@vtxmacro/cli 2026.9.48 → 2026.9.50

package/README.md

@@ -62,11 +62,20 @@ Both paths use a separate least-privilege `insights:inference` OAuth grant.
 VTX never receives an agent vendor password, OAuth token, or subscription
 credential.
 
+- **Background services:** OpenAI Codex, GitHub Copilot, DeepSeek Harness, Grok Build, Pi. These integrations can keep serving VTX after the setup chat ends. Keep the host computer on and its service running.
+- **Automatic foreground bridge:** Exo. The bridge serves VTX automatically while its process stays open.
+- **Foreground agent integrations:** Amp, Auggie, Claude Code, Cursor, Gemini CLI, Google Antigravity, Hermes Agent, JetBrains Junie, Kiro CLI, OpenClaw, OpenCode, Qwen Code, Warp Oz. Keep the harness session and its VTX foreground host loop open. Available modes depend on the connected model’s advertised capabilities.
+
+These groups describe how an integration runs, not a test grade. Limitations are
+listed in the [Insights harness guide](https://vtxmacro.com/insights#subscription-inference).
+Any recorded acceptance applies only to its tested mode and date; it does not
+prove current provider availability.
+
 ### Durable inference hosts
 
 Codex remains the reference implementation and its existing App Server,
 authentication, quota, recovery, and provider-mode path are unchanged. GitHub
-Copilot is an additive preview adapter that uses the official SDK and validates
+Copilot uses the official SDK and validates
 final text against VTX's immutable schema. An uncertain interrupted Copilot call
 is quarantined as `outcome_unknown` and is never blindly repeated. A different
 adapter cannot replace an installed Codex instance; it needs a distinct instance
@@ -76,15 +85,15 @@ effective model.
 
 Grok Build is a durable adapter using its package-owned official runtime and an
 isolated local Grok OAuth session. Run `vtx inference-host grok-login --instance grok-1`
-after the normal VTX host login, then `vtx inference-host service install --adapter grok-build --instance grok-1`.
+after `vtx inference-host login --instance grok-1`, then `vtx inference-host service install --adapter grok-build --instance grok-1`.
 Provider mode has no tools; Main Agent mode exposes only assignment-scoped VTX tools.
 Structured decisions, model identity, and usage are validated. Interrupted requests
 with an uncertain outcome are fenced; same-attempt recovery is not supported.
 
-An explicitly capable durable Codex, Grok Build, Copilot, DeepSeek Harness, or Pi model can also
+An explicitly capable model from a background service listed above can also
 control Main in **Agent** mode using the same VTX OAuth grant and its own local
-adapter-specific vendor credential: ChatGPT or Copilot login, or a DeepSeek or
-Pi provider API key. VTX assigns the running bot but does not send a VTX-authored prompt or set
+adapter-specific vendor credential: ChatGPT, Copilot, or Grok login, or a DeepSeek
+or Pi provider API key. VTX assigns the running bot but does not send a VTX-authored prompt or set
 the analysis cadence. The assigned runtime keeps a durable Agent thread,
 chooses when to wake, requests only the assignment-scoped VTX data it needs (or
 none), and submits the normal structured decision for VTX to validate and
@@ -242,9 +251,8 @@ confirmation page was blocked; the grant succeeded.
 
 ### Any compatible agent harness
 
-Codex, DeepSeek Harness, Claude Code, Cursor, GitHub Copilot, Antigravity, and other agents that can
-run shell commands can use their existing first-party session without a
-VTX-owned vendor adapter:
+Compatible agents that can run shell commands can use their existing first-party
+session without a VTX-owned vendor adapter:
 
 ```bash
 vtx inference-host login
@@ -348,12 +356,9 @@ self-modification, installed tools, or ambient conversation context. Interrupted
 work with an unknown outcome is fenced rather than repeated. After stopping and
 resolving pending work, remove the vendor key with `exo-logout --instance exo-1`.
 
-Claude Code, Antigravity, Gemini CLI, Kiro, Grok Build, Cursor, Amp, Auggie,
-Junie, Warp/Oz, Qwen Code, and OpenCode remain on the explicit foreground host
-path. Their current subscription routing,
-effective-model identity, schema, usage, or crash-recovery contracts do not yet
-meet every durable VTX acceptance fence. The public Insights matrix records the
-specific limitation instead of treating headless support alone as durability.
+Amp, Auggie, Claude Code, Cursor, Gemini CLI, Google Antigravity, Hermes Agent, JetBrains Junie, Kiro CLI, OpenClaw, OpenCode, Qwen Code, Warp Oz use the explicit foreground agent path.
+Their setup and specific limitations are listed in the public Insights matrix.
+A successful foreground test does not establish background-service support.
 
 Keep `agent-run` open in a separate terminal while the foreground host should
 remain available. Use the Provider job loop for Main, Review, or Screener, or the

package/bin/vtx-service-bootstrap.js

@@ -16,7 +16,7 @@ import { fileURLToPath } from "node:url";
 // agent-cli-release.json
 var agent_cli_release_default = {
   package_name: "@vtxmacro/cli",
-  package_version: "2026.9.48",
+  package_version: "2026.9.50",
   codex_package_name: "@openai/codex",
   codex_version: "0.153.3",
   copilot_sdk_package_name: "@github/copilot-sdk",
@@ -296,6 +296,11 @@ import { constants } from "node:fs";
 import { lstat, mkdir, open, readFile, realpath, rename, rm } from "node:fs/promises";
 import { homedir } from "node:os";
 import { dirname, isAbsolute, join, relative, resolve, win32 as windowsPath } from "node:path";
+
+// lib/inference-host/mcp-transport.ts
+import { Agent, fetch as undiciFetch } from "undici";
+
+// lib/inference-host/config.ts
 var MAX_INFERENCE_PRIVATE_FILE_BYTES = 16 * 1024 * 1024;
 var WINDOWS_PRIVATE_ACL_BROKER_SCRIPT = `$ErrorActionPreference='Stop'
 $ProgressPreference='SilentlyContinue'

package/bin/vtx.js

@@ -77,7 +77,7 @@ var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
     agent_cli_release_default = {
       package_name: "@vtxmacro/cli",
-      package_version: "2026.9.48",
+      package_version: "2026.9.50",
       codex_package_name: "@openai/codex",
       codex_version: "0.153.3",
       copilot_sdk_package_name: "@github/copilot-sdk",
@@ -17580,13 +17580,69 @@ var init_dist = __esm({
   }
 });
 
+// lib/inference-host/mcp-transport.ts
+import { readFileSync } from "node:fs";
+import { X509Certificate } from "node:crypto";
+import { isIP } from "node:net";
+import { isAbsolute, win32 } from "node:path";
+import { Agent, fetch as undiciFetch } from "undici";
+function resolveInferenceMcpDirectTransport(env) {
+  const address = String(env.VTX_INFERENCE_HOST_MCP_CONNECT_ADDRESS || "").trim();
+  const caFile = String(env.VTX_INFERENCE_HOST_MCP_CA_FILE || "").trim();
+  if (!address && !caFile) return void 0;
+  if (!isIP(address) || !caFile || /[\r\n\0]/u.test(caFile) || !isAbsolute(caFile) && !win32.isAbsolute(caFile)) {
+    throw new Error("Direct inference MCP transport requires an IP address and an absolute CA file path.");
+  }
+  return { address, caFile };
+}
+function createInferenceMcpTransport(endpoint, direct, fetchImpl = fetch) {
+  if (!direct) return { fetch: fetchImpl, route: "public", close: async () => void 0 };
+  const canonical = new URL(endpoint);
+  if (canonical.protocol !== "https:" || canonical.username || canonical.password || canonical.pathname !== "/insights/mcp" || canonical.search || canonical.hash || isIP(canonical.hostname) || !isIP(direct.address)) {
+    throw new Error("Direct inference MCP transport requires a canonical HTTPS MCP hostname.");
+  }
+  const ca = readFileSync(direct.caFile, "utf8");
+  new X509Certificate(ca);
+  const agent = new Agent({
+    connect: {
+      ca,
+      rejectUnauthorized: true,
+      servername: canonical.hostname,
+      lookup: (_hostname, options, callback) => {
+        const address = { address: direct.address, family: isIP(direct.address) };
+        if (options.all) callback(null, [address]);
+        else callback(null, address.address, address.family);
+      }
+    }
+  });
+  const dispatchFetch = fetchImpl === fetch ? undiciFetch : fetchImpl;
+  const routedFetch = (input, init2) => {
+    const url2 = new URL(input instanceof Request ? input.url : String(input));
+    if (url2.href !== canonical.href) {
+      return Promise.reject(new Error("Direct inference transport cannot send requests outside its MCP endpoint."));
+    }
+    return dispatchFetch(input, { ...init2, redirect: "error", dispatcher: agent });
+  };
+  return { fetch: routedFetch, route: "direct", close: async () => {
+    await agent.destroy();
+  } };
+}
+var init_mcp_transport = __esm({
+  "lib/inference-host/mcp-transport.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+  }
+});
+
 // lib/inference-host/config.ts
 import { randomBytes } from "node:crypto";
 import { spawn } from "node:child_process";
 import { constants } from "node:fs";
 import { lstat, mkdir, open, readFile, realpath, rename, rm } from "node:fs/promises";
 import { homedir } from "node:os";
-import { dirname, isAbsolute, join, relative, resolve, win32 as windowsPath } from "node:path";
+import { dirname, isAbsolute as isAbsolute2, join, relative, resolve, win32 as windowsPath } from "node:path";
 function inferenceBaseDir(env) {
   const configured = String(env.VTX_INFERENCE_HOST_HOME || "").trim();
   return configured || join(homedir(), ".vtx", "inference-host");
@@ -17638,6 +17694,7 @@ function resolveInferenceHostConfig(env = process.env) {
   );
   return {
     apiUrl: String(env.VTX_API_URL || "https://api.vtxmacro.com").replace(/\/+$/, ""),
+    mcpDirectTransport: resolveInferenceMcpDirectTransport(env),
     baseDir,
     instanceName,
     credentialStoreMode: rawMode,
@@ -18160,6 +18217,7 @@ var init_config = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_dist();
+    init_mcp_transport();
     loadInferenceReceiptDurabilityTimeoutMs = async () => {
       let configured;
       if (true) {
@@ -18734,7 +18792,7 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
     requireNamedInstancePath = (instanceName, instanceDir, rawPath, label) => {
       if (!rawPath || instanceName === DEFAULT_INFERENCE_HOST_INSTANCE) return rawPath;
       const relativePath = relative(resolve(instanceDir), resolve(rawPath));
-      if (relativePath === ".." || relativePath.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute(relativePath)) {
+      if (relativePath === ".." || relativePath.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute2(relativePath)) {
         throw new Error(`${label} for a named instance must stay inside its isolated instance directory.`);
       }
       return rawPath;
@@ -20619,6 +20677,7 @@ var init_mcp_client = __esm({
     init_define_VTX_PI_MODEL_POLICY();
     init_zod();
     init_runtime_policy_generated();
+    init_mcp_transport();
     init_external_inference_contract();
     EXTERNAL_INFERENCE_MCP_PROTOCOL_VERSION = "2026-07-28";
     EXTERNAL_INFERENCE_AUTOMATED_HOST_TOOLS = [
@@ -21282,6 +21341,7 @@ var init_mcp_client = __esm({
       #endpoint;
       #tokenSource;
       #fetch;
+      #transport;
       #clientVersion;
       #clientName;
       #expectedTools;
@@ -21293,6 +21353,9 @@ var init_mcp_client = __esm({
       #providerHttpStatusTools = /* @__PURE__ */ new Set();
       #grokToolValidationTools = /* @__PURE__ */ new Set();
       #grokResponseIdentityTools = /* @__PURE__ */ new Set();
+      async close() {
+        await this.#transport.close();
+      }
       supportsProviderHttpStatusDiagnostics(tool) {
         return this.#providerHttpStatusTools.has(tool);
       }
@@ -21345,7 +21408,8 @@ var init_mcp_client = __esm({
         }
         this.#endpoint = endpoint;
         this.#tokenSource = options.tokenSource;
-        this.#fetch = options.fetchImpl ?? fetch;
+        this.#transport = createInferenceMcpTransport(endpoint, options.directTransport, options.fetchImpl);
+        this.#fetch = this.#transport.fetch;
         this.#clientVersion = String(options.clientVersion || "development").trim() || "development";
         this.#clientName = String(
           options.clientName || "@vtxmacro/cli external inference host"
@@ -21508,7 +21572,7 @@ var init_mcp_client = __esm({
           return result2;
         } finally {
           if (timing) {
-            const receipt = timing.finish(outcome);
+            const receipt = Object.freeze({ ...timing.finish(outcome), transport_route: this.#transport.route });
             try {
               void Promise.resolve(options.onClaimTiming?.(receipt)).catch(() => void 0);
             } catch {
@@ -28103,7 +28167,7 @@ var require_ajv = __commonJS({
 import { spawn as spawn3 } from "node:child_process";
 import { chmod, lstat as lstat2, open as open2, readFile as readFile2, rename as rename2, rm as rm2, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { dirname as dirname2, isAbsolute as isAbsolute2, join as join2, resolve as resolve2, sep } from "node:path";
+import { dirname as dirname2, isAbsolute as isAbsolute3, join as join2, resolve as resolve2, sep } from "node:path";
 import { createInterface } from "node:readline";
 async function loginCodexSubscription(options) {
   const session = await CodexAppServerSession.start(options);
@@ -29732,7 +29796,7 @@ child.once('close', async (code, signal) => {
         const resolvedHome = resolve2(this.codexHome);
         const resolvedThreadPath = resolve2(threadPath);
         const resolvedSessionsRoot = join2(resolvedHome, "sessions");
-        if (!threadId || !threadPath || !isAbsolute2(threadPath) || !resolvedThreadPath.startsWith(`${resolvedSessionsRoot}${sep}`) || !resolvedThreadPath.endsWith(".jsonl") || thread?.ephemeral !== false || thread?.modelProvider !== "openai" || !Array.isArray(thread?.turns) || thread.turns.length !== 0 || result2.model !== options.requestedModel || result2.modelProvider !== "openai" || result2.serviceTier !== "default" || result2.reasoningEffort !== options.requestedReasoningEffort || String(result2.cwd || "") !== options.workspacePath || !Array.isArray(result2.runtimeWorkspaceRoots) || result2.runtimeWorkspaceRoots.length !== 0 || !Array.isArray(result2.instructionSources) || result2.instructionSources.length !== 0 || result2.approvalPolicy !== "never" || result2.approvalsReviewer !== "user" || sandbox?.type !== "readOnly" || sandbox.networkAccess !== false || permission?.id !== CODEX_INFERENCE_PERMISSION_PROFILE || permission.extends !== null) {
+        if (!threadId || !threadPath || !isAbsolute3(threadPath) || !resolvedThreadPath.startsWith(`${resolvedSessionsRoot}${sep}`) || !resolvedThreadPath.endsWith(".jsonl") || thread?.ephemeral !== false || thread?.modelProvider !== "openai" || !Array.isArray(thread?.turns) || thread.turns.length !== 0 || result2.model !== options.requestedModel || result2.modelProvider !== "openai" || result2.serviceTier !== "default" || result2.reasoningEffort !== options.requestedReasoningEffort || String(result2.cwd || "") !== options.workspacePath || !Array.isArray(result2.runtimeWorkspaceRoots) || result2.runtimeWorkspaceRoots.length !== 0 || !Array.isArray(result2.instructionSources) || result2.instructionSources.length !== 0 || result2.approvalPolicy !== "never" || result2.approvalsReviewer !== "user" || sandbox?.type !== "readOnly" || sandbox.networkAccess !== false || permission?.id !== CODEX_INFERENCE_PERMISSION_PROFILE || permission.extends !== null) {
           throw new CodexAppServerError({
             message: "Codex thread isolation or effective settings were invalid.",
             category: "adapter",
@@ -29818,7 +29882,7 @@ child.once('close', async (code, signal) => {
       async resumeAgentThread(options) {
         const expectedPath = resolve2(options.threadPath);
         const sessionsRoot = join2(resolve2(this.codexHome), "sessions");
-        if (!options.threadId.trim() || !isAbsolute2(options.threadPath) || !expectedPath.startsWith(`${sessionsRoot}${sep}`) || !expectedPath.endsWith(".jsonl")) {
+        if (!options.threadId.trim() || !isAbsolute3(options.threadPath) || !expectedPath.startsWith(`${sessionsRoot}${sep}`) || !expectedPath.endsWith(".jsonl")) {
           throw new CodexAppServerError({
             message: "Codex Agent durable thread receipt was invalid.",
             category: "adapter",
@@ -29863,7 +29927,7 @@ child.once('close', async (code, signal) => {
         const threadPath = String(thread?.path || "");
         const resolvedThreadPath = resolve2(threadPath);
         const sessionsRoot = join2(resolve2(this.codexHome), "sessions");
-        if (!threadId || !threadPath || !isAbsolute2(threadPath) || !resolvedThreadPath.startsWith(`${sessionsRoot}${sep}`) || !resolvedThreadPath.endsWith(".jsonl") || thread?.ephemeral !== false || thread?.modelProvider !== "openai" || !Array.isArray(thread?.turns) || !resumed && thread.turns.length !== 0 || result2.model !== options.requestedModel || result2.modelProvider !== "openai" || result2.serviceTier !== "default" || result2.reasoningEffort !== options.requestedReasoningEffort || String(result2.cwd || "") !== options.workspacePath || !Array.isArray(result2.instructionSources) || result2.instructionSources.length !== 0 || result2.approvalPolicy !== "never" || result2.approvalsReviewer !== "user" || sandbox?.type !== "readOnly" || sandbox.networkAccess !== false || permission?.id !== CODEX_AGENT_PERMISSION_PROFILE || permission.extends !== null) {
+        if (!threadId || !threadPath || !isAbsolute3(threadPath) || !resolvedThreadPath.startsWith(`${sessionsRoot}${sep}`) || !resolvedThreadPath.endsWith(".jsonl") || thread?.ephemeral !== false || thread?.modelProvider !== "openai" || !Array.isArray(thread?.turns) || !resumed && thread.turns.length !== 0 || result2.model !== options.requestedModel || result2.modelProvider !== "openai" || result2.serviceTier !== "default" || result2.reasoningEffort !== options.requestedReasoningEffort || String(result2.cwd || "") !== options.workspacePath || !Array.isArray(result2.instructionSources) || result2.instructionSources.length !== 0 || result2.approvalPolicy !== "never" || result2.approvalsReviewer !== "user" || sandbox?.type !== "readOnly" || sandbox.networkAccess !== false || permission?.id !== CODEX_AGENT_PERMISSION_PROFILE || permission.extends !== null) {
           throw new CodexAppServerError({
             message: "Codex Agent thread isolation or effective settings were invalid.",
             category: "adapter",
@@ -30959,6 +31023,7 @@ function createDefaultInferenceHostRunnerDependencies(options) {
     }),
     createMcpClient: (tokenSource) => new ExternalInferenceMcpClient({
       endpoint: `${options.apiUrl.replace(/\/+$/u, "")}/insights/mcp`,
+      directTransport: options.directTransport,
       tokenSource,
       fetchImpl,
       clientVersion: options.clientVersion,
@@ -33382,7 +33447,11 @@ var init_runner = __esm({
           try {
             await this.dependencies.codexAdapter.close?.();
           } finally {
-            await lock2.release();
+            try {
+              await mcp?.close?.();
+            } finally {
+              await lock2.release();
+            }
           }
         }
       }
@@ -35627,7 +35696,7 @@ import {
 } from "node:fs/promises";
 import { createHash as createHash6, randomBytes as randomBytes4 } from "node:crypto";
 import { tmpdir as tmpdir2 } from "node:os";
-import { isAbsolute as isAbsolute3, join as join4, relative as relative2, resolve as resolve3, sep as sep2 } from "node:path";
+import { isAbsolute as isAbsolute4, join as join4, relative as relative2, resolve as resolve3, sep as sep2 } from "node:path";
 var MAX_PROMPT_BYTES2, CODEX_MODEL_NAME_PATTERN, CODEX_REASONING_EFFORT_PATTERN, codexRecoveryCheckpointProcessFingerprint, proveCodexSameBootQuiescence, tokenUsageReceiptSchema, turnResultReceiptSchema, terminalReceiptSchema, recoveryCheckpointSchema, recoveryFileSchema, FileCodexAttemptRecoveryStore, utf8Bytes, assertAttemptActive, tomlString, permissionConfig, ensureDedicatedCodexHome, createIsolatedCodexAttemptResources, createIsolatedCodexHostResources, validateAttemptInput, isStrictDescendant, assertRecoveryResourceScope, removeRecoveredThread, confirmGuardianTerminatedForRecovery, recoveredCodexProcessExit, reconcileCodexAttemptRecovery, CodexSubscriptionAdapter, CodexAgentSubscriptionAdapter;
 var init_codex_adapter = __esm({
   "lib/inference-host/codex-adapter.ts"() {
@@ -36010,7 +36079,7 @@ var init_codex_adapter = __esm({
       const parentPath = resolve3(parent);
       const candidatePath = resolve3(candidate);
       const scoped = relative2(parentPath, candidatePath);
-      return scoped.length > 0 && !scoped.startsWith(`..${sep2}`) && scoped !== ".." && !isAbsolute3(scoped);
+      return scoped.length > 0 && !scoped.startsWith(`..${sep2}`) && scoped !== ".." && !isAbsolute4(scoped);
     };
     assertRecoveryResourceScope = (checkpoint) => {
       const temporaryRoot = resolve3(tmpdir2());
@@ -36100,7 +36169,7 @@ var init_codex_adapter = __esm({
         }
       }
       if (checkpoint.threadPath !== null) {
-        if (!isAbsolute3(checkpoint.threadPath) || !isStrictDescendant(
+        if (!isAbsolute4(checkpoint.threadPath) || !isStrictDescendant(
           checkpoint.threadPath,
           sessionsRoot
         ) || !checkpoint.threadPath.endsWith(".jsonl")) {
@@ -42462,7 +42531,7 @@ var init_runtime_policy_generated2 = __esm({
 // lib/inference-host/service.ts
 import { spawn as spawn10 } from "node:child_process";
 import { randomUUID as randomUUID9 } from "node:crypto";
-import { createWriteStream, readFileSync } from "node:fs";
+import { createWriteStream, readFileSync as readFileSync2 } from "node:fs";
 import { access as access4, chmod as chmod3, mkdir as mkdir3, readFile as readFile9, rm as rm10, writeFile as writeFile4 } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
 import { dirname as dirname12, join as join13, resolve as resolve10 } from "node:path";
@@ -42505,7 +42574,7 @@ var init_service = __esm({
     isWindowsSubsystemForLinux = (env = process.env, kernelRelease) => Boolean(
       String(env.WSL_INTEROP || "").trim() || String(env.WSL_DISTRO_NAME || "").trim() || /microsoft/iu.test(kernelRelease ?? (() => {
         try {
-          return readFileSync("/proc/sys/kernel/osrelease", "utf8");
+          return readFileSync2("/proc/sys/kernel/osrelease", "utf8");
         } catch {
           return "";
         }
@@ -42790,6 +42859,10 @@ var init_service = __esm({
       if (config2.credentialFilePath) {
         result2.VTX_INFERENCE_HOST_CREDENTIAL_FILE = config2.credentialFilePath;
       }
+      if (config2.mcpDirectTransport) {
+        result2.VTX_INFERENCE_HOST_MCP_CONNECT_ADDRESS = config2.mcpDirectTransport.address;
+        result2.VTX_INFERENCE_HOST_MCP_CA_FILE = config2.mcpDirectTransport.caFile;
+      }
       return result2;
     };
     serviceBootstrapArguments = (bootstrapScript, manifestPath, lockPath) => [
@@ -44725,6 +44798,7 @@ Durable service:
       });
       const dependencies = createDefaultInferenceHostRunnerDependencies({
         apiUrl: options.config.apiUrl,
+        directTransport: options.config.mcpDirectTransport,
         statePath: options.config.statePath,
         processLockPath: options.config.processLockPath,
         credentialStore: options.credentialStore,
@@ -44792,6 +44866,7 @@ Durable service:
       }
       const dependencies = createDefaultInferenceHostRunnerDependencies({
         apiUrl: options.config.apiUrl,
+        directTransport: options.config.mcpDirectTransport,
         statePath: options.config.statePath,
         processLockPath: options.config.processLockPath,
         credentialStore: options.credentialStore,
@@ -47821,7 +47896,7 @@ var init_client = __esm({
 import {
   chmodSync,
   mkdirSync,
-  readFileSync as readFileSync2,
+  readFileSync as readFileSync3,
   renameSync,
   unlinkSync,
   writeFileSync
@@ -47876,7 +47951,7 @@ var init_protection_storage = __esm({
       }
       readValues() {
         try {
-          return parseStoredValues(readFileSync2(this.path, "utf8"), this.path);
+          return parseStoredValues(readFileSync3(this.path, "utf8"), this.path);
         } catch (error48) {
           if (error48.code === "ENOENT") return {};
           throw error48;
@@ -47896,7 +47971,7 @@ var init_protection_storage = __esm({
           chmodSync(temporaryPath, 384);
           renameSync(temporaryPath, this.path);
           chmodSync(this.path, 384);
-          if (readFileSync2(this.path, "utf8") !== serialized) {
+          if (readFileSync3(this.path, "utf8") !== serialized) {
             throw new Error("Headless protection state readback did not match the durable write.");
           }
         } catch (error48) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vtxmacro/cli",
-  "version": "2026.9.48",
+  "version": "2026.9.50",
   "description": "VTX Macro CLI, MCP server, and durable external inference host.",
   "type": "module",
   "license": "UNLICENSED",
@@ -20,6 +20,7 @@
     "node": "^22.19.0 || >=24.0.0"
   },
   "dependencies": {
+    "undici": "8.10.0",
     "@openai/codex": "0.153.3",
     "@earendil-works/pi-coding-agent": "0.85.1",
     "@earendil-works/pi-ai": "0.85.1",