@vtxmacro/cli 2026.10.11 → 2026.10.13

package/bin/vtx.js

@@ -113,7 +113,7 @@ var init_routing = __esm({
 var agent_cli_release_default;
 var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
-    agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.11", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
+    agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.13", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
   }
 });
 
@@ -136,7 +136,10 @@ var init_runtime_policy_generated = __esm({
           jitter_milliseconds: 750,
           base_delay_milliseconds: 500,
           min_delay_milliseconds: 250,
-          max_delay_milliseconds: 1e4
+          max_delay_milliseconds: 1e4,
+          recovery_base_delay_milliseconds: 1e3,
+          recovery_max_delay_milliseconds: 3e4,
+          recovery_exponent_max: 5
         },
         trade_refresh_policy: {
           server_config_stream_timeout_ms: 1e4,
@@ -144,11 +147,109 @@ var init_runtime_policy_generated = __esm({
           copy_trading_status_poll_ms: 5e3,
           post_execution_refresh_delay_ms: 3e3,
           account_read_backoff_min_ms: 2e3,
-          account_read_backoff_max_ms: 6e4
+          account_read_backoff_max_ms: 6e4,
+          ai_start_grace_min_ms: 45e3
         },
         deployment_reload_observability: {
           bootstrap_max_error_events_per_page: 4,
           bootstrap_max_profiles: 10
+        },
+        ws_fallback_polling: {
+          screener_active_run_ms: 2500
+        },
+        deployment_reload: {
+          version_poll_interval_seconds: 30,
+          reload_delay_seconds: 5
+        },
+        profile_runtime_status: {
+          sync_timeout_ms: 8e3,
+          sync_concurrency: 3,
+          refresh_interval_ms: 1e4,
+          watchdog_interval_ms: 1e3,
+          watchdog_grace_ms: 500
+        },
+        preferences: {
+          load_timeout_ms: 5e3,
+          initial_load_settle_ms: 100,
+          external_save_timeout_ms: 8e3,
+          guest_cookie_max_age_days: 9999
+        },
+        navigation_feedback: {
+          finish_fallback_ms: 2250
+        },
+        confirmation_notices: {
+          success_indicator_ms: 2e3,
+          byok_success_message_ms: 3e3
+        },
+        screener_runtime_config_retry: {
+          base_delay_ms: 1e3,
+          max_delay_ms: 3e4
+        },
+        advanced_chart: {
+          debug_log_throttle_ms: 1e3,
+          initial_history_stall_ms: 15e3,
+          initial_history_recovery_cooldown_ms: 3e4,
+          viewport_restore_settle_ms: 100,
+          symbol_price_wait_ms: 2e3,
+          layout_auto_save_delay_ms: 250
+        },
+        ai_panel: {
+          message_limit: 100,
+          post_execution_history_sync_delay_ms: 2e3,
+          runtime_error_attempt_group_window_seconds: 120,
+          debug_runtime_error_preview_chars: 180
+        },
+        insights_charts: {
+          max_charts: 3,
+          max_line_points: 160,
+          max_bars: 8
+        },
+        analysis_chat: {
+          new_message_scroll_delay_ms: 100
+        },
+        snapshot_selector: {
+          sync_resolution_pending_ms: 350,
+          own_broadcast_window_ms: 5e3,
+          seen_imported_ids_limit: 200,
+          post_import_reload_delay_ms: 1e3,
+          debug_value_chars: 220,
+          debug_fingerprint_head_chars: 64,
+          debug_head_snapshot_ids: 8,
+          debug_comparable_head_chars: 240,
+          debug_panel_comparable_head_chars: 120
+        },
+        debug_logs: {
+          snapshot_card_lines: 80,
+          render_debug_overlay_entries: 120,
+          render_debug_entry_data_chars: 2400,
+          analytics_dashboard_lines: 220,
+          analytics_metric_capture_interval_ms: 400,
+          system_profile_mode_lines: 120,
+          admin_text_chars: 160,
+          admin_analysis_run_id_chars: 32,
+          hyperliquid_balance_preview_count: 3,
+          model_picker_preview_count: 5
+        },
+        history_panels: {
+          display_batch_size: 50,
+          load_more_threshold_px: 100,
+          trade_history_fetch_page_size: 100,
+          ai_panel_interaction_window_ms: 2500,
+          ai_panel_defer_max_staleness_ms: 1e4,
+          ai_panel_defer_retry_ms: 1500
+        },
+        insights_access: {
+          initial_prompt_idea_count: 6,
+          section_preview_blocks: 2
+        },
+        marketing: {
+          arena_leaderboard_entries: 3
+        },
+        calendar: {
+          event_highlight_window_minutes: 60
+        },
+        system_page: {
+          hyperliquid_manual_refresh_cooldown_ms: 800
         }
       },
       ai_dashboard: {
@@ -190,6 +291,9 @@ var init_runtime_policy_generated = __esm({
             72,
             168
           ]
+        },
+        defaults: {
+          max_chat_turns: 9999
         }
       },
       trading: {
@@ -211,7 +315,12 @@ var init_runtime_policy_generated = __esm({
               idle_recheck_seconds: 60,
               attention_refresh_seconds: 60,
               evidence_max_items: 32,
-              evidence_shared_read_seconds: 10
+              evidence_shared_read_seconds: 10,
+              retry_delay_seconds: 15
+            },
+            exchange_mutation: {
+              settlement_retry_milliseconds: 1e3,
+              settlement_retry_window_seconds: 120
             },
             protective_plan_set_lock: {
               wait_seconds: 120
@@ -234,7 +343,15 @@ var init_runtime_policy_generated = __esm({
             hyperliquid_snapshot: {
               max_fills_per_execution: 20,
               max_fill_payload_bytes: 32768
-            }
+            },
+            loop_early_return_retry_milliseconds: 5e3,
+            window_handoff_cleanup_retry_milliseconds: 1e3,
+            ai_schedule_pause_min_milliseconds: 1e3,
+            ai_schedule_pause_max_milliseconds: 36e5,
+            ai_schedule_pause_unknown_milliseconds: 6e4,
+            provider_failure_diagnostics_delay_milliseconds: 2500,
+            provider_failure_diagnostics_max_age_milliseconds: 3e4,
+            killswitch_timer_floor_milliseconds: 1e3
           },
           server_runtime: {
             prompt_rescue: {
@@ -245,7 +362,14 @@ var init_runtime_policy_generated = __esm({
               client_claim_retry_delay_milliseconds: 1e3,
               client_failure_report_timeout_milliseconds: 2e3,
               client_presence_heartbeat_interval_milliseconds: 3e4,
-              client_presence_http_timeout_milliseconds: 5e3
+              client_presence_http_timeout_milliseconds: 5e3,
+              client_claim_completion_buffer_milliseconds: 250,
+              client_max_concurrent_jobs_max: 32,
+              diagnostics_max_elapsed_ms: 12e4,
+              diagnostics_max_pending_reads: 1e3,
+              diagnostics_max_clock_offset_ms: 864e5,
+              failure_max_reported_weight: 1e6,
+              failure_max_retry_after_ms: 36e5
             }
           }
         },
@@ -254,6 +378,10 @@ var init_runtime_policy_generated = __esm({
           history_start_ms: 16409952e5,
           device_read_deadline_seconds: 180,
           device_recent_window_hours: 24
+        },
+        tradability: {
+          score_min: 1,
+          score_max: 10
         }
       },
       agent_cli: {
@@ -278,11 +406,55 @@ var init_runtime_policy_generated = __esm({
           restart_stable_uptime_ms: 6e4,
           restart_backoff_base_ms: 1e3,
           restart_backoff_max_ms: 3e4,
-          restart_exponent_max: 5
+          restart_exponent_max: 5,
+          cooperative_stop_timeout_ms: 75e3,
+          update_readiness_timeout_ms: 6e5,
+          rollback_confirmation_min_attempts: 100,
+          ready_consecutive_observations: 2,
+          control_lock_wait_attempts: 400,
+          control_lock_retry_interval_ms: 250,
+          supervisor_manifest_poll_interval_ms: 250,
+          worker_readiness_settle_ms: 500
         },
         claim_diagnostics: {
           event_loop_sample_interval_ms: 100
-        }
+        },
+        host_runtime: {
+          advertisement_ttl_ms: 12e4,
+          advertisement_refresh_lead_ms: 3e4,
+          host_heartbeat_interval_ms: 3e3,
+          attempt_heartbeat_interval_ms: 3e3,
+          agent_heartbeat_interval_ms: 3e3,
+          agent_heartbeat_max_retry_delay_ms: 9e3,
+          provider_rate_limit_refresh_ms: 6e4,
+          drain_timeout_ms: 3e4,
+          remote_retry_limit: 3,
+          minimum_sleep_ms: 10,
+          heartbeat_gap_diagnostic_min_ms: 1e4,
+          heartbeat_gap_diagnostic_factor: 3,
+          agent_auth_cooldown_ms: 3e5,
+          agent_rate_limit_cooldown_ms: 6e4,
+          agent_transient_cooldown_ms: 5e3,
+          claim_start_window_min_ms: 5e3,
+          attempt_start_retry_delay_max_ms: 15e3,
+          claim_dispatch_batch_size: 16,
+          codex_quota_cooldown_max_ms: 6912e5,
+          attempt_start_retry_base_ms: 1e3,
+          attempt_start_retry_exponent_max: 4,
+          remote_retry_backoff_step_ms: 250,
+          remote_retry_backoff_max_ms: 1e3,
+          remote_retry_fallback_ms: 1e3,
+          access_token_refresh_lead_ms: 5e3,
+          rate_limit_read_timeout_max_ms: 2e3,
+          agent_idle_retry_ms: 1e3,
+          agent_idle_poll_ms: 5e3,
+          agent_turn_timeout_ms: 6e5,
+          codex_rate_limit_metadata_timeout_ms: 5e3,
+          codex_login_timeout_ms: 9e5,
+          codex_command_timeout_ms: 3e4
+        },
+        quota_membership_cooldown_seconds: 300,
+        transient_membership_cooldown_seconds: 30
       },
       desktop: {
         runtime_watchdog: {
@@ -297,6 +469,9 @@ var init_runtime_policy_generated = __esm({
         resource_scheduler: {
           client_lock_ttl_milliseconds: 12e4,
           client_poll_interval_milliseconds: 250
+        },
+        defaults: {
+          adaptive_schedule_enabled: true
         }
       },
       deployment: {
@@ -415,6 +590,115 @@ var init_runtime_policy_generated = __esm({
         benzinga: {
           enabled: false
         }
+      },
+      market_data: {
+        chart_interest: {
+          historical_backfill_candle_limit: 1e3,
+          heartbeat_retry_seconds: 15,
+          heartbeat_min_delay_ms: 1e3,
+          catch_up_candle_limit: 300
+        }
+      },
+      auth: {
+        tokens: {
+          email_2fa_code_length: 6,
+          totp_code_length: 6
+        }
+      },
+      android: {
+        app_host: {
+          profiles_refresh_interval_seconds: 60,
+          running_report_interval_seconds: 5,
+          page_identity_retry_seconds: 5,
+          profiles_read_timeout_seconds: 30
+        }
+      },
+      websocket: {
+        client_connection: {
+          reconnect_delay_ms: 3e3,
+          ping_interval_ms: 3e4,
+          message_flush_interval_ms: 16,
+          price_change_highlight_ms: 1e3,
+          debug_recent_channel_limit: 24
+        }
+      },
+      notifications: {
+        desktop: {
+          heartbeat_seconds: 20
+        },
+        telegram: {
+          connect_link_poll_ms: 3e3
+        }
+      },
+      validation: {
+        profile_handles: {
+          min_length: 3,
+          max_length: 20,
+          update_confirmation_ms: 3e3
+        }
+      },
+      profiles: {
+        limits: {
+          handle_changes_per_window: 2,
+          handle_change_window_days: 14
+        }
+      },
+      billing: {
+        credit_purchase: {
+          amount_usd_steps: [
+            10,
+            25,
+            50,
+            100,
+            500,
+            1e3
+          ]
+        }
+      },
+      admin: {
+        page: {
+          credit_grant_amount_usd_steps: [
+            10,
+            25,
+            50,
+            100,
+            500,
+            1e3,
+            5e3,
+            1e4,
+            5e4,
+            1e5
+          ],
+          user_lookup_blur_close_delay_ms: 200,
+          selected_user_refresh_delay_ms: 300,
+          handle_preview_count: 3
+        },
+        models: {
+          analytics: {
+            summary_failure_kinds: 3
+          }
+        },
+        user_search: {
+          min_query_length: 2
+        }
+      },
+      security: {
+        byok: {
+          max_provider_keys_per_provider: 5
+        }
+      },
+      analysis: {
+        live_request_candles: {
+          default_limit: 100
+        }
+      },
+      users: {
+        search: {
+          min_query_length: 2
+        }
+      },
+      referrals: {
+        code_max_length: 24
       }
     };
   }
@@ -549,6 +833,24 @@ var init_config = __esm({
   }
 });
 
+// lib/agent-core/stop-signals.ts
+var HEADLESS_RUNTIME_STOP_SIGNALS, ignoreClosedTerminalWrites, dropWriteError;
+var init_stop_signals = __esm({
+  "lib/agent-core/stop-signals.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    HEADLESS_RUNTIME_STOP_SIGNALS = ["SIGINT", "SIGTERM", "SIGHUP"];
+    ignoreClosedTerminalWrites = () => {
+      for (const stream of [process.stdout, process.stderr]) {
+        if (!stream.listeners("error").includes(dropWriteError)) stream.on("error", dropWriteError);
+      }
+    };
+    dropWriteError = () => void 0;
+  }
+});
+
 // node_modules/smol-toml/dist/date.js
 var DATE_TIME_RE, TomlDate;
 var init_date = __esm({
@@ -1313,8 +1615,8 @@ import { lstat, mkdir as mkdir2, open, readdir as readdir2, readFile as readFile
 import { homedir as homedir2 } from "node:os";
 import { basename, dirname as dirname2, isAbsolute as isAbsolute2, join as join2, relative, resolve, win32 as windowsPath } from "node:path";
 function inferenceBaseDir(env) {
-  const configured = String(env.VTX_INFERENCE_HOST_HOME || "").trim();
-  return configured || join2(homedir2(), ".vtx", "inference-host");
+  const configured2 = String(env.VTX_INFERENCE_HOST_HOME || "").trim();
+  return configured2 || join2(homedir2(), ".vtx", "inference-host");
 }
 function normalizeInferenceHostInstanceName(raw) {
   const value = raw.trim().toLowerCase();
@@ -1807,32 +2109,32 @@ var init_config2 = __esm({
     init_dist();
     init_mcp_transport_config();
     loadInferenceReceiptDurabilityTimeoutMs = async () => {
-      let configured;
+      let configured2;
       if (true) {
-        configured = 5e3;
+        configured2 = 5e3;
       } else {
         const config2 = parse2(await readFile2(resolve(dirname2(fileURLToPath(import.meta.url)), "../../../config.toml"), "utf8"));
         const inference = config2.external_inference;
-        configured = Number(inference?.receipt_durability_timeout_seconds) * 1e3;
+        configured2 = Number(inference?.receipt_durability_timeout_seconds) * 1e3;
       }
-      if (!Number.isSafeInteger(configured) || Number(configured) < 1) {
+      if (!Number.isSafeInteger(configured2) || Number(configured2) < 1) {
         throw new Error("Inference receipt durability timeout is missing or invalid.");
       }
-      return Number(configured);
+      return Number(configured2);
     };
     loadInferenceAgentDataRequestTimeoutMs = async () => {
-      let configured;
+      let configured2;
       if (true) {
-        configured = 9e4;
+        configured2 = 9e4;
       } else {
         const config2 = parse2(await readFile2(resolve(dirname2(fileURLToPath(import.meta.url)), "../../../config.toml"), "utf8"));
         const mcp = config2.insights?.mcp;
-        configured = Number(mcp?.tool_timeout_seconds) * 1e3;
+        configured2 = Number(mcp?.tool_timeout_seconds) * 1e3;
       }
-      if (!Number.isSafeInteger(configured) || Number(configured) < 1) {
+      if (!Number.isSafeInteger(configured2) || Number(configured2) < 1) {
         throw new Error("Inference Agent data request timeout is missing or invalid.");
       }
-      return Number(configured);
+      return Number(configured2);
     };
     loadInferenceAgentCommandLockPolicy = async () => {
       let waitTimeoutMs;
@@ -2764,6 +3066,7 @@ var init_updater = __esm({
     init_agent_cli_release();
     init_runtime_policy_generated();
     init_config();
+    init_stop_signals();
     init_config2();
     init_routing();
     CLI_PACKAGE_NAME = "@vtxmacro/cli";
@@ -3076,11 +3379,11 @@ var init_updater = __esm({
     };
     cliAutoUpdateDisabled = (env) => /^(?:0|false|off|no)$/iu.test(String(env.VTX_CLI_AUTO_UPDATE ?? "").trim());
     resolveRegistry = (env) => {
-      const configured = String(env.VTX_CLI_UPDATE_REGISTRY || "").trim().replace(/\/+$/u, "");
-      if (!configured) return OFFICIAL_NPM_REGISTRY;
+      const configured2 = String(env.VTX_CLI_UPDATE_REGISTRY || "").trim().replace(/\/+$/u, "");
+      if (!configured2) return OFFICIAL_NPM_REGISTRY;
       let url2;
       try {
-        url2 = new URL(configured);
+        url2 = new URL(configured2);
       } catch {
         throw new Error("VTX_CLI_UPDATE_REGISTRY is not a URL.");
       }
@@ -3088,7 +3391,7 @@ var init_updater = __esm({
       if (url2.protocol !== "https:" && !(url2.protocol === "http:" && loopback)) {
         throw new Error("VTX_CLI_UPDATE_REGISTRY must be https, or http on loopback.");
       }
-      return configured;
+      return configured2;
     };
     validSelection = async (value, releasesPath) => {
       if (!value || typeof value !== "object" || Array.isArray(value)) return null;
@@ -3379,6 +3682,7 @@ var init_updater = __esm({
       const stopped = new AbortController();
       const tracker = {
         stops: 0,
+        hungUp: false,
         child: null,
         stopped: stopped.signal,
         uninstall: () => void 0
@@ -3393,14 +3697,19 @@ var init_updater = __esm({
         }
       };
       const forward = (signal) => () => {
+        if (signal === "SIGHUP") {
+          ignoreClosedTerminalWrites();
+          if (tracker.stops === 0) tracker.hungUp = true;
+        }
         tracker.stops += 1;
         stopped.abort();
+        if (signal === "SIGHUP" && process.platform === "win32") return;
         try {
           tracker.child?.kill(signal);
         } catch {
         }
       };
-      const forwarded = ["SIGTERM", "SIGHUP"].map((signal) => [signal, forward(signal)]);
+      const forwarded = HEADLESS_RUNTIME_STOP_SIGNALS.filter((signal) => signal !== "SIGINT").map((signal) => [signal, forward(signal)]);
       process.on("SIGINT", onInterrupt);
       for (const [signal, handler] of forwarded) process.on(signal, handler);
       tracker.uninstall = () => {
@@ -3532,6 +3841,7 @@ var init_updater = __esm({
       };
       const stops = installStopTracker();
       const endAfterStop = async (exitCode) => {
+        if (stops.hungUp) return exitCode;
         if (!await readRuntimeResume(supervisorEnv) || !dependencies.stopRuntimeBetweenChildren) return exitCode;
         const stopExitCode = await dependencies.stopRuntimeBetweenChildren(supervisorEnv);
         return stopExitCode === 0 ? exitCode : stopExitCode;
@@ -3775,6 +4085,84 @@ var init_updater = __esm({
   }
 });
 
+// lib/constants.ts
+var MS_PER_SECOND, SECONDS_PER_MINUTE, MINUTES_PER_HOUR, HOURS_PER_DAY, DAYS_PER_WEEK, MS_PER_MINUTE, SECONDS_PER_HOUR, SECONDS_PER_DAY, SECONDS_PER_WEEK, MINUTES_PER_DAY, MINUTES_PER_WEEK, MS_PER_HOUR, MS_PER_DAY, BACKOFF_GROWTH_FACTOR, HTTP_STATUS, HTTP_STATUS_MIN, HTTP_STATUS_MAX, HTTP_CLIENT_ERROR_MIN, HTTP_SERVER_ERROR_MIN, EXTERNAL_INFERENCE_LIMITS;
+var init_constants = __esm({
+  "lib/constants.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    MS_PER_SECOND = 1e3;
+    SECONDS_PER_MINUTE = 60;
+    MINUTES_PER_HOUR = 60;
+    HOURS_PER_DAY = 24;
+    DAYS_PER_WEEK = 7;
+    MS_PER_MINUTE = MS_PER_SECOND * SECONDS_PER_MINUTE;
+    SECONDS_PER_HOUR = SECONDS_PER_MINUTE * MINUTES_PER_HOUR;
+    SECONDS_PER_DAY = SECONDS_PER_HOUR * HOURS_PER_DAY;
+    SECONDS_PER_WEEK = SECONDS_PER_DAY * DAYS_PER_WEEK;
+    MINUTES_PER_DAY = MINUTES_PER_HOUR * HOURS_PER_DAY;
+    MINUTES_PER_WEEK = MINUTES_PER_DAY * DAYS_PER_WEEK;
+    MS_PER_HOUR = MS_PER_MINUTE * MINUTES_PER_HOUR;
+    MS_PER_DAY = MS_PER_HOUR * HOURS_PER_DAY;
+    BACKOFF_GROWTH_FACTOR = 2;
+    HTTP_STATUS = {
+      BAD_REQUEST: 400,
+      UNAUTHORIZED: 401,
+      PAYMENT_REQUIRED: 402,
+      FORBIDDEN: 403,
+      NOT_FOUND: 404,
+      REQUEST_TIMEOUT: 408,
+      CONFLICT: 409,
+      TOO_EARLY: 425,
+      TOO_MANY_REQUESTS: 429,
+      INTERNAL_SERVER_ERROR: 500,
+      BAD_GATEWAY: 502,
+      SERVICE_UNAVAILABLE: 503,
+      GATEWAY_TIMEOUT: 504
+    };
+    HTTP_STATUS_MIN = 100;
+    HTTP_STATUS_MAX = 599;
+    HTTP_CLIENT_ERROR_MIN = 400;
+    HTTP_SERVER_ERROR_MIN = 500;
+    EXTERNAL_INFERENCE_LIMITS = {
+      max_prompt_bytes: 3e5,
+      max_immutable_job_input_bytes: 3e5,
+      max_candidate_plaintext_bytes: 3e5,
+      // 300,000 bytes plus the AES-GCM tag encode to fewer than 700,000 base64url
+      // characters, keeping completion requests below the global MCP request bound.
+      max_ciphertext_chars: 7e5,
+      max_status_hosts: 640,
+      // A profile lane's account cascade (fallback inference hosts) after its
+      // primary host. Published hosts compile it in, so it is a wire constant, not
+      // the operator-tunable model_fallbacks.max_models.
+      max_profile_fallbacks_per_lane: 127,
+      // The immutable-input hash length-prefixes each field name and value as
+      // big-endian unsigned integers of these sizes.
+      hash_field_name_length_bytes: 2,
+      hash_value_length_bytes: 8,
+      max_job_claim_batch_size: 32,
+      max_effective_models: 16,
+      max_reasoning_efforts: 16,
+      max_model_identities: 16,
+      max_advertised_models: 64,
+      // Largest provider-reported usage percentage accepted (overage can exceed 100).
+      max_usage_percent: 1e6,
+      // A provider's weekly quota reset or retry deadline lies at most this far ahead.
+      provider_reset_max_days: 8,
+      // Stderr bytes a host observes before truncating its diagnostics.
+      stderr_observation_cap_bytes: 65536,
+      // Tools a Grok tool-validation summary lists before truncating.
+      max_grok_tool_summaries: 8,
+      max_recent_failures: 32,
+      max_status_bindings: 512,
+      max_validation_error_codes: 128,
+      max_discarded_fields: 128
+    };
+  }
+});
+
 // node_modules/zod/v4/core/core.js
 // @__NO_SIDE_EFFECTS__
 function $constructor(name, initializer3, params) {
@@ -18319,7 +18707,7 @@ var init_zod = __esm({
 });
 
 // lib/external-inference-contract.ts
-var EXTERNAL_INFERENCE_CONTRACT_VERSION, EXTERNAL_INFERENCE_CONTROLLER_SCHEMA_VERSION, EXTERNAL_INFERENCE_CONTROLLER_SCHEMA_VERSION_V2, EXTERNAL_INFERENCE_ADVERTISEMENT_SCHEMA_VERSION, EXTERNAL_INFERENCE_ENVELOPE_SCHEMA_VERSION, EXTERNAL_INFERENCE_COMPRESSED_INPUT_ENVELOPE_SCHEMA_VERSION, EXTERNAL_INFERENCE_JOB_INPUT_SCHEMA_VERSION, LEGACY_EXTERNAL_INFERENCE_JOB_INPUT_SCHEMA_VERSION, EXTERNAL_INFERENCE_USAGE_SCHEMA_VERSION, EXTERNAL_INFERENCE_INPUT_HASH_DOMAIN, MAX_EXTERNAL_INFERENCE_STATUS_HOSTS, MAX_PROFILE_EXTERNAL_INFERENCE_FALLBACKS_PER_LANE, MAX_GENERATION, MAX_SAFE_INTEGER, MAX_PROMPT_BYTES, MAX_IMMUTABLE_JOB_INPUT_BYTES, MAX_CANDIDATE_PLAINTEXT_BYTES, MAX_CIPHERTEXT_CHARS, SHA256_INITIAL_STATE, SHA256_ROUND_CONSTANTS, rotateRight, sha256BytesHex, sha256Utf8Hex, computeImmutableJobInputSha256, identifierSchema, operationIdentifierSchema, sha256HexSchema, generationSchema, zeroBasedGenerationSchema, nonNegativeSafeIntegerSchema, positiveSafeIntegerSchema, sqlIntegerTokenCountSchema, timestampSchema, safeCodeSchema, processExitCodeSchema, externalInferenceAdapterIdSchema, reasoningEffortSchema, modelNameSchema, displayNameSchema, authenticatedAccountEmailSchema, protocolVersionSchema, base64UrlAlphabet, isCanonicalBase64Url, base64Url32BytesSchema, base64UrlNonceSchema, base64UrlCiphertextSchema, claimHandleSchema, boundedJsonTextSchema, boundedPromptTextSchema, laneSchema, botModeSchema, executionModeSchema, responseModeSchema, controlModeSchema, dispatchOutcomeSchema, responseOutcomeSchema, nativeModelControllerSchema, legacyExternalAgentModelControllerSchema, externalAgentModelControllerSchema, boundExternalAgentModelControllerSchema, externalAgentUnboundControllerSchema, externalAgentUnboundControllerV2Schema, orderedFallbackHostIdsSchema, externalInferenceFallbackHostIdsSchema, liveModelControllerSchema, snapshotModelControllerSchema, modelIdentityMappingSchema, advertisedModelSchema, hostAdvertisementSchema, envelopeAadSchema, validateEnvelopeAad, commonEnvelopeShape, sealedKeyWrapEnvelopeSchema, sealedInputEnvelopeSchema, sealedCandidateEnvelopeSchema, sealedEnvelopeSchema, screenerCandidateRuntimeBindingSchema, screenerClientLeaseBindingSchema, screenerRuntimeBindingSchema, serverRuntimeBindingSchema, clientRuntimeBindingSchema, runtimeBindingSchema, immutableJobInputSchema, canonicalizeJsonValue, serializeImmutableJobInput, reportedTokenUsageSchema, unavailableTokenUsageSchema, tokenUsageSchema, grokToolValidationDiagnosticSchema, grokResponseIdentityDiagnosticSchema, agentTurnReceiptSchema, agentConnectRequestSchema, agentNextRequestSchema, agentHeartbeatRequestSchema, emptyAgentNextResultSchema, claimedAgentNextResultSchema, agentNextResultSchema, agentCompleteRequestSchema, agentFailRequestSchema, requestedModelSelectionSchema, completedModelProvenanceSchema, attemptModelProvenanceSchema, providerWeeklyQuotaReadSchema, hostRuntimeRecoverySchema, hostHeartbeatRequestSchema, jobClaimRequestBaseShape, jobClaimRequestSchema, emptyJobClaimSchema, claimedJobSchema, claimedDispatchIntentSchema, batchedJobClaimSchema, timedBatchedJobClaimSchema, jobClaimResultSchema, attemptStartRequestSchema, jobHeartbeatRequestSchema, continueHeartbeatDirectiveSchema, cancelHeartbeatDirectiveSchema, jobHeartbeatResultSchema, adapterOutcomeEvidenceSchema, completionBaseShape, validateCompletion, providerResponseCompletionSchema, decisionCandidateCompletionSchema, jobCompleteRequestSchema, codexProcessExitDiagnosticsSchema, jobFailRequestSchema, jobCancelRequestSchema, jobCancellationReceiptSchema, jobDeliveryRequestSchema, deliveryBaseShape, validateDeliveryCandidate, providerResponseDeliverySchema, decisionCandidateDeliverySchema, jobDeliveryResultSchema, jobConsumptionRequestSchema, jobConsumptionReceiptSchema, jobStateSchema, jobStatusReadSchema, hostStatusReadSchema, controllerBindingStatusReadSchema, queueStatusReadSchema, outcomeStatusReadSchema, externalInferenceVolumeWindowReadSchema, externalInferenceFailureCountReadSchema, externalInferenceHostDiagnosticsReadSchema, externalInferenceProfileActivityReadSchema, externalInferenceStatusReadSchema, nativeResearchEvidenceSourceSchema, externalAgentResearchEvidenceSourceSchema, researchEvidenceSourceSchema, reportedResearchTokenUsageSchema, unavailableResearchTokenUsageSchema, researchTokenUsageSchema, externalInferenceProductLineageBaseShape, traderExternalInferenceProductLineageSchema, decisionChatExternalInferenceProductLineageSchema, screenerExternalInferenceProductLineageSchema, externalInferenceProductLineageSchema, normalProductLinkageSchema, evidenceMaterializationMarkerSchema, deliveredExternalAgentSourceIdentitySchema, deliveredRequestEvidenceSchema, researchEvidenceBaseShape, researchEvidenceBaseSchema, validateExactUtf8, validateResearchEvidence, providerResponseResearchEvidenceSchema, decisionCandidateResearchEvidenceSchema, researchEvidenceSchema;
+var EXTERNAL_INFERENCE_CONTRACT_VERSION, EXTERNAL_INFERENCE_CONTROLLER_SCHEMA_VERSION, EXTERNAL_INFERENCE_CONTROLLER_SCHEMA_VERSION_V2, EXTERNAL_INFERENCE_ADVERTISEMENT_SCHEMA_VERSION, EXTERNAL_INFERENCE_ENVELOPE_SCHEMA_VERSION, EXTERNAL_INFERENCE_COMPRESSED_INPUT_ENVELOPE_SCHEMA_VERSION, EXTERNAL_INFERENCE_JOB_INPUT_SCHEMA_VERSION, LEGACY_EXTERNAL_INFERENCE_JOB_INPUT_SCHEMA_VERSION, EXTERNAL_INFERENCE_USAGE_SCHEMA_VERSION, EXTERNAL_INFERENCE_INPUT_HASH_DOMAIN, MAX_EXTERNAL_INFERENCE_STATUS_HOSTS, MAX_PROFILE_EXTERNAL_INFERENCE_FALLBACKS_PER_LANE, MAX_GENERATION, MAX_SAFE_INTEGER, MAX_PROMPT_BYTES, MAX_IMMUTABLE_JOB_INPUT_BYTES, MAX_CANDIDATE_PLAINTEXT_BYTES, MAX_CIPHERTEXT_CHARS, PROVIDER_RESET_MAX_MS, MAX_GROK_TOOL_SUMMARIES, STDERR_OBSERVATION_CAP_BYTES, SHA256_INITIAL_STATE, SHA256_ROUND_CONSTANTS, rotateRight, sha256BytesHex, sha256Utf8Hex, computeImmutableJobInputSha256, identifierSchema, operationIdentifierSchema, sha256HexSchema, generationSchema, zeroBasedGenerationSchema, nonNegativeSafeIntegerSchema, positiveSafeIntegerSchema, sqlIntegerTokenCountSchema, timestampSchema, safeCodeSchema, processExitCodeSchema, externalInferenceAdapterIdSchema, reasoningEffortSchema, modelNameSchema, displayNameSchema, authenticatedAccountEmailSchema, protocolVersionSchema, base64UrlAlphabet, isCanonicalBase64Url, base64Url32BytesSchema, base64UrlNonceSchema, base64UrlCiphertextSchema, claimHandleSchema, boundedJsonTextSchema, boundedPromptTextSchema, laneSchema, botModeSchema, executionModeSchema, responseModeSchema, controlModeSchema, dispatchOutcomeSchema, responseOutcomeSchema, nativeModelControllerSchema, legacyExternalAgentModelControllerSchema, externalAgentModelControllerSchema, boundExternalAgentModelControllerSchema, externalAgentUnboundControllerSchema, externalAgentUnboundControllerV2Schema, orderedFallbackHostIdsSchema, externalInferenceFallbackHostIdsSchema, liveModelControllerSchema, snapshotModelControllerSchema, modelIdentityMappingSchema, advertisedModelSchema, hostAdvertisementSchema, envelopeAadSchema, validateEnvelopeAad, commonEnvelopeShape, sealedKeyWrapEnvelopeSchema, sealedInputEnvelopeSchema, sealedCandidateEnvelopeSchema, sealedEnvelopeSchema, screenerCandidateRuntimeBindingSchema, screenerClientLeaseBindingSchema, screenerRuntimeBindingSchema, serverRuntimeBindingSchema, clientRuntimeBindingSchema, runtimeBindingSchema, immutableJobInputSchema, canonicalizeJsonValue, serializeImmutableJobInput, reportedTokenUsageSchema, unavailableTokenUsageSchema, tokenUsageSchema, grokToolValidationDiagnosticSchema, grokResponseIdentityDiagnosticSchema, agentTurnReceiptSchema, agentConnectRequestSchema, agentNextRequestSchema, agentHeartbeatRequestSchema, emptyAgentNextResultSchema, claimedAgentNextResultSchema, agentNextResultSchema, agentCompleteRequestSchema, agentFailRequestSchema, requestedModelSelectionSchema, completedModelProvenanceSchema, attemptModelProvenanceSchema, providerWeeklyQuotaReadSchema, hostRuntimeRecoverySchema, hostHeartbeatRequestSchema, jobClaimRequestBaseShape, jobClaimRequestSchema, emptyJobClaimSchema, claimedJobSchema, claimedDispatchIntentSchema, batchedJobClaimSchema, timedBatchedJobClaimSchema, jobClaimResultSchema, attemptStartRequestSchema, jobHeartbeatRequestSchema, continueHeartbeatDirectiveSchema, cancelHeartbeatDirectiveSchema, jobHeartbeatResultSchema, adapterOutcomeEvidenceSchema, completionBaseShape, validateCompletion, providerResponseCompletionSchema, decisionCandidateCompletionSchema, jobCompleteRequestSchema, codexProcessExitDiagnosticsSchema, jobFailRequestSchema, jobCancelRequestSchema, jobCancellationReceiptSchema, jobDeliveryRequestSchema, deliveryBaseShape, validateDeliveryCandidate, providerResponseDeliverySchema, decisionCandidateDeliverySchema, jobDeliveryResultSchema, jobConsumptionRequestSchema, jobConsumptionReceiptSchema, jobStateSchema, jobStatusReadSchema, hostStatusReadSchema, controllerBindingStatusReadSchema, queueStatusReadSchema, outcomeStatusReadSchema, externalInferenceVolumeWindowReadSchema, externalInferenceFailureCountReadSchema, externalInferenceHostDiagnosticsReadSchema, externalInferenceProfileActivityReadSchema, externalInferenceStatusReadSchema, nativeResearchEvidenceSourceSchema, externalAgentResearchEvidenceSourceSchema, researchEvidenceSourceSchema, reportedResearchTokenUsageSchema, unavailableResearchTokenUsageSchema, researchTokenUsageSchema, externalInferenceProductLineageBaseShape, traderExternalInferenceProductLineageSchema, decisionChatExternalInferenceProductLineageSchema, screenerExternalInferenceProductLineageSchema, externalInferenceProductLineageSchema, normalProductLinkageSchema, evidenceMaterializationMarkerSchema, deliveredExternalAgentSourceIdentitySchema, deliveredRequestEvidenceSchema, researchEvidenceBaseShape, researchEvidenceBaseSchema, validateExactUtf8, validateResearchEvidence, providerResponseResearchEvidenceSchema, decisionCandidateResearchEvidenceSchema, researchEvidenceSchema;
 var init_external_inference_contract = __esm({
   "lib/external-inference-contract.ts"() {
     "use strict";
@@ -18327,6 +18715,7 @@ var init_external_inference_contract = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_zod();
+    init_constants();
     EXTERNAL_INFERENCE_CONTRACT_VERSION = "external_inference.v1";
     EXTERNAL_INFERENCE_CONTROLLER_SCHEMA_VERSION = "external_inference_controller_v1";
     EXTERNAL_INFERENCE_CONTROLLER_SCHEMA_VERSION_V2 = "external_inference_controller_v2";
@@ -18337,14 +18726,17 @@ var init_external_inference_contract = __esm({
     LEGACY_EXTERNAL_INFERENCE_JOB_INPUT_SCHEMA_VERSION = "external_inference_job_input_v1";
     EXTERNAL_INFERENCE_USAGE_SCHEMA_VERSION = "external_inference_usage_v1";
     EXTERNAL_INFERENCE_INPUT_HASH_DOMAIN = "vtx.external-inference.input-sha256.v1\0";
-    MAX_EXTERNAL_INFERENCE_STATUS_HOSTS = 640;
-    MAX_PROFILE_EXTERNAL_INFERENCE_FALLBACKS_PER_LANE = 127;
+    MAX_EXTERNAL_INFERENCE_STATUS_HOSTS = EXTERNAL_INFERENCE_LIMITS.max_status_hosts;
+    MAX_PROFILE_EXTERNAL_INFERENCE_FALLBACKS_PER_LANE = EXTERNAL_INFERENCE_LIMITS.max_profile_fallbacks_per_lane;
     MAX_GENERATION = 2147483647;
     MAX_SAFE_INTEGER = Number.MAX_SAFE_INTEGER;
-    MAX_PROMPT_BYTES = 3e5;
-    MAX_IMMUTABLE_JOB_INPUT_BYTES = 3e5;
-    MAX_CANDIDATE_PLAINTEXT_BYTES = 3e5;
-    MAX_CIPHERTEXT_CHARS = 7e5;
+    MAX_PROMPT_BYTES = EXTERNAL_INFERENCE_LIMITS.max_prompt_bytes;
+    MAX_IMMUTABLE_JOB_INPUT_BYTES = EXTERNAL_INFERENCE_LIMITS.max_immutable_job_input_bytes;
+    MAX_CANDIDATE_PLAINTEXT_BYTES = EXTERNAL_INFERENCE_LIMITS.max_candidate_plaintext_bytes;
+    MAX_CIPHERTEXT_CHARS = EXTERNAL_INFERENCE_LIMITS.max_ciphertext_chars;
+    PROVIDER_RESET_MAX_MS = EXTERNAL_INFERENCE_LIMITS.provider_reset_max_days * HOURS_PER_DAY * MINUTES_PER_HOUR * SECONDS_PER_MINUTE * MS_PER_SECOND;
+    MAX_GROK_TOOL_SUMMARIES = EXTERNAL_INFERENCE_LIMITS.max_grok_tool_summaries;
+    STDERR_OBSERVATION_CAP_BYTES = EXTERNAL_INFERENCE_LIMITS.stderr_observation_cap_bytes;
     SHA256_INITIAL_STATE = new Uint32Array([
       1779033703,
       3144134277,
@@ -18501,12 +18893,12 @@ var init_external_inference_contract = __esm({
       for (const [fieldName, value] of fields) {
         const fieldNameBytes = encoder.encode(fieldName);
         const valueBytes = encoder.encode(value);
-        const fieldNameLength = new Uint8Array(2);
+        const fieldNameLength = new Uint8Array(EXTERNAL_INFERENCE_LIMITS.hash_field_name_length_bytes);
         new DataView(fieldNameLength.buffer).setUint16(0, fieldNameBytes.length, false);
-        const valueLength = new Uint8Array(8);
+        const valueLength = new Uint8Array(EXTERNAL_INFERENCE_LIMITS.hash_value_length_bytes);
         const valueLengthView = new DataView(valueLength.buffer);
         valueLengthView.setUint32(0, Math.floor(valueBytes.length / 4294967296), false);
-        valueLengthView.setUint32(4, valueBytes.length >>> 0, false);
+        valueLengthView.setUint32(valueLength.length - Uint32Array.BYTES_PER_ELEMENT, valueBytes.length >>> 0, false);
         chunks.push(fieldNameLength, fieldNameBytes, valueLength, valueBytes);
       }
       const totalLength = chunks.reduce((sum, chunk) => sum + chunk.length, 0);
@@ -18643,7 +19035,7 @@ var init_external_inference_contract = __esm({
     ]);
     modelIdentityMappingSchema = external_exports.strictObject({
       requested_model: modelNameSchema,
-      effective_models: external_exports.array(modelNameSchema).min(1).max(16)
+      effective_models: external_exports.array(modelNameSchema).min(1).max(EXTERNAL_INFERENCE_LIMITS.max_effective_models)
     }).superRefine((value, context) => {
       if (new Set(value.effective_models).size !== value.effective_models.length) {
         context.addIssue({
@@ -18658,11 +19050,11 @@ var init_external_inference_contract = __esm({
       label: displayNameSchema,
       adapter: externalInferenceAdapterIdSchema,
       supported_lanes: external_exports.array(laneSchema).min(1).max(3),
-      supported_reasoning_efforts: external_exports.array(reasoningEffortSchema).min(1).max(16),
+      supported_reasoning_efforts: external_exports.array(reasoningEffortSchema).min(1).max(EXTERNAL_INFERENCE_LIMITS.max_reasoning_efforts),
       default_reasoning_effort: reasoningEffortSchema,
       supported_response_modes: external_exports.array(responseModeSchema).min(1).max(2),
       supported_control_modes: external_exports.array(controlModeSchema).min(1).max(2).optional(),
-      allowed_model_identities: external_exports.array(modelIdentityMappingSchema).min(1).max(16),
+      allowed_model_identities: external_exports.array(modelIdentityMappingSchema).min(1).max(EXTERNAL_INFERENCE_LIMITS.max_model_identities),
       structured_output: external_exports.boolean(),
       same_attempt_recovery: external_exports.boolean(),
       adapter_runtime_version: protocolVersionSchema
@@ -18714,7 +19106,7 @@ var init_external_inference_contract = __esm({
       health: external_exports.enum(["healthy", "degraded", "draining"]),
       advertised_at: timestampSchema,
       expires_at: timestampSchema,
-      models: external_exports.array(advertisedModelSchema).min(1).max(64)
+      models: external_exports.array(advertisedModelSchema).min(1).max(EXTERNAL_INFERENCE_LIMITS.max_advertised_models)
     }).superRefine((value, context) => {
       if (value.provider_dispatch_freshness_contract !== void 0 && !/^\d+\.\d+\.\d+$/.test(value.host_runtime_version ?? "")) {
         context.addIssue({ code: "custom", message: "Foreground freshness contract requires a numeric runtime version." });
@@ -18912,8 +19304,8 @@ var init_external_inference_contract = __esm({
       controller: boundExternalAgentModelControllerSchema,
       requested_model: modelNameSchema,
       requested_reasoning_effort: reasoningEffortSchema,
-      allowed_model_identities: external_exports.array(modelIdentityMappingSchema).min(1).max(16),
-      allowed_effective_reasoning_efforts: external_exports.array(reasoningEffortSchema).min(1).max(16),
+      allowed_model_identities: external_exports.array(modelIdentityMappingSchema).min(1).max(EXTERNAL_INFERENCE_LIMITS.max_model_identities),
+      allowed_effective_reasoning_efforts: external_exports.array(reasoningEffortSchema).min(1).max(EXTERNAL_INFERENCE_LIMITS.max_reasoning_efforts),
       response_mode: responseModeSchema,
       output_schema_version: protocolVersionSchema,
       parser_contract_version: protocolVersionSchema,
@@ -19102,12 +19494,12 @@ var init_external_inference_contract = __esm({
       }).refine(
         (tool) => tool.type === "redacted" === (tool.type_sha256 !== null) && tool.name === "redacted" === (tool.name_sha256 !== null),
         { message: "Only redacted tool identifiers require hashes." }
-      )).max(8),
+      )).max(MAX_GROK_TOOL_SUMMARIES),
       tools_truncated: external_exports.boolean(),
       prior_dispatch: external_exports.boolean(),
       completed_response_count: nonNegativeSafeIntegerSchema
     }).refine(
-      (value) => value.tools_shape === "array" ? value.tool_count !== null && value.tools.length === Math.min(value.tool_count, 8) && value.tools_truncated === value.tool_count > 8 : value.tool_count === null && value.tools.length === 0 && !value.tools_truncated,
+      (value) => value.tools_shape === "array" ? value.tool_count !== null && value.tools.length === Math.min(value.tool_count, MAX_GROK_TOOL_SUMMARIES) && value.tools_truncated === value.tool_count > MAX_GROK_TOOL_SUMMARIES : value.tool_count === null && value.tools.length === 0 && !value.tools_truncated,
       { message: "Grok tool diagnostic counts must match the observed shape." }
     ).refine(
       (value) => value.prior_dispatch || value.completed_response_count === 0,
@@ -19327,13 +19719,13 @@ var init_external_inference_contract = __esm({
       credits_available: external_exports.boolean().nullable().optional(),
       rate_limit_reached: external_exports.boolean().nullable().optional(),
       source: external_exports.literal("codex_app_server"),
-      used_percent: external_exports.number().finite().min(0).max(1e6),
+      used_percent: external_exports.number().finite().min(0).max(EXTERNAL_INFERENCE_LIMITS.max_usage_percent),
       resets_at: timestampSchema,
       observed_at: timestampSchema
     }).superRefine((value, context) => {
       const observedAt = Date.parse(value.observed_at);
       const resetsAt = Date.parse(value.resets_at);
-      if (resetsAt <= observedAt || resetsAt > observedAt + 8 * 24 * 60 * 60 * 1e3) {
+      if (resetsAt <= observedAt || resetsAt > observedAt + PROVIDER_RESET_MAX_MS) {
         context.addIssue({
           code: "custom",
           message: "weekly quota reset must follow observation within eight days",
@@ -19401,12 +19793,12 @@ var init_external_inference_contract = __esm({
       external_exports.strictObject({
         schema_version: external_exports.literal("external_inference_job_claim_v2"),
         ...jobClaimRequestBaseShape,
-        maximum_jobs: external_exports.number().int().min(1).max(32)
+        maximum_jobs: external_exports.number().int().min(1).max(EXTERNAL_INFERENCE_LIMITS.max_job_claim_batch_size)
       }),
       external_exports.strictObject({
         schema_version: external_exports.literal("external_inference_job_claim_v3"),
         ...jobClaimRequestBaseShape,
-        maximum_jobs: external_exports.number().int().min(1).max(32)
+        maximum_jobs: external_exports.number().int().min(1).max(EXTERNAL_INFERENCE_LIMITS.max_job_claim_batch_size)
       })
     ]);
     emptyJobClaimSchema = external_exports.strictObject({
@@ -19461,14 +19853,14 @@ var init_external_inference_contract = __esm({
       schema_version: external_exports.literal("external_inference_job_claim_result_v2"),
       claim_state: external_exports.literal("batch"),
       claim_request_id: operationIdentifierSchema,
-      claims: external_exports.array(claimedDispatchIntentSchema).max(32),
+      claims: external_exports.array(claimedDispatchIntentSchema).max(EXTERNAL_INFERENCE_LIMITS.max_job_claim_batch_size),
       retry_after_ms: nonNegativeSafeIntegerSchema
     });
     timedBatchedJobClaimSchema = external_exports.strictObject({
       schema_version: external_exports.literal("external_inference_job_claim_result_v3"),
       claim_state: external_exports.literal("batch"),
       claim_request_id: operationIdentifierSchema,
-      claims: external_exports.array(claimedDispatchIntentSchema).max(32),
+      claims: external_exports.array(claimedDispatchIntentSchema).max(EXTERNAL_INFERENCE_LIMITS.max_job_claim_batch_size),
       retry_after_ms: nonNegativeSafeIntegerSchema,
       server_processing_ms: nonNegativeSafeIntegerSchema
     });
@@ -19619,7 +20011,7 @@ var init_external_inference_contract = __esm({
       pending_request_count: nonNegativeSafeIntegerSchema.nullable(),
       active_thread_count: nonNegativeSafeIntegerSchema.nullable(),
       stderr_nonempty: external_exports.boolean().nullable(),
-      stderr_bytes_observed: external_exports.number().int().min(0).max(65536).nullable(),
+      stderr_bytes_observed: external_exports.number().int().min(0).max(STDERR_OBSERVATION_CAP_BYTES).nullable(),
       stderr_truncated: external_exports.boolean().nullable(),
       stderr_class: external_exports.enum([
         "unknown",
@@ -19651,7 +20043,7 @@ var init_external_inference_contract = __esm({
       } else if (value.stderr_bytes_observed === 0 || value.stderr_class === "none") {
         context.addIssue({ code: "custom", message: "non-empty stderr diagnostics are inconsistent", path: ["stderr_nonempty"] });
       }
-      if (value.stderr_truncated && value.stderr_bytes_observed !== 65536) {
+      if (value.stderr_truncated && value.stderr_bytes_observed !== STDERR_OBSERVATION_CAP_BYTES) {
         context.addIssue({ code: "custom", message: "truncated stderr diagnostics must report the observation cap", path: ["stderr_truncated"] });
       }
     });
@@ -19704,7 +20096,7 @@ var init_external_inference_contract = __esm({
       if (value.provider_retry_at != null !== (value.provider_retry_source != null)) {
         context.addIssue({ code: "custom", message: "provider retry deadline and source must be provided together", path: ["provider_retry_at"] });
       }
-      if (value.provider_retry_at != null && Date.parse(value.provider_retry_at) > Date.parse(value.failed_at) + 8 * 24 * 60 * 60 * 1e3) {
+      if (value.provider_retry_at != null && Date.parse(value.provider_retry_at) > Date.parse(value.failed_at) + PROVIDER_RESET_MAX_MS) {
         context.addIssue({ code: "custom", message: "provider retry deadline must be within eight days of failure", path: ["provider_retry_at"] });
       }
       if (value.outcome.response_outcome !== "none") {
@@ -19911,7 +20303,7 @@ var init_external_inference_contract = __esm({
       advertisement_generation: generationSchema,
       key_generation: generationSchema,
       last_heartbeat_at: timestampSchema.nullable(),
-      models: external_exports.array(advertisedModelSchema).max(64)
+      models: external_exports.array(advertisedModelSchema).max(EXTERNAL_INFERENCE_LIMITS.max_advertised_models)
     });
     controllerBindingStatusReadSchema = external_exports.strictObject({
       profile_name: external_exports.string().min(1).max(50),
@@ -19967,7 +20359,7 @@ var init_external_inference_contract = __esm({
       last_hour: externalInferenceVolumeWindowReadSchema,
       last_day: externalInferenceVolumeWindowReadSchema,
       last_week: externalInferenceVolumeWindowReadSchema,
-      recent_failures: external_exports.array(externalInferenceFailureCountReadSchema).max(32)
+      recent_failures: external_exports.array(externalInferenceFailureCountReadSchema).max(EXTERNAL_INFERENCE_LIMITS.max_recent_failures)
     });
     externalInferenceProfileActivityReadSchema = external_exports.strictObject({
       last_hour: externalInferenceVolumeWindowReadSchema,
@@ -19980,7 +20372,7 @@ var init_external_inference_contract = __esm({
       observed_at: timestampSchema,
       catalog_generation: generationSchema,
       hosts: external_exports.array(hostStatusReadSchema).max(MAX_EXTERNAL_INFERENCE_STATUS_HOSTS),
-      bindings: external_exports.array(controllerBindingStatusReadSchema).max(512),
+      bindings: external_exports.array(controllerBindingStatusReadSchema).max(EXTERNAL_INFERENCE_LIMITS.max_status_bindings),
       binding_count: nonNegativeSafeIntegerSchema.optional().default(0),
       bindings_truncated: external_exports.boolean().optional().default(false),
       queue: queueStatusReadSchema,
@@ -20263,8 +20655,8 @@ var init_external_inference_contract = __esm({
       parser_status: external_exports.enum(["not_run", "clean", "repaired", "fallback", "failed"]),
       parsed_candidate_schema_version: protocolVersionSchema.nullable(),
       parser_fallback_strategy: safeCodeSchema.nullable(),
-      validation_error_codes: external_exports.array(safeCodeSchema).max(128),
-      discarded_fields: external_exports.array(external_exports.string().min(1).max(128).regex(/^[A-Za-z0-9_.\[\]-]+$/)).max(128),
+      validation_error_codes: external_exports.array(safeCodeSchema).max(EXTERNAL_INFERENCE_LIMITS.max_validation_error_codes),
+      discarded_fields: external_exports.array(external_exports.string().min(1).max(128).regex(/^[A-Za-z0-9_.\[\]-]+$/)).max(EXTERNAL_INFERENCE_LIMITS.max_discarded_fields),
       parsed_candidate_utf8: boundedJsonTextSchema.nullable(),
       parsed_candidate_sha256: sha256HexSchema.nullable(),
       disposition: external_exports.enum([
@@ -22121,7 +22513,10 @@ var init_runtime_policy_generated2 = __esm({
           jitter_milliseconds: 750,
           base_delay_milliseconds: 500,
           min_delay_milliseconds: 250,
-          max_delay_milliseconds: 1e4
+          max_delay_milliseconds: 1e4,
+          recovery_base_delay_milliseconds: 1e3,
+          recovery_max_delay_milliseconds: 3e4,
+          recovery_exponent_max: 5
         },
         trade_refresh_policy: {
           server_config_stream_timeout_ms: 1e4,
@@ -22129,11 +22524,109 @@ var init_runtime_policy_generated2 = __esm({
           copy_trading_status_poll_ms: 5e3,
           post_execution_refresh_delay_ms: 3e3,
           account_read_backoff_min_ms: 2e3,
-          account_read_backoff_max_ms: 6e4
+          account_read_backoff_max_ms: 6e4,
+          ai_start_grace_min_ms: 45e3
         },
         deployment_reload_observability: {
           bootstrap_max_error_events_per_page: 4,
           bootstrap_max_profiles: 10
+        },
+        ws_fallback_polling: {
+          screener_active_run_ms: 2500
+        },
+        deployment_reload: {
+          version_poll_interval_seconds: 30,
+          reload_delay_seconds: 5
+        },
+        profile_runtime_status: {
+          sync_timeout_ms: 8e3,
+          sync_concurrency: 3,
+          refresh_interval_ms: 1e4,
+          watchdog_interval_ms: 1e3,
+          watchdog_grace_ms: 500
+        },
+        preferences: {
+          load_timeout_ms: 5e3,
+          initial_load_settle_ms: 100,
+          external_save_timeout_ms: 8e3,
+          guest_cookie_max_age_days: 9999
+        },
+        navigation_feedback: {
+          finish_fallback_ms: 2250
+        },
+        confirmation_notices: {
+          success_indicator_ms: 2e3,
+          byok_success_message_ms: 3e3
+        },
+        screener_runtime_config_retry: {
+          base_delay_ms: 1e3,
+          max_delay_ms: 3e4
+        },
+        advanced_chart: {
+          debug_log_throttle_ms: 1e3,
+          initial_history_stall_ms: 15e3,
+          initial_history_recovery_cooldown_ms: 3e4,
+          viewport_restore_settle_ms: 100,
+          symbol_price_wait_ms: 2e3,
+          layout_auto_save_delay_ms: 250
+        },
+        ai_panel: {
+          message_limit: 100,
+          post_execution_history_sync_delay_ms: 2e3,
+          runtime_error_attempt_group_window_seconds: 120,
+          debug_runtime_error_preview_chars: 180
+        },
+        insights_charts: {
+          max_charts: 3,
+          max_line_points: 160,
+          max_bars: 8
+        },
+        analysis_chat: {
+          new_message_scroll_delay_ms: 100
+        },
+        snapshot_selector: {
+          sync_resolution_pending_ms: 350,
+          own_broadcast_window_ms: 5e3,
+          seen_imported_ids_limit: 200,
+          post_import_reload_delay_ms: 1e3,
+          debug_value_chars: 220,
+          debug_fingerprint_head_chars: 64,
+          debug_head_snapshot_ids: 8,
+          debug_comparable_head_chars: 240,
+          debug_panel_comparable_head_chars: 120
+        },
+        debug_logs: {
+          snapshot_card_lines: 80,
+          render_debug_overlay_entries: 120,
+          render_debug_entry_data_chars: 2400,
+          analytics_dashboard_lines: 220,
+          analytics_metric_capture_interval_ms: 400,
+          system_profile_mode_lines: 120,
+          admin_text_chars: 160,
+          admin_analysis_run_id_chars: 32,
+          hyperliquid_balance_preview_count: 3,
+          model_picker_preview_count: 5
+        },
+        history_panels: {
+          display_batch_size: 50,
+          load_more_threshold_px: 100,
+          trade_history_fetch_page_size: 100,
+          ai_panel_interaction_window_ms: 2500,
+          ai_panel_defer_max_staleness_ms: 1e4,
+          ai_panel_defer_retry_ms: 1500
+        },
+        insights_access: {
+          initial_prompt_idea_count: 6,
+          section_preview_blocks: 2
+        },
+        marketing: {
+          arena_leaderboard_entries: 3
+        },
+        calendar: {
+          event_highlight_window_minutes: 60
+        },
+        system_page: {
+          hyperliquid_manual_refresh_cooldown_ms: 800
         }
       },
       ai_dashboard: {
@@ -22175,6 +22668,9 @@ var init_runtime_policy_generated2 = __esm({
             72,
             168
           ]
+        },
+        defaults: {
+          max_chat_turns: 9999
         }
       },
       trading: {
@@ -22196,7 +22692,12 @@ var init_runtime_policy_generated2 = __esm({
               idle_recheck_seconds: 60,
               attention_refresh_seconds: 60,
               evidence_max_items: 32,
-              evidence_shared_read_seconds: 10
+              evidence_shared_read_seconds: 10,
+              retry_delay_seconds: 15
+            },
+            exchange_mutation: {
+              settlement_retry_milliseconds: 1e3,
+              settlement_retry_window_seconds: 120
             },
             protective_plan_set_lock: {
               wait_seconds: 120
@@ -22219,7 +22720,15 @@ var init_runtime_policy_generated2 = __esm({
             hyperliquid_snapshot: {
               max_fills_per_execution: 20,
               max_fill_payload_bytes: 32768
-            }
+            },
+            loop_early_return_retry_milliseconds: 5e3,
+            window_handoff_cleanup_retry_milliseconds: 1e3,
+            ai_schedule_pause_min_milliseconds: 1e3,
+            ai_schedule_pause_max_milliseconds: 36e5,
+            ai_schedule_pause_unknown_milliseconds: 6e4,
+            provider_failure_diagnostics_delay_milliseconds: 2500,
+            provider_failure_diagnostics_max_age_milliseconds: 3e4,
+            killswitch_timer_floor_milliseconds: 1e3
           },
           server_runtime: {
             prompt_rescue: {
@@ -22230,7 +22739,14 @@ var init_runtime_policy_generated2 = __esm({
               client_claim_retry_delay_milliseconds: 1e3,
               client_failure_report_timeout_milliseconds: 2e3,
               client_presence_heartbeat_interval_milliseconds: 3e4,
-              client_presence_http_timeout_milliseconds: 5e3
+              client_presence_http_timeout_milliseconds: 5e3,
+              client_claim_completion_buffer_milliseconds: 250,
+              client_max_concurrent_jobs_max: 32,
+              diagnostics_max_elapsed_ms: 12e4,
+              diagnostics_max_pending_reads: 1e3,
+              diagnostics_max_clock_offset_ms: 864e5,
+              failure_max_reported_weight: 1e6,
+              failure_max_retry_after_ms: 36e5
             }
           }
         },
@@ -22239,6 +22755,10 @@ var init_runtime_policy_generated2 = __esm({
           history_start_ms: 16409952e5,
           device_read_deadline_seconds: 180,
           device_recent_window_hours: 24
+        },
+        tradability: {
+          score_min: 1,
+          score_max: 10
         }
       },
       agent_cli: {
@@ -22263,11 +22783,55 @@ var init_runtime_policy_generated2 = __esm({
           restart_stable_uptime_ms: 6e4,
           restart_backoff_base_ms: 1e3,
           restart_backoff_max_ms: 3e4,
-          restart_exponent_max: 5
+          restart_exponent_max: 5,
+          cooperative_stop_timeout_ms: 75e3,
+          update_readiness_timeout_ms: 6e5,
+          rollback_confirmation_min_attempts: 100,
+          ready_consecutive_observations: 2,
+          control_lock_wait_attempts: 400,
+          control_lock_retry_interval_ms: 250,
+          supervisor_manifest_poll_interval_ms: 250,
+          worker_readiness_settle_ms: 500
         },
         claim_diagnostics: {
           event_loop_sample_interval_ms: 100
-        }
+        },
+        host_runtime: {
+          advertisement_ttl_ms: 12e4,
+          advertisement_refresh_lead_ms: 3e4,
+          host_heartbeat_interval_ms: 3e3,
+          attempt_heartbeat_interval_ms: 3e3,
+          agent_heartbeat_interval_ms: 3e3,
+          agent_heartbeat_max_retry_delay_ms: 9e3,
+          provider_rate_limit_refresh_ms: 6e4,
+          drain_timeout_ms: 3e4,
+          remote_retry_limit: 3,
+          minimum_sleep_ms: 10,
+          heartbeat_gap_diagnostic_min_ms: 1e4,
+          heartbeat_gap_diagnostic_factor: 3,
+          agent_auth_cooldown_ms: 3e5,
+          agent_rate_limit_cooldown_ms: 6e4,
+          agent_transient_cooldown_ms: 5e3,
+          claim_start_window_min_ms: 5e3,
+          attempt_start_retry_delay_max_ms: 15e3,
+          claim_dispatch_batch_size: 16,
+          codex_quota_cooldown_max_ms: 6912e5,
+          attempt_start_retry_base_ms: 1e3,
+          attempt_start_retry_exponent_max: 4,
+          remote_retry_backoff_step_ms: 250,
+          remote_retry_backoff_max_ms: 1e3,
+          remote_retry_fallback_ms: 1e3,
+          access_token_refresh_lead_ms: 5e3,
+          rate_limit_read_timeout_max_ms: 2e3,
+          agent_idle_retry_ms: 1e3,
+          agent_idle_poll_ms: 5e3,
+          agent_turn_timeout_ms: 6e5,
+          codex_rate_limit_metadata_timeout_ms: 5e3,
+          codex_login_timeout_ms: 9e5,
+          codex_command_timeout_ms: 3e4
+        },
+        quota_membership_cooldown_seconds: 300,
+        transient_membership_cooldown_seconds: 30
       },
       desktop: {
         runtime_watchdog: {
@@ -22282,6 +22846,9 @@ var init_runtime_policy_generated2 = __esm({
         resource_scheduler: {
           client_lock_ttl_milliseconds: 12e4,
           client_poll_interval_milliseconds: 250
+        },
+        defaults: {
+          adaptive_schedule_enabled: true
         }
       },
       deployment: {
@@ -22400,6 +22967,115 @@ var init_runtime_policy_generated2 = __esm({
         benzinga: {
           enabled: false
         }
+      },
+      market_data: {
+        chart_interest: {
+          historical_backfill_candle_limit: 1e3,
+          heartbeat_retry_seconds: 15,
+          heartbeat_min_delay_ms: 1e3,
+          catch_up_candle_limit: 300
+        }
+      },
+      auth: {
+        tokens: {
+          email_2fa_code_length: 6,
+          totp_code_length: 6
+        }
+      },
+      android: {
+        app_host: {
+          profiles_refresh_interval_seconds: 60,
+          running_report_interval_seconds: 5,
+          page_identity_retry_seconds: 5,
+          profiles_read_timeout_seconds: 30
+        }
+      },
+      websocket: {
+        client_connection: {
+          reconnect_delay_ms: 3e3,
+          ping_interval_ms: 3e4,
+          message_flush_interval_ms: 16,
+          price_change_highlight_ms: 1e3,
+          debug_recent_channel_limit: 24
+        }
+      },
+      notifications: {
+        desktop: {
+          heartbeat_seconds: 20
+        },
+        telegram: {
+          connect_link_poll_ms: 3e3
+        }
+      },
+      validation: {
+        profile_handles: {
+          min_length: 3,
+          max_length: 20,
+          update_confirmation_ms: 3e3
+        }
+      },
+      profiles: {
+        limits: {
+          handle_changes_per_window: 2,
+          handle_change_window_days: 14
+        }
+      },
+      billing: {
+        credit_purchase: {
+          amount_usd_steps: [
+            10,
+            25,
+            50,
+            100,
+            500,
+            1e3
+          ]
+        }
+      },
+      admin: {
+        page: {
+          credit_grant_amount_usd_steps: [
+            10,
+            25,
+            50,
+            100,
+            500,
+            1e3,
+            5e3,
+            1e4,
+            5e4,
+            1e5
+          ],
+          user_lookup_blur_close_delay_ms: 200,
+          selected_user_refresh_delay_ms: 300,
+          handle_preview_count: 3
+        },
+        models: {
+          analytics: {
+            summary_failure_kinds: 3
+          }
+        },
+        user_search: {
+          min_query_length: 2
+        }
+      },
+      security: {
+        byok: {
+          max_provider_keys_per_provider: 5
+        }
+      },
+      analysis: {
+        live_request_candles: {
+          default_limit: 100
+        }
+      },
+      users: {
+        search: {
+          min_query_length: 2
+        }
+      },
+      referrals: {
+        code_max_length: 24
       }
     };
   }
@@ -30090,6 +30766,8 @@ var init_codex_app_server = __esm({
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
+    init_runtime_policy_generated();
+    init_constants();
     init_config2();
     CODEX_INFERENCE_PERMISSION_PROFILE = "vtx_inference_readonly";
     CODEX_AGENT_PERMISSION_PROFILE = "vtx_inference_agent";
@@ -30195,9 +30873,9 @@ var init_codex_app_server = __esm({
       "workspace_owner_usage_limit_reached",
       "workspace_member_usage_limit_reached"
     ];
-    DEFAULT_CODEX_QUOTA_COOLDOWN_MS = 5 * 60 * 1e3;
-    MAX_CODEX_QUOTA_COOLDOWN_MS = 8 * 24 * 60 * 60 * 1e3;
-    CODEX_TRANSIENT_RATE_LIMIT_COOLDOWN_MS = 30 * 1e3;
+    DEFAULT_CODEX_QUOTA_COOLDOWN_MS = runtime_policy_generated_default.external_inference.quota_membership_cooldown_seconds * MS_PER_SECOND;
+    MAX_CODEX_QUOTA_COOLDOWN_MS = runtime_policy_generated_default.external_inference.host_runtime.codex_quota_cooldown_max_ms;
+    CODEX_TRANSIENT_RATE_LIMIT_COOLDOWN_MS = runtime_policy_generated_default.external_inference.transient_membership_cooldown_seconds * MS_PER_SECOND;
     parseCreditsSnapshot = (value) => {
       const candidate = objectOrNull(value);
       if (!candidate || typeof candidate.hasCredits !== "boolean" || typeof candidate.unlimited !== "boolean" || candidate.balance != null && typeof candidate.balance !== "string") return null;
@@ -30242,7 +30920,7 @@ var init_codex_app_server = __esm({
         );
         for (const window2 of windows) {
           if (window2.resetsAt === null) continue;
-          const resetAtMs = window2.resetsAt * 1e3;
+          const resetAtMs = window2.resetsAt * MS_PER_SECOND;
           if (!Number.isSafeInteger(resetAtMs)) continue;
           if (window2.usedPercent >= 100) exhaustedResets.push(resetAtMs);
           if (snapshot.rateLimitReachedType !== null || snapshot.spendControlReached === true) {
@@ -30371,8 +31049,8 @@ var init_codex_app_server = __esm({
           if (!(variant in structured)) continue;
           const details = objectOrNull(structured[variant]);
           const rawStatus = details?.httpStatusCode;
-          const httpStatusCode = Number.isSafeInteger(rawStatus) && Number(rawStatus) >= 100 && Number(rawStatus) <= 599 ? Number(rawStatus) : null;
-          if (httpStatusCode === 401) {
+          const httpStatusCode = Number.isSafeInteger(rawStatus) && Number(rawStatus) >= HTTP_STATUS_MIN && Number(rawStatus) <= HTTP_STATUS_MAX ? Number(rawStatus) : null;
+          if (httpStatusCode === HTTP_STATUS.UNAUTHORIZED) {
             return {
               code: "auth_expired",
               category: "auth",
@@ -30380,7 +31058,7 @@ var init_codex_app_server = __esm({
               httpStatusCode
             };
           }
-          if (httpStatusCode === 429) {
+          if (httpStatusCode === HTTP_STATUS.TOO_MANY_REQUESTS) {
             return {
               code: "codex_rate_limited",
               category: "adapter",
@@ -30388,9 +31066,9 @@ var init_codex_app_server = __esm({
               httpStatusCode
             };
           }
-          if (httpStatusCode !== null && httpStatusCode >= 400 && httpStatusCode < 500 && httpStatusCode !== 408 && httpStatusCode !== 425) {
+          if (httpStatusCode !== null && httpStatusCode >= HTTP_CLIENT_ERROR_MIN && httpStatusCode < HTTP_SERVER_ERROR_MIN && httpStatusCode !== HTTP_STATUS.REQUEST_TIMEOUT && httpStatusCode !== HTTP_STATUS.TOO_EARLY) {
             const semanticText = JSON.stringify(details || {}).toLowerCase();
-            if (httpStatusCode === 402 || /(quota|credit|spend|payment|subscription.*limit)/u.test(semanticText)) {
+            if (httpStatusCode === HTTP_STATUS.PAYMENT_REQUIRED || /(quota|credit|spend|payment|subscription.*limit)/u.test(semanticText)) {
               return {
                 code: "quota_exceeded",
                 category: "model",
@@ -30398,7 +31076,7 @@ var init_codex_app_server = __esm({
                 httpStatusCode
               };
             }
-            if (httpStatusCode === 403 && /(auth|account|workspace|billing|entitlement)/u.test(semanticText)) {
+            if (httpStatusCode === HTTP_STATUS.FORBIDDEN && /(auth|account|workspace|billing|entitlement)/u.test(semanticText)) {
               return {
                 code: "auth_expired",
                 category: "auth",
@@ -30406,7 +31084,7 @@ var init_codex_app_server = __esm({
                 httpStatusCode
               };
             }
-            if (httpStatusCode === 403 && /(policy|safety|cyber)/u.test(semanticText)) {
+            if (httpStatusCode === HTTP_STATUS.FORBIDDEN && /(policy|safety|cyber)/u.test(semanticText)) {
               return {
                 code: "codex_policy_rejected",
                 category: "adapter",
@@ -30415,7 +31093,7 @@ var init_codex_app_server = __esm({
               };
             }
             return {
-              code: httpStatusCode === 400 ? "codex_bad_request" : "codex_http_client_error",
+              code: httpStatusCode === HTTP_STATUS.BAD_REQUEST ? "codex_bad_request" : "codex_http_client_error",
               category: "adapter",
               retryable: false,
               httpStatusCode
@@ -30424,7 +31102,7 @@ var init_codex_app_server = __esm({
           return {
             code,
             category: "adapter",
-            retryable: httpStatusCode === null ? true : httpStatusCode === 408 || httpStatusCode === 425 || httpStatusCode >= 500,
+            retryable: httpStatusCode === null ? true : httpStatusCode === HTTP_STATUS.REQUEST_TIMEOUT || httpStatusCode === HTTP_STATUS.TOO_EARLY || httpStatusCode >= HTTP_SERVER_ERROR_MIN,
             httpStatusCode
           };
         }
@@ -30844,7 +31522,7 @@ child.once('close', async (code, signal) => {
         });
       }
       static {
-        this.STDERR_OBSERVATION_CAP_BYTES = 65536;
+        this.STDERR_OBSERVATION_CAP_BYTES = EXTERNAL_INFERENCE_LIMITS.stderr_observation_cap_bytes;
       }
       static {
         this.STDERR_CLASSIFICATION_TAIL_CHARS = 1024;
@@ -32221,13 +32899,13 @@ child.once('close', async (code, signal) => {
             const observedUsage = threadUsage ?? rawResponseUsage;
             let retryAtMs = null;
             let observedRateLimits = null;
-            if (failure2.code === "quota_exceeded" || failure2.httpStatusCode === 429) {
+            if (failure2.code === "quota_exceeded" || failure2.httpStatusCode === HTTP_STATUS.TOO_MANY_REQUESTS) {
               const observedAtMs = Date.now();
               let accountLimitReached = failure2.code === "quota_exceeded";
               try {
                 const metadataDeadlineAtMs = Math.min(
                   request.deadlineAtMs,
-                  observedAtMs + 5e3
+                  observedAtMs + runtime_policy_generated_default.external_inference.host_runtime.codex_rate_limit_metadata_timeout_ms
                 );
                 if (metadataDeadlineAtMs <= observedAtMs) throw new Error("rate-limit deadline elapsed");
                 observedRateLimits = await this.readAccountRateLimits(
@@ -32930,13 +33608,15 @@ function createDefaultInferenceHostRunnerDependencies(options) {
     envelopePublicKey: options.envelopePublicKey
   };
 }
-var import_ajv, providerHttpStatus, terminalFailureRequiresManualRecovery, canReplayFencedAgentTerminal, RUNTIME_RECEIPT_SCHEMA_VERSION, ATTEMPT_RECEIPT_SCHEMA_VERSION, CLAIM_DISPATCH_BATCH_SIZE, DEFAULT_ADVERTISEMENT_TTL_MS, DEFAULT_ADVERTISEMENT_REFRESH_LEAD_MS, DEFAULT_HOST_HEARTBEAT_MS, DEFAULT_PROVIDER_RATE_LIMIT_REFRESH_MS, DEFAULT_ATTEMPT_HEARTBEAT_MS, DEFAULT_DRAIN_TIMEOUT_MS, DEFAULT_REMOTE_RETRY_LIMIT, MIN_SLEEP_MS, MIN_HOST_HEARTBEAT_GAP_DIAGNOSTIC_MS, HOST_HEARTBEAT_GAP_DIAGNOSTIC_FACTOR, DEFAULT_CODEX_ACCOUNT_COOLDOWN_MS, DEFAULT_AGENT_RATE_LIMIT_COOLDOWN_MS, DEFAULT_AGENT_QUOTA_COOLDOWN_MS, DEFAULT_AGENT_TRANSIENT_COOLDOWN_MS, MIN_CLAIM_START_WINDOW_MS, MAX_ATTEMPT_START_RETRY_DELAY_MS, UNBOUNDED_AVAILABLE_SLOTS, buildInferenceAdvertisedModels, summarizeInferenceHostRuntimeRecovery, FileInferenceHostRuntimeReceiptStore, InferenceHostRecoveryRequiredError, InferenceHostRunnerError, defaultSleep, abortError, settlesWithin, defaultRegisterSignalHandlers, safeInteger, exactObjectKeys, validIso, validateAttemptReceipt, validateRuntimeReceipt, sha256, stableOperationId, buildAttemptStartRequest, isoAt, providerWeeklyQuotaFromRateLimits, usableProviderQuotaSnapshot, finitePositiveOption, validateRunnerOptions, assertLocalCredentialIdentity, retryableRemoteError, remoteRetryAfterMs, controlPlaneFatal, defaultValidateOutput, objectRecord, positiveUtf8ByteLimit, assertCompilableOutputSchema, parseOutputContract, serverProviderDispatchNotAfterMs, membershipFailureDisposition, safeFailureCode, publicServerFailureCode, attemptStartRetryFallbackMs, exactJson2, runnerIdentityMismatch, assertAdvertisementResult, assertHostHeartbeatResult, assertClaimResult, assertStartResult, assertJobHeartbeatResult, assertTerminalResult, isDefinitiveCompletionEvidenceExpiry, classifyFailure, ambiguousHeartbeatTransport, reportedTokenUsage, reportedUsage, InferenceHostRunner, createInferenceAgentControlClient, INFERENCE_AGENT_WAKE_SCHEMA, parseInferenceAgentWake, InferenceAgentRuntime;
+var import_ajv, providerHttpStatus, terminalFailureRequiresManualRecovery, canReplayFencedAgentTerminal, RUNTIME_RECEIPT_SCHEMA_VERSION, ATTEMPT_RECEIPT_SCHEMA_VERSION, HOST_RUNTIME_POLICY, CLAIM_DISPATCH_BATCH_SIZE, DEFAULT_ADVERTISEMENT_TTL_MS, DEFAULT_ADVERTISEMENT_REFRESH_LEAD_MS, DEFAULT_HOST_HEARTBEAT_MS, DEFAULT_PROVIDER_RATE_LIMIT_REFRESH_MS, DEFAULT_ATTEMPT_HEARTBEAT_MS, DEFAULT_DRAIN_TIMEOUT_MS, DEFAULT_REMOTE_RETRY_LIMIT, MIN_SLEEP_MS, MIN_HOST_HEARTBEAT_GAP_DIAGNOSTIC_MS, HOST_HEARTBEAT_GAP_DIAGNOSTIC_FACTOR, DEFAULT_QUOTA_COOLDOWN_MS, DEFAULT_AGENT_AUTH_COOLDOWN_MS, DEFAULT_AGENT_RATE_LIMIT_COOLDOWN_MS, DEFAULT_AGENT_TRANSIENT_COOLDOWN_MS, MIN_CLAIM_START_WINDOW_MS, MAX_ATTEMPT_START_RETRY_DELAY_MS, UNBOUNDED_AVAILABLE_SLOTS, buildInferenceAdvertisedModels, summarizeInferenceHostRuntimeRecovery, FileInferenceHostRuntimeReceiptStore, InferenceHostRecoveryRequiredError, InferenceHostRunnerError, defaultSleep, abortError, settlesWithin, defaultRegisterSignalHandlers, safeInteger, exactObjectKeys, validIso, validateAttemptReceipt, validateRuntimeReceipt, sha256, stableOperationId, buildAttemptStartRequest, isoAt, providerWeeklyQuotaFromRateLimits, usableProviderQuotaSnapshot, finitePositiveOption, validateRunnerOptions, assertLocalCredentialIdentity, retryableRemoteError, remoteRetryAfterMs, controlPlaneFatal, defaultValidateOutput, objectRecord, positiveUtf8ByteLimit, assertCompilableOutputSchema, parseOutputContract, serverProviderDispatchNotAfterMs, membershipFailureDisposition, safeFailureCode, publicServerFailureCode, attemptStartRetryFallbackMs, exactJson2, runnerIdentityMismatch, assertAdvertisementResult, assertHostHeartbeatResult, assertClaimResult, assertStartResult, assertJobHeartbeatResult, assertTerminalResult, isDefinitiveCompletionEvidenceExpiry, classifyFailure, ambiguousHeartbeatTransport, reportedTokenUsage, reportedUsage, InferenceHostRunner, createInferenceAgentControlClient, INFERENCE_AGENT_WAKE_SCHEMA, parseInferenceAgentWake, InferenceAgentRuntime;
 var init_runner = __esm({
   "lib/inference-host/runner.ts"() {
     "use strict";
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
+    init_runtime_policy_generated();
+    init_constants();
     import_ajv = __toESM(require_ajv(), 1);
     init_external_inference_contract();
     init_config2();
@@ -32950,29 +33630,30 @@ var init_runner = __esm({
     providerHttpStatus = (error48) => {
       if (!(error48 instanceof CodexAppServerError)) return null;
       const status = error48.httpStatusCode;
-      return typeof status === "number" && Number.isInteger(status) && status >= 400 && status <= 599 ? status : null;
+      return typeof status === "number" && Number.isInteger(status) && status >= HTTP_CLIENT_ERROR_MIN && status <= HTTP_STATUS_MAX ? status : null;
     };
     terminalFailureRequiresManualRecovery = (error48) => (error48.terminalEvidence !== null || error48.grokToolValidation != null || error48.grokResponseIdentity != null) && !error48.retryable && error48.category !== "auth" && !["quota_exceeded", "codex_rate_limited", "provider_rate_limited"].includes(error48.code);
     canReplayFencedAgentTerminal = (state2, fence) => state2?.schema_version === "vtx_inference_agent_runtime_v3" && state2.adapter_id === fence.adapter_id && state2.host_id === fence.host_id && state2.assignment.assignment_id === fence.assignment_id && state2.pending_turn?.terminal_receipt?.terminal_status === "failed" && state2.pending_turn.terminal_receipt.failure_code === fence.failure_code && (fence.dispatch_outcome !== "outcome_unknown" || (state2.pending_turn.terminal_receipt.grok_tool_validation?.prior_dispatch === true || state2.pending_turn.terminal_receipt.grok_response_identity != null || state2.pending_turn.terminal_receipt.provider_http_status !== void 0) && state2.pending_turn.terminal_receipt.dispatch_outcome === "outcome_unknown");
     RUNTIME_RECEIPT_SCHEMA_VERSION = "vtx_inference_host_runtime_v1";
     ATTEMPT_RECEIPT_SCHEMA_VERSION = "vtx_inference_attempt_receipt_v1";
-    CLAIM_DISPATCH_BATCH_SIZE = 16;
-    DEFAULT_ADVERTISEMENT_TTL_MS = 12e4;
-    DEFAULT_ADVERTISEMENT_REFRESH_LEAD_MS = 3e4;
-    DEFAULT_HOST_HEARTBEAT_MS = 3e3;
-    DEFAULT_PROVIDER_RATE_LIMIT_REFRESH_MS = 6e4;
-    DEFAULT_ATTEMPT_HEARTBEAT_MS = 3e3;
-    DEFAULT_DRAIN_TIMEOUT_MS = 3e4;
-    DEFAULT_REMOTE_RETRY_LIMIT = 3;
-    MIN_SLEEP_MS = 10;
-    MIN_HOST_HEARTBEAT_GAP_DIAGNOSTIC_MS = 1e4;
-    HOST_HEARTBEAT_GAP_DIAGNOSTIC_FACTOR = 3;
-    DEFAULT_CODEX_ACCOUNT_COOLDOWN_MS = 5 * 60 * 1e3;
-    DEFAULT_AGENT_RATE_LIMIT_COOLDOWN_MS = 6e4;
-    DEFAULT_AGENT_QUOTA_COOLDOWN_MS = 5 * 60 * 1e3;
-    DEFAULT_AGENT_TRANSIENT_COOLDOWN_MS = 5e3;
-    MIN_CLAIM_START_WINDOW_MS = 5e3;
-    MAX_ATTEMPT_START_RETRY_DELAY_MS = 15e3;
+    HOST_RUNTIME_POLICY = runtime_policy_generated_default.external_inference.host_runtime;
+    CLAIM_DISPATCH_BATCH_SIZE = HOST_RUNTIME_POLICY.claim_dispatch_batch_size;
+    DEFAULT_ADVERTISEMENT_TTL_MS = HOST_RUNTIME_POLICY.advertisement_ttl_ms;
+    DEFAULT_ADVERTISEMENT_REFRESH_LEAD_MS = HOST_RUNTIME_POLICY.advertisement_refresh_lead_ms;
+    DEFAULT_HOST_HEARTBEAT_MS = HOST_RUNTIME_POLICY.host_heartbeat_interval_ms;
+    DEFAULT_PROVIDER_RATE_LIMIT_REFRESH_MS = HOST_RUNTIME_POLICY.provider_rate_limit_refresh_ms;
+    DEFAULT_ATTEMPT_HEARTBEAT_MS = HOST_RUNTIME_POLICY.attempt_heartbeat_interval_ms;
+    DEFAULT_DRAIN_TIMEOUT_MS = HOST_RUNTIME_POLICY.drain_timeout_ms;
+    DEFAULT_REMOTE_RETRY_LIMIT = HOST_RUNTIME_POLICY.remote_retry_limit;
+    MIN_SLEEP_MS = HOST_RUNTIME_POLICY.minimum_sleep_ms;
+    MIN_HOST_HEARTBEAT_GAP_DIAGNOSTIC_MS = HOST_RUNTIME_POLICY.heartbeat_gap_diagnostic_min_ms;
+    HOST_HEARTBEAT_GAP_DIAGNOSTIC_FACTOR = HOST_RUNTIME_POLICY.heartbeat_gap_diagnostic_factor;
+    DEFAULT_QUOTA_COOLDOWN_MS = runtime_policy_generated_default.external_inference.quota_membership_cooldown_seconds * MS_PER_SECOND;
+    DEFAULT_AGENT_AUTH_COOLDOWN_MS = HOST_RUNTIME_POLICY.agent_auth_cooldown_ms;
+    DEFAULT_AGENT_RATE_LIMIT_COOLDOWN_MS = HOST_RUNTIME_POLICY.agent_rate_limit_cooldown_ms;
+    DEFAULT_AGENT_TRANSIENT_COOLDOWN_MS = HOST_RUNTIME_POLICY.agent_transient_cooldown_ms;
+    MIN_CLAIM_START_WINDOW_MS = HOST_RUNTIME_POLICY.claim_start_window_min_ms;
+    MAX_ATTEMPT_START_RETRY_DELAY_MS = HOST_RUNTIME_POLICY.attempt_start_retry_delay_max_ms;
     UNBOUNDED_AVAILABLE_SLOTS = Number.MAX_SAFE_INTEGER;
     buildInferenceAdvertisedModels = (capabilities, adapterRuntimeVersion, adapter = "codex", structuredOutput = true, sameAttemptRecovery = adapter === "codex", supportedControlModes = ["provider"]) => {
       const visible = capabilities.filter((capability) => !capability.hidden);
@@ -33276,7 +33957,7 @@ var init_runner = __esm({
     providerWeeklyQuotaFromRateLimits = (rateLimits, observedAtMs, currentTimeMs = observedAtMs, includeCredits = true) => {
       if (!rateLimits) return null;
       for (const window2 of [rateLimits.rateLimits.primary, rateLimits.rateLimits.secondary]) {
-        if (window2?.windowDurationMins !== 7 * 24 * 60 || window2.resetsAt === null || window2.resetsAt * 1e3 <= currentTimeMs) continue;
+        if (window2?.windowDurationMins !== DAYS_PER_WEEK * HOURS_PER_DAY * MINUTES_PER_HOUR || window2.resetsAt === null || window2.resetsAt * MS_PER_SECOND <= currentTimeMs) continue;
         return {
           source: "codex_app_server",
           ...includeCredits ? {
@@ -33284,7 +33965,7 @@ var init_runner = __esm({
             rate_limit_reached: codexAccountRateLimitReached(rateLimits)
           } : {},
           used_percent: window2.usedPercent,
-          resets_at: isoAt(window2.resetsAt * 1e3),
+          resets_at: isoAt(window2.resetsAt * MS_PER_SECOND),
           observed_at: isoAt(observedAtMs)
         };
       }
@@ -33294,7 +33975,7 @@ var init_runner = __esm({
       const window2 = rateLimits.rateLimits[key];
       const known = previous?.[key];
       if (known && (!window2 || window2.windowDurationMins !== known.windowDurationMins)) return false;
-      return window2 === null || window2.resetsAt !== null && window2.resetsAt * 1e3 > nowMs2 && (window2.usedPercent < 100 || codexCreditsAvailable(rateLimits.rateLimits));
+      return window2 === null || window2.resetsAt !== null && window2.resetsAt * MS_PER_SECOND > nowMs2 && (window2.usedPercent < 100 || codexCreditsAvailable(rateLimits.rateLimits));
     });
     finitePositiveOption = (value, fallback, label2) => {
       const result = value ?? fallback;
@@ -33572,7 +34253,7 @@ var init_runner = __esm({
     };
     publicServerFailureCode = (value) => value !== null && /^[a-z0-9][a-z0-9._-]{0,95}$/u.test(value) ? value : null;
     attemptStartRetryFallbackMs = (retryCount) => Math.min(
-      1e3 * 2 ** Math.min(Math.max(0, retryCount - 1), 4),
+      HOST_RUNTIME_POLICY.attempt_start_retry_base_ms * BACKOFF_GROWTH_FACTOR ** Math.min(Math.max(0, retryCount - 1), HOST_RUNTIME_POLICY.attempt_start_retry_exponent_max),
       MAX_ATTEMPT_START_RETRY_DELAY_MS
     );
     exactJson2 = (left, right) => JSON.stringify(left) === JSON.stringify(right);
@@ -33831,7 +34512,7 @@ var init_runner = __esm({
               assertLocalCredentialIdentity(localState, refreshed.credential);
               credential = refreshed.credential;
               access7 = refreshed;
-              accessExpiresAt = now() + refreshed.expiresIn * 1e3;
+              accessExpiresAt = now() + refreshed.expiresIn * MS_PER_SECOND;
               return refreshed.accessToken;
             })();
             try {
@@ -33843,7 +34524,7 @@ var init_runner = __esm({
           await refreshAccessToken({ signal: this.options.signal });
           const tokenSource = {
             accessToken: async (requestOptions) => {
-              if (!access7 || accessExpiresAt - now() <= 5e3) {
+              if (!access7 || accessExpiresAt - now() <= HOST_RUNTIME_POLICY.access_token_refresh_lead_ms) {
                 return refreshAccessToken(requestOptions);
               }
               return access7.accessToken;
@@ -33944,7 +34625,7 @@ var init_runner = __esm({
                       const runtimeState = await readInferenceAgentRuntimeState(
                         agentRuntimeSettings.statePath
                       );
-                      const retryAtMs = failure2.dispatchOutcome === "outcome_unknown" || failure2.category === "auth" && settings.adapterId === "deepseek-harness" ? null : error48.retryAtMs !== null && error48.retryAtMs > now() ? error48.retryAtMs : now() + (failure2.category === "quota" || failure2.code === "quota_exceeded" ? DEFAULT_AGENT_QUOTA_COOLDOWN_MS : failure2.category === "auth" ? DEFAULT_CODEX_ACCOUNT_COOLDOWN_MS : failure2.code === "provider_rate_limited" || failure2.code === "codex_rate_limited" ? DEFAULT_AGENT_RATE_LIMIT_COOLDOWN_MS : DEFAULT_AGENT_TRANSIENT_COOLDOWN_MS);
+                      const retryAtMs = failure2.dispatchOutcome === "outcome_unknown" || failure2.category === "auth" && settings.adapterId === "deepseek-harness" ? null : error48.retryAtMs !== null && error48.retryAtMs > now() ? error48.retryAtMs : now() + (failure2.category === "quota" || failure2.code === "quota_exceeded" ? DEFAULT_QUOTA_COOLDOWN_MS : failure2.category === "auth" ? DEFAULT_AGENT_AUTH_COOLDOWN_MS : failure2.code === "provider_rate_limited" || failure2.code === "codex_rate_limited" ? DEFAULT_AGENT_RATE_LIMIT_COOLDOWN_MS : DEFAULT_AGENT_TRANSIENT_COOLDOWN_MS);
                       await writeInferenceAgentFailureFence(agentRuntimeSettings.statePath, {
                         schema_version: "vtx_inference_agent_failure_fence_v1",
                         adapter_id: settings.adapterId,
@@ -33977,7 +34658,7 @@ var init_runner = __esm({
                         const retained = await readInferenceAgentRuntimeState(agentRuntimeSettings.statePath);
                         const fence = await readInferenceAgentFailureFence(agentRuntimeSettings.statePath);
                         if (!fence || !canReplayFencedAgentTerminal(retained, fence)) return;
-                        await sleep4(1e3, agentIdleSignal).catch(() => void 0);
+                        await sleep4(HOST_RUNTIME_POLICY.agent_idle_retry_ms, agentIdleSignal).catch(() => void 0);
                         continue;
                       }
                       try {
@@ -33997,7 +34678,7 @@ var init_runner = __esm({
                     const retained = await readInferenceAgentRuntimeState(agentRuntimeSettings.statePath);
                     if (!retained || retained.schema_version !== "vtx_inference_agent_runtime_v3" || !retained.pending_turn?.terminal_receipt) return;
                     if (this.options.once) return;
-                    await sleep4(1e3, agentIdleSignal).catch((error49) => {
+                    await sleep4(HOST_RUNTIME_POLICY.agent_idle_retry_ms, agentIdleSignal).catch((error49) => {
                       if (!quiesceRequested) throw error49;
                     });
                     continue;
@@ -34011,7 +34692,7 @@ var init_runner = __esm({
                   });
                   if (this.options.once) return;
                   try {
-                    await sleep4(1e3, agentIdleSignal).catch((error49) => {
+                    await sleep4(HOST_RUNTIME_POLICY.agent_idle_retry_ms, agentIdleSignal).catch((error49) => {
                       if (!quiesceRequested) throw error49;
                     });
                   } catch {
@@ -34132,7 +34813,7 @@ var init_runner = __esm({
                 if (!retryableRemoteError(error48) || error48 instanceof ExternalInferenceMcpError && error48.definitivelyNotApplied || attempt === settings.remoteRetryLimit) throw error48;
                 const requestedRetryDelay = remoteRetryAfterMs(
                   error48,
-                  Math.min(250 * attempt, 1e3)
+                  Math.min(HOST_RUNTIME_POLICY.remote_retry_backoff_step_ms * attempt, HOST_RUNTIME_POLICY.remote_retry_backoff_max_ms)
                 );
                 const remaining = boundary.deadlineAtMs === void 0 ? Number.POSITIVE_INFINITY : Math.max(0, boundary.deadlineAtMs - now());
                 if (requestedRetryDelay < 1 || requestedRetryDelay >= remaining) {
@@ -34265,7 +34946,7 @@ var init_runner = __esm({
           if (!wasRegistered && receipt.registered && (!receipt.advertisement_expires_at || Date.parse(receipt.advertisement_expires_at) - now() <= settings.advertisementRefreshLeadMs)) {
             await publishAdvertisement("healthy", true);
           }
-          let providerRetryAtMs = this.options.codexRateLimits && codexAccountRateLimitReached(this.options.codexRateLimits) ? codexRateLimitRetryAtMs(this.options.codexRateLimits) ?? now() + DEFAULT_CODEX_ACCOUNT_COOLDOWN_MS : null;
+          let providerRetryAtMs = this.options.codexRateLimits && codexAccountRateLimitReached(this.options.codexRateLimits) ? codexRateLimitRetryAtMs(this.options.codexRateLimits) ?? now() + DEFAULT_QUOTA_COOLDOWN_MS : null;
           let providerCooldownReason = providerRetryAtMs === null ? null : "provider_limit_snapshot";
           let providerFailureRetryAtMs = 0;
           let providerFailureCooldownReason = null;
@@ -34932,7 +35613,7 @@ var init_runner = __esm({
                   const refreshVersion = providerCooldownVersion;
                   const refreshStartedAt = now();
                   const refreshedRateLimits = await this.dependencies.codexAdapter.readAccountRateLimits(
-                    Date.now() + Math.min(2e3, settings.hostHeartbeatMs),
+                    Date.now() + Math.min(HOST_RUNTIME_POLICY.rate_limit_read_timeout_max_ms, settings.hostHeartbeatMs),
                     agentAbort.signal
                   );
                   if (agentAbort.signal.aborted || refreshVersion !== providerCooldownVersion) return;
@@ -34946,7 +35627,7 @@ var init_runner = __esm({
                   );
                   providerQuotaRecoveryObservedAtMs = usableSnapshot ? refreshStartedAt : null;
                   retainKnownQuotaWindows(providerRateLimits.rateLimits);
-                  const refreshedRetryAt = codexAccountRateLimitReached(providerRateLimits) ? codexRateLimitRetryAtMs(providerRateLimits) ?? refreshedAt + DEFAULT_CODEX_ACCOUNT_COOLDOWN_MS : null;
+                  const refreshedRetryAt = codexAccountRateLimitReached(providerRateLimits) ? codexRateLimitRetryAtMs(providerRateLimits) ?? refreshedAt + DEFAULT_QUOTA_COOLDOWN_MS : null;
                   if (refreshedRetryAt !== null && refreshedRetryAt > refreshedAt) {
                     providerRetryAtMs = Math.max(providerRetryAtMs ?? 0, refreshedRetryAt);
                     providerCooldownReason = "provider_limit_snapshot";
@@ -35009,7 +35690,7 @@ var init_runner = __esm({
                   requestDrain("advertisement_failed");
                   break;
                 }
-                nextAdvertisementAttemptAt = now() + remoteRetryAfterMs(error48, 1e3);
+                nextAdvertisementAttemptAt = now() + remoteRetryAfterMs(error48, HOST_RUNTIME_POLICY.remote_retry_fallback_ms);
                 nextClaimAt = Math.max(nextClaimAt, nextAdvertisementAttemptAt);
               }
             }
@@ -35129,7 +35810,7 @@ var init_runner = __esm({
                   }
                 } else if (!this.options.signal?.aborted && retryableRemoteError(error48)) {
                   const rejectedAtMs = now();
-                  const retryAtMs = rejectedAtMs + remoteRetryAfterMs(error48, 1e3);
+                  const retryAtMs = rejectedAtMs + remoteRetryAfterMs(error48, HOST_RUNTIME_POLICY.remote_retry_fallback_ms);
                   if (error48 instanceof ExternalInferenceMcpError && error48.serverFailureCode === "host_not_claimable") {
                     claimAvailabilityBackoff = { untilMs: retryAtMs, rejectedAtMs };
                   } else {
@@ -36488,7 +37169,7 @@ var init_runner = __esm({
             );
           }
           state2 = await this.upgradeLegacyRuntimeState(recoveredState, signal);
-          if (!state2) return this.now() + (this.options.idlePollMs ?? 5e3);
+          if (!state2) return this.now() + (this.options.idlePollMs ?? HOST_RUNTIME_POLICY.agent_idle_poll_ms);
         } else if (recoveredState?.schema_version === "vtx_codex_agent_runtime_v2") {
           if (this.options.adapterId !== "codex") {
             throw new InferenceHostRunnerError(
@@ -36518,7 +37199,7 @@ var init_runner = __esm({
             host_id: this.options.hostId,
             requested_at: nowIso()
           }, { signal });
-          if (!assignment2) return this.now() + (this.options.idlePollMs ?? 5e3);
+          if (!assignment2) return this.now() + (this.options.idlePollMs ?? HOST_RUNTIME_POLICY.agent_idle_poll_ms);
           state2 = {
             schema_version: "vtx_inference_agent_runtime_v3",
             adapter_id: this.options.adapterId,
@@ -36535,11 +37216,11 @@ var init_runner = __esm({
           if (persistedWakeAtMs > this.now()) {
             const wakeOutcome = await this.waitUntilWake(persistedWakeAtMs, signal);
             if (wakeOutcome !== "ready") {
-              return this.now() + (this.options.idlePollMs ?? 5e3);
+              return this.now() + (this.options.idlePollMs ?? HOST_RUNTIME_POLICY.agent_idle_poll_ms);
             }
             const rereadState = await readInferenceAgentRuntimeState(this.options.statePath);
             if (rereadState?.schema_version !== "vtx_inference_agent_runtime_v3" || rereadState.adapter_id !== this.options.adapterId) {
-              return this.now() + (this.options.idlePollMs ?? 5e3);
+              return this.now() + (this.options.idlePollMs ?? HOST_RUNTIME_POLICY.agent_idle_poll_ms);
             }
             state2 = rereadState;
           }
@@ -36577,7 +37258,7 @@ var init_runner = __esm({
               );
             }
             await this.releaseForHostStop(terminal.terminal_receipt.failure_code ?? "provider_failure");
-            return this.now() + (this.options.idlePollMs ?? 5e3);
+            return this.now() + (this.options.idlePollMs ?? HOST_RUNTIME_POLICY.agent_idle_poll_ms);
           }
           if (!terminal.next_wake_at) {
             throw new InferenceHostRunnerError(
@@ -36619,7 +37300,7 @@ var init_runner = __esm({
         }, { signal });
         if (preTurnHeartbeat.directive === "cancel") {
           await this.handleCancelledAssignment(state2, signal);
-          return this.now() + (this.options.idlePollMs ?? 5e3);
+          return this.now() + (this.options.idlePollMs ?? HOST_RUNTIME_POLICY.agent_idle_poll_ms);
         }
         if (this.options.quiesceSignal?.aborted) return this.now();
         assignment = {
@@ -36650,7 +37331,7 @@ var init_runner = __esm({
             }
             latestLeaseExpiry = heartbeat.lease_expires_at;
             await this.sleep(
-              this.options.heartbeatIntervalMs ?? 3e3,
+              this.options.heartbeatIntervalMs ?? HOST_RUNTIME_POLICY.agent_heartbeat_interval_ms,
               turnAbort.signal
             );
           }
@@ -36658,7 +37339,7 @@ var init_runner = __esm({
           if (!turnAbort.signal.aborted) turnAbort.abort(error48);
         });
         try {
-          const deadlineAtMs = this.now() + (this.options.turnTimeoutMs ?? 10 * 6e4);
+          const deadlineAtMs = this.now() + (this.options.turnTimeoutMs ?? HOST_RUNTIME_POLICY.agent_turn_timeout_ms);
           const dataRequestTimeoutMs = this.options.dataRequestTimeoutMs ?? await loadInferenceAgentDataRequestTimeoutMs();
           if (!Number.isSafeInteger(dataRequestTimeoutMs) || dataRequestTimeoutMs < 1) {
             throw new InferenceHostRunnerError("invalid_configuration", "Agent data request timeout is invalid.");
@@ -36844,7 +37525,7 @@ var init_runner = __esm({
           let nextWakeAtMs = null;
           let wakeError;
           try {
-            nextWakeAtMs = wakeScheduledAtMs + parseInferenceAgentWake(result.turn.text, assignment) * 1e3;
+            nextWakeAtMs = wakeScheduledAtMs + parseInferenceAgentWake(result.turn.text, assignment) * MS_PER_SECOND;
           } catch (error48) {
             wakeError = error48;
           }
@@ -36886,7 +37567,7 @@ var init_runner = __esm({
               await writeInferenceAgentRuntimeState(this.options.statePath, state2);
               await this.handleCancelledAssignment(state2);
             }
-            return this.now() + (this.options.idlePollMs ?? 5e3);
+            return this.now() + (this.options.idlePollMs ?? HOST_RUNTIME_POLICY.agent_idle_poll_ms);
           }
           latestLeaseExpiry = wakeHeartbeat.lease_expires_at;
           state2 = {
@@ -36978,7 +37659,7 @@ var init_runner = __esm({
           }
           if (!cancelled) throw error48;
           await this.handleCancelledAssignment(state2);
-          return this.now() + (this.options.idlePollMs ?? 5e3);
+          return this.now() + (this.options.idlePollMs ?? HOST_RUNTIME_POLICY.agent_idle_poll_ms);
         } finally {
           heartbeatStopped = true;
           turnAbort.abort();
@@ -37062,7 +37743,7 @@ var init_runner = __esm({
         await clearInferenceAgentRuntimeState(this.options.statePath);
       }
       async waitUntilWake(nextWakeAtMs, signal) {
-        const heartbeatIntervalMs = this.options.heartbeatIntervalMs ?? 3e3;
+        const heartbeatIntervalMs = this.options.heartbeatIntervalMs ?? HOST_RUNTIME_POLICY.agent_heartbeat_interval_ms;
         while (!this.stopped && !signal?.aborted && !this.options.quiesceSignal?.aborted && this.now() < nextWakeAtMs) {
           const waitSignal = this.options.quiesceSignal ? AbortSignal.any([this.options.quiesceSignal, ...signal ? [signal] : []]) : signal;
           try {
@@ -41184,7 +41865,7 @@ import {
   getSupportedThinkingLevels,
   InMemoryCredentialStore
 } from "@earendil-works/pi-ai";
-var import_ajv2, PI_RUNTIME_VERSION, MAX_TEXT_BYTES, effortToPi, effortToVtx, modelReference, object2, fail, sdkFailureCode, assertPiStructuredOutputSchema, privateRuntime, qualifiedModel, usageSum, PiAdapter, cleanupPiOwnedState;
+var import_ajv2, PI_RUNTIME_VERSION, effortToPi, effortToVtx, modelReference, object2, fail, sdkFailureCode, assertPiStructuredOutputSchema, privateRuntime, qualifiedModel, usageSum, PiAdapter, cleanupPiOwnedState;
 var init_pi_adapter = __esm({
   "lib/inference-host/pi-adapter.ts"() {
     "use strict";
@@ -41193,10 +41874,10 @@ var init_pi_adapter = __esm({
     init_define_VTX_PI_MODEL_POLICY();
     import_ajv2 = __toESM(require_ajv(), 1);
     init_codex_app_server();
+    init_constants();
     init_config2();
     init_pi_transport();
     PI_RUNTIME_VERSION = "0.85.1";
-    MAX_TEXT_BYTES = 3e5;
     effortToPi = (effort2) => effort2 === "none" ? "off" : effort2;
     effortToVtx = (effort2) => effort2 === "off" ? "none" : effort2;
     modelReference = (model) => `${model.provider}/${model.id}`;
@@ -41369,7 +42050,7 @@ var init_pi_adapter = __esm({
         };
         try {
           checkBoundary();
-          if (!input.systemPrompt.trim() || !input.userPrompt.trim() || Buffer.byteLength(input.systemPrompt) > MAX_TEXT_BYTES || Buffer.byteLength(input.userPrompt) > MAX_TEXT_BYTES) throw fail("pi_prompt_invalid", "schema");
+          if (!input.systemPrompt.trim() || !input.userPrompt.trim() || Buffer.byteLength(input.systemPrompt) > EXTERNAL_INFERENCE_LIMITS.max_prompt_bytes || Buffer.byteLength(input.userPrompt) > EXTERNAL_INFERENCE_LIMITS.max_prompt_bytes) throw fail("pi_prompt_invalid", "schema");
           const schema = agent ? agent.outputSchema : object2(JSON.parse(input.outputSchemaJson));
           if (agent && !agent.dataContract.length) throw fail("pi_data_contract_missing", "schema");
           if (schema.type !== "object") throw fail("pi_output_schema_invalid", "schema");
@@ -41568,7 +42249,7 @@ var init_pi_adapter = __esm({
           if (!last) throw fail("pi_result_missing");
           if (last.stopReason !== "stop") throw fail("pi_terminal_incomplete");
           const text = last.content.flatMap((part) => part.type === "text" ? [part.text] : []).join("");
-          if (!text.trim() || Buffer.byteLength(text) > MAX_TEXT_BYTES) throw fail("pi_output_invalid", "schema");
+          if (!text.trim() || Buffer.byteLength(text) > EXTERNAL_INFERENCE_LIMITS.max_candidate_plaintext_bytes) throw fail("pi_output_invalid", "schema");
           let output3;
           try {
             output3 = JSON.parse(text);
@@ -44543,7 +45224,7 @@ import { createWriteStream, readFileSync as readFileSync2 } from "node:fs";
 import { access as access6, chmod as chmod4, mkdir as mkdir5, readFile as readFile12, rm as rm14, writeFile as writeFile5 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
 import { dirname as dirname15, join as join16, resolve as resolve12 } from "node:path";
-var SERVICE_NAME, SYSTEMD_UNIT, LAUNCHD_LABEL, SERVICE_COOPERATIVE_STOP_SECONDS, SERVICE_UPDATE_STARTUP_SECONDS, INFERENCE_HOST_SERVICE_DRAIN_COMMAND, INFERENCE_HOST_SERVICE_QUIESCE_COMMAND, InferenceHostBootstrapRestartRequiredError, inferenceHostServiceChildEnvironment, isWindowsSubsystemForLinux, inferenceHostServiceManifestPath, inferenceHostServiceDesiredPath, inferenceHostServiceLogPath, inferenceHostServiceRuntimePath, xmlEscape, plistEscape, systemdQuote, defaultRunCommand, probeInferenceHostLauncher, managerName, assertRuntimeEnvironment, withoutConcurrencyLimit, assertServicePath, manifestGeneration, assertWorker, assertManifest, assertServiceRuntimeState, assertDesiredState, readInferenceHostServiceManifest, readManifestAcrossAtomicReplacement, readInferenceHostServiceRuntime, readRuntimeAcrossAtomicReplacement, readInferenceHostServiceDesired, readDesiredAcrossAtomicReplacement, writeDesired, runtimeEnvironment, serviceBootstrapArguments, windowsOwnedCommandLine, vbScriptString, windowsServiceLauncher, windowsTaskXml, systemdUnit, launchAgentPlist, sameWorker, sameServiceDefinition, sameWorkerSet, InferenceHostServiceManager, appendServiceLog, spawnInferenceHostServiceChild, runInferenceHostServiceSupervisor;
+var SERVICE_NAME, SYSTEMD_UNIT, LAUNCHD_LABEL, SERVICE_POLICY, SERVICE_COOPERATIVE_STOP_SECONDS, pollAttemptsWithin, INFERENCE_HOST_SERVICE_DRAIN_COMMAND, INFERENCE_HOST_SERVICE_QUIESCE_COMMAND, InferenceHostBootstrapRestartRequiredError, inferenceHostServiceChildEnvironment, isWindowsSubsystemForLinux, inferenceHostServiceManifestPath, inferenceHostServiceDesiredPath, inferenceHostServiceLogPath, inferenceHostServiceRuntimePath, xmlEscape, plistEscape, systemdQuote, defaultRunCommand, probeInferenceHostLauncher, managerName, assertRuntimeEnvironment, withoutConcurrencyLimit, assertServicePath, manifestGeneration, assertWorker, assertManifest, assertServiceRuntimeState, assertDesiredState, readInferenceHostServiceManifest, readManifestAcrossAtomicReplacement, readInferenceHostServiceRuntime, readRuntimeAcrossAtomicReplacement, readInferenceHostServiceDesired, readDesiredAcrossAtomicReplacement, writeDesired, runtimeEnvironment, serviceBootstrapArguments, windowsOwnedCommandLine, vbScriptString, windowsServiceLauncher, windowsTaskXml, systemdUnit, launchAgentPlist, sameWorker, sameServiceDefinition, sameWorkerSet, InferenceHostServiceManager, appendServiceLog, spawnInferenceHostServiceChild, runInferenceHostServiceSupervisor;
 var init_service = __esm({
   "lib/inference-host/service.ts"() {
     "use strict";
@@ -44553,13 +45234,15 @@ var init_service = __esm({
     init_service_launcher_state();
     init_agent_cli_release();
     init_runtime_policy_generated();
+    init_constants();
     init_durable_adapter();
     init_config2();
     SERVICE_NAME = "VTX Macro Inference Host";
     SYSTEMD_UNIT = "vtx-inference-host.service";
     LAUNCHD_LABEL = "com.vtxmacro.inference-host";
-    SERVICE_COOPERATIVE_STOP_SECONDS = 75;
-    SERVICE_UPDATE_STARTUP_SECONDS = 600;
+    SERVICE_POLICY = runtime_policy_generated_default.external_inference.service;
+    SERVICE_COOPERATIVE_STOP_SECONDS = Math.ceil(SERVICE_POLICY.cooperative_stop_timeout_ms / MS_PER_SECOND);
+    pollAttemptsWithin = (milliseconds) => Math.ceil(milliseconds / SERVICE_POLICY.startup_poll_interval_ms);
     INFERENCE_HOST_SERVICE_DRAIN_COMMAND = "vtx-inference-host-service-drain-v1";
     INFERENCE_HOST_SERVICE_QUIESCE_COMMAND = "vtx-inference-host-service-quiesce-v1";
     InferenceHostBootstrapRestartRequiredError = class extends Error {
@@ -44980,9 +45663,9 @@ WantedBy=default.target
         this.sleep = dependencies.sleep ?? (async (milliseconds) => {
           await new Promise((resolvePromise) => setTimeout(resolvePromise, milliseconds));
         });
-        this.stopWaitAttempts = dependencies.stopWaitAttempts ?? SERVICE_COOPERATIVE_STOP_SECONDS * 4;
-        this.startWaitAttempts = dependencies.startWaitAttempts ?? runtime_policy_generated_default.external_inference.service.startup_max_attempts;
-        this.reconcileWaitAttempts = dependencies.reconcileWaitAttempts ?? SERVICE_COOPERATIVE_STOP_SECONDS * 4;
+        this.stopWaitAttempts = dependencies.stopWaitAttempts ?? pollAttemptsWithin(SERVICE_POLICY.cooperative_stop_timeout_ms);
+        this.startWaitAttempts = dependencies.startWaitAttempts ?? SERVICE_POLICY.startup_max_attempts;
+        this.reconcileWaitAttempts = dependencies.reconcileWaitAttempts ?? pollAttemptsWithin(SERVICE_POLICY.cooperative_stop_timeout_ms);
         this.confirmInitialReadiness = dependencies.confirmInitialReadiness ?? true;
         this.acquireProcessLock = dependencies.acquireProcessLock ?? acquireInferenceHostProcessLock;
         managerName(this.platform);
@@ -45024,17 +45707,17 @@ WantedBy=default.target
       }
       async withControlLock(operation) {
         let lock2 = null;
-        for (let attempt = 0; attempt < 400; attempt += 1) {
+        for (let attempt = 0; attempt < SERVICE_POLICY.control_lock_wait_attempts; attempt += 1) {
           try {
             lock2 = await this.acquireProcessLock(this.controlLockPath());
             break;
           } catch (error48) {
             if (!/already owns/iu.test(error48 instanceof Error ? error48.message : "")) throw error48;
-            await this.sleep(250);
+            await this.sleep(SERVICE_POLICY.control_lock_retry_interval_ms);
           }
         }
         if (!lock2) {
-          throw new Error("Another inference-host service control operation did not finish within 100 seconds.");
+          throw new Error(`Another inference-host service control operation did not finish within ${SERVICE_POLICY.control_lock_wait_attempts * SERVICE_POLICY.control_lock_retry_interval_ms / MS_PER_SECOND} seconds.`);
         }
         try {
           return await operation();
@@ -45112,9 +45795,9 @@ WantedBy=default.target
         for (let attempt = 0; attempt < this.startWaitAttempts; attempt += 1) {
           const status = await this.status();
           if (status.manager_active) return status;
-          await this.sleep(runtime_policy_generated_default.external_inference.service.startup_poll_interval_ms);
+          await this.sleep(SERVICE_POLICY.startup_poll_interval_ms);
         }
-        throw new Error(`Background service did not reach an active state within ${this.startWaitAttempts * runtime_policy_generated_default.external_inference.service.startup_poll_interval_ms / 1e3} seconds.`);
+        throw new Error(`Background service did not reach an active state within ${this.startWaitAttempts * SERVICE_POLICY.startup_poll_interval_ms / MS_PER_SECOND} seconds.`);
       }
       async restoreRunningSupervisor(manifest, preserveGeneration = false, targetInstanceName) {
         const previousRuntime = await readRuntimeAcrossAtomicReplacement(this.runtimePath()).catch(() => null);
@@ -45176,7 +45859,7 @@ ${result.stderr}`)) {
             const allReady = runtime.workers.every((worker) => worker.state === "running");
             if (exactWorkerSet && (targetInstanceName ? target?.state === "running" : allReady)) {
               consecutiveReadyObservations += 1;
-              if (consecutiveReadyObservations >= 2) return runtime;
+              if (consecutiveReadyObservations >= SERVICE_POLICY.ready_consecutive_observations) return runtime;
             } else {
               consecutiveReadyObservations = 0;
             }
@@ -45189,7 +45872,7 @@ ${result.stderr}`)) {
           if (runtime?.rejected_manifest_generation === manifest.generation) {
             throw new Error("Inference-host supervisor rejected the updated worker set.");
           }
-          await this.sleep(250);
+          await this.sleep(SERVICE_POLICY.startup_poll_interval_ms);
         }
         throw new Error(
           targetInstanceName ? `Inference-host supervisor did not confirm worker ${targetInstanceName} ready before timeout.` : "Inference-host supervisor did not confirm the updated worker set before timeout."
@@ -45257,7 +45940,7 @@ ${started.stderr}`)) {
               await this.waitForManifestApplied(
                 manifest,
                 targetInstanceName,
-                Math.max(this.reconcileWaitAttempts, SERVICE_UPDATE_STARTUP_SECONDS * 4)
+                Math.max(this.reconcileWaitAttempts, pollAttemptsWithin(SERVICE_POLICY.update_readiness_timeout_ms))
               );
             }
           }
@@ -45331,7 +46014,7 @@ ${cleanup.stderr}`)) {
                   // restores the previous manifest. Never give rollback less than
                   // a bounded 100-observation confirmation window, even when a
                   // caller intentionally shortens forward-readiness checks.
-                  Math.max(this.reconcileWaitAttempts, 100)
+                  Math.max(this.reconcileWaitAttempts, SERVICE_POLICY.rollback_confirmation_min_attempts)
                 );
               } catch (rollbackError) {
                 throw new Error(
@@ -45571,7 +46254,7 @@ ${result.stderr}`)) {
               serviceReleased = true;
               break;
             }
-            await this.sleep(250);
+            await this.sleep(SERVICE_POLICY.startup_poll_interval_ms);
           }
           if (!serviceReleased) {
             throw new Error(
@@ -45796,7 +46479,7 @@ ${result.stderr}`)) {
           cooperativeStopTimer = setTimeout(() => {
             cooperativeStopTimedOut = true;
             child.kill("SIGKILL");
-          }, SERVICE_COOPERATIVE_STOP_SECONDS * 1e3);
+          }, SERVICE_POLICY.cooperative_stop_timeout_ms);
           cooperativeStopTimer.unref();
         };
         if (signal.aborted) onAbort();
@@ -45977,7 +46660,7 @@ ${result.stderr}`)) {
                   if (readinessSignalled) return;
                   readinessSignalled = true;
                   readinessTask = (async () => {
-                    await sleep4(500);
+                    await sleep4(SERVICE_POLICY.worker_readiness_settle_ms);
                     if (!launchSettled && !attemptController.signal.aborted && !record5.controller.signal.aborted && !signal.aborted) {
                       await updateRecord(record5, "running");
                     }
@@ -46000,8 +46683,8 @@ ${result.stderr}`)) {
               throw new Error("worker_cooperative_stop_timeout");
             }
             if (signal.aborted || quiesceSignal.aborted || record5.controller.signal.aborted || !await readDesiredAcrossAtomicReplacement(desiredPath)) break;
-            failures = result.uptimeMs >= runtime_policy_generated_default.external_inference.service.restart_stable_uptime_ms ? 0 : failures + 1;
-            const retryAfterMs = Math.min(runtime_policy_generated_default.external_inference.service.restart_backoff_base_ms * 2 ** Math.min(failures, runtime_policy_generated_default.external_inference.service.restart_exponent_max), runtime_policy_generated_default.external_inference.service.restart_backoff_max_ms);
+            failures = result.uptimeMs >= SERVICE_POLICY.restart_stable_uptime_ms ? 0 : failures + 1;
+            const retryAfterMs = Math.min(SERVICE_POLICY.restart_backoff_base_ms * BACKOFF_GROWTH_FACTOR ** Math.min(failures, SERVICE_POLICY.restart_exponent_max), SERVICE_POLICY.restart_backoff_max_ms);
             await updateRecord(record5, "failed", "worker_exited");
             await appendServiceLog(serviceManifest.log_path, "worker_exited", {
               instance_name: record5.worker.instance_name,
@@ -46015,7 +46698,7 @@ ${result.stderr}`)) {
             if (error48 instanceof Error && error48.message === "worker_cooperative_stop_timeout") throw error48;
             if (signal.aborted || quiesceSignal.aborted || record5.controller.signal.aborted) break;
             failures += 1;
-            const retryAfterMs = Math.min(runtime_policy_generated_default.external_inference.service.restart_backoff_base_ms * 2 ** Math.min(failures, runtime_policy_generated_default.external_inference.service.restart_exponent_max), runtime_policy_generated_default.external_inference.service.restart_backoff_max_ms);
+            const retryAfterMs = Math.min(SERVICE_POLICY.restart_backoff_base_ms * BACKOFF_GROWTH_FACTOR ** Math.min(failures, SERVICE_POLICY.restart_exponent_max), SERVICE_POLICY.restart_backoff_max_ms);
             await updateRecord(record5, "failed", "worker_launch_failed");
             await appendServiceLog(serviceManifest.log_path, "worker_launch_failed", {
               instance_name: record5.worker.instance_name,
@@ -46111,7 +46794,7 @@ ${result.stderr}`)) {
             if (!storedNext) throw new Error("Inference-host service manifest is missing.");
             const next = withServiceScript(storedNext);
             if (next.generation !== appliedManifest.generation && next.generation !== rejectedManifestGeneration) await reconcile(next);
-            await sleep4(250);
+            await sleep4(SERVICE_POLICY.supervisor_manifest_poll_interval_ms);
           }
           if (quiesceSignal.aborted && !signal.aborted) {
             let finished = false;
@@ -46120,7 +46803,7 @@ ${result.stderr}`)) {
               return results;
             });
             while (!finished && !signal.aborted && await readDesiredAcrossAtomicReplacement(desiredPath)) {
-              await Promise.race([completion, sleep4(250)]);
+              await Promise.race([completion, sleep4(SERVICE_POLICY.supervisor_manifest_poll_interval_ms)]);
             }
             if (!finished) {
               await drainWorkers();
@@ -46340,6 +47023,8 @@ var init_cli = __esm({
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
+    init_runtime_policy_generated();
+    init_constants();
     init_external_inference_contract();
     init_agent_cli_release();
     init_reauthorize();
@@ -46377,8 +47062,8 @@ var init_cli = __esm({
     foregroundHostLockPath = (config2) => `${config2.processLockPath}.foreground`;
     credentialLifecycleLockPath = (config2) => `${inferenceHostCredentialContextPath(config2)}.lock`;
     serviceRecoveryCommandLockPath = (config2) => `${config2.supervisorProcessLockPath}.service-recovery-command`;
-    AGENT_HEARTBEAT_INTERVAL_MS = 3e3;
-    AGENT_HEARTBEAT_MAX_RETRY_DELAY_MS = 9e3;
+    AGENT_HEARTBEAT_INTERVAL_MS = runtime_policy_generated_default.external_inference.host_runtime.agent_heartbeat_interval_ms;
+    AGENT_HEARTBEAT_MAX_RETRY_DELAY_MS = runtime_policy_generated_default.external_inference.host_runtime.agent_heartbeat_max_retry_delay_ms;
     retryableAgentHeartbeatError = (error48) => {
       if (!(error48 instanceof ExternalInferenceMcpError)) return false;
       if (error48.code === "network_error" || error48.code === "request_timeout") return true;
@@ -47244,7 +47929,7 @@ Waiting for approval...
         const status = await (dependencies.loginCodex ?? loginCodexSubscription)({
           binary,
           codexHome: config2.codexHomePath,
-          deadlineAtMs: Date.now() + 15 * 6e4,
+          deadlineAtMs: Date.now() + runtime_policy_generated_default.external_inference.host_runtime.codex_login_timeout_ms,
           signal: cancellation.signal,
           onChallenge: async (challenge) => {
             emitStdout(parsed.json ? `${JSON.stringify({
@@ -47294,7 +47979,7 @@ Waiting for approval...
         await (dependencies.logoutCodex ?? logoutCodexSubscription)({
           binary,
           codexHome: config2.codexHomePath,
-          deadlineAtMs: Date.now() + 3e4,
+          deadlineAtMs: Date.now() + runtime_policy_generated_default.external_inference.host_runtime.codex_command_timeout_ms,
           signal: cancellation.signal
         });
         return {
@@ -47941,7 +48626,7 @@ Waiting for approval...
           const preflight = await (dependencies.preflightCodex ?? preflightCodexSubscription)({
             binary: verifiedBinary,
             codexHome: config2.codexHomePath,
-            deadlineAtMs: Date.now() + 3e4,
+            deadlineAtMs: Date.now() + runtime_policy_generated_default.external_inference.host_runtime.codex_command_timeout_ms,
             signal: cancellation.signal
           });
           const summary = await (dependencies.runForeground ?? defaultRunForeground)({
@@ -48129,7 +48814,7 @@ Waiting for approval...
       const sleep4 = dependencies.sleep ?? (async (milliseconds) => {
         await new Promise((resolve14) => setTimeout(resolve14, milliseconds));
       });
-      const stopAt = now().getTime() + parsed.waitSeconds * 1e3;
+      const stopAt = now().getTime() + parsed.waitSeconds * MS_PER_SECOND;
       while (true) {
         const result = await withAgentCommandLock(config2, async () => {
           let state2 = await readInferenceForegroundAgentControlState(config2.statePath) ?? foregroundAgentControlState(session.localState.host_id, now().toISOString());
@@ -48655,7 +49340,7 @@ Waiting for approval...
                     pendingHeartbeatRequest = heartbeatRequest;
                     consecutiveHeartbeatFailures += 1;
                     retryDelayMs = Math.min(
-                      AGENT_HEARTBEAT_INTERVAL_MS * 2 ** Math.max(0, consecutiveHeartbeatFailures - 1),
+                      AGENT_HEARTBEAT_INTERVAL_MS * BACKOFF_GROWTH_FACTOR ** Math.max(0, consecutiveHeartbeatFailures - 1),
                       AGENT_HEARTBEAT_MAX_RETRY_DELAY_MS
                     );
                     const message = `Agent-driven inference heartbeat was temporarily unavailable; retrying in ${retryDelayMs}ms.
@@ -48712,7 +49397,7 @@ Waiting for approval...
                   if (!retryableAgentHeartbeatError(error48)) throw error48;
                   consecutiveHeartbeatFailures += 1;
                   retryDelayMs = Math.min(
-                    AGENT_HEARTBEAT_INTERVAL_MS * 2 ** Math.max(0, consecutiveHeartbeatFailures - 1),
+                    AGENT_HEARTBEAT_INTERVAL_MS * BACKOFF_GROWTH_FACTOR ** Math.max(0, consecutiveHeartbeatFailures - 1),
                     AGENT_HEARTBEAT_MAX_RETRY_DELAY_MS
                   );
                   emitStderr(parsed.json ? `${JSON.stringify({
@@ -48761,7 +49446,7 @@ Waiting for approval...
       const sleep4 = dependencies.sleep ?? (async (milliseconds) => {
         await new Promise((resolve14) => setTimeout(resolve14, milliseconds));
       });
-      const stopAt = now().getTime() + parsed.waitSeconds * 1e3;
+      const stopAt = now().getTime() + parsed.waitSeconds * MS_PER_SECOND;
       while (true) {
         let pending3 = await readInferenceAgentNextState(config2.statePath);
         if (!pending3) {
@@ -49468,7 +50153,7 @@ Waiting for approval...
           const preflight = await (dependencies.preflightCodex ?? preflightCodexSubscription)({
             binary,
             codexHome: config2.codexHomePath,
-            deadlineAtMs: Date.now() + 3e4
+            deadlineAtMs: Date.now() + runtime_policy_generated_default.external_inference.host_runtime.codex_command_timeout_ms
           });
           const status = await manager.install({
             adapter: "codex",
@@ -50118,9 +50803,9 @@ function resolveBrowserApiUrl(hostname3, protocol, publicApiUrl, development) {
     if (local) {
       let port = "8000";
       try {
-        const configured = new URL(publicApiUrl ?? "");
-        if (configured.port && (configured.hostname === "localhost" || configured.hostname === "127.0.0.1")) {
-          port = configured.port;
+        const configured2 = new URL(publicApiUrl ?? "");
+        if (configured2.port && (configured2.hostname === "localhost" || configured2.hostname === "127.0.0.1")) {
+          port = configured2.port;
         }
       } catch {
       }
@@ -50208,7 +50893,12 @@ function configureApiTransport(transport) {
   if (!/^https?:\/\/[^/]/i.test(baseUrl)) {
     throw new Error("VTX API transport requires an absolute http(s) base URL.");
   }
-  configuredApiTransport = { baseUrl, authorization: transport.authorization, headers: transport.headers };
+  configuredApiTransport = {
+    baseUrl,
+    authorization: transport.authorization,
+    sessionToken: transport.sessionToken,
+    headers: transport.headers
+  };
 }
 function getActiveProfileId() {
   return activeProfileId;
@@ -50251,6 +50941,8 @@ var init_shared = __esm({
       }
       const authorization = transport.authorization();
       if (authorization) headers.set("Authorization", authorization);
+      const sessionToken = transport.sessionToken?.();
+      if (sessionToken) headers.set("Cookie", `session_token=${sessionToken}`);
       return fetch(input, { ...init2, headers, credentials: "omit" });
     };
     sleep = (ms) => new Promise((resolve14) => setTimeout(resolve14, ms));
@@ -50282,19 +50974,19 @@ var init_shared = __esm({
     shareClientGetRequest = async (key, request, options) => {
       if (!canUseClientGetRequestCache(options?.cookie)) {
         if (options?.signal?.aborted) throw toAbortError(options.signal.reason);
-        return raceWithAbortSignal(request(), options?.signal);
+        return raceWithAbortSignal(request(options?.signal), options?.signal);
       }
       const now = Date.now();
       const recent = recentClientGetResponses.get(key);
       if (recent && recent.expiresAt > now) return recent.value;
       if (recent) recentClientGetResponses.delete(key);
       if (options?.signal?.aborted) throw toAbortError(options.signal.reason);
-      if (options?.signal && !options.shareAbortScoped) return raceWithAbortSignal(request(), options.signal);
+      if (options?.signal && !options.shareAbortScoped) return raceWithAbortSignal(request(options.signal), options.signal);
       const existing = inFlightClientGetRequests.get(key);
       if (existing) return raceWithAbortSignal(existing, options?.signal);
       const requestGeneration = clientGetRequestGenerations.get(key) ?? 0;
       initializedClientGetRequestKeys.add(key);
-      const promise2 = request().then((value) => {
+      const promise2 = request(void 0).then((value) => {
         if ((clientGetRequestGenerations.get(key) ?? 0) === requestGeneration) {
           recentClientGetResponses.set(key, {
             expiresAt: Date.now() + (options?.ttlMs ?? CLIENT_GET_DEDUPE_TTL_MS),
@@ -50811,6 +51503,16 @@ var init_ai_status_auth_fallback_contract = __esm({
   }
 });
 
+// lib/navigation/same-origin.ts
+var init_same_origin = __esm({
+  "lib/navigation/same-origin.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+  }
+});
+
 // lib/auth/google-auth-url.ts
 var init_google_auth_url = __esm({
   "lib/auth/google-auth-url.ts"() {
@@ -50818,6 +51520,7 @@ var init_google_auth_url = __esm({
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
+    init_same_origin();
   }
 });
 
@@ -51674,7 +52377,7 @@ var init_local_breadcrumbs = __esm({
 });
 
 // lib/runtime/client-runtime-ownership-errors.ts
-var CLIENT_RUNTIME_OWNERSHIP_ERROR_CODES, OWNERSHIP_CODE_SET, readField, readClientRuntimeOwnershipErrorCode, readClientRuntimeOwnershipLossScope, readStatus, LEASE_ENDED_CODES, clientRuntimeLeaseEndedFromCode, ownershipLossReasonFromCode, clientRuntimeReleasedFromCode, clientRuntimeSessionStoppedFromCode;
+var CLIENT_RUNTIME_OWNERSHIP_ERROR_CODES, OWNERSHIP_CODE_SET, readField, readClientRuntimeOwnershipErrorCode, readClientRuntimeOwnershipLossScope, readStatus, LEASE_ENDED_CODES, clientRuntimeLeaseEndedFromCode, AUTHORITY_ENDED_CODES, clientRuntimeAuthorityEndedFromCode, ownershipLossReasonFromCode, clientRuntimeReleasedFromCode, clientRuntimeSessionStoppedFromCode;
 var init_client_runtime_ownership_errors = __esm({
   "lib/runtime/client-runtime-ownership-errors.ts"() {
     "use strict";
@@ -51732,6 +52435,16 @@ var init_client_runtime_ownership_errors = __esm({
       }
       return (code === "runtime_owner_superseded" || code === "runtime_owner_released") && statusCode === 401;
     };
+    AUTHORITY_ENDED_CODES = /* @__PURE__ */ new Set([
+      ...LEASE_ENDED_CODES,
+      "runtime_owner_superseded",
+      "runtime_owner_released",
+      "runtime_scheduler_instance_mismatch"
+    ]);
+    clientRuntimeAuthorityEndedFromCode = (error48) => {
+      const code = readClientRuntimeOwnershipErrorCode(error48);
+      return code !== null && AUTHORITY_ENDED_CODES.has(code);
+    };
     ownershipLossReasonFromCode = (error48) => {
       const code = readClientRuntimeOwnershipErrorCode(error48);
       if (code === null) {
@@ -51796,7 +52509,7 @@ var init_billing = __esm({
 async function getRecentCandles(limit = 10, exchange = "kraken", symbol2 = "PI_XBTUSD", timeframe = "1m", signal) {
   const params = new URLSearchParams({ limit: limit.toString(), exchange, symbol: symbol2, timeframe });
   const requestUrl = `${getApiUrl()}/candles/recent?${params.toString()}`;
-  return shareClientGetRequest(`recent-candles:${params.toString()}`, async () => {
+  return shareClientGetRequest(`recent-candles:${params.toString()}`, async (requestSignal) => {
     const trace = startRuntimeNetworkDebugTrace({
       kind: "runtime",
       label: "market_data_api:candles_recent",
@@ -51808,7 +52521,7 @@ async function getRecentCandles(limit = 10, exchange = "kraken", symbol2 = "PI_X
     try {
       response = await apiFetch(requestUrl, {
         cache: "no-store",
-        signal: typeof window === "undefined" ? signal : void 0
+        signal: requestSignal
       });
       if (!response.ok) {
         const error48 = await buildMarketDataFetchError(response, "recent candles", "/candles/recent");
@@ -51836,7 +52549,7 @@ async function getRecentCandles(limit = 10, exchange = "kraken", symbol2 = "PI_X
 }
 async function getLiveTicker(symbol2 = "PI_XBTUSD", exchange = "kraken", signal) {
   const requestKey = `live-ticker:${symbol2}:${exchange}`;
-  return shareClientGetRequest(requestKey, async () => {
+  return shareClientGetRequest(requestKey, async (requestSignal) => {
     const requestUrl = `${getApiUrl()}/ticker/live?symbol=${encodeURIComponent(symbol2)}&exchange=${encodeURIComponent(exchange)}`;
     const trace = startRuntimeNetworkDebugTrace({
       kind: "runtime",
@@ -51847,7 +52560,7 @@ async function getLiveTicker(symbol2 = "PI_XBTUSD", exchange = "kraken", signal)
     });
     let response = null;
     try {
-      response = await apiFetch(requestUrl, { cache: "no-store", signal });
+      response = await apiFetch(requestUrl, { cache: "no-store", signal: requestSignal });
       if (!response.ok) {
         const error48 = await buildMarketDataFetchError(response, "live ticker", "/ticker/live");
         trace.attachResponse({ status: response.status, statusText: response.statusText, url: response.url });
@@ -51965,8 +52678,12 @@ function configureRuntimeHostStorage(storage3) {
 }
 function runtimeHostStorage() {
   if (configuredStorage) return configuredStorage;
-  if (typeof window !== "undefined" && typeof window.localStorage !== "undefined") {
-    return window.localStorage;
+  try {
+    if (typeof window !== "undefined" && typeof window.localStorage !== "undefined") {
+      return window.localStorage;
+    }
+  } catch {
+    return null;
   }
   return null;
 }
@@ -60339,7 +61056,7 @@ var init_strings = __esm({
 });
 
 // node_modules/ethers/lib.esm/constants/index.js
-var init_constants = __esm({
+var init_constants2 = __esm({
   "node_modules/ethers/lib.esm/constants/index.js"() {
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
@@ -60361,7 +61078,7 @@ var init_signature = __esm({
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
-    init_constants();
+    init_constants2();
     init_utils();
     BN_04 = BigInt(0);
     BN_13 = BigInt(1);
@@ -64590,7 +65307,7 @@ var init_message = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_crypto3();
-    init_constants();
+    init_constants2();
     init_transaction2();
     init_utils();
   }
@@ -70198,7 +70915,7 @@ var init_ens_resolver = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_address2();
-    init_constants();
+    init_constants2();
     init_contract2();
     init_hash();
     init_utils();
@@ -71845,7 +72562,7 @@ var init_abstract_provider = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_address2();
-    init_constants();
+    init_constants2();
     init_contract2();
     init_hash();
     init_transaction2();
@@ -83444,7 +84161,7 @@ var init_ethers = __esm({
     init_version();
     init_abi();
     init_address2();
-    init_constants();
+    init_constants2();
     init_contract2();
     init_crypto3();
     init_hash();
@@ -84612,6 +85329,7 @@ var init_hyperliquid_client = __esm({
     init_order_identity();
     init_hyperliquid_order_status();
     init_runtime_policy_generated2();
+    init_constants();
     init_hyperliquid_public_read();
     init_api2();
     init_abort();
@@ -84836,9 +85554,9 @@ var init_hyperliquid_client = __esm({
       if (explicit) {
         return explicit;
       }
-      const configured = input.config?.client_runtime_exchange_endpoints?.hyperliquid_api_url?.trim();
-      if (configured) {
-        return configured;
+      const configured2 = input.config?.client_runtime_exchange_endpoints?.hyperliquid_api_url?.trim();
+      if (configured2) {
+        return configured2;
       }
       throw new Error("Missing client runtime Hyperliquid API URL.");
     };
@@ -86636,6 +87354,13 @@ var init_hyperliquid_client = __esm({
             }
           };
           const settleDefinitiveSuccess = async (exchangeOrderId, orderMemberResults) => {
+            const settlementPolicy = runtime_policy_generated_default2.trading.engine.client_runtime.exchange_mutation;
+            const settlementDeadlineMs = globalThis.performance.now() + settlementPolicy.settlement_retry_window_seconds * MS_PER_SECOND;
+            const handOffToReconciliation = () => {
+              if (begunMutation != null && pinnedAuthority != null) {
+                handOffClientExchangeMutationToReconciliation(begunMutation, pinnedAuthority);
+              }
+            };
             while (true) {
               try {
                 const settledMutation = await settleDurableMutation(
@@ -86651,15 +87376,14 @@ var init_hyperliquid_client = __esm({
                 }
                 return;
               } catch (settlementError) {
+                const settlementCause = settlementError.settlementCause;
                 if (input.signal?.aborted) {
+                  handOffToReconciliation();
                   throw input.signal.reason instanceof Error ? input.signal.reason : settlementError;
                 }
-                if (isClientExchangeMutationAuthorityConflict(
-                  settlementError.settlementCause
-                )) {
-                  if (begunMutation != null && pinnedAuthority != null) {
-                    handOffClientExchangeMutationToReconciliation(begunMutation, pinnedAuthority);
-                  }
+                const neverSettles = isClientExchangeMutationAuthorityConflict(settlementCause);
+                if (neverSettles || globalThis.performance.now() + settlementPolicy.settlement_retry_milliseconds > settlementDeadlineMs) {
+                  handOffToReconciliation();
                   throw new RuntimeExecutionError(
                     "Exchange submission may have completed; durable reconciliation is pending.",
                     "outcome_unknown"
@@ -86674,7 +87398,10 @@ var init_hyperliquid_client = __esm({
                     input.signal?.removeEventListener("abort", finish);
                     resolve14();
                   };
-                  const timeoutId = globalThis.setTimeout(finish, 1e3);
+                  const timeoutId = globalThis.setTimeout(
+                    finish,
+                    settlementPolicy.settlement_retry_milliseconds
+                  );
                   input.signal?.addEventListener("abort", finish, { once: true });
                 });
               }
@@ -87078,7 +87805,7 @@ async function getPreferences(cookie, profileId, signal, includeTradeLayouts = f
   const schedulerInstanceId = String(runtimeAuthority?.schedulerInstanceId ?? "").trim() || void 0;
   const baseRequestKey = clientPreferencesRequestKey(effectiveProfileId, includeTradeLayouts);
   const requestKey = schedulerInstanceId ? `${baseRequestKey}:scheduler=${schedulerInstanceId}` : baseRequestKey;
-  return shareClientGetRequest(requestKey, async () => {
+  return shareClientGetRequest(requestKey, async (requestSignal) => {
     const headers = getProfileHeaders({}, profileId);
     if (cookie) {
       headers["Cookie"] = cookie;
@@ -87101,7 +87828,7 @@ async function getPreferences(cookie, profileId, signal, includeTradeLayouts = f
       credentials: "include",
       cache: "no-store",
       headers,
-      signal: typeof window === "undefined" ? signal : void 0
+      signal: requestSignal
     });
     if (!response.ok) {
       throwUnauthorizedIfNeeded(response);
@@ -87261,7 +87988,7 @@ async function acknowledgeClientCopyTradingOrderAction(profileId, actionId, payl
 }
 async function getLLMConfig(cookie, profileId, signal) {
   const effectiveProfileId = profileId ?? getActiveProfileId() ?? null;
-  return shareClientGetRequest(clientGetRequestKey("llm-config", effectiveProfileId), async () => {
+  return shareClientGetRequest(clientGetRequestKey("llm-config", effectiveProfileId), async (requestSignal) => {
     const headers = getProfileHeaders({
       "Content-Type": "application/json"
     }, profileId);
@@ -87272,7 +87999,7 @@ async function getLLMConfig(cookie, profileId, signal) {
       method: "GET",
       headers,
       credentials: "include",
-      signal
+      signal: requestSignal
     });
     if (!response.ok) {
       const message = await getErrorMessageFromResponse(
@@ -88495,7 +89222,7 @@ async function getClientRuntimeStatuses(profileIds, signal, options) {
   }
   const viewer = resolveClientRuntimeStatusViewerHeaders(options?.runtimeViewer);
   const requestKey = `client-runtime-statuses:${normalizedProfileIds.join(",")}${viewer.requestKey}`;
-  return shareClientGetRequest(requestKey, async () => {
+  return shareClientGetRequest(requestKey, async (requestSignal) => {
     const headers = { ...viewer.headers };
     const response = await apiFetch(
       `${getApiUrl()}/trading/ai/runtime/statuses?${params.toString()}`,
@@ -88505,7 +89232,7 @@ async function getClientRuntimeStatuses(profileIds, signal, options) {
         cache: "no-store",
         headers,
         // Without the browser's shared request a caller's abort ends the request too.
-        signal: typeof window === "undefined" ? signal : void 0
+        signal: requestSignal
       }
     );
     if (!response.ok) {
@@ -89024,15 +89751,11 @@ var init_api2 = __esm({
     CLIENT_EXCHANGE_MUTATION_AUTHORITY_MISMATCH = "exchange_mutation_authority_mismatch";
     isClientExchangeMutationAuthorityConflict = (error48) => {
       const candidate = error48;
+      if (clientRuntimeAuthorityEndedFromCode(error48)) return true;
       if (Number(candidate?.status) !== 409) return false;
-      if (candidate?.code === CLIENT_EXCHANGE_MUTATION_AUTHORITY_MISMATCH) return true;
-      return /does not own this exchange mutation/i.test(String(candidate?.message ?? ""));
+      return candidate?.code === CLIENT_EXCHANGE_MUTATION_AUTHORITY_MISMATCH || /does not own this exchange mutation/i.test(String(candidate?.message ?? ""));
     };
-    handOffClientExchangeMutationToReconciliation = (mutation, authority) => scheduleClientExchangeMutationReconciliation(
-      authority.numericProfileId,
-      mutation,
-      authority.requestOptions
-    );
+    handOffClientExchangeMutationToReconciliation = (mutation, authority) => scheduleClientExchangeMutationReconciliation(authority.numericProfileId, mutation, authority.requestOptions);
     clientExchangeMutationAuthorityBody = (authority) => {
       const schedulerInstanceId = String(authority.requestOptions.schedulerInstanceId ?? "").trim();
       return {
@@ -89172,11 +89895,8 @@ var init_api2 = __esm({
       const timer = globalThis.setTimeout(() => {
         const scheduled = clientExchangeMutationReconciliationTimers.get(key);
         clientExchangeMutationReconciliationTimers.delete(key);
-        void postClientExchangeMutationReconciliation(
-          profileId,
-          mutation.mutation_id,
-          scheduled?.requestOptions ?? authority
-        ).catch(() => {
+        const requestOptions2 = scheduled?.requestOptions ?? authority;
+        void postClientExchangeMutationReconciliation(profileId, mutation.mutation_id, requestOptions2).catch((error48) => requestOptions2.runtimeLeaseToken && clientRuntimeAuthorityEndedFromCode(error48) ? postClientExchangeMutationReconciliation(profileId, mutation.mutation_id, { omitRuntimeLeaseToken: true }) : void 0).catch(() => {
         });
       }, Math.max(0, delayMs));
       clientExchangeMutationReconciliationTimers.set(key, {
@@ -91546,10 +92266,10 @@ var init_hyperliquid_account_state_adapter = __esm({
     };
     listPerpDexsForAccountState = (config2, selectedDex, aggregatePerpDexs, perpDexScope) => {
       if (aggregatePerpDexs) {
-        const configured = listConfiguredPerpDexs(config2);
-        if (!perpDexScope) return configured;
+        const configured2 = listConfiguredPerpDexs(config2);
+        if (!perpDexScope) return configured2;
         const scope = new Set(perpDexScope.map(normalizePerpDexName));
-        return configured.filter((dex) => scope.has(dex));
+        return configured2.filter((dex) => scope.has(dex));
       }
       return selectedDex ? [selectedDex] : [];
     };
@@ -93636,7 +94356,7 @@ function copiedTargetNow(reconciliation, recordedTarget, actualPosition) {
   );
   return { copiedNow, targetNow, kept: copiedTargetBesideOwnPosition(targetNow, copiedNow, actualPosition) };
 }
-var clientProtectiveMutationAuthority, executionReadPriority, serverEntryLeverageAlreadyHeld, fetchClientRuntimeOpenOrders, _extractOrderResponseStates, createRuntimeId, _extractFilledSize, _extractOrderId, _toExecutionMetadata, _extractClientMutationId, _stableMutationIdentity, trailingStopMemory, protectiveGroupMemory, protectiveGroupReadFailures, windowHandoffCleanupAttempts, clientRuntimeProtectionStorage, resolveClientRuntimeProtectionStorage, setClientRuntimeProtectionStorage, trailingStopStorageKey, readTrackedTrailingStops, writeTrackedTrailingStops, rememberTrailingStop, protectiveGroupStorageKey, withClientProtectivePlanSetLock, readClientProtectiveGroups, writeClientProtectiveGroups, hasClientProtectiveGroupReadFailure, readFreshClientProtectiveGroups, stableProtectionSnapshot, exactClientProtectiveGroupSnapshot, exactClientProtectiveGroupSetSnapshot, storableClientProtectiveGroup, replaceExactClientProtectiveGroup, replaceExactClientProtectiveGroupSet, isClientRuntimeLeaseOwnershipError, hasClientRuntimeProtectionState, clearClientRuntimeVetoedProtectiveIntent, rethrowWindowHandoffAfterProtectiveReplacementVeto, canPersistClientProtectiveGroups, removeTrackedTrailingStop, replaceTrackedTrailingStop, replaceProtectiveLeg, replacementJournalEntryOrderId, buildProtectiveReplacementJournalGroup, isProtectiveReplacementJournalGroup, reserveProtectiveLegReplacement, ensureProtectiveReplacementJournalCompanion, buildVetoedProtectiveReplacementCleanup, assertExactProtectiveReplacementDispatchAuthority, transitionProtectiveReplacementAcknowledgement, transitionTerminalProtectiveReplacement, pendingProtectiveReplacementReport, isConfiguredProtectionRequested, protectiveAction, isExactClientPositionTpslPair, deviceOwnsClientProtectiveLegKind, isAdoptionNarrowedPositionTpslLeg, hasAmbiguousClientPositionTpslAuthority, protectiveStableShapeMatches, observedProtectiveGroupingMatches, protectiveLiveShapeMatches, protectiveTerminalShapeMatches, cancelClientProtectiveLeg, buildPendingProtectivePlan, persistPendingClientProtectiveGroup, storedClientProtectiveCover, attachClientProtectivePlan, resolveJournaledAttachmentContinuity, protectiveMemberRested, recoverJournaledClientProtectiveAttachments, readPendingEntryMutation, requireClientRuntimeConfigSeconds, replacePendingEntryRecovery, recoverPendingClientProtectiveGroups, recoverPendingProtectiveReplacements, liveProtectiveOrderShape, observedStandaloneProtectiveGroup, migrateTrackedTrailingStopsToStandalone, reconcileClientProtectiveGroups, cancelAllClientProtectiveGroups, tightenClientTrailingStops, throwIfAborted2, sleep2, isDefinitiveEntryRejection, resolveExchangeSizeDecimals, roundAssetSize, resolvePositionSize, resolveCurrentPositionSize, buildPositionSnapshot, signedRemainingExposureAfterConfirmedReduction, runtimeProtectionAuthority, runtimeProtectionOwners, resolveRuntimeProtectionOwner, drainServerProtectionForRuntime, drainServerProtectionIfOwned, verifyNoLiveClientProtectiveTriggers, clientExecutionMutations, CLIENT_EXECUTION_QUEUE_TIMEOUT_MESSAGE, withClientExecutionMutation, withClientProtectivePlanSetMutation, allocateServerExecutionCapacity, withClientProtectiveAdoptionMutation, executeClientRuntimeDecisionLocked, SERVER_AUDIT_RECORDED_ELSEWHERE, serverExecutionAuditOutcome, executeClientRuntimeDecision, waitForFlipCloseFreshness, maintainClientRuntimeTrailingStops, listPendingClientProtectiveSymbols, listStoredClientProtectiveSymbols, hasUnresolvedClientProtectiveIdentity, resolveClientProtectiveIdentitiesForAdoption, exportClientProtectiveGroupsForAdoption, adoptionGroupKey, applyClientProtectiveAdoptionOutcomes, hasStoredClientProtectiveGroupsForWallet, hasPendingClientProtectiveGroups, recoverManualClientProtectiveGroups, clientRuntimeDecisionSizesOrders, executeClientRuntimeDecisionUnlocked, executeClientCopyTradingIntent, _copyCancelOrderId, executeClientCopyTradingOrderAction;
+var clientProtectiveMutationAuthority, executionReadPriority, serverEntryLeverageAlreadyHeld, fetchClientRuntimeOpenOrders, _extractOrderResponseStates, createRuntimeId, _extractFilledSize, _extractOrderId, _toExecutionMetadata, _extractClientMutationId, _stableMutationIdentity, trailingStopMemory, protectiveGroupMemory, protectiveGroupReadFailures, windowHandoffCleanupAttempts, clientRuntimeProtectionStorage, resolveClientRuntimeProtectionStorage, setClientRuntimeProtectionStorage, trailingStopStorageKey, readTrackedTrailingStops, writeTrackedTrailingStops, rememberTrailingStop, protectiveGroupStorageKey, withClientProtectivePlanSetLock, readClientProtectiveGroups, writeClientProtectiveGroups, hasClientProtectiveGroupReadFailure, readFreshClientProtectiveGroups, stableProtectionSnapshot, exactClientProtectiveGroupSnapshot, exactClientProtectiveGroupSetSnapshot, storableClientProtectiveGroup, replaceExactClientProtectiveGroup, replaceExactClientProtectiveGroupSet, isClientRuntimeLeaseOwnershipError, hasClientRuntimeProtectionState, clearClientRuntimeVetoedProtectiveIntent, rethrowWindowHandoffAfterProtectiveReplacementVeto, canPersistClientProtectiveGroups, removeTrackedTrailingStop, replaceTrackedTrailingStop, replaceProtectiveLeg, replacementJournalEntryOrderId, buildProtectiveReplacementJournalGroup, isProtectiveReplacementJournalGroup, reserveProtectiveLegReplacement, ensureProtectiveReplacementJournalCompanion, buildVetoedProtectiveReplacementCleanup, assertExactProtectiveReplacementDispatchAuthority, transitionProtectiveReplacementAcknowledgement, transitionTerminalProtectiveReplacement, pendingProtectiveReplacementReport, isConfiguredProtectionRequested, protectiveAction, executedProtectiveReport, isExactClientPositionTpslPair, deviceOwnsClientProtectiveLegKind, isAdoptionNarrowedPositionTpslLeg, hasAmbiguousClientPositionTpslAuthority, protectiveStableShapeMatches, observedProtectiveGroupingMatches, protectiveLiveShapeMatches, protectiveTerminalShapeMatches, cancelClientProtectiveLeg, buildPendingProtectivePlan, persistPendingClientProtectiveGroup, storedClientProtectiveCover, attachClientProtectivePlan, resolveJournaledAttachmentContinuity, protectiveMemberRested, recoverJournaledClientProtectiveAttachments, readPendingEntryMutation, requireClientRuntimeConfigSeconds, replacePendingEntryRecovery, recoverPendingClientProtectiveGroups, recoverPendingProtectiveReplacements, liveProtectiveOrderShape, observedStandaloneProtectiveGroup, migrateTrackedTrailingStopsToStandalone, reconcileClientProtectiveGroups, cancelAllClientProtectiveGroups, tightenClientTrailingStops, throwIfAborted2, sleep2, isDefinitiveEntryRejection, resolveExchangeSizeDecimals, roundAssetSize, resolvePositionSize, resolveCurrentPositionSize, buildPositionSnapshot, signedRemainingExposureAfterConfirmedReduction, runtimeProtectionAuthority, runtimeProtectionOwners, resolveRuntimeProtectionOwner, drainServerProtectionForRuntime, drainServerProtectionIfOwned, verifyNoLiveClientProtectiveTriggers, clientExecutionMutations, CLIENT_EXECUTION_QUEUE_TIMEOUT_MESSAGE, withClientExecutionMutation, withClientProtectivePlanSetMutation, allocateServerExecutionCapacity, withClientProtectiveAdoptionMutation, executeClientRuntimeDecisionLocked, SERVER_AUDIT_RECORDED_ELSEWHERE, serverExecutionAuditOutcome, executeClientRuntimeDecision, waitForFlipCloseFreshness, maintainClientRuntimeTrailingStops, listPendingClientProtectiveSymbols, listStoredClientProtectiveSymbols, hasUnresolvedClientProtectiveIdentity, resolveClientProtectiveIdentitiesForAdoption, exportClientProtectiveGroupsForAdoption, adoptionGroupKey, applyClientProtectiveAdoptionOutcomes, hasStoredClientProtectiveGroupsForWallet, hasPendingClientProtectiveGroups, recoverManualClientProtectiveGroups, clientRuntimeDecisionSizesOrders, executeClientRuntimeDecisionUnlocked, executeClientCopyTradingIntent, _copyCancelOrderId, executeClientCopyTradingOrderAction;
 var init_runtime_execution = __esm({
   "lib/runtime/runtime-execution.ts"() {
     "use strict";
@@ -94698,6 +95418,18 @@ var init_runtime_execution = __esm({
       input.executionContext.takeProfitMode === "usdc" ? input.executionContext.takeProfitUsdc : input.executionContext.takeProfitPct
     ) > 0);
     protectiveAction = (leg) => leg.kind === "sl" ? "AUTO_SL" : "AUTO_TP";
+    executedProtectiveReport = (input) => ({
+      order_id: input.orderId,
+      ...input.clientMutationId !== void 0 ? { client_mutation_id: input.clientMutationId } : {},
+      symbol: input.symbol,
+      action: input.action,
+      status: "executed",
+      execution_metadata: {
+        ...input.metadata,
+        protected_size: input.protectedSize,
+        position_tpsl: input.positionTpsl
+      }
+    });
     isExactClientPositionTpslPair = (legs) => legs.length === 2 && legs.every((leg) => leg.positionTpsl === true) && new Set(legs.map((leg) => leg.kind)).size === 2;
     deviceOwnsClientProtectiveLegKind = (group, kind) => group.deviceOwnedLegKinds == null || group.deviceOwnedLegKinds.includes(kind);
     isAdoptionNarrowedPositionTpslLeg = (group) => group.deviceOwnedLegKinds?.length === 1 && group.legs.length === 1 && group.legs[0].positionTpsl === true && group.legs[0].kind === group.deviceOwnedLegKinds[0];
@@ -94797,19 +95529,18 @@ var init_runtime_execution = __esm({
           if (!terminalShapeMatches) {
             throw new Error("Tracked protective order is absent without exact terminal shape evidence.");
           }
-          return {
-            order_id: String(leg.orderId),
+          return executedProtectiveReport({
+            orderId: String(leg.orderId),
             symbol: symbol2,
             action: protectiveAction(leg),
-            status: "executed",
-            execution_metadata: {
+            protectedSize: leg.size,
+            positionTpsl: leg.positionTpsl === true || evidence.isPositionTpsl === true,
+            metadata: {
               trigger_price: leg.triggerPrice,
               reason_code: reasonCode,
-              terminal_order_status: evidence.orderStatus,
-              protected_size: leg.size,
-              position_tpsl: leg.positionTpsl === true || evidence.isPositionTpsl === true
+              terminal_order_status: evidence.orderStatus
             }
-          };
+          });
         }
         if (!protectiveLiveShapeMatches({
           shape: {
@@ -95456,20 +96187,19 @@ var init_runtime_execution = __esm({
       const activeLegs = acknowledgedLegs.filter((_leg, index) => acknowledgements[index].state === "active");
       const mixedPositionTpslAcknowledgement = positionTpsl && activeLegs.length === 1 && acknowledgements.some((acknowledgement) => acknowledgement.state === "fulfilled");
       for (let index = 0; index < candidates.length; index += 1) {
-        reports.push({
-          order_id: acknowledgements[index].orderId,
-          client_mutation_id: candidates[index].mutationId,
+        reports.push(executedProtectiveReport({
+          orderId: acknowledgements[index].orderId,
+          clientMutationId: candidates[index].mutationId,
           symbol: symbol2,
           action: candidates[index].kind === "sl" ? "AUTO_SL" : "AUTO_TP",
-          status: "executed",
-          execution_metadata: {
+          protectedSize: candidates[index].size,
+          positionTpsl,
+          metadata: {
             trigger_price: candidates[index].triggerPrice,
-            protected_size: candidates[index].size,
             entry_filled_size: fill.filledSize,
-            entry_average_price: fill.averagePrice,
-            position_tpsl: positionTpsl
+            entry_average_price: fill.averagePrice
           }
-        });
+        }));
       }
       const acknowledgedGroup = activeLegs.length > 0 ? {
         ...activeGroup,
@@ -96468,20 +97198,19 @@ var init_runtime_execution = __esm({
               if (!retired) {
                 throw new Error("Terminal protective replacement could not be retired durably.");
               }
-              reports.push({
-                order_id: String(evidence.orderId ?? replacement.clientOrderId),
-                client_mutation_id: replacement.mutationId,
+              reports.push(executedProtectiveReport({
+                orderId: String(evidence.orderId ?? replacement.clientOrderId),
+                clientMutationId: replacement.mutationId,
                 symbol: symbol2,
                 action: protectiveAction(leg),
-                status: "executed",
-                execution_metadata: {
+                protectedSize: replacementLeg.size,
+                positionTpsl: replacementLeg.positionTpsl === true,
+                metadata: {
                   reason_code: "protective_replacement_terminal_reconciled",
                   previous_order_id: replacement.previousOrderId,
-                  order_status: evidence.orderStatus,
-                  protected_size: replacementLeg.size,
-                  position_tpsl: replacementLeg.positionTpsl === true
+                  order_status: evidence.orderStatus
                 }
-              });
+              }));
               continue;
             }
             const ambiguousPositionTpslAuthority = hasAmbiguousClientPositionTpslAuthority(group);
@@ -96525,20 +97254,19 @@ var init_runtime_execution = __esm({
               if (!recovered) {
                 throw new Error("Ambiguous position-TPSL replacement could not be bound durably.");
               }
-              reports.push({
-                order_id: String(replacementOrderId),
-                client_mutation_id: replacement.mutationId,
+              reports.push(executedProtectiveReport({
+                orderId: String(replacementOrderId),
+                clientMutationId: replacement.mutationId,
                 symbol: symbol2,
                 action: protectiveAction(leg),
-                status: "executed",
-                execution_metadata: {
+                protectedSize: replacement.size,
+                positionTpsl: recoveredLeg.positionTpsl === true,
+                metadata: {
                   reason_code: exactLivePositionTpsl ? "protective_replacement_reconciled_for_cleanup" : "protective_replacement_reconciled",
                   previous_order_id: replacement.previousOrderId,
-                  trigger_price: replacement.triggerPrice,
-                  protected_size: replacement.size,
-                  position_tpsl: recoveredLeg.positionTpsl === true
+                  trigger_price: replacement.triggerPrice
                 }
-              });
+              }));
               continue;
             }
             if (ambiguousPositionTpslAuthority && classifyHyperliquidOrderStatus(evidence.orderStatus) !== "filled") {
@@ -96571,20 +97299,19 @@ var init_runtime_execution = __esm({
                 throw new Error("Fulfilled protective replacement could not be resolved durably.");
               }
               removeTrackedTrailingStop(profileId, symbol2, replacement.previousOrderId);
-              reports.push({
-                order_id: String(replacementOrderId),
-                client_mutation_id: replacement.mutationId,
+              reports.push(executedProtectiveReport({
+                orderId: String(replacementOrderId),
+                clientMutationId: replacement.mutationId,
                 symbol: symbol2,
                 action: protectiveAction(leg),
-                status: "executed",
-                execution_metadata: {
+                protectedSize: replacement.size,
+                positionTpsl: leg.positionTpsl === true,
+                metadata: {
                   reason_code: "protective_replacement_fulfilled_reconciled",
                   previous_order_id: replacement.previousOrderId,
-                  trigger_price: replacement.triggerPrice,
-                  protected_size: replacement.size,
-                  position_tpsl: leg.positionTpsl === true
+                  trigger_price: replacement.triggerPrice
                 }
-              });
+              }));
               continue;
             }
             let shapeMatches = exactShapeMatches && classifyHyperliquidOrderStatus(evidence.orderStatus) === "open";
@@ -96626,21 +97353,20 @@ var init_runtime_execution = __esm({
                     if (replacementCleanup == null || !clearClientRuntimeVetoedProtectiveIntent(replacementCleanup)) {
                       throw new Error("Unapplied protective replacement could not be abandoned durably.");
                     }
-                    reports.push({
-                      order_id: String(replacement.previousOrderId),
-                      client_mutation_id: replacement.mutationId,
+                    reports.push(executedProtectiveReport({
+                      orderId: String(replacement.previousOrderId),
+                      clientMutationId: replacement.mutationId,
                       symbol: symbol2,
                       action: protectiveAction(effectiveLeg),
-                      status: "executed",
-                      execution_metadata: {
+                      protectedSize: effectiveLeg.size,
+                      positionTpsl: effectiveLeg.positionTpsl === true,
+                      metadata: {
                         reason_code: "protective_replacement_abandoned_original_filled",
                         previous_order_id: replacement.previousOrderId,
                         order_status: originalEvidence.orderStatus,
-                        trigger_price: effectiveLeg.triggerPrice,
-                        protected_size: effectiveLeg.size,
-                        position_tpsl: effectiveLeg.positionTpsl === true
+                        trigger_price: effectiveLeg.triggerPrice
                       }
-                    });
+                    }));
                     continue;
                   }
                 }
@@ -96650,20 +97376,19 @@ var init_runtime_execution = __esm({
                 if (replacementCleanup == null || !clearClientRuntimeVetoedProtectiveIntent(replacementCleanup)) {
                   throw new Error("Undispatched protective replacement could not be abandoned durably.");
                 }
-                reports.push({
-                  order_id: String(replacement.previousOrderId),
-                  client_mutation_id: replacement.mutationId,
+                reports.push(executedProtectiveReport({
+                  orderId: String(replacement.previousOrderId),
+                  clientMutationId: replacement.mutationId,
                   symbol: symbol2,
                   action: protectiveAction(effectiveLeg),
-                  status: "executed",
-                  execution_metadata: {
+                  protectedSize: effectiveLeg.size,
+                  positionTpsl: effectiveLeg.positionTpsl === true,
+                  metadata: {
                     reason_code: "protective_replacement_abandoned_undispatched",
                     previous_order_id: replacement.previousOrderId,
-                    trigger_price: effectiveLeg.triggerPrice,
-                    protected_size: effectiveLeg.size,
-                    position_tpsl: effectiveLeg.positionTpsl === true
+                    trigger_price: effectiveLeg.triggerPrice
                   }
-                });
+                }));
                 continue;
               }
               const replayReservation = replacementReservation;
@@ -96731,20 +97456,19 @@ var init_runtime_execution = __esm({
                     }
                   });
                 }
-                reports.push({
-                  order_id: String(replacementOrderId),
-                  client_mutation_id: replacement.mutationId,
+                reports.push(executedProtectiveReport({
+                  orderId: String(replacementOrderId),
+                  clientMutationId: replacement.mutationId,
                   symbol: symbol2,
                   action: protectiveAction(effectiveLeg),
-                  status: "executed",
-                  execution_metadata: {
+                  protectedSize: replacement.size,
+                  positionTpsl: effectiveLeg.positionTpsl === true,
+                  metadata: {
                     reason_code: acknowledgement.state === "fulfilled" ? "protective_replacement_fulfilled_reconciled" : "protective_replacement_reconciled",
                     previous_order_id: replacement.previousOrderId,
-                    trigger_price: replacement.triggerPrice,
-                    protected_size: replacement.size,
-                    position_tpsl: effectiveLeg.positionTpsl === true
+                    trigger_price: replacement.triggerPrice
                   }
-                });
+                }));
                 continue;
               }
             }
@@ -96770,20 +97494,19 @@ var init_runtime_execution = __esm({
             if (!bound) {
               throw new Error("Pending protective replacement could not be bound durably.");
             }
-            reports.push({
-              order_id: String(replacementOrderId),
-              client_mutation_id: replacement.mutationId,
+            reports.push(executedProtectiveReport({
+              orderId: String(replacementOrderId),
+              clientMutationId: replacement.mutationId,
               symbol: symbol2,
               action: protectiveAction(effectiveLeg),
-              status: "executed",
-              execution_metadata: {
+              protectedSize: replacement.size,
+              positionTpsl: canonicalReplacementLeg.positionTpsl === true,
+              metadata: {
                 reason_code: "protective_replacement_reconciled",
                 previous_order_id: replacement.previousOrderId,
-                trigger_price: replacement.triggerPrice,
-                protected_size: replacement.size,
-                position_tpsl: canonicalReplacementLeg.positionTpsl === true
+                trigger_price: replacement.triggerPrice
               }
-            });
+            }));
           } catch (error48) {
             if (replayAttemptStarted && !replayDispatchBoundaryCompleted && replacementCleanup != null) {
               if (isClientRuntimeWindowHandoffBeforePlanDispatch(error48)) {
@@ -96849,19 +97572,18 @@ var init_runtime_execution = __esm({
             if (!replaceExactClientProtectiveGroup(profileId, symbol2, journalGroup, null)) {
               throw new Error("Terminal replacement journal could not be retired durably.");
             }
-            reports.push({
-              order_id: String(evidence.orderId ?? journalLeg.orderId),
-              client_mutation_id: mutationId,
+            reports.push(executedProtectiveReport({
+              orderId: String(evidence.orderId ?? journalLeg.orderId),
+              clientMutationId: mutationId,
               symbol: symbol2,
               action: protectiveAction(journalLeg),
-              status: "executed",
-              execution_metadata: {
+              protectedSize: journalLeg.size,
+              positionTpsl: journalLeg.positionTpsl === true || evidence.isPositionTpsl === true,
+              metadata: {
                 reason_code: "protective_replacement_terminal_reconciled",
-                order_status: evidence.orderStatus,
-                protected_size: journalLeg.size,
-                position_tpsl: journalLeg.positionTpsl === true || evidence.isPositionTpsl === true
+                order_status: evidence.orderStatus
               }
-            });
+            }));
             continue;
           }
           const liveShape = {
@@ -97653,22 +98375,21 @@ var init_runtime_execution = __esm({
         return {
           retain: bound ? placedLeg : provisionalLeg,
           group: bound ? placedGroup : provisionalGroup,
-          reports: [{
-            order_id: String(placedOrderId),
-            client_mutation_id: mutationId,
+          reports: [executedProtectiveReport({
+            orderId: String(placedOrderId),
+            clientMutationId: mutationId,
             symbol: symbol2,
             action: protectiveAction(leg),
-            status: "executed",
-            execution_metadata: {
+            protectedSize: decision.size,
+            positionTpsl: false,
+            metadata: {
               reason_code: decision.reasonCode,
               replaced_order_id: lostOrderId,
               trigger_price: triggerPrice,
-              protected_size: decision.size,
               live_position_size: livePositionSize2,
-              position_tpsl: false,
               ...acknowledgement.state === "fulfilled" ? { acknowledgement_state: "fulfilled" } : {}
             }
-          }]
+          })]
         };
       };
       groupLoop: for (let groupIndex = 0; groupIndex < inspectedGroups.length; groupIndex += 1) {
@@ -97967,19 +98688,18 @@ var init_runtime_execution = __esm({
             } else {
               removeTrackedTrailingStop(profileId, symbol2, leg.orderId);
             }
-            reports.push({
-              order_id: String(replacementOrderId),
-              client_mutation_id: _extractClientMutationId(response),
+            reports.push(executedProtectiveReport({
+              orderId: String(replacementOrderId),
+              clientMutationId: _extractClientMutationId(response),
               symbol: symbol2,
               action: protectiveAction(leg),
-              status: "executed",
-              execution_metadata: {
+              protectedSize: allowedSize,
+              positionTpsl: replacementLeg.positionTpsl === true,
+              metadata: {
                 reason_code: "protective_resized_to_live_exposure",
-                previous_order_id: leg.orderId,
-                protected_size: allowedSize,
-                position_tpsl: replacementLeg.positionTpsl === true
+                previous_order_id: leg.orderId
               }
-            });
+            }));
             if (fulfilledDuringResize) {
               reports.push({
                 order_id: String(replacementOrderId),
@@ -98429,20 +99149,19 @@ var init_runtime_execution = __esm({
               }
             });
           }
-          reports.push({
-            order_id: String(replacementOrderId),
-            client_mutation_id: _extractClientMutationId(modifyResponse),
+          reports.push(executedProtectiveReport({
+            orderId: String(replacementOrderId),
+            clientMutationId: _extractClientMutationId(modifyResponse),
             symbol: symbol2,
             action: "AUTO_TRAILING_SL",
-            status: "executed",
-            execution_metadata: {
+            protectedSize: effectiveSize,
+            positionTpsl: record5.positionTpsl === true,
+            metadata: {
               trigger_price: replacementTriggerPrice,
               previous_trigger_price: record5.triggerPrice,
-              previous_order_id: record5.orderId,
-              protected_size: effectiveSize,
-              position_tpsl: record5.positionTpsl === true
+              previous_order_id: record5.orderId
             }
-          });
+          }));
         } catch (error48) {
           const cleanup = buildVetoedProtectiveReplacementCleanup(reservation);
           if (!replacementDispatchBoundaryCompleted) {
@@ -100408,22 +101127,21 @@ var init_runtime_execution = __esm({
                 }
               );
             }
-            executionReports.push({
-              order_id: String(triggerOrderId),
-              client_mutation_id: _extractClientMutationId(triggerResponse),
+            executionReports.push(executedProtectiveReport({
+              orderId: String(triggerOrderId),
+              clientMutationId: _extractClientMutationId(triggerResponse),
               symbol: input.executionContext.symbol,
               action: triggerInput.label,
-              status: "executed",
-              execution_metadata: {
+              protectedSize: legSize,
+              positionTpsl: leg.positionTpsl === true,
+              metadata: {
                 trigger_price: triggerInput.triggerPrice,
                 is_take_profit: triggerInput.isTakeProfit,
                 entry_filled_size: protectionSize,
-                protected_size: legSize,
-                position_tpsl: leg.positionTpsl === true,
                 entry_average_price: protectionEntryPrice,
                 ..._toExecutionMetadata(triggerResponse)
               }
-            });
+            }));
             appendRuntimeDebugEvent({
               label: "execution_auto_sl_tp_submitted",
               note: `symbol=${input.executionContext.symbol} kind=${triggerInput.isTakeProfit ? "tp" : "sl"} side=${exitSide} sizeAsset=${legSize} triggerPrice=${triggerInput.triggerPrice} order_id=${triggerOrderId}`
@@ -101085,7 +101803,7 @@ var init_protective_adoption_status = __esm({
 });
 
 // lib/runtime/protective-cutover.ts
-var ADOPTION_REQUEST_TIMEOUT_MS, ADOPTION_FAILURE_RETRY_MS, adoptWithinTimeout, adoptionRetryAt, CLIENT_PROTECTIVE_ACTIONS_EVENT, protectiveActionsPendingListeners, onClientProtectiveActionsPending, notifyClientProtectiveActionsPending, adoptionLegOutcomes, hasGroupsToAdopt, shouldSyncServerOwnedProtection, syncServerOwnedProtection;
+var ADOPTION_REQUEST_TIMEOUT_MS, ADOPTION_FAILURE_RETRY_MS, adoptWithinTimeout, adoptionRetryAt, protectiveActionsPendingListeners, onClientProtectiveActionsPending, notifyClientProtectiveActionsPending, adoptionLegOutcomes, hasGroupsToAdopt, shouldSyncServerOwnedProtection, syncServerOwnedProtection;
 var init_protective_cutover = __esm({
   "lib/runtime/protective-cutover.ts"() {
     "use strict";
@@ -101126,7 +101844,6 @@ var init_protective_cutover = __esm({
       }
     };
     adoptionRetryAt = /* @__PURE__ */ new Map();
-    CLIENT_PROTECTIVE_ACTIONS_EVENT = "vtx:client-protective-actions";
     protectiveActionsPendingListeners = /* @__PURE__ */ new Set();
     onClientProtectiveActionsPending = (listener) => {
       protectiveActionsPendingListeners.add(listener);
@@ -101141,10 +101858,6 @@ var init_protective_cutover = __esm({
         } catch {
         }
       }
-      if (typeof window === "undefined" || typeof window.dispatchEvent !== "function") return;
-      window.dispatchEvent(new CustomEvent(CLIENT_PROTECTIVE_ACTIONS_EVENT, {
-        detail: { profileId: String(profileId) }
-      }));
     };
     adoptionLegOutcomes = (groups, adoption) => {
       if (Array.isArray(adoption.leg_outcomes)) return adoption.leg_outcomes;
@@ -102603,6 +103316,23 @@ var init_desktop_bridge = __esm({
   }
 });
 
+// lib/runtime/host/environment.ts
+function runtimeHostSurface() {
+  if (configured) return configured.surface;
+  return getDesktopBridge() ? "desktop" : "browser";
+}
+var configured;
+var init_environment = __esm({
+  "lib/runtime/host/environment.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_desktop_bridge();
+    configured = null;
+  }
+});
+
 // lib/runtime/client-ownership-arbitration-contract.ts
 var deriveOwnershipLossReasonFromRuntimeError;
 var init_client_ownership_arbitration_contract = __esm({
@@ -102624,15 +103354,17 @@ var init_client_runtime_device_id = __esm({
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
+    init_host_storage();
     CLIENT_RUNTIME_DEVICE_ID_STORAGE_KEY = "vtx_client_runtime_device_id";
     createDeviceId = () => typeof crypto !== "undefined" && typeof crypto.randomUUID === "function" ? crypto.randomUUID() : `device-${Date.now()}-${Math.random().toString(16).slice(2)}`;
     getOrCreateClientRuntimeDeviceId = () => {
-      if (typeof window === "undefined") return null;
+      const storage3 = runtimeHostStorage();
+      if (!storage3) return null;
       try {
-        const existing = window.localStorage.getItem(CLIENT_RUNTIME_DEVICE_ID_STORAGE_KEY)?.trim();
+        const existing = storage3.getItem(CLIENT_RUNTIME_DEVICE_ID_STORAGE_KEY)?.trim();
         if (existing) return existing;
         const created = createDeviceId();
-        window.localStorage.setItem(CLIENT_RUNTIME_DEVICE_ID_STORAGE_KEY, created);
+        storage3.setItem(CLIENT_RUNTIME_DEVICE_ID_STORAGE_KEY, created);
         return created;
       } catch {
         return createDeviceId();
@@ -104076,7 +104808,7 @@ var require_react = __commonJS({
 });
 
 // lib/runtime/client-runtime-status-store.ts
-var import_react, finiteOrNull2, readMode, orderKey, sameOwnerSeries, hasGenerations, compareClientRuntimeStatusOrder, sameGenerations, LIVENESS_CLOCK_FIELDS, sameValue, sameVisibleState, definedFields, ClientRuntimeStatusStore, clientRuntimeStatusStore;
+var import_react, finiteOrNull2, readMode, orderKey, sameOwnerSeries, hasGenerations, compareClientRuntimeStatusOrder, sameGenerations, LIVENESS_CLOCK_FIELDS, sameValue, sameVisibleState, definedFields, readServerBackup, PROFILE_FIELDS, keepProfileFields, ClientRuntimeStatusStore, clientRuntimeStatusStore;
 var init_client_runtime_status_store = __esm({
   "lib/runtime/client-runtime-status-store.ts"() {
     "use strict";
@@ -104139,6 +104871,17 @@ var init_client_runtime_status_store = __esm({
       return true;
     };
     definedFields = (status) => Object.fromEntries(Object.entries(status).filter(([, value]) => value !== void 0));
+    readServerBackup = (value) => value && typeof value === "object" && typeof value.active === "boolean" ? value : null;
+    PROFILE_FIELDS = ["execution_mode", "server_backup"];
+    keepProfileFields = (current, incoming) => {
+      const kept = {};
+      for (const field of PROFILE_FIELDS) {
+        if (incoming[field] === void 0 && current[field] !== void 0) {
+          kept[field] = current[field];
+        }
+      }
+      return { ...kept, ...incoming };
+    };
     ClientRuntimeStatusStore = class {
       constructor() {
         this.entries = /* @__PURE__ */ new Map();
@@ -104163,7 +104906,7 @@ var init_client_runtime_status_store = __esm({
         } else {
           const order = compareClientRuntimeStatusOrder(incoming, current);
           if (order < 0) return false;
-          next = sameGenerations(incoming, current) || !hasGenerations(orderKey(incoming)) ? { ...current, ...incoming } : incoming;
+          next = sameGenerations(incoming, current) || !hasGenerations(orderKey(incoming)) ? { ...current, ...incoming } : keepProfileFields(current, incoming);
           if (sameVisibleState(next, current)) {
             const clocks = Object.fromEntries(
               Object.entries(next).filter(([field]) => LIVENESS_CLOCK_FIELDS.has(field))
@@ -104180,6 +104923,21 @@ var init_client_runtime_status_store = __esm({
         this.emit();
         return true;
       }
+      /**
+       * Record the server's backup state from an answer that carries only that
+       * (a readiness report's): it updates the profile's entry, and is dropped
+       * when this browser has no status for the profile yet. Returns true when
+       * the entry changed.
+       */
+      recordServerBackup(profileId, backup) {
+        const key = String(profileId ?? "").trim();
+        const current = key ? this.entries.get(key) : void 0;
+        const next = readServerBackup(backup);
+        if (!current || !next || sameValue(current.server_backup, next)) return false;
+        this.entries.set(key, { ...current, server_backup: next });
+        this.emit();
+        return true;
+      }
       get(profileId) {
         const key = String(profileId ?? "").trim();
         return key ? this.entries.get(key) ?? null : null;
@@ -104233,9 +104991,9 @@ var init_client_killswitch = __esm({
       return Number.isFinite(parsed) && parsed >= 0 ? parsed : null;
     };
     firstConfiguredSymbol = (preferences, config2) => {
-      const configured = Array.isArray(preferences.trading_symbols) ? preferences.trading_symbols.map((value) => String(value || "").trim()).find(Boolean) : null;
+      const configured2 = Array.isArray(preferences.trading_symbols) ? preferences.trading_symbols.map((value) => String(value || "").trim()).find(Boolean) : null;
       const fallback = String(config2.default_chart_symbol || "").trim();
-      const symbol2 = configured || fallback;
+      const symbol2 = configured2 || fallback;
       if (!symbol2) {
         throw new Error("Client killswitch requires a configured trading symbol.");
       }
@@ -105203,13 +105961,14 @@ var init_candle_prompt_contract = __esm({
 });
 
 // lib/runtime/decision-contract.ts
-var JSON_FENCE_PATTERN, JSON_SIMPLE_ESCAPE_CHARS, JSON_HEX_ESCAPE_PATTERN, INTERNAL_REASONING_XML_BLOCK_PATTERN, INTERNAL_REASONING_BRACKET_BLOCK_PATTERN, INTERNAL_REASONING_DELIMITER_BLOCK_PATTERN, INTERNAL_REASONING_XML_OPEN_TAIL_PATTERN, INTERNAL_REASONING_BRACKET_OPEN_TAIL_PATTERN, INTERNAL_REASONING_DELIMITER_OPEN_TAIL_PATTERN, VISIBLE_REASONING_KEYS, VISIBLE_REASONING_KEY_SET, VISIBLE_REASONING_ALIAS_KEY_SET, isRecord5, isVisibleReasoningKey, sanitizeVisibleRuntimeText, resolveVisibleReasoningText, unwrapJsonMarkdownFence, repairJsonStringEscapes, repairJsonStringQuotes, repairJsonStringControlCharacters, repairJsonStringSyntax, decodeStrictDecisionPayload, extractJsonObjectCandidates, isLegacyScalarDecision, decisionSymbolKeysForCandidate, selectRankedDecisionCandidate, extractJsonObjectPayload, toCanonicalDecisionPayload, normalizeDecisionUnits, normalizeDecisionValue, normalizeTradabilityScore, extractNormalizedDecision, classifyDecisionParseOutcome;
+var JSON_FENCE_PATTERN, JSON_SIMPLE_ESCAPE_CHARS, JSON_HEX_ESCAPE_PATTERN, INTERNAL_REASONING_XML_BLOCK_PATTERN, INTERNAL_REASONING_BRACKET_BLOCK_PATTERN, INTERNAL_REASONING_DELIMITER_BLOCK_PATTERN, INTERNAL_REASONING_XML_OPEN_TAIL_PATTERN, INTERNAL_REASONING_BRACKET_OPEN_TAIL_PATTERN, INTERNAL_REASONING_DELIMITER_OPEN_TAIL_PATTERN, VISIBLE_REASONING_KEYS, VISIBLE_REASONING_KEY_SET, VISIBLE_REASONING_ALIAS_KEY_SET, isRecord5, isVisibleReasoningKey, sanitizeVisibleRuntimeText, resolveVisibleReasoningText, unwrapJsonMarkdownFence, repairJsonStringEscapes, repairJsonStringQuotes, repairJsonStringControlCharacters, repairJsonStringSyntax, decodeStrictDecisionPayload, extractJsonObjectCandidates, isLegacyScalarDecision, decisionSymbolKeysForCandidate, selectRankedDecisionCandidate, extractJsonObjectPayload, toCanonicalDecisionPayload, normalizeDecisionUnits, normalizeDecisionValue, TRADABILITY_SCORE_MIN, TRADABILITY_SCORE_MAX, isTradabilityScore, normalizeTradabilityScore, extractNormalizedDecision, classifyDecisionParseOutcome;
 var init_decision_contract = __esm({
   "lib/runtime/decision-contract.ts"() {
     "use strict";
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
+    init_runtime_policy_generated2();
     JSON_FENCE_PATTERN = /^```(?:json)?\s*\n?([\s\S]*?)\n?```$/i;
     JSON_SIMPLE_ESCAPE_CHARS = /* @__PURE__ */ new Set(['"', "\\", "/", "b", "f", "n", "r", "t"]);
     JSON_HEX_ESCAPE_PATTERN = /^[0-9a-fA-F]{4}$/;
@@ -105581,15 +106340,15 @@ var init_decision_contract = __esm({
       const decisionValue = String(rawDecision || "").trim().toUpperCase();
       return decisionValue === "BUY" || decisionValue === "SELL" ? decisionValue : "HOLD";
     };
+    TRADABILITY_SCORE_MIN = runtime_policy_generated_default2.trading.tradability.score_min;
+    TRADABILITY_SCORE_MAX = runtime_policy_generated_default2.trading.tradability.score_max;
+    isTradabilityScore = (value) => typeof value === "number" && Number.isInteger(value) && value >= TRADABILITY_SCORE_MIN && value <= TRADABILITY_SCORE_MAX;
     normalizeTradabilityScore = (rawTradability) => {
       if (rawTradability === null || typeof rawTradability === "undefined" || typeof rawTradability === "boolean") {
         return null;
       }
       const parsed = Number(rawTradability);
-      if (!Number.isInteger(parsed) || parsed < 1 || parsed > 10) {
-        return null;
-      }
-      return parsed;
+      return isTradabilityScore(parsed) ? parsed : null;
     };
     extractNormalizedDecision = (rawResponse, parsedDecision, symbol2) => {
       const content = sanitizeVisibleRuntimeText(rawResponse || "");
@@ -106059,6 +106818,7 @@ var init_screener_resource_scheduler = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_runtime_policy_generated2();
+    init_host_storage();
     STORAGE_KEY = "vtx_llm_resource_scheduler_v1";
     CHANNEL_NAME = "vtx-llm-resource-scheduler";
     LOCK_TTL_MS = runtime_policy_generated_default2.screener.resource_scheduler.client_lock_ttl_milliseconds;
@@ -106073,7 +106833,7 @@ var init_screener_resource_scheduler = __esm({
     };
     storage2 = () => {
       try {
-        return typeof window !== "undefined" ? window.localStorage : null;
+        return runtimeHostStorage();
       } catch {
         return null;
       }
@@ -111243,7 +112003,7 @@ var init_local_analysis = __esm({
         const tradability = decision.tradability;
         const reasoning = decision.reasoning;
         if (!Number.isInteger(units)) errors.add("decision_units_invalid");
-        if (!Number.isInteger(tradability) || Number(tradability) < 1 || Number(tradability) > 10) {
+        if (!isTradabilityScore(tradability)) {
           errors.add("decision_tradability_invalid");
         }
         if (typeof reasoning !== "string" || reasoning.trim() === "" || reasoning.trim() === "-") {
@@ -113000,7 +113760,7 @@ ${reviewOutputContract}`;
       const priceRaw = Number(source.price);
       const price = Number.isFinite(priceRaw) && priceRaw > 0 ? priceRaw : null;
       const tradabilityRaw = Number(source.tradability);
-      const tradability = Number.isInteger(tradabilityRaw) && tradabilityRaw >= 1 && tradabilityRaw <= 10 ? tradabilityRaw : null;
+      const tradability = isTradabilityScore(tradabilityRaw) ? tradabilityRaw : null;
       const executedAtMsRaw = Number(source.executed_at_ms ?? 0);
       const executedAtMs = Number.isFinite(executedAtMsRaw) && executedAtMsRaw > 0 ? Math.trunc(executedAtMsRaw) : 0;
       return {
@@ -113063,7 +113823,7 @@ ${reviewOutputContract}`;
         throw new Error(`Enabled behavior memory has invalid ${key} schema`);
       }
       if (key === "et") {
-        if (!isExactEnumString(item.a, ["BUY", "SELL"]) || !(item.u === "-" || isNonnegativeInteger(item.u) && item.u > 0) || !(item.v === "-" || isFiniteNumber(item.v) && item.v > 0) || !(item.p === "-" || isFiniteNumber(item.p) && item.p > 0) || !(item.tr === "-" || isNonnegativeInteger(item.tr) && item.tr >= 1 && item.tr <= 10) || !isNonnegativeInteger(item.age) || typeof item.r !== "string" || item.r.trim().length === 0 || item.r.trim() === "-") {
+        if (!isExactEnumString(item.a, ["BUY", "SELL"]) || !(item.u === "-" || isNonnegativeInteger(item.u) && item.u > 0) || !(item.v === "-" || isFiniteNumber(item.v) && item.v > 0) || !(item.p === "-" || isFiniteNumber(item.p) && item.p > 0) || !(item.tr === "-" || isNonnegativeInteger(item.tr) && isTradabilityScore(item.tr)) || !isNonnegativeInteger(item.age) || typeof item.r !== "string" || item.r.trim().length === 0 || item.r.trim() === "-") {
           throw new Error("Enabled behavior memory has invalid et values");
         }
         return {
@@ -113078,7 +113838,7 @@ ${reviewOutputContract}`;
         };
       }
       if (key === "pd") {
-        if (!isExactEnumString(item.a, ["BUY", "SELL", "HOLD"]) || !isNonnegativeInteger(item.u) || !(item.tr === "-" || isNonnegativeInteger(item.tr) && item.tr >= 1 && item.tr <= 10) || !isNonnegativeInteger(item.age) || !isExactEnumString(item.ps, ["LONG", "SHORT", "FLAT"]) || !isExactEnumString(item.x, ["e", "b", "f", "n", "-"]) || !isNonemptyPromptText(item.r)) {
+        if (!isExactEnumString(item.a, ["BUY", "SELL", "HOLD"]) || !isNonnegativeInteger(item.u) || !(item.tr === "-" || isNonnegativeInteger(item.tr) && isTradabilityScore(item.tr)) || !isNonnegativeInteger(item.age) || !isExactEnumString(item.ps, ["LONG", "SHORT", "FLAT"]) || !isExactEnumString(item.x, ["e", "b", "f", "n", "-"]) || !isNonemptyPromptText(item.r)) {
           throw new Error("Enabled behavior memory has invalid pd values");
         }
         return {
@@ -116422,7 +117182,7 @@ ${reviewOutputContract}`;
 });
 
 // lib/runtime/engine.ts
-var localAnalysis, getExchangeFailureDiagnostics, getRuntimeFallbackAttempts, sentInvocationAttemptCount, boundRuntimeFallbackAttempts, isProviderFailureDiagnosticsCandidate, getEventBoundProviderLabel, getEventBoundProviderTraceId, getRecentProviderFailureDiagnostics, getClientRuntimeErrorProvenance, getRuntimeProviderSetupDiagnostics, buildProviderSetupErrorDiagnosticFields, buildClientRuntimeErrorProvenanceDiagnosticFields, buildRuntimeRequestErrorDiagnosticFields, getCycleErrorModelCalls, isReturnedModelCall, hasEventBoundProviderFailureEvidence, endsWithNeverSentAttempt, classifyRuntimeErrorStage, buildHyperliquidPublicReadDiagnosticFields, buildRuntimeErrorDiagnostics, positiveNumber, resolveRuntimeEngineOptions, withServerPositionEvents, CLIENT_KILLSWITCH_BLOCK_STORAGE_PREFIX, getClientKillswitchBlockStorageKey, isClientRuntimeKillswitchBlocked, persistClientRuntimeKillswitchBlock, clearClientRuntimeKillswitchBlock, hashRuntimeDebugText2, createRuntimeUuid2, getRuntimeContractIdentityToken, getRuntimeStatusContractIdentityToken, getRuntimeContractBindingTokenFromCycleResult, getRuntimeContractBindingTupleToken, getRuntimeStatusContractBindingTupleToken, isTransientRuntimeConflictError, createRuntimeStartCancelledError, isRuntimeContractMismatchError, isClientExecutionModeMismatchError, isClientRuntimeSessionStoppedError, isClientRuntimeLeaseAuthError, isClientRuntimeReleasedError, deriveFailedStartCleanupOwnershipLossReason, isRuntimeAbortError, isExplicitClientExecutionMode, createStopAbortError, isRuntimeContractIdentityAdvancedAbort, CLIENT_RUNTIME_NO_DECISION_RECOVERY_REASON, sanitizeSettingsSnapshotForFallback, preflightClientRuntime, ClientExecutionEngine, createStoppedRuntimeSnapshot, ClientRuntimeRegistry, botEngine;
+var localAnalysis, getExchangeFailureDiagnostics, getRuntimeFallbackAttempts, sentInvocationAttemptCount, boundRuntimeFallbackAttempts, isProviderFailureDiagnosticsCandidate, getEventBoundProviderLabel, getEventBoundProviderTraceId, CLIENT_RUNTIME_POLICY, getRecentProviderFailureDiagnostics, getClientRuntimeErrorProvenance, getRuntimeProviderSetupDiagnostics, buildProviderSetupErrorDiagnosticFields, buildClientRuntimeErrorProvenanceDiagnosticFields, buildRuntimeRequestErrorDiagnosticFields, getCycleErrorModelCalls, isReturnedModelCall, hasEventBoundProviderFailureEvidence, endsWithNeverSentAttempt, classifyRuntimeErrorStage, buildHyperliquidPublicReadDiagnosticFields, buildRuntimeErrorDiagnostics, positiveNumber, resolveRuntimeEngineOptions, withServerPositionEvents, CLIENT_KILLSWITCH_BLOCK_STORAGE_PREFIX, getClientKillswitchBlockStorageKey, isClientRuntimeKillswitchBlocked, persistClientRuntimeKillswitchBlock, clearClientRuntimeKillswitchBlock, hashRuntimeDebugText2, createRuntimeUuid2, getRuntimeContractIdentityToken, getRuntimeStatusContractIdentityToken, getRuntimeContractBindingTokenFromCycleResult, getRuntimeContractBindingTupleToken, getRuntimeStatusContractBindingTupleToken, isTransientRuntimeConflictError, createRuntimeStartCancelledError, isRuntimeContractMismatchError, isClientExecutionModeMismatchError, isClientRuntimeSessionStoppedError, isClientRuntimeLeaseAuthError, isClientRuntimeReleasedError, deriveFailedStartCleanupOwnershipLossReason, isRuntimeAbortError, isExplicitClientExecutionMode, createStopAbortError, isRuntimeContractIdentityAdvancedAbort, CLIENT_RUNTIME_NO_DECISION_RECOVERY_REASON, sanitizeSettingsSnapshotForFallback, preflightClientRuntime, ClientExecutionEngine, createStoppedRuntimeSnapshot, ClientRuntimeRegistry, botEngine;
 var init_engine = __esm({
   "lib/runtime/engine.ts"() {
     "use strict";
@@ -116430,6 +117190,8 @@ var init_engine = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_protective_cutover();
+    init_runtime_policy_generated2();
+    init_constants();
     init_periodic_schedule();
     init_host_storage();
     init_vault();
@@ -116444,7 +117206,7 @@ var init_engine = __esm({
     init_browser_observability();
     init_error_surface_contract();
     init_render_debug();
-    init_desktop_bridge();
+    init_environment();
     init_client_ownership_arbitration_contract();
     init_client_runtime_ownership_errors();
     init_client_runtime_device_id();
@@ -116573,6 +117335,7 @@ var init_engine = __esm({
       }
       return null;
     };
+    CLIENT_RUNTIME_POLICY = runtime_policy_generated_default2.trading.engine.client_runtime;
     getRecentProviderFailureDiagnostics = (reason) => {
       const providerLabel = reason === void 0 ? null : getEventBoundProviderLabel(reason);
       const traceId = reason === void 0 ? null : getEventBoundProviderTraceId(reason);
@@ -116580,7 +117343,7 @@ var init_engine = __esm({
         return null;
       }
       const snapshot = getLatestRuntimeProviderFailureTelemetrySnapshot({
-        maxAgeMs: 3e4,
+        maxAgeMs: CLIENT_RUNTIME_POLICY.provider_failure_diagnostics_max_age_milliseconds,
         label: providerLabel,
         traceId
       });
@@ -116689,7 +117452,7 @@ var init_engine = __esm({
         runtime_request_transient_network: record5.runtimeRequestTransientNetwork === true,
         runtime_request_deadline_at_ms: numberOrNull(record5.runtimeRequestDeadlineAtMs),
         runtime_request_deadline_exceeded: record5.runtimeRequestDeadlineExceeded === true,
-        ...record5.code === "snapshot_stale" && record5.runtimeRequestStatus === 409 ? {
+        ...record5.code === "snapshot_stale" && record5.runtimeRequestStatus === HTTP_STATUS.CONFLICT ? {
           runtime_rejection_reason_code: "snapshot_stale",
           snapshot_age_seconds: numberOrNull(record5.runtimeSnapshotAgeSeconds),
           snapshot_max_age_seconds: numberOrNull(record5.runtimeSnapshotMaxAgeSeconds)
@@ -116946,7 +117709,7 @@ var init_engine = __esm({
     };
     isTransientRuntimeConflictError = (error48) => {
       const structured = error48;
-      if (Number(structured?.status) === 409 && structured?.retryable === true && (structured?.code === "profile_runtime_contract_busy" || structured?.code === "runtime_decision_finalizing" || structured?.code === "runtime_trade_sync_finalizing")) {
+      if (Number(structured?.status) === HTTP_STATUS.CONFLICT && structured?.retryable === true && (structured?.code === "profile_runtime_contract_busy" || structured?.code === "runtime_decision_finalizing" || structured?.code === "runtime_trade_sync_finalizing")) {
         return true;
       }
       const hasStructuredMetadata = Number.isFinite(Number(structured?.status)) || typeof structured?.code === "string" || typeof structured?.retryable === "boolean";
@@ -117144,7 +117907,7 @@ var init_engine = __esm({
         this._pendingProtectionRecoveryDispatched = false;
         this._lastPendingProtectionRecoveryAtMs = null;
         this._primaryAnalysisDisabled = false;
-        this._loopEarlyReturnRetryDelayMs = 5e3;
+        this._loopEarlyReturnRetryDelayMs = CLIENT_RUNTIME_POLICY.loop_early_return_retry_milliseconds;
         this._executionModeMismatchConsecutiveCount = 0;
         this._expectedExecutionMode = "client";
         this._settleUnreportedModelCalls = null;
@@ -117311,7 +118074,7 @@ var init_engine = __esm({
               signal.removeEventListener("abort", finish);
               resolve14();
             };
-            const timeoutId = globalThis.setTimeout(finish, 1e3);
+            const timeoutId = globalThis.setTimeout(finish, CLIENT_RUNTIME_POLICY.window_handoff_cleanup_retry_milliseconds);
             signal.addEventListener("abort", finish, { once: true });
           });
         }
@@ -117396,7 +118159,7 @@ var init_engine = __esm({
         return {
           deviceId: this._deviceId,
           sessionId: this._sessionId,
-          surface: getDesktopBridge() ? "desktop" : "browser"
+          surface: runtimeHostSurface()
         };
       }
       async _shouldStopForExecutionModeMismatch() {
@@ -117453,8 +118216,8 @@ var init_engine = __esm({
           const phase = policy2.phase_seconds;
           const interval = policy2.interval_seconds;
           const valid = phase != null && interval != null && Number.isFinite(phase) && Number.isFinite(interval) && interval > 0 && phase >= 0 && phase < interval && Number.isFinite(status?.server_time) && Number(status?.server_time) > 0;
-          const phaseMs = valid ? Math.round(phase * 1e3) : null;
-          const intervalMs = valid ? Math.round(interval * 1e3) : null;
+          const phaseMs = valid ? Math.round(phase * MS_PER_SECOND) : null;
+          const intervalMs = valid ? Math.round(interval * MS_PER_SECOND) : null;
           const grace = Number(policy2.dispatch_grace_ms);
           if (!Number.isFinite(grace) || grace < 0) throw new Error("Invalid periodic analysis dispatch grace.");
           const intervalChanged = intervalMs != null && this._loopIntervalMs != null && this._loopIntervalMs !== intervalMs;
@@ -117465,7 +118228,7 @@ var init_engine = __esm({
             phaseMs,
             intervalMs,
             dispatchGraceMs: grace,
-            localMinusServerMs: sameAssignment ? previous.localMinusServerMs : valid ? observedAtMs - Number(status?.server_time) * 1e3 : 0
+            localMinusServerMs: sameAssignment ? previous.localMinusServerMs : valid ? observedAtMs - Number(status?.server_time) * MS_PER_SECOND : 0
           };
           if (!sameAssignment) {
             this._lastPeriodicSlotServerMs = null;
@@ -117689,7 +118452,7 @@ var init_engine = __esm({
             payload: {
               reason,
               state: this._state,
-              claim_surface: getDesktopBridge() ? "desktop" : "browser",
+              claim_surface: runtimeHostSurface(),
               route_pathname: typeof window !== "undefined" ? window.location.pathname : null,
               visibility_state: typeof document !== "undefined" ? document.visibilityState : null,
               online: typeof navigator !== "undefined" ? navigator.onLine : null,
@@ -117802,7 +118565,7 @@ var init_engine = __esm({
           lastStopProfileId: this._lastStopProfileId,
           lastRunAt: this._lastRunAt,
           nextRunAtMs: this._primaryAnalysisDisabled ? null : this._nextRunAtMs,
-          loopIntervalSeconds: this._loopIntervalMs == null ? null : Math.max(1, Math.round(this._loopIntervalMs / 1e3)),
+          loopIntervalSeconds: this._loopIntervalMs == null ? null : Math.max(1, Math.round(this._loopIntervalMs / MS_PER_SECOND)),
           schedulerPhase: this._getSchedulerPhase(),
           primaryAnalysisDisabled: this._primaryAnalysisDisabled,
           ownershipLossReason: this._ownershipLossReason,
@@ -117850,7 +118613,7 @@ var init_engine = __esm({
         if (!Number.isFinite(parsedSeconds) || parsedSeconds <= 0) {
           throw new Error(`Missing required ${errorLabel}.`);
         }
-        return Math.round(parsedSeconds * 1e3);
+        return Math.round(parsedSeconds * MS_PER_SECOND);
       }
       _resolveAnalysisStaleAfterMs(rawSeconds, defaultTimeoutSeconds) {
         const parsedSeconds = Number(rawSeconds);
@@ -117861,7 +118624,7 @@ var init_engine = __esm({
         if (Number.isFinite(parsedDefaultTimeoutSeconds) && parsedDefaultTimeoutSeconds > 0 && parsedSeconds < parsedDefaultTimeoutSeconds) {
           throw new Error("Client runtime stale analysis timeout must be greater than or equal to the default timeout.");
         }
-        return Math.round(parsedSeconds * 1e3);
+        return Math.round(parsedSeconds * MS_PER_SECOND);
       }
       _resolveLoopIntervalMs(loopIntervalSeconds, minLoopIntervalSeconds) {
         const parsedSeconds = Number(loopIntervalSeconds);
@@ -117875,7 +118638,7 @@ var init_engine = __esm({
         if (parsedSeconds < parsedMinSeconds) {
           throw new Error(`Client runtime loop interval must be at least ${parsedMinSeconds} seconds.`);
         }
-        return Math.round(parsedSeconds * 1e3);
+        return Math.round(parsedSeconds * MS_PER_SECOND);
       }
       _initializeNextRunAnchor(referenceMs = Date.now()) {
         if (this._loopIntervalMs == null) {
@@ -118419,7 +119182,7 @@ var init_engine = __esm({
           this._executionModeMismatchConsecutiveCount = 0;
           const responseNextRunSeconds = Number(grant.runtime?.next_run);
           const responseServerTimeSeconds = Number(grant.runtime?.server_time);
-          const assignedNextRunAtMs = grant.runtime?.server_time != null && Number.isFinite(responseServerTimeSeconds) && responseServerTimeSeconds > 0 && Number.isFinite(responseNextRunSeconds) && responseNextRunSeconds > responseServerTimeSeconds ? Date.now() + (responseNextRunSeconds - responseServerTimeSeconds) * 1e3 : responseNextRunSeconds * 1e3;
+          const assignedNextRunAtMs = grant.runtime?.server_time != null && Number.isFinite(responseServerTimeSeconds) && responseServerTimeSeconds > 0 && Number.isFinite(responseNextRunSeconds) && responseNextRunSeconds > responseServerTimeSeconds ? Date.now() + (responseNextRunSeconds - responseServerTimeSeconds) * MS_PER_SECOND : responseNextRunSeconds * MS_PER_SECOND;
           const waitsForAssignedStartPhase = Boolean(this._periodicSchedule) || Number.isFinite(assignedNextRunAtMs) && assignedNextRunAtMs > Date.now();
           if (waitsForAssignedStartPhase) {
             if (this._periodicSchedule) this._initializeNextRunAnchor();
@@ -119119,7 +119882,7 @@ var init_engine = __esm({
         const now = Date.now();
         const observations = this._trailingObservations.filter(({ executionContext }) => {
           const capturedAt = Date.parse(executionContext.decisionSnapshotCapturedAt ?? "");
-          const maxAge = Number(executionContext.executionFreshnessMaxAgeSeconds) * 1e3;
+          const maxAge = Number(executionContext.executionFreshnessMaxAgeSeconds) * MS_PER_SECOND;
           const age = now - capturedAt;
           return Number.isFinite(age) && age >= 0 && Number.isFinite(maxAge) && maxAge > 0 && age <= maxAge;
         });
@@ -119194,7 +119957,7 @@ var init_engine = __esm({
             const config2 = await this.getExecutionConfig(profileId);
             const pollSeconds = Number(config2.client_protective_recovery_poll_seconds);
             if (!Number.isFinite(pollSeconds) || pollSeconds <= 0) return;
-            if (this._lastPendingProtectionRecoveryAtMs != null && Date.now() - this._lastPendingProtectionRecoveryAtMs < pollSeconds * 1e3) {
+            if (this._lastPendingProtectionRecoveryAtMs != null && Date.now() - this._lastPendingProtectionRecoveryAtMs < pollSeconds * MS_PER_SECOND) {
               return;
             }
             this._lastPendingProtectionRecoveryAtMs = Date.now();
@@ -119448,7 +120211,7 @@ var init_engine = __esm({
             });
             return;
           }
-          this._emitLoopBoundaryTelemetry("client_execution_loop_early_return", "reason=analysis_in_flight retry_ms=5000", {
+          this._emitLoopBoundaryTelemetry("client_execution_loop_early_return", `reason=analysis_in_flight retry_ms=${this._loopEarlyReturnRetryDelayMs}`, {
             reason: "analysis_in_flight",
             retry_ms: this._loopEarlyReturnRetryDelayMs
           });
@@ -119743,9 +120506,12 @@ var init_engine = __esm({
               const nowMs2 = Date.now();
               const windowOpensAtMs = error48.nextChangeAtMs != null ? this._periodicNextSlot(error48.nextChangeAtMs, true) ?? error48.nextChangeAtMs : null;
               aiSchedulePauseHasNext = windowOpensAtMs != null;
-              aiSchedulePauseMs = windowOpensAtMs != null ? Math.max(1e3, Math.min(windowOpensAtMs - nowMs2, 36e5)) : 6e4;
+              aiSchedulePauseMs = windowOpensAtMs != null ? Math.max(
+                CLIENT_RUNTIME_POLICY.ai_schedule_pause_min_milliseconds,
+                Math.min(windowOpensAtMs - nowMs2, CLIENT_RUNTIME_POLICY.ai_schedule_pause_max_milliseconds)
+              ) : CLIENT_RUNTIME_POLICY.ai_schedule_pause_unknown_milliseconds;
               if (runtimeMode === "trader" && this._loopIntervalMs != null) {
-                aiSchedulePauseMs = Math.min(aiSchedulePauseMs, Math.max(1e3, this._loopIntervalMs));
+                aiSchedulePauseMs = Math.min(aiSchedulePauseMs, Math.max(CLIENT_RUNTIME_POLICY.ai_schedule_pause_min_milliseconds, this._loopIntervalMs));
               }
               this._nextRunAtMs = windowOpensAtMs;
               if (!aiSchedulePauseContinuation) {
@@ -120035,7 +120801,7 @@ var init_engine = __esm({
               await this._discardCycleOnContractMismatch("decision", decisionError);
               return;
             }
-            if (decisionError instanceof Error && decisionError.status === 409 && (decisionError.code === "snapshot_stale" || decisionError.message.startsWith("Runtime decision rejected by constraints:"))) {
+            if (decisionError instanceof Error && decisionError.status === HTTP_STATUS.CONFLICT && (decisionError.code === "snapshot_stale" || decisionError.message.startsWith("Runtime decision rejected by constraints:"))) {
               Object.assign(decisionError, {
                 runtimeInvocationAttempts: result.invocations?.map((attempt) => ({
                   ...attempt,
@@ -120518,7 +121284,7 @@ var init_engine = __esm({
         } catch (error48) {
           const errorModelCalls = getCycleErrorModelCalls(error48);
           if (errorModelCalls.length > 0) cycleModelCalls = errorModelCalls;
-          const cycleElapsedSeconds = Math.max(0, (performance.now() - runStartedMonotonicMs) / 1e3);
+          const cycleElapsedSeconds = Math.max(0, (performance.now() - runStartedMonotonicMs) / MS_PER_SECOND);
           cycleOutcome = "failed";
           cycleReason = cycleObservation.reason_code ?? "runtime_failed";
           if (isRuntimeAbortError(error48) || analysisAbortController.signal.aborted || this._isStopping || this._state === "stopped" || this._analysisRequestId !== requestId) {
@@ -120636,7 +121402,7 @@ var init_engine = __esm({
           }
           if (hasEventBoundProviderFailureEvidence(error48) && this._expectedExecutionMode === "server") {
             const backoffSeconds = Number((await this.getExecutionConfig(profileId).catch(() => null))?.provider_failure_backoff_seconds);
-            if (Number.isFinite(backoffSeconds) && backoffSeconds > 0) providerRetryDelayMs = backoffSeconds * 1e3;
+            if (Number.isFinite(backoffSeconds) && backoffSeconds > 0) providerRetryDelayMs = backoffSeconds * MS_PER_SECOND;
           }
           if (hasEventBoundProviderFailureEvidence(error48)) {
             this.scheduleProviderFailureDiagnosticsTelemetry({
@@ -120823,7 +121589,7 @@ var init_engine = __esm({
         if (!sessionId || !deviceId || !mode) {
           return;
         }
-        const desktopRuntimeSurface = Boolean(getDesktopBridge());
+        const desktopRuntimeSurface = runtimeHostSurface() === "desktop";
         try {
           await reportClientRuntimeLifecycleEvent(
             profileId,
@@ -120849,7 +121615,7 @@ var init_engine = __esm({
                 runtime_live_status: "active",
                 runtime_running: true,
                 runtime_scheduler_phase: this._getSchedulerPhase(),
-                runtime_loop_interval_seconds: this._loopIntervalMs == null ? null : Math.max(1, Math.round(this._loopIntervalMs / 1e3)),
+                runtime_loop_interval_seconds: this._loopIntervalMs == null ? null : Math.max(1, Math.round(this._loopIntervalMs / MS_PER_SECOND)),
                 runtime_last_run_at: this._lastRunAt,
                 runtime_next_run_at: this._nextRunAtMs == null ? null : new Date(this._nextRunAtMs).toISOString(),
                 runtime_next_run_at_ms: this._nextRunAtMs,
@@ -120873,7 +121639,7 @@ var init_engine = __esm({
         if (!profileId) {
           return;
         }
-        const delayMs = Math.max(0, options.delayMs ?? 2500);
+        const delayMs = Math.max(0, options.delayMs ?? CLIENT_RUNTIME_POLICY.provider_failure_diagnostics_delay_milliseconds);
         globalThis.setTimeout(() => {
           const diagnostics = buildRuntimeErrorDiagnostics(options.reason);
           const healthProbe = diagnostics.healthProbe && typeof diagnostics.healthProbe === "object" ? diagnostics.healthProbe : null;
@@ -120961,7 +121727,7 @@ var init_engine = __esm({
           eventProvenance?.modelSource ?? providerSetup?.provider ?? options?.modelSource ?? ""
         ).trim().toLowerCase() || null;
         const sanitizedReason = getSanitizedRuntimeErrorMessage(reason) || "Unknown runtime error.";
-        const retrySeconds = this._loopIntervalMs == null ? null : Math.max(1, Math.round(this._loopIntervalMs / 1e3));
+        const retrySeconds = this._loopIntervalMs == null ? null : Math.max(1, Math.round(this._loopIntervalMs / MS_PER_SECOND));
         const executionProjection = options?.executionReasonCode ? projectExecutionErrorContract({
           error: sanitizedReason,
           symbol: options.executionSymbol,
@@ -121132,7 +121898,7 @@ var init_engine = __esm({
         const heartbeatLifecycleGeneration = this._lifecycleGeneration;
         const heartbeatLastRunAt = this._lastRunAt;
         const heartbeatNextRunAt = !this._primaryAnalysisDisabled && typeof this._nextRunAtMs === "number" && Number.isFinite(this._nextRunAtMs) ? new Date(this._nextRunAtMs).toISOString() : null;
-        const heartbeatLoopIntervalSeconds = this._loopIntervalMs == null ? null : Math.max(1, Math.round(this._loopIntervalMs / 1e3));
+        const heartbeatLoopIntervalSeconds = this._loopIntervalMs == null ? null : Math.max(1, Math.round(this._loopIntervalMs / MS_PER_SECOND));
         const heartbeatSchedulerPhase = this._getSchedulerPhase();
         const heartbeatAnalysisRunId = this._primaryAnalysisDisabled || !this._isAnalysisInFlight() ? null : this._analysisRequestId;
         const heartbeatIsAnalyzing = !this._primaryAnalysisDisabled && (this._isAnalysisInFlight() || this._startupPendingAnalysis && options?.confirmGrant !== true || this._isExecuting);
@@ -121375,7 +122141,7 @@ var init_engine = __esm({
         }
         this._killswitchIntervalId = setInterval(
           () => void this._runClientKillswitchCheck(),
-          Math.max(1e3, Math.round(pollIntervalSeconds * 1e3))
+          Math.max(CLIENT_RUNTIME_POLICY.killswitch_timer_floor_milliseconds, Math.round(pollIntervalSeconds * MS_PER_SECOND))
         );
       }
       async _runClientKillswitchCheck() {
@@ -121416,7 +122182,7 @@ var init_engine = __esm({
                   new DOMException("Client killswitch check timed out.", "TimeoutError")
                 );
                 reject(new Error("Client killswitch check timed out."));
-              }, Math.round(checkTimeoutSeconds * 1e3));
+              }, Math.round(checkTimeoutSeconds * MS_PER_SECOND));
             })
           ]);
           if (controller.signal.aborted || this._state !== "running" || this._mode !== "trader" || this._profileId !== profileId || this._sessionId !== sessionId || this._deviceId !== deviceId) {
@@ -121524,9 +122290,9 @@ var init_engine = __esm({
         const activeExecutionLoop = this._executionLoopPromise;
         if (activeExecutionLoop) {
           const executionFenceTimeoutMs = Math.max(
-            1e3,
+            CLIENT_RUNTIME_POLICY.killswitch_timer_floor_milliseconds,
             Math.round(
-              Number(config2.client_runtime_killswitch_close_timeout_seconds) * 1e3
+              Number(config2.client_runtime_killswitch_close_timeout_seconds) * MS_PER_SECOND
             )
           );
           let executionFenceTimeoutId = null;
@@ -121581,7 +122347,7 @@ var init_engine = __esm({
                 () => refreshController.abort(
                   new DOMException("Client killswitch position refresh timed out.", "TimeoutError")
                 ),
-                Math.round(closeTimeoutSeconds * 1e3)
+                Math.round(closeTimeoutSeconds * MS_PER_SECOND)
               );
               try {
                 freshPositions = (await fetchBrowserAccountState2({
@@ -122661,11 +123427,17 @@ async function runHeadlessRuntime(options) {
   const engine = new ClientExecutionEngine();
   const stopController = new AbortController();
   const stop = () => stopController.abort();
+  let hungUp = false;
+  const hangUp = () => {
+    ignoreClosedTerminalWrites();
+    if (!stopController.signal.aborted && !options.once) hungUp = true;
+    stop();
+  };
   if (options.signal?.aborted) stop();
   options.signal?.addEventListener("abort", stop, { once: true });
-  const signalNames = ["SIGINT", "SIGTERM"];
+  const signalHandlers = HEADLESS_RUNTIME_STOP_SIGNALS.map((signal) => [signal, signal === "SIGHUP" ? hangUp : stop]);
   if (options.stopOnSignals !== false) {
-    for (const signalName of signalNames) process.on(signalName, stop);
+    for (const [signalName, handler] of signalHandlers) process.on(signalName, handler);
   }
   const pending3 = [];
   let wake = null;
@@ -122711,6 +123483,10 @@ async function runHeadlessRuntime(options) {
     { runtimeViewer: { deviceId: identity2.deviceId, sessionId: identity2.sessionId } }
   )).statuses?.[String(options.profileId)] ?? null;
   const stopRuntime = async (reason) => {
+    if (hungUp && reason === "agent_cli:stop") {
+      await leaveRuntime();
+      return;
+    }
     if (engine.active) await engine.stop({ skipRemote: true, reason });
     try {
       await stopClientRuntimeSession(options.profileId, {
@@ -122732,6 +123508,9 @@ async function runHeadlessRuntime(options) {
     }
     await clearOwnState();
   };
+  const leaveRuntime = async () => {
+    if (engine.active) await engine.stop({ skipRemote: true, reason: "agent_cli:hangup" });
+  };
   const releaseFailedStart = async (kind) => {
     if (kind === "explicit" && engine.active) {
       await stopRuntime("agent_cli:start_failed").catch(() => void 0);
@@ -123033,7 +123812,7 @@ async function runHeadlessRuntime(options) {
     unsubscribeState();
     options.signal?.removeEventListener("abort", stop);
     if (options.stopOnSignals !== false) {
-      for (const signalName of signalNames) process.removeListener(signalName, stop);
+      for (const [signalName, handler] of signalHandlers) process.removeListener(signalName, handler);
     }
   }
 }
@@ -123056,6 +123835,7 @@ var init_headless_runtime = __esm({
     init_engine();
     init_server_runtime_lease();
     init_reconcile();
+    init_stop_signals();
     init_local_ai_preflight();
     HeadlessRuntimeTakeoverRequiredError = class extends Error {
       constructor(response) {
@@ -123075,7 +123855,7 @@ var init_headless_runtime = __esm({
     DEFAULT_MAX_CLAIM_WAITS = 10;
     STOP_REQUEST_TIMEOUT_MS = 1e4;
     PROTECTION_IDLE_RECHECK_MS = runtime_policy_generated_default2.trading.engine.client_runtime.protective_actions.idle_recheck_seconds * 1e3;
-    PROTECTION_RETRY_MS = 15e3;
+    PROTECTION_RETRY_MS = runtime_policy_generated_default2.trading.engine.client_runtime.protective_actions.retry_delay_seconds * 1e3;
     MAX_RESUMES_WITHOUT_A_CYCLE = 5;
     RESUME_BACKOFF_MS = [1e3, 5e3, 15e3, 3e4, 6e4];
     BACKUP_WAIT_TICK_MS = runtime_policy_generated_default2.trading.engine.client_runtime.reconcile.tick_interval_seconds * 1e3;