@vtxmacro/cli 2026.10.1 → 2026.10.3

package/bin/vtx-mcp.js

@@ -142,10 +142,10 @@ var VtxAgentClient = class _VtxAgentClient {
       body: payload
     });
   }
-  pollBrowserLogin(loginCode) {
+  pollBrowserLogin(loginCode, verifier) {
     return this.request("/auth/agent-tokens/login/poll", {
       method: "POST",
-      body: { login_code: loginCode }
+      body: { login_code: loginCode, verifier }
     });
   }
   revokeToken(tokenId, reason = "cli_revoked") {

package/bin/vtx-service-bootstrap.js

@@ -16,7 +16,7 @@ import { fileURLToPath } from "node:url";
 // agent-cli-release.json
 var agent_cli_release_default = {
   package_name: "@vtxmacro/cli",
-  package_version: "2026.10.1",
+  package_version: "2026.10.3",
   codex_package_name: "@openai/codex",
   codex_version: "0.155.0",
   copilot_sdk_package_name: "@github/copilot-sdk",

package/bin/vtx.js

@@ -77,7 +77,7 @@ var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
     agent_cli_release_default = {
       package_name: "@vtxmacro/cli",
-      package_version: "2026.10.1",
+      package_version: "2026.10.3",
       codex_package_name: "@openai/codex",
       codex_version: "0.155.0",
       copilot_sdk_package_name: "@github/copilot-sdk",
@@ -48455,10 +48455,10 @@ var init_client = __esm({
           body: payload
         });
       }
-      pollBrowserLogin(loginCode) {
+      pollBrowserLogin(loginCode, verifier) {
         return this.request("/auth/agent-tokens/login/poll", {
           method: "POST",
-          body: { login_code: loginCode }
+          body: { login_code: loginCode, verifier }
         });
       }
       revokeToken(tokenId, reason = "cli_revoked") {
@@ -50321,7 +50321,7 @@ var init_hyperliquid_account_mode_contract = __esm({
 });
 
 // lib/runtime/hyperliquid-account-contract.ts
-var toNumber, firstNumber, roundTo, normalizeSpotBalancesFromInfoResponse, sumBalanceHoldUsd, sumPositionUnrealizedPnl, resolveTotalUnrealizedPnl, approximatelyEqualAccountValues, buildAccountSummaryFromInfoResponses;
+var toNumber, firstNumber, roundTo, STABLE_SPOT_SYMBOLS, spotBalanceValueUsd, normalizeSpotBalancesFromInfoResponse, sumBalanceHoldUsd, sumPositionUnrealizedPnl, resolveTotalUnrealizedPnl, approximatelyEqualAccountValues, buildAccountSummaryFromInfoResponses;
 var init_hyperliquid_account_contract = __esm({
   "lib/runtime/hyperliquid-account-contract.ts"() {
     "use strict";
@@ -50346,6 +50346,14 @@ var init_hyperliquid_account_contract = __esm({
       return fallback;
     };
     roundTo = (value, digits = 12) => Number(value.toFixed(digits));
+    STABLE_SPOT_SYMBOLS = /* @__PURE__ */ new Set(["USDC", "USD", "USDT"]);
+    spotBalanceValueUsd = (balance, coin, total) => {
+      const explicit = firstNumber([balance?.value_usd, balance?.usdValue, balance?.usdcValue], Number.NaN);
+      if (Number.isFinite(explicit)) {
+        return explicit;
+      }
+      return STABLE_SPOT_SYMBOLS.has(coin) ? total : 0;
+    };
     normalizeSpotBalancesFromInfoResponse = (spotResponse) => {
       const containers = [];
       if (spotResponse && typeof spotResponse === "object") {
@@ -50364,7 +50372,7 @@ var init_hyperliquid_account_contract = __esm({
         const total = toNumber(balance?.total, 0);
         const hold = toNumber(balance?.hold, 0);
         const available = roundTo(Math.max(0, total - hold));
-        const value_usd = toNumber(balance?.value_usd, total);
+        const value_usd = spotBalanceValueUsd(balance, coin, total);
         return {
           coin,
           total,
@@ -50526,7 +50534,7 @@ var init_hyperliquid_active_asset_contract = __esm({
 });
 
 // lib/runtime/server-prompt-rescue-account-contract.ts
-var STABLE_SYMBOLS, toNumber2, firstNumber2, firstTruthy, spotContainers, extractCanonicalSpotMetrics, sumBalanceValueUsd, approximatelyEqual, balancesMirrorUnifiedAccountValue, computeEffectiveAccountValue, equityFormula, buildServerPromptRescueAccountSummary;
+var toNumber2, firstNumber2, firstTruthy, spotContainers, extractCanonicalSpotMetrics, sumBalanceValueUsd, approximatelyEqual, balancesMirrorUnifiedAccountValue, computeEffectiveAccountValue, equityFormula, buildServerPromptRescueAccountSummary;
 var init_server_prompt_rescue_account_contract = __esm({
   "lib/runtime/server-prompt-rescue-account-contract.ts"() {
     "use strict";
@@ -50534,7 +50542,7 @@ var init_server_prompt_rescue_account_contract = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_hyperliquid_account_mode_contract();
-    STABLE_SYMBOLS = /* @__PURE__ */ new Set(["USDC", "USD", "USDT"]);
+    init_hyperliquid_account_contract();
     toNumber2 = (value, fallback = 0) => {
       const numeric2 = Number(value);
       return Number.isFinite(numeric2) ? numeric2 : fallback;
@@ -50605,14 +50613,14 @@ var init_server_prompt_rescue_account_contract = __esm({
               toNumber2(firstTruthy([entry.available, entry.free, total - hold], "0"))
             );
             let valueUsd = toNumber2(firstTruthy([entry.usdValue, entry.usdcValue], "0"));
-            if (valueUsd <= 0 && STABLE_SYMBOLS.has(coin)) {
+            if (valueUsd <= 0 && STABLE_SPOT_SYMBOLS.has(coin)) {
               valueUsd = available > 0 ? available : total;
             }
             balances.push({ coin, total, hold, available, value_usd: valueUsd });
             const entryValue = valueUsd > 0 ? valueUsd : total;
             if (entryValue > 0) {
               anyTotal += entryValue;
-              if (STABLE_SYMBOLS.has(coin)) stableTotal += entryValue;
+              if (STABLE_SPOT_SYMBOLS.has(coin)) stableTotal += entryValue;
             }
           }
           if (accountValue <= 0) {
@@ -50626,7 +50634,7 @@ var init_server_prompt_rescue_account_contract = __esm({
     };
     sumBalanceValueUsd = (balances) => balances.reduce((total, balance) => {
       let valueUsd = toNumber2(balance.value_usd);
-      if (valueUsd <= 0 && STABLE_SYMBOLS.has(String(balance.coin || "").trim().toUpperCase())) {
+      if (valueUsd <= 0 && STABLE_SPOT_SYMBOLS.has(String(balance.coin || "").trim().toUpperCase())) {
         valueUsd = toNumber2(balance.total);
       }
       return total + Math.max(valueUsd, 0);
@@ -51038,7 +51046,13 @@ var init_hyperliquid_account_state_adapter = __esm({
         }
         const parsedProviderRowCount = Number(parsed?.providerRowCount);
         const providerRowCount = Number.isInteger(parsedProviderRowCount) && parsedProviderRowCount >= rawFills.length ? parsedProviderRowCount : rawFills.length;
-        const entry = { fetchedAtMs, rawFills, providerRowCount };
+        const parsedOldestFillTimeMs = Number(parsed?.oldestFillTimeMs);
+        const entry = {
+          fetchedAtMs,
+          rawFills,
+          providerRowCount,
+          oldestFillTimeMs: Number.isSafeInteger(parsedOldestFillTimeMs) && parsedOldestFillTimeMs > 0 ? parsedOldestFillTimeMs : null
+        };
         browserUserFillsCache.set(cacheKey, entry);
         return entry;
       } catch {
@@ -51931,6 +51945,7 @@ var init_hyperliquid_account_state_adapter = __esm({
             fetchedAtMs: cached2.fetchedAtMs,
             providerRowCount: cached2.providerRowCount,
             providerPageCap: HYPERLIQUID_USER_FILLS_PROVIDER_PAGE_CAP,
+            oldestFillTimeMs: cached2.oldestFillTimeMs ?? null,
             exactTerminalFillEvidenceComplete: false
           }
         };
@@ -51946,12 +51961,14 @@ var init_hyperliquid_account_state_adapter = __esm({
             fetchedAtMs: cached2.fetchedAtMs,
             providerRowCount: cached2.providerRowCount,
             providerPageCap: HYPERLIQUID_USER_FILLS_PROVIDER_PAGE_CAP,
+            oldestFillTimeMs: cached2.oldestFillTimeMs ?? null,
             exactTerminalFillEvidenceComplete: false
           }
         };
       }
       let rawWalletFills;
       let providerRowCount = 0;
+      let oldestFillTimeMs = null;
       let evidenceSource = "live";
       let fetchedAtMs = now;
       const olderInFlight = browserUserFillsInFlight.get(cacheKey);
@@ -51980,12 +51997,15 @@ var init_hyperliquid_account_state_adapter = __esm({
         ).then((payload) => {
           const providerRowCount2 = Array.isArray(payload) ? payload.length : 0;
           const rawFills2 = Array.isArray(payload) ? payload.filter(isPerpFill).map((fill) => ({ ...fill })) : [];
-          writeBrowserUserFillsCache(cacheKey, {
+          const fillTimes = Array.isArray(payload) ? payload.map((fill) => Number(fill?.time)).filter((time3) => Number.isSafeInteger(time3) && time3 > 0) : [];
+          const entry = {
             fetchedAtMs: Date.now(),
             rawFills: rawFills2,
-            providerRowCount: providerRowCount2
-          });
-          return { fetchedAtMs: Date.now(), rawFills: rawFills2, providerRowCount: providerRowCount2 };
+            providerRowCount: providerRowCount2,
+            oldestFillTimeMs: fillTimes.length > 0 ? Math.min(...fillTimes) : null
+          };
+          writeBrowserUserFillsCache(cacheKey, entry);
+          return entry;
         }).finally(() => {
           if (browserUserFillsInFlight.get(cacheKey)?.promise === freshRequest) {
             browserUserFillsInFlight.delete(cacheKey);
@@ -51999,6 +52019,7 @@ var init_hyperliquid_account_state_adapter = __esm({
         rawWalletFills = liveResult.rawFills;
         providerRowCount = liveResult.providerRowCount;
         fetchedAtMs = liveResult.fetchedAtMs;
+        oldestFillTimeMs = liveResult.oldestFillTimeMs ?? null;
       } catch (error48) {
         const staleCache = readBrowserUserFillsCache(cacheKey);
         if (isRateLimitError(error48) && !input.forceRefresh) {
@@ -52006,6 +52027,7 @@ var init_hyperliquid_account_state_adapter = __esm({
           rawWalletFills = staleCache && Date.now() - staleCache.fetchedAtMs <= staleIf429MaxAgeMs ? staleCache.rawFills : [];
           providerRowCount = staleCache?.providerRowCount ?? 0;
           fetchedAtMs = staleCache?.fetchedAtMs ?? Date.now();
+          oldestFillTimeMs = staleCache?.oldestFillTimeMs ?? null;
         } else {
           throw error48;
         }
@@ -52020,6 +52042,7 @@ var init_hyperliquid_account_state_adapter = __esm({
           fetchedAtMs,
           providerRowCount,
           providerPageCap: HYPERLIQUID_USER_FILLS_PROVIDER_PAGE_CAP,
+          oldestFillTimeMs,
           exactTerminalFillEvidenceComplete: evidenceSource === "live" && providerRowCount < HYPERLIQUID_USER_FILLS_PROVIDER_PAGE_CAP
         }
       };
@@ -56581,8 +56604,8 @@ var init_units = __esm({
 });
 
 // node_modules/ethers/lib.esm/utils/uuid.js
-function uuidV4(randomBytes11) {
-  const bytes3 = getBytes(randomBytes11, "randomBytes");
+function uuidV4(randomBytes12) {
+  const bytes3 = getBytes(randomBytes12, "randomBytes");
   bytes3[6] = bytes3[6] & 15 | 64;
   bytes3[8] = bytes3[8] & 63 | 128;
   const value = hexlify(bytes3);
@@ -60000,7 +60023,7 @@ function weierstrass(curveDef) {
   function prepSig(msgHash, privateKey, opts = defaultSigOpts) {
     if (["recovered", "canonical"].some((k) => k in opts))
       throw new Error("sign() legacy options not supported");
-    const { hash: hash4, randomBytes: randomBytes11 } = CURVE;
+    const { hash: hash4, randomBytes: randomBytes12 } = CURVE;
     let { lowS, prehash, extraEntropy: ent } = opts;
     if (lowS == null)
       lowS = true;
@@ -60011,7 +60034,7 @@ function weierstrass(curveDef) {
     const d = normPrivateKeyToScalar(privateKey);
     const seedArgs = [int2octets(d), int2octets(h1int)];
     if (ent != null) {
-      const e = ent === true ? randomBytes11(Fp2.BYTES) : ent;
+      const e = ent === true ? randomBytes12(Fp2.BYTES) : ent;
       seedArgs.push(ensureBytes("extraEntropy", e));
     }
     const seed = concatBytes2(...seedArgs);
@@ -77456,7 +77479,7 @@ var require_websocket = __commonJS({
     var http2 = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes11, createHash: createHash14 } = __require("crypto");
+    var { randomBytes: randomBytes12, createHash: createHash15 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -77994,7 +78017,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes11(16).toString("base64");
+      const key = randomBytes12(16).toString("base64");
       const request = isSecure ? https2.request : http2.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -78124,7 +78147,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest2 = createHash14("sha1").update(key + GUID).digest("base64");
+        const digest2 = createHash15("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest2) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -78502,7 +78525,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = __require("events");
     var http2 = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash14 } = __require("crypto");
+    var { createHash: createHash15 } = __require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -78809,7 +78832,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest2 = createHash14("sha1").update(key + GUID).digest("base64");
+        const digest2 = createHash15("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -84669,7 +84692,7 @@ var init_hyperliquid_signer = __esm({
 });
 
 // lib/runtime/hyperliquid-client.ts
-var HyperliquidExchangeRejectionError, durableMutationAuthorityArgs, assertFreshPreparedExecutionContext, HYPERLIQUID_TERMINAL_ORDER_STATUSES, normalizeSymbol, HYPERLIQUID_NONCE_STORAGE_KEY, HYPERLIQUID_NONCE_LOCK_NAME, lastGeneratedNonce, readBrowserStoredHyperliquidNonce, writeBrowserStoredHyperliquidNonce, browserNonceCoordinator, allocateHyperliquidNonce, generateHyperliquidNonce, roundToSigFigs, normalizeDecimalString, toPlainDecimalString, roundDirectionalDecimalString, formatHyperliquidPerpPriceWire, formatHyperliquidTriggerPriceWire, countSignificantDigits, countDecimalPlaces, validateHyperliquidPerpPriceWire, validateHyperliquidSizeWire, formatSizeWire, inferApiUrl, inferIsTestnet, postHyperliquidInfo, toFiniteNumber, OPEN_ORDER_NUMERIC_STRING, OPEN_ORDER_ID_STRING, parseCanonicalOpenOrderId, parseOpenOrderFiniteNumber, parseOpenOrderPositiveNumber, parseOpenOrderPresentationNumber, readOpenOrderField, firstFiniteNumber2, parseFundingUsdcFromInfoPosition2, isExchangeIsolatedOnly, computeHip3AssetId, getPerpDexIndexMap, buildAssetInfosFromMetaResponse, requireWalletAddress2, assertPositiveInteger, assertPositiveNumber, normalizeOrderSide, normalizeHyperliquidClientOrderId, resolveAssets, findResolvedAsset, normalizeExecutionAssetMetadata, resolveHyperliquidAsset, resolveHyperliquidAssetIndex, fetchBrowserAvailableAssets, fetchBrowserAllMids, fetchBrowserSymbolMidPrice, fetchBrowserOpenOrders, parseCanonicalHyperliquidOrderStatusEvidence, fetchBrowserOrderStatusEvidence, fetchBrowserUserRole, fetchBrowserAccountState2, fetchBrowserPosition, buildHyperliquidOrderWire, buildHyperliquidTriggerOrderWire, signHyperliquidPayload, buildHyperliquidCancelPayload, buildHyperliquidUpdateLeveragePayload, buildHyperliquidMarketOrderPayload, buildHyperliquidTriggerOrderPayload, buildHyperliquidOrderBatchPayload, buildHyperliquidModifyOrderPayload, extractHyperliquidExchangeError, isDefinitiveHyperliquidExchangeResponse, extractDefinitiveHyperliquidOrderId, CANONICAL_POSITIVE_DECIMAL_PATTERN, extractCanonicalHyperliquidOrderStateAcknowledgement, extractCanonicalHyperliquidOrderStateAcknowledgements, extractCanonicalHyperliquidFilledOrderAcknowledgement, extractDefinitiveHyperliquidOrderMemberResults, buildHyperliquidOrderDiagnostics, loadClientExecutionReferenceEvidence, sha256Hex, extractSignedPayloadClientOrderId, extractSignedPayloadMutationCorrelation, assertDurableMutationMatchesSignedAction, exchangeRejectionReason, exchangeActionPriority, submitHyperliquidExchangePayload;
+var HyperliquidExchangeRejectionError, durableMutationAuthorityArgs, assertFreshPreparedExecutionContext, HYPERLIQUID_TERMINAL_ORDER_STATUSES, normalizeSymbol, HYPERLIQUID_NONCE_STORAGE_KEY, HYPERLIQUID_NONCE_LOCK_NAME, lastGeneratedNonce, readBrowserStoredHyperliquidNonce, writeBrowserStoredHyperliquidNonce, browserNonceCoordinator, allocateHyperliquidNonce, generateHyperliquidNonce, roundToSigFigs, normalizeDecimalString, toPlainDecimalString, roundDirectionalDecimalString, formatHyperliquidPerpPriceWire, formatHyperliquidTriggerPriceWire, countSignificantDigits, countDecimalPlaces, validateHyperliquidPerpPriceWire, validateHyperliquidSizeWire, formatSizeWire, inferApiUrl, inferIsTestnet, postHyperliquidInfo, toFiniteNumber, OPEN_ORDER_NUMERIC_STRING, OPEN_ORDER_ID_STRING, parseCanonicalOpenOrderId, parseOpenOrderFiniteNumber, parseOpenOrderPositiveNumber, parseOpenOrderPresentationNumber, readOpenOrderField, firstFiniteNumber2, parseFundingUsdcFromInfoPosition2, isExchangeIsolatedOnly, computeHip3AssetId, getPerpDexIndexMap, buildAssetInfosFromMetaResponse, requireWalletAddress2, assertPositiveInteger, assertPositiveNumber, normalizeOrderSide, normalizeHyperliquidClientOrderId, resolveAssets, findResolvedAsset, normalizeExecutionAssetMetadata, resolveHyperliquidAsset, resolveHyperliquidAssetIndex, fetchBrowserAvailableAssets, fetchBrowserAllMids, fetchBrowserSymbolMidPrice, fetchBrowserOpenOrders, parseCanonicalHyperliquidOrderStatusEvidence, fetchBrowserOrderStatusEvidence, fetchBrowserUserRole, fetchBrowserAccountState2, fetchBrowserPosition, buildHyperliquidOrderWire, buildHyperliquidTriggerOrderWire, signHyperliquidPayload, buildHyperliquidCancelPayload, buildHyperliquidUpdateLeveragePayload, buildHyperliquidMarketOrderPayload, buildHyperliquidTriggerOrderPayload, buildHyperliquidOrderBatchPayload, buildHyperliquidModifyOrderPayload, extractHyperliquidExchangeError, resolveHyperliquidTriggerAcknowledgements, isDefinitiveHyperliquidExchangeResponse, extractDefinitiveHyperliquidOrderId, CANONICAL_POSITIVE_DECIMAL_PATTERN, extractCanonicalHyperliquidOrderStateAcknowledgement, extractCanonicalHyperliquidOrderStateAcknowledgements, extractCanonicalHyperliquidFilledOrderAcknowledgement, extractDefinitiveHyperliquidOrderMemberResults, buildHyperliquidOrderDiagnostics, loadClientExecutionReferenceEvidence, sha256Hex, extractSignedPayloadClientOrderId, extractSignedPayloadMutationCorrelation, assertDurableMutationMatchesSignedAction, exchangeRejectionReason, exchangeActionPriority, submitHyperliquidExchangePayload;
 var init_hyperliquid_client = __esm({
   "lib/runtime/hyperliquid-client.ts"() {
     "use strict";
@@ -85905,6 +85928,40 @@ var init_hyperliquid_client = __esm({
       }
       return null;
     };
+    resolveHyperliquidTriggerAcknowledgements = async (payload, action, lookup) => {
+      if (action.type !== "order" || action.grouping !== "normalTpsl" && action.grouping !== "positionTpsl" || !Array.isArray(action.orders) || payload == null || typeof payload !== "object" || Array.isArray(payload)) {
+        return payload;
+      }
+      const root = payload;
+      const response = root.response;
+      const data4 = response && typeof response === "object" ? response.data : void 0;
+      const statuses = data4 && typeof data4 === "object" && Array.isArray(data4.statuses) ? data4.statuses : null;
+      if (root.status !== "ok" || response?.type !== "order" || statuses == null || statuses.length !== action.orders.length || !statuses.includes("waitingForTrigger")) {
+        return payload;
+      }
+      const resolved = [...statuses];
+      for (let index = 0; index < statuses.length; index += 1) {
+        if (statuses[index] !== "waitingForTrigger") continue;
+        const order = action.orders[index];
+        const trigger = order && typeof order === "object" ? order.t : void 0;
+        const clientOrderId = String(order?.c ?? "").trim().toLowerCase();
+        if (!trigger || typeof trigger !== "object" || !("trigger" in trigger) || !/^0x[0-9a-f]{32}$/.test(clientOrderId)) {
+          return payload;
+        }
+        let evidence;
+        try {
+          evidence = await lookup(clientOrderId);
+        } catch {
+          return payload;
+        }
+        const orderId = Number(evidence.orderId);
+        if (!evidence.responseValid || !evidence.orderMatches || evidence.orderStatus !== "open" || evidence.isTrigger !== true || !Number.isSafeInteger(orderId) || orderId <= 0) {
+          return payload;
+        }
+        resolved[index] = { resting: { oid: orderId, cloid: clientOrderId } };
+      }
+      return { ...root, response: { ...response, data: { ...data4, statuses: resolved } } };
+    };
     isDefinitiveHyperliquidExchangeResponse = (payload, action) => {
       if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
         return false;
@@ -86611,6 +86668,18 @@ var init_hyperliquid_client = __esm({
                 "outcome_unknown"
               );
             }
+            const triggerWallet = String(input.triggerAcknowledgementWalletAddress ?? "").trim();
+            if (triggerWallet) {
+              payload = await resolveHyperliquidTriggerAcknowledgements(
+                payload,
+                input.payload.action,
+                (clientOrderId) => fetchBrowserOrderStatusEvidence({
+                  ...input,
+                  walletAddress: triggerWallet,
+                  orderId: clientOrderId
+                })
+              );
+            }
             const exchangeError = extractHyperliquidExchangeError(payload);
             if (exchangeError) {
               await settleDurableMutation(
@@ -87960,7 +88029,8 @@ var init_browser_trading = __esm({
           symbol: input.symbol,
           clientOrderIds: input.members.map((member) => member.clientOrderId),
           onExchangeOrderDispatched: input.onExchangeOrderDispatched
-        }
+        },
+        triggerAcknowledgementWalletAddress: input.walletAddress ?? null
       });
     };
     executeClientModifyOrder = async (input) => {
@@ -89336,7 +89406,9 @@ var init_runtime_execution = __esm({
             execution_metadata: {
               trigger_price: leg.triggerPrice,
               reason_code: reasonCode,
-              terminal_order_status: evidence.orderStatus
+              terminal_order_status: evidence.orderStatus,
+              protected_size: leg.size,
+              position_tpsl: leg.positionTpsl === true || evidence.isPositionTpsl === true
             }
           };
         }
@@ -90735,7 +90807,9 @@ var init_runtime_execution = __esm({
                 execution_metadata: {
                   reason_code: "protective_replacement_terminal_reconciled",
                   previous_order_id: replacement.previousOrderId,
-                  order_status: evidence.orderStatus
+                  order_status: evidence.orderStatus,
+                  protected_size: replacementLeg.size,
+                  position_tpsl: replacementLeg.positionTpsl === true
                 }
               });
               continue;
@@ -90791,7 +90865,8 @@ var init_runtime_execution = __esm({
                   reason_code: exactLivePositionTpsl ? "protective_replacement_reconciled_for_cleanup" : "protective_replacement_reconciled",
                   previous_order_id: replacement.previousOrderId,
                   trigger_price: replacement.triggerPrice,
-                  protected_size: replacement.size
+                  protected_size: replacement.size,
+                  position_tpsl: recoveredLeg.positionTpsl === true
                 }
               });
               continue;
@@ -90836,7 +90911,8 @@ var init_runtime_execution = __esm({
                   reason_code: "protective_replacement_fulfilled_reconciled",
                   previous_order_id: replacement.previousOrderId,
                   trigger_price: replacement.triggerPrice,
-                  protected_size: replacement.size
+                  protected_size: replacement.size,
+                  position_tpsl: leg.positionTpsl === true
                 }
               });
               continue;
@@ -90939,7 +91015,8 @@ var init_runtime_execution = __esm({
                     reason_code: acknowledgement.state === "fulfilled" ? "protective_replacement_fulfilled_reconciled" : "protective_replacement_reconciled",
                     previous_order_id: replacement.previousOrderId,
                     trigger_price: replacement.triggerPrice,
-                    protected_size: replacement.size
+                    protected_size: replacement.size,
+                    position_tpsl: effectiveLeg.positionTpsl === true
                   }
                 });
                 continue;
@@ -90977,7 +91054,8 @@ var init_runtime_execution = __esm({
                 reason_code: "protective_replacement_reconciled",
                 previous_order_id: replacement.previousOrderId,
                 trigger_price: replacement.triggerPrice,
-                protected_size: replacement.size
+                protected_size: replacement.size,
+                position_tpsl: canonicalReplacementLeg.positionTpsl === true
               }
             });
           } catch (error48) {
@@ -91053,7 +91131,9 @@ var init_runtime_execution = __esm({
               status: "executed",
               execution_metadata: {
                 reason_code: "protective_replacement_terminal_reconciled",
-                order_status: evidence.orderStatus
+                order_status: evidence.orderStatus,
+                protected_size: journalLeg.size,
+                position_tpsl: journalLeg.positionTpsl === true || evidence.isPositionTpsl === true
               }
             });
             continue;
@@ -91677,7 +91757,8 @@ var init_runtime_execution = __esm({
               execution_metadata: {
                 reason_code: "protective_resized_to_live_exposure",
                 previous_order_id: leg.orderId,
-                protected_size: allowedSize
+                protected_size: allowedSize,
+                position_tpsl: replacementLeg.positionTpsl === true
               }
             });
             if (fulfilledDuringResize) {
@@ -92140,7 +92221,9 @@ var init_runtime_execution = __esm({
             execution_metadata: {
               trigger_price: replacementTriggerPrice,
               previous_trigger_price: record5.triggerPrice,
-              previous_order_id: record5.orderId
+              previous_order_id: record5.orderId,
+              protected_size: effectiveSize,
+              position_tpsl: record5.positionTpsl === true
             }
           });
         } catch (error48) {
@@ -93350,6 +93433,7 @@ var init_runtime_execution = __esm({
                 is_take_profit: triggerInput.isTakeProfit,
                 entry_filled_size: protectionSize,
                 protected_size: legSize,
+                position_tpsl: leg.positionTpsl === true,
                 entry_average_price: protectionEntryPrice,
                 ..._toExecutionMetadata(triggerResponse)
               }
@@ -95140,7 +95224,7 @@ var vtx_exports = {};
 __export(vtx_exports, {
   runVtxCli: () => runVtxCli
 });
-import { randomUUID as randomUUID16 } from "node:crypto";
+import { createHash as createHash14, randomBytes as randomBytes11, randomUUID as randomUUID16 } from "node:crypto";
 import { spawn as spawn12 } from "node:child_process";
 function render2(value, json2) {
   if (json2) {
@@ -95394,21 +95478,25 @@ async function runBrowserLogin(args, config2, json2) {
     apiUrl: config2.apiUrl,
     activeProfileId: config2.activeProfileId
   });
-  const started = await client.startBrowserLogin({ display_name: displayName, scopes });
+  const verifier = randomBytes11(32).toString("base64url");
+  const verifierHash = createHash14("sha256").update(verifier).digest("hex");
+  const started = await client.startBrowserLogin({ display_name: displayName, scopes, verifier_hash: verifierHash });
   if (!noOpen) {
     try {
       openBrowser(started.verification_uri_complete);
     } catch {
     }
   }
-  const intro = json2 ? "" : `Open this URL to approve VTX CLI access:
+  process.stderr.write(
+    `Open this URL to approve VTX CLI access:
 ${started.verification_uri_complete}
 
 Waiting for approval...
-`;
+`
+  );
   const deadline = Date.now() + timeoutSeconds * 1e3;
   while (Date.now() < deadline) {
-    const polled = await client.pollBrowserLogin(started.login_code);
+    const polled = await client.pollBrowserLogin(started.login_code, verifier);
     if (polled.status === "approved") {
       const token = String(polled.token || "").trim();
       if (!token) {
@@ -95417,7 +95505,7 @@ Waiting for approval...
       await writeStoredAgentAuth(config2.tokenPath, { token });
       return {
         exitCode: 0,
-        stdout: `${intro}${render2({ status: "logged_in", token_metadata: polled.token_metadata ?? null }, json2)}`,
+        stdout: render2({ status: "logged_in", token_metadata: polled.token_metadata ?? null }, json2),
         stderr: ""
       };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vtxmacro/cli",
-  "version": "2026.10.1",
+  "version": "2026.10.3",
   "description": "VTX Macro CLI, MCP server, and durable external inference host.",
   "type": "module",
   "license": "UNLICENSED",