@vtxmacro/cli 2026.8.55 → 2026.8.57

package/bin/vtx.js

@@ -47,7 +47,7 @@ var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
     agent_cli_release_default = {
       package_name: "@vtxmacro/cli",
-      package_version: "2026.8.55",
+      package_version: "2026.8.57",
       codex_package_name: "@openai/codex",
       codex_version: "0.147.0",
       copilot_sdk_package_name: "@github/copilot-sdk",
@@ -18756,7 +18756,8 @@ var init_mcp_client = __esm({
           const errorText = (callResult.content ?? []).filter((block) => block.type === "text").map((block) => block.text ?? "").join("\n");
           const definitivelyNotApplied = (name === "inference.host.register" || name === "inference.host.advertise") && (errorText.includes("Advertisement time is outside the allowed clock skew.") || errorText.includes("Advertisement is already expired.")) || (name === "inference.agent.next" || name === "inference.agent.heartbeat") && (errorText.includes("Advertisement time is outside the allowed clock skew.") || errorText.includes("Advertisement is already expired.") || errorText.includes("Heartbeat time is outside the allowed clock skew.")) || name === "inference.host.heartbeat" && errorText.includes("Heartbeat time is outside the allowed clock skew.") || name === "inference.job.claim" && (errorText.includes(
             "External inference claim request was not applied before its generation became stale"
-          ) || errorText.includes("External inference host advertisement is expired or superseded"));
+          ) || errorText.includes("External inference host advertisement is expired or superseded")) || name === "inference.job.complete" && errorText.includes("External inference completion evidence window expired");
+          const completionEvidenceExpired = name === "inference.job.complete" && errorText.includes("External inference completion evidence window expired");
           const retryableInfrastructureRejection = EXTERNAL_INFERENCE_AUTOMATED_HOST_TOOLS.includes(name) && (errorText.includes("External inference polling is at its configured concurrency limit") || errorText.includes("The Insights action reached the response timeout") || errorText.includes("Insights capability failed without exposing private runtime details"));
           const retryableClaimRejection = name === "inference.job.claim" && !definitivelyNotApplied && (retryableInfrastructureRejection || errorText.includes("External inference host is not live enough to claim work") || errorText.includes("External inference host request generation is stale") || errorText.includes("External inference claim runtime fence is stale"));
           const retryableHeartbeatClockSkew = name === "inference.host.heartbeat" && definitivelyNotApplied;
@@ -18766,7 +18767,7 @@ var init_mcp_client = __esm({
             "External inference claim replay is no longer dispatchable"
           );
           throw new ExternalInferenceMcpError(
-            staleHostHeartbeatGeneration ? "generation_stale" : obsoleteClaimReplay ? "claim_replay_obsolete" : "tool_rejected",
+            completionEvidenceExpired ? "completion_evidence_expired" : staleHostHeartbeatGeneration ? "generation_stale" : obsoleteClaimReplay ? "claim_replay_obsolete" : "tool_rejected",
             `Insights MCP rejected ${name}.`,
             {
               definitivelyNotApplied: definitivelyNotApplied || staleHostHeartbeatGeneration,
@@ -32426,7 +32427,7 @@ function createDefaultInferenceHostRunnerDependencies(options) {
     envelopePublicKey: options.envelopePublicKey
   };
 }
-var import_ajv, RUNTIME_RECEIPT_SCHEMA_VERSION, ATTEMPT_RECEIPT_SCHEMA_VERSION, DEFAULT_ADVERTISEMENT_TTL_MS, DEFAULT_ADVERTISEMENT_REFRESH_LEAD_MS, DEFAULT_HOST_HEARTBEAT_MS, DEFAULT_PROVIDER_RATE_LIMIT_REFRESH_MS, DEFAULT_ATTEMPT_HEARTBEAT_MS, DEFAULT_DRAIN_TIMEOUT_MS, DEFAULT_REMOTE_RETRY_LIMIT, MIN_SLEEP_MS, MIN_HOST_HEARTBEAT_GAP_DIAGNOSTIC_MS, HOST_HEARTBEAT_GAP_DIAGNOSTIC_FACTOR, DEFAULT_CODEX_ACCOUNT_COOLDOWN_MS, DEFAULT_AGENT_RATE_LIMIT_COOLDOWN_MS, DEFAULT_AGENT_QUOTA_COOLDOWN_MS, DEFAULT_AGENT_TRANSIENT_COOLDOWN_MS, MIN_CLAIM_START_WINDOW_MS, MAX_ATTEMPT_START_RETRY_DELAY_MS, UNBOUNDED_AVAILABLE_SLOTS, buildInferenceAdvertisedModels, summarizeInferenceHostRuntimeRecovery, FileInferenceHostRuntimeReceiptStore, InferenceHostRecoveryRequiredError, InferenceHostRunnerError, defaultSleep, abortError, settlesWithin, defaultRegisterSignalHandlers, safeInteger, exactObjectKeys, validIso, validateAttemptReceipt, validateRuntimeReceipt, sha256, stableOperationId, buildAttemptStartRequest, isoAt, providerWeeklyQuotaFromRateLimits, finitePositiveOption, validateRunnerOptions, assertLocalCredentialIdentity, retryableRemoteError, remoteRetryAfterMs, controlPlaneFatal, defaultValidateOutput, objectRecord, positiveUtf8ByteLimit, assertCompilableOutputSchema, parseOutputContract, membershipFailureDisposition, safeFailureCode, attemptStartRetryFallbackMs, exactJson2, runnerIdentityMismatch, assertAdvertisementResult, assertHostHeartbeatResult, assertClaimResult, assertStartResult, assertJobHeartbeatResult, assertTerminalResult, classifyFailure, ambiguousHeartbeatTransport, reportedTokenUsage, reportedUsage, InferenceHostRunner, createInferenceAgentControlClient, INFERENCE_AGENT_SYSTEM_PROMPT, INFERENCE_AGENT_WAKE_SCHEMA, parseInferenceAgentWake, InferenceAgentRuntime;
+var import_ajv, RUNTIME_RECEIPT_SCHEMA_VERSION, ATTEMPT_RECEIPT_SCHEMA_VERSION, DEFAULT_ADVERTISEMENT_TTL_MS, DEFAULT_ADVERTISEMENT_REFRESH_LEAD_MS, DEFAULT_HOST_HEARTBEAT_MS, DEFAULT_PROVIDER_RATE_LIMIT_REFRESH_MS, DEFAULT_ATTEMPT_HEARTBEAT_MS, DEFAULT_DRAIN_TIMEOUT_MS, DEFAULT_REMOTE_RETRY_LIMIT, MIN_SLEEP_MS, MIN_HOST_HEARTBEAT_GAP_DIAGNOSTIC_MS, HOST_HEARTBEAT_GAP_DIAGNOSTIC_FACTOR, DEFAULT_CODEX_ACCOUNT_COOLDOWN_MS, DEFAULT_AGENT_RATE_LIMIT_COOLDOWN_MS, DEFAULT_AGENT_QUOTA_COOLDOWN_MS, DEFAULT_AGENT_TRANSIENT_COOLDOWN_MS, MIN_CLAIM_START_WINDOW_MS, MAX_ATTEMPT_START_RETRY_DELAY_MS, UNBOUNDED_AVAILABLE_SLOTS, buildInferenceAdvertisedModels, summarizeInferenceHostRuntimeRecovery, FileInferenceHostRuntimeReceiptStore, InferenceHostRecoveryRequiredError, InferenceHostRunnerError, defaultSleep, abortError, settlesWithin, defaultRegisterSignalHandlers, safeInteger, exactObjectKeys, validIso, validateAttemptReceipt, validateRuntimeReceipt, sha256, stableOperationId, buildAttemptStartRequest, isoAt, providerWeeklyQuotaFromRateLimits, finitePositiveOption, validateRunnerOptions, assertLocalCredentialIdentity, retryableRemoteError, remoteRetryAfterMs, controlPlaneFatal, defaultValidateOutput, objectRecord, positiveUtf8ByteLimit, assertCompilableOutputSchema, parseOutputContract, membershipFailureDisposition, safeFailureCode, attemptStartRetryFallbackMs, exactJson2, runnerIdentityMismatch, assertAdvertisementResult, assertHostHeartbeatResult, assertClaimResult, assertStartResult, assertJobHeartbeatResult, assertTerminalResult, isDefinitiveCompletionEvidenceExpiry, classifyFailure, ambiguousHeartbeatTransport, reportedTokenUsage, reportedUsage, InferenceHostRunner, createInferenceAgentControlClient, INFERENCE_AGENT_SYSTEM_PROMPT, INFERENCE_AGENT_WAKE_SCHEMA, parseInferenceAgentWake, InferenceAgentRuntime;
 var init_runner = __esm({
   "lib/inference-host/runner.ts"() {
     "use strict";
@@ -33050,6 +33051,7 @@ var init_runner = __esm({
         if (failure.state !== request.attempt_status || failure.failure_category !== request.failure_category || failure.failure_code !== request.failure_code) runnerIdentityMismatch("Job failure receipt");
       }
     };
+    isDefinitiveCompletionEvidenceExpiry = (error48, terminal) => terminal?.schema_version === "external_inference_job_complete_v1" && error48 instanceof ExternalInferenceMcpError && error48.code === "completion_evidence_expired" && error48.definitivelyNotApplied;
     classifyFailure = (error48, result2) => {
       if (error48 instanceof CodexAppServerError) {
         const category2 = error48.code === "quota_exceeded" ? "quota" : error48.category;
@@ -33907,10 +33909,19 @@ var init_runner = __esm({
             }
             return attemptId;
           };
-          const removeRecoveredAttempt = async (attemptId) => {
+          const removeRecoveredAttempt = async (recovery) => {
             await mutateReceipt((current) => {
+              const persisted = current.attempts[recovery.attempt_id];
+              const persistedTerminal = persisted?.terminal_request;
+              const recoveryTerminal = recovery.terminal_request;
+              const sameTerminalRequest = Boolean(
+                persistedTerminal && recoveryTerminal && persistedTerminal.schema_version === recoveryTerminal.schema_version && (persistedTerminal.schema_version === "external_inference_job_complete_v1" && recoveryTerminal.schema_version === "external_inference_job_complete_v1" && persistedTerminal.completion_id === recoveryTerminal.completion_id || persistedTerminal.schema_version === "external_inference_job_fail_v1" && recoveryTerminal.schema_version === "external_inference_job_fail_v1" && persistedTerminal.failure_id === recoveryTerminal.failure_id)
+              );
+              if (persisted?.phase !== "terminal_pending" || persisted.job_id !== recovery.job_id || persisted.terminal_operation_id !== recovery.terminal_operation_id || !sameTerminalRequest) {
+                return current;
+              }
               const attempts = { ...current.attempts };
-              delete attempts[attemptId];
+              delete attempts[recovery.attempt_id];
               return { ...current, attempts, updated_at: isoAt(now()) };
             });
           };
@@ -33936,8 +33947,22 @@ var init_runner = __esm({
                   failed += 1;
                 }
                 await this.dependencies.codexAdapter.acknowledgeAttempt?.(recovery.attempt_id);
-                await removeRecoveredAttempt(recovery.attempt_id);
+                await removeRecoveredAttempt(recovery);
               } catch (error48) {
+                if (isDefinitiveCompletionEvidenceExpiry(error48, recovery.terminal_request)) {
+                  await this.dependencies.codexAdapter.acknowledgeAttempt?.(recovery.attempt_id);
+                  await removeRecoveredAttempt(recovery);
+                  failed += 1;
+                  emitDiagnostic("terminal_recovery_retired", {
+                    job_id: recovery.job_id,
+                    attempt_id: recovery.attempt_id,
+                    attempt_phase: recovery.phase,
+                    terminal_operation: "complete",
+                    error_code: error48.code,
+                    definitively_not_applied: true
+                  });
+                  continue;
+                }
                 emitTerminalRecoveryFailure(recovery, error48);
                 requestDrain(controlPlaneFatal(error48) ? "authority_lost" : "attempt_terminal_unconfirmed");
                 break;
@@ -34568,6 +34593,22 @@ var init_runner = __esm({
             assertTerminalResult(completion, completionResult);
             await this.dependencies.codexAdapter.acknowledgeAttempt?.(attemptId);
           } catch (error48) {
+            if (isDefinitiveCompletionEvidenceExpiry(error48, completion)) {
+              await this.dependencies.codexAdapter.acknowledgeAttempt?.(attemptId);
+              await stopHeartbeat();
+              await removeAttempt();
+              options.onAttemptOutcome?.({
+                outcome: "failed",
+                failure_category: "deadline",
+                failure_code: error48.code,
+                retryable: false,
+                dispatch_outcome: completion.outcome.dispatch_outcome,
+                response_outcome: "none",
+                latency_ms: completion.latency_ms,
+                usage: completion.usage
+              });
+              return "failed";
+            }
             throw new InferenceHostRunnerError(
               "terminal_outcome_unconfirmed",
               "The exact completion receipt could not be confirmed; redispatch is fenced.",
@@ -35280,7 +35321,7 @@ import { createWriteStream, readFileSync } from "node:fs";
 import { access as access3, chmod as chmod3, mkdir as mkdir3, readFile as readFile5, rm as rm6, writeFile as writeFile2 } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
 import { dirname as dirname5, join as join7, resolve as resolve4 } from "node:path";
-var SERVICE_NAME, SYSTEMD_UNIT, LAUNCHD_LABEL, SERVICE_COOPERATIVE_STOP_SECONDS, INFERENCE_HOST_SERVICE_DRAIN_COMMAND, inferenceHostServiceChildEnvironment, isWindowsSubsystemForLinux, inferenceHostServiceManifestPath, inferenceHostServiceDesiredPath, inferenceHostServiceLogPath, inferenceHostServiceRuntimePath, xmlEscape, plistEscape, systemdQuote, defaultRunCommand, managerName, assertRuntimeEnvironment, withoutConcurrencyLimit, assertServicePath, manifestGeneration, assertWorker, assertManifest, assertServiceRuntimeState, assertDesiredState, readInferenceHostServiceManifest, readManifestAcrossAtomicReplacement, readInferenceHostServiceRuntime, readRuntimeAcrossAtomicReplacement, readInferenceHostServiceDesired, readDesiredAcrossAtomicReplacement, writeDesired, runtimeEnvironment, serviceArguments, windowsOwnedCommandLine, vbScriptString, windowsServiceLauncher, windowsTaskXml, systemdUnit, launchAgentPlist, sameWorker, sameServiceDefinition, sameWorkerSet, InferenceHostServiceManager, appendServiceLog, spawnInferenceHostServiceChild, runInferenceHostServiceSupervisor;
+var SERVICE_NAME, SYSTEMD_UNIT, LAUNCHD_LABEL, SERVICE_COOPERATIVE_STOP_SECONDS, SERVICE_UPDATE_STARTUP_SECONDS, INFERENCE_HOST_SERVICE_DRAIN_COMMAND, inferenceHostServiceChildEnvironment, isWindowsSubsystemForLinux, inferenceHostServiceManifestPath, inferenceHostServiceDesiredPath, inferenceHostServiceLogPath, inferenceHostServiceRuntimePath, xmlEscape, plistEscape, systemdQuote, defaultRunCommand, managerName, assertRuntimeEnvironment, withoutConcurrencyLimit, assertServicePath, manifestGeneration, assertWorker, assertManifest, assertServiceRuntimeState, assertDesiredState, readInferenceHostServiceManifest, readManifestAcrossAtomicReplacement, readInferenceHostServiceRuntime, readRuntimeAcrossAtomicReplacement, readInferenceHostServiceDesired, readDesiredAcrossAtomicReplacement, writeDesired, runtimeEnvironment, serviceBootstrapArguments, windowsOwnedCommandLine, vbScriptString, windowsServiceLauncher, windowsTaskXml, systemdUnit, launchAgentPlist, sameWorker, sameServiceDefinition, sameWorkerSet, InferenceHostServiceManager, appendServiceLog, spawnInferenceHostServiceChild, runInferenceHostServiceSupervisor;
 var init_service = __esm({
   "lib/inference-host/service.ts"() {
     "use strict";
@@ -35290,6 +35331,7 @@ var init_service = __esm({
     SYSTEMD_UNIT = "vtx-inference-host.service";
     LAUNCHD_LABEL = "com.vtxmacro.inference-host";
     SERVICE_COOPERATIVE_STOP_SECONDS = 75;
+    SERVICE_UPDATE_STARTUP_SECONDS = 600;
     INFERENCE_HOST_SERVICE_DRAIN_COMMAND = "vtx-inference-host-service-drain-v1";
     inferenceHostServiceChildEnvironment = (runtimeEnvironment2, inheritedEnvironment = process.env) => {
       const environment = { ...inheritedEnvironment };
@@ -35594,13 +35636,12 @@ var init_service = __esm({
       }
       return result2;
     };
-    serviceArguments = (script, manifestPath) => [
-      script,
-      "inference-host",
-      "service",
-      "run-internal",
+    serviceBootstrapArguments = (bootstrapScript, manifestPath, lockPath) => [
+      bootstrapScript,
       "--service-manifest",
-      manifestPath
+      manifestPath,
+      "--service-lock",
+      lockPath
     ];
     windowsOwnedCommandLine = (values) => {
       if (values.some((value) => value.includes('"') || value.includes("\0"))) {
@@ -35679,6 +35720,9 @@ WantedBy=default.target
         this.home = dependencies.homedir ?? homedir2();
         this.executable = resolve4(dependencies.executable ?? process.execPath);
         this.script = resolve4(dependencies.script ?? process.argv[1] ?? "");
+        this.bootstrapScript = resolve4(
+          dependencies.bootstrapScript ?? join7(dirname5(this.script), "vtx-service-bootstrap.js")
+        );
         this.username = dependencies.username ?? ([process.env.USERDOMAIN, process.env.USERNAME].filter(Boolean).join("\\") || process.env.USER || "");
         this.windowsDirectory = (dependencies.windowsDirectory ?? process.env.SystemRoot ?? process.env.WINDIR ?? "C:\\Windows").replace(/[\\/]+$/u, "");
         this.runCommand = dependencies.runCommand ?? defaultRunCommand;
@@ -35710,6 +35754,21 @@ WantedBy=default.target
       runtimePath() {
         return inferenceHostServiceRuntimePath(this.config);
       }
+      serviceBootstrapPath() {
+        return `${this.config.supervisorStatePath}.service-bootstrap.js`;
+      }
+      serviceReleasePath() {
+        return `${this.config.supervisorStatePath}.service-release.json`;
+      }
+      serviceReleaseRejectionPath() {
+        return `${this.config.supervisorStatePath}.service-release-rejection.json`;
+      }
+      serviceReleasesPath() {
+        return `${this.config.supervisorStatePath}.service-releases`;
+      }
+      serviceBootstrapLockPath() {
+        return `${this.config.supervisorProcessLockPath}.service-bootstrap`;
+      }
       controlLockPath() {
         return `${this.config.supervisorProcessLockPath}.service-control`;
       }
@@ -35754,6 +35813,18 @@ WantedBy=default.target
       windowsLauncherPath() {
         return `${this.config.supervisorStatePath}.service-launcher.vbs`;
       }
+      async hasBootstrapDefinition() {
+        try {
+          await access3(this.serviceBootstrapPath());
+          const definition = await readFile5(
+            this.platform === "win32" ? this.windowsLauncherPath() : this.definitionPath(),
+            "utf8"
+          );
+          return definition.includes(this.serviceBootstrapPath());
+        } catch {
+          return false;
+        }
+      }
       async managerCommand(action) {
         const definition = this.definitionPath();
         if (this.platform === "win32") {
@@ -35875,13 +35946,23 @@ ${result2.stderr}`)) {
         );
       }
       async registerManifestUnlocked(manifest, desiredRunning, targetInstanceName) {
-        const args = serviceArguments(manifest.script, this.manifestPath());
+        await access3(this.bootstrapScript);
+        const args = serviceBootstrapArguments(
+          this.serviceBootstrapPath(),
+          this.manifestPath(),
+          this.serviceBootstrapLockPath()
+        );
         const definition = this.platform === "win32" ? windowsTaskXml(this.windowsLauncherPath(), this.windowsDirectory, this.username) : this.platform === "darwin" ? launchAgentPlist(manifest.executable, args, manifest.log_path) : systemdUnit(manifest.executable, args);
         let managerInstallAttempted = false;
         try {
           await writeAtomicInferencePrivateFile(this.manifestPath(), `${JSON.stringify(manifest, null, 2)}
 `);
           await writeDesired(this.desiredPath(), desiredRunning, this.now());
+          await writeAtomicInferencePrivateFile(
+            this.serviceBootstrapPath(),
+            await readFile5(this.bootstrapScript, "utf8")
+          );
+          await chmod3(this.serviceBootstrapPath(), 448);
           await mkdir3(dirname5(this.definitionPath()), { recursive: true, mode: 448 });
           if (this.platform === "win32") {
             await writeAtomicInferencePrivateFile(
@@ -35911,7 +35992,11 @@ ${started.stderr}`)) {
             }
             await this.waitForManagerActive();
             if (this.confirmInitialReadiness) {
-              await this.waitForManifestApplied(manifest, targetInstanceName);
+              await this.waitForManifestApplied(
+                manifest,
+                targetInstanceName,
+                Math.max(this.reconcileWaitAttempts, SERVICE_UPDATE_STARTUP_SECONDS * 4)
+              );
             }
           }
           return await this.status();
@@ -35938,6 +36023,7 @@ ${cleanup.stderr}`)) {
           await rm6(this.manifestPath(), { force: true }).catch(() => void 0);
           await rm6(this.desiredPath(), { force: true }).catch(() => void 0);
           await rm6(this.runtimePath(), { force: true }).catch(() => void 0);
+          await rm6(this.serviceBootstrapPath(), { force: true }).catch(() => void 0);
           if (this.platform === "linux") {
             await this.runCommand("systemctl", ["--user", "daemon-reload"]).catch(() => void 0);
           }
@@ -35947,10 +36033,11 @@ ${cleanup.stderr}`)) {
       async replaceManifestUnlocked(next, desiredRunning, targetInstanceName) {
         const previous = await readInferenceHostServiceManifest(this.manifestPath());
         const previousDesired = previous ? await readInferenceHostServiceDesired(this.desiredPath()) : false;
-        if (previous && sameServiceDefinition(previous, next) && sameWorkerSet(previous, next) && previousDesired === desiredRunning) {
+        const hasBootstrapDefinition = previous ? await this.hasBootstrapDefinition() : false;
+        if (previous && sameServiceDefinition(previous, next) && sameWorkerSet(previous, next) && previousDesired === desiredRunning && hasBootstrapDefinition) {
           return await this.status();
         }
-        if (previous && previousDesired && desiredRunning && sameServiceDefinition(previous, next)) {
+        if (previous && previousDesired && desiredRunning && sameServiceDefinition(previous, next) && hasBootstrapDefinition) {
           const current = await this.status();
           const runtime = await readRuntimeAcrossAtomicReplacement(this.runtimePath()).catch(() => null);
           if (current.manager_active && runtime?.manifest_generation === previous.generation) {
@@ -36070,6 +36157,7 @@ ${cleanup.stderr}`)) {
         }
         await access3(this.executable);
         await access3(this.script);
+        await access3(this.bootstrapScript);
         const maxConcurrency = options.maxConcurrency ?? null;
         const workers = [
           ...existing?.workers.filter((worker) => worker.instance_name !== this.config.instanceName) ?? [],
@@ -36195,25 +36283,34 @@ ${result2.stderr}`)) {
         const restoreOnFailure = await readInferenceHostServiceDesired(this.desiredPath());
         await writeDesired(this.desiredPath(), false, this.now());
         try {
-          const serviceLockPath = `${this.config.supervisorProcessLockPath}.service`;
+          const serviceLockPaths = [
+            `${this.config.supervisorProcessLockPath}.service`,
+            this.serviceBootstrapLockPath()
+          ];
           let serviceReleased = false;
           for (let attempt = 0; attempt < this.stopWaitAttempts; attempt += 1) {
-            try {
-              const probe = await this.acquireProcessLock(serviceLockPath);
-              await probe.release();
+            let allReleased = true;
+            for (const serviceLockPath of serviceLockPaths) {
+              try {
+                const probe = await this.acquireProcessLock(serviceLockPath);
+                await probe.release();
+              } catch (error48) {
+                if (error48 instanceof Error && error48.message.includes("Another inference host process already owns")) {
+                  allReleased = false;
+                  break;
+                }
+                throw error48;
+              }
+            }
+            if (allReleased) {
               serviceReleased = true;
               break;
-            } catch (error48) {
-              if (error48 instanceof Error && error48.message.includes("Another inference host process already owns")) {
-                await this.sleep(250);
-                continue;
-              }
-              throw error48;
             }
+            await this.sleep(250);
           }
           if (!serviceReleased) {
             throw new Error(
-              `Inference-host workers did not stop cooperatively within ${SERVICE_COOPERATIVE_STOP_SECONDS} seconds; refusing forced termination while cleanup may be pending.`
+              `Inference-host updater or workers did not stop cooperatively within ${SERVICE_COOPERATIVE_STOP_SECONDS} seconds; refusing forced termination while cleanup may be pending.`
             );
           }
           const result2 = await this.managerCommand("stop");
@@ -36329,6 +36426,10 @@ ${result2.stderr}`)) {
         await rm6(this.manifestPath(), { force: true });
         await rm6(this.desiredPath(), { force: true });
         await rm6(this.runtimePath(), { force: true });
+        await rm6(this.serviceBootstrapPath(), { force: true });
+        await rm6(this.serviceReleasePath(), { force: true });
+        await rm6(this.serviceReleaseRejectionPath(), { force: true });
+        await rm6(this.serviceReleasesPath(), { recursive: true, force: true });
         return {
           installed: false,
           desired_running: false,
@@ -36461,8 +36562,11 @@ ${result2.stderr}`)) {
       });
     };
     runInferenceHostServiceSupervisor = async (manifestPath, options = {}) => {
-      const initialManifest = await readInferenceHostServiceManifest(manifestPath);
-      if (!initialManifest) throw new Error("Inference-host service manifest is missing.");
+      const storedInitialManifest = await readInferenceHostServiceManifest(manifestPath);
+      if (!storedInitialManifest) throw new Error("Inference-host service manifest is missing.");
+      const serviceScript = options.serviceScript ? resolve4(options.serviceScript) : null;
+      const withServiceScript = (manifest) => serviceScript ? { ...manifest, script: serviceScript } : manifest;
+      const initialManifest = withServiceScript(storedInitialManifest);
       const desiredPath = manifestPath.replace(/\.service\.json$/u, ".service-desired.json");
       const runtimePath = manifestPath.replace(/\.service\.json$/u, ".service-runtime.json");
       const signal = options.signal ?? new AbortController().signal;
@@ -36659,15 +36763,17 @@ ${result2.stderr}`)) {
       try {
         while (!signal.aborted) {
           while (!signal.aborted && await readDesiredAcrossAtomicReplacement(desiredPath)) {
-            const next = await readManifestAcrossAtomicReplacement(manifestPath);
-            if (!next) throw new Error("Inference-host service manifest is missing.");
+            const storedNext = await readManifestAcrossAtomicReplacement(manifestPath);
+            if (!storedNext) throw new Error("Inference-host service manifest is missing.");
+            const next = withServiceScript(storedNext);
             if (next.generation !== appliedManifest.generation && next.generation !== rejectedManifestGeneration) await reconcile(next);
             await sleep4(250);
           }
           await drainWorkers();
           if (signal.aborted || !await readDesiredAcrossAtomicReplacement(desiredPath)) break;
-          const restored = await readManifestAcrossAtomicReplacement(manifestPath);
-          if (!restored) throw new Error("Inference-host service manifest is missing.");
+          const storedRestored = await readManifestAcrossAtomicReplacement(manifestPath);
+          if (!storedRestored) throw new Error("Inference-host service manifest is missing.");
+          const restored = withServiceScript(storedRestored);
           await reconcile(restored);
           await appendServiceLog(restored.log_path, "service_desired_state_restored", {
             manifest_generation: restored.generation,
@@ -39406,7 +39512,8 @@ Waiting for approval...
           await (dependencies.runServiceSupervisor ?? runInferenceHostServiceSupervisor)(
             parsed.serviceManifestPath,
             {
-              signal: cancellation.signal
+              signal: cancellation.signal,
+              serviceScript: resolve5(process.argv[1] ?? "")
             }
           );
           return { exitCode: 0, stdout: "", stderr: "" };
@@ -41762,12 +41869,13 @@ var init_hyperliquid_account_state_adapter = __esm({
     buildUserFillsStorageKey = (cacheKey) => {
       return `${USER_FILLS_CACHE_STORAGE_PREFIX}${cacheKey}`;
     };
-    buildAccountStateCacheKey = (apiUrl, walletAddress, symbol2, aggregatePerpDexs, dexNames, includeEffectiveTakerRate, includeExactAccountMode, includeActiveAssetData) => {
+    buildAccountStateCacheKey = (apiUrl, walletAddress, symbol2, aggregatePerpDexs, scopeAccountSummaryToSelectedDex, dexNames, includeEffectiveTakerRate, includeExactAccountMode, includeActiveAssetData) => {
       return [
         apiUrl.replace(/\/$/, "").toLowerCase(),
         walletAddress.trim().toLowerCase(),
         normalizeHyperliquidMarketSymbol(symbol2),
         aggregatePerpDexs ? "aggregate" : "selected",
+        scopeAccountSummaryToSelectedDex ? "selected-summary" : "aggregate-summary",
         includeEffectiveTakerRate ? "with-effective-taker-rate" : "without-effective-taker-rate",
         includeExactAccountMode ? "with-exact-account-mode" : "without-exact-account-mode",
         includeActiveAssetData ? "with-active-asset" : "without-active-asset",
@@ -42439,15 +42547,20 @@ var init_hyperliquid_account_state_adapter = __esm({
       const activeAssetCacheKey = buildActiveAssetCacheKey(apiUrl, walletAddress, symbol2);
       const activeAssetRequestTypes = getBrowserActiveAssetTypeCandidates(apiUrl, walletAddress, symbol2);
       const aggregatePerpDexs = input.aggregatePerpDexs !== false;
+      const scopeAccountSummaryToSelectedDex = input.scopeAccountSummaryToSelectedDex === true;
       const includeEffectiveTakerRate = input.includeEffectiveTakerRate === true;
       const includeExactAccountMode = input.includeExactAccountMode === true;
       const includeActiveAssetData = input.includeActiveAssetData !== false;
       const dexNames = listPerpDexsForAccountState(input.config, dex, aggregatePerpDexs);
+      if (scopeAccountSummaryToSelectedDex && dex && !dexNames.includes(dex)) {
+        dexNames.push(dex);
+      }
       const cacheKey = buildAccountStateCacheKey(
         apiUrl,
         walletAddress,
         symbol2,
         aggregatePerpDexs,
+        scopeAccountSummaryToSelectedDex,
         dexNames,
         includeEffectiveTakerRate,
         includeExactAccountMode,
@@ -42475,6 +42588,7 @@ var init_hyperliquid_account_state_adapter = __esm({
           apiUrl,
           walletAddress,
           symbol: symbol2,
+          selectedDex: dex,
           activeAssetCacheKey,
           activeAssetRequestTypes,
           dexNames,
@@ -42514,6 +42628,7 @@ var init_hyperliquid_account_state_adapter = __esm({
       apiUrl,
       walletAddress,
       symbol: symbol2,
+      selectedDex,
       activeAssetCacheKey,
       activeAssetRequestTypes,
       dexNames,
@@ -42538,11 +42653,22 @@ var init_hyperliquid_account_state_adapter = __esm({
             if (input.includeEffectiveTakerRate === true) {
               requirePromptClearinghouseState(response, dexName);
             }
-            return prefixHip3PositionCoins(response, dexName);
+            return {
+              dex: dexName,
+              payload: prefixHip3PositionCoins(response, dexName)
+            };
           })
         );
+        const selectedPayload = selectedDex ? dexResponses.find((entry) => entry.dex === selectedDex)?.payload : defaultResponse;
+        if (!selectedPayload) {
+          throw new Error(`Missing selected Hyperliquid clearinghouse state for DEX ${selectedDex}.`);
+        }
         return {
-          payload: aggregateClearinghouseResponses([defaultResponse, ...dexResponses]),
+          payload: aggregateClearinghouseResponses([
+            defaultResponse,
+            ...dexResponses.map((entry) => entry.payload)
+          ]),
+          selectedPayload,
           capturedAt: (/* @__PURE__ */ new Date()).toISOString()
         };
       })();
@@ -42625,6 +42751,7 @@ var init_hyperliquid_account_state_adapter = __esm({
         exactAccountModePromise
       ]);
       const perpsResponse = perpsResult.payload;
+      const accountSummaryPerpsResponse = input.scopeAccountSummaryToSelectedDex === true ? perpsResult.selectedPayload : perpsResponse;
       const spotResponse = spotResult.payload;
       const userFeesResponse = userFeesResult?.payload ?? null;
       if (input.includeEffectiveTakerRate === true) {
@@ -42646,18 +42773,35 @@ var init_hyperliquid_account_state_adapter = __esm({
         takerRate = parsedUserCrossRate;
       }
       const accountStateConfig = input.config.client_runtime_hyperliquid_account_state;
-      const summaryPerpsResponse = exactAccountMode ? { ...perpsResponse, accountMode: exactAccountMode.accountMode } : perpsResponse;
+      const summaryPerpsResponse = exactAccountMode ? { ...accountSummaryPerpsResponse, accountMode: exactAccountMode.accountMode } : accountSummaryPerpsResponse;
       const accountSummaryOptions = {
         spotDominatesMinTotalUsd: accountStateConfig?.spot_dominates_min_total_usd,
         spotDominatesPerpsMultiplier: accountStateConfig?.spot_dominates_perps_multiplier,
         mirroredAccountValueAbsoluteToleranceUsd: accountStateConfig?.mirrored_account_value_absolute_tolerance_usd,
         mirroredAccountValueRelativeTolerance: accountStateConfig?.mirrored_account_value_relative_tolerance
       };
-      const normalizedSummary = exactAccountMode ? buildServerPromptRescueAccountSummary(
+      const walletSummary = exactAccountMode && input.scopeAccountSummaryToSelectedDex !== true ? buildServerPromptRescueAccountSummary(
         perpsResponse,
         spotResponse,
         exactAccountMode.accountMode,
         accountSummaryOptions
+      ) : buildAccountSummaryFromInfoResponses(
+        perpsResponse,
+        spotResponse,
+        accountSummaryOptions
+      );
+      const normalizedSummary = input.scopeAccountSummaryToSelectedDex === true ? {
+        ...buildAccountSummaryFromInfoResponses(
+          summaryPerpsResponse,
+          {},
+          accountSummaryOptions
+        ),
+        balances: walletSummary.balances
+      } : exactAccountMode ? buildServerPromptRescueAccountSummary(
+        accountSummaryPerpsResponse,
+        spotResponse,
+        exactAccountMode.accountMode,
+        accountSummaryOptions
       ) : buildAccountSummaryFromInfoResponses(
         summaryPerpsResponse,
         spotResponse,
@@ -42667,7 +42811,7 @@ var init_hyperliquid_account_state_adapter = __esm({
         ...normalizedSummary,
         ...exactAccountMode == null ? {} : { account_mode: exactAccountMode.accountMode, mode_source: "canonical" },
         address: walletAddress,
-        dex: "all",
+        dex: input.scopeAccountSummaryToSelectedDex === true ? selectedDex : "all",
         market_type: "perp"
       };
       const activeAssetPayload = activeAssetResult?.payload ?? null;
@@ -43504,9 +43648,12 @@ async function postClientRuntime(path, profileId, body, options) {
   const numericProfileId = toNumericProfileId(profileId);
   const keepalive = options?.keepalive === true;
   const signal = options?.signal;
+  const parsedRequestTimeoutMs = Number(options?.requestTimeoutMs);
+  const requestTimeoutMs = Number.isFinite(parsedRequestTimeoutMs) && parsedRequestTimeoutMs > 0 ? Math.round(parsedRequestTimeoutMs) : null;
   const maxAttempts = keepalive ? 1 : 3;
   const requestContext = parseClientRuntimeRequestContext(body);
-  const idempotencyKey = shouldAttachRuntimeIdempotencyKey(path) ? createIdempotencyKey(`runtime-${path.replace(/\//g, "-")}`) : null;
+  const explicitIdempotencyKey = String(options?.idempotencyKey ?? "").trim();
+  const idempotencyKey = shouldAttachRuntimeIdempotencyKey(path) ? explicitIdempotencyKey || createIdempotencyKey(`runtime-${path.replace(/\//g, "-")}`) : null;
   const requestHeaders = getProfileHeaders({
     "Content-Type": "application/json"
   }, numericProfileId);
@@ -43523,6 +43670,24 @@ async function postClientRuntime(path, profileId, body, options) {
   let missingRuntimeLeaseRecoveryAttempted = false;
   for (let attempt = 1; attempt <= maxAttempts; attempt += 1) {
     let response = null;
+    let requestTimedOut = false;
+    let timeoutId = null;
+    let relayCallerAbort = null;
+    let requestSignal = signal;
+    if (requestTimeoutMs !== null) {
+      const timeoutController = new AbortController();
+      relayCallerAbort = () => timeoutController.abort(signal?.reason);
+      if (signal?.aborted) {
+        relayCallerAbort();
+      } else {
+        signal?.addEventListener("abort", relayCallerAbort, { once: true });
+      }
+      timeoutId = globalThis.setTimeout(() => {
+        requestTimedOut = true;
+        timeoutController.abort(new DOMException("Runtime request timeout reached.", "TimeoutError"));
+      }, requestTimeoutMs);
+      requestSignal = timeoutController.signal;
+    }
     const trace = startRuntimeNetworkDebugTrace({
       kind: "runtime",
       label: "client_runtime_api",
@@ -43535,7 +43700,7 @@ async function postClientRuntime(path, profileId, body, options) {
         method: "POST",
         credentials: "include",
         keepalive,
-        signal,
+        signal: requestSignal,
         headers: { ...requestHeaders },
         body
       });
@@ -43543,7 +43708,11 @@ async function postClientRuntime(path, profileId, body, options) {
         const error48 = await createRuntimeRequestError(response, "Client runtime request failed");
         if (!resolvedRuntimeLeaseToken && !missingRuntimeLeaseRecoveryAttempted && shouldRecoverMissingRuntimeLease(path, requestContext, keepalive) && isMissingRuntimeLeaseError(response.status, error48.message)) {
           missingRuntimeLeaseRecoveryAttempted = true;
-          const recoveredRuntimeLeaseToken = await recoverMissingRuntimeLease(numericProfileId, requestContext);
+          const recoveredRuntimeLeaseToken = await recoverMissingRuntimeLease(
+            numericProfileId,
+            requestContext,
+            requestSignal
+          );
           if (recoveredRuntimeLeaseToken) {
             resolvedRuntimeLeaseToken = recoveredRuntimeLeaseToken;
             attachRuntimeLeaseHeader(requestHeaders, resolvedRuntimeLeaseToken);
@@ -43561,7 +43730,7 @@ async function postClientRuntime(path, profileId, body, options) {
           hadRuntimeLeaseToken: Boolean(resolvedRuntimeLeaseToken),
           leaseCleared: shouldClearLease
         });
-        if (!keepalive && attempt < maxAttempts && !shouldClearLease && shouldRetryClientRuntimeHttpStatus(path, response.status)) {
+        if (!keepalive && attempt < maxAttempts && !shouldClearLease && (shouldRetryClientRuntimeHttpStatus(path, response.status) || isRuntimeIdempotencyInProgressError(response.status, error48.message) || Boolean(idempotencyKey) && isRetryableRuntimeConflictError(response.status, error48))) {
           await sleep2(resolveClientRuntimeRetryDelayMs(attempt, response.headers.get("Retry-After")));
           continue;
         }
@@ -43576,10 +43745,11 @@ async function postClientRuntime(path, profileId, body, options) {
       trace.completeSuccess(response.status);
       return payload;
     } catch (error48) {
-      lastNetworkError = error48;
-      trace.completeError(error48, response?.status ?? null);
-      if (!isTransientNetworkFetchError(error48) || attempt >= maxAttempts) {
-        throw annotateRuntimeRequestError(error48, {
+      const requestError = requestTimedOut && !signal?.aborted ? new TypeError("Runtime request timeout reached.") : error48;
+      lastNetworkError = requestError;
+      trace.completeError(requestError, response?.status ?? null);
+      if (signal?.aborted || !requestTimedOut && !isTransientNetworkFetchError(requestError) || attempt >= maxAttempts) {
+        throw annotateRuntimeRequestError(requestError, {
           path,
           method: "POST",
           attempt,
@@ -43591,6 +43761,13 @@ async function postClientRuntime(path, profileId, body, options) {
       }
       await sleep2(resolveClientRuntimeRetryDelayMs(attempt, null));
       continue;
+    } finally {
+      if (timeoutId !== null) {
+        globalThis.clearTimeout(timeoutId);
+      }
+      if (signal && relayCallerAbort) {
+        signal.removeEventListener("abort", relayCallerAbort);
+      }
     }
   }
   if (lastNetworkError instanceof Error) {
@@ -43793,7 +43970,7 @@ async function reconcileActiveClientRuntimeExchangeMutation(profileId, requestOp
   }
   return rememberCompletedDeferredClientRuntimeStop(profileId, result2);
 }
-var getApiUrl, API_URL, sleep2, isTransientNetworkFetchError, createIdempotencyKey, getErrorMessage, getErrorPayloadOrEmpty, getErrorPayloadOrFallbackDetail, getErrorMessageFromResponse, _activeProfileId, PROFILE_STORAGE_KEY, preferencesWriteQueue, CLIENT_SUPPORTED_PROMPT_CONTRACT_VERSION, completedDeferredClientRuntimeStops, rememberCompletedDeferredClientRuntimeStop, toNumericProfileId, shouldAttachRuntimeIdempotencyKey, attachRuntimeLeaseHeader, resolveRuntimeLeaseToken, persistRuntimeLeaseFromPayload, persistRuntimeLeaseStatusMetadata, shouldClearPersistedRuntimeLeaseOnError, isMissingRuntimeLeaseError, createRuntimeRequestError, parseClientRuntimeRequestContext, recordRuntimeAuthFailureBreadcrumb, classifyRuntimeRequestError, annotateRuntimeRequestError, parseRuntimeRetryAfterMs, shouldRecoverMissingRuntimeLease, recoverMissingRuntimeLease, isRetryableClientRuntimeStatus, shouldRetryClientRuntimeHttpStatus, resolveClientRuntimeRetryDelayMs, CLIENT_EXCHANGE_AUTHORITY_DEVICE_KEY, CLIENT_EXCHANGE_AUTHORITY_SESSION_KEY, getOrCreateClientExchangeAuthorityIdentity, resolveClientExchangeMutationAuthority, clientExchangeMutationAuthorityBody, isPendingClientExchangeMutationError, clientExchangeMutationReconciliationTimers, MAX_CLIENT_EXCHANGE_RECONCILIATION_DELAY_MS, CLIENT_EXCHANGE_RECONCILIATION_CLOCK_SKEW_MS, ClientExchangeMutationRebuildRequiredError, isTerminalClientExchangeMutation, clientExchangeMutationReconciliationKey, clearScheduledClientExchangeMutationReconciliation, snapshotClientExchangeMutationReconciliationAuthority, postClientExchangeMutationReconciliation, scheduleClientExchangeMutationReconciliation;
+var getApiUrl, API_URL, sleep2, isTransientNetworkFetchError, createIdempotencyKey, getErrorMessage, getErrorPayloadOrEmpty, getErrorPayloadOrFallbackDetail, getErrorMessageFromResponse, _activeProfileId, PROFILE_STORAGE_KEY, preferencesWriteQueue, CLIENT_SUPPORTED_PROMPT_CONTRACT_VERSION, completedDeferredClientRuntimeStops, rememberCompletedDeferredClientRuntimeStop, toNumericProfileId, shouldAttachRuntimeIdempotencyKey, attachRuntimeLeaseHeader, resolveRuntimeLeaseToken, persistRuntimeLeaseFromPayload, persistRuntimeLeaseStatusMetadata, shouldClearPersistedRuntimeLeaseOnError, isMissingRuntimeLeaseError, createRuntimeRequestError, parseClientRuntimeRequestContext, recordRuntimeAuthFailureBreadcrumb, classifyRuntimeRequestError, annotateRuntimeRequestError, parseRuntimeRetryAfterMs, shouldRecoverMissingRuntimeLease, recoverMissingRuntimeLease, isRetryableClientRuntimeStatus, shouldRetryClientRuntimeHttpStatus, isRuntimeIdempotencyInProgressError, isRetryableRuntimeConflictError, resolveClientRuntimeRetryDelayMs, CLIENT_EXCHANGE_AUTHORITY_DEVICE_KEY, CLIENT_EXCHANGE_AUTHORITY_SESSION_KEY, getOrCreateClientExchangeAuthorityIdentity, resolveClientExchangeMutationAuthority, clientExchangeMutationAuthorityBody, isPendingClientExchangeMutationError, clientExchangeMutationReconciliationTimers, MAX_CLIENT_EXCHANGE_RECONCILIATION_DELAY_MS, CLIENT_EXCHANGE_RECONCILIATION_CLOCK_SKEW_MS, ClientExchangeMutationRebuildRequiredError, isTerminalClientExchangeMutation, clientExchangeMutationReconciliationKey, clearScheduledClientExchangeMutationReconciliation, snapshotClientExchangeMutationReconciliationAuthority, postClientExchangeMutationReconciliation, scheduleClientExchangeMutationReconciliation;
 var init_api2 = __esm({
   "lib/api.ts"() {
     "use strict";
@@ -43992,7 +44169,9 @@ var init_api2 = __esm({
     };
     isMissingRuntimeLeaseError = (statusCode, message) => statusCode === 401 && String(message ?? "").trim().toLowerCase().includes("runtime lease required");
     createRuntimeRequestError = async (response, defaultMessage) => {
-      const rawMessage = await getErrorMessageFromResponse(response, defaultMessage);
+      const payload = await getErrorPayloadOrEmpty(response);
+      const nestedDetail = payload.detail && typeof payload.detail === "object" && !Array.isArray(payload.detail) ? payload.detail : null;
+      const rawMessage = getErrorMessage(payload, defaultMessage);
       const walletCohortMessage = response.status === 409 ? {
         client_wallet_unavailable: "The active profile wallet is unavailable. Save a wallet for this profile, then try again.",
         client_wallet_mismatch: "The active profile wallet does not match this Client Mode session. Reload the profile, then try again.",
@@ -44001,6 +44180,15 @@ var init_api2 = __esm({
       const message = walletCohortMessage ?? rawMessage;
       const error48 = new Error(message);
       error48.status = response.status;
+      error48.detail = payload.detail;
+      const code = typeof payload.code === "string" ? payload.code.trim() : typeof nestedDetail?.code === "string" ? nestedDetail.code.trim() : "";
+      if (code) {
+        error48.code = code;
+      }
+      const retryable = payload.retryable ?? nestedDetail?.retryable;
+      if (typeof retryable === "boolean") {
+        error48.retryable = retryable;
+      }
       return error48;
     };
     parseClientRuntimeRequestContext = (body) => {
@@ -44101,7 +44289,7 @@ var init_api2 = __esm({
       }
       return path === "/runtime/heartbeat" || path === "/runtime/analyze" || path === "/runtime/prompt-contract/metadata" || path === "/runtime/prompt-contract/derived-context" || path === "/runtime/prompt" || path === "/runtime/decision" || path === "/runtime/error" || path === "/runtime/trade-sync";
     };
-    recoverMissingRuntimeLease = async (profileId, requestContext) => {
+    recoverMissingRuntimeLease = async (profileId, requestContext, signal) => {
       if (!requestContext.sessionId || !requestContext.deviceId) {
         return null;
       }
@@ -44115,6 +44303,7 @@ var init_api2 = __esm({
           method: "POST",
           credentials: "include",
           cache: "no-store",
+          signal,
           headers,
           body: JSON.stringify({
             session_id: requestContext.sessionId,
@@ -44129,7 +44318,10 @@ var init_api2 = __esm({
           return null;
         }
         payload = await response.json();
-      } catch {
+      } catch (error48) {
+        if (signal?.aborted) {
+          throw signal.reason ?? error48;
+        }
         return null;
       }
       persistRuntimeLeaseFromPayload(payload);
@@ -44150,6 +44342,8 @@ var init_api2 = __esm({
       }
       return true;
     };
+    isRuntimeIdempotencyInProgressError = (status, message) => status === 409 && (message.toLowerCase().includes("duplicate request already in progress") || message.toLowerCase().includes("duplicate request in-flight"));
+    isRetryableRuntimeConflictError = (status, error48) => status === 409 && error48.retryable === true && (error48.code === "profile_runtime_contract_busy" || error48.code === "runtime_trade_sync_finalizing");
     resolveClientRuntimeRetryDelayMs = (attempt, retryAfterHeader) => {
       const retryAfterMs = parseRuntimeRetryAfterMs(retryAfterHeader);
       if (retryAfterMs != null) {