@vtxmacro/cli 2026.9.62 → 2026.9.63

package/bin/vtx-service-bootstrap.js

@@ -16,7 +16,7 @@ import { fileURLToPath } from "node:url";
 // agent-cli-release.json
 var agent_cli_release_default = {
   package_name: "@vtxmacro/cli",
-  package_version: "2026.9.62",
+  package_version: "2026.9.63",
   codex_package_name: "@openai/codex",
   codex_version: "0.155.0",
   copilot_sdk_package_name: "@github/copilot-sdk",

package/bin/vtx.js

@@ -77,7 +77,7 @@ var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
     agent_cli_release_default = {
       package_name: "@vtxmacro/cli",
-      package_version: "2026.9.62",
+      package_version: "2026.9.63",
       codex_package_name: "@openai/codex",
       codex_version: "0.155.0",
       copilot_sdk_package_name: "@github/copilot-sdk",
@@ -18174,7 +18174,7 @@ async function acquireInferenceHostProcessLock(path, dependencies = {}) {
     }
   };
 }
-var loadInferenceReceiptDurabilityTimeoutMs, loadInferenceAgentDataRequestTimeoutMs, loadInferenceAgentCommandLockPolicy, InferenceHostProcessLockBusyError, INFERENCE_CREDENTIAL_NAMESPACE, MAX_INFERENCE_PRIVATE_FILE_BYTES, WINDOWS_PRIVATE_ACL_BROKER_SCRIPT, WINDOWS_IDENTITY_COMMAND_TIMEOUT_MS, WINDOWS_PRIVATE_ACL_BROKER_STARTUP_TIMEOUT_MS, SMALL_IDENTITY_COMMAND_TIMEOUT_MS, windowsPowerShellEnvironment, windowsPrivateAclBrokerInvocation, WindowsPrivateAclBroker, defaultWindowsPrivateAclBroker, runWindowsPrivateAcl, windowsAclCache, windowsAclIdentity, aclCacheKey, secureWindowsPrivatePath, invalidateWindowsAclCache, rebindHardenedWindowsAclAfterRename, rebindHardenedWindowsDirectoryAfterOwnedMutation, isDefaultWindowsPrivatePath, secureExistingWindowsPath, linuxProcessIdentity, windowsProcessIdentityInvocation, windowsBootIdentityInvocation, windowsProcessIdentity, darwinProcessIdentity, runSmallIdentityCommand, cachedSystemBootIdentity, readInferenceSystemBootIdentity, defaultProcessIdentity, defaultCurrentProcessIdentity, processLockObservationCache, inferenceProcessIdentitiesMatch, DEFAULT_INFERENCE_HOST_INSTANCE, SAFE_INFERENCE_HOST_INSTANCE, requireNamedInstancePath, credentialStoreIdentity, inferenceHostCredentialContextPath, inferenceHostCredentialContextTransitionPath, credentialContextForConfig, WINDOWS_PRIVATE_FILE_REPLACE_ERROR_CODES;
+var loadInferenceReceiptDurabilityTimeoutMs, loadInferenceAgentDataRequestTimeoutMs, loadInferenceAgentCommandLockPolicy, InferenceHostProcessLockBusyError, INFERENCE_CREDENTIAL_NAMESPACE, MAX_INFERENCE_PRIVATE_FILE_BYTES, WINDOWS_PRIVATE_ACL_BROKER_SCRIPT, WINDOWS_IDENTITY_COMMAND_TIMEOUT_MS, WINDOWS_PRIVATE_ACL_BROKER_STARTUP_TIMEOUT_MS, SMALL_IDENTITY_COMMAND_TIMEOUT_MS, windowsPowerShellEnvironment, windowsPrivateAclBrokerInvocation, WindowsPrivateAclBroker, defaultWindowsPrivateAclBroker, runWindowsPrivateAcl, windowsAclCache, windowsAclIdentity, aclCacheKey, secureWindowsPrivatePath, invalidateWindowsAclCache, rebindHardenedWindowsAclAfterRename, rebindHardenedWindowsDirectoryAfterOwnedMutation, isDefaultWindowsPrivatePath, secureExistingWindowsPath, linuxProcessIdentity, windowsProcessIdentityInvocation, windowsBootIdentityInvocation, windowsProcessIdentity, darwinProcessIdentity, runSmallIdentityCommand, cachedSystemBootIdentity, readInferenceSystemBootIdentity, defaultProcessIdentity, defaultCurrentProcessIdentity, readInferenceHostProcessLockStatus, processLockObservationCache, inferenceProcessIdentitiesMatch, DEFAULT_INFERENCE_HOST_INSTANCE, SAFE_INFERENCE_HOST_INSTANCE, requireNamedInstancePath, credentialStoreIdentity, inferenceHostCredentialContextPath, inferenceHostCredentialContextTransitionPath, credentialContextForConfig, WINDOWS_PRIVATE_FILE_REPLACE_ERROR_CODES;
 var init_config = __esm({
   "lib/inference-host/config.ts"() {
     "use strict";
@@ -18773,6 +18773,25 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
       if (!identity2) throw new Error("Inference host could not establish its process-start identity.");
       return identity2;
     };
+    readInferenceHostProcessLockStatus = async (path) => {
+      const raw = await readInferencePrivateFile(path, "Inference host process lock");
+      if (raw === null) return { state: "not_running" };
+      try {
+        const owner2 = JSON.parse(raw);
+        if (owner2.schema_version !== 2 || !Number.isSafeInteger(owner2.pid) || owner2.pid <= 0 || typeof owner2.process_identity !== "string" || typeof owner2.boot_identity !== "string") {
+          return { state: "unknown" };
+        }
+        const [identity2, boot] = await Promise.all([
+          defaultProcessIdentity(owner2.pid),
+          readInferenceSystemBootIdentity()
+        ]);
+        if (boot !== owner2.boot_identity) return { state: "stale" };
+        if (identity2 === null) return { state: "unknown" };
+        return { state: identity2 === owner2.process_identity ? "running" : "stale" };
+      } catch {
+        return { state: "unknown" };
+      }
+    };
     processLockObservationCache = /* @__PURE__ */ new Map();
     inferenceProcessIdentitiesMatch = (stored, observed) => stored === observed;
     DEFAULT_INFERENCE_HOST_INSTANCE = "default";
@@ -44581,7 +44600,7 @@ async function runInferenceHostCli(argv2, env = process.env, dependencies = {})
     };
   }
 }
-var INFERENCE_HOST_CLI_VERSION, runtimeReceiptPath, codexRecoveryPath, codexGuardianReceiptRoot, revocationCheckpointPath, foregroundHostLockPath, credentialLifecycleLockPath, serviceRecoveryCommandLockPath, AGENT_HEARTBEAT_INTERVAL_MS, AGENT_HEARTBEAT_MAX_RETRY_DELAY_MS, retryableAgentHeartbeatError, assertRevocationCheckpoint, readRevocationCheckpoint, writeRevocationCheckpoint, clearRevocationCheckpoint, render, INFERENCE_HOST_HELP, parseHostConcurrency, parseInferenceHostArgs, resolveDurableServiceDisplayName, defaultOpenBrowser, registerInferenceHostServiceControlInput, defaultRegisterLifecycleSignalHandlers, lifecycleCancellation, configuredCredentialStore, restoreInferenceHostCredentialContext, recoverInferenceHostCredentialContextTransition, accountKeyForState, assertCredentialMatchesState2, revocationCheckpointForCredential, assertRevocationCheckpointMatchesLocalIdentity, fileExistsPrivately, inspectCodexAuthentication, clearLocalRuntimeArtifacts, assertDurableServiceUninstalled, assertLocalRuntimeArtifactsMayBeDiscarded, defaultRunForeground, preparePortableDurableAdapter, prepareExoAdapter, defaultRunPortableDurableAdapter, login, codexLogin, codexLogout, grokAuthentication, deepSeekCredentialStore, deepSeekLogin, deepSeekLogout, piLogin, piLogout, exoLogin, exoLogout, localStatus, doctor, cleanupLogin, runHost, defaultReadStdin, parseAgentStdin, parseOptionalAgentStdin, agentOperationId, agentSession, agentConnect, foregroundAgentControlState, requireForegroundAgentState, assignmentFromClaim, foregroundAssignmentNext, foregroundAssignmentHeartbeat, foregroundDataCall, foregroundDecisionStatusRequest, foregroundAssignmentLeaseEnded, handleForegroundCancelledAssignment, foregroundDecisionStatus, foregroundDecisionSubmit, foregroundAssignmentRelease, agentRun, agentNext, agentComplete, agentFail, withAgentCommandLock, recoveryBackupPath, serviceRecoveryTransactionPath, readServiceRecoveryTransaction, assertResumableCodexRecoveryEvidence, recoverInstalledCodexService, serviceCommand, hasExplicitCredentialStoreConfiguration, credentialEnvironmentForIdentity, commandRequiresRetainedCredentialStore, commandUsesInstalledServiceCredentials, resolveInferenceHostCommandConfig;
+var INFERENCE_HOST_CLI_VERSION, runtimeReceiptPath, codexRecoveryPath, codexGuardianReceiptRoot, revocationCheckpointPath, foregroundHostLockPath, credentialLifecycleLockPath, serviceRecoveryCommandLockPath, AGENT_HEARTBEAT_INTERVAL_MS, AGENT_HEARTBEAT_MAX_RETRY_DELAY_MS, retryableAgentHeartbeatError, assertRevocationCheckpoint, readRevocationCheckpoint, writeRevocationCheckpoint, clearRevocationCheckpoint, render, INFERENCE_HOST_HELP, parseHostConcurrency, parseInferenceHostArgs, resolveDurableServiceDisplayName, defaultOpenBrowser, registerInferenceHostServiceControlInput, defaultRegisterLifecycleSignalHandlers, lifecycleCancellation, configuredCredentialStore, restoreInferenceHostCredentialContext, recoverInferenceHostCredentialContextTransition, accountKeyForState, assertCredentialMatchesState2, revocationCheckpointForCredential, assertRevocationCheckpointMatchesLocalIdentity, fileExistsPrivately, inspectCodexAuthentication, clearLocalRuntimeArtifacts, assertDurableServiceUninstalled, assertLocalRuntimeArtifactsMayBeDiscarded, defaultRunForeground, preparePortableDurableAdapter, prepareExoAdapter, defaultRunPortableDurableAdapter, login, codexLogin, codexLogout, grokAuthentication, deepSeekCredentialStore, deepSeekLogin, deepSeekLogout, piLogin, piLogout, exoLogin, exoLogout, localStatus, doctor, cleanupLogin, runHost, defaultReadStdin, parseAgentStdin, parseOptionalAgentStdin, agentOperationId, agentSession, agentConnect, foregroundAgentControlState, requireForegroundAgentState, assignmentFromClaim, foregroundAssignmentNext, foregroundAssignmentHeartbeat, foregroundDataCall, foregroundDecisionStatusRequest, foregroundAssignmentLeaseEnded, handleForegroundCancelledAssignment, foregroundDecisionFollowup, foregroundDecisionStatus, foregroundDecisionSubmit, foregroundAssignmentRelease, agentRun, agentNext, agentComplete, agentFail, withAgentCommandLock, recoveryBackupPath, serviceRecoveryTransactionPath, readServiceRecoveryTransaction, assertResumableCodexRecoveryEvidence, recoverInstalledCodexService, serviceCommand, hasExplicitCredentialStoreConfiguration, credentialEnvironmentForIdentity, commandRequiresRetainedCredentialStore, commandUsesInstalledServiceCredentials, resolveInferenceHostCommandConfig;
 var init_cli = __esm({
   "lib/inference-host/cli.ts"() {
     "use strict";
@@ -44704,7 +44723,7 @@ Commands:
   agent-assignment-heartbeat  Renew the current Agent assignment
   agent-data-call             Request allowed assignment-scoped VTX data
   agent-decision-submit       Submit the normal structured trading decision
-  agent-decision-status       Resolve an uncertain Agent decision submission
+  agent-decision-status       Read a submitted decision outcome or recover uncertain submission
   agent-assignment-release    Release the current Agent assignment
   service         Install and control the durable background host
   status          Inspect local host and credential state
@@ -44724,6 +44743,8 @@ Common options:
   --provider ID    Exact provider identity (pi-login or exo-login)
   --exo-root PATH  Supported Exo checkout (Exo run/doctor only)
   --max-concurrency N  Optional positive-integer local slot limit (default: unlimited)
+  --operation-id ID --assignment-id ID --assignment-generation N
+                   Read an accepted decision receipt with agent-decision-status
   --help, -h       Show this help
 
 If the OS credential store cannot retain the VTX grant, set
@@ -44776,6 +44797,9 @@ Durable service:
       let lines = 100;
       let serviceManifestPath = null;
       let forceRecovery = false;
+      let decisionStatusOperationId = null;
+      let decisionStatusAssignmentId = null;
+      let decisionStatusAssignmentGeneration = null;
       const positionals = [];
       for (let index = 0; index < argv2.length; index += 1) {
         const argument = argv2[index];
@@ -44791,6 +44815,18 @@ Durable service:
           forceRecovery = true;
           continue;
         }
+        if (["--operation-id", "--assignment-id", "--assignment-generation"].includes(argument)) {
+          const raw = argv2[index + 1];
+          const valid = raw && (argument === "--operation-id" ? /^[A-Za-z0-9][A-Za-z0-9._:-]{7,127}$/u.test(raw) : argument === "--assignment-id" ? /^[A-Za-z0-9][A-Za-z0-9._:/-]{0,127}$/u.test(raw) : /^[0-9]+$/u.test(raw));
+          if (!valid) throw new Error(`${argument} requires a valid receipt identifier.`);
+          if (argument === "--operation-id") decisionStatusOperationId = raw;
+          if (argument === "--assignment-id") decisionStatusAssignmentId = raw;
+          if (argument === "--assignment-generation") {
+            decisionStatusAssignmentGeneration = parseHostConcurrency(raw, argument);
+          }
+          index += 1;
+          continue;
+        }
         if (argument === "--max-concurrency") {
           const raw = argv2[index + 1];
           if (!raw) throw new Error("--max-concurrency requires a value.");
@@ -44848,6 +44884,14 @@ Durable service:
         throw new Error("Inference-host commands do not accept positional arguments.");
       }
       const command = positionals[1] || null;
+      if (decisionStatusOperationId !== null || decisionStatusAssignmentId !== null || decisionStatusAssignmentGeneration !== null) {
+        if (command !== "agent-decision-status") {
+          throw new Error("Decision receipt options are accepted only by agent-decision-status.");
+        }
+        if (!decisionStatusOperationId || !decisionStatusAssignmentId || decisionStatusAssignmentGeneration === null) {
+          throw new Error("Historical decision status requires --operation-id, --assignment-id, and --assignment-generation from the submission receipt.");
+        }
+      }
       if (providerId && !["pi-login", "exo-login"].includes(command ?? "")) {
         throw new Error("--provider is accepted only by pi-login or exo-login.");
       }
@@ -44884,7 +44928,10 @@ Durable service:
         lines,
         serviceAction,
         serviceManifestPath,
-        forceRecovery
+        forceRecovery,
+        decisionStatusOperationId,
+        decisionStatusAssignmentId,
+        decisionStatusAssignmentGeneration
       };
     };
     resolveDurableServiceDisplayName = (parsed, dependencies) => {
@@ -45733,6 +45780,12 @@ Waiting for approval...
         `${config2.supervisorStatePath}.service-recovery.json`,
         "Inference-host service recovery transaction"
       );
+      const foregroundState = await readInferenceForegroundAgentControlState(config2.statePath);
+      if (foregroundState && foregroundState.host_id !== state?.host_id) {
+        throw new Error("Foreground Agent assignment belongs to another local host.");
+      }
+      const observedAt = (dependencies.now ?? (() => /* @__PURE__ */ new Date()))().toISOString();
+      const keeperProcess = await readInferenceHostProcessLockStatus(foregroundHostLockPath(config2));
       const agentAttempt = await readInferenceAgentAttemptState(config2.statePath);
       const agentNextRecoveryPresent = await readInferenceAgentNextState(config2.statePath) !== null;
       const agentFailureFence = await readInferenceAgentFailureFence(config2.statePath);
@@ -45760,6 +45813,27 @@ Waiting for approval...
             response_mode: agentAttempt.response_mode,
             deadline_at: agentAttempt.deadline_at
           } : null,
+          foreground_agent: {
+            observed_at: observedAt,
+            keeper_process: keeperProcess,
+            server_heartbeat: "not_observed",
+            scheduling_owner: "harness",
+            assignment: foregroundState?.assignment ? {
+              assignment_id: foregroundState.assignment.assignment_id,
+              assignment_generation: foregroundState.assignment.assignment_generation,
+              model_id: foregroundState.assignment.model_id,
+              reasoning_effort: foregroundState.assignment.reasoning_effort,
+              bot_mode: foregroundState.assignment.bot_mode,
+              execution_mode: foregroundState.assignment.execution_mode,
+              allowed_symbols: foregroundState.assignment.allowed_symbols,
+              lease_expires_at: foregroundState.assignment.lease_expires_at,
+              lease_elapsed_locally: Date.parse(foregroundState.assignment.lease_expires_at) <= Date.parse(observedAt)
+            } : null,
+            pending_claim: foregroundState?.pending_next !== null && foregroundState?.pending_next !== void 0,
+            pending_decision_operation_id: foregroundState?.pending_decision?.request.operation_id ?? null,
+            updated_at: foregroundState?.updated_at ?? null,
+            note: "Local process and saved assignment observations only; not proof of a fresh server heartbeat, a scheduled check, or fresh market data."
+          },
           agent_next_recovery_present: agentNextRecoveryPresent,
           agent_failure_fence: agentFailureFence ? {
             adapter: agentFailureFence.adapter_id,
@@ -46264,9 +46338,11 @@ Waiting for approval...
           response_modes: ["provider_response", "decision_candidate"],
           control_modes: ["provider", "agent"],
           execution_modes: ["client", "server"],
-          next_command: "vtx inference-host agent-next --wait-seconds 50 --json",
+          next_command: "vtx inference-host agent-run",
+          provider_next_command: "vtx inference-host agent-next --wait-seconds 50 --json",
           agent_next_command: "vtx inference-host agent-assignment-next --wait-seconds 50 --json",
-          keeper_command: "vtx inference-host agent-run"
+          keeper_command: "vtx inference-host agent-run",
+          instructions: "Keep agent-run open, then use agent_next_command for Agent mode or provider_next_command for Provider mode. Before promising recurring Agent checks, verify your harness can schedule the requested cadence. The keeper only renews liveness; market checks and optional decisions belong to your harness. Stopping the keeper or its schedule does not stop the bot; use authorized bot stop, then release the assignment and stop the keeper."
         }, parsed.json),
         stderr: warnings.length > 0 ? `${warnings.join("\n")}
 ` : ""
@@ -46517,11 +46593,30 @@ Waiting for approval...
       }
       await clearInferenceForegroundAgentControlState(config2.statePath);
     };
+    foregroundDecisionFollowup = (parsed, request) => ({
+      assignment_generation: request.assignment_generation,
+      status_command: `vtx inference-host agent-decision-status --operation-id ${request.operation_id} --assignment-id ${request.assignment_id} --assignment-generation ${request.assignment_generation} --instance ${parsed.instanceName} --json`,
+      outcome_note: "Submission acceptance is not consumption. Read status while queued or claimed. If outcome_unknown, investigate; never resubmit merely to check progress."
+    });
     foregroundDecisionStatus = async (config2, parsed, dependencies, warnings) => {
       const session = await agentSession(config2, dependencies, warnings);
+      if (parsed.decisionStatusOperationId !== null) {
+        const result3 = await session.client.callTool("inference.agent.decision.status", {
+          host_id: session.localState.host_id,
+          operation_id: parsed.decisionStatusOperationId,
+          assignment_id: parsed.decisionStatusAssignmentId,
+          assignment_generation: parsed.decisionStatusAssignmentGeneration
+        });
+        return {
+          exitCode: 0,
+          stdout: render(result3, parsed.json),
+          stderr: warnings.length > 0 ? `${warnings.join("\n")}
+` : ""
+        };
+      }
       let state = await requireForegroundAgentState(config2, session.localState.host_id);
       if (!state.pending_decision) {
-        throw new Error("No uncertain foreground Agent decision requires status recovery.");
+        throw new Error("No uncertain foreground Agent decision requires status recovery. Use the receipt status_command to read a successful submission outcome.");
       }
       const checkedAt = (dependencies.now ?? (() => /* @__PURE__ */ new Date()))().toISOString();
       state = {
@@ -46548,7 +46643,7 @@ Waiting for approval...
       }
       return {
         exitCode: 0,
-        stdout: render(result2, parsed.json),
+        stdout: render({ ...result2, ...foregroundDecisionFollowup(parsed, state.pending_decision.request) }, parsed.json),
         stderr: warnings.length > 0 ? `${warnings.join("\n")}
 ` : ""
       };
@@ -46603,7 +46698,7 @@ Waiting for approval...
           });
           return {
             exitCode: 0,
-            stdout: render({ ...status, recovered: true }, parsed.json),
+            stdout: render({ ...status, recovered: true, ...foregroundDecisionFollowup(parsed, state.pending_decision.request) }, parsed.json),
             stderr: warnings.length > 0 ? `${warnings.join("\n")}
 ` : ""
           };
@@ -46631,7 +46726,7 @@ Waiting for approval...
         });
         return {
           exitCode: 0,
-          stdout: render(result2, parsed.json),
+          stdout: render({ ...result2, ...foregroundDecisionFollowup(parsed, state.pending_decision.request) }, parsed.json),
           stderr: warnings.length > 0 ? `${warnings.join("\n")}
 ` : ""
         };
@@ -46664,7 +46759,7 @@ Waiting for approval...
             });
             return {
               exitCode: 0,
-              stdout: render({ ...status, recovered: true }, parsed.json),
+              stdout: render({ ...status, recovered: true, ...foregroundDecisionFollowup(parsed, state.pending_decision.request) }, parsed.json),
               stderr: warnings.length > 0 ? `${warnings.join("\n")}
 ` : ""
             };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vtxmacro/cli",
-  "version": "2026.9.62",
+  "version": "2026.9.63",
   "description": "VTX Macro CLI, MCP server, and durable external inference host.",
   "type": "module",
   "license": "UNLICENSED",