@vtxmacro/cli 2026.9.47 → 2026.9.49

package/README.md

@@ -62,11 +62,20 @@ Both paths use a separate least-privilege `insights:inference` OAuth grant.
 VTX never receives an agent vendor password, OAuth token, or subscription
 credential.
 
+- **Background services:** OpenAI Codex, GitHub Copilot, DeepSeek Harness, Grok Build, Pi. These integrations can keep serving VTX after the setup chat ends. Keep the host computer on and its service running.
+- **Automatic foreground bridge:** Exo. The bridge serves VTX automatically while its process stays open.
+- **Foreground agent integrations:** Amp, Auggie, Claude Code, Cursor, Gemini CLI, Google Antigravity, Hermes Agent, JetBrains Junie, Kiro CLI, OpenClaw, OpenCode, Qwen Code, Warp Oz. Keep the harness session and its VTX foreground host loop open. Available modes depend on the connected model’s advertised capabilities.
+
+These groups describe how an integration runs, not a test grade. Limitations are
+listed in the [Insights harness guide](https://vtxmacro.com/insights#subscription-inference).
+Any recorded acceptance applies only to its tested mode and date; it does not
+prove current provider availability.
+
 ### Durable inference hosts
 
 Codex remains the reference implementation and its existing App Server,
 authentication, quota, recovery, and provider-mode path are unchanged. GitHub
-Copilot is an additive preview adapter that uses the official SDK and validates
+Copilot uses the official SDK and validates
 final text against VTX's immutable schema. An uncertain interrupted Copilot call
 is quarantined as `outcome_unknown` and is never blindly repeated. A different
 adapter cannot replace an installed Codex instance; it needs a distinct instance
@@ -76,15 +85,15 @@ effective model.
 
 Grok Build is a durable adapter using its package-owned official runtime and an
 isolated local Grok OAuth session. Run `vtx inference-host grok-login --instance grok-1`
-after the normal VTX host login, then `vtx inference-host service install --adapter grok-build --instance grok-1`.
+after `vtx inference-host login --instance grok-1`, then `vtx inference-host service install --adapter grok-build --instance grok-1`.
 Provider mode has no tools; Main Agent mode exposes only assignment-scoped VTX tools.
 Structured decisions, model identity, and usage are validated. Interrupted requests
 with an uncertain outcome are fenced; same-attempt recovery is not supported.
 
-An explicitly capable durable Codex, Grok Build, Copilot, DeepSeek Harness, or Pi model can also
+An explicitly capable model from a background service listed above can also
 control Main in **Agent** mode using the same VTX OAuth grant and its own local
-adapter-specific vendor credential: ChatGPT or Copilot login, or a DeepSeek or
-Pi provider API key. VTX assigns the running bot but does not send a VTX-authored prompt or set
+adapter-specific vendor credential: ChatGPT, Copilot, or Grok login, or a DeepSeek
+or Pi provider API key. VTX assigns the running bot but does not send a VTX-authored prompt or set
 the analysis cadence. The assigned runtime keeps a durable Agent thread,
 chooses when to wake, requests only the assignment-scoped VTX data it needs (or
 none), and submits the normal structured decision for VTX to validate and
@@ -242,9 +251,8 @@ confirmation page was blocked; the grant succeeded.
 
 ### Any compatible agent harness
 
-Codex, DeepSeek Harness, Claude Code, Cursor, GitHub Copilot, Antigravity, and other agents that can
-run shell commands can use their existing first-party session without a
-VTX-owned vendor adapter:
+Compatible agents that can run shell commands can use their existing first-party
+session without a VTX-owned vendor adapter:
 
 ```bash
 vtx inference-host login
@@ -348,12 +356,9 @@ self-modification, installed tools, or ambient conversation context. Interrupted
 work with an unknown outcome is fenced rather than repeated. After stopping and
 resolving pending work, remove the vendor key with `exo-logout --instance exo-1`.
 
-Claude Code, Antigravity, Gemini CLI, Kiro, Grok Build, Cursor, Amp, Auggie,
-Junie, Warp/Oz, Qwen Code, and OpenCode remain on the explicit foreground host
-path. Their current subscription routing,
-effective-model identity, schema, usage, or crash-recovery contracts do not yet
-meet every durable VTX acceptance fence. The public Insights matrix records the
-specific limitation instead of treating headless support alone as durability.
+Amp, Auggie, Claude Code, Cursor, Gemini CLI, Google Antigravity, Hermes Agent, JetBrains Junie, Kiro CLI, OpenClaw, OpenCode, Qwen Code, Warp Oz use the explicit foreground agent path.
+Their setup and specific limitations are listed in the public Insights matrix.
+A successful foreground test does not establish background-service support.
 
 Keep `agent-run` open in a separate terminal while the foreground host should
 remain available. Use the Provider job loop for Main, Review, or Screener, or the

package/bin/vtx-service-bootstrap.js

@@ -16,7 +16,7 @@ import { fileURLToPath } from "node:url";
 // agent-cli-release.json
 var agent_cli_release_default = {
   package_name: "@vtxmacro/cli",
-  package_version: "2026.9.47",
+  package_version: "2026.9.49",
   codex_package_name: "@openai/codex",
   codex_version: "0.153.3",
   copilot_sdk_package_name: "@github/copilot-sdk",
@@ -213,6 +213,9 @@ var runtime_policy_generated_default = {
       restart_backoff_base_ms: 1e3,
       restart_backoff_max_ms: 3e4,
       restart_exponent_max: 5
+    },
+    claim_diagnostics: {
+      event_loop_sample_interval_ms: 100
     }
   },
   desktop: {

package/bin/vtx.js

@@ -77,7 +77,7 @@ var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
     agent_cli_release_default = {
       package_name: "@vtxmacro/cli",
-      package_version: "2026.9.47",
+      package_version: "2026.9.49",
       codex_package_name: "@openai/codex",
       codex_version: "0.153.3",
       copilot_sdk_package_name: "@github/copilot-sdk",
@@ -20430,6 +20430,185 @@ var init_oauth = __esm({
   }
 });
 
+// lib/runtime-policy.generated.json
+var runtime_policy_generated_default;
+var init_runtime_policy_generated = __esm({
+  "lib/runtime-policy.generated.json"() {
+    runtime_policy_generated_default = {
+      ui: {
+        performance_defaults: {
+          default_timeframe: "30d"
+        },
+        execution_metadata_retry: {
+          max_attempts: 3,
+          base_delay_milliseconds: 2e3,
+          max_delay_milliseconds: 3e4
+        },
+        auth_bootstrap_retry: {
+          max_attempts: 3,
+          jitter_milliseconds: 750,
+          base_delay_milliseconds: 500,
+          min_delay_milliseconds: 250,
+          max_delay_milliseconds: 1e4
+        }
+      },
+      ai_dashboard: {
+        market_news_bounds: {
+          max_items_min: 1,
+          max_items_max: 100,
+          lookback_hours_min: 1,
+          lookback_hours_max: 168,
+          max_items_steps: [
+            1,
+            2,
+            3,
+            4,
+            5,
+            6,
+            7,
+            8,
+            9,
+            10,
+            15,
+            20,
+            25,
+            30,
+            40,
+            50,
+            60,
+            75,
+            90,
+            100
+          ],
+          lookback_hours_steps: [
+            1,
+            2,
+            4,
+            8,
+            12,
+            24,
+            48,
+            72,
+            168
+          ]
+        }
+      },
+      trading: {
+        engine: {
+          client_runtime: {
+            recovery: {
+              resume_retry_base_delay_ms: 1e3,
+              resume_retry_max_delay_ms: 3e4,
+              transient_load_min_delay_ms: 3e4,
+              transient_load_max_delay_ms: 12e4,
+              rate_limit_buffer_ms: 1e3,
+              rate_limit_max_delay_ms: 3e5,
+              engine_stop_settle_retry_delay_ms: 250,
+              recoverable_reset_settle_retry_delay_ms: 1500,
+              local_ai_preflight_timeout_ms: 3e3,
+              surge_stagger_max_ms: 6e4,
+              surge_stagger_min_ms: 2e3,
+              surge_stagger_min_candidates: 4,
+              stagger_deadline_ttl_ms: 3e5,
+              server_active_reprobe_delay_ms: 6e4,
+              transient_load_jitter_ms: 1e4,
+              cross_host_completed_ttl_ms: 15e3,
+              telemetry_dedupe_ttl_ms: 5e3,
+              browser_presence_heartbeat_interval_ms: 3e4,
+              host_liveness_heartbeat_interval_ms: 3e4,
+              host_liveness_recovery_nudge_ttl_ms: 1e4
+            }
+          }
+        }
+      },
+      external_inference: {
+        service: {
+          update_check_interval_ms: 3e5,
+          update_registry_timeout_ms: 15e3,
+          startup_max_attempts: 40,
+          startup_poll_interval_ms: 250,
+          restart_stable_uptime_ms: 6e4,
+          restart_backoff_base_ms: 1e3,
+          restart_backoff_max_ms: 3e4,
+          restart_exponent_max: 5
+        },
+        claim_diagnostics: {
+          event_loop_sample_interval_ms: 100
+        }
+      },
+      desktop: {
+        runtime_watchdog: {
+          ping_interval_milliseconds: 15e3,
+          telemetry_interval_milliseconds: 3e5
+        }
+      },
+      screener: {
+        resource_scheduler: {
+          client_lock_ttl_milliseconds: 12e4,
+          client_poll_interval_milliseconds: 250
+        }
+      },
+      deployment: {
+        cutover_buffer: {
+          target_timeout_ms: 3e3,
+          retired_timeout_ms: 45e3,
+          max_body_bytes: 33554432,
+          max_inflight: 16,
+          max_queue: 64
+        }
+      },
+      exchange: {
+        hyperliquid: {
+          client_public_read_budget: {
+            max_weight: 900,
+            window_seconds: 60,
+            cooldown_seconds: 60,
+            metadata_ttl_seconds: 300,
+            user_fees_ttl_seconds: 300,
+            account_mode_ttl_seconds: 30,
+            default_request_weight: 20,
+            cache_max_entries: 512
+          },
+          read_budget: {
+            weights: {
+              exchangeStatus: 2,
+              clearinghouseState: 2,
+              spotClearinghouseState: 2,
+              l2Book: 2,
+              allMids: 2,
+              userFills: 120,
+              userFillsByTime: 120,
+              historicalOrders: 120,
+              twapHistory: 120,
+              userTwapSliceFills: 120,
+              userFunding: 45,
+              userNonFundingLedgerUpdates: 45,
+              candleSnapshot: 104,
+              userRole: 60,
+              userAbstraction: 20,
+              userDexAbstraction: 20,
+              userActiveAssetData: 20,
+              activeAssetData: 20,
+              openOrders: 20,
+              orderStatus: 2,
+              portfolio: 20,
+              userFees: 20,
+              metaAndAssetCtxs: 20,
+              meta: 20,
+              perpDexs: 20,
+              spotMeta: 20,
+              approvedAgents: 20,
+              authorizedAgents: 20,
+              agents: 20,
+              apiWallets: 20
+            }
+          }
+        }
+      }
+    };
+  }
+});
+
 // lib/inference-host/mcp-client.ts
 var EXTERNAL_INFERENCE_MCP_PROTOCOL_VERSION, EXTERNAL_INFERENCE_AUTOMATED_HOST_TOOLS, EXTERNAL_INFERENCE_OPERATIONAL_TOOLS, ClaimTiming, ExternalInferenceMcpError, DEFAULT_REQUEST_TIMEOUT_MS, MAX_RETRY_AFTER_MS, PUBLIC_TOOL_ERROR_PREFIX, parseRetryAfterMs, identifierSchema2, safeCodeSchema2, publicFailureCodeSchema, publicToolErrorSchema, structuredPublicToolErrorSchema, parsePublicToolError, hostMutationResultSchema, attemptStartResultSchema, agentConnectResultSchema, agentHeartbeatResultSchema, timestampSchema2, positiveGenerationSchema, jsonObjectSchema, agentAssignmentNextArgumentsSchema, agentDataCapabilityDescriptorSchema, agentAssignmentNextResultSchema, agentAssignmentHeartbeatArgumentsSchema, agentAssignmentHeartbeatResultSchema, agentDataCallArgumentsSchema, agentDataCallResultSchema, agentDecisionSubmitArgumentsSchema, agentDecisionSubmitResultSchema, agentDecisionStatusArgumentsSchema, agentDecisionStatusResultSchema, agentAssignmentReleaseArgumentsSchema, agentAssignmentReleaseResultSchema, jobCompletionResultSchema, jobFailureResultSchema, toolContracts, discoveryResultSchema, toolListResultSchema, inlineStructuredContentSchema, protocolMeta, parseJsonDocument, parseSseDocuments, parseResponseDocuments, exactOperationalInventory, exactJson, invalidBoundResult, verifyToolResult, ExternalInferenceMcpClient;
 var init_mcp_client = __esm({
@@ -20439,6 +20618,7 @@ var init_mcp_client = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_zod();
+    init_runtime_policy_generated();
     init_external_inference_contract();
     EXTERNAL_INFERENCE_MCP_PROTOCOL_VERSION = "2026-07-28";
     EXTERNAL_INFERENCE_AUTOMATED_HOST_TOOLS = [
@@ -20481,6 +20661,65 @@ var init_mcp_client = __esm({
         };
         this.transportAttempts = 0;
         this.tokenRefreshes = 0;
+        this.edgeRequestId = null;
+        this.cfRay = null;
+        this.bodyBytes = 0;
+        this.bodyChunks = 0;
+        this.firstChunkMs = null;
+        this.maxChunkGapMs = 0;
+        this.eventLoopDelayMaxMs = 0;
+        this.lastSampleAt = this.startedAt;
+        this.sampleIntervalMs = runtime_policy_generated_default.external_inference.claim_diagnostics.event_loop_sample_interval_ms;
+        this.cancelBodyRead = null;
+        this.sampleTimer = setInterval(() => this.sampleSchedulingDelay(), this.sampleIntervalMs);
+        this.sampleTimer.unref?.();
+      }
+      sampleSchedulingDelay() {
+        const at = performance.now();
+        this.eventLoopDelayMaxMs = Math.max(this.eventLoopDelayMaxMs, at - this.lastSampleAt - this.sampleIntervalMs);
+        this.lastSampleAt = at;
+      }
+      observeResponse(response) {
+        const edgeId = response.headers.get("x-vtx-edge-request-id");
+        const ray = response.headers.get("cf-ray");
+        this.edgeRequestId = edgeId && /^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/iu.test(edgeId) ? edgeId : null;
+        this.cfRay = ray && /^[0-9a-f]{16}-[a-z]{3}$/iu.test(ray) ? ray : null;
+      }
+      cancelBody() {
+        this.cancelBodyRead?.();
+      }
+      async readBody(response) {
+        if (!response.body) return "";
+        const reader = response.body.getReader();
+        this.cancelBodyRead = () => {
+          void reader.cancel().catch(() => void 0);
+        };
+        const decoder2 = new TextDecoder();
+        const text = [];
+        const startedAt = performance.now();
+        let previousAt = startedAt;
+        try {
+          while (true) {
+            const { value, done } = await reader.read();
+            const at = performance.now();
+            if (!this.finished) {
+              this.maxChunkGapMs = Math.max(this.maxChunkGapMs, at - previousAt);
+              if (!done) {
+                this.firstChunkMs ??= at - startedAt;
+                this.bodyChunks += 1;
+                this.bodyBytes += value.byteLength;
+              }
+            }
+            previousAt = at;
+            if (done) break;
+            text.push(decoder2.decode(value, { stream: true }));
+          }
+          text.push(decoder2.decode());
+          return text.join("");
+        } finally {
+          this.cancelBodyRead = null;
+          reader.releaseLock();
+        }
       }
       enter(phase) {
         if (this.finished) return;
@@ -20491,9 +20730,18 @@ var init_mcp_client = __esm({
       }
       finish(outcome) {
         this.enter("other_ms");
+        this.sampleSchedulingDelay();
+        clearInterval(this.sampleTimer);
         this.finished = true;
         return Object.freeze({
           ...this.elapsed,
+          edge_request_id: this.edgeRequestId,
+          cf_ray: this.cfRay,
+          response_body_bytes: this.bodyBytes,
+          response_body_chunks: this.bodyChunks,
+          response_first_chunk_ms: this.firstChunkMs,
+          response_max_chunk_gap_ms: this.maxChunkGapMs,
+          event_loop_delay_max_ms: this.eventLoopDelayMaxMs,
           total_ms: Math.max(0, this.changedAt - this.startedAt),
           transport_attempts: this.transportAttempts,
           token_refreshes: this.tokenRefreshes,
@@ -20912,7 +21160,7 @@ var init_mcp_client = __esm({
     parseResponseDocuments = async (response, timing) => {
       const contentType = String(response.headers.get("content-type") || "").split(";", 1)[0].trim().toLowerCase();
       timing?.enter("body_reception_ms");
-      const body = await response.text();
+      const body = timing ? await timing.readBody(response) : await response.text();
       timing?.enter("response_parse_ms");
       if (contentType === "application/json") return [parseJsonDocument(body)];
       if (contentType === "text/event-stream") return parseSseDocuments(body);
@@ -21340,6 +21588,7 @@ var init_mcp_client = __esm({
           );
         }
         timing?.enter("other_ms");
+        timing?.observeResponse(response);
         if (!response.ok) {
           const httpStatusCode = response.status;
           const retryAfterMs = parseRetryAfterMs(response);
@@ -21359,7 +21608,8 @@ var init_mcp_client = __esm({
             "request_timeout"
           );
         } catch (error48) {
-          await response.body?.cancel().catch(() => void 0);
+          if (timing) timing.cancelBody();
+          else await response.body?.cancel().catch(() => void 0);
           throw error48;
         }
         timing?.enter("response_validation_ms");
@@ -32817,6 +33067,10 @@ var init_runner = __esm({
                 );
                 assertClaimResult(request, claim);
               } catch (error48) {
+                if (claimTiming) emitDiagnostic("claim_request_failed", {
+                  claim_request_id: request.claim_request_id,
+                  client_timing: claimTiming
+                });
                 if (!this.options.signal?.aborted && request.schema_version === "external_inference_job_claim_v3" && error48 instanceof ExternalInferenceMcpError && error48.serverFailureCode === "schema_validation") {
                   batchClaimVersion = 2;
                   await mutateReceipt((current) => ({
@@ -32913,6 +33167,13 @@ var init_runner = __esm({
                   claimCallRoundTripMs - (claim.schema_version === "external_inference_job_claim_result_v3" ? claim.server_processing_ms : 0)
                 );
                 emitDiagnostic("claim_batch_received", {
+                  claim_request_id: request.claim_request_id,
+                  jobs: claim.claims.map((item) => ({
+                    job_id: item.claim.job_id,
+                    attempt_id: item.attempt_id,
+                    // Reported at the server; excludes later response transport.
+                    server_freshness_remaining_ms: item.provider_dispatch_freshness_remaining_ms
+                  })),
                   ...claimTiming ? { client_timing: claimTiming } : {},
                   claim_count: claim.claims.length,
                   round_trip_ms: claimCallRoundTripMs,
@@ -42020,10 +42281,10 @@ var init_durable_adapter = __esm({
 });
 
 // lib/runtime-policy.generated.json with { type: 'json' }
-var runtime_policy_generated_default;
-var init_runtime_policy_generated = __esm({
+var runtime_policy_generated_default2;
+var init_runtime_policy_generated2 = __esm({
   "lib/runtime-policy.generated.json with { type: 'json' }"() {
-    runtime_policy_generated_default = {
+    runtime_policy_generated_default2 = {
       ui: {
         performance_defaults: {
           default_timeframe: "30d"
@@ -42120,6 +42381,9 @@ var init_runtime_policy_generated = __esm({
           restart_backoff_base_ms: 1e3,
           restart_backoff_max_ms: 3e4,
           restart_exponent_max: 5
+        },
+        claim_diagnostics: {
+          event_loop_sample_interval_ms: 100
         }
       },
       desktop: {
@@ -42210,7 +42474,7 @@ var init_service = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_agent_cli_release();
-    init_runtime_policy_generated();
+    init_runtime_policy_generated2();
     init_durable_adapter();
     init_config();
     SERVICE_NAME = "VTX Macro Inference Host";
@@ -42623,7 +42887,7 @@ WantedBy=default.target
           await new Promise((resolvePromise) => setTimeout(resolvePromise, milliseconds));
         });
         this.stopWaitAttempts = dependencies.stopWaitAttempts ?? SERVICE_COOPERATIVE_STOP_SECONDS * 4;
-        this.startWaitAttempts = dependencies.startWaitAttempts ?? runtime_policy_generated_default.external_inference.service.startup_max_attempts;
+        this.startWaitAttempts = dependencies.startWaitAttempts ?? runtime_policy_generated_default2.external_inference.service.startup_max_attempts;
         this.reconcileWaitAttempts = dependencies.reconcileWaitAttempts ?? SERVICE_COOPERATIVE_STOP_SECONDS * 4;
         this.confirmInitialReadiness = dependencies.confirmInitialReadiness ?? true;
         this.acquireProcessLock = dependencies.acquireProcessLock ?? acquireInferenceHostProcessLock;
@@ -42754,9 +43018,9 @@ WantedBy=default.target
         for (let attempt = 0; attempt < this.startWaitAttempts; attempt += 1) {
           const status = await this.status();
           if (status.manager_active) return status;
-          await this.sleep(runtime_policy_generated_default.external_inference.service.startup_poll_interval_ms);
+          await this.sleep(runtime_policy_generated_default2.external_inference.service.startup_poll_interval_ms);
         }
-        throw new Error(`Background service did not reach an active state within ${this.startWaitAttempts * runtime_policy_generated_default.external_inference.service.startup_poll_interval_ms / 1e3} seconds.`);
+        throw new Error(`Background service did not reach an active state within ${this.startWaitAttempts * runtime_policy_generated_default2.external_inference.service.startup_poll_interval_ms / 1e3} seconds.`);
       }
       async restoreRunningSupervisor(manifest, preserveGeneration = false, targetInstanceName) {
         const previousRuntime = await readRuntimeAcrossAtomicReplacement(this.runtimePath()).catch(() => null);
@@ -43598,8 +43862,8 @@ ${result2.stderr}`)) {
               throw new Error("worker_cooperative_stop_timeout");
             }
             if (signal.aborted || quiesceSignal.aborted || record5.controller.signal.aborted || !await readDesiredAcrossAtomicReplacement(desiredPath)) break;
-            failures = result2.uptimeMs >= runtime_policy_generated_default.external_inference.service.restart_stable_uptime_ms ? 0 : failures + 1;
-            const retryAfterMs = Math.min(runtime_policy_generated_default.external_inference.service.restart_backoff_base_ms * 2 ** Math.min(failures, runtime_policy_generated_default.external_inference.service.restart_exponent_max), runtime_policy_generated_default.external_inference.service.restart_backoff_max_ms);
+            failures = result2.uptimeMs >= runtime_policy_generated_default2.external_inference.service.restart_stable_uptime_ms ? 0 : failures + 1;
+            const retryAfterMs = Math.min(runtime_policy_generated_default2.external_inference.service.restart_backoff_base_ms * 2 ** Math.min(failures, runtime_policy_generated_default2.external_inference.service.restart_exponent_max), runtime_policy_generated_default2.external_inference.service.restart_backoff_max_ms);
             await updateRecord(record5, "failed", "worker_exited");
             await appendServiceLog(serviceManifest.log_path, "worker_exited", {
               instance_name: record5.worker.instance_name,
@@ -43613,7 +43877,7 @@ ${result2.stderr}`)) {
             if (error48 instanceof Error && error48.message === "worker_cooperative_stop_timeout") throw error48;
             if (signal.aborted || quiesceSignal.aborted || record5.controller.signal.aborted) break;
             failures += 1;
-            const retryAfterMs = Math.min(runtime_policy_generated_default.external_inference.service.restart_backoff_base_ms * 2 ** Math.min(failures, runtime_policy_generated_default.external_inference.service.restart_exponent_max), runtime_policy_generated_default.external_inference.service.restart_backoff_max_ms);
+            const retryAfterMs = Math.min(runtime_policy_generated_default2.external_inference.service.restart_backoff_base_ms * 2 ** Math.min(failures, runtime_policy_generated_default2.external_inference.service.restart_exponent_max), runtime_policy_generated_default2.external_inference.service.restart_backoff_max_ms);
             await updateRecord(record5, "failed", "worker_launch_failed");
             await appendServiceLog(serviceManifest.log_path, "worker_launch_failed", {
               instance_name: record5.worker.instance_name,
@@ -48051,182 +48315,6 @@ var init_runtime_redaction = __esm({
   }
 });
 
-// lib/runtime-policy.generated.json
-var runtime_policy_generated_default2;
-var init_runtime_policy_generated2 = __esm({
-  "lib/runtime-policy.generated.json"() {
-    runtime_policy_generated_default2 = {
-      ui: {
-        performance_defaults: {
-          default_timeframe: "30d"
-        },
-        execution_metadata_retry: {
-          max_attempts: 3,
-          base_delay_milliseconds: 2e3,
-          max_delay_milliseconds: 3e4
-        },
-        auth_bootstrap_retry: {
-          max_attempts: 3,
-          jitter_milliseconds: 750,
-          base_delay_milliseconds: 500,
-          min_delay_milliseconds: 250,
-          max_delay_milliseconds: 1e4
-        }
-      },
-      ai_dashboard: {
-        market_news_bounds: {
-          max_items_min: 1,
-          max_items_max: 100,
-          lookback_hours_min: 1,
-          lookback_hours_max: 168,
-          max_items_steps: [
-            1,
-            2,
-            3,
-            4,
-            5,
-            6,
-            7,
-            8,
-            9,
-            10,
-            15,
-            20,
-            25,
-            30,
-            40,
-            50,
-            60,
-            75,
-            90,
-            100
-          ],
-          lookback_hours_steps: [
-            1,
-            2,
-            4,
-            8,
-            12,
-            24,
-            48,
-            72,
-            168
-          ]
-        }
-      },
-      trading: {
-        engine: {
-          client_runtime: {
-            recovery: {
-              resume_retry_base_delay_ms: 1e3,
-              resume_retry_max_delay_ms: 3e4,
-              transient_load_min_delay_ms: 3e4,
-              transient_load_max_delay_ms: 12e4,
-              rate_limit_buffer_ms: 1e3,
-              rate_limit_max_delay_ms: 3e5,
-              engine_stop_settle_retry_delay_ms: 250,
-              recoverable_reset_settle_retry_delay_ms: 1500,
-              local_ai_preflight_timeout_ms: 3e3,
-              surge_stagger_max_ms: 6e4,
-              surge_stagger_min_ms: 2e3,
-              surge_stagger_min_candidates: 4,
-              stagger_deadline_ttl_ms: 3e5,
-              server_active_reprobe_delay_ms: 6e4,
-              transient_load_jitter_ms: 1e4,
-              cross_host_completed_ttl_ms: 15e3,
-              telemetry_dedupe_ttl_ms: 5e3,
-              browser_presence_heartbeat_interval_ms: 3e4,
-              host_liveness_heartbeat_interval_ms: 3e4,
-              host_liveness_recovery_nudge_ttl_ms: 1e4
-            }
-          }
-        }
-      },
-      external_inference: {
-        service: {
-          update_check_interval_ms: 3e5,
-          update_registry_timeout_ms: 15e3,
-          startup_max_attempts: 40,
-          startup_poll_interval_ms: 250,
-          restart_stable_uptime_ms: 6e4,
-          restart_backoff_base_ms: 1e3,
-          restart_backoff_max_ms: 3e4,
-          restart_exponent_max: 5
-        }
-      },
-      desktop: {
-        runtime_watchdog: {
-          ping_interval_milliseconds: 15e3,
-          telemetry_interval_milliseconds: 3e5
-        }
-      },
-      screener: {
-        resource_scheduler: {
-          client_lock_ttl_milliseconds: 12e4,
-          client_poll_interval_milliseconds: 250
-        }
-      },
-      deployment: {
-        cutover_buffer: {
-          target_timeout_ms: 3e3,
-          retired_timeout_ms: 45e3,
-          max_body_bytes: 33554432,
-          max_inflight: 16,
-          max_queue: 64
-        }
-      },
-      exchange: {
-        hyperliquid: {
-          client_public_read_budget: {
-            max_weight: 900,
-            window_seconds: 60,
-            cooldown_seconds: 60,
-            metadata_ttl_seconds: 300,
-            user_fees_ttl_seconds: 300,
-            account_mode_ttl_seconds: 30,
-            default_request_weight: 20,
-            cache_max_entries: 512
-          },
-          read_budget: {
-            weights: {
-              exchangeStatus: 2,
-              clearinghouseState: 2,
-              spotClearinghouseState: 2,
-              l2Book: 2,
-              allMids: 2,
-              userFills: 120,
-              userFillsByTime: 120,
-              historicalOrders: 120,
-              twapHistory: 120,
-              userTwapSliceFills: 120,
-              userFunding: 45,
-              userNonFundingLedgerUpdates: 45,
-              candleSnapshot: 104,
-              userRole: 60,
-              userAbstraction: 20,
-              userDexAbstraction: 20,
-              userActiveAssetData: 20,
-              activeAssetData: 20,
-              openOrders: 20,
-              orderStatus: 2,
-              portfolio: 20,
-              userFees: 20,
-              metaAndAssetCtxs: 20,
-              meta: 20,
-              perpDexs: 20,
-              spotMeta: 20,
-              approvedAgents: 20,
-              authorizedAgents: 20,
-              agents: 20,
-              apiWallets: 20
-            }
-          }
-        }
-      }
-    };
-  }
-});
-
 // lib/runtime/hyperliquid-public-read.ts
 var policy, weights, budgets, unpersistedBudgets, cache, pending2, PREFIX, abortError2, checkAbort, wait, storage, loadBudget, saveBudget, withBudgetLock, admit, cooldown, reserveHyperliquidPublicReads, readHyperliquidPublicInfo;
 var init_hyperliquid_public_read = __esm({
@@ -48236,9 +48324,9 @@ var init_hyperliquid_public_read = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_runtime_redaction();
-    init_runtime_policy_generated2();
-    policy = runtime_policy_generated_default2.exchange.hyperliquid.client_public_read_budget;
-    weights = runtime_policy_generated_default2.exchange.hyperliquid.read_budget.weights;
+    init_runtime_policy_generated();
+    policy = runtime_policy_generated_default.exchange.hyperliquid.client_public_read_budget;
+    weights = runtime_policy_generated_default.exchange.hyperliquid.read_budget.weights;
     budgets = /* @__PURE__ */ new Map();
     unpersistedBudgets = /* @__PURE__ */ new Set();
     cache = /* @__PURE__ */ new Map();
@@ -51280,7 +51368,7 @@ var init_shared = __esm({
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
-    init_runtime_policy_generated2();
+    init_runtime_policy_generated();
     init_abort();
     getApiUrl = () => {
       if (typeof window === "undefined") {
@@ -51311,8 +51399,8 @@ var init_shared = __esm({
     };
     API_URL = getApiUrl();
     sleep2 = (ms) => new Promise((resolve12) => setTimeout(resolve12, ms));
-    AUTH_BOOTSTRAP_GET_MAX_ATTEMPTS = runtime_policy_generated_default2.ui.auth_bootstrap_retry.max_attempts;
-    AUTH_BOOTSTRAP_RETRY_JITTER_MS = runtime_policy_generated_default2.ui.auth_bootstrap_retry.jitter_milliseconds;
+    AUTH_BOOTSTRAP_GET_MAX_ATTEMPTS = runtime_policy_generated_default.ui.auth_bootstrap_retry.max_attempts;
+    AUTH_BOOTSTRAP_RETRY_JITTER_MS = runtime_policy_generated_default.ui.auth_bootstrap_retry.jitter_milliseconds;
     parseRetryAfterMs2 = (value) => {
       if (!value) return null;
       const seconds = Number(value);
@@ -85503,6 +85591,9 @@ var init_key_preview_contract = __esm({
 });
 
 // lib/runtime/vault.ts
+function notifyVaultChanged(profileId) {
+  window.dispatchEvent(new CustomEvent(CLIENT_VAULT_CHANGED_EVENT, { detail: profileId }));
+}
 function validateDeviceSecrets(value, options) {
   const activeProvider = normalizeClientRuntimeSecretProvider(options?.activeProvider);
   const requireProviderSecret = options?.requireProviderSecret !== false;
@@ -85615,7 +85706,7 @@ function validateDeviceSecrets(value, options) {
     missing: missing2
   };
 }
-var VAULT_PREFIX, VAULT_DB_NAME, VAULT_DB_VERSION, VAULT_KEY_STORE, DEFAULT_DEVICE_SECRET_STORAGE, encoder, decoder, sessionVaultCache, runtimeSecretsInFlight, buildRuntimeSecretsRequestKey, fetchClientRuntimeSecretsSingleFlight, hasSecureVaultSupport, bytesToBase64, base64ToArrayBuffer, openVaultDb, withVaultStore, getVaultKey, getOrCreateVaultKey, deleteVaultKey, mapClientRuntimeSecretsToDeviceSecrets, normalizeDeviceSecretStorage, normalizeLocalAiSecrets, normalizeOpenAiCompatibleSecrets, hasAnySecretValues, hasAnyDeviceOnlyOptIn, mergeHydratedSecrets, preserveDeviceOnlySecrets, normalizeClientRuntimeSecretProvider, getResponseSecretVersion, getStoredSecretVersion, buildHydrationState, normalizeProfileIdForApi, ClientVault;
+var VAULT_PREFIX, CLIENT_VAULT_CHANGED_EVENT, VAULT_DB_NAME, VAULT_DB_VERSION, VAULT_KEY_STORE, DEFAULT_DEVICE_SECRET_STORAGE, encoder, decoder, sessionVaultCache, runtimeSecretsInFlight, buildRuntimeSecretsRequestKey, fetchClientRuntimeSecretsSingleFlight, hasSecureVaultSupport, bytesToBase64, base64ToArrayBuffer, openVaultDb, withVaultStore, getVaultKey, getOrCreateVaultKey, deleteVaultKey, mapClientRuntimeSecretsToDeviceSecrets, normalizeDeviceSecretStorage, normalizeLocalAiSecrets, normalizeOpenAiCompatibleSecrets, hasAnySecretValues, hasAnyDeviceOnlyOptIn, mergeHydratedSecrets, preserveDeviceOnlySecrets, normalizeClientRuntimeSecretProvider, getResponseSecretVersion, getStoredSecretVersion, buildHydrationState, normalizeProfileIdForApi, ClientVault;
 var init_vault = __esm({
   "lib/runtime/vault.ts"() {
     "use strict";
@@ -85631,6 +85722,7 @@ var init_vault = __esm({
     init_client_runtime_secret_rate_limit_contract();
     init_byokProviderRegistry();
     VAULT_PREFIX = "vtx_vault_";
+    CLIENT_VAULT_CHANGED_EVENT = "vtx-client-vault-changed";
     VAULT_DB_NAME = "vtx-client-runtime-vault";
     VAULT_DB_VERSION = 1;
     VAULT_KEY_STORE = "keys";
@@ -86043,6 +86135,7 @@ var init_vault = __esm({
             serverSecretVersion
           });
           localStorage.removeItem(key);
+          notifyVaultChanged(profileId);
           return "session";
         }
         const iv = crypto.getRandomValues(new Uint8Array(12));
@@ -86062,6 +86155,7 @@ var init_vault = __esm({
         };
         localStorage.setItem(key, JSON.stringify(encryptedRecord));
         sessionVaultCache.delete(profileId);
+        notifyVaultChanged(profileId);
         return "encrypted";
       }
       static async getSecrets(profileId) {
@@ -86133,6 +86227,7 @@ var init_vault = __esm({
         localStorage.removeItem(key);
         sessionVaultCache.delete(profileId);
         await deleteVaultKey(profileId);
+        notifyVaultChanged(profileId);
       }
     };
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vtxmacro/cli",
-  "version": "2026.9.47",
+  "version": "2026.9.49",
   "description": "VTX Macro CLI, MCP server, and durable external inference host.",
   "type": "module",
   "license": "UNLICENSED",