This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+13 more
Affected surfaces
Summary
AI summaryFixed budget circuit breaker mis‑match causing overspend and added automatic shell operator handling in verify commands.
Full changelog
What's in this release
Budget Circuit Breaker (Critical Fix)
The streaming usage inspector previously only matched type=assistant events from Claude's stream-json output. When the event shape didn't match, the inspector silently did nothing — the subprocess ran to completion with no mid-stream budget check. In production, this caused a $28 spend on a $1.50 budget.
Now fixed:
- Matches usage fields on any event type, not just
assistant - Checks
total_cost_usdon every event for authoritative mid-stream cost - Triggers at 80% of cap to bound single-turn overshoot
- Falls back to a byte-ceiling kill switch when no usage events arrive
Shell Operators in Verify Commands
bun run lint && bun run test was tokenized literally — the && was passed as an argument. Commands with shell operators (&&, ||, ;, |) now route through the platform shell automatically.
Engine Auto-Discovery
If claude, codex, or gemini isn't on PATH, the CLI now searches common install directories (npm global, homebrew, .local/bin, nvm, scoop) before reporting unavailable. When truly missing, prints a copy-pasteable install command.
Verification Diagnostic Hints
Failed attempts now carry specific context into the next attempt's prompt: which tool is missing, which module failed to resolve, how many assertions broke. Replaces the previous generic "Verification did not pass" message.
Other Improvements
- Git operations retry once after 500ms for lock-file contention
git restorefalls back togit checkouton failure- Invalid
--profilewarns and defaults tominimalinstead of crashing - Default verifier timeout increased to 120s (from 60s)
Install
npm install -g [email protected]
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Keesan12/Martin-Loop
All releases →Related context
Related tools
Earlier breaking changes
- vmcp-v0.1.3 martin_status uses oneOf for selector exclusivity, latest as const.
- vmcp-v0.1.3 maxIterations and maxTokens modeled as integers in tool schemas.
- vmcp-v0.1.3 Tool schemas enforce additionalProperties: false on public contracts.
- vmcp-v0.1.3 Packaged artifacts now require and ship server.json alongside package.json.
Beta — feedback welcome: [email protected]