@vtxmacro/cli 2026.10.58 → 2026.10.60

package/bin/vtx.js

@@ -122,7 +122,7 @@ var init_routing = __esm({
 var agent_cli_release_default;
 var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
-    agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.58", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
+    agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.60", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
   }
 });
 
@@ -1109,6 +1109,7 @@ var init_runtime_policy_generated = __esm({
           model_catalog_read_lead_divisor: 2,
           agent_wake_summary_max_chars: 2e3,
           drain_timeout_ms: 3e4,
+          undispatched_adapter_failure_restart_threshold: 3,
           remote_retry_limit: 3,
           minimum_sleep_ms: 10,
           heartbeat_gap_diagnostic_min_ms: 1e4,
@@ -1535,6 +1536,19 @@ var init_runtime_policy_generated = __esm({
         error_details: {
           review_failure_message_max_length: 220
         }
+      },
+      llm: {
+        provider_diagnostics: {
+          reply_body_max_chars: 65536,
+          reply_max_headers: 64,
+          reply_header_name_parts: [
+            "retry-after",
+            "ratelimit",
+            "rate-limit",
+            "quota",
+            "balance"
+          ]
+        }
       }
     };
   }
@@ -3087,7 +3101,7 @@ var init_shared_contracts_generated = __esm({
 });
 
 // lib/constants.ts
-var MS_PER_SECOND, SECONDS_PER_MINUTE, MINUTES_PER_HOUR, HOURS_PER_DAY, DAYS_PER_WEEK, MS_PER_MINUTE, SECONDS_PER_HOUR, SECONDS_PER_DAY, SECONDS_PER_WEEK, MINUTES_PER_DAY, MINUTES_PER_WEEK, MS_PER_HOUR, MS_PER_DAY, READ_STAMP_TIE_MS, READ_STAMP_STEP_BACK_MS, CLOCK_FIELD_DIGITS, BACKOFF_GROWTH_FACTOR, BYTES_PER_KIB, BYTES_PER_MIB, BITS_PER_BYTE, BYTE_MASK, OWNER_ONLY_FILE_MODE, OWNER_ONLY_DIRECTORY_MODE, GROUP_OTHER_PERMISSION_BITS, DECIMAL_RADIX, HEX_RADIX, BASE36_RADIX, BYTE_HEX_DIGITS, UINT32_HEX_DIGITS, RANDOM_FRACTION_PREFIX_LENGTH, PERCENT_SCALE, MIDPOINT_DIVISOR, FNV1A_32_OFFSET_BASIS, FNV1A_32_PRIME, JSON_INDENT_SPACES, INT32_MIN, INT32_MAX, SET_TIMEOUT_MAX_DELAY_MS, FLOAT_EQUALITY_EPSILON, POSITION_SIZE_EPSILON, HTTP_STATUS, HTTP_STATUS_MIN, HTTP_STATUS_MAX, HTTP_CLIENT_ERROR_MIN, HTTP_SERVER_ERROR_MIN, PROMPT_RESCUE_ASKS_PER_CYCLE_BUILD, AI_COST_ESTIMATE_PERIOD_DAYS, SECONDS_PER_AI_COST_ESTIMATE_PERIOD, DATE_FIELD_DIGITS, NODE_ARGV_COMMAND_ARGS_START, EXIT_CODE_TEMPFAIL, SHA256_INITIAL_STATE, SHA256_ROUND_CONSTANTS, SHA256, UINT64_HIGH_WORD_DIVISOR, CANONICAL_BASE64URL, INFERENCE_ENVELOPE_CRYPTO, JSON_RPC_ERROR_CODES, INFERENCE_MCP_SCHEMA_PROBE_MAX_DEPTH, INFERENCE_HOST_PROCESS_LOCK_RECORD_SCHEMA_VERSION, NATIVE_PROTECTION_RECORD_WITH_LOTS_VERSION, INFERENCE_HOST_RECLAIM_GUARD_CREATE_PASSES, LINUX_PROC_STAT_COMM_TERMINATOR_CHARS, INFERENCE_HOST_RANDOM_BYTES, INFERENCE_OAUTH_TOKEN_MAX_LENGTH, INFERENCE_CREDENTIAL_WINDOWS_NOT_FOUND_EXIT_CODE, MACOS_SECURITY_ITEM_NOT_FOUND_EXIT_CODE, INFERENCE_CREDENTIAL_LABEL_ACCOUNT_KEY_CHARS, INFERENCE_HOST_STABLE_OPERATION_ID_HASH_CHARS, INFERENCE_HOST_DRAIN_PRIORITY, INFERENCE_JOB_CLAIM_SCHEMA_VERSION, INFERENCE_HOST_WINDOWS_TASK_IDENTITY_MAX_CHARS, INFERENCE_HOST_OWNER_ONLY_EXECUTABLE_MODE, WINDOWS_TASKKILL_PROCESS_NOT_FOUND_EXIT_CODE, INFERENCE_HOST_CLI_MAX_SERVICE_POSITIONALS, INFERENCE_HOST_CLI_MAX_COMMAND_POSITIONALS, INFERENCE_HOST_DISPLAY_NAME_MAX_CHARS, INFERENCE_HOST_REVOCATION_CHECKPOINT_MAX_CHARS, INFERENCE_HOST_MODEL_ID_MAX_CHARS, CODEX_RECOVERY_RECEIPT_MAX_CHARS, CODEX_HOSTED_ATTEMPT_PATH_SEGMENTS, CODEX_GUARDIAN_PROCESS_TOKEN_BYTES, CODEX_RATE_LIMIT_EXHAUSTED_PERCENT, INFERENCE_HOST_PROXY_TOKEN_BYTES, AGENT_TOOL_SERVER_TOKEN_BYTES, GROK_NATIVE_SESSION_GROUP_NAME_MAX_CHARS, GROK_POLICY_TRANSPORT_MAX_BYTES, EXO_POLICY_MAX_TOOL_ROUNDS, EXO_POLICY_MAX_MODELS, EXO_POLICY_MODEL_NAME_MAX_CHARS, CLAUDE_CODE_POLICY_MAX_MODELS, CLAUDE_CODE_POLICY_MODEL_NAME_MAX_CHARS, CLAUDE_CODE_POLICY_MAX_TURNS, ANTHROPIC_SCHEMA_PROPERTY_NAME_MAX_CHARS, EXO_RUNTIME_VERSION_COMMIT_CHARS, PI_QUALIFIED_MODEL_ID_MAX_CHARS, PI_STRUCTURED_OUTPUT_MAX_DEPTH, PI_STRUCTURED_OUTPUT_MAX_PROPERTIES, INFERENCE_HOST_API_KEY_MIN_CHARS, INFERENCE_HOST_API_KEY_MAX_BYTES, INFERENCE_HOST_API_KEY_IDENTITY_HEX_CHARS, DEEPSEEK_HARNESS_NODE_LTS_MAJOR, DEEPSEEK_HARNESS_NODE_LTS_MIN_MINOR, DEEPSEEK_HARNESS_NODE_CURRENT_MAJOR, PROMPT_FIXED_DIGITS, PROMPT_SIGNIFICANT_DIGITS, PROMPT_NUMBER_MAX_DIGITS, PROMPT_RELATIVE_VOLUME_DIGITS, BINARY_RADIX, PROMPT_PRICE_INTEGER_THRESHOLD, PROMPT_MARGIN_UTILIZATION_DECIMALS, PROMPT_SYMBOL_MAX_CHARS, HALF_UP_ROUNDING_OFFSET, PROMPT_ENTRY_PRICE_MATCH_ABS_TOLERANCE, PROMPT_ENTRY_PRICE_MATCH_REL_TOLERANCE, DECISION_OUTPUT_EXAMPLE_TRADABILITY, IEEE754_MANTISSA_BITS, IEEE754_EXPONENT_BIAS, IEEE754_EXPONENT_MASK, IEEE754_HIGH_MANTISSA_MASK, IEEE754_HIGH_WORD_EXPONENT_SHIFT, IEEE754_SIGN_BIT_SHIFT, UINT32_RANGE, PYTHON_SQRT_BIT_WIDTH, PYTHON_REPR_EXPONENT_MIN_DECPT, PYTHON_REPR_EXPONENT_MAX_DECPT, PYTHON_REPR_MIN_EXPONENT_DIGITS, TO_FIXED_MAX_MAGNITUDE, UNICODE_DEFAULT_IGNORABLE_RANGES_OUTSIDE_CATEGORIES, CALENDAR_FIELD_MAX_CHARS, INDICATOR_RSI_PERIOD, INDICATOR_ATR_PERIOD, INDICATOR_MACD_FAST_PERIOD, INDICATOR_MACD_SLOW_PERIOD, INDICATOR_MACD_SIGNAL_PERIOD, INDICATOR_BOLLINGER_PERIOD, INDICATOR_BOLLINGER_STD_DEV, INDICATOR_OSCILLATOR_MAX, PROMPT_METRIC_DECIMALS, CENT_DECIMALS, REGIME_ADX_CHOP_DECIMALS, FILL_SIZE_MATCH_TOLERANCE, PERFORMANCE_HOLD_MINUTES_DECIMALS, SERIES_CHANGE_MIN_POINTS, INDICATOR_ADX_PERIOD, INDICATOR_CHOP_PERIOD, ADX_WARMUP_PERIODS, WINDOW_FEATURES_MIN_CANDLES, WINDOW_FEATURES_PIVOT_NEIGHBOR_DISTANCE, FRACTAL_SIDES, REGRESSION_MIN_POINTS, SAMPLE_STDEV_MIN_POINTS, WINDOW_FEATURES_SLOPE_DECIMALS, WINDOW_FEATURES_R_SQUARED_DECIMALS, WINDOW_FEATURES_Z_SCORE_DECIMALS, WINDOW_FEATURES_GREEN_RATIO_DECIMALS, WINDOW_FEATURES_ATR_PERCENT_DECIMALS, EMA_SMOOTHING_NUMERATOR, PROMPT_EMA_PERIODS, JSON_UNICODE_ESCAPE_PREFIX_LENGTH, JSON_UNICODE_ESCAPE_HEX_DIGITS, ASCII_FIRST_PRINTABLE_CODE, ASCII_LAST_PRINTABLE_CODE, JSON_CONTROL_CHARACTER_MAX, RUNTIME_DEBUG_SNIPPET_CHARS, RUNTIME_DEBUG_PROMPT_SNIPPET_CHARS, RUNTIME_DEBUG_TOKEN_PREFIX_CHARS, RUNTIME_DEBUG_USD_DECIMALS, RUNTIME_LATENCY_SECONDS_DECIMALS, AI_SCHEDULE_CLOCK_PARTS, ESTIMATED_CHARS_PER_TOKEN, PROVIDER_ERROR_RAW_TEXT_MAX_CHARS, AI_CALL_COST_DECIMALS, PROVIDER_DIAGNOSTIC_LIMITS, AI_INVOCATION_CONTRACT_VERSION, AI_INVOCATION_TELEMETRY_LIMITS, PROVIDER_USAGE_DETAIL_LIMITS, HYPERLIQUID_TIF_GTC, HYPERLIQUID_TPSL_BATCH_MIN_ORDERS, HYPERLIQUID_USER_FILLS_PROVIDER_PAGE_CAP, HYPERLIQUID_CANDLE_SNAPSHOT_BASE_WEIGHT, HYPERLIQUID_CANDLE_SNAPSHOT_ROWS_PER_WEIGHT, HYPERLIQUID_CANDLE_SNAPSHOT_MAX_ROWS, HYPERLIQUID_ROW_WEIGHTED_INFO_REQUESTS, HYPERLIQUID_ROW_WEIGHTED_INFO_BASE_WEIGHT, HYPERLIQUID_INFO_ROWS_PER_EXTRA_WEIGHT, HYPERLIQUID_PUBLIC_READ_WINDOWS_KEPT, CLIENT_RUNTIME_NOTE_GAP_MAX_LOOPS, HYPERLIQUID_META_AND_ASSET_CTXS_PARTS, HYPERLIQUID_SIDE_PAIR_LENGTH, HYPERLIQUID_SIGNED_SIZE_MATCH_EXTRA_DECIMALS, HYPERLIQUID_OPEN_ORDERS_MAX_NESTING_DEPTH, ACCOUNT_PAYLOAD_MODE_SEARCH_MAX_DEPTH, HYPERLIQUID_ACCOUNT_ROUNDING_DECIMALS, HYPERLIQUID_UNREALIZED_PNL_ZERO_TOLERANCE, HYPERLIQUID_MAX_DEPLOYER_FEE_SCALE, HYPERLIQUID_DEPLOYER_FEE_SCALE_MULTIPLIER, HYPERLIQUID_GROWTH_MODE_FEE_FACTOR, HYPERLIQUID_ALIGNED_QUOTE_NON_DEPLOYER_FEE_FACTOR, HYPERLIQUID_CLOSE_SIZE_RELATIVE_TOLERANCE, HYPERLIQUID_POSITION_SIZE_MATCH_ABS_TOLERANCE, HYPERLIQUID_POSITION_SIZE_MATCH_RELATIVE_TOLERANCE, HYPERLIQUID_LOT_FLOOR_NOISE_DECIMALS, HYPERLIQUID_RECOVERY_BACKOFF_MAX_EXPONENT, HYPERLIQUID_RECOVERY_CONCURRENCY_GROWTH_FACTOR, UUID_BYTES, UUID_HEX_GROUP_ENDS, MSGPACK, CLIENT_RUNTIME_PROVIDER_ATTEMPT_SUMMARY_MAX_CHARS, CLIENT_RUNTIME_HL_REQUEST_TYPE_MAX_CHARS, CLIENT_RUNTIME_DRAWDOWN_DEBUG_DECIMALS, CLIENT_PROTECTIVE_GROUP_VERSION, CLIENT_PROTECTIVE_TPSL_PAIR_LEGS, CLIENT_PROTECTIVE_FILL_MATCH_ABS_TOLERANCE, CLIENT_PROTECTIVE_FILL_MATCH_REL_TOLERANCE, CLIENT_CLOSE_FILL_EPSILON_ULPS, COPY_TRADING_SIZE_EPSILON, COPY_TRADING_RELATIVE_SIZE_TOLERANCE, COPY_TRADING_NOTIONAL_CAP_TOLERANCE_USD, CLIENT_ACCOUNT_PNL_NONZERO_MIN_USD, RUNTIME_PORTFOLIO_PERIOD_ENTRY_LENGTH, CLIENT_EXCHANGE_RECONCILIATION_MAX_DELAY_MS, RFC1918_172_BLOCK_SECOND_OCTET, AGENT_CLI_TAKEOVER_REQUIRED_EXIT_CODE, EXIT_CODE_INTERRUPTED, EXIT_CODE_SIGNAL_BASE, AI_SNAPSHOT_COMPACT_TRANSPORT_VERSION, CLIENT_PROTECTION_CAPABILITY_VERSION, AI_SNAPSHOT_PACKED_FIELDS, AI_SNAPSHOT_PACKED_ENTRY_FIELDS, TOKENS_PER_MILLION, RENDER_DEBUG_ID_RANDOM_CHARS;
+var MS_PER_SECOND, SECONDS_PER_MINUTE, MINUTES_PER_HOUR, HOURS_PER_DAY, DAYS_PER_WEEK, MS_PER_MINUTE, SECONDS_PER_HOUR, SECONDS_PER_DAY, SECONDS_PER_WEEK, MINUTES_PER_DAY, MINUTES_PER_WEEK, MS_PER_HOUR, MS_PER_DAY, READ_STAMP_TIE_MS, READ_STAMP_STEP_BACK_MS, CLOCK_FIELD_DIGITS, BACKOFF_GROWTH_FACTOR, BYTES_PER_KIB, BYTES_PER_MIB, BITS_PER_BYTE, BYTE_MASK, OWNER_ONLY_FILE_MODE, OWNER_ONLY_DIRECTORY_MODE, GROUP_OTHER_PERMISSION_BITS, DECIMAL_RADIX, HEX_RADIX, BASE36_RADIX, BYTE_HEX_DIGITS, UINT32_HEX_DIGITS, RANDOM_FRACTION_PREFIX_LENGTH, PERCENT_SCALE, MIDPOINT_DIVISOR, FNV1A_32_OFFSET_BASIS, FNV1A_32_PRIME, JSON_INDENT_SPACES, INT32_MIN, INT32_MAX, SET_TIMEOUT_MAX_DELAY_MS, FLOAT_EQUALITY_EPSILON, POSITION_SIZE_EPSILON, HTTP_STATUS, HTTP_STATUS_MIN, HTTP_STATUS_MAX, HTTP_CLIENT_ERROR_MIN, HTTP_SERVER_ERROR_MIN, PROMPT_RESCUE_ASKS_PER_CYCLE_BUILD, AI_COST_ESTIMATE_PERIOD_DAYS, SECONDS_PER_AI_COST_ESTIMATE_PERIOD, DATE_FIELD_DIGITS, NODE_ARGV_COMMAND_ARGS_START, EXIT_CODE_TEMPFAIL, SHA256_INITIAL_STATE, SHA256_ROUND_CONSTANTS, SHA256, UINT64_HIGH_WORD_DIVISOR, CANONICAL_BASE64URL, INFERENCE_ENVELOPE_CRYPTO, JSON_RPC_ERROR_CODES, INFERENCE_MCP_SCHEMA_PROBE_MAX_DEPTH, INFERENCE_HOST_PROCESS_LOCK_RECORD_SCHEMA_VERSION, NATIVE_PROTECTION_RECORD_WITH_LOTS_VERSION, INFERENCE_HOST_RECLAIM_GUARD_CREATE_PASSES, LINUX_PROC_STAT_COMM_TERMINATOR_CHARS, INFERENCE_HOST_RANDOM_BYTES, INFERENCE_OAUTH_TOKEN_MAX_LENGTH, INFERENCE_CREDENTIAL_WINDOWS_NOT_FOUND_EXIT_CODE, MACOS_SECURITY_ITEM_NOT_FOUND_EXIT_CODE, INFERENCE_CREDENTIAL_LABEL_ACCOUNT_KEY_CHARS, INFERENCE_HOST_STABLE_OPERATION_ID_HASH_CHARS, INFERENCE_HOST_DRAIN_PRIORITY, INFERENCE_JOB_CLAIM_SCHEMA_VERSION, INFERENCE_HOST_WINDOWS_TASK_IDENTITY_MAX_CHARS, INFERENCE_HOST_OWNER_ONLY_EXECUTABLE_MODE, WINDOWS_TASKKILL_PROCESS_NOT_FOUND_EXIT_CODE, INFERENCE_HOST_CLI_MAX_SERVICE_POSITIONALS, INFERENCE_HOST_CLI_MAX_COMMAND_POSITIONALS, INFERENCE_HOST_DISPLAY_NAME_MAX_CHARS, INFERENCE_HOST_REVOCATION_CHECKPOINT_MAX_CHARS, INFERENCE_HOST_MODEL_ID_MAX_CHARS, CODEX_RECOVERY_RECEIPT_MAX_CHARS, CODEX_HOSTED_ATTEMPT_PATH_SEGMENTS, INFERENCE_HOST_TEMP_FOLDERS, INFERENCE_HOST_FAILURE_CAUSE_MAX_DEPTH, CODEX_GUARDIAN_PROCESS_TOKEN_BYTES, CODEX_RATE_LIMIT_EXHAUSTED_PERCENT, INFERENCE_HOST_PROXY_TOKEN_BYTES, AGENT_TOOL_SERVER_TOKEN_BYTES, GROK_NATIVE_SESSION_GROUP_NAME_MAX_CHARS, GROK_POLICY_TRANSPORT_MAX_BYTES, EXO_POLICY_MAX_TOOL_ROUNDS, EXO_POLICY_MAX_MODELS, EXO_POLICY_MODEL_NAME_MAX_CHARS, CLAUDE_CODE_POLICY_MAX_MODELS, CLAUDE_CODE_POLICY_MODEL_NAME_MAX_CHARS, CLAUDE_CODE_POLICY_MAX_TURNS, ANTHROPIC_SCHEMA_PROPERTY_NAME_MAX_CHARS, EXO_RUNTIME_VERSION_COMMIT_CHARS, PI_QUALIFIED_MODEL_ID_MAX_CHARS, PI_STRUCTURED_OUTPUT_MAX_DEPTH, PI_STRUCTURED_OUTPUT_MAX_PROPERTIES, INFERENCE_HOST_API_KEY_MIN_CHARS, INFERENCE_HOST_API_KEY_MAX_BYTES, INFERENCE_HOST_API_KEY_IDENTITY_HEX_CHARS, DEEPSEEK_HARNESS_NODE_LTS_MAJOR, DEEPSEEK_HARNESS_NODE_LTS_MIN_MINOR, DEEPSEEK_HARNESS_NODE_CURRENT_MAJOR, PROMPT_FIXED_DIGITS, PROMPT_SIGNIFICANT_DIGITS, PROMPT_NUMBER_MAX_DIGITS, PROMPT_RELATIVE_VOLUME_DIGITS, BINARY_RADIX, PROMPT_PRICE_INTEGER_THRESHOLD, PROMPT_MARGIN_UTILIZATION_DECIMALS, PROMPT_SYMBOL_MAX_CHARS, HALF_UP_ROUNDING_OFFSET, PROMPT_ENTRY_PRICE_MATCH_ABS_TOLERANCE, PROMPT_ENTRY_PRICE_MATCH_REL_TOLERANCE, DECISION_OUTPUT_EXAMPLE_TRADABILITY, IEEE754_MANTISSA_BITS, IEEE754_EXPONENT_BIAS, IEEE754_EXPONENT_MASK, IEEE754_HIGH_MANTISSA_MASK, IEEE754_HIGH_WORD_EXPONENT_SHIFT, IEEE754_SIGN_BIT_SHIFT, UINT32_RANGE, PYTHON_SQRT_BIT_WIDTH, PYTHON_REPR_EXPONENT_MIN_DECPT, PYTHON_REPR_EXPONENT_MAX_DECPT, PYTHON_REPR_MIN_EXPONENT_DIGITS, TO_FIXED_MAX_MAGNITUDE, UNICODE_DEFAULT_IGNORABLE_RANGES_OUTSIDE_CATEGORIES, CALENDAR_FIELD_MAX_CHARS, INDICATOR_RSI_PERIOD, INDICATOR_ATR_PERIOD, INDICATOR_MACD_FAST_PERIOD, INDICATOR_MACD_SLOW_PERIOD, INDICATOR_MACD_SIGNAL_PERIOD, INDICATOR_BOLLINGER_PERIOD, INDICATOR_BOLLINGER_STD_DEV, INDICATOR_OSCILLATOR_MAX, PROMPT_METRIC_DECIMALS, CENT_DECIMALS, REGIME_ADX_CHOP_DECIMALS, FILL_SIZE_MATCH_TOLERANCE, PERFORMANCE_HOLD_MINUTES_DECIMALS, SERIES_CHANGE_MIN_POINTS, INDICATOR_ADX_PERIOD, INDICATOR_CHOP_PERIOD, ADX_WARMUP_PERIODS, WINDOW_FEATURES_MIN_CANDLES, WINDOW_FEATURES_PIVOT_NEIGHBOR_DISTANCE, FRACTAL_SIDES, REGRESSION_MIN_POINTS, SAMPLE_STDEV_MIN_POINTS, WINDOW_FEATURES_SLOPE_DECIMALS, WINDOW_FEATURES_R_SQUARED_DECIMALS, WINDOW_FEATURES_Z_SCORE_DECIMALS, WINDOW_FEATURES_GREEN_RATIO_DECIMALS, WINDOW_FEATURES_ATR_PERCENT_DECIMALS, EMA_SMOOTHING_NUMERATOR, PROMPT_EMA_PERIODS, JSON_UNICODE_ESCAPE_PREFIX_LENGTH, JSON_UNICODE_ESCAPE_HEX_DIGITS, ASCII_FIRST_PRINTABLE_CODE, ASCII_LAST_PRINTABLE_CODE, JSON_CONTROL_CHARACTER_MAX, RUNTIME_DEBUG_SNIPPET_CHARS, RUNTIME_DEBUG_PROMPT_SNIPPET_CHARS, RUNTIME_DEBUG_TOKEN_PREFIX_CHARS, RUNTIME_DEBUG_USD_DECIMALS, RUNTIME_LATENCY_SECONDS_DECIMALS, AI_SCHEDULE_CLOCK_PARTS, ESTIMATED_CHARS_PER_TOKEN, PROVIDER_ERROR_RAW_TEXT_MAX_CHARS, AI_CALL_COST_DECIMALS, PROVIDER_DIAGNOSTIC_LIMITS, AI_INVOCATION_CONTRACT_VERSION, AI_INVOCATION_TELEMETRY_LIMITS, PROVIDER_USAGE_DETAIL_LIMITS, HYPERLIQUID_TIF_GTC, HYPERLIQUID_TPSL_BATCH_MIN_ORDERS, HYPERLIQUID_USER_FILLS_PROVIDER_PAGE_CAP, HYPERLIQUID_CANDLE_SNAPSHOT_BASE_WEIGHT, HYPERLIQUID_CANDLE_SNAPSHOT_ROWS_PER_WEIGHT, HYPERLIQUID_CANDLE_SNAPSHOT_MAX_ROWS, HYPERLIQUID_ROW_WEIGHTED_INFO_REQUESTS, HYPERLIQUID_ROW_WEIGHTED_INFO_BASE_WEIGHT, HYPERLIQUID_INFO_ROWS_PER_EXTRA_WEIGHT, HYPERLIQUID_PUBLIC_READ_WINDOWS_KEPT, CLIENT_RUNTIME_NOTE_GAP_MAX_LOOPS, HYPERLIQUID_META_AND_ASSET_CTXS_PARTS, HYPERLIQUID_SIDE_PAIR_LENGTH, HYPERLIQUID_SIGNED_SIZE_MATCH_EXTRA_DECIMALS, HYPERLIQUID_OPEN_ORDERS_MAX_NESTING_DEPTH, ACCOUNT_PAYLOAD_MODE_SEARCH_MAX_DEPTH, HYPERLIQUID_ACCOUNT_ROUNDING_DECIMALS, HYPERLIQUID_UNREALIZED_PNL_ZERO_TOLERANCE, HYPERLIQUID_MAX_DEPLOYER_FEE_SCALE, HYPERLIQUID_DEPLOYER_FEE_SCALE_MULTIPLIER, HYPERLIQUID_GROWTH_MODE_FEE_FACTOR, HYPERLIQUID_ALIGNED_QUOTE_NON_DEPLOYER_FEE_FACTOR, HYPERLIQUID_CLOSE_SIZE_RELATIVE_TOLERANCE, HYPERLIQUID_POSITION_SIZE_MATCH_ABS_TOLERANCE, HYPERLIQUID_POSITION_SIZE_MATCH_RELATIVE_TOLERANCE, HYPERLIQUID_LOT_FLOOR_NOISE_DECIMALS, HYPERLIQUID_RECOVERY_BACKOFF_MAX_EXPONENT, HYPERLIQUID_RECOVERY_CONCURRENCY_GROWTH_FACTOR, UUID_BYTES, UUID_HEX_GROUP_ENDS, MSGPACK, CLIENT_RUNTIME_PROVIDER_ATTEMPT_SUMMARY_MAX_CHARS, CLIENT_RUNTIME_HL_REQUEST_TYPE_MAX_CHARS, CLIENT_RUNTIME_DRAWDOWN_DEBUG_DECIMALS, CLIENT_PROTECTIVE_GROUP_VERSION, CLIENT_PROTECTIVE_TPSL_PAIR_LEGS, CLIENT_PROTECTIVE_FILL_MATCH_ABS_TOLERANCE, CLIENT_PROTECTIVE_FILL_MATCH_REL_TOLERANCE, CLIENT_CLOSE_FILL_EPSILON_ULPS, COPY_TRADING_SIZE_EPSILON, COPY_TRADING_RELATIVE_SIZE_TOLERANCE, COPY_TRADING_NOTIONAL_CAP_TOLERANCE_USD, CLIENT_ACCOUNT_PNL_NONZERO_MIN_USD, RUNTIME_PORTFOLIO_PERIOD_ENTRY_LENGTH, CLIENT_EXCHANGE_RECONCILIATION_MAX_DELAY_MS, RFC1918_172_BLOCK_SECOND_OCTET, AGENT_CLI_TAKEOVER_REQUIRED_EXIT_CODE, EXIT_CODE_INTERRUPTED, EXIT_CODE_SIGNAL_BASE, AI_SNAPSHOT_COMPACT_TRANSPORT_VERSION, CLIENT_PROTECTION_CAPABILITY_VERSION, AI_SNAPSHOT_PACKED_FIELDS, AI_SNAPSHOT_PACKED_ENTRY_FIELDS, TOKENS_PER_MILLION, RENDER_DEBUG_ID_RANDOM_CHARS;
 var init_constants = __esm({
   "lib/constants.ts"() {
     "use strict";
@@ -3357,6 +3371,15 @@ var init_constants = __esm({
       BOOT_IDENTITY: 4096
     };
     CODEX_HOSTED_ATTEMPT_PATH_SEGMENTS = 3;
+    INFERENCE_HOST_TEMP_FOLDERS = {
+      CODEX_WORKER_PREFIX: "vtx-codex-host-",
+      CODEX_WORKER_JOBS: "workspaces",
+      CODEX_HOSTED_JOB_PREFIX: "attempt-",
+      CODEX_JOB_PREFIX: "vtx-codex-attempt-",
+      COPILOT_JOB_PREFIX: "vtx-copilot-",
+      DEEPSEEK_JOB_PREFIX: "vtx-deepseek-harness-"
+    };
+    INFERENCE_HOST_FAILURE_CAUSE_MAX_DEPTH = 8;
     CODEX_GUARDIAN_PROCESS_TOKEN_BYTES = 32;
     CODEX_RATE_LIMIT_EXHAUSTED_PERCENT = 100;
     INFERENCE_HOST_PROXY_TOKEN_BYTES = 24;
@@ -3917,7 +3940,7 @@ function skipVoid(ctx, banNewLines, banComments) {
     skipComment(ctx);
   }
 }
-function skipUntil(ctx, sep3, end) {
+function skipUntil(ctx, sep4, end) {
   let ptr = ctx.p;
   if (!end) {
     ptr = indexOfNewline(ctx.s, ptr);
@@ -3928,7 +3951,7 @@ function skipUntil(ctx, sep3, end) {
     let c = ctx.s.charCodeAt(ctx.p);
     if (c === 35) {
       skipComment(ctx);
-    } else if (c === end || c === sep3) {
+    } else if (c === end || c === sep4) {
       return;
     }
   }
@@ -4747,7 +4770,7 @@ async function syncInferenceDirectory(path, platform = process.platform) {
 async function replaceAtomicInferencePrivateFile(temporaryPath, destinationPath, options = {}) {
   const platform = options.platform ?? process.platform;
   const renameFile = options.renameFile ?? rename;
-  const sleep3 = options.sleep ?? ((milliseconds) => new Promise((resolve16) => setTimeout(resolve16, milliseconds)));
+  const sleep3 = options.sleep ?? ((milliseconds) => new Promise((resolve17) => setTimeout(resolve17, milliseconds)));
   const maxAttempts = Math.max(1, options.maxAttempts ?? HOST_CORE_POLICY.private_file_replace_attempts);
   const retryDelayMs = Math.max(0, options.retryDelayMs ?? HOST_CORE_POLICY.private_file_replace_retry_delay_ms);
   for (let attempt2 = 0; attempt2 < maxAttempts; attempt2 += 1) {
@@ -5977,10 +6000,10 @@ var init_abort = __esm({
       }
     };
     abortableSleep = async (ms, signal) => {
-      await new Promise((resolve16, reject) => {
+      await new Promise((resolve17, reject) => {
         const timer = setTimeout(() => {
           cleanup();
-          resolve16(void 0);
+          resolve17(void 0);
         }, ms);
         const cleanup = () => {
           clearTimeout(timer);
@@ -22757,6 +22780,7 @@ var init_runtime_policy_generated2 = __esm({
           model_catalog_read_lead_divisor: 2,
           agent_wake_summary_max_chars: 2e3,
           drain_timeout_ms: 3e4,
+          undispatched_adapter_failure_restart_threshold: 3,
           remote_retry_limit: 3,
           minimum_sleep_ms: 10,
           heartbeat_gap_diagnostic_min_ms: 1e4,
@@ -23183,13 +23207,26 @@ var init_runtime_policy_generated2 = __esm({
         error_details: {
           review_failure_message_max_length: 220
         }
+      },
+      llm: {
+        provider_diagnostics: {
+          reply_body_max_chars: 65536,
+          reply_max_headers: 64,
+          reply_header_name_parts: [
+            "retry-after",
+            "ratelimit",
+            "rate-limit",
+            "quota",
+            "balance"
+          ]
+        }
       }
     };
   }
 });
 
 // lib/external-inference-contract.ts
-var EXTERNAL_INFERENCE_CONTRACT_VERSION, EXTERNAL_INFERENCE_CONTROLLER_SCHEMA_VERSION, EXTERNAL_INFERENCE_CONTROLLER_SCHEMA_VERSION_V2, EXTERNAL_INFERENCE_ADVERTISEMENT_SCHEMA_VERSION, EXTERNAL_INFERENCE_ENVELOPE_SCHEMA_VERSION, EXTERNAL_INFERENCE_COMPRESSED_INPUT_ENVELOPE_SCHEMA_VERSION, EXTERNAL_INFERENCE_JOB_INPUT_SCHEMA_VERSION, LEGACY_EXTERNAL_INFERENCE_JOB_INPUT_SCHEMA_VERSION, EXTERNAL_INFERENCE_USAGE_SCHEMA_VERSION, EXTERNAL_INFERENCE_INPUT_HASH_DOMAIN, MAX_EXTERNAL_INFERENCE_STATUS_HOSTS, MAX_PROFILE_EXTERNAL_INFERENCE_FALLBACKS_PER_LANE, MAX_GENERATION, MAX_SAFE_INTEGER, MAX_PROMPT_BYTES, MAX_IMMUTABLE_JOB_INPUT_BYTES, MAX_CANDIDATE_PLAINTEXT_BYTES, MAX_CIPHERTEXT_CHARS, PROVIDER_RESET_MAX_MS, MAX_GROK_TOOL_SUMMARIES, STDERR_OBSERVATION_CAP_BYTES, MAX_TURN_DECISION_OPERATION_IDS, SHA256_K, rotateRight, sha256BytesHex, sha256Utf8Hex, computeImmutableJobInputSha256, identifierSchema, operationIdentifierSchema, sha256HexSchema, generationSchema, zeroBasedGenerationSchema, nonNegativeSafeIntegerSchema, positiveSafeIntegerSchema, sqlIntegerTokenCountSchema, timestampSchema, safeCodeSchema, processExitCodeSchema, externalInferenceAdapterIdSchema, reasoningEffortSchema, modelNameSchema, displayNameSchema, authenticatedAccountEmailSchema, protocolVersionSchema, base64UrlAlphabet, isCanonicalBase64Url, base64Url32BytesSchema, base64UrlNonceSchema, base64UrlCiphertextSchema, claimHandleSchema, boundedJsonTextSchema, boundedPromptTextSchema, laneSchema, botModeSchema, executionModeSchema, responseModeSchema, controlModeSchema, dispatchOutcomeSchema, responseOutcomeSchema, nativeModelControllerSchema, legacyExternalAgentModelControllerSchema, externalAgentModelControllerSchema, boundExternalAgentModelControllerSchema, externalAgentUnboundControllerSchema, externalAgentUnboundControllerV2Schema, orderedFallbackHostIdsSchema, externalInferenceFallbackHostIdsSchema, liveModelControllerSchema, snapshotModelControllerSchema, modelIdentityMappingSchema, advertisedModelSchema, hostAdvertisementSchema, envelopeAadSchema, validateEnvelopeAad, commonEnvelopeShape, sealedKeyWrapEnvelopeSchema, sealedInputEnvelopeSchema, sealedCandidateEnvelopeSchema, sealedEnvelopeSchema, screenerCandidateRuntimeBindingSchema, screenerClientLeaseBindingSchema, screenerRuntimeBindingSchema, serverRuntimeBindingSchema, clientRuntimeBindingSchema, runtimeBindingSchema, immutableJobInputSchema, canonicalizeJsonValue, serializeImmutableJobInput, reportedTokenUsageSchema, unavailableTokenUsageSchema, tokenUsageSchema, grokToolValidationDiagnosticSchema, grokResponseIdentityDiagnosticSchema, agentTurnReceiptSchema, agentConnectRequestSchema, agentNextRequestSchema, agentHeartbeatRequestSchema, emptyAgentNextResultSchema, claimedAgentNextResultSchema, agentNextResultSchema, agentCompleteRequestSchema, agentFailRequestSchema, requestedModelSelectionSchema, completedModelProvenanceSchema, attemptModelProvenanceSchema, providerWeeklyQuotaReadSchema, hostRuntimeRecoverySchema, claimResolutionSchema, httpStatusCodeSchema, hostClaimTransportFailureSchema, hostClaimTransportFailureReportSchema, hostHeartbeatRequestSchema, jobClaimRequestBaseShape, jobClaimRequestSchema, emptyJobClaimSchema, claimedJobSchema, claimedDispatchIntentSchema, batchedJobClaimSchema, timedBatchedJobClaimSchema, BATCH_JOB_CLAIM_RESULT_VERSION, clockedBatchedJobClaimSchema, jobClaimResultSchema, attemptStartRequestSchema, jobHeartbeatRequestSchema, continueHeartbeatDirectiveSchema, cancelHeartbeatDirectiveSchema, jobHeartbeatResultSchema, adapterOutcomeEvidenceSchema, completionBaseShape, validateCompletion, providerResponseCompletionSchema, decisionCandidateCompletionSchema, jobCompleteRequestSchema, codexProcessExitDiagnosticsSchema, jobFailRequestSchema, jobCancelRequestSchema, jobCancellationReceiptSchema, jobDeliveryRequestSchema, deliveryBaseShape, validateDeliveryCandidate, providerResponseDeliverySchema, decisionCandidateDeliverySchema, jobDeliveryResultSchema, jobConsumptionRequestSchema, jobConsumptionReceiptSchema, jobStateSchema, jobStatusReadSchema, hostStatusReadSchema, nativeResearchEvidenceSourceSchema, externalAgentResearchEvidenceSourceSchema, researchEvidenceSourceSchema, reportedResearchTokenUsageSchema, unavailableResearchTokenUsageSchema, researchTokenUsageSchema, externalInferenceProductLineageBaseShape, traderExternalInferenceProductLineageSchema, decisionChatExternalInferenceProductLineageSchema, screenerExternalInferenceProductLineageSchema, externalInferenceProductLineageSchema, normalProductLinkageSchema, evidenceMaterializationMarkerSchema, deliveredExternalAgentSourceIdentitySchema, deliveredRequestEvidenceSchema, researchEvidenceBaseShape, researchEvidenceBaseSchema, validateExactUtf8, validateResearchEvidence, providerResponseResearchEvidenceSchema, decisionCandidateResearchEvidenceSchema, researchEvidenceSchema;
+var EXTERNAL_INFERENCE_CONTRACT_VERSION, EXTERNAL_INFERENCE_CONTROLLER_SCHEMA_VERSION, EXTERNAL_INFERENCE_CONTROLLER_SCHEMA_VERSION_V2, EXTERNAL_INFERENCE_ADVERTISEMENT_SCHEMA_VERSION, EXTERNAL_INFERENCE_ENVELOPE_SCHEMA_VERSION, EXTERNAL_INFERENCE_COMPRESSED_INPUT_ENVELOPE_SCHEMA_VERSION, EXTERNAL_INFERENCE_JOB_INPUT_SCHEMA_VERSION, LEGACY_EXTERNAL_INFERENCE_JOB_INPUT_SCHEMA_VERSION, EXTERNAL_INFERENCE_USAGE_SCHEMA_VERSION, EXTERNAL_INFERENCE_INPUT_HASH_DOMAIN, MAX_EXTERNAL_INFERENCE_STATUS_HOSTS, MAX_PROFILE_EXTERNAL_INFERENCE_FALLBACKS_PER_LANE, MAX_GENERATION, MAX_SAFE_INTEGER, MAX_PROMPT_BYTES, MAX_IMMUTABLE_JOB_INPUT_BYTES, MAX_CANDIDATE_PLAINTEXT_BYTES, MAX_CIPHERTEXT_CHARS, PROVIDER_RESET_MAX_MS, MAX_GROK_TOOL_SUMMARIES, STDERR_OBSERVATION_CAP_BYTES, MAX_TURN_DECISION_OPERATION_IDS, SHA256_K, rotateRight, sha256BytesHex, sha256Utf8Hex, computeImmutableJobInputSha256, identifierSchema, operationIdentifierSchema, sha256HexSchema, generationSchema, zeroBasedGenerationSchema, nonNegativeSafeIntegerSchema, positiveSafeIntegerSchema, sqlIntegerTokenCountSchema, timestampSchema, safeCodeSchema, processExitCodeSchema, externalInferenceAdapterIdSchema, reasoningEffortSchema, modelNameSchema, displayNameSchema, authenticatedAccountEmailSchema, protocolVersionSchema, base64UrlAlphabet, isCanonicalBase64Url, base64Url32BytesSchema, base64UrlNonceSchema, base64UrlCiphertextSchema, claimHandleSchema, boundedJsonTextSchema, boundedPromptTextSchema, laneSchema, botModeSchema, executionModeSchema, responseModeSchema, controlModeSchema, dispatchOutcomeSchema, responseOutcomeSchema, nativeModelControllerSchema, legacyExternalAgentModelControllerSchema, externalAgentModelControllerSchema, boundExternalAgentModelControllerSchema, externalAgentUnboundControllerSchema, externalAgentUnboundControllerV2Schema, orderedFallbackHostIdsSchema, externalInferenceFallbackHostIdsSchema, liveModelControllerSchema, snapshotModelControllerSchema, modelIdentityMappingSchema, advertisedModelSchema, hostAdvertisementSchema, envelopeAadSchema, validateEnvelopeAad, commonEnvelopeShape, sealedKeyWrapEnvelopeSchema, sealedInputEnvelopeSchema, sealedCandidateEnvelopeSchema, sealedEnvelopeSchema, screenerCandidateRuntimeBindingSchema, screenerClientLeaseBindingSchema, screenerRuntimeBindingSchema, serverRuntimeBindingSchema, clientRuntimeBindingSchema, runtimeBindingSchema, immutableJobInputSchema, canonicalizeJsonValue, serializeImmutableJobInput, reportedTokenUsageSchema, unavailableTokenUsageSchema, tokenUsageSchema, grokToolValidationDiagnosticSchema, grokResponseIdentityDiagnosticSchema, agentTurnReceiptSchema, agentConnectRequestSchema, agentNextRequestSchema, agentHeartbeatRequestSchema, emptyAgentNextResultSchema, claimedAgentNextResultSchema, agentNextResultSchema, agentCompleteRequestSchema, agentFailRequestSchema, requestedModelSelectionSchema, completedModelProvenanceSchema, attemptModelProvenanceSchema, providerWeeklyQuotaReadSchema, hostRuntimeRecoverySchema, claimResolutionSchema, httpStatusCodeSchema, hostClaimTransportFailureSchema, hostClaimTransportFailureReportSchema, hostHeartbeatRequestSchema, jobClaimRequestBaseShape, jobClaimRequestSchema, emptyJobClaimSchema, claimedJobSchema, claimedDispatchIntentSchema, batchedJobClaimSchema, timedBatchedJobClaimSchema, BATCH_JOB_CLAIM_RESULT_VERSION, clockedBatchedJobClaimSchema, jobClaimResultSchema, attemptStartRequestSchema, jobHeartbeatRequestSchema, continueHeartbeatDirectiveSchema, cancelHeartbeatDirectiveSchema, jobHeartbeatResultSchema, adapterOutcomeEvidenceSchema, completionBaseShape, validateCompletion, providerResponseCompletionSchema, decisionCandidateCompletionSchema, jobCompleteRequestSchema, codexProcessExitDiagnosticsSchema, EXTERNAL_INFERENCE_FAILURE_FOLDER_ROLES, externalInferenceFailureDetailSchema, jobFailRequestSchema, jobCancelRequestSchema, jobCancellationReceiptSchema, jobDeliveryRequestSchema, deliveryBaseShape, validateDeliveryCandidate, providerResponseDeliverySchema, decisionCandidateDeliverySchema, jobDeliveryResultSchema, jobConsumptionRequestSchema, jobConsumptionReceiptSchema, jobStateSchema, jobStatusReadSchema, hostStatusReadSchema, nativeResearchEvidenceSourceSchema, externalAgentResearchEvidenceSourceSchema, researchEvidenceSourceSchema, reportedResearchTokenUsageSchema, unavailableResearchTokenUsageSchema, researchTokenUsageSchema, externalInferenceProductLineageBaseShape, traderExternalInferenceProductLineageSchema, decisionChatExternalInferenceProductLineageSchema, screenerExternalInferenceProductLineageSchema, externalInferenceProductLineageSchema, normalProductLinkageSchema, evidenceMaterializationMarkerSchema, deliveredExternalAgentSourceIdentitySchema, deliveredRequestEvidenceSchema, researchEvidenceBaseShape, researchEvidenceBaseSchema, validateExactUtf8, validateResearchEvidence, providerResponseResearchEvidenceSchema, decisionCandidateResearchEvidenceSchema, researchEvidenceSchema;
 var init_external_inference_contract = __esm({
   "lib/external-inference-contract.ts"() {
     "use strict";
@@ -24161,7 +24198,8 @@ var init_external_inference_contract = __esm({
         "service_update",
         "drain_timeout",
         "provider_dispatch_watchdog_expired",
-        "receipt_durability_timeout"
+        "receipt_durability_timeout",
+        "adapter_setup_failed"
       ]).nullable(),
       failure_code: external_exports.string().regex(/^[a-z0-9][a-z0-9._-]{0,95}$/u).nullable(),
       pending_attempts: nonNegativeSafeIntegerSchema,
@@ -24503,6 +24541,14 @@ var init_external_inference_contract = __esm({
         context.addIssue({ code: "custom", message: "truncated stderr diagnostics must report the observation cap", path: ["stderr_truncated"] });
       }
     });
+    EXTERNAL_INFERENCE_FAILURE_FOLDER_ROLES = ["worker_folder", "job_folder", "temp_root", "other"];
+    externalInferenceFailureDetailSchema = external_exports.strictObject({
+      schema_version: external_exports.literal("external_inference_failure_detail_v1"),
+      error_class: external_exports.string().min(1).max(EXTERNAL_INFERENCE_SCHEMA_BOUNDS.code_length).regex(/^[A-Za-z][A-Za-z0-9_]*$/u),
+      errno_code: external_exports.string().min(1).max(EXTERNAL_INFERENCE_SCHEMA_BOUNDS.code_length).regex(/^[A-Z][A-Z0-9_]*$/u).nullable(),
+      syscall: external_exports.string().min(1).max(EXTERNAL_INFERENCE_SCHEMA_BOUNDS.label_length).regex(/^[a-z][a-z0-9_]*$/u).nullable(),
+      folder_role: external_exports.enum(EXTERNAL_INFERENCE_FAILURE_FOLDER_ROLES).nullable()
+    });
     jobFailRequestSchema = external_exports.strictObject({
       schema_version: external_exports.literal("external_inference_job_fail_v1"),
       contract_version: external_exports.literal(EXTERNAL_INFERENCE_CONTRACT_VERSION),
@@ -24534,6 +24580,7 @@ var init_external_inference_contract = __esm({
       provider_http_status: external_exports.number().int().min(HTTP_CLIENT_ERROR_MIN).max(HTTP_STATUS_MAX).optional(),
       grok_tool_validation: grokToolValidationDiagnosticSchema.optional(),
       grok_response_identity: grokResponseIdentityDiagnosticSchema.optional(),
+      failure_detail: externalInferenceFailureDetailSchema.optional(),
       membership_disposition: external_exports.enum([
         "retry_same_host",
         "cascade_cooldown",
@@ -25392,7 +25439,7 @@ var init_credential_store = __esm({
         }
         return;
       }
-      await new Promise((resolve16) => {
+      await new Promise((resolve17) => {
         const terminator = spawn3(
           "taskkill.exe",
           ["/PID", String(pid), "/T", "/F"],
@@ -25410,21 +25457,21 @@ var init_credential_store = __esm({
         const timer = setTimeout(() => {
           terminator.kill("SIGKILL");
           child.kill("SIGKILL");
-          resolve16();
+          resolve17();
         }, CREDENTIAL_COMMAND_TERMINATION_TIMEOUT_MS);
         terminator.once("error", () => {
           clearTimeout(timer);
           child.kill("SIGKILL");
-          resolve16();
+          resolve17();
         });
         terminator.once("close", () => {
           clearTimeout(timer);
           if (child.exitCode === null) child.kill("SIGKILL");
-          resolve16();
+          resolve17();
         });
       });
     };
-    runCredentialCommand = async (command, options) => await new Promise((resolve16, reject) => {
+    runCredentialCommand = async (command, options) => await new Promise((resolve17, reject) => {
       const timeoutMs = options.timeoutMs ?? DEFAULT_CREDENTIAL_COMMAND_TIMEOUT_MS;
       if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1) {
         reject(new Error("OS credential command timeout must be a positive integer."));
@@ -25483,7 +25530,7 @@ var init_credential_store = __esm({
           const transformedStdout = normalizedExitCode === 0 ? command.transformStdout?.(stdout) ?? stdout : stdout;
           settled2 = true;
           cleanup();
-          resolve16({
+          resolve17({
             exitCode: normalizedExitCode,
             stdout: transformedStdout
           });
@@ -26643,11 +26690,11 @@ async function revokeInferenceCredential(options) {
   }
 }
 async function listenLoopback(server) {
-  await new Promise((resolve16, reject) => {
+  await new Promise((resolve17, reject) => {
     server.once("error", reject);
     server.listen(0, CALLBACK_HOST, () => {
       server.off("error", reject);
-      resolve16();
+      resolve17();
     });
   });
   const address = server.address();
@@ -26658,7 +26705,7 @@ async function listenLoopback(server) {
 }
 async function closeServer(server) {
   if (!server.listening) return;
-  await new Promise((resolve16) => server.close(() => resolve16()));
+  await new Promise((resolve17) => server.close(() => resolve17()));
 }
 async function beginInferenceOAuthLogin(options) {
   const loginTimeoutMs = options.timeoutMs ?? HOST_CORE_POLICY2.oauth_login_timeout_ms;
@@ -26714,7 +26761,7 @@ async function beginInferenceOAuthLogin(options) {
     });
     let settled2 = false;
     let rejectCompletion;
-    const completion = new Promise((resolve16, reject) => {
+    const completion = new Promise((resolve17, reject) => {
       rejectCompletion = reject;
       handler = async (requestUrl2, method, writeResponse) => {
         if (settled2) {
@@ -26789,7 +26836,7 @@ async function beginInferenceOAuthLogin(options) {
             '<!doctype html><html><head><meta charset="utf-8"><title>VTX authorization complete</title></head><body><main><h1>VTX authorization complete</h1><p>The VTX CLI received your approval. You can close this tab and return to the terminal.</p></main></body></html>'
           );
           await closeServer(server);
-          resolve16({
+          resolve17({
             accessToken: tokens.accessToken,
             expiresIn: tokens.expiresIn,
             credential,
@@ -26935,7 +26982,7 @@ var init_mcp_transport = __esm({
 });
 
 // lib/inference-host/mcp-client.ts
-var EXTERNAL_INFERENCE_MCP_PROTOCOL_VERSION, EXTERNAL_INFERENCE_AUTOMATED_HOST_TOOLS, EXTERNAL_INFERENCE_OPERATIONAL_TOOLS, ClaimTiming, ExternalInferenceMcpError, DEFAULT_REQUEST_TIMEOUT_MS, MAX_RETRY_AFTER_MS, SSE_DATA_FIELD_PREFIX, PUBLIC_TOOL_ERROR_PREFIX, parseRetryAfterMs, identifierSchema2, safeCodeSchema2, publicFailureCodeSchema, publicToolErrorSchema, structuredPublicToolErrorSchema, MAX_REJECTION_REASON_CHARS, CONTROL_CHARACTERS, publicRejectionReason, parsePublicToolError, hostMutationResultSchema, attemptStartResultSchema, agentConnectResultSchema, agentHeartbeatResultSchema, timestampSchema2, positiveGenerationSchema, jsonObjectSchema, agentAssignmentNextArgumentsSchema, agentDataCapabilityDescriptorSchema, agentAssignmentNextResultSchema, agentAssignmentHeartbeatArgumentsSchema, agentAssignmentHeartbeatResultSchema, agentDataCallArgumentsSchema, agentDataCallResultSchema, agentDecisionTimingSchema, agentDecisionSubmitArgumentsSchema, agentDecisionSubmitResultSchema, agentDecisionStatusArgumentsSchema, agentDecisionStatusResultSchema, agentAssignmentReleaseArgumentsSchema, agentAssignmentReleaseResultSchema, jobCompletionResultSchema, jobFailureResultSchema, toolContracts, discoveryResultSchema, toolListResultSchema, inlineStructuredContentSchema, protocolMeta, parseJsonDocument, parseSseDocuments, parseResponseDocuments, exactOperationalInventory, exactJson, invalidBoundResult, verifyToolResult, ExternalInferenceMcpClient;
+var EXTERNAL_INFERENCE_MCP_PROTOCOL_VERSION, EXTERNAL_INFERENCE_AUTOMATED_HOST_TOOLS, EXTERNAL_INFERENCE_OPERATIONAL_TOOLS, ClaimTiming, ExternalInferenceMcpError, DEFAULT_REQUEST_TIMEOUT_MS, MAX_RETRY_AFTER_MS, SSE_DATA_FIELD_PREFIX, PUBLIC_TOOL_ERROR_PREFIX, parseRetryAfterMs, identifierSchema2, safeCodeSchema2, serverReasonCodeSchema, publicFailureCodeSchema, publicToolErrorSchema, structuredPublicToolErrorSchema, MAX_REJECTION_REASON_CHARS, CONTROL_CHARACTERS, publicRejectionReason, parsePublicToolError, hostMutationResultSchema, attemptStartResultSchema, agentConnectResultSchema, agentHeartbeatResultSchema, timestampSchema2, positiveGenerationSchema, jsonObjectSchema, agentAssignmentNextArgumentsSchema, agentDataCapabilityDescriptorSchema, agentAssignmentNextResultSchema, agentAssignmentHeartbeatArgumentsSchema, agentAssignmentHeartbeatResultSchema, agentDataCallArgumentsSchema, agentDataCallResultSchema, agentDecisionTimingSchema, agentDecisionSubmitArgumentsSchema, agentDecisionSubmitResultSchema, agentDecisionStatusArgumentsSchema, agentDecisionStatusResultSchema, agentAssignmentReleaseArgumentsSchema, agentAssignmentReleaseResultSchema, jobCompletionResultSchema, jobFailureResultSchema, toolContracts, discoveryResultSchema, toolListResultSchema, inlineStructuredContentSchema, protocolMeta, parseJsonDocument, parseSseDocuments, parseResponseDocuments, exactOperationalInventory, exactJson, invalidBoundResult, verifyToolResult, ExternalInferenceMcpClient;
 var init_mcp_client = __esm({
   "lib/inference-host/mcp-client.ts"() {
     "use strict";
@@ -27087,6 +27134,7 @@ var init_mcp_client = __esm({
         this.httpStatusCode = options.httpStatusCode ?? null;
         this.retryAfterMs = options.retryAfterMs ?? null;
         this.serverFailureCode = options.serverFailureCode ?? null;
+        this.serverReasonCode = options.serverReasonCode ?? null;
         this.retryable = options.retryable ?? [
           "network_error",
           "transport_rejected",
@@ -27112,6 +27160,7 @@ var init_mcp_client = __esm({
     };
     identifierSchema2 = external_exports.string().min(1).max(EXTERNAL_INFERENCE_SCHEMA_BOUNDS.identifier_length);
     safeCodeSchema2 = external_exports.string().min(1).max(EXTERNAL_INFERENCE_SCHEMA_BOUNDS.long_code_length);
+    serverReasonCodeSchema = safeCodeSchema2.regex(/^[a-z0-9][a-z0-9._-]*$/u);
     publicFailureCodeSchema = external_exports.string().regex(/^[a-z0-9][a-z0-9._-]{0,95}$/u);
     publicToolErrorSchema = external_exports.object({
       failure_code: publicFailureCodeSchema,
@@ -27646,6 +27695,7 @@ var init_mcp_client = __esm({
       #claimTransportFailureReportsSupported = false;
       #providerQuotaCooldownSupported = false;
       #providerHttpStatusTools = /* @__PURE__ */ new Set();
+      #failureDetailSupported = false;
       #grokToolValidationTools = /* @__PURE__ */ new Set();
       #grokResponseIdentityTools = /* @__PURE__ */ new Set();
       async close() {
@@ -27690,6 +27740,18 @@ var init_mcp_client = __esm({
       supportsRuntimeRecoveryDiagnostics() {
         return this.#runtimeRecoveryDiagnosticsSupported;
       }
+      supportsFailureDetail() {
+        return this.#failureDetailSupported;
+      }
+      async refreshFailureDetailSupport(options = {}) {
+        if (this.supportsFailureDetail()) return true;
+        try {
+          await this.initialize(options);
+        } catch {
+          return false;
+        }
+        return this.supportsFailureDetail();
+      }
       supportsClaimTransportFailureReports() {
         return this.#claimTransportFailureReportsSupported;
       }
@@ -27846,6 +27908,7 @@ var init_mcp_client = __esm({
           }
           return Array.isArray(node.anyOf) && node.anyOf.some((branch) => advertisesDiagnosticReceipt(branch, field, depth + 1));
         };
+        this.#failureDetailSupported = advertisesFields("inference.job.fail", ["failure_detail"]);
         this.#providerHttpStatusTools.clear();
         if (advertisesFields("inference.job.fail", ["provider_http_status"])) {
           this.#providerHttpStatusTools.add("inference.job.fail");
@@ -27929,6 +27992,7 @@ var init_mcp_client = __esm({
                 // the exact request unless the server proves it was not applied.
                 retryable: retryableInfrastructureRejection || retryableClaimRejection || retryableHeartbeatClockSkew || retryableAdvertisementClockSkew,
                 serverFailureCode: publicToolError?.failure_code ?? null,
+                serverReasonCode: serverReasonCodeSchema.safeParse(publicToolError?.reason_code).data ?? null,
                 retryAfterMs: hostNotClaimable ? publicToolError?.retry_after_ms ?? null : null
               }
             );
@@ -28878,51 +28942,51 @@ var require_uri_all = __commonJS({
         }
         return uriTokens.join("");
       }
-      function resolveComponents(base2, relative5) {
+      function resolveComponents(base2, relative6) {
         var options = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : {};
         var skipNormalization = arguments[3];
         var target = {};
         if (!skipNormalization) {
           base2 = parse5(serialize(base2, options), options);
-          relative5 = parse5(serialize(relative5, options), options);
+          relative6 = parse5(serialize(relative6, options), options);
         }
         options = options || {};
-        if (!options.tolerant && relative5.scheme) {
-          target.scheme = relative5.scheme;
-          target.userinfo = relative5.userinfo;
-          target.host = relative5.host;
-          target.port = relative5.port;
-          target.path = removeDotSegments(relative5.path || "");
-          target.query = relative5.query;
+        if (!options.tolerant && relative6.scheme) {
+          target.scheme = relative6.scheme;
+          target.userinfo = relative6.userinfo;
+          target.host = relative6.host;
+          target.port = relative6.port;
+          target.path = removeDotSegments(relative6.path || "");
+          target.query = relative6.query;
         } else {
-          if (relative5.userinfo !== void 0 || relative5.host !== void 0 || relative5.port !== void 0) {
-            target.userinfo = relative5.userinfo;
-            target.host = relative5.host;
-            target.port = relative5.port;
-            target.path = removeDotSegments(relative5.path || "");
-            target.query = relative5.query;
+          if (relative6.userinfo !== void 0 || relative6.host !== void 0 || relative6.port !== void 0) {
+            target.userinfo = relative6.userinfo;
+            target.host = relative6.host;
+            target.port = relative6.port;
+            target.path = removeDotSegments(relative6.path || "");
+            target.query = relative6.query;
           } else {
-            if (!relative5.path) {
+            if (!relative6.path) {
               target.path = base2.path;
-              if (relative5.query !== void 0) {
-                target.query = relative5.query;
+              if (relative6.query !== void 0) {
+                target.query = relative6.query;
               } else {
                 target.query = base2.query;
               }
             } else {
-              if (relative5.path.charAt(0) === "/") {
-                target.path = removeDotSegments(relative5.path);
+              if (relative6.path.charAt(0) === "/") {
+                target.path = removeDotSegments(relative6.path);
               } else {
                 if ((base2.userinfo !== void 0 || base2.host !== void 0 || base2.port !== void 0) && !base2.path) {
-                  target.path = "/" + relative5.path;
+                  target.path = "/" + relative6.path;
                 } else if (!base2.path) {
-                  target.path = relative5.path;
+                  target.path = relative6.path;
                 } else {
-                  target.path = base2.path.slice(0, base2.path.lastIndexOf("/") + 1) + relative5.path;
+                  target.path = base2.path.slice(0, base2.path.lastIndexOf("/") + 1) + relative6.path;
                 }
                 target.path = removeDotSegments(target.path);
               }
-              target.query = relative5.query;
+              target.query = relative6.query;
             }
             target.userinfo = base2.userinfo;
             target.host = base2.host;
@@ -28930,10 +28994,10 @@ var require_uri_all = __commonJS({
           }
           target.scheme = base2.scheme;
         }
-        target.fragment = relative5.fragment;
+        target.fragment = relative6.fragment;
         return target;
       }
-      function resolve16(baseURI, relativeURI, options) {
+      function resolve17(baseURI, relativeURI, options) {
         var schemelessOptions = assign({ scheme: "null" }, options);
         return serialize(resolveComponents(parse5(baseURI, schemelessOptions), parse5(relativeURI, schemelessOptions), schemelessOptions, true), schemelessOptions);
       }
@@ -29198,7 +29262,7 @@ var require_uri_all = __commonJS({
       exports2.removeDotSegments = removeDotSegments;
       exports2.serialize = serialize;
       exports2.resolveComponents = resolveComponents;
-      exports2.resolve = resolve16;
+      exports2.resolve = resolve17;
       exports2.normalize = normalize;
       exports2.equal = equal;
       exports2.escapeComponent = escapeComponent;
@@ -29575,18 +29639,18 @@ var require_resolve = __commonJS({
     var util = require_util();
     var SchemaObject = require_schema_obj();
     var traverse = require_json_schema_traverse();
-    module.exports = resolve16;
-    resolve16.normalizeId = normalizeId;
-    resolve16.fullPath = getFullPath;
-    resolve16.url = resolveUrl;
-    resolve16.ids = resolveIds;
-    resolve16.inlineRef = inlineRef;
-    resolve16.schema = resolveSchema;
-    function resolve16(compile, root, ref) {
+    module.exports = resolve17;
+    resolve17.normalizeId = normalizeId;
+    resolve17.fullPath = getFullPath;
+    resolve17.url = resolveUrl;
+    resolve17.ids = resolveIds;
+    resolve17.inlineRef = inlineRef;
+    resolve17.schema = resolveSchema;
+    function resolve17(compile, root, ref) {
       var refVal = this._refs[ref];
       if (typeof refVal == "string") {
         if (this._refs[refVal]) refVal = this._refs[refVal];
-        else return resolve16.call(this, compile, root, refVal);
+        else return resolve17.call(this, compile, root, refVal);
       }
       refVal = refVal || this._schemas[ref];
       if (refVal instanceof SchemaObject) {
@@ -29795,7 +29859,7 @@ var require_error_classes = __commonJS({
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
-    var resolve16 = require_resolve();
+    var resolve17 = require_resolve();
     module.exports = {
       Validation: errorSubclass(ValidationError),
       MissingRef: errorSubclass(MissingRefError)
@@ -29810,8 +29874,8 @@ var require_error_classes = __commonJS({
     };
     function MissingRefError(baseId, ref, message) {
       this.message = message || MissingRefError.message(baseId, ref);
-      this.missingRef = resolve16.url(baseId, ref);
-      this.missingSchema = resolve16.normalizeId(resolve16.fullPath(this.missingRef));
+      this.missingRef = resolve17.url(baseId, ref);
+      this.missingSchema = resolve17.normalizeId(resolve17.fullPath(this.missingRef));
     }
     function errorSubclass(Subclass) {
       Subclass.prototype = Object.create(Error.prototype);
@@ -30351,7 +30415,7 @@ var require_compile = __commonJS({
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
-    var resolve16 = require_resolve();
+    var resolve17 = require_resolve();
     var util = require_util();
     var errorClasses = require_error_classes();
     var stableStringify = require_fast_json_stable_stringify();
@@ -30413,7 +30477,7 @@ var require_compile = __commonJS({
           RULES: RULES2,
           validate: validateGenerator,
           util,
-          resolve: resolve16,
+          resolve: resolve17,
           resolveRef: resolveRef2,
           usePattern,
           useDefault,
@@ -30475,7 +30539,7 @@ var require_compile = __commonJS({
         return validate;
       }
       function resolveRef2(baseId2, ref, isRoot) {
-        ref = resolve16.url(baseId2, ref);
+        ref = resolve17.url(baseId2, ref);
         var refIndex = refs[ref];
         var _refVal, refCode;
         if (refIndex !== void 0) {
@@ -30492,11 +30556,11 @@ var require_compile = __commonJS({
           }
         }
         refCode = addLocalRef(ref);
-        var v2 = resolve16.call(self2, localCompile, root, ref);
+        var v2 = resolve17.call(self2, localCompile, root, ref);
         if (v2 === void 0) {
           var localSchema = localRefs && localRefs[ref];
           if (localSchema) {
-            v2 = resolve16.inlineRef(localSchema, opts.inlineRefs) ? localSchema : compile.call(self2, localSchema, root, localRefs, baseId2);
+            v2 = resolve17.inlineRef(localSchema, opts.inlineRefs) ? localSchema : compile.call(self2, localSchema, root, localRefs, baseId2);
           }
         }
         if (v2 === void 0) {
@@ -34245,7 +34309,7 @@ var require_ajv = __commonJS({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     var compileSchema = require_compile();
-    var resolve16 = require_resolve();
+    var resolve17 = require_resolve();
     var Cache = require_cache();
     var SchemaObject = require_schema_obj();
     var stableStringify = require_fast_json_stable_stringify();
@@ -34327,7 +34391,7 @@ var require_ajv = __commonJS({
       var id2 = this._getId(schema);
       if (id2 !== void 0 && typeof id2 != "string")
         throw new Error("schema id must be string");
-      key = resolve16.normalizeId(key || id2);
+      key = resolve17.normalizeId(key || id2);
       checkUnique(this, key);
       this._schemas[key] = this._addSchema(schema, _skipValidation, _meta, true);
       return this;
@@ -34371,7 +34435,7 @@ var require_ajv = __commonJS({
       }
     }
     function _getSchemaFragment(self2, ref) {
-      var res = resolve16.schema.call(self2, { schema: {} }, ref);
+      var res = resolve17.schema.call(self2, { schema: {} }, ref);
       if (res) {
         var schema = res.schema, root = res.root, baseId = res.baseId;
         var v = compileSchema.call(self2, schema, root, void 0, baseId);
@@ -34387,7 +34451,7 @@ var require_ajv = __commonJS({
       }
     }
     function _getSchemaObj(self2, keyRef) {
-      keyRef = resolve16.normalizeId(keyRef);
+      keyRef = resolve17.normalizeId(keyRef);
       return self2._schemas[keyRef] || self2._refs[keyRef] || self2._fragments[keyRef];
     }
     function removeSchema(schemaKeyRef) {
@@ -34414,7 +34478,7 @@ var require_ajv = __commonJS({
           this._cache.del(cacheKey);
           var id2 = this._getId(schemaKeyRef);
           if (id2) {
-            id2 = resolve16.normalizeId(id2);
+            id2 = resolve17.normalizeId(id2);
             delete this._schemas[id2];
             delete this._refs[id2];
           }
@@ -34438,13 +34502,13 @@ var require_ajv = __commonJS({
       var cached2 = this._cache.get(cacheKey);
       if (cached2) return cached2;
       shouldAddSchema = shouldAddSchema || this._opts.addUsedSchema !== false;
-      var id2 = resolve16.normalizeId(this._getId(schema));
+      var id2 = resolve17.normalizeId(this._getId(schema));
       if (id2 && shouldAddSchema) checkUnique(this, id2);
       var willValidate = this._opts.validateSchema !== false && !skipValidation;
       var recursiveMeta;
-      if (willValidate && !(recursiveMeta = id2 && id2 == resolve16.normalizeId(schema.$schema)))
+      if (willValidate && !(recursiveMeta = id2 && id2 == resolve17.normalizeId(schema.$schema)))
         this.validateSchema(schema, true);
-      var localRefs = resolve16.ids.call(this, schema);
+      var localRefs = resolve17.ids.call(this, schema);
       var schemaObj = new SchemaObject({
         id: id2,
         schema,
@@ -34668,7 +34732,7 @@ async function logoutCodexSubscription(options) {
     await session.close();
   }
 }
-var CODEX_INFERENCE_PERMISSION_PROFILE, CODEX_AGENT_PERMISSION_PROFILE, CODEX_REASONING_CONTENT_MAX_UTF8_BYTES, CODEX_REASONING_SUMMARY_MAX_UTF8_BYTES, utf8Prefix, reasoningContentPrefix, HOST_RUNTIME_POLICY, CODEX_ACCOUNT_PLAN_TYPES, CODEX_AGENT_DYNAMIC_TOOLS, CodexAppServerError, objectOrNull, finiteToken, tokenUsageFromBreakdown, usageFromNotification, validPlanType, nonnegativeSafeIntegerOrNull, nonnegativeFiniteNumberOrNull, parseRateLimitWindow, RATE_LIMIT_REACHED_TYPES, DEFAULT_CODEX_QUOTA_COOLDOWN_MS, MAX_CODEX_QUOTA_COOLDOWN_MS, CODEX_TRANSIENT_RATE_LIMIT_COOLDOWN_MS, parseCreditsSnapshot, codexCreditsAvailable, parseRateLimitSnapshot, codexRateLimitRetryAtMs, codexAccountRateLimitReached, forbiddenMethod, forbiddenTerminalItem, forbiddenAgentMethod, forbiddenAgentTerminalItem, createCodexAgentToolSpecs, classifyCodexTurnFailure, scrubbedCodexEnvironment, killWindowsProcessTree, appServerArgs, GUARDIAN_SCRIPT, WINDOWS_RECEIPT_REPLACE_ERROR_CODES, MAX_RETIRED_RESPONSE_IDS, LATE_RESPONSE_SAFE_METHODS, replaceCodexGuardianReceiptFile, writeCodexGuardianSpawnIntent, parseGuardianReceipt, readCodexGuardianReceipt, waitForCodexGuardianState, defaultSpawn, CodexAppServerSession;
+var CODEX_INFERENCE_PERMISSION_PROFILE, CODEX_AGENT_PERMISSION_PROFILE, CODEX_REASONING_CONTENT_MAX_UTF8_BYTES, CODEX_REASONING_SUMMARY_MAX_UTF8_BYTES, utf8Prefix, reasoningContentPrefix, HOST_RUNTIME_POLICY, CODEX_ACCOUNT_PLAN_TYPES, CODEX_AGENT_DYNAMIC_TOOLS, CodexAppServerError, objectOrNull, finiteToken, tokenUsageFromBreakdown, usageFromNotification, validPlanType, nonnegativeSafeIntegerOrNull, nonnegativeFiniteNumberOrNull, parseRateLimitWindow, RATE_LIMIT_REACHED_TYPES, DEFAULT_CODEX_QUOTA_COOLDOWN_MS, MAX_CODEX_QUOTA_COOLDOWN_MS, CODEX_TRANSIENT_RATE_LIMIT_COOLDOWN_MS, parseCreditsSnapshot, parseCodexAccountRateLimits, codexCreditsAvailable, parseRateLimitSnapshot, codexRateLimitRetryAtMs, codexAccountRateLimitReached, forbiddenMethod, forbiddenTerminalItem, forbiddenAgentMethod, forbiddenAgentTerminalItem, createCodexAgentToolSpecs, classifyCodexTurnFailure, scrubbedCodexEnvironment, killWindowsProcessTree, appServerArgs, GUARDIAN_SCRIPT, WINDOWS_RECEIPT_REPLACE_ERROR_CODES, MAX_RETIRED_RESPONSE_IDS, LATE_RESPONSE_SAFE_METHODS, replaceCodexGuardianReceiptFile, writeCodexGuardianSpawnIntent, parseGuardianReceipt, readCodexGuardianReceipt, waitForCodexGuardianState, defaultSpawn, CodexAppServerSession;
 var init_codex_app_server = __esm({
   "lib/inference-host/codex-app-server.ts"() {
     "use strict";
@@ -34808,6 +34872,23 @@ var init_codex_app_server = __esm({
         balance: candidate.balance ?? null
       };
     };
+    parseCodexAccountRateLimits = (value) => {
+      const candidate = objectOrNull(value);
+      if (!candidate) throw new Error("invalid account rate limits");
+      const rateLimits = parseRateLimitSnapshot(candidate.rateLimits);
+      const rawByLimitId = candidate.rateLimitsByLimitId;
+      let rateLimitsByLimitId = null;
+      if (rawByLimitId !== null && rawByLimitId !== void 0) {
+        const byLimitId = objectOrNull(rawByLimitId);
+        if (!byLimitId) throw new Error("invalid rate-limit bucket map");
+        rateLimitsByLimitId = {};
+        for (const [limitId, snapshot] of Object.entries(byLimitId)) {
+          if (!limitId.trim()) throw new Error("invalid rate-limit bucket identity");
+          rateLimitsByLimitId[limitId] = parseRateLimitSnapshot(snapshot);
+        }
+      }
+      return { rateLimits, rateLimitsByLimitId };
+    };
     codexCreditsAvailable = (snapshot) => {
       const credits = parseCreditsSnapshot(snapshot.credits);
       return credits !== null && (credits.hasCredits || credits.unlimited);
@@ -35064,7 +35145,7 @@ var init_codex_app_server = __esm({
       };
     };
     killWindowsProcessTree = async (pid) => {
-      await new Promise((resolve16, reject) => {
+      await new Promise((resolve17, reject) => {
         const child = spawn4(
           "taskkill.exe",
           ["/PID", String(pid), "/T", "/F"],
@@ -35089,7 +35170,7 @@ var init_codex_app_server = __esm({
         });
         child.once("close", (code) => {
           clearTimeout(timer);
-          if (code === 0 || code === WINDOWS_TASKKILL_PROCESS_NOT_FOUND_EXIT_CODE) resolve16();
+          if (code === 0 || code === WINDOWS_TASKKILL_PROCESS_NOT_FOUND_EXIT_CODE) resolve17();
           else reject(new Error("Windows Codex process-tree cleanup failed."));
         });
       });
@@ -35289,7 +35370,7 @@ child.once('close', async (code, signal) => {
       const platform = options.platform ?? process.platform;
       const renameFile = options.renameFile ?? rename3;
       const removeFile = options.removeFile ?? ((path) => rm4(path, { force: true }));
-      const sleep3 = options.sleep ?? ((milliseconds) => new Promise((resolve16) => setTimeout(resolve16, milliseconds)));
+      const sleep3 = options.sleep ?? ((milliseconds) => new Promise((resolve17) => setTimeout(resolve17, milliseconds)));
       const maxAttempts = Math.max(1, options.maxAttempts ?? HOST_RUNTIME_POLICY.codex_guardian_receipt_replace_attempts);
       const retryDelayMs = Math.max(0, options.retryDelayMs ?? HOST_RUNTIME_POLICY.codex_guardian_receipt_replace_retry_ms);
       for (let attempt2 = 0; attempt2 < maxAttempts; attempt2 += 1) {
@@ -35381,7 +35462,7 @@ child.once('close', async (code, signal) => {
             throw new Error("Codex guardian terminated before app-server initialization.");
           }
         }
-        await new Promise((resolve16) => setTimeout(resolve16, HOST_RUNTIME_POLICY.codex_guardian_state_poll_ms));
+        await new Promise((resolve17) => setTimeout(resolve17, HOST_RUNTIME_POLICY.codex_guardian_state_poll_ms));
       }
       throw new Error(`Codex guardian ${expectedState} state was not confirmed.`);
     };
@@ -35766,8 +35847,8 @@ child.once('close', async (code, signal) => {
             dispatchOutcome: "not_dispatched"
           });
         }
-        return await new Promise((resolve16, reject) => {
-          const pending3 = { resolve: resolve16, reject, timer: null, abortCleanup: null };
+        return await new Promise((resolve17, reject) => {
+          const pending3 = { resolve: resolve17, reject, timer: null, abortCleanup: null };
           pending3.timer = setTimeout(() => {
             this.pending.delete(id2);
             this.retireResponseId(id2, method);
@@ -35941,19 +36022,7 @@ child.once('close', async (code, signal) => {
           signal
         });
         try {
-          const rateLimits = parseRateLimitSnapshot(result.rateLimits);
-          const rawByLimitId = result.rateLimitsByLimitId;
-          let rateLimitsByLimitId = null;
-          if (rawByLimitId !== null && rawByLimitId !== void 0) {
-            const byLimitId = objectOrNull(rawByLimitId);
-            if (!byLimitId) throw new Error("invalid rate-limit bucket map");
-            rateLimitsByLimitId = {};
-            for (const [limitId, snapshot] of Object.entries(byLimitId)) {
-              if (!limitId.trim()) throw new Error("invalid rate-limit bucket identity");
-              rateLimitsByLimitId[limitId] = parseRateLimitSnapshot(snapshot);
-            }
-          }
-          return { rateLimits, rateLimitsByLimitId };
+          return parseCodexAccountRateLimits(result);
         } catch (error48) {
           throw new CodexAppServerError({
             message: "Codex returned invalid account rate-limit metadata.",
@@ -36442,8 +36511,8 @@ child.once('close', async (code, signal) => {
         const agentWebSearches = [];
         let terminalResolve;
         let terminalReject;
-        const terminalPromise = new Promise((resolve16, reject) => {
-          terminalResolve = resolve16;
+        const terminalPromise = new Promise((resolve17, reject) => {
+          terminalResolve = resolve17;
           terminalReject = reject;
         });
         void terminalPromise.catch(() => void 0);
@@ -37003,15 +37072,15 @@ child.once('close', async (code, signal) => {
           ).catch(() => void 0);
         }
         this.process.stdin.end();
-        const exited = await new Promise((resolve16) => {
+        const exited = await new Promise((resolve17) => {
           if (this.process.exitCode !== null) {
-            resolve16(true);
+            resolve17(true);
             return;
           }
-          const timer = setTimeout(() => resolve16(false), HOST_RUNTIME_POLICY.codex_close_exit_timeout_ms);
+          const timer = setTimeout(() => resolve17(false), HOST_RUNTIME_POLICY.codex_close_exit_timeout_ms);
           this.process.once("close", () => {
             clearTimeout(timer);
-            resolve16(true);
+            resolve17(true);
           });
         });
         if (exited) return;
@@ -37022,11 +37091,11 @@ child.once('close', async (code, signal) => {
           else this.process.kill("SIGTERM");
         } catch {
         }
-        const terminated = await new Promise((resolve16) => {
-          const timer = setTimeout(() => resolve16(false), HOST_RUNTIME_POLICY.codex_close_terminate_timeout_ms);
+        const terminated = await new Promise((resolve17) => {
+          const timer = setTimeout(() => resolve17(false), HOST_RUNTIME_POLICY.codex_close_terminate_timeout_ms);
           this.process.once("close", () => {
             clearTimeout(timer);
-            resolve16(true);
+            resolve17(true);
           });
         });
         if (!terminated) {
@@ -37036,15 +37105,15 @@ child.once('close', async (code, signal) => {
             else this.process.kill("SIGKILL");
           } catch {
           }
-          await new Promise((resolve16) => {
+          await new Promise((resolve17) => {
             if (this.process.exitCode !== null) {
-              resolve16();
+              resolve17();
               return;
             }
-            const timer = setTimeout(resolve16, HOST_RUNTIME_POLICY.codex_close_kill_timeout_ms);
+            const timer = setTimeout(resolve17, HOST_RUNTIME_POLICY.codex_close_kill_timeout_ms);
             this.process.once("close", () => {
               clearTimeout(timer);
-              resolve16();
+              resolve17();
             });
           });
           if (this.process.exitCode === null) {
@@ -37602,6 +37671,239 @@ var init_provider_credit = __esm({
   }
 });
 
+// lib/inference-host/attempt-failure.ts
+import { tmpdir as tmpdir2 } from "node:os";
+import { dirname as dirname5, isAbsolute as isAbsolute5, relative as relative3, resolve as resolve4, sep as sep2 } from "node:path";
+var providerHttpStatus, PROVIDER_COOLDOWN_FAILURE_CODES, isProviderCooldownFailureCode, isProviderAccountFailureCode, terminalFailureRequiresManualRecovery, ambiguousHeartbeatTransport, retryableRemoteError, membershipFailureDisposition, safeFailureCode, classifyFailure, ERROR_CLASS_PATTERN, ERRNO_CODE_PATTERN, SYSCALL_PATTERN, failureFolderRole, boundedToken, isUnclassifiedFailureCode, attemptFailureDetail, ADAPTER_SETUP_FAILED_DRAIN_REASON, createUndispatchedAdapterFailureStreak;
+var init_attempt_failure = __esm({
+  "lib/inference-host/attempt-failure.ts"() {
+    "use strict";
+    init_define_VTX_CLAUDE_CODE_POLICY();
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_runtime_policy_generated();
+    init_constants();
+    init_external_inference_contract();
+    init_provider_credit();
+    init_codex_app_server();
+    init_mcp_client();
+    providerHttpStatus = (error48) => {
+      if (!(error48 instanceof CodexAppServerError)) return null;
+      const status = error48.httpStatusCode;
+      return typeof status === "number" && Number.isInteger(status) && status >= HTTP_CLIENT_ERROR_MIN && status <= HTTP_STATUS_MAX ? status : null;
+    };
+    PROVIDER_COOLDOWN_FAILURE_CODES = ["quota_exceeded", "codex_rate_limited", "provider_rate_limited"];
+    isProviderCooldownFailureCode = (code) => PROVIDER_COOLDOWN_FAILURE_CODES.includes(code);
+    isProviderAccountFailureCode = (code) => isProviderCooldownFailureCode(code) || code === PROVIDER_OUT_OF_CREDIT_FAILURE_CODE;
+    terminalFailureRequiresManualRecovery = (error48) => (error48.terminalEvidence !== null || error48.grokToolValidation != null || error48.grokResponseIdentity != null) && !error48.retryable && error48.category !== "auth" && !isProviderAccountFailureCode(error48.code);
+    ambiguousHeartbeatTransport = (error48) => {
+      const code = error48 && typeof error48 === "object" && "code" in error48 ? String(error48.code) : "";
+      return [
+        "network_error",
+        "transport_rejected",
+        "server_rejected",
+        "rate_limited",
+        "invalid_response",
+        "identity_mismatch",
+        "request_timeout",
+        "authentication_timeout"
+      ].includes(code);
+    };
+    retryableRemoteError = (error48) => {
+      if (error48 instanceof ExternalInferenceMcpError) {
+        return error48.retryable;
+      }
+      if (error48 && typeof error48 === "object" && "retryable" in error48) {
+        return error48.retryable === true;
+      }
+      return false;
+    };
+    membershipFailureDisposition = (failure2) => {
+      if (failure2.dispatchOutcome === "outcome_unknown") return "quarantine_ambiguous";
+      if (failure2.category === "auth" || ["auth_expired", "managed_chatgpt_auth_required", "invalid_account_metadata"].includes(failure2.code)) return "cascade_disable";
+      if (failure2.category === "quota" || isProviderAccountFailureCode(failure2.code)) return "cascade_cooldown";
+      if (failure2.code === "codex_server_overloaded") return "cascade_cooldown";
+      if (failure2.retryable && (["adapter", "network", "transport"].includes(failure2.category) || failure2.code === "rpc_timeout")) return "retry_same_host";
+      if (["model_unavailable", "reasoning_effort_unavailable"].includes(failure2.code)) return "cascade_cooldown";
+      if ([
+        "codex_http_connection_failed",
+        "codex_response_stream_connection_failed",
+        "codex_response_stream_disconnected",
+        "codex_provider_retry_exhausted"
+      ].includes(failure2.code)) return "cascade_cooldown";
+      return "fail_request";
+    };
+    safeFailureCode = (value, fallback) => {
+      const normalized = value.trim().toLowerCase().replace(/[^a-z0-9._-]+/gu, "_").slice(0, EXTERNAL_INFERENCE_SCHEMA_BOUNDS.long_code_length);
+      return /^[a-z0-9]/u.test(normalized) ? normalized : fallback;
+    };
+    classifyFailure = (error48, result) => {
+      if (error48 instanceof CodexAppServerError) {
+        const category2 = error48.code === "quota_exceeded" || error48.code === PROVIDER_OUT_OF_CREDIT_FAILURE_CODE ? "quota" : error48.category;
+        return {
+          category: safeFailureCode(category2, "adapter"),
+          code: safeFailureCode(error48.code, "adapter_failure"),
+          retryable: error48.retryable,
+          dispatchOutcome: error48.dispatchOutcome,
+          effectiveModel: result?.effectiveModel ?? null,
+          effectiveEffort: result?.effectiveReasoningEffort ?? null
+        };
+      }
+      if (error48 instanceof ExternalInferenceMcpError) {
+        const category2 = error48.code.startsWith("authentication") ? "auth" : [
+          "network_error",
+          "transport_rejected",
+          "server_rejected",
+          "rate_limited",
+          "request_timeout"
+        ].includes(error48.code) ? "network" : "transport";
+        return {
+          category: category2,
+          code: safeFailureCode(error48.code, "transport_failure"),
+          retryable: retryableRemoteError(error48),
+          dispatchOutcome: "not_dispatched",
+          effectiveModel: null,
+          effectiveEffort: null
+        };
+      }
+      const code = error48 && typeof error48 === "object" && "code" in error48 ? String(error48.code) : "adapter_failure";
+      const category = code.includes("model") ? "model" : code.includes("schema") || code.includes("output") ? "schema" : code.includes("cancel") ? "cancelled" : code.includes("timeout") || code.includes("deadline") ? "timeout" : code.includes("auth") ? "auth" : code.includes("quota") ? "quota" : code.includes("network") ? "network" : "adapter";
+      return {
+        category,
+        code: safeFailureCode(code, "adapter_failure"),
+        retryable: error48 && typeof error48 === "object" && "retryable" in error48 ? error48.retryable === true : false,
+        dispatchOutcome: result ? "confirmed_dispatched" : "not_dispatched",
+        effectiveModel: result?.effectiveModel ?? null,
+        effectiveEffort: result?.effectiveReasoningEffort ?? null
+      };
+    };
+    ERROR_CLASS_PATTERN = /^[A-Za-z][A-Za-z0-9_]*$/u;
+    ERRNO_CODE_PATTERN = /^[A-Z][A-Z0-9_]*$/u;
+    SYSCALL_PATTERN = /^[a-z][a-z0-9_]*$/u;
+    failureFolderRole = (path, syscall) => {
+      const scoped = relative3(resolve4(tmpdir2()), resolve4(syscall === "mkdtemp" ? dirname5(path) : path));
+      if (scoped === "") return "temp_root";
+      if (scoped === ".." || scoped.startsWith(`..${sep2}`) || isAbsolute5(scoped)) return "other";
+      const parts = scoped.split(sep2);
+      const [top = "", jobs, job = ""] = parts;
+      if (top.startsWith(INFERENCE_HOST_TEMP_FOLDERS.CODEX_WORKER_PREFIX)) {
+        return parts.length >= CODEX_HOSTED_ATTEMPT_PATH_SEGMENTS && jobs === INFERENCE_HOST_TEMP_FOLDERS.CODEX_WORKER_JOBS && job.startsWith(INFERENCE_HOST_TEMP_FOLDERS.CODEX_HOSTED_JOB_PREFIX) ? "job_folder" : "worker_folder";
+      }
+      return [
+        INFERENCE_HOST_TEMP_FOLDERS.CODEX_JOB_PREFIX,
+        INFERENCE_HOST_TEMP_FOLDERS.COPILOT_JOB_PREFIX,
+        INFERENCE_HOST_TEMP_FOLDERS.DEEPSEEK_JOB_PREFIX
+      ].some((prefix) => top.startsWith(prefix)) ? "job_folder" : "other";
+    };
+    boundedToken = (value, pattern, maxLength) => typeof value === "string" && value.length <= maxLength && pattern.test(value) ? value : null;
+    isUnclassifiedFailureCode = (code) => typeof code === "string" && (code === "adapter_failure" || code.endsWith("_adapter_failure"));
+    attemptFailureDetail = (error48) => {
+      if (error48 instanceof ExternalInferenceMcpError) return null;
+      if (error48 instanceof CodexAppServerError ? !isUnclassifiedFailureCode(error48.code) : error48 !== null && typeof error48 === "object" && typeof error48.code === "string" && /^[a-z]/u.test(error48.code)) return null;
+      let cause = error48;
+      const seen = /* @__PURE__ */ new Set([cause]);
+      for (let depth = 0; depth < INFERENCE_HOST_FAILURE_CAUSE_MAX_DEPTH; depth += 1) {
+        const next = cause instanceof Error ? cause.cause : void 0;
+        if (next === void 0 || next === null || seen.has(next)) break;
+        seen.add(next);
+        cause = next;
+      }
+      if (cause instanceof CodexAppServerError || cause instanceof ExternalInferenceMcpError) return null;
+      const record6 = cause !== null && typeof cause === "object" ? cause : {};
+      const syscall = boundedToken(record6.syscall, SYSCALL_PATTERN, EXTERNAL_INFERENCE_SCHEMA_BOUNDS.label_length);
+      const parsed = externalInferenceFailureDetailSchema.safeParse({
+        schema_version: "external_inference_failure_detail_v1",
+        error_class: cause instanceof Error ? boundedToken(cause.constructor?.name, ERROR_CLASS_PATTERN, EXTERNAL_INFERENCE_SCHEMA_BOUNDS.code_length) ?? boundedToken(cause.name, ERROR_CLASS_PATTERN, EXTERNAL_INFERENCE_SCHEMA_BOUNDS.code_length) ?? "Error" : "NonError",
+        errno_code: boundedToken(record6.code, ERRNO_CODE_PATTERN, EXTERNAL_INFERENCE_SCHEMA_BOUNDS.code_length),
+        syscall,
+        folder_role: typeof record6.path === "string" ? failureFolderRole(record6.path, syscall) : null
+      });
+      if (!parsed.success) return null;
+      const { error_class: errorClass, errno_code: errnoCode, folder_role: folderRole } = parsed.data;
+      return errorClass === "Error" && errnoCode === null && syscall === null && folderRole === null ? null : parsed.data;
+    };
+    ADAPTER_SETUP_FAILED_DRAIN_REASON = "adapter_setup_failed";
+    createUndispatchedAdapterFailureStreak = (threshold2 = runtime_policy_generated_default.external_inference.host_runtime.undispatched_adapter_failure_restart_threshold) => {
+      let count5 = 0;
+      return {
+        /** Records one finished attempt; true once the run reaches the threshold. */
+        observe: (outcome) => {
+          if (outcome.outcome === "completed" || typeof outcome.dispatch_outcome === "string" && outcome.dispatch_outcome !== "not_dispatched") {
+            count5 = 0;
+            return false;
+          }
+          if (outcome.outcome !== "failed" || outcome.failure_category !== "adapter" || !(isUnclassifiedFailureCode(outcome.failure_code) || (outcome.failure_detail ?? null) !== null)) return false;
+          count5 += 1;
+          return count5 >= threshold2;
+        },
+        count: () => count5
+      };
+    };
+  }
+});
+
+// lib/inference-host/claim-answer.ts
+var claimDeferral, quotaRecoveryMayLiftRefusal, createClaimDeferralLog, recordClaimFailure;
+var init_claim_answer = __esm({
+  "lib/inference-host/claim-answer.ts"() {
+    "use strict";
+    init_define_VTX_CLAUDE_CODE_POLICY();
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_mcp_client();
+    claimDeferral = (error48, staleReplay) => {
+      if (!(error48 instanceof ExternalInferenceMcpError)) return null;
+      if (error48.serverFailureCode === "host_not_claimable" && error48.retryable) {
+        return { reason: error48.serverReasonCode ?? error48.serverFailureCode, retry_after_ms: error48.retryAfterMs };
+      }
+      if (error48.definitivelyNotApplied && staleReplay && error48.code === "tool_rejected") {
+        return { reason: error48.serverReasonCode ?? error48.serverFailureCode ?? error48.code, retry_after_ms: null };
+      }
+      return null;
+    };
+    quotaRecoveryMayLiftRefusal = (error48) => !(error48 instanceof ExternalInferenceMcpError && error48.serverReasonCode === "provider_cooldown_fixed");
+    createClaimDeferralLog = () => {
+      const last = /* @__PURE__ */ new Map();
+      return {
+        changed: (deferral) => {
+          if (last.has(deferral.reason) && last.get(deferral.reason) === deferral.retry_after_ms) return false;
+          last.set(deferral.reason, deferral.retry_after_ms);
+          return true;
+        },
+        /** A claim the server served (or found nothing for) ends every deferral. */
+        reset: () => {
+          last.clear();
+        }
+      };
+    };
+    recordClaimFailure = (claimFailures, failure2) => {
+      const open4 = claimFailures.find((record6) => record6.resolution === void 0 && record6.claim_request_id === failure2.claimRequestId);
+      const responseBodyBytes = failure2.timing?.response_body_bytes ?? null;
+      const bodyCut = failure2.failureCode === "network_error" && (responseBodyBytes ?? 0) > 0;
+      if (open4) {
+        open4.attempts = Math.min(Number.MAX_SAFE_INTEGER, open4.attempts + 1);
+        if (bodyCut) open4.body_cut = true;
+        if (responseBodyBytes !== null) {
+          open4.response_body_bytes = Math.max(open4.response_body_bytes ?? 0, responseBodyBytes);
+        }
+        return false;
+      }
+      claimFailures.push({
+        claim_request_id: failure2.claimRequestId,
+        failed_at: failure2.failedAt,
+        failure_code: failure2.failureCode,
+        http_status_code: failure2.httpStatusCode,
+        response_body_bytes: responseBodyBytes,
+        body_cut: bodyCut,
+        attempts: 1
+      });
+      return true;
+    };
+  }
+});
+
 // lib/inference-host/runner.ts
 import { createHash as createHash5, randomUUID as randomUUID2 } from "node:crypto";
 function createDefaultInferenceHostRunnerDependencies(options) {
@@ -37639,7 +37941,7 @@ function createDefaultInferenceHostRunnerDependencies(options) {
     envelopePublicKey: options.envelopePublicKey
   };
 }
-var import_ajv, providerHttpStatus, PROVIDER_COOLDOWN_FAILURE_CODES, isProviderCooldownFailureCode, isProviderAccountFailureCode, terminalFailureRequiresManualRecovery, canReplayFencedAgentTerminal, fencedTurnAwaitsAssignmentCheck, RUNTIME_RECEIPT_SCHEMA_VERSION, ATTEMPT_RECEIPT_SCHEMA_VERSION, HOST_RUNTIME_POLICY2, CLAIM_DISPATCH_BATCH_SIZE, DEFAULT_ADVERTISEMENT_TTL_MS, DEFAULT_ADVERTISEMENT_REFRESH_LEAD_MS, DEFAULT_HOST_HEARTBEAT_MS, DEFAULT_PROVIDER_RATE_LIMIT_REFRESH_MS, DEFAULT_ATTEMPT_HEARTBEAT_MS, DEFAULT_DRAIN_TIMEOUT_MS, DEFAULT_REMOTE_RETRY_LIMIT, MIN_SLEEP_MS, MIN_HOST_HEARTBEAT_GAP_DIAGNOSTIC_MS, HOST_HEARTBEAT_GAP_DIAGNOSTIC_FACTOR, DEFAULT_QUOTA_COOLDOWN_MS, DEFAULT_AGENT_AUTH_COOLDOWN_MS, DEFAULT_AGENT_RATE_LIMIT_COOLDOWN_MS, DEFAULT_AGENT_TRANSIENT_COOLDOWN_MS, MIN_CLAIM_START_WINDOW_MS, MAX_ATTEMPT_START_RETRY_DELAY_MS, UNBOUNDED_AVAILABLE_SLOTS, buildInferenceAdvertisedModels, summarizeInferenceHostRuntimeRecovery, FileInferenceHostRuntimeReceiptStore, InferenceHostRecoveryRequiredError, InferenceHostRunnerError, defaultSleep, abortError, settlesWithin, defaultRegisterSignalHandlers, safeInteger, exactObjectKeys, validIso, validateAttemptReceipt, validateRuntimeReceipt, sha256, stableOperationId, buildAttemptStartRequest, isoAt, providerWeeklyQuotaFromRateLimits, usableProviderQuotaSnapshot, finitePositiveOption, validateRunnerOptions, assertLocalCredentialIdentity, retryableRemoteError, remoteRetryAfterMs, controlPlaneFatal, defaultValidateOutput, objectRecord, positiveUtf8ByteLimit, assertCompilableOutputSchema, parseOutputContract, serverProviderDispatchNotAfterMs, membershipFailureDisposition, safeFailureCode, publicServerFailureCode, attemptStartRetryFallbackMs, exactJson2, runnerIdentityMismatch, assertAdvertisementResult, assertHostHeartbeatResult, assertClaimResult, assertStartResult, assertJobHeartbeatResult, assertTerminalResult, isDefinitiveCompletionEvidenceExpiry, classifyFailure, ambiguousHeartbeatTransport, reportedTokenUsage, reportedUsage, InferenceHostRunner, createInferenceAgentControlClient, INFERENCE_AGENT_WAKE_SCHEMA, parseInferenceAgentWake, InferenceAgentRuntime;
+var import_ajv, canReplayFencedAgentTerminal, fencedTurnAwaitsAssignmentCheck, RUNTIME_RECEIPT_SCHEMA_VERSION, ATTEMPT_RECEIPT_SCHEMA_VERSION, HOST_RUNTIME_POLICY2, CLAIM_DISPATCH_BATCH_SIZE, DEFAULT_ADVERTISEMENT_TTL_MS, DEFAULT_ADVERTISEMENT_REFRESH_LEAD_MS, DEFAULT_HOST_HEARTBEAT_MS, DEFAULT_PROVIDER_RATE_LIMIT_REFRESH_MS, DEFAULT_ATTEMPT_HEARTBEAT_MS, DEFAULT_DRAIN_TIMEOUT_MS, DEFAULT_REMOTE_RETRY_LIMIT, MIN_SLEEP_MS, MIN_HOST_HEARTBEAT_GAP_DIAGNOSTIC_MS, HOST_HEARTBEAT_GAP_DIAGNOSTIC_FACTOR, DEFAULT_QUOTA_COOLDOWN_MS, DEFAULT_AGENT_AUTH_COOLDOWN_MS, DEFAULT_AGENT_RATE_LIMIT_COOLDOWN_MS, DEFAULT_AGENT_TRANSIENT_COOLDOWN_MS, MIN_CLAIM_START_WINDOW_MS, MAX_ATTEMPT_START_RETRY_DELAY_MS, UNBOUNDED_AVAILABLE_SLOTS, buildInferenceAdvertisedModels, summarizeInferenceHostRuntimeRecovery, FileInferenceHostRuntimeReceiptStore, InferenceHostRecoveryRequiredError, InferenceHostRunnerError, defaultSleep, abortError, settlesWithin, defaultRegisterSignalHandlers, safeInteger, exactObjectKeys, validIso, validateAttemptReceipt, validateRuntimeReceipt, sha256, stableOperationId, buildAttemptStartRequest, isoAt, providerWeeklyQuotaFromRateLimits, usableProviderQuotaSnapshot, finitePositiveOption, validateRunnerOptions, assertLocalCredentialIdentity, remoteRetryAfterMs, controlPlaneFatal, defaultValidateOutput, objectRecord, positiveUtf8ByteLimit, assertCompilableOutputSchema, parseOutputContract, serverProviderDispatchNotAfterMs, publicServerFailureCode, attemptStartRetryFallbackMs, exactJson2, runnerIdentityMismatch, assertAdvertisementResult, assertHostHeartbeatResult, assertClaimResult, assertStartResult, assertJobHeartbeatResult, assertTerminalResult, isDefinitiveCompletionEvidenceExpiry, reportedTokenUsage, reportedUsage, InferenceHostRunner, createInferenceAgentControlClient, INFERENCE_AGENT_WAKE_SCHEMA, parseInferenceAgentWake, InferenceAgentRuntime;
 var init_runner = __esm({
   "lib/inference-host/runner.ts"() {
     "use strict";
@@ -37660,16 +37962,8 @@ var init_runner = __esm({
     init_agent_answer();
     init_config2();
     init_oauth();
-    init_provider_credit();
-    providerHttpStatus = (error48) => {
-      if (!(error48 instanceof CodexAppServerError)) return null;
-      const status = error48.httpStatusCode;
-      return typeof status === "number" && Number.isInteger(status) && status >= HTTP_CLIENT_ERROR_MIN && status <= HTTP_STATUS_MAX ? status : null;
-    };
-    PROVIDER_COOLDOWN_FAILURE_CODES = ["quota_exceeded", "codex_rate_limited", "provider_rate_limited"];
-    isProviderCooldownFailureCode = (code) => PROVIDER_COOLDOWN_FAILURE_CODES.includes(code);
-    isProviderAccountFailureCode = (code) => isProviderCooldownFailureCode(code) || code === PROVIDER_OUT_OF_CREDIT_FAILURE_CODE;
-    terminalFailureRequiresManualRecovery = (error48) => (error48.terminalEvidence !== null || error48.grokToolValidation != null || error48.grokResponseIdentity != null) && !error48.retryable && error48.category !== "auth" && !isProviderAccountFailureCode(error48.code);
+    init_attempt_failure();
+    init_claim_answer();
     canReplayFencedAgentTerminal = (state2, fence) => state2?.schema_version === "vtx_inference_agent_runtime_v3" && state2.adapter_id === fence.adapter_id && state2.host_id === fence.host_id && state2.assignment.assignment_id === fence.assignment_id && state2.pending_turn?.terminal_receipt?.terminal_status === "failed" && state2.pending_turn.terminal_receipt.failure_code === fence.failure_code && (fence.dispatch_outcome !== "outcome_unknown" || (state2.pending_turn.terminal_receipt.grok_tool_validation?.prior_dispatch === true || state2.pending_turn.terminal_receipt.grok_response_identity != null || state2.pending_turn.terminal_receipt.provider_http_status !== void 0) && state2.pending_turn.terminal_receipt.dispatch_outcome === "outcome_unknown");
     fencedTurnAwaitsAssignmentCheck = (state2, fence) => fence.failure_code === "agent_turn_outcome_unknown" && state2?.schema_version === "vtx_inference_agent_runtime_v3" && state2.adapter_id === fence.adapter_id && state2.host_id === fence.host_id && state2.assignment.assignment_id === fence.assignment_id && state2.pending_turn != null && !state2.pending_turn.terminal_receipt;
     RUNTIME_RECEIPT_SCHEMA_VERSION = "vtx_inference_host_runtime_v1";
@@ -37808,13 +38102,13 @@ var init_runner = __esm({
     };
     defaultSleep = async (milliseconds, signal) => {
       if (signal?.aborted) throw abortError();
-      await new Promise((resolve16, reject) => {
+      await new Promise((resolve17, reject) => {
         const finish = (callback) => {
           signal?.removeEventListener("abort", onAbort);
           callback();
         };
         const timer = setTimeout(
-          () => finish(resolve16),
+          () => finish(resolve17),
           Math.max(MIN_SLEEP_MS, milliseconds)
         );
         const onAbort = () => {
@@ -37840,9 +38134,9 @@ var init_runner = __esm({
       let timer = null;
       const settled2 = await Promise.race([
         promise2.then(() => true, () => true),
-        new Promise((resolve16) => {
+        new Promise((resolve17) => {
           timer = setTimeout(
-            () => resolve16(false),
+            () => resolve17(false),
             Math.max(MIN_SLEEP_MS, timeoutMs)
           );
         })
@@ -38107,15 +38401,6 @@ var init_runner = __esm({
         );
       }
     };
-    retryableRemoteError = (error48) => {
-      if (error48 instanceof ExternalInferenceMcpError) {
-        return error48.retryable;
-      }
-      if (error48 && typeof error48 === "object" && "retryable" in error48) {
-        return error48.retryable === true;
-      }
-      return false;
-    };
     remoteRetryAfterMs = (error48, fallbackMs) => error48 instanceof ExternalInferenceMcpError && error48.retryAfterMs !== null && Number.isSafeInteger(error48.retryAfterMs) && error48.retryAfterMs >= 0 ? Math.max(fallbackMs, error48.retryAfterMs) : fallbackMs;
     controlPlaneFatal = (error48) => {
       const code = error48 && typeof error48 === "object" && "code" in error48 ? String(error48.code) : "";
@@ -38271,25 +38556,6 @@ var init_runner = __esm({
       }
       return notAfterMs;
     };
-    membershipFailureDisposition = (failure2) => {
-      if (failure2.dispatchOutcome === "outcome_unknown") return "quarantine_ambiguous";
-      if (failure2.category === "auth" || ["auth_expired", "managed_chatgpt_auth_required", "invalid_account_metadata"].includes(failure2.code)) return "cascade_disable";
-      if (failure2.category === "quota" || isProviderAccountFailureCode(failure2.code)) return "cascade_cooldown";
-      if (failure2.code === "codex_server_overloaded") return "cascade_cooldown";
-      if (failure2.retryable && (["adapter", "network", "transport"].includes(failure2.category) || failure2.code === "rpc_timeout")) return "retry_same_host";
-      if (["model_unavailable", "reasoning_effort_unavailable"].includes(failure2.code)) return "cascade_cooldown";
-      if ([
-        "codex_http_connection_failed",
-        "codex_response_stream_connection_failed",
-        "codex_response_stream_disconnected",
-        "codex_provider_retry_exhausted"
-      ].includes(failure2.code)) return "cascade_cooldown";
-      return "fail_request";
-    };
-    safeFailureCode = (value, fallback) => {
-      const normalized = value.trim().toLowerCase().replace(/[^a-z0-9._-]+/gu, "_").slice(0, EXTERNAL_INFERENCE_SCHEMA_BOUNDS.long_code_length);
-      return /^[a-z0-9]/u.test(normalized) ? normalized : fallback;
-    };
     publicServerFailureCode = (value) => value !== null && /^[a-z0-9][a-z0-9._-]{0,95}$/u.test(value) ? value : null;
     attemptStartRetryFallbackMs = (retryCount) => Math.min(
       HOST_RUNTIME_POLICY2.attempt_start_retry_base_ms * BACKOFF_GROWTH_FACTOR ** Math.min(Math.max(0, retryCount - 1), HOST_RUNTIME_POLICY2.attempt_start_retry_exponent_max),
@@ -38333,59 +38599,6 @@ var init_runner = __esm({
       }
     };
     isDefinitiveCompletionEvidenceExpiry = (error48, terminal) => terminal?.schema_version === "external_inference_job_complete_v1" && error48 instanceof ExternalInferenceMcpError && error48.code === "completion_evidence_expired" && error48.definitivelyNotApplied;
-    classifyFailure = (error48, result) => {
-      if (error48 instanceof CodexAppServerError) {
-        const category2 = error48.code === "quota_exceeded" || error48.code === PROVIDER_OUT_OF_CREDIT_FAILURE_CODE ? "quota" : error48.category;
-        return {
-          category: safeFailureCode(category2, "adapter"),
-          code: safeFailureCode(error48.code, "adapter_failure"),
-          retryable: error48.retryable,
-          dispatchOutcome: error48.dispatchOutcome,
-          effectiveModel: result?.effectiveModel ?? null,
-          effectiveEffort: result?.effectiveReasoningEffort ?? null
-        };
-      }
-      if (error48 instanceof ExternalInferenceMcpError) {
-        const category2 = error48.code.startsWith("authentication") ? "auth" : [
-          "network_error",
-          "transport_rejected",
-          "server_rejected",
-          "rate_limited",
-          "request_timeout"
-        ].includes(error48.code) ? "network" : "transport";
-        return {
-          category: category2,
-          code: safeFailureCode(error48.code, "transport_failure"),
-          retryable: retryableRemoteError(error48),
-          dispatchOutcome: "not_dispatched",
-          effectiveModel: null,
-          effectiveEffort: null
-        };
-      }
-      const code = error48 && typeof error48 === "object" && "code" in error48 ? String(error48.code) : "adapter_failure";
-      const category = code.includes("model") ? "model" : code.includes("schema") || code.includes("output") ? "schema" : code.includes("cancel") ? "cancelled" : code.includes("timeout") || code.includes("deadline") ? "timeout" : code.includes("auth") ? "auth" : code.includes("quota") ? "quota" : code.includes("network") ? "network" : "adapter";
-      return {
-        category,
-        code: safeFailureCode(code, "adapter_failure"),
-        retryable: error48 && typeof error48 === "object" && "retryable" in error48 ? error48.retryable === true : false,
-        dispatchOutcome: result ? "confirmed_dispatched" : "not_dispatched",
-        effectiveModel: result?.effectiveModel ?? null,
-        effectiveEffort: result?.effectiveReasoningEffort ?? null
-      };
-    };
-    ambiguousHeartbeatTransport = (error48) => {
-      const code = error48 && typeof error48 === "object" && "code" in error48 ? String(error48.code) : "";
-      return [
-        "network_error",
-        "transport_rejected",
-        "server_rejected",
-        "rate_limited",
-        "invalid_response",
-        "identity_mismatch",
-        "request_timeout",
-        "authentication_timeout"
-      ].includes(code);
-    };
     reportedTokenUsage = (usage, source = "codex_app_server") => ({
       schema_version: EXTERNAL_INFERENCE_USAGE_SCHEMA_VERSION,
       availability: "reported",
@@ -38420,15 +38633,25 @@ var init_runner = __esm({
         let removeQuiesceListener = () => {
         };
         let quiesceRequested = Boolean(this.options.quiesceSignal?.aborted);
+        let quiesceDrainReason = "service_update";
         let wakeQuiesce;
-        const quiesceWake = new Promise((resolve16) => {
-          wakeQuiesce = resolve16;
-        });
+        const quiesceWake = new Promise((resolve17) => {
+          wakeQuiesce = resolve17;
+        });
+        const quiesceAbort = new AbortController();
+        const requestQuiesce = (reason) => {
+          if (quiesceRequested) return;
+          quiesceDrainReason = reason;
+          quiesceRequested = true;
+          quiesceAbort.abort();
+          wakeQuiesce();
+        };
         let drainRequested = false;
         let drainReason = "stopped";
         let terminalRecoveryFailureCode = null;
         let acknowledgedRecoveryDiagnostic = null;
         const claimFailures = [];
+        const claimDeferralLog = createClaimDeferralLog();
         let claimFailuresDropped = 0;
         const boundClaimFailures = () => {
           while (claimFailures.length > EXTERNAL_INFERENCE_LIMITS.max_heartbeat_claim_failures) {
@@ -38458,13 +38681,14 @@ var init_runner = __esm({
         };
         let hostHeartbeatLoop = Promise.resolve();
         let providerDispatchWatchdogDrainRequested = false;
+        const adapterFailureStreak = createUndispatchedAdapterFailureStreak();
         const agentAbort = new AbortController();
         let agentLoop = Promise.resolve();
         let modelCatalogRefresh = null;
         let providerRateLimitRefresh = null;
         let wakeDrain;
-        const drainSignal = new Promise((resolve16) => {
-          wakeDrain = resolve16;
+        const drainSignal = new Promise((resolve17) => {
+          wakeDrain = resolve17;
         });
         const requestDrain = (reason) => {
           const priority = (value) => {
@@ -38482,10 +38706,7 @@ var init_runner = __esm({
           wakeDrain();
         };
         try {
-          const onQuiesce = () => {
-            quiesceRequested = true;
-            wakeQuiesce();
-          };
+          const onQuiesce = () => requestQuiesce("service_update");
           this.options.quiesceSignal?.addEventListener("abort", onQuiesce, { once: true });
           removeQuiesceListener = () => this.options.quiesceSignal?.removeEventListener("abort", onQuiesce);
           if (quiesceRequested) return { claimed, completed, failed: failed2, drain_reason: "service_update" };
@@ -38592,7 +38813,7 @@ var init_runner = __esm({
           await mcp.initialize({ signal: this.options.signal });
           if (settings.agentRuntime) {
             const agentRuntimeSettings = settings.agentRuntime;
-            const agentIdleSignal = this.options.quiesceSignal ? AbortSignal.any([agentAbort.signal, this.options.quiesceSignal]) : agentAbort.signal;
+            const agentIdleSignal = AbortSignal.any([agentAbort.signal, quiesceAbort.signal]);
             agentLoop = (async () => {
               while (!agentAbort.signal.aborted && !quiesceRequested) {
                 const existingFence = await readInferenceAgentFailureFence(
@@ -38643,7 +38864,7 @@ var init_runner = __esm({
                   controlClient: createInferenceAgentControlClient(mcp),
                   adapter: agentRuntimeSettings.adapter,
                   dataRequestTimeoutMs: agentRuntimeSettings.dataRequestTimeoutMs,
-                  quiesceSignal: this.options.quiesceSignal
+                  quiesceSignal: quiesceAbort.signal
                 });
                 try {
                   if (this.options.once) {
@@ -38839,8 +39060,8 @@ var init_runner = __esm({
             receipt = result;
             const revision = receiptRevision + 1;
             receiptRevision = revision;
-            const durable = new Promise((resolve16, reject) => {
-              receiptDurabilityWaiters.push({ revision, resolve: resolve16, reject });
+            const durable = new Promise((resolve17, reject) => {
+              receiptDurabilityWaiters.push({ revision, resolve: resolve17, reject });
             });
             scheduleReceiptWriter();
             await durable;
@@ -38956,8 +39177,8 @@ var init_runner = __esm({
             const tool = receipt.registered ? "inference.host.advertise" : "inference.host.register";
             let result;
             let releaseAdvertisementHandoff;
-            const currentAdvertisementHandoff = new Promise((resolve16) => {
-              releaseAdvertisementHandoff = resolve16;
+            const currentAdvertisementHandoff = new Promise((resolve17) => {
+              releaseAdvertisementHandoff = resolve17;
             });
             advertisementHandoff = currentAdvertisementHandoff;
             try {
@@ -39139,7 +39360,7 @@ var init_runner = __esm({
               );
               throw error48;
             }
-            if (claimAvailabilityBackoff !== null && result.host.status === "online" && request.provider_quota_recovery != null && Date.parse(request.provider_quota_recovery.observed_at) >= claimAvailabilityBackoff.rejectedAtMs) {
+            if (claimAvailabilityBackoff?.liftable === true && result.host.status === "online" && request.provider_quota_recovery != null && Date.parse(request.provider_quota_recovery.observed_at) >= claimAvailabilityBackoff.rejectedAtMs) {
               claimAvailabilityBackoff = null;
             }
           };
@@ -39504,6 +39725,14 @@ var init_runner = __esm({
                   attempt_id: attemptId,
                   active_attempts: active.size
                 });
+                if (!adapterFailureStreak.observe(outcome) || quiesceRequested) return;
+                emitDiagnostic("worker_restart_requested", {
+                  reason: ADAPTER_SETUP_FAILED_DRAIN_REASON,
+                  consecutive_failures: adapterFailureStreak.count(),
+                  failure_code: outcome.failure_code,
+                  failure_detail: outcome.failure_detail ?? null
+                });
+                requestQuiesce(ADAPTER_SETUP_FAILED_DRAIN_REASON);
               },
               onProviderDispatch: (observation) => {
                 emitDiagnostic("provider_dispatch_freshness_passed", {
@@ -39839,6 +40068,7 @@ var init_runner = __esm({
                   }
                 );
                 assertClaimResult(request, claim);
+                claimDeferralLog.reset();
                 resolveClaimFailures(
                   "replayed",
                   (record6) => record6.claim_request_id === request.claim_request_id
@@ -39849,35 +40079,25 @@ var init_runner = __esm({
                   "claim_failed"
                 );
                 const httpStatusCode = error48 instanceof ExternalInferenceMcpError ? error48.httpStatusCode : null;
-                if (claimTiming) emitDiagnostic("claim_request_failed", {
-                  claim_request_id: request.claim_request_id,
-                  failure_code: failureCode,
-                  http_status_code: httpStatusCode,
-                  client_timing: claimTiming
-                });
-                if (!this.options.signal?.aborted) {
-                  const open4 = claimFailures.find((record6) => record6.resolution === void 0 && record6.claim_request_id === request.claim_request_id);
-                  const responseBodyBytes = claimTiming?.response_body_bytes ?? null;
-                  const bodyCut = failureCode === "network_error" && (responseBodyBytes ?? 0) > 0;
-                  if (open4) {
-                    open4.attempts = Math.min(Number.MAX_SAFE_INTEGER, open4.attempts + 1);
-                    if (bodyCut) open4.body_cut = true;
-                    if (responseBodyBytes !== null) {
-                      open4.response_body_bytes = Math.max(open4.response_body_bytes ?? 0, responseBodyBytes);
-                    }
-                  } else {
-                    claimFailures.push({
-                      claim_request_id: request.claim_request_id,
-                      failed_at: isoAt(claimCallStartedAtMs),
-                      failure_code: failureCode,
-                      http_status_code: httpStatusCode,
-                      response_body_bytes: responseBodyBytes,
-                      body_cut: bodyCut,
-                      attempts: 1
-                    });
-                    boundClaimFailures();
-                  }
+                const deferral = claimDeferral(error48, request.advertisement_generation < receipt.advertisement_generation);
+                if (deferral && claimDeferralLog.changed(deferral)) {
+                  emitDiagnostic("claim_deferred", { claim_request_id: request.claim_request_id, ...deferral });
+                } else if (!deferral && claimTiming) {
+                  emitDiagnostic("claim_request_failed", {
+                    claim_request_id: request.claim_request_id,
+                    failure_code: failureCode,
+                    http_status_code: httpStatusCode,
+                    server_failure_code: error48 instanceof ExternalInferenceMcpError ? error48.serverFailureCode : null,
+                    client_timing: claimTiming
+                  });
                 }
+                if (!deferral && !this.options.signal?.aborted && recordClaimFailure(claimFailures, {
+                  claimRequestId: request.claim_request_id,
+                  failedAt: isoAt(claimCallStartedAtMs),
+                  failureCode,
+                  httpStatusCode,
+                  timing: claimTiming
+                })) boundClaimFailures();
                 if (!this.options.signal?.aborted && request.schema_version === "external_inference_job_claim_v4" && error48 instanceof ExternalInferenceMcpError && error48.serverFailureCode === "schema_validation") {
                   batchClaimVersion = INFERENCE_JOB_CLAIM_SCHEMA_VERSION.V3;
                   await mutateReceipt((current) => ({
@@ -39969,7 +40189,7 @@ var init_runner = __esm({
                   const rejectedAtMs = now();
                   const retryAtMs = rejectedAtMs + remoteRetryAfterMs(error48, HOST_RUNTIME_POLICY2.remote_retry_fallback_ms);
                   if (error48 instanceof ExternalInferenceMcpError && error48.serverFailureCode === "host_not_claimable") {
-                    claimAvailabilityBackoff = { untilMs: retryAtMs, rejectedAtMs };
+                    claimAvailabilityBackoff = { untilMs: retryAtMs, rejectedAtMs, liftable: quotaRecoveryMayLiftRefusal(error48) };
                   } else {
                     nextClaimAt = retryAtMs;
                   }
@@ -40153,7 +40373,7 @@ var init_runner = __esm({
           }
           if (quiesceRequested && !drainRequested) {
             await Promise.race([Promise.allSettled([...active.values(), agentLoop]), drainSignal]);
-            if (!drainRequested) requestDrain("service_update");
+            if (!drainRequested) requestDrain(quiesceDrainReason);
           }
           stopHostHeartbeatLoop();
           if (providerDispatchWatchdogDrainRequested) {
@@ -40312,8 +40532,8 @@ var init_runner = __esm({
         let providerDispatchWatchdog = null;
         let providerDispatchWatchdogExpired = false;
         let resolveProviderDispatchWatchdog;
-        const providerDispatchWatchdogSignal = new Promise((resolve16) => {
-          resolveProviderDispatchWatchdog = resolve16;
+        const providerDispatchWatchdogSignal = new Promise((resolve17) => {
+          resolveProviderDispatchWatchdog = resolve17;
         });
         const clearProviderDispatchWatchdog = () => {
           if (providerDispatchWatchdog !== null) clearTimeout(providerDispatchWatchdog);
@@ -40750,8 +40970,8 @@ var init_runner = __esm({
             });
           }
           let resolveTerminalDispatchOutcome;
-          const terminalDispatchOutcomeSignal = new Promise((resolve16) => {
-            resolveTerminalDispatchOutcome = resolve16;
+          const terminalDispatchOutcomeSignal = new Promise((resolve17) => {
+            resolveTerminalDispatchOutcome = resolve17;
           });
           let terminalDispatchOutcomeObserved = false;
           const adapterAttempt = this.dependencies.codexAdapter.runAttempt({
@@ -41055,6 +41275,8 @@ var init_runner = __esm({
             signal,
             deadlineAtMs: hostClockMs(jobInput.evidence_expires_at)
           }) === true);
+          const failureDetail = attemptFailureDetail(heartbeatFailure ?? effectiveError);
+          const sendFailureDetail = failureDetail !== null && (mcp.supportsFailureDetail?.() === true || await mcp.refreshFailureDetailSupport?.({ signal, deadlineAtMs: hostClockMs(jobInput.evidence_expires_at) }) === true);
           const failureRequest = jobFailRequestSchema.parse({
             schema_version: "external_inference_job_fail_v1",
             contract_version: EXTERNAL_INFERENCE_CONTRACT_VERSION,
@@ -41101,6 +41323,7 @@ var init_runner = __esm({
             ...sendHttpStatus ? { provider_http_status: httpStatus } : {},
             ...sendGrokDiagnostic ? { grok_tool_validation: grokDiagnostic } : {},
             ...sendIdentityDiagnostic ? { grok_response_identity: identityDiagnostic } : {},
+            ...sendFailureDetail ? { failure_detail: failureDetail } : {},
             membership_disposition: membershipFailureDisposition({
               ...failure2,
               dispatchOutcome
@@ -41136,6 +41359,7 @@ var init_runner = __esm({
             failure_code: failureRequest.failure_code,
             retryable: failureRequest.retryable,
             process_exit: failureRequest.process_exit ?? null,
+            failure_detail: failureDetail,
             dispatch_outcome: failureRequest.outcome.dispatch_outcome,
             response_outcome: failureRequest.outcome.response_outcome,
             latency_ms: adapterResult?.latencyMs ?? null,
@@ -42447,8 +42671,8 @@ var init_owned_directory_removal = __esm({
     TRANSIENT_REMOVAL_ERROR_CODES = /* @__PURE__ */ new Set(["EBUSY", "EMFILE", "ENFILE", "ENOTEMPTY", "EPERM"]);
     removeOwnedDirectory = async (path, options = {}) => {
       const removeDirectory = options.removeDirectory ?? rm5;
-      const sleep3 = options.sleep ?? ((milliseconds) => new Promise((resolve16) => {
-        setTimeout(resolve16, milliseconds);
+      const sleep3 = options.sleep ?? ((milliseconds) => new Promise((resolve17) => {
+        setTimeout(resolve17, milliseconds);
       }));
       const maxAttempts = Math.max(1, options.maxAttempts ?? runtime_policy_generated_default.external_inference.host_core.owned_directory_removal_attempts);
       const retryDelayMs = Math.max(0, options.retryDelayMs ?? runtime_policy_generated_default.external_inference.host_core.owned_directory_removal_retry_step_ms);
@@ -42490,7 +42714,7 @@ import { createHash as createHash6 } from "node:crypto";
 import { constants as fsConstants } from "node:fs";
 import { access as access2, readFile as readFile5, realpath as realpath3 } from "node:fs/promises";
 import { createRequire } from "node:module";
-import { dirname as dirname5, join as join5 } from "node:path";
+import { dirname as dirname6, join as join5 } from "node:path";
 import { spawn as spawn5 } from "node:child_process";
 var HOST_RUNTIME_POLICY3, PINNED_CODEX_CLI_VERSION, PINNED_CODEX_LINUX_X64_SHA256, PINNED_CODEX_WINDOWS_X64_SHA256, pinnedShaForPlatform, pinnedPackageForPlatform, resolvePinnedCodexPackageBinaryPath, readCodexVersion, verifyPinnedCodexBinary, resolvePinnedCodexBinary;
 var init_codex_binary = __esm({
@@ -42534,14 +42758,14 @@ var init_codex_binary = __esm({
       const spec = pinnedPackageForPlatform(platform, architecture);
       const packageJsonPath = resolvePackage(`${spec.packageName}/package.json`);
       return join5(
-        dirname5(packageJsonPath),
+        dirname6(packageJsonPath),
         "vendor",
         spec.target,
         "bin",
         spec.binaryName
       );
     };
-    readCodexVersion = async (binaryPath) => await new Promise((resolve16, reject) => {
+    readCodexVersion = async (binaryPath) => await new Promise((resolve17, reject) => {
       const child = spawn5(binaryPath, ["--version"], {
         stdio: ["ignore", "pipe", "pipe"],
         windowsHide: true,
@@ -42580,7 +42804,7 @@ var init_codex_binary = __esm({
           reject(new Error("Codex version probe failed."));
           return;
         }
-        resolve16(stdout.trim());
+        resolve17(stdout.trim());
       });
     });
     verifyPinnedCodexBinary = async (candidatePath, dependencies = {}) => {
@@ -42639,9 +42863,9 @@ import {
   rm as rm6
 } from "node:fs/promises";
 import { createHash as createHash7, randomBytes as randomBytes4 } from "node:crypto";
-import { tmpdir as tmpdir2 } from "node:os";
-import { isAbsolute as isAbsolute5, join as join6, relative as relative3, resolve as resolve4, sep as sep2 } from "node:path";
-var MAX_PROMPT_BYTES2, HOST_RUNTIME_POLICY4, CODEX_MODEL_NAME_PATTERN, CODEX_REASONING_EFFORT_PATTERN, codexRecoveryCheckpointProcessFingerprint, proveCodexSameBootQuiescence, tokenUsageReceiptSchema, turnResultReceiptSchema, terminalReceiptSchema, recoveryCheckpointSchema, recoveryFileSchema, FileCodexAttemptRecoveryStore, utf8Bytes, assertAttemptActive, tomlString, permissionConfig, ensureDedicatedCodexHome, createIsolatedCodexAttemptResources, createIsolatedCodexHostResources, validateAttemptInput, isStrictDescendant, assertRecoveryResourceScope, removeRecoveredThread, confirmCodexGuardianTerminated, confirmGuardianTerminatedForRecovery, recoveredCodexProcessExit, reconcileCodexAttemptRecovery, CodexSubscriptionAdapter, CodexAgentSubscriptionAdapter;
+import { tmpdir as tmpdir3 } from "node:os";
+import { isAbsolute as isAbsolute6, join as join6, relative as relative4, resolve as resolve5, sep as sep3 } from "node:path";
+var MAX_PROMPT_BYTES2, HOST_RUNTIME_POLICY4, CODEX_MODEL_NAME_PATTERN, CODEX_REASONING_EFFORT_PATTERN, codexRecoveryCheckpointProcessFingerprint, proveCodexSameBootQuiescence, tokenUsageReceiptSchema, turnResultReceiptSchema, terminalReceiptSchema, recoveryAccountLimitsSchema, recoveryCheckpointSchema, recoveryFileSchema, FileCodexAttemptRecoveryStore, utf8Bytes, assertAttemptActive, tomlString, permissionConfig, ensureDedicatedCodexHome, createIsolatedCodexAttemptResources, isMissingPathError, createIsolatedCodexHostResources, validateAttemptInput, isStrictDescendant, assertRecoveryResourceScope, removeRecoveredThread, confirmCodexGuardianTerminated, confirmGuardianTerminatedForRecovery, recoveredCodexProcessExit, reconcileCodexAttemptRecovery, CodexSubscriptionAdapter, CodexAgentSubscriptionAdapter;
 var init_codex_adapter = __esm({
   "lib/inference-host/codex-adapter.ts"() {
     "use strict";
@@ -42734,6 +42958,23 @@ var init_codex_adapter = __esm({
         })
       })
     ]);
+    recoveryAccountLimitsSchema = external_exports.strictObject({
+      schema_version: external_exports.literal("vtx_codex_recovery_account_limits_v1"),
+      attempts: external_exports.record(external_exports.string(), external_exports.strictObject({
+        // The exact failure the limits were read with: input, code and retry time.
+        inputSha256: external_exports.string().regex(/^[0-9a-f]{64}$/u),
+        code: external_exports.string().min(1).max(CODEX_RECOVERY_RECEIPT_MAX_CHARS.ERROR_CODE),
+        retryAtMs: external_exports.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).nullable(),
+        rateLimits: external_exports.custom((value) => {
+          try {
+            parseCodexAccountRateLimits(value);
+            return true;
+          } catch {
+            return false;
+          }
+        })
+      }))
+    });
     recoveryCheckpointSchema = external_exports.strictObject({
       schemaVersion: external_exports.literal("vtx_codex_attempt_recovery_v1"),
       attemptId: identifierSchema,
@@ -42771,6 +43012,10 @@ var init_codex_adapter = __esm({
         this.path = path;
         this.queue = Promise.resolve();
       }
+      /** The account limits file beside the recovery file (recoveryAccountLimitsSchema). */
+      get accountLimitsPath() {
+        return `${this.path}.account-limits.json`;
+      }
       async readAll() {
         const raw = await readInferencePrivateFile(this.path, "Codex attempt recovery file");
         if (raw === null) return {};
@@ -42788,44 +43033,116 @@ var init_codex_adapter = __esm({
         }
         return document2.attempts;
       }
+      async readAccountLimits() {
+        try {
+          const raw = await readInferencePrivateFile(this.accountLimitsPath, "Codex recovery account limits file");
+          return raw === null ? {} : recoveryAccountLimitsSchema.parse(JSON.parse(raw)).attempts;
+        } catch {
+          return {};
+        }
+      }
+      // Limits reach only the exact failure they were read with.
+      withAccountLimits(checkpoint, limits) {
+        const entry = limits[checkpoint.attemptId];
+        const terminal = checkpoint.terminal;
+        if (terminal?.kind !== "failed" || entry?.inputSha256 !== checkpoint.inputSha256 || entry.code !== terminal.error.code || entry.retryAtMs !== (terminal.error.retryAtMs ?? null)) return checkpoint;
+        return { ...checkpoint, terminal: { kind: "failed", error: { ...terminal.error, rateLimits: entry.rateLimits } } };
+      }
+      // The limits file is written first (a crash between the writes leaves limits
+      // no failure matches, never a failure missing them) and only when its entries
+      // change, and never at the recovery file's expense: a limits file that cannot
+      // be written costs only the limits. Entries of attempts the recovery file no
+      // longer holds (cleared by this or an older release) go.
+      async writeAll(attempts, limits, previous) {
+        const kept = Object.fromEntries(Object.entries(limits).filter(([attemptId]) => attemptId in attempts));
+        if (Object.keys(attempts).length === 0 || JSON.stringify(kept) !== JSON.stringify(previous)) {
+          try {
+            if (Object.keys(kept).length === 0) {
+              await clearInferencePrivateFile(this.accountLimitsPath, "Codex recovery account limits file");
+            } else {
+              await writeAtomicInferencePrivateFile(this.accountLimitsPath, `${JSON.stringify({
+                schema_version: "vtx_codex_recovery_account_limits_v1",
+                attempts: kept
+              }, null, JSON_INDENT_SPACES)}
+`);
+            }
+          } catch {
+          }
+        }
+        if (Object.keys(attempts).length === 0) {
+          await clearInferencePrivateFile(this.path, "Codex attempt recovery file");
+          return;
+        }
+        await writeAtomicInferencePrivateFile(this.path, `${JSON.stringify({
+          schema_version: "vtx_codex_recovery_file_v1",
+          attempts
+        }, null, JSON_INDENT_SPACES)}
+`);
+      }
       enqueue(operation) {
         const pending3 = this.queue.then(operation, operation);
         this.queue = pending3.then(() => void 0, () => void 0);
         return pending3;
       }
+      /** One attempt for its same-attempt recovery, with the account limits its failure was read with. */
       async load(attemptId) {
         await this.queue;
-        return (await this.readAll())[attemptId] ?? null;
+        const checkpoint = (await this.readAll())[attemptId];
+        return checkpoint ? this.withAccountLimits(checkpoint, await this.readAccountLimits()) : null;
       }
+      /**
+       * Every attempt exactly as the recovery file holds it, without account
+       * limits: the service recovery compares these with a raw copy of the file.
+       */
       async loadAll() {
         await this.queue;
         return await this.readAll();
       }
+      /**
+       * A failure's own rateLimits (or null) replaces its stored limits; a
+       * checkpoint saved without that field (one loadAll returned) keeps them.
+       */
       async save(checkpoint) {
-        const validated = recoveryCheckpointSchema.parse(checkpoint);
+        const terminal = checkpoint.terminal;
+        let stored = checkpoint;
+        let limitsUpdate = null;
+        if (terminal?.kind === "failed" && "rateLimits" in terminal.error) {
+          const { rateLimits, ...error48 } = terminal.error;
+          limitsUpdate = { rateLimits: rateLimits ?? null };
+          stored = { ...checkpoint, terminal: { kind: "failed", error: error48 } };
+        }
+        const validated = recoveryCheckpointSchema.parse(stored);
         await this.enqueue(async () => {
           const attempts = await this.readAll();
           attempts[validated.attemptId] = validated;
-          await writeAtomicInferencePrivateFile(this.path, `${JSON.stringify({
-            schema_version: "vtx_codex_recovery_file_v1",
-            attempts
-          }, null, JSON_INDENT_SPACES)}
-`);
+          const previous = await this.readAccountLimits();
+          const limits = { ...previous };
+          if (limitsUpdate?.rateLimits && validated.terminal?.kind === "failed") {
+            limits[validated.attemptId] = {
+              inputSha256: validated.inputSha256,
+              code: validated.terminal.error.code,
+              retryAtMs: validated.terminal.error.retryAtMs ?? null,
+              rateLimits: limitsUpdate.rateLimits
+            };
+          } else if (limitsUpdate) {
+            delete limits[validated.attemptId];
+          }
+          await this.writeAll(attempts, limits, previous);
         });
       }
       async clear(attemptId) {
         await this.enqueue(async () => {
           const attempts = await this.readAll();
           delete attempts[attemptId];
-          if (Object.keys(attempts).length === 0) {
-            await clearInferencePrivateFile(this.path, "Codex attempt recovery file");
-            return;
-          }
-          await writeAtomicInferencePrivateFile(this.path, `${JSON.stringify({
-            schema_version: "vtx_codex_recovery_file_v1",
-            attempts
-          }, null, JSON_INDENT_SPACES)}
-`);
+          const previous = await this.readAccountLimits();
+          await this.writeAll(attempts, previous, previous);
+        });
+      }
+      /** Removes the recovery file and its account limits (logout and revoke). */
+      async discard() {
+        await this.enqueue(async () => {
+          await clearInferencePrivateFile(this.accountLimitsPath, "Codex recovery account limits file").catch(() => void 0);
+          await clearInferencePrivateFile(this.path, "Codex attempt recovery file");
         });
       }
     };
@@ -42884,7 +43201,7 @@ var init_codex_adapter = __esm({
     };
     createIsolatedCodexAttemptResources = async (_attemptId, codexHome = resolveInferenceHostConfig().codexHomePath) => {
       await ensureDedicatedCodexHome(codexHome);
-      const root = await mkdtemp(join6(tmpdir2(), "vtx-codex-attempt-"));
+      const root = await mkdtemp(join6(tmpdir3(), INFERENCE_HOST_TEMP_FOLDERS.CODEX_JOB_PREFIX));
       await chmod3(root, OWNER_ONLY_DIRECTORY_MODE);
       const workspacePath = join6(root, "workspace");
       await mkdir4(workspacePath, { mode: OWNER_ONLY_DIRECTORY_MODE });
@@ -42892,34 +43209,84 @@ var init_codex_adapter = __esm({
         root,
         codexHome,
         workspacePath,
+        // A folder something else already deleted is removed: its prompt bytes are gone.
         cleanup: async () => {
-          await removeOwnedDirectory(root, { force: false });
+          await removeOwnedDirectory(root);
         }
       };
     };
+    isMissingPathError = (error48) => error48?.code === "ENOENT";
     createIsolatedCodexHostResources = async (codexHome) => {
       await ensureDedicatedCodexHome(codexHome);
-      const root = await mkdtemp(join6(tmpdir2(), "vtx-codex-host-"));
-      await chmod3(root, OWNER_ONLY_DIRECTORY_MODE);
-      const workspaces = join6(root, "workspaces");
-      await mkdir4(workspaces, { mode: OWNER_ONLY_DIRECTORY_MODE });
+      const mintWorkerFolder = async () => {
+        const folder = await mkdtemp(join6(tmpdir3(), INFERENCE_HOST_TEMP_FOLDERS.CODEX_WORKER_PREFIX));
+        try {
+          await chmod3(folder, OWNER_ONLY_DIRECTORY_MODE);
+          await mkdir4(join6(folder, INFERENCE_HOST_TEMP_FOLDERS.CODEX_WORKER_JOBS), { mode: OWNER_ONLY_DIRECTORY_MODE });
+        } catch (error48) {
+          await removeOwnedDirectory(folder).catch(() => void 0);
+          throw error48;
+        }
+        return folder;
+      };
+      const mintJobFolder = async (folder) => {
+        const workspacePath = await mkdtemp(join6(
+          folder,
+          INFERENCE_HOST_TEMP_FOLDERS.CODEX_WORKER_JOBS,
+          INFERENCE_HOST_TEMP_FOLDERS.CODEX_HOSTED_JOB_PREFIX
+        ));
+        await chmod3(workspacePath, OWNER_ONLY_DIRECTORY_MODE);
+        return workspacePath;
+      };
+      let root = await mintWorkerFolder();
+      const minted = [root];
+      let replacement = null;
+      const replaceVanished = async (vanished) => {
+        if (root !== vanished) return root;
+        replacement ??= mintWorkerFolder().then((folder) => {
+          root = folder;
+          minted.push(folder);
+          return folder;
+        }).finally(() => {
+          replacement = null;
+        });
+        return await replacement;
+      };
       return {
-        root,
+        get root() {
+          return root;
+        },
         codexHome,
         createAttemptResources: async () => {
-          const workspacePath = await mkdtemp(join6(workspaces, "attempt-"));
-          await chmod3(workspacePath, OWNER_ONLY_DIRECTORY_MODE);
+          const folder = root;
+          let workspacePath;
+          let replacedVanishedWorkerFolder = false;
+          try {
+            workspacePath = await mintJobFolder(folder);
+          } catch (error48) {
+            if (!isMissingPathError(error48)) throw error48;
+            workspacePath = await mintJobFolder(await replaceVanished(folder));
+            replacedVanishedWorkerFolder = true;
+          }
           return {
             root: workspacePath,
             codexHome,
             workspacePath,
+            replacedVanishedWorkerFolder,
             cleanup: async () => {
-              await removeOwnedDirectory(workspacePath, { force: false });
+              await removeOwnedDirectory(workspacePath);
             }
           };
         },
+        // Every folder this worker run made, including ones that vanished or were
+        // left behind partly deleted; one already gone is already removed, and one
+        // that fails does not stop the others.
         cleanup: async () => {
-          await removeOwnedDirectory(root, { force: false });
+          const failures = [];
+          for (const folder of minted) await removeOwnedDirectory(folder).catch((error48) => {
+            failures.push(error48);
+          });
+          if (failures.length > 0) throw failures[0];
         }
       };
     };
@@ -43025,27 +43392,27 @@ var init_codex_adapter = __esm({
       };
     };
     isStrictDescendant = (candidate, parent) => {
-      const parentPath = resolve4(parent);
-      const candidatePath = resolve4(candidate);
-      const scoped = relative3(parentPath, candidatePath);
-      return scoped.length > 0 && !scoped.startsWith(`..${sep2}`) && scoped !== ".." && !isAbsolute5(scoped);
+      const parentPath = resolve5(parent);
+      const candidatePath = resolve5(candidate);
+      const scoped = relative4(parentPath, candidatePath);
+      return scoped.length > 0 && !scoped.startsWith(`..${sep3}`) && scoped !== ".." && !isAbsolute6(scoped);
     };
     assertRecoveryResourceScope = (checkpoint) => {
-      const temporaryRoot = resolve4(tmpdir2());
-      const resourceRoot = resolve4(checkpoint.resourceRoot);
-      const workspacePath = resolve4(checkpoint.workspacePath);
+      const temporaryRoot = resolve5(tmpdir3());
+      const resourceRoot = resolve5(checkpoint.resourceRoot);
+      const workspacePath = resolve5(checkpoint.workspacePath);
       if (!isStrictDescendant(resourceRoot, temporaryRoot)) {
         throw new Error("Codex recovery resource root crossed temporary scope.");
       }
-      const parts = relative3(temporaryRoot, resourceRoot).split(sep2);
-      const standalone = parts.length === 1 && parts[0].startsWith("vtx-codex-attempt-") && workspacePath === join6(resourceRoot, "workspace");
-      const hosted = parts.length === CODEX_HOSTED_ATTEMPT_PATH_SEGMENTS && parts[0].startsWith("vtx-codex-host-") && parts[1] === "workspaces" && parts[2].startsWith("attempt-") && workspacePath === resourceRoot;
+      const parts = relative4(temporaryRoot, resourceRoot).split(sep3);
+      const standalone = parts.length === 1 && parts[0].startsWith(INFERENCE_HOST_TEMP_FOLDERS.CODEX_JOB_PREFIX) && workspacePath === join6(resourceRoot, "workspace");
+      const hosted = parts.length === CODEX_HOSTED_ATTEMPT_PATH_SEGMENTS && parts[0].startsWith(INFERENCE_HOST_TEMP_FOLDERS.CODEX_WORKER_PREFIX) && parts[1] === INFERENCE_HOST_TEMP_FOLDERS.CODEX_WORKER_JOBS && parts[2].startsWith(INFERENCE_HOST_TEMP_FOLDERS.CODEX_HOSTED_JOB_PREFIX) && workspacePath === resourceRoot;
       if (!standalone && !hosted) {
         throw new Error("Codex recovery resource layout is invalid.");
       }
     };
     removeRecoveredThread = async (checkpoint, expectedCodexHome) => {
-      if (resolve4(checkpoint.codexHome) !== resolve4(expectedCodexHome)) {
+      if (resolve5(checkpoint.codexHome) !== resolve5(expectedCodexHome)) {
         throw new Error("Codex recovery home crossed dedicated auth scope.");
       }
       if (checkpoint.threadId === null || checkpoint.threadPath === null) {
@@ -43054,7 +43421,7 @@ var init_codex_adapter = __esm({
         }
       }
       const homeState = await lstat4(expectedCodexHome);
-      if (!homeState.isDirectory() || homeState.isSymbolicLink() || process.platform !== "win32" && ((homeState.mode & GROUP_OTHER_PERMISSION_BITS) !== 0 || typeof process.getuid === "function" && homeState.uid !== process.getuid() || await realpath4(expectedCodexHome) !== resolve4(expectedCodexHome))) {
+      if (!homeState.isDirectory() || homeState.isSymbolicLink() || process.platform !== "win32" && ((homeState.mode & GROUP_OTHER_PERMISSION_BITS) !== 0 || typeof process.getuid === "function" && homeState.uid !== process.getuid() || await realpath4(expectedCodexHome) !== resolve5(expectedCodexHome))) {
         throw new Error("Codex recovery home is not a private owned directory.");
       }
       const threadPaths = /* @__PURE__ */ new Set();
@@ -43110,7 +43477,7 @@ var init_codex_adapter = __esm({
             if (!event || typeof event !== "object" || Array.isArray(event)) continue;
             const record6 = event;
             const payload = record6.payload;
-            if (record6.type === "session_meta" && payload && typeof payload === "object" && !Array.isArray(payload) && resolve4(String(payload.cwd || "")) === resolve4(checkpoint.workspacePath)) {
+            if (record6.type === "session_meta" && payload && typeof payload === "object" && !Array.isArray(payload) && resolve5(String(payload.cwd || "")) === resolve5(checkpoint.workspacePath)) {
               threadPaths.add(path);
               break;
             }
@@ -43118,7 +43485,7 @@ var init_codex_adapter = __esm({
         }
       }
       if (checkpoint.threadPath !== null) {
-        if (!isAbsolute5(checkpoint.threadPath) || !isStrictDescendant(
+        if (!isAbsolute6(checkpoint.threadPath) || !isStrictDescendant(
           checkpoint.threadPath,
           sessionsRoot
         ) || !checkpoint.threadPath.endsWith(".jsonl")) {
@@ -43367,7 +43734,7 @@ var init_codex_adapter = __esm({
         );
         const bootIdentity = guardianManaged ? await (this.dependencies.readBootIdentity ?? readInferenceSystemBootIdentity)() : null;
         const processToken = guardianManaged ? randomBytes4(CODEX_GUARDIAN_PROCESS_TOKEN_BYTES).toString("hex") : null;
-        const guardianReceiptRoot = guardianManaged ? this.dependencies.guardianReceiptRoot ?? join6(tmpdir2(), "vtx-codex-guardian-receipts") : null;
+        const guardianReceiptRoot = guardianManaged ? this.dependencies.guardianReceiptRoot ?? join6(tmpdir3(), "vtx-codex-guardian-receipts") : null;
         if (guardianReceiptRoot) await ensureInferencePrivateDirectory(guardianReceiptRoot);
         const processReceiptPath = guardianReceiptRoot && processToken ? join6(guardianReceiptRoot, `${processToken}.json`) : null;
         const session = await CodexAppServerSession.start({
@@ -43518,7 +43885,7 @@ var init_codex_adapter = __esm({
         durableSession.session.requireModelCapability(capabilities, modelName, reasoningEffort);
       }
       async waitForCapabilities(preflight, deadlineAtMs, signal) {
-        return await new Promise((resolve16, reject) => {
+        return await new Promise((resolve17, reject) => {
           let settled2 = false;
           const finish = (callback) => {
             if (settled2) return;
@@ -43545,7 +43912,7 @@ var init_codex_adapter = __esm({
             return;
           }
           void preflight.then(
-            (value) => finish(() => resolve16(value)),
+            (value) => finish(() => resolve17(value)),
             (error48) => finish(() => reject(error48))
           );
         });
@@ -43656,8 +44023,8 @@ var init_codex_adapter = __esm({
           if (recoveryHooks.loadAll) {
             try {
               const checkpoints = await recoveryHooks.loadAll();
-              const receiptPath = resolve4(checkpoint.processReceiptPath);
-              sharedReceiptStillRequired = Object.values(checkpoints).some((candidate) => candidate.attemptId !== attemptId && !candidate.cleanupConfirmed && candidate.processReceiptPath !== null && resolve4(candidate.processReceiptPath) === receiptPath);
+              const receiptPath = resolve5(checkpoint.processReceiptPath);
+              sharedReceiptStillRequired = Object.values(checkpoints).some((candidate) => candidate.attemptId !== attemptId && !candidate.cleanupConfirmed && candidate.processReceiptPath !== null && resolve5(candidate.processReceiptPath) === receiptPath);
             } catch {
               sharedReceiptStillRequired = true;
             }
@@ -43704,7 +44071,7 @@ var init_codex_adapter = __esm({
                 try {
                   const checkpoints = await recoveryHooks.loadAll();
                   unconfirmedReceiptPaths = new Set(
-                    Object.values(checkpoints).filter((checkpoint) => !checkpoint.cleanupConfirmed && checkpoint.processReceiptPath !== null).map((checkpoint) => resolve4(checkpoint.processReceiptPath))
+                    Object.values(checkpoints).filter((checkpoint) => !checkpoint.cleanupConfirmed && checkpoint.processReceiptPath !== null).map((checkpoint) => resolve5(checkpoint.processReceiptPath))
                   );
                 } catch {
                   unconfirmedReceiptPaths = null;
@@ -43712,7 +44079,7 @@ var init_codex_adapter = __esm({
               }
             }
             for (const session of sessions) {
-              if (session.processReceiptPath && unconfirmedReceiptPaths !== null && !unconfirmedReceiptPaths.has(resolve4(session.processReceiptPath))) {
+              if (session.processReceiptPath && unconfirmedReceiptPaths !== null && !unconfirmedReceiptPaths.has(resolve5(session.processReceiptPath))) {
                 await rm6(session.processReceiptPath, { force: true });
                 await rm6(`${session.processReceiptPath}.shutdown-intent`, { force: true });
               }
@@ -43760,7 +44127,8 @@ var init_codex_adapter = __esm({
               httpStatusCode: recovered.httpStatusCode,
               retryAtMs: recovered.retryAtMs,
               usage: recovered.usage,
-              processExit: recovered.processExit
+              processExit: recovered.processExit,
+              rateLimits: recovered.rateLimits ?? null
             });
           }
           throw new CodexAppServerError({
@@ -43792,6 +44160,9 @@ var init_codex_adapter = __esm({
             attemptId,
             this.dependencies.codexHome
           )))(input.attemptId);
+          if (resources.replacedVanishedWorkerFolder) {
+            this.emitDiagnostic({ event: "codex_worker_folder_replaced", attempt_id: input.attemptId });
+          }
           await access3(resources.codexHome, fsConstants2.R_OK | fsConstants2.W_OK);
           await access3(resources.workspacePath, fsConstants2.R_OK);
           sessionLease = await this.acquireDurableSession(
@@ -43918,7 +44289,8 @@ var init_codex_adapter = __esm({
                     httpStatusCode: error48.httpStatusCode,
                     retryAtMs: error48.retryAtMs,
                     usage: error48.usage,
-                    processExit: error48.processExit
+                    processExit: error48.processExit,
+                    rateLimits: error48.rateLimits
                   }
                 }
               };
@@ -43935,6 +44307,7 @@ var init_codex_adapter = __esm({
               retryAtMs: error48.retryAtMs,
               usage: error48.usage,
               processExit: error48.processExit,
+              rateLimits: error48.rateLimits,
               cause: error48
             });
           }
@@ -44400,8 +44773,8 @@ $items = @(Get-CimInstance Win32_Process | Where-Object { $_.Name -in @('node.ex
 
 // lib/inference-host/agent-thread-workspace.ts
 import { realpath as realpath5 } from "node:fs/promises";
-import { tmpdir as tmpdir3 } from "node:os";
-import { basename as basename2, dirname as dirname6 } from "node:path";
+import { tmpdir as tmpdir4 } from "node:os";
+import { basename as basename2, dirname as dirname7 } from "node:path";
 var ownedTempThreadWorkspace, removeRecordedTempThreadWorkspace;
 var init_agent_thread_workspace = __esm({
   "lib/inference-host/agent-thread-workspace.ts"() {
@@ -44414,8 +44787,8 @@ var init_agent_thread_workspace = __esm({
     init_owned_directory_removal();
     ownedTempThreadWorkspace = async (threadPath, prefix) => {
       const resolved = await realpath5(threadPath);
-      const temporaryRoot = await realpath5(tmpdir3());
-      return dirname6(resolved) === temporaryRoot && basename2(resolved).startsWith(prefix) ? resolved : null;
+      const temporaryRoot = await realpath5(tmpdir4());
+      return dirname7(resolved) === temporaryRoot && basename2(resolved).startsWith(prefix) ? resolved : null;
     };
     removeRecordedTempThreadWorkspace = async (statePath, prefix) => {
       let threadPath;
@@ -44441,7 +44814,7 @@ var init_agent_thread_workspace = __esm({
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { mkdtemp as mkdtemp2 } from "node:fs/promises";
 import { createRequire as createRequire2 } from "node:module";
-import { tmpdir as tmpdir4 } from "node:os";
+import { tmpdir as tmpdir5 } from "node:os";
 import { join as join7 } from "node:path";
 import {
   CopilotClient,
@@ -44486,9 +44859,9 @@ var init_copilot_adapter = __esm({
       }
       throw new Error(`copilot_runtime_package_missing:${failures.join(";")}`);
     };
-    WORKSPACE_PREFIX = "vtx-copilot-";
+    WORKSPACE_PREFIX = INFERENCE_HOST_TEMP_FOLDERS.COPILOT_JOB_PREFIX;
     createPrivateWorkspace = async (removal = {}) => {
-      const path = await mkdtemp2(join7(tmpdir4(), WORKSPACE_PREFIX));
+      const path = await mkdtemp2(join7(tmpdir5(), WORKSPACE_PREFIX));
       return {
         path,
         // client.stop() has already awaited the runtime's exit; retries cover the
@@ -45320,9 +45693,9 @@ var init_deepseek_transport_proxy = __esm({
             response.end();
           }
         });
-        await new Promise((resolve16, reject) => {
+        await new Promise((resolve17, reject) => {
           this.server.once("error", reject);
-          this.server.listen(0, "127.0.0.1", () => resolve16());
+          this.server.listen(0, "127.0.0.1", () => resolve17());
         });
         const address = this.server.address();
         if (!address || typeof address === "string") throw new Error("deepseek_proxy_bind_failed");
@@ -45334,7 +45707,7 @@ var init_deepseek_transport_proxy = __esm({
         this.server = null;
         this.urlValue = null;
         if (!server) return;
-        await new Promise((resolve16) => server.close(() => resolve16()));
+        await new Promise((resolve17) => server.close(() => resolve17()));
       }
     };
   }
@@ -45402,7 +45775,7 @@ var init_provider_refusal = __esm({
 // lib/inference-host/deepseek-harness-adapter.ts
 import { randomUUID as randomUUID5 } from "node:crypto";
 import { mkdtemp as mkdtemp3, rm as rm7 } from "node:fs/promises";
-import { tmpdir as tmpdir5 } from "node:os";
+import { tmpdir as tmpdir6 } from "node:os";
 import { join as join8 } from "node:path";
 import { Context } from "@deepseek-ai/cordis";
 import * as AgentSpine from "@deepseek-ai/dsh-agent-spine-demo";
@@ -45570,9 +45943,9 @@ var init_deepseek_harness_adapter = __esm({
         cause: options.error
       });
     };
-    WORKSPACE_PREFIX2 = "vtx-deepseek-harness-";
+    WORKSPACE_PREFIX2 = INFERENCE_HOST_TEMP_FOLDERS.DEEPSEEK_JOB_PREFIX;
     createPrivateWorkspace2 = async () => {
-      const path = await mkdtemp3(join8(tmpdir5(), WORKSPACE_PREFIX2));
+      const path = await mkdtemp3(join8(tmpdir6(), WORKSPACE_PREFIX2));
       return { path, cleanup: async () => {
         await removeOwnedDirectory(path);
       } };
@@ -45950,11 +46323,11 @@ ${JSON.stringify(input.outputSchema)}`,
           boundary.signal.throwIfAborted();
           let checkpointReached = false;
           let resolveCheckpoint;
-          const checkpoint = new Promise((resolve16) => {
-            resolveCheckpoint = resolve16;
+          const checkpoint = new Promise((resolve17) => {
+            resolveCheckpoint = resolve17;
           });
-          const dispatchGate = new Promise((resolve16) => {
-            releaseAgentDispatch = resolve16;
+          const dispatchGate = new Promise((resolve17) => {
+            releaseAgentDispatch = resolve17;
           });
           ctx.on("llm/stream", (options, next) => {
             if (String(options.sessionId ?? "") !== String(sessionId)) return next();
@@ -46275,7 +46648,7 @@ var init_pi_transport = __esm({
 // lib/inference-host/pi-adapter.ts
 import { randomUUID as randomUUID6 } from "node:crypto";
 import { lstat as lstat5, realpath as realpath6, rm as rm8, readdir as readdir5 } from "node:fs/promises";
-import { basename as basename3, dirname as dirname7, join as join9, resolve as resolve5 } from "node:path";
+import { basename as basename3, dirname as dirname8, join as join9, resolve as resolve6 } from "node:path";
 import {
   createAgentSession,
   DefaultResourceLoader,
@@ -46439,8 +46812,8 @@ var init_pi_adapter = __esm({
       }
       async ownedThread(thread) {
         const root = await realpath6(this.dependencies.stateRoot);
-        const supplied = resolve5(thread.threadPath);
-        if (dirname7(supplied) !== root || basename3(supplied) !== `agent-${thread.threadId}` || !/^[a-f0-9-]{36}$/u.test(thread.threadId)) throw fail("pi_thread_not_owned");
+        const supplied = resolve6(thread.threadPath);
+        if (dirname8(supplied) !== root || basename3(supplied) !== `agent-${thread.threadId}` || !/^[a-f0-9-]{36}$/u.test(thread.threadId)) throw fail("pi_thread_not_owned");
         const info = await lstat5(supplied);
         if (info.isSymbolicLink() || !info.isDirectory()) throw fail("pi_thread_not_owned");
         if (await realpath6(supplied) !== supplied) throw fail("pi_thread_not_owned");
@@ -46810,7 +47183,7 @@ import { spawn as spawn7 } from "node:child_process";
 import { createHash as createHash8, randomUUID as randomUUID7 } from "node:crypto";
 import { lstat as lstat6, readFile as readFile7, rename as rename4, rm as rm9, writeFile as writeFile3 } from "node:fs/promises";
 import { createRequire as createRequire3 } from "node:module";
-import { dirname as dirname8, join as join10 } from "node:path";
+import { dirname as dirname9, join as join10 } from "node:path";
 import { brotliDecompress } from "node:zlib";
 import { promisify } from "node:util";
 var HOST_RUNTIME_POLICY8, decompress, pending, digest, verifyVersion, resolvePinnedGrokBinary;
@@ -46829,7 +47202,7 @@ var init_grok_binary = __esm({
     decompress = promisify(brotliDecompress);
     pending = /* @__PURE__ */ new Map();
     digest = (bytes3) => createHash8("sha256").update(bytes3).digest("hex");
-    verifyVersion = async (path) => new Promise((resolve16, reject) => {
+    verifyVersion = async (path) => new Promise((resolve17, reject) => {
       const child = spawn7(path, ["--version"], {
         stdio: ["ignore", "pipe", "ignore"],
         windowsHide: true,
@@ -46859,7 +47232,7 @@ var init_grok_binary = __esm({
         clearTimeout(timer);
         if (code !== 0 || /^grok\s+(\S+)/u.exec(stdout.trim())?.[1] !== agent_cli_release_default.grok_version) {
           reject(new Error("Grok runtime version does not match its release."));
-        } else resolve16();
+        } else resolve17();
       });
     });
     resolvePinnedGrokBinary = async (stateRoot) => {
@@ -46890,7 +47263,7 @@ var init_grok_binary = __esm({
           }
           const manifest = JSON.parse(await readFile7(packagePath, "utf8"));
           if (manifest.version !== agent_cli_release_default.grok_version) throw new Error("Grok package version mismatch.");
-          const bytes3 = await decompress(await readFile7(join10(dirname8(packagePath), "bin", `${spec.binary_name}.br`)), { maxOutputLength: HOST_RUNTIME_POLICY8.grok_binary_max_bytes });
+          const bytes3 = await decompress(await readFile7(join10(dirname9(packagePath), "bin", `${spec.binary_name}.br`)), { maxOutputLength: HOST_RUNTIME_POLICY8.grok_binary_max_bytes });
           if (digest(bytes3) !== spec.sha256) throw new Error("Grok package binary digest mismatch.");
           const temporary = join10(directory2, `.${randomUUID7()}.tmp`);
           try {
@@ -46916,7 +47289,7 @@ var init_grok_binary = __esm({
 
 // lib/inference-host/grok-policy.ts
 import { readFile as readFile8 } from "node:fs/promises";
-import { dirname as dirname9, resolve as resolve6 } from "node:path";
+import { dirname as dirname10, resolve as resolve7 } from "node:path";
 import { fileURLToPath } from "node:url";
 var validateGrokPolicy, loadGrokPolicy;
 var init_grok_policy = __esm({
@@ -46946,7 +47319,7 @@ var init_grok_policy = __esm({
     };
     loadGrokPolicy = async () => {
       if (typeof define_VTX_GROK_POLICY_default !== "undefined") return validateGrokPolicy(define_VTX_GROK_POLICY_default);
-      const config2 = parse(await readFile8(resolve6(dirname9(fileURLToPath(import.meta.url)), "../../../config.toml"), "utf8"));
+      const config2 = parse(await readFile8(resolve7(dirname10(fileURLToPath(import.meta.url)), "../../../config.toml"), "utf8"));
       return validateGrokPolicy(config2.external_inference?.grok_adapter);
     };
   }
@@ -47087,9 +47460,9 @@ var init_grok_transport_proxy = __esm({
         this.server = createServer3((request, response) => {
           void this.handle(request, response);
         });
-        await new Promise((resolve16, reject) => {
+        await new Promise((resolve17, reject) => {
           this.server.once("error", reject);
-          this.server.listen(0, "127.0.0.1", () => resolve16());
+          this.server.listen(0, "127.0.0.1", () => resolve17());
         });
         const address = this.server.address();
         if (!address || typeof address === "string") throw new Error("grok_proxy_bind_failed");
@@ -47465,7 +47838,7 @@ var init_grok_transport_proxy = __esm({
         this.urlValue = null;
         if (!server) return;
         server.closeAllConnections();
-        await new Promise((resolve16) => server.close(() => resolve16()));
+        await new Promise((resolve17) => server.close(() => resolve17()));
       }
     };
     createGrokTransportProxy = async (options) => {
@@ -47537,9 +47910,9 @@ var init_agent_tool_server = __esm({
           response.writeHead(HTTP_STATUS.BAD_REQUEST).end();
         }
       });
-      await new Promise((resolve16, reject) => {
+      await new Promise((resolve17, reject) => {
         server.once("error", reject);
-        server.listen(0, "127.0.0.1", resolve16);
+        server.listen(0, "127.0.0.1", resolve17);
       });
       const address = server.address();
       if (!address || typeof address === "string") throw new Error(code("listen_failed"));
@@ -47551,7 +47924,7 @@ var init_agent_tool_server = __esm({
         descriptor: { type: "http", name: "vtx", url: `http://127.0.0.1:${address.port}/${token}`, headers: [] },
         close: async () => {
           server.closeAllConnections();
-          await new Promise((resolve16) => server.close(() => resolve16()));
+          await new Promise((resolve17) => server.close(() => resolve17()));
         }
       };
     };
@@ -47755,11 +48128,11 @@ var init_grok_runtime = __esm({
             this.child.kill();
           }
         });
-        this.exit = new Promise((resolve16) => {
+        this.exit = new Promise((resolve17) => {
           this.child.once("error", () => this.fail(new Error("grok_process_start_failed")));
           this.child.once("close", () => {
             this.fail(new Error("grok_process_closed"));
-            resolve16();
+            resolve17();
           });
         });
       }
@@ -47779,8 +48152,8 @@ var init_grok_runtime = __esm({
         let timer;
         let abort;
         try {
-          return await new Promise((resolve16, reject) => {
-            this.pending.set(id2, { resolve: resolve16, reject });
+          return await new Promise((resolve17, reject) => {
+            this.pending.set(id2, { resolve: resolve17, reject });
             timer = setTimeout(() => reject(new Error("grok_deadline_exceeded")), Math.max(1, deadlineAtMs - Date.now()));
             abort = () => reject(new Error("grok_cancelled"));
             signal?.addEventListener("abort", abort, { once: true });
@@ -47814,7 +48187,7 @@ var init_grok_runtime = __esm({
 // lib/inference-host/grok-state.ts
 import { constants as constants2 } from "node:fs";
 import { lstat as lstat8, mkdtemp as mkdtemp4, open as open3, readdir as readdir6, realpath as realpath7, rm as rm11, rmdir, unlink, writeFile as writeFile4 } from "node:fs/promises";
-import { basename as basename4, dirname as dirname10, join as join12, resolve as resolve7 } from "node:path";
+import { basename as basename4, dirname as dirname11, join as join12, resolve as resolve8 } from "node:path";
 var HOST_RUNTIME_POLICY10, markerName, ownedName, invalid, missing, sessionIdValid, directory, nativeDirectory, roots, owner, nativeFile, encodedCwd, nativeSession, removeEmptyNativeGroup, createGrokOwnedWorkspace, bindGrokOwnedSession, validateGrokOwnedThread, releaseGrokOwnedWorkspace, cleanupGrokOwnedState;
 var init_grok_state = __esm({
   "lib/inference-host/grok-state.ts"() {
@@ -47835,12 +48208,12 @@ var init_grok_state = __esm({
     sessionIdValid = (id2) => /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/u.test(id2);
     directory = async (path) => {
       const info = await lstat8(path);
-      if (!info.isDirectory() || info.isSymbolicLink() || await realpath7(path) !== resolve7(path)) throw invalid();
+      if (!info.isDirectory() || info.isSymbolicLink() || await realpath7(path) !== resolve8(path)) throw invalid();
       await ensureInferencePrivateDirectory(path);
     };
     nativeDirectory = async (path) => {
       const info = await lstat8(path);
-      if (!info.isDirectory() || info.isSymbolicLink() || await realpath7(path) !== resolve7(path)) throw invalid();
+      if (!info.isDirectory() || info.isSymbolicLink() || await realpath7(path) !== resolve8(path)) throw invalid();
       if (process.platform === "win32") {
         await secureWindowsPrivatePath(path, "directory", "verify-owner");
         await secureWindowsPrivatePath(path, "directory", "harden");
@@ -47848,15 +48221,15 @@ var init_grok_state = __esm({
       await directory(path);
     };
     roots = async (options) => {
-      const stateRoot = resolve7(options.stateRoot);
-      const grokHome = resolve7(options.grokHome);
+      const stateRoot = resolve8(options.stateRoot);
+      const grokHome = resolve8(options.grokHome);
       await directory(stateRoot);
       await directory(grokHome);
       return { stateRoot, grokHome, workspaceRoot: join12(stateRoot, "grok-workspaces") };
     };
     owner = async (options, workspace) => {
       const scope = await roots(options);
-      if (workspace !== resolve7(workspace) || dirname10(workspace) !== scope.workspaceRoot || !ownedName.test(basename4(workspace))) throw invalid();
+      if (workspace !== resolve8(workspace) || dirname11(workspace) !== scope.workspaceRoot || !ownedName.test(basename4(workspace))) throw invalid();
       await directory(scope.workspaceRoot);
       await directory(workspace);
       const raw = await readInferencePrivateFile(join12(workspace, markerName), "Grok workspace owner");
@@ -47902,7 +48275,7 @@ var init_grok_state = __esm({
         for (const entry of await readdir6(sessions, { withFileTypes: true })) {
           if (!entry.isDirectory() || entry.isSymbolicLink()) continue;
           const group = join12(sessions, entry.name);
-          if (await realpath7(group) !== resolve7(group)) throw invalid();
+          if (await realpath7(group) !== resolve8(group)) throw invalid();
           try {
             if ((await nativeFile(join12(group, ".cwd"), HOST_RUNTIME_POLICY10.grok_cwd_marker_max_bytes)).trim() === value.workspace) groups2.push(group);
           } catch (error48) {
@@ -48006,7 +48379,7 @@ var init_grok_state = __esm({
     };
     releaseGrokOwnedWorkspace = async (options, workspace, expectedSessionId) => {
       const scope = await roots(options);
-      if (workspace !== resolve7(workspace) || dirname10(workspace) !== scope.workspaceRoot || !ownedName.test(basename4(workspace))) throw invalid();
+      if (workspace !== resolve8(workspace) || dirname11(workspace) !== scope.workspaceRoot || !ownedName.test(basename4(workspace))) throw invalid();
       await directory(scope.workspaceRoot);
       try {
         await lstat8(workspace);
@@ -48021,7 +48394,7 @@ var init_grok_state = __esm({
         await owner(options, workspace);
         if (await nativeSession(value, false) !== session) throw invalid();
         await removeOwnedDirectory(session);
-        await removeEmptyNativeGroup(dirname10(session), workspace);
+        await removeEmptyNativeGroup(dirname11(session), workspace);
       }
       await owner(options, workspace);
       await removeOwnedDirectory(workspace);
@@ -48500,7 +48873,8 @@ var init_grok_adapter = __esm({
             retryable: false,
             dispatchOutcome: outcome,
             grokToolValidation: proxy?.toolValidationFailure ?? null,
-            grokResponseIdentity: proxy?.responseIdentityFailure ?? null
+            grokResponseIdentity: proxy?.responseIdentityFailure ?? null,
+            cause: error48
           });
         } finally {
           try {
@@ -48610,7 +48984,7 @@ var init_claude_code_schema = __esm({
 
 // lib/inference-host/claude-code-policy.ts
 import { readFile as readFile9 } from "node:fs/promises";
-import { dirname as dirname11, resolve as resolve8 } from "node:path";
+import { dirname as dirname12, resolve as resolve9 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var CLAUDE_CODE_EFFORTS, turns, validateClaudeCodePolicy, loadClaudeCodePolicy, compareClaudeCodeVersions;
 var init_claude_code_policy = __esm({
@@ -48642,7 +49016,7 @@ var init_claude_code_policy = __esm({
     };
     loadClaudeCodePolicy = async () => {
       if (typeof define_VTX_CLAUDE_CODE_POLICY_default !== "undefined") return validateClaudeCodePolicy(define_VTX_CLAUDE_CODE_POLICY_default);
-      const config2 = parse(await readFile9(resolve8(dirname11(fileURLToPath2(import.meta.url)), "../../../config.toml"), "utf8"));
+      const config2 = parse(await readFile9(resolve9(dirname12(fileURLToPath2(import.meta.url)), "../../../config.toml"), "utf8"));
       return validateClaudeCodePolicy(config2.external_inference?.claude_code_adapter);
     };
     compareClaudeCodeVersions = (left, right) => {
@@ -48661,7 +49035,7 @@ var init_claude_code_policy = __esm({
 import { spawn as spawn9 } from "node:child_process";
 import { access as access4, lstat as lstat9, readdir as readdir7, rm as rm12 } from "node:fs/promises";
 import { constants as constants3 } from "node:fs";
-import { delimiter, isAbsolute as isAbsolute6, join as join14 } from "node:path";
+import { delimiter, isAbsolute as isAbsolute7, join as join14 } from "node:path";
 var HOST_RUNTIME_POLICY12, BINARY_RECORD, stringOrNull, claudeCodeStateOptions, claudeCodeRuntimeEnvironment, claudeCodeLoginEnvironment, executableNames, executable, findClaudeCodeExecutable, runCommand, readVersion, resolveClaudeCodeBinary, prepareClaudeCodeConfigDir, readClaudeCodeAuthStatus, assertClaudeCodeSubscription, AUTHORIZE_URL, runClaudeCodeAuthentication, claudeCodeLogoutBinary, cleanupClaudeCodeOwnedState, SESSION_ID, claudeCodeSessionTranscriptExists, removeClaudeCodeSessionTranscript;
 var init_claude_code_runtime = __esm({
   "lib/inference-host/claude-code-runtime.ts"() {
@@ -48733,7 +49107,7 @@ var init_claude_code_runtime = __esm({
     findClaudeCodeExecutable = async (env = process.env) => {
       const explicit = String(env.VTX_CLAUDE_CODE_BIN || "").trim();
       if (explicit) {
-        if (!isAbsolute6(explicit) || !await executable(explicit)) throw new Error("VTX_CLAUDE_CODE_BIN must name an absolute, executable Claude Code CLI.");
+        if (!isAbsolute7(explicit) || !await executable(explicit)) throw new Error("VTX_CLAUDE_CODE_BIN must name an absolute, executable Claude Code CLI.");
         return explicit;
       }
       for (const directory2 of String(env.PATH || "").split(delimiter).filter(Boolean)) {
@@ -48744,7 +49118,7 @@ var init_claude_code_runtime = __esm({
       }
       throw new Error("Claude Code is not installed. Install it from https://code.claude.com, then run claude-login again.");
     };
-    runCommand = (binaryPath, args, options) => new Promise((resolve16, reject) => {
+    runCommand = (binaryPath, args, options) => new Promise((resolve17, reject) => {
       options.signal?.throwIfAborted();
       const child = spawn9(binaryPath, args, { cwd: options.cwd, env: options.env, stdio: ["ignore", "pipe", "pipe"], windowsHide: true });
       let stdout = "";
@@ -48757,7 +49131,7 @@ var init_claude_code_runtime = __esm({
         clearTimeout(timer);
         options.signal?.removeEventListener("abort", abort);
         if (error48) reject(error48);
-        else resolve16(result);
+        else resolve17(result);
       };
       const kill = (reason) => {
         child.kill("SIGKILL");
@@ -48864,7 +49238,7 @@ var init_claude_code_runtime = __esm({
         throw new Error("No Claude Code CLI was found to sign this host out with. Install Claude Code and run claude-logout again, or run vtx inference-host revoke to remove this host.");
       }
       options.signal?.throwIfAborted();
-      await new Promise((resolve16, reject) => {
+      await new Promise((resolve17, reject) => {
         const child = spawn9(binary.path, ["auth", action, ...action === "login" ? ["--claudeai"] : []], {
           cwd: options.stateRoot,
           env: action === "login" ? claudeCodeLoginEnvironment(options.configDir) : claudeCodeRuntimeEnvironment(options.configDir),
@@ -48921,7 +49295,7 @@ var init_claude_code_runtime = __esm({
           input?.removeListener("data", forward);
           input?.pause();
           if (failed2 || code !== 0) reject(new Error(action === "login" ? "Claude Code sign-in did not complete. Run claude-login again and finish signing in within the time limit." : "Claude Code logout did not complete."));
-          else resolve16();
+          else resolve17();
         });
       });
       return binary;
@@ -48995,7 +49369,7 @@ var init_claude_code_runtime = __esm({
 import { spawn as spawn10 } from "node:child_process";
 import { createHash as createHash10, randomUUID as randomUUID10 } from "node:crypto";
 import { lstat as lstat10, mkdtemp as mkdtemp5, realpath as realpath8, rm as rm13 } from "node:fs/promises";
-import { basename as basename5, dirname as dirname12, join as join15, resolve as resolve9 } from "node:path";
+import { basename as basename5, dirname as dirname13, join as join15, resolve as resolve10 } from "node:path";
 var HOST_RUNTIME_POLICY13, object4, count3, AGENT_TOOLS, MCP_SERVER, OWNER_MARKER, WORKSPACES, OWNED_WORKSPACE, SESSION_ID2, notOwned, claudeCodeModelCapabilities, claudeCodeLimitRetryAtMs, claudeCodeUsage, claudeCodeEffectiveModel, resultLooksRateLimited, resultLooksUnauthenticated, claudeCodeAgentTools, requestRejectedBeforeInference, ClaudeCodeAdapter;
 var init_claude_code_adapter = __esm({
   "lib/inference-host/claude-code-adapter.ts"() {
@@ -49103,7 +49477,7 @@ var init_claude_code_adapter = __esm({
         this.options = options;
       }
       get workspaceRoot() {
-        return join15(resolve9(this.options.stateRoot), WORKSPACES);
+        return join15(resolve10(this.options.stateRoot), WORKSPACES);
       }
       async binary() {
         await ensureInferencePrivateDirectory(this.options.stateRoot);
@@ -49132,7 +49506,7 @@ var init_claude_code_adapter = __esm({
 `);
       }
       async owner(workspace) {
-        if (workspace !== resolve9(workspace) || dirname12(workspace) !== this.workspaceRoot || !OWNED_WORKSPACE.test(basename5(workspace))) throw notOwned();
+        if (workspace !== resolve10(workspace) || dirname13(workspace) !== this.workspaceRoot || !OWNED_WORKSPACE.test(basename5(workspace))) throw notOwned();
         const info = await lstat10(workspace);
         if (!info.isDirectory() || info.isSymbolicLink() || await realpath8(workspace) !== workspace) throw notOwned();
         let value;
@@ -49159,7 +49533,7 @@ var init_claude_code_adapter = __esm({
         signal.throwIfAborted();
         const status = await readClaudeCodeAuthStatus(binary, { ...this.options, signal });
         try {
-          assertClaudeCodeSubscription(status, resolve9(this.options.configDir));
+          assertClaudeCodeSubscription(status, resolve10(this.options.configDir));
         } catch (error48) {
           throw new CodexAppServerError({
             message: error48.message,
@@ -49222,7 +49596,7 @@ var init_claude_code_adapter = __esm({
         }
         const workspace = resumed?.threadPath ?? await this.createWorkspace(agent ? "agent" : "attempt");
         const sessionId = resumed?.threadId ?? (agent ? randomUUID10() : null);
-        const resumable = resumed !== null && await claudeCodeSessionTranscriptExists(resolve9(this.options.configDir), resumed.threadId);
+        const resumable = resumed !== null && await claudeCodeSessionTranscriptExists(resolve10(this.options.configDir), resumed.threadId);
         let retained = Boolean(resumed);
         let tools = null;
         let child = null;
@@ -49349,7 +49723,7 @@ var init_claude_code_adapter = __esm({
             windowsHide: true
           }));
           provider?.onProviderDispatch?.();
-          child = spawnProcess(binary.path, args, { cwd: workspace, env: claudeCodeRuntimeEnvironment(resolve9(this.options.configDir)) });
+          child = spawnProcess(binary.path, args, { cwd: workspace, env: claudeCodeRuntimeEnvironment(resolve10(this.options.configDir)) });
           this.active.add(child);
           const running = child;
           const result = await new Promise((resolveResult, rejectResult) => {
@@ -49558,7 +49932,8 @@ var init_claude_code_adapter = __esm({
             category: signal.aborted ? "cancelled" : Date.now() >= original.deadlineAtMs ? "timeout" : code === "claude_code_subscription_required" ? "auth" : "adapter",
             code,
             retryable: false,
-            dispatchOutcome: outcome
+            dispatchOutcome: outcome,
+            cause: error48
           });
         } finally {
           if (child) this.active.delete(child);
@@ -49610,7 +49985,7 @@ var init_grok_auth = __esm({
       await prepareGrokHome(options.grokHome);
       const binary = await resolvePinnedGrokBinary(options.stateRoot);
       options.signal?.throwIfAborted();
-      await new Promise((resolve16, reject) => {
+      await new Promise((resolve17, reject) => {
         const child = spawn11(binary.path, ["--no-auto-update", action, ...action === "login" ? ["--device-auth"] : []], {
           cwd: options.grokHome,
           env: grokRuntimeEnvironment(options.grokHome),
@@ -49672,7 +50047,7 @@ var init_grok_auth = __esm({
         child.once("close", (code) => {
           cleanup();
           if (code !== 0 || failed2 || options.signal?.aborted) reject(new Error(`Grok ${action} did not complete. Run grok-${action} again.`));
-          else resolve16();
+          else resolve17();
         });
         if (options.signal?.aborted) stop();
       });
@@ -49685,7 +50060,7 @@ import { spawn as spawn12 } from "node:child_process";
 import { randomUUID as randomUUID11, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
 import { createServer as createServer5 } from "node:http";
 import { access as access5, lstat as lstat11, readdir as readdir8, realpath as realpath9, rm as rm14 } from "node:fs/promises";
-import { basename as basename6, dirname as dirname13, join as join16, resolve as resolve10 } from "node:path";
+import { basename as basename6, dirname as dirname14, join as join16, resolve as resolve11 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 var import_ajv3, HOST_RUNTIME_POLICY15, failure, object5, validModel, receiptUsage, assertOwnedRuntime, cleanupExoOwnedState, ExoForegroundAdapter;
 var init_exo_adapter = __esm({
@@ -49802,7 +50177,7 @@ var init_exo_adapter = __esm({
       environment(runtimeRoot) {
         return {
           NODE_ENV: "production",
-          PATH: `${dirname13(process.execPath)}:/usr/local/bin:/usr/bin:/bin`,
+          PATH: `${dirname14(process.execPath)}:/usr/local/bin:/usr/bin:/bin`,
           HOME: runtimeRoot,
           XDG_CONFIG_HOME: join16(runtimeRoot, "config"),
           TMPDIR: runtimeRoot,
@@ -49859,8 +50234,8 @@ var init_exo_adapter = __esm({
       }
       async ownedRoot(thread) {
         const parent = await realpath9(this.options.stateRoot);
-        const root = resolve10(thread.threadPath);
-        if (!/^[a-f0-9-]{36}$/u.test(thread.threadId) || dirname13(root) !== parent || basename6(root) !== `agent-${thread.threadId}`) throw failure("exo_thread_not_owned");
+        const root = resolve11(thread.threadPath);
+        if (!/^[a-f0-9-]{36}$/u.test(thread.threadId) || dirname14(root) !== parent || basename6(root) !== `agent-${thread.threadId}`) throw failure("exo_thread_not_owned");
         await assertOwnedRuntime(root, thread.threadId);
         return root;
       }
@@ -50099,7 +50474,7 @@ var init_exo_adapter = __esm({
 
 // lib/inference-host/exo-policy.ts
 import { readFile as readFile10 } from "node:fs/promises";
-import { dirname as dirname14, resolve as resolve11 } from "node:path";
+import { dirname as dirname15, resolve as resolve12 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 var validateExoPolicy, loadExoPolicy;
 var init_exo_policy = __esm({
@@ -50134,7 +50509,7 @@ var init_exo_policy = __esm({
     };
     loadExoPolicy = async () => {
       if (typeof define_VTX_EXO_POLICY_default !== "undefined") return validateExoPolicy(define_VTX_EXO_POLICY_default);
-      const config2 = parse(await readFile10(resolve11(dirname14(fileURLToPath4(import.meta.url)), "../../../config.toml"), "utf8"));
+      const config2 = parse(await readFile10(resolve12(dirname15(fileURLToPath4(import.meta.url)), "../../../config.toml"), "utf8"));
       const endpoints = config2.llm?.openai_compatible?.endpoints;
       return validateExoPolicy({
         ...config2.external_inference?.exo_adapter,
@@ -50312,7 +50687,7 @@ var init_exo_credential_store = __esm({
 
 // lib/inference-host/pi-model-policy.ts
 import { readFile as readFile11 } from "node:fs/promises";
-import { dirname as dirname15, resolve as resolve12 } from "node:path";
+import { dirname as dirname16, resolve as resolve13 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 var validatePiModelPolicy, loadPiModelPolicy;
 var init_pi_model_policy = __esm({
@@ -50341,7 +50716,7 @@ var init_pi_model_policy = __esm({
       if (typeof define_VTX_PI_MODEL_POLICY_default !== "undefined") {
         return validatePiModelPolicy(define_VTX_PI_MODEL_POLICY_default);
       }
-      const config2 = parse(await readFile11(resolve12(dirname15(fileURLToPath5(import.meta.url)), "../../../config.toml"), "utf8"));
+      const config2 = parse(await readFile11(resolve13(dirname16(fileURLToPath5(import.meta.url)), "../../../config.toml"), "utf8"));
       const external = config2.external_inference;
       const pi = external?.pi_adapter;
       return validatePiModelPolicy(pi?.qualified_models);
@@ -50700,7 +51075,7 @@ var init_durable_adapter = __esm({
 
 // lib/inference-host/service-launcher-state.ts
 import { access as access6, readFile as readFile12, rm as rm15 } from "node:fs/promises";
-import { dirname as dirname16, isAbsolute as isAbsolute7, join as join17, relative as relative4, resolve as resolve13 } from "node:path";
+import { dirname as dirname17, isAbsolute as isAbsolute8, join as join17, relative as relative5, resolve as resolve14 } from "node:path";
 var launcherSibling, launcherLockPath, within, launcherSelection, readLauncherSelection, readLauncherState, writeLauncherState, targetForSelection;
 var init_service_launcher_state = __esm({
   "lib/inference-host/service-launcher-state.ts"() {
@@ -50716,13 +51091,13 @@ var init_service_launcher_state = __esm({
     };
     launcherLockPath = (manifest) => launcherSibling(manifest, ".service-launcher.lock");
     within = (parent, child) => {
-      const part = relative4(resolve13(parent), resolve13(child));
-      return Boolean(part) && !part.startsWith("..") && !isAbsolute7(part);
+      const part = relative5(resolve14(parent), resolve14(child));
+      return Boolean(part) && !part.startsWith("..") && !isAbsolute8(part);
     };
     launcherSelection = (manifest, value) => {
       if (!value || typeof value !== "object") return null;
       const r = value;
-      if (r.schema_version !== "vtx_inference_service_release_v1" || r.package_name !== "@vtxmacro/cli" || typeof r.package_version !== "string" || !/^\d{4}\.\d{1,2}\.\d{1,3}$/u.test(r.package_version) || typeof r.integrity !== "string" || typeof r.selected_at !== "string" || !Number.isFinite(Date.parse(r.selected_at)) || typeof r.script !== "string" || !isAbsolute7(r.script) || /[\r\n\0]/u.test(r.script) || !within(launcherSibling(manifest, ".service-releases"), r.script)) return null;
+      if (r.schema_version !== "vtx_inference_service_release_v1" || r.package_name !== "@vtxmacro/cli" || typeof r.package_version !== "string" || !/^\d{4}\.\d{1,2}\.\d{1,3}$/u.test(r.package_version) || typeof r.integrity !== "string" || typeof r.selected_at !== "string" || !Number.isFinite(Date.parse(r.selected_at)) || typeof r.script !== "string" || !isAbsolute8(r.script) || /[\r\n\0]/u.test(r.script) || !within(launcherSibling(manifest, ".service-releases"), r.script)) return null;
       return r;
     };
     readLauncherSelection = async (manifest) => {
@@ -50746,9 +51121,9 @@ var init_service_launcher_state = __esm({
       const target = (v) => {
         if (!v || typeof v !== "object") return false;
         const t = v;
-        return typeof t.package_version === "string" && /^\d{4}\.\d{1,2}\.\d{1,3}$/u.test(t.package_version) && typeof t.script === "string" && isAbsolute7(t.script) && !/[\r\n\0]/u.test(t.script) && (within(launcherSibling(manifest, ".service-releases"), t.script) || resolve13(t.script) === resolve13(launcherSibling(manifest, ".service-bootstrap.previous.js"))) && (t.selection === null || (() => {
+        return typeof t.package_version === "string" && /^\d{4}\.\d{1,2}\.\d{1,3}$/u.test(t.package_version) && typeof t.script === "string" && isAbsolute8(t.script) && !/[\r\n\0]/u.test(t.script) && (within(launcherSibling(manifest, ".service-releases"), t.script) || resolve14(t.script) === resolve14(launcherSibling(manifest, ".service-bootstrap.previous.js"))) && (t.selection === null || (() => {
           const selected = launcherSelection(manifest, t.selection);
-          return Boolean(selected && selected.package_version === t.package_version && (resolve13(t.script) === resolve13(join17(dirname16(selected.script), "vtx-service-bootstrap.js")) || resolve13(t.script) === resolve13(launcherSibling(manifest, ".service-bootstrap.previous.js"))));
+          return Boolean(selected && selected.package_version === t.package_version && (resolve14(t.script) === resolve14(join17(dirname17(selected.script), "vtx-service-bootstrap.js")) || resolve14(t.script) === resolve14(launcherSibling(manifest, ".service-bootstrap.previous.js"))));
         })());
       };
       if (r.schema_version !== "vtx_inference_service_launcher_v1" || !target(r.active) || r.previous !== null && !target(r.previous) || typeof r.pending !== "boolean") {
@@ -50761,7 +51136,7 @@ var init_service_launcher_state = __esm({
 `);
     };
     targetForSelection = async (selection) => {
-      const script = join17(dirname16(selection.script), "vtx-service-bootstrap.js");
+      const script = join17(dirname17(selection.script), "vtx-service-bootstrap.js");
       await access6(script);
       return { package_version: selection.package_version, script, selection };
     };
@@ -50774,7 +51149,7 @@ import { randomUUID as randomUUID12 } from "node:crypto";
 import { createReadStream, createWriteStream, readFileSync as readFileSync2 } from "node:fs";
 import { access as access7, appendFile as appendFile2, chmod as chmod4, mkdir as mkdir5, readFile as readFile13, rm as rm16, stat, truncate, writeFile as writeFile5 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
-import { dirname as dirname17, join as join18, resolve as resolve14 } from "node:path";
+import { dirname as dirname18, join as join18, resolve as resolve15 } from "node:path";
 import { Transform } from "node:stream";
 import { pipeline } from "node:stream/promises";
 var SERVICE_NAME, SYSTEMD_UNIT, LAUNCHD_LABEL, SERVICE_POLICY, ATOMIC_REPLACEMENT_READ_ATTEMPTS, SERVICE_COOPERATIVE_STOP_SECONDS, pollAttemptsWithin, lockStillHeld, INFERENCE_HOST_SERVICE_DRAIN_COMMAND, INFERENCE_HOST_SERVICE_QUIESCE_COMMAND, InferenceHostBootstrapRestartRequiredError, inferenceHostServiceChildEnvironment, isWindowsSubsystemForLinux, inferenceHostServiceManifestPath, inferenceHostServiceDesiredPath, inferenceHostServiceLogPath, inferenceHostServiceRotatedLogPath, inferenceHostServiceRuntimePath, xmlEscape, plistEscape, systemdQuote, defaultRunCommand, probeInferenceHostLauncher, managerName, assertRuntimeEnvironment, withoutConcurrencyLimit, assertServicePath, manifestGeneration, assertWorker, assertManifest, assertServiceRuntimeState, assertDesiredState, readInferenceHostServiceManifest, readManifestAcrossAtomicReplacement, readInferenceHostServiceRuntime, readRuntimeAcrossAtomicReplacement, readInferenceHostServiceDesired, readDesiredAcrossAtomicReplacement, writeDesired, runtimeEnvironment, serviceBootstrapArguments, windowsOwnedCommandLine, vbScriptString, windowsServiceLauncher, windowsTaskXml, systemdUnit, launchAgentPlist, sameWorker, sameServiceDefinition, sameWorkerSet, InferenceHostServiceManager, serviceLogSinks, serviceLogSize, rotateServiceLog, writeServiceLog, appendServiceLog, spawnInferenceHostServiceChild, runInferenceHostServiceSupervisor;
@@ -51209,10 +51584,10 @@ WantedBy=default.target
         this.config = config2;
         this.platform = dependencies.platform ?? process.platform;
         this.home = dependencies.homedir ?? homedir4();
-        this.executable = resolve14(dependencies.executable ?? process.execPath);
-        this.script = resolve14(dependencies.script ?? process.argv[1] ?? "");
-        this.bootstrapScript = resolve14(
-          dependencies.bootstrapScript ?? join18(dirname17(this.script), "vtx-service-launcher.js")
+        this.executable = resolve15(dependencies.executable ?? process.execPath);
+        this.script = resolve15(dependencies.script ?? process.argv[1] ?? "");
+        this.bootstrapScript = resolve15(
+          dependencies.bootstrapScript ?? join18(dirname18(this.script), "vtx-service-launcher.js")
         );
         this.username = dependencies.username ?? ([process.env.USERDOMAIN, process.env.USERNAME].filter(Boolean).join("\\") || process.env.USER || "");
         this.windowsDirectory = (dependencies.windowsDirectory ?? process.env.SystemRoot ?? process.env.WINDIR ?? "C:\\Windows").replace(/[\\/]+$/u, "");
@@ -51456,7 +51831,7 @@ ${result.stderr}`)) {
           if (this.bootstrapScript.endsWith("vtx-service-launcher.js") && !existingRecovery) {
             await probeInferenceHostLauncher(manifest.executable, this.serviceBootstrapPath(), launcherBytes, this.runCommand);
             const core = launcherSibling(this.manifestPath(), ".service-bootstrap.previous.js");
-            const coreBytes = await readFile13(join18(dirname17(this.bootstrapScript), "vtx-service-bootstrap.js"), "utf8");
+            const coreBytes = await readFile13(join18(dirname18(this.bootstrapScript), "vtx-service-bootstrap.js"), "utf8");
             await probeInferenceHostLauncher(manifest.executable, core, coreBytes, this.runCommand);
             await writeAtomicInferencePrivateFile(core, coreBytes);
             await writeLauncherState(this.manifestPath(), {
@@ -51468,7 +51843,7 @@ ${result.stderr}`)) {
           }
           if (!existingRecovery) await writeAtomicInferencePrivateFile(this.serviceBootstrapPath(), launcherBytes);
           await chmod4(this.serviceBootstrapPath(), OWNER_ONLY_DIRECTORY_MODE);
-          await mkdir5(dirname17(this.definitionPath()), { recursive: true, mode: OWNER_ONLY_DIRECTORY_MODE });
+          await mkdir5(dirname18(this.definitionPath()), { recursive: true, mode: OWNER_ONLY_DIRECTORY_MODE });
           if (this.platform === "win32") {
             await writeAtomicInferencePrivateFile(
               this.windowsLauncherPath(),
@@ -51658,7 +52033,7 @@ ${cleanup.stderr}`)) {
         }
         if (this.config.credentialFilePath && otherWorkers.some((worker) => {
           const otherPath = worker.runtime_environment.VTX_INFERENCE_HOST_CREDENTIAL_FILE;
-          return otherPath && resolve14(otherPath) === resolve14(this.config.credentialFilePath);
+          return otherPath && resolve15(otherPath) === resolve15(this.config.credentialFilePath);
         })) {
           throw new Error(
             "Each inference-host instance must use a different private credential file."
@@ -51901,9 +52276,9 @@ ${result.stderr}`)) {
         }
       }
       async status(confirmedRuntime) {
-        const manifest = await readInferenceHostServiceManifest(this.manifestPath());
+        const manifest = await readManifestAcrossAtomicReplacement(this.manifestPath());
         const runtime = confirmedRuntime?.manifest_generation === manifest?.generation ? confirmedRuntime : await readRuntimeAcrossAtomicReplacement(this.runtimePath()).catch(() => null);
-        const desired = await readInferenceHostServiceDesired(this.desiredPath());
+        const desired = await readDesiredAcrossAtomicReplacement(this.desiredPath());
         const result = await this.managerCommand("status");
         const output3 = result.stdout.trim();
         const managerActive = result.exitCode === 0 && (this.platform === "linux" ? /(?:^|\n)ActiveState=active(?:\n|$)/u.test(output3) : this.platform === "win32" ? output3.trim() === "4" : /\bstate\s*=\s*running\b/iu.test(output3));
@@ -52056,7 +52431,7 @@ ${result.stderr}`)) {
       const state2 = sink;
       const write = state2.tail.then(async () => {
         if (state2.bytes === null) {
-          await mkdir5(dirname17(path), { recursive: true, mode: OWNER_ONLY_DIRECTORY_MODE });
+          await mkdir5(dirname18(path), { recursive: true, mode: OWNER_ONLY_DIRECTORY_MODE });
           state2.bytes = await serviceLogSize(path);
         }
         await appendFile2(path, text2, { encoding: "utf8", mode: OWNER_ONLY_FILE_MODE });
@@ -52209,7 +52584,7 @@ ${result.stderr}`)) {
     runInferenceHostServiceSupervisor = async (manifestPath, options = {}) => {
       const storedInitialManifest = await readInferenceHostServiceManifest(manifestPath);
       if (!storedInitialManifest) throw new Error("Inference-host service manifest is missing.");
-      const serviceScript = options.serviceScript ? resolve14(options.serviceScript) : null;
+      const serviceScript = options.serviceScript ? resolve15(options.serviceScript) : null;
       const withServiceScript = (manifest) => serviceScript ? { ...manifest, script: serviceScript } : manifest;
       const initialManifest = withServiceScript(storedInitialManifest);
       const desiredPath = manifestPath.replace(/\.service\.json$/u, ".service-desired.json");
@@ -52247,10 +52622,10 @@ ${result.stderr}`)) {
           const current = await readManifestAcrossAtomicReplacement(manifestPath);
           if (!current || current.generation !== appliedManifest.generation || !await readDesiredAcrossAtomicReplacement(desiredPath) || signal.aborted) return;
           const selected = await readLauncherSelection(manifestPath);
-          if (!selected || selected.package_version !== agent_cli_release_default.package_version || resolve14(selected.script) !== serviceScript) return;
+          if (!selected || selected.package_version !== agent_cli_release_default.package_version || resolve15(selected.script) !== serviceScript) return;
           if (process.env.VTX_INFERENCE_HOST_LAUNCHER_PROTOCOL !== "1") {
             const launcherPath = launcherSibling(manifestPath, ".service-bootstrap.js");
-            const bytes3 = await readFile13(join18(dirname17(serviceScript), "vtx-service-launcher.js"), "utf8");
+            const bytes3 = await readFile13(join18(dirname18(serviceScript), "vtx-service-launcher.js"), "utf8");
             await (options.probeLauncher ?? probeInferenceHostLauncher)(current.executable, launcherPath, bytes3);
             const existing = await readLauncherState(manifestPath);
             if (!existing) throw new Error("Previous private service release is unavailable; refusing unsafe launcher migration.");
@@ -52533,7 +52908,7 @@ import { setTimeout as delay } from "node:timers/promises";
 import { spawn as spawn14 } from "node:child_process";
 import { lstat as lstat12, realpath as realpath10, rm as rm17 } from "node:fs/promises";
 import { hostname as osHostname } from "node:os";
-import { join as join19, resolve as resolve15 } from "node:path";
+import { join as join19, resolve as resolve16 } from "node:path";
 async function runInferenceHostCli(argv2, env = process.env, dependencies = {}) {
   const warnings = [];
   try {
@@ -52962,7 +53337,7 @@ Durable service:
           if (!raw?.trim()) throw new Error(`${argument} requires a value.`);
           if (argument === "--adapter") adapter = raw.trim();
           if (argument === "--provider") providerId = raw.trim();
-          if (argument === "--exo-root") exoRoot = resolve15(raw.trim());
+          if (argument === "--exo-root") exoRoot = resolve16(raw.trim());
           if (argument === "--model") modelId = raw.trim();
           if (argument === "--model-label") modelLabel = raw.trim();
           if (argument === "--effort") reasoningEffort = raw.trim();
@@ -52978,7 +53353,7 @@ Durable service:
               throw new Error(`--lines must be an integer from 1 through ${HOST_RUNTIME_POLICY16.cli_log_lines_max}.`);
             }
           }
-          if (argument === "--service-manifest") serviceManifestPath = resolve15(raw.trim());
+          if (argument === "--service-manifest") serviceManifestPath = resolve16(raw.trim());
           if (argument === "--instance") {
             instanceName = raw.trim();
             instanceExplicit = true;
@@ -53205,7 +53580,7 @@ Durable service:
       try {
         const before = await lstat12(path);
         const canonical = await realpath10(path);
-        const isPrivate = before.isFile() && !before.isSymbolicLink() && canonical === resolve15(path) && before.size <= HOST_RUNTIME_POLICY16.codex_auth_file_max_bytes && (process.platform === "win32" || (before.mode & GROUP_OTHER_PERMISSION_BITS) === 0 && (typeof process.getuid !== "function" || before.uid === process.getuid()));
+        const isPrivate = before.isFile() && !before.isSymbolicLink() && canonical === resolve16(path) && before.size <= HOST_RUNTIME_POLICY16.codex_auth_file_max_bytes && (process.platform === "win32" || (before.mode & GROUP_OTHER_PERMISSION_BITS) === 0 && (typeof process.getuid !== "function" || before.uid === process.getuid()));
         return { present: true, private: isPrivate };
       } catch (error48) {
         if (error48.code === "ENOENT") {
@@ -53226,10 +53601,7 @@ Durable service:
         "Inference host runtime receipt file"
       );
       await rm17(codexGuardianReceiptRoot(config2), { recursive: true, force: true });
-      await clearInferencePrivateFile(
-        codexRecoveryPath(config2),
-        "Codex attempt recovery file"
-      );
+      await new FileCodexAttemptRecoveryStore(codexRecoveryPath(config2)).discard();
       await clearInferenceAgentAttemptState(config2.statePath);
       await clearInferenceAgentNextState(config2.statePath);
       await clearInferenceForegroundAgentControlState(config2.statePath);
@@ -54553,7 +54925,7 @@ Waiting for approval...
       const session = await agentSession(config2, dependencies, warnings);
       const now = dependencies.now ?? (() => /* @__PURE__ */ new Date());
       const sleep3 = dependencies.sleep ?? (async (milliseconds) => {
-        await new Promise((resolve16) => setTimeout(resolve16, milliseconds));
+        await new Promise((resolve17) => setTimeout(resolve17, milliseconds));
       });
       const stopAt = now().getTime() + parsed.waitSeconds * MS_PER_SECOND;
       while (true) {
@@ -55156,7 +55528,7 @@ Waiting for approval...
           }
           if (parsed.once && !commandLock) break;
           await (dependencies.sleep ?? (async (milliseconds) => {
-            await new Promise((resolve16) => setTimeout(resolve16, milliseconds));
+            await new Promise((resolve17) => setTimeout(resolve17, milliseconds));
           }))(retryDelayMs);
         }
         return {
@@ -55185,7 +55557,7 @@ Waiting for approval...
       const session = await agentSession(config2, dependencies, warnings);
       const now = dependencies.now ?? (() => /* @__PURE__ */ new Date());
       const sleep3 = dependencies.sleep ?? (async (milliseconds) => {
-        await new Promise((resolve16) => setTimeout(resolve16, milliseconds));
+        await new Promise((resolve17) => setTimeout(resolve17, milliseconds));
       });
       const stopAt = now().getTime() + parsed.waitSeconds * MS_PER_SECOND;
       while (true) {
@@ -55543,7 +55915,7 @@ Waiting for approval...
       ) || new Set(record6.cleanup_confirmed_attempt_ids).size !== record6.cleanup_confirmed_attempt_ids.length || [...record6.cleanup_confirmed_attempt_ids].sort().join("\0") !== record6.cleanup_confirmed_attempt_ids.join("\0") || typeof record6.started_at !== "string" || !Number.isFinite(Date.parse(record6.started_at)) || new Date(record6.started_at).toISOString() !== record6.started_at) {
         throw new Error("Inference-host service recovery transaction is invalid.");
       }
-      if (resolve15(record6.recovery_backup_path) !== resolve15(recoveryBackupPath(config2, record6.transaction_id))) {
+      if (resolve16(record6.recovery_backup_path) !== resolve16(recoveryBackupPath(config2, record6.transaction_id))) {
         throw new Error("Inference-host service recovery backup path is invalid.");
       }
       return record6;
@@ -55825,7 +56197,7 @@ Waiting for approval...
             {
               signal: cancellation.signal,
               quiesceSignal: cancellation.quiesceSignal,
-              serviceScript: resolve15(process.argv[1] ?? ""),
+              serviceScript: resolve16(process.argv[1] ?? ""),
               controlLockPath: `${supervisorConfig.supervisorProcessLockPath}.service-control`
             }
           );
@@ -56051,7 +56423,7 @@ Waiting for approval...
         ...selectedEnv,
         ...retainedEnvironment
       });
-      if (resolve15(installedConfig.statePath) !== resolve15(baseConfig.statePath)) {
+      if (resolve16(installedConfig.statePath) !== resolve16(baseConfig.statePath)) {
         throw new Error(
           "Installed inference-host service manifest does not match the requested local state path."
         );
@@ -56478,7 +56850,7 @@ import {
   writeFileSync
 } from "node:fs";
 import { randomUUID as randomUUID15 } from "node:crypto";
-import { dirname as dirname18 } from "node:path";
+import { dirname as dirname19 } from "node:path";
 function openClientRuntimeProtectionStorage(runtimeStatePath, profileId) {
   const path = clientRuntimeProtectionStatePath(runtimeStatePath, profileId);
   const storage3 = new FileBackedRuntimeStorage(path);
@@ -56548,7 +56920,7 @@ var init_protection_storage = __esm({
         }
       }
       writeValues(values) {
-        mkdirSync(dirname18(this.path), { recursive: true, mode: OWNER_ONLY_DIRECTORY_MODE });
+        mkdirSync(dirname19(this.path), { recursive: true, mode: OWNER_ONLY_DIRECTORY_MODE });
         const serialized = `${JSON.stringify(values)}
 `;
         const temporaryPath = `${this.path}.${process.pid}.${randomUUID15()}.tmp`;
@@ -59213,7 +59585,7 @@ var init_shared = __esm({
       const readsGzip = noteRequestEncodings(input, response);
       return sent !== init2 && refusedUnread(response, readsGzip) ? sendApiRequest(input, init2) : response;
     };
-    sleep = (ms) => new Promise((resolve16) => setTimeout(resolve16, ms));
+    sleep = (ms) => new Promise((resolve17) => setTimeout(resolve17, ms));
     DEVICE_CLOCK_HEADER = "X-Device-Clock-Ms";
     deviceClockHeader = () => ({ [DEVICE_CLOCK_HEADER]: String(Date.now()) });
     API_NO_ROUTE_DETAIL = "Not Found";
@@ -59252,10 +59624,10 @@ var init_shared = __esm({
     raceWithAbortSignal = async (promise2, signal) => {
       if (!signal) return promise2;
       if (signal.aborted) throw toAbortError(signal.reason);
-      return new Promise((resolve16, reject) => {
+      return new Promise((resolve17, reject) => {
         const onAbort = () => reject(toAbortError(signal.reason));
         signal.addEventListener("abort", onAbort, { once: true });
-        promise2.then(resolve16, reject).finally(() => signal.removeEventListener("abort", onAbort));
+        promise2.then(resolve17, reject).finally(() => signal.removeEventListener("abort", onAbort));
       });
     };
     shareClientGetRequest = async (key, request, options) => {
@@ -61252,14 +61624,14 @@ var init_runtime_event_batch = __esm({
         );
       }
     };
-    queueRuntimeEvent = (key, body, send) => new Promise((resolve16, reject) => {
+    queueRuntimeEvent = (key, body, send) => new Promise((resolve17, reject) => {
       let group = groups.get(key);
       if (!group) {
         group = { events: [], timer: null, sendBatch: send.batch, sendOne: send.one };
         groups.set(key, group);
         group.timer = setTimeout(() => flush(key), EVENT_BATCH.window_milliseconds);
       }
-      group.events.push({ body, resolve: resolve16, reject });
+      group.events.push({ body, resolve: resolve17, reject });
       if (group.events.length >= EVENT_BATCH.max_events) flush(key);
     });
     eventBody = (payload) => ({
@@ -62191,7 +62563,7 @@ var init_hyperliquid_public_read = __esm({
     checkAbort = (signal) => {
       if (signal?.aborted) throw abortError2(signal);
     };
-    wait = (ms, signal) => new Promise((resolve16, reject) => {
+    wait = (ms, signal) => new Promise((resolve17, reject) => {
       checkAbort(signal);
       const aborted2 = () => {
         clearTimeout(timer);
@@ -62199,7 +62571,7 @@ var init_hyperliquid_public_read = __esm({
       };
       const timer = setTimeout(() => {
         signal?.removeEventListener("abort", aborted2);
-        resolve16();
+        resolve17();
       }, Math.min(ms, SET_TIMEOUT_MAX_DELAY_MS));
       signal?.addEventListener("abort", aborted2, { once: true });
     });
@@ -62866,7 +63238,7 @@ var init_hyperliquid_public_read = __esm({
             if (!running) break;
             promoteHyperliquidPublicPriority(running.priority, priority.value);
             setPendingPhase("cache");
-            await new Promise((resolve16, reject) => {
+            await new Promise((resolve17, reject) => {
               const promoteOwner = (next) => promoteHyperliquidPublicPriority(running.priority, next);
               const cleanup = () => {
                 signal.removeEventListener("abort", aborted2);
@@ -62880,13 +63252,13 @@ var init_hyperliquid_public_read = __esm({
               signal.addEventListener("abort", aborted2, { once: true });
               running.promise.then(() => {
                 cleanup();
-                resolve16();
+                resolve17();
               });
             });
             checkAbort(signal);
           }
-          pending2.set(key, { promise: new Promise((resolve16) => {
-            settled2 = resolve16;
+          pending2.set(key, { promise: new Promise((resolve17) => {
+            settled2 = resolve17;
           }), priority });
         }
         if (options.reservation?.closed) throw new DOMException("Hyperliquid account read was cancelled.", "AbortError");
@@ -63163,8 +63535,8 @@ var init_exchange_mutation_fence = __esm({
         return operation();
       }
       let markSettled;
-      const settlement = new Promise((resolve16) => {
-        markSettled = resolve16;
+      const settlement = new Promise((resolve17) => {
+        markSettled = resolve17;
       });
       const activeSettlements = activeSettlementsByScope.get(normalizedScope) ?? /* @__PURE__ */ new Set();
       activeSettlements.add(settlement);
@@ -63217,7 +63589,7 @@ var init_runtime_handoff = __esm({
 });
 
 // lib/runtime/provider-observability.ts
-var MAX_DIAGNOSTIC_LIST_ITEMS, record5, ERROR_TOKEN, ERROR_DOMAIN, ERROR_INPUT, ERROR_ECHO_REDACTIONS, ERROR_PROSE_REDACTIONS, CONTROL_CHARACTER_RUN, WHITESPACE_RUN, collapseProse, settled, REDACTED_MARKER_START, boundedMessage, normalizeProviderError, identifier, count4, normalizeProviderDiagnostics, providerRequestId, hash2, googleCredentialDiagnostics, withExecutionMode, retryAfterDiagnostics, extractProviderDiagnostics, estimateRequestInputTokens;
+var MAX_DIAGNOSTIC_LIST_ITEMS, record5, ERROR_TOKEN, ERROR_DOMAIN, ERROR_INPUT, ERROR_ECHO_REDACTIONS, ERROR_PROSE_REDACTIONS, CONTROL_CHARACTER_RUN, UNSTORABLE_TEXT, WHITESPACE_RUN, collapseProse, settled, REDACTED_MARKER_START, cutOutsideMarker, boundedMessage, normalizeProviderError, REPLY_POLICY, REPLY_HEADER_NAME, isProviderReplyHeaderName, boundedReplyText, normalizeProviderReply, identifier, count4, normalizeProviderDiagnostics, providerRequestId, hash2, googleCredentialDiagnostics, withExecutionMode, retryAfterDiagnostics, extractProviderDiagnostics, estimateRequestInputTokens;
 var init_provider_observability = __esm({
   "lib/runtime/provider-observability.ts"() {
     "use strict";
@@ -63227,6 +63599,7 @@ var init_provider_observability = __esm({
     init_define_VTX_PI_MODEL_POLICY();
     init_constants();
     init_runtime_redaction();
+    init_runtime_policy_generated2();
     MAX_DIAGNOSTIC_LIST_ITEMS = PROVIDER_DIAGNOSTIC_LIMITS.MAX_LIST_ITEMS;
     record5 = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : {};
     ERROR_TOKEN = /^[A-Z][A-Z0-9_]{0,63}$/;
@@ -63247,6 +63620,7 @@ var init_provider_observability = __esm({
       [/"[^"]*"|'[^'\r\n]*'/g, "[REDACTED]"]
     ];
     CONTROL_CHARACTER_RUN = /[\x00-\x1f\x7f]+/g;
+    UNSTORABLE_TEXT = /\u0000|[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/g;
     WHITESPACE_RUN = new RegExp(`${WHITESPACE_CLASS}+`, "g");
     collapseProse = (value) => value.replace(CONTROL_CHARACTER_RUN, " ").replace(WHITESPACE_RUN, " ").trim();
     settled = (value) => {
@@ -63260,12 +63634,14 @@ var init_provider_observability = __esm({
       return current;
     };
     REDACTED_MARKER_START = "[REDACTED";
+    cutOutsideMarker = (full, cut) => {
+      const opened = cut.lastIndexOf("[");
+      return opened !== -1 && full.startsWith(REDACTED_MARKER_START, opened) && full.indexOf("]", opened) >= cut.length ? cut.slice(0, opened) : cut;
+    };
     boundedMessage = (value) => {
       const characters = Array.from(value);
       if (characters.length <= PROVIDER_DIAGNOSTIC_LIMITS.MAX_ERROR_MESSAGE_CHARS) return value;
-      let cut = characters.slice(0, PROVIDER_DIAGNOSTIC_LIMITS.MAX_ERROR_MESSAGE_CHARS).join("");
-      const marker2 = cut.lastIndexOf(REDACTED_MARKER_START);
-      if (marker2 !== -1 && value.indexOf("]", marker2) >= cut.length) cut = cut.slice(0, marker2);
+      const cut = cutOutsideMarker(value, characters.slice(0, PROVIDER_DIAGNOSTIC_LIMITS.MAX_ERROR_MESSAGE_CHARS).join(""));
       return cut.replace(/ +$/, "");
     };
     normalizeProviderError = (value) => {
@@ -63282,6 +63658,7 @@ var init_provider_observability = __esm({
           message = sanitizeRuntimeDiagnosticValue(message);
           for (const [pattern, replacement] of ERROR_PROSE_REDACTIONS) message = message.replace(pattern, replacement);
           message = settled(sanitizeRuntimeDiagnosticValue(collapseProse(sanitizeRuntimeDiagnosticValue(message))));
+          message = message.replace(UNSTORABLE_TEXT, "\uFFFD");
         }
         const fullLength = Array.from(message).length;
         let bounded = boundedMessage(message);
@@ -63301,6 +63678,35 @@ var init_provider_observability = __esm({
       }
       return result;
     };
+    REPLY_POLICY = runtime_policy_generated_default2.llm.provider_diagnostics;
+    REPLY_HEADER_NAME = /^[a-z0-9][a-z0-9-]{0,127}$/;
+    isProviderReplyHeaderName = (name) => {
+      const lowered = name.toLowerCase();
+      return REPLY_HEADER_NAME.test(lowered) && REPLY_POLICY.reply_header_name_parts.some((part) => lowered.includes(part));
+    };
+    boundedReplyText = (value) => {
+      const masked = sanitizeRuntimeDiagnosticValue(value.replace(UNSTORABLE_TEXT, "\uFFFD"));
+      const characters = Array.from(masked);
+      if (characters.length <= REPLY_POLICY.reply_body_max_chars) return { text: masked, truncated: false };
+      let cut = cutOutsideMarker(masked, characters.slice(0, REPLY_POLICY.reply_body_max_chars).join(""));
+      while (sanitizeRuntimeDiagnosticValue(cut) !== cut) cut = Array.from(cut).slice(0, -1).join("");
+      return { text: cut, truncated: true };
+    };
+    normalizeProviderReply = (value) => {
+      const raw = record5(value);
+      const result = {};
+      if (typeof raw.status === "number" && Number.isInteger(raw.status) && raw.status >= HTTP_STATUS_MIN && raw.status <= HTTP_STATUS_MAX) result.status = raw.status;
+      if (typeof raw.body === "string" && raw.body) {
+        const { text: text2, truncated } = boundedReplyText(raw.body);
+        if (text2) {
+          result.body = text2;
+          if (truncated || raw.body_truncated === true) result.body_truncated = true;
+        }
+      }
+      const headers = Object.entries(record5(raw.headers)).filter((entry) => typeof entry[1] === "string" && entry[0] === entry[0].toLowerCase() && isProviderReplyHeaderName(entry[0])).sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).slice(0, REPLY_POLICY.reply_max_headers);
+      if (headers.length) result.headers = Object.fromEntries(headers.map(([name, text2]) => [name, boundedReplyText(text2).text]));
+      return result;
+    };
     identifier = (v) => typeof v === "string" && /^[A-Za-z0-9][A-Za-z0-9_.:/-]{0,255}$/.test(v) ? v : void 0;
     count4 = (v) => {
       if (typeof v !== "number" && (typeof v !== "string" || !v.trim())) return void 0;
@@ -63340,6 +63746,8 @@ var init_provider_observability = __esm({
         }).filter((v) => Object.keys(v).length > 0);
         if (violations.length) result.quota_violations = violations;
       }
+      const providerReply = normalizeProviderReply(raw.provider_reply);
+      if (Object.keys(providerReply).length) result.provider_reply = providerReply;
       const outputValidation = record5(raw.output_validation);
       if (Array.isArray(outputValidation.expected_symbols)) {
         const symbols = outputValidation.expected_symbols.slice(0, MAX_DIAGNOSTIC_LIST_ITEMS).map(identifier).filter((symbol2) => symbol2 !== void 0);
@@ -65428,7 +65836,7 @@ function createGetUrl(options) {
       request.write(Buffer.from(body));
     }
     request.end();
-    return new Promise((resolve16, reject) => {
+    return new Promise((resolve17, reject) => {
       if (signal) {
         signal.addListener(() => {
           if (abort) {
@@ -65474,7 +65882,7 @@ function createGetUrl(options) {
             if (headers2["content-encoding"] === "gzip" && body2) {
               body2 = getBytes(gunzipSync3(body2));
             }
-            resolve16({ statusCode, statusMessage, headers: headers2, body: body2 });
+            resolve17({ statusCode, statusMessage, headers: headers2, body: body2 });
           } catch (error48) {
             reject(makeError("bad response data", "SERVER_ERROR", {
               request: req,
@@ -65551,7 +65959,7 @@ function unpercent(value) {
   }));
 }
 function wait2(delay3) {
-  return new Promise((resolve16) => setTimeout(resolve16, delay3));
+  return new Promise((resolve17) => setTimeout(resolve17, delay3));
 }
 var MAX_ATTEMPTS, SLOT_INTERVAL, defaultGetUrlFunc, reData, reIpfs, locked, Gateways, fetchSignals, FetchCancelSignal, FetchRequest, FetchResponse;
 var init_fetch = __esm({
@@ -79423,7 +79831,7 @@ var init_provider = __esm({
             return null;
           }
         }
-        const waiter = new Promise((resolve16, reject) => {
+        const waiter = new Promise((resolve17, reject) => {
           const cancellers = [];
           const cancel = () => {
             cancellers.forEach((c) => c());
@@ -79444,7 +79852,7 @@ var init_provider = __esm({
             if (await receipt2.confirmations() >= confirms) {
               cancel();
               try {
-                resolve16(checkReceipt(receipt2));
+                resolve17(checkReceipt(receipt2));
               } catch (error48) {
                 reject(error48);
               }
@@ -80371,12 +80779,12 @@ var init_contract = __esm({
         }
         const provider = getProvider(this.runner);
         assert2(provider != null, "contract runner does not support .provider", "UNSUPPORTED_OPERATION", { operation: "waitForDeployment" });
-        return new Promise((resolve16, reject) => {
+        return new Promise((resolve17, reject) => {
           const checkCode = async () => {
             try {
               const code2 = await this.getDeployedCode();
               if (code2 != null) {
-                return resolve16(this);
+                return resolve17(this);
               }
               provider.once("block", checkCode);
             } catch (error48) {
@@ -82736,7 +83144,7 @@ var init_abstract_provider = __esm({
           return t.toLowerCase();
         });
         const blockHash = "blockHash" in filter ? filter.blockHash : void 0;
-        const resolve16 = (_address, fromBlock2, toBlock2) => {
+        const resolve17 = (_address, fromBlock2, toBlock2) => {
           let address2 = void 0;
           switch (_address.length) {
             case 0:
@@ -82791,10 +83199,10 @@ var init_abstract_provider = __esm({
         }
         if (address.filter((a) => typeof a !== "string").length || fromBlock != null && typeof fromBlock !== "string" || toBlock != null && typeof toBlock !== "string") {
           return Promise.all([Promise.all(address), fromBlock, toBlock]).then((result) => {
-            return resolve16(result[0], result[1], result[2]);
+            return resolve17(result[0], result[1], result[2]);
           });
         }
-        return resolve16(address, fromBlock, toBlock);
+        return resolve17(address, fromBlock, toBlock);
       }
       /**
        *  Returns or resolves to a transaction for %%request%%, resolving
@@ -83168,14 +83576,14 @@ var init_abstract_provider = __esm({
         if (confirms === 0) {
           return this.getTransactionReceipt(hash5);
         }
-        return new Promise(async (resolve16, reject) => {
+        return new Promise(async (resolve17, reject) => {
           let timer = null;
           const listener = (async (blockNumber) => {
             try {
               const receipt = await this.getTransactionReceipt(hash5);
               if (receipt != null) {
                 if (blockNumber - receipt.blockNumber + 1 >= confirms) {
-                  resolve16(receipt);
+                  resolve17(receipt);
                   if (timer) {
                     clearTimeout(timer);
                     timer = null;
@@ -83949,8 +84357,8 @@ function deepCopy(value) {
   throw new Error(`should not happen: ${value} (${typeof value})`);
 }
 function stall(duration3) {
-  return new Promise((resolve16) => {
-    setTimeout(resolve16, duration3);
+  return new Promise((resolve17) => {
+    setTimeout(resolve17, duration3);
   });
 }
 function getLowerCase(value) {
@@ -84091,14 +84499,14 @@ var init_provider_jsonrpc = __esm({
       async sendTransaction(tx) {
         const blockNumber = await this.provider.getBlockNumber();
         const hash5 = await this.sendUncheckedTransaction(tx);
-        return await new Promise((resolve16, reject) => {
+        return await new Promise((resolve17, reject) => {
           const timeouts = [1e3, 100];
           let invalids = 0;
           const checkTx = async () => {
             try {
               const tx2 = await this.provider.getTransaction(hash5);
               if (tx2 != null) {
-                resolve16(tx2.replaceableTransaction(blockNumber));
+                resolve17(tx2.replaceableTransaction(blockNumber));
                 return;
               }
             } catch (error48) {
@@ -84215,7 +84623,7 @@ var init_provider_jsonrpc = __esm({
               try {
                 const result = await this._send(payload);
                 this.emit("debug", { action: "receiveRpcResult", result });
-                for (const { resolve: resolve16, reject, payload: payload2 } of batch) {
+                for (const { resolve: resolve17, reject, payload: payload2 } of batch) {
                   if (this.destroyed) {
                     reject(makeError("provider destroyed; cancelled request", "UNSUPPORTED_OPERATION", { operation: payload2.method }));
                     continue;
@@ -84234,7 +84642,7 @@ var init_provider_jsonrpc = __esm({
                     reject(this.getRpcError(payload2, resp));
                     continue;
                   }
-                  resolve16(resp.result);
+                  resolve17(resp.result);
                 }
               } catch (error48) {
                 this.emit("debug", { action: "receiveRpcError", error: error48 });
@@ -84255,11 +84663,11 @@ var init_provider_jsonrpc = __esm({
         this.#network = null;
         this.#pendingDetectNetwork = null;
         {
-          let resolve16 = null;
+          let resolve17 = null;
           const promise2 = new Promise((_resolve) => {
-            resolve16 = _resolve;
+            resolve17 = _resolve;
           });
-          this.#notReady = { promise: promise2, resolve: resolve16 };
+          this.#notReady = { promise: promise2, resolve: resolve17 };
         }
         const staticNetwork = this._getOption("staticNetwork");
         if (typeof staticNetwork === "boolean") {
@@ -84672,9 +85080,9 @@ var init_provider_jsonrpc = __esm({
           return Promise.reject(makeError("provider destroyed; cancelled request", "UNSUPPORTED_OPERATION", { operation: method }));
         }
         const id2 = this.#nextId++;
-        const promise2 = new Promise((resolve16, reject) => {
+        const promise2 = new Promise((resolve17, reject) => {
           this.#payloads.push({
-            resolve: resolve16,
+            resolve: resolve17,
             reject,
             payload: { method, params, id: id2, jsonrpc: "2.0" }
           });
@@ -89653,8 +90061,8 @@ var init_provider_socket = __esm({
       }
       async _send(payload) {
         assertArgument(!Array.isArray(payload), "WebSocket does not support batch send", "payload", payload);
-        const promise2 = new Promise((resolve16, reject) => {
-          this.#callbacks.set(payload.id, { payload, resolve: resolve16, reject });
+        const promise2 = new Promise((resolve17, reject) => {
+          this.#callbacks.set(payload.id, { payload, resolve: resolve17, reject });
         });
         await this._waitUntilReady();
         await this._write(JSON.stringify(payload));
@@ -90063,8 +90471,8 @@ function shuffle(array2) {
   }
 }
 function stall2(duration3) {
-  return new Promise((resolve16) => {
-    setTimeout(resolve16, duration3);
+  return new Promise((resolve17) => {
+    setTimeout(resolve17, duration3);
   });
 }
 function getTime3() {
@@ -90950,7 +91358,7 @@ var init_provider_browser = __esm({
         if (timeout === 0) {
           return null;
         }
-        return await new Promise((resolve16, reject) => {
+        return await new Promise((resolve17, reject) => {
           let found = [];
           const addProvider = (event) => {
             found.push(event.detail);
@@ -90964,9 +91372,9 @@ var init_provider_browser = __esm({
               if (options && options.filter) {
                 const filtered = options.filter(found.map((i2) => Object.assign({}, i2.info)));
                 if (filtered == null) {
-                  resolve16(null);
+                  resolve17(null);
                 } else if (filtered instanceof _BrowserProvider) {
-                  resolve16(filtered);
+                  resolve17(filtered);
                 } else {
                   let match = null;
                   if (filtered.uuid) {
@@ -90975,7 +91383,7 @@ var init_provider_browser = __esm({
                   }
                   if (match) {
                     const { provider, info } = match;
-                    resolve16(new _BrowserProvider(provider, void 0, {
+                    resolve17(new _BrowserProvider(provider, void 0, {
                       providerInfo: info
                     }));
                   } else {
@@ -90986,12 +91394,12 @@ var init_provider_browser = __esm({
                 }
               } else {
                 const { provider, info } = found[0];
-                resolve16(new _BrowserProvider(provider, void 0, {
+                resolve17(new _BrowserProvider(provider, void 0, {
                   providerInfo: info
                 }));
               }
             } else {
-              resolve16(null);
+              resolve17(null);
             }
             context.removeEventListener("eip6963:announceProvider", addProvider);
           };
@@ -91445,10 +91853,10 @@ var init_base_wallet = __esm({
 });
 
 // node_modules/ethers/lib.esm/wordlists/decode-owl.js
-function unfold(words7, sep3) {
+function unfold(words7, sep4) {
   let initial = 97;
   return words7.reduce((accum, word) => {
-    if (word === sep3) {
+    if (word === sep4) {
       initial++;
     } else if (word.match(Word)) {
       accum.push(String.fromCharCode(initial) + word);
@@ -92425,9 +92833,9 @@ function decryptKeystoreJsonSync(json2, _password) {
   return getAccount(data4, key);
 }
 function stall3(duration3) {
-  return new Promise((resolve16) => {
+  return new Promise((resolve17) => {
     setTimeout(() => {
-      resolve16();
+      resolve17();
     }, duration3);
   });
 }
@@ -93059,9 +93467,9 @@ var init_json_crowdsale = __esm({
 
 // node_modules/ethers/lib.esm/wallet/wallet.js
 function stall4(duration3) {
-  return new Promise((resolve16) => {
+  return new Promise((resolve17) => {
     setTimeout(() => {
-      resolve16();
+      resolve17();
     }, duration3);
   });
 }
@@ -96777,8 +97185,8 @@ var init_hyperliquid_client = __esm({
     acknowledgementLookupPacing = () => ({
       windowMs: runtime_policy_generated_default2.exchange.hyperliquid.acknowledgement_lookup.window_milliseconds,
       pollMs: runtime_policy_generated_default2.exchange.hyperliquid.acknowledgement_lookup.poll_milliseconds,
-      sleep: (ms) => new Promise((resolve16) => {
-        globalThis.setTimeout(resolve16, ms);
+      sleep: (ms) => new Promise((resolve17) => {
+        globalThis.setTimeout(resolve17, ms);
       }),
       // Monotonic: a wall-clock step must not stretch or cut the window.
       nowMs: () => globalThis.performance.now()
@@ -97487,14 +97895,14 @@ var init_hyperliquid_client = __esm({
                     "outcome_unknown"
                   );
                 }
-                await new Promise((resolve16) => {
+                await new Promise((resolve17) => {
                   let settled2 = false;
                   const finish = () => {
                     if (settled2) return;
                     settled2 = true;
                     globalThis.clearTimeout(timeoutId);
                     input.signal?.removeEventListener("abort", finish);
-                    resolve16();
+                    resolve17();
                   };
                   const timeoutId = globalThis.setTimeout(
                     finish,
@@ -97529,12 +97937,12 @@ var init_hyperliquid_client = __esm({
                       captureController.signal,
                       ...durableMutationAuthorityArgs(durableMutation)
                     ).then(() => void 0).catch(() => void 0);
-                    const captureDeadline = new Promise((resolve16) => {
+                    const captureDeadline = new Promise((resolve17) => {
                       captureTimeout = globalThis.setTimeout(() => {
                         captureController.abort(
                           new DOMException("Execution attempt capture timed out.", "TimeoutError")
                         );
-                        resolve16();
+                        resolve17();
                       }, remainingBudgetMs);
                     });
                     await Promise.race([captureRequest, captureDeadline]);
@@ -100693,23 +101101,23 @@ var init_vault = __esm({
       }
       return output3.buffer.slice(output3.byteOffset, output3.byteOffset + output3.byteLength);
     };
-    openLegacyVaultDb = () => new Promise((resolve16) => {
+    openLegacyVaultDb = () => new Promise((resolve17) => {
       if (!hasIndexedDb()) {
-        resolve16(null);
+        resolve17(null);
         return;
       }
       let request;
       try {
         request = indexedDB.open(LEGACY_VAULT_DB_NAME, LEGACY_VAULT_DB_VERSION);
       } catch {
-        resolve16(null);
+        resolve17(null);
         return;
       }
-      request.onerror = () => resolve16(null);
+      request.onerror = () => resolve17(null);
       request.onupgradeneeded = () => {
         request.transaction?.abort();
       };
-      request.onsuccess = () => resolve16(request.result);
+      request.onsuccess = () => resolve17(request.result);
     });
     withLegacyStore = async (mode, fn) => {
       const database = await openLegacyVaultDb();
@@ -100718,12 +101126,12 @@ var init_vault = __esm({
         if (!database.objectStoreNames.contains(LEGACY_VAULT_KEY_STORE)) return null;
         const transaction = database.transaction(LEGACY_VAULT_KEY_STORE, mode);
         const request = fn(transaction.objectStore(LEGACY_VAULT_KEY_STORE));
-        const result = await new Promise((resolve16, reject) => {
+        const result = await new Promise((resolve17, reject) => {
           request.onerror = () => reject(request.error ?? new Error("Legacy vault request failed."));
-          request.onsuccess = () => resolve16(request.result ?? null);
+          request.onsuccess = () => resolve17(request.result ?? null);
         });
-        await new Promise((resolve16, reject) => {
-          transaction.oncomplete = () => resolve16();
+        await new Promise((resolve17, reject) => {
+          transaction.oncomplete = () => resolve17();
           transaction.onerror = () => reject(transaction.error ?? new Error("Legacy vault transaction failed."));
           transaction.onabort = () => reject(transaction.error ?? new Error("Legacy vault transaction aborted."));
         });
@@ -102215,12 +102623,12 @@ var init_hyperliquid_account_state_adapter = __esm({
       if (signal.aborted) {
         throw createAbortError(abortMessage);
       }
-      return new Promise((resolve16, reject) => {
+      return new Promise((resolve17, reject) => {
         const onAbort = () => {
           reject(createAbortError(abortMessage));
         };
         signal.addEventListener("abort", onAbort, { once: true });
-        promise2.then(resolve16, reject).finally(() => {
+        promise2.then(resolve17, reject).finally(() => {
           signal.removeEventListener("abort", onAbort);
         });
       });
@@ -103865,7 +104273,7 @@ var init_bounded_lock = __esm({
     };
     inProcessTails = /* @__PURE__ */ new Map();
     abortReason = (signal) => signal.reason instanceof Error ? signal.reason : new DOMException("The operation was aborted.", "AbortError");
-    waitBounded = (gate, waitMs, signal) => new Promise((resolve16, reject) => {
+    waitBounded = (gate, waitMs, signal) => new Promise((resolve17, reject) => {
       if (signal?.aborted) {
         reject(abortReason(signal));
         return;
@@ -103880,19 +104288,19 @@ var init_bounded_lock = __esm({
       };
       const timer = setTimeout(() => {
         finish();
-        resolve16();
+        resolve17();
       }, waitMs);
       signal?.addEventListener("abort", onAbort, { once: true });
       void gate.then(() => {
         finish();
-        resolve16();
+        resolve17();
       });
     });
     withInProcessLock = async (name, waitMs, work, signal) => {
       const previous = inProcessTails.get(name) ?? Promise.resolve();
       let release;
-      const released = new Promise((resolve16) => {
-        release = resolve16;
+      const released = new Promise((resolve17) => {
+        release = resolve17;
       });
       const tail = previous.then(() => released);
       inProcessTails.set(name, tail);
@@ -105133,7 +105541,7 @@ var init_execution_capacity = __esm({
 });
 
 // lib/runtime/owed-protection-warnings.ts
-var storageKey, isWarning, identity2, owesProtectionRecord, distinctProtectionWarnings, owedProtectionWarnings, store, oweProtectionWarnings, forgetProtectionWarnings;
+var storageKey, configuredStorage2, owedStorage, isWarning, identity2, owesProtectionRecord, distinctProtectionWarnings, owedProtectionWarnings, store, oweProtectionWarnings, forgetProtectionWarnings;
 var init_owed_protection_warnings = __esm({
   "lib/runtime/owed-protection-warnings.ts"() {
     "use strict";
@@ -105143,6 +105551,8 @@ var init_owed_protection_warnings = __esm({
     init_define_VTX_PI_MODEL_POLICY();
     init_host_storage();
     storageKey = (profileId) => `vtx:protection-warning-outbox:${String(profileId ?? "").trim()}`;
+    configuredStorage2 = null;
+    owedStorage = () => configuredStorage2 ?? runtimeHostStorage();
     isWarning = (value) => {
       const record6 = value;
       return record6 != null && typeof record6 === "object" && typeof record6.symbol === "string" && typeof record6.action === "string" && typeof record6.status === "string" && (record6.order_id === null || typeof record6.order_id === "string") && record6.execution_metadata != null && typeof record6.execution_metadata === "object";
@@ -105160,7 +105570,7 @@ var init_owed_protection_warnings = __esm({
     };
     owedProtectionWarnings = (profileId) => {
       try {
-        const parsed = JSON.parse(runtimeHostStorage()?.getItem(storageKey(profileId)) ?? "[]");
+        const parsed = JSON.parse(owedStorage()?.getItem(storageKey(profileId)) ?? "[]");
         return Array.isArray(parsed) ? parsed.filter(isWarning) : [];
       } catch {
         return [];
@@ -105168,7 +105578,7 @@ var init_owed_protection_warnings = __esm({
     };
     store = (profileId, warnings) => {
       try {
-        const storage3 = runtimeHostStorage();
+        const storage3 = owedStorage();
         if (warnings.length > 0) storage3?.setItem(storageKey(profileId), JSON.stringify(warnings));
         else storage3?.removeItem(storageKey(profileId));
       } catch {
@@ -105711,7 +106121,7 @@ var init_protective_leg_evidence = __esm({
 });
 
 // lib/runtime/protective-entry-cover.ts
-var protectiveLegCoverSize, boundOffThePage, liveStopCoverOnPage, protectiveEntryCoverLegs, protectiveEntryCover, protectiveEntryLegSize;
+var attachmentMemberNeverLanded, ownLegCanStillExist, liveProtectiveOrderShape, protectiveStableShapeMatches, observedProtectiveGroupingMatches, protectiveLiveShapeMatches, pageOrderById, protectiveLegCoverSize, resolveOwnStops, protectiveEntryLegSize;
 var init_protective_entry_cover = __esm({
   "lib/runtime/protective-entry-cover.ts"() {
     "use strict";
@@ -105719,39 +106129,115 @@ var init_protective_entry_cover = __esm({
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
-    protectiveLegCoverSize = (leg, restingSize = leg.size) => leg.replacement != null && leg.replacement.size < restingSize ? leg.replacement.size : restingSize;
-    boundOffThePage = (orderId, liveOrderIds) => typeof orderId === "number" && !liveOrderIds.has(String(orderId));
-    liveStopCoverOnPage = (input) => {
-      const closeSides = input.positionSize > 0 ? ["a", "sell"] : ["b", "buy"];
-      const liveOrderIds = new Set(input.orders.map((order) => String(order.oid)));
-      const leaving = new Set(input.groups.filter((group) => group.cleanupRequired === true || group.legs.some((leg) => boundOffThePage(leg.orderId, liveOrderIds))).flatMap((group) => group.legs));
-      const legs = input.groups.flatMap((group) => group.legs);
-      return input.orders.filter((order) => !input.excludedOrderIds.has(String(order.oid)) && String(order.coin).trim().toUpperCase() === input.symbol.trim().toUpperCase() && order.reduce_only && order.is_trigger && order.trigger_kind === "sl" && closeSides.includes(String(order.side).trim().toLowerCase())).reduce((total, order) => {
-        const size = Number(order.sz);
-        const leg = legs.find((candidate) => candidate.orderId === order.oid);
-        if (!(size > 0) || leg != null && leaving.has(leg)) return total;
-        return total + (leg == null ? size : protectiveLegCoverSize(leg, size));
-      }, 0);
+    attachmentMemberNeverLanded = (group, leg) => group.attachmentJournal?.members.some((member) => member.clientOrderId === leg.orderId && member.neverLandedAtMs != null) === true;
+    ownLegCanStillExist = (group, leg) => leg.replaceJournal?.unknownOidObservedAtMs == null && !attachmentMemberNeverLanded(group, leg);
+    liveProtectiveOrderShape = (order) => ({
+      coin: order.coin,
+      side: order.side,
+      size: order.sz,
+      reduceOnly: order.reduce_only,
+      isTrigger: order.is_trigger,
+      triggerKind: order.trigger_kind,
+      triggerPrice: order.trigger_px,
+      isPositionTpsl: order.is_position_tpsl
+    });
+    protectiveStableShapeMatches = (input) => {
+      const { shape, symbol: symbol2, isLong, leg } = input;
+      const expectedSide = isLong ? ["a", "sell"] : ["b", "buy"];
+      const observedSize = Number(shape.size);
+      return String(shape.coin ?? "").trim().toUpperCase() === symbol2.trim().toUpperCase() && expectedSide.includes(String(shape.side ?? "").trim().toLowerCase()) && Number.isFinite(observedSize) && observedSize === leg.size && shape.reduceOnly === true && shape.triggerKind === leg.kind;
+    };
+    observedProtectiveGroupingMatches = (observed, storedPositionTpsl) => observed === false || observed === true && storedPositionTpsl === true;
+    protectiveLiveShapeMatches = (input) => {
+      const { shape, symbol: symbol2, isLong, leg } = input;
+      return protectiveStableShapeMatches({ shape, symbol: symbol2, isLong, leg }) && shape.isTrigger === true && Number.isFinite(Number(shape.triggerPrice)) && Number(shape.triggerPrice) === leg.triggerPrice && (input.requirePositionTpsl === false || observedProtectiveGroupingMatches(shape.isPositionTpsl, leg.positionTpsl));
     };
-    protectiveEntryCoverLegs = (groups2, entryIsLong, neverLanded) => groups2.filter((group) => group.isLong === entryIsLong).flatMap((group) => group.legs.map((leg) => ({
-      isLong: group.isLong,
-      kind: leg.kind,
-      size: protectiveLegCoverSize(leg),
-      orderId: typeof leg.orderId === "number" ? leg.orderId : null,
-      canStillExist: !neverLanded(group, leg),
-      beingCancelled: group.cleanupRequired === true,
-      group: group.entryOrderId
-    })));
-    protectiveEntryCover = (input) => {
-      const cover = { sl: 0, tp: 0 };
-      const groupsOffThePage = new Set(input.storedLegs.filter((leg) => leg.group != null && boundOffThePage(leg.orderId, input.liveOrderIds)).map((leg) => leg.group));
-      for (const leg of input.storedLegs) {
-        if (leg.isLong !== input.entryIsLong || leg.beingCancelled === true) continue;
-        if (leg.group != null && groupsOffThePage.has(leg.group)) continue;
-        const rests = leg.orderId == null ? leg.canStillExist : input.liveOrderIds.has(String(leg.orderId));
-        if (rests) cover[leg.kind] += leg.size;
-      }
-      return cover;
+    pageOrderById = (orders, orderId) => orderId == null ? null : orders.find((order) => String(order.oid) === String(orderId)) ?? null;
+    protectiveLegCoverSize = (leg, restingSize = leg.size) => leg.replacement != null && leg.replacement.size < restingSize ? leg.replacement.size : restingSize;
+    resolveOwnStops = (input) => {
+      const { symbol: symbol2, orders } = input;
+      const entries = input.groups.flatMap((group) => group.legs.map((leg) => ({ group, leg })));
+      const knownId = ({ leg }) => input.lookedUp?.get(String(leg.orderId)) ?? (typeof leg.orderId === "number" ? leg.orderId : null);
+      const pendingIds = new Set(entries.flatMap(({ leg }) => leg.replacement?.clientOrderId ? [leg.replacement.clientOrderId] : []));
+      const unbound = (entry) => knownId(entry) == null && !pendingIds.has(String(entry.leg.orderId)) && (input.canStillExist ?? ownLegCanStillExist)(entry.group, entry.leg);
+      const claims = /* @__PURE__ */ new Map();
+      const claimed = /* @__PURE__ */ new Set();
+      const claim = (entry, order) => {
+        if (order == null || claimed.has(order) || claims.has(entry)) return;
+        claims.set(entry, order);
+        claimed.add(order);
+      };
+      const byShape = (entry, leg) => orders.find((order) => !claimed.has(order) && protectiveLiveShapeMatches({
+        shape: liveProtectiveOrderShape(order),
+        symbol: symbol2,
+        isLong: entry.group.isLong,
+        leg
+      }));
+      for (const entry of entries) claim(entry, pageOrderById(orders, knownId(entry)));
+      const named = new Set(claimed);
+      const leaving = new Set(input.groups.filter((group) => group.cleanupRequired === true || entries.some((entry) => entry.group === group && knownId(entry) != null && !claims.has(entry))));
+      const waiting = entries.filter(unbound);
+      const unread = (entry) => input.unresolved?.has(String(entry.leg.orderId)) === true;
+      const staying = waiting.filter((entry) => !leaving.has(entry.group));
+      for (const entry of [...waiting.filter((entry2) => leaving.has(entry2.group)), ...staying.filter(unread), ...staying.filter((entry2) => !unread(entry2))]) {
+        claim(entry, byShape(entry, entry.leg));
+      }
+      const byKey = /* @__PURE__ */ new Map();
+      for (const entry of entries) {
+        byKey.set(String(entry.leg.orderId), entry);
+        if (knownId(entry) != null) byKey.set(String(knownId(entry)), entry);
+      }
+      const entryOf = (leg) => byKey.get(String(leg.orderId));
+      const coverOf = (entry) => {
+        const order = entry == null || leaving.has(entry.group) ? void 0 : claims.get(entry);
+        const size = Number(order?.sz);
+        return entry != null && size > 0 ? protectiveLegCoverSize(entry.leg, Math.min(entry.leg.size, size)) : 0;
+      };
+      const inFlightOf = (entry) => entry == null || leaving.has(entry.group) || claims.has(entry) || !unbound(entry) ? 0 : protectiveLegCoverSize(entry.leg);
+      return {
+        /** The leg is on its way out: it covers nothing and takes no share. */
+        leaving: (leg) => {
+          const entry = entryOf(leg);
+          return entry != null && leaving.has(entry.group);
+        },
+        /** What the leg's order on the page covers (nothing on its way out or off the page). */
+        cover: (leg) => coverOf(entryOf(leg)),
+        /** What a leg whose order is on no page may still cover: its size while it is in flight. */
+        inFlight: (leg) => inFlightOf(entryOf(leg)),
+        /** Whether an order of exactly the leg's shape that no stored leg names rests on the page. */
+        restsUnnamed: (group, leg) => orders.some((order) => !named.has(order) && protectiveLiveShapeMatches({
+          shape: liveProtectiveOrderShape(order),
+          symbol: symbol2,
+          isLong: group.isLong,
+          leg
+        })),
+        /** What the legs of one direction cover, by kind (a new entry's attach). */
+        directionCover: (isLong) => {
+          const cover = { sl: 0, tp: 0 };
+          for (const entry of entries) {
+            if (entry.group.isLong === isLong) cover[entry.leg.kind] += coverOf(entry) + inFlightOf(entry);
+          }
+          return cover;
+        },
+        /**
+         * For a lost stop: the stop losses on the page closing the position, other
+         * than the orders a status proved ended (`lost`) and those this pass placed
+         * (`placed`, counted where they were placed), an order no leg names whole;
+         * and, unseen, what the legs this pass could not read may still cover.
+         */
+        lostStopCover: (positionSize, excluded) => {
+          const isLong = positionSize > 0;
+          const owners = new Map([...claims].map(([entry, order]) => [order, entry]));
+          const placed = (entry) => excluded.placed.has(String(entry.leg.orderId)) || excluded.placed.has(String(knownId(entry)));
+          const onPage = orders.filter((order) => !excluded.lost.has(String(order.oid)) && !excluded.placed.has(String(order.oid)) && String(order.coin).trim().toUpperCase() === symbol2.trim().toUpperCase() && order.reduce_only && order.is_trigger && order.trigger_kind === "sl" && (isLong ? ["a", "sell"] : ["b", "buy"]).includes(String(order.side).trim().toLowerCase())).reduce((total, order) => {
+            const owner2 = owners.get(order);
+            const size = Number(order.sz);
+            return total + (owner2 != null ? placed(owner2) ? 0 : coverOf(owner2) : size > 0 ? size : 0);
+          }, 0);
+          const unseen = entries.filter((entry) => entry.leg.kind === "sl" && entry.group.isLong === isLong && !placed(entry) && input.unresolved?.has(String(entry.leg.orderId)) === true).reduce((total, entry) => total + inFlightOf(entry), 0);
+          return { onPage, unseen };
+        }
+      };
     };
     protectiveEntryLegSize = (input) => Math.min(input.filledSize, Math.max(0, input.liveExposure - input.cover));
   }
@@ -107844,7 +108330,7 @@ var init_native_protection_device = __esm({
 });
 
 // lib/runtime/runtime-execution.ts
-var clientProtectiveMutationAuthority, executionReadPriority, serverEntryLeverageAlreadyHeld, fetchClientRuntimeOpenOrders, createRuntimeId, _extractFilledSize, firstMemberAcknowledgement, _extractOrderId, _toExecutionMetadata, _extractClientMutationId, _stableMutationIdentity, trailingStopMemory, protectiveGroupMemory, protectiveGroupReadFailures, windowHandoffCleanupAttempts, clientRuntimeProtectionStorage, resolveClientRuntimeProtectionStorage, setClientRuntimeProtectionStorage, trailingStopStorageKey, readTrackedTrailingStops, writeTrackedTrailingStops, rememberTrailingStop, protectiveGroupStorageKey, LOST_LEG_EVIDENCE_MAX_AGE_MS, EPISODE_END_FILL_LOOKBACK_MS, withClientProtectivePlanSetLock, readClientProtectiveGroups, writeClientProtectiveGroups, hasClientProtectiveGroupReadFailure, readFreshClientProtectiveGroups, stableProtectionSnapshot, exactClientProtectiveGroupSnapshot, exactClientProtectiveGroupSetSnapshot, storableClientProtectiveGroup, replaceExactClientProtectiveGroup, replaceExactClientProtectiveGroupSet, isClientRuntimeLeaseOwnershipError, hasClientRuntimeProtectionState, clearClientRuntimeVetoedProtectiveIntent, rethrowWindowHandoffAfterProtectiveReplacementVeto, canPersistClientProtectiveGroups, removeTrackedTrailingStop, replaceTrackedTrailingStop, replacementJournalEntryOrderId, buildProtectiveReplacementJournalGroup, isProtectiveReplacementJournalGroup, reserveProtectiveLegReplacement, ensureProtectiveReplacementJournalCompanion, buildVetoedProtectiveReplacementCleanup, assertExactProtectiveReplacementDispatchAuthority, transitionProtectiveReplacementAcknowledgement, transitionTerminalProtectiveReplacement, pendingProtectiveReplacementReport, isConfiguredProtectionRequested, protectiveAction, isExactClientPositionTpslPair, deviceOwnsClientProtectiveLegKind, isAdoptionNarrowedPositionTpslLeg, hasAmbiguousClientPositionTpslAuthority, protectiveStableShapeMatches, observedProtectiveGroupingMatches, protectiveLiveShapeMatches, protectiveTerminalShapeMatches, cancelClientProtectiveLeg, buildPendingProtectivePlan, persistPendingClientProtectiveGroup, attachmentMemberNeverLanded, storedClientProtectiveCover, attachClientProtectivePlan, resolveJournaledAttachmentContinuity, protectiveMemberRested, ledgerOrderIdsByClientOrderId, journaledAttachmentNeverLanded, recoverJournaledClientProtectiveAttachments, readClientOrderMutation, readPendingEntryMutation, clientOrderNeverLandsAfterMs, requireClientRuntimeConfigSeconds, replacePendingEntryRecovery, recoverPendingClientProtectiveGroups, recoverPendingProtectiveReplacements, liveProtectiveOrderShape, observedStandaloneProtectiveGroup, migrateTrackedTrailingStopsToStandalone, nativeSettingsOf, nativePassEnded, nativeProtectionIo, nativeStorageReport, readNativeRecord, reconcileNativeProtectionForDecision, reconcileClientProtectiveGroups, cancelAllClientProtectiveGroups, modifyClientTrailingLeg, trailingRatchetIo, isDefinitiveEntryRejection, resolveExchangeSizeDecimals, roundAssetSize, resolvePositionSize, readServerOrderMarkPrice, serverOrderMetadataRetry, resolveCurrentPositionSize, buildPositionSnapshot, signedRemainingExposureAfterConfirmedReduction, runtimeProtectionAuthority, runtimeProtectionListings, runtimeProtectionListing, resolveServerNativeEntry, SERVER_NATIVE_LEGACY_REFUSAL, isServerNativeLegacyRefusal, serverUserCancelLookup, serverModeProtectionOwner, runtimeProtectionOwners, resolveRuntimeProtectionOwner, drainServerProtectionForRuntime, drainServerProtectionIfOwned, verifyNoLiveClientProtectiveTriggers, clientExecutionMutations, CLIENT_EXECUTION_QUEUE_TIMEOUT_MESSAGE, withClientExecutionMutation, withClientProtectivePlanSetMutation, allocateServerExecutionCapacity, withClientProtectiveAdoptionMutation, executeClientRuntimeDecisionLocked, unsentDecisionOrderReport, SERVER_AUDIT_RECORDED_ELSEWHERE, serverExecutionAuditOutcome, decisionLegOf, withExecutionAuditId, executeClientRuntimeDecision, waitForFlipCloseFreshness, nextClientTrailingStopDueAtMs, ratchetClientTrailingStopsBetweenCycles, listPendingClientProtectiveSymbols, listStoredClientProtectiveSymbols, hasUnresolvedClientProtectiveIdentity, resolveClientProtectiveIdentitiesForAdoption, exportClientProtectiveGroupsForAdoption, adoptionGroupKey, applyClientProtectiveAdoptionOutcomes, hasStoredClientProtectiveGroupsForWallet, hasPendingClientProtectiveGroups, recoverManualClientProtectiveGroups, listStoredClientProtectionSymbols, clientRuntimeDecisionSizesOrders, COMMITTED_EXECUTION_REPORTS, COMMITTED_DECISION_ORDER, getCommittedExecutionReports, getCommittedDecisionOrder, withCommittedExecutionReports, executeClientRuntimeDecisionUnlocked;
+var clientProtectiveMutationAuthority, executionReadPriority, serverEntryLeverageAlreadyHeld, fetchClientRuntimeOpenOrders, createRuntimeId, _extractFilledSize, firstMemberAcknowledgement, _extractOrderId, _toExecutionMetadata, _extractClientMutationId, _stableMutationIdentity, trailingStopMemory, protectiveGroupMemory, protectiveGroupReadFailures, windowHandoffCleanupAttempts, clientRuntimeProtectionStorage, resolveClientRuntimeProtectionStorage, setClientRuntimeProtectionStorage, trailingStopStorageKey, readTrackedTrailingStops, writeTrackedTrailingStops, rememberTrailingStop, protectiveGroupStorageKey, LOST_LEG_EVIDENCE_MAX_AGE_MS, EPISODE_END_FILL_LOOKBACK_MS, withClientProtectivePlanSetLock, readClientProtectiveGroups, writeClientProtectiveGroups, hasClientProtectiveGroupReadFailure, readFreshClientProtectiveGroups, stableProtectionSnapshot, exactClientProtectiveGroupSnapshot, exactClientProtectiveGroupSetSnapshot, storableClientProtectiveGroup, replaceExactClientProtectiveGroup, replaceExactClientProtectiveGroupSet, isClientRuntimeLeaseOwnershipError, hasClientRuntimeProtectionState, clearClientRuntimeVetoedProtectiveIntent, rethrowWindowHandoffAfterProtectiveReplacementVeto, canPersistClientProtectiveGroups, removeTrackedTrailingStop, replaceTrackedTrailingStop, replacementJournalEntryOrderId, buildProtectiveReplacementJournalGroup, isProtectiveReplacementJournalGroup, reserveProtectiveLegReplacement, ensureProtectiveReplacementJournalCompanion, buildVetoedProtectiveReplacementCleanup, assertExactProtectiveReplacementDispatchAuthority, transitionProtectiveReplacementAcknowledgement, transitionTerminalProtectiveReplacement, pendingProtectiveReplacementReport, isConfiguredProtectionRequested, protectiveAction, isExactClientPositionTpslPair, deviceOwnsClientProtectiveLegKind, isAdoptionNarrowedPositionTpslLeg, hasAmbiguousClientPositionTpslAuthority, protectiveTerminalShapeMatches, cancelClientProtectiveLeg, buildPendingProtectivePlan, persistPendingClientProtectiveGroup, storedClientProtectiveCover, attachClientProtectivePlan, resolveJournaledAttachmentContinuity, protectiveMemberRested, ledgerOrderIdsByClientOrderId, journaledAttachmentNeverLanded, recoverJournaledClientProtectiveAttachments, readClientOrderMutation, readPendingEntryMutation, clientOrderNeverLandsAfterMs, requireClientRuntimeConfigSeconds, replacePendingEntryRecovery, recoverPendingClientProtectiveGroups, recoverPendingProtectiveReplacements, observedStandaloneProtectiveGroup, migrateTrackedTrailingStopsToStandalone, nativeSettingsOf, nativePassEnded, nativeProtectionIo, nativeStorageReport, readNativeRecord, reconcileNativeProtectionForDecision, reconcileClientProtectiveGroups, cancelAllClientProtectiveGroups, modifyClientTrailingLeg, trailingRatchetIo, isDefinitiveEntryRejection, resolveExchangeSizeDecimals, roundAssetSize, resolvePositionSize, readServerOrderMarkPrice, serverOrderMetadataRetry, resolveCurrentPositionSize, buildPositionSnapshot, signedRemainingExposureAfterConfirmedReduction, runtimeProtectionAuthority, runtimeProtectionListings, runtimeProtectionListing, resolveServerNativeEntry, SERVER_NATIVE_LEGACY_REFUSAL, isServerNativeLegacyRefusal, serverUserCancelLookup, serverModeProtectionOwner, runtimeProtectionOwners, resolveRuntimeProtectionOwner, drainServerProtectionForRuntime, drainServerProtectionIfOwned, verifyNoLiveClientProtectiveTriggers, clientExecutionMutations, CLIENT_EXECUTION_QUEUE_TIMEOUT_MESSAGE, withClientExecutionMutation, withClientProtectivePlanSetMutation, allocateServerExecutionCapacity, withClientProtectiveAdoptionMutation, executeClientRuntimeDecisionLocked, unsentDecisionOrderReport, SERVER_AUDIT_RECORDED_ELSEWHERE, serverExecutionAuditOutcome, decisionLegOf, withExecutionAuditId, executeClientRuntimeDecision, waitForFlipCloseFreshness, nextClientTrailingStopDueAtMs, ratchetClientTrailingStopsBetweenCycles, listPendingClientProtectiveSymbols, listStoredClientProtectiveSymbols, hasUnresolvedClientProtectiveIdentity, resolveClientProtectiveIdentitiesForAdoption, exportClientProtectiveGroupsForAdoption, adoptionGroupKey, applyClientProtectiveAdoptionOutcomes, hasStoredClientProtectiveGroupsForWallet, hasPendingClientProtectiveGroups, recoverManualClientProtectiveGroups, listStoredClientProtectionSymbols, clientRuntimeDecisionSizesOrders, COMMITTED_EXECUTION_REPORTS, COMMITTED_DECISION_ORDER, getCommittedExecutionReports, getCommittedDecisionOrder, withCommittedExecutionReports, executeClientRuntimeDecisionUnlocked;
 var init_runtime_execution = __esm({
   "lib/runtime/runtime-execution.ts"() {
     "use strict";
@@ -108906,22 +109392,6 @@ var init_runtime_execution = __esm({
     deviceOwnsClientProtectiveLegKind = (group, kind) => group.deviceOwnedLegKinds == null || group.deviceOwnedLegKinds.includes(kind);
     isAdoptionNarrowedPositionTpslLeg = (group) => group.deviceOwnedLegKinds?.length === 1 && group.legs.length === 1 && group.legs[0].positionTpsl === true && group.legs[0].kind === group.deviceOwnedLegKinds[0];
     hasAmbiguousClientPositionTpslAuthority = (group) => group.legs.some((leg) => leg.positionTpsl === true) && !isExactClientPositionTpslPair(group.legs) && !isAdoptionNarrowedPositionTpslLeg(group);
-    protectiveStableShapeMatches = (input) => {
-      const { shape, symbol: symbol2, isLong, leg } = input;
-      const expectedSide = isLong ? ["a", "sell"] : ["b", "buy"];
-      const observedSize = Number(shape.size);
-      return String(shape.coin ?? "").trim().toUpperCase() === symbol2.trim().toUpperCase() && expectedSide.includes(String(shape.side ?? "").trim().toLowerCase()) && Number.isFinite(observedSize) && observedSize === leg.size && shape.reduceOnly === true && shape.triggerKind === leg.kind;
-    };
-    observedProtectiveGroupingMatches = (observed, storedPositionTpsl) => observed === false || observed === true && storedPositionTpsl === true;
-    protectiveLiveShapeMatches = (input) => {
-      const { shape, symbol: symbol2, isLong, leg } = input;
-      return protectiveStableShapeMatches({
-        shape,
-        symbol: symbol2,
-        isLong,
-        leg
-      }) && shape.isTrigger === true && Number.isFinite(Number(shape.triggerPrice)) && Number(shape.triggerPrice) === leg.triggerPrice && (input.requirePositionTpsl === false || observedProtectiveGroupingMatches(shape.isPositionTpsl, leg.positionTpsl));
-    };
     protectiveTerminalShapeMatches = (input) => input.evidence.responseValid === true && input.evidence.orderMatches === true && input.evidence.terminal === true && protectiveStableShapeMatches({
       shape: input.evidence,
       symbol: input.symbol,
@@ -108973,7 +109443,7 @@ var init_runtime_execution = __esm({
           }
         }
         const liveOrders = await fetchClientRuntimeOpenOrders(request, "trading_reduce");
-        const liveOrder = liveOrders.find((order) => String(order.oid) === String(leg.orderId));
+        const liveOrder = pageOrderById(liveOrders, leg.orderId);
         if (!liveOrder) {
           const evidence = await fetchBrowserOrderStatusEvidence({
             publicRequestPriority: "trading_reduce",
@@ -109117,25 +109587,17 @@ var init_runtime_execution = __esm({
       );
       return { group, cleanup, persistedGroupSet: persistenceFailed ? null : nextGroups };
     };
-    attachmentMemberNeverLanded = (group, leg) => group.attachmentJournal?.members.some((member) => member.clientOrderId === leg.orderId && member.neverLandedAtMs != null) === true;
     storedClientProtectiveCover = async (request, entryIsLong, groups2) => {
-      const storedLegs = protectiveEntryCoverLegs(
-        groups2,
-        entryIsLong,
-        (group, leg) => attachmentMemberNeverLanded(group, leg)
-      );
-      const liveOrderIds = /* @__PURE__ */ new Set();
-      if (storedLegs.some((leg) => !leg.beingCancelled)) {
-        const symbol2 = request.executionContext.symbol.trim().toUpperCase();
-        const orders = await fetchClientRuntimeOpenOrders(request, "trading_reduce");
-        if (!Array.isArray(orders)) {
-          throw new Error("Malformed live protective-order snapshot.");
-        }
-        for (const order of orders) {
-          if (String(order.coin).trim().toUpperCase() === symbol2) liveOrderIds.add(String(order.oid));
-        }
+      const candidates = groups2.filter((group) => group.isLong === entryIsLong);
+      const orders = candidates.some((group) => group.cleanupRequired !== true && group.legs.length > 0) ? await fetchClientRuntimeOpenOrders(request, "trading_reduce") : [];
+      if (!Array.isArray(orders)) {
+        throw new Error("Malformed live protective-order snapshot.");
       }
-      return protectiveEntryCover({ entryIsLong, storedLegs, liveOrderIds });
+      return resolveOwnStops({
+        symbol: request.executionContext.symbol,
+        groups: candidates,
+        orders
+      }).directionCover(entryIsLong);
     };
     attachClientProtectivePlan = async (request, group, fill) => {
       const reports = [];
@@ -109979,7 +110441,7 @@ var init_runtime_execution = __esm({
           }
         })));
       }
-      const boundOrderIds = new Set(readClientProtectiveGroups(profileId, symbol2).flatMap((stored) => stored.legs.flatMap((leg) => typeof leg.orderId === "number" ? [String(leg.orderId)] : [])));
+      const ownStops = resolveOwnStops({ symbol: symbol2, groups: readClientProtectiveGroups(profileId, symbol2), orders: liveOrders });
       for (const journaledGroup of journaledGroups) {
         let group = journaledGroup;
         const plan = group.pendingEntry;
@@ -109994,7 +110456,7 @@ var init_runtime_execution = __esm({
             inspected.push({ leg: provisionalLeg, state: "terminal", rested: false, neverLanded: true });
             continue;
           }
-          let openOrder = liveOrders.find((order) => String(order.oid) === String(provisionalLeg.orderId)) ?? null;
+          let openOrder = pageOrderById(liveOrders, provisionalLeg.orderId);
           let canonicalLeg = provisionalLeg;
           if (openOrder == null) {
             try {
@@ -110024,12 +110486,7 @@ var init_runtime_execution = __esm({
                     throw new Error("Journaled protective order identity is unresolved.");
                   }
                 } else {
-                  const mayRestUnseen = liveOrders.some((order) => !boundOrderIds.has(String(order.oid)) && protectiveLiveShapeMatches({
-                    shape: liveProtectiveOrderShape(order),
-                    symbol: symbol2,
-                    isLong: group.isLong,
-                    leg: provisionalLeg
-                  }));
+                  const mayRestUnseen = ownStops.restsUnnamed(group, provisionalLeg);
                   if (ledgerVerdict.proven && !mayRestUnseen) {
                     newlyNeverLanded.add(provisionalLeg.orderId);
                     inspected.push({ leg: provisionalLeg, state: "terminal", rested: false, neverLanded: true });
@@ -110042,7 +110499,7 @@ var init_runtime_execution = __esm({
                 throw new Error("Journaled protective order identity is unresolved.");
               }
               canonicalLeg = { ...provisionalLeg, orderId: resolvedOrderId };
-              openOrder = liveOrders.find((order) => String(order.oid) === String(resolvedOrderId)) ?? null;
+              openOrder = pageOrderById(liveOrders, resolvedOrderId);
               if (classifyHyperliquidOrderStatus(evidence.orderStatus) === "open" && openOrder != null) {
               } else {
                 const terminalMatches = protectiveTerminalShapeMatches({
@@ -110974,7 +111431,7 @@ var init_runtime_execution = __esm({
             let shapeMatches = exactShapeMatches && classifyHyperliquidOrderStatus(evidence.orderStatus) === "open";
             if (!shapeMatches && evidence.reasonCode === "unknown_oid") {
               const liveOrders = await fetchClientRuntimeOpenOrders(request);
-              const originalOrder = liveOrders.find((order) => order.oid === replacement.previousOrderId);
+              const originalOrder = pageOrderById(liveOrders, replacement.previousOrderId);
               const originalLiveShape = originalOrder == null ? null : {
                 coin: originalOrder.coin,
                 side: originalOrder.side,
@@ -111297,23 +111754,13 @@ var init_runtime_execution = __esm({
       }
       return reports;
     };
-    liveProtectiveOrderShape = (order) => ({
-      coin: order.coin,
-      side: order.side,
-      size: order.sz,
-      reduceOnly: order.reduce_only,
-      isTrigger: order.is_trigger,
-      triggerKind: order.trigger_kind,
-      triggerPrice: order.trigger_px,
-      isPositionTpsl: order.is_position_tpsl
-    });
     observedStandaloneProtectiveGroup = (group, liveOrders, symbol2) => {
       if (!group.legs.some((leg) => leg.positionTpsl === true) || group.legs.some((leg) => leg.replacement != null)) {
         return null;
       }
       let standaloneObserved = false;
       for (const leg of group.legs) {
-        const liveOrder = liveOrders.find((order) => order.oid === leg.orderId);
+        const liveOrder = pageOrderById(liveOrders, leg.orderId);
         if (liveOrder == null) continue;
         if (liveOrder.is_position_tpsl !== false) return null;
         if (protectiveLiveShapeMatches({
@@ -111704,6 +112151,7 @@ var init_runtime_execution = __esm({
         return { leg, notLanded: true, reports: [] };
       };
       const inspectedGroups = [];
+      const lookedUp = /* @__PURE__ */ new Map();
       const legsLiveSinceMs = protectiveReadStampMs();
       for (const observedGroup of groups2) {
         let group = observedGroup;
@@ -111735,7 +112183,7 @@ var init_runtime_execution = __esm({
         let ambiguousPositionTpslAuthority = hasAmbiguousClientPositionTpslAuthority(group);
         if (ambiguousPositionTpslAuthority) {
           const singleLeg = group.legs.length === 1 ? group.legs[0] : null;
-          const liveOrder = singleLeg == null ? null : liveOrders.find((order) => order.oid === singleLeg.orderId) ?? null;
+          const liveOrder = singleLeg == null ? null : pageOrderById(liveOrders, singleLeg.orderId);
           const liveShape = liveOrder == null ? null : {
             coin: liveOrder.coin,
             side: liveOrder.side,
@@ -111796,7 +112244,7 @@ var init_runtime_execution = __esm({
             });
             continue;
           }
-          const openOrder = liveOrders.find((order) => order.oid === leg.orderId) ?? null;
+          const openOrder = pageOrderById(liveOrders, leg.orderId);
           if (openOrder != null) {
             legs.push({ leg, openOrder, state: "open" });
             continue;
@@ -111827,8 +112275,11 @@ var init_runtime_execution = __esm({
               leg
             });
             const resolvedNumericOrderId = Number(evidence.orderId);
+            if (evidence.responseValid && evidence.orderMatches && Number.isSafeInteger(resolvedNumericOrderId) && resolvedNumericOrderId > 0) {
+              lookedUp.set(String(leg.orderId), resolvedNumericOrderId);
+            }
             const inspectedLeg = evidence.responseValid && evidence.orderMatches && classifyHyperliquidOrderStatus(evidence.orderStatus) === "open" && Number.isSafeInteger(resolvedNumericOrderId) && resolvedNumericOrderId > 0 ? { ...leg, orderId: resolvedNumericOrderId } : leg;
-            const resolvedOpenOrder = inspectedLeg.orderId !== leg.orderId ? liveOrders.find((order) => order.oid === inspectedLeg.orderId) ?? null : null;
+            const resolvedOpenOrder = inspectedLeg.orderId !== leg.orderId ? pageOrderById(liveOrders, inspectedLeg.orderId) : null;
             legs.push({
               leg: inspectedLeg,
               openOrder: resolvedOpenOrder,
@@ -111899,10 +112350,9 @@ var init_runtime_execution = __esm({
       };
       const retainedGroups = expectedGroupSet.filter((group) => group.pendingEntry != null || isProtectiveReplacementJournalGroup(group));
       let stopSizePlacedThisPass = 0;
-      const unresolvedStopSize = inspectedGroups.flatMap((candidate) => candidate.legs).filter((entry) => entry.leg.kind === "sl" && entry.state === "unresolved" && !liveOrders.some((order) => order.oid === entry.leg.orderId)).reduce((total, entry) => total + (entry.leg.replacement != null ? 0 : entry.leg.size), 0);
-      const lostOrderIds = new Set(
-        inspectedGroups.flatMap((candidate) => candidate.legs).filter((entry) => entry.state === "terminal").map((entry) => String(entry.leg.orderId))
-      );
+      const placedThisPass = /* @__PURE__ */ new Set();
+      const unresolvedLegIds = new Set(inspectedGroups.flatMap((candidate) => candidate.legs).filter((entry) => entry.state === "unresolved").map((entry) => String(entry.leg.orderId)));
+      const lostOrderIds = new Set(inspectedGroups.flatMap((candidate) => candidate.legs).filter((entry) => entry.state === "terminal").flatMap(({ leg }) => [String(leg.orderId), String(lookedUp.get(String(leg.orderId)) ?? leg.orderId)]));
       const lostStatuses = () => inspectedGroups.flatMap((candidate) => candidate.legs).filter((entry) => entry.state === "terminal").map((entry) => ({ state: "terminal", receivedMs: entry.statusReceivedMs ?? null }));
       const readQualifies = (sentMs) => lostLegMarketEvidence({
         statuses: lostStatuses(),
@@ -112023,15 +112473,17 @@ var init_runtime_execution = __esm({
             cancelledByUser,
             terminalOrderStatus: terminalStatus?.orderStatus ?? null
           });
+          const stops = replaceReachable ? resolveOwnStops({
+            symbol: symbol2,
+            groups: expectedGroupSet,
+            orders: (await readLostLegOrders()).freshOrders,
+            lookedUp,
+            unresolved: unresolvedLegIds
+          }).lostStopCover(position.positionSize, { lost: lostOrderIds, placed: placedThisPass }) : null;
           evidence = {
             positionSize: position.positionSize,
-            liveStopSize: replaceReachable ? liveStopCoverOnPage({
-              orders: (await readLostLegOrders()).freshOrders,
-              symbol: symbol2,
-              positionSize: position.positionSize,
-              excludedOrderIds: lostOrderIds,
-              groups: expectedGroupSet
-            }) : 0,
+            liveStopSize: stops?.onPage ?? 0,
+            unseenStopSize: stops?.unseen ?? 0,
             markPrice: replaceReachable ? position.markPrice : null
           };
         } catch (error48) {
@@ -112056,7 +112508,7 @@ var init_runtime_execution = __esm({
           positionSize: evidence.positionSize,
           legSize: leg.size,
           otherLiveStopSize: evidence.liveStopSize,
-          inFlightStopSize: unresolvedStopSize + stopSizePlacedThisPass,
+          inFlightStopSize: evidence.unseenStopSize + stopSizePlacedThisPass,
           sizeDecimals: request.executionContext.sizeDecimals,
           triggerPrice: leg.triggerPrice,
           alreadyReplaced: leg.replacedOrderId != null,
@@ -112165,6 +112617,7 @@ var init_runtime_execution = __esm({
           };
         }
         stopSizePlacedThisPass += decision.size;
+        placedThisPass.add(clientOrderId);
         let dispatchMayHaveStarted = false;
         let response;
         try {
@@ -112196,6 +112649,7 @@ var init_runtime_execution = __esm({
           if (error48 instanceof HyperliquidExchangeRejectionError) {
             const rejectionProjection = projectExecutionErrorContract({ error: error48, symbol: symbol2 });
             stopSizePlacedThisPass -= decision.size;
+            placedThisPass.delete(clientOrderId);
             const rejectedGroup = {
               ...provisionalGroup,
               legs: provisionalGroup.legs.filter((candidate) => candidate.orderId !== clientOrderId)
@@ -112223,6 +112677,7 @@ var init_runtime_execution = __esm({
           }
           if (!dispatchMayHaveStarted) {
             stopSizePlacedThisPass -= decision.size;
+            placedThisPass.delete(clientOrderId);
             const restored = transitionExactGroup(provisionalGroup, group);
             if (restored && isClientRuntimeWindowHandoffBeforePlanDispatch(error48)) {
               throw error48;
@@ -112278,6 +112733,7 @@ var init_runtime_execution = __esm({
             }]
           };
         }
+        placedThisPass.add(String(placedOrderId));
         const { replaceJournal: _landedJournal, ...landedLeg } = provisionalLeg;
         const placedLeg = { ...landedLeg, orderId: placedOrderId };
         const placedGroup = {
@@ -112325,6 +112781,13 @@ var init_runtime_execution = __esm({
           execution_metadata: { reason_code: "protective_lifecycle_persistence_failed" }
         });
       };
+      const ownStops = resolveOwnStops({
+        symbol: symbol2,
+        groups: expectedGroupSet,
+        orders: liveOrders,
+        lookedUp,
+        unresolved: unresolvedLegIds
+      });
       groupLoop: for (let groupIndex = 0; groupIndex < inspectedGroups.length; groupIndex += 1) {
         const inspected = inspectedGroups[groupIndex];
         let durableGroup = inspected.group;
@@ -112402,10 +112865,7 @@ var init_runtime_execution = __esm({
             continue;
           }
           if (state2 !== "open" || openOrder == null) {
-            remainingByKind[leg.kind] = Math.max(
-              0,
-              remainingByKind[leg.kind] - protectiveLegCoverSize(leg)
-            );
+            remainingByKind[leg.kind] = Math.max(0, remainingByKind[leg.kind] - ownStops.cover(leg) - ownStops.inFlight(leg));
             retainedLegs.push(leg);
             continue;
           }
@@ -112419,7 +112879,7 @@ var init_runtime_execution = __esm({
             const reservedUntrustedExposure = Number.isFinite(liveOrderSize) && liveOrderSize > 0 ? Math.max(leg.size, liveOrderSize) : leg.size;
             remainingByKind[leg.kind] = Math.max(
               0,
-              remainingByKind[leg.kind] - reservedUntrustedExposure
+              remainingByKind[leg.kind] - (ownStops.leaving(leg) ? 0 : reservedUntrustedExposure)
             );
             retainedLegs.push(leg);
             reports.push({
@@ -112433,14 +112893,15 @@ var init_runtime_execution = __esm({
             });
             continue;
           }
+          if (ownStops.leaving(leg)) {
+            retainedLegs.push(leg);
+            continue;
+          }
           const allowedSize = roundAssetSize(
             Math.min(liveOrderSize, remainingByKind[leg.kind]),
             request.executionContext.sizeDecimals
           );
-          remainingByKind[leg.kind] = Math.max(
-            0,
-            remainingByKind[leg.kind] - Math.min(allowedSize, protectiveLegCoverSize(leg, liveOrderSize))
-          );
+          remainingByKind[leg.kind] = Math.max(0, remainingByKind[leg.kind] - Math.min(allowedSize, ownStops.cover(leg)));
           if (allowedSize <= 0) {
             const split3 = splitOversizedProtectiveLeg(expectedGroupSet, durableGroup, leg, exactClientProtectiveGroupSnapshot);
             if (!replaceExactClientProtectiveGroupSet(profileId, symbol2, expectedGroupSet, split3.groups)) {
@@ -112953,7 +113414,10 @@ var init_runtime_execution = __esm({
           "trading_reduce"
         )).size),
         openOrders: async () => observed.orders ?? await fetchClientRuntimeOpenOrders(request, "trading_reduce"),
-        rests: (leg, isLong, orders) => Array.isArray(orders) && orders.some((order) => order.oid === leg.orderId && protectiveLiveShapeMatches({ shape: liveProtectiveOrderShape(order), symbol: symbol2, isLong, leg })),
+        rests: (leg, isLong, orders) => {
+          const order = Array.isArray(orders) ? pageOrderById(orders, leg.orderId) : null;
+          return order != null && protectiveLiveShapeMatches({ shape: liveProtectiveOrderShape(order), symbol: symbol2, isLong, leg });
+        },
         markPrice: () => readTrailingMarkPrice({ config: request.config ?? null, signal: request.signal }, symbol2),
         sizeDecimals: async () => Number.isInteger(request.executionContext.sizeDecimals) ? request.executionContext.sizeDecimals : resolveExchangeSizeDecimals(symbol2, request.config ?? void 0, "trading_reduce", profileId),
         modify: (leg, change) => modifyClientTrailingLeg(request, leg, change),
@@ -113267,8 +113731,8 @@ var init_runtime_execution = __esm({
       const previous = clientExecutionMutations.get(key) ?? Promise.resolve();
       let abandoned = false;
       let startTurn;
-      const turn = new Promise((resolve16) => {
-        startTurn = resolve16;
+      const turn = new Promise((resolve17) => {
+        startTurn = resolve17;
       });
       const pending3 = previous.catch(() => void 0).then(async () => {
         if (abandoned) return void 0;
@@ -113282,7 +113746,7 @@ var init_runtime_execution = __esm({
       clientExecutionMutations.set(key, pending3);
       const waitMs = runtime_policy_generated_default2.trading.engine.client_runtime.execution_mutation_queue.wait_seconds * MS_PER_SECOND;
       try {
-        await new Promise((resolve16, reject) => {
+        await new Promise((resolve17, reject) => {
           const signal = request.signal;
           const finish = () => {
             clearTimeout(timer);
@@ -113304,7 +113768,7 @@ var init_runtime_execution = __esm({
           signal?.addEventListener("abort", onAbort, { once: true });
           void turn.then(() => {
             finish();
-            resolve16();
+            resolve17();
           });
         });
         return await pending3;
@@ -116427,7 +116891,7 @@ var init_browser_observability = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_runtime_policy_generated2();
-    CLIENT_SOURCE_VERSION = typeof process !== "undefined" && true && "8bf68d84db2d5f7bef90caab1c5161a2ef91085f".trim() && "8bf68d84db2d5f7bef90caab1c5161a2ef91085f".trim() !== "unstamped" ? "8bf68d84db2d5f7bef90caab1c5161a2ef91085f".trim() : null;
+    CLIENT_SOURCE_VERSION = typeof process !== "undefined" && true && "1fbd5d0b063d9c340fde67bbac63073001dc6b56".trim() && "1fbd5d0b063d9c340fde67bbac63073001dc6b56".trim() !== "unstamped" ? "1fbd5d0b063d9c340fde67bbac63073001dc6b56".trim() : null;
     listenersInstalled = false;
     state = {
       loadedAtMs: Date.now(),
@@ -117700,21 +118164,21 @@ var require_react_development = __commonJS({
         );
         actScopeDepth = prevActScopeDepth;
       }
-      function recursivelyFlushAsyncActWork(returnValue, resolve16, reject) {
+      function recursivelyFlushAsyncActWork(returnValue, resolve17, reject) {
         var queue = ReactSharedInternals.actQueue;
         if (null !== queue)
           if (0 !== queue.length)
             try {
               flushActQueue(queue);
               enqueueTask(function() {
-                return recursivelyFlushAsyncActWork(returnValue, resolve16, reject);
+                return recursivelyFlushAsyncActWork(returnValue, resolve17, reject);
               });
               return;
             } catch (error48) {
               ReactSharedInternals.thrownErrors.push(error48);
             }
           else ReactSharedInternals.actQueue = null;
-        0 < ReactSharedInternals.thrownErrors.length ? (queue = aggregateErrors(ReactSharedInternals.thrownErrors), ReactSharedInternals.thrownErrors.length = 0, reject(queue)) : resolve16(returnValue);
+        0 < ReactSharedInternals.thrownErrors.length ? (queue = aggregateErrors(ReactSharedInternals.thrownErrors), ReactSharedInternals.thrownErrors.length = 0, reject(queue)) : resolve17(returnValue);
       }
       function flushActQueue(queue) {
         if (!isFlushing) {
@@ -117901,7 +118365,7 @@ var require_react_development = __commonJS({
             ));
           });
           return {
-            then: function(resolve16, reject) {
+            then: function(resolve17, reject) {
               didAwaitActCall = true;
               thenable.then(
                 function(returnValue) {
@@ -117911,7 +118375,7 @@ var require_react_development = __commonJS({
                       flushActQueue(queue), enqueueTask(function() {
                         return recursivelyFlushAsyncActWork(
                           returnValue,
-                          resolve16,
+                          resolve17,
                           reject
                         );
                       });
@@ -117925,7 +118389,7 @@ var require_react_development = __commonJS({
                       ReactSharedInternals.thrownErrors.length = 0;
                       reject(_thrownError);
                     }
-                  } else resolve16(returnValue);
+                  } else resolve17(returnValue);
                 },
                 function(error48) {
                   popActScope(prevActQueue, prevActScopeDepth);
@@ -117947,15 +118411,15 @@ var require_react_development = __commonJS({
         if (0 < ReactSharedInternals.thrownErrors.length)
           throw callback = aggregateErrors(ReactSharedInternals.thrownErrors), ReactSharedInternals.thrownErrors.length = 0, callback;
         return {
-          then: function(resolve16, reject) {
+          then: function(resolve17, reject) {
             didAwaitActCall = true;
             0 === prevActScopeDepth ? (ReactSharedInternals.actQueue = queue, enqueueTask(function() {
               return recursivelyFlushAsyncActWork(
                 returnValue$jscomp$0,
-                resolve16,
+                resolve17,
                 reject
               );
-            })) : resolve16(returnValue$jscomp$0);
+            })) : resolve17(returnValue$jscomp$0);
           }
         };
       };
@@ -119509,7 +119973,7 @@ var init_client_trade_readback = __esm({
         close_fill_sync_retry_step_milliseconds: retryStepMs
       } = runtime_policy_generated_default2.trading.engine.client_runtime;
       for (let attempt2 = 0; attempt2 < maxAttempts; attempt2 += 1) {
-        if (attempt2 > 0) await new Promise((resolve16) => setTimeout(resolve16, attempt2 * retryStepMs));
+        if (attempt2 > 0) await new Promise((resolve17) => setTimeout(resolve17, attempt2 * retryStepMs));
         try {
           const { rawFills } = await fetchBrowserUserFills({
             config: target.config,
@@ -120854,14 +121318,14 @@ var init_client_panel_reads = __esm({
       const retryAfter = Number(error48.retryAfterMs);
       return Number.isFinite(retryAfter) && retryAfter > 0 ? retryAfter : runtime_policy_generated_default2.exchange.hyperliquid.public_recovery.queue_poll_ms;
     };
-    waitForCapacity = (ms, signal) => new Promise((resolve16, reject) => {
+    waitForCapacity = (ms, signal) => new Promise((resolve17, reject) => {
       if (signal?.aborted) {
         reject(signal.reason);
         return;
       }
       const done = () => {
         signal?.removeEventListener("abort", aborted2);
-        resolve16();
+        resolve17();
       };
       const timer = setTimeout(done, Math.max(1, ms));
       const aborted2 = () => {
@@ -122453,9 +122917,9 @@ var init_market_regime = __esm({
       return token;
     };
     resolvePromptTimeframes = (activeTimeframes, fallbackTimeframes) => {
-      const resolve16 = (values) => values.filter((value) => typeof value === "string").map(canonicalTimeframe).filter(Boolean);
-      const resolved = resolve16(activeTimeframes);
-      return [...new Set(resolved.length > 0 ? resolved : resolve16(fallbackTimeframes))];
+      const resolve17 = (values) => values.filter((value) => typeof value === "string").map(canonicalTimeframe).filter(Boolean);
+      const resolved = resolve17(activeTimeframes);
+      return [...new Set(resolved.length > 0 ? resolved : resolve17(fallbackTimeframes))];
     };
     scopeSymbolLines = (message, symbol2) => message.trim().split(LINE_BREAK).map((line) => line.trim()).filter((line) => line && !line.startsWith("---")).map((line) => {
       if (line.startsWith("- [")) return line.replace("- [", `- [${symbol2} `);
@@ -123365,7 +123829,7 @@ var init_google_egress = __esm({
 // lib/runtime/native-provider-budget.ts
 function awaitProviderOperation(operation, signal) {
   if (!signal) return operation;
-  return new Promise((resolve16, reject) => {
+  return new Promise((resolve17, reject) => {
     const aborted2 = () => {
       signal.removeEventListener("abort", aborted2);
       reject(signal.reason ?? new DOMException("Cancelled", "AbortError"));
@@ -123373,7 +123837,7 @@ function awaitProviderOperation(operation, signal) {
     operation.then((value) => {
       signal.removeEventListener("abort", aborted2);
       if (signal.aborted) aborted2();
-      else resolve16(value);
+      else resolve17(value);
     }, (error48) => {
       signal.removeEventListener("abort", aborted2);
       reject(signal.aborted ? signal.reason ?? error48 : error48);
@@ -123385,8 +123849,8 @@ function awaitProviderOperation(operation, signal) {
 async function waitForProviderRetry(delayMs, signal) {
   let timer;
   try {
-    await awaitProviderOperation(new Promise((resolve16) => {
-      timer = setTimeout(resolve16, delayMs);
+    await awaitProviderOperation(new Promise((resolve17) => {
+      timer = setTimeout(resolve17, delayMs);
     }), signal);
   } finally {
     if (timer !== void 0) clearTimeout(timer);
@@ -123416,6 +123880,122 @@ var init_native_provider_budget = __esm({
   }
 });
 
+// lib/runtime/provider-reply.ts
+var PROVIDER_LIMIT_HEADERS_HEADER, providerResponseSignals, replyBodies, rememberProviderReplyBody, readProviderPayload, rawProviderTextForDebug, extractProviderErrorDetail, extractProviderErrorWords, providerReplyHeaders, providerReplyDiagnostics;
+var init_provider_reply = __esm({
+  "lib/runtime/provider-reply.ts"() {
+    "use strict";
+    init_define_VTX_CLAUDE_CODE_POLICY();
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_native_provider_budget();
+    init_provider_credit();
+    init_runtime_redaction();
+    init_provider_observability();
+    init_constants();
+    PROVIDER_LIMIT_HEADERS_HEADER = "X-VTX-Provider-Limit-Headers";
+    providerResponseSignals = /* @__PURE__ */ new WeakMap();
+    replyBodies = /* @__PURE__ */ new WeakMap();
+    rememberProviderReplyBody = (response, body) => {
+      replyBodies.set(response, body);
+    };
+    readProviderPayload = async (response) => {
+      if (typeof response?.text === "function") {
+        const raw = await awaitProviderOperation(response.text(), providerResponseSignals.get(response));
+        if (typeof raw === "string" && raw) replyBodies.set(response, raw);
+        const normalizedRaw = typeof raw === "string" ? raw.trim() : "";
+        if (!normalizedRaw) {
+          return { payload: {}, rawText: "" };
+        }
+        try {
+          return {
+            payload: JSON.parse(normalizedRaw),
+            rawText: normalizedRaw
+          };
+        } catch {
+          return {
+            payload: {},
+            rawText: normalizedRaw
+          };
+        }
+      }
+      const payload = await awaitProviderOperation(response.json(), providerResponseSignals.get(response));
+      return {
+        payload,
+        rawText: ""
+      };
+    };
+    rawProviderTextForDebug = (payload, rawText) => {
+      if (!rawText) {
+        return null;
+      }
+      if (!payload || typeof payload === "object" && !Array.isArray(payload) && Object.keys(payload).length === 0) {
+        return rawText;
+      }
+      return null;
+    };
+    extractProviderErrorDetail = (payload, rawText) => {
+      const words7 = extractProviderErrorWords(payload, rawText);
+      const outOfCreditCode = providerOutOfCreditErrorCode(payload);
+      return outOfCreditCode && !words7.toLowerCase().includes(outOfCreditCode.toLowerCase()) ? `${words7}${words7 ? " " : ""}[${outOfCreditCode}]` : words7;
+    };
+    extractProviderErrorWords = (payload, rawText) => {
+      const errorNode = payload?.error;
+      if (typeof errorNode === "string" && errorNode.trim()) {
+        return errorNode.trim();
+      }
+      if (typeof errorNode?.message === "string" && errorNode.message.trim()) {
+        return errorNode.message.trim();
+      }
+      if (typeof errorNode?.detail === "string" && errorNode.detail.trim()) {
+        return errorNode.detail.trim();
+      }
+      if (typeof payload?.detail === "string" && payload.detail.trim()) {
+        return payload.detail.trim();
+      }
+      if (typeof payload?.message === "string" && payload.message.trim()) {
+        return payload.message.trim();
+      }
+      if (rawText) {
+        return sanitizeRuntimeDiagnosticValue(rawText).replace(/\s+/g, " ").slice(0, PROVIDER_ERROR_RAW_TEXT_MAX_CHARS);
+      }
+      return "";
+    };
+    providerReplyHeaders = (response) => {
+      const headers = {};
+      const read = response?.headers;
+      if (!read || typeof read.forEach !== "function") return headers;
+      try {
+        const relayed = JSON.parse(read.get(PROVIDER_LIMIT_HEADERS_HEADER) || "{}");
+        if (relayed && typeof relayed === "object" && !Array.isArray(relayed)) {
+          for (const [name, value] of Object.entries(relayed)) {
+            if (typeof value === "string" && isProviderReplyHeaderName(name)) headers[name.toLowerCase()] = value;
+          }
+        }
+      } catch {
+      }
+      read.forEach((value, name) => {
+        if (isProviderReplyHeaderName(name)) headers[name.toLowerCase()] = value;
+      });
+      return headers;
+    };
+    providerReplyDiagnostics = (response, body) => {
+      if (!response) return {};
+      const text2 = typeof body === "string" && body ? body : replyBodies.get(response);
+      const headers = providerReplyHeaders(response);
+      if (!text2 && !Object.keys(headers).length) return {};
+      return {
+        provider_reply: {
+          ...typeof response.status === "number" ? { status: response.status } : {},
+          ...text2 ? { body: text2 } : {},
+          ...Object.keys(headers).length ? { headers } : {}
+        }
+      };
+    };
+  }
+});
+
 // lib/screener-resource-scheduler.ts
 var STORAGE_KEY, CHANNEL_NAME, LOCK_TTL_MS, nowMs, stableHash, storage2, readStore, writeStore, prune2, buildLlmResourceKey, registerTraderProviderCallStarted, registerTraderProviderCallFinished;
 var init_screener_resource_scheduler = __esm({
@@ -123682,7 +124262,7 @@ var init_native_request_parameters = __esm({
 });
 
 // lib/runtime/provider-client.ts
-var mapOpenAiCompatibleNativeRequestPath, isRetryableProviderFailureForFallback, extractRuntimeProviderFailureStatusCode, isModelSpecificProviderFailure, emptyProviderContentError, isEmptyProviderContentFailure, emptyReplyForInternalAttempt, isEmptyProviderMessageFailure, isRetryableProviderAttemptFailure, providerRejectedRequestError, OPTIONAL_CONTRACT_PARAMETER_TOKENS, OPTIONAL_CONTRACT_REJECTION_TOKENS, OPTIONAL_CONTRACT_GRAMMAR_TOKENS, isOptionalContractParameterRejection, isTemperatureRefusal, PROVIDER_ROUTE_REFUSAL_PHRASE, isProviderRouteRefusal, OPTIONAL_CONTRACT_REQUEST_KEYS, OPTIONAL_CONTRACT_EXTRA_BODY_KEYS, resolveEmptyContentRetryPolicy, resolveStreamRetryPolicy, isKeySpecificOrTransientProviderFailure, providerDispatchClockMs, beginProviderDispatch, providerDispatchLatencyMs, attachProviderDispatchFailure, attachProviderFailureTrace, toRuntimeExecutionMode, buildNoneReasoningPayload, normalizeLevelValue, buildRuntimeReasoningPayload, resolveProviderReasoningParameters, requestedReasoningParameters, usesReasoningCompletionTokens, shouldRequestReasoningTrace, runtimeProviderForByokProvider, findByokProviderForRuntime, findModelOption, findNativeRequestParametersForModel, modelHasNativeRequestApiSurface, asRequestRecord, setDottedRequestValue, normalizeProviderMaxTokens, applyRuntimeRequestContract, normalizeProvider2, requireProviderEndpoint, SSE_DATA_FIELD_PREFIX2, estimateTokenCount, normalizeUsageCount, buildOpenAiUsagePayload, buildAnthropicUsagePayload, buildGoogleUsagePayload, normalizeProviderUsageMetrics, providerResponseSignals, fetchProvider, readProviderPayload, emitRuntimeDelta, readProviderTextStream, readProviderJsonEventStream, providerStreamError, extractOpenAiCompatibleDeltaText, readOpenAiCompatibleTextStream, rawProviderTextForDebug, extractProviderErrorDetail, extractProviderErrorWords, buildProviderFailureDiagnostic, buildCanonicalProviderFailureMessage, providerRefusal, toProviderNetworkDebugError, REASONING_ONLY_CONTENT_TYPES, extractOpenAiContentPartText, extractOpenAiReasoningPartText, extractOpenAiMessageContent, extractOpenAiMessageReasoningContent, extractOpenAiCompatibleText, normalizeRuntimeChatHistory, calculateProviderCost, resolveVeniceRequestContract, callOpenAiCompatible, extractOpenAiResponsesText, extractOpenAiResponsesReasoning, readOpenAiResponsesStream, internalDispatchAttempt, callOpenAiResponses, extractAnthropicMessageText, extractAnthropicReasoningContent, readAnthropicMessageStream, callAnthropic, isAqGoogleKey, googleKeySurfaceRef, resolveGoogleKeySurface, googlePublicModelIdRegexes, shouldUseGooglePublicEndpointForModel, normalizeGoogleModelId, shouldRetryGoogleVertexRequestPublicly, GOOGLE_VERTEX_PUBLIC_RETRY_NOTE, buildGoogleRequest, GOOGLE_JSON_MODE_REFUSAL_PHRASES, googleTradeResponseMimeType, providerRequestFailure, isGoogleJsonModeRefusal, isGoogleReasoningPart, extractGoogleMessageText, extractGoogleReasoningContent, extractGoogleSafetyMetadata, GOOGLE_BLOCKED_FINISH_REASONS, googleProviderBlockReason, readGoogleGenerateStream, callGoogle, resolveRuntimeProvider, defaultInvocationContext, defaultProviderTransport, invocationFailureCode, buildBrowserInvocation, resolveProviderSecretKey, resolveNativeProviderCredentialSlots, resolveProviderSecretKeySlots, requireOpenAiCompatibleRuntimeBaseUrl, runtimeSubscriptionPlan, runtimeKeySlotSupportsModel, invokeRuntimeProviderAttempt, invokeRuntimeProvider;
+var mapOpenAiCompatibleNativeRequestPath, isRetryableProviderFailureForFallback, extractRuntimeProviderFailureStatusCode, isModelSpecificProviderFailure, emptyProviderContentError, isEmptyProviderContentFailure, emptyReplyForInternalAttempt, isEmptyProviderMessageFailure, isRetryableProviderAttemptFailure, providerRejectedRequestError, OPTIONAL_CONTRACT_PARAMETER_TOKENS, OPTIONAL_CONTRACT_REJECTION_TOKENS, OPTIONAL_CONTRACT_GRAMMAR_TOKENS, isOptionalContractParameterRejection, isTemperatureRefusal, PROVIDER_ROUTE_REFUSAL_PHRASE, isProviderRouteRefusal, OPTIONAL_CONTRACT_REQUEST_KEYS, OPTIONAL_CONTRACT_EXTRA_BODY_KEYS, resolveEmptyContentRetryPolicy, resolveStreamRetryPolicy, isKeySpecificOrTransientProviderFailure, providerDispatchClockMs, beginProviderDispatch, providerDispatchLatencyMs, attachProviderDispatchFailure, attachProviderFailureTrace, toRuntimeExecutionMode, buildNoneReasoningPayload, normalizeLevelValue, buildRuntimeReasoningPayload, resolveProviderReasoningParameters, requestedReasoningParameters, usesReasoningCompletionTokens, shouldRequestReasoningTrace, runtimeProviderForByokProvider, findByokProviderForRuntime, findModelOption, findNativeRequestParametersForModel, modelHasNativeRequestApiSurface, asRequestRecord, setDottedRequestValue, normalizeProviderMaxTokens, applyRuntimeRequestContract, normalizeProvider2, requireProviderEndpoint, SSE_DATA_FIELD_PREFIX2, estimateTokenCount, normalizeUsageCount, buildOpenAiUsagePayload, buildAnthropicUsagePayload, buildGoogleUsagePayload, normalizeProviderUsageMetrics, fetchProvider, emitRuntimeDelta, readProviderTextStream, readProviderJsonEventStream, providerStreamError, extractOpenAiCompatibleDeltaText, readOpenAiCompatibleTextStream, buildProviderFailureDiagnostic, buildCanonicalProviderFailureMessage, providerRefusal, toProviderNetworkDebugError, REASONING_ONLY_CONTENT_TYPES, extractOpenAiContentPartText, extractOpenAiReasoningPartText, extractOpenAiMessageContent, extractOpenAiMessageReasoningContent, extractOpenAiCompatibleText, normalizeRuntimeChatHistory, calculateProviderCost, resolveVeniceRequestContract, callOpenAiCompatible, extractOpenAiResponsesText, extractOpenAiResponsesReasoning, readOpenAiResponsesStream, internalDispatchAttempt, callOpenAiResponses, extractAnthropicMessageText, extractAnthropicReasoningContent, readAnthropicMessageStream, callAnthropic, isAqGoogleKey, googleKeySurfaceRef, resolveGoogleKeySurface, googlePublicModelIdRegexes, shouldUseGooglePublicEndpointForModel, normalizeGoogleModelId, shouldRetryGoogleVertexRequestPublicly, GOOGLE_VERTEX_PUBLIC_RETRY_NOTE, buildGoogleRequest, GOOGLE_JSON_MODE_REFUSAL_PHRASES, googleTradeResponseMimeType, providerRequestFailure, isGoogleJsonModeRefusal, isGoogleReasoningPart, extractGoogleMessageText, extractGoogleReasoningContent, extractGoogleSafetyMetadata, GOOGLE_BLOCKED_FINISH_REASONS, googleProviderBlockReason, readGoogleGenerateStream, callGoogle, resolveRuntimeProvider, defaultInvocationContext, defaultProviderTransport, invocationFailureCode, buildBrowserInvocation, resolveProviderSecretKey, resolveNativeProviderCredentialSlots, resolveProviderSecretKeySlots, requireOpenAiCompatibleRuntimeBaseUrl, runtimeSubscriptionPlan, runtimeKeySlotSupportsModel, invokeRuntimeProviderAttempt, invokeRuntimeProvider;
 var init_provider_client = __esm({
   "lib/runtime/provider-client.ts"() {
     "use strict";
@@ -123693,6 +124273,7 @@ var init_provider_client = __esm({
     init_google_egress();
     init_native_provider_budget();
     init_retired_model_source();
+    init_provider_reply();
     init_provider_observability();
     init_api2();
     init_network_debug();
@@ -123840,7 +124421,8 @@ var init_provider_client = __esm({
       sanitizedError.runtimeProviderRequestId = providerRequestId(response);
       sanitizedError.runtimeProviderDiagnostics = {
         ...marker2?.providerDiagnostics ?? {},
-        ...error48 instanceof NativeModelTimeoutError && error48.attemptCapExpired ? { timeout_bound: "attempt_cap" } : {}
+        ...error48 instanceof NativeModelTimeoutError && error48.attemptCapExpired ? { timeout_bound: "attempt_cap" } : {},
+        ...providerReplyDiagnostics(response, error48?.runtimeProviderReplyBody)
       };
       sanitizedError.runtimeRetryAfterSeconds = retryAfterDiagnostics(response).retry_after_seconds ?? null;
       if (marker2?.googleQuotaFailure) sanitizedError.runtimeGoogleQuotaFailure = true;
@@ -124325,38 +124907,12 @@ var init_provider_client = __esm({
       completionTokens: usage.completionTokens,
       totalTokens: usage.totalTokens
     });
-    providerResponseSignals = /* @__PURE__ */ new WeakMap();
     fetchProvider = async (url2, init2) => {
       if (init2.signal?.aborted) throw init2.signal.reason ?? new DOMException("Cancelled", "AbortError");
       const response = await awaitProviderOperation(startLongRequest(() => fetch(url2, init2)), init2.signal);
       if (init2.signal) providerResponseSignals.set(response, init2.signal);
       return response;
     };
-    readProviderPayload = async (response) => {
-      if (typeof response?.text === "function") {
-        const raw = await awaitProviderOperation(response.text(), providerResponseSignals.get(response));
-        const normalizedRaw = typeof raw === "string" ? raw.trim() : "";
-        if (!normalizedRaw) {
-          return { payload: {}, rawText: "" };
-        }
-        try {
-          return {
-            payload: JSON.parse(normalizedRaw),
-            rawText: normalizedRaw
-          };
-        } catch {
-          return {
-            payload: {},
-            rawText: normalizedRaw
-          };
-        }
-      }
-      const payload = await awaitProviderOperation(response.json(), providerResponseSignals.get(response));
-      return {
-        payload,
-        rawText: ""
-      };
-    };
     emitRuntimeDelta = (onDelta, value) => {
       if (typeof onDelta !== "function" || typeof value !== "string" || !value) {
         return;
@@ -124410,10 +124966,10 @@ var init_provider_client = __esm({
       }
       onData(payload);
     });
-    providerStreamError = (payload, fallback) => {
+    providerStreamError = (payload, fallback, event = payload) => {
       const detail = extractProviderErrorDetail(payload, "") || fallback;
       const diagnostic = sanitizeRuntimeDiagnosticValue(`Provider request failed: ${detail}`);
-      return providerRejectedRequestError(diagnostic, detail, diagnostic);
+      return Object.assign(providerRejectedRequestError(diagnostic, detail, diagnostic), { runtimeProviderReplyBody: JSON.stringify(event) });
     };
     extractOpenAiCompatibleDeltaText = (payload) => {
       const choice = Array.isArray(payload?.choices) ? payload.choices[0] : null;
@@ -124462,6 +125018,7 @@ var init_provider_client = __esm({
         } catch {
           return;
         }
+        if (payload?.error) rememberProviderReplyBody(response, dataText);
         onPayload?.(payload);
         lastPayload = payload;
         if (typeof payload?.model === "string") {
@@ -124515,42 +125072,6 @@ var init_provider_client = __esm({
         }
       };
     };
-    rawProviderTextForDebug = (payload, rawText) => {
-      if (!rawText) {
-        return null;
-      }
-      if (!payload || typeof payload === "object" && !Array.isArray(payload) && Object.keys(payload).length === 0) {
-        return rawText;
-      }
-      return null;
-    };
-    extractProviderErrorDetail = (payload, rawText) => {
-      const words7 = extractProviderErrorWords(payload, rawText);
-      const outOfCreditCode = providerOutOfCreditErrorCode(payload);
-      return outOfCreditCode && !words7.toLowerCase().includes(outOfCreditCode.toLowerCase()) ? `${words7}${words7 ? " " : ""}[${outOfCreditCode}]` : words7;
-    };
-    extractProviderErrorWords = (payload, rawText) => {
-      const errorNode = payload?.error;
-      if (typeof errorNode === "string" && errorNode.trim()) {
-        return errorNode.trim();
-      }
-      if (typeof errorNode?.message === "string" && errorNode.message.trim()) {
-        return errorNode.message.trim();
-      }
-      if (typeof errorNode?.detail === "string" && errorNode.detail.trim()) {
-        return errorNode.detail.trim();
-      }
-      if (typeof payload?.detail === "string" && payload.detail.trim()) {
-        return payload.detail.trim();
-      }
-      if (typeof payload?.message === "string" && payload.message.trim()) {
-        return payload.message.trim();
-      }
-      if (rawText) {
-        return sanitizeRuntimeDiagnosticValue(rawText).replace(/\s+/g, " ").slice(0, PROVIDER_ERROR_RAW_TEXT_MAX_CHARS);
-      }
-      return "";
-    };
     buildProviderFailureDiagnostic = ({ response, detail }) => {
       const statusLabel = response.status ? ` (HTTP ${response.status}${response.statusText ? ` ${response.statusText}` : ""})` : "";
       return sanitizeRuntimeDiagnosticValue(
@@ -125137,9 +125658,9 @@ var init_provider_client = __esm({
         } else if (type === "response.completed" || type === "response.incomplete") {
           completed = event.response ?? null;
         } else if (type === "response.failed") {
-          failure2 ??= providerStreamError(event.response, "OpenAI Responses stream failed");
+          failure2 ??= providerStreamError(event.response, "OpenAI Responses stream failed", event);
         } else if (type === "error") {
-          failure2 ??= providerStreamError({ error: event }, "OpenAI Responses stream failed");
+          failure2 ??= providerStreamError({ error: event }, "OpenAI Responses stream failed", event);
         }
       });
       if (failure2) throw failure2;
@@ -125152,7 +125673,7 @@ var init_provider_client = __esm({
       latencyMs: providerDispatchLatencyMs(marker2),
       transport,
       requestInputTokens: marker2.requestInputTokens,
-      providerDiagnostics: marker2.providerDiagnostics,
+      providerDiagnostics: { ...marker2.providerDiagnostics, ...providerReplyDiagnostics(response) },
       providerRequestId: providerRequestId(response),
       errorDetail: getSanitizedRuntimeErrorMessage(error48) || "Provider compatibility dispatch failed.",
       // An empty reply is an unknown outcome with no status.
@@ -125787,7 +126308,7 @@ var init_provider_client = __esm({
             latencyMs: providerDispatchLatencyMs(marker2),
             transport: "google_generate_content_rest",
             requestInputTokens: marker2.requestInputTokens,
-            providerDiagnostics: { ...credentialDiagnostics, ...await extractProviderDiagnostics(payloadJson, answered) },
+            providerDiagnostics: { ...credentialDiagnostics, ...await extractProviderDiagnostics(payloadJson, answered), ...providerReplyDiagnostics(answered) },
             providerRequestId: providerRequestId(answered),
             errorDetail,
             statusCode: answered.status,
@@ -129232,9 +129753,9 @@ var init_local_analysis = __esm({
     RUNTIME_SOURCE_DEFINITION_VERSION = "runtime-source-v1";
     DECISION_INPUT_DEFINITION_VERSION = "decision-input-v1";
     CONTEXT_ENVELOPE_DEFINITION_VERSION = "context-envelope-v2.1";
-    CLIENT_RUNTIME_SOURCE_VERSION = typeof process !== "undefined" && true && "8bf68d84db2d5f7bef90caab1c5161a2ef91085f".trim() && !["unknown", "unstamped", "development"].includes(
-      "8bf68d84db2d5f7bef90caab1c5161a2ef91085f".trim().toLowerCase()
-    ) ? "8bf68d84db2d5f7bef90caab1c5161a2ef91085f".trim() : null;
+    CLIENT_RUNTIME_SOURCE_VERSION = typeof process !== "undefined" && true && "1fbd5d0b063d9c340fde67bbac63073001dc6b56".trim() && !["unknown", "unstamped", "development"].includes(
+      "1fbd5d0b063d9c340fde67bbac63073001dc6b56".trim().toLowerCase()
+    ) ? "1fbd5d0b063d9c340fde67bbac63073001dc6b56".trim() : null;
     CLIENT_MAIN_PROMPT_RENDERER = "client_runtime.buildLocalRuntimePromptArtifacts:v1";
     CLIENT_REVIEW_PROMPT_RENDERER = "client_runtime.review_prompt_assembly:v1";
     resolveEffectivePromptRuntimeProvenance = (input) => ({
@@ -131582,10 +132103,10 @@ ${stringifyPromptJson(parts.candlesPayload)}
       if (!Number.isFinite(ms) || ms <= 0) {
         return;
       }
-      await new Promise((resolve16, reject) => {
+      await new Promise((resolve17, reject) => {
         const timeout = setTimeout(() => {
           cleanup();
-          resolve16();
+          resolve17();
         }, ms);
         const cleanup = () => {
           clearTimeout(timeout);
@@ -135670,7 +136191,7 @@ var init_engine = __esm({
       }
       async _awaitStartStage(operation, controller, stage) {
         this._assertStartAttemptActive(controller, stage);
-        return new Promise((resolve16, reject) => {
+        return new Promise((resolve17, reject) => {
           const rejectCancelled = () => {
             reject(createRuntimeStartCancelledError("lifecycle_stop_requested", {
               stage
@@ -135684,7 +136205,7 @@ var init_engine = __esm({
                 rejectCancelled();
                 return;
               }
-              resolve16(value);
+              resolve17(value);
             },
             (error48) => {
               controller.signal.removeEventListener("abort", rejectCancelled);
@@ -135779,14 +136300,14 @@ var init_engine = __esm({
             note: `profile=${this._profileId || "none"} pending=${pending3.length}`,
             outcome: "error"
           });
-          await new Promise((resolve16) => {
+          await new Promise((resolve17) => {
             let settled2 = false;
             const finish = () => {
               if (settled2) return;
               settled2 = true;
               globalThis.clearTimeout(timeoutId);
               signal.removeEventListener("abort", finish);
-              resolve16();
+              resolve17();
             };
             const timeoutId = globalThis.setTimeout(finish, CLIENT_RUNTIME_POLICY.window_handoff_cleanup_retry_milliseconds);
             signal.addEventListener("abort", finish, { once: true });
@@ -136804,8 +137325,8 @@ var init_engine = __esm({
         let timer;
         const settled2 = await Promise.race([
           loop.then(() => true, () => true),
-          new Promise((resolve16) => {
-            timer = setTimeout(() => resolve16(false), timeoutMs);
+          new Promise((resolve17) => {
+            timer = setTimeout(() => resolve17(false), timeoutMs);
           })
         ]);
         clearTimeout(timer);
@@ -137932,14 +138453,14 @@ var init_engine = __esm({
         if (signal?.aborted) {
           throw signal.reason ?? createStopAbortError("trade_sync_settlement_cancelled");
         }
-        await new Promise((resolve16) => {
+        await new Promise((resolve17) => {
           let settled2 = false;
           const finish = () => {
             if (settled2) return;
             settled2 = true;
             globalThis.clearTimeout(timeoutId);
             signal?.removeEventListener("abort", finish);
-            resolve16();
+            resolve17();
           };
           const timeoutId = globalThis.setTimeout(finish, this._loopEarlyReturnRetryDelayMs);
           signal?.addEventListener("abort", finish, { once: true });
@@ -140356,8 +140877,8 @@ var init_engine = __esm({
           try {
             await Promise.race([
               activeExecutionLoop,
-              new Promise((resolve16) => {
-                executionFenceTimeoutId = setTimeout(resolve16, executionFenceTimeoutMs);
+              new Promise((resolve17) => {
+                executionFenceTimeoutId = setTimeout(resolve17, executionFenceTimeoutMs);
               })
             ]);
           } catch {
@@ -141542,8 +142063,8 @@ async function runHeadlessRuntime(options) {
   };
   const nextEvent = async () => {
     while (pending3.length === 0) {
-      await new Promise((resolve16) => {
-        wake = resolve16;
+      await new Promise((resolve17) => {
+        wake = resolve17;
       });
       wake = null;
     }
@@ -141673,9 +142194,9 @@ async function runHeadlessRuntime(options) {
     const stored = await readRuntimeState(options.statePath).catch(() => null);
     const ownDevices = new Set([identity3.deviceId, stored?.deviceId].filter(Boolean).map(String));
     let offered = false;
-    const stopped = new Promise((resolve16) => {
-      if (stopController.signal.aborted) resolve16(false);
-      else stopController.signal.addEventListener("abort", () => resolve16(false), { once: true });
+    const stopped = new Promise((resolve17) => {
+      if (stopController.signal.aborted) resolve17(false);
+      else stopController.signal.addEventListener("abort", () => resolve17(false), { once: true });
     });
     const withdraw = async () => {
       if (!offered) return;
@@ -142630,7 +143151,7 @@ The CLI updates itself at start; set VTX_CLI_AUTO_UPDATE=0 to turn that off.
       // Every BYOK provider's key field, from the one provider registry.
       ...BYOK_PROVIDERS.map((provider) => provider.apiKeyField)
     ]);
-    delay2 = (ms) => new Promise((resolve16) => setTimeout(resolve16, ms));
+    delay2 = (ms) => new Promise((resolve17) => setTimeout(resolve17, ms));
   }
 });