@vtxmacro/cli 2026.10.12 → 2026.10.13

package/bin/vtx.js

@@ -113,7 +113,7 @@ var init_routing = __esm({
 var agent_cli_release_default;
 var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
-    agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.12", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
+    agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.13", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
   }
 });
 
@@ -167,6 +167,89 @@ var init_runtime_policy_generated = __esm({
           refresh_interval_ms: 1e4,
           watchdog_interval_ms: 1e3,
           watchdog_grace_ms: 500
+        },
+        preferences: {
+          load_timeout_ms: 5e3,
+          initial_load_settle_ms: 100,
+          external_save_timeout_ms: 8e3,
+          guest_cookie_max_age_days: 9999
+        },
+        navigation_feedback: {
+          finish_fallback_ms: 2250
+        },
+        confirmation_notices: {
+          success_indicator_ms: 2e3,
+          byok_success_message_ms: 3e3
+        },
+        screener_runtime_config_retry: {
+          base_delay_ms: 1e3,
+          max_delay_ms: 3e4
+        },
+        advanced_chart: {
+          debug_log_throttle_ms: 1e3,
+          initial_history_stall_ms: 15e3,
+          initial_history_recovery_cooldown_ms: 3e4,
+          viewport_restore_settle_ms: 100,
+          symbol_price_wait_ms: 2e3,
+          layout_auto_save_delay_ms: 250
+        },
+        ai_panel: {
+          message_limit: 100,
+          post_execution_history_sync_delay_ms: 2e3,
+          runtime_error_attempt_group_window_seconds: 120,
+          debug_runtime_error_preview_chars: 180
+        },
+        insights_charts: {
+          max_charts: 3,
+          max_line_points: 160,
+          max_bars: 8
+        },
+        analysis_chat: {
+          new_message_scroll_delay_ms: 100
+        },
+        snapshot_selector: {
+          sync_resolution_pending_ms: 350,
+          own_broadcast_window_ms: 5e3,
+          seen_imported_ids_limit: 200,
+          post_import_reload_delay_ms: 1e3,
+          debug_value_chars: 220,
+          debug_fingerprint_head_chars: 64,
+          debug_head_snapshot_ids: 8,
+          debug_comparable_head_chars: 240,
+          debug_panel_comparable_head_chars: 120
+        },
+        debug_logs: {
+          snapshot_card_lines: 80,
+          render_debug_overlay_entries: 120,
+          render_debug_entry_data_chars: 2400,
+          analytics_dashboard_lines: 220,
+          analytics_metric_capture_interval_ms: 400,
+          system_profile_mode_lines: 120,
+          admin_text_chars: 160,
+          admin_analysis_run_id_chars: 32,
+          hyperliquid_balance_preview_count: 3,
+          model_picker_preview_count: 5
+        },
+        history_panels: {
+          display_batch_size: 50,
+          load_more_threshold_px: 100,
+          trade_history_fetch_page_size: 100,
+          ai_panel_interaction_window_ms: 2500,
+          ai_panel_defer_max_staleness_ms: 1e4,
+          ai_panel_defer_retry_ms: 1500
+        },
+        insights_access: {
+          initial_prompt_idea_count: 6,
+          section_preview_blocks: 2
+        },
+        marketing: {
+          arena_leaderboard_entries: 3
+        },
+        calendar: {
+          event_highlight_window_minutes: 60
+        },
+        system_page: {
+          hyperliquid_manual_refresh_cooldown_ms: 800
         }
       },
       ai_dashboard: {
@@ -208,6 +291,9 @@ var init_runtime_policy_generated = __esm({
             72,
             168
           ]
+        },
+        defaults: {
+          max_chat_turns: 9999
         }
       },
       trading: {
@@ -276,7 +362,14 @@ var init_runtime_policy_generated = __esm({
               client_claim_retry_delay_milliseconds: 1e3,
               client_failure_report_timeout_milliseconds: 2e3,
               client_presence_heartbeat_interval_milliseconds: 3e4,
-              client_presence_http_timeout_milliseconds: 5e3
+              client_presence_http_timeout_milliseconds: 5e3,
+              client_claim_completion_buffer_milliseconds: 250,
+              client_max_concurrent_jobs_max: 32,
+              diagnostics_max_elapsed_ms: 12e4,
+              diagnostics_max_pending_reads: 1e3,
+              diagnostics_max_clock_offset_ms: 864e5,
+              failure_max_reported_weight: 1e6,
+              failure_max_retry_after_ms: 36e5
             }
           }
         },
@@ -285,6 +378,10 @@ var init_runtime_policy_generated = __esm({
           history_start_ms: 16409952e5,
           device_read_deadline_seconds: 180,
           device_recent_window_hours: 24
+        },
+        tradability: {
+          score_min: 1,
+          score_max: 10
         }
       },
       agent_cli: {
@@ -372,6 +469,9 @@ var init_runtime_policy_generated = __esm({
         resource_scheduler: {
           client_lock_ttl_milliseconds: 12e4,
           client_poll_interval_milliseconds: 250
+        },
+        defaults: {
+          adaptive_schedule_enabled: true
         }
       },
       deployment: {
@@ -493,7 +593,10 @@ var init_runtime_policy_generated = __esm({
       },
       market_data: {
         chart_interest: {
-          historical_backfill_candle_limit: 1e3
+          historical_backfill_candle_limit: 1e3,
+          heartbeat_retry_seconds: 15,
+          heartbeat_min_delay_ms: 1e3,
+          catch_up_candle_limit: 300
         }
       },
       auth: {
@@ -502,6 +605,14 @@ var init_runtime_policy_generated = __esm({
           totp_code_length: 6
         }
       },
+      android: {
+        app_host: {
+          profiles_refresh_interval_seconds: 60,
+          running_report_interval_seconds: 5,
+          page_identity_retry_seconds: 5,
+          profiles_read_timeout_seconds: 30
+        }
+      },
       websocket: {
         client_connection: {
           reconnect_delay_ms: 3e3,
@@ -514,6 +625,9 @@ var init_runtime_policy_generated = __esm({
       notifications: {
         desktop: {
           heartbeat_seconds: 20
+        },
+        telegram: {
+          connect_link_poll_ms: 3e3
         }
       },
       validation: {
@@ -528,6 +642,63 @@ var init_runtime_policy_generated = __esm({
           handle_changes_per_window: 2,
           handle_change_window_days: 14
         }
+      },
+      billing: {
+        credit_purchase: {
+          amount_usd_steps: [
+            10,
+            25,
+            50,
+            100,
+            500,
+            1e3
+          ]
+        }
+      },
+      admin: {
+        page: {
+          credit_grant_amount_usd_steps: [
+            10,
+            25,
+            50,
+            100,
+            500,
+            1e3,
+            5e3,
+            1e4,
+            5e4,
+            1e5
+          ],
+          user_lookup_blur_close_delay_ms: 200,
+          selected_user_refresh_delay_ms: 300,
+          handle_preview_count: 3
+        },
+        models: {
+          analytics: {
+            summary_failure_kinds: 3
+          }
+        },
+        user_search: {
+          min_query_length: 2
+        }
+      },
+      security: {
+        byok: {
+          max_provider_keys_per_provider: 5
+        }
+      },
+      analysis: {
+        live_request_candles: {
+          default_limit: 100
+        }
+      },
+      users: {
+        search: {
+          min_query_length: 2
+        }
+      },
+      referrals: {
+        code_max_length: 24
       }
     };
   }
@@ -662,6 +833,24 @@ var init_config = __esm({
   }
 });
 
+// lib/agent-core/stop-signals.ts
+var HEADLESS_RUNTIME_STOP_SIGNALS, ignoreClosedTerminalWrites, dropWriteError;
+var init_stop_signals = __esm({
+  "lib/agent-core/stop-signals.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    HEADLESS_RUNTIME_STOP_SIGNALS = ["SIGINT", "SIGTERM", "SIGHUP"];
+    ignoreClosedTerminalWrites = () => {
+      for (const stream of [process.stdout, process.stderr]) {
+        if (!stream.listeners("error").includes(dropWriteError)) stream.on("error", dropWriteError);
+      }
+    };
+    dropWriteError = () => void 0;
+  }
+});
+
 // node_modules/smol-toml/dist/date.js
 var DATE_TIME_RE, TomlDate;
 var init_date = __esm({
@@ -1426,8 +1615,8 @@ import { lstat, mkdir as mkdir2, open, readdir as readdir2, readFile as readFile
 import { homedir as homedir2 } from "node:os";
 import { basename, dirname as dirname2, isAbsolute as isAbsolute2, join as join2, relative, resolve, win32 as windowsPath } from "node:path";
 function inferenceBaseDir(env) {
-  const configured = String(env.VTX_INFERENCE_HOST_HOME || "").trim();
-  return configured || join2(homedir2(), ".vtx", "inference-host");
+  const configured2 = String(env.VTX_INFERENCE_HOST_HOME || "").trim();
+  return configured2 || join2(homedir2(), ".vtx", "inference-host");
 }
 function normalizeInferenceHostInstanceName(raw) {
   const value = raw.trim().toLowerCase();
@@ -1920,32 +2109,32 @@ var init_config2 = __esm({
     init_dist();
     init_mcp_transport_config();
     loadInferenceReceiptDurabilityTimeoutMs = async () => {
-      let configured;
+      let configured2;
       if (true) {
-        configured = 5e3;
+        configured2 = 5e3;
       } else {
         const config2 = parse2(await readFile2(resolve(dirname2(fileURLToPath(import.meta.url)), "../../../config.toml"), "utf8"));
         const inference = config2.external_inference;
-        configured = Number(inference?.receipt_durability_timeout_seconds) * 1e3;
+        configured2 = Number(inference?.receipt_durability_timeout_seconds) * 1e3;
       }
-      if (!Number.isSafeInteger(configured) || Number(configured) < 1) {
+      if (!Number.isSafeInteger(configured2) || Number(configured2) < 1) {
         throw new Error("Inference receipt durability timeout is missing or invalid.");
       }
-      return Number(configured);
+      return Number(configured2);
     };
     loadInferenceAgentDataRequestTimeoutMs = async () => {
-      let configured;
+      let configured2;
       if (true) {
-        configured = 9e4;
+        configured2 = 9e4;
       } else {
         const config2 = parse2(await readFile2(resolve(dirname2(fileURLToPath(import.meta.url)), "../../../config.toml"), "utf8"));
         const mcp = config2.insights?.mcp;
-        configured = Number(mcp?.tool_timeout_seconds) * 1e3;
+        configured2 = Number(mcp?.tool_timeout_seconds) * 1e3;
       }
-      if (!Number.isSafeInteger(configured) || Number(configured) < 1) {
+      if (!Number.isSafeInteger(configured2) || Number(configured2) < 1) {
         throw new Error("Inference Agent data request timeout is missing or invalid.");
       }
-      return Number(configured);
+      return Number(configured2);
     };
     loadInferenceAgentCommandLockPolicy = async () => {
       let waitTimeoutMs;
@@ -2877,6 +3066,7 @@ var init_updater = __esm({
     init_agent_cli_release();
     init_runtime_policy_generated();
     init_config();
+    init_stop_signals();
     init_config2();
     init_routing();
     CLI_PACKAGE_NAME = "@vtxmacro/cli";
@@ -3189,11 +3379,11 @@ var init_updater = __esm({
     };
     cliAutoUpdateDisabled = (env) => /^(?:0|false|off|no)$/iu.test(String(env.VTX_CLI_AUTO_UPDATE ?? "").trim());
     resolveRegistry = (env) => {
-      const configured = String(env.VTX_CLI_UPDATE_REGISTRY || "").trim().replace(/\/+$/u, "");
-      if (!configured) return OFFICIAL_NPM_REGISTRY;
+      const configured2 = String(env.VTX_CLI_UPDATE_REGISTRY || "").trim().replace(/\/+$/u, "");
+      if (!configured2) return OFFICIAL_NPM_REGISTRY;
       let url2;
       try {
-        url2 = new URL(configured);
+        url2 = new URL(configured2);
       } catch {
         throw new Error("VTX_CLI_UPDATE_REGISTRY is not a URL.");
       }
@@ -3201,7 +3391,7 @@ var init_updater = __esm({
       if (url2.protocol !== "https:" && !(url2.protocol === "http:" && loopback)) {
         throw new Error("VTX_CLI_UPDATE_REGISTRY must be https, or http on loopback.");
       }
-      return configured;
+      return configured2;
     };
     validSelection = async (value, releasesPath) => {
       if (!value || typeof value !== "object" || Array.isArray(value)) return null;
@@ -3492,6 +3682,7 @@ var init_updater = __esm({
       const stopped = new AbortController();
       const tracker = {
         stops: 0,
+        hungUp: false,
         child: null,
         stopped: stopped.signal,
         uninstall: () => void 0
@@ -3506,14 +3697,19 @@ var init_updater = __esm({
         }
       };
       const forward = (signal) => () => {
+        if (signal === "SIGHUP") {
+          ignoreClosedTerminalWrites();
+          if (tracker.stops === 0) tracker.hungUp = true;
+        }
         tracker.stops += 1;
         stopped.abort();
+        if (signal === "SIGHUP" && process.platform === "win32") return;
         try {
           tracker.child?.kill(signal);
         } catch {
         }
       };
-      const forwarded = ["SIGTERM", "SIGHUP"].map((signal) => [signal, forward(signal)]);
+      const forwarded = HEADLESS_RUNTIME_STOP_SIGNALS.filter((signal) => signal !== "SIGINT").map((signal) => [signal, forward(signal)]);
       process.on("SIGINT", onInterrupt);
       for (const [signal, handler] of forwarded) process.on(signal, handler);
       tracker.uninstall = () => {
@@ -3645,6 +3841,7 @@ var init_updater = __esm({
       };
       const stops = installStopTracker();
       const endAfterStop = async (exitCode) => {
+        if (stops.hungUp) return exitCode;
         if (!await readRuntimeResume(supervisorEnv) || !dependencies.stopRuntimeBetweenChildren) return exitCode;
         const stopExitCode = await dependencies.stopRuntimeBetweenChildren(supervisorEnv);
         return stopExitCode === 0 ? exitCode : stopExitCode;
@@ -3889,7 +4086,7 @@ var init_updater = __esm({
 });
 
 // lib/constants.ts
-var MS_PER_SECOND, SECONDS_PER_MINUTE, MINUTES_PER_HOUR, HOURS_PER_DAY, DAYS_PER_WEEK, MS_PER_MINUTE, BACKOFF_GROWTH_FACTOR, HTTP_STATUS, HTTP_STATUS_MIN, HTTP_STATUS_MAX, HTTP_CLIENT_ERROR_MIN, HTTP_SERVER_ERROR_MIN;
+var MS_PER_SECOND, SECONDS_PER_MINUTE, MINUTES_PER_HOUR, HOURS_PER_DAY, DAYS_PER_WEEK, MS_PER_MINUTE, SECONDS_PER_HOUR, SECONDS_PER_DAY, SECONDS_PER_WEEK, MINUTES_PER_DAY, MINUTES_PER_WEEK, MS_PER_HOUR, MS_PER_DAY, BACKOFF_GROWTH_FACTOR, HTTP_STATUS, HTTP_STATUS_MIN, HTTP_STATUS_MAX, HTTP_CLIENT_ERROR_MIN, HTTP_SERVER_ERROR_MIN, EXTERNAL_INFERENCE_LIMITS;
 var init_constants = __esm({
   "lib/constants.ts"() {
     "use strict";
@@ -3902,6 +4099,13 @@ var init_constants = __esm({
     HOURS_PER_DAY = 24;
     DAYS_PER_WEEK = 7;
     MS_PER_MINUTE = MS_PER_SECOND * SECONDS_PER_MINUTE;
+    SECONDS_PER_HOUR = SECONDS_PER_MINUTE * MINUTES_PER_HOUR;
+    SECONDS_PER_DAY = SECONDS_PER_HOUR * HOURS_PER_DAY;
+    SECONDS_PER_WEEK = SECONDS_PER_DAY * DAYS_PER_WEEK;
+    MINUTES_PER_DAY = MINUTES_PER_HOUR * HOURS_PER_DAY;
+    MINUTES_PER_WEEK = MINUTES_PER_DAY * DAYS_PER_WEEK;
+    MS_PER_HOUR = MS_PER_MINUTE * MINUTES_PER_HOUR;
+    MS_PER_DAY = MS_PER_HOUR * HOURS_PER_DAY;
     BACKOFF_GROWTH_FACTOR = 2;
     HTTP_STATUS = {
       BAD_REQUEST: 400,
@@ -3922,6 +4126,40 @@ var init_constants = __esm({
     HTTP_STATUS_MAX = 599;
     HTTP_CLIENT_ERROR_MIN = 400;
     HTTP_SERVER_ERROR_MIN = 500;
+    EXTERNAL_INFERENCE_LIMITS = {
+      max_prompt_bytes: 3e5,
+      max_immutable_job_input_bytes: 3e5,
+      max_candidate_plaintext_bytes: 3e5,
+      // 300,000 bytes plus the AES-GCM tag encode to fewer than 700,000 base64url
+      // characters, keeping completion requests below the global MCP request bound.
+      max_ciphertext_chars: 7e5,
+      max_status_hosts: 640,
+      // A profile lane's account cascade (fallback inference hosts) after its
+      // primary host. Published hosts compile it in, so it is a wire constant, not
+      // the operator-tunable model_fallbacks.max_models.
+      max_profile_fallbacks_per_lane: 127,
+      // The immutable-input hash length-prefixes each field name and value as
+      // big-endian unsigned integers of these sizes.
+      hash_field_name_length_bytes: 2,
+      hash_value_length_bytes: 8,
+      max_job_claim_batch_size: 32,
+      max_effective_models: 16,
+      max_reasoning_efforts: 16,
+      max_model_identities: 16,
+      max_advertised_models: 64,
+      // Largest provider-reported usage percentage accepted (overage can exceed 100).
+      max_usage_percent: 1e6,
+      // A provider's weekly quota reset or retry deadline lies at most this far ahead.
+      provider_reset_max_days: 8,
+      // Stderr bytes a host observes before truncating its diagnostics.
+      stderr_observation_cap_bytes: 65536,
+      // Tools a Grok tool-validation summary lists before truncating.
+      max_grok_tool_summaries: 8,
+      max_recent_failures: 32,
+      max_status_bindings: 512,
+      max_validation_error_codes: 128,
+      max_discarded_fields: 128
+    };
   }
 });
 
@@ -18469,7 +18707,7 @@ var init_zod = __esm({
 });
 
 // lib/external-inference-contract.ts
-var EXTERNAL_INFERENCE_CONTRACT_VERSION, EXTERNAL_INFERENCE_CONTROLLER_SCHEMA_VERSION, EXTERNAL_INFERENCE_CONTROLLER_SCHEMA_VERSION_V2, EXTERNAL_INFERENCE_ADVERTISEMENT_SCHEMA_VERSION, EXTERNAL_INFERENCE_ENVELOPE_SCHEMA_VERSION, EXTERNAL_INFERENCE_COMPRESSED_INPUT_ENVELOPE_SCHEMA_VERSION, EXTERNAL_INFERENCE_JOB_INPUT_SCHEMA_VERSION, LEGACY_EXTERNAL_INFERENCE_JOB_INPUT_SCHEMA_VERSION, EXTERNAL_INFERENCE_USAGE_SCHEMA_VERSION, EXTERNAL_INFERENCE_INPUT_HASH_DOMAIN, MAX_EXTERNAL_INFERENCE_STATUS_HOSTS, MAX_PROFILE_EXTERNAL_INFERENCE_FALLBACKS_PER_LANE, MAX_GENERATION, MAX_SAFE_INTEGER, MAX_PROMPT_BYTES, MAX_IMMUTABLE_JOB_INPUT_BYTES, MAX_CANDIDATE_PLAINTEXT_BYTES, MAX_CIPHERTEXT_CHARS, SHA256_INITIAL_STATE, SHA256_ROUND_CONSTANTS, rotateRight, sha256BytesHex, sha256Utf8Hex, computeImmutableJobInputSha256, identifierSchema, operationIdentifierSchema, sha256HexSchema, generationSchema, zeroBasedGenerationSchema, nonNegativeSafeIntegerSchema, positiveSafeIntegerSchema, sqlIntegerTokenCountSchema, timestampSchema, safeCodeSchema, processExitCodeSchema, externalInferenceAdapterIdSchema, reasoningEffortSchema, modelNameSchema, displayNameSchema, authenticatedAccountEmailSchema, protocolVersionSchema, base64UrlAlphabet, isCanonicalBase64Url, base64Url32BytesSchema, base64UrlNonceSchema, base64UrlCiphertextSchema, claimHandleSchema, boundedJsonTextSchema, boundedPromptTextSchema, laneSchema, botModeSchema, executionModeSchema, responseModeSchema, controlModeSchema, dispatchOutcomeSchema, responseOutcomeSchema, nativeModelControllerSchema, legacyExternalAgentModelControllerSchema, externalAgentModelControllerSchema, boundExternalAgentModelControllerSchema, externalAgentUnboundControllerSchema, externalAgentUnboundControllerV2Schema, orderedFallbackHostIdsSchema, externalInferenceFallbackHostIdsSchema, liveModelControllerSchema, snapshotModelControllerSchema, modelIdentityMappingSchema, advertisedModelSchema, hostAdvertisementSchema, envelopeAadSchema, validateEnvelopeAad, commonEnvelopeShape, sealedKeyWrapEnvelopeSchema, sealedInputEnvelopeSchema, sealedCandidateEnvelopeSchema, sealedEnvelopeSchema, screenerCandidateRuntimeBindingSchema, screenerClientLeaseBindingSchema, screenerRuntimeBindingSchema, serverRuntimeBindingSchema, clientRuntimeBindingSchema, runtimeBindingSchema, immutableJobInputSchema, canonicalizeJsonValue, serializeImmutableJobInput, reportedTokenUsageSchema, unavailableTokenUsageSchema, tokenUsageSchema, grokToolValidationDiagnosticSchema, grokResponseIdentityDiagnosticSchema, agentTurnReceiptSchema, agentConnectRequestSchema, agentNextRequestSchema, agentHeartbeatRequestSchema, emptyAgentNextResultSchema, claimedAgentNextResultSchema, agentNextResultSchema, agentCompleteRequestSchema, agentFailRequestSchema, requestedModelSelectionSchema, completedModelProvenanceSchema, attemptModelProvenanceSchema, providerWeeklyQuotaReadSchema, hostRuntimeRecoverySchema, hostHeartbeatRequestSchema, jobClaimRequestBaseShape, jobClaimRequestSchema, emptyJobClaimSchema, claimedJobSchema, claimedDispatchIntentSchema, batchedJobClaimSchema, timedBatchedJobClaimSchema, jobClaimResultSchema, attemptStartRequestSchema, jobHeartbeatRequestSchema, continueHeartbeatDirectiveSchema, cancelHeartbeatDirectiveSchema, jobHeartbeatResultSchema, adapterOutcomeEvidenceSchema, completionBaseShape, validateCompletion, providerResponseCompletionSchema, decisionCandidateCompletionSchema, jobCompleteRequestSchema, codexProcessExitDiagnosticsSchema, jobFailRequestSchema, jobCancelRequestSchema, jobCancellationReceiptSchema, jobDeliveryRequestSchema, deliveryBaseShape, validateDeliveryCandidate, providerResponseDeliverySchema, decisionCandidateDeliverySchema, jobDeliveryResultSchema, jobConsumptionRequestSchema, jobConsumptionReceiptSchema, jobStateSchema, jobStatusReadSchema, hostStatusReadSchema, controllerBindingStatusReadSchema, queueStatusReadSchema, outcomeStatusReadSchema, externalInferenceVolumeWindowReadSchema, externalInferenceFailureCountReadSchema, externalInferenceHostDiagnosticsReadSchema, externalInferenceProfileActivityReadSchema, externalInferenceStatusReadSchema, nativeResearchEvidenceSourceSchema, externalAgentResearchEvidenceSourceSchema, researchEvidenceSourceSchema, reportedResearchTokenUsageSchema, unavailableResearchTokenUsageSchema, researchTokenUsageSchema, externalInferenceProductLineageBaseShape, traderExternalInferenceProductLineageSchema, decisionChatExternalInferenceProductLineageSchema, screenerExternalInferenceProductLineageSchema, externalInferenceProductLineageSchema, normalProductLinkageSchema, evidenceMaterializationMarkerSchema, deliveredExternalAgentSourceIdentitySchema, deliveredRequestEvidenceSchema, researchEvidenceBaseShape, researchEvidenceBaseSchema, validateExactUtf8, validateResearchEvidence, providerResponseResearchEvidenceSchema, decisionCandidateResearchEvidenceSchema, researchEvidenceSchema;
+var EXTERNAL_INFERENCE_CONTRACT_VERSION, EXTERNAL_INFERENCE_CONTROLLER_SCHEMA_VERSION, EXTERNAL_INFERENCE_CONTROLLER_SCHEMA_VERSION_V2, EXTERNAL_INFERENCE_ADVERTISEMENT_SCHEMA_VERSION, EXTERNAL_INFERENCE_ENVELOPE_SCHEMA_VERSION, EXTERNAL_INFERENCE_COMPRESSED_INPUT_ENVELOPE_SCHEMA_VERSION, EXTERNAL_INFERENCE_JOB_INPUT_SCHEMA_VERSION, LEGACY_EXTERNAL_INFERENCE_JOB_INPUT_SCHEMA_VERSION, EXTERNAL_INFERENCE_USAGE_SCHEMA_VERSION, EXTERNAL_INFERENCE_INPUT_HASH_DOMAIN, MAX_EXTERNAL_INFERENCE_STATUS_HOSTS, MAX_PROFILE_EXTERNAL_INFERENCE_FALLBACKS_PER_LANE, MAX_GENERATION, MAX_SAFE_INTEGER, MAX_PROMPT_BYTES, MAX_IMMUTABLE_JOB_INPUT_BYTES, MAX_CANDIDATE_PLAINTEXT_BYTES, MAX_CIPHERTEXT_CHARS, PROVIDER_RESET_MAX_MS, MAX_GROK_TOOL_SUMMARIES, STDERR_OBSERVATION_CAP_BYTES, SHA256_INITIAL_STATE, SHA256_ROUND_CONSTANTS, rotateRight, sha256BytesHex, sha256Utf8Hex, computeImmutableJobInputSha256, identifierSchema, operationIdentifierSchema, sha256HexSchema, generationSchema, zeroBasedGenerationSchema, nonNegativeSafeIntegerSchema, positiveSafeIntegerSchema, sqlIntegerTokenCountSchema, timestampSchema, safeCodeSchema, processExitCodeSchema, externalInferenceAdapterIdSchema, reasoningEffortSchema, modelNameSchema, displayNameSchema, authenticatedAccountEmailSchema, protocolVersionSchema, base64UrlAlphabet, isCanonicalBase64Url, base64Url32BytesSchema, base64UrlNonceSchema, base64UrlCiphertextSchema, claimHandleSchema, boundedJsonTextSchema, boundedPromptTextSchema, laneSchema, botModeSchema, executionModeSchema, responseModeSchema, controlModeSchema, dispatchOutcomeSchema, responseOutcomeSchema, nativeModelControllerSchema, legacyExternalAgentModelControllerSchema, externalAgentModelControllerSchema, boundExternalAgentModelControllerSchema, externalAgentUnboundControllerSchema, externalAgentUnboundControllerV2Schema, orderedFallbackHostIdsSchema, externalInferenceFallbackHostIdsSchema, liveModelControllerSchema, snapshotModelControllerSchema, modelIdentityMappingSchema, advertisedModelSchema, hostAdvertisementSchema, envelopeAadSchema, validateEnvelopeAad, commonEnvelopeShape, sealedKeyWrapEnvelopeSchema, sealedInputEnvelopeSchema, sealedCandidateEnvelopeSchema, sealedEnvelopeSchema, screenerCandidateRuntimeBindingSchema, screenerClientLeaseBindingSchema, screenerRuntimeBindingSchema, serverRuntimeBindingSchema, clientRuntimeBindingSchema, runtimeBindingSchema, immutableJobInputSchema, canonicalizeJsonValue, serializeImmutableJobInput, reportedTokenUsageSchema, unavailableTokenUsageSchema, tokenUsageSchema, grokToolValidationDiagnosticSchema, grokResponseIdentityDiagnosticSchema, agentTurnReceiptSchema, agentConnectRequestSchema, agentNextRequestSchema, agentHeartbeatRequestSchema, emptyAgentNextResultSchema, claimedAgentNextResultSchema, agentNextResultSchema, agentCompleteRequestSchema, agentFailRequestSchema, requestedModelSelectionSchema, completedModelProvenanceSchema, attemptModelProvenanceSchema, providerWeeklyQuotaReadSchema, hostRuntimeRecoverySchema, hostHeartbeatRequestSchema, jobClaimRequestBaseShape, jobClaimRequestSchema, emptyJobClaimSchema, claimedJobSchema, claimedDispatchIntentSchema, batchedJobClaimSchema, timedBatchedJobClaimSchema, jobClaimResultSchema, attemptStartRequestSchema, jobHeartbeatRequestSchema, continueHeartbeatDirectiveSchema, cancelHeartbeatDirectiveSchema, jobHeartbeatResultSchema, adapterOutcomeEvidenceSchema, completionBaseShape, validateCompletion, providerResponseCompletionSchema, decisionCandidateCompletionSchema, jobCompleteRequestSchema, codexProcessExitDiagnosticsSchema, jobFailRequestSchema, jobCancelRequestSchema, jobCancellationReceiptSchema, jobDeliveryRequestSchema, deliveryBaseShape, validateDeliveryCandidate, providerResponseDeliverySchema, decisionCandidateDeliverySchema, jobDeliveryResultSchema, jobConsumptionRequestSchema, jobConsumptionReceiptSchema, jobStateSchema, jobStatusReadSchema, hostStatusReadSchema, controllerBindingStatusReadSchema, queueStatusReadSchema, outcomeStatusReadSchema, externalInferenceVolumeWindowReadSchema, externalInferenceFailureCountReadSchema, externalInferenceHostDiagnosticsReadSchema, externalInferenceProfileActivityReadSchema, externalInferenceStatusReadSchema, nativeResearchEvidenceSourceSchema, externalAgentResearchEvidenceSourceSchema, researchEvidenceSourceSchema, reportedResearchTokenUsageSchema, unavailableResearchTokenUsageSchema, researchTokenUsageSchema, externalInferenceProductLineageBaseShape, traderExternalInferenceProductLineageSchema, decisionChatExternalInferenceProductLineageSchema, screenerExternalInferenceProductLineageSchema, externalInferenceProductLineageSchema, normalProductLinkageSchema, evidenceMaterializationMarkerSchema, deliveredExternalAgentSourceIdentitySchema, deliveredRequestEvidenceSchema, researchEvidenceBaseShape, researchEvidenceBaseSchema, validateExactUtf8, validateResearchEvidence, providerResponseResearchEvidenceSchema, decisionCandidateResearchEvidenceSchema, researchEvidenceSchema;
 var init_external_inference_contract = __esm({
   "lib/external-inference-contract.ts"() {
     "use strict";
@@ -18477,6 +18715,7 @@ var init_external_inference_contract = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_zod();
+    init_constants();
     EXTERNAL_INFERENCE_CONTRACT_VERSION = "external_inference.v1";
     EXTERNAL_INFERENCE_CONTROLLER_SCHEMA_VERSION = "external_inference_controller_v1";
     EXTERNAL_INFERENCE_CONTROLLER_SCHEMA_VERSION_V2 = "external_inference_controller_v2";
@@ -18487,14 +18726,17 @@ var init_external_inference_contract = __esm({
     LEGACY_EXTERNAL_INFERENCE_JOB_INPUT_SCHEMA_VERSION = "external_inference_job_input_v1";
     EXTERNAL_INFERENCE_USAGE_SCHEMA_VERSION = "external_inference_usage_v1";
     EXTERNAL_INFERENCE_INPUT_HASH_DOMAIN = "vtx.external-inference.input-sha256.v1\0";
-    MAX_EXTERNAL_INFERENCE_STATUS_HOSTS = 640;
-    MAX_PROFILE_EXTERNAL_INFERENCE_FALLBACKS_PER_LANE = 127;
+    MAX_EXTERNAL_INFERENCE_STATUS_HOSTS = EXTERNAL_INFERENCE_LIMITS.max_status_hosts;
+    MAX_PROFILE_EXTERNAL_INFERENCE_FALLBACKS_PER_LANE = EXTERNAL_INFERENCE_LIMITS.max_profile_fallbacks_per_lane;
     MAX_GENERATION = 2147483647;
     MAX_SAFE_INTEGER = Number.MAX_SAFE_INTEGER;
-    MAX_PROMPT_BYTES = 3e5;
-    MAX_IMMUTABLE_JOB_INPUT_BYTES = 3e5;
-    MAX_CANDIDATE_PLAINTEXT_BYTES = 3e5;
-    MAX_CIPHERTEXT_CHARS = 7e5;
+    MAX_PROMPT_BYTES = EXTERNAL_INFERENCE_LIMITS.max_prompt_bytes;
+    MAX_IMMUTABLE_JOB_INPUT_BYTES = EXTERNAL_INFERENCE_LIMITS.max_immutable_job_input_bytes;
+    MAX_CANDIDATE_PLAINTEXT_BYTES = EXTERNAL_INFERENCE_LIMITS.max_candidate_plaintext_bytes;
+    MAX_CIPHERTEXT_CHARS = EXTERNAL_INFERENCE_LIMITS.max_ciphertext_chars;
+    PROVIDER_RESET_MAX_MS = EXTERNAL_INFERENCE_LIMITS.provider_reset_max_days * HOURS_PER_DAY * MINUTES_PER_HOUR * SECONDS_PER_MINUTE * MS_PER_SECOND;
+    MAX_GROK_TOOL_SUMMARIES = EXTERNAL_INFERENCE_LIMITS.max_grok_tool_summaries;
+    STDERR_OBSERVATION_CAP_BYTES = EXTERNAL_INFERENCE_LIMITS.stderr_observation_cap_bytes;
     SHA256_INITIAL_STATE = new Uint32Array([
       1779033703,
       3144134277,
@@ -18651,12 +18893,12 @@ var init_external_inference_contract = __esm({
       for (const [fieldName, value] of fields) {
         const fieldNameBytes = encoder.encode(fieldName);
         const valueBytes = encoder.encode(value);
-        const fieldNameLength = new Uint8Array(2);
+        const fieldNameLength = new Uint8Array(EXTERNAL_INFERENCE_LIMITS.hash_field_name_length_bytes);
         new DataView(fieldNameLength.buffer).setUint16(0, fieldNameBytes.length, false);
-        const valueLength = new Uint8Array(8);
+        const valueLength = new Uint8Array(EXTERNAL_INFERENCE_LIMITS.hash_value_length_bytes);
         const valueLengthView = new DataView(valueLength.buffer);
         valueLengthView.setUint32(0, Math.floor(valueBytes.length / 4294967296), false);
-        valueLengthView.setUint32(4, valueBytes.length >>> 0, false);
+        valueLengthView.setUint32(valueLength.length - Uint32Array.BYTES_PER_ELEMENT, valueBytes.length >>> 0, false);
         chunks.push(fieldNameLength, fieldNameBytes, valueLength, valueBytes);
       }
       const totalLength = chunks.reduce((sum, chunk) => sum + chunk.length, 0);
@@ -18793,7 +19035,7 @@ var init_external_inference_contract = __esm({
     ]);
     modelIdentityMappingSchema = external_exports.strictObject({
       requested_model: modelNameSchema,
-      effective_models: external_exports.array(modelNameSchema).min(1).max(16)
+      effective_models: external_exports.array(modelNameSchema).min(1).max(EXTERNAL_INFERENCE_LIMITS.max_effective_models)
     }).superRefine((value, context) => {
       if (new Set(value.effective_models).size !== value.effective_models.length) {
         context.addIssue({
@@ -18808,11 +19050,11 @@ var init_external_inference_contract = __esm({
       label: displayNameSchema,
       adapter: externalInferenceAdapterIdSchema,
       supported_lanes: external_exports.array(laneSchema).min(1).max(3),
-      supported_reasoning_efforts: external_exports.array(reasoningEffortSchema).min(1).max(16),
+      supported_reasoning_efforts: external_exports.array(reasoningEffortSchema).min(1).max(EXTERNAL_INFERENCE_LIMITS.max_reasoning_efforts),
       default_reasoning_effort: reasoningEffortSchema,
       supported_response_modes: external_exports.array(responseModeSchema).min(1).max(2),
       supported_control_modes: external_exports.array(controlModeSchema).min(1).max(2).optional(),
-      allowed_model_identities: external_exports.array(modelIdentityMappingSchema).min(1).max(16),
+      allowed_model_identities: external_exports.array(modelIdentityMappingSchema).min(1).max(EXTERNAL_INFERENCE_LIMITS.max_model_identities),
       structured_output: external_exports.boolean(),
       same_attempt_recovery: external_exports.boolean(),
       adapter_runtime_version: protocolVersionSchema
@@ -18864,7 +19106,7 @@ var init_external_inference_contract = __esm({
       health: external_exports.enum(["healthy", "degraded", "draining"]),
       advertised_at: timestampSchema,
       expires_at: timestampSchema,
-      models: external_exports.array(advertisedModelSchema).min(1).max(64)
+      models: external_exports.array(advertisedModelSchema).min(1).max(EXTERNAL_INFERENCE_LIMITS.max_advertised_models)
     }).superRefine((value, context) => {
       if (value.provider_dispatch_freshness_contract !== void 0 && !/^\d+\.\d+\.\d+$/.test(value.host_runtime_version ?? "")) {
         context.addIssue({ code: "custom", message: "Foreground freshness contract requires a numeric runtime version." });
@@ -19062,8 +19304,8 @@ var init_external_inference_contract = __esm({
       controller: boundExternalAgentModelControllerSchema,
       requested_model: modelNameSchema,
       requested_reasoning_effort: reasoningEffortSchema,
-      allowed_model_identities: external_exports.array(modelIdentityMappingSchema).min(1).max(16),
-      allowed_effective_reasoning_efforts: external_exports.array(reasoningEffortSchema).min(1).max(16),
+      allowed_model_identities: external_exports.array(modelIdentityMappingSchema).min(1).max(EXTERNAL_INFERENCE_LIMITS.max_model_identities),
+      allowed_effective_reasoning_efforts: external_exports.array(reasoningEffortSchema).min(1).max(EXTERNAL_INFERENCE_LIMITS.max_reasoning_efforts),
       response_mode: responseModeSchema,
       output_schema_version: protocolVersionSchema,
       parser_contract_version: protocolVersionSchema,
@@ -19252,12 +19494,12 @@ var init_external_inference_contract = __esm({
       }).refine(
         (tool) => tool.type === "redacted" === (tool.type_sha256 !== null) && tool.name === "redacted" === (tool.name_sha256 !== null),
         { message: "Only redacted tool identifiers require hashes." }
-      )).max(8),
+      )).max(MAX_GROK_TOOL_SUMMARIES),
       tools_truncated: external_exports.boolean(),
       prior_dispatch: external_exports.boolean(),
       completed_response_count: nonNegativeSafeIntegerSchema
     }).refine(
-      (value) => value.tools_shape === "array" ? value.tool_count !== null && value.tools.length === Math.min(value.tool_count, 8) && value.tools_truncated === value.tool_count > 8 : value.tool_count === null && value.tools.length === 0 && !value.tools_truncated,
+      (value) => value.tools_shape === "array" ? value.tool_count !== null && value.tools.length === Math.min(value.tool_count, MAX_GROK_TOOL_SUMMARIES) && value.tools_truncated === value.tool_count > MAX_GROK_TOOL_SUMMARIES : value.tool_count === null && value.tools.length === 0 && !value.tools_truncated,
       { message: "Grok tool diagnostic counts must match the observed shape." }
     ).refine(
       (value) => value.prior_dispatch || value.completed_response_count === 0,
@@ -19477,13 +19719,13 @@ var init_external_inference_contract = __esm({
       credits_available: external_exports.boolean().nullable().optional(),
       rate_limit_reached: external_exports.boolean().nullable().optional(),
       source: external_exports.literal("codex_app_server"),
-      used_percent: external_exports.number().finite().min(0).max(1e6),
+      used_percent: external_exports.number().finite().min(0).max(EXTERNAL_INFERENCE_LIMITS.max_usage_percent),
       resets_at: timestampSchema,
       observed_at: timestampSchema
     }).superRefine((value, context) => {
       const observedAt = Date.parse(value.observed_at);
       const resetsAt = Date.parse(value.resets_at);
-      if (resetsAt <= observedAt || resetsAt > observedAt + 8 * 24 * 60 * 60 * 1e3) {
+      if (resetsAt <= observedAt || resetsAt > observedAt + PROVIDER_RESET_MAX_MS) {
         context.addIssue({
           code: "custom",
           message: "weekly quota reset must follow observation within eight days",
@@ -19551,12 +19793,12 @@ var init_external_inference_contract = __esm({
       external_exports.strictObject({
         schema_version: external_exports.literal("external_inference_job_claim_v2"),
         ...jobClaimRequestBaseShape,
-        maximum_jobs: external_exports.number().int().min(1).max(32)
+        maximum_jobs: external_exports.number().int().min(1).max(EXTERNAL_INFERENCE_LIMITS.max_job_claim_batch_size)
       }),
       external_exports.strictObject({
         schema_version: external_exports.literal("external_inference_job_claim_v3"),
         ...jobClaimRequestBaseShape,
-        maximum_jobs: external_exports.number().int().min(1).max(32)
+        maximum_jobs: external_exports.number().int().min(1).max(EXTERNAL_INFERENCE_LIMITS.max_job_claim_batch_size)
       })
     ]);
     emptyJobClaimSchema = external_exports.strictObject({
@@ -19611,14 +19853,14 @@ var init_external_inference_contract = __esm({
       schema_version: external_exports.literal("external_inference_job_claim_result_v2"),
       claim_state: external_exports.literal("batch"),
       claim_request_id: operationIdentifierSchema,
-      claims: external_exports.array(claimedDispatchIntentSchema).max(32),
+      claims: external_exports.array(claimedDispatchIntentSchema).max(EXTERNAL_INFERENCE_LIMITS.max_job_claim_batch_size),
       retry_after_ms: nonNegativeSafeIntegerSchema
     });
     timedBatchedJobClaimSchema = external_exports.strictObject({
       schema_version: external_exports.literal("external_inference_job_claim_result_v3"),
       claim_state: external_exports.literal("batch"),
       claim_request_id: operationIdentifierSchema,
-      claims: external_exports.array(claimedDispatchIntentSchema).max(32),
+      claims: external_exports.array(claimedDispatchIntentSchema).max(EXTERNAL_INFERENCE_LIMITS.max_job_claim_batch_size),
       retry_after_ms: nonNegativeSafeIntegerSchema,
       server_processing_ms: nonNegativeSafeIntegerSchema
     });
@@ -19769,7 +20011,7 @@ var init_external_inference_contract = __esm({
       pending_request_count: nonNegativeSafeIntegerSchema.nullable(),
       active_thread_count: nonNegativeSafeIntegerSchema.nullable(),
       stderr_nonempty: external_exports.boolean().nullable(),
-      stderr_bytes_observed: external_exports.number().int().min(0).max(65536).nullable(),
+      stderr_bytes_observed: external_exports.number().int().min(0).max(STDERR_OBSERVATION_CAP_BYTES).nullable(),
       stderr_truncated: external_exports.boolean().nullable(),
       stderr_class: external_exports.enum([
         "unknown",
@@ -19801,7 +20043,7 @@ var init_external_inference_contract = __esm({
       } else if (value.stderr_bytes_observed === 0 || value.stderr_class === "none") {
         context.addIssue({ code: "custom", message: "non-empty stderr diagnostics are inconsistent", path: ["stderr_nonempty"] });
       }
-      if (value.stderr_truncated && value.stderr_bytes_observed !== 65536) {
+      if (value.stderr_truncated && value.stderr_bytes_observed !== STDERR_OBSERVATION_CAP_BYTES) {
         context.addIssue({ code: "custom", message: "truncated stderr diagnostics must report the observation cap", path: ["stderr_truncated"] });
       }
     });
@@ -19854,7 +20096,7 @@ var init_external_inference_contract = __esm({
       if (value.provider_retry_at != null !== (value.provider_retry_source != null)) {
         context.addIssue({ code: "custom", message: "provider retry deadline and source must be provided together", path: ["provider_retry_at"] });
       }
-      if (value.provider_retry_at != null && Date.parse(value.provider_retry_at) > Date.parse(value.failed_at) + 8 * 24 * 60 * 60 * 1e3) {
+      if (value.provider_retry_at != null && Date.parse(value.provider_retry_at) > Date.parse(value.failed_at) + PROVIDER_RESET_MAX_MS) {
         context.addIssue({ code: "custom", message: "provider retry deadline must be within eight days of failure", path: ["provider_retry_at"] });
       }
       if (value.outcome.response_outcome !== "none") {
@@ -20061,7 +20303,7 @@ var init_external_inference_contract = __esm({
       advertisement_generation: generationSchema,
       key_generation: generationSchema,
       last_heartbeat_at: timestampSchema.nullable(),
-      models: external_exports.array(advertisedModelSchema).max(64)
+      models: external_exports.array(advertisedModelSchema).max(EXTERNAL_INFERENCE_LIMITS.max_advertised_models)
     });
     controllerBindingStatusReadSchema = external_exports.strictObject({
       profile_name: external_exports.string().min(1).max(50),
@@ -20117,7 +20359,7 @@ var init_external_inference_contract = __esm({
       last_hour: externalInferenceVolumeWindowReadSchema,
       last_day: externalInferenceVolumeWindowReadSchema,
       last_week: externalInferenceVolumeWindowReadSchema,
-      recent_failures: external_exports.array(externalInferenceFailureCountReadSchema).max(32)
+      recent_failures: external_exports.array(externalInferenceFailureCountReadSchema).max(EXTERNAL_INFERENCE_LIMITS.max_recent_failures)
     });
     externalInferenceProfileActivityReadSchema = external_exports.strictObject({
       last_hour: externalInferenceVolumeWindowReadSchema,
@@ -20130,7 +20372,7 @@ var init_external_inference_contract = __esm({
       observed_at: timestampSchema,
       catalog_generation: generationSchema,
       hosts: external_exports.array(hostStatusReadSchema).max(MAX_EXTERNAL_INFERENCE_STATUS_HOSTS),
-      bindings: external_exports.array(controllerBindingStatusReadSchema).max(512),
+      bindings: external_exports.array(controllerBindingStatusReadSchema).max(EXTERNAL_INFERENCE_LIMITS.max_status_bindings),
       binding_count: nonNegativeSafeIntegerSchema.optional().default(0),
       bindings_truncated: external_exports.boolean().optional().default(false),
       queue: queueStatusReadSchema,
@@ -20413,8 +20655,8 @@ var init_external_inference_contract = __esm({
       parser_status: external_exports.enum(["not_run", "clean", "repaired", "fallback", "failed"]),
       parsed_candidate_schema_version: protocolVersionSchema.nullable(),
       parser_fallback_strategy: safeCodeSchema.nullable(),
-      validation_error_codes: external_exports.array(safeCodeSchema).max(128),
-      discarded_fields: external_exports.array(external_exports.string().min(1).max(128).regex(/^[A-Za-z0-9_.\[\]-]+$/)).max(128),
+      validation_error_codes: external_exports.array(safeCodeSchema).max(EXTERNAL_INFERENCE_LIMITS.max_validation_error_codes),
+      discarded_fields: external_exports.array(external_exports.string().min(1).max(128).regex(/^[A-Za-z0-9_.\[\]-]+$/)).max(EXTERNAL_INFERENCE_LIMITS.max_discarded_fields),
       parsed_candidate_utf8: boundedJsonTextSchema.nullable(),
       parsed_candidate_sha256: sha256HexSchema.nullable(),
       disposition: external_exports.enum([
@@ -22302,6 +22544,89 @@ var init_runtime_policy_generated2 = __esm({
           refresh_interval_ms: 1e4,
           watchdog_interval_ms: 1e3,
           watchdog_grace_ms: 500
+        },
+        preferences: {
+          load_timeout_ms: 5e3,
+          initial_load_settle_ms: 100,
+          external_save_timeout_ms: 8e3,
+          guest_cookie_max_age_days: 9999
+        },
+        navigation_feedback: {
+          finish_fallback_ms: 2250
+        },
+        confirmation_notices: {
+          success_indicator_ms: 2e3,
+          byok_success_message_ms: 3e3
+        },
+        screener_runtime_config_retry: {
+          base_delay_ms: 1e3,
+          max_delay_ms: 3e4
+        },
+        advanced_chart: {
+          debug_log_throttle_ms: 1e3,
+          initial_history_stall_ms: 15e3,
+          initial_history_recovery_cooldown_ms: 3e4,
+          viewport_restore_settle_ms: 100,
+          symbol_price_wait_ms: 2e3,
+          layout_auto_save_delay_ms: 250
+        },
+        ai_panel: {
+          message_limit: 100,
+          post_execution_history_sync_delay_ms: 2e3,
+          runtime_error_attempt_group_window_seconds: 120,
+          debug_runtime_error_preview_chars: 180
+        },
+        insights_charts: {
+          max_charts: 3,
+          max_line_points: 160,
+          max_bars: 8
+        },
+        analysis_chat: {
+          new_message_scroll_delay_ms: 100
+        },
+        snapshot_selector: {
+          sync_resolution_pending_ms: 350,
+          own_broadcast_window_ms: 5e3,
+          seen_imported_ids_limit: 200,
+          post_import_reload_delay_ms: 1e3,
+          debug_value_chars: 220,
+          debug_fingerprint_head_chars: 64,
+          debug_head_snapshot_ids: 8,
+          debug_comparable_head_chars: 240,
+          debug_panel_comparable_head_chars: 120
+        },
+        debug_logs: {
+          snapshot_card_lines: 80,
+          render_debug_overlay_entries: 120,
+          render_debug_entry_data_chars: 2400,
+          analytics_dashboard_lines: 220,
+          analytics_metric_capture_interval_ms: 400,
+          system_profile_mode_lines: 120,
+          admin_text_chars: 160,
+          admin_analysis_run_id_chars: 32,
+          hyperliquid_balance_preview_count: 3,
+          model_picker_preview_count: 5
+        },
+        history_panels: {
+          display_batch_size: 50,
+          load_more_threshold_px: 100,
+          trade_history_fetch_page_size: 100,
+          ai_panel_interaction_window_ms: 2500,
+          ai_panel_defer_max_staleness_ms: 1e4,
+          ai_panel_defer_retry_ms: 1500
+        },
+        insights_access: {
+          initial_prompt_idea_count: 6,
+          section_preview_blocks: 2
+        },
+        marketing: {
+          arena_leaderboard_entries: 3
+        },
+        calendar: {
+          event_highlight_window_minutes: 60
+        },
+        system_page: {
+          hyperliquid_manual_refresh_cooldown_ms: 800
         }
       },
       ai_dashboard: {
@@ -22343,6 +22668,9 @@ var init_runtime_policy_generated2 = __esm({
             72,
             168
           ]
+        },
+        defaults: {
+          max_chat_turns: 9999
         }
       },
       trading: {
@@ -22411,7 +22739,14 @@ var init_runtime_policy_generated2 = __esm({
               client_claim_retry_delay_milliseconds: 1e3,
               client_failure_report_timeout_milliseconds: 2e3,
               client_presence_heartbeat_interval_milliseconds: 3e4,
-              client_presence_http_timeout_milliseconds: 5e3
+              client_presence_http_timeout_milliseconds: 5e3,
+              client_claim_completion_buffer_milliseconds: 250,
+              client_max_concurrent_jobs_max: 32,
+              diagnostics_max_elapsed_ms: 12e4,
+              diagnostics_max_pending_reads: 1e3,
+              diagnostics_max_clock_offset_ms: 864e5,
+              failure_max_reported_weight: 1e6,
+              failure_max_retry_after_ms: 36e5
             }
           }
         },
@@ -22420,6 +22755,10 @@ var init_runtime_policy_generated2 = __esm({
           history_start_ms: 16409952e5,
           device_read_deadline_seconds: 180,
           device_recent_window_hours: 24
+        },
+        tradability: {
+          score_min: 1,
+          score_max: 10
         }
       },
       agent_cli: {
@@ -22507,6 +22846,9 @@ var init_runtime_policy_generated2 = __esm({
         resource_scheduler: {
           client_lock_ttl_milliseconds: 12e4,
           client_poll_interval_milliseconds: 250
+        },
+        defaults: {
+          adaptive_schedule_enabled: true
         }
       },
       deployment: {
@@ -22628,7 +22970,10 @@ var init_runtime_policy_generated2 = __esm({
       },
       market_data: {
         chart_interest: {
-          historical_backfill_candle_limit: 1e3
+          historical_backfill_candle_limit: 1e3,
+          heartbeat_retry_seconds: 15,
+          heartbeat_min_delay_ms: 1e3,
+          catch_up_candle_limit: 300
         }
       },
       auth: {
@@ -22637,6 +22982,14 @@ var init_runtime_policy_generated2 = __esm({
           totp_code_length: 6
         }
       },
+      android: {
+        app_host: {
+          profiles_refresh_interval_seconds: 60,
+          running_report_interval_seconds: 5,
+          page_identity_retry_seconds: 5,
+          profiles_read_timeout_seconds: 30
+        }
+      },
       websocket: {
         client_connection: {
           reconnect_delay_ms: 3e3,
@@ -22649,6 +23002,9 @@ var init_runtime_policy_generated2 = __esm({
       notifications: {
         desktop: {
           heartbeat_seconds: 20
+        },
+        telegram: {
+          connect_link_poll_ms: 3e3
         }
       },
       validation: {
@@ -22663,6 +23019,63 @@ var init_runtime_policy_generated2 = __esm({
           handle_changes_per_window: 2,
           handle_change_window_days: 14
         }
+      },
+      billing: {
+        credit_purchase: {
+          amount_usd_steps: [
+            10,
+            25,
+            50,
+            100,
+            500,
+            1e3
+          ]
+        }
+      },
+      admin: {
+        page: {
+          credit_grant_amount_usd_steps: [
+            10,
+            25,
+            50,
+            100,
+            500,
+            1e3,
+            5e3,
+            1e4,
+            5e4,
+            1e5
+          ],
+          user_lookup_blur_close_delay_ms: 200,
+          selected_user_refresh_delay_ms: 300,
+          handle_preview_count: 3
+        },
+        models: {
+          analytics: {
+            summary_failure_kinds: 3
+          }
+        },
+        user_search: {
+          min_query_length: 2
+        }
+      },
+      security: {
+        byok: {
+          max_provider_keys_per_provider: 5
+        }
+      },
+      analysis: {
+        live_request_candles: {
+          default_limit: 100
+        }
+      },
+      users: {
+        search: {
+          min_query_length: 2
+        }
+      },
+      referrals: {
+        code_max_length: 24
       }
     };
   }
@@ -31109,7 +31522,7 @@ child.once('close', async (code, signal) => {
         });
       }
       static {
-        this.STDERR_OBSERVATION_CAP_BYTES = 65536;
+        this.STDERR_OBSERVATION_CAP_BYTES = EXTERNAL_INFERENCE_LIMITS.stderr_observation_cap_bytes;
       }
       static {
         this.STDERR_CLASSIFICATION_TAIL_CHARS = 1024;
@@ -41452,7 +41865,7 @@ import {
   getSupportedThinkingLevels,
   InMemoryCredentialStore
 } from "@earendil-works/pi-ai";
-var import_ajv2, PI_RUNTIME_VERSION, MAX_TEXT_BYTES, effortToPi, effortToVtx, modelReference, object2, fail, sdkFailureCode, assertPiStructuredOutputSchema, privateRuntime, qualifiedModel, usageSum, PiAdapter, cleanupPiOwnedState;
+var import_ajv2, PI_RUNTIME_VERSION, effortToPi, effortToVtx, modelReference, object2, fail, sdkFailureCode, assertPiStructuredOutputSchema, privateRuntime, qualifiedModel, usageSum, PiAdapter, cleanupPiOwnedState;
 var init_pi_adapter = __esm({
   "lib/inference-host/pi-adapter.ts"() {
     "use strict";
@@ -41461,10 +41874,10 @@ var init_pi_adapter = __esm({
     init_define_VTX_PI_MODEL_POLICY();
     import_ajv2 = __toESM(require_ajv(), 1);
     init_codex_app_server();
+    init_constants();
     init_config2();
     init_pi_transport();
     PI_RUNTIME_VERSION = "0.85.1";
-    MAX_TEXT_BYTES = 3e5;
     effortToPi = (effort2) => effort2 === "none" ? "off" : effort2;
     effortToVtx = (effort2) => effort2 === "off" ? "none" : effort2;
     modelReference = (model) => `${model.provider}/${model.id}`;
@@ -41637,7 +42050,7 @@ var init_pi_adapter = __esm({
         };
         try {
           checkBoundary();
-          if (!input.systemPrompt.trim() || !input.userPrompt.trim() || Buffer.byteLength(input.systemPrompt) > MAX_TEXT_BYTES || Buffer.byteLength(input.userPrompt) > MAX_TEXT_BYTES) throw fail("pi_prompt_invalid", "schema");
+          if (!input.systemPrompt.trim() || !input.userPrompt.trim() || Buffer.byteLength(input.systemPrompt) > EXTERNAL_INFERENCE_LIMITS.max_prompt_bytes || Buffer.byteLength(input.userPrompt) > EXTERNAL_INFERENCE_LIMITS.max_prompt_bytes) throw fail("pi_prompt_invalid", "schema");
           const schema = agent ? agent.outputSchema : object2(JSON.parse(input.outputSchemaJson));
           if (agent && !agent.dataContract.length) throw fail("pi_data_contract_missing", "schema");
           if (schema.type !== "object") throw fail("pi_output_schema_invalid", "schema");
@@ -41836,7 +42249,7 @@ var init_pi_adapter = __esm({
           if (!last) throw fail("pi_result_missing");
           if (last.stopReason !== "stop") throw fail("pi_terminal_incomplete");
           const text = last.content.flatMap((part) => part.type === "text" ? [part.text] : []).join("");
-          if (!text.trim() || Buffer.byteLength(text) > MAX_TEXT_BYTES) throw fail("pi_output_invalid", "schema");
+          if (!text.trim() || Buffer.byteLength(text) > EXTERNAL_INFERENCE_LIMITS.max_candidate_plaintext_bytes) throw fail("pi_output_invalid", "schema");
           let output3;
           try {
             output3 = JSON.parse(text);
@@ -50390,9 +50803,9 @@ function resolveBrowserApiUrl(hostname3, protocol, publicApiUrl, development) {
     if (local) {
       let port = "8000";
       try {
-        const configured = new URL(publicApiUrl ?? "");
-        if (configured.port && (configured.hostname === "localhost" || configured.hostname === "127.0.0.1")) {
-          port = configured.port;
+        const configured2 = new URL(publicApiUrl ?? "");
+        if (configured2.port && (configured2.hostname === "localhost" || configured2.hostname === "127.0.0.1")) {
+          port = configured2.port;
         }
       } catch {
       }
@@ -50480,7 +50893,12 @@ function configureApiTransport(transport) {
   if (!/^https?:\/\/[^/]/i.test(baseUrl)) {
     throw new Error("VTX API transport requires an absolute http(s) base URL.");
   }
-  configuredApiTransport = { baseUrl, authorization: transport.authorization, headers: transport.headers };
+  configuredApiTransport = {
+    baseUrl,
+    authorization: transport.authorization,
+    sessionToken: transport.sessionToken,
+    headers: transport.headers
+  };
 }
 function getActiveProfileId() {
   return activeProfileId;
@@ -50523,6 +50941,8 @@ var init_shared = __esm({
       }
       const authorization = transport.authorization();
       if (authorization) headers.set("Authorization", authorization);
+      const sessionToken = transport.sessionToken?.();
+      if (sessionToken) headers.set("Cookie", `session_token=${sessionToken}`);
       return fetch(input, { ...init2, headers, credentials: "omit" });
     };
     sleep = (ms) => new Promise((resolve14) => setTimeout(resolve14, ms));
@@ -52258,8 +52678,12 @@ function configureRuntimeHostStorage(storage3) {
 }
 function runtimeHostStorage() {
   if (configuredStorage) return configuredStorage;
-  if (typeof window !== "undefined" && typeof window.localStorage !== "undefined") {
-    return window.localStorage;
+  try {
+    if (typeof window !== "undefined" && typeof window.localStorage !== "undefined") {
+      return window.localStorage;
+    }
+  } catch {
+    return null;
   }
   return null;
 }
@@ -85130,9 +85554,9 @@ var init_hyperliquid_client = __esm({
       if (explicit) {
         return explicit;
       }
-      const configured = input.config?.client_runtime_exchange_endpoints?.hyperliquid_api_url?.trim();
-      if (configured) {
-        return configured;
+      const configured2 = input.config?.client_runtime_exchange_endpoints?.hyperliquid_api_url?.trim();
+      if (configured2) {
+        return configured2;
       }
       throw new Error("Missing client runtime Hyperliquid API URL.");
     };
@@ -91842,10 +92266,10 @@ var init_hyperliquid_account_state_adapter = __esm({
     };
     listPerpDexsForAccountState = (config2, selectedDex, aggregatePerpDexs, perpDexScope) => {
       if (aggregatePerpDexs) {
-        const configured = listConfiguredPerpDexs(config2);
-        if (!perpDexScope) return configured;
+        const configured2 = listConfiguredPerpDexs(config2);
+        if (!perpDexScope) return configured2;
         const scope = new Set(perpDexScope.map(normalizePerpDexName));
-        return configured.filter((dex) => scope.has(dex));
+        return configured2.filter((dex) => scope.has(dex));
       }
       return selectedDex ? [selectedDex] : [];
     };
@@ -101379,7 +101803,7 @@ var init_protective_adoption_status = __esm({
 });
 
 // lib/runtime/protective-cutover.ts
-var ADOPTION_REQUEST_TIMEOUT_MS, ADOPTION_FAILURE_RETRY_MS, adoptWithinTimeout, adoptionRetryAt, CLIENT_PROTECTIVE_ACTIONS_EVENT, protectiveActionsPendingListeners, onClientProtectiveActionsPending, notifyClientProtectiveActionsPending, adoptionLegOutcomes, hasGroupsToAdopt, shouldSyncServerOwnedProtection, syncServerOwnedProtection;
+var ADOPTION_REQUEST_TIMEOUT_MS, ADOPTION_FAILURE_RETRY_MS, adoptWithinTimeout, adoptionRetryAt, protectiveActionsPendingListeners, onClientProtectiveActionsPending, notifyClientProtectiveActionsPending, adoptionLegOutcomes, hasGroupsToAdopt, shouldSyncServerOwnedProtection, syncServerOwnedProtection;
 var init_protective_cutover = __esm({
   "lib/runtime/protective-cutover.ts"() {
     "use strict";
@@ -101420,7 +101844,6 @@ var init_protective_cutover = __esm({
       }
     };
     adoptionRetryAt = /* @__PURE__ */ new Map();
-    CLIENT_PROTECTIVE_ACTIONS_EVENT = "vtx:client-protective-actions";
     protectiveActionsPendingListeners = /* @__PURE__ */ new Set();
     onClientProtectiveActionsPending = (listener) => {
       protectiveActionsPendingListeners.add(listener);
@@ -101435,10 +101858,6 @@ var init_protective_cutover = __esm({
         } catch {
         }
       }
-      if (typeof window === "undefined" || typeof window.dispatchEvent !== "function") return;
-      window.dispatchEvent(new CustomEvent(CLIENT_PROTECTIVE_ACTIONS_EVENT, {
-        detail: { profileId: String(profileId) }
-      }));
     };
     adoptionLegOutcomes = (groups, adoption) => {
       if (Array.isArray(adoption.leg_outcomes)) return adoption.leg_outcomes;
@@ -102897,6 +103316,23 @@ var init_desktop_bridge = __esm({
   }
 });
 
+// lib/runtime/host/environment.ts
+function runtimeHostSurface() {
+  if (configured) return configured.surface;
+  return getDesktopBridge() ? "desktop" : "browser";
+}
+var configured;
+var init_environment = __esm({
+  "lib/runtime/host/environment.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_desktop_bridge();
+    configured = null;
+  }
+});
+
 // lib/runtime/client-ownership-arbitration-contract.ts
 var deriveOwnershipLossReasonFromRuntimeError;
 var init_client_ownership_arbitration_contract = __esm({
@@ -102918,15 +103354,17 @@ var init_client_runtime_device_id = __esm({
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
+    init_host_storage();
     CLIENT_RUNTIME_DEVICE_ID_STORAGE_KEY = "vtx_client_runtime_device_id";
     createDeviceId = () => typeof crypto !== "undefined" && typeof crypto.randomUUID === "function" ? crypto.randomUUID() : `device-${Date.now()}-${Math.random().toString(16).slice(2)}`;
     getOrCreateClientRuntimeDeviceId = () => {
-      if (typeof window === "undefined") return null;
+      const storage3 = runtimeHostStorage();
+      if (!storage3) return null;
       try {
-        const existing = window.localStorage.getItem(CLIENT_RUNTIME_DEVICE_ID_STORAGE_KEY)?.trim();
+        const existing = storage3.getItem(CLIENT_RUNTIME_DEVICE_ID_STORAGE_KEY)?.trim();
         if (existing) return existing;
         const created = createDeviceId();
-        window.localStorage.setItem(CLIENT_RUNTIME_DEVICE_ID_STORAGE_KEY, created);
+        storage3.setItem(CLIENT_RUNTIME_DEVICE_ID_STORAGE_KEY, created);
         return created;
       } catch {
         return createDeviceId();
@@ -104553,9 +104991,9 @@ var init_client_killswitch = __esm({
       return Number.isFinite(parsed) && parsed >= 0 ? parsed : null;
     };
     firstConfiguredSymbol = (preferences, config2) => {
-      const configured = Array.isArray(preferences.trading_symbols) ? preferences.trading_symbols.map((value) => String(value || "").trim()).find(Boolean) : null;
+      const configured2 = Array.isArray(preferences.trading_symbols) ? preferences.trading_symbols.map((value) => String(value || "").trim()).find(Boolean) : null;
       const fallback = String(config2.default_chart_symbol || "").trim();
-      const symbol2 = configured || fallback;
+      const symbol2 = configured2 || fallback;
       if (!symbol2) {
         throw new Error("Client killswitch requires a configured trading symbol.");
       }
@@ -105523,13 +105961,14 @@ var init_candle_prompt_contract = __esm({
 });
 
 // lib/runtime/decision-contract.ts
-var JSON_FENCE_PATTERN, JSON_SIMPLE_ESCAPE_CHARS, JSON_HEX_ESCAPE_PATTERN, INTERNAL_REASONING_XML_BLOCK_PATTERN, INTERNAL_REASONING_BRACKET_BLOCK_PATTERN, INTERNAL_REASONING_DELIMITER_BLOCK_PATTERN, INTERNAL_REASONING_XML_OPEN_TAIL_PATTERN, INTERNAL_REASONING_BRACKET_OPEN_TAIL_PATTERN, INTERNAL_REASONING_DELIMITER_OPEN_TAIL_PATTERN, VISIBLE_REASONING_KEYS, VISIBLE_REASONING_KEY_SET, VISIBLE_REASONING_ALIAS_KEY_SET, isRecord5, isVisibleReasoningKey, sanitizeVisibleRuntimeText, resolveVisibleReasoningText, unwrapJsonMarkdownFence, repairJsonStringEscapes, repairJsonStringQuotes, repairJsonStringControlCharacters, repairJsonStringSyntax, decodeStrictDecisionPayload, extractJsonObjectCandidates, isLegacyScalarDecision, decisionSymbolKeysForCandidate, selectRankedDecisionCandidate, extractJsonObjectPayload, toCanonicalDecisionPayload, normalizeDecisionUnits, normalizeDecisionValue, normalizeTradabilityScore, extractNormalizedDecision, classifyDecisionParseOutcome;
+var JSON_FENCE_PATTERN, JSON_SIMPLE_ESCAPE_CHARS, JSON_HEX_ESCAPE_PATTERN, INTERNAL_REASONING_XML_BLOCK_PATTERN, INTERNAL_REASONING_BRACKET_BLOCK_PATTERN, INTERNAL_REASONING_DELIMITER_BLOCK_PATTERN, INTERNAL_REASONING_XML_OPEN_TAIL_PATTERN, INTERNAL_REASONING_BRACKET_OPEN_TAIL_PATTERN, INTERNAL_REASONING_DELIMITER_OPEN_TAIL_PATTERN, VISIBLE_REASONING_KEYS, VISIBLE_REASONING_KEY_SET, VISIBLE_REASONING_ALIAS_KEY_SET, isRecord5, isVisibleReasoningKey, sanitizeVisibleRuntimeText, resolveVisibleReasoningText, unwrapJsonMarkdownFence, repairJsonStringEscapes, repairJsonStringQuotes, repairJsonStringControlCharacters, repairJsonStringSyntax, decodeStrictDecisionPayload, extractJsonObjectCandidates, isLegacyScalarDecision, decisionSymbolKeysForCandidate, selectRankedDecisionCandidate, extractJsonObjectPayload, toCanonicalDecisionPayload, normalizeDecisionUnits, normalizeDecisionValue, TRADABILITY_SCORE_MIN, TRADABILITY_SCORE_MAX, isTradabilityScore, normalizeTradabilityScore, extractNormalizedDecision, classifyDecisionParseOutcome;
 var init_decision_contract = __esm({
   "lib/runtime/decision-contract.ts"() {
     "use strict";
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
+    init_runtime_policy_generated2();
     JSON_FENCE_PATTERN = /^```(?:json)?\s*\n?([\s\S]*?)\n?```$/i;
     JSON_SIMPLE_ESCAPE_CHARS = /* @__PURE__ */ new Set(['"', "\\", "/", "b", "f", "n", "r", "t"]);
     JSON_HEX_ESCAPE_PATTERN = /^[0-9a-fA-F]{4}$/;
@@ -105901,15 +106340,15 @@ var init_decision_contract = __esm({
       const decisionValue = String(rawDecision || "").trim().toUpperCase();
       return decisionValue === "BUY" || decisionValue === "SELL" ? decisionValue : "HOLD";
     };
+    TRADABILITY_SCORE_MIN = runtime_policy_generated_default2.trading.tradability.score_min;
+    TRADABILITY_SCORE_MAX = runtime_policy_generated_default2.trading.tradability.score_max;
+    isTradabilityScore = (value) => typeof value === "number" && Number.isInteger(value) && value >= TRADABILITY_SCORE_MIN && value <= TRADABILITY_SCORE_MAX;
     normalizeTradabilityScore = (rawTradability) => {
       if (rawTradability === null || typeof rawTradability === "undefined" || typeof rawTradability === "boolean") {
         return null;
       }
       const parsed = Number(rawTradability);
-      if (!Number.isInteger(parsed) || parsed < 1 || parsed > 10) {
-        return null;
-      }
-      return parsed;
+      return isTradabilityScore(parsed) ? parsed : null;
     };
     extractNormalizedDecision = (rawResponse, parsedDecision, symbol2) => {
       const content = sanitizeVisibleRuntimeText(rawResponse || "");
@@ -106379,6 +106818,7 @@ var init_screener_resource_scheduler = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_runtime_policy_generated2();
+    init_host_storage();
     STORAGE_KEY = "vtx_llm_resource_scheduler_v1";
     CHANNEL_NAME = "vtx-llm-resource-scheduler";
     LOCK_TTL_MS = runtime_policy_generated_default2.screener.resource_scheduler.client_lock_ttl_milliseconds;
@@ -106393,7 +106833,7 @@ var init_screener_resource_scheduler = __esm({
     };
     storage2 = () => {
       try {
-        return typeof window !== "undefined" ? window.localStorage : null;
+        return runtimeHostStorage();
       } catch {
         return null;
       }
@@ -111563,7 +112003,7 @@ var init_local_analysis = __esm({
         const tradability = decision.tradability;
         const reasoning = decision.reasoning;
         if (!Number.isInteger(units)) errors.add("decision_units_invalid");
-        if (!Number.isInteger(tradability) || Number(tradability) < 1 || Number(tradability) > 10) {
+        if (!isTradabilityScore(tradability)) {
           errors.add("decision_tradability_invalid");
         }
         if (typeof reasoning !== "string" || reasoning.trim() === "" || reasoning.trim() === "-") {
@@ -113320,7 +113760,7 @@ ${reviewOutputContract}`;
       const priceRaw = Number(source.price);
       const price = Number.isFinite(priceRaw) && priceRaw > 0 ? priceRaw : null;
       const tradabilityRaw = Number(source.tradability);
-      const tradability = Number.isInteger(tradabilityRaw) && tradabilityRaw >= 1 && tradabilityRaw <= 10 ? tradabilityRaw : null;
+      const tradability = isTradabilityScore(tradabilityRaw) ? tradabilityRaw : null;
       const executedAtMsRaw = Number(source.executed_at_ms ?? 0);
       const executedAtMs = Number.isFinite(executedAtMsRaw) && executedAtMsRaw > 0 ? Math.trunc(executedAtMsRaw) : 0;
       return {
@@ -113383,7 +113823,7 @@ ${reviewOutputContract}`;
         throw new Error(`Enabled behavior memory has invalid ${key} schema`);
       }
       if (key === "et") {
-        if (!isExactEnumString(item.a, ["BUY", "SELL"]) || !(item.u === "-" || isNonnegativeInteger(item.u) && item.u > 0) || !(item.v === "-" || isFiniteNumber(item.v) && item.v > 0) || !(item.p === "-" || isFiniteNumber(item.p) && item.p > 0) || !(item.tr === "-" || isNonnegativeInteger(item.tr) && item.tr >= 1 && item.tr <= 10) || !isNonnegativeInteger(item.age) || typeof item.r !== "string" || item.r.trim().length === 0 || item.r.trim() === "-") {
+        if (!isExactEnumString(item.a, ["BUY", "SELL"]) || !(item.u === "-" || isNonnegativeInteger(item.u) && item.u > 0) || !(item.v === "-" || isFiniteNumber(item.v) && item.v > 0) || !(item.p === "-" || isFiniteNumber(item.p) && item.p > 0) || !(item.tr === "-" || isNonnegativeInteger(item.tr) && isTradabilityScore(item.tr)) || !isNonnegativeInteger(item.age) || typeof item.r !== "string" || item.r.trim().length === 0 || item.r.trim() === "-") {
           throw new Error("Enabled behavior memory has invalid et values");
         }
         return {
@@ -113398,7 +113838,7 @@ ${reviewOutputContract}`;
         };
       }
       if (key === "pd") {
-        if (!isExactEnumString(item.a, ["BUY", "SELL", "HOLD"]) || !isNonnegativeInteger(item.u) || !(item.tr === "-" || isNonnegativeInteger(item.tr) && item.tr >= 1 && item.tr <= 10) || !isNonnegativeInteger(item.age) || !isExactEnumString(item.ps, ["LONG", "SHORT", "FLAT"]) || !isExactEnumString(item.x, ["e", "b", "f", "n", "-"]) || !isNonemptyPromptText(item.r)) {
+        if (!isExactEnumString(item.a, ["BUY", "SELL", "HOLD"]) || !isNonnegativeInteger(item.u) || !(item.tr === "-" || isNonnegativeInteger(item.tr) && isTradabilityScore(item.tr)) || !isNonnegativeInteger(item.age) || !isExactEnumString(item.ps, ["LONG", "SHORT", "FLAT"]) || !isExactEnumString(item.x, ["e", "b", "f", "n", "-"]) || !isNonemptyPromptText(item.r)) {
           throw new Error("Enabled behavior memory has invalid pd values");
         }
         return {
@@ -116766,7 +117206,7 @@ var init_engine = __esm({
     init_browser_observability();
     init_error_surface_contract();
     init_render_debug();
-    init_desktop_bridge();
+    init_environment();
     init_client_ownership_arbitration_contract();
     init_client_runtime_ownership_errors();
     init_client_runtime_device_id();
@@ -117719,7 +118159,7 @@ var init_engine = __esm({
         return {
           deviceId: this._deviceId,
           sessionId: this._sessionId,
-          surface: getDesktopBridge() ? "desktop" : "browser"
+          surface: runtimeHostSurface()
         };
       }
       async _shouldStopForExecutionModeMismatch() {
@@ -118012,7 +118452,7 @@ var init_engine = __esm({
             payload: {
               reason,
               state: this._state,
-              claim_surface: getDesktopBridge() ? "desktop" : "browser",
+              claim_surface: runtimeHostSurface(),
               route_pathname: typeof window !== "undefined" ? window.location.pathname : null,
               visibility_state: typeof document !== "undefined" ? document.visibilityState : null,
               online: typeof navigator !== "undefined" ? navigator.onLine : null,
@@ -121149,7 +121589,7 @@ var init_engine = __esm({
         if (!sessionId || !deviceId || !mode) {
           return;
         }
-        const desktopRuntimeSurface = Boolean(getDesktopBridge());
+        const desktopRuntimeSurface = runtimeHostSurface() === "desktop";
         try {
           await reportClientRuntimeLifecycleEvent(
             profileId,
@@ -122987,11 +123427,17 @@ async function runHeadlessRuntime(options) {
   const engine = new ClientExecutionEngine();
   const stopController = new AbortController();
   const stop = () => stopController.abort();
+  let hungUp = false;
+  const hangUp = () => {
+    ignoreClosedTerminalWrites();
+    if (!stopController.signal.aborted && !options.once) hungUp = true;
+    stop();
+  };
   if (options.signal?.aborted) stop();
   options.signal?.addEventListener("abort", stop, { once: true });
-  const signalNames = ["SIGINT", "SIGTERM"];
+  const signalHandlers = HEADLESS_RUNTIME_STOP_SIGNALS.map((signal) => [signal, signal === "SIGHUP" ? hangUp : stop]);
   if (options.stopOnSignals !== false) {
-    for (const signalName of signalNames) process.on(signalName, stop);
+    for (const [signalName, handler] of signalHandlers) process.on(signalName, handler);
   }
   const pending3 = [];
   let wake = null;
@@ -123037,6 +123483,10 @@ async function runHeadlessRuntime(options) {
     { runtimeViewer: { deviceId: identity2.deviceId, sessionId: identity2.sessionId } }
   )).statuses?.[String(options.profileId)] ?? null;
   const stopRuntime = async (reason) => {
+    if (hungUp && reason === "agent_cli:stop") {
+      await leaveRuntime();
+      return;
+    }
     if (engine.active) await engine.stop({ skipRemote: true, reason });
     try {
       await stopClientRuntimeSession(options.profileId, {
@@ -123058,6 +123508,9 @@ async function runHeadlessRuntime(options) {
     }
     await clearOwnState();
   };
+  const leaveRuntime = async () => {
+    if (engine.active) await engine.stop({ skipRemote: true, reason: "agent_cli:hangup" });
+  };
   const releaseFailedStart = async (kind) => {
     if (kind === "explicit" && engine.active) {
       await stopRuntime("agent_cli:start_failed").catch(() => void 0);
@@ -123359,7 +123812,7 @@ async function runHeadlessRuntime(options) {
     unsubscribeState();
     options.signal?.removeEventListener("abort", stop);
     if (options.stopOnSignals !== false) {
-      for (const signalName of signalNames) process.removeListener(signalName, stop);
+      for (const [signalName, handler] of signalHandlers) process.removeListener(signalName, handler);
     }
   }
 }
@@ -123382,6 +123835,7 @@ var init_headless_runtime = __esm({
     init_engine();
     init_server_runtime_lease();
     init_reconcile();
+    init_stop_signals();
     init_local_ai_preflight();
     HeadlessRuntimeTakeoverRequiredError = class extends Error {
       constructor(response) {