@vtxmacro/cli 2026.9.20 → 2026.9.21

package/bin/vtx-service-bootstrap.js

@@ -16,7 +16,7 @@ import { fileURLToPath } from "node:url";
 // agent-cli-release.json
 var agent_cli_release_default = {
   package_name: "@vtxmacro/cli",
-  package_version: "2026.9.20",
+  package_version: "2026.9.21",
   codex_package_name: "@openai/codex",
   codex_version: "0.153.3",
   copilot_sdk_package_name: "@github/copilot-sdk",

package/bin/vtx.js

@@ -69,7 +69,7 @@ var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
     agent_cli_release_default = {
       package_name: "@vtxmacro/cli",
-      package_version: "2026.9.20",
+      package_version: "2026.9.21",
       codex_package_name: "@openai/codex",
       codex_version: "0.153.3",
       copilot_sdk_package_name: "@github/copilot-sdk",
@@ -17958,13 +17958,27 @@ async function acquireInferenceHostProcessLock(path, dependencies = {}) {
     }
   };
 }
-var loadInferenceAgentDataRequestTimeoutMs, INFERENCE_CREDENTIAL_NAMESPACE, MAX_INFERENCE_PRIVATE_FILE_BYTES, WINDOWS_PRIVATE_ACL_BROKER_SCRIPT, WINDOWS_IDENTITY_COMMAND_TIMEOUT_MS, WINDOWS_PRIVATE_ACL_BROKER_STARTUP_TIMEOUT_MS, SMALL_IDENTITY_COMMAND_TIMEOUT_MS, windowsPowerShellEnvironment, windowsPrivateAclBrokerInvocation, WindowsPrivateAclBroker, defaultWindowsPrivateAclBroker, runWindowsPrivateAcl, windowsAclCache, windowsAclIdentity, aclCacheKey, secureWindowsPrivatePath, invalidateWindowsAclCache, rebindHardenedWindowsAclAfterRename, rebindHardenedWindowsDirectoryAfterOwnedMutation, isDefaultWindowsPrivatePath, secureExistingWindowsPath, linuxProcessIdentity, windowsProcessIdentityInvocation, windowsBootIdentityInvocation, windowsProcessIdentity, darwinProcessIdentity, runSmallIdentityCommand, cachedSystemBootIdentity, readInferenceSystemBootIdentity, defaultProcessIdentity, defaultCurrentProcessIdentity, processLockObservationCache, inferenceProcessIdentitiesMatch, DEFAULT_INFERENCE_HOST_INSTANCE, SAFE_INFERENCE_HOST_INSTANCE, requireNamedInstancePath, credentialStoreIdentity, inferenceHostCredentialContextPath, inferenceHostCredentialContextTransitionPath, credentialContextForConfig, WINDOWS_PRIVATE_FILE_REPLACE_ERROR_CODES;
+var loadInferenceReceiptDurabilityTimeoutMs, loadInferenceAgentDataRequestTimeoutMs, INFERENCE_CREDENTIAL_NAMESPACE, MAX_INFERENCE_PRIVATE_FILE_BYTES, WINDOWS_PRIVATE_ACL_BROKER_SCRIPT, WINDOWS_IDENTITY_COMMAND_TIMEOUT_MS, WINDOWS_PRIVATE_ACL_BROKER_STARTUP_TIMEOUT_MS, SMALL_IDENTITY_COMMAND_TIMEOUT_MS, windowsPowerShellEnvironment, windowsPrivateAclBrokerInvocation, WindowsPrivateAclBroker, defaultWindowsPrivateAclBroker, runWindowsPrivateAcl, windowsAclCache, windowsAclIdentity, aclCacheKey, secureWindowsPrivatePath, invalidateWindowsAclCache, rebindHardenedWindowsAclAfterRename, rebindHardenedWindowsDirectoryAfterOwnedMutation, isDefaultWindowsPrivatePath, secureExistingWindowsPath, linuxProcessIdentity, windowsProcessIdentityInvocation, windowsBootIdentityInvocation, windowsProcessIdentity, darwinProcessIdentity, runSmallIdentityCommand, cachedSystemBootIdentity, readInferenceSystemBootIdentity, defaultProcessIdentity, defaultCurrentProcessIdentity, processLockObservationCache, inferenceProcessIdentitiesMatch, DEFAULT_INFERENCE_HOST_INSTANCE, SAFE_INFERENCE_HOST_INSTANCE, requireNamedInstancePath, credentialStoreIdentity, inferenceHostCredentialContextPath, inferenceHostCredentialContextTransitionPath, credentialContextForConfig, WINDOWS_PRIVATE_FILE_REPLACE_ERROR_CODES;
 var init_config = __esm({
   "lib/inference-host/config.ts"() {
     "use strict";
     init_define_VTX_EXO_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_dist();
+    loadInferenceReceiptDurabilityTimeoutMs = async () => {
+      let configured;
+      if (true) {
+        configured = 5e3;
+      } else {
+        const config2 = parse4(await readFile(resolve(dirname(fileURLToPath(import.meta.url)), "../../../config.toml"), "utf8"));
+        const inference = config2.external_inference;
+        configured = Number(inference?.receipt_durability_timeout_seconds) * 1e3;
+      }
+      if (!Number.isSafeInteger(configured) || Number(configured) < 1) {
+        throw new Error("Inference receipt durability timeout is missing or invalid.");
+      }
+      return Number(configured);
+    };
     loadInferenceAgentDataRequestTimeoutMs = async () => {
       let configured;
       if (true) {
@@ -35774,6 +35788,11 @@ var init_runner = __esm({
           DEFAULT_ATTEMPT_HEARTBEAT_MS,
           "Attempt heartbeat interval"
         ),
+        receiptDurabilityTimeoutMs: finitePositiveOption(
+          options.receiptDurabilityTimeoutMs,
+          options.receiptDurabilityTimeoutMs,
+          "Receipt durability timeout"
+        ),
         drainTimeoutMs: finitePositiveOption(
           options.drainTimeoutMs,
           DEFAULT_DRAIN_TIMEOUT_MS,
@@ -36093,7 +36112,10 @@ var init_runner = __esm({
         this.options = options;
       }
       async run() {
-        const settings = validateRunnerOptions(this.options);
+        const settings = validateRunnerOptions({
+          ...this.options,
+          receiptDurabilityTimeoutMs: this.options.receiptDurabilityTimeoutMs ?? await loadInferenceReceiptDurabilityTimeoutMs()
+        });
         const now = this.dependencies.now ?? Date.now;
         const sleep4 = this.dependencies.sleep ?? defaultSleep;
         const lock2 = await this.dependencies.acquireProcessLock();
@@ -36965,6 +36987,7 @@ var init_runner = __esm({
               retryExact,
               signal: controller.signal,
               attemptHeartbeatMs: settings.attemptHeartbeatMs,
+              receiptDurabilityTimeoutMs: settings.receiptDurabilityTimeoutMs,
               sleep: sleep4,
               now,
               onProviderCooldown: ({ retryAtMs, reason, rateLimits }) => {
@@ -37032,9 +37055,9 @@ var init_runner = __esm({
                   active_attempts: active.size
                 });
               },
-              onProviderDispatchRecoveryRequired: () => {
+              onProviderDispatchRecoveryRequired: (reason = "provider_dispatch_watchdog_expired") => {
                 providerDispatchWatchdogDrainRequested = true;
-                requestDrain("provider_dispatch_watchdog_expired");
+                requestDrain(reason);
               },
               startRetryCount: nextStartRetryCount,
               onAttemptStartRetry: (observation) => {
@@ -37738,14 +37761,35 @@ var init_runner = __esm({
             attemptAbort.abort();
           }, Math.max(MIN_SLEEP_MS, deadlineAtMs - now()));
         };
-        const awaitPreProviderDurability = async (operation) => Promise.race([
-          operation,
-          providerDispatchWatchdogSignal.then(() => {
-            throw new InferenceHostRecoveryRequiredError(
-              "Provider dispatch stopped because its durable receipt missed the freshness deadline."
-            );
-          })
-        ]);
+        let receiptDurabilityUnhealthy = false;
+        const awaitPreProviderDurability = async (operation) => {
+          let timer;
+          try {
+            return await Promise.race([
+              operation,
+              new Promise((_resolve, reject) => {
+                timer = setTimeout(() => {
+                  receiptDurabilityUnhealthy = true;
+                  options.onProviderDispatchRecoveryRequired?.("receipt_durability_timeout");
+                  reject(new InferenceHostRecoveryRequiredError(
+                    "Provider dispatch stopped because durable receipt storage did not settle."
+                  ));
+                }, options.receiptDurabilityTimeoutMs);
+              })
+            ]);
+          } finally {
+            if (timer !== void 0) clearTimeout(timer);
+          }
+        };
+        const requireDispatchFreshness = () => {
+          if (providerDispatchNotAfterMs === void 0 || !providerDispatchWatchdogExpired && now() < providerDispatchNotAfterMs) return;
+          providerDispatchWatchdogExpired = true;
+          attemptAbort.abort();
+          throw new InferenceHostRunnerError(
+            "server_account_context_expired_before_provider_dispatch",
+            "The Server account context expired before provider dispatch."
+          );
+        };
         const persistAttempt = async (changes, clearPendingClaim = false) => {
           const nextAttemptReceipt = validateAttemptReceipt({
             ...attemptReceipt,
@@ -37865,12 +37909,21 @@ var init_runner = __esm({
             membership_disposition: membershipFailureDisposition(failure2),
             failed_at: isoAt(now())
           });
-          void persistAttempt({
+          const terminalDurability = persistAttempt({
             phase: "terminal_pending",
             dispatch_outcome: "not_dispatched",
             terminal_operation_id: failureId,
             terminal_request: failureRequest
-          }).catch(() => void 0);
+          });
+          if (receiptDurabilityUnhealthy) {
+            void terminalDurability.catch(() => void 0);
+          } else {
+            try {
+              await awaitPreProviderDurability(terminalDurability);
+            } catch (error48) {
+              if (!receiptDurabilityUnhealthy) throw error48;
+            }
+          }
           const evidenceDeadlineAtMs = Date.parse(jobInput.evidence_expires_at);
           const failureResult = await retryExact(() => mcp.callTool(
             "inference.job.fail",
@@ -37878,6 +37931,9 @@ var init_runner = __esm({
             { signal, deadlineAtMs: evidenceDeadlineAtMs }
           ), { signal, deadlineAtMs: evidenceDeadlineAtMs });
           assertTerminalResult(failureRequest, failureResult);
+          if (!receiptDurabilityUnhealthy) {
+            await awaitPreProviderDurability(removeAttempt());
+          }
           options.onAttemptOutcome?.({
             outcome: "failed",
             failure_category: failureRequest.failure_category,
@@ -38018,6 +38074,7 @@ var init_runner = __esm({
             }
           }
           if (attemptReceipt.phase !== "dispatched") {
+            requireDispatchFreshness();
             const providerDispatchable = inputValidationError === void 0 && outputContract !== null;
             reportPreProviderStage("receipt_persistence");
             await awaitPreProviderDurability(
@@ -38030,12 +38087,12 @@ var init_runner = __esm({
               ])
             );
           }
+          if (options.resumeReceipt?.phase !== "dispatched") requireDispatchFreshness();
           reportPreProviderStage("thread_setup");
         } catch (error48) {
           clearProviderDispatchWatchdog();
           signal.removeEventListener("abort", relayAbort);
           if (providerDispatchWatchdogExpired) {
-            options.onProviderDispatchRecoveryRequired?.();
             return terminalizeProviderDispatchWatchdog();
           }
           throw error48;
@@ -41458,6 +41515,7 @@ Durable service:
         protocolVersion: EXTERNAL_INFERENCE_CONTRACT_VERSION,
         adapterRuntimeVersion: INFERENCE_HOST_CLI_VERSION,
         hostRuntimeVersion: INFERENCE_HOST_CLI_VERSION,
+        receiptDurabilityTimeoutMs: await loadInferenceReceiptDurabilityTimeoutMs(),
         maxConcurrency: options.maxConcurrency,
         once: options.once,
         emitDiagnosticEvent: options.emitDiagnosticEvent,
@@ -41528,6 +41586,7 @@ Durable service:
         protocolVersion: EXTERNAL_INFERENCE_CONTRACT_VERSION,
         adapterRuntimeVersion: options.preflight.runtimeVersion,
         hostRuntimeVersion: INFERENCE_HOST_CLI_VERSION,
+        receiptDurabilityTimeoutMs: await loadInferenceReceiptDurabilityTimeoutMs(),
         maxConcurrency: options.maxConcurrency,
         once: options.once,
         emitDiagnosticEvent: options.emitDiagnosticEvent,
@@ -48034,6 +48093,9 @@ async function postClientRuntime(path, profileId, body, options) {
   if (idempotencyKey) {
     requestHeaders["X-Idempotency-Key"] = idempotencyKey;
   }
+  if (options?.reconcileOnly === true) {
+    requestHeaders["X-Runtime-Reconcile-Only"] = "true";
+  }
   let lastNetworkError = null;
   let missingRuntimeLeaseRecoveryAttempted = false;
   let replacementLeaseRetryUsed = false;
@@ -48799,7 +48861,7 @@ var init_api2 = __esm({
       return true;
     };
     isRuntimeIdempotencyInProgressError = (status, message) => status === 409 && (message.toLowerCase().includes("duplicate request already in progress") || message.toLowerCase().includes("duplicate request in-flight"));
-    isRetryableRuntimeConflictError = (status, error48) => status === 409 && error48.retryable === true && (error48.code === "profile_runtime_contract_busy" || error48.code === "runtime_decision_finalizing" || error48.code === "runtime_trade_sync_finalizing");
+    isRetryableRuntimeConflictError = (status, error48) => status === 409 && error48.retryable === true && (error48.code === "profile_runtime_contract_busy" || error48.code === "runtime_decision_finalizing" || error48.code === "runtime_trade_sync_finalizing" || error48.code === "runtime_decision_unconfirmed");
     resolveClientRuntimeRetryDelayMs = (attempt, retryAfterHeader) => {
       const retryAfterMs = parseRuntimeRetryAfterMs(retryAfterHeader);
       if (retryAfterMs != null) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vtxmacro/cli",
-  "version": "2026.9.20",
+  "version": "2026.9.21",
   "description": "VTX Macro CLI, MCP server, and durable external inference host.",
   "type": "module",
   "license": "UNLICENSED",