@vtxmacro/cli 2026.10.56 → 2026.10.57

package/bin/vtx-mcp.js

@@ -43,7 +43,7 @@ var init_define_VTX_PI_MODEL_POLICY = __esm({
 var agent_cli_release_default;
 var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
-    agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.56", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
+    agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.57", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
   }
 });
 
@@ -3804,6 +3804,15 @@ var defaultCurrentProcessIdentity = async () => {
     throw error;
   }
 };
+var processExists = (pid) => {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (error) {
+    if (error.code === "ESRCH") return false;
+    throw error;
+  }
+};
 var processLockObservationCache = /* @__PURE__ */ new Map();
 var inferenceProcessIdentitiesMatch = (stored, observed) => stored === observed;
 function inferenceBaseDir(env) {
@@ -4025,6 +4034,10 @@ var inspectProcessLockFile = async (path, label, probes) => {
       const cached = processLockObservationCache.get(cacheKey);
       const observedIdentity = cached && cached.dev === stat.dev && cached.ino === stat.ino && cached.pid === ownerPid && cached.storedIdentity === storedIdentity && Date.now() - cached.observedAtMs < HOST_CORE_POLICY.process_lock_identity_cache_ms ? cached.observedIdentity : await probes.observeIdentity(ownerPid);
       if (!observedIdentity) {
+        if (!probes.isProcessAlive(ownerPid)) {
+          stale = true;
+          return { state: "stale", handle, stat };
+        }
         throw new Error("Inference host could not verify the existing lock owner identity.");
       }
       processLockObservationCache.set(cacheKey, {
@@ -4200,15 +4213,7 @@ async function acquireInferenceHostProcessLock(path, dependencies = {}) {
   const probes = {
     currentBootIdentity: dependencies.currentBootIdentity ?? (() => readInferenceSystemBootIdentity()),
     observeIdentity: dependencies.processIdentity ?? defaultProcessIdentity,
-    isProcessAlive: dependencies.processAlive ?? ((pid) => {
-      try {
-        process.kill(pid, 0);
-        return true;
-      } catch (error) {
-        if (error.code === "ESRCH") return false;
-        throw error;
-      }
-    })
+    isProcessAlive: dependencies.processAlive ?? processExists
   };
   const [ownerIdentity, bootIdentity] = await Promise.all([
     (dependencies.currentProcessIdentity ?? defaultCurrentProcessIdentity)(),

package/bin/vtx-service-bootstrap.js

@@ -14,7 +14,7 @@ import { dirname as dirname4, relative as relative4, resolve as resolve4 } from
 import { fileURLToPath } from "node:url";
 
 // agent-cli-release.json
-var agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.56", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
+var agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.57", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
 
 // lib/runtime-policy.generated.json
 var runtime_policy_generated_default = {
@@ -2141,6 +2141,15 @@ var defaultCurrentProcessIdentity = async () => {
     throw error;
   }
 };
+var processExists = (pid) => {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (error) {
+    if (error.code === "ESRCH") return false;
+    throw error;
+  }
+};
 var processLockObservationCache = /* @__PURE__ */ new Map();
 var inferenceProcessIdentitiesMatch = (stored, observed) => stored === observed;
 async function ensureInferencePrivateDirectory(path, dependencies = {}) {
@@ -2356,6 +2365,10 @@ var inspectProcessLockFile = async (path, label, probes) => {
       const cached = processLockObservationCache.get(cacheKey);
       const observedIdentity = cached && cached.dev === stat.dev && cached.ino === stat.ino && cached.pid === ownerPid && cached.storedIdentity === storedIdentity && Date.now() - cached.observedAtMs < HOST_CORE_POLICY.process_lock_identity_cache_ms ? cached.observedIdentity : await probes.observeIdentity(ownerPid);
       if (!observedIdentity) {
+        if (!probes.isProcessAlive(ownerPid)) {
+          stale = true;
+          return { state: "stale", handle, stat };
+        }
         throw new Error("Inference host could not verify the existing lock owner identity.");
       }
       processLockObservationCache.set(cacheKey, {
@@ -2531,15 +2544,7 @@ async function acquireInferenceHostProcessLock(path, dependencies = {}) {
   const probes = {
     currentBootIdentity: dependencies.currentBootIdentity ?? (() => readInferenceSystemBootIdentity()),
     observeIdentity: dependencies.processIdentity ?? defaultProcessIdentity,
-    isProcessAlive: dependencies.processAlive ?? ((pid) => {
-      try {
-        process.kill(pid, 0);
-        return true;
-      } catch (error) {
-        if (error.code === "ESRCH") return false;
-        throw error;
-      }
-    })
+    isProcessAlive: dependencies.processAlive ?? processExists
   };
   const [ownerIdentity, bootIdentity] = await Promise.all([
     (dependencies.currentProcessIdentity ?? defaultCurrentProcessIdentity)(),

package/bin/vtx-service-launcher.js

@@ -2076,6 +2076,15 @@ var defaultCurrentProcessIdentity = async () => {
     throw error;
   }
 };
+var processExists = (pid) => {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (error) {
+    if (error.code === "ESRCH") return false;
+    throw error;
+  }
+};
 var processLockObservationCache = /* @__PURE__ */ new Map();
 var inferenceProcessIdentitiesMatch = (stored, observed) => stored === observed;
 async function ensureInferencePrivateDirectory(path, dependencies = {}) {
@@ -2291,6 +2300,10 @@ var inspectProcessLockFile = async (path, label, probes) => {
       const cached = processLockObservationCache.get(cacheKey);
       const observedIdentity = cached && cached.dev === stat.dev && cached.ino === stat.ino && cached.pid === ownerPid && cached.storedIdentity === storedIdentity && Date.now() - cached.observedAtMs < HOST_CORE_POLICY.process_lock_identity_cache_ms ? cached.observedIdentity : await probes.observeIdentity(ownerPid);
       if (!observedIdentity) {
+        if (!probes.isProcessAlive(ownerPid)) {
+          stale = true;
+          return { state: "stale", handle, stat };
+        }
         throw new Error("Inference host could not verify the existing lock owner identity.");
       }
       processLockObservationCache.set(cacheKey, {
@@ -2466,15 +2479,7 @@ async function acquireInferenceHostProcessLock(path, dependencies = {}) {
   const probes = {
     currentBootIdentity: dependencies.currentBootIdentity ?? (() => readInferenceSystemBootIdentity()),
     observeIdentity: dependencies.processIdentity ?? defaultProcessIdentity,
-    isProcessAlive: dependencies.processAlive ?? ((pid) => {
-      try {
-        process.kill(pid, 0);
-        return true;
-      } catch (error) {
-        if (error.code === "ESRCH") return false;
-        throw error;
-      }
-    })
+    isProcessAlive: dependencies.processAlive ?? processExists
   };
   const [ownerIdentity, bootIdentity] = await Promise.all([
     (dependencies.currentProcessIdentity ?? defaultCurrentProcessIdentity)(),
@@ -2554,6 +2559,7 @@ var launcherSibling = (manifest, suffix) => {
   if (!manifest.endsWith(".service.json")) throw new Error("Invalid service manifest path.");
   return `${manifest.slice(0, -".service.json".length)}${suffix}`;
 };
+var launcherLockPath = (manifest) => launcherSibling(manifest, ".service-launcher.lock");
 var within = (parent, child) => {
   const part = relative2(resolve2(parent), resolve2(child));
   return Boolean(part) && !part.startsWith("..") && !isAbsolute2(part);
@@ -2614,7 +2620,7 @@ var targetForSelection = async (selection) => {
 // lib/inference-host/service-launcher.ts
 var runInferenceHostServiceLauncher = async (manifestPathValue, lockPathValue, dependencies = {}) => {
   const manifestPath = resolve3(manifestPathValue);
-  const lock = await acquireInferenceHostProcessLock(launcherSibling(manifestPath, ".service-launcher.lock"));
+  const lock = await acquireInferenceHostProcessLock(launcherLockPath(manifestPath));
   const lifetime = new AbortController();
   let child = null;
   const stop = () => {
@@ -2676,8 +2682,8 @@ var runInferenceHostServiceLauncher = async (manifestPathValue, lockPathValue, d
     manifest = JSON.parse(await readFile3(manifestPath, "utf8"));
     let state = await readLauncherState(manifestPath);
     if (!state) throw new Error("Service launcher recovery state is missing.");
-    const rollback = async (reason) => {
-      if (!state.previous || !await desired()) return false;
+    const rollback = async (reason, whileStopped = false) => {
+      if (!state.previous || !whileStopped && !await desired()) return false;
       const failed = state.active;
       await writeLauncherSelection(manifestPath, state.previous.selection);
       await writeAtomicInferencePrivateFile(launcherSibling(manifestPath, ".service-release-rejection.json"), `${JSON.stringify({
@@ -2693,20 +2699,31 @@ var runInferenceHostServiceLauncher = async (manifestPathValue, lockPathValue, d
       return true;
     };
     if (state.pending && state.previous && await desired()) await rollback("bootstrap_interrupted_before_readiness");
+    const endAttemptForStop = async () => {
+      if (state.pending) {
+        state.pending = false;
+        await writeLauncherState(manifestPath, state);
+      }
+      return 0;
+    };
     while (await desired()) {
       state.pending = true;
       await writeLauncherState(manifestPath, state);
-      if (!await desired()) return 0;
+      if (!await desired()) return await endAttemptForStop();
       const launchedAt = Date.now();
       const runtimePath = launcherSibling(manifestPath, ".service-runtime.json");
       await rm3(runtimePath, { force: true });
-      if (!await desired()) return 0;
+      if (!await desired()) return await endAttemptForStop();
+      let stopRequested = false;
       child = runCore(manifest.executable, state.active, ["--service-manifest", manifestPath, "--service-lock", resolve3(lockPathValue)]);
       const readiness = new AbortController();
       const watchingStop = new AbortController();
       const stopped = (async () => {
         while (!watchingStop.signal.aborted) {
-          if (!await desired()) return { kind: "stop", code: 0 };
+          if (!await desired()) {
+            stopRequested = true;
+            return { kind: "stop", code: 0 };
+          }
           await new Promise((done) => {
             if (watchingStop.signal.aborted) {
               done();
@@ -2798,7 +2815,12 @@ var runInferenceHostServiceLauncher = async (manifestPathValue, lockPathValue, d
           }
         }
       }
-      if (!await desired()) return 0;
+      const failedReadiness = first.kind === "timeout" || first.kind === "exit" && first.code !== 0 && first.code !== EXIT_CODE_TEMPFAIL;
+      const failure = first.kind === "timeout" ? "bootstrap_readiness_timeout" : "bootstrap_exited";
+      if (!await desired()) {
+        if (failedReadiness) await rollback(failure, true);
+        return await endAttemptForStop();
+      }
       if (code === EXIT_CODE_TEMPFAIL) {
         const selected = await readLauncherSelection(manifestPath);
         if (selected && selected.package_version !== state.active.package_version) {
@@ -2818,13 +2840,19 @@ var runInferenceHostServiceLauncher = async (manifestPathValue, lockPathValue, d
             await writeLauncherState(manifestPath, state);
             continue;
           }
-          state = { schema_version: state.schema_version, active: next, previous: state.active, pending: false };
+          state = {
+            schema_version: state.schema_version,
+            active: next,
+            previous: failedReadiness ? state.previous : state.active,
+            pending: false
+          };
           await writeLauncherState(manifestPath, state);
           await log("service_launcher_handoff", next.package_version);
           continue;
         }
       }
-      if (!await rollback(first.kind === "timeout" ? "bootstrap_readiness_timeout" : "bootstrap_exited")) return code || 1;
+      if (!failedReadiness && (stopRequested || first.kind === "ready" && code === 0)) continue;
+      if (!await rollback(failure)) return code || 1;
     }
     return 0;
   } finally {

package/bin/vtx.js

@@ -122,7 +122,7 @@ var init_routing = __esm({
 var agent_cli_release_default;
 var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
-    agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.56", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
+    agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.57", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
   }
 });
 
@@ -4911,15 +4911,7 @@ async function acquireInferenceHostProcessLock(path, dependencies = {}) {
   const probes = {
     currentBootIdentity: dependencies.currentBootIdentity ?? (() => readInferenceSystemBootIdentity()),
     observeIdentity: dependencies.processIdentity ?? defaultProcessIdentity,
-    isProcessAlive: dependencies.processAlive ?? ((pid) => {
-      try {
-        process.kill(pid, 0);
-        return true;
-      } catch (error48) {
-        if (error48.code === "ESRCH") return false;
-        throw error48;
-      }
-    })
+    isProcessAlive: dependencies.processAlive ?? processExists
   };
   const [ownerIdentity, bootIdentity] = await Promise.all([
     (dependencies.currentProcessIdentity ?? defaultCurrentProcessIdentity)(),
@@ -4991,7 +4983,7 @@ async function acquireInferenceHostProcessLock(path, dependencies = {}) {
     }
   };
 }
-var HOST_CORE_POLICY, loadInferenceReceiptDurabilityTimeoutMs, loadInferenceAgentDataRequestTimeoutMs, loadInferenceAgentCommandLockPolicy, InferenceHostProcessLockBusyError, INFERENCE_CREDENTIAL_NAMESPACE, MAX_INFERENCE_PRIVATE_FILE_BYTES, WINDOWS_PRIVATE_ACL_MODES, WINDOWS_PRIVATE_ACL_BROKER_SCRIPT, WINDOWS_IDENTITY_COMMAND_TIMEOUT_MS, WINDOWS_PRIVATE_ACL_BROKER_STARTUP_TIMEOUT_MS, SMALL_IDENTITY_COMMAND_TIMEOUT_MS, windowsPowerShellEnvironment, windowsPrivateAclBrokerInvocation, WindowsPrivateAclBroker, defaultWindowsPrivateAclBroker, runWindowsPrivateAcl, windowsAclCache, windowsAclIdentity, aclCacheKey, secureWindowsPrivatePath, invalidateWindowsAclCache, rebindHardenedWindowsAclAfterRename, rebindHardenedWindowsDirectoryAfterOwnedMutation, isWindowsPrivateAclVerificationFailure, isDefaultWindowsPrivatePath, secureExistingWindowsPath, linuxProcessIdentity, windowsProcessIdentityInvocation, windowsBootIdentityInvocation, windowsProcessIdentity, darwinProcessIdentity, runSmallIdentityCommand, cachedSystemBootIdentity, readInferenceSystemBootIdentity, defaultProcessIdentity, cachedCurrentProcessIdentity, defaultCurrentProcessIdentity, readInferenceHostProcessLockStatus, processLockObservationCache, inferenceProcessIdentitiesMatch, resolveInferenceHostApiUrl, inferenceHostSupervisorServiceManifestPath, DEFAULT_INFERENCE_HOST_INSTANCE, SAFE_INFERENCE_HOST_INSTANCE, requireNamedInstancePath, credentialStoreIdentity, inferenceHostCredentialContextPath, inferenceHostCredentialContextTransitionPath, credentialContextForConfig, WINDOWS_PRIVATE_FILE_REPLACE_ERROR_CODES, PROCESS_LOCK_PUBLICATION_GRACE_MS, PROCESS_LOCK_MAX_RECORD_BYTES, PROCESS_LOCK_GUARD_ELECTION_LEASE_MS, PROCESS_LOCK_GUARD_ELECTION_STALE_MS, PROCESS_LOCK_GUARD_ELECTION_ATTEMPTS, PROCESS_LOCK_GUARD_ELECTION_BACKOFF_MS, PROCESS_LOCK_LABEL, PROCESS_LOCK_GUARD_LABEL, sameProcessLockFile, openExclusiveProcessLockFile, inspectProcessLockFile, removeVerifiedStaleProcessLockFile, removeStaleProcessLockReclaimGuard, acquireProcessLockReclaimGuard;
+var HOST_CORE_POLICY, loadInferenceReceiptDurabilityTimeoutMs, loadInferenceAgentDataRequestTimeoutMs, loadInferenceAgentCommandLockPolicy, InferenceHostProcessLockBusyError, INFERENCE_CREDENTIAL_NAMESPACE, MAX_INFERENCE_PRIVATE_FILE_BYTES, WINDOWS_PRIVATE_ACL_MODES, WINDOWS_PRIVATE_ACL_BROKER_SCRIPT, WINDOWS_IDENTITY_COMMAND_TIMEOUT_MS, WINDOWS_PRIVATE_ACL_BROKER_STARTUP_TIMEOUT_MS, SMALL_IDENTITY_COMMAND_TIMEOUT_MS, windowsPowerShellEnvironment, windowsPrivateAclBrokerInvocation, WindowsPrivateAclBroker, defaultWindowsPrivateAclBroker, runWindowsPrivateAcl, windowsAclCache, windowsAclIdentity, aclCacheKey, secureWindowsPrivatePath, invalidateWindowsAclCache, rebindHardenedWindowsAclAfterRename, rebindHardenedWindowsDirectoryAfterOwnedMutation, isWindowsPrivateAclVerificationFailure, isDefaultWindowsPrivatePath, secureExistingWindowsPath, linuxProcessIdentity, windowsProcessIdentityInvocation, windowsBootIdentityInvocation, windowsProcessIdentity, darwinProcessIdentity, runSmallIdentityCommand, cachedSystemBootIdentity, readInferenceSystemBootIdentity, defaultProcessIdentity, cachedCurrentProcessIdentity, defaultCurrentProcessIdentity, processExists, readInferenceHostProcessLockStatus, processLockObservationCache, inferenceProcessIdentitiesMatch, resolveInferenceHostApiUrl, inferenceHostSupervisorServiceManifestPath, DEFAULT_INFERENCE_HOST_INSTANCE, SAFE_INFERENCE_HOST_INSTANCE, requireNamedInstancePath, credentialStoreIdentity, inferenceHostCredentialContextPath, inferenceHostCredentialContextTransitionPath, credentialContextForConfig, WINDOWS_PRIVATE_FILE_REPLACE_ERROR_CODES, PROCESS_LOCK_PUBLICATION_GRACE_MS, PROCESS_LOCK_MAX_RECORD_BYTES, PROCESS_LOCK_GUARD_ELECTION_LEASE_MS, PROCESS_LOCK_GUARD_ELECTION_STALE_MS, PROCESS_LOCK_GUARD_ELECTION_ATTEMPTS, PROCESS_LOCK_GUARD_ELECTION_BACKOFF_MS, PROCESS_LOCK_LABEL, PROCESS_LOCK_GUARD_LABEL, sameProcessLockFile, openExclusiveProcessLockFile, inspectProcessLockFile, removeVerifiedStaleProcessLockFile, removeStaleProcessLockReclaimGuard, acquireProcessLockReclaimGuard;
 var init_config2 = __esm({
   "lib/inference-host/config.ts"() {
     "use strict";
@@ -5609,6 +5601,15 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
         throw error48;
       }
     };
+    processExists = (pid) => {
+      try {
+        process.kill(pid, 0);
+        return true;
+      } catch (error48) {
+        if (error48.code === "ESRCH") return false;
+        throw error48;
+      }
+    };
     readInferenceHostProcessLockStatus = async (path) => {
       const raw = await readInferencePrivateFile(path, "Inference host process lock");
       if (raw === null) return { state: "not_running" };
@@ -5622,7 +5623,7 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
           readInferenceSystemBootIdentity()
         ]);
         if (boot !== owner2.boot_identity) return { state: "stale" };
-        if (identity3 === null) return { state: "unknown" };
+        if (identity3 === null) return { state: processExists(owner2.pid) ? "unknown" : "stale" };
         return { state: identity3 === owner2.process_identity ? "running" : "stale" };
       } catch {
         return { state: "unknown" };
@@ -5740,6 +5741,10 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
           const cached2 = processLockObservationCache.get(cacheKey);
           const observedIdentity = cached2 && cached2.dev === stat2.dev && cached2.ino === stat2.ino && cached2.pid === ownerPid && cached2.storedIdentity === storedIdentity && Date.now() - cached2.observedAtMs < HOST_CORE_POLICY.process_lock_identity_cache_ms ? cached2.observedIdentity : await probes.observeIdentity(ownerPid);
           if (!observedIdentity) {
+            if (!probes.isProcessAlive(ownerPid)) {
+              stale = true;
+              return { state: "stale", handle, stat: stat2 };
+            }
             throw new Error("Inference host could not verify the existing lock owner identity.");
           }
           processLockObservationCache.set(cacheKey, {
@@ -44363,7 +44368,7 @@ $items = @(Get-CimInstance Win32_Process | Where-Object { $_.Name -in @('node.ex
         }
       }
       if ((options.platform ?? process.platform) !== "win32") {
-        const processExists = options.processExists ?? ((pid) => {
+        const processExists2 = options.processExists ?? ((pid) => {
           try {
             process.kill(pid, 0);
             return true;
@@ -44371,7 +44376,7 @@ $items = @(Get-CimInstance Win32_Process | Where-Object { $_.Name -in @('node.ex
             return error48.code !== "ESRCH";
           }
         });
-        if ([...pids].some((pid) => processExists(pid)) || processExists(-options.guardianPid)) {
+        if ([...pids].some((pid) => processExists2(pid)) || processExists2(-options.guardianPid)) {
           throw new Error("Codex guardian process tree is still running; recovery evidence was preserved.");
         }
         return;
@@ -50696,7 +50701,7 @@ var init_durable_adapter = __esm({
 // lib/inference-host/service-launcher-state.ts
 import { access as access6, readFile as readFile12, rm as rm15 } from "node:fs/promises";
 import { dirname as dirname16, isAbsolute as isAbsolute7, join as join17, relative as relative4, resolve as resolve13 } from "node:path";
-var launcherSibling, within, launcherSelection, readLauncherSelection, readLauncherState, writeLauncherState, targetForSelection;
+var launcherSibling, launcherLockPath, within, launcherSelection, readLauncherSelection, readLauncherState, writeLauncherState, targetForSelection;
 var init_service_launcher_state = __esm({
   "lib/inference-host/service-launcher-state.ts"() {
     "use strict";
@@ -50709,6 +50714,7 @@ var init_service_launcher_state = __esm({
       if (!manifest.endsWith(".service.json")) throw new Error("Invalid service manifest path.");
       return `${manifest.slice(0, -".service.json".length)}${suffix}`;
     };
+    launcherLockPath = (manifest) => launcherSibling(manifest, ".service-launcher.lock");
     within = (parent, child) => {
       const part = relative4(resolve13(parent), resolve13(child));
       return Boolean(part) && !part.startsWith("..") && !isAbsolute7(part);
@@ -50771,7 +50777,7 @@ import { homedir as homedir4 } from "node:os";
 import { dirname as dirname17, join as join18, resolve as resolve14 } from "node:path";
 import { Transform } from "node:stream";
 import { pipeline } from "node:stream/promises";
-var SERVICE_NAME, SYSTEMD_UNIT, LAUNCHD_LABEL, SERVICE_POLICY, ATOMIC_REPLACEMENT_READ_ATTEMPTS, SERVICE_COOPERATIVE_STOP_SECONDS, pollAttemptsWithin, INFERENCE_HOST_SERVICE_DRAIN_COMMAND, INFERENCE_HOST_SERVICE_QUIESCE_COMMAND, InferenceHostBootstrapRestartRequiredError, inferenceHostServiceChildEnvironment, isWindowsSubsystemForLinux, inferenceHostServiceManifestPath, inferenceHostServiceDesiredPath, inferenceHostServiceLogPath, inferenceHostServiceRotatedLogPath, inferenceHostServiceRuntimePath, xmlEscape, plistEscape, systemdQuote, defaultRunCommand, probeInferenceHostLauncher, managerName, assertRuntimeEnvironment, withoutConcurrencyLimit, assertServicePath, manifestGeneration, assertWorker, assertManifest, assertServiceRuntimeState, assertDesiredState, readInferenceHostServiceManifest, readManifestAcrossAtomicReplacement, readInferenceHostServiceRuntime, readRuntimeAcrossAtomicReplacement, readInferenceHostServiceDesired, readDesiredAcrossAtomicReplacement, writeDesired, runtimeEnvironment, serviceBootstrapArguments, windowsOwnedCommandLine, vbScriptString, windowsServiceLauncher, windowsTaskXml, systemdUnit, launchAgentPlist, sameWorker, sameServiceDefinition, sameWorkerSet, InferenceHostServiceManager, serviceLogSinks, serviceLogSize, rotateServiceLog, writeServiceLog, appendServiceLog, spawnInferenceHostServiceChild, runInferenceHostServiceSupervisor;
+var SERVICE_NAME, SYSTEMD_UNIT, LAUNCHD_LABEL, SERVICE_POLICY, ATOMIC_REPLACEMENT_READ_ATTEMPTS, SERVICE_COOPERATIVE_STOP_SECONDS, pollAttemptsWithin, lockStillHeld, INFERENCE_HOST_SERVICE_DRAIN_COMMAND, INFERENCE_HOST_SERVICE_QUIESCE_COMMAND, InferenceHostBootstrapRestartRequiredError, inferenceHostServiceChildEnvironment, isWindowsSubsystemForLinux, inferenceHostServiceManifestPath, inferenceHostServiceDesiredPath, inferenceHostServiceLogPath, inferenceHostServiceRotatedLogPath, inferenceHostServiceRuntimePath, xmlEscape, plistEscape, systemdQuote, defaultRunCommand, probeInferenceHostLauncher, managerName, assertRuntimeEnvironment, withoutConcurrencyLimit, assertServicePath, manifestGeneration, assertWorker, assertManifest, assertServiceRuntimeState, assertDesiredState, readInferenceHostServiceManifest, readManifestAcrossAtomicReplacement, readInferenceHostServiceRuntime, readRuntimeAcrossAtomicReplacement, readInferenceHostServiceDesired, readDesiredAcrossAtomicReplacement, writeDesired, runtimeEnvironment, serviceBootstrapArguments, windowsOwnedCommandLine, vbScriptString, windowsServiceLauncher, windowsTaskXml, systemdUnit, launchAgentPlist, sameWorker, sameServiceDefinition, sameWorkerSet, InferenceHostServiceManager, serviceLogSinks, serviceLogSize, rotateServiceLog, writeServiceLog, appendServiceLog, spawnInferenceHostServiceChild, runInferenceHostServiceSupervisor;
 var init_service = __esm({
   "lib/inference-host/service.ts"() {
     "use strict";
@@ -50793,6 +50799,7 @@ var init_service = __esm({
     ATOMIC_REPLACEMENT_READ_ATTEMPTS = runtime_policy_generated_default.external_inference.host_core.atomic_replacement_read_attempts;
     SERVICE_COOPERATIVE_STOP_SECONDS = Math.ceil(SERVICE_POLICY.cooperative_stop_timeout_ms / MS_PER_SECOND);
     pollAttemptsWithin = (milliseconds) => Math.ceil(milliseconds / SERVICE_POLICY.startup_poll_interval_ms);
+    lockStillHeld = (error48) => error48 instanceof Error && (error48.message.includes("Another inference host process already owns") || error48.message.includes("could not verify the existing lock owner identity"));
     INFERENCE_HOST_SERVICE_DRAIN_COMMAND = "vtx-inference-host-service-drain-v1";
     INFERENCE_HOST_SERVICE_QUIESCE_COMMAND = "vtx-inference-host-service-quiesce-v1";
     InferenceHostBootstrapRestartRequiredError = class extends Error {
@@ -51358,6 +51365,7 @@ WantedBy=default.target
           generation: randomUUID12(),
           installed_at: this.now().toISOString()
         });
+        await this.awaitNoLauncherFinishingStop();
         await writeAtomicInferencePrivateFile(
           this.manifestPath(),
           `${JSON.stringify(restoredManifest, null, JSON_INDENT_SPACES)}
@@ -51437,6 +51445,7 @@ ${result.stderr}`)) {
           this.serviceBootstrapLockPath()
         );
         const definition = this.platform === "win32" ? windowsTaskXml(this.windowsLauncherPath(), this.windowsDirectory, this.username) : this.platform === "darwin" ? launchAgentPlist(manifest.executable, args, manifest.log_path) : systemdUnit(manifest.executable, args);
+        if (desiredRunning) await this.awaitNoLauncherFinishingStop();
         const existingRecovery = await readLauncherState(this.manifestPath());
         let managerInstallAttempted = false;
         try {
@@ -51582,10 +51591,11 @@ ${cleanup.stderr}`)) {
         }
         if (previous) {
           try {
-            await this.uninstallUnlocked(true);
+            await this.uninstallUnlocked({ reconfiguring: true });
           } catch (error48) {
+            const restored = await readInferenceHostServiceDesired(this.desiredPath()).catch(() => false);
             throw new Error(
-              "Inference-host service reconfiguration could not stop the previous supervisor; its desired state was restored.",
+              restored ? "Inference-host service reconfiguration could not stop the previous supervisor; its desired state was restored." : "Inference-host service reconfiguration could not stop the previous supervisor; it stays stopped.",
               { cause: error48 }
             );
           }
@@ -51693,6 +51703,7 @@ ${cleanup.stderr}`)) {
         if (!await readInferenceHostServiceManifest(this.manifestPath())) {
           throw new Error("Inference-host service is not installed.");
         }
+        await this.awaitNoLauncherFinishingStop();
         await writeDesired(this.desiredPath(), true, this.now());
         const result = await this.managerCommand("start");
         if (result.exitCode !== 0 && !/already running|in progress/iu.test(`${result.stdout}
@@ -51708,7 +51719,7 @@ ${result.stderr}`)) {
         }
       }
       async stop() {
-        return await this.withControlLock(async () => await this.stopUnlocked());
+        return await this.withControlLock(async () => await this.stopUnlocked({ restoreOnFailure: false }));
       }
       /**
        * Quiesce the complete installed worker boundary while one exact instance's
@@ -51732,7 +51743,7 @@ ${result.stderr}`)) {
           await options.prepare?.(context);
           const before = await this.status();
           if (recordedDesiredRunning || before.manager_active) {
-            await this.stopUnlocked(true);
+            await this.stopUnlocked({ restoreOnFailure: true, preserveManifestGeneration: true });
           } else {
             await writeDesired(this.desiredPath(), false, this.now());
           }
@@ -51774,44 +51785,98 @@ ${result.stderr}`)) {
           return { result, status: restoredStatus };
         });
       }
-      async stopUnlocked(preserveManifestGenerationOnFailure = false) {
+      /**
+       * True once no process holds any of these locks, false when one still does
+       * after the cooperative-stop window.
+       */
+      async processLocksReleased(lockPaths) {
+        for (let attempt2 = 0; attempt2 < this.stopWaitAttempts; attempt2 += 1) {
+          let allReleased = true;
+          for (const lockPath of lockPaths) {
+            try {
+              const probe = await this.acquireProcessLock(lockPath);
+              await probe.release();
+            } catch (error48) {
+              if (lockStillHeld(error48)) {
+                allReleased = false;
+                break;
+              }
+              throw error48;
+            }
+          }
+          if (allReleased) return true;
+          await this.sleep(SERVICE_POLICY.startup_poll_interval_ms);
+        }
+        return false;
+      }
+      /**
+       * A stop is no verdict on a release whose readiness attempt it ended. A
+       * stable launcher installed before that rule (it is never replaced) leaves
+       * the attempt pending when it stops, and its next start then rolls the
+       * release back as if it had crashed. Once the stop has outlasted the
+       * launcher, end that attempt here, under the launcher's own lock.
+       */
+      async endLauncherAttemptForStop() {
+        let lock2 = null;
+        for (let attempt2 = 0; attempt2 < this.stopWaitAttempts && !lock2; attempt2 += 1) {
+          try {
+            lock2 = await this.acquireProcessLock(launcherLockPath(this.manifestPath()));
+          } catch (error48) {
+            if (!lockStillHeld(error48)) throw error48;
+            await this.sleep(SERVICE_POLICY.startup_poll_interval_ms);
+          }
+        }
+        if (!lock2) return;
+        try {
+          const state2 = await readLauncherState(this.manifestPath()).catch(() => null);
+          if (state2?.pending) await writeLauncherState(this.manifestPath(), { ...state2, pending: false });
+        } finally {
+          await lock2.release();
+        }
+      }
+      /**
+       * Desired-running goes back to true only once no launcher is still finishing
+       * a stop. A launcher judges its core's exit by the desired state it reads
+       * afterwards, and the stable launcher an older release installed (it is
+       * never replaced) reads a true there as its ready release failing and rolls
+       * it back.
+       */
+      async awaitNoLauncherFinishingStop() {
+        if (await readInferenceHostServiceDesired(this.desiredPath())) return;
+        if (!await this.processLocksReleased([launcherLockPath(this.manifestPath())])) {
+          throw new Error(
+            `Inference-host service launcher was still finishing a stop after ${SERVICE_COOPERATIVE_STOP_SECONDS} seconds; start the service once it has stopped.`
+          );
+        }
+      }
+      /**
+       * A requested stop (`service stop`, uninstall) fences automatic restart: if
+       * it cannot finish cooperatively it says so and leaves desired-running
+       * false, so the service finishes its in-flight work and stays stopped. Only
+       * the internal quiesces (guarded recovery, a reconfiguration that replaces
+       * the definition) restore the supervisor they paused.
+       */
+      async stopUnlocked(options) {
         const manifest = await readInferenceHostServiceManifest(this.manifestPath());
         if (!manifest) {
           throw new Error("Inference-host service is not installed.");
         }
-        const restoreOnFailure = await readInferenceHostServiceDesired(this.desiredPath());
+        const restoreOnFailure = options.restoreOnFailure && await readInferenceHostServiceDesired(this.desiredPath());
+        const launcherStatus = await readInferenceHostProcessLockStatus(launcherLockPath(this.manifestPath())).catch(() => ({ state: "unknown" }));
+        const launcherWasRunning = launcherStatus.state === "running" || launcherStatus.state === "unknown";
         await writeDesired(this.desiredPath(), false, this.now());
         try {
-          const serviceLockPaths = [
+          const serviceReleased = await this.processLocksReleased([
             `${this.config.supervisorProcessLockPath}.service`,
-            this.serviceBootstrapLockPath()
-          ];
-          let serviceReleased = false;
-          for (let attempt2 = 0; attempt2 < this.stopWaitAttempts; attempt2 += 1) {
-            let allReleased = true;
-            for (const serviceLockPath of serviceLockPaths) {
-              try {
-                const probe = await this.acquireProcessLock(serviceLockPath);
-                await probe.release();
-              } catch (error48) {
-                if (error48 instanceof Error && error48.message.includes("Another inference host process already owns")) {
-                  allReleased = false;
-                  break;
-                }
-                throw error48;
-              }
-            }
-            if (allReleased) {
-              serviceReleased = true;
-              break;
-            }
-            await this.sleep(SERVICE_POLICY.startup_poll_interval_ms);
-          }
+            this.serviceBootstrapLockPath(),
+            launcherLockPath(this.manifestPath())
+          ]);
           if (!serviceReleased) {
             throw new Error(
               `Inference-host updater or workers did not stop cooperatively within ${SERVICE_COOPERATIVE_STOP_SECONDS} seconds; refusing forced termination while cleanup may be pending.`
             );
           }
+          if (launcherWasRunning) await this.endLauncherAttemptForStop();
           const result = await this.managerCommand("stop");
           if (result.exitCode !== 0 && !/not running|not found|does not exist|not loaded|cannot find|no such process/iu.test(`${result.stdout}
 ${result.stderr}`)) {
@@ -51825,7 +51890,7 @@ ${result.stderr}`)) {
         } catch (error48) {
           if (!restoreOnFailure) throw error48;
           try {
-            await this.restoreRunningSupervisor(manifest, preserveManifestGenerationOnFailure);
+            await this.restoreRunningSupervisor(manifest, options.preserveManifestGeneration ?? false);
           } catch (restoreError) {
             throw new Error(
               "Inference-host stop failed and the previous supervisor could not be restored.",
@@ -51910,12 +51975,14 @@ ${result.stderr}`)) {
       async uninstall() {
         return await this.withControlLock(async () => await this.uninstallUnlocked());
       }
-      async uninstallUnlocked(preserveRecovery = false) {
+      /** A reconfiguration keeps the recovery files and restores the supervisor it could not stop. */
+      async uninstallUnlocked(options = { reconfiguring: false }) {
+        const preserveRecovery = options.reconfiguring;
         const manifest = await readInferenceHostServiceManifest(this.manifestPath());
         if (!manifest) throw new Error("Inference-host service is not installed.");
         const current = await this.status();
         if (current.desired_running || current.manager_active) {
-          await this.stopUnlocked();
+          await this.stopUnlocked({ restoreOnFailure: options.reconfiguring });
         } else {
           await writeDesired(this.desiredPath(), false, this.now());
         }
@@ -105066,7 +105133,7 @@ var init_execution_capacity = __esm({
 });
 
 // lib/runtime/owed-protection-warnings.ts
-var storageKey, isWarning, identity2, distinctProtectionWarnings, owedProtectionWarnings, store, oweProtectionWarnings, forgetProtectionWarnings;
+var storageKey, isWarning, identity2, owesProtectionRecord, distinctProtectionWarnings, owedProtectionWarnings, store, oweProtectionWarnings, forgetProtectionWarnings;
 var init_owed_protection_warnings = __esm({
   "lib/runtime/owed-protection-warnings.ts"() {
     "use strict";
@@ -105081,6 +105148,7 @@ var init_owed_protection_warnings = __esm({
       return record6 != null && typeof record6 === "object" && typeof record6.symbol === "string" && typeof record6.action === "string" && typeof record6.status === "string" && (record6.order_id === null || typeof record6.order_id === "string") && record6.execution_metadata != null && typeof record6.execution_metadata === "object";
     };
     identity2 = (warning) => JSON.stringify(warning);
+    owesProtectionRecord = (report) => report.status === "executed" && report.order_id != null && (report.execution_metadata?.entry_order_id != null || report.execution_metadata?.previous_order_id != null);
     distinctProtectionWarnings = (warnings) => {
       const seen = /* @__PURE__ */ new Set();
       return warnings.filter((warning) => {
@@ -105688,6 +105756,17 @@ var init_protective_oversized_leg = __esm({
   }
 });
 
+// lib/runtime/protective-report-entry.ts
+var init_protective_report_entry = __esm({
+  "lib/runtime/protective-report-entry.ts"() {
+    "use strict";
+    init_define_VTX_CLAUDE_CODE_POLICY();
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+  }
+});
+
 // lib/runtime/native-position-protection.ts
 var nativeProtectionSettings, memberSetting, KINDS, formatTriggerOrNull, nativePositionTriggerPrice, nativeEntryRequest, HALF_UP_DIGIT, roundDecimalHalfUp, nativeTrailingRetracement, nativeAfterFillActions, classifyNativeOrderEnd, isOpenInDirection, nativePlacementGate, nativeStrayOrderDecision, FIRED_TRIGGER_CONDITION, TRAILING_ORDER_TYPE, closingSide, DECIMAL_PATTERN, decimalUnits2, fractionDigits, nativePlaceCover, positiveOrderId, nativeRearmDecision, nativeLostStopCrossed, readListedProtectiveRow, explainAbsentProtectiveOrder, readServerNativeProtectionState, nativeFillOpenedPosition, nativePositionEndedSince, flatReadEndsPosition;
 var init_native_position_protection = __esm({
@@ -106233,14 +106312,23 @@ var init_native_protection_device = __esm({
       if (!stopLoss?.trailing || !(Number(size) > 0)) return null;
       return nativeTrailingRetracement({ mode: stopLoss.mode, value: stopLoss.value, lotSize: Number(size), sizeDecimals });
     };
-    lotReport = (symbol2, lot, status, metadata) => ({
-      order_id: lot.orderId == null ? null : String(lot.orderId),
-      symbol: symbol2,
-      // The lot is the trailing stop; the whole-position stop stays AUTO_SL (protective_fill_attribution.leg_action).
-      action: "AUTO_TRAILING_SL",
-      status,
-      execution_metadata: { trailing_lot: true, protected_size: lot.size, retracement: lot.retracement, ...metadata }
-    });
+    lotReport = (symbol2, lot, status, metadata) => {
+      const entry = status === "executed" ? lotFillOrderId(lot) : null;
+      return {
+        order_id: lot.orderId == null ? null : String(lot.orderId),
+        symbol: symbol2,
+        // The lot is the trailing stop; the whole-position stop stays AUTO_SL (protective_fill_attribution.leg_action).
+        action: "AUTO_TRAILING_SL",
+        status,
+        execution_metadata: {
+          trailing_lot: true,
+          protected_size: lot.size,
+          retracement: lot.retracement,
+          ...metadata,
+          ...entry != null ? { entry_order_id: entry } : {}
+        }
+      };
+    };
     sendTrailingLot = async (args) => {
       const { io } = args;
       if (!io.placeTrailingLot) return { lot: args.lot, report: null };
@@ -106539,7 +106627,8 @@ var init_native_protection_device = __esm({
             trigger_price: trigger,
             position_tpsl: true,
             protected_size: args.protectedSize,
-            ...newOrderId != null ? { replaced_order_id: String(orderId) } : {}
+            // The same stop: VTX records it under its predecessor's decision.
+            ...newOrderId != null ? { replaced_order_id: String(orderId), previous_order_id: String(orderId) } : {}
           }
         }
       };
@@ -107191,6 +107280,9 @@ var init_native_protection_device = __esm({
           execution_metadata: {
             reason_code: retried ? "protective_place_rejected" : refused ? retiredReason : args.reasonCode,
             ...args.member.orderId != null ? { replaced_order_id: String(args.member.orderId) } : {},
+            // A lost stop placed again as the same stop (not a re-arm on a new
+            // position): VTX records it under its predecessor's decision.
+            ...!refused && args.member.orderId != null && args.reasonCode === "protective_stop_replaced" ? { previous_order_id: String(args.member.orderId) } : {},
             trigger_price: args.trigger,
             position_tpsl: true,
             protected_size: Math.abs(position.size),
@@ -107749,6 +107841,7 @@ var init_runtime_execution = __esm({
     init_protective_stop_replacement();
     init_protective_entry_cover();
     init_protective_oversized_leg();
+    init_protective_report_entry();
     init_error_surface_contract();
     init_native_position_protection();
     init_native_protection_device();
@@ -109558,6 +109651,7 @@ var init_runtime_execution = __esm({
           positionTpsl,
           metadata: {
             trigger_price: candidates[index].triggerPrice,
+            entry_order_id: fill.orderId,
             entry_filled_size: fill.filledSize,
             entry_average_price: fill.averagePrice
           }
@@ -112186,6 +112280,7 @@ var init_runtime_execution = __esm({
             metadata: {
               reason_code: decision.reasonCode,
               replaced_order_id: lostOrderId,
+              entry_order_id: group.entryOrderId,
               trigger_price: triggerPrice,
               live_position_size: livePositionSize2,
               ...acknowledgement.state === "fulfilled" ? { acknowledgement_state: "fulfilled" } : {}
@@ -112789,7 +112884,8 @@ var init_runtime_execution = __esm({
           metadata: {
             trigger_price: replacementTriggerPrice,
             previous_trigger_price: leg.triggerPrice,
-            previous_order_id: orderId
+            previous_order_id: orderId,
+            entry_order_id: reservation.sourceGroup.entryOrderId
           }
         }));
         return { reports, stop: false };
@@ -115756,9 +115852,11 @@ var init_protection_warning_delivery = __esm({
     owesWarning = (report) => report.status === "failed" && (report.action === "AUTO_SL" || report.action === "AUTO_TP") && report.execution_metadata?.manual_intervention === true;
     hasPendingClientProtection = (profileId) => hasPendingClientProtectiveGroups(profileId) || owedProtectionWarnings(profileId).length > 0;
     deliverProtectionWarnings = async (profileId, results, signal) => {
+      const reports = results.flatMap((result) => result.reports);
+      oweProtectionWarnings(profileId, reports.filter(owesProtectionRecord));
       const pending3 = distinctProtectionWarnings([
         ...owedProtectionWarnings(profileId),
-        ...results.flatMap(({ reports }) => reports).filter(owesWarning)
+        ...reports.filter((report) => owesWarning(report) || owesProtectionRecord(report))
       ]);
       for (let start = 0; start < pending3.length; start += REPORTS_PER_REQUEST) {
         const chunk = pending3.slice(start, start + REPORTS_PER_REQUEST);
@@ -116299,7 +116397,7 @@ var init_browser_observability = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_runtime_policy_generated2();
-    CLIENT_SOURCE_VERSION = typeof process !== "undefined" && true && "57c610f1de6ec98e0b2464bd703c7f3334c98d6c".trim() && "57c610f1de6ec98e0b2464bd703c7f3334c98d6c".trim() !== "unstamped" ? "57c610f1de6ec98e0b2464bd703c7f3334c98d6c".trim() : null;
+    CLIENT_SOURCE_VERSION = typeof process !== "undefined" && true && "6e697ce34f8b8c49c59cd6ba767c041fbee06d58".trim() && "6e697ce34f8b8c49c59cd6ba767c041fbee06d58".trim() !== "unstamped" ? "6e697ce34f8b8c49c59cd6ba767c041fbee06d58".trim() : null;
     listenersInstalled = false;
     state = {
       loadedAtMs: Date.now(),
@@ -120005,6 +120103,7 @@ var init_device_trailing_maintenance = __esm({
     init_api2();
     init_constants();
     init_network_debug();
+    init_protection_warning_delivery();
     init_runtime_redaction();
     init_runtime_execution();
     init_runtime_handoff();
@@ -120059,6 +120158,7 @@ var init_device_trailing_maintenance = __esm({
           outcome: failed2 > 0 ? "error" : "ok"
         });
       }
+      await deliverProtectionWarnings(input.profileId, results, input.signal);
       const nextDueAtMs = nextClientTrailingStopDueAtMs(input.profileId, input.intervalMs);
       return { recheckAtMs: nextDueAtMs == null ? null : Math.max(nextDueAtMs, ranAtMs + pollMs) };
     };
@@ -129102,9 +129202,9 @@ var init_local_analysis = __esm({
     RUNTIME_SOURCE_DEFINITION_VERSION = "runtime-source-v1";
     DECISION_INPUT_DEFINITION_VERSION = "decision-input-v1";
     CONTEXT_ENVELOPE_DEFINITION_VERSION = "context-envelope-v2.1";
-    CLIENT_RUNTIME_SOURCE_VERSION = typeof process !== "undefined" && true && "57c610f1de6ec98e0b2464bd703c7f3334c98d6c".trim() && !["unknown", "unstamped", "development"].includes(
-      "57c610f1de6ec98e0b2464bd703c7f3334c98d6c".trim().toLowerCase()
-    ) ? "57c610f1de6ec98e0b2464bd703c7f3334c98d6c".trim() : null;
+    CLIENT_RUNTIME_SOURCE_VERSION = typeof process !== "undefined" && true && "6e697ce34f8b8c49c59cd6ba767c041fbee06d58".trim() && !["unknown", "unstamped", "development"].includes(
+      "6e697ce34f8b8c49c59cd6ba767c041fbee06d58".trim().toLowerCase()
+    ) ? "6e697ce34f8b8c49c59cd6ba767c041fbee06d58".trim() : null;
     CLIENT_MAIN_PROMPT_RENDERER = "client_runtime.buildLocalRuntimePromptArtifacts:v1";
     CLIENT_REVIEW_PROMPT_RENDERER = "client_runtime.review_prompt_assembly:v1";
     resolveEffectivePromptRuntimeProvenance = (input) => ({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vtxmacro/cli",
-  "version": "2026.10.56",
+  "version": "2026.10.57",
   "description": "VTX Macro CLI, MCP server, and durable external inference host.",
   "type": "module",
   "license": "UNLICENSED",