@vtxmacro/cli 2026.9.42 → 2026.9.44

package/bin/vtx-service-bootstrap.js

@@ -16,7 +16,7 @@ import { fileURLToPath } from "node:url";
 // agent-cli-release.json
 var agent_cli_release_default = {
   package_name: "@vtxmacro/cli",
-  package_version: "2026.9.42",
+  package_version: "2026.9.44",
   codex_package_name: "@openai/codex",
   codex_version: "0.153.3",
   copilot_sdk_package_name: "@github/copilot-sdk",

package/bin/vtx.js

@@ -77,7 +77,7 @@ var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
     agent_cli_release_default = {
       package_name: "@vtxmacro/cli",
-      package_version: "2026.9.42",
+      package_version: "2026.9.44",
       codex_package_name: "@openai/codex",
       codex_version: "0.153.3",
       copilot_sdk_package_name: "@github/copilot-sdk",
@@ -15532,6 +15532,7 @@ var init_external_inference_contract = __esm({
     );
     agentTurnReceiptSchema = external_exports.strictObject({
       terminal_status: external_exports.enum(["completed", "failed"]),
+      provider_http_status: external_exports.number().int().min(400).max(599).optional(),
       failure_code: safeCodeSchema.nullable(),
       grok_tool_validation: grokToolValidationDiagnosticSchema.optional(),
       grok_response_identity: grokResponseIdentityDiagnosticSchema.optional(),
@@ -15552,7 +15553,10 @@ var init_external_inference_contract = __esm({
         { message: "Agent decision operation IDs must be unique." }
       )
     }).refine(
-      (value) => value.grok_tool_validation === void 0 ? value.grok_response_identity !== void 0 || value.dispatch_outcome === void 0 : value.grok_response_identity === void 0 && value.terminal_status === "failed" && value.failure_code === `grok_tool_isolation_${value.grok_tool_validation.reason}` && value.dispatch_outcome === (value.grok_tool_validation.prior_dispatch ? "outcome_unknown" : "not_dispatched") && value.effective_model === null && value.effective_reasoning_effort === null && value.adapter_request_id === null && value.adapter_response_id === null && value.usage.availability === "unavailable",
+      (value) => value.provider_http_status === void 0 || value.terminal_status === "failed",
+      { message: "Provider HTTP status requires a failed Agent turn." }
+    ).refine(
+      (value) => value.grok_tool_validation === void 0 ? value.grok_response_identity !== void 0 || value.provider_http_status !== void 0 || value.dispatch_outcome === void 0 : value.grok_response_identity === void 0 && value.terminal_status === "failed" && value.failure_code === `grok_tool_isolation_${value.grok_tool_validation.reason}` && value.dispatch_outcome === (value.grok_tool_validation.prior_dispatch ? "outcome_unknown" : "not_dispatched") && value.effective_model === null && value.effective_reasoning_effort === null && value.adapter_request_id === null && value.adapter_response_id === null && value.usage.availability === "unavailable",
       { message: "Grok diagnostics must match the failed Agent turn and dispatch outcome." }
     ).refine(
       (value) => value.grok_response_identity === void 0 || value.terminal_status === "failed" && value.failure_code === "grok_provider_identity_mismatch" && value.dispatch_outcome === "outcome_unknown" && value.grok_tool_validation === void 0 && value.effective_model === null && value.effective_reasoning_effort === null && value.adapter_request_id === null && value.adapter_response_id === null && value.usage.availability === "unavailable",
@@ -16080,6 +16084,7 @@ var init_external_inference_contract = __esm({
       adapter_result_ready_at: timestampSchema.optional(),
       provider_dispatch_freshness_remaining_ms: nonNegativeSafeIntegerSchema.nullable().optional(),
       process_exit: codexProcessExitDiagnosticsSchema.nullable().optional(),
+      provider_http_status: external_exports.number().int().min(400).max(599).optional(),
       grok_tool_validation: grokToolValidationDiagnosticSchema.optional(),
       grok_response_identity: grokResponseIdentityDiagnosticSchema.optional(),
       membership_disposition: external_exports.enum([
@@ -17185,18 +17190,18 @@ function parseValue(ctx, integersAsBigInt, end) {
       throw new TomlError("leading zeroes are not allowed", err);
     }
     value = value.replace(/_/g, "");
-    let numeric = +value;
-    if (isNaN(numeric)) {
+    let numeric2 = +value;
+    if (isNaN(numeric2)) {
       throw new TomlError("invalid number", err);
     }
     if (isInt) {
-      if ((isInt = !Number.isSafeInteger(numeric)) && !integersAsBigInt) {
+      if ((isInt = !Number.isSafeInteger(numeric2)) && !integersAsBigInt) {
         throw new TomlError("integer value cannot be represented losslessly", err);
       }
       if (isInt || integersAsBigInt === true)
-        numeric = BigInt(value);
+        numeric2 = BigInt(value);
     }
-    return numeric;
+    return numeric2;
   }
   const date5 = new TomlDate(value);
   if (!date5.isValid())
@@ -21037,8 +21042,21 @@ var init_mcp_client = __esm({
       #initialized = false;
       #providerQuotaRecoverySupported = false;
       #runtimeRecoveryDiagnosticsSupported = false;
+      #providerHttpStatusTools = /* @__PURE__ */ new Set();
       #grokToolValidationTools = /* @__PURE__ */ new Set();
       #grokResponseIdentityTools = /* @__PURE__ */ new Set();
+      supportsProviderHttpStatusDiagnostics(tool) {
+        return this.#providerHttpStatusTools.has(tool);
+      }
+      async refreshProviderHttpStatusSupport(tool, options = {}) {
+        if (this.supportsProviderHttpStatusDiagnostics(tool)) return true;
+        try {
+          await this.initialize(options);
+        } catch {
+          return false;
+        }
+        return this.supportsProviderHttpStatusDiagnostics(tool);
+      }
       supportsGrokToolValidationDiagnostics(tool) {
         return this.#grokToolValidationTools.has(tool);
       }
@@ -21145,6 +21163,13 @@ var init_mcp_client = __esm({
           }
           return Array.isArray(node.anyOf) && node.anyOf.some((branch) => advertisesDiagnosticReceipt(branch, field, depth + 1));
         };
+        this.#providerHttpStatusTools.clear();
+        if (advertisesFields("inference.job.fail", ["provider_http_status"])) {
+          this.#providerHttpStatusTools.add("inference.job.fail");
+        }
+        if (advertisesDiagnosticReceipt(heartbeatSchema?.properties?.turn_receipt, "provider_http_status")) {
+          this.#providerHttpStatusTools.add("inference.agent.assignment.heartbeat");
+        }
         if (advertisesDiagnosticReceipt(heartbeatSchema?.properties?.turn_receipt, "grok_tool_validation")) {
           this.#grokToolValidationTools.add("inference.agent.assignment.heartbeat");
         }
@@ -30696,7 +30721,7 @@ function createDefaultInferenceHostRunnerDependencies(options) {
     envelopePublicKey: options.envelopePublicKey
   };
 }
-var import_ajv, terminalFailureRequiresManualRecovery, canReplayFencedAgentTerminal, RUNTIME_RECEIPT_SCHEMA_VERSION, ATTEMPT_RECEIPT_SCHEMA_VERSION, CLAIM_DISPATCH_BATCH_SIZE, DEFAULT_ADVERTISEMENT_TTL_MS, DEFAULT_ADVERTISEMENT_REFRESH_LEAD_MS, DEFAULT_HOST_HEARTBEAT_MS, DEFAULT_PROVIDER_RATE_LIMIT_REFRESH_MS, DEFAULT_ATTEMPT_HEARTBEAT_MS, DEFAULT_DRAIN_TIMEOUT_MS, DEFAULT_REMOTE_RETRY_LIMIT, MIN_SLEEP_MS, MIN_HOST_HEARTBEAT_GAP_DIAGNOSTIC_MS, HOST_HEARTBEAT_GAP_DIAGNOSTIC_FACTOR, DEFAULT_CODEX_ACCOUNT_COOLDOWN_MS, DEFAULT_AGENT_RATE_LIMIT_COOLDOWN_MS, DEFAULT_AGENT_QUOTA_COOLDOWN_MS, DEFAULT_AGENT_TRANSIENT_COOLDOWN_MS, MIN_CLAIM_START_WINDOW_MS, MAX_ATTEMPT_START_RETRY_DELAY_MS, UNBOUNDED_AVAILABLE_SLOTS, buildInferenceAdvertisedModels, summarizeInferenceHostRuntimeRecovery, FileInferenceHostRuntimeReceiptStore, InferenceHostRecoveryRequiredError, InferenceHostRunnerError, defaultSleep, abortError, settlesWithin, defaultRegisterSignalHandlers, safeInteger, exactObjectKeys, validIso, validateAttemptReceipt, validateRuntimeReceipt, sha256, stableOperationId, buildAttemptStartRequest, isoAt, providerWeeklyQuotaFromRateLimits, usableProviderQuotaSnapshot, finitePositiveOption, validateRunnerOptions, assertLocalCredentialIdentity, retryableRemoteError, remoteRetryAfterMs, controlPlaneFatal, defaultValidateOutput, objectRecord, positiveUtf8ByteLimit, assertCompilableOutputSchema, parseOutputContract, serverProviderDispatchNotAfterMs, membershipFailureDisposition, safeFailureCode, publicServerFailureCode, attemptStartRetryFallbackMs, exactJson2, runnerIdentityMismatch, assertAdvertisementResult, assertHostHeartbeatResult, assertClaimResult, assertStartResult, assertJobHeartbeatResult, assertTerminalResult, isDefinitiveCompletionEvidenceExpiry, classifyFailure, ambiguousHeartbeatTransport, reportedTokenUsage, reportedUsage, InferenceHostRunner, createInferenceAgentControlClient, INFERENCE_AGENT_WAKE_SCHEMA, parseInferenceAgentWake, InferenceAgentRuntime;
+var import_ajv, providerHttpStatus, terminalFailureRequiresManualRecovery, canReplayFencedAgentTerminal, RUNTIME_RECEIPT_SCHEMA_VERSION, ATTEMPT_RECEIPT_SCHEMA_VERSION, CLAIM_DISPATCH_BATCH_SIZE, DEFAULT_ADVERTISEMENT_TTL_MS, DEFAULT_ADVERTISEMENT_REFRESH_LEAD_MS, DEFAULT_HOST_HEARTBEAT_MS, DEFAULT_PROVIDER_RATE_LIMIT_REFRESH_MS, DEFAULT_ATTEMPT_HEARTBEAT_MS, DEFAULT_DRAIN_TIMEOUT_MS, DEFAULT_REMOTE_RETRY_LIMIT, MIN_SLEEP_MS, MIN_HOST_HEARTBEAT_GAP_DIAGNOSTIC_MS, HOST_HEARTBEAT_GAP_DIAGNOSTIC_FACTOR, DEFAULT_CODEX_ACCOUNT_COOLDOWN_MS, DEFAULT_AGENT_RATE_LIMIT_COOLDOWN_MS, DEFAULT_AGENT_QUOTA_COOLDOWN_MS, DEFAULT_AGENT_TRANSIENT_COOLDOWN_MS, MIN_CLAIM_START_WINDOW_MS, MAX_ATTEMPT_START_RETRY_DELAY_MS, UNBOUNDED_AVAILABLE_SLOTS, buildInferenceAdvertisedModels, summarizeInferenceHostRuntimeRecovery, FileInferenceHostRuntimeReceiptStore, InferenceHostRecoveryRequiredError, InferenceHostRunnerError, defaultSleep, abortError, settlesWithin, defaultRegisterSignalHandlers, safeInteger, exactObjectKeys, validIso, validateAttemptReceipt, validateRuntimeReceipt, sha256, stableOperationId, buildAttemptStartRequest, isoAt, providerWeeklyQuotaFromRateLimits, usableProviderQuotaSnapshot, finitePositiveOption, validateRunnerOptions, assertLocalCredentialIdentity, retryableRemoteError, remoteRetryAfterMs, controlPlaneFatal, defaultValidateOutput, objectRecord, positiveUtf8ByteLimit, assertCompilableOutputSchema, parseOutputContract, serverProviderDispatchNotAfterMs, membershipFailureDisposition, safeFailureCode, publicServerFailureCode, attemptStartRetryFallbackMs, exactJson2, runnerIdentityMismatch, assertAdvertisementResult, assertHostHeartbeatResult, assertClaimResult, assertStartResult, assertJobHeartbeatResult, assertTerminalResult, isDefinitiveCompletionEvidenceExpiry, classifyFailure, ambiguousHeartbeatTransport, reportedTokenUsage, reportedUsage, InferenceHostRunner, createInferenceAgentControlClient, INFERENCE_AGENT_WAKE_SCHEMA, parseInferenceAgentWake, InferenceAgentRuntime;
 var init_runner = __esm({
   "lib/inference-host/runner.ts"() {
     "use strict";
@@ -30713,8 +30738,13 @@ var init_runner = __esm({
     init_mcp_client();
     init_config();
     init_oauth();
+    providerHttpStatus = (error48) => {
+      if (!(error48 instanceof CodexAppServerError)) return null;
+      const status = error48.httpStatusCode;
+      return typeof status === "number" && Number.isInteger(status) && status >= 400 && status <= 599 ? status : null;
+    };
     terminalFailureRequiresManualRecovery = (error48) => (error48.terminalEvidence !== null || error48.grokToolValidation != null || error48.grokResponseIdentity != null) && !error48.retryable && error48.category !== "auth" && !["quota_exceeded", "codex_rate_limited", "provider_rate_limited"].includes(error48.code);
-    canReplayFencedAgentTerminal = (state, fence) => state?.schema_version === "vtx_inference_agent_runtime_v3" && state.adapter_id === fence.adapter_id && state.host_id === fence.host_id && state.assignment.assignment_id === fence.assignment_id && state.pending_turn?.terminal_receipt?.terminal_status === "failed" && state.pending_turn.terminal_receipt.failure_code === fence.failure_code && (fence.dispatch_outcome !== "outcome_unknown" || (state.pending_turn.terminal_receipt.grok_tool_validation?.prior_dispatch === true || state.pending_turn.terminal_receipt.grok_response_identity != null) && state.pending_turn.terminal_receipt.dispatch_outcome === "outcome_unknown");
+    canReplayFencedAgentTerminal = (state, fence) => state?.schema_version === "vtx_inference_agent_runtime_v3" && state.adapter_id === fence.adapter_id && state.host_id === fence.host_id && state.assignment.assignment_id === fence.assignment_id && state.pending_turn?.terminal_receipt?.terminal_status === "failed" && state.pending_turn.terminal_receipt.failure_code === fence.failure_code && (fence.dispatch_outcome !== "outcome_unknown" || (state.pending_turn.terminal_receipt.grok_tool_validation?.prior_dispatch === true || state.pending_turn.terminal_receipt.grok_response_identity != null || state.pending_turn.terminal_receipt.provider_http_status !== void 0) && state.pending_turn.terminal_receipt.dispatch_outcome === "outcome_unknown");
     RUNTIME_RECEIPT_SCHEMA_VERSION = "vtx_inference_host_runtime_v1";
     ATTEMPT_RECEIPT_SCHEMA_VERSION = "vtx_inference_attempt_receipt_v1";
     CLAIM_DISPATCH_BATCH_SIZE = 16;
@@ -33918,6 +33948,11 @@ var init_runner = __esm({
             signal,
             deadlineAtMs: Date.parse(jobInput.evidence_expires_at)
           }) === true);
+          const httpStatus = heartbeatFailure === void 0 ? providerHttpStatus(effectiveError) : null;
+          const sendHttpStatus = httpStatus !== null && (mcp.supportsProviderHttpStatusDiagnostics?.("inference.job.fail") === true || await mcp.refreshProviderHttpStatusSupport?.("inference.job.fail", {
+            signal,
+            deadlineAtMs: Date.parse(jobInput.evidence_expires_at)
+          }) === true);
           const failureRequest = jobFailRequestSchema.parse({
             schema_version: "external_inference_job_fail_v1",
             contract_version: EXTERNAL_INFERENCE_CONTRACT_VERSION,
@@ -33958,6 +33993,7 @@ var init_runner = __esm({
             ...adapterResultReadyAt === null ? {} : { adapter_result_ready_at: adapterResultReadyAt },
             provider_dispatch_freshness_remaining_ms: providerDispatchFreshnessRemainingMs,
             ...processExit ? { process_exit: processExit } : {},
+            ...sendHttpStatus ? { provider_http_status: httpStatus } : {},
             ...sendGrokDiagnostic ? { grok_tool_validation: grokDiagnostic } : {},
             ...sendIdentityDiagnostic ? { grok_response_identity: identityDiagnostic } : {},
             membership_disposition: membershipFailureDisposition({
@@ -34032,6 +34068,7 @@ var init_runner = __esm({
       }
     };
     createInferenceAgentControlClient = (mcp) => ({
+      supportsProviderHttpStatusDiagnostics: async (options = {}) => mcp.supportsProviderHttpStatusDiagnostics?.("inference.agent.assignment.heartbeat") === true || await mcp.refreshProviderHttpStatusSupport?.("inference.agent.assignment.heartbeat", options) === true,
       supportsGrokResponseIdentityDiagnostics: async (options = {}) => mcp.supportsGrokResponseIdentityDiagnostics?.("inference.agent.assignment.heartbeat") === true || await mcp.refreshGrokResponseIdentitySupport?.("inference.agent.assignment.heartbeat", options) === true,
       supportsGrokToolValidationDiagnostics: async (options = {}) => mcp.supportsGrokToolValidationDiagnostics?.("inference.agent.assignment.heartbeat") === true || await mcp.refreshGrokToolValidationSupport?.("inference.agent.assignment.heartbeat", options) === true,
       nextAssignment: async (request, options) => {
@@ -34277,7 +34314,7 @@ var init_runner = __esm({
           if (terminal.terminal_receipt.terminal_status === "failed") {
             state = { ...state, pending_turn: null, updated_at: nowIso() };
             await writeInferenceAgentRuntimeState(this.options.statePath, state);
-            if (terminal.terminal_receipt.dispatch_outcome === "outcome_unknown") {
+            if (terminal.terminal_receipt.dispatch_outcome === "outcome_unknown" || terminal.terminal_receipt.provider_http_status !== void 0 && failureFence?.retry_at === null) {
               throw new InferenceHostRunnerError(
                 "agent_terminal_failure_fenced",
                 "The diagnostic receipt was acknowledged; upstream outcome remains unknown and model redispatch is fenced."
@@ -34585,17 +34622,24 @@ var init_runner = __esm({
         } catch (error48) {
           const diagnostic = error48 instanceof CodexAppServerError && error48.grokToolValidation && error48.code === `grok_tool_isolation_${error48.grokToolValidation.reason}` && error48.dispatchOutcome === (error48.grokToolValidation.prior_dispatch ? "outcome_unknown" : "not_dispatched") && await this.options.controlClient.supportsGrokToolValidationDiagnostics?.({}) === true ? error48.grokToolValidation : null;
           const identityDiagnostic = error48 instanceof CodexAppServerError && error48.grokResponseIdentity && error48.code === "grok_provider_identity_mismatch" && error48.dispatchOutcome === "outcome_unknown" && await this.options.controlClient.supportsGrokResponseIdentityDiagnostics?.({}) === true ? error48.grokResponseIdentity : null;
+          const httpStatus = providerHttpStatus(error48);
+          const sendHttpStatus = httpStatus !== null && await this.options.controlClient.supportsProviderHttpStatusDiagnostics?.({}) === true;
           const hasDiagnostic = diagnostic != null || identityDiagnostic != null;
-          if (error48 instanceof CodexAppServerError && error48.dispatchOutcome === "not_dispatched" && error48.terminalEvidence === null && !hasDiagnostic) {
+          const hasFailureEvidence = hasDiagnostic || sendHttpStatus;
+          if (error48 instanceof CodexAppServerError && error48.dispatchOutcome === "not_dispatched" && error48.terminalEvidence === null && !hasFailureEvidence) {
             state = { ...state, pending_turn: null, updated_at: nowIso() };
             await writeInferenceAgentRuntimeState(this.options.statePath, state);
           }
-          if (state.pending_turn && !state.pending_turn.terminal_receipt && error48 instanceof CodexAppServerError && (hasDiagnostic || error48.terminalEvidence !== null || error48.dispatchOutcome === "confirmed_dispatched" && ["provider_rate_limited", "codex_rate_limited", "quota_exceeded"].includes(error48.code))) {
+          if (state.pending_turn && !state.pending_turn.terminal_receipt && error48 instanceof CodexAppServerError && (hasFailureEvidence || error48.terminalEvidence !== null || error48.dispatchOutcome === "confirmed_dispatched" && ["provider_rate_limited", "codex_rate_limited", "quota_exceeded"].includes(error48.code))) {
             state = { ...state, pending_turn: {
               ...state.pending_turn,
               terminal_receipt: {
                 terminal_status: "failed",
                 failure_code: error48.code,
+                ...sendHttpStatus ? {
+                  provider_http_status: httpStatus,
+                  ...error48.dispatchOutcome === "confirmed_dispatched" ? {} : { dispatch_outcome: error48.dispatchOutcome }
+                } : {},
                 turn_id: state.pending_turn.turn_id,
                 agent_run_id: state.thread?.threadId ?? state.pending_turn.turn_id,
                 requested_model: assignment.model_id,
@@ -34622,7 +34666,7 @@ var init_runner = __esm({
                 } : {}
               }
             }, updated_at: nowIso() };
-            if (terminalFailureRequiresManualRecovery(error48)) {
+            if (terminalFailureRequiresManualRecovery(error48) || sendHttpStatus && (error48.dispatchOutcome === "outcome_unknown" || error48.dispatchOutcome === "confirmed_dispatched" && error48.terminalEvidence === null && !["provider_rate_limited", "codex_rate_limited", "quota_exceeded"].includes(error48.code))) {
               await writeInferenceAgentFailureFence(this.options.statePath, {
                 schema_version: "vtx_inference_agent_failure_fence_v1",
                 adapter_id: this.options.adapterId,
@@ -37668,6 +37712,7 @@ var init_deepseek_transport_proxy = __esm({
         this.upstreamRequestStartedValue = false;
         this.providerResponseObservedValue = false;
         this.unansweredUpstreamRequestsValue = 0;
+        this.providerHttpStatusValue = null;
         this.latestReceiptValue = null;
       }
       get baseUrl() {
@@ -37677,6 +37722,9 @@ var init_deepseek_transport_proxy = __esm({
       get receipts() {
         return [...this.receiptsValue];
       }
+      get providerHttpStatus() {
+        return this.providerHttpStatusValue;
+      }
       get lastReceipt() {
         return this.latestReceiptValue;
       }
@@ -37693,6 +37741,7 @@ var init_deepseek_transport_proxy = __esm({
         if (this.server) return;
         this.server = createServer2(async (request, response) => {
           try {
+            this.providerHttpStatusValue = null;
             const prefix = `/${this.token}`;
             const requestUrl = request.url ?? "";
             if (request.method !== "POST" || requestUrl !== `${prefix}/chat/completions`) {
@@ -37737,6 +37786,7 @@ var init_deepseek_transport_proxy = __esm({
               );
               this.unansweredUpstreamRequestsValue -= 1;
               this.providerResponseObservedValue = true;
+              this.providerHttpStatusValue = upstream.status >= 400 && upstream.status <= 599 ? upstream.status : null;
               const headers = {};
               upstream.headers.forEach((value, name) => {
                 if (!["connection", "transfer-encoding", "content-length"].includes(name)) {
@@ -37975,7 +38025,7 @@ var init_deepseek_harness_adapter = __esm({
           code,
           retryable: transport && !quota,
           dispatchOutcome: options.dispatchOutcome,
-          httpStatusCode: failure2.status ?? null,
+          httpStatusCode: options.providerHttpStatus,
           retryAtMs: failure2.providerRetryAfterMs === void 0 ? null : Date.now() + failure2.providerRetryAfterMs,
           cause: options.error
         });
@@ -38191,7 +38241,8 @@ ${input.outputSchemaJson}`,
             error: error48,
             cancelled,
             deadline,
-            dispatchOutcome: proxyDispatchOutcome(proxy)
+            dispatchOutcome: proxyDispatchOutcome(proxy),
+            providerHttpStatus: proxy.providerHttpStatus
           });
           input.onTerminalDispatchOutcome?.(mapped.dispatchOutcome);
           throw mapped;
@@ -38475,7 +38526,8 @@ ${JSON.stringify(input.outputSchema)}`,
             error: error48,
             cancelled: input.signal?.aborted === true,
             deadline: input.signal?.aborted !== true && boundary.signal.aborted,
-            dispatchOutcome: proxyDispatchOutcome(proxy)
+            dispatchOutcome: proxyDispatchOutcome(proxy),
+            providerHttpStatus: proxy.providerHttpStatus
           });
         } finally {
           removeAgentAbortListener();
@@ -38554,6 +38606,7 @@ var init_pi_transport = __esm({
         this.responded = false;
         this.terminalFailure = null;
         this.rejectionStatus = null;
+        this.providerHttpStatus = null;
         this.requests = [];
         this.fetch = async (url2, init2) => {
           const target = new URL(url2 instanceof Request ? url2.url : String(url2));
@@ -38563,8 +38616,10 @@ var init_pi_transport = __esm({
           this.dispatched = true;
           const request = { terminal: false };
           this.requests.push(request);
+          this.providerHttpStatus = null;
           const response = await this.options.fetch(url2, { ...init2, redirect: "error" });
           this.responded = true;
+          this.providerHttpStatus = response.status >= 400 && response.status <= 599 ? response.status : null;
           if (response.status === 401 || response.status === 429) {
             request.terminal = true;
             this.rejectionStatus = response.status;
@@ -39165,7 +39220,7 @@ var init_pi_adapter = __esm({
             dispatchOutcome: outcome,
             usage,
             terminalEvidence,
-            httpStatusCode: transport?.rejectionStatus ?? null
+            httpStatusCode: transport?.providerHttpStatus ?? null
           });
         } finally {
           if (timer) clearTimeout(timer);
@@ -41348,7 +41403,6 @@ var init_exo_adapter = __esm({
             retryable: false,
             dispatchOutcome: outcome,
             usage: receiptUsage(evidence?.usage),
-            httpStatusCode: ["quota_exceeded", "provider_rate_limited"].includes(code) ? 429 : null,
             retryAtMs: completed && Number.isSafeInteger(evidence?.retryAtMs) && Number(evidence?.retryAtMs) > Date.now() ? Number(evidence?.retryAtMs) : null,
             terminalEvidence: completed ? {
               effectiveModel: identityQualified ? `${provider}/${evidence.providerModel}` : null,
@@ -47620,13 +47674,27 @@ async function runAndReportLocalWorkCycle(options, state, leaseToken, context) {
     ...buildRuntimePayload(state),
     last_run_at: lastRunAt
   };
+  let decisionResponse = null;
   if (result2.decision) {
-    await options.client.reportRuntimeDecision(options.profileId, {
+    decisionResponse = await options.client.reportRuntimeDecision(options.profileId, {
       ...basePayload,
       ...result2.decision
     }, leaseToken);
   }
-  const deferredTradeSync = result2.afterDecision ? await result2.afterDecision() : null;
+  let deferredTradeSync = null;
+  if (result2.afterDecision) {
+    const runtime = objectOrNull2(objectOrNull2(decisionResponse)?.runtime);
+    const decision = runtime?.last_decision;
+    const units = runtime?.last_units;
+    const requestedUnits = Number(result2.decision?.units);
+    if (!result2.decision || !["BUY", "SELL", "HOLD"].includes(String(decision)) || decision !== result2.decision.decision || typeof units !== "number" || !Number.isSafeInteger(units) || units < 0 || !Number.isSafeInteger(requestedUnits) || units > requestedUnits || (decision === "HOLD" ? units !== 0 : units <= 0)) {
+      throw new Error("Runtime decision acceptance is unavailable or inconsistent; execution skipped.");
+    }
+    deferredTradeSync = await result2.afterDecision({
+      decision,
+      units
+    });
+  }
   const tradeSync = deferredTradeSync ? { ...result2.tradeSync ?? {}, ...deferredTradeSync } : result2.tradeSync;
   if (tradeSync) {
     await options.client.reportRuntimeTradeSync(options.profileId, {
@@ -47979,17 +48047,17 @@ var init_hyperliquid_account_contract = __esm({
     init_define_VTX_PI_MODEL_POLICY();
     init_hyperliquid_account_mode_contract();
     toNumber = (value, fallback = 0) => {
-      const numeric = Number(value);
-      return Number.isFinite(numeric) ? numeric : fallback;
+      const numeric2 = Number(value);
+      return Number.isFinite(numeric2) ? numeric2 : fallback;
     };
     firstNumber = (values, fallback = 0) => {
       for (const value of values) {
         if (value == null || typeof value === "string" && value.trim() === "") {
           continue;
         }
-        const numeric = Number(value);
-        if (Number.isFinite(numeric)) {
-          return numeric;
+        const numeric2 = Number(value);
+        if (Number.isFinite(numeric2)) {
+          return numeric2;
         }
       }
       return fallback;
@@ -48185,14 +48253,14 @@ var init_server_prompt_rescue_account_contract = __esm({
     init_hyperliquid_account_mode_contract();
     STABLE_SYMBOLS = /* @__PURE__ */ new Set(["USDC", "USD", "USDT"]);
     toNumber2 = (value, fallback = 0) => {
-      const numeric = Number(value);
-      return Number.isFinite(numeric) ? numeric : fallback;
+      const numeric2 = Number(value);
+      return Number.isFinite(numeric2) ? numeric2 : fallback;
     };
     firstNumber2 = (values, fallback = 0) => {
       for (const value of values) {
         if (value == null || value === "") continue;
-        const numeric = Number(value);
-        if (Number.isFinite(numeric)) return numeric;
+        const numeric2 = Number(value);
+        if (Number.isFinite(numeric2)) return numeric2;
       }
       return fallback;
     };
@@ -48400,6 +48468,52 @@ var init_server_prompt_rescue_account_contract = __esm({
   }
 });
 
+// lib/runtime/hyperliquid-fee-contract.ts
+var numeric, effectiveHyperliquidTakerRates;
+var init_hyperliquid_fee_contract = __esm({
+  "lib/runtime/hyperliquid-fee-contract.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_hyperliquid_market_symbol();
+    numeric = (value) => {
+      if (typeof value !== "number" && typeof value !== "string" || typeof value === "string" && !value.trim()) return null;
+      const parsed = Number(value);
+      return Number.isFinite(parsed) ? parsed : null;
+    };
+    effectiveHyperliquidTakerRates = (symbols, userFees, metaByDex, alignedByToken = {}) => {
+      const base = numeric(userFees.userCrossRate);
+      const discount = numeric(userFees.activeReferralDiscount);
+      return Object.fromEntries([...new Set(symbols.map(normalizeHyperliquidMarketSymbol).filter(Boolean))].sort().map((symbol2) => {
+        const unavailable = [symbol2, null];
+        if (base == null || base < 0 || base >= 1 || discount == null || discount < 0 || discount > 1) return unavailable;
+        const dex = getHyperliquidMarketDex(symbol2);
+        const meta3 = metaByDex[dex];
+        if (!meta3 || !Array.isArray(meta3.universe)) return unavailable;
+        const matches = meta3.universe.filter((asset2) => {
+          return asset2?.name === symbol2;
+        });
+        if (matches.length !== 1) return unavailable;
+        const collateralToken = meta3.collateralToken;
+        if (typeof collateralToken !== "number" || !Number.isInteger(collateralToken) || collateralToken < 0) return unavailable;
+        const aligned = alignedByToken[String(collateralToken)] ?? (collateralToken === 0 ? false : void 0);
+        if (typeof aligned !== "boolean") return unavailable;
+        const asset = matches[0];
+        const scale = dex ? numeric(asset.deployerFeeScale) : 0;
+        const growthMode = dex ? asset.growthMode : "disabled";
+        if (scale == null || scale < 0 || scale > 3 || !["enabled", "disabled", "blocked"].includes(growthMode)) return unavailable;
+        if (growthMode === "enabled" && scale > 1) return unavailable;
+        const multiplier = scale < 1 ? 1 + scale : 2 * scale;
+        const deployerShare = scale < 1 ? scale / (1 + scale) : 0.5;
+        const alignmentMultiplier = aligned ? (1 - deployerShare) * 0.8 + deployerShare : 1;
+        const rate = base * (1 - discount) * multiplier * (growthMode === "enabled" ? 0.1 : 1) * alignmentMultiplier;
+        return [symbol2, Number.isFinite(rate) && rate >= 0 && rate < 1 ? rate : null];
+      }));
+    };
+  }
+});
+
 // lib/runtime/abort.ts
 var ABORT_MESSAGE_TOKENS, readAbortLikeMessage, isAbortLikeError;
 var init_abort = __esm({
@@ -48983,6 +49097,7 @@ var init_hyperliquid_account_state_adapter = __esm({
     init_hyperliquid_active_asset_contract();
     init_hyperliquid_account_mode_contract();
     init_server_prompt_rescue_account_contract();
+    init_hyperliquid_fee_contract();
     init_hyperliquid_market_symbol();
     init_network_debug();
     unsupportedUserActiveAssetCache = /* @__PURE__ */ new Set();
@@ -49043,24 +49158,24 @@ var init_hyperliquid_account_state_adapter = __esm({
       }
     };
     toPositiveFinite = (value, fallback = 0) => {
-      const numeric = Number(value);
-      if (!Number.isFinite(numeric) || numeric <= 0) {
+      const numeric2 = Number(value);
+      if (!Number.isFinite(numeric2) || numeric2 <= 0) {
         return fallback;
       }
-      return numeric;
+      return numeric2;
     };
     toFinite = (value, fallback = 0) => {
-      const numeric = Number(value);
-      return Number.isFinite(numeric) ? numeric : fallback;
+      const numeric2 = Number(value);
+      return Number.isFinite(numeric2) ? numeric2 : fallback;
     };
     firstFiniteNumber = (values, fallback = 0) => {
       for (const value of values) {
         if (value == null || typeof value === "string" && value.trim() === "") {
           continue;
         }
-        const numeric = Number(value);
-        if (Number.isFinite(numeric)) {
-          return numeric;
+        const numeric2 = Number(value);
+        if (Number.isFinite(numeric2)) {
+          return numeric2;
         }
       }
       return fallback;
@@ -49098,7 +49213,7 @@ var init_hyperliquid_account_state_adapter = __esm({
     buildUserFillsStorageKey = (cacheKey) => {
       return `${USER_FILLS_CACHE_STORAGE_PREFIX}${cacheKey}`;
     };
-    buildAccountStateCacheKey = (apiUrl, walletAddress, symbol2, aggregatePerpDexs, scopeAccountSummaryToSelectedDex, dexNames, includeEffectiveTakerRate, includeExactAccountMode, includeActiveAssetData) => {
+    buildAccountStateCacheKey = (apiUrl, walletAddress, symbol2, aggregatePerpDexs, scopeAccountSummaryToSelectedDex, dexNames, includeEffectiveTakerRate, includeExactAccountMode, includeActiveAssetData, feeSymbols) => {
       return [
         apiUrl.replace(/\/$/, "").toLowerCase(),
         walletAddress.trim().toLowerCase(),
@@ -49108,7 +49223,9 @@ var init_hyperliquid_account_state_adapter = __esm({
         includeEffectiveTakerRate ? "with-effective-taker-rate" : "without-effective-taker-rate",
         includeExactAccountMode ? "with-exact-account-mode" : "without-exact-account-mode",
         includeActiveAssetData ? "with-active-asset" : "without-active-asset",
-        ...dexNames.map(normalizePerpDexName).sort()
+        ...dexNames.map(normalizePerpDexName).sort(),
+        "fee-symbols",
+        ...feeSymbols
       ].join("::");
     };
     buildAccountStateStorageKey = (cacheKey) => {
@@ -49202,11 +49319,11 @@ var init_hyperliquid_account_state_adapter = __esm({
       writeInfoRateLimitCooldown(apiUrl, requestType, staleIf429MaxAgeMs, nowMs);
     };
     requireNonNegativeConfigSeconds = (value, path) => {
-      const numeric = Number(value);
-      if (!Number.isFinite(numeric) || numeric < 0) {
+      const numeric2 = Number(value);
+      if (!Number.isFinite(numeric2) || numeric2 < 0) {
         throw new Error(`Missing required client runtime config: ${path}`);
       }
-      return numeric;
+      return numeric2;
     };
     requireAccountStateCacheConfig = (config2) => {
       const readCacheConfig = config2.client_runtime_hyperliquid_read_cache;
@@ -49319,6 +49436,7 @@ var init_hyperliquid_account_state_adapter = __esm({
       availableToTrade: { ...result2.availableToTrade },
       positions: result2.positions.map((position) => ({ ...position })),
       ...result2.takerRate == null ? {} : { takerRate: result2.takerRate },
+      ...result2.effectiveTakerRates == null ? {} : { effectiveTakerRates: { ...result2.effectiveTakerRates } },
       ...result2.promptRescueEvidence == null ? {} : { promptRescueEvidence: { ...result2.promptRescueEvidence } }
     });
     withAccountStateEvidence = (result2, source, fetchedAtMs, freshnessLimitMs) => {
@@ -49363,6 +49481,7 @@ var init_hyperliquid_account_state_adapter = __esm({
             availableToTrade: { ...result2.availableToTrade || {} },
             positions: Array.isArray(result2.positions) ? result2.positions.filter((position) => position !== null && typeof position === "object" && !Array.isArray(position)).map((position) => ({ ...position })) : [],
             ...result2.takerRate == null ? {} : { takerRate: Number(result2.takerRate) },
+            ...result2.effectiveTakerRates == null ? {} : { effectiveTakerRates: { ...result2.effectiveTakerRates } },
             ...result2.promptRescueEvidence == null ? {} : { promptRescueEvidence: { ...result2.promptRescueEvidence } }
           }
         };
@@ -49821,7 +49940,8 @@ var init_hyperliquid_account_state_adapter = __esm({
         dexNames,
         includeEffectiveTakerRate,
         includeExactAccountMode,
-        includeActiveAssetData
+        includeActiveAssetData,
+        [...new Set((input.feeSymbols ?? [symbol2]).map(normalizeHyperliquidMarketSymbol).filter(Boolean))].sort()
       );
       const now = Date.now();
       const cached2 = readBrowserAccountStateCache(cacheKey);
@@ -49974,7 +50094,10 @@ var init_hyperliquid_account_state_adapter = __esm({
           apiUrl,
           { type: "userFees", user: walletAddress },
           input.signal
-        ),
+        ).catch((error48) => {
+          if (input.signal?.aborted) throw error48;
+          return null;
+        }),
         capturedAt: (/* @__PURE__ */ new Date()).toISOString()
       }))() : Promise.resolve(null);
       const exactAccountModePromise = input.includeExactAccountMode === true ? (async () => {
@@ -50019,18 +50142,30 @@ var init_hyperliquid_account_state_adapter = __esm({
       }
       let takerRate;
       if (input.includeEffectiveTakerRate === true) {
-        if (!userFeesResponse || typeof userFeesResponse !== "object" || Array.isArray(userFeesResponse)) {
-          throw new Error("Malformed Hyperliquid userFees response for client runtime prompt context.");
-        }
-        const rawUserCrossRate = userFeesResponse.userCrossRate;
-        if (rawUserCrossRate == null || typeof rawUserCrossRate === "string" && rawUserCrossRate.trim() === "") {
-          throw new Error("Hyperliquid userFees response is missing userCrossRate for client runtime prompt context.");
-        }
-        const parsedUserCrossRate = Number(rawUserCrossRate);
-        if (!Number.isFinite(parsedUserCrossRate) || parsedUserCrossRate < 0 || parsedUserCrossRate >= 1) {
-          throw new Error("Hyperliquid userFees response has an invalid userCrossRate for client runtime prompt context.");
-        }
-        takerRate = parsedUserCrossRate;
+        const raw = userFeesResponse?.userCrossRate;
+        if ((typeof raw === "number" || typeof raw === "string" && raw.trim() !== "") && Number.isFinite(Number(raw)) && Number(raw) >= 0 && Number(raw) < 1) takerRate = Number(raw);
+      }
+      let effectiveTakerRates;
+      if (input.includeEffectiveTakerRate === true) {
+        const feeSymbols = [...new Set([
+          ...input.feeSymbols ?? [symbol2],
+          ...parseInfoPositions(perpsResponse).filter((position) => Number(position.size) !== 0).map((position) => position.symbol)
+        ].map(normalizeHyperliquidMarketSymbol).filter(Boolean))].sort();
+        const feeDexes = [...new Set(feeSymbols.map(getHyperliquidMarketDex))];
+        const metadata = await Promise.all(feeDexes.map(async (dex) => {
+          try {
+            const payload = await fetchHyperliquidInfoPayload(
+              apiUrl,
+              { type: "meta", ...dex ? { dex } : {} },
+              input.signal
+            );
+            return [dex, payload];
+          } catch (error48) {
+            if (input.signal?.aborted) throw error48;
+            return [dex, null];
+          }
+        }));
+        effectiveTakerRates = effectiveHyperliquidTakerRates(feeSymbols, userFeesResponse ?? {}, Object.fromEntries(metadata));
       }
       const accountStateConfig = input.config.client_runtime_hyperliquid_account_state;
       const summaryPerpsResponse = exactAccountMode ? { ...accountSummaryPerpsResponse, accountMode: exactAccountMode.accountMode } : accountSummaryPerpsResponse;
@@ -50119,6 +50254,7 @@ var init_hyperliquid_account_state_adapter = __esm({
         availableToTrade,
         positions: parseInfoPositions(perpsResponse),
         ...takerRate == null ? {} : { takerRate },
+        ...effectiveTakerRates == null ? {} : { effectiveTakerRates },
         ...exactAccountMode == null || userFeesResult == null ? {} : {
           promptRescueEvidence: {
             capturedAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -50435,11 +50571,11 @@ function normalizeNonNegativeInt(value) {
   if (value == null) {
     return 0;
   }
-  const numeric = Number(value);
-  if (!Number.isInteger(numeric) || numeric < 0) {
+  const numeric2 = Number(value);
+  if (!Number.isInteger(numeric2) || numeric2 < 0) {
     return 0;
   }
-  return numeric;
+  return numeric2;
 }
 function normalizeSecretVersion(value) {
   if (typeof value !== "string") {
@@ -50469,11 +50605,11 @@ function normalizeClientRuntimeSecretRetryAfterSeconds(value) {
   if (value == null) {
     return 0;
   }
-  const numeric = Number(value);
-  if (!Number.isFinite(numeric)) {
+  const numeric2 = Number(value);
+  if (!Number.isFinite(numeric2)) {
     return 0;
   }
-  const normalized = Math.trunc(numeric);
+  const normalized = Math.trunc(numeric2);
   return normalized >= 0 ? normalized : 0;
 }
 function projectClientRuntimeSecretRateLimit(operation, retryAfterSeconds) {
@@ -83124,11 +83260,11 @@ var init_hyperliquid_client = __esm({
     };
     validateHyperliquidPerpPriceWire = (price, sizeDecimals) => {
       const normalized = normalizeDecimalString(price);
-      const numeric = Number(normalized);
-      if (!Number.isFinite(numeric) || numeric <= 0) {
+      const numeric2 = Number(normalized);
+      if (!Number.isFinite(numeric2) || numeric2 <= 0) {
         return { valid: false, reason: "price must be positive" };
       }
-      if (!Number.isInteger(numeric) && countSignificantDigits(normalized) > 5) {
+      if (!Number.isInteger(numeric2) && countSignificantDigits(normalized) > 5) {
         return { valid: false, reason: "price exceeds 5 significant figures" };
       }
       const maxDecimals = Math.max(0, 6 - sizeDecimals);
@@ -83139,8 +83275,8 @@ var init_hyperliquid_client = __esm({
     };
     validateHyperliquidSizeWire = (size, sizeDecimals) => {
       const normalized = normalizeDecimalString(size);
-      const numeric = Number(normalized);
-      if (!Number.isFinite(numeric) || numeric <= 0) {
+      const numeric2 = Number(normalized);
+      if (!Number.isFinite(numeric2) || numeric2 <= 0) {
         return { valid: false, reason: "size must be positive" };
       }
       if (countDecimalPlaces(normalized) > sizeDecimals) {
@@ -84464,8 +84600,8 @@ var init_hyperliquid_client = __esm({
             return null;
           }
           const raw = value.px;
-          const numeric = Number(raw);
-          return Number.isFinite(numeric) && numeric > 0 ? String(raw) : null;
+          const numeric2 = Number(raw);
+          return Number.isFinite(numeric2) && numeric2 > 0 ? String(raw) : null;
         };
         const bid = levelPrice(bids[0]);
         const ask = levelPrice(asks[0]);
@@ -84967,11 +85103,11 @@ function normalizeProviderKeyCount(rawValue, fallback) {
   if (rawValue == null) {
     return fallback;
   }
-  const numeric = Number(rawValue);
-  if (!Number.isInteger(numeric) || numeric < 0) {
+  const numeric2 = Number(rawValue);
+  if (!Number.isInteger(numeric2) || numeric2 < 0) {
     return fallback;
   }
-  return numeric;
+  return numeric2;
 }
 function projectClientRuntimeSecretMetadata(serverHasHyperliquidSigningKey, serverProviderKeys, serverProviderKeyCount) {
   const normalizedProviderKeys = normalizeProviderKeys(serverProviderKeys);
@@ -91386,6 +91522,167 @@ var init_runtime_execution = __esm({
   }
 });
 
+// lib/runtime/decision-contract.ts
+var VISIBLE_REASONING_KEYS, VISIBLE_REASONING_KEY_SET, VISIBLE_REASONING_ALIAS_KEY_SET, normalizeDecisionUnits, normalizeDecisionValue;
+var init_decision_contract = __esm({
+  "lib/runtime/decision-contract.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    VISIBLE_REASONING_KEYS = [
+      "reasoning",
+      "final_reasoning",
+      "final_answer",
+      "answer",
+      "output_text",
+      "text",
+      "content"
+    ];
+    VISIBLE_REASONING_KEY_SET = new Set(VISIBLE_REASONING_KEYS);
+    VISIBLE_REASONING_ALIAS_KEY_SET = new Set([
+      ...VISIBLE_REASONING_KEYS,
+      "reason"
+    ].map((key) => key.replace(/[^a-z0-9]+/gi, "").toLowerCase()));
+    normalizeDecisionUnits = (rawUnits, decision) => {
+      const parsedUnits = Number(rawUnits);
+      if (Number.isFinite(parsedUnits) && parsedUnits >= 0) {
+        return Math.trunc(parsedUnits);
+      }
+      return 0;
+    };
+    normalizeDecisionValue = (rawDecision) => {
+      const decisionValue = String(rawDecision || "").trim().toUpperCase();
+      return decisionValue === "BUY" || decisionValue === "SELL" ? decisionValue : "HOLD";
+    };
+  }
+});
+
+// lib/runtime/constraint-contract.ts
+var normalizeOptionalInt, evaluateRuntimeDecisionAcceptance;
+var init_constraint_contract = __esm({
+  "lib/runtime/constraint-contract.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_execution_guard_contract();
+    init_decision_contract();
+    normalizeOptionalInt = (value) => {
+      if (value === null || value === void 0) {
+        return null;
+      }
+      const parsed = Number.parseInt(String(value), 10);
+      return Number.isFinite(parsed) ? parsed : null;
+    };
+    evaluateRuntimeDecisionAcceptance = (input) => {
+      const decision = normalizeDecisionValue(input.decision);
+      const units = normalizeDecisionUnits(input.units, decision);
+      if (decision === "HOLD") {
+        return {
+          accepted: true,
+          decision,
+          normalized_units: 0,
+          reason_code: null
+        };
+      }
+      if (input.constraints.runtime_disabled) {
+        return {
+          accepted: false,
+          decision,
+          normalized_units: 0,
+          reason_code: "runtime_disabled"
+        };
+      }
+      if (input.constraints.kill_switch_active) {
+        return {
+          accepted: false,
+          decision,
+          normalized_units: 0,
+          reason_code: "kill_switch_active"
+        };
+      }
+      if (!input.constraints.model_allowed) {
+        return {
+          accepted: false,
+          decision,
+          normalized_units: 0,
+          reason_code: "model_ineligible"
+        };
+      }
+      if (!input.constraints.provider_allowed) {
+        return {
+          accepted: false,
+          decision,
+          normalized_units: 0,
+          reason_code: "provider_ineligible"
+        };
+      }
+      if (units <= 0) {
+        return {
+          accepted: false,
+          decision,
+          normalized_units: 0,
+          reason_code: "invalid_units"
+        };
+      }
+      const maxPerPrompt = Math.max(Math.trunc(Number(input.constraints.max_trades_per_prompt) || 0), 0);
+      if (maxPerPrompt === 0) {
+        return {
+          accepted: false,
+          decision,
+          normalized_units: 0,
+          reason_code: "max_per_prompt_zero"
+        };
+      }
+      const remainingGlobal = normalizeOptionalInt(input.constraints.remaining_global_units);
+      const remainingExchange = normalizeOptionalInt(input.constraints.remaining_exchange_units);
+      const remainingAsset = normalizeOptionalInt(input.constraints.remaining_asset_units);
+      const currentSymbolSignedUnits = normalizeOptionalInt(input.constraints.current_symbol_signed_units) ?? 0;
+      let cappedUnits = Math.min(units, maxPerPrompt);
+      const exposureIncrease = (candidateUnits) => {
+        const classified = classifyExecutionIntent(decision, candidateUnits, currentSymbolSignedUnits);
+        return Math.max(
+          0,
+          Math.abs(classified.targetSignedUnits) - Math.abs(currentSymbolSignedUnits)
+        );
+      };
+      const fitsCapacity = (candidateUnits) => {
+        const increase = exposureIncrease(candidateUnits);
+        if (remainingGlobal !== null && increase > Math.max(remainingGlobal, 0)) {
+          return false;
+        }
+        if (remainingExchange !== null && increase > Math.max(remainingExchange, 0)) {
+          return false;
+        }
+        if (remainingAsset !== null && increase > Math.max(remainingAsset, 0)) {
+          return false;
+        }
+        return true;
+      };
+      while (cappedUnits > 0 && !fitsCapacity(cappedUnits)) {
+        cappedUnits -= 1;
+      }
+      if (cappedUnits <= 0) {
+        const requestedExposureIncrease = exposureIncrease(Math.min(units, maxPerPrompt));
+        const reasonCode = requestedExposureIncrease > 0 && remainingGlobal !== null && remainingGlobal <= 0 ? "global_capacity_reached" : requestedExposureIncrease > 0 && remainingExchange !== null && remainingExchange <= 0 ? "exchange_capacity_reached" : requestedExposureIncrease > 0 && remainingAsset !== null && remainingAsset <= 0 ? "asset_capacity_reached" : "capacity_reached";
+        return {
+          accepted: false,
+          decision,
+          normalized_units: 0,
+          reason_code: reasonCode
+        };
+      }
+      return {
+        accepted: true,
+        decision,
+        normalized_units: cappedUnits,
+        reason_code: cappedUnits < units ? "units_capped" : null
+      };
+    };
+  }
+});
+
 // lib/runtime/provider-observability.ts
 var record4, identifier, count3, normalizeProviderDiagnostics;
 var init_provider_observability = __esm({
@@ -91501,9 +91798,9 @@ var init_usage_contract = __esm({
     isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
     coerceOptionalRuntimeUsageCount = (value) => {
       if (value === null || value === void 0 || typeof value === "boolean") return null;
-      const numeric = Number(value);
-      if (!Number.isFinite(numeric) || numeric < 0 || numeric > MAX_RUNTIME_USAGE_COUNT) return null;
-      return Math.round(numeric);
+      const numeric2 = Number(value);
+      if (!Number.isFinite(numeric2) || numeric2 < 0 || numeric2 > MAX_RUNTIME_USAGE_COUNT) return null;
+      return Math.round(numeric2);
     };
     readOptionalRuntimeUsageCount = (source, keys) => {
       for (const key of keys) {
@@ -92566,6 +92863,46 @@ function createHeadlessLocalWorker(options) {
         message: `Tradability ${providerDecision.tradability ?? "missing"} is below the ${classifiedIntent === "open" ? "Open" : "Add"} minimum of ${applicableMinimum}. No order was placed.`
       }
     } : null;
+    let executionDecision = { decision: providerDecision.decision, units: providerDecision.units };
+    if (localHyperliquidContext && providerDecision.decision !== "HOLD") {
+      const constraints = objectOrNull3(metadata.constraint_contract) ?? {};
+      const limit = (key) => {
+        const raw = key === "max_trades_per_exchange" && !Object.hasOwn(promptKnobs, key) ? promptKnobs.max_trades_global : promptKnobs[key];
+        if (raw == null) throw new Error(`Missing headless runtime ${key}.`);
+        const value = requireFiniteNumber(raw, key);
+        if (!Number.isSafeInteger(value) || value < 0) throw new Error(`Invalid headless runtime ${key}.`);
+        return value;
+      };
+      const unitSize = localHyperliquidContext.executionContext.unitSizeUsdc;
+      const venue = getHyperliquidMarketDex(symbol2);
+      let globalUsage = 0;
+      let exchangeUsage = 0;
+      let currentSignedUnits = 0;
+      for (const position of localHyperliquidContext.accountState.positions) {
+        if (Number(position.size) === 0) continue;
+        const entryPrice = requirePositiveNumber2(position.entry_price, "position entry price");
+        const signedUnits = signedUnitsFromPosition(Number(position.size), entryPrice, unitSize);
+        globalUsage += Math.abs(signedUnits);
+        if (getHyperliquidMarketDex(position.symbol) === venue) exchangeUsage += Math.abs(signedUnits);
+        if (normalizeRuntimeSymbol(position.symbol) === normalizeRuntimeSymbol(symbol2)) currentSignedUnits = signedUnits;
+      }
+      const accepted = evaluateRuntimeDecisionAcceptance({
+        ...executionDecision,
+        constraints: {
+          runtime_disabled: constraints.runtime_disabled === true,
+          kill_switch_active: constraints.kill_switch_active === true,
+          max_trades_per_prompt: limit("max_trades_per_prompt"),
+          remaining_global_units: limit("max_trades_global") - globalUsage,
+          remaining_exchange_units: limit("max_trades_per_exchange") - exchangeUsage,
+          remaining_asset_units: limit("max_trades_per_asset") - Math.abs(currentSignedUnits),
+          current_symbol_signed_units: currentSignedUnits,
+          model_allowed: constraints.model_allowed !== false,
+          provider_allowed: constraints.provider_allowed !== false
+        }
+      });
+      if (!accepted.accepted) throw new Error(`Headless runtime decision rejected: ${accepted.reason_code}`);
+      executionDecision = { decision: accepted.decision, units: accepted.normalized_units };
+    }
     const envelope = metadata.envelope ?? {};
     const baseTradeSync = {
       analysis_run_id: analysisRunId,
@@ -92585,8 +92922,8 @@ function createHeadlessLocalWorker(options) {
         contract_version: requireText(envelope.contract_version, "contract version"),
         contract_hash: requireText(envelope.contract_hash, "contract hash"),
         policy_generation_id: requireText(envelope.policy_generation_id, "policy generation id"),
-        decision: providerDecision.decision,
-        units: providerDecision.units,
+        decision: executionDecision.decision,
+        units: executionDecision.units,
         final_tradability: providerDecision.tradability,
         reasoning: providerDecision.reasoning,
         model: requireText(prompt.model ?? metadata.model, "model"),
@@ -92612,7 +92949,7 @@ function createHeadlessLocalWorker(options) {
         execution_snapshot_id: tradabilityBlockExecution ? decisionSnapshotId : void 0,
         executions: tradabilityBlockExecution ? [tradabilityBlockExecution] : []
       },
-      afterDecision: localHyperliquidContext ? async () => {
+      afterDecision: localHyperliquidContext ? async (accepted) => {
         const freshProfile = objectOrNull3(await options.client.getSecretStatus(input.profileId));
         const freshWalletAddress = requireText(
           freshProfile?.hyperliquid_wallet_address,
@@ -92631,8 +92968,8 @@ function createHeadlessLocalWorker(options) {
           cycleId: analysisRunId,
           signingKey: localHyperliquidContext.signingKey,
           config: buildHeadlessExchangeConfig(llmConfig),
-          decision: providerDecision.decision,
-          units: providerDecision.units,
+          decision: accepted.decision,
+          units: accepted.units,
           executionContext: localHyperliquidContext.executionContext
         });
         return {
@@ -92655,6 +92992,7 @@ var init_headless_local_worker = __esm({
     init_hyperliquid_account_state_adapter();
     init_hyperliquid_market_symbol();
     init_runtime_execution();
+    init_constraint_contract();
     init_protection_storage();
     init_execution_guard_contract();
     init_inference_observability();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vtxmacro/cli",
-  "version": "2026.9.42",
+  "version": "2026.9.44",
   "description": "VTX Macro CLI, MCP server, and durable external inference host.",
   "type": "module",
   "license": "UNLICENSED",