@vtxmacro/cli 2026.10.33 → 2026.10.35

package/bin/vtx.js

@@ -113,7 +113,7 @@ var init_routing = __esm({
 var agent_cli_release_default;
 var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
-    agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.33", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
+    agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.35", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
   }
 });
 
@@ -3891,10 +3891,10 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
         env: invocation.env
       });
       const output3 = [];
-      let settled = false;
+      let settled2 = false;
       const settle = (value) => {
-        if (settled) return;
-        settled = true;
+        if (settled2) return;
+        settled2 = true;
         clearTimeout(timer);
         resolvePromise(value);
       };
@@ -3921,10 +3921,10 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
         stdio: ["ignore", "pipe", "ignore"]
       });
       const output3 = [];
-      let settled = false;
+      let settled2 = false;
       const settle = (value) => {
-        if (settled) return;
-        settled = true;
+        if (settled2) return;
+        settled2 = true;
         clearTimeout(timer);
         resolvePromise(value);
       };
@@ -3947,10 +3947,10 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
       });
       const output3 = [];
       let bytes3 = 0;
-      let settled = false;
+      let settled2 = false;
       const settle = (value) => {
-        if (settled) return;
-        settled = true;
+        if (settled2) return;
+        settled2 = true;
         clearTimeout(timer);
         resolvePromise(value);
       };
@@ -4335,6 +4335,165 @@ while(($line=[Console]::In.ReadLine()) -ne $null) {
   }
 });
 
+// lib/runtime/abort.ts
+var ABORT_MESSAGE_TOKENS, readAbortLikeMessage, isAbortLikeError, toAbortError;
+var init_abort = __esm({
+  "lib/runtime/abort.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    ABORT_MESSAGE_TOKENS = [
+      "the operation was aborted",
+      "the user aborted a request",
+      "request was aborted",
+      "request aborted",
+      "signal is aborted",
+      "client runtime stop requested"
+    ];
+    readAbortLikeMessage = (error48) => {
+      if (error48 instanceof Error) {
+        return error48.message;
+      }
+      if (typeof error48 === "string") {
+        return error48;
+      }
+      if (error48 && typeof error48 === "object" && typeof error48.message === "string") {
+        return String(error48.message);
+      }
+      return "";
+    };
+    isAbortLikeError = (error48) => {
+      if (typeof DOMException !== "undefined" && error48 instanceof DOMException) {
+        return error48.name === "AbortError";
+      }
+      if (error48 instanceof Error && error48.name === "AbortError") {
+        return true;
+      }
+      if (error48 && typeof error48 === "object" && error48.name === "AbortError") {
+        return true;
+      }
+      const normalized = readAbortLikeMessage(error48).trim().toLowerCase();
+      if (!normalized) {
+        return false;
+      }
+      return ABORT_MESSAGE_TOKENS.some((token) => normalized.includes(token));
+    };
+    toAbortError = (error48, fallbackMessage = "The operation was aborted.") => {
+      const message = readAbortLikeMessage(error48).trim() || fallbackMessage;
+      try {
+        return new DOMException(message, "AbortError");
+      } catch {
+        const fallback = new Error(message);
+        fallback.name = "AbortError";
+        return fallback;
+      }
+    };
+  }
+});
+
+// lib/runtime/runtime-redaction.ts
+var REDACTED_VALUE, WHITESPACE_CLASS, SEPARATOR, VALUE_RUN, NAME_LETTER_VARIANTS, NAME_START, NAME_PREFIX, secretName, SECRET_NAME_WORDS, NAMED_VALUE, SECRET_QUERY_PARAM_PATTERN, BEARER_TOKEN_PATTERN, ASSIGNMENT_SEPARATOR, AUTHORIZATION_SCHEMES, assignmentPattern, SECRET_ASSIGNMENT_PATTERN, SECRET_WORD_ASSIGNMENT_PATTERN, SECRET_TOKEN_PATTERN, redactAssignedValue, isRuntimeErrorObject, sanitizeRuntimeDiagnosticValue, sanitizeRuntimeNetworkPath, getSanitizedRuntimeErrorMessage, toSanitizedRuntimeError, getSanitizedRuntimeAbortReason;
+var init_runtime_redaction = __esm({
+  "lib/runtime/runtime-redaction.ts"() {
+    "use strict";
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_abort();
+    REDACTED_VALUE = "[REDACTED]";
+    WHITESPACE_CLASS = String.raw`[\t\n\v\f\r \x1c-\x1f\x85\xa0\u1680\u2000-\u200a\u2028\u2029\u202f\u205f\u3000\ufeff]`;
+    SEPARATOR = WHITESPACE_CLASS;
+    VALUE_RUN = String.raw`[^,\t\n\v\f\r ]+`;
+    NAME_LETTER_VARIANTS = {
+      s: String.raw`[s\u017f]`,
+      k: String.raw`[k\u212a]`,
+      i: String.raw`[i\u0131\u0130]`
+    };
+    NAME_START = "(?:^|[^A-Za-z0-9_.-])";
+    NAME_PREFIX = "[A-Za-z0-9_.-]*";
+    secretName = (word) => Array.from(word, (letter) => NAME_LETTER_VARIANTS[letter] ?? letter).join("");
+    SECRET_NAME_WORDS = `(?:${[
+      "key",
+      "token",
+      "secret",
+      "password",
+      "passphrase",
+      "credentials",
+      "credential",
+      "authorization"
+    ].map(secretName).join("|")})`;
+    NAMED_VALUE = String.raw`("[^"]*"|'[^']*'` + String.raw`|(?:[^,\t\n\v\f\r ]*${SECRET_NAME_WORDS}(?:[:=]${SEPARATOR}+|${SEPARATOR}+[:=]${SEPARATOR}*))*${VALUE_RUN})`;
+    SECRET_QUERY_PARAM_PATTERN = new RegExp(
+      `([?&](?:${NAME_PREFIX}${SECRET_NAME_WORDS}|${secretName("auth")}|${secretName("sig")}|${secretName("signature")})=)${NAMED_VALUE}`,
+      "gi"
+    );
+    BEARER_TOKEN_PATTERN = new RegExp(
+      String.raw`(\bBearer${SEPARATOR}+)(?:[^,;\t\n\v\f\r ]*${SECRET_NAME_WORDS}(?:[:=]${SEPARATOR}+|${SEPARATOR}+[:=]${SEPARATOR}*))*[^,;\t\n\v\f\r ]+`,
+      "gi"
+    );
+    ASSIGNMENT_SEPARATOR = `['"]?${SEPARATOR}*[:=]${SEPARATOR}*`;
+    AUTHORIZATION_SCHEMES = "(?:Bearer|Basic|Digest|Token|Bot|Negotiate|NTLM|ApiKey)";
+    assignmentPattern = (nameStart) => new RegExp(
+      `(${nameStart}(?:${secretName("authorization")}${ASSIGNMENT_SEPARATOR}['"]?${AUTHORIZATION_SCHEMES}${SEPARATOR}+|${SECRET_NAME_WORDS}${ASSIGNMENT_SEPARATOR}))${NAMED_VALUE}`,
+      "gi"
+    );
+    SECRET_ASSIGNMENT_PATTERN = assignmentPattern(`${NAME_START}${NAME_PREFIX}`);
+    SECRET_WORD_ASSIGNMENT_PATTERN = assignmentPattern(
+      `(?:^|[^A-Za-z0-9_])(?:(?:${["api", "access", "private"].map(secretName).join("|")})[_ -]?)?`
+    );
+    SECRET_TOKEN_PATTERN = /\b(?:AIza[A-Za-z0-9_-]+|sk-[A-Za-z0-9._-]+|xai-[A-Za-z0-9]{20,}|gsk_[A-Za-z0-9]{20,}|AQ\.[A-Za-z0-9._-]+|0x[a-fA-F0-9]{64})\b/g;
+    redactAssignedValue = (_match, prefix, value) => {
+      const quote = value[0] === '"' || value[0] === "'" ? value[0] : "";
+      const closing = quote && value.length > 1 && value[value.length - 1] === quote ? quote : "";
+      return `${prefix}${quote}${REDACTED_VALUE}${closing}`;
+    };
+    isRuntimeErrorObject = (error48) => error48 instanceof Error || error48 != null && typeof error48 === "object" && Object.prototype.toString.call(error48) === "[object DOMException]" && typeof error48.message === "string" && typeof error48.name === "string";
+    sanitizeRuntimeDiagnosticValue = (value) => {
+      const normalized = String(value || "");
+      if (!normalized) {
+        return normalized;
+      }
+      return normalized.replace(BEARER_TOKEN_PATTERN, `$1${REDACTED_VALUE}`).replace(SECRET_WORD_ASSIGNMENT_PATTERN, redactAssignedValue).replace(SECRET_TOKEN_PATTERN, REDACTED_VALUE).replace(SECRET_QUERY_PARAM_PATTERN, redactAssignedValue).replace(SECRET_ASSIGNMENT_PATTERN, redactAssignedValue);
+    };
+    sanitizeRuntimeNetworkPath = (value) => {
+      const normalized = String(value || "").trim();
+      if (!normalized) {
+        return "/";
+      }
+      const withoutFragment = normalized.split("#", 1)[0] || normalized;
+      const withoutQuery = withoutFragment.split("?", 1)[0] || withoutFragment;
+      const sanitized = sanitizeRuntimeDiagnosticValue(withoutQuery.trim());
+      return sanitized || "/";
+    };
+    getSanitizedRuntimeErrorMessage = (error48) => {
+      const message = isRuntimeErrorObject(error48) ? error48.message : typeof error48 === "string" ? error48 : error48 == null ? null : String(error48);
+      if (message == null) {
+        return null;
+      }
+      return sanitizeRuntimeDiagnosticValue(message);
+    };
+    toSanitizedRuntimeError = (error48) => {
+      const message = getSanitizedRuntimeErrorMessage(error48) || "Unknown runtime error.";
+      if (isRuntimeErrorObject(error48) && error48.message === message) {
+        if (isAbortLikeError(error48) && error48.name !== "AbortError") {
+          if (error48 instanceof Error) error48.name = "AbortError";
+          else return Object.assign(new Error(message), { name: "AbortError" });
+        }
+        return error48;
+      }
+      const sanitized = new Error(message);
+      if (isAbortLikeError(error48)) {
+        sanitized.name = "AbortError";
+      } else if (isRuntimeErrorObject(error48) && error48.name) {
+        sanitized.name = error48.name;
+      }
+      return sanitized;
+    };
+    getSanitizedRuntimeAbortReason = (signal, fallbackMessage = "The operation was aborted.") => isRuntimeErrorObject(signal?.reason) ? toSanitizedRuntimeError(signal.reason) : new DOMException(fallbackMessage, "AbortError");
+  }
+});
+
 // lib/cli-release/updater.ts
 var updater_exports = {};
 __export(updater_exports, {
@@ -4390,6 +4549,7 @@ var init_updater = __esm({
     init_stop_signals();
     init_config2();
     init_routing();
+    init_runtime_redaction();
     CLI_PACKAGE_NAME = "@vtxmacro/cli";
     OFFICIAL_NPM_REGISTRY = "https://registry.npmjs.org";
     CLI_UPDATE_COMMAND = `npm install -g ${CLI_PACKAGE_NAME}@latest`;
@@ -4424,10 +4584,10 @@ var init_updater = __esm({
       });
       const stdout = [];
       const stderr = [];
-      let settled = false;
+      let settled2 = false;
       const settle = (result) => {
-        if (settled) return;
-        settled = true;
+        if (settled2) return;
+        settled2 = true;
         resolvePromise(result);
       };
       child.stdout.on("data", (chunk) => stdout.push(Buffer.from(chunk)));
@@ -4845,7 +5005,7 @@ var init_updater = __esm({
       try {
         await ensureUpdaterPrivateDirectory(paths.root, paths.root, { platform: input.platform });
       } catch (error48) {
-        const reason = `update_directory_unsafe: ${error48 instanceof Error ? error48.message.slice(0, runtime_policy_generated_default.agent_cli.update_failure_reason_max_chars) : "unknown"}`;
+        const reason = `update_directory_unsafe: ${error48 instanceof Error ? sanitizeRuntimeDiagnosticValue(error48.message).slice(0, runtime_policy_generated_default.agent_cli.update_failure_reason_max_chars) : "unknown"}`;
         await appendCliUpdateLog(paths, "cli_update_failed", { package_version: target.version, reason });
         return { kind: "failed", reason };
       }
@@ -4878,7 +5038,7 @@ var init_updater = __esm({
         await appendCliUpdateLog(paths, "cli_release_staged", { package_version: selection.package_version });
         return { kind: "staged", selection };
       } catch (error48) {
-        const reason = error48 instanceof Error ? error48.message.slice(0, runtime_policy_generated_default.agent_cli.update_failure_reason_max_chars) : "unknown";
+        const reason = error48 instanceof Error ? sanitizeRuntimeDiagnosticValue(error48.message).slice(0, runtime_policy_generated_default.agent_cli.update_failure_reason_max_chars) : "unknown";
         await appendCliUpdateLog(paths, "cli_update_failed", { package_version: target.version, reason });
         return { kind: "failed", reason };
       } finally {
@@ -4966,7 +5126,7 @@ var init_updater = __esm({
         return runSelected();
       } catch (error48) {
         await appendCliUpdateLog(paths, "cli_update_check_failed", {
-          reason: error48 instanceof Error ? error48.message.slice(0, runtime_policy_generated_default.agent_cli.update_failure_reason_max_chars) : "unknown"
+          reason: error48 instanceof Error ? sanitizeRuntimeDiagnosticValue(error48.message).slice(0, runtime_policy_generated_default.agent_cli.update_failure_reason_max_chars) : "unknown"
         });
         return { kind: "run" };
       }
@@ -5394,7 +5554,7 @@ var init_updater = __esm({
         return active && compareCliReleaseVersions(active.package_version, current) > 0 && rejection?.package_version !== active.package_version ? active : null;
       } catch (error48) {
         await appendCliUpdateLog(paths, "cli_runtime_release_poll_failed", {
-          reason: error48 instanceof Error ? error48.message.slice(0, runtime_policy_generated_default.agent_cli.update_failure_reason_max_chars) : "unknown"
+          reason: error48 instanceof Error ? sanitizeRuntimeDiagnosticValue(error48.message).slice(0, runtime_policy_generated_default.agent_cli.update_failure_reason_max_chars) : "unknown"
         });
         return null;
       }
@@ -23618,20 +23778,20 @@ var init_credential_store = __esm({
         stdio: ["pipe", "pipe", "pipe"],
         windowsHide: true
       });
-      let settled = false;
+      let settled2 = false;
       let terminating = false;
       const cleanup = () => {
         clearTimeout(timer);
         options.signal?.removeEventListener("abort", abort);
       };
       const settleReject = (error48) => {
-        if (settled) return;
-        settled = true;
+        if (settled2) return;
+        settled2 = true;
         cleanup();
         reject(error48);
       };
       const terminate = (error48) => {
-        if (settled || terminating) return;
+        if (settled2 || terminating) return;
         terminating = true;
         void terminateCredentialProcessTree(child).finally(() => settleReject(error48));
       };
@@ -23654,12 +23814,12 @@ var init_credential_store = __esm({
       child.stderr.resume();
       child.once("error", () => settleReject(new Error("OS credential command could not start.")));
       child.once("close", (exitCode) => {
-        if (terminating || settled) return;
+        if (terminating || settled2) return;
         try {
           const normalizedExitCode = Number(exitCode ?? 1);
           const stdout = Buffer.concat(stdoutChunks).toString("utf8");
           const transformedStdout = normalizedExitCode === 0 ? command.transformStdout?.(stdout) ?? stdout : stdout;
-          settled = true;
+          settled2 = true;
           cleanup();
           resolve14({
             exitCode: normalizedExitCode,
@@ -24888,16 +25048,16 @@ async function beginInferenceOAuthLogin(options) {
       state: pkce.state,
       challenge: pkce.challenge
     });
-    let settled = false;
+    let settled2 = false;
     let rejectCompletion;
     const completion = new Promise((resolve14, reject) => {
       rejectCompletion = reject;
       handler = async (requestUrl2, method, writeResponse) => {
-        if (settled) {
+        if (settled2) {
           writeResponse(HTTP_STATUS.CONFLICT, "Authorization callback is no longer active.");
           return;
         }
-        settled = true;
+        settled2 = true;
         try {
           if (method !== "GET") throw new Error("Inference OAuth callback is invalid.");
           const callbackUrl = new URL(requestUrl2, redirectUri).toString();
@@ -24982,8 +25142,8 @@ async function beginInferenceOAuthLogin(options) {
       };
     });
     const abortLogin = () => {
-      if (settled) return;
-      settled = true;
+      if (settled2) return;
+      settled2 = true;
       void closeServer(server).finally(() => rejectCompletion(
         new InferenceOAuthRequestError(
           "request_aborted",
@@ -24994,8 +25154,8 @@ async function beginInferenceOAuthLogin(options) {
     options.signal?.addEventListener("abort", abortLogin, { once: true });
     if (options.signal?.aborted) abortLogin();
     const timeout = setTimeout(() => {
-      if (settled) return;
-      settled = true;
+      if (settled2) return;
+      settled2 = true;
       void closeServer(server).finally(
         () => rejectCompletion(new Error("Inference OAuth authorization timed out."))
       );
@@ -25016,8 +25176,8 @@ async function beginInferenceOAuthLogin(options) {
       redirectUri,
       completion,
       cancel: async () => {
-        if (settled) return;
-        settled = true;
+        if (settled2) return;
+        settled2 = true;
         await closeServer(server);
         rejectCompletion(new Error("Inference OAuth authorization was cancelled."));
       }
@@ -25120,6 +25280,7 @@ var init_mcp_client = __esm({
     init_runtime_policy_generated2();
     init_constants();
     init_mcp_transport();
+    init_runtime_redaction();
     init_external_inference_contract();
     EXTERNAL_INFERENCE_MCP_PROTOCOL_VERSION = "2026-07-28";
     EXTERNAL_INFERENCE_AUTOMATED_HOST_TOOLS = [
@@ -25300,7 +25461,7 @@ var init_mcp_client = __esm({
     publicRejectionReason = (text) => {
       const marker = text.indexOf(PUBLIC_TOOL_ERROR_PREFIX);
       const [firstLine = ""] = (marker < 0 ? text : text.slice(0, marker)).split("\n");
-      const reason = firstLine.replace(CONTROL_CHARACTERS, " ").trim();
+      const reason = sanitizeRuntimeDiagnosticValue(firstLine.replace(CONTROL_CHARACTERS, " ")).trim();
       if (!reason) return null;
       return reason.length > MAX_REJECTION_REASON_CHARS ? `${reason.slice(0, MAX_REJECTION_REASON_CHARS)}\u2026` : reason;
     };
@@ -35854,7 +36015,7 @@ var init_runner = __esm({
     };
     settlesWithin = async (promise2, timeoutMs) => {
       let timer = null;
-      const settled = await Promise.race([
+      const settled2 = await Promise.race([
         promise2.then(() => true, () => true),
         new Promise((resolve14) => {
           timer = setTimeout(
@@ -35864,7 +36025,7 @@ var init_runner = __esm({
         })
       ]);
       if (timer !== null) clearTimeout(timer);
-      return settled;
+      return settled2;
     };
     defaultRegisterSignalHandlers = (requestDrain) => {
       const onSigint = () => requestDrain("sigint");
@@ -41325,10 +41486,10 @@ var init_codex_adapter = __esm({
         }
         const start = this.durableSessionStart;
         return await new Promise((resolveSession, reject) => {
-          let settled = false;
+          let settled2 = false;
           const finish = (callback) => {
-            if (settled) return;
-            settled = true;
+            if (settled2) return;
+            settled2 = true;
             clearTimeout(timer);
             signal?.removeEventListener("abort", onAbort);
             callback();
@@ -41404,10 +41565,10 @@ var init_codex_adapter = __esm({
       }
       async waitForCapabilities(preflight, deadlineAtMs, signal) {
         return await new Promise((resolve14, reject) => {
-          let settled = false;
+          let settled2 = false;
           const finish = (callback) => {
-            if (settled) return;
-            settled = true;
+            if (settled2) return;
+            settled2 = true;
             clearTimeout(timer);
             signal?.removeEventListener("abort", onAbort);
             callback();
@@ -47436,6 +47597,7 @@ var init_service = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_service_launcher_state();
+    init_runtime_redaction();
     init_agent_cli_release();
     init_runtime_policy_generated();
     init_constants();
@@ -48722,7 +48884,7 @@ ${result.stderr}`)) {
               event: "worker_output",
               instance_name: worker.instance_name,
               stream,
-              message: line.slice(0, SERVICE_POLICY.worker_output_line_max_chars)
+              message: sanitizeRuntimeDiagnosticValue(line).slice(0, SERVICE_POLICY.worker_output_line_max_chars)
             })}
 `);
           }
@@ -49002,8 +49164,8 @@ ${result.stderr}`)) {
           record5.controller.abort();
           await updateRecord(record5, "draining");
         }
-        const settled = await Promise.allSettled(retiring.map((record5) => record5.promise));
-        const failedDrain = settled.find(
+        const settled2 = await Promise.allSettled(retiring.map((record5) => record5.promise));
+        const failedDrain = settled2.find(
           (result) => result.status === "rejected"
         );
         if (failedDrain) {
@@ -49037,8 +49199,8 @@ ${result.stderr}`)) {
           record5.controller.abort();
           await updateRecord(record5, "draining");
         }
-        const settled = await Promise.allSettled(draining.map((record5) => record5.promise));
-        const failedDrain = settled.find(
+        const settled2 = await Promise.allSettled(draining.map((record5) => record5.promise));
+        const failedDrain = settled2.find(
           (result) => result.status === "rejected"
         );
         if (failedDrain) throw failedDrain.reason;
@@ -49081,8 +49243,8 @@ ${result.stderr}`)) {
               await drainWorkers();
               break;
             }
-            const settled = await completion;
-            const failure2 = settled.find((result) => result.status === "rejected");
+            const settled2 = await completion;
+            const failure2 = settled2.find((result) => result.status === "rejected");
             if (failure2) throw failure2.reason;
             break;
           }
@@ -55607,63 +55769,6 @@ var init_request_encoding = __esm({
   }
 });
 
-// lib/runtime/abort.ts
-var ABORT_MESSAGE_TOKENS, readAbortLikeMessage, isAbortLikeError, toAbortError;
-var init_abort = __esm({
-  "lib/runtime/abort.ts"() {
-    "use strict";
-    init_define_VTX_EXO_POLICY();
-    init_define_VTX_GROK_POLICY();
-    init_define_VTX_PI_MODEL_POLICY();
-    ABORT_MESSAGE_TOKENS = [
-      "the operation was aborted",
-      "the user aborted a request",
-      "request was aborted",
-      "request aborted",
-      "signal is aborted",
-      "client runtime stop requested"
-    ];
-    readAbortLikeMessage = (error48) => {
-      if (error48 instanceof Error) {
-        return error48.message;
-      }
-      if (typeof error48 === "string") {
-        return error48;
-      }
-      if (error48 && typeof error48 === "object" && typeof error48.message === "string") {
-        return String(error48.message);
-      }
-      return "";
-    };
-    isAbortLikeError = (error48) => {
-      if (typeof DOMException !== "undefined" && error48 instanceof DOMException) {
-        return error48.name === "AbortError";
-      }
-      if (error48 instanceof Error && error48.name === "AbortError") {
-        return true;
-      }
-      if (error48 && typeof error48 === "object" && error48.name === "AbortError") {
-        return true;
-      }
-      const normalized = readAbortLikeMessage(error48).trim().toLowerCase();
-      if (!normalized) {
-        return false;
-      }
-      return ABORT_MESSAGE_TOKENS.some((token) => normalized.includes(token));
-    };
-    toAbortError = (error48, fallbackMessage = "The operation was aborted.") => {
-      const message = readAbortLikeMessage(error48).trim() || fallbackMessage;
-      try {
-        return new DOMException(message, "AbortError");
-      } catch {
-        const fallback = new Error(message);
-        fallback.name = "AbortError";
-        return fallback;
-      }
-    };
-  }
-});
-
 // lib/api/shared.ts
 function configureApiTransport(transport) {
   if (transport === null) {
@@ -55691,7 +55796,7 @@ function getProfileHeaders(baseHeaders = {}, explicitProfileId) {
   if (profileId) headers["x-profile-id"] = profileId.toString();
   return headers;
 }
-var configuredApiTransport, getApiUrl, sendApiRequest, apiFetch, sleep, inFlightClientGetRequests, recentClientGetResponses, clientGetRequestGenerations, initializedClientGetRequestKeys, CLIENT_GET_DEDUPE_TTL_MS, CLIENT_RUNTIME_STATUSES_DEDUPE_TTL_MS, CLIENT_LLM_CONFIG_PRIME_TTL_MS, AUTH_BOOTSTRAP_GET_MAX_ATTEMPTS, AUTH_BOOTSTRAP_RETRY_JITTER_MS, canUseClientGetRequestCache, invalidateClientGetRequestCache, raceWithAbortSignal, shareClientGetRequest, clientGetRequestKey, clientPreferencesRequestKey, invalidateClientPreferencesCache, parseRetryAfterMs2, resolveAuthBootstrapRetryDelayMs, fetchAuthBootstrapGetWithRetry, annotateMarketDataRequestError, buildMarketDataFetchError, buildMarketDataNetworkError, buildMarketDataResponseBodyError, isTransientNetworkFetchError, createIdempotencyKey, getErrorMessage, getErrorPayloadOrEmpty, getErrorPayloadOrFallbackDetail, getErrorMessageFromResponse, throwUnauthorizedIfNeeded, activeProfileId, PROFILE_STORAGE_KEY;
+var configuredApiTransport, getApiUrl, sendApiRequest, apiFetch, sleep, DEVICE_CLOCK_HEADER, deviceClockHeader, inFlightClientGetRequests, recentClientGetResponses, clientGetRequestGenerations, initializedClientGetRequestKeys, CLIENT_GET_DEDUPE_TTL_MS, CLIENT_RUNTIME_STATUSES_DEDUPE_TTL_MS, CLIENT_LLM_CONFIG_PRIME_TTL_MS, AUTH_BOOTSTRAP_GET_MAX_ATTEMPTS, AUTH_BOOTSTRAP_RETRY_JITTER_MS, canUseClientGetRequestCache, invalidateClientGetRequestCache, raceWithAbortSignal, shareClientGetRequest, clientGetRequestKey, clientPreferencesRequestKey, invalidateClientPreferencesCache, parseRetryAfterMs2, resolveAuthBootstrapRetryDelayMs, fetchAuthBootstrapGetWithRetry, annotateMarketDataRequestError, buildMarketDataFetchError, buildMarketDataNetworkError, buildMarketDataResponseBodyError, isTransientNetworkFetchError, createIdempotencyKey, getErrorMessage, getErrorPayloadOrEmpty, getErrorPayloadOrFallbackDetail, getErrorMessageFromResponse, throwUnauthorizedIfNeeded, activeProfileId, PROFILE_STORAGE_KEY;
 var init_shared = __esm({
   "lib/api/shared.ts"() {
     "use strict";
@@ -55704,6 +55809,7 @@ var init_shared = __esm({
     init_runtime_policy_generated2();
     init_constants();
     init_abort();
+    init_runtime_redaction();
     configuredApiTransport = null;
     getApiUrl = () => {
       if (configuredApiTransport) return configuredApiTransport.baseUrl;
@@ -55738,6 +55844,8 @@ var init_shared = __esm({
       return sent !== init2 && refusedUnread(response, readsGzip) ? sendApiRequest(input, init2) : response;
     };
     sleep = (ms) => new Promise((resolve14) => setTimeout(resolve14, ms));
+    DEVICE_CLOCK_HEADER = "X-Device-Clock-Ms";
+    deviceClockHeader = () => ({ [DEVICE_CLOCK_HEADER]: String(Date.now()) });
     inFlightClientGetRequests = /* @__PURE__ */ new Map();
     recentClientGetResponses = /* @__PURE__ */ new Map();
     clientGetRequestGenerations = /* @__PURE__ */ new Map();
@@ -55852,7 +55960,7 @@ var init_shared = __esm({
         responseText = "";
       }
       const statusText = response.statusText ? ` ${response.statusText}` : "";
-      const detail = responseText ? `: ${responseText.slice(0, runtime_policy_generated_default2.ui.api_client.market_data_error_detail_chars)}` : "";
+      const detail = responseText ? `: ${sanitizeRuntimeDiagnosticValue(responseText).slice(0, runtime_policy_generated_default2.ui.api_client.market_data_error_detail_chars)}` : "";
       return annotateMarketDataRequestError(
         new Error(`Market data request failed: ${label2} unavailable (HTTP ${response.status}${statusText})${detail}`),
         path,
@@ -56189,6 +56297,16 @@ function normalizeClientRuntimeSecretRateLimitErrorMessage(rawMessage, options)
   );
   return projectClientRuntimeSecretRateLimit(operation, retryAfterSeconds).detail;
 }
+function getClientRuntimeSecretRateLimitRetryAfterSeconds(rawMessage, options) {
+  const normalized = normalizeClientRuntimeSecretRateLimitErrorMessage(rawMessage, options);
+  if (!normalized) {
+    return null;
+  }
+  const retryFromDetail = normalized.match(/try\s*again\s*in\s*([0-9]+(?:\.[0-9]+)?)\s*seconds?/i)?.[1];
+  return normalizeClientRuntimeSecretRetryAfterSeconds(
+    retryFromDetail ?? options?.retryAfterHeader
+  );
+}
 function isClientRuntimeSecretRateLimitError(error48, options) {
   const message = error48 instanceof Error ? error48.message : String(error48 ?? "");
   return normalizeClientRuntimeSecretRateLimitErrorMessage(message, options) !== null;
@@ -56324,68 +56442,6 @@ var init_google_auth_url = __esm({
   }
 });
 
-// lib/runtime/runtime-redaction.ts
-var REDACTED_VALUE, SECRET_QUERY_PARAM_PATTERN, BEARER_TOKEN_PATTERN, SECRET_ASSIGNMENT_PATTERN, SECRET_KEYWORD_VALUE_PATTERN, OPENAI_STYLE_KEY_PATTERN, VERTEX_EXPRESS_KEY_PATTERN, isRuntimeErrorObject, sanitizeRuntimeDiagnosticValue, sanitizeRuntimeNetworkPath, getSanitizedRuntimeErrorMessage, toSanitizedRuntimeError, getSanitizedRuntimeAbortReason;
-var init_runtime_redaction = __esm({
-  "lib/runtime/runtime-redaction.ts"() {
-    "use strict";
-    init_define_VTX_EXO_POLICY();
-    init_define_VTX_GROK_POLICY();
-    init_define_VTX_PI_MODEL_POLICY();
-    init_abort();
-    REDACTED_VALUE = "[REDACTED]";
-    SECRET_QUERY_PARAM_PATTERN = /([?&](?:access_token|api(?:_|-)?key|auth|authorization|key|private_key|secret|sig|signature|token)=)[^&#\s]*/gi;
-    BEARER_TOKEN_PATTERN = /\b(Bearer)\s+[A-Za-z0-9._:-]+\b/gi;
-    SECRET_ASSIGNMENT_PATTERN = /((?:authorization\s*[:=]\s*['"]?Bearer\s+|x-api-key\s*[:=]\s*['"]?|api(?:_|-)?key\s*[:=]\s*['"]?|\bkey\s*[:=]\s*['"]?|token\s*[:=]\s*['"]?|secret\s*[:=]\s*['"]?))[^'"\s,}]+/gi;
-    SECRET_KEYWORD_VALUE_PATTERN = /((?:private(?:_|-|\s)?key|signing(?:_|-|\s)?key)\s*[:=]\s*['"]?)(0x[a-fA-F0-9]{64}|[^'"\s,}]+)/gi;
-    OPENAI_STYLE_KEY_PATTERN = /\bsk-[A-Za-z0-9._-]+\b/g;
-    VERTEX_EXPRESS_KEY_PATTERN = /\bAQ\.[A-Za-z0-9._-]+\b/g;
-    isRuntimeErrorObject = (error48) => error48 instanceof Error || error48 != null && typeof error48 === "object" && Object.prototype.toString.call(error48) === "[object DOMException]" && typeof error48.message === "string" && typeof error48.name === "string";
-    sanitizeRuntimeDiagnosticValue = (value) => {
-      const normalized = String(value || "");
-      if (!normalized) {
-        return normalized;
-      }
-      return normalized.replace(SECRET_QUERY_PARAM_PATTERN, `$1${REDACTED_VALUE}`).replace(BEARER_TOKEN_PATTERN, `$1 ${REDACTED_VALUE}`).replace(SECRET_ASSIGNMENT_PATTERN, `$1${REDACTED_VALUE}`).replace(SECRET_KEYWORD_VALUE_PATTERN, `$1${REDACTED_VALUE}`).replace(OPENAI_STYLE_KEY_PATTERN, REDACTED_VALUE).replace(VERTEX_EXPRESS_KEY_PATTERN, REDACTED_VALUE);
-    };
-    sanitizeRuntimeNetworkPath = (value) => {
-      const normalized = String(value || "").trim();
-      if (!normalized) {
-        return "/";
-      }
-      const withoutFragment = normalized.split("#", 1)[0] || normalized;
-      const withoutQuery = withoutFragment.split("?", 1)[0] || withoutFragment;
-      const sanitized = sanitizeRuntimeDiagnosticValue(withoutQuery.trim());
-      return sanitized || "/";
-    };
-    getSanitizedRuntimeErrorMessage = (error48) => {
-      const message = isRuntimeErrorObject(error48) ? error48.message : typeof error48 === "string" ? error48 : error48 == null ? null : String(error48);
-      if (message == null) {
-        return null;
-      }
-      return sanitizeRuntimeDiagnosticValue(message);
-    };
-    toSanitizedRuntimeError = (error48) => {
-      const message = getSanitizedRuntimeErrorMessage(error48) || "Unknown runtime error.";
-      if (isRuntimeErrorObject(error48) && error48.message === message) {
-        if (isAbortLikeError(error48) && error48.name !== "AbortError") {
-          if (error48 instanceof Error) error48.name = "AbortError";
-          else return Object.assign(new Error(message), { name: "AbortError" });
-        }
-        return error48;
-      }
-      const sanitized = new Error(message);
-      if (isAbortLikeError(error48)) {
-        sanitized.name = "AbortError";
-      } else if (isRuntimeErrorObject(error48) && error48.name) {
-        sanitized.name = error48.name;
-      }
-      return sanitized;
-    };
-    getSanitizedRuntimeAbortReason = (signal, fallbackMessage = "The operation was aborted.") => isRuntimeErrorObject(signal?.reason) ? toSanitizedRuntimeError(signal.reason) : new DOMException(fallbackMessage, "AbortError");
-  }
-});
-
 // lib/runtime/channel-sender.ts
 var RUNTIME_TAB_ID_STORAGE_KEY, createRuntimeUuid, getOrCreateRuntimeTabSenderId;
 var init_channel_sender = __esm({
@@ -57086,6 +57142,7 @@ var init_local_breadcrumbs = __esm({
     init_define_VTX_PI_MODEL_POLICY();
     init_constants();
     init_runtime_policy_generated2();
+    init_runtime_redaction();
     LOCAL_RUNTIME_BREADCRUMBS_STORAGE_KEY = "vtx_client_runtime_local_breadcrumbs_v1";
     DEVICE_DIAGNOSTICS2 = runtime_policy_generated_default2.trading.engine.client_runtime.device_diagnostics;
     LOCAL_RUNTIME_BREADCRUMBS_MAX_ENTRIES = DEVICE_DIAGNOSTICS2.breadcrumbs_max_entries;
@@ -57098,7 +57155,7 @@ var init_local_breadcrumbs = __esm({
       return window;
     };
     sanitizeText = (value, maxLength) => {
-      const text = String(value ?? "").trim();
+      const text = sanitizeRuntimeDiagnosticValue(String(value ?? "")).trim();
       if (!text) {
         return null;
       }
@@ -57529,6 +57586,7 @@ var init_market_data = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_abort();
+    init_runtime_redaction();
     init_network_debug();
     init_shared();
     init_constants();
@@ -58972,7 +59030,7 @@ var init_hyperliquid_public_read = __esm({
       let permit = null;
       const rowWeightedReservationId = !hostTransport && HYPERLIQUID_ROW_WEIGHTED_INFO_REQUESTS.includes(requestType) ? crypto.randomUUID() : void 0;
       let outcome = "cancelled";
-      let settled;
+      let settled2;
       let acquiring = false;
       let observedRateLimit;
       let privateRouteUsed = false;
@@ -59016,7 +59074,7 @@ var init_hyperliquid_public_read = __esm({
             checkAbort(signal);
           }
           pending2.set(key, { promise: new Promise((resolve14) => {
-            settled = resolve14;
+            settled2 = resolve14;
           }), priority });
         }
         if (options.reservation?.closed) throw new DOMException("Hyperliquid account read was cancelled.", "AbortError");
@@ -59129,9 +59187,9 @@ var init_hyperliquid_public_read = __esm({
         try {
           await finishHyperliquidRecoveryRequest(permit, outcome);
         } finally {
-          if (settled) {
+          if (settled2) {
             pending2.delete(key);
-            settled();
+            settled2();
           }
         }
       }
@@ -92783,7 +92841,7 @@ var init_hyperliquid_client = __esm({
             }
             settlementAttempted = true;
             try {
-              const settled = await settleClientRuntimeExchangeMutation(
+              const settled2 = await settleClientRuntimeExchangeMutation(
                 durableMutation.profileId,
                 durableMutation.mutationId,
                 {
@@ -92798,10 +92856,10 @@ var init_hyperliquid_client = __esm({
                 ...durableMutationAuthorityArgs(durableMutation)
               );
               try {
-                durableMutation.onSettled?.(settled);
+                durableMutation.onSettled?.(settled2);
               } catch {
               }
-              return settled;
+              return settled2;
             } catch (settlementCause) {
               throw Object.assign(new RuntimeExecutionError(
                 "Exchange submission may have completed; durable reconciliation is pending.",
@@ -92846,10 +92904,10 @@ var init_hyperliquid_client = __esm({
                   );
                 }
                 await new Promise((resolve14) => {
-                  let settled = false;
+                  let settled2 = false;
                   const finish = () => {
-                    if (settled) return;
-                    settled = true;
+                    if (settled2) return;
+                    settled2 = true;
                     globalThis.clearTimeout(timeoutId);
                     input.signal?.removeEventListener("abort", finish);
                     resolve14();
@@ -93600,7 +93658,8 @@ async function postClientRuntime(path, profileId, body, options) {
         signal: requestSignal,
         headers: {
           ...requestHeaders,
-          ...lastRequestId ? { "X-Request-ID": lastRequestId } : {}
+          ...lastRequestId ? { "X-Request-ID": lastRequestId } : {},
+          ...deviceClockHeader()
         },
         body
       });
@@ -94722,6 +94781,7 @@ var init_api2 = __esm({
     init_bot_exchanges();
     init_local_breadcrumbs();
     init_abort();
+    init_runtime_redaction();
     init_client_runtime_ownership_errors();
     init_shared();
     init_shared();
@@ -95277,7 +95337,7 @@ var init_api2 = __esm({
         if (code !== "client_exchange_evidence_invalid") throw error48;
         appendRuntimeDebugEvent({
           label: "client_exchange_reconcile_evidence_rejected",
-          note: `mutation_id=${answer.mutation_id} code=${code} detail=${String(error48.message ?? "").slice(0, runtime_policy_generated_default2.ui.api_client.exchange_evidence_rejection_detail_chars)}`,
+          note: `mutation_id=${answer.mutation_id} code=${code} detail=${sanitizeRuntimeDiagnosticValue(String(error48.message ?? "")).slice(0, runtime_policy_generated_default2.ui.api_client.exchange_evidence_rejection_detail_chars)}`,
           outcome: "error"
         });
         return answer;
@@ -96007,7 +96067,7 @@ function validateDeviceSecrets(value, options) {
     missing: missing2
   };
 }
-var CLIENT_VAULT_CHANGED_EVENT, memory, runtimeSecretsInFlight, buildRuntimeSecretsRequestKey, fetchClientRuntimeSecretsSingleFlight, mapClientRuntimeSecretsToDeviceSecrets, normalizeLocalAiSecrets, normalizeOpenAiCompatibleSecrets, hasAnySecretValues, normalizeClientRuntimeSecretProvider, getResponseSecretVersion, buildHydrationState, normalizeProfileIdForApi, LEGACY_VAULT_PREFIX, LEGACY_VAULT_DB_NAME, LEGACY_VAULT_DB_VERSION, LEGACY_VAULT_KEY_STORE, safeLocalStorage, hasIndexedDb, base64ToArrayBuffer, openLegacyVaultDb, withLegacyStore, legacyRecordCache, readLegacyRecordUncached, readLegacyRecord, fillFromLegacy, legacyMigrations, ClientVault;
+var CLIENT_VAULT_CHANGED_EVENT, ClientRuntimeSecretRefreshPendingError, memory, runtimeSecretsInFlight, runtimeSecretsRetryAtMs, runtimeSecretsRetryKey, buildRuntimeSecretsRequestKey, fetchClientRuntimeSecretsSingleFlight, mapClientRuntimeSecretsToDeviceSecrets, normalizeLocalAiSecrets, normalizeOpenAiCompatibleSecrets, hasAnySecretValues, normalizeClientRuntimeSecretProvider, getResponseSecretVersion, buildHydrationState, normalizeProfileIdForApi, LEGACY_VAULT_PREFIX, LEGACY_VAULT_DB_NAME, LEGACY_VAULT_DB_VERSION, LEGACY_VAULT_KEY_STORE, safeLocalStorage, hasIndexedDb, base64ToArrayBuffer, openLegacyVaultDb, withLegacyStore, legacyRecordCache, readLegacyRecordUncached, readLegacyRecord, fillFromLegacy, legacyMigrations, ClientVault;
 var init_vault = __esm({
   "lib/runtime/vault.ts"() {
     "use strict";
@@ -96015,6 +96075,7 @@ var init_vault = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_host_storage();
+    init_runtime_redaction();
     init_api2();
     init_client_runtime_secret_contract();
     init_client_runtime_provider_contract();
@@ -96024,9 +96085,19 @@ var init_vault = __esm({
     init_client_runtime_secret_rate_limit_contract();
     init_local_ai();
     init_byokProviderRegistry();
+    init_constants();
     CLIENT_VAULT_CHANGED_EVENT = "vtx-client-vault-changed";
+    ClientRuntimeSecretRefreshPendingError = class extends Error {
+      constructor(retryAfterSeconds) {
+        super("Client provider credentials changed; account refresh is pending.");
+        this.code = "client_runtime_secret_refresh_pending";
+        this.retryAfterSeconds = retryAfterSeconds;
+      }
+    };
     memory = /* @__PURE__ */ new Map();
     runtimeSecretsInFlight = /* @__PURE__ */ new Map();
+    runtimeSecretsRetryAtMs = /* @__PURE__ */ new Map();
+    runtimeSecretsRetryKey = (profileId) => String(normalizeProfileIdForApi(profileId) ?? profileId);
     buildRuntimeSecretsRequestKey = (profileId, activeProvider, includeAllProviderKeys) => `${normalizeProfileIdForApi(profileId)}:${activeProvider ?? "auto"}:${includeAllProviderKeys ? "all" : "active"}`;
     fetchClientRuntimeSecretsSingleFlight = (profileId, activeProvider, includeAllProviderKeys) => {
       const key = buildRuntimeSecretsRequestKey(profileId, activeProvider, includeAllProviderKeys);
@@ -96034,13 +96105,35 @@ var init_vault = __esm({
       if (existing) {
         return existing;
       }
+      const retryKey = runtimeSecretsRetryKey(profileId);
+      const retryAtMs = runtimeSecretsRetryAtMs.get(retryKey);
+      if (retryAtMs !== void 0) {
+        const remainingMs = retryAtMs - Date.now();
+        if (remainingMs > 0) {
+          return Promise.reject(new Error(projectClientRuntimeSecretRateLimit(
+            "get",
+            Math.ceil(remainingMs / MS_PER_SECOND)
+          ).detail));
+        }
+        runtimeSecretsRetryAtMs.delete(retryKey);
+      }
       const request = getClientRuntimeSecrets(
         normalizeProfileIdForApi(profileId),
         {
           activeProvider,
           includeAllProviderKeys
         }
-      ).finally(() => {
+      ).catch((error48) => {
+        if (isClientRuntimeSecretRateLimitError(error48)) {
+          const retryAfterSeconds = getClientRuntimeSecretRateLimitRetryAfterSeconds(
+            error48 instanceof Error ? error48.message : String(error48)
+          );
+          if (retryAfterSeconds && retryAfterSeconds > 0) {
+            runtimeSecretsRetryAtMs.set(retryKey, Date.now() + retryAfterSeconds * MS_PER_SECOND);
+          }
+        }
+        throw error48;
+      }).finally(() => {
         runtimeSecretsInFlight.delete(key);
       });
       runtimeSecretsInFlight.set(key, request);
@@ -96297,27 +96390,8 @@ var init_vault = __esm({
       static async refreshProviderSecretsForVersion(profileId, current, serverVersion) {
         const version3 = normalizeClientRuntimeSecretVersion(serverVersion);
         if (!version3) return current;
-        let savedSecrets;
         const stored = memory.get(profileId);
-        if (stored?.serverSecretVersion !== version3 || !stored.allProviderKeysHydrated) {
-          const hydrated = await _ClientVault.hydrateFromServerWithState(profileId, {
-            includeAllProviderKeys: true,
-            requireProviderSecret: false
-          });
-          if (hydrated.hydrationState.serverSecretVersion !== version3) {
-            throw new Error("Client provider credentials changed; account refresh is pending.");
-          }
-          savedSecrets = hydrated.secrets;
-          if (!memory.has(profileId)) {
-            memory.set(profileId, {
-              secrets: savedSecrets ?? { providerKeys: {} },
-              serverSecretVersion: version3,
-              allProviderKeysHydrated: true
-            });
-          }
-        } else {
-          savedSecrets = stored.secrets;
-        }
+        const savedSecrets = stored?.serverSecretVersion === version3 && stored.allProviderKeysHydrated ? stored.secrets : await _ClientVault.loadProviderSecretsRevision(profileId, version3);
         return {
           ...current,
           providerKeys: savedSecrets?.providerKeys ?? {},
@@ -96328,6 +96402,33 @@ var init_vault = __esm({
           openaiCompatible: savedSecrets?.openaiCompatible
         };
       }
+      /** Every provider secret of account revision `version`, read from the server when this page lacks it. */
+      static async loadProviderSecretsRevision(profileId, version3) {
+        let hydrated;
+        try {
+          hydrated = await _ClientVault.hydrateFromServerWithState(profileId, {
+            includeAllProviderKeys: true,
+            requireProviderSecret: false
+          });
+        } catch (error48) {
+          const held = memory.get(profileId);
+          if (isClientRuntimeSecretRateLimitError(error48) && held?.serverSecretVersion === version3) {
+            return held.secrets;
+          }
+          throw error48;
+        }
+        if (hydrated.secretVersion !== version3) {
+          throw new ClientRuntimeSecretRefreshPendingError(hydrated.rateLimited?.retryAfterSeconds ?? null);
+        }
+        if (!hydrated.rateLimited && !memory.has(profileId)) {
+          memory.set(profileId, {
+            secrets: hydrated.secrets ?? { providerKeys: {} },
+            serverSecretVersion: version3,
+            allProviderKeysHydrated: true
+          });
+        }
+        return hydrated.secrets;
+      }
       static async hydrateFromServer(profileId, options) {
         const result = await _ClientVault.hydrateFromServerWithState(profileId, options);
         return result.secrets;
@@ -96349,17 +96450,24 @@ var init_vault = __esm({
             includeAllProviderKeys
           );
         } catch (error48) {
+          const record5 = memory.get(profileId);
           const existing = await _ClientVault.getSecrets(profileId);
           const localValidation = validateDeviceSecrets(existing, validationOptions);
           if (isClientRuntimeSecretRateLimitError(error48) && localValidation.readyForClientRuntime && localValidation.normalized) {
+            const message = error48 instanceof Error ? error48.message : String(error48);
             return {
               secrets: localValidation.normalized,
-              hydrationState: await _ClientVault.getHydrationState(profileId, validationOptions)
+              hydrationState: await _ClientVault.getHydrationState(profileId, validationOptions),
+              // The revision of the copy returned (none for a legacy device copy).
+              secretVersion: record5?.serverSecretVersion ?? null,
+              rateLimited: { retryAfterSeconds: getClientRuntimeSecretRateLimitRetryAfterSeconds(message) ?? 0 }
             };
           }
           throw error48;
         }
         const remoteSecretVersion = getResponseSecretVersion(remoteSecrets);
+        const held = memory.get(profileId);
+        const keepsCompleteCopy = !includeAllProviderKeys && remoteSecretVersion !== null && held?.allProviderKeysHydrated === true && held.serverSecretVersion === remoteSecretVersion;
         const mapped = mapClientRuntimeSecretsToDeviceSecrets(remoteSecrets, {
           activeProvider,
           includeAllProviderKeys
@@ -96371,18 +96479,22 @@ var init_vault = __esm({
         );
         const validation = validateDeviceSecrets(merged, validationOptions);
         if (!validation.normalized || !hasAnySecretValues(validation.normalized)) {
-          _ClientVault.forget(profileId);
+          if (!keepsCompleteCopy) _ClientVault.forget(profileId);
           return {
             secrets: validation.normalized,
-            hydrationState: buildHydrationState(remoteSecrets, validation.normalized, "missing", null, validationOptions)
+            hydrationState: keepsCompleteCopy ? buildHydrationState(remoteSecrets, validation.normalized, "memory", remoteSecretVersion, validationOptions) : buildHydrationState(remoteSecrets, validation.normalized, "missing", null, validationOptions),
+            secretVersion: remoteSecretVersion,
+            rateLimited: null
           };
         }
-        memory.set(profileId, {
-          secrets: validation.normalized,
-          serverSecretVersion: remoteSecretVersion,
-          allProviderKeysHydrated: includeAllProviderKeys
-        });
-        notifyVaultChanged(profileId);
+        if (!keepsCompleteCopy) {
+          memory.set(profileId, {
+            secrets: validation.normalized,
+            serverSecretVersion: remoteSecretVersion,
+            allProviderKeysHydrated: includeAllProviderKeys
+          });
+          notifyVaultChanged(profileId);
+        }
         return {
           secrets: validation.normalized,
           hydrationState: buildHydrationState(
@@ -96391,7 +96503,9 @@ var init_vault = __esm({
             "memory",
             remoteSecretVersion,
             validationOptions
-          )
+          ),
+          secretVersion: remoteSecretVersion,
+          rateLimited: null
         };
       }
       /**
@@ -97804,8 +97918,8 @@ var init_hyperliquid_account_state_adapter = __esm({
         return await Promise.all(reads);
       } catch (error48) {
         controller.abort(error48);
-        const settled = await Promise.allSettled(reads);
-        for (const result of settled) {
+        const settled2 = await Promise.allSettled(reads);
+        for (const result of settled2) {
           if (result.status === "rejected" && result.reason instanceof HyperliquidPublicReadError && result.reason.code === "public_rate_limited") throw result.reason;
         }
         throw error48;
@@ -99042,7 +99156,7 @@ var init_protective_actions = __esm({
           });
           continue;
         }
-        let settled = null;
+        let settled2 = null;
         try {
           await executeClientPreparedProtectiveAction({
             profileId: input.profileId,
@@ -99061,7 +99175,7 @@ var init_protective_actions = __esm({
             clientOrderIds: action.client_order_ids,
             wireAction: canonical,
             onSettled: (mutation) => {
-              settled = mutation;
+              settled2 = mutation;
             }
           });
           result.processed.push({ actionId: action.action_id, actionKind: action.action_kind, outcome: "sent" });
@@ -99073,7 +99187,7 @@ var init_protective_actions = __esm({
             reason: errorCode2(error48) || (error48 instanceof RuntimeExecutionError ? error48.reasonCode : "execution_failed")
           });
         }
-        const settledMutation = settled;
+        const settledMutation = settled2;
         if (settledMutation?.protection) result.protection = settledMutation.protection;
         if (settledMutation && Array.isArray(settledMutation.protective_actions)) {
           actions = settledMutation.protective_actions;
@@ -99215,7 +99329,7 @@ var init_client_exchange_mutations = __esm({
 });
 
 // lib/runtime/execution-guard-contract.ts
-var unitsFromPosition, signedUnitsFromPosition, signedUnitsFromEntryPosition, classifyExecutionIntent, reductionFirstOrder, usdAmount, orderMetadataRetryReason, orderCeilingRefusal, resolveExecutionTarget, decisionOrderSizeAsset, flipExecutionLegs, executedOrderPositionEvent;
+var unitsFromPosition, signedUnitsFromPosition, signedUnitsFromEntryPosition, classifyExecutionIntent, reductionFirstOrder, usdAmount, orderMetadataRetryReason, orderCeilingRefusal, copyClosingSize, copyOrderClosingSize, copyOrderNotionalCap, resolveExecutionTarget, decisionOrderSizeAsset, flipExecutionLegs, executedOrderPositionEvent;
 var init_execution_guard_contract = __esm({
   "lib/runtime/execution-guard-contract.ts"() {
     "use strict";
@@ -99426,6 +99540,10 @@ var init_execution_guard_contract = __esm({
       return null;
     };
     orderCeilingRefusal = (input) => {
+      const closingSide2 = input.side === "sell" && input.currentPositionSize > 0 || input.side === "buy" && input.currentPositionSize < 0;
+      if (input.reduceOnly && closingSide2 && input.size <= Math.abs(input.currentPositionSize)) {
+        return null;
+      }
       const orderNotional = input.size * input.price;
       if (orderNotional > input.maxOrderNotional) {
         return `Order notional ${usdAmount(orderNotional)} exceeds limit ${usdAmount(input.maxOrderNotional)}`;
@@ -99437,6 +99555,23 @@ var init_execution_guard_contract = __esm({
       }
       return null;
     };
+    copyClosingSize = (destinationPosition, destinationDelta) => destinationPosition * destinationDelta >= 0 ? 0 : Math.min(Math.abs(destinationDelta), Math.abs(destinationPosition));
+    copyOrderClosingSize = (input) => {
+      const size = Number.isFinite(input.size) && input.size > 0 ? input.size : 0;
+      if (input.reduceOnly) return size;
+      if (input.actualPosition === null || !Number.isFinite(input.actualPosition)) return 0;
+      const signedSize = String(input.side).trim().toLowerCase() === "buy" ? size : -size;
+      return copyClosingSize(input.actualPosition, signedSize);
+    };
+    copyOrderNotionalCap = (followerCap, platformCap, closingNotional) => {
+      const platform = Number(platformCap);
+      if (!Number.isFinite(platform) || platform <= 0) return null;
+      const closing = Number(closingNotional);
+      const platformBound = (Number.isFinite(closing) && closing > 0 ? closing : 0) + platform;
+      const follower = Number(followerCap);
+      if (!Number.isFinite(follower) || follower <= 0) return platformBound;
+      return Math.min(follower, platformBound);
+    };
     resolveExecutionTarget = (classified, liveSignedUnits, livePositionDirection) => {
       const liveUnits = Number.isFinite(liveSignedUnits) ? Math.trunc(liveSignedUnits) : 0;
       const exactLiveDirection = livePositionDirection == null ? liveUnits > 0 ? 1 : liveUnits < 0 ? -1 : 0 : livePositionDirection;
@@ -105502,7 +105637,7 @@ var init_runtime_execution = __esm({
         const io = nativeProtectionIo(request, read.record.isLong);
         const standby = read.record.standby ?? [];
         if (read.record.phase === "entry_pending" || standby.length > 0) {
-          const settled = await settleNativeProtectionAfterFill({
+          const settled2 = await settleNativeProtectionAfterFill({
             record: read.record,
             settings: nativeSettingsOf(request.executionContext),
             sizeDecimals: request.executionContext.sizeDecimals,
@@ -105510,8 +105645,8 @@ var init_runtime_execution = __esm({
             entryOrderId: read.record.phase === "entry_pending" ? read.record.entryClientOrderId : standby[0].orderId ?? standby[0].clientOrderId,
             io
           });
-          const reports2 = [...settled.reports];
-          let record5 = settled.record;
+          const reports2 = [...settled2.reports];
+          let record5 = settled2.record;
           if (record5 != null && record5.phase !== "entry_pending" && (record5.standby ?? []).length > 0) {
             const kept = await reconcileNativeProtection({
               record: record5,
@@ -108773,6 +108908,7 @@ var init_runtime_execution = __esm({
           price: executionPrice,
           // A flip's close has filled by now: its new position starts from flat.
           currentPositionSize: targetResolution.closeOpposingPosition ? 0 : currentPositionSize,
+          reduceOnly: classified.reduceOnly === true,
           maxOrderNotional: runtime_policy_generated_default2.trading.risk.max_order_notional,
           maxPositionNotional: runtime_policy_generated_default2.trading.risk.max_position_notional
         });
@@ -109244,7 +109380,7 @@ var init_runtime_execution = __esm({
           });
         } else {
           try {
-            const settled = await settleNativeProtectionAfterFill({
+            const settled2 = await settleNativeProtectionAfterFill({
               record: record5,
               settings: nativeSettingsOf(input.executionContext),
               sizeDecimals: input.executionContext.sizeDecimals,
@@ -109252,8 +109388,8 @@ var init_runtime_execution = __esm({
               entryOrderId: confirmedMarketFill.orderId,
               io: nativeProtectionIo(input, record5.isLong)
             });
-            executionReports.push(...settled.reports);
-            if (settled.record != null) record5 = settled.record;
+            executionReports.push(...settled2.reports);
+            if (settled2.record != null) record5 = settled2.record;
           } catch (postEntryProtectionError) {
             if (isClientRuntimeLeaseOwnershipError(postEntryProtectionError)) throw postEntryProtectionError;
             if (nativePassEnded(input, postEntryProtectionError)) {
@@ -109751,7 +109887,7 @@ var init_runtime_execution = __esm({
       let actualPosition = null;
       let desiredPosition = null;
       let exactFullCloseBeforeQuantization = false;
-      let maxOrderNotional = 0;
+      let followerOrderNotionalCap = 0;
       let minOrderNotional = 0;
       let executionReferencePrice = Number(intent.source_price);
       let dispatchedOrder = null;
@@ -109762,13 +109898,21 @@ var init_runtime_execution = __esm({
         desiredPosition = Number(
           record5.target_space === "copied" ? copiedNowServed ? record5.copied_target_after : Number.NaN : record5.desired_destination_position_after
         );
-        maxOrderNotional = Number(
-          reconciliation.max_order_notional_usdc
-        );
+        followerOrderNotionalCap = reconciliation.max_order_notional_usdc;
         minOrderNotional = Number(
           reconciliation.min_notional_usdc
         );
       }
+      const platformOrderNotionalCap = input.config?.copy_trading?.execution?.max_per_intent_order_notional_usdc;
+      let maxOrderNotional = 0;
+      let orderNotionalCapResolved = false;
+      if (copyOrderNotionalCap(followerOrderNotionalCap, platformOrderNotionalCap, 0) === null) {
+        return {
+          status: "failed",
+          orderId: null,
+          message: "Copy Trading platform order notional cap is unavailable."
+        };
+      }
       if (!destinationSide || !Number.isFinite(destinationSize) || destinationSize <= 0) {
         return {
           status: "skipped",
@@ -109844,6 +109988,17 @@ var init_runtime_execution = __esm({
           destinationSize = Math.abs(liveDelta);
           exactFullCloseBeforeQuantization = Math.abs(desiredPosition) <= tolerance && Math.abs(actualPosition) > tolerance;
           reduceOnly = Math.abs(desiredPosition) <= tolerance || (actualPosition > 0 && liveDelta < 0 && desiredPosition >= 0 || actualPosition < 0 && liveDelta > 0 && desiredPosition <= 0);
+          maxOrderNotional = copyOrderNotionalCap(
+            followerOrderNotionalCap,
+            platformOrderNotionalCap,
+            copyOrderClosingSize({
+              side: destinationSide,
+              size: destinationSize,
+              reduceOnly,
+              actualPosition
+            }) * executionReferencePrice
+          ) ?? 0;
+          orderNotionalCapResolved = true;
           if (Number.isFinite(maxOrderNotional) && maxOrderNotional > 0) {
             destinationSize = Math.min(
               destinationSize,
@@ -109863,6 +110018,18 @@ var init_runtime_execution = __esm({
           };
         }
         const referencePrice = executionReferencePrice;
+        if (!orderNotionalCapResolved) {
+          maxOrderNotional = copyOrderNotionalCap(
+            followerOrderNotionalCap,
+            platformOrderNotionalCap,
+            copyOrderClosingSize({
+              side: destinationSide,
+              size: destinationSize,
+              reduceOnly,
+              actualPosition: null
+            }) * referencePrice
+          ) ?? 0;
+        }
         if (Number.isFinite(maxOrderNotional) && maxOrderNotional > 0 && Number.isFinite(referencePrice) && referencePrice > 0 && sizePrecision.quantizedSize * referencePrice > maxOrderNotional + COPY_TRADING_NOTIONAL_CAP_TOLERANCE_USD) {
           const cappedSize = Math.min(destinationSize, maxOrderNotional / referencePrice);
           sizePrecision = {
@@ -110489,7 +110656,7 @@ var init_periodic_schedule = __esm({
 });
 
 // lib/runtime/provider-observability.ts
-var MAX_DIAGNOSTIC_LIST_ITEMS, record4, ERROR_TOKEN, ERROR_DOMAIN, ERROR_INPUT, ERROR_REDACTIONS, normalizeProviderError, identifier, count3, normalizeProviderDiagnostics, providerRequestId, hash4, googleCredentialDiagnostics, extractProviderDiagnostics, estimateRequestInputTokens;
+var MAX_DIAGNOSTIC_LIST_ITEMS, record4, ERROR_TOKEN, ERROR_DOMAIN, ERROR_INPUT, ERROR_ECHO_REDACTIONS, ERROR_PROSE_REDACTIONS, CONTROL_CHARACTER_RUN, WHITESPACE_RUN, collapseProse, settled, REDACTED_MARKER_START, boundedMessage, normalizeProviderError, identifier, count3, normalizeProviderDiagnostics, providerRequestId, hash4, googleCredentialDiagnostics, extractProviderDiagnostics, estimateRequestInputTokens;
 var init_provider_observability = __esm({
   "lib/runtime/provider-observability.ts"() {
     "use strict";
@@ -110497,34 +110664,68 @@ var init_provider_observability = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_constants();
+    init_runtime_redaction();
     MAX_DIAGNOSTIC_LIST_ITEMS = PROVIDER_DIAGNOSTIC_LIMITS.MAX_LIST_ITEMS;
     record4 = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : {};
     ERROR_TOKEN = /^[A-Z][A-Z0-9_]{0,63}$/;
     ERROR_DOMAIN = /^[a-z0-9][a-z0-9.-]{0,127}$/;
-    ERROR_INPUT = /\b(?:prompt|contents|messages|system[_ ]?instruction|tools|request\s+body|input(?:\s+text)?)\s*[:=]|[{}]|```/i;
-    ERROR_REDACTIONS = [
-      [/https?:\/\/[^\s<>"']+/gi, "[REDACTED_URL]"],
+    ERROR_INPUT = new RegExp(
+      String.raw`\b(?:prompt|contents|messages|system[_ ]?instruction|tools|request${WHITESPACE_CLASS}+body|input(?:${WHITESPACE_CLASS}+text)?)${WHITESPACE_CLASS}*[:=]|[{}]|` + "```",
+      "i"
+    );
+    ERROR_ECHO_REDACTIONS = [
+      [/https?:\/\/[^<>"'\t\n\v\f\r \x1c-\x1f\x85\xa0\u1680\u2000-\u200a\u2028\u2029\u202f\u205f\u3000]+/gi, "[REDACTED_URL]"],
       [/\b[A-Za-z0-9.!#$%&'*+/=?^_`{|}~-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g, "[REDACTED_EMAIL]"],
-      [/\bBearer\s+[^\s,;]+/gi, "Bearer [REDACTED]"],
-      [/\b(?:api[_ -]?key|x-goog-api-key|authorization|access[_ -]?token|token|secret|password|private[_ -]?key|key)\s*[:=]\s*(?:"[^"]*"|'[^']*'|[^\s,;]+)/gi, "[REDACTED]"],
-      [/\b(?:AIza[A-Za-z0-9_-]+|sk-[A-Za-z0-9_-]+|AQ\.[A-Za-z0-9._-]+|0x[a-fA-F0-9]{64})\b/g, "[REDACTED]"],
+      // A URL whose scheme a key form already took ("AIzahttps://..." is read as
+      // a key first): the rest is still an echoed URL.
+      [/\[REDACTED\]:\/\/[^<>"'\t\n\v\f\r \x1c-\x1f\x85\xa0\u1680\u2000-\u200a\u2028\u2029\u202f\u205f\u3000]+/g, "[REDACTED_URL]"]
+    ];
+    ERROR_PROSE_REDACTIONS = [
+      ...ERROR_ECHO_REDACTIONS,
       [/"[^"]*"|'[^'\r\n]*'/g, "[REDACTED]"]
     ];
+    CONTROL_CHARACTER_RUN = /[\x00-\x1f\x7f]+/g;
+    WHITESPACE_RUN = new RegExp(`${WHITESPACE_CLASS}+`, "g");
+    collapseProse = (value) => value.replace(CONTROL_CHARACTER_RUN, " ").replace(WHITESPACE_RUN, " ").trim();
+    settled = (value) => {
+      let current = value;
+      let previous = null;
+      while (current !== previous) {
+        previous = current;
+        for (const [pattern, replacement] of ERROR_PROSE_REDACTIONS) current = current.replace(pattern, replacement);
+        current = sanitizeRuntimeDiagnosticValue(collapseProse(current));
+      }
+      return current;
+    };
+    REDACTED_MARKER_START = "[REDACTED";
+    boundedMessage = (value) => {
+      const characters = Array.from(value);
+      if (characters.length <= PROVIDER_DIAGNOSTIC_LIMITS.MAX_ERROR_MESSAGE_CHARS) return value;
+      let cut = characters.slice(0, PROVIDER_DIAGNOSTIC_LIMITS.MAX_ERROR_MESSAGE_CHARS).join("");
+      const marker = cut.lastIndexOf(REDACTED_MARKER_START);
+      if (marker !== -1 && value.indexOf("]", marker) >= cut.length) cut = cut.slice(0, marker);
+      return cut.replace(/ +$/, "");
+    };
     normalizeProviderError = (value) => {
       const raw = record4(value);
       const result = {};
       if (typeof raw.code === "number" && Number.isInteger(raw.code) && raw.code >= HTTP_STATUS_MIN && raw.code <= HTTP_STATUS_MAX) result.code = raw.code;
       if (typeof raw.status === "string" && ERROR_TOKEN.test(raw.status)) result.status = raw.status;
-      if (typeof raw.message === "string" && raw.message.trim()) {
+      if (typeof raw.message === "string" && collapseProse(raw.message)) {
         let message = raw.message;
-        if (Array.from(message).length > PROVIDER_DIAGNOSTIC_LIMITS.MAX_ERROR_INPUT_CHARS || ERROR_INPUT.test(message)) message = "[REDACTED_INPUT]";
+        if (Array.from(message).length > PROVIDER_DIAGNOSTIC_LIMITS.MAX_ERROR_INPUT_CHARS || ERROR_INPUT.test(message) || ERROR_INPUT.test(collapseProse(message))) message = "[REDACTED_INPUT]";
         else {
-          for (const [pattern, replacement] of ERROR_REDACTIONS) message = message.replace(pattern, replacement);
-          message = message.replace(/[\x00-\x1f\x7f]+/g, " ").replace(/\s+/g, " ").trim();
-        }
-        const characters = Array.from(message);
-        result.message = characters.slice(0, PROVIDER_DIAGNOSTIC_LIMITS.MAX_ERROR_MESSAGE_CHARS).join("");
-        if (characters.length > PROVIDER_DIAGNOSTIC_LIMITS.MAX_ERROR_MESSAGE_CHARS || raw.message_truncated === true) result.message_truncated = true;
+          message = sanitizeRuntimeDiagnosticValue(message);
+          for (const [pattern, replacement] of ERROR_ECHO_REDACTIONS) message = message.replace(pattern, replacement);
+          message = sanitizeRuntimeDiagnosticValue(message);
+          for (const [pattern, replacement] of ERROR_PROSE_REDACTIONS) message = message.replace(pattern, replacement);
+          message = settled(sanitizeRuntimeDiagnosticValue(collapseProse(sanitizeRuntimeDiagnosticValue(message))));
+        }
+        const fullLength = Array.from(message).length;
+        let bounded = boundedMessage(message);
+        while (settled(bounded) !== bounded) bounded = Array.from(bounded).slice(0, -1).join("").replace(/ +$/, "");
+        result.message = bounded;
+        if (fullLength > PROVIDER_DIAGNOSTIC_LIMITS.MAX_ERROR_MESSAGE_CHARS || raw.message_truncated === true) result.message_truncated = true;
       }
       if (Array.isArray(raw.details)) {
         const details = raw.details.slice(0, PROVIDER_DIAGNOSTIC_LIMITS.MAX_ERROR_DETAILS).map((value2) => {
@@ -116739,7 +116940,7 @@ var init_provider_client = __esm({
         return payload.message.trim();
       }
       if (rawText) {
-        return rawText.replace(/\s+/g, " ").slice(0, PROVIDER_ERROR_RAW_TEXT_MAX_CHARS);
+        return sanitizeRuntimeDiagnosticValue(rawText).replace(/\s+/g, " ").slice(0, PROVIDER_ERROR_RAW_TEXT_MAX_CHARS);
       }
       return "";
     };
@@ -120791,7 +120992,7 @@ var init_local_analysis = __esm({
       return numeric2;
     };
     compactSnippet = (value, max2 = RUNTIME_DEBUG_SNIPPET_CHARS) => {
-      const text = String(value ?? "").replace(/\s+/g, " ").trim();
+      const text = sanitizeRuntimeDiagnosticValue(String(value ?? "").replace(/\s+/g, " ")).trim();
       if (!text) {
         return "";
       }
@@ -121507,7 +121708,7 @@ ${reviewOutputContract}`;
       return REVIEW_FAILURE_SQL_STATEMENT_PATTERN.test(lowered) && REVIEW_FAILURE_SCHEMA_DISCLOSURE_TOKENS.some((token) => lowered.includes(token));
     };
     summarizeReviewFailureExplanation = (detail) => {
-      const message = String(detail ?? "").trim();
+      const message = sanitizeRuntimeDiagnosticValue(String(detail ?? "")).trim();
       if (!message) {
         return "The review step stopped before VTX received error details.";
       }
@@ -127306,10 +127507,10 @@ var init_engine = __esm({
             outcome: "error"
           });
           await new Promise((resolve14) => {
-            let settled = false;
+            let settled2 = false;
             const finish = () => {
-              if (settled) return;
-              settled = true;
+              if (settled2) return;
+              settled2 = true;
               globalThis.clearTimeout(timeoutId);
               signal.removeEventListener("abort", finish);
               resolve14();
@@ -128252,14 +128453,14 @@ var init_engine = __esm({
         const loop = this._executionLoopPromise;
         if (!loop) return true;
         let timer;
-        const settled = await Promise.race([
+        const settled2 = await Promise.race([
           loop.then(() => true, () => true),
           new Promise((resolve14) => {
             timer = setTimeout(() => resolve14(false), timeoutMs);
           })
         ]);
         clearTimeout(timer);
-        return settled;
+        return settled2;
       }
       get active() {
         return this._startPromise !== null || this._isStopping || this._state === "running" || this._state === "stale" || this._state === "offline";
@@ -129390,10 +129591,10 @@ var init_engine = __esm({
           throw signal.reason ?? createStopAbortError("trade_sync_settlement_cancelled");
         }
         await new Promise((resolve14) => {
-          let settled = false;
+          let settled2 = false;
           const finish = () => {
-            if (settled) return;
-            settled = true;
+            if (settled2) return;
+            settled2 = true;
             globalThis.clearTimeout(timeoutId);
             signal?.removeEventListener("abort", finish);
             resolve14();
@@ -130014,7 +130215,9 @@ var init_engine = __esm({
               reviewModelResponse: result.reviewModelResponse,
               primaryReasoningContent: result.primaryReasoningContent,
               reviewReasoningContent: result.reviewReasoningContent,
-              reviewFailureReason: result.reviewFailureReason,
+              // Raw provider error text never leaves the device; the server
+              // stores the reason through the same redaction contract.
+              reviewFailureReason: result.reviewFailureReason == null ? result.reviewFailureReason : sanitizeRuntimeDiagnosticValue(result.reviewFailureReason),
               systemPrompt: result.systemPrompt,
               userPrompt: result.userPrompt,
               reviewSystemPrompt: result.reviewSystemPrompt,