/resources": "^2.10.0",
-    "@opentelemetry/sdk-logs": "^0.221.0",
+    "@opentelemetry/api-logs": "^0.214.0",
+    "@opentelemetry/exporter-logs-otlp-http": "^0.214.0",
+    "@opentelemetry/resources": "^2.6.1",
+    "@opentelemetry/sdk-logs": "^0.214.0",
     "ts-morph": "^21.0.0"
   },
   "devDependencies": {

package/server.json

@@ -7,12 +7,12 @@
     "url": "https://github.com/Keesan12/martin-loop",
     "source": "github"
   },
-  "version": "0.6.1",
+  "version": "0.6.3",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@martinloop/mcp",
-      "version": "0.6.1",
+      "version": "0.6.3",
       "transport": {
         "type": "stdio"
       }