@vtxmacro/cli 2026.10.7 → 2026.10.8

package/bin/vtx.js

@@ -113,7 +113,7 @@ var init_routing = __esm({
 var agent_cli_release_default;
 var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
-    agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.7", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
+    agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.8", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
   }
 });
 
@@ -213,6 +213,9 @@ var init_runtime_policy_generated = __esm({
               evidence_max_items: 32,
               evidence_shared_read_seconds: 10
             },
+            protective_plan_set_lock: {
+              wait_seconds: 120
+            },
             history_evidence: {
               device_rounds_per_beat: 6,
               device_retry_seconds: 60
@@ -1623,7 +1626,7 @@ async function writeAtomicInferencePrivateFile(path, contents, dependencies = {}
     throw error48;
   }
 }
-async function readInferencePrivateFile(path, label, dependencies = {}) {
+async function readInferencePrivateFile(path, label2, dependencies = {}) {
   const platform = dependencies.platform ?? process.platform;
   const runner = dependencies.runner ?? runWindowsPrivateAcl;
   const defaultRoot = dependencies.defaultRoot ?? resolve(homedir2(), ".vtx", "inference-host");
@@ -1635,7 +1638,7 @@ async function readInferencePrivateFile(path, label, dependencies = {}) {
     throw error48;
   }
   if (before.isSymbolicLink() || !before.isFile()) {
-    throw new Error(`${label} is unsafe.`);
+    throw new Error(`${label2} is unsafe.`);
   }
   await secureExistingWindowsPath(
     dirname2(path),
@@ -1649,21 +1652,21 @@ async function readInferencePrivateFile(path, label, dependencies = {}) {
   try {
     const opened = await handle.stat();
     if (!opened.isFile() || opened.dev !== before.dev || opened.ino !== before.ino || opened.size > MAX_INFERENCE_PRIVATE_FILE_BYTES || typeof process.getuid === "function" && opened.uid !== process.getuid()) {
-      throw new Error(`${label} changed while it was opened.`);
+      throw new Error(`${label2} changed while it was opened.`);
     }
     if (platform !== "win32" && (opened.mode & 63) !== 0) {
-      throw new Error(`${label} must have mode 0600.`);
+      throw new Error(`${label2} must have mode 0600.`);
     }
     return await handle.readFile("utf8");
   } finally {
     await handle.close();
   }
 }
-async function clearInferencePrivateFile(path, label) {
+async function clearInferencePrivateFile(path, label2) {
   try {
     const metadata = await lstat(path);
     if (metadata.isSymbolicLink() || !metadata.isFile()) {
-      throw new Error(`${label} is unsafe.`);
+      throw new Error(`${label2} is unsafe.`);
     }
     await secureExistingWindowsPath(dirname2(path), "directory");
     await secureExistingWindowsPath(path, "file");
@@ -1785,7 +1788,7 @@ async function acquireInferenceHostProcessLock(path, dependencies = {}) {
     }
   };
 }
-var loadInferenceReceiptDurabilityTimeoutMs, loadInferenceAgentDataRequestTimeoutMs, loadInferenceAgentCommandLockPolicy, InferenceHostProcessLockBusyError, INFERENCE_CREDENTIAL_NAMESPACE, MAX_INFERENCE_PRIVATE_FILE_BYTES, WINDOWS_PRIVATE_ACL_BROKER_SCRIPT, WINDOWS_IDENTITY_COMMAND_TIMEOUT_MS, WINDOWS_PRIVATE_ACL_BROKER_STARTUP_TIMEOUT_MS, SMALL_IDENTITY_COMMAND_TIMEOUT_MS, windowsPowerShellEnvironment, windowsPrivateAclBrokerInvocation, WindowsPrivateAclBroker, defaultWindowsPrivateAclBroker, runWindowsPrivateAcl, windowsAclCache, windowsAclIdentity, aclCacheKey, secureWindowsPrivatePath, invalidateWindowsAclCache, rebindHardenedWindowsAclAfterRename, rebindHardenedWindowsDirectoryAfterOwnedMutation, isDefaultWindowsPrivatePath, secureExistingWindowsPath, linuxProcessIdentity, windowsProcessIdentityInvocation, windowsBootIdentityInvocation, windowsProcessIdentity, darwinProcessIdentity, runSmallIdentityCommand, cachedSystemBootIdentity, readInferenceSystemBootIdentity, defaultProcessIdentity, cachedCurrentProcessIdentity, defaultCurrentProcessIdentity, readInferenceHostProcessLockStatus, processLockObservationCache, inferenceProcessIdentitiesMatch, resolveInferenceHostApiUrl, inferenceHostSupervisorServiceManifestPath, DEFAULT_INFERENCE_HOST_INSTANCE, SAFE_INFERENCE_HOST_INSTANCE, requireNamedInstancePath, credentialStoreIdentity, inferenceHostCredentialContextPath, inferenceHostCredentialContextTransitionPath, credentialContextForConfig, WINDOWS_PRIVATE_FILE_REPLACE_ERROR_CODES, PROCESS_LOCK_PUBLICATION_GRACE_MS, PROCESS_LOCK_MAX_RECORD_BYTES, PROCESS_LOCK_GUARD_ELECTION_LEASE_MS, PROCESS_LOCK_GUARD_ELECTION_STALE_MS, PROCESS_LOCK_GUARD_ELECTION_ATTEMPTS, PROCESS_LOCK_GUARD_ELECTION_BACKOFF_MS, PROCESS_LOCK_LABEL, PROCESS_LOCK_GUARD_LABEL, sameProcessLockFile, openExclusiveProcessLockFile, inspectProcessLockFile, removeVerifiedStaleProcessLockFile, removeStaleProcessLockReclaimGuard, acquireProcessLockReclaimGuard;
+var loadInferenceReceiptDurabilityTimeoutMs, loadInferenceAgentDataRequestTimeoutMs, loadInferenceAgentCommandLockPolicy, InferenceHostProcessLockBusyError, INFERENCE_CREDENTIAL_NAMESPACE, MAX_INFERENCE_PRIVATE_FILE_BYTES, WINDOWS_PRIVATE_ACL_MODES, WINDOWS_PRIVATE_ACL_BROKER_SCRIPT, WINDOWS_IDENTITY_COMMAND_TIMEOUT_MS, WINDOWS_PRIVATE_ACL_BROKER_STARTUP_TIMEOUT_MS, SMALL_IDENTITY_COMMAND_TIMEOUT_MS, windowsPowerShellEnvironment, windowsPrivateAclBrokerInvocation, WindowsPrivateAclBroker, defaultWindowsPrivateAclBroker, runWindowsPrivateAcl, windowsAclCache, windowsAclIdentity, aclCacheKey, secureWindowsPrivatePath, invalidateWindowsAclCache, rebindHardenedWindowsAclAfterRename, rebindHardenedWindowsDirectoryAfterOwnedMutation, isWindowsPrivateAclVerificationFailure, isDefaultWindowsPrivatePath, secureExistingWindowsPath, linuxProcessIdentity, windowsProcessIdentityInvocation, windowsBootIdentityInvocation, windowsProcessIdentity, darwinProcessIdentity, runSmallIdentityCommand, cachedSystemBootIdentity, readInferenceSystemBootIdentity, defaultProcessIdentity, cachedCurrentProcessIdentity, defaultCurrentProcessIdentity, readInferenceHostProcessLockStatus, processLockObservationCache, inferenceProcessIdentitiesMatch, resolveInferenceHostApiUrl, inferenceHostSupervisorServiceManifestPath, DEFAULT_INFERENCE_HOST_INSTANCE, SAFE_INFERENCE_HOST_INSTANCE, requireNamedInstancePath, credentialStoreIdentity, inferenceHostCredentialContextPath, inferenceHostCredentialContextTransitionPath, credentialContextForConfig, WINDOWS_PRIVATE_FILE_REPLACE_ERROR_CODES, PROCESS_LOCK_PUBLICATION_GRACE_MS, PROCESS_LOCK_MAX_RECORD_BYTES, PROCESS_LOCK_GUARD_ELECTION_LEASE_MS, PROCESS_LOCK_GUARD_ELECTION_STALE_MS, PROCESS_LOCK_GUARD_ELECTION_ATTEMPTS, PROCESS_LOCK_GUARD_ELECTION_BACKOFF_MS, PROCESS_LOCK_LABEL, PROCESS_LOCK_GUARD_LABEL, sameProcessLockFile, openExclusiveProcessLockFile, inspectProcessLockFile, removeVerifiedStaleProcessLockFile, removeStaleProcessLockReclaimGuard, acquireProcessLockReclaimGuard;
 var init_config2 = __esm({
   "lib/inference-host/config.ts"() {
     "use strict";
@@ -1847,6 +1850,7 @@ var init_config2 = __esm({
     };
     INFERENCE_CREDENTIAL_NAMESPACE = "vtxmacro-insights-inference";
     MAX_INFERENCE_PRIVATE_FILE_BYTES = 16 * 1024 * 1024;
+    WINDOWS_PRIVATE_ACL_MODES = ["harden", "verify", "verify-owner", "verify-private"];
     WINDOWS_PRIVATE_ACL_BROKER_SCRIPT = `$ErrorActionPreference='Stop'
 $ProgressPreference='SilentlyContinue'
 while(($line=[Console]::In.ReadLine()) -ne $null) {
@@ -1863,7 +1867,7 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
     $kind=[string]$request.kind
     $mode=[string]$request.mode
     if($kind -ne 'directory' -and $kind -ne 'file') { throw 'invalid path kind' }
-    if($mode -ne 'harden' -and $mode -ne 'verify' -and $mode -ne 'verify-owner') { throw 'invalid ACL mode' }
+    if($mode -ne 'harden' -and $mode -ne 'verify' -and $mode -ne 'verify-owner' -and $mode -ne 'verify-private') { throw 'invalid ACL mode' }
     $path=[Text.Encoding]::UTF8.GetString([Convert]::FromBase64String([string]$request.path_b64))
     if([string]::IsNullOrWhiteSpace($path) -or $path.Length -gt 32767 -or $path.Contains([char]0)) { throw 'invalid path' }
     $failureStage='path_lookup'
@@ -1912,11 +1916,12 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
     $owner=(New-Object Security.Principal.NTAccount($actual.Owner)).Translate([Security.Principal.SecurityIdentifier]).Value
     if($owner -ne $current.Value -and ($owner -ne $admins.Value -or -not $currentIsAdmin)) { throw 'private ACL owner is invalid' }
     if($mode -ne 'verify-owner') {
-      if(-not $actual.AreAccessRulesProtected) { throw 'private ACL inheritance is invalid' }
+      $inheritedAllowed=$mode -eq 'verify-private'
+      if(-not $inheritedAllowed -and -not $actual.AreAccessRulesProtected) { throw 'private ACL inheritance is invalid' }
       $userFull=$false
       foreach($rule in $actual.Access) {
         $sid=$rule.IdentityReference.Translate([Security.Principal.SecurityIdentifier]).Value
-        if($rule.IsInherited -or $allowed -notcontains $sid -or $rule.AccessControlType -ne [Security.AccessControl.AccessControlType]::Allow) {
+        if(($rule.IsInherited -and -not $inheritedAllowed) -or $allowed -notcontains $sid -or $rule.AccessControlType -ne [Security.AccessControl.AccessControlType]::Allow) {
           throw 'private ACL contains an unauthorized access rule'
         }
         if($sid -eq $current.Value -and (($rule.FileSystemRights -band [Security.AccessControl.FileSystemRights]::FullControl) -eq [Security.AccessControl.FileSystemRights]::FullControl)) { $userFull=$true }
@@ -2052,9 +2057,9 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
           error48.code = "ENOENT";
           pending3.reject(error48);
         } else {
-          pending3.reject(new Error(
+          pending3.reject(Object.assign(new Error(
             `Windows private ACL ${pending3.mode} failed (${response.error_code}).`
-          ));
+          ), { aclStage: response.error_code }));
         }
         this.scheduleIdleShutdown();
       }
@@ -2159,7 +2164,7 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
     };
     invalidateWindowsAclCache = (path) => {
       for (const kind of ["file", "directory"]) {
-        for (const mode of ["harden", "verify", "verify-owner"]) {
+        for (const mode of WINDOWS_PRIVATE_ACL_MODES) {
           windowsAclCache.delete(aclCacheKey(path, kind, mode));
         }
       }
@@ -2178,7 +2183,7 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
       }
       invalidateWindowsAclCache(source);
       invalidateWindowsAclCache(destination);
-      for (const mode of ["harden", "verify", "verify-owner"]) {
+      for (const mode of WINDOWS_PRIVATE_ACL_MODES) {
         windowsAclCache.set(aclCacheKey(destination, kind, mode), published);
       }
     };
@@ -2189,10 +2194,11 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
         throw new Error("Windows private directory identity changed during atomic publication.");
       }
       invalidateWindowsAclCache(path);
-      for (const mode of ["harden", "verify", "verify-owner"]) {
+      for (const mode of WINDOWS_PRIVATE_ACL_MODES) {
         windowsAclCache.set(aclCacheKey(path, "directory", mode), current);
       }
     };
+    isWindowsPrivateAclVerificationFailure = (error48) => error48?.aclStage === "acl_verification";
     isDefaultWindowsPrivatePath = (path, root = resolve(homedir2(), ".vtx", "inference-host")) => {
       const child = relative(root, resolve(path));
       return child === "" || !child.startsWith("..") && !child.includes(":");
@@ -2421,11 +2427,11 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
     inferenceHostSupervisorServiceManifestPath = (env) => `${join2(inferenceBaseDir(env), "state.json")}.service.json`;
     DEFAULT_INFERENCE_HOST_INSTANCE = "default";
     SAFE_INFERENCE_HOST_INSTANCE = /^[a-z0-9](?:[a-z0-9-]{0,46}[a-z0-9])?$/u;
-    requireNamedInstancePath = (instanceName, instanceDir, rawPath, label) => {
+    requireNamedInstancePath = (instanceName, instanceDir, rawPath, label2) => {
       if (!rawPath || instanceName === DEFAULT_INFERENCE_HOST_INSTANCE) return rawPath;
       const relativePath = relative(resolve(instanceDir), resolve(rawPath));
       if (relativePath === ".." || relativePath.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute2(relativePath)) {
-        throw new Error(`${label} for a named instance must stay inside its isolated instance directory.`);
+        throw new Error(`${label2} for a named instance must stay inside its isolated instance directory.`);
       }
       return rawPath;
     };
@@ -2480,7 +2486,7 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
         throw error48;
       }
     };
-    inspectProcessLockFile = async (path, label, probes) => {
+    inspectProcessLockFile = async (path, label2, probes) => {
       let before;
       try {
         before = await lstat(path);
@@ -2489,7 +2495,7 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
         throw error48;
       }
       if (before.isSymbolicLink() || !before.isFile() || process.platform !== "win32" && (before.mode & 63) !== 0 || typeof process.getuid === "function" && before.uid !== process.getuid()) {
-        throw new Error(`${label} is unsafe.`);
+        throw new Error(`${label2} is unsafe.`);
       }
       let handle;
       try {
@@ -2736,7 +2742,7 @@ __export(updater_exports, {
 });
 import { spawn as spawn2 } from "node:child_process";
 import { createHash, randomUUID } from "node:crypto";
-import { access, appendFile, chmod, lstat as lstat2, mkdir as mkdir3, readFile as readFile3, readdir as readdir3, realpath as realpath2, rename as rename2, rm as rm3 } from "node:fs/promises";
+import { access, appendFile, chmod, lstat as lstat2, readFile as readFile3, readdir as readdir3, realpath as realpath2, rename as rename2, rm as rm3 } from "node:fs/promises";
 import { constants as osConstants, homedir as homedir3 } from "node:os";
 import { dirname as dirname3, isAbsolute as isAbsolute3, join as join3, relative as relative2, resolve as resolve2, win32 as windowsPath2 } from "node:path";
 var CLI_PACKAGE_NAME, OFFICIAL_NPM_REGISTRY, CLI_UPDATE_COMMAND, parseCliReleaseVersion, compareCliReleaseVersions, isPathWithin, defaultRunCliCommand, runCliReleaseNpmCommand, fetchLatestCliRelease, verifyCliReleaseIntegrity, verifyInstalledCliRelease, cleanupInterruptedReleaseStaging, ensureUpdaterPrivateDirectory, stageCliRelease, stageCliReleaseWithin, readCliReleaseRejection, writeCliReleaseRejection, CLI_BACKGROUND_STAGE_ARGUMENT, READY_MESSAGE_TYPE, CHILD_ENV, READY_PROTOCOL_ENV, EMPTY_STATE, resolveCliUpdatePaths, cliAutoUpdateDisabled, resolveRegistry, validSelection, readState, writeState, appendCliUpdateLog, isSkippedInvocation, isVersionQuery, policyApiUrl, fetchMinimumSupportedVersion, classifyCliInstall, refusal, inferenceHostServiceManifestPaths, prune, stageAndSelect, planCliEntryUpdate, spawnBackgroundStage, runCliBackgroundStage, installStopTracker, runReleaseProcess, reportCliEntryReady, markConfirmed, ROLLBACK_SKIPPED, rollBack, finishRollBack, INTERRUPTED_EXIT_CODE, superviseRuntime, releaseEntryScript, runCliEntry, RUNTIME_RESTART_FOR_UPDATE_EXIT_CODE, RUNTIME_SUPERVISED_ENV, RUNTIME_RESUME_ENV, RUNTIME_SUPERVISOR_PID_ENV, RUNTIME_RESUME_FILE_ENV, runtimeResumeFile, parseRuntimeResumeRecord, readRuntimeResume, writeRuntimeResume, clearRuntimeResume, isSupervisableRuntimeCommand, isRuntimeResume, runtimeRestartEligible, pollRuntimeRelease, createRuntimeRestartCheck;
@@ -2872,7 +2878,32 @@ var init_updater = __esm({
     };
     ensureUpdaterPrivateDirectory = async (path, root, dependencies = {}) => {
       const platform = dependencies.platform ?? process.platform;
-      if (platform !== "win32" && (resolve2(path) === resolve2(root) || isPathWithin(root, path))) {
+      if (platform === "win32") {
+        const existing = await lstat2(path).catch((error48) => {
+          if (error48.code === "ENOENT") return null;
+          throw error48;
+        });
+        if (!existing) {
+          await ensureInferencePrivateDirectory(path, { ...dependencies, defaultRoot: root });
+          return;
+        }
+        if (existing.isSymbolicLink() || !existing.isDirectory()) {
+          throw new Error("Inference host state directory is unsafe.");
+        }
+        const runner = dependencies.runner ?? runWindowsPrivateAcl;
+        try {
+          await secureWindowsPrivatePath(path, "directory", "verify-private", platform, runner);
+        } catch (error48) {
+          if (!isWindowsPrivateAclVerificationFailure(error48)) throw error48;
+          if ((await readdir3(path)).length > 0) {
+            const recovery = /\.service-releases$/u.test(path) ? "run 'vtx inference-host service uninstall' then 'install'" : "delete this directory; it is recreated private";
+            throw new Error(`updater_dir_not_private: ${recovery} (${path})`, { cause: error48 });
+          }
+          await secureWindowsPrivatePath(path, "directory", "harden", platform, runner);
+        }
+        return;
+      }
+      if (resolve2(path) === resolve2(root) || isPathWithin(root, path)) {
         const existing = await lstat2(path).catch(() => null);
         if (existing && existing.isDirectory() && !existing.isSymbolicLink() && (existing.mode & 63) !== 0 && (typeof process.getuid !== "function" || existing.uid === process.getuid())) {
           await chmod(path, 448);
@@ -2929,8 +2960,8 @@ var init_updater = __esm({
       } catch (error48) {
         if (error48.code !== "ENOENT") throw error48;
       }
-      await mkdir3(stagingPath, { recursive: true, mode: 448 });
-      await mkdir3(downloadPath, { recursive: true, mode: 448 });
+      await ensureUpdaterPrivateDirectory(stagingPath, input.privateRoot, { platform });
+      await ensureUpdaterPrivateDirectory(downloadPath, input.privateRoot, { platform });
       try {
         const packed = await runCliReleaseNpmCommand(executable, [
           "pack",
@@ -20407,25 +20438,25 @@ var init_external_inference_contract = __esm({
 // lib/inference-host/credential-store.ts
 import { createHash as createHash2 } from "node:crypto";
 import { spawn as spawn3 } from "node:child_process";
-function canonicalUrl(raw, label) {
+function canonicalUrl(raw, label2) {
   let parsed;
   try {
     parsed = new URL(raw);
   } catch {
-    throw new Error(`${label} is invalid.`);
+    throw new Error(`${label2} is invalid.`);
   }
   if (parsed.username || parsed.password || parsed.search || parsed.hash || !parsed.hostname || !["http:", "https:"].includes(parsed.protocol)) {
-    throw new Error(`${label} is invalid.`);
+    throw new Error(`${label2} is invalid.`);
   }
   const isLoopback = ["localhost", "127.0.0.1", "[::1]"].includes(parsed.hostname);
   if (parsed.protocol !== "https:" && !isLoopback) {
-    throw new Error(`${label} must use HTTPS outside loopback.`);
+    throw new Error(`${label2} must use HTTPS outside loopback.`);
   }
   return parsed.toString().replace(/\/$/u, "");
 }
-function isoTimestamp(value, label) {
+function isoTimestamp(value, label2) {
   if (typeof value !== "string" || !value || !Number.isFinite(Date.parse(value))) {
-    throw new Error(`${label} is invalid.`);
+    throw new Error(`${label2} is invalid.`);
   }
   return value;
 }
@@ -21396,33 +21427,33 @@ var init_crypto = __esm({
 // lib/inference-host/oauth.ts
 import { createHash as createHash4, randomBytes as randomBytes3, timingSafeEqual } from "node:crypto";
 import { createServer } from "node:http";
-function requireObject(value, label) {
+function requireObject(value, label2) {
   if (!value || typeof value !== "object" || Array.isArray(value)) {
-    throw new Error(`${label} is invalid.`);
+    throw new Error(`${label2} is invalid.`);
   }
   return value;
 }
-function exactUrl(raw, label) {
-  if (typeof raw !== "string" || !raw) throw new Error(`${label} is unavailable.`);
+function exactUrl(raw, label2) {
+  if (typeof raw !== "string" || !raw) throw new Error(`${label2} is unavailable.`);
   let parsed;
   try {
     parsed = new URL(raw);
   } catch {
-    throw new Error(`${label} is invalid.`);
+    throw new Error(`${label2} is invalid.`);
   }
   if (parsed.username || parsed.password || parsed.search || parsed.hash || !parsed.hostname) {
-    throw new Error(`${label} is invalid.`);
+    throw new Error(`${label2} is invalid.`);
   }
   const loopback = ["localhost", "127.0.0.1", "[::1]"].includes(parsed.hostname);
   if (parsed.protocol !== "https:" && !(parsed.protocol === "http:" && loopback)) {
-    throw new Error(`${label} must use HTTPS outside loopback.`);
+    throw new Error(`${label2} must use HTTPS outside loopback.`);
   }
   return parsed.toString();
 }
-function requireSameOrigin(endpoint, issuer, label) {
-  const parsed = new URL(exactUrl(endpoint, label));
+function requireSameOrigin(endpoint, issuer, label2) {
+  const parsed = new URL(exactUrl(endpoint, label2));
   if (parsed.origin !== new URL(issuer).origin) {
-    throw new Error(`${label} has an unexpected origin.`);
+    throw new Error(`${label2} has an unexpected origin.`);
   }
   return parsed.toString();
 }
@@ -22158,6 +22189,9 @@ var init_runtime_policy_generated2 = __esm({
               evidence_max_items: 32,
               evidence_shared_read_seconds: 10
             },
+            protective_plan_set_lock: {
+              wait_seconds: 120
+            },
             history_evidence: {
               device_rounds_per_beat: 6,
               device_retry_seconds: 60
@@ -33244,10 +33278,10 @@ var init_runner = __esm({
       if (known && (!window2 || window2.windowDurationMins !== known.windowDurationMins)) return false;
       return window2 === null || window2.resetsAt !== null && window2.resetsAt * 1e3 > nowMs2 && (window2.usedPercent < 100 || codexCreditsAvailable(rateLimits.rateLimits));
     });
-    finitePositiveOption = (value, fallback, label) => {
+    finitePositiveOption = (value, fallback, label2) => {
       const result = value ?? fallback;
       if (!Number.isSafeInteger(result) || result < 1) {
-        throw new InferenceHostRunnerError("invalid_configuration", `${label} must be a positive integer.`);
+        throw new InferenceHostRunnerError("invalid_configuration", `${label2} must be a positive integer.`);
       }
       return result;
     };
@@ -46377,10 +46411,10 @@ Durable service:
   vtx inference-host service recover --instance codex-1 --force-recovery
   vtx inference-host service <start|stop|status|logs|recover|uninstall>
 `;
-    parseHostConcurrency = (raw, label) => {
+    parseHostConcurrency = (raw, label2) => {
       const value = Number(raw);
       if (!Number.isSafeInteger(value) || value < 1) {
-        throw new Error(`${label} must be a positive safe integer.`);
+        throw new Error(`${label2} must be a positive safe integer.`);
       }
       return value;
     };
@@ -46688,8 +46722,8 @@ Durable service:
         throw new Error("Inference host revocation checkpoint does not match credential recovery.");
       }
     };
-    fileExistsPrivately = async (path, label) => {
-      const raw = await readInferencePrivateFile(path, label);
+    fileExistsPrivately = async (path, label2) => {
+      const raw = await readInferencePrivateFile(path, label2);
       return raw !== null;
     };
     inspectCodexAuthentication = async (config2) => {
@@ -50232,7 +50266,7 @@ var init_shared = __esm({
       runtimeRequestErrorKind: kind,
       runtimeRequestTransientNetwork: kind === "network" && isTransientNetworkFetchError(error48)
     });
-    buildMarketDataFetchError = async (response, label, path) => {
+    buildMarketDataFetchError = async (response, label2, path) => {
       let responseText = "";
       try {
         responseText = (await response.clone().text()).trim();
@@ -50242,21 +50276,21 @@ var init_shared = __esm({
       const statusText = response.statusText ? ` ${response.statusText}` : "";
       const detail = responseText ? `: ${responseText.slice(0, 240)}` : "";
       return annotateMarketDataRequestError(
-        new Error(`Market data request failed: ${label} unavailable (HTTP ${response.status}${statusText})${detail}`),
+        new Error(`Market data request failed: ${label2} unavailable (HTTP ${response.status}${statusText})${detail}`),
         path,
         response.status,
         "http"
       );
     };
-    buildMarketDataNetworkError = (error48, label, path) => {
+    buildMarketDataNetworkError = (error48, label2, path) => {
       const message = error48 instanceof Error ? error48.message : String(error48 || "unknown error");
       return annotateMarketDataRequestError(Object.assign(
-        new Error(`Market data request failed: ${label} network error (${message})`),
+        new Error(`Market data request failed: ${label2} network error (${message})`),
         { cause: error48, name: error48 instanceof Error ? error48.name : "Error" }
       ), path, null, "network");
     };
-    buildMarketDataResponseBodyError = (error48, label, response, path) => annotateMarketDataRequestError(Object.assign(
-      new Error(`Market data request failed: ${label} response body could not be read (HTTP ${response.status})`),
+    buildMarketDataResponseBodyError = (error48, label2, response, path) => annotateMarketDataRequestError(Object.assign(
+      new Error(`Market data request failed: ${label2} response body could not be read (HTTP ${response.status})`),
       { cause: error48, name: error48 instanceof Error ? error48.name : "Error" }
     ), path, response.status, "response_body");
     isTransientNetworkFetchError = (error48) => {
@@ -51171,10 +51205,10 @@ var init_network_debug = __esm({
     };
     getLatestRuntimeProviderFailureTelemetrySnapshot = (options = {}) => {
       const maxAgeMs = Number.isFinite(Number(options.maxAgeMs)) ? Math.max(0, Number(options.maxAgeMs)) : 5 * 60 * 1e3;
-      const label = typeof options.label === "string" && options.label.trim() ? options.label.trim().toLowerCase() : null;
+      const label2 = typeof options.label === "string" && options.label.trim() ? options.label.trim().toLowerCase() : null;
       const traceId = typeof options.traceId === "string" && options.traceId.trim() ? options.traceId.trim() : null;
       const now = Date.now();
-      const candidates = getRuntimeProviderFailureDebugEntries().filter((entry) => entry.kind === "provider" && entry.outcome === "error").filter((entry) => !traceId || entry.id === traceId).filter((entry) => !label || entry.label.toLowerCase() === label).filter((entry) => Math.abs(now - (entry.completedAt ?? entry.startedAt)) <= maxAgeMs).sort((a, b2) => (b2.completedAt ?? b2.startedAt) - (a.completedAt ?? a.startedAt));
+      const candidates = getRuntimeProviderFailureDebugEntries().filter((entry) => entry.kind === "provider" && entry.outcome === "error").filter((entry) => !traceId || entry.id === traceId).filter((entry) => !label2 || entry.label.toLowerCase() === label2).filter((entry) => Math.abs(now - (entry.completedAt ?? entry.startedAt)) <= maxAgeMs).sort((a, b2) => (b2.completedAt ?? b2.startedAt) - (a.completedAt ?? a.startedAt));
       const latest = candidates[0] ?? null;
       if (!latest) {
         return null;
@@ -52072,6 +52106,288 @@ var init_server_runtime_lease = __esm({
   }
 });
 
+// lib/runtime/hyperliquid-account-mode-contract.ts
+function resolveExactHyperliquidAccountMode(userAbstraction, ...dexEvidence) {
+  const mode = extractCanonicalHyperliquidAccountMode(userAbstraction);
+  if (!mode) {
+    throw new Error("Exact Hyperliquid userAbstraction response is invalid.");
+  }
+  if (mode !== "default" && mode !== "disabled") return mode;
+  if (dexEvidence.length < 1) {
+    throw new Error("Exact Hyperliquid userDexAbstraction response is unavailable.");
+  }
+  return parseExactDexAbstractionEnabled(dexEvidence[0]) ? "dexAbstraction" : mode;
+}
+var UNIFIED_MODE_ALIASES, CANONICAL_ACCOUNT_MODE_ALIASES, EXACT_MODE_KEYS, EXACT_MODE_BOOLEAN_KEYS, isExactTruthyFlag, normalizeCanonicalHyperliquidAccountMode, extractCanonicalHyperliquidAccountMode, parseExactDexAbstractionEnabled, normalizeAccountMode, extractAccountModeFromPayload, extractAccountModeCandidateFromPayload, isUnifiedAccountMode;
+var init_hyperliquid_account_mode_contract = __esm({
+  "lib/runtime/hyperliquid-account-mode-contract.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    UNIFIED_MODE_ALIASES = /* @__PURE__ */ new Set([
+      "unifiedaccount",
+      "dexabstraction",
+      "portfoliomargin",
+      "unified",
+      "pm"
+    ]);
+    CANONICAL_ACCOUNT_MODE_ALIASES = /* @__PURE__ */ new Map([
+      ["default", "default"],
+      ["standard", "default"],
+      ["classic", "default"],
+      ["disabled", "disabled"],
+      ["unifiedaccount", "unifiedAccount"],
+      ["unified", "unifiedAccount"],
+      ["portfoliomargin", "portfolioMargin"],
+      ["pm", "portfolioMargin"],
+      ["dexabstraction", "dexAbstraction"]
+    ]);
+    EXACT_MODE_KEYS = [
+      "accountMode",
+      "account_mode",
+      "accountType",
+      "account_type",
+      "accountUnificationMode",
+      "account_unification_mode",
+      "abstractionMode",
+      "abstraction_mode",
+      "abstraction",
+      "abstractionState",
+      "dexAbstractionState",
+      "marginMode",
+      "state",
+      "mode",
+      "value"
+    ];
+    EXACT_MODE_BOOLEAN_KEYS = [
+      ["unifiedAccount", ["isUnifiedAccount", "unifiedAccount", "isUnified", "unified", "is_unified_account"]],
+      ["portfolioMargin", ["isPortfolioMargin", "portfolioMargin", "isPm", "pm", "is_portfolio_margin"]],
+      ["dexAbstraction", ["isDexAbstraction", "dexAbstraction", "dexAbstractionEnabled", "is_dex_abstraction"]],
+      ["default", ["isClassic", "classic", "isStandard", "standard"]]
+    ];
+    isExactTruthyFlag = (value) => value === true || value === 1 || typeof value === "string" && value.trim().toLowerCase() === "true";
+    normalizeCanonicalHyperliquidAccountMode = (value) => {
+      if (typeof value !== "string") return null;
+      const key = value.trim().replace(/[_\s-]/g, "").toLowerCase();
+      return CANONICAL_ACCOUNT_MODE_ALIASES.get(key) ?? null;
+    };
+    extractCanonicalHyperliquidAccountMode = (payload, depth = 0) => {
+      if (depth > 6) return null;
+      const direct = normalizeCanonicalHyperliquidAccountMode(payload);
+      if (direct) return direct;
+      if (Array.isArray(payload)) {
+        for (const item of payload) {
+          const mode = extractCanonicalHyperliquidAccountMode(item, depth + 1);
+          if (mode) return mode;
+        }
+        return null;
+      }
+      if (!payload || typeof payload !== "object") return null;
+      const source = payload;
+      for (const key of EXACT_MODE_KEYS) {
+        if (!(key in source)) continue;
+        const mode = normalizeCanonicalHyperliquidAccountMode(source[key]);
+        if (mode) return mode;
+      }
+      for (const [mode, keys] of EXACT_MODE_BOOLEAN_KEYS) {
+        for (const key of keys) {
+          if (isExactTruthyFlag(source[key])) return mode;
+        }
+      }
+      for (const value of Object.values(source)) {
+        const mode = extractCanonicalHyperliquidAccountMode(value, depth + 1);
+        if (mode) return mode;
+      }
+      return null;
+    };
+    parseExactDexAbstractionEnabled = (payload) => {
+      if (payload == null || payload === false) return false;
+      if (payload === true) return true;
+      if (typeof payload === "string") {
+        const normalized = payload.trim().toLowerCase();
+        if (normalized === "true") return true;
+        if (normalized === "false") return false;
+      }
+      if (typeof payload === "number" && Number.isFinite(payload)) {
+        if (payload === 1) return true;
+        if (payload === 0) return false;
+      }
+      throw new Error("Exact Hyperliquid userDexAbstraction response is invalid.");
+    };
+    normalizeAccountMode = (mode) => String(mode ?? "").trim().toLowerCase().replace(/[_\s-]/g, "");
+    extractAccountModeFromPayload = (payload) => {
+      const candidate = extractAccountModeCandidateFromPayload(payload);
+      if (candidate && candidate.trim().length > 0) {
+        return candidate;
+      }
+      return "default";
+    };
+    extractAccountModeCandidateFromPayload = (payload) => {
+      if (!payload || typeof payload !== "object") {
+        return null;
+      }
+      const source = payload;
+      if ("accountMode" in source) {
+        return String(source.accountMode ?? "");
+      }
+      if ("account_mode" in source) {
+        return String(source.account_mode ?? "");
+      }
+      return null;
+    };
+    isUnifiedAccountMode = (mode) => UNIFIED_MODE_ALIASES.has(normalizeAccountMode(mode));
+  }
+});
+
+// lib/runtime/hyperliquid-account-contract.ts
+var toNumber, firstNumber, roundTo, canonicalAvailableMargin, STABLE_SPOT_SYMBOLS, spotBalanceValueUsd, normalizeSpotBalancesFromInfoResponse, sumBalanceHoldUsd, sumPositionUnrealizedPnl, resolveTotalUnrealizedPnl, approximatelyEqualAccountValues, buildAccountSummaryFromInfoResponses;
+var init_hyperliquid_account_contract = __esm({
+  "lib/runtime/hyperliquid-account-contract.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_hyperliquid_account_mode_contract();
+    toNumber = (value, fallback = 0) => {
+      const numeric2 = Number(value);
+      return Number.isFinite(numeric2) ? numeric2 : fallback;
+    };
+    firstNumber = (values, fallback = 0) => {
+      for (const value of values) {
+        if (value == null || typeof value === "string" && value.trim() === "") {
+          continue;
+        }
+        const numeric2 = Number(value);
+        if (Number.isFinite(numeric2)) {
+          return numeric2;
+        }
+      }
+      return fallback;
+    };
+    roundTo = (value, digits = 12) => Number(value.toFixed(digits));
+    canonicalAvailableMargin = (accountValue, totalMarginUsed) => Math.max(0, accountValue - totalMarginUsed);
+    STABLE_SPOT_SYMBOLS = /* @__PURE__ */ new Set(["USDC", "USD", "USDT"]);
+    spotBalanceValueUsd = (balance, coin, total) => {
+      const explicit = firstNumber([balance?.value_usd, balance?.usdValue, balance?.usdcValue], Number.NaN);
+      if (Number.isFinite(explicit)) {
+        return explicit;
+      }
+      return STABLE_SPOT_SYMBOLS.has(coin) ? total : 0;
+    };
+    normalizeSpotBalancesFromInfoResponse = (spotResponse) => {
+      const containers = [];
+      if (spotResponse && typeof spotResponse === "object") {
+        containers.push(spotResponse);
+        const keys = ["spotState", "userState", "clearinghouseState", "state", "data"];
+        for (const key of keys) {
+          if (spotResponse[key] && typeof spotResponse[key] === "object") {
+            containers.push(spotResponse[key]);
+          }
+        }
+      }
+      const firstWithBalances = containers.find((container) => Array.isArray(container?.balances));
+      const balances = Array.isArray(firstWithBalances?.balances) ? firstWithBalances.balances : [];
+      return balances.map((balance) => {
+        const coin = String(balance?.coin ?? "").toUpperCase();
+        const total = toNumber(balance?.total, 0);
+        const hold = toNumber(balance?.hold, 0);
+        const available = roundTo(Math.max(0, total - hold));
+        const value_usd = spotBalanceValueUsd(balance, coin, total);
+        return {
+          coin,
+          total,
+          hold,
+          available,
+          value_usd
+        };
+      }).filter((balance) => balance.coin.length > 0);
+    };
+    sumBalanceHoldUsd = (balances) => balances.reduce((acc, balance) => {
+      const hold = toNumber(balance.hold, 0);
+      const total = toNumber(balance.total, 0);
+      const valueUsd = toNumber(balance.value_usd, 0);
+      if (hold <= 0 || total <= 0 || valueUsd <= 0) {
+        return acc;
+      }
+      return acc + Math.max(0, valueUsd * (hold / total));
+    }, 0);
+    sumPositionUnrealizedPnl = (perpsResponse) => {
+      const assetPositions = Array.isArray(perpsResponse?.assetPositions) ? perpsResponse.assetPositions : [];
+      return assetPositions.reduce((total, entry) => {
+        const unrealizedPnl = toNumber(entry?.position?.unrealizedPnl, 0);
+        return total + unrealizedPnl;
+      }, 0);
+    };
+    resolveTotalUnrealizedPnl = (perpsResponse) => {
+      const topLevel = toNumber(perpsResponse?.totalUnrealizedPnl, 0);
+      const positionTotal = sumPositionUnrealizedPnl(perpsResponse);
+      if (Math.abs(topLevel) < 1e-12 && Math.abs(positionTotal) >= 1e-12) {
+        return positionTotal;
+      }
+      return topLevel;
+    };
+    approximatelyEqualAccountValues = (left, right, absoluteToleranceUsd, relativeTolerance) => {
+      const reference = Math.max(Math.abs(left), Math.abs(right), 1);
+      return Math.abs(left - right) <= Math.max(
+        absoluteToleranceUsd,
+        reference * relativeTolerance
+      );
+    };
+    buildAccountSummaryFromInfoResponses = (perpsResponse, spotResponse, options = {}) => {
+      const marginSummary = perpsResponse?.marginSummary ?? {};
+      const perpsAccountValue = toNumber(marginSummary?.accountValue, 0);
+      const total_margin_used = toNumber(marginSummary?.totalMarginUsed, 0);
+      const totalNtlPos = toNumber(marginSummary?.totalNtlPos, 0);
+      const withdrawable = toNumber(perpsResponse?.withdrawable, 0);
+      const maintenance_margin = firstNumber([
+        perpsResponse?.crossMaintenanceMarginUsed,
+        marginSummary?.crossMaintenanceMarginUsed,
+        marginSummary?.totalMaintenanceMargin
+      ], 0);
+      const balances = normalizeSpotBalancesFromInfoResponse(spotResponse);
+      const spotPortfolioValue = balances.reduce((acc, balance) => acc + toNumber(balance.value_usd, 0), 0);
+      const balancesHoldUsd = sumBalanceHoldUsd(balances);
+      const account_mode = extractAccountModeFromPayload(perpsResponse);
+      const crossMarginSummary = perpsResponse?.crossMarginSummary && typeof perpsResponse.crossMarginSummary === "object" ? perpsResponse.crossMarginSummary : null;
+      const crossMarginAccountValue = crossMarginSummary ? toNumber(crossMarginSummary.accountValue, 0) : 0;
+      const normalizedMode = String(account_mode || "").trim().toLowerCase().replace(/[_\s-]/g, "");
+      const isAmbiguousDefaultMode = normalizedMode.length === 0 || normalizedMode === "default";
+      const spotDominatesMinTotalUsd = Number(options.spotDominatesMinTotalUsd ?? options.spot_dominates_min_total_usd);
+      const spotDominatesPerpsMultiplier = Number(options.spotDominatesPerpsMultiplier ?? options.spot_dominates_perps_multiplier);
+      const mirroredAccountValueAbsoluteToleranceUsd = Number(
+        options.mirroredAccountValueAbsoluteToleranceUsd ?? options.mirrored_account_value_absolute_tolerance_usd
+      );
+      const mirroredAccountValueRelativeTolerance = Number(
+        options.mirroredAccountValueRelativeTolerance ?? options.mirrored_account_value_relative_tolerance
+      );
+      const hasSpotDominanceThresholds = Number.isFinite(spotDominatesMinTotalUsd) && spotDominatesMinTotalUsd >= 0 && Number.isFinite(spotDominatesPerpsMultiplier) && spotDominatesPerpsMultiplier >= 0;
+      const hasMirroredAccountValueTolerances = Number.isFinite(mirroredAccountValueAbsoluteToleranceUsd) && mirroredAccountValueAbsoluteToleranceUsd >= 0 && Number.isFinite(mirroredAccountValueRelativeTolerance) && mirroredAccountValueRelativeTolerance >= 0;
+      const spotDominatesPerps = hasSpotDominanceThresholds && spotPortfolioValue >= spotDominatesMinTotalUsd && (perpsAccountValue <= 0 || spotPortfolioValue >= perpsAccountValue * spotDominatesPerpsMultiplier);
+      const ambiguousDefaultLooksUnified = isAmbiguousDefaultMode && spotDominatesPerps;
+      const ambiguousDefaultSpotAlreadyIncludesPerps = ambiguousDefaultLooksUnified && perpsAccountValue > 0 && balancesHoldUsd > 0 && hasMirroredAccountValueTolerances && approximatelyEqualAccountValues(
+        balancesHoldUsd,
+        perpsAccountValue,
+        mirroredAccountValueAbsoluteToleranceUsd,
+        mirroredAccountValueRelativeTolerance
+      );
+      const account_value = isUnifiedAccountMode(account_mode) && crossMarginSummary !== null && crossMarginAccountValue > 0 ? crossMarginAccountValue + spotPortfolioValue : ambiguousDefaultLooksUnified && !ambiguousDefaultSpotAlreadyIncludesPerps ? perpsAccountValue + spotPortfolioValue : Math.max(perpsAccountValue, spotPortfolioValue);
+      return {
+        account_value,
+        total_margin_used,
+        available_margin: roundTo(canonicalAvailableMargin(account_value, total_margin_used)),
+        withdrawable,
+        cross_margin_ratio: account_value > 0 ? maintenance_margin / account_value : 0,
+        maintenance_margin,
+        cross_account_leverage: account_value > 0 ? totalNtlPos / account_value : 0,
+        total_unrealized_pnl: resolveTotalUnrealizedPnl(perpsResponse),
+        account_mode,
+        balances
+      };
+    };
+  }
+});
+
 // lib/runtime/order-identity.ts
 var clientOrderIdForMutation, clientDecisionMutationId;
 var init_order_identity = __esm({
@@ -52147,7 +52463,7 @@ var init_hyperliquid_order_status = __esm({
 });
 
 // lib/runtime/hyperliquid-public-read.ts
-var policy, weights, recoveryPolicy, budgets, unpersistedBudgets, cache, pending2, PREFIX, priorityRank, createHyperliquidPublicPriorityScope, promoteHyperliquidPublicPriority, abortError2, checkAbort, wait, waitUnlessPromoted, storage, loadBudget, saveBudget, withBudgetLock, HyperliquidPublicReadError, getHyperliquidPublicReadBudget, cooldownError, recoveryWaitError, nonTradingWeightCap, nonTradingWaitMs, fallbackDelayMs, admit, cooldown, finishHyperliquidRecoveryRequest, assertHyperliquidRecoveryDispatch, cacheTtlMs, eligibleCache, reserveHyperliquidPublicReads, releaseHyperliquidPublicReadReservation, admitHyperliquidExchangeRequest, recordHyperliquidExchangeResponse, readHyperliquidPublicInfo;
+var policy, weights, recoveryPolicy, budgets, unpersistedBudgets, cache, pending2, PREFIX, priorityRank, createHyperliquidPublicPriorityScope, promoteHyperliquidPublicPriority, hostTransport, abortError2, checkAbort, wait, waitUnlessPromoted, storage, loadBudget, saveBudget, withBudgetLock, HyperliquidPublicReadError, getHyperliquidPublicReadBudget, cooldownError, recoveryWaitError, nonTradingWeightCap, nonTradingWaitMs, fallbackDelayMs, admit, cooldown, finishHyperliquidRecoveryRequest, assertHyperliquidRecoveryDispatch, validateHyperliquidRecoveryDispatch, cacheTtlMs, eligibleCache, reserveHyperliquidPublicReads, releaseHyperliquidPublicReadReservation, admitHyperliquidExchangeRequest, recordHyperliquidExchangeResponse, readHyperliquidPublicInfo;
 var init_hyperliquid_public_read = __esm({
   "lib/runtime/hyperliquid-public-read.ts"() {
     "use strict";
@@ -52171,6 +52487,7 @@ var init_hyperliquid_public_read = __esm({
       scope.value = priority;
       scope.followers?.forEach((promote) => promote(priority));
     };
+    hostTransport = null;
     abortError2 = (signal) => getSanitizedRuntimeAbortReason(signal, "Aborted");
     checkAbort = (signal) => {
       if (signal?.aborted) throw abortError2(signal);
@@ -52308,6 +52625,10 @@ var init_hyperliquid_public_read = __esm({
       const weight = weightOverride ?? weights[requestType] ?? policy.default_request_weight;
       const ticket = crypto.randomUUID();
       const deadline = Math.min(deadlineMs ?? Infinity, Date.now() + recoveryPolicy.recovery_queue_wait_seconds * 1e3);
+      if (hostTransport) {
+        const permit = await hostTransport.admission.acquire({ requestType, weight, priority: priority.value, deadlineMs: deadline, signal });
+        return { ...permit, endpoint: apiUrl, fleet: true };
+      }
       let admitted = false;
       try {
         for (; ; ) {
@@ -52378,7 +52699,11 @@ var init_hyperliquid_public_read = __esm({
         });
       }
     };
-    cooldown = async (apiUrl, retryAfter) => {
+    cooldown = async (apiUrl, retryAfter, requestType) => {
+      if (hostTransport) {
+        await hostTransport.admission.record429(retryAfter, requestType);
+        return;
+      }
       const key = `${PREFIX}${apiUrl}`;
       await withBudgetLock(key, void 0, () => {
         const now = Date.now();
@@ -52404,6 +52729,11 @@ var init_hyperliquid_public_read = __esm({
     };
     finishHyperliquidRecoveryRequest = async (permit, outcome) => {
       if (!permit) return;
+      if (permit.fleet) {
+        if (!hostTransport) throw new Error("A fleet Hyperliquid permit needs the host transport that issued it.");
+        await hostTransport.admission.finish(permit, outcome);
+        return;
+      }
       const key = `${PREFIX}${permit.endpoint}`;
       await withBudgetLock(key, void 0, () => {
         const budget = loadBudget(key);
@@ -52440,6 +52770,15 @@ var init_hyperliquid_public_read = __esm({
       }
       if (!permit && budget.recovery) throw recoveryWaitError(requestType);
     };
+    validateHyperliquidRecoveryDispatch = async (endpoint, permit, requestType) => {
+      if (permit?.fleet) {
+        if (!hostTransport) throw recoveryWaitError(requestType);
+        await hostTransport.admission.validate(permit, requestType);
+        return;
+      }
+      if (hostTransport) throw recoveryWaitError(requestType);
+      assertHyperliquidRecoveryDispatch(endpoint, permit, requestType);
+    };
     cacheTtlMs = (body, options) => {
       const requestType = String(body.type);
       return (["meta", "spotMeta", "perpDexs"].includes(requestType) ? policy.metadata_ttl_seconds : requestType === "userFees" ? policy.user_fees_ttl_seconds : options.cacheAccountMode && ["userAbstraction", "userDexAbstraction"].includes(requestType) ? policy.account_mode_ttl_seconds : 0) * 1e3;
@@ -52469,7 +52808,7 @@ var init_hyperliquid_public_read = __esm({
       return admit(endpoint.replace(/\/$/, ""), "exchange", signal, weight, void 0, createHyperliquidPublicPriorityScope(priority));
     };
     recordHyperliquidExchangeResponse = async (endpoint, response, permit) => {
-      if (response.status === 429) await cooldown(endpoint.replace(/\/$/, ""), response.headers.get("Retry-After"));
+      if (response.status === 429) await cooldown(endpoint.replace(/\/$/, ""), response.headers.get("Retry-After"), "exchange");
       await finishHyperliquidRecoveryRequest(permit, response.status < 400 ? "success" : "failure");
     };
     readHyperliquidPublicInfo = async (endpoint, body, options) => {
@@ -52503,6 +52842,7 @@ var init_hyperliquid_public_read = __esm({
       let settled;
       let acquiring = false;
       let observedRateLimit;
+      let privateRouteUsed = false;
       let pendingPhase = null;
       const setPendingPhase = (next) => {
         if (next === pendingPhase) return;
@@ -52547,14 +52887,18 @@ var init_hyperliquid_public_read = __esm({
           }), priority });
         }
         if (options.reservation?.closed) throw new DOMException("Hyperliquid account read was cancelled.", "AbortError");
-        acquiring = true;
-        setPendingPhase("admission");
-        permit = await admit(apiUrl, requestType, signal, void 0, deadline, priority);
-        acquiring = false;
-        armDeadline(Math.min(deadline, permit?.expiresAt ?? Infinity));
-        checkAbort(signal);
-        if (options.reservation?.closed) throw new DOMException("Hyperliquid account read was cancelled.", "AbortError");
-        assertHyperliquidRecoveryDispatch(apiUrl, permit, requestType);
+        const privateRoute = await hostTransport?.routeInfo?.(body, priority.value, deadline) ?? null;
+        privateRouteUsed = privateRoute !== null;
+        if (!privateRoute) {
+          acquiring = true;
+          setPendingPhase("admission");
+          permit = await admit(apiUrl, requestType, signal, void 0, deadline, priority);
+          acquiring = false;
+          armDeadline(Math.min(deadline, permit?.expiresAt ?? Infinity));
+          checkAbort(signal);
+          if (options.reservation?.closed) throw new DOMException("Hyperliquid account read was cancelled.", "AbortError");
+          await validateHyperliquidRecoveryDispatch(apiUrl, permit, requestType);
+        }
         outcome = "failure";
         let transportAborted;
         let response;
@@ -52567,16 +52911,16 @@ var init_hyperliquid_public_read = __esm({
           });
           const transport = (async () => {
             setPendingPhase("transport");
-            const received = await fetch(`${apiUrl}/info`, {
+            const received = await fetch(`${privateRoute?.url.replace(/\/$/, "") ?? apiUrl}/info`, {
               method: "POST",
-              headers: { "Content-Type": "application/json" },
+              headers: { ...privateRoute?.headers, "Content-Type": "application/json" },
               body: JSON.stringify(body),
               signal
             });
             checkAbort(signal);
             if (received.status === 429) {
               observedRateLimit = new HyperliquidPublicReadError("public_rate_limited", "Hyperliquid public API returned HTTP 429.", requestType, 429);
-              await cooldown(apiUrl, received.headers.get("Retry-After"));
+              if (!privateRoute) await cooldown(apiUrl, received.headers.get("Retry-After"), requestType);
               throw observedRateLimit;
             }
             let receivedText;
@@ -52623,6 +52967,13 @@ var init_hyperliquid_public_read = __esm({
           outcome = "cancelled";
           throw abortError2(options.signal);
         }
+        const failedStatus = error48?.status;
+        if (outcome === "failure" && privateRouteUsed && !(typeof failedStatus === "number" && failedStatus < 500)) {
+          try {
+            hostTransport?.onPrivateInfoFailure?.(body);
+          } catch {
+          }
+        }
         if (acquiring && signal.aborted && signal.reason?.name === "TimeoutError") throw recoveryWaitError(requestType);
         if (error48 instanceof HyperliquidPublicReadError) throw error48;
         if (error48 instanceof TypeError) throw new HyperliquidPublicReadError("public_network_error", "Hyperliquid public request network failure.", requestType);
@@ -52646,6 +52997,32 @@ var init_hyperliquid_public_read = __esm({
   }
 });
 
+// lib/runtime/hyperliquid-exchange-rejections.ts
+var listeners, onHyperliquidExchangeRejection, emitHyperliquidExchangeRejection;
+var init_hyperliquid_exchange_rejections = __esm({
+  "lib/runtime/hyperliquid-exchange-rejections.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    listeners = /* @__PURE__ */ new Set();
+    onHyperliquidExchangeRejection = (listener) => {
+      listeners.add(listener);
+      return () => {
+        listeners.delete(listener);
+      };
+    };
+    emitHyperliquidExchangeRejection = (message) => {
+      for (const listener of listeners) {
+        try {
+          listener(message);
+        } catch {
+        }
+      }
+    };
+  }
+});
+
 // lib/runtime/hyperliquid-market-symbol.ts
 var configuredCaseSensitiveSymbols, isHyperliquidSpotSymbol, normalizeCaseSensitiveSymbols, configureHyperliquidMarketSymbolCasing, canonicalBaseSymbol, normalizeHyperliquidMarketSymbol, getHyperliquidMarketDex;
 var init_hyperliquid_market_symbol = __esm({
@@ -54091,7 +54468,7 @@ function getNumber(value, name) {
   }
   assertArgument(false, "invalid numeric value", name || "value", value);
 }
-function toNumber(value) {
+function toNumber2(value) {
   return getNumber(toBigInt(value));
 }
 function toBeHex(_value, _width) {
@@ -56513,7 +56890,7 @@ var init_abstract_coder = __esm({
         return toBigInt(this.readBytes(WordSize));
       }
       readIndex() {
-        return toNumber(this.readBytes(WordSize));
+        return toNumber2(this.readBytes(WordSize));
       }
     };
   }
@@ -63801,8 +64178,8 @@ function split2(name, nf, ef) {
   if (!name) return [];
   init();
   let offset = 0;
-  return name.split(STOP_CH).map((label) => {
-    let input = explode_cp(label);
+  return name.split(STOP_CH).map((label2) => {
+    let input = explode_cp(label2);
     let info = {
       input,
       offset
@@ -69477,8 +69854,8 @@ var init_contract = __esm({
         }
         const { subs } = getInternal(this);
         let total = 0;
-        for (const { listeners: listeners2 } of subs.values()) {
-          total += listeners2.length;
+        for (const { listeners: listeners3 } of subs.values()) {
+          total += listeners3.length;
         }
         return total;
       }
@@ -69496,8 +69873,8 @@ var init_contract = __esm({
         }
         const { subs } = getInternal(this);
         let result = [];
-        for (const { listeners: listeners2 } of subs.values()) {
-          result = result.concat(listeners2.map(({ listener }) => listener));
+        for (const { listeners: listeners3 } of subs.values()) {
+          result = result.concat(listeners3.map(({ listener }) => listener));
         }
         return result;
       }
@@ -72334,8 +72711,8 @@ var init_abstract_provider = __esm({
           return sub.listeners.length;
         }
         let total = 0;
-        for (const { listeners: listeners2 } of this.#subs.values()) {
-          total += listeners2.length;
+        for (const { listeners: listeners3 } of this.#subs.values()) {
+          total += listeners3.length;
         }
         return total;
       }
@@ -72348,8 +72725,8 @@ var init_abstract_provider = __esm({
           return sub.listeners.map(({ listener }) => listener);
         }
         let result = [];
-        for (const { listeners: listeners2 } of this.#subs.values()) {
-          result = result.concat(listeners2.map(({ listener }) => listener));
+        for (const { listeners: listeners3 } of this.#subs.values()) {
+          result = result.concat(listeners3.map(({ listener }) => listener));
         }
         return result;
       }
@@ -82950,7 +83327,7 @@ __export(ethers_exports, {
   toBeArray: () => toBeArray,
   toBeHex: () => toBeHex,
   toBigInt: () => toBigInt,
-  toNumber: () => toNumber,
+  toNumber: () => toNumber2,
   toQuantity: () => toQuantity,
   toTwos: () => toTwos,
   toUtf8Bytes: () => toUtf8Bytes,
@@ -83168,7 +83545,7 @@ __export(lib_exports, {
   toBeArray: () => toBeArray,
   toBeHex: () => toBeHex,
   toBigInt: () => toBigInt,
-  toNumber: () => toNumber,
+  toNumber: () => toNumber2,
   toQuantity: () => toQuantity,
   toTwos: () => toTwos,
   toUtf8Bytes: () => toUtf8Bytes,
@@ -83871,9 +84248,9 @@ var init_hyperliquid_signer = __esm({
         { name: "connectionId", type: "bytes32" }
       ]
     };
-    assertUint64 = (value, label) => {
+    assertUint64 = (value, label2) => {
       if (!Number.isInteger(value) || value < 0) {
-        throw new Error(`${label} must be a non-negative integer.`);
+        throw new Error(`${label2} must be a non-negative integer.`);
       }
     };
     concatBytes3 = (...parts) => {
@@ -83898,10 +84275,10 @@ var init_hyperliquid_signer = __esm({
       }
       return bytes3;
     };
-    hexToBytes2 = (value, label) => {
+    hexToBytes2 = (value, label2) => {
       const normalized = value.trim().replace(/^0x/i, "");
       if (!normalized || normalized.length % 2 !== 0 || /[^0-9a-f]/i.test(normalized)) {
-        throw new Error(`Invalid ${label}.`);
+        throw new Error(`Invalid ${label2}.`);
       }
       const bytes3 = new Uint8Array(normalized.length / 2);
       for (let index = 0; index < normalized.length; index += 2) {
@@ -84130,19 +84507,21 @@ var init_hyperliquid_signer = __esm({
 });
 
 // lib/runtime/hyperliquid-client.ts
-var HyperliquidExchangeRejectionError, durableMutationAuthorityArgs, assertFreshPreparedExecutionContext, normalizeSymbol, HYPERLIQUID_NONCE_STORAGE_KEY, HYPERLIQUID_NONCE_LOCK_NAME, lastGeneratedNonce, readBrowserStoredHyperliquidNonce, writeBrowserStoredHyperliquidNonce, browserNonceCoordinator, allocateHyperliquidNonce, generateHyperliquidNonce, normalizeDecimalString, HYPERLIQUID_PRICE_SIGNIFICANT_FIGURES, HYPERLIQUID_INTEGER_PRICE_MINIMUM, shortestDecimalParts, formatHyperliquidPerpPriceGrid, formatHyperliquidTriggerPriceWire, hyperliquidOrderPriceRounding, formatHyperliquidOrderPriceWire, countSignificantDigits, countDecimalPlaces, validateHyperliquidPerpPriceWire, validateHyperliquidSizeWire, formatSizeWire, inferApiUrl, inferIsTestnet, postHyperliquidInfoRead, postHyperliquidInfo, fetchBrowserHyperliquidInfoPayload, fetchBrowserHyperliquidInfoText, toFiniteNumber, OPEN_ORDER_NUMERIC_STRING, OPEN_ORDER_ID_STRING, parseCanonicalOpenOrderId, parseOpenOrderFiniteNumber, parseOpenOrderPositiveNumber, parseOpenOrderPresentationNumber, readOpenOrderField, firstFiniteNumber, parseFundingUsdcFromInfoPosition, isExchangeIsolatedOnly, computeHip3AssetId, getPerpDexIndexMap, buildAssetInfosFromMetaResponse, requireWalletAddress, assertPositiveInteger, assertPositiveNumber, normalizeOrderSide, normalizeHyperliquidClientOrderId, resolveAssets, findResolvedAsset, normalizeExecutionAssetMetadata, resolveHyperliquidAsset, resolveHyperliquidAssetIndex, decimalUnits, quantizeHyperliquidOrderSizeValue, finitePositive, readDevicePrivateExecutionContext, quantizeHyperliquidOrderSize, fetchBrowserAvailableAssets, fetchBrowserAllMids, fetchBrowserSymbolMidPrice, fetchBrowserOpenOrders, parseCanonicalHyperliquidOrderStatusEvidence, fetchBrowserOrderStatusEvidence, fetchBrowserUserRole, fetchBrowserAccountState, fetchBrowserPosition, buildHyperliquidOrderWire, buildHyperliquidTriggerOrderWire, signHyperliquidPayload, signHyperliquidPreparedAction, buildHyperliquidCancelPayload, buildHyperliquidUpdateLeveragePayload, buildHyperliquidMarketOrderPayload, buildHyperliquidLimitOrderPayload, buildHyperliquidTriggerOrderPayload, buildHyperliquidOrderBatchPayload, buildHyperliquidModifyOrderPayload, extractHyperliquidExchangeError, resolveHyperliquidTriggerAcknowledgements, isDefinitiveHyperliquidExchangeResponse, extractDefinitiveHyperliquidOrderId, CANONICAL_POSITIVE_DECIMAL_PATTERN, extractCanonicalHyperliquidOrderStateAcknowledgement, extractCanonicalHyperliquidOrderStateAcknowledgements, extractCanonicalHyperliquidFilledOrderAcknowledgement, extractDefinitiveHyperliquidOrderMemberResults, buildHyperliquidOrderDiagnostics, loadClientExecutionReferenceEvidence, sha256Hex, extractSignedPayloadClientOrderId, extractSignedPayloadMutationCorrelation, assertDurableMutationMatchesSignedAction, exchangeRejectionReason, exchangeActionPriority, submitHyperliquidExchangePayload;
+var HyperliquidExchangeRejectionError, durableMutationAuthorityArgs, assertFreshPreparedExecutionContext, normalizeSymbol, HYPERLIQUID_NONCE_STORAGE_KEY, HYPERLIQUID_NONCE_LOCK_NAME, lastGeneratedNonce, readBrowserStoredHyperliquidNonce, writeBrowserStoredHyperliquidNonce, browserNonceCoordinator, allocateHyperliquidNonce, hostNonceAllocator, allocateActionNonce, generateHyperliquidNonce, normalizeDecimalString, HYPERLIQUID_PRICE_SIGNIFICANT_FIGURES, HYPERLIQUID_INTEGER_PRICE_MINIMUM, shortestDecimalParts, formatHyperliquidPerpPriceGrid, formatHyperliquidTriggerPriceWire, hyperliquidOrderPriceRounding, formatHyperliquidOrderPriceWire, countSignificantDigits, countDecimalPlaces, validateHyperliquidPerpPriceWire, validateHyperliquidSizeWire, formatSizeWire, inferApiUrl, inferIsTestnet, postHyperliquidInfoRead, postHyperliquidInfo, fetchBrowserHyperliquidInfoPayload, fetchBrowserHyperliquidInfoText, toFiniteNumber, OPEN_ORDER_NUMERIC_STRING, OPEN_ORDER_ID_STRING, parseCanonicalOpenOrderId, parseOpenOrderFiniteNumber, parseOpenOrderPositiveNumber, parseOpenOrderPresentationNumber, readOpenOrderField, firstFiniteNumber, parseFundingUsdcFromInfoPosition, isExchangeIsolatedOnly, computeHip3AssetId, getPerpDexIndexMap, buildAssetInfosFromMetaResponse, requireWalletAddress, assertPositiveInteger, assertPositiveNumber, normalizeOrderSide, normalizeHyperliquidClientOrderId, resolveAssets, findResolvedAsset, normalizeExecutionAssetMetadata, resolveHyperliquidAsset, resolveHyperliquidAssetIndex, decimalUnits, quantizeHyperliquidOrderSizeValue, hyperliquidSignedSizeMatchesRequestedSize, finitePositive, readDevicePrivateExecutionContext, quantizeHyperliquidOrderSize, fetchBrowserAvailableAssets, fetchBrowserAllMids, fetchBrowserSymbolMidPrice, fetchBrowserOpenOrders, parseCanonicalHyperliquidOrderStatusEvidence, fetchBrowserOrderStatusEvidence, fetchBrowserUserRole, fetchBrowserAccountState, fetchBrowserPosition, buildHyperliquidOrderWire, buildHyperliquidTriggerOrderWire, signHyperliquidPayload, signHyperliquidPreparedAction, buildHyperliquidCancelPayload, buildHyperliquidUpdateLeveragePayload, buildHyperliquidMarketOrderPayload, buildHyperliquidLimitOrderPayload, buildHyperliquidTriggerOrderPayload, buildHyperliquidOrderBatchPayload, buildHyperliquidModifyOrderPayload, extractHyperliquidExchangeError, resolveHyperliquidTriggerAcknowledgements, isDefinitiveHyperliquidExchangeResponse, extractDefinitiveHyperliquidOrderId, CANONICAL_POSITIVE_DECIMAL_PATTERN, extractCanonicalHyperliquidOrderStateAcknowledgement, extractCanonicalHyperliquidOrderStateAcknowledgements, extractCanonicalHyperliquidFilledOrderAcknowledgement, extractDefinitiveHyperliquidOrderMemberResults, buildHyperliquidOrderDiagnostics, loadClientExecutionReferenceEvidence, sha256Hex, extractSignedPayloadClientOrderId, extractSignedPayloadMutationCorrelation, assertDurableMutationMatchesSignedAction, exchangeRejectionReason, exchangeActionPriority, submitHyperliquidExchangePayload;
 var init_hyperliquid_client = __esm({
   "lib/runtime/hyperliquid-client.ts"() {
     "use strict";
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
+    init_hyperliquid_account_contract();
     init_order_identity();
     init_hyperliquid_order_status();
     init_runtime_policy_generated2();
     init_hyperliquid_public_read();
     init_api2();
     init_abort();
+    init_hyperliquid_exchange_rejections();
     init_hyperliquid_market_symbol();
     init_network_debug();
     init_runtime_redaction();
@@ -84237,6 +84616,14 @@ var init_hyperliquid_client = __esm({
       coordinator.write?.(lastGeneratedNonce);
       return lastGeneratedNonce;
     };
+    hostNonceAllocator = null;
+    allocateActionNonce = async (input, apiUrl) => {
+      if (hostNonceAllocator) {
+        if (!input.signingKey) throw new Error("A fleet-allocated Hyperliquid nonce needs the action's signing key.");
+        return hostNonceAllocator({ signingKey: input.signingKey, apiUrl });
+      }
+      return generateHyperliquidNonce(input.nonceCoordinator);
+    };
     generateHyperliquidNonce = async (coordinator) => {
       const resolvedCoordinator = coordinator ?? browserNonceCoordinator();
       if (resolvedCoordinator.withLock) {
@@ -84362,12 +84749,12 @@ var init_hyperliquid_client = __esm({
       throw new Error("Missing client runtime Hyperliquid API URL.");
     };
     inferIsTestnet = (apiUrl) => apiUrl.toLowerCase().includes("testnet");
-    postHyperliquidInfoRead = async (input, body, label, includeBodyText = false) => {
+    postHyperliquidInfoRead = async (input, body, label2, includeBodyText = false) => {
       const apiUrl = inferApiUrl(input);
       const requestUrl = `${apiUrl.replace(/\/$/, "")}/info`;
       const trace = startRuntimeNetworkDebugTrace({
         kind: "exchange",
-        label,
+        label: label2,
         method: "POST",
         url: requestUrl
       });
@@ -84385,10 +84772,10 @@ var init_hyperliquid_client = __esm({
         throw sanitizedError;
       }
     };
-    postHyperliquidInfo = async (input, body, label) => (await postHyperliquidInfoRead(input, body, label)).payload;
-    fetchBrowserHyperliquidInfoPayload = (input, body, label) => postHyperliquidInfo(input, body, label);
-    fetchBrowserHyperliquidInfoText = async (input, body, label) => {
-      const { bodyText } = await postHyperliquidInfoRead(input, body, label, true);
+    postHyperliquidInfo = async (input, body, label2) => (await postHyperliquidInfoRead(input, body, label2)).payload;
+    fetchBrowserHyperliquidInfoPayload = (input, body, label2) => postHyperliquidInfo(input, body, label2);
+    fetchBrowserHyperliquidInfoText = async (input, body, label2) => {
+      const { bodyText } = await postHyperliquidInfoRead(input, body, label2, true);
       if (typeof bodyText !== "string") throw new Error("Hyperliquid returned no response text.");
       return bodyText;
     };
@@ -84558,14 +84945,14 @@ var init_hyperliquid_client = __esm({
       }
       return normalized;
     };
-    assertPositiveInteger = (value, label) => {
+    assertPositiveInteger = (value, label2) => {
       if (!Number.isInteger(value) || value <= 0) {
-        throw new Error(`${label} must be a positive integer.`);
+        throw new Error(`${label2} must be a positive integer.`);
       }
     };
-    assertPositiveNumber = (value, label) => {
+    assertPositiveNumber = (value, label2) => {
       if (!Number.isFinite(value) || value <= 0) {
-        throw new Error(`${label} must be a positive number.`);
+        throw new Error(`${label2} must be a positive number.`);
       }
     };
     normalizeOrderSide = (value) => {
@@ -84702,6 +85089,17 @@ var init_hyperliquid_client = __esm({
       const units = decimalUnits(value, decimals, roundingMode);
       return units / 10 ** decimals;
     };
+    hyperliquidSignedSizeMatchesRequestedSize = (requestedSize, sizeDecimals, signedSize) => {
+      if (!Number.isFinite(requestedSize) || requestedSize <= 0 || !Number.isFinite(signedSize) || signedSize <= 0 || !Number.isInteger(sizeDecimals) || sizeDecimals < 0) {
+        return false;
+      }
+      const tolerance = 10 ** -(sizeDecimals + 4);
+      const candidates = [
+        quantizeHyperliquidOrderSizeValue(requestedSize, sizeDecimals, "nearest"),
+        Number(requestedSize.toFixed(sizeDecimals))
+      ];
+      return candidates.some((candidate) => candidate > 0 && Math.abs(candidate - signedSize) <= tolerance);
+    };
     finitePositive = (value) => {
       const parsed = Number(value);
       return typeof value !== "boolean" && value !== null && value !== "" && Number.isFinite(parsed) && parsed > 0 ? parsed : null;
@@ -85210,7 +85608,7 @@ var init_hyperliquid_client = __esm({
         accountSummary: {
           account_value: accountValue,
           total_margin_used: totalMarginUsed,
-          available_margin: Math.max(0, accountValue - totalMarginUsed),
+          available_margin: canonicalAvailableMargin(accountValue, totalMarginUsed),
           withdrawable,
           cross_margin_ratio: accountValue > 0 ? maintenanceMargin / accountValue : 0,
           maintenance_margin: maintenanceMargin,
@@ -85231,7 +85629,8 @@ var init_hyperliquid_client = __esm({
     buildHyperliquidOrderWire = async (input, tif, price, priceKind) => {
       const { asset_index: assetIndex, sz_decimals: sizeDecimals } = await resolveHyperliquidAsset(input);
       const side = normalizeOrderSide(input.side);
-      const roundedSize = Number(input.size.toFixed(sizeDecimals));
+      assertPositiveNumber(input.size, "Hyperliquid order size");
+      const roundedSize = quantizeHyperliquidOrderSizeValue(input.size, sizeDecimals, "nearest");
       assertPositiveNumber(roundedSize, "Hyperliquid order size");
       const priceWire = formatHyperliquidOrderPriceWire(price, sizeDecimals, side, priceKind);
       const sizeWire = formatSizeWire(roundedSize, sizeDecimals);
@@ -85259,7 +85658,7 @@ var init_hyperliquid_client = __esm({
       assertPositiveNumber(input.limitPrice, "Hyperliquid trigger limit price");
       const { asset_index: assetIndex, sz_decimals: sizeDecimals } = await resolveHyperliquidAsset(input);
       const side = normalizeOrderSide(input.side);
-      const roundedSize = Number(input.size.toFixed(sizeDecimals));
+      const roundedSize = quantizeHyperliquidOrderSizeValue(input.size, sizeDecimals, "nearest");
       assertPositiveNumber(roundedSize, "Hyperliquid trigger order size");
       const triggerPriceWire = formatHyperliquidTriggerPriceWire(input.triggerPrice, sizeDecimals);
       const limitPriceWire = input.limitPrice === input.triggerPrice ? triggerPriceWire : formatHyperliquidOrderPriceWire(input.limitPrice, sizeDecimals, side, "limit");
@@ -85295,7 +85694,7 @@ var init_hyperliquid_client = __esm({
     signHyperliquidPayload = async (input, action) => {
       const apiUrl = inferApiUrl(input);
       const { signHyperliquidAction: signHyperliquidAction2 } = await Promise.resolve().then(() => (init_hyperliquid_signer(), hyperliquid_signer_exports));
-      const nonce = input.nonce ?? await generateHyperliquidNonce(input.nonceCoordinator);
+      const nonce = input.nonce ?? await allocateActionNonce(input, apiUrl);
       const expiresAfter = input.expiresAfterSeconds == null ? null : nonce + input.expiresAfterSeconds * 1e3;
       const signed2 = await signHyperliquidAction2({
         privateKey: input.signingKey,
@@ -85319,7 +85718,7 @@ var init_hyperliquid_client = __esm({
       }
       const apiUrl = inferApiUrl(input);
       const { signHyperliquidAction: signHyperliquidAction2 } = await Promise.resolve().then(() => (init_hyperliquid_signer(), hyperliquid_signer_exports));
-      const nonce = await generateHyperliquidNonce(input.nonceCoordinator);
+      const nonce = await allocateActionNonce(input, apiUrl);
       const expiresAfter = nonce + input.expiresAfterSeconds * 1e3;
       const signed2 = await signHyperliquidAction2({
         privateKey: input.signingKey,
@@ -85347,7 +85746,7 @@ var init_hyperliquid_client = __esm({
       const apiUrl = inferApiUrl(input);
       const assetIndex = await resolveHyperliquidAssetIndex(input);
       const { signHyperliquidAction: signHyperliquidAction2 } = await Promise.resolve().then(() => (init_hyperliquid_signer(), hyperliquid_signer_exports));
-      const nonce = input.nonce ?? await generateHyperliquidNonce(input.nonceCoordinator);
+      const nonce = input.nonce ?? await allocateActionNonce(input, apiUrl);
       const expiresAfter = input.expiresAfterSeconds == null ? null : nonce + input.expiresAfterSeconds * 1e3;
       const action = clientOrderId != null ? {
         type: "cancelByCloid",
@@ -85377,7 +85776,7 @@ var init_hyperliquid_client = __esm({
       const apiUrl = inferApiUrl(input);
       const asset = await resolveHyperliquidAsset(input);
       const { signHyperliquidAction: signHyperliquidAction2 } = await Promise.resolve().then(() => (init_hyperliquid_signer(), hyperliquid_signer_exports));
-      const nonce = input.nonce ?? await generateHyperliquidNonce(input.nonceCoordinator);
+      const nonce = input.nonce ?? await allocateActionNonce(input, apiUrl);
       const expiresAfter = input.expiresAfterSeconds == null ? null : nonce + input.expiresAfterSeconds * 1e3;
       const leverage = Math.max(1, Math.min(asset.max_leverage, Math.trunc(input.leverage)));
       const isCross = isExchangeIsolatedOnly(asset) ? false : input.isCross !== false;
@@ -86204,7 +86603,7 @@ var init_hyperliquid_client = __esm({
             try {
               recoveryPermit = await admitHyperliquidExchangeRequest(apiUrl, input.payload.action, input.signal, input.publicRequestPriority);
               assertFreshPreparedExecutionContext(input.preparedContext);
-              assertHyperliquidRecoveryDispatch(apiUrl, recoveryPermit, "exchange");
+              await validateHyperliquidRecoveryDispatch(apiUrl, recoveryPermit, "exchange");
             } catch (preparedContextError) {
               await settleDurableMutation("rejected");
               if (isAbortLikeError(preparedContextError) || preparedContextError instanceof HyperliquidPublicReadError) throw preparedContextError;
@@ -86295,6 +86694,7 @@ var init_hyperliquid_client = __esm({
             }
             const exchangeError = extractHyperliquidExchangeError(payload);
             if (exchangeError) {
+              emitHyperliquidExchangeRejection(String(exchangeError.message ?? ""));
               await settleDurableMutation(
                 exchangeError.partial ? "transport_ambiguous" : "rejected",
                 null,
@@ -87268,6 +87668,81 @@ async function adoptClientProtectiveLegs(profileId, payload, requiredRuntimeSess
     { ...authority.requestOptions, signal: payload.signal }
   );
 }
+async function claimServerHostExecution(profileId, payload, signal, requiredRuntimeSessionId, explicitRuntimeLeaseToken, explicitRuntimeDeviceId, explicitSchedulerInstanceId) {
+  const authority = resolveClientExchangeMutationAuthority(
+    profileId,
+    requiredRuntimeSessionId,
+    explicitRuntimeLeaseToken,
+    explicitRuntimeDeviceId,
+    explicitSchedulerInstanceId
+  );
+  return postClientRuntime(
+    "/runtime/execution-claim",
+    authority.numericProfileId,
+    JSON.stringify({
+      ...clientExchangeMutationAuthorityBody(authority),
+      cycle_id: payload.cycleId ?? null,
+      symbol: payload.symbol,
+      intent: payload.intent,
+      side: payload.side,
+      requested_units: payload.requestedUnits,
+      reduce_only: payload.reduceOnly,
+      margin_mode: payload.marginMode ?? null,
+      last_price: payload.lastPrice
+    }),
+    { ...authority.requestOptions, signal }
+  );
+}
+async function recordServerHostExecutionAudit(profileId, payload, signal, requiredRuntimeSessionId, explicitRuntimeLeaseToken, explicitRuntimeDeviceId, explicitSchedulerInstanceId) {
+  const authority = resolveClientExchangeMutationAuthority(
+    profileId,
+    requiredRuntimeSessionId,
+    explicitRuntimeLeaseToken,
+    explicitRuntimeDeviceId,
+    explicitSchedulerInstanceId
+  );
+  return postClientRuntime(
+    "/runtime/execution-audit",
+    authority.numericProfileId,
+    JSON.stringify({
+      ...clientExchangeMutationAuthorityBody(authority),
+      audit_id: payload.auditId,
+      cycle_id: payload.cycleId ?? null,
+      symbol: payload.symbol,
+      intent: payload.intent,
+      side: payload.side,
+      requested_units: payload.requestedUnits,
+      reduce_only: payload.reduceOnly,
+      last_price: payload.lastPrice,
+      status: payload.status,
+      reason_code: payload.reasonCode,
+      order_id: payload.orderId ?? null
+    }),
+    { ...authority.requestOptions, signal }
+  );
+}
+async function checkServerHostExecutionCapacity(profileId, plans, signal, requiredRuntimeSessionId, explicitRuntimeLeaseToken, explicitRuntimeDeviceId, explicitSchedulerInstanceId) {
+  const authority = resolveClientExchangeMutationAuthority(
+    profileId,
+    requiredRuntimeSessionId,
+    explicitRuntimeLeaseToken,
+    explicitRuntimeDeviceId,
+    explicitSchedulerInstanceId
+  );
+  const answer = await postClientRuntime(
+    "/runtime/execution-capacity",
+    authority.numericProfileId,
+    JSON.stringify({
+      ...clientExchangeMutationAuthorityBody(authority),
+      plans
+    }),
+    { ...authority.requestOptions, signal }
+  );
+  if (!Array.isArray(answer.results) || answer.results.length !== plans.length) {
+    throw new Error("Server execution capacity answered a different number of plans.");
+  }
+  return answer.results;
+}
 async function reportClientRuntimeExchangeAttemptTransition(profileId, mutationId, payload, signal, requiredRuntimeSessionId, explicitRuntimeLeaseToken, explicitRuntimeDeviceId, explicitSchedulerInstanceId) {
   const authority = resolveClientExchangeMutationAuthority(
     profileId,
@@ -87396,6 +87871,9 @@ async function sendClientRuntimeHeartbeat(profileId, payload, options) {
   if (payload.isExecuting !== void 0) {
     extras.is_executing = payload.isExecuting;
   }
+  if (payload.analyzingObservedAtMs !== void 0) {
+    extras.analyzing_observed_at_ms = payload.analyzingObservedAtMs;
+  }
   return postClientRuntime(
     "/runtime/heartbeat",
     profileId,
@@ -88259,14 +88737,14 @@ var init_api2 = __esm({
     ]);
     CLIENT_EXCHANGE_AUTHORITY_DEVICE_KEY = "vtx_client_exchange_authority_device_v1";
     CLIENT_EXCHANGE_AUTHORITY_SESSION_KEY = "vtx_client_exchange_authority_session_v1";
-    getOrCreateClientExchangeAuthorityIdentity = (storage3, key, label) => {
+    getOrCreateClientExchangeAuthorityIdentity = (storage3, key, label2) => {
       const existing = String(storage3.getItem(key) || "").trim().toLowerCase();
       if (/^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/.test(existing)) {
         return existing;
       }
       const generated = globalThis.crypto?.randomUUID?.().toLowerCase();
       if (!generated || !/^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/.test(generated)) {
-        throw new Error(`Secure ${label} generation is unavailable.`);
+        throw new Error(`Secure ${label2} generation is unavailable.`);
       }
       storage3.setItem(key, generated);
       return generated;
@@ -88485,7 +88963,7 @@ var init_api2 = __esm({
 });
 
 // lib/runtime/hyperliquid-signer-binding.ts
-var DeviceSigningKeyError, DEVICE_SIGNING_KEY_FAILURES, getDeviceSigningKeyFailure, normalizeAddress, extractRoleAddress, assertBrowserHyperliquidSignerWalletBinding;
+var DeviceSigningKeyError, DEVICE_SIGNING_KEY_FAILURES, getDeviceSigningKeyFailure, normalizeAddress, extractRoleAddress, signerBindingCache, validatedSignerBindings, SIGNER_NOT_FOUND, invalidateHyperliquidSignerBindingAfterRejection, assertBrowserHyperliquidSignerWalletBinding;
 var init_hyperliquid_signer_binding = __esm({
   "lib/runtime/hyperliquid-signer-binding.ts"() {
     "use strict";
@@ -88493,6 +88971,7 @@ var init_hyperliquid_signer_binding = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_hyperliquid_client();
+    init_hyperliquid_exchange_rejections();
     init_error_surface_contract();
     DeviceSigningKeyError = class extends RuntimeExecutionError {
       constructor(message, reasonCode, deviceSigningKeyFailure) {
@@ -88508,10 +88987,10 @@ var init_hyperliquid_signer_binding = __esm({
       const failure2 = error48?.deviceSigningKeyFailure;
       return typeof failure2 === "string" && DEVICE_SIGNING_KEY_FAILURES.has(failure2) ? failure2 : null;
     };
-    normalizeAddress = (value, label) => {
+    normalizeAddress = (value, label2) => {
       const normalized = String(value || "").trim().toLowerCase();
       if (!/^0x[0-9a-f]{40}$/.test(normalized)) {
-        throw new Error(`Invalid Hyperliquid ${label}.`);
+        throw new Error(`Invalid Hyperliquid ${label2}.`);
       }
       return normalized;
     };
@@ -88529,6 +89008,22 @@ var init_hyperliquid_signer_binding = __esm({
       }
       return null;
     };
+    signerBindingCache = null;
+    validatedSignerBindings = /* @__PURE__ */ new Map();
+    SIGNER_NOT_FOUND = /^(?:L1 error:\s*)?User or API Wallet\s+(0x[0-9a-fA-F]{40})\s+does not exist\.?$/i;
+    invalidateHyperliquidSignerBindingAfterRejection = async (message) => {
+      const match = SIGNER_NOT_FOUND.exec(String(message ?? "").trim());
+      if (!match || !signerBindingCache) return;
+      const signerAddress = match[1].toLowerCase();
+      for (const [key, entry] of [...validatedSignerBindings.entries()]) {
+        if (entry.binding.signerAddress !== signerAddress) continue;
+        validatedSignerBindings.delete(key);
+        await signerBindingCache.invalidate(entry.binding.walletAddress, signerAddress).catch(() => void 0);
+      }
+    };
+    onHyperliquidExchangeRejection((message) => {
+      void invalidateHyperliquidSignerBindingAfterRejection(message);
+    });
     assertBrowserHyperliquidSignerWalletBinding = async (input) => {
       let walletAddress;
       try {
@@ -88554,6 +89049,24 @@ var init_hyperliquid_signer_binding = __esm({
           "device_signing_key_invalid"
         );
       }
+      const cacheKey = `${walletAddress}:${signerAddress}`;
+      let generation = null;
+      if (signerBindingCache) {
+        try {
+          generation = await signerBindingCache.generation(walletAddress, signerAddress);
+        } catch {
+          throw new RuntimeExecutionError(
+            "VTX could not verify the cached signing-key authorization because its coordination state was temporarily unavailable. The signing key was not rejected.",
+            "signer_validation_unavailable"
+          );
+        }
+        const cached2 = validatedSignerBindings.get(cacheKey);
+        if (cached2 && cached2.generation === generation) return cached2.binding;
+      }
+      const remember = (binding) => {
+        if (signerBindingCache && generation !== null) validatedSignerBindings.set(cacheKey, { generation, binding });
+        return binding;
+      };
       let roleResponse;
       try {
         roleResponse = await fetchBrowserUserRole({
@@ -88571,11 +89084,11 @@ var init_hyperliquid_signer_binding = __esm({
       }
       const signerRole = String(roleResponse.role || "").trim().toLowerCase();
       if (signerRole === "user" && signerAddress === walletAddress) {
-        return {
+        return remember({
           signerAddress,
           walletAddress,
           signerRole: "user"
-        };
+        });
       }
       if (signerRole === "agent") {
         const masterWallet = extractRoleAddress(
@@ -88583,11 +89096,11 @@ var init_hyperliquid_signer_binding = __esm({
           ["user"]
         );
         if (masterWallet === walletAddress) {
-          return {
+          return remember({
             signerAddress,
             walletAddress,
             signerRole: "agent"
-          };
+          });
         }
       }
       throw new DeviceSigningKeyError(
@@ -89543,9 +90056,9 @@ var init_browser_trading = __esm({
       }
       return profileId;
     };
-    requirePositiveNumber = (value, label) => {
+    requirePositiveNumber = (value, label2) => {
       if (!Number.isFinite(value) || value <= 0) {
-        throw new Error(`${label} must be a positive number.`);
+        throw new Error(`${label2} must be a positive number.`);
       }
     };
     assertFreshPreparedContext = (preparedContext) => {
@@ -90018,287 +90531,6 @@ var init_browser_trading = __esm({
   }
 });
 
-// lib/runtime/hyperliquid-account-mode-contract.ts
-function resolveExactHyperliquidAccountMode(userAbstraction, ...dexEvidence) {
-  const mode = extractCanonicalHyperliquidAccountMode(userAbstraction);
-  if (!mode) {
-    throw new Error("Exact Hyperliquid userAbstraction response is invalid.");
-  }
-  if (mode !== "default" && mode !== "disabled") return mode;
-  if (dexEvidence.length < 1) {
-    throw new Error("Exact Hyperliquid userDexAbstraction response is unavailable.");
-  }
-  return parseExactDexAbstractionEnabled(dexEvidence[0]) ? "dexAbstraction" : mode;
-}
-var UNIFIED_MODE_ALIASES, CANONICAL_ACCOUNT_MODE_ALIASES, EXACT_MODE_KEYS, EXACT_MODE_BOOLEAN_KEYS, isExactTruthyFlag, normalizeCanonicalHyperliquidAccountMode, extractCanonicalHyperliquidAccountMode, parseExactDexAbstractionEnabled, normalizeAccountMode, extractAccountModeFromPayload, extractAccountModeCandidateFromPayload, isUnifiedAccountMode;
-var init_hyperliquid_account_mode_contract = __esm({
-  "lib/runtime/hyperliquid-account-mode-contract.ts"() {
-    "use strict";
-    init_define_VTX_EXO_POLICY();
-    init_define_VTX_GROK_POLICY();
-    init_define_VTX_PI_MODEL_POLICY();
-    UNIFIED_MODE_ALIASES = /* @__PURE__ */ new Set([
-      "unifiedaccount",
-      "dexabstraction",
-      "portfoliomargin",
-      "unified",
-      "pm"
-    ]);
-    CANONICAL_ACCOUNT_MODE_ALIASES = /* @__PURE__ */ new Map([
-      ["default", "default"],
-      ["standard", "default"],
-      ["classic", "default"],
-      ["disabled", "disabled"],
-      ["unifiedaccount", "unifiedAccount"],
-      ["unified", "unifiedAccount"],
-      ["portfoliomargin", "portfolioMargin"],
-      ["pm", "portfolioMargin"],
-      ["dexabstraction", "dexAbstraction"]
-    ]);
-    EXACT_MODE_KEYS = [
-      "accountMode",
-      "account_mode",
-      "accountType",
-      "account_type",
-      "accountUnificationMode",
-      "account_unification_mode",
-      "abstractionMode",
-      "abstraction_mode",
-      "abstraction",
-      "abstractionState",
-      "dexAbstractionState",
-      "marginMode",
-      "state",
-      "mode",
-      "value"
-    ];
-    EXACT_MODE_BOOLEAN_KEYS = [
-      ["unifiedAccount", ["isUnifiedAccount", "unifiedAccount", "isUnified", "unified", "is_unified_account"]],
-      ["portfolioMargin", ["isPortfolioMargin", "portfolioMargin", "isPm", "pm", "is_portfolio_margin"]],
-      ["dexAbstraction", ["isDexAbstraction", "dexAbstraction", "dexAbstractionEnabled", "is_dex_abstraction"]],
-      ["default", ["isClassic", "classic", "isStandard", "standard"]]
-    ];
-    isExactTruthyFlag = (value) => value === true || value === 1 || typeof value === "string" && value.trim().toLowerCase() === "true";
-    normalizeCanonicalHyperliquidAccountMode = (value) => {
-      if (typeof value !== "string") return null;
-      const key = value.trim().replace(/[_\s-]/g, "").toLowerCase();
-      return CANONICAL_ACCOUNT_MODE_ALIASES.get(key) ?? null;
-    };
-    extractCanonicalHyperliquidAccountMode = (payload, depth = 0) => {
-      if (depth > 6) return null;
-      const direct = normalizeCanonicalHyperliquidAccountMode(payload);
-      if (direct) return direct;
-      if (Array.isArray(payload)) {
-        for (const item of payload) {
-          const mode = extractCanonicalHyperliquidAccountMode(item, depth + 1);
-          if (mode) return mode;
-        }
-        return null;
-      }
-      if (!payload || typeof payload !== "object") return null;
-      const source = payload;
-      for (const key of EXACT_MODE_KEYS) {
-        if (!(key in source)) continue;
-        const mode = normalizeCanonicalHyperliquidAccountMode(source[key]);
-        if (mode) return mode;
-      }
-      for (const [mode, keys] of EXACT_MODE_BOOLEAN_KEYS) {
-        for (const key of keys) {
-          if (isExactTruthyFlag(source[key])) return mode;
-        }
-      }
-      for (const value of Object.values(source)) {
-        const mode = extractCanonicalHyperliquidAccountMode(value, depth + 1);
-        if (mode) return mode;
-      }
-      return null;
-    };
-    parseExactDexAbstractionEnabled = (payload) => {
-      if (payload == null || payload === false) return false;
-      if (payload === true) return true;
-      if (typeof payload === "string") {
-        const normalized = payload.trim().toLowerCase();
-        if (normalized === "true") return true;
-        if (normalized === "false") return false;
-      }
-      if (typeof payload === "number" && Number.isFinite(payload)) {
-        if (payload === 1) return true;
-        if (payload === 0) return false;
-      }
-      throw new Error("Exact Hyperliquid userDexAbstraction response is invalid.");
-    };
-    normalizeAccountMode = (mode) => String(mode ?? "").trim().toLowerCase().replace(/[_\s-]/g, "");
-    extractAccountModeFromPayload = (payload) => {
-      const candidate = extractAccountModeCandidateFromPayload(payload);
-      if (candidate && candidate.trim().length > 0) {
-        return candidate;
-      }
-      return "default";
-    };
-    extractAccountModeCandidateFromPayload = (payload) => {
-      if (!payload || typeof payload !== "object") {
-        return null;
-      }
-      const source = payload;
-      if ("accountMode" in source) {
-        return String(source.accountMode ?? "");
-      }
-      if ("account_mode" in source) {
-        return String(source.account_mode ?? "");
-      }
-      return null;
-    };
-    isUnifiedAccountMode = (mode) => UNIFIED_MODE_ALIASES.has(normalizeAccountMode(mode));
-  }
-});
-
-// lib/runtime/hyperliquid-account-contract.ts
-var toNumber2, firstNumber, roundTo, STABLE_SPOT_SYMBOLS, spotBalanceValueUsd, normalizeSpotBalancesFromInfoResponse, sumBalanceHoldUsd, sumPositionUnrealizedPnl, resolveTotalUnrealizedPnl, approximatelyEqualAccountValues, buildAccountSummaryFromInfoResponses;
-var init_hyperliquid_account_contract = __esm({
-  "lib/runtime/hyperliquid-account-contract.ts"() {
-    "use strict";
-    init_define_VTX_EXO_POLICY();
-    init_define_VTX_GROK_POLICY();
-    init_define_VTX_PI_MODEL_POLICY();
-    init_hyperliquid_account_mode_contract();
-    toNumber2 = (value, fallback = 0) => {
-      const numeric2 = Number(value);
-      return Number.isFinite(numeric2) ? numeric2 : fallback;
-    };
-    firstNumber = (values, fallback = 0) => {
-      for (const value of values) {
-        if (value == null || typeof value === "string" && value.trim() === "") {
-          continue;
-        }
-        const numeric2 = Number(value);
-        if (Number.isFinite(numeric2)) {
-          return numeric2;
-        }
-      }
-      return fallback;
-    };
-    roundTo = (value, digits = 12) => Number(value.toFixed(digits));
-    STABLE_SPOT_SYMBOLS = /* @__PURE__ */ new Set(["USDC", "USD", "USDT"]);
-    spotBalanceValueUsd = (balance, coin, total) => {
-      const explicit = firstNumber([balance?.value_usd, balance?.usdValue, balance?.usdcValue], Number.NaN);
-      if (Number.isFinite(explicit)) {
-        return explicit;
-      }
-      return STABLE_SPOT_SYMBOLS.has(coin) ? total : 0;
-    };
-    normalizeSpotBalancesFromInfoResponse = (spotResponse) => {
-      const containers = [];
-      if (spotResponse && typeof spotResponse === "object") {
-        containers.push(spotResponse);
-        const keys = ["spotState", "userState", "clearinghouseState", "state", "data"];
-        for (const key of keys) {
-          if (spotResponse[key] && typeof spotResponse[key] === "object") {
-            containers.push(spotResponse[key]);
-          }
-        }
-      }
-      const firstWithBalances = containers.find((container) => Array.isArray(container?.balances));
-      const balances = Array.isArray(firstWithBalances?.balances) ? firstWithBalances.balances : [];
-      return balances.map((balance) => {
-        const coin = String(balance?.coin ?? "").toUpperCase();
-        const total = toNumber2(balance?.total, 0);
-        const hold = toNumber2(balance?.hold, 0);
-        const available = roundTo(Math.max(0, total - hold));
-        const value_usd = spotBalanceValueUsd(balance, coin, total);
-        return {
-          coin,
-          total,
-          hold,
-          available,
-          value_usd
-        };
-      }).filter((balance) => balance.coin.length > 0);
-    };
-    sumBalanceHoldUsd = (balances) => balances.reduce((acc, balance) => {
-      const hold = toNumber2(balance.hold, 0);
-      const total = toNumber2(balance.total, 0);
-      const valueUsd = toNumber2(balance.value_usd, 0);
-      if (hold <= 0 || total <= 0 || valueUsd <= 0) {
-        return acc;
-      }
-      return acc + Math.max(0, valueUsd * (hold / total));
-    }, 0);
-    sumPositionUnrealizedPnl = (perpsResponse) => {
-      const assetPositions = Array.isArray(perpsResponse?.assetPositions) ? perpsResponse.assetPositions : [];
-      return assetPositions.reduce((total, entry) => {
-        const unrealizedPnl = toNumber2(entry?.position?.unrealizedPnl, 0);
-        return total + unrealizedPnl;
-      }, 0);
-    };
-    resolveTotalUnrealizedPnl = (perpsResponse) => {
-      const topLevel = toNumber2(perpsResponse?.totalUnrealizedPnl, 0);
-      const positionTotal = sumPositionUnrealizedPnl(perpsResponse);
-      if (Math.abs(topLevel) < 1e-12 && Math.abs(positionTotal) >= 1e-12) {
-        return positionTotal;
-      }
-      return topLevel;
-    };
-    approximatelyEqualAccountValues = (left, right, absoluteToleranceUsd, relativeTolerance) => {
-      const reference = Math.max(Math.abs(left), Math.abs(right), 1);
-      return Math.abs(left - right) <= Math.max(
-        absoluteToleranceUsd,
-        reference * relativeTolerance
-      );
-    };
-    buildAccountSummaryFromInfoResponses = (perpsResponse, spotResponse, options = {}) => {
-      const marginSummary = perpsResponse?.marginSummary ?? {};
-      const perpsAccountValue = toNumber2(marginSummary?.accountValue, 0);
-      const total_margin_used = toNumber2(marginSummary?.totalMarginUsed, 0);
-      const totalNtlPos = toNumber2(marginSummary?.totalNtlPos, 0);
-      const withdrawable = toNumber2(perpsResponse?.withdrawable, 0);
-      const maintenance_margin = firstNumber([
-        perpsResponse?.crossMaintenanceMarginUsed,
-        marginSummary?.crossMaintenanceMarginUsed,
-        marginSummary?.totalMaintenanceMargin
-      ], 0);
-      const balances = normalizeSpotBalancesFromInfoResponse(spotResponse);
-      const spotPortfolioValue = balances.reduce((acc, balance) => acc + toNumber2(balance.value_usd, 0), 0);
-      const balancesHoldUsd = sumBalanceHoldUsd(balances);
-      const account_mode = extractAccountModeFromPayload(perpsResponse);
-      const crossMarginSummary = perpsResponse?.crossMarginSummary && typeof perpsResponse.crossMarginSummary === "object" ? perpsResponse.crossMarginSummary : null;
-      const crossMarginAccountValue = crossMarginSummary ? toNumber2(crossMarginSummary.accountValue, 0) : 0;
-      const normalizedMode = String(account_mode || "").trim().toLowerCase().replace(/[_\s-]/g, "");
-      const isAmbiguousDefaultMode = normalizedMode.length === 0 || normalizedMode === "default";
-      const spotDominatesMinTotalUsd = Number(options.spotDominatesMinTotalUsd ?? options.spot_dominates_min_total_usd);
-      const spotDominatesPerpsMultiplier = Number(options.spotDominatesPerpsMultiplier ?? options.spot_dominates_perps_multiplier);
-      const mirroredAccountValueAbsoluteToleranceUsd = Number(
-        options.mirroredAccountValueAbsoluteToleranceUsd ?? options.mirrored_account_value_absolute_tolerance_usd
-      );
-      const mirroredAccountValueRelativeTolerance = Number(
-        options.mirroredAccountValueRelativeTolerance ?? options.mirrored_account_value_relative_tolerance
-      );
-      const hasSpotDominanceThresholds = Number.isFinite(spotDominatesMinTotalUsd) && spotDominatesMinTotalUsd >= 0 && Number.isFinite(spotDominatesPerpsMultiplier) && spotDominatesPerpsMultiplier >= 0;
-      const hasMirroredAccountValueTolerances = Number.isFinite(mirroredAccountValueAbsoluteToleranceUsd) && mirroredAccountValueAbsoluteToleranceUsd >= 0 && Number.isFinite(mirroredAccountValueRelativeTolerance) && mirroredAccountValueRelativeTolerance >= 0;
-      const spotDominatesPerps = hasSpotDominanceThresholds && spotPortfolioValue >= spotDominatesMinTotalUsd && (perpsAccountValue <= 0 || spotPortfolioValue >= perpsAccountValue * spotDominatesPerpsMultiplier);
-      const ambiguousDefaultLooksUnified = isAmbiguousDefaultMode && spotDominatesPerps;
-      const ambiguousDefaultSpotAlreadyIncludesPerps = ambiguousDefaultLooksUnified && perpsAccountValue > 0 && balancesHoldUsd > 0 && hasMirroredAccountValueTolerances && approximatelyEqualAccountValues(
-        balancesHoldUsd,
-        perpsAccountValue,
-        mirroredAccountValueAbsoluteToleranceUsd,
-        mirroredAccountValueRelativeTolerance
-      );
-      const account_value = isUnifiedAccountMode(account_mode) && crossMarginSummary !== null && crossMarginAccountValue > 0 ? crossMarginAccountValue + spotPortfolioValue : ambiguousDefaultLooksUnified && !ambiguousDefaultSpotAlreadyIncludesPerps ? perpsAccountValue + spotPortfolioValue : Math.max(perpsAccountValue, spotPortfolioValue);
-      return {
-        account_value,
-        total_margin_used,
-        available_margin: roundTo(Math.max(0, account_value - total_margin_used)),
-        withdrawable,
-        cross_margin_ratio: account_value > 0 ? maintenance_margin / account_value : 0,
-        maintenance_margin,
-        cross_account_leverage: account_value > 0 ? totalNtlPos / account_value : 0,
-        total_unrealized_pnl: resolveTotalUnrealizedPnl(perpsResponse),
-        account_mode,
-        balances
-      };
-    };
-  }
-});
-
 // lib/runtime/hyperliquid-active-asset-contract.ts
 var unwrapActiveAssetPayload, normalizePair, normalizeActiveAssetData;
 var init_hyperliquid_active_asset_contract = __esm({
@@ -90326,15 +90558,15 @@ var init_hyperliquid_active_asset_contract = __esm({
     };
     normalizePair = (raw) => {
       if (Array.isArray(raw) && raw.length >= 2) {
-        return [toNumber2(raw[0], 0), toNumber2(raw[1], 0)];
+        return [toNumber(raw[0], 0), toNumber(raw[1], 0)];
       }
       if (raw && typeof raw === "object") {
-        const buy = toNumber2(raw.buy ?? raw.long ?? raw.b, 0);
-        const sell = toNumber2(raw.sell ?? raw.short ?? raw.s, 0);
+        const buy = toNumber(raw.buy ?? raw.long ?? raw.b, 0);
+        const sell = toNumber(raw.sell ?? raw.short ?? raw.s, 0);
         return [buy, sell];
       }
       if (typeof raw === "string" || typeof raw === "number") {
-        const value = toNumber2(raw, 0);
+        const value = toNumber(raw, 0);
         return [value, value];
       }
       return [0, 0];
@@ -90345,21 +90577,21 @@ var init_hyperliquid_active_asset_contract = __esm({
       const directSell = source.available_to_trade_sell;
       const hasDirectAvailable = directBuy !== void 0 || directSell !== void 0;
       const [pairBuy, pairSell] = normalizePair(source.availableToTrade);
-      const available_to_trade_buy = hasDirectAvailable ? toNumber2(directBuy, pairBuy) : pairBuy;
-      const available_to_trade_sell = hasDirectAvailable ? toNumber2(directSell, pairSell) : pairSell;
+      const available_to_trade_buy = hasDirectAvailable ? toNumber(directBuy, pairBuy) : pairBuy;
+      const available_to_trade_sell = hasDirectAvailable ? toNumber(directSell, pairSell) : pairSell;
       const directMaxBuy = source.max_trade_size_buy;
       const directMaxSell = source.max_trade_size_sell;
       const hasDirectMax = directMaxBuy !== void 0 || directMaxSell !== void 0;
       const [pairMaxBuy, pairMaxSell] = normalizePair(source.maxTradeSzs);
-      const max_trade_size_buy = hasDirectMax ? toNumber2(directMaxBuy, pairMaxBuy) : pairMaxBuy;
-      const max_trade_size_sell = hasDirectMax ? toNumber2(directMaxSell, pairMaxSell) : pairMaxSell;
+      const max_trade_size_buy = hasDirectMax ? toNumber(directMaxBuy, pairMaxBuy) : pairMaxBuy;
+      const max_trade_size_sell = hasDirectMax ? toNumber(directMaxSell, pairMaxSell) : pairMaxSell;
       return {
         symbol: String(source.coin || symbol2),
         available_to_trade_buy,
         available_to_trade_sell,
         max_trade_size_buy,
         max_trade_size_sell,
-        mark_price: toNumber2(source.markPx ?? source.mark_price, 0)
+        mark_price: toNumber(source.markPx ?? source.mark_price, 0)
       };
     };
   }
@@ -90551,12 +90783,7 @@ var init_server_prompt_rescue_account_contract = __esm({
       };
       const accountValue = computeEffectiveAccountValue(formulaInput);
       const maintenanceMargin = toNumber3(perps.crossMaintenanceMarginUsed);
-      const calculatedAvailable = accountValue - totalMarginUsed;
-      const availableMargin = maintenanceMargin > 0 ? Math.max(
-        calculatedAvailable,
-        Math.max(0, accountValue - 4 * maintenanceMargin),
-        withdrawable
-      ) : Math.max(calculatedAvailable, withdrawable);
+      const availableMargin = canonicalAvailableMargin(accountValue, totalMarginUsed);
       let totalNotional = 0;
       let totalUnrealizedPnl = 0;
       const positions = Array.isArray(perps.assetPositions) ? perps.assetPositions : [];
@@ -91014,18 +91241,18 @@ var init_hyperliquid_account_state_adapter = __esm({
       }
       return parsed;
     };
-    requirePromptClearinghouseState = (response, label) => {
+    requirePromptClearinghouseState = (response, label2) => {
       if (!response || typeof response !== "object" || Array.isArray(response)) {
-        throw new Error(`Malformed ${label} clearinghouseState response for client runtime prompt context.`);
+        throw new Error(`Malformed ${label2} clearinghouseState response for client runtime prompt context.`);
       }
       const marginSummary = response.marginSummary;
       if (!marginSummary || typeof marginSummary !== "object" || Array.isArray(marginSummary)) {
-        throw new Error(`${label} clearinghouseState is missing marginSummary for client runtime prompt context.`);
+        throw new Error(`${label2} clearinghouseState is missing marginSummary for client runtime prompt context.`);
       }
-      requireFinitePromptMetric(marginSummary.accountValue, `${label}.marginSummary.accountValue`);
-      requireFinitePromptMetric(marginSummary.totalMarginUsed, `${label}.marginSummary.totalMarginUsed`);
-      requireFinitePromptMetric(marginSummary.totalNtlPos, `${label}.marginSummary.totalNtlPos`);
-      requireFinitePromptMetric(response.withdrawable, `${label}.withdrawable`);
+      requireFinitePromptMetric(marginSummary.accountValue, `${label2}.marginSummary.accountValue`);
+      requireFinitePromptMetric(marginSummary.totalMarginUsed, `${label2}.marginSummary.totalMarginUsed`);
+      requireFinitePromptMetric(marginSummary.totalNtlPos, `${label2}.marginSummary.totalNtlPos`);
+      requireFinitePromptMetric(response.withdrawable, `${label2}.withdrawable`);
       const maintenanceCandidates = [
         response.crossMaintenanceMarginUsed,
         marginSummary.crossMaintenanceMarginUsed,
@@ -91034,33 +91261,33 @@ var init_hyperliquid_account_state_adapter = __esm({
       const maintenance = maintenanceCandidates.find(
         (value) => value != null && !(typeof value === "string" && value.trim() === "")
       );
-      requireFinitePromptMetric(maintenance, `${label}.maintenanceMargin`);
+      requireFinitePromptMetric(maintenance, `${label2}.maintenanceMargin`);
       if (!Array.isArray(response.assetPositions)) {
-        throw new Error(`${label} clearinghouseState is missing assetPositions for client runtime prompt context.`);
+        throw new Error(`${label2} clearinghouseState is missing assetPositions for client runtime prompt context.`);
       }
       response.assetPositions.forEach((entry, index) => {
         const position = entry?.position;
         if (!position || typeof position !== "object" || Array.isArray(position)) {
-          throw new Error(`${label}.assetPositions[${index}] is malformed for client runtime prompt context.`);
+          throw new Error(`${label2}.assetPositions[${index}] is malformed for client runtime prompt context.`);
         }
         if (!String(entry?.coin || position.coin || "").trim()) {
-          throw new Error(`${label}.assetPositions[${index}] is missing its symbol for client runtime prompt context.`);
+          throw new Error(`${label2}.assetPositions[${index}] is missing its symbol for client runtime prompt context.`);
         }
         const size = requireFinitePromptMetric(
           position.szi,
-          `${label}.assetPositions[${index}].position.szi`
+          `${label2}.assetPositions[${index}].position.szi`
         );
         if (size !== 0) {
           const entryPrice = requireFinitePromptMetric(
             position.entryPx,
-            `${label}.assetPositions[${index}].position.entryPx`
+            `${label2}.assetPositions[${index}].position.entryPx`
           );
           if (entryPrice <= 0) {
-            throw new Error(`${label}.assetPositions[${index}] has a nonpositive entry price for client runtime prompt context.`);
+            throw new Error(`${label2}.assetPositions[${index}] has a nonpositive entry price for client runtime prompt context.`);
           }
           requireFinitePromptMetric(
             position.unrealizedPnl,
-            `${label}.assetPositions[${index}].position.unrealizedPnl`
+            `${label2}.assetPositions[${index}].position.unrealizedPnl`
           );
         }
       });
@@ -91084,9 +91311,12 @@ var init_hyperliquid_account_state_adapter = __esm({
         perpDexConfig.allowed_dexes.map(normalizePerpDexName).filter((value) => value.length > 0)
       ));
     };
-    listPerpDexsForAccountState = (config2, selectedDex, aggregatePerpDexs) => {
+    listPerpDexsForAccountState = (config2, selectedDex, aggregatePerpDexs, perpDexScope) => {
       if (aggregatePerpDexs) {
-        return listConfiguredPerpDexs(config2);
+        const configured = listConfiguredPerpDexs(config2);
+        if (!perpDexScope) return configured;
+        const scope = new Set(perpDexScope.map(normalizePerpDexName));
+        return configured.filter((dex) => scope.has(dex));
       }
       return selectedDex ? [selectedDex] : [];
     };
@@ -91294,7 +91524,7 @@ var init_hyperliquid_account_state_adapter = __esm({
       const includeEffectiveTakerRate = input.includeEffectiveTakerRate === true;
       const includeExactAccountMode = input.includeExactAccountMode === true;
       const includeActiveAssetData = input.includeActiveAssetData !== false;
-      const dexNames = listPerpDexsForAccountState(input.config, dex, aggregatePerpDexs);
+      const dexNames = listPerpDexsForAccountState(input.config, dex, aggregatePerpDexs, input.perpDexScope);
       if (scopeAccountSummaryToSelectedDex && dex && !dexNames.includes(dex)) {
         dexNames.push(dex);
       }
@@ -91592,8 +91822,7 @@ var init_hyperliquid_account_state_adapter = __esm({
                 ])
               }, {}, "disabled", accountSummaryOptions);
               const accountValue = Number(payload.marginSummary.accountValue);
-              const calculatedAvailable = accountValue - summary.total_margin_used;
-              const availableMargin = summary.maintenance_margin > 0 ? Math.max(calculatedAvailable, Math.max(0, accountValue - 4 * summary.maintenance_margin), summary.withdrawable) : Math.max(calculatedAvailable, summary.withdrawable);
+              const availableMargin = canonicalAvailableMargin(accountValue, summary.total_margin_used);
               return {
                 dex,
                 account_value: accountValue,
@@ -91898,7 +92127,7 @@ var init_protective_evidence = __esm({
       const perDex = /* @__PURE__ */ new Map();
       const scope = `${String(input.apiUrl ?? "")}|${wallet.toLowerCase()}`;
       const shareable = batch.every((item) => item.kind !== "fills" && item.shareable);
-      const dexRead = (key, body, label) => {
+      const dexRead = (key, body, label2) => {
         let read = perDex.get(key);
         if (read) return read;
         const sharedKey = `${scope}|${key}`;
@@ -91908,7 +92137,7 @@ var init_protective_evidence = __esm({
           startedAtMonotonicMs = Math.min(startedAtMonotonicMs, shared.startedAtMonotonicMs);
           read = shared.read;
         } else {
-          read = readOrNull(() => fetchBrowserHyperliquidInfoPayload(input, body, label));
+          read = readOrNull(() => fetchBrowserHyperliquidInfoPayload(input, body, label2));
           const entry = { startedAtMonotonicMs: now, read };
           sharedAccountReads.set(sharedKey, entry);
           void read.then((value) => {
@@ -92085,19 +92314,19 @@ var init_protective_actions = __esm({
         "local_safety_block"
       );
     };
-    exactKeys = (value, keys, label) => {
-      if (!value || typeof value !== "object" || Array.isArray(value)) fail2(`${label} is not an object.`);
+    exactKeys = (value, keys, label2) => {
+      if (!value || typeof value !== "object" || Array.isArray(value)) fail2(`${label2} is not an object.`);
       const record5 = value;
       const present = Object.keys(record5).sort();
-      if (present.join(",") !== [...keys].sort().join(",")) fail2(`${label} has unexpected fields.`);
+      if (present.join(",") !== [...keys].sort().join(",")) fail2(`${label2} has unexpected fields.`);
       return record5;
     };
-    nonNegativeInteger = (value, label) => {
-      if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) fail2(`${label} is invalid.`);
+    nonNegativeInteger = (value, label2) => {
+      if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) fail2(`${label2} is invalid.`);
       return value;
     };
-    decimalString = (value, label) => {
-      if (typeof value !== "string" || !DECIMAL.test(value) || Number(value) <= 0) fail2(`${label} is invalid.`);
+    decimalString = (value, label2) => {
+      if (typeof value !== "string" || !DECIMAL.test(value) || Number(value) <= 0) fail2(`${label2} is invalid.`);
       return value;
     };
     canonicalTriggerOrder = (value) => {
@@ -92407,6 +92636,119 @@ var init_protective_actions = __esm({
   }
 });
 
+// lib/runtime/bounded-lock.ts
+var webLocks, inProcessTails, abortReason, waitBounded, withInProcessLock, withBoundedExclusiveLock;
+var init_bounded_lock = __esm({
+  "lib/runtime/bounded-lock.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    webLocks = () => {
+      const locks = typeof navigator === "undefined" ? void 0 : navigator.locks;
+      return locks && typeof locks.request === "function" ? locks : null;
+    };
+    inProcessTails = /* @__PURE__ */ new Map();
+    abortReason = (signal) => signal.reason instanceof Error ? signal.reason : new DOMException("The operation was aborted.", "AbortError");
+    waitBounded = (gate, waitMs, signal) => new Promise((resolve14, reject) => {
+      if (signal?.aborted) {
+        reject(abortReason(signal));
+        return;
+      }
+      const finish = () => {
+        clearTimeout(timer);
+        signal?.removeEventListener("abort", onAbort);
+      };
+      const onAbort = () => {
+        finish();
+        reject(abortReason(signal));
+      };
+      const timer = setTimeout(() => {
+        finish();
+        resolve14();
+      }, waitMs);
+      signal?.addEventListener("abort", onAbort, { once: true });
+      void gate.then(() => {
+        finish();
+        resolve14();
+      });
+    });
+    withInProcessLock = async (name, waitMs, work, signal) => {
+      const previous = inProcessTails.get(name) ?? Promise.resolve();
+      let release;
+      const released = new Promise((resolve14) => {
+        release = resolve14;
+      });
+      const tail = previous.then(() => released);
+      inProcessTails.set(name, tail);
+      try {
+        await waitBounded(previous, waitMs, signal);
+        return await work();
+      } finally {
+        release();
+        if (inProcessTails.get(name) === tail) inProcessTails.delete(name);
+      }
+    };
+    withBoundedExclusiveLock = async (name, waitMs, work, signal) => {
+      if (!Number.isFinite(waitMs) || waitMs <= 0) {
+        throw new Error(`Invalid lock wait bound for ${name}.`);
+      }
+      const locks = webLocks();
+      if (locks == null) return withInProcessLock(name, waitMs, work, signal);
+      const waitTimeout = new AbortController();
+      const timer = setTimeout(() => waitTimeout.abort(), waitMs);
+      const relayAbort = () => waitTimeout.abort();
+      signal?.addEventListener("abort", relayAbort, { once: true });
+      let acquired = false;
+      try {
+        return await locks.request(name, { signal: waitTimeout.signal }, async () => {
+          acquired = true;
+          clearTimeout(timer);
+          signal?.removeEventListener("abort", relayAbort);
+          return work();
+        });
+      } catch (error48) {
+        if (acquired) throw error48;
+        if (signal?.aborted) throw abortReason(signal);
+        if (!waitTimeout.signal.aborted) throw error48;
+        return work();
+      } finally {
+        clearTimeout(timer);
+        signal?.removeEventListener("abort", relayAbort);
+      }
+    };
+  }
+});
+
+// lib/api/client-exchange-mutations.ts
+async function getClientRuntimeExchangeMutation(profileId, mutationId, signal) {
+  const numericProfileId = Number(profileId);
+  const response = await apiFetch(
+    `${getApiUrl()}/trading/ai/runtime/exchange-mutations/${encodeURIComponent(String(mutationId).trim().toLowerCase())}`,
+    {
+      method: "GET",
+      credentials: "include",
+      cache: "no-store",
+      headers: getProfileHeaders({}, Number.isSafeInteger(numericProfileId) ? numericProfileId : void 0),
+      signal
+    }
+  );
+  if (response.status === 404) return null;
+  if (!response.ok) {
+    throw new Error(await getErrorMessageFromResponse(response, "Failed to read the exchange mutation"));
+  }
+  return response.json();
+}
+var init_client_exchange_mutations = __esm({
+  "lib/api/client-exchange-mutations.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_shared();
+  }
+});
+
 // lib/runtime/execution-guard-contract.ts
 var unitsFromPosition, signedUnitsFromPosition, signedUnitsFromEntryPosition, classifyExecutionIntent, resolveExecutionTarget;
 var init_execution_guard_contract = __esm({
@@ -92692,7 +93034,7 @@ var init_protective_trigger_price = __esm({
 });
 
 // lib/runtime/runtime-execution.ts
-var clientProtectiveMutationAuthority, executionReadPriority, fetchClientRuntimeOpenOrders, _extractOrderResponseStates, createRuntimeId, _extractOrderId, _toExecutionMetadata, _extractClientMutationId, _stableMutationIdentity, trailingStopMemory, protectiveGroupMemory, protectiveGroupReadFailures, windowHandoffCleanupAttempts, clientRuntimeProtectionStorage, resolveClientRuntimeProtectionStorage, setClientRuntimeProtectionStorage, trailingStopStorageKey, readTrackedTrailingStops, writeTrackedTrailingStops, rememberTrailingStop, protectiveGroupStorageKey, readClientProtectiveGroups, writeClientProtectiveGroups, hasClientProtectiveGroupReadFailure, readFreshClientProtectiveGroups, stableProtectionSnapshot, exactClientProtectiveGroupSnapshot, exactClientProtectiveGroupSetSnapshot, replaceExactClientProtectiveGroup, replaceExactClientProtectiveGroupSet, isClientRuntimeLeaseOwnershipError, hasClientRuntimeProtectionState, clearClientRuntimeVetoedProtectiveIntent, rethrowWindowHandoffAfterProtectiveReplacementVeto, canPersistClientProtectiveGroups, removeTrackedTrailingStop, replaceTrackedTrailingStop, replaceProtectiveLeg, replacementJournalEntryOrderId, buildProtectiveReplacementJournalGroup, isProtectiveReplacementJournalGroup, reserveProtectiveLegReplacement, ensureProtectiveReplacementJournalCompanion, buildVetoedProtectiveReplacementCleanup, assertExactProtectiveReplacementDispatchAuthority, transitionProtectiveReplacementAcknowledgement, transitionTerminalProtectiveReplacement, pendingProtectiveReplacementReport, isConfiguredProtectionRequested, protectiveAction, isExactClientPositionTpslPair, deviceOwnsClientProtectiveLegKind, isAdoptionNarrowedPositionTpslLeg, hasAmbiguousClientPositionTpslAuthority, protectiveStableShapeMatches, protectiveLiveShapeMatches, protectiveTerminalShapeMatches, cancelClientProtectiveLeg, buildPendingProtectivePlan, persistPendingClientProtectiveGroup, attachClientProtectivePlan, resolveJournaledAttachmentContinuity, recoverJournaledClientProtectiveAttachments, recoverPendingClientProtectiveGroups, recoverPendingProtectiveReplacements, reconcileClientProtectiveGroups, cancelAllClientProtectiveGroups, tightenClientTrailingStops, throwIfAborted2, sleep2, roundAssetSize, resolvePositionSize, resolveCurrentPositionSize, buildPositionSnapshot, signedRemainingExposureAfterConfirmedReduction, runtimeProtectionAuthority, runtimeProtectionOwners, resolveRuntimeProtectionOwner, drainServerProtectionForRuntime, drainServerProtectionIfOwned, verifyNoLiveClientProtectiveTriggers, clientExecutionMutations, withClientExecutionMutation, withClientProtectiveAdoptionMutation, executeClientRuntimeDecision, maintainClientRuntimeTrailingStops, listPendingClientProtectiveSymbols, listStoredClientProtectiveSymbols, hasUnresolvedClientProtectiveIdentity, resolveClientProtectiveIdentitiesForAdoption, exportClientProtectiveGroupsForAdoption, adoptionGroupKey, applyClientProtectiveAdoptionOutcomes, hasStoredClientProtectiveGroupsForWallet, hasPendingClientProtectiveGroups, recoverManualClientProtectiveGroups, executeClientRuntimeDecisionUnlocked, executeClientCopyTradingIntent, executeClientCopyTradingOrderAction;
+var clientProtectiveMutationAuthority, executionReadPriority, serverEntryLeverageAlreadyHeld, fetchClientRuntimeOpenOrders, _extractOrderResponseStates, createRuntimeId, _extractOrderId, _toExecutionMetadata, _extractClientMutationId, _stableMutationIdentity, trailingStopMemory, protectiveGroupMemory, protectiveGroupReadFailures, windowHandoffCleanupAttempts, clientRuntimeProtectionStorage, resolveClientRuntimeProtectionStorage, setClientRuntimeProtectionStorage, trailingStopStorageKey, readTrackedTrailingStops, writeTrackedTrailingStops, rememberTrailingStop, protectiveGroupStorageKey, withClientProtectivePlanSetLock, readClientProtectiveGroups, writeClientProtectiveGroups, hasClientProtectiveGroupReadFailure, readFreshClientProtectiveGroups, stableProtectionSnapshot, exactClientProtectiveGroupSnapshot, exactClientProtectiveGroupSetSnapshot, replaceExactClientProtectiveGroup, replaceExactClientProtectiveGroupSet, isClientRuntimeLeaseOwnershipError, hasClientRuntimeProtectionState, clearClientRuntimeVetoedProtectiveIntent, rethrowWindowHandoffAfterProtectiveReplacementVeto, canPersistClientProtectiveGroups, removeTrackedTrailingStop, replaceTrackedTrailingStop, replaceProtectiveLeg, replacementJournalEntryOrderId, buildProtectiveReplacementJournalGroup, isProtectiveReplacementJournalGroup, reserveProtectiveLegReplacement, ensureProtectiveReplacementJournalCompanion, buildVetoedProtectiveReplacementCleanup, assertExactProtectiveReplacementDispatchAuthority, transitionProtectiveReplacementAcknowledgement, transitionTerminalProtectiveReplacement, pendingProtectiveReplacementReport, isConfiguredProtectionRequested, protectiveAction, isExactClientPositionTpslPair, deviceOwnsClientProtectiveLegKind, isAdoptionNarrowedPositionTpslLeg, hasAmbiguousClientPositionTpslAuthority, protectiveStableShapeMatches, protectiveLiveShapeMatches, protectiveTerminalShapeMatches, cancelClientProtectiveLeg, buildPendingProtectivePlan, persistPendingClientProtectiveGroup, attachClientProtectivePlan, resolveJournaledAttachmentContinuity, recoverJournaledClientProtectiveAttachments, readPendingEntryMutation, requireClientRuntimeConfigSeconds, replacePendingEntryRecovery, recoverPendingClientProtectiveGroups, recoverPendingProtectiveReplacements, reconcileClientProtectiveGroups, cancelAllClientProtectiveGroups, tightenClientTrailingStops, throwIfAborted2, sleep2, isDefinitiveEntryRejection, resolveExchangeSizeDecimals, roundAssetSize, resolvePositionSize, resolveCurrentPositionSize, buildPositionSnapshot, signedRemainingExposureAfterConfirmedReduction, runtimeProtectionAuthority, runtimeProtectionOwners, resolveRuntimeProtectionOwner, drainServerProtectionForRuntime, drainServerProtectionIfOwned, verifyNoLiveClientProtectiveTriggers, clientExecutionMutations, withClientExecutionMutation, allocateServerExecutionCapacity, withClientProtectiveAdoptionMutation, executeClientRuntimeDecisionLocked, SERVER_AUDIT_RECORDED_ELSEWHERE, serverExecutionAuditOutcome, executeClientRuntimeDecision, waitForFlipCloseFreshness, maintainClientRuntimeTrailingStops, listPendingClientProtectiveSymbols, listStoredClientProtectiveSymbols, hasUnresolvedClientProtectiveIdentity, resolveClientProtectiveIdentitiesForAdoption, exportClientProtectiveGroupsForAdoption, adoptionGroupKey, applyClientProtectiveAdoptionOutcomes, hasStoredClientProtectiveGroupsForWallet, hasPendingClientProtectiveGroups, recoverManualClientProtectiveGroups, clientRuntimeDecisionSizesOrders, executeClientRuntimeDecisionUnlocked, executeClientCopyTradingIntent, executeClientCopyTradingOrderAction;
 var init_runtime_execution = __esm({
   "lib/runtime/runtime-execution.ts"() {
     "use strict";
@@ -92700,8 +93042,11 @@ var init_runtime_execution = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_order_identity();
+    init_runtime_policy_generated2();
+    init_bounded_lock();
     init_client_runtime_ownership_errors();
     init_api2();
+    init_client_exchange_mutations();
     init_hyperliquid_order_status();
     init_protective_actions();
     init_browser_trading();
@@ -92729,6 +93074,26 @@ var init_runtime_execution = __esm({
       );
       return classified.reduceOnly ? "trading_reduce" : "trading_execute";
     };
+    serverEntryLeverageAlreadyHeld = async (input) => {
+      if (input.executionMode !== "server") return false;
+      const context = input.executionContext;
+      const symbol2 = normalizeHyperliquidMarketSymbol(context.symbol);
+      const wallet = String(context.walletAddress || "").trim();
+      if (!symbol2 || !wallet || !Number.isInteger(context.leverage) || context.leverage <= 0 || !Number.isFinite(context.currentPositionSize) || context.currentPositionSize === 0) return false;
+      let active;
+      try {
+        active = await fetchBrowserHyperliquidInfoPayload(
+          { config: input.config ?? null, signal: input.signal, publicRequestPriority: "trading_reconcile" },
+          { type: "activeAssetData", user: wallet, coin: symbol2 },
+          "hyperliquid.activeAssetData"
+        );
+      } catch {
+        throwIfAborted2(input.signal);
+        return false;
+      }
+      const leverage = active?.leverage;
+      return leverage?.value === context.leverage && leverage?.type === (context.marginMode === "isolated" ? "isolated" : "cross");
+    };
     fetchClientRuntimeOpenOrders = async (request, publicRequestPriority = "trading_reconcile") => {
       const normalizedSymbol = normalizeHyperliquidMarketSymbol(
         request.executionContext.symbol
@@ -92943,6 +93308,12 @@ var init_runtime_execution = __esm({
       ]);
     };
     protectiveGroupStorageKey = (profileId, symbol2) => `vtx:auto-protective-group:${profileId}:${symbol2}`;
+    withClientProtectivePlanSetLock = (profileId, symbol2, work, signal) => withBoundedExclusiveLock(
+      `vtx:protective-plan-set:${protectiveGroupStorageKey(String(profileId).trim(), String(symbol2).trim())}`,
+      runtime_policy_generated_default2.trading.engine.client_runtime.protective_plan_set_lock.wait_seconds * 1e3,
+      work,
+      signal
+    );
     readClientProtectiveGroups = (profileId, symbol2) => {
       const key = protectiveGroupStorageKey(profileId, symbol2);
       const inMemory = protectiveGroupMemory.get(key);
@@ -93036,12 +93407,41 @@ var init_runtime_execution = __esm({
           const pending3 = pendingRecord;
           const stopLoss = pending3.stopLoss;
           const takeProfit = pending3.takeProfit;
-          if (typeof pending3.entryMutationId !== "string" || !/^[0-9a-f-]{36}$/.test(pending3.entryMutationId) || typeof pending3.entryClientOrderId !== "string" || !/^0x[0-9a-f]{32}$/.test(pending3.entryClientOrderId) || pending3.entrySide !== "buy" && pending3.entrySide !== "sell" || !Number.isFinite(Number(pending3.requestedSize)) || Number(pending3.requestedSize) <= 0 || stopLoss == null || typeof stopLoss !== "object" || Array.isArray(stopLoss) || takeProfit == null || typeof takeProfit !== "object" || Array.isArray(takeProfit)) {
+          if (typeof pending3.entryMutationId !== "string" || !/^[0-9a-f-]{36}$/.test(pending3.entryMutationId) || typeof pending3.entryClientOrderId !== "string" || !/^0x[0-9a-f]{32}$/.test(pending3.entryClientOrderId) || pending3.entrySide !== "buy" && pending3.entrySide !== "sell" || !Number.isFinite(Number(pending3.requestedSize)) || Number(pending3.requestedSize) <= 0 || pending3.createdAtMs != null && (typeof pending3.createdAtMs !== "number" || !Number.isSafeInteger(pending3.createdAtMs) || pending3.createdAtMs <= 0) || stopLoss == null || typeof stopLoss !== "object" || Array.isArray(stopLoss) || takeProfit == null || typeof takeProfit !== "object" || Array.isArray(takeProfit)) {
             protectiveGroupReadFailures.add(key);
             return [];
           }
           const sl = stopLoss;
           const tp = takeProfit;
+          let recovery;
+          if (pending3.recovery != null) {
+            const recoveryRecord = pending3.recovery;
+            if (typeof recoveryRecord !== "object" || Array.isArray(recoveryRecord)) {
+              protectiveGroupReadFailures.add(key);
+              return [];
+            }
+            const {
+              unknownOidObservedAtMs,
+              unknownOidFirstSeenAtMs,
+              attempts,
+              nextAttemptAtMs,
+              staleReported,
+              entryFilled
+            } = recoveryRecord;
+            const invalidCount = (value, minimum) => value != null && (typeof value !== "number" || !Number.isSafeInteger(value) || value < minimum);
+            if (invalidCount(unknownOidObservedAtMs, 1) || invalidCount(unknownOidFirstSeenAtMs, 1) || invalidCount(attempts, 0) || invalidCount(nextAttemptAtMs, 0) || staleReported != null && typeof staleReported !== "boolean" || entryFilled != null && typeof entryFilled !== "boolean") {
+              protectiveGroupReadFailures.add(key);
+              return [];
+            }
+            recovery = {
+              ...typeof unknownOidObservedAtMs === "number" ? { unknownOidObservedAtMs } : {},
+              ...typeof unknownOidFirstSeenAtMs === "number" ? { unknownOidFirstSeenAtMs } : {},
+              ...typeof attempts === "number" ? { attempts } : {},
+              ...typeof nextAttemptAtMs === "number" ? { nextAttemptAtMs } : {},
+              ...typeof staleReported === "boolean" ? { staleReported } : {},
+              ...typeof entryFilled === "boolean" ? { entryFilled } : {}
+            };
+          }
           if (typeof sl.enabled !== "boolean" || sl.mode !== "percent" && sl.mode !== "usdc" || !Number.isFinite(Number(sl.value)) || Number(sl.value) < 0 || typeof sl.isTrailing !== "boolean" || typeof tp.enabled !== "boolean" || tp.mode !== "percent" && tp.mode !== "usdc" || !Number.isFinite(Number(tp.value)) || Number(tp.value) < 0) {
             protectiveGroupReadFailures.add(key);
             return [];
@@ -93051,6 +93451,7 @@ var init_runtime_execution = __esm({
             entryClientOrderId: pending3.entryClientOrderId,
             entrySide: pending3.entrySide,
             requestedSize: Number(pending3.requestedSize),
+            ...typeof pending3.createdAtMs === "number" ? { createdAtMs: pending3.createdAtMs } : {},
             stopLoss: {
               enabled: sl.enabled,
               mode: sl.mode,
@@ -93061,7 +93462,8 @@ var init_runtime_execution = __esm({
               enabled: tp.enabled,
               mode: tp.mode,
               value: Number(tp.value)
-            }
+            },
+            ...recovery ? { recovery } : {}
           };
         }
         const attachmentRecord = record5.attachmentJournal;
@@ -93805,6 +94207,7 @@ var init_runtime_execution = __esm({
     };
     buildPendingProtectivePlan = (settings, input) => ({
       ...input,
+      createdAtMs: Date.now(),
       stopLoss: {
         enabled: settings.stopLossEnabled !== false,
         mode: settings.stopLossMode === "usdc" ? "usdc" : "percent",
@@ -94430,7 +94833,7 @@ var init_runtime_execution = __esm({
       }
       return reports;
     };
-    resolveJournaledAttachmentContinuity = async (request, group) => {
+    resolveJournaledAttachmentContinuity = async (request, group, options = {}) => {
       const journal = group.attachmentJournal;
       const plan = group.pendingEntry;
       if (journal == null || plan == null) {
@@ -94527,7 +94930,7 @@ var init_runtime_execution = __esm({
         throw new Error("Journaled protective entry chronology is unresolved.");
       }
       const firstEntry = canonicalRows[firstEntryIndex];
-      if (expectedSign * firstEntry.startPosition < -positionTolerance(firstEntry.startPosition, 0)) {
+      if (options.allowOppositeStart !== true && expectedSign * firstEntry.startPosition < -positionTolerance(firstEntry.startPosition, 0)) {
         throw new Error("Journaled protective entry start position is directionally unresolved.");
       }
       let expectedExposureEstablished = false;
@@ -94929,20 +95332,117 @@ var init_runtime_execution = __esm({
       }
       return reports;
     };
-    recoverPendingClientProtectiveGroups = async (request, pendingGroups) => {
+    readPendingEntryMutation = async (request, plan) => {
+      try {
+        const mutation = await getClientRuntimeExchangeMutation(
+          request.profileId,
+          plan.entryMutationId,
+          request.signal
+        );
+        if (mutation == null) return { kind: "absent" };
+        return mutation.operation_kind === "order" && String(mutation.client_order_id ?? "").trim().toLowerCase() === plan.entryClientOrderId ? { kind: "found", mutation } : { kind: "unavailable" };
+      } catch (error48) {
+        if (request.signal?.aborted) throw error48;
+        return { kind: "unavailable" };
+      }
+    };
+    requireClientRuntimeConfigSeconds = (config2, key) => {
+      const value = Number(config2?.[key]);
+      if (!Number.isFinite(value) || value < 0) {
+        throw new Error(`Missing required client runtime config: ${String(key)}`);
+      }
+      return value;
+    };
+    replacePendingEntryRecovery = (profileId, symbol2, group, recovery) => {
+      const plan = group.pendingEntry;
+      if (plan == null) throw new Error("Pending entry plan is unavailable.");
+      const updated = { ...group, pendingEntry: { ...plan, recovery } };
+      if (!replaceExactClientProtectiveGroup(profileId, symbol2, group, updated)) {
+        throw new Error("Pending entry recovery state could not be saved durably.");
+      }
+      return updated;
+    };
+    recoverPendingClientProtectiveGroups = async (request, pendingGroups, retirements = [], reportsStale = false) => {
       const reports = [];
       const profileId = String(request.profileId).trim();
       const symbol2 = request.executionContext.symbol;
-      for (const group of pendingGroups) {
+      const retryInitialMs = requireClientRuntimeConfigSeconds(
+        request.config,
+        "client_pending_entry_retry_initial_seconds"
+      ) * 1e3;
+      const retryMaxMs = Math.max(retryInitialMs, requireClientRuntimeConfigSeconds(
+        request.config,
+        "client_pending_entry_retry_max_seconds"
+      ) * 1e3);
+      const staleAfterAttempts = Math.max(1, Math.trunc(requireClientRuntimeConfigSeconds(
+        request.config,
+        "client_pending_entry_stale_after_attempts"
+      )));
+      for (const storedGroup of pendingGroups) {
+        let group = storedGroup;
         const plan = group.pendingEntry;
         if (plan == null) continue;
+        const waitMs = (plan.recovery?.nextAttemptAtMs ?? 0) - Date.now();
+        if (waitMs > 0 && waitMs <= retryMaxMs) continue;
+        let entryFilled = plan.recovery?.entryFilled === true || group.attachmentJournal != null;
+        const recordUnresolved = (errorMessage) => {
+          const currentRecovery = group.pendingEntry?.recovery ?? plan.recovery;
+          const attempts = (currentRecovery?.attempts ?? 0) + 1;
+          const reachedCap = attempts >= staleAfterAttempts;
+          const reportStale = reachedCap && reportsStale && currentRecovery?.staleReported !== true;
+          try {
+            group = replacePendingEntryRecovery(profileId, symbol2, group, {
+              ...currentRecovery,
+              attempts,
+              nextAttemptAtMs: entryFilled ? Date.now() : Date.now() + Math.min(retryMaxMs, retryInitialMs * 2 ** Math.min(30, attempts - 1)),
+              ...entryFilled ? { entryFilled: true } : {},
+              ...reportStale || currentRecovery?.staleReported === true ? { staleReported: true } : {}
+            });
+          } catch {
+            reports.push({
+              order_id: plan.entryClientOrderId,
+              client_mutation_id: plan.entryMutationId,
+              symbol: symbol2,
+              action: "PROTECTIVE_RECONCILIATION",
+              status: "failed",
+              execution_metadata: { reason_code: "protective_lifecycle_persistence_failed" }
+            });
+          }
+          if (errorMessage == null && !reportStale) return;
+          if (reachedCap && !reportStale) return;
+          reports.push({
+            order_id: plan.entryClientOrderId,
+            client_mutation_id: plan.entryMutationId,
+            symbol: symbol2,
+            action: "PROTECTIVE_RECONCILIATION",
+            status: "failed",
+            execution_metadata: {
+              reason_code: reportStale ? "pending_protective_entry_stale" : "pending_protective_entry_unresolved",
+              attempts,
+              ...errorMessage ? { error: errorMessage } : {}
+            }
+          });
+        };
+        const recordIfStillPending = () => {
+          const stored = readFreshClientProtectiveGroups(profileId, symbol2);
+          const snapshot = exactClientProtectiveGroupSnapshot(group);
+          if (stored.some((candidate) => exactClientProtectiveGroupSnapshot(candidate) === snapshot)) {
+            recordUnresolved(null);
+          }
+        };
+        const retire = (reasonCode) => {
+          if (!replaceExactClientProtectiveGroup(profileId, symbol2, group, null)) {
+            throw new Error("Pending entry plan could not be retired durably.");
+          }
+          retirements.push({ entryOrderId: plan.entryClientOrderId, reasonCode });
+        };
         try {
           if (group.attachmentJournal != null) {
-            const { disposition } = await resolveJournaledAttachmentContinuity(
+            const { disposition: disposition2 } = await resolveJournaledAttachmentContinuity(
               request,
               group
             );
-            if (disposition !== "matching") {
+            if (disposition2 !== "matching") {
               if (!replaceExactClientProtectiveGroup(profileId, symbol2, group, null)) {
                 reports.push({
                   order_id: group.attachmentJournal.entryOrderId,
@@ -94965,6 +95465,13 @@ var init_runtime_execution = __esm({
                 attachment2.handoffCleanup
               );
             }
+            recordIfStillPending();
+            continue;
+          }
+          const ledger = await readPendingEntryMutation(request, plan);
+          const mutation = ledger.kind === "found" ? ledger.mutation : null;
+          if (mutation != null && (mutation.status === "settled" || mutation.status === "reconciled") && mutation.outcome_code === "rejected") {
+            retire("pending_protective_entry_rejected");
             continue;
           }
           const evidence = await fetchBrowserOrderStatusEvidence({
@@ -94974,12 +95481,102 @@ var init_runtime_execution = __esm({
             signal: request.signal,
             orderId: plan.entryClientOrderId
           });
+          if (evidence.responseValid && evidence.responseStatus === "unknownOid") {
+            const observedAtMs = Date.now();
+            const marginMs = requireClientRuntimeConfigSeconds(
+              request.config,
+              "client_pending_entry_never_landed_margin_seconds"
+            ) * 1e3;
+            const firstSeenAtMs = plan.recovery?.unknownOidFirstSeenAtMs ?? observedAtMs;
+            const recordFirstSeen = () => {
+              if (plan.recovery?.unknownOidFirstSeenAtMs != null) return;
+              group = replacePendingEntryRecovery(profileId, symbol2, group, {
+                ...group.pendingEntry?.recovery ?? plan.recovery,
+                unknownOidFirstSeenAtMs: firstSeenAtMs
+              });
+            };
+            let provableAtMs;
+            if (ledger.kind === "found") {
+              const expiresAfterMs = Number(ledger.mutation.exchange_expires_after_ms);
+              if (!Number.isSafeInteger(expiresAfterMs) || expiresAfterMs <= 0) {
+                throw new Error("Pending entry is unknown to Hyperliquid and its signed expiry is unavailable.");
+              }
+              provableAtMs = expiresAfterMs + marginMs;
+            } else if (ledger.kind === "absent") {
+              const ageStartMs = plan.createdAtMs ?? firstSeenAtMs;
+              const signedLifetimeSeconds = Number(
+                request.config?.client_runtime_exchange_mutation?.expires_after_seconds
+              );
+              if (!Number.isInteger(signedLifetimeSeconds) || signedLifetimeSeconds <= 0) {
+                throw new Error("Missing required client runtime config: client_runtime_exchange_mutation.expires_after_seconds");
+              }
+              provableAtMs = ageStartMs + signedLifetimeSeconds * 1e3 + marginMs;
+            } else {
+              recordFirstSeen();
+              throw new Error("Pending entry is unknown to Hyperliquid and the ledger cannot answer.");
+            }
+            if (observedAtMs < provableAtMs) {
+              recordFirstSeen();
+              throw new Error("Pending entry is unknown to Hyperliquid while its signed action can still land.");
+            }
+            const confirmedAtMs = plan.recovery?.unknownOidObservedAtMs;
+            if (confirmedAtMs == null || confirmedAtMs < provableAtMs) {
+              group = replacePendingEntryRecovery(profileId, symbol2, group, {
+                ...group.pendingEntry?.recovery ?? plan.recovery,
+                unknownOidFirstSeenAtMs: firstSeenAtMs,
+                unknownOidObservedAtMs: observedAtMs
+              });
+              throw new Error("Pending entry is unknown to Hyperliquid; a second read confirms it never landed.");
+            }
+            const { rawFills: unknownEntryFills, evidence: unknownEntryFillEvidence } = await fetchBrowserUserFills({
+              publicRequestPriority: "trading_reconcile",
+              config: request.config ?? {},
+              walletAddress: String(request.executionContext.walletAddress || "").trim(),
+              symbols: [symbol2],
+              forceRefresh: true,
+              signal: request.signal
+            });
+            if (unknownEntryFillEvidence?.exactTerminalFillEvidenceComplete !== true) {
+              throw new Error(
+                `Never-landed pending entry fills are incomplete (${unknownEntryFillEvidence?.source ?? "unknown"}; provider_rows=${unknownEntryFillEvidence?.providerRowCount ?? "unknown"}).`
+              );
+            }
+            if (unknownEntryFills.some((fill) => String(fill.cloid ?? "").trim().toLowerCase() === plan.entryClientOrderId)) {
+              throw new Error("Pending entry is unknown to Hyperliquid but has fills for its CLOID.");
+            }
+            if (ledger.kind === "absent" && (await readPendingEntryMutation(request, plan)).kind !== "absent") {
+              throw new Error("Pending entry reached the ledger while its retirement was being proven.");
+            }
+            retire("pending_protective_entry_never_landed");
+            continue;
+          }
           const expectedSide = plan.entrySide === "buy" ? ["b", "buy"] : ["a", "sell"];
-          const sizeTolerance = Math.max(1e-10, plan.requestedSize * 1e-8);
-          const shapeMatches = evidence.responseValid && evidence.orderMatches && String(evidence.coin ?? "").trim().toUpperCase() === symbol2.trim().toUpperCase() && expectedSide.includes(String(evidence.side ?? "").trim().toLowerCase()) && evidence.reduceOnly === false && evidence.isTrigger === false && evidence.isPositionTpsl === false && evidence.originalSize != null && Math.abs(evidence.originalSize - plan.requestedSize) <= sizeTolerance;
+          const signedSize = evidence.originalSize;
+          const sizeTolerance = Math.max(1e-10, (signedSize ?? 0) * 1e-8);
+          const shapeMatches = evidence.responseValid && evidence.orderMatches && String(evidence.coin ?? "").trim().toUpperCase() === symbol2.trim().toUpperCase() && expectedSide.includes(String(evidence.side ?? "").trim().toLowerCase()) && evidence.reduceOnly === false && evidence.isTrigger === false && evidence.isPositionTpsl === false && signedSize != null && hyperliquidSignedSizeMatchesRequestedSize(
+            plan.requestedSize,
+            request.executionContext.sizeDecimals,
+            signedSize
+          );
+          if (!shapeMatches && evidence.responseValid && evidence.orderMatches && evidence.terminal) {
+            retire("pending_protective_entry_shape_mismatch");
+            reports.push({
+              order_id: plan.entryClientOrderId,
+              client_mutation_id: plan.entryMutationId,
+              symbol: symbol2,
+              action: "PROTECTIVE_RECONCILIATION",
+              status: "failed",
+              execution_metadata: {
+                reason_code: "pending_protective_entry_shape_mismatch",
+                order_status: evidence.orderStatus
+              }
+            });
+            continue;
+          }
           if (!shapeMatches || !evidence.terminal) {
             throw new Error("Pending entry status or shape is unresolved.");
           }
+          if (evidence.fulfilled === true) entryFilled = true;
           const { rawFills, evidence: fillEvidence } = await fetchBrowserUserFills({
             publicRequestPriority: "trading_reconcile",
             config: request.config ?? {},
@@ -95020,14 +95617,37 @@ var init_runtime_execution = __esm({
             filledNotional += canonicalSize * canonicalPrice;
           }
           if (matchingFills.length === 0 && evidence.fulfilled === false) {
-            if (!replaceExactClientProtectiveGroup(profileId, symbol2, group, null)) {
-              throw new Error("Non-filled pending entry could not be cleared durably.");
-            }
+            retire("pending_protective_entry_unfilled");
             continue;
           }
-          if (!fillRowsValid || !Number.isFinite(filledSize) || filledSize <= 0 || filledSize > plan.requestedSize + sizeTolerance || !Number.isFinite(filledNotional) || filledNotional <= 0) {
+          if (!fillRowsValid || !Number.isFinite(filledSize) || filledSize <= 0 || filledSize > (signedSize ?? 0) + sizeTolerance || !Number.isFinite(filledNotional) || filledNotional <= 0) {
             throw new Error("Exact pending entry fills are unavailable.");
           }
+          const { disposition } = await resolveJournaledAttachmentContinuity(request, {
+            ...group,
+            attachmentJournal: {
+              phase: "awaiting_member_outcome",
+              entryOrderId: confirmedEntryOrderId,
+              filledSize,
+              averagePrice: filledNotional / filledSize,
+              members: []
+            }
+          }, { allowOppositeStart: true });
+          if (disposition === "interrupted") {
+            retire("protective_attachment_continuity_interrupted");
+            reports.push({
+              order_id: plan.entryClientOrderId,
+              client_mutation_id: plan.entryMutationId,
+              symbol: symbol2,
+              action: "PROTECTIVE_RECONCILIATION",
+              status: "failed",
+              execution_metadata: {
+                reason_code: "protective_attachment_continuity_interrupted",
+                entry_order_id: plan.entryClientOrderId
+              }
+            });
+            continue;
+          }
           const attachment = await attachClientProtectivePlan(request, group, {
             orderId: String(evidence.orderId),
             filledSize,
@@ -95039,21 +95659,12 @@ var init_runtime_execution = __esm({
               attachment.handoffCleanup
             );
           }
+          recordIfStillPending();
         } catch (error48) {
           if (isClientRuntimeWindowHandoffBeforePlanDispatch(error48) || isClientRuntimeLeaseOwnershipError(error48)) {
             throw error48;
           }
-          reports.push({
-            order_id: plan.entryClientOrderId,
-            client_mutation_id: plan.entryMutationId,
-            symbol: symbol2,
-            action: "PROTECTIVE_RECONCILIATION",
-            status: "failed",
-            execution_metadata: {
-              reason_code: "pending_protective_entry_unresolved",
-              error: getSanitizedRuntimeErrorMessage(error48) || "Pending entry protection is unresolved."
-            }
-          });
+          recordUnresolved(getSanitizedRuntimeErrorMessage(error48) || "Pending entry protection is unresolved.");
         }
       }
       if (hasClientProtectiveGroupReadFailure(profileId, symbol2)) {
@@ -95617,11 +96228,10 @@ var init_runtime_execution = __esm({
         ...await recoverJournaledClientProtectiveAttachments(
           request,
           readClientProtectiveGroups(profileId, symbol2).filter((group) => group.pendingEntry != null && group.legs.length > 0)
-        ),
-        ...await recoverPendingClientProtectiveGroups(
-          request,
-          readClientProtectiveGroups(profileId, symbol2).filter((group) => group.pendingEntry != null && group.legs.length === 0)
         )
+        // Pending entries (no legs yet) are polled by one owner, the runtime's
+        // pending-protection sweep (or the app host without a runtime), never
+        // again by each decision.
       ];
       const reconciliationGroupSet = readFreshClientProtectiveGroups(profileId, symbol2);
       if (hasClientProtectiveGroupReadFailure(profileId, symbol2)) {
@@ -96676,6 +97286,18 @@ var init_runtime_execution = __esm({
         signal?.addEventListener("abort", onAbort, { once: true });
       });
     };
+    isDefinitiveEntryRejection = (error48, entryMutationId) => error48 instanceof HyperliquidExchangeRejectionError && Boolean(entryMutationId) && String(error48.clientMutationId ?? "").trim().toLowerCase() === String(entryMutationId).trim().toLowerCase();
+    resolveExchangeSizeDecimals = async (symbol2, config2, publicRequestPriority) => {
+      const { sz_decimals: sizeDecimals } = await resolveHyperliquidAsset({
+        symbol: symbol2,
+        config: config2,
+        publicRequestPriority
+      });
+      if (!Number.isInteger(sizeDecimals) || sizeDecimals < 0) {
+        throw new Error(`Hyperliquid size precision is unavailable for ${symbol2}.`);
+      }
+      return sizeDecimals;
+    };
     roundAssetSize = (size, decimals) => {
       if (!Number.isFinite(size)) {
         return 0;
@@ -96793,6 +97415,7 @@ var init_runtime_execution = __esm({
       return pending3;
     };
     drainServerProtectionForRuntime = async (request, initialActions) => {
+      if (request.executionMode === "server") return;
       try {
         await drainClientProtectiveActions({
           profileId: request.profileId,
@@ -96877,9 +97500,178 @@ var init_runtime_execution = __esm({
         if (clientExecutionMutations.get(key) === pending3) clientExecutionMutations.delete(key);
       }
     };
+    allocateServerExecutionCapacity = async (authority, plans) => {
+      if (plans.length === 0) return [];
+      try {
+        return await checkServerHostExecutionCapacity(
+          authority.profileId,
+          plans,
+          authority.signal,
+          authority.sessionId,
+          authority.runtimeLeaseToken,
+          authority.runtimeDeviceId,
+          authority.schedulerInstanceId
+        );
+      } catch {
+        throwIfAborted2(authority.signal);
+        return plans.map(() => "unavailable");
+      }
+    };
     withClientProtectiveAdoptionMutation = (profileId, work, signal) => withClientExecutionMutation({ profileId: String(profileId).trim(), signal }, work);
-    executeClientRuntimeDecision = (input) => withClientExecutionMutation(input, () => executeClientRuntimeDecisionUnlocked(input));
-    maintainClientRuntimeTrailingStops = (request) => withClientExecutionMutation(request, async () => {
+    executeClientRuntimeDecisionLocked = (input) => withClientExecutionMutation(input, () => withClientProtectivePlanSetLock(
+      input.profileId,
+      input.executionContext.symbol,
+      () => executeClientRuntimeDecisionUnlocked(input),
+      input.signal
+    ));
+    SERVER_AUDIT_RECORDED_ELSEWHERE = /* @__PURE__ */ new Set([
+      "suppressed_duplicate_decision",
+      "same_intent_cooldown",
+      "redis_unavailable",
+      "execution_capacity_refused",
+      "execution_capacity_unavailable"
+    ]);
+    serverExecutionAuditOutcome = (result) => {
+      if (result.status === "executed") {
+        if (result.reasonCode === "close_fill_unresolved") return ["executed", "close_fill_unresolved"];
+        if (result.reasonCode === "flip_close_fill_unresolved") return ["blocked", "flip_close_fill_unresolved"];
+        if (result.reasonCode === "protective_reconciliation_unresolved") return ["blocked", "protective_reconciliation_unresolved"];
+        return ["executed", "executed"];
+      }
+      if (result.status === "skipped") {
+        if (result.reasonCode === "noop_already_at_target" || result.reasonCode === "stale_target_conflict") {
+          return ["noop", result.reasonCode];
+        }
+        if (result.reasonCode === "protective_reconciliation_unresolved") return ["blocked", result.reasonCode];
+        return ["blocked", "local_safety_block"];
+      }
+      const failure2 = result.executionReports.find((report) => report.status === "failed");
+      const failureReason = String(failure2?.execution_metadata?.reason_code ?? "");
+      if (failureReason === "outcome_unknown") return ["outcome_unknown", "outcome_unknown"];
+      return ["error", failureReason === "exchange_rejected" ? "exchange_rejected" : "execution_error"];
+    };
+    executeClientRuntimeDecision = async (input) => {
+      if (input.executionMode !== "server") return executeClientRuntimeDecisionLocked(input);
+      const audit = input.serverExecutionAudit ?? { auditId: null };
+      let entryDispatched = false;
+      let result;
+      try {
+        result = await executeClientRuntimeDecisionLocked({
+          ...input,
+          serverExecutionAudit: audit,
+          onExchangeOrderDispatched: (kind) => {
+            input.onExchangeOrderDispatched?.(kind);
+            if (kind === "entry") entryDispatched = true;
+          }
+        });
+      } catch (error48) {
+        if (audit.auditId !== null && !input.signal?.aborted && (input.decision === "BUY" || input.decision === "SELL")) {
+          const reason = String(error48?.reasonCode ?? "");
+          const [status2, reasonCode2] = reason === "outcome_unknown" || !reason && entryDispatched ? ["outcome_unknown", "outcome_unknown"] : ["error", reason === "exchange_rejected" ? "exchange_rejected" : "execution_error"];
+          try {
+            await recordServerHostExecutionAudit(
+              input.profileId,
+              {
+                auditId: audit.auditId,
+                cycleId: input.cycleId ?? null,
+                symbol: input.executionContext.symbol,
+                intent: "open",
+                side: input.decision === "BUY" ? "buy" : "sell",
+                requestedUnits: Math.max(0, Math.trunc(input.units)),
+                reduceOnly: false,
+                lastPrice: input.executionContext.lastPrice,
+                status: status2,
+                reasonCode: reasonCode2,
+                orderId: null
+              },
+              input.signal,
+              input.sessionId,
+              input.runtimeLeaseToken,
+              input.runtimeDeviceId,
+              input.schedulerInstanceId
+            );
+          } catch (auditError) {
+            appendRuntimeDebugEvent({
+              label: "server_execution_audit_failed",
+              note: getSanitizedRuntimeErrorMessage(auditError) || "unknown",
+              outcome: "error"
+            });
+          }
+        }
+        throw error48;
+      }
+      if (result.intent === "hold" || !(input.decision === "BUY" || input.decision === "SELL") || SERVER_AUDIT_RECORDED_ELSEWHERE.has(String(result.reasonCode ?? ""))) {
+        return result;
+      }
+      const [status, reasonCode] = serverExecutionAuditOutcome(result);
+      const orderId = result.executionReports.find((report) => report.status === "executed" && report.order_id)?.order_id ?? null;
+      try {
+        const recorded = await recordServerHostExecutionAudit(
+          input.profileId,
+          {
+            auditId: audit.auditId,
+            cycleId: input.cycleId ?? null,
+            symbol: input.executionContext.symbol,
+            intent: result.intent,
+            side: result.side ?? null,
+            requestedUnits: Math.max(0, Math.trunc(result.requestedUnits)),
+            reduceOnly: result.reduceOnly,
+            lastPrice: input.executionContext.lastPrice,
+            status,
+            reasonCode,
+            orderId: orderId === null ? null : String(orderId)
+          },
+          input.signal,
+          input.sessionId,
+          input.runtimeLeaseToken,
+          input.runtimeDeviceId,
+          input.schedulerInstanceId
+        );
+        audit.auditId = recorded.audit_id;
+      } catch (error48) {
+        appendRuntimeDebugEvent({
+          label: "server_execution_audit_failed",
+          note: getSanitizedRuntimeErrorMessage(error48) || "unknown",
+          outcome: "error"
+        });
+      }
+      if (audit.auditId === null) return result;
+      const auditId = audit.auditId;
+      return {
+        ...result,
+        executionReports: result.executionReports.map((report) => report.status === "executed" && ["BUY", "SELL", "FLIP_OPEN"].includes(String(report.action).toUpperCase()) ? { ...report, execution_metadata: { ...report.execution_metadata, execution_audit_id: auditId } } : report)
+      };
+    };
+    waitForFlipCloseFreshness = async (input) => {
+      const delayMs = Math.round(input.executionContext.closePositionDelaySeconds * 1e3);
+      if (!(delayMs > 0)) return;
+      const pollMs = Number(input.executionContext.closePositionFreshnessPollMs);
+      const walletAddress = String(input.executionContext.walletAddress || "").trim();
+      if (input.executionMode !== "server" || !(pollMs > 0) || !walletAddress) {
+        await sleep2(delayMs, input.signal);
+        return;
+      }
+      const deadline = Date.now() + delayMs;
+      for (; ; ) {
+        throwIfAborted2(input.signal);
+        try {
+          const snapshot = await fetchBrowserPositionSnapshot(
+            input.config ?? {},
+            walletAddress,
+            input.executionContext.symbol,
+            input.signal,
+            executionReadPriority(input)
+          );
+          if (Number(snapshot.size) === 0) return;
+        } catch {
+          throwIfAborted2(input.signal);
+        }
+        const remaining = deadline - Date.now();
+        if (remaining <= 0) return;
+        await sleep2(Math.min(pollMs, remaining), input.signal);
+      }
+    };
+    maintainClientRuntimeTrailingStops = (request) => withClientExecutionMutation(request, () => withClientProtectivePlanSetLock(request.profileId, request.executionContext.symbol, async () => {
       const context = request.executionContext;
       const capturedAt = Date.parse(context.decisionSnapshotCapturedAt ?? "");
       const maxAge = Number(context.executionFreshnessMaxAgeSeconds) * 1e3;
@@ -96888,15 +97680,11 @@ var init_runtime_execution = __esm({
       const groups = readFreshClientProtectiveGroups(String(request.profileId).trim(), context.symbol);
       if (hasClientProtectiveGroupReadFailure(String(request.profileId).trim(), context.symbol) || groups.some((group) => group.walletAddress !== String(context.walletAddress ?? "").trim().toLowerCase() || group.pendingEntry || group.attachmentJournal || group.cleanupRequired || group.legs.some((leg) => leg.replacement))) return [];
       if (!groups.some((group) => group.legs.some((leg) => leg.isTrailing && typeof leg.orderId === "number"))) return [];
-      const { sz_decimals: assetSizeDecimals } = await resolveHyperliquidAsset({
-        symbol: context.symbol,
-        config: request.config,
-        publicRequestPriority: "trading_reduce"
-      });
+      const assetSizeDecimals = await resolveExchangeSizeDecimals(context.symbol, request.config ?? void 0, "trading_reduce");
       const isLong = context.currentPositionSize > 0;
       const improves = groups.some((group) => group.isLong === isLong && group.legs.some((leg) => {
         if (!leg.isTrailing || typeof leg.orderId !== "number") return false;
-        const size = roundAssetSize(Math.min(leg.size, Math.abs(context.currentPositionSize)), context.sizeDecimals);
+        const size = roundAssetSize(Math.min(leg.size, Math.abs(context.currentPositionSize)), assetSizeDecimals);
         if (!(size > 0)) return false;
         return resolveTrailingStopTightening({
           currentPrice: context.lastPrice,
@@ -96911,12 +97699,16 @@ var init_runtime_execution = __esm({
       }));
       if (!improves) return [];
       await request.beforeTrailingMaintenance?.(request.signal);
-      const guardedRequest = { ...request, onExchangeOrderDispatched: (kind) => {
-        if (Date.now() - capturedAt > maxAge) throw new Error("Trailing observation expired before exchange dispatch.");
-        request.onExchangeOrderDispatched?.(kind);
-      } };
+      const guardedRequest = {
+        ...request,
+        executionContext: { ...context, sizeDecimals: assetSizeDecimals },
+        onExchangeOrderDispatched: (kind) => {
+          if (Date.now() - capturedAt > maxAge) throw new Error("Trailing observation expired before exchange dispatch.");
+          request.onExchangeOrderDispatched?.(kind);
+        }
+      };
       return tightenClientTrailingStops({ request: guardedRequest, currentPositionSize: context.currentPositionSize, currentPrice: context.lastPrice });
-    });
+    }, request.signal));
     listPendingClientProtectiveSymbols = (profileId) => {
       const storage3 = resolveClientRuntimeProtectionStorage();
       if (!storage3) return [];
@@ -96970,11 +97762,7 @@ var init_runtime_execution = __esm({
         if (!hasUnresolvedClientProtectiveIdentity(groups)) continue;
         let symbolReports = [];
         try {
-          const { sz_decimals: sizeDecimals } = await resolveHyperliquidAsset({
-            symbol: symbol2,
-            config: input.config,
-            publicRequestPriority: "trading_reconcile"
-          });
+          const sizeDecimals = await resolveExchangeSizeDecimals(symbol2, input.config, "trading_reconcile");
           const core = {
             profileId,
             config: input.config,
@@ -97186,7 +97974,8 @@ var init_runtime_execution = __esm({
       const results = [];
       for (const symbol2 of listPendingClientProtectiveSymbols(profileId)) {
         throwIfAborted2(input.signal);
-        const reports = await withClientExecutionMutation({ profileId, signal: input.signal }, async () => {
+        const retired = [];
+        const reports = await withClientExecutionMutation({ profileId, signal: input.signal }, () => withClientProtectivePlanSetLock(profileId, symbol2, async () => {
           const groups = readFreshClientProtectiveGroups(profileId, symbol2);
           if (hasClientProtectiveGroupReadFailure(profileId, symbol2)) {
             return [{
@@ -97199,14 +97988,7 @@ var init_runtime_execution = __esm({
           }
           const ownGroups = groups.filter((group) => group.pendingEntry != null && group.walletAddress === walletAddress.toLowerCase());
           if (ownGroups.length === 0) return [];
-          const { sz_decimals: sizeDecimals } = await resolveHyperliquidAsset({
-            symbol: symbol2,
-            config: input.config,
-            publicRequestPriority: "trading_reconcile"
-          });
-          if (!Number.isInteger(sizeDecimals) || sizeDecimals < 0) {
-            throw new Error(`Hyperliquid size precision is unavailable for ${symbol2}.`);
-          }
+          const sizeDecimals = await resolveExchangeSizeDecimals(symbol2, input.config, "trading_reconcile");
           const request = {
             mutationAuthority: "manual_session",
             profileId,
@@ -97222,21 +98004,100 @@ var init_runtime_execution = __esm({
             ),
             ...await recoverPendingClientProtectiveGroups(
               request,
-              readClientProtectiveGroups(profileId, symbol2).filter((group) => group.pendingEntry != null && group.legs.length === 0 && group.walletAddress === walletAddress.toLowerCase())
+              readClientProtectiveGroups(profileId, symbol2).filter((group) => group.pendingEntry != null && group.legs.length === 0 && group.walletAddress === walletAddress.toLowerCase()),
+              retired,
+              input.reportsStale !== false
             )
           ];
-        });
-        results.push({ symbol: symbol2, reports });
+        }, input.signal));
+        results.push({ symbol: symbol2, reports, ...retired.length > 0 ? { retired } : {} });
       }
       return results;
     };
-    executeClientRuntimeDecisionUnlocked = async (input) => {
-      throwIfAborted2(input.signal);
-      const requestedUnits = Math.max(0, Math.trunc(input.units));
+    clientRuntimeDecisionSizesOrders = (input) => {
+      const context = input.executionContext;
+      const profileId = String(input.profileId).trim();
+      if (input.decision !== "HOLD" && Math.max(0, Math.trunc(input.units)) > 0) return true;
+      if (readClientProtectiveGroups(profileId, context.symbol).some((group) => group.legs.length > 0 || group.attachmentJournal != null) || hasClientProtectiveGroupReadFailure(profileId, context.symbol)) {
+        return true;
+      }
+      const positionSize = Number.isFinite(context.currentPositionSize) ? Number(context.currentPositionSize) : 0;
+      return !input.skipTrailingMaintenance && context.tpSlEnabled === true && context.stopLossEnabled !== false && context.stopLossType === "trailing" && positionSize !== 0;
+    };
+    executeClientRuntimeDecisionUnlocked = async (unsizedInput) => {
+      throwIfAborted2(unsizedInput.signal);
+      const requestedUnits = Math.max(0, Math.trunc(unsizedInput.units));
       appendRuntimeDebugEvent({
         label: "execution_start",
-        note: `decision=${input.decision} units=${requestedUnits} symbol=${input.executionContext.symbol}`
+        note: `decision=${unsizedInput.decision} units=${requestedUnits} symbol=${unsizedInput.executionContext.symbol}`
       });
+      if (!clientRuntimeDecisionSizesOrders(unsizedInput)) {
+        return {
+          status: "skipped",
+          intent: "hold",
+          side: null,
+          reduceOnly: false,
+          requestedUnits,
+          targetSignedUnits: signedUnitsFromEntryPosition(
+            Number.isFinite(unsizedInput.executionContext.currentPositionSize) ? Number(unsizedInput.executionContext.currentPositionSize) : 0,
+            unsizedInput.executionContext.currentPositionEntryPrice,
+            unsizedInput.executionContext.unitSizeUsdc
+          ),
+          executedSizeAsset: 0,
+          executionReports: [],
+          message: unsizedInput.decision === "HOLD" ? "Hold (No Action)" : "Unsupported decision",
+          executionSnapshotId: createRuntimeId(),
+          executionSnapshotCapturedAt: (/* @__PURE__ */ new Date()).toISOString()
+        };
+      }
+      if (unsizedInput.executionMode === "server" && !unsizedInput.serverCapacityChecked && (unsizedInput.decision === "BUY" || unsizedInput.decision === "SELL") && requestedUnits > 0) {
+        const skipped = (reasonCode, message) => ({
+          status: "skipped",
+          intent: "hold",
+          side: null,
+          reduceOnly: false,
+          requestedUnits,
+          targetSignedUnits: 0,
+          executedSizeAsset: 0,
+          executionReports: [],
+          message,
+          reasonCode,
+          executionSnapshotId: createRuntimeId(),
+          executionSnapshotCapturedAt: (/* @__PURE__ */ new Date()).toISOString()
+        });
+        const capacity = unsizedInput.serverCapacityAllocation ?? (await allocateServerExecutionCapacity(unsizedInput, [
+          { symbol: unsizedInput.executionContext.symbol, decision: unsizedInput.decision, units: requestedUnits }
+        ]))[0];
+        if (capacity === "unavailable") {
+          throwIfAborted2(unsizedInput.signal);
+          return skipped("execution_capacity_unavailable", "Execution skipped: Failed to fetch positions before limit check.");
+        }
+        if (!capacity.accepted || !(capacity.units > 0)) {
+          appendRuntimeDebugEvent({
+            label: "execution_capacity_refused",
+            note: `symbol=${unsizedInput.executionContext.symbol} reason=${capacity.reason_code ?? "unknown"}`,
+            outcome: "ok"
+          });
+          return skipped("execution_capacity_refused", `Skipped: runtime constraint ${capacity.reason_code ?? "capacity"}.`);
+        }
+        return executeClientRuntimeDecisionUnlocked({
+          ...unsizedInput,
+          units: Math.min(requestedUnits, Math.trunc(capacity.units)),
+          serverCapacityChecked: true
+        });
+      }
+      const input = {
+        ...unsizedInput,
+        executionContext: {
+          ...unsizedInput.executionContext,
+          sizeDecimals: await resolveExchangeSizeDecimals(
+            unsizedInput.executionContext.symbol,
+            unsizedInput.config ?? void 0,
+            unsizedInput.decision === "HOLD" || requestedUnits <= 0 ? "trading_reconcile" : executionReadPriority(unsizedInput)
+          )
+        }
+      };
+      throwIfAborted2(input.signal);
       const decisionSnapshotPositionSize = Number.isFinite(input.executionContext.currentPositionSize) ? Number(input.executionContext.currentPositionSize) : 0;
       const decisionSnapshotSignedUnits = signedUnitsFromEntryPosition(
         decisionSnapshotPositionSize,
@@ -97449,7 +98310,52 @@ var init_runtime_execution = __esm({
           executionSnapshotCapturedAt
         };
       }
-      if (!targetResolution.closeOpposingPosition && classified.reduceOnly !== true) {
+      if (input.executionMode === "server") {
+        throwIfAborted2(input.signal);
+        const claim = await claimServerHostExecution(
+          input.profileId,
+          {
+            cycleId: input.cycleId ?? null,
+            symbol: input.executionContext.symbol,
+            intent: classified.intent,
+            side: classified.side,
+            requestedUnits: Math.max(0, Math.trunc(classified.requestedUnits)),
+            reduceOnly: classified.reduceOnly,
+            marginMode: input.executionContext.marginMode === "auto" ? null : input.executionContext.marginMode,
+            lastPrice: input.executionContext.lastPrice
+          },
+          input.signal,
+          input.sessionId,
+          input.runtimeLeaseToken,
+          input.runtimeDeviceId,
+          input.schedulerInstanceId
+        );
+        if (input.serverExecutionAudit && typeof claim.audit_id === "number") {
+          input.serverExecutionAudit.auditId = claim.audit_id;
+        }
+        if (!claim.allowed) {
+          appendRuntimeDebugEvent({
+            label: "execution_guard_suppressed",
+            note: `symbol=${input.executionContext.symbol} intent=${classified.intent} reason=${claim.reason_code}`,
+            outcome: "ok"
+          });
+          return {
+            status: "skipped",
+            intent: classified.intent,
+            side: classified.side,
+            reduceOnly: classified.reduceOnly,
+            requestedUnits: classified.requestedUnits,
+            targetSignedUnits: classified.targetSignedUnits,
+            executedSizeAsset: 0,
+            executionReports: reconciliationReports,
+            message: "The execution guard suppressed a duplicate or repeated decision.",
+            reasonCode: claim.reason_code,
+            executionSnapshotId,
+            executionSnapshotCapturedAt
+          };
+        }
+      }
+      if (!targetResolution.closeOpposingPosition && classified.reduceOnly !== true && !await serverEntryLeverageAlreadyHeld(input)) {
         throwIfAborted2(input.signal);
         await executeClientLeverageUpdate({
           profileId: input.profileId,
@@ -97662,9 +98568,7 @@ var init_runtime_execution = __esm({
           input.executionContext.symbol,
           []
         );
-        if (input.executionContext.closePositionDelaySeconds > 0) {
-          await sleep2(Math.round(input.executionContext.closePositionDelaySeconds * 1e3), input.signal);
-        }
+        await waitForFlipCloseFreshness(input);
         throwIfAborted2(input.signal);
         await executeClientLeverageUpdate({
           profileId: input.profileId,
@@ -97683,10 +98587,8 @@ var init_runtime_execution = __esm({
         throwIfAborted2(input.signal);
       }
       const actualUnits = targetResolution.orderUnits;
-      const sizeAsset = roundAssetSize(
-        input.executionContext.unitSizeUsdc * actualUnits / executionPrice,
-        input.executionContext.sizeDecimals
-      );
+      const intendedSizeAsset = input.executionContext.unitSizeUsdc * actualUnits / executionPrice;
+      const sizeAsset = Number.isFinite(intendedSizeAsset) && intendedSizeAsset > 0 ? quantizeHyperliquidOrderSizeValue(intendedSizeAsset, input.executionContext.sizeDecimals, "nearest") : 0;
       appendRuntimeDebugEvent({
         label: "execution_size_computed",
         note: `symbol=${input.executionContext.symbol} actualUnits=${actualUnits} sizeAsset=${sizeAsset} price=${executionPrice}`
@@ -97694,7 +98596,7 @@ var init_runtime_execution = __esm({
       if (sizeAsset <= 0) {
         appendRuntimeDebugEvent({
           label: "execution_skipped_zero_size",
-          note: `actualUnits=${actualUnits} unitSize=${input.executionContext.unitSizeUsdc} decimals=${input.executionContext.sizeDecimals}`,
+          note: `reason=size_below_lot_precision actualUnits=${actualUnits} unitSize=${input.executionContext.unitSizeUsdc} intendedSize=${intendedSizeAsset} decimals=${input.executionContext.sizeDecimals}`,
           outcome: "error"
         });
         return {
@@ -97890,6 +98792,9 @@ var init_runtime_execution = __esm({
         const handoffBeforeDispatch = handoffVeto || !entryDispatchBoundaryPassed && input.shouldCancelBeforeExchangeOrderDispatch?.() === true;
         const hasCommittedReports = executionReports.some((report) => report.status === "executed" && String(report.order_id || "").trim().length > 0);
         let vetoedProtectionCleanupFailed = false;
+        if (pendingProtectiveGroup != null && entryDispatchBoundaryPassed && pendingProtectiveCleanup != null && isDefinitiveEntryRejection(entryDispatchError, entryMutationId)) {
+          clearClientRuntimeVetoedProtectiveIntent(pendingProtectiveCleanup);
+        }
         if (pendingProtectiveGroup != null && !entryDispatchBoundaryPassed) {
           if (pendingProtectiveCleanup == null || !clearClientRuntimeVetoedProtectiveIntent(pendingProtectiveCleanup)) {
             vetoedProtectionCleanupFailed = true;
@@ -98843,7 +99748,7 @@ var init_runtime_execution = __esm({
 });
 
 // lib/runtime/protective-adoption-status.ts
-var deferrals, listeners, notify, recordClientProtectiveAdoptionDeferral, clearClientProtectiveAdoptionDeferral;
+var deferrals, listeners2, notify, recordClientProtectiveAdoptionDeferral, clearClientProtectiveAdoptionDeferral;
 var init_protective_adoption_status = __esm({
   "lib/runtime/protective-adoption-status.ts"() {
     "use strict";
@@ -98851,9 +99756,9 @@ var init_protective_adoption_status = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     deferrals = /* @__PURE__ */ new Map();
-    listeners = /* @__PURE__ */ new Set();
+    listeners2 = /* @__PURE__ */ new Set();
     notify = () => {
-      listeners.forEach((listener) => listener());
+      listeners2.forEach((listener) => listener());
     };
     recordClientProtectiveAdoptionDeferral = (profileId, symbols) => {
       deferrals.set(String(profileId).trim(), { deferredAtMs: Date.now(), symbols: [...symbols] });
@@ -104023,7 +104928,7 @@ var init_inference_observability = __esm({
 });
 
 // lib/runtime/provider-client.ts
-var mapOpenAiCompatibleNativeRequestPath, isRetryableProviderFailureForFallback, extractRuntimeProviderFailureStatusCode, isModelSpecificProviderFailure, isKeySpecificOrTransientProviderFailure, providerDispatchClockMs, beginProviderDispatch, providerDispatchLatencyMs, attachProviderDispatchFailure, attachProviderFailureTrace, toRuntimeExecutionMode, buildNoneReasoningPayload, normalizeLevelValue, buildRuntimeReasoningPayload, resolveProviderReasoningParameters, requestedReasoningParameters, usesReasoningCompletionTokens, shouldRequestReasoningTrace, normalizeProviderToken, runtimeProviderForByokProvider, findByokProviderForRuntime, findNativeRequestParametersForModel, modelHasNativeRequestApiSurface, setDottedRequestValue, normalizeProviderMaxTokens, applyRuntimeRequestContract, normalizeProvider2, requireProviderEndpoint, estimateTokenCount, normalizeUsageCount, buildOpenAiUsagePayload, buildAnthropicUsagePayload, buildGoogleUsagePayload, normalizeProviderUsageMetrics, providerResponseSignals, fetchProvider, readProviderPayload, emitRuntimeDelta, readProviderTextStream, extractOpenAiCompatibleDeltaText, readOpenAiCompatibleTextStream, rawProviderTextForDebug, extractProviderErrorDetail, buildCanonicalProviderFailureMessage, toProviderNetworkDebugError, REASONING_ONLY_CONTENT_TYPES, extractOpenAiContentPartText, extractOpenAiReasoningPartText, extractOpenAiMessageContent, extractOpenAiMessageReasoningContent, extractOpenAiCompatibleText, normalizeRuntimeChatHistory, calculateProviderCost, callOpenAiCompatible, extractOpenAiResponsesText, extractOpenAiResponsesReasoning, callOpenAiResponses, extractAnthropicMessageText, extractAnthropicReasoningContent, callAnthropic, isVertexExpressKey, googlePublicModelIdRegexes, shouldUseGooglePublicEndpointForModel, normalizeGoogleModelId, shouldRetryGoogleVertexRequestPublicly, GOOGLE_VERTEX_PUBLIC_RETRY_NOTE, buildGoogleRequest, isGoogleReasoningPart, extractGoogleMessageText, extractGoogleReasoningContent, extractGoogleSafetyMetadata, GOOGLE_BLOCKED_FINISH_REASONS, googleProviderBlockReason, callGoogle, resolveRuntimeProvider, defaultInvocationContext, defaultProviderTransport, invocationFailureCode, buildBrowserInvocation, resolveProviderSecretKey, resolveNativeProviderCredentialSlots, resolveProviderSecretKeySlots, requireOpenAiCompatibleRuntimeBaseUrl, runtimeSubscriptionPlan, runtimeKeySlotSupportsModel, invokeRuntimeProviderAttempt, invokeRuntimeProvider;
+var mapOpenAiCompatibleNativeRequestPath, isRetryableProviderFailureForFallback, extractRuntimeProviderFailureStatusCode, isModelSpecificProviderFailure, isKeySpecificOrTransientProviderFailure, providerDispatchClockMs, beginProviderDispatch, providerDispatchLatencyMs, attachProviderDispatchFailure, attachProviderFailureTrace, toRuntimeExecutionMode, buildNoneReasoningPayload, normalizeLevelValue, buildRuntimeReasoningPayload, resolveProviderReasoningParameters, requestedReasoningParameters, usesReasoningCompletionTokens, shouldRequestReasoningTrace, normalizeProviderToken, runtimeProviderForByokProvider, findByokProviderForRuntime, findNativeRequestParametersForModel, modelHasNativeRequestApiSurface, setDottedRequestValue, normalizeProviderMaxTokens, applyRuntimeRequestContract, normalizeProvider2, requireProviderEndpoint, estimateTokenCount, normalizeUsageCount, buildOpenAiUsagePayload, buildAnthropicUsagePayload, buildGoogleUsagePayload, normalizeProviderUsageMetrics, providerResponseSignals, fetchProvider, readProviderPayload, emitRuntimeDelta, readProviderTextStream, extractOpenAiCompatibleDeltaText, readOpenAiCompatibleTextStream, rawProviderTextForDebug, extractProviderErrorDetail, buildCanonicalProviderFailureMessage, toProviderNetworkDebugError, REASONING_ONLY_CONTENT_TYPES, extractOpenAiContentPartText, extractOpenAiReasoningPartText, extractOpenAiMessageContent, extractOpenAiMessageReasoningContent, extractOpenAiCompatibleText, normalizeRuntimeChatHistory, calculateProviderCost, callOpenAiCompatible, extractOpenAiResponsesText, extractOpenAiResponsesReasoning, callOpenAiResponses, extractAnthropicMessageText, extractAnthropicReasoningContent, callAnthropic, isVertexExpressKey, googlePublicModelIdRegexes, shouldUseGooglePublicEndpointForModel, normalizeGoogleModelId, shouldRetryGoogleVertexRequestPublicly, GOOGLE_VERTEX_PUBLIC_RETRY_NOTE, buildGoogleRequest, isGoogleReasoningPart, extractGoogleMessageText, extractGoogleReasoningContent, extractGoogleSafetyMetadata, GOOGLE_BLOCKED_FINISH_REASONS, googleProviderBlockReason, callGoogle, resolveRuntimeProvider, defaultInvocationContext, defaultProviderTransport, invocationFailureCode, buildBrowserInvocation, resolveProviderSecretKey, resolveNativeProviderCredentialSlots, resolveProviderSecretKeySlots, requireOpenAiCompatibleRuntimeBaseUrl, runtimeSubscriptionPlan, runtimeKeySlotSupportsModel, invokeRuntimeProviderAttempt, runtimeProviderInvoker, invokeRuntimeProvider;
 var init_provider_client = __esm({
   "lib/runtime/provider-client.ts"() {
     "use strict";
@@ -106738,8 +107643,10 @@ var init_provider_client = __esm({
         toolCalls: response.toolCalls
       };
     };
+    runtimeProviderInvoker = null;
     invokeRuntimeProvider = async (input) => {
       if (input.signal?.aborted) throw input.signal.reason ?? new DOMException("Cancelled", "AbortError");
+      if (runtimeProviderInvoker) return runtimeProviderInvoker(input);
       const policy2 = input.provider === "google" && Number(input.profileId) > 0 && !input.tools?.length && !input.onDelta && shouldUseGooglePublicEndpointForModel(input.config, input.model) ? googleEgressPolicyForModel(input.config.google_egress, input.model) : void 0;
       if (policy2) {
         const timeoutMs = Math.min(input.timeoutMs ?? policy2.deadline_seconds * 1e3, policy2.deadline_seconds * 1e3);
@@ -107730,7 +108637,7 @@ var init_reasoning_controls = __esm({
             return buildNoneReasoningControls();
           }
           seen.add(key);
-          const label = typeof record5.label === "string" && record5.label.trim() ? record5.label.trim() : void 0;
+          const label2 = typeof record5.label === "string" && record5.label.trim() ? record5.label.trim() : void 0;
           const nested = normalizeReasoningControls({
             ...Object.fromEntries(Object.entries(record5).filter(([itemKey]) => !["key", "label"].includes(itemKey))),
             schema_version: 1
@@ -107740,7 +108647,7 @@ var init_reasoning_controls = __esm({
           }
           nestedControls.push({
             key,
-            ...label ? { label } : {},
+            ...label2 ? { label: label2 } : {},
             ...nested
           });
         }
@@ -107905,24 +108812,170 @@ var init_model_controller_provenance = __esm({
   }
 });
 
+// lib/runtime/ai-schedule.ts
+function evaluateAiSchedule(schedule, defaults, nowMs2) {
+  if (!isAiScheduleEnabled(schedule)) {
+    return { shouldRun: true, nextChangeAtMs: null, message: "Schedule Disabled (Running 24/7)" };
+  }
+  try {
+    const timeZone = schedule.timezone ?? defaults?.timezone;
+    if (typeof timeZone !== "string" || !timeZone.trim()) throw new Error("Invalid schedule timezone");
+    const nowWall = wallAt(timeZone, nowMs2);
+    const windows = schedule.windows ?? defaults?.windows;
+    if (!truthy(windows)) return { shouldRun: false, nextChangeAtMs: null, message: "No windows configured" };
+    if (!Array.isArray(windows)) throw new Error("Invalid schedule windows");
+    const nowDay = Math.floor(nowWall / DAY_MS) * DAY_MS;
+    const candidates = [];
+    for (let dayOffset = -6; dayOffset < 8; dayOffset += 1) {
+      const dateMs = nowDay + dayOffset * DAY_MS;
+      const weekday = (new Date(dateMs).getUTCDay() + 6) % 7;
+      for (const window2 of windows) {
+        if (!window2 || typeof window2 !== "object" || Array.isArray(window2)) {
+          throw new Error("Invalid schedule window");
+        }
+        const startDay = dayNumber(window2.start_day);
+        if (startDay === null || startDay !== weekday) continue;
+        const start = parseClock(window2.start_time);
+        const end = parseClock(window2.end_time);
+        const endDay = dayNumber(window2.end_day);
+        if (!start || !end || endDay === null) continue;
+        const startWall = dateMs + (start[0] * 60 + start[1]) * MINUTE_MS;
+        const daysDiff = ((endDay - startDay) % 7 + 7) % 7;
+        const shifted = startWall + Math.round(daysDiff * DAY_MS);
+        const endWall = Math.floor(shifted / DAY_MS) * DAY_MS + (end[0] * 60 + end[1]) * MINUTE_MS + shifted % MINUTE_MS;
+        if (endWall <= startWall) continue;
+        candidates.push([startWall, endWall]);
+      }
+    }
+    candidates.sort((left, right) => left[0] - right[0]);
+    const active = candidates.find(([start, end]) => start <= nowWall && nowWall < end);
+    if (active) {
+      const endsAt = instantOfWall(timeZone, active[1]);
+      return { shouldRun: true, nextChangeAtMs: endsAt, message: `Active until ${label(timeZone, endsAt, active[1])}` };
+    }
+    const next = candidates.find(([start]) => start > nowWall);
+    if (next) {
+      const startsAt = instantOfWall(timeZone, next[0]);
+      return { shouldRun: false, nextChangeAtMs: startsAt, message: `Paused until ${label(timeZone, startsAt, next[0])}` };
+    }
+    return { shouldRun: false, nextChangeAtMs: null, message: "No future schedule found" };
+  } catch {
+    return { shouldRun: true, nextChangeAtMs: null, message: "Schedule Error (Defaulting to Active)" };
+  }
+}
+var MINUTE_MS, DAY_MS, truthy, isAiScheduleEnabled, formatters, formatterFor, wallAt, offsetAt, instantOfWall, digitValue, clockPart, dayNumber, parseClock, label;
+var init_ai_schedule = __esm({
+  "lib/runtime/ai-schedule.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    MINUTE_MS = 6e4;
+    DAY_MS = 864e5;
+    truthy = (value) => {
+      if (Array.isArray(value)) return value.length > 0;
+      if (value && typeof value === "object") return Object.keys(value).length > 0;
+      return Boolean(value);
+    };
+    isAiScheduleEnabled = (schedule) => Boolean(schedule) && typeof schedule === "object" && truthy(schedule.enabled);
+    formatters = /* @__PURE__ */ new Map();
+    formatterFor = (timeZone) => {
+      let formatter = formatters.get(timeZone);
+      if (!formatter) {
+        formatter = new Intl.DateTimeFormat("en-US", {
+          timeZone,
+          hourCycle: "h23",
+          year: "numeric",
+          month: "numeric",
+          day: "numeric",
+          hour: "numeric",
+          minute: "numeric",
+          second: "numeric"
+        });
+        const resolved = formatter.resolvedOptions().timeZone;
+        if (resolved !== timeZone && resolved.toLowerCase() === timeZone.toLowerCase() || timeZone === timeZone.toLowerCase()) {
+          throw new RangeError(`Invalid time zone: ${timeZone}`);
+        }
+        formatters.set(timeZone, formatter);
+      }
+      return formatter;
+    };
+    wallAt = (timeZone, instantMs) => {
+      const parts = {};
+      for (const part of formatterFor(timeZone).formatToParts(new Date(instantMs))) {
+        if (part.type !== "literal") parts[part.type] = Number(part.value);
+      }
+      const wholeSecond = Math.floor(instantMs / 1e3) * 1e3;
+      return Date.UTC(parts.year, parts.month - 1, parts.day, parts.hour, parts.minute, parts.second) + (instantMs - wholeSecond);
+    };
+    offsetAt = (timeZone, instantMs) => wallAt(timeZone, instantMs) - instantMs;
+    instantOfWall = (timeZone, wallMs) => {
+      const before = offsetAt(timeZone, wallMs - DAY_MS);
+      if (offsetAt(timeZone, wallMs - before) === before) return wallMs - before;
+      const after = offsetAt(timeZone, wallMs + DAY_MS);
+      if (offsetAt(timeZone, wallMs - after) === after) return wallMs - after;
+      return wallMs - before;
+    };
+    digitValue = (char) => {
+      let start = char.codePointAt(0);
+      while (start > 0 && new RegExp("\\p{Nd}", "u").test(String.fromCodePoint(start - 1))) start -= 1;
+      return (char.codePointAt(0) - start) % 10;
+    };
+    clockPart = (text) => {
+      const match = new RegExp("^\\s*([+-]?)(\\p{Nd}+(?:_\\p{Nd}+)*)\\s*$", "u").exec(text);
+      if (!match) return null;
+      const value = [...match[2].replace(/_/g, "")].reduce((total, char) => total * 10 + digitValue(char), 0);
+      return match[1] === "-" ? -value : value;
+    };
+    dayNumber = (value) => {
+      if (typeof value === "boolean") return Number(value);
+      return typeof value === "number" && Number.isFinite(value) ? value : null;
+    };
+    parseClock = (value) => {
+      if (typeof value !== "string") return null;
+      const parts = value.split(":");
+      if (parts.length !== 2) return null;
+      const hour = clockPart(parts[0]);
+      const minute = clockPart(parts[1]);
+      if (hour === null || minute === null || hour < 0 || hour > 23 || minute < 0 || minute > 59) return null;
+      return [hour, minute];
+    };
+    label = (timeZone, instantMs, wallMs) => {
+      const wall = new Date(wallMs);
+      const day = ["Sun", "Mon", "Tue", "Wed", "Thu", "Fri", "Sat"][wall.getUTCDay()];
+      const clock = `${String(wall.getUTCHours()).padStart(2, "0")}:${String(wall.getUTCMinutes()).padStart(2, "0")}`;
+      const zone = new Intl.DateTimeFormat("en-US", { timeZone, timeZoneName: "short" }).formatToParts(new Date(instantMs)).find((part) => part.type === "timeZoneName")?.value || timeZone;
+      return `${day} ${clock} ${zone}`;
+    };
+  }
+});
+
 // lib/runtime/local-analysis.ts
 var local_analysis_exports = {};
 __export(local_analysis_exports, {
   ClientRuntimeAgentInstructionEmpty: () => ClientRuntimeAgentInstructionEmpty,
+  ClientRuntimeAiSchedulePaused: () => ClientRuntimeAiSchedulePaused,
+  ClientRuntimeAiScheduleStillActive: () => ClientRuntimeAiScheduleStillActive,
+  ServerDispatchAccountStateStale: () => ServerDispatchAccountStateStale,
+  aiOrderSlippageFraction: () => aiOrderSlippageFraction,
   buildLocalRuntimePromptArtifacts: () => buildLocalRuntimePromptArtifacts,
   buildPromptBehaviorStateArtifacts: () => buildPromptBehaviorStateArtifacts,
   buildPromptBehaviorStateValue: () => buildPromptBehaviorStateValue,
   derivePromptVisibleSections: () => derivePromptVisibleSections,
   isClientRuntimeAgentInstructionEmpty: () => isClientRuntimeAgentInstructionEmpty,
+  isClientRuntimeAiSchedulePaused: () => isClientRuntimeAiSchedulePaused,
+  isClientRuntimeAiScheduleStillActive: () => isClientRuntimeAiScheduleStillActive,
+  isServerDispatchAccountStateStale: () => isServerDispatchAccountStateStale,
   resolveEffectivePromptRuntimeProvenance: () => resolveEffectivePromptRuntimeProvenance,
   resolveExternalInferenceRuntimeTimeoutSeconds: () => resolveExternalInferenceRuntimeTimeoutSeconds,
   resolveLocalRuntimeSecretProvider: () => resolveLocalRuntimeSecretProvider,
   resolveLocalRuntimeSecretRequirements: () => resolveLocalRuntimeSecretRequirements,
   resolveNativeValuesForModel: () => resolveNativeValuesForModel,
   runLocalRuntimeCycle: () => runLocalRuntimeCycle,
+  serverPerpDexScope: () => serverPerpDexScope,
   summarizeReviewFailureExplanation: () => summarizeReviewFailureExplanation
 });
-var normalizeNativeValues, assertPromptModelController, resolveRuntimeReasoningControlsForModel, modelScopedKey, resolveNativeValuesForModel, observeRuntimeCycle, observeAccountState, ClientRuntimeAgentInstructionEmpty, isClientRuntimeAgentInstructionEmpty, buildClaimedAgentRuntimeCycleResult, resolveRuntimeMarginModePreference, resolveRuntimeLeveragePreference, resolveBooleanSetting2, CLIENT_RUNTIME_LIVE_CONTEXT_UNAVAILABLE_ERRORS, BEHAVIOR_STATE_UNAVAILABLE_ERROR, CriticalBehaviorStateError, clampNumber, resolveExternalInferenceRuntimeTimeoutSeconds, toPositiveFinite3, compactSnippet, hashRuntimeDebugText, EFFECTIVE_INPUT_MANIFEST_SCHEMA_VERSION, PROMPT_ASSEMBLY_DEFINITION_VERSION, RUNTIME_SOURCE_DEFINITION_VERSION, DECISION_INPUT_DEFINITION_VERSION, CONTEXT_ENVELOPE_DEFINITION_VERSION, CLIENT_RUNTIME_SOURCE_VERSION, CLIENT_MAIN_PROMPT_RENDERER, SERVER_MAIN_PROMPT_RENDERER, CLIENT_REVIEW_PROMPT_RENDERER, SERVER_REVIEW_PROMPT_RENDERER, resolveEffectivePromptRuntimeProvenance, canonicalManifestValue, canonicalManifestJson, sha256ManifestHex, effectiveInputComponent, buildEffectiveInputManifest, derivePromptVisibleSections, decodeDecisionTracePayload, extractDecisionSymbolTrace, formatDecisionSymbolTrace, formatActionableDecisionSymbols, normalizePromptSymbols, JSON_MODEL_OUTPUT_FENCE_PATTERN, STRICT_MODEL_OUTPUT_KEYS, currentModelOutputValidationErrors, currentModelOutputMatchesContract, projectCurrentModelDecisionContent, modelOutputValidationError, buildMissingDecisionHold, buildDecisionPlansFromResponse, buildReviewCandidatePlansFromResponse, forceUnavailableSymbolsToHold, extractTemplatePlaceholders, requireReviewPrimaryUserPromptTemplate, containsCompetingBehaviorStateMarkup, containsCompetingMainBehaviorStateMarkup, requireStrategyReviewTemplates, preflightStrategyReviewPromptContract, extractRuntimeReasoningSelection, isAbortError, isRuntimeTimeoutAbortReason, REVIEW_FAILURE_SENSITIVE_DB_TOKENS, REVIEW_FAILURE_SCHEMA_DISCLOSURE_TOKENS, REVIEW_FAILURE_SQL_STATEMENT_PATTERN, REVIEW_FAILURE_TRACEBACK_PATTERN, isSensitiveReviewFailureDetail, summarizeReviewFailureExplanation, buildReviewFailureHoldReason, createAbortError2, settleRuntimeCyclePromise, unwrapRuntimeCycleSettledResult, normalizeDecisionLabel, normalizeRuntimeSymbol, PromptContractFetchError, isLivePromptContextUnavailableError, buildFailClosedHoldResult, buildPromptConstructionFailureResult, buildLivePromptContextUnavailableFailureResult, pickFirstString, normalizeRuntimeStringList, requirePositiveRuntimeLimit, resolveRuntimeTradingScope, normalizeRuntimeProviderAlias, resolveCatalogModelEntry, createClientRuntimeProviderSetupError, createProviderSetupRejectionError, evaluateModelEligibility, extractReviewRuntimeReasoningSelection, isUsableRuntimeSettingsFallback, resolveRuntimeSettings, formatRuntimeDurationMs, normalizeRuntimeTimingNote, appendRuntimeTimingEvent, reportPromptParityTelemetry, resolveLocalRuntimeSecretRequirements, resolveLocalRuntimeSecretProvider, toEpochSeconds, REQUIRED_AI_INDICATOR_KEYS, TIMEFRAME_ORDER, sortTradingTimeframes, normalizePromptIdentityTimestamp, resolveCompletedCandleBoundary, normalizeAiIndicatorFlags, getPromptLookback, computeSma, computeEma, computeRsi, computeAtr, computeMacd, computeBollingerBands, getIndicatorValue, buildPromptCandlesComponent, buildPromptCandlesPayload, formatUtcTimestampWithWeekday, formatUtcNowWithWeekday, formatPromptPrice, computePromptUnitsUsedForPosition, buildPromptAccountStatusValue, buildPromptPositionsValue, sanitizePromptSymbol, fillTimeMs, fillSize, normalizeFillSide, normalizeFillOrderId, normalizeFillRiskOrderIdentity, fillStartPosition, fillSortValue, sortFillsAscending, sortFillsDescending, inferEntryFromStartPositionChain, inferEntryFromCurrentPositionSize, calculateCurrentPositionState, calculatePositionEntryTimes, countPositionAdds, latestPositionRiskIncreaseTimeMs, latestPositionRiskIncreaseEvidence, compactPromptRiskIncrease, roundPositiveDecimalHalfUp, compactPromptLastTrade, ENTRY_TRADE_FIELDS, PREVIOUS_DECISION_FIELDS, PREVIOUS_CAMPAIGN_FIELDS, hasExactKeys2, isNonnegativeInteger, isFiniteNumber, isExactEnumString, isNonemptyPromptText, isCampaignReasoningText, projectBackendDecisionMemoryItem, requireRenderedStrategyBehaviorState, canonicalFillSideForRiskEvidence, isValidRiskEvidenceFill, isValidCampaignBoundaryFill, normalizeFillHistoryCoverage, resolveFillHistoryCoverageForSymbol, buildPromptBehaviorStateArtifacts, buildPromptBehaviorStateValue, shouldCompareServerPromptParity, buildLocalRuntimePromptArtifacts, createRuntimeId2, asRecord, buildRuntimeConstraintRejectionMessage, hasDeviceProviderSecret, requireNonEmptyStringField, requirePositiveIntegerField, compareContractVersion, parsePromptContractTimestamp, assertPromptContractCompatibility, assertPromptContractTemporalBounds, sleepWithAbort, requireAgentPollRetryAfterMs, materializeClaimedClientRuntimeAgentInstruction, attachClientRuntimeErrorProvenance, isExternalRuntimeProviderResult, invokeClientExternalInference, assertPromptContractBindingTupleEqual, assertPromptContractScopeMatch, fetchBoundPromptContracts, formatTemplateWithNamedVariables, runLocalRuntimeCycle;
+var normalizeNativeValues, assertPromptModelController, resolveRuntimeReasoningControlsForModel, modelScopedKey, resolveNativeValuesForModel, observeRuntimeCycle, observeAccountState, aiOrderSlippageFraction, serverPerpDexScope, serverBehaviorStateArtifacts, ClientRuntimeAgentInstructionEmpty, isClientRuntimeAgentInstructionEmpty, ClientRuntimeAiSchedulePaused, ClientRuntimeAiScheduleStillActive, isClientRuntimeAiScheduleStillActive, ServerDispatchAccountStateStale, isServerDispatchAccountStateStale, isClientRuntimeAiSchedulePaused, buildClaimedAgentRuntimeCycleResult, resolveRuntimeMarginModePreference, resolveRuntimeLeveragePreference, resolveBooleanSetting2, CLIENT_RUNTIME_LIVE_CONTEXT_UNAVAILABLE_ERRORS, BEHAVIOR_STATE_UNAVAILABLE_ERROR, CriticalBehaviorStateError, clampNumber, resolveExternalInferenceRuntimeTimeoutSeconds, toPositiveFinite3, compactSnippet, hashRuntimeDebugText, EFFECTIVE_INPUT_MANIFEST_SCHEMA_VERSION, PROMPT_ASSEMBLY_DEFINITION_VERSION, RUNTIME_SOURCE_DEFINITION_VERSION, DECISION_INPUT_DEFINITION_VERSION, CONTEXT_ENVELOPE_DEFINITION_VERSION, CLIENT_RUNTIME_SOURCE_VERSION, CLIENT_MAIN_PROMPT_RENDERER, SERVER_MAIN_PROMPT_RENDERER, CLIENT_REVIEW_PROMPT_RENDERER, SERVER_REVIEW_PROMPT_RENDERER, resolveEffectivePromptRuntimeProvenance, canonicalManifestValue, canonicalManifestJson, sha256ManifestHex, effectiveInputComponent, buildEffectiveInputManifest, derivePromptVisibleSections, decodeDecisionTracePayload, extractDecisionSymbolTrace, formatDecisionSymbolTrace, formatActionableDecisionSymbols, normalizePromptSymbols, JSON_MODEL_OUTPUT_FENCE_PATTERN, STRICT_MODEL_OUTPUT_KEYS, currentModelOutputValidationErrors, currentModelOutputMatchesContract, projectCurrentModelDecisionContent, modelOutputValidationError, buildMissingDecisionHold, buildDecisionPlansFromResponse, buildReviewCandidatePlansFromResponse, forceUnavailableSymbolsToHold, extractTemplatePlaceholders, requireReviewPrimaryUserPromptTemplate, containsCompetingBehaviorStateMarkup, containsCompetingMainBehaviorStateMarkup, requireStrategyReviewTemplates, preflightStrategyReviewPromptContract, extractRuntimeReasoningSelection, isAbortError, isRuntimeTimeoutAbortReason, REVIEW_FAILURE_SENSITIVE_DB_TOKENS, REVIEW_FAILURE_SCHEMA_DISCLOSURE_TOKENS, REVIEW_FAILURE_SQL_STATEMENT_PATTERN, REVIEW_FAILURE_TRACEBACK_PATTERN, isSensitiveReviewFailureDetail, summarizeReviewFailureExplanation, buildReviewFailureHoldReason, createAbortError2, settleRuntimeCyclePromise, unwrapRuntimeCycleSettledResult, normalizeDecisionLabel, normalizeRuntimeSymbol, PromptContractFetchError, isLivePromptContextUnavailableError, buildFailClosedHoldResult, buildPromptConstructionFailureResult, buildLivePromptContextUnavailableFailureResult, pickFirstString, normalizeRuntimeStringList, requirePositiveRuntimeLimit, resolveRuntimeTradingScope, normalizeRuntimeProviderAlias, resolveCatalogModelEntry, createClientRuntimeProviderSetupError, createProviderSetupRejectionError, evaluateModelEligibility, extractReviewRuntimeReasoningSelection, isUsableRuntimeSettingsFallback, resolveRuntimeSettings, formatRuntimeDurationMs, normalizeRuntimeTimingNote, appendRuntimeTimingEvent, reportPromptParityTelemetry, resolveLocalRuntimeSecretRequirements, resolveLocalRuntimeSecretProvider, toEpochSeconds, REQUIRED_AI_INDICATOR_KEYS, TIMEFRAME_ORDER, sortTradingTimeframes, normalizePromptIdentityTimestamp, resolveCompletedCandleBoundary, normalizeAiIndicatorFlags, getPromptLookback, computeSma, computeEma, computeRsi, computeAtr, computeMacd, computeBollingerBands, getIndicatorValue, buildPromptCandlesComponent, buildPromptCandlesPayload, formatUtcTimestampWithWeekday, formatUtcNowWithWeekday, formatPromptPrice, computePromptUnitsUsedForPosition, buildPromptAccountStatusValue, buildPromptPositionsValue, sanitizePromptSymbol, fillTimeMs, fillSize, normalizeFillSide, normalizeFillOrderId, normalizeFillRiskOrderIdentity, fillStartPosition, fillSortValue, sortFillsAscending, sortFillsDescending, inferEntryFromStartPositionChain, inferEntryFromCurrentPositionSize, calculateCurrentPositionState, calculatePositionEntryTimes, countPositionAdds, latestPositionRiskIncreaseTimeMs, latestPositionRiskIncreaseEvidence, compactPromptRiskIncrease, roundPositiveDecimalHalfUp, compactPromptLastTrade, ENTRY_TRADE_FIELDS, PREVIOUS_DECISION_FIELDS, PREVIOUS_CAMPAIGN_FIELDS, hasExactKeys2, isNonnegativeInteger, isFiniteNumber, isExactEnumString, isNonemptyPromptText, isCampaignReasoningText, projectBackendDecisionMemoryItem, requireRenderedStrategyBehaviorState, canonicalFillSideForRiskEvidence, isValidRiskEvidenceFill, isValidCampaignBoundaryFill, normalizeFillHistoryCoverage, resolveFillHistoryCoverageForSymbol, buildPromptBehaviorStateArtifacts, buildPromptBehaviorStateValue, shouldCompareServerPromptParity, buildLocalRuntimePromptArtifacts, createRuntimeId2, asRecord, buildRuntimeConstraintRejectionMessage, hasDeviceProviderSecret, requireNonEmptyStringField, requirePositiveIntegerField, compareContractVersion, parsePromptContractTimestamp, assertPromptContractCompatibility, assertPromptContractTemporalBounds, sleepWithAbort, requireAgentPollRetryAfterMs, materializeClaimedClientRuntimeAgentInstruction, attachClientRuntimeErrorProvenance, isExternalRuntimeProviderResult, invokeClientExternalInference, assertPromptContractBindingTupleEqual, assertPromptContractScopeMatch, fetchBoundPromptContracts, formatTemplateWithNamedVariables, runLocalRuntimeCycle;
 var init_local_analysis = __esm({
   "lib/runtime/local-analysis.ts"() {
     "use strict";
@@ -107962,6 +109015,7 @@ var init_local_analysis = __esm({
     init_hyperliquid_market_symbol();
     init_external_inference_contract();
     init_model_controller_provenance();
+    init_ai_schedule();
     normalizeNativeValues = (value) => {
       if (!value || typeof value !== "object" || Array.isArray(value)) return {};
       const entries = {};
@@ -108030,6 +109084,29 @@ var init_local_analysis = __esm({
         }
       });
     };
+    aiOrderSlippageFraction = (config2, executionMode) => executionMode === "server" ? Number(config2.server_ai_max_slippage) / 100 : clampNumber(void 0, config2.default_max_slippage) / 100;
+    serverPerpDexScope = (symbols, executionMode) => {
+      if (executionMode !== "server") return void 0;
+      const dexes = /* @__PURE__ */ new Set();
+      for (const raw of symbols) {
+        if (!String(raw ?? "").trim()) continue;
+        if (!normalizeHyperliquidMarketSymbol(raw)) return void 0;
+        dexes.add(getHyperliquidMarketDex(raw));
+      }
+      return dexes.size > 0 ? [...dexes].filter(Boolean) : void 0;
+    };
+    serverBehaviorStateArtifacts = (derived) => {
+      const rendered = derived.behavior_state;
+      if (derived.behavior_state_owner !== "server" || typeof rendered !== "string" || !rendered.trim()) {
+        throw new Error("The server did not build this Server bot's behavior state.");
+      }
+      const preMemory = derived.behavior_state_pre_memory;
+      return {
+        rendered,
+        preMemoryRendered: typeof preMemory === "string" && preMemory.trim() ? preMemory : rendered,
+        policyState: asRecord(derived.behavior_policy_state)
+      };
+    };
     ClientRuntimeAgentInstructionEmpty = class extends Error {
       constructor(retryAfterMs) {
         super("No Agent instruction is currently queued for this Client runtime.");
@@ -108038,6 +109115,31 @@ var init_local_analysis = __esm({
       }
     };
     isClientRuntimeAgentInstructionEmpty = (value) => value instanceof ClientRuntimeAgentInstructionEmpty;
+    ClientRuntimeAiSchedulePaused = class extends Error {
+      constructor(input) {
+        super(input.message);
+        this.name = "ClientRuntimeAiSchedulePaused";
+        this.nextChangeAtMs = input.nextChangeAtMs;
+        this.closeOnStop = input.closeOnStop;
+        this.settings = input.settings;
+        this.config = input.config;
+      }
+    };
+    ClientRuntimeAiScheduleStillActive = class extends Error {
+      constructor() {
+        super("The AI schedule still lets this bot run.");
+        this.name = "ClientRuntimeAiScheduleStillActive";
+      }
+    };
+    isClientRuntimeAiScheduleStillActive = (value) => value instanceof ClientRuntimeAiScheduleStillActive;
+    ServerDispatchAccountStateStale = class extends Error {
+      constructor() {
+        super("Server account context could not be rebuilt inside the dispatch freshness window");
+        this.name = "ServerDispatchAccountStateStale";
+      }
+    };
+    isServerDispatchAccountStateStale = (value) => value instanceof Error && value.name === "ServerDispatchAccountStateStale";
+    isClientRuntimeAiSchedulePaused = (value) => value instanceof ClientRuntimeAiSchedulePaused;
     buildClaimedAgentRuntimeCycleResult = async (input) => {
       const { config: config2, settings, instruction, runtimeInput, signal } = input;
       const binding = runtimeInput.runtimeContractBinding;
@@ -108074,6 +109176,7 @@ var init_local_analysis = __esm({
         tickerPrice: 0,
         leverage,
         aggregatePerpDexs: true,
+        perpDexScope: serverPerpDexScope(symbols, runtimeInput.executionMode),
         feeSymbols: symbols,
         includeEffectiveTakerRate: true,
         sessionId: String(runtimeInput.sessionId || "").trim(),
@@ -108168,11 +109271,11 @@ var init_local_analysis = __esm({
           walletAddress,
           lastPrice: price,
           unitSizeUsdc: tradeSize,
-          sizeDecimals: Number(config2.default_size_decimals),
           leverage,
           marginMode,
           closePositionDelaySeconds: Number(config2.client_runtime_close_position_delay_seconds),
-          maxSlippageFraction: clampNumber(void 0, config2.default_max_slippage) / 100,
+          closePositionFreshnessPollMs: Number(config2.close_position_freshness_poll_milliseconds),
+          maxSlippageFraction: aiOrderSlippageFraction(config2, runtimeInput.executionMode),
           ...buildRuntimeSlTpExecutionSettings(settings, config2)
         };
       };
@@ -109522,14 +110625,14 @@ ${reviewOutputContract}`;
       const normalized = String(value || "").replace(/\s+/g, " ").trim();
       return normalized.length > 0 ? normalized : null;
     };
-    appendRuntimeTimingEvent = (label, startedAtMs, note, outcome) => {
+    appendRuntimeTimingEvent = (label2, startedAtMs, note, outcome) => {
       const parts = [`duration=${formatRuntimeDurationMs(Date.now() - startedAtMs)}`];
       const normalizedNote = normalizeRuntimeTimingNote(note);
       if (normalizedNote) {
         parts.push(normalizedNote);
       }
       appendRuntimeDebugEvent({
-        label,
+        label: label2,
         note: parts.join(" "),
         outcome
       });
@@ -111008,17 +112111,17 @@ ${behaviorJson}
       }
       return hasValue(secrets.providerKeys[provider]) || hasSlotValue(secrets.providerKeySlots?.[provider]);
     };
-    requireNonEmptyStringField = (value, label) => {
+    requireNonEmptyStringField = (value, label2) => {
       const normalized = String(value ?? "").trim();
       if (!normalized) {
-        throw new Error(`Missing required prompt contract field: ${label}`);
+        throw new Error(`Missing required prompt contract field: ${label2}`);
       }
       return normalized;
     };
-    requirePositiveIntegerField = (value, label) => {
+    requirePositiveIntegerField = (value, label2) => {
       const parsed = Number(value);
       if (!Number.isFinite(parsed) || parsed <= 0) {
-        throw new Error(`Missing required positive prompt contract field: ${label}`);
+        throw new Error(`Missing required positive prompt contract field: ${label2}`);
       }
       return Math.trunc(parsed);
     };
@@ -111768,6 +112871,25 @@ ${behaviorJson}
         }
         const config2 = configResult.value;
         const runtimeSettings = runtimeSettingsResult.value;
+        const aiSchedule = runtimeSettings.settings.ai_schedule ?? config2.default_ai_schedule;
+        if (!input.ignoreAiSchedule) {
+          if (isAiScheduleEnabled(aiSchedule)) {
+            const scheduleState = evaluateAiSchedule(aiSchedule, config2.default_ai_schedule, Date.now());
+            if (!scheduleState.shouldRun) {
+              throw new ClientRuntimeAiSchedulePaused({
+                message: scheduleState.message,
+                nextChangeAtMs: scheduleState.nextChangeAtMs,
+                closeOnStop: isAiScheduleEnabled({ enabled: aiSchedule?.close_on_stop }),
+                settings: runtimeSettings.settings,
+                config: config2
+              });
+            }
+            input.onAiScheduleWindowActive?.(scheduleState.nextChangeAtMs);
+          } else {
+            input.onAiScheduleOff?.();
+          }
+          if (input.aiScheduleCheckOnly) throw new ClientRuntimeAiScheduleStillActive();
+        }
         input = {
           ...input,
           secrets: await ClientVault.refreshProviderSecretsForVersion(
@@ -111945,11 +113067,11 @@ ${behaviorJson}
               walletAddress: String(settings.hyperliquid_wallet_address || "").trim() || void 0,
               lastPrice: 0,
               unitSizeUsdc: clampNumber(promptKnobs2.trade_size, config2.default_ai_trade_amount),
-              sizeDecimals: Number(config2.default_size_decimals),
               leverage: clampNumber(promptKnobs2.leverage, config2.default_leverage),
               marginMode: resolveRuntimeMarginModePreference(settings, config2),
               closePositionDelaySeconds: Number(config2.client_runtime_close_position_delay_seconds),
-              maxSlippageFraction: clampNumber(void 0, config2.default_max_slippage) / 100,
+              closePositionFreshnessPollMs: Number(config2.close_position_freshness_poll_milliseconds),
+              maxSlippageFraction: aiOrderSlippageFraction(config2, input.executionMode),
               ...buildRuntimeSlTpExecutionSettings(settings, config2),
               executionFreshnessMaxAgeSeconds: requirePositiveIntegerField(
                 promptKnobs2.execution_decision_max_age_seconds,
@@ -111970,6 +113092,8 @@ ${behaviorJson}
         let _latestPerpDexAccounts = null;
         let latestPositions = [];
         let _accountStateResolvedAtMs = null;
+        let _accountStateFetchedAtMs = null;
+        let _accountStateSource = null;
         const getLatestAccountEquity = () => _latestAccountEquity;
         const getLatestTotalUnrealizedPnl = () => _latestTotalUnrealizedPnl;
         const getAccountStateResolvedAtMs = () => _accountStateResolvedAtMs;
@@ -111983,8 +113107,12 @@ ${behaviorJson}
           tickerPrice: 0,
           leverage: resolveRuntimeLeveragePreference(settings, config2),
           aggregatePerpDexs: true,
+          perpDexScope: serverPerpDexScope(symbols, input.executionMode),
           feeSymbols: symbols,
           includeEffectiveTakerRate: true,
+          // A Server bot's cycle reads the account authoritatively, as the Python
+          // Server loop does: never a cached or rate-limit-stale observation.
+          forceRefresh: input.executionMode === "server",
           sessionId,
           signal: timeoutController.signal
         }).then((state2) => {
@@ -111992,6 +113120,8 @@ ${behaviorJson}
           latestPositions = state2.positions;
           const resolvedEquity = Number(state2.accountSummary?.account_value) || 0;
           _accountStateResolvedAtMs = Date.now();
+          _accountStateFetchedAtMs = state2.evidence?.fetchedAtMs ?? _accountStateResolvedAtMs;
+          _accountStateSource = state2.evidence?.source ?? null;
           if (resolvedEquity > 0) {
             _latestAccountEquity = resolvedEquity;
             _latestPerpDexAccounts = state2.accountSummary?.perp_dex_accounts ?? null;
@@ -112018,7 +113148,8 @@ ${behaviorJson}
         });
         const browserAccountStatePromise = settleRuntimeCyclePromise(browserAccountStateTask);
         const browserUserFillsStartedAtMs = Date.now();
-        const browserUserFillsTask = fetchBrowserUserFills({
+        const serverOwnsBehaviorState = input.executionMode === "server";
+        const browserUserFillsTask = serverOwnsBehaviorState ? Promise.resolve(null) : fetchBrowserUserFills({
           publicRequestPriority: "trading_analysis",
           config: config2,
           walletAddress,
@@ -112053,7 +113184,7 @@ ${behaviorJson}
           getLatestAccountEquity,
           getLatestTotalUnrealizedPnl,
           getAccountStateResolvedAtMs,
-          async () => {
+          serverOwnsBehaviorState ? void 0 : async () => {
             const result = unwrapRuntimeCycleSettledResult(await browserUserFillsPromise);
             return { fills: result.rawFills, evidence: result.evidence };
           },
@@ -112081,12 +113212,14 @@ ${behaviorJson}
                 sortedTimeframes.map(async (marketTimeframe) => [
                   marketTimeframe,
                   await getRecentCandles(
+                    // Indicators warm up on the same history as the Server loop's
+                    // (indicator_history.py); the prompt shows its lookback of it.
                     Math.max(getPromptLookback(
                       lookbackSettings,
                       marketTimeframe,
                       effectiveDefaultLookbacks,
                       config2.max_analysis_lookback
-                    ), 250),
+                    ), Number(config2.indicator_candle_count) || 250),
                     "hyperliquid",
                     marketSymbol,
                     marketTimeframe,
@@ -112183,11 +113316,11 @@ ${behaviorJson}
                 walletAddress: String(settings.hyperliquid_wallet_address || "").trim() || void 0,
                 lastPrice: toPositiveFinite3(ticker.price) ?? 0,
                 unitSizeUsdc: clampNumber(rejectedPromptKnobs.trade_size, config2.default_ai_trade_amount),
-                sizeDecimals: Number(config2.default_size_decimals),
                 leverage: clampNumber(rejectedPromptKnobs.leverage, config2.default_leverage),
                 marginMode: resolveRuntimeMarginModePreference(settings, config2),
                 closePositionDelaySeconds: Number(config2.client_runtime_close_position_delay_seconds),
-                maxSlippageFraction: clampNumber(void 0, config2.default_max_slippage) / 100,
+                closePositionFreshnessPollMs: Number(config2.close_position_freshness_poll_milliseconds),
+                maxSlippageFraction: aiOrderSlippageFraction(config2, input.executionMode),
                 ...buildRuntimeSlTpExecutionSettings(settings, config2),
                 executionFreshnessMaxAgeSeconds: requirePositiveIntegerField(
                   rejectedPromptKnobs.execution_decision_max_age_seconds,
@@ -112212,8 +113345,8 @@ ${behaviorJson}
             positions
           ) ?? browserAccountState.accountSummary.total_unrealized_pnl
         };
-        tradeHistory = browserUserFills.tradeHistory;
-        if (input.mode === "trader" && browserUserFills.evidence?.source !== "live") {
+        tradeHistory = browserUserFills?.tradeHistory ?? [];
+        if (input.mode === "trader" && !serverOwnsBehaviorState && browserUserFills?.evidence?.source !== "live") {
           throw new CriticalBehaviorStateError();
         }
         const metadataSymbol = requireNonEmptyStringField(promptMetadata.symbol, "symbol");
@@ -112508,11 +113641,11 @@ ${behaviorJson}
           if (input.mode === "trader" && !behaviorMemoryEnabled) {
             throw new CriticalBehaviorStateError();
           }
-          const browserFillEvidence = browserUserFills.evidence;
+          const browserFillEvidence = browserUserFills?.evidence;
           const behaviorFillCoverage = browserFillEvidence?.source === "live" && browserFillEvidence.exactTerminalFillEvidenceComplete === true ? "complete" : "capped";
           let behaviorStateArtifacts;
           try {
-            behaviorStateArtifacts = buildPromptBehaviorStateArtifacts({
+            behaviorStateArtifacts = serverOwnsBehaviorState ? serverBehaviorStateArtifacts(derivedContext) : buildPromptBehaviorStateArtifacts({
               fills: tradeHistory,
               positions,
               symbols: promptSymbols,
@@ -112600,11 +113733,11 @@ ${stringifyPromptJson(candlesPayload)}
               walletAddress: walletAddress || void 0,
               lastPrice: 0,
               unitSizeUsdc: metadataTradeSize,
-              sizeDecimals: Number(config2.default_size_decimals),
               leverage: metadataLeverage,
               marginMode: resolveRuntimeMarginModePreference(settings, config2),
               closePositionDelaySeconds: Number(config2.client_runtime_close_position_delay_seconds),
-              maxSlippageFraction: clampNumber(void 0, config2.default_max_slippage) / 100,
+              closePositionFreshnessPollMs: Number(config2.close_position_freshness_poll_milliseconds),
+              maxSlippageFraction: aiOrderSlippageFraction(config2, input.executionMode),
               ...buildRuntimeSlTpExecutionSettings(settings, config2),
               executionFreshnessMaxAgeSeconds
             }
@@ -112726,11 +113859,11 @@ ${stringifyPromptJson(candlesPayload)}
               walletAddress: String(settings.hyperliquid_wallet_address || "").trim() || void 0,
               lastPrice: executionPrice,
               unitSizeUsdc: metadataTradeSize,
-              sizeDecimals: Number(config2.default_size_decimals),
               leverage: metadataLeverage,
               marginMode: resolveRuntimeMarginModePreference(settings, config2),
               closePositionDelaySeconds: Number(config2.client_runtime_close_position_delay_seconds),
-              maxSlippageFraction: clampNumber(void 0, config2.default_max_slippage) / 100,
+              closePositionFreshnessPollMs: Number(config2.close_position_freshness_poll_milliseconds),
+              maxSlippageFraction: aiOrderSlippageFraction(config2, input.executionMode),
               ...buildRuntimeSlTpExecutionSettings(settings, config2),
               executionFreshnessMaxAgeSeconds
             }
@@ -112756,11 +113889,11 @@ ${stringifyPromptJson(candlesPayload)}
             walletAddress: String(settings.hyperliquid_wallet_address || "").trim() || void 0,
             lastPrice: planPrice,
             unitSizeUsdc: metadataTradeSize,
-            sizeDecimals: Number(config2.default_size_decimals),
             leverage: metadataLeverage,
             marginMode,
             closePositionDelaySeconds: Number(config2.client_runtime_close_position_delay_seconds),
-            maxSlippageFraction: clampNumber(void 0, config2.default_max_slippage) / 100,
+            closePositionFreshnessPollMs: Number(config2.close_position_freshness_poll_milliseconds),
+            maxSlippageFraction: aiOrderSlippageFraction(config2, input.executionMode),
             ...buildRuntimeSlTpExecutionSettings(settings, config2),
             executionFreshnessMaxAgeSeconds
           };
@@ -112913,6 +114046,17 @@ ${stringifyPromptJson(candlesPayload)}
             note: `lane=main seconds=${requestTimeoutSeconds}`
           });
         }
+        const dispatchAccountStateAgeMs = _accountStateFetchedAtMs === null ? null : Date.now() - _accountStateFetchedAtMs;
+        appendRuntimeDebugEvent({
+          label: "account_state_dispatch_age",
+          note: `account_state_age_ms=${dispatchAccountStateAgeMs ?? "unresolved"} source=${_accountStateSource ?? "unknown"}`
+        });
+        if (input.executionMode === "server" && !allPromptSymbolsUnavailable && (dispatchAccountStateAgeMs === null || dispatchAccountStateAgeMs > requirePositiveIntegerField(
+          config2.server_dispatch_account_state_max_age_milliseconds,
+          "server_dispatch_account_state_max_age_milliseconds"
+        ))) {
+          throw new ServerDispatchAccountStateStale();
+        }
         const providerStartedAtMs = Date.now();
         observeRuntimeCycle(input, { stage: "model", reason_code: null });
         let selectedPrimaryModel = authoritativeModel;
@@ -113823,7 +114967,7 @@ ${reviewOutputContract}`;
           executionPlans: acceptedExecutionPlans
         });
       } catch (error48) {
-        if (isClientRuntimeAgentInstructionEmpty(error48)) {
+        if (isClientRuntimeAgentInstructionEmpty(error48) || isClientRuntimeAiSchedulePaused(error48) || isClientRuntimeAiScheduleStillActive(error48)) {
           throw error48;
         }
         if (error48 instanceof PromptContractFetchError && error48.metadata) {
@@ -113854,8 +114998,8 @@ ${reviewOutputContract}`;
         const detail = error48 instanceof Error ? error48.message : String(error48);
         appendRuntimeTimingEvent("analysis_cycle_failed", cycleStartedAtMs, detail, "error");
         if (isAbortError(error48)) {
-          const abortReason = timeoutController.signal.reason;
-          if (isRuntimeTimeoutAbortReason(abortReason)) {
+          const abortReason2 = timeoutController.signal.reason;
+          if (isRuntimeTimeoutAbortReason(abortReason2)) {
             const timeoutError = Object.assign(
               new Error("Client runtime analysis timed out before the provider returned a result.", { cause: error48 }),
               error48,
@@ -113863,8 +115007,8 @@ ${reviewOutputContract}`;
             );
             throw cycleErrorProvenance ? attachClientRuntimeErrorProvenance(timeoutError, cycleErrorProvenance) : timeoutError;
           }
-          if (abortReason instanceof Error) {
-            throw cycleErrorProvenance ? attachClientRuntimeErrorProvenance(abortReason, cycleErrorProvenance) : abortReason;
+          if (abortReason2 instanceof Error) {
+            throw cycleErrorProvenance ? attachClientRuntimeErrorProvenance(abortReason2, cycleErrorProvenance) : abortReason2;
           }
           throw cycleErrorProvenance ? attachClientRuntimeErrorProvenance(error48, cycleErrorProvenance) : error48;
         }
@@ -113880,7 +115024,7 @@ ${reviewOutputContract}`;
 });
 
 // lib/runtime/engine.ts
-var localAnalysis, getExchangeFailureDiagnostics, getRuntimeFallbackAttempts, isProviderFailureDiagnosticsCandidate, getEventBoundProviderLabel, getEventBoundProviderTraceId, getRecentProviderFailureDiagnostics, getClientRuntimeErrorProvenance, getRuntimeProviderSetupDiagnostics, buildProviderSetupErrorDiagnosticFields, buildClientRuntimeErrorProvenanceDiagnosticFields, buildRuntimeRequestErrorDiagnosticFields, hasEventBoundProviderFailureEvidence, classifyRuntimeErrorStage, buildHyperliquidPublicReadDiagnosticFields, buildRuntimeErrorDiagnostics, positiveNumber, resolveRuntimeEngineOptions, CLIENT_KILLSWITCH_BLOCK_STORAGE_PREFIX, getClientKillswitchBlockStorageKey, persistClientRuntimeKillswitchBlock, clearClientRuntimeKillswitchBlock, hashRuntimeDebugText2, createRuntimeUuid2, getRuntimeContractIdentityToken, getRuntimeStatusContractIdentityToken, getRuntimeContractBindingTokenFromCycleResult, getRuntimeContractBindingTupleToken, getRuntimeStatusContractBindingTupleToken, isTransientRuntimeConflictError, createRuntimeStartCancelledError, isRuntimeContractMismatchError, isClientExecutionModeMismatchError, isClientRuntimeSessionStoppedError, isClientRuntimeLeaseAuthError, isClientRuntimeReleasedError, deriveFailedStartCleanupOwnershipLossReason, isRuntimeAbortError, isExplicitClientExecutionMode, createStopAbortError, isRuntimeContractIdentityAdvancedAbort, CLIENT_RUNTIME_NO_DECISION_RECOVERY_REASON, sanitizeSettingsSnapshotForFallback, preflightClientRuntime, ClientExecutionEngine, createStoppedRuntimeSnapshot, ClientRuntimeRegistry, botEngine;
+var localAnalysis, getExchangeFailureDiagnostics, getRuntimeFallbackAttempts, isProviderFailureDiagnosticsCandidate, getEventBoundProviderLabel, getEventBoundProviderTraceId, getRecentProviderFailureDiagnostics, getClientRuntimeErrorProvenance, getRuntimeProviderSetupDiagnostics, buildProviderSetupErrorDiagnosticFields, buildClientRuntimeErrorProvenanceDiagnosticFields, buildRuntimeRequestErrorDiagnosticFields, hasEventBoundProviderFailureEvidence, classifyRuntimeErrorStage, buildHyperliquidPublicReadDiagnosticFields, buildRuntimeErrorDiagnostics, positiveNumber, resolveRuntimeEngineOptions, withServerPositionEvents, CLIENT_KILLSWITCH_BLOCK_STORAGE_PREFIX, getClientKillswitchBlockStorageKey, persistClientRuntimeKillswitchBlock, clearClientRuntimeKillswitchBlock, hashRuntimeDebugText2, createRuntimeUuid2, getRuntimeContractIdentityToken, getRuntimeStatusContractIdentityToken, getRuntimeContractBindingTokenFromCycleResult, getRuntimeContractBindingTupleToken, getRuntimeStatusContractBindingTupleToken, isTransientRuntimeConflictError, createRuntimeStartCancelledError, isRuntimeContractMismatchError, isClientExecutionModeMismatchError, isClientRuntimeSessionStoppedError, isClientRuntimeLeaseAuthError, isClientRuntimeReleasedError, deriveFailedStartCleanupOwnershipLossReason, isRuntimeAbortError, isExplicitClientExecutionMode, createStopAbortError, isRuntimeContractIdentityAdvancedAbort, CLIENT_RUNTIME_NO_DECISION_RECOVERY_REASON, sanitizeSettingsSnapshotForFallback, preflightClientRuntime, ClientExecutionEngine, createStoppedRuntimeSnapshot, ClientRuntimeRegistry, botEngine;
 var init_engine = __esm({
   "lib/runtime/engine.ts"() {
     "use strict";
@@ -114261,6 +115405,28 @@ var init_engine = __esm({
       }
       return options;
     };
+    withServerPositionEvents = (result) => result.executionReports.map((report) => {
+      const action = String(report.action ?? "").toUpperCase();
+      if (report.status !== "executed" || !["BUY", "SELL", "FLIP_OPEN"].includes(action)) return report;
+      const bySide = (side) => side === "BUY" ? "LONG" : "SHORT";
+      let event = null;
+      let direction = null;
+      if (result.intent === "open" || result.intent === "add") {
+        event = result.intent;
+        direction = bySide(action);
+      } else if (result.intent === "reduce") {
+        event = "reduce";
+        direction = action === "BUY" ? "SHORT" : "LONG";
+      } else if (result.intent === "close" || result.intent === "flip" && action !== "FLIP_OPEN") {
+        event = "close";
+        direction = action === "SELL" ? "LONG" : "SHORT";
+      } else if (result.intent === "flip" && (result.side === "buy" || result.side === "sell")) {
+        event = "open";
+        direction = result.side === "buy" ? "LONG" : "SHORT";
+      }
+      if (!event || !direction) return report;
+      return { ...report, execution_metadata: { ...report.execution_metadata, position_event: event, position_direction: direction } };
+    });
     CLIENT_KILLSWITCH_BLOCK_STORAGE_PREFIX = "vtx_client_runtime_killswitch_block_v1:";
     getClientKillswitchBlockStorageKey = (profileId) => `${CLIENT_KILLSWITCH_BLOCK_STORAGE_PREFIX}${profileId.trim()}`;
     persistClientRuntimeKillswitchBlock = (profileId) => {
@@ -114494,6 +115660,20 @@ var init_engine = __esm({
         this._startupPendingAnalysis = false;
         // True while the previous cycle ended in Agent-instruction polling.
         this._agentInstructionPollActive = false;
+        // The AI schedule (lib/runtime/ai-schedule.ts): paused outside its windows,
+        // and whether a window let a cycle run since (its end then may close
+        // positions, as the Python Server loop's _was_scheduled_running).
+        this._aiSchedulePaused = false;
+        this._aiScheduleWindowActive = false;
+        // When the window that let the last cycle run ends: the engine checks again
+        // then, so a pause (and Close on Stop) starts at the window's end.
+        this._aiScheduleWindowEndsAtMs = null;
+        // Run Now's next cycle runs whatever the schedule says (triggerNow).
+        this._manualRunRequested = false;
+        // The cycle in flight only checks the AI schedule (a window-end or resume check).
+        this._checkOnlyCycleInFlight = false;
+        // The armed timer is a window-end wake: its cycle only applies the schedule.
+        this._aiScheduleCheckPending = false;
         // Cycle whose Agent-instruction claim is currently held open by the server.
         // That idle wait is not analysis, so busy flags exclude it.
         this._agentInstructionClaimWaitRequestId = null;
@@ -114517,6 +115697,8 @@ var init_engine = __esm({
         this._primaryAnalysisDisabled = false;
         this._loopEarlyReturnRetryDelayMs = 5e3;
         this._executionModeMismatchConsecutiveCount = 0;
+        this._expectedExecutionMode = "client";
+        this._settleUnreportedModelCalls = null;
         this._activeRuntimeContractIdentity = null;
         this._contractRebindInFlight = false;
         this._contractRebindExhausted = false;
@@ -114684,6 +115866,57 @@ var init_engine = __esm({
         }
         return pending3.length === 0;
       }
+      /**
+       * Close on Stop: a Trader's schedule window ended with the option on, so
+       * its open positions close, as the Python Server loop's
+       * _handle_schedule_stop does. A failure is reported as a runtime error and
+       * the bot stays paused.
+       */
+      async _closePositionsAtScheduleEnd(profileId, paused, cancelled) {
+        try {
+          if (cancelled()) return;
+          const walletAddress = String(paused.settings.hyperliquid_wallet_address || "").trim();
+          const signingKey = String(this._deviceSecrets?.hyperliquidSigningKey || "").trim();
+          if (!walletAddress || !signingKey) {
+            throw new Error("the wallet or its signing key is unavailable");
+          }
+          const timeoutSeconds = Number(paused.config.client_runtime_killswitch_close_timeout_seconds);
+          if (!Number.isFinite(timeoutSeconds) || timeoutSeconds <= 0) {
+            throw new Error("Invalid Client Mode position close timeout configuration.");
+          }
+          await this._trailingMaintenancePromise;
+          await this._pendingProtectionRecoveryPromise;
+          await waitForBrowserExchangeMutationSettlement(profileId);
+          const { positions } = await fetchBrowserAccountState2({
+            publicRequestPriority: "trading_reduce",
+            config: paused.config,
+            walletAddress,
+            symbol: firstConfiguredSymbol(paused.settings, paused.config),
+            tickerPrice: 0,
+            leverage: 1,
+            aggregatePerpDexs: true,
+            forceRefresh: true,
+            sessionId: this._sessionId ?? void 0
+          });
+          if (cancelled()) return;
+          await this._assertFreshClientWalletAssignment(profileId, walletAddress, void 0, "scheduled close on stop");
+          if (cancelled()) return;
+          const summary = await closeClientKillswitchPositions({
+            profileId,
+            walletAddress,
+            positions,
+            config: paused.config,
+            signingKey,
+            timeoutSeconds
+          });
+          if (summary.positionCloseFailures > 0) {
+            throw new Error(`${summary.positionCloseFailures} position(s) could not be closed`);
+          }
+        } catch (error48) {
+          const detail = error48 instanceof Error ? error48.message : String(error48);
+          await this.reportError(`\u26A0\uFE0F Scheduled close-on-stop failed: ${detail}`, { fatal: false });
+        }
+      }
       async _assertFreshClientWalletAssignment(profileId, expectedWalletAddress, signal, stage) {
         const expectedWallet = String(expectedWalletAddress || "").trim().toLowerCase();
         if (!expectedWallet) {
@@ -114723,7 +115956,9 @@ var init_engine = __esm({
           const status = await getAiTradingStatus(void 0, Number(this._profileId), {
             runtimeViewer: this._runtimeStatusViewer()
           });
-          if (!isExplicitClientExecutionMode(status?.execution_mode)) {
+          const statusMode = status?.execution_mode;
+          const expectedMode = this._expectedExecutionMode === "server" ? String(statusMode ?? "").trim().toLowerCase() === "server" : isExplicitClientExecutionMode(statusMode);
+          if (!expectedMode) {
             this._executionModeMismatchConsecutiveCount += 1;
             return this._executionModeMismatchConsecutiveCount >= 2;
           }
@@ -115265,6 +116500,7 @@ var init_engine = __esm({
       }
       _armExecutionLoopTimer(options) {
         this._clearExecutionLoopTimer();
+        if (options?.reason !== "ai_schedule_window_end") this._aiScheduleCheckPending = false;
         if (this._state !== "running" || this._loopIntervalMs == null) {
           return;
         }
@@ -115286,7 +116522,7 @@ var init_engine = __esm({
         const timerReason = options?.reason || "scheduled";
         const armedAtMs = Date.now();
         const expectedFireAtMs = armedAtMs + delayMs;
-        const quietAgentPollTimer = timerReason === "agent_instruction_poll";
+        const quietAgentPollTimer = timerReason === "agent_instruction_poll" || timerReason === "ai_schedule_paused";
         if (!quietAgentPollTimer) this._emitLoopBoundaryTelemetry("client_timer_armed", `reason=${options?.reason || "scheduled"} delay_ms=${delayMs}`, {
           reason: timerReason,
           delay_ms: delayMs,
@@ -115295,7 +116531,13 @@ var init_engine = __esm({
           timer_expected_fire_at_ms: expectedFireAtMs,
           // Terminal cycle evidence already records its next schedule. Retain the
           // initial/repaired schedule too, even if its first cycle never starts.
-          ...["cycle_finally", "main_model_disabled_copy_poll", "agent_instruction_poll"].includes(timerReason) ? {} : { cycle_evidence: {
+          ...[
+            "cycle_finally",
+            "main_model_disabled_copy_poll",
+            "agent_instruction_poll",
+            "ai_schedule_paused",
+            "ai_schedule_window_end"
+          ].includes(timerReason) ? {} : { cycle_evidence: {
             version: 1,
             runtime_source: "client",
             mode: this._mode,
@@ -115538,6 +116780,24 @@ var init_engine = __esm({
         return this._instanceId;
       }
       /** Whether this engine runs, starts, or stops a runtime (never claim it again). */
+      /**
+       * Resolves once no cycle is in flight, or after the timeout: a Node runtime
+       * host draining for a restart lets the current cycle finish, as a Python
+       * Server worker drains its in-flight work. Whether it settled in time.
+       */
+      async waitForCycleToSettle(timeoutMs) {
+        const loop = this._executionLoopPromise;
+        if (!loop) return true;
+        let timer;
+        const settled = await Promise.race([
+          loop.then(() => true, () => true),
+          new Promise((resolve14) => {
+            timer = setTimeout(() => resolve14(false), timeoutMs);
+          })
+        ]);
+        clearTimeout(timer);
+        return settled;
+      }
       get active() {
         return this._startPromise !== null || this._isStopping || this._state === "running" || this._state === "stale" || this._state === "offline";
       }
@@ -115564,12 +116824,20 @@ var init_engine = __esm({
         await this.relinquishControl("window");
       }
       async _attachInternal(profileId, grant, options, startController) {
+        this._aiSchedulePaused = false;
+        this._aiScheduleWindowActive = false;
+        this._aiScheduleWindowEndsAtMs = null;
         const lease = grant.lease;
         const grantSessionId = String(lease.runtime_session_id || "").trim();
         const grantDeviceId = String(lease.device_id || "").trim();
         if (String(lease.profile_id) !== String(profileId) || !grantSessionId || !grantDeviceId) {
           throw new Error("The runtime grant does not belong to this profile.");
         }
+        this._expectedExecutionMode = options.executionMode === "server" ? "server" : "client";
+        this._manualRunRequested = false;
+        this._aiScheduleCheckPending = false;
+        this._checkOnlyCycleInFlight = false;
+        this._settleUnreportedModelCalls = options.settleUnreportedModelCalls ?? null;
         const leaseSchedulerInstanceId = String(lease.scheduler_instance_id ?? "").trim();
         if (leaseSchedulerInstanceId !== this._instanceId && !(leaseSchedulerInstanceId === "" && options.unboundSchedulerLease === true)) {
           throw createRuntimeStartCancelledError("scheduler_instance_binding_missing", {
@@ -115589,7 +116857,8 @@ var init_engine = __esm({
         this._sessionId = grantSessionId;
         this._deviceId = grantDeviceId;
         this._mode = lease.mode === "assistant" ? "assistant" : "trader";
-        this._lastRunAt = (/* @__PURE__ */ new Date()).toISOString();
+        const grantedLastRunAt = String(grant.runtime?.last_runtime_run_at ?? "").trim();
+        this._lastRunAt = this._expectedExecutionMode === "server" ? Number.isFinite(Date.parse(grantedLastRunAt)) ? new Date(Date.parse(grantedLastRunAt)).toISOString() : null : (/* @__PURE__ */ new Date()).toISOString();
         this._lastAnalysisStartedAtMs = null;
         this._lastError = null;
         this._lastStopReason = null;
@@ -115715,7 +116984,10 @@ var init_engine = __esm({
             return;
           }
           this._assertStartAttemptActive(startController, "before_execution_loop");
-          if (waitsForAssignedStartPhase) {
+          if (waitsForAssignedStartPhase && this._expectedExecutionMode === "server" && this._mode === "trader") {
+            this._aiScheduleCheckPending = true;
+            void this._runExecutionLoop();
+          } else if (waitsForAssignedStartPhase) {
             this._armExecutionLoopTimer({ alignToNextRun: true, reason: "assigned_start_phase" });
           } else {
             this._armExecutionLoopTimer({ alignToNextRun: true });
@@ -116371,10 +117643,13 @@ var init_engine = __esm({
         }
         await this.relinquishControl(reason);
       }
-      async triggerNow() {
+      async triggerNow(options) {
         if (this._state !== "running") {
           throw new Error("AI runtime is not running on this client.");
         }
+        if ((options?.ignoreAiSchedule ?? true) && (!this._executionLoopPromise || this._aiSchedulePaused || this._checkOnlyCycleInFlight)) {
+          this._manualRunRequested = true;
+        }
         await this._runExecutionLoop();
       }
       _abortTrailingMaintenanceBeforeDispatch() {
@@ -116485,6 +117760,19 @@ var init_engine = __esm({
                 this._pendingProtectionRecoveryDispatched = true;
               }
             });
+            const retired = results.flatMap(({ retired: symbolRetired }) => symbolRetired ?? []);
+            const stale = results.flatMap(({ symbol: symbol2, reports }) => reports.filter((report) => report.execution_metadata?.reason_code === "pending_protective_entry_stale").map(() => symbol2));
+            if (retired.length > 0 || stale.length > 0) {
+              const retiredByReason = retired.reduce((counts, { reasonCode }) => ({
+                ...counts,
+                [reasonCode]: (counts[reasonCode] ?? 0) + 1
+              }), {});
+              this.reportLifecycleTelemetry(
+                "client_pending_protection_recovery",
+                `retired=${retired.length} stale=${stale.length}`,
+                { profileId, payload: { retired_by_reason: retiredByReason, stale_symbols: stale } }
+              );
+            }
             if (results.length) {
               appendRuntimeDebugEvent({
                 label: "pending_protection_recovery",
@@ -116747,10 +118035,22 @@ var init_engine = __esm({
         const analysisAbortController = new AbortController();
         this._analysisAbortController = analysisAbortController;
         let decisionSubmitted = false;
+        let cycleModelCalls = [];
+        let cycleModelCallsReported = false;
         let executedExchangeOrderInCycle = false;
         let pendingExternalInferenceBindings = [];
         let agentPollDelayMs = null;
+        let aiSchedulePauseMs = null;
+        let aiSchedulePauseHasNext = false;
+        let providerRetryDelayMs = null;
+        const ignoreAiSchedule = this._manualRunRequested;
+        this._manualRunRequested = false;
+        const pausedBeforeSlot = this._aiSchedulePaused && this._nextRunAtMs != null && Date.now() < this._nextRunAtMs;
+        const aiScheduleCheckOnly = (this._aiScheduleCheckPending || pausedBeforeSlot) && !ignoreAiSchedule;
+        this._aiScheduleCheckPending = false;
+        this._checkOnlyCycleInFlight = aiScheduleCheckOnly;
         const agentPollContinuation = this._agentInstructionPollActive;
+        const aiSchedulePauseContinuation = this._aiSchedulePaused || aiScheduleCheckOnly;
         let cycleStartEmitted = false;
         let cycleErrorProvenance = null;
         let cycleWorkStarted = false;
@@ -116825,15 +118125,35 @@ var init_engine = __esm({
           this._notifyListeners();
           void this.sendHeartbeat();
         };
-        if (!agentPollContinuation) emitCycleStarted();
+        if (!agentPollContinuation && !aiSchedulePauseContinuation) emitCycleStarted();
         try {
-          const savedSecrets = await ClientVault.getSecrets(profileId);
+          let savedSecrets = await ClientVault.getSecrets(profileId);
+          let serverSigningKey = null;
+          if (this._expectedExecutionMode === "server") {
+            try {
+              const fresh = await ClientVault.hydrateFromServer(profileId, {
+                includeAllProviderKeys: true,
+                requireProviderSecret: false
+              });
+              if (fresh) {
+                savedSecrets = fresh;
+                serverSigningKey = String(fresh.hyperliquidSigningKey ?? "").trim() || null;
+              }
+            } catch (error48) {
+              appendRuntimeDebugEvent({
+                label: "server_secrets_refresh_failed",
+                note: getSanitizedRuntimeErrorMessage(error48) || "unknown",
+                outcome: "error"
+              });
+            }
+          }
           if (analysisAbortController.signal.aborted || this._isStopping || this._analysisRequestId !== requestId) {
             throw new DOMException("The operation was aborted.", "AbortError");
           }
           if (savedSecrets) {
             deviceSecrets = {
               ...deviceSecrets,
+              ...serverSigningKey ? { hyperliquidSigningKey: serverSigningKey } : {},
               providerKeys: savedSecrets.providerKeys ?? {},
               providerKeySlots: savedSecrets.providerKeySlots,
               providerBaseUrls: savedSecrets.providerBaseUrls,
@@ -116880,6 +118200,18 @@ var init_engine = __esm({
               }
             },
             onCycleObservation: observeCycle,
+            onAiScheduleWindowActive: (windowEndsAtMs) => {
+              this._aiSchedulePaused = false;
+              this._aiScheduleWindowActive = true;
+              this._aiScheduleWindowEndsAtMs = windowEndsAtMs;
+            },
+            onAiScheduleOff: () => {
+              this._aiSchedulePaused = false;
+              this._aiScheduleWindowEndsAtMs = null;
+            },
+            ignoreAiSchedule,
+            aiScheduleCheckOnly,
+            executionMode: this._expectedExecutionMode,
             onPreparedExecutionContexts: async ({ config: config2, executionContexts }) => {
               if (runtimeMode !== "trader") return;
               const cancelled = () => this._state !== "running" || this._isStopping || this._windowHandoffRequested || this._killswitchLatched || this._profileId !== profileId || this._sessionId !== sessionId || this._deviceId !== deviceId || (getRuntimeContractBindingTupleToken(this._activeRuntimeContractIdentity) ?? getRuntimeStatusContractBindingTupleToken(this._runtimeStatus)) !== loopContractBindingToken;
@@ -116908,10 +118240,74 @@ var init_engine = __esm({
             },
             signal: analysisAbortController.signal
           });
+          const runCycleWithDispatchFreshness = (secrets) => this._expectedExecutionMode !== "server" ? runCycle(secrets) : runCycle(secrets).catch((error48) => {
+            if (!localAnalysis.isServerDispatchAccountStateStale(error48) || analysisAbortController.signal.aborted || this._isStopping || this._analysisRequestId !== requestId) {
+              throw error48;
+            }
+            appendRuntimeDebugEvent({ label: "server_dispatch_context_rebuilt", note: "attempt=2", outcome: "ok" });
+            return runCycle(secrets);
+          });
           let result;
           try {
-            result = await runCycle(deviceSecrets);
+            result = await runCycleWithDispatchFreshness(deviceSecrets);
           } catch (error48) {
+            if (localAnalysis.isClientRuntimeAiScheduleStillActive(error48)) {
+              cycleOutcome = "skipped";
+              cycleReason = "ai_schedule_check";
+              this._lastRunAt = previousLastRunAt;
+              this._nextRunAtMs = previousNextRunAtMs;
+              this._lastError = null;
+              this._notifyListeners();
+              return;
+            }
+            if (localAnalysis.isClientRuntimeAiSchedulePaused(error48)) {
+              cycleOutcome = "skipped";
+              cycleReason = "ai_schedule_paused";
+              this._lastRunAt = previousLastRunAt;
+              this._lastError = null;
+              const windowEnded = this._aiScheduleWindowActive;
+              this._aiScheduleWindowActive = false;
+              this._aiScheduleWindowEndsAtMs = null;
+              this._aiSchedulePaused = true;
+              const nowMs2 = Date.now();
+              const windowOpensAtMs = error48.nextChangeAtMs != null ? this._periodicNextSlot(error48.nextChangeAtMs, true) ?? error48.nextChangeAtMs : null;
+              aiSchedulePauseHasNext = windowOpensAtMs != null;
+              aiSchedulePauseMs = windowOpensAtMs != null ? Math.max(1e3, Math.min(windowOpensAtMs - nowMs2, 36e5)) : 6e4;
+              if (runtimeMode === "trader" && this._loopIntervalMs != null) {
+                aiSchedulePauseMs = Math.min(aiSchedulePauseMs, Math.max(1e3, this._loopIntervalMs));
+              }
+              this._nextRunAtMs = windowOpensAtMs;
+              if (!aiSchedulePauseContinuation) {
+                this._emitLoopBoundaryTelemetry("client_ai_schedule_paused", `request_id=${requestId}`, {
+                  request_id: requestId,
+                  status: error48.message,
+                  next_change_ms: error48.nextChangeAtMs
+                });
+              }
+              const cancelled = () => this._state !== "running" || this._isStopping || this._windowHandoffRequested || this._killswitchLatched || analysisAbortController.signal.aborted || this._profileId !== profileId || this._sessionId !== sessionId || this._deviceId !== deviceId;
+              if (windowEnded && runtimeMode === "trader" && error48.closeOnStop) {
+                await this._closePositionsAtScheduleEnd(profileId, error48, cancelled);
+              }
+              if (runtimeMode === "trader" && !cancelled()) {
+                try {
+                  await this._processClientCopyTrading({
+                    profileId,
+                    runtimeSessionId: sessionId,
+                    runtimeDeviceId: deviceId,
+                    config: await this.getExecutionConfig(profileId),
+                    signal: analysisAbortController.signal
+                  });
+                } catch (copyTradingError) {
+                  appendRuntimeDebugEvent({
+                    label: "ai_schedule_paused_copy_poll_failed",
+                    note: getSanitizedRuntimeErrorMessage(copyTradingError) || "Copy Trading poll failed.",
+                    outcome: "error"
+                  });
+                }
+              }
+              this._notifyListeners();
+              return;
+            }
             if (localAnalysis.isClientRuntimeAgentInstructionEmpty(error48)) {
               cycleOutcome = "skipped";
               cycleReason = "agent_instruction_poll_empty";
@@ -116949,7 +118345,7 @@ var init_engine = __esm({
               throw error48;
             }
             try {
-              result = await runCycle(refresh.secrets);
+              result = await runCycleWithDispatchFreshness(refresh.secrets);
             } catch (retryError) {
               const retryProviderSetup = getRuntimeProviderSetupDiagnostics(retryError);
               if (retryProviderSetup) {
@@ -116985,6 +118381,7 @@ var init_engine = __esm({
           }
           markCycleWorkStarted();
           decisionSnapshotId = result.decisionSnapshotId;
+          cycleModelCalls = Array.isArray(result.invocations) ? result.invocations : [];
           if (result.runtimeError) cycleFailureStage = cycleObservation.stage;
           observeCycle({ stage: "decision" });
           cycleErrorProvenance = {
@@ -117141,7 +118538,10 @@ var init_engine = __esm({
               promptTokens: result.prompt_tokens,
               completionTokens: result.completion_tokens,
               totalTokens: result.total_tokens,
-              settingsSnapshot: result.settingsSnapshot,
+              // A Server bot's row records what started its cycle, as the
+              // Python Server loop's does (a Client row never has, and the key
+              // is part of a row's Insights settings epoch).
+              settingsSnapshot: this._expectedExecutionMode === "server" ? { ...result.settingsSnapshot, analysis_trigger_origin: ignoreAiSchedule ? "manual" : "scheduled" } : result.settingsSnapshot,
               clientExchangeSnapshot: result.clientExchangeSnapshot ?? null,
               invocations: result.invocations,
               externalInferenceBindings: result.externalInferenceBindings ?? [],
@@ -117154,6 +118554,7 @@ var init_engine = __esm({
               reconciliationTimeoutMs: result.decisionReconciliationTimeoutMs
             });
             decisionSubmitted = true;
+            cycleModelCallsReported = true;
           } catch (decisionError) {
             if (isRuntimeContractMismatchError(decisionError)) {
               await this._discardCycleOnContractMismatch("decision", decisionError);
@@ -117226,11 +118627,28 @@ var init_engine = __esm({
             }
             const executionResults = [];
             const executionFailures = [];
-            for (let planIndex = 0; planIndex < executionPlans.length; planIndex += 1) {
-              if (planIndex > 0 && this._windowHandoffRequested) {
-                break;
-              }
-              const plan = executionPlans[planIndex];
+            const executionLeaseToken = () => {
+              const lease = getPersistedClientRuntimeServerLease(profileId);
+              return lease?.runtimeSessionId === sessionId && lease.deviceId === deviceId && lease.mode === "trader" ? lease.runtimeLeaseToken : null;
+            };
+            const serverCapacityByPlan = /* @__PURE__ */ new Map();
+            if (this._expectedExecutionMode === "server") {
+              const capacityPlans = executionPlans.map((plan, planIndex) => ({ plan, planIndex, decision: String(plan.decision || "").toUpperCase() })).filter(({ plan, decision }) => !plan.executionBlock && (decision === "BUY" || decision === "SELL") && Math.trunc(Number(plan.units)) > 0);
+              const allocations = capacityPlans.length === 0 ? [] : await allocateServerExecutionCapacity({
+                profileId,
+                sessionId,
+                runtimeLeaseToken: executionLeaseToken(),
+                runtimeDeviceId: deviceId,
+                schedulerInstanceId: this._instanceId,
+                signal: analysisAbortController.signal
+              }, capacityPlans.map(({ plan, decision }) => ({
+                symbol: plan.executionContext.symbol,
+                decision,
+                units: Math.trunc(Number(plan.units))
+              })));
+              capacityPlans.forEach(({ planIndex }, index) => serverCapacityByPlan.set(planIndex, allocations[index]));
+            }
+            const runPlan = async (plan, planIndex) => {
               let planEntryOrderDispatched = false;
               const decisionWallet = String(
                 plan.executionContext.walletAddress || ""
@@ -117252,7 +118670,7 @@ var init_engine = __esm({
                   actionablePlan ? "decision execution" : trailingHoldCanMutate ? "trailing stop maintenance" : "protective order reconciliation"
                 );
                 if (shouldAbortForContractInvalidation("post_execution_preferences_refresh")) {
-                  return;
+                  return { control: "return" };
                 }
               }
               appendRuntimeDebugEvent({
@@ -117304,17 +118722,16 @@ var init_engine = __esm({
                   executionResult = await executeClientRuntimeDecision({
                     profileId,
                     sessionId,
-                    runtimeLeaseToken: (() => {
-                      const lease = getPersistedClientRuntimeServerLease(profileId);
-                      return lease?.runtimeSessionId === sessionId && lease.deviceId === deviceId && lease.mode === "trader" ? lease.runtimeLeaseToken : null;
-                    })(),
+                    runtimeLeaseToken: executionLeaseToken(),
                     runtimeDeviceId: deviceId,
                     schedulerInstanceId: this._instanceId,
                     cycleId: result.cycleId,
+                    serverCapacityAllocation: serverCapacityByPlan.get(planIndex),
                     signingKey: this._deviceSecrets?.hyperliquidSigningKey ?? null,
                     config: config2,
                     decision: plan.decision,
                     units: plan.units,
+                    executionMode: this._expectedExecutionMode,
                     executionContext: plan.executionContext,
                     skipTrailingMaintenance: this._trailingObservations.some((request) => request.executionContext.decisionSnapshotId === plan.executionContext.decisionSnapshotId),
                     signal: analysisAbortController.signal,
@@ -117333,7 +118750,8 @@ var init_engine = __esm({
                   if (isClientRuntimeWindowHandoffBeforePlanDispatch(executionError)) {
                     const handoffCleanup = getClientRuntimeWindowHandoffCleanup(executionError);
                     if (handoffCleanup) {
-                      executionResults.push({
+                      this._executionFinalizationRequired = true;
+                      return { control: "break", result: {
                         status: "skipped",
                         intent: "hold",
                         side: null,
@@ -117346,10 +118764,9 @@ var init_engine = __esm({
                         handoffCleanup,
                         executionSnapshotId: `handoff-cleanup-${planIndex + 1}-${Date.now()}`,
                         executionSnapshotCapturedAt: (/* @__PURE__ */ new Date()).toISOString()
-                      });
-                      this._executionFinalizationRequired = true;
+                      } };
                     }
-                    break;
+                    return { control: "break" };
                   }
                   if (analysisAbortController.signal.aborted || isRuntimeAbortError(executionError) || isRuntimeContractMismatchError(executionError) || isClientExecutionModeMismatchError(executionError) || isClientRuntimeSessionStoppedError(executionError) || isClientRuntimeLeaseAuthError(executionError) || isTransientRuntimeConflictError(executionError)) {
                     throw executionError;
@@ -117408,6 +118825,9 @@ var init_engine = __esm({
                   };
                 }
               }
+              return { control: "continue", result: executionResult };
+            };
+            const recordPlanResult = (executionResult) => {
               executionResults.push(executionResult);
               if (executionResult.handoffCleanup) {
                 this._executionFinalizationRequired = true;
@@ -117416,11 +118836,26 @@ var init_engine = __esm({
                 executedExchangeOrderInCycle = true;
                 this._executionFinalizationRequired = true;
               }
-              if (!this._executionFinalizationRequired && (analysisAbortController.signal.aborted || this._isStopping || this._analysisRequestId !== requestId)) {
+            };
+            const cycleSupersededWithoutExecution = () => !this._executionFinalizationRequired && (analysisAbortController.signal.aborted || this._isStopping || this._analysisRequestId !== requestId);
+            for (let planIndex = 0; planIndex < executionPlans.length; planIndex += 1) {
+              if (planIndex > 0 && this._windowHandoffRequested) {
+                break;
+              }
+              const outcome = await runPlan(executionPlans[planIndex], planIndex);
+              if (outcome.control === "return") {
+                return;
+              }
+              if (outcome.control === "break") {
+                if (outcome.result) executionResults.push(outcome.result);
+                break;
+              }
+              recordPlanResult(outcome.result);
+              if (cycleSupersededWithoutExecution()) {
                 return;
               }
             }
-            const executionReports = executionResults.flatMap((executionResult) => Array.isArray(executionResult.executionReports) ? executionResult.executionReports : []);
+            const executionReports = executionResults.flatMap((executionResult) => Array.isArray(executionResult.executionReports) ? this._expectedExecutionMode === "server" ? withServerPositionEvents(executionResult) : executionResult.executionReports : []);
             const executedOrderReports = executionReports.filter((report) => report.status === "executed" && String(report.order_id || "").trim().length > 0);
             const handoffCleanups = executionResults.flatMap((executionResult) => executionResult.handoffCleanup ? [executionResult.handoffCleanup] : []);
             if (this._windowHandoffRequested && executedOrderReports.length === 0) {
@@ -117606,6 +119041,8 @@ var init_engine = __esm({
             this._notifyListeners();
           }
         } catch (error48) {
+          const errorModelCalls = error48?.runtimeInvocationAttempts;
+          if (Array.isArray(errorModelCalls) && errorModelCalls.length > 0) cycleModelCalls = errorModelCalls;
           const cycleElapsedSeconds = Math.max(0, (performance.now() - runStartedMonotonicMs) / 1e3);
           cycleOutcome = "failed";
           cycleReason = cycleObservation.reason_code ?? "runtime_failed";
@@ -117711,12 +119148,19 @@ var init_engine = __esm({
             model: cycleErrorProvenance?.model ?? null,
             modelSource: cycleErrorProvenance?.modelSource ?? null
           });
+          if (reportedRuntime !== null && Array.isArray(errorModelCalls) && errorModelCalls.length > 0) {
+            cycleModelCallsReported = true;
+          }
           if (reportedRuntime?.runtime_recovery_blocked_source === "terminal_failure") {
             this._scheduleRecoverableSuspendAfterExecutionLoop({
               reason: "runtime_terminal_failure"
             });
             return;
           }
+          if (hasEventBoundProviderFailureEvidence(error48) && this._expectedExecutionMode === "server") {
+            const backoffSeconds = Number((await this.getExecutionConfig(profileId).catch(() => null))?.provider_failure_backoff_seconds);
+            if (Number.isFinite(backoffSeconds) && backoffSeconds > 0) providerRetryDelayMs = backoffSeconds * 1e3;
+          }
           if (hasEventBoundProviderFailureEvidence(error48)) {
             this.scheduleProviderFailureDiagnosticsTelemetry({
               profileId,
@@ -117730,6 +119174,18 @@ var init_engine = __esm({
             });
           }
         } finally {
+          this._checkOnlyCycleInFlight = false;
+          if (!cycleModelCallsReported && cycleModelCalls.length > 0 && this._settleUnreportedModelCalls) {
+            try {
+              await this._settleUnreportedModelCalls(cycleModelCalls);
+            } catch (error48) {
+              appendRuntimeDebugEvent({
+                label: "unreported_model_calls_settle_failed",
+                note: getSanitizedRuntimeErrorMessage(error48) || "unknown",
+                outcome: "error"
+              });
+            }
+          }
           if (!decisionSubmitted && pendingExternalInferenceBindings.length > 0) {
             await Promise.allSettled(
               pendingExternalInferenceBindings.map((binding) => cancelClientRuntimeInferenceJob(profileId, binding.job_id, {
@@ -117756,8 +119212,9 @@ var init_engine = __esm({
           if (this._analysisRequestId === requestId) {
             this._analysisRequestId = null;
             this._analysisStartedAtMs = null;
+            if (this._expectedExecutionMode === "server" && this._state === "running") void this.sendHeartbeat();
           }
-          const silentEmptyAgentPoll = cycleOutcome === "skipped" && cycleReason === "agent_instruction_poll_empty" && !cycleStartEmitted;
+          const silentEmptyAgentPoll = cycleOutcome === "skipped" && (cycleReason === "agent_instruction_poll_empty" || cycleReason === "ai_schedule_paused" || cycleReason === "ai_schedule_check") && !cycleStartEmitted;
           if (this._state === "running" && this._sessionId === sessionId) {
             this._agentInstructionPollActive = agentPollDelayMs !== null;
           }
@@ -117775,7 +119232,7 @@ var init_engine = __esm({
               });
             }
             this._notifyListeners();
-            if (this._periodicSchedule && agentPollDelayMs === null && !this._primaryAnalysisDisabled) {
+            if (this._periodicSchedule && agentPollDelayMs === null && aiSchedulePauseMs === null && !this._primaryAnalysisDisabled) {
               this._advanceNextRunAnchor();
             }
             if (!silentEmptyAgentPoll) this._emitLoopBoundaryTelemetry("client_timer_rearmed", "reason=cycle_finally", {
@@ -117784,11 +119241,18 @@ var init_engine = __esm({
               primary_analysis_disabled: this._primaryAnalysisDisabled,
               agent_poll_retry_ms: agentPollDelayMs
             });
+            const providerRetryWake = providerRetryDelayMs !== null && aiSchedulePauseMs === null && agentPollDelayMs === null && (this._nextRunAtMs == null || this._nextRunAtMs > Date.now() + providerRetryDelayMs) ? providerRetryDelayMs : null;
+            if (providerRetryWake !== null) this._nextRunAtMs = Date.now() + providerRetryWake;
+            const windowEndsAtMs = this._aiScheduleWindowEndsAtMs;
+            const nextWorkAtMs = this._primaryAnalysisDisabled && this._loopIntervalMs != null ? Date.now() + this._loopIntervalMs : this._nextRunAtMs;
+            const windowEndWake = aiSchedulePauseMs === null && agentPollDelayMs === null && providerRetryWake === null && windowEndsAtMs != null && windowEndsAtMs > Date.now() && (nextWorkAtMs == null || windowEndsAtMs < nextWorkAtMs) ? windowEndsAtMs - Date.now() : null;
+            this._aiScheduleCheckPending = windowEndWake !== null;
+            const manualRunWake = this._manualRunRequested ? 0 : null;
             this._armExecutionLoopTimer({
               alignToNextRun: agentPollDelayMs === null,
-              delayOverrideMs: agentPollDelayMs,
-              reason: agentPollDelayMs !== null ? "agent_instruction_poll" : this._primaryAnalysisDisabled ? "main_model_disabled_copy_poll" : "cycle_finally",
-              suppressNextRunProjection: agentPollDelayMs === null && this._primaryAnalysisDisabled
+              delayOverrideMs: manualRunWake ?? aiSchedulePauseMs ?? agentPollDelayMs ?? providerRetryWake ?? windowEndWake,
+              reason: manualRunWake !== null ? "manual_run_requested" : aiSchedulePauseMs !== null ? "ai_schedule_paused" : agentPollDelayMs !== null ? "agent_instruction_poll" : providerRetryWake !== null ? "provider_failure_retry" : windowEndWake !== null ? "ai_schedule_window_end" : this._primaryAnalysisDisabled ? "main_model_disabled_copy_poll" : "cycle_finally",
+              suppressNextRunProjection: aiSchedulePauseMs !== null && !aiSchedulePauseHasNext || agentPollDelayMs === null && aiSchedulePauseMs === null && this._primaryAnalysisDisabled
             });
           }
           if (cycleOutcome === "unknown" && (analysisAbortController.signal.aborted || this._isStopping || this._state === "stopped")) {
@@ -118188,6 +119652,7 @@ var init_engine = __esm({
         const heartbeatAnalysisRunId = this._primaryAnalysisDisabled || !this._isAnalysisInFlight() ? null : this._analysisRequestId;
         const heartbeatIsAnalyzing = !this._primaryAnalysisDisabled && (this._isAnalysisInFlight() || this._startupPendingAnalysis && options?.confirmGrant !== true || this._isExecuting);
         const heartbeatIsExecuting = this._isExecuting;
+        const heartbeatObservedAtMs = Date.now();
         const priorHeartbeatFailures = this._heartbeatFailures;
         try {
           const response = await sendClientRuntimeHeartbeat(heartbeatProfileId, {
@@ -118202,7 +119667,10 @@ var init_engine = __esm({
             schedulerPhase: heartbeatSchedulerPhase,
             analysisRunId: heartbeatAnalysisRunId,
             isAnalyzing: heartbeatIsAnalyzing,
-            isExecuting: heartbeatIsExecuting
+            isExecuting: heartbeatIsExecuting,
+            // Beats may arrive out of order: the server keeps a node bot's newest
+            // analyzing observation, so a cycle's end is never undone by its start.
+            ...this._expectedExecutionMode === "server" ? { analyzingObservedAtMs: heartbeatObservedAtMs } : {}
           });
           if (Number(response.protective_actions_pending ?? 0) > 0) {
             notifyClientProtectiveActionsPending(heartbeatProfileId);
@@ -118386,8 +119854,18 @@ var init_engine = __esm({
         );
         this._killswitchAbortController = null;
       }
+      /**
+       * A Server Mode bot (the Node runtime host, executionMode 'server') has one
+       * killswitch, the Python worker's risk monitor: it reads the bot's account,
+       * stops the bot through its runtime contract and closes its positions even
+       * while this process is down, so the runtime evaluates none here and reads
+       * no account for it.
+       */
+      _ownsKillswitch() {
+        return this._expectedExecutionMode !== "server";
+      }
       async _startClientKillswitchMonitor(startController) {
-        if (this._mode !== "trader" || !this._profileId) {
+        if (this._mode !== "trader" || !this._profileId || !this._ownsKillswitch()) {
           return;
         }
         const configPromise = this.getExecutionConfig(this._profileId);
@@ -118414,7 +119892,7 @@ var init_engine = __esm({
         );
       }
       async _runClientKillswitchCheck() {
-        if (this._state !== "running" || this._mode !== "trader" || this._killswitchLatched || this._killswitchCheckInFlight || !this._profileId || !this._sessionId || !this._deviceId) {
+        if (!this._ownsKillswitch() || this._state !== "running" || this._mode !== "trader" || this._killswitchLatched || this._killswitchCheckInFlight || !this._profileId || !this._sessionId || !this._deviceId) {
           return;
         }
         const profileId = this._profileId;
@@ -118730,6 +120208,9 @@ var init_engine = __esm({
         return config2;
       }
       async _processClientCopyTrading(input) {
+        if (this._expectedExecutionMode === "server") {
+          return;
+        }
         try {
           const persistedLease = getPersistedClientRuntimeServerLease(input.profileId);
           const runtimeLeaseToken = persistedLease?.runtimeSessionId === input.runtimeSessionId && persistedLease.deviceId === input.runtimeDeviceId && persistedLease.mode === "trader" ? persistedLease.runtimeLeaseToken : null;
@@ -119200,8 +120681,8 @@ var init_engine = __esm({
         if (!normalized) return false;
         return this._getEngine(normalized, false)?.updateLoopInterval(options) ?? false;
       }
-      async triggerNow() {
-        await this._getSelectedEngine()?.triggerNow();
+      async triggerNow(options) {
+        await this._getSelectedEngine()?.triggerNow(options);
       }
       async triggerProfileNow(profileId) {
         const normalized = this._normalizeProfileId(profileId);
@@ -119620,7 +121101,7 @@ async function runHeadlessRuntime(options) {
   const firstAttached = () => {
     const stopSweep = startServerProtectionSweeper(options, { ...identity2, schedulerInstanceId: engine.schedulerInstanceId });
     if (options.once && engine.state === "running" && !engine.snapshot.isAnalyzing) {
-      void engine.triggerNow().catch(() => void 0);
+      void engine.triggerNow({ ignoreAiSchedule: false }).catch(() => void 0);
     }
     return stopSweep;
   };