@vtxmacro/cli 2026.9.53 → 2026.9.55

package/bin/vtx-service-bootstrap.js

@@ -16,9 +16,9 @@ import { fileURLToPath } from "node:url";
 // agent-cli-release.json
 var agent_cli_release_default = {
   package_name: "@vtxmacro/cli",
-  package_version: "2026.9.53",
+  package_version: "2026.9.55",
   codex_package_name: "@openai/codex",
-  codex_version: "0.153.3",
+  codex_version: "0.155.0",
   copilot_sdk_package_name: "@github/copilot-sdk",
   copilot_sdk_version: "1.0.0-beta.8",
   copilot_cli_package_name: "@github/copilot",
@@ -82,13 +82,13 @@ var agent_cli_release_default = {
       package_name: "@openai/codex-linux-x64",
       target: "x86_64-unknown-linux-musl",
       binary_name: "codex",
-      sha256: "f9d4eab23d0e0726340e084ed22d668885c1dcabeb29ec508b8962e5e29b8dc6"
+      sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501"
     },
     "win32-x64": {
       package_name: "@openai/codex-win32-x64",
       target: "x86_64-pc-windows-msvc",
       binary_name: "codex.exe",
-      sha256: "e5ef3c4b81d2fb861f3731c91a773d45a1973c6a0b480d6449f80bc8fd749e96"
+      sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b"
     }
   },
   pi_coding_agent_package_name: "@earendil-works/pi-coding-agent",

package/bin/vtx.js

@@ -77,9 +77,9 @@ var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
     agent_cli_release_default = {
       package_name: "@vtxmacro/cli",
-      package_version: "2026.9.53",
+      package_version: "2026.9.55",
       codex_package_name: "@openai/codex",
-      codex_version: "0.153.3",
+      codex_version: "0.155.0",
       copilot_sdk_package_name: "@github/copilot-sdk",
       copilot_sdk_version: "1.0.0-beta.8",
       copilot_cli_package_name: "@github/copilot",
@@ -143,13 +143,13 @@ var init_agent_cli_release = __esm({
           package_name: "@openai/codex-linux-x64",
           target: "x86_64-unknown-linux-musl",
           binary_name: "codex",
-          sha256: "f9d4eab23d0e0726340e084ed22d668885c1dcabeb29ec508b8962e5e29b8dc6"
+          sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501"
         },
         "win32-x64": {
           package_name: "@openai/codex-win32-x64",
           target: "x86_64-pc-windows-msvc",
           binary_name: "codex.exe",
-          sha256: "e5ef3c4b81d2fb861f3731c91a773d45a1973c6a0b480d6449f80bc8fd749e96"
+          sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b"
         }
       },
       pi_coding_agent_package_name: "@earendil-works/pi-coding-agent",
@@ -21519,7 +21519,8 @@ var init_mcp_client = __esm({
         this.#initialized = true;
       }
       async callTool(name, argumentsValue, options = {}) {
-        const timing = name === "inference.job.claim" && options.onClaimTiming ? new ClaimTiming() : void 0;
+        const timingObserver = name === "inference.job.claim" ? options.onClaimTiming : name === "inference.host.heartbeat" ? options.onHostHeartbeatTiming : void 0;
+        const timing = timingObserver ? new ClaimTiming() : void 0;
         let outcome = "failure";
         try {
           if (!this.#initialized) {
@@ -21598,7 +21599,7 @@ var init_mcp_client = __esm({
           if (timing) {
             const receipt = Object.freeze({ ...timing.finish(outcome), transport_route: this.#transport.route });
             try {
-              void Promise.resolve(options.onClaimTiming?.(receipt)).catch(() => void 0);
+              void Promise.resolve(timingObserver?.(receipt)).catch(() => void 0);
             } catch {
             }
           }
@@ -32615,6 +32616,39 @@ var init_runner = __esm({
           };
           const hostHeartbeatAbort = new AbortController();
           stopHostHeartbeatLoop = () => hostHeartbeatAbort.abort();
+          const backgroundHostHeartbeat = async (advertisementGeneration, allowOfflineProjection, deadlineAtMs) => {
+            const startedAt = performance.now();
+            let clientTiming;
+            try {
+              await hostHeartbeat("healthy", {
+                signal: hostHeartbeatAbort.signal,
+                // A liveness request must not inherit the general MCP timeout,
+                // which can exceed the server's host-staleness window. Generation
+                // recovery shares this deadline with its first attempt.
+                timeoutMs: settings.hostHeartbeatMs,
+                deadlineAtMs,
+                onHostHeartbeatTiming: (timing) => {
+                  clientTiming = timing;
+                }
+              }, false, allowOfflineProjection, 0, advertisementGeneration);
+            } catch (error48) {
+              if (!hostHeartbeatAbort.signal.aborted && !drainRequested) {
+                emitDiagnostic("host_heartbeat_request_failed", {
+                  elapsed_ms: Math.max(0, Math.round(performance.now() - startedAt)),
+                  request_timeout_ms: settings.hostHeartbeatMs,
+                  advertisement_generation: advertisementGeneration,
+                  failure_code: safeFailureCode(
+                    error48 instanceof ExternalInferenceMcpError ? error48.code : "",
+                    "heartbeat_failed"
+                  ),
+                  http_status_code: error48 instanceof ExternalInferenceMcpError ? error48.httpStatusCode : null,
+                  retry_after_ms: error48 instanceof ExternalInferenceMcpError ? error48.retryAfterMs : null,
+                  ...clientTiming ? { client_timing: clientTiming } : {}
+                });
+              }
+              throw error48;
+            }
+          };
           let nextHostHeartbeatAt = now() + settings.hostHeartbeatMs;
           hostHeartbeatLoop = (async () => {
             while (!drainRequested && !hostHeartbeatAbort.signal.aborted) {
@@ -32643,19 +32677,16 @@ var init_runner = __esm({
                 }
               }
               if (drainRequested || hostHeartbeatAbort.signal.aborted) return;
-              const heartbeatAttemptedAt = now();
+              const heartbeatDeadlineAtMs = Date.now() + settings.hostHeartbeatMs;
               const attemptedAdvertisementGeneration = receipt.advertisement_generation;
               try {
-                await hostHeartbeat(
-                  "healthy",
-                  { signal: hostHeartbeatAbort.signal },
-                  false,
+                await backgroundHostHeartbeat(
+                  attemptedAdvertisementGeneration,
                   // The server evaluates advertisement expiry when it receives
                   // the heartbeat. A request sent just before expiry can therefore
                   // truthfully return offline; the advertisement loop owns repair.
                   true,
-                  0,
-                  attemptedAdvertisementGeneration
+                  heartbeatDeadlineAtMs
                 );
               } catch (error48) {
                 if (hostHeartbeatAbort.signal.aborted || drainRequested) return;
@@ -32664,13 +32695,10 @@ var init_runner = __esm({
                 const recoveryAdvertisementGeneration = receipt.advertisement_generation > attemptedAdvertisementGeneration ? receipt.advertisement_generation : errorCode === "generation_stale" && pendingAdvertisement && pendingAdvertisement.advertisement_generation === attemptedAdvertisementGeneration + 1 ? pendingAdvertisement.advertisement_generation : null;
                 if (errorCode === "generation_stale" && recoveryAdvertisementGeneration !== null) {
                   try {
-                    await hostHeartbeat(
-                      "healthy",
-                      { signal: hostHeartbeatAbort.signal },
-                      false,
+                    await backgroundHostHeartbeat(
+                      recoveryAdvertisementGeneration,
                       false,
-                      0,
-                      recoveryAdvertisementGeneration
+                      heartbeatDeadlineAtMs
                     );
                     if (receipt.advertisement_generation < recoveryAdvertisementGeneration) {
                       await mutateReceipt((current) => current.advertisement_generation >= recoveryAdvertisementGeneration ? current : {
@@ -40297,10 +40325,10 @@ var init_grok_transport_proxy = __esm({
 
 // lib/inference-host/grok-runtime.ts
 import { spawn as spawn7 } from "node:child_process";
-import { randomBytes as randomBytes7 } from "node:crypto";
+import { randomBytes as randomBytes7, randomUUID as randomUUID7 } from "node:crypto";
 import { createServer as createServer4 } from "node:http";
 import { join as join9 } from "node:path";
-import { lstat as lstat6 } from "node:fs/promises";
+import { link, lstat as lstat6, rm as rm8 } from "node:fs/promises";
 var grokObject, grokRuntimeEnvironment, prepareGrokHome, GrokAcpSession, createGrokToolServer;
 var init_grok_runtime = __esm({
   "lib/inference-host/grok-runtime.ts"() {
@@ -40367,6 +40395,28 @@ var init_grok_runtime = __esm({
         env.XDG_STATE_HOME,
         env.XDG_CACHE_HOME
       ]) await ensureInferencePrivateDirectory(path);
+      const agentIdPath = join9(grokHome, "agent_id");
+      let needsAgentId = false;
+      try {
+        await lstat6(agentIdPath);
+      } catch (error48) {
+        if (error48.code !== "ENOENT") throw error48;
+        needsAgentId = true;
+      }
+      if (needsAgentId) {
+        const temporary = join9(grokHome, `.agent-id-${randomUUID7()}.tmp`);
+        try {
+          await writeAtomicInferencePrivateFile(temporary, `${randomUUID7()}
+`);
+          try {
+            await link(temporary, agentIdPath);
+          } catch (error48) {
+            if (error48.code !== "EEXIST") throw error48;
+          }
+        } finally {
+          await rm8(temporary, { force: true });
+        }
+      }
       await writeAtomicInferencePrivateFile(join9(grokHome, "config.toml"), "[claude_compat]\nimported = true\n");
       await writeAtomicInferencePrivateFile(join9(grokHome, "requirements.toml"), [
         "[auth]",
@@ -40586,7 +40636,7 @@ var init_grok_runtime = __esm({
 
 // lib/inference-host/grok-state.ts
 import { constants as constants2 } from "node:fs";
-import { lstat as lstat7, mkdtemp as mkdtemp4, open as open3, readdir as readdir3, realpath as realpath6, rm as rm8, rmdir, unlink, writeFile as writeFile3 } from "node:fs/promises";
+import { lstat as lstat7, mkdtemp as mkdtemp4, open as open3, readdir as readdir3, realpath as realpath6, rm as rm9, rmdir, unlink, writeFile as writeFile3 } from "node:fs/promises";
 import { basename as basename3, dirname as dirname8, join as join10, resolve as resolve6 } from "node:path";
 var markerName, ownedName, invalid, missing, sessionIdValid, directory, nativeDirectory, roots, owner, nativeFile, encodedCwd, nativeSession, removeEmptyNativeGroup, createGrokOwnedWorkspace, bindGrokOwnedSession, validateGrokOwnedThread, releaseGrokOwnedWorkspace, cleanupGrokOwnedState;
 var init_grok_state = __esm({
@@ -40755,7 +40805,7 @@ var init_grok_state = __esm({
         await writeAtomicInferencePrivateFile(join10(workspace, markerName), JSON.stringify(value));
         return workspace;
       } catch (error48) {
-        await rm8(workspace, { recursive: true, force: true });
+        await rm9(workspace, { recursive: true, force: true });
         throw error48;
       }
     };
@@ -40788,11 +40838,11 @@ var init_grok_state = __esm({
       if (session) {
         await owner(options, workspace);
         if (await nativeSession(value, false) !== session) throw invalid();
-        await rm8(session, { recursive: true, force: true });
+        await rm9(session, { recursive: true, force: true });
         await removeEmptyNativeGroup(dirname8(session), workspace);
       }
       await owner(options, workspace);
-      await rm8(workspace, { recursive: true, force: true });
+      await rm9(workspace, { recursive: true, force: true });
     };
     cleanupGrokOwnedState = async (options) => {
       let scope;
@@ -40824,7 +40874,7 @@ var init_grok_state = __esm({
 });
 
 // lib/inference-host/grok-adapter.ts
-import { randomUUID as randomUUID7 } from "node:crypto";
+import { randomUUID as randomUUID8 } from "node:crypto";
 import { join as join11 } from "node:path";
 var unwrap, list, nonempty, integer2, grokModelCapabilities, grokPromptUsage, agentProfile, modelState, assertSelection, GrokBuildAdapter;
 var init_grok_adapter = __esm({
@@ -41090,7 +41140,7 @@ var init_grok_adapter = __esm({
               activeThread = { ...activeThread, effectiveModel: observedModel };
               await agent.onThreadReady?.(activeThread);
             }
-            const callId = randomUUID7();
+            const callId = randomUUID8();
             const tool = name;
             const result3 = await agent.executeTool({ callId, tool, arguments: args });
             evidence.push({ callId, tool, arguments: args, success: result3.success });
@@ -41196,7 +41246,7 @@ var init_grok_adapter = __esm({
             if (update.sessionUpdate === "agent_message_chunk" && firstToken === null) firstToken = Date.now() - startedAt;
             if (update.sessionUpdate === "agent_thought_chunk" && Buffer.byteLength(thought) + Buffer.byteLength(text2) <= 3e5) thought += text2;
           };
-          const promptId = randomUUID7();
+          const promptId = randomUUID8();
           const result2 = await session.request("session/prompt", {
             sessionId,
             prompt: [{ type: "text", text: input.userPrompt }],
@@ -41375,9 +41425,9 @@ var init_grok_auth = __esm({
 
 // lib/inference-host/exo-adapter.ts
 import { spawn as spawn9 } from "node:child_process";
-import { randomUUID as randomUUID8, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
+import { randomUUID as randomUUID9, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
 import { createServer as createServer5 } from "node:http";
-import { access as access3, lstat as lstat8, readdir as readdir4, realpath as realpath7, rm as rm9 } from "node:fs/promises";
+import { access as access3, lstat as lstat8, readdir as readdir4, realpath as realpath7, rm as rm10 } from "node:fs/promises";
 import { basename as basename4, dirname as dirname9, join as join12, resolve as resolve7 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var import_ajv3, failure, object4, validModel, receiptUsage, assertOwnedRuntime, cleanupExoOwnedState, ExoForegroundAdapter;
@@ -41439,7 +41489,7 @@ var init_exo_adapter = __esm({
         if (!match || !entry.isDirectory() || entry.isSymbolicLink()) throw failure("exo_state_not_owned");
         await assertOwnedRuntime(join12(root, entry.name), match[1]);
       }
-      await rm9(root, { recursive: true, force: true });
+      await rm10(root, { recursive: true, force: true });
     };
     ExoForegroundAdapter = class {
       constructor(options) {
@@ -41559,7 +41609,7 @@ var init_exo_adapter = __esm({
         const credential = await this.options.credentialStore.read(input.signal);
         const provider = selected.model.split("/")[0];
         if (!credential || credential.provider !== provider) throw failure("exo_credential_required", false, "auth");
-        const id2 = agent?.durableThread?.threadId ?? randomUUID8();
+        const id2 = agent?.durableThread?.threadId ?? randomUUID9();
         const runtimeRoot = agent?.durableThread ? await this.ownedRoot(agent.durableThread) : join12(await realpath7(this.options.stateRoot), `${agent ? "agent" : "attempt"}-${id2}`);
         let thread = { threadId: id2, threadPath: runtimeRoot, effectiveModel: input.requestedModel, effectiveReasoningEffort: input.requestedReasoningEffort };
         const owner2 = agent?.durableThread ? await assertOwnedRuntime(runtimeRoot, id2) : null;
@@ -41573,7 +41623,7 @@ var init_exo_adapter = __esm({
         const relay = () => abort.abort();
         input.signal?.addEventListener("abort", relay, { once: true });
         const timer = setTimeout(relay, Math.max(0, input.deadlineAtMs - started));
-        const token = randomUUID8();
+        const token = randomUUID9();
         let dispatched = false;
         let terminal = null;
         let workerFailure = null;
@@ -41699,7 +41749,7 @@ var init_exo_adapter = __esm({
           }
           await agent?.onThreadReady?.(thread);
           try {
-            await this.command([...args, "conversation", "send", "vtx", "trading", randomUUID8()], env, abort.signal);
+            await this.command([...args, "conversation", "send", "vtx", "trading", randomUUID9()], env, abort.signal);
           } catch (error48) {
             if (!terminal) throw error48;
           }
@@ -41771,11 +41821,11 @@ var init_exo_adapter = __esm({
           this.active.delete(abort);
           server.closeAllConnections();
           await new Promise((done) => server.close(() => done()));
-          if (!agent) await rm9(runtimeRoot, { recursive: true, force: true });
+          if (!agent) await rm10(runtimeRoot, { recursive: true, force: true });
         }
       }
       async releaseThread(thread) {
-        await rm9(await this.ownedRoot(thread), { recursive: true, force: true });
+        await rm10(await this.ownedRoot(thread), { recursive: true, force: true });
       }
       async close() {
         this.closing = true;
@@ -42374,7 +42424,7 @@ var init_durable_adapter = __esm({
 });
 
 // lib/inference-host/service-launcher-state.ts
-import { access as access4, readFile as readFile9, rm as rm10 } from "node:fs/promises";
+import { access as access4, readFile as readFile9, rm as rm11 } from "node:fs/promises";
 import { dirname as dirname12, isAbsolute as isAbsolute5, join as join13, relative as relative3, resolve as resolve10 } from "node:path";
 var launcherSibling, within, launcherSelection, readLauncherSelection, readLauncherState, writeLauncherState, targetForSelection;
 var init_service_launcher_state = __esm({
@@ -42634,9 +42684,9 @@ var init_runtime_policy_generated2 = __esm({
 
 // lib/inference-host/service.ts
 import { spawn as spawn10 } from "node:child_process";
-import { randomUUID as randomUUID9 } from "node:crypto";
+import { randomUUID as randomUUID10 } from "node:crypto";
 import { createWriteStream, readFileSync as readFileSync2 } from "node:fs";
-import { access as access5, chmod as chmod3, mkdir as mkdir3, readFile as readFile10, rm as rm11, writeFile as writeFile4 } from "node:fs/promises";
+import { access as access5, chmod as chmod3, mkdir as mkdir3, readFile as readFile10, rm as rm12, writeFile as writeFile4 } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
 import { dirname as dirname13, join as join14, resolve as resolve11 } from "node:path";
 var SERVICE_NAME, SYSTEMD_UNIT, LAUNCHD_LABEL, SERVICE_COOPERATIVE_STOP_SECONDS, SERVICE_UPDATE_STARTUP_SECONDS, INFERENCE_HOST_SERVICE_DRAIN_COMMAND, INFERENCE_HOST_SERVICE_QUIESCE_COMMAND, InferenceHostBootstrapRestartRequiredError, inferenceHostServiceChildEnvironment, isWindowsSubsystemForLinux, inferenceHostServiceManifestPath, inferenceHostServiceDesiredPath, inferenceHostServiceLogPath, inferenceHostServiceRuntimePath, xmlEscape, plistEscape, systemdQuote, defaultRunCommand, probeInferenceHostLauncher, managerName, assertRuntimeEnvironment, withoutConcurrencyLimit, assertServicePath, manifestGeneration, assertWorker, assertManifest, assertServiceRuntimeState, assertDesiredState, readInferenceHostServiceManifest, readManifestAcrossAtomicReplacement, readInferenceHostServiceRuntime, readRuntimeAcrossAtomicReplacement, readInferenceHostServiceDesired, readDesiredAcrossAtomicReplacement, writeDesired, runtimeEnvironment, serviceBootstrapArguments, windowsOwnedCommandLine, vbScriptString, windowsServiceLauncher, windowsTaskXml, systemdUnit, launchAgentPlist, sameWorker, sameServiceDefinition, sameWorkerSet, InferenceHostServiceManager, appendServiceLog, spawnInferenceHostServiceChild, runInferenceHostServiceSupervisor;
@@ -42713,7 +42763,7 @@ var init_service = __esm({
       }));
     });
     probeInferenceHostLauncher = async (executable, destination, bytes3, runCommand = defaultRunCommand) => {
-      const probe = `${destination}.${randomUUID9()}.probe.js`;
+      const probe = `${destination}.${randomUUID10()}.probe.js`;
       try {
         await writeAtomicInferencePrivateFile(probe, bytes3);
         const result2 = await runCommand(executable, [probe]);
@@ -42721,7 +42771,7 @@ var init_service = __esm({
           throw new Error("Copied service launcher failed its isolated startup check.");
         }
       } finally {
-        await rm11(probe, { force: true });
+        await rm12(probe, { force: true });
       }
     };
     managerName = (platform) => {
@@ -43217,7 +43267,7 @@ WantedBy=default.target
         const previousRuntimeUpdatedAt = previousRuntime?.manifest_generation === manifest.generation ? Date.parse(previousRuntime.updated_at) : Number.NaN;
         const restoredManifest = preserveGeneration ? manifest : assertManifest({
           ...manifest,
-          generation: randomUUID9(),
+          generation: randomUUID10(),
           installed_at: this.now().toISOString()
         });
         await writeAtomicInferencePrivateFile(
@@ -43374,16 +43424,16 @@ ${cleanup.stderr}`)) {
               );
             }
           }
-          await rm11(this.definitionPath(), { force: true }).catch(() => void 0);
+          await rm12(this.definitionPath(), { force: true }).catch(() => void 0);
           if (this.platform === "win32") {
-            await rm11(this.windowsLauncherPath(), { force: true }).catch(() => void 0);
+            await rm12(this.windowsLauncherPath(), { force: true }).catch(() => void 0);
           }
-          await rm11(this.manifestPath(), { force: true }).catch(() => void 0);
-          await rm11(this.desiredPath(), { force: true }).catch(() => void 0);
-          await rm11(this.runtimePath(), { force: true }).catch(() => void 0);
-          if (!existingRecovery) await rm11(this.serviceBootstrapPath(), { force: true }).catch(() => void 0);
+          await rm12(this.manifestPath(), { force: true }).catch(() => void 0);
+          await rm12(this.desiredPath(), { force: true }).catch(() => void 0);
+          await rm12(this.runtimePath(), { force: true }).catch(() => void 0);
+          if (!existingRecovery) await rm12(this.serviceBootstrapPath(), { force: true }).catch(() => void 0);
           for (const suffix of [".service-launcher.json", ".service-bootstrap.previous.js"]) {
-            if (!existingRecovery) await rm11(launcherSibling(this.manifestPath(), suffix), { force: true }).catch(() => void 0);
+            if (!existingRecovery) await rm12(launcherSibling(this.manifestPath(), suffix), { force: true }).catch(() => void 0);
           }
           if (this.platform === "linux") {
             await this.runCommand("systemctl", ["--user", "daemon-reload"]).catch(() => void 0);
@@ -43535,7 +43585,7 @@ ${cleanup.stderr}`)) {
         ].sort((left, right) => left.instance_name.localeCompare(right.instance_name));
         const manifest = assertManifest({
           schema_version: "vtx_inference_service_v3",
-          generation: randomUUID9(),
+          generation: randomUUID10(),
           installed_at: this.now().toISOString(),
           executable: this.executable,
           script: this.script,
@@ -43758,7 +43808,7 @@ ${result2.stderr}`)) {
           if (remaining.length === 0) return await this.uninstallUnlocked();
           return await this.replaceManifestUnlocked({
             ...manifest,
-            generation: randomUUID9(),
+            generation: randomUUID10(),
             installed_at: this.now().toISOString(),
             workers: remaining
           }, await readInferenceHostServiceDesired(this.desiredPath()));
@@ -43781,20 +43831,20 @@ ${result2.stderr}`)) {
 ${result2.stderr}`)) {
           throw new Error(`Background service uninstall failed: ${result2.stderr.trim()}`);
         }
-        await rm11(this.definitionPath(), { force: true });
-        if (this.platform === "win32") await rm11(this.windowsLauncherPath(), { force: true });
+        await rm12(this.definitionPath(), { force: true });
+        if (this.platform === "win32") await rm12(this.windowsLauncherPath(), { force: true });
         if (this.platform === "linux") await this.runCommand("systemctl", ["--user", "daemon-reload"]);
-        await rm11(this.manifestPath(), { force: true });
-        await rm11(this.desiredPath(), { force: true });
-        await rm11(this.runtimePath(), { force: true });
+        await rm12(this.manifestPath(), { force: true });
+        await rm12(this.desiredPath(), { force: true });
+        await rm12(this.runtimePath(), { force: true });
         if (!preserveRecovery) {
-          await rm11(this.serviceBootstrapPath(), { force: true });
+          await rm12(this.serviceBootstrapPath(), { force: true });
           for (const suffix of [".service-launcher.json", ".service-bootstrap.previous.js"]) {
-            await rm11(launcherSibling(this.manifestPath(), suffix), { force: true });
+            await rm12(launcherSibling(this.manifestPath(), suffix), { force: true });
           }
-          await rm11(this.serviceReleasePath(), { force: true });
-          await rm11(this.serviceReleaseRejectionPath(), { force: true });
-          await rm11(this.serviceReleasesPath(), { recursive: true, force: true });
+          await rm12(this.serviceReleasePath(), { force: true });
+          await rm12(this.serviceReleaseRejectionPath(), { force: true });
+          await rm12(this.serviceReleasesPath(), { recursive: true, force: true });
         }
         return {
           installed: false,
@@ -44257,9 +44307,9 @@ __export(cli_exports, {
   registerInferenceHostServiceControlInput: () => registerInferenceHostServiceControlInput,
   runInferenceHostCli: () => runInferenceHostCli
 });
-import { createHash as createHash12, randomUUID as randomUUID10 } from "node:crypto";
+import { createHash as createHash12, randomUUID as randomUUID11 } from "node:crypto";
 import { spawn as spawn11 } from "node:child_process";
-import { lstat as lstat9, realpath as realpath8, rm as rm12 } from "node:fs/promises";
+import { lstat as lstat9, realpath as realpath8, rm as rm13 } from "node:fs/promises";
 import { hostname as osHostname } from "node:os";
 import { join as join15, resolve as resolve12 } from "node:path";
 async function runInferenceHostCli(argv2, env = process.env, dependencies = {}) {
@@ -44898,7 +44948,7 @@ Durable service:
         runtimeReceiptPath(config2),
         "Inference host runtime receipt file"
       );
-      await rm12(codexGuardianReceiptRoot(config2), { recursive: true, force: true });
+      await rm13(codexGuardianReceiptRoot(config2), { recursive: true, force: true });
       await clearInferencePrivateFile(
         codexRecoveryPath(config2),
         "Codex attempt recovery file"
@@ -45166,7 +45216,7 @@ Waiting for approval...
         await writeInferenceHostCredentialContextTransition(config2, previousCredentialContext);
         await writeInferenceHostCredentialContext(config2);
         const keyPair = generateExternalInferenceEnvelopeKeyPair();
-        const hostId = randomUUID10();
+        const hostId = randomUUID11();
         const beginLogin = dependencies.beginLogin ?? beginInferenceOAuthLogin;
         const loginStore = {
           kind: store.kind,
@@ -46054,7 +46104,7 @@ Waiting for approval...
       }
       return record5;
     };
-    agentOperationId = (kind) => `${kind}-${randomUUID10()}`;
+    agentOperationId = (kind) => `${kind}-${randomUUID11()}`;
     agentSession = async (config2, dependencies, warnings, signal) => {
       if (await readRevocationCheckpoint(config2)) {
         throw new Error("Inference host revocation recovery must finish first.");
@@ -47133,7 +47183,7 @@ Waiting for approval...
         if (recoveryRaw === null && existingTransaction?.phase !== "reconciled") {
           throw new Error("Codex recovery evidence changed before service recovery began.");
         }
-        const transactionId = existingTransaction?.transaction_id ?? randomUUID10();
+        const transactionId = existingTransaction?.transaction_id ?? randomUUID11();
         const backupPath = existingTransaction?.recovery_backup_path ?? recoveryBackupPath(config2, transactionId);
         if (!existingTransaction) {
           await writeAtomicInferencePrivateFile(backupPath, recoveryRaw);
@@ -47281,7 +47331,7 @@ Waiting for approval...
               serviceRecoveryTransactionPath(config2),
               "Inference-host service recovery transaction"
             );
-            await rm12(backupPath, { force: true });
+            await rm13(backupPath, { force: true });
           }
         }
       } finally {
@@ -47556,7 +47606,7 @@ Waiting for approval...
 });
 
 // lib/agent-core/config.ts
-import { mkdir as mkdir5, readFile as readFile11, rm as rm13, writeFile as writeFile5 } from "node:fs/promises";
+import { mkdir as mkdir5, readFile as readFile11, rm as rm14, writeFile as writeFile5 } from "node:fs/promises";
 import { dirname as dirname14, join as join16 } from "node:path";
 import { homedir as homedir3 } from "node:os";
 function defaultBaseDir() {
@@ -47600,7 +47650,7 @@ async function writeStoredAgentAuth(path, auth) {
 `, { encoding: "utf8", mode: 384 });
 }
 async function clearStoredAgentAuth(path) {
-  await rm13(path, { force: true });
+  await rm14(path, { force: true });
 }
 async function readRuntimeState(path) {
   try {
@@ -47635,7 +47685,7 @@ async function writeRuntimeState(path, state) {
 `, { encoding: "utf8", mode: 384 });
 }
 async function clearRuntimeState(path) {
-  await rm13(path, { force: true });
+  await rm14(path, { force: true });
 }
 var init_config2 = __esm({
   "lib/agent-core/config.ts"() {
@@ -47667,7 +47717,7 @@ var init_types = __esm({
 });
 
 // lib/agent-core/client.ts
-import { randomUUID as randomUUID11 } from "node:crypto";
+import { randomUUID as randomUUID12 } from "node:crypto";
 function normalizeApiUrl(value) {
   const parsed = String(value || "").trim();
   if (!parsed) {
@@ -47934,7 +47984,7 @@ var init_client = __esm({
         return this.request("/trading/ai/runtime/decision", {
           method: "POST",
           profileId,
-          idempotencyKey: randomUUID11(),
+          idempotencyKey: randomUUID12(),
           headers: { "x-client-runtime-lease": leaseToken },
           body: payload
         });
@@ -47943,7 +47993,7 @@ var init_client = __esm({
         return this.request("/trading/ai/runtime/trade-sync", {
           method: "POST",
           profileId,
-          idempotencyKey: randomUUID11(),
+          idempotencyKey: randomUUID12(),
           headers: { "x-client-runtime-lease": leaseToken },
           body: payload
         });
@@ -47952,7 +48002,7 @@ var init_client = __esm({
         return this.request("/trading/ai/runtime/error", {
           method: "POST",
           profileId,
-          idempotencyKey: randomUUID11(),
+          idempotencyKey: randomUUID12(),
           headers: { "x-client-runtime-lease": leaseToken },
           body: payload
         });
@@ -47964,7 +48014,7 @@ var init_client = __esm({
         return this.request("/trading/market-order", {
           method: "POST",
           profileId,
-          idempotencyKey: randomUUID11(),
+          idempotencyKey: randomUUID12(),
           body: payload
         });
       }
@@ -47972,7 +48022,7 @@ var init_client = __esm({
         return this.request("/trading/limit-order", {
           method: "POST",
           profileId,
-          idempotencyKey: randomUUID11(),
+          idempotencyKey: randomUUID12(),
           body: payload
         });
       }
@@ -47980,7 +48030,7 @@ var init_client = __esm({
         return this.request("/trading/cancel-order", {
           method: "POST",
           profileId,
-          idempotencyKey: randomUUID11(),
+          idempotencyKey: randomUUID12(),
           body: payload
         });
       }
@@ -47999,7 +48049,7 @@ var init_client = __esm({
         return this.request("/trading/ai/start", {
           method: "POST",
           profileId,
-          idempotencyKey: randomUUID11(),
+          idempotencyKey: randomUUID12(),
           body: payload
         });
       }
@@ -48007,7 +48057,7 @@ var init_client = __esm({
         return this.request("/trading/ai/stop", {
           method: "POST",
           profileId,
-          idempotencyKey: randomUUID11(),
+          idempotencyKey: randomUUID12(),
           body: {}
         });
       }
@@ -48015,7 +48065,7 @@ var init_client = __esm({
         return this.request("/trading/ai/assistant/start", {
           method: "POST",
           profileId,
-          idempotencyKey: randomUUID11(),
+          idempotencyKey: randomUUID12(),
           body: {}
         });
       }
@@ -48023,7 +48073,7 @@ var init_client = __esm({
         return this.request("/trading/ai/assistant/stop", {
           method: "POST",
           profileId,
-          idempotencyKey: randomUUID11(),
+          idempotencyKey: randomUUID12(),
           body: {}
         });
       }
@@ -48031,7 +48081,7 @@ var init_client = __esm({
         return this.request("/trading/ai/runtime/session/start", {
           method: "POST",
           profileId,
-          idempotencyKey: randomUUID11(),
+          idempotencyKey: randomUUID12(),
           body: payload
         });
       }
@@ -48042,7 +48092,7 @@ var init_client = __esm({
           return this.request("/trading/ai/runtime/session/stop", {
             method: "POST",
             profileId,
-            idempotencyKey: randomUUID11(),
+            idempotencyKey: randomUUID12(),
             body: payload
           });
         }
@@ -48059,7 +48109,7 @@ var init_client = __esm({
         }).request("/trading/ai/runtime/session/stop", {
           method: "POST",
           profileId,
-          idempotencyKey: randomUUID11(),
+          idempotencyKey: randomUUID12(),
           body: payload
         });
       }
@@ -48076,7 +48126,7 @@ import {
   unlinkSync,
   writeFileSync
 } from "node:fs";
-import { randomUUID as randomUUID12 } from "node:crypto";
+import { randomUUID as randomUUID13 } from "node:crypto";
 import { dirname as dirname15 } from "node:path";
 var parseStoredValues, FileBackedProtectionStorage, clientRuntimeProtectionStatePath;
 var init_protection_storage = __esm({
@@ -48136,7 +48186,7 @@ var init_protection_storage = __esm({
         mkdirSync(dirname15(this.path), { recursive: true, mode: 448 });
         const serialized = `${JSON.stringify(values)}
 `;
-        const temporaryPath = `${this.path}.${process.pid}.${randomUUID12()}.tmp`;
+        const temporaryPath = `${this.path}.${process.pid}.${randomUUID13()}.tmp`;
         try {
           writeFileSync(temporaryPath, serialized, {
             encoding: "utf8",
@@ -48163,7 +48213,7 @@ var init_protection_storage = __esm({
 });
 
 // lib/agent-core/headless-runtime.ts
-import { randomUUID as randomUUID13 } from "node:crypto";
+import { randomUUID as randomUUID14 } from "node:crypto";
 import { setTimeout as sleep } from "node:timers/promises";
 function objectOrNull2(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
@@ -48275,8 +48325,8 @@ async function runAndReportLocalWorkCycle(options, state, leaseToken, context) {
   return Boolean(result2.decision || tradeSync || result2.afterDecision);
 }
 async function startHeadlessRuntime(options) {
-  const runtimeSessionId = randomUUID13();
-  const deviceId = String(options.deviceId || "").trim() || randomUUID13();
+  const runtimeSessionId = randomUUID14();
+  const deviceId = String(options.deviceId || "").trim() || randomUUID14();
   const startResponse = await options.client.startRuntime(options.profileId, {
     session_id: runtimeSessionId,
     device_id: deviceId,
@@ -49817,6 +49867,8 @@ var init_network_debug = __esm({
         kind: input.kind,
         label: input.label,
         transport: "browser",
+        providerTransport: input.kind === "provider" ? input.providerTransport ?? "direct" : null,
+        actualRelayPath: input.kind === "provider" && input.providerTransport === "server_relay" ? "/llm/native-provider-relay" : null,
         method: (input.method || "POST").toUpperCase(),
         targetProtocol,
         targetHost,
@@ -64639,9 +64691,9 @@ var init_fragments = __esm({
         }
         const result2 = [];
         while (this.#offset < top.match - 1) {
-          const link = this.peek().linkNext;
-          result2.push(this.#subTokenString(this.#offset + 1, link));
-          this.#offset = link;
+          const link2 = this.peek().linkNext;
+          result2.push(this.#subTokenString(this.#offset + 1, link2));
+          this.#offset = link2;
         }
         this.#offset = top.match + 1;
         return result2;
@@ -69365,15 +69417,15 @@ var init_contract2 = __esm({
 });
 
 // node_modules/ethers/lib.esm/providers/ens-resolver.js
-function getIpfsLink(link) {
-  if (link.match(/^ipfs:\/\/ipfs\//i)) {
-    link = link.substring(12);
-  } else if (link.match(/^ipfs:\/\//i)) {
-    link = link.substring(7);
+function getIpfsLink(link2) {
+  if (link2.match(/^ipfs:\/\/ipfs\//i)) {
+    link2 = link2.substring(12);
+  } else if (link2.match(/^ipfs:\/\//i)) {
+    link2 = link2.substring(7);
   } else {
-    assertArgument(false, "unsupported IPFS format", "link", link);
+    assertArgument(false, "unsupported IPFS format", "link", link2);
   }
-  return `https://gateway.ipfs.io/ipfs/${link}`;
+  return `https://gateway.ipfs.io/ipfs/${link2}`;
 }
 var MulticoinProviderPlugin, matcherIpfs, matchers, EnsResolver;
 var init_ens_resolver = __esm({
@@ -92429,13 +92481,14 @@ var init_constraint_contract = __esm({
 });
 
 // lib/runtime/provider-observability.ts
-var record4, identifier, count3, normalizeProviderDiagnostics;
+var MAX_DIAGNOSTIC_LIST_ITEMS, record4, identifier, count3, normalizeProviderDiagnostics;
 var init_provider_observability = __esm({
   "lib/runtime/provider-observability.ts"() {
     "use strict";
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
+    MAX_DIAGNOSTIC_LIST_ITEMS = 16;
     record4 = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : {};
     identifier = (v) => typeof v === "string" && /^[A-Za-z0-9][A-Za-z0-9_.:/-]{0,255}$/.test(v) ? v : void 0;
     count3 = (v) => {
@@ -92457,7 +92510,7 @@ var init_provider_observability = __esm({
         result2.quota_project_source = "provider_quota_subject";
       }
       if (Array.isArray(raw.quota_violations)) {
-        const violations = raw.quota_violations.slice(0, 16).map((item) => {
+        const violations = raw.quota_violations.slice(0, MAX_DIAGNOSTIC_LIST_ITEMS).map((item) => {
           const v = record4(item);
           const out = {};
           const metric = identifier(v.metric), id2 = identifier(v.id), value2 = count3(v.value);
@@ -92471,6 +92524,11 @@ var init_provider_observability = __esm({
         }).filter((v) => Object.keys(v).length > 0);
         if (violations.length) result2.quota_violations = violations;
       }
+      const outputValidation = record4(raw.output_validation);
+      if (Array.isArray(outputValidation.expected_symbols)) {
+        const symbols = outputValidation.expected_symbols.slice(0, MAX_DIAGNOSTIC_LIST_ITEMS).map(identifier).filter((symbol2) => symbol2 !== void 0);
+        if (symbols.length) result2.output_validation = { expected_symbols: [...new Set(symbols)] };
+      }
       return result2;
     };
   }
@@ -93032,7 +93090,7 @@ var headless_local_worker_exports = {};
 __export(headless_local_worker_exports, {
   createHeadlessLocalWorker: () => createHeadlessLocalWorker
 });
-import { randomUUID as randomUUID14 } from "node:crypto";
+import { randomUUID as randomUUID15 } from "node:crypto";
 function objectOrNull3(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
@@ -93461,7 +93519,7 @@ function createHeadlessLocalWorker(options) {
       const statusMatch = errorText.match(/\b([45]\d{2})\b/);
       const statusCode = statusMatch ? Number(statusMatch[1]) : null;
       const failedInvocation = normalizeAiInvocationTelemetry({
-        client_invocation_id: randomUUID14(),
+        client_invocation_id: randomUUID15(),
         use_case: "trader",
         role: "primary",
         attempt_index: 0,
@@ -93517,7 +93575,7 @@ function createHeadlessLocalWorker(options) {
       billable_cached_input_tokens: normalizedUsage.cached_input_tokens
     };
     const invocation = normalizeAiInvocationTelemetry({
-      client_invocation_id: randomUUID14(),
+      client_invocation_id: randomUUID15(),
       use_case: "trader",
       role: "primary",
       attempt_index: 0,
@@ -93781,7 +93839,7 @@ var vtx_exports = {};
 __export(vtx_exports, {
   runVtxCli: () => runVtxCli
 });
-import { randomUUID as randomUUID15 } from "node:crypto";
+import { randomUUID as randomUUID16 } from "node:crypto";
 import { spawn as spawn12 } from "node:child_process";
 function render2(value, json2) {
   if (json2) {
@@ -94195,8 +94253,8 @@ async function runVtxCli(argv2, env = process.env) {
         });
         return { exitCode: 0, stdout: render2(redactCliOutput(response2), json2), stderr: "" };
       }
-      const runtimeSessionId = randomUUID15();
-      const deviceId = config2.runtimeDeviceId ?? randomUUID15();
+      const runtimeSessionId = randomUUID16();
+      const deviceId = config2.runtimeDeviceId ?? randomUUID16();
       const response = await client.startRuntime(profileId, {
         session_id: runtimeSessionId,
         device_id: deviceId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vtxmacro/cli",
-  "version": "2026.9.53",
+  "version": "2026.9.55",
   "description": "VTX Macro CLI, MCP server, and durable external inference host.",
   "type": "module",
   "license": "UNLICENSED",
@@ -21,7 +21,7 @@
   },
   "dependencies": {
     "undici": "8.10.0",
-    "@openai/codex": "0.153.3",
+    "@openai/codex": "0.155.0",
     "@earendil-works/pi-coding-agent": "0.85.1",
     "@earendil-works/pi-ai": "0.85.1",
     "@earendil-works/pi-agent-core": "0.85.1",