@vtxmacro/cli 2026.9.49 → 2026.9.51

package/bin/vtx-service-bootstrap.js

@@ -16,7 +16,7 @@ import { fileURLToPath } from "node:url";
 // agent-cli-release.json
 var agent_cli_release_default = {
   package_name: "@vtxmacro/cli",
-  package_version: "2026.9.49",
+  package_version: "2026.9.51",
   codex_package_name: "@openai/codex",
   codex_version: "0.153.3",
   copilot_sdk_package_name: "@github/copilot-sdk",

package/bin/vtx.js

@@ -77,7 +77,7 @@ var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
     agent_cli_release_default = {
       package_name: "@vtxmacro/cli",
-      package_version: "2026.9.49",
+      package_version: "2026.9.51",
       codex_package_name: "@openai/codex",
       codex_version: "0.153.3",
       copilot_sdk_package_name: "@github/copilot-sdk",
@@ -17580,13 +17580,34 @@ var init_dist = __esm({
   }
 });
 
+// lib/inference-host/mcp-transport-config.ts
+import { isIP } from "node:net";
+import { isAbsolute, win32 } from "node:path";
+function resolveInferenceMcpDirectTransport(env) {
+  const address = String(env.VTX_INFERENCE_HOST_MCP_CONNECT_ADDRESS || "").trim();
+  const caFile = String(env.VTX_INFERENCE_HOST_MCP_CA_FILE || "").trim();
+  if (!address && !caFile) return void 0;
+  if (!isIP(address) || !caFile || /[\r\n\0]/u.test(caFile) || !isAbsolute(caFile) && !win32.isAbsolute(caFile)) {
+    throw new Error("Direct inference MCP transport requires an IP address and an absolute CA file path.");
+  }
+  return { address, caFile };
+}
+var init_mcp_transport_config = __esm({
+  "lib/inference-host/mcp-transport-config.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+  }
+});
+
 // lib/inference-host/config.ts
 import { randomBytes } from "node:crypto";
 import { spawn } from "node:child_process";
 import { constants } from "node:fs";
 import { lstat, mkdir, open, readFile, realpath, rename, rm } from "node:fs/promises";
 import { homedir } from "node:os";
-import { dirname, isAbsolute, join, relative, resolve, win32 as windowsPath } from "node:path";
+import { dirname, isAbsolute as isAbsolute2, join, relative, resolve, win32 as windowsPath } from "node:path";
 function inferenceBaseDir(env) {
   const configured = String(env.VTX_INFERENCE_HOST_HOME || "").trim();
   return configured || join(homedir(), ".vtx", "inference-host");
@@ -17638,6 +17659,7 @@ function resolveInferenceHostConfig(env = process.env) {
   );
   return {
     apiUrl: String(env.VTX_API_URL || "https://api.vtxmacro.com").replace(/\/+$/, ""),
+    mcpDirectTransport: resolveInferenceMcpDirectTransport(env),
     baseDir,
     instanceName,
     credentialStoreMode: rawMode,
@@ -18160,6 +18182,7 @@ var init_config = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_dist();
+    init_mcp_transport_config();
     loadInferenceReceiptDurabilityTimeoutMs = async () => {
       let configured;
       if (true) {
@@ -18734,7 +18757,7 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
     requireNamedInstancePath = (instanceName, instanceDir, rawPath, label) => {
       if (!rawPath || instanceName === DEFAULT_INFERENCE_HOST_INSTANCE) return rawPath;
       const relativePath = relative(resolve(instanceDir), resolve(rawPath));
-      if (relativePath === ".." || relativePath.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute(relativePath)) {
+      if (relativePath === ".." || relativePath.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute2(relativePath)) {
         throw new Error(`${label} for a named instance must stay inside its isolated instance directory.`);
       }
       return rawPath;
@@ -20609,6 +20632,53 @@ var init_runtime_policy_generated = __esm({
   }
 });
 
+// lib/inference-host/mcp-transport.ts
+import { readFileSync } from "node:fs";
+import { X509Certificate } from "node:crypto";
+import { isIP as isIP2 } from "node:net";
+import { Agent, fetch as undiciFetch } from "undici";
+function createInferenceMcpTransport(endpoint, direct, fetchImpl = fetch) {
+  if (!direct) return { fetch: fetchImpl, route: "public", close: async () => void 0 };
+  const canonical = new URL(endpoint);
+  if (canonical.protocol !== "https:" || canonical.username || canonical.password || canonical.pathname !== "/insights/mcp" || canonical.search || canonical.hash || isIP2(canonical.hostname) || !isIP2(direct.address)) {
+    throw new Error("Direct inference MCP transport requires a canonical HTTPS MCP hostname.");
+  }
+  const ca = readFileSync(direct.caFile, "utf8");
+  new X509Certificate(ca);
+  const agent = new Agent({
+    connect: {
+      ca,
+      rejectUnauthorized: true,
+      servername: canonical.hostname,
+      lookup: (_hostname, options, callback) => {
+        const address = { address: direct.address, family: isIP2(direct.address) };
+        if (options.all) callback(null, [address]);
+        else callback(null, address.address, address.family);
+      }
+    }
+  });
+  const dispatchFetch = fetchImpl === fetch ? undiciFetch : fetchImpl;
+  const routedFetch = (input, init2) => {
+    const url2 = new URL(input instanceof Request ? input.url : String(input));
+    if (url2.href !== canonical.href) {
+      return Promise.reject(new Error("Direct inference transport cannot send requests outside its MCP endpoint."));
+    }
+    return dispatchFetch(input, { ...init2, redirect: "error", dispatcher: agent });
+  };
+  return { fetch: routedFetch, route: "direct", close: async () => {
+    await agent.destroy();
+  } };
+}
+var init_mcp_transport = __esm({
+  "lib/inference-host/mcp-transport.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_mcp_transport_config();
+  }
+});
+
 // lib/inference-host/mcp-client.ts
 var EXTERNAL_INFERENCE_MCP_PROTOCOL_VERSION, EXTERNAL_INFERENCE_AUTOMATED_HOST_TOOLS, EXTERNAL_INFERENCE_OPERATIONAL_TOOLS, ClaimTiming, ExternalInferenceMcpError, DEFAULT_REQUEST_TIMEOUT_MS, MAX_RETRY_AFTER_MS, PUBLIC_TOOL_ERROR_PREFIX, parseRetryAfterMs, identifierSchema2, safeCodeSchema2, publicFailureCodeSchema, publicToolErrorSchema, structuredPublicToolErrorSchema, parsePublicToolError, hostMutationResultSchema, attemptStartResultSchema, agentConnectResultSchema, agentHeartbeatResultSchema, timestampSchema2, positiveGenerationSchema, jsonObjectSchema, agentAssignmentNextArgumentsSchema, agentDataCapabilityDescriptorSchema, agentAssignmentNextResultSchema, agentAssignmentHeartbeatArgumentsSchema, agentAssignmentHeartbeatResultSchema, agentDataCallArgumentsSchema, agentDataCallResultSchema, agentDecisionSubmitArgumentsSchema, agentDecisionSubmitResultSchema, agentDecisionStatusArgumentsSchema, agentDecisionStatusResultSchema, agentAssignmentReleaseArgumentsSchema, agentAssignmentReleaseResultSchema, jobCompletionResultSchema, jobFailureResultSchema, toolContracts, discoveryResultSchema, toolListResultSchema, inlineStructuredContentSchema, protocolMeta, parseJsonDocument, parseSseDocuments, parseResponseDocuments, exactOperationalInventory, exactJson, invalidBoundResult, verifyToolResult, ExternalInferenceMcpClient;
 var init_mcp_client = __esm({
@@ -20619,6 +20689,7 @@ var init_mcp_client = __esm({
     init_define_VTX_PI_MODEL_POLICY();
     init_zod();
     init_runtime_policy_generated();
+    init_mcp_transport();
     init_external_inference_contract();
     EXTERNAL_INFERENCE_MCP_PROTOCOL_VERSION = "2026-07-28";
     EXTERNAL_INFERENCE_AUTOMATED_HOST_TOOLS = [
@@ -21282,6 +21353,7 @@ var init_mcp_client = __esm({
       #endpoint;
       #tokenSource;
       #fetch;
+      #transport;
       #clientVersion;
       #clientName;
       #expectedTools;
@@ -21293,6 +21365,9 @@ var init_mcp_client = __esm({
       #providerHttpStatusTools = /* @__PURE__ */ new Set();
       #grokToolValidationTools = /* @__PURE__ */ new Set();
       #grokResponseIdentityTools = /* @__PURE__ */ new Set();
+      async close() {
+        await this.#transport.close();
+      }
       supportsProviderHttpStatusDiagnostics(tool) {
         return this.#providerHttpStatusTools.has(tool);
       }
@@ -21345,7 +21420,8 @@ var init_mcp_client = __esm({
         }
         this.#endpoint = endpoint;
         this.#tokenSource = options.tokenSource;
-        this.#fetch = options.fetchImpl ?? fetch;
+        this.#transport = createInferenceMcpTransport(endpoint, options.directTransport, options.fetchImpl);
+        this.#fetch = this.#transport.fetch;
         this.#clientVersion = String(options.clientVersion || "development").trim() || "development";
         this.#clientName = String(
           options.clientName || "@vtxmacro/cli external inference host"
@@ -21508,7 +21584,7 @@ var init_mcp_client = __esm({
           return result2;
         } finally {
           if (timing) {
-            const receipt = timing.finish(outcome);
+            const receipt = Object.freeze({ ...timing.finish(outcome), transport_route: this.#transport.route });
             try {
               void Promise.resolve(options.onClaimTiming?.(receipt)).catch(() => void 0);
             } catch {
@@ -28103,7 +28179,7 @@ var require_ajv = __commonJS({
 import { spawn as spawn3 } from "node:child_process";
 import { chmod, lstat as lstat2, open as open2, readFile as readFile2, rename as rename2, rm as rm2, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { dirname as dirname2, isAbsolute as isAbsolute2, join as join2, resolve as resolve2, sep } from "node:path";
+import { dirname as dirname2, isAbsolute as isAbsolute3, join as join2, resolve as resolve2, sep } from "node:path";
 import { createInterface } from "node:readline";
 async function loginCodexSubscription(options) {
   const session = await CodexAppServerSession.start(options);
@@ -29732,7 +29808,7 @@ child.once('close', async (code, signal) => {
         const resolvedHome = resolve2(this.codexHome);
         const resolvedThreadPath = resolve2(threadPath);
         const resolvedSessionsRoot = join2(resolvedHome, "sessions");
-        if (!threadId || !threadPath || !isAbsolute2(threadPath) || !resolvedThreadPath.startsWith(`${resolvedSessionsRoot}${sep}`) || !resolvedThreadPath.endsWith(".jsonl") || thread?.ephemeral !== false || thread?.modelProvider !== "openai" || !Array.isArray(thread?.turns) || thread.turns.length !== 0 || result2.model !== options.requestedModel || result2.modelProvider !== "openai" || result2.serviceTier !== "default" || result2.reasoningEffort !== options.requestedReasoningEffort || String(result2.cwd || "") !== options.workspacePath || !Array.isArray(result2.runtimeWorkspaceRoots) || result2.runtimeWorkspaceRoots.length !== 0 || !Array.isArray(result2.instructionSources) || result2.instructionSources.length !== 0 || result2.approvalPolicy !== "never" || result2.approvalsReviewer !== "user" || sandbox?.type !== "readOnly" || sandbox.networkAccess !== false || permission?.id !== CODEX_INFERENCE_PERMISSION_PROFILE || permission.extends !== null) {
+        if (!threadId || !threadPath || !isAbsolute3(threadPath) || !resolvedThreadPath.startsWith(`${resolvedSessionsRoot}${sep}`) || !resolvedThreadPath.endsWith(".jsonl") || thread?.ephemeral !== false || thread?.modelProvider !== "openai" || !Array.isArray(thread?.turns) || thread.turns.length !== 0 || result2.model !== options.requestedModel || result2.modelProvider !== "openai" || result2.serviceTier !== "default" || result2.reasoningEffort !== options.requestedReasoningEffort || String(result2.cwd || "") !== options.workspacePath || !Array.isArray(result2.runtimeWorkspaceRoots) || result2.runtimeWorkspaceRoots.length !== 0 || !Array.isArray(result2.instructionSources) || result2.instructionSources.length !== 0 || result2.approvalPolicy !== "never" || result2.approvalsReviewer !== "user" || sandbox?.type !== "readOnly" || sandbox.networkAccess !== false || permission?.id !== CODEX_INFERENCE_PERMISSION_PROFILE || permission.extends !== null) {
           throw new CodexAppServerError({
             message: "Codex thread isolation or effective settings were invalid.",
             category: "adapter",
@@ -29818,7 +29894,7 @@ child.once('close', async (code, signal) => {
       async resumeAgentThread(options) {
         const expectedPath = resolve2(options.threadPath);
         const sessionsRoot = join2(resolve2(this.codexHome), "sessions");
-        if (!options.threadId.trim() || !isAbsolute2(options.threadPath) || !expectedPath.startsWith(`${sessionsRoot}${sep}`) || !expectedPath.endsWith(".jsonl")) {
+        if (!options.threadId.trim() || !isAbsolute3(options.threadPath) || !expectedPath.startsWith(`${sessionsRoot}${sep}`) || !expectedPath.endsWith(".jsonl")) {
           throw new CodexAppServerError({
             message: "Codex Agent durable thread receipt was invalid.",
             category: "adapter",
@@ -29863,7 +29939,7 @@ child.once('close', async (code, signal) => {
         const threadPath = String(thread?.path || "");
         const resolvedThreadPath = resolve2(threadPath);
         const sessionsRoot = join2(resolve2(this.codexHome), "sessions");
-        if (!threadId || !threadPath || !isAbsolute2(threadPath) || !resolvedThreadPath.startsWith(`${sessionsRoot}${sep}`) || !resolvedThreadPath.endsWith(".jsonl") || thread?.ephemeral !== false || thread?.modelProvider !== "openai" || !Array.isArray(thread?.turns) || !resumed && thread.turns.length !== 0 || result2.model !== options.requestedModel || result2.modelProvider !== "openai" || result2.serviceTier !== "default" || result2.reasoningEffort !== options.requestedReasoningEffort || String(result2.cwd || "") !== options.workspacePath || !Array.isArray(result2.instructionSources) || result2.instructionSources.length !== 0 || result2.approvalPolicy !== "never" || result2.approvalsReviewer !== "user" || sandbox?.type !== "readOnly" || sandbox.networkAccess !== false || permission?.id !== CODEX_AGENT_PERMISSION_PROFILE || permission.extends !== null) {
+        if (!threadId || !threadPath || !isAbsolute3(threadPath) || !resolvedThreadPath.startsWith(`${sessionsRoot}${sep}`) || !resolvedThreadPath.endsWith(".jsonl") || thread?.ephemeral !== false || thread?.modelProvider !== "openai" || !Array.isArray(thread?.turns) || !resumed && thread.turns.length !== 0 || result2.model !== options.requestedModel || result2.modelProvider !== "openai" || result2.serviceTier !== "default" || result2.reasoningEffort !== options.requestedReasoningEffort || String(result2.cwd || "") !== options.workspacePath || !Array.isArray(result2.instructionSources) || result2.instructionSources.length !== 0 || result2.approvalPolicy !== "never" || result2.approvalsReviewer !== "user" || sandbox?.type !== "readOnly" || sandbox.networkAccess !== false || permission?.id !== CODEX_AGENT_PERMISSION_PROFILE || permission.extends !== null) {
           throw new CodexAppServerError({
             message: "Codex Agent thread isolation or effective settings were invalid.",
             category: "adapter",
@@ -30959,6 +31035,7 @@ function createDefaultInferenceHostRunnerDependencies(options) {
     }),
     createMcpClient: (tokenSource) => new ExternalInferenceMcpClient({
       endpoint: `${options.apiUrl.replace(/\/+$/u, "")}/insights/mcp`,
+      directTransport: options.directTransport,
       tokenSource,
       fetchImpl,
       clientVersion: options.clientVersion,
@@ -33382,7 +33459,11 @@ var init_runner = __esm({
           try {
             await this.dependencies.codexAdapter.close?.();
           } finally {
-            await lock2.release();
+            try {
+              await mcp?.close?.();
+            } finally {
+              await lock2.release();
+            }
           }
         }
       }
@@ -35627,7 +35708,7 @@ import {
 } from "node:fs/promises";
 import { createHash as createHash6, randomBytes as randomBytes4 } from "node:crypto";
 import { tmpdir as tmpdir2 } from "node:os";
-import { isAbsolute as isAbsolute3, join as join4, relative as relative2, resolve as resolve3, sep as sep2 } from "node:path";
+import { isAbsolute as isAbsolute4, join as join4, relative as relative2, resolve as resolve3, sep as sep2 } from "node:path";
 var MAX_PROMPT_BYTES2, CODEX_MODEL_NAME_PATTERN, CODEX_REASONING_EFFORT_PATTERN, codexRecoveryCheckpointProcessFingerprint, proveCodexSameBootQuiescence, tokenUsageReceiptSchema, turnResultReceiptSchema, terminalReceiptSchema, recoveryCheckpointSchema, recoveryFileSchema, FileCodexAttemptRecoveryStore, utf8Bytes, assertAttemptActive, tomlString, permissionConfig, ensureDedicatedCodexHome, createIsolatedCodexAttemptResources, createIsolatedCodexHostResources, validateAttemptInput, isStrictDescendant, assertRecoveryResourceScope, removeRecoveredThread, confirmGuardianTerminatedForRecovery, recoveredCodexProcessExit, reconcileCodexAttemptRecovery, CodexSubscriptionAdapter, CodexAgentSubscriptionAdapter;
 var init_codex_adapter = __esm({
   "lib/inference-host/codex-adapter.ts"() {
@@ -36010,7 +36091,7 @@ var init_codex_adapter = __esm({
       const parentPath = resolve3(parent);
       const candidatePath = resolve3(candidate);
       const scoped = relative2(parentPath, candidatePath);
-      return scoped.length > 0 && !scoped.startsWith(`..${sep2}`) && scoped !== ".." && !isAbsolute3(scoped);
+      return scoped.length > 0 && !scoped.startsWith(`..${sep2}`) && scoped !== ".." && !isAbsolute4(scoped);
     };
     assertRecoveryResourceScope = (checkpoint) => {
       const temporaryRoot = resolve3(tmpdir2());
@@ -36100,7 +36181,7 @@ var init_codex_adapter = __esm({
         }
       }
       if (checkpoint.threadPath !== null) {
-        if (!isAbsolute3(checkpoint.threadPath) || !isStrictDescendant(
+        if (!isAbsolute4(checkpoint.threadPath) || !isStrictDescendant(
           checkpoint.threadPath,
           sessionsRoot
         ) || !checkpoint.threadPath.endsWith(".jsonl")) {
@@ -42462,7 +42543,7 @@ var init_runtime_policy_generated2 = __esm({
 // lib/inference-host/service.ts
 import { spawn as spawn10 } from "node:child_process";
 import { randomUUID as randomUUID9 } from "node:crypto";
-import { createWriteStream, readFileSync } from "node:fs";
+import { createWriteStream, readFileSync as readFileSync2 } from "node:fs";
 import { access as access4, chmod as chmod3, mkdir as mkdir3, readFile as readFile9, rm as rm10, writeFile as writeFile4 } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
 import { dirname as dirname12, join as join13, resolve as resolve10 } from "node:path";
@@ -42505,7 +42586,7 @@ var init_service = __esm({
     isWindowsSubsystemForLinux = (env = process.env, kernelRelease) => Boolean(
       String(env.WSL_INTEROP || "").trim() || String(env.WSL_DISTRO_NAME || "").trim() || /microsoft/iu.test(kernelRelease ?? (() => {
         try {
-          return readFileSync("/proc/sys/kernel/osrelease", "utf8");
+          return readFileSync2("/proc/sys/kernel/osrelease", "utf8");
         } catch {
           return "";
         }
@@ -42790,6 +42871,10 @@ var init_service = __esm({
       if (config2.credentialFilePath) {
         result2.VTX_INFERENCE_HOST_CREDENTIAL_FILE = config2.credentialFilePath;
       }
+      if (config2.mcpDirectTransport) {
+        result2.VTX_INFERENCE_HOST_MCP_CONNECT_ADDRESS = config2.mcpDirectTransport.address;
+        result2.VTX_INFERENCE_HOST_MCP_CA_FILE = config2.mcpDirectTransport.caFile;
+      }
       return result2;
     };
     serviceBootstrapArguments = (bootstrapScript, manifestPath, lockPath) => [
@@ -44725,6 +44810,7 @@ Durable service:
       });
       const dependencies = createDefaultInferenceHostRunnerDependencies({
         apiUrl: options.config.apiUrl,
+        directTransport: options.config.mcpDirectTransport,
         statePath: options.config.statePath,
         processLockPath: options.config.processLockPath,
         credentialStore: options.credentialStore,
@@ -44792,6 +44878,7 @@ Durable service:
       }
       const dependencies = createDefaultInferenceHostRunnerDependencies({
         apiUrl: options.config.apiUrl,
+        directTransport: options.config.mcpDirectTransport,
         statePath: options.config.statePath,
         processLockPath: options.config.processLockPath,
         credentialStore: options.credentialStore,
@@ -47821,7 +47908,7 @@ var init_client = __esm({
 import {
   chmodSync,
   mkdirSync,
-  readFileSync as readFileSync2,
+  readFileSync as readFileSync3,
   renameSync,
   unlinkSync,
   writeFileSync
@@ -47876,7 +47963,7 @@ var init_protection_storage = __esm({
       }
       readValues() {
         try {
-          return parseStoredValues(readFileSync2(this.path, "utf8"), this.path);
+          return parseStoredValues(readFileSync3(this.path, "utf8"), this.path);
         } catch (error48) {
           if (error48.code === "ENOENT") return {};
           throw error48;
@@ -47896,7 +47983,7 @@ var init_protection_storage = __esm({
           chmodSync(temporaryPath, 384);
           renameSync(temporaryPath, this.path);
           chmodSync(this.path, 384);
-          if (readFileSync2(this.path, "utf8") !== serialized) {
+          if (readFileSync3(this.path, "utf8") !== serialized) {
             throw new Error("Headless protection state readback did not match the durable write.");
           }
         } catch (error48) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vtxmacro/cli",
-  "version": "2026.9.49",
+  "version": "2026.9.51",
   "description": "VTX Macro CLI, MCP server, and durable external inference host.",
   "type": "module",
   "license": "UNLICENSED",
@@ -20,6 +20,7 @@
     "node": "^22.19.0 || >=24.0.0"
   },
   "dependencies": {
+    "undici": "8.10.0",
     "@openai/codex": "0.153.3",
     "@earendil-works/pi-coding-agent": "0.85.1",
     "@earendil-works/pi-ai": "0.85.1",