@martinloop/mcp 0.8.9 → 0.9.0

package/dist/vendor/core/verified-handoff.js

@@ -1,6 +1,7 @@
 // SPDX-FileCopyrightText: MartinLoop contributors
 // SPDX-License-Identifier: Apache-2.0
 import { createHash } from "node:crypto";
+import { posix, win32 } from "node:path";
 // ---------------------------------------------------------------------------
 // Mapping: granular TestIntegrityStatus → public TestIntegrityVerdict
 //
@@ -88,6 +89,65 @@ export function deriveVerifiedHandoffLifecycleTruth(loop) {
         evidenceAvailable: true,
     };
 }
+function sameOptionalVerifierFilesystemPath(actual, expected) {
+    if (actual === undefined || expected === undefined) {
+        return actual === expected;
+    }
+    return sameVerifierFilesystemPath(actual, expected);
+}
+function classifyVerifierFilesystemPath(value) {
+    // Persisted Windows bindings are expected to be drive-absolute or UNC.
+    // Do not use win32.isAbsolute() here because it also classifies POSIX-style
+    // root paths such as "/repo" as Windows root-relative paths.
+    if (/^[A-Za-z]:[\\/]/u.test(value) || /^\\\\/u.test(value) || /^\/\//u.test(value)) {
+        return "windows";
+    }
+    if (value.startsWith("/")) {
+        return "posix";
+    }
+    return "relative";
+}
+function stripTrailingVerifierSeparators(value, kind) {
+    if (kind === "windows") {
+        // Preserve drive roots (C:\\) and UNC share roots while removing harmless
+        // trailing separators from ordinary persisted paths.
+        if (/^[a-z]:\\$/iu.test(value) || /^\\\\[^\\]+\\[^\\]+\\?$/u.test(value)) {
+            return value;
+        }
+        return value.replace(/[\\/]+$/u, "");
+    }
+    if (kind === "posix") {
+        return value === "/" ? value : value.replace(/\/+$/u, "");
+    }
+    return value;
+}
+function normalizeVerifierFilesystemPath(value) {
+    const kind = classifyVerifierFilesystemPath(value);
+    if (kind === "windows") {
+        return {
+            kind,
+            value: stripTrailingVerifierSeparators(win32.normalize(value), kind).toLowerCase(),
+        };
+    }
+    if (kind === "posix") {
+        return {
+            kind,
+            value: stripTrailingVerifierSeparators(posix.normalize(value), kind),
+        };
+    }
+    // Relative verifier bindings are legacy/non-canonical. Normalize only their
+    // separators/dot segments and keep comparison case-sensitive/fail-closed.
+    return {
+        kind,
+        value: stripTrailingVerifierSeparators(posix.normalize(value.replace(/\\/gu, "/")), kind),
+    };
+}
+function sameVerifierFilesystemPath(actual, expected) {
+    const normalizedActual = normalizeVerifierFilesystemPath(actual);
+    const normalizedExpected = normalizeVerifierFilesystemPath(expected);
+    return (normalizedActual.kind === normalizedExpected.kind &&
+        normalizedActual.value === normalizedExpected.value);
+}
 export function verifierActuallyPassed(evidence, expected) {
     if (!evidence?.passed || !evidence.binding || !evidence.steps) {
         return false;
@@ -98,8 +158,8 @@ export function verifierActuallyPassed(evidence, expected) {
     if (evidence.binding.runId !== expected.runId ||
         evidence.binding.workspaceId !== expected.workspaceId ||
         (evidence.binding.attemptId ?? undefined) !== (expected.attemptId ?? undefined) ||
-        evidence.binding.cwd !== expected.cwd ||
-        (evidence.binding.runsRoot ?? undefined) !== (expected.runsRoot ?? undefined) ||
+        !sameVerifierFilesystemPath(evidence.binding.cwd, expected.cwd) ||
+        !sameOptionalVerifierFilesystemPath(evidence.binding.runsRoot, expected.runsRoot) ||
         (evidence.binding.executionProfile ?? undefined) !== (expected.executionProfile ?? undefined) ||
         JSON.stringify(evidence.binding.allowedNetworkDomains ?? []) !== JSON.stringify(expected.allowedNetworkDomains ?? []) ||
         JSON.stringify(evidence.binding.commands) !== JSON.stringify(expected.commands)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@martinloop/mcp",
-  "version": "0.8.9",
+  "version": "0.9.0",
   "mcpName": "io.github.Keesan12/martin-loop",
   "private": false,
   "type": "module",
@@ -74,13 +74,9 @@
     "mcpb:smoke": "node ./mcpb/smoke-mcpb.mjs"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@modelcontextprotocol/sdk": "^1.32.2",
     "@open-policy-agent/opa-wasm": "^1.10.0",
-    "@opentelemetry/api-logs": "^0.214.0",
-    "@opentelemetry/exporter-logs-otlp-http": "^0.214.0",
-    "@opentelemetry/resources": "^2.6.1",
-    "@opentelemetry/sdk-logs": "^0.214.0",
-    "ts-morph": "^21.0.0"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@anthropic-ai/mcpb": "2.1.2",

package/server.json

@@ -7,12 +7,12 @@
     "url": "https://github.com/Keesan12/martin-loop",
     "source": "github"
   },
-  "version": "0.8.9",
+  "version": "0.9.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@martinloop/mcp",
-      "version": "0.8.9",
+      "version": "0.9.0",
       "transport": {
         "type": "stdio"
       }