@vtxmacro/cli 2026.9.60 → 2026.9.62

package/README.md

@@ -95,11 +95,10 @@ with an uncertain outcome are fenced; same-attempt recovery is not supported.
 An explicitly capable model from a background service listed above can also
 control Main in **Agent** mode using the same VTX OAuth grant and its own local
 adapter-specific vendor credential: ChatGPT, Copilot, or Grok login, or a DeepSeek
-or Pi provider API key. VTX assigns the running bot but does not send a VTX-authored prompt or set
-the analysis cadence. The assigned runtime keeps a durable Agent thread,
-chooses when to wake, requests only the assignment-scoped VTX data it needs (or
-none), and submits the normal structured decision for VTX to validate and
-execute. Review and Screener remain Provider-only.
+or Pi provider API key. VTX assigns the running bot and supplies canonical Agent instructions. The
+assigned runtime keeps a durable thread, requests assignment-scoped data as
+needed, and chooses whether to submit a structured decision. The model chooses
+its next wake through its adapter. A wake never forces HOLD or trading JSON. Review and Screener remain Provider-only.
 
 Before the first Codex login, enable **Device code authorization for Codex** in
 ChatGPT Security settings. Only enter a device code from a login you initiated,
@@ -167,7 +166,7 @@ vtx inference-host service install --adapter pi --instance pi-1
 
 Pi uses the package-owned SDK and exact provider/model identities. The existing
 Provider / Agent controls apply: Provider receives VTX's prompt and has no
-tools; Main Agent keeps an isolated session and only the three VTX tools.
+tools; Main Agent keeps an isolated session and the canonical VTX assignment tools.
 The initial qualified models use an OpenAI API key; the release embeds VTX's
 configured exact model IDs and SDK capability mappings. API compatibility alone
 does not qualify a provider. Ordinary Pi
@@ -319,7 +318,30 @@ schema plus `provenance` with `source: "external_agent"`, a stable
 `agent_run_id`, and the requested and actual model and reasoning effort. Use
 `agent-decision-status` after an uncertain submit response. Use
 `agent-assignment-release` only when intentionally ending the foreground Agent
-session; normal cadence is recorded with `agent-assignment-heartbeat`.
+session; `agent-assignment-heartbeat` maintains the assignment lease.
+Heartbeat metadata is not evidence that market data was checked.
+
+For recurring checks, ask your harness to run this Agent workflow at the desired
+cadence using its own scheduling facility. On each wake, fetch current VTX data,
+inspect source timestamps, and decide whether to submit trading JSON. A check
+may end without submitting anything, including HOLD. VTX does not configure a
+second scheduler, and saved profile trading interval does not schedule Agent
+turns. Keep `agent-run` open for heartbeats; it does not fetch market data or
+wake or restart your harness.
+
+Use a single active turn for the assignment. Long turns, sleep, outages, and
+harness scheduling limits can delay checks; report missed checks and resume
+with fresh data instead of replaying old scheduled work. Continuous operation
+requires the harness and its host to remain available. Record actual successful
+read times and source timestamps to verify cadence and freshness.
+
+`prompt.variables` discovers every canonical trading prompt variable;
+`prompt.context` reads selected names or all names for one owned profile.
+Disabled indicators are available request-locally without settings changes.
+Values share provider calculations, format instructions and unavailable
+semantics, including future variables. Full ordinary Insights MCP access and
+external tools remain separate authorized harness connections; the inference
+grant does not expand into account-wide mutation permission.
 
 ## Exo foreground trading inference
 

package/bin/vtx-service-bootstrap.js

@@ -16,7 +16,7 @@ import { fileURLToPath } from "node:url";
 // agent-cli-release.json
 var agent_cli_release_default = {
   package_name: "@vtxmacro/cli",
-  package_version: "2026.9.60",
+  package_version: "2026.9.62",
   codex_package_name: "@openai/codex",
   codex_version: "0.155.0",
   copilot_sdk_package_name: "@github/copilot-sdk",
@@ -199,6 +199,9 @@ var runtime_policy_generated_default = {
           browser_presence_heartbeat_interval_ms: 3e4,
           host_liveness_heartbeat_interval_ms: 3e4,
           host_liveness_recovery_nudge_ttl_ms: 1e4
+        },
+        observability: {
+          deployment_reload_stall_warning_ms: 15e3
         }
       },
       server_runtime: {
@@ -344,6 +347,12 @@ import { constants } from "node:fs";
 import { lstat, mkdir, open, readFile, realpath, rename, rm } from "node:fs/promises";
 import { homedir } from "node:os";
 import { dirname, isAbsolute, join, relative, resolve, win32 as windowsPath } from "node:path";
+var InferenceHostProcessLockBusyError = class extends Error {
+  constructor() {
+    super("Another inference host process already owns this local host.");
+    this.name = "InferenceHostProcessLockBusyError";
+  }
+};
 var MAX_INFERENCE_PRIVATE_FILE_BYTES = 16 * 1024 * 1024;
 var WINDOWS_PRIVATE_ACL_BROKER_SCRIPT = `$ErrorActionPreference='Stop'
 $ProgressPreference='SilentlyContinue'
@@ -1056,7 +1065,7 @@ async function acquireInferenceHostProcessLock(path, dependencies = {}) {
     } catch (error) {
       if (error.code !== "EEXIST") throw error;
       if (acquisition > 0) {
-        throw new Error("Another inference host process already owns this local host.");
+        throw new InferenceHostProcessLockBusyError();
       }
       let before;
       try {
@@ -1101,14 +1110,14 @@ async function acquireInferenceHostProcessLock(path, dependencies = {}) {
       } catch (error2) {
         if (error2.code === "ENOENT") continue;
         if (Date.now() - before.mtimeMs < 1e4) {
-          throw new Error("Another inference host process already owns this local host.");
+          throw new InferenceHostProcessLockBusyError();
         }
         await reclaimPublicationResidue();
         continue;
       }
       if (staleOwner.schema_version !== 2 || !Number.isSafeInteger(staleOwner.pid) || Number(staleOwner.pid) < 1 || typeof staleOwner.owner_token !== "string" || !staleOwner.owner_token || typeof staleOwner.process_identity !== "string" || !staleOwner.process_identity || typeof staleOwner.boot_identity !== "string" || !staleOwner.boot_identity) {
         if (Date.now() - before.mtimeMs < 1e4) {
-          throw new Error("Another inference host process already owns this local host.");
+          throw new InferenceHostProcessLockBusyError();
         }
         await reclaimPublicationResidue();
         continue;
@@ -1130,7 +1139,7 @@ async function acquireInferenceHostProcessLock(path, dependencies = {}) {
           observedAtMs: Date.now()
         });
         if (inferenceProcessIdentitiesMatch(staleOwner.process_identity, observedIdentity)) {
-          throw new Error("Another inference host process already owns this local host.");
+          throw new InferenceHostProcessLockBusyError();
         }
       }
       let current;

package/bin/vtx-service-launcher.js

@@ -82,6 +82,9 @@ var runtime_policy_generated_default = {
           browser_presence_heartbeat_interval_ms: 3e4,
           host_liveness_heartbeat_interval_ms: 3e4,
           host_liveness_recovery_nudge_ttl_ms: 1e4
+        },
+        observability: {
+          deployment_reload_stall_warning_ms: 15e3
         }
       },
       server_runtime: {
@@ -229,6 +232,12 @@ import { constants } from "node:fs";
 import { lstat, mkdir, open, readFile, realpath, rename, rm } from "node:fs/promises";
 import { homedir } from "node:os";
 import { dirname, isAbsolute, join, relative, resolve, win32 as windowsPath } from "node:path";
+var InferenceHostProcessLockBusyError = class extends Error {
+  constructor() {
+    super("Another inference host process already owns this local host.");
+    this.name = "InferenceHostProcessLockBusyError";
+  }
+};
 var MAX_INFERENCE_PRIVATE_FILE_BYTES = 16 * 1024 * 1024;
 var WINDOWS_PRIVATE_ACL_BROKER_SCRIPT = `$ErrorActionPreference='Stop'
 $ProgressPreference='SilentlyContinue'
@@ -941,7 +950,7 @@ async function acquireInferenceHostProcessLock(path, dependencies = {}) {
     } catch (error) {
       if (error.code !== "EEXIST") throw error;
       if (acquisition > 0) {
-        throw new Error("Another inference host process already owns this local host.");
+        throw new InferenceHostProcessLockBusyError();
       }
       let before;
       try {
@@ -986,14 +995,14 @@ async function acquireInferenceHostProcessLock(path, dependencies = {}) {
       } catch (error2) {
         if (error2.code === "ENOENT") continue;
         if (Date.now() - before.mtimeMs < 1e4) {
-          throw new Error("Another inference host process already owns this local host.");
+          throw new InferenceHostProcessLockBusyError();
         }
         await reclaimPublicationResidue();
         continue;
       }
       if (staleOwner.schema_version !== 2 || !Number.isSafeInteger(staleOwner.pid) || Number(staleOwner.pid) < 1 || typeof staleOwner.owner_token !== "string" || !staleOwner.owner_token || typeof staleOwner.process_identity !== "string" || !staleOwner.process_identity || typeof staleOwner.boot_identity !== "string" || !staleOwner.boot_identity) {
         if (Date.now() - before.mtimeMs < 1e4) {
-          throw new Error("Another inference host process already owns this local host.");
+          throw new InferenceHostProcessLockBusyError();
         }
         await reclaimPublicationResidue();
         continue;
@@ -1015,7 +1024,7 @@ async function acquireInferenceHostProcessLock(path, dependencies = {}) {
           observedAtMs: Date.now()
         });
         if (inferenceProcessIdentitiesMatch(staleOwner.process_identity, observedIdentity)) {
-          throw new Error("Another inference host process already owns this local host.");
+          throw new InferenceHostProcessLockBusyError();
         }
       }
       let current;

package/bin/vtx.js

@@ -77,7 +77,7 @@ var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
     agent_cli_release_default = {
       package_name: "@vtxmacro/cli",
-      package_version: "2026.9.60",
+      package_version: "2026.9.62",
       codex_package_name: "@openai/codex",
       codex_version: "0.155.0",
       copilot_sdk_package_name: "@github/copilot-sdk",
@@ -18033,7 +18033,7 @@ async function acquireInferenceHostProcessLock(path, dependencies = {}) {
     } catch (error48) {
       if (error48.code !== "EEXIST") throw error48;
       if (acquisition > 0) {
-        throw new Error("Another inference host process already owns this local host.");
+        throw new InferenceHostProcessLockBusyError();
       }
       let before;
       try {
@@ -18078,14 +18078,14 @@ async function acquireInferenceHostProcessLock(path, dependencies = {}) {
       } catch (error49) {
         if (error49.code === "ENOENT") continue;
         if (Date.now() - before.mtimeMs < 1e4) {
-          throw new Error("Another inference host process already owns this local host.");
+          throw new InferenceHostProcessLockBusyError();
         }
         await reclaimPublicationResidue();
         continue;
       }
       if (staleOwner.schema_version !== 2 || !Number.isSafeInteger(staleOwner.pid) || Number(staleOwner.pid) < 1 || typeof staleOwner.owner_token !== "string" || !staleOwner.owner_token || typeof staleOwner.process_identity !== "string" || !staleOwner.process_identity || typeof staleOwner.boot_identity !== "string" || !staleOwner.boot_identity) {
         if (Date.now() - before.mtimeMs < 1e4) {
-          throw new Error("Another inference host process already owns this local host.");
+          throw new InferenceHostProcessLockBusyError();
         }
         await reclaimPublicationResidue();
         continue;
@@ -18107,7 +18107,7 @@ async function acquireInferenceHostProcessLock(path, dependencies = {}) {
           observedAtMs: Date.now()
         });
         if (inferenceProcessIdentitiesMatch(staleOwner.process_identity, observedIdentity)) {
-          throw new Error("Another inference host process already owns this local host.");
+          throw new InferenceHostProcessLockBusyError();
         }
       }
       let current;
@@ -18174,7 +18174,7 @@ async function acquireInferenceHostProcessLock(path, dependencies = {}) {
     }
   };
 }
-var loadInferenceReceiptDurabilityTimeoutMs, loadInferenceAgentDataRequestTimeoutMs, INFERENCE_CREDENTIAL_NAMESPACE, MAX_INFERENCE_PRIVATE_FILE_BYTES, WINDOWS_PRIVATE_ACL_BROKER_SCRIPT, WINDOWS_IDENTITY_COMMAND_TIMEOUT_MS, WINDOWS_PRIVATE_ACL_BROKER_STARTUP_TIMEOUT_MS, SMALL_IDENTITY_COMMAND_TIMEOUT_MS, windowsPowerShellEnvironment, windowsPrivateAclBrokerInvocation, WindowsPrivateAclBroker, defaultWindowsPrivateAclBroker, runWindowsPrivateAcl, windowsAclCache, windowsAclIdentity, aclCacheKey, secureWindowsPrivatePath, invalidateWindowsAclCache, rebindHardenedWindowsAclAfterRename, rebindHardenedWindowsDirectoryAfterOwnedMutation, isDefaultWindowsPrivatePath, secureExistingWindowsPath, linuxProcessIdentity, windowsProcessIdentityInvocation, windowsBootIdentityInvocation, windowsProcessIdentity, darwinProcessIdentity, runSmallIdentityCommand, cachedSystemBootIdentity, readInferenceSystemBootIdentity, defaultProcessIdentity, defaultCurrentProcessIdentity, processLockObservationCache, inferenceProcessIdentitiesMatch, DEFAULT_INFERENCE_HOST_INSTANCE, SAFE_INFERENCE_HOST_INSTANCE, requireNamedInstancePath, credentialStoreIdentity, inferenceHostCredentialContextPath, inferenceHostCredentialContextTransitionPath, credentialContextForConfig, WINDOWS_PRIVATE_FILE_REPLACE_ERROR_CODES;
+var loadInferenceReceiptDurabilityTimeoutMs, loadInferenceAgentDataRequestTimeoutMs, loadInferenceAgentCommandLockPolicy, InferenceHostProcessLockBusyError, INFERENCE_CREDENTIAL_NAMESPACE, MAX_INFERENCE_PRIVATE_FILE_BYTES, WINDOWS_PRIVATE_ACL_BROKER_SCRIPT, WINDOWS_IDENTITY_COMMAND_TIMEOUT_MS, WINDOWS_PRIVATE_ACL_BROKER_STARTUP_TIMEOUT_MS, SMALL_IDENTITY_COMMAND_TIMEOUT_MS, windowsPowerShellEnvironment, windowsPrivateAclBrokerInvocation, WindowsPrivateAclBroker, defaultWindowsPrivateAclBroker, runWindowsPrivateAcl, windowsAclCache, windowsAclIdentity, aclCacheKey, secureWindowsPrivatePath, invalidateWindowsAclCache, rebindHardenedWindowsAclAfterRename, rebindHardenedWindowsDirectoryAfterOwnedMutation, isDefaultWindowsPrivatePath, secureExistingWindowsPath, linuxProcessIdentity, windowsProcessIdentityInvocation, windowsBootIdentityInvocation, windowsProcessIdentity, darwinProcessIdentity, runSmallIdentityCommand, cachedSystemBootIdentity, readInferenceSystemBootIdentity, defaultProcessIdentity, defaultCurrentProcessIdentity, processLockObservationCache, inferenceProcessIdentitiesMatch, DEFAULT_INFERENCE_HOST_INSTANCE, SAFE_INFERENCE_HOST_INSTANCE, requireNamedInstancePath, credentialStoreIdentity, inferenceHostCredentialContextPath, inferenceHostCredentialContextTransitionPath, credentialContextForConfig, WINDOWS_PRIVATE_FILE_REPLACE_ERROR_CODES;
 var init_config = __esm({
   "lib/inference-host/config.ts"() {
     "use strict";
@@ -18211,6 +18211,29 @@ var init_config = __esm({
       }
       return Number(configured);
     };
+    loadInferenceAgentCommandLockPolicy = async () => {
+      let waitTimeoutMs;
+      let retryIntervalMs;
+      if (true) {
+        waitTimeoutMs = 3e4;
+        retryIntervalMs = 50;
+      } else {
+        const config2 = parse4(await readFile(resolve(dirname(fileURLToPath(import.meta.url)), "../../../config.toml"), "utf8"));
+        const inference = config2.external_inference;
+        waitTimeoutMs = inference?.agent_command_lock_wait_timeout_milliseconds;
+        retryIntervalMs = inference?.agent_command_lock_retry_interval_milliseconds;
+      }
+      if (!Number.isSafeInteger(waitTimeoutMs) || Number(waitTimeoutMs) < 1 || !Number.isSafeInteger(retryIntervalMs) || Number(retryIntervalMs) < 1 || Number(retryIntervalMs) > Number(waitTimeoutMs)) {
+        throw new Error("Inference Agent command lock policy is missing or invalid.");
+      }
+      return { waitTimeoutMs: Number(waitTimeoutMs), retryIntervalMs: Number(retryIntervalMs) };
+    };
+    InferenceHostProcessLockBusyError = class extends Error {
+      constructor() {
+        super("Another inference host process already owns this local host.");
+        this.name = "InferenceHostProcessLockBusyError";
+      }
+    };
     INFERENCE_CREDENTIAL_NAMESPACE = "vtxmacro-insights-inference";
     MAX_INFERENCE_PRIVATE_FILE_BYTES = 16 * 1024 * 1024;
     WINDOWS_PRIVATE_ACL_BROKER_SCRIPT = `$ErrorActionPreference='Stop'
@@ -20540,6 +20563,9 @@ var init_runtime_policy_generated = __esm({
               browser_presence_heartbeat_interval_ms: 3e4,
               host_liveness_heartbeat_interval_ms: 3e4,
               host_liveness_recovery_nudge_ttl_ms: 1e4
+            },
+            observability: {
+              deployment_reload_stall_warning_ms: 15e3
             }
           },
           server_runtime: {
@@ -21590,7 +21616,7 @@ var init_mcp_client = __esm({
             const hasPublicToolErrorMarker = hasStructuredPublicToolErrorMarker || errorText.includes(PUBLIC_TOOL_ERROR_PREFIX);
             const completionEvidenceExpired = name === "inference.job.complete" && (publicToolError ? publicToolError.failure_code === "completion_evidence_expired" && publicToolError.phase === "validation" && publicToolError.retryable === false && publicToolError.terminal_before_execution === true : !hasPublicToolErrorMarker && errorText.includes("External inference completion evidence window expired"));
             const hostNotClaimable = name === "inference.job.claim" && publicToolError?.failure_code === "host_not_claimable" && publicToolError.phase === "admission" && publicToolError.retryable === true && publicToolError.terminal_before_execution === true;
-            const definitivelyNotApplied = name === "inference.agent.decision.submit" && publicToolError?.phase === "validation" && publicToolError.retryable === false && publicToolError.terminal_before_execution === true && (publicToolError.failure_code === "agent_decision_schema_invalid" || publicToolError.failure_code === "invalid_arguments" && publicToolError.reason_code === "schema_validation") || (name === "inference.host.register" || name === "inference.host.advertise") && (errorText.includes("Advertisement time is outside the allowed clock skew.") || errorText.includes("Advertisement is already expired.")) || (name === "inference.agent.next" || name === "inference.agent.heartbeat") && (errorText.includes("Advertisement time is outside the allowed clock skew.") || errorText.includes("Advertisement is already expired.") || errorText.includes("Heartbeat time is outside the allowed clock skew.")) || name === "inference.host.heartbeat" && errorText.includes("Heartbeat time is outside the allowed clock skew.") || name === "inference.job.claim" && (errorText.includes(
+            const definitivelyNotApplied = (name === "inference.agent.decision.submit" || name === "inference.agent.data.call") && publicToolError?.phase === "validation" && publicToolError.retryable === false && publicToolError.terminal_before_execution === true && (name === "inference.agent.decision.submit" && publicToolError.failure_code === "agent_decision_schema_invalid" || publicToolError.failure_code === "invalid_arguments" && publicToolError.reason_code === "schema_validation") || (name === "inference.host.register" || name === "inference.host.advertise") && (errorText.includes("Advertisement time is outside the allowed clock skew.") || errorText.includes("Advertisement is already expired.")) || (name === "inference.agent.next" || name === "inference.agent.heartbeat") && (errorText.includes("Advertisement time is outside the allowed clock skew.") || errorText.includes("Advertisement is already expired.") || errorText.includes("Heartbeat time is outside the allowed clock skew.")) || name === "inference.host.heartbeat" && errorText.includes("Heartbeat time is outside the allowed clock skew.") || name === "inference.job.claim" && (errorText.includes(
               "External inference claim request was not applied before its generation became stale"
             ) || errorText.includes("External inference host advertisement is expired or superseded")) || name === "inference.job.complete" && completionEvidenceExpired;
             const retryableInfrastructureRejection = EXTERNAL_INFERENCE_AUTOMATED_HOST_TOOLS.includes(name) && (errorText.includes("External inference polling is at its configured concurrency limit") || errorText.includes("The Insights action reached the response timeout") || errorText.includes("Insights capability failed without exposing private runtime details"));
@@ -30935,8 +30961,10 @@ var init_agent_state = __esm({
         "data_contract",
         "minimum_wake_seconds",
         "maximum_wake_seconds",
-        "lease_expires_at"
+        "lease_expires_at",
+        ..."system_prompt" in assignment ? ["system_prompt"] : []
       ]) || typeof assignment.assignment_id !== "string" || !assignment.assignment_id || !Number.isSafeInteger(assignment.assignment_generation) || Number(assignment.assignment_generation) < 1 || typeof assignment.model_id !== "string" || !assignment.model_id || typeof assignment.reasoning_effort !== "string" || !assignment.reasoning_effort || !["trader", "assistant"].includes(String(assignment.bot_mode)) || !["server", "client"].includes(String(assignment.execution_mode)) || !Array.isArray(assignment.allowed_symbols) || assignment.allowed_symbols.some((symbol2) => typeof symbol2 !== "string" || !symbol2) || !assignment.output_schema || typeof assignment.output_schema !== "object" || Array.isArray(assignment.output_schema) || !Array.isArray(assignment.data_contract) || assignment.data_contract.length === 0 || !Number.isSafeInteger(assignment.minimum_wake_seconds) || Number(assignment.minimum_wake_seconds) < 1 || !Number.isSafeInteger(assignment.maximum_wake_seconds) || Number(assignment.maximum_wake_seconds) < Number(assignment.minimum_wake_seconds) || !isIsoTimestamp(assignment.lease_expires_at)) throw new Error(message);
+      if ("system_prompt" in assignment && typeof assignment.system_prompt !== "string") throw new Error(message);
       const ids = assignment.data_contract.map((value2) => {
         const descriptor = assertPlainObject(value2, message);
         if (!hasExactKeys(descriptor, [
@@ -34860,19 +34888,33 @@ var init_runner = __esm({
               if (call.tool === "vtx_get_data") {
                 const capability = typeof call.arguments.capability === "string" ? call.arguments.capability.trim() : "";
                 const args = call.arguments.arguments;
-                if (!capability || !assignment.data_contract.some((descriptor) => descriptor.id === capability) || !args || typeof args !== "object" || Array.isArray(args)) {
+                const descriptor = assignment.data_contract.find((entry) => entry.id === capability);
+                if (!capability || !descriptor || !args || typeof args !== "object" || Array.isArray(args)) {
                   return { success: false, value: { error: "invalid_data_request" } };
                 }
-                const value = await this.options.controlClient.dataCall({
-                  operation_id: randomUUID(),
-                  host_id: this.options.hostId,
-                  assignment_id: assignment.assignment_id,
-                  assignment_generation: assignment.assignment_generation,
-                  capability,
-                  arguments: args,
-                  requested_at: nowIso()
-                }, { signal: turnAbort.signal, timeoutMs: dataRequestTimeoutMs, deadlineAtMs });
-                return { success: true, value };
+                try {
+                  const value = await this.options.controlClient.dataCall({
+                    operation_id: randomUUID(),
+                    host_id: this.options.hostId,
+                    assignment_id: assignment.assignment_id,
+                    assignment_generation: assignment.assignment_generation,
+                    capability,
+                    arguments: args,
+                    requested_at: nowIso()
+                  }, { signal: turnAbort.signal, timeoutMs: dataRequestTimeoutMs, deadlineAtMs });
+                  turnAbort.signal.throwIfAborted();
+                  return { success: true, value };
+                } catch (error48) {
+                  turnAbort.signal.throwIfAborted();
+                  if (error48 instanceof ExternalInferenceMcpError && error48.code === "tool_rejected" && error48.serverFailureCode === "invalid_arguments" && error48.definitivelyNotApplied) {
+                    return { success: false, value: {
+                      error: "invalid_data_arguments",
+                      capability,
+                      input_schema: descriptor.input_schema
+                    } };
+                  }
+                  throw error48;
+                }
               }
               if (call.tool === "vtx_submit_decision") {
                 const candidate = call.arguments.candidate;
@@ -42610,6 +42652,9 @@ var init_runtime_policy_generated2 = __esm({
               browser_presence_heartbeat_interval_ms: 3e4,
               host_liveness_heartbeat_interval_ms: 3e4,
               host_liveness_recovery_nudge_ttl_ms: 1e4
+            },
+            observability: {
+              deployment_reload_stall_warning_ms: 15e3
             }
           },
           server_runtime: {
@@ -44372,6 +44417,7 @@ __export(cli_exports, {
   runInferenceHostCli: () => runInferenceHostCli
 });
 import { createHash as createHash12, randomUUID as randomUUID11 } from "node:crypto";
+import { setTimeout as delay } from "node:timers/promises";
 import { spawn as spawn11 } from "node:child_process";
 import { lstat as lstat9, realpath as realpath8, rm as rm13 } from "node:fs/promises";
 import { hostname as osHostname } from "node:os";
@@ -44426,7 +44472,8 @@ async function runInferenceHostCli(argv2, env = process.env, dependencies = {})
     if (parsed.command === "agent-connect") {
       return await withAgentCommandLock(
         config2,
-        async () => await agentConnect(config2, parsed, dependencies, warnings)
+        async () => await agentConnect(config2, parsed, dependencies, warnings),
+        dependencies
       );
     }
     if (parsed.command === "agent-run") {
@@ -44435,55 +44482,56 @@ async function runInferenceHostCli(argv2, env = process.env, dependencies = {})
     if (parsed.command === "agent-next") {
       return await withAgentCommandLock(
         config2,
-        async () => await agentNext(config2, parsed, dependencies, warnings)
+        async () => await agentNext(config2, parsed, dependencies, warnings),
+        dependencies
       );
     }
     if (parsed.command === "agent-complete") {
       return await withAgentCommandLock(
         config2,
-        async () => await agentComplete(config2, parsed, dependencies, warnings)
+        async () => await agentComplete(config2, parsed, dependencies, warnings),
+        dependencies
       );
     }
     if (parsed.command === "agent-fail") {
       return await withAgentCommandLock(
         config2,
-        async () => await agentFail(config2, parsed, dependencies, warnings)
+        async () => await agentFail(config2, parsed, dependencies, warnings),
+        dependencies
       );
     }
     if (parsed.command === "agent-assignment-next") {
-      return await withAgentCommandLock(
-        config2,
-        async () => await foregroundAssignmentNext(config2, parsed, dependencies, warnings)
-      );
+      return await foregroundAssignmentNext(config2, parsed, dependencies, warnings);
     }
     if (parsed.command === "agent-assignment-heartbeat") {
       return await withAgentCommandLock(
         config2,
-        async () => await foregroundAssignmentHeartbeat(config2, parsed, dependencies, warnings)
+        async () => await foregroundAssignmentHeartbeat(config2, parsed, dependencies, warnings),
+        dependencies
       );
     }
     if (parsed.command === "agent-data-call") {
-      return await withAgentCommandLock(
-        config2,
-        async () => await foregroundDataCall(config2, parsed, dependencies, warnings)
-      );
+      return await foregroundDataCall(config2, parsed, dependencies, warnings);
     }
     if (parsed.command === "agent-decision-submit") {
       return await withAgentCommandLock(
         config2,
-        async () => await foregroundDecisionSubmit(config2, parsed, dependencies, warnings)
+        async () => await foregroundDecisionSubmit(config2, parsed, dependencies, warnings),
+        dependencies
       );
     }
     if (parsed.command === "agent-decision-status") {
       return await withAgentCommandLock(
         config2,
-        async () => await foregroundDecisionStatus(config2, parsed, dependencies, warnings)
+        async () => await foregroundDecisionStatus(config2, parsed, dependencies, warnings),
+        dependencies
       );
     }
     if (parsed.command === "agent-assignment-release") {
       return await withAgentCommandLock(
         config2,
-        async () => await foregroundAssignmentRelease(config2, parsed, dependencies, warnings)
+        async () => await foregroundAssignmentRelease(config2, parsed, dependencies, warnings),
+        dependencies
       );
     }
     if (parsed.command === "service") {
@@ -46252,73 +46300,85 @@ Waiting for approval...
       execution_mode: result2.execution_mode,
       allowed_symbols: result2.allowed_symbols,
       data_contract: result2.data_contract,
+      ...result2.system_prompt ? { system_prompt: result2.system_prompt } : {},
       output_schema: result2.output_schema,
       minimum_wake_seconds: result2.minimum_wake_seconds,
       maximum_wake_seconds: result2.maximum_wake_seconds,
       lease_expires_at: result2.lease_expires_at
     });
     foregroundAssignmentNext = async (config2, parsed, dependencies, warnings) => {
+      if (await readCodexAgentRuntimeState(config2.statePath)) {
+        throw new Error("Recover or release the managed Agent runtime before switching to foreground Agent control.");
+      }
       const session = await agentSession(config2, dependencies, warnings);
       const now = dependencies.now ?? (() => /* @__PURE__ */ new Date());
       const sleep4 = dependencies.sleep ?? (async (milliseconds) => {
         await new Promise((resolve13) => setTimeout(resolve13, milliseconds));
       });
       const stopAt = now().getTime() + parsed.waitSeconds * 1e3;
-      let state = await readInferenceForegroundAgentControlState(config2.statePath) ?? foregroundAgentControlState(session.localState.host_id, now().toISOString());
-      if (state.host_id !== session.localState.host_id) {
-        throw new Error("Foreground Agent recovery state belongs to another inference host.");
-      }
-      if (state.pending_decision) {
-        throw new Error("Resolve the pending Agent decision before claiming another assignment.");
-      }
       while (true) {
-        if (!state.pending_next) {
-          const requestedAt = now().toISOString();
-          state = {
-            ...state,
-            pending_next: {
-              operation_id: agentOperationId("agent-assignment-next"),
-              requested_at: requestedAt
-            },
-            updated_at: requestedAt
-          };
-          await writeInferenceForegroundAgentControlState(config2.statePath, state);
-        }
-        const pending3 = state.pending_next;
-        let result2;
-        try {
-          result2 = await session.client.callTool("inference.agent.assignment.next", {
-            operation_id: pending3.operation_id,
-            host_id: session.localState.host_id,
-            requested_at: pending3.requested_at,
-            contract_version: "agent_assignment_v2",
-            ...state.assignment ? {
-              assignment_id: state.assignment.assignment_id,
-              assignment_generation: state.assignment.assignment_generation
-            } : {}
-          });
-        } catch (error48) {
-          if (error48 && typeof error48 === "object" && error48.definitivelyNotApplied === true) {
+        const result2 = await withAgentCommandLock(config2, async () => {
+          let state = await readInferenceForegroundAgentControlState(config2.statePath) ?? foregroundAgentControlState(session.localState.host_id, now().toISOString());
+          if (state.host_id !== session.localState.host_id) {
+            throw new Error("Foreground Agent recovery state belongs to another inference host.");
+          }
+          if (state.pending_decision) {
+            throw new Error("Resolve the pending Agent decision before claiming another assignment.");
+          }
+          if (!state.pending_next) {
+            const requestedAt = now().toISOString();
+            state = {
+              ...state,
+              pending_next: {
+                operation_id: agentOperationId("agent-assignment-next"),
+                requested_at: requestedAt
+              },
+              updated_at: requestedAt
+            };
+            await writeInferenceForegroundAgentControlState(config2.statePath, state);
+          }
+          const pending3 = state.pending_next;
+          let result3;
+          try {
+            result3 = await session.client.callTool("inference.agent.assignment.next", {
+              operation_id: pending3.operation_id,
+              host_id: session.localState.host_id,
+              requested_at: pending3.requested_at,
+              contract_version: "agent_assignment_v3",
+              ...state.assignment ? {
+                assignment_id: state.assignment.assignment_id,
+                assignment_generation: state.assignment.assignment_generation
+              } : {}
+            });
+          } catch (error48) {
+            if (error48 && typeof error48 === "object" && error48.definitivelyNotApplied === true) {
+              state = { ...state, pending_next: null, updated_at: now().toISOString() };
+              await writeInferenceForegroundAgentControlState(config2.statePath, state);
+            }
+            throw error48;
+          }
+          if (result3.claim_state === "claimed") {
+            const assignment = assignmentFromClaim(result3);
+            state = {
+              ...state,
+              assignment,
+              pending_next: null,
+              next_wake_at: null,
+              updated_at: now().toISOString()
+            };
+            await writeInferenceForegroundAgentControlState(config2.statePath, state);
+          } else {
             state = { ...state, pending_next: null, updated_at: now().toISOString() };
             await writeInferenceForegroundAgentControlState(config2.statePath, state);
           }
-          throw error48;
-        }
+          return result3;
+        }, dependencies);
         if (result2.claim_state === "claimed") {
-          const assignment = assignmentFromClaim(result2);
-          state = {
-            ...state,
-            assignment,
-            pending_next: null,
-            next_wake_at: null,
-            updated_at: now().toISOString()
-          };
-          await writeInferenceForegroundAgentControlState(config2.statePath, state);
           return {
             exitCode: 0,
             stdout: render({
               ...result2,
-              instructions: "VTX supplied no trading prompt or prepared context. Choose your own cadence; use agent-data-call zero or more times, submit the exact output_schema through agent-decision-submit, then record the next wake with agent-assignment-heartbeat. Keep agent-run open for liveness.",
+              instructions: "Use your harness scheduler for the requested cadence and keep agent-run open for liveness. Use agent-data-call for canonical VTX data and your authorized native Insights/external tools. Trading JSON is optional; submit a decision only when you choose, using the exact output_schema. The keeper does not schedule or restart your harness.",
               data_command: "vtx inference-host agent-data-call --json",
               decision_command: "vtx inference-host agent-decision-submit --json",
               decision_input: {
@@ -46339,8 +46399,6 @@ Waiting for approval...
 ` : ""
           };
         }
-        state = { ...state, pending_next: null, updated_at: now().toISOString() };
-        await writeInferenceForegroundAgentControlState(config2.statePath, state);
         const remaining = stopAt - now().getTime();
         if (remaining <= 0 || parsed.waitSeconds === 0) {
           return {
@@ -46392,7 +46450,11 @@ Waiting for approval...
     };
     foregroundDataCall = async (config2, parsed, dependencies, warnings) => {
       const session = await agentSession(config2, dependencies, warnings);
-      const state = await requireForegroundAgentState(config2, session.localState.host_id);
+      const state = await withAgentCommandLock(
+        config2,
+        async () => requireForegroundAgentState(config2, session.localState.host_id),
+        dependencies
+      );
       const input = await parseAgentStdin(dependencies, ["capability", "arguments"]);
       const capability = typeof input.capability === "string" ? input.capability.trim() : "";
       if (!capability || !state.assignment.data_contract.some((item) => item.id === capability)) {
@@ -46401,6 +46463,7 @@ Waiting for approval...
       if (!input.arguments || typeof input.arguments !== "object" || Array.isArray(input.arguments)) {
         throw new Error("Agent data arguments must be one JSON object.");
       }
+      const timeoutMs = await loadInferenceAgentDataRequestTimeoutMs();
       const result2 = await session.client.callTool("inference.agent.data.call", {
         operation_id: agentOperationId("agent-data-call"),
         host_id: session.localState.host_id,
@@ -46409,7 +46472,7 @@ Waiting for approval...
         capability,
         arguments: input.arguments,
         requested_at: (dependencies.now ?? (() => /* @__PURE__ */ new Date()))().toISOString()
-      });
+      }, { timeoutMs, deadlineAtMs: Date.now() + timeoutMs });
       return {
         exitCode: 0,
         stdout: render(result2, parsed.json),
@@ -46645,6 +46708,9 @@ Waiting for approval...
       let assignmentHeartbeatCount = 0;
       try {
         keeperLock = await acquireInferenceHostProcessLock(foregroundHostLockPath(config2));
+        if (await readCodexAgentRuntimeState(config2.statePath)) {
+          throw new Error("Recover or release the managed Agent runtime before running a foreground keeper.");
+        }
         const store = configuredCredentialStore(config2, dependencies, (message) => {
           warnings.push(message);
         });
@@ -47101,8 +47167,30 @@ Waiting for approval...
 ` : ""
       };
     };
-    withAgentCommandLock = async (config2, operation) => {
-      const lock2 = await acquireInferenceHostProcessLock(config2.processLockPath);
+    withAgentCommandLock = async (config2, operation, dependencies = {}) => {
+      const policy2 = await loadInferenceAgentCommandLockPolicy();
+      const cancellation = lifecycleCancellation(dependencies);
+      const deadline = Date.now() + policy2.waitTimeoutMs;
+      let lock2 = null;
+      try {
+        while (!lock2) {
+          cancellation.signal.throwIfAborted();
+          try {
+            lock2 = await acquireInferenceHostProcessLock(config2.processLockPath);
+          } catch (error48) {
+            if (!(error48 instanceof InferenceHostProcessLockBusyError)) throw error48;
+            const remaining = deadline - Date.now();
+            if (remaining <= 0) throw new Error("Timed out waiting for the inference host command lock.");
+            await delay(Math.min(policy2.retryIntervalMs, remaining), void 0, { signal: cancellation.signal });
+          }
+        }
+        if (cancellation.signal.aborted) {
+          await lock2.release();
+          cancellation.signal.throwIfAborted();
+        }
+      } finally {
+        cancellation.unregister();
+      }
       try {
         return await operation();
       } finally {
@@ -48519,7 +48607,7 @@ var init_headless_runtime = __esm({
 });
 
 // lib/runtime/hyperliquid-market-symbol.ts
-var configuredCaseSensitiveSymbols, normalizeCaseSensitiveSymbols, configureHyperliquidMarketSymbolCasing, canonicalBaseSymbol, normalizeHyperliquidMarketSymbol, getHyperliquidMarketDex;
+var configuredCaseSensitiveSymbols, isHyperliquidSpotSymbol, normalizeCaseSensitiveSymbols, configureHyperliquidMarketSymbolCasing, canonicalBaseSymbol, normalizeHyperliquidMarketSymbol, getHyperliquidMarketDex;
 var init_hyperliquid_market_symbol = __esm({
   "lib/runtime/hyperliquid-market-symbol.ts"() {
     "use strict";
@@ -48527,6 +48615,10 @@ var init_hyperliquid_market_symbol = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     configuredCaseSensitiveSymbols = [];
+    isHyperliquidSpotSymbol = (value) => {
+      const symbol2 = typeof value === "string" ? value.trim() : "";
+      return symbol2.startsWith("@") || symbol2.includes("/");
+    };
     normalizeCaseSensitiveSymbols = (symbols) => {
       if (!Array.isArray(symbols)) return [];
       const out = [];
@@ -52373,7 +52465,7 @@ async function postClientRuntime(path, profileId, body, options) {
   const resolvedSchedulerInstanceId = String(
     options?.schedulerInstanceId ?? requestContext.schedulerInstanceId ?? ""
   ).trim() || null;
-  const persistedRuntimeLease = getPersistedClientRuntimeServerLease(numericProfileId);
+  const persistedRuntimeLease = options?.omitRuntimeLeaseToken === true ? null : getPersistedClientRuntimeServerLease(numericProfileId);
   if (resolvedRuntimeLeaseToken && persistedRuntimeLease?.schedulerInstanceId && !resolvedSchedulerInstanceId) {
     resolvedRuntimeLeaseToken = void 0;
   }
@@ -52907,6 +52999,17 @@ var init_api2 = __esm({
       if (code) {
         error48.code = code;
       }
+      if (response.status === 409 && code === "snapshot_stale") {
+        for (const [field, property] of [
+          ["snapshot_age_seconds", "runtimeSnapshotAgeSeconds"],
+          ["snapshot_max_age_seconds", "runtimeSnapshotMaxAgeSeconds"]
+        ]) {
+          const value = nestedDetail?.[field];
+          if (typeof value === "number" && Number.isFinite(value) && value >= 0) {
+            Object.assign(error48, { [property]: value });
+          }
+        }
+      }
       const retryable = payload.retryable ?? nestedDetail?.retryable;
       if (typeof retryable === "boolean") {
         error48.retryable = retryable;
@@ -54478,8 +54581,8 @@ function unpercent(value) {
     return String.fromCharCode(parseInt(code, 16));
   }));
 }
-function wait2(delay2) {
-  return new Promise((resolve13) => setTimeout(resolve13, delay2));
+function wait2(delay3) {
+  return new Promise((resolve13) => setTimeout(resolve13, delay3));
 }
 var MAX_ATTEMPTS, SLOT_INTERVAL, defaultGetUrlFunc, reData, reIpfs, locked, Gateways, fetchSignals, FetchCancelSignal, FetchRequest, FetchResponse;
 var init_fetch = __esm({
@@ -54831,7 +54934,7 @@ var init_fetch = __esm({
           this.#throttle.maxAttempts = params.maxAttempts;
         }
       }
-      async #send(attempt, expires, delay2, _request, _response) {
+      async #send(attempt, expires, delay3, _request, _response) {
         if (attempt >= this.#throttle.maxAttempts) {
           return _response.makeServerError("exceeded maximum retry limit");
         }
@@ -54840,8 +54943,8 @@ var init_fetch = __esm({
           reason: "timeout",
           request: _request
         });
-        if (delay2 > 0) {
-          await wait2(delay2);
+        if (delay3 > 0) {
+          await wait2(delay3);
         }
         let req = this.clone();
         const scheme = (req.url.split(":")[0] || "").toLowerCase();
@@ -54878,11 +54981,11 @@ var init_fetch = __esm({
         } else if (response.statusCode === 429) {
           if (this.retryFunc == null || await this.retryFunc(req, response, attempt)) {
             const retryAfter = response.headers["retry-after"];
-            let delay3 = this.#throttle.slotInterval * Math.trunc(Math.random() * Math.pow(2, attempt));
+            let delay4 = this.#throttle.slotInterval * Math.trunc(Math.random() * Math.pow(2, attempt));
             if (typeof retryAfter === "string" && retryAfter.match(/^[1-9][0-9]*$/)) {
-              delay3 = parseInt(retryAfter);
+              delay4 = parseInt(retryAfter);
             }
-            return req.clone().#send(attempt + 1, expires, delay3, _request, response);
+            return req.clone().#send(attempt + 1, expires, delay4, _request, response);
           }
         }
         if (this.processFunc) {
@@ -54893,12 +54996,12 @@ var init_fetch = __esm({
             if (error48.throttle == null || typeof error48.stall !== "number") {
               response.makeServerError("error in post-processing function", error48).assertOk();
             }
-            let delay3 = this.#throttle.slotInterval * Math.trunc(Math.random() * Math.pow(2, attempt));
+            let delay4 = this.#throttle.slotInterval * Math.trunc(Math.random() * Math.pow(2, attempt));
             ;
             if (error48.stall >= 0) {
-              delay3 = error48.stall;
+              delay4 = error48.stall;
             }
-            return req.clone().#send(attempt + 1, expires, delay3, _request, response);
+            return req.clone().#send(attempt + 1, expires, delay4, _request, response);
           }
         }
         return response;
@@ -84646,6 +84749,8 @@ var init_hyperliquid_client = __esm({
       if (!Array.isArray(payload)) {
         throw new Error("Malformed Hyperliquid frontendOpenOrders response.");
       }
+      const isSpotOrder = (raw) => raw != null && typeof raw === "object" && !Array.isArray(raw) && isHyperliquidSpotSymbol(raw.coin);
+      const perpOrders = payload.filter((raw) => !isSpotOrder(raw));
       const normalizeOpenOrder = (raw, inheritedCoin = "") => {
         if (raw == null || typeof raw !== "object" || Array.isArray(raw)) {
           throw new Error("Malformed Hyperliquid frontendOpenOrders member.");
@@ -84720,10 +84825,10 @@ var init_hyperliquid_client = __esm({
         };
       };
       if (input.includeChildren !== true) {
-        return payload.map((raw) => normalizeOpenOrder(raw));
+        return perpOrders.map((raw) => normalizeOpenOrder(raw));
       }
       const canonicalOrders = /* @__PURE__ */ new Map();
-      const pendingOrders = payload.map((raw) => ({
+      const pendingOrders = perpOrders.map((raw) => ({
         raw,
         inheritedCoin: "",
         depth: 0,
@@ -84735,6 +84840,9 @@ var init_hyperliquid_client = __esm({
           break;
         }
         const { raw, inheritedCoin, depth, ancestors } = pending3;
+        if (isSpotOrder(raw)) {
+          continue;
+        }
         if (raw == null || typeof raw !== "object" || Array.isArray(raw)) {
           throw new Error("Malformed Hyperliquid frontendOpenOrders member.");
         }
@@ -86238,6 +86346,65 @@ var init_key_preview_contract = __esm({
   }
 });
 
+// lib/retired-model-source.ts
+var init_retired_model_source = __esm({
+  "lib/retired-model-source.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+  }
+});
+
+// lib/modelGrouping.ts
+var init_modelGrouping = __esm({
+  "lib/modelGrouping.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_byokProviderRegistry();
+  }
+});
+
+// lib/openai-compatible-capabilities.ts
+var init_openai_compatible_capabilities = __esm({
+  "lib/openai-compatible-capabilities.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+  }
+});
+
+// lib/local-ai.ts
+var LOCAL_CONTEXT_CACHE_TTL_MS, LOCAL_AI_SERVER_TYPE_ALIASES, normalizeLocalAiServerType;
+var init_local_ai = __esm({
+  "lib/local-ai.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_retired_model_source();
+    init_modelGrouping();
+    init_openai_compatible_capabilities();
+    init_sort_utils();
+    LOCAL_CONTEXT_CACHE_TTL_MS = 12 * 60 * 60 * 1e3;
+    LOCAL_AI_SERVER_TYPE_ALIASES = {
+      "openai-compatible": "openai-compatible",
+      openai: "openai-compatible",
+      compatible: "openai-compatible"
+    };
+    normalizeLocalAiServerType = (value) => {
+      const normalized = String(value ?? "").trim().toLowerCase();
+      if (!normalized) {
+        return null;
+      }
+      return Object.prototype.hasOwnProperty.call(LOCAL_AI_SERVER_TYPE_ALIASES, normalized) ? "openai-compatible" : null;
+    };
+  }
+});
+
 // lib/runtime/vault.ts
 function notifyVaultChanged(profileId) {
   window.dispatchEvent(new CustomEvent(CLIENT_VAULT_CHANGED_EVENT, { detail: profileId }));
@@ -86298,7 +86465,7 @@ function validateDeviceSecrets(value, options) {
     baseUrl: typeof rawLocalAi.baseUrl === "string" ? rawLocalAi.baseUrl : "",
     modelName: typeof rawLocalAi.modelName === "string" ? rawLocalAi.modelName : "",
     apiKey: typeof rawLocalAi.apiKey === "string" ? rawLocalAi.apiKey : "",
-    serverType: rawLocalAi.serverType === "ollama-native" ? "ollama-native" : rawLocalAi.serverType === "openai-compatible" ? "openai-compatible" : void 0
+    serverType: typeof rawLocalAi.serverType === "string" ? rawLocalAi.serverType : void 0
   });
   const rawOpenAiCompatible = record5.openaiCompatible && typeof record5.openaiCompatible === "object" ? record5.openaiCompatible : {};
   const openaiCompatible = normalizeOpenAiCompatibleSecrets({
@@ -86306,7 +86473,7 @@ function validateDeviceSecrets(value, options) {
     modelName: typeof rawOpenAiCompatible.modelName === "string" ? rawOpenAiCompatible.modelName : "",
     apiKey: typeof rawOpenAiCompatible.apiKey === "string" ? rawOpenAiCompatible.apiKey : ""
   });
-  const hasLocalAiConfig = Boolean(localAi?.baseUrl);
+  const hasLocalAiConfig = Boolean(localAi?.baseUrl && (!localAi.serverType || normalizeLocalAiServerType(localAi.serverType)));
   const hasOpenAiCompatibleConfig = Boolean(
     openaiCompatible?.baseUrl && openaiCompatible?.apiKey
   );
@@ -86354,7 +86521,7 @@ function validateDeviceSecrets(value, options) {
     missing: missing2
   };
 }
-var VAULT_PREFIX, CLIENT_VAULT_CHANGED_EVENT, VAULT_DB_NAME, VAULT_DB_VERSION, VAULT_KEY_STORE, DEFAULT_DEVICE_SECRET_STORAGE, encoder, decoder, sessionVaultCache, runtimeSecretsInFlight, buildRuntimeSecretsRequestKey, fetchClientRuntimeSecretsSingleFlight, hasSecureVaultSupport, bytesToBase64, base64ToArrayBuffer, openVaultDb, withVaultStore, getVaultKey, getOrCreateVaultKey, deleteVaultKey, mapClientRuntimeSecretsToDeviceSecrets, normalizeDeviceSecretStorage, normalizeLocalAiSecrets, normalizeOpenAiCompatibleSecrets, hasAnySecretValues, hasAnyDeviceOnlyOptIn, mergeHydratedSecrets, preserveDeviceOnlySecrets, normalizeClientRuntimeSecretProvider, getResponseSecretVersion, getStoredSecretVersion, buildHydrationState, normalizeProfileIdForApi, ClientVault;
+var VAULT_PREFIX, CLIENT_VAULT_CHANGED_EVENT, VAULT_DB_NAME, VAULT_DB_VERSION, VAULT_KEY_STORE, DEFAULT_DEVICE_SECRET_STORAGE, encoder, decoder, sessionVaultCache, runtimeSecretsInFlight, buildRuntimeSecretsRequestKey, fetchClientRuntimeSecretsSingleFlight, hasSecureVaultSupport, bytesToBase64, base64ToArrayBuffer, openVaultDb, withVaultStore, getVaultKey, getOrCreateVaultKey, deleteVaultKey, mapClientRuntimeSecretsToDeviceSecrets, normalizeDeviceSecretStorage, normalizeLocalAiSecrets, normalizeOpenAiCompatibleSecrets, hasAnySecretValues, hasAnyDeviceOnlyOptIn, mergeHydratedSecrets, preserveDeviceOnlySecrets, normalizeClientRuntimeSecretProvider, getResponseSecretVersion, getStoredSecretMetadata, getStoredSecretVersion, buildHydrationState, normalizeProfileIdForApi, ClientVault;
 var init_vault = __esm({
   "lib/runtime/vault.ts"() {
     "use strict";
@@ -86368,6 +86535,7 @@ var init_vault = __esm({
     init_key_preview_contract();
     init_client_runtime_provider_visibility_contract();
     init_client_runtime_secret_rate_limit_contract();
+    init_local_ai();
     init_byokProviderRegistry();
     VAULT_PREFIX = "vtx_vault_";
     CLIENT_VAULT_CHANGED_EVENT = "vtx-client-vault-changed";
@@ -86531,6 +86699,7 @@ var init_vault = __esm({
       }
       const localBaseUrl = typeof value.local_ai_base_url === "string" ? value.local_ai_base_url.trim() : "";
       const localApiKey = typeof value.local_ai_api_key === "string" ? value.local_ai_api_key.trim() : "";
+      const localServerType = typeof value.local_ai_server_type === "string" ? value.local_ai_server_type.trim() : "";
       const oaiCompatBaseUrl = typeof value.openai_compatible_base_url === "string" ? value.openai_compatible_base_url.trim() : "";
       const oaiCompatApiKey = typeof value.openai_compatible_api_key === "string" ? value.openai_compatible_api_key.trim() : "";
       return {
@@ -86541,7 +86710,8 @@ var init_vault = __esm({
         ...Object.keys(providerBaseUrlSlots).length > 0 ? { providerBaseUrlSlots } : {},
         localAi: {
           ...localBaseUrl ? { baseUrl: localBaseUrl } : {},
-          ...localApiKey ? { apiKey: localApiKey } : {}
+          ...localApiKey ? { apiKey: localApiKey } : {},
+          ...localServerType ? { serverType: localServerType } : {}
         },
         openaiCompatible: oaiCompatBaseUrl || oaiCompatApiKey ? {
           ...oaiCompatBaseUrl ? { baseUrl: oaiCompatBaseUrl } : {},
@@ -86561,7 +86731,7 @@ var init_vault = __esm({
       const baseUrl = typeof value?.baseUrl === "string" ? value.baseUrl.trim() : "";
       const modelName = typeof value?.modelName === "string" ? value.modelName.trim() : "";
       const apiKey = typeof value?.apiKey === "string" ? value.apiKey.trim() : "";
-      const serverType = value?.serverType === "ollama-native" ? "ollama-native" : value?.serverType === "openai-compatible" ? "openai-compatible" : void 0;
+      const serverType = typeof value?.serverType === "string" ? value.serverType.trim() || void 0 : void 0;
       if (!baseUrl && !modelName && !apiKey && !serverType) {
         return void 0;
       }
@@ -86598,11 +86768,11 @@ var init_vault = __esm({
       const mergedLocalAi = storage2.byok === "device" ? normalizeLocalAiSecrets({
         baseUrl: localNormalized?.localAi?.baseUrl,
         apiKey: localNormalized?.localAi?.apiKey,
-        serverType: localNormalized?.localAi?.serverType
+        serverType: localNormalized?.localAi?.serverType ?? remoteNormalized?.localAi?.serverType
       }) : normalizeLocalAiSecrets({
         baseUrl: remoteNormalized?.localAi?.baseUrl,
         apiKey: remoteNormalized?.localAi?.apiKey ?? localNormalized?.localAi?.apiKey,
-        serverType: localNormalized?.localAi?.serverType
+        serverType: remoteNormalized?.localAi?.serverType ?? localNormalized?.localAi?.serverType
       });
       const mergedOpenAiCompatible = storage2.byok === "device" ? normalizeOpenAiCompatibleSecrets({
         baseUrl: localNormalized?.openaiCompatible?.baseUrl,
@@ -86647,7 +86817,7 @@ var init_vault = __esm({
     getResponseSecretVersion = (value) => {
       return normalizeClientRuntimeSecretVersion(value.client_runtime_secret_version);
     };
-    getStoredSecretVersion = (profileId) => {
+    getStoredSecretMetadata = (profileId) => {
       const encryptedRaw = localStorage.getItem(`${VAULT_PREFIX}${profileId}`);
       if (encryptedRaw) {
         try {
@@ -86655,14 +86825,19 @@ var init_vault = __esm({
           if (parsed && typeof parsed === "object" && "version" in parsed && parsed.version === 1 && "serverSecretVersion" in parsed) {
             const version3 = normalizeClientRuntimeSecretVersion(parsed.serverSecretVersion);
             if (version3) {
-              return version3;
+              return { version: version3, allProviderKeysHydrated: parsed.allProviderKeysHydrated === true };
             }
           }
         } catch {
         }
       }
-      return normalizeClientRuntimeSecretVersion(sessionVaultCache.get(profileId)?.serverSecretVersion);
+      const session = sessionVaultCache.get(profileId);
+      return {
+        version: normalizeClientRuntimeSecretVersion(session?.serverSecretVersion),
+        allProviderKeysHydrated: session?.allProviderKeysHydrated === true
+      };
     };
+    getStoredSecretVersion = (profileId) => getStoredSecretMetadata(profileId).version;
     buildHydrationState = (response, secrets, persistence, localSecretVersion, options) => {
       const validation = validateDeviceSecrets(secrets, options);
       const metadata = projectClientRuntimeSecretMetadata(
@@ -86691,6 +86866,41 @@ var init_vault = __esm({
       return Number.isFinite(parsed) && parsed > 0 ? parsed : void 0;
     };
     ClientVault = class _ClientVault {
+      /** Refresh account-backed provider slots at a cycle boundary, keeping its bound signer. */
+      static async refreshProviderSecretsForVersion(profileId, current, serverVersion) {
+        const version3 = normalizeClientRuntimeSecretVersion(serverVersion);
+        if (!version3 || current.storage?.byok === "device") return current;
+        let savedSecrets;
+        const stored = getStoredSecretMetadata(profileId);
+        if (stored.version !== version3 || !stored.allProviderKeysHydrated) {
+          const hydrated = await _ClientVault.hydrateFromServerWithState(profileId, {
+            includeAllProviderKeys: true,
+            requireProviderSecret: false
+          });
+          if (hydrated.hydrationState.serverSecretVersion !== version3) {
+            throw new Error("Client provider credentials changed; account refresh is pending.");
+          }
+          savedSecrets = hydrated.secrets;
+          if (savedSecrets && hydrated.hydrationState.localSecretVersion !== version3) {
+            await _ClientVault.saveSecrets(profileId, savedSecrets, {
+              serverSecretVersion: version3,
+              allProviderKeysHydrated: true
+            });
+          }
+        } else {
+          savedSecrets = await _ClientVault.getSecrets(profileId);
+        }
+        return {
+          ...current,
+          providerKeys: savedSecrets?.providerKeys ?? {},
+          providerKeySlots: savedSecrets?.providerKeySlots,
+          providerBaseUrls: savedSecrets?.providerBaseUrls,
+          providerBaseUrlSlots: savedSecrets?.providerBaseUrlSlots,
+          localAi: savedSecrets?.localAi,
+          openaiCompatible: savedSecrets?.openaiCompatible,
+          storage: { ...current.storage, byok: savedSecrets?.storage?.byok ?? "server" }
+        };
+      }
       static async hydrateFromServer(profileId, options) {
         const result2 = await _ClientVault.hydrateFromServerWithState(profileId, options);
         return result2.secrets;
@@ -86755,7 +86965,8 @@ var init_vault = __esm({
           };
         }
         const persistence = await _ClientVault.saveSecrets(profileId, validation.normalized, {
-          serverSecretVersion: remoteSecretVersion
+          serverSecretVersion: remoteSecretVersion,
+          allProviderKeysHydrated: includeAllProviderKeys
         });
         return {
           secrets: validation.normalized,
@@ -86775,12 +86986,14 @@ var init_vault = __esm({
           throw new Error("Invalid device secrets payload.");
         }
         const serverSecretVersion = normalizeClientRuntimeSecretVersion(options?.serverSecretVersion);
+        const allProviderKeysHydrated = options?.allProviderKeysHydrated === true;
         const vaultKey = await getOrCreateVaultKey(profileId);
         if (!vaultKey || !hasSecureVaultSupport()) {
           sessionVaultCache.set(profileId, {
             secrets: normalized,
             persistence: "session",
-            serverSecretVersion
+            serverSecretVersion,
+            allProviderKeysHydrated
           });
           localStorage.removeItem(key);
           notifyVaultChanged(profileId);
@@ -86799,7 +87012,8 @@ var init_vault = __esm({
           version: 1,
           iv: bytesToBase64(iv),
           ciphertext: bytesToBase64(new Uint8Array(encrypted)),
-          serverSecretVersion
+          serverSecretVersion,
+          allProviderKeysHydrated
         };
         localStorage.setItem(key, JSON.stringify(encryptedRecord));
         sessionVaultCache.delete(profileId);
@@ -92784,7 +92998,7 @@ var init_constraint_contract = __esm({
 });
 
 // lib/runtime/provider-observability.ts
-var MAX_DIAGNOSTIC_LIST_ITEMS, record4, identifier, count3, normalizeProviderDiagnostics;
+var MAX_DIAGNOSTIC_LIST_ITEMS, record4, ERROR_TOKEN, ERROR_DOMAIN, ERROR_INPUT, ERROR_REDACTIONS, normalizeProviderError, identifier, count3, normalizeProviderDiagnostics;
 var init_provider_observability = __esm({
   "lib/runtime/provider-observability.ts"() {
     "use strict";
@@ -92793,6 +93007,45 @@ var init_provider_observability = __esm({
     init_define_VTX_PI_MODEL_POLICY();
     MAX_DIAGNOSTIC_LIST_ITEMS = 16;
     record4 = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : {};
+    ERROR_TOKEN = /^[A-Z][A-Z0-9_]{0,63}$/;
+    ERROR_DOMAIN = /^[a-z0-9][a-z0-9.-]{0,127}$/;
+    ERROR_INPUT = /\b(?:prompt|contents|messages|system[_ ]?instruction|tools|request\s+body|input(?:\s+text)?)\s*[:=]|[{}]|```/i;
+    ERROR_REDACTIONS = [
+      [/https?:\/\/[^\s<>"']+/gi, "[REDACTED_URL]"],
+      [/\b[A-Za-z0-9.!#$%&'*+/=?^_`{|}~-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g, "[REDACTED_EMAIL]"],
+      [/\bBearer\s+[^\s,;]+/gi, "Bearer [REDACTED]"],
+      [/\b(?:api[_ -]?key|x-goog-api-key|authorization|access[_ -]?token|token|secret|password|private[_ -]?key|key)\s*[:=]\s*(?:"[^"]*"|'[^']*'|[^\s,;]+)/gi, "[REDACTED]"],
+      [/\b(?:AIza[A-Za-z0-9_-]+|sk-[A-Za-z0-9_-]+|AQ\.[A-Za-z0-9._-]+|0x[a-fA-F0-9]{64})\b/g, "[REDACTED]"],
+      [/"[^"]*"|'[^'\r\n]*'/g, "[REDACTED]"]
+    ];
+    normalizeProviderError = (value) => {
+      const raw = record4(value);
+      const result2 = {};
+      if (typeof raw.code === "number" && Number.isInteger(raw.code) && raw.code >= 100 && raw.code <= 599) result2.code = raw.code;
+      if (typeof raw.status === "string" && ERROR_TOKEN.test(raw.status)) result2.status = raw.status;
+      if (typeof raw.message === "string" && raw.message.trim()) {
+        let message = raw.message;
+        if (Array.from(message).length > 8192 || ERROR_INPUT.test(message)) message = "[REDACTED_INPUT]";
+        else {
+          for (const [pattern, replacement] of ERROR_REDACTIONS) message = message.replace(pattern, replacement);
+          message = message.replace(/[\x00-\x1f\x7f]+/g, " ").replace(/\s+/g, " ").trim();
+        }
+        const characters = Array.from(message);
+        result2.message = characters.slice(0, 512).join("");
+        if (characters.length > 512 || raw.message_truncated === true) result2.message_truncated = true;
+      }
+      if (Array.isArray(raw.details)) {
+        const details = raw.details.slice(0, 4).map((value2) => {
+          const detail = record4(value2);
+          return {
+            ...typeof detail.reason === "string" && ERROR_TOKEN.test(detail.reason) ? { reason: detail.reason } : {},
+            ...typeof detail.domain === "string" && ERROR_DOMAIN.test(detail.domain) ? { domain: detail.domain } : {}
+          };
+        }).filter((detail) => Object.keys(detail).length);
+        if (details.length) result2.details = details;
+      }
+      return result2;
+    };
     identifier = (v) => typeof v === "string" && /^[A-Za-z0-9][A-Za-z0-9_.:/-]{0,255}$/.test(v) ? v : void 0;
     count3 = (v) => {
       if (typeof v !== "number" && (typeof v !== "string" || !v.trim())) return void 0;
@@ -92802,6 +93055,9 @@ var init_provider_observability = __esm({
     normalizeProviderDiagnostics = (value) => {
       const raw = record4(value);
       const result2 = {};
+      if (raw.egress_route === "client_direct" || raw.egress_route === "node" || raw.egress_route === "server_direct") result2.egress_route = raw.egress_route;
+      const providerError = normalizeProviderError(raw.provider_error);
+      if (Object.keys(providerError).length) result2.provider_error = providerError;
       for (const key of ["retry_after_seconds", "retry_delay_seconds"]) {
         const n2 = count3(raw[key]);
         if (n2 !== void 0) result2[key] = n2;
@@ -94401,7 +94657,7 @@ Waiting for approval...
     if (polled.status === "denied") {
       throw new Error(polled.error || "CLI login was denied");
     }
-    await delay(Math.max(1, Number(started.interval || 2)) * 1e3);
+    await delay2(Math.max(1, Number(started.interval || 2)) * 1e3);
   }
   throw new Error("Timed out waiting for CLI login approval");
 }
@@ -94657,7 +94913,7 @@ async function runVtxCli(argv2, env = process.env) {
 ` };
   }
 }
-var VTX_CLI_HELP, WRITABLE_SECRET_FIELDS, delay;
+var VTX_CLI_HELP, WRITABLE_SECRET_FIELDS, delay2;
 var init_vtx = __esm({
   "lib/agent-cli/vtx.ts"() {
     "use strict";
@@ -94708,7 +94964,7 @@ Global options:
       "alibaba_cloud_model_studio_api_key",
       "lightning_api_key"
     ]);
-    delay = (ms) => new Promise((resolve13) => setTimeout(resolve13, ms));
+    delay2 = (ms) => new Promise((resolve13) => setTimeout(resolve13, ms));
   }
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vtxmacro/cli",
-  "version": "2026.9.60",
+  "version": "2026.9.62",
   "description": "VTX Macro CLI, MCP server, and durable external inference host.",
   "type": "module",
   "license": "UNLICENSED",