@vtxmacro/cli 2026.8.13 → 2026.8.15

package/bin/vtx.js

@@ -38,7 +38,7 @@ var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
     agent_cli_release_default = {
       package_name: "@vtxmacro/cli",
-      package_version: "2026.8.13",
+      package_version: "2026.8.15",
       codex_package_name: "@openai/codex",
       codex_version: "0.147.0",
       platforms: {
@@ -17267,7 +17267,7 @@ var init_mcp_client = __esm({
         if (!host) return invalidBoundResult(name);
         if (host.host_id !== request.host_id || host.host_generation !== request.host_generation || host.advertisement_generation !== request.advertisement_generation || host.key_generation !== request.key_generation || request.adapter !== void 0 && host.adapter !== request.adapter) invalidBoundResult(name);
         if (name !== "inference.host.heartbeat") {
-          if (host.display_name !== request.display_name || (host.authenticated_account_email ?? null) !== (request.authenticated_account_email ?? null) || (host.authenticated_account_plan ?? null) !== (request.authenticated_account_plan ?? null) || !exactJson(host.models, request.models) || host.status === "revoked") invalidBoundResult(name);
+          if (host.display_name !== request.display_name || host.authenticated_account_email !== void 0 && host.authenticated_account_email !== null && host.authenticated_account_email !== request.authenticated_account_email || (host.authenticated_account_plan ?? null) !== (request.authenticated_account_plan ?? null) || !exactJson(host.models, request.models) || host.status === "revoked") invalidBoundResult(name);
           return;
         }
         const expectedStatus = request.status === "healthy" ? "online" : request.status;
@@ -18504,7 +18504,7 @@ var init_agent_state = __esm({
 
 // lib/inference-host/codex-app-server.ts
 import { spawn as spawn2 } from "node:child_process";
-import { chmod, lstat as lstat2, readFile as readFile2, rename as rename2, writeFile } from "node:fs/promises";
+import { chmod, lstat as lstat2, readFile as readFile2, rename as rename2, rm as rm2, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { isAbsolute, join as join2, resolve as resolve2, sep } from "node:path";
 import { createInterface } from "node:readline";
@@ -18568,7 +18568,7 @@ async function logoutCodexSubscription(options) {
     await session.close();
   }
 }
-var CODEX_INFERENCE_PERMISSION_PROFILE, CODEX_ACCOUNT_PLAN_TYPES, CodexAppServerError, objectOrNull, finiteToken, tokenUsageFromBreakdown, usageFromNotification, validPlanType, nonnegativeSafeIntegerOrNull, nonnegativeFiniteNumberOrNull, parseRateLimitWindow, RATE_LIMIT_REACHED_TYPES, DEFAULT_CODEX_QUOTA_COOLDOWN_MS, MAX_CODEX_QUOTA_COOLDOWN_MS, CODEX_TRANSIENT_RATE_LIMIT_COOLDOWN_MS, parseRateLimitSnapshot, codexRateLimitRetryAtMs, codexAccountRateLimitReached, forbiddenMethod, forbiddenTerminalItem, classifyCodexTurnFailure, scrubbedCodexEnvironment, killWindowsProcessTree, appServerArgs, GUARDIAN_SCRIPT, writeCodexGuardianSpawnIntent, parseGuardianReceipt, readCodexGuardianReceipt, waitForCodexGuardianState, defaultSpawn, CodexAppServerSession;
+var CODEX_INFERENCE_PERMISSION_PROFILE, CODEX_ACCOUNT_PLAN_TYPES, CodexAppServerError, objectOrNull, finiteToken, tokenUsageFromBreakdown, usageFromNotification, validPlanType, nonnegativeSafeIntegerOrNull, nonnegativeFiniteNumberOrNull, parseRateLimitWindow, RATE_LIMIT_REACHED_TYPES, DEFAULT_CODEX_QUOTA_COOLDOWN_MS, MAX_CODEX_QUOTA_COOLDOWN_MS, CODEX_TRANSIENT_RATE_LIMIT_COOLDOWN_MS, parseRateLimitSnapshot, codexRateLimitRetryAtMs, codexAccountRateLimitReached, forbiddenMethod, forbiddenTerminalItem, classifyCodexTurnFailure, scrubbedCodexEnvironment, killWindowsProcessTree, appServerArgs, GUARDIAN_SCRIPT, WINDOWS_RECEIPT_REPLACE_ERROR_CODES, replaceCodexGuardianReceiptFile, writeCodexGuardianSpawnIntent, parseGuardianReceipt, readCodexGuardianReceipt, waitForCodexGuardianState, defaultSpawn, CodexAppServerSession;
 var init_codex_app_server = __esm({
   "lib/inference-host/codex-app-server.ts"() {
     "use strict";
@@ -18864,25 +18864,58 @@ var init_codex_app_server = __esm({
     };
     GUARDIAN_SCRIPT = String.raw`
 import { spawn } from 'node:child_process';
-import { chmod, rename, writeFile } from 'node:fs/promises';
+import { chmod, rename, rm, writeFile } from 'node:fs/promises';
 const input = JSON.parse(Buffer.from(process.argv[1], 'base64url').toString('utf8'));
 // The guardian owns the process boundary for every attempt. Apply a private
 // umask before writing receipts or starting Codex so a lost thread/start reply
 // still leaves traversable 0700 directories and removable 0600 rollout files.
 process.umask(0o077);
-const writeReceipt = async (state, childPid) => {
-  const body = JSON.stringify({
-    schema_version: 'vtx_codex_guardian_v1',
-    process_token: input.processToken,
-    state,
-    guardian_pid: process.pid,
-    child_pid: childPid ?? null,
-    updated_at: new Date().toISOString(),
-  }) + '\n';
-  const temporary = input.receiptPath + '.tmp-' + process.pid;
-  await writeFile(temporary, body, { mode: 0o600 });
-  await chmod(temporary, 0o600).catch(() => undefined);
-  await rename(temporary, input.receiptPath);
+const replaceReceipt = async (temporary) => {
+  const retryableWindowsCodes = new Set(['EACCES', 'EBUSY', 'EEXIST', 'ENOTEMPTY', 'EPERM']);
+  for (let attempt = 0; attempt < 40; attempt += 1) {
+    try {
+      await rename(temporary, input.receiptPath);
+      return;
+    } catch (error) {
+      if (
+        process.platform !== 'win32'
+        || !retryableWindowsCodes.has(String(error?.code || ''))
+        || attempt === 39
+      ) throw error;
+      try {
+        await rm(input.receiptPath, { force: true });
+      } catch (removeError) {
+        if (!retryableWindowsCodes.has(String(removeError?.code || ''))) throw removeError;
+      }
+      await new Promise((resolve) => setTimeout(resolve, 25));
+    }
+  }
+};
+let receiptWriteSequence = 0;
+let receiptWriteChain = Promise.resolve();
+const writeReceipt = (state, childPid) => {
+  const write = async () => {
+    const body = JSON.stringify({
+      schema_version: 'vtx_codex_guardian_v1',
+      process_token: input.processToken,
+      state,
+      guardian_pid: process.pid,
+      child_pid: childPid ?? null,
+      updated_at: new Date().toISOString(),
+    }) + '\n';
+    receiptWriteSequence += 1;
+    const temporary = input.receiptPath + '.tmp-' + process.pid + '-' + receiptWriteSequence;
+    try {
+      await writeFile(temporary, body, { mode: 0o600 });
+      await chmod(temporary, 0o600).catch(() => undefined);
+      await replaceReceipt(temporary);
+    } finally {
+      await rm(temporary, { force: true }).catch(() => undefined);
+    }
+  };
+  const scheduled = receiptWriteChain.then(write, write);
+  receiptWriteChain = scheduled.catch(() => undefined);
+  return scheduled;
 };
 let child = null;
 let shuttingDown = false;
@@ -18932,6 +18965,41 @@ child.once('close', async () => {
   }
 });
 `;
+    WINDOWS_RECEIPT_REPLACE_ERROR_CODES = /* @__PURE__ */ new Set([
+      "EACCES",
+      "EBUSY",
+      "EEXIST",
+      "ENOTEMPTY",
+      "EPERM"
+    ]);
+    replaceCodexGuardianReceiptFile = async (temporaryPath, receiptPath, options = {}) => {
+      const platform = options.platform ?? process.platform;
+      const renameFile = options.renameFile ?? rename2;
+      const removeFile = options.removeFile ?? ((path) => rm2(path, { force: true }));
+      const sleep4 = options.sleep ?? ((milliseconds) => new Promise((resolve5) => setTimeout(resolve5, milliseconds)));
+      const maxAttempts = Math.max(1, options.maxAttempts ?? 40);
+      const retryDelayMs = Math.max(0, options.retryDelayMs ?? 25);
+      for (let attempt = 0; attempt < maxAttempts; attempt += 1) {
+        try {
+          await renameFile(temporaryPath, receiptPath);
+          return;
+        } catch (error48) {
+          const code = String(error48.code ?? "");
+          if (platform !== "win32" || !WINDOWS_RECEIPT_REPLACE_ERROR_CODES.has(code) || attempt === maxAttempts - 1) {
+            throw error48;
+          }
+          try {
+            await removeFile(receiptPath);
+          } catch (removeError) {
+            const removeCode = String(removeError.code ?? "");
+            if (!WINDOWS_RECEIPT_REPLACE_ERROR_CODES.has(removeCode)) {
+              throw removeError;
+            }
+          }
+          await sleep4(retryDelayMs);
+        }
+      }
+    };
     writeCodexGuardianSpawnIntent = async (guardian) => {
       const body = `${JSON.stringify({
         schema_version: "vtx_codex_guardian_v1",
@@ -18945,7 +19013,7 @@ child.once('close', async () => {
       const temporary = `${guardian.receiptPath}.intent-${process.pid}`;
       await writeFile(temporary, body, { mode: 384 });
       await chmod(temporary, 384).catch(() => void 0);
-      await rename2(temporary, guardian.receiptPath);
+      await replaceCodexGuardianReceiptFile(temporary, guardian.receiptPath);
     };
     parseGuardianReceipt = (raw) => {
       const value = JSON.parse(raw);
@@ -20217,7 +20285,7 @@ import {
   readdir,
   readFile as readFile4,
   realpath as realpath3,
-  rm as rm2
+  rm as rm3
 } from "node:fs/promises";
 import { randomBytes as randomBytes3 } from "node:crypto";
 import { tmpdir as tmpdir2 } from "node:os";
@@ -20404,7 +20472,7 @@ var init_codex_adapter = __esm({
         codexHome,
         workspacePath,
         cleanup: async () => {
-          await rm2(root, { recursive: true, force: false });
+          await rm3(root, { recursive: true, force: false });
         }
       };
     };
@@ -20425,12 +20493,12 @@ var init_codex_adapter = __esm({
             codexHome,
             workspacePath,
             cleanup: async () => {
-              await rm2(workspacePath, { recursive: true, force: false });
+              await rm3(workspacePath, { recursive: true, force: false });
             }
           };
         },
         cleanup: async () => {
-          await rm2(root, { recursive: true, force: false });
+          await rm3(root, { recursive: true, force: false });
         }
       };
     };
@@ -20635,7 +20703,7 @@ var init_codex_adapter = __esm({
           if (!state.isFile() || state.isSymbolicLink() || typeof process.getuid === "function" && state.uid !== process.getuid()) {
             throw new Error("Codex recovery thread file is not private.");
           }
-          await rm2(threadPath, { force: false });
+          await rm3(threadPath, { force: false });
         } catch (error48) {
           if (error48.code !== "ENOENT") throw error48;
         }
@@ -20681,7 +20749,7 @@ var init_codex_adapter = __esm({
         );
         assertRecoveryResourceScope(checkpoint);
         await removeRecoveredThread(checkpoint, options.codexHome);
-        await rm2(checkpoint.resourceRoot, { recursive: true, force: true });
+        await rm3(checkpoint.resourceRoot, { recursive: true, force: true });
         await options.recoveryHooks.save({
           ...checkpoint,
           processState: "terminated",
@@ -20753,7 +20821,7 @@ var init_codex_adapter = __esm({
               dispatchOutcome: checkpoint.dispatchOutcome
             });
           }
-          await rm2(checkpoint.processReceiptPath, { force: true });
+          await rm3(checkpoint.processReceiptPath, { force: true });
         }
         await recoveryHooks.clear(attemptId);
       }
@@ -28075,7 +28143,7 @@ var init_runner = __esm({
     };
     assertAdvertisementResult = (advertisement, result2) => {
       const host = result2.host;
-      if (host.host_id !== advertisement.host_id || host.host_generation !== advertisement.host_generation || host.advertisement_generation !== advertisement.advertisement_generation || host.key_generation !== advertisement.key_generation || host.display_name !== advertisement.display_name || (host.authenticated_account_email ?? null) !== (advertisement.authenticated_account_email ?? null) || (host.authenticated_account_plan ?? null) !== (advertisement.authenticated_account_plan ?? null) || host.adapter !== advertisement.adapter || host.status === "revoked" || !exactJson2(host.models, advertisement.models)) runnerIdentityMismatch("Host advertisement");
+      if (host.host_id !== advertisement.host_id || host.host_generation !== advertisement.host_generation || host.advertisement_generation !== advertisement.advertisement_generation || host.key_generation !== advertisement.key_generation || host.display_name !== advertisement.display_name || host.authenticated_account_email !== void 0 && host.authenticated_account_email !== null && host.authenticated_account_email !== advertisement.authenticated_account_email || (host.authenticated_account_plan ?? null) !== (advertisement.authenticated_account_plan ?? null) || host.adapter !== advertisement.adapter || host.status === "revoked" || !exactJson2(host.models, advertisement.models)) runnerIdentityMismatch("Host advertisement");
     };
     assertHostHeartbeatResult = (request, result2, allowOfflineProjection = false) => {
       const expectedStatus = request.status === "healthy" ? "online" : request.status;
@@ -29139,7 +29207,7 @@ __export(cli_exports, {
 });
 import { randomUUID } from "node:crypto";
 import { spawn as spawn4 } from "node:child_process";
-import { lstat as lstat4, realpath as realpath4, rm as rm3 } from "node:fs/promises";
+import { lstat as lstat4, realpath as realpath4, rm as rm4 } from "node:fs/promises";
 import { join as join5, resolve as resolve4 } from "node:path";
 async function runInferenceHostCli(argv2, env = process.env, dependencies = {}) {
   const warnings = [];
@@ -29501,7 +29569,7 @@ private-file fallback. See https://vtxmacro.com/insights#subscription-inference.
         runtimeReceiptPath(config2),
         "Inference host runtime receipt file"
       );
-      await rm3(codexGuardianReceiptRoot(config2), { recursive: true, force: true });
+      await rm4(codexGuardianReceiptRoot(config2), { recursive: true, force: true });
       await clearInferencePrivateFile(
         codexRecoveryPath(config2),
         "Codex attempt recovery file"
@@ -30523,7 +30591,7 @@ Waiting for approval...
 });
 
 // lib/agent-core/config.ts
-import { mkdir as mkdir3, readFile as readFile5, rm as rm4, writeFile as writeFile2 } from "node:fs/promises";
+import { mkdir as mkdir3, readFile as readFile5, rm as rm5, writeFile as writeFile2 } from "node:fs/promises";
 import { dirname as dirname3, join as join6 } from "node:path";
 import { homedir as homedir2 } from "node:os";
 function defaultBaseDir() {
@@ -30567,7 +30635,7 @@ async function writeStoredAgentAuth(path, auth) {
 `, { encoding: "utf8", mode: 384 });
 }
 async function clearStoredAgentAuth(path) {
-  await rm4(path, { force: true });
+  await rm5(path, { force: true });
 }
 async function readRuntimeState(path) {
   try {
@@ -30600,7 +30668,7 @@ async function writeRuntimeState(path, state) {
 `, { encoding: "utf8", mode: 384 });
 }
 async function clearRuntimeState(path) {
-  await rm4(path, { force: true });
+  await rm5(path, { force: true });
 }
 var init_config2 = __esm({
   "lib/agent-core/config.ts"() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vtxmacro/cli",
-  "version": "2026.8.13",
+  "version": "2026.8.15",
   "description": "VTX Macro CLI, MCP server, and foreground subscription inference host.",
   "type": "module",
   "license": "UNLICENSED",