@martinloop/mcp 0.8.0 → 0.8.1

package/dist/package-version.d.ts

@@ -1 +1 @@
-export declare const MARTIN_MCP_PACKAGE_VERSION = "0.8.0";
+export declare const MARTIN_MCP_PACKAGE_VERSION = "0.8.1";

package/dist/package-version.js

@@ -1,3 +1,3 @@
 // Auto-generated by build — do not edit by hand.
 // Source of truth: packages/mcp/package.json#version
-export const MARTIN_MCP_PACKAGE_VERSION = "0.8.0";
+export const MARTIN_MCP_PACKAGE_VERSION = "0.8.1";

package/dist/vendor/adapters/claude-cli.d.ts

@@ -63,6 +63,11 @@ export interface AgentCliAdapterOptions {
     streamingTokenCap?: boolean;
     /** Provider detail-token fields are already included in input/output token totals. */
     streamingUsageDetailsIncludedInTotals?: boolean;
+    /** Estimated floor used by the host to reject impossible token caps before spawning. */
+    budgetPreflight?: {
+        minimumViableTokens: number;
+        basis: string;
+    };
     /** Test-only override for subprocess spawning. */
     spawnImpl?: SpawnLike;
 }

package/dist/vendor/adapters/claude-cli.js

@@ -675,6 +675,7 @@ export function createAgentCliAdapter(options) {
             transport: "cli",
             agentExecutionIntent,
             providerExecutionTimeoutMs: timeoutMs,
+            ...(options.budgetPreflight ? { budgetPreflight: options.budgetPreflight } : {}),
             capabilities: createAdapterCapabilities({
                 preflight: true,
                 usageSettlement: supportsUsageSettlement,

package/dist/vendor/adapters/codex-capabilities.d.ts

@@ -1,6 +1,6 @@
 import { spawnSync } from "node:child_process";
 import { type AgentExecutionIntent } from "../contracts/index.js";
-export type CodexFlagScope = "global" | "exec";
+export type CodexFlagScope = "global" | "exec" | "sandbox";
 export type CodexPromptTransport = "stdin-dash" | "argv";
 export type CodexWriteStrategy = "sandbox+approval" | "automation";
 export interface CodexCapabilityFlag {
@@ -26,6 +26,8 @@ export interface CodexCapabilityProfile {
     supportsExec: boolean;
     probeSucceeded: boolean;
     probeError?: string;
+    config?: CodexCapabilityFlag;
+    sandboxConfig?: CodexCapabilityFlag;
     model?: CodexCapabilityFlag;
     cwd?: CodexCapabilityFlag;
     sandbox?: CodexSandboxCapability;
@@ -44,6 +46,7 @@ export interface CodexCapabilityProfile {
 export interface CodexExecArgsOptions {
     command?: string;
     workingDirectory: string;
+    platform?: NodeJS.Platform;
     sandbox?: "read-only" | "workspace-write" | "danger-full-access";
     model?: string;
     extraArgs?: string[];

package/dist/vendor/adapters/codex-capabilities.js

@@ -134,8 +134,18 @@ export function probeCodexCapabilities(binaryPath, options = {}) {
         spawnSyncImpl,
         injected
     });
+    const sandboxProbe = platform === "win32"
+        ? runHelpProbe({
+            binaryPath,
+            args: ["sandbox", "--help"],
+            platform,
+            spawnSyncImpl,
+            injected
+        })
+        : { text: "", status: null };
     const globalHelp = globalProbe.text;
     const execHelp = execProbe.text;
+    const sandboxCommandHelp = sandboxProbe.text;
     const supportsExec = execProbe.status === 0 &&
         !/(unknown command|unrecognized subcommand|unexpected argument ['"]?exec)/iu.test(execHelp);
     const sandboxFlag = locateFlag(globalHelp, execHelp, ["--sandbox", "-s"]);
@@ -160,7 +170,8 @@ export function probeCodexCapabilities(binaryPath, options = {}) {
         ? `${flagContext(globalHelp, colorFlag.flag)}\n${flagContext(execHelp, colorFlag.flag)}`
         : "";
     const promptTransports = parsePromptTransports(execHelp);
-    const probeError = globalProbe.error ?? execProbe.error;
+    const probeError = globalProbe.error ?? execProbe.error ?? sandboxProbe.error;
+    const sandboxConfigFlag = ["--config", "-c"].find((flag) => flagPattern(flag).test(sandboxCommandHelp));
     const profile = {
         binaryPath,
         supportsExec,
@@ -169,6 +180,12 @@ export function probeCodexCapabilities(binaryPath, options = {}) {
         ...(locateFlag(globalHelp, execHelp, ["--model", "-m"])
             ? { model: locateFlag(globalHelp, execHelp, ["--model", "-m"]) }
             : {}),
+        ...(locateFlag(globalHelp, execHelp, ["--config", "-c"])
+            ? { config: locateFlag(globalHelp, execHelp, ["--config", "-c"]) }
+            : {}),
+        ...(sandboxConfigFlag
+            ? { sandboxConfig: { flag: sandboxConfigFlag, scope: "sandbox" } }
+            : {}),
         ...(locateFlag(globalHelp, execHelp, ["--cd", "--cwd", "--working-dir", "-C"])
             ? { cwd: locateFlag(globalHelp, execHelp, ["--cd", "--cwd", "--working-dir", "-C"]) }
             : {}),
@@ -242,18 +259,33 @@ export function buildCodexExecArgs(options) {
     if (options.mode !== "probe" && !resolution) {
         throw new Error(`Resolved Codex binary ${profile.binaryPath} has no negotiated governed-autonomous execution resolution.`);
     }
-    const permissionFlags = [profile.sandbox?.flag, profile.automation?.flag, profile.approvalPolicy?.flag]
+    const controlledFlags = [
+        profile.sandbox?.flag,
+        profile.automation?.flag,
+        profile.approvalPolicy?.flag,
+        profile.config?.flag
+    ]
         .filter((value) => Boolean(value));
-    if ((options.extraArgs ?? []).some((arg) => arg === "danger-full-access" || permissionFlags.some((flag) => arg === flag || arg.startsWith(`${flag}=`)))) {
-        throw new Error("Permission and sandbox controls cannot be supplied through extraArgs.");
+    if ((options.extraArgs ?? []).some((arg) => {
+        const isReservedConfig = arg === "--config" ||
+            arg.startsWith("--config=") ||
+            arg === "-c" ||
+            (arg.startsWith("-c") && arg.length > 2);
+        return arg === "danger-full-access" || isReservedConfig || controlledFlags.some((flag) => arg === flag || arg.startsWith(`${flag}=`));
+    })) {
+        throw new Error("Permission, sandbox, and configuration controls cannot be supplied through extraArgs.");
     }
     const globalArgs = [];
     const execArgs = [];
+    const platform = options.platform ?? process.platform;
     const requestedSandbox = options.sandbox ?? "workspace-write";
     const strategy = resolution?.strategy ?? options.writeStrategy;
     const promptTransport = options.promptTransport ?? profile.promptTransport;
     if (profile.userConfigIsolation)
         pushCapabilityArg(globalArgs, execArgs, profile.userConfigIsolation);
+    if (platform === "win32" && profile.userConfigIsolation && profile.config) {
+        pushCapabilityArg(globalArgs, execArgs, profile.config, 'windows.sandbox="elevated"');
+    }
     if (profile.cwd)
         pushCapabilityArg(globalArgs, execArgs, profile.cwd, options.workingDirectory);
     if (requestedSandbox === "workspace-write") {

package/dist/vendor/adapters/codex-cli.d.ts

@@ -1,5 +1,12 @@
 import { type CodexCliAdapterOptions as LegacyCodexCliAdapterOptions } from "./claude-cli.js";
 import { type CodexAutonomyResolution, type CodexCapabilityProfile } from "./codex-launcher.js";
+/**
+ * Conservative admission floor for one Codex CLI turn. Codex reports token
+ * usage in turn.completed, after the first turn has already consumed context,
+ * so smaller explicit caps cannot be enforced before spend.
+ */
+export declare const CODEX_MINIMUM_VIABLE_TOKEN_BUDGET = 128000;
+export declare const CODEX_TOKEN_BUDGET_PREFLIGHT_BASIS = "codex_first_turn_usage_reports_after_completion";
 export interface CodexCliAdapterOptions extends Omit<LegacyCodexCliAdapterOptions, "command"> {
     /** Exact resolved executable selected by the Codex launch probe. */
     command?: string;

package/dist/vendor/adapters/codex-cli.js

@@ -1,5 +1,12 @@
 import { createAgentCliAdapter } from "./claude-cli.js";
 import { buildCodexExecArgs, buildCodexStdin, isCodexAutonomyResolutionVerifiedByLaunchProbe, probeCodexCapabilities } from "./codex-launcher.js";
+/**
+ * Conservative admission floor for one Codex CLI turn. Codex reports token
+ * usage in turn.completed, after the first turn has already consumed context,
+ * so smaller explicit caps cannot be enforced before spend.
+ */
+export const CODEX_MINIMUM_VIABLE_TOKEN_BUDGET = 128_000;
+export const CODEX_TOKEN_BUDGET_PREFLIGHT_BASIS = "codex_first_turn_usage_reports_after_completion";
 /**
  * Capability-driven Codex CLI adapter.
  *
@@ -44,6 +51,10 @@ export function createCodexCliAdapter(options = {}) {
         streamingUsageCap: true,
         streamingTokenCap: true,
         streamingUsageDetailsIncludedInTotals: true,
+        budgetPreflight: {
+            minimumViableTokens: CODEX_MINIMUM_VIABLE_TOKEN_BUDGET,
+            basis: CODEX_TOKEN_BUDGET_PREFLIGHT_BASIS
+        },
         spawnImpl: options.spawnImpl,
         argsBuilder: (prompt) => buildCodexExecArgs({
             command: selectedBinary,

package/dist/vendor/adapters/codex-host.js

@@ -319,8 +319,14 @@ function buildLocalSandboxProbeArgs(input) {
         "  if (!error || !['EACCES', 'EPERM', 'EROFS'].includes(error.code)) throw error;",
         "}"
     ].join("\n");
+    const windowsSandboxConfig = input.platform === "win32" &&
+        input.capabilityProfile.userConfigIsolation &&
+        input.capabilityProfile.sandboxConfig
+        ? [input.capabilityProfile.sandboxConfig.flag, 'windows.sandbox="elevated"']
+        : [];
     return [
         "sandbox",
+        ...windowsSandboxConfig,
         "--permission-profile",
         ":workspace",
         "-C",
@@ -442,6 +448,21 @@ export function probeCodexLaunch(input) {
             });
             continue;
         }
+        if (platform === "win32" && profile.userConfigIsolation && (!profile.config || !profile.sandboxConfig)) {
+            const summary = "Resolved Codex binary does not advertise configuration override support for both exec and sandbox; cannot prove isolated native Windows workspace writes.";
+            lastFailure = { candidate, profile, args: [], summary };
+            candidateResults.push({
+                path: candidate.path,
+                installKind: candidate.diagnosis.installKind,
+                invocationMode: candidate.diagnosis.invocationMode,
+                nativeInstallValid: true,
+                sandboxCompatible: false,
+                launchReady: false,
+                summary,
+                capabilityProfile: profile
+            });
+            continue;
+        }
         const transport = profile.promptTransports?.[0] ?? profile.promptTransport;
         const resolution = resolveCodexAutonomyCandidates(profile)[0];
         let candidateSummary = "No advertised Codex invocation strategy supports governed workspace writes.";
@@ -470,7 +491,9 @@ export function probeCodexLaunch(input) {
         const args = buildLocalSandboxProbeArgs({
             workingDirectory: input.workingDirectory,
             markerPath,
-            outsideMarkerPath
+            outsideMarkerPath,
+            platform,
+            capabilityProfile: profile
         });
         const plan = input.spawnSyncImpl
             ? buildInjectedSpawnPlan(candidate.path, args, platform)

package/dist/vendor/adapters/index.d.ts

@@ -1,6 +1,6 @@
 export { createDirectProviderAdapter, type DirectProviderAdapterOptions } from "./direct-provider.js";
 export { createAgentCliAdapter, createClaudeCliAdapter, createGeminiCliAdapter, type AgentCliAdapterOptions, type ClaudeCliAdapterOptions, type GeminiCliAdapterOptions, type CliArgsBuilder } from "./claude-cli.js";
-export { createCodexCliAdapter, type CodexCliAdapterOptions } from "./codex-cli.js";
+export { createCodexCliAdapter, CODEX_MINIMUM_VIABLE_TOKEN_BUDGET, CODEX_TOKEN_BUDGET_PREFLIGHT_BASIS, type CodexCliAdapterOptions } from "./codex-cli.js";
 export { createOpenAiCompatibleAdapter, resolveOpenAiCompatibleRuntimeConfig, type OpenAiCompatibleAdapterOptions } from "./openai-compatible.js";
 export { createSwarmVerifierExecutor, createVerifierOnlyAdapter, type SwarmVerifierExecutorOptions, type VerifierOnlyAdapterOptions } from "./verifier-only.js";
 /** @internal Test-only compatibility export. Public package builders strip this surface. */

package/dist/vendor/adapters/index.js

@@ -1,6 +1,6 @@
 export { createDirectProviderAdapter } from "./direct-provider.js";
 export { createAgentCliAdapter, createClaudeCliAdapter, createGeminiCliAdapter } from "./claude-cli.js";
-export { createCodexCliAdapter } from "./codex-cli.js";
+export { createCodexCliAdapter, CODEX_MINIMUM_VIABLE_TOKEN_BUDGET, CODEX_TOKEN_BUDGET_PREFLIGHT_BASIS } from "./codex-cli.js";
 export { createOpenAiCompatibleAdapter, resolveOpenAiCompatibleRuntimeConfig } from "./openai-compatible.js";
 export { createSwarmVerifierExecutor, createVerifierOnlyAdapter } from "./verifier-only.js";
 /** @internal Test-only compatibility export. Public package builders strip this surface. */

package/dist/vendor/contracts/index.d.ts

@@ -368,6 +368,10 @@ export interface BudgetPreflightEstimate {
     estimatedPromptTokens: number;
     estimatedToolOverheadTokens: number;
     estimatedOutputTokensMax: number;
+    /** Provider-specific minimum viable first-turn envelope, never actual usage. */
+    estimatedMinimumViableTokens: number;
+    /** Largest of the generic attempt estimate and provider minimum. */
+    estimatedTotalTokens: number;
     estimatedVerifierCostUsd: number;
     estimatedAttemptCostUsd: number;
     provenance: CostProvenance;

package/dist/vendor/core/index.d.ts

@@ -177,6 +177,11 @@ export interface MartinAdapter {
         providerId: string;
         model?: string;
         transport?: "cli" | "http" | "routed_http";
+        budgetPreflight?: {
+            /** Estimated token floor required before the adapter can report first-turn usage. */
+            minimumViableTokens?: number;
+            basis?: string;
+        };
         capabilities?: {
             preflight?: boolean;
             usageSettlement?: boolean;

package/dist/vendor/core/index.js

@@ -600,6 +600,8 @@ export async function runMartin(input) {
                 promptCharCount: distilled.focus.length + loop.task.objective.length * 3,
                 attemptCount: loop.attempts.length,
                 remainingBudgetUsd: distilled.constraints.remainingBudgetUsd,
+                remainingTokens: distilled.constraints.remainingTokens,
+                minimumViableTokens: executingAdapter.metadata.budgetPreflight?.minimumViableTokens,
                 perAttemptCapUsd: loop.budget.maxUsd * 0.25
             });
             if (!budgetPreflight.allowed) {

package/dist/vendor/core/policy.d.ts

@@ -103,6 +103,9 @@ export interface BudgetPreflightInput {
     promptCharCount: number;
     attemptCount: number;
     remainingBudgetUsd: number;
+    remainingTokens?: number;
+    /** Adapter-declared estimated floor required to admit a credible first turn. */
+    minimumViableTokens?: number;
     perAttemptCapUsd?: number;
     pricePerMTokenUsd?: number;
 }

package/dist/vendor/core/policy.js

@@ -365,6 +365,8 @@ export function evaluateBudgetPreflight(input) {
     const estimatedPromptTokens = Math.ceil(rawPromptTokens * 1.2);
     const estimatedToolOverheadTokens = 800 + input.attemptCount * 200;
     const estimatedOutputTokensMax = 4_000;
+    const estimatedMinimumViableTokens = Math.max(0, input.minimumViableTokens ?? 0);
+    const estimatedTotalTokens = Math.max(estimatedPromptTokens + estimatedToolOverheadTokens + estimatedOutputTokensMax, estimatedMinimumViableTokens);
     const estimatedVerifierCostUsd = 0.01;
     const estimatedAttemptCostUsd = roundUsd(((estimatedPromptTokens + estimatedToolOverheadTokens + estimatedOutputTokensMax) /
         1_000_000) *
@@ -374,10 +376,21 @@ export function evaluateBudgetPreflight(input) {
         estimatedPromptTokens,
         estimatedToolOverheadTokens,
         estimatedOutputTokensMax,
+        estimatedMinimumViableTokens,
+        estimatedTotalTokens,
         estimatedVerifierCostUsd,
         estimatedAttemptCostUsd,
         provenance
     };
+    if (input.remainingTokens !== undefined
+        && estimatedMinimumViableTokens > 0
+        && estimatedTotalTokens > input.remainingTokens) {
+        return {
+            allowed: false,
+            reason: `Preflight: ${String(estimatedTotalTokens)} estimated tokens exceed ${String(input.remainingTokens)} remaining tokens.`,
+            estimate
+        };
+    }
     if (estimatedAttemptCostUsd > input.remainingBudgetUsd) {
         return {
             allowed: false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@martinloop/mcp",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "mcpName": "io.github.Keesan12/martin-loop",
   "private": false,
   "type": "module",

package/server.json

@@ -7,12 +7,12 @@
     "url": "https://github.com/Keesan12/martin-loop",
     "source": "github"
   },
-  "version": "0.8.0",
+  "version": "0.8.1",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@martinloop/mcp",
-      "version": "0.8.0",
+      "version": "0.8.1",
       "transport": {
         "type": "stdio"
       }