Skip to content

Keesan12/Martin-Loop

v0.3.18 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-runtime ai-agent-runtime ai-coding-agents ai-control-plane ai-governance ai-safety
+13 more
audit-trail budget-enforcement claude-code codex coding-agents control-plane governed-runtime llmops mcp model-context-protocol observability policy-as-code rollback

Summary

AI summary

MCP transport gains HTTP support and a mode‑status resource.

Full changelog

Added

  • MCP HTTP transport — the standalone MCP server now supports --http, --host, --port, and --path for local bridge and proxy setups, while keeping stdio as the default host transport.
  • martin://agent/mode-status MCP resource — agents can now read the current MartinLoop mode (auto, plan, edits), whether it came from a project override or global default, and the exact commands to switch it.

Fixed

  • Codex session-start stays fastsession-start and phase session-start no longer perform a live Codex launch probe during diagnostics. They now report static host readiness immediately and point operators to martin preflight for the live launch check.
  • Claude budget caps harden against large-context overshoot — governed Claude launches now pass the remaining token budget through to the subprocess, tighten the streaming guardrail for very large prompts, and terminate single turns that consume more than half of the remaining per-attempt budget.
  • Codex governed coverage now reflects real host behavior — Codex integration tests no longer rely on fake subprocess shims. Live Codex tests probe real CLI availability and skip cleanly when Codex is not installed.
  • Frozen pnpm installs are valid again on pnpm 10 — workspace overrides now live in pnpm-workspace.yaml, which keeps pnpm install --frozen-lockfile aligned locally and in GitHub Actions.
  • Release installs no longer stall on interactive build approvalspnpm-workspace.yaml now explicitly approves the required esbuild and protobufjs build scripts, so CI and local frozen installs share the same non-interactive dependency policy.
  • POSIX public release smoke runs now execute the fake Codex shim correctly — the release harness marks its temporary codex binary executable on Linux and macOS, so the root package publish gate validates the same governed smoke path across local packs and GitHub Actions.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Keesan12/Martin-Loop

Get notified when new releases ship.

Sign up free

About Keesan12/Martin-Loop

All releases →

Related context

Earlier breaking changes

  • vmcp-v0.1.3 martin_status uses oneOf for selector exclusivity, latest as const.
  • vmcp-v0.1.3 maxIterations and maxTokens modeled as integers in tool schemas.
  • vmcp-v0.1.3 Tool schemas enforce additionalProperties: false on public contracts.
  • vmcp-v0.1.3 Packaged artifacts now require and ship server.json alongside package.json.

Beta — feedback welcome: [email protected]