@vtxmacro/cli 2026.9.51 → 2026.9.53

package/bin/vtx.js

@@ -77,7 +77,7 @@ var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
     agent_cli_release_default = {
       package_name: "@vtxmacro/cli",
-      package_version: "2026.9.51",
+      package_version: "2026.9.53",
       codex_package_name: "@openai/codex",
       codex_version: "0.153.3",
       copilot_sdk_package_name: "@github/copilot-sdk",
@@ -17849,7 +17849,7 @@ async function syncInferenceDirectory(path, platform = process.platform) {
 async function replaceAtomicInferencePrivateFile(temporaryPath, destinationPath, options = {}) {
   const platform = options.platform ?? process.platform;
   const renameFile = options.renameFile ?? rename;
-  const sleep4 = options.sleep ?? ((milliseconds) => new Promise((resolve12) => setTimeout(resolve12, milliseconds)));
+  const sleep4 = options.sleep ?? ((milliseconds) => new Promise((resolve13) => setTimeout(resolve13, milliseconds)));
   const maxAttempts = Math.max(1, options.maxAttempts ?? 40);
   const retryDelayMs = Math.max(0, options.retryDelayMs ?? 25);
   for (let attempt = 0; attempt < maxAttempts; attempt += 1) {
@@ -18966,7 +18966,7 @@ var init_credential_store = __esm({
         }
         return;
       }
-      await new Promise((resolve12) => {
+      await new Promise((resolve13) => {
         const terminator = spawn2(
           "taskkill.exe",
           ["/PID", String(pid), "/T", "/F"],
@@ -18984,21 +18984,21 @@ var init_credential_store = __esm({
         const timer = setTimeout(() => {
           terminator.kill("SIGKILL");
           child.kill("SIGKILL");
-          resolve12();
+          resolve13();
         }, CREDENTIAL_COMMAND_TERMINATION_TIMEOUT_MS);
         terminator.once("error", () => {
           clearTimeout(timer);
           child.kill("SIGKILL");
-          resolve12();
+          resolve13();
         });
         terminator.once("close", () => {
           clearTimeout(timer);
           if (child.exitCode === null) child.kill("SIGKILL");
-          resolve12();
+          resolve13();
         });
       });
     };
-    runCredentialCommand = async (command, options) => await new Promise((resolve12, reject) => {
+    runCredentialCommand = async (command, options) => await new Promise((resolve13, reject) => {
       const timeoutMs = options.timeoutMs ?? DEFAULT_CREDENTIAL_COMMAND_TIMEOUT_MS;
       if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1) {
         reject(new Error("OS credential command timeout must be a positive integer."));
@@ -19057,7 +19057,7 @@ var init_credential_store = __esm({
           const transformedStdout = normalizedExitCode === 0 ? command.transformStdout?.(stdout) ?? stdout : stdout;
           settled = true;
           cleanup();
-          resolve12({
+          resolve13({
             exitCode: normalizedExitCode,
             stdout: transformedStdout
           });
@@ -20214,11 +20214,11 @@ async function revokeInferenceCredential(options) {
   }
 }
 async function listenLoopback(server) {
-  await new Promise((resolve12, reject) => {
+  await new Promise((resolve13, reject) => {
     server.once("error", reject);
     server.listen(0, CALLBACK_HOST, () => {
       server.off("error", reject);
-      resolve12();
+      resolve13();
     });
   });
   const address = server.address();
@@ -20229,7 +20229,7 @@ async function listenLoopback(server) {
 }
 async function closeServer(server) {
   if (!server.listening) return;
-  await new Promise((resolve12) => server.close(() => resolve12()));
+  await new Promise((resolve13) => server.close(() => resolve13()));
 }
 async function beginInferenceOAuthLogin(options) {
   const loginTimeoutMs = options.timeoutMs ?? 6e5;
@@ -20285,7 +20285,7 @@ async function beginInferenceOAuthLogin(options) {
     });
     let settled = false;
     let rejectCompletion;
-    const completion = new Promise((resolve12, reject) => {
+    const completion = new Promise((resolve13, reject) => {
       rejectCompletion = reject;
       handler = async (requestUrl, method, writeResponse) => {
         if (settled) {
@@ -20360,7 +20360,7 @@ async function beginInferenceOAuthLogin(options) {
             '<!doctype html><html><head><meta charset="utf-8"><title>VTX authorization complete</title></head><body><main><h1>VTX authorization complete</h1><p>The VTX CLI received your approval. You can close this tab and return to the terminal.</p></main></body></html>'
           );
           await closeServer(server);
-          resolve12({
+          resolve13({
             accessToken: tokens.accessToken,
             expiresIn: tokens.expiresIn,
             credential,
@@ -20541,6 +20541,14 @@ var init_runtime_policy_generated = __esm({
               host_liveness_heartbeat_interval_ms: 3e4,
               host_liveness_recovery_nudge_ttl_ms: 1e4
             }
+          },
+          server_runtime: {
+            prompt_rescue: {
+              client_long_poll_seconds: 20,
+              client_claim_http_timeout_milliseconds: 25e3,
+              client_presence_heartbeat_interval_milliseconds: 3e4,
+              client_presence_http_timeout_milliseconds: 5e3
+            }
           }
         }
       },
@@ -20548,6 +20556,8 @@ var init_runtime_policy_generated = __esm({
         service: {
           update_check_interval_ms: 3e5,
           update_registry_timeout_ms: 15e3,
+          bootstrap_readiness_timeout_ms: 6e5,
+          bootstrap_stop_timeout_ms: 1e4,
           startup_max_attempts: 40,
           startup_poll_interval_ms: 250,
           restart_stable_uptime_ms: 6e4,
@@ -20583,7 +20593,7 @@ var init_runtime_policy_generated = __esm({
       exchange: {
         hyperliquid: {
           client_public_read_budget: {
-            max_weight: 900,
+            max_weight: 1200,
             window_seconds: 60,
             cooldown_seconds: 60,
             metadata_ttl_seconds: 300,
@@ -20594,6 +20604,7 @@ var init_runtime_policy_generated = __esm({
           },
           read_budget: {
             weights: {
+              exchange: 1,
               exchangeStatus: 2,
               clearinghouseState: 2,
               spotClearinghouseState: 2,
@@ -20624,7 +20635,8 @@ var init_runtime_policy_generated = __esm({
               authorizedAgents: 20,
               agents: 20,
               apiWallets: 20
-            }
+            },
+            exchange_action_batch_size: 40
           }
         }
       }
@@ -22504,51 +22516,51 @@ var require_uri_all = __commonJS({
         }
         return uriTokens.join("");
       }
-      function resolveComponents(base2, relative3) {
+      function resolveComponents(base2, relative4) {
         var options = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : {};
         var skipNormalization = arguments[3];
         var target = {};
         if (!skipNormalization) {
           base2 = parse5(serialize(base2, options), options);
-          relative3 = parse5(serialize(relative3, options), options);
+          relative4 = parse5(serialize(relative4, options), options);
         }
         options = options || {};
-        if (!options.tolerant && relative3.scheme) {
-          target.scheme = relative3.scheme;
-          target.userinfo = relative3.userinfo;
-          target.host = relative3.host;
-          target.port = relative3.port;
-          target.path = removeDotSegments(relative3.path || "");
-          target.query = relative3.query;
+        if (!options.tolerant && relative4.scheme) {
+          target.scheme = relative4.scheme;
+          target.userinfo = relative4.userinfo;
+          target.host = relative4.host;
+          target.port = relative4.port;
+          target.path = removeDotSegments(relative4.path || "");
+          target.query = relative4.query;
         } else {
-          if (relative3.userinfo !== void 0 || relative3.host !== void 0 || relative3.port !== void 0) {
-            target.userinfo = relative3.userinfo;
-            target.host = relative3.host;
-            target.port = relative3.port;
-            target.path = removeDotSegments(relative3.path || "");
-            target.query = relative3.query;
+          if (relative4.userinfo !== void 0 || relative4.host !== void 0 || relative4.port !== void 0) {
+            target.userinfo = relative4.userinfo;
+            target.host = relative4.host;
+            target.port = relative4.port;
+            target.path = removeDotSegments(relative4.path || "");
+            target.query = relative4.query;
           } else {
-            if (!relative3.path) {
+            if (!relative4.path) {
               target.path = base2.path;
-              if (relative3.query !== void 0) {
-                target.query = relative3.query;
+              if (relative4.query !== void 0) {
+                target.query = relative4.query;
               } else {
                 target.query = base2.query;
               }
             } else {
-              if (relative3.path.charAt(0) === "/") {
-                target.path = removeDotSegments(relative3.path);
+              if (relative4.path.charAt(0) === "/") {
+                target.path = removeDotSegments(relative4.path);
               } else {
                 if ((base2.userinfo !== void 0 || base2.host !== void 0 || base2.port !== void 0) && !base2.path) {
-                  target.path = "/" + relative3.path;
+                  target.path = "/" + relative4.path;
                 } else if (!base2.path) {
-                  target.path = relative3.path;
+                  target.path = relative4.path;
                 } else {
-                  target.path = base2.path.slice(0, base2.path.lastIndexOf("/") + 1) + relative3.path;
+                  target.path = base2.path.slice(0, base2.path.lastIndexOf("/") + 1) + relative4.path;
                 }
                 target.path = removeDotSegments(target.path);
               }
-              target.query = relative3.query;
+              target.query = relative4.query;
             }
             target.userinfo = base2.userinfo;
             target.host = base2.host;
@@ -22556,10 +22568,10 @@ var require_uri_all = __commonJS({
           }
           target.scheme = base2.scheme;
         }
-        target.fragment = relative3.fragment;
+        target.fragment = relative4.fragment;
         return target;
       }
-      function resolve12(baseURI, relativeURI, options) {
+      function resolve13(baseURI, relativeURI, options) {
         var schemelessOptions = assign({ scheme: "null" }, options);
         return serialize(resolveComponents(parse5(baseURI, schemelessOptions), parse5(relativeURI, schemelessOptions), schemelessOptions, true), schemelessOptions);
       }
@@ -22824,7 +22836,7 @@ var require_uri_all = __commonJS({
       exports2.removeDotSegments = removeDotSegments;
       exports2.serialize = serialize;
       exports2.resolveComponents = resolveComponents;
-      exports2.resolve = resolve12;
+      exports2.resolve = resolve13;
       exports2.normalize = normalize;
       exports2.equal = equal;
       exports2.escapeComponent = escapeComponent;
@@ -23195,18 +23207,18 @@ var require_resolve = __commonJS({
     var util = require_util();
     var SchemaObject = require_schema_obj();
     var traverse = require_json_schema_traverse();
-    module.exports = resolve12;
-    resolve12.normalizeId = normalizeId;
-    resolve12.fullPath = getFullPath;
-    resolve12.url = resolveUrl;
-    resolve12.ids = resolveIds;
-    resolve12.inlineRef = inlineRef;
-    resolve12.schema = resolveSchema;
-    function resolve12(compile, root, ref) {
+    module.exports = resolve13;
+    resolve13.normalizeId = normalizeId;
+    resolve13.fullPath = getFullPath;
+    resolve13.url = resolveUrl;
+    resolve13.ids = resolveIds;
+    resolve13.inlineRef = inlineRef;
+    resolve13.schema = resolveSchema;
+    function resolve13(compile, root, ref) {
       var refVal = this._refs[ref];
       if (typeof refVal == "string") {
         if (this._refs[refVal]) refVal = this._refs[refVal];
-        else return resolve12.call(this, compile, root, refVal);
+        else return resolve13.call(this, compile, root, refVal);
       }
       refVal = refVal || this._schemas[ref];
       if (refVal instanceof SchemaObject) {
@@ -23414,7 +23426,7 @@ var require_error_classes = __commonJS({
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
-    var resolve12 = require_resolve();
+    var resolve13 = require_resolve();
     module.exports = {
       Validation: errorSubclass(ValidationError),
       MissingRef: errorSubclass(MissingRefError)
@@ -23429,8 +23441,8 @@ var require_error_classes = __commonJS({
     };
     function MissingRefError(baseId, ref, message) {
       this.message = message || MissingRefError.message(baseId, ref);
-      this.missingRef = resolve12.url(baseId, ref);
-      this.missingSchema = resolve12.normalizeId(resolve12.fullPath(this.missingRef));
+      this.missingRef = resolve13.url(baseId, ref);
+      this.missingSchema = resolve13.normalizeId(resolve13.fullPath(this.missingRef));
     }
     function errorSubclass(Subclass) {
       Subclass.prototype = Object.create(Error.prototype);
@@ -23967,7 +23979,7 @@ var require_compile = __commonJS({
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
-    var resolve12 = require_resolve();
+    var resolve13 = require_resolve();
     var util = require_util();
     var errorClasses = require_error_classes();
     var stableStringify = require_fast_json_stable_stringify();
@@ -24029,7 +24041,7 @@ var require_compile = __commonJS({
           RULES,
           validate: validateGenerator,
           util,
-          resolve: resolve12,
+          resolve: resolve13,
           resolveRef: resolveRef2,
           usePattern,
           useDefault,
@@ -24091,7 +24103,7 @@ var require_compile = __commonJS({
         return validate;
       }
       function resolveRef2(baseId2, ref, isRoot) {
-        ref = resolve12.url(baseId2, ref);
+        ref = resolve13.url(baseId2, ref);
         var refIndex = refs[ref];
         var _refVal, refCode;
         if (refIndex !== void 0) {
@@ -24108,11 +24120,11 @@ var require_compile = __commonJS({
           }
         }
         refCode = addLocalRef(ref);
-        var v2 = resolve12.call(self2, localCompile, root, ref);
+        var v2 = resolve13.call(self2, localCompile, root, ref);
         if (v2 === void 0) {
           var localSchema = localRefs && localRefs[ref];
           if (localSchema) {
-            v2 = resolve12.inlineRef(localSchema, opts.inlineRefs) ? localSchema : compile.call(self2, localSchema, root, localRefs, baseId2);
+            v2 = resolve13.inlineRef(localSchema, opts.inlineRefs) ? localSchema : compile.call(self2, localSchema, root, localRefs, baseId2);
           }
         }
         if (v2 === void 0) {
@@ -27828,7 +27840,7 @@ var require_ajv = __commonJS({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     var compileSchema = require_compile();
-    var resolve12 = require_resolve();
+    var resolve13 = require_resolve();
     var Cache = require_cache();
     var SchemaObject = require_schema_obj();
     var stableStringify = require_fast_json_stable_stringify();
@@ -27910,7 +27922,7 @@ var require_ajv = __commonJS({
       var id2 = this._getId(schema);
       if (id2 !== void 0 && typeof id2 != "string")
         throw new Error("schema id must be string");
-      key = resolve12.normalizeId(key || id2);
+      key = resolve13.normalizeId(key || id2);
       checkUnique(this, key);
       this._schemas[key] = this._addSchema(schema, _skipValidation, _meta, true);
       return this;
@@ -27954,7 +27966,7 @@ var require_ajv = __commonJS({
       }
     }
     function _getSchemaFragment(self2, ref) {
-      var res = resolve12.schema.call(self2, { schema: {} }, ref);
+      var res = resolve13.schema.call(self2, { schema: {} }, ref);
       if (res) {
         var schema = res.schema, root = res.root, baseId = res.baseId;
         var v = compileSchema.call(self2, schema, root, void 0, baseId);
@@ -27970,7 +27982,7 @@ var require_ajv = __commonJS({
       }
     }
     function _getSchemaObj(self2, keyRef) {
-      keyRef = resolve12.normalizeId(keyRef);
+      keyRef = resolve13.normalizeId(keyRef);
       return self2._schemas[keyRef] || self2._refs[keyRef] || self2._fragments[keyRef];
     }
     function removeSchema(schemaKeyRef) {
@@ -27997,7 +28009,7 @@ var require_ajv = __commonJS({
           this._cache.del(cacheKey);
           var id2 = this._getId(schemaKeyRef);
           if (id2) {
-            id2 = resolve12.normalizeId(id2);
+            id2 = resolve13.normalizeId(id2);
             delete this._schemas[id2];
             delete this._refs[id2];
           }
@@ -28021,13 +28033,13 @@ var require_ajv = __commonJS({
       var cached2 = this._cache.get(cacheKey);
       if (cached2) return cached2;
       shouldAddSchema = shouldAddSchema || this._opts.addUsedSchema !== false;
-      var id2 = resolve12.normalizeId(this._getId(schema));
+      var id2 = resolve13.normalizeId(this._getId(schema));
       if (id2 && shouldAddSchema) checkUnique(this, id2);
       var willValidate = this._opts.validateSchema !== false && !skipValidation;
       var recursiveMeta;
-      if (willValidate && !(recursiveMeta = id2 && id2 == resolve12.normalizeId(schema.$schema)))
+      if (willValidate && !(recursiveMeta = id2 && id2 == resolve13.normalizeId(schema.$schema)))
         this.validateSchema(schema, true);
-      var localRefs = resolve12.ids.call(this, schema);
+      var localRefs = resolve13.ids.call(this, schema);
       var schemaObj = new SchemaObject({
         id: id2,
         schema,
@@ -28611,7 +28623,7 @@ var init_codex_app_server = __esm({
       };
     };
     killWindowsProcessTree = async (pid) => {
-      await new Promise((resolve12, reject) => {
+      await new Promise((resolve13, reject) => {
         const child = spawn3(
           "taskkill.exe",
           ["/PID", String(pid), "/T", "/F"],
@@ -28636,7 +28648,7 @@ var init_codex_app_server = __esm({
         });
         child.once("close", (code) => {
           clearTimeout(timer);
-          if (code === 0 || code === 128) resolve12();
+          if (code === 0 || code === 128) resolve13();
           else reject(new Error("Windows Codex process-tree cleanup failed."));
         });
       });
@@ -28836,7 +28848,7 @@ child.once('close', async (code, signal) => {
       const platform = options.platform ?? process.platform;
       const renameFile = options.renameFile ?? rename2;
       const removeFile = options.removeFile ?? ((path) => rm2(path, { force: true }));
-      const sleep4 = options.sleep ?? ((milliseconds) => new Promise((resolve12) => setTimeout(resolve12, milliseconds)));
+      const sleep4 = options.sleep ?? ((milliseconds) => new Promise((resolve13) => setTimeout(resolve13, milliseconds)));
       const maxAttempts = Math.max(1, options.maxAttempts ?? 40);
       const retryDelayMs = Math.max(0, options.retryDelayMs ?? 25);
       for (let attempt = 0; attempt < maxAttempts; attempt += 1) {
@@ -28928,7 +28940,7 @@ child.once('close', async (code, signal) => {
             throw new Error("Codex guardian terminated before app-server initialization.");
           }
         }
-        await new Promise((resolve12) => setTimeout(resolve12, 25));
+        await new Promise((resolve13) => setTimeout(resolve13, 25));
       }
       throw new Error(`Codex guardian ${expectedState} state was not confirmed.`);
     };
@@ -29310,8 +29322,8 @@ child.once('close', async (code, signal) => {
             dispatchOutcome: "not_dispatched"
           });
         }
-        return await new Promise((resolve12, reject) => {
-          const pending3 = { resolve: resolve12, reject, timer: null, abortCleanup: null };
+        return await new Promise((resolve13, reject) => {
+          const pending3 = { resolve: resolve13, reject, timer: null, abortCleanup: null };
           pending3.timer = setTimeout(() => {
             this.pending.delete(id2);
             this.retireResponseId(id2, method);
@@ -29986,8 +29998,8 @@ child.once('close', async (code, signal) => {
         const agentWebSearches = [];
         let terminalResolve;
         let terminalReject;
-        const terminalPromise = new Promise((resolve12, reject) => {
-          terminalResolve = resolve12;
+        const terminalPromise = new Promise((resolve13, reject) => {
+          terminalResolve = resolve13;
           terminalReject = reject;
         });
         void terminalPromise.catch(() => void 0);
@@ -30547,15 +30559,15 @@ child.once('close', async (code, signal) => {
           ).catch(() => void 0);
         }
         this.process.stdin.end();
-        const exited = await new Promise((resolve12) => {
+        const exited = await new Promise((resolve13) => {
           if (this.process.exitCode !== null) {
-            resolve12(true);
+            resolve13(true);
             return;
           }
-          const timer = setTimeout(() => resolve12(false), 5e3);
+          const timer = setTimeout(() => resolve13(false), 5e3);
           this.process.once("close", () => {
             clearTimeout(timer);
-            resolve12(true);
+            resolve13(true);
           });
         });
         if (exited) return;
@@ -30566,11 +30578,11 @@ child.once('close', async (code, signal) => {
           else this.process.kill("SIGTERM");
         } catch {
         }
-        const terminated = await new Promise((resolve12) => {
-          const timer = setTimeout(() => resolve12(false), 1e3);
+        const terminated = await new Promise((resolve13) => {
+          const timer = setTimeout(() => resolve13(false), 1e3);
           this.process.once("close", () => {
             clearTimeout(timer);
-            resolve12(true);
+            resolve13(true);
           });
         });
         if (!terminated) {
@@ -30580,15 +30592,15 @@ child.once('close', async (code, signal) => {
             else this.process.kill("SIGKILL");
           } catch {
           }
-          await new Promise((resolve12) => {
+          await new Promise((resolve13) => {
             if (this.process.exitCode !== null) {
-              resolve12();
+              resolve13();
               return;
             }
-            const timer = setTimeout(resolve12, 1e3);
+            const timer = setTimeout(resolve13, 1e3);
             this.process.once("close", () => {
               clearTimeout(timer);
-              resolve12();
+              resolve13();
             });
           });
           if (this.process.exitCode === null) {
@@ -31206,13 +31218,13 @@ var init_runner = __esm({
     };
     defaultSleep = async (milliseconds, signal) => {
       if (signal?.aborted) throw abortError();
-      await new Promise((resolve12, reject) => {
+      await new Promise((resolve13, reject) => {
         const finish = (callback) => {
           signal?.removeEventListener("abort", onAbort);
           callback();
         };
         const timer = setTimeout(
-          () => finish(resolve12),
+          () => finish(resolve13),
           Math.max(MIN_SLEEP_MS, milliseconds)
         );
         const onAbort = () => {
@@ -31238,9 +31250,9 @@ var init_runner = __esm({
       let timer = null;
       const settled = await Promise.race([
         promise2.then(() => true, () => true),
-        new Promise((resolve12) => {
+        new Promise((resolve13) => {
           timer = setTimeout(
-            () => resolve12(false),
+            () => resolve13(false),
             Math.max(MIN_SLEEP_MS, timeoutMs)
           );
         })
@@ -31815,8 +31827,8 @@ var init_runner = __esm({
         };
         let quiesceRequested = Boolean(this.options.quiesceSignal?.aborted);
         let wakeQuiesce;
-        const quiesceWake = new Promise((resolve12) => {
-          wakeQuiesce = resolve12;
+        const quiesceWake = new Promise((resolve13) => {
+          wakeQuiesce = resolve13;
         });
         let drainRequested = false;
         let drainReason = "stopped";
@@ -31839,8 +31851,8 @@ var init_runner = __esm({
         let modelCatalogRefresh = null;
         let providerRateLimitRefresh = null;
         let wakeDrain;
-        const drainSignal = new Promise((resolve12) => {
-          wakeDrain = resolve12;
+        const drainSignal = new Promise((resolve13) => {
+          wakeDrain = resolve13;
         });
         const requestDrain = (reason) => {
           const priority = (value) => {
@@ -31931,7 +31943,7 @@ var init_runner = __esm({
           const metadata = await this.dependencies.discoverOAuth({
             signal: this.options.signal
           });
-          let access5 = null;
+          let access6 = null;
           let accessExpiresAt = 0;
           let refreshPromise = null;
           const refreshAccessToken = async (requestOptions = {}) => {
@@ -31944,7 +31956,7 @@ var init_runner = __esm({
               );
               assertLocalCredentialIdentity(localState, refreshed.credential);
               credential = refreshed.credential;
-              access5 = refreshed;
+              access6 = refreshed;
               accessExpiresAt = now() + refreshed.expiresIn * 1e3;
               return refreshed.accessToken;
             })();
@@ -31957,10 +31969,10 @@ var init_runner = __esm({
           await refreshAccessToken({ signal: this.options.signal });
           const tokenSource = {
             accessToken: async (requestOptions) => {
-              if (!access5 || accessExpiresAt - now() <= 5e3) {
+              if (!access6 || accessExpiresAt - now() <= 5e3) {
                 return refreshAccessToken(requestOptions);
               }
-              return access5.accessToken;
+              return access6.accessToken;
             },
             refreshAccessToken
           };
@@ -32215,8 +32227,8 @@ var init_runner = __esm({
             receipt = result2;
             const revision = receiptRevision + 1;
             receiptRevision = revision;
-            const durable = new Promise((resolve12, reject) => {
-              receiptDurabilityWaiters.push({ revision, resolve: resolve12, reject });
+            const durable = new Promise((resolve13, reject) => {
+              receiptDurabilityWaiters.push({ revision, resolve: resolve13, reject });
             });
             scheduleReceiptWriter();
             await durable;
@@ -32332,8 +32344,8 @@ var init_runner = __esm({
             const tool = receipt.registered ? "inference.host.advertise" : "inference.host.register";
             let result2;
             let releaseAdvertisementHandoff;
-            const currentAdvertisementHandoff = new Promise((resolve12) => {
-              releaseAdvertisementHandoff = resolve12;
+            const currentAdvertisementHandoff = new Promise((resolve13) => {
+              releaseAdvertisementHandoff = resolve13;
             });
             advertisementHandoff = currentAdvertisementHandoff;
             try {
@@ -33550,8 +33562,8 @@ var init_runner = __esm({
         let providerDispatchWatchdog = null;
         let providerDispatchWatchdogExpired = false;
         let resolveProviderDispatchWatchdog;
-        const providerDispatchWatchdogSignal = new Promise((resolve12) => {
-          resolveProviderDispatchWatchdog = resolve12;
+        const providerDispatchWatchdogSignal = new Promise((resolve13) => {
+          resolveProviderDispatchWatchdog = resolve13;
         });
         const clearProviderDispatchWatchdog = () => {
           if (providerDispatchWatchdog !== null) clearTimeout(providerDispatchWatchdog);
@@ -33988,8 +34000,8 @@ var init_runner = __esm({
             });
           }
           let resolveTerminalDispatchOutcome;
-          const terminalDispatchOutcomeSignal = new Promise((resolve12) => {
-            resolveTerminalDispatchOutcome = resolve12;
+          const terminalDispatchOutcomeSignal = new Promise((resolve13) => {
+            resolveTerminalDispatchOutcome = resolve13;
           });
           let terminalDispatchOutcomeObserved = false;
           const adapterAttempt = this.dependencies.codexAdapter.runAttempt({
@@ -35293,7 +35305,7 @@ async function reauthorizeInferenceHost(options) {
     throw new Error("Host reauthorization was rejected; the previous host identity was preserved.");
   }
   let candidate = await store.readRecovery();
-  let access5 = options.authorizedAccess ?? null;
+  let access6 = options.authorizedAccess ?? null;
   if (!candidate) {
     if (transition) {
       if (!transition.remote_committed || options.state.client_id !== transition.client_id) {
@@ -35319,7 +35331,7 @@ async function reauthorizeInferenceHost(options) {
     });
     options.emitAuthorization(pending3.authorizationUrl);
     try {
-      access5 = await pending3.completion;
+      access6 = await pending3.completion;
     } catch (error48) {
       await pending3.cancel().catch(() => void 0);
       throw error48;
@@ -35368,7 +35380,7 @@ async function reauthorizeInferenceHost(options) {
     return runStopped(() => reauthorizeInferenceHost({
       ...options,
       withStoppedHost: void 0,
-      authorizedAccess: access5 ?? void 0
+      authorizedAccess: access6 ?? void 0
     }));
   }
   if (transition.service_prepare_pending) {
@@ -35377,8 +35389,8 @@ async function reauthorizeInferenceHost(options) {
     await save();
   }
   if (!transition.remote_committed) {
-    if (!access5) {
-      access5 = await refreshInferenceCredential({
+    if (!access6) {
+      access6 = await refreshInferenceCredential({
         metadata: await discoverInferenceOAuth(config2.apiUrl),
         credential: candidate.credential,
         store: stagedStore
@@ -35396,7 +35408,7 @@ async function reauthorizeInferenceHost(options) {
     });
     let result2;
     try {
-      result2 = await register(access5, transition.advertisement);
+      result2 = await register(access6, transition.advertisement);
     } catch (error48) {
       if (error48 instanceof ExternalInferenceMcpError && error48.code === "tool_rejected" && !error48.retryable && !error48.definitivelyNotApplied) {
         transition.remote_rejected = true;
@@ -35407,7 +35419,7 @@ async function reauthorizeInferenceHost(options) {
       if (!(error48 instanceof ExternalInferenceMcpError) || !error48.definitivelyNotApplied) throw error48;
       transition.advertisement = freshAdvertisement();
       await save();
-      result2 = await register(access5, transition.advertisement);
+      result2 = await register(access6, transition.advertisement);
     }
     if (result2.host.host_id !== next.host_id || result2.host.host_generation !== next.host_generation || result2.host.key_generation !== next.key_generation || result2.host.advertisement_generation !== transition.advertisement.advertisement_generation) {
       throw new Error("Inference host reauthorization returned a different host identity.");
@@ -35489,7 +35501,7 @@ async function createInferenceAgentMcpSession(options) {
     options.fetchImpl,
     { signal: options.signal, timeoutMs: options.requestTimeoutMs }
   );
-  let access5 = null;
+  let access6 = null;
   let accessExpiresAt = 0;
   let refreshPromise = null;
   const refreshAccessToken = async (requestOptions = {}) => {
@@ -35506,7 +35518,7 @@ async function createInferenceAgentMcpSession(options) {
       });
       assertCredentialMatchesState(localState, refreshed.credential);
       credential = refreshed.credential;
-      access5 = refreshed;
+      access6 = refreshed;
       accessExpiresAt = Date.now() + refreshed.expiresIn * 1e3;
       return refreshed.accessToken;
     })();
@@ -35519,10 +35531,10 @@ async function createInferenceAgentMcpSession(options) {
   await refreshAccessToken({ signal: options.signal });
   const tokenSource = {
     accessToken: async (requestOptions) => {
-      if (!access5 || accessExpiresAt - Date.now() <= 5e3) {
+      if (!access6 || accessExpiresAt - Date.now() <= 5e3) {
         return refreshAccessToken(requestOptions);
       }
-      return access5.accessToken;
+      return access6.accessToken;
     },
     refreshAccessToken
   };
@@ -35610,7 +35622,7 @@ var init_codex_binary = __esm({
         spec.binaryName
       );
     };
-    readCodexVersion = async (binaryPath) => await new Promise((resolve12, reject) => {
+    readCodexVersion = async (binaryPath) => await new Promise((resolve13, reject) => {
       const child = spawn4(binaryPath, ["--version"], {
         stdio: ["ignore", "pipe", "pipe"],
         windowsHide: true,
@@ -35648,7 +35660,7 @@ var init_codex_binary = __esm({
           reject(new Error("Codex version probe failed."));
           return;
         }
-        resolve12(stdout.trim());
+        resolve13(stdout.trim());
       });
     });
     verifyPinnedCodexBinary = async (candidatePath, dependencies = {}) => {
@@ -36557,7 +36569,7 @@ var init_codex_adapter = __esm({
         durableSession.session.requireModelCapability(capabilities, modelName, reasoningEffort);
       }
       async waitForCapabilities(preflight, deadlineAtMs, signal) {
-        return await new Promise((resolve12, reject) => {
+        return await new Promise((resolve13, reject) => {
           let settled = false;
           const finish = (callback) => {
             if (settled) return;
@@ -36584,7 +36596,7 @@ var init_codex_adapter = __esm({
             return;
           }
           void preflight.then(
-            (value) => finish(() => resolve12(value)),
+            (value) => finish(() => resolve13(value)),
             (error48) => finish(() => reject(error48))
           );
         });
@@ -38210,9 +38222,9 @@ var init_deepseek_transport_proxy = __esm({
             response.end();
           }
         });
-        await new Promise((resolve12, reject) => {
+        await new Promise((resolve13, reject) => {
           this.server.once("error", reject);
-          this.server.listen(0, "127.0.0.1", () => resolve12());
+          this.server.listen(0, "127.0.0.1", () => resolve13());
         });
         const address = this.server.address();
         if (!address || typeof address === "string") throw new Error("deepseek_proxy_bind_failed");
@@ -38224,7 +38236,7 @@ var init_deepseek_transport_proxy = __esm({
         this.server = null;
         this.urlValue = null;
         if (!server) return;
-        await new Promise((resolve12) => server.close(() => resolve12()));
+        await new Promise((resolve13) => server.close(() => resolve13()));
       }
     };
   }
@@ -38762,11 +38774,11 @@ ${JSON.stringify(input.outputSchema)}`,
           boundary.signal.throwIfAborted();
           let checkpointReached = false;
           let resolveCheckpoint;
-          const checkpoint = new Promise((resolve12) => {
-            resolveCheckpoint = resolve12;
+          const checkpoint = new Promise((resolve13) => {
+            resolveCheckpoint = resolve13;
           });
-          const dispatchGate = new Promise((resolve12) => {
-            releaseAgentDispatch = resolve12;
+          const dispatchGate = new Promise((resolve13) => {
+            releaseAgentDispatch = resolve13;
           });
           ctx.on("llm/stream", (options, next) => {
             if (String(options.sessionId ?? "") !== String(sessionId)) return next();
@@ -39647,7 +39659,7 @@ var init_grok_binary = __esm({
     decompress = promisify(brotliDecompress);
     pending = /* @__PURE__ */ new Map();
     digest = (bytes3) => createHash7("sha256").update(bytes3).digest("hex");
-    verifyVersion = async (path) => new Promise((resolve12, reject) => {
+    verifyVersion = async (path) => new Promise((resolve13, reject) => {
       const child = spawn6(path, ["--version"], {
         stdio: ["ignore", "pipe", "ignore"],
         windowsHide: true,
@@ -39674,7 +39686,7 @@ var init_grok_binary = __esm({
         clearTimeout(timer);
         if (code !== 0 || /^grok\s+(\S+)/u.exec(stdout.trim())?.[1] !== agent_cli_release_default.grok_version) {
           reject(new Error("Grok runtime version does not match its release."));
-        } else resolve12();
+        } else resolve13();
       });
     });
     resolvePinnedGrokBinary = async (stateRoot) => {
@@ -39894,9 +39906,9 @@ var init_grok_transport_proxy = __esm({
         this.server = createServer3((request, response) => {
           void this.handle(request, response);
         });
-        await new Promise((resolve12, reject) => {
+        await new Promise((resolve13, reject) => {
           this.server.once("error", reject);
-          this.server.listen(0, "127.0.0.1", () => resolve12());
+          this.server.listen(0, "127.0.0.1", () => resolve13());
         });
         const address = this.server.address();
         if (!address || typeof address === "string") throw new Error("grok_proxy_bind_failed");
@@ -40272,7 +40284,7 @@ var init_grok_transport_proxy = __esm({
         this.urlValue = null;
         if (!server) return;
         server.closeAllConnections();
-        await new Promise((resolve12) => server.close(() => resolve12()));
+        await new Promise((resolve13) => server.close(() => resolve13()));
       }
     };
     createGrokTransportProxy = async (options) => {
@@ -40453,11 +40465,11 @@ var init_grok_runtime = __esm({
             this.child.kill();
           }
         });
-        this.exit = new Promise((resolve12) => {
+        this.exit = new Promise((resolve13) => {
           this.child.once("error", () => this.fail(new Error("grok_process_start_failed")));
           this.child.once("close", () => {
             this.fail(new Error("grok_process_closed"));
-            resolve12();
+            resolve13();
           });
         });
       }
@@ -40477,8 +40489,8 @@ var init_grok_runtime = __esm({
         let timer;
         let abort;
         try {
-          return await new Promise((resolve12, reject) => {
-            this.pending.set(id2, { resolve: resolve12, reject });
+          return await new Promise((resolve13, reject) => {
+            this.pending.set(id2, { resolve: resolve13, reject });
             timer = setTimeout(() => reject(new Error("grok_deadline_exceeded")), Math.max(1, deadlineAtMs - Date.now()));
             abort = () => reject(new Error("grok_cancelled"));
             signal?.addEventListener("abort", abort, { once: true });
@@ -40552,9 +40564,9 @@ var init_grok_runtime = __esm({
           response.writeHead(400).end();
         }
       });
-      await new Promise((resolve12, reject) => {
+      await new Promise((resolve13, reject) => {
         server.once("error", reject);
-        server.listen(0, "127.0.0.1", resolve12);
+        server.listen(0, "127.0.0.1", resolve13);
       });
       const address = server.address();
       if (!address || typeof address === "string") throw new Error("grok_mcp_listen_failed");
@@ -40565,7 +40577,7 @@ var init_grok_runtime = __esm({
         descriptor: { type: "http", name: "vtx", url: `http://127.0.0.1:${address.port}/${token}`, headers: [] },
         close: async () => {
           server.closeAllConnections();
-          await new Promise((resolve12) => server.close(() => resolve12()));
+          await new Promise((resolve13) => server.close(() => resolve13()));
         }
       };
     };
@@ -41291,7 +41303,7 @@ var init_grok_auth = __esm({
       await prepareGrokHome(options.grokHome);
       const binary = await resolvePinnedGrokBinary(options.stateRoot);
       options.signal?.throwIfAborted();
-      await new Promise((resolve12, reject) => {
+      await new Promise((resolve13, reject) => {
         const child = spawn8(binary.path, ["--no-auto-update", action, ...action === "login" ? ["--device-auth"] : []], {
           cwd: options.grokHome,
           env: grokRuntimeEnvironment(options.grokHome),
@@ -41353,7 +41365,7 @@ var init_grok_auth = __esm({
         child.once("close", (code) => {
           cleanup();
           if (code !== 0 || failed || options.signal?.aborted) reject(new Error(`Grok ${action} did not complete. Run grok-${action} again.`));
-          else resolve12();
+          else resolve13();
         });
         if (options.signal?.aborted) stop();
       });
@@ -42361,6 +42373,74 @@ var init_durable_adapter = __esm({
   }
 });
 
+// lib/inference-host/service-launcher-state.ts
+import { access as access4, readFile as readFile9, rm as rm10 } from "node:fs/promises";
+import { dirname as dirname12, isAbsolute as isAbsolute5, join as join13, relative as relative3, resolve as resolve10 } from "node:path";
+var launcherSibling, within, launcherSelection, readLauncherSelection, readLauncherState, writeLauncherState, targetForSelection;
+var init_service_launcher_state = __esm({
+  "lib/inference-host/service-launcher-state.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_config();
+    launcherSibling = (manifest, suffix) => {
+      if (!manifest.endsWith(".service.json")) throw new Error("Invalid service manifest path.");
+      return `${manifest.slice(0, -".service.json".length)}${suffix}`;
+    };
+    within = (parent, child) => {
+      const part = relative3(resolve10(parent), resolve10(child));
+      return Boolean(part) && !part.startsWith("..") && !isAbsolute5(part);
+    };
+    launcherSelection = (manifest, value) => {
+      if (!value || typeof value !== "object") return null;
+      const r = value;
+      if (r.schema_version !== "vtx_inference_service_release_v1" || r.package_name !== "@vtxmacro/cli" || typeof r.package_version !== "string" || !/^\d{4}\.\d{1,2}\.\d{1,3}$/u.test(r.package_version) || typeof r.integrity !== "string" || typeof r.selected_at !== "string" || !Number.isFinite(Date.parse(r.selected_at)) || typeof r.script !== "string" || !isAbsolute5(r.script) || /[\r\n\0]/u.test(r.script) || !within(launcherSibling(manifest, ".service-releases"), r.script)) return null;
+      return r;
+    };
+    readLauncherSelection = async (manifest) => {
+      try {
+        return launcherSelection(manifest, JSON.parse(await readFile9(launcherSibling(manifest, ".service-release.json"), "utf8")));
+      } catch (error48) {
+        if (error48.code === "ENOENT") return null;
+        throw error48;
+      }
+    };
+    readLauncherState = async (manifest) => {
+      let value;
+      try {
+        value = JSON.parse(await readFile9(launcherSibling(manifest, ".service-launcher.json"), "utf8"));
+      } catch (error48) {
+        if (error48.code === "ENOENT") return null;
+        throw error48;
+      }
+      if (!value || typeof value !== "object") throw new Error("Invalid service launcher state.");
+      const r = value;
+      const target = (v) => {
+        if (!v || typeof v !== "object") return false;
+        const t = v;
+        return typeof t.package_version === "string" && /^\d{4}\.\d{1,2}\.\d{1,3}$/u.test(t.package_version) && typeof t.script === "string" && isAbsolute5(t.script) && !/[\r\n\0]/u.test(t.script) && (within(launcherSibling(manifest, ".service-releases"), t.script) || resolve10(t.script) === resolve10(launcherSibling(manifest, ".service-bootstrap.previous.js"))) && (t.selection === null || (() => {
+          const selected = launcherSelection(manifest, t.selection);
+          return Boolean(selected && selected.package_version === t.package_version && (resolve10(t.script) === resolve10(join13(dirname12(selected.script), "vtx-service-bootstrap.js")) || resolve10(t.script) === resolve10(launcherSibling(manifest, ".service-bootstrap.previous.js"))));
+        })());
+      };
+      if (r.schema_version !== "vtx_inference_service_launcher_v1" || !target(r.active) || r.previous !== null && !target(r.previous) || typeof r.pending !== "boolean") {
+        throw new Error("Invalid service launcher recovery targets.");
+      }
+      return r;
+    };
+    writeLauncherState = async (manifest, state) => {
+      await writeAtomicInferencePrivateFile(launcherSibling(manifest, ".service-launcher.json"), `${JSON.stringify(state)}
+`);
+    };
+    targetForSelection = async (selection) => {
+      const script = join13(dirname12(selection.script), "vtx-service-bootstrap.js");
+      await access4(script);
+      return { package_version: selection.package_version, script, selection };
+    };
+  }
+});
+
 // lib/runtime-policy.generated.json with { type: 'json' }
 var runtime_policy_generated_default2;
 var init_runtime_policy_generated2 = __esm({
@@ -42449,6 +42529,14 @@ var init_runtime_policy_generated2 = __esm({
               host_liveness_heartbeat_interval_ms: 3e4,
               host_liveness_recovery_nudge_ttl_ms: 1e4
             }
+          },
+          server_runtime: {
+            prompt_rescue: {
+              client_long_poll_seconds: 20,
+              client_claim_http_timeout_milliseconds: 25e3,
+              client_presence_heartbeat_interval_milliseconds: 3e4,
+              client_presence_http_timeout_milliseconds: 5e3
+            }
           }
         }
       },
@@ -42456,6 +42544,8 @@ var init_runtime_policy_generated2 = __esm({
         service: {
           update_check_interval_ms: 3e5,
           update_registry_timeout_ms: 15e3,
+          bootstrap_readiness_timeout_ms: 6e5,
+          bootstrap_stop_timeout_ms: 1e4,
           startup_max_attempts: 40,
           startup_poll_interval_ms: 250,
           restart_stable_uptime_ms: 6e4,
@@ -42491,7 +42581,7 @@ var init_runtime_policy_generated2 = __esm({
       exchange: {
         hyperliquid: {
           client_public_read_budget: {
-            max_weight: 900,
+            max_weight: 1200,
             window_seconds: 60,
             cooldown_seconds: 60,
             metadata_ttl_seconds: 300,
@@ -42502,6 +42592,7 @@ var init_runtime_policy_generated2 = __esm({
           },
           read_budget: {
             weights: {
+              exchange: 1,
               exchangeStatus: 2,
               clearinghouseState: 2,
               spotClearinghouseState: 2,
@@ -42532,7 +42623,8 @@ var init_runtime_policy_generated2 = __esm({
               authorizedAgents: 20,
               agents: 20,
               apiWallets: 20
-            }
+            },
+            exchange_action_batch_size: 40
           }
         }
       }
@@ -42544,16 +42636,17 @@ var init_runtime_policy_generated2 = __esm({
 import { spawn as spawn10 } from "node:child_process";
 import { randomUUID as randomUUID9 } from "node:crypto";
 import { createWriteStream, readFileSync as readFileSync2 } from "node:fs";
-import { access as access4, chmod as chmod3, mkdir as mkdir3, readFile as readFile9, rm as rm10, writeFile as writeFile4 } from "node:fs/promises";
+import { access as access5, chmod as chmod3, mkdir as mkdir3, readFile as readFile10, rm as rm11, writeFile as writeFile4 } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
-import { dirname as dirname12, join as join13, resolve as resolve10 } from "node:path";
-var SERVICE_NAME, SYSTEMD_UNIT, LAUNCHD_LABEL, SERVICE_COOPERATIVE_STOP_SECONDS, SERVICE_UPDATE_STARTUP_SECONDS, INFERENCE_HOST_SERVICE_DRAIN_COMMAND, INFERENCE_HOST_SERVICE_QUIESCE_COMMAND, InferenceHostBootstrapRestartRequiredError, inferenceHostServiceChildEnvironment, isWindowsSubsystemForLinux, inferenceHostServiceManifestPath, inferenceHostServiceDesiredPath, inferenceHostServiceLogPath, inferenceHostServiceRuntimePath, xmlEscape, plistEscape, systemdQuote, defaultRunCommand, managerName, assertRuntimeEnvironment, withoutConcurrencyLimit, assertServicePath, manifestGeneration, assertWorker, assertManifest, assertServiceRuntimeState, assertDesiredState, readInferenceHostServiceManifest, readManifestAcrossAtomicReplacement, readInferenceHostServiceRuntime, readRuntimeAcrossAtomicReplacement, readInferenceHostServiceDesired, readDesiredAcrossAtomicReplacement, writeDesired, runtimeEnvironment, serviceBootstrapArguments, windowsOwnedCommandLine, vbScriptString, windowsServiceLauncher, windowsTaskXml, systemdUnit, launchAgentPlist, sameWorker, sameServiceDefinition, sameWorkerSet, InferenceHostServiceManager, appendServiceLog, spawnInferenceHostServiceChild, runInferenceHostServiceSupervisor;
+import { dirname as dirname13, join as join14, resolve as resolve11 } from "node:path";
+var SERVICE_NAME, SYSTEMD_UNIT, LAUNCHD_LABEL, SERVICE_COOPERATIVE_STOP_SECONDS, SERVICE_UPDATE_STARTUP_SECONDS, INFERENCE_HOST_SERVICE_DRAIN_COMMAND, INFERENCE_HOST_SERVICE_QUIESCE_COMMAND, InferenceHostBootstrapRestartRequiredError, inferenceHostServiceChildEnvironment, isWindowsSubsystemForLinux, inferenceHostServiceManifestPath, inferenceHostServiceDesiredPath, inferenceHostServiceLogPath, inferenceHostServiceRuntimePath, xmlEscape, plistEscape, systemdQuote, defaultRunCommand, probeInferenceHostLauncher, managerName, assertRuntimeEnvironment, withoutConcurrencyLimit, assertServicePath, manifestGeneration, assertWorker, assertManifest, assertServiceRuntimeState, assertDesiredState, readInferenceHostServiceManifest, readManifestAcrossAtomicReplacement, readInferenceHostServiceRuntime, readRuntimeAcrossAtomicReplacement, readInferenceHostServiceDesired, readDesiredAcrossAtomicReplacement, writeDesired, runtimeEnvironment, serviceBootstrapArguments, windowsOwnedCommandLine, vbScriptString, windowsServiceLauncher, windowsTaskXml, systemdUnit, launchAgentPlist, sameWorker, sameServiceDefinition, sameWorkerSet, InferenceHostServiceManager, appendServiceLog, spawnInferenceHostServiceChild, runInferenceHostServiceSupervisor;
 var init_service = __esm({
   "lib/inference-host/service.ts"() {
     "use strict";
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
+    init_service_launcher_state();
     init_agent_cli_release();
     init_runtime_policy_generated2();
     init_durable_adapter();
@@ -42619,6 +42712,18 @@ var init_service = __esm({
         stderr: Buffer.concat(stderr).toString("utf8")
       }));
     });
+    probeInferenceHostLauncher = async (executable, destination, bytes3, runCommand = defaultRunCommand) => {
+      const probe = `${destination}.${randomUUID9()}.probe.js`;
+      try {
+        await writeAtomicInferencePrivateFile(probe, bytes3);
+        const result2 = await runCommand(executable, [probe]);
+        if (result2.exitCode !== 1 || result2.stdout.trim() || result2.stderr.trim() !== "Internal service manifest and lock paths are required.") {
+          throw new Error("Copied service launcher failed its isolated startup check.");
+        }
+      } finally {
+        await rm11(probe, { force: true });
+      }
+    };
     managerName = (platform) => {
       if (platform === "win32") return "windows-task-scheduler";
       if (platform === "darwin") return "launch-agent";
@@ -42959,10 +43064,10 @@ WantedBy=default.target
         this.config = config2;
         this.platform = dependencies.platform ?? process.platform;
         this.home = dependencies.homedir ?? homedir2();
-        this.executable = resolve10(dependencies.executable ?? process.execPath);
-        this.script = resolve10(dependencies.script ?? process.argv[1] ?? "");
-        this.bootstrapScript = resolve10(
-          dependencies.bootstrapScript ?? join13(dirname12(this.script), "vtx-service-bootstrap.js")
+        this.executable = resolve11(dependencies.executable ?? process.execPath);
+        this.script = resolve11(dependencies.script ?? process.argv[1] ?? "");
+        this.bootstrapScript = resolve11(
+          dependencies.bootstrapScript ?? join14(dirname13(this.script), "vtx-service-launcher.js")
         );
         this.username = dependencies.username ?? ([process.env.USERDOMAIN, process.env.USERNAME].filter(Boolean).join("\\") || process.env.USER || "");
         this.windowsDirectory = (dependencies.windowsDirectory ?? process.env.SystemRoot ?? process.env.WINDIR ?? "C:\\Windows").replace(/[\\/]+$/u, "");
@@ -43048,16 +43153,16 @@ WantedBy=default.target
       }
       definitionPath() {
         if (this.platform === "win32") return `${this.config.supervisorStatePath}.service-task.xml`;
-        if (this.platform === "darwin") return join13(this.home, "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
-        return join13(this.home, ".config", "systemd", "user", SYSTEMD_UNIT);
+        if (this.platform === "darwin") return join14(this.home, "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
+        return join14(this.home, ".config", "systemd", "user", SYSTEMD_UNIT);
       }
       windowsLauncherPath() {
         return `${this.config.supervisorStatePath}.service-launcher.vbs`;
       }
       async hasBootstrapDefinition() {
         try {
-          await access4(this.serviceBootstrapPath());
-          const definition = await readFile9(
+          await access5(this.serviceBootstrapPath());
+          const definition = await readFile10(
             this.platform === "win32" ? this.windowsLauncherPath() : this.definitionPath(),
             "utf8"
           );
@@ -43187,24 +43292,36 @@ ${result2.stderr}`)) {
         );
       }
       async registerManifestUnlocked(manifest, desiredRunning, targetInstanceName) {
-        await access4(this.bootstrapScript);
+        await access5(this.bootstrapScript);
         const args = serviceBootstrapArguments(
           this.serviceBootstrapPath(),
           this.manifestPath(),
           this.serviceBootstrapLockPath()
         );
         const definition = this.platform === "win32" ? windowsTaskXml(this.windowsLauncherPath(), this.windowsDirectory, this.username) : this.platform === "darwin" ? launchAgentPlist(manifest.executable, args, manifest.log_path) : systemdUnit(manifest.executable, args);
+        const existingRecovery = await readLauncherState(this.manifestPath());
         let managerInstallAttempted = false;
         try {
           await writeAtomicInferencePrivateFile(this.manifestPath(), `${JSON.stringify(manifest, null, 2)}
 `);
           await writeDesired(this.desiredPath(), desiredRunning, this.now());
-          await writeAtomicInferencePrivateFile(
-            this.serviceBootstrapPath(),
-            await readFile9(this.bootstrapScript, "utf8")
-          );
+          const launcherBytes = await readFile10(this.bootstrapScript, "utf8");
+          if (this.bootstrapScript.endsWith("vtx-service-launcher.js") && !existingRecovery) {
+            await probeInferenceHostLauncher(manifest.executable, this.serviceBootstrapPath(), launcherBytes, this.runCommand);
+            const core = launcherSibling(this.manifestPath(), ".service-bootstrap.previous.js");
+            const coreBytes = await readFile10(join14(dirname13(this.bootstrapScript), "vtx-service-bootstrap.js"), "utf8");
+            await probeInferenceHostLauncher(manifest.executable, core, coreBytes, this.runCommand);
+            await writeAtomicInferencePrivateFile(core, coreBytes);
+            await writeLauncherState(this.manifestPath(), {
+              schema_version: "vtx_inference_service_launcher_v1",
+              active: { package_version: agent_cli_release_default.package_version, script: core, selection: null },
+              previous: null,
+              pending: false
+            });
+          }
+          if (!existingRecovery) await writeAtomicInferencePrivateFile(this.serviceBootstrapPath(), launcherBytes);
           await chmod3(this.serviceBootstrapPath(), 448);
-          await mkdir3(dirname12(this.definitionPath()), { recursive: true, mode: 448 });
+          await mkdir3(dirname13(this.definitionPath()), { recursive: true, mode: 448 });
           if (this.platform === "win32") {
             await writeAtomicInferencePrivateFile(
               this.windowsLauncherPath(),
@@ -43257,14 +43374,17 @@ ${cleanup.stderr}`)) {
               );
             }
           }
-          await rm10(this.definitionPath(), { force: true }).catch(() => void 0);
+          await rm11(this.definitionPath(), { force: true }).catch(() => void 0);
           if (this.platform === "win32") {
-            await rm10(this.windowsLauncherPath(), { force: true }).catch(() => void 0);
+            await rm11(this.windowsLauncherPath(), { force: true }).catch(() => void 0);
+          }
+          await rm11(this.manifestPath(), { force: true }).catch(() => void 0);
+          await rm11(this.desiredPath(), { force: true }).catch(() => void 0);
+          await rm11(this.runtimePath(), { force: true }).catch(() => void 0);
+          if (!existingRecovery) await rm11(this.serviceBootstrapPath(), { force: true }).catch(() => void 0);
+          for (const suffix of [".service-launcher.json", ".service-bootstrap.previous.js"]) {
+            if (!existingRecovery) await rm11(launcherSibling(this.manifestPath(), suffix), { force: true }).catch(() => void 0);
           }
-          await rm10(this.manifestPath(), { force: true }).catch(() => void 0);
-          await rm10(this.desiredPath(), { force: true }).catch(() => void 0);
-          await rm10(this.runtimePath(), { force: true }).catch(() => void 0);
-          await rm10(this.serviceBootstrapPath(), { force: true }).catch(() => void 0);
           if (this.platform === "linux") {
             await this.runCommand("systemctl", ["--user", "daemon-reload"]).catch(() => void 0);
           }
@@ -43324,7 +43444,7 @@ ${cleanup.stderr}`)) {
         }
         if (previous) {
           try {
-            await this.uninstallUnlocked();
+            await this.uninstallUnlocked(true);
           } catch (error48) {
             throw new Error(
               "Inference-host service reconfiguration could not stop the previous supervisor; its desired state was restored.",
@@ -43390,15 +43510,15 @@ ${cleanup.stderr}`)) {
         }
         if (this.config.credentialFilePath && otherWorkers.some((worker) => {
           const otherPath = worker.runtime_environment.VTX_INFERENCE_HOST_CREDENTIAL_FILE;
-          return otherPath && resolve10(otherPath) === resolve10(this.config.credentialFilePath);
+          return otherPath && resolve11(otherPath) === resolve11(this.config.credentialFilePath);
         })) {
           throw new Error(
             "Each inference-host instance must use a different private credential file."
           );
         }
-        await access4(this.executable);
-        await access4(this.script);
-        await access4(this.bootstrapScript);
+        await access5(this.executable);
+        await access5(this.script);
+        await access5(this.bootstrapScript);
         const maxConcurrency = options.maxConcurrency ?? null;
         const workers = [
           ...existing?.workers.filter((worker) => worker.instance_name !== this.config.instanceName) ?? [],
@@ -43608,7 +43728,7 @@ ${result2.stderr}`)) {
         const manifest = await readInferenceHostServiceManifest(this.manifestPath());
         const path = manifest?.log_path ?? this.logPath();
         try {
-          const contents = await readFile9(path, "utf8");
+          const contents = await readFile10(path, "utf8");
           const logLines = contents.trimEnd().split(/\r?\n/u);
           const filtered = instanceName ? logLines.filter((line) => {
             try {
@@ -43647,7 +43767,7 @@ ${result2.stderr}`)) {
       async uninstall() {
         return await this.withControlLock(async () => await this.uninstallUnlocked());
       }
-      async uninstallUnlocked() {
+      async uninstallUnlocked(preserveRecovery = false) {
         const manifest = await readInferenceHostServiceManifest(this.manifestPath());
         if (!manifest) throw new Error("Inference-host service is not installed.");
         const current = await this.status();
@@ -43661,16 +43781,21 @@ ${result2.stderr}`)) {
 ${result2.stderr}`)) {
           throw new Error(`Background service uninstall failed: ${result2.stderr.trim()}`);
         }
-        await rm10(this.definitionPath(), { force: true });
-        if (this.platform === "win32") await rm10(this.windowsLauncherPath(), { force: true });
+        await rm11(this.definitionPath(), { force: true });
+        if (this.platform === "win32") await rm11(this.windowsLauncherPath(), { force: true });
         if (this.platform === "linux") await this.runCommand("systemctl", ["--user", "daemon-reload"]);
-        await rm10(this.manifestPath(), { force: true });
-        await rm10(this.desiredPath(), { force: true });
-        await rm10(this.runtimePath(), { force: true });
-        await rm10(this.serviceBootstrapPath(), { force: true });
-        await rm10(this.serviceReleasePath(), { force: true });
-        await rm10(this.serviceReleaseRejectionPath(), { force: true });
-        await rm10(this.serviceReleasesPath(), { recursive: true, force: true });
+        await rm11(this.manifestPath(), { force: true });
+        await rm11(this.desiredPath(), { force: true });
+        await rm11(this.runtimePath(), { force: true });
+        if (!preserveRecovery) {
+          await rm11(this.serviceBootstrapPath(), { force: true });
+          for (const suffix of [".service-launcher.json", ".service-bootstrap.previous.js"]) {
+            await rm11(launcherSibling(this.manifestPath(), suffix), { force: true });
+          }
+          await rm11(this.serviceReleasePath(), { force: true });
+          await rm11(this.serviceReleaseRejectionPath(), { force: true });
+          await rm11(this.serviceReleasesPath(), { recursive: true, force: true });
+        }
         return {
           installed: false,
           desired_running: false,
@@ -43684,7 +43809,7 @@ ${result2.stderr}`)) {
       }
     };
     appendServiceLog = async (path, event, fields = {}) => {
-      await mkdir3(dirname12(path), { recursive: true, mode: 448 });
+      await mkdir3(dirname13(path), { recursive: true, mode: 448 });
       const stream = createWriteStream(path, { flags: "a", mode: 384 });
       await new Promise((resolvePromise, reject) => {
         stream.once("error", reject);
@@ -43813,7 +43938,7 @@ ${result2.stderr}`)) {
     runInferenceHostServiceSupervisor = async (manifestPath, options = {}) => {
       const storedInitialManifest = await readInferenceHostServiceManifest(manifestPath);
       if (!storedInitialManifest) throw new Error("Inference-host service manifest is missing.");
-      const serviceScript = options.serviceScript ? resolve10(options.serviceScript) : null;
+      const serviceScript = options.serviceScript ? resolve11(options.serviceScript) : null;
       const withServiceScript = (manifest) => serviceScript ? { ...manifest, script: serviceScript } : manifest;
       const initialManifest = withServiceScript(storedInitialManifest);
       const desiredPath = manifestPath.replace(/\.service\.json$/u, ".service-desired.json");
@@ -43823,6 +43948,21 @@ ${result2.stderr}`)) {
       const quiesceSignal = options.quiesceSignal ? AbortSignal.any([options.quiesceSignal, migrationQuiesce.signal]) : migrationQuiesce.signal;
       let bootstrapRestartRequired = false;
       let bootstrapMigrationErrorReported = false;
+      const priorSelection = await readLauncherSelection(manifestPath);
+      const parentBootstrapVersion = options.bootstrapVersion ?? process.env.VTX_INFERENCE_HOST_BOOTSTRAP_VERSION;
+      if (serviceScript && options.controlLockPath && parentBootstrapVersion && parentBootstrapVersion !== agent_cli_release_default.package_version && process.env.VTX_INFERENCE_HOST_LAUNCHER_PROTOCOL !== "1" && !await readLauncherState(manifestPath) && priorSelection?.package_version === parentBootstrapVersion) {
+        const previousCore = launcherSibling(manifestPath, ".service-bootstrap.previous.js");
+        await writeAtomicInferencePrivateFile(
+          previousCore,
+          await readFile10(launcherSibling(manifestPath, ".service-bootstrap.js"), "utf8")
+        );
+        await writeLauncherState(manifestPath, {
+          schema_version: "vtx_inference_service_launcher_v1",
+          active: { package_version: parentBootstrapVersion, script: previousCore, selection: priorSelection },
+          previous: null,
+          pending: false
+        });
+      }
       const migrateSelectedBootstrap = async () => {
         if (!serviceScript || !options.controlLockPath || bootstrapRestartRequired || (options.bootstrapVersion ?? process.env.VTX_INFERENCE_HOST_BOOTSTRAP_VERSION) === agent_cli_release_default.package_version || quiesceSignal.aborted || signal.aborted) return;
         let controlLock;
@@ -43835,16 +43975,25 @@ ${result2.stderr}`)) {
         try {
           const current = await readManifestAcrossAtomicReplacement(manifestPath);
           if (!current || current.generation !== appliedManifest.generation || !await readDesiredAcrossAtomicReplacement(desiredPath) || signal.aborted) return;
-          let selected;
-          try {
-            selected = JSON.parse(await readFile9(manifestPath.replace(/\.service\.json$/u, ".service-release.json"), "utf8"));
-          } catch (error48) {
-            if (error48.code === "ENOENT") return;
-            throw error48;
+          const selected = await readLauncherSelection(manifestPath);
+          if (!selected || selected.package_version !== agent_cli_release_default.package_version || resolve11(selected.script) !== serviceScript) return;
+          if (process.env.VTX_INFERENCE_HOST_LAUNCHER_PROTOCOL !== "1") {
+            const launcherPath = launcherSibling(manifestPath, ".service-bootstrap.js");
+            const bytes3 = await readFile10(join14(dirname13(serviceScript), "vtx-service-launcher.js"), "utf8");
+            await (options.probeLauncher ?? probeInferenceHostLauncher)(current.executable, launcherPath, bytes3);
+            const existing = await readLauncherState(manifestPath);
+            if (!existing) throw new Error("Previous private service release is unavailable; refusing unsafe launcher migration.");
+            const previous = existing.active.package_version === selected.package_version ? existing.previous : existing.active;
+            if (!previous) throw new Error("Previous service launcher recovery target is unavailable.");
+            await writeLauncherState(manifestPath, {
+              schema_version: "vtx_inference_service_launcher_v1",
+              active: await targetForSelection(selected),
+              previous,
+              pending: false
+            });
+            if (!await readDesiredAcrossAtomicReplacement(desiredPath) || signal.aborted) return;
+            await writeAtomicInferencePrivateFile(launcherPath, bytes3);
           }
-          if (selected.schema_version !== "vtx_inference_service_release_v1" || selected.package_name !== "@vtxmacro/cli" || selected.package_version !== agent_cli_release_default.package_version || typeof selected.script !== "string" || resolve10(selected.script) !== serviceScript) return;
-          const bytes3 = await readFile9(join13(dirname12(serviceScript), "vtx-service-bootstrap.js"), "utf8");
-          await writeAtomicInferencePrivateFile(manifestPath.replace(/\.service\.json$/u, ".service-bootstrap.js"), bytes3);
           bootstrapRestartRequired = true;
           migrationQuiesce.abort();
         } finally {
@@ -44110,9 +44259,9 @@ __export(cli_exports, {
 });
 import { createHash as createHash12, randomUUID as randomUUID10 } from "node:crypto";
 import { spawn as spawn11 } from "node:child_process";
-import { lstat as lstat9, realpath as realpath8, rm as rm11 } from "node:fs/promises";
+import { lstat as lstat9, realpath as realpath8, rm as rm12 } from "node:fs/promises";
 import { hostname as osHostname } from "node:os";
-import { join as join14, resolve as resolve11 } from "node:path";
+import { join as join15, resolve as resolve12 } from "node:path";
 async function runInferenceHostCli(argv2, env = process.env, dependencies = {}) {
   const warnings = [];
   try {
@@ -44500,7 +44649,7 @@ Durable service:
           if (!raw?.trim()) throw new Error(`${argument} requires a value.`);
           if (argument === "--adapter") adapter = raw.trim();
           if (argument === "--provider") providerId = raw.trim();
-          if (argument === "--exo-root") exoRoot = resolve11(raw.trim());
+          if (argument === "--exo-root") exoRoot = resolve12(raw.trim());
           if (argument === "--model") modelId = raw.trim();
           if (argument === "--model-label") modelLabel = raw.trim();
           if (argument === "--effort") reasoningEffort = raw.trim();
@@ -44516,7 +44665,7 @@ Durable service:
               throw new Error("--lines must be an integer from 1 through 10000.");
             }
           }
-          if (argument === "--service-manifest") serviceManifestPath = resolve11(raw.trim());
+          if (argument === "--service-manifest") serviceManifestPath = resolve12(raw.trim());
           if (argument === "--instance") {
             instanceName = raw.trim();
             instanceExplicit = true;
@@ -44609,10 +44758,24 @@ Durable service:
           quiesce?.();
         }
       };
+      let parentLost = false;
+      const onParentLost = () => {
+        if (parentLost) return;
+        parentLost = true;
+        if (quiesce) quiesce();
+        else abort();
+      };
       input.on("data", onControlInput);
+      input.on("end", onParentLost);
+      input.on("close", onParentLost);
+      input.on("error", onParentLost);
       input.resume();
+      if (input.readableEnded || input.destroyed) onParentLost();
       return () => {
         input.off("data", onControlInput);
+        input.off("end", onParentLost);
+        input.off("close", onParentLost);
+        input.off("error", onParentLost);
         input.pause();
       };
     };
@@ -44714,11 +44877,11 @@ Durable service:
       return raw !== null;
     };
     inspectCodexAuthentication = async (config2) => {
-      const path = join14(config2.codexHomePath, "auth.json");
+      const path = join15(config2.codexHomePath, "auth.json");
       try {
         const before = await lstat9(path);
         const canonical = await realpath8(path);
-        const isPrivate = before.isFile() && !before.isSymbolicLink() && canonical === resolve11(path) && before.size <= 8 * 1024 * 1024 && (process.platform === "win32" || (before.mode & 63) === 0 && (typeof process.getuid !== "function" || before.uid === process.getuid()));
+        const isPrivate = before.isFile() && !before.isSymbolicLink() && canonical === resolve12(path) && before.size <= 8 * 1024 * 1024 && (process.platform === "win32" || (before.mode & 63) === 0 && (typeof process.getuid !== "function" || before.uid === process.getuid()));
         return { present: true, private: isPrivate };
       } catch (error48) {
         if (error48.code === "ENOENT") {
@@ -44735,7 +44898,7 @@ Durable service:
         runtimeReceiptPath(config2),
         "Inference host runtime receipt file"
       );
-      await rm11(codexGuardianReceiptRoot(config2), { recursive: true, force: true });
+      await rm12(codexGuardianReceiptRoot(config2), { recursive: true, force: true });
       await clearInferencePrivateFile(
         codexRecoveryPath(config2),
         "Codex attempt recovery file"
@@ -45043,20 +45206,20 @@ Waiting for approval...
           } catch {
           }
         }
-        let access5;
+        let access6;
         try {
-          access5 = await pending3.completion;
+          access6 = await pending3.completion;
         } catch (error48) {
           await pending3.cancel().catch(() => void 0);
           throw error48;
         }
         const state = {
           schema_version: 1,
-          issuer: access5.credential.issuer,
-          client_id: access5.credential.client_id,
-          host_id: access5.credential.host_id,
+          issuer: access6.credential.issuer,
+          client_id: access6.credential.client_id,
+          host_id: access6.credential.host_id,
           host_generation: 1,
-          key_generation: access5.credential.key_generation
+          key_generation: access6.credential.key_generation
         };
         try {
           await writeInferenceHostLocalState(config2.statePath, state);
@@ -45066,7 +45229,7 @@ Waiting for approval...
             const metadata = await (dependencies.discoverOAuth ?? discoverInferenceOAuth)(config2.apiUrl);
             await (dependencies.revokeCredential ?? revokeInferenceCredential)({
               metadata,
-              credential: access5.credential,
+              credential: access6.credential,
               store
             });
             remoteCleanupConfirmed = true;
@@ -45078,8 +45241,8 @@ Waiting for approval...
                 { cause: stateError }
               );
             }
-            await store.writeRecovery(access5.accountKey, access5.credential);
-            await store.remove(access5.accountKey).catch(() => void 0);
+            await store.writeRecovery(access6.accountKey, access6.credential);
+            await store.remove(access6.accountKey).catch(() => void 0);
           }
           if (!remoteCleanupConfirmed) {
             throw new Error(
@@ -45984,7 +46147,7 @@ Waiting for approval...
       const session = await agentSession(config2, dependencies, warnings);
       const now = dependencies.now ?? (() => /* @__PURE__ */ new Date());
       const sleep4 = dependencies.sleep ?? (async (milliseconds) => {
-        await new Promise((resolve12) => setTimeout(resolve12, milliseconds));
+        await new Promise((resolve13) => setTimeout(resolve13, milliseconds));
       });
       const stopAt = now().getTime() + parsed.waitSeconds * 1e3;
       let state = await readInferenceForegroundAgentControlState(config2.statePath) ?? foregroundAgentControlState(session.localState.host_id, now().toISOString());
@@ -46521,7 +46684,7 @@ Waiting for approval...
           }
           if (parsed.once && !commandLock) break;
           await (dependencies.sleep ?? (async (milliseconds) => {
-            await new Promise((resolve12) => setTimeout(resolve12, milliseconds));
+            await new Promise((resolve13) => setTimeout(resolve13, milliseconds));
           }))(retryDelayMs);
         }
         return {
@@ -46550,7 +46713,7 @@ Waiting for approval...
       const session = await agentSession(config2, dependencies, warnings);
       const now = dependencies.now ?? (() => /* @__PURE__ */ new Date());
       const sleep4 = dependencies.sleep ?? (async (milliseconds) => {
-        await new Promise((resolve12) => setTimeout(resolve12, milliseconds));
+        await new Promise((resolve13) => setTimeout(resolve13, milliseconds));
       });
       const stopAt = now().getTime() + parsed.waitSeconds * 1e3;
       while (true) {
@@ -46867,7 +47030,7 @@ Waiting for approval...
       ) || new Set(record5.cleanup_confirmed_attempt_ids).size !== record5.cleanup_confirmed_attempt_ids.length || [...record5.cleanup_confirmed_attempt_ids].sort().join("\0") !== record5.cleanup_confirmed_attempt_ids.join("\0") || typeof record5.started_at !== "string" || !Number.isFinite(Date.parse(record5.started_at)) || new Date(record5.started_at).toISOString() !== record5.started_at) {
         throw new Error("Inference-host service recovery transaction is invalid.");
       }
-      if (resolve11(record5.recovery_backup_path) !== resolve11(recoveryBackupPath(config2, record5.transaction_id))) {
+      if (resolve12(record5.recovery_backup_path) !== resolve12(recoveryBackupPath(config2, record5.transaction_id))) {
         throw new Error("Inference-host service recovery backup path is invalid.");
       }
       return record5;
@@ -47118,7 +47281,7 @@ Waiting for approval...
               serviceRecoveryTransactionPath(config2),
               "Inference-host service recovery transaction"
             );
-            await rm11(backupPath, { force: true });
+            await rm12(backupPath, { force: true });
           }
         }
       } finally {
@@ -47148,7 +47311,7 @@ Waiting for approval...
             {
               signal: cancellation.signal,
               quiesceSignal: cancellation.quiesceSignal,
-              serviceScript: resolve11(process.argv[1] ?? ""),
+              serviceScript: resolve12(process.argv[1] ?? ""),
               controlLockPath: `${supervisorConfig.supervisorProcessLockPath}.service-control`
             }
           );
@@ -47374,7 +47537,7 @@ Waiting for approval...
         ...selectedEnv,
         ...retainedEnvironment
       });
-      if (resolve11(installedConfig.statePath) !== resolve11(baseConfig.statePath)) {
+      if (resolve12(installedConfig.statePath) !== resolve12(baseConfig.statePath)) {
         throw new Error(
           "Installed inference-host service manifest does not match the requested local state path."
         );
@@ -47393,11 +47556,11 @@ Waiting for approval...
 });
 
 // lib/agent-core/config.ts
-import { mkdir as mkdir5, readFile as readFile10, rm as rm12, writeFile as writeFile5 } from "node:fs/promises";
-import { dirname as dirname13, join as join15 } from "node:path";
+import { mkdir as mkdir5, readFile as readFile11, rm as rm13, writeFile as writeFile5 } from "node:fs/promises";
+import { dirname as dirname14, join as join16 } from "node:path";
 import { homedir as homedir3 } from "node:os";
 function defaultBaseDir() {
-  return join15(homedir3(), ".vtx");
+  return join16(homedir3(), ".vtx");
 }
 function resolveAgentCliConfig(env = process.env) {
   const baseDir = String(env.VTX_HOME || "").trim() || defaultBaseDir();
@@ -47405,8 +47568,8 @@ function resolveAgentCliConfig(env = process.env) {
   const parsedProfile = rawProfile ? Number(rawProfile) : NaN;
   return {
     apiUrl: String(env.VTX_API_URL || "http://localhost:8000").replace(/\/+$/, ""),
-    tokenPath: String(env.VTX_TOKEN_PATH || "").trim() || join15(baseDir, "token.json"),
-    statePath: String(env.VTX_RUNTIME_STATE_PATH || "").trim() || join15(baseDir, "runtime-state.json"),
+    tokenPath: String(env.VTX_TOKEN_PATH || "").trim() || join16(baseDir, "token.json"),
+    statePath: String(env.VTX_RUNTIME_STATE_PATH || "").trim() || join16(baseDir, "runtime-state.json"),
     runtimeDeviceId: String(env.VTX_RUNTIME_DEVICE_ID || "").trim() || null,
     activeProfileId: Number.isFinite(parsedProfile) && parsedProfile > 0 ? parsedProfile : null,
     outputJson: String(env.VTX_OUTPUT || "").trim().toLowerCase() === "json"
@@ -47414,7 +47577,7 @@ function resolveAgentCliConfig(env = process.env) {
 }
 async function readStoredAgentAuth(path) {
   try {
-    const raw = await readFile10(path, "utf8");
+    const raw = await readFile11(path, "utf8");
     if (!raw.trim()) {
       throw new Error(`VTX token file is empty at ${path}. Run "vtx auth login" or remove the file and retry.`);
     }
@@ -47432,16 +47595,16 @@ async function readStoredAgentAuth(path) {
   }
 }
 async function writeStoredAgentAuth(path, auth) {
-  await mkdir5(dirname13(path), { recursive: true });
+  await mkdir5(dirname14(path), { recursive: true });
   await writeFile5(path, `${JSON.stringify(auth, null, 2)}
 `, { encoding: "utf8", mode: 384 });
 }
 async function clearStoredAgentAuth(path) {
-  await rm12(path, { force: true });
+  await rm13(path, { force: true });
 }
 async function readRuntimeState(path) {
   try {
-    const raw = await readFile10(path, "utf8");
+    const raw = await readFile11(path, "utf8");
     const parsed = JSON.parse(raw);
     const profileId = Number(parsed.profileId);
     const runtimeSessionId = String(parsed.runtimeSessionId || "").trim();
@@ -47467,12 +47630,12 @@ async function readRuntimeState(path) {
   }
 }
 async function writeRuntimeState(path, state) {
-  await mkdir5(dirname13(path), { recursive: true });
+  await mkdir5(dirname14(path), { recursive: true });
   await writeFile5(path, `${JSON.stringify(state, null, 2)}
 `, { encoding: "utf8", mode: 384 });
 }
 async function clearRuntimeState(path) {
-  await rm12(path, { force: true });
+  await rm13(path, { force: true });
 }
 var init_config2 = __esm({
   "lib/agent-core/config.ts"() {
@@ -47914,7 +48077,7 @@ import {
   writeFileSync
 } from "node:fs";
 import { randomUUID as randomUUID12 } from "node:crypto";
-import { dirname as dirname14 } from "node:path";
+import { dirname as dirname15 } from "node:path";
 var parseStoredValues, FileBackedProtectionStorage, clientRuntimeProtectionStatePath;
 var init_protection_storage = __esm({
   "lib/agent-core/protection-storage.ts"() {
@@ -47970,7 +48133,7 @@ var init_protection_storage = __esm({
         }
       }
       writeValues(values) {
-        mkdirSync(dirname14(this.path), { recursive: true, mode: 448 });
+        mkdirSync(dirname15(this.path), { recursive: true, mode: 448 });
         const serialized = `${JSON.stringify(values)}
 `;
         const temporaryPath = `${this.path}.${process.pid}.${randomUUID12()}.tmp`;
@@ -48403,7 +48566,7 @@ var init_runtime_redaction = __esm({
 });
 
 // lib/runtime/hyperliquid-public-read.ts
-var policy, weights, budgets, unpersistedBudgets, cache, pending2, PREFIX, abortError2, checkAbort, wait, storage, loadBudget, saveBudget, withBudgetLock, admit, cooldown, reserveHyperliquidPublicReads, readHyperliquidPublicInfo;
+var policy, weights, budgets, unpersistedBudgets, cache, pending2, PREFIX, abortError2, checkAbort, wait, storage, loadBudget, saveBudget, withBudgetLock, HyperliquidPublicReadError, cooldownError, admit, cooldown, cacheTtlMs, eligibleCache, reserveHyperliquidPublicReads, releaseHyperliquidPublicReadReservation, admitHyperliquidExchangeRequest, recordHyperliquidExchangeResponse, readHyperliquidPublicInfo;
 var init_hyperliquid_public_read = __esm({
   "lib/runtime/hyperliquid-public-read.ts"() {
     "use strict";
@@ -48423,7 +48586,7 @@ var init_hyperliquid_public_read = __esm({
     checkAbort = (signal) => {
       if (signal?.aborted) throw abortError2(signal);
     };
-    wait = (ms, signal) => new Promise((resolve12, reject) => {
+    wait = (ms, signal) => new Promise((resolve13, reject) => {
       checkAbort(signal);
       const aborted2 = () => {
         clearTimeout(timer);
@@ -48431,7 +48594,7 @@ var init_hyperliquid_public_read = __esm({
       };
       const timer = setTimeout(() => {
         signal?.removeEventListener("abort", aborted2);
-        resolve12();
+        resolve13();
       }, Math.min(ms, 2147483647));
       signal?.addEventListener("abort", aborted2, { once: true });
     });
@@ -48475,31 +48638,54 @@ var init_hyperliquid_public_read = __esm({
       }
       return work();
     };
-    admit = async (apiUrl, requestType, signal, bundleWeight, bundleId) => {
+    HyperliquidPublicReadError = class extends Error {
+      constructor(code, message, requestType, status, retryAfterMs, requiredWeight, usedWeight, maxWeight) {
+        super(message);
+        this.code = code;
+        this.requestType = requestType;
+        this.status = status;
+        this.retryAfterMs = retryAfterMs;
+        this.requiredWeight = requiredWeight;
+        this.usedWeight = usedWeight;
+        this.maxWeight = maxWeight;
+        this.name = "HyperliquidPublicReadError";
+      }
+    };
+    cooldownError = (requestType, until) => new HyperliquidPublicReadError(
+      "public_cooldown_active",
+      "Hyperliquid public request cooldown is active.",
+      requestType,
+      void 0,
+      Math.max(0, until - Date.now())
+    );
+    admit = async (apiUrl, requestType, signal, bundleWeight, bundleId, deadlineMs) => {
       const key = `${PREFIX}${apiUrl}`;
       const weight = bundleWeight ?? weights[requestType] ?? policy.default_request_weight;
-      if (!(weight > 0 && weight <= policy.max_weight)) throw new Error("Invalid Hyperliquid public read weight.");
+      if (!(weight > 0 && weight <= policy.max_weight)) throw new HyperliquidPublicReadError("public_budget_exhausted", "Hyperliquid public request exceeds the available allowance.", requestType, void 0, void 0, weight, void 0, policy.max_weight);
       for (; ; ) {
         checkAbort(signal);
-        const delay2 = await withBudgetLock(key, signal, () => {
+        const { delay: delay2, usedWeight } = await withBudgetLock(key, signal, () => {
           const now = Date.now();
           const budget = loadBudget(key);
           budget.reservations = budget.reservations.filter((r) => r.at > now - policy.window_seconds * 1e3);
-          if (budget.cooldownUntil > now) throw Object.assign(new Error("Hyperliquid public read rate-limit cooldown."), { status: 429, requestType });
+          if (budget.cooldownUntil > now) throw cooldownError(requestType, budget.cooldownUntil);
           let used = budget.reservations.reduce((sum, r) => sum + r.weight, 0);
+          const usedWeight2 = used;
           if (used + weight <= policy.max_weight) {
             budget.reservations.push({ at: now, weight, ...bundleId ? { id: bundleId } : {} });
             saveBudget(key, budget);
-            return 0;
+            return { delay: 0, usedWeight: usedWeight2 };
           }
           for (const reservation of budget.reservations) {
             used -= reservation.weight;
-            if (used + weight <= policy.max_weight) return Math.max(1, reservation.at + policy.window_seconds * 1e3 - now);
+            if (used + weight <= policy.max_weight) return { delay: Math.max(1, reservation.at + policy.window_seconds * 1e3 - now), usedWeight: usedWeight2 };
           }
           throw new Error("Invalid Hyperliquid public read budget.");
         });
         if (!delay2) return;
-        if (bundleWeight != null) throw Object.assign(new Error("Hyperliquid public read bundle budget exhausted."), { code: "public_budget_exhausted" });
+        if (bundleWeight != null || deadlineMs != null && Date.now() + delay2 >= deadlineMs) {
+          throw new HyperliquidPublicReadError("public_budget_exhausted", "Hyperliquid local public request allowance is exhausted.", requestType, void 0, delay2, weight, usedWeight, policy.max_weight);
+        }
         await wait(delay2, signal);
       }
     };
@@ -48514,32 +48700,73 @@ var init_hyperliquid_public_read = __esm({
         saveBudget(key, budget);
       });
     };
-    reserveHyperliquidPublicReads = async (endpoint, bodies, signal) => {
+    cacheTtlMs = (body, options) => {
+      const requestType = String(body.type);
+      return (["meta", "spotMeta", "perpDexs"].includes(requestType) ? policy.metadata_ttl_seconds : requestType === "userFees" ? policy.user_fees_ttl_seconds : options.cacheAccountMode && ["userAbstraction", "userDexAbstraction"].includes(requestType) ? policy.account_mode_ttl_seconds : 0) * 1e3;
+    };
+    eligibleCache = (apiUrl, body, options) => {
+      const ttl = cacheTtlMs(body, options);
+      const existing = cache.get(`${apiUrl}:${JSON.stringify(body)}`);
+      const horizon = Math.max(Date.now(), options.cacheValidUntilMs ?? Date.now());
+      return ttl > 0 && existing && Date.now() >= existing.fetchedAtMs && horizon - existing.fetchedAtMs < ttl ? existing : void 0;
+    };
+    reserveHyperliquidPublicReads = async (endpoint, bodies, signal, options = {}) => {
       const apiUrl = endpoint.replace(/\/$/, "");
-      const weight = bodies.reduce((sum, body) => sum + (weights[String(body.type)] ?? policy.default_request_weight), 0);
-      const id2 = crypto.randomUUID();
-      const admittedAtMs = Date.now();
-      await admit(apiUrl, "bundle", signal, weight, id2);
+      const cached2 = /* @__PURE__ */ new Map();
       const remaining = /* @__PURE__ */ new Map();
+      let weight = 0;
       for (const body of bodies) {
         const key = JSON.stringify(body);
+        const hit = eligibleCache(apiUrl, body, options);
+        if (hit) {
+          cached2.set(key, hit);
+          continue;
+        }
         remaining.set(key, (remaining.get(key) ?? 0) + 1);
+        weight += weights[String(body.type)] ?? policy.default_request_weight;
       }
-      return { id: id2, endpoint: apiUrl, expiresAtMs: admittedAtMs + policy.window_seconds * 1e3, remaining };
+      const id2 = crypto.randomUUID();
+      const admittedAtMs = Date.now();
+      if (weight) await admit(apiUrl, "bundle", signal, weight, id2, options.cacheValidUntilMs);
+      return { id: id2, closed: false, endpoint: apiUrl, expiresAtMs: admittedAtMs + policy.window_seconds * 1e3, remaining, cached: cached2, cacheValidUntilMs: options.cacheValidUntilMs };
+    };
+    releaseHyperliquidPublicReadReservation = async (reservation) => {
+      reservation.closed = true;
+      const key = `${PREFIX}${reservation.endpoint}`;
+      await withBudgetLock(key, void 0, () => {
+        const budget = loadBudget(key);
+        const row = budget.reservations.find((entry) => entry.id === reservation.id);
+        if (row) {
+          const unused = [...reservation.remaining].reduce((sum, [body, count4]) => sum + (weights[String(JSON.parse(body).type)] ?? policy.default_request_weight) * count4, 0);
+          row.weight = Math.max(0, row.weight - unused);
+          budget.reservations = budget.reservations.filter((entry) => entry.weight > 0);
+          saveBudget(key, budget);
+        }
+        reservation.remaining.clear();
+      });
+    };
+    admitHyperliquidExchangeRequest = async (endpoint, action, signal) => {
+      const batchLength = Math.max(0, ...[action.orders, action.cancels, action.modifies].filter(Array.isArray).map((value) => value.length));
+      const weight = weights.exchange + Math.floor(batchLength / runtime_policy_generated_default.exchange.hyperliquid.read_budget.exchange_action_batch_size);
+      await admit(endpoint.replace(/\/$/, ""), "exchange", signal, weight);
+    };
+    recordHyperliquidExchangeResponse = async (endpoint, response) => {
+      if (response.status === 429) await cooldown(endpoint.replace(/\/$/, ""), response.headers.get("Retry-After"));
     };
     readHyperliquidPublicInfo = async (endpoint, body, options = {}) => {
       const apiUrl = endpoint.replace(/\/$/, "");
       const requestType = String(body.type ?? "info");
-      const ttlSeconds = ["meta", "spotMeta", "perpDexs"].includes(requestType) ? policy.metadata_ttl_seconds : requestType === "userFees" ? policy.user_fees_ttl_seconds : options.cacheAccountMode && ["userAbstraction", "userDexAbstraction"].includes(requestType) ? policy.account_mode_ttl_seconds : 0;
+      const cacheOptions = { ...options, cacheValidUntilMs: options.reservation?.cacheValidUntilMs ?? options.cacheValidUntilMs };
+      const ttlMs = cacheTtlMs(body, cacheOptions);
       const key = `${apiUrl}:${JSON.stringify(body)}`;
       checkAbort(options.signal);
-      if (ttlSeconds) {
+      if (ttlMs) {
         for (; ; ) {
-          const existing = cache.get(key);
-          if (existing && Date.now() - existing.fetchedAtMs >= 0 && Date.now() - existing.fetchedAtMs < ttlSeconds * 500) return existing;
+          const existing = options.reservation?.cached.get(JSON.stringify(body)) ?? eligibleCache(apiUrl, body, cacheOptions);
+          if (existing) return existing;
           const running = pending2.get(key);
           if (!running) break;
-          await new Promise((resolve12, reject) => {
+          await new Promise((resolve13, reject) => {
             const aborted2 = () => {
               options.signal?.removeEventListener("abort", aborted2);
               reject(abortError2(options.signal));
@@ -48547,33 +48774,38 @@ var init_hyperliquid_public_read = __esm({
             options.signal?.addEventListener("abort", aborted2, { once: true });
             running.then(() => {
               options.signal?.removeEventListener("abort", aborted2);
-              resolve12();
+              resolve13();
             });
           });
           checkAbort(options.signal);
         }
       }
       let settled;
-      if (ttlSeconds) pending2.set(key, new Promise((resolve12) => {
-        settled = resolve12;
+      if (ttlMs) pending2.set(key, new Promise((resolve13) => {
+        settled = resolve13;
       }));
       try {
         const reservedKey = JSON.stringify(body);
         const remaining = options.reservation?.remaining.get(reservedKey) ?? 0;
         if (options.reservation?.endpoint === apiUrl && remaining > 0) {
-          if (Date.now() >= options.reservation.expiresAtMs) throw Object.assign(new Error("Hyperliquid public read reservation expired."), { code: "public_budget_exhausted" });
+          if (Date.now() >= options.reservation.expiresAtMs) throw new HyperliquidPublicReadError("public_budget_exhausted", "Hyperliquid public read reservation expired.", requestType);
           await withBudgetLock(`${PREFIX}${apiUrl}`, options.signal, () => {
+            if (options.reservation.closed) throw new HyperliquidPublicReadError("public_budget_exhausted", "Hyperliquid public read bundle is closed.", requestType);
+            if ((options.reservation.remaining.get(reservedKey) ?? 0) <= 0) throw new HyperliquidPublicReadError("public_budget_exhausted", "Hyperliquid request is outside its admitted bundle.", requestType);
             const budget = loadBudget(`${PREFIX}${apiUrl}`);
             const row = budget.reservations.find((entry) => entry.id === options.reservation.id);
-            if (!row || Date.now() >= options.reservation.expiresAtMs) throw Object.assign(new Error("Hyperliquid public read reservation expired."), { code: "public_budget_exhausted" });
+            if (!row || Date.now() >= options.reservation.expiresAtMs) throw new HyperliquidPublicReadError("public_budget_exhausted", "Hyperliquid public read reservation expired.", requestType);
             row.at = Date.now();
             budget.reservations.sort((a, b2) => a.at - b2.at);
+            options.reservation.remaining.set(reservedKey, (options.reservation.remaining.get(reservedKey) ?? 0) - 1);
             saveBudget(`${PREFIX}${apiUrl}`, budget);
           });
-          options.reservation.remaining.set(reservedKey, remaining - 1);
-        } else await admit(apiUrl, requestType, options.signal);
+        } else if (options.reservation) throw new HyperliquidPublicReadError("public_budget_exhausted", "Hyperliquid request is outside its admitted bundle.", requestType);
+        else await admit(apiUrl, requestType, options.signal, void 0, void 0, options.deadlineMs);
         checkAbort(options.signal);
-        if (loadBudget(`${PREFIX}${apiUrl}`).cooldownUntil > Date.now()) throw Object.assign(new Error("Hyperliquid public read rate-limit cooldown."), { status: 429, requestType });
+        if (options.reservation?.closed) throw new HyperliquidPublicReadError("public_budget_exhausted", "Hyperliquid public read bundle is closed.", requestType);
+        const cooldownUntil = loadBudget(`${PREFIX}${apiUrl}`).cooldownUntil;
+        if (cooldownUntil > Date.now()) throw cooldownError(requestType, cooldownUntil);
         const response = await fetch(`${apiUrl}/info`, {
           method: "POST",
           headers: { "Content-Type": "application/json" },
@@ -48581,22 +48813,31 @@ var init_hyperliquid_public_read = __esm({
           signal: options.signal
         });
         if (response.status === 429) await cooldown(apiUrl, response.headers.get("Retry-After"));
-        const payload = await response.json().catch(() => ({}));
+        const payload = await response.json().catch((error48) => {
+          if (error48 instanceof SyntaxError) return {};
+          throw error48;
+        });
         if (!response.ok) {
           const detail = sanitizeRuntimeDiagnosticValue(typeof payload?.response === "string" ? payload.response : typeof payload?.detail === "string" ? payload.detail : "");
+          if (response.status === 429) throw new HyperliquidPublicReadError("public_rate_limited", "Hyperliquid public API returned HTTP 429.", requestType, 429);
           throw Object.assign(new Error(`Hyperliquid info request failed (${response.status}) request_type=${requestType}.${detail ? ` ${detail}` : ""}`), {
             status: response.status,
             requestType
           });
         }
         const result2 = { payload, fetchedAtMs: Date.now() };
-        if (ttlSeconds) {
+        if (ttlMs) {
           cache.set(key, result2);
           while (cache.size > policy.cache_max_entries) cache.delete(cache.keys().next().value);
         }
         return result2;
+      } catch (error48) {
+        if (options.signal?.aborted || error48 instanceof HyperliquidPublicReadError) throw error48;
+        if (error48 instanceof TypeError) throw new HyperliquidPublicReadError("public_network_error", "Hyperliquid public request network failure.", requestType);
+        if (error48 instanceof Error && (error48.name === "TimeoutError" || error48.name === "AbortError")) throw new HyperliquidPublicReadError("public_timeout", "Hyperliquid public request timed out.", requestType);
+        throw error48;
       } finally {
-        if (ttlSeconds) {
+        if (ttlMs) {
           pending2.delete(key);
           settled?.();
         }
@@ -50147,12 +50388,12 @@ var init_hyperliquid_account_state_adapter = __esm({
       if (signal.aborted) {
         throw createAbortError(abortMessage);
       }
-      return new Promise((resolve12, reject) => {
+      return new Promise((resolve13, reject) => {
         const onAbort = () => {
           reject(createAbortError(abortMessage));
         };
         signal.addEventListener("abort", onAbort, { once: true });
-        promise2.then(resolve12, reject).finally(() => {
+        promise2.then(resolve13, reject).finally(() => {
           signal.removeEventListener("abort", onAbort);
         });
       });
@@ -50593,273 +50834,283 @@ var init_hyperliquid_account_state_adapter = __esm({
       dexNames,
       staleIf429MaxAgeMs
     }) => {
-      const userFeesPromise = input.includeEffectiveTakerRate === true ? (async () => ({
-        ...await readHyperliquidPublicInfo(apiUrl, { type: "userFees", user: walletAddress }, { signal: input.signal }).catch((error48) => {
-          if (input.signal?.aborted) throw error48;
-          return { payload: null, fetchedAtMs: Date.now() };
-        }).then((result2) => ({ payload: result2.payload, capturedAt: new Date(result2.fetchedAtMs).toISOString() }))
-      }))() : Promise.resolve(null);
-      const exactAccountModePromise = input.includeExactAccountMode === true ? (async () => {
-        const abstractionRead = await readHyperliquidPublicInfo(apiUrl, { type: "userAbstraction", user: walletAddress }, { signal: input.signal, cacheAccountMode: true });
-        const userAbstraction = abstractionRead.payload;
-        let capturedAtMs = abstractionRead.fetchedAtMs;
-        const preliminaryMode = extractCanonicalHyperliquidAccountMode(userAbstraction);
-        if (!preliminaryMode) {
-          throw new Error("Exact Hyperliquid userAbstraction response is invalid.");
-        }
-        let userDexAbstraction;
-        if (preliminaryMode === "default" || preliminaryMode === "disabled") {
-          const dexRead = await readHyperliquidPublicInfo(apiUrl, { type: "userDexAbstraction", user: walletAddress }, { signal: input.signal, cacheAccountMode: true });
-          userDexAbstraction = dexRead.payload;
-          capturedAtMs = Math.min(capturedAtMs, dexRead.fetchedAtMs);
-        }
-        return {
-          accountMode: resolveExactHyperliquidAccountMode(
-            userAbstraction,
-            userDexAbstraction
-          ),
-          capturedAt: new Date(capturedAtMs).toISOString()
-        };
-      })() : Promise.resolve(null);
-      await Promise.all([userFeesPromise, exactAccountModePromise]);
-      const metadataByDex = /* @__PURE__ */ new Map();
-      if (input.includeEffectiveTakerRate === true) {
-        await Promise.all(["", ...dexNames].map(async (dex) => {
-          try {
-            metadataByDex.set(dex, await fetchHyperliquidInfoPayload(apiUrl, { type: "meta", ...dex ? { dex } : {} }, input.signal));
-          } catch (error48) {
-            if (input.signal?.aborted) throw error48;
-            metadataByDex.set(dex, null);
-          }
-        }));
-      }
+      const metadataBodies = input.includeEffectiveTakerRate === true ? ["", ...dexNames].map((dex) => ({ type: "meta", ...dex ? { dex } : {} })) : [];
       const reservation = await reserveHyperliquidPublicReads(apiUrl, [
         { type: "clearinghouseState", user: walletAddress },
         ...dexNames.map((dex) => ({ type: "clearinghouseState", user: walletAddress, dex })),
         { type: "spotClearinghouseState", user: walletAddress },
-        ...input.includeActiveAssetData === false ? [] : activeAssetRequestTypes.map((type) => ({ type, user: walletAddress, coin: symbol2 }))
-      ], input.signal);
-      const perpsPromise = (async () => {
-        const defaultResponse = await fetchHyperliquidInfoPayload(
-          apiUrl,
-          { type: "clearinghouseState", user: walletAddress },
-          input.signal,
-          reservation
-        );
+        ...input.includeActiveAssetData === false ? [] : activeAssetRequestTypes.map((type) => ({ type, user: walletAddress, coin: symbol2 })),
+        ...input.includeEffectiveTakerRate === true ? [{ type: "userFees", user: walletAddress }, ...metadataBodies] : [],
+        ...input.includeExactAccountMode === true ? [
+          { type: "userAbstraction", user: walletAddress },
+          { type: "userDexAbstraction", user: walletAddress }
+        ] : []
+      ], input.signal, { cacheAccountMode: true, cacheValidUntilMs: input.publicReadDeadlineMs });
+      try {
+        const userFeesPromise = input.includeEffectiveTakerRate === true ? (async () => ({
+          ...await readHyperliquidPublicInfo(apiUrl, { type: "userFees", user: walletAddress }, { signal: input.signal, reservation }).catch((error48) => {
+            if (input.signal?.aborted || error48 instanceof HyperliquidPublicReadError || isRateLimitError(error48)) throw error48;
+            return { payload: null, fetchedAtMs: Date.now() };
+          }).then((result2) => ({ payload: result2.payload, capturedAt: new Date(result2.fetchedAtMs).toISOString() }))
+        }))() : Promise.resolve(null);
+        const exactAccountModePromise = input.includeExactAccountMode === true ? (async () => {
+          const abstractionRead = await readHyperliquidPublicInfo(apiUrl, { type: "userAbstraction", user: walletAddress }, { signal: input.signal, reservation, cacheAccountMode: true });
+          const userAbstraction = abstractionRead.payload;
+          let capturedAtMs = abstractionRead.fetchedAtMs;
+          const preliminaryMode = extractCanonicalHyperliquidAccountMode(userAbstraction);
+          if (!preliminaryMode) {
+            throw new Error("Exact Hyperliquid userAbstraction response is invalid.");
+          }
+          let userDexAbstraction;
+          if (preliminaryMode === "default" || preliminaryMode === "disabled") {
+            const dexRead = await readHyperliquidPublicInfo(apiUrl, { type: "userDexAbstraction", user: walletAddress }, { signal: input.signal, reservation, cacheAccountMode: true });
+            userDexAbstraction = dexRead.payload;
+            capturedAtMs = Math.min(capturedAtMs, dexRead.fetchedAtMs);
+          }
+          return {
+            accountMode: resolveExactHyperliquidAccountMode(
+              userAbstraction,
+              userDexAbstraction
+            ),
+            capturedAt: new Date(capturedAtMs).toISOString()
+          };
+        })() : Promise.resolve(null);
+        await Promise.all([userFeesPromise, exactAccountModePromise]);
+        const metadataByDex = /* @__PURE__ */ new Map();
         if (input.includeEffectiveTakerRate === true) {
-          requirePromptClearinghouseState(defaultResponse, "default");
-        }
-        const dexResponses = await Promise.all(
-          dexNames.map(async (dexName) => {
-            const response = await fetchHyperliquidInfoPayload(
-              apiUrl,
-              { type: "clearinghouseState", user: walletAddress, dex: dexName },
-              input.signal,
-              reservation
-            );
-            if (input.includeEffectiveTakerRate === true) {
-              requirePromptClearinghouseState(response, dexName);
+          await Promise.all(["", ...dexNames].map(async (dex) => {
+            try {
+              metadataByDex.set(dex, await fetchHyperliquidInfoPayload(apiUrl, { type: "meta", ...dex ? { dex } : {} }, input.signal, reservation));
+            } catch (error48) {
+              if (input.signal?.aborted || error48 instanceof HyperliquidPublicReadError || isRateLimitError(error48)) throw error48;
+              metadataByDex.set(dex, null);
             }
-            return {
-              dex: dexName,
-              payload: prefixHip3PositionCoins(response, dexName),
-              rawPayload: response
-            };
-          })
-        );
-        const selectedPayload = selectedDex ? dexResponses.find((entry) => entry.dex === selectedDex)?.payload : defaultResponse;
-        if (!selectedPayload) {
-          throw new Error(`Missing selected Hyperliquid clearinghouse state for DEX ${selectedDex}.`);
+          }));
         }
-        return {
-          payload: aggregateClearinghouseResponses([
-            defaultResponse,
-            ...dexResponses.map((entry) => entry.payload)
-          ]),
-          selectedPayload,
-          dexPayloads: [
-            { dex: "", payload: defaultResponse },
-            ...dexResponses.map(({ dex, rawPayload }) => ({ dex, payload: rawPayload }))
-          ],
-          capturedAt: (/* @__PURE__ */ new Date()).toISOString()
-        };
-      })();
-      const spotPromise = (async () => {
-        let payload;
-        try {
-          payload = await fetchHyperliquidInfoPayload(
+        const perpsPromise = (async () => {
+          const defaultResponse = await fetchHyperliquidInfoPayload(
             apiUrl,
-            { type: "spotClearinghouseState", user: walletAddress },
+            { type: "clearinghouseState", user: walletAddress },
             input.signal,
             reservation
           );
-        } catch (error48) {
-          recordInfoRateLimitCooldownFromError(apiUrl, error48, staleIf429MaxAgeMs);
-          if (input.forceRefresh || input.includeEffectiveTakerRate === true) {
-            throw error48;
+          if (input.includeEffectiveTakerRate === true) {
+            requirePromptClearinghouseState(defaultResponse, "default");
+          }
+          const dexResponses = await Promise.all(
+            dexNames.map(async (dexName) => {
+              const response = await fetchHyperliquidInfoPayload(
+                apiUrl,
+                { type: "clearinghouseState", user: walletAddress, dex: dexName },
+                input.signal,
+                reservation
+              );
+              if (input.includeEffectiveTakerRate === true) {
+                requirePromptClearinghouseState(response, dexName);
+              }
+              return {
+                dex: dexName,
+                payload: prefixHip3PositionCoins(response, dexName),
+                rawPayload: response
+              };
+            })
+          );
+          const selectedPayload = selectedDex ? dexResponses.find((entry) => entry.dex === selectedDex)?.payload : defaultResponse;
+          if (!selectedPayload) {
+            throw new Error(`Missing selected Hyperliquid clearinghouse state for DEX ${selectedDex}.`);
           }
-          payload = {};
-        }
-        return { payload, capturedAt: (/* @__PURE__ */ new Date()).toISOString() };
-      })();
-      const activeAssetPromise = input.includeActiveAssetData === false ? Promise.resolve(null) : (async () => {
-        let lastError = null;
-        for (const typeName of activeAssetRequestTypes) {
+          return {
+            payload: aggregateClearinghouseResponses([
+              defaultResponse,
+              ...dexResponses.map((entry) => entry.payload)
+            ]),
+            selectedPayload,
+            dexPayloads: [
+              { dex: "", payload: defaultResponse },
+              ...dexResponses.map(({ dex, rawPayload }) => ({ dex, payload: rawPayload }))
+            ],
+            capturedAt: (/* @__PURE__ */ new Date()).toISOString()
+          };
+        })();
+        const spotPromise = (async () => {
+          let payload;
           try {
-            const payload = await fetchHyperliquidInfoPayload(
+            payload = await fetchHyperliquidInfoPayload(
               apiUrl,
-              { type: typeName, user: walletAddress, coin: symbol2 },
+              { type: "spotClearinghouseState", user: walletAddress },
               input.signal,
               reservation
             );
-            return { payload, type: typeName };
           } catch (error48) {
-            lastError = error48;
             recordInfoRateLimitCooldownFromError(apiUrl, error48, staleIf429MaxAgeMs);
-            if (isRateLimitError(error48)) throw error48;
-            if (typeName === "userActiveAssetData" && isUnsupportedUserActiveAssetError(error48)) {
-              rememberUnsupportedUserActiveAssetKey(activeAssetCacheKey);
+            if (input.forceRefresh || input.includeEffectiveTakerRate === true) {
+              throw error48;
             }
+            payload = {};
           }
-        }
-        throw lastError instanceof Error ? lastError : new Error("Failed to fetch browser active asset data.");
-      })();
-      const [perpsResult, spotResult, activeAssetResult, userFeesResult, exactAccountMode] = await Promise.all([
-        perpsPromise,
-        spotPromise,
-        activeAssetPromise,
-        userFeesPromise,
-        exactAccountModePromise
-      ]);
-      const perpsResponse = perpsResult.payload;
-      const accountSummaryPerpsResponse = input.scopeAccountSummaryToSelectedDex === true ? perpsResult.selectedPayload : perpsResponse;
-      const spotResponse = spotResult.payload;
-      const userFeesResponse = userFeesResult?.payload ?? null;
-      if (input.includeEffectiveTakerRate === true) {
-        requirePromptSpotState(spotResponse);
-      }
-      let takerRate;
-      if (input.includeEffectiveTakerRate === true) {
-        const raw = userFeesResponse?.userCrossRate;
-        if ((typeof raw === "number" || typeof raw === "string" && raw.trim() !== "") && Number.isFinite(Number(raw)) && Number(raw) >= 0 && Number(raw) < 1) takerRate = Number(raw);
-      }
-      let effectiveTakerRates;
-      if (input.includeEffectiveTakerRate === true) {
-        const feeSymbols = [...new Set([
-          ...input.feeSymbols ?? [symbol2],
-          ...parseInfoPositions(perpsResponse).filter((position) => Number(position.size) !== 0).map((position) => position.symbol)
-        ].map(normalizeHyperliquidMarketSymbol).filter(Boolean))].sort();
-        const feeDexes = [...new Set(feeSymbols.map(getHyperliquidMarketDex))];
-        const metadata = await Promise.all(feeDexes.map(async (dex) => {
-          try {
-            const payload = metadataByDex.get(dex) ?? null;
-            return [dex, payload];
-          } catch (error48) {
-            if (input.signal?.aborted) throw error48;
-            return [dex, null];
+          return { payload, capturedAt: (/* @__PURE__ */ new Date()).toISOString() };
+        })();
+        const activeAssetPromise = input.includeActiveAssetData === false ? Promise.resolve(null) : (async () => {
+          let lastError = null;
+          for (const typeName of activeAssetRequestTypes) {
+            try {
+              const payload = await fetchHyperliquidInfoPayload(
+                apiUrl,
+                { type: typeName, user: walletAddress, coin: symbol2 },
+                input.signal,
+                reservation
+              );
+              return { payload, type: typeName };
+            } catch (error48) {
+              lastError = error48;
+              recordInfoRateLimitCooldownFromError(apiUrl, error48, staleIf429MaxAgeMs);
+              if (isRateLimitError(error48)) throw error48;
+              if (typeName === "userActiveAssetData" && isUnsupportedUserActiveAssetError(error48)) {
+                rememberUnsupportedUserActiveAssetKey(activeAssetCacheKey);
+              }
+            }
           }
-        }));
-        effectiveTakerRates = effectiveHyperliquidTakerRates(feeSymbols, userFeesResponse ?? {}, Object.fromEntries(metadata));
-      }
-      const accountStateConfig = input.config.client_runtime_hyperliquid_account_state;
-      const summaryPerpsResponse = exactAccountMode ? { ...accountSummaryPerpsResponse, accountMode: exactAccountMode.accountMode } : accountSummaryPerpsResponse;
-      const accountSummaryOptions = {
-        spotDominatesMinTotalUsd: accountStateConfig?.spot_dominates_min_total_usd,
-        spotDominatesPerpsMultiplier: accountStateConfig?.spot_dominates_perps_multiplier,
-        mirroredAccountValueAbsoluteToleranceUsd: accountStateConfig?.mirrored_account_value_absolute_tolerance_usd,
-        mirroredAccountValueRelativeTolerance: accountStateConfig?.mirrored_account_value_relative_tolerance
-      };
-      const walletSummary = exactAccountMode && input.scopeAccountSummaryToSelectedDex !== true ? buildServerPromptRescueAccountSummary(
-        perpsResponse,
-        spotResponse,
-        exactAccountMode.accountMode,
-        accountSummaryOptions
-      ) : buildAccountSummaryFromInfoResponses(
-        perpsResponse,
-        spotResponse,
-        accountSummaryOptions
-      );
-      const normalizedSummary = input.scopeAccountSummaryToSelectedDex === true ? {
-        ...buildAccountSummaryFromInfoResponses(
+          throw lastError instanceof Error ? lastError : new Error("Failed to fetch browser active asset data.");
+        })();
+        const [perpsResult, spotResult, activeAssetResult, userFeesResult, exactAccountMode] = await Promise.all([
+          perpsPromise,
+          spotPromise,
+          activeAssetPromise,
+          userFeesPromise,
+          exactAccountModePromise
+        ]);
+        const perpsResponse = perpsResult.payload;
+        const accountSummaryPerpsResponse = input.scopeAccountSummaryToSelectedDex === true ? perpsResult.selectedPayload : perpsResponse;
+        const spotResponse = spotResult.payload;
+        const userFeesResponse = userFeesResult?.payload ?? null;
+        if (input.includeEffectiveTakerRate === true) {
+          requirePromptSpotState(spotResponse);
+        }
+        let takerRate;
+        if (input.includeEffectiveTakerRate === true) {
+          const raw = userFeesResponse?.userCrossRate;
+          if ((typeof raw === "number" || typeof raw === "string" && raw.trim() !== "") && Number.isFinite(Number(raw)) && Number(raw) >= 0 && Number(raw) < 1) takerRate = Number(raw);
+        }
+        let effectiveTakerRates;
+        if (input.includeEffectiveTakerRate === true) {
+          const feeSymbols = [...new Set([
+            ...input.feeSymbols ?? [symbol2],
+            ...parseInfoPositions(perpsResponse).filter((position) => Number(position.size) !== 0).map((position) => position.symbol)
+          ].map(normalizeHyperliquidMarketSymbol).filter(Boolean))].sort();
+          const feeDexes = [...new Set(feeSymbols.map(getHyperliquidMarketDex))];
+          const metadata = await Promise.all(feeDexes.map(async (dex) => {
+            try {
+              const payload = metadataByDex.get(dex) ?? null;
+              return [dex, payload];
+            } catch (error48) {
+              if (input.signal?.aborted) throw error48;
+              return [dex, null];
+            }
+          }));
+          effectiveTakerRates = effectiveHyperliquidTakerRates(feeSymbols, userFeesResponse ?? {}, Object.fromEntries(metadata));
+        }
+        const accountStateConfig = input.config.client_runtime_hyperliquid_account_state;
+        const summaryPerpsResponse = exactAccountMode ? { ...accountSummaryPerpsResponse, accountMode: exactAccountMode.accountMode } : accountSummaryPerpsResponse;
+        const accountSummaryOptions = {
+          spotDominatesMinTotalUsd: accountStateConfig?.spot_dominates_min_total_usd,
+          spotDominatesPerpsMultiplier: accountStateConfig?.spot_dominates_perps_multiplier,
+          mirroredAccountValueAbsoluteToleranceUsd: accountStateConfig?.mirrored_account_value_absolute_tolerance_usd,
+          mirroredAccountValueRelativeTolerance: accountStateConfig?.mirrored_account_value_relative_tolerance
+        };
+        const walletSummary = exactAccountMode && input.scopeAccountSummaryToSelectedDex !== true ? buildServerPromptRescueAccountSummary(
+          perpsResponse,
+          spotResponse,
+          exactAccountMode.accountMode,
+          accountSummaryOptions
+        ) : buildAccountSummaryFromInfoResponses(
+          perpsResponse,
+          spotResponse,
+          accountSummaryOptions
+        );
+        const normalizedSummary = input.scopeAccountSummaryToSelectedDex === true ? {
+          ...buildAccountSummaryFromInfoResponses(
+            summaryPerpsResponse,
+            {},
+            accountSummaryOptions
+          ),
+          balances: walletSummary.balances
+        } : exactAccountMode ? buildServerPromptRescueAccountSummary(
+          accountSummaryPerpsResponse,
+          spotResponse,
+          exactAccountMode.accountMode,
+          accountSummaryOptions
+        ) : buildAccountSummaryFromInfoResponses(
           summaryPerpsResponse,
-          {},
+          spotResponse,
           accountSummaryOptions
-        ),
-        balances: walletSummary.balances
-      } : exactAccountMode ? buildServerPromptRescueAccountSummary(
-        accountSummaryPerpsResponse,
-        spotResponse,
-        exactAccountMode.accountMode,
-        accountSummaryOptions
-      ) : buildAccountSummaryFromInfoResponses(
-        summaryPerpsResponse,
-        spotResponse,
-        accountSummaryOptions
-      );
-      const accountSummary = {
-        ...normalizedSummary,
-        ...input.scopeAccountSummaryToSelectedDex === true ? {} : {
-          perp_dex_accounts: perpsResult.dexPayloads.filter(({ payload }) => hasCompletePerpDexAccountMetrics(payload)).map(({ dex, payload }) => {
-            const summary = buildServerPromptRescueAccountSummary({
-              ...payload,
-              crossMaintenanceMarginUsed: firstFiniteNumber([
-                payload.crossMaintenanceMarginUsed,
-                payload.marginSummary?.crossMaintenanceMarginUsed,
-                payload.marginSummary?.totalMaintenanceMargin
-              ])
-            }, {}, "disabled", accountSummaryOptions);
-            const accountValue = Number(payload.marginSummary.accountValue);
-            const calculatedAvailable = accountValue - summary.total_margin_used;
-            const availableMargin = summary.maintenance_margin > 0 ? Math.max(calculatedAvailable, Math.max(0, accountValue - 4 * summary.maintenance_margin), summary.withdrawable) : Math.max(calculatedAvailable, summary.withdrawable);
-            return {
-              dex,
-              account_value: accountValue,
-              total_margin_used: summary.total_margin_used,
-              available_margin: availableMargin,
-              withdrawable: summary.withdrawable,
-              maintenance_margin: summary.maintenance_margin,
-              cross_account_leverage: summary.cross_account_leverage,
-              total_unrealized_pnl: summary.total_unrealized_pnl ?? 0
-            };
-          })
-        },
-        ...exactAccountMode == null ? {} : { account_mode: exactAccountMode.accountMode, mode_source: "canonical" },
-        address: walletAddress,
-        dex: input.scopeAccountSummaryToSelectedDex === true ? selectedDex : "all",
-        market_type: "perp"
-      };
-      const activeAssetPayload = activeAssetResult?.payload ?? null;
-      const activeAssetType = activeAssetResult?.type ?? "promptAccountState";
-      const normalizedActiveAsset = normalizeActiveAssetData(activeAssetPayload, symbol2);
-      const markPrice = toPositiveFinite(normalizedActiveAsset.mark_price, toPositiveFinite(input.tickerPrice));
-      const fallbackLeverage = toPositiveFinite(input.leverage, 1);
-      const availableBase = Math.max(0, toFinite(accountSummary.available_margin, 0));
-      const availableToTrade = {
-        symbol: symbol2,
-        available_to_trade_buy: Math.max(0, toFinite(normalizedActiveAsset.available_to_trade_buy, availableBase)),
-        available_to_trade_sell: Math.max(0, toFinite(normalizedActiveAsset.available_to_trade_sell, availableBase)),
-        max_trade_size_buy: Math.max(0, toFinite(normalizedActiveAsset.max_trade_size_buy, availableBase * fallbackLeverage)),
-        max_trade_size_sell: Math.max(0, toFinite(normalizedActiveAsset.max_trade_size_sell, availableBase * fallbackLeverage)),
-        mark_price: markPrice,
-        source: `browser_exchange:${activeAssetType}`
-      };
-      return {
-        accountSummary,
-        availableToTrade,
-        positions: parseInfoPositions(perpsResponse),
-        ...takerRate == null ? {} : { takerRate },
-        ...effectiveTakerRates == null ? {} : { effectiveTakerRates },
-        ...exactAccountMode == null || userFeesResult == null ? {} : {
-          promptRescueEvidence: {
-            capturedAt: (/* @__PURE__ */ new Date()).toISOString(),
-            perpsCapturedAt: perpsResult.capturedAt,
-            spotCapturedAt: spotResult.capturedAt,
-            feesCapturedAt: userFeesResult.capturedAt,
-            accountModeCapturedAt: exactAccountMode.capturedAt,
-            accountModeSource: "canonical"
+        );
+        const accountSummary = {
+          ...normalizedSummary,
+          ...input.scopeAccountSummaryToSelectedDex === true ? {} : {
+            perp_dex_accounts: perpsResult.dexPayloads.filter(({ payload }) => hasCompletePerpDexAccountMetrics(payload)).map(({ dex, payload }) => {
+              const summary = buildServerPromptRescueAccountSummary({
+                ...payload,
+                crossMaintenanceMarginUsed: firstFiniteNumber([
+                  payload.crossMaintenanceMarginUsed,
+                  payload.marginSummary?.crossMaintenanceMarginUsed,
+                  payload.marginSummary?.totalMaintenanceMargin
+                ])
+              }, {}, "disabled", accountSummaryOptions);
+              const accountValue = Number(payload.marginSummary.accountValue);
+              const calculatedAvailable = accountValue - summary.total_margin_used;
+              const availableMargin = summary.maintenance_margin > 0 ? Math.max(calculatedAvailable, Math.max(0, accountValue - 4 * summary.maintenance_margin), summary.withdrawable) : Math.max(calculatedAvailable, summary.withdrawable);
+              return {
+                dex,
+                account_value: accountValue,
+                total_margin_used: summary.total_margin_used,
+                available_margin: availableMargin,
+                withdrawable: summary.withdrawable,
+                maintenance_margin: summary.maintenance_margin,
+                cross_account_leverage: summary.cross_account_leverage,
+                total_unrealized_pnl: summary.total_unrealized_pnl ?? 0
+              };
+            })
+          },
+          ...exactAccountMode == null ? {} : { account_mode: exactAccountMode.accountMode, mode_source: "canonical" },
+          address: walletAddress,
+          dex: input.scopeAccountSummaryToSelectedDex === true ? selectedDex : "all",
+          market_type: "perp"
+        };
+        const activeAssetPayload = activeAssetResult?.payload ?? null;
+        const activeAssetType = activeAssetResult?.type ?? "promptAccountState";
+        const normalizedActiveAsset = normalizeActiveAssetData(activeAssetPayload, symbol2);
+        const markPrice = toPositiveFinite(normalizedActiveAsset.mark_price, toPositiveFinite(input.tickerPrice));
+        const fallbackLeverage = toPositiveFinite(input.leverage, 1);
+        const availableBase = Math.max(0, toFinite(accountSummary.available_margin, 0));
+        const availableToTrade = {
+          symbol: symbol2,
+          available_to_trade_buy: Math.max(0, toFinite(normalizedActiveAsset.available_to_trade_buy, availableBase)),
+          available_to_trade_sell: Math.max(0, toFinite(normalizedActiveAsset.available_to_trade_sell, availableBase)),
+          max_trade_size_buy: Math.max(0, toFinite(normalizedActiveAsset.max_trade_size_buy, availableBase * fallbackLeverage)),
+          max_trade_size_sell: Math.max(0, toFinite(normalizedActiveAsset.max_trade_size_sell, availableBase * fallbackLeverage)),
+          mark_price: markPrice,
+          source: `browser_exchange:${activeAssetType}`
+        };
+        return {
+          accountSummary,
+          availableToTrade,
+          positions: parseInfoPositions(perpsResponse),
+          ...takerRate == null ? {} : { takerRate },
+          ...effectiveTakerRates == null ? {} : { effectiveTakerRates },
+          ...exactAccountMode == null || userFeesResult == null ? {} : {
+            promptRescueEvidence: {
+              capturedAt: (/* @__PURE__ */ new Date()).toISOString(),
+              perpsCapturedAt: perpsResult.capturedAt,
+              spotCapturedAt: spotResult.capturedAt,
+              feesCapturedAt: userFeesResult.capturedAt,
+              accountModeCapturedAt: exactAccountMode.capturedAt,
+              accountModeSource: "canonical"
+            }
           }
-        }
-      };
+        };
+      } finally {
+        await releaseHyperliquidPublicReadReservation(reservation);
+      }
     };
     fetchBrowserUserFills = async (input) => {
       configureHyperliquidMarketSymbolCasing(input.config.client_runtime_hyperliquid_case_sensitive_symbols);
@@ -51485,7 +51736,7 @@ var init_shared = __esm({
       }
     };
     API_URL = getApiUrl();
-    sleep2 = (ms) => new Promise((resolve12) => setTimeout(resolve12, ms));
+    sleep2 = (ms) => new Promise((resolve13) => setTimeout(resolve13, ms));
     AUTH_BOOTSTRAP_GET_MAX_ATTEMPTS = runtime_policy_generated_default.ui.auth_bootstrap_retry.max_attempts;
     AUTH_BOOTSTRAP_RETRY_JITTER_MS = runtime_policy_generated_default.ui.auth_bootstrap_retry.jitter_milliseconds;
     parseRetryAfterMs2 = (value) => {
@@ -52644,7 +52895,7 @@ var init_api2 = __esm({
         if (signal.aborted) {
           throw signal.reason ?? new DOMException("Runtime lease recovery aborted.", "AbortError");
         }
-        return await new Promise((resolve12, reject) => {
+        return await new Promise((resolve13, reject) => {
           let settled = false;
           const finish = (callback) => {
             if (settled) {
@@ -52659,7 +52910,7 @@ var init_api2 = __esm({
           ));
           signal.addEventListener("abort", onAbort, { once: true });
           recovery.promise.then(
-            (token) => finish(() => resolve12(token)),
+            (token) => finish(() => resolve13(token)),
             (error48) => finish(() => reject(error48))
           );
         });
@@ -52871,8 +53122,8 @@ var init_exchange_mutation_fence = __esm({
         return operation();
       }
       let markSettled;
-      const settlement = new Promise((resolve12) => {
-        markSettled = resolve12;
+      const settlement = new Promise((resolve13) => {
+        markSettled = resolve13;
       });
       const activeSettlements = activeSettlementsByScope.get(normalizedScope) ?? /* @__PURE__ */ new Set();
       activeSettlements.add(settlement);
@@ -53876,7 +54127,7 @@ function createGetUrl(options) {
       request.write(Buffer.from(body));
     }
     request.end();
-    return new Promise((resolve12, reject) => {
+    return new Promise((resolve13, reject) => {
       if (signal) {
         signal.addListener(() => {
           if (abort) {
@@ -53922,7 +54173,7 @@ function createGetUrl(options) {
             if (headers2["content-encoding"] === "gzip" && body2) {
               body2 = getBytes(gunzipSync2(body2));
             }
-            resolve12({ statusCode, statusMessage, headers: headers2, body: body2 });
+            resolve13({ statusCode, statusMessage, headers: headers2, body: body2 });
           } catch (error48) {
             reject(makeError("bad response data", "SERVER_ERROR", {
               request: req,
@@ -53998,7 +54249,7 @@ function unpercent(value) {
   }));
 }
 function wait2(delay2) {
-  return new Promise((resolve12) => setTimeout(resolve12, delay2));
+  return new Promise((resolve13) => setTimeout(resolve13, delay2));
 }
 var MAX_ATTEMPTS, SLOT_INTERVAL, defaultGetUrlFunc, reData, reIpfs, locked, Gateways, fetchSignals, FetchCancelSignal, FetchRequest, FetchResponse;
 var init_fetch = __esm({
@@ -67790,7 +68041,7 @@ var init_provider = __esm({
             return null;
           }
         }
-        const waiter = new Promise((resolve12, reject) => {
+        const waiter = new Promise((resolve13, reject) => {
           const cancellers = [];
           const cancel = () => {
             cancellers.forEach((c) => c());
@@ -67811,7 +68062,7 @@ var init_provider = __esm({
             if (await receipt2.confirmations() >= confirms) {
               cancel();
               try {
-                resolve12(checkReceipt(receipt2));
+                resolve13(checkReceipt(receipt2));
               } catch (error48) {
                 reject(error48);
               }
@@ -68736,12 +68987,12 @@ var init_contract = __esm({
         }
         const provider = getProvider(this.runner);
         assert2(provider != null, "contract runner does not support .provider", "UNSUPPORTED_OPERATION", { operation: "waitForDeployment" });
-        return new Promise((resolve12, reject) => {
+        return new Promise((resolve13, reject) => {
           const checkCode = async () => {
             try {
               const code2 = await this.getDeployedCode();
               if (code2 != null) {
-                return resolve12(this);
+                return resolve13(this);
               }
               provider.once("block", checkCode);
             } catch (error48) {
@@ -71093,7 +71344,7 @@ var init_abstract_provider = __esm({
           return t.toLowerCase();
         });
         const blockHash = "blockHash" in filter ? filter.blockHash : void 0;
-        const resolve12 = (_address, fromBlock2, toBlock2) => {
+        const resolve13 = (_address, fromBlock2, toBlock2) => {
           let address2 = void 0;
           switch (_address.length) {
             case 0:
@@ -71148,10 +71399,10 @@ var init_abstract_provider = __esm({
         }
         if (address.filter((a) => typeof a !== "string").length || fromBlock != null && typeof fromBlock !== "string" || toBlock != null && typeof toBlock !== "string") {
           return Promise.all([Promise.all(address), fromBlock, toBlock]).then((result2) => {
-            return resolve12(result2[0], result2[1], result2[2]);
+            return resolve13(result2[0], result2[1], result2[2]);
           });
         }
-        return resolve12(address, fromBlock, toBlock);
+        return resolve13(address, fromBlock, toBlock);
       }
       /**
        *  Returns or resolves to a transaction for %%request%%, resolving
@@ -71525,14 +71776,14 @@ var init_abstract_provider = __esm({
         if (confirms === 0) {
           return this.getTransactionReceipt(hash4);
         }
-        return new Promise(async (resolve12, reject) => {
+        return new Promise(async (resolve13, reject) => {
           let timer = null;
           const listener = (async (blockNumber) => {
             try {
               const receipt = await this.getTransactionReceipt(hash4);
               if (receipt != null) {
                 if (blockNumber - receipt.blockNumber + 1 >= confirms) {
-                  resolve12(receipt);
+                  resolve13(receipt);
                   if (timer) {
                     clearTimeout(timer);
                     timer = null;
@@ -72303,8 +72554,8 @@ function deepCopy(value) {
   throw new Error(`should not happen: ${value} (${typeof value})`);
 }
 function stall(duration3) {
-  return new Promise((resolve12) => {
-    setTimeout(resolve12, duration3);
+  return new Promise((resolve13) => {
+    setTimeout(resolve13, duration3);
   });
 }
 function getLowerCase(value) {
@@ -72444,14 +72695,14 @@ var init_provider_jsonrpc = __esm({
       async sendTransaction(tx) {
         const blockNumber = await this.provider.getBlockNumber();
         const hash4 = await this.sendUncheckedTransaction(tx);
-        return await new Promise((resolve12, reject) => {
+        return await new Promise((resolve13, reject) => {
           const timeouts = [1e3, 100];
           let invalids = 0;
           const checkTx = async () => {
             try {
               const tx2 = await this.provider.getTransaction(hash4);
               if (tx2 != null) {
-                resolve12(tx2.replaceableTransaction(blockNumber));
+                resolve13(tx2.replaceableTransaction(blockNumber));
                 return;
               }
             } catch (error48) {
@@ -72568,7 +72819,7 @@ var init_provider_jsonrpc = __esm({
               try {
                 const result2 = await this._send(payload);
                 this.emit("debug", { action: "receiveRpcResult", result: result2 });
-                for (const { resolve: resolve12, reject, payload: payload2 } of batch) {
+                for (const { resolve: resolve13, reject, payload: payload2 } of batch) {
                   if (this.destroyed) {
                     reject(makeError("provider destroyed; cancelled request", "UNSUPPORTED_OPERATION", { operation: payload2.method }));
                     continue;
@@ -72587,7 +72838,7 @@ var init_provider_jsonrpc = __esm({
                     reject(this.getRpcError(payload2, resp));
                     continue;
                   }
-                  resolve12(resp.result);
+                  resolve13(resp.result);
                 }
               } catch (error48) {
                 this.emit("debug", { action: "receiveRpcError", error: error48 });
@@ -72608,11 +72859,11 @@ var init_provider_jsonrpc = __esm({
         this.#network = null;
         this.#pendingDetectNetwork = null;
         {
-          let resolve12 = null;
+          let resolve13 = null;
           const promise2 = new Promise((_resolve) => {
-            resolve12 = _resolve;
+            resolve13 = _resolve;
           });
-          this.#notReady = { promise: promise2, resolve: resolve12 };
+          this.#notReady = { promise: promise2, resolve: resolve13 };
         }
         const staticNetwork = this._getOption("staticNetwork");
         if (typeof staticNetwork === "boolean") {
@@ -73025,9 +73276,9 @@ var init_provider_jsonrpc = __esm({
           return Promise.reject(makeError("provider destroyed; cancelled request", "UNSUPPORTED_OPERATION", { operation: method }));
         }
         const id2 = this.#nextId++;
-        const promise2 = new Promise((resolve12, reject) => {
+        const promise2 = new Promise((resolve13, reject) => {
           this.#payloads.push({
-            resolve: resolve12,
+            resolve: resolve13,
             reject,
             payload: { method, params, id: id2, jsonrpc: "2.0" }
           });
@@ -77985,8 +78236,8 @@ var init_provider_socket = __esm({
       }
       async _send(payload) {
         assertArgument(!Array.isArray(payload), "WebSocket does not support batch send", "payload", payload);
-        const promise2 = new Promise((resolve12, reject) => {
-          this.#callbacks.set(payload.id, { payload, resolve: resolve12, reject });
+        const promise2 = new Promise((resolve13, reject) => {
+          this.#callbacks.set(payload.id, { payload, resolve: resolve13, reject });
         });
         await this._waitUntilReady();
         await this._write(JSON.stringify(payload));
@@ -78392,8 +78643,8 @@ function shuffle(array2) {
   }
 }
 function stall2(duration3) {
-  return new Promise((resolve12) => {
-    setTimeout(resolve12, duration3);
+  return new Promise((resolve13) => {
+    setTimeout(resolve13, duration3);
   });
 }
 function getTime3() {
@@ -79275,7 +79526,7 @@ var init_provider_browser = __esm({
         if (timeout === 0) {
           return null;
         }
-        return await new Promise((resolve12, reject) => {
+        return await new Promise((resolve13, reject) => {
           let found = [];
           const addProvider = (event) => {
             found.push(event.detail);
@@ -79289,9 +79540,9 @@ var init_provider_browser = __esm({
               if (options && options.filter) {
                 const filtered = options.filter(found.map((i) => Object.assign({}, i.info)));
                 if (filtered == null) {
-                  resolve12(null);
+                  resolve13(null);
                 } else if (filtered instanceof _BrowserProvider) {
-                  resolve12(filtered);
+                  resolve13(filtered);
                 } else {
                   let match = null;
                   if (filtered.uuid) {
@@ -79300,7 +79551,7 @@ var init_provider_browser = __esm({
                   }
                   if (match) {
                     const { provider, info } = match;
-                    resolve12(new _BrowserProvider(provider, void 0, {
+                    resolve13(new _BrowserProvider(provider, void 0, {
                       providerInfo: info
                     }));
                   } else {
@@ -79311,12 +79562,12 @@ var init_provider_browser = __esm({
                 }
               } else {
                 const { provider, info } = found[0];
-                resolve12(new _BrowserProvider(provider, void 0, {
+                resolve13(new _BrowserProvider(provider, void 0, {
                   providerInfo: info
                 }));
               }
             } else {
-              resolve12(null);
+              resolve13(null);
             }
             context.removeEventListener("eip6963:announceProvider", addProvider);
           };
@@ -80730,9 +80981,9 @@ function decryptKeystoreJsonSync(json2, _password) {
   return getAccount(data4, key);
 }
 function stall3(duration3) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve13) => {
     setTimeout(() => {
-      resolve12();
+      resolve13();
     }, duration3);
   });
 }
@@ -81361,9 +81612,9 @@ var init_json_crowdsale = __esm({
 
 // node_modules/ethers/lib.esm/wallet/wallet.js
 function stall4(duration3) {
-  return new Promise((resolve12) => {
+  return new Promise((resolve13) => {
     setTimeout(() => {
-      resolve12();
+      resolve13();
     }, duration3);
   });
 }
@@ -85309,14 +85560,14 @@ var init_hyperliquid_client = __esm({
                 if (input.signal?.aborted) {
                   throw input.signal.reason instanceof Error ? input.signal.reason : settlementError;
                 }
-                await new Promise((resolve12) => {
+                await new Promise((resolve13) => {
                   let settled = false;
                   const finish = () => {
                     if (settled) return;
                     settled = true;
                     globalThis.clearTimeout(timeoutId);
                     input.signal?.removeEventListener("abort", finish);
-                    resolve12();
+                    resolve13();
                   };
                   const timeoutId = globalThis.setTimeout(finish, 1e3);
                   input.signal?.addEventListener("abort", finish, { once: true });
@@ -85347,12 +85598,12 @@ var init_hyperliquid_client = __esm({
                       captureController.signal,
                       ...durableMutationAuthorityArgs(durableMutation)
                     ).then(() => void 0).catch(() => void 0);
-                    const captureDeadline = new Promise((resolve12) => {
+                    const captureDeadline = new Promise((resolve13) => {
                       captureTimeout = globalThis.setTimeout(() => {
                         captureController.abort(
                           new DOMException("Execution attempt capture timed out.", "TimeoutError")
                         );
-                        resolve12();
+                        resolve13();
                       }, remainingBudgetMs);
                     });
                     await Promise.race([captureRequest, captureDeadline]);
@@ -85367,9 +85618,11 @@ var init_hyperliquid_client = __esm({
               }
             }
             try {
+              await admitHyperliquidExchangeRequest(apiUrl, input.payload.action, input.signal);
               assertFreshPreparedExecutionContext(input.preparedContext);
             } catch (preparedContextError) {
               await settleDurableMutation("rejected");
+              if (isAbortLikeError(preparedContextError) || preparedContextError instanceof HyperliquidPublicReadError) throw preparedContextError;
               throw new RuntimeExecutionError(
                 preparedContextError instanceof Error ? preparedContextError.message : "Prepared exchange context expired before dispatch.",
                 "local_safety_block"
@@ -85402,6 +85655,7 @@ var init_hyperliquid_client = __esm({
               body: serializedPayload
             });
             responseStatus = response.status;
+            await recordHyperliquidExchangeResponse(apiUrl, response);
             const payload = await response.json().catch(() => ({}));
             if (!response.ok) {
               await settleDurableMutation("transport_ambiguous");
@@ -85856,7 +86110,7 @@ var init_vault = __esm({
       }
       return output3.buffer.slice(output3.byteOffset, output3.byteOffset + output3.byteLength);
     };
-    openVaultDb = async () => new Promise((resolve12, reject) => {
+    openVaultDb = async () => new Promise((resolve13, reject) => {
       const request = indexedDB.open(VAULT_DB_NAME, VAULT_DB_VERSION);
       request.onerror = () => reject(request.error ?? new Error("Failed to open client vault database."));
       request.onupgradeneeded = () => {
@@ -85865,7 +86119,7 @@ var init_vault = __esm({
           database.createObjectStore(VAULT_KEY_STORE);
         }
       };
-      request.onsuccess = () => resolve12(request.result);
+      request.onsuccess = () => resolve13(request.result);
     });
     withVaultStore = async (mode, fn) => {
       const database = await openVaultDb();
@@ -85873,8 +86127,8 @@ var init_vault = __esm({
         const transaction = database.transaction(VAULT_KEY_STORE, mode);
         const store = transaction.objectStore(VAULT_KEY_STORE);
         const result2 = await fn(store);
-        await new Promise((resolve12, reject) => {
-          transaction.oncomplete = () => resolve12();
+        await new Promise((resolve13, reject) => {
+          transaction.oncomplete = () => resolve13();
           transaction.onerror = () => reject(transaction.error ?? new Error("Client vault transaction failed."));
           transaction.onabort = () => reject(transaction.error ?? new Error("Client vault transaction aborted."));
         });
@@ -85889,9 +86143,9 @@ var init_vault = __esm({
       }
       return withVaultStore("readonly", async (store) => {
         const request = store.get(profileId);
-        return await new Promise((resolve12, reject) => {
+        return await new Promise((resolve13, reject) => {
           request.onerror = () => reject(request.error ?? new Error("Failed to read client vault key."));
-          request.onsuccess = () => resolve12(request.result ?? null);
+          request.onsuccess = () => resolve13(request.result ?? null);
         });
       });
     };
@@ -85913,9 +86167,9 @@ var init_vault = __esm({
       );
       await withVaultStore("readwrite", async (store) => {
         const request = store.put(createdKey, profileId);
-        await new Promise((resolve12, reject) => {
+        await new Promise((resolve13, reject) => {
           request.onerror = () => reject(request.error ?? new Error("Failed to persist client vault key."));
-          request.onsuccess = () => resolve12();
+          request.onsuccess = () => resolve13();
         });
       });
       return createdKey;
@@ -85926,9 +86180,9 @@ var init_vault = __esm({
       }
       await withVaultStore("readwrite", async (store) => {
         const request = store.delete(profileId);
-        await new Promise((resolve12, reject) => {
+        await new Promise((resolve13, reject) => {
           request.onerror = () => reject(request.error ?? new Error("Failed to remove client vault key."));
-          request.onsuccess = () => resolve12();
+          request.onsuccess = () => resolve13();
         });
       });
     };
@@ -90689,10 +90943,10 @@ var init_runtime_execution = __esm({
       }
     };
     sleep3 = async (ms, signal) => {
-      await new Promise((resolve12, reject) => {
+      await new Promise((resolve13, reject) => {
         const timer = setTimeout(() => {
           cleanup();
-          resolve12(void 0);
+          resolve13(void 0);
         }, ms);
         const cleanup = () => {
           clearTimeout(timer);
@@ -94092,7 +94346,7 @@ Global options:
       "alibaba_cloud_model_studio_api_key",
       "lightning_api_key"
     ]);
-    delay = (ms) => new Promise((resolve12) => setTimeout(resolve12, ms));
+    delay = (ms) => new Promise((resolve13) => setTimeout(resolve13, ms));
   }
 });