Skip to content

Keesan12/Martin-Loop

v0.3.8 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-runtime ai-agent-runtime ai-coding-agents ai-control-plane ai-governance ai-safety
+13 more
audit-trail budget-enforcement claude-code codex coding-agents control-plane governed-runtime llmops mcp model-context-protocol observability policy-as-code rollback

Affected surfaces

breaking_upgrade

Summary

AI summary

Fixed budget circuit breaker mis‑match causing overspend and added automatic shell operator handling in verify commands.

Full changelog

What's in this release

Budget Circuit Breaker (Critical Fix)

The streaming usage inspector previously only matched type=assistant events from Claude's stream-json output. When the event shape didn't match, the inspector silently did nothing — the subprocess ran to completion with no mid-stream budget check. In production, this caused a $28 spend on a $1.50 budget.

Now fixed:

  • Matches usage fields on any event type, not just assistant
  • Checks total_cost_usd on every event for authoritative mid-stream cost
  • Triggers at 80% of cap to bound single-turn overshoot
  • Falls back to a byte-ceiling kill switch when no usage events arrive

Shell Operators in Verify Commands

bun run lint && bun run test was tokenized literally — the && was passed as an argument. Commands with shell operators (&&, ||, ;, |) now route through the platform shell automatically.

Engine Auto-Discovery

If claude, codex, or gemini isn't on PATH, the CLI now searches common install directories (npm global, homebrew, .local/bin, nvm, scoop) before reporting unavailable. When truly missing, prints a copy-pasteable install command.

Verification Diagnostic Hints

Failed attempts now carry specific context into the next attempt's prompt: which tool is missing, which module failed to resolve, how many assertions broke. Replaces the previous generic "Verification did not pass" message.

Other Improvements

  • Git operations retry once after 500ms for lock-file contention
  • git restore falls back to git checkout on failure
  • Invalid --profile warns and defaults to minimal instead of crashing
  • Default verifier timeout increased to 120s (from 60s)

Install

npm install -g [email protected]

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Keesan12/Martin-Loop

Get notified when new releases ship.

Sign up free

About Keesan12/Martin-Loop

All releases →

Related context

Earlier breaking changes

  • vmcp-v0.1.3 martin_status uses oneOf for selector exclusivity, latest as const.
  • vmcp-v0.1.3 maxIterations and maxTokens modeled as integers in tool schemas.
  • vmcp-v0.1.3 Tool schemas enforce additionalProperties: false on public contracts.
  • vmcp-v0.1.3 Packaged artifacts now require and ship server.json alongside package.json.

Beta — feedback welcome: [email protected]