This release adds 2 notable features for engineering teams evaluating rollout.
Published 1mo
AI Agents & Assistants
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
agent-runtime
ai-agent-runtime
ai-coding-agents
ai-control-plane
ai-governance
ai-safety
+13 more
audit-trail
budget-enforcement
claude-code
codex
coding-agents
control-plane
governed-runtime
llmops
mcp
model-context-protocol
observability
policy-as-code
rollback
Summary
AI summaryMCP transport gains HTTP support and a mode‑status resource.
Full changelog
Added
- MCP HTTP transport — the standalone MCP server now supports
--http,--host,--port, and--pathfor local bridge and proxy setups, while keeping stdio as the default host transport. martin://agent/mode-statusMCP resource — agents can now read the current MartinLoop mode (auto,plan,edits), whether it came from a project override or global default, and the exact commands to switch it.
Fixed
- Codex session-start stays fast —
session-startandphase session-startno longer perform a live Codex launch probe during diagnostics. They now report static host readiness immediately and point operators tomartin preflightfor the live launch check. - Claude budget caps harden against large-context overshoot — governed Claude launches now pass the remaining token budget through to the subprocess, tighten the streaming guardrail for very large prompts, and terminate single turns that consume more than half of the remaining per-attempt budget.
- Codex governed coverage now reflects real host behavior — Codex integration tests no longer rely on fake subprocess shims. Live Codex tests probe real CLI availability and skip cleanly when Codex is not installed.
- Frozen pnpm installs are valid again on pnpm 10 — workspace overrides now live in
pnpm-workspace.yaml, which keepspnpm install --frozen-lockfilealigned locally and in GitHub Actions. - Release installs no longer stall on interactive build approvals —
pnpm-workspace.yamlnow explicitly approves the requiredesbuildandprotobufjsbuild scripts, so CI and local frozen installs share the same non-interactive dependency policy. - POSIX public release smoke runs now execute the fake Codex shim correctly — the release harness marks its temporary
codexbinary executable on Linux and macOS, so the root package publish gate validates the same governed smoke path across local packs and GitHub Actions.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Keesan12/Martin-Loop
All releases →Related context
Related tools
Earlier breaking changes
- vmcp-v0.1.3 martin_status uses oneOf for selector exclusivity, latest as const.
- vmcp-v0.1.3 maxIterations and maxTokens modeled as integers in tool schemas.
- vmcp-v0.1.3 Tool schemas enforce additionalProperties: false on public contracts.
- vmcp-v0.1.3 Packaged artifacts now require and ship server.json alongside package.json.
Beta — feedback welcome: [email protected]