@vtxmacro/cli 2026.10.32 → 2026.10.34

package/bin/vtx.js

@@ -113,7 +113,7 @@ var init_routing = __esm({
 var agent_cli_release_default;
 var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
-    agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.32", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
+    agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.34", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
   }
 });
 
@@ -1195,6 +1195,7 @@ var init_runtime_policy_generated = __esm({
         runtime: {
           assignment_page_default_limit: 20,
           client_candidate_owner_lease_grace_ms: 6e4,
+          bot_switch_max_retries: 2,
           client_server_heartbeats_per_owner_lease: 2,
           client_server_heartbeat_min_ms: 5e3,
           client_server_heartbeat_max_ms: 3e4
@@ -3890,10 +3891,10 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
         env: invocation.env
       });
       const output3 = [];
-      let settled = false;
+      let settled2 = false;
       const settle = (value) => {
-        if (settled) return;
-        settled = true;
+        if (settled2) return;
+        settled2 = true;
         clearTimeout(timer);
         resolvePromise(value);
       };
@@ -3920,10 +3921,10 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
         stdio: ["ignore", "pipe", "ignore"]
       });
       const output3 = [];
-      let settled = false;
+      let settled2 = false;
       const settle = (value) => {
-        if (settled) return;
-        settled = true;
+        if (settled2) return;
+        settled2 = true;
         clearTimeout(timer);
         resolvePromise(value);
       };
@@ -3946,10 +3947,10 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
       });
       const output3 = [];
       let bytes3 = 0;
-      let settled = false;
+      let settled2 = false;
       const settle = (value) => {
-        if (settled) return;
-        settled = true;
+        if (settled2) return;
+        settled2 = true;
         clearTimeout(timer);
         resolvePromise(value);
       };
@@ -4334,6 +4335,165 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
   }
 });
 
+// lib/runtime/abort.ts
+var ABORT_MESSAGE_TOKENS, readAbortLikeMessage, isAbortLikeError, toAbortError;
+var init_abort = __esm({
+  "lib/runtime/abort.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    ABORT_MESSAGE_TOKENS = [
+      "the operation was aborted",
+      "the user aborted a request",
+      "request was aborted",
+      "request aborted",
+      "signal is aborted",
+      "client runtime stop requested"
+    ];
+    readAbortLikeMessage = (error48) => {
+      if (error48 instanceof Error) {
+        return error48.message;
+      }
+      if (typeof error48 === "string") {
+        return error48;
+      }
+      if (error48 && typeof error48 === "object" && typeof error48.message === "string") {
+        return String(error48.message);
+      }
+      return "";
+    };
+    isAbortLikeError = (error48) => {
+      if (typeof DOMException !== "undefined" && error48 instanceof DOMException) {
+        return error48.name === "AbortError";
+      }
+      if (error48 instanceof Error && error48.name === "AbortError") {
+        return true;
+      }
+      if (error48 && typeof error48 === "object" && error48.name === "AbortError") {
+        return true;
+      }
+      const normalized = readAbortLikeMessage(error48).trim().toLowerCase();
+      if (!normalized) {
+        return false;
+      }
+      return ABORT_MESSAGE_TOKENS.some((token) => normalized.includes(token));
+    };
+    toAbortError = (error48, fallbackMessage = "The operation was aborted.") => {
+      const message = readAbortLikeMessage(error48).trim() || fallbackMessage;
+      try {
+        return new DOMException(message, "AbortError");
+      } catch {
+        const fallback = new Error(message);
+        fallback.name = "AbortError";
+        return fallback;
+      }
+    };
+  }
+});
+
+// lib/runtime/runtime-redaction.ts
+var REDACTED_VALUE, WHITESPACE_CLASS, SEPARATOR, VALUE_RUN, NAME_LETTER_VARIANTS, NAME_START, NAME_PREFIX, secretName, SECRET_NAME_WORDS, NAMED_VALUE, SECRET_QUERY_PARAM_PATTERN, BEARER_TOKEN_PATTERN, ASSIGNMENT_SEPARATOR, AUTHORIZATION_SCHEMES, assignmentPattern, SECRET_ASSIGNMENT_PATTERN, SECRET_WORD_ASSIGNMENT_PATTERN, SECRET_TOKEN_PATTERN, redactAssignedValue, isRuntimeErrorObject, sanitizeRuntimeDiagnosticValue, sanitizeRuntimeNetworkPath, getSanitizedRuntimeErrorMessage, toSanitizedRuntimeError, getSanitizedRuntimeAbortReason;
+var init_runtime_redaction = __esm({
+  "lib/runtime/runtime-redaction.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_abort();
+    REDACTED_VALUE = "[REDACTED]";
+    WHITESPACE_CLASS = String.raw`[\t\n\v\f\r \x1c-\x1f\x85\xa0\u1680\u2000-\u200a\u2028\u2029\u202f\u205f\u3000\ufeff]`;
+    SEPARATOR = WHITESPACE_CLASS;
+    VALUE_RUN = String.raw`[^,\t\n\v\f\r ]+`;
+    NAME_LETTER_VARIANTS = {
+      s: String.raw`[s\u017f]`,
+      k: String.raw`[k\u212a]`,
+      i: String.raw`[i\u0131\u0130]`
+    };
+    NAME_START = "(?:^|[^A-Za-z0-9_.-])";
+    NAME_PREFIX = "[A-Za-z0-9_.-]*";
+    secretName = (word) => Array.from(word, (letter) => NAME_LETTER_VARIANTS[letter] ?? letter).join("");
+    SECRET_NAME_WORDS = `(?:${[
+      "key",
+      "token",
+      "secret",
+      "password",
+      "passphrase",
+      "credentials",
+      "credential",
+      "authorization"
+    ].map(secretName).join("|")})`;
+    NAMED_VALUE = String.raw`("[^"]*"|'[^']*'` + String.raw`|(?:[^,\t\n\v\f\r ]*${SECRET_NAME_WORDS}(?:[:=]${SEPARATOR}+|${SEPARATOR}+[:=]${SEPARATOR}*))*${VALUE_RUN})`;
+    SECRET_QUERY_PARAM_PATTERN = new RegExp(
+      `([?&](?:${NAME_PREFIX}${SECRET_NAME_WORDS}|${secretName("auth")}|${secretName("sig")}|${secretName("signature")})=)${NAMED_VALUE}`,
+      "gi"
+    );
+    BEARER_TOKEN_PATTERN = new RegExp(
+      String.raw`(\bBearer${SEPARATOR}+)(?:[^,;\t\n\v\f\r ]*${SECRET_NAME_WORDS}(?:[:=]${SEPARATOR}+|${SEPARATOR}+[:=]${SEPARATOR}*))*[^,;\t\n\v\f\r ]+`,
+      "gi"
+    );
+    ASSIGNMENT_SEPARATOR = `['"]?${SEPARATOR}*[:=]${SEPARATOR}*`;
+    AUTHORIZATION_SCHEMES = "(?:Bearer|Basic|Digest|Token|Bot|Negotiate|NTLM|ApiKey)";
+    assignmentPattern = (nameStart) => new RegExp(
+      `(${nameStart}(?:${secretName("authorization")}${ASSIGNMENT_SEPARATOR}['"]?${AUTHORIZATION_SCHEMES}${SEPARATOR}+|${SECRET_NAME_WORDS}${ASSIGNMENT_SEPARATOR}))${NAMED_VALUE}`,
+      "gi"
+    );
+    SECRET_ASSIGNMENT_PATTERN = assignmentPattern(`${NAME_START}${NAME_PREFIX}`);
+    SECRET_WORD_ASSIGNMENT_PATTERN = assignmentPattern(
+      `(?:^|[^A-Za-z0-9_])(?:(?:${["api", "access", "private"].map(secretName).join("|")})[_ -]?)?`
+    );
+    SECRET_TOKEN_PATTERN = /\b(?:AIza[A-Za-z0-9_-]+|sk-[A-Za-z0-9._-]+|xai-[A-Za-z0-9]{20,}|gsk_[A-Za-z0-9]{20,}|AQ\.[A-Za-z0-9._-]+|0x[a-fA-F0-9]{64})\b/g;
+    redactAssignedValue = (_match, prefix, value) => {
+      const quote = value[0] === '"' || value[0] === "'" ? value[0] : "";
+      const closing = quote && value.length > 1 && value[value.length - 1] === quote ? quote : "";
+      return `${prefix}${quote}${REDACTED_VALUE}${closing}`;
+    };
+    isRuntimeErrorObject = (error48) => error48 instanceof Error || error48 != null && typeof error48 === "object" && Object.prototype.toString.call(error48) === "[object DOMException]" && typeof error48.message === "string" && typeof error48.name === "string";
+    sanitizeRuntimeDiagnosticValue = (value) => {
+      const normalized = String(value || "");
+      if (!normalized) {
+        return normalized;
+      }
+      return normalized.replace(BEARER_TOKEN_PATTERN, `$1${REDACTED_VALUE}`).replace(SECRET_WORD_ASSIGNMENT_PATTERN, redactAssignedValue).replace(SECRET_TOKEN_PATTERN, REDACTED_VALUE).replace(SECRET_QUERY_PARAM_PATTERN, redactAssignedValue).replace(SECRET_ASSIGNMENT_PATTERN, redactAssignedValue);
+    };
+    sanitizeRuntimeNetworkPath = (value) => {
+      const normalized = String(value || "").trim();
+      if (!normalized) {
+        return "/";
+      }
+      const withoutFragment = normalized.split("#", 1)[0] || normalized;
+      const withoutQuery = withoutFragment.split("?", 1)[0] || withoutFragment;
+      const sanitized = sanitizeRuntimeDiagnosticValue(withoutQuery.trim());
+      return sanitized || "/";
+    };
+    getSanitizedRuntimeErrorMessage = (error48) => {
+      const message = isRuntimeErrorObject(error48) ? error48.message : typeof error48 === "string" ? error48 : error48 == null ? null : String(error48);
+      if (message == null) {
+        return null;
+      }
+      return sanitizeRuntimeDiagnosticValue(message);
+    };
+    toSanitizedRuntimeError = (error48) => {
+      const message = getSanitizedRuntimeErrorMessage(error48) || "Unknown runtime error.";
+      if (isRuntimeErrorObject(error48) && error48.message === message) {
+        if (isAbortLikeError(error48) && error48.name !== "AbortError") {
+          if (error48 instanceof Error) error48.name = "AbortError";
+          else return Object.assign(new Error(message), { name: "AbortError" });
+        }
+        return error48;
+      }
+      const sanitized = new Error(message);
+      if (isAbortLikeError(error48)) {
+        sanitized.name = "AbortError";
+      } else if (isRuntimeErrorObject(error48) && error48.name) {
+        sanitized.name = error48.name;
+      }
+      return sanitized;
+    };
+    getSanitizedRuntimeAbortReason = (signal, fallbackMessage = "The operation was aborted.") => isRuntimeErrorObject(signal?.reason) ? toSanitizedRuntimeError(signal.reason) : new DOMException(fallbackMessage, "AbortError");
+  }
+});
+
 // lib/cli-release/updater.ts
 var updater_exports = {};
 __export(updater_exports, {
@@ -4389,6 +4549,7 @@ var init_updater = __esm({
     init_stop_signals();
     init_config2();
     init_routing();
+    init_runtime_redaction();
     CLI_PACKAGE_NAME = "@vtxmacro/cli";
     OFFICIAL_NPM_REGISTRY = "https://registry.npmjs.org";
     CLI_UPDATE_COMMAND = `npm install -g ${CLI_PACKAGE_NAME}@latest`;
@@ -4423,10 +4584,10 @@ var init_updater = __esm({
       });
       const stdout = [];
       const stderr = [];
-      let settled = false;
+      let settled2 = false;
       const settle = (result) => {
-        if (settled) return;
-        settled = true;
+        if (settled2) return;
+        settled2 = true;
         resolvePromise(result);
       };
       child.stdout.on("data", (chunk) => stdout.push(Buffer.from(chunk)));
@@ -4844,7 +5005,7 @@ var init_updater = __esm({
       try {
         await ensureUpdaterPrivateDirectory(paths.root, paths.root, { platform: input.platform });
       } catch (error48) {
-        const reason = `update_directory_unsafe: ${error48 instanceof Error ? error48.message.slice(0, runtime_policy_generated_default.agent_cli.update_failure_reason_max_chars) : "unknown"}`;
+        const reason = `update_directory_unsafe: ${error48 instanceof Error ? sanitizeRuntimeDiagnosticValue(error48.message).slice(0, runtime_policy_generated_default.agent_cli.update_failure_reason_max_chars) : "unknown"}`;
         await appendCliUpdateLog(paths, "cli_update_failed", { package_version: target.version, reason });
         return { kind: "failed", reason };
       }
@@ -4877,7 +5038,7 @@ var init_updater = __esm({
         await appendCliUpdateLog(paths, "cli_release_staged", { package_version: selection.package_version });
         return { kind: "staged", selection };
       } catch (error48) {
-        const reason = error48 instanceof Error ? error48.message.slice(0, runtime_policy_generated_default.agent_cli.update_failure_reason_max_chars) : "unknown";
+        const reason = error48 instanceof Error ? sanitizeRuntimeDiagnosticValue(error48.message).slice(0, runtime_policy_generated_default.agent_cli.update_failure_reason_max_chars) : "unknown";
         await appendCliUpdateLog(paths, "cli_update_failed", { package_version: target.version, reason });
         return { kind: "failed", reason };
       } finally {
@@ -4965,7 +5126,7 @@ var init_updater = __esm({
         return runSelected();
       } catch (error48) {
         await appendCliUpdateLog(paths, "cli_update_check_failed", {
-          reason: error48 instanceof Error ? error48.message.slice(0, runtime_policy_generated_default.agent_cli.update_failure_reason_max_chars) : "unknown"
+          reason: error48 instanceof Error ? sanitizeRuntimeDiagnosticValue(error48.message).slice(0, runtime_policy_generated_default.agent_cli.update_failure_reason_max_chars) : "unknown"
         });
         return { kind: "run" };
       }
@@ -5393,7 +5554,7 @@ var init_updater = __esm({
         return active && compareCliReleaseVersions(active.package_version, current) > 0 && rejection?.package_version !== active.package_version ? active : null;
       } catch (error48) {
         await appendCliUpdateLog(paths, "cli_runtime_release_poll_failed", {
-          reason: error48 instanceof Error ? error48.message.slice(0, runtime_policy_generated_default.agent_cli.update_failure_reason_max_chars) : "unknown"
+          reason: error48 instanceof Error ? sanitizeRuntimeDiagnosticValue(error48.message).slice(0, runtime_policy_generated_default.agent_cli.update_failure_reason_max_chars) : "unknown"
         });
         return null;
       }
@@ -21026,6 +21187,7 @@ var init_runtime_policy_generated2 = __esm({
         runtime: {
           assignment_page_default_limit: 20,
           client_candidate_owner_lease_grace_ms: 6e4,
+          bot_switch_max_retries: 2,
           client_server_heartbeats_per_owner_lease: 2,
           client_server_heartbeat_min_ms: 5e3,
           client_server_heartbeat_max_ms: 3e4
@@ -23616,20 +23778,20 @@ var init_credential_store = __esm({
         stdio: ["pipe", "pipe", "pipe"],
         windowsHide: true
       });
-      let settled = false;
+      let settled2 = false;
       let terminating = false;
       const cleanup = () => {
         clearTimeout(timer);
         options.signal?.removeEventListener("abort", abort);
       };
       const settleReject = (error48) => {
-        if (settled) return;
-        settled = true;
+        if (settled2) return;
+        settled2 = true;
         cleanup();
         reject(error48);
       };
       const terminate = (error48) => {
-        if (settled || terminating) return;
+        if (settled2 || terminating) return;
         terminating = true;
         void terminateCredentialProcessTree(child).finally(() => settleReject(error48));
       };
@@ -23652,12 +23814,12 @@ var init_credential_store = __esm({
       child.stderr.resume();
       child.once("error", () => settleReject(new Error("OS credential command could not start.")));
       child.once("close", (exitCode) => {
-        if (terminating || settled) return;
+        if (terminating || settled2) return;
         try {
           const normalizedExitCode = Number(exitCode ?? 1);
           const stdout = Buffer.concat(stdoutChunks).toString("utf8");
           const transformedStdout = normalizedExitCode === 0 ? command.transformStdout?.(stdout) ?? stdout : stdout;
-          settled = true;
+          settled2 = true;
           cleanup();
           resolve14({
             exitCode: normalizedExitCode,
@@ -24886,16 +25048,16 @@ async function beginInferenceOAuthLogin(options) {
       state: pkce.state,
       challenge: pkce.challenge
     });
-    let settled = false;
+    let settled2 = false;
     let rejectCompletion;
     const completion = new Promise((resolve14, reject) => {
       rejectCompletion = reject;
       handler = async (requestUrl2, method, writeResponse) => {
-        if (settled) {
+        if (settled2) {
           writeResponse(HTTP_STATUS.CONFLICT, "Authorization callback is no longer active.");
           return;
         }
-        settled = true;
+        settled2 = true;
         try {
           if (method !== "GET") throw new Error("Inference OAuth callback is invalid.");
           const callbackUrl = new URL(requestUrl2, redirectUri).toString();
@@ -24980,8 +25142,8 @@ async function beginInferenceOAuthLogin(options) {
       };
     });
     const abortLogin = () => {
-      if (settled) return;
-      settled = true;
+      if (settled2) return;
+      settled2 = true;
       void closeServer(server).finally(() => rejectCompletion(
         new InferenceOAuthRequestError(
           "request_aborted",
@@ -24992,8 +25154,8 @@ async function beginInferenceOAuthLogin(options) {
     options.signal?.addEventListener("abort", abortLogin, { once: true });
     if (options.signal?.aborted) abortLogin();
     const timeout = setTimeout(() => {
-      if (settled) return;
-      settled = true;
+      if (settled2) return;
+      settled2 = true;
       void closeServer(server).finally(
         () => rejectCompletion(new Error("Inference OAuth authorization timed out."))
       );
@@ -25014,8 +25176,8 @@ async function beginInferenceOAuthLogin(options) {
       redirectUri,
       completion,
       cancel: async () => {
-        if (settled) return;
-        settled = true;
+        if (settled2) return;
+        settled2 = true;
         await closeServer(server);
         rejectCompletion(new Error("Inference OAuth authorization was cancelled."));
       }
@@ -25118,6 +25280,7 @@ var init_mcp_client = __esm({
     init_runtime_policy_generated2();
     init_constants();
     init_mcp_transport();
+    init_runtime_redaction();
     init_external_inference_contract();
     EXTERNAL_INFERENCE_MCP_PROTOCOL_VERSION = "2026-07-28";
     EXTERNAL_INFERENCE_AUTOMATED_HOST_TOOLS = [
@@ -25298,7 +25461,7 @@ var init_mcp_client = __esm({
     publicRejectionReason = (text) => {
       const marker = text.indexOf(PUBLIC_TOOL_ERROR_PREFIX);
       const [firstLine = ""] = (marker < 0 ? text : text.slice(0, marker)).split("\n");
-      const reason = firstLine.replace(CONTROL_CHARACTERS, " ").trim();
+      const reason = sanitizeRuntimeDiagnosticValue(firstLine.replace(CONTROL_CHARACTERS, " ")).trim();
       if (!reason) return null;
       return reason.length > MAX_REJECTION_REASON_CHARS ? `${reason.slice(0, MAX_REJECTION_REASON_CHARS)}\u2026` : reason;
     };
@@ -35852,7 +36015,7 @@ var init_runner = __esm({
     };
     settlesWithin = async (promise2, timeoutMs) => {
       let timer = null;
-      const settled = await Promise.race([
+      const settled2 = await Promise.race([
         promise2.then(() => true, () => true),
         new Promise((resolve14) => {
           timer = setTimeout(
@@ -35862,7 +36025,7 @@ var init_runner = __esm({
         })
       ]);
       if (timer !== null) clearTimeout(timer);
-      return settled;
+      return settled2;
     };
     defaultRegisterSignalHandlers = (requestDrain) => {
       const onSigint = () => requestDrain("sigint");
@@ -41323,10 +41486,10 @@ var init_codex_adapter = __esm({
         }
         const start = this.durableSessionStart;
         return await new Promise((resolveSession, reject) => {
-          let settled = false;
+          let settled2 = false;
           const finish = (callback) => {
-            if (settled) return;
-            settled = true;
+            if (settled2) return;
+            settled2 = true;
             clearTimeout(timer);
             signal?.removeEventListener("abort", onAbort);
             callback();
@@ -41402,10 +41565,10 @@ var init_codex_adapter = __esm({
       }
       async waitForCapabilities(preflight, deadlineAtMs, signal) {
         return await new Promise((resolve14, reject) => {
-          let settled = false;
+          let settled2 = false;
           const finish = (callback) => {
-            if (settled) return;
-            settled = true;
+            if (settled2) return;
+            settled2 = true;
             clearTimeout(timer);
             signal?.removeEventListener("abort", onAbort);
             callback();
@@ -47434,6 +47597,7 @@ var init_service = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_service_launcher_state();
+    init_runtime_redaction();
     init_agent_cli_release();
     init_runtime_policy_generated();
     init_constants();
@@ -48720,7 +48884,7 @@ ${result.stderr}`)) {
               event: "worker_output",
               instance_name: worker.instance_name,
               stream,
-              message: line.slice(0, SERVICE_POLICY.worker_output_line_max_chars)
+              message: sanitizeRuntimeDiagnosticValue(line).slice(0, SERVICE_POLICY.worker_output_line_max_chars)
             })}
 `);
           }
@@ -49000,8 +49164,8 @@ ${result.stderr}`)) {
           record5.controller.abort();
           await updateRecord(record5, "draining");
         }
-        const settled = await Promise.allSettled(retiring.map((record5) => record5.promise));
-        const failedDrain = settled.find(
+        const settled2 = await Promise.allSettled(retiring.map((record5) => record5.promise));
+        const failedDrain = settled2.find(
           (result) => result.status === "rejected"
         );
         if (failedDrain) {
@@ -49035,8 +49199,8 @@ ${result.stderr}`)) {
           record5.controller.abort();
           await updateRecord(record5, "draining");
         }
-        const settled = await Promise.allSettled(draining.map((record5) => record5.promise));
-        const failedDrain = settled.find(
+        const settled2 = await Promise.allSettled(draining.map((record5) => record5.promise));
+        const failedDrain = settled2.find(
           (result) => result.status === "rejected"
         );
         if (failedDrain) throw failedDrain.reason;
@@ -49079,8 +49243,8 @@ ${result.stderr}`)) {
               await drainWorkers();
               break;
             }
-            const settled = await completion;
-            const failure2 = settled.find((result) => result.status === "rejected");
+            const settled2 = await completion;
+            const failure2 = settled2.find((result) => result.status === "rejected");
             if (failure2) throw failure2.reason;
             break;
           }
@@ -55605,63 +55769,6 @@ var init_request_encoding = __esm({
   }
 });
 
-// lib/runtime/abort.ts
-var ABORT_MESSAGE_TOKENS, readAbortLikeMessage, isAbortLikeError, toAbortError;
-var init_abort = __esm({
-  "lib/runtime/abort.ts"() {
-    "use strict";
-    init_define_VTX_EXO_POLICY();
-    init_define_VTX_GROK_POLICY();
-    init_define_VTX_PI_MODEL_POLICY();
-    ABORT_MESSAGE_TOKENS = [
-      "the operation was aborted",
-      "the user aborted a request",
-      "request was aborted",
-      "request aborted",
-      "signal is aborted",
-      "client runtime stop requested"
-    ];
-    readAbortLikeMessage = (error48) => {
-      if (error48 instanceof Error) {
-        return error48.message;
-      }
-      if (typeof error48 === "string") {
-        return error48;
-      }
-      if (error48 && typeof error48 === "object" && typeof error48.message === "string") {
-        return String(error48.message);
-      }
-      return "";
-    };
-    isAbortLikeError = (error48) => {
-      if (typeof DOMException !== "undefined" && error48 instanceof DOMException) {
-        return error48.name === "AbortError";
-      }
-      if (error48 instanceof Error && error48.name === "AbortError") {
-        return true;
-      }
-      if (error48 && typeof error48 === "object" && error48.name === "AbortError") {
-        return true;
-      }
-      const normalized = readAbortLikeMessage(error48).trim().toLowerCase();
-      if (!normalized) {
-        return false;
-      }
-      return ABORT_MESSAGE_TOKENS.some((token) => normalized.includes(token));
-    };
-    toAbortError = (error48, fallbackMessage = "The operation was aborted.") => {
-      const message = readAbortLikeMessage(error48).trim() || fallbackMessage;
-      try {
-        return new DOMException(message, "AbortError");
-      } catch {
-        const fallback = new Error(message);
-        fallback.name = "AbortError";
-        return fallback;
-      }
-    };
-  }
-});
-
 // lib/api/shared.ts
 function configureApiTransport(transport) {
   if (transport === null) {
@@ -55689,7 +55796,7 @@ function getProfileHeaders(baseHeaders = {}, explicitProfileId) {
   if (profileId) headers["x-profile-id"] = profileId.toString();
   return headers;
 }
-var configuredApiTransport, getApiUrl, sendApiRequest, apiFetch, sleep, inFlightClientGetRequests, recentClientGetResponses, clientGetRequestGenerations, initializedClientGetRequestKeys, CLIENT_GET_DEDUPE_TTL_MS, CLIENT_RUNTIME_STATUSES_DEDUPE_TTL_MS, CLIENT_LLM_CONFIG_PRIME_TTL_MS, AUTH_BOOTSTRAP_GET_MAX_ATTEMPTS, AUTH_BOOTSTRAP_RETRY_JITTER_MS, canUseClientGetRequestCache, invalidateClientGetRequestCache, raceWithAbortSignal, shareClientGetRequest, clientGetRequestKey, clientPreferencesRequestKey, invalidateClientPreferencesCache, parseRetryAfterMs2, resolveAuthBootstrapRetryDelayMs, fetchAuthBootstrapGetWithRetry, annotateMarketDataRequestError, buildMarketDataFetchError, buildMarketDataNetworkError, buildMarketDataResponseBodyError, isTransientNetworkFetchError, createIdempotencyKey, getErrorMessage, getErrorPayloadOrEmpty, getErrorPayloadOrFallbackDetail, getErrorMessageFromResponse, throwUnauthorizedIfNeeded, activeProfileId, PROFILE_STORAGE_KEY;
+var configuredApiTransport, getApiUrl, sendApiRequest, apiFetch, sleep, DEVICE_CLOCK_HEADER, deviceClockHeader, inFlightClientGetRequests, recentClientGetResponses, clientGetRequestGenerations, initializedClientGetRequestKeys, CLIENT_GET_DEDUPE_TTL_MS, CLIENT_RUNTIME_STATUSES_DEDUPE_TTL_MS, CLIENT_LLM_CONFIG_PRIME_TTL_MS, AUTH_BOOTSTRAP_GET_MAX_ATTEMPTS, AUTH_BOOTSTRAP_RETRY_JITTER_MS, canUseClientGetRequestCache, invalidateClientGetRequestCache, raceWithAbortSignal, shareClientGetRequest, clientGetRequestKey, clientPreferencesRequestKey, invalidateClientPreferencesCache, parseRetryAfterMs2, resolveAuthBootstrapRetryDelayMs, fetchAuthBootstrapGetWithRetry, annotateMarketDataRequestError, buildMarketDataFetchError, buildMarketDataNetworkError, buildMarketDataResponseBodyError, isTransientNetworkFetchError, createIdempotencyKey, getErrorMessage, getErrorPayloadOrEmpty, getErrorPayloadOrFallbackDetail, getErrorMessageFromResponse, throwUnauthorizedIfNeeded, activeProfileId, PROFILE_STORAGE_KEY;
 var init_shared = __esm({
   "lib/api/shared.ts"() {
     "use strict";
@@ -55702,6 +55809,7 @@ var init_shared = __esm({
     init_runtime_policy_generated2();
     init_constants();
     init_abort();
+    init_runtime_redaction();
     configuredApiTransport = null;
     getApiUrl = () => {
       if (configuredApiTransport) return configuredApiTransport.baseUrl;
@@ -55736,6 +55844,8 @@ var init_shared = __esm({
       return sent !== init2 && refusedUnread(response, readsGzip) ? sendApiRequest(input, init2) : response;
     };
     sleep = (ms) => new Promise((resolve14) => setTimeout(resolve14, ms));
+    DEVICE_CLOCK_HEADER = "X-Device-Clock-Ms";
+    deviceClockHeader = () => ({ [DEVICE_CLOCK_HEADER]: String(Date.now()) });
     inFlightClientGetRequests = /* @__PURE__ */ new Map();
     recentClientGetResponses = /* @__PURE__ */ new Map();
     clientGetRequestGenerations = /* @__PURE__ */ new Map();
@@ -55850,7 +55960,7 @@ var init_shared = __esm({
         responseText = "";
       }
       const statusText = response.statusText ? ` ${response.statusText}` : "";
-      const detail = responseText ? `: ${responseText.slice(0, runtime_policy_generated_default2.ui.api_client.market_data_error_detail_chars)}` : "";
+      const detail = responseText ? `: ${sanitizeRuntimeDiagnosticValue(responseText).slice(0, runtime_policy_generated_default2.ui.api_client.market_data_error_detail_chars)}` : "";
       return annotateMarketDataRequestError(
         new Error(`Market data request failed: ${label2} unavailable (HTTP ${response.status}${statusText})${detail}`),
         path,
@@ -56322,68 +56432,6 @@ var init_google_auth_url = __esm({
   }
 });
 
-// lib/runtime/runtime-redaction.ts
-var REDACTED_VALUE, SECRET_QUERY_PARAM_PATTERN, BEARER_TOKEN_PATTERN, SECRET_ASSIGNMENT_PATTERN, SECRET_KEYWORD_VALUE_PATTERN, OPENAI_STYLE_KEY_PATTERN, VERTEX_EXPRESS_KEY_PATTERN, isRuntimeErrorObject, sanitizeRuntimeDiagnosticValue, sanitizeRuntimeNetworkPath, getSanitizedRuntimeErrorMessage, toSanitizedRuntimeError, getSanitizedRuntimeAbortReason;
-var init_runtime_redaction = __esm({
-  "lib/runtime/runtime-redaction.ts"() {
-    "use strict";
-    init_define_VTX_EXO_POLICY();
-    init_define_VTX_GROK_POLICY();
-    init_define_VTX_PI_MODEL_POLICY();
-    init_abort();
-    REDACTED_VALUE = "[REDACTED]";
-    SECRET_QUERY_PARAM_PATTERN = /([?&](?:access_token|api(?:_|-)?key|auth|authorization|key|private_key|secret|sig|signature|token)=)[^&#\s]*/gi;
-    BEARER_TOKEN_PATTERN = /\b(Bearer)\s+[A-Za-z0-9._:-]+\b/gi;
-    SECRET_ASSIGNMENT_PATTERN = /((?:authorization\s*[:=]\s*['"]?Bearer\s+|x-api-key\s*[:=]\s*['"]?|api(?:_|-)?key\s*[:=]\s*['"]?|\bkey\s*[:=]\s*['"]?|token\s*[:=]\s*['"]?|secret\s*[:=]\s*['"]?))[^'"\s,}]+/gi;
-    SECRET_KEYWORD_VALUE_PATTERN = /((?:private(?:_|-|\s)?key|signing(?:_|-|\s)?key)\s*[:=]\s*['"]?)(0x[a-fA-F0-9]{64}|[^'"\s,}]+)/gi;
-    OPENAI_STYLE_KEY_PATTERN = /\bsk-[A-Za-z0-9._-]+\b/g;
-    VERTEX_EXPRESS_KEY_PATTERN = /\bAQ\.[A-Za-z0-9._-]+\b/g;
-    isRuntimeErrorObject = (error48) => error48 instanceof Error || error48 != null && typeof error48 === "object" && Object.prototype.toString.call(error48) === "[object DOMException]" && typeof error48.message === "string" && typeof error48.name === "string";
-    sanitizeRuntimeDiagnosticValue = (value) => {
-      const normalized = String(value || "");
-      if (!normalized) {
-        return normalized;
-      }
-      return normalized.replace(SECRET_QUERY_PARAM_PATTERN, `$1${REDACTED_VALUE}`).replace(BEARER_TOKEN_PATTERN, `$1 ${REDACTED_VALUE}`).replace(SECRET_ASSIGNMENT_PATTERN, `$1${REDACTED_VALUE}`).replace(SECRET_KEYWORD_VALUE_PATTERN, `$1${REDACTED_VALUE}`).replace(OPENAI_STYLE_KEY_PATTERN, REDACTED_VALUE).replace(VERTEX_EXPRESS_KEY_PATTERN, REDACTED_VALUE);
-    };
-    sanitizeRuntimeNetworkPath = (value) => {
-      const normalized = String(value || "").trim();
-      if (!normalized) {
-        return "/";
-      }
-      const withoutFragment = normalized.split("#", 1)[0] || normalized;
-      const withoutQuery = withoutFragment.split("?", 1)[0] || withoutFragment;
-      const sanitized = sanitizeRuntimeDiagnosticValue(withoutQuery.trim());
-      return sanitized || "/";
-    };
-    getSanitizedRuntimeErrorMessage = (error48) => {
-      const message = isRuntimeErrorObject(error48) ? error48.message : typeof error48 === "string" ? error48 : error48 == null ? null : String(error48);
-      if (message == null) {
-        return null;
-      }
-      return sanitizeRuntimeDiagnosticValue(message);
-    };
-    toSanitizedRuntimeError = (error48) => {
-      const message = getSanitizedRuntimeErrorMessage(error48) || "Unknown runtime error.";
-      if (isRuntimeErrorObject(error48) && error48.message === message) {
-        if (isAbortLikeError(error48) && error48.name !== "AbortError") {
-          if (error48 instanceof Error) error48.name = "AbortError";
-          else return Object.assign(new Error(message), { name: "AbortError" });
-        }
-        return error48;
-      }
-      const sanitized = new Error(message);
-      if (isAbortLikeError(error48)) {
-        sanitized.name = "AbortError";
-      } else if (isRuntimeErrorObject(error48) && error48.name) {
-        sanitized.name = error48.name;
-      }
-      return sanitized;
-    };
-    getSanitizedRuntimeAbortReason = (signal, fallbackMessage = "The operation was aborted.") => isRuntimeErrorObject(signal?.reason) ? toSanitizedRuntimeError(signal.reason) : new DOMException(fallbackMessage, "AbortError");
-  }
-});
-
 // lib/runtime/channel-sender.ts
 var RUNTIME_TAB_ID_STORAGE_KEY, createRuntimeUuid, getOrCreateRuntimeTabSenderId;
 var init_channel_sender = __esm({
@@ -57084,6 +57132,7 @@ var init_local_breadcrumbs = __esm({
     init_define_VTX_PI_MODEL_POLICY();
     init_constants();
     init_runtime_policy_generated2();
+    init_runtime_redaction();
     LOCAL_RUNTIME_BREADCRUMBS_STORAGE_KEY = "vtx_client_runtime_local_breadcrumbs_v1";
     DEVICE_DIAGNOSTICS2 = runtime_policy_generated_default2.trading.engine.client_runtime.device_diagnostics;
     LOCAL_RUNTIME_BREADCRUMBS_MAX_ENTRIES = DEVICE_DIAGNOSTICS2.breadcrumbs_max_entries;
@@ -57096,7 +57145,7 @@ var init_local_breadcrumbs = __esm({
       return window;
     };
     sanitizeText = (value, maxLength) => {
-      const text = String(value ?? "").trim();
+      const text = sanitizeRuntimeDiagnosticValue(String(value ?? "")).trim();
       if (!text) {
         return null;
       }
@@ -57527,6 +57576,7 @@ var init_market_data = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_abort();
+    init_runtime_redaction();
     init_network_debug();
     init_shared();
     init_constants();
@@ -57837,6 +57887,7 @@ async function getLLMConfig(cookie, profileId, signal) {
       method: "GET",
       headers,
       credentials: "include",
+      cache: "no-store",
       signal: requestSignal
     });
     if (held && response.status === HTTP_STATUS.NOT_MODIFIED) return JSON.parse(held.text);
@@ -57961,6 +58012,17 @@ var init_account_summary = __esm({
   }
 });
 
+// lib/api/mobile-notifications.ts
+var init_mobile_notifications = __esm({
+  "lib/api/mobile-notifications.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_shared();
+  }
+});
+
 // lib/runtime/hyperliquid-account-mode-contract.ts
 function resolveExactHyperliquidAccountMode(userAbstraction, ...dexEvidence) {
   const mode = extractCanonicalHyperliquidAccountMode(userAbstraction);
@@ -58958,7 +59020,7 @@ var init_hyperliquid_public_read = __esm({
       let permit = null;
       const rowWeightedReservationId = !hostTransport && HYPERLIQUID_ROW_WEIGHTED_INFO_REQUESTS.includes(requestType) ? crypto.randomUUID() : void 0;
       let outcome = "cancelled";
-      let settled;
+      let settled2;
       let acquiring = false;
       let observedRateLimit;
       let privateRouteUsed = false;
@@ -59002,7 +59064,7 @@ var init_hyperliquid_public_read = __esm({
             checkAbort(signal);
           }
           pending2.set(key, { promise: new Promise((resolve14) => {
-            settled = resolve14;
+            settled2 = resolve14;
           }), priority });
         }
         if (options.reservation?.closed) throw new DOMException("Hyperliquid account read was cancelled.", "AbortError");
@@ -59115,9 +59177,9 @@ var init_hyperliquid_public_read = __esm({
         try {
           await finishHyperliquidRecoveryRequest(permit, outcome);
         } finally {
-          if (settled) {
+          if (settled2) {
             pending2.delete(key);
-            settled();
+            settled2();
           }
         }
       }
@@ -59882,7 +59944,7 @@ var init_error_surface_contract = __esm({
         return `${pausePrefix}: Critical behavior context could not be constructed for this cycle. The cycle was skipped safely; VTX will retry at the next scheduled cycle.`;
       }
       if (classificationBasis.includes("critical behavior state is unavailable for this trading cycle")) {
-        return `${pausePrefix}: Your prompt on the AI page contains something VTX can't use, for example copied DATA FORMAT definitions in the System Prompt. Fix the prompt; VTX skipped this cycle and will retry at the next scheduled cycle.`;
+        return `${pausePrefix}: Your prompt on the AI page contains something VTX can't use, for example a <behavior_state> line in the System Prompt that doesn't start with "- ". Fix the prompt; VTX skipped this cycle and will retry at the next scheduled cycle.`;
       }
       if (classificationBasis.includes(
         "client runtime decision persistence deadline exceeded after the ai run completed"
@@ -91657,7 +91719,12 @@ var init_hyperliquid_client = __esm({
     };
     fetchBrowserAccountState = async (input) => {
       const user = requireWalletAddress(input.walletAddress);
-      const payload = await postHyperliquidInfo(input, { type: "clearinghouseState", user }, "hyperliquid.clearinghouseState");
+      const dex = String(input.dex ?? "").trim().toLowerCase();
+      const payload = await postHyperliquidInfo(
+        input,
+        { type: "clearinghouseState", user, ...dex ? { dex } : {} },
+        "hyperliquid.clearinghouseState"
+      );
       if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
         throw new Error("Malformed Hyperliquid clearinghouseState response.");
       }
@@ -91675,8 +91742,10 @@ var init_hyperliquid_client = __esm({
       const positions = Array.isArray(state2.assetPositions) ? state2.assetPositions.map((entry) => {
         const assetPosition = entry;
         const position = assetPosition.position || {};
+        const coin = String(position.coin || assetPosition.coin || "");
         return {
-          symbol: String(position.coin || assetPosition.coin || ""),
+          // A HIP-3 DEX may name its coins without the DEX.
+          symbol: dex && coin && !coin.includes(":") ? `${dex}:${coin}` : coin,
           size: toFiniteNumber(position.szi, 0),
           entry_price: position.entryPx == null ? null : toFiniteNumber(position.entryPx, 0),
           unrealized_pnl: position.unrealizedPnl == null ? null : toFiniteNumber(position.unrealizedPnl, 0),
@@ -91706,7 +91775,7 @@ var init_hyperliquid_client = __esm({
     };
     fetchBrowserPosition = async (input) => {
       const symbol2 = normalizeSymbol(input.symbol);
-      const accountState = await fetchBrowserAccountState(input);
+      const accountState = await fetchBrowserAccountState({ ...input, dex: getHyperliquidMarketDex(symbol2) });
       return accountState.positions.find((position) => normalizeSymbol(position.symbol) === symbol2) ?? null;
     };
     buildHyperliquidOrderWire = async (input, tif, price, priceKind) => {
@@ -92762,7 +92831,7 @@ var init_hyperliquid_client = __esm({
             }
             settlementAttempted = true;
             try {
-              const settled = await settleClientRuntimeExchangeMutation(
+              const settled2 = await settleClientRuntimeExchangeMutation(
                 durableMutation.profileId,
                 durableMutation.mutationId,
                 {
@@ -92777,10 +92846,10 @@ var init_hyperliquid_client = __esm({
                 ...durableMutationAuthorityArgs(durableMutation)
               );
               try {
-                durableMutation.onSettled?.(settled);
+                durableMutation.onSettled?.(settled2);
               } catch {
               }
-              return settled;
+              return settled2;
             } catch (settlementCause) {
               throw Object.assign(new RuntimeExecutionError(
                 "Exchange submission may have completed; durable reconciliation is pending.",
@@ -92825,10 +92894,10 @@ var init_hyperliquid_client = __esm({
                   );
                 }
                 await new Promise((resolve14) => {
-                  let settled = false;
+                  let settled2 = false;
                   const finish = () => {
-                    if (settled) return;
-                    settled = true;
+                    if (settled2) return;
+                    settled2 = true;
                     globalThis.clearTimeout(timeoutId);
                     input.signal?.removeEventListener("abort", finish);
                     resolve14();
@@ -93579,7 +93648,8 @@ async function postClientRuntime(path, profileId, body, options) {
         signal: requestSignal,
         headers: {
           ...requestHeaders,
-          ...lastRequestId ? { "X-Request-ID": lastRequestId } : {}
+          ...lastRequestId ? { "X-Request-ID": lastRequestId } : {},
+          ...deviceClockHeader()
         },
         body
       });
@@ -94701,6 +94771,7 @@ var init_api2 = __esm({
     init_bot_exchanges();
     init_local_breadcrumbs();
     init_abort();
+    init_runtime_redaction();
     init_client_runtime_ownership_errors();
     init_shared();
     init_shared();
@@ -94716,6 +94787,7 @@ var init_api2 = __esm({
     init_updates();
     init_profile_emoji();
     init_account_summary();
+    init_mobile_notifications();
     init_server_runtime_lease();
     clientRuntimeSecretHeaders = (profileId) => {
       const headers = getProfileHeaders({}, profileId);
@@ -94799,9 +94871,8 @@ var init_api2 = __esm({
       if ("invocations" in payload) {
         body.invocations = payload.invocations ?? [];
       }
-      if (payload.stopReason !== void 0) {
-        body.stop_reason = payload.stopReason ?? null;
-      }
+      if (payload.stopReason !== void 0) body.stop_reason = payload.stopReason ?? null;
+      if (payload.modeSwitch) body.mode_switch = true;
       if (payload.authoritativeIntent !== void 0) {
         body.authoritative_intent = payload.authoritativeIntent;
       }
@@ -95256,7 +95327,7 @@ var init_api2 = __esm({
         if (code !== "client_exchange_evidence_invalid") throw error48;
         appendRuntimeDebugEvent({
           label: "client_exchange_reconcile_evidence_rejected",
-          note: `mutation_id=${answer.mutation_id} code=${code} detail=${String(error48.message ?? "").slice(0, runtime_policy_generated_default2.ui.api_client.exchange_evidence_rejection_detail_chars)}`,
+          note: `mutation_id=${answer.mutation_id} code=${code} detail=${sanitizeRuntimeDiagnosticValue(String(error48.message ?? "")).slice(0, runtime_policy_generated_default2.ui.api_client.exchange_evidence_rejection_detail_chars)}`,
           outcome: "error"
         });
         return answer;
@@ -95994,6 +96065,7 @@ var init_vault = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_host_storage();
+    init_runtime_redaction();
     init_api2();
     init_client_runtime_secret_contract();
     init_client_runtime_provider_contract();
@@ -97783,8 +97855,8 @@ var init_hyperliquid_account_state_adapter = __esm({
         return await Promise.all(reads);
       } catch (error48) {
         controller.abort(error48);
-        const settled = await Promise.allSettled(reads);
-        for (const result of settled) {
+        const settled2 = await Promise.allSettled(reads);
+        for (const result of settled2) {
           if (result.status === "rejected" && result.reason instanceof HyperliquidPublicReadError && result.reason.code === "public_rate_limited") throw result.reason;
         }
         throw error48;
@@ -98688,7 +98760,7 @@ var init_protective_evidence = __esm({
 });
 
 // lib/runtime/protective-actions.ts
-var DECIMAL, CLOID, fail2, exactKeys, nonNegativeInteger, decimalString, POSITION_ORDER_SIZE, orderSizeString, canonicalTriggerOrder, canonicalProtectiveWireAction, assertProtectiveActionLocallySafe, authorityArgs2, errorCode2, foreignClaimExpiresAtMs, drainLocks, refusedUntil, drainClientProtectiveActions, drainOnce;
+var DECIMAL, PERCENT, CLOID, fail2, exactKeys, nonNegativeInteger, decimalString, POSITION_ORDER_SIZE, orderSizeString, canonicalTriggerOrder, canonicalProtectiveWireAction, assertProtectiveActionLocallySafe, authorityArgs2, errorCode2, foreignClaimExpiresAtMs, drainLocks, refusedUntil, drainClientProtectiveActions, drainOnce;
 var init_protective_actions = __esm({
   "lib/runtime/protective-actions.ts"() {
     "use strict";
@@ -98705,6 +98777,7 @@ var init_protective_actions = __esm({
     init_error_surface_contract();
     init_protective_evidence();
     DECIMAL = /^(?:0|[1-9]\d*)(?:\.\d+)?$/;
+    PERCENT = /^(?:0|[1-9]\d*)(?:\.\d+)?%$/;
     CLOID = /^0x[0-9a-f]{32}$/;
     fail2 = (message) => {
       throw new RuntimeExecutionError(
@@ -98783,9 +98856,48 @@ var init_protective_actions = __esm({
         if (oid <= 0) fail2("cancel target is invalid.");
         return { type: "cancel", cancels: [{ a: nonNegativeInteger(cancel.a, "asset"), o: oid }] };
       }
+      if (kind === "trailingStop") {
+        const action = exactKeys(wire, ["type", "asset", "isBuy", "sz", "reduceOnly", "retracement", "activationPx"], "action");
+        if (action.reduceOnly !== true) fail2("a trailing stop must be reduce-only.");
+        if (typeof action.isBuy !== "boolean") fail2("trailing stop side is invalid.");
+        if (action.activationPx !== null) fail2("a trailing stop is active at once.");
+        const distance = action.retracement;
+        let retracement;
+        if (distance && typeof distance === "object" && "pct" in distance) {
+          const pct = exactKeys(distance, ["pct"], "retracement").pct;
+          const decimals = typeof pct === "string" && pct.includes(".") ? pct.slice(pct.indexOf(".") + 1, -1).length : 0;
+          if (typeof pct !== "string" || !PERCENT.test(pct) || !(Number(pct.slice(0, -1)) > 0) || decimals > HYPERLIQUID_EXCHANGE_SPECIFICATION.trailing_retracement_pct_max_decimals) {
+            fail2("trailing stop percent is invalid.");
+          }
+          retracement = { pct };
+        } else {
+          retracement = { px: decimalString(exactKeys(distance, ["px"], "retracement").px, "trailing stop distance") };
+        }
+        return {
+          type: "trailingStop",
+          asset: nonNegativeInteger(action.asset, "asset"),
+          isBuy: action.isBuy,
+          sz: decimalString(action.sz, "trailing stop size"),
+          reduceOnly: true,
+          retracement,
+          activationPx: null
+        };
+      }
       return fail2("unsupported action type.");
     };
     assertProtectiveActionLocallySafe = (action, canonical, livePositionSize) => {
+      if (canonical.type === "trailingStop" !== (action.operation_kind === "trailing_stop")) {
+        fail2("operation kind does not match the action.");
+      }
+      if (canonical.type === "trailingStop") {
+        if (action.action_kind !== "place" || action.client_order_ids.length > 0) fail2("trailing stop metadata does not match.");
+        if (canonical.asset !== action.exchange_asset_id) fail2("asset does not match the symbol.");
+        if (livePositionSize == null || !Number.isFinite(livePositionSize) || livePositionSize === 0) {
+          fail2("the live position is flat or unknown.");
+        }
+        if (canonical.isBuy !== livePositionSize < 0) fail2("the trailing stop would not close the live position.");
+        return;
+      }
       const assets = canonical.type === "cancel" ? canonical.cancels.map((cancel) => cancel.a) : canonical.type === "modify" ? [canonical.order.a] : canonical.orders.map((order) => order.a);
       if (assets.some((asset) => asset !== action.exchange_asset_id)) fail2("asset does not match the symbol.");
       if (canonical.type === "cancel") {
@@ -98981,7 +99093,7 @@ var init_protective_actions = __esm({
           });
           continue;
         }
-        let settled = null;
+        let settled2 = null;
         try {
           await executeClientPreparedProtectiveAction({
             profileId: input.profileId,
@@ -99000,7 +99112,7 @@ var init_protective_actions = __esm({
             clientOrderIds: action.client_order_ids,
             wireAction: canonical,
             onSettled: (mutation) => {
-              settled = mutation;
+              settled2 = mutation;
             }
           });
           result.processed.push({ actionId: action.action_id, actionKind: action.action_kind, outcome: "sent" });
@@ -99012,7 +99124,7 @@ var init_protective_actions = __esm({
             reason: errorCode2(error48) || (error48 instanceof RuntimeExecutionError ? error48.reasonCode : "execution_failed")
           });
         }
-        const settledMutation = settled;
+        const settledMutation = settled2;
         if (settledMutation?.protection) result.protection = settledMutation.protection;
         if (settledMutation && Array.isArray(settledMutation.protective_actions)) {
           actions = settledMutation.protective_actions;
@@ -99154,7 +99266,7 @@ var init_client_exchange_mutations = __esm({
 });
 
 // lib/runtime/execution-guard-contract.ts
-var unitsFromPosition, signedUnitsFromPosition, signedUnitsFromEntryPosition, classifyExecutionIntent, reductionFirstOrder, usdAmount, orderMetadataRetryReason, orderCeilingRefusal, resolveExecutionTarget, decisionOrderSizeAsset, flipExecutionLegs, executedOrderPositionEvent;
+var unitsFromPosition, signedUnitsFromPosition, signedUnitsFromEntryPosition, classifyExecutionIntent, reductionFirstOrder, usdAmount, orderMetadataRetryReason, orderCeilingRefusal, copyClosingSize, copyOrderClosingSize, copyOrderNotionalCap, resolveExecutionTarget, decisionOrderSizeAsset, flipExecutionLegs, executedOrderPositionEvent;
 var init_execution_guard_contract = __esm({
   "lib/runtime/execution-guard-contract.ts"() {
     "use strict";
@@ -99365,6 +99477,10 @@ var init_execution_guard_contract = __esm({
       return null;
     };
     orderCeilingRefusal = (input) => {
+      const closingSide2 = input.side === "sell" && input.currentPositionSize > 0 || input.side === "buy" && input.currentPositionSize < 0;
+      if (input.reduceOnly && closingSide2 && input.size <= Math.abs(input.currentPositionSize)) {
+        return null;
+      }
       const orderNotional = input.size * input.price;
       if (orderNotional > input.maxOrderNotional) {
         return `Order notional ${usdAmount(orderNotional)} exceeds limit ${usdAmount(input.maxOrderNotional)}`;
@@ -99376,6 +99492,23 @@ var init_execution_guard_contract = __esm({
       }
       return null;
     };
+    copyClosingSize = (destinationPosition, destinationDelta) => destinationPosition * destinationDelta >= 0 ? 0 : Math.min(Math.abs(destinationDelta), Math.abs(destinationPosition));
+    copyOrderClosingSize = (input) => {
+      const size = Number.isFinite(input.size) && input.size > 0 ? input.size : 0;
+      if (input.reduceOnly) return size;
+      if (input.actualPosition === null || !Number.isFinite(input.actualPosition)) return 0;
+      const signedSize = String(input.side).trim().toLowerCase() === "buy" ? size : -size;
+      return copyClosingSize(input.actualPosition, signedSize);
+    };
+    copyOrderNotionalCap = (followerCap, platformCap, closingNotional) => {
+      const platform = Number(platformCap);
+      if (!Number.isFinite(platform) || platform <= 0) return null;
+      const closing = Number(closingNotional);
+      const platformBound = (Number.isFinite(closing) && closing > 0 ? closing : 0) + platform;
+      const follower = Number(followerCap);
+      if (!Number.isFinite(follower) || follower <= 0) return platformBound;
+      return Math.min(follower, platformBound);
+    };
     resolveExecutionTarget = (classified, liveSignedUnits, livePositionDirection) => {
       const liveUnits = Number.isFinite(liveSignedUnits) ? Math.trunc(liveSignedUnits) : 0;
       const exactLiveDirection = livePositionDirection == null ? liveUnits > 0 ? 1 : liveUnits < 0 ? -1 : 0 : livePositionDirection;
@@ -99695,7 +99828,7 @@ var init_protective_trigger_price = __esm({
 });
 
 // lib/runtime/protective-stop-replacement.ts
-var STOP_REPLACED, STOP_REPLACEMENT_EXHAUSTED, STOP_REPLACEMENT_REJECTED, STOP_REPLACEMENT_NOT_LANDED, STOP_CLEANUP_IN_FLIGHT, TERMINAL_WITHOUT_FILL, CANCELLED_BY_USER, POSITION_FLAT_AFTER_TERMINAL, CAPACITY_ALREADY_ALLOCATED, TRIGGER_INVALID, STOP_EXECUTION_REJECTED, STOP_TRIGGER_CROSSED, permanentStopRejectionStatuses, protectiveStopRejectionIsPermanent, POSITION_ENDED_ORDER_STATUSES, finiteOrNull, floorToLot, positiveSafeInteger, decimalOrNull, positionTolerance, chainFillChronology, protectivePositionEpisodeEnded, decideProtectiveStopReplacement;
+var STOP_REPLACED, STOP_REPLACEMENT_EXHAUSTED, STOP_REPLACEMENT_REJECTED, STOP_REPLACEMENT_NOT_LANDED, STOP_CLEANUP_IN_FLIGHT, TERMINAL_WITHOUT_FILL, CANCELLED_BY_USER, POSITION_FLAT_AFTER_TERMINAL, CAPACITY_ALREADY_ALLOCATED, TRIGGER_INVALID, STOP_EXECUTION_REJECTED, STOP_TRIGGER_CROSSED, permanentStopRejectionStatuses, protectiveStopRejectionIsPermanent, POSITION_ENDED_ORDER_STATUSES, finiteOrNull, floorToLot, positiveSafeInteger, decimalOrNull, positionTolerance, chainFillChronology, marketFillChain, noExposureOnSide, protectivePositionEpisodeEnded, decideProtectiveStopReplacement;
 var init_protective_stop_replacement = __esm({
   "lib/runtime/protective-stop-replacement.ts"() {
     "use strict";
@@ -99772,16 +99905,13 @@ var init_protective_stop_replacement = __esm({
       }
       return ordered;
     };
-    protectivePositionEpisodeEnded = (input) => {
-      if (!POSITION_ENDED_ORDER_STATUSES.has(String(input.orderStatus ?? ""))) return false;
-      const statusMs = positiveSafeInteger(input.statusTimestampMs);
-      if (statusMs == null || !Array.isArray(input.fills)) return false;
-      const market = normalizeHyperliquidMarketSymbol(input.symbol);
-      const sign = input.isLong ? 1 : -1;
+    marketFillChain = (fills, symbol2) => {
+      if (!Array.isArray(fills)) return null;
+      const market = normalizeHyperliquidMarketSymbol(symbol2);
       const rows = [];
       const seen = /* @__PURE__ */ new Set();
-      for (const fill of input.fills) {
-        if (fill == null || typeof fill !== "object" || Array.isArray(fill)) return false;
+      for (const fill of fills) {
+        if (fill == null || typeof fill !== "object" || Array.isArray(fill)) return null;
         const record5 = fill;
         if (normalizeHyperliquidMarketSymbol(String(record5.coin ?? "")) !== market) continue;
         const tradeId = positiveSafeInteger(record5.tid);
@@ -99789,12 +99919,26 @@ var init_protective_stop_replacement = __esm({
         const size = decimalOrNull(record5.sz);
         const start = decimalOrNull(record5.startPosition);
         if (tradeId == null || seen.has(tradeId) || time3 == null || record5.side !== "B" && record5.side !== "A" || size == null || size <= 0 || start == null) {
-          return false;
+          return null;
         }
         seen.add(tradeId);
-        rows.push({ time: time3, tradeId, start, end: start + (record5.side === "B" ? size : -size) });
+        rows.push({
+          time: time3,
+          tradeId,
+          start,
+          end: start + (record5.side === "B" ? size : -size),
+          orderId: String(record5.oid ?? "").trim()
+        });
       }
-      const chained = chainFillChronology(rows);
+      return chainFillChronology(rows);
+    };
+    noExposureOnSide = (position, isLong) => (isLong ? 1 : -1) * position <= positionTolerance(position, 0);
+    protectivePositionEpisodeEnded = (input) => {
+      if (!POSITION_ENDED_ORDER_STATUSES.has(String(input.orderStatus ?? ""))) return false;
+      const statusMs = positiveSafeInteger(input.statusTimestampMs);
+      if (statusMs == null) return false;
+      const sign = input.isLong ? 1 : -1;
+      const chained = marketFillChain(input.fills, input.symbol);
       if (chained == null) return false;
       const before = chained.filter((row) => row.time <= statusMs);
       const after = chained.filter((row) => row.time > statusMs);
@@ -99947,7 +100091,7 @@ var init_protective_entry_cover = __esm({
 });
 
 // lib/runtime/native-position-protection.ts
-var nativeProtectionSettings, memberSetting, KINDS, formatTriggerOrNull, nativePositionTriggerPrice, nativeEntryRequest, HALF_UP_DIGIT, roundDecimalHalfUp, nativeTrailingRetracement, nativeAfterFillActions, classifyNativeOrderEnd, isOpenInDirection, nativePlacementGate, nativeStrayOrderDecision, FIRED_TRIGGER_CONDITION, TRAILING_ORDER_TYPE, closingSide, DECIMAL_PATTERN, decimalUnits2, fractionDigits, nativePlaceCover, positiveOrderId, nativeRearmDecision, nativeLostStopCrossed, readListedProtectiveRow, explainAbsentProtectiveOrder, readServerNativeProtectionState;
+var nativeProtectionSettings, memberSetting, KINDS, formatTriggerOrNull, nativePositionTriggerPrice, nativeEntryRequest, HALF_UP_DIGIT, roundDecimalHalfUp, nativeTrailingRetracement, nativeAfterFillActions, classifyNativeOrderEnd, isOpenInDirection, nativePlacementGate, nativeStrayOrderDecision, FIRED_TRIGGER_CONDITION, TRAILING_ORDER_TYPE, closingSide, DECIMAL_PATTERN, decimalUnits2, fractionDigits, nativePlaceCover, positiveOrderId, nativeRearmDecision, nativeLostStopCrossed, readListedProtectiveRow, explainAbsentProtectiveOrder, readServerNativeProtectionState, nativeFillOpenedPosition, nativePositionEndedSince, flatReadEndsPosition;
 var init_native_position_protection = __esm({
   "lib/runtime/native-position-protection.ts"() {
     "use strict";
@@ -100167,11 +100311,60 @@ var init_native_position_protection = __esm({
       if (typeof record5.enabled !== "boolean" || legacy == null || native == null) return null;
       return { enabled: record5.enabled, legacySymbols: new Set(legacy), nativeSymbols: new Set(native) };
     };
+    nativeFillOpenedPosition = (input) => {
+      if (!input.complete || !Array.isArray(input.fills)) return "unknown";
+      const market = normalizeHyperliquidMarketSymbol(input.symbol);
+      const moves = [];
+      const decimal = (value) => {
+        const text = typeof value === "number" && Number.isFinite(value) ? String(value) : typeof value === "string" ? value.trim() : "";
+        return DECIMAL_PATTERN.test(text) ? Number(text) : null;
+      };
+      for (const fill of input.fills) {
+        if (fill == null || typeof fill !== "object" || Array.isArray(fill)) continue;
+        const record5 = fill;
+        if (String(record5.oid ?? "").trim() !== input.orderId.trim()) continue;
+        if (normalizeHyperliquidMarketSymbol(String(record5.coin ?? "")) !== market) continue;
+        const start = decimal(record5.startPosition);
+        const size = decimal(record5.sz);
+        if (start == null || size == null || size <= 0 || record5.side !== "B" && record5.side !== "A") return "unknown";
+        moves.push({ start, end: start + (record5.side === "B" ? size : -size) });
+      }
+      if (moves.length === 0) return "unknown";
+      if (moves.some(({ start, end }) => noExposureOnSide(start, input.isLong) && !noExposureOnSide(end, input.isLong))) {
+        return "opened";
+      }
+      if (moves.every(({ start }) => !noExposureOnSide(start, input.isLong))) return "joined";
+      if (moves.every(({ end }) => noExposureOnSide(end, input.isLong))) return "other_side";
+      return "unknown";
+    };
+    nativePositionEndedSince = (input) => {
+      let answer = "unknown";
+      const chain = input.complete ? marketFillChain(input.fills, input.symbol) : null;
+      if (chain != null) {
+        let last = -1;
+        chain.forEach((row, index) => {
+          if (row.orderId === input.orderId.trim()) last = index;
+        });
+        if (last >= 0) {
+          answer = chain.slice(last).some((row) => noExposureOnSide(row.end, input.isLong)) ? "ended" : "open";
+        }
+      }
+      if (answer === "unknown" && input.flatRead != null && flatReadEndsPosition(input.flatRead, input.isLong)) return "ended";
+      return answer;
+    };
+    flatReadEndsPosition = (read, isLong) => {
+      if (read.pageComplete !== true || read.newestFillMs === void 0) return false;
+      const text = String(read.position ?? "").trim();
+      if (!DECIMAL_PATTERN.test(text) || !Number.isSafeInteger(read.stateMs)) return false;
+      if (!noExposureOnSide(Number(text), isLong)) return false;
+      if (read.newestFillMs == null) return true;
+      return Number.isSafeInteger(read.newestFillMs) && read.newestFillMs < read.stateMs;
+    };
   }
 });
 
 // lib/runtime/native-protection-device.ts
-var NATIVE_PROTECTION_RECORD_VERSION, nativeProtectionStorage, resolveStorage, setNativeProtectionStorage, recordKey, isMember, isRetracement, isLot, readNativeProtectionRecord, versioned, writeNativeProtectionRecord, NativeOrderNotSentError, withDispatchBoundary, attempt, notSentRestores, errorText, actionOf, isOpenInDirection2, coverRows, restingOrderIdAt, definitivelyRefused, TRAILING_LOT_FIRED, ownLotOrderIds, lotRetracement, lotReport, sendTrailingLot, planNativeFillLot, dropNativePendingLot, planNativePendingLot, planNativeOpen, recordEntryChildren, observeMembers, UNKNOWN_ORDER_RESPONSE, resolveUnknownOrderIds, settleNativeProtectionAfterFill, reconcileNativeProtection;
+var NATIVE_PROTECTION_RECORD_VERSION, nativeProtectionStorage, resolveStorage, setNativeProtectionStorage, recordKey, isMember, isRetracement, isLot, isStandbyAdd, readNativeProtectionRecord, versioned, writeNativeProtectionRecord, NO_FILLS, nativeFillsPageFromUserFills, fillsReader, flatReadOf, orderFillTimes, namedOrderId, NativeOrderNotSentError, withDispatchBoundary, attempt, notSentRestores, errorText, actionOf, isOpenInDirection2, coverRows, restingOrderIdAt, definitivelyRefused, TRAILING_LOT_FIRED, TRAILING_LOT_POSITION_ENDED, TRAILING_LOT_OTHER_SIDE, lotFillLeftPosition, lotOfAdd, ORDER_ID_PATTERN, lotFillOrderId, lotPositionSince, ownLotOrderIds, lotRetracement, lotReport, sendTrailingLot, planNativeFillLot, planNativeStandbyAdd, nameNativeStandbyAdd, dropNativeStandbyAdd, dropNativePendingLot, planNativePendingLot, planNativeOpen, recordEntryChildren, observeMembers, UNKNOWN_ORDER_RESPONSE, resolveUnknownOrderIds, plannedPair, resolveStandbyAdds, settleNativeProtectionAfterFill, reconcileNativeProtection;
 var init_native_protection_device = __esm({
   "lib/runtime/native-protection-device.ts"() {
     "use strict";
@@ -100179,6 +100372,8 @@ var init_native_protection_device = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_constants();
+    init_hyperliquid_market_symbol();
+    init_hyperliquid_order_status();
     init_order_identity();
     init_native_position_protection();
     NATIVE_PROTECTION_RECORD_VERSION = 1;
@@ -100199,7 +100394,7 @@ var init_native_protection_device = __esm({
     isMember = (value) => {
       if (!value || typeof value !== "object") return false;
       const member = value;
-      return (member.kind === "sl" || member.kind === "tp") && typeof member.clientOrderId === "string" && (member.orderId === null || typeof member.orderId === "number" && Number.isSafeInteger(member.orderId)) && typeof member.trigger === "string" && (member.placedAtMs === null || typeof member.placedAtMs === "number") && typeof member.sentAtMs === "number" && typeof member.replacedOnce === "boolean" && (member.pendingModify === void 0 || typeof member.pendingModify === "object" && member.pendingModify !== null && typeof member.pendingModify.clientOrderId === "string" && typeof member.pendingModify.trigger === "string" && typeof member.pendingModify.sentAtMs === "number");
+      return (member.kind === "sl" || member.kind === "tp") && typeof member.clientOrderId === "string" && (member.orderId === null || typeof member.orderId === "number" && Number.isSafeInteger(member.orderId)) && typeof member.trigger === "string" && (member.placedAtMs === null || typeof member.placedAtMs === "number") && typeof member.sentAtMs === "number" && typeof member.replacedOnce === "boolean" && (member.plannedAfterMs === void 0 || typeof member.plannedAfterMs === "number") && (member.pendingModify === void 0 || typeof member.pendingModify === "object" && member.pendingModify !== null && typeof member.pendingModify.clientOrderId === "string" && typeof member.pendingModify.trigger === "string" && typeof member.pendingModify.sentAtMs === "number");
     };
     isRetracement = (value) => {
       if (!value || typeof value !== "object") return false;
@@ -100210,7 +100405,12 @@ var init_native_protection_device = __esm({
     isLot = (value) => {
       if (!value || typeof value !== "object") return false;
       const lot = value;
-      return (lot.mutationId === null || typeof lot.mutationId === "string") && typeof lot.fillKey === "string" && typeof lot.fillEventMs === "number" && typeof lot.size === "string" && isRetracement(lot.retracement) && (lot.orderId === null || typeof lot.orderId === "number" && Number.isSafeInteger(lot.orderId)) && (lot.placedAtMs === null || typeof lot.placedAtMs === "number") && typeof lot.sentAtMs === "number" && typeof lot.replacedOnce === "boolean" && (lot.userCancelledOrderId === void 0 || typeof lot.userCancelledOrderId === "number") && (lot.fillEventFromDevice === void 0 || typeof lot.fillEventFromDevice === "boolean") && (lot.retiredReason === void 0 || typeof lot.retiredReason === "string");
+      return (lot.mutationId === null || typeof lot.mutationId === "string") && typeof lot.fillKey === "string" && (lot.fillOrderId === void 0 || typeof lot.fillOrderId === "string") && typeof lot.fillEventMs === "number" && typeof lot.size === "string" && isRetracement(lot.retracement) && (lot.orderId === null || typeof lot.orderId === "number" && Number.isSafeInteger(lot.orderId)) && (lot.placedAtMs === null || typeof lot.placedAtMs === "number") && typeof lot.sentAtMs === "number" && typeof lot.replacedOnce === "boolean" && (lot.userCancelledOrderId === void 0 || typeof lot.userCancelledOrderId === "number") && (lot.fillEventFromDevice === void 0 || typeof lot.fillEventFromDevice === "boolean") && (lot.retiredReason === void 0 || typeof lot.retiredReason === "string");
+    };
+    isStandbyAdd = (value) => {
+      if (!value || typeof value !== "object") return false;
+      const add = value;
+      return typeof add.clientOrderId === "string" && (add.orderId === null || typeof add.orderId === "string") && typeof add.sentAtMs === "number";
     };
     readNativeProtectionRecord = (profileId, symbol2) => {
       const storage3 = resolveStorage();
@@ -100218,7 +100418,7 @@ var init_native_protection_device = __esm({
       const raw = storage3.getItem(recordKey(profileId, symbol2));
       if (raw == null) return null;
       const parsed = JSON.parse(raw);
-      if (parsed?.version !== NATIVE_PROTECTION_RECORD_VERSION && parsed?.version !== NATIVE_PROTECTION_RECORD_WITH_LOTS_VERSION || parsed.profileId !== profileId || parsed.symbol !== symbol2 || typeof parsed.walletAddress !== "string" || typeof parsed.isLong !== "boolean" || parsed.phase !== "entry_pending" && parsed.phase !== "active" || typeof parsed.entryMutationId !== "string" || typeof parsed.entryClientOrderId !== "string" || typeof parsed.createdAtMs !== "number" || !Array.isArray(parsed.members) || !parsed.members.every(isMember) || parsed.lots !== void 0 && (parsed.version !== NATIVE_PROTECTION_RECORD_WITH_LOTS_VERSION || !Array.isArray(parsed.lots) || !parsed.lots.every(isLot))) {
+      if (parsed?.version !== NATIVE_PROTECTION_RECORD_VERSION && parsed?.version !== NATIVE_PROTECTION_RECORD_WITH_LOTS_VERSION || parsed.profileId !== profileId || parsed.symbol !== symbol2 || typeof parsed.walletAddress !== "string" || typeof parsed.isLong !== "boolean" || parsed.phase !== "entry_pending" && parsed.phase !== "active" || typeof parsed.entryMutationId !== "string" || typeof parsed.entryClientOrderId !== "string" || typeof parsed.createdAtMs !== "number" || !Array.isArray(parsed.members) || !parsed.members.every(isMember) || parsed.lots !== void 0 && (parsed.version !== NATIVE_PROTECTION_RECORD_WITH_LOTS_VERSION || !Array.isArray(parsed.lots) || !parsed.lots.every(isLot)) || parsed.standby !== void 0 && (!Array.isArray(parsed.standby) || !parsed.standby.every(isStandbyAdd)) || parsed.positionOrderId !== void 0 && typeof parsed.positionOrderId !== "string") {
         throw new Error("Stored native protection record is invalid.");
       }
       return parsed;
@@ -100238,6 +100438,63 @@ var init_native_protection_device = __esm({
         return false;
       }
     };
+    NO_FILLS = { fills: [], complete: false, coversFromMs: null };
+    nativeFillsPageFromUserFills = (rawFills, evidence) => {
+      const live = evidence.source === "live";
+      if (evidence.providerRowCount < evidence.providerPageCap) return { fills: [...rawFills], complete: live, coversFromMs: null };
+      const oldest = evidence.oldestFillTimeMs;
+      if (oldest == null) return NO_FILLS;
+      return {
+        fills: rawFills.filter((fill) => Number(fill?.time) > oldest),
+        complete: live,
+        coversFromMs: oldest + 1
+      };
+    };
+    fillsReader = (io) => {
+      let read = null;
+      return () => {
+        read ??= io.readFills().catch((error48) => {
+          if (io.endsPass?.(error48)) throw error48;
+          return NO_FILLS;
+        });
+        return read;
+      };
+    };
+    flatReadOf = (position, page, symbol2) => {
+      const stateMs = position.stateTimeMs;
+      if (!page.complete || stateMs == null || !Number.isSafeInteger(stateMs)) return null;
+      const market = normalizeHyperliquidMarketSymbol(symbol2);
+      let newest = null;
+      for (const fill of page.fills) {
+        if (fill == null || typeof fill !== "object" || Array.isArray(fill)) continue;
+        const row = fill;
+        if (normalizeHyperliquidMarketSymbol(String(row.coin ?? "")) !== market) continue;
+        const time3 = Number(row.time);
+        if (!Number.isSafeInteger(time3)) return null;
+        newest = newest == null ? time3 : Math.max(newest, time3);
+      }
+      return {
+        position: String(position.size),
+        stateMs,
+        newestFillMs: newest,
+        pageComplete: page.coversFromMs == null || page.coversFromMs < stateMs
+      };
+    };
+    orderFillTimes = (page, orderId, symbol2) => {
+      const market = normalizeHyperliquidMarketSymbol(symbol2);
+      return page.fills.flatMap((fill) => {
+        if (fill == null || typeof fill !== "object" || Array.isArray(fill)) return [];
+        const row = fill;
+        if (String(row.oid ?? "").trim() !== orderId.trim()) return [];
+        if (normalizeHyperliquidMarketSymbol(String(row.coin ?? "")) !== market) return [];
+        const time3 = Number(row.time);
+        return [Number.isSafeInteger(time3) && time3 > 0 ? time3 : Number.NaN];
+      });
+    };
+    namedOrderId = (evidence) => {
+      const orderId = Number(evidence.orderId);
+      return evidence.responseValid && evidence.orderMatches && Number.isSafeInteger(orderId) && orderId > 0 ? String(orderId) : null;
+    };
     NativeOrderNotSentError = class extends Error {
       constructor(cause) {
         super(cause instanceof Error ? cause.message : "The exchange call failed before dispatch.");
@@ -100303,6 +100560,24 @@ var init_native_protection_device = __esm({
       return Array.isArray(statuses) && statuses.length > 0 && statuses.every((status) => Boolean(status && typeof status === "object" && "error" in status));
     };
     TRAILING_LOT_FIRED = "protective_trailing_lot_fired";
+    TRAILING_LOT_POSITION_ENDED = "protective_trailing_lot_position_ended";
+    TRAILING_LOT_OTHER_SIDE = "protective_trailing_lot_other_side";
+    lotFillLeftPosition = (lot) => lot.retiredReason === TRAILING_LOT_FIRED || lot.retiredReason === TRAILING_LOT_POSITION_ENDED || lot.retiredReason === TRAILING_LOT_OTHER_SIDE;
+    lotOfAdd = (lot, add) => lot.fillKey === add.clientOrderId || add.orderId != null && (lot.fillKey === add.orderId || lot.fillOrderId === add.orderId);
+    ORDER_ID_PATTERN = /^\d+$/;
+    lotFillOrderId = (lot) => lot.fillOrderId ?? (ORDER_ID_PATTERN.test(lot.fillKey) ? lot.fillKey : null);
+    lotPositionSince = async (lot, record5, fills) => {
+      const orderId = lotFillOrderId(lot);
+      if (orderId == null) return "unknown";
+      const page = await fills();
+      return nativePositionEndedSince({
+        fills: page.fills,
+        complete: page.complete,
+        orderId,
+        isLong: record5.isLong,
+        symbol: record5.symbol
+      });
+    };
     ownLotOrderIds = (record5) => (record5.lots ?? []).flatMap((lot) => lot.orderId == null ? [] : [lot.orderId]);
     lotRetracement = (settings, size, sizeDecimals) => {
       const stopLoss = settings.stopLoss;
@@ -100385,6 +100660,22 @@ var init_native_protection_device = __esm({
       else lots.push(planned);
       return { ...record5, lots };
     };
+    planNativeStandbyAdd = (record5, input) => {
+      if (!input.clientOrderId || (record5.standby ?? []).some((add) => add.clientOrderId === input.clientOrderId)) return record5;
+      return {
+        ...record5,
+        standby: [...record5.standby ?? [], { clientOrderId: input.clientOrderId, orderId: null, sentAtMs: input.nowMs }]
+      };
+    };
+    nameNativeStandbyAdd = (record5, clientOrderId, orderId) => (record5.standby ?? []).some((add) => add.clientOrderId === clientOrderId && add.orderId !== orderId) ? {
+      ...record5,
+      standby: (record5.standby ?? []).map((add) => add.clientOrderId === clientOrderId ? { ...add, orderId } : add)
+    } : record5;
+    dropNativeStandbyAdd = (record5, clientOrderId) => {
+      const standby = (record5.standby ?? []).filter((add) => add.clientOrderId !== clientOrderId);
+      const { standby: _dropped, ...rest } = record5;
+      return standby.length > 0 ? { ...rest, standby } : rest;
+    };
     dropNativePendingLot = (record5, key) => versioned({
       ...record5,
       lots: (record5.lots ?? []).filter((lot) => !(lot.fillKey === key && lot.mutationId == null && lot.size === ""))
@@ -100495,7 +100786,7 @@ var init_native_protection_device = __esm({
           }
           continue;
         }
-        if (member.orderId != null || member.retiredReason) {
+        if (member.orderId != null || member.retiredReason || member.plannedAfterMs != null) {
           members.push(member);
           continue;
         }
@@ -100508,6 +100799,109 @@ var init_native_protection_device = __esm({
       }
       return { ...record5, members };
     };
+    plannedPair = (settings, afterMs, io) => ["sl", "tp"].filter((kind) => (kind === "sl" ? settings.stopLoss : settings.takeProfit) != null).map((kind) => ({
+      kind,
+      clientOrderId: clientOrderIdForMutation(io.newMutationId()),
+      orderId: null,
+      trigger: "",
+      placedAtMs: null,
+      sentAtMs: io.nowMs(),
+      replacedOnce: false,
+      plannedAfterMs: afterMs
+    }));
+    resolveStandbyAdds = async (args) => {
+      const { io } = args;
+      let record5 = args.record;
+      const standby = record5.standby ?? [];
+      if (standby.length === 0) return { record: record5, addFillMs: null, undecided: false };
+      const left = [];
+      let addFillMs = null;
+      for (const add of standby) {
+        if (left.length > 0) {
+          left.push(add);
+          continue;
+        }
+        let orderId = add.orderId;
+        let endedUnfilledAtMs = null;
+        if (orderId == null) {
+          const evidence = await io.readOrderStatus(add.clientOrderId);
+          orderId = namedOrderId(evidence);
+          if (orderId == null) {
+            if (!(evidence.responseStatus === UNKNOWN_ORDER_RESPONSE && io.nowMs() > io.neverLandsAfterMs(add.sentAtMs))) {
+              left.push(add);
+            }
+            continue;
+          }
+          if (classifyHyperliquidOrderStatus(evidence.orderStatus) === "terminal_unfilled") {
+            endedUnfilledAtMs = evidence.orderTimestampMs ?? null;
+          }
+        }
+        const page = await args.fills();
+        const times = orderFillTimes(page, orderId, record5.symbol);
+        const verdict = nativeFillOpenedPosition({
+          fills: page.fills,
+          complete: page.complete,
+          orderId,
+          isLong: record5.isLong,
+          symbol: record5.symbol
+        });
+        const fillMs = times.length > 0 && times.every(Number.isFinite) ? Math.max(...times) : null;
+        if (verdict === "other_side") {
+          const lots = record5.lots ?? [];
+          if (lots.some((lot) => lotOfAdd(lot, { clientOrderId: add.clientOrderId, orderId }))) {
+            record5 = {
+              ...record5,
+              lots: lots.map((lot) => lotOfAdd(lot, { clientOrderId: add.clientOrderId, orderId }) && !lot.retiredReason ? { ...lot, retiredReason: TRAILING_LOT_OTHER_SIDE } : lot)
+            };
+          }
+          continue;
+        }
+        if (verdict === "unknown" || fillMs == null) {
+          const neverFilled = endedUnfilledAtMs != null && page.complete && times.length === 0 && (page.coversFromMs == null || page.coversFromMs <= endedUnfilledAtMs);
+          if (neverFilled) continue;
+          let pageAccountsForAdd = times.length > 0;
+          if (!pageAccountsForAdd && page.coversFromMs != null) {
+            const evidence = await io.readOrderStatus(orderId);
+            const endedMs = evidence.statusTimestampMs;
+            pageAccountsForAdd = evidence.responseValid && evidence.terminal && endedMs != null && endedMs < page.coversFromMs;
+          }
+          const positionEnded = nativePositionEndedSince({
+            fills: page.fills,
+            complete: page.complete,
+            orderId,
+            isLong: record5.isLong,
+            symbol: record5.symbol,
+            flatRead: pageAccountsForAdd ? flatReadOf(args.position, page, record5.symbol) : null
+          }) === "ended";
+          if (!positionEnded) left.push(add);
+          continue;
+        }
+        const stateMs = args.position.stateTimeMs;
+        if (stateMs == null || !(stateMs > fillMs)) {
+          left.push(add);
+          continue;
+        }
+        record5 = { ...record5, positionOrderId: orderId };
+        addFillMs = fillMs;
+        if (verdict === "opened") {
+          const resting = record5.members.filter((member) => member.orderId != null && !member.retiredReason && args.page.some((order) => order.oid === member.orderId));
+          const planned = plannedPair(args.settings, fillMs, io);
+          record5 = {
+            ...record5,
+            members: [
+              ...planned.map((member) => {
+                const kept = resting.find((entry) => entry.kind === member.kind);
+                return kept ? { ...kept, replacedOnce: false } : member;
+              }),
+              // A kind the settings no longer enable stays tracked while it rests.
+              ...resting.filter((entry) => !planned.some((member) => member.kind === entry.kind))
+            ]
+          };
+        }
+      }
+      const { standby: _decided, ...rest } = record5;
+      return { record: left.length > 0 ? { ...rest, standby: left } : rest, addFillMs, undecided: left.length > 0 };
+    };
     settleNativeProtectionAfterFill = async (input) => {
       const { io } = input;
       const reports = [];
@@ -100516,6 +100910,17 @@ var init_native_protection_device = __esm({
       const page = await io.readOpenOrders();
       const position = await io.readPosition();
       const symbol2 = record5.symbol;
+      const fills = fillsReader(io);
+      const settlingAdds = (record5.standby ?? []).length > 0;
+      const boundary = await resolveStandbyAdds({ record: record5, settings: input.settings, io, fills, position, page });
+      record5 = boundary.record;
+      if (boundary.undecided) {
+        return { record: record5, reports };
+      }
+      const entryOrderId = String(input.entryOrderId ?? "").trim();
+      if (record5.positionOrderId == null && boundary.addFillMs == null && !settlingAdds && ORDER_ID_PATTERN.test(entryOrderId)) {
+        record5 = { ...record5, positionOrderId: entryOrderId };
+      }
       if (!isOpenInDirection2(position.size, record5.isLong)) {
         reports.push({
           order_id: input.entryOrderId,
@@ -100554,7 +100959,10 @@ var init_native_protection_device = __esm({
       });
       let eventMs = Math.max(
         0,
-        ...observations.map((entry) => entry.row?.timestamp ?? entry.member.placedAtMs ?? 0)
+        ...observations.map((entry) => entry.row?.timestamp ?? entry.member.placedAtMs ?? 0),
+        // An add's own fill, and the fill a planned pair answers: Hyperliquid's times.
+        boundary.addFillMs ?? 0,
+        ...record5.members.map((member) => member.plannedAfterMs ?? 0)
       );
       if (eventMs <= 0 && input.entryOrderId) {
         const entryStatus = await io.readOrderStatus(input.entryOrderId);
@@ -100634,7 +101042,7 @@ var init_native_protection_device = __esm({
           });
           continue;
         }
-        if (existing != null && existing.orderId == null && !unknownClientOrderIds.has(existing.clientOrderId)) {
+        if (existing != null && existing.orderId == null && existing.plannedAfterMs == null && !unknownClientOrderIds.has(existing.clientOrderId)) {
           continue;
         }
         if (gate !== "place") {
@@ -100753,8 +101161,15 @@ var init_native_protection_device = __esm({
         const retracement = lotRetracement(input.settings, size, input.sizeDecimals);
         if (retracement) {
           const { fillEventFromDevice: _deviceTime, ...withoutDeviceTime } = journaledLot;
-          const planned = eventMs > 0 ? { ...withoutDeviceTime, size, retracement, fillEventMs: eventMs } : { ...journaledLot, size, retracement };
-          if (gate === "place") {
+          let planned = eventMs > 0 ? { ...withoutDeviceTime, size, retracement, fillEventMs: eventMs } : { ...journaledLot, size, retracement };
+          if (gate === "place" && lotFillOrderId(planned) == null) {
+            const named = namedOrderId(await io.readOrderStatus(planned.fillKey));
+            if (named != null) planned = { ...planned, fillOrderId: named };
+          }
+          const since = gate === "place" ? await lotPositionSince(planned, record5, fills) : "unknown";
+          if (since === "ended") {
+            lots[lotIndex] = { ...planned, retiredReason: TRAILING_LOT_POSITION_ENDED };
+          } else if (since === "open") {
             const index = lotIndex;
             const sent = await sendTrailingLot({
               io,
@@ -100800,6 +101215,28 @@ var init_native_protection_device = __esm({
       const position = await io.readPosition();
       const symbol2 = record5.symbol;
       const stateMs = position.stateTimeMs ?? Number.NEGATIVE_INFINITY;
+      const fills = fillsReader(io);
+      const undecidedAdds = (record5.standby ?? []).length > 0;
+      let membersPositionEnded = null;
+      const membersEnded = () => {
+        membersPositionEnded ??= (async () => {
+          let anchor = record5.positionOrderId ?? null;
+          if (anchor == null) {
+            anchor = namedOrderId(await io.readOrderStatus(record5.entryClientOrderId));
+            if (anchor != null) record5 = { ...record5, positionOrderId: anchor };
+          }
+          const fillsPage = await fills();
+          return nativePositionEndedSince({
+            fills: fillsPage.fills,
+            complete: fillsPage.complete,
+            orderId: anchor ?? "",
+            isLong: record5.isLong,
+            symbol: symbol2,
+            flatRead: flatReadOf(position, fillsPage, symbol2)
+          });
+        })();
+        return membersPositionEnded;
+      };
       const observations = observeMembers(record5, page).map((entry) => ({
         ...entry,
         member: entry.row ? { ...entry.member, placedAtMs: entry.row.timestamp || entry.member.placedAtMs } : entry.member
@@ -100971,6 +101408,33 @@ var init_native_protection_device = __esm({
           members.push(member);
           continue;
         }
+        if (member.plannedAfterMs != null) {
+          if (!kindEnabled(member)) continue;
+          const plannedGate = nativePlacementGate({
+            eventMs: member.plannedAfterMs,
+            position: position.size,
+            positionStateMs: stateMs,
+            isLong: record5.isLong
+          });
+          if (plannedGate === "not_required") continue;
+          const plannedTrigger = currentTrigger(member);
+          if (plannedGate === "need_reads" || plannedTrigger == null) {
+            anyResting = true;
+            members.push(member);
+            continue;
+          }
+          const placed = await placeMember({
+            member,
+            trigger: plannedTrigger,
+            replacedOnce: false,
+            eventMs: member.plannedAfterMs,
+            reasonCode: "protective_native_position_opened_by_add",
+            observationIndex
+          });
+          members.push(placed);
+          if (!placed.retiredReason) anyResting = true;
+          continue;
+        }
         if (member.orderId == null) {
           if (io.nowMs() <= io.neverLandsAfterMs(member.sentAtMs) || !unknownClientOrderIds.has(member.clientOrderId)) {
             anyResting = true;
@@ -101014,10 +101478,9 @@ var init_native_protection_device = __esm({
             });
             explained = end2 === "resting" || end2 === "pending" || end2 === "unknown" ? "status_read" : "ended_with_position";
           }
-          if (explained !== "ended_with_position") {
-            anyResting = true;
-            members.push(member);
-          }
+          if (explained === "ended_with_position" && await membersEnded() === "ended") continue;
+          anyResting = true;
+          members.push(member);
           continue;
         }
         const evidence = await io.readOrderStatus(member.orderId);
@@ -101039,7 +101502,7 @@ var init_native_protection_device = __esm({
           });
           if (rearm === "retire" || !kindEnabled(member)) continue;
           const rearmTrigger = currentTrigger(member);
-          if (rearm === "need_reads" || rearmTrigger == null) {
+          if (rearm === "need_reads" || rearmTrigger == null || undecidedAdds) {
             members.push(member);
             continue;
           }
@@ -101124,7 +101587,8 @@ var init_native_protection_device = __esm({
       for (const [index, prior] of priorLots.entries()) {
         let lot = prior;
         const restingRow = lot.orderId == null ? null : page.find((order) => order.oid === lot.orderId) ?? null;
-        if ((lot.retiredReason || lot.userCancelledOrderId != null) && !(restingRow && readListedProtectiveRow({ triggerCondition: restingRow.trigger_condition }) === "resting")) {
+        const otherSideUnnamed = lot.retiredReason === TRAILING_LOT_OTHER_SIDE && lot.mutationId != null && lot.orderId == null;
+        if ((lot.retiredReason || lot.userCancelledOrderId != null) && !otherSideUnnamed && !(restingRow && readListedProtectiveRow({ triggerCondition: restingRow.trigger_condition }) === "resting")) {
           lots.push(lot);
           continue;
         }
@@ -101133,7 +101597,8 @@ var init_native_protection_device = __esm({
             const entryStatus = await io.readOrderStatus(lot.fillKey);
             if (entryStatus.responseValid && entryStatus.orderMatches && entryStatus.statusTimestampMs != null) {
               const { fillEventFromDevice: _deviceTime, ...exchangeTimed } = lot;
-              lot = { ...exchangeTimed, fillEventMs: entryStatus.statusTimestampMs };
+              const named = lotFillOrderId(lot) == null ? namedOrderId(entryStatus) : null;
+              lot = { ...exchangeTimed, fillEventMs: entryStatus.statusTimestampMs, ...named != null ? { fillOrderId: named } : {} };
             } else if (entryStatus.responseStatus === UNKNOWN_ORDER_RESPONSE && io.nowMs() > io.neverLandsAfterMs(lot.sentAtMs)) {
               continue;
             } else {
@@ -101154,9 +101619,28 @@ var init_native_protection_device = __esm({
             lots.push(lot);
             continue;
           }
+          if (lotFillOrderId(lot) == null) {
+            const named = namedOrderId(await io.readOrderStatus(lot.fillKey));
+            if (named != null) lot = { ...lot, fillOrderId: named };
+          }
+          if ((record5.standby ?? []).some((add) => lotOfAdd(lot, add))) {
+            anyResting = true;
+            lots.push(lot);
+            continue;
+          }
+          const since = await lotPositionSince(lot, record5, fills);
+          if (since === "ended") {
+            lots.push({ ...lot, retiredReason: TRAILING_LOT_POSITION_ENDED });
+            continue;
+          }
+          if (since !== "open") {
+            anyResting = true;
+            lots.push(lot);
+            continue;
+          }
           if (!lot.size) {
             const others = [...lots, ...priorLots.slice(index + 1)];
-            const covered = others.reduce((total, other) => other.size && other.retiredReason !== TRAILING_LOT_FIRED ? total + Number(other.size) : total, 0);
+            const covered = others.reduce((total, other) => other.size && !lotFillLeftPosition(other) ? total + Number(other.size) : total, 0);
             const uncovered = Number((Math.abs(position.size) - covered).toFixed(input.sizeDecimals));
             if (!(uncovered > 0)) continue;
             lot = { ...lot, size: String(uncovered) };
@@ -101183,11 +101667,24 @@ var init_native_protection_device = __esm({
           const named = answer != null && (answer.status === "settled" && answer.outcome_code === "success" || answer.status === "reconciled" && answer.outcome_code === "exchange_effect_observed") && Number.isSafeInteger(orderId) && orderId > 0;
           if (named) {
             lot = { ...lot, orderId };
+          } else if (lot.retiredReason && (answer?.status === "settled" && answer.outcome_code === "rejected" || answer?.status === "reconciled" && answer.outcome_code === "exchange_expired_unconfirmed" || answer?.status === "absent" && io.nowMs() > io.neverLandsAfterMs(lot.sentAtMs))) {
+            lots.push({ ...lot, mutationId: null });
+            continue;
           } else if (answer?.status === "settled" && answer.outcome_code === "rejected") {
             lots.push({ ...lot, retiredReason: "protective_place_rejected" });
             continue;
           } else if (answer?.status === "reconciled" && answer.outcome_code === "exchange_expired_unconfirmed" || answer?.status === "absent" && io.nowMs() > io.neverLandsAfterMs(lot.sentAtMs)) {
             if (!positionOpen) continue;
+            const since = await lotPositionSince(lot, record5, fills);
+            if (since === "ended") {
+              lots.push({ ...lot, retiredReason: TRAILING_LOT_POSITION_ENDED });
+              continue;
+            }
+            if (since !== "open") {
+              anyResting = true;
+              lots.push(lot);
+              continue;
+            }
             const sent2 = await sendTrailingLot({ io, symbol: symbol2, lot: { ...lot, mutationId: null }, journal: (next) => journalLot(index, next) });
             lots.push(sent2.lot);
             if (sent2.report) reports.push(sent2.report);
@@ -101203,7 +101700,7 @@ var init_native_protection_device = __esm({
         const row = lot === prior ? restingRow : page.find((order) => order.oid === lotOrderId) ?? null;
         if (row && readListedProtectiveRow({ triggerCondition: row.trigger_condition }) === "resting") {
           lot = { ...lot, placedAtMs: row.timestamp || lot.placedAtMs };
-          const stray = nativeStrayOrderDecision({
+          const stray = lot.retiredReason === TRAILING_LOT_OTHER_SIDE ? "cancel" : nativeStrayOrderDecision({
             placedMs: lot.placedAtMs ?? Number.POSITIVE_INFINITY,
             position: position.size,
             positionStateMs: stateMs,
@@ -101282,6 +101779,15 @@ var init_native_protection_device = __esm({
           lots.push(lot);
           continue;
         }
+        const lostSince = await lotPositionSince(lot, record5, fills);
+        if (lostSince === "ended") {
+          lots.push({ ...lot, retiredReason: TRAILING_LOT_POSITION_ENDED });
+          continue;
+        }
+        if (lostSince !== "open") {
+          lots.push(lot);
+          continue;
+        }
         const sent = await sendTrailingLot({
           io,
           symbol: symbol2,
@@ -101293,7 +101799,7 @@ var init_native_protection_device = __esm({
         if (sent.report) reports.push(sent.report);
         if (!sent.lot.retiredReason) anyResting = true;
       }
-      if (!positionOpen && !anyResting) {
+      if (!positionOpen && !anyResting && !undecidedAdds) {
         return { record: null, reports };
       }
       const { lots: _priorLots, ...withoutLots } = record5;
@@ -105020,6 +105526,19 @@ var init_runtime_execution = __esm({
           if (mutation.operation_kind !== "trailing_stop") throw new Error("The ledger names another action for this trailing lot.");
           return { status: mutation.status, outcome_code: mutation.outcome_code, exchange_order_id: mutation.exchange_order_id };
         },
+        // The device's own fills read (Client Mode: every Hyperliquid read comes
+        // from the device), fresh, as the per-entry lane's episode rule reads it.
+        readFills: async () => {
+          const { rawFills, evidence } = await fetchBrowserUserFills({
+            publicRequestPriority: "trading_reduce",
+            config: request.config ?? {},
+            walletAddress,
+            symbols: [symbol2],
+            forceRefresh: true,
+            signal: request.signal
+          });
+          return nativeFillsPageFromUserFills(rawFills, evidence);
+        },
         isDefinitiveRefusal: (error48) => error48 instanceof HyperliquidExchangeRejectionError || error48 instanceof NativeOrderNotSentError,
         neverLandsAfterMs: (sentAtMs) => clientOrderNeverLandsAfterMs(request.config, { kind: "absent", ageStartMs: sentAtMs }),
         newMutationId: () => createRuntimeId().toLowerCase(),
@@ -105053,17 +105572,29 @@ var init_runtime_execution = __esm({
       if (read.record.walletAddress !== wallet) return [nativeStorageReport(symbol2, "protective_wallet_mismatch")];
       try {
         const io = nativeProtectionIo(request, read.record.isLong);
-        if (read.record.phase === "entry_pending") {
-          const settled = await settleNativeProtectionAfterFill({
+        const standby = read.record.standby ?? [];
+        if (read.record.phase === "entry_pending" || standby.length > 0) {
+          const settled2 = await settleNativeProtectionAfterFill({
             record: read.record,
             settings: nativeSettingsOf(request.executionContext),
             sizeDecimals: request.executionContext.sizeDecimals,
             fillSize: "0",
-            entryOrderId: read.record.entryClientOrderId,
+            entryOrderId: read.record.phase === "entry_pending" ? read.record.entryClientOrderId : standby[0].orderId ?? standby[0].clientOrderId,
             io
           });
-          const reports2 = [...settled.reports];
-          if (!writeNativeProtectionRecord(profileId, symbol2, settled.record)) {
+          const reports2 = [...settled2.reports];
+          let record5 = settled2.record;
+          if (record5 != null && record5.phase !== "entry_pending" && (record5.standby ?? []).length > 0) {
+            const kept = await reconcileNativeProtection({
+              record: record5,
+              settings: nativeSettingsOf(request.executionContext),
+              sizeDecimals: request.executionContext.sizeDecimals,
+              io
+            });
+            reports2.push(...kept.reports);
+            record5 = kept.record;
+          }
+          if (!writeNativeProtectionRecord(profileId, symbol2, record5)) {
             reports2.push(nativeStorageReport(symbol2, "protective_lifecycle_persistence_failed"));
           }
           return reports2;
@@ -108314,6 +108845,7 @@ var init_runtime_execution = __esm({
           price: executionPrice,
           // A flip's close has filled by now: its new position starts from flat.
           currentPositionSize: targetResolution.closeOpposingPosition ? 0 : currentPositionSize,
+          reduceOnly: classified.reduceOnly === true,
           maxOrderNotional: runtime_policy_generated_default2.trading.risk.max_order_notional,
           maxPositionNotional: runtime_policy_generated_default2.trading.risk.max_position_notional
         });
@@ -108439,13 +108971,14 @@ var init_runtime_execution = __esm({
             entryMutationId ??= createRuntimeId().toLowerCase();
             entryClientOrderId = clientOrderIdForMutation(entryMutationId);
             nativePendingLotKey = entryClientOrderId;
-            nativeAddRecord = planNativePendingLot(existingNative.record, {
+            const journaledAt = Date.now();
+            nativeAddRecord = planNativeStandbyAdd(planNativePendingLot(existingNative.record, {
               settings: nativeSettingsOf(input.executionContext),
               sizeDecimals: input.executionContext.sizeDecimals,
               key: entryClientOrderId,
               sizeHint: sizeAsset,
-              nowMs: Date.now()
-            });
+              nowMs: journaledAt
+            }), { clientOrderId: entryClientOrderId, nowMs: journaledAt });
             if (nativeAddRecord !== existingNative.record && !writeNativeProtectionRecord(nativeProfileId, input.executionContext.symbol, nativeAddRecord)) {
               return nativeBlocked(
                 "protective_lifecycle_persistence_failed",
@@ -108632,7 +109165,7 @@ var init_runtime_execution = __esm({
             writeNativeProtectionRecord(
               nativeProfileId,
               input.executionContext.symbol,
-              dropNativePendingLot(stored.record, nativePendingLotKey)
+              dropNativeStandbyAdd(dropNativePendingLot(stored.record, nativePendingLotKey), nativePendingLotKey)
             );
           }
         }
@@ -108759,6 +109292,9 @@ var init_runtime_execution = __esm({
         let record5 = nativeOpen != null ? recordEntryChildren(nativeOpen.record, marketOrderResponse) : nativeAddRecord;
         let keepNativeJournal = false;
         if (confirmedMarketFill?.orderId) {
+          if (nativeOpen == null && nativePendingLotKey != null) {
+            record5 = nameNativeStandbyAdd(record5, nativePendingLotKey, String(confirmedMarketFill.orderId));
+          }
           record5 = planNativeFillLot(record5, {
             settings: nativeSettingsOf(input.executionContext),
             sizeDecimals: input.executionContext.sizeDecimals,
@@ -108781,7 +109317,7 @@ var init_runtime_execution = __esm({
           });
         } else {
           try {
-            const settled = await settleNativeProtectionAfterFill({
+            const settled2 = await settleNativeProtectionAfterFill({
               record: record5,
               settings: nativeSettingsOf(input.executionContext),
               sizeDecimals: input.executionContext.sizeDecimals,
@@ -108789,8 +109325,8 @@ var init_runtime_execution = __esm({
               entryOrderId: confirmedMarketFill.orderId,
               io: nativeProtectionIo(input, record5.isLong)
             });
-            executionReports.push(...settled.reports);
-            if (settled.record != null) record5 = settled.record;
+            executionReports.push(...settled2.reports);
+            if (settled2.record != null) record5 = settled2.record;
           } catch (postEntryProtectionError) {
             if (isClientRuntimeLeaseOwnershipError(postEntryProtectionError)) throw postEntryProtectionError;
             if (nativePassEnded(input, postEntryProtectionError)) {
@@ -109288,7 +109824,7 @@ var init_runtime_execution = __esm({
       let actualPosition = null;
       let desiredPosition = null;
       let exactFullCloseBeforeQuantization = false;
-      let maxOrderNotional = 0;
+      let followerOrderNotionalCap = 0;
       let minOrderNotional = 0;
       let executionReferencePrice = Number(intent.source_price);
       let dispatchedOrder = null;
@@ -109299,13 +109835,21 @@ var init_runtime_execution = __esm({
         desiredPosition = Number(
           record5.target_space === "copied" ? copiedNowServed ? record5.copied_target_after : Number.NaN : record5.desired_destination_position_after
         );
-        maxOrderNotional = Number(
-          reconciliation.max_order_notional_usdc
-        );
+        followerOrderNotionalCap = reconciliation.max_order_notional_usdc;
         minOrderNotional = Number(
           reconciliation.min_notional_usdc
         );
       }
+      const platformOrderNotionalCap = input.config?.copy_trading?.execution?.max_per_intent_order_notional_usdc;
+      let maxOrderNotional = 0;
+      let orderNotionalCapResolved = false;
+      if (copyOrderNotionalCap(followerOrderNotionalCap, platformOrderNotionalCap, 0) === null) {
+        return {
+          status: "failed",
+          orderId: null,
+          message: "Copy Trading platform order notional cap is unavailable."
+        };
+      }
       if (!destinationSide || !Number.isFinite(destinationSize) || destinationSize <= 0) {
         return {
           status: "skipped",
@@ -109381,6 +109925,17 @@ var init_runtime_execution = __esm({
           destinationSize = Math.abs(liveDelta);
           exactFullCloseBeforeQuantization = Math.abs(desiredPosition) <= tolerance && Math.abs(actualPosition) > tolerance;
           reduceOnly = Math.abs(desiredPosition) <= tolerance || (actualPosition > 0 && liveDelta < 0 && desiredPosition >= 0 || actualPosition < 0 && liveDelta > 0 && desiredPosition <= 0);
+          maxOrderNotional = copyOrderNotionalCap(
+            followerOrderNotionalCap,
+            platformOrderNotionalCap,
+            copyOrderClosingSize({
+              side: destinationSide,
+              size: destinationSize,
+              reduceOnly,
+              actualPosition
+            }) * executionReferencePrice
+          ) ?? 0;
+          orderNotionalCapResolved = true;
           if (Number.isFinite(maxOrderNotional) && maxOrderNotional > 0) {
             destinationSize = Math.min(
               destinationSize,
@@ -109400,6 +109955,18 @@ var init_runtime_execution = __esm({
           };
         }
         const referencePrice = executionReferencePrice;
+        if (!orderNotionalCapResolved) {
+          maxOrderNotional = copyOrderNotionalCap(
+            followerOrderNotionalCap,
+            platformOrderNotionalCap,
+            copyOrderClosingSize({
+              side: destinationSide,
+              size: destinationSize,
+              reduceOnly,
+              actualPosition: null
+            }) * referencePrice
+          ) ?? 0;
+        }
         if (Number.isFinite(maxOrderNotional) && maxOrderNotional > 0 && Number.isFinite(referencePrice) && referencePrice > 0 && sizePrecision.quantizedSize * referencePrice > maxOrderNotional + COPY_TRADING_NOTIONAL_CAP_TOLERANCE_USD) {
           const cappedSize = Math.min(destinationSize, maxOrderNotional / referencePrice);
           sizePrecision = {
@@ -110026,7 +110593,7 @@ var init_periodic_schedule = __esm({
 });
 
 // lib/runtime/provider-observability.ts
-var MAX_DIAGNOSTIC_LIST_ITEMS, record4, ERROR_TOKEN, ERROR_DOMAIN, ERROR_INPUT, ERROR_REDACTIONS, normalizeProviderError, identifier, count3, normalizeProviderDiagnostics, providerRequestId, hash4, googleCredentialDiagnostics, extractProviderDiagnostics, estimateRequestInputTokens;
+var MAX_DIAGNOSTIC_LIST_ITEMS, record4, ERROR_TOKEN, ERROR_DOMAIN, ERROR_INPUT, ERROR_ECHO_REDACTIONS, ERROR_PROSE_REDACTIONS, CONTROL_CHARACTER_RUN, WHITESPACE_RUN, collapseProse, settled, REDACTED_MARKER_START, boundedMessage, normalizeProviderError, identifier, count3, normalizeProviderDiagnostics, providerRequestId, hash4, googleCredentialDiagnostics, extractProviderDiagnostics, estimateRequestInputTokens;
 var init_provider_observability = __esm({
   "lib/runtime/provider-observability.ts"() {
     "use strict";
@@ -110034,34 +110601,68 @@ var init_provider_observability = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_constants();
+    init_runtime_redaction();
     MAX_DIAGNOSTIC_LIST_ITEMS = PROVIDER_DIAGNOSTIC_LIMITS.MAX_LIST_ITEMS;
     record4 = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : {};
     ERROR_TOKEN = /^[A-Z][A-Z0-9_]{0,63}$/;
     ERROR_DOMAIN = /^[a-z0-9][a-z0-9.-]{0,127}$/;
-    ERROR_INPUT = /\b(?:prompt|contents|messages|system[_ ]?instruction|tools|request\s+body|input(?:\s+text)?)\s*[:=]|[{}]|```/i;
-    ERROR_REDACTIONS = [
-      [/https?:\/\/[^\s<>"']+/gi, "[REDACTED_URL]"],
+    ERROR_INPUT = new RegExp(
+      String.raw`\b(?:prompt|contents|messages|system[_ ]?instruction|tools|request${WHITESPACE_CLASS}+body|input(?:${WHITESPACE_CLASS}+text)?)${WHITESPACE_CLASS}*[:=]|[{}]|` + "```",
+      "i"
+    );
+    ERROR_ECHO_REDACTIONS = [
+      [/https?:\/\/[^<>"'\t\n\v\f\r \x1c-\x1f\x85\xa0\u1680\u2000-\u200a\u2028\u2029\u202f\u205f\u3000]+/gi, "[REDACTED_URL]"],
       [/\b[A-Za-z0-9.!#$%&'*+/=?^_`{|}~-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g, "[REDACTED_EMAIL]"],
-      [/\bBearer\s+[^\s,;]+/gi, "Bearer [REDACTED]"],
-      [/\b(?:api[_ -]?key|x-goog-api-key|authorization|access[_ -]?token|token|secret|password|private[_ -]?key|key)\s*[:=]\s*(?:"[^"]*"|'[^']*'|[^\s,;]+)/gi, "[REDACTED]"],
-      [/\b(?:AIza[A-Za-z0-9_-]+|sk-[A-Za-z0-9_-]+|AQ\.[A-Za-z0-9._-]+|0x[a-fA-F0-9]{64})\b/g, "[REDACTED]"],
+      // A URL whose scheme a key form already took ("AIzahttps://..." is read as
+      // a key first): the rest is still an echoed URL.
+      [/\[REDACTED\]:\/\/[^<>"'\t\n\v\f\r \x1c-\x1f\x85\xa0\u1680\u2000-\u200a\u2028\u2029\u202f\u205f\u3000]+/g, "[REDACTED_URL]"]
+    ];
+    ERROR_PROSE_REDACTIONS = [
+      ...ERROR_ECHO_REDACTIONS,
       [/"[^"]*"|'[^'\r\n]*'/g, "[REDACTED]"]
     ];
+    CONTROL_CHARACTER_RUN = /[\x00-\x1f\x7f]+/g;
+    WHITESPACE_RUN = new RegExp(`${WHITESPACE_CLASS}+`, "g");
+    collapseProse = (value) => value.replace(CONTROL_CHARACTER_RUN, " ").replace(WHITESPACE_RUN, " ").trim();
+    settled = (value) => {
+      let current = value;
+      let previous = null;
+      while (current !== previous) {
+        previous = current;
+        for (const [pattern, replacement] of ERROR_PROSE_REDACTIONS) current = current.replace(pattern, replacement);
+        current = sanitizeRuntimeDiagnosticValue(collapseProse(current));
+      }
+      return current;
+    };
+    REDACTED_MARKER_START = "[REDACTED";
+    boundedMessage = (value) => {
+      const characters = Array.from(value);
+      if (characters.length <= PROVIDER_DIAGNOSTIC_LIMITS.MAX_ERROR_MESSAGE_CHARS) return value;
+      let cut = characters.slice(0, PROVIDER_DIAGNOSTIC_LIMITS.MAX_ERROR_MESSAGE_CHARS).join("");
+      const marker = cut.lastIndexOf(REDACTED_MARKER_START);
+      if (marker !== -1 && value.indexOf("]", marker) >= cut.length) cut = cut.slice(0, marker);
+      return cut.replace(/ +$/, "");
+    };
     normalizeProviderError = (value) => {
       const raw = record4(value);
       const result = {};
       if (typeof raw.code === "number" && Number.isInteger(raw.code) && raw.code >= HTTP_STATUS_MIN && raw.code <= HTTP_STATUS_MAX) result.code = raw.code;
       if (typeof raw.status === "string" && ERROR_TOKEN.test(raw.status)) result.status = raw.status;
-      if (typeof raw.message === "string" && raw.message.trim()) {
+      if (typeof raw.message === "string" && collapseProse(raw.message)) {
         let message = raw.message;
-        if (Array.from(message).length > PROVIDER_DIAGNOSTIC_LIMITS.MAX_ERROR_INPUT_CHARS || ERROR_INPUT.test(message)) message = "[REDACTED_INPUT]";
+        if (Array.from(message).length > PROVIDER_DIAGNOSTIC_LIMITS.MAX_ERROR_INPUT_CHARS || ERROR_INPUT.test(message) || ERROR_INPUT.test(collapseProse(message))) message = "[REDACTED_INPUT]";
         else {
-          for (const [pattern, replacement] of ERROR_REDACTIONS) message = message.replace(pattern, replacement);
-          message = message.replace(/[\x00-\x1f\x7f]+/g, " ").replace(/\s+/g, " ").trim();
-        }
-        const characters = Array.from(message);
-        result.message = characters.slice(0, PROVIDER_DIAGNOSTIC_LIMITS.MAX_ERROR_MESSAGE_CHARS).join("");
-        if (characters.length > PROVIDER_DIAGNOSTIC_LIMITS.MAX_ERROR_MESSAGE_CHARS || raw.message_truncated === true) result.message_truncated = true;
+          message = sanitizeRuntimeDiagnosticValue(message);
+          for (const [pattern, replacement] of ERROR_ECHO_REDACTIONS) message = message.replace(pattern, replacement);
+          message = sanitizeRuntimeDiagnosticValue(message);
+          for (const [pattern, replacement] of ERROR_PROSE_REDACTIONS) message = message.replace(pattern, replacement);
+          message = settled(sanitizeRuntimeDiagnosticValue(collapseProse(sanitizeRuntimeDiagnosticValue(message))));
+        }
+        const fullLength = Array.from(message).length;
+        let bounded = boundedMessage(message);
+        while (settled(bounded) !== bounded) bounded = Array.from(bounded).slice(0, -1).join("").replace(/ +$/, "");
+        result.message = bounded;
+        if (fullLength > PROVIDER_DIAGNOSTIC_LIMITS.MAX_ERROR_MESSAGE_CHARS || raw.message_truncated === true) result.message_truncated = true;
       }
       if (Array.isArray(raw.details)) {
         const details = raw.details.slice(0, PROVIDER_DIAGNOSTIC_LIMITS.MAX_ERROR_DETAILS).map((value2) => {
@@ -113599,7 +114200,7 @@ var init_profile_model_cascade = __esm({
 });
 
 // lib/runtime/prompt-variable-validation-contract.ts
-var ESCAPED_OPEN_BRACE, ESCAPED_CLOSE_BRACE, PROMPT_PLACEHOLDER_PATTERN, ESCAPED_BRACE_PAIR_PATTERN, readPromptTemplate, restoreEscapedBraces, countAtMost, countBelow, locatePlaceholders, isPromptVariableName, renderPromptTemplate, promptTemplatePlaceholderSpans, promptTemplatePlaceholders, promptTemplateVariables, NEWS_PROMPT_VARIABLES, REFERENCE_CANDLES_PROMPT_VARIABLE, ALLOWED_PROMPT_VARIABLES, OPTIONAL_BLANK_PROMPT_VARIABLES, coercePromptVariableValue, isMissingPromptVariableValue, validatePromptVariables;
+var ESCAPED_OPEN_BRACE, ESCAPED_CLOSE_BRACE, PROMPT_PLACEHOLDER_PATTERN, ESCAPED_BRACE_PAIR_PATTERN, readPromptTemplate, restoreEscapedBraces, countAtMost, countBelow, locatePlaceholders, isPromptVariableName, renderPromptTemplate, formatInstructionTemplate, promptTemplatePlaceholderSpans, promptTemplatePlaceholders, promptTemplateVariables, NEWS_PROMPT_VARIABLES, REFERENCE_CANDLES_PROMPT_VARIABLE, ALLOWED_PROMPT_VARIABLES, OPTIONAL_BLANK_PROMPT_VARIABLES, coercePromptVariableValue, isMissingPromptVariableValue, validatePromptVariables;
 var init_prompt_variable_validation_contract = __esm({
   "lib/runtime/prompt-variable-validation-contract.ts"() {
     "use strict";
@@ -113685,6 +114286,40 @@ var init_prompt_variable_validation_contract = __esm({
       rendered.push(prepared.slice(cursor));
       return restoreEscapedBraces(rendered.join(""));
     };
+    formatInstructionTemplate = (template, values, label2 = "instruction template") => {
+      const text = String(template || "");
+      const rendered = [];
+      let index = 0;
+      while (index < text.length) {
+        const char = text[index];
+        const escapedPair = `${char}${char}`;
+        if ((char === "{" || char === "}") && text.startsWith(escapedPair, index)) {
+          rendered.push(char);
+          index += escapedPair.length;
+          continue;
+        }
+        if (char === "}") {
+          throw new Error(`Invalid ${label2}: ${template}`);
+        }
+        if (char !== "{") {
+          rendered.push(char);
+          index += 1;
+          continue;
+        }
+        const end = text.indexOf("}", index + 1);
+        const field = end < 0 ? "" : text.slice(index + 1, end);
+        const name = field.endsWith(":") ? field.slice(0, -1) : field;
+        if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(name)) {
+          throw new Error(`Invalid ${label2}: ${template}`);
+        }
+        if (!Object.prototype.hasOwnProperty.call(values, name)) {
+          throw new Error(`Unexpected ${label2} placeholder: ${name}`);
+        }
+        rendered.push(String(values[name]));
+        index = end + 1;
+      }
+      return rendered.join("");
+    };
     promptTemplatePlaceholderSpans = (template) => {
       if (typeof template !== "string" || !template) {
         return [];
@@ -116242,7 +116877,7 @@ var init_provider_client = __esm({
         return payload.message.trim();
       }
       if (rawText) {
-        return rawText.replace(/\s+/g, " ").slice(0, PROVIDER_ERROR_RAW_TEXT_MAX_CHARS);
+        return sanitizeRuntimeDiagnosticValue(rawText).replace(/\s+/g, " ").slice(0, PROVIDER_ERROR_RAW_TEXT_MAX_CHARS);
       }
       return "";
     };
@@ -118420,7 +119055,7 @@ var init_provider_client = __esm({
 });
 
 // lib/runtime/prompt-contract.ts
-var PROMPT_PLACEHOLDER_MAP, DATA_FORMAT_TAG_ALIASES, buildDecisionInstructionVariables, renderCandleIndicatorDefinitions, NEWS_COLUMN_DESCRIPTIONS, isNewsPromptTag, newsTagBlock, newsRowColumns, renderNewsLegendLine, behaviorStateHasObjectField, candleBlockPayload, candlesHaveLiveField, templateReferencesTag, templateTagOrder, renderDataFormatLegend, replaceEmbeddedDataFormatLegend, SIZE_AMOUNT_USDC_LABEL_PATTERN, labelSizeAmountInUsd, canonicalizePromptPlaceholders, normalizePromptWhitespace, formatInstructionTemplate, constructPromptSystemTemplate;
+var PROMPT_PLACEHOLDER_MAP, DATA_FORMAT_TAG_ALIASES, buildDecisionInstructionVariables, renderCandleIndicatorDefinitions, NEWS_COLUMN_DESCRIPTIONS, isNewsPromptTag, newsTagBlock, newsRowColumns, renderNewsLegendLine, behaviorStateHasObjectField, candleBlockPayload, candlesHaveLiveField, templateReferencesTag, templateTagOrder, renderDataFormatLegend, replaceEmbeddedDataFormatLegend, SIZE_AMOUNT_USDC_LABEL_PATTERN, labelSizeAmountInUsd, canonicalizePromptPlaceholders, normalizePromptWhitespace, constructPromptSystemTemplate;
 var init_prompt_contract = __esm({
   "lib/runtime/prompt-contract.ts"() {
     "use strict";
@@ -118837,28 +119472,6 @@ var init_prompt_contract = __esm({
       }
       return text.replace(/\r\n/g, "\n").replace(/[\t ]{2,}\n/g, "\n").replace(/\n{3,}/g, "\n\n").trim();
     };
-    formatInstructionTemplate = (template, vars) => {
-      const escapedOpen = "__VTX_INSTR_OPEN_BRACE__";
-      const escapedClose = "__VTX_INSTR_CLOSE_BRACE__";
-      const prepared = String(template ?? "").replaceAll("{{", escapedOpen).replaceAll("}}", escapedClose);
-      const replacements = [];
-      const formatted = prepared.replace(/\{([a-zA-Z0-9_]+)\}/g, (_match, key) => {
-        if (!Object.prototype.hasOwnProperty.call(vars, key)) {
-          throw new Error(`Unexpected instruction template placeholder: ${key}`);
-        }
-        const marker = `__VTX_INSTR_VALUE_${replacements.length}__`;
-        replacements.push(String(vars[key]));
-        return marker;
-      });
-      if (/[{}]/.test(formatted)) {
-        throw new Error(`Invalid instruction template: ${template}`);
-      }
-      let rendered = formatted.replaceAll(escapedOpen, "{").replaceAll(escapedClose, "}");
-      replacements.forEach((value, index) => {
-        rendered = rendered.replaceAll(`__VTX_INSTR_VALUE_${index}__`, value);
-      });
-      return rendered;
-    };
     constructPromptSystemTemplate = (systemTemplate, options) => {
       const instructions = options.instructions ?? {};
       const symbols = (options.symbols ?? []).map((symbol2) => String(symbol2).trim()).filter(Boolean);
@@ -119730,7 +120343,7 @@ __export(local_analysis_exports, {
   runLocalRuntimeCycle: () => runLocalRuntimeCycle,
   summarizeReviewFailureExplanation: () => summarizeReviewFailureExplanation
 });
-var CYCLE_TIMEOUT_FLOOR_MS, DECISION_SETTLEMENT_RESERVE_MAX_BUDGET_DIVISOR, MIN_AGENT_INSTRUCTION_RETRY_AFTER_MS, PROMPT_PARITY_ERROR_DETAIL_MAX_CHARS, EXTERNAL_INFERENCE_RUNTIME_POLL_INTERVAL_MS, REVIEW_PROVIDER_SERVER_ERROR_STATUSES, TRUNCATION_ELLIPSIS2, normalizeNativeValues, assertPromptModelController, resolveRuntimeReasoningControlsForModel, modelScopedKey, resolveNativeValuesForModel, observeRuntimeCycle, observeAccountState, aiOrderSlippageFraction, serverBehaviorStateArtifacts, ClientRuntimeAgentInstructionEmpty, isClientRuntimeAgentInstructionEmpty, ClientRuntimeAiSchedulePaused, ClientRuntimeAiScheduleStillActive, isClientRuntimeAiScheduleStillActive, ServerDispatchAccountStateStale, isServerDispatchAccountStateStale, isClientRuntimeAiSchedulePaused, acceptancePositionCaps, accountSnapshotCapturedAt, buildClaimedAgentRuntimeCycleResult, resolveRuntimeMarginModePreference, resolveRuntimeLeveragePreference, resolveBooleanSetting2, CLIENT_RUNTIME_LIVE_CONTEXT_UNAVAILABLE_ERRORS, BEHAVIOR_STATE_UNAVAILABLE_ERROR, CriticalBehaviorStateError, BEHAVIOR_MEMORY_UNAVAILABLE_ERROR, BehaviorMemoryUnavailableError, clampNumber, resolveExternalInferenceRuntimeTimeoutSeconds, toPositiveFinite3, compactSnippet, hashRuntimeDebugText, EFFECTIVE_INPUT_MANIFEST_SCHEMA_VERSION, PROMPT_ASSEMBLY_DEFINITION_VERSION, RUNTIME_SOURCE_DEFINITION_VERSION, DECISION_INPUT_DEFINITION_VERSION, CONTEXT_ENVELOPE_DEFINITION_VERSION, CLIENT_RUNTIME_SOURCE_VERSION, CLIENT_MAIN_PROMPT_RENDERER, SERVER_MAIN_PROMPT_RENDERER, CLIENT_REVIEW_PROMPT_RENDERER, SERVER_REVIEW_PROMPT_RENDERER, resolveEffectivePromptRuntimeProvenance, canonicalManifestValue, canonicalManifestJson, sha256ManifestHex, effectiveInputComponent, buildEffectiveInputManifest, MANIFEST_COMPONENT_NAME, derivePromptVisibleSections, decodeDecisionTracePayload, extractDecisionSymbolTrace, formatDecisionSymbolTrace, formatActionableDecisionSymbols, decisionRecordsBySymbol, normalizePromptSymbols, JSON_MODEL_OUTPUT_FENCE_PATTERN, STRICT_MODEL_OUTPUT_KEYS, currentModelOutputValidationErrors, currentModelOutputMatchesContract, projectCurrentModelDecisionContent, modelOutputValidationError, SERVER_UNREADABLE_REPLY_HOLD_REASONING, buildMissingDecisionHold, buildDecisionPlansFromResponse, buildReviewCandidatePlansFromResponse, forceUnavailableSymbolsToHold, extractTemplatePlaceholders, requireReviewPrimaryUserPromptTemplate, containsCompetingBehaviorStateMarkup, containsCompetingMainBehaviorStateMarkup, requireStrategyReviewTemplates, preflightStrategyReviewPromptContract, extractRuntimeReasoningSelection, isAbortError, isRuntimeTimeoutAbortReason, REVIEW_FAILURE_SENSITIVE_DB_TOKENS, REVIEW_FAILURE_SCHEMA_DISCLOSURE_TOKENS, REVIEW_FAILURE_SQL_STATEMENT_PATTERN, REVIEW_FAILURE_TRACEBACK_PATTERN, isSensitiveReviewFailureDetail, summarizeReviewFailureExplanation, buildReviewFailureHoldReason, createAbortError2, settleRuntimeCyclePromise, unwrapRuntimeCycleSettledResult, normalizeDecisionLabel, normalizeRuntimeSymbol, PromptContractFetchError, isLivePromptContextUnavailableError, buildFailClosedHoldResult, buildPromptConstructionFailureResult, buildLivePromptContextUnavailableFailureResult, pickFirstString, normalizeRuntimeStringList, requirePositiveRuntimeLimit, resolveRuntimeTradingScope, normalizeRuntimeProviderAlias, resolveCatalogModelEntry, createClientRuntimeProviderSetupError, createProviderSetupRejectionError, evaluateModelEligibility, extractReviewRuntimeReasoningSelection, isUsableRuntimeSettingsFallback, resolveRuntimeSettings, formatRuntimeDurationMs, normalizeRuntimeTimingNote, appendRuntimeTimingEvent, reportPromptParityTelemetry, resolveLocalRuntimeSecretRequirements, resolveLocalRuntimeSecretProvider, toEpochSeconds, AI_INDICATOR_KEYS_NEWER_THAN_SOME_SERVERS, sortTradingTimeframes, normalizePromptIdentityTimestamp, resolveCompletedCandleBoundary, normalizeAiIndicatorFlags, getPromptLookback, computeSma, computeEma, computeRsi, computeAtr, computeMacd, computeBollingerBands, getIndicatorValue, buildPromptCandlesComponent, buildPromptCandleTimeframeComponent, resolvePromptRelativeVolumeContext, promptRelativeVolumeBaseline, CANDLE_CLOSE_TICKER_TIMEFRAME, candleCloseTicker, buildPromptCandlesPayload, formatUtcTimestampWithWeekday, formatUtcNowWithWeekday, formatPromptPrice, capacityUnitSize, computePromptUnitsUsedForPosition, buildPromptAccountStatusValue, buildPromptPositionsValue, sanitizePromptSymbol, fillTimeMs, fillSize, normalizeFillSide, normalizeFillOrderId, normalizeFillRiskOrderIdentity, fillStartPosition, fillSortValue, sortFillsAscending, sortFillsDescending, inferEntryFromStartPositionChain, inferEntryFromCurrentPositionSize, calculateCurrentPositionState, calculatePositionEntryTimes, countPositionAdds, latestPositionRiskIncreaseTimeMs, latestPositionRiskIncreaseEvidence, compactPromptRiskIncrease, roundPositiveDecimalHalfUp, compactPromptLastTrade, ENTRY_TRADE_FIELDS, PREVIOUS_DECISION_FIELDS, PREVIOUS_CAMPAIGN_FIELDS, hasExactKeys2, isNonnegativeInteger, isFiniteNumber, isExactEnumString, isNonemptyPromptText, isCampaignReasoningText, projectBackendDecisionMemoryItem, requireRenderedStrategyBehaviorState, canonicalFillSideForRiskEvidence, isValidRiskEvidenceFill, isValidCampaignBoundaryFill, normalizeFillHistoryCoverage, resolveFillHistoryCoverageForSymbol, buildPromptBehaviorStateArtifacts, buildPromptBehaviorStateValue, shouldCompareServerPromptParity, buildLocalRuntimePromptArtifacts, createRuntimeId2, asRecord, buildRuntimeConstraintRejectionMessage, hasDeviceProviderSecret, requireNonEmptyStringField, requirePositiveIntegerField, compareContractVersion, parsePromptContractTimestamp, assertPromptContractCompatibility, assertPromptContractTemporalBounds, sleepWithAbort, requireAgentPollRetryAfterMs, materializeClaimedClientRuntimeAgentInstruction, attachClientRuntimeErrorProvenance, isExternalRuntimeProviderResult, invokeClientExternalInference, assertPromptContractBindingTupleEqual, assertPromptContractScopeMatch, fetchBoundPromptContracts, formatTemplateWithNamedVariables, carryReturnedModelCalls, runLocalRuntimeCycle;
+var CYCLE_TIMEOUT_FLOOR_MS, DECISION_SETTLEMENT_RESERVE_MAX_BUDGET_DIVISOR, MIN_AGENT_INSTRUCTION_RETRY_AFTER_MS, PROMPT_PARITY_ERROR_DETAIL_MAX_CHARS, EXTERNAL_INFERENCE_RUNTIME_POLL_INTERVAL_MS, REVIEW_PROVIDER_SERVER_ERROR_STATUSES, TRUNCATION_ELLIPSIS2, normalizeNativeValues, assertPromptModelController, resolveRuntimeReasoningControlsForModel, modelScopedKey, resolveNativeValuesForModel, observeRuntimeCycle, observeAccountState, aiOrderSlippageFraction, serverBehaviorStateArtifacts, ClientRuntimeAgentInstructionEmpty, isClientRuntimeAgentInstructionEmpty, ClientRuntimeAiSchedulePaused, ClientRuntimeAiScheduleStillActive, isClientRuntimeAiScheduleStillActive, ServerDispatchAccountStateStale, isServerDispatchAccountStateStale, isClientRuntimeAiSchedulePaused, acceptancePositionCaps, accountSnapshotCapturedAt, buildClaimedAgentRuntimeCycleResult, resolveRuntimeMarginModePreference, resolveRuntimeLeveragePreference, resolveBooleanSetting2, CLIENT_RUNTIME_LIVE_CONTEXT_UNAVAILABLE_ERRORS, BEHAVIOR_STATE_UNAVAILABLE_ERROR, CriticalBehaviorStateError, BEHAVIOR_MEMORY_UNAVAILABLE_ERROR, BehaviorMemoryUnavailableError, clampNumber, resolveExternalInferenceRuntimeTimeoutSeconds, toPositiveFinite3, compactSnippet, hashRuntimeDebugText, EFFECTIVE_INPUT_MANIFEST_SCHEMA_VERSION, PROMPT_ASSEMBLY_DEFINITION_VERSION, RUNTIME_SOURCE_DEFINITION_VERSION, DECISION_INPUT_DEFINITION_VERSION, CONTEXT_ENVELOPE_DEFINITION_VERSION, CLIENT_RUNTIME_SOURCE_VERSION, CLIENT_MAIN_PROMPT_RENDERER, SERVER_MAIN_PROMPT_RENDERER, CLIENT_REVIEW_PROMPT_RENDERER, SERVER_REVIEW_PROMPT_RENDERER, resolveEffectivePromptRuntimeProvenance, canonicalManifestValue, canonicalManifestJson, sha256ManifestHex, effectiveInputComponent, buildEffectiveInputManifest, MANIFEST_COMPONENT_NAME, derivePromptVisibleSections, decodeDecisionTracePayload, extractDecisionSymbolTrace, formatDecisionSymbolTrace, formatActionableDecisionSymbols, decisionRecordsBySymbol, normalizePromptSymbols, JSON_MODEL_OUTPUT_FENCE_PATTERN, STRICT_MODEL_OUTPUT_KEYS, currentModelOutputValidationErrors, currentModelOutputMatchesContract, projectCurrentModelDecisionContent, modelOutputValidationError, SERVER_UNREADABLE_REPLY_HOLD_REASONING, buildMissingDecisionHold, buildDecisionPlansFromResponse, buildReviewCandidatePlansFromResponse, forceUnavailableSymbolsToHold, extractTemplatePlaceholders, requireReviewPrimaryUserPromptTemplate, containsCompetingBehaviorStateMarkup, containsCompetingMainBehaviorStateMarkup, requireStrategyReviewTemplates, preflightStrategyReviewPromptContract, extractRuntimeReasoningSelection, isAbortError, isRuntimeTimeoutAbortReason, REVIEW_FAILURE_SENSITIVE_DB_TOKENS, REVIEW_FAILURE_SCHEMA_DISCLOSURE_TOKENS, REVIEW_FAILURE_SQL_STATEMENT_PATTERN, REVIEW_FAILURE_TRACEBACK_PATTERN, isSensitiveReviewFailureDetail, summarizeReviewFailureExplanation, buildReviewFailureHoldReason, createAbortError2, settleRuntimeCyclePromise, unwrapRuntimeCycleSettledResult, normalizeDecisionLabel, normalizeRuntimeSymbol, PromptContractFetchError, isLivePromptContextUnavailableError, buildFailClosedHoldResult, buildPromptConstructionFailureResult, buildLivePromptContextUnavailableFailureResult, pickFirstString, normalizeRuntimeStringList, requirePositiveRuntimeLimit, resolveRuntimeTradingScope, normalizeRuntimeProviderAlias, resolveCatalogModelEntry, createClientRuntimeProviderSetupError, createProviderSetupRejectionError, evaluateModelEligibility, extractReviewRuntimeReasoningSelection, isUsableRuntimeSettingsFallback, resolveRuntimeSettings, formatRuntimeDurationMs, normalizeRuntimeTimingNote, appendRuntimeTimingEvent, reportPromptParityTelemetry, resolveLocalRuntimeSecretRequirements, resolveLocalRuntimeSecretProvider, toEpochSeconds, AI_INDICATOR_KEYS_NEWER_THAN_SOME_SERVERS, sortTradingTimeframes, normalizePromptIdentityTimestamp, resolveCompletedCandleBoundary, normalizeAiIndicatorFlags, getPromptLookback, computeSma, computeEma, computeRsi, computeAtr, computeMacd, computeBollingerBands, getIndicatorValue, buildPromptCandlesComponent, buildPromptCandleTimeframeComponent, resolvePromptRelativeVolumeContext, promptRelativeVolumeBaseline, CANDLE_CLOSE_TICKER_TIMEFRAME, candleCloseTicker, buildPromptCandlesPayload, formatUtcTimestampWithWeekday, formatUtcNowWithWeekday, formatPromptPrice, capacityUnitSize, computePromptUnitsUsedForPosition, buildPromptAccountStatusValue, buildPromptPositionsValue, sanitizePromptSymbol, fillTimeMs, fillSize, normalizeFillSide, normalizeFillOrderId, normalizeFillRiskOrderIdentity, fillStartPosition, fillSortValue, sortFillsAscending, sortFillsDescending, inferEntryFromStartPositionChain, inferEntryFromCurrentPositionSize, calculateCurrentPositionState, calculatePositionEntryTimes, countPositionAdds, latestPositionRiskIncreaseTimeMs, latestPositionRiskIncreaseEvidence, compactPromptRiskIncrease, roundPositiveDecimalHalfUp, compactPromptLastTrade, ENTRY_TRADE_FIELDS, PREVIOUS_DECISION_FIELDS, PREVIOUS_CAMPAIGN_FIELDS, hasExactKeys2, isNonnegativeInteger, isFiniteNumber, isExactEnumString, isNonemptyPromptText, isCampaignReasoningText, projectBackendDecisionMemoryItem, requireRenderedStrategyBehaviorState, canonicalFillSideForRiskEvidence, isValidRiskEvidenceFill, isValidCampaignBoundaryFill, normalizeFillHistoryCoverage, resolveFillHistoryCoverageForSymbol, buildPromptBehaviorStateArtifacts, buildPromptBehaviorStateValue, shouldCompareServerPromptParity, buildLocalRuntimePromptArtifacts, createRuntimeId2, asRecord, buildRuntimeConstraintRejectionMessage, hasDeviceProviderSecret, requireNonEmptyStringField, requirePositiveIntegerField, compareContractVersion, parsePromptContractTimestamp, assertPromptContractCompatibility, assertPromptContractTemporalBounds, sleepWithAbort, requireAgentPollRetryAfterMs, materializeClaimedClientRuntimeAgentInstruction, attachClientRuntimeErrorProvenance, isExternalRuntimeProviderResult, invokeClientExternalInference, assertPromptContractBindingTupleEqual, assertPromptContractScopeMatch, fetchBoundPromptContracts, carryReturnedModelCalls, runLocalRuntimeCycle;
 var init_local_analysis = __esm({
   "lib/runtime/local-analysis.ts"() {
     "use strict";
@@ -120316,7 +120929,7 @@ var init_local_analysis = __esm({
       return numeric2;
     };
     compactSnippet = (value, max2 = RUNTIME_DEBUG_SNIPPET_CHARS) => {
-      const text = String(value ?? "").replace(/\s+/g, " ").trim();
+      const text = sanitizeRuntimeDiagnosticValue(String(value ?? "").replace(/\s+/g, " ")).trim();
       if (!text) {
         return "";
       }
@@ -120910,29 +121523,27 @@ var init_local_analysis = __esm({
       return assembledUserTemplate;
     };
     preflightStrategyReviewPromptContract = (metadata, symbols, maxTrades) => {
+      const reviewSystemTemplate = String(metadata.review_system_template ?? "");
+      const reviewUserTemplate = String(metadata.review_user_template ?? "");
+      if (!reviewSystemTemplate.trim() || !reviewUserTemplate.trim() || extractTemplatePlaceholders(reviewSystemTemplate).length > 0) {
+        throw new CriticalBehaviorStateError();
+      }
+      requireStrategyReviewTemplates(reviewSystemTemplate, reviewUserTemplate);
       try {
-        requireStrategyReviewTemplates(
-          requireNonEmptyStringField(metadata.review_system_template, "review_system_template"),
-          requireNonEmptyStringField(metadata.review_user_template, "review_user_template")
-        );
         const reviewInstructions = asRecord(metadata.review_instructions);
         const reviewSecurity = requireNonEmptyStringField(
           reviewInstructions.review_security,
           "review_instructions.review_security"
         );
-        const reviewOutputContract = formatTemplateWithNamedVariables(
+        const reviewOutputContract = formatInstructionTemplate(
           requireNonEmptyStringField(
             reviewInstructions.review_json_format,
             "review_instructions.review_json_format"
           ),
           buildDecisionInstructionVariables(symbols, maxTrades)
         );
-        const reviewSystemTemplate = requireNonEmptyStringField(
-          metadata.review_system_template,
-          "review_system_template"
-        );
-        if (extractTemplatePlaceholders(reviewSystemTemplate).length > 0 || extractTemplatePlaceholders(reviewSecurity).length > 0) {
-          throw new CriticalBehaviorStateError();
+        if (extractTemplatePlaceholders(reviewSecurity).length > 0) {
+          throw new BehaviorMemoryUnavailableError();
         }
         const securedReviewSystem = reviewSystemTemplate.includes(reviewSecurity) ? reviewSystemTemplate : `${reviewSystemTemplate.trim()}
 
@@ -120941,13 +121552,13 @@ ${reviewSecurity}`;
 
 ${reviewOutputContract}`;
         if (containsCompetingBehaviorStateMarkup(renderedReviewSystem)) {
-          throw new CriticalBehaviorStateError();
+          throw new BehaviorMemoryUnavailableError();
         }
       } catch (error48) {
-        if (error48 instanceof CriticalBehaviorStateError) {
+        if (error48 instanceof BehaviorMemoryUnavailableError) {
           throw error48;
         }
-        throw new CriticalBehaviorStateError();
+        throw new BehaviorMemoryUnavailableError(error48);
       }
     };
     extractRuntimeReasoningSelection = (settings, controlType, toggleBehavior = "disable_reasoning") => {
@@ -121034,7 +121645,7 @@ ${reviewOutputContract}`;
       return REVIEW_FAILURE_SQL_STATEMENT_PATTERN.test(lowered) && REVIEW_FAILURE_SCHEMA_DISCLOSURE_TOKENS.some((token) => lowered.includes(token));
     };
     summarizeReviewFailureExplanation = (detail) => {
-      const message = String(detail ?? "").trim();
+      const message = sanitizeRuntimeDiagnosticValue(String(detail ?? "")).trim();
       if (!message) {
         return "The review step stopped before VTX received error details.";
       }
@@ -121932,33 +122543,11 @@ ${reviewOutputContract}`;
     ].join("\n");
     buildPromptPositionsValue = (input) => {
       const validateInstructionTemplate = (template, allowedKeys) => {
-        const escapedOpen = "__VTX_ESCAPED_OPEN__";
-        const escapedClose = "__VTX_ESCAPED_CLOSE__";
-        const normalizedTemplate = template.replace(/\{\{/g, escapedOpen).replace(/\}\}/g, escapedClose);
-        const formatted = normalizedTemplate.replace(/\{([a-z_]+)\}/g, (_match, key) => {
-          if (!allowedKeys.includes(key)) {
-            throw new Error(`Unexpected positions instruction placeholder: ${key}`);
-          }
-          return "";
-        });
-        if (/[{}]/.test(formatted)) {
-          throw new Error(`Invalid positions instruction template: ${template}`);
-        }
-      };
-      const formatInstructionTemplate2 = (template, values) => {
-        const escapedOpen = "__VTX_ESCAPED_OPEN__";
-        const escapedClose = "__VTX_ESCAPED_CLOSE__";
-        const normalizedTemplate = template.replace(/\{\{/g, escapedOpen).replace(/\}\}/g, escapedClose);
-        const formatted = normalizedTemplate.replace(/\{([a-z_]+)\}/g, (_match, key) => {
-          if (!Object.prototype.hasOwnProperty.call(values, key)) {
-            throw new Error(`Unexpected positions instruction placeholder: ${key}`);
-          }
-          return String(values[key]);
-        });
-        if (/[{}]/.test(formatted)) {
-          throw new Error(`Invalid positions instruction template: ${template}`);
-        }
-        return formatted.replaceAll(escapedOpen, "{").replaceAll(escapedClose, "}");
+        formatInstructionTemplate(
+          template,
+          Object.fromEntries(allowedKeys.map((key) => [key, ""])),
+          "positions instruction template"
+        );
       };
       validateInstructionTemplate(input.positionsInstructions.close_reduce, []);
       validateInstructionTemplate(input.positionsInstructions.capacity_flat, []);
@@ -122053,9 +122642,9 @@ ${reviewOutputContract}`;
       if (remainingGlobal <= 0) {
         parts.push(`${input.positionsInstructions.capacity_full}  `);
       } else if (input.maxTradesPerPrompt < input.maxTradesGlobal && remainingGlobal < input.maxTradesPerPrompt) {
-        parts.push(`${formatInstructionTemplate2(input.positionsInstructions.capacity_low, {
+        parts.push(`${formatInstructionTemplate(input.positionsInstructions.capacity_low, {
           remaining: remainingGlobal
-        })}  `);
+        }, "positions instruction template")}  `);
       }
       return parts.join("\n");
     };
@@ -122551,6 +123140,9 @@ ${reviewOutputContract}`;
       const matches2 = Array.from(
         userPrompt.matchAll(/<behavior_state>\s*([\s\S]*?)\s*<\/behavior_state>/g)
       );
+      if (openingTags.length === 0 && closingTags.length === 0) {
+        throw new BehaviorMemoryUnavailableError();
+      }
       if (openingTags.length !== 1 || closingTags.length !== 1 || matches2.length !== 1) {
         throw new CriticalBehaviorStateError();
       }
@@ -123533,27 +124125,6 @@ ${behaviorJson}
         }
       }
     };
-    formatTemplateWithNamedVariables = (template, values) => {
-      const escapedOpen = "__VTX_FMT_OPEN__";
-      const escapedClose = "__VTX_FMT_CLOSE__";
-      const prepared = String(template || "").replaceAll("{{", escapedOpen).replaceAll("}}", escapedClose);
-      const validatedTemplate = prepared.replace(/\{([a-zA-Z_][a-zA-Z0-9_]*)\}/g, (_match, key) => {
-        if (!Object.prototype.hasOwnProperty.call(values, key)) {
-          throw new Error(`Missing required review template variable: ${key}`);
-        }
-        return "";
-      });
-      if (/[{}]/.test(validatedTemplate)) {
-        throw new Error(`Invalid review template: ${template}`);
-      }
-      const formatted = prepared.replace(/\{([a-zA-Z_][a-zA-Z0-9_]*)\}/g, (_match, key) => {
-        if (!Object.prototype.hasOwnProperty.call(values, key)) {
-          throw new Error(`Missing required review template variable: ${key}`);
-        }
-        return String(values[key]);
-      });
-      return formatted.replaceAll(escapedOpen, "{").replaceAll(escapedClose, "}");
-    };
     carryReturnedModelCalls = (error48, attempts) => {
       if (!attempts.length || !error48 || typeof error48 !== "object" && typeof error48 !== "function") return error48;
       error48.runtimeReturnedModelCalls = attempts;
@@ -125291,7 +125862,7 @@ ${stringifyPromptJson(candlesPayload)}
               reviewInstructions.review_security,
               "review_instructions.review_security"
             );
-            const reviewOutputContract = formatTemplateWithNamedVariables(
+            const reviewOutputContract = formatInstructionTemplate(
               reviewOutputFormat,
               buildDecisionInstructionVariables(reviewSymbols, reviewMaxTrades)
             );
@@ -125314,12 +125885,18 @@ ${reviewOutputContract}`;
               configuredReviewUserTemplate
             ) : configuredReviewUserTemplate;
             const renderedPrimaryUserPrompt = stringifyPromptJson(userPrompt);
-            const reviewUserPrompt = formatTemplateWithNamedVariables(reviewUserTemplate, {
-              primary_model: selectedPrimaryModel,
-              primary_system_prompt: stringifyPromptJson(systemPrompt),
-              primary_user_prompt: renderedPrimaryUserPrompt,
-              primary_decision_json: primaryDecisionJson
-            });
+            let reviewUserPrompt;
+            try {
+              reviewUserPrompt = formatInstructionTemplate(reviewUserTemplate, {
+                primary_model: selectedPrimaryModel,
+                primary_system_prompt: stringifyPromptJson(systemPrompt),
+                primary_user_prompt: renderedPrimaryUserPrompt,
+                primary_decision_json: primaryDecisionJson
+              });
+            } catch (error48) {
+              if (input.mode === "trader") throw new CriticalBehaviorStateError(error48);
+              throw error48;
+            }
             if (input.mode === "trader" && (reviewUserPrompt.split(renderedPrimaryUserPrompt).length - 1 !== 1 || /<\/?behavior_state\b/.test(reviewUserPrompt) || containsCompetingBehaviorStateMarkup(reviewSystemPrompt))) {
               throw new CriticalBehaviorStateError();
             }
@@ -126867,10 +127444,10 @@ var init_engine = __esm({
             outcome: "error"
           });
           await new Promise((resolve14) => {
-            let settled = false;
+            let settled2 = false;
             const finish = () => {
-              if (settled) return;
-              settled = true;
+              if (settled2) return;
+              settled2 = true;
               globalThis.clearTimeout(timeoutId);
               signal.removeEventListener("abort", finish);
               resolve14();
@@ -127813,14 +128390,14 @@ var init_engine = __esm({
         const loop = this._executionLoopPromise;
         if (!loop) return true;
         let timer;
-        const settled = await Promise.race([
+        const settled2 = await Promise.race([
           loop.then(() => true, () => true),
           new Promise((resolve14) => {
             timer = setTimeout(() => resolve14(false), timeoutMs);
           })
         ]);
         clearTimeout(timer);
-        return settled;
+        return settled2;
       }
       get active() {
         return this._startPromise !== null || this._isStopping || this._state === "running" || this._state === "stale" || this._state === "offline";
@@ -128111,6 +128688,7 @@ var init_engine = __esm({
             const runtime = await this.notifyRuntimeStop(this._profileId, {
               keepalive: options?.keepalive === true,
               reason: stopReason,
+              modeSwitch: options?.modeSwitch === true,
               killswitchTrigger: options?.killswitchTrigger ?? null,
               authoritativeIntent: this._remoteStopPending === "authoritative-stop" && this._pendingAuthoritativeStopDetails?.authoritativeIntent === true
             });
@@ -128190,7 +128768,8 @@ var init_engine = __esm({
                 reason: effectiveRemoteStopReason,
                 killswitchTrigger: supersedingStop?.killswitchTrigger ?? options?.killswitchTrigger ?? null,
                 acceptDeferredStopCompletion: !remoteStopWasAuthoritativeAtDispatch,
-                authoritativeIntent: supersedingStop?.authoritativeIntent === true
+                authoritativeIntent: supersedingStop?.authoritativeIntent === true,
+                modeSwitch: !supersedingStop && options?.modeSwitch === true
               });
               this._setRuntimeStatus(runtime, "stop");
               appendRuntimeDebugEvent({
@@ -128949,10 +129528,10 @@ var init_engine = __esm({
           throw signal.reason ?? createStopAbortError("trade_sync_settlement_cancelled");
         }
         await new Promise((resolve14) => {
-          let settled = false;
+          let settled2 = false;
           const finish = () => {
-            if (settled) return;
-            settled = true;
+            if (settled2) return;
+            settled2 = true;
             globalThis.clearTimeout(timeoutId);
             signal?.removeEventListener("abort", finish);
             resolve14();
@@ -129573,7 +130152,9 @@ var init_engine = __esm({
               reviewModelResponse: result.reviewModelResponse,
               primaryReasoningContent: result.primaryReasoningContent,
               reviewReasoningContent: result.reviewReasoningContent,
-              reviewFailureReason: result.reviewFailureReason,
+              // Raw provider error text never leaves the device; the server
+              // stores the reason through the same redaction contract.
+              reviewFailureReason: result.reviewFailureReason == null ? result.reviewFailureReason : sanitizeRuntimeDiagnosticValue(result.reviewFailureReason),
               systemPrompt: result.systemPrompt,
               userPrompt: result.userPrompt,
               reviewSystemPrompt: result.reviewSystemPrompt,
@@ -131735,7 +132316,8 @@ var init_engine = __esm({
               lastRunAt: this._lastRunAt,
               stopReason: options?.reason ?? null,
               killswitchTrigger: options?.killswitchTrigger ?? null,
-              authoritativeIntent: options?.authoritativeIntent === true
+              authoritativeIntent: options?.authoritativeIntent === true,
+              modeSwitch: options?.modeSwitch === true
             },
             {
               ...options,